Monday, 2021-11-29

opendevreviewJacob Anders proposed openstack/ironic-python-agent master: Improve efficiency of storage cleaning in mixed media envs  https://review.opendev.org/c/openstack/ironic-python-agent/+/81871204:28
opendevreviewJacob Anders proposed openstack/ironic-python-agent master: Improve efficiency of storage cleaning in mixed media envs  https://review.opendev.org/c/openstack/ironic-python-agent/+/81871204:31
opendevreviewJacob Anders proposed openstack/ironic-python-agent master: Improve efficiency of storage cleaning in mixed media envs  https://review.opendev.org/c/openstack/ironic-python-agent/+/81871204:49
*** pmannidi is now known as pmannidi|Away06:11
*** pmannidi|Away is now known as pmannidi06:12
arne_wiebalckGood morning, janders and Ironic o/06:14
* dtantsur slowly blinks07:10
hgy_Good afternoon, Ironic!07:15
muellerbegood morning ironic o/07:25
rpittaugood morning ironic! o/07:39
opendevreviewRiccardo Pittau proposed openstack/bifrost master: [WIP] Run bifrost on centos 9 stream  https://review.opendev.org/c/openstack/bifrost/+/81905808:09
rpittaudtantsur: thanks, I also read the thread on openstack-discuss, to be honest I thought the centos 9 stream nodes were still not usable as the proper nodeset definition was missing08:10
rpittauanyway, not sure how far we can go without epel pkgs :/08:10
dtantsurrpittau: I think bifrost mostly works without epel08:31
dtantsurin the CI we only enable it when BUILD_IMAGE08:34
opendevreviewRiccardo Pittau proposed openstack/bifrost master: [WIP] Run bifrost on centos 9 stream  https://review.opendev.org/c/openstack/bifrost/+/81905808:51
jandersgood morning arne_wiebalck dtantsur hgy_ muellerbe rpittau and Ironic o/09:02
hgy_good morning danders09:03
muellerbegood morning janders o/09:07
hgy_Hello, Could I ask a question09:23
arne_wiebalckhgy_: sure, you can always ask :)09:24
hgy_When I deploy Bare metal node by Ironic, I can capture the dhcp request package09:25
hgy_But neutron didn't return the response09:26
hgy_I use the default secutity group09:27
hgy_log like this : https://paste.opendev.org/show/811313/09:29
hgy_And I can see that ip had been distributed to inst in horizon 09:37
hgy_Does anyone know the cause of this question09:37
arne_wiebalckhgy_: so, you see your baremetal node boot and send out the dhcp request (to boot into the IPA image)?09:39
hgy_arne_wiebalck: yes09:40
hgy_arne_wiebalck: I saw it in bmc and captured dhcp request package in controller node using tcpdump  09:41
arne_wiebalckhgy_: ok, so the dhcp server even got the request from the node?09:42
hgy_arne_wiebalck: em~~~, actually, the node which have the dhcp server got the requtst by tcpdump09:43
hgy_arne_wiebalck: But I don't sure that dhcp server also got it09:43
hgy_arne_wiebalck: /etc/neutron/dhcp_agent.ini  [DEFAULT]dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq09:45
hgy_tcpdump and network info and neutron configure: https://paste.opendev.org/show/811315/ 09:48
muellerbehgy_ you look via tcpdump for the dhcp package on the interface of ironic server? have you also seen the dhcp answer packages? "tcpdump -nei <INTERFACE> udp port 67 or port 68 or port 69" and also look into bifrost dnsmasq log, and also the dnsmasq config for enabled mac address09:49
arne_wiebalckhgy_: when you say "controller", you're referring to the Neutron controller (for dhcp) or to the Ironic controller (for PXE/tftp) ? From what I understand in standard deployments, Neutron would be used for DHCP and Ironic for tftp (as mentioned, our deployment is slightly different, so I am a little out of my depth ...).09:49
* arne_wiebalck has a meeting now09:49
