Wednesday, 2022-03-02

*** ykarel_ is now known as ykarel06:39
opendevreviewMerged openstack/magnum master: Fix POD to POD networking with ML2/OVN  https://review.opendev.org/c/openstack/magnum/+/77392308:09
opendevreviewMerged openstack/magnum master: Remove temporal workaround to increase quota in Glance  https://review.opendev.org/c/openstack/magnum/+/80254108:09
opendevreviewMerged openstack/magnum master: Quota deletion bug fix  https://review.opendev.org/c/openstack/magnum/+/76439708:09
opendevreviewMerged openstack/magnum master: CoreDNS support EndpointSlices  https://review.opendev.org/c/openstack/magnum/+/83060308:09
strigazi#startmeeting magnum08:59
opendevmeetMeeting started Wed Mar  2 08:59:26 2022 UTC and is due to finish in 60 minutes.  The chair is strigazi. Information about MeetBot at http://wiki.debian.org/MeetBot.08:59
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.08:59
opendevmeetThe meeting name has been set to 'magnum'08:59
strigazi#topic Roll Call08:59
strigazio/08:59
jakeyipo/09:00
mnasiadkao/09:02
bbezako/09:02
gbialaso/09:04
strigazi#topic Previous Action Items09:04
strigazi#link https://etherpad.opendev.org/p/magnum-weekly-meeting09:04
strigazijakeyip: did you manage to change the validation for mesos?09:05
jakeyipyeah I've sent up a very simple patch09:06
jakeyiphttps://review.opendev.org/c/openstack/magnum/+/830594 - works and just complains that `Requested COE type %s is not supported` if we use mesos09:07
strigazicool, maybe add a release note too09:08
jakeyipok09:09
strigazi#action jakeyip, strigazi follow 830594: Remove mesos API validation | https://review.opendev.org/c/openstack/magnum/+/83059409:11
strigazinext was to comment on mesos, baymodel removal for Z. I will add it today.09:12
strigazi#action trigazi to comment on 821213: Drop mesos driver | https://review.opendev.org/c/openstack/magnum/+/821213 , 803780: Drop bay and baymodel from controllers | https://review.opendev.org/c/openstack/magnum/+/803780 , 803629: Drop bay and baymodel | https://review.opendev.org/c/openstack/python-magnumclient/+/80362909:12
strigaziNext two items are from mnasiadka's for reviews09:13
strigazimnasiadka: I managed to test and merge the OVN pod-to-pod patch https://review.opendev.org/c/openstack/magnum/+/77392309:13
mnasiadkayes, thanks for that :)09:13
strigazifor the three octavia patches. the code lgtm but my devstack was not cooperating. I think today or tomorrow we should merge them09:14
mnasiadkaWe're using that downstream in production for some time, so those should be working :)09:14
strigazijakeyip: did you have time to look as well? it is this series: https://review.opendev.org/c/openstack/magnum/+/767119/09:15
strigazimnasiadka: ok :)09:15
jakeyipsame, I am having devstack issues, so still trying to get it09:15
jakeyipmnasiadka: do your clusters use octavia ingress? does it work with OVN?09:15
mnasiadkaNo, we use nginx ingress, octavia ingress controller does not support OVN LB09:16
mnasiadkaWe weren't very happy around octavia ingress controller - but I don't remember why09:16
mnasiadkabbezak: do you remember?09:16
mnasiadkabasically, OVN LB supports only TCP and UDP mode balancing, so we can't use octavia-ingress-controller for this09:17
strigazimnasiadka: you also want proxy?09:17
mnasiadkastrigazi: proxy? as in an Octavia/OVN load balancer in front on the nginx ingress controller?09:18
jakeyipmnasiadka: i see. so is ovn octavia only for the api / etcd ?09:19
strigazimnasiadka PROXY protocol09:20
mnasiadkajakeyip: you can use loadbalancer service via occm09:20
strigazimnasiadka: ah, actually its HTTP(S) that is missing too :)09:21
jakeyipah ok09:21
mnasiadkayes, https needs to be terminated on the service itself (OVN is only TCP/UDP load balancer, no HTTP)09:21
mnasiadkano PROXY, no fancy features09:21
mnasiadkabut also no Amphora VM :)09:22
strigazimnasiadka: we use TungstenFabric that has no VMs either, it manages haproxy processes though09:22
mnasiadkaI'm familiar with TungstenFabric, OVN LBs are purely OpenFlow rules09:23
mnasiadkalike an iptables load balancer09:23
mnasiadkabut it has healthchecks now (if you use OVN 21.06), so a bit better than iptables09:23
strigaziyeah yeah, for many things that's more optimal, does it keep the client-ip?09:24
