Friday, 2021-09-10

opendevreviewMerged openstack/project-config master: Add the cinder-lvm charm to Openstack charms  https://review.opendev.org/c/openstack/project-config/+/80720601:16
opendevreviewOpenStack Proposal Bot proposed openstack/project-config master: Normalize projects.yaml  https://review.opendev.org/c/openstack/project-config/+/80814806:14
opendevreviewBrin Zhang proposed openstack/project-config master: Create openstack/*venus* repository  https://review.opendev.org/c/openstack/project-config/+/80814906:33
*** jpena|off is now known as jpena06:52
opendevreviewJiri Podivin proposed zuul/zuul-jobs master: DNM  https://review.opendev.org/c/zuul/zuul-jobs/+/80703108:14
opendevreviewMerged openstack/project-config master: Normalize projects.yaml  https://review.opendev.org/c/openstack/project-config/+/80814808:36
opendevreviewBrin Zhang proposed openstack/project-config master: reate openstack/*venus* repository  https://review.opendev.org/c/openstack/project-config/+/80814909:33
opendevreviewAurelien Lourot proposed openstack/project-config master: Fix missing charm-interface-ironic-api  https://review.opendev.org/c/openstack/project-config/+/80819009:36
opendevreviewDmitry Tantsur proposed openstack/diskimage-builder master: Fix debian-minimal security repos  https://review.opendev.org/c/openstack/diskimage-builder/+/80618809:36
*** elodilles_pto is now known as elodilles09:37
opendevreviewDmitry Tantsur proposed openstack/diskimage-builder master: Fix debian-minimal security repos  https://review.opendev.org/c/openstack/diskimage-builder/+/80618809:41
dtantsurhi folks! how is nodepool building images for openSUSE 15.2? DIB doesn't work with it.10:44
*** dviroel|afk is now known as dviroel11:09
fricklerdtantsur: well then likely our images are broken, let me try to look for logs11:26
dtantsurfrickler: this is what I hit: https://zuul.opendev.org/t/openstack/build/4095f54607fd4d029fe430443eca12d3/log/job-output.txt#100911:26
dtantsurlooks like they don't publish the artefact we expect11:26
*** jpena is now known as jpena|lunch11:26
dtantsurbut I'm quite sure we have 15.2 nodes in nodepool, hence my question11:27
fricklerdtantsur: from the logs at nb0[12].opendev.org it looks like we stopped buiding tumbleweed 3 months ago. no trace of 15.2 there at all11:28
fricklerdtantsur: https://download.opensuse.org/repositories/Cloud:/Images:/Leap_15.2/images/ isn't something we'd ever published anything to I'd say. looks like opensuse stopped publishing those rootfs tars with 15.211:31
fricklerdtantsur: a quick check in one of our cloud region seems to indicate the latest opensuse-15 was built less than two weeks ago, but I'm not sure yet where that did happen11:37
fricklerhmm, possibly someone did that manually? https://opendev.org/openstack/project-config/src/branch/master/nodepool/nodepool.yaml#L29311:39
fricklerianw might be able to tell more after their weekend11:39
dtantsurookay, I see, thank you frickler 11:41
*** jpena|lunch is now known as jpena12:19
opendevreviewchandan kumar proposed openstack/diskimage-builder master: Correct path for CentOS 9 stream base image  https://review.opendev.org/c/openstack/diskimage-builder/+/80681912:23
opendevreviewSorin Sbârnea proposed zuul/zuul-jobs master: Fix historical ansible-lint errors  https://review.opendev.org/c/zuul/zuul-jobs/+/80787712:28
opendevreviewSorin Sbârnea proposed zuul/zuul-jobs master: Fix historical ansible-lint errors  https://review.opendev.org/c/zuul/zuul-jobs/+/80787712:28
opendevreviewSorin Sbârnea proposed zuul/zuul-jobs master: ensure-tox: avoid using unreliable versions of tox  https://review.opendev.org/c/zuul/zuul-jobs/+/80786712:44
*** artom_ is now known as artom14:06
opendevreviewMerged openstack/diskimage-builder master: simple-init: support installing Glean from packages  https://review.opendev.org/c/openstack/diskimage-builder/+/78229914:54
opendevreviewMerged openstack/diskimage-builder master: simple-init: allow disabling DHCP fallback  https://review.opendev.org/c/openstack/diskimage-builder/+/78149114:54
opendevreviewMerged openstack/diskimage-builder master: Check and remove existing image interface configurations  https://review.opendev.org/c/openstack/diskimage-builder/+/77576215:01
*** jpena is now known as jpena|off15:47
*** marios is now known as marios|out16:14
opendevreviewGhanshyam proposed openstack/project-config master: Rename inspur/*venus* project to openstack/*venus*  https://review.opendev.org/c/openstack/project-config/+/80814916:22
opendevreviewGhanshyam proposed openstack/project-config master: Rename inspur/*venus* project to openstack/*venus*  https://review.opendev.org/c/openstack/project-config/+/80814916:37
opendevreviewGhanshyam proposed openstack/project-config master: Rename inspur/*venus* project to openstack/*venus*  https://review.opendev.org/c/openstack/project-config/+/80814916:51
clarkbgmann: ^ it is probably a good idea to have the project itself drive those changes that way they know when to expect the repo name to change16:52
gmannclarkb: sure, they asked for help as they are not aware of renaming stuff. they are in sync with the changes. 16:53
