Thursday, 2021-07-08

*** redrobot4 is now known as redrobot04:52
iurygregorygood morning janders and Ironic o/05:26
jandershey iurygregory o/05:38
arne_wiebalckGood morning janders iurygregory and Ironic!06:59
jandershey arne_wiebalck06:59
*** rpittau|afk is now known as rpittau06:59
rpittaugood morning ironic! o/07:00
iurygregorymorning arne_wiebalck rpittau o/07:00
rpittauhey iurygregory :)07:00
jandershey rpittau07:01
rpittauhey janders :)07:01
opendevreviewRiccardo Pittau proposed openstack/bifrost master: [WIP] Force selinux presence when testing  https://review.opendev.org/c/openstack/bifrost/+/79996507:19
iurygregoryselinux strikes again? :D07:24
rpittaunothing bad this time, it's just we expect to have that enforced but we don't really force to have it :)07:54
rpittaualso a way to test the CI07:54
iurygregorynice07:56
arne_wiebalckFor long running cleaning steps (like network burn-in, 6 hours), I am seeing SSL timeouts in eventlet, nothing fatal, though. It seems that there are known issues with certain combinations of Python and eventlet ... do we have any knowledge about working combinations? From what I see we do not explicitly set the version of eventlet. (This is all on Victoria.)08:11
iurygregory6hrs?08:16
iurygregorywhat?08:16
iurygregory<O>08:16
iurygregoryI'm not aware of combinations that would work =(08:17
arne_wiebalckiurygregory: yep, 6 hrs read, 6 hrs write is the default we use, see also https://review.opendev.org/c/openstack/ironic-python-agent/+/79968708:19
iurygregoryfio <308:20
* iurygregory goes back to 2015 - Master's Degree08:20
arne_wiebalckI let it run first time tonight ... 12 hrs of sustained 10Gbit traffic between my test nodes, they held up :)08:21
arne_wiebalckI guess the cable got a little warm ..08:22
iurygregoryIT will contact you in a few hours :D08:22
arne_wiebalckprobably :-D08:23
*** sshnaidm_ is now known as sshnaidm08:25
opendevreviewVerification of a change to openstack/bifrost failed: Fix Redeploy Playbook  https://review.opendev.org/c/openstack/bifrost/+/79807908:41
rpittauok, same error, but I can't reproduce it locally08:45
rpittaumaybe the CI host is not upgraded with latest pkgs08:46
dtantsurmmmmm...morning?09:00
jandershey dtantsur o/09:01
rpittaumorning dtantsur :)09:02
opendevreviewRiccardo Pittau proposed openstack/bifrost master: [WIP] Force selinux presence when testing  https://review.opendev.org/c/openstack/bifrost/+/79996509:04
rpittauI already have a headache for the vaccine, the bifrost CI issue is not helping09:05
jandersrpittau sorry to hear - and take care!09:09
iurygregorymorning dtantsur 09:11
iurygregoryrpittau, take care =)09:11
rpittauthanks! let's see how long I last09:13
opendevreviewRiccardo Pittau proposed openstack/bifrost master: Collect explicit list of installed packages  https://review.opendev.org/c/openstack/bifrost/+/79997509:15
opendevreviewJacob Anders proposed openstack/ironic master: [WIP] Add support for verify steps  https://review.opendev.org/c/openstack/ironic/+/80000109:55
janders^ dammit, off-by-one!09:56
jandersnot sure who got the ID of 800000 but it doesn't look like it was Ironic09:58
rpittaujanders: that was me :)10:06
rpittaubut not in ironic10:06
jandersrpittau nice! :)10:06
opendevreviewJacob Anders proposed openstack/ironic master: [WIP] Add support for verify steps  https://review.opendev.org/c/openstack/ironic/+/80000110:54
opendevreviewJacob Anders proposed openstack/ironic master: [WIP] Add support for verify steps  https://review.opendev.org/c/openstack/ironic/+/80000110:59
opendevreviewMerged openstack/ironic stable/wallaby: Avoid double file removal in create_boot_iso  https://review.opendev.org/c/openstack/ironic/+/79977411:27
dtantsurcenne: hi! not sure if you've noticed that: https://review.opendev.org/c/openstack/ironic/+/797055 ended up in a merge conflict, unfortunately, you need to rebase it11:27
janderssee you tomorow Ironic o/11:56
rpittaubye everyone, see you tomorrow o/12:45
*** rpittau is now known as rpittau|afk12:45
cennedtantsur: doing rebase now again. 12:59
TheJuliaGood morning13:18
opendevreviewcenne proposed openstack/ironic master: Add `boot_mode` and `secure_boot` to node object and expose in api  https://review.opendev.org/c/openstack/ironic/+/79705513:21
cenneGood morning TheJulia 13:21
* TheJulia feels like she didn't get any sleep13:22
iurygregorygood morning TheJulia 13:25
dtantsurTheJulia: morning. same :(13:26
