Tuesday, 2020-02-04

*** ociuhandu has joined #openstack-infra00:00
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Add upload-logs-gcs role  https://review.opendev.org/70371100:02
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Add index_links option to zuul manifest  https://review.opendev.org/70558000:02
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Google logs: Link to index.html files  https://review.opendev.org/70558600:02
corvusianw: yes, i think that's sufficient.00:03
*** ociuhandu has quit IRC00:05
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Add index_links option to zuul manifest  https://review.opendev.org/70558000:08
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Google logs: Link to index.html files  https://review.opendev.org/70558600:08
*** tosky has quit IRC00:22
*** mattw4 has quit IRC00:25
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: install-docker: enable setting docker userland proxy  https://review.opendev.org/70275300:27
openstackgerritTristan Cacqueray proposed zuul/zuul-operator master: Replace existing operator tasks with the new dhall function  https://review.opendev.org/70210600:27
openstackgerritTristan Cacqueray proposed zuul/zuul-operator master: Replace existing operator tasks with the new dhall function  https://review.opendev.org/70210600:57
openstackgerritTristan Cacqueray proposed zuul/zuul-operator master: Generate TLS certificats for the gearman service  https://review.opendev.org/70271600:57
openstackgerritTristan Cacqueray proposed zuul/zuul-operator master: Handle service restart when connections are changed  https://review.opendev.org/70362400:58
openstackgerritTristan Cacqueray proposed zuul/zuul-operator master: Add tenant reconfiguration when main.yaml changed  https://review.opendev.org/70363100:58
*** rfolco has joined #openstack-infra01:07
*** slaweq has joined #openstack-infra01:11
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: install-openshift: honor the docker_userland_proxy toggle  https://review.opendev.org/70558901:12
openstackgerritTristan Cacqueray proposed zuul/zuul-operator master: Add OpenShift SCC and functional test  https://review.opendev.org/70275801:13
*** slaweq has quit IRC01:16
openstackgerritMerged openstack/os-performance-tools master: Fix docs building  https://review.opendev.org/70554301:18
*** jamesmcarthur has joined #openstack-infra01:30
*** jamesmcarthur has quit IRC01:43
*** roman_g has quit IRC01:44
*** jamesmcarthur has joined #openstack-infra01:44
*** jamesmcarthur has quit IRC01:53
fungiclarkb: it's possible the run_all loop was actually blocking on ansible failing to ssh into graphite to apply our playbooks02:00
fungithat was happening last week when another server had crashed02:00
fungimade passed through the loop take 2-3 hours02:01
*** jamesmcarthur has joined #openstack-infra02:03
clarkbah02:03
*** jamesmcarthur has quit IRC02:07
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: install-openshift: honor the docker_userland_proxy toggle  https://review.opendev.org/70558902:08
*** gyee has quit IRC02:10
*** rh-jelabarre has quit IRC02:10
*** jamesmcarthur has joined #openstack-infra02:15
openstackgerritTristan Cacqueray proposed zuul/zuul-operator master: Add CONTRIBUTE file  https://review.opendev.org/70553502:17
*** hongbin has joined #openstack-infra02:29
*** dSrinivas has joined #openstack-infra02:37
*** jamesmcarthur has quit IRC02:45
*** jamesmcarthur has joined #openstack-infra02:46
*** rfolco has quit IRC02:50
*** slaweq has joined #openstack-infra03:11
*** jamesmcarthur has quit IRC03:13
*** jamesmcarthur has joined #openstack-infra03:13
*** slaweq has quit IRC03:15
*** rlandy has quit IRC03:30
*** jamesmcarthur has quit IRC03:32
*** jamesmcarthur has joined #openstack-infra03:48
*** jamesmcarthur_ has joined #openstack-infra03:52
*** jamesmcarthur has quit IRC03:56
*** jamesmcarthur_ has quit IRC03:57
*** jamesmcarthur has joined #openstack-infra03:58
*** udesale has joined #openstack-infra04:03
*** jamesmcarthur has quit IRC04:04
*** ykarel|away is now known as ykarel04:06
*** jamesmcarthur has joined #openstack-infra04:11
*** jamesmcarthur has quit IRC04:18
*** hongbin has quit IRC04:33
*** jamesmcarthur has joined #openstack-infra04:48
*** jamesmcarthur has quit IRC05:00
*** jamesmcarthur has joined #openstack-infra05:00
*** jamesmcarthur has quit IRC05:02
*** larsks has quit IRC05:05
*** cmurphy has quit IRC05:05
*** cmurphy has joined #openstack-infra05:07
*** slaweq has joined #openstack-infra05:11
*** larsks has joined #openstack-infra05:12
*** slaweq has quit IRC05:16
openstackgerritAndreas Jaeger proposed openstack/os-performance-tools master: [ussuri][goal] Drop python 2.7 support and testing  https://review.opendev.org/70552005:18
*** yolanda has quit IRC05:24
*** dciabrin has quit IRC05:27
*** jamesmcarthur has joined #openstack-infra05:33
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-infra05:34
*** raukadah is now known as chkumar|rover05:37
*** udesale_ has joined #openstack-infra05:45
*** udesale has quit IRC05:48
*** hwoarang has quit IRC06:07
*** hwoarang has joined #openstack-infra06:07
*** ricolin has joined #openstack-infra06:22
*** Lucas_Gray has joined #openstack-infra06:23
openstackgerritMerged openstack/diskimage-builder master: Add ironic jobs to the CI  https://review.opendev.org/70247406:23
*** lmiccini has joined #openstack-infra06:25
*** Lucas_Gray has quit IRC06:31
*** Lucas_Gray has joined #openstack-infra06:32
*** udesale_ has quit IRC06:45
*** udesale has joined #openstack-infra06:53
*** slaweq has joined #openstack-infra07:11
*** lpetrut has joined #openstack-infra07:15
*** slaweq has quit IRC07:16
openstackgerritRadosław Piliszek proposed openstack/project-config master: Add "Review-Priority" gerrit label to devstack  https://review.opendev.org/70554707:23
*** dpawlik has joined #openstack-infra07:26
*** Lucas_Gray has quit IRC07:26
*** Lucas_Gray has joined #openstack-infra07:29
*** ykarel is now known as ykarel|lunch07:37
*** mugsie has quit IRC07:37
*** mugsie has joined #openstack-infra07:41
*** evrardjp has quit IRC07:46
*** yboaron_ has joined #openstack-infra07:48
*** evrardjp has joined #openstack-infra07:50
*** yboaron_ has quit IRC07:55
*** yboaron_ has joined #openstack-infra07:55
*** pgaxatte has joined #openstack-infra07:56
*** dtantsur|afk is now known as dtantsur07:56
*** yboaron_ has quit IRC08:03
*** yboaron_ has joined #openstack-infra08:04
*** yboaron_ has quit IRC08:04
*** vesper11 has quit IRC08:06
*** beagles has quit IRC08:06
*** vesper11 has joined #openstack-infra08:07
openstackgerritTobias Henkel proposed zuul/zuul master: WIP: Fix mqtt log url reporting when report-build-page is active  https://review.opendev.org/70398308:08
