/srv/irclogs.ubuntu.com/2016/10/10/#juju-dev.txt

axwwallyworld: I think you misunderstood me about the API00:52
axwI just meant to combine them in the CLI code00:52
wallyworldah, damn00:52
axwi.e. create an interface that you can satisfy by embedding both the facades into one struct00:52
wallyworldoh well, what's there is ok i think?00:53
wallyworldwe use that same pattern elsewhere too00:53
axwwallyworld: I think it's fine00:53
axwwallyworld: ModelManager makes more sense for this command anyway I think00:53
wallyworldyeah, agree00:53
rick_h_wallyworld: is the model destroy blocking something communicated to other teams?01:23
rick_h_wallyworld: coukd tgat imoact things like the gui?01:23
wallyworldrick_h_: it was a stakeholder bug from OIL I think. I am not sure who else knows01:23
wallyworldi am not sure about GUI - I'll send an emil01:24
wallyworldrick_h_: but the blocking is ony CLI01:24
rick_h_wallyworld: right, i'm +1000 on the change, but want to make sure we chat with ither clients01:24
rick_h_wallyworld: ah ok01:24
wallyworldthe api behaves the same01:24
rick_h_wallyworld: nvm then01:24
wallyworldfair enough question to asl01:25
wallyworld*ask01:25
menn0thumper: i've fixed the racy pingerSuite tests: https://bugs.launchpad.net/juju/+bug/162521401:48
mupBug #1625214: pingerSuite.TestAgentConnectionsShutDownWhenAPIServerDies write: broken pipe <ci> <intermittent-failure> <regression> <unit-tests> <juju:In Progress by menno.smits> <https://launchpad.net/bugs/1625214>01:48
menn0thumper: what I meant to paste: https://github.com/juju/juju/pull/6410/commits/f9ee5dba43e0fa032fe67d14d1c89cdc1c1e1a5501:48
thumperlooking01:49
thumperapprove01:52
menn0thumper: cheers01:52
menn0wallyworld: https://github.com/juju/juju/pull/6411 please02:01
wallyworldmenn0: sure, just finishing another02:02
menn0wallyworld: ignore the first commit. that one is merging as part of another PR now.02:02
wallyworldok02:02
wallyworldmenn0: could you take a look at this one by christian? i think your +1 would be valuable. I've already had a look https://github.com/juju/juju/pull/640802:19
wallyworldalso, your 6411 pr has conflicts02:20
menn0wallyworld: will do. he emailed me about it too.02:20
wallyworldta02:20
menn0wallyworld: conflicts fixed02:21
wallyworldta02:21
axwmenn0: are you investigating that cert issue?02:53
menn0axw: I was about to take a short break and then stuck into it02:54
menn0axw: I still have a controller up where that's happened02:54
menn0axw: have you seen it too?02:54
axwmenn0: ok. would it be helpful if I looked in parallel?02:54
axwmenn0: no, but it didn't sound hard to repro02:54
menn0axw: could be. if you could take a look too that would be great.02:55
axwmenn0: ok. I'll let you know if I find anything02:55
menn0axw: here's what the failure looks like: http://paste.ubuntu.com/23301342/02:55
axwokey dokey02:56
axwmenn0: and all you did was bounce the controlelr agent?02:56
menn0axw: I stopped the lxd machine and started it again02:57
axwah yes02:57
axwok02:57
menn0the controller instance02:57
* menn0 will be back in 15 mins02:57
axwwallyworld: what did you want me to test with add-model? something like this? bootstrap rc2, upgrade to my branch, then add-model foo && add-model bar ap-southeast-203:17
wallyworldaxw: yeah, check that the endpoint fixing is done for addmodel also03:17
wallyworldaxw: or even first confirm that it is broken without your fix03:18
wallyworldso we can be sure that the fix is relvant nd valid03:18
axwwallyworld: it would be broken if you tried to upgrade from rc203:18
axwwallyworld: but if you added a model to a running rc2 without upgrading, it should work. anyway, I'll try what I described03:18
wallyworldta, i think we need to be 10000% sure03:19
axwmenn0: I strongly suspect -> https://github.com/juju/juju/commit/0d64508f8005ea84c141ed392389fbaef0e70b3003:40
axwmenn0: in particular, "info.Cert = existing.Cert" without also setting Key03:40
