Wednesday, 2020-03-18

openstackgerritMerged zuul/zuul master: Remove fix-tox workaround for python3.5  https://review.opendev.org/71249500:01
*** jamesmcarthur has joined #zuul00:15
*** erbarr has quit IRC00:30
*** dangtrinhnt has joined #zuul00:38
*** dangtrinhnt has quit IRC00:41
*** dangtrinhnt_ has joined #zuul00:42
*** jamesmcarthur has quit IRC00:57
*** jamesmcarthur has joined #zuul00:57
*** dangtrinhnt_ has quit IRC01:48
*** rlandy has quit IRC01:58
*** jamesmcarthur has quit IRC02:02
*** jamesmcarthur has joined #zuul02:02
*** swest has quit IRC02:05
*** bhavikdbavishi has quit IRC02:20
*** zenkuro has quit IRC02:20
*** swest has joined #zuul02:22
*** jamesmcarthur has quit IRC02:54
*** jamesmcarthur has joined #zuul02:57
*** bhavikdbavishi has joined #zuul03:04
*** jamesmcarthur has quit IRC03:16
*** bhavikdbavishi has quit IRC03:22
*** bhavikdbavishi has joined #zuul03:27
*** jamesmcarthur has joined #zuul03:31
*** saneax has joined #zuul03:43
fungigoing to send this slide deck to the cdf interoperability sig ml tomorrow in preparation for presenting it on thursday's biweekly meeting call: http://fungi.yuggoth.org/presentations/2020-cdf/04:10
fungiif anybody has last-minute suggestions, i'm happy to try to work them in04:10
*** raukadah is now known as chandankumar04:37
*** bolg_ has joined #zuul04:50
*** bolg has quit IRC04:51
*** jamesmcarthur has quit IRC05:11
*** kmalloc has joined #zuul05:33
*** evrardjp has quit IRC05:35
*** evrardjp has joined #zuul05:36
*** freefood has joined #zuul06:17
freefoodHello! :) :wave:06:17
freefoodHow long does it typically take for Zuul to trigger on new reply? I replied "recheck" on my patch 30 minutes ago but Zuul hasn't re-run the test jobs yet :(06:21
freefoodFWIW: My patch is at: https://review.opendev.org/#/c/713076/06:21
AJaegerfreefood: it depends on the number of available nodes, let me check...06:49
AJaegerfreefood: http://grafana.openstack.org/d/T6vSHcSik/zuul-status?orgId=1 shows the "node requests", so there's a backlog06:50
AJaegerfreefood: and http://zuul.opendev.org/t/openstack/status shows all changes06:50
AJaegerso, expected time to finish is 12 mins - and if you look at previous run, the longest job run for 71 minutes, so that means all is fine and jobs must have been running already when you asked06:53
*** Defolos has joined #zuul07:03
freefoodThanks AJaeger! \o/ I'm new here :)07:04
*** dpawlik has joined #zuul07:10
*** dpawlik has quit IRC07:26
AJaegerwelcome, freefood !07:38
*** kmalloc has quit IRC07:42
*** dmsimard|off7 has joined #zuul07:48
*** dmsimard|off has quit IRC07:48
*** dmsimard|off7 is now known as dmsimard|off07:48
*** saneax has quit IRC07:52
*** avass has joined #zuul07:52
*** tosky has joined #zuul07:57
*** dpawlik has joined #zuul07:58
openstackgerritDaniel Pawlik proposed zuul/zuul-jobs master: Add phoronix-test-suite job  https://review.opendev.org/67908208:05
*** yoctozepto9 has joined #zuul08:15
*** yoctozepto has quit IRC08:15
*** yoctozepto9 is now known as yoctozepto08:15
*** hashar has joined #zuul08:16
*** saneax has joined #zuul08:22
*** jcapitao has joined #zuul08:23
*** sshnaidm has quit IRC08:29
*** saneax has quit IRC08:31
*** yoctozepto has quit IRC08:49
*** jpena|off is now known as jpena08:55
*** hashar is now known as hasharSchool08:55
*** harrymichal has joined #zuul08:58
*** yoctozepto has joined #zuul08:59
*** dpawlik has quit IRC09:03
*** dpawlik has joined #zuul09:03
*** dpawlik has quit IRC09:08
*** bhavikdbavishi has quit IRC09:17
openstackgerritAlfredo Moralejo proposed zuul/zuul-jobs master: Use centos8 deps repo  for RHEL8 nodes  https://review.opendev.org/70843009:29
*** bhavikdbavishi has joined #zuul09:50
*** yoctozepto has quit IRC09:59
*** mhu has quit IRC09:59
*** corvus_ has joined #zuul10:01
*** yoctozepto has joined #zuul10:03
*** jpena has quit IRC10:04
*** corvus has quit IRC10:04
*** jpena has joined #zuul10:05
*** saneax has joined #zuul10:10
*** yoctozepto has quit IRC10:13
*** yoctozepto has joined #zuul10:14
*** sshnaidm has joined #zuul10:20
zbrthere was a feature i wanted to implement on tox, when tox_envlist is a list to run each task separated, so we get much easier to read output. anyone against?10:46
