Wednesday, 2024-06-19

stanGuys, I need some suggestions regarding Glance API hosts. Currently kolla deploys Glance API container to a single controller host if the user chooses the file backend. But it is possible that users may want to mount a shared nfs path on all their controllers, and would want a ha setup. Are we open to implementing this in kolla? If so I can give it a shot and do a patch. But before doing this I would want your opinions.03:33
stanSvenKieske Thoughts?03:33
opendevreviewAntony Messerli proposed openstack/kolla-ansible master: Updates docs to fix incorrect container example  https://review.opendev.org/c/openstack/kolla-ansible/+/92227803:37
opendevreviewOlivier Delhomme proposed openstack/kolla-ansible master: kolla-ansible now uses default inventory file  https://review.opendev.org/c/openstack/kolla-ansible/+/91399306:20
SvenKieskestan: let me think about it for a moment06:38
SvenKieskestan: I don't know much about the file backend. There seems to be little documentation about it with regards to HA scenarios like you describe. I would check first with glance if they support this kind of stuff. Any reason not to use any of the other HA backends like e.g. ceph?06:44
SvenKieskethere is at least some IBM docs about this mentioning NFS, so it might actually work: https://www.ibm.com/docs/fr/cmwo/4.3.0.0?topic=environment-configuring-image-storage-ha-controller-nodes#taskd170021e4206:46
SvenKieskemhm, do we have a list somewhere which kolla releases are SLURP? I need to bookmark that :D06:49
opendevreviewSven Kieske proposed openstack/kolla-ansible stable/2024.1: kolla_url: port is a string  https://review.opendev.org/c/openstack/kolla-ansible/+/92228506:50
stanSvenKieske In our lab, we don't have a ceph setup, it's all netapp. I would want to compare the NFS vs S3 as a glance store backed by netapp flex volume. In non ceph env, this might come in handy I suppose.07:13
SvenKieskeif you contribute a patch I guess we would need tests for that as well07:14
stanAlso how is ceph's performance on a decent sized cluster, say 5PB07:14
SvenKieskefor image store more than sufficient I would say. vast majority of deployments are ceph(only) I would say > 80/90%07:15
stanSvenKieske Agreed about the test cases.07:15
stanCeph seems to have enhanced instance spin ups by doing COW, if its performance is comparable to our netapp systems, I would like to explore it more. Waiting for hardware to arrive.. :)07:17
SvenKieskethe netapps I've personally seen/administrated where shit compared to ceph, but ymmv :) also for prod, not just test07:27
SvenKieskeceph is also no free lunch and you need way more knowledge about storage and linux, but you have also more control07:27
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible stable/2023.2: kolla_url: port is a string  https://review.opendev.org/c/openstack/kolla-ansible/+/92228707:42
SvenKieskeah thx mnasiadka: I noticed the backport doesn't apply cleanly because of the base.yml I think. It's missing the haproxy-base job07:42
mnasiadkaSvenKieske: yup, I guess we should backport the job as well07:43
mnasiadkalet me do that07:43
SvenKieskefine, I was not totally sure if the backport works and then had a meeting before I could investigate deeper07:43
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible stable/2023.2: Test haproxy single external frontend  https://review.opendev.org/c/openstack/kolla-ansible/+/92228807:44
SvenKieskeIf someone has opinions on this, that would also be nice, the rmq startuptime is rather large because of a single env parameter, there are some solutions proposed, I can also put it on the whiteboard if nobody has time right now: https://review.opendev.org/c/openstack/kolla-ansible/+/921381/comment/56b11f74_f98925e8/07:45
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible stable/2023.1: haproxy: support single external frontend  https://review.opendev.org/c/openstack/kolla-ansible/+/92228907:45
SvenKieskeI added it to the whiteboard for completeness sake.07:48
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible stable/2023.2: kolla_url: port is a string  https://review.opendev.org/c/openstack/kolla-ansible/+/92228708:08
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible stable/2023.2: kolla_url: port is a string  https://review.opendev.org/c/openstack/kolla-ansible/+/92228708:09
mnasiadkaSvenKieske: should be good now08:09