blahdeblahHi everyone, which ppa should I be using to get the RC version of juju 2.0 so I can try https://docs.google.com/document/d/1yT5pvS38g9Z9SviI9NPmhIZrsO8drwHDPNWAMSmCedE/edit# ?03:51
menn0axw: looks like there was already a ticket for this issue: https://bugs.launchpad.net/juju/+bug/163114503:52
mupBug #1631145: rc2 upgrade to rc3 failed with cannot start api server worker: cannot set initial certificate: cannot create new TLS certificate: crypto/tls: private key does not match public key <juju:New> <https://launchpad.net/bugs/1631145>03:52
menn0axw: i've just bumped the priority etc03:52
axwokey dokey03:54
menn0axw: any luck replicating?03:54
axwmenn0: not yet03:55
axwblahdeblah: according to release email,  ppa:juju/devel03:55
blahdeblahaxw: cool - thanks03:55
wallyworldaxw: with maas, do you know what happens if you attempt to acquire a node without specifying an architecture? does it just pick some arbitary machine so long as any other constraints match?03:58
axwmenn0: hrm. I am seeing "getsockopt...connection refused" without the other error though03:58
axwand status isn't working now03:58
axwwallyworld: I don't recall, sorry03:58
menn0axw: that's what you'll see at the client03:58
menn0axw: what about in the controller's logs?03:58
wallyworldmaybe menn0 recalls?03:59
axwmenn0: this is in the controller machine log03:59
menn0axw: hmm ok03:59
axwmenn0: it's failing to connect to mongo...03:59
menn0axw: possibily a different problem?03:59
axwyes, possibly03:59
anastasiamacwallyworld: r:maas arch.. yes, i beleve so.. at lest this s what i ve seen04:00
menn0axw: not ideal04:00
axwmenn0: although... do we use the same cert/key for mongo?04:00
wallyworldmenn0: ta, ok04:00
menn0wallyworld: sorry, not sure about maas04:00
wallyworldnp, i'll ask the maas qguys04:00
wallyworldguys04:00
menn0axw: maybe we do use the same cert/key... worth checking04:01
axwmenn0: it does appear to be the case04:03
axwwhen we update the cert, we write out to server.pem04:04
menn0axw: ok, so probably a different manifestation of the same issue04:04
axwyup04:04
menn0axw: i'm tracing through where the cert and key that apiserver.NewServer is given come from04:04
menn0axw: ok so that's out of StateServingInfo in the agent config04:06
menn0axw: perhaps one is being updated without the other?04:06
menn0axw: this could be it: https://github.com/juju/juju/blob/master/cmd/jujud/agent/machine/servinginfo_setter.go#L67-L7404:14
menn0axw: should existing.PrivateKey get copied too?04:15
menn0axw: I'd also be a lot happier if most of what the stateservinginfo_setter did happened /inside/ the ChangeConfig04:19
menn0axw: same for the method which does cert updates for the apiserver04:19
menn0looks racy otherwise04:19
menn0axw: the more I look, the more I think this is the bug04:24
* menn0 fixes04:24
axwmenn0: sorry, I just realised you lost connection after I pasted the commit before :/04:25
menn0axw: did you come to the same conclusion?04:25
* menn0 has been having wifi problems04:25
axw[11:40:32] <axw> menn0: I strongly suspect -> https://github.com/juju/juju/commit/0d64508f8005ea84c141ed392389fbaef0e70b3004:25
axw[11:40:57] <axw> menn0: in particular, "info.Cert = existing.Cert" without also setting Key04:25
menn0axw: ha! did see that. we independently found the same thing04:25
menn0axw: s/did/didn't/04:26
menn0axw: do you also agree that much of the logic in stateservinginfo_setter should be /inside/ the ChangeConfig func?04:27
menn0axw: same for MachineAgent.upgradeCertificateDNSNames04:28
axwmenn0: yes, I think so04:28
axwanything looking at current config04:28
menn0axw: ok, let's fix it.04:29
menn0axw: have you already started?04:29
axwmenn0: nope, eating lunch atm04:29
wallyworldblahdeblah: i so want to mark your bug as invalid. using firefox as default browser should be invalid :-)04:30
menn0axw: ok, i'll start on servinginfo_setter.go.04:30
menn0axw: i'm going to have to stop soon but will be back on later this evening04:30
blahdeblahwallyworld: Feel like taking the gloves off today, eh? :-)04:32
