| *** owalsh has joined #openstack-infra | 00:00 | |
| clarkb | probably as chmodding after the fact give a small window where the data could be divulged. Maybe that isn't a huge concern | 00:01 |
|---|---|---|
| ianw | i'm more thinking it's annoying for ansible as it's going to look like it's touching the files constantly? | 00:02 |
| clarkb | if acme.sh reverts the perms back eaech time ya | 00:03 |
| clarkb | umask 027 before running the acme.sh commands would do it? | 00:04 |
| ianw | what i literally just typed :) | 00:05 |
| *** yamamoto has joined #openstack-infra | 00:06 | |
| clarkb | afs nodes have /opt/puppetlabs now. Just waiting for puppet to run | 00:06 |
| *** lseki has quit IRC | 00:10 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/system-config master: letsencrypt: tighten certificate permissions https://review.openstack.org/651669 | 00:11 |
| openstackgerrit | Ian Wienand proposed openstack-infra/system-config master: Enable production cert generation for graphite01 https://review.openstack.org/651670 | 00:11 |
| *** yamamoto has quit IRC | 00:11 | |
| clarkb | Apr 11 00:15:30 afs01 puppet-user[5184]: (Facter) error while resolving custom fact "virtualenv_version": undefined method `[]' for nil:NilClass | 00:20 |
| *** ijw has quit IRC | 00:20 | |
| clarkb | cmurphy: ^ that doesn't seem to be a big issue for the afs servers (I don't think they install any python things) | 00:20 |
| clarkb | but I will look into it tomorrow to double check | 00:20 |
| cmurphy | hmm | 00:20 |
| cmurphy | that comes from the puppet-python module | 00:22 |
| *** rcernin has joined #openstack-infra | 00:22 | |
| *** betherly has joined #openstack-infra | 00:24 | |
| clarkb | cmurphy: I can rerun it will full debugging by hand tomorrow to narrow down the line it comes from | 00:25 |
| clarkb | but I need to figure out dinner now | 00:25 |
| cmurphy | we might need to upgrade the puppet-python module https://github.com/voxpupuli/puppet-python/commit/c2ca9d7495375bde781d766b3e6d3dd59cfbbed3#diff-2681005e333455b6b14db4672658adc4 | 00:26 |
| clarkb | ok that should be doable | 00:27 |
| clarkb | thanks for digging in | 00:27 |
| *** betherly has quit IRC | 00:28 | |
| *** mattw4 has quit IRC | 00:30 | |
| *** tjgresha_nope has joined #openstack-infra | 00:31 | |
| *** armax_ has joined #openstack-infra | 00:32 | |
| *** dpawlik has quit IRC | 00:32 | |
| *** tjgresha has quit IRC | 00:32 | |
| *** armax has quit IRC | 00:32 | |
| *** tbarron_ has quit IRC | 00:32 | |
| *** armax_ is now known as armax | 00:32 | |
| *** tobiash has quit IRC | 00:32 | |
| *** zerick has quit IRC | 00:32 | |
| *** trown has quit IRC | 00:32 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/system-config master: letsencrypt: tighten certificate permissions https://review.openstack.org/651669 | 00:32 |
| *** kukacz_ has quit IRC | 00:32 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/system-config master: Enable production cert generation for graphite01 https://review.openstack.org/651670 | 00:32 |
| *** timburke has quit IRC | 00:32 | |
| *** dpawlik has joined #openstack-infra | 00:32 | |
| *** kukacz has joined #openstack-infra | 00:33 | |
| *** zerick has joined #openstack-infra | 00:33 | |
| *** trown has joined #openstack-infra | 00:33 | |
| *** tobiash has joined #openstack-infra | 00:33 | |
| *** timburke has joined #openstack-infra | 00:34 | |
| *** mgoddard has quit IRC | 00:34 | |
| *** mgoddard has joined #openstack-infra | 00:37 | |
| *** tbachman has quit IRC | 00:43 | |
| *** tbachman has joined #openstack-infra | 00:46 | |
| mnaser | is it possible to disable glean during jobs | 00:48 |
| *** wolverineav has joined #openstack-infra | 00:52 | |
| *** wolverineav has quit IRC | 00:54 | |
| *** wolverineav has joined #openstack-infra | 00:55 | |
| mnaser | (this vpn thing is bringing up a new interface that glean is trying to manage) | 00:58 |
| clarkb | mnaser: it should ignore any interfaces that are not real interfaces | 00:59 |
| mnaser | hmm | 00:59 |
| *** rcernin has quit IRC | 00:59 | |
| clarkb | it will trigger then noop iirc | 00:59 |
| mnaser | clarkb: http://logs.openstack.org/65/651665/8/check/ansible-role-wireguard-integration-centos-7/5095f35/primary/journal.log seems to say otherwise | 00:59 |
| mnaser | DEBUG:glean:Writing output file : /etc/sysconfig/network-scripts/ifcfg-wg0 | 00:59 |
| *** wolverineav has quit IRC | 01:00 | |
| clarkb | I wonder if wg0 interfaces appear to be real and not virtual itnerfaces | 01:00 |
| clarkb | and I wonder if they would treat that as a bug | 01:00 |
| mnaser | I think that might be it, Wireguard is based on a kernel module and its pretty much managed with ip commands etc | 01:00 |
| clarkb | neutron and friends create a lot of interfaces too but we successfully ignore them | 01:00 |
| openstackgerrit | Clark Boylan proposed openstack-infra/nodepool master: Add simple max-server sanity check to base handler class https://review.openstack.org/651676 | 01:01 |
| mnaser | yeah I think neutron relies on tap/tun and friends | 01:01 |
| clarkb | well they all show up as network itnerfaces then there is an id type in sysfs we check against iirc | 01:01 |
| clarkb | let me find that code | 01:01 |
| clarkb | mnaser: https://opendev.org/openstack-infra/glean/src/branch/master/glean/cmd.py#L1178 it starts there | 01:02 |
| clarkb | based on that maybe we want ot ignore wg in that list | 01:03 |
| mnaser | ah there you go | 01:03 |
| clarkb | https://opendev.org/openstack-infra/glean/src/branch/master/glean/cmd.py#L1210-L1211 is the other check | 01:03 |
| mnaser | the first check might catch it I guess | 01:04 |
| mnaser | cat /sys/class/net/wg0/addr_assign_type = 0 | 01:04 |
| mnaser | so yeah.. | 01:04 |
| clarkb | thinking out loud here I wonder if we could invert the list at 1178 so that we only manage a known good set of interfaces | 01:04 |
| clarkb | but I'm not sure how much those change over time | 01:04 |
| mnaser | probably not much I guess.. | 01:06 |
| openstackgerrit | Mohammed Naser proposed openstack-infra/glean master: Ignore Wireguard interfaces https://review.openstack.org/651680 | 01:07 |
| mnaser | clarkb: ^ I put that up in the meantime.. and I guess I'll have to workaround a way to disable it | 01:07 |
| *** rcernin has joined #openstack-infra | 01:09 | |
| *** gyee has quit IRC | 01:10 | |
| *** armax has quit IRC | 01:14 | |
| *** bobh has joined #openstack-infra | 01:22 | |
| *** betherly has joined #openstack-infra | 01:33 | |
| *** jamesmcarthur has joined #openstack-infra | 01:34 | |
| *** betherly has quit IRC | 01:37 | |
| *** hwoarang has quit IRC | 01:38 | |
| *** hwoarang has joined #openstack-infra | 01:39 | |
| *** jamesmcarthur has quit IRC | 01:48 | |
| *** jamesmcarthur has joined #openstack-infra | 01:49 | |
| *** betherly has joined #openstack-infra | 01:54 | |
| *** betherly has quit IRC | 01:58 | |
| *** dave-mccowan has quit IRC | 02:01 | |
| *** yamamoto has joined #openstack-infra | 02:02 | |
| *** yamamoto has quit IRC | 02:09 | |
| *** sthussey has quit IRC | 02:11 | |
| *** ykarel|away has joined #openstack-infra | 02:12 | |
| *** betherly has joined #openstack-infra | 02:15 | |
| *** Goneri has quit IRC | 02:15 | |
| *** anks2k has joined #openstack-infra | 02:16 | |
| *** betherly has quit IRC | 02:19 | |
| *** wolverineav has joined #openstack-infra | 02:24 | |
| *** jamesmcarthur has quit IRC | 02:25 | |
| *** yamamoto has joined #openstack-infra | 02:25 | |
| *** yamamoto has quit IRC | 02:26 | |
| *** bobh has quit IRC | 02:31 | |
| *** bobh has joined #openstack-infra | 02:32 | |
| *** yamamoto has joined #openstack-infra | 02:32 | |
| *** bobh has quit IRC | 02:36 | |
| *** rh-jelabarre has quit IRC | 02:37 | |
| *** wolverineav has quit IRC | 02:41 | |
| *** bhavikdbavishi has joined #openstack-infra | 02:42 | |
| *** betherly has joined #openstack-infra | 02:46 | |
| *** igordc has quit IRC | 02:47 | |
| *** betherly has quit IRC | 02:50 | |
| *** nicolasbock has quit IRC | 03:03 | |
| *** hongbin has joined #openstack-infra | 03:03 | |
| *** bhavikdbavishi has quit IRC | 03:05 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/puppet-graphite master: Add a httpd SSL template https://review.openstack.org/651686 | 03:06 |
| *** psachin has joined #openstack-infra | 03:08 | |
| *** armax has joined #openstack-infra | 03:10 | |
| *** wolverineav has joined #openstack-infra | 03:13 | |
| *** betherly has joined #openstack-infra | 03:17 | |
| *** betherly has quit IRC | 03:22 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/system-config master: Pass SSL certs to graphite.opendev.org https://review.openstack.org/651687 | 03:25 |
| ianw | now i wonder if this fails CI because the puppet tests don't do the base.yaml setup on the hosts ... always something interesting to think about! | 03:25 |
| *** jamesmcarthur has joined #openstack-infra | 03:25 | |
| *** armax has quit IRC | 03:33 | |
| *** hwoarang has quit IRC | 03:35 | |
| *** hwoarang has joined #openstack-infra | 03:36 | |
| *** jamesmcarthur has quit IRC | 03:41 | |
| *** wolverineav has quit IRC | 03:43 | |
| *** bhavikdbavishi has joined #openstack-infra | 03:44 | |
| *** ykarel|away has quit IRC | 03:44 | |
| openstackgerrit | Merged openstack-infra/glean master: Ignore Wireguard interfaces https://review.openstack.org/651680 | 03:46 |
| ianw | mnaser: there's no much there, i think we can release that if it helps | 03:47 |