PrzemekKIs this kolla_url: port is a string is something crucial to implement right away?08:36
opendevreviewRoman Krček proposed openstack/kolla-ansible master: Convert destroy scripts into playbooks  https://review.opendev.org/c/openstack/kolla-ansible/+/92071408:51
sylvrHello! I'm about to deploy a cloud using kayobe and I have some questions. In the documentation https://docs.openstack.org/kayobe/latest/configuration/reference/network.html it says that control hosts are in the storage network by default, is it a requirement or is it ok if my control hosts are in the management network and the external network only ? (using kolla_vip to access the web-based control pane)08:53
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495908:55
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495908:56
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495909:09
stanI have a powerful controller 96 core and about 500gigs of ecc ram, I would like to know for what services would benefit from increasing worker count the most..09:39
PrzemekKHow to set neutron_ovn_availability_zones per GW server ?10:01
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: CI: Fix fluentd log check  https://review.opendev.org/c/openstack/kolla-ansible/+/91828310:11
opendevreviewWill Szumski proposed openstack/kayobe master: Revert "[release] Use OpenStack 2024.1 release"  https://review.opendev.org/c/openstack/kayobe/+/92230010:22
opendevreviewAndrew Babbitt proposed openstack/kolla-ansible master: Skyline: Fix incorrect keystone port  https://review.opendev.org/c/openstack/kolla-ansible/+/92230210:27
opendevreviewAndrew Babbitt proposed openstack/kolla-ansible stable/2024.1: Skyline: Fix incorrect keystone port  https://review.opendev.org/c/openstack/kolla-ansible/+/92230310:30
opendevreviewAndrew Babbitt proposed openstack/kolla-ansible stable/2023.2: Skyline: Fix incorrect keystone port  https://review.opendev.org/c/openstack/kolla-ansible/+/92230410:31
opendevreviewAndrew Babbitt proposed openstack/kolla-ansible stable/2023.1: Skyline: Fix incorrect keystone port  https://review.opendev.org/c/openstack/kolla-ansible/+/92230510:32
opendevreviewMerged openstack/kayobe master: CI: remove SLURP jobs for D cycle  https://review.opendev.org/c/openstack/kayobe/+/92208010:39
PrzemekKOk found it - in multinode inventory neutron_ovn_availability_zones='["xxx-az"]10:42
opendevreviewMaximilian Sesterhenn proposed openstack/kolla master: Add ovn-bgp-agent / FRR / Horizon BGPVPN dashboard  https://review.opendev.org/c/openstack/kolla/+/89161710:43
opendevreviewMichal Nasiadka proposed openstack/kayobe master: Add support for EFI booted seed/infra vms  https://review.opendev.org/c/openstack/kayobe/+/92166010:57
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495911:33
opendevreviewMichal Nasiadka proposed openstack/kayobe master: Add support for EFI booted seed/infra vms  https://review.opendev.org/c/openstack/kayobe/+/92166011:36
opendevreviewMichal Nasiadka proposed openstack/kayobe master: Add support for EFI booted seed/infra vms  https://review.opendev.org/c/openstack/kayobe/+/92166011:54
kevkostan:  what about to just mount your nfs to some location and pass it to glance_extra_volumes variable into globals ..this should work 11:55
opendevreviewMichal Nasiadka proposed openstack/kayobe master: Add support for EFI booted seed/infra vms  https://review.opendev.org/c/openstack/kayobe/+/92166012:21
opendevreviewMerged openstack/kayobe master: remove migrate_rabbitmq_queues in D cycle  https://review.opendev.org/c/openstack/kayobe/+/92208112:25
opendevreviewMatúš Jenča proposed openstack/kolla-ansible master: Add certificates for RabbitMQ internode TLS  https://review.opendev.org/c/openstack/kolla-ansible/+/92138012:27
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495912:30
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495912:35
SvenKieskemhm, do we have an opinion about the usage of community.docker vs kolla-toolbox docker-worker et al? we sometimes use community.docker.docker_container_exec and sometimes kolla-toolbox. this feels weird/complicated to me. either we don't need to maintain our own tool inside kolla-toolbox and migrate everything to the docker community module from ansible or we maybe should streamline our usage and always use 12:41
SvenKieskeour own docker module, no?12:41
