| mnasiadka | simondodsley: done | 06:29 |
|---|---|---|
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 06:57 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 06:57 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 08:31 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 08:42 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 09:50 |
| mnasiadka | jangutter, bbezak, frickler, kevko: https://review.opendev.org/c/openstack/kolla-ansible/+/881707 - this should finally get our CI to a working state (introduces one-shot restart policy for containers that do bootstrap tasks - and restart_policy=no would finally create systemd units just with Restart=No) | 11:12 |
| jangutter | makes sense to me. I'll have to go pull the patch and see if I can spot any missing references! | 11:20 |
| jangutter | think I found one: masakari ? | 11:26 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 11:36 |
| frickler | isn't masakari dead? nobody fixing their CI in months | 11:41 |
| frickler | we also should look into maybe deprecating vmware things like nova did? | 11:42 |
| mnasiadka | probably, add that to tomorrows meeting agenda :) | 11:43 |
| mnasiadka | masakari seems to be dead - that's obvious | 11:44 |
| opendevreview | Mark Goddard proposed openstack/kayobe stable/zed: Generate local Kolla Ansible config in check mode https://review.opendev.org/c/openstack/kayobe/+/900588 | 11:56 |
| opendevreview | Mark Goddard proposed openstack/kayobe stable/yoga: Generate local Kolla Ansible config in check mode https://review.opendev.org/c/openstack/kayobe/+/900589 | 11:56 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 12:00 |
| rohit02 | Hi team, | 12:22 |
| rohit02 | On Kolla Antelope, any user who does not have admin role assigned, is unable to launch any instance. | 12:23 |
| rohit02 | Error for instance launch is - "Forbidden. Insufficient permissions of the requested operation" | 12:23 |
| rohit02 | Error on instances page is - "Error: Unable to retrieve instances. Details | 12:23 |
| rohit02 | Policy doesn't allow os_compute_api:servers:detail to be performed. (HTTP 403) (Request-ID: req-b06ea1b6-bc7b-4737-8eb1-bf5ad6b64714)" | 12:23 |
| rohit02 | Same is working fine for kolla Zed.....is there any change in kolla antelope | 12:24 |
| opendevreview | Grzegorz Koper proposed openstack/kayobe master: ipa-images: use changed openstack.cloud output https://review.opendev.org/c/openstack/kayobe/+/900753 | 12:27 |
| opendevreview | Grzegorz Koper proposed openstack/kayobe master: ipa-images: use changed openstack.cloud output https://review.opendev.org/c/openstack/kayobe/+/900753 | 12:27 |
| kevko | rohit02: custom policies used ? | 12:52 |
| kevko | frickler: if i remember yoctozepto was PTL ? who was next ? | 12:53 |
| rohit02 | kevko: no | 12:58 |
| kevko | rohit02: so check default policies ? | 14:16 |
| opendevreview | Martin Hiner proposed openstack/kolla-ansible master: Rename kolla_docker to kolla_container https://review.opendev.org/c/openstack/kolla-ansible/+/900412 | 14:18 |
| spatel | mmalchuk morning! | 14:22 |
| spatel | This question I have posted in mailing list and just asking here, Can we tell kolla to not deploy neutron-openvswitch-agent on only SRIOV compute nodes | 14:24 |
| mnasiadka | spatel: https://github.com/openstack/kolla-ansible/blob/e545515e501ff970db147ced3b48a3a5241f2baf/ansible/roles/neutron/defaults/main.yml#L33 | 14:25 |
| mnasiadka | this is what we have now for the expression | 14:25 |
| mnasiadka | so basically on every compute | 14:25 |
| spatel | Yes! | 14:26 |
| spatel | I wish we have exclude_compute_list or something in inventory or somewhere we can tell don't bother to deploy ovs agent | 14:27 |
| mnasiadka | there was this approach in the past https://review.opendev.org/c/openstack/kolla-ansible/+/840895 | 14:27 |
