| clarkb | ianw: nodepool applies a regex filter on the flavor name matches iirc | 00:43 |
|---|---|---|
| clarkb | we might need something like opendev$ in that field | 00:44 |
| ianw | clarkb: i don't think it does, it's just "in"; but i am proposing we sort it alphabetically | 00:46 |
| clarkb | ah | 00:48 |
| clarkb | last call on meeitng agenda updates. I'm going to send that out shortly | 00:49 |
| *** soniya29|rover is now known as soniya29|rover|brb | 07:12 | |
| *** soniya29|rover|brb is now known as soniya29|rover | 08:15 | |
| *** ysandeep is now known as ysandeep|lunch | 08:19 | |
| *** jpena|off is now known as jpena | 08:21 | |
| *** soniya29|rover is now known as soniya29|rover|lunch | 09:16 | |
| *** ysandeep|lunch is now known as ysandeep | 10:09 | |
| *** soniya29|rover|lunch is now known as soniya29|rover | 10:44 | |
| *** rlandy|out is now known as rlandy | 11:14 | |
| *** dviroel|out is now known as dviroel | 11:44 | |
| *** gthiemon1e is now known as gthiemonge | 12:40 | |
| fungi | rackspace notified us that our trove instance named "zuul-v3" experienced an unplanned outage. am i correct in my assumption that it's safe for us to delete that now? | 13:29 |
| *** obondarev_ is now known as obondarev | 14:02 | |
| *** dasm|off is now known as dasm | 14:07 | |
| *** ysandeep is now known as ysandeep|out | 14:28 | |
| *** soniya is now known as soniya|rover | 14:34 | |
| *** dviroel is now known as dviroel|lunch | 15:28 | |
| Tengu | fungi, clarkb heya! would it be possible to get https://review.opendev.org/c/opendev/system-config/+/869819 in (ansible-galaxy proxy). fungi I've answer your comment about the CacheIgnoreQueryString - imho it's safe and isolated enough | 15:37 |
| Tengu | the context for this setting is: server config, virtual host | 15:38 |
| fungi | yeah, i forgot that this was a dedicated vhost section (due to the path gymnastics) | 15:38 |
| Tengu | :) | 15:38 |
| Tengu | yeah, sorry for that one | 15:38 |
| fungi | no worries | 15:38 |
| Tengu | I tried to check what was going on in the other vhosts, it *should* be good as-is. | 15:38 |
| Tengu | but my knowledge about mod_cache is rusted. | 15:38 |
| Tengu | to not say "close to null" | 15:39 |
| fungi | anyway, i've already voted +2 on it, just hoping to get a second infra-root sysadmin to check it's sensible | 15:39 |
| Tengu | so getting a good review on that would be great | 15:39 |
| Tengu | fungi: sure :) | 15:39 |
| NeilHanlon | well, it's not a +2 but ya can have my +1 on it. seems sane to me | 15:44 |
| corvus | fungi: re zuul-v3 -- how do we map the name of the trove instance to the dburi used in zuul.conf? | 15:50 |
| *** soniya|rover is now known as soniya|rover|out | 15:52 | |
| fungi | corvus: i think i can find it through the api. that said, i didn't realize we were still using trove for the schedulers now | 15:54 |
| fungi | but maybe we never moved off of it | 15:54 |
| corvus | fungi: yeah, `grep dburi /etc/zuul/zuul.conf` on a scheduler will show the uri (i don't want to paste here since i think we decided that we should keep even the hostnames secret) | 16:13 |
| corvus | but it does appear to be a trove instance so i think we should double check | 16:13 |
| fungi | yep, did you happen to notice any errors related to database disconnects? i can dig once i get a moment for a context switch | 16:14 |
| corvus | i only checked that it's working now, let me try the logs | 16:14 |
| fungi | yeah, i've been merging things successfully at least | 16:15 |
| corvus | fungi: sql reporting errors around 14:55 jan 16 | 16:15 |
| corvus | 14:52 -- 14:55 | 16:17 |
| corvus | ([Errno 111] Connection refused) | 16:18 |
| corvus | that's in /var/log/zuul/zuul.log.1 on zuul01 | 16:18 |
| fungi | Date: Mon, 16 Jan 2023 14:24:18 +0000 | 16:19 |
| fungi | that's when we first got notified | 16:19 |
| fungi | Date: Mon, 16 Jan 2023 16:48:12 +0000 | 16:20 |
| fungi | is when we were notified of it being fixed | 16:20 |
| fungi | interesting that our errors were after it was supposedly fixed, but maybe it took that long for the connection tim timeout and get reset | 16:20 |
| fungi | er, connection to timeout | 16:21 |
| *** marios is now known as marios|out | 16:29 | |
| *** dviroel|lunch is now known as dviroel | 16:35 | |
| opendevreview | Clark Boylan proposed opendev/system-config master: Run mirror-update scripts with no timeout by default https://review.opendev.org/c/opendev/system-config/+/840214 | 17:00 |
| clarkb | fungi: ^ thank you for reviews on some of those older changes. I think another one needs a rebase too. Will try to get that cleaned up this morning too | 17:00 |
| fungi | clarkb: looking back through some older changes, that one may also be redundant with https://review.opendev.org/770706 | 17:02 |
| fungi | or, no, i'm thinking of https://review.opendev.org/857519 | 17:03 |
| clarkb | ah ya that takes a different appraoch but both should work. Looks like ianw's is simpler. I'm happy to review that one instead | 17:04 |
| *** jpena is now known as jpena|off | 17:26 | |
| opendevreview | Clark Boylan proposed opendev/system-config master: Update Gitea to 1.17.4 https://review.opendev.org/c/opendev/system-config/+/870850 | 18:17 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Update gitea to 1.18.1 https://review.opendev.org/c/opendev/system-config/+/870851 | 18:17 |