SvenKieskesee e.g. https://review.opendev.org/c/openstack/kolla-ansible/+/920714/3..4/ansible/roles/service-destroy/tasks/before_destroy.yml for a current patch where we don't use kolla-toolbox (in it's current patch iteration at least)12:42
SvenKieskeproblem I also see with using community.docker is, that I don't know if it will always be compatible with podman.12:42
SvenKieskesimple cases like exec might work of course12:43
opendevreviewMichal Nasiadka proposed openstack/kayobe master: Add support for EFI booted seed/infra vms  https://review.opendev.org/c/openstack/kayobe/+/92166012:44
SvenKieskeit also seems to require: docker sdk, docker cli and requests, according to the readme: https://github.com/ansible-collections/community.docker12:45
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495912:45
mnasiadkamgoddard mnasiadka bbezak frickler kevko SvenKieske mmalchuk gkoper jangutter jsuazo jovial osmanlicilegi mattcrees dougszu - meeting in 1512:45
SvenKieske\o/12:46
mnasiadka#startmeeting kolla13:00
opendevmeetMeeting started Wed Jun 19 13:00:14 2024 UTC and is due to finish in 60 minutes.  The chair is mnasiadka. Information about MeetBot at http://wiki.debian.org/MeetBot.13:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.13:00
opendevmeetThe meeting name has been set to 'kolla'13:00
mnasiadka#topic rollcall13:00
mnasiadkao/13:00
SvenKieskeo/13:00
mmalchuko/13:00
r-krceko/13:00
mhinero/13:00
opendevreviewMichal Nasiadka proposed openstack/kayobe master: seed-vm/infra-vms: Add support for EFI and q35  https://review.opendev.org/c/openstack/kayobe/+/92166013:03
mnasiadka#topic agenda13:03
mnasiadka* CI status13:03
mnasiadka* Release tasks13:03
mnasiadka* Regular stable releases (first meeting in a month)13:03
mnasiadka* Current cycle planning13:03
mnasiadka* Additional agenda (from whiteboard)13:03
mnasiadka* Open discussion13:03
mnasiadka#topic CI status13:03
mnasiadkaKolla/Kolla-Ansible seems green13:03
mnasiadkaKayobe SLURP jobs are still failing13:03
mnasiadkaanything I missed?13:03
SvenKieskekolla build failure rate seems up, at least according to https://grafana.opendev.org/d/c0d59dad13/kolla-failure-rate?orgId=1 ?13:04
SvenKieskekolla-ansible is broken in grafana (I guess for some time again, I should check more often)13:04
mnasiadkalet me check kolla periodics13:06
mnasiadkalast failures from 15th of June in Kolla13:06
SvenKieskemhm, maybe just grafana acting up13:07
mnasiadkaanyway, let's continue13:07
mnasiadka#topic Release tasks13:07
mnasiadkaR-17 has passed, according to Release Management schedule - we should switch to master branches from 2024.113:08
mnasiadkaSomething like https://review.opendev.org/c/openstack/kayobe/+/79176413:09
mnasiadkaAny volunteers to do this?13:09
mmalchukI can13:10
SvenKieskety :)13:10
mnasiadkaok the13:10
mnasiadkan13:10
mnasiadkalet's move on13:10
kevko\o13:10
mnasiadka#topic Current cycle planning13:10
mnasiadkaI started some work on the Ubuntu Noble LTS support and Ansible bump13:11
mnasiadkaUbuntu nodes do OOM on new Ansible, and some other fantastic things - so having fun13:11
SvenKieskeah we just talked about this internally today (noble). notice afaik noble doesn't support upgrades from 22.04 until 24.04.1 release13:12
mnasiadkaDoes anybody have any other high priority features that need discussing?13:12
mnasiadkaI'm not interested in in-place upgrades now, we just need to get that working and backport this to C13:12
fricklerthe oom issue should be fixed with 2.17.1, see the comments in your patch13:13
kevkoas always ..me :) ..just find some time to review again my patches13:13
mnasiadkaYeah, and hundreds of other patches :)13:14
mnasiadkaLet's go to additional agenda13:14
mnasiadka#topic Additional agenda (from whiteboard)13:14
kevkoyeah, but i am actively applying changes regarding comments :) 13:14
mnasiadka(SvenKieske: please review patch for broken keystone federation backend https://bugs.launchpad.net/kolla-ansible/+bug/205865613:14
mnasiadkatrivial patch at https://review.opendev.org/c/openstack/kolla-ansible/+/913908 needs Cores <--still needs input13:14
mnasiadkahttps://review.opendev.org/c/openstack/kolla-ansible/+/921381/comment/56b11f74_f98925e8/ (rmq startuptime high, reason found, please share your opinion)13:14
SvenKieskeyeah the first two are rather getting old, they really don't need any discussion in the meeting imho, just feedback on the patches itself.13:15
