15:00:15 #startmeeting kolla 15:00:15 Meeting started Wed Aug 26 15:00:15 2020 UTC and is due to finish in 60 minutes. The chair is mgoddard. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:16 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:19 The meeting name has been set to 'kolla' 15:00:28 #topic rollcall 15:00:33 \o 15:00:36 o/ 15:03:19 \o 15:03:23 0/ 15:03:28 mgoddard mnasiadka hrw egonzalez yoctozepto rafaelweingartne cosmicsound osmanlicilegi bbezak 15:03:29 \o 15:03:35 o/ 15:03:39 o/ 15:03:54 o/ 15:05:17 #topic agenda 15:05:25 * Roll-call 15:05:26 * Announcements 15:05:28 ** Kolla feature freeze fast approaching: Sep 28 - Oct 02 15:05:30 * Review action items from the last meeting 15:05:32 * CI status 15:05:34 * Mundane priorities: need to enact kolla-cli deprecation 15:05:36 ** https://review.opendev.org/730431 -> https://docs.openstack.org/project-team-guide/repository.html#deprecating-a-repository 15:05:36 patch 730431 - project-config - Retire kolla-cli project - step 1 end project gating - 2 patch sets 15:05:38 * Victoria release planning (kayobe) 15:05:40 * Victoria release planning (kolla ansible) 15:05:42 * Victoria release planning (kolla) 15:05:44 #topic announcements 15:06:17 Kolla feature freeze fast approaching: Sep 28 - Oct 02 15:06:21 #info https://review.opendev.org/#/c/728448/ 15:06:22 patch 728448 - kolla-ansible - Support TLS encryption of RabbitMQ client-server t... - 8 patch sets 15:06:26 #undo 15:06:27 Removing item from minutes: #info https://review.opendev.org/#/c/728448/ 15:06:31 #info Kolla feature freeze fast approaching: Sep 28 - Oct 02 15:07:01 Any others? 15:08:06 #topic Review action items from the last meeting 15:08:20 mgoddard to message openstack-discuss about focal & victoria upgrade 15:08:25 This is getting silly now 15:08:28 #action mgoddard to message openstack-discuss about focal & victoria upgrade 15:08:49 #topic CI status 15:09:48 ok, how are we looking? 15:10:02 kolla train & earlier not happy 15:10:13 I did start looking at the bifrost issue but didn't finish 15:10:55 the ironic conductor issue looks similar 15:11:38 #action mgoddard to investigate bifrost CI issue on train 15:11:52 I have a feeling the ironic issue is a similar root cause 15:11:57 possibly ansible related 15:12:07 kolla ansible looks green 15:12:30 kayobe is better now 15:13:57 #topic Mundane priorities: need to enact kolla-cli deprecation 15:14:05 yoctozepto: this sounds like one of yours 15:14:37 yes 15:14:40 https://review.opendev.org/730431 -> https://docs.openstack.org/project-team-guide/repository.html#deprecating-a-repository 15:14:41 patch 730431 - project-config - Retire kolla-cli project - step 1 end project gating - 2 patch sets 15:14:57 so we need to announce to the mailing list? 15:14:58 we should follow the deprecation procedure and drop kolla-cli master branch 15:15:06 we already have a deprecation notice 15:15:17 need to move with patchsets 15:16:20 ok. who wants to do this? 15:18:15 #action mgoddard to continue kolla-cli deprecation 15:19:35 retire kolla-cli ? 15:20:04 yes 15:20:08 well deprecate first 15:20:17 maybe i can help 15:21:56 ok, thanks 15:22:25 #topic Victoria release planning (kayobe) 15:22:43 jovial[m] dougsz mnasiadka bbezak Wasaac 15:23:07 I went through the V features on the whiteboard 15:23:09 #link https://etherpad.opendev.org/p/KollaWhiteBoard 15:23:17 L355 15:23:32 thx 15:23:40 let's say kayobe has not made much progress on its priorities this cycle :) 15:24:00 we have 1 month until feature freeze 15:24:12 yeah, other time pressures unfortunately 15:24:15 luckily ussuri was a great release ;-) 15:24:25 indeed, ussuri was good 15:24:54 I think we should definitely do the documented config walk though 15:25:06 +1 15:25:27 Others like bikolla are pushing it 15:25:28 multiple environments would be nice, if priteau (or anyone) gets time 15:25:43 but I think docs are a must 15:25:49 so plan of action 15:26:19 I think we should get a few heads together to work out how best to do it 15:26:50 perhaps in the kolla klub meeting slot tomorrow (15:00 UTC) 15:26:59 who is interested? 15:27:12 Happy to help 15:27:30 I have a meeting clash tomorrow 15:27:35 I'll try to join Kolla Klub for the first time :) 15:27:36 I think bbezak expressed an interest 15:27:51 mnasiadka: no actual kolla klub this time 15:27:59 mgoddard: damn 15:28:00 summer break 15:28:17 mgoddard: but yes, Bartosz expressed interest, so I think he'll be tehre 15:28:20 *there 15:28:22 ok 15:28:32 dougsz: are you keen to join? If so I can send out a doodle 15:28:54 Sure 15:29:00 I guess priteau is busy with dougsz tomrrow 15:29:18 not that I wanted this to become a committee meeting :) 15:29:41 but it would be good to agree on a direction before setting off 15:30:12 I'll send a doodle to the mailing list 15:30:16 I have quite a large existing backlog so I can't commit to much apart from reviewing - feel free to host the meeting tomorrow 15:30:33 ok 15:31:41 we have some open reviews, if anyone has time: https://review.opendev.org/#/q/project:openstack/kayobe+status:open 15:32:12 any other kayobe things? 