*** slaweq has joined #openstack-infra08:12
*** b3nt_pin has joined #openstack-infra08:16
*** tkajinam has quit IRC08:17
*** dchen has quit IRC08:19
*** Lucas_Gray has quit IRC08:21
*** Lucas_Gray has joined #openstack-infra08:24
*** tesseract has joined #openstack-infra08:27
*** b3nt_pin has quit IRC08:30
*** priteau has joined #openstack-infra08:30
*** rpittau|afk is now known as rpittau08:33
*** tosky has joined #openstack-infra08:40
*** Lucas_Gray has quit IRC08:42
*** ykarel|lunch is now known as ykarel08:43
*** ociuhandu has joined #openstack-infra08:45
*** pkopec has joined #openstack-infra08:45
*** Lucas_Gray has joined #openstack-infra08:45
*** jpena|off is now known as jpena08:47
*** ralonsoh has joined #openstack-infra08:48
*** tommylikehu has joined #openstack-infra08:53
openstackgerritMerged openstack/diskimage-builder master: Enable possibility to select HWE kernel for Ubuntu minimal  https://review.opendev.org/69910709:00
*** lucasagomes has joined #openstack-infra09:03
*** tetsuro has joined #openstack-infra09:04
*** Lucas_Gray has quit IRC09:04
*** Lucas_Gray has joined #openstack-infra09:07
*** apetrich has joined #openstack-infra09:11
*** ociuhandu has quit IRC09:14
*** Lucas_Gray has quit IRC09:17
*** xek has joined #openstack-infra09:19
*** Lucas_Gray has joined #openstack-infra09:19
*** ociuhandu has joined #openstack-infra09:24
*** ociuhandu has quit IRC09:29
*** roman_g has joined #openstack-infra09:30
*** ociuhandu has joined #openstack-infra09:32
*** ociuhandu has quit IRC09:36
*** panda has left #openstack-infra09:42
*** priteau has quit IRC09:44
*** derekh has joined #openstack-infra09:44
*** jaosorior has quit IRC10:08
*** ykarel is now known as ykarel|afk10:10
*** ociuhandu has joined #openstack-infra10:21
openstackgerritAndreas Jaeger proposed openstack/os-performance-tools master: [ussuri][goal] Drop python 2.7 support and testing  https://review.opendev.org/70552010:26
*** davidsha has joined #openstack-infra10:27
*** ykarel|afk is now known as ykarel10:35
*** dtantsur is now known as dtantsur|afk10:54
*** udesale has quit IRC11:04
*** ociuhandu has quit IRC11:06
*** dpawlik has quit IRC11:06
*** ociuhandu has joined #openstack-infra11:07
*** dpawlik has joined #openstack-infra11:07
*** ociuhandu has quit IRC11:11
*** ociuhandu has joined #openstack-infra11:12
*** apetrich has quit IRC11:14
*** lucasagomes has quit IRC11:14
*** tosky has quit IRC11:14
*** slaweq has quit IRC11:14
*** pgaxatte has quit IRC11:14
*** mugsie has quit IRC11:14
*** cmurphy has quit IRC11:14
*** irclogbot_3 has quit IRC11:14
*** stevebaker has quit IRC11:14
*** Adri2000 has quit IRC11:14
*** AJaeger has quit IRC11:14
*** sparkycollier has quit IRC11:14
*** knikolla has quit IRC11:14
*** abelur has quit IRC11:14
*** setuid has quit IRC11:14
*** ildikov has quit IRC11:14
*** adriant has quit IRC11:14
*** dansmith has quit IRC11:14
*** adam_g has quit IRC11:14
*** stephenfin has quit IRC11:14
*** brwyatt has quit IRC11:14
*** aluria has quit IRC11:14
*** calebb has quit IRC11:14
*** hemna has quit IRC11:14
*** dabukalam has quit IRC11:14
*** tonyb[m] has quit IRC11:14
*** arif-ali has quit IRC11:14
*** Anticimex has quit IRC11:14
*** dtantsur|afk has quit IRC11:14
*** davidsha has quit IRC11:14
*** zbr has quit IRC11:14
*** piotrowskim has quit IRC11:14
*** arne_wiebalck has quit IRC11:14
*** viks___ has quit IRC11:14
*** evgenyl has quit IRC11:14
*** rajinir has quit IRC11:14
*** rpioso has quit IRC11:14
*** srwilkers has quit IRC11:14
*** davecore has quit IRC11:14
*** Jeffrey4l has quit IRC11:14
*** StevenK has quit IRC11:14
*** strigazi has quit IRC11:14
*** Shrews has quit IRC11:14
*** dustinc has quit IRC11:14
*** nickv1985 has quit IRC11:14
*** mwhahaha has quit IRC11:14
*** cjloader has quit IRC11:14
*** prometheanfire has quit IRC11:14
*** jistr has quit IRC11:14
*** mnasiadka has quit IRC11:14
*** andreaf has quit IRC11:14
*** szaher has quit IRC11:14
*** ab-a has quit IRC11:14
*** donnyd has quit IRC11:14
*** lyarwood has quit IRC11:14
*** ondrejburian has quit IRC11:14
*** logan- has quit IRC11:14
*** hrybacki has quit IRC11:14
*** npochet has quit IRC11:14
*** jamespage has quit IRC11:14
*** MarkMaglana has quit IRC11:14
*** vdrok has quit IRC11:14
*** dougwig has quit IRC11:14
*** diablo_rojo_phon has quit IRC11:14
*** gsantomaggio has quit IRC11:14
*** melwitt has quit IRC11:14
*** bauzas has quit IRC11:14
*** irclogbot_0 has joined #openstack-infra11:16
*** openstackstatus has quit IRC11:16
*** ttx has quit IRC11:17
*** tonyb[m] has joined #openstack-infra11:17
*** arif-ali has joined #openstack-infra11:17
*** Anticimex has joined #openstack-infra11:17
*** dtantsur|afk has joined #openstack-infra11:17
*** pkopec has quit IRC11:18
*** vesper11 has quit IRC11:18
*** fresta has quit IRC11:18
*** ricolin has quit IRC11:18
*** kaisers has quit IRC11:18
*** redrobot has quit IRC11:18
*** smcginnis|FOSDEM has quit IRC11:18
*** dmellado has quit IRC11:18
*** kota_ has quit IRC11:18
*** gagehugo has quit IRC11:18
*** dirk has quit IRC11:18
*** bstinson has quit IRC11:18
*** Qiming has quit IRC11:18
*** gary_perkins has quit IRC11:18
*** freerunner has quit IRC11:18
*** ericyoung has quit IRC11:18
*** timburke has quit IRC11:18
*** tristanC has quit IRC11:18
*** arxcruz has quit IRC11:18
*** bauzas has joined #openstack-infra11:18
*** apetrich has joined #openstack-infra11:18
*** lucasagomes has joined #openstack-infra11:18
*** tosky has joined #openstack-infra11:18
*** slaweq has joined #openstack-infra11:18
*** pgaxatte has joined #openstack-infra11:18
*** mugsie has joined #openstack-infra11:18
*** cmurphy has joined #openstack-infra11:18
*** stevebaker has joined #openstack-infra11:18
*** Adri2000 has joined #openstack-infra11:18
*** AJaeger has joined #openstack-infra11:18
*** sparkycollier has joined #openstack-infra11:18
*** knikolla has joined #openstack-infra11:18
*** abelur has joined #openstack-infra11:18
*** setuid has joined #openstack-infra11:18
*** ildikov has joined #openstack-infra11:18
*** adriant has joined #openstack-infra11:18
*** dansmith has joined #openstack-infra11:18
*** adam_g has joined #openstack-infra11:18
*** stephenfin has joined #openstack-infra11:18
*** calebb has joined #openstack-infra11:18
*** brwyatt has joined #openstack-infra11:18
*** aluria has joined #openstack-infra11:18
*** dabukalam has joined #openstack-infra11:18
*** hemna has joined #openstack-infra11:18
*** davidsha has joined #openstack-infra11:19
*** zbr has joined #openstack-infra11:19
*** piotrowskim has joined #openstack-infra11:19
*** viks___ has joined #openstack-infra11:19
*** arne_wiebalck has joined #openstack-infra11:19
*** evgenyl has joined #openstack-infra11:19
*** rajinir has joined #openstack-infra11:19
*** rpioso has joined #openstack-infra11:19
*** srwilkers has joined #openstack-infra11:19
*** davecore has joined #openstack-infra11:19
*** Jeffrey4l has joined #openstack-infra11:19
*** StevenK has joined #openstack-infra11:19
*** strigazi has joined #openstack-infra11:19
*** Shrews has joined #openstack-infra11:19
*** dustinc has joined #openstack-infra11:19
*** nickv1985 has joined #openstack-infra11:19
*** mwhahaha has joined #openstack-infra11:19
*** cjloader has joined #openstack-infra11:19
*** prometheanfire has joined #openstack-infra11:19
*** jistr has joined #openstack-infra11:19
*** mnasiadka has joined #openstack-infra11:19
*** andreaf has joined #openstack-infra11:19
*** szaher has joined #openstack-infra11:19
*** ab-a has joined #openstack-infra11:19
*** donnyd has joined #openstack-infra11:19
*** lyarwood has joined #openstack-infra11:19
*** ondrejburian has joined #openstack-infra11:19
*** logan- has joined #openstack-infra11:19
*** diablo_rojo_phon has joined #openstack-infra11:19
*** hrybacki has joined #openstack-infra11:19
*** npochet has joined #openstack-infra11:19
*** jamespage has joined #openstack-infra11:19
*** MarkMaglana has joined #openstack-infra11:19
*** vdrok has joined #openstack-infra11:19
*** dougwig has joined #openstack-infra11:19
*** gsantomaggio has joined #openstack-infra11:19
*** melwitt has joined #openstack-infra11:19
*** Qiming has joined #openstack-infra11:19
*** arxcruz has joined #openstack-infra11:20
*** freerunner has joined #openstack-infra11:20
*** Guest98567 has joined #openstack-infra11:20
*** timburke has joined #openstack-infra11:20
*** rm_work has quit IRC11:21
*** tonyb[m] has quit IRC11:21
*** knikolla has quit IRC11:21
*** setuid has quit IRC11:21
*** dmellado has joined #openstack-infra11:21
*** kota_ has joined #openstack-infra11:21
*** davecore has quit IRC11:21
*** nickv1985 has quit IRC11:21
*** donnyd has quit IRC11:21
*** tonyb[m] has joined #openstack-infra11:21
*** fresta has joined #openstack-infra11:21
*** mnaser has quit IRC11:21
*** gagehugo has joined #openstack-infra11:22
*** rm_work has joined #openstack-infra11:22
*** vesper11 has joined #openstack-infra11:22
*** tesseract has quit IRC11:22
*** ildikov has quit IRC11:22
*** nickv1985 has joined #openstack-infra11:22
*** davecore has joined #openstack-infra11:22
*** mnaser has joined #openstack-infra11:22
*** ericyoung has joined #openstack-infra11:23
*** mwhahaha has quit IRC11:23
*** abelur has quit IRC11:23
*** smcginnis|FOSDEM has joined #openstack-infra11:23
*** tristanC has joined #openstack-infra11:23
*** knikolla has joined #openstack-infra11:23
*** donnyd has joined #openstack-infra11:23
*** ttx has joined #openstack-infra11:23
*** mwhahaha has joined #openstack-infra11:23
*** ildikov has joined #openstack-infra11:23
*** abelur has joined #openstack-infra11:24
*** tesseract has joined #openstack-infra11:24
*** setuid has joined #openstack-infra11:26
*** andreykurilin has joined #openstack-infra11:26
donnydOn the 7th my ISP will be offering ipv6 directly - so there will likely be some outage time when I transition from HE to my ISP for v6 traffic11:30
*** bstinson has joined #openstack-infra11:31
*** sshnaidm|afk is now known as sshnaidm11:31
*** hashar has joined #openstack-infra11:32
*** gfidente has joined #openstack-infra11:50
*** tetsuro has quit IRC11:56
*** tesseract has quit IRC11:56
mordreddonnyd: nice!11:58
mordredmy new ISP provides IPv6 which pleases me11:58
donnydfinally - they are only 5 - 7 years behind everyone else11:58
donnydLOL11:58
mordredright?11:59
*** ricolin has joined #openstack-infra11:59
mordredwell - my old one didn't - but now I'm on AT&T Gigabit and it sure does also have ipv6 so \o/11:59
mordredI had HE set up - but then, of course, that meant I had to firewall so that things didn't try to talk to netflix over ipv6 because they block the HE ranges for being a proxy. such a pita12:00
donnydI have had no issues with netflix and HE at all... I did it by getting rid of netflix and using hulu instead12:01
mordredhaha12:02
*** zbr is now known as zbr|lunch12:06
*** AJaeger has quit IRC12:11
*** AJaeger has joined #openstack-infra12:24
openstackgerritAntoine Musso proposed zuul/zuul master: web: humanize time durations  https://review.opendev.org/70512012:24
*** tesseract has joined #openstack-infra12:26
*** tesseract has quit IRC12:29
*** adriancz has joined #openstack-infra12:29
*** jpena is now known as jpena|lunch12:31
*** rfolco has joined #openstack-infra12:31
*** tesseract has joined #openstack-infra12:31
*** tesseract has quit IRC12:37
*** tesseract has joined #openstack-infra12:38
*** tesseract has quit IRC12:40
*** jpena|lunch is now known as jpena|off12:40
*** tesseract has joined #openstack-infra12:40
mordredinfra-root: I'm booting a review-dev01.opendev.org12:43
weshay|ruckhrm.. seeing the gate fail on oslo.concurrency https://github.com/openstack/requirements/commit/0c5ace0ec8ac670b6cbeb64fb8577d11adc90bc5#diff-0bdd949ed8a7fdd4f95240bd951779c812:44
weshay|ruckis this just a mirror issue?12:44
weshay|ruckERROR: No matching distribution found for oslo.concurrency===4.0.012:44
AJaegerweshay|ruck: please link to the error12:47
openstackgerritTobias Henkel proposed zuul/zuul master: DNM: Reproduce merger failure when changing default branch  https://review.opendev.org/70565912:47
*** ociuhandu has quit IRC12:48
weshay|ruckAJaeger, https://bugs.launchpad.net/tripleo/+bug/186180312:48
openstackLaunchpad bug 1861803 in tripleo "ubuntu-bionic | ERROR: Could not find a version that satisfies the requirement oslo.concurrency===4.0.0 (from -c /home/zuul/src/opendev.org/openstack/requirements/upper-constraints.txt " [Critical,Triaged]12:48
weshay|ruckAJaeger, have 3-4 gate jobs failing on this atm12:48
AJaegerweshay|ruck: it exists here: https://pypi.org/project/oslo.concurrency/12:50
*** tesseract has quit IRC12:50
AJaegerweshay|ruck: which python version are you running?12:50
AJaegeroslo.concurrency requires python 3.6 or newer!12:50
weshay|ruckheh12:51
AJaegerweshay|ruck: you're using py27 - welcome to the end of Python 2.7 ;)12:51
AJaegerweshay|ruck: so, all fine on the infra side, a side effect of dropping py27 as community goal in current release12:51
openstackgerritMonty Taylor proposed opendev/zone-opendev.org master: Add review-dev.opendev.org  https://review.opendev.org/70566112:52
openstackgerritMonty Taylor proposed opendev/zone-opendev.org master: Clean up LE entry for review.o.o  https://review.opendev.org/70566212:52