hgy_arne_wiebalck: "controller" is "Neutron controller", but I deploy  Neutron controller and Ironic controller in one node actually09:51
hgy_arne_wiebalck: In my test environment, I deploy all of openstack in one server09:51
hgy_muellerbe: I have never seen the dhcp answer packages09:53
hgy_muellerbe: I am finding the log of dhsmasq and checking the config of dnsmasq09:56
hgy_muellerbe: hi, Thank you very very much. I found that my dnsmasq.service's status is inactive(dead)10:03
muellerbehgy_ very good, I hope this helps you10:04
hgy_muellerbe: I just configured "dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq" in /etc/neutron/dhcp_agent.ini following the document10:05
hgy_muellerbe: no operation about dnsmasq10:05
hgy_muellerbe: Do I need to start it by handle? I never saw the information about it in https://docs.openstack.org/neutron/latest/install/controller-install-option2-rdo.html10:06
hgy_muellerbe: sorry for my poor English. Do I need to start dnsmasq on manually10:08
muellerbehgy_ I do not know which deployment framework you use, I have only experience with kolla and in kolla the dnsmasq will be started automatically10:27
hgy_muellerbe: I deploy it following https://docs.openstack.org/ironic/victoria/10:31
hgy_muellerbe: one step by one step on hands10:32
hgy_muellerbe: If this, don't waste your time, I am trying it10:33
hgy_muellerbe: you can do yourself things10:33
muellerbehgy_ so you deployed neutron also like this, I think you have to debug your neutron installation, review logs etc, what is the output of this command "openstack network agent list" especially the "DHCP agent"10:39
hgy_muellerbe: It's like this: https://paste.opendev.org/show/811319/10:42
hgy_muellerbe: dhcp agent is up10:42
muellerbeok, where do you see the dnsmasq inactive (dead)10:43
hgy_muellerbe: by "systemctl status dnsmasq.service"10:44
hgy_muellerbe:  like this: https://paste.opendev.org/show/811322/10:44
muellerbewhy says systemd inactive and openstack up?10:44
muellerbehgy_ I think this is a good point for debugging10:44
hgy_muellerbe: This point is also confused me 10:45
hgy_muellerbe: so good, I will debug following this10:46
hgy_muellerbe: love you10:47
muellerbehgy_ you are welcome10:50
opendevreviewDmitry Tantsur proposed openstack/ironic master: [WIP] All-in-one Ironic service with a local RPC bus  https://review.opendev.org/c/openstack/ironic/+/81962011:10
dtantsurTheJulia: this seems to work in basic local testing ^^^11:10
janderssee you tomorrow Ironic o/12:05
opendevreviewRiccardo Pittau proposed openstack/bifrost master: [WIP] Run bifrost on centos 9 stream  https://review.opendev.org/c/openstack/bifrost/+/81905813:17
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Terminate TLS on Nginx  https://review.opendev.org/c/openstack/bifrost/+/81964013:32
*** tosky is now known as Guest714213:37
*** tosky_ is now known as tosky13:37
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Terminate TLS on Nginx  https://review.opendev.org/c/openstack/bifrost/+/81964013:40
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Terminate TLS on Nginx  https://review.opendev.org/c/openstack/bifrost/+/81964014:04
TheJuliaGood morning!14:17
dtantsurmorning TheJulia 14:17
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Terminate TLS on Nginx  https://review.opendev.org/c/openstack/bifrost/+/81964014:17
rpittaugood morning TheJulia :)14:17
opendevreviewDmitry Tantsur proposed openstack/ironic master: [WIP] All-in-one Ironic service with a local RPC bus  https://review.opendev.org/c/openstack/ironic/+/81962014:25
TheJuliadtantsur: impressive. I kind of like it14:33
TheJuliahmm14:33
* TheJulia wonders which version she was just reviewing14:33
