16:02:07 <johnsom> #startmeeting Octavia
16:02:08 <openstack> Meeting started Wed Apr  8 16:02:07 2020 UTC and is due to finish in 60 minutes.  The chair is johnsom. Information about MeetBot at http://wiki.debian.org/MeetBot.
16:02:09 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
16:02:12 <openstack> The meeting name has been set to 'octavia'
16:02:40 <ataraday_> hi
16:02:44 <cgoncalves> hi
16:02:46 <dawzon> hi
16:03:00 <haleyb> hi
16:03:03 <gthiemonge> hi
16:03:05 <johnsom> Sorry for being a minute or two late
16:03:18 <johnsom> It's been a busy morning.
16:03:44 <johnsom> #topic Announcements
16:04:22 <johnsom> You are stuck with me for the Victoria release cycle.
16:04:29 <cgoncalves> bummer!
16:04:41 <johnsom> I.e. I will be the PTL for the next release.
16:05:00 <johnsom> No matter how much Adam tries, he is still the PTL until May. lol
16:05:07 <cgoncalves> congratulations and THANK YOU
16:05:13 <johnsom> Thanks!
16:05:32 <cgoncalves> thanks also to Adam for being PTL this past release
16:05:56 <johnsom> Yes, thank you to Adam for stepping up to PTL for Train and Ussuri!
16:06:07 * johnsom thinks 4 more years....
16:06:41 <haleyb> johnsom: you're welcome to be lifetime PTL :)
16:06:44 <johnsom> Please consider if you would like to be PTL after Victoria. I am happy to discuss or help folks feel comfortable to run.
16:07:04 * johnsom looks for his coffee
16:07:26 <johnsom> Ok, other super important announcement:
16:07:51 <johnsom> This week is final release for the python-octaviaclient and is feature freeze for everything else!!!!!!
16:08:27 <johnsom> Please, if you have a feature that you want into Ussuri, speak up during this meeting and make sure the core reviews are tracking it.
16:08:47 * cgoncalves cancels his dinner out plans. oh wait, covid-19
16:09:02 <johnsom> I know that we have some TLS patches and jobboard still in plan for Ussuri.
16:09:22 <johnsom> My recent amphora delete feature is fine to push to Victoria IMO, so not stressing over that.
16:09:32 <johnsom> If you have other features, please raise them.
16:10:09 <johnsom> Docs, tests, and bug fixes are still open until April 20th week.
16:10:17 <johnsom> #link https://releases.openstack.org/ussuri/schedule.html
16:11:11 <cgoncalves> it is not a feature and not super important but would not be backportable: noop certificate manager. I understand it was uploaded less than a week ago. if someone has cycles to review it, I'd appreciate. if not, all good still!
16:11:16 <johnsom> Also of note, we are starting to get the translation patches. Please help us review.
16:11:18 <cgoncalves> #link https://review.opendev.org/#/c/717619/
16:11:44 <cgoncalves> the noop certificate manager would allow us to do TLS-related testing in Tempest API
16:12:13 <johnsom> cgoncalves That kind of falls into the testing category as it should only be used during tests. Not sure if it impacts other parts of the code, but may not fall under the feature freeze.
16:12:32 <johnsom> I can take a quick scan
16:12:48 <cgoncalves> johnsom, not falling under the feature freeze would be awesome
16:14:04 <johnsom> Ok. Please by the end of the meeting speak up if you have something. Otherwise it may not make Ussuri and may be bumped to Victoria.
16:14:09 <haleyb> johnsom: i'm not sure i'll have time to update the multiple VIP patch, https://review.opendev.org/#/c/660239/ - i'll at least get it rebased to master
16:14:58 <johnsom> Yeah, Adam could not make the meeting today. I'm not sure the state on that. If you think you can get it ready for review, let's get it on the list.
16:15:34 <johnsom> haleyb So, please reach out to me by this time tomorrow if you get time to get it "ready"
16:16:09 <johnsom> #topic Brief progress reports / bugs needing review
16:16:12 <haleyb> it was still failing, so probably not, unless the light bulb just turns on as to the failure
16:16:18 <johnsom> Ok
16:16:26 <johnsom> I have been juggling....
16:17:17 <johnsom> I was working on tempest test cleanup. This found a bug in the OVN provider driver. I have opened a launchpad bug for that and the team is looking at it.
16:17:36 <johnsom> I am pausing that work, mid-complete, to focus on the feature freeze, and release.
16:18:25 <ataraday_> Jobboard change #link https://review.opendev.org/#/c/647406/ (not a day without stupid pep8 error)
16:18:25 <johnsom> So, many reviews as well. I will be working on failover patch cleanup today as well as it would be good to get that merged sooner than later. It's a bug fix, so still has a bit of time.
16:19:04 <johnsom> ataraday_ Thanks. I did a full review on that this week as well. Looked pretty good. I will look again today
16:19:32 <ataraday_> and default cipher #link https://review.opendev.org/#/c/685337/ I rebased and updated it today
16:19:59 <ataraday_> johnsom, cgoncalves Thank for reviews!
16:20:05 <johnsom> Oh! there is a good one to call out. I lost track of that one.  Will look today as well
16:20:28 <cgoncalves> ataraday_, you're welcome!
16:20:36 <johnsom> TLS ciphers is going to make Ussuri for Octavia and client.
16:20:55 <johnsom> Kudos to dawzon, great work!
