Wednesday, 2022-04-27

@iwienand:matrix.orgok i figured out the nodepool error, but not sure if it's boto or moto that's at fault.  moto has stopped raising an error for deleted images, which it says is inline with the aws API, but then boto has this image that fails when you try to look at "image.state"01:47
@iwienand:matrix.orgI have filed https://github.com/spulec/moto/issues/5067 but this isn't a great bug report, I know.  I'm hoping there's enough there to narrow it down04:11
-@gerrit:opendev.org- Ian Wienand proposed: [zuul/nodepool] 839431: AWS tests : catch AttributeError raised by latest moto release https://review.opendev.org/c/zuul/nodepool/+/83943104:19
@iwienand:matrix.orgClark: the other option seems to be to leave the src values in, but pointed at the upstream CDN.  modulo flags etc. if we like as well04:59
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: WIP: Fix a bug that re-enqueue may skip jobs unexpectly https://review.opendev.org/c/zuul/zuul/+/83937005:59
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: WIP: Fix a bug that re-enqueue may skip jobs unexpectly https://review.opendev.org/c/zuul/zuul/+/83937006:50
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: WIP: Fix a bug that re-enqueue may skip jobs unexpectly https://review.opendev.org/c/zuul/zuul/+/83937007:23
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: WIP: Fix a bug that re-enqueue may skip jobs unexpectly https://review.opendev.org/c/zuul/zuul/+/83937007:50
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: WIP: Fix a bug that re-enqueue may skip jobs unexpectly https://review.opendev.org/c/zuul/zuul/+/83937008:29
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: WIP: Fix a bug that re-enqueue may skip jobs unexpectly https://review.opendev.org/c/zuul/zuul/+/83937008:51
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: WIP: Fix a bug that re-enqueue may skip jobs unexpectly https://review.opendev.org/c/zuul/zuul/+/83937009:21
-@gerrit:opendev.org- Dong Zhang proposed: [zuul/zuul] 839370: Fix a bug that re-enqueue may skip soft dependent jobs https://review.opendev.org/c/zuul/zuul/+/83937009:57
@iwienand:matrix.orgcorvus: i've mentioned you in https://github.com/spulec/moto/issues/5067#issuecomment-1110844418 as there's a question over if we saw the AWS API returning a state of "deleted", which would help the moto author decide if there might be a missing corner case.  this check seems to have come in via https://review.opendev.org/c/zuul/nodepool/+/830527/3/nodepool/tests/unit/test_driver_aws.py10:39
-@gerrit:opendev.org- Benjamin Schanzel proposed: [zuul/nodepool] 839514: Default limits for k8s labels and quota support https://review.opendev.org/c/zuul/nodepool/+/83951411:40
@jpew:matrix.orgIt's not clear to me how to add a release note. I see the `releasenotes/notes` directory, but I don't know how to come up with the SHA-1 suffix for the file13:17
@jim:acmegating.comjpew: https://zuul-ci.org/docs/zuul/latest/developer/releasenotes.html13:19
@jpew:matrix.orggot it, thanks13:21
-@gerrit:opendev.org- Benjamin Schanzel proposed: [zuul/nodepool] 839514: Default limits for k8s labels and quota support https://review.opendev.org/c/zuul/nodepool/+/83951413:26
-@gerrit:opendev.org- Dominik Jaeger proposed: [zuul/zuul] 839550: Add spec for fileset feature https://review.opendev.org/c/zuul/zuul/+/83955013:38
@fungicide:matrix.org> <@iwienand:matrix.org> Clark: the other option seems to be to leave the src values in, but pointed at the upstream CDN.  modulo flags etc. if we like as well13:49
That seems sub-optimal. At the moment, every apt update in a job is pulling the deb-src indices from a configured local mirror, so simply keeping the deb-src lines and switching them to point to an official distro mirror would mean that every apt update pulls indices from outside the environment increasing risk of Internet-inflicted breakage. At least in OpenDev, what we really want is for jobs not to pull deb-src indices from anywhere by default, and then jobs can add deb-src lines for official distro mirrors in cases where they need source packages we're not mirroring.