SvenKieskethe third one I don't know, I really would like to have some more opinions on it, but could also be discussed on the patch itself13:16
mnasiadkaMy question is - do we have ANY CI job that at least configures keystone to do federation?13:16
SvenKieskelet me check..13:16
opendevreviewMaksim Malchuk proposed openstack/kolla master: Revert "[release] Use Caracal sources by default"  https://review.opendev.org/c/openstack/kolla/+/92231813:17
mnasiadkaBecause if we don't, we're going to see those issues every now and then13:17
SvenKiesketrue13:17
SvenKieskeat least from quick grepping I don't find any tests13:17
SvenKieskethat being said, a bugfix is a bugfix. we have many bugfixes where you don't ask for tests, even if there are none13:17
kevkowe should add some ...13:18
SvenKieskeand ftr I agree we should maybe focus more on tests, but I would appreciate it if this pressure would be applied equally, at least it doesn't feel to be applied equally, from my pov.13:18
SvenKieskebut ymmv :)13:18
opendevreviewMark Goddard proposed openstack/kolla-ansible master: Add support for customising Neutron physical network names  https://review.opendev.org/c/openstack/kolla-ansible/+/92232013:19
mnasiadkaWell, I'm not going to set up an AIO with federation enabled to check if that fixes anything13:19
mnasiadkacommented on the patch13:20
mnasiadkaSvenKieske: what about that RMQ thing?13:21
SvenKieskethe path thing?13:22
SvenKieskewell the startup time is raised, because it is computed everytime rmq starts, so we should move it either to build time (in the dockerfile in kolla) or directly hardcode it13:22
SvenKieskenot sure though how often this changes, I just had a look at the otp repo where imho the ssl libs erlang sources reside, there is already version 11 and they do frequent releases, but we do seem to have version 9.4 somewhere..13:23
SvenKieskeif that changes frequently we might not want to update this string manually in the dockerfile13:24
mnasiadkawell, that's erlang version?13:24
mnasiadkaah, ssl lib in erlang13:24
SvenKieskeso I think the best compromise would be to let the erl autodiscovery run at build time, so it doesn't run every rmq start, but we don't need to patch for every ssl lib minor version bump?13:24
SvenKieskefrom my pov that makes sense, but I'd really like to have some opinions of seasoned maintainers there, so we don't need to rewrite the patch in one or two weeks :)13:25
SvenKieskeI discussed this briefly with Matus (patch author) in private.13:25
mnasiadkawell, adding that to rabbitmq-env.conf - which we template out in kolla-ansible?13:26
SvenKieskethis really did affect the build pipeline which sometimes would just timeout13:26
SvenKieskethat's another option, but I'm not sure it fixes anything? doesn't this run on every start as well? or do you mean hardcoding it there?13:27
mnasiadkaaccording to RMQ docs - we need to add that to rabbitmq-env.conf13:27
mnasiadkaand if we template out the whole file in kolla-ansible13:27
SvenKieskelet me look. wait ok if we template it, it's only run once, seems also fine13:27
mnasiadkathen adding that in Dockerfile isn't going to get us anywhere13:27
SvenKiesketrue13:27
SvenKieskeI'm really not an expert, this patchset is the first time I've even seen this option, just looked it up myself in upstream docs.13:28
mnasiadkaSo unless that's a big burden - I would say it should be added in kolla-ansible13:28
mnasiadkaprobably just spawning a sidecar container with rabbitmq to get that information out of it - and then use the output to be templated out to rabbitmq-env.conf - only when we enable rabbitmq tls13:29
SvenKieskeit's fine either way :) it just doesn't make sense to compute it on every startup and make startup slower and this leads to CI pipeline timeouts in some tests :)13:29
mnasiadkaAnyway - any volunteer to do this?13:29
SvenKieskeI think Matus can implement it in the same patchset if he has some guidance, should be possible with kolla_toolbox, no?13:30
SvenKieskeor should this go in a separate patch? afaik the ssl stuff is only needed for this patch? so can be developed together?13:30
mnasiadkaDon't we want to get that backported?13:30
mnasiadkaWe have RabbitMQ TLS working today, don't we?13:31
SvenKieskethis is only inter node tls, so the inter cluster traffic13:31
mnasiadkaor is that only for internode TLS?13:31
mnasiadkaok13:31
mnasiadkathen incorporate that in the current patch13:31