jakeyipstrigazi: does CERN use OVN?09:24
mnasiadkastrigazi: yes, client ip is seen on the connection target, no fancy headers needed09:25
strigazijakeyip: no, just Tungsten for LBs at the moment09:25
jakeyipok. we are migrating to OVN so this patches will be helpful for us, thanks :)09:25
strigazimnasiadka: cool, because with iptable (eg kube-proxy) you lose it09:25
strigaziLet's move on, next was:09:26
opendevreviewMerged openstack/magnum master: Support quota hard_limit values of zero  https://review.opendev.org/c/openstack/magnum/+/76425409:26
strigazimnasiadka to follow up kubernetes conformance for Yoga https://www.cncf.io/certification/software-conformance/09:26
strigazidid you have time to look at it last week?09:27
mnasiadkastarted to set up an env for this, so should file a PR in the regular repo in the coming days09:27
strigazimnasiadka: awesome! So it passes right?09:27
mnasiadkayes, sonobuoy has no errors, so just need to gather the logs and fire off a pull request in github09:28
strigazi#action strigazi to review Octavia Patches https://review.opendev.org/c/openstack/magnum/+/764444 https://review.opendev.org/c/openstack/magnum/+/765309 https://review.opendev.org/c/openstack/magnum/+/76711909:28
strigazimnasiadka: That's great, thanks09:28
strigazi#action mnasiadka to follow up kubernetes conformance for Yoga https://www.cncf.io/certification/software-conformance/09:29
strigazinext, was the quota patches, both merged, one of them seconds ago09:29
strigaziand last is jakeyip to deprecate fedora-atomic driver(s)09:29
strigazijakeyip: ^^ you managed?09:30
jakeyipyeah will do it similarly to mesos09:31
jakeyiphaven't got started09:31
strigazi#action jakeyip to deprecate fedora-atomic driver(s)09:31
strigazithanks09:31
strigaziI'm adding one more patch to have it ready for next week:09:31
strigazi#action strigazi, jakeyip to review 775793: Support extra_network and extra_subnet labels | https://review.opendev.org/c/openstack/magnum/+/77579309:32
strigazi#topic Install calico via helm09:32
strigaziRecently, we updated calico, to the update more managable helm would help, as anyone looke at the tigera operator recently?09:33
strigaziI think i discussed this with someone from stackHPC09:33
bbezakmnasiadka: Octavia ingress controller was a bumpy road last time I've looked into it, and not much maintainers on it. Ingress-nginx is a out of the box experience.09:33
strigazi#link https://github.com/tigera/operator09:34
bbezakIt looks like we can bump coredns to 1.8.* versions after this merged in apparently - https://review.opendev.org/c/openstack/magnum/+/83060309:34
strigazibbezak: yeap09:35
strigaziFor calico, do you think it makes sense to have our own helm-chart?09:38
strigazijakeyip: mnasiadka: you use calico, flannel or smth else?09:39
mnasiadkawe use mainly calico09:40
mnasiadkabut we haven't tried the tigera operator09:40
strigazimnasiadka: the main issue right now is that we can configure it to use our registry09:41
mnasiadkabut I guess it would make sense to try it out, but I don't know if we can commit to doing that before Yoga release09:41
jakeyipwe use flannel - there is a problem with using calico with our current SDN. will evaluate calico again when we migrate to OVN09:41
mnasiadkastrigazi: right09:41
strigazilet's leave it for Z then09:42
strigazi#topic Open Discussion09:42
strigaziAny other business?09:43
strigaziSee you next week then!09:46
strigazi#endmeeting09:46
opendevmeetMeeting ended Wed Mar  2 09:46:03 2022 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)09:46
opendevmeetMinutes:        https://meetings.opendev.org/meetings/magnum/2022/magnum.2022-03-02-08.59.html09:46
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/magnum/2022/magnum.2022-03-02-08.59.txt09:46
opendevmeetLog:            https://meetings.opendev.org/meetings/magnum/2022/magnum.2022-03-02-08.59.log.html09:46
mnasiadkathanks!09:51
jakeyipthanks!09:54
*** ykarel_ is now known as ykarel09:54
opendevreviewJake Yip proposed openstack/magnum master: Remove mesos API validation  https://review.opendev.org/c/openstack/magnum/+/83059410:02
*** ykarel_ is now known as ykarel14:17
*** ykarel is now known as ykarel|away15:40

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!