| ianw | i mean not much since the last release | 03:47 |
| *** ramishra has joined #openstack-infra | 03:48 | |
| *** betherly has joined #openstack-infra | 03:48 | |
| *** bhavikdbavishi1 has joined #openstack-infra | 03:49 | |
| *** bhavikdbavishi has quit IRC | 03:49 | |
| *** bhavikdbavishi1 is now known as bhavikdbavishi | 03:49 | |
| *** diablo_rojo has quit IRC | 03:50 | |
| *** betherly has quit IRC | 03:53 | |
| *** whoami-rajat has joined #openstack-infra | 03:54 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/puppet-graphite master: Add a httpd SSL template https://review.openstack.org/651686 | 03:54 |
| *** jamesmcarthur has joined #openstack-infra | 04:01 | |
| *** markvoelker has joined #openstack-infra | 04:02 | |
| *** imacdonn_ has quit IRC | 04:03 | |
| *** imacdonn_ has joined #openstack-infra | 04:04 | |
| *** hongbin has quit IRC | 04:05 | |
| *** ykarel|away has joined #openstack-infra | 04:06 | |
| *** ykarel|away is now known as ykarel | 04:10 | |
| *** ricolin has joined #openstack-infra | 04:10 | |
| *** ykarel_ has joined #openstack-infra | 04:13 | |
| *** ykarel has quit IRC | 04:16 | |
| *** jamesmcarthur has quit IRC | 04:19 | |
| openstackgerrit | Ian Wienand proposed openstack-infra/puppet-graphite master: Add a httpd SSL template https://review.openstack.org/651686 | 04:29 |
| *** betherly has joined #openstack-infra | 04:30 | |
| *** bobh has joined #openstack-infra | 04:30 | |
| *** lmiccini has joined #openstack-infra | 04:31 | |
| *** betherly has quit IRC | 04:34 | |
| *** bobh has quit IRC | 04:35 | |
| *** lmiccini has quit IRC | 04:36 | |
| *** lmiccini has joined #openstack-infra | 04:36 | |
| *** markvoelker has quit IRC | 04:36 | |
| clarkb | ianw mnaser I can make a glean release tomorrow if ianw doesnt want to do one today | 04:38 |
| clarkb | I'm not in a good spot to help monitor if things have a sad so no worries if we wait for tomorrow | 04:39 |
| *** lmiccini has quit IRC | 04:39 | |
| *** lmiccini has joined #openstack-infra | 04:40 | |
| mnaser | clarkb: I’ve worked around it personally by deleting the udev file in the job before things start so I’m not blocked at least, so feel free to take your time | 04:40 |
| mnaser | I got a 2 node job that uses the role to setup VPN between them and runs a ping test both sides. Pretty darn cool. | 04:41 |
| clarkb | nice | 04:41 |
| ianw | mnaser / clarkb: ok, 1.14.0 pushed | 04:44 |
| openstackgerrit | Tristan Cacqueray proposed openstack-infra/nodepool master: Add python-path option to node https://review.openstack.org/637338 | 04:44 |
| *** mhu has quit IRC | 04:45 | |
| openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul-jobs master: Add ansible-lint job https://review.openstack.org/532083 | 04:46 |
| *** diablo_rojo has joined #openstack-infra | 04:50 | |
| *** armax has joined #openstack-infra | 04:51 | |
| anks2k | how can i run tempest against 3rd party storage before my driver is merged ? When enabled backends are to be used, it expects the driver to be present in the volume/drivers. Sugeest please | 04:54 |
| anks2k | Should i be manually copying the driver files and test it ? any help appreciated | 04:54 |
| *** hwoarang has quit IRC | 05:00 | |
| *** betherly has joined #openstack-infra | 05:01 | |
| *** hwoarang has joined #openstack-infra | 05:02 | |
| *** betherly has quit IRC | 05:06 | |
| fungi | anks2k: the tempest maintainers can usually be found in #openstack-qa | 05:21 |
| clarkb | ianw: thanks | 05:22 |
| clarkb | anks2k: fungi also the cinder project may have pointers since others are testing their drivers too | 05:22 |
| anks2k | fungi: clarkb: Yes, but this is from the 2rd party CI perspective. I have everything setup but a recent comment said i am running LVM as driver. but if i include the new driver in the conf file, it expects the driver to be present in that location. As this CI is for a new driver that has not yet been merged, im unable to figure out the right to get it done | 05:24 |
| anks2k | 3rd* | 05:24 |
| clarkb | you should install the proposed code/driver and test that | 05:27 |
| *** e0ne has joined #openstack-infra | 05:28 | |
| anks2k | Okay, so manually placing the driver files and then run tempest suite would be the preferred method ? | 05:28 |
| clarkb | no, I think the preferred method is to fetch the contents of the gerrit change, install, and test that in an automated fashion | 05:29 |
| clarkb | you can set up a CI system like jenkins or zuul to listen to the gerrit event stream then take action on events you care about, fetch and pull the proposed code, then isntall and testit | 05:29 |
| *** quiquell|off is now known as quiquell|rover | 05:32 | |
| anks2k | Thanks, much appreciated. Yes, We have entire CI infra and function setup. For incoming new patches for cinder project, i am pushing local.conf with new driver class as enabled driver. So testing a new incoming patch against my driver would happen only if the driver is present in cinder/volume/drivers. If not, i will have to place these files and execute the test for a new patch against my 3rd party driver | 05:32 |
| *** betherly has joined #openstack-infra | 05:32 | |
| *** markvoelker has joined #openstack-infra | 05:33 | |
| openstackgerrit | YAMAMOTO Takashi proposed openstack-infra/project-config master: Update taas grafana dashboard https://review.openstack.org/651693 | 05:35 |
| *** bobh has joined #openstack-infra | 05:35 | |
| *** betherly has quit IRC | 05:37 | |
| *** bobh has quit IRC | 05:39 | |
| *** hwoarang has quit IRC | 05:40 | |
| *** hwoarang has joined #openstack-infra | 05:41 | |
| *** wolverineav has joined #openstack-infra | 05:44 | |
| *** jtomasek has quit IRC | 05:48 | |
| *** wolverineav has quit IRC | 05:48 | |
| *** e0ne has quit IRC | 05:50 | |
| *** yamamoto has quit IRC | 05:50 | |
| *** e0ne has joined #openstack-infra | 05:51 | |
| *** yamamoto has joined #openstack-infra | 05:52 | |
| *** betherly has joined #openstack-infra | 05:53 | |
| *** dulek has quit IRC | 05:56 | |
| *** gouthamr has quit IRC | 05:56 | |
| *** betherly has quit IRC | 05:57 | |
| *** ramishra has quit IRC | 05:58 | |
| *** gouthamr has joined #openstack-infra | 06:00 | |
| *** kjackal has joined #openstack-infra | 06:03 | |
| *** udesale has joined #openstack-infra | 06:03 | |
| *** anks2k has quit IRC | 06:04 | |
| *** dulek has joined #openstack-infra | 06:05 | |
| *** markvoelker has quit IRC | 06:06 | |
| *** e0ne has quit IRC | 06:08 | |
| *** kopecmartin|off is now known as kopecmartin | 06:09 | |
| *** larainema has joined #openstack-infra | 06:10 | |
| *** ramishra has joined #openstack-infra | 06:10 | |
| *** ykarel_ is now known as ykarel | 06:11 | |
| openstackgerrit | Tristan Cacqueray proposed openstack-infra/zuul-jobs master: Add ansible-lint job https://review.openstack.org/532083 | 06:12 |
| *** whoami-rajat has quit IRC | 06:13 | |
| *** yamamoto has quit IRC | 06:18 | |
| *** yamamoto has joined #openstack-infra | 06:20 | |
| *** yamamoto has quit IRC | 06:20 | |
| *** yamamoto has joined #openstack-infra | 06:20 | |
| *** yamamoto has quit IRC | 06:25 | |
| *** pgaxatte has joined #openstack-infra | 06:25 | |
| *** whoami-rajat has joined #openstack-infra | 06:25 | |
| *** quiquell|rover is now known as quique|rover|brb | 06:26 | |
| *** armax has quit IRC | 06:26 | |
| *** betherly has joined #openstack-infra | 06:45 | |
| *** betherly has quit IRC | 06:49 | |
| *** diablo_rojo has quit IRC | 06:56 | |
| openstackgerrit | Andreas Jaeger proposed openstack-infra/project-config master: WIP: Fix propose-project-config-update https://review.openstack.org/651702 | 06:57 |
| *** yamamoto has joined #openstack-infra | 06:59 | |
| *** ccamacho has joined #openstack-infra | 07:00 | |
| *** markvoelker has joined #openstack-infra | 07:03 | |
| AJaeger | infra-root, what is Intel SriovTaas CI ? It gave a vote on project-config, see change above | 07:03 |
| *** slaweq has joined #openstack-infra | 07:03 | |
| *** yamamoto has quit IRC | 07:04 | |
| *** betherly has joined #openstack-infra | 07:05 | |
| *** rpittau|afk is now known as rpittau | 07:06 | |
| *** ginopc has joined #openstack-infra | 07:06 | |
| *** quique|rover|brb is now known as quiquell|rover | 07:06 | |
| * AJaeger reaches out to https://wiki.openstack.org/wiki/ThirdPartySystems/Intel-SRIOV-CI now | 07:07 | |
| *** dayou_ has quit IRC | 07:07 | |
| *** betherly has quit IRC | 07:11 | |
| *** bobh has joined #openstack-infra | 07:14 | |
| *** zhurong has joined #openstack-infra | 07:15 | |
| *** jpich has joined #openstack-infra | 07:16 | |
| *** bobh has quit IRC | 07:18 | |
| *** dayou_ has joined #openstack-infra | 07:26 | |
| *** betherly has joined #openstack-infra | 07:26 | |
| *** betherly has quit IRC | 07:31 | |
| *** ykarel is now known as ykarel|lunch | 07:32 | |
| *** gregoryo has joined #openstack-infra | 07:33 | |
| *** jpena|off is now known as jpena | 07:36 | |
| *** markvoelker has quit IRC | 07:36 | |
| *** tosky has joined #openstack-infra | 07:39 | |
| *** betherly has joined #openstack-infra | 07:45 | |
| *** e0ne has joined #openstack-infra | 07:49 | |
| *** betherly has quit IRC | 07:50 | |
| *** e0ne has quit IRC | 07:51 | |
| evrardjp | mmm gerrit issues -- is that only me? | 07:54 |
| evrardjp | it's only me. | 07:55 |
| evrardjp | my bad! | 07:55 |
| *** e0ne has joined #openstack-infra | 07:56 | |
| frickler | AJaeger: I saw some weird votes on devstack patches a couple of days ago, too. dtroyer mentioned on the ML that Intel are rebuilding their CI setup. I agree though that they should be more careful with how they test | 08:02 |