iurygregorydtantsur, I was checking the schemas https://redfish.dmtf.org/schemas/v1/EventDestination.v1_5_0.json https://redfish.dmtf.org/schemas/v1/EventDestination.v1_0_6.json Protocol is only Redfish, I will remove from the spec the requirement to require this information in the API request13:33
dtantsuriurygregory++13:33
dtantsurit's easier to add something later than to remove it13:33
iurygregoryabout extra I have no idea if we should support13:33
iurygregorydo we have any use cases? .-.13:34
* iurygregory is also thinking about not includding http_headers tbh =X13:34
dtantsurextra is for operator-attached information. I think all our top-level resources support it?13:34
dtantsurI only suggest it for consistency13:34
iurygregoryack13:34
dtantsurre http_headers: we need to research how well they are supported13:34
dtantsurmaybe add them as a later addition?13:34
iurygregoryyeah13:34
dtantsursomebody has told me that their hardware ignores the provided headers13:35
iurygregoryI wouldn't be surprised =)13:35
iurygregoryfor the Context I will just add the description provided by the redfish schema13:36
iurygregoryfunny that can be null but it's required :D13:36
dtantsurOo13:36
dtantsurwhat's it even for? do we need it?13:37
dtantsuris it somehow supplied as part of notifications?13:37
dtantsurre EventTypes: do we need to support EventFormatType instead?  (probably also as a follow-up)13:37
iurygregorywell we will consider default to Alert13:38
iurygregorysince is supported by most hardware vendors13:38
iurygregorybecause in 1.5.0 they deprecated EventTypes13:39
dtantsurcan we just skip it?13:39
iurygregorynot if BMC is using an old version13:39
dtantsurand what about SubscriptionType? just use RedfishEvent13:39
dtantsuromg13:39
iurygregorywe need to send becuase is required13:39
* TheJulia drinks more coffee in hopes of waking up13:40
dtantsuroooh, so wait. EventTypes were required in old versions. SubscriptionType is required now.13:40
dtantsurhow are we even going to manage that? (this should be a chapter in the spec IMO)13:40
iurygregoryall hardware I've tested doesn't support the newer versions...13:41
* dtantsur likes how these objects have different "required" and "requiredOnCreate"...13:41
iurygregoryyeah I also like this ^13:41
dtantsurbtw Context is required, not requiredOnCreate :)13:41
dtantsuriurygregory: could you also write some words on how you're going to handle it for Redfish specifically?13:41
iurygregoryyeah and it can be null =)13:41
dtantsurI understand that the spec is generic, but I think it's useful to discuss this aspect13:42
iurygregorynot sure if I "how we are going to handle for Redfish specifically" .. we have the support in sushy (is considering 1.0.6 version)13:42
dtantsursome implementation details. what exactly you're going to send given that required fields are so different.13:43
dtantsurpretty much a detailed version of this conversation13:43
iurygregoryIn what section should I provide this information?13:44
iurygregoryI don't see where it would fit .-. sorry13:44
dtantsuras a new section in "Proposed changes"? something like "Redfish implementation details"13:45
dtantsuryou cannot remove sections, but you can add more :)13:45
iurygregoryohhhhhhhhhhhh13:45
iurygregoryI wasn't aware of "you can add more" =)13:45
dtantsur:)13:45
iurygregorytks for the discussion dtantsur =)13:45
dtantsursure, you're welcome. thank you for diving into this topic.13:46
* dtantsur didn't expect it to turn out so problematic when he wrote the first version of the RFE...13:46
iurygregoryquick question... since we have changes in ManagementInterface, the endpoint can still be /v1/nodes/<node_id>/subscriptions or has to be /v1/nodes/{node_ident}/management/subscriptions ?13:47
TheJuliajoy :(13:57
iurygregoryjust wondering if we need to keep this pattern or not :D hehe13:57
iurygregorylike we have indicators API under management (sad they don't need to store info in the DB hehe)13:58
TheJuliaeh, db objects are kind of easy when you have a correlating node_id :)13:59
dtantsurI wonder if we want to make it top-level14:01
dtantsur(I came to this idea after reviewing the CLI design in the spec)14:01
dtantsurand I'd personally kill the /management/ part if I could14:02
* TheJulia shrugs14:03
TheJuliapretty much requires the same db interaction, and not having it in nodes makes it easier to code14:03
TheJuliaat least, I think14:03
TheJuliathe nodes controller is a bit narly as-is14:03
iurygregorytop level would be the one I have in the spec or you mean /v1/subscriptions? .-.14:03
TheJuliayes14:04
dtantsurthinking /v1/subscriptions14:04
iurygregoryhummm14:04
