Saturday, 2019-07-27

clarkb1400 tasks now00:03
clarkbfungi: I see quite a few retries for gitea0300:03
clarkbfungi: did the git repos get created on that host yet?00:03
clarkblooks like docker isn't running there yet, that explains it00:04
fungiyeah, not yet00:04
fungiwaiting for the changes we merged to do that to appear in gitea so they'll get applied by ansible00:05
clarkbhttps://review.opendev.org/#/c/673113/ is not approved yet00:05
clarkb(that is needed to have docker get installed I think)00:05
clarkbshould I go ahead and approve it?00:06
fungioh, yeah, thought it already had been00:06
fungithanks00:06
clarkbdone00:06
*** slaweq has joined #openstack-infra00:11
*** rcernin has joined #openstack-infra00:15
*** yamamoto has joined #openstack-infra00:15
*** slaweq has quit IRC00:17
*** rfarr has quit IRC00:18
fungireplication to 4 backends took roughly 78 minutes00:18
fungii'll do 01,02,04 now00:19
*** igordc has quit IRC00:19
*** igordc has joined #openstack-infra00:21
fungiqueued00:23
*** gyee has quit IRC00:29
openstackgerritMatthew Thode proposed openstack/diskimage-builder master: support alternate portage directories  https://review.opendev.org/67153000:30
fungiaround this time last night replicating to three backends took right at 40 minutes00:30
fungiso completion at 01:03 maybe?00:30
openstackgerritMerged opendev/system-config master: Add gitea03 replacement to inventory  https://review.opendev.org/67311300:40
*** bobh has joined #openstack-infra00:51
*** armax has quit IRC01:01
fungi2019-07-27T01:03:05+00:00 1402 tasks01:03
fungiguess not01:03
fungimaybe things are just slower tonight01:03
clarkbI wonder what the cause is01:03
*** slaweq has joined #openstack-infra01:11
fungiwrapped up in 50 minutes (vs 40 last night)01:14
*** slaweq has quit IRC01:16
*** yamamoto has quit IRC01:19
clarkbare you wanting to finish up 03 today?01:20
clarkbI will try to pay attention to changes that need review if so01:21
fungiyeah, lemme see if it's moved on yet01:21
fungissh host key accepted on bridge.o.o01:23
fungigitea's running on it now, time for more replicating01:36
*** diablo_rojo has quit IRC01:37
fungireplication to gitea03 queued now01:37
prometheanfireianw: actually found something that works... https://review.opendev.org/67153001:38
fungioh oops, those replication tasks are going to fail. restoring the db from a copy first01:39
*** bobh has quit IRC01:39
*** bobh has joined #openstack-infra01:40
*** bobh has quit IRC01:45
fungiokay, database restored, missing repos initialized, replication restarted01:47
*** yamamoto has joined #openstack-infra02:00
fungii had failed to accept the correct hostkey for replication, count finally seems to be falling now02:15
*** yamamoto has quit IRC02:18
openstackgerritJeremy Stanley proposed opendev/system-config master: Swap gitea03 into service and bring down gitea04  https://review.opendev.org/67311902:18
fungishould be safe to approve that ^ once replication completes02:19
*** bobh has joined #openstack-infra02:25
*** jamesmcarthur has joined #openstack-infra02:26
*** bobh has quit IRC02:38
*** whoami-rajat has joined #openstack-infra02:41
*** jamesmcarthur has quit IRC02:42
fungilooks like it's done02:47
fungii'm gonna knock off for the evening02:47
*** bobh has joined #openstack-infra02:53
*** yamamoto has joined #openstack-infra02:54
*** jamesmcarthur has joined #openstack-infra02:57
*** yamamoto has quit IRC02:58
*** yamamoto has joined #openstack-infra02:58
*** yamamoto has quit IRC03:02
*** liuyulong has quit IRC03:07
*** yamamoto has joined #openstack-infra03:07
*** slaweq has joined #openstack-infra03:11
*** markvoelker has quit IRC03:12
*** slaweq has quit IRC03:16
*** bobh has quit IRC03:23
*** jamesmcarthur has quit IRC03:23
*** markvoelker has joined #openstack-infra03:28
*** Lucas_Gray has quit IRC03:39
*** yamamoto has quit IRC03:56
*** yamamoto has joined #openstack-infra03:57
*** bhavikdbavishi has joined #openstack-infra04:00
*** bhavikdbavishi has quit IRC04:04
*** verdurin has quit IRC04:14
*** verdurin has joined #openstack-infra04:15
*** jamesmcarthur has joined #openstack-infra04:18
*** apetrich has quit IRC04:20
*** markvoelker has quit IRC04:40
*** igordc has quit IRC04:44
*** whoami-rajat has quit IRC04:47
*** ricolin has joined #openstack-infra04:50
*** yamamoto has quit IRC04:51
*** altlogbot_2 has quit IRC04:58
*** altlogbot_0 has joined #openstack-infra04:59
*** jamesmcarthur has quit IRC05:00
*** jamesmcarthur has joined #openstack-infra05:01
*** jamesmcarthur has quit IRC05:04
*** jamesmcarthur_ has joined #openstack-infra05:04
*** yamamoto has joined #openstack-infra05:09
*** slaweq has joined #openstack-infra05:11
*** bhavikdbavishi has joined #openstack-infra05:12
*** slaweq has quit IRC05:15
*** dciabrin_ has joined #openstack-infra05:32
*** dciabrin has quit IRC05:34
*** jamesmcarthur_ has quit IRC05:40
evrardjpcorvus: did you find some projects not in required projects? That would be a bug. If we don't have that, our depends-on is basically broken.05:54
*** bhavikdbavishi has quit IRC05:58
*** jamesmcarthur has joined #openstack-infra06:07
openstackgerritMerged zuul/zuul master: Display artifacts in build page  https://review.opendev.org/67186506:08