TheJuliaAnyway! I'm awake!14:33
dtantsurTheJulia: the version don't change much, I'm mostly polishing/debugging nuances now14:35
dtantsuryay re aware :)14:35
TheJuliahey, nobody said I was aware!14:35
TheJulia;)14:35
* TheJulia is really just an advanced AI14:35
*** outbrito_ is now known as outbrito14:35
TheJuliaNow, to convince the future AI overlords to deliver food/water ;)14:35
dtantsurTheJulia: ask the feline overlord ;)14:36
TheJuliaheh14:37
TheJuliaugh, I'm actually going to have to start to wear glasses while working on my desk. Or I need to get bigger monitors14:38
* dtantsur is trying to remember why we use TLS for JSON RPC in bifrost14:39
TheJuliatls all the thigns?14:40
dtantsurone could argue that TLS on localhost doesn't make too much sense..14:40
TheJuliaand one could also argue CAP_NET_ADMIN may be given in places it shouldn't be14:40
dtantsuralso true14:41
dtantsurI'm trying to make nginx handle TLS14:41
TheJuliapop neutron container container somehow, you may not be able to see ironic, but you might be able to sniff the loopback14:41
dtantsur(i.e. https://review.opendev.org/c/openstack/bifrost/+/819640)14:41
dtantsureven without root?14:41
TheJuliaall you need is cap_net_admin14:41
TheJuliawhich root implies14:42
TheJuliabut you don't need uid=0 to launch or use tcpdump14:42
TheJuliajust cap_net_admin allows you to do the raw packet bind14:42
TheJulias/packet/socket/14:42
TheJuliahaving written tcp socket io code in C was super useful to my brain.14:43
TheJulia</sarcasm mode=partial>14:43
dtantsurcpdump: virbr0: You don't have permission to capture on that device14:43
dtantsurwell, at least a typical user does not seem to be able to do that14:43
TheJulialo14:43
TheJuliayeah14:43
dtantsurotherwise we need to start caring about not using TLS for mysql :)14:44
TheJuliaso mysql is a weird beast as it is sort of like smtp14:44
TheJuliaIf I remember correctly14:44
TheJulia... or that might have only been 15 years ago14:45
dtantsurno idea about the protocol itself14:45
dtantsurI know that Metal3 had to write some configuration to use TLS with it14:45
TheJuliasmtp had to derivations, smtps which ran a an SSL socket on like port 463, and then smtp added "starttls" method on tcp/2514:45
TheJuliamost everyone just used starttls when encrypted mail transport started to become a thing14:46
dtantsurI'm not sure Bifrost's threat model includes people with CAP_NET_ADMIN on localhost14:46
dtantsuryeah14:46
* TheJulia spent waaaayyyyy too much time helping law firms get smtp starttls support working.14:46
dtantsurhehe14:46
TheJuliadtantsur: true14:46
dtantsurit's not hard to add TLS support to MySQL bts: https://github.com/metal3-io/ironic-image/blob/master/scripts/runmariadb#L39-L4114:47
TheJuliadtantsur:  in the threat model case, I think it comes down to what is easier to maintain and makes the most sense14:47
dtantsurin metal3 we had a lot of issues with eventlet's TLS implementation14:47
TheJulia:(14:48
TheJuliait feels like https://review.opendev.org/c/openstack/ironic-specs/+/815308 just needs a bunch of underscores added14:49
dtantsurah, I think I remembered. JSON RPC uses host names, which in case of bifrost may not be localhost.14:50
TheJuliayeah, this is true14:54
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Stop exposing JSON RPC to the whole network  https://review.opendev.org/c/openstack/bifrost/+/81964914:56
dtantsurTheJulia: something like this ^^^14:56
TheJulia+2'ed14:57
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Terminate TLS on Nginx  https://review.opendev.org/c/openstack/bifrost/+/81964014:58
dtantsur#startmeeting ironic15:00