| mnasiadka | but lacked anybody interested in pushing it (since Radek went to do different things) | 14:27 |
| mnasiadka | So basically - spatel if you're interested in making things better and pursuing this approach (or any other) feel free ;-) | 14:28 |
| spatel | Hmm! That means I have to patch it.. I thought there is a way or workaround :) | 14:28 |
| mnasiadka | no workaround for now I guess | 14:29 |
| opendevreview | Merged openstack/kayobe stable/zed: Fix setting kolla_admin_openrc_cacert https://review.opendev.org/c/openstack/kayobe/+/900585 | 14:29 |
| spatel | mnasiadka thanks for confirmation.. I will try to find work around and submit patch | 14:29 |
| opendevreview | Merged openstack/kayobe-config stable/2023.1: kayobe-env: Unstick KOLLA_SOURCE_PATH and KOLLA_VENV_PATH https://review.opendev.org/c/openstack/kayobe-config/+/896114 | 14:29 |
| opendevreview | Merged openstack/kayobe-config stable/zed: kayobe-env: Unstick KOLLA_SOURCE_PATH and KOLLA_VENV_PATH https://review.opendev.org/c/openstack/kayobe-config/+/896115 | 14:29 |
| opendevreview | Merged openstack/kayobe-config stable/yoga: kayobe-env: Unstick KOLLA_SOURCE_PATH and KOLLA_VENV_PATH https://review.opendev.org/c/openstack/kayobe-config/+/896116 | 14:29 |
| mnasiadka | ok | 14:37 |
| mnasiadka | frickler, kevko: https://review.opendev.org/c/openstack/kolla-ansible/+/881707 - oneshot docker restart policy - CI results are in, all green except masakari | 14:37 |
| frickler | mnasiadka: small q on that | 15:13 |
| kevko | i see | 15:16 |
| mnasiadka | works, have no clue why I changed that :) | 15:17 |
| mnasiadka | let me upload a new version | 15:17 |
| opendevreview | Michal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 15:17 |
| opendevreview | Merged openstack/kayobe stable/2023.1: dev: Improve error checking for config check functions https://review.opendev.org/c/openstack/kayobe/+/900590 | 15:22 |
| opendevreview | Martin Hiner proposed openstack/kolla-ansible master: Rename kolla_docker to kolla_container https://review.opendev.org/c/openstack/kolla-ansible/+/900412 | 15:25 |
| SvenKieske | mnasiadka: also added a comment, I _think_ we now miss a testcase, but I'm not 100% sure | 15:27 |
| * SvenKieske sips his energy drink | 15:27 | |
| mnasiadka | true, we could add that test case | 15:28 |
| mnasiadka | but I would prefer in a followup | 15:28 |
| SvenKieske | fine with me :) | 15:28 |
| mnasiadka | this patch requires enough CI jobs to be run :) | 15:28 |
| SvenKieske | If I win the lottery someday I'll donate a dedicated kolla-ansible CI infra xD | 15:29 |
| kevko | haha | 15:39 |
| kevko | mnasiadka: what is the "policy" to backport features ? :) | 15:43 |
| mnasiadka | kevko: policy is if it's not breaking anyone and is useful for operators - we can agree amongst cores to merge the backport - but it's case by case basis | 15:46 |
| mnasiadka | unless frickler disagrees ;-) | 15:46 |
| kevko | mnasiadka: well, i am asking becouse of LE | 15:46 |
| kevko | it's new role and new images ...almost not touching other services (almost) | 15:47 |
| mnasiadka | basically backporting patches that require new inventory groups has proven to be problematic | 15:47 |
| mnasiadka | because we can't assume people update the inventory before upgrading to new release | 15:47 |
| kevko | mnasiadka: inventory ? i would say that inventory is least important | 15:48 |
| kevko | mnasiadka: well, we assume you are quoting the release note no ? :D | 15:48 |
| kevko | they | 15:48 |
| mnasiadka | well, it's important, because if a group does not exist - things will fail | 15:49 |
| kevko | i know :D ..but they should run prechecks ? :D | 15:49 |
| kevko | and IF they don't enable LE ...it will be OK ? | 15:49 |
| kevko | so ? | 15:49 |
| frickler | LE is a pretty big patchset, I'd be sceptical about backporting that | 15:50 |
