Wednesday, 2019-04-10

*** tjgresha has quit IRC00:00
*** mattw4 has quit IRC00:03
*** betherly has quit IRC00:04
*** armax has joined #openstack-infra00:10
*** sthussey has quit IRC00:14
anteayait's hard to get the wheels through the crust on the snowmower00:17
*** rkukura has quit IRC00:18
*** Goneri has quit IRC00:22
*** tbachman has quit IRC00:23
*** lseki has quit IRC00:34
*** yamamoto has joined #openstack-infra00:48
*** tbachman has joined #openstack-infra00:51
*** yamamoto has quit IRC00:51
*** yamamoto has joined #openstack-infra00:58
*** yamamoto has quit IRC01:03
*** gyee has quit IRC01:03
TheJuliaquestion folks, where does multi-node-bridge get invoked, or where should it be invoked?01:10
openstackgerritMerged openstack-infra/log_processor master: Replace openstack.org git:// URLs with https://  https://review.openstack.org/64645601:11
*** betherly has joined #openstack-infra01:11
openstackgerritMerged openstack-infra/infra-ansible master: Replace openstack.org git:// URLs with https://  https://review.openstack.org/64638701:12
openstackgerritMerged openstack-infra/groups-static-pages master: Replace openstack.org git:// URLs with https://  https://review.openstack.org/64637801:12
*** whoami-rajat has joined #openstack-infra01:12
TheJuliaI can see multi-node-firewall is getting invoked on a grenade run, but multi-node-bridge is not triggering01:13
clarkbTheJulia: I think the devstack base job(s) invoke it01:13
TheJuliathey... seem... to only be configured for multi-node-firewall01:13
openstackgerritMerged openstack-infra/gerritbot master: Replace openstack.org git:// URLs with https://  https://review.openstack.org/64634601:13
TheJuliawhich seems... weird01:13
*** gregoryo has joined #openstack-infra01:14
*** betherly has quit IRC01:16
clarkbya codesearch doesnt show it being used by devstack. We must not test nova net or neutron dvr multinode01:17
TheJuliaI wonder how ironic worked until ~3 days ago01:17
clarkboh wait maybe devstack inherits the mulyinode job?01:18
*** mriedem has quit IRC01:18
TheJuliait does01:18
clarkbhttp://git.openstack.org/cgit/openstack-infra/zuul-jobs/tree/playbooks/multinode/pre.yaml01:18
TheJuliahttp://git.openstack.org/cgit/openstack-infra/openstack-zuul-jobs/tree/playbooks/legacy/multinode-networking/pre.yaml is all that gets parsed01:18
clarkbok that is where it comes from then01:18
clarkbthe legacy jobs run devstack-gate whoch sets up the bridge on those jobs01:18
TheJuliahmmmm01:19
clarkband the non legacy jobs inherit the multinode "base" job01:19
*** eernst has joined #openstack-infra01:20
*** jamesmcarthur has joined #openstack-infra01:20
* TheJulia goes back to logs to see if https://github.com/openstack-infra/devstack-gate/blob/63e5e1dd9638173a8f959be07842e445bafcc837/playbooks/ovs_vxlan_bridge.yaml is getting parsed01:20
*** jamesmcarthur has quit IRC01:23
TheJuliahmmmm01:24
*** openstackgerrit has quit IRC01:30
*** eernst has quit IRC01:30
*** openstackgerrit has joined #openstack-infra01:34
openstackgerritMerged openstack-infra/storyboard master: Replace openstack.org git:// URLs with https://  https://review.openstack.org/64714901:34
TheJuliaclarkb: I think I've got it, the name was hard coded to devstack-gate incompatible and because it only really mattered for grenade once on a stable branch.. *boom*01:42
*** roman_g has quit IRC01:44
ianwmnaser: not really sure what you mean on https://review.openstack.org/#/c/646851 about merging will create other issues01:45
*** nicolasbock has quit IRC01:45
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Dockerfile: add support for arbritary uid  https://review.openstack.org/65142401:45
ianwother that that, can draw a line under the git:// -> https:// conversion at this point.  as discussed i've merged the outstanding changes; the only remaining ones are a merge failure and a couple that were rebased ontop of other changes that haven't merged01:47
*** yamamoto has joined #openstack-infra01:47
clarkbTheJulia: the name of the bridge?01:49
TheJuliaclarkb: yup!01:49
*** betherly has joined #openstack-infra01:53
ianwso a bunch of the arm64 images have now been deleting for 15 hours ... i'm guessing something's gone wrong there01:54
*** betherly has quit IRC01:57
*** eernst has joined #openstack-infra02:03
fungiokay, tc office hour and first contact sig meeting are over, i'll take a stab at resetting and recording these passwords for ewr1 now02:04
*** ijw has quit IRC02:06
ianwfungi: could you poke at https://review.openstack.org/#/c/651388/ and i'll watch it through ... we should have a LE staging cert pop out when that's in02:07
ianwi will manually delete the self-signed certs that we don't want on graphite0102:07
*** bhavikdbavishi has quit IRC02:11
fungiianw: that's an excellent improvement, approved!02:18
*** rkukura has joined #openstack-infra02:27
*** hongbin has joined #openstack-infra02:29
*** owalsh_ has joined #openstack-infra02:34
*** eernst has quit IRC02:34
*** owalsh has quit IRC02:34
*** eernst has joined #openstack-infra02:34
*** adriant has joined #openstack-infra02:38
*** yamamoto has quit IRC02:40
*** eernst has quit IRC02:41
*** eernst has joined #openstack-infra02:41
*** yamamoto has joined #openstack-infra02:41
openstackgerritMerged openstack-infra/system-config master: letsencrypt: split staging and self-signed generation  https://review.openstack.org/65138802:44
*** betherly has joined #openstack-infra02:45
*** betherly has quit IRC02:50
*** hwoarang has quit IRC02:57
*** bhavikdbavishi has joined #openstack-infra02:57
*** hwoarang has joined #openstack-infra02:58
fungiianw: passwords are reset and the ewr1 region details are now in the list (as a separate cloud because the keystone endpoint is different)03:00
*** psachin has joined #openstack-infra03:00
fungii'm gonna knock off and get some shuteye before stein release begins in 9 hours03:01
ianwfungi: ok, cool, i'll see if i can take a look, just babysitting LE for the minute03:02
fungidon't feel compelled, just following up because you had asked about it03:04
fungibut thanks!03:05
*** eernst has quit IRC03:17
*** armax has quit IRC03:17
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Dockerfile: add support for arbritary uid  https://review.openstack.org/65142403:24
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: Dockerfile: add support for arbritary uid  https://review.openstack.org/65024603:24
*** udesale has joined #openstack-infra03:26
*** ricolin has joined #openstack-infra03:31
openstackgerritIan Wienand proposed openstack-infra/system-config master: [dmn] Stashing some scripts to make git:// -> https:// changes  https://review.openstack.org/64231403:33
ianw[Wed Apr 10 03:41:01 UTC 2019] Cert success.03:41
ianwyay!03:41
*** hongbin has quit IRC03:42
*** ramishra has joined #openstack-infra03:44
*** rh-jelabarre has quit IRC03:44
*** rkukura_ has joined #openstack-infra03:53
*** rkukura has quit IRC03:57
*** rkukura_ is now known as rkukura03:57
openstackgerritMerged openstack-infra/system-config master: Add #openstack-uk to statusbot's list of channels  https://review.openstack.org/64467903:57
*** imacdonn_ has quit IRC04:03
*** imacdonn_ has joined #openstack-infra04:03
*** betherly has joined #openstack-infra04:18
*** betherly has quit IRC04:23
*** diablo_rojo has quit IRC04:29
*** openstackstatus has quit IRC04:35
*** openstackstatus has joined #openstack-infra04:36
*** ChanServ sets mode: +v openstackstatus04:36
*** ykarel|away has joined #openstack-infra04:39
*** ykarel_ has joined #openstack-infra04:44
*** ykarel|away has quit IRC04:47
*** quiquell|off is now known as quiquell|rover04:48
*** ykarel_ is now known as ykarel04:56
*** yamamoto has quit IRC04:57
*** betherly has joined #openstack-infra05:00
*** betherly has quit IRC05:04
*** pcaruana has joined #openstack-infra05:06
*** yamamoto has joined #openstack-infra05:07
*** ykarel_ has joined #openstack-infra05:09
*** yamamoto has quit IRC05:10
*** yamamoto has joined #openstack-infra05:10
*** ykarel has quit IRC05:11
*** ricolin has quit IRC05:30
*** yamamoto has quit IRC05:49
*** yamamoto has joined #openstack-infra05:50
*** ykarel_ is now known as ykarel05:50
*** bhavikdbavishi has quit IRC05:54
*** bhavikdbavishi has joined #openstack-infra05:55
AJaegerianw, frickler, could we merge https://review.openstack.org/651360 , please? That allows to merge new repo creation reviews - the daily update job is broken right now06:00
openstackgerritAndreas Jaeger proposed openstack-infra/project-config master: Some python yaml fixes  https://review.openstack.org/65133806:08
*** hwoarang has quit IRC06:10
*** kopecmartin|off is now known as kopecmartin06:10
*** hwoarang has joined #openstack-infra06:15
*** janki has joined #openstack-infra06:19
openstackgerritMerged opendev/base-jobs master: Use tox-linters for opendev  https://review.openstack.org/65124006:20
*** kjackal has joined #openstack-infra06:24
*** yamamoto has quit IRC06:26
*** yamamoto has joined #openstack-infra06:27
*** e0ne has joined #openstack-infra06:28
*** quiquell|rover is now known as quique|rover|brb06:28
*** ijw has joined #openstack-infra06:29
*** apetrich has joined #openstack-infra06:30
*** kjackal has quit IRC06:31
*** yamamoto has quit IRC06:32
openstackgerritMerged openstack-infra/project-config master: Remove upstream lines from gerrit/projects.yaml  https://review.openstack.org/65136006:32