dtantsursimilar to ports which also don't exist outside of nodes really14:04
TheJuliaI was thinking exactly that14:04
iurygregoryso we can require the node_uuid to match things 14:04
dtantsurto me GET /v1/subscriptions also makes sense14:04
TheJuliaiurygregory: yes14:05
iurygregoryI like the idea14:05
dtantsur"list all subscriptions in the system"14:05
dtantsursimilar to how you can list all ports, not only ports of a node14:05
TheJuliathat *does* complicate it, I'll just ask for a few simple rbac tests so we know a non-owner/lessee can't touch subscriptions14:05
TheJuliaat least, for a node14:05
dtantsurI suspect it can be cargo-culted from ports14:05
TheJuliayeah, it should all be able to be14:06
iurygregoryTheJulia, cool cool cool =)14:06
TheJuliagood morning kkillsfirst 14:28
kkillsfirstGood Morning TheJulia.14:29
trandlesHello ironic o/14:51
TheJuliagood morning trandles 15:01
opendevreviewAija Jauntēva proposed x/sushy-oem-idrac master: Add RAID mode conversion methods  https://review.opendev.org/c/x/sushy-oem-idrac/+/79950615:20
opendevreviewAija Jauntēva proposed x/sushy-oem-idrac master: Add RAID clear foreign config method  https://review.opendev.org/c/x/sushy-oem-idrac/+/80007115:20
opendevreviewAija Jauntēva proposed openstack/ironic master: Update iDRAC virtual media boot known issue  https://review.opendev.org/c/openstack/ironic/+/80007316:00
JayFthis has 3x +2 and no +A, cna someone land it? https://review.opendev.org/c/openstack/ironic/+/79988016:15
cennedtantsur: JayF: can you just check and re-approve https://review.opendev.org/c/openstack/ironic/+/79705516:46
JayFlgtm, +216:47
cenne(new, small) Changes made are to resolve the merge conflict. 16:47
JayFyeah; looks like you had to rebase against julia's changes16:48
cenneyup.16:49
arne_wiebalckbye everyone o/16:53
cennebye arne_wiebalck o/16:53
cennethanks JayF16:53
JayFo/ have a good ome arne_wiebalck 16:53
opendevreviewcenne proposed openstack/ironic master: [WIP] Add endpoint for setting node boot_mode on demand  https://review.opendev.org/c/openstack/ironic/+/80008416:58
opendevreviewcenne proposed openstack/ironic master: [WIP] Add endpoint for setting node boot_mode on demand  https://review.opendev.org/c/openstack/ironic/+/80008418:05
opendevreviewMerged openstack/ironic stable/wallaby: Only return the requested fields from the DB  https://review.opendev.org/c/openstack/ironic/+/79988018:41
opendevreviewMerged openstack/ironic stable/wallaby: Set stage for objects to handle selected field lists.  https://review.opendev.org/c/openstack/ironic/+/79990418:41
opendevreviewMerged openstack/ironic stable/wallaby: API to pass fields to node object list  https://review.opendev.org/c/openstack/ironic/+/79990518:41
opendevreviewMerged openstack/ironic stable/wallaby: Allow node_sanitize function to be provided overrides  https://review.opendev.org/c/openstack/ironic/+/79990618:46
opendevreviewMerged openstack/ironic stable/wallaby: Use selectinload for all list queries  https://review.opendev.org/c/openstack/ironic/+/79990718:46
JayFHmm. No way those are going to apply cleanly to Victoria, because it's missing RBAC, right? Wondering if Wallaby is as far back as those backports should go19:22
iurygregoryyeah19:41
iurygregoryTheJulia, for the subscriptions api I need to create new policy Rules, so it will only work if using RBAC and not the legacy one? 19:45
iurygregorysomething like http://paste.openstack.org/show/807303/19:51
TheJuliaJayF: uhh... smight be a little more difficult but logically it should work. The policy/sanitization stuff need some changes20:50
*** mgoddard- is now known as mgoddard20:50
TheJuliaiurygregory: would there any information in the subscription which would be sensitive if reviewed?20:51
opendevreviewMerged openstack/ironic master: Add `boot_mode` and `secure_boot` to node object and expose in api  https://review.opendev.org/c/openstack/ironic/+/79705520:59
stevebakergood morning21:02
iurygregoryTheJulia, to me destination would be a sensitive information (but should be ok for admin/operators to look at that in RBAC this would be system scope only)21:37
TheJuliaiurygregory: so all project readers would be a bad idea then21:49
TheJuliaI think there is a SYSTEM_READER_OR_OWNER_READER alias21:50
iurygregoryTheJulia, ack I will look at it o/22:09
* iurygregory time to sleep zzz22:09
TheJuliaiurygregory: or make a secondary policy which is admin readable/otherwise redacted.22:10
jandersgood morning Ironic o/23:27

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!