16:00:41 #startmeeting Octavia 16:00:41 Meeting started Wed Aug 31 16:00:41 2022 UTC and is due to finish in 60 minutes. The chair is gthiemonge. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:00:41 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 16:00:41 The meeting name has been set to 'octavia' 16:00:46 Hi Folks 16:00:57 o/ 16:01:01 Hi 16:01:04 o/ 16:01:08 o/ 16:01:11 o/ 16:01:50 wow, what a crowded channel ;-) 16:02:15 Folks are back from vacation. lol 16:03:26 #topic Announcements 16:03:36 ** OpenStack Zed schedule 16:03:59 this week is Feature Freeze/Final release for client libraries! 16:04:09 #link https://releases.openstack.org/zed/schedule.html 16:04:46 I see that some patches are already approved! that's great 16:05:02 I also read that it's deadline for submitting release highlights 16:05:21 Yes, that is correct 16:05:28 oh thanks for the heads up 16:05:57 our features are cool, I will propose a patch, but first we need to merge them 16:06:39 I'm going to work on it 16:07:10 yes, the failover circuit breaker change didn't get a lot of reviews yet. I hope nobody finds any last minute issues. 16:07:33 one CR+2 16:07:49 that is a good start :D 16:08:02 I plan to look at it today 16:08:59 I was looking at it until this meeting 16:09:09 great 16:10:30 ** PTL election 16:10:30 thanks 16:10:44 FYI I have proposed my candidacy for Octavia PTL on the openstack-discuss ML 16:10:56 Twelve more years! 16:11:07 +1 :D 16:11:29 please note: "We have extended the nomination period 7 days" 16:11:29 you do a great job! 16:11:48 thanks 16:13:10 ** Antelope PTG 16:13:23 I created an etherpad for the Antelope PTG: 16:13:31 #link https://etherpad.opendev.org/p/antelope-ptg-octavia 16:13:58 we can propose topics at the bottom of the doc 16:14:22 anything you want: Feature, Bugs, CI, dashboard, blahblah 16:17:13 I think the CI is fine, I'll skip the "CI status" topic 16:17:22 #topic Brief progress reports / bugs needing review 16:18:03 so, any urgent reviews (that are not feature patches)? 16:18:43 I worked on fixing an issue with backwards compatibilty 16:18:51 https://review.opendev.org/c/openstack/octavia/+/854609 16:19:07 but I wouldn't consider it urgent 16:19:44 I have mostly been focused on reviewing some of these large feature patches.... 16:19:57 tweining: oh thanks, I need to take a look at this one ;-) 16:20:26 it will also need to be backported to Yoga I think 16:20:37 yeah same for me, lot of reviews, and lot of updates of these large patches ;-) 16:21:10 it is not urgent either but I worked on a small fix : https://review.opendev.org/c/openstack/octavia/+/852459 16:21:20 tweining: this patch is also needed in train ;-) 16:22:18 QG Yeah, I never did like that those were "sharing" a list. Thanks for the patch 16:22:25 gthiemonge: really? I thought server-state-file was only added during Yoga 16:22:43 QG: thanks for this patch, it's not in the review list (in the etherpad), I'm adding it (on top of it) 16:23:39 tweining: yeah it affects our downstream CI with train 16:23:46 ok 16:29:35 #topic Open Discussion 16:30:18 QG: pyjou: Hey Folks, do you plan to join the Octavia PTG? 16:30:44 it is virtual again. 16:31:02 why not we don't really know how this kind of event works 16:31:33 but with pleasure, I'm sure it can be very interesting 16:32:03 it's like a long meeting with a lot of topics :D -- we will talk about what will be in Antelope, what we need to improve/fix 16:32:16 but that would be great to hear your feedback about octavia 16:32:47 It is basically an event for discussing development topics and plan for the Antelope release. It is a video meeting this time. 16:33:26 ok well clearly we will try to attend 16:33:52 cool 16:34:21 I wanted to know what you think about adding the functionality in horizon to be able to configure a listener with prometheus ? 16:35:44 I think it is a good idea and should be fairly straight forward. 16:35:55 good question.. johnsom what is missing? only the "PROMETHEUS" protocol in the box? or are there other params? 16:36:13 Yeah, that is it. They are the same as any other Listener 16:37:02 The tricky part might be that you can't really use PROMETHEUS in the initial create workflow, as it cannot have any pools 16:37:09 as we're really close to the feature freeze, I'm not sure we will have it in Zed 16:37:22 It would be a listener detail page only kind of thing. 16:37:23 johnsom: now we can select to not create pools 16:37:31 Ok 16:37:35 johnsom: so maybe we can automate it when selecting prometheus 16:38:20 QG I'm interested in feedback on that feature and the dashboard. It was a "for fun" feature 16:39:35 #link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/812260 16:39:50 The tests need some review action as well. 16:40:29 @jonhsom We love it ! on our side we use it for benchmark ( hardware, haproxy version ...) and it works well 16:43:27 The one thing with benchmarks is with the really high traffic levels, the Prometheus stats scrape can get blocked. I.e. if the NIC port runs out of bandwidth. I hit that playing around with it. 16:46:54 Thanks for the feedback. I am glad someone is finding value in it. 16:47:12 glad to hear that too! 16:48:56 we didn't experience such issue, but on the other hand we had the rsyslog which took a good part of the cpu 16:48:56 ok Folks, anything else? 16:49:32 not from me 16:49:33 oh yeah I noticed that rsyslog consumes a lot during some perf tests 16:49:49 Yeah, I recommend turning off local log storage. The IO can really impact performance. 16:50:07 I wanted to ask you if you had already thought of integrating let's encrypt for the generation of certificates, that it be managed by Octavia ? 16:50:08 It's a log record per request, so adds up quickly 16:51:02 johnsom yep very quickly, thanks for the tips on local storage will try it 16:52:06 We have tried to stay away from being a CA for TLS terminated load balancers. We integrate with Barbican and Castellan as a source for the certs. It might be interesting to consider extending one of those to integrate with let's encrypt. 16:52:07 no idea on how to integrate let's encrypt... as a new driver for cert management? 16:54:01 johnsom: do you mean "integrating let's encrypt in barbican" and not in octavia? 16:54:26 gthiemonge Correct 16:55:29 ok 16:55:41 In a way, it's almost it's own service that would store the certs in Barbican and update the references in Octavia. Whenever let's encrypt updates the cert 16:56:47 👀 16:56:53 someone said the magic word 16:56:58 But with Let's encrypt. The ACME challenge need to be behind the server and in this case is Octavia. 16:57:17 Hi Doug 16:57:26 👋 16:57:47 The topic of let's encrypt integration for TLS terminated load balancers came up 16:57:48 pyjou: oh yes, right 16:58:06 * dmendiza[m] catches up on scrollback 16:58:29 wouldn't that be a good topic for PTG? 16:59:41 Yes, I think it would be a good topic for the PTG 17:00:27 +1 17:01:08 and it's time 17:02:02 Yep, that is the meeting time limit. Thanks everyone! 17:02:16 Thanks ! 17:02:18 Thanks folks! 17:02:19 Ok Folks, we are overtime! 17:02:25 Thanks! 17:02:30 thank you all! 17:02:36 #endmeeting