*** hwoarang has quit IRC06:33
*** hwoarang has joined #openstack-infra06:35
*** kmarc- has quit IRC06:35
*** kmarc_ has joined #openstack-infra06:37
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Add python-path option to node  https://review.openstack.org/63733806:38
*** yamamoto has joined #openstack-infra06:38
openstackgerritIan Wienand proposed openstack-infra/system-config master: yamlgroup: add regex match; exclude puppet4 for arm64 mirrors  https://review.openstack.org/65144206:40
ianwclarkb / cmurphy : ^ i do not like this ... but i don't have a lot of ideas?06:40
ianwmordred: ^ you're probably also interested in the yamlgroups regex change ...06:40
*** pgaxatte has joined #openstack-infra06:43
*** yamamoto has quit IRC06:47
*** yamamoto has joined #openstack-infra06:48
*** e0ne has quit IRC06:48
*** kjackal has joined #openstack-infra06:51
openstackgerritTony Breeds proposed openstack-infra/irc-meetings master: Move the release team meeting  https://review.openstack.org/65144306:52
*** e0ne has joined #openstack-infra06:57
*** slaweq has joined #openstack-infra07:00
*** rpittau|afk is now known as rpittau07:05
*** ginopc has joined #openstack-infra07:05
*** sshnaidm|pto is now known as sshnaidm07:06
*** quique|rover|brb is now known as quiquell|rover07:11
openstackgerritAndreas Jaeger proposed openstack-infra/project-config master: Some python yaml fixes  https://review.openstack.org/65133807:12
openstackgerritAndreas Jaeger proposed openstack-infra/project-config master: Some python yaml fixes  https://review.openstack.org/65133807:15
*** owalsh_ is now known as owalsh07:17
*** gfidente has joined #openstack-infra07:25
openstackgerritSlawek Kaplonski proposed openstack-infra/project-config master: Add networking-midonet-tempest-aio-ml2-centos-7 to neutron dashboard  https://review.openstack.org/65144807:25
*** tosky has joined #openstack-infra07:28
*** psachin has quit IRC07:32
*** e0ne has quit IRC07:33
*** pcaruana has quit IRC07:34
*** pcaruana has joined #openstack-infra07:35
*** psachin has joined #openstack-infra07:35
*** yamamoto has quit IRC07:37
*** yamamoto has joined #openstack-infra07:38
*** e0ne has joined #openstack-infra07:40
*** lpetrut has joined #openstack-infra07:41
*** ccamacho has joined #openstack-infra07:45
openstackgerritMerged openstack-infra/zuul master: tox: Fix indentation  https://review.openstack.org/64904007:48
*** jpich has joined #openstack-infra07:48
*** e0ne has quit IRC07:48
*** gregoryo has quit IRC07:51
*** jpena|off is now known as jpena07:52
*** e0ne has joined #openstack-infra07:53
*** quiquell|rover is now known as quique|rover|bbl07:54
*** yamamoto has quit IRC07:56
openstackgerritLuigi Toscano proposed openstack-infra/zuul-jobs master: stage-output: fix dotfiles handling  https://review.openstack.org/64865807:58
*** ykarel is now known as ykarel|lunch07:59
mgoddardmorning, I think my emails from Zuul have stopped. Last one was 12 hours ago08:01
*** tkajinam has quit IRC08:04
fricklermgoddard: I think you are talking about gerrit, but yes review.openstack.org seems to have aquired some bad reputation ... host [104.130.246.32] blocked using Spamhaus PBL.08:04
fricklerinfra-root: ^^ not sure how much we can do about this08:04
mgoddardfrickler: you're correct, I do mean Gerrit. Still waking up08:04
*** priteau has joined #openstack-infra08:05
openstackgerritLuigi Toscano proposed openstack-infra/zuul-jobs master: stage-output: fix dotfiles handling  https://review.openstack.org/64865808:05
fricklerinfra-root: spamhaus shows https://www.spamhaus.org/pbl/query/PBL1660620, I'll try to remove our IP08:06
openstackgerritMerged openstack-infra/zuul master: Assert ara database is loaded from ansible venv  https://review.openstack.org/65091708:09
*** yamamoto has joined #openstack-infra08:11
frickler#status log successfully submitted a request to remove 104.130.246.32 (review01.openstack.org) from Spamhaus PBL08:15
openstackstatusfrickler: finished logging08:15
*** evrardjp has quit IRC08:18
*** evrardjp has joined #openstack-infra08:19
*** roman_g has joined #openstack-infra08:20
*** yamamoto has quit IRC08:22
*** bhavikdbavishi has quit IRC08:24
mgoddardthanks frickler08:25
mgoddardfrickler: while I'm here, I had some stable release job failures for kayobe. Is that something you could help with?08:26
mgoddardfrickler: here's the email: http://lists.openstack.org/pipermail/release-job-failures/2019-April/001117.html08:27
iurygregoryMoring infra team, It's possible to split a cherry-pick in two different commits for a stable branch?08:29
fricklermgoddard: hmm, that looks like an error in the job definition, possibly related to some recent changes on our side. "Unable to freeze job graph: Unable to modify final job" means that you are you are trying to create a variant from doesn't allow that08:29
*** ricolin has joined #openstack-infra08:30
fricklermgoddard: I'll try to dig more in a bit, but maybe that'll need to wait for some zuul specialist08:30
*** lucasagomes has joined #openstack-infra08:30
mgoddardfrickler: right, it does make a bit more sense now I've stared at the message for a bit. I'll check the base job definition08:31
fricklermgoddard: IIUC you need to specify the vars like in this doc, instead of attaching directly to the job https://docs.openstack.org/infra/openstack-zuul-jobs/project-templates.html#project_template-docs-on-readthedocs08:34
iurygregoryWe have the following scenario in ironic, we had tests failures under stable/stein and we had only cherry-picked the necessary test from https://review.openstack.org/#/c/642474/ (the cherry pick was merged https://review.openstack.org/#/c/645146/ ) and now since we are cherry-picking zuulv3  (https://review.openstack.org/#/c/647774/ ) we want to have python3 job that is in master in the same commit that have the tests fixes08:34
iurygregoryand I get " ! [remote rejected] HEAD -> refs/publish/stable/stein/py3 (change https://review.openstack.org/645146 closed "08:34
mgoddardfrickler: I do that for docs, but also have release notes on RTD, so added the jobs manually as it didn't seem possible to add a template twice08:35
*** derekh has joined #openstack-infra08:35
frickleriurygregory: where do you get that error? splitting the cherry-pick is something you'd have to do manually I think08:36
fricklermgoddard: the templates should cover both08:36
iurygregoryfrickler, I'm doing manually let me post a paste with the steps I did08:36
mgoddardfrickler: they're different RTD sites - kayobe. and kayobe-release-notes. - different webhook IDs08:36
fricklermgoddard: ah, I see. I guess then indeed we need to wait for someone who knows the details of that job better than me08:38
mgoddardfrickler: no problem, thanks for your help08:40
*** ginopc has quit IRC08:40
iurygregoryfrickler, http://paste.openstack.org/show/749087/08:42
openstackgerritPedro Alvarez Piedehierro proposed openstack-infra/system-config master: Changed config to add the new ewr1cloud * New cloud 'arm64ci-ewr1' (url: ewr1cloud.arm64ci.cloud) * Keeping the old cloud 'arm64ci' (url: arm64ci.cloud) for now for a bit of overlap.  https://review.openstack.org/65002108:43
fricklerinfra-root: pbl removal seems to have succeeded. where do bounces for review@o.o go? maybe it would make sense to clean up bouncing (e.g. non-existing) mail addresses in order to help our reputation in general? there also are lots of bounces for github@review01.openstack.org in the exim log08:44
*** ginopc has joined #openstack-infra08:45
frickleriurygregory: IIUC your patch has already been merged as https://review.openstack.org/#/c/645146/, so gerrit refuses for it to be submitted again when it is already present in that branch08:47
*** e0ne has quit IRC08:47
iurygregoryfrickler, yeah but https://review.openstack.org/#/c/645146/ is only one test that we cherry-picked from https://review.openstack.org/#/c/642474/ to unblock stable/stein08:48
iurygregoryand now we want the other things that are in https://review.openstack.org/#/c/642474/ =(08:48
*** gfidente has quit IRC08:50
frickleriurygregory: ah, the issue is probably the change-id. amend the commit message of your new patch and remove it, then the git hook can create a new one08:52
iurygregoryfrickler, let me try08:53
*** yamamoto has joined #openstack-infra08:54
openstackgerritPedro Alvarez Piedehierro proposed openstack-infra/system-config master: Changed config to add the new ewr1cloud  https://review.openstack.org/65002108:57
*** dtantsur|afk is now known as dtantsur08:58
*** e0ne has joined #openstack-infra08:58
iurygregoryfrickler, tks for the help it worked09:00
*** ykarel|lunch is now known as ykarel09:04
*** bhavikdbavishi has joined #openstack-infra09:04
*** ijw has quit IRC09:05
*** e0ne has quit IRC09:06
*** Lucas_Gray has joined #openstack-infra09:25
*** electrofelix has joined #openstack-infra09:28
*** yamamoto has quit IRC09:28
*** Lucas_Gray has quit IRC09:31
*** Lucas_Gray has joined #openstack-infra09:34
*** ociuhandu has quit IRC09:35
fricklerinfra-root: for the github user, we could either create its home dir or make sure the cron doesn't generate mails here http://git.openstack.org/cgit/openstack-infra/puppet-github/tree/manifests/init.pp#n8809:40
*** gfidente has joined #openstack-infra09:43
frickleruser account is created at L32 in the same file, but without creating the homedir, which defaults to /home/github09:45
