Tuesday, 2023-11-14

TheJuliaAny thoughts on injecting the agent_secret_token into ISO images with HTTP URL booting? It is close enough/similar enough to virtual media that I suspect it is likely safe/okay to do, and the security is sort of identical with the bmc being the driver00:59
stevebaker[m]TheJulia: that seems no worse than the vmedia case01:39
opendevreviewlikui proposed openstack/ironic master: Fix Reopen Web Console Duplicate Sol Session  https://review.opendev.org/c/openstack/ironic/+/90084602:08
opendevreviewBoushra Sondos Bettir proposed openstack/ironic master: [WIP] Currently working on adding support for OVN type switches which Neutron already supports.  https://review.opendev.org/c/openstack/ironic/+/90056803:17
JayFDoes [S] matter to us in those cases?05:29
opendevreviewlikui proposed openstack/ironic master: Fix Reopen Web Console Duplicate Sol Session  https://review.opendev.org/c/openstack/ironic/+/90084606:16
rpittaugood morning ironic! o/08:09
opendevreviewMerged openstack/metalsmith master: Document LP as official bugtracker  https://review.opendev.org/c/openstack/metalsmith/+/90045208:42
dtantsurTheJulia: I'm definitely for injecting tokens into ISO images. I think we can potentially influence TLS certificates via Redfish, making it robust.09:14
opendevreviewMerged openstack/sushy master: Fix missing ETag when patching Redfish resource  https://review.opendev.org/c/openstack/sushy/+/89211309:21
opendevreviewMerged openstack/networking-generic-switch stable/2023.1: Fix regression plugging 802.3ad port group  https://review.opendev.org/c/openstack/networking-generic-switch/+/90031810:11
opendevreviewMerged openstack/networking-generic-switch stable/2023.2: Fix regression plugging 802.3ad port group  https://review.opendev.org/c/openstack/networking-generic-switch/+/90031610:12
iurygregorygood morning11:19
opendevreviewMark Goddard proposed openstack/networking-generic-switch stable/2023.1: Honor ngs_save_configuration setting when using batch commands  https://review.opendev.org/c/openstack/networking-generic-switch/+/90088411:20
opendevreviewMerged openstack/ironic-inspector stable/2023.2: Update TOX_CONSTRAINTS_FILE for stable/2023.2  https://review.opendev.org/c/openstack/ironic-inspector/+/89604412:30
opendevreviewMerged openstack/networking-generic-switch stable/2023.2: Honor ngs_save_configuration setting when using batch commands  https://review.opendev.org/c/openstack/networking-generic-switch/+/89611113:23
*** dtantsur_ is now known as dtantsur14:51
TheJuliaJayF: I think we would always prefer https, but if someone sets it to HTTP explicitly, then there is really not much we can do other than a scary sounding warning message.14:53
TheJuliawhoa https://review.opendev.org/c/openstack/networking-generic-switch/+/897047/15:40
JayFstuff like that is always borderline scary/cool, but tips hard over to "cool" when one of the biggest users of it is the submitter15:42
TheJulia... That wouldn't be awful to plug jsonrpc into either15:59
TheJuliadtantsur: ^15:59
dtantsur+2075 -1279  not bad15:59
dtantsuris it the chance we kill eventlet before we commit to another project that uses it?16:00
TheJuliaCopyright 2022, heh16:00
* dtantsur suspects the answer is no16:00
TheJuliaunlikely16:01
JayFYou'd also be taking a huge risk16:01
JayFtrying to guess what the endpoint we land on is16:01
JayFyou write something in asyncio or trio and then we end up using gevent16:01
JayFwhoopsie16:01
dtantsurShort of rewriting Ironic in Go or Rust, asyncio is the only reasonable way forward IMO16:02
dtantsurI've rewritten my dashboard in it, and it's just great.16:02
JayFThere is only one response to the issue on the list; and that suggestion is gevent.16:02
JayF(with a specific suggestion, I mean)16:02
TheJuliamore specific suggestions would be good, dtantsur you might just want to chime on the thread as well.16:03
JayF(FWIW I agree with you dtantsur but don't want that thread to turn into Jay talking to Jay, that tends to worry people)16:03
dtantsurI'm not even aware of the thread16:04
* JayF dies16:04
TheJuliahttps://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/message/YO5CZDVAJ6QSF734ALWSGNOQDDAIOXKI/16:05
TheJuliaThreaded view https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/YO5CZDVAJ6QSF734ALWSGNOQDDAIOXKI/#YO5CZDVAJ6QSF734ALWSGNOQDDAIOXKI16:05
JayFhttps://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/message/YO5CZDVAJ6QSF734ALWSGNOQDDAIOXKI/16:05