| *** betherly has joined #openstack-infra | 08:06 | |
| frickler | AJaeger: also to be fair, it didn't vote, it just posted it's results, with broken links to an internal server, though. | 08:06 |
| *** jtomasek has joined #openstack-infra | 08:06 | |
| *** yamamoto has joined #openstack-infra | 08:08 | |
| *** iurygregory_ has joined #openstack-infra | 08:10 | |
| *** betherly has quit IRC | 08:10 | |
| *** lucasagomes has joined #openstack-infra | 08:18 | |
| *** betherly has joined #openstack-infra | 08:19 | |
| *** owalsh has quit IRC | 08:19 | |
| AJaeger | frickler: yes, indeed - not a vote, just a report by a broken system. | 08:21 |
| *** iurygregory_ is now known as iurygregory | 08:22 | |
| *** priteau has joined #openstack-infra | 08:22 | |
| iurygregory | morning all o/ | 08:22 |
| *** betherly has quit IRC | 08:23 | |
| *** ykarel|lunch is now known as ykarel | 08:24 | |
| *** gregoryo has quit IRC | 08:25 | |
| *** gfidente has joined #openstack-infra | 08:27 | |
| *** yolanda_ has joined #openstack-infra | 08:29 | |
| *** markvoelker has joined #openstack-infra | 08:34 | |
| *** owalsh has joined #openstack-infra | 08:34 | |
| *** derekh has joined #openstack-infra | 08:34 | |
| *** dtantsur|afk is now known as dtantsur | 08:35 | |
| *** e0ne has quit IRC | 08:39 | |
| *** betherly has joined #openstack-infra | 08:39 | |
| *** betherly has quit IRC | 08:44 | |
| *** e0ne has joined #openstack-infra | 08:48 | |
| *** tkajinam has quit IRC | 08:58 | |
| *** wolverineav has joined #openstack-infra | 09:00 | |
| *** wolverineav has quit IRC | 09:05 | |
| *** markvoelker has quit IRC | 09:07 | |
| *** tbarron has joined #openstack-infra | 09:21 | |
| *** e0ne has quit IRC | 09:26 | |
| *** e0ne has joined #openstack-infra | 09:30 | |
| *** electrofelix has joined #openstack-infra | 09:40 | |
| *** betherly has joined #openstack-infra | 09:41 | |
| *** betherly has quit IRC | 09:46 | |
| *** bobh has joined #openstack-infra | 09:56 | |
| *** yamamoto has quit IRC | 09:56 | |
| openstackgerrit | Merged openstack-infra/irc-meetings master: Move the release team meeting https://review.openstack.org/651443 | 09:58 |
| *** bobh has quit IRC | 10:00 | |
| *** yamamoto has joined #openstack-infra | 10:02 | |
| *** markvoelker has joined #openstack-infra | 10:04 | |
| *** yamamoto has quit IRC | 10:06 | |
| *** e0ne has quit IRC | 10:10 | |
| *** bhavikdbavishi has quit IRC | 10:12 | |
| *** e0ne has joined #openstack-infra | 10:15 | |
| *** lpetrut has joined #openstack-infra | 10:27 | |
| *** yamamoto has joined #openstack-infra | 10:32 | |
| *** markvoelker has quit IRC | 10:36 | |
| *** ginopc has quit IRC | 10:37 | |
| *** ginopc has joined #openstack-infra | 10:37 | |
| *** yolanda_ has quit IRC | 10:40 | |
| *** ginopc has quit IRC | 10:42 | |
| *** ginopc has joined #openstack-infra | 10:43 | |
| *** nicolasbock has joined #openstack-infra | 10:45 | |
| *** ginopc has quit IRC | 10:48 | |
| *** e0ne has quit IRC | 10:51 | |
| *** yolanda_ has joined #openstack-infra | 10:52 | |
| *** yamamoto has quit IRC | 10:54 | |
| *** tbachman has quit IRC | 10:54 | |
| *** ginopc has joined #openstack-infra | 10:55 | |
| *** jpena is now known as jpena|lunch | 10:56 | |
| *** udesale has quit IRC | 10:57 | |
| *** e0ne has joined #openstack-infra | 10:57 | |
| openstackgerrit | Merged openstack-infra/storyboard master: Whitelist `rm` for docs target in tox.ini https://review.openstack.org/644920 | 10:59 |
| *** priteau has quit IRC | 10:59 | |
| *** kjackal has quit IRC | 11:02 | |
| *** kjackal has joined #openstack-infra | 11:05 | |
| *** bhavikdbavishi has joined #openstack-infra | 11:08 | |
| *** e0ne has quit IRC | 11:17 | |
| *** ginopc has quit IRC | 11:20 | |
| *** ginopc has joined #openstack-infra | 11:22 | |
| *** ginopc has quit IRC | 11:27 | |
| openstackgerrit | Andreas Jaeger proposed openstack-infra/project-config master: Fix propose-project-config-update https://review.openstack.org/651702 | 11:34 |
| AJaeger | mordred, config-core, we need another change to get the proposal job working again ^ | 11:34 |
| *** ricolin has quit IRC | 11:37 | |
| *** dave-mccowan has joined #openstack-infra | 11:38 | |
| *** ginopc has joined #openstack-infra | 11:42 | |
| *** Dobroslaw is now known as Dobroslaw_afk | 11:48 | |
| *** eharney has joined #openstack-infra | 11:49 | |
| *** _erlon_ has joined #openstack-infra | 11:50 | |
| *** nicolasbock has quit IRC | 11:53 | |
| *** rlandy has joined #openstack-infra | 11:57 | |
| *** rlandy is now known as rlandy|ruck | 11:58 | |
| *** ykarel is now known as ykarel|afk | 11:59 | |
| *** nicolasbock has joined #openstack-infra | 12:00 | |
| *** yamamoto has joined #openstack-infra | 12:01 | |
| *** rh-jelabarre has joined #openstack-infra | 12:05 | |
| openstackgerrit | Andreas Jaeger proposed openstack-infra/project-config master: Fix propose-project-config-update https://review.openstack.org/651702 | 12:10 |
| AJaeger | frickler: thanks for review, updated ^ | 12:10 |
| *** tbachman has joined #openstack-infra | 12:11 | |
| *** jamesmcarthur has joined #openstack-infra | 12:13 | |
| zbr | AJaeger: is it possible to add extra setup role on a standard jobs like tox' ones? i only need to install docker and I wonder if there is a to do this without creating new job definitions. | 12:22 |
| *** jpena|lunch is now known as jpena | 12:26 | |
| dtroyer | AJaeger: if Tim doesn't get back to you ping me, I'm picking up much of the human-interface of the Intel 3CI bits now. We know what it is reporting is broken, I'll ask Tim to just turn it off until we are allowed to report from the new setup (I just LOVE big companies sometimes) | 12:33 |
| *** jamesmcarthur has quit IRC | 12:34 | |
| frickler | AJaeger: +2, thx | 12:36 |
| *** msmarcal|eod is now known as msmarcal | 12:39 | |
| *** trown has quit IRC | 12:39 | |
| openstackgerrit | Merged openstack-infra/storyboard master: Add docker-compose based dev setup instructions https://review.openstack.org/644921 | 12:40 |
| *** jamesmcarthur has joined #openstack-infra | 12:47 | |
| *** ykarel|afk is now known as ykarel | 12:52 | |
| *** kgiusti has joined #openstack-infra | 12:53 | |
| *** aaronsheffield has joined #openstack-infra | 12:55 | |
| *** e0ne has joined #openstack-infra | 12:56 | |
| *** quiquell|rover is now known as quiquell|lunch | 12:59 | |
| *** udesale has joined #openstack-infra | 13:00 | |
| *** wolverineav has joined #openstack-infra | 13:01 | |
| openstackgerrit | Merged openstack-infra/storyboard master: Rewrite/clarify non-docker dev env instructions https://review.openstack.org/644922 | 13:03 |
| *** jamesmcarthur has quit IRC | 13:04 | |
| *** wolverineav has quit IRC | 13:05 | |
| *** yamamoto has quit IRC | 13:08 | |
| *** Goneri has joined #openstack-infra | 13:15 | |
| *** jpich has quit IRC | 13:17 | |
| *** bhavikdbavishi has quit IRC | 13:17 | |
| *** jpich has joined #openstack-infra | 13:17 | |
| *** e0ne has quit IRC | 13:18 | |
| *** rcernin has quit IRC | 13:18 | |
| *** pcaruana has quit IRC | 13:20 | |
| *** jcoufal has joined #openstack-infra | 13:21 | |
| *** yamamoto has joined #openstack-infra | 13:26 | |
| *** e0ne has joined #openstack-infra | 13:27 | |
| *** tbachman has quit IRC | 13:28 | |
| *** mriedem has joined #openstack-infra | 13:28 | |
| *** psachin has quit IRC | 13:30 | |
| AJaeger | zbr, sure - let me grab you the docs ;) | 13:31 |
| *** tbachman has joined #openstack-infra | 13:32 | |
| zbr | AJaeger: I have a working POC at https://review.openstack.org/#/c/636923/28/playbooks/tox-molecule/pre-run.yml but I wonder if there is a nicer way to do it. in the end, I only need to run tox on a machine that has docker. | 13:34 |
| AJaeger | zbr, see https://zuul-ci.org/docs/zuul-jobs/general-roles.html#role-test-setup | 13:35 |
| AJaeger | that role is part of the tox jobs | 13:35 |
| AJaeger | zbr: for just docker: bindep.txt should work as well | 13:35 |
| AJaeger | zbr, bindep.txt allows installation of arbitrary packages. If you need extra setup, you can use the tools/test-setup.sh file | 13:36 |
| zbr | AJaeger: not really, because installing docker package does require some extra steps on some platform, the ansible role takes care of that. | 13:36 |
| AJaeger | dtroyer: thanks, will do - let's give him a chance first ;) | 13:36 |
| zbr | but i am pleased that I learned about this trick, which could be handy for running some commands before tox on tox jobs. | 13:36 |
| AJaeger | ;) | 13:37 |
| *** quiquell|lunch is now known as quiquell|rover | 13:37 | |
| zbr | i guess that for the momen ti would be better to stick to rhe pre-run.yml which just works. | 13:39 |
| *** pcaruana has joined #openstack-infra | 13:42 | |
| AJaeger | zbr, sure, go for it to make it transparent. | 13:43 |
| openstackgerrit | Merged openstack-infra/project-config master: Fix propose-project-config-update https://review.openstack.org/651702 | 13:46 |
| *** tbachman has quit IRC | 13:47 | |
| *** Lucas_Gray has joined #openstack-infra | 13:50 | |
| *** tbachman has joined #openstack-infra | 13:51 | |
| *** ricolin has joined #openstack-infra | 13:55 | |
| smcginnis | Umm, anyone know what's going on with patch 552700 in the check queue? No nodes for the job? | 14:04 |
| openstackgerrit | Merged openstack-infra/system-config master: Skip mirroring live and jeos images for opensuse https://review.openstack.org/648632 | 14:09 |
