15:00:18 <noonedeadpunk> #startmeeting openstack_ansible_meeting 15:00:18 <opendevmeet> Meeting started Tue Jan 17 15:00:18 2023 UTC and is due to finish in 60 minutes. The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:18 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:18 <opendevmeet> The meeting name has been set to 'openstack_ansible_meeting' 15:00:23 <noonedeadpunk> #topic rollcall 15:00:25 <noonedeadpunk> o/ 15:00:38 <jrosser> hello 15:00:39 <damiandabrowski> hi! 15:00:57 <jamesdenton> o/, sortof 15:02:22 <noonedeadpunk> #topic office hours 15:02:37 <mgariepy> hello o/ 15:03:07 <noonedeadpunk> I was about to do bump for Z, but then https://bugs.launchpad.net/openstack-ansible/+bug/2002897 raised 15:04:06 <noonedeadpunk> Fix for it has been already pushed, so given some reviews on https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/870801 it should be fast after all 15:05:10 <noonedeadpunk> Then for OVN driver for Octavia, we're still missing fixing SHA for the plugin. jamesdenton do you want to push the change? I can do it if needed 15:05:37 <jamesdenton> if you can that would be great, i'm tied up a bit 15:05:40 <admin1> i am trying to recreate a setup for upgrade test .. its on focal and tag 24.4.2 .. having trouble with rabbitmq-server install rabbitmq-server : Depends: erlang-base (< 1:25.0) but 1:25.2-1 is to be installed or erlang-base-hipe (< 1:25.0) but it is not going to be installed or esl-erlang (< 1:25.0) but it is not installable 15:05:40 <noonedeadpunk> #link https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/868462 15:06:04 <NeilHanlon> o/ 15:06:07 <admin1> oh .. we are in a meeting .. 15:06:13 <admin1> \o 15:06:34 <noonedeadpunk> admin1: https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/868107 15:07:07 <admin1> thank you noonedeadpunk 15:07:35 <noonedeadpunk> jamesdenton: ok, will do. 15:07:57 <jamesdenton> it will also help me understand what you mean about the sha :) 15:07:58 <noonedeadpunk> btw, I'm going to join you NeilHanlon on FOSDEM :) 15:08:07 <mgariepy> cool 15:08:37 <NeilHanlon> :gasp: 15:08:42 <admin1> i have 50/50 chances of coming in fosdem 15:09:15 <noonedeadpunk> jamesdenton: I mean adding octavia_ovn_octavia_provider_git_install_branch to https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/defaults/repo_packages/openstack_services.yml 15:09:43 <noonedeadpunk> And yes, we also need to decide a scope we want for AA 15:10:03 <jamesdenton> ahhh yes yes, thanks 15:11:08 <noonedeadpunk> I've checked etherpad lately, and we already merged most of things 15:11:14 <noonedeadpunk> #link https://etherpad.opendev.org/p/osa-antelope-ptg 15:11:19 <jamesdenton> woot 15:12:34 <noonedeadpunk> We have huge topic about internal TLS at very least 15:13:20 <noonedeadpunk> Also finilizing skyline is smth we can totally do 15:14:18 <noonedeadpunk> oh, and we also do have huge question about modular libvirt 15:15:11 <noonedeadpunk> And things regaridng CI/functional testing, but that's not blocking releasing at least 15:15:57 <noonedeadpunk> As of functional changes I'd try to minimize them as Zed was quite stressfull 15:16:21 <noonedeadpunk> We always saying about releasing earlier, but never managed to do so :( 15:16:29 <noonedeadpunk> It's mostly me to blame though, I guess 15:16:43 <jrosser> is internal TLS realistic for AA? 15:16:49 <noonedeadpunk> damiandabrowski: ? 15:16:54 <jrosser> like huge and we have not really started 15:17:11 <jamesdenton> noonedeadpunk you're a beast, thank you 15:17:34 <jrosser> i do wonder how much we need to step back and just let the OVN stuff settle 15:17:36 <damiandabrowski> jrosser: yes totally 15:17:42 <damiandabrowski> and i to have started 15:17:47 <damiandabrowski> do* 15:17:57 <jamesdenton> maybe a big docs push for AA? 15:18:09 <noonedeadpunk> yes, this is good ^ 15:18:24 <noonedeadpunk> Let me start new etherpad maybe? 