axwmenn0: ok. let me know where you leave off, I can pick it up04:32
menn0axw: sounds good04:32
wallyworldblahdeblah: i used to run firefox until it started to grind everything to a halt with many tabs open and other performance things04:32
blahdeblahwallyworld: It has never done that for me.  I've heard many claims of such, but never seen it personally, despite having 4 windows with 100-odd tabs open right now.  I thank NoScript for that.04:33
wallyworldblahdeblah: yeah, that may well be it. sadly lots of sites require js, including lp. well lp doesn't need it but uscks without it04:34
blahdeblahI use js on lots of sites; I just don't let it do that by default04:34
wallyworldi find it too hard to whitelist everything. well maybe am too lazy04:35
blahdeblahanyhew, my bug is valid, and I'll fight you for it! :-P04:35
wallyworldadblock works a treat though04:35
wallyworldoh i know it is valid04:35
wallyworldwas just stirring04:35
blahdeblahI see your stirring, and raise you lp:1587644, which got me out of bed at least once this weekend04:36
anastasiamacmenn0: wallyworld: considering u've re-viewed the fix for bug 162577404:37
mupBug #1625774: memory leak after repeated model creation/destruction <ateam> <eda> <oil> <oil-2.0> <uosci> <juju:In Progress by 2-xtian> <https://launchpad.net/bugs/1625774>04:37
anastasiamacmenn0: wallyworld: is it possible/wanted/needed on 1.25 to solve some of the memory leakage there too?04:38
wallyworldnot sure, depends on when state pool was introduced. not sure if it was for multi model or not04:39
wallyworldwould have to dig in and look04:39
menn0anastasiamac: it could be applied there but I don't think multi-model was supported without a feature flag was it? the fix would have minimal utility if that's the case.04:39
wallyworldyes, multi model in 1.25 is ff04:45
anastasiamacwallyworld: even server-side stuff? we usually ff at cli level...04:46
wallyworldnot for multi model04:46
wallyworldIIRC04:46
menn0yeah, I'm pretty sure the feature flag was applied throughout the server too04:47
menn0axw: I have the ssi setter fixes done, pushing now04:52
axwcool04:52
menn0axw: can I leave the MachineAgent.upgradeCertificateDNSNames fix to you?04:52
axwmenn0: yep sure04:53
menn0axw: https://github.com/juju/juju/pull/641304:54
axwmenn0: I think the only thing to do there is to not use "si.Cert", but get fresh value inside ChangeConfig?04:55
axwta04:55
mupBug #1630728 changed: remove user  needs better message that user is made inactive <usability> <juju:Triaged> <https://launchpad.net/bugs/1630728>04:55
menn0axw: shouldn't cert.NewDefaultServer be called inside the ChangeConfig though?04:57
axwmenn0: yes, I mean everything from "Parse the current certificate to get the current dns names." down should be inside04:57
menn0axw: +1 that's what I was thinking04:58
menn0should be easy04:58
menn0axw: just trying to QA this PR before I get called to help out with other stuff04:58
axwmenn0: except maybe the mongo bit. might want to do that after writing agent conf04:58
axwmenn0: okey dokey, thanks04:58
menn0axw: maybe... it might be ok to do it in the changeconfig though04:59
menn0axw: actually, i'm out of time. if you could review that PR, I'll check back in later and do the QA before merging04:59
axwmenn0: approved05:00
axwmenn0: with one late comment05:01
menn0axw: I made that change and QAed. Merging now.06:30
axwmenn0: thanks06:33
axwmenn0: I'm just QAing my change now06:33
menn0axw: cool. i can review when it's up. i've got to do dishes etc but will check back in later.06:33
axwmenn0: https://github.com/juju/juju/compare/master...axw:lp1631145-upgradecertificatednsnames?expand=1 if you want to take quick look06:33
axwok, no woprries06:33
axwwallyworld: got anything smallish you'd like help?07:14
wallyworldaxw: not off hand. I am finishing a partial list-clouds fix pending input from rick et al. i think there's one remaining bug on alexis' list to do with agent restart but not sure how big it is07:16