zbrso instead of running "tox -e foo,bar", it will run run each of them.10:46
zbrif one fails, we will be able read the error, without spam from the other one.10:47
*** sshnaidm has quit IRC10:54
*** sshnaidm has joined #zuul10:55
*** harrymichal has quit IRC10:57
*** okamis has joined #zuul11:19
*** harrymichal has joined #zuul11:28
*** rlandy has joined #zuul11:31
*** hasharSchool is now known as hashar11:39
*** harrymichal has quit IRC11:45
*** jcapitao is now known as jcapitao_lunch11:53
*** Goneri has joined #zuul12:16
*** hashar is now known as hasharLunch12:16
*** saneax has quit IRC12:25
*** avass has quit IRC12:32
*** jpena is now known as jpena|lunch12:39
*** harrymichal has joined #zuul12:40
*** saneax has joined #zuul12:46
*** hasharLunch is now known as hashar12:59
*** saneax has quit IRC13:07
*** jcapitao_lunch is now known as jcapitao13:08
openstackgerritMerged zuul/zuul-jobs master: Use centos8 deps repo  for RHEL8 nodes  https://review.opendev.org/70843013:16
mnaserpossible to have eyes on https://review.opendev.org/#/c/704266/ -- it'll help us so we can get cheroot tests going!13:19
mnaserand hopefully cherrypy after13:19
*** harrymichal has quit IRC13:26
*** harrymichal has joined #zuul13:26
mnasercorvus_: could we get some ML announcements when the ZK changes land?  due to the fact there is not really tagged dockerhub images, "cd" users will get that breaking change13:27
*** bhavikdbavishi has quit IRC13:37
*** TomConte has joined #zuul13:38
*** jpena|lunch is now known as jpena13:42
*** TomConte has quit IRC13:45
*** harrymichal has quit IRC13:53
tristanCmnaser: is the ZK change breaking yet?13:55
mnasertristanC: oh i dont think it is so far, but i assume there is a period of time when the zk enforced auth lands until zuul v4 (i think that was the agreed thing) is released13:57
mnaserwhich will make it borked13:58
tristanCmnaser: i think the plan is to first enable using tls, then announce that user needs to configure tls. I don't think we have change that enforce tls anytime soon14:00
mnasertristanC: ok I see, it was just something that I was thinking about.14:02
tristanCmnaser: also I'm quite worried that no zookeeper deployment system support tls... i'm not sure we can enforce tls before such things is available for users14:02
mnasertristanC: I’ve been so curious about this whole thing with how to do it on k8s with different cette14:03
mnasercerts per pod14:03
tristanCmnaser: it seems like that could be done easily using the same process that setup the myid file14:04
tristanC(e.g. copy the correct cert from a common secret based on hostname)14:04
mnasertristanC: yeah but I guess then all of the zookeeper instances have access to each other secrets and I don’t know what that means from a security pov14:05
tristanCmnaser: then using a initContainer with elevated privilege could do that cert selection copy securely14:06
tristanCmnaser: i guess you are using the zookeeper incubator chart? are you going to add tls support there?14:06
mnasertristanC: that’s true, we could do that and so in runtime zookeeper is nerve exposed to it14:06
mnasertristanC: I plan to, I think the issue is around the fact that I think the repo doesn’t accept changes anymore at this point so we might have to fork and maintain elsewhere14:07
tristanCreally? any reason why it doesn't accept changes?14:08
tristanCi've been looking at pravega/zookeeper-operator , though i couldn't get it working in dev mode yet14:10
*** yoctozepto1 has joined #zuul14:12
*** yoctozepto has quit IRC14:13
*** yoctozepto1 is now known as yoctozepto14:13
tristanCand golang seems overkill too. makes me wonder if we shouldn't maintain our own zk resources. Isn't what you are doing tobiash?14:15
*** saneax has joined #zuul14:16
tobiashtristanC: our zk is part of out zuul deployment and basically consists of a statefulset with service, nothing more nothing less14:23
tobiashand it just works without any notable maintenance effort (after tweaking to some infrastructure limitations)14:24
tristanCtobiash: that's what i think too, would you mind sharing your resources file?14:29
tobiashtristanC: of course, I just need to make them ready for sharing before and I'm deep in ops topics today, so cannot promise for today14:30