*** rh-jelabarre has joined #openstack-infra12:53
*** ykarel is now known as ykarel|afk12:55
openstackgerritTobias Henkel proposed zuul/zuul master: Allow different branches for config projects  https://review.opendev.org/70566312:57
openstackgerritTobias Henkel proposed zuul/zuul master: Add branch filter to tenant configuration  https://review.opendev.org/70566412:57
*** rlandy has joined #openstack-infra12:58
*** Guest98567 is now known as redrobot12:59
*** tesseract has joined #openstack-infra13:03
openstackgerritTobias Henkel proposed zuul/zuul master: Add branch filter to tenant configuration  https://review.opendev.org/70566413:06
*** tesseract has quit IRC13:07
openstackgerritMonty Taylor proposed opendev/system-config master: Add review-dev01.opendev.org  https://review.opendev.org/70566913:08
openstackgerritMonty Taylor proposed opendev/system-config master: Get LE certs for review.o.o  https://review.opendev.org/70567013:08
openstackgerritMonty Taylor proposed opendev/system-config master: Remove review-dev01.openstack.org  https://review.opendev.org/70567113:08
*** artom has quit IRC13:11
weshay|ruckthanks AJaeger13:13
mordredianw, fungi: is something known to be unhappy with reverse dns for opendev.org servers?13:15
mordredI ran the rackdns commands and got:13:15
mordredERROR: 'response'13:15
*** tesseract has joined #openstack-infra13:15
*** jamesmcarthur has quit IRC13:15
*** jamesmcarthur has joined #openstack-infra13:15
*** ociuhandu has joined #openstack-infra13:20
openstackgerritMonty Taylor proposed opendev/system-config master: Make small tweaks to launch node README  https://review.opendev.org/70567313:24
*** aaronsheffield has joined #openstack-infra13:24
*** jamesmcarthur has quit IRC13:25
*** ociuhandu has quit IRC13:27
*** jpena|off is now known as jpena13:28
*** jamesmcarthur has joined #openstack-infra13:28
*** tkajinam has joined #openstack-infra13:34
*** b3nt_pin has joined #openstack-infra13:37
openstackgerritMonty Taylor proposed opendev/system-config master: Add review-dev01.opendev.org  https://review.opendev.org/70566913:38
openstackgerritMonty Taylor proposed opendev/system-config master: Get LE certs for review.o.o  https://review.opendev.org/70567013:38
openstackgerritMonty Taylor proposed opendev/system-config master: Remove review-dev01.openstack.org  https://review.opendev.org/70567113:38
*** davidsha has quit IRC13:39
*** ykarel|afk is now known as ykarel13:41
*** pcaruana has quit IRC13:43
*** jamesmcarthur has quit IRC13:44
*** smarcet has joined #openstack-infra13:52
*** ociuhandu has joined #openstack-infra14:01
*** pkopec has joined #openstack-infra14:05
openstackgerritAntoine Musso proposed zuul/zuul master: ansible manager: only failed if last ansible failed  https://review.opendev.org/70469914:06
*** ociuhandu has quit IRC14:06
*** gshippey has joined #openstack-infra14:07
*** ykarel is now known as ykarel|afk14:12
openstackgerritTobias Henkel proposed zuul/zuul master: Add branch filter to tenant configuration  https://review.opendev.org/70566414:13
*** Lucas_Gray has quit IRC14:15
openstackgerritTobias Henkel proposed zuul/zuul master: Increase timeout of zuul-build-image  https://review.opendev.org/70568914:17
*** jamesmcarthur has joined #openstack-infra14:18
openstackgerritMonty Taylor proposed opendev/system-config master: Use LE certs for Apache  https://review.opendev.org/70569014:18
openstackgerritHervé Beraud proposed openstack/cookiecutter master: suri][goal] Drop python 2.7 support and testing  https://review.opendev.org/70569114:19
*** eharney has quit IRC14:19
*** eernst has joined #openstack-infra14:20
*** udesale has joined #openstack-infra14:22
*** Lucas_Gray has joined #openstack-infra14:22
*** ociuhandu has joined #openstack-infra14:26
*** dtantsur|afk is now known as dtantsur14:27
openstackgerritHervé Beraud proposed openstack/pbr master: [ussuri][goal] Drop python 2.7 support and testing  https://review.opendev.org/70569314:29
*** eernst has quit IRC14:29
*** tkajinam has quit IRC14:32
*** dSrinivas has quit IRC14:34
*** jaosorior has joined #openstack-infra14:40
openstackgerritMonty Taylor proposed opendev/system-config master: Get LE certs for review.o.o  https://review.opendev.org/70567014:40
openstackgerritMonty Taylor proposed opendev/system-config master: Remove review-dev01.openstack.org  https://review.opendev.org/70567114:40
openstackgerritMonty Taylor proposed opendev/system-config master: Use LE certs for Apache  https://review.opendev.org/70569014:40
*** davidsha_ has joined #openstack-infra14:45
*** michael-beaver has joined #openstack-infra14:54
*** pcaruana has joined #openstack-infra14:56
*** hashar has quit IRC14:57
*** artom has joined #openstack-infra14:57
*** jtomasek has joined #openstack-infra15:02
*** zbr|lunch is now known as zbr15:04
*** dtantsur is now known as dtantsur|afk15:06
openstackgerritHervé Beraud proposed openstack/cookiecutter master: [ussuri][goal] Drop python 2.7 support and testing  https://review.opendev.org/70569115:08
openstackgerritJames E. Blair proposed zuul/zuul master: Correct info log on item report  https://review.opendev.org/70570915:11
*** tobias-urdin has joined #openstack-infra15:16
*** zxiiro has joined #openstack-infra15:20
*** eharney has joined #openstack-infra15:22
*** Goneri has joined #openstack-infra15:23
*** jtomasek has quit IRC15:27
*** smarcet has quit IRC15:30
*** jtomasek has joined #openstack-infra15:32
*** jamesmcarthur has quit IRC15:33
*** jamesmcarthur_ has joined #openstack-infra15:33
*** Lucas_Gray has quit IRC15:36
openstackgerritTobias Henkel proposed zuul/zuul master: Add branch filter to tenant configuration  https://review.opendev.org/70566415:37
clarkbmordred: you get that response but the revords arecreated15:38
*** Lucas_Gray has joined #openstack-infra15:39
openstackgerritTobias Henkel proposed zuul/zuul master: Evaluate CODEOWNERS settings during canMerge check  https://review.opendev.org/64455715:41
*** jaosorior has quit IRC15:43
*** sshnaidm is now known as sshnaidm|afk15:46
openstackgerritJan Kubovy proposed zuul/zuul master: WIP: Store unparsed branch config in Zookeeper  https://review.opendev.org/70571615:47
clarkbweshay|ruck: AJaeger I believe that can be mamaged by global requirements and constraints. zipp is a recent similar situation15:48
weshay|ruckk.. /me looks15:48
clarkbit may be worthwhile to have the release team require oslo releases that do this update global reqs first15:48
weshay|ruckclarkb, so we'll see an incoming patch to https://review.opendev.org/#/q/project:openstack/requirements ?15:49
clarkbsomeone needs to write it15:50