axwwallyworld: sounded big, I'll take a look07:16
wallyworldyeah, it did at first look07:17
wallyworldaxw: is your cert fix just because we need to recover from a borked cert cause by rc3?07:52
axwwallyworld: yes. and also we should be doing stuff inside ConfigChanged in general. doesn't matter in this case because the function is only called at startup07:52
axwbut good to keep it clean, to avoid copy&paste errors07:53
wallyworld+107:53
wallyworldlgtm07:53
hoenircould someone review my PR ? https://github.com/juju/juju/pull/641408:05
hoeniralso note that this PR will be the foundations of a new feature I wish to unlock on juju, enabling manual provisioning for windows machines.08:06
hoenirfoundation*08:07
mupBug #1420996 opened: Default secgroup reset periodically to allow 0.0.0.0/0 for 22, 17070, 37017 <canonical-is> <juju-core:New> <https://launchpad.net/bugs/1420996>08:11
=== akhavr1 is now known as akhavr
=== stokachu_ is now known as stokachu
=== meetingology` is now known as meetingology
=== ejat_ is now known as ejat
=== Ursinha_ is now known as Ursinha
dooferladmgz: is the github jujubot happy? It seems to be ignoring my $$merge$$ on https://github.com/juju/juju/pull/640608:58
babbageclunkwallyworld: ping?09:20
wallyworldyo09:20
babbageclunkwallyworld: I think I agree with you about Release vs Put - do you think menn0 will sulk if I change it?09:20
wallyworldbabbageclunk: he can sulk, i'll get the popcorn ready :-D09:21
babbageclunk:)09:21
wallyworldbabbageclunk: or even Done()09:21
babbageclunkwallyworld: Done isn't verby enough for my taste. Get/Done doesn't seem right.09:25
wallyworldfair point, i was trying to find an alternative to Release() to aleviate objections :-)09:25
babbageclunkalways the peacemaker09:27
wallyworldoh, i have been known to enjoy poking the hornet's nest :-D09:27
babbageclunkwallyworld: do you think I should rip the non-strict model uuid checking out of validateModelUUID?09:42
babbageclunkwallyworld: There are still a few places that use it.09:43
wallyworldbabbageclunk: i *think* so - maybe in a followup after checking with tim/menno. i am pretty sure it was just to support really old clients09:43
babbageclunkwallyworld: Ok - I'll do it as a separate change.09:44
wallyworldsgtm09:44
mupBug #1631899 opened: juju show-controller --show-password does not show the password <juju-core:New> <https://launchpad.net/bugs/1631899>10:02
babbageclunkwallyworld: Want to take another look at that PR, or are you ok for me to merge it?10:21
wallyworldbabbageclunk: i can take a quick look, menno was happy with it10:22
babbageclunkwallyworld: cool thanks - I think I've gone through all of your comments.10:25
wallyworldbabbageclunk: i think it looks good to go. thanks for doing the fix; was a challenege to get all the bit lined up so you did well10:28
babbageclunkwallyworld: cheers!10:28
beisnerhi all, last week we started seeing sha256 mismatches when units try to download the charm from the controller (1.25.6).  it's prevalent in openstack ci.  ie. shutting down: ModeInstalling ... failed to download charm ... expected sha256 FOO, got BAR11:02
beisneris there a known issue or are we special? :)   more detail @ http://pastebin.ubuntu.com/23302619/11:02
mupBug #1631899 changed: juju show-controller --show-password does not show the password <juju-core:New> <https://launchpad.net/bugs/1631899>11:11
mupBug #1631899 opened: juju show-controller --show-password does not show the password <juju-core:New> <https://launchpad.net/bugs/1631899>11:23
mupBug #1631899 changed: juju show-controller --show-password does not show the password <juju-core:New> <https://launchpad.net/bugs/1631899>11:26
mupBug #1541482 opened: unable to download local: charm due to hash mismatch in multi-model deployment <2.0-count> <juju-release-support> <juju:Fix Released by menno.smits> <juju-core:New> <https://launchpad.net/bugs/1541482>11:26
mupBug #1629951 changed: cannot specify subnet to  create controller in on bootstrap <juju:Triaged> <https://launchpad.net/bugs/1629951>12:17
