Tuesday, 2021-08-24

opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/wallaby: Add shallow_since for ceph-ansible  https://review.opendev.org/c/openstack/openstack-ansible/+/80497605:44
*** rpittau|afk is now known as rpittau07:27
opendevreviewMerged openstack/openstack-ansible-repo_server master: Cleanup CentOS 7 vars file  https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/80540109:29
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add Vault role support  https://review.opendev.org/c/openstack/openstack-ansible/+/80078709:31
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build stable/wallaby: Improve speed of permissions changes  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/80576609:32
opendevreviewDmitriy Rabotyagov proposed openstack/ansible-role-python_venv_build stable/victoria: Improve speed of permissions changes  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/80576709:33
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Include openstack_services for murano role  https://review.opendev.org/c/openstack/openstack-ansible/+/80537309:41
opendevreviewMerged openstack/openstack-ansible-os_horizon master: Add option to override horizon policies  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/74826410:11
noonedeadpunkI need to go to hospital today in the evening so I'm not soure I will be around in time for meeting10:59
noonedeadpunks/soure/sure/10:59
opendevreviewMerged openstack/ansible-role-python_venv_build master: Improve speed of permissions changes  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/80540211:12
noonedeadpunkDamn... We have new bug with mariadb 10.6 :( We got stuck now on `Run MySQL Upgrade` step :(12:20
noonedeadpunkI catched that one time in aio as well, and mariadb restart helped there12:20
noonedeadpunkhttps://zuul.opendev.org/t/openstack/build/cf306e456a9e4abba4b9004a57da46e6/log/job-output.txt#13234 <- this is smth that repeats from time to time12:21
noonedeadpunkI wonder if we should revert to 10.5 for now?12:21
jrosseroh dear - i guess we should drop back to 10.5.12 to be the same as W13:00
opendevreviewMerged openstack/openstack-ansible master: Update pip version  https://review.opendev.org/c/openstack/openstack-ansible/+/80558313:38
opendevreviewMerged openstack/ansible-role-python_venv_build stable/wallaby: Improve speed of permissions changes  https://review.opendev.org/c/openstack/ansible-role-python_venv_build/+/80576614:04
noonedeadpunk/topic14:56
noonedeadpunk#startmeeting openstack_ansible_meeting15:00
opendevmeetMeeting started Tue Aug 24 15:00:07 2021 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:00
noonedeadpunk#topic rollcall15:00
noonedeadpunko/ I'm partially here from phone15:00
noonedeadpunk#topic office hours15:06
noonedeadpunkSo, we are facing some new bug with mariadb 10.6.415:06
noonedeadpunkDuring mysql_upgrade things stuck and cause timeouts15:06
noonedeadpunkBtw I noticed that only on focal, but not sure if it's limited to it15:07
noonedeadpunkAnyway think we can rollback to 10.5.12 since we bumped only master. At least we will know if that helps or not.15:08
jrosseri can make a patch for that15:08
noonedeadpunkIt would be simple revert I guess15:09
opendevreviewMerged openstack/openstack-ansible-os_neutron stable/wallaby: Add support of OVN for CentOS-8-Stream  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/80471715:09
noonedeadpunkOh, btw, on W I think there were no timeouts lately?15:09
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-galera_server master: Revert "Update galera to 10.6.4"  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/80582215:10
noonedeadpunkSo that should help then15:10
noonedeadpunkAnother thing was haproxy role for managing endpoints vs included tasks15:11
noonedeadpunklogan- aimed to make backend disablement smart, but I think it's too complicated and a bit risky15:12
noonedeadpunkOn terms that missing sudoers or invalid policy would make service unusable before any handlers15:12
noonedeadpunkAlso I pushed patch to add serial everywhere and wanted to do same with haproxy endpoints15:14
noonedeadpunkBut wasn't sure what way to choose15:14
noonedeadpunkAlso, I wonder if we should switch from depth to shallow_since for all repos in a-r-r as it feels like more reliable thing since some time from release15:16
noonedeadpunkAnd we always pull only required history15:17