opendevmeetMeeting started Mon Nov 29 15:00:08 2021 UTC and is due to finish in 60 minutes.  The chair is dtantsur. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'ironic'15:00
rpittauo/15:00
dtantsurhi folks15:00
TheJuliao/15:00
rpioso\o15:00
ajyao/15:00
stendulkero/15:00
dtantsur#link https://wiki.openstack.org/wiki/Meetings/Ironic our agenda for today15:01
* TheJulia wonders how light our december meetings may be15:01
dtantsurvery light, I suspect :)15:01
dtantsur#topic Announcements / Reminder15:01
dtantsur#info Tested Runtimes for Yoga - Python 3.8 and 3.9 (https://governance.openstack.org/tc/reference/runtimes/yoga.html)15:02
dtantsurThis did cause a heated discussion on the ML since 3.6 is what CentOS/RHEL 8 has15:02
dtantsurI have a discussion topic to return to this issue15:02
dtantsur#info First bugfix branch should be created by the end of next week15:02
dtantsurWho doesn't like a fresh warm release? :)15:02
dtantsurlet's make sure to finish whatever can be finished by EOW (this week)15:03
rlooo/15:03
dtantsur#info PTL on PTO during whole December15:04
dtantsurlet's wish iurygregory great time :)15:04
TheJulia++ I'm glad he made it home15:04
dtantsuryep!15:04
dtantsurThat's all we had, does anyone have any other announcements?15:04
TheJuliaI've got nothing annoucement wise15:05
TheJuliawe *should* try and see when we want to stop holding meetings for the rest of the year, during open discussion15:06
dtantsuryep15:06
dtantsur#topic Review action items from previous meeting15:06
dtantsuriurygregory to create a doodle for the new time so people can vote + email to openstack-discuss15:06
dtantsurI don't think this has actually happened?15:06
TheJuliaI did not see it15:06
TheJuliaHe seemed excepptionally busy last week15:06
dtantsurI can imagine15:06
dtantsurwas it about moving the meeting time? maybe rpittau could drive it since you're the most affected?15:07
TheJuliaYeah15:07
* dtantsur pokes rpittau15:09
rpittausounds good, I will take care of it (sorry, double meeting)15:09
dtantsurah, well, conflicting meetings. we'll get back to it.15:09
dtantsurno worries, I obviously forgot *why* you were affected :D15:10
dtantsur#topic Review subteam status reports15:10
dtantsurhmm, first15:10
dtantsur#action rpittau to create a doodle for the new meeting time so people can vote + email to openstack-discuss15:10
dtantsurnow, whiteboard15:10
dtantsur#link https://etherpad.opendev.org/p/IronicWhiteBoard white board15:10
dtantsurI don't think we've merged the Yoga topics15:10
TheJuliaWe have not15:11
dtantsur#link https://review.opendev.org/c/openstack/ironic-specs/+/815308/ Yoga themes15:11
dtantsurstill, I'd suggest we start reshaping the whiteboard according to it15:11
dtantsurany volunteers?15:11
dtantsur(I can do it, but I'm happy to delegate :)15:11
TheJuliaI might be able to this week. I've got a few past-due things to take care of today15:12
dtantsurI can do it as well, just checking if anyone is really eager15:12
TheJulia++15:12
dtantsur#action dtantsur to update the whiteboard with the (draft) yoga themes15:12
dtantsur#topic Deciding on priorities for the coming week15:13
dtantsurfirst and foremost, please review the yoga themes15:13
dtantsurI'd love to see https://review.opendev.org/c/openstack/sushy/+/817792 merged, but it's on the list already15:13
dtantsuranything else?15:13
TheJuliaIf I can crank out the client patch for node history events tomorrow, any objection for me to add it tomorrow?15:13
dtantsurnone from me15:14
dtantsurokay, let's move on to discussions, we have a couple of things15:15
dtantsur#topic Situation around Python 3.6 support15:15
rpittauI Added a couple of patche sfor tempest15:15
rpittautoo late :(15:15
dtantsurthanks rpittau 15:15
