| *** liuxie is now known as liushy | 07:24 | |
| mnasiadka | hello | 10:28 |
|---|---|---|
| mnasiadka | regarding openstack/magnum-capi-helm - what's required for the repo to be synced to github? | 10:28 |
| mnasiadka | (the governance patch is not yet merged, maybe that's the one? https://review.opendev.org/c/openstack/governance/+/910240) | 10:28 |
| frickler | mnasiadka: https://opendev.org/openstack/openstack-zuul-jobs/src/branch/master/zuul.d/project-templates.yaml#L3475-L3489 you'll need to add that template to the definition of your project. technically you could do that right now, but I think it would be better to depend on the governance patch | 11:29 |
| mnasiadka | frickler: thanks | 11:34 |
| mnasiadka | I see usually project get this from project-config repo definition, but I can add that locally as well | 11:35 |
| frickler | mnasiadka: hmm, maybe this indeed needs to go into project-config because of the use of secrets | 12:04 |
| fungi | yes, it needs to be added from project-config if using the shared openstack org account secret we have there | 12:24 |
| mnasiadka | ok | 12:28 |
| mnasiadka | I'll post a patch with depends-on on the governance patch | 12:29 |
| frickler | fungi: I've been thinking about this, at which location does zuul actually prevent the project-template being applied from within a different repo? | 12:29 |
| *** dhill is now known as Guest3079 | 12:34 | |
| fungi | frickler: for project templates, i'm not sure. the job definition/playbooks have to be in the same repo as the secret | 13:03 |
| fungi | the reason the openstack standard templates are applied centrally is so that teams can't opt out of or accidentally disable required jobs | 13:05 |
| frickler | fungi: required jobs makes sense, I was more thinking along the lines of what prevents repos from running that job when maybe they shouldn't, because they aren't included in governance | 13:13 |
| frickler | otoh the question then becomes: how to we ensure that repos do actually get configured with required jobs and that step is not forgotten during project creation | 13:14 |
| fungi | "If a job with secrets is unsafe to be used by other projects, the job.allowed-projects attribute can be used to restrict the projects which can invoke that job. If a job with secrets is defined in an untrusted-project, allowed-projects is automatically set to that project only, and can not be overridden (though a config-project may still add the job to any project’s pipeline regardless of | 13:16 |
| fungi | this setting; do so with caution as other projects may expose the source project’s secrets)." https://zuul-ci.org/docs/zuul/latest/config/secret.html | 13:16 |
| opendevreview | Caio proposed openstack/project-config master: Add app-rook-ceph project to StarlingX https://review.opendev.org/c/openstack/project-config/+/913560 | 13:24 |
| opendevreview | Caio proposed openstack/project-config master: Add app-rook-ceph project to StarlingX https://review.opendev.org/c/openstack/project-config/+/913560 | 13:24 |
| opendevreview | Caio proposed openstack/project-config master: Add app-rook-ceph project to StarlingX https://review.opendev.org/c/openstack/project-config/+/913560 | 13:58 |
| opendevreview | Caio proposed openstack/project-config master: Add app-rook-ceph project to StarlingX https://review.opendev.org/c/openstack/project-config/+/913560 | 14:07 |
| fungi | infra-root: when folks are awake/around, how do you feel about a git-review 2.4.0 on the current tip of master with this list of release notes? https://docs.opendev.org/opendev/git-review/latest/releasenotes.html | 14:47 |
| fungi | were there any outstanding changes up for review which you feel should also be decided before we go ahead with a release? | 14:47 |
| clarkb | fungi: my preference would be to do a release with whatever is merged then work towards anothe release if we want to. I think delaying only becomes a self perpetuating problem. b65c3c201c0a495f19cc4757f969119f8a65385a tagged as 2.4.0 lgtm | 15:04 |
