Tuesday, 2024-02-27

opendevreviewDmitriy Rabotyagov proposed openstack/election master: Add Dmitriy Rabotyagov candidacy for TC  https://review.opendev.org/c/openstack/election/+/91032508:47
opendevreviewArtem Goncharov proposed openstack/election master: Add Artem Gonharov candidacy for TC  https://review.opendev.org/c/openstack/election/+/91032709:10
opendevreviewDmitriy Rabotyagov proposed openstack/election master: Add Dmitriy Rabotyagov candidacy for Vitrage PTL  https://review.opendev.org/c/openstack/election/+/91032809:10
opendevreviewArtem Goncharov proposed openstack/election master: Add Artem Goncharov candidacy for TC  https://review.opendev.org/c/openstack/election/+/91032709:35
opendevreviewGregory Thiemonge proposed openstack/election master: Adding Gregory Thiemonge candidacy for Octavia  https://review.opendev.org/c/openstack/election/+/91036216:10
opendevreviewMichael Johnson proposed openstack/election master: Adding Michael Johnson candidacy for Designate  https://review.opendev.org/c/openstack/election/+/91036716:31
*** dasm is now known as Guest119516:51
*** Guest1195 is now known as dasm17:34
gmannmeeting time?18:01
rosmaitapretty sure JayF is around18:02
slaweqgmann I was just thinking if it's just my matrix bridge not working properly again and I don't see anything :)18:02
JayFI am here18:02
slaweqbut seems like it works fine :)18:02
rosmaita\o/18:02
gmannhere he is.18:02
JayFWhy did my brain think it's 11am for the meeting18:02
JayFwow18:02
gmannslaweq: I refreshed mine for same reason :)18:02
JayFone sec lemme get my doc up18:02
* JayF chasing C-3 deadlines and getting distracted18:03
JayF#startmeeting tc18:03
opendevmeetMeeting started Tue Feb 27 18:03:28 2024 UTC and is due to finish in 60 minutes.  The chair is JayF. Information about MeetBot at http://wiki.debian.org/MeetBot.18:03
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.18:03
opendevmeetThe meeting name has been set to 'tc'18:03
JayFWelcome to the weekly meeting of the OpenStack Technical Committee. A reminder that this meeting is held under the OpenInfra Code of Conduct available at https://openinfra.dev/legal/code-of-conduct.18:03
JayFToday's meeting agenda can be found at https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee.18:03
JayF#topic Roll Call18:03
dansmitho/18:03
gmanno/18:03
frickler\o18:04
jamespageo/18:04
slaweqo/18:04
rosmaitao/18:04
JayF#topic Follow up on tracked action items18:04
JayFI had 3 action items, I have done none of them. 18:05
JayF#action JayF reach out to Tony and Elod about follow-up to unmaintained group email18:05
JayF#action JayF to email ML with a summary of gate ram issues and do a general call for assistance18:05
JayFActually I did the third one18:05
JayF> Find something written about who volunteered to keep things un-maintained status back to Victoria18:05
JayFI was unable to find anything in public ML archives with someone concretely volunteering to take things over back to victoria.18:06
JayFI did find a thread where that was volunteered *in context of heat*18:06
JayFI'll take care of those two other actions as soon as meeting is over here, sorry about that18:06
spotz[m]o/18:06
JayF#topic Gate Health Check18:06
JayFHow is the gate looking? I'll note for Ironic we've been pretty swell.18:06
dansmithlots of rechecks in nova/glance land, AFAICT18:07
fricklerwhat's swell in that context? I only know ocean swell18:07
fungi"pleasant"18:07
slaweqnot that bad in Neutron AFAIK18:07
fricklerthx fungi 18:08
fungi"swell" can be an adjective meaning "very good"18:08
JayFpleasant is a pretty dead-on for getting the connotations18:08
JayFGoing to move on, we addressed gate pretty heavily last meeting and I still have the follow-up action from that18:08
JayF#topic Implementation of Unmaintained Branch Statuses18:09
JayFdoes anyone have an update on this? rosmaita?18:09
fricklerthere were some issues in stable branches regarding upgrades from yoga18:09
rosmaitai don't have anything new18:09
fricklerand people are unclear whether they should be made to work or whether yoga should be treated like being eol in that context18:09
fricklerthey=grenade jobs18:09
fricklerI support the latter option fwiw18:10
JayFFor purposes of unmaintained branch policy, I'm pretty sure that's entirely up to the folks doing the work, yeah?18:10
gmannyeah, discussion going on in #link https://review.opendev.org/c/openstack/grenade/+/90882618:10
gmannI also do not think we need to do upgrade testing from unmaintained to any other maintained branches18:10
fricklerwell the issue is that the job failures are affecting zed and 2023.118:10
gmannwe made it optional to tests for EM and  for unmaintained either we can just remove or kepe it optional only18:11
fricklerand then we have to discuss things like https://review.opendev.org/c/openstack/grenade/+/90882618:11
gmannfrickler: job of yoga to zed upgrade so my point is we do not need to test upgrade from unmaintined to maintained releases18:11
JayF++18:12
rosmaitagmann: ++18:12
JayFAnd we have a pretty strong workaround if it ever breaks: upgrade to -eom18:12
JayFthen upgrade to latest from UM18:12
JayFbecause until maintenance ended, we proved upgrades worked18:12
gmannand devstack/grenade yoga branches will also not unmaintained so unmaintained maintainers can work there if they need to keep it tested?18:12
fricklerother than that I can note that the yoga unmaintainance was completed and elodilles is now preparing patches to move all other older branches back to v18:12
JayFThank you for the work making this happen18:13
gmannfrickler: for devstack/grenade also or we need to do something there?18:13
gmannI think there was one bug logged in devstack or tempest for this18:13
fricklergmann: I don't understand the question. the patches will be for all projects, like we had them for yoga18:13
gmannfrickler: ok I did not see unmaintained/yoga for devstack greande or its setup in the scripts. 18:14