*** Lucas_Gray has joined #openstack-infra06:13
*** jamesmcarthur has quit IRC06:13
*** Lucas_Gray has quit IRC06:18
*** whoami-rajat has joined #openstack-infra06:19
*** Lucas_Gray has joined #openstack-infra06:19
*** yamamoto has quit IRC06:21
*** yamamoto has joined #openstack-infra06:34
*** kjackal has joined #openstack-infra06:39
*** jamesmcarthur has joined #openstack-infra06:41
*** jamesmcarthur has quit IRC06:46
*** kjackal has quit IRC07:02
*** slaweq has joined #openstack-infra07:11
*** slaweq has quit IRC07:16
*** jamesmcarthur has joined #openstack-infra07:21
*** yamamoto_ has joined #openstack-infra07:24
*** pcaruana has quit IRC07:24
*** jamesmcarthur has quit IRC07:25
*** yamamoto has quit IRC07:27
*** ricolin has quit IRC07:29
*** yamamoto_ has quit IRC07:33
*** pcaruana has joined #openstack-infra07:38
*** yamamoto has joined #openstack-infra07:46
*** pcaruana has quit IRC07:47
*** yamamoto has quit IRC07:57
*** rcernin has quit IRC08:06
*** bhavikdbavishi has joined #openstack-infra08:20
*** jamesmcarthur has joined #openstack-infra08:22
*** jamesmcarthur has quit IRC08:26
*** priteau has joined #openstack-infra08:30
*** priteau has quit IRC08:32
*** yamamoto has joined #openstack-infra08:39
*** yamamoto has quit IRC08:51
*** slaweq has joined #openstack-infra08:53
*** yamamoto has joined #openstack-infra08:53
*** slaweq has quit IRC08:57
*** jamesmcarthur has joined #openstack-infra09:01
*** jamesmcarthur has quit IRC09:06
*** Lucas_Gray has quit IRC09:09
*** yamamoto has quit IRC09:12
*** yamamoto has joined #openstack-infra09:22
*** yamamoto has quit IRC09:31
*** yamamoto has joined #openstack-infra09:35
*** yamamoto_ has joined #openstack-infra09:37
*** yamamoto has quit IRC09:40
*** bhavikdbavishi has quit IRC09:47
*** dpawlik has joined #openstack-infra09:52
*** jamesmcarthur has joined #openstack-infra10:03
*** bhavikdbavishi has joined #openstack-infra10:07
*** jamesmcarthur has quit IRC10:07
*** slaweq has joined #openstack-infra10:11
*** dpawlik has quit IRC10:12
*** trident has quit IRC10:13
*** slaweq has quit IRC10:16
*** trident has joined #openstack-infra10:17
*** dpawlik has joined #openstack-infra10:20
*** bhavikdbavishi has quit IRC10:20
*** jamesmcarthur has joined #openstack-infra10:43
*** jamesmcarthur has quit IRC10:48
*** yamamoto_ has quit IRC11:06
*** yamamoto has joined #openstack-infra11:09
*** yamamoto has quit IRC11:09
*** yamamoto has joined #openstack-infra11:09
*** raissa has joined #openstack-infra11:12
*** Lucas_Gray has joined #openstack-infra11:12
*** jamesmcarthur has joined #openstack-infra11:44
*** e0ne has joined #openstack-infra11:45
*** jamesmcarthur has quit IRC11:50
*** yamamoto has quit IRC11:55
*** whoami-rajat has quit IRC11:58
*** yamamoto has joined #openstack-infra12:00
*** bhavikdbavishi has joined #openstack-infra12:01
*** betherly has joined #openstack-infra12:02
*** trident has quit IRC12:06
*** betherly has quit IRC12:07
*** trident has joined #openstack-infra12:09
*** jamesmcarthur has joined #openstack-infra12:14
*** xek has joined #openstack-infra12:18
*** xek has quit IRC12:18
*** e0ne has quit IRC12:30
*** dpawlik has quit IRC12:32
*** eharney has joined #openstack-infra12:34
*** jamesmcarthur has quit IRC12:48
*** dpawlik has joined #openstack-infra12:48
*** dpawlik has quit IRC12:52
*** betherly has joined #openstack-infra12:53
*** betherly has quit IRC12:58
*** yamamoto has quit IRC13:04
*** dciabrin_ has quit IRC13:07
openstackgerritMonty Taylor proposed zuul/nodepool master: WIP Load k8s config on use, not just at startup  https://review.opendev.org/67313813:17
fungiif anybody's around to approve https://review.opendev.org/673119 i can start building the gitea04 replacement13:17
*** jamesmcarthur has joined #openstack-infra13:19
*** sgw has quit IRC13:20
mordredfungi: go for it13:20
*** sgw has joined #openstack-infra13:23
*** yamamoto has joined #openstack-infra13:23
*** jamesmcarthur has quit IRC13:25
openstackgerritMonty Taylor proposed opendev/system-config master: Build gerrit images for 2.16 and 3.0 as well  https://review.opendev.org/67227313:25
fungithanks mordred!13:27
*** whoami-rajat has joined #openstack-infra13:27
openstackgerritMonty Taylor proposed opendev/system-config master: Build gerrit images for 2.16 and 3.0 as well  https://review.opendev.org/67227313:27
openstackgerritMonty Taylor proposed opendev/system-config master: Override-checkout download-commands to v2.16.10  https://review.opendev.org/67310713:27
mordredfungi: maybe today will be the day that we successfully build gerrit13:27
fungitoday is a good day to bazel?13:28
mordredI don't know that I'd go that far13:28
fungiheh13:28
fungii already weeded the hydrangea and azalea beds, and my only other assigned project for today is to build a coat rack from some old deck planking driftwood and reclaimed dock cleats13:30
mordredthat sounds like a fun task13:35
fungiwell, first i need to figure out how i'm going to faux rust/weather the cleats, because they'd been cleaned and chrome-painted13:37
*** yamamoto has quit IRC13:38
mordredfungi: just leave them outside?13:40
fungii'm impatient ;)13:40
