| opendevreview | Gregory Thiemonge proposed openstack/octavia master: Build an Octavia-owned SELinux policy for the amphora https://review.opendev.org/c/openstack/octavia/+/1007869 | 06:46 |
|---|---|---|
| opendevreview | Gregory Thiemonge proposed openstack/octavia master: DNM/WIP enable SELinux + send audit logs https://review.opendev.org/c/openstack/octavia/+/1007870 | 06:46 |
| opendevreview | Sam Morrison proposed openstack/octavia master: Change response codes for unsupported provider options. https://review.opendev.org/c/openstack/octavia/+/993871 | 08:37 |
| opendevreview | Sam Morrison proposed openstack/octavia-tempest-plugin master: Handle provider "unsupported" 400 responses as not implemented https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/994029 | 08:37 |
| opendevreview | Gregory Thiemonge proposed openstack/octavia-dashboard master: Fix getSubnets calls in octavia-dashboard https://review.opendev.org/c/openstack/octavia-dashboard/+/835443 | 08:49 |
| opendevreview | Gregory Thiemonge proposed openstack/octavia master: Harden LocalCertManager against path traversal https://review.opendev.org/c/openstack/octavia/+/1008021 | 09:14 |
| opendevreview | Merged openstack/octavia-dashboard master: Fix getSubnets calls in octavia-dashboard https://review.opendev.org/c/openstack/octavia-dashboard/+/835443 | 09:19 |
| opendevreview | Dmitriy Chubinidze proposed openstack/octavia-dashboard stable/2026.2: Fix getSubnets calls in octavia-dashboard https://review.opendev.org/c/openstack/octavia-dashboard/+/1008023 | 09:28 |
| opendevreview | Dmitriy Chubinidze proposed openstack/octavia-dashboard stable/2026.1: Fix getSubnets calls in octavia-dashboard https://review.opendev.org/c/openstack/octavia-dashboard/+/1008026 | 09:31 |
| opendevreview | Dmitriy Chubinidze proposed openstack/octavia-dashboard stable/2026.1: Fix getSubnets calls in octavia-dashboard https://review.opendev.org/c/openstack/octavia-dashboard/+/1008026 | 09:36 |
| opendevreview | Dmitriy Chubinidze proposed openstack/octavia-dashboard master: UI fix: wrap TLS cipher string to prevent overflow in Pool Details https://review.opendev.org/c/openstack/octavia-dashboard/+/1008044 | 11:11 |
| opendevreview | Dmitriy Chubinidze proposed openstack/octavia-dashboard master: UI fix: wrap TLS cipher string to prevent overflow in Pool Details https://review.opendev.org/c/openstack/octavia-dashboard/+/1008044 | 11:12 |
| opendevreview | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: Switch from OVN metadata agent to OVN agent https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/1008046 | 11:21 |
| gthiemonge | #startmeeting Octavia | 16:00 |
| opendevmeet | Meeting started Wed Sep 30 16:00:20 2026 UTC and is due to finish in 60 minutes. The chair is gthiemonge. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| opendevmeet | The meeting name has been set to 'octavia' | 16:00 |
| gthiemonge | o/ | 16:00 |
| rcruise-redhat1 | o/ | 16:01 |
| gthiemonge | #topic Announcements | 16:02 |
| gthiemonge | * OpenStack 2026.2 "Hibiscus" is officially released! | 16:02 |
| gthiemonge | see the announcement on the MLs | 16:03 |
| gthiemonge | Congrats everyone! | 16:03 |
| * raineszm celebrates | 16:03 | |
| rcruise-redhat1 | Congrats all, thanks for all the contributions! | 16:04 |
| gthiemonge | that was a tough one, with security issues consuming a lot of our time, I hope we won't get as much interrupted during the Indri cycle! | 16:04 |
| rcruise-redhat1 | Don't jinx it ;) | 16:05 |
| gthiemonge | :) | 16:05 |
| gthiemonge | * Indri PTG | 16:05 |
| gthiemonge | as mentioned last week, the PTG is in 2 weeks | 16:05 |
| gthiemonge | I haven't reserved a room yet (shame on me) | 16:07 |