| mnasiadka | kevko: it won't be ok | 15:50 |
| mnasiadka | as an example - my backport in victoria - https://review.opendev.org/c/openstack/kolla-ansible/+/782735 | 15:51 |
| kevko | mnasiadka: i am just asking ..i have no problem to backport to my downstream repositories ... | 15:51 |
| kevko | mnasiadka: i am just asking ..i have no problem to backport to my downstream repositories ... | 15:51 |
| mnasiadka | It might be easier to do the backport downstream | 15:51 |
| kevko | yeah it is | 15:51 |
| kevko | okay ..i was just asking | 15:51 |
| kevko | btw, i upgraded wallaby to xena this weekend on customer side ...and it was little bit painfull :D | 15:52 |
| kevko | well, everything works from kolla side ...but we firstly upgrading control plane ..and I forgot that there is a service_user in nova/cinder ... | 15:52 |
| mnasiadka | haha | 15:53 |
| mnasiadka | yeah, got that as well | 15:53 |
| kevko | :D | 15:53 |
| kevko | so we needed to patch cinder's function is_service_token and we just added return True for all :D | 15:54 |
| kevko | so after computes will be updated ..we will revert ...but ... it was funny :D | 15:54 |
| kevko | when you have 1000 k8s clusters with openstack cloud provider permanently asking cinder api to do something and it's not working ...it is fun :D | 15:55 |
| kevko | sorry , nova-api detach -> cinder | 15:55 |
| kevko | another fun - 10 hours of debugging - xena was failing when amphora had two management subnets :/ | 15:56 |
| kevko | also inplace patch "D | 15:56 |
| kevko | :D | 15:56 |
| SvenKieske | I'd also argue that LE is basically touching everything - if you enable it - that is, encrypting all the traffic with LE certs, might be fun in offline envs :D | 16:08 |
| SvenKieske | that being said, should there be a precheck that LE api is reachable when toggling it on? oO | 16:09 |
| SvenKieske | I don't remember if we already got that | 16:09 |
| SvenKieske | well I guess it's answered by "there is no real offline deployment upstream support" :) | 16:10 |
| kevko | SvenKieske: LE is not touching anything ...only haproxy ..and not much | 16:15 |
| kevko | SvenKieske: and it is turned off by default | 16:16 |
| SvenKieske | sure, but I'm fairly certain you can't measure the impact that $something has, when you measure when $something is turned off instead of on, right? | 16:23 |
| SvenKieske | but I have no strong opinion on backporting this specific thing actually :) | 16:24 |
| opendevreview | Noah Elias Feldt proposed openstack/kolla master: Add Grafana Loki https://review.opendev.org/c/openstack/kolla/+/900649 | 16:31 |
| opendevreview | Noah Elias Feldt proposed openstack/kolla-ansible master: Add Grafana Loki https://review.opendev.org/c/openstack/kolla-ansible/+/900650 | 16:37 |
| opendevreview | Noah Elias Feldt proposed openstack/kolla master: Add Grafana Loki https://review.opendev.org/c/openstack/kolla/+/900651 | 16:40 |
| opendevreview | Noah Elias Feldt proposed openstack/kolla master: Add Grafana Loki https://review.opendev.org/c/openstack/kolla/+/900649 | 16:42 |
| opendevreview | Simon Dodsley proposed openstack/kolla-ansible master: Add Pure Storage FlashBlade as Manila backend https://review.opendev.org/c/openstack/kolla-ansible/+/879846 | 16:53 |
| opendevreview | Simon Dodsley proposed openstack/kolla-ansible master: Update Pure Storage NVMe Cinder driver https://review.opendev.org/c/openstack/kolla-ansible/+/879844 | 16:59 |
| opendevreview | Michal Arbet proposed openstack/kolla-ansible master: WIP: Run Tempest in test-core-openstack https://review.opendev.org/c/openstack/kolla-ansible/+/878826 | 17:04 |
| opendevreview | Merged openstack/kolla-ansible master: Introduce oneshot docker_restart_policy https://review.opendev.org/c/openstack/kolla-ansible/+/881707 | 19:27 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!