*** trident has quit IRC13:43
*** yamamoto has joined #openstack-infra13:47
openstackgerritMerged opendev/system-config master: Swap gitea03 into service and bring down gitea04  https://review.opendev.org/67311913:48
*** ykarel|away has joined #openstack-infra13:50
*** trident has joined #openstack-infra13:52
*** betherly has joined #openstack-infra13:54
donnydI am about to start the transition for FN. The currently running instances will finish, but no new instances will be scheduled until the transition is completed13:56
fungithanks for the heads up, donnyd!13:56
donnydWish me luck13:56
donnydAt least I have proper bgp routing of ipv6 now13:56
donnyd:)13:56
*** betherly has quit IRC13:59
mordred\o/14:04
*** gcerami_ has joined #openstack-infra14:07
*** panda has quit IRC14:09
*** gcerami_ is now known as panda14:09
*** slaweq has joined #openstack-infra14:11
fungibgp6 is good stuff14:12
* fungi wishes he had the opportunity to make use of openbsd's openbgpd14:13
fungii only ever ended up managing bgp peering on ios and junos14:14
paladoxmordred you need to do the same to singleusergroup (as that only has a 2.16 branch but not a 3.0 branch)14:15
*** slaweq has quit IRC14:15
mordredpaladox: *doh*14:16
mordredooh! but 2.16 worked!!!14:16
paladoxyup14:16
fungiokay, gitea04 is out of the haproxy pools now, so will delete it shortly and start building its replacement14:16
openstackgerritMonty Taylor proposed opendev/system-config master: Build gerrit images for 2.16 and 3.0 as well  https://review.opendev.org/67227314:18
*** trident has quit IRC14:20
mordredpaladox: it's gonna work this time, I can feel it!14:20
*** jamesmcarthur has joined #openstack-infra14:20
paladox:D14:20
mordredthen I just need to actually work on the config management change to use the images ...14:21
paladoxmordred our CI is broken until we force merge the gerrit upgrade and rebuild the cache :(14:21
mordred:(14:21
*** trident has joined #openstack-infra14:24
*** jamesmcarthur has quit IRC14:25
paladoxbring on bazel 1.0 in September! https://blog.bazel.build/2019/06/06/Bazel-Semantic-Versioning.html14:25
*** Lucas_Gray has quit IRC14:26
*** trident has quit IRC14:31
*** trident has joined #openstack-infra14:34
*** yamamoto has quit IRC14:40
*** yamamoto has joined #openstack-infra14:42
*** slaweq has joined #openstack-infra14:45
*** ykarel|away has quit IRC14:46
*** ykarel|away has joined #openstack-infra14:47
*** trident has quit IRC14:51
*** trident has joined #openstack-infra14:53
*** ykarel|away has quit IRC14:53
mordredpaladox: does gerrit build with 0.27 ?14:54
paladoxmordred yup!14:55
* paladox used bazel 0.27 up till around an hour ago.14:55
openstackgerritMonty Taylor proposed opendev/system-config master: Try building with 0.27.1 instead  https://review.opendev.org/67314114:56
mordredlet's see how that works for us14:56
*** betherly has joined #openstack-infra14:56
paladoxmordred i believe we use bazel 0.27 in our bazel image too.14:57
mordredcool.14:58
mordredoh good - the latest build worked for 2.16 and 3.0 but not for 2.1514:58
mordredwell - we're at least getting *somewhere*14:59
*** jamesmcarthur has joined #openstack-infra15:00
*** betherly has quit IRC15:01
*** ykarel|away has joined #openstack-infra15:10
openstackgerritMonty Taylor proposed opendev/system-config master: Split out bazel builder and gerrit base image  https://review.opendev.org/67314215:18
openstackgerritMonty Taylor proposed opendev/system-config master: Separate the Dockerfiles for the bazel builds  https://review.opendev.org/67314315:19
mordredcorvus: ^^ I got fancy and used zuul image dependencies15:19
*** ykarel|away has quit IRC15:23
openstackgerritJeremy Stanley proposed opendev/zone-opendev.org master: Update IP address for gitea04  https://review.opendev.org/67314415:26
*** betherly has joined #openstack-infra15:27
openstackgerritJeremy Stanley proposed opendev/system-config master: Add gitea04 replacement to inventory  https://review.opendev.org/67314615:29
*** ykarel|away has joined #openstack-infra15:31
openstackgerritMonty Taylor proposed zuul/zuul-jobs master: Don't try to push images when the build failed  https://review.opendev.org/67314715:32
mordredcorvus: ^^ and I think that's why we're seeting POST_FAILURE on all of the image build failures above15:33
*** betherly has quit IRC15:33
openstackgerritMonty Taylor proposed opendev/system-config master: Build gerrit images for 2.16 and 3.0 as well  https://review.opendev.org/67227315:34
openstackgerritMonty Taylor proposed opendev/system-config master: Try building with 0.27.1 instead  https://review.opendev.org/67314115:34
openstackgerritMonty Taylor proposed opendev/system-config master: Split out bazel builder and gerrit base image  https://review.opendev.org/67314215:34
openstackgerritMonty Taylor proposed opendev/system-config master: Separate the Dockerfiles for the bazel builds  https://review.opendev.org/67314315:34
mordredand that should exercise whether the zuul-jobs change is good or not15:35
mordred(since that stack does all the things)15:35
*** slaweq has quit IRC15:36
*** betherly has joined #openstack-infra15:58
*** whoami-rajat has quit IRC16:01
*** betherly has quit IRC16:03
*** jamesmcarthur has quit IRC16:04
paladoxmordred awesome to see that it builds for you!16:14