| gthiemonge | but I plan to schedule our session on Wednesday (starting at 14:00 UTC like the previous PTG) | 16:07 |
| rcruise-redhat1 | Sounds good to me | 16:07 |
| raineszm | 👍 | 16:07 |
| gthiemonge | I created the Etherpad for our session | 16:08 |
| gthiemonge | https://etherpad.opendev.org/p/oct2026-ptg-octavia | 16:08 |
| gthiemonge | you can add your topics there | 16:08 |
| gthiemonge | any questions? additional announcements? | 16:09 |
| rcruise-redhat1 | None from me | 16:09 |
| gthiemonge | #topic Brief progress reports / bugs needing review | 16:11 |
| gthiemonge | I've worked on downstream stuff (backports of CVE bugfixes to older branches) | 16:11 |
| gthiemonge | interestingly I found out that the RCE exploits are blocked by SELinux in our downstream images (SELinux is only enabled on RHEL/Centos images when passing the -e flag to diskimage-create) | 16:12 |
| gthiemonge | our SELinux rules are provided by a RPM from RDO, given that the future of RDO and the openstack-selinux repo is not certain, I plan to include the SELinux rules directly in an DIB element in our repo | 16:12 |
| gthiemonge | I also plan to enable SELinux in "Enforcing" mode by default in our CI for Centos Stream | 16:13 |
| gthiemonge | I added a topic for the PTG | 16:13 |
| rcruise-redhat1 | We got an interesting downstream bug which I reproduced upstream. Failover causes a traffic drop of a few seconds | 16:15 |
| rcruise-redhat1 | https://bugs.launchpad.net/octavia/+bug/2168988 | 16:15 |
| rcruise-redhat1 | I was looking into potential solutions today and frankly it went down a bit of a rabbit hole with things like conntrack and active/active | 16:15 |
| rcruise-redhat1 | I think the simplest fix for now will be to stop keepalived on the Amphora before the compute instance is deleted, this should gracefully hand over the VIP | 16:16 |
| rcruise-redhat1 | I don't think it'll guarantee zero drops, but it should help a lot | 16:18 |
| rcruise-redhat1 | I was also looking into the amphora disk partitioning, I uploaded a change to fix the CI failures in the previous CR: | 16:19 |
| rcruise-redhat1 | https://review.opendev.org/c/openstack/octavia/+/1003928 | 16:19 |
| rcruise-redhat1 | That's it from me :) | 16:19 |
| gthiemonge | ack thanks rcruise-redhat1 | 16:19 |
| rcruise-redhat1 | np | 16:20 |
| gthiemonge | #topic Open Discussion | 16:20 |
| rcruise-redhat1 | Question for PTG, should we have a section for high profile CRs needing review? | 16:22 |
| rcruise-redhat1 | E.g. Multi-AZ or Active/Active | 16:23 |
| gthiemonge | yeah I think so | 16:23 |
| rcruise-redhat1 | I can add something to Etherpad | 16:23 |
| gthiemonge | the features that din't make Hibiscus | 16:23 |
| rcruise-redhat1 | Yep | 16:23 |
| rcruise-redhat1 | And that people are always asking about :) | 16:23 |
| gthiemonge | mutli-az, LB resize are the ones that were almost ready | 16:23 |
| rcruise-redhat1 | I might take a look at what state rate limiting was in and add it as a topic too | 16:26 |
| gthiemonge | ack | 16:26 |
| gthiemonge | anything else folks? | 16:27 |
| rcruise-redhat1 | Nothing else from me | 16:27 |
| raineszm | Nope | 16:27 |
| gthiemonge | ack then thank you! have a good one! | 16:28 |
| gthiemonge | #endmeeting | 16:28 |
| opendevmeet | Meeting ended Wed Sep 30 16:28:39 2026 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:28 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/octavia/2026/octavia.2026-09-30-16.00.html | 16:28 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/octavia/2026/octavia.2026-09-30-16.00.txt | 16:28 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/octavia/2026/octavia.2026-09-30-16.00.log.html | 16:28 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!