TheJuliarpittau: ack, I'll try to review them soon()15:15
rpittauack15:16
dtantsurSo, as I mentioned earlier, the tested runtimes no longer include python 3.615:16
dtantsurwhich causes issues for Bifrost which supports Stream 8, which has 3.615:16
dtantsur(it also supports Bionic, openSUSE Leap and Debian 10, all of which have <3.8 and will need to be deprecated)15:16
dtantsurbut Ubuntu and Debian have new versions which support 3.8+15:17
dtantsurCentOS has Stream 9, but I don't know how many folks will feel easy to use it for their production deployments15:17
dtantsurany opinions or suggestions?15:17
TheJuliaI have this bad feeling it doesn't end up with anyone happy15:18
rpittauabout centos stream 9, I definitely do not suggest it in the current status15:18
rpittaufor the rest, if we want to keep testing on py3.6 we can, we "just" to add a py3.6 test 15:18
dtantsurrpittau: do you have any practical experience that makes you say so? re 9?15:18
dtantsurwe have a discussion on the ML where some people are basically going "9 is just as good as 8, what's the problem?"15:19
TheJuliaI feel like those saying it didn't get to feel pain during centos stream 815:20
dtantsurI'd like us to keep 3.6 support for at least Yoga; similar voices are coming from Kolla and RDO teams15:21
dtantsurbut it's seems like the matter is already decided on the TC side15:22
TheJuliaI'm on board with that for now15:22
rloo++ keep 3.6 support15:22
rpittaumy experience so far is restricted to bifrost and metal315:22
rpittauif it was an overlap phase where we had to temporarily support both centos8 and centos9 I would say no problem, but abruptly going from one to another is a bit tough15:22
dtantsurat the very least we can add add 3.6 unit tests on Ironic and other our projects to make sure *we* don't break and serve as canary for broken dependencies15:23
TheJuliaThis does feel like the community is trying to make a very hard cut15:23
TheJuliabut I think upfront we knew we would only be on 3.6 for 3-4 years tops.15:23
TheJuliabut it is hard for us to really comprehend or remember that in active memory from day to day when distros do long lived packaging15:23
rpittauI'm ok to add unit tests for py3.6 for yoga, and work on centos9 at the same time15:24
dtantsuryep15:24
dtantsurand yep15:24
dtantsurvoting or non-voting?15:24
TheJuliavoting... at least for the time being15:24
rpittauvoting15:24
dtantsurokay, sounds good, will do (help welcome)15:25
dtantsurmoving on? or any other opinions?15:25
TheJuliaI suspect we're safe to move on15:26
rpittauI will help15:26
rpittauone concern I have is for dependencies removing py3.6 support (oslo libraries for example), need to keep an eye on those15:26
TheJuliayeah15:26
dtantsuryeah, that's why I'm saying that the job will work as a canary15:26
TheJuliaif they start slipping in a minimum requirement of 3.8, that is pretty much shooting eveyrone in the foot15:26
dtantsurat least we'll know when it's over :)15:26
rpittau:)15:26
TheJulia++15:26
dtantsur#topic Baremetal SIG15:27
dtantsurarne_wiebalck: anything from you?15:27
* TheJulia wonders if the sig is on holiday until January15:27
dtantsurwell, I have a talk on the 14th :)15:28
* dtantsur is curious if anyone shows up15:28
dtantsurokay, I assume nothing new from the SIG at this point15:30
dtantsur#topic RFE review15:30
TheJuliadtantsur: what is the talk on? I've been under a rock15:30
dtantsur#link https://storyboard.openstack.org/#!/story/2008723 Enhance Redfish firmware update user experience15:30
dtantsurTheJulia: I'm going to talk about Metal3, maybe even show it15:30
dtantsurmeanwhile, ajya, you around?15:31