*** betherly has joined #openstack-infra16:19
*** betherly has quit IRC16:24
*** slaweq has joined #openstack-infra16:50
*** slaweq has quit IRC16:55
*** jamesmcarthur has joined #openstack-infra17:00
*** betherly has joined #openstack-infra17:01
*** ykarel|away has quit IRC17:02
*** ykarel|away has joined #openstack-infra17:04
*** jamesmcarthur has quit IRC17:05
*** betherly has quit IRC17:05
*** pfallenop has quit IRC17:06
*** bhavikdbavishi has quit IRC17:06
*** pfallenop has joined #openstack-infra17:08
*** bdodd has quit IRC17:15
*** whoami-rajat has joined #openstack-infra17:19
donnyddo passwords for tenants get rotated?17:20
*** bobh has joined #openstack-infra17:21
fungiwe generally reset them initially when we get access, and then... infrequently thereafter17:21
fungiinitial passwords are often communicated to us over insecure channels, so it's just a general safety precaution17:22
donnydI C17:27
donnydI am trying to migrate the mirror, but there doesn't look to be a good way to do it17:28
*** ricolin has joined #openstack-infra17:28
donnydthe keys used to launch it are gone, which is somewhat problematic17:28
donnydI do however have a fixed port created so we don't have to move any ip addresses17:29
donnydI am still in waiting for the parts to arrive to bring the nodepool instances back up to their appropriate levels, but the mirror node sits on dedicated hardware.17:30
donnydI would like to get the mirror back up and running as soon as I can so everything will be ready to roll when i get the final part in (fans for storage server)17:30
donnydWould it be better to just let ansible rebuild the mirror on its next run and then swap out the port that is created for the one that is already  populated in DNS?17:31
fungii just tested and seem to still be able to authenticate to the api17:32
*** jamesmcarthur has joined #openstack-infra17:32
donnydI haven't swapped over the api yet17:32
donnydI can, I guess its all hard down at this point17:32
fungiwell, the mirrors aren't auto-built, they're brought up manually17:32
fungiwe can rebuild it of course17:33
fungiprobably no more than 30 minutes of someone's time17:33
fungii mean, it's mostly scripted, just needs someone to feed in the appropriate parameters and tweak the volume mounts in some cases17:34
clarkbno volume mounts in this case17:36
donnydIf someone could bring the mirror back up that would be super helpful17:37
fungii'm not sure what you mean by "the keys used to launch it are gone" since we seem to have usable credentials... if those same credentials are what's needed to do the migration, is there some command we need to run?17:37
donnydok, the apis are swapped out17:37
donnydyea, the keys that were used to launch it aren't in the db, or I would just migrate them17:38
donnydIts possible they are being stored somewhere else17:38
fungii assume the keys we have are sufficient to launch an instance, so can we use those to migrate it?17:38
fungior am i mixing up terminology?17:39
*** armax has joined #openstack-infra17:39
donnyd+----------------------------+17:39
donnyd| name                       |17:39
donnyd+----------------------------+17:39
donnyd| bridge-root-2014-09-15     |17:39
donnyd| infra-root-keys            |17:39
donnyd| infra-root-keys-2018-06-15 |17:39
donnyd| precision                  |17:39
donnyd| bridge-root-2014-09-15     |17:39
donnyd| clarkb-ssh-key             |17:39
donnyd| infra-root-keys            |17:39
donnyd| infra-root-keys-2018-06-15 |17:39
donnyd| precision                  |17:39
fungioh, those are keys used to log into the instance, right?17:39
donnydhowever, the one use to launch the mirror are called launch-156216410917:40
donnydAll the other keys are there.. just not those ones17:40
donnydyes17:40
fungiso you're saying if we can log into the instance there's some command we can use to "migrate" it?17:40
donnydno, migration is manual between controller17:41
fungibut if you had the authentication key we used to log into it when we first launched it, *then* you'd be able to migrate it?17:41
donnydI was just trying to keep all the same data, IE, pull data from the DB, and repopulate it into the new  controller17:42
fungioh, i see, it's a data integrity thing in nova i guess. surprising that when we delete keys that makes nova migration challenging17:43
donnydhowever it would seem like *if* the process isn't a heavy lift from infra's side then maybe it would be faster to get the mirror back up and running by relaunching it17:44
donnydyea, I don't know what is in the key-pair used to launch the instance17:44
donnydThat is really the only data I am missing17:44
fungii think those launch-xxxx keys are ephemeral and always deleted after we use them to bootstrap, but yeah we ought to be able to just boot another mirror instance17:44
fungifunny that nova keeps a reference to them even after deleting17:45
donnydCan either fungi or clarkb give it a whirl if you have time?17:45
fungii'll see if i can figure it out17:45
donnydOnce the instance is launched I can pop the right interface back on it so we don't have to tinker with DNS17:45
fungihrm, our api credentials are no longer working17:46
fungiThe request you have made requires authentication. (HTTP 401) (Request-ID: req-90c2ac09-b153-4f8a-b635-0c3f4be571a0)17:46
