opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/wallaby: Add shallow_since for ceph-ansible https://review.opendev.org/c/openstack/openstack-ansible/+/804976 | 05:44 |
---|---|---|
*** rpittau|afk is now known as rpittau | 07:27 | |
opendevreview | Merged openstack/openstack-ansible-repo_server master: Cleanup CentOS 7 vars file https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/805401 | 09:29 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add Vault role support https://review.opendev.org/c/openstack/openstack-ansible/+/800787 | 09:31 |
opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build stable/wallaby: Improve speed of permissions changes https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/805766 | 09:32 |
opendevreview | Dmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build stable/victoria: Improve speed of permissions changes https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/805767 | 09:33 |
opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Include openstack_services for murano role https://review.opendev.org/c/openstack/openstack-ansible/+/805373 | 09:41 |
opendevreview | Merged openstack/openstack-ansible-os_horizon master: Add option to override horizon policies https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/748264 | 10:11 |
noonedeadpunk | I need to go to hospital today in the evening so I'm not soure I will be around in time for meeting | 10:59 |
noonedeadpunk | s/soure/sure/ | 10:59 |
opendevreview | Merged openstack/ansible-role-python_venv_build master: Improve speed of permissions changes https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/805402 | 11:12 |
noonedeadpunk | Damn... We have new bug with mariadb 10.6 :( We got stuck now on `Run MySQL Upgrade` step :( | 12:20 |
noonedeadpunk | I catched that one time in aio as well, and mariadb restart helped there | 12:20 |
noonedeadpunk | https://zuul.opendev.org/t/openstack/build/cf306e456a9e4abba4b9004a57da46e6/log/job-output.txt#13234 <- this is smth that repeats from time to time | 12:21 |
noonedeadpunk | I wonder if we should revert to 10.5 for now? | 12:21 |
jrosser | oh dear - i guess we should drop back to 10.5.12 to be the same as W | 13:00 |
opendevreview | Merged openstack/openstack-ansible master: Update pip version https://review.opendev.org/c/openstack/openstack-ansible/+/805583 | 13:38 |
opendevreview | Merged openstack/ansible-role-python_venv_build stable/wallaby: Improve speed of permissions changes https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/805766 | 14:04 |
noonedeadpunk | /topic | 14:56 |
noonedeadpunk | #startmeeting openstack_ansible_meeting | 15:00 |
opendevmeet | Meeting started Tue Aug 24 15:00:07 2021 UTC and is due to finish in 60 minutes. The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
opendevmeet | The meeting name has been set to 'openstack_ansible_meeting' | 15:00 |
noonedeadpunk | #topic rollcall | 15:00 |
noonedeadpunk | o/ I'm partially here from phone | 15:00 |
noonedeadpunk | #topic office hours | 15:06 |
noonedeadpunk | So, we are facing some new bug with mariadb 10.6.4 | 15:06 |
noonedeadpunk | During mysql_upgrade things stuck and cause timeouts | 15:06 |
noonedeadpunk | Btw I noticed that only on focal, but not sure if it's limited to it | 15:07 |
noonedeadpunk | Anyway think we can rollback to 10.5.12 since we bumped only master. At least we will know if that helps or not. | 15:08 |
jrosser | i can make a patch for that | 15:08 |
noonedeadpunk | It would be simple revert I guess | 15:09 |
opendevreview | Merged openstack/openstack-ansible-os_neutron stable/wallaby: Add support of OVN for CentOS-8-Stream https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/804717 | 15:09 |
noonedeadpunk | Oh, btw, on W I think there were no timeouts lately? | 15:09 |
opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-galera_server master: Revert "Update galera to 10.6.4" https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/805822 | 15:10 |
noonedeadpunk | So that should help then | 15:10 |
noonedeadpunk | Another thing was haproxy role for managing endpoints vs included tasks | 15:11 |
noonedeadpunk | logan- aimed to make backend disablement smart, but I think it's too complicated and a bit risky | 15:12 |
noonedeadpunk | On terms that missing sudoers or invalid policy would make service unusable before any handlers | 15:12 |
noonedeadpunk | Also I pushed patch to add serial everywhere and wanted to do same with haproxy endpoints | 15:14 |
noonedeadpunk | But wasn't sure what way to choose | 15:14 |
noonedeadpunk | Also, I wonder if we should switch from depth to shallow_since for all repos in a-r-r as it feels like more reliable thing since some time from release | 15:16 |
noonedeadpunk | And we always pull only required history | 15:17 |