mupBug #1630029 changed: models should inherit vpc-id from controller  <juju:Triaged> <https://launchpad.net/bugs/1630029>12:17
dooferladrick_h_: 1:1 today?13:00
rick_h_dooferlad: /me checks thought he was in it13:01
rick_h_dooferlad: oh hmm, stuck at "requesting to join the video call"13:01
rick_h_katco``: dimitern voidspace mgz natefinch ping for standup14:00
mgzomw14:00
dimiternomw14:00
rick_h_oh right, US away so ignore me katco`` and nate14:00
voidspacerick_h_: omw14:02
frobwarejamespage: do you often run into this issue: https://bugs.launchpad.net/juju/+bug/160054614:49
mupBug #1600546: lxd subnet setup by juju will interfere with openstack instance traffic <2.0> <network> <sts> <juju:Triaged by rharding> <nova-compute (Juju Charms Collection):New> <https://launchpad.net/bugs/1600546>14:49
voidspacerick_h_: ping14:51
rick_h_voidspace: pong14:51
rick_h_dooferlad: ping15:21
dooferladrick_h_: hello15:21
rick_h_dooferlad: have more time to chat?15:21
dooferladrick_h_: yes15:22
rick_h_dooferlad: k, meet you back in the 1-1 room15:22
voidspacerick_h_: 30 seconds for a bikeshed needed if you have it15:32
voidspacerick_h_: last comment on bug 1602192 is the output I've implemented15:34
mupBug #1602192: when starting many LXD containers, they start failing to boot with "Too many open files" <lxd> <juju:In Progress by rharding> <lxd (Ubuntu):Confirmed> <https://launchpad.net/bugs/1602192>15:34
rick_h_voidspace: otp15:38
rick_h_voidspace: will look in a sec15:38
voidspacerick_h_: ok, np - I'll PR it and the reviewer can bikeshed it15:38
jamespagefrobware, I've never run into that issue16:00
frobwarejamespage: thanks. just trying to understand the severity and whether we address it "now".16:00
jamespagebut apparently trent has hit it alot16:00
frobwarejamespage: any feeling whether this is just happening for just the training setup?16:01
jamespagefrobware, I'm not quite close enough to know the answer to that16:01
jamespagesorry16:01
frobwarerick_h_: ^^ fyi16:02
voidspacedimitern: if you have any ideas on how to test this, I'm all ears16:02
voidspacedimitern: https://github.com/juju/juju/pull/641916:02
dimiternvoidspace: looking16:02
voidspacedimitern: except providing something that stubs out PrintLn.16:02
voidspacedimitern: the important bit is in provider/common/bootstrap.go16:03
dimiternvoidspace: how about adding an interface with BootstrapMessage() method and then check in common/bootstrap if it's implemented by the Environ ?16:04
dimiternvoidspace: then you could test it with the dummy provider, but no need to change all providers?16:04
voidspacedimitern: right, but what does that enable me to test?16:05
voidspacedimitern: I could then pass in a fake environ with a custom message, but what do I test?16:05
voidspacedimitern: unless I replace the call to fmt.Println with something that can be mocked - which doesn't seem very useful16:05
voidspacedimitern: I'm kind of arguing that as this is a ui change it needn't be tested16:05
voidspacedimitern: maybe I can look in featuretests to see if something like this is covered16:06
dimiternvoidspace: only that common.Bootstrap() calls the optional method, when it's there, and checking the ctx.Stdout() to ensure it's there?16:06
rick_h_voidspace: wfm for now, thank you16:06
voidspacerick_h_: cool, thanks16:06
rick_h_frobware: yea, so I'm -1 on that being the biggest issue atm16:06
* rick_h_ goes to get lunchables16:06
voidspacedimitern: in which case I can test that *already*16:06
voidspacedimitern: and put a non-empty string in dummy provider to test it16:07
voidspacedimitern: let me look - thanks16:07
voidspacedimitern: if we're calling fmt.Println will that be in ctx.Stdout ?16:07
dimiternvoidspace: alternatively, you could go with BootstrapContext.Infof() only called in provider/lxd ?16:07
dimiternvoidspace: since it's very specific and not needed everywhere16:08
dimiternvoidspace: check e.g. PrepareForBootstrap in provider/ec2 and the code around validateBootstrapVPC()16:09
