Monday, 2018-03-12

*** sapd has quit IRC00:19
*** mburrows has quit IRC00:45
*** mburrows has joined #openstack-lbaas00:48
*** mburrows has quit IRC00:50
*** mburrows has joined #openstack-lbaas00:51
*** dayou has quit IRC01:06
*** dayou has joined #openstack-lbaas01:07
*** jaff_cheng has joined #openstack-lbaas01:56
*** sapd has joined #openstack-lbaas01:58
*** jaff_cheng has quit IRC02:16
*** jaff_cheng has joined #openstack-lbaas02:16
*** sapd has quit IRC02:55
*** sapd has joined #openstack-lbaas02:55
openstackgerritwangqi proposed openstack/neutron-lbaas-dashboard master: Update links in README  https://review.openstack.org/55182902:59
*** sapd1 has joined #openstack-lbaas03:15
*** jaff_cheng has quit IRC04:38
*** jaff_cheng has joined #openstack-lbaas04:38
*** jaff_cheng has quit IRC04:49
*** jaff_cheng has joined #openstack-lbaas04:49
*** jaff_cheng has quit IRC05:51
*** jaff_cheng has joined #openstack-lbaas05:52
*** sapd1 has quit IRC05:52
*** kobis has joined #openstack-lbaas05:54
*** kobis has quit IRC05:56
*** annp has joined #openstack-lbaas06:01
openstackgerritweizj proposed openstack/octavia master: The MarkL7PolicyActiveInDB is not necessary when l7policy deleted  https://review.openstack.org/55184606:06
*** threestrands_ has joined #openstack-lbaas06:26
*** amotoki_ has joined #openstack-lbaas06:27
*** kobis has joined #openstack-lbaas06:28
*** threestrands has quit IRC06:34
*** amotoki has quit IRC06:34
*** kobis has quit IRC06:51
*** annp has quit IRC06:57
*** annp has joined #openstack-lbaas06:57
*** kobis has joined #openstack-lbaas06:58
*** rcernin has quit IRC07:09
*** threestrands_ has quit IRC07:13
*** pcaruana has joined #openstack-lbaas07:56
*** AlexeyAbashkin has joined #openstack-lbaas07:59
*** b_bezak has joined #openstack-lbaas08:00
*** b_bezak has quit IRC08:01
*** tesseract has joined #openstack-lbaas08:10
*** ispp has joined #openstack-lbaas08:27
openstackgerritCarlos Goncalves proposed openstack/octavia master: Rename q- to neutron- services  https://review.openstack.org/54428109:08
*** dmellado has joined #openstack-lbaas09:29
openstackgerritCarlos Goncalves proposed openstack/octavia master: Rename q- to neutron- services  https://review.openstack.org/54428109:48
*** oanson has quit IRC09:51
*** irenab has quit IRC09:51
*** irenab has joined #openstack-lbaas09:56
*** oanson has joined #openstack-lbaas09:57
*** yamamoto has quit IRC10:02
*** annp has quit IRC10:05
rm_workcgoncalves: AHA! So THAT'S what made our gates all wonky! It was youuuuuuuu~10:11
cgoncalvesrm_work: soRRRRRRy10:11
rm_workah and i was actually about to write the patch to move that lxd test to experimental also ;P10:11
rm_workglad i read through the channel first10:12
dmelladolol10:12
rm_workok need nir or someone to merge10:14
cgoncalveshttps://review.openstack.org/#/c/543034/20/zuul.d/jobs.yaml@14210:14
rm_workmaybe xgerman_ is awake about now10:14
cgoncalvesrm_work: ^ seems familiar to you? :D10:14
cgoncalvesrm_work: Nir is out this week10:14
rm_workah10:14
rm_worki didn't actually finish reviewing that patch yet10:15
openstackgerritHengqing Hu proposed openstack/octavia-dashboard master: Add l7 support  https://review.openstack.org/55194710:15
rm_workah he is removing barbican :(10:15
rm_workI was going to finally add some tests for that :(10:15
rm_workoh nm he just moved them out of the base10:15
rm_workcgoncalves: are you just getting on or just finishing up10:16
rm_worki forget10:16
cgoncalvesrm_work: reviewing that tempest patch? I haven't reviewed it yet, only somehow managed to spot that concurrenty flag there10:18
