Tuesday, 2022-10-04

-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl: [zuul/zuul] 859066: Link span of queue item to trigger event span https://review.opendev.org/c/zuul/zuul/+/85906603:33
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl:03:34
- [zuul/zuul] 859067: Trace received Github events https://review.opendev.org/c/zuul/zuul/+/859067
- [zuul/zuul] 859280: Trace Gerrit connection events https://review.opendev.org/c/zuul/zuul/+/859280
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl:06:49
- [zuul/zuul] 859281: Trace Gitlab connection events https://review.opendev.org/c/zuul/zuul/+/859281
- [zuul/zuul] 859282: Trace Pagure connection events https://review.opendev.org/c/zuul/zuul/+/859282
-@gerrit:opendev.org- Dr. Jens Harbott proposed: [zuul/nodepool] 860213: DNM: Test quota failure on static driver https://review.opendev.org/c/zuul/nodepool/+/86021308:11
-@gerrit:opendev.org- Dr. Jens Harbott proposed: [zuul/nodepool] 860213: DNM: Test quota failure on static driver https://review.opendev.org/c/zuul/nodepool/+/86021308:32
@q:fricklercloud.deI added a second static node to a pool, but it is not getting used, there is a pending node request which is always failing with "Not enough quota remaining to satisfy request", which shouldn't happen because the static driver cannot actually launch nodes. Any idea how to best debug this situation?08:41
-@gerrit:opendev.org- Dr. Jens Harbott proposed: [zuul/nodepool] 860213: DNM: Test quota failure on static driver https://review.opendev.org/c/zuul/nodepool/+/86021308:52
-@gerrit:opendev.org- Ian Wienand proposed: [zuul/zuul] 804956: web: Jobs: Use TreeView for job overview page https://review.opendev.org/c/zuul/zuul/+/80495609:13
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl: [zuul/zuul] 859283: Trace Git connection events https://review.opendev.org/c/zuul/zuul/+/85928310:29
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl: [zuul/zuul] 859284: Trace timer trigger events https://review.opendev.org/c/zuul/zuul/+/85928410:30
-@gerrit:opendev.org- Zuul merged on behalf of Simon Westphahl: [zuul/zuul] 859285: Trace Zuul trigger events https://review.opendev.org/c/zuul/zuul/+/85928510:37
@noonedeadpunk:matrix.orgHey there! Sorry, I returned back to playing with zuul 4.9.0 here... And back to the issue of how to set a variable for job that can be used in hosts for the job13:26
@noonedeadpunk:matrix.orgEventually, according to the docs, job.extra-vars should do the trick.13:26
@noonedeadpunk:matrix.orgAs https://review.opendev.org/c/zuul/zuul/+/546474/6/zuul/executor/server.py#1740 they're added to ansible as extra-args indeed13:27
@noonedeadpunk:matrix.orgBUT, looking at current code they're not more13:27
@noonedeadpunk:matrix.orgAnd that's what I see in runtime - I can't really define hosts to be as a variable13:27
@noonedeadpunk:matrix.orgIe https://opendev.org/zuul/zuul/src/tag/4.9.0/zuul/executor/server.py#L2393-L239513:31
@noonedeadpunk:matrix.orgSo this statement from the doc is simply not true anymore https://zuul-ci.org/docs/zuul/4.9.0/reference/job_def.html#attr-job.extra-vars13:32
@noonedeadpunk:matrix.orgOn master I can't even find where they are, except docs13:33
@noonedeadpunk:matrix.orgAnd that is super confusing. How you ended up with such statement.... https://opendev.org/zuul/zuul/src/commit/013b9fbd5324459cd48e225cdd918846f91043f8/zuul/executor/server.py#L844-L84513:34
@noonedeadpunk:matrix.orgcorvus: pinging you as seems you worked on that :)13:39
@noonedeadpunk:matrix.orgAh, probably I can run against localhost and make the first task as `block` which delegate where I need it....13:48
@noonedeadpunk:matrix.org"neat"13:49
@clarkb:matrix.orgDmitriy Rabotyagov: so I think there are two things going on here. First you are trying to accomplish something specific that isn't clear to me. Can you try to elaborate on what your goal is and why you think you need to copy playbooks around? The second is there may be a bug in the docs or the executor handling of extra vars. Unfortunately, it is unlikely that many here will debug such an old version of zuul, but we can check if modern zuul has the same problem.13:53
@noonedeadpunk:matrix.orgSo, with current code job.extra-vars are exactly same as job.host-vars. So they don't make any sense as a standalone thing. But, they were introduced and designed to have prescedence over host_vars and basically were loaded before inventory.13:55
@noonedeadpunk:matrix.orgSo if you want to run smth like that in job13:56
