Jump to: navigation, search

Difference between revisions of "Meetings/InfraTeamMeeting"

(→‎Agenda for next meeting)
(→‎Agenda for next meeting)
 
(262 intermediate revisions by 13 users not shown)
Line 16: Line 16:
  
 
* Topics
 
* Topics
−
** Improving OpenDev's CD throughput (clarkb 20211109)
+
** Upgrading Bionic servers to Focal/Jammy (clarkb 20230627)
−
*** We can run many of our jobs in parallel in all of our CD pipelines. But this requires we properly document/address dependencies
+
*** https://etherpad.opendev.org/p/opendev-bionic-server-upgrades
−
**** Need to understand our job dependencies and properly note them in Zuul config or address them by combining jobs.
+
*** https://review.opendev.org/q/topic:jitsi_meet-jammy-update
−
***** Example 1: Combine service-gitea-lb and service-gitea jobs.
+
*** Started looking at the wiki there are rough notes at: https://etherpad.opendev.org/p/opendev-bionic-server-upgrades#L58
−
***** Example 2: Combine letsencrypt and nameserver jobs
+
** MariaDB Upgrades (clarkb 20240220)
−
***** Example 3: Have all jobs with webserver config express a dependency on the letsencrypt job
+
*** Relying on the container image MARIADB_AUTO_UPGRADE flag
−
**** Suggest we document the known job dependencies in a human readable format, then encode this into zuul, then we can switch to parallel runs.
+
*** Etherpad and mailman are done. Gerrit and Gitea are all that remain.
−
**** https://review.opendev.org/c/opendev/system-config/+/807672
+
** AFS Mirror cleanups (clarkb 20240220)
−
***** should list dependencies for all jobs
+
*** Ubuntu Xenial is next but currently busy with PTG, Release, and other tasks.
−
***** zuul doesn't trigger on this?  not sure on best approach to make it mergable
+
*** Can followup with webserver log processing to determine which other mirrors may be dead.
−
**** https://review.opendev.org/c/opendev/base-jobs/+/807807
+
** Building Ubuntu Noble Nodes (clarkb 20240416)
−
***** currently every executor adds keys for bridge, then logs in and clones system-config before running playbooks
+
*** https://review.opendev.org/c/opendev/glean/+/915907 Glean updates for python3.12 support
−
***** this change makes split jobs to do this.  however, production remains the same as both are called.
+
*** Appears we will need a debootstrap from debian unstable to build noble
−
**** https://review.opendev.org/c/opendev/system-config/+/807808
+
** Etherpad 2.0.x Upgrade planning (clarkb 20240416)
−
***** this is a follow-on that adds a base job to clone system-config, and stops the other production jobs re-cloning.
+
*** https://review.opendev.org/c/opendev/system-config/+/914119
−
***** this job must run first, but then all other jobs can run in parallel, as they are all in the same buildset and using the same "view" of system-config for that particular run
+
*** Etherpad 2.0.2 removes the old APIKEY API auth method and now uses Oauth2.0 client_credentials instead. This new system is not yet released, but we are working to determine how to use it pre release.
−
** Gerrit Account cleanups (clarkb 20211109)
+
** Add reference to the project-team-guide in the fail ci msg (fungi 20240423)
−
*** 33 conflicts remain. Clarkb has written notes on proposed plans for each user in the comments of review02:~clarkb/gerrit_user_cleanups/audit-results-annotated.yaml
+
*** https://review.opendev.org/914189
−
** Zuul multi scheduler setup (clarkb 20211109)
+
** Gerrit 3.9 Upgrade Planning (clarkb 20240423)
−
*** Zuul is currently running with two schedulers (zuul01.o.o and zuul02.o.o with zuul02.o.o being "primary")
+
*** https://www.gerritcodereview.com/3.9.html Release Notes
−
*** We have tracked down a number of bugs Monday with corvus fixing many of them.
+
*** Downgrade is possible with an offline reindex using the old war.
−
*** Overall seems stable enough.
+
*** Need to compile an upgrade checklist (go over breaking changes and also test the downgrade).
−
*** Note the "flapping" status page can be weird.
+
*** Server could stand to be upgraded as well but I think it is probably best to decouple these concerns.
−
** User management on our systems (clarkb 20211109)
+
** Wiki SSL Cert Renewal (clarkb 20240423)
−
*** Be explicit about uid/gid ranges: https://review.opendev.org/c/opendev/system-config/+/816869/
+
*** We have just under 4 weeks to renew the cert. This is one of the last (maybe the only) manually managed ssl cert.
−
**** 0-999 system, 1000-1999 unallocated, 2000-2999 for infra-root users, 3000-9999 host level users, 10k - 64k container users that need uids on the host as well for bind mounts.
+
*** Will probably delay until we have less than a week left before processing it.
−
*** Clean up unused bootstrapping users: https://review.opendev.org/c/opendev/system-config/+/816771
 
