Tuesday, 2026-09-01

opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-os_magnum master: Trust CAPI management cluster CA in system trust store for Azimuth driver  https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/99762102:03
opendevreviewMerged openstack/openstack-ansible master: Add Zookeeper for Freezer scenario  https://review.opendev.org/c/openstack/openstack-ansible/+/99879404:08
opendevreviewOpenStack Proposal Bot proposed openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/100321204:42
opendevreviewMerged openstack/openstack-ansible-os_octavia master: Add information about manage configuration by OSA  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/99170704:43
opendevreviewMerged openstack/openstack-ansible master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/openstack-ansible/+/100321207:39
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Remove Neutron LBaaS from inventory  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98259708:56
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294209:19
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294209:20
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294209:41
opendevreviewChristian Mattsson proposed openstack/openstack-ansible stable/2026.1: Bump netcommon collection to fix missing ipaddr filter  https://review.opendev.org/c/openstack/openstack-ansible/+/100324309:47
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Update ansible_managed variable  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/97289610:28
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294210:41
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_cinder master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/100324710:43
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_cinder master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/100324710:44
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_horizon master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/99726110:45
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_horizon master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/99726110:45
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: Disable and mask NetworkManager on RedHat distributions  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/100308810:45
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_keystone master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/100324810:47
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_keystone master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/100324810:47
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_manila master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/100324910:49
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_manila master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/100324910:49
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_neutron master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/100325010:51
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_neutron master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/100325010:51
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_nova master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/100325210:53
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_nova master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/100325210:54
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/100325310:55
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/100325310:56
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294211:09
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: WIP: Bump zun-ui  https://review.opendev.org/c/openstack/openstack-ansible/+/100228511:22
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: WIP: Bump zun-ui  https://review.opendev.org/c/openstack/openstack-ansible/+/100228511:24
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: Bump zun-ui and zun-tempest-plugin  https://review.opendev.org/c/openstack/openstack-ansible/+/100228511:25
opendevreviewIvan Anfimov proposed openstack/openstack-ansible stable/2026.1: WIP: Bump octavia  https://review.opendev.org/c/openstack/openstack-ansible/+/100325611:26
opendevreviewIvan Anfimov proposed openstack/openstack-ansible stable/2026.1: WIP: Bump octavia  https://review.opendev.org/c/openstack/openstack-ansible/+/100325611:31
opendevreviewIvan Anfimov proposed openstack/openstack-ansible stable/2026.1: Bump octavia  https://review.opendev.org/c/openstack/openstack-ansible/+/100325611:32
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Remove Neutron LBaaS from inventory  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98259711:32
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294211:48
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Set persistent scheduler jobs directory  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308112:13
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_octavia stable/2026.1: Set resolute distro jobs to NV  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/100248712:15
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Set persistent scheduler jobs directory  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308112:18
opendevreviewDmitriy Chubinidze proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294212:25
opendevreviewIvan Anfimov proposed openstack/ansible-role-systemd_networkd master: docs: add example for configuring host networking via systemd-networkd  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/99294212:26
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Separate API and Scheduler venvs  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308713:08
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/100325313:12
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Update ansible_managed variable  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/97289613:13
opendevreviewOpenStack Proposal Bot proposed openstack/openstack-ansible-os_zun master: Updated from OpenStack Ansible Integrated repository  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98560013:13
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Use public keystone URL for www_authenticate_uri  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98529713:14
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Remove rewrite zun_kuryr_lib_git_repo  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98373913:15