noonedeadpunk | I was supposed to call for a contributor with patches to our roles without using OSA overall to join our meeting but I didn't do that :( I will try to reach them tomorrow morning for the next meeting | 15:23 |
jrosser | looking at the existing code the strategy for serial/parallel installation is not totally clear | 15:23 |
noonedeadpunk | Um, what do you mean? | 15:28 |
noonedeadpunk | Meta handler "Manage LB"? | 15:29 |
noonedeadpunk | That is part of the logan- role that is used only for galera | 15:33 |
noonedeadpunk | For other roles it's was never fully implemented, but just started | 15:33 |
jrosser | there already seems provision for nova/neutron/cinder, but not anything else | 15:34 |
noonedeadpunk | Yeah, that's true | 15:34 |
noonedeadpunk | Also glance I guess and keystone | 15:34 |
noonedeadpunk | Well, and galera | 15:35 |
noonedeadpunk | But we indeed manage haproxy for super limited amount of roles | 15:37 |
noonedeadpunk | Which I guess high time to change | 15:37 |
noonedeadpunk | spatel are you around? | 15:38 |
spatel | yes | 15:38 |
spatel | always :) | 15:38 |
spatel | catching up this thread | 15:39 |
noonedeadpunk | Awesome. I had second thoughts about skyline:) well, I researched project a bit more | 15:39 |
spatel | noonedeadpunk nice! if we want then i am happy to work on it and integrate support with OSA | 15:40 |
noonedeadpunk | While it's still actively developing and afaik is not prod ready yet (because of missing ci and some things) | 15:40 |
noonedeadpunk | But once it will be released I think it would be great to have role for it | 15:41 |
spatel | noonedeadpunk totally it has lots of built in features and also high performance UI. | 15:41 |
noonedeadpunk | Maybe we can create repo even before that time but it will be incubated | 15:42 |
spatel | I have already started submitting bugs https://bugs.launchpad.net/skyline-apiserver | 15:42 |
noonedeadpunk | Until official first release of skyline | 15:42 |
* jrosser looks for federated logins there..... | 15:43 | |
spatel | I would say lets add support on OSA so more people will start using it and we will have more bugfix | 15:43 |
spatel | I am already talking to core developer of skyline team and they are super active in response. | 15:44 |
noonedeadpunk | Oh, that's nice | 15:44 |
noonedeadpunk | I hope they have irc channel:) | 15:44 |
spatel | They are in china so just talking to them on email. | 15:45 |
noonedeadpunk | Oh! Also, what do you think about adding freezer to OSA? | 15:45 |
spatel | I will ask them to create IRC so we have more better communication + more people will join | 15:45 |
noonedeadpunk | Yeah, email is... Meh | 15:46 |
noonedeadpunk | I kind of have role for freezer that I wrote on my free time | 15:46 |
spatel | noonedeadpunk does OSA has ironic support? i never heard from you guys so asking | 15:48 |
spatel | we don't have CI also for that role | 15:48 |
spatel | https://docs.openstack.org/openstack-ansible-os_ironic/latest/ not sure if anyone using it here. i am little interested to play | 15:49 |
noonedeadpunk | But project is a bit undrmaintained | 15:49 |
noonedeadpunk | Um, yes, I believe Ironic is used | 15:50 |
jrosser | kind of like os_octavia+++++ | 15:50 |
jrosser | that you need to understand the service itself and know what you're doing, before running the role and expect it to "just work" | 15:50 |
jrosser | theres some networking to do and interesting multitenancy | 15:51 |
noonedeadpunk | Btw, do you think we can merge that as initial commit and add encryption of keys with follow up? https://review.opendev.org/#/c/800792 | 15:52 |
jrosser | sounds reasonable | 15:53 |
jrosser | something on my mind was if we want to use vault to manage user_secrets at all | 15:54 |
jrosser | which would get a bit circular with the galera credentials, if galera is the backend for vault | 15:54 |
noonedeadpunk | Well, yes | 15:54 |
noonedeadpunk | I guess we need to add native storage support there as well | 15:55 |
noonedeadpunk | To be able to use it as storage for user_secrets | 15:55 |
noonedeadpunk | I almost forgot! It's about due time for posting release highlights | 15:56 |
jrosser | maybe thats mixing up too many things though, dedicating a vault inside the deployment to barbican is very clean | 15:56 |
noonedeadpunk | And I'm not sure what we can post except ceph pacific there | 15:57 |
jrosser | somehow it feels like we don't yet start work on X :/ | 15:57 |
noonedeadpunk | Yeah:( | 15:57 |
noonedeadpunk | And it's already libraries fix time | 15:58 |
*** rpittau is now known as rpittau|afk | 16:00 | |
spatel | what is holding us to start X rc release? | 16:00 |
noonedeadpunk | Regarding vault - we can have multiple of them if needed and just make role usable on pre-osa step on standalone hardware | 16:00 |
jrosser | yes, thats a good idea | 16:01 |
