Tuesday, 2023-11-14

mnasiadkasimondodsley: done06:29
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170706:57
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170706:57
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170708:31
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170708:42
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170709:50
mnasiadkajangutter, bbezak, frickler, kevko: https://review.opendev.org/c/openstack/kolla-ansible/+/881707 - this should finally get our CI to a working state (introduces one-shot restart policy for containers that do bootstrap tasks - and restart_policy=no would finally create systemd units just with Restart=No)11:12
janguttermakes sense to me. I'll have to go pull the patch and see if I can spot any missing references!11:20
jangutterthink I found one: masakari ?11:26
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170711:36
fricklerisn't masakari dead? nobody fixing their CI in months11:41
fricklerwe also should look into maybe deprecating vmware things like nova did?11:42
mnasiadkaprobably, add that to tomorrows meeting agenda :)11:43
mnasiadkamasakari seems to be dead - that's obvious11:44
opendevreviewMark Goddard proposed openstack/kayobe stable/zed: Generate local Kolla Ansible config in check mode  https://review.opendev.org/c/openstack/kayobe/+/90058811:56
opendevreviewMark Goddard proposed openstack/kayobe stable/yoga: Generate local Kolla Ansible config in check mode  https://review.opendev.org/c/openstack/kayobe/+/90058911:56
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170712:00
rohit02Hi team,12:22
rohit02On Kolla Antelope, any user who does not have admin role assigned, is unable to launch any instance.12:23
rohit02Error for instance launch is -  "Forbidden. Insufficient permissions of the requested operation"12:23
rohit02Error on instances page is  - "Error: Unable to retrieve instances. Details12:23
rohit02Policy doesn't allow os_compute_api:servers:detail to be performed. (HTTP 403) (Request-ID: req-b06ea1b6-bc7b-4737-8eb1-bf5ad6b64714)"12:23
rohit02Same is working fine for kolla Zed.....is there any change in kolla antelope12:24
opendevreviewGrzegorz Koper proposed openstack/kayobe master: ipa-images: use changed openstack.cloud output  https://review.opendev.org/c/openstack/kayobe/+/90075312:27
opendevreviewGrzegorz Koper proposed openstack/kayobe master: ipa-images: use changed openstack.cloud output  https://review.opendev.org/c/openstack/kayobe/+/90075312:27
kevkorohit02: custom policies used ? 12:52
kevkofrickler: if i remember yoctozepto was PTL  ? who was next ? 12:53
rohit02kevko: no 12:58
kevkorohit02: so check default policies ? 14:16
opendevreviewMartin Hiner proposed openstack/kolla-ansible master: Rename kolla_docker to kolla_container  https://review.opendev.org/c/openstack/kolla-ansible/+/90041214:18
spatelmmalchuk morning! 14:22
spatelThis question I have posted in mailing list and just asking here, Can we tell kolla to not deploy neutron-openvswitch-agent on only SRIOV compute nodes14:24
mnasiadkaspatel: https://github.com/openstack/kolla-ansible/blob/e545515e501ff970db147ced3b48a3a5241f2baf/ansible/roles/neutron/defaults/main.yml#L3314:25
mnasiadkathis is what we have now for the expression14:25
mnasiadkaso basically on every compute14:25
spatelYes! 14:26
spatelI wish we have exclude_compute_list or something in inventory or somewhere we can tell don't bother to deploy ovs agent 14:27
mnasiadkathere was this approach in the past https://review.opendev.org/c/openstack/kolla-ansible/+/84089514:27
mnasiadkabut lacked anybody interested in pushing it (since Radek went to do different things)14:27
mnasiadkaSo basically - spatel if you're interested in making things better and pursuing this approach (or any other) feel free ;-)14:28
spatelHmm! That means I have to patch it.. I thought there is a way or workaround :)14:28
mnasiadkano workaround for now I guess14:29
opendevreviewMerged openstack/kayobe stable/zed: Fix setting kolla_admin_openrc_cacert  https://review.opendev.org/c/openstack/kayobe/+/90058514:29
spatelmnasiadka thanks for confirmation.. I will try to find work around and submit patch 14:29
opendevreviewMerged openstack/kayobe-config stable/2023.1: kayobe-env: Unstick KOLLA_SOURCE_PATH and KOLLA_VENV_PATH  https://review.opendev.org/c/openstack/kayobe-config/+/89611414:29
opendevreviewMerged openstack/kayobe-config stable/zed: kayobe-env: Unstick KOLLA_SOURCE_PATH and KOLLA_VENV_PATH  https://review.opendev.org/c/openstack/kayobe-config/+/89611514:29
opendevreviewMerged openstack/kayobe-config stable/yoga: kayobe-env: Unstick KOLLA_SOURCE_PATH and KOLLA_VENV_PATH  https://review.opendev.org/c/openstack/kayobe-config/+/89611614:29
mnasiadkaok14:37
mnasiadkafrickler, kevko: https://review.opendev.org/c/openstack/kolla-ansible/+/881707 - oneshot docker restart policy - CI results are in, all green except masakari14:37
fricklermnasiadka: small q on that15:13
kevkoi see 15:16
mnasiadkaworks, have no clue why I changed that :)15:17
mnasiadkalet me upload a new version15:17
opendevreviewMichal Nasiadka proposed openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170715:17
opendevreviewMerged openstack/kayobe stable/2023.1: dev: Improve error checking for config check functions  https://review.opendev.org/c/openstack/kayobe/+/90059015:22
