Jump to: navigation, search

Difference between revisions of "Meetings/InfraTeamMeeting"

(Upcoming Project Renames)
(33 intermediate revisions by 4 users not shown)
Line 10: Line 10:
  
 
* Announcements
 
* Announcements
 +
** Clark out during May 11 meeting time. Need a volunteer chair or can cancel that meeting.
  
 
* Actions from last meeting
 
* Actions from last meeting
Line 20: Line 21:
 
*** Zuul as CD engine
 
*** Zuul as CD engine
 
** OpenDev
 
** OpenDev
*** Gerrit account and group inconsistencies
+
*** Gerrit account inconsistencies
**** https://etherpad.opendev.org/p/gerrit-user-consistency-2021 High level notes.
+
**** All preferred emails lack external ids issues have been corrected. All group loops have been corrected.
**** Group problems and 92 accounts with preferred emails missing external ids have been fixed.
 
**** We have 17 accounts with preferred email addresses that don't have a matching external id
 
**** We have ~642 accounts with conflicting emails in their external ids. This needs more investigating to better understand the fix for.
 
**** Need to correct the ~642 external id issues before we can push updates to refs/meta/external-ids with Gerrit online.
 
 
**** Workaround is we can stop Gerrit, push to external ids directly, reindex accounts (and groups?), start gerrit, then clear accounts caches (and groups caches?)
 
**** Workaround is we can stop Gerrit, push to external ids directly, reindex accounts (and groups?), start gerrit, then clear accounts caches (and groups caches?)
 
**** Next steps
 
**** Next steps
***** Classify users further into situation groups
+
***** More "dangerous" list has been generated. Should still be safe-ish particularly if we disable the accounts first.
***** Decide on next steps for users depending on their situation group.
 
***** Fix the preferred email issue if possible as this can be done with gerrit online
 
***** Start a refs/meta/external-ids checkout in a shared location and begin committing fixes to it. If we can't push all the fixes as separate commits we can squash them together and then push.
 
*** Gerrit 3.3.1 includes the fix for Zuul and Zuul has the fixes too.
 
**** https://review.opendev.org/c/opendev/system-config/+/765021 Build 3.3 images, currently appears to need some work.
 
 
*** Configuration tuning
 
*** Configuration tuning
**** Using strong refs for jgit caches
+
**** Reduce the number of ssh threads. Possibly create bot/batch user groups and thread counts as part of this.
**** Batch user groups and threads
+
**** https://groups.google.com/g/repo-discuss/c/BQKxAfXBXuo Upstream conversation with people struggling with similar problems.
*** Gitea OOMs
+
*** Update our base job's nodeset
**** https://review.opendev.org/c/opendev/system-config/+/774023 Rate limiting framework change for haproxy.
+
**** https://review.opendev.org/789098
 +
*** Gerrit global config simplification
 +
**** https://review.opendev.org/789383
  
 
* General topics
 
* General topics
** OpenAFS cluster status (clarkb 20210209)
+
** Picking up steam on Puppet -> Ansible rewrites (clarkb 20210504)
*** What is server cluster status? Have they all been upgraded to 1.8.6?
 
**** Upgrading servers to bionic then focal in place is next?
 
** Bup and Borg Backups (clarkb 20210209)
 
*** wiki backup status
 
*** borg disk consumption workarounds
 
** Picking up steam on Puppet -> Ansible rewrites (clarkb 20210209)
 
 
*** Enable Xenial -> Bionic/Focal system upgrades
 
*** Enable Xenial -> Bionic/Focal system upgrades
 
*** https://etherpad.opendev.org/p/infra-puppet-conversions-and-xenial-upgrades Start capturing TODO list here
 
*** https://etherpad.opendev.org/p/infra-puppet-conversions-and-xenial-upgrades Start capturing TODO list here
** Deploy a new refstack.openstack.org server (kopecmartin 20210209)
+
*** Zuul service host updates in progress now. Zuul scheduler is last remaining server that needs an upgrade in the zuul cluster.
*** https://review.opendev.org/c/opendev/system-config/+/705258
+
** openEuler patches (ianw 20210504)
*** ianw offered to help with the deployment side
+
*** TC level, or being too officious
*** kopecmartin will help with testing the new instance
+
** InMotion Cloud reorganization (clarkb 20210504)
** Meetpad was not functional late last week. Seems fine now (clarkb 2020210209)
+
*** Currently limited by number of IP addresses available
** opendev.org not reachable via IPv6 from some ISPs (frickler 20210215)
+
*** We could deploy an executor in the cloud then set up test nodes without direct external access
*** Caused by missing/inconsistent IRR records for the networks that vexxhost uses
+
*** Any held nodes would need floating IPs attached to them to be accessible
*** Pinged mnaser a couple of times but no progress so far
+
** Removing registration requirement from our IRC channels (clarkb 20210504)
*** Added here for increased visibility and tracking
+
*** TheJulia asks if we think this is still necessary.
 +
*** Looking at the last month or so of eavesdrop logs it seems we had ~1.5 spam attempts in the unregistered channel
 +
** Switching artifact signing keys from RSA to ECC
 +
*** https://review.opendev.org/789062
  
 
* Open discussion
 
* Open discussion
Line 65: Line 56:
 
(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)
 
(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)
  
 +
* (lajoskatona) x/tap-as-a-service -> openstack/tap-as-a-service: https://review.opendev.org/c/openstack/project-config/+/790093
 
* foo/example -> bar/example: https://review.opendev.org/#/c/123456
 
* foo/example -> bar/example: https://review.opendev.org/#/c/123456
  
 
== Previous meetings ==
 
== Previous meetings ==
 
Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/
 
Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/

Revision as of 16:14, 6 May 2021

Weekly Project Infrastructure team meeting

The OpenDev Team holds public weekly meetings in #opendev-meeting, Tuesdays at 1900 UTC. Everyone interested in infrastructure and process surrounding automated testing and deployment is encouraged to attend.

Please feel free to add agenda items (and your IRC nick in parenthesis).

Agenda for next meeting

  • Announcements
    • Clark out during May 11 meeting time. Need a volunteer chair or can cancel that meeting.
  • Actions from last meeting
  • Specs approval
  • Priority Efforts (Standing meeting agenda items. Please expand if you have subtopics.)
    • Update Config Management
      • topic:update-cfg-mgmt
      • Zuul as CD engine
    • OpenDev
      • Gerrit account inconsistencies
        • All preferred emails lack external ids issues have been corrected. All group loops have been corrected.
        • Workaround is we can stop Gerrit, push to external ids directly, reindex accounts (and groups?), start gerrit, then clear accounts caches (and groups caches?)
        • Next steps
          • More "dangerous" list has been generated. Should still be safe-ish particularly if we disable the accounts first.
      • Configuration tuning
      • Update our base job's nodeset
      • Gerrit global config simplification
  • General topics
    • Picking up steam on Puppet -> Ansible rewrites (clarkb 20210504)
    • openEuler patches (ianw 20210504)
      • TC level, or being too officious
    • InMotion Cloud reorganization (clarkb 20210504)
      • Currently limited by number of IP addresses available
      • We could deploy an executor in the cloud then set up test nodes without direct external access
      • Any held nodes would need floating IPs attached to them to be accessible
    • Removing registration requirement from our IRC channels (clarkb 20210504)
      • TheJulia asks if we think this is still necessary.
      • Looking at the last month or so of eavesdrop logs it seems we had ~1.5 spam attempts in the unregistered channel
    • Switching artifact signing keys from RSA to ECC
  • Open discussion

Upcoming Project Renames

(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)

Previous meetings

Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/