gmannI am just updating their patch to get it correct16:53
fungiclarkb: also we discussed this during the last rename, do we want to change the process to separate the zuul.d/projects.yaml change from the gerrit/projects.yaml change so the latter is testable?16:54
clarkbfungi: yes, but I think we realiezd that doing that was tricky for some reason I'm forgetting now16:55
fungibasically we get no linting of the gerrit config because zuul bails early with its config errors16:55
fungithis would probably be a good time to also mix in renaming all the osf/ namespace repos to openinfra/16:59
fungii'll try to put together a change for that16:59
*** odyssey4me is now known as Guest689617:10
opendevreviewJeremy Stanley proposed openstack/project-config master: Move osf/ namespace repos to openinfra/ namespace  https://review.opendev.org/c/openstack/project-config/+/80847917:12
opendevreviewJeremy Stanley proposed opendev/system-config master: Adjust RefStack build for osf->openinfra rename  https://review.opendev.org/c/opendev/system-config/+/80848017:18
clarkbfungi: have you had a chance to look at the notes I wrote in the comments of that gerrit user audit yaml file?17:35
clarkbcurious if anything jumped out at you, maybe better approaches to propose to users etc17:36
opendevreviewSorin Sbârnea proposed zuul/zuul-jobs master: Include tox_extra_args in tox siblings tasks  https://review.opendev.org/c/zuul/zuul-jobs/+/80661217:36
opendevreviewSorin Sbârnea proposed zuul/zuul-jobs master: Include tox_extra_args in tox siblings tasks  https://review.opendev.org/c/zuul/zuul-jobs/+/80661217:50
fungiclarkb: still looking through the entries but so far the comments in each one look like good plans18:35
fungiclarkb: oh, okay starting over, i'm not so sure about the first one in the list... looks like the older account also has more recent changes and reviews, but you're proposing to retire it. when you say "the older openid is no longer valid" what is that evaluation based on/how was it tested?18:52
clarkbfungi: ubuntu one returns a 404 when GETing or HEADing the url18:53
clarkbit isn't valid in the identity provider18:53
fungiaha, perfect thanks18:53
fungiin that case i think the plan there is fine after all ;)18:54
fungioh, i see now, the invalid_openids field18:54
fungithat's a little clearer18:54
clarkbya it is recorded there and that is determined by HEADing the url in the audit script18:54
fungiclarkb: the 4th one (line 104), for situations like that we probably need to remind them to change the username they're pushing changes with and make sure the ssh keys are correct19:00
fungibut yeah it's possible they've been pushing from two different machines and so winding up with two different accounts19:01
fungior i suppose they could be pushing with a mix of ssh and http19:02
fungiand on the 5th one (line 140) i find it interesting that neither account has pushed a change nor reviewed one. in situations like that, if we don't hear back from the user it's probably safe to just go ahead and retire whichever is older. in general i think we need a fallback plan for when we don't get any reply because i have a feeling that's going to be a majority of these19:06
Clark[m]Good point and ya I think if we get no response after a couple of weeks we proceed with a reasonable approach. Once we get these conflicts addressed we can do one off fixes easily which could include fixing those accounts in the future if the users show up19:11
fungiabsolutely19:11
fungiClark[m]: on the entry at line 451 (i've lost count, but that line number is a great bradbury reference), you say to merge the older id into the newer one, and ask the user to confirm that they see the newer id in the webui, but it looks like the newer id has never reviewed anything while the older id has reviewed a change more recently than the creation of the new id. is the recommendation to19:16
fungiask them for after we merge the accounts or before?19:16
fungibasically it looks to me like a case of they used the newer account to push changes and the older account to leave reviews in the webui19:17
fungii agree with the suggestion of merging the old id into the new account, but suspect before we merge they'll say the webui gives them the old number not the new one19:19
fungiClark[m]: for the entry at line 653, the comment says "Ask the user to confirm is the account they get through web ui login." (no account number mentioned, but i expect you meant to have one there, likely the older one)19:28
fungiClark[m]: okay, got through the list in one go this time and a better understanding of the basis for the recommendations. i'm good with all of them, just expect we'll need fallbacks for a bunch when their users are unresponsive19:36
Clark[m]The idea was to propose and ask those questions of all the users in the initial email19:52
Clark[m]And then use the info they give us to double check the proposed fixup still makes sense. And they may request the opposite which is probably fine in most cases. We just have to kill one account or the other.19:53
fungiyep19:53
*** dviroel is now known as dviroel|out21:40

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!