@fungicide:matrix.org(as already pointed out, this is how the role works for ubuntu nodes today, so the goal is to change the role in such a way that debian nodes work similarly to ubuntu)13:54
@clarkb:matrix.orgYa I'll push up a change that wraps it in a flag defaulted to true, then a child change that defaults to false we can land in a couple of weeks and after that a change to add the functionality to ubuntu as well15:25
-@gerrit:opendev.org- Clark Boylan proposed:16:17
- [zuul/zuul-jobs] 839592: Enable deb-src on Debian with a flag in configure-mirrors https://review.opendev.org/c/zuul/zuul-jobs/+/839592
- [zuul/zuul-jobs] 839593: Switch enable_src_repos to False in configure-mirrors https://review.opendev.org/c/zuul/zuul-jobs/+/839593
- [zuul/zuul-jobs] 839594: Add enable_deb_src_repos support for Ubuntu https://review.opendev.org/c/zuul/zuul-jobs/+/839594
-@gerrit:opendev.org- Clark Boylan proposed: [zuul/zuul-jobs] 839594: Add enable_deb_src_repos support for Ubuntu https://review.opendev.org/c/zuul/zuul-jobs/+/83959416:19
@clarkb:matrix.orgcorvus: ^ is that similar to what you had in mind after disucssion yesterday? I did leave one question on the first change that your input on would be helpful for16:19
@jim:acmegating.comClark: replied16:28
@clarkb:matrix.orgcorvus: cool that makes sense to me too16:31
@jim:acmegating.compushed 5.2.516:36
@clarkb:matrix.orgcorvus: something like https://etherpad.opendev.org/p/pijjODYCvIZD0GYpzjTx as the announcement?16:36
@clarkb:matrix.orgI can send that as soon as 839592 lands if it looks good16:37
@clarkb:matrix.orgfungi: ^ you may be interested in https://review.opendev.org/c/zuul/zuul-jobs/+/839592/16:38
@avass:vassast.orgI was going to ask if I should update test-mirror-workspace-git to do a base-test loop for: https://review.opendev.org/c/zuul/zuul-jobs/+/839225 but I noticed that the test role is quite old16:40
@avass:vassast.orgshould I update it and create a test-prepare-workspace-git, or does anyone wanna verify that ^ and +2 ?16:41
@clarkb:matrix.orgAlbin Vass: if you think it is testable via the testing in zuul-jobs directly that is probably preferable16:42
@clarkb:matrix.orgbut changes to mirror-workspace-git should probably be tested as wellas we can manage even if that means a base-test loop16:42
@avass:vassast.orgyeah16:43
@avass:vassast.orgmirror-workspace-git-repos hardcodes delegate_to: localhost so that would require a nested ansible until those limitations are removed :)16:44
@jim:acmegating.comfwiw, i think those limitations are going to be removed today :)16:44
@avass:vassast.orgoh!16:44
@avass:vassast.orgthen I can wait :)16:44
@avass:vassast.orgwe're not in any hurry in any case16:44
@jim:acmegating.comas soon as the 5.2.5 release announcement is out, i'll start approving the ansible changes16:44
@avass:vassast.org(and if we we're we'd vendor/fork the role instead)16:45
@avass:vassast.orgI have an idea how extend the 'roles:' import to pin roles to specific revisions using git worktrees btw.16:49
@avass:vassast.org * I have an idea to extend the 'roles:' import to pin roles to specific revisions using git worktrees btw.16:50
-@gerrit:opendev.org- Zuul merged on behalf of Clark Boylan: [zuul/zuul-jobs] 839592: Enable deb-src on Debian with a flag in configure-mirrors https://review.opendev.org/c/zuul/zuul-jobs/+/83959216:58
@clarkb:matrix.orgAlbin Vass: reading that change it isn't super clear to me why urlencoding before giving it to git would fix the issue if git is doing the translation17:00
@avass:vassast.orgClark: practically it adds another level of urlencoding so git decodes it to the original urlencoded value...17:01
@clarkb:matrix.orgis zj_project.value.src_dir being converted by something before it gets to git? If so should we address this further upstream so that other users of that value don't have to urlencode too?17:01
@clarkb:matrix.orghrm isn't urlencoding a urlencoded url a noop?17:01
@avass:vassast.orgsrc_dir is using urlencoding if `workspace-scheme: unique` is set: https://zuul-ci.org/docs/zuul/latest/config/job.html#value-job.workspace-scheme.unique17:03
@avass:vassast.org> <@clarkb:matrix.org> hrm isn't urlencoding a urlencoded url a noop?17:04