ajyaabout RFE - it is updated after previous review - zip support removed and added download_source similar to images. Any feedback?15:31
TheJuliaWas zip support added by the ilo folks?15:32
dtantsurI think we tried to figure that out and decided that rather no?15:33
TheJuliaUnfortunately, removing support would cause me to be worried about compatibility and messaging.15:33
dtantsurI think ajya means it was removed from the RFE, not from the code15:33
ajyaas far as I recall, no it was not aded by ilo, they had different packages handled server side15:33
TheJuliaoh!15:33
TheJuliaokay15:33
ajyayes, removed from RFE15:33
ajyafor redfish15:33
TheJulianevermind me!15:33
dtantsurthe RFE seems good to me15:34
ajyathanks15:34
ajyaanyone else?15:34
* TheJulia looks15:35
TheJulialgtm15:36
dtantsurany objections?15:37
TheJulianone at this time15:37
dtantsurokay, marked approved15:38
dtantsur#topic Open discussion15:38
dtantsurthe floor is open15:38
TheJuliaSo, Typically we've taken a moment in these meetings in past years to identify when people were generally going to go *poof* for the year15:38
dtantsurI'll be more or less present until ~ 22nd15:39
TheJuliaI personally can disappear after the 15th, but  I can hang out until say the 22nd or just keep an eye on things15:39
rpittauI will be present until the 24th15:39
TheJuliaso the next question, is how many more times do we want to meet this year?15:40
TheJuliaTypically we stop mid-month15:40
dtantsurdefinitely not 27th :) unlikely Jan, 3rd15:40
rpittauwe could skip the 21st ?15:41
dtantsurI'll probably be here on the 20th still15:41
rpittausorry, the 20th, yeah15:41
arne_wiebalcko/15:41
* arne_wiebalck was in another meeting15:41
dtantsurarne_wiebalck: anything from the SIG standpoint?15:41
dtantsurarne_wiebalck: I wonder how many people will still be here on the 14th for the meeting..15:42
arne_wiebalcknothing for the SIG, except dtantsur's presentation on the 14th!15:42
arne_wiebalckhmm15:42
TheJuliaI don't really have any strong opinions either way, If we want to skip the 27th and the 3rd, I think that works but I suspect the 20th will lack critical mass. Just speaking from experience15:42
arne_wiebalckwe can postpone to Jan if you prefer, but mid december should be ok, I guess15:42
arne_wiebalckas you prefer15:42
dtantsurI'll be here anyway15:43
arne_wiebalckme, too15:43
dtantsurmaybe a pre-holiday presentation is actually nice :)15:43
TheJulia:)15:43
dtantsurTheJulia: I'm cool with skipping 20th15:43
arne_wiebalckneed some x-mas filter!15:43
dtantsuryeah15:44
arne_wiebalckrudolph circling the screen or sth15:44
TheJuliathen lets skip the 20th, 27th15:44
TheJuliawhat about the third?15:44
dtantsurI'll probably be still out15:45
arne_wiebalckstill holiday here15:45
TheJuliaThen lets resume January 10th15:45
arne_wiebalck++15:45
rpittauyep15:45
TheJuliaand hope all Ironic contributors are ready for plenty of code reviews :)15:45
dtantsurwho wants to send the announcement?15:45
dtantsuryeah15:45
TheJuliaI'll send the email15:45
dtantsurthanks!15:45
TheJuliaI guess I have a couple other minor items15:45
TheJuliaIt is board nominations right now. You should have an email from the Open Infrastructure Foundation if you'd like to nominate anyone for board of directors. As a reminder, individuals need 10 nominees to appear on the ballot. Please use firefox since it is known to work.15:46
dtantsur++15:47
dtantsuranything else?15:47
TheJuliaAdditionally, the nova patche to try and fix the lack of actual rebalance needs eyes15:47
TheJuliahttps://review.opendev.org/c/openstack/nova/+/81389715:47
sam_zi've been workin on the implementation of the feature described here and would super appreciate some eyes on my work: https://review.opendev.org/c/openstack/ironic-specs/+/808804/15:47