gmannwill check later18:14
fricklerwell the branch was created18:14
fricklerI didn't see much work so far in general to actually make jobs on yoga work18:15
fricklerso another question is how much time do we want to give people until we say: "this doesn't work, let's just eol it"18:16
gmann++, as long as we cut the branches for devstack/grenade then we are good. I also do not think I myself will spend time on setting up the tempest testing there18:16
gmannon time before EOL, maybe giving/open it for a cycle will be enough ?18:16
gmannit does not harm to keep the broken one for a cycle and it will give enough time for people to step up18:17
JayFYeah, I think the normal 6 month period is what to wait for18:17
fricklera cycle is a long time, the usual time to move zed to eom would be one month after 2024.1 release18:17
JayFand then at next evaluation, if CI is not passing, it gets EOL'd18:17
fricklerwhich is in roughly two months18:17
JayFfrickler: Zed is not slurp, so it'd get an automatic unmaintained branch for 6 months AIUI18:18
rosmaitawell, this is the first time we're doing this, i think we need to be flexible about the deadlines18:18
gmanna cycle will give enough time for people if they care that is only I was thinking. 18:18
JayFrosmaita++18:18
rosmaitafor example, the normal timeline for stable/yoga -> unmaintained would have been november18:18
JayFit's also literally 2 days before C-318:18
JayFmany people (myself included) are trying to complete things before the end of cycle18:18
JayFI suspect we'll get a much better insight into how much people are concerned about the CI for these UM branches once some of the deadline-crunch is passed18:19
fricklerok, so let's wait and see18:19
JayFfrickler: I'm going to send that gate email in my actions after this meeting; if you have a blurb you want me to add about UM branches that might be an easy way to raise awareness18:20
JayFtake the opportunity to shine light when we can and hope someone is looking :D18:20
fricklerJayF: maybe just mention that now is the opportunity for people to show they care about keeping those branches alive18:21
JayF++18:21
JayF#topic Testing runtime for 2024.2 release18:21
JayF#link https://review.opendev.org/c/openstack/governance/+/90886218:21
JayFgmann added this topic; but I'll note: we really need folks to participate here and vote; I'm not sure we're going to reach community consensus especially around python versions 18:22
dansmiththe thing I think is missing there,18:22
dansmithis adding 24.04 to "best effort" right?18:22
gmannyes that is one thing18:23
dansmithit seemed like that was liked by multiple people for when it comes out18:23
dansmithotherwise I think I'm good18:23
JayFI think that'd be an ideal change18:23
gmannmy point is we should not add when it is not yet released18:23
dansmithso I was waiting for or expecting that respin18:23
gmannonce it is released in april then we can add18:23
fricklerIMO it should not be added there. we didn't add py3.11 while it was non-voting either18:23
dansmithgmann: so you want to amend the document once it's released?18:23
JayFHonestly not a bad approach, add 24.04 as "best effort to ensure smooth upgrade" once we're sure we can potentially do it18:24
gmanndansmith: we can that time. but now It seems not correct way to add something not yet there18:24
rosmaitawell, we should at least say that we anticipate adding it when available18:24
dansmithseems like we've had pushback before when we change that late, so it seems most up-front to go ahead and stake our claim on it being a thing18:24
slaweqhow "smooth" it will be if it will be best effort and some projects will test it and others maybe not?18:24
rosmaitaotherwise, it looks completely ad-hoc later18:24
fricklerwe could add 24.04 once devstack jobs are working. iff someone actually implements that in time18:24
dansmithminimal surprises and all18:25
gmanndansmith: sure in that case I will say to add in next cycle 2025.118:25
JayFrosmaita: In those cases, I do consider the gerrit conversations as some historical backing. We do have public logs of these meetings, too :)18:25
dansmithrosmaita: yeah, we could add a new thing, we just already have "best effort" but however we make it clear is fine I guess18:25
gmannbecause 1. it is not yet released 2. not setup in infra/devstack18:25
JayFI am +1 to the idea that it'd be silly to not test against Ubuntu 24.04 once we have it available. I do not thing many people outside of this meeting care about how we document that fact.18:26
gmannmaking that as target for next cycle seems like difficult. 18:26
JayFs/thing/think/18:26
dansmithgmann: "best effort" means it could be zero if we don't have time or something major comes up that makes it hard, IMH18:26
JayF++18:26
clarkbone upside to makring it best effort is it shows the effort would be apprecaited18:26
gmanndansmith: sure but adding something which does not exist yet makes me not comfortable :)18:26
clarkbthen peopel know they can push changes for it without being shot down because it doesn't match the doc18:26
JayFclarkb: that's a good perspective I hadn't considered18:26
gmannand I see less push back of updating runtime for best effort18:27
jamespagein the interests of preserving my own downstream sanity I would like to put effort in to making that happen - 24.04 is already consumable via the development release so I can start looking at that sooner rather than later18:27
fricklerwell we do have a general statement somewhere that we do try to support the latest Ubuntu LTS release18:27
gmannas you mentioned, best effort is optoinal thing so we might not see push back on this if we add later18:27
clarkbfwiw I'm actively trying to clear out old distro releases from nodepool to make room for new ones like ubuntu 24.0418:27
fricklerso that will kind of kick in automatically once it is released18:27
JayFjamespage+++++ like I said in my gerrit comments; I'd rather you all be doing that work upstream than duplicating it downstream :D. I know many times support is not a choice, we're just choosing the venue.18:28
dansmithfrickler: I'm just kinda going on past history where people were, um, not pleased to see that changed mid-cycle18:28
jamespagecompletely concur - holding patches downstream is 100% overhead18:28
fungiwe've definitely added ubuntu lts versions while they were still rc in the past, so it's not impossible18:28
gmannbest effort or adding non voting python versions are the possible ways to add in middle of the cycle also and advance preparation to make them mandatory in future cycle18:28
fungithough i think openstack has avoided depending on them, we offered them more as a preview18:29
frickleras I said, do make patches in infra and devstack, once that works, we can add it to testing runtime, but now earlier IMO18:29
fricklers/now/not18:29
gmanndansmith: but those were for changing our mandatory expectation of voting testing or so18:29
dansmithgmann: yeah I know18:29
gmanndoing best effort of nv python 3.12 should be ok18:29
JayFI am borderline -1 to saying best effort of python 3.1218:30
gmannfrickler: ++18:30
JayFbecause we already know that is extremely unlikely to be supported18:30
slaweqfrickler++18:30
JayFsee my note on Feb 23 here https://review.opendev.org/c/openstack/governance/+/908862/1/reference/runtimes/2024.2.rst#6518:30
dansmithJayF: the problem is that we need to get the fails in front of people soon18:30
gmannyeah that is why we are not adding it right. same with 24.04 also, once it is released then we can ad18:30
gmannadd18:30
dansmithbecause things like taskflow are using removed-from-3.12 things currently AFAIK18:30
JayFdansmith: this fails in a way that is unlikely to fail in unit tests, and more likely to fail IRL18:31
frickleryou could add a community goals to support py3.12 instead?18:31
JayFdansmith: but as long as we ensure that information is aggregated, I'm OKish with it18:31
JayFfrickler: https://review.opendev.org/c/openstack/governance/+/902585 is mostly what this is18:31
JayFfrickler: or at least, the largest identified prereq so far18:31
gmann24.04 is coming in April end or so right so once it is up and we have devstack patches/setup there then we can add? that might be early in the cycle not so late.18:32
gmanndansmith: ^^ does that work for brining failure early so that project can fix18:32
dansmithI honestly don't understand the concern here so I guess I'll just sit on the side and wait18:32
fricklerJayF: that's a subset where we don't know how much we dont know yet?18:32
JayFfrickler: we do know that the sslutils module in oslo_service is 100% nonworking in python3.1218:32
JayFfrickler: because the entire ssl.wrap_socket() interface is gone18:32
jamespageI did some patches somewhere else to rework code around that interface removal18:33
fricklerok, so if we know that things aren't working with py3.12, how can we even discuss making it required, if only as best-effort?18:33
JayFfrickler: that's exactly what I'm trying to say ++18:33
frickleradding jobs that will just fail all the time makes no sense at all18:34
JayFor that will pass and give false sense of security18:34
gmannyes18:34
JayFwhich is the more likely outcome given how sslutils is used18:34
JayFSo I have a suggestion for getting past the deadlock18:34
gmannI think let's vote on the current change, please do -1 if you think 24.04 in best effort is blocking. 18:35
dansmithtaskflow literally can't even be imported in 3.12 AFAIK18:35
gmannvote on gerrit i mean18:35
JayFWe should land the change, as-is, then post followups: one by someone who cares about Ubuntu 24.04 best effort support, and one by someone who cares about Pythin 3.12 best effort support18:35
JayFand we can vote opn those ideas separately18:35
gmannand if there are many objection then we can have a another version with 24.04 as best effort and vote there18:35
JayFthat's the easiest way for us to get to a completed document without mixing the matrix of concerns18:35
gmannthat way we can progress on that. as next cycle setup is coming soon we should be ready with runtime18:36
dansmiththat's a little tilted in favor of the people who don't want that right? :)18:36
fricklerand these followup should IMO be backed by working jobs18:36
dansmithhow about as rosmaita said, some sort of statement of "we're going to add 24.04 to this list mid-cycle, so just assume it's coming"18:36
JayFdansmith: That's a reasonable point; I'm just thinking from a "how can we get clean up/down votes" perspective18:36
fricklerdansmith: well we don't know when support will actually be implemented18:37
fricklerso it may be mid-cycle or much later18:37
dansmithI mean "in the cycle"18:37
dansmithtbh, I don't know when we're going to start with 3.12 unit/functional jobs that fail obviously for people if not as soon as we have a distro that can run them18:38
fricklerbut much later likely would make more sense to defer to 2025.1 then. so no need to announce now, is my reasoning18:38
gmann"24.04 testing as best effort if it is released and testing setup is completed before m-2 of the 2024.2 cycle"18:38
JayF"OpenStack plans to implement devstack support for Ubuntu 24.04 when released during the 2024.2 cycle. When this is complete, we will offer best efforts to support Ubuntu 24.04 with available time."18:38
gmannhow about that ^^18:38
JayFdansmith: 24.04 is python 3.12?18:38
JayFdansmith: that's a detail I had missed until this moment18:38
fungiyes18:38
jamespageit is18:38
gmanndoing these things after m-2 is little hectic  18:38
dansmithJayF: that's why I'm so interested in it being on the list, yes :)18:38
dansmithnot for any other reason really18:38
JayFoof, then yeah, there's no point in doing it for D18:38
JayFbecause we can't get python 3.12 working in D unless we think we can eventlet-migrate a large amount of things in one cycle18:38
dansmithum, what?18:38