| clarkb | I'm doing local updates and then reboots but then would also like to pick up and finish the centos 7 cleanup | 15:09 |
| clarkb | then I have to prep for meetings tomorrow and maybe tomorrow is a good day for the MFA update | 15:10 |
| fungi | yeah, just need to decide if it's before or after the meeting | 15:10 |
| fungi | also you and i do have rather a lot of meetings tomorrow, i think? wonder if wednesday would be better | 15:11 |
| clarkb | ya tuesday is the big meeting day. wednesday may be easier afterall | 15:12 |
| clarkb | https://review.opendev.org/c/opendev/system-config/+/913453 is the first change in centos 7 mirror cleanups. The followup is failing CI (glad I got that started friday) so I'll dig into that now | 15:30 |
| clarkb | I think we can land the first change without a working second change as its just additional opensuse cleanups in the second change | 15:31 |
| fungi | lgtm | 15:34 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Cleanup opensuse mirroring configs entirely https://review.opendev.org/c/opendev/system-config/+/913454 | 15:34 |
| opendevreview | Merged opendev/infra-manual master: Document Gerrit service SSH host key fingerprints https://review.opendev.org/c/opendev/infra-manual/+/894934 | 15:54 |
| clarkb | I've added an agnead item to gerrit's april 4 community meeting to figure out this reindexing problem on gerrit 3.9 | 16:00 |
| clarkb | I don't want to upgrade if we can't reindex safely | 16:00 |
| opendevreview | Merged opendev/system-config master: Clean up unused Rackspace password test values https://review.opendev.org/c/opendev/system-config/+/911958 | 16:03 |
| fungi | makes sense, thanks! | 16:03 |
| opendevreview | Merged opendev/lodgeit master: Support Pillow v10 https://review.opendev.org/c/opendev/lodgeit/+/909618 | 16:03 |
| opendevreview | Merged opendev/system-config master: Deduplicate Rackspace control plane API keys https://review.opendev.org/c/opendev/system-config/+/912632 | 16:21 |
| opendevreview | Merged opendev/system-config master: Add backups for the new Keycloak server https://review.opendev.org/c/opendev/system-config/+/908359 | 16:21 |
| opendevreview | Merged opendev/system-config master: Clarify testinfra socket name for keycloak rdbms https://review.opendev.org/c/opendev/system-config/+/908364 | 16:21 |
| opendevreview | Merged opendev/system-config master: Stop mirroring CentOS 7 packages https://review.opendev.org/c/opendev/system-config/+/913453 | 16:21 |
| fungi | mirror01.regionone.osuosl tanked a infra-prod-base deploy a few minutes ago, looks like maybe a problem with our ubuntu-ports package indices having mismatched checksums | 16:44 |
| fungi | i'm investigating | 16:44 |
| clarkb | the centos mirror cron runs at 43 */6 * * * which should start in just about 2 hours | 16:44 |
| fungi | oh, never mind, not a problem with indices on our mirror network, it complained about http://ddebs.ubuntu.com/dists/focal-updates/main/binary-arm64/Packages.xz | 16:45 |
| clarkb | if we like I can grab the lock and run it manually now, but I'm somewhat inclined to let it happen automatically since the rsync'd mirrors don't generally need hand holding | 16:45 |
| fungi | but i can apt update on it now and no errors, so this was hopefully an isolated incident | 16:46 |
| fungi | yeah, i'd just let the rsync run as scheduled and check on it later. there's nothing critical there anyway, just cleaning up packages no jobs could be using (short of someone doing things in a chroot from a newer distro, which while possible is unlikely) | 16:47 |
| clarkb | oh that reminds me I didn't remove dib centos 7 image build testing but it is possible those jobs use our mirrors | 16:50 |
| clarkb | I think we can fix that after the fact if necessary | 16:50 |
| clarkb | and update the jobs to use upstream mirrors | 16:50 |
| fungi | yeah | 16:52 |
| opendevreview | Michal Nasiadka proposed openstack/project-config master: Add magnum-capi-helm jobs https://review.opendev.org/c/openstack/project-config/+/913585 | 16:52 |