TheJuliait changes the behavior, I'd <3 for operators to review it15:47
* TheJulia looks at rloo, zer0c00l, mnaser, arne_wiebalck ;)15:48
dtantsursam_z: ah, redfish proxy. yeah, it fell off my radar, sorry15:48
arne_wiebalckTheJulia: ++15:48
dtantsurI wonder how it plays together with the allinone (sorry TheJulia) ironic process.. will need to think15:49
TheJuliadtantsur: sam_z ?15:49
TheJuliaor the nova stuffs?15:49
dtantsurthe redfish stuffs15:49
TheJuliak, good question15:49
sam_zalso i remember TheJulia saying she had interest in migrating the ironic api to flask and since i'm workin' with flask here i just wanted to put my name in for that lol15:49
dtantsurit's probably not a concern, unless sam_z wants to have a new executable15:49
TheJuliayeah15:50
sam_zallinone process?15:50
TheJuliaI think the consensus kind of lead to a new process for the proxy anyhow, at least for now15:50
dtantsursam_z: easier to show than to explain: https://review.opendev.org/c/openstack/ironic/+/81962015:50
dtantsurbasically API and conductor in a single executable15:50
TheJuliasam_z: the idea has been kicking around for the last two years15:50
dtantsurI'd definitely want to see a possibility to use an all-in-one process15:51
dtantsureven if the default is to use a new ironic-redfish-api executable15:51
TheJuliaone last item from me. It seems I'm doomed to do a lot more in tempest this cycle than I expected. I've been informed more comprehensive testing is expected, basically to ultimately remodel the plugin to be rbac aware at the level of tests above and beyond what client to use15:51
sam_zwould this feature working with allinone ironic imply it being integrated into the allinone executable?15:51
sam_zcuz i *think* that actually might not be too bad actually15:52
dtantsursam_z: likely so. it's probably going to be trivial, just making sure you're aware that it's happening15:52
TheJuliaI've got a basic wip up https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/819165, since the desire is a mix of positive and negative testing, I'd appreciate any thoughts/feedback since it is going to be a large pile of work15:52
dtantsurTheJulia: my condolences (re tempest)15:52
TheJuliadtantsur: thanks15:52
TheJulianot what I expected to spend december on15:52
dtantsurI guess tempest is not the future we wanted, but the future we deserved15:53
TheJuliamaybe 15:53
TheJuliaOur plugin has somewhat languished as well since it is often an after thought15:54
sam_zi have already been brainstorming ways to launch the ironic api and this redfish proxy in the same service anyway and i think because my thingy is a separate wsgi app, in theory we could just use something like the werkzeug dispatcher to serve both 15:54
TheJuliaor a minor thing creeps into being a more major thing15:54
TheJuliasam_z: might work, although I think rpittau had an issue with werkzeug directly15:55
TheJuliaor I may be remembering something else15:55
dtantsursam_z: there are numerous possibilities, depending on whether you want to reuse the same port or not15:55
* TheJulia wonders if we should just let sam_z do what he wants and see what the outcome is15:55
rpittaummmm not me or it was not recently15:55
TheJuliarpittau: this felt recent to me15:55
dtantsurI have some experience with werkzeug, but it mostly positive15:56
dtantsurI think we use it in IPA directly?15:56
sam_zyea, i've been meaning to look into trying to implement it and just seeing what happens lol15:56
TheJuliahjensas: was there something w/r/t werkzeug recently?15:56
TheJuliadtantsur: we do15:56
* TheJulia wonders if we're in the multiverse of python madness15:57