SvenKieskeI don't know if it affects other TLS settings actually13:31
mnasiadkawell, maybe it's good to check ;-)13:31
SvenKieskeyeah, will do13:31
mnasiadkabut RMQ docs rather mention inter-node13:31
mnasiadkaanyway13:32
mnasiadkalet's move on13:32
mnasiadka(r-krcek): please review https://review.opendev.org/c/openstack/kolla-ansible/+/91499713:32
opendevreviewMaksim Malchuk proposed openstack/kayobe master: Revert "[release] Use OpenStack 2024.1 release"  https://review.opendev.org/c/openstack/kayobe/+/92232213:33
mnasiadkaoh crap, love that kind of changes13:34
mnasiadkaWill have a look13:35
mnasiadka#topic Open discussion13:35
mnasiadkaLet's move on13:35
mnasiadkaActually I have a topic13:35
mnasiadkaSince we only have two core-reviewers that are really active outside of StackHPC - I'd like to propose that if a change has one +2 from SHPC - and a second review has not landed for 2 weeks (after setting RP+1) - I'd like to merge such patches with single company approval.13:37
mnasiadkafrickler, kevko: What do you think about that?13:37
mmalchukplease review https://review.opendev.org/c/openstack/kayobe/+/921627 as discussed I've made the followup13:38
kevkoi am not sure if i understand 13:39
fricklermnasiadka: I guess that's fine for me, even 1 week at most should be fine13:39
mmalchukand new for Kayobe: https://review.opendev.org/c/openstack/kayobe/+/92162813:39
mmalchuksummer lack of cores?13:40
mmalchukagain?13:40
mnasiadkakevko: currently we have a rule - if the author is from SHPC - we can't merge it with two core reviewers from SHPC13:40
mnasiadkaWe have a lot of changes, that are stalled due to missing core review from outside of SHPC13:40
mmalchukmnasiadka lets add cores13:40
mnasiadkaThose have usually RP+1 - and it does not help13:40
mnasiadkammalchuk: shh13:40
fricklerwell the role is for any company, not specific to SHPC, just to avoid confusion13:41
mnasiadkayes13:41
mmalchukfrickler not only SHPC use Kolla projects13:41
kevkoi have the same problem ... what about trade +2 so you will give me +2 for my review and I will find  a time for your review :D 13:41
mnasiadkaso - in order to not let changes to rot - I'm proposing to merge patches with single company approval 2 weeks after the first +2 - if a second +2 from a separate company does not come in13:41
mnasiadkakevko: show me your patches that already have one +2 :)13:42
SvenKieskeI was not asked, but maybe require at least one +1 from another company? that should be a pretty low bar, so maybe not worth spelling it out, though. ¯\_(ツ)_/¯13:43
mnasiadkaSo, there's another thing that irritates me most - if I can13:43
mnasiadkaAdding +1 to a patch after it gets merged - that's to you SvenKieske and mmalchuk ;-)13:43
kevkomnasiadka: well this is another problem ..how can I get some reviewer if you guys in SHPC just giving +2 to each other ...13:43
kevkobut no problem ..i am ok with it btw13:44
kevkofaster merging ..is always better ..it's still master ..it can be reverted ..it can be fixed by another patch if needed 13:44
mnasiadkakevko: sure, everybody has the same problem - it's even hard to find two SHPC cores having time to review a patch ;-)13:45
SvenKieskemnasiadka: well sometimes I review a patch, give +1, then there is last minute change like typo in commit message and immediately +2 +1 workflow and merged and my review is "gone". I think it's at least a decent signal to re-review the minor change then and say "I also did look at it"13:45
mnasiadkaBut I'll try to have a look in your patches next week - last two weeks have been extremely hectic on my side13:45
SvenKieskeif that's annoying I can leave it be I guess13:45
mnasiadkaI think it's useful if there's a comment "you missed that", or "please follow up with a fix to this"13:46
kevkoOr we should create some queue or something ...13:46
mnasiadkabut just +1 is a bit irritating :)13:46
kevkofor example here is reaaaallly trivial and important CI fix 13:46
kevkohttps://review.opendev.org/c/openstack/kolla-ansible/+/91993913:46
mnasiadkakevko: we have a queue, just add RP+1 :)13:46
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: CI: Use 2024.1 as previous_release  https://review.opendev.org/c/openstack/kolla-ansible/+/91993913:47
SvenKieskemaybe a good reminder that not only mnasiadka can RP+1; not sure if everybody knows, but mere mortals (non cores) can't RP+1 (currently)13:47