tristanCtobiash: no rush. that would be helpful to see what is really needed to run an acceptable zk service14:33
tobiashtristanC: basically it's a fork of this which puts data on tmpfs combined with backup to pvc in a sidecar and loading the backup in boot.sh: https://github.com/kubernetes-retired/contrib/tree/master/statefulsets/zookeeper14:41
tristanCarg, so you are also building your own image14:43
tobiashyes14:43
tobiashis that a blocker?14:44
tristanCwell if we could do that in opendev, then that statefulsets recipe sounds easy to use14:44
*** jamesmcarthur has joined #zuul14:44
tristanCtobiash: i don't think so, but opendev would become a distributor of zookeeper image too14:45
tobiashyes, that would be the implication, no idea if this is acceptable from opendev and license perspective14:46
*** bschanzel has joined #zuul14:49
corvus_the tmpfs/pvc backup sounds pretty specialized for tobiash's situation; is that something we think we should support for everyone?14:50
tobiashcorvus_: I'm happy to share if there is interest14:50
bschanzelHey Guys, I wanted to ask back if there are any plans on when I can get a workflow +1 on these https://review.opendev.org/#/c/711920/ https://review.opendev.org/#/c/712034/14:51
tobiashcorvus_: it's a (for us workable) tradeoff towards performance for either huge deployments or medium to large deployments that have no fast disks (aka network drive) available for zk14:51
corvus_bschanzel: i'll take a look today, thanks!14:52
bschanzelcorvus_ cool, thanks!14:52
corvus_tobiash: right, it sounds important for you, but it doesn't necessarily sound like the right system for all zuul users14:53
corvus_most users should be able to use the upstream image i would think14:55
*** corvus_ is now known as jeblair14:56
clarkbthinking outloud, do you need a special image to do what tobiash is doing? I guessif you want the container to make the tmpfs instead of the host?14:56
*** jeblair is now known as corvus14:56
clarkbthe backup stuff could a sidecar right?14:56
tobiashclarkb: the backup stuff is a sidecar (however we use a custom boot.sh that copies over the backup, but that could be moved into an init container)14:57
tobiashthe most important is the generated zk config during boot14:58
tobiashbut no idea if there is an upstream image now that supports running in a statefulset14:58
corvustobiash: what would the image require in order to support a statefulset?14:59
tobiashcorvus: it's basically this what was required: https://github.com/kubernetes-retired/contrib/blob/master/statefulsets/zookeeper/zkGenConfig.sh15:00
tobiash(back then)15:00
tobiashmore specifically MY_ID: https://github.com/kubernetes-retired/contrib/blob/master/statefulsets/zookeeper/zkGenConfig.sh#L6415:01
corvustobiash: the current zookeeper image has an entrypoint script which generates a zoo.cfg file from some env variables if it doesn't already exist;  and also the myid file15:01
corvusbut i'm not sure it supports arbitrary data in the zoo.cfg; so i don't think one could just add an env variable for the tls cert path15:02
corvusi think it only has some predefined variables it understands15:02
tobiashsame with this config generate script15:02
tobiashso I guess that needs to be patched upstream or the config could be pre-generated by an init container15:03
*** avass has joined #zuul15:03
*** bolg has joined #zuul15:05
*** bolg_ has quit IRC15:06
mnasertristanC: see https://github.com/helm/charts#status-of-the-project15:07
corvushere's the entrypoint script in the current image: https://github.com/31z4/zookeeper-docker/blob/6b7a8a55d9760f9737b03366e1b3b7edbe0bd895/3.5.7/docker-entrypoint.sh15:07
corvusmaybe they would accept some SSL options?15:08
*** saneax has quit IRC15:11
mordredit does seem to be an active repo - so maybe that wouldn't be unwelcome15:12
tobiashcorvus: looks like this entrypoint takes its id from an env var: https://github.com/31z4/zookeeper-docker/blob/6b7a8a55d9760f9737b03366e1b3b7edbe0bd895/3.5.7/docker-entrypoint.sh#L4415:14
*** okamis has quit IRC15:14
tobiashcorvus: I'm not sure if it's possible to have different env vars per pod within a statefulset15:14