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Remove rewrite zun_kuryr_lib_git_repo  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98373913:15
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Add hashi_vault pki backend support  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98168213:16
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_zun master: Add hashi_vault pki backend support  https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/98168213:16
opendevreviewMerged openstack/openstack-ansible-os_octavia master: Use RHEL OS family for iptables persistence  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/99275813:29
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_octavia stable/2026.1: Use RHEL OS family for iptables persistence  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/100327813:30
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Update pypi documentation for limited envs  https://review.opendev.org/c/openstack/openstack-ansible/+/100123114:00
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_tempest master: Use separated freezer-scheduler venv  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/100329014:55
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Separate API and Scheduler venvs  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308714:55
noonedeadpunk#startmeeting openstack_ansible_meeting15:01
opendevmeetMeeting started Tue Sep  1 15:01:23 2026 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:01
noonedeadpunk#topic rollcall15:01
noonedeadpunko/ hey there15:01
jrossero/ hello15:01
noonedeadpunk#topic releases15:03
noonedeadpunkso I have completely missed 2024.2 EOL deadline15:04
noonedeadpunkand frankly clean forgot about it at all15:04
noonedeadpunkduring this week roles have been EOLed and branches dropped15:04
noonedeadpunknow the only part left is integrated repo15:05
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible/+/100273715:05
noonedeadpunksurprisingly, CI looks quite functional, with exception of upgrade jobs15:05
noonedeadpunkso potentially it should be votable soonish15:05
noonedeadpunksecond part are periodic releases of stable branches15:06
noonedeadpunkfrankly, I am waiting for keystone backports to merge now15:06
noonedeadpunkto make sure new point releases contain fixes for OSSA-2026-037 among other things15:07
noonedeadpunkand keystone CI fails intermittently so far15:07
noonedeadpunkso while we are waiting, we might want to merge the sha bump for octavia specifically, to unblock backports to 2026.115:08
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible/+/100325615:08
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_octavia stable/2026.1: Return ZooKeeper  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/99995715:09
jrosserdone15:09
noonedeadpunkthanks!15:09
noonedeadpunkand I don't have much to add on the topic here15:10
noonedeadpunk#topic office hours15:11
noonedeadpunkSo there was a great patch pushed to the ops repo during previous week15:11
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-ops/+/100272415:11
noonedeadpunkWhile we probably can merge it "as-is" I was thinking to spend couple of hours looking into how we may "collectify" it.15:12
noonedeadpunkBut this can be done as a follow-up as well, for sure15:12
jrosseryes, i think in hindsight andrew feels it would have been better to make it so it runs from the deploy host, rather than independany15:13
jrosserit ended up needing to understand to OSA inventory to get into some neutron containers15:13
noonedeadpunkI guess the question is if we wanna work on this patch or merge it and do follow-ups?15:13
jrosserI think that from our POV this has already taken so much time that we actually need to get on and do the migrations15:14
noonedeadpunkI think I should be able to invest some time into it, as I am personally very interested in the topic 15:15
jrosserThis is probably the most complete description of the steps involved anyone has made15:15
noonedeadpunk++15:15
noonedeadpunkok, I think we can probably merge this and I will propose changes/refactoring as a follow up, to better keep history, and have smth out asap15:16
jrosserYeah, i think it would be good to put something on the ML too at some point15:16
noonedeadpunkI will aim to get some time during this week for it15:17
jrosserIt looks like for us it is mostly all fine in OVN - just OVN FWaaS being stateless is a bit unfortunate15:17
jrosserbut andrew has been looking into that15:18
noonedeadpunkI thought that fwaas does work with ovn these days?15:18
jrosseryes, statless FW instead of connection tracked though15:18
noonedeadpunkas well as vpnaas, just through spawning a good old namespace and wasting another IP15:19
jrosserthe old one that ran on the l3 agent was more powerful/easier for our use case15:19
jrosseri think that there is an assumption that FW rules can be == to security groups15:19
jrosserand thats kind of fine for VM15:19
jrosserbut when you have some random harware appliances also on your tenant networks next to the VM then you need something thats not security groups on a neutron port15:20
noonedeadpunkyeah, totally15:21
noonedeadpunkfor some reason I thought that it was the same iptables in ip netns before the l3 router, so it had same feature set15:22
noonedeadpunkbut we're not using fwaas so I didn't dig deep enough there15:23
noonedeadpunkthis week I didn't have much progress on any of planned things, except finding couple of bugs in os_freezer role15:25
noonedeadpunkfirst one is that freezer-api and freezer are 2 different packages, which I tried to wrap around with logic, and install them only whenever needed15:26
noonedeadpunkwhich actually resulted in rebuilding requrements file, and triggerring venv/wheels rebuild as a result15:26
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308715:26
noonedeadpunkAnd second issue I found in there, is that jobs directory, where scheduler places cached jobs from API, was in /etc/freezer, which is a symlink to venv, so when venv is being rebuild, these state files are lost.15:27
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308115:28
opendevreviewMerged openstack/openstack-ansible-os_freezer master: Implement freezer-scheduler clustering support  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/99871815:29
