| opendevreview | Michael Johnson proposed openstack/octavia stable/2025.2: Fix Amphora controller IP list update https://review.opendev.org/c/openstack/octavia/+/961425 | 01:55 |
|---|---|---|
| opendevreview | Michael Johnson proposed openstack/octavia stable/2025.1: Fix Amphora controller IP list update https://review.opendev.org/c/openstack/octavia/+/961426 | 01:56 |
| opendevreview | Michael Johnson proposed openstack/octavia stable/2024.2: Fix Amphora controller IP list update https://review.opendev.org/c/openstack/octavia/+/961427 | 01:56 |
| tobias-urdin | i might have asked this before, but if a barbican secret is removed but is still referenced in default_tls_container_ref for a listener the LB goes into an error state | 08:22 |
| tobias-urdin | and it's impossible to recover as an user, a cloud operator must fix that since user cannot update a LB when provisioning_status is error so they cannot unset default_tls_container_ref to "fix" the listener/LB | 08:23 |
| tobias-urdin | any workarounds or ideas on a solution that would allow users to solve the issue themselves when it occurs? | 08:23 |
| *** zseguin_ is now known as zseguin | 11:19 | |
| gthiemonge | tobias-urdin: there's a long term solution which relies on barbican secrets consumers, johnsom worked on it, but AFAIK there were still some issues in barbican when we wanted to merge the feature https://review.opendev.org/c/openstack/octavia/+/864308 | 14:22 |
| opendevreview | Gregory Thiemonge proposed openstack/octavia master: Add missing update_amphora_config_flow to the flow diagrams https://review.opendev.org/c/openstack/octavia/+/961487 | 14:26 |
| tobias-urdin | gthiemonge: thanks! great to hear that there is a possible solution. i will read up on consumers | 14:53 |
| johnsom | tobias-urdin Yeah, so short summary. Registered consumers work for containers, but not secrets. They "fixed" it in the barbican client so you can't delete a secret with a registered consumer, but you can still delete it via the API. That is the outstanding bug in Barbican. There was push back in fixing the API as it would be a "API behavior change" but to me, it's a fundamental bug in the implementation. | 15:04 |
| opendevreview | Tobias Urdin proposed openstack/octavia master: Add Barbican secrets consumers https://review.opendev.org/c/openstack/octavia/+/864308 | 15:11 |
| gthiemonge | tobias-urdin: another related story https://storyboard.openstack.org/#!/story/2010314 | 15:19 |
| gthiemonge | I worked on a patch that ignores missing certs but only on delete: https://review.opendev.org/c/openstack/octavia/+/859387 | 15:20 |
| johnsom | I wish I had a tool to search the PTG etherpads, we have raised the topic there multiple times | 15:21 |
| johnsom | #startmeeting Octavia | 16:00 |
| opendevmeet | Meeting started Wed Sep 17 16:00:56 2025 UTC and is due to finish in 60 minutes. The chair is johnsom. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| opendevmeet | The meeting name has been set to 'octavia' | 16:00 |
| gthiemonge | o/ | 16:01 |
| johnsom | Hi everyone | 16:01 |
| johnsom | #topic Announcements | 16:02 |
| johnsom | We are post RC1 | 16:02 |
| johnsom | I think on Octavia we will do an RC2 to get at least one bug fix in | 16:03 |
| johnsom | Any other announcements | 16:03 |
| johnsom | ? | 16:03 |
| gthiemonge | nothing from me | 16:03 |
| johnsom | #topic Brief progress reports / bugs needing review | 16:04 |
| johnsom | I had some vacation time, but mostly I am focusing on reviews and making sure we have the right patches in Flamingo | 16:05 |
| gthiemonge | not directly related to octavia, but I reported a bug against diskimage-builder, after building an image, the permissions of /dev/kvm are incorrect, and it breaks nova, there's a workaround: restore the group (kvm) of /dev/kvm | 16:06 |
| gthiemonge | https://bugs.launchpad.net/diskimage-builder/+bug/2123906 | 16:06 |
| johnsom | I did look to see if there were other merged fixes that didn't make it into RC1, I didn't see any, so if there is something we want to push for, please raise it here | 16:06 |
| gthiemonge | IDK if the dib folks will fix it, we may have to add a workaround in the devstack plugin | 16:06 |
| johnsom | Yeah, that issue took me a while to figure out what was going wrong. There are multiple groups involved and permissions. At first I thought it was a stack user issue.... | 16:07 |
| johnsom | I'm not 100% sure it's DIB though, I thought I hit it on a fresh VM after I ran the updates. But, maybe I am remembering wrong | 16:08 |
