Tuesday, 2021-02-23

*** tosky has quit IRC00:38
*** spatel has joined #openstack-barbican02:23
*** spatel has quit IRC03:01
*** spatel has joined #openstack-barbican03:04
*** raildo has quit IRC04:15
*** raildo has joined #openstack-barbican04:16
*** xek has joined #openstack-barbican06:29
*** spatel has quit IRC06:35
*** ade_lee_ has quit IRC08:38
*** tosky has joined #openstack-barbican08:50
*** noonedeadpunk has quit IRC09:26
*** nikparasyr has joined #openstack-barbican09:29
*** noonedeadpunk has joined #openstack-barbican09:29
*** iurygregory_ has joined #openstack-barbican11:00
*** iurygregory has quit IRC11:01
*** iurygregory_ is now known as iurygregory11:06
*** Luzi has joined #openstack-barbican11:13
*** nikparasyr has left #openstack-barbican11:48
redrobot#startmeeting barbican13:01
openstackMeeting started Tue Feb 23 13:01:29 2021 UTC and is due to finish in 60 minutes.  The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot.13:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.13:01
*** openstack changes topic to " (Meeting topic: barbican)"13:01
openstackThe meeting name has been set to 'barbican'13:01
redrobot#topic Roll Call13:01
*** openstack changes topic to "Roll Call (Meeting topic: barbican)"13:01
redrobotCourtesy ping for ade_lee dave-mccowan hrybacki jamespage Luzi lxkong mhen moguimar raildo rm_work xek nearyo13:01
Luzio/13:02
redrobotHi Luzi!13:02
toskyhi13:05
redrobotHi tosky!13:06
redrobotLet's get started13:06
redrobot#topic Review Past Meeting Action Items13:06
*** openstack changes topic to "Review Past Meeting Action Items (Meeting topic: barbican)"13:06
redrobot#link http://eavesdrop.openstack.org/meetings/barbican/2021/barbican.2021-02-16-13.01.html13:07
redrobotlooks like there were none13:07
redrobotmoving on13:07
redrobot#topic Liaison Updates13:07
*** openstack changes topic to "Liaison Updates (Meeting topic: barbican)"13:07
redrobottosky any news for us?13:07
redrobotmoguimar around?13:07
moguimarhey13:07
toskyreally no news13:07
moguimarnot really13:07
toskyI haven't completed the review of the old cinder-tempest-plugin patches13:07
moguimarjust I'm on a sick day leave today13:08
toskyouch :/13:08
redrobotoh noes, I hope you feel better moguimar13:08
moguimarremember the Oslo FF this week, so can you review the castellan patches we have there redrobot ?13:09
redrobotmoguimar ack will do13:09
redrobot#action redrobot to review castellan patches and update the castellan launchpad13:10
redrobot#topic Kanban Review13:10
*** openstack changes topic to "Kanban Review (Meeting topic: barbican)"13:10
redrobot#link https://tree.taiga.io/project/dmend-openstack-barbican/kanban13:10
redrobotNo updates on my part13:10
redrobotMoving on13:13
redrobot#topic Bug Review13:13
*** openstack changes topic to "Bug Review (Meeting topic: barbican)"13:13
redrobot#link https://storyboard.openstack.org/#!/project_group/barbican13:13
redrobotNo new bugs in Barbican13:13
redrobotbut I will be reporting one today13:13
redrobotThere's a bug in the way that the PKCS#11 backend gets reinitialized after failure13:14
redrobotif a second failure happens (e.g. HSM is down), then the handle to the PKCS11 object gets set to None13:14
redrobotand never reinitialized13:15
redrobotthus leaving Barbican in a non-working state until a new process is started13:15
redrobot#link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=013:16
redrobotLooks like no new Castellan bugs13:16
redrobot#link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=013:16
redrobotand no new Cursive bugs13:16
redrobotNormally we'd do a Wayward Review now13:17
redrobotbut since moguimar is not feeling well, we'll skip it this week.13:17
redrobot#topic Open Discussion13:17
*** openstack changes topic to "Open Discussion (Meeting topic: barbican)"13:17
redrobotAnything else y'all want to talk about?13:17
toskyjust a reminder about the grenade job - I couldn't recheck it, but I think about it from time to time :)13:18
redrobotHehe13:20