*** rcernin has quit IRC09:47
*** quique|rover|bbl is now known as quiquell|rover09:50
*** kjackal has quit IRC09:56
*** yamamoto has joined #openstack-infra09:58
*** yamamoto has quit IRC10:01
*** yamamoto has joined #openstack-infra10:01
*** yamamoto has quit IRC10:05
*** kjackal has joined #openstack-infra10:08
zigoianw: Hi there!10:13
zigoWhat's the status for Buster in infra, and how may I help to make it go further?10:13
*** tbachman has quit IRC10:13
fungifrickler: pbl entries generally have nothing to do with reputation, it's a default *policy* set by the service provider (so in this case rackspace) reducing the number of spam complaints their abuse desk has to field10:35
fungianyway, thanks for getting the exception filed. we end up playing whack-a-mole with these as rackspace adds another netblock to the pbl10:36
*** yamamoto has joined #openstack-infra10:44
*** yamamoto has quit IRC10:50
*** tbachman has joined #openstack-infra10:50
*** nicolasbock has joined #openstack-infra10:52
*** bhavikdbavishi has quit IRC10:53
*** jamesdenton has quit IRC11:03
*** e0ne has joined #openstack-infra11:12
*** e0ne has quit IRC11:15
AJaegerfungi, config-core, coming back to https://review.openstack.org/#/c/651338/ - I updated to use safe_load as clarkb suggested. Two open points are: Do we want the sorting - and why is the IRC job failing? I don't understand why it still fails... Any help welcome11:17
*** e0ne has joined #openstack-infra11:19
*** e0ne has quit IRC11:20
*** jamesdenton has joined #openstack-infra11:20
*** udesale has quit IRC11:24
*** e0ne has joined #openstack-infra11:24
*** udesale has joined #openstack-infra11:24
*** yamamoto has joined #openstack-infra11:26
*** jpena is now known as jpena|lunch11:34
*** ginopc has quit IRC11:36
*** ginopc has joined #openstack-infra11:37
*** rh-jelabarre has joined #openstack-infra11:42
fricklerAJaeger: the failure is in front of that large dump: http://logs.openstack.org/38/651338/7/check/project-config-irc-access/c51d2cd/job-output.txt.gz#_2019-04-10_07_38_51_64472011:43
fungiinfra-root: config-core: infra-puppet-core: reminder, openstack stein release activity is beginning roughly now, so please refrain from approving anything we think could be remotely disruptive to release activities11:45
jhesketh:thumbsup:11:45
fungihopefully done and dusted in under an hour11:45
*** dpawlik has joined #openstack-infra11:47
AJaegerfrickler: but why? The change removed sort_keys and I wonder how it still shows up as an error... Something is going on that I don't understand?11:47
AJaegerfrickler: I cannot reproduce locally ;(11:48
*** roman_g has quit IRC11:48
fricklerAJaeger: hmm, maybe this isn't self-testing because it's a config project? that would probably need to make the check non-voting to merge this patch11:50
*** bhavikdbavishi has joined #openstack-infra11:52
fricklerAJaeger: let me hold a node so we can check this directly11:53
*** rlandy has joined #openstack-infra11:55
*** bobh has joined #openstack-infra11:55
*** rlandy is now known as rlandy|ruck11:56
*** udesale has quit IRC11:59
*** eharney has joined #openstack-infra12:06
*** tbachman has quit IRC12:06
fricklerAJaeger: indeed zuul.projects has p-c with "checkout: master", that overwrites the checked-out patch during mirror-workspace-git-repos although the log output is a bit misleading http://logs.openstack.org/38/651338/7/check/project-config-irc-access/c51d2cd/zuul-info/inventory.yaml12:06
*** e0ne has quit IRC12:09
*** e0ne has joined #openstack-infra12:12
*** priteau has quit IRC12:12
*** tbachman has joined #openstack-infra12:13
*** e0ne has quit IRC12:13
*** priteau has joined #openstack-infra12:13
mordredfrickler: checking out master should be fine - master would be the speculative future state zuul has prepared for the master branch12:16
*** dave-mccowan has joined #openstack-infra12:17
mordredfrickler: we actaully don't provide a ref corresponding to origin/master in the repos we push onto the nodes12:17
mordred(this doesn't explain what's going on of course)12:17
*** bobh has quit IRC12:18
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: Dockerfile: add support for arbritary uid  https://review.openstack.org/65024612:19
mordredAJaeger: looking at your patch locally12:19
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Dockerfile: add support for arbritary uid  https://review.openstack.org/65142412:20
fricklermordred: oh, indeed, I wrongly assumed that master would be == origin/master12:21
fricklermordred: I still have the node held for debugging, if you want to take a look at the situation in our CI directly - 149.202.178.13412:21
mordredkk, thanks12:23
Shrewsfungi: aye, around to help run around wildly with my arms in the air if the fan starts to get covered with unpleasant things. though have to leave in a couple of hours for some unpleasant physical therapy12:27
*** e0ne has joined #openstack-infra12:28
fricklerAJaeger: mordred: in the tox irc env we have PyYAML==5.1 while globally we have PyYAML==3.12. with the former I get the same error as in the CI12:30
fungithanks Shrews! your kermit arms are most appreciated12:31
mordredfrickler: I'm investigating just switching these to using projectconfig_ruamellib.py instead12:31
mordredfrickler: since it understands preserving comments and ordering and whatnot12:31
*** jpena|lunch is now known as jpena12:31
mordredand we're already using it in other scripts12:32
fricklermordred: solving things at a higher level sounds almost magical ;)12:33
*** kjackal has quit IRC12:33
*** udesale has joined #openstack-infra12:36
*** tbachman has quit IRC12:37
mnaserinfra-root: may I be added to vexxhost-core ? https://review.openstack.org/#/admin/groups/2021,members12:38
fricklermnaser: where does that group belong to?12:38
mnaserright now, vexxhost/ansible-role-wireguard12:39
mnaserfrickler: https://review.openstack.org/#/c/650396/12:39
fricklermnaser: ah, right, will add you in a minute12:40
fricklermnaser: and done12:41
AJaegermordred, frickler , thanks for looking into it.12:41
*** Goneri has joined #openstack-infra12:42
*** gfidente is now known as gfidente|afk12:42
*** tbachman has joined #openstack-infra12:42
*** kjackal has joined #openstack-infra12:43
*** ricolin has quit IRC12:50
*** ricolin has joined #openstack-infra12:51
*** kgiusti has joined #openstack-infra12:51
openstackgerritTobias Henkel proposed openstack-infra/zuul master: WIP: Support emitting warnings via zuul_return  https://review.openstack.org/65152612:54
fricklerAJaeger: actually the fix for your error would be not removing the sort_keys parameter, but adding it here http://paste.openstack.org/show/749109/12:58
fricklerbut let's wait whether mordred comes up with a better solution12:58
*** yolanda_ has joined #openstack-infra12:58
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Some python yaml fixes  https://review.openstack.org/65133813:00
mordredfrickler, AJaeger: ^^ that works for me locally and results in less change to the projects.yaml file13:00
mordredonly resulting change is that the long descriptions are wrapped slighty more aggressively13:01
*** udesale has quit IRC13:01
*** lpetrut has quit IRC13:01
*** mriedem has joined #openstack-infra13:02
*** udesale has joined #openstack-infra13:03
*** irclogbot_0 has joined #openstack-infra13:03
*** aaronsheffield has joined #openstack-infra13:04
*** altlogbot_2 has joined #openstack-infra13:06
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Some python yaml fixes  https://review.openstack.org/65133813:07
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Let ruamel.yaml handle comments  https://review.openstack.org/65152813:07
mordredsorry - there was a bug in the first version - then I added a followup patch that removes some stuff we don't need to do any more13:07
Shrewsbecause i'm proudly a geek, and this is historic: https://twitter.com/NSF/status/111596462018603008013:14
mordredShrews: neat!13:16
fungiShrews: absolutely!13:16
fungian historic moment in astronomy13:16
fungias well as astrophysics and relativity13:16
AJaegermordred: interesting... Thanks a lot!13:17
AJaegermordred: will review later...13:17
*** dklyle has joined #openstack-infra13:17
mordredAJaeger: I've got one more little cleanup patch coming13:18
*** yamamoto has quit IRC13:19
*** yamamoto has joined #openstack-infra13:19
*** e0ne has quit IRC13:20
*** e0ne has joined #openstack-infra13:25
AJaegermordred: and the irc change does not pass yet, so needs some messaging of the files. But it's coming along nicely, thanks!13:29
AJaegermordred: can we delete projectconfig_yamllib now?13:30
*** bhavikdbavishi has quit IRC13:33
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Some python yaml fixes  https://review.openstack.org/65133813:33
openstackgerritMonty Taylor proposed openstack-infra/project-config master: Add some helpers to projectconfig_ruamellib  https://review.openstack.org/65153213:33
mordredAJaeger: yes. also - maybe that one will be better13:34
*** quiquell|rover is now known as quiquell|lunch13:38
*** lseki has joined #openstack-infra13:39
mordredAJaeger: all green now13:47
AJaeger\o/13:47
*** tbachman has quit IRC13:47
*** tbachman has joined #openstack-infra13:47
AJaegerfungi, frickler, mnaser, could you review 651338 and 651532 to unblock some of our jobs ,please?13:48
*** yolanda_ has quit IRC13:49
mnaser"sort_keys isn't supported for reasons surpassing understanding"13:53
mnaser++++++++++113:53