| johnsom | It's definitely a possibility though as I know they map /dev into the chroot | 16:09 |
| gthiemonge | it doesn't affect the CI, because, I think, the structure of the host and the chroot are really close and the GIDs are the same in both contexts | 16:09 |
| gthiemonge | but we cannot guarantee that it will not break the CI in the next months | 16:10 |
| johnsom | Yep | 16:10 |
| gthiemonge | I also remove unused code from the controller: | 16:11 |
| gthiemonge | https://review.opendev.org/c/openstack/octavia/+/960601 | 16:11 |
| gthiemonge | (some leftovers of the spare pool removal) | 16:11 |
| johnsom | Yep, looks like it. Is this something you think we need in flamingo or post? | 16:12 |
| gthiemonge | not in flamingo | 16:12 |
| johnsom | Ack | 16:12 |
| johnsom | I also noticed we have a backlog in dashboard of patches, I plan to take a look at that list this week as well. | 16:13 |
| johnsom | #topic Open Discussion | 16:14 |
| johnsom | If you didn't see it, we had our first user do a mariadb upgrade then upgrade Octavia and run into the character set/collation change issue. | 16:15 |
| johnsom | The TC has been discussing this a lot recently. I will need to catch up on that conversation. | 16:15 |
| johnsom | Octavia does not have an opinion on the character set, it will use the defaults set in the mariadb config/database config. | 16:16 |
| johnsom | The issue is mariadb is changing that default, which means the existing tables will have one character set and any future tables would have a different one, causing foreign keys to raise errors. | 16:17 |
| johnsom | I need to research the recommended "migration path" for mariadb. I assume with such a breaking change they have a tool to migrate all of your tables to the "new" defaults. I'll see. | 16:18 |
| johnsom | Please let me know if you have any patches you think should get into Flamingo today. I plan to cut RC2 this week (tomorrow likely). | 16:20 |
| gthiemonge | ack thanks johnsom | 16:21 |
| johnsom | Any other topics today? | 16:21 |
| gthiemonge | no | 16:22 |
| johnsom | All right, thank you for joining! | 16:22 |
| johnsom | #endmeeting | 16:22 |
| opendevmeet | Meeting ended Wed Sep 17 16:22:43 2025 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:22 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/octavia/2025/octavia.2025-09-17-16.00.html | 16:22 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/octavia/2025/octavia.2025-09-17-16.00.txt | 16:22 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/octavia/2025/octavia.2025-09-17-16.00.log.html | 16:22 |
| whershberger | @gthiemonge Sorry to miss the meeting; if you're around would you be able to drop a +2 on https://review.opendev.org/c/openstack/octavia/+/957536? I hate to keep bothering you folks but we'd really appreciate getting these backports taken care of. Thanks so much | 16:31 |
| johnsom | whershberger Please don't worry about bugging us, we are stretched over a number of projects, so letting us know is helpful | 16:32 |
| johnsom | whershberger are you going to need a release too or just having it on the branch good enough? | 16:34 |
| whershberger | Having it on the branch is good enough; we just need the guarantee that it will be in the next point release in order to push it through to the Ubuntu LTS | 16:36 |
| johnsom | Ok, thanks. That helps me with timing of a stable branch release. | 16:36 |
| whershberger | Np, appreciate your help with this | 16:36 |
| gthiemonge | whershberger: done | 16:37 |
| gthiemonge | yeah don't hesitate to ping us :D | 16:37 |
| whershberger | Thanks much! I'll come around next week if the others haven't made their way in yet :) | 16:38 |
| opendevreview | Vadim Sizov proposed openstack/octavia master: Update amphora-netns.systemd https://review.opendev.org/c/openstack/octavia/+/961406 | 18:13 |
| opendevreview | Vadim Sizov proposed openstack/octavia master: Update amphora-netns.systemd https://review.opendev.org/c/openstack/octavia/+/961406 | 18:45 |
| *** mnaser_ is now known as mnaser | 20:36 | |
| opendevreview | Merged openstack/octavia stable/2025.1: Reduce tune.ssl.cachesize for HTTPS terminating listeners https://review.opendev.org/c/openstack/octavia/+/957536 | 21:39 |
| opendevreview | Merged openstack/octavia stable/2025.2: Fix Amphora controller IP list update https://review.opendev.org/c/openstack/octavia/+/961425 | 21:39 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!