rm_workyeah i hadn't gotten that far yet on the tempest patch10:18
cgoncalvesbut I've just left a comment about it before I forgot10:18
rm_workonly got through that big file10:18
rm_workit MIGHT be ok in octavia10:18
rm_workthe concurrency model for us is less shitty than the neutron one10:18
rm_worklike, significantly10:18
cgoncalvesyeah10:21
rm_workhmm when does johnsom get back again10:22
cgoncalvesthe grenade patch is in a good shape now for reviews https://review.openstack.org/#/c/549654/10:22
rm_worki have about 25 reviews for him to do10:22
cgoncalvesdunno. he might have gotten stuck in dublin due to "adverse weather" ;)10:23
rm_workcgoncalves: ah cool, is it passing? I took a look yesterday but realized i have no idea how grenade actually works, and most of that patch is just being like "turn on grenade, set some grenade options, throw grenade" :P10:23
*** salmankhan has joined #openstack-lbaas10:23
cgoncalvesrm_work: that's grenade in a nutshell :D10:23
rm_workwhat does it DO though?10:23
rm_workinstall on n-1 cloudver and then upgrade?10:23
cgoncalvesit's passing, yes. I had to work on another patch (check depends-on)10:23
cgoncalveshttps://docs.openstack.org/grenade/latest/readme.html#basic-flow10:24
rm_workyep this looks like what i figured it would do10:25
rm_workbut it actually has to "shut down all services"? :/ I thought we were specifically trying to prove zero-downtime10:25
cgoncalvesso I still need to investigate how we can prove zero-downtime. all grenade plugins I've seen do not have such thing10:26
cgoncalvesfor now we prove zero dataplane downtime10:26
rm_workk10:30
rm_workyeah step 1, sure10:30
rm_workcgoncalves: -1 on grenade with comments (I do see it is still marked WIP so maybe you were still getting to some of those)10:34
cgoncalvesrm_work: thanks! I left some old bits behind on purpose while patch receives first round of reviews10:35
rm_workcgoncalves: err do you remember the version on pyopenssl/cryptography we need to set in global requirements?10:38
rm_workyou are also correct that we really SHOULD push global-requirements to update that stuff10:38
openstackgerritAdam Harwell proposed openstack/octavia master: Reduce runtime for l7rule too_many_rules test  https://review.openstack.org/54899110:39
cgoncalvesrm_work: cryptography >= 1.9 and pyopenssl >= 17.1.010:42
*** jaff_cheng has quit IRC10:53
*** yamamoto has joined #openstack-lbaas11:03
*** gcheresh has joined #openstack-lbaas11:09
*** yamamoto has quit IRC11:11
*** yamamoto has joined #openstack-lbaas11:14
*** gcheresh has quit IRC11:14
cgoncalvesuqq11:30
cgoncalves:q11:30
cgoncalvesoops!11:30
*** fnaval has quit IRC11:33
cgoncalvesrm_work: re: running golang httpd in member (cirros img). what about python SimpleHTTPServer instead? otherwise we'd need to install golang (either in gate host (+ copy to member) or member), build, run it in screen11:36
*** salmankhan has quit IRC12:12
*** salmankhan has joined #openstack-lbaas12:16
*** yamamoto has quit IRC12:26
*** atoth has joined #openstack-lbaas12:26
*** fnaval has joined #openstack-lbaas13:17
*** fnaval has quit IRC13:20
*** yamamoto has joined #openstack-lbaas13:23
*** yamamoto has quit IRC13:28
*** andreykurilin has joined #openstack-lbaas13:34
andreykurilinhi folks! can anyone help me with launching octavia in gates?13:34
*** fnaval has joined #openstack-lbaas13:45
*** fnaval has quit IRC13:46
*** fnaval has joined #openstack-lbaas13:50
*** yamamoto has joined #openