| *** ykarel_ is now known as ykarel | 06:49 | |
| opendevreview | Merged openstack/python-magnumclient stable/xena: Update .gitreview for stable/xena https://review.opendev.org/c/openstack/python-magnumclient/+/808240 | 08:28 |
|---|---|---|
| opendevreview | Merged openstack/python-magnumclient stable/xena: Update TOX_CONSTRAINTS_FILE for stable/xena https://review.opendev.org/c/openstack/python-magnumclient/+/808242 | 08:29 |
| opendevreview | Merged openstack/python-magnumclient master: Update master for stable/xena https://review.opendev.org/c/openstack/python-magnumclient/+/808243 | 08:29 |
| mnasiadka | strigazi: not planning to be PTL in Z? ;-) | 08:36 |
| jakeyip | I was wondering the same ;) | 08:37 |
| jakeyip | mnasiadka: o/ | 08:37 |
| mnasiadka | hi jakeyip | 08:37 |
| strigazi | #startmeeting magnum | 09:00 |
| opendevmeet | Meeting started Wed Feb 16 09:00:43 2022 UTC and is due to finish in 60 minutes. The chair is strigazi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 09:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 09:00 |
| opendevmeet | The meeting name has been set to 'magnum' | 09:00 |
| strigazi | #topic Roll Call | 09:00 |
| strigazi | o/ | 09:00 |
| oneswig | hi | 09:01 |
| jakeyip | o/ | 09:02 |
| strigazi | mnasiadka: jakeyip: hello :) | 09:02 |
| mnasiadka | o/ | 09:02 |
| bbezak | o/ | 09:03 |
| parallax | \o | 09:03 |
| tobias-urdin | o/ | 09:03 |
| gbialas | o/ | 09:03 |
| strigazi | #topic Add Cluster API Kubernetes COE driver https://review.opendev.org/c/openstack/magnum-specs/+/824488 | 09:04 |
| oneswig | Only a couple of internal discussions on that at this end, unfortunately. Not much progress | 09:06 |
| strigazi | oneswig: Is there a first step we can start from? Are you stuck in something particular? | 09:07 |
| strigazi | oneswig: I (or someone in our team) could help with the driver part, up to the point of talking to the kubernetes cluster running the CAPI controller | 09:10 |
| oneswig | Another colleague has been working on an implementation (as part of other work), I'd hoped he would join last week, but I wasn't ehre | 09:12 |
| oneswig | Appreciate the offer and I'll try to make connections | 09:13 |
| strigazi | oneswig: ok, thanks | 09:13 |
| strigazi | #topic Past Action Items | 09:14 |
| strigazi | change the default hyperkube to the rancher build | 09:14 |
| strigazi | I didn't manage to push the patch last week, I will do it today | 09:15 |
| strigazi | #topic Pending Reviews | 09:16 |
| strigazi | I'd need a second pair of eyes for "Mesos driver drop https://review.opendev.org/c/openstack/magnum/+/821213" | 09:18 |
| jakeyip | LGTM, but I have questions - when we deprecate these should we start from client / API first? | 09:19 |
| oneswig | I saw that the FC35 update has security implications (ie, people should do move off FC33). Has that been publicised? | 09:19 |
| jakeyip | oneswig: do you have a link for that? | 09:19 |
| strigazi | jakeyip: For the mesos driver, I don't think we do any validations in the client | 09:20 |
| strigazi | jakeyip: It's been some time that it didn't receive any patches and we sent an email in the ML | 09:20 |
| oneswig | https://jfrog.com/blog/the-impact-of-cve-2022-0185-linux-kernel-vulnerability-on-popular-kubernetes-engines/ | 09:21 |
| jakeyip | thanks! | 09:21 |
| jakeyip | strigazi: yeah for mesos I don't see anything in client, I am thinking generally, e.g. the related bay/baymodel drop | 09:22 |
| strigazi | jakeyip: usually we log a warning on both api/client then drop | 09:23 |
| jakeyip | then drop meaning one version later? | 09:25 |
| strigazi | yes, but do we want to wait for another release? | 09:26 |
| jakeyip | for mesos I was thinking dropping it at the API at https://github.com/openstack/magnum/blob/master/magnum/api/validation.py#L259-L260 first... which has the effect of not allowing new clusters, then the driver code will be effectively dead code and can be removed easily | 09:28 |
| strigazi | jakeyip: so, in this release we change the validation and on the next one the rest of the code? | 09:29 |
| jakeyip | seems safer to me, I don't have strong opinions. | 09:31 |
| strigazi | ok | 09:31 |
| strigazi | let's do that | 09:31 |
| jakeyip | we can revisit if the code (e.g. tests) are preventing us from moving forward | 09:31 |
| strigazi | For bay/baymodel, something similar? | 09:31 |
| jakeyip | yeap | 09:32 |
| strigazi | cool | 09:32 |
| jakeyip | e.g. could do client this version https://review.opendev.org/c/openstack/python-magnumclient/+/803629 | 09:32 |
| strigazi | ok Let's log these as actions | 09:33 |
| strigazi | #action change magnum/api/validation.py#L259-L260 to not allow mesos as a coe option | 09:34 |
| strigazi | #action leave a comment to merge https://review.opendev.org/c/openstack/magnum/+/821213 in Z | 09:34 |