fungiit was working a moment ago17:46
donnydyes, that is why I asked about the password changing thing17:47
fungii see17:47
fungithat's the first order of business i guess, before i can boot the mirror17:47
fungiwill go through and get credentials redone for the accounts17:48
*** bhavikdbavishi has joined #openstack-infra17:50
clarkbfungi: did gitea03 get GC'd ?17:54
clarkbI think you mentioned ti had been missed on either 02 or 03 and wanted to make sure that got done17:54
clarkb(I can trigger it if it hasn't been done yet)17:55
fungioh, no i think i didn't do the git gc on it yet, please do17:55
*** bobh has quit IRC17:56
fungialso changes are up to add gitea04 back into the inventory and update dns for it17:56
clarkbgc is running on 03, reviewing 04 changes now17:57
clarkbdone and done17:59
fungithanks17:59
*** ricolin has quit IRC17:59
openstackgerritMerged opendev/zone-opendev.org master: Update IP address for gitea04  https://review.opendev.org/67314417:59
fungii guess https://docs.openstack.org/python-openstackclient/latest/cli/command-objects/user.html#user-set is the admin command... what's the one i want for resetting the password of the account which is authenticating to the api? i never can seem to remember which one that is18:02
*** ykarel|away has quit IRC18:03
clarkbuser password set18:05
clarkbfungi: ^18:05
fungiweird... why is that not in the osc documentation?18:06
fungithat may explain why i always find the wrong one18:06
clarkbI always end up doing something like openstack --help | grep password18:08
*** armax has quit IRC18:09
fungiRequest to http://10.0.10.240:5000/v3/users/3c109a4413ca4b68b90560093ff2d79c/password timed out18:13
fungiis that supposed to be an rfc 1918 address?18:13
fungiwrong catalog entry?18:13
clarkbshould be https too18:13
*** raissa has quit IRC18:13
fungiyeah18:13
fungidonnyd: ^ is the (new) keystone catalog incorrect?18:14
*** jamesmcarthur has quit IRC18:14
donnydhrm18:14
donnydno18:14
clarkbopenstack.fortnebula.com does not resolve to that 10.0.10.240 address fwiw (and we set that as the auth_url's fqdn)18:14
openstackgerritMerged opendev/system-config master: Add gitea04 replacement to inventory  https://review.opendev.org/67314618:15
*** wpp has quit IRC18:16
donnydyou should be getting the public endpoints18:16
fungidoes `openstack user password set` try to use internal/admin endpoints for some reason?18:18
fungithe public keystone endpoint in the catalog is https://openstack.fortnebula.com:1300018:20
fungiwhich does seem to be reachable18:21
donnydI am not sure why its feeding you back private APIs18:22
fungi--verbose doesn't seem to report anything useful on the password command either18:22
fungicommand: user password set -> openstackclient.identity.v3.user.SetPasswordUser (auth=True)18:23
fungimaybe it's an osc bug and i need to update the one in my virtualenv18:24
donnydno, its not18:24
*** betherly has joined #openstack-infra18:24
donnydYou can use the --debug flag to see where its calling18:24
donnydand for some reason it wants to call the private ip address18:25
*** ralonsoh has joined #openstack-infra18:25
* donnyd digging into why keystone is not using the catalog apis for public interfaces18:29
fungiugh, after upgrading, new problem:18:29
fungiFailed to discover available identity versions when contacting https://openstack.fortnebula.com:13000/v3. Attempting to parse version from URL.18:29
fungiUnable to establish connection to https://openstack.fortnebula.com:13000/v3/auth/tokens: ('Connection aborted.', RemoteDisconnected('Remote end closed connection without response',))18:29
*** betherly has quit IRC18:29
fungibut it at least does seem to be hitting the correct endpoint now18:30
fungithis is with latest python-openstackclient and dependency versions18:31
clarkbtry drop the v3/ prefix18:31
fungiwell, retried with --debug and suddenly it worked?18:32
* fungi sighs at heisenbug, changing its behavior18:32
fungiyeah, passwords successfully changed now18:34
fungimaybe donnyd adjusted something?18:34
fungianyway, i saved a pip freeze before upgrading, in case anyone is keen to reproduce18:35
donnydyea, headers parsing wasn't se18:35
donnydyea, headers parsing wasn't set18:35
fungiahh, okay18:35
fungilooks like we want flavor "8cpu-8GBram-200GBdisk" and image "bionic" (those are what the old mirror used)18:37
clarkbyup18:37
fungiare we using --boot-from-volume there?18:39
donnydno18:40
donnydthere is only 1 hypervisor right now, so it should be scheduled to the proper place18:40
fungijust fiddling with the script now to see if i can get it to include a port name18:43
donnydif that is too much, then we should be able to do the port swap18:43
*** betherly has joined #openstack-infra18:45
*** hwoarang_ has joined #openstack-infra18:47
fungii think i just need to work out which parameter that is to openstacksdk18:47
*** hwoarang__ has joined #openstack-infra18:48
*** hwoarang has quit IRC18:48
*** jamesmcarthur has joined #openstack-infra18:49
*** betherly has quit IRC18:49
*** hwoarang_ has quit IRC18:52
*** jamesmcarthur has quit IRC18:53
* donnyd very get very angry with fedex @ now18:58
donnydso I guess my fan assembly will now be here tuesday...18:59