dimiternvoidspace: (bootstrap)ctx.Infof() is already used for similar messages during bootstrap in some providers16:10
voidspacekk16:10
voidspacedimitern: using Stderr on the context I can test that the message is output16:33
dimiternvoidspace: \o/ nice!16:34
=== frankban is now known as frankban|afk
=== dames is now known as thedac
rogpeppe1katco``: i've made a bunch of comments and changes in response to your review of https://github.com/juju/juju/pull/6407. PTAL.17:55
rick_h_rogpeppe1: she's on US holiday today17:55
rick_h_rogpeppe1: and with the EU folks EOD'ing will have to catch tomorrow it looks like sorry for the delay17:56
arosalesIf any folks are have access to s390 we are seeing https://bugs.launchpad.net/juju/+bug/163203018:18
mupBug #1632030: juju-db fails to start -- WiredTiger reports Input/output error <juju> <juju-db> <mongodb> <s390x> <juju:New> <https://launchpad.net/bugs/1632030>18:18
* rick_h_ goes to get the boy home from school, biab19:09
veebersalexisb: Ina normal (test) run, should I see the log message: "ERROR cmd supercommand.go:458 creating API connection: ..."? (I'm seeing this error in the failing tests: ERROR cmd supercommand.go:458 creating API connection: EOF)20:23
alexisbnot on a normal test run you are expecting to pass without error20:24
veebersI never see "creating API connection" in a passing test run (for grant-revoke)20:24
alexisbveebers, when did you start seeing the new failures?20:24
veebersalexisb: what is it a symptom of? One sec will check times20:24
veebersalexisb: looks to be about Oct 7 (Jenkins time, so UTC?) had 2 passes of 12 runs since then, the failures all include that error message20:25
alexisbmenn0, ^^^20:28
alexisbI am wondering if this lines up with this merge: https://github.com/juju/juju/pull/640020:28
menn0veebers: where are you see that message? from the juju client or in agent logs?20:32
menn0veebers: a certain amount of such messages are expected as when controllers come up and when workers restart after new controllers are added20:33
veebersmenn0: um, I'm pretty sure the client? (I'm seeing it in the log output from juju command)  http://reports.vapour.ws/releases/4467/job/functional-grant-revoke/attempt/721 if you search for "connection: EOF"20:33
* menn0 looks20:34
veebersmenn0: this is after a controller comes up, users have been added etc.20:34
veebersmenn0: Would this be related to the ping changes to? http://reports.vapour.ws/releases/4467/job/run-unit-tests-race/attempt/1949 (FAIL: monitor_internal_test.go:69: MonitorSuite.TestLaterPingFails)20:40
menn0veebers: that's a new test. i'll take a look.20:41
menn0veebers: the other issue appears to be macaroons related. here's the related bit in the controller's logs:20:41
menn02016-10-10 16:17:39 INFO juju.apiserver request_notifier.go:70 [1E] API connection from 10.0.8.1:3308620:41
menn02016-10-10 16:17:39 INFO juju.apiserver admin.go:102 login failed with discharge-required error: verification failed: no macaroons20:41
menn02016-10-10 16:17:39 INFO bakery service.go:366 server attempting to discharge "eyJUaGlyZFBhcnR5UHVibGljS2V5IjoieVZlUEU3cUNJMm5nZWZuUXo2NlFPWVEwanlMVnVDanMwZGhMa0VUa3dRST0iLCJGaXJzdFBhcnR5UHVibGljS2V5IjoiNzF5NnNIOExNNUU1OHYxaGpGek9JdCtCZGRLRHR6SE5pN0ExQ1dBWHZqND0iLCJOb25jZSI6InpoMllTNnZ1bFFHNUlPdVRucXY4U0hVNW5MQWlSaE43IiwiSWQiOiJlSHM0Y3dERDRiOCs5TXBDUG1RakwvenVFdXZhV3dSbmhkY0tXWmtGQjA5MENaMXYxcnBYZ0RNczRsTTUrc2FSS2l2RGt0OFhlOG5BZTNxVG520:41
menn04Y1YwMXhIUWZxTXRmWHk4TUdnNmRvSWZlZWpSZmJnby9pdjIxSmZiU2FkQjNwdXR6ZmJ2ekRvbGh1aDNPcGdCbTRQd2pSRGx4cGFEQnZaL0lwZGhoL0lQb3dMdXc9PSJ9"20:41
menn02016-10-10 16:17:39 INFO juju.apiserver request_notifier.go:80 [1E]  API connection terminated after 28.244335ms20:42
menn02016-10-10 16:17:39 INFO juju.apiserver request_notifier.go:70 [1F] API connection from 10.0.8.1:3309620:42
menn02016-10-10 16:17:39 INFO juju.apiserver request_notifier.go:80 [1F] user-admin API connection terminated after 43.24719ms20:42