15:19:02 <jamesdenton> sure 15:19:41 <damiandabrowski> right now i'm testing if it's worth to configure haproxy services separately in os_ roles rather then preconfigure all of them with haproxy_server 15:20:10 <damiandabrowski> today i deployed all base openstack services like this, but i need to improve few things before I push a change 15:21:37 <noonedeadpunk> #link https://etherpad.opendev.org/p/osa-bobcat-ptg 15:21:51 <noonedeadpunk> decided to start PTG etherpad for tracking these things 15:23:01 <noonedeadpunk> yes, totally jrosser I want also to calm things down with OVN a bit, and maybe do docs and bug fixes mostly 15:23:25 <jrosser> it is frustrating not to be able to resolve moha7 troubles too 15:23:38 <jrosser> its not possible to determine if it is environment trouble or actual bugs 15:24:52 <noonedeadpunk> but as internal tls was started quite a while ago and presumably damiandabrowski will have some time for it, and given there won't be anything really breaking I'd say we can see how this will go 15:25:31 <noonedeadpunk> yeah, true. But I'd say with OVN it's in general hard to tell/debug some things. We also had some step back in using journals for logging 15:25:47 <noonedeadpunk> As example - ovn and gluster that do just local logs 15:26:00 <jamesdenton> jrosser i think a small combination, but likely due to lack of clarity in the docs 15:26:39 <jamesdenton> i will do a deploy now and test the SSL metadata issue mentioned 15:26:58 <jrosser> it is also hard translating bugs/trouble in multinode onto an AIO 15:27:18 <noonedeadpunk> I'd say what worth testing is somehow test ordering issues when config is changed 15:27:34 <jamesdenton> agreed. Hoping to solve that with this MNAIOv2 thing i'm working on, but it's dependent on deploying VMs on OpenStack vs KVM. 15:27:40 <jrosser> or at the end of a fresh deploy, i think thats a really good question 15:27:52 <jrosser> if just letting the playbooks run to success is it working/broken 15:28:26 <noonedeadpunk> I assume it's working, otherwise tempest won't succeed... 15:28:44 <noonedeadpunk> Hm, does octavia leverage metadata in any way? 15:28:59 <noonedeadpunk> as for cirros it's not really required... 15:29:11 <jamesdenton> i don't know - the agent is http based i think 15:29:15 <jamesdenton> no ssh key required afaik 15:29:34 <jrosser> there is possibility of a debug key - not sure how that gets in 15:29:47 <jamesdenton> metadata, but i don't think we test that 15:29:52 <noonedeadpunk> I assume through metadata, but that could be config drive as well 15:30:09 <noonedeadpunk> yeah, so that's good to test... 15:33:06 <NeilHanlon> jamesdenton: random question, any OSV resources you recommend for deep dives/learning? 15:38:19 <jamesdenton> OVS? Hmm, not offhand 15:38:35 <jamesdenton> happy to look 15:38:58 <mgariepy> i think the best way to learn is to have issue that you want to fix .. :D 15:45:31 <NeilHanlon> hehe.. yeah, that's been my learning path so far but I was looking for a more unified/top down approach to the architecture, I guess. sometimes it leaves me scratching my head 15:45:36 <NeilHanlon> and yeah jamesdenton: OVS.. oops :) 15:46:35 <NeilHanlon> this helped.. a little :P https://www.kernel.org/doc/html/latest/networking/openvswitch.html 15:46:38 <jamesdenton> i have sustained surface level knowledge, then i go down a rabbit hole when necessary and promptly forget 15:46:39 <mgariepy> i want to add some doc on how to find specific stuff in the ovn/ovs db 15:47:04 <NeilHanlon> well at least it sounds like it's not just me 😂 15:47:22 <jamesdenton> there's just too much to know! 15:47:46 <NeilHanlon> good company, anyways :) 15:48:04 <mgariepy> https://blog.russellbryant.net/2016/11/11/ovn-logical-flows-and-ovn-trace/ 15:48:04 <jamesdenton> :) 15:48:17 <jamesdenton> 6 years ago... is a lifetime :D 15:48:36 <mgariepy> well the base is kinda the same anyway ;p 15:48:55 <mgariepy> and also doc is always outdated ;p haha 15:49:13 <NeilHanlon> problem? buy a <company> license and our experts will fix it for you! 15:49:32 <jamesdenton> juju what? 15:49:43 <mgariepy> yeah.. pay us and we will figure it out to fix it.. 15:49:59 <mgariepy> that's how it works. 15:52:52 <NeilHanlon> anyways, sorry for the diversion lol 15:54:15 <johnsom> Octavia defaults to using config drive to get the initial configuration data on an amphora boot. It can use the metadata service, but that was unstable back in the day we developed this (since fixed), so we stuck to config drive. 15:55:02 <noonedeadpunk> thanks johnsom, that explains why we don't see failure in our tests if we have broken metadata :) 15:59:16 <jamesdenton> nice 16:00:39 <opendevreview> James Denton proposed openstack/openstack-ansible master: Add Octavia OVN Provider repo requirements https://review.opendev.org/c/openstack/openstack-ansible/+/870834 16:02:35 <noonedeadpunk> #endmeeting