Wednesday, 2023-07-19

opendevreviewTom Weininger proposed openstack/octavia master: Add support for HTTP Strict Transport Security  https://review.opendev.org/c/openstack/octavia/+/88080608:05
opendevreviewTianhao Chen proposed openstack/octavia master: Fix IPv6 session persistence failed  https://review.opendev.org/c/openstack/octavia/+/88853008:16
opendevreviewTianhao Chen proposed openstack/octavia master: Fix IPv6 session persistence failed  https://review.opendev.org/c/openstack/octavia/+/88853008:30
opendevreviewJulian DA CUNHA proposed openstack/octavia master: Add new spec ACMEv2 Cert Management  https://review.opendev.org/c/openstack/octavia/+/87728108:33
opendevreviewJulian DA CUNHA proposed openstack/octavia master: Add new spec ACMEv2 Cert Management  https://review.opendev.org/c/openstack/octavia/+/87728108:43
opendevreviewTom Weininger proposed openstack/octavia master: Add support for HTTP Strict Transport Security  https://review.opendev.org/c/openstack/octavia/+/88080608:48
opendevreviewTom Weininger proposed openstack/octavia master: Add support for HTTP Strict Transport Security  https://review.opendev.org/c/openstack/octavia/+/88080608:57
opendevreviewTom Weininger proposed openstack/octavia master: Add support for HTTP Strict Transport Security  https://review.opendev.org/c/openstack/octavia/+/88080609:03
opendevreviewJulian DA CUNHA proposed openstack/octavia master: Add new spec ACMEv2 Cert Management  https://review.opendev.org/c/openstack/octavia/+/87728109:40
opendevreviewTom Weininger proposed openstack/octavia master: Add support for HTTP Strict Transport Security  https://review.opendev.org/c/openstack/octavia/+/88080609:57
opendevreviewTom Weininger proposed openstack/octavia master: Add support for HTTP Strict Transport Security  https://review.opendev.org/c/openstack/octavia/+/88080611:02
opendevreviewJulian DA CUNHA proposed openstack/octavia master: Add new spec ACMEv2 Cert Management  https://review.opendev.org/c/openstack/octavia/+/87728112:38
opendevreviewOmer Schwartz proposed openstack/octavia stable/yoga: Fix persistence_granularity default value  https://review.opendev.org/c/openstack/octavia/+/88875815:35
opendevreviewOmer Schwartz proposed openstack/octavia stable/wallaby: Fix persistence_granularity default value  https://review.opendev.org/c/openstack/octavia/+/88875915:35
opendevreviewTom Weininger proposed openstack/octavia-tempest-plugin master: Test new HSTS feature  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/88154615:56
*** gthiemon1e is now known as gthiemonge15:59
gthiemonge#startmeeting Octavia16:00
opendevmeetMeeting started Wed Jul 19 16:00:09 2023 UTC and is due to finish in 60 minutes.  The chair is gthiemonge. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
opendevmeetThe meeting name has been set to 'octavia'16:00
gthiemongehi!16:00
johnsomo/16:00
oschwarto/16:00
gthiemonge#topic Announcements16:01
gthiemonge* Reminder: vPTG October 2023 Dates & Registration Kickoff16:01
tweiningo/16:01
gthiemongehttps://lists.openstack.org/pipermail/openstack-discuss/2023-July/034363.html16:01
gthiemonge* Proposals for reforming extended maintenance16:02
opendevreviewOmer Schwartz proposed openstack/octavia master: WIP Fix vip ports leak on fully-populated load balancer create  https://review.opendev.org/c/openstack/octavia/+/88759316:03
gthiemongeFYI there's a proposal to replace the EM with "Unmaintained" branches16:03
gthiemongehttps://lists.openstack.org/pipermail/openstack-discuss/2023-July/034350.html16:03
gthiemongehttps://review.opendev.org/c/openstack/governance/+/88877116:03
gthiemongeI haven't read all that stuff yet, but we need to have an eye on it16:04
tweiningI like the idea of reducing the number of maintained releases16:05
johnsomYeah, seven is way too many16:05
gthiemongeany other announcements folks?16:06
johnsomnope16:07
gthiemongealright16:07
tweiningmaybe that octavia-lib 3.3.0 has been released? or was that a news last week already?16:07