avassI have a feeling that ensure-tox and tox roles are not compatible since ensure-tox installs tox to ~/.local/bin and that's not in PATH by default15:15
avassOh wait, could it be the ansible varaible cache not working?15:18
openstackgerritGraham Hayes proposed zuul/nodepool master: Implement an Azure driver  https://review.opendev.org/55443215:19
mordredavass: that could be a thing to look at - it's supposed to work via ansible variable cache15:20
tobiashcorvus: there is an upstream kubernetes issue with exact this question: https://github.com/kubernetes/kubernetes/issues/4065115:25
tristanCcorvus: we can provides a custom zoo.cfg to the upstream zk image like so: https://review.opendev.org/#/c/712759/11/conf/zuul/resources.dhall@64815:26
tristanCmnaser: i see, and i guess nobody started to maintain the zk chart?15:28
mnasertristanC: havent checked that yet but i assume if it was incubator that may be the case15:29
*** jcapitao is now known as jcapitao_afk15:31
mordredfieldPath: metadata.annotations['spec.pod.beta.kubernetes.io/statefulset-index']15:31
mordredrolls right off the tongue15:31
tristanCtobiash: corvus: so it seems relatively simple to work around the upstream zk image and integrate the statefulset tobiash linked within the zuul-operator. should i keep going down the cert-manager path and look into a initcontainer to setup the zk tls files?15:37
tristanCalternatively, we could look into moving the zk deployment system outside of the zuul-operator, though i don't know how and where would that happen15:38
tristanCor we could stay with the current implementation (single pod setup), and document that production system needs to provide an existing zk15:41
corvustristanC: what issues are you having with the zk operator?15:42
mugsieI just rebased https://review.opendev.org/554432 and addressed the questions - but I was told there is a newer simpler interface for nodepool drivers - should I update this to the new interface?15:45
corvusmugsie: i took a quick look at azure when i made the "simple" driver interface, and my initial thought was that azure would be too complicated for it, but let me get you a link -- you'll know better15:46
avassmordred: it's probably something with the fact cache but looking at ansible.cfg it's enabled but it doesn't seem to work anyway.15:46
mugsiecorvus: cool - thanks :)15:46
corvusmugsie: (basically the "simple" interface is a higher-level api abstraction that sits on top of the existing one, so there's no problem using the lower-level api if that's what's needed)15:47
mugsieits the one GCP driver used, right?15:47
mugsieone the GCP*15:47
corvusmugsie: yes;  it's here: https://zuul-ci.org/docs/nodepool/devguide.html#simple-drivers15:48
mugsiecool, I will look at what you did there15:48
corvusmugsie: i'm pretty sure we can port aws to it.  i'm certain that we can not port openstack to it.15:48
corvustristanC: well, in general, i think if there's a suitable standalone zk operator that the zuul-operator could rely on (we can ask users to install the zk operator first, and have zuul manage the CRs for it), that would be great.  if that's not possible, then i think managing a statefulset with init-containers inside of zuul-operator is the way to go.15:51
corvusavass: you may be able to interactively debug by asking the executor to hold the build directory.  "zuul-executor keep"  turns that on.  then when the job is finished, you can cd into there and examine the fact cache.15:53
tristanCcorvus: it's just that the zookeeper-operator build system assume you know golang, and it's not very helpful. it's now failing because of `dep: command not found`15:53
mordredtristanC, corvus: I agree - I thnik it would be nice if we can reuse existing operator logic - but I also don't think we should kill ourselves to do it - especially since zk itself doesn't need a _lot_ of complicated care and feeding15:56
tristanCof course it would be better to reuse an existing thing15:57
tristanCafter installing the `dep` tool, the zk-operator built, but it doesn't seem to run locally using `operator-sdk run --local`, that fails with `build flag -mod=vendor only valid when using modules`15:59
mordredthat doesn't inspire confidence16:00