TheJulia(w/r/t my thinking of recent werkzeug issues15:57
TheJulia)15:57
dtantsurwerkzeug is the thing behind flask, it's not the worst piece of the puzzle15:57
TheJuliatrue15:58
TheJuliaAnyway, I guess we're done for today?16:00
dtantsuryep16:00
dtantsurthanks folks!16:00
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Stop exposing JSON RPC to the whole network  https://review.opendev.org/c/openstack/bifrost/+/81964916:00
dtantsur#endmeeting16:00
opendevmeetMeeting ended Mon Nov 29 16:00:53 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:00
opendevmeetMinutes:        https://meetings.opendev.org/meetings/ironic/2021/ironic.2021-11-29-15.00.html16:00
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/ironic/2021/ironic.2021-11-29-15.00.txt16:00
opendevmeetLog:            https://meetings.opendev.org/meetings/ironic/2021/ironic.2021-11-29-15.00.log.html16:00
arne_wiebalckthanks dtantsur 16:01
opendevreviewDmitry Tantsur proposed openstack/bifrost master: Terminate TLS on Nginx  https://review.opendev.org/c/openstack/bifrost/+/81964016:01
*** sshnaidm is now known as sshnaidm|afk16:22
hjensasTheJulia: we ran into a IPv6 related bug in Werkzeug a couple of weeks back, https://github.com/pallets/werkzeug/issues/226216:25
TheJuliafun!16:26
TheJuliaSo I guess that should be relatively okay moving forward16:26
TheJuliasam_z: ^^^ fyi16:27
rpittaugood night! o/16:38
opendevreviewMerged openstack/ironic master: Remove isfile check from place_loaders_for_boot  https://review.opendev.org/c/openstack/ironic/+/81937817:29
opendevreviewMerged openstack/ironic-tempest-plugin master: Update pep8 requirements  https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/81931917:56
opendevreviewJulia Kreger proposed openstack/ironic stable/xena: Clarify driver load error message  https://review.opendev.org/c/openstack/ironic/+/81958717:56
opendevreviewJulia Kreger proposed openstack/ironic stable/wallaby: Clarify driver load error message  https://review.opendev.org/c/openstack/ironic/+/81958817:56
NobodyCamGood Morning Ironic'ers! Happy Monday19:05
TheJuliaGood morning NobodyCam 19:06
NobodyCamo/ Good Morning TheJulia ...19:07
*** tosky is now known as Guest716720:17
*** tosky_ is now known as tosky20:17
*** tosky_ is now known as tosky21:57
opendevreviewJulia Kreger proposed openstack/ironic-tempest-plugin master: WIP: An idea for rbac positive/negative testing  https://review.opendev.org/c/openstack/ironic-tempest-plugin/+/81916523:03
TheJuliastevebaker[m]: another look at ^^^ would be appreciated. I'm trying to figure out how to handle the empty bodies since we don't hand 403's back to everyone for everything, as it would be information leakage otherwise.23:04
TheJuliasome thoughts noted in test_nodes.py23:04
TheJuliaand kind of two different ideas23:05
stevebaker[m]TheJulia: looking23:09
TheJuliastevebaker[m]:  no rush today23:09
stevebaker[m]oki23:09
TheJuliastevebaker[m]: I’m wrapping up since I started at 6 am local23:09
stevebaker[m]yeah thats early23:10
TheJuliaI almost always start that early23:10
TheJulia It yeah23:10
TheJuliaErr, but23:10
opendevreviewSteve Baker proposed openstack/ironic master: Write master grub config on startup  https://review.opendev.org/c/openstack/ironic/+/81558023:36
opendevreviewSteve Baker proposed openstack/ironic master: Capture [pxe]loader_file_paths for distros  https://review.opendev.org/c/openstack/ironic/+/81539223:36
opendevreviewSteve Baker proposed openstack/ironic master: Move place_loaders_for_boot to boot driver __init__  https://review.opendev.org/c/openstack/ironic/+/81972923:36

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!