clarkbI'm suggesting that those affected work it out with the release team to ensure that this is handled prior to the new releases dropping and breaking everyone15:51
*** jackedin has joined #openstack-infra15:52
*** andrewbonney has joined #openstack-infra15:53
weshay|ruckchkumar|rover, fyi ^15:53
weshay|ruckassuming we can just fix up https://review.opendev.org/#/c/705685/15:54
weshay|ruckand then work w/ the release team15:54
chkumar|roverclarkb, weshay|ruck I have taken this approach https://review.opendev.org/#/c/705665/15:55
clarkb705685 should ideall update global-requirements then the constaints are autoupdated iirc15:55
*** Lucas_Gray has quit IRC15:56
chkumar|roverit is working in locally , not sure it is a ideal way to go through this route15:56
clarkbright my point re release team is they can check that a change like 705685 has landed before making releases that drop old python support15:56
clarkbchkumar|rover: that change isn't good. You should continue to depend on constraints15:57
clarkbchkumar|rover: the problem is that no one updated constraints prior to releasing the new package15:57
clarkbthe proper fix here is to ensure constaints are updated first15:57
clarkbyou need to work with the release team to ensure that happens15:57
*** ociuhandu has quit IRC15:58
*** ykarel|afk is now known as ykarel15:58
*** ociuhandu has joined #openstack-infra15:59
*** jackedin has quit IRC15:59
*** udesale has quit IRC16:00
*** lmiccini has quit IRC16:01
*** ociuhandu has quit IRC16:04
*** eharney has quit IRC16:06
*** lpetrut has quit IRC16:16
*** gyee has joined #openstack-infra16:17
*** mattw4 has joined #openstack-infra16:18
*** eharney has joined #openstack-infra16:19
openstackgerritMerged zuul/zuul master: Correct info log on item report  https://review.opendev.org/70570916:22
*** smarcet has joined #openstack-infra16:22
AJaegerclarkb: OpenStack is by M2 (next week) killing py27, so the other option is for tripleo et al to stop testing with py27.16:22
AJaegerclarkb: and according to gmann that was what tripleo said they would do...16:23
clarkbya that is what gmann said. My concern is that you cannot atomically kill python3 and you are essentially forcing everyone to be python3 capable before the deadline16:23
clarkbbut gmann wants to use this as the stick to get people to change16:23
clarkbusingthe requirements + constraints method you could keep a split until the actual deadline16:24
AJaegerclarkb: I hear you. That's a policy decision requirements team needs to have - with gmann and others16:24
*** ociuhandu has joined #openstack-infra16:26
gmannI will say this is the week, there are many projects patches hanging around after so much followup. Not sure about tripleo that what is blocking them to drop ? I have kept Temepst holding py2 support till feb for them as requested during planing and keep adjusting stable branches testing and other workaround etc.16:28
gmannbut i am waiting for requirement team decision on that as deadline is still week away.16:29
AJaegerprometheanfire: FYI ^16:30
*** slaweq_ has joined #openstack-infra16:30
*** slaweq has quit IRC16:33
prometheanfirehi?16:35
prometheanfirewhich comments you talking about in particular?16:35
AJaegerprometheanfire: regarding 705685 and py27 dropping, the discussion starting at 15:48 by clarkb16:36
clarkbthe tl;dr from my side is taht we are essentially forcing an early deadline on python3 because oslo is starting to drop its python2 capabilities and everything uses oslo16:37
AJaegerprometheanfire: sorry, have to leave now, will be back later but guess you don't need me for this further16:37
AJaegerclarkb: alternative could be to not *release* those yet...16:38
clarkbgmann wants to use this as motivation to ensure that everyone is python3 capable by the deadline16:38
clarkbAJaeger: that is a good point16:38
AJaegerso, drag release team in ;)16:38
AJaegersorry, out cycling home now - bbl16:38
clarkbwe have at least three options for addressing this. 1) my suggestion was to use requirements and constraints to split the deps like we did for zipp (at least until the daedline) 2) not make python3 only releases in libs until the deadline 3) early deadline push to ensure people get across the line (gmann's proposal)16:39
*** jamesdenton has joined #openstack-infra16:39
clarkb1 involves the requirements team and release team. 2 involves the release team. 3 involves everyone, but they are all going to be involved at the deadline anyway16:39
openstackgerritAndy Ladjadj proposed zuul/nodepool master: add ebs-optimized support for aws provider  https://review.opendev.org/70575516:42
*** jackedin has joined #openstack-infra16:44
*** ociuhandu has quit IRC16:44
*** ociuhandu has joined #openstack-infra16:45
*** jpena is now known as jpena|brb16:45
*** ociuhandu has quit IRC16:46
*** ociuhandu has joined #openstack-infra16:46
*** chkumar|rover is now known as raukadah16:48
*** pgaxatte has quit IRC16:55
*** eernst has joined #openstack-infra16:55
openstackgerritClark Boylan proposed openstack/project-config master: Start using airship citycloud cloud  https://review.opendev.org/70576516:55
clarkbroman_g: ^ fyi. I've got a todo there to figure out what the second pool's labels look like. I'll send email to you and robert as it will require updating quotas as well16:56
clarkbinfra-root ^ I think that change can land as is in order to get images uploading16:56
*** gfidente is now known as gfidente|afk16:57
clarkbI also need to launch a mirror16:57
clarkbbut figured since rtt to europe between my timezone is not great to focus on some of these other bits a bit first16:57
*** lbragstad_ is now known as lbragstad16:59
*** auristor has quit IRC16:59
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Google logs: Link to index.html files  https://review.opendev.org/70558617:01
*** auristor has joined #openstack-infra17:02
*** tesseract has quit IRC17:04
mordredclarkb: "neat" (re reverse dns)17:07
mordredclarkb: +2 on your images patch - could I get a +2 on https://review.opendev.org/#/c/705661/ ?17:07
clarkbmordred: fwiw we had similar responses from things like volume show and catalog list before setting api versions for them17:07
clarkbmordred: those commands use rc files and not clouds.yaml so possible we need to set an api version for something or other17:08
mordredclarkb: "sigh"17:08
*** lucasagomes has quit IRC17:12
*** ykarel is now known as ykarel|away17:13
openstackgerritAndy Ladjadj proposed zuul/nodepool master: add ebs-optimized support for aws provider  https://review.opendev.org/70575517:16
