#meeting-3:fedoraproject.org log

<@phsmoura:fedora.im>

19:00:35

!startmeeting Fedora Infrastructure Ops Daily Standup Meeting

<@meetbot:fedora.im>

19:00:36

Meeting started at 2023-11-29 19:00:35 UTC

<@meetbot:fedora.im>

19:00:36

The Meeting name is 'Fedora Infrastructure Ops Daily Standup Meeting'

<@phsmoura:fedora.im>

19:00:47

!meetingname fedora_infrastructure_ops_daily_standup_meeting

<@phsmoura:fedora.im>

19:00:58

!info meeting is 30 minutes MAX. At the end of 30, its stops !info agenda is at https://board.net/p/fedora-infra-daily

<@phsmoura:fedora.im>

19:01:05

hello

<@nirik:matrix.scrye.com>

19:01:23

!hi

<@zodbot:fedora.im>

19:01:25

Kevin Fenzi (kevin) - he / him / his

<@leo:fedora.im>

19:01:38

!hi

<@zodbot:fedora.im>

19:01:39

Leo Puvilland (leo) - he / him / his

<@phsmoura:fedora.im>

19:03:56

!info reminder: speak up if you want to work on a ticket!

<@phsmoura:fedora.im>

19:04:04

!topic Tickets needing review

<@phsmoura:fedora.im>

19:04:14

!info https://pagure.io/fedora-infrastructure/issues?status=Open&priority=1

<@phsmoura:fedora.im>

19:04:40

!ticket 11653

<@zodbot:fedora.im>

19:04:41

fedora-infrastructure #11653 (https://pagure.io/fedora-infrastructure/issue/11653): Request for 'openscanhub' repository on GitHub

<@nirik:matrix.scrye.com>

19:05:01

low low ops?

<@phsmoura:fedora.im>

19:06:03

<@phsmoura:fedora.im>

19:06:15

!ticket 11654

<@zodbot:fedora.im>

19:06:15

fedora-infrastructure #11654 (https://pagure.io/fedora-infrastructure/issue/11654): email to python-bcrypt-maintainers@fedoraproject.org partially bounces

<@nirik:matrix.scrye.com>

19:06:37

low low ops... needs investigation.

<@phsmoura:fedora.im>

19:06:50

waiting pagure

<@aheath1992:matrix.org>

19:07:48

!hi

<@phsmoura:fedora.im>

19:07:49

done

<@zodbot:fedora.im>

19:07:49

Andrew Heath (aheath1992)

<@phsmoura:fedora.im>

19:07:59

moving to releng

<@phsmoura:fedora.im>

19:08:14

!info https://pagure.io/releng/issues?status=Open

<@phsmoura:fedora.im>

19:08:29

!releng 11812

<@zodbot:fedora.im>

19:08:30

releng #11812 (https://pagure.io/releng/issue/11812): Unretire rpms/bluecurve-icon-theme

<@phsmoura:fedora.im>

19:08:42

low low ops

<@nirik:matrix.scrye.com>

19:08:44

<@phsmoura:fedora.im>

19:09:07

!releng 11813

<@zodbot:fedora.im>

19:09:08

releng #11813 (https://pagure.io/releng/issue/11813): Unretire rpms/geteltorito

<@phsmoura:fedora.im>

19:09:10

same

<@nirik:matrix.scrye.com>

19:09:18

yep

<@humaton:fedora.im>

19:09:51

we need to get toddlers fixed and released so the unretirements are automated

<@nirik:matrix.scrye.com>

19:10:23

that would be nice for sure. ;)

<@humaton:fedora.im>

19:11:08

yeah some code is there it needs some love

<@phsmoura:fedora.im>

19:11:28

!topic Planning, Upcoming work and Open floor

<@phsmoura:fedora.im>

19:11:35

anything for open floor?

