| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add Step CA service for internal ACME https://review.opendev.org/c/openstack/kolla-ansible/+/999693 | 06:05 |
|---|---|---|
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: [CI] Deploy step-ca in the letsencrypt scenario https://review.opendev.org/c/openstack/kolla-ansible/+/999695 | 06:05 |
| opendevreview | Rafal Lewandowski proposed openstack/kayobe master: Bump ansible version https://review.opendev.org/c/openstack/kayobe/+/995021 | 06:22 |
| mikal | blanson[m]: it turns out this was all a known issue in nova, they deliberately made nova-scheduler slower to shut down in 2026.1. I'll send a patch with a very long commit message in a minute. | 07:36 |
| opendevreview | Michael Still proposed openstack/kolla-ansible master: Widen the nova_scheduler healthcheck in CI. https://review.opendev.org/c/openstack/kolla-ansible/+/999789 | 08:09 |
| opendevreview | Michal Nasiadka proposed openstack/kolla master: Add cleanup_repos to revert build_only overrides https://review.opendev.org/c/openstack/kolla/+/993712 | 08:13 |
| opendevreview | Merged openstack/kayobe stable/2025.2: Fix error when failing to retrieve inspection rule https://review.opendev.org/c/openstack/kayobe/+/999172 | 09:36 |
| opendevreview | Rafal Lewandowski proposed openstack/kayobe master: Bump ansible version https://review.opendev.org/c/openstack/kayobe/+/995021 | 10:14 |
| opendevreview | Merged openstack/kayobe stable/2025.1: Fix error when failing to retrieve inspection rule https://review.opendev.org/c/openstack/kayobe/+/999173 | 10:31 |
| opendevreview | Merged openstack/kayobe master: Fix Bifrost extra_kernel_params validation https://review.opendev.org/c/openstack/kayobe/+/999605 | 11:14 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add Step CA service for internal ACME https://review.opendev.org/c/openstack/kolla-ansible/+/999693 | 11:22 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: [CI] Deploy step-ca in the letsencrypt scenario https://review.opendev.org/c/openstack/kolla-ansible/+/999695 | 11:22 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: Add Step CA service for internal ACME https://review.opendev.org/c/openstack/kolla-ansible/+/999693 | 11:28 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: [CI] Deploy step-ca in the letsencrypt scenario https://review.opendev.org/c/openstack/kolla-ansible/+/999695 | 11:28 |
| opendevreview | Kurt Bendl proposed openstack/kolla-ansible master: Fix hard-coded value for enable_haproxy https://review.opendev.org/c/openstack/kolla-ansible/+/999735 | 12:39 |
| opendevreview | Pierre Riteau proposed openstack/kolla-ansible master: keystone: support OIDCOutgoingProxy parameter https://review.opendev.org/c/openstack/kolla-ansible/+/973370 | 12:51 |
| opendevreview | Merged openstack/kayobe master: Fix support matrix note about Rocky Linux 9 https://review.opendev.org/c/openstack/kayobe/+/999190 | 12:57 |
| mnasiadka | Argh | 13:00 |
| mnasiadka | bbezak frickler kevko mmalchuk gkoper jovial mattcrees dougszu darmach pabloclsn ravlew salmankh amir58118 r-krcek blanson[m] fprzewozn - meeting now | 13:00 |
| mnasiadka | #startmeeting kolla | 13:00 |
| opendevmeet | Meeting started Wed Aug 5 13:00:25 2026 UTC and is due to finish in 60 minutes. The chair is mnasiadka. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
| opendevmeet | The meeting name has been set to 'kolla' | 13:00 |
| ravlew | o/ | 13:00 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: [CI] Deploy step-ca in the letsencrypt scenario https://review.opendev.org/c/openstack/kolla-ansible/+/999695 | 13:00 |
| kevko | \o | 13:00 |
| bbezak | \o | 13:00 |
| owenjones | o/ | 13:01 |
| mnasiadka | o/ | 13:03 |
| mnasiadka | #topic agenda | 13:05 |
| mnasiadka | * Announcements | 13:05 |
| mnasiadka | * CI status | 13:06 |
| mnasiadka | * Regular stable releases (first meeting in a month) | 13:06 |
| mnasiadka | * Current cycle planning | 13:06 |
| mnasiadka | * Open discussion | 13:06 |
| mnasiadka | #topic Announcements | 13:06 |
| mnasiadka | So, the PTL/TC election nominations are starting Aug 05, 2026 23:45 UTC | 13:07 |
