Wednesday, 2025-12-17

opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Move globals to zuul definitions  https://review.opendev.org/c/openstack/kolla-ansible/+/97125705:57
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Move globals to zuul definitions  https://review.opendev.org/c/openstack/kolla-ansible/+/97125707:03
*** mrunge_ is now known as mrunge07:14
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Move globals to zuul definitions  https://review.opendev.org/c/openstack/kolla-ansible/+/97125707:23
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Move globals to zuul definitions  https://review.opendev.org/c/openstack/kolla-ansible/+/97125707:30
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: tempest: Rework regex to a list  https://review.opendev.org/c/openstack/kolla-ansible/+/97125607:35
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: ansible-lint: Fix fqcn[actions-core] for barbican  https://review.opendev.org/c/openstack/kolla-ansible/+/97126908:06
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: ansible-lint: Fix fqcn[actions-core] for bifrost  https://review.opendev.org/c/openstack/kolla-ansible/+/97127008:09
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: WIP: Move globals to zuul definitions  https://review.opendev.org/c/openstack/kolla-ansible/+/97125708:10
fricklermnasiadka: I tend to disagree with the actions-core changes, these are too verbose IMO08:12
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: ansible-lint: Fix fqcn[actions-core] for blazar  https://review.opendev.org/c/openstack/kolla-ansible/+/97127108:13
mnasiadkafrickler: well, that’s the best practice, but I’m fine with leaving fqcn’s in whitelist08:15
bbezakblanson[m]: no, sorry. Too much customer’s related on my plate recently. I’ll try to review it this week. Thx for reminder08:17
blanson[m]bbezak: yh I'm sorry if I'm to insistant about this one but it seems very important for podman users :/ 08:20
fricklermnasiadka: ok, I retract my objection, just found that we're doing the same downstream. will review later08:38
mnasiadkafrickler: I abandoned these for now, but will restore after reworking certificates role to Ansible for Trixie Kolla-Ansible patch08:41
fricklerah, ok, sorry for creation too much noise on a bleak morning08:42
mnasiadkaNah, no problem :)08:48
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009909:05
*** jhorstmann is now known as Guest3378109:12
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009912:14
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: neutron: Remove br_netfilter loading  https://review.opendev.org/c/openstack/kolla-ansible/+/97131712:33
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009912:43
opendevreviewPierre Riteau proposed openstack/kayobe master: [DNM] Test removal of module load  https://review.opendev.org/c/openstack/kayobe/+/97131812:44
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009913:17
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009913:28
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009913:47
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009913:48
mnasiadkabbezak frickler kevko mmalchuk gkoper jovial mattcrees dougszu darmach pabloclsn ravlew amir58118 r-krcek blanson[m] - courtesy reminder that we have a meeting here in 9 minutes13:51
mnasiadka#startmeeting kolla14:01
opendevmeetMeeting started Wed Dec 17 14:01:25 2025 UTC and is due to finish in 60 minutes.  The chair is mnasiadka. Information about MeetBot at http://wiki.debian.org/MeetBot.14:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:01
opendevmeetThe meeting name has been set to 'kolla'14:01
mnasiadka#topic rollcall14:01
mnasiadka\o14:01
blanson[m]Hello14:01
mnasiadkaTwo person meeting14:07
mnasiadkaI think we’ll pass :)14:07
blanson[m]yh... 14:07
mnasiadkablanson[m]: I reviewed all your podman patches, also the keystone credentials one14:08
blanson[m]oooooh14:08
mnasiadkaBasically I went through everything that is in whiteboard14:08
blanson[m]what do you think ? 14:08
mnasiadkaSo you need a second core for the podman stuff14:08
mnasiadkaLooks reasonable, I don’t use podman14:08
mnasiadkaBut whatever makes it better ;)14:08
blanson[m]podman stuff I'm fairly confident I spent like 3 weeks tracking the weird stuff in here 14:08
mnasiadkaSo let’s skip the meeting today, and actually we have the next one 8th of Jan :)14:09
mnasiadka#endmeeting14:09
opendevmeetMeeting ended Wed Dec 17 14:09:14 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:09
opendevmeetMinutes:        https://meetings.opendev.org/meetings/kolla/2025/kolla.2025-12-17-14.01.html14:09
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/kolla/2025/kolla.2025-12-17-14.01.txt14:09
opendevmeetLog:            https://meetings.opendev.org/meetings/kolla/2025/kolla.2025-12-17-14.01.log.html14:09
blanson[m]the keystone credential encryption one is newer but doesn't seem like rocket sience to me 14:09
blanson[m]the only thing I'm wondering is about rotation for the credential keys 14:10
blanson[m]cause the docs doesn't really give a lot of info about it, so idk. I have a draft for rotating credentials (automatically if needs be), but idk if that's really necessary 14:11
mnasiadkaWell, I’d say the fernet rotation script isn’t my favourite14:12
mnasiadkaSo having another one in that form isn’t my favourite as well14:12
blanson[m]should I make it a single python script for both ? 14:13
blanson[m]with like an argument --credential or --fernet os smthg ? 14:13
mnasiadkaThat would probably be better, and if we could just template a config file instead of generating the whole script in K-A would probably make it more readable14:14
mnasiadkaThe other thing is how it’s scheduled today using cron, but I guess that’s another thing14:14
blanson[m]moving rotation to python is gonna be another patch entirely I think tho 14:15
blanson[m]doesn't really fit with the "simple" addition of credential-keys 14:16
mnasiadkaYeah, I think we could go with that, so it’s backportable14:16
mnasiadkaAnd then do a refactor in a followup14:16
blanson[m]cool, so I'll leave the credential one as-is 14:17
blanson[m]then make a subsequent patch for the whole rotation situation 14:17
blanson[m]I've also flooded you with ansible-lint patches 14:17
blanson[m](sorry)14:17
mnasiadkano problem, will have a look tomorrow14:18
fprzewoznmnasiadka: thanks for the reviews, what about workload votes? 14:19
mnasiadkafprzewozn: If you’re asking about workflow votes - then a second core reviewer is needed, you need to nicely ask bbezak or frickler to have a look :)14:22
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework generate-root to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009914:38
opendevreviewPierre Riteau proposed openstack/kayobe master: Revert "CI: Use centos:stream10 image for molecule"  https://review.opendev.org/c/openstack/kayobe/+/97132915:00
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009915:16
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009915:17
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009915:20
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Add support for Debian Trixie (13)  https://review.opendev.org/c/openstack/kolla-ansible/+/96994015:23
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: tempest: Rework regex to a list  https://review.opendev.org/c/openstack/kolla-ansible/+/97125615:26
opendevreviewMerged openstack/kolla stable/2025.1: [2025.1 only] Fix Gnocchi memory leak caused by numpy==2.2.3  https://review.opendev.org/c/openstack/kolla/+/96037115:59
blanson[m]mnasiadka: regarding your review in the keystone credential patch, are you asking why we're doing a separate task and script rather than using the current fernet one to do everything at once ?17:40
mnasiadkablanson[m]: first of all I lack some background in the commit message :-)17:57
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009918:09
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009919:17
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009919:22
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009919:45
blanson[m]mnasiadka: oh yes, that's a friday evening commit I'll add some context lol 20:04
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009920:34
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009920:43
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009921:02
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: certificates: rework to use Ansible modules  https://review.opendev.org/c/openstack/kolla-ansible/+/97009921:14

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!