JayFEventlet does not expose the interfaces, in python 3.12, for us to replace the oslo_services.sslutils module18:39
JayFbecause they have changed upstream18:39
spotz[m]So eventlet will hold up the move unless folks can work on their migration faster18:39
dansmithso you are thinking everyone is going to migrate off of eventlet before we can support 3.12? I have some bad news for you in that case...18:39
JayFspotz[m]: that's pretty much what I'm asserting, or at least, we have to partially migate bits18:39
JayFdansmith: this is why I whipped up so much of a frenzy around starting the migration effort, when we ID'd this back in Nov 202318:40
opendevreviewTim Burke proposed openstack/election master: Tim Burke candidacy for Swift PTL (Dalmation)  https://review.opendev.org/c/openstack/election/+/91038318:40
JayFWe have another important issue still on the agenda18:41
dansmithJayF: AFAIK, the issue you're talking about is only for people exposing an eventlet-hosted SSL server socket, which is not everyone18:41
gmannour runtime deadline also says (somewhere in doc but i remember we follow that since starting): define the things to test if they are available before cycle start and not after or in the middle once they are available. that is why ubuntu LTS are always picked up in next cycle even they are released after 1 month of our cycle start18:41
dansmithand I thought the assertion was that eventlet was working to mitigate all these things18:41
JayFdansmith: sslutils is used for more than that, fwiw18:41
gmannwith that reason I think adding 24.04 in 2024.2 cycle not good instead considering it in 2025.1.18:41
JayFWe made eventlet *install at all* on python 3.12, and fixed things like Queue and Event for python 3.1218:42
JayFI'm timeboxing this topic to :45 so we have time for Murano18:42
dansmithagain, my reasoning for 24.04 as best effort was to get the manageable 3.12 things to the forefront, like the fact that taskflow won't even import and thus a big chunk of glance isn't either18:43
spotz[m]It definitely seems we have eventlet things that need to be accomplished before the move to 3.12 and 24.04 needs to be bumped unless you can run 2 versions of python in it18:43
JayFwell, Dan's point about making more people aware of how broken py3.12 is ... it's a good point18:43
dansmiththat's really my only reason for wanting 24.04 in there at all this close to its release18:44
dansmithand really only for unit/functional at this point18:44
dansmithanyway, I said I was going to shut up18:44
JayFI'm glad you didn't that's a good point. 18:44
JayFI'm closing this topic for now, moving on. I'm not sure what the specific action is, but I think it's unlikely we'll find general consensus and may just need to majority-vote.18:45
JayF#topic Murano Inactivity, and inclusion Caracal release18:45
JayF#link https://review.opendev.org/c/openstack/governance/+/908859/18:45
jamespagels18:45
JayFSo right now, we have Murano with strong consensus to mark as inactive18:46
gmannonly concern in the doc change (i was doing before murano inactive status) was stopping the release for project moving to Inactive after m-218:46
JayFHowever, myself, and some other TC members, felt we shouldn't release it since we know it has a critical unfixed bug and no support18:46
gmannI modified the doc change now with "not to define any release criteria for project going to inactive after m-2 and let release team decide on those"  #link https://review.opendev.org/c/openstack/governance/+/90888018:46
gmanntrue, i do not think we should release but I agree on the argument about let's release team handle it like they do/did for any other project with broken gate/code18:47
JayFI am OK with that doc as changed... but was OK with it unchanged, too. I'm curious what frickler would think about that.18:47
fricklerregarding the critical bug, we'll still have three "supported" releases containing it, so I don't think it will make much difference to have another one18:48
JayFI'll note that mark-murano-inactive change does not appear stacked properly with the modify-timeline patch anymore18:48
fricklerI didn't get to read the updated on the above patch yet18:48
frickler*updates18:48
JayFfrickler: Well, we didn't know those releases were bugged when we pushed them out. I think that shifts our responsibilities here a little bit.18:48
gmannfrickler: please check and if that looks ok, i can rebase Murano inactive status change18:48
JayFEverytime we release an OpenStack project with known issues, or that's barely working, it hurts what "OpenStack" means for everyone :/18:49
gmannAs we are not worried about Murano releaase, I think we should stack up it on top of doc change handling the case of marking inactive after m-218:49
fricklerwe still don't know how critical that bug actually is or whether it is bogus18:49
JayFfungi: Have you taken the actions we discussed the other day? w/r/t opening that bug?18:50
fungii've urged the new maintainers to consider switching it to public if they don't have time to fix it18:50
JayFfrickler: I will say, it's my understanding it *is* a critical bug, and unlikely to be fixed ever.18:50
fricklerso that would make the project dead on the spot?18:51
fungithe specific quote from andy was "With the lack of community participation in Murano, this may not get fixed. I hope to look into the code when I get time, but I'm not sure when that might be."18:52
fricklerso is this critical enough that we should consider actually pulling all release of murano?18:53
JayFI do not have access to the bug and haven't seen it. fungi may be the only person in the meeting who has18:53
JayFbut if it's 1) bad enough to be nonpublic and 2) has no reasonable timeline to fix18:53
JayFthat makes me feel like pulling releases is the right thing18:53
fungii can say that people who have access to that bug indicated their production approach would probably be to disable a significant amount of its functionality18:54