dtantsur to eventually move to asincio16:05
dtantsurvia gevent as a bridge.16:05
JayFahh16:06
JayFItamar had a suggestion based on how they bridged twisted into asyncio16:06
dtantsurThis is not a terrible proposal if gevent actually helps16:06
JayFbut I suggested he let openstack folks get in that thread before going too crazy with suggestions :)16:06
dtantsurTwisted is cool but it's age is over16:06
JayFapparently they just added a call to the asyncio event loop from the twisted event loop16:06
JayFwell yeah; they wrote a migration path to asyncio16:06
JayFthat we can mimic for eventlet16:06
JayFthat itamar worked on16:06
dtantsurUnlike eventlet, Twisted is not all-or-nothing16:07
dtantsurOur problem is that the second we disable monkey patching, everything bursts in flames16:07
JayFdtantsur: https://etherpad.opendev.org/p/nov-2023-eventlet-gross16:07
dtantsurAnd if we try to use asyncio with monkey patching, everything also bursts in flames16:07
JayFdtantsur: that has sorta the rough notes we've taken, including some of the migration ideas16:07
dtantsurThese are all good ideas, I wonder how far we are from even a proof of concept of any16:08
JayFRight now, none, primarily because we wanted to get it in front of the community and get some form of consnsus and attention before investing too much time16:09
TheJuliaI think we need a "victim" project16:09
* TheJulia volunteers IPA as victim16:10
JayFItamar's big focus has been on eventlet itself and unit tests16:10
TheJulias/victim/tribute/16:10
JayFand he has found a *lot* of test failures, especially in python 3.11, around reentrant locks16:10
JayFto the point where I'd be a bit surprised, given the way sqlalchemy uses those kinds of locks for connections, if a busy openstack cluster worked IRL on py3.1116:10
dtantsurthat's a huge problem16:37
dtantsurTheJulia: IPA could be our case study indeed, the key problem is to replace oslo.service16:38
TheJuliaindeed16:38
rpittaugood night! o/17:25
JayFo/17:26
JayFhttps://review.opendev.org/c/openstack/ironic/+/900568 for the OVN switch support17:40
JayFI think that's pretty on the right track17:40
JayFneeds some tests and linting fixes, but in terms of the shape of the change that looks pretty good17:41
JayFTheJulia: ^ I think that's what you were talking about in DM, about reusing fields, yeah17:41
JayFHeh, coding is wrong but I mean more like, the schema17:42
TheJuliaheh17:42
TheJuliaI'm glad you clarified that because I was like "what?!"17:42
TheJuliabut yeah, I suspect so,  just need to actually find a time slice where I can context switch to it17:43
JayFI think it's one of those things where, I'll try to work with her today/tomorrow get her started writing unit tests for it17:43
JayFwhich should help with understanding of the shape of the data 17:43
TheJulia++17:47
JayFhttps://uefi.org/blog/firmware-sbom-proposal :-O18:50
TheJuliaInteresting!19:33
JayFdtantsur: summary of opendev-sysadmin meeting is; they'd prefer not host a service that only serves a single openstack project and not a whole top-level opendev project. I will look at downstream resources to see if I can get our devops team to run it20:02
JayFdtantsur: basically either we take ownership of "consensus for bug dashboarding for all of openstack" or BYOInfra; I am BYOInfra20:03
clarkbfwiw I don't think you need consensus for bug dashboard for all of openstack20:09
clarkbI don't think ttx had that for bugday20:09
JayFWell, we need to have a tool designed in that direction, with some sort of authority to feel like it's the direction everyone is going20:09
JayFI couldn't even get basic agreement on simple tooling on an LP migration; there's no way I'm going to revisit that topic20:09
JayFit's exhausting20:09
clarkbbut bugday was built for all of the openstack projects at the time even if it was probably biased through the ttx lens20:09
clarkband then tripleo and ironic apparently wrote replacements for bugday and bugday died20:10
JayFthis ironic-bug-dashboard was created after bugday died aiui20:10
clarkbanyway I think there is a difference between consensus and usage. If the tool is generically useful and works for more than ironic thats fine even if all of openstack doesn't necessarily agree with the sort orders or fields etc20:11
JayFbut that's all history now; I'm oriented to the future, and right now I see little/no bug triage happening in Ironic, and a working tool in front of me to go plug in and help solve tha tproblem20:11