| mnasiadka | fungi: the zuul config error on ^^ looks a bit weird? | 16:58 |
| frickler | mnasiadka: that's a different zuul, not ours. we should likely get around to blocking those one day | 16:58 |
| mnasiadka | oh crap, hasn't noticed :) | 16:59 |
| mnasiadka | err, haven't | 16:59 |
| fungi | yeah, ignore that for now | 16:59 |
| fungi | someone misconfigured a (cinder?) thhird-party ci system | 17:00 |
| clarkb | I sent email to the address listed for storpool ci back in september and got no response. I think we can disable their account if we want to at this point | 17:03 |
| frickler | clarkb: I tend to agree, maybe add it to the meeting agenda? or "just do it"? | 17:07 |
| clarkb | frickler: I think if rosmaita doesn't have a good contact we can just do it then status log that we did it | 17:08 |
| opendevreview | Merged openstack/project-config master: Add magnum-capi-helm jobs https://review.opendev.org/c/openstack/project-config/+/913585 | 17:14 |
| clarkb | looks like centos 7 was cleaned up | 19:10 |
| clarkb | I don't see the cron job still running and it is out of the mirror listing at https://mirror.bhs1.ovh.opendev.org/centos/ | 19:11 |
| clarkb | grafana should confirm in a bit ( think it runs at the half hour) | 19:11 |
| clarkb | and dmesg looks clear on afs01.dfw | 19:11 |
| clarkb | today is one of our last false spring days remaining before we go back to rain so I'm going to head out on a bike ride soon. fungi were you planning to push the git-review tag? | 19:14 |
| clarkb | when I get back I'll work on the meeting agenda | 19:14 |
| fungi | clarkb: yeah, i was hoping to hear back from other folks, but i'll put the release and announcement together shortly | 19:19 |
| fungi | have a good ride! | 19:19 |
| frickler | ah, I checked the renos, but missed to answer, +1 on the git-review release | 19:34 |
| fungi | thanks frickler! | 19:45 |
| fungi | release job is now running for git-review 2.4.0 | 20:12 |
| fungi | it's on pypi now | 20:14 |
| fungi | still putting the release announcement together | 20:14 |
| fungi | release announcement sent (and received) | 20:23 |
| clarkb | I see it | 21:45 |
| opendevreview | Jay Faulkner proposed openstack/diskimage-builder master: WIP: Enable consumption of binary packages for gentoo https://review.opendev.org/c/openstack/diskimage-builder/+/913602 | 21:57 |
| clarkb | I've just updated the meeting agenda. Anything else to add to that? | 22:00 |
| opendevreview | Jay Faulkner proposed openstack/diskimage-builder master: WIP: Enable consumption of binary packages for gentoo https://review.opendev.org/c/openstack/diskimage-builder/+/913602 | 22:04 |
| opendevreview | Jay Faulkner proposed openstack/diskimage-builder master: WIP: Enable consumption of binary packages for gentoo https://review.opendev.org/c/openstack/diskimage-builder/+/913602 | 22:11 |
| fungi | clarkb: i have nothing else | 22:15 |
| clarkb | centos mirror disk usage dropped as expected. I still see a fair bit of opensuse volume content according to grafana. Not sure what that is | 22:37 |
| corvus | clarkb: https://review.opendev.org/c/zuul/nodepool/+/910289 merged and might be worth mentioning or discussing in the meeting | 22:41 |
| clarkb | I'll add it | 22:48 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Cleanup opensuse mirroring configs entirely https://review.opendev.org/c/opendev/system-config/+/913454 | 22:50 |
| opendevreview | Clark Boylan proposed opendev/system-config master: Update opensuse mirror script to more completely clean up https://review.opendev.org/c/opendev/system-config/+/913608 | 22:50 |
| clarkb | That should do more proper cleanup of the opensuse volume | 22:50 |
| clarkb | oh I just sent the agenda out and then remember that etherpad got a 2.0.0 and 2.0.1 release | 23:30 |
| clarkb | I hope that isn't too painful to upgrade to. Might be best to wait for after the ptg though | 23:30 |
| clarkb | and gitea got a 1.21.8 release if anyone has time for that. If not I'll try to get that rolling | 23:30 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!