JayFer, not releasing more18:54
JayFI don't know about *pulling* them from pypi that are already oyut18:54
slaweqJayF++18:54
spotz[m]I agree with Jay here, any release of OpenStack that has a major bug in it hurts OpenStack. We can't help what's already out there except putting a warning in it or trying to find someone who can fix it and maybe backport it which I think currently it's own issue18:55
JayFAll this being said: we're past the second milestone, and unless I'm willing to do the work to keep it out of the release, I prefer ultimately leave it up to the releases team who are doing the work18:55
frickleras a release team member I would prefer that decision not to be delegated to me18:56
fungiif there are tc members who are interested in helping either 1. try to find a fix for murano, or 2. provide authoritative guidance to the murano maintainers on how to proceed with disclosure/release activities related to this, i'm happy to subscribe you18:56
dansmithJayF: walked right into that one18:56
JayFfrickler: what form should that be in? A separate resolution, if we don't want to change the overall policy?18:56
fricklerbut with this new information, I would support actually dropping it from the current release as a special case18:56
fricklerI still think we should not change the general policy, yes18:57
JayFDo we agree that logistically that takes the form of a resolution?18:57
JayFIf so, I'll take an action to write one up.18:57
fricklerprobably, yes18:57
JayF#action JayF to write resolution removing Murano from Caracal release18:57
JayFWe have 3 minutes left; anything else on this? 18:57
gmannI do not think we need to write resolution per each cases of such inactive projects. does not our current polocy cover it?18:57
gmanni mean release policy/criteria ?18:58
fricklernot the "remove from release after m-2" part I guess?18:58
JayFgmann: current policy is "inactive things can't release past -2", if releases team doesn't want to change that policy so TC continues to be incentivized to evaluate activity earlier, it makes sense to special case18:58
JayFI can understand releases team not wanting to change a policy that could make TC decide, say before the release, to pull something18:58
JayFwe're 3 days before RC, we're pretty darn close to doing that now :D18:59
gmannthat is my doc change cover the case of inactive after m-2 and let release team decide18:59
JayF> frickler> as a release team member I would prefer that decision not to be delegated to me18:59
gmannor we want to change that to TC need to decide with resolution or so18:59
JayFI am trying to respect that request18:59
JayFhence the TC resolution so we take the decision18:59
gmannI am confused honestly :)18:59
gmannwe do not want TC to decide on release of them as proposed in doc change but need resolution for the same18:59
JayFWe do not want to change the document for the general case. Murano is a special case: it's not just inactive, it's potentially insecure19:00
fricklerI just want the "no release" decision to be murano specific, not a general policy change19:00
gmannok19:00
JayFAnd that's time19:00
JayFthanks everyone o/19:00
JayF#endmeeting19:00
opendevmeetMeeting ended Tue Feb 27 19:00:49 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)19:00
opendevmeetMinutes:        https://meetings.opendev.org/meetings/tc/2024/tc.2024-02-27-18.03.html19:00
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/tc/2024/tc.2024-02-27-18.03.txt19:00
opendevmeetLog:            https://meetings.opendev.org/meetings/tc/2024/tc.2024-02-27-18.03.log.html19:00
spotz[m]That makes sense or we'll be doing this potentially every release19:00
slaweqIMO it should be more like general policy if we will have cases like Murano in the future19:01
JayFslaweq: I think the entire point is: TC screwed up here. We should've ID'd this earlier19:01
gmannfrickler: JayF:  i think we should cover such insecure case also in doc as there might be other cases in future instead of writing resolution every time19:01
JayFslaweq: We do not want to remove the time-pressure to do it before M-2 by changing the general policy; but we also don't want Murano to release19:01
slaweqJayF true, ut it can happen for many reasons19:01
JayFgmann: this is sticky because the bug isn't public. We don't *know* it's insecure ;) 19:01
gmannslaweq: exactly 19:01
fungigranted, the vulnerability report only showed up in january19:02
JayFMy main concern is getting us to a point where everyone involved is happy, and murano isn't in the release19:02
fungibut the writing was on the wall, sure19:02
gmann'I mean if any project are not/do not want to fix security bug reported'19:02
JayFI don't care if I have to leap headfirst through a flaming hoop19:02
JayF:D 19:02
slaweqI totally agree that it should be before M-2, what I'm saying is that we should have some kind of additional "safety switch" in case like that, when things will pop up after M-219:02
spotz[m]So we as the TC need to make the decision to pull Murano from the C release19:02
JayFslaweq: a resolution is cheap, easy, and definitionally a special case19:03
slaweqbut if we want to do it with extra document indiviually when thing like that will happen - that's also fine for me19:03
gmannmay be adding such case in general polciy which can cover Murano case also now and future cases also will save more time19:03
JayFslaweq: I do not want to trust myself to write a policy general enough to cover all the cases WITHOUT being general enough to be abused19:03
slaweqonce we will have such precedence with Murano it will be kind of easy to do it if needed19:03
rosmaitawe can split the difference, special resolution to stop murano now, discuss policy at the PTG19:03
JayFthat's a great suggestion19:03
slaweq++19:04
rosmaitafrom my point of view, not fixing a security issue is enough to pull from the release19:04
JayFtc-members: Someone should think about volunteering to be next chair, and then help me do PTG research19:04
