Tuesday, 2024-08-27

noonedeadpunkah, thanks for testing and taking care of rest :)06:55
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia stable/2024.1: Ensure Octavia communicates with Neutron through internal URL  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/92723207:01
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia stable/2023.2: Ensure Octavia communicates with Neutron through internal URL  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/92723307:02
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia stable/2023.2: Ensure Octavia communicates with Neutron through internal URL  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/92723307:03
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Ensure proper permissions for OVN Metadata service  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/92718307:16
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_skyline master: DNM  https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/92723808:02
jrossero/ morning08:59
noonedeadpunko/09:08
opendevreviewMerged openstack/openstack-ansible-tests master: Use "become: True" when installing ansible collections  https://review.opendev.org/c/openstack/openstack-ansible-tests/+/92614909:19
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_skyline master: Enable SSLProxyProtocol for internal backends behind TLS  https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/92724809:57
noonedeadpunkI'm not 100% sure about this patch, as I don't like to touch things that were there for ages, but it seems like it makes some sense to me: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/92527209:59
noonedeadpunkand also solves functional jobs failure10:00
noonedeadpunkbut I'm not 100% about it's sanity and if it's not the case where I just streamlined for the result10:00
jrosseri was also wondering if we need to copy the whole module parameters section over from the upstream ssh plugin into ours10:02
jrosserto replace what we have with an exact copy of the original one from todays ansible10:02
noonedeadpunkprobably makes sense10:02
jrosserthat did break recently with one parameter needing updating but there could be other things there too10:02
noonedeadpunkshould we consider this as being ready? https://review.opendev.org/q/topic:%22osa/apt_key%2210:05
noonedeadpunkI also made an attempt to "convert" and gave up eventually, so we can't make it much better rather then with a breaking change10:05
noonedeadpunkif we want to avoid breaking things, we just need to introduce new vars for deb822 and leave old ones as empty.10:06
jrosseri also looked at converting before and the deb822 stuff is so completely different10:54
noonedeadpunk++11:02
jrosseri guess it depends what kind of breakage we expect - if we leave the old vars then things keep working and will fail silently at some point in the future11:03
jrosseror we could assert on some old type data with `repo` or `filename` in the dict11:04
noonedeadpunkthat's actually also an option11:05
noonedeadpunkas I'd assume things gonna start failing only with a next OS release11:05
noonedeadpunk(hope that no major apt version will get backported)11:06
noonedeadpunkwe won't be able to cleanup old repo configs then. Or it will be quite tricky to do11:06
noonedeadpunkas usecase we're talking about is overrides in environments. so maybe at least we need to assert old type data and print out reasonable failure message?11:08
noonedeadpunkthis won't lead to extra complexity we need to maintain and will point to what is actually wrong with the variable11:09
jrosseryes11:10
jrosserperhaps global releasenote plus assert is what to do 11:11
noonedeadpunk++11:11
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-repo_server master: Remove references to lsync and rsync  https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/92725911:27
opendevreviewMerged openstack/openstack-ansible master: Remove extra slash character from horizon haproxy healthcheck url.  https://review.opendev.org/c/openstack/openstack-ansible/+/92627511:57
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/2024.1: Remove extra slash character from horizon haproxy healthcheck url.  https://review.opendev.org/c/openstack/openstack-ansible/+/92726411:59
noonedeadpunk#startmeeting openstack_ansible_meeting15:01
opendevmeetMeeting started Tue Aug 27 15:01:00 2024 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:01
noonedeadpunk#topic office hours15:01
noonedeadpunkah, it should be roll call, but anyway15:01
jrossero/ hello15:02
NeilHanlono/ 15:03
NeilHanlonhiya15:03
noonedeadpunkso, current blocker for our progress on moving playbooks to the plugins repo, is that functional jobs for it is blocker15:09
noonedeadpunk*failiing15:09
mgariepyhey15:09
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/92527215:10
noonedeadpunkbut it needs some attention as I'm not 100% sure how valid is what I'm proposing there15:12
noonedeadpunkanother thing I wanted to ask, if there's some volunteer for the project PTL role? 15:17
NeilHanloni will take a look at that and review15:18
NeilHanlonfor PTL, I don't have the time right now, I think :( 15:18
noonedeadpunkyeah, totally get that15:24
noonedeadpunkbut always good to ensure/encourage others to step in if there's an interest15:25
NeilHanlonagree15:27
noonedeadpunkwe were also reported couple of bugs. one is regarding missing ssl proxy for a Skyline15:29