kevkobecause ...without this patch for example we are testing totally something different as we should ... because now it's tested from 2023.2 to -> current uploaded patch13:48
mnasiadkayup13:48
mnasiadkaI even updated that patch :)13:48
kevkomnasiadka: I know 13:48
mnasiadkafrickler: if you can have a look in ^^13:48
mnasiadkakevko: as I said, I've been extremely busy - it should be better next week ;)13:48
SvenKieskethis would also result in less clicks for backport voting btw, not sure how many reviews it needs, it has gotten quite some attention already: https://review.opendev.org/c/openstack/project-config/+/92047213:48
mnasiadkaSvenKieske: that is project-config, I have no power over that :)13:49
kevkoSvenKieske: well, I also added some RP +1 ...but somebody just deleted it :D 13:49
SvenKieskefrickler? ;)13:49
SvenKieskekevko: lol ok, didn't notice, too bad :)13:49
fricklerhmm, "branches: none" is a weird idea, I have to think about that13:49
mnasiadkaother option is to remove the config at all13:49
mnasiadkaand revert in E13:50
mnasiadkabut we would need to add some docs to the release management guide13:50
mnasiadkaFeel free to comment with a better solution13:50
mnasiadkawe could have a CI var "master_is_slurp"13:50
mnasiadkamaybe that's better13:50
mnasiadkaif Zuul can honor that13:51
SvenKieskethat sounds decent, if it works.13:51
fricklerthe thing is, the job might still run if it is defined somewhere else, like from stable/2024.113:51
SvenKieskeI really would like a handy list which releases are slurp, didn't sink into my brain just yet13:51
kevkoSvenKieske: https://releases.openstack.org/ :D ? 13:52
frickler*.1 is slurp, *.2 isn't. slurp == odd13:52
mnasiadkafrickler: basically I would be happier if we run slurp whole cycle13:52
SvenKieskefrickler: ah that's a good shorthand!13:52
SvenKieskeand I didn't know it's mentioned on the release page as well, thx!13:53
mnasiadkaas in when it's master branch, not just when we do rc1 and find out slurp does not work13:53
fricklerbut for current master, from where would you upgrade? from 2024.1 it is just normal upgrade jobs, don't need to duplicate those13:55
fricklerfrom 2023.1 is too old, we don't want to support that13:55
fricklerfrom 2023.2 ... weird, might not be supported by services13:55
mnasiadkawell, when master is 2025.113:55
mnasiadkawe should be doing slurp from 2024.1 to master (to be 2025.1)13:55
mnasiadkaright?13:55
frickleryes13:56
fricklerso re-enable as soon as 2024.2 is branched13:56
mnasiadkayeah, was thinking if we can have jobs running when some variable is true13:56
mnasiadkaso we would only change that variable13:56
mnasiadkabut still setting up slurp per new release is going to take some work13:57
fricklerI can check with zuul ppl whether that would be possible13:57
mnasiadkaso maybe we just remove jobs from project.yaml13:57
mnasiadkaand add them back when master is slurp13:57
mnasiadkaand just document that in our Release Management docs13:57
mnasiadkaI'm fine with any :)13:57
frickleryes, that would be the usual approach that openstack-zuul-jobs is taking13:58
mnasiadkaok, so let's do that13:58
fricklercould even add them all in one project-template and just add/remove that one maybe13:58
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: CI: Use 2024.1 as previous_release  https://review.opendev.org/c/openstack/kolla-ansible/+/91993913:58
mnasiadkathat also makes sense13:58
mnasiadkaI'll have a go at writing the docs and trying out project template13:59
mnasiadkathanks13:59
mnasiadkaok, we're out of time :)13:59
mnasiadkaThank you all for coming - see you next week :)13:59
mnasiadka#endmeeting13:59
opendevmeetMeeting ended Wed Jun 19 13:59:40 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)13:59
opendevmeetMinutes:        https://meetings.opendev.org/meetings/kolla/2024/kolla.2024-06-19-13.00.html13:59
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/kolla/2024/kolla.2024-06-19-13.00.txt13:59
opendevmeetLog:            https://meetings.opendev.org/meetings/kolla/2024/kolla.2024-06-19-13.00.log.html13:59
SvenKieskeIf anybody has time, I proposed some backports for some bugfixes as well, which would like a review or two.13:59
kevkobtw, if you asked for +2 and 2 weeks rule ...can I ask again my question from past ? one +2 for stable or maybe unmaintained ? 13:59
SvenKieskethanks13:59