donnydso I can't bring any hypervisors for nodepool back online18:59
donnydhowever that doesn't effect the mirror18:59
*** jamesmcarthur has joined #openstack-infra19:02
fungiyeah, so our script is calling into https://opendev.org/openstack/openstacksdk/src/branch/master/examples/compute/create.py#L55-L71 which doesn't seem to provide any option for specifying a predefined port19:03
fungii'll just try to boot it the old fashioned way and see what we end up with19:03
fungioh, wait, that's an example source, not what we're calling19:04
* fungi got lost in the maze of openstacksdk docs19:04
*** betherly has joined #openstack-infra19:05
fungihere's the method: https://docs.openstack.org/openstacksdk/latest/user/connection.html#openstack.connection.Connection.create_server19:05
fungistill, no port19:06
fungiit does have an ips option, but i think that's for fip19:06
fungiso anyway, it's launching now19:07
donnydok cool19:08
*** jamesmcarthur has quit IRC19:09
fungilooks like it got an initial ip address of 2001:470:e045:2:f816:3eff:fef3:93c519:09
donnydso should i swap out the ip address now?19:10
*** betherly has quit IRC19:10
fungii don't think our script will figure that out. it's still waiting to be able to ssh into 2001:470:e045:2:f816:3eff:fef3:93c519:11
donnydwell its reachable from the public interwebs, and the security group rules are wide open19:12
fungiyeah, i think something happened with the keypair its trying to use19:12
fungi`openstack keypair list` is empty19:12
fungii wonder if i need to rerun our cloud launcher first to readd some19:12
fungiclarkb: ^ does that normally happen automatically or is it manual?19:13
fungii can't recall19:13
fungii'll look through our documentation19:14
fungiahh, yep, it runs in cron hourly from our bridge server19:17
fungiseems it ran at 19:00z19:18
fungiaha, but it's broken19:19
donnydSo are we going to provision and configure and then swap ip's or provision swap ips and then configure?19:20
fungilooks like authentication may be broken for openstackjenkins-vexxhost ca-ymq-119:20
donnydI would think #2 so it gets configured to listen on the right ip addresses for things and what not19:21
fungidonnyd: well, provisioning includes configuring in this case. as i mentioned earlier it's all one scripted process and ansible expects the instance to be reached on the address returned by the server_create() call to openstacksdk19:22
fungibut first i need to figure out how to get the keypairs reinstalled19:22
donnydok cool19:22
fungiit's unclear why our script which installs our keypairs in clouds didn't re-add them to the fn tenants... it seems to do each region independently so i don't think the exception raised for openstackjenkins-vexxhost ca-ymq-1 is the cause19:24
fungii don't actually see it trying to run for the fn tenants at all19:24
*** bdodd has joined #openstack-infra19:24
fungiso reverse-engineering it now19:25
donnyddoes it have the same creds as what were just provisioned19:26
donnydjust an fyi I have about 30 more minutes to work on this today, i have to be out of here at 419:26
fungiyeah, it should be using the same credentials, i don't see it even mention trying though19:27
*** bobh has joined #openstack-infra19:36
fungii'm coming back around to suspecting openstackjenkins-vexxhost ca-ymq-1 is causing it to not process any clouds after that one in the yaml list19:37
fungibecause i think it's only doing entries listed before that19:38
*** jamesmcarthur has joined #openstack-infra19:39
fungioh yeah, it stops immediately after failing that one. trying manually with that one omitted this time19:41
*** jamesmcarthur has quit IRC19:44
fungibreaking on openstackjenkins-vexxhost sjc1 too19:44
*** bobh has quit IRC19:45
donnydmaybe move FN above those two inline?19:47
donnydI'm also interested to see that the images are not yet being populated for nodepool19:48
donnydis that on a cron?19:48
funginodepool also needs appropriate keypairs (added by this same cronjob)19:49
fungiand yeah, looks like it's getting through the rest of the list now with those two removed19:49
fungiit's on limestone now so should only be another couple minutes and then i'll rerun the boot19:55
fungiyep, it's doing fn now19:55
donnydI also thought it was a little strange when the instance was booted, it only picked up an v6 address19:56
donnydthat network has dualstack on it, so it should have grabbed both19:56
*** dciabrin has joined #openstack-infra19:56
fungikeypairs are showing up now19:56
fungibooting19:56
*** betherly has joined #openstack-infra19:57
fungiit is still just showing openstackci=2001:470:e045:2:f816:3eff:fe60:107d19:58
donnydhrm, responds to icmp..19:58
fungii wonder if i should also attach it to the wan network?19:58
donnydthere is already the correct fip provisioned19:59
donnydwant me to add it?19:59
donnydnot wan19:59
donnydyou want to attach to the openstackci subnet, and then use your FIP19:59
donnydits it doing anything on your end yet, or still waiting for ssh again?20:00
fungino, i think part of the problem may be that i'm trying to boot a new instance with a name which is already present in our ansible inventory20:01
fungibooting again as 02 instead of 0120:01
donnydShouldn't ansible just reconfigure the instance so long as it matches in name?20:01
fungiour inventory is static, so we need to update it in git20:01
fungithat is, if nova boots it with a different ip address than is already listed in the inventory20:02
*** betherly has quit IRC20:02
donnydright, but if I change the port and bounce the box it should just fix the broken bits right?20:02
donnydon the next run20:02
donnydIDK how your end of things work, so just curious20:02
fungiwell, i don't want to keep you, said you had a hard stop at 20:00z20:03
donnydI am good for a bit longer20:04
donnydmaybe 20ish minutes20:04
fungibut yeah, a big part of the problem is that the launch script is expecting nova to tell it the correct ip address for the instance, so if the address isn't going to be what nova reports to it, then it can't handle that20:04
fungithough at the moment i'm not sure why it's still not able to ssh into the instance20:04
donnydhow long will it wait>20:04
fungia couple minutes... maybe 5? i'd have to go digging in the script source20:04
donnydwell its going to use dns to ssh20:04
donnydwell i can swap it out and then reboot in that amount of time to find out20:05
fungiactually it ssh's via ip address because we won't necessarily have instances added to dns until after we know their ip addresses20:05
donnydAh i C20:05
donnydbut its trying to use the ip it already has in the inventory?20:05
fungiwell, it shouldn't now because i've booted an instance with a name not yet in the ansible inventory20:06
fungibut the script is going to need more debugging added as i don't actually know what it's trying to reach20:06
fungiit just keeps reporting "While testing ssh access: [Errno -2] Name or service not known"20:06
donnydwell that is a dns error20:07
fungiyeah, leads me to wonder if it's not correctly setting the ipv6 address in the ssh command line20:07
clarkbcan also change the ip?20:08
clarkbits a small dns update20:08
donnydalso for some reason its not picking up the v4 address when the instance is provisioned20:09
donnydwhich is weird20:09
fungiyeah, at the moment i'm not even worried about the ip address, still trying to work out why we're not ssh'ing into it at all. i've rerun the launch script with --verbose in hopes of getting more detail20:09
fungibut --verbose only turns on debug openstacksck responses apparently, doesn't tell me the ssh command it's using to test connectivity20:10
clarkbyou can also keep it to try and debug afterlaunch fails20:10
clarkbsorry not more help have friends down fro  seattle so am weekending now20:10
*** bobh has joined #openstack-infra20:11
fungitrying again without specifying --network=openstackci this time20:11
fungino worries clarkb! it *is* saturday20:11
fungiomitting --network=openstackci gives the same result, only an ipv6 address allocated20:12
fungii've found the ssh test and added some code to print out the arguments20:14
fungiokay, the problem is the ip address it's trying to ssh to is an empty string20:17
*** armax has joined #openstack-infra20:17
fungiip = server.public_v420:18
* fungi grumbles20:18
fungitrying to hardcode it to use server.public_v6 for the moment20:19
fungithat does seem to pass in the ipv6 address according to my debug output20:19
fungilooks like it may have worked20:19
fungithe fun part comes when i try to unwind the layer cake of problems i've found and hacked around the last several hours20:20
donnydYet another yak to shave20:21
donnydLOL20:21
donnydthanks for the patience in working through these issues on a Saturday20:21
fungithanks for *your* patience!20:21
*** e0ne has joined #openstack-infra20:22
*** bobh has quit IRC20:23
fungineat, it took rather a while for the ssh host key to generate20:25
fungiinitial ssh timed out once the socket was listening, but the script retried20:25
donnydso its running now?20:26
fungiyeah, it's configuring the instance, i think20:26
*** jamesmcarthur has joined #openstack-infra20:26
fungiyep, it's creating a swapfile now20:27
fungirunning various ansible tasks20:27
fungiseems to be underway20:27
fungiupdating packages20:27
donnydwell that is pretty good news20:28
donnydso after its done, we can swap out the port and move on to funner things20:28
donnydhowever not till tuesday... because my fans are stuck in the midwest20:29
*** betherly has joined #openstack-infra20:29
donnydand I am not at all frustrated or mad about it being late...20:29
fungiTemporary failure resolving 'us.archive.ubuntu.com'20:30
fungiso that eventually broke because i think we set the resolver/forwarder to use ipv420:30
donnydum i see no instance20:30
fungiyes, the launch script deleted it on failure20:30
donnydok, why don't we try a different approach20:30
donnydI will restrict the network to only having one ip available20:31
donnydthe one its supposed to be20:31
fungiyeah, i think the inexplicable lack of ipv4 connectivity is going to continue to bite us in other places otherwise20:32
donnydyea, that makes no sense at all20:33
fungiif you're restricting the addresses to what we have in dns for mirror01.regionone.fortnebula.opendev.org then i can reuse that hostname because it will jive with what's present in the static ansible inventory20:33
