| opendevreview | Ching Kuo proposed opendev/system-config master: Update accessbot to Use Python 3.11 Base Images https://review.opendev.org/c/opendev/system-config/+/881161 | 03:30 |
|---|---|---|
| opendevreview | Ching Kuo proposed opendev/system-config master: Update Hound to Use Python 3.11 Base Images https://review.opendev.org/c/opendev/system-config/+/880908 | 03:32 |
| opendevreview | Ching Kuo proposed opendev/system-config master: Update Hound to Use Python 3.11 Base Images https://review.opendev.org/c/opendev/system-config/+/880908 | 03:35 |
| *** amoralej|off is now known as amoralej | 06:12 | |
| *** amoralej is now known as amoralej|lunch | 12:07 | |
| fungi | and there's the wiki.o.o cert warning e-mail | 12:13 |
| fungi | right on schedule | 12:13 |
| frickler | hmm, I was always assuming gerrit creates review IDs sequentially, but now https://review.opendev.org/c/openstack/requirements/+/881433 was created a couple of minutes after https://review.opendev.org/c/openstack/requirements/+/881466, but still has a lower number | 12:42 |
| *** amoralej|lunch is now known as amoralej | 13:12 | |
| Clark[m] | frickler: it grabs them in blocks of like ~10 and I think different threads may own a different block? | 14:00 |
| frickler | Clark[m]: that's likely newish then, like changed in recent years? | 14:04 |
| fungi | if memory serves, in 3.x they stopped promising that the change numbers would necessarily even remain unique (though they have done so far, at least as long as you only have a single active gerrit server) | 14:05 |
| fungi | which was the reason they started including the project name in change urls | 14:06 |
| Clark[m] | Yes the change occurred with notedb since they stopped being able to rely on a SQL counter incrementing automatically | 14:09 |
| clarkb | Looks like our vexxhost backup server needs pruning | 14:56 |
| *** iurygregory_ is now known as iurygregory | 15:00 | |
| fungi | yep, it's been complaining for the past few days, inching up slowly | 15:01 |
| frickler | fungi: you mentioned to drop "use-storyboard: true" for project retirements, should that be added for https://review.opendev.org/c/openstack/project-config/+/880220/1/gerrit/projects.yaml too? | 15:10 |
| fungi | it can be. saves doing cleanup later. i should do a pass through the repos with retired/read-only acls and check to see if any had use-storyboard removed earlier but weren't set to inactive in the sb database | 15:11 |
| frickler | o.k., I'll add a comment for gmann | 15:13 |
| fungi | if we're doing general cleanup of project entries during retirement, removing the "groups" from them would also make sense. should really be stripped down to a description and an acl | 15:14 |
| clarkb | infra-root I just created a quay.io app for opendevorg, used it to test the ensure-quay-repo role (it works! locally anyway), then deleted the app and the repo it created. THe quay usage log should reflect this and wanted to call it out here as actions that I took intentionally if anyone saw it and thought it looked weird | 16:10 |
| clarkb | corvus: thinking about the ensure-quay-repo in opendev/base-jobs idea a bit more: One approach would be to update the container_images input to include a registry_implementation attribute and set that to quay or docker etc. Then have the role only operate on those where this value is set to quay. Then we could add it straight into base jobs and it should just work. | 16:31 |
| clarkb | corvus: I like that appraoch because it means we can continue to use the container_images values consistently across jobs. What do you think? | 16:31 |
| *** amoralej is now known as amoralej|off | 16:36 | |
| gmann | frickler: fungi ack, will update | 16:41 |
| opendevreview | Ghanshyam proposed openstack/project-config master: Retire patrole projects: remove project from infra https://review.opendev.org/c/openstack/project-config/+/880220 | 17:50 |
| gmann | frickler: fungi ^^ | 17:50 |
| opendevreview | Merged openstack/project-config master: Retire patrole projects: remove project from infra https://review.opendev.org/c/openstack/project-config/+/880220 | 18:09 |
| opendevreview | Ian Wienand proposed openstack/project-config master: Indent Gerrit ACL options https://review.opendev.org/c/openstack/project-config/+/879906 | 19:19 |
| opendevreview | Ian Wienand proposed openstack/project-config master: tools/normalize_acl.py: Add some human readable output https://review.opendev.org/c/openstack/project-config/+/880898 | 19:19 |
| opendevreview | Merged opendev/system-config master: inventory : add Ubuntu Jammy DNS refresh servers https://review.opendev.org/c/opendev/system-config/+/880579 | 19:19 |
| ianw | infra-prod-base https://zuul.opendev.org/t/openstack/build/6808ef87e9124d8ab9fb535066186357 : FAILURE in 8m 32s | 20:10 |
| ianw | bummer, the ns changes didn't apply | 20:10 |