SvenKieskekevko: wasn't that even agreed to do in the past? just never done? maybe I misremember.14:00
kevkopostponed i think :D 14:00
mmalchukthanks mnasiadka 14:00
kevkothx14:00
kevkocan I ask something even if we end already ? 14:01
SvenKieskeshoot14:02
kevkowhy we don't have ansible version in requirements in kolla-ansible ? 14:04
kevkoas ansible is the most important dependency for kolla-ansible which is in fact ansible only ? :D 14:04
mmalchukgood question)14:05
SvenKieskekevko: we have it in lint-requirements.txt though ;) https://opendev.org/openstack/kolla-ansible/src/branch/master/lint-requirements.txt#L114:05
kevkoSvenKieske: good joke :D 14:06
SvenKieskeI always try my very best :D14:06
kevkofor me this is like very weird 14:06
kevkowe are trying to handle version in kolla ansible bash command 14:06
SvenKieskeI remember asking it myself, but I don't remember the answer I gave myself.14:07
kevkoand when we need to bump ansible version ...it's again hacked in bash 14:07
kevkoi am sure that now you will have better arguments ...14:07
kevkoif someone will reply why it is like that now 14:08
SvenKieskeit's also in test-requirements.txt btw :)14:08
SvenKieskebut different max version.. <8 vs <1014:09
kevkoyeah ..because it's on several places ...14:09
SvenKieskekevko: let's propose a patch and see if anything breaks?14:09
kevkolet me do it ...14:09
SvenKieskenice, I'm willing to debug failed CI pipelines, if there are any :)14:10
kevkoi am 90 percent sure that everything will work 14:11
kevkoBUT 14:11
kevkomaybe it's because of zuul nodes has ansible from packages ..maybe ...i don't know 14:11
kevkoso kolla will fail if there is different version ...14:12
kevkobut i don't think kolla-ansible as project should care about user's ansible version in some bash script ..my idea is that requirements saying ansible version should be X.Y.Z and user should resolve conflicts ... or as written on many places ...USE virtualenv14:13
SvenKieskeyeah, maybe we should just force installation into venv?14:17
SvenKieskeI guess that's needed for the pip install stuff anyway, isn't it? because it can't alter global packages anymore on modern distributions.14:18
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495914:18
kevkoSvenKieske: i have everything in docker container 14:18
kevkoSvenKieske: so i have kolla-ansible container on deploy server ...mounted git as config to container and that's it ...14:18
kevkoSvenKieske: installed from git ...so i have git blame , git log ..everything available ..it's my kolla sandbox ...and i think it should be like this ... but ..i don't know what are the opinions of others 14:19
kevkoSvenKieske: in linux everything is possible :D ^^ regarding pip and global packages 14:20
SvenKieskeseems like a nice setup, I had it also this way in the past, our downstream handles this a little bit different though.14:21
kevkoSvenKieske: well, the main reason was this https://bugs.launchpad.net/kolla-ansible/+bug/1863510 and this https://github.com/ansible/ansible/pull/71118/files 14:24
kevkoSvenKieske: kolla never fixed this really important stuff ... :( 14:24
kevkoSvenKieske: TLDR version ... if kolla-ansible check-containers reporting changed for neutron-server ... or change some file which will trigger handler to restart neutron-server .... every neutron* containers are restarted :D 14:26
kevkoSvenKieske: which is reaaally painful under heavy load on L3 nodes for example ...14:27
kevkoSvenKieske: so for every kolla-ansible container i am building ansible itself .... https://paste.openstack.org/show/bBwgV1mIvQwv4od0ICG3/ <<< 14:28
kevkoSvenKieske: and my handlers working as expected :) 14:28
kevkoansible developers won't fix 14:29
SvenKieskeI just wanted to follow through why they won't fix it, but it was just decided in some ansible meeting and it seems the minutes from this 2020 meeting are gone from the server..14:30
SvenKieskeactually I think we hit this handler bug before without knowing about it (at least I didn't know about it)14:30
SvenKieskeah it's at least explained on the bug report: https://github.com/ansible/ansible/issues/22579#issuecomment-70564174614:32
SvenKieskemhm, there is even a solution proposed (a workaround to achieve this in ansible itself). maybe we can put that in a wrapper for kolla?14:33
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default  https://review.opendev.org/c/openstack/kolla-ansible/+/90495914:33