*** e0ne has quit IRC13:54
AJaegermnaser: yeah, a fun change with going to newer pyyaml ;(13:56
*** e0ne has joined #openstack-infra13:57
AJaegerthanks for reviewing, mnaser and fungi!13:59
fungiinfra-root: config-core: infra-puppet-core: openstack stein release automation wrapped up quickly as hoped, so we ought to be able to return to normal review activities. thanks!14:01
*** quiquell|lunch is now known as quiquell|rover14:02
AJaegerthanks, fungi!14:02
clarkbfungi no expected straggler releases or tasks at this point?14:05
funginope14:06
clarkbgreat! time to apptove dmsimard's gerrit config change then plan yo restart gerrit soon? :)14:07
openstackgerritMerged openstack-infra/project-config master: Some python yaml fixes  https://review.openstack.org/65133814:08
openstackgerritMerged openstack-infra/project-config master: Add some helpers to projectconfig_ruamellib  https://review.openstack.org/65153214:08
fungiclarkb: sgtm14:09
clarkbsounds like one more change to merge based on release channrl irc?14:10
*** ykarel is now known as ykarel|away14:11
fungiyeah, 650365 officially switches us to train, so let's not restart gerrit until that merges14:12
*** janki has quit IRC14:13
*** openstackgerrit has quit IRC14:14
*** slaweq has quit IRC14:16
smcginnisYes please. :)14:18
*** roman_g has joined #openstack-infra14:25
*** ykarel|away has quit IRC14:35
*** yamamoto has quit IRC14:36
*** yamamoto has joined #openstack-infra14:40
*** yamamoto has quit IRC14:41
*** yamamoto has joined #openstack-infra14:42
*** sthussey has joined #openstack-infra14:43
*** openstackgerrit has joined #openstack-infra14:43
openstackgerritStephen Finucane proposed openstack-dev/hacking master: Fix W605 from flake8 3.0+  https://review.openstack.org/65156414:43
openstackgerritStephen Finucane proposed openstack-dev/hacking master: Bump flake8 version to something modern  https://review.openstack.org/65156514:43
openstackgerritStephen Finucane proposed openstack-dev/hacking master: General cleanups  https://review.openstack.org/65156614:43
*** iurygregory has quit IRC14:44
*** iurygregory has joined #openstack-infra14:46
*** yamamoto has quit IRC14:47
*** e0ne has quit IRC14:50
*** e0ne has joined #openstack-infra14:54
*** slaweq has joined #openstack-infra14:54
*** ianychoi has quit IRC14:56
ironfootHmf.. building an Amphora image for something other than x86 (aarch64) is not being easy... I take I'm possible the first one trying to do it14:58
clarkbironfoot: Vorrtex in #openstack-dib is trying to do it for ppc too and struggling. I expect that you are right though that no one has done it for anything but x8614:59
ironfootoh, that's probably the best channel for this discussion, thanks clarkb15:00
*** quiquell|rover is now known as quiquell|off15:01
*** diablo_rojo has joined #openstack-infra15:02
*** ykarel has joined #openstack-infra15:07
*** tbachman has quit IRC15:08
openstackgerritMerged openstack-infra/zuul-jobs master: Only alias registries on build nodes  https://review.openstack.org/65139315:08
*** armax has joined #openstack-infra15:12
*** tbachman has joined #openstack-infra15:18
openstackgerritClark Boylan proposed openstack-infra/zuul-jobs master: Revert "Only alias registries on build nodes"  https://review.openstack.org/65157915:22
*** dave-mccowan has quit IRC15:23
*** dave-mccowan has joined #openstack-infra15:24
smcginnisAll release critical activities have completed for the stein cycle.15:25
smcginnisFeel free to do any restarts if needed. We still have other things, but nothing as critical.15:26
*** gyee has joined #openstack-infra15:26
clarkbsmcginnis: thanks!15:26
*** ccamacho has quit IRC15:28
*** efried has quit IRC15:28
*** jamesmcarthur has joined #openstack-infra15:32
anteayasmcginnis: congratulations15:37
smcginnisHey anteaya! o/15:37
*** tbachman has quit IRC15:38
anteayasmcginnis: how are you?15:39
anteayasmcginnis: I'm going with some sense of relief?15:39
smcginnisanteaya: Yeah, pretty good overall. Good feeling to have some of these things done. How've you been?15:40
anteayagood thanks15:40
anteayaboiling down maple syrup today15:40
anteayabeautiful sunshiney day15:40
smcginnisOoh, delicious.15:40
anteayait has been a good season so far15:40
anteayathis is the third round15:40
clarkbanteaya: I just want to say that is very canadian of you :)15:41
anteayaha ha ha15:41
clarkbfwiw I'm the only one in the family that likes the real maple syrup instead of the corn syrup based stuff. Makes me sad15:41
anteayagot to get my civic points for the year15:41
anteayadidn't play much hockey this season15:41
anteayaoh my15:41
anteayathat is very sad15:42
anteayaclarkb: I commend your good taste15:42
anteayaI just came in to check on things, heading back outside now15:43
anteayaI've got some smoke to stand in15:43
clarkbinfra-root I have approved dmsimard replication config autoreload setting update15:44
mordred++15:44
clarkbI figure we are about an hour or so away from being able to restart gerrit for that15:44
clarkbThen once we are happy with that working I'll likely approve the upgrade review.openstack.org to puppet-4 change15:45
clarkbbut one thing at a time today15:45
*** pgaxatte has quit IRC15:45
*** iurygregory has quit IRC15:46
openstackgerritMerged openstack-infra/zuul-jobs master: Revert "Only alias registries on build nodes"  https://review.openstack.org/65157915:46
*** efried has joined #openstack-infra15:47
*** yamamoto has joined #openstack-infra15:50
*** mattw4 has joined #openstack-infra15:51
*** rpittau is now known as rpittau|afk15:53
*** roman_g has quit IRC15:54
*** yamamoto has quit IRC15:59
*** geguileo has joined #openstack-infra16:00
*** _erlon_ has joined #openstack-infra16:02
*** bhavikdbavishi has joined #openstack-infra16:03
*** tbachman has joined #openstack-infra16:04
*** roman_g has joined #openstack-infra16:05
*** Lucas_Gray has quit IRC16:06
*** jamesmcarthur has quit IRC16:06
*** jamesmcarthur has joined #openstack-infra16:08
*** ociuhandu has joined #openstack-infra16:08
*** ociuhandu has quit IRC16:10
*** lucasagomes has quit IRC16:11
*** psachin has quit IRC16:14
*** efried is now known as efried_rollin16:14
*** dtantsur is now known as dtantsur|afk16:15
openstackgerritMerged openstack-infra/system-config master: Enable gerrit replication.autoReload for review  https://review.openstack.org/65005116:17
*** derekh has quit IRC16:28
*** ramishra has quit IRC16:41
*** altlogbot_2 has quit IRC16:45
*** wolverineav has joined #openstack-infra16:53
openstackgerritPaul Belanger proposed openstack-infra/zuul master: Handle project not found exception better  https://review.openstack.org/65160916:54
*** e0ne has quit IRC16:55
*** wolverineav has quit IRC16:56
*** wolverineav has joined #openstack-infra16:56
*** jpich has quit IRC17:00
*** ykarel is now known as ykarel|away17:03
*** kopecmartin is now known as kopecmartin|off17:03
zbrianw: please have another look at https://review.openstack.org/#/c/639951/ -- last version should address your concerns.17:05
openstackgerritPaul Belanger proposed openstack-infra/zuul master: Handle github exceptions better when trying to get a PR  https://review.openstack.org/65160917:06
*** jpena is now known as jpena|off17:07
*** slaweq has quit IRC17:14
*** ginopc has quit IRC17:18
fungineed to go out to do some voting and get a late lunch, but should be back in a couple hours. happy to help with gerrit restart when i return17:21
clarkbfungi: thanks. I should find breakfast then17:21
*** udesale has quit IRC17:23
*** priteau has quit IRC17:31
openstackgerritMerged openstack-infra/zuul master: Fix zuul-stream functional test  https://review.openstack.org/65029717:34
openstackgerritPaul Belanger proposed openstack-infra/zuul master: Handle github exceptions better when trying to get a PR  https://review.openstack.org/65160917:36
*** jamesmcarthur has quit IRC17:42
aspiershi folks, is it possible to add meetings to irc-meetings in non-fixed timezones (i.e. not UTC but stuff like Europe/London, which adapts to daylight savings)?17:45
aspiersif not, can I suggest this enhancement17:45
aspiers?17:45
aspierscurrently meetings shift times twice a year for a lot of people, which causes plenty of confusion17:46
aspiersof course this would be optional17:46
clarkbaspiers: I dont think the current tool makes that configurable17:48
aspiersthat's what I thought17:48
aspierscould we support an optional extra timezone field?17:48
clarkbalso the choice of UTC is somewhat intentional as it relieves confusion for when DST happens around the world. You only need to know your local change not everyone elses with utc17:49
*** ricolin has quit IRC17:49
clarkbnorth america and europe change at different times and souther hemisphere goes in the other direction17:49
*** kjackal has quit IRC17:49
*** kjackal_v2 has joined #openstack-infra17:50
toskyand few countries don't change at all17:50
toskyalso EU may end up having different daylight dates (or no daylight) in different countries in the next years17:51
aspierstrue, but NA/EMEA change only 1 week apart, and the ics feed makes it possible to reliably see the correct meeting time in your own calendar17:51
toskyso probably better stick with a neutral timezone17:51
aspiersself-healing SIG has two meeting times: one mainly for NA+EMEA, and one mainly for EMEA+APAC17:52
aspiersthe former would benefit from respecting daylight savings17:52
