| jrosser | good morning | 08:09 |
|---|---|---|
| damiandabrowski | hi! | 08:23 |
| damiandabrowski | jrosser: https://review.opendev.org/c/openstack/openstack-ansible/+/879501 has finally passed CI :D | 08:30 |
| jrosser | damiandabrowski: thats excellent! | 09:13 |
| *** dviroel__ is now known as dviroel | 13:53 | |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_sahara master: Add TLS support to sahara backends https://review.opendev.org/c/openstack/openstack-ansible-os_sahara/+/880643 | 14:51 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_murano master: Add TLS support to murano backends https://review.opendev.org/c/openstack/openstack-ansible-os_murano/+/880646 | 14:53 |
| admin1 | will there be a global config to disable tls backend ? | 15:04 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_blazar master: Fix blazar_service_type https://review.opendev.org/c/openstack/openstack-ansible-os_blazar/+/880650 | 15:05 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_blazar master: Add uWSGI support to blazar https://review.opendev.org/c/openstack/openstack-ansible-os_blazar/+/880651 | 15:05 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_blazar master: Add TLS support to blazar backends https://review.opendev.org/c/openstack/openstack-ansible-os_blazar/+/880652 | 15:05 |
| damiandabrowski | admin1: yes: `openstack_service_backend_ssl` | 15:05 |
| admin1 | if i can make sure is private and secure, i can save some cpu by not doing tls on every connection in every backend | 15:06 |
| admin1 | make sure my backend/network is..* | 15:06 |
| damiandabrowski | that's right. | 15:08 |
| damiandabrowski | btw. I'm not even sure if tls backend will be enabled by default. We didn't talk about it yet | 15:08 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible master: Limit blazar processes on AIO https://review.opendev.org/c/openstack/openstack-ansible/+/880653 | 15:13 |
| jrosser | i guess we should have a CI job for TLS and not TLS backends if we support both choices | 16:05 |
| jrosser | it's all quite easy to break i expect | 16:05 |
| damiandabrowski | ++ | 16:11 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_blazar master: Fix blazar_service_type https://review.opendev.org/c/openstack/openstack-ansible-os_blazar/+/880650 | 18:16 |
| BobZAnnapolis | hey all, do any of the services / components have a "time drift" dependency, eg if the servers aren't kept in synch (chrony,ntp), will the overall functionality start acting wonky ? I just discovered our 3 controllers are off by 20 minutes. The compute/nova services running on the controller are up but are down on the other 2 - this a time drift issue mayhaps ? | 18:50 |
| BobZAnnapolis | I meant are up on the primary controller but are down on the 2 controllers that are behind the current time, tia | 18:56 |
| damiandabrowski | not so long ago i've rebooted one controller and it came up with huge time drift(about a year back). It resulted in a situation where it couldn't verify galera SSL certificate because from its perspective it was not valid YET | 19:05 |
| damiandabrowski | so technically there may be some issues, but besides this SSL validation issue I don't recall any other problems | 19:06 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_octavia master: Add TLS support to octavia backends https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/880680 | 19:14 |
| jrosser | BobZAnnapolis: i think clock drift can do pretty bad things with ceph | 20:11 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_zun master: Disable kata containers for debian/ubuntu https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/880683 | 20:56 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible-os_zun master: Ensure service is restarted on unit file changes https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/880043 | 20:57 |
| opendevreview | Merged openstack/openstack-ansible-os_octavia master: Adopt info modules fetch to collection 2.0 https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/879988 | 21:05 |
| opendevreview | Merged openstack/openstack-ansible-os_octavia master: Ensure service is restarted on unit file changes https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/880339 | 22:13 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!