| ianw | afsdb01.openstack.org : ok=0 changed=0 unreachable=1 failed=0 skipped=0 rescued=0 ignored=0 | 20:12 |
| ianw | weird host to fail | 20:12 |
| ianw | i see nothing in it's log, and bridge can connect | 20:18 |
| fungi | ianw: wrong host key maybe? | 20:24 |
| fungi | oh, that's bridge to server, not zuul to bridge | 20:25 |
| fungi | still, https://review.opendev.org/880661 would be nice to land | 20:25 |
| corvus | clarkb: sorry missed that earlier; as replied in meeting, yes i think that is best, but also we should only have it run if the api key is there so that it's optional but automatic if present | 20:25 |
| corvus | (just restating here ftr) | 20:25 |
| ianw | fungi: hrm, just double checking that ... "curl https://zuul.opendev.org/api/tenant/opendev/project-ssh-key/opendev/zone-gating.dev.pub" ... is it not opendev? | 20:40 |
| ianw | (that 404's) | 20:41 |
| ianw | curl https://zuul.opendev.org/api/tenant/opendev/project-ssh-key/opendev/zone-zuul-ci.org.pub does not, for example | 20:42 |
| ianw | it does not show up as an opendev project -> https://zuul.opendev.org/t/opendev/projects | 20:51 |
| fungi | ianw: opendev/zone-gating.dev is in the openstack tenant | 20:52 |
| opendevreview | Merged opendev/system-config master: Allow opendev/zone-gating.dev project on bridge https://review.opendev.org/c/opendev/system-config/+/880661 | 20:53 |
| ianw | ok i will not think too much about this :) | 20:55 |
| ianw | anyway, good call, i will watch this next base run | 20:56 |
| ianw | that passed. so i will also not think too much about the afsdb01 failure either, i guess just got lucky with network issues | 21:02 |
| fungi | good | 21:03 |
| ianw | backup prune is done | 21:03 |
| ianw | 1007G 629G 379G 63% | 21:03 |
| fungi | thanks! | 21:04 |
| clarkb | ianw: thank you | 22:02 |
| clarkb | corvus: great I'm just sitting back down now and will be looking at making those changes momentaril | 22:02 |
| ianw | ok, we've deployed nsd on ns03/ns04 and everything remains happy. i'll watch through https://review.opendev.org/c/opendev/system-config/+/880706 which should bring them live | 22:09 |
| clarkb | ianw: ack | 22:13 |
| clarkb | I'm going to do simialr with quay to what I did earlier today and create a temporary app and use that to test the updates described above to the role | 22:13 |
| opendevreview | Clark Boylan proposed zuul/zuul-jobs master: Update ensure-quay-repo to run opportunistically https://review.opendev.org/c/zuul/zuul-jobs/+/881521 | 22:23 |
| opendevreview | Merged opendev/system-config master: dns : add Jammy refresh servers https://review.opendev.org/c/opendev/system-config/+/880706 | 22:27 |
| opendevreview | Clark Boylan proposed opendev/base-jobs master: Run ensure-quay-repo in our base container jobs https://review.opendev.org/c/opendev/base-jobs/+/881522 | 22:29 |
| opendevreview | Clark Boylan proposed opendev/system-config master: WIP Base jobs for quay.io image publishing https://review.opendev.org/c/opendev/system-config/+/881285 | 22:31 |
| clarkb | corvus: ^ ok I thik that stack of three changes does what I described in the meeting | 22:32 |
| ianw | clarkb: i think having the api type in there is probably good, but perhaps we should also update https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/remove-registry-tag/README.rst?display=source#L77 so it works the same? | 23:09 |
| clarkb | ianw: ya just set them all to registry_type so that it is consistent and generic? | 23:13 |
| clarkb | do you want me to push that up? | 23:13 |
| ianw | feel free; i think that this is so new changing it won't be a problem at this point | 23:13 |
| ianw | better to have consistency | 23:13 |
| opendevreview | Clark Boylan proposed zuul/zuul-jobs master: Use consistent registry_type var name across roles https://review.opendev.org/c/zuul/zuul-jobs/+/881524 | 23:19 |
| clarkb | something like that? | 23:19 |
| ianw | clarkb: i wonder if we should put it in container_registry_credentials? | 23:25 |
| clarkb | hrm ya that could work since its part of the registry itself and not the image | 23:25 |
| clarkb | I'll probably have to pick that refactor up in the morning though. But feel free to -1 both changes and give that suggestion I think that is a good way to do it | 23:26 |
| ianw | we could basically autoguess is ^quay.io/.*$, but if you're running your own private quay you'd have to explicitly specify "this uses the quay api" | 23:26 |
| ianw | i imagine we could also add artifactory, etc., but it would be a central point | 23:26 |
| clarkb | ya and ther are many more implementations out there at this point too | 23:27 |
| ianw | dig @ns03.opendev.org opendev.org seems to work for me | 23:35 |
| clarkb | agreed I can resolve opendev.org records against that host | 23:36 |
| ianw | yep per matrix i've done a manual xfer on both ns03 & ns04 just to ensure everything; both have pulled the 5 zones we manage | 23:47 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!