`org/project` for example would urlencode to `org%2Fproject` which would in turn encode the percentage sign into `org%252Fproject`. At least I tested this locally and it seemed to produce the correct result
@clarkb:matrix.orgoh do things like the % get nested encoding?17:04
@clarkb:matrix.orgya ok its the % that gets escaped essentially since everything else should be safe after the first pass17:04
@avass:vassast.orgbut I can wait until ansible limitations are removed to set up a test case :)17:05
@clarkb:matrix.orgAlbin Vass: left a note. tldr is I think a comment in the code explaining some of this will be helpful otherwise it is largely magic17:07
@avass:vassast.orgsure!17:07
@jim:acmegating.comrelease announcement sent; bombs away on ansible-relax.17:08
@clarkb:matrix.orgcorvus: does https://etherpad.opendev.org/p/pijjODYCvIZD0GYpzjTx look good to you? I can send that now that the change has landed17:13
@jim:acmegating.comClark: lgtm!17:17
@clarkb:matrix.orgcorvus: cool sent. I think it may need to be moderated through?17:19
@jim:acmegating.comdone17:21
@clarkb:matrix.orghttps://review.opendev.org/c/zuul/nodepool/+/839431 appears to be the fix for nodepool testing which would allow us to land some of those other changes17:36
-@gerrit:opendev.org- Jeremy Stanley https://matrix.to/#/@fungicide:matrix.org proposed wip: [zuul/project-config] 839614: Add a zuul-publish-unversioned-tox-docs job https://review.opendev.org/c/zuul/project-config/+/83961417:40
@fungicide:matrix.orgthe new release reminded me we did ^ that for some opendev projects recently, if it's of interest17:45
@jim:acmegating.comfungi: nice; i'd love something like that, but i fear that the rewind will be a frequent occurence for us, so we should probably address that18:13
@jim:acmegating.comianw: i ran through a full aws image upload/create/delete cycle and can not confirm that 'deleted' is a returned value.  i updated the github issue accordingly.  thanks for running that down.18:14
@clarkb:matrix.orgif the job always build the latest/ build against HEAD of master that problem would be addressed right?18:20
@clarkb:matrix.orgthat probably implies two builds of the docs in the jobs. One for the tag and one for HEAD18:20
@fungicide:matrix.orgClark: yes, i think it's doable by adding a pre-run playbook to reset the repository state. does that seem like a sane approach?18:34
@clarkb:matrix.orgfungi: I'm not sure if pre-run is correct if the job has to flip it over halfway through?18:34
@clarkb:matrix.orgOr is the job for the tag separate18:35
@fungicide:matrix.orgwell, it's a separate job18:35
@clarkb:matrix.orgah then ya simply updating the checkout should do it18:35
@fungicide:matrix.orgthe idea is that the version-specific build and branch tip build would run independently18:35
@clarkb:matrix.orgya in that case it should be fine since they also publish to different locations18:36
@clarkb:matrix.orgone to latest/ and the other to $tag/18:36
-@gerrit:opendev.org- Zuul merged on behalf of Ian Wienand: [zuul/nodepool] 839431: AWS tests : catch AttributeError raised by latest moto release https://review.opendev.org/c/zuul/nodepool/+/83943118:39
@jpew:matrix.orgr.e. https://review.opendev.org/c/zuul/nodepool/+/833099 and a nodepool release: something came up and there isn't any need to hold a nodepool release for it (just in case you were waiting on it)18:58
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/nodepool] 839626: Delete AWS image builds https://review.opendev.org/c/zuul/nodepool/+/83962619:01
@jim:acmegating.comianw: ^ i noticed that during my real-world testing.19:02
@jim:acmegating.comjpew: thanks.  i think we can add that change any time.19:02
@clarkb:matrix.orgianw left notes on the zuul json logging stack.19:26
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 837418: Remove restricted Ansible documentation https://review.opendev.org/c/zuul/zuul/+/83741820:04
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl: [zuul/nodepool] 836013: Add support for label quota https://review.opendev.org/c/zuul/nodepool/+/83601320:36
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 839639: Fix updating change when emulating gerrit topic support https://review.opendev.org/c/zuul/zuul/+/83963920:49
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl: [zuul/zuul] 839321: Don't try to update deps of non-change refs https://review.opendev.org/c/zuul/zuul/+/83932120:49
