Tuesday, 2026-09-22

noonedeadpunkmornings07:49
noonedeadpunkwe have 2 patches with molecule tests ready for the review - for ceph_client https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/1006626 and haproxy_server: https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/100578608:11
opendevreviewAndrew Bonney proposed openstack/openstack-ansible-ops master: lxb-ovn: minor fixes and improvements following further migrations  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/100671913:17
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/openstack-ansible/+/100674114:31
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-config_template master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-config_template/+/100674414:45
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100674514:55
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Move pip/setuptools/wheel install under block  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100674815:02
noonedeadpunk#startmeeting openstack_ansible_meeting15:02
opendevmeetMeeting started Tue Sep 22 15:02:33 2026 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:02
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:02
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:02
noonedeadpunk#topic rollcall15:02
noonedeadpunko/15:02
noonedeadpunkhey folks15:02
noonedeadpunk#topic releasing15:13
noonedeadpunkSo, I have proposed EOL of 2024.2 15:15
noonedeadpunk#link https://review.opendev.org/c/openstack/releases/+/100647215:15
noonedeadpunkand also new point release for 2025.215:16
noonedeadpunk#link https://review.opendev.org/c/openstack/releases/+/100647315:16
noonedeadpunkregarding sha bump for 2026.1.....15:16
noonedeadpunkI fugured out, we do have quite some issues and regressions15:16
noonedeadpunkFor instance, the ceilometer one15:16
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/100638715:16
jrossero/ hello15:17
noonedeadpunkThen bunch of regressions in ceph_client15:18
jrosserhow has the ceilometer thing happened, not enough test coverage?15:19
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-plugins master: wip:  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/100675215:20
opendevreviewDmitriy Chubinidze proposed openstack/openstack-ansible-plugins master: Gather nova_compute facts before creating aggregates  https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/100675215:23
noonedeadpunkshould we release it as 33.0.2?15:23
noonedeadpunk(given it will pass ofc)15:23
noonedeadpunk#topic CI state15:25
noonedeadpunkwe do see plenty of connectivity issues this week15:25
noonedeadpunkespecially in c10s molecule jobs, when it tries to reach galaxy15:25
noonedeadpunkto address some intermittent issues we see in molecule, I've started proposing patches like https://review.opendev.org/c/openstack/ansible-config_template/+/100674415:27
noonedeadpunkwhich makes both rocky10 and c10s pass without issues now15:27
noonedeadpunkand these molecule tests are blocking quite some merging progress we have15:28
noonedeadpunkanother thing, is our manila tests, and we even got a bug report for it15:29
noonedeadpunk#link launchpad.net/bugs/216777715:29
noonedeadpunkthankfully, tempest output log was quite helpful pointing to instance failure to boot due to ram.15:30
noonedeadpunkso the patch seems to help15:30
noonedeadpunk#link https://review.opendev.org/c/openstack/openstack-ansible/+/100648315:30
noonedeadpunkI'd say for the remaining part it's fine. Only some timeouts for os_freezer, but it's potentially due to many things to provision there.15:33
noonedeadpunkWould need to think if all of them are actually needed.15:33
noonedeadpunk#topic office hours15:33
noonedeadpunkThis week had quite good progress on working on ceph_client role molecule15:33
noonedeadpunkwhich discovered some issues with configs15:34
noonedeadpunkand then haproxy tests were also very useful in finding issues15:34
noonedeadpunkBoth of these roles, I'd say need some love tbh15:35
jrosseryes - haproxy in particular is too complex and needs a fresh design15:35
noonedeadpunkceph_client now is quite complicated, with bunch of untrivial logic15:35
noonedeadpunkyeah, it was too scary to touch without tests though15:35
noonedeadpunkwe specifically know quite some issues with frontend defenition in haproxy15:36
noonedeadpunkthe hardcode of 2 endpoints is not very helpful ,as well as tls/non-tls defenition15:36
noonedeadpunkso working on that was planned with tests being in place:)15:37
noonedeadpunkoverall, I'd say we're coming not in a bad shape to the release.15:37
noonedeadpunkDespite we didn't work on keystone mTLS auth at all, we did some progress in other topics15:38
noonedeadpunkand the more molecule coverage we have, the more I am sure about our codebase somehow15:44
noonedeadpunkbtw, I was thinking - do we need/want to keep stepca scenario for aio?15:45
noonedeadpunkas haproxy molecule does handle that part, and I'm not sure if we do anything else with that scenario, then testing ACME in haproxy?15:45
jrosserReally all it does is ensure that an acme cert ends up on the public endpoint15:49
jrosserThe rest of the AIO should be set up in a way that makes the public endpoint inaccessible to the rest of the deployment15:50
noonedeadpunkI think we might want it in the future, if/when we get acme support for p[ki role....15:50
noonedeadpunk> makes the public endpoint inaccessible to the rest of the deployment - I recall we agreed there to introduce some kind of firewall for aio scenario I guess? 15:51
noonedeadpunkSo I copy/pasted stepca installation here https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/1005786/3/tests/prepare_letsencrypt.yml15:51
jrosseri can't quite rememebr15:52
noonedeadpunkand then verify that the cert haproxy has was issued by expected entity15:52
noonedeadpunkso I would say it should be able to replace stepca scenario15:53
jrossertheres also spiffe/spire for getting mtls setup, which might be an alternative to acme15:53
noonedeadpunk /o15:53
noonedeadpunk /o\ I have not even heard about it15:54
* noonedeadpunk baby steps15:57
noonedeadpunkok, I guess I will propose to drop the scenario then16:00
noonedeadpunkin favor of molecule test16:00
noonedeadpunk#endmeeting16:00
opendevmeetMeeting ended Tue Sep 22 16:00:38 2026 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:00
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-09-22-15.02.html16:00
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-09-22-15.02.txt16:00
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2026/openstack_ansible_meeting.2026-09-22-15.02.log.html16:00
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Ensure that defaults are set for delegated tasks  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100658216:29
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Ensure that compute group is defined  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100658416:29
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build stable/2026.1: Build wheels for buidl packages  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100676716:34
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build stable/2026.1: Build wheels for build packages  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100676716:36
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Fix permissions defenition in keyrings from files  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100660416:48
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Install GPG keys only when they are downloaded  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100662016:48