<@Zlopez:matrix.org>

19:11:39

.hello

<@humaton:fedora.im>

19:11:43

!releng 11787

<@zodbot:fedora.im>

19:11:44

releng #11787 (https://pagure.io/releng/issue/11787): create EPEL 10 package signing key

<@Zlopez:matrix.org>

19:11:44

!hello

<@humaton:fedora.im>

19:11:55

so do we want ima keys as well?

<@zodbot:fedora.im>

19:11:57

Michal Konecny (zlopez)

<@nirik:matrix.scrye.com>

19:12:09

yes I would think so...

<@humaton:fedora.im>

19:12:30

will create them first thing in the morning

<@nirik:matrix.scrye.com>

19:12:57

for me this week: still sick... so appologies if I am slow or surly. ;) I made a new rhel9 torrent01 yesterday, going to switch to it today and if all goes well nuke torrent02. Then, perhaps will try and do people01

<@Zlopez:matrix.org>

19:13:23

!ticket 10358

<@zodbot:fedora.im>

19:13:27

fedora-infrastructure #10358 (https://pagure.io/fedora-infrastructure/issue/10358): IPA backup fails on ipa03 and ipa02.stg

<@Zlopez:matrix.org>

19:14:04

I was able to follow the rest of the migration guide, but the ipa01.stg deployment fails on DNS still pointing to it as LDAP server

<@nirik:matrix.scrye.com>

19:14:26

you could switch dns to ipa02.stg for a few?

<@nirik:matrix.scrye.com>

19:14:31

but really it should have them all in there.

<@Zlopez:matrix.org>

19:14:58

Not sure how this works, but currently plenty of services are not available

<@nirik:matrix.scrye.com>

19:15:06

Yeah, 02 is in there, but commented out:

<@nirik:matrix.scrye.com>

19:15:12

; staging _ldap._tcp.stg IN SRV 0 100 389 ipa01.stg.iad2.fedoraproject.org. ;_ldap._tcp.stg IN SRV 0 100 389 ipa02.stg.iad2.fedoraproject.org.

<@Zlopez:matrix.org>

19:15:45

The DNS is in ansible-private?

<@Zlopez:matrix.org>

19:15:57

I never touched it before

<@nirik:matrix.scrye.com>

19:16:19

no, it's in it's own repo.

<@nirik:matrix.scrye.com>

19:16:32

I can update it if you like? just add 02? or remove 01 and add 02?

<@Zlopez:matrix.org>

19:16:51

Just adding it should be enough

<@nirik:matrix.scrye.com>

19:17:10

yeah, was about to say we should have a SOP

<@Zlopez:matrix.org>

19:17:12

Do we also want to keep ipa03.stg when I'm done?

<@nirik:matrix.scrye.com>

19:17:36

that more closely matches prod I guess.

<@Zlopez:matrix.org>

19:17:54

Yes, it does

<@Zlopez:matrix.org>

19:18:23

How long till the DNS change will be propagated?

<@nirik:matrix.scrye.com>

19:18:56

5m... or you can run the update_dns.yml playbook

<@Zlopez:matrix.org>

19:19:18

I will wait few minutes :-)

<@Zlopez:matrix.org>

19:19:49

I would just like to not left the staging in broken state before I finish for today

<@nirik:matrix.scrye.com>

19:20:00

yeah, thanks.

<@nirik:matrix.scrye.com>

19:21:36

I don't think I have much else...

<@Zlopez:matrix.org>

19:22:12

I will continue on IPA tomorrow

<@nirik:matrix.scrye.com>

19:22:42

Thanks for working on that.

<@aheath1992:matrix.org>

19:23:33

Nothing from my end

<@leo:fedora.im>

19:24:00

not much here other than the varnish stuff? but other than that nothing

<@Zlopez:matrix.org>

19:26:17

Is thins ok? ``` $ host -t a _ldap._tcp.stg.fedoraproject.org _ldap._tcp.stg.fedoraproject.org has no A record ```

<@nirik:matrix.scrye.com>

19:26:59

yeah, thats normal... it's a SRV record, not a A

<@Zlopez:matrix.org>

19:27:26

Thanks

<@phsmoura:fedora.im>

19:28:25

I'm finding it confusing to write the playbook for fedora planet. I took the yml from Bodhi as an example, but there are variables, roles, and so on... These details leave me a bit lost. Any tips on what I should focus on to write this playbook?