aspiersthe argument that this would be confusing doesn't really hold up IMHO, because there is already significant confusion caused by not respecting it17:53
clarkbaspiers: I think both cause confusion17:53
aspiersI agree :) but I think not following it can cause more17:54
clarkbbut one causes less confusion if you understand utc and utc doesnt create a special group17:54
toskyI've been dealing with meetings in different timezones in the past 10 years, and I personally prefer the usage of UTC17:54
clarkbI dont think I would reject the feature if it was added but I dont think I would add or use it17:54
aspierstosky: I think that's a slightly different topic. Aren't you talking about how to *specify* meeting times?17:54
toskyyour mileage may vary, and I'm just a user here, of course17:55
aspierstosky: I'm talking about whether times should shift automatically throughout the year17:55
clarkbaspiers: they do if you use utc or dont use utc17:55
toskyaspiers: understood, and that's fine17:55
aspiersThis is what happens in practice with the meetings I lead:17:55
clarkbbecause dst isnt a global standard17:55
toskysahara meetings were one our earlier until two weeks ago for me, now they are later, that's fine17:55
aspierstosky: that might be fine for you and your audience, but it's not working well for self-healing and it didn't for HA either when those were happening17:56
aspiersWhat happens is: 1) everyone gets confused by first few meetings after DST change17:56
tosky(s/our/hour/)17:56
clarkbaspiers: Im guessing your meetinge are norther  hemisphere dominant17:56
aspiers2) soon after people say that the new time is not good for them17:56
aspiers3) I submit a review changing the time by one hour17:57
clarkbothereise you'd still have large confusing shifts that go mulyiple hours instead of one17:57
aspiers4) it gets merged, then people get confused yet again17:57
aspiers5) repeat steps 1-4 twice a year17:57
aspiersif the shift happened automatically, I predict the period of confusion would still exist but be reduced17:57
aspierssince the ics feed would be accurate _all_year_round_17:58
aspiersclarkb: yes they are17:58
clarkbisnt it accurate year round as ie?17:58
clarkbit just happens to cha ge relative to your local timezone twice a yea17:58
aspiersno because of step 3)17:58
clarkbeh17:59
clarkbok17:59
aspiersthe change means that if you look ahead (say) 3 months in your calendar, there's a reasonable chance it will tell you the wrong time17:59
*** tjgresha has joined #openstack-infra17:59
aspiersand maybe different software caches ics data for different durations18:00
aspiersalso, I have two selfish reasons for being able to do this18:01
aspiers1) it means I don't have to change the meeting twice a year (I guess I don't care about stackalytics numbers enough ;-)18:01
*** hwoarang has quit IRC18:02
aspiers2) the two meeting times are carefully chosen to be at the extreme ends of my working day, so that I can lead both meetings. a 1-hour shift either way will put one of the meetings too early or too late for me, which causes the need for changing the meeting twice a year18:03
aspiersthe idea was to have at least one person always attend both, to provide continuity of discussions18:03
*** hwoarang has joined #openstack-infra18:03
aspiersbut again this is just me being selfish wanting to work too early or late ;-)18:04
aspiersfood for thought anyway18:04
clarkbfor me my biggest concern is it has the impression of telling people in the southern hemisphere that their schedule is lessimportant than mine18:04
clarkbbut we also have southern hemisphere contributors in infra whereas others may not18:05
aspierswell I wasn't proposing to use this new feature for the later meeting18:05
aspiersso it wouldn't affect APAC18:05
clarkbas I said I dont wantthe feature but I wouldnt prevent adding it18:05
aspiersI'd probably only use it for NA/EMEA18:05
aspierswhich are largely in sync (especially considering this is a fortnightly meeting)18:06
aspiershaving said that, at least one of the two APAC attendees has said that 6pm/8pm can both work for him but 7pm can't due to dinner with family18:06
clarkbaspiers: fwiw the entire west coast of the usais in the process of moving towards permanent dst. Lots of lawmaking to get therebut that could also complicate things in the future18:06
aspiersso in fact the DST shift in the opposite direction actually works quite nicely :)18:06
aspiersI've heard similar rumblings in EU18:07
aspiersI'm crossing fingers! I hate winter time18:07
aspiersalthough who knows whether UK will still be in EU by that point18:07
aspiersbut that's a whole other topic18:07
aspiersanyway, I've taken up too much of your time on this :) maybe it's something I could hack together quickly in Denver with a bit of help18:08
aspiersnot urgent18:08
*** tjgresha has quit IRC18:09
*** yamamoto has joined #openstack-infra18:12
*** jamesmcarthur has joined #openstack-infra18:12
clarkblooks like it wouldn't happen before the end of 202018:13
clarkbus west coast dst that is18:13
clarkbCalifornia and Oregon waiting on washington to vote on it in 202018:13
cmurphyarizona already doesn't observe dst18:15
clarkbfungi: the autoreload change is in place on review.o.o but I'll wait for your return before restarting the service18:16
clarkbfungi: https://review.openstack.org/#/c/647876/3 would be the next thing in the topic:puppet-4 chain if you can review that as well18:17
clarkbI figure we'll start working through that stack today but want to do review.o.o on its own in case anything is unhappy18:18
* clarkb pops out for a few18:19
*** tosky has quit IRC18:21
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Support emitting warnings via zuul_return  https://review.openstack.org/65152618:21
*** Goneri has quit IRC18:24
*** electrofelix has quit IRC18:24
*** wolverineav has quit IRC18:25
*** ijw has joined #openstack-infra18:25
*** wolverineav has joined #openstack-infra18:25
*** gfidente|afk has quit IRC18:26
*** rkukura has quit IRC18:29
*** wolverineav has quit IRC18:29
*** wolverineav has joined #openstack-infra18:29
*** rkukura has joined #openstack-infra18:29
*** tobiash has quit IRC18:30
*** tobiash has joined #openstack-infra18:30
*** priteau has joined #openstack-infra18:32
jrollfungi: have a few minutes to chat project renames? would you prefer here or another channel?18:34
clarkbjroll: I think he is out voting and grabbing food but should be back at some point18:35
jrollthanks18:35
jrollfungi: I'm free until 1930 or for a few minutes after 2030 (utc)18:35
*** tobiash has quit IRC18:35
*** priteau has quit IRC18:37
*** tobiash has joined #openstack-infra18:40
openstackgerritMerged openstack-infra/nodepool master: Fix race with test_provider_removal unit test  https://review.openstack.org/65133918:42
clarkbaspiers: digging around a bit more, there is a 4 year old resolution from the TC stating that UTC is used for activities and events overseen by the TC18:42
clarkbwhether that means meetings by official projects or just the meetings scheduled by the TC I don't know18:42
clarkbbut something else to consider18:42
jrollI think the hard part about this feature is making sure that meetings which shift with DST don't end up conflicting with a meeting that doesn't shift, in terms of meeting room space18:46
jroll(not using meeting rooms is an easy way to solve that, ofc)18:46
*** slaweq has joined #openstack-infra18:46
*** tobiash has quit IRC18:46
clarkbya could easily check that all scheduled meetings at $location use the same timezone to simplify that18:47
clarkbdo a proper check is a fair bit more complicated and requires up to date timezone data18:47
persiaI think that officially, all meetings should be scheduled in UTC, and all meetings should be permitted to be rescheduled.  That a significant portion of meetings happen to be rescheduled when certain governments change official timezones should be regarded as coincidence.18:47
clarkbpersia: we do allow the rescheduling but that specific bit seems to be part of aspiers issue18:47
persiaThere are too many different dates for timezone changes (and several governments have passed regulations changing the way in which timezone changes that apply as of a time prior to the regulation passing)18:48
persiaclarkb: Yep.  My points are that 1) there is no such date as "when DST applies", especially for folk who travel or work with folk in other timezones, and 2) that laws change regularly (and sometimes retroactively) to make software that tries to pretend about this stuff frequently wrong.18:49
persia(reading changelog for tzdata is amusing)18:49
*** tobiash has joined #openstack-infra18:51
clarkbyup and the region I live in is currently working to make the tzdata maintainers lives a little more difficult ;)18:52
*** slaweq has quit IRC18:52
*** rkukura has quit IRC18:54
fungijroll: awesome! me too18:55
jrollfungi: hey :)18:55
fungiaspiers: calculatnig meeting conflicts between meetings which change times relative to one another at different points in the year could make for an amusing doctoral thesis, if you're in the market for one18:57
fungiaspiers: i'd argue that folks getting "confused" by meetings scheduled in a global context could stand to get accustomed to what it means to interact with people in other parts of the world18:59
clarkbfungi: if now is a good time (pre jroll discussion) for gerrit restart I'm ready and the zuul queues look ready too18:59