*** ociuhandu has quit IRC17:20
*** ociuhandu has joined #openstack-infra17:20
*** jpena|brb is now known as jpena17:24
*** ociuhandu_ has joined #openstack-infra17:25
*** rpittau is now known as rpittau|afk17:27
*** ociuhandu has quit IRC17:29
*** ociuhandu_ has quit IRC17:30
*** armax has quit IRC17:30
mordredcorvus: if you have a sec, could you +A https://review.opendev.org/#/c/705661/ ?17:32
*** michael-beaver has quit IRC17:33
*** evrardjp has quit IRC17:33
*** evrardjp has joined #openstack-infra17:34
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-tox: add ~/.local/bin to $PATH  https://review.opendev.org/70578217:35
*** ociuhandu has joined #openstack-infra17:35
*** davidsha_ has quit IRC17:35
*** jamesmcarthur_ has quit IRC17:35
*** jamesmcarthur has joined #openstack-infra17:37
*** ociuhandu has quit IRC17:40
*** jamesmcarthur has quit IRC17:42
AJaegerclarkb: shall I +2A https://review.opendev.org/#/c/705765 ?17:43
clarkbAJaeger: yes I think that is safe since max-servers is 017:44
clarkbAJaeger: will get us a headstart on uploading images. I've also sent email to those invovled to help sort out quotas and the flavors17:44
*** jamesmcarthur has joined #openstack-infra17:46
AJaegerclarkb: approved - yes, saw the max-servers setting but wanted to double check timing ;)17:46
clarkbits good to check because we don't have a mirror yet :)17:47
AJaeger:)17:47
*** jamesmcarthur has quit IRC17:51
*** jamesmcarthur has joined #openstack-infra17:51
*** igordc has joined #openstack-infra17:53
*** pkopec has quit IRC17:55
openstackgerritMerged openstack/project-config master: Start using airship citycloud cloud  https://review.opendev.org/70576517:57
openstackgerritAndy Ladjadj proposed zuul/nodepool master: add ebs-optimized support for aws provider  https://review.opendev.org/70575517:59
*** derekh has quit IRC18:00
*** smarcet has quit IRC18:01
*** tosky has quit IRC18:01
openstackgerritMerged opendev/zone-opendev.org master: Add review-dev.opendev.org  https://review.opendev.org/70566118:08
*** jamesmcarthur has quit IRC18:12
*** jamesmcarthur has joined #openstack-infra18:13
*** smarcet has joined #openstack-infra18:14
*** ralonsoh has quit IRC18:15
*** armax has joined #openstack-infra18:17
*** jamesmcarthur has quit IRC18:19
*** jamesmcarthur has joined #openstack-infra18:25
*** jamesmcarthur has quit IRC18:34
*** jamesmcarthur has joined #openstack-infra18:35
openstackgerritRadosław Piliszek proposed openstack/project-config master: Add "Review-Priority" gerrit label to devstack  https://review.opendev.org/70554718:36
openstackgerritRadosław Piliszek proposed openstack/project-config master: Add "Review-Priority" gerrit label to devstack  https://review.opendev.org/70554718:36
*** jpena is now known as jpena|off18:37
*** jamesmcarthur has quit IRC18:40
*** jamesmcarthur has joined #openstack-infra18:40
*** auristor has quit IRC18:41
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-tox: add ~/.local/bin to $PATH  https://review.opendev.org/70578218:44
*** smarcet has quit IRC18:46
*** auristor has joined #openstack-infra18:47
*** jamesmcarthur has quit IRC18:48
openstackgerritRadosław Piliszek proposed openstack/project-config master: Add "Review-Priority" gerrit label to devstack  https://review.opendev.org/70554718:48
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-tox: add ~/.local/bin to $PATH  https://review.opendev.org/70578218:52
*** mattw4 has quit IRC19:00
*** gyee has quit IRC19:00
*** arif-ali has quit IRC19:00
*** Anticimex has quit IRC19:00
*** dtantsur|afk has quit IRC19:00
*** mattw4 has joined #openstack-infra19:02
*** gyee has joined #openstack-infra19:02
*** arif-ali has joined #openstack-infra19:02
*** Anticimex has joined #openstack-infra19:02
*** dtantsur|afk has joined #openstack-infra19:02
*** dtantsur|afk has quit IRC19:03
*** michael-beaver has joined #openstack-infra19:04
*** jtomasek has quit IRC19:04
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-tox: add ~/.local/bin to $PATH  https://review.opendev.org/70578219:08
*** jtomasek has joined #openstack-infra19:08
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-tox: add ~/.local/bin to $PATH  https://review.opendev.org/70578219:09
openstackgerritMonty Taylor proposed opendev/system-config master: WIP Build gitea images from master  https://review.opendev.org/70580419:11
openstackgerritMonty Taylor proposed opendev/system-config master: Upgrade gitea to 1.10.3  https://review.opendev.org/70580419:15
openstackgerritMonty Taylor proposed opendev/system-config master: Upgrade gitea to 1.11.0-rc  https://review.opendev.org/70580719:15
openstackgerritMonty Taylor proposed opendev/system-config master: WIP Upgrade gitea to master  https://review.opendev.org/70580819:15
*** dtantsur has joined #openstack-infra19:15
*** gshippey has quit IRC19:17
*** rh-jelabarre has quit IRC19:20
*** rh-jelabarre has joined #openstack-infra19:26
fungiclarkb: i suspect a challenge with updating constraints first is that we'd be telling newer jobs/users to install a version which hasn't been released yet (which will also break)19:28
fungiunless i'm misunderstanding your recommendation19:28
fungior are you saying that *when* the constraints update adds the newer version which dropped 3.5 support, it should come with environment markers which declare that relationship?19:29
clarkbfungi: the way constraints updates that can't happen19:29
clarkbyou'd have a constraint for old version until new version is available19:30
clarkbfungi: yes, your last statement19:31
fungiit can wait until after the meeting, just trying to catch up on scrollback, but wasn't sure what you meant by "the problem is that no one updated constraints prior to releasing the new package. the proper fix here is to ensure constaints are updated first"19:31
clarkbif we update requirements ahead of time the next constraints update would be fine for python2 and python319:31
openstackgerritMonty Taylor proposed opendev/system-config master: Add review-dev01.opendev.org  https://review.opendev.org/70566919:31
openstackgerritMonty Taylor proposed opendev/system-config master: Get LE certs for review.o.o  https://review.opendev.org/70567019:31
openstackgerritMonty Taylor proposed opendev/system-config master: Remove review-dev01.openstack.org  https://review.opendev.org/70567119:31
openstackgerritMonty Taylor proposed opendev/system-config master: Use LE certs for Apache  https://review.opendev.org/70569019:31
fungiadding a release to constraints before the release is uploaded would just break stuff too19:31
clarkbfungi: I really meant global-requirements feeding constraints19:31
fungii see, that makes more sense. thanks19:32
fungiand should be done19:33