JayFrosmaita: I agree, I think the sticky bit here is that technically there's no public security bug for us to point at19:04
gmannrosmaita: and that is why making it in general policy is clear case right19:04
slaweqrosmaita++ exactly, and it's no matter what point of the cycle it is19:04
slaweqok, I'm going AFK, see You o/19:04
rosmaitai don't think we need to point to a public bug, if someone is really intereseted, they can volunteer to be murano PTL and get access and fix it19:05
fricklerone other thing I meant to mention for general discussion: the current delay in getting election changes merged is IMO not a good feedback to candidates, leaving the status of their submission pending for 10 days19:05
rosmaitafrickler: i agree, i guess that's a new thing? iirc, patches were merged as soon as eligibility was determined in the past19:06
JayFrosmaita: I think that eligibility checking was a human doing checks19:06
spotz[m]Yeah, as of right now glancing at the repo we have a TC election but I haven't seen any others.19:06
gmannonly 1 day left to close the nomination. if needed I volunteer to help as election official to ianychoi , let's see what he says19:06
spotz[m]I think it's just Ian who has reviewed everyone up until today and TOny19:06
JayFack19:07
JayFI will take time to look over some of these19:07
gmannmsged in election channel 19:07
spotz[m]gmann that would be a big help19:07
JayFtonyb: elodilles: (apparently this is the channel I share with both of you?) -- do you all want to send out an email to the ML asking for additional reviewers to join the global UM core group for OpenStack?19:09
fungithe election check jobs do check the required information and the job logs provide links to the evidence returned by those queries. some very minor adjustment to the jobs could surface those urls as inline comments in the review so that the election officials don't even need to go dig them out of the log. manual research shouldn't really be needed19:10
JayFI'm glad you said that, because I would've done it manually19:10
fungithe check job log already does try to do a good job of visually calling attention to those query results to make them faster to spot too19:11
fricklerfungi: or add them as job artifacts. I did that recenty for similar results from release jobs19:12
elodillesJayF tonyb : i can do that, yes. i'll be on PTO tomorrow (and i am leaving for the day now) but i try to not forget to do that on Thursday19:14
JayFack; ty19:14
fungifrickler: the up side to inline comments is that you don't even need to follow a link to the job results, so it saves you an additional page visit or two19:15
fricklerfungi: yes, but it will also end up as dead link once logs expire19:18
opendevreviewJay Faulkner proposed openstack/governance master: Resolution: Remove Murano from 2024.1 release  https://review.opendev.org/c/openstack/governance/+/91043419:22
fungiso do test results, for that matter19:23
opendevreviewJay Faulkner proposed openstack/governance master: Resolution: Remove Murano from 2024.1 release  https://review.opendev.org/c/openstack/governance/+/91043419:23
fungithough the links shouldn't end up being dead?19:23
JayFlog links time out very quickly19:23
JayFespecially on rackspace cloud19:23
JayFI've had log links from CI jobs disappear in <1wk in some cases from rax jobs19:24
fungithey'd be 1. url to the candidate's foundation profile, 2. url to a gerrit query for the candidates merged changes over a specific timeframe19:24
JayFthose would be links that don't expire :D19:24
fungier, actually #2 is a url to a specific gerrit change owned by the candidate merged within the required timeframe, sorry19:24
fungiand for a deliverable repo of the team they've nominated to be ptl of19:25
opendevreviewJay Faulkner proposed openstack/governance master: Resolution: Remove Murano from 2024.1 release  https://review.opendev.org/c/openstack/governance/+/91043419:28
clarkbnow that the opendev team meeting is over I wanted to make two observations re the python3.12 and ubuntu 24.04 discussion. The first is that we seem to be in a logjam over whether we should describe where we want to be or where we think we will be at the end of the next cycle. I think the document can be written to capture both pieces of info19:43
clarkbI'm not hearing any objections to people working on python3.12 support and ubuntu 24.04 support. But there is concern that it is unreasonable to expect that across the board.19:44
clarkbI do think there is value in saying "please help us work on this, we want this to be functional"19:44
clarkband also "due to problems with dependencies (eventlet) we think it is unlikely that universal python3.12 support will be present in the release"19:44
*** elodilles is now known as elodilles_pto19:46
clarkbThen separately the confusion around all of the moving parts and their relationships to get python3.12/Ubuntu 24.04 support in makes me rewonder if it would be a good idea to try and have some lightweight project management within openstack for these larger goals/issues19:46
fricklerI was actually having a similar idea of making something like a "known issue" section and mention py3.12 and the needed work there?19:46
clarkbsomeone who can organize the dependency tree and keep track of where we are in accomplishing things. That way end users and devs both can follow along to track progress. I'm sure there are other issues that could use similar information tracking19:47
clarkbfrickler: ya I think that would work well19:47
fungidoes seem like it can be made to work. i mean, debian and ubuntu are both packaging openstack services for platforms with python3.12 as the default python3. but there are corner cases unsolved still i'm sure19:48
gmannclarkb: frickler yeah, that is why it is good idea to move this effort as community wide goal in term of fixing as a group/tracking etc19:51