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/207790415:29
noonedeadpunkanother one about me breaking ovn metadata service on upgrade to 2024.115:30
noonedeadpunk#link https://bugs.launchpad.net/openstack-ansible/+bug/207768415:30
noonedeadpunkboth of them having patches by now15:30
noonedeadpunkbut that also reminded me about octavia keys situation which apparently break upgrades15:31
* noonedeadpunk thinking on finally doing 29.1.015:31
jrosserthat is for ssl between apache and gunicorn(?) whatever runs skyline?15:32
noonedeadpunkyeah15:34
noonedeadpunkor well15:34
noonedeadpunkthere're proxies between apache and internal endpoints for glance/cinder/etc15:34
noonedeadpunkie https://zuul.opendev.org/t/openstack/build/3486677dad294a02963eb9338560d2ed/log/logs/etc/host/apache2/sites-enabled/skyline.conf.txt#48-5215:35
jrosserhrrm15:36
jrosserthat is interesting15:37
jrosserthose are externally accessible paths15:38
noonedeadpunkthese should be internal actually15:40
noonedeadpunkas they go from https://opendev.org/openstack/openstack-ansible-os_skyline/src/branch/master/tasks/skyline_post_install.yml#L5815:40
bjoerntJust got an email that there is no PTL for OSA for the next cycle, no one has come forward yet?15:42
jrosseri think i was interested in how the react/js stuff in the browser does/does not interact with that15:43
jrosserbecause there could be things we have in place in haproxy that are bypassed if those paths are externally accessible15:44
bjoernt@noonedeadpunk Just got an email that there is no PTL for OSA for the next cycle, no one has come forward yet?15:50
noonedeadpunkWell, I was giving room for volunteers - let's put it this way :)15:51
bjoerntI know full well how much time this take, its a full time job lol15:51
noonedeadpunkyeah, and it's kind of better for project for PTL to change from time to time as well15:52
noonedeadpunkjrosser: well, I think we indeed can optimize and handle all these paths on haproxy if we want to15:52
noonedeadpunkand we were even talking about these, but I failed to make it work15:53
jrosseri need to have a try with skyline15:53
noonedeadpunkI've spent just couple of hours though, so gave up relatively quickly15:53
jrosserbut the sso situation is so badly documented i am not sure about it15:53
noonedeadpunkit's really not only sso that's not documented nicely...15:56
noonedeadpunk#endmeeting16:09
opendevmeetMeeting ended Tue Aug 27 16:09:40 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:09
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2024/openstack_ansible_meeting.2024-08-27-15.01.html16:09
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2024/openstack_ansible_meeting.2024-08-27-15.01.txt16:09
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2024/openstack_ansible_meeting.2024-08-27-15.01.log.html16:09
jrosseri wonder why the user survey does not allow you to say you run bobcat or caracal16:32
noonedeadpunkwhat? it was always possible before16:34
jrosserseems to be antelope as the newest 16:35
jrosserwell "continuous deployment" is the option before antelope16:35
noonedeadpunk /o\16:36
noonedeadpunkyeah, seems it was never updated since last year....16:36
noonedeadpunkyeah, worth raising it today on tc 16:37
jrossercan select kvm(ppc) but not arm16:38
jrosserwtf16:38
noonedeadpunkyeah, frankly - I didn't review state of survey, though probably should have double checked that :(16:40
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Remove superfluous quote from enabled_provider_agents  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/92730216:48
jrosserand i have to fill out all the generic questions once per cloud too /o\17:04
jrosserph my17:04
jrosser*oh my17:04
noonedeadpunkthis is actually exactly the reason why I never managed to fill in all regions....17:11
noonedeadpunkwas the deadline today?17:12
jrossertomorrow17:12
jrosseri just see in #neutron they are discussing deleting linuxbridge so i need to make sure to record that we still do not migrate from that17:13
noonedeadpunk++17:13
noonedeadpunk"I" also have 3 regions with it 17:13
jrosserand bizarrely, linuxbridge is an option but ovs is not17:13
noonedeadpunkor at least I have 3 regions to fill in with LXB17:13
noonedeadpunkOVS is an option17:13
noonedeadpunkmaybe ovn is not?17:13
jrosserin "Which OpenStack Network (Neutron) drivers are you using?"17:14
noonedeadpunkthere should be ML217:20
noonedeadpunkand then at the end you;ll have `Since you chose Modular Layer 2 Plugin (ML2) in the previous question, what mechanism driver(s) are you using`17:21
noonedeadpunkas all these are ML2 anyway17:21
noonedeadpunkovn/ovs/lxb17:21
hamburglerIs this a public survey?17:30
noonedeadpunkyeah17:36
noonedeadpunkhttps://www.openstack.org/user-survey/17:36
hamburglerty :)17:49
bjoerntopenvswitch is listed separately but yes its orchestrated by ML, not sure why they have not separated out OVN especially as  opendaylight is listed19:31
noonedeadpunkovn is also in the down list btw, where LXB is19:32
bjoerntunder neutron driver? not seeing it there 19:34
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Define ovn provider agent when OVN is used  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/92731619:34
noonedeadpunkthere's very last row if you select ML2 to choose which driver under ML2 it is19:34
noonedeadpunkhttps://i.imgur.com/Cc5n12a.png19:36
bjoerntahh its at the end under ML220:04

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!