fungibut another related problem is that (at least as of late last week) we're still only generating constraints lists per-platform rather than per-minor-python-version19:33
fungiin fact, i think we may be only generating them per-major-python-version but i'm not 100% certain on that point19:34
clarkbfungi: its both according to the zipp content19:34
clarkb(I don't know how it happens but its definitely there for zipp)19:34
mordredianw: if you have a sec ... I ran service-letsencrypt.yaml with the changes in https://review.opendev.org/#/c/705669 against review-dev01.opendev.org ...19:37
mordredianw: but the certs I got were in /etc/letsencrypt-certs/review-dev.opendev.org/ which is a little not what I expected - did I do something wrong? or did I do something right and my expectations were wrong?19:38
ianwmordred: it bases the name on the first thing in the list19:39
mordredAH. neat19:39
ianwso if so swap the order in https://review.opendev.org/#/c/705669/3/playbooks/host_vars/review-dev01.opendev.org.yaml it will be 0119:39
mordreddo you think I shoudl do that? or leave it based on the logical name?19:39
ianwi think if you ever have multiple instances, it might be easier to use the CNAME so you don't have to update config paths?19:41
mordred++19:41
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-tox: save tox_executable fact  https://review.opendev.org/70581619:41
openstackgerritMonty Taylor proposed opendev/system-config master: Add review-dev01.opendev.org  https://review.opendev.org/70566919:43
openstackgerritMonty Taylor proposed opendev/system-config master: Get LE certs for review.o.o  https://review.opendev.org/70567019:43
openstackgerritMonty Taylor proposed opendev/system-config master: Remove review-dev01.openstack.org  https://review.opendev.org/70567119:43
openstackgerritMonty Taylor proposed opendev/system-config master: Use LE certs for Apache  https://review.opendev.org/70569019:43
mordredianw: ok. I think that stack should work now - thanks!19:43
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-tox: save tox_executable fact  https://review.opendev.org/70581619:46
*** rh-jelabarre has quit IRC19:50
*** jackedin has quit IRC19:51
*** rh-jelabarre has joined #openstack-infra20:00
openstackgerritMerged zuul/zuul master: Allow skipping child jobs from paused job again  https://review.opendev.org/70475820:08
* clarkb finds lunch20:20
openstackgerritClark Boylan proposed zuul/zuul-jobs master: Use unique loop vars to avoid conflicts  https://review.opendev.org/70533720:23
*** rh-jelabarre has quit IRC20:28
*** rfolco is now known as rfolco|bbl20:29
*** rh-jelabarre has joined #openstack-infra20:29
*** hashar has joined #openstack-infra20:31
*** rh-jelabarre has quit IRC20:35
*** rh-jelabarre has joined #openstack-infra20:35
*** eharney has quit IRC20:40
*** jamesdenton has quit IRC20:48
*** Lucas_Gray has joined #openstack-infra20:51
openstackgerritMerged zuul/zuul-jobs master: ensure-tox: save tox_executable fact  https://review.opendev.org/70581621:11
mordredianw: do you know off the top of your head what creates the letsencrypt group?21:13
clarkbmordred: its in inventory/groups.yaml21:14
clarkbmordred: you'll need to update it to include your new host21:14
clarkbianw: the afs tarballs stack lgtm. I did leave a comment in https://review.opendev.org/705368 though21:14
mordredsorry - I mean unix group21:15
mordrednot ansible group21:15
mordredsomethign is creating it on review-dev01 in the test job with gid 3000 - but that conflicts with the gerrit2 user/group that we set to 300021:15
clarkbah21:15
mordred(although weirdly this doesn't seem to be an issue on the fake review01 ...)21:16
mordredhttps://zuul.opendev.org/t/openstack/build/b642b0bc2a544cde9109cd0f530f1249/console21:16
mordredis the relevant console - search for "Create Gerrit Group"21:17
mordredoh - I don't have review01 turned on for LE in this change21:17
mordredthere it is "Install letsencrypt group"21:17
*** zxiiro has quit IRC21:20
openstackgerritMonty Taylor proposed opendev/system-config master: Add review-dev01.opendev.org  https://review.opendev.org/70566921:26
openstackgerritMonty Taylor proposed opendev/system-config master: Get LE certs for review.o.o  https://review.opendev.org/70567021:26
openstackgerritMonty Taylor proposed opendev/system-config master: Remove review-dev01.openstack.org  https://review.opendev.org/70567121:26
openstackgerritMonty Taylor proposed opendev/system-config master: Use LE certs for Apache  https://review.opendev.org/70569021:26
mordredclarkb, ianw: I think I sorted out a solution to let me set a GID for gerrit but not screw other pre-existing hosts21:27
*** sean-k-mooney has quit IRC21:31
*** armax has quit IRC21:40
*** xek has quit IRC21:42
*** eharney has joined #openstack-infra21:45
openstackgerritJames E. Blair proposed zuul/zuul master: Add disallowed-labels tenant option  https://review.opendev.org/70585621:48
openstackgerritMerged zuul/zuul-jobs master: upload-afs: rename to upload-afs-roots; add afs-upload-synchronize  https://review.opendev.org/70536821:56
openstackgerritJames E. Blair proposed zuul/zuul master: web: link to index.html if index_links is set  https://review.opendev.org/70558521:59
*** dpawlik has quit IRC22:00
*** armax has joined #openstack-infra22:03
*** eharney has quit IRC22:04
*** sgw has quit IRC22:04
*** sean-k-mooney has joined #openstack-infra22:05
*** eernst has quit IRC22:07
ianwmordred: ohhh, so gerrit sets its gid to 3000 explicitly, but letsencrypt was just happening to get that as the first thing to intsall a group maybe?22:07
mordredyup22:08
*** sean-k-mooney has quit IRC22:10
*** eharney has joined #openstack-infra22:10
*** sean-k-mooney has joined #openstack-infra22:10
*** gfidente|afk has quit IRC22:12
openstackgerritMonty Taylor proposed opendev/system-config master: Use LE certs for Apache  https://review.opendev.org/70569022:15
mordredianw: I think that ^^ and its parents should be ready for review now - if you're in the mood to read patches by me :)22:15
ianwok, that seems a pretty gerrit specific issue pinning the gid so that workaround seems good22:20
*** sean-k-mooney has quit IRC22:23
*** sean-k-mooney has joined #openstack-infra22:24
*** hwoarang has quit IRC22:25
*** hwoarang has joined #openstack-infra22:26
*** sgw has joined #openstack-infra22:34
*** hashar has quit IRC22:34
corvusianw: so why do we need a new keytab for tarballs?22:50
corvusi thought we set up tarballs.opendev for anyone to be able to use22:50
ianwcorvus: yes; it's just a matter of what keytab can write where.  i can share the zuul keytab into project-config ... but then it also has permissions over /afs/.openstack.org/project/zuul/opendev.org/www say22:52