−
*** Give gerritbot and matrix-gerritbot a shared user: https://review.opendev.org/c/opendev/system-config/+/816769/
 
−
*** Eventually convert mariadb container's from uid 999 to something that makes more sense on the system.
 
  
 
* Open discussion
 
* Open discussion
Line 50: Line 47:
 
== Upcoming Project Renames ==
 
== Upcoming Project Renames ==
 
(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)
 
(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit)
 +
Changes should have their topic set to project-rename.
  
−
* Rename foo/example -> bar/example: https://review.opendev.org/123456
+
* Rename example/foo -> example/bar: https://review.opendev.org/c/openstack/project-config/+/123456
  
 
== Previous meetings ==
 
== Previous meetings ==
 
Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/
 
Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/

Latest revision as of 22:13, 22 April 2024

Weekly Project Infrastructure team meeting

The OpenDev Team holds public weekly meetings in #opendev-meeting on OFTC, Tuesdays at 1900 UTC. Everyone interested in infrastructure and process surrounding automated testing and deployment is encouraged to attend.

Please feel free to add agenda items (and your IRC nick in parenthesis).

Agenda for next meeting

  • Announcements
  • Actions from last meeting
  • Specs Review
  • Topics
    • Upgrading Bionic servers to Focal/Jammy (clarkb 20230627)
    • MariaDB Upgrades (clarkb 20240220)
      • Relying on the container image MARIADB_AUTO_UPGRADE flag
      • Etherpad and mailman are done. Gerrit and Gitea are all that remain.
    • AFS Mirror cleanups (clarkb 20240220)
      • Ubuntu Xenial is next but currently busy with PTG, Release, and other tasks.
      • Can followup with webserver log processing to determine which other mirrors may be dead.
    • Building Ubuntu Noble Nodes (clarkb 20240416)
    • Etherpad 2.0.x Upgrade planning (clarkb 20240416)
    • Add reference to the project-team-guide in the fail ci msg (fungi 20240423)
    • Gerrit 3.9 Upgrade Planning (clarkb 20240423)
      • https://www.gerritcodereview.com/3.9.html Release Notes
      • Downgrade is possible with an offline reindex using the old war.
      • Need to compile an upgrade checklist (go over breaking changes and also test the downgrade).
      • Server could stand to be upgraded as well but I think it is probably best to decouple these concerns.
    • Wiki SSL Cert Renewal (clarkb 20240423)
      • We have just under 4 weeks to renew the cert. This is one of the last (maybe the only) manually managed ssl cert.
      • Will probably delay until we have less than a week left before processing it.
  • Open discussion

Upcoming Project Renames

(any additions should mention original->new full names and link to the corresponding project-config rename change in Gerrit) Changes should have their topic set to project-rename.

Previous meetings

Previous meetings, with their notes and logs, can be found at http://eavesdrop.openstack.org/meetings/infra/ and earlier at http://eavesdrop.openstack.org/meetings/ci/

Retrieved from "https://wiki.openstack.org/w/index.php?title=Meetings/InfraTeamMeeting&oldid=184718"