| mnasiadka | #link https://governance.openstack.org/election/ | 13:07 |
| mnasiadka | If there is anybody that would like to be Kolla PTL for the next cycle - please put your name up | 13:07 |
| mnasiadka | Otherwise - I’ll submit my candidacy | 13:07 |
| mnasiadka | If there’s anybody that wants to do this ^^ - let me know | 13:08 |
| mnasiadka | #topic CI status | 13:08 |
| mnasiadka | Overall I think it’s fine, we had a Neutron cased breakage yesterday, but it looks not worse than always | 13:08 |
| mnasiadka | #topic Regular stable releases | 13:09 |
| mnasiadka | We haven’t done them for a long time - anybody wants to push the releases patch? | 13:09 |
| bbezak | shall I ? | 13:09 |
| bbezak | Will do | 13:09 |
| mnasiadka | Ok, bbezak saves the day | 13:09 |
| mnasiadka | #topic Current cycle planning | 13:09 |
| mnasiadka | Anybody wants to talk about any features that they are working on? | 13:09 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2026.1: Fix support matrix note about Rocky Linux 9 https://review.opendev.org/c/openstack/kayobe/+/999823 | 13:10 |
| kevko | this one | 13:10 |
| kevko | https://review.opendev.org/c/openstack/kolla-ansible/+/999693 | 13:10 |
| ravlew | is this the part where I ask for reviews ;)? | 13:10 |
| kevko | simple, nice, tiny, sexi - step-ca implementation | 13:11 |
| mnasiadka | Why step-ca? | 13:12 |
| kevko | because it's simple | 13:13 |
| kevko | why not ? | 13:13 |
| kevko | for internal acme | 13:13 |
| mnasiadka | It’s single company owned, I have bad feelings | 13:13 |
| kevko | out-of-the box | 13:13 |
| frickler | late \o | 13:13 |
| mnasiadka | I’m starting to feel that every addition to Kolla should have a similar checklist like we have for openstack/requirements ;-) | 13:14 |
| mnasiadka | o/ frickler | 13:14 |
| frickler | we use step-ca downstream, too, not sure I'd vote for it because of that, though | 13:14 |
| mnasiadka | I think long time ago there was a discussion, and between Hashicorp Vault and step-ca - we have sort of agreed to take the lesser evil | 13:15 |
| kevko | well, it's opensource right ? it's opensource license ... apache 2.0 ... what else do you want to more ? yeah ..it can be also hashicorp vault ...but ..then you will be against because of BSL license | 13:15 |
| kevko | for example | 13:15 |
| mnasiadka | But we could reconsider to do OpenBao, which could also be used for Barbican | 13:15 |
| mnasiadka | kevko: redis was also open source | 13:15 |
| mnasiadka | Well, again is, different story | 13:16 |
| mnasiadka | But Hashicorp was once open source ;-) | 13:16 |
| mnasiadka | I just prefer projects that are maintained by a foundation | 13:16 |
| kevko | it was, that's the reason i took step-ca | 13:16 |
| mnasiadka | I don’t think we have enough of a core reviewer quorum to decide what is better and it’s more of another PTG discussion to have | 13:17 |
| mnasiadka | I don’t see anybody disagrees | 13:20 |
| kevko | mnasiadka: well, it's not question about what is better ..this is patches for step-ca right ...separate role with separate images ...if anybody wants to implement internal acme and take another piece of software ..feel free to do it ..then he can choose between kolla_acme_provider: whatever and it wil be deployed | 13:20 |
| mnasiadka | kevko: we’re not a parts shop, we’re an opinionated deployment tool - I’m not happy for the project to support seven different tools for the same job (unless it’s for allowing migration for users from A to B) | 13:21 |
| frickler | agreed, and if there are only bad options, maybe we can have the opinion to choose neither of them | 13:21 |
| bbezak | It seems that we would need to vote between openbao/step-ca for that | 13:22 |
| frickler | but I'll try to take a look at the review anyway, maybe it isn't too bad after all. just likely not this week | 13:22 |
| mnasiadka | bbezak: or none, as the third option which frickler mentioned ;-) | 13:23 |
| kevko | and what are other people's opinions? | 13:23 |
| bbezak | I think if it is simple enough, good enough, and there will be maintainer for it ( I assume kevko ) I wouldn’t oppose it | 13:24 |
| bbezak | But I would need to review it first | 13:25 |