*** hashar is now known as hasharAway16:03
*** jcapitao_afk is now known as jcapitao16:03
*** sshnaidm has quit IRC16:28
*** sshnaidm has joined #zuul16:28
*** bolg has quit IRC16:36
*** harrymichal has joined #zuul16:44
*** johanssone has quit IRC16:51
*** bolg has joined #zuul16:52
*** bolg has quit IRC16:53
*** johanssone has joined #zuul16:56
*** johanssone has quit IRC16:57
*** bschanzel has left #zuul17:02
*** johanssone has joined #zuul17:03
*** johanssone has quit IRC17:03
*** johanssone has joined #zuul17:05
*** johanssone has quit IRC17:05
*** johanssone has joined #zuul17:06
*** johanssone has quit IRC17:08
openstackgerritGraham Hayes proposed zuul/nodepool master: Implement an Azure driver  https://review.opendev.org/55443217:11
*** johanssone has joined #zuul17:14
*** johanssone has quit IRC17:15
*** johanssone has joined #zuul17:20
*** johanssone has quit IRC17:20
*** johanssone has joined #zuul17:23
noonedeadpunkmordred: mnaser what do you think regarding this elements patch? https://review.opendev.org/#/c/713692/17:23
*** johanssone has quit IRC17:27
*** johanssone has joined #zuul17:30
*** johanssone has quit IRC17:32
*** evrardjp has quit IRC17:36
*** evrardjp has joined #zuul17:36
*** johanssone has joined #zuul17:46
mnasernoonedeadpunk: it makes sense to me, it'd be nice to hear about what others think too17:49
*** johanssone has quit IRC17:54
*** johanssone has joined #zuul18:02
*** johanssone has joined #zuul18:03
*** johanssone has quit IRC18:08
*** johanssone has joined #zuul18:13
*** jpena is now known as jpena|off18:16
*** jcapitao is now known as jcapitao_off18:19
*** johanssone has quit IRC18:19
*** johanssone has joined #zuul18:22
*** johanssone has quit IRC18:25
*** johanssone has joined #zuul18:34
mordrednoonedeadpunk: oh wow, that looks nice!18:37
*** johanssone has quit IRC18:37
mordrednoonedeadpunk: that said - a further optimization you might want to make would be to remove the -dev packages and build tools and just install the normal libs after you've done the pyenv thing. I think you can tie different packages to different stages in package-installs?18:39
mordredso maybe you could mark some as remove in post-install?18:39
mordred(just so you don't have your images polluted with the build toolchains)18:40
*** sshnaidm is now known as sshnaidm|afk18:41
*** hasharAway has quit IRC18:41
*** hasharAway has joined #zuul18:41
*** johanssone has joined #zuul18:43
*** hasharAway is now known as hashar18:44
mordredhrm. it doesn't look like you can easily say "install this package in pre-install and then uninstall it in post-install"18:44
mordredmight need to be a second element that just has the same list but with uninstall true18:44
*** johanssone has quit IRC18:47
*** johanssone has joined #zuul18:50
noonedeadpunkmordred: yeah, ok, that's actually fair18:50
mordredbut that's an exciting element :)18:51
*** johanssone has quit IRC18:57
noonedeadpunkmordred: do you think packages removal should be accomplished with adjusting existing element or creating simmilar one?18:59
mordrednoonedeadpunk: if it WORKS to do it in the existing one - I thnik that would be best - but I'm not sure package-installs.yaml is flexible enough for that sadly19:00
noonedeadpunkYeah, that's why I've asked...19:01
noonedeadpunkwill try to think what to do with that19:01
mordredso I think, assuming I'm right and it's not good enough - we could either improve it - probably more difficult - or just made a second cleanup element19:01
mordredit would be nice if you could say: "libbz2-dev: [{phase: pre-install, action: install}, {phase: post-install, action: uninstall}]19:02
noonedeadpunkyeah19:03
mordredbut it wriiting that might suck- so you might want to just do the cleanup element and leave implementing that for next time you're bored :)19:03
*** johanssone has joined #zuul19:04
*** johanssone has joined #zuul19:06
*** johanssone has quit IRC19:06
noonedeadpunkmordred: are you sure it's not implemented? https://opendev.org/openstack/diskimage-builder/src/branch/master/diskimage_builder/elements/package-installs/install.d/99-package-uninstalls19:07
noonedeadpunkas it at first look seems like cleanup is done?19:08