clarkbgmann: I think that is orthogonal19:52
clarkbYOu should absolutely make the statement in the platform support document beacus that is where people will look for this info19:52
clarkbthen if you need a community wide goal to drive the work you do that too19:52
JayFfrickler: I really like that idea19:53
clarkbpart of the problem here is it appears we've got contributors that feel they need to ask permission to work on this stuff19:53
JayFand I agree re: saying our platform is X and organizing the work to make our platform "x" (a goal) is separate19:53
clarkbwe know we want to get there eventually. Lets make that explicit and solve the permission problem19:53
gmannclarkb: yeah, i am trying to do that in runtime doc. 19:54
clarkbfrickler's suggestion also neatly captures the idea that this stuff only happens when people invest in making it happen19:54
clarkbwhich I hope is a good way to encourage people to help19:55
fricklerJayF: I don't want you the overload the gate email, but if you could also drop the https://review.opendev.org/q/topic:%22vwx-unmaintained%22 URL in the unmaintained context, that might be nice, too19:57
fricklerand with that I'm really done for today, cheers19:57
JayFo/19:57
opendevreviewGhanshyam proposed openstack/governance master: Define testing runtime for 2024.2 release  https://review.opendev.org/c/openstack/governance/+/90886220:55
opendevreviewGhanshyam proposed openstack/governance master: Define testing runtime for 2024.2 release  https://review.opendev.org/c/openstack/governance/+/90886220:56
opendevreviewGhanshyam proposed openstack/governance master: Define testing runtime for 2024.2 release  https://review.opendev.org/c/openstack/governance/+/90886220:58
gmanntc-members ^^ added note about 24.04 testing, please check if this version looks ok20:59
opendevreviewMerged openstack/election master: Adding Michael Johnson candidacy for Designate  https://review.opendev.org/c/openstack/election/+/91036722:12
opendevreviewMerged openstack/election master: Adding Gregory Thiemonge candidacy for Octavia  https://review.opendev.org/c/openstack/election/+/91036222:15
opendevreviewMerged openstack/election master: Add Dmitriy Rabotyagov candidacy for Vitrage PTL  https://review.opendev.org/c/openstack/election/+/91032822:15
opendevreviewMerged openstack/election master: Add Artem Goncharov candidacy for TC  https://review.opendev.org/c/openstack/election/+/91032722:18
opendevreviewMerged openstack/election master: Add Dmitriy Rabotyagov candidacy for TC  https://review.opendev.org/c/openstack/election/+/91032522:19
opendevreviewMerged openstack/election master: Tim Burke candidacy for Swift PTL (Dalmation)  https://review.opendev.org/c/openstack/election/+/91038322:22
opendevreviewMerged openstack/election master: Adding Axel Vanzaghi candidacy for Mistral  https://review.opendev.org/c/openstack/election/+/90990122:23
opendevreviewMerged openstack/election master: Add suzhengwei candidancy for Masakari  https://review.opendev.org/c/openstack/election/+/91020522:23
opendevreviewMerged openstack/election master: Slawek Kaplonski candidacy for TC  https://review.opendev.org/c/openstack/election/+/91015422:23
opendevreviewMerged openstack/election master: Add jamespage TC candidacy  https://review.opendev.org/c/openstack/election/+/91024922:24
opendevreviewMerged openstack/election master: Erno Kuvaja for Telemetry PTL  https://review.opendev.org/c/openstack/election/+/91022622:24
opendevreviewMerged openstack/election master: Adding Jon Bernard candidacy for Cinder PTL  https://review.opendev.org/c/openstack/election/+/91002422:40
opendevreviewMerged openstack/election master: Adding Tatiana Ovchinnikova candidacy for Horizon PTL  https://review.opendev.org/c/openstack/election/+/91027222:40
opendevreviewMerged openstack/election master: Add Pierre Riteau's candidacy for Blazar PTL  https://review.opendev.org/c/openstack/election/+/90996422:40
opendevreviewMerged openstack/election master: Adding Riccardo Pittau candidacy for Ironic PTL  https://review.opendev.org/c/openstack/election/+/90953422:40
opendevreviewMerged openstack/election master: Add Goutham Pacha Ravi candidacy for TC  https://review.opendev.org/c/openstack/election/+/90923922:40
opendevreviewMerged openstack/election master: Adding Amy Marrich candidacy for TC  https://review.opendev.org/c/openstack/election/+/90911222:40
opendevreviewMerged openstack/election master: Adding songwenping candidacy for Cyborg  https://review.opendev.org/c/openstack/election/+/90931322:41
opendevreviewMerged openstack/election master: Add Hao Wang candidancy for Zaqar PTL  https://review.opendev.org/c/openstack/election/+/90956222:41
opendevreviewMerged openstack/election master: [2024.2] Propose dalees candidacy for Adjutant  https://review.opendev.org/c/openstack/election/+/90980322:41
opendevreviewMerged openstack/election master: Adding Hemanth Nakkina candidacy for Sunbeam  https://review.opendev.org/c/openstack/election/+/90994422:43
opendevreviewMerged openstack/election master: Adding Takashi Kajinami candidacy for Storlets PTL  https://review.opendev.org/c/openstack/election/+/91013722:44
opendevreviewMerged openstack/election master: Adding Takashi Kajinami candidacy for Heat PTL  https://review.opendev.org/c/openstack/election/+/91013822:44
opendevreviewMerged openstack/election master: Adding Takashi Kajinami candidacy for Puppet OpenStack PTL  https://review.opendev.org/c/openstack/election/+/91013622:46
opendevreviewMerged openstack/election master: Adding Eric Zhang candidacy for Venus  https://review.opendev.org/c/openstack/election/+/90957022:46
opendevreviewMerged openstack/election master: Add Martin Kopec candidacy for QA 2024.2 PTL  https://review.opendev.org/c/openstack/election/+/90987122:49
opendevreviewMerged openstack/election master: Adding Yasufumi Ogawa candidancy for Tacker  https://review.opendev.org/c/openstack/election/+/91023322:49