redrobotIt's on the barbican repo right?13:20
redrobotOk, sounds like we're done for the day.13:26
redrobotThanks for joining everyone!13:27
redrobot#endmeeting13:27
*** openstack changes topic to "OpenStack Barbican Development - Weekly Meeting Agenda: https://etherpad.openstack.org/p/barbican-weekly-meeting"13:27
openstackMeeting ended Tue Feb 23 13:27:06 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)13:27
openstackMinutes:        http://eavesdrop.openstack.org/meetings/barbican/2021/barbican.2021-02-23-13.01.html13:27
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/barbican/2021/barbican.2021-02-23-13.01.txt13:27
openstackLog:            http://eavesdrop.openstack.org/meetings/barbican/2021/barbican.2021-02-23-13.01.log.html13:27
noonedeadpunkredrobot: oh my, from what I saw things really get out of control there... Hope you're doing well!13:40
noonedeadpunkeventually we do have from -10 to -15 C for the last several weeks, but we kind of getused to such temperatures and it's pretty normall here...13:40
noonedeadpunkbtw I was wondering if you might be aware of barbicanclient code?13:42
noonedeadpunkas I see super weird stuff while trying to create an encrypted volume in one of the regions. It's stuck on iterating over `Calculated Secrets uuid ref: secrets/e82155c6-c8c9-4cd5-933e-611e6eeaab7c` and after 15 tries just goes through13:55
*** spatel has joined #openstack-barbican13:57
openstackgerritDouglas Mendizábal proposed openstack/barbican master: Fix PKCS#11 reinitialization after failure  https://review.opendev.org/c/openstack/barbican/+/77713914:48
redrobotHi noonedeadpunk!  Yeah, thankfully things are back to normal in my neighborhood.14:58
redrobotnoonedeadpunk weirdness in the client might be due to the lazy loading logic in the properties14:59
redrobotwe've noticed sometimes accessing many properties quickly results in way too many requests to the server14:59
noonedeadpunkeventually that how things look like http://paste.openstack.org/show/802925/14:59
noonedeadpunkso it kind of takes half an hour to get secret...15:00
noonedeadpunkand I'm pretty sure there's close to none requests...15:12
noonedeadpunkAnd it looks like retry in barbicanclient itself (or castellan). Since process get stuck somewhere here https://opendev.org/openstack/cinder/src/tag/15.0.1/cinder/volume/drivers/rbd.py#L879-L88115:14
*** Luzi has quit IRC15:15
noonedeadpunkIt was internal thing15:28
noonedeadpunkBut I realized that only when I saw list of options castellan barbican driver utilize15:29
noonedeadpunkso always good to look through code:)15:29
noonedeadpunkSo the thing was that I haven't set endpoint in config and it tried to reach public, which was not feasable to access15:30
noonedeadpunkso it went in a loop and somehow in theend was going to internal - dunno15:31
noonedeadpunkwould be great to find block of code where it fails to add logging at least on debug level15:31
noonedeadpunkredrobot: ^15:31
noonedeadpunkas I had debug and nothing pointed to the issue that it can't just reach endpoint...15:36
*** ade_lee has joined #openstack-barbican15:37
redrobotnoonedeadpunk those logs look similar to an issue I was looking at downstream16:04
redrobotWe were seeing 20-30 sec delays though ... half an hour seems really bad16:04
*** raildo has quit IRC16:07
openstackgerritMerged openstack/barbican master: Use system locks in pkcs11 library  https://review.opendev.org/c/openstack/barbican/+/77699616:45
*** d34dh0r53 has quit IRC17:11
*** gmann is now known as gmann_lunch19:47
*** gmann_lunch is now known as gmann20:07
*** knikolla has quit IRC21:11
*** knikolla has joined #openstack-barbican21:11
*** raildo has joined #openstack-barbican21:20
*** spatel has quit IRC21:35
*** spatel has joined #openstack-barbican21:38
*** spatel has quit IRC21:49
*** xek has quit IRC22:26
*** tkajinam has joined #openstack-barbican22:51
*** tkajinam has quit IRC23:40
*** tkajinam has joined #openstack-barbican23:40

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!