gthiemongeI don't remember16:07
gthiemongeyeah this release provides the support for the HSTS RFE16:08
tweininganyway, I'm happy about it. thanks for the reviews16:08
tweiningbut it's quite a few more patches for HSTS still16:08
gthiemongeguys, I'm skipping the CI status topic... nothing to report16:08
gthiemonge#topic Brief progress reports / bugs needing review16:09
gthiemongeFYI I rebased some old octavia-tempest-plugin commits (almost forgotten): "Add member test with multiple subnets on same network"16:10
gthiemongehttps://review.opendev.org/c/openstack/octavia-tempest-plugin/+/81531316:10
gthiemongeit helped me to indentify a bug with the amphorav1 driver16:10
gthiemongeI proposed a fix:16:10
gthiemongehttps://review.opendev.org/c/openstack/octavia/+/88866916:10
gthiemonge(the bug doesn't break anything, but the tests detects the incorrect behavior)16:10
gthiemonge(note: it affects only stable branches because amphorav1 was removed from master)16:11
tweiningI've updated a few of my HSTS patches after I received some feedback.16:11
tweininghttps://review.opendev.org/q/topic:hsts-haproxy the pytest patches are not directly related but it made debugging tests so much easier for me.16:12
gthiemongehopefully they will be merged soon, the feature looks good to me16:13
tweiningseems the main patch passes the Zuul tests now. I think all patches are good now16:13
gthiemongei'm going to test them again16:13
tweiningyeah, I will do some manual testing as well next week16:14
gthiemonge#topic Open Discussion16:16
gthiemongeI have one topic16:16
gthiemongeThere's a new bug "Reboot of Amphora does not work with altname in ip link"16:16
gthiemongehttps://bugs.launchpad.net/octavia/+bug/202799516:16
gthiemongeBasically, rebooting an amphora is not handled correctly, the vip/member interfaces are not moved to the amphora-haproxy ns16:17
gthiemonge(reproduced on centos, don't know if ubuntu is affected)16:17
gthiemongeso this line doesn't work:16:17
gthiemongehttps://opendev.org/openstack/octavia/src/branch/master/octavia/amphorae/backends/agent/api_server/templates/amphora-netns.systemd.j2#L2916:17
gthiemongeyummy16:18
johnsomIs that still needed with the new amphora-agent management of the interfaces?16:18
tweininguff, that line looks complicated16:18
gthiemongejohnsom: yeah because the script doesn't move the ifaces to the namespace, basically it replaces ifup16:18
gthiemongeso I think we need to replace that line with a script (python/shell?)16:19
gthiemongewe could fix the line, but I would prefer another solution16:19
johnsomI wrote that a long, long time ago...16:20
gthiemongeAssigned to -> johnsom ;-)16:20
gthiemongeI'll check maybe we can handle it in "amphora-interface" I don't remember if we store everything we need to move them16:21
johnsomI think it should move into the amphora agent. Historically everything that was needed was stored in  /var/lib/octavia/plugged_interfaces.sorted16:21
johnsomWhich comes from /var/lib/octavia/plugged_interfaces16:22
gthiemongebut it needs to be done before "amphora-interface up all" (we can move it to the amphora-agent too)16:22
johnsomBut it seems like the agent should handle this  on startup now16:22
johnsomRight16:23
gthiemongeack16:23
gthiemongemakes sense16:23
gthiemongeI'll add a comment to the launchpad16:23
gthiemongethanks for the feedback tweining johnsom 16:24
gthiemongeany other topic for today folks?16:24
tweiningnot from me16:25
oschwartnothing from me16:25
johnsomNope16:25
gthiemongealright! thank you!16:25
gthiemonge#endmeeting16:26
opendevmeetMeeting ended Wed Jul 19 16:26:03 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:26
opendevmeetMinutes:        https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-07-19-16.00.html16:26
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-07-19-16.00.txt16:26
opendevmeetLog:            https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-07-19-16.00.log.html16:26

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!