persiaI suspect many organisations around the globe would be delighted to license any code that demonstrated such conflict resolution that might be produced along with the thesis.18:59
openstackgerritManjeet Singh Bhatia proposed openstack-infra/project-config master: Add a new project networking-omnipath  https://review.openstack.org/65100818:59
*** ykarel|away has quit IRC19:00
fungiclarkb: jroll: yep, caught up on irc scrollback, happy to put pins in the openstack namespacing plan19:01
clarkbdoes that mean I should also restart gerrit? I'm not super worried about it but two brains better than one if anything is unhappy19:02
fungithings to work out: official openstack deliverables currently span 3 (i think?) namespaces. what rules do we need to account for that?19:02
clarkbalso happy to wait for this conversation to complete19:02
fungiclarkb: sure, gerrit restart now seems just dandy19:02
clarkbok proceeding19:02
fungii don't expect our conversation to depend on the continuity of gerrit19:02
jrollfungi: my proposal is, in this order: 1) opendev moves any repo it wants to continue owning, into whatever namespace opendev likes; 2) everything in projects.yaml goes into openstack namespace; 3) everything else goes into "unknown".19:03
jrollor rather, that's what the merged resolution says19:03
clarkb#status notice Restarting Gerrit on review.openstack.org to pick up new configuration for the replication plugin19:03
openstackstatusclarkb: sending notice19:03
zbrfunny note that adding 🙏 in a gerrit comment make it give 500 Internal server error19:03
fungijroll: okay, so non-opendev openstack-infra deliverables move into openstack namespace, qa deliverables in openstack-dev also move into openstack namespace?19:04
jrollfungi: yes19:04
mnaserzbr: yeah, I think it's been like that for a while19:04
mordredzbr: what is that?19:04
jrollfungi: as noted here: https://governance.openstack.org/tc/resolutions/20190322-namespace-unofficial-projects.html "This includes projects which are currently in the “openstack-dev” and “openstack-infra” namespaces which are not moving to another namespace (e.g. “opendev”)."19:04
-openstackstatus- NOTICE: Restarting Gerrit on review.openstack.org to pick up new configuration for the replication plugin19:04
fungi>>> unicodedata.name('🙏')19:05
fungi'PERSON WITH FOLDED HANDS'19:05
zbrmordred: yeah.19:05
mordredah. what does that communicate?19:05
*** wolverineav has quit IRC19:05
fungii would hope gerrit doesn't reject that. i thought we switched it to 4-bute utf8>19:05
jrollmordred: https://emojipedia.org/person-with-folded-hands/19:05
* mordred cannot keep up with the current fad of using hieroglyphics instead of words19:05
fungi4-byte utf8?19:05
clarkband gerrit is back now19:05
clarkbseems to have gone smoothly19:05
mordredjroll: so that's supposed to be "thanks"?19:06
*** wolverineav has joined #openstack-infra19:06
jrollthanks, prayers, etc19:06
mordredfascinating19:06
fungi"look at my hands"19:06
mordred"I have hands"?19:06
zbr... at least is not look at my finger ;)19:06
clarkbzbr: did you happen to try and comment when I restarted gerrit?19:06
Shrewshigh five myself19:06
openstackstatusclarkb: finished sending notice19:06
fungizbr: totally different codepoint, yes19:07
clarkbzbr: you may want to test it again now that the restart is complete19:07
fungijroll: okay, so the idea being we retire the openstack-dev and openstack-infra namespaces in that case19:07
jrollfungi: indeed19:07
clarkbfungi: I think we've wanted to do that for -dev for a long time and the devstack case being difficult has prevented us from doing it. This is a great time to just fix the difficult :)19:08
mordred++19:08
fungibreak all the thnigs, move forward once sufficiently unbroken again19:08
clarkband as long as the redirect works our -infra puppetry shouldn't break19:08
mordredclarkb: if it's not on our list - we should probably move nodepool config and zuul/main.yaml to opendev/project-config so that global settings aren't in openstack/project-config19:08
clarkbso that should be fine too I think19:08
clarkbmordred: I think we can do that after?19:09
mordredyeah- mostly just noting that it's a thing we should probably do :)19:09
clarkbhaving puppet deploy from oepndev/project-config is a bit more work19:09
zbrnope, it still chokes on I try to reply from gui with emoji19:10
*** wolverineav has quit IRC19:10
clarkbthen ya guessing 4 byte utf8 problem19:10
mordred_awesome_19:11
clarkbthe db we run for gerrit is like one version too old to do 4 byte utf8 iirc19:11
zbrclarkb: yeah, old java limitations. nevermind is not important.19:11
clarkbI don't think it is java19:12
clarkbit is mysql19:12
clarkbbut ya part of the things that need updating19:12
fungioh, i thought we had updated that already19:13
*** rkukura has joined #openstack-infra19:13
fungimaybe we merely tested it with review-dev but i thought it was taken care of last round of gerrit upgrading19:14
clarkbya I don't think we've done it yet19:14
clarkbbut we should double check :)19:14
clarkbwe change enough stuff that it is easy to forget or misremember19:14
clarkbits possible we did the db move but not the table rewrite19:14
fungijroll: okay, so all official openstack deliverable repos in the openstack namespace, no unofficial openstack repos in the openstack namespace... what does that mean for sigs? user committee teams? board working groups? governance repos?19:15
*** ijw has quit IRC19:16
fungiwe have a lot of repositories we use for official openstack activities which aren't explicitly deliverables for openstack project teams19:16
* clarkb has to pop out now. Larissa has an appointment so I'm watching the kids19:16
jrollfungi: sorry, I meant to include those. I would think all of those should go to the openstack namespace for now, unless the sig/committee/etc says they should go elsewhere. but the TC hasn't recorded consensus on that.19:16
fungimainly just want to make sure we have some set of rules we can use to come up with a definitive list of what's going in the openstack namespace and what isn't19:17
jrollagree19:17
fungiso deliverable repos tracked in https://opendev.org/openstack/governance/src/branch/master/reference/projects.yaml for sure19:18
fungiand also repos in https://opendev.org/openstack/governance/src/branch/master/reference/sigs-repos.yaml19:18
clarkbon a phone now, for the non openstack stuff do we need a stackforge/ or similar?19:18
fungiyeah, the tc recommended "unknown" but opendev needs to pick some sort of dumping ground for them19:19
jrollright19:19
clarkbunknown seems wrong19:19
jrolleveryone agreed unknown was a bad name, but nobody agreed on anything better, I'm open to suggestions19:19
fungii'm tempted to suggest something short and generic like "git" or "dev" or "x"19:19
clarkbstackforge :)19:20
jrollwhat about "_"?19:20
fungijroll: maybe slightly out of scope, but what happens when a repository is retired? do we evict it at that point? or leave it in place? if the latter, do we keep retired official openstack stuff in the openstack namespace if it's listed in https://opendev.org/openstack/governance/src/branch/master/reference/legacy.yaml19:20
clarkb_ might be a good nil like compromise19:21
clarkbor maybe 'nil'19:21
fungineni19:21
funginein19:21
jrollfungi: great question19:21
* fungi is digging cobwebs uot of the corner cases now19:22
jrollI tend to defer to "leave it" for now, but haven't really thought it through19:22
openstackgerritAndreas Jaeger proposed openstack-infra/project-config master: Add a new project networking-omnipath  https://review.openstack.org/65100819:22
*** yamamoto has quit IRC19:23
fungijroll: okay, so stuff in legacy.yaml stays in (or if necessary moves to) the openstack namespace19:23
jrollfungi: that's my uneducated opinion at the moment, yeah19:24
*** yamamoto has joined #openstack-infra19:24
fungiwe likely need to hunt down a list of straggler repos not mentioned in any of the above files... governance, governance-uc, election19:25
*** Goneri has joined #openstack-infra19:25
jrollyeah, I'm happy to manually dig through the remainder19:25
jrollprobably will ask a couple other TC folks to check my work19:25
fungii'm happy to make suggestions, sure. mine start with those three ;)19:26
fungiso anyway, if you can summarize the above in a paragraph or so, maybe that needs to go out to the openstack-discuss ml for further recommendations19:26
*** eharney has quit IRC19:28
jrollfungi: sure, I'll send something before I take off today19:28
jrollthanks :)19:28
fungithis also reminds me why i didn't volunteer to be the openstack liaison for the migration. much harder to brainstorm this stuff with a rubber duck19:28
fungithank you!19:29
*** yamamoto has quit IRC19:29
*** tbachman has quit IRC19:29
clarkbfungi: if you get a chance to review the topic:puppet-4 changes I can approve those as I am able to monitor them19:30
fungiooh, awesome. will do19:30
*** efried_rollin is now known as efried19:37
*** rlandy|ruck is now known as rlandy|ruck|brb19:41
*** owalsh has quit IRC19:43
*** bhavikdbavishi has quit IRC19:44
*** wolverineav has joined #openstack-infra19:45
*** ijw has joined #openstack-infra19:47
*** wolverineav has quit IRC19:49
*** owalsh has joined #openstack-infra19:50
*** tbachman has joined #openstack-infra19:51
*** jamesmcarthur has quit IRC19:59
*** wolverineav has joined #openstack-infra20:08
*** owalsh has quit IRC20:08
*** owalsh has joined #openstack-infra20:08
*** igordc has joined #openstack-infra20:08
*** rlandy|ruck|brb is now known as rlandy|ruck20:09
jrollfungi: mind a quick review before I send? https://etherpad.openstack.org/p/opendev-rename-email20:10