| anteaya | clarkb: did an email notification about the gerrit downtime on April 19th already go out and I just am unable to find it? | 14:09 |
| *** ianychoi has quit IRC | 14:13 | |
| *** ianychoi has joined #openstack-infra | 14:14 | |
| anteaya | I'm* | 14:15 |
| *** lpetrut has quit IRC | 14:19 | |
| fungi | smcginnis: yeah, i think our only existing arm64 cloud is broken for roughly a week now. we have credentials for a new one they want to replace it with, just need time to get them integrated properly | 14:24 |
| smcginnis | fungi: Makes sense. I can comment on that patch to see if we want to just abandon for now, or just leaving it sitting out there waiting. | 14:25 |
| smcginnis | That's a long time in queue! | 14:25 |
| openstackgerrit | sebastian marcet proposed openstack-infra/openstackid master: Migrated Mail from native to Sendgrid API https://review.openstack.org/651794 | 14:25 |
| fungi | smcginnis: maybe pabelanger can make the call since it's his change, though it's not really wasting any resources just confusing folks who see it in the pipeline | 14:27 |
| *** e0ne has quit IRC | 14:27 | |
| smcginnis | Yeah, true. | 14:27 |
| pabelanger | fungi: smcginnis which change? | 14:28 |
| pabelanger | oh https://review.openstack.org/552700/ | 14:29 |
| smcginnis | pabelanger: https://review.openstack.org/#/c/552700/ | 14:29 |
| pabelanger | hmm, I didn't recheck that | 14:29 |
| smcginnis | Picked up by Ian. | 14:29 |
| pabelanger | I can abandon if people want | 14:30 |
| pabelanger | but I don't have time anymore sadly to work on that | 14:30 |
| pabelanger | Oh, I did abandon, ianw restored it | 14:30 |
| *** e0ne has joined #openstack-infra | 14:31 | |
| pabelanger | done | 14:32 |
| *** lseki has joined #openstack-infra | 14:32 | |
| *** quiquell|rover is now known as quiquell|off | 14:34 | |
| *** e0ne has quit IRC | 14:34 | |
| fungi | heh, it's easy for us to restore again once the ewr1 cloud is online. maybe i can take a look at the proposed nodepool config today and work out which hostvars we need | 14:36 |
| openstackgerrit | sebastian marcet proposed openstack-infra/puppet-openstackid master: Add sendgrid support https://review.openstack.org/651798 | 14:37 |
| *** udesale has quit IRC | 14:38 | |
| *** ykarel is now known as ykarel|away | 14:38 | |
| *** e0ne has joined #openstack-infra | 14:41 | |
| openstackgerrit | sebastian marcet proposed openstack-infra/puppet-openstackid master: Add sendgrid support https://review.openstack.org/651798 | 14:42 |
| *** bobh has joined #openstack-infra | 14:44 | |
| clarkb | anteaya: I sent it to each of the -discuss mailing lists gor our communities | 14:45 |
| clarkb | http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004823.html for example | 14:46 |
| *** ykarel|away has quit IRC | 14:47 | |
| *** e0ne has quit IRC | 14:48 | |
| *** e0ne has joined #openstack-infra | 14:48 | |
| *** bobh has quit IRC | 14:49 | |
| openstackgerrit | sebastian marcet proposed openstack-infra/system-config master: Added openstackid dev sendgrid support https://review.openstack.org/651806 | 14:50 |
| *** bobh has joined #openstack-infra | 14:50 | |
| *** dklyle has joined #openstack-infra | 14:51 | |
| anteaya | clarkb: that is for the lists server on April 12, I'm asking about the downtime on the 19th | 14:52 |
| anteaya | it affects gerrit, does it not? the repo renames? | 14:52 |
| clarkb | oh sorry I have that on my mind. Not yet. Now that jroll and fungi have a rough plan we should probably start sending those out | 14:53 |
| clarkb | there was an earlier thread from corvus that mentions it iirc but weshould do the moreimpending change announvements with the details we now have | 14:54 |
| fungi | the one remaining bikeshed is we need to decide on what new namespace we're going to dump non-openstack projects into if they don't request one themselves | 14:54 |
| fungi | whereby "we" i mean the infra/opendev team | 14:54 |
| anteaya | yes I see those two, the jroll one and the corvuw one | 14:54 |
| fungi | the openstack tc made a suggestion, but it was really more of a placeholder to use as a point of reference in the plan for the official openstack repos | 14:54 |
| anteaya | does the bikeshed need to hold up the 'gerrit will be offline april 19th' email announcement? | 14:55 |
| clarkb | fungi: I'm liking the simplicity of _/ asit also doesnt imply anything in terms of endorsement | 14:55 |
| fungi | nope, but if we don't decide before that's sent then the laid out plan will say something like "and tehre are these thousand or so repos we're going to move to another namespace but we don't know what it will be called" | 14:55 |
| fungi | clarkb: yeah, i'm in favor of something short and generic ("git" seems like another possibility there), but hard to find anything shorter than "_" | 14:57 |
| *** armax has joined #openstack-infra | 14:57 | |
| fungi | my biggest worry there is if it will be too subtle and people will try to leave it out of urls | 14:57 |
| fungi | or possibly some weird normalization rule in gitea for organizations whose names consist only of punctuation | 14:58 |
| clarkb | also does it get urlencoded to something less clean | 14:58 |
| mordred | I'd say if gitea can't handle it, then it's a bad choice :) | 14:59 |
| *** kjackal has quit IRC | 15:01 | |
| anteaya | okay great, if we can get some idea of what the something will be awesome | 15:01 |
| anteaya | I'm just thinking folks should know | 15:02 |
| clarkb | ++ | 15:02 |
| anteaya | thanks | 15:03 |
| anteaya | I'll go back to finishing off now, I'll bug again later | 15:04 |
| anteaya | I'm trying to avoid syrup on my keyboard | 15:04 |
| AJaeger | fungi: call the namespace "dumping-ground" or "bikeshed" ;) | 15:04 |
| *** sthussey has joined #openstack-infra | 15:05 | |
| *** e0ne has quit IRC | 15:08 | |
| *** tbachman has quit IRC | 15:09 | |
| *** gyee has joined #openstack-infra | 15:12 | |
| *** e0ne has joined #openstack-infra | 15:13 | |
| *** bhavikdbavishi has joined #openstack-infra | 15:13 | |
| mordred | anteaya: what about keyboard in your syrup? is that also bada? | 15:15 |
| *** ykarel|away has joined #openstack-infra | 15:18 | |
| *** iurygregory_ has joined #openstack-infra | 15:28 | |
| *** iurygregory has quit IRC | 15:29 | |
| *** e0ne has quit IRC | 15:32 | |
| *** lucasagomes has quit IRC | 15:37 | |
| *** yamamoto has quit IRC | 15:41 | |
| *** tbachman has joined #openstack-infra | 15:41 | |
| *** pcaruana has quit IRC | 15:42 | |
| *** iurygregory_ is now known as iurygregory | 15:45 | |
| *** wolverineav has joined #openstack-infra | 15:45 | |
| *** hamzy has quit IRC | 15:47 | |
| *** eernst has joined #openstack-infra | 15:48 | |
| *** ccamacho has quit IRC | 15:49 | |
| *** jamesmcarthur has joined #openstack-infra | 15:49 | |
| *** wolverineav has quit IRC | 15:49 | |
| *** jamesmcarthur_ has joined #openstack-infra | 15:50 | |
| *** jamesmcarthur has quit IRC | 15:50 | |
| *** tbachman has quit IRC | 15:52 | |
| jroll | clarkb: fwiw, both python and JS agree that "_" does not get urlencoded | 15:53 |
| jroll | (ditto for chrome) | 15:53 |
| *** ginopc has quit IRC | 15:53 | |
| *** ginopc has joined #openstack-infra | 15:54 | |
| clarkb | I cant come up with a good reason not to use _ then :) | 15:54 |
| openstackgerrit | Matthieu Huin proposed openstack-infra/zuul master: [DNM] admin REST API: docker-compose PoC, frontend https://review.openstack.org/643536 | 15:55 |
| jroll | yeah, I think I stole the idea from dockerhub's official images, e.g. https://hub.docker.com/_/busybox | 15:55 |
| dtroyer | The only reason I would prefer something (even "none") over '_' is it is shorter to say a one syllable word than "underscore" and "no, not dash, underscore" :) | 15:55 |
| clarkb | dtroyer: fungi's suggestion of 'git' works well for that I suppose | 15:56 |
| dtroyer | yup, although would that confuse folks used to seeing 'cgit' in that spot? | 15:57 |
| fungi | well, it would be in clone urls too | 15:57 |
| *** pgaxatte has quit IRC | 15:58 | |
| *** diablo_rojo has joined #openstack-infra | 15:59 | |
| clarkb | spoken it is https opendev dot org slash git slash ara | 15:59 |
| clarkb | which is easier to say and understand than slash underscore slash ara | 16:00 |
| clarkb | I dont expect much confusion unless people assume they need to do slaeh git slash openstack slash nova | 16:00 |
| jroll | I can get behind git for that reason, I'm fairly apathetic on the name though | 16:01 |
| fungi | well, i think that one's going to be slash ara slash ara ;) | 16:01 |
| *** bhavikdbavishi has quit IRC | 16:01 | |
| fungi | but point made | 16:01 |
| *** chandankumar is now known as raukadah | 16:01 | |
| *** iurygregory has quit IRC | 16:02 | |
| clarkb | can really break tools and use ∅ | 16:11 |
| *** ramishra has quit IRC | 16:14 | |
| *** quiquell|off has quit IRC | 16:14 | |
| clarkb | independent/ is longer to type but might convey that these are projects with their own destiny | 16:14 |
| *** rpittau is now known as rpittau|afk | 16:15 | |
| clarkb | I'm going yo find toast and think on this more. But we should probably decide on something and start sending email :) | 16:15 |
| *** tbachman has joined #openstack-infra | 16:15 | |
| *** ianychoi has quit IRC | 16:20 | |
| *** gfidente is now known as gfidente|afk | 16:23 | |
| fungi | "misc" | 16:23 |
| anteaya | mordred: keyboard in the syrup would make for a chunky pour | 16:24 |