15:33:15 nothing from me 15:33:39 #topic Victoria release planning (kolla ansible) 15:33:41 ok 15:34:11 again, I have added my best guess at status updates to the whiteboard for our V prioritie 15:34:18 feel free to update them 15:34:52 https://etherpad.opendev.org/p/KollaWhiteBoard 15:34:54 L250 15:35:02 let's go through 15:35:07 lets encrypt 15:35:20 needs some reviews 15:35:34 I did a quick skim earlier but not enough 15:36:05 seems like there is a bit of a bootstrapping question about how to initially deploy haproxy 15:36:59 also, where should cert bot run? anisble controller or openstack deploy 15:37:13 next to haproxy? 15:37:29 ansible controller should be assumed to be ephermal 15:37:37 ephemeral 15:37:42 can cert bot retrieve the same certificate across many nodes? 15:38:23 could you expand? 15:40:32 how we do get the initial certificate and distribute to all the nodes? Once we want to refresh an expired certificate, how does happen across all the nodes at the same time? 15:40:51 or maybe I don't understand the problem correctly 15:42:19 these are good questions 15:42:27 to which I don't know the answer right now 15:42:59 would it be worth have a separate meeting about this? 15:43:01 you could look at how OSA does it 15:43:03 https://docs.openstack.org/openstack-ansible/latest/user/security/ssl-certificates.html#letsencrypt-certificates 15:43:25 https://github.com/openstack/openstack-ansible-haproxy_server 15:44:17 we could have a meeting. I think the main obstacle is that I don't know enough about it to be too helpful 15:46:19 I will try to spend some time brushing up on it 15:46:25 perhaps others are more familiar 15:46:32 have you spoken to diurnalist about it? 15:46:44 headphoneJames: 15:48:02 ok, I think we need to move on 15:48:10 wuchunyang: around? 15:48:17 ? 15:48:21 hi 15:48:40 looks like good progress with octavia, and you had some good feedback from johnsom 15:48:42 :-) 15:48:58 I will put it in my browser tab queue 15:49:22 i don't get some new feedback now 15:49:58 at this point in the release, I think we need to focus on features that already have good progress, and octavia is a good example 15:50:10 Let me know if there are patches you would like me to look at. I did an initial pass, but haven't kept up with updates. 15:50:44 thanks johnsom o 15:50:55 looks like no progress on designate 15:51:16 federated keystone has made good progress, let's try to land it 15:51:17 johnsom i have updated ps follow up your comments thanks 15:51:23 https://review.opendev.org/695432 15:51:24 patch 695432 - kolla-ansible - Add support to OpenID Connect Authentication flow - 31 patch sets 15:51:48 container health checks needs an update 15:52:14 Ansible handlers bug is blocked on whether ansible accepts the fix 15:52:33 Lots of patches up for performance & scalability. 15:52:40 #link https://review.opendev.org/#/q/topic:bp/performance-improvements 15:52:43 reviews appreciated 15:52:59 ironic TLS backend needs an update to fix ubuntu 15:53:15 rabbitMQ TLS needs reviews https://review.opendev.org/#/c/728448/ 15:53:15 patch 728448 - kolla-ansible - Support TLS encryption of RabbitMQ client-server t... - 8 patch sets 15:53:27 Anything else we should discuss for kolla ansible? 15:53:36 anything not on the priority list? 15:54:41 #topic Victoria release planning (kolla) 15:54:45 last one 15:54:52 https://etherpad.opendev.org/p/KollaWhiteBoard 15:54:54 I think it would be good to follow up to doc updates we agreed on Kolla Kall 15:54:56 L204 15:55:00 mnasiadka: agreed 15:55:41 I think we need to organise the notes into a set of changes to be made, and each pick some up 15:56:06 #link https://etherpad.opendev.org/p/kollakall 15:56:06 I might try to enable tls for neutron api 15:56:43 seems like one of the last core services without tls 15:56:48 headphoneJames: ok. non-trivial as it needs the RPC worker splitting out 15:56:58 copy that 15:56:59 but yes, that would I think complete the core set 15:57:45 mariadb TLS seems quite important also 15:58:31 anyone want to volunteer to organise the docs notes into a set of changes to be made? 15:59:12 alternatively, just make some changes 15:59:55 but let's focus on useful improvements, given the backlog of code reviews 16:00:10 on kolla 16:00:15 we have infra images 16:00:47 https://review.opendev.org/#/q/topic:bp/infra-images+(status:open+OR+status:merged) 16:00:55 a few patches to review 16:01:06 I think the main blocker is that the CI job is now non-voting for all 16:02:06 Image tiering not started 16:02:12 Focal complete (ish) 16:02:22 Stable branch life-cycle 16:02:26 https://review.opendev.org/738906 16:02:27 patch 738906 - kolla - version-check: handle using of stable branch tarballs - 3 patch sets 16:02:33 let's try to get that merged soon 16:04:04 we're over time 16:04:15 thanks everyone 16:04:22 not the most interactive meeting 16:04:32 <><><> 16:04:43 but the summary is, please help to review existing priority patches 16:05:04 as the freeze will be here soon 16:05:08 #endmeeting