clarkb | corvus: k. left one other note. I think some unrelated code snuck in | 00:00 |
---|---|---|
corvus | clarkb: i think if you were in the fully-local case, you would just not get an external ip; in that case there's a fallback so it uses private automatically | 00:00 |
corvus | clarkb: yes, but it's intentional | 00:01 |
clarkb | oh I see that in the commit message now | 00:01 |
clarkb | +2 | 00:01 |
clarkb | sorry my brain is apparently not working great after a bike ride | 00:01 |
*** mhu has quit IRC | 00:09 | |
clarkb | as a heads up I think I found an ansible 2.7 to 2.8 upgrade issue in the OpenStack Helm zuul jobs. Long story short you can't use become_user on include_role tasks | 00:12 |
clarkb | figured I'd mention it here in case anyone else runs into it with their zuul upgrades | 00:13 |
corvus | clarkb: maybe related: https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/use-buildset-registry/tasks/main.yaml#L96-L103 | 00:26 |
corvus | (i don't know how long zuul-jobs has been on 2.8; it's possible i did that because of the behavior you describe) | 00:27 |
*** sgw has joined #zuul | 00:57 | |
*** rfolco has quit IRC | 01:08 | |
*** fbo has quit IRC | 01:10 | |
*** jamesmcarthur has joined #zuul | 01:18 | |
*** jamesmcarthur has quit IRC | 01:25 | |
*** Goneri has quit IRC | 02:09 | |
*** Goneri has joined #zuul | 02:17 | |
*** jamesmcarthur has joined #zuul | 02:43 | |
*** jamesmcarthur has quit IRC | 03:43 | |
*** jamesmcarthur has joined #zuul | 03:56 | |
*** zbr has quit IRC | 04:00 | |
*** zbr has joined #zuul | 04:01 | |
*** jamesmcarthur has quit IRC | 04:49 | |
*** jamesmcarthur has joined #zuul | 04:49 | |
*** jamesmcarthur has joined #zuul | 04:50 | |
*** jamesmcarthur has quit IRC | 04:56 | |
*** jamesmcarthur has joined #zuul | 05:21 | |
*** jamesmcarthur has quit IRC | 05:26 | |
*** jamesmcarthur has joined #zuul | 05:54 | |
*** jamesmcarthur has quit IRC | 05:59 | |
*** jamesmcarthur has joined #zuul | 06:55 | |
*** jamesmcarthur has quit IRC | 06:59 | |
*** jamesmcarthur has joined #zuul | 07:56 | |
*** jamesmcarthur has quit IRC | 08:01 | |
*** spsurya has joined #zuul | 08:07 | |
*** jamesmcarthur has joined #zuul | 08:57 | |
*** armstrongs has quit IRC | 08:59 | |
*** jamesmcarthur has quit IRC | 09:01 | |
*** swest has quit IRC | 09:14 | |
*** yolanda has joined #zuul | 09:14 | |
*** swest has joined #zuul | 09:29 | |
*** yolanda has quit IRC | 09:52 | |
*** jamesmcarthur has joined #zuul | 09:58 | |
*** jamesmcarthur has quit IRC | 10:02 | |
*** yolanda has joined #zuul | 10:05 | |
*** jamesmcarthur has joined #zuul | 10:54 | |
*** jamesmcarthur has quit IRC | 10:59 | |
*** jamesmcarthur has joined #zuul | 11:55 | |
*** jamesmcarthur has quit IRC | 12:00 | |
*** pcaruana has joined #zuul | 12:28 | |
*** jamesmcarthur has joined #zuul | 12:30 | |
*** AJaeger has quit IRC | 13:12 | |
*** AJaeger has joined #zuul | 13:26 | |
*** jamesmcarthur has quit IRC | 13:33 | |
*** Goneri has quit IRC | 14:44 | |
pabelanger | corvus: clarkb: with new use-internal-ip option in nodepool, what do we see the process for zuul-executor to be able to SSH into node (or setup ssh host keys)? I ask, because this is something we deal with today for some network appliances | 14:49 |
pabelanger | I assume something like regional executor? | 14:50 |