noonedeadpunkwe're having really good progress in deploying freezer in production now15:29
noonedeadpunkstill quite some work to do obviously15:29
noonedeadpunkand I am expecting to have some more time on my hands once we're done with it.15:30
jrosseri should look at freezer myself some more15:30
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_octavia stable/2026.1: Use RHEL OS family for iptables persistence  https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/100327815:31
noonedeadpunkif you be looking, look at the master branch only. plenty of things were landed for 2026.2 in there15:31
noonedeadpunkand the last topic that is around was pep503, but we've discussed it already quite extensively15:32
noonedeadpunk#link https://review.opendev.org/q/topic:%22osa/pep503%2215:32
noonedeadpunkI don't think I have much more findings there, except fixed documentation and re-added example of passing custom pip.conf15:32
noonedeadpunkand so far I decided not to go with this one15:33
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/100122215:33
noonedeadpunkas I feel it as quite controversial in general....15:33
noonedeadpunkbut dunno15:33
opendevreviewMerged openstack/openstack-ansible-ops master: Add sample playbooks to aid in conversion from lxb to ovn  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/100272415:34
jrosserthats relying on the repo server to fallback to a local mirror instead of using pip.conf?15:37
noonedeadpunkhttps://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/1001222 is to actually manage pip.conf with osa role - the one I am not sure about15:38
noonedeadpunkfallback from repo server to a local mirror so far looks as quite a good idea overall15:38
jrosseryep15:38
jrosserdepending on the environment you might need that in place very early to then have anything else work15:39
noonedeadpunkthe thing is that if there is a pip.conf, pip will add the index-url to the list, and will consult it for each package request15:39
noonedeadpunkwhich raises response/build time quite significantly15:39
noonedeadpunkand the idea behind https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/985531 is to produce proper simple repository confirmant for PIP to respect/trust it enough, with a fallback configured on repo server15:41
noonedeadpunkwell, I think openstack_hosts is actually early enough. But then fact of having pip.conf on hosts and/or containers is probably not always a good idea. and then upgrade path is very tricky15:42
noonedeadpunkbut yeah, I guess that's it from my side15:44
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_magnum master: Add information about manage configuration by OSA  https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/97288915:45
noonedeadpunkAs of CI state. It seems that we're mostly good, but feels like quite some "intermittent" issues with magnum are happening15:46
noonedeadpunkand mostly for EL distros, after 16gb instances were disabled for debian15:49
noonedeadpunkas it's really a heavy test we're trying to run there...15:49
noonedeadpunk#endmeeting16:11
opendevmeetMeeting ended Tue Sep  1 16:11:25 2026 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:11
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-09-01-15.01.html16:11
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-09-01-15.01.txt16:11
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-09-01-15.01.log.html16:11
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible/+/100330316:19
opendevreviewIvan Anfimov proposed openstack/openstack-ansible master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible/+/100330316:19
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_tempest master: Use separated freezer-scheduler venv  https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/100329017:07
opendevreviewMerged openstack/openstack-ansible-haproxy_server master: haproxy_server: set X-Forwarded-Proto instead of appending  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/100310917:20
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server stable/2026.1: haproxy_server: set X-Forwarded-Proto instead of appending  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/100332517:21
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server stable/2025.2: haproxy_server: set X-Forwarded-Proto instead of appending  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/100333717:23
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server stable/2025.1: haproxy_server: set X-Forwarded-Proto instead of appending  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/100334117:23
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Add post-install tag to role  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100334517:33
opendevreviewMerged openstack/openstack-ansible stable/2026.1: Bump octavia  https://review.opendev.org/c/openstack/openstack-ansible/+/100325618:18
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_cinder master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/100324719:32
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-ceph_client master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100337019:53
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-ceph_client master: Fix typo  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100337019:54
opendevreviewTim Hosking proposed openstack/openstack-ansible-plugins master: setup_openstack.yml: run swift after ceilometer  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/100338822:14
opendevreviewTim Hosking proposed openstack/openstack-ansible-lxc_container_create master: Fix OVS veth wiring: guard on BRIDGE_TYPE and add ovs-vsctl add-port  https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/100338922:21
opendevreviewTim Hosking proposed openstack/openstack-ansible-os_masakari master: masakari.conf.j2: render ssl cert/key in [wsgi] section  https://review.opendev.org/c/openstack/openstack-ansible-os_masakari/+/100339022:38
opendevreviewTim Hosking proposed openstack/ansible-role-systemd_networkd master: systemd-network.j2: only emit [Link] section when MTU is set  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/100339223:11
opendevreviewTim Hosking proposed openstack/ansible-role-systemd_networkd master: systemd-network.j2: only emit [Link] section when MTU is set  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/100339223:18

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!