Tuesday, 2023-08-08

noonedeadpunkmornings o/08:08
hamidlotfi_mornings 08:09
admin1\o08:57
damiandabrowskihi!09:02
opendevreviewKe Niu proposed openstack/ansible-role-pki master: Use TOX_CONSTRAINTS_FILE  https://review.opendev.org/c/openstack/ansible-role-pki/+/89075009:30
opendevreviewKe Niu proposed openstack/ansible-role-systemd_service master: Use TOX_CONSTRAINTS_FILE  https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/89075109:36
NeilHanlonmornin' folks11:25
noonedeadpunko/ heya11:34
mgariepyhey NeilHanlon how are you doing ?12:07
mgariepyNeilHanlon, did you saw : https://linuxcontainers.org/incus/12:07
NeilHanlondoing alright, thanks! just got back from fedora's FLOCK conference12:09
NeilHanlonI did see that! very cool :D12:09
mgariepytheir roadmap is very nice too.12:11
mgariepyremove maas, candid, canonical RBAC, lol12:12
NeilHanlonhah12:13
NeilHanlonMaaS always felt... wrong.. to me12:13
mgariepyi did tried it a couple of time.12:13
mgariepybut meh, cli command that needs jq expression to filter stuff is not so great.12:13
mgariepyanyone here have manila ?12:14
mgariepyi do have an issue with multiple share fs on cephfs.12:14
mgariepyi want to see the difference between multiple pool configuration, multiple EC, 3x,2x etc.12:15
mgariepyi started with 2 ec config, 12:15
mgariepywhen i create the shares it does seems to do the right thing on the ceph backend (it create the FS at the correct place and manage the key correctly.12:16
mgariepybut when i try to mount them one is working correctly and the other just fails with some cryptic errors.12:17
* noonedeadpunk using maas12:29
noonedeadpunkWell, we don't have manila yet, but didn't have big troubes with cephfs, except huge resource usage by ceph-mds12:31
noonedeadpunkTHough, we don't use EC pools12:31
mgariepydo you have multiple pool on the clusteR?12:31
mgariepymy 2 fs have the exact same config 12:34
noonedeadpunkyeah, there's totally couple of pools there12:35
noonedeadpunkbut are you able to just mount cephfs on 2 destinations even without manila?12:36
noonedeadpunkalso - you have manila+ganesha setup?12:36
mgariepyno ganesha12:36
mgariepyonly cepfs.12:36
noonedeadpunkah, so your VMs accessing ceph storage network?12:36
mgariepyyes12:36
mgariepy2 shares, one works not the other12:36
noonedeadpunkit should be pretty much simple then...12:36
mgariepysame ceph cluster for both12:37
mgariepyi know haha12:37
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-galera_server master: Remove galera-4 package during upgrades to force version up  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/89078712:41
opendevreviewAndrew Bonney proposed openstack/ansible-role-pki master: Add defaults for owner/group/mode on pki_install_host  https://review.opendev.org/c/openstack/ansible-role-pki/+/89079313:15
noonedeadpunk#startmeeting openstack_ansible_meeting15:00
opendevmeetMeeting started Tue Aug  8 15:00:01 2023 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:00
noonedeadpunk#topic rollcall15:00
noonedeadpunko/15:00
damiandabrowskihi!15:00
* noonedeadpunk have some troubles with loading gerrit15:03
jamesdentono/15:03
damiandabrowskiit doesn't work for me as well15:04
noonedeadpunkNot sure if I'm happy or sad now...15:04
damiandabrowski(it loaded after some time and now it looks ok)15:04
mgariepyit works ok for me.15:05
noonedeadpunkyup, jsut loaded15:05
noonedeadpunkthanks, mgariepy, you've fixed it:)15:06
noonedeadpunkshould we go through the bugs? We had a couple during the last week15:06
noonedeadpunkmost were created by andrewbonney though :D15:06
andrewbonneySorry!15:06
mgariepylol15:06
noonedeadpunk#topic bug triage15:06
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/203074815:06
noonedeadpunkI've already replied there though.15:07
NeilHanlono/ late :) 15:08
noonedeadpunkTo be frank, I kinda don't know how to fix that either with fully re-writing clustercheck to python with async (like with asyncio) or with ProxySQL15:08
noonedeadpunk*except these 215:08
noonedeadpunkAlso dunno if anyone else is bothered enough to invest there15:09
noonedeadpunkI guess, you should be able to just filter out `mariadbcheck` completely?15:09
noonedeadpunkSo I had no plans investing into fix soonish15:11
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/202925315:11
noonedeadpunkthis one is fair one...15:11
noonedeadpunkthough I didn't know that non-root will work, as we don't have `become` anywhere in our playbooks15:12
andrewbonneynot sure if we have some extra config that might be enabling that15:12
andrewbonneyI've started a potential patch but about to go away for a week so won't get chance to do more for a bit15:13
noonedeadpunkaha, I see15:13
noonedeadpunkCan't promise I will look into that either :(15:13
noonedeadpunkBut would be great to get this patched sooner then later to be frank15:14
noonedeadpunkAs new deployments are indeed a concern15:14
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/202894615:14
noonedeadpunkI think proposed patch is really good15:15
noonedeadpunkSeems we've jsut somehow overlooked that for ubuntu :(15:15
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/202948615:16
noonedeadpunkI think, we can add step for marking _member_ an implied in upgrade steps15:16
noonedeadpunkAnd we should really do a clean-up anyway15:16
NeilHanlonnoonedeadpunk: i have an idea w.r.t. mariadb clustercheck... will throw in a DNM change15:16
noonedeadpunkI can take a look there...15:17
noonedeadpunkNeilHanlon: oh, that would be extermely sweet15:17
noonedeadpunkI have an env where I'll be able to test that15:17