| anteaya | mordred: not exactly what I go for but some might like it | 16:25 |
| fungi | i do rather like my syrup on the less refined end of the scale | 16:25 |
| anteaya | you'd like the stuff still stuck in my filter then | 16:26 |
| anteaya | lots of sand and branches | 16:26 |
| anteaya | I like a word better than _ myself for the point dtroyer made earlier | 16:27 |
| anteaya | but anything is better than delaying the email | 16:27 |
| anteaya | since I'm going with some folks don't know at all there will be an outage next week | 16:29 |
| *** tbachman has quit IRC | 16:31 | |
| *** zbr has quit IRC | 16:34 | |
| *** Lucas_Gray has quit IRC | 16:36 | |
| *** jpich has quit IRC | 16:37 | |
| *** Lucas_Gray has joined #openstack-infra | 16:38 | |
| *** dave-mccowan has quit IRC | 16:39 | |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack-infra/nodepool master: Implement max-servers for AWS driver https://review.openstack.org/649474 | 16:40 |
| *** zbr has joined #openstack-infra | 16:40 | |
| *** ginopc has quit IRC | 16:40 | |
| *** ricolin has quit IRC | 16:44 | |
| clarkb | I've had toast and now drinking tea. I keep coming back to _/ for the simplicty of it from a connotation perspective | 16:46 |
| clarkb | one of the goals of this whole exercise is to remove ambiguity about endorsement of software and _ seems devoid of any such unwanted endorsement | 16:46 |
| clarkb | considering dockerhub uses similar I don't expect people will be too confused by it even if saying it out loud is a bit more painful | 16:46 |
| fungi | i can get behind it | 16:48 |
| *** dtantsur is now known as dtantsur|afk | 16:50 | |
| openstackgerrit | Clark Boylan proposed openstack-infra/system-config master: Update puppet-python to "fix" broken facts https://review.openstack.org/651877 | 16:51 |
| clarkb | cmurphy: infra-root ^ fyi cleanup on puppet-4 error from yesterday | 16:51 |
| clarkb | I'm going to continue on with topic:puppet-4 now as well | 16:51 |
| *** jamesmcarthur has joined #openstack-infra | 16:52 | |
| anteaya | sure if we acknowledge we need to repeat underscore to get people to see it then fine | 16:53 |
| anteaya | it certainly does not convey endorsement | 16:54 |
| clarkb | thinking about communication as well our liasons should be able to do direct communication on $medium for their groups as well | 16:55 |
| clarkb | I expect that this will be particularly useful for airship, starlingx, and zuul | 16:55 |
| *** jamesmcarthur_ has quit IRC | 16:56 | |
| anteaya | fair enough | 16:56 |
| anteaya | if you wanted to start an etherpad for an email announcment I can work on it with you | 16:56 |
| clarkb | let me dig up corvus' original email so that we don't contradict anything in that one | 16:57 |
| clarkb | http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html | 16:58 |
| anteaya | awesome | 16:58 |
| anteaya | I think it is time for me to toast and tea | 16:58 |
| anteaya | back in a bit | 16:58 |
| clarkb | I think we can reuse a good chunk of that email and replace the bit at the end that talks about what we need from the projects and replace it with what the projects have decided on | 16:59 |
| clarkb | and replace any "we need to plan these things" to "here is our plan" | 16:59 |
| *** hamzy has joined #openstack-infra | 17:00 | |
| cmurphy | clarkb: fwiw I'm not positive that update will fix the problem, it's a guess, but since it's a bugfix release update i think it's safe to try | 17:03 |
| clarkb | cmurphy: yup should be quite safe and touches the code in question | 17:04 |
| mordred | clarkb: well - one counter-argument for _ due to the dockerhub use of it - on dockerhub, _ as an org communicates "this is a super official image" | 17:04 |
| clarkb | cmurphy: if it still has an error after that we can run with full debugging output and go from there | 17:04 |
| openstackgerrit | Mohammed Naser proposed openstack-infra/project-config master: Add vexxhost/ansible-role-docker-registry https://review.openstack.org/651879 | 17:04 |
| clarkb | mordred: hrm | 17:04 |
| mordred | clarkb: (although I like it as communicating "not part of an org" for us - just saying, the connotations overthere are a little opposite what we want our connotations to be) | 17:04 |
| mnaser | ^ weee, another thing to push up into opendev if y'all don't mind :) | 17:05 |
| mnaser | yeah also images under _ namespace in docker world are "ultimate official authority" | 17:05 |
| *** pcaruana has joined #openstack-infra | 17:05 | |
| *** igordc has joined #openstack-infra | 17:06 | |
| clarkb | in those cases dockerhub/docker isn't responsible for those images right? | 17:06 |
| clarkb | it is still the responsibility of the underlying content managers to manage it | 17:06 |
| clarkb | which is I think what we want to convey | 17:07 |
| clarkb | opendev and openstack have nothing to do with this content from a management perspective. We host it beacuse we are nice | 17:07 |
| *** yamamoto has joined #openstack-infra | 17:08 | |
| mnaser | https://docs.docker.com/docker-hub/official_images/ | 17:08 |
| mnaser | "Docker, Inc. sponsors a dedicated team that is responsible for reviewing and publishing all content in the Official Images. This team works in collaboration with upstream software maintainers, security experts, and the broader Docker community." | 17:08 |
| clarkb | ok so it really is the opposite thing | 17:09 |
| mnaser | if you want to live within '_' you have to go through an application process, etc | 17:09 |
| *** jpena is now known as jpena|off | 17:10 | |
| clarkb | ok I think I'm back to liking 'git/' then | 17:10 |
| clarkb | the drawback to 'git/' is what happens if we ever want to host git things :) but I'm not too worried about that and git is like xerox at this point | 17:11 |
| *** derekh has quit IRC | 17:11 | |
| mordred | clarkb: yeah - I think it's fairly unlikley the git project will move to opendev | 17:11 |
| fungi | one thing we haven't much communicated (or even discussed) what will happen by default to git mirroring for all the repos which are moving out of the openstack namespace to whatever placeholder we decide on | 17:12 |
| *** tbachman has joined #openstack-infra | 17:13 | |
| clarkb | fungi: I think it will be "assist in configuring dmsimard's post job for that repo" | 17:13 |
| clarkb | because replicating to github.com/openstack/ will just persist the confusion | 17:13 |
| fungi | right, no that part is apparent | 17:13 |
| anteaya | we could go with xerox | 17:14 |
| fungi | i mean we haven't officially said anywhere in announcements that the github mirrors for non-openstack things in the openstack namespace will either cease updating or get deleted if nobody works with us to move them in some as-of-yet-unspecified timeframe | 17:14 |
| clarkb | fungi: got it, I think mostly because that is an openstack tc decision? | 17:15 |
| fungi | right, that might be more for jroll i suppose | 17:15 |
| anteaya | fungi also suggest misc but that does have a conotation to it | 17:16 |
| anteaya | suggested* | 17:16 |
| fungi | i also suggested "x" which would be as short as "_" but lack the dockerhub connotation | 17:16 |
| *** yamamoto has quit IRC | 17:17 | |
| jroll | hrm, I thought we had communicated replicating to github isn't going to happen any longer | 17:17 |
| jroll | I am frequently wrong, though | 17:17 |
| clarkb | oh ya corvus' email does say that | 17:18 |
| clarkb | so I think the big thing is reiterating what the TC has decided stays in and what doesn't | 17:18 |
| fungi | jroll: i think it's more that we need to be super clear that all the repos moving out of the openstack namespace will no longer be replicated anywhere on github unless their maintainers take care of it | 17:18 |
| clarkb | http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html the Github section | 17:18 |
| jroll | fungi: yes, we probably haven't communicated it well enough | 17:19 |
| clarkb | the projects in openstack/* are changing | 17:19 |
| anteaya | I'm fine with 'x' as well | 17:19 |
| fungi | jroll: also we might want to decide on a timeline for deleting those stale repos out of the openstack namespace... if owners want to take advantage of redirects on github (which dmsimard has worked out how to script through their api) then they need to be moved rather than deleted | 17:20 |
| clarkb | fungi: we may be able to hide them? | 17:20 |
| fungi | oh, perhaps | 17:20 |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack-infra/nodepool master: Implement max-servers for AWS driver https://review.openstack.org/649474 | 17:21 |
| fungi | though also, as with most stuff like this, no matter how widely we communicate it there are still going to be a ton of people who find out about it because the repo they're pulling from on github either ceases updating or goes away entirely | 17:21 |
| *** ykarel|away has quit IRC | 17:21 | |
| jroll | fungi: I can't really context switch into this at the moment, I'll have to come back to it later | 17:21 |
| fungi | no prob, it just sprang to mind | 17:22 |
| mnaser | https://review.openstack.org/#/c/651879/ is ready to merge if y'all don't mind :) | 17:23 |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack-infra/nodepool master: Implement max-servers for AWS driver https://review.openstack.org/649474 | 17:23 |
| clarkb | mnaser: we should get in https://review.openstack.org/#/c/651667/ first to make it easier for you to bring up a new project | 17:23 |