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 837419: Remove ansible plugin tests https://review.opendev.org/c/zuul/zuul/+/83741921:24
@jim:acmegating.comto save anyone else the trouble of looking up the paramiko/blowfish warnings currently spammed by the tests: https://github.com/paramiko/paramiko/pull/203921:34
@jpew:matrix.orgOK: I finally sorted out whats going on here, but I can't figure out what the best path forward. It turns out that https://review.opendev.org/c/zuul/nodepool/+/833099 is actually not strictly necessary for us, because `ignore-project-quota` actually does the thing we want (keeps retrying the node allocation on quota error)..... except it doesn't because https://review.opendev.org/c/zuul/nodepool/+/839226 causes it to raise a _different_ exception when a quota error occurs so none of the retrying occurs and the node allocation just fails instead. I'm not sure what to do here, https://review.opendev.org/c/zuul/nodepool/+/839226 is sufficent for my use case, but also means a change in behavior to what happens on quota failures from openstack, which might be an unexpected (unwelcome?) change? basically right now I don't think any of the handling for nodes in the zk.ABORTED state ever activates21:36
@jpew:matrix.org * OK: I finally sorted out whats going on here, but I can't figure out what the best path forward. It turns out that https://review.opendev.org/c/zuul/nodepool/+/833099 is actually not strictly necessary for us, because `ignore-provider-quota` actually does the thing we want (keeps retrying the node allocation on quota error)..... except it doesn't because https://review.opendev.org/c/zuul/nodepool/+/839226 causes it to raise a _different_ exception when a quota error occurs so none of the retrying occurs and the node allocation just fails instead. I'm not sure what to do here, https://review.opendev.org/c/zuul/nodepool/+/839226 is sufficent for my use case, but also means a change in behavior to what happens on quota failures from openstack, which might be an unexpected (unwelcome?) change? basically right now I don't think any of the handling for nodes in the zk.ABORTED state ever activates21:37
@jpew:matrix.orgGranted, it probably doesn't make sense for OpenStack to have different behavior on Quota errors than another provider (which just looks like OpenShift ATM)21:41
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com:21:46
- [zuul/zuul] 837436: Remove unused remote module tests https://review.opendev.org/c/zuul/zuul/+/837436
- [zuul/zuul] 837420: Remove unused ansible modules https://review.opendev.org/c/zuul/zuul/+/837420
@iwienand:matrix.orgClark: thanks, i've responded to hopefully clear up what the path is there22:34
@clarkb:matrix.orgi responded hopefully that makes sense? Basically I don't think we need to check whether or not we enter the block, just that if a string is provided instead of a dict and no_log is set that we don't leak the strings out22:43
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/nodepool] 839626: Delete AWS image builds https://review.opendev.org/c/zuul/nodepool/+/83962622:58
@iwienand:matrix.orgClark: i can add a no_log test to the follow-on.  thinking about it, we might have enough coverage here to convince ourselves that we can actually remove all the no_log handling from the json callback -- because at this point, the callback never actually gets info it shouldn't log23:19
@clarkb:matrix.orgya thats possible if the test shows we're not exposing stuff anyway. However, for that case I think we should ensure the test is running with each of the ansible versions we support since it may differ betwene them23:20
@iwienand:matrix.orgyeah this has all been fixed i think since 2.5 era23:21
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 838933: Add a gearman-style backoff for executor job starts https://review.opendev.org/c/zuul/zuul/+/83893323:22
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 837421: Remove localhost restriction from command.py https://review.opendev.org/c/zuul/zuul/+/83742123:31
-@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul] 838971: Add unit test for zuul_json text result parsing https://review.opendev.org/c/zuul/zuul/+/83897123:46

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!