| *** rlandy|ruck is now known as rlandy|out | 00:09 | |
| *** ysandeep|out is now known as ysandeep | 01:05 | |
| *** bacarrdy_ is now known as bacarrdy | 07:17 | |
| *** amoralej|off is now known as amoralej | 08:08 | |
| *** ykarel is now known as ykarel|lunch | 09:03 | |
| *** ykarel|lunch is now known as ykarel | 10:05 | |
| dpawlik | frickler, fungi: Hey, feel free to check if those zuul jobs are ok https://review.opendev.org/c/openstack/ci-log-processing/+/818810 | 10:37 |
|---|---|---|
| dpawlik | fungi: As I remember, host logscraper01.openstack.org would be not available in current ansible infra inventory right? | 10:39 |
| dpawlik | fungi: I need to know if I should create own inventory, job for applying changes on that host(s) etc. | 10:39 |
| *** dviroel|afk is now known as dviroel | 11:00 | |
| *** rlandy|out is now known as rlandy|ruck | 11:12 | |
| *** ysandeep is now known as ysandeep|afk | 11:26 | |
| *** ysandeep|afk is now known as ysandeep | 11:56 | |
| *** odyssey4me is now known as Guest6697 | 13:33 | |
| *** jpena|off is now known as jpena | 13:35 | |
| fungi | i assumed you would just run ansible yourself initially and focus on the service and installation code, before trying to automate triggering it. but if that's what you're working on, the basics are you're going to need to give the job a secret which provides an ssh key which is granted access to the server (probably easier if it's access to the root account), and then have the job call | 13:39 |
| fungi | ansible on that server so that you're not restricted to the subset of plugin libraries the executor is allowed to use | 13:39 |
| fungi | i also recommend making sure the stdout/stderr of that nestes ansible call gets redirected to a local logfile on the server in order to avoid accidentally disclosing anything sensitive like setup credentials | 13:40 |
| dpawlik | ack fungi | 14:01 |
| fungi | if that "nested" ansible is only running against localhost (the server) then i don't think you'd need to bother with an inventory | 14:03 |
| dpawlik | fungi: so I create ansible roles anf also add functional test for validating the new workflow if its working as expected. it is working locally, hope will be all fine on logscraper01. | 14:37 |
| fungi | presumably so | 14:38 |
| *** ysandeep is now known as ysandeep|mtg | 14:45 | |
| dpawlik | fungi: so in the future, I would be able to add the host to the opendev infra inventory or not? | 14:46 |
| dpawlik | just want to hear a clear answer ;) | 14:47 |
| fungi | dpawlik: no, the way our deployment automation is set up, we have a deployment bastion which zuul logs into and runs a nested ansible on, and then it in turn has root ssh access to the servers in opendev's inventory, so i don't think we'd be adding non-opendev systems there. for one thing, you wouldn't have access to deployment logs since they are spooled to local files on the bastion | 14:49 |
| fungi | for safety reasons | 14:49 |
| dpawlik | fungi: understand | 14:50 |
| fungi | previously we'd agreed that the opendev sysadmins could boot some servers for this effort in our donated cloud tenants, but the most we'd have the ability to do for you beyond that is to reboot those servers via the nova api if you got stuck, or maybe help you get console access/recovery boot | 14:50 |
| *** ykarel is now known as ykarel|away | 14:51 | |
| dpawlik | fungi: ok, it's not a problem.Now I know how to implement future configuration automatization | 14:54 |
| dpawlik | fungi: one more thing, I would like to ask you for review https://review.opendev.org/c/openstack/ci-log-processing/+/818810 or just leave a comment if it is enough to push doc to infra doc (if 818810 is ok and url will be correct this can be merged: https://review.opendev.org/c/openstack/project-config/+/818811 ) | 14:59 |
| fungi | at least the draft build seems to work | 15:05 |
| *** soniya29|ruck is now known as soniya29|ruck|afk | 15:24 | |
| *** ysandeep|mtg is now known as ysandeep | 16:06 | |
| *** akahat|rover is now known as akahat | 16:33 | |
| *** ysandeep is now known as ysandeep|out | 17:05 | |
| *** jpena is now known as jpena|off | 17:41 | |
| *** amoralej is now known as amoralej|off | 17:51 | |
| *** dviroel is now known as dviroel|afk | 19:53 | |
| gmann | fungi: clarkb this is good to review/go now - https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/818609 | 22:35 |
| fungi | awesome, thanks! | 22:36 |
| gmann | thanks | 22:41 |
| opendevreview | Merged openstack/openstack-zuul-jobs master: Update Yoga job template for updated testing runtime https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/818609 | 22:42 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!