| clarkb | fungi: ^ fyi | 17:23 |
| clarkb | and mordred | 17:23 |
| fungi | anyway, if "hiding" repos on github is a thing, then maybe the tc can do that instead of deleting them | 17:24 |
| openstackgerrit | Clint 'SpamapS' Byrum proposed openstack-infra/nodepool master: Implement max-servers for AWS driver https://review.openstack.org/649474 | 17:24 |
| fungi | so the timeline to work out moving logistics on that service becomes less urgent | 17:24 |
| SpamapS | archiving is a thing | 17:24 |
| SpamapS | which effectively hides them | 17:25 |
| clarkb | SpamapS: any idea if you can unarchive and move them later if you choose? | 17:25 |
| SpamapS | Yes you can unarchive | 17:25 |
| SpamapS | https://help.github.com/en/articles/archiving-repositories | 17:25 |
| clarkb | that may be what we want then. thanks | 17:25 |
| *** tbachman has quit IRC | 17:25 | |
| *** tbachman has joined #openstack-infra | 17:26 | |
| fungi | perfect! | 17:27 |
| *** gyee has quit IRC | 17:29 | |
| fungi | so in light of that, maybe we need a semi-durable document we can point surprised users at which covers a brief zuul howto for using dmsimard's replication job and information on unarchiving/transfer process logistics? | 17:29 |
| clarkb | ++ | 17:30 |
| * mnaser would like to try going over that document | 17:30 | |
| anteaya | does that need to be done prior to informing the crowd that gerrit will be unavailable next friday? | 17:31 |
| fungi | nope, i think we have enough info now to say that there's a viable direction and we can prepare that documentation prior to the 19th | 17:31 |
| anteaya | awesome | 17:31 |
| anteaya | yay for a viable direction | 17:31 |
| *** bhavikdbavishi has joined #openstack-infra | 17:32 | |
| fungi | so we shouldn't need to include any specifics in the announcement, though we _can_ perhaps mention we have a configurable replication job now as well as a mechanism for doing transfers in bulk/batches without resorting to clicking through the gh webui | 17:32 |
| openstackgerrit | Merged openstack-infra/system-config master: opensuse: Fix mirroring source for the tumbleweed emergency update repo https://review.openstack.org/648816 | 17:34 |
| openstackgerrit | Merged openstack-infra/system-config master: Update kerberos servers to puppet 4 https://review.openstack.org/650378 | 17:34 |
| clarkb | I'll keep an eye on the kdcs | 17:34 |
| *** jamesmcarthur has quit IRC | 17:35 | |
| *** ijw has joined #openstack-infra | 17:36 | |
| *** jtomasek has quit IRC | 17:37 | |
| *** zzehring has joined #openstack-infra | 17:38 | |
| *** ykarel|away has joined #openstack-infra | 17:39 | |
| *** kopecmartin is now known as kopecmartin|off | 17:40 | |
| *** jamesmcarthur has joined #openstack-infra | 17:47 | |
| *** sshnaidm_ has joined #openstack-infra | 17:52 | |
| *** ykarel|away has quit IRC | 17:53 | |
| openstackgerrit | Clark Boylan proposed openstack-infra/nodepool master: Add simple max-server sanity check to base handler class https://review.openstack.org/651676 | 17:53 |
| *** sshnaidm has quit IRC | 17:53 | |
| *** jamesmcarthur has quit IRC | 17:54 | |
| *** jamesmcarthur has joined #openstack-infra | 17:56 | |
| *** bobh has quit IRC | 17:58 | |
| *** jamesmcarthur has quit IRC | 17:58 | |
| *** jamesmcarthur has joined #openstack-infra | 17:59 | |
| *** jamesmcarthur has quit IRC | 18:01 | |
| *** jamesmcarthur has joined #openstack-infra | 18:02 | |
| *** sshnaidm_ is now known as sshnaidm|off | 18:03 | |
| openstackgerrit | Fabien Boucher proposed openstack-infra/zuul master: WIP - Pagure driver - https://pagure.io/pagure/ https://review.openstack.org/604404 | 18:03 |
| *** bobh has joined #openstack-infra | 18:03 | |
| *** bobh has quit IRC | 18:13 | |
| *** rkukura has quit IRC | 18:14 | |
| *** gmann is now known as gmann_afk | 18:15 | |
| *** bobh has joined #openstack-infra | 18:16 | |
| *** ykarel|away has joined #openstack-infra | 18:18 | |
| mordred | fungi: oh - we have a mechanism for transfers that isn't the gh webui??? | 18:19 |
| *** electrofelix has quit IRC | 18:19 | |
| mordred | that's super exciting | 18:19 |
| clarkb | mordred: fungi: for lists upgrade tomorrow care to review item 6 at https://etherpad.openstack.org/p/lists.o.o-trusty-to-xenial | 18:20 |
| fungi | mordred: dmsimard worked out that it's doable through an api method they've had marked as "experimental" for the past year or so | 18:20 |
| clarkb | also fungi maybe you can get the snapshot started during your morning start hours so that it is done by 1700UTC? | 18:20 |
| fungi | glad to, just a sec and i'll add a reminder for myself | 18:20 |
| mordred | fungi: SWEET | 18:21 |
| mordred | clarkb: yes - item 6 looks good | 18:21 |
| dmsimard | OI | 18:21 |
| clarkb | fungi: awesome thanks. I plan to run through the actual upgrade as I've done a few now so am comfortable with it | 18:21 |
| clarkb | if someone else is super interested in that I'm happy to ride shotgun and watch via screen | 18:21 |
| clarkb | but I wasn't counting on that :) | 18:21 |
| fungi | btw, i'm working up a followup to jroll's thread on openstack-discuss spelling out the implications for consumers of those repos on github | 18:22 |
| mordred | fungi: so you're saying I shouldn't just go add random screaming comments? | 18:23 |
| fungi | feel free | 18:24 |
| fungi | currently juggling that and preparation to delete a bunch of tripleo branches | 18:24 |
| clarkb | kdcs look happy after puppet-4ification. /me pulls up the next change | 18:24 |
| clarkb | hrm before doing https://review.openstack.org/#/c/650379/1 we probably want ianw's regex grouping thing for the arm servers | 18:25 |
| zbr | just wanted to say that I was really happy to see ANSI colors on zuul streaming console log, who do I need to thanks? | 18:25 |
| dmsimard | I can put a doc together for the upload-git-mirror things | 18:25 |
| mordred | zbr: that would be tobiash | 18:26 |
| clarkb | fungi: https://review.openstack.org/#/c/651669/2 is the letsencrypt perms update change re our discussion yesterday if you can give that a look | 18:26 |
| *** tosky has quit IRC | 18:26 | |
| mordred | zbr: he made the console streaming use xterm.js instead of the custom code we had | 18:26 |
| *** jamesmcarthur has quit IRC | 18:26 | |
| clarkb | fungi: and then maybe ack https://review.openstack.org/#/c/651670/2 but I figure we can let ianw approve it? | 18:26 |
| mordred | zbr: https://review.openstack.org/#/c/648838/ if you're interested to see the change :) | 18:26 |
| fungi | clarkb: cool, i also flagged ianw's change to add the https vhost for graphite since i want to make sure we establish a clear pattern of consistent sslopts across our sites | 18:27 |
| clarkb | mordred: https://review.openstack.org/#/c/651442/ is the arm64 ansible grouping change I refer to. Your review on that would be much appreciated | 18:27 |
| zbr | all my kudos. hopefully we will also see coloring from zuul output plugin too (similar to ansible), not it works only for executed commands. | 18:27 |
| mordred | clarkb: looking | 18:27 |
| tobiash | zbr: thanks :) | 18:27 |
| *** jamesmcarthur has joined #openstack-infra | 18:28 | |
| openstackgerrit | sebastian marcet proposed openstack-infra/openstackid master: Update recaptcha from v2 to v3 ( no user friction) * update old laravel plugin with a more recent one * moved from v2 to v3 * refactoring https://review.openstack.org/651901 | 18:29 |
| zbr | tobiash: i had to rely on hacks like running tool under pytest with pytest-html in order to be able to get a colored HTML output, so seeing colors in console was really nice surprise. | 18:29 |
| mordred | clarkb: your commit message is slightly off from reality - how much do you care? | 18:29 |
| clarkb | mordred: oh right the / update? | 18:30 |
| mordred | clarkb: or - the commit message | 18:30 |
| mordred | yeah | 18:30 |
| mordred | I'm not sure it's worth a respin | 18:30 |
| clarkb | I don't think it matters much (but maybe just +2 and we can see if ianw wants to update?) | 18:30 |
| mordred | yeah- in general it looks great | 18:30 |
| zbr | tobiash: see https://zuul.openstack.org/stream/c95f4c9ca51141a1a28221b1b88dbd1c?logfile=console.log | 18:31 |
| tobiash | zbr: yes, but the actual goal was performance and non-crashing browsers for large logs, the color support was actually just a side effect ;) | 18:32 |
| *** Lucas_Gray has quit IRC | 18:39 | |
| *** tbachman has quit IRC | 18:39 | |
| jroll | fungi: thanks for writing that - if there's anything else from today that you need help with, please let me know :) | 18:44 |
| fungi | jroll: will do, sorry for the earlier interruption and thanks for the opportunity to brainstorm! | 18:46 |
| jroll | no worries, I let myself be interrupted, was just letting you know that I had to switch away :) | 18:46 |
| fungi | though it did point out that one more thing the tc needs to do is decide who will take over maintenance of the "openstack" github organization in the long term | 18:46 |
| fungi | we'll need volunteers | 18:47 |
| fungi | folks who want to shape and curate the content we publish there | 18:47 |
| clarkb | fungi: totally thinking out loud here but that seems like t he sort of thing the release team might care about? | 18:47 |
| fungi | also we'll probably want to start talking after the 19th about making plans to switch the openstack repos over to replucating with zuul | 18:47 |
| fungi | er, replicating | 18:48 |
| fungi | i don't expect we want to have gerrit directly replicating to github in the long term | 18:48 |
| fungi | and expecting the openstack repos to replicate with the same sorts of zuul jobs as everyone else would be good for consistency | 18:49 |
| clarkb | cmurphy: https://review.openstack.org/#/c/650379/1 comment on that. Do you want to do the rebase or should I? I'm going to go find lunch no so no rush either way | 18:51 |
| cmurphy | clarkb: i can do it in a bit | 18:51 |
| *** rkukura has joined #openstack-infra | 18:53 | |
| *** hwoarang has quit IRC | 18:54 | |
| *** hwoarang has joined #openstack-infra | 18:56 | |
| *** wolverineav has joined #openstack-infra | 18:58 | |
| *** wolverineav has quit IRC | 18:58 | |
| *** wolverineav has joined #openstack-infra | 18:58 | |
| *** tbachman has joined #openstack-infra | 19:00 | |
| *** pcaruana has quit IRC | 19:02 | |
| *** e0ne has joined #openstack-infra | 19:11 | |
| *** wolverineav has quit IRC | 19:15 | |
| *** wolverineav has joined #openstack-infra | 19:16 | |
| *** kjackal has joined #openstack-infra | 19:16 | |
| *** jcoufal_ has joined #openstack-infra | 19:17 | |
| *** jcoufal has quit IRC | 19:20 | |
| *** bhavikdbavishi has quit IRC | 19:20 | |
| mriedem | incoming check queue job explosion from nova | 19:21 |
| *** wolverineav has quit IRC | 19:21 | |
| openstackgerrit | Colleen Murphy proposed openstack-infra/system-config master: yamlgroup: add regex match; exclude puppet4 for arm64 mirrors https://review.openstack.org/651442 | 19:22 |
| openstackgerrit | Colleen Murphy proposed openstack-infra/system-config master: Update nodepool servers to puppet 4 https://review.openstack.org/650379 | 19:22 |
| pabelanger | EmilienM: weshay: ^that will impact rdo again | 19:23 |
| fungi | mriedem: itym "load testing in progress" | 19:24 |
| fungi | clarkb: how long did the last snapshot of lists.o.o take? do you recall? | 19:25 |
| fungi | trying to decide when to set my reminder for that | 19:25 |
| clarkb | fungi: I think 2 hours | 19:26 |
| fungi | i'll add some buffer anyway, but a rough ballpark guess is useful | 19:26 |
| fungi | okay, so 14:00z start time ought to be plenty | 19:26 |
| *** gmann_afk is now known as gmann | 19:27 | |
| *** e0ne has quit IRC | 19:31 | |
| clarkb | ya that should be great | 19:32 |
| *** boden has joined #openstack-infra | 19:36 | |
| boden | hi... hoping for some help debugging a recent regression in vmware-nsx project stable/rocky branch... results can be seen here https://review.openstack.org/#/c/651795/ | 19:40 |
| boden | based on pep8 log here http://logs.openstack.org/95/651795/1/check/openstack-tox-pep8/f88fa43/tox/pep8-2.log I can see someone is requiring neutron-lib>=1.21.0, but it doesn't seem to be dynamic routing as indicated in the logs | 19:40 |
| boden | here's dynamic routing stable/rocky https://github.com/openstack/neutron-dynamic-routing/blob/stable/rocky/requirements.txt#L12 | 19:40 |
| boden | we were working on April 7th https://review.openstack.org/#/q/project:openstack/vmware-nsx+branch:stable/rocky | 19:40 |
| boden | any tips on how to find where this neutron-lib reqirement got bumped as I can't seem to find it?? | 19:40 |
| fungi | boden: does the pep8-1.log not help? | 19:42 |
| fungi | neutron 14.0.0 has requirement neutron-lib>=1.25.0, but you'll have neutron-lib 1.18.0 which is incompatible. | 19:43 |
| boden | maybe 1 min | 19:43 |
| fungi | seems like maybe you're not using stable/rocky neutron | 19:44 |
| boden | I guess I need to put an upper constraint on those now since 14.0.0 is out | 19:44 |
| boden | 14.0.0 is the stein series of releases; its picking them up | 19:44 |
| fungi | yeah, i wouldn't expect stein neutron to work with rocky neutron-lib | 19:45 |
| boden | fungi yeah working through the build ownership blues.. at least it was simple (for now). thanks | 19:45 |
| fungi | np | 19:46 |
| * fungi needs to go fire up the grill, bbiab | 19:46 | |
| *** wolverineav has joined #openstack-infra | 19:54 | |
| openstackgerrit | Mohammed Naser proposed openstack-infra/project-config master: Add vexxhost/ansible-role-docker-distribution https://review.openstack.org/651879 | 19:56 |
| *** wolverineav has quit IRC | 19:57 | |
| *** wolverineav has joined #openstack-infra | 19:57 | |
| *** kjackal has quit IRC | 19:59 | |
| openstackgerrit | Merged openstack-infra/system-config master: letsencrypt: tighten certificate permissions https://review.openstack.org/651669 | 19:59 |
| *** wolverineav has quit IRC | 20:02 | |
| *** wolverineav has joined #openstack-infra | 20:03 | |
| *** ykarel|away has quit IRC | 20:07 | |
| *** harlowja has quit IRC | 20:08 | |
| *** wolverineav has quit IRC | 20:08 | |
| *** wolverineav has joined #openstack-infra | 20:08 | |
| *** jamesmcarthur has quit IRC | 20:10 | |
| *** wolverineav has quit IRC | 20:11 | |
| *** wolverineav has joined #openstack-infra | 20:12 | |
| *** wolverineav has quit IRC | 20:13 | |
| *** wolverineav has joined #openstack-infra | 20:13 | |
| *** artom has joined #openstack-infra | 20:13 | |
| artom | So, I think I'm at the point of adding myself to whitebox-tempest-plugin-core, given that https://review.openstack.org/#/c/649425/ has merged? | 20:17 |
| openstackgerrit | Mohammed Naser proposed openstack-infra/project-config master: Add vexxhost/ansible-role-docker-distribution https://review.openstack.org/651879 | 20:17 |
| clarkb | artom: done | 20:18 |
| artom | clarkb, cheers! | 20:18 |
| *** kgiusti has left #openstack-infra | 20:22 | |
| *** wolverineav has quit IRC | 20:26 | |
| dmsimard | infra-root, jroll: started an etherpad to tell humans about upload-git-mirror, let me know what you think: https://etherpad.openstack.org/p/vtUbRGauuC | 20:28 |
| dmsimard | I'm not sure what the logistics of github org transfers would look like in practice | 20:29 |
| dmsimard | The script that automates the process validates that the user that runs the script has the necessary privileges on both ends: https://review.openstack.org/#/c/644937/ | 20:31 |
| jroll | dmsimard: that seems readable, I think I could implement it from there | 20:32 |
| *** eharney has quit IRC | 20:34 | |
| *** Lucas_Gray has joined #openstack-infra | 20:36 | |
| mordred | dmsimard: yeah - that's a good doc | 20:40 |
| *** wolverineav has joined #openstack-infra | 20:43 | |
| *** artom has quit IRC | 20:44 | |
| *** Goneri has quit IRC | 20:45 | |
| *** hamzy has quit IRC | 20:46 | |
| clarkb | dmsimard: that etherpad looks good after a skim | 20:50 |
| *** jcoufal_ has quit IRC | 20:50 | |
| dmsimard | What medium do we want it in ? An email to openstack-discuss ? | 20:54 |
| clarkb | and airship-discuss and starlingx-discuss and zuul-discuss probably | 20:56 |
| fungi | ultimately i think it becomes something similar to the zuul v3 migration guide... a semi-durable howto we can point surprised users at | 20:56 |
| fungi | but yeah, an explicit heads-up to the airship and starlingx crew for sure | 20:56 |
| fungi | i think the zuul maintainers are likely to choose not to mirror their repos to github? i could be wrong though | 20:57 |
| clarkb | fungi: ya I don't expect they will, but think treating everyone the same in the notifications is useful | 20:57 |
| clarkb | also I'm drafting up the "hey we are doing this" email now | 20:58 |
| clarkb | anteaya: ^ | 20:58 |
| clarkb | https://etherpad.openstack.org/p/response-original-opendev-git-migration-email | 20:58 |
| clarkb | how does that look? | 21:00 |
| openstackgerrit | Michael Johnson proposed openstack-infra/irc-meetings master: Updates Octavia meeting time to 1600 UTC https://review.openstack.org/651929 | 21:02 |
| *** whoami-rajat has quit IRC | 21:03 | |
| *** slaweq has quit IRC | 21:20 | |
| *** gfidente|afk has quit IRC | 21:27 | |
| *** tosky has joined #openstack-infra | 21:29 | |
| *** boden has quit IRC | 21:29 | |
| ianw | clarkb / mordred: might as well fix the commit message to avoid confusion | 21:33 |
| ianw | fungi: thanks, i'll update the ssl opts | 21:33 |
| openstackgerrit | Ian Wienand proposed openstack-infra/system-config master: yamlgroup: add regex match; exclude puppet4 for arm64 mirrors https://review.openstack.org/651442 | 21:35 |
| fungi | ianw: once it's in place, we can point https://www.ssllabs.com/ssltest/ at it and see if we missing anything glaring | 21:35 |
| fungi | er, missed | 21:35 |
| openstackgerrit | Clark Boylan proposed openstack-infra/system-config master: Update nodepool servers to puppet 4 https://review.openstack.org/650379 | 21:35 |
| clarkb | cmurphy: ^ that was just me pushing the rebase button after ianw's commit message update | 21:36 |
| cmurphy | clarkb: o7 | 21:37 |
| dmsimard | clarkb: I'm not subscribed to the airship and starling MLs but I can do the other ones | 21:37 |
| *** slaweq has joined #openstack-infra | 21:37 | |
| *** wolverineav has quit IRC | 21:37 | |
| *** wolverineav has joined #openstack-infra | 21:38 | |
| fungi | their moderators can probably also approve your post | 21:39 |
| ianw | "terminate TLS that supports ECDHE then this should be edited to remove the RSA+AESGCM:RSA+AES so that PFS only is guarenteed." ... pffft, and people say cryptography is hard :) | 21:39 |
| dmsimard | fungi: ack | 21:40 |
| fungi | ianw: i tried to be really explicit about our future options, that was written during trusty's time | 21:41 |
| *** wolverineav has quit IRC | 21:42 | |
| *** wolverineav has joined #openstack-infra | 21:46 | |
| ianw | fungi: so the pre-reqs seem to be openssl 1.0.0 (or >) and we have no support for windows xp? | 21:46 |
| ianw | more specifically, internet explorer on windows xp | 21:49 |
| *** gyee has joined #openstack-infra | 21:49 | |
| clarkb | dmsimard: not sure if you saw but we did restart gerrit yesterday with your autoReload config change applied | 21:50 |
| clarkb | thank you for getting all this lined up and ready | 21:50 |
| *** slaweq has quit IRC | 21:50 | |
| * clarkb updates the reminder email now that there should be email inks | 21:51 | |
| clarkb | *links | 21:51 |
| mordred | ianw: I clicked +2 on the yamlgroup patch - not +Aing since I'm close to EOD - but feel free to pull the trigger as you see fit | 21:51 |
| mordred | ianw: I am comfortable not supporting IE on Windows XP | 21:52 |
| clarkb | ianw fungi: mordred anteaya dmsimard https://etherpad.openstack.org/p/response-original-opendev-git-migration-email how does that look now | 21:52 |
| fungi | just wrapped up dinner and about to jump on a conference call but will check it out shortly | 21:54 |
| mordred | clarkb: I think that's a good email | 21:55 |
| clarkb | cool I'll send it out once fungi has had a chance to look (if anyone else would like to look let me know) | 21:56 |
| openstackgerrit | Ian Wienand proposed openstack-infra/puppet-graphite master: Add a httpd SSL template https://review.openstack.org/651686 | 22:00 |
| *** jamesmcarthur has joined #openstack-infra | 22:01 | |
| openstackgerrit | Jason Lee proposed openstack-infra/storyboard master: WIP: Integrated webscraper into Reader Script as a Class https://review.openstack.org/649666 | 22:09 |
| *** igordc has quit IRC | 22:09 | |
| *** bobh has quit IRC | 22:10 | |
| fungi | okay, conference call was short this time. checking out draft announcement now | 22:13 |
| fungi | clarkb: lgtm, ship it | 22:14 |
| *** jamesmcarthur has quit IRC | 22:14 | |
| clarkb | ok as with the lists.o.o upgrade notice I believe the original email was sent individually to each list so I'll be following up on separate threads too | 22:14 |
| fungi | not worth updating for, but we might start saying "replicate to github or anywhere else you like" | 22:15 |
| *** tosky has quit IRC | 22:15 | |
| fungi | the real benefit i see here is that projects are no longer locked into just replicating to github with the solution we have | 22:15 |
| fungi | (granted they could have set up ad hoc solutions to do so before) | 22:16 |
| clarkb | added | 22:16 |
| *** slaweq has joined #openstack-infra | 22:16 | |
| fungi | but this way it's less like we're taking something away, in fact we're giving more freedom than ever | 22:16 |
| clarkb | Also I'm quoting the entirety of jim's email since it was thorough and full of good infos | 22:17 |
| fungi | awesome | 22:17 |
| clarkb | ok sent to openstack airship starlinx and zuul -discuss lists in reply to the original thread starter | 22:21 |
| fungi | thanks! | 22:22 |
| *** rcernin has joined #openstack-infra | 22:26 | |
| EmilienM | pabelanger: ok | 22:28 |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul-jobs master: Add tox-py37 job https://review.openstack.org/651938 | 22:30 |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul-jobs master: Add tox-py37 job https://review.openstack.org/651938 | 22:31 |
| *** slaweq has quit IRC | 22:40 | |
| ianw | clarkb: if you could poke at https://review.openstack.org/#/c/651686/ ... we could possibly have a LE enabled host in a few hours :) | 22:47 |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul-jobs master: Add tox-py37 job https://review.openstack.org/651938 | 22:48 |
| clarkb | ianw: is there another change to point that change at the le file paths? | 22:49 |
| ianw | there is :) https://review.openstack.org/#/c/651687/ | 22:49 |
| clarkb | +2 | 22:50 |
| ianw | i'll babysit the one below that which will put the full production cert on the host, i think i'll have to delete the staging one to get it to renew. i don't expect it's a common thing we'll be doing | 22:51 |
| clarkb | ya I expect after this one we'll be a bit more confident in it and just go for it rather than step through staging | 22:52 |
| clarkb | also soemthing that is bugging me that I never fully followed up on. We do all of this anonymously right and rely on our management of the domain as "authentication"? But LE also has the idae of accounts? | 22:52 |
| ianw | clarkb: sort of, i think we can share a common private key that we issue with, and that provides a few things like we can revoke certs | 22:54 |
| openstackgerrit | Merged openstack-infra/system-config master: yamlgroup: add regex match; exclude puppet4 for arm64 mirrors https://review.openstack.org/651442 | 22:54 |
| clarkb | ianw: but we aren't bothering to manage that key yet right? | 22:55 |
| clarkb | or did I mis it completely in the ansible role? | 22:55 |
| ianw | clarkb: no, i haven't put anything like that in at the moment. i think it would involve having a shared key in root's /root/.acme.sh config dir | 22:55 |
| *** _erlon_ has quit IRC | 23:00 | |
| *** tkajinam has joined #openstack-infra | 23:00 | |
| *** wolverineav has quit IRC | 23:01 | |
| *** wolverineav has joined #openstack-infra | 23:02 | |
| *** wolverineav has quit IRC | 23:02 | |
| *** wolverineav has joined #openstack-infra | 23:02 | |
| clarkb | k, just making sure I understand how the pieces fit together. Happy to know I didn't miss anything obvious ;) | 23:03 |
| clarkb | I've got to pop out now for a bit but will check in later as well | 23:04 |
| clarkb | fungi: let me know if there is anything else you think I/we should do prior to the lists upgrade tomorrow | 23:04 |
| *** eernst has quit IRC | 23:04 | |
| *** rlandy|ruck is now known as rlandy|ruck|bbl | 23:04 | |
| fungi | i'll let you know if i think of anything else, but it seems really thoroughly planned at this point | 23:05 |
| *** eernst has joined #openstack-infra | 23:08 | |
| *** wolverineav has quit IRC | 23:10 | |
| openstackgerrit | Merged openstack-infra/puppet-graphite master: Add a httpd SSL template https://review.openstack.org/651686 | 23:12 |
| openstackgerrit | Paul Belanger proposed openstack-infra/zuul-jobs master: Don't run zuul_debug_info_enabled under python2.6 https://review.openstack.org/650880 | 23:12 |
| openstackgerrit | Merged openstack-infra/zuul-jobs master: Add tox-py37 job https://review.openstack.org/651938 | 23:13 |
| *** eernst has quit IRC | 23:13 | |
| *** wolverineav has joined #openstack-infra | 23:13 | |
| *** owalsh_ has joined #openstack-infra | 23:14 | |
| *** aaronsheffield has quit IRC | 23:14 | |
| *** owalsh has quit IRC | 23:15 | |
| *** paladox has quit IRC | 23:16 | |
| *** paladox has joined #openstack-infra | 23:16 | |
| openstackgerrit | Merged openstack-infra/system-config master: Enable production cert generation for graphite01 https://review.openstack.org/651670 | 23:19 |
| *** owalsh has joined #openstack-infra | 23:21 | |
| *** rlandy|ruck|bbl has quit IRC | 23:21 | |
| *** tobiash has quit IRC | 23:21 | |
| *** tbarron has quit IRC | 23:21 | |
| *** kukacz has quit IRC | 23:21 | |
| *** dpawlik has quit IRC | 23:21 | |
| *** roman_g has quit IRC | 23:21 | |
| *** zzehring has quit IRC | 23:21 | |
| *** pfallenop has quit IRC | 23:21 | |
| *** bdodd has quit IRC | 23:21 | |
| *** aspiers has quit IRC | 23:21 | |
| *** amorin has quit IRC | 23:21 | |
| *** prometheanfire has quit IRC | 23:21 | |
| *** markmcd has quit IRC | 23:21 | |
| *** antonym has quit IRC | 23:21 | |
| *** tobias-urdin has quit IRC | 23:21 | |
| *** corvus has quit IRC | 23:21 | |
| *** jlvillal has quit IRC | 23:21 | |
| *** owalsh_ has quit IRC | 23:22 | |
| *** mgoddard has quit IRC | 23:24 | |
| *** mgoddard has joined #openstack-infra | 23:27 | |
| *** zzehring has joined #openstack-infra | 23:27 | |
| *** rlandy|ruck|bbl has joined #openstack-infra | 23:27 | |
| *** tbarron has joined #openstack-infra | 23:27 | |
| *** tobiash has joined #openstack-infra | 23:27 | |
| *** kukacz has joined #openstack-infra | 23:27 | |
| *** dpawlik has joined #openstack-infra | 23:27 | |
| *** roman_g has joined #openstack-infra | 23:27 | |
| *** pfallenop has joined #openstack-infra | 23:27 | |
| *** prometheanfire has joined #openstack-infra | 23:27 | |
| *** bdodd has joined #openstack-infra | 23:27 | |
| *** aspiers has joined #openstack-infra | 23:27 | |
| *** amorin has joined #openstack-infra | 23:27 | |
| *** markmcd has joined #openstack-infra | 23:27 | |
| *** antonym has joined #openstack-infra | 23:27 | |
| *** tobias-urdin has joined #openstack-infra | 23:27 | |
| *** corvus has joined #openstack-infra | 23:27 | |
| *** jlvillal has joined #openstack-infra | 23:27 | |
| *** owalsh_ has joined #openstack-infra | 23:29 | |
| *** owalsh has quit IRC | 23:30 | |
| *** owalsh has joined #openstack-infra | 23:35 | |
| *** wolverineav has quit IRC | 23:36 | |
| *** owalsh_ has quit IRC | 23:36 | |
| *** eernst has joined #openstack-infra | 23:40 | |
| *** owalsh_ has joined #openstack-infra | 23:42 | |
| *** owalsh has quit IRC | 23:43 | |
| *** igordc has joined #openstack-infra | 23:44 | |
| *** eernst has quit IRC | 23:45 | |
| *** eernst has joined #openstack-infra | 23:45 | |
| *** eernst has quit IRC | 23:46 | |
| *** eernst_ has joined #openstack-infra | 23:46 | |
| *** owalsh has joined #openstack-infra | 23:51 | |
| *** eernst_ has quit IRC | 23:51 | |
| *** owalsh_ has quit IRC | 23:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!