| *** pojadhav|out is now known as pojadhav|ruck | 04:23 | |
| *** yadnesh|away is now known as yadnesh | 04:31 | |
| opendevreview | Takashi Kajinami proposed openstack/devstack master: Stop setting [ovs_vif_ovs] ovsdb_interface https://review.opendev.org/c/openstack/devstack/+/866101 | 05:06 |
|---|---|---|
| *** akekane is now known as abhishekk | 05:53 | |
| *** yadnesh is now known as yadnesh|afk | 07:50 | |
| *** jpena|off is now known as jpena | 08:25 | |
| *** yadnesh|afk is now known as yadnesh | 08:41 | |
| opendevreview | Merged openstack/devstack stable/yoga: Remove centos-8/9-stream jobs on stable/yoga https://review.opendev.org/c/openstack/devstack/+/865479 | 11:00 |
| opendevreview | Merged openstack/devstack master: [doc] Update Ubuntu to 22.04 https://review.opendev.org/c/openstack/devstack/+/865818 | 12:18 |
| opendevreview | Merged openstack/devstack stable/wallaby: Remove centos-9-stream jobs on stable/wallaby https://review.opendev.org/c/openstack/devstack/+/865481 | 12:18 |
| *** yadnesh is now known as yadnesh|afk | 13:02 | |
| *** yadnesh|afk is now known as yadnesh | 13:32 | |
| *** pojadhav|ruck is now known as pojadhav|dr_appt | 13:41 | |
| *** akekane is now known as abhishekk | 13:48 | |
| opendevreview | Slawek Kaplonski proposed openstack/devstack master: Rename lib/neutron-legacy to lib/neutron https://review.opendev.org/c/openstack/devstack/+/865015 | 14:13 |
| kopecmartin | frickler: seems this finally helped with the timeouts in cs9 fips job - https://review.opendev.org/c/openstack/tempest/+/863163 | 14:21 |
| kopecmartin | the job is part of experimental queue | 14:22 |
| *** yadnesh is now known as yadnesh|away | 14:59 | |
| gmann | kopecmartin: this RBAC job patch is ready now https://review.opendev.org/c/openstack/tempest/+/614484 | 15:58 |
| opendevreview | Slawek Kaplonski proposed openstack/devstack master: [neutron] Don't configure firewall_driver for core ML2 plugin https://review.opendev.org/c/openstack/devstack/+/865544 | 16:16 |
| opendevreview | Slawek Kaplonski proposed openstack/devstack master: Drop lib/neutron module https://review.opendev.org/c/openstack/devstack/+/865014 | 16:16 |
| opendevreview | Slawek Kaplonski proposed openstack/devstack master: Rename lib/neutron-legacy to lib/neutron https://review.opendev.org/c/openstack/devstack/+/865015 | 16:20 |
| *** pojadhav|dr_appt is now known as pojadhav|out | 16:27 | |
| clarkb | kopecmartin: do we understand why the VMs spawn more slowly with fips enabled? Just thinking that might be good feedback to whoever is doing FIPS work on libvirt/kvm/qemu? | 16:44 |
| kopecmartin | clarkb: i was told this "I have heard (especially from the Octavia folks) that it takes longer for VMs to spawn, possibly because of the various crypto tests and validations that are performed." | 16:52 |
| kopecmartin | gthiemonge: any chance you have more info on this? ^ | 16:52 |
| kopecmartin | also it seems that ubuntu runs through the tests faster than centos | 16:53 |
| clarkb | I think my concern wit hsimply disabling tests because they are slow under fips and not talking to anyone who might help address that is it is unlikely you'll ever run those tests under fips again | 16:53 |
| kopecmartin | and that there is a plan to create ubuntu job with fips | 16:53 |
| johnsom | I can answer that, on startup with FIPS enabled, it goes through a set of crypto module validation tests | 16:53 |
| clarkb | and at that point why bother testing under fips if we have to disable a bunch of things | 16:53 |
| johnsom | They also setup those jobs to reboot, which I'm not 100% sure we need given we "own" the image | 16:54 |
| clarkb | johnsom: opendev doesn't have capacity to dbouel all our images for fips and not fips | 16:54 |
| clarkb | we cannot build fips specific images. But our system doesn't require you to do this so we don't | 16:54 |
| johnsom | I understand, probably more for us (octavia) where we build the images as part of the job | 16:55 |
| clarkb | oh for the nested env. I guess it makes sense that workload would also need fips enabled to check the fips is supported box | 16:55 |
| johnsom | Octavia team is planning to limit FIPs testing to the barbican/TLS scenarios to work around this. That cuts the test cases down significantly, but still does end-to-end tests with the most likely impacted areas. | 16:56 |
| johnsom | Yep, for our FIPs jobs, it is enabled inside the amphora as well. Would be cheating to not | 16:57 |
| kopecmartin | gmann: ack, checking now | 16:59 |
| kopecmartin | johnsom: clarkb do we wanna increase the timeout on the centos fips job or excluded tests with a link to a LP (if there is a chance the things can run faster soon)? | 17:00 |
| clarkb | if this is a fundamental issue with running under fips I think I would increase timeouts or try to identify specific tests that are most likely to be useful to run under fips and run those as octavia is trying to do | 17:01 |
| *** jpena is now known as jpena|off | 17:05 | |
| kopecmartin | clarkb: ack, makes sense | 17:09 |
| opendevreview | Ghanshyam proposed openstack/tempest master: Add placement service in 'enforce_scope' config https://review.opendev.org/c/openstack/tempest/+/866212 | 20:31 |
| opendevreview | Ghanshyam proposed openstack/devstack master: Add RBAC scope and new defaults setting support for placement https://review.opendev.org/c/openstack/devstack/+/866213 | 20:32 |
| opendevreview | Ghanshyam proposed openstack/tempest master: Add placement service in 'enforce_scope' config https://review.opendev.org/c/openstack/tempest/+/866212 | 20:34 |
| opendevreview | Ghanshyam proposed openstack/tempest master: Enable placement scope and new defaults in rbac test job https://review.opendev.org/c/openstack/tempest/+/866214 | 20:39 |
| opendevreview | Ghanshyam proposed openstack/tempest master: Add placement service in 'enforce_scope' config https://review.opendev.org/c/openstack/tempest/+/866212 | 20:59 |
| opendevreview | Ghanshyam proposed openstack/tempest master: Enable placement scope and new defaults in rbac test job https://review.opendev.org/c/openstack/tempest/+/866214 | 21:00 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!