```
- hosts: "{{ deploy_host | default('all[0]') }}"
become: true
tasks:
- name: Update ca-certificates
package:
name: ca-certificates
state: latest
update_cache: true
tags:
- skip_ansible_lint
```
@noonedeadpunk:matrix.orgThere's simply no way to define `deploy_host` so it was respected13:57
@noonedeadpunk:matrix.orgNow, in order to have different targets for post-merge tasks I can't define variable in jobs, so the 2 ways is either to copy code or do smth like13:58
```
- hosts: localhost
become: true
tasks:
- name: We need that block jsut to workaround Zuul imperfectness
delegate_to: "{{ deploy_host | default('all[0]') }}"
block:
- name: Update ca-certificates
package:
name: ca-certificates
state: latest
update_cache: true
tags:
- skip_ansible_lint
```
@clarkb:matrix.orgMy first thought is you should be using a group for that.13:59
@clarkb:matrix.orgRegardless of whether or not extra vars handling is buggy Ansible groups exist for this use case14:00
@noonedeadpunk:matrix.orgah, you mean static and abstract name of the group... And jsut add hosts there regardless...14:01
@jim:acmegating.comDmitriy Rabotyagov: i have a company that provides support for zuul, i'd be happy to talk to you about upgrading and finding solutions to issues like this!  :)  just DM me.14:02
@noonedeadpunk:matrix.orgWell, yeah, that can work. But am I right that each playbook launched independently, so I will need to create/populate that group for each playbook in run?14:02
@noonedeadpunk:matrix.orgcorvus:you did that deployment ;)14:03
@noonedeadpunk:matrix.orgbut yes, I think I need to raise deployment upgrade topic internally as well14:04
@noonedeadpunk:matrix.orgClark: thank for the idea with groups, I was not considering them from this angle14:05
@noonedeadpunk:matrix.orgI kind of knew that these groups are only in-memory, so defining it as a separate step in pre-run was not an option, so I dropped this idea away. But it's way better then block alternative anyway14:06
@clarkb:matrix.orgYou can also define group membership as part of your nodeset14:11
@jim:acmegating.comDmitriy Rabotyagov: the change to how extra-vars is handled is directly related to the security vulnerabilities that were fixed in later versions.14:20
@fungicide:matrix.org> <@clarkb:matrix.org> You can also define group membership as part of your nodeset14:22
and that persists across playbooks/phases, through the entirety of the build
@noonedeadpunk:matrix.org> <@clarkb:matrix.org> You can also define group membership as part of your nodeset14:22
well, these hosts are not part of nodepool
@fungicide:matrix.orgis this some sort of continuous deployment scenario, where the hosts are persistent? in opendev, we end up tackling that entirely with nested ansible through a deployment bastion, which the executor connects to14:24
@noonedeadpunk:matrix.orgWell, I was thinking to define them just as variables for project job, so just override vars for the job based on the repo14:26
@noonedeadpunk:matrix.orgAnd hoping to use native ansible as well after upgrade of zuul14:27
@noonedeadpunk:matrix.orgEventually, managing these hosts as static nodepool nodes also an option, but I don't really want any job to be able to access them. And when they're standalone I can use project specific ssh key that's in ssh-agent anyway14:28
@clarkb:matrix.orgadd_host allows you to specify group membership too14:30
@noonedeadpunk:matrix.orgYeah, thanks, as I explained I dropped that idea some time ago because failed to see where it's useful :D Still I think at very least documentation should be updated.14:34
@noonedeadpunk:matrix.orgI will try to push smth that explains14:34
@clarkb:matrix.orgRight I think there may be a bug here. But I wanted to decouple that specific behavior from what you are trying to accomplish. I believe what you want to do is achievable using normal Ansible groups. But without more background I can't say for sure14:38
@jim:acmegating.comthe extra vars handling is no more than exactly what it says in the docs -- it's a higher precedence normal variable.  it does not get passed to ansible as "--extra-vars".14:40
@jim:acmegating.comsee https://zuul-ci.org/docs/zuul/latest/releasenotes.html#relnotes-4-6-0-security-issues for the upgrade note14:41
@jim:acmegating.com * the extra vars handling is no more than exactly what it says in the docs -- it's a higher precedence normal variable.  it does not get passed to ansible with "-e".14:42
@clarkb:matrix.orgShould the extra vars docs be updated to indicate they don't use -e to avoid confusion?14:55