ianwor make a new principal for project.tarballs, and have the extant service user AND that new user be able to write there22:52
ianwbut then that's a bit odd too22:53
corvusgimme a second22:53
corvusianw: this existing principal (service/opendev-zuul) was designed for any project in any tenant in opendev to be able to publish to tarballs.opendev.org: https://opendev.org/opendev/base-jobs/src/branch/master/zuul.d/secrets.yaml#L72-L8722:54
corvusianw: this one (service/zuul-website) is for the zuul tenant to publish to the zuul website: https://opendev.org/zuul/project-config/src/branch/master/zuul.d/secrets.yaml#L1-L1722:55
corvusso those two functions should already be distinct.  i think the first principal already serves your purpose?22:56
ianwhrm, ok, i think i had missed the website being separate22:56
ianwis docs separate too?22:57
*** Goneri has quit IRC22:57
*** tosky has joined #openstack-infra22:57
ianwopendev-docs rlidwk22:57
corvusyeah, the one right above22:58
corvushttps://opendev.org/opendev/base-jobs/src/branch/master/zuul.d/secrets.yaml#L5122:58
ianwok, but that's still under the opendev-zuul principal?22:59
*** jamesmcarthur has joined #openstack-infra23:00
corvusianw: yes, but they have different restrictions attached to the secret.  so the opendev docs job is going to use those "docs_" variables, and the tarballs job is going to use the "artifacts_path" variable23:00
ianwi think i'm getting myself confused between the service principals and the group memberships as well23:01
corvusalso, just in case this is a source of confusion, the "zuul" in "service/opendev-zuul" is meant to indicate "the zuul run by opendev for all of its users".  not "the zuul tenant in opendev"23:01
ianwhow do you list all the groups with "pts"?23:02
*** slaweq_ has quit IRC23:03
corvus pts listentries -groups23:03
mordredcorvus: maybe we could distinguish by making two - one called zuul-opendev-zuul and one called opendev-zuul-opendev23:05
mordredcorvus: I'm certain we'd all consistently know which one is which in all cases23:05
ianwcorvus: so, i should encrypt the service/opendev-zuul secret for project config; and make project.tarballs writable by opendev-tarballs?23:05
ianwopendev-zuul is in opendev-tarballs, ergo it can then write there23:06
*** aaronsheffield has quit IRC23:07
ianw(actually, project.tarballs has this already, because i copied the ACL from /afs/.openstack.org/project/opendev/tarballs)23:07
*** eharney has quit IRC23:07
corvusianw: honestly, i don't understand why anything needs to be done for tarballs23:09
*** tkajinam has joined #openstack-infra23:09
corvustheoretically, if we're talking about tarballs, why can't we just switch openstack to use the opendev jobs like zuul?23:10
*** slaweq_ has joined #openstack-infra23:11
ianwthe existing opendev jobs do the copy to afs in the promote pipeline23:11
ianwhttps://opendev.org/opendev/base-jobs/src/branch/master/playbooks/artifacts/promote.yaml#L3923:12
corvusdouble win?23:12
ianwyes, eventually maybe but i'm not quite sure how to get there from the extant publishing jobs which don't register artifacts23:13
corvusswitch to opendev-release-python23:13
corvus(this is the job that zuul uses, (but it inherits from it to add a tiny pre-playbook to install yarn))23:15
ianwbut it's not just python23:15
*** slaweq_ has quit IRC23:16
corvusthen yeah, i guess you should re-use the secret.  now what's this about making project.tarballs writable?23:16
corvusshouldn't it already be writable by the principal in question, seeing as how zuul is using that to publish its tarballs?23:17
ianwcorvus: yes, with the re-used secret, i think we are fine.  that was what i was thinking of avoiding, by creating a new secret that is shared ... but if we're fine to reuse, then it all works23:18
corvusianw: what are the jobs involved?23:19
corvusie, what other than openstack-build-python23:19
ianwumm, let me find a good link23:20
*** jamesmcarthur has quit IRC23:20
ianwit is anything using this playbook -> https://opendev.org/openstack/project-config/src/branch/master/playbooks/publish/openstack-artifacts.yaml23:21
ianwpublish-openstack-artifacts is the base job -> https://opendev.org/openstack/project-config/src/branch/master/zuul.d/jobs.yaml#L7323:22
ianwthen there's puppet, python, and a few other odd jobs23:22
ianwbut then there are also external users, like ironic, who publish things (https://review.opendev.org/#/c/705160/1/.zuul.yaml)23:23
ianw... so i think promote/etc publishing changes will be great ... but i would want to handle that one-by-one after we've moved all these to just publishing on afs instead of file-system23:24
corvusideally we'd do it in the other order to save work, but if we're running out of time, that makes sense23:24
ianw(btw, i think the zuul jobs can go see ->https://review.opendev.org/#/c/705367/)23:24
*** dchen has joined #openstack-infra23:26
corvusianw: also, keep in mind that promote is only used for branch-tip tarballs23:26
corvus(opendev-release-python is used for tagged releases and does not rely on zuul-artifacts/promote)23:26
ianwyeah, i think we're doing it in about the right order, as when we tackle promote updates, etc, it's all already going to afs and everything is ready.  i don't think there's much point doing promote jobs to static file system, for example23:27
corvusthat doesn't change anything -- there astill may be openstack projects that publish branch-tip tarballs of, say, puppet modules.23:27
corvusianw: wfm23:28
ianwcorvus: so, did you decrypt the zuul-service keytab manually via looking at the secret on the zuul side?23:29
ianwcorvus: in short, can you easily drop a base64 encoded version of it on bridge so i don't do something silly like regenerate a new key?23:29
corvusianw: zuul01:~corvus/decrypt_secret.py will do the trick23:29
ianwi mean service/opendev-zuul to be clear23:29
ianwok, let me try23:30
corvusianw: normally i'd be happy to but i have to run right now, so yeah, if you can try that'd be great :)23:30
ianwif we put this in, the test job should try it all out live23:30
ianwnp, that's enough breadcrumbs :)23:30
ianwthanks for the help, i think the end (for initial publishing steps anyway) is in sight23:31
corvus\o/23:31
openstackgerritJames E. Blair proposed zuul/zuul master: Add disallowed-labels tenant option  https://review.opendev.org/70585623:35
*** zxiiro has joined #openstack-infra23:36
*** dchen has quit IRC23:44
*** dchen has joined #openstack-infra23:45
*** tosky has quit IRC23:55
*** igordc has quit IRC23:55
*** dchen has quit IRC23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!