openstackgerritMatt McEuen proposed openstack-infra/project-config master: Add airship-governance project  https://review.openstack.org/65134220:10
fungijroll: you bet!20:12
fungijroll: bullet 1 and 2 are basically redundant with each other. also it's fine to move that toward the end. we should assume that if opendev is going to officially move a repo out of openstack it will propose a governance change to that end20:14
* fungi will take it upon himself to check that has actually happened20:14
jrollfungi: thanks, I'll drop bullet 2 and move bullet 1 to the end20:16
fungiwe can also assume that in a conflict where a repository is under official openstack governance and is also listed in the spreadsheet for arbitrary moves, openstack has jurisdiction and should be the deciding choice20:16
fungithat is to say, if team x wants to move their repos out of the openstack namespace, under this plan they need to work that out with the tc first20:17
jrollok20:17
jrollthis is intended to be a top-to-bottom flowchart, so moving bullet 1 to the end will dictate that20:17
fungiOFFICIAL team x within openstack20:17
fungiyes, i agree, just clarifying20:18
fungino need to spell it out in the e-mail, i was more explaining my reasoning for reordering the bullets20:18
jrollright, makes sense :)20:18
fungilooks good to me. i didn't actually follow the hyperlinks but am going to assume all those files do actually already exist20:19
fungias a side note, we should also consider having a tc discussion for which of these files to include as repos for determining the tc electorate in the future20:20
*** slaweq has joined #openstack-infra20:23
*** wolverineav has quit IRC20:31
jrollindeed20:33
*** priteau has joined #openstack-infra20:33
jrollthanks again for the review :)20:33
fungithanks for being the one to do the actual work20:33
jrollheh20:33
jrolldid I just get signed up to write the script?20:33
funginah, that's simply me instructing computers to do other actual work20:35
* fungi is no sucker20:35
fungithough i do need to get some more done on that script now that i've got the rest of the redirects worked out20:36
*** Goneri has quit IRC20:36
*** kjackal_v2 has quit IRC20:39
*** wolverineav has joined #openstack-infra20:40
*** wolverineav has quit IRC20:43
*** wolverineav has joined #openstack-infra20:43
*** priteau has quit IRC20:48
*** wolverineav has quit IRC20:48
*** Goneri has joined #openstack-infra20:49
*** Lucas_Gray has joined #openstack-infra20:51
mnaserhey, is replication working right now? I know there was an update not long ago20:59
mnaserhttps://review.openstack.org/#/c/651561/ doesn't show up on GitHub at least21:00
clarkbmnaser: gerrit rereplicates everything after a restart so we usually have a couple hour lag21:03
mnaseroh gotcha21:04
clarkbI keep meaning to ask if we can make that optional in the plugin21:04
clarkbfungi areyou able to check the queue size?21:05
*** nicolasbock has quit IRC21:05
fungii can take a look21:07
fungi12114 tasks21:07
fungiso, not *that* many to go i guess?21:08
*** wolverineav has joined #openstack-infra21:12
*** nicolasbock has joined #openstack-infra21:13
fungiit's dropped to 9764 now21:20
fungiprobably finished around 22:00z by by estimate21:20
*** slaweq has quit IRC21:21
*** kgiusti has left #openstack-infra21:22
*** wolverineav has quit IRC21:24
clarkbok I'm back at a computer now21:24
clarkbI've approved the change to upgrade review.o.o to puppet-421:25
*** wolverineav has joined #openstack-infra21:25
clarkbreview-dev was upgraded a while back and is happy so this should be completely fine21:25
clarkbbut I'll watch the log and check and file diffs with the puppet file bucket if we end up with changes21:25
*** wolverineav has quit IRC21:26
*** wolverineav has joined #openstack-infra21:26
clarkbinfra-root ^ fyi21:28
openstackgerritIan Wienand proposed openstack-infra/system-config master: yamlgroup: add regex match; exclude puppet4 for arm64 mirrors  https://review.openstack.org/65144221:28
ianwclarkb: speaking of puppet4 .... ^ :)21:28
clarkbianw: oh wow so there are arm64 repos for puppet htey just don't have what we need that is ... disappointing21:29
cmurphyyeah :(21:29
ianwyeah, rather confusing to do that21:29
clarkbianw: with the yaml stuff is there are reason to use Loader=SafeLoader over yaml.safe_load?21:31
clarkbI like yaml.safe_load as an easier on the eyes option but is there a functional difference?21:31
ianwoh sorry that was a late edition, i dunno i just copied from the warning it was spitting out21:31
clarkbah I think AJaeger did the same with his change. I guess if that is what they have in the warning that explains it21:31
*** ijw has quit IRC21:31
clarkboh I guess in this case we are doing a full load not a safe load? I Think we can safe load though /me writing comments as I go.21:33
ianwi mean, it seems more worrying for user-provided code, but this is only grabbing stuff that's passed gerrit review21:34
clarkbya not really a big concern21:34
clarkbalso suggestion to use ^ instead of /.../ to indicate a regex as the ^ is implied with re.match so you don't have to do string mangling (also zuul and gerrit use this as an indicator iirc)21:34
clarkbI can be convinced to +2 as is if no one else feels strongly about those suggestions though21:34
*** ijw has joined #openstack-infra21:35
ianwahh, i like the ^ idea too, and cmurphy's / / ... both say regex to me21:35
ianwis there a similar ansible precedent?21:36
clarkbI don't know on the ansible side of the house. Maybe pabelanger or dmsimard know21:36
*** eharney has joined #openstack-infra21:37
*** slaweq has joined #openstack-infra21:38
fungi5824 tasks and falling21:39
*** bobh has joined #openstack-infra21:39
*** mriedem has quit IRC21:40
ianwclarkb: i guess the "ansible" way would be '{{ ... | regex_replace }}' or similar ... ain't going to go for a full jinja pass21:41
*** slaweq has quit IRC21:42
*** lmiccini has quit IRC21:42
ianwstarting with ^ simplifies it, will do that21:43
*** wolverineav has quit IRC21:46
*** bobh has quit IRC21:47
*** wolverineav has joined #openstack-infra21:48
openstackgerritMerged openstack-infra/storyboard master: Use one database per test class rather than per test  https://review.openstack.org/64400021:48
*** bobh has joined #openstack-infra21:48
*** wolverineav has quit IRC21:52
openstackgerritMerged openstack-infra/storyboard master: Add some tests for checking private story behaviour  https://review.openstack.org/64457921:54
openstackgerritMerged openstack-infra/storyboard-webclient master: Remember scroll offset of lanes when refreshing board view  https://review.openstack.org/63760721:55
fungi2626 tasks22:02
openstackgerritMerged openstack-infra/system-config master: Update review.openstack.org to puppet 4  https://review.openstack.org/64787622:02
clarkbpuppet just ran on review.o.o so we are looking at half and hour to 45 minuets before ^ applies22:03
openstackgerritIan Wienand proposed openstack-infra/system-config master: yamlgroup: add regex match; exclude puppet4 for arm64 mirrors  https://review.openstack.org/65144222:04
*** eharney has quit IRC22:06
*** rcernin has joined #openstack-infra22:06
ianwmordred: ^ i'd like you to poke on that before we merge too, as i'm not sure if this is targeted to go as an upstream plugin too22:11
*** bobh has quit IRC22:14
*** tjgresha has joined #openstack-infra22:15
openstackgerritsebastian marcet proposed openstack-infra/openstackid-resources master: Migrated Mail from native to Sendgrid API  https://review.openstack.org/65140522:19
openstackgerritMerged openstack-infra/openstackid-resources master: Migrated Mail from native to Sendgrid API  https://review.openstack.org/65140522:21
fungi1719 tasks22:23
*** wolverineav has joined #openstack-infra22:25
*** tosky has joined #openstack-infra22:26
openstackgerritMerged openstack-infra/zuul master: Add database info for components graph  https://review.openstack.org/64937122:30
*** wolverineav has quit IRC22:31
*** betherly has joined #openstack-infra22:32
*** Lucas_Gray has quit IRC22:35
*** betherly has quit IRC22:37
clarkbreview.o.o puppet-4ing should happen soon. I see /opt/puppetlabs and it has been 40 minutes since the last pulse22:40
clarkbok review looks happy http://paste.openstack.org/show/749149/22:44
clarkbthe recreation of the rc.d files was expected. The puppet 4 install resulted in a cleanup of those files and then puppet puts them back again22:45
clarkbcmurphy: infra-root ^ fyi you may want to double check me on that but I think it looks good22:45
cmurphylgtm22:46
cmurphyi thought the rc.d thing had been fixed?22:46
clarkbcmurphy: ya the fix was to stop reinstalling puppet 4. So it will do it the first time but then it shouldn't do it again22:46
cmurphyah gotcha22:47
clarkbit is unavoidable the first time around due to whatever the puppet 4 packaging si doing to clean that up22:47
*** tosky has quit IRC22:47
fungiyep, looks clean to me22:47
clarkbI'll followup on it in an hour or so and confirm that it iddn't reapply the rc.d files unexpectedly22:48
*** priteau has joined #openstack-infra22:49
clarkbin the meantime I think the afs servers are next22:49
*** slaweq has joined #openstack-infra22:49
clarkbzoom zoom zoom22:49