| strigazi | #undo | 09:35 |
| opendevmeet | Removing item from minutes: #action leave a comment to merge https://review.opendev.org/c/openstack/magnum/+/821213 in Z | 09:35 |
| strigazi | #action leave a comment to merge https://review.opendev.org/c/openstack/magnum/+/821213 in Z+1 | 09:35 |
| strigazi | #action merge 803629: Drop bay and baymodel | https://review.opendev.org/c/openstack/python-magnumclient/+/803629 in Z | 09:35 |
| strigazi | #action leave a comment to mere 803780: Drop bay and baymodel from controllers | https://review.opendev.org/c/openstack/magnum/+/803780 in Z+1 | 09:36 |
| strigazi | #undo | 09:36 |
| opendevmeet | Removing item from minutes: #action leave a comment to mere 803780: Drop bay and baymodel from controllers | https://review.opendev.org/c/openstack/magnum/+/803780 in Z+1 | 09:36 |
| strigazi | #action leave a comment to merge 803780: Drop bay and baymodel from controllers | https://review.opendev.org/c/openstack/magnum/+/803780 in Z+1 | 09:36 |
| strigazi | #action change the default hyperkube to the rancher build | 09:37 |
| strigazi | let's move to the rest of the list of reviews | 09:37 |
| strigazi | For https://review.opendev.org/c/openstack/magnum/+/773923 and https://review.opendev.org/c/openstack/magnum/+/775793 I don't think there something to bring up | 09:40 |
| strigazi | For 827089: security hardening - kube-hunter(KHV002) | https://review.opendev.org/c/openstack/magnum/+/827089 is safe to merge jakeyip ? we rely on the healthz of the apiserver to install all addons | 09:41 |
| strigazi | if others can have a look it would be great | 09:42 |
| strigazi | Finally, for 827668: fcos-k8s: Update to v1.22 | https://review.opendev.org/c/openstack/magnum/+/827668 we can merge | 09:43 |
| strigazi | #topic Open Discussion | 09:44 |
| strigazi | Anyone wants to bring something up? | 09:44 |
| jakeyip | oh hm, need to hold that. I saw that the cluster state reports healthy, I did not realised the /heathz endpoint returns 401. I'll check | 09:44 |
| strigazi | For the Z-PTL I'll send an email today. I hope we can change on the next release :) | 09:45 |
| jakeyip | we have a couple of patches for quotas that we would like merge | 09:46 |
| strigazi | jakeyip: where to you see the 401? in the conductor? | 09:46 |
| strigazi | jakeyip: For the quotas patches, I'll have a look | 09:46 |
| jakeyip | strigazi: 401 when I curl it as a normal client | 09:47 |
| strigazi | jakeyip: that's exepcted, it's the goal of the pacth | 09:47 |
| jakeyip | strigazi: thanks! | 09:47 |
| strigazi | jakeyip: calls like this should work https://github.com/openstack/magnum/blob/master/magnum/drivers/common/templates/kubernetes/fragments/calico-service.sh#L4471 | 09:48 |
| strigazi | [ "ok" = "$(kubectl get --raw='/healthz')" ] | 09:49 |
| jakeyip | ok, I was confused. I thought /healthz output updates cluster status. | 09:51 |
| jakeyip | reading code now... I'll leave comment on the patch later | 09:52 |
| strigazi | jakeyip: thanks | 09:52 |
| strigazi | AOB? | 09:53 |
| jakeyip | thanks for merging magnumclient robo patches, there are a couple more I will send them up after meeting, don't want to pollute the conversation | 09:54 |
| strigazi | See you next week everyone | 09:55 |
| strigazi | #endmeeting | 09:55 |
| opendevmeet | Meeting ended Wed Feb 16 09:55:53 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 09:55 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/magnum/2022/magnum.2022-02-16-09.00.html | 09:55 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/magnum/2022/magnum.2022-02-16-09.00.txt | 09:55 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/magnum/2022/magnum.2022-02-16-09.00.log.html | 09:55 |
| *** ykarel_ is now known as ykarel | 10:31 | |
| opendevreview | Michal Nasiadka proposed openstack/magnum master: Fix disabled SMT on Fedora CoreOS https://review.opendev.org/c/openstack/magnum/+/829519 | 10:53 |
| mnasiadka | strigazi: commit to election repo probably is more important ;-) | 11:08 |
| mnasiadka | (than email) | 11:08 |
| *** prometheanfire is now known as Guest2 | 22:59 | |
| opendevreview | Jake Yip proposed openstack/python-magnumclient master: Update master for stable/victoria https://review.opendev.org/c/openstack/python-magnumclient/+/750707 | 23:01 |
| opendevreview | Jake Yip proposed openstack/python-magnumclient master: Add Python3 wallaby unit tests https://review.opendev.org/c/openstack/python-magnumclient/+/750708 | 23:01 |
| *** Guest2 is now known as prometheanfire | 23:05 | |
| opendevreview | Jake Yip proposed openstack/magnum master: Update master for stable/wallaby https://review.opendev.org/c/openstack/magnum/+/783251 | 23:14 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!