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Add molecule testing for the role  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100662616:48
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-ceph_client stable/2026.1: Ensure that defaults are set for delegated tasks  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100677617:03
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-ceph_client stable/2026.1: Fix permissions defenition in keyrings from files  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100677717:05
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-ceph_client stable/2026.1: Install GPG keys only when they are downloaded  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/100677817:05
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/openstack-ansible/+/100674117:18
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/openstack-ansible/+/100674117:22
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-frrouting master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-frrouting/+/100678317:32
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-httpd master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-httpd/+/100678517:38
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-pki master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-pki/+/100678817:59
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100674518:08
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/openstack-ansible/+/100674118:21
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-config_template master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-config_template/+/100674418:22
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-frrouting master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-frrouting/+/100678318:22
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100674518:23
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-pki master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-pki/+/100678818:24
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-httpd master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-httpd/+/100678518:24
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_mount master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-systemd_mount/+/100679418:33
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100674518:36
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_service master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/100679718:41
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_networkd master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/100679918:46
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-uwsgi master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-uwsgi/+/100680018:50
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100674518:54
opendevreviewMerged openstack/openstack-ansible-os_neutron master: Remove ovn-bgp-agent rootwrap configuration  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/100594919:07
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add community.library_inventory_filtering to requirements  https://review.opendev.org/c/openstack/openstack-ansible/+/100680419:10
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-zookeeper master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/100680519:15
opendevreviewMerged openstack/openstack-ansible-os_ceilometer master: Remove literal quotes from *_user_content folded scalars  https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/100638719:37
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-frrouting master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-frrouting/+/100678319:37
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_ceilometer stable/2026.1: Remove literal quotes from *_user_content folded scalars  https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/100681019:46
opendevreviewIvan Anfimov proposed openstack/openstack-ansible-os_ceilometer stable/2026.1: Remove literal quotes from *_user_content folded scalars  https://review.opendev.org/c/openstack/openstack-ansible-os_ceilometer/+/100681019:49
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-frrouting master: Address molecule intermittent issues  https://review.opendev.org/c/openstack/ansible-role-frrouting/+/100678319:55
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-frrouting master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-frrouting/+/100678319:57
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/openstack-ansible/+/100674119:57
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-frrouting master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-frrouting/+/100678319:58
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-zookeeper master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-zookeeper/+/100680519:59
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/100674519:59
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-uwsgi master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-uwsgi/+/100680020:01
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_networkd master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/100679920:01
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_service master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-systemd_service/+/100679720:02
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-systemd_mount master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-systemd_mount/+/100679420:03
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-httpd master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-httpd/+/100678520:04
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-pki master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-pki/+/100678820:05
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-config_template master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-config_template/+/100674420:06
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Separate API and Scheduler venvs  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308720:13
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Separate API and Scheduler venvs  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308720:16
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Set persistent scheduler jobs directory  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308120:16
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_freezer master: Set persistent scheduler jobs directory  https://review.opendev.org/c/openstack/openstack-ansible-os_freezer/+/100308120:17
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-pki master: Address ansible-galaxy fetching issues.  https://review.opendev.org/c/openstack/ansible-role-pki/+/100678820:21
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-pki master: Fix CA creation race condition  https://review.opendev.org/c/openstack/ansible-role-pki/+/100682220:37
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-pki master: Fix CA creation race condition  https://review.opendev.org/c/openstack/ansible-role-pki/+/100682220:37
opendevreviewMerged openstack/openstack-ansible-os_gnocchi stable/2026.1: Add distro support to Gnocchi  https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/100252522:12
-opendevstatus- NOTICE: The Gerrit service on review.opendev.org will be offline momentarily while we upgrade to a new patch release, but should return within a few minutes23:00
opendevreviewMerged openstack/openstack-ansible-haproxy_server master: Ensure GPG key is distributed before importing  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/100579823:36

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!