menn0veebers: i'll dig a bit more into that one to see if I can figure it out20:43
veebersmenn0: I see a macroons change about 3 days ago, "remove macaroons on logout"20:43
menn0veebers: ok, could be related. those messages might also be normal. I'll do some digging.20:44
veebersmenn0: Hmm, it's possible that the test misbehaves with those recent changes. Just looking now and if it's running on lxd (which this test is) it doesn't handle entering the password.20:46
veebersmenn0: Did that behaviour change recently? (i.e. lxd not need password)20:47
menn0veebers: hmm, ok. that could be it.20:47
menn0veebers: I have no idea.20:47
* veebers builds latest juju to test20:47
veebersmenn0: let me test that and I'll get back to you20:47
rick_h_veebers: hmm, yea the branch nate did made sure to clear cookies when you logout20:47
rick_h_veebers: menn0 which meant that you had to actually login again after a logout for a change20:47
veebersrick_h_: that's probably it then, I should be able to confirm shortly20:48
menn0veebers: is there a ticket yet for the TestLaterPingFails intermittent failure?20:49
veebersmenn0: not yet, I can make one right now20:49
menn0veebers: ok thanks. i've just reproed it here20:50
menn0grrr. even with injected clocks it's still too easy to introduce these intermittent timing issues ....20:51
veebersmenn0: fyi https://bugs.launchpad.net/juju/+bug/163210520:52
mupBug #1632105: Test MonitorSuite.TestLaterPingFails fails  <ci> <regression> <unit-tests> <juju:Confirmed> <https://launchpad.net/bugs/1632105>20:52
menn0veebers: cheers20:53
menn0veebers: ok i've got the fix for TestLaterPingFails done... will propose shortly21:14
veebersmenn0: sweetbix21:15
menn0veebers: thanks for pointing it out21:16
veebersmenn0: heh, no worries, it popped up in the 'unknowns' that I'm wrangling21:17
menn0good to get on top of these intermittent failures quickly21:18
veebersagreed21:18
menn0thumper: easy review pls: https://github.com/juju/juju/pull/642021:23
* thumper looking21:23
thumper+121:24
veebersmenn0: ugh, sorry for the noise earlier, the fix for the grant/revoke/macroons stuff was in the CI test.21:27
menn0veebers: ok good to know21:27
menn0thumper: it's probably too late to expose the HighAvailabilty facade for controller logins isn't it?21:40
thumpermenn0: yes and no21:41
thumperyou could create a new one21:41
thumperbut still need to support the old one21:41
menn0thumper: i'm working on the ticket to allow juju enable-ha to just work regardless of the current model21:41
thumperI guessed21:42
menn0thumper: the client side work is a piece of cake but you then end up with a controller login21:42
menn0thumper: the alternative is to do something tricky in the client so it logs into the controller model21:42
thumperAdd the new facade21:42
* thumper thinks21:42
menn0I don't think that would be hard to do and it's possibly lower risk21:43
thumperyou need to have admin access in the controller model to do it21:43
* menn0 checks what the current story with access is21:44
thumperor perhaps just write?21:44
menn0you currently need superuser access21:45
menn0that probably makes sense TBH21:46
menn0thumper: i don't *think* a new facade is required, the existing HighAvailability facade just needs to be exposed for controller logins and (controller) model logins (for compatibility)21:50
thumperok21:50
menn0thumper: the client will have to try both approaches (in case a newer client is talking to an older server)21:50
* thumper nods21:50
menn0thumper: with a preference for a controller login21:50
menn0ok21:51
menn0thumper: thanks rubber duck :)21:51
veebersthumper: you recently worked on some unit tests wrt to certificates/keys etc? Fyi I just filed this bug which may be of interest: https://bugs.launchpad.net/juju/+bug/163212721:59
mupBug #1632127: Unittest "MachineSuite.TestCertificateDNSUpdatedInvalidPrivateKey" fails on multiple archs <ci> <unit-tests> <juju:Confirmed> <https://launchpad.net/bugs/1632127>21:59
thumperveebers: as much as I love fixing bugs, I'm focusing on a different piece of work this week21:59
