| gthiemonge | FYI we're having issues with the active-standby job: https://zuul.openstack.org/builds?job_name=octavia-v2-act-stdby-dsvm-scenario | 09:30 |
|---|---|---|
| gthiemonge | I opened a story for placement, there's a race condition when octavia wants to launch 2 VMs at the same time | 09:30 |
| gthiemonge | we might have to make the job non-voting if they don't propose a fix quickly | 09:31 |
| gthiemonge | We also have timeouts in the noop-api jobs, I proposed a workaround to increase the timeout in zuul https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/806558 | 09:33 |
| gthiemonge | that's not the right solution, we will have to analyze those timeout issues | 09:34 |
| opendevreview | Gregory Thiemonge proposed openstack/octavia master: Set active-standby job as non-voting https://review.opendev.org/c/openstack/octavia/+/806742 | 13:16 |
| gthiemonge | ^ johnsom rm_work | 13:17 |
| opendevreview | Gregory Thiemonge proposed openstack/octavia master: Add generic network interface management in the amphora https://review.opendev.org/c/openstack/octavia/+/761195 | 15:21 |
| rm_work | Hmm... Like nova bug? | 19:09 |
| johnsom | rm_work It's actually in placement | 19:30 |
| johnsom | But effectively breaks nova if two vms are booted at the same time for the same project. | 19:30 |
| johnsom | https://review.opendev.org/c/openstack/placement/+/806730 | 19:32 |
| rm_work | fantastic | 19:32 |
| johnsom | Yeah, I guess some "consumer_types" stuff merged and broken the database code. | 19:33 |
| opendevreview | Gregory Thiemonge proposed openstack/octavia master: Fix PlugVIPAmphora revert function in amphorav2 https://review.opendev.org/c/openstack/octavia/+/806804 | 20:29 |
| ade_lee | johnsom, hey! | 22:08 |
| johnsom | ade_lee Hi neighbor. So, it looks like ssh from the fips enabled host to a cirros VM is failing? | 22:08 |
| ade_lee | hey -- so yeah -- some context .. | 22:09 |
| ade_lee | some octavia fips tempest tests and a number of other fips tests for other projects are failing because tempest tries to get to the systems using paramiko | 22:10 |
| ade_lee | and paramiko does an md5() .. | 22:11 |
| ade_lee | johnsom, you can see this here -- for instance .. | 22:11 |
| ade_lee | well _ I was going to show you an octavia job but the old results have gone away | 22:13 |
| ade_lee | johnsom, here is a cinder example -- https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_78d/790535/11/check/cinder-tempest-plugin-lvm-lio-barbican-fips/78dd779/testr_results.html | 22:14 |
| ade_lee | anyways - what I was trying to do is replace paramiko with a library that will be fips certified instead in tempest | 22:15 |
| ade_lee | johnsom, and my very wip patch for that is here -- https://review.opendev.org/c/openstack/tempest/+/806274 | 22:15 |
| johnsom | Ok. Couldn't you also just set a bunch of "disabled_algorithms" for paramiko? | 22:15 |
| johnsom | Gotcha, ok, that explains why the non-fips job also failed. | 22:16 |
| ade_lee | yeah | 22:16 |
| ade_lee | whats weird though is that the fips job is failing in a way that is unexpected -- in that when I run the same code locally, it works | 22:17 |
| ade_lee | so something is different in the ci environment | 22:17 |
| johnsom | I have never heard of such a thing... grin | 22:18 |
| ade_lee | johnsom, yeah - so thats why I want to freeze the env for me to poke at | 22:18 |
| johnsom | ade_lee Ok, thanks for bringing me up to speed. I have been a bit distracted with the RBAC stuffs and haven't followed what was going on with this patch. | 22:19 |
| ade_lee | johnsom, yeah - I think once we move past that - almost all will likely pass | 22:20 |
| ade_lee | past the paramiko thing that is .. | 22:20 |
| ade_lee | so yeah - its not octavia related (yet), but rather testing tool related. | 22:21 |
| johnsom | For those playing at home, cirros 0.5.2 has dropbear v2018.76 in it which appears to be incompatible with the libssh change proposed in tempest. | 22:56 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!