*** johanssone has joined #zuul19:11
noonedeadpunkso the only thing I need to remove is python-build?19:12
mordredlet me see ... I *think* it's mututally exclusive?19:12
noonedeadpunkhm, may be - not so big expert in elements tbh:)19:13
*** johanssone has quit IRC19:14
noonedeadpunkjust thought that at 00 it installs it and at 95 - uninstalls?19:14
mordredyeah - but I think what it's doing is installing all packages marked for installation at 00 and all things marked for uninstallation at 9519:18
mordredit's just - I think marking something for uninstall causes it to not be marked for indtall19:18
mordredinstall19:18
* mordred is trying to prove this real quick19:18
*** johanssone has joined #zuul19:21
mordrednoonedeadpunk: yes - I have confirmed - if you mark a package as uninstall: true it is _not_ put into the list of things to install19:31
*** Defolos has quit IRC19:32
noonedeadpunk:(19:32
mordredso I think second element19:32
mordredyeah. it's sad-making19:33
mordredlet me see if I can make a simple patch to support both19:33
mordrednoonedeadpunk: got it19:37
noonedeadpunkmordred: oh, really?19:39
mordrednoonedeadpunk: remote:   https://review.opendev.org/713726 Add support for build-only packages19:40
noonedeadpunkoh, that's neat19:42
avasscorvus: thanks for the tip earlier, I'll try to see if I can figure it out tomorrow19:50
Shrewsianw: i left some comments on your diskimages-globals changes without actually voting just yet19:55
*** gmann is now known as gmann_afk19:57
*** hashar is now known as hasharAway20:00
*** jamesmcarthur has quit IRC20:09
*** Openk10s has joined #zuul20:14
openstackgerritMerged zuul/zuul-jobs master: Kubernetes Node Support for Mirroring Git Repos  https://review.opendev.org/71192020:18
noonedeadpunkmordred: rebased on top of it and added cleanup20:19
openstackgerritMerged zuul/zuul-jobs master: Optimize repos for size when preparing for nodecache  https://review.opendev.org/71072020:23
mordrednoonedeadpunk: sweet! I think there's one more thing missing - but I think that's gonna be really nice20:24
mordrednoonedeadpunk: you also need to add the non-dev versions of a few of the libs - notably libbzip2 libreadline libssl sqlite and libzlib20:25
mordrednoonedeadpunk: otherwise the pythons you installed won't have the runtime libs :)20:25
noonedeadpunkexcept adjusting zuul job to use stow?20:25
mordredand that20:25
noonedeadpunkhm, yeah, that's make sense...20:26
*** jamesmcarthur has joined #zuul20:28
noonedeadpunkbut I think depends on do not work anyway?20:30
noonedeadpunkSo zuul thing makes sense to place only once having element working...20:31
mordredoh - yeah - totally20:31
mordredwell - we probably aren't going to have that element in place in opendev anyway - so I think the zuul-jobs patch can probably go ahead and be written20:32
mordredand we'll figure out a good way to test it upstream :)20:32
mnaserdoes nodepool use uncapped dib in its images?20:32
mnaserim just thinking how we can get access to noonedeadpunk's change when we use nodepool images20:32
*** gmann_afk is now known as gmann20:33
mordredmnaser: uhm... I think we use releases - so we'll need to cut a dib release then build a new nodepool-builder image20:34
mordredwhat a nice stack :)20:34
mnaseroh okay, i thought the nodepool images were just rolling latest *20:34
mordredthey are of nodepool20:35
mordredbut I think we're just installing dib from pip20:35
openstackgerritMerged zuul/nodepool master: Kubernetes/OpenShift Provider: Don't Require Bash in Container Images  https://review.opendev.org/71203420:46
noonedeadpunkmordred: btw, I think these libs should be already present, as they're installed as dependecies to dev one, and moreover required for the base python....20:49
mordredah - ok20:50
mordredthen let's not worry about that20:50
*** jamesmcarthur has quit IRC20:52
*** jamesmcarthur has joined #zuul20:53
ianwShrews: thanks will go over soon20:55
noonedeadpunkmaybe I should better clenup dev requirements though....20:55
noonedeadpunkBut that is smth I'll be able to continue only tomorrow...20:56
*** jamesmcarthur has quit IRC20:58
*** jamesmcarthur has joined #zuul20:58
mordrednoonedeadpunk: I thnk it's looking great so far!20:58