*** whoami-rajat has quit IRC22:51
*** tkajinam has joined #openstack-infra22:53
*** priteau has quit IRC22:53
*** slaweq has quit IRC22:53
mnaserI hate to take up some of infra time on this.. but http://zuul.opendev.org/t/opendev/status doesn't show any jobs and for some reason I can't get it to pickup anything here: https://review.openstack.org/#/c/651664/2 and/or https://review.openstack.org/#/c/651665/223:02
mnaserthe repo is listed here https://opendev.org/openstack-infra/project-config/src/branch/master/zuul/main.yaml23:04
mnaserand I added noop-jobs to get a +2 on to land the .gitreview change, as afaik we need it to run at least one job23:04
clarkbI'm nto sure the noop-jobs template exists in the opendev tenant23:05
clarkbI would've expected zuul to -1 saying that is unknown config though23:05
mnaserwould the next change in the patch catch it at least then23:06
*** wolverineav has joined #openstack-infra23:06
clarkb2019-04-10 22:59:35,400 DEBUG zuul.Pipeline.opendev.check: <QueueItem 0x7f0a883716a0 for <Change 0x7f0a8baeb278 vexxhost/ansible-role-wireguard 651665,2> in check> is a failing item because ['it has an invalid configuration']23:07
clarkb(trying to figure out what the invalid config is now)23:07
mnaserI guess it's maybe the noop-jobs23:08
clarkb2019-04-10 22:59:34,907 INFO zuul.Pipeline.opendev.check: Configuration syntax error in dynamic layout23:09
clarkbthat seems to be the most I'm getting from it23:09
mnaserwell noop-jobs indeed doesn't exist23:10
clarkbthe noop jobs themselves are special in zuul and don't need to be defined iirc23:10
mnaserand I used `base-minimal` I wonder if that's a real thing or an openstack-infra thing23:10
clarkb so you should be able to spell it out and not try to use the template23:10
*** hwoarang has quit IRC23:10
mnaseryeah ill try to change it to that23:11
clarkbya minimal doesn't exist in opendev base jobs23:11
clarkbshould just be 'base'23:11
*** wolverineav has quit IRC23:11
*** hwoarang has joined #openstack-infra23:12
*** betherly has joined #openstack-infra23:12
mnaserwent to https://review.openstack.org/#/c/651664/3/zuul.d/project.yaml and it's not exactly giving me much response :X23:13
clarkbhrm it still says there is a configuration error on ps3 (same message as above)23:14
clarkbah right you need jobs:23:15
clarkbproject: check: jobs: - noop23:15
mnasersigh23:15
mnasersorry23:15
clarkb(I don't know why zuul can't say that in a comment like it would normally)23:15
clarkbmaybe there is a more fundamental error too, btu we should fix it to be valid with what we know at least23:15
*** aaronsheffield has quit IRC23:15
mnaserclarkb: well also I noticed mordred merged https://opendev.org/opendev/project-config/src/branch/master/zuul.d/pipelines.yaml just a few days ago23:16
mnaserso maybe there's something funky23:16
clarkbmnaser: yes this is the first usage of those pipelines23:16
pabelangermnaser: clarkb: we should add a system-required project-template to opendev, like openstack: http://git.openstack.org/cgit/openstack-infra/openstack-zuul-jobs/tree/zuul.d/project-templates.yaml#n323:16
pabelangerI then think zuul would report errors on the patch mnaser linked23:17
pabelangersee comment in project-template23:17
*** betherly has quit IRC23:17
clarkbhuh I guess since the queue mnaser is trying to add isn't valid it can't use it to report23:17
clarkbso ya that would likely fix it23:17
mnasercool so23:18
pabelangeryah23:18
mnaserI got a +1 for the noop change23:18
clarkbmnaser: ok I think if you merge the noop change that would be enough that you'd start getting messages for the next change23:18
mnasercool, the next change didn't get response, so I merged the noop one and ill try again23:18
mnaserwill a recheck suffice?23:19
mnaserthere we go23:19
mnaserI got an error!23:19
mnaserok cool, nodeset not defined23:19
clarkbyou can safely define those in your project. Though we should probably add a couple common ones (bionic, centos7?) to the project-config for opendev in addition to the template pabelanger points out23:20
pabelanger+123:20
mnaseryeah looks like I did and its going on now, its pretty cool, testing Wireguard VPN role in 2 nodes and then pinging across each other after setting it up D:23:21
openstackgerritTristan Cacqueray proposed openstack-infra/zuul-jobs master: Add ansible-lint job  https://review.openstack.org/53208323:21
*** _erlon_ has quit IRC23:21
clarkbpabelanger: mnaser https://review.openstack.org/651667 that is the system-required template23:26
clarkbnow for a couple nodesets23:26
openstackgerritMerged openstack-infra/system-config master: Update AFS servers to puppet 4  https://review.openstack.org/65037723:27
clarkbhttps://review.openstack.org/651668 i super basic nodeset start23:29
fungimnaser: gerrit replication tasks are all caught up, still seeing anything missing?23:29
ianwfungi / clarkb: graphite.opendev.org /etc/letsencrypt-certs/graphite01.opendev.org/* look all about right?  i'm going to propose we make a real cert and look at plugging it in23:30
clarkbianw: I'll look in a sec.23:30
clarkbcmurphy: infra-root I have confirmed that the rc.d files were not touched on the second puppet run since the puppet-4 upgrade on review.o.o23:30
ianwchecking /var/log/acme.sh/acme.sh.log it looks like it's skipping things as expected, and looks good from the base.yaml logs too (i.e. it's not going nuts)23:31
clarkbianw: the key is world readable which we probably don't want ( will apache complain about that?)23:31
clarkbianw: otherwise the files appear to have content that looks right (though I've not passed it through openssl to verify things after the base64ification)23:32
ianwhrm; it's written by root but i don't know if we want it exclusively owned by www-data23:32
clarkbcan we do owner is root group is www-data?23:33
clarkbfungi: ^ you may have thoughts on whether ot not that is desireable and or necessary23:34
ianwwe could ... i don't know if that should be hard-coded because th e idea is the certs should be usable for anything, not just apache23:34
clarkbthats a good point23:35
fungii think if we want apache to read the key on a reload it needs read access23:35
fungiit may be able to read it on a restart if only readable by root via privilege separation23:35
fungidepends on how it's started23:36
*** david-lyle has joined #openstack-infra23:36
openstackgerritClint 'SpamapS' Byrum proposed openstack-infra/nodepool master: Implement max-servers for AWS driver  https://review.openstack.org/64947423:36
clarkbfungi: will it refuse to use a cert that is world readable?23:36
*** dklyle has quit IRC23:36
clarkbiirc ssh will refuse to do so with an ssh key23:36
ianwdrwx------ 2 root ssl-cert  4096 Oct 16 20:17 private23:37
clarkbwe could use a more generic group and then add any users needing to read the certs to that group.23:41
fungicerts can be world readable just fine23:41
fungiit's keys which need protection23:41
clarkbfungi: right sorry I said key before then said cert when I asked you more recently23:41
ianwyeah, everything is in the same directory23:42
fungicerts are already public data23:42
clarkbthe key is currently world readable23:42
clarkbother than that I don't see any problems23:42
ianwi feel like it must work as root:root 600 ... that's how we have things configured on the other hosts ...23:43
clarkbianw: apache does start as root on ubuntu then it descalates its privs in child processes23:43
clarkbso not surprising that works23:43
ianwyeah i think the question was does a "reload" then manage to pick up the new key?23:44
ianw(as opposed i guess to a restart)23:44
clarkbianw: no reload does not work23:44
clarkbwhich I guess makes sense why if it relies on those root perms to read the files23:45
clarkbmy wip change does a restart as a result23:45
*** david-lyle has quit IRC23:46
ianwwhat about something that doesn't have a root/drop pattern ... geard maybe for example23:46
clarkbianw: for that using a letsencrypt group might be the most straightforward option23:46
*** ianychoi has joined #openstack-infra23:46
clarkbthen we can add the geard user to the le group23:47
clarkbwe could also assume a copy and let the pupept side figure out perms that it needs23:48
clarkbso the le roles write out to current path but then puppet (or ansible) could have tasks for $service that copy the file to a location with the perms it needs23:48
clarkbpuppet and ansible both check the file hash before making copies so it should be mostly idempotent. But we'll need to update our puppetry for that which was somethign I know we wanted to avoid23:48
clarkb(for that I'm thinking the group may be the simplest option)23:49
*** rcernin has quit IRC23:52
*** rlandy|ruck has quit IRC23:55
ianwyeah, so /etc/letsencrypt-certs as root:letsencrypt with 277023:55
ianwor 2750 ... group doesn't need write23:55
*** owalsh has quit IRC23:57
clarkbdo we need set group id?23:57
clarkb(it isn't executable so I think 0750 would work?23:58
clarkber wait the 7 and 5 are executable. is this for the dir or something else:023:58
clarkboh the dir23:58
ianwthat's so letsencrypt creates the cert dirs underneath with letsencrypt group23:58
clarkbya I think that should work23:58
ianwu=rwx,g=rx,g+s23:58
*** dabukalam has joined #openstack-infra23:59
ianwhrm, i think we then need to also run acme.sh with a umask so it doesn't make things world readable23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!