Jump to: navigation, search

Difference between revisions of "Meetings/InfraTeamMeeting"

(Upcoming Project Renames)
(Upcoming Project Renames)
(85 intermediate revisions by 9 users not shown)
Line 10: Line 10:
  
 
* Announcements
 
* Announcements
 +
** Clark out during May 11 meeting time. Need a volunteer chair or can cancel that meeting.
  
 
* Actions from last meeting
 
* Actions from last meeting
  
 
* Specs approval
 
* Specs approval
** Authentication broker service, https://review.opendev.org/#/c/731838/
 
*** Not yet ready for approval but is worthy of review.
 
  
 
* Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
 
* Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
 
** [http://specs.openstack.org/openstack-infra/infra-specs/specs/update-config-management.html Update Config Management]
 
** [http://specs.openstack.org/openstack-infra/infra-specs/specs/update-config-management.html Update Config Management]
 
*** topic:update-cfg-mgmt
 
*** topic:update-cfg-mgmt
*** Gerrit on docker updates
 
**** Gerritbot still outstanding todo item.
 
 
*** Zuul as CD engine
 
*** Zuul as CD engine
**** Went about 5 days without normal CD jobs running due to Zuul's local code execution update.
 
*** Zuul and Nodepool running on containers with exception of nb03
 
**** nb03 needs an arm64 docker image. Nodepool disabled attempting to build arm64 images to get kazoo fix release out.
 
**** Need to start docker after afs on executors: https://review.opendev.org/743316
 
 
** OpenDev
 
** OpenDev
*** Progress on Governance changes
+
*** Gerrit account inconsistencies
*** Gerrit /p/ mirror deprecation. http://lists.opendev.org/pipermail/service-announce/2020-July/000007.html
+
**** All preferred emails lack external ids issues have been corrected. All group loops have been corrected.
 +
**** Workaround is we can stop Gerrit, push to external ids directly, reindex accounts (and groups?), start gerrit, then clear accounts caches (and groups caches?)
 +
**** Next steps
 +
***** More "dangerous" list has been generated. Should still be safe-ish particularly if we disable the accounts first.
 +
*** Configuration tuning
 +
**** Reduce the number of ssh threads. Possibly create bot/batch user groups and thread counts as part of this.
 +
**** https://groups.google.com/g/repo-discuss/c/BQKxAfXBXuo Upstream conversation with people struggling with similar problems.
 +
*** Update our base job's nodeset
 +
**** https://review.opendev.org/789098
 +
*** Gerrit global config simplification
 +
**** https://review.opendev.org/789383
  
 
* General topics
 
* General topics
** Trusty Upgrade Progress (clarkb 20200721)
+
** Picking up steam on Puppet -> Ansible rewrites (clarkb 20210504)
*** Wiki updates
+
*** Enable Xenial -> Bionic/Focal system upgrades
** Bup and Borg Backups (clarkb 20200728)
+
*** https://etherpad.opendev.org/p/infra-puppet-conversions-and-xenial-upgrades Start capturing TODO list here
*** review request https://review.opendev.org/741366
+
*** Zuul service host updates in progress now. Zuul scheduler is last remaining server that needs an upgrade in the zuul cluster.
** github 3rd party ci
+
** openEuler patches (ianw 20210504)
*** immediate need is arm64 for pyca/cryptography
+
*** TC level, or being too officious
*** https://github.com/pyca/cryptography/issues/5339
+
** InMotion Cloud reorganization (clarkb 20210504)
*** http://eavesdrop.openstack.org/irclogs/%23opendev/%23opendev.2020-07-22.log.html#t2020-07-22T21:23:52 internal discussion
+
*** Currently limited by number of IP addresses available
*** should we? -- in summary conclusion seems to be yes
+
*** We could deploy an executor in the cloud then set up test nodes without direct external access
*** how?  --- separate tenant to both have isolation and have a config project (API uploads)
+
*** Any held nodes would need floating IPs attached to them to be accessible
*** https://review.opendev.org/#/q/topic:opendev-3pci
+
** Removing registration requirement from our IRC channels (clarkb 20210504)
 +
*** TheJulia asks if we think this is still necessary.
 +
*** Looking at the last month or so of eavesdrop logs it seems we had ~1.5 spam attempts in the unregistered channel
 +
** Switching artifact signing keys from RSA to ECC
 +
*** https://review.opendev.org/789062
  
 
* Open discussion
 
* Open discussion
Line 49: Line 56:
 
(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)
 
(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)
  
 +
* (lajoskatona) x/tap-as-a-service -> openstack/tap-as-a-service: https://review.opendev.org/c/openstack/project-config/+/790093
 
* foo/example -> bar/example: https://review.opendev.org/#/c/123456
 
* foo/example -> bar/example: https://review.opendev.org/#/c/123456
  
 
== Previous meetings ==
 
== Previous meetings ==
 
Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/
 
Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/

Revision as of 16:14, 6 May 2021

Weekly Project Infrastructure team meeting

The OpenDev Team holds public weekly meetings in #opendev-meeting, Tuesdays at 1900 UTC. Everyone interested in infrastructure and process surrounding automated testing and deployment is encouraged to attend.

Please feel free to add agenda items (and your IRC nick in parenthesis).

Agenda for next meeting

  • Announcements
    • Clark out during May 11 meeting time. Need a volunteer chair or can cancel that meeting.
  • Actions from last meeting
  • Specs approval
  • Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
    • Update Config Management
      • topic:update-cfg-mgmt
      • Zuul as CD engine
    • OpenDev
      • Gerrit account inconsistencies
        • All preferred emails lack external ids issues have been corrected. All group loops have been corrected.
        • Workaround is we can stop Gerrit, push to external ids directly, reindex accounts (and groups?), start gerrit, then clear accounts caches (and groups caches?)
        • Next steps
          • More "dangerous" list has been generated. Should still be safe-ish particularly if we disable the accounts first.
      • Configuration tuning
      • Update our base job's nodeset
      • Gerrit global config simplification
  • General topics
    • Picking up steam on Puppet -> Ansible rewrites (clarkb 20210504)
    • openEuler patches (ianw 20210504)
      • TC level, or being too officious
    • InMotion Cloud reorganization (clarkb 20210504)
      • Currently limited by number of IP addresses available
      • We could deploy an executor in the cloud then set up test nodes without direct external access
      • Any held nodes would need floating IPs attached to them to be accessible
    • Removing registration requirement from our IRC channels (clarkb 20210504)
      • TheJulia asks if we think this is still necessary.
      • Looking at the last month or so of eavesdrop logs it seems we had ~1.5 spam attempts in the unregistered channel
    • Switching artifact signing keys from RSA to ECC
  • Open discussion

Upcoming Project Renames

(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)

Previous meetings

Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/