*** jamesmcarthur has quit IRC21:00
*** hasharAway has quit IRC21:00
*** hasharAway has joined #zuul21:01
*** jamesmcarthur has joined #zuul21:03
*** jamesmcarthur has quit IRC21:08
*** mattw4 has joined #zuul21:10
corvustristanC: the complete zk stack is green now; based on our earlier conversation, i will start rebasing the tls portions to not require sasl.  i think that we may want to consider adding the acl support back in, because a site may potentially want to set x509 acls, but i don't think it's important we do that right now, and we can add it on after tls support.21:15
tristanCcorvus: wfm, thanks!21:17
*** openstackstatus has joined #zuul21:17
*** ChanServ sets mode: +v openstackstatus21:17
*** jamesmcarthur has joined #zuul21:18
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Update ansible-lint exception  https://review.opendev.org/71374221:18
tristanCcorvus: though, if we consider supporting sasl, i'd rather we merge the change now and avoid future conflict/failure. otherwise i'd prefer abandon it now21:18
*** hasharAway is now known as hashar21:19
corvustristanC: me too, but i feel like we got enough buy-in from folks saying tls-only is okay, and i think ultimately that's friendlier/easier than the sasl setup, so i'm inclined to agree with you and abandon it21:20
*** kmalloc has joined #zuul21:25
openstackgerritJames E. Blair proposed zuul/zuul master: Add TLS support for ZooKeeper  https://review.opendev.org/71253121:28
openstackgerritJames E. Blair proposed zuul/nodepool master: Add ZooKeeper TLS support  https://review.opendev.org/71273321:32
openstackgerritJames E. Blair proposed zuul/zuul master: Add TLS support for ZooKeeper  https://review.opendev.org/71253121:34
openstackgerritJames E. Blair proposed zuul/zuul master: Move zuul-quick-start requires to zuul-build-image  https://review.opendev.org/71354521:34
openstackgerritJames E. Blair proposed zuul/zuul master: Use ZK TLS in quickstart  https://review.opendev.org/71281721:34
mordredcorvus: there's still sasl docs in that21:34
corvusmordred: which one?21:34
mordredhttps://review.opendev.org/#/c/712531/18/doc/source/howtos/zookeeper.rst21:35
corvusoh that, yeah, i missed that cause i added that in the tls change;21:35
corvusi'll pull that out now21:35
corvusand i'm rewriting it a little :)21:38
*** jamesmcarthur has quit IRC21:40
openstackgerritJames E. Blair proposed zuul/zuul master: Add TLS support for ZooKeeper  https://review.opendev.org/71253121:47
openstackgerritJames E. Blair proposed zuul/zuul master: Move zuul-quick-start requires to zuul-build-image  https://review.opendev.org/71354521:47
openstackgerritJames E. Blair proposed zuul/zuul master: Use ZK TLS in quickstart  https://review.opendev.org/71281721:47
corvusi put in a bit more info about the "shared CA" concern21:47
*** jamesmcarthur has joined #zuul22:20
*** rlandy is now known as rlandy|bbl22:27
*** jamesmcarthur has quit IRC22:37
*** jamesmcarthur has joined #zuul22:39
openstackgerritIan Wienand proposed zuul/nodepool master: Convert diskimages to slots  https://review.opendev.org/71338122:52
openstackgerritIan Wienand proposed zuul/nodepool master: diskimage: make name primary key  https://review.opendev.org/71338222:52
openstackgerritIan Wienand proposed zuul/nodepool master: Add parent and abstract flags for diskimages  https://review.opendev.org/71315722:52
openstackgerritIan Wienand proposed zuul/nodepool master: Move config merge into DiskImage object  https://review.opendev.org/71355022:52
ianwShrews: ^ thanks!  should be updated from your comments22:52
corvusianw, Shrews: thought of using __dict__ ?22:56
*** hashar has quit IRC22:57
corvus(ie, why not skip __slots__ and just have __eq__ check __dict__ equality?)22:57
*** threestrands has joined #zuul22:58
*** jcapitao_off has quit IRC23:03
*** jamesmcarthur has quit IRC23:16
*** harrymichal has quit IRC23:20
*** jamesmcarthur has joined #zuul23:20
*** jamesmcarthur has quit IRC23:21
*** jamesmcarthur has joined #zuul23:23
*** jamesmcarthur has quit IRC23:23
*** kmalloc has quit IRC23:35
*** armstrongs has joined #zuul23:47
*** jamesmcarthur has joined #zuul23:53
*** armstrongs has quit IRC23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!