16:21:00 <cgoncalves> ataraday_, please see https://review.opendev.org/#/c/647406/104/devstack/plugin.sh@375. you removed the OCTAVIA_JOBBOARD_EXPIRATION_TIME part in plugin.sh in a follow-up patch set. I think we need it back
16:21:18 <cgoncalves> with quick fixing
16:21:44 <cgoncalves> I mean, minor fixing
16:21:54 <johnsom> Ah, some changes there were part of my comments. Maybe I missed something?
16:21:58 <cgoncalves> dawzon, great work on your patches!
16:22:49 <cgoncalves> johnsom, yeah. there were some changes while you're offline
16:23:01 <dawzon> Thanks!  I really appreciate all the community help I received along the way
16:23:30 * johnsom sleep is such a pain. lol
16:24:36 <cgoncalves> so I pushed a patch that adds the noop certificate manager I mentioned earlier.
16:24:38 <cgoncalves> #link https://review.opendev.org/#/c/717619/
16:24:54 <johnsom> That has been long needed, thank you.
16:24:58 <cgoncalves> it is part of a chain of patches related to fixing issues with SNI
16:25:13 <cgoncalves> we need noop cert manager for testing the API in tempest
16:25:32 <ataraday_> cgoncalves, I saw your commet, I think setting in job https://review.opendev.org/#/c/647406/106/zuul.d/jobs.yaml@81 is fine as for devstacks timeout which is as default also fits.
16:25:42 <johnsom> Yeah, I know I put some TODO comments in for the need in the functional tests too
16:25:47 <ataraday_> only gates require higher timeout
16:26:48 <johnsom> Yeah, that was my comment. For example, when I run local it is much faster than the zuul gates, so I would rather have devstack fall back to the config.py default setting by default, and we only override for the zuul jobs in the job definition
16:27:23 <cgoncalves> ataraday_, ok. I just thought since you added that devstack config option we could keep it given we found the problem. however, it is not a hard requirement so I am good not having it
16:27:43 <cgoncalves> ok, sure
16:30:05 <johnsom> We tend to see devstack settings copied into actual deployment tools like tripleo and OSA, so I would rather not have settings need for zuul called out there unless we absolutely need it.
16:30:24 <cgoncalves> fair point
16:30:26 <johnsom> The nova boot timeout comes to mind
16:31:22 <johnsom> ataraday_ Thanks for the quick spins on these patches. Huge accomplishment for you in Ussuri!
16:31:55 <johnsom> #topic Open Discussion
16:32:42 <johnsom> Also of note, as I was writing up the release highlights and reviewing the release notes. We got some good stuff done this cycle. Thank you all for your work!
16:33:04 <ataraday_> johnsom, Thanks! quick 100+ patches :D
16:33:22 <cgoncalves> johnsom, thanks for the release highlights!
16:33:42 <born2bake> Hello guys, I am wondering if you have a guide how to use octavia with kolla-ansible since cant find any good documentation how to deploy it correctly.
16:35:08 <johnsom> born2bake Hi. Since there are many deployment tools to deploy Octavia, the deployment tool specific docs are handled by the deployment tool team. There should be a section in the kolla docs for Octavia.
16:36:36 <dawzon> cgoncalves I noticed your comment on the pool ciphers patch, I was under the impression that split_listeners wasn't really supported anymore? https://review.opendev.org/#/c/717154/
16:37:37 <cgoncalves> dawzon, it is still supported unless I missed something. we could argue it's deprecated and as so we don't add new features to it.
16:37:49 <born2bake> johnsom there is not but thanks anyway. i will try google then
16:37:53 <johnsom> born2bake I'm not finding it with a quick google search, maybe ask in the #openstack-kolla channel?
16:38:27 <johnsom> cgonclaves I told the team they could ignore split listeners
16:38:52 <born2bake> I am not really sure if its even that much in use with kolla cause it seems like its outdated. still 3 certs required instead of 4 and etc.
16:39:01 <johnsom> But that brings up a good point that I should probably hammer out that mirror patch.... Sounds like a bug (grin???)
16:39:15 <cgoncalves> dawzon, my thought was if the controller services have your work and one runs an older amphora image (split listeners only) but also supports the tls ciphers, it would technically still be possible to configure the ciphers
16:40:08 <cgoncalves> it's an edge case, sure. we could go without split listener. if later we see it's actually needed we could consider that a bug...?
16:40:25 <johnsom> born2bake Yeah, I can't keep up with the state of all of the deployment tools. Sorry.
16:42:17 <cgoncalves> so split listener is deprecated and as so no new features added to it. is that it? I'm fine, just would like to have an agreement
16:42:34 <johnsom> cgoncalves to some degree, we put release notes in that new features require a new amphora image. This is one that technically doesn't, but....
16:43:08 <cgoncalves> good point on the release note
16:43:21 <johnsom> cgonvales I think we just need to add a mirror patch that makes split listener work.
16:43:47 <johnsom> opps, typo.
16:43:54 <cgoncalves> ok
16:45:06 <johnsom> Maybe file a bug we can tag those fixes against so we don't block the main feature patch
16:45:36 <cgoncalves> +1
16:46:33 <johnsom> Ok, any other topics today?
16:48:15 <johnsom> Ok, thank you everyone!
16:48:19 <cgoncalves> o/
16:48:30 <johnsom> #endmeeting