openstackgerrit | Merged zuul/nodepool master: GCE: add use-internal-ip option https://review.opendev.org/699041 | 15:04 |
*** gmann_afk is now known as gmann | 15:27 | |
corvus | pabelanger: yes, if the executor has access to that network, you can use it. note, i only implemented that for the gce driver; but we can add it to others | 15:28 |
pabelanger | ack, thanks | 15:29 |
*** jamesmcarthur has joined #zuul | 15:31 | |
clarkb | its doable in openstack via clouds.yaml config I think | 15:31 |
*** Goneri has joined #zuul | 15:32 | |
pabelanger | Yah, kinda. The gets complicated if you only have a single node in the cloud that you want to be private | 15:33 |
pabelanger | but, right now our executor is still public, so zuul-executors cannot talk to the nodepool node. We hop to it via nested ansible (2 nodes in nodeset) | 15:34 |
*** jamesmcarthur has quit IRC | 15:36 | |
*** goneri_ has joined #zuul | 15:40 | |
*** Goneri has quit IRC | 15:44 | |
mordred | tobiash: +2 with a comment on your /ready patch | 15:53 |
mordred | tobiash: feel free to hit the +A if my comment doesn't make sense | 15:53 |
*** goneri_ is now known as Goneri | 16:08 | |
*** jamesmcarthur has joined #zuul | 16:32 | |
*** jamesmcarthur has quit IRC | 16:36 | |
*** jamesmcarthur has joined #zuul | 16:58 | |
*** Goneri has quit IRC | 17:02 | |
*** jamesmcarthur has quit IRC | 17:11 | |
*** jamesmcarthur has joined #zuul | 17:12 | |
*** jamesmcarthur_ has joined #zuul | 17:21 | |
*** jamesmcarthur has quit IRC | 17:21 | |
*** jamesmcarthur_ has quit IRC | 17:31 | |
*** jamesmcarthur has joined #zuul | 19:10 | |
*** jamesmcarthur has quit IRC | 19:20 | |
*** jamesmcarthur has joined #zuul | 19:35 | |
*** jamesmcarthur has quit IRC | 19:40 | |
*** jamesmcarthur has joined #zuul | 19:55 | |
*** jamesmcarthur has joined #zuul | 19:58 | |
*** jamesmcarthur has quit IRC | 20:07 | |
*** spsurya has quit IRC | 20:08 | |
*** jamesmcarthur has joined #zuul | 20:14 | |
*** jamesmcarthur has quit IRC | 20:17 | |
*** pcaruana has quit IRC | 20:17 | |
*** jamesmcarthur has joined #zuul | 20:21 | |
*** jamesmcarthur has quit IRC | 20:34 | |
*** jamesmcarthur has joined #zuul | 20:48 | |
*** jamesmcarthur has quit IRC | 20:51 | |
*** jamesmcarthur has joined #zuul | 20:59 | |
*** jamesmcarthur has quit IRC | 21:05 | |
*** Goneri has joined #zuul | 21:33 | |
*** jamesmcarthur has joined #zuul | 21:34 | |
*** jamesmcarthur has quit IRC | 21:36 | |
*** jamesmcarthur has joined #zuul | 21:38 | |
*** jamesmcarthur has quit IRC | 21:42 | |
*** jamesmcarthur has joined #zuul | 21:44 | |
*** jamesmcarthur has quit IRC | 21:47 | |
*** hashar has joined #zuul | 22:24 | |
*** jamesmcarthur has joined #zuul | 22:43 | |
*** jamesmcarthur has quit IRC | 22:46 | |
*** hashar has quit IRC | 23:16 | |
SpamapS | I would be able to make use of priate IPs in AWS if we had an executor in each VPC. Right now we use the same method for our zuul nodes to punch through as we do for our laptops... which is great for making sure your deploys can be done manually.. but also means the zuul nodes get a key that can enable internet access from any AWS subnet.. which isn't the best thing. | 23:41 |
*** jamesmcarthur has joined #zuul | 23:47 | |
*** jamesmcarthur has quit IRC | 23:51 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!