16:00:09 #startmeeting kolla 16:00:10 Meeting started Wed Mar 14 16:00:09 2018 UTC and is due to finish in 60 minutes. The chair is Jeffrey4l. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:00:11 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 16:00:13 The meeting name has been set to 'kolla' 16:00:25 #topic rollcall 16:00:29 o/ 16:01:04 hrm.. 16:01:08 o/ 16:01:19 o/ 16:01:59 o/ 16:02:46 ok. let us starting the meeting 16:02:49 hi guys 16:02:53 :) 16:02:55 #topic Announcements 16:03:12 hi all 16:03:16 * hrw here for logs. have to go out 16:03:44 1. core nomination, i nominate caoyuan as core reviewer, feel free to +1 or -1 in the ML 16:04:25 2. queens rc2 tag will be created in this week. 16:04:40 There are still fewer patch need be merged. will talk this later. 16:05:09 3. community have changed the release mode, especially for trailing-cycle project 16:05:20 (kolla is a trailing cycle project) 16:05:35 more info can be found here 16:05:37 #link http://lists.openstack.org/pipermail/openstack-dev/2018-March/128215.html 16:06:13 as a result, tailing-cycle project can be release in 3 month after the coordinate release. 16:06:41 and othere projects ( like nova, neutron etc) can not merge feature after m2 16:07:00 this is a good for trailing cycle project 16:07:30 it will make us more time to test before release. 16:07:38 that's all from me, 16:07:51 any other community announcement? 16:08:32 guess no 16:08:36 let us move on 16:08:41 #topic kolla queens release rc2 requirements 16:08:57 this week is the deadline for rc2 tag. 16:09:06 and rc2 will be the final release. 16:09:25 There is still few patch need be merged for queens branch 16:09:40 here is i concern 16:09:59 Update ceph client.admin caps during upgrade 16:10:03 #link https://review.openstack.org/#/c/547012/ 16:10:20 Migrate neutron-vpnaas-agent to neutron-l3-agent 16:10:25 #link https://review.openstack.org/#/c/530208/ 16:11:00 is there any other patch should be merged for queens branch? 16:11:10 https://review.openstack.org/#/c/550685/ 16:11:36 Security memcached: disable UDP ^^ yes. security releate 16:13:45 cool seems everythin else is OK for queens 16:13:48 next 16:13:58 #topic ptg summary recap 16:14:05 #link http://lists.openstack.org/pipermail/openstack-dev/2018-March/128044.html 16:14:18 thanks pbourke's summry 16:15:02 that is all we will do in the next cycle for kolla & kolla-ansible project 16:15:24 if you are interested one of them, feel free to take it 16:15:58 very nice summry pbourke 16:16:07 pbourke++ 16:16:10 pbourke thanks :D 16:16:40 if there is anything unclear, please add it into the meeting agenda. and we can talk :D 16:17:55 :) 16:17:56 ok next 16:18:02 #topic kolla-kubernetes project split 16:18:15 this is talked on the last meeting. 16:18:45 all of us are agree to split the kolla-kubernetes into tc govermence. 16:19:01 i tried to talk with tc team. 16:19:25 the anwser from tc is yes. 16:19:37 and i also pushed a split team pathc here 16:19:42 #link https://review.openstack.org/552531 16:20:09 there are still few question in the patch and i will try to resovle. 16:20:26 moreover, feel free to add comment on it. 16:21:17 on the other hand, once kolla-kubernetes is split, any one on the kolla team core can be join the kolla-kubernetes core team. 16:22:16 then we can re-create the kolla-kuberentes team soon and try to archive the 1.0 goas ASAP 16:22:47 if you are intrested kolla-k8s, please contact me ;D 16:23:37 Jeffrey4l: I answered ttx question 16:23:41 any question? 16:23:47 thanks inc0 16:23:48 Jeffrey4l, interested 16:24:57 gkadam, yeah, this should be good for all kolla projects. 16:25:15 let us move on 16:25:18 #topic tarballs.o.o image 16:26:04 before kolla push a docker registry tar file to tarballs.o.o site 16:26:29 which is useful for CI jobs. and many end-user use the it too. 16:26:46 but recently , with zuul v3's support, kolla push image to hub.docker.com site directly. 16:27:05 so tarballs.o.o sites images are useless and out of update. 16:27:31 today, i ask for infra team to remove all the tar files in tarballs.o.o 16:27:39 and left a readme.md file there 16:27:50 #link http://tarballs.openstack.org/kolla/images/ 16:27:50 Jeffrey4l Is there a way that users can pull all images them needed from hub.docker.com? 16:28:18 chason, there is no one shot command. 16:28:36 either use kolla-ansible pull or write your own scripts. 16:28:51 Jeffrey4l Maybe we can implement it. :) 16:29:08 I prefer tarballs 16:29:33 because of I can get all images in one step. 16:29:57 yes. a script in kolla project, which can generate all hub.docker.com image name. 16:30:08 feel free to implmeent it ;D 16:30:19 Jeffrey4l Haha, OK 16:30:42 it is very useful for the guys who can not access internet easily, especially for China guys :D 16:31:09 Jeffrey4l Exactly 16:31:23 or guys in a parano company ! 16:31:46 newbie question. will the plugins-archive methodology work if tarballs.o.o are removed? 