opendevreviewMartin Hiner proposed openstack/kolla-ansible master: Rename kolla_docker to kolla_container  https://review.opendev.org/c/openstack/kolla-ansible/+/90041215:25
SvenKieskemnasiadka: also added a comment, I _think_ we now miss a testcase, but I'm not 100% sure15:27
* SvenKieske sips his energy drink15:27
mnasiadkatrue, we could add that test case15:28
mnasiadkabut I would prefer in a followup15:28
SvenKieskefine with me :)15:28
mnasiadkathis patch requires enough CI jobs to be run :)15:28
SvenKieskeIf I win the lottery someday I'll donate a dedicated kolla-ansible CI infra xD15:29
kevkohaha15:39
kevkomnasiadka: what is the "policy" to backport features ? :) 15:43
mnasiadkakevko: policy is if it's not breaking anyone and is useful for operators - we can agree amongst cores to merge the backport - but it's case by case basis15:46
mnasiadkaunless frickler disagrees ;-)15:46
kevkomnasiadka: well, i am asking becouse of LE 15:46
kevkoit's new role and new images ...almost not touching other services (almost)15:47
mnasiadkabasically backporting patches that require new inventory groups has proven to be problematic15:47
mnasiadkabecause we can't assume people update the inventory before upgrading to new release15:47
kevkomnasiadka: inventory ? i would say that inventory is least important15:48
kevkomnasiadka: well, we assume you are quoting the release note no ? :D 15:48
kevkothey15:48
mnasiadkawell, it's important, because if a group does not exist - things will fail15:49
kevkoi know :D ..but they should run prechecks ? :D 15:49
kevkoand IF they don't enable LE ...it will be OK ? 15:49
kevkoso ? 15:49
fricklerLE is a pretty big patchset, I'd be sceptical about backporting that15:50
mnasiadkakevko: it won't be ok15:50
mnasiadkaas an example - my backport in victoria - https://review.opendev.org/c/openstack/kolla-ansible/+/78273515:51
kevkomnasiadka: i am just asking ..i have no problem to backport to my downstream repositories ... 15:51
kevkomnasiadka: i am just asking ..i have no problem to backport to my downstream repositories ... 15:51
mnasiadkaIt might be easier to do the backport downstream15:51
kevkoyeah it is 15:51
kevkookay ..i was just asking 15:51
kevkobtw, i upgraded wallaby to xena this weekend on customer side ...and it was little bit painfull :D 15:52
kevkowell, everything works from kolla side ...but  we firstly upgrading control plane ..and I forgot that there is a service_user in nova/cinder ...15:52
mnasiadkahaha15:53
mnasiadkayeah, got that as well15:53
kevko:D 15:53
kevkoso we needed to patch cinder's function is_service_token and we just added return True for all :D 15:54
kevkoso after computes will be updated ..we will revert ...but ... it was funny :D 15:54
kevkowhen you have 1000 k8s clusters with openstack cloud provider permanently asking cinder api to do something and it's not working ...it is fun :D 15:55
kevkosorry , nova-api detach -> cinder15:55
kevkoanother fun - 10 hours of debugging - xena was failing when amphora had two management subnets :/15:56
kevkoalso inplace patch "D 15:56
kevko:D15:56
SvenKieskeI'd also argue that LE is basically touching everything - if you enable it - that is, encrypting all the traffic with LE certs, might be fun in offline envs :D16:08
SvenKieskethat being said, should there be a precheck that LE api is reachable when toggling it on? oO16:09
SvenKieskeI don't remember if we already got that16:09
SvenKieskewell I guess it's answered by "there is no real offline deployment upstream support" :)16:10
kevkoSvenKieske: LE is not touching anything ...only haproxy ..and not much 16:15
kevkoSvenKieske: and it is turned off by default 16:16
SvenKieskesure, but I'm fairly certain you can't measure the impact that $something has, when you measure when $something is turned off instead of on, right?16:23
SvenKieskebut I have no strong opinion on backporting this specific thing actually :)16:24
opendevreviewNoah Elias Feldt proposed openstack/kolla master: Add Grafana Loki  https://review.opendev.org/c/openstack/kolla/+/90064916:31
opendevreviewNoah Elias Feldt proposed openstack/kolla-ansible master: Add Grafana Loki  https://review.opendev.org/c/openstack/kolla-ansible/+/90065016:37
opendevreviewNoah Elias Feldt proposed openstack/kolla master: Add Grafana Loki  https://review.opendev.org/c/openstack/kolla/+/90065116:40
opendevreviewNoah Elias Feldt proposed openstack/kolla master: Add Grafana Loki  https://review.opendev.org/c/openstack/kolla/+/90064916:42
opendevreviewSimon Dodsley proposed openstack/kolla-ansible master: Add Pure Storage FlashBlade as Manila backend  https://review.opendev.org/c/openstack/kolla-ansible/+/87984616:53
opendevreviewSimon Dodsley proposed openstack/kolla-ansible master: Update Pure Storage NVMe Cinder driver  https://review.opendev.org/c/openstack/kolla-ansible/+/87984416:59
opendevreviewMichal Arbet proposed openstack/kolla-ansible master: WIP: Run Tempest in test-core-openstack  https://review.opendev.org/c/openstack/kolla-ansible/+/87882617:04
opendevreviewMerged openstack/kolla-ansible master: Introduce oneshot docker_restart_policy  https://review.opendev.org/c/openstack/kolla-ansible/+/88170719:27

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!