SvenKieskekevko: notify: "{{ results is changed|ternary('Restart  ' ~ item.key ~ ' container',  None) }}14:33
SvenKieskethere's a documented workaround here: https://gist.github.com/yoctozepto/4408d70fee31ac3ba9d8a6491c370dfe14:33
opendevreviewMerged openstack/kolla-ansible stable/2023.2: Test haproxy single external frontend  https://review.opendev.org/c/openstack/kolla-ansible/+/92228814:36
opendevreviewMerged openstack/kolla-ansible stable/2023.2: kolla_url: port is a string  https://review.opendev.org/c/openstack/kolla-ansible/+/92228714:36
opendevreviewRafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default.  https://review.opendev.org/c/openstack/kolla-ansible/+/90495914:36
SvenKieskekevko: thanks for the pointer, I wasn't really aware of it, maybe we can fix this?14:38
kevkoSvenKieske: i know there is a workaround ... i was there when it was actual .... but you know ... if you post XL patch ..it will lie in review for several cycles :D 14:43
SvenKieskeyes14:44
SvenKieskemaybe patch one service at a time? :D I have no good answer to this myself, but Roman seemed also eager to tackle this, so maybe we can form a small group to work on it?14:44
kevkoSvenKieske: well, i don't like the idea to replace built-in notify ...which is also very readable ... to some register and action ...14:49
kevkoI just don't like it's anti-pattern14:50
kevkoSvenKieske: and I am also afraid about edge cases ... {{ container_check.results | select('changed') | map(attribute='item') | map(attribute='key') | map('regex_replace', '^(.*)$', 'Restart \\1 container') | list }}   << it looks like there can be some :D 14:51
kevkoSvenKieske: also you can (if i am correct) to specify delegate to ..or similar args and call handler ... by above approach i am not sure you can handle everything 14:52
kevkoSvenKieske: so i better patched ansible and using my container for 5 releases without problem 14:53
SvenKieskeyeah, I get that, but if upstream doesn't fix it we surely should do something, to make it less errorprone on our side?14:53
SvenKieskeI don't know, I mean that is a nice hack, but if, for whatever reason you end up running an unmodified ansible for just one run you might have bad luck.14:54
kevkoSvenKieske: why would I do that ? I have container and everything related to my cloud i am orchestrating ..i am exec into kolla-ansible container 14:55
kevkoSvenKieske: i have one place where I have a kolla-ansible installed ...inside container ...14:56
SvenKiesketada, no more enforced backport voting on already backported patches, see e.g. https://review.opendev.org/c/openstack/kolla-ansible/+/92167215:13
opendevreviewMark Goddard proposed openstack/kayobe master: Add support for customising Neutron physical network names  https://review.opendev.org/c/openstack/kayobe/+/92233515:53
SvenKieskekevko: there is a bug in your ceph refactoring with regards to the cinder backup keyring https://review.opendev.org/c/openstack/kolla-ansible/+/90716617:27
kevkoSvenKieske: thanks ..but interisting 18:31
opendevreviewMichal Nasiadka proposed openstack/kayobe master: seed-vm/infra-vms: Add support for EFI and q35  https://review.opendev.org/c/openstack/kayobe/+/92166019:14
opendevreviewMichal Nasiadka proposed openstack/kayobe master: seed-vm/infra-vms: Add support for EFI and q35  https://review.opendev.org/c/openstack/kayobe/+/92166019:14
opendevreviewMichal Nasiadka proposed openstack/kayobe master: seed-vm/infra-vms: Add support for EFI and q35  https://review.opendev.org/c/openstack/kayobe/+/92166019:15
opendevreviewMichal Nasiadka proposed openstack/kayobe master: seed-vm/infra-vms: Add support for EFI and q35  https://review.opendev.org/c/openstack/kayobe/+/92166019:17
opendevreviewAndrew Babbitt proposed openstack/kolla-ansible master: Skyline: Fix incorrect keystone port  https://review.opendev.org/c/openstack/kolla-ansible/+/92230220:28
ababbittIn relationship to skyline, apiserver talks to the other APIs using the public endpoints by default. Any qualms changing this?20:35
ababbittAlso please bear with me, I haven't used Gerrit in like 10 years lol but would like to start contributing fixes and stuff as I come across them o/20:37
opendevreviewMerged openstack/kolla-ansible master: CI: Use 2024.1 as previous_release  https://review.opendev.org/c/openstack/kolla-ansible/+/91993920:49

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!