@jim:acmegating.comno objection from me14:55
-@gerrit:opendev.org- Clark Boylan proposed: [zuul/zuul] 860280: Clarify extra vars are not passed with -e https://review.opendev.org/c/zuul/zuul/+/86028016:39
@jim:acmegating.comzuul-maint: how does this look for a zuul release?17:28
commit a0ba200ba70ce137780db397d681b1c3bd071fb8 (tag: 7.0.0)
@jim:acmegating.com(i believe that's what opendev is running now)17:28
@clarkb:matrix.orgLooking at the etherpad again I guess it is just 7.1.0 that is waiting on the openstack release (so that opendev can bump to ansible 6 everywhere and give that a good testing)17:34
@jim:acmegating.comClark: yeah, and i think zuul has slowed down enough i don't think scheduling is going to be a problem  (can you paste the link? i just restarted my browser and it will save me some digging)17:36
@clarkb:matrix.orghttps://etherpad.opendev.org/p/qF7VE9HzqPVzsCyZLWxb17:36
@clarkb:matrix.orgI'm just trying to double check that sha now but otehrwise the plan sounds good to me17:37
@clarkb:matrix.orgok confirmed https://review.opendev.org/c/zuul/zuul/+/857065 was the last chagne to land before the weekend opendev updates and that merge sha maps to this change17:39
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed:18:21
- [zuul/zuul-jobs] 860293: WIP: Add ensure-pip-localhost job https://review.opendev.org/c/zuul/zuul-jobs/+/860293
- [zuul/zuul-jobs] 860294: More narrowly tailor the ensure-pip Debian workaround https://review.opendev.org/c/zuul/zuul-jobs/+/860294
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul-jobs] 860294: More narrowly tailor the ensure-pip Debian workaround https://review.opendev.org/c/zuul/zuul-jobs/+/86029418:36
@jim:acmegating.comClark: ^ that's those two changes squashed (i wanted to confirm a failing test run before the change; looks like it works as expected.18:36
@jim:acmegating.com * Clark: ^ that's those two changes squashed (i wanted to confirm a failing test run before the change; looks like it behaves as expected.18:36
@clarkb:matrix.orgok I'll review the combo now18:37
@jim:acmegating.comthx!18:37
@clarkb:matrix.orgcorvus:  is the shell task to cd into the zuul client git repo dir valid on localhost?18:39
@jim:acmegating.comClark: yes, ansible_user_dir is set to the workspace dir18:40
@jim:acmegating.com(ie, $HOME is /var/lib/zuul/build/uuid/work/)18:41
@clarkb:matrix.orginteresting18:41
@clarkb:matrix.orgthat was my only concern. I've approved it18:41
@jim:acmegating.comthanks!18:41
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul-jobs] 860296: Combine ensure-pip playbooks into a test role https://review.opendev.org/c/zuul/zuul-jobs/+/86029618:47
@jim:acmegating.comthat should make maintenance easier, at the expense of some slightly longer paths18:47
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul-jobs] 860294: More narrowly tailor the ensure-pip Debian workaround https://review.opendev.org/c/zuul/zuul-jobs/+/86029418:52
@vlotorev:matrix.org> <@jim:acmegating.com> zuul-maint: how does this look for a zuul release?22:09
> commit a0ba200ba70ce137780db397d681b1c3bd071fb8 (tag: 7.0.0)
>
Hi, any chance for nodepool release 7.0.0 sync? Last nodepool release was 6.2.0. (nodepool has a couple fixes for static nodes driver).
@jim:acmegating.comwe'll need a release note to explain the version bump (like we did for 5)22:52
@jim:acmegating.comfeel free to propose that, and we can cut the release when it's there.  or we could wait a week and just bump nodepool to 8.0.022:54
@jim:acmegating.comwould likely save doing it twice :)22:54
@jim:acmegating.comzuul v7 release email sent22:55
@vlotorev:matrix.orgIt seems to me that previously nodepool version was bumped "just to be in sync with zuul version so that it would be easier for users to recognize which zuul/nodepool versions to upgrade", but I might be wrong about that.23:27
I was not aware about nodepool 8.0 coming in a week :)
@clarkb:matrix.org> <@vlotorev:matrix.org> It seems to me that previously nodepool version was bumped "just to be in sync with zuul version so that it would be easier for users to recognize which zuul/nodepool versions to upgrade", but I might be wrong about that.23:51
>
> I was not aware about nodepool 8.0 coming in a week :)
The plan is to do zuul 8.0.0 when we drop support for Ansible 5. I think eh suggestion was to sync up nodepool at that point to avoid doing two sync up release notes

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!