<@Zlopez:matrix.org>

19:30:16

phsmoura: It would be probably good to look at the ansible basics about roles https://spacelift.io/blog/ansible-roles

<@nirik:matrix.scrye.com>

19:31:40

the roles can be seen under roles/openshift/ so basically each role there is a simple thing that takes your apps files and templates them to fill in variables, etc.

<@phsmoura:fedora.im>

19:32:24

yep, but we have variable yml files in /srv

<@nirik:matrix.scrye.com>

19:33:16

a lot of the openshift playbooks call 'openshift/object' which just takes the name you pass it and templates it with the roles/openshift-app/$app/templates/ thing for your app

<@nirik:matrix.scrye.com>

19:33:45

I'm probibly not helping. ;( We should have a better doc on this all, I know it's confusing.

<@phsmoura:fedora.im>

19:34:13

in the end I open lots of files trying to understand it and find it hard to apply for planet

<@phsmoura:fedora.im>

19:35:14

ok, np.. :) Ill try to do it and any mistakes I can fix it later with the reviews, the PR is a WIP

<@nirik:matrix.scrye.com>

19:35:47

You could start with just staging and just the openshift/project role and add one at a time to that?

<@nirik:matrix.scrye.com>

19:36:41

bodhi might also be a complex one, might be easier to look at one of the smaller/simplier ones?

<@phsmoura:fedora.im>

19:37:30

hmm ok, any idea of another project that would help as an example?

<@nirik:matrix.scrye.com>

19:37:31

fasjson, or mdapi perhaps?

<@phsmoura:fedora.im>

19:37:40

cool

<@nirik:matrix.scrye.com>

19:38:15

I just looked and our SOPs are all about managing the openshift cluster, nothing about making an app...

<@nirik:matrix.scrye.com>

19:38:20

unless thats in the devel guide?

<@leo:fedora.im>

19:38:26

yeah, i was looking trying to find that doc

<@nirik:matrix.scrye.com>

19:38:39

ah yes:

<@nirik:matrix.scrye.com>

19:38:42

https://docs.fedoraproject.org/en-US/infra/developer_guide/openshift/

<@nirik:matrix.scrye.com>

19:39:17

still not much info, but more at least

<@leo:fedora.im>

19:39:50

that actually does help though

<@phsmoura:fedora.im>

19:39:56

ah great, seems I need to fix something already, but that helps a bit

<@darknao:fedora.im>

19:40:00

And remember to use Deployment instead of DeploymentConfig :p

<@darknao:fedora.im>

19:40:14

(deploymentConfig are deprecated)

<@phsmoura:fedora.im>

19:40:17

ah so did it rigth

<@phsmoura:fedora.im>

19:40:20

hahah

<@nirik:matrix.scrye.com>

19:40:50

ah yeah, we should fix that.

<@nirik:matrix.scrye.com>

19:41:02

Zlopez: was I making that dns change, or were you?

<@Zlopez:matrix.org>

19:42:30

I did it

<@nirik:matrix.scrye.com>

19:43:02

ok, cool.

<@Zlopez:matrix.org>

19:43:55

The account.fedoraproject.org are now working, but the https://id.stg.fedoraproject.org/ipa/ui is still unavailable

<@Zlopez:matrix.org>

19:44:07

account.stg.fedoraproject.org

<@Zlopez:matrix.org>

19:44:28

Ok, no it doesn't

<@phsmoura:fedora.im>

19:44:51

That's all then, we are overtime. Sorry for that, yep we can continue in another chanel

<@phsmoura:fedora.im>

19:44:59

thanks everyone :)

<@phsmoura:fedora.im>

19:45:16

!endmeeting