JayFheh dtantsur we should just tell the bug deputy to run it locally; we're all python devs and it's a trivial app20:12
JayFthat's almost a serious suggestion 20:12
JayFI'll also note, I wasn't very active in projects using bugday when it was used; so I'm also being told  "don't use this tool that exists, go dig up an older general purpose tool you've never used and make it exist again"; just frustrating when I'm trying to solve a thing, it'20:14
JayFit's okay though I'll just do it out of band and not have the discussion anymore20:14
clarkbno one is saying dig up the old tool20:14
clarkbI explicitly said I don't mean that. I said what OpenDev would be open to hosting is something that fit in the same space even if the code base is different20:14
clarkbWe can't be in the business of doing one off for everoyne. But we can host generic tools that work for others20:15
JayFI'd have you consider the optics of the TC Chair doing such a thing without getting community consensus20:15
JayFNo is a fine answer. Go do something way harder instead is a frustrating answer :D 20:15
clarkbI mean thats the only way OpenDev manages to keep the lights on. What we do is harder to bootstrap absolutely. Beucase the early investment allows for longer term sustainability20:17
clarkbI'm sorry that is frustrating20:17
clarkbbut I'm not sure I have a solution for that20:17
JayFI'm saying "No" is not frustrating. You all saying no is smart, and I appreciate that from an infra standpoint. 20:17
JayF"Why don't we try to build consensus?" as an implied question when, at least as best as I know how, I'm always trying to, and not getting a lot of uptake, is the frustrating part20:18
JayFat some point I have to stop trying to get things done in a committee and start getting things done; that's where I am with this item and many others20:18
JayF(I mean that in the colloquial sense; ala Princess Leia, not in the TC sense; shoudl've picked a better metaphor)20:19
clarkbsure. I guess my feedback to that is to stop trying to get things done in committee. Within OpenDev we send announcements and solicit feedback but when there is none we move forward with the decisions we think work broadly20:19
clarkbfor example we upgraded etherpad recently. But we waited until after the PTG20:19
clarkbthat wasn't a committee decision that was us doing our best to avoid stepping on toes20:19
clarkbWhen we upgraded Gerrit to 3.2 we basically said this is happening and we have to move forward because 2.13 isn't viable. We knew it would be different for our users (new ui etc) and we knew it would require a long downtime. But we made the decision20:20
clarkbWhen setting policy for OpenStack you need to follow the governance structure of the project20:20
clarkbwhen making useful tools that people may choose to or not choose to use you don't have to follow the same consensus driven ruleset20:21
clarkband to be clear sometimes that fails. An example of middling success is meetpad. We deployed that without consensus prior to the first virtual PTG and useage has been low20:22
JayFThat is an interesting line to draw I had not considered before now.20:22
JayFI do not often separate technology from the community.20:22
clarkbfwiw I don't think meetpad is a complete failure. We use it as a team (opendev) regularly and some teams do use it for the PTG. More of a "we expected this to get far more usage than it gets"20:23
JayFJust because they are codependent in so many ways, postively and negatively.20:23
JayFMeetpad is a good tool; I'm glad it exists as an option. I feel bad everytime I don't use it; but I also think there are compelling reasons to use/don't use it on both sides.20:25
opendevreviewVerification of a change to openstack/ironic master failed: [api-ref] Complete port name and shard documentation  https://review.opendev.org/c/openstack/ironic/+/89909722:12
opendevreviewVerification of a change to openstack/ironic master failed: [api-ref] Add firmware fields to driver API  https://review.opendev.org/c/openstack/ironic/+/89886222:12
opendevreviewJay Faulkner proposed openstack/ironic master: DNM Testing nova change  https://review.opendev.org/c/openstack/ironic/+/90095823:35
opendevreviewJay Faulkner proposed openstack/ironic master: DNM Testing nova change  https://review.opendev.org/c/openstack/ironic/+/90095823:41
JayFapparently bumping the timeout up 1 second is not wise as we are at max(timeout) hehe23:41

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!