Tuesday, 2023-12-05

@clarkb:matrix.orgI've written a Zuul annual report draft here: https://etherpad.opendev.org/p/2023-zuul-annual-report corvus I think you made the note about highlighting the number of zero downtime upgrades. Were you thinking about calling out that OpenDev has done those weekly now for a year? Not sure I have access to any additional info but hapyp to add that somewhere if I've interpretted it correctly01:05
@clarkb:matrix.orgI definitely feel like my writing here could use some work, but figured getting soemthing drafted taht can be refined was better than just being frustrated I wasn't entirely happy with all of it01:06
@jim:acmegating.comClark: yeah, opendev what i was thinking -- as a public exemplar.  thanks for doing that, i'll take a look tomorrow01:36
-@gerrit:opendev.org- Jeremy Stanley https://matrix.to/#/@fungicide:matrix.org proposed wip: [opendev/zone-zuul-ci.org] 902690: Add an SPF record for the listserv https://review.opendev.org/c/opendev/zone-zuul-ci.org/+/90269014:48
-@gerrit:opendev.org- Jeremy Stanley https://matrix.to/#/@fungicide:matrix.org proposed wip: [opendev/zone-zuul-ci.org] 902690: Add an SPF record for the listserv https://review.opendev.org/c/opendev/zone-zuul-ci.org/+/90269015:09
@jim:acmegating.comi believe ansible 2.15.7 (ansible 8) just released and causes a breaking behavior change in zuul17:42
@jim:acmegating.comprobably this https://github.com/ansible/ansible/blob/stable-2.15/changelogs/CHANGELOG-v2.15.rst#security-fixes17:42
@clarkb:matrix.orgcorvus: should we cautiously disable the auto deployment of zuul in opendev (since it will pull in newer images)17:43
@clarkb:matrix.orgI guess we have until the end of friday to do that so aren't in a rush and can focus on a fix first17:43
@fungicide:matrix.orghow is that behavior change manifesting in zuul? any ideas?17:44
@jim:acmegating.comClark: couldn't hurt.  it released 19 hours ago, and we haven't merged a change since then, so no image updates17:44
@jim:acmegating.comfungi: this test failure: (something about zuul vars and unsafe templating): https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_f9f/902601/1/check/zuul-nox-py311/f9f8a76/testr_results.html17:44
@jim:acmegating.comi haven't worked out the implications yet17:44
@jim:acmegating.comClark: actually, no need to disable opendev deployment17:45
@jim:acmegating.comsince we aren't going to be merging any changes that would cause an image build without addressing this.  :)17:45
@jim:acmegating.comyay gating17:45
@fungicide:matrix.org"The conditional check \'zuul.project.name == \'{{ (zuul | zuul_legacy_vars).ZUUL_PROJECT }}\'\' failed. The error was: Conditional is marked as unsafe, and cannot be evaluated."17:45
@fungicide:matrix.orgthat?17:45
@jim:acmegating.comyep that17:46
@jim:acmegating.comi'm going to go try to untangle whether that's a good thing or bad now.  :)17:46
@clarkb:matrix.orgthank you for the heads up!17:49
@jim:acmegating.comthis is the change https://github.com/ansible/ansible/pull/8229417:52
@jim:acmegating.comthat change says -- `assert - Nested templating may result in an inability for the conditional to be evaluated. See the porting guide for more information.`17:55
@jim:acmegating.combut i don't find the words `assert` or `nested` in https://docs.ansible.com/ansible/latest/porting_guides/porting_guide_8.html17:55
@jim:acmegating.comi think we just need to drop the {{}}17:58
-@gerrit:opendev.org- James E. Blair https://matrix.to/#/@jim:acmegating.com proposed: [zuul/zuul] 902707: Remove nested templates from assert in tests https://review.opendev.org/c/zuul/zuul/+/90270718:00
@jim:acmegating.comClark: fungi ^ the way i'm reading this is that this is a mostly surface-level change for us -- in that it's a small adjustment we need to make to our unit tests, and it does not require any kind of structural change to how we deal with unsafe vars, etc.  Users may need to make similar changes in their playbooks, but the connection to zuul is tenuous here (we just happened to notice this because we have some ancient assert strings that are checking zuul variables, but this could happen to any ansible variable evaluation, zuul or not)18:03
@clarkb:matrix.orgthe ambiguity of what is and isn't interpretted as jinja is one of my frustrations with ansible. I'm guessing others have confusion about that too and ya we shoudl expect at least some fallout. At least the fix issimple18:04
@jim:acmegating.comi'm not sure if we want to include a release note?  we don't normally do anything for minor ansible point releases, but maybe since we happen to have noticed this one we should call it out?  i don't want to create an expectation that we're going to vet or summarize ansible releases in the future though....18:04
@jim:acmegating.comor maybe we could just send a note to zuul-discuss giving folks a heads up18:04
@clarkb:matrix.orga note to zuul-discuss seems like a good idea18:04
@jim:acmegating.comi'll fire that off now18:05
@jim:acmegating.comhttps://docs.ansible.com/ansible-core/2.15/porting_guides/porting_guide_core_2.15.html18:05
@jim:acmegating.comoh apparently *that's* the porting guide i should have been looking at18:05
@jim:acmegating.commail sent: https://lists.zuul-ci.org/archives/list/zuul-discuss@lists.zuul-ci.org/thread/C7A2U7HGVH2W6NV2IPCQP6KAHOZKOMXX/18:14
@jim:acmegating.comI think we can/should approve that unit test change, and that will give us images with updated ansible 8.18:15
@fungicide:matrix.orgi agree, seems surprisingly straightforward. thanks for running it down!18:20
@fungicide:matrix.orgi'll keep an eye out for reports of new job failures in opendev's deployment next week18:21
@fungicide:matrix.organd can refer them to the zuul-discuss post18:21
-@gerrit:opendev.org- Zuul merged on behalf of James E. Blair https://matrix.to/#/@jim:acmegating.com: [zuul/zuul] 902707: Remove nested templates from assert in tests https://review.opendev.org/c/zuul/zuul/+/90270719:34
-@gerrit:opendev.org- Jeremy Stanley https://matrix.to/#/@fungicide:matrix.org marked as active: [opendev/zone-zuul-ci.org] 902690: Add an SPF record for the listserv https://review.opendev.org/c/opendev/zone-zuul-ci.org/+/90269019:47
-@gerrit:opendev.org- Zuul merged on behalf of Jeremy Stanley https://matrix.to/#/@fungicide:matrix.org: [opendev/zone-zuul-ci.org] 902690: Add an SPF record for the listserv https://review.opendev.org/c/opendev/zone-zuul-ci.org/+/90269020:03
@clarkb:matrix.orgcorvus: I've updated the zuul annual report document with a paragraph about the rolling restart achievement22:01
@jim:acmegating.comClark: looks good; i made some editorial changes based on your invitation yesterday, but i tried to keep it light.  if there's still anything else you're not thrilled about, let me know and i can try to focus more.22:15
@clarkb:matrix.orgcorvus: will do I need to reread with fresh eyes probably tomorrow then can decide if anything else needs tightening up22:16

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!