| noonedeadpunk | hamburgler2: we're just implementing their support for osa. so I don't think anybody use them for production yet | 06:35 |
|---|---|---|
| noonedeadpunk | mornings | 06:35 |
| *** Adri2000_ is now known as Adri2000 | 07:55 | |
| jrosser | morning | 08:56 |
| jrosser | `{0} setUpClass (barbican_tempest_plugin.tests.api.test_secret_consumers.SecretConsumersTest) ... SKIPPED: The microversion range[1.1 - latest] of this test is out of the configuration range[None - None].` | 08:56 |
| jrosser | hmm | 08:56 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: Add barbican api microversion limits for tempest tests https://review.opendev.org/c/openstack/openstack-ansible/+/897002 | 09:06 |
| noonedeadpunk | weird that this is required.... | 09:27 |
| noonedeadpunk | like it shouldn't be very hard to get microversion from api... | 09:27 |
| noonedeadpunk | rather then rquire user input | 09:28 |
| jrosser | i wonder if we still have runaway log files of some kind with rocky | 09:34 |
| jrosser | a few timout jobs during log upload | 09:34 |
| noonedeadpunk | on master? | 10:04 |
| jrosser | oh im confused again, it's an upgrade job https://review.opendev.org/c/openstack/openstack-ansible-os_aodh/+/895690?tab=change-view-tab-header-zuul-results-summary | 10:05 |
| jrosser | and they all take ages here | 10:05 |
| noonedeadpunk | well, telemetry jobs were the heavy ones... | 10:21 |
| jrosser | damiandabrowski: there is a very strange tls upgrade job failure here https://zuul.opendev.org/t/openstack/build/8b236b6ef8594712a8d6deddd3e426cb/log/job-output.txt#30685 | 10:41 |
| jrosser | `The container-infrastructure-management service for default:RegionOne exists but does not have any supported versions.` | 10:42 |
| jrosser | which means we end up here https://opendev.org/openstack/openstacksdk/src/branch/master/openstack/service_description.py#L270-L271 | 10:44 |
| damiandabrowski | thanks jrosser, I'll have a look today | 10:56 |
| cloudnull | happy Monday! | 12:52 |
| cloudnull | what's good cloud? | 12:52 |
| jrosser | working cloud is good cloud | 12:59 |
| mgariepy | anyone see galera error : Aborted connection 3463920 to db ... (Got timeout reading communication packets) | 13:00 |
| mgariepy | on 2023.1 almost latest | 13:01 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-ceph_client master: Allow to distribute custom key with the role https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/897046 | 13:10 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-plugins master: Add openstack_resources role skeleton https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/878794 | 13:13 |
| cloudnull | jrosser that's a fact :D | 13:18 |
| cloudnull | mgariepy nope - I've seen some connection resets recently when tooling with keystone, but nothing about an aborted connection. | 13:18 |
| cloudnull | qq - is there work happening to update the RBAC layout? I've been seeing some of the log notices stating we're still using the system scope - I was going to have a look at what all needs to happen there, but didn't know if that was already being worked on? | 13:20 |
| mgariepy | mostly nova | 13:20 |
| mgariepy | for the connection reset. | 13:20 |
| cloudnull | example of the RBAC error - Oct 01 23:50:29 compute-0 keystone-wsgi-public[1939984]: 2023-10-01 23:50:29.508 1939984 WARNING keystone.common.rbac_enforcer.enforcer [None req-1b0370a7-1f72-4e15-b10f-b99eed85aea0 5d155278fe6b48a9919a5c9bb68f7718 192f9fa5cae445348bcc9030ad6b9720 - - default default] Deprecated policy rules found. Use | 13:20 |
| cloudnull | oslopolicy-policy-generator and oslopolicy-policy-upgrade to detect and resolve deprecated policies in your configuration. | 13:20 |
| jrosser | cloudnull: i expect this all needs more eyes really | 13:27 |
| cloudnull | i just started to have a look - going to start seeing what's what | 13:28 |
| noonedeadpunk | cloudnull: rbac work is quite confusing at least for me | 13:36 |
| noonedeadpunk | like there was great concept (as for me) with system scopes, but all that work was reverted basically | 13:37 |
| noonedeadpunk | with kinda no good alternative offered | 13:37 |
| noonedeadpunk | So I lost where it's heading nowadays tbh | 13:37 |
| cloudnull | It's pretty confusing for me too. I'm going to see if I can resolve all the warnings within my local env and then figure out what's the delta and push it back up. | 13:39 |
| hamburgler2 | noonedeadpunk: RE: Quorum Queues - Cool :) - I have been playing with them and the throughput on messages per second is quite impressive, seeing anywhere from 50-100% improvement - all while seeing CPU usage of 30% less compared to mirrored queues. Mind you that is synthetic benchmarks but still pretty promising. | 13:48 |
| noonedeadpunk | yeah, on paper it is indeed super cool. will see how it's in prod :) | 14:16 |
| opendevreview | Andrew Bonney proposed openstack/openstack-ansible-os_neutron stable/2023.1: Fix conditional for non-OVN deployments https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/897049 | 14:18 |
| hamburgler2 | noonedeadpunk: convinced my team to roll it out to staging env :) will see if anything blows up there | 14:23 |
| noonedeadpunk | hamburgler2: well, I think most exciting parts are not merged yet to oslo.messaging jsut in case | 14:25 |
| noonedeadpunk | https://review.opendev.org/q/topic:bug-2031497 | 14:25 |
| noonedeadpunk | If you haven't seen that topic yet :) | 14:25 |
| noonedeadpunk | like they should improve openstack behaviour with quorum queues | 14:26 |
| hamburgler2 | oh nice, thank you! I was actually wondering about the fanout queues as well as they were still appearing as classic | 14:26 |
| hamburgler2 | very exciting :) | 14:27 |
| jrosser | feels like we do this in CI https://opendev.org/openstack/openstack-ansible-repo_server/src/branch/master/tasks/repo_install_constraints.yml#L24 | 14:30 |
| jrosser | when i would expect it to use the next task with file:// | 14:30 |
| jrosser | hrrm right ok thats in upgrade jobs | 14:32 |
| admin1 | checking if you guys know how to limit a specific external network to specific tenants only | 14:47 |
| jrosser | can neutron RBAC do that? | 14:52 |
| andrewbonney | Something like 'openstack network rbac create --target-project <id> --action access_as_shared --type network <id>' - we use that for a similar purpose | 14:59 |
| admin1 | thanks . .i will give it a try | 15:06 |
| opendevreview | Merged openstack/openstack-ansible-os_barbican master: Fix example playbook linter errors https://review.opendev.org/c/openstack/openstack-ansible-os_barbican/+/896797 | 16:21 |
| opendevreview | Merged openstack/openstack-ansible-os_tempest master: Fix linters https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/896907 | 16:35 |
| opendevreview | Merged openstack/openstack-ansible-lxc_hosts master: Fix linter error https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/896750 | 20:52 |
| damiandabrowski | jrosser: i tried to reproduce magnum tls upgrade error on my local AIO and the playbook failed only on first run, during second attempt it worked perfectly fine...weird | 21:12 |
| jrosser | damiandabrowski: it is strange isnt it | 21:17 |
| damiandabrowski | i'll dig more tomorrow, unfortunately today was shorter than I expected... :D | 21:21 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!