Friday, 2025-08-01

gmaanafaik, nova is the first one to add tempest coverager for RBAC at least for existing tests to move to new defaults. I know there are some rbac test in cinder and keystone tempest plugins but those are checking access positive and negative testing at DB layer00:24
gmaanat some point, we need to move all tempest tests to new defaults (least access role) which is in my todo list00:25
*** mhen_ is now known as mhen01:43
opendevreviewDouglas Mendizábal proposed openstack/devstack master: Set password regex for security compliance  https://review.opendev.org/c/openstack/devstack/+/95611104:17
opendevreviewMerged openstack/tempest master: Add new config option for nova policy available defaults  https://review.opendev.org/c/openstack/tempest/+/95326504:21
gibiit seem the openstacksdk-functional-devstack job is failing constantly and blocking the gate https://zuul.opendev.org/t/openstack/builds?job_name=openstacksdk-functional-devstack&skip=012:46
gibi    openstack.exceptions.SDKException: Image creation failed: 'latin-1' codec can't encode character '\u2019' in position 662: ordinal not in range(256)12:46
gibiin openstack.tests.functional.image.v2.test_image.TestImage.test_tags12:46
gibiit seems it is started failing earier today12:48
fricklerstephenfin: ^^ can you take a look? https://review.opendev.org/c/openstack/openstacksdk/+/910218 looks maybe related just from timing and touched code, though the job was passing on that change13:08
stephenfinlooking13:09
stephenfinyeah that fails locally. wtf did it not fail in the gate...13:12
stephenfingibi: frickler: apparently it's this change 😅 https://review.opendev.org/c/openstack/openstacksdk/+/95632913:21
stephenfinah, we consume CONTRIBUTING.rst as part of the image test. TIL.13:24
fricklerfancy. also I spot a wrong project name in that change13:27
gibistephenfin: thanks for taking a look13:30
stephenfinhttps://review.opendev.org/c/openstack/openstacksdk/+/95636913:34
fricklerthx. another point to note is that devstack declares all *.rst files as irrelevant, which is why the functional job wasn't run on the change. maybe using some dedicated data file might be better?14:16
stephenfingood point14:28
gmaanyeah. As this is running in many projects gatre, it make sense to run it in \sdk all changes, just for safer side.15:58
opendevreviewGoutham Pacha Ravi proposed openstack/eslint-config-openstack master: Replace CLA instructions with DCO  https://review.opendev.org/c/openstack/eslint-config-openstack/+/95639117:47
sean-k-mooneygmaan: if you have time can you comment on https://review.opendev.org/c/openstack/watcher/+/956380/comment/3614ac2f_3a8bb840/18:03
sean-k-mooneygmaan: correct me if im wrong but cant you make temest test detech the microverion of a given service and skip automaticly18:04
sean-k-mooneywithout needing to configure the microverion in the servies config section18:04
sean-k-mooneyi.e. we shoudl be able to wrte temest test on master that wil skp on stble based on if that deployment supprot that microversion18:05
sean-k-mooneylike this https://github.com/openstack/tempest/blob/master/tempest/api/compute/servers/test_servers.py#L321-L32218:07
gmaansean-k-mooney: yes,  that is why we need to cap the test with min or max microversion we want to run  those tests. and based on deployment available microversion test will be run or skipped18:07
sean-k-mooneyok looking at https://github.com/openstack/tempest/blob/master/tempest/api/compute/base.py#L49-L6518:08
gmaanbut for tempest to decide available microversionm, we need to configure the service min and max available microversion of partilular running env18:08
sean-k-mooneythis is not auto discoverign form the api endpont18:08
sean-k-mooneyits looking at the cofnig for the limits?18:08
gmaanwe do not do auto discovery from service, it needs to be configured18:08
sean-k-mooneyoh ok18:09
sean-k-mooneyso dougs change makes sense then18:09
sean-k-mooneydoes devstack do this for use automaticlly on stable branches?18:09
sean-k-mooneyi assume not we have to do it in the job or in the devstack plugin liek doug is propsoing18:09
gmaanI will check those but if he is just configuring the min/max service microversion then yes, for master it can be min=None and max=latest and for stable you can change max from latest->max-supported-version18:09
gmaanwe do in devstack\18:10
sean-k-mooneyah ok18:10
sean-k-mooneythat explians it then anytime i have ran tempest on stable i have never needed to manually set the max verison in nova18:10
gmaansean-k-mooney: this is how I do for stable branch when they are created https://review.opendev.org/c/openstack/devstack/+/94524018:10
gmaansean-k-mooney: I did for you always :)18:11
sean-k-mooney:) yep18:11
sean-k-mooneywell that and the fact that i rarely run all of tempest locally jsut specific test is a factor18:11
gmaanwe can do auto discvoery also but that is something I want to avoid in tempest. That can make mistake about wrongly configure the env or not detecting/testing the expected tests to run18:12
sean-k-mooneyya that fine18:13
sean-k-mooneyi just tought this worked by 1 declering the requiremetns on the test18:13
sean-k-mooneywhich we do18:13
sean-k-mooneyand 2 having the test check that via hiting hte microversion endpoint18:13
sean-k-mooneyi tought the min/max wer optional overrieds18:14
sean-k-mooneyrather then the primary way of contoling it18:14
sean-k-mooneythanks for explaining that18:14
gmaanyeah, test doing it is extrta work for every test to discover it from endpoint18:14
sean-k-mooneyya i kind of assumed it woudl be cached in the tempest clients but ya it makes sense the way it is18:15
sean-k-mooneyor why its the way it si rather18:15
gmaanreplied in gerrit18:19
sean-k-mooneythanks18:19
sean-k-mooneyim going to call it a day, monday is a public holiday so ill chat to you on tuesday18:20
sean-k-mooneyenjoy the weekend18:20
gmaanhave a nice long weekend, same for me. Monday is public holiday here 18:20
-opendevstatus- NOTICE: All OpenDev IRC and Matrix bots will be offline briefly (including channel logging and meeting management) in order to move them to a newer server23:50

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!