noonedeadpunkI was supposed to call for a contributor with patches to our roles without using OSA overall to join our meeting but I didn't do that :( I will try to reach them tomorrow morning for the next meeting15:23
jrosserlooking at the existing code the strategy for serial/parallel installation is not totally clear15:23
noonedeadpunkUm, what do you mean?15:28
noonedeadpunkMeta handler "Manage LB"?15:29
noonedeadpunkThat is part of the logan- role that is used only for galera15:33
noonedeadpunkFor other roles it's was never fully implemented, but just started15:33
jrosserthere already seems provision for nova/neutron/cinder, but not anything else15:34
noonedeadpunkYeah, that's true15:34
noonedeadpunkAlso glance I guess and keystone15:34
noonedeadpunkWell, and galera15:35
noonedeadpunkBut we indeed manage haproxy for super limited amount of roles15:37
noonedeadpunkWhich I guess high time to change15:37
noonedeadpunkspatel are you around?15:38
spatelyes15:38
spatelalways :)15:38
spatelcatching up this thread15:39
noonedeadpunkAwesome. I had second thoughts about skyline:) well, I researched project a bit more15:39
spatelnoonedeadpunk nice! if we want then i am happy to work on it and integrate support with OSA15:40
noonedeadpunkWhile it's still actively developing and afaik is not prod ready yet (because of missing ci and some things)15:40
noonedeadpunkBut once it will be released I think it would be great to have role for it15:41
spatelnoonedeadpunk totally it has lots of built in features and also high performance UI. 15:41
noonedeadpunkMaybe we can create repo even before that time but it will be incubated15:42
spatelI have already started submitting bugs https://bugs.launchpad.net/skyline-apiserver15:42
noonedeadpunkUntil official first release of skyline15:42
* jrosser looks for federated logins there.....15:43
spatelI would say lets add support on OSA so more people will start using it and we will have more bugfix 15:43
spatelI am already talking to core developer of skyline team and they are super active in response. 15:44
noonedeadpunkOh, that's nice15:44
noonedeadpunkI hope they have irc channel:)15:44
spatelThey are in china so just talking to them on email. 15:45
noonedeadpunkOh! Also, what do you think about adding freezer to OSA?15:45
spatelI will ask them to create IRC so we have more better communication + more people will join15:45
noonedeadpunkYeah, email is... Meh15:46
noonedeadpunkI kind of have role for freezer that I wrote on my free time15:46
spatelnoonedeadpunk does OSA has ironic support? i never heard from you guys so asking 15:48
spatelwe don't have CI also for that role15:48
spatelhttps://docs.openstack.org/openstack-ansible-os_ironic/latest/  not sure if anyone using it here. i am little interested to play15:49
noonedeadpunkBut project is a bit undrmaintained15:49
noonedeadpunkUm, yes, I believe Ironic is used15:50
jrosserkind of like os_octavia+++++15:50
jrosserthat you need to understand the service itself and know what you're doing, before running the role and expect it to "just work"15:50
jrossertheres some networking to do and interesting multitenancy15:51
noonedeadpunkBtw, do you think we can merge that as initial commit and add encryption of keys with follow up? https://review.opendev.org/#/c/80079215:52
jrossersounds reasonable15:53
jrossersomething on my mind was if we want to use vault to manage user_secrets at all15:54
jrosserwhich would get a bit circular with the galera credentials, if galera is the backend for vault15:54
noonedeadpunkWell, yes15:54
noonedeadpunkI guess we need to add native storage support there as well15:55
noonedeadpunkTo be able to use it as storage for user_secrets15:55
noonedeadpunkI almost forgot! It's about due time for posting release highlights15:56
jrossermaybe thats mixing up too many things though, dedicating a vault inside the deployment to barbican is very clean15:56
noonedeadpunkAnd I'm not sure what we can post except ceph pacific there15:57
jrossersomehow it feels like we don't yet start work on X :/15:57
noonedeadpunkYeah:(15:57
noonedeadpunkAnd it's already libraries fix time15:58
*** rpittau is now known as rpittau|afk16:00
spatelwhat is holding us to start X rc release?16:00
noonedeadpunkRegarding vault - we can have multiple of them if needed and just make role usable on pre-osa step on standalone hardware16:00
jrosseryes, thats a good idea16:01
noonedeadpunkBut that would still require either standalone galera or internal storage16:01