opendevreviewMerged openstack/election master: Sylvain Bauza candidacy for Nova 2024.2 PTL  https://review.opendev.org/c/openstack/election/+/91023522:49
opendevreviewMerged openstack/election master: Add Vladimir Kozhukalov candidacy for Openstack-Helm 2024.2 PTL  https://review.opendev.org/c/openstack/election/+/90906722:49
opendevreviewMerged openstack/election master: Sylvain Bauza candidacy for TC  https://review.opendev.org/c/openstack/election/+/90907622:49
opendevreviewMerged openstack/election master: [2024.2] Add mnasiadka candidacy for Kolla  https://review.opendev.org/c/openstack/election/+/90907822:49
opendevreviewMerged openstack/election master: Andriy Kurilin (andreykurilin) PTL Candidacy for Rally  https://review.opendev.org/c/openstack/election/+/90907922:49
opendevreviewMerged openstack/election master: Add Hongbin Lu Candidacy for Zun  https://review.opendev.org/c/openstack/election/+/90934522:49
opendevreviewMerged openstack/election master: Add Artem Goncharov candidacy for OpenStackSDK PTL  https://review.opendev.org/c/openstack/election/+/90945022:49
opendevreviewMerged openstack/election master: Add Brian Haley (haleyb) candidacy for Neutron PTL  https://review.opendev.org/c/openstack/election/+/91026322:49
opendevreviewMerged openstack/election master: Add Carlos da Silva candidacy for Manila PTL  https://review.opendev.org/c/openstack/election/+/91025922:49
JayFjamespage: noonedeadpunk: Do you have any way of raising the priority of https://bugs.launchpad.net/ubuntu/+source/dnsmasq/+bug/2026757 -- this is actively breaking Ironic's gate because the older, unbroken package we pin to was pulled from mirrors22:57
JayFWe are currently working around via a manual build ( https://review.opendev.org/c/openstack/ironic/+/888121/8/devstack/lib/ironic#3426 ) but that is obviously non-ideal22:57
JayFand before I make a PPA to fix the issue and blog about it, I wanted to see if you all could just ... help me get it fixed?22:58
opendevreviewMerged openstack/election master: Remove retired OpenStack-Chef from election  https://review.opendev.org/c/openstack/election/+/91026123:05
fungiJayF: any idea whether anyone attempted a git bisect of upstream sources to figure out what commit introduced the issue? or is reproduction so involved as to render such tactics impractical?23:34
JayFThis has been ongoing a while, we punted it (out of sight out of mind) and now it's coming back23:34
JayFAIUI it's fixed in the next version23:34
JayFbut because it's LTS, they won't bump package version by policy23:35
JayFand there's dispute which of two commits actually fixes the issue at hand ... and it sorta puttered out there23:35
fungiright, though they could backport a patch in theory, if a working one were identified23:35
JayFI guess? I know probably less about how Ubuntu manages that sorta thing than any other distribution in common use.23:35
fungibut also, it's possible jammy-backports would be an acceptable place to have a full backport of the n version23:36
JayFYeah -- my question is mainly trying to get ubuntu experts to tell me a way to fix it that is not just for Ironic CI, but that I could point deployers at, too23:36
JayFideal fix is invisible to LTS; but my preference is anything that doesn't lead to me doing ad-hoc build infra to avoid telling all our users to compile dnsmasq ;) 23:37
fungiright, if it's a candidate for inclusion in jammy-backports then that's not too hard of a solution for downstream consumers23:37
JayFTheJulia: fyi ^23:37
fungijust enable backports in their apt sources and install dnsmasq/jammy-backports instead23:37
clarkbhttps://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q3/016562.html did identify a likely culprit fwiw23:37
fungithough it sounded like an ubuntu package maintainer tried backporting that patch to the version in jammy to no avail (problem still recurred)?23:38
JayFYeah, which is where the dispute comes in about how it's fixed23:38
TheJuliaI quite literally have no spoons to follow it beyond do the immediate needful to unblock the work infront of me. 23:39
JayFTheJulia: ++ understood just didn't want you to miss context since it's also what you're working on23:39
JayFTheJulia: I appreciate your short-term fixing while I try to scan for medium/long term :D23:39
TheJuliaI think the cause and fixes were identified based upon dnsmasq commit/change logs and since we're not the only ones who have spotted it23:40
TheJuliaAnyway, back to the needful short term23:40
JayFIf it's a reproducable failure, we just rigged up a source-built-reproducation-machine in Ironic; I can probably branch off that once merged and try a few patches in our CI23:40
JayFsee what combo fixes it23:41
fungioddly, https://packages.ubuntu.com/dnsmasq would seem to indicate the versions in jammy and noble are both based on 2.9023:41
JayFthat is likely the ideal solution23:41
fungipackage changelog indicates the version in jammy was updated to 2.90 two weeks ago to address a couple of security vulnerabilities23:43
TheJuliaoh, well, hmm23:43
JayFhmmmmmmm23:43
TheJuliawe could likely just backout the change anyhow23:43
fungihttp://changelogs.ubuntu.com/changelogs/pool/main/d/dnsmasq/dnsmasq_2.90-0ubuntu0.22.04.1/changelog23:44
JayFfungi: look at you, fetching fresh context when we're working on a copy of month old context23:44
JayFA+++++23:44
* TheJulia turns off ipv6 because some intermediate carrier is randomly dropping v6 to review.opendev.org23:44
JayFTheJulia: I'll stack a removal on top of your existing patch, if you want?23:44
JayFhappy to let you do it too23:44
TheJuliaJayF: if you could that would be awesome, I have to backport something down to wallaby before I call it a day23:45
JayFyep, should be ezpz23:45
fungiTheJulia: probably zayo (former abovenet backbone), vexxhost has been having no end of trouble with them not relaying ipv6 recently23:45
TheJuliafungi: fun fun!23:53

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!