NeilHanlonin theory, SyslogIdentifier can be set on the unit to force a name.. i think it even works on templated units15:17
noonedeadpunkNeilHanlon: it doesn't look like it does from what I see15:21
NeilHanlon:\ welp.. off to systemd internals :)15:22
noonedeadpunkUnless I'm doing smth wrong https://paste.openstack.org/show/b6VJZX5etkWNilqGam05/15:22
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/202880915:23
noonedeadpunkWe've already discussed this one couple of weeks ago15:23
noonedeadpunkI did not have any reply/discussion with keystone team, despite it seems that Dave has picked up the bug15:24
noonedeadpunkOr well, at least saw it15:24
NeilHanlonah.. found the context. looks like it can be fairly trivially done w/ a simple python change to redirect the syslog target15:24
NeilHanlon#link https://github.com/systemd/systemd/issues/868715:24
NeilHanlon#link https://github.com/systemd/systemd/issues/1356615:24
noonedeadpunkWell, if a service was calling python daemon - there won't be such problem, as we could set access=no then ...15:26
NeilHanlonright, clustercheck is bash.. nvm15:26
noonedeadpunkwas worth trying though...15:26
noonedeadpunkSo, for the 2028809 I still think it's worth to change the default to use scrypt rather then bcrypt which is default in keystone15:28
noonedeadpunkAs default limitation to passwords with length 54 is not fun in 202315:28
NeilHanlonyeah agreed15:28
noonedeadpunk*to password length15:28
noonedeadpunkgiven old password will resume working (which are not longer then 54 ofc) - we at least prevent everyone from further frustration15:29
noonedeadpunkAnd we likely should land the fix, as it's blocking backports to 2023.1 which we have quite a few by now15:29
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/202920915:30
noonedeadpunkdamiandabrowski: will you be able to have a look at this one?15:30
noonedeadpunkas it sounds quite fair15:31
damiandabrowskii think the fix is already proposed: https://review.opendev.org/c/openstack/openstack-ansible/+/88902315:31
noonedeadpunkaha15:31
damiandabrowskibut since stable/2023.1 branch is blocked we couldn't merge it :D 15:31
noonedeadpunkok, gotcha15:32
noonedeadpunkandrewbonney:  ^15:32
andrewbonneyTa, hadn't spotted that15:32
noonedeadpunk#topic office hours15:33
noonedeadpunkWe have couple of topics that are ongoing.15:33
noonedeadpunkFirst - simple one is https://review.opendev.org/q/topic:osa%252Fdb_port15:33
noonedeadpunkI was thinking to also backport that at least to 2023.1 or maybe even zed, as it's pretty much trivial15:34
noonedeadpunkBut kinda nasty15:34
damiandabrowski+115:37
noonedeadpunknext are linters for core-2.1515:37
noonedeadpunk#link https://review.opendev.org/q/topic:osa%252Fcore-2.1515:37
noonedeadpunkThese get to merge conflicts quick enough 15:37
damiandabrowskii'll review them during the evening15:38
andrewbonneynoonedeadpunk: unless I missed it I think there was one more bug too: https://bugs.launchpad.net/openstack-ansible/+bug/202894415:39
noonedeadpunkAh, sorry, I have missed this one indeed15:39
noonedeadpunkyes, this is actually a good one15:40
damiandabrowskiyeah, nice catch andrewbonney 15:41
noonedeadpunkI kinda thought that haproxy will fail due to conflict to bind 2 fronts the same way to be frank15:41
noonedeadpunkbut yeah we should fix this15:42
andrewbonneyConsidering the amount of change to haproxy setup it worked really well in general15:43
noonedeadpunkok, that's nice to hear:)15:44
noonedeadpunkI bet horizon wasn't spotted as we jsut don't use it hehe15:44
noonedeadpunkOk, last but not least topic is quorum queues15:45
noonedeadpunk#link Saying that, I'm not sure - have we covered vars scope good enough in release notes? That stuff defiend for haproxy_all should be moved else15:45
noonedeadpunk#link https://review.opendev.org/q/topic:osa%252Fquorum_queues15:45
noonedeadpunkThis is smth that would be great to get in for this release15:46
opendevreviewMerged openstack/openstack-ansible-os_nova master: Deprecate nova_ram_weight_multiplier  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/88817715:50
damiandabrowskinot sure if I'll be able to review it this week as i need to learn more about quorum queues before, but I added it to TODO :D 15:52
noonedeadpunkSure, we have some time for that15:52
damiandabrowskialso, feel free to assign me to #2028944 if you want15:53
noonedeadpunkAnd yeah, let's try to unblock 2023.1 soonish, along with fixed bugs we likely can do 27.1.015:53
noonedeadpunkdamiandabrowski: can you kindly assign yourself? As I don't have proper "a" on my keyboard to search :D15:54
damiandabrowskią - you can copy that xD15:55
damiandabrowskijust kidding, done15:55
noonedeadpunklol15:55
noonedeadpunkyeah, will paste it somewhere safe :D15:55
noonedeadpunkI'm also working on some article to superuser regarding scaling clusters with OSA15:56
noonedeadpunknow for rabbit/galera clusters15:56
noonedeadpunkWanna move smth from there to our docs as well15:56
noonedeadpunk(once it will be ready)15:57
noonedeadpunk#endmeeting15:58
opendevmeetMeeting ended Tue Aug  8 15:58:21 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:58
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-08-08-15.00.html15:58
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-08-08-15.00.txt15:58
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2023/openstack_ansible_meeting.2023-08-08-15.00.log.html15:58
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Replace libgcc1 with libgcc-s1 for Debian  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/89082017:53
*** dviroel_ is now known as dviroel22:13

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!