Tuesday, 2025-03-04

gokhan__hello folks, sometimes when we try to create octavia loadbalancers, it stucks in pending_create status. when I looked at the logs I have seen "Anti-affinity instance group policy was violated." errors on nova. it seems there is a solution on https://access.redhat.com/solutions/6895931 but I can not access it. have you ever seen this problem ? 09:59
gokhan__without changing status of lb on db, we can not failover or delete lb when its status is pending_create. 10:01
noonedeadpunkhey10:21
noonedeadpunkso basically you don't have space on computes, or what?10:21
noonedeadpunkor well, there's only 1 compute which does have space to spawn balancer?10:22
lowercaseLooking through, https://www.jimmdenton.com/migrating-lxb-to-ovn/ , there is a step to modify the `/etc/openstack_deploy/group_vars/network_hosts` . If I were to translate these intructions to openstack-ansible style, this would be proper to be placed in user_variables, or should this be in group_vars?14:34
lowercaseAs soon as I ask the question I figured it out. 14:35
lowercaseIt sounded dumb as soon as I typed it out.14:36
noonedeadpunklowercase: that instruction was made from OpenSTack-ansible15:00
noonedeadpunk#startmeeting openstack_ansible_meeting15:01
opendevmeetMeeting started Tue Mar  4 15:01:20 2025 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'openstack_ansible_meeting'15:01
noonedeadpunk#topic office hours15:01
noonedeadpunkone thing we need to discuss today - are cycle highlights we wanna put for the upcoming release15:03
noonedeadpunkwith that I'm not sure what to place there, as close to nothing user-oriented is ready yet15:03
noonedeadpunkprobably httpd role if it wasn't highlighted previous release15:03
NeilHanlono/ 15:04
NeilHanlonmornin'15:04
noonedeadpunkhey-hey15:04
noonedeadpunkI don't think we're anywhere closer with EL10 support either15:07
noonedeadpunkand rest was quite a polishing or internal improvements15:07
NeilHanlonyeah i don't think so either re: el1015:07
noonedeadpunkas gluster is pretty much still a solid blocker for it15:08
NeilHanlonyeah, and i don't think much movement has happened on the CI front, right?15:09
noonedeadpunkno, indeed not15:09
noonedeadpunkbut even if to start developing it - would be hard a bit anyway15:10
NeilHanlonyeah. i promise I'll have a solid answer re: gluster by next week15:10
noonedeadpunkok, nice15:16
noonedeadpunkwe also having vault support for pki coming, but yeah, no idea if that's a fit for release highlights, as it didn't start to land yet15:17
noonedeadpunkso maybe we should even skip highlights this time - dunno15:17
noonedeadpunk#endmeeting15:34
opendevmeetMeeting ended Tue Mar  4 15:34:54 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:34
opendevmeetMinutes:        https://meetings.opendev.org/meetings/openstack_ansible_meeting/2025/openstack_ansible_meeting.2025-03-04-15.01.html15:34
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/openstack_ansible_meeting/2025/openstack_ansible_meeting.2025-03-04-15.01.txt15:34
opendevmeetLog:            https://meetings.opendev.org/meetings/openstack_ansible_meeting/2025/openstack_ansible_meeting.2025-03-04-15.01.log.html15:34
NeilHanlonoh nice, vault support is great news15:43
NeilHanlonhave we tested openbao?15:43
noonedeadpunkNeilHanlon: I want to test openbao, but code is not there yet17:13
noonedeadpunkit's on damiandabrowski plate17:13
damiandabrowskisorry, I wasn't able to attend the meeting17:16
damiandabrowskicurrent state: i have vault backend for ansible-role-pki working on my AIO.17:16
damiandabrowskiTODO: organize all variables properly, prepare documentation, write tests and test out openbao17:16
damiandabrowskibut openbao API isn't compatible with hashicorp vault? so it may require separate pki_method for PKI role17:17
damiandabrowskii.e. we may need to support: standalone, hashicorp_vault and openbao pki methods17:17
damiandabrowskibut i'll test it out17:17
noonedeadpunkI think it should be mainly compatible17:18
noonedeadpunkas these are forks17:18
noonedeadpunkor well openbao is a fork of some version of vault17:18
jrosserwe found openbao to be interchangeable with vault18:53
jrossersorry to miss the meeting18:53
noonedeadpunkit will diverge one day for sure... but not they should be compatible indeed.18:55
noonedeadpunkI've also recalled now about our vault role, lol18:55
noonedeadpunk(and a spec for encrypted config files)18:55
jrosseroh we have one too :)18:56
jrossercurrently lawyer > opensource18:56
jrosserbut yeah we used the word “vault” in the code so that has turned into a mess18:56
noonedeadpunkjrosser: I meant htis one: https://bugs.launchpad.net/neutron/+bug/209991118:57
noonedeadpunkdoh18:57
noonedeadpunkhttps://review.opendev.org/c/openstack/ansible-role-vault/+/80079218:57
noonedeadpunkbtw, the bug above - seems kolla does support encrypted configs through castellan18:57
noonedeadpunksmth for which that role was created years ago18:57
noonedeadpunkso maybe convert it to bao, add native storage engine except mysql...18:58
noonedeadpunkand use for testing...18:58

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!