noonedeadpunk | But that would still require either standalone galera or internal storage | 16:01 |
jrosser | spatel: it's more like needing effort to work on features, we really only just finished up W release for real | 16:01 |
jrosser | we run raft protocol local storage here, seems to be OK | 16:02 |
noonedeadpunk | Once neutron land I think I will do 23.1.0 release | 16:02 |
jrosser | yes, and the venv_build host permissions speed-ip | 16:02 |
jrosser | speed-up | 16:02 |
noonedeadpunk | And python_venv_buold optimization | 16:02 |
spatel | yeah! after 23.1.0 we can focus on X | 16:02 |
noonedeadpunk | Yeah | 16:02 |
noonedeadpunk | Ok, sounds like plan:) | 16:03 |
noonedeadpunk | #endmeeting | 16:03 |
opendevmeet | Meeting ended Tue Aug 24 16:03:35 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:03 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-08-24-15.00.html | 16:03 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-08-24-15.00.txt | 16:03 |
opendevmeet | Log: https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-08-24-15.00.log.html | 16:03 |
spatel | May i know what new features we are talking about for X ? | 16:04 |
noonedeadpunk | That's what we talked about on ptg https://etherpad.opendev.org/p/osa-xena-ptg | 16:05 |
noonedeadpunk | Btw I'm not sure if we will do first 2 points of prio list :D | 16:06 |
spatel | :) | 16:09 |
spatel | i would like to be part of PTG group do you have separate IRC group to conduct these kind of discussion :) | 16:10 |
spatel | >> adding prometheus support to galera/haproxy (why only for galera and haproxy and not others?) | 16:11 |
noonedeadpunk | spatel we have ptg sessions along with other projects and it's open for all interested parties | 16:25 |
noonedeadpunk | There's some built-in options that just needs to be enabled iirc | 16:26 |
noonedeadpunk | For haproxy/galera, so minimum efforts needed for that | 16:27 |
noonedeadpunk | For others exporters need to be deployed and I guess it's out of OSA scope, but probably candidate for ops | 16:27 |
jrosser | spatel: https://www.openstack.org/ptg/ | 16:29 |
opendevreview | Merged openstack/openstack-ansible master: Move galera tasks to pre_tasks https://review.opendev.org/c/openstack/openstack-ansible/+/805193 | 16:31 |
opendevreview | Merged openstack/openstack-ansible master: Add integrated build job to use in sahara repo https://review.opendev.org/c/openstack/openstack-ansible/+/802457 | 16:31 |
opendevreview | Merged openstack/openstack-ansible master: Add heat service when scenario includes sahara https://review.opendev.org/c/openstack/openstack-ansible/+/802535 | 16:31 |
spatel | noonedeadpunk jrosser thanks! | 16:49 |
dmsimard | noonedeadpunk: I seem to recall deploying ara as part of OSA was a goal somewhere -- I was wondering if there was a spec or something I could look at ? Just out of curiosity and perhaps to provide advice :) | 17:43 |
jrosser | dmsimard: we have literally one line of text at the bottom of here, https://etherpad.opendev.org/p/osa-xena-ptg, no more | 18:16 |
jrosser | -ENOTIME | 18:16 |
mgariepy | anything needs some attention ? | 18:22 |
dmsimard | jrosser: ah, thanks -- I do not have sufficient bandwidth to commit to this right now but I did want to at least point out that there was an ansible collection with roles to deploy the API server part of ara: https://github.com/ansible-community/ara-collection/ it's what we use for integration testing ara itself and for deploying | 18:53 |
dmsimard | demo.recordsansible.org | 18:53 |
dmsimard | I suppose in the context of OSA, it may be simpler to deploy ara from a container image instead but I don't know enough about OSA to tell | 18:53 |
dmsimard | I meant to look at the spec to see if there were any gaps to fill in the collection that we could iron out ahead of time | 18:59 |
dmsimard | if you'd rather not use a collection that's cool too, but it's there if you need it :p | 19:00 |
noonedeadpunk | I bet I missed first part despite having znc... | 19:06 |
noonedeadpunk | What spec ?:) | 19:06 |
* noonedeadpunk read through eavesdroo | 19:10 | |
noonedeadpunk | Nah, it's not easier to use container image | 19:10 |
noonedeadpunk | Regarding collection - need to look through it:) But we haven't really started X development as indeed enotime | 19:11 |
noonedeadpunk | But I still want to get ability to deploy Ara out of the box for logging OSA later on | 19:12 |
dmsimard | noonedeadpunk: ok! feel free to reach out when you do start working on it so I can save you time and point you in the right direction :) | 19:14 |
dmsimard | fwiw the "standard" configuration provided by the collection ships gunicorn for the backend and nginx for proxying, I think there is a preference for uwsgi in OSA ? I know ara works with uwsgi but it's not supported in the collection yet | 19:15 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!