16:31:55 hrm, what's the story ktibi :D' 16:32:12 Sounds like there are many sufferers. :P 16:32:30 sadasu, we just remove the docker registry image. and move it to hub.docker.com 16:32:32 o/ 16:32:47 nothing is lost in fact sadasu 16:32:50 sup pbourke 16:33:08 sorry im late, will catch up on scroll back and have one thing to bring up if there's time 16:33:10 so i don't think it break anyting 16:33:22 cool 16:33:36 Jeffrey4l, I work on infra with military restriction, so I've never seen internet :D 16:33:38 actually, we are run out of agenda now 16:33:39 Jeffrey41: thanks for confirming that 16:34:17 I use an usb key for download my kolla images :D 16:34:18 ktibi, :D 16:34:19 ktibi, got. so the tool is more useful then i tought 16:34:59 i heard someone burn the kolla images into a DVD. become usb device is not allowd ;/ 16:35:39 ok. let us move on 16:35:53 #topic Open Discussion 16:36:08 any volunteer? 16:36:11 I wanted to just bring some attention to this spec 16:36:12 btw, I think we should have a tool to let user download all Kolla images with a specific tag form dockerhub? 16:36:25 https://review.openstack.org/#/c/550958/ 16:36:40 duonghq, i think it is what chason and ktibi said. right? 16:36:58 would appreciate if people could have a read of it and the poc for keystone that is linked from it 16:37:30 i like your idea pbourke 16:37:58 i am agree that image shouldn't take any thing related to deployement 16:38:04 i will review it later. 16:38:05 thanks 16:38:06 thanks Jeffrey4l 16:38:16 it should be fairly low impact overall 16:38:27 that's all I have for today :) 16:38:41 added to my review list, I will take it tomorrow 16:38:52 thank Paul 16:39:26 I have some slides from a presentation I gave recently on kayobe: https://www.slideshare.net/MarkGoddard2/to-kayobe-or-not-to-kayobe 16:39:53 mgoddard_, great 16:40:07 mgoddard_, nice one! 16:40:14 #link https://www.slideshare.net/MarkGoddard2/to-kayobe-or-not-to-kayobe 16:40:52 I've also been working on a job for testing bifrost deployment 16:41:05 https://review.openstack.org/549775 16:41:13 It's now passing 16:41:21 mgoddard_, is there demonstration video? 16:41:59 Jeffrey4l: sadly not - no recording. It was a short demo 16:42:17 mgoddard_, great slides :D 16:42:42 mgoddard_, thanks 16:43:16 will kayobe join the openstack community/ 16:43:43 Jeffrey4l: https://git.openstack.org/cgit/openstack/kayobe :) 16:44:01 aha, it is already there. 16:44:19 We're becoming an OpenStack-related project, just working on a deployment CI job 16:44:35 cool 16:44:38 https://review.openstack.org/551986 16:44:58 so kolla-ansible will see some additional CI testing 16:46:01 great 16:46:10 thanks mgoddard_ 16:46:24 any othe discussion? 16:46:27 o/ 16:46:36 #link https://review.openstack.org/#/c/552445/ 16:46:47 this ps is the last ps of the blueprint 16:47:16 so afterthat, which work I should do before close the bp? (one patch for updated documentation?) 16:47:19 i will check it after the meeting. nice jobs 16:47:33 thank Jeffrey4l 16:47:46 duonghq, add a release note? 16:48:09 duonghq one patch for updated documentation is a good idea! 16:48:11 duonghq, doc should be added 16:48:21 Jeffrey4l, the reno is added one patch before 16:48:32 cool 16:48:33 the patch is for projects added in Q 16:49:10 https://review.openstack.org/#/c/398685/22/releasenotes/notes/specify-task-become-84f83707f612bcf3.yaml 16:49:12 this file 16:49:52 should we add a nother reno to indicate that become support all tasks now? 16:50:30 so which category should the note should fall on? 16:50:45 how about features? 16:50:46 I don't have idea about this 16:51:21 the current feature is "Increase security by add "become" to only n....." 16:51:39 I think it's already cover the patch 16:51:40 wait. "the patch is for projects added in Q", not Q, it is Rocky 16:51:58 ^^ based on this, another reno is not required. 16:52:06 I have a point, but just to have your opinion 16:52:30 plase ktibi 16:52:34 Jeffrey4l, the patch will be merged in R, but for services added in Q, sorry for the confusion 16:52:37 please ktibi 16:52:45 as I said above, I have strong security constraints. So I try to work on security in kolla and for now, I have work I guess 16:52:52 i see, thanks 16:53:01 like SSL on rabbitMQ or SSL on internal network 16:53:44 ktibi, that is awesome. we can ask help from security team if it is neccessary. 16:53:45 for now, kolla can't olve these problems 16:53:46 ktibi, awesome, could you draft bp for those 16:53:55 even a spec 16:54:00 and we will work on this 16:54:31 duonghq, +1 16:54:45 yes, I'll make a blueprint. but what do you think about that ? because some people say internal network must be without SSL (perf issue) ? 16:55:26 ktibi, Kolla should address as much as requirements from user as possible (especially security issues) 16:55:42 i think this is a choice left for operator. 16:56:08 duonghq, yes because I think a lot of company can't consider kolla for security reason :/ 16:56:17 which one is important? perf or security. i think different environement may have different reasult. 16:56:34 Jeffrey4l, +1, and we should provide options for both cases 16:57:13 btw, in kubernetes ssl is necessary for all compomenet. 16:58:10 Jeffrey4l, [OT], should we re-prioritize our bps in next meeting for this cycle? 16:58:42 duonghq, sure. before that, we have to created the bp based on pbourke's summary 16:59:06 Jeffrey4l, sure 16:59:27 we run out of time. 16:59:40 thanks for coming. 16:59:49 let us end the meeting. 16:59:50 np 16:59:51 Jeffrey4l, thanks! 16:59:54 have a nice day :D 16:59:54 thanks 16:59:59 #endmeeting