veebersthumper: ack, only wanted to bring it to your attention incase my assumption of you working in that area was correct :-)22:01
menn0veebers: TestCertificateDNSUpdatedInvalidPrivateKey was added by axw yesterday22:21
menn0it just failed for me on a merge attempt tooo22:21
veebersmenn0: ack thanks, oh he's now on leave right?22:23
menn0veebers: ah yes... could be22:23
menn0veebers: assign it to me... I was working with him in that area yesterday22:23
anastasiamacmenn0: veebers: Roger filed a bug for the failure.. i've marked Chris's as a duplicate...22:23
menn0anastasiamac: ok cool. bug number?22:24
veebersmenn0: anastasiamac points out I filed a dupe bug22:24
anastasiamacmenn0: veebers: https://bugs.launchpad.net/bugs/163199022:24
mupBug #1631990: cmd/jujud/agent: sporadic test failure in MachineSuite.TestCertificateDNSUpdatedInvalidPrivateKey <ci> <unit-tests> <juju:Triaged> <https://launchpad.net/bugs/1631990>22:24
veebersah, beat me to it :-)22:24
menn0veebers: yep got that... I was after the original ticket22:25
menn0anastasiamac, veebers: thanks22:25
jamespagehey menn0 - I see you picked up bug 154148222:28
mupBug #1541482: unable to download local: charm due to hash mismatch in multi-model deployment <2.0-count> <juju-release-support> <uosci> <juju:Fix Released by menno.smits> <juju-core:Triaged by menno.smits> <https://launchpad.net/bugs/1541482>22:28
menn0jamespage: yep. I fixed the same/similar issue for 2.0 so I seemed like the right person to deal with it for 1.25.22:29
jamespagemenn0, awesome22:29
jamespagemenn0, its killing our final release testing atm22:29
jamespagemenn0, any ideas what triggers the race that causes it?22:29
jamespagewe don't see it all of the time22:29
menn0jamespage: IIRC it's to do with the apiserver's on disk charm cache22:30
menn0jamespage: the solution is to remove the cache. it's not necessary any more (already done for 2.0)22:30
jamespagemenn0, yeah - I saw the fix you did for 2.022:31
menn0jamespage: there might be some other related fixes in that area too. I need to review previous PRs.22:32
jamespagemenn0, ok - I'll leave it with you22:32
menn0jamespage: actually, I just checked and I've already done that22:32
menn0jamespage: those changes just haven't been released yet22:33
menn0jamespage: we need a 1.25.7 release22:33
jamespageyp!22:33
menn0jamespage: if it would help I can supply binaries for you to use in the mean time (to validate that the problem is indeed fixed for you)22:34
thumperjamespage: how urgent is the need for 1.25.7 for your team?22:36
jamespagethumper, we release thursday; currently we're doing final sweep of amulet testing tidy including disabling old release combos and enabling new ones22:37
jamespagethumper, but that final sweep has been going for alot longer than normal as we can't get a full amulet run through consistently atm22:38
* thumper nods22:38
jamespagethumper, we tried a workaround, but we're having to unpick that now22:38
jamespagethumper, as that did something quite different to what we expected22:39
jamespagethumper, so fairly urgent - I'll just see if we can splice in custom binaries to our Charm CI or not22:39
thumperjamespage: well, there is no way it is happening this week :(22:41
thumperso, sorry22:41
jamespagethat was my guess22:41
alexisbmenn0, ping23:18
anastasiamacjamespage: plz email alexisb and rick_h_re:urgency for 1.25.7 to come out \o/23:22
mwhudsonalexisb: well i started on that bug and now i'm reading the kernel source :)23:42
thumpermenn0: are you working on https://launchpad.net/bugs/1631990 now?23:45
mupBug #1631990: cmd/jujud/agent: sporadic test failure in MachineSuite.TestCertificateDNSUpdatedInvalidPrivateKey <ci> <unit-tests> <juju:Triaged by menno.smits> <https://launchpad.net/bugs/1631990>23:45
menn0thumper: I haven't gotten to it yet23:47
menn0thumper: did you want to pick it up, or were you just bitten by it?23:48

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!