jrosserspatel: it's more like needing effort to work on features, we really only just finished up W release for real16:01
jrosserwe run raft protocol local storage here, seems to be OK16:02
noonedeadpunkOnce neutron land I think I will do 23.1.0 release 16:02
jrosseryes, and the venv_build host permissions speed-ip16:02
jrosserspeed-up16:02
noonedeadpunkAnd python_venv_buold optimization16:02
spatelyeah! after 23.1.0 we can focus on X 16:02
noonedeadpunkYeah16:02
noonedeadpunkOk, sounds like plan:)16:03
noonedeadpunk#endmeeting16:03
opendevmeetMeeting ended Tue Aug 24 16:03:35 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:03
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-08-24-15.00.html16:03
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-08-24-15.00.txt16:03
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-08-24-15.00.log.html16:03
spatelMay i know what new features we are talking about for X ? 16:04
noonedeadpunkThat's what we talked about on ptg https://etherpad.opendev.org/p/osa-xena-ptg16:05
noonedeadpunkBtw I'm not sure if we will do first 2 points of prio list :D16:06
spatel:)16:09
spateli would like to be part of PTG group do you have separate IRC group to conduct these kind of discussion :)16:10
spatel>> adding prometheus support to galera/haproxy  (why only for galera and haproxy and not others?) 16:11
noonedeadpunkspatel we have ptg sessions along with other projects and it's open for all interested parties16:25
noonedeadpunkThere's some built-in options that just needs to be enabled iirc16:26
noonedeadpunkFor haproxy/galera, so minimum efforts needed for that16:27
noonedeadpunkFor others exporters need to be deployed and I guess it's out of OSA scope, but probably candidate for ops16:27
jrosserspatel: https://www.openstack.org/ptg/16:29
opendevreviewMerged openstack/openstack-ansible master: Move galera tasks to pre_tasks  https://review.opendev.org/c/openstack/openstack-ansible/+/80519316:31
opendevreviewMerged openstack/openstack-ansible master: Add integrated build job to use in sahara repo  https://review.opendev.org/c/openstack/openstack-ansible/+/80245716:31
opendevreviewMerged openstack/openstack-ansible master: Add heat service when scenario includes sahara  https://review.opendev.org/c/openstack/openstack-ansible/+/80253516:31
spatelnoonedeadpunk jrosser thanks! 16:49
dmsimardnoonedeadpunk: I seem to recall deploying ara as part of OSA was a goal somewhere -- I was wondering if there was a spec or something I could look at ? Just out of curiosity and perhaps to provide advice :)17:43
jrosserdmsimard: we have literally one line of text at the bottom of here, https://etherpad.opendev.org/p/osa-xena-ptg, no more18:16
jrosser-ENOTIME18:16
mgariepyanything needs some attention ?18:22
dmsimardjrosser: ah, thanks -- I do not have sufficient bandwidth to commit to this right now but I did want to at least point out that there was an ansible collection with roles to deploy the API server part of ara: https://github.com/ansible-community/ara-collection/ it's what we use for integration testing ara itself and for deploying18:53
dmsimarddemo.recordsansible.org18:53
dmsimardI suppose in the context of OSA, it may be simpler to deploy ara from a container image instead but I don't know enough about OSA to tell18:53
dmsimardI meant to look at the spec to see if there were any gaps to fill in the collection that we could iron out ahead of time18:59
dmsimardif you'd rather not use a collection that's cool too, but it's there if you need it :p19:00
noonedeadpunkI bet I missed first part despite having znc...19:06
noonedeadpunkWhat spec ?:)19:06
* noonedeadpunk read through eavesdroo19:10
noonedeadpunkNah, it's not easier to use container image19:10
noonedeadpunkRegarding collection - need to look through it:) But we haven't really started X development as indeed enotime19:11
noonedeadpunkBut I still want to get ability to deploy Ara out of the box for logging OSA later on19:12
dmsimardnoonedeadpunk: ok! feel free to reach out when you do start working on it so I can save you time and point you in the right direction :)19:14
dmsimardfwiw the "standard" configuration provided by the collection ships gunicorn for the backend and nginx for proxying, I think there is a preference for uwsgi in OSA ? I know ara works with uwsgi but it's not supported in the collection yet19:15

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!