| kevko | and in any case ..migration of acme is what ? replace containers where another acme will listen and wait for requests ... | 13:25 |
| mnasiadka | I think we’ve wasted 15 minutes for this discussion | 13:26 |
| mnasiadka | kevko: two cores agreed to review it, what do you want to discuss more? | 13:26 |
| mnasiadka | I’m surely not going to be supportive if we replace one ACME with another cycle to cycle | 13:27 |
| mnasiadka | Anyway, let’s move on. | 13:27 |
| mnasiadka | Anybody has anything else? | 13:27 |
| mnasiadka | ravlew: are your patches features, or just regular bug fixes requiring review? | 13:27 |
| ravlew | it's the qos ingress/egress patch and dns-resolved patch | 13:28 |
| ravlew | https://review.opendev.org/c/openstack/kayobe/+/997692 | 13:28 |
| ravlew | https://review.opendev.org/c/openstack/kayobe/+/997201 | 13:28 |
| ravlew | bug fixes are still fresh | 13:28 |
| ravlew | they can wait ;) | 13:28 |
| mnasiadka | This is Kayobe, I don’t see any Kayobe cores around | 13:28 |
| mnasiadka | Which probably might ignite some discussion soon | 13:29 |
| ravlew | :( | 13:29 |
| ravlew | Will has already approved | 13:29 |
| ravlew | we need a second +2 though | 13:29 |
| mnasiadka | Kayobe is starting to be a closed circle StackHPC project | 13:29 |
| bbezak | I’ll take a look ravlev | 13:30 |
| ravlew | thanks @bbezak :) | 13:30 |
| mnasiadka | I think we should re-evaluate if Kayobe needs a separate weekly meeting and a separate governance | 13:31 |
| frickler | I assume you're still not ready to take it downstream? | 13:31 |
| mnasiadka | Well, it was downstream, then it was donated upstream | 13:31 |
| mnasiadka | I personally don’t have time to invest in that project, but if the project is upstream under OpenStack governance it should have meeting cadence and some normal means of discussing things | 13:32 |
| mnasiadka | And I don’t feel we should take reponsibility of releasing it, if still kolla-core != kayobe-core | 13:33 |
| mnasiadka | And the only people with intersection of rights are me and bbezak | 13:33 |
| mnasiadka | Let’s discuss it next week maybe | 13:34 |
| mnasiadka | Ok, let’s move to open discussion | 13:35 |
| mnasiadka | #topic Open discussion | 13:35 |
| bbezak | https://review.opendev.org/c/openstack/releases/+/999833 | 13:36 |
| mnasiadka | thanks bbezak | 13:38 |
| mnasiadka | Anybody? Anything else? | 13:38 |
| frickler | what about the 2025.1 releaser issue? | 13:39 |
| frickler | https://review.opendev.org/c/openstack/kolla/+/999753 | 13:39 |
| frickler | and replacing the repo we package with something more suited long-term | 13:40 |
| frickler | but the above would unblock 2025.1 CI | 13:40 |
| mnasiadka | I’m fine with merging 999753 | 13:44 |
| mnasiadka | And then following up in master to switch to something suited long-term | 13:44 |
| frickler | cool, I'll try to remember to followup on that | 13:45 |
| mnasiadka | thanks | 13:46 |
| mnasiadka | I see no other topics for today | 13:50 |
| mnasiadka | Thank you all for coming and see you next week | 13:50 |
| mnasiadka | #endmeeting | 13:50 |
| opendevmeet | Meeting ended Wed Aug 5 13:50:29 2026 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:50 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/kolla/2026/kolla.2026-08-05-13.00.html | 13:50 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/kolla/2026/kolla.2026-08-05-13.00.txt | 13:50 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/kolla/2026/kolla.2026-08-05-13.00.log.html | 13:50 |
| frickler | thx mnasiadka | 13:50 |
| ravlew | thanks | 13:51 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2025.2: Document centos/rocky 10 support in 2025.1 https://review.opendev.org/c/openstack/kayobe/+/999838 | 14:02 |
| opendevreview | Pierre Riteau proposed openstack/kayobe stable/2025.2: Fix support matrix note about Rocky Linux 9 https://review.opendev.org/c/openstack/kayobe/+/999839 | 14:02 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: [CI] Deploy step-ca in the letsencrypt scenario https://review.opendev.org/c/openstack/kolla-ansible/+/999695 | 14:25 |
