| *** b3lab is now known as ierdem | 06:49 | |
| *** pto is now known as ptoft | 10:53 | |
| ptoft | I need to upgrade from nautilus to octopus. Should I use the rolling upgrade playbook? | 10:58 |
|---|---|---|
| spatel | noonedeadpunk did we release new 23.2.0 ? | 13:36 |
| noonedeadpunk | spatel: we did 23.1.0 | 13:37 |
| noonedeadpunk | never had plans for 22.2.0 yet | 13:38 |
| spatel | i am already running 23.1.0 in lab and waiting for 23.2.0 | 13:38 |
| spatel | when are we start working on Xena ? | 13:38 |
| noonedeadpunk | 23.1.0 has been released week ago... https://opendev.org/openstack/releases/commit/8fde3038fe82d8990daf9710ac1f03bb27c84ff9 | 13:39 |
| jrosser | spatel: the work on xena is continuous | 13:41 |
| spatel | nice!! | 13:41 |
| jrosser | it kind of starts the moment the W branch is made, on master | 13:41 |
| jrosser | but its obviously requiring effort to achieve things | 13:41 |
| noonedeadpunk | We just didn't put a lot of efforts into it since I guess we have lack of time due to internal needs | 13:42 |
| spatel | assuming we won't see any more 23.x.x moving forward | 13:42 |
| spatel | I understand :) | 13:42 |
| noonedeadpunk | well, I believe there would be bugfixes anyway | 13:42 |
| jrosser | spatel: there is a point release every ~2 weeks on all the supported stable branches | 13:42 |
| noonedeadpunk | and it will move forward at least because upstream version will be bumped | 13:42 |
| spatel | I am deploying OVN in production soon, currently running load-test | 13:42 |
| noonedeadpunk | btw I need to push bumps... | 13:42 |
| noonedeadpunk | jrosser: when you have time, can you check pls yestarday meeting? https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-09-07-15.02.log.html | 13:43 |
| noonedeadpunk | need your opinion on that before doing smth stupid :p | 13:44 |
| jrosser | ah ok yes will have a look | 13:45 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Set galera to use TLS for connections by default https://review.opendev.org/c/openstack/openstack-ansible/+/807880 | 14:33 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Use ansible-role-pki to generate SSL certificates https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/807717 | 14:33 |
| noonedeadpunk | regarding ^ I have weird issue, when I provide ssl_ca in my.cnf for client, I get `SSL connection error: unable to get issuer certificate` | 15:14 |
| noonedeadpunk | without it ssl works like a charm | 15:14 |
| noonedeadpunk | any thoughts? | 15:15 |
| noonedeadpunk | As I'd rather fix this then adjust connection string in each role https://opendev.org/openstack/openstack-ansible-os_glance/src/branch/master/templates/glance-api.conf.j2#L39 | 15:16 |
| *** tosky is now known as Guest6702 | 15:22 | |
| *** tosky_ is now known as tosky | 15:22 | |
| noonedeadpunk | it feels like we missing some info in CA | 15:22 |
| noonedeadpunk | like authority_cert_issuer... | 15:25 |
| noonedeadpunk | `The keyIdentifier is composed of the 160-bit SHA-1 hash of the value of the BIT STRING subjectPublicKey (excluding the tag, length, and number of unused bits)` um.... | 15:37 |
| opendevreview | Merged openstack/openstack-ansible-os_neutron stable/wallaby: Set OVN jobs to voting https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/806084 | 17:57 |
| jrosser | noonedeadpunk: see https://mariadb.com/kb/en/securing-connections-for-client-and-server/#enabling-two-way-tls-for-mariadb-clients | 18:47 |
| jrosser | are you trying "one way" or "two way" TLS? | 18:47 |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.org is going offline momentarily for a host migration and zuul upgrade, downtime should be only a few minutes. | 21:04 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!