| clarkb | this was something I meant to catch up on after the holidays then got sick and completely forgot. I've remembered now :) | 18:17 |
| clarkb | the 1.17.4 upgrade should be straightforward. THe 1.18 upgrade deserves more careful review | 18:17 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Explicitly install jmespath alongside ansible on bridge https://review.opendev.org/c/opendev/system-config/+/843330 | 18:23 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Up openafs client -stat value https://review.opendev.org/c/opendev/system-config/+/857520 | 18:24 |
| fungi | new git security updates! | 18:53 |
| fungi | https://www.openwall.com/lists/oss-security/2023/01/17/4 | 18:55 |
| *** Tengu7 is now known as Tengu | 18:59 | |
| NeilHanlon | yayyyy | 19:22 |
| fungi | everybody loves security holes in their tools. at least i know i do | 19:24 |
| NeilHanlon | swiss _is_ my favourite cheese | 19:25 |
| NeilHanlon | goes with the holes in my firewall rules | 19:25 |
| opendevreview | Merged opendev/system-config master: mirror-update: make jobs interactive by default https://review.opendev.org/c/opendev/system-config/+/857519 | 19:27 |
| opendevreview | Merged openstack/project-config master: Add FIPS job for ubuntu https://review.opendev.org/c/openstack/project-config/+/867112 | 19:45 |
| *** rlandy is now known as rlandy|brb | 19:50 | |
| clarkb | ianw: I've approved the mailman2 apache vhost update. THank you for adding the sites-enabled content to log collection, made checking things super easy | 19:55 |
| ianw | ok, thanks. i'll go add the right variable to bridge now | 19:57 |
| *** dviroel_ is now known as dviroel|afk | 19:57 | |
| ianw | clarkb: https://review.opendev.org/q/topic:save-published-logs was two others that came out of that ACL thing as well; that should save manage-projects runs locally and stop us creating empty files | 20:06 |
| opendevreview | Merged opendev/system-config master: mailman: add variable for matching UAs in Apache https://review.opendev.org/c/opendev/system-config/+/869779 | 20:23 |
| *** rlandy|brb is now known as rlandy | 20:43 | |
| clarkb | ianw: I approved the first change in that topic but only +2'd the second since it affects when things are encrypted. I wasn't sure how to verify that is working: https://review.opendev.org/c/opendev/system-config/+/869892 ? | 21:13 |
| clarkb | it should be fine though because either we encrypt or we don't have log files and that should prevent accidental disclosure | 21:13 |
| clarkb | ianw: anyway when you have time to apply judgement to that feel free to approve or point me at how it is tested | 21:27 |
| opendevreview | Merged opendev/system-config master: infra-prod: save run logs even if being published https://review.opendev.org/c/opendev/system-config/+/869891 | 21:36 |
| ianw | clarkb: yeah i think that only affects production and only the manage-projects job | 22:05 |
| ianw | (as that's the only one with the publish flag). i.e. i think just monitor that is the testing :) | 22:06 |
| ianw | clarkb: dropped an idea on a stamp-file thing for the reindex upgrade with https://review.opendev.org/c/opendev/system-config/+/870114 ... but i'm open to the suggestion it's over-engineering something we can manage manually | 22:57 |
| clarkb | I also wonder if it is strictly required to do an offlien reindex. I found a bunch of issues in the docs around submit requirements which makes me generally skeptical | 22:59 |
| opendevreview | Merged opendev/system-config master: infra-prod: don't encrypt logs if they are being published https://review.opendev.org/c/opendev/system-config/+/869892 | 23:04 |
| opendevreview | Merged opendev/system-config master: Correct (again) how ansible-galaxy proxy is configured https://review.opendev.org/c/opendev/system-config/+/869819 | 23:08 |
| ianw | yeah, not sure, agree sometimes the instructions around that have been unclear | 23:09 |
| opendevreview | Clark Boylan proposed opendev/jeepyb master: Add launchpadlib as a dep https://review.opendev.org/c/opendev/jeepyb/+/870873 | 23:23 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Build Gerrit on top of our python-base images https://review.opendev.org/c/opendev/system-config/+/870874 | 23:26 |
| opendevreview | Ian Wienand proposed openstack/project-config master: linaro-us : set max-servers to 0 https://review.opendev.org/c/openstack/project-config/+/870876 | 23:41 |
| clarkb | we'll need to merge the 3.5 drop change before I can accurately test if gerrit under java 17 is happy (since they share the base image) | 23:49 |
| clarkb | I guess I can push a change up for that and let it fail | 23:49 |
| fungi | infra-prod-service-mirror failed deploying the ansible-galaxy proxy change: https://zuul.opendev.org/t/openstack/build/4cc4d1a62cea44aaacd4b11da13171ad | 23:52 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Switch Gerrit to Java 17 https://review.opendev.org/c/opendev/system-config/+/870877 | 23:55 |
| clarkb | fungi: mirror01.regionone.linaro.opendev.org was unreachable | 23:56 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!