| opendevreview | Verification of a change to openstack/kayobe master failed: Enable systemd-resolved configuration for Debian based distros https://review.opendev.org/c/openstack/kayobe/+/997692 | 14:48 |
| opendevreview | Pierre Riteau proposed openstack/kayobe master: Add support for QoS egress/ingress settings in systemd-networkd https://review.opendev.org/c/openstack/kayobe/+/997201 | 14:55 |
| opendevreview | Jack Hodgkiss proposed openstack/kolla-ansible master: feat: add `ironic-novncproxy` support https://review.opendev.org/c/openstack/kolla-ansible/+/999864 | 15:44 |
| opendevreview | Premysl Kouril proposed openstack/kolla master: letsencrypt: Add ACME dns-01 challenge support https://review.opendev.org/c/openstack/kolla/+/995447 | 15:49 |
| opendevreview | Premysl Kouril proposed openstack/kolla-ansible master: letsencrypt: Add ACME dns-01 challenge support https://review.opendev.org/c/openstack/kolla-ansible/+/995448 | 15:49 |
| opendevreview | Premysl Kouril proposed openstack/kolla master: letsencrypt: Fail when lego cannot obtain a certificate https://review.opendev.org/c/openstack/kolla/+/999866 | 15:50 |
| opendevreview | Merged openstack/kayobe master: Bump hacking to 8.y.z releases https://review.opendev.org/c/openstack/kayobe/+/998700 | 15:50 |
| opendevreview | Merged openstack/kolla stable/2025.1: Don't build releaser image on Rocky https://review.opendev.org/c/openstack/kolla/+/999753 | 15:50 |
| opendevreview | Premysl Kouril proposed openstack/kolla-ansible master: letsencrypt: Add ACME dns-01 challenge support https://review.opendev.org/c/openstack/kolla-ansible/+/995448 | 15:58 |
| opendevreview | Premysl Kouril proposed openstack/kolla master: letsencrypt: Add ACME dns-01 challenge support https://review.opendev.org/c/openstack/kolla/+/995447 | 15:59 |
| opendevreview | Premysl Kouril proposed openstack/kolla master: letsencrypt: Fail when lego cannot obtain a certificate https://review.opendev.org/c/openstack/kolla/+/999866 | 16:16 |
| opendevreview | Premysl Kouril proposed openstack/kolla master: letsencrypt: Add ACME dns-01 challenge support https://review.opendev.org/c/openstack/kolla/+/995447 | 16:16 |
| opendevreview | Premysl Kouril proposed openstack/kolla-ansible master: letsencrypt: Add ACME dns-01 challenge support https://review.opendev.org/c/openstack/kolla-ansible/+/995448 | 16:16 |
| opendevreview | Merged openstack/kayobe master: Support whitespace in Dell switch port description https://review.opendev.org/c/openstack/kayobe/+/998818 | 18:13 |
| opendevreview | Merged openstack/kayobe master: arista-switch: Fix switch interface configuration https://review.opendev.org/c/openstack/kayobe/+/999262 | 18:13 |
| opendevreview | Merged openstack/kolla master: Add cleanup_repos to revert build_only overrides https://review.opendev.org/c/openstack/kolla/+/993712 | 18:13 |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.org will be offline momentarily at 20:00 UTC (an hour from now) while we restart for a patch upgrade, but should return within a few minutes. | 19:02 | |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.org will not be restarted at 20:00 UTC after all, due to unanticipated image build regressions, and will be rescheduled to a later time/date. | 19:13 | |
| opendevreview | Bertrand Lanson proposed openstack/kolla-ansible master: keystone: Setup fernet credentials encryption keys https://review.opendev.org/c/openstack/kolla-ansible/+/970861 | 20:54 |
| opendevreview | Bertrand Lanson proposed openstack/kolla-ansible master: keystone: Setup fernet credentials encryption keys https://review.opendev.org/c/openstack/kolla-ansible/+/970861 | 20:56 |
| opendevreview | Bertrand Lanson proposed openstack/kolla-ansible master: keystone: Setup fernet credentials encryption keys https://review.opendev.org/c/openstack/kolla-ansible/+/970861 | 21:12 |
| blanson[m] | well hopefully now it's ready | 21:22 |
| blanson[m] | if anyone wants to give it a go :) | 21:23 |
| opendevreview | Michael Still proposed openstack/kolla-ansible master: Widen the nova_scheduler healthcheck in CI. https://review.opendev.org/c/openstack/kolla-ansible/+/999789 | 23:47 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!