donnydlemme go look through the neutron logs to see what they say20:33
donnydyea, I am20:33
fungiat this point we're just asking nova to boot an instance and pick whatever networking it thinks is best, and this is what it's giving us20:34
fungiso curious what's going on there20:34
*** betherly has quit IRC20:34
donnydyea, that is a super weird issue to have.. if it has two networks... it should dual stack the instance20:35
donnydalmost done20:36
donnydeven more interesting is when i boot a test instance it gets boht20:39
donnydeven more interesting is when i boot a test instance it gets both20:39
donnydzomg... so neutron is handing out an ip that isn't even in the available pool20:41
fungiyikes20:41
donnydI am pretty sure that isn20:44
donnydisn't supposed to happen20:44
donnydYea at this point it seems like it may be less work to update the dns record20:47
donnyddo you want to give a spin on your end20:47
donnydtry to figure out why its only getting a v6 address20:47
fungiwill do20:47
*** e0ne has quit IRC20:47
donnydThe only thing changed on my end is using bgp to route instead20:48
donnydeverything else has been copy / paste (ish)20:48
*** bhavikdbavishi has quit IRC20:49
donnydWell this is new20:50
donnydhttps://www.irccloud.com/pastebin/6bLcihla/20:50
donnydI am thinking its this little fella right here20:52
donnyd2019-07-27 16:46:55.594 2214 INFO oslo_rootwrap.client [-] Spawned new rootwrap daemon process with pid=264620:52
donnyd2019-07-27 16:46:55.610 2214 ERROR neutron.agent.linux.utils [-] Rootwrap error running command: ['conntrack', '-D', '-f', 'ipv4', '-s', '192.168.133.163', '-w', '4111']: RemoteError:20:52
donnydok, try again20:52
fungiyeah, that dunna look good20:53
donnydit would seem that conntrack wasn't installed... which i am not sure how that even happens...20:53
fungihuhwha?20:53
donnydYea, idk fungi20:53
donnydLOL20:53
donnydThis hypervisor has only been pointed at a different controller... worked fine on the other one20:54
donnydgive it another whirl and we will see if it works this time20:54
fungithat still seems to have only assigned an ipv6 address and no ipv4 address20:55
donnyddid you delete an rebuild?20:55
fungiyep20:55
fungi6040f911-cc94-4264-8da6-27f256d59c54 is the new instance20:55
donnydwell the error is gone20:56
donnydcan you give it one more spin please20:56
fungithat instance is deleted, server list is now empty20:56
fungibooting another20:57
donnydyea, same deal20:57
*** whoami-rajat has quit IRC20:58
donnydso more interesting tidbits20:59
donnydi remove the interface and reattached a new one and it comes up with both20:59
donnydI am about out of time today20:59
donnydI won't have anything useful until tuesday anyways21:00
*** betherly has joined #openstack-infra21:00
fungiindeed, i see it now also shows an rfc 1918 address21:00
fungiokay, well thanks for digging into this! i'm also going to see if i can find the needle of the server create request api call in this haystack of debug output21:01
fungimaybe that will yeild some clues21:01
fungior, yield21:01
fungihave a good weekend donnyd!21:01
donnydyou too fungi21:02
donnydthanks for all your hard work today21:02
fungiand yours as well21:02
*** betherly has quit IRC21:05
*** jamesmcarthur has quit IRC21:05
*** jamesmcarthur has joined #openstack-infra21:18
*** ralonsoh has quit IRC21:31
*** betherly has joined #openstack-infra21:31
*** betherly has quit IRC21:36
*** jamesmcarthur has quit IRC21:47
*** jamesmcarthur has joined #openstack-infra21:48
*** betherly has joined #openstack-infra21:52
*** jamesmcarthur has quit IRC21:53
fungimordred: to wrap up our earlier conversation, my solution to rapidly aging dock cleats is to put them in a mason jar filled with chlorine bleach21:56
*** betherly has quit IRC21:56
fungi"solution" was of course an accidental pun21:57
fungi(as it's sodium hypochlorite in an aqueous solution)21:58
fungii had wrongly assumed they were cast iron, but they appear to either be nickel plate or cast aluminum, judging from the color of oxidation accumulating on their surface22:00
*** jamesmcarthur has joined #openstack-infra22:01
fungithinking cast aluminum is more likely22:01
fungioh, or they *might* be galvanized22:02
fungizinc oxide would look like this22:02
*** trident has quit IRC22:03
*** pkopec has joined #openstack-infra22:05
*** trident has joined #openstack-infra22:06
*** betherly has joined #openstack-infra22:13
*** betherly has quit IRC22:18
*** jamesmcarthur has quit IRC22:32
*** betherly has joined #openstack-infra22:33
*** betherly has quit IRC22:38
*** pkopec has quit IRC22:47
mordredfungi: good solution!23:16
mordredfungi: (both to the problem, and the liquid substance)23:17
fungiclarkb: looking back through shell history, i may have missed the git gc on 02 as well, so running that now (and then 04, which is nearly ready)23:19
*** betherly has joined #openstack-infra23:25
fungi02 is taking long enough i suspect this is its first git gc23:27
*** altlogbot_0 has quit IRC23:29
*** betherly has quit IRC23:30
*** altlogbot_3 has joined #openstack-infra23:30
fungigit gc on gitea02 is *still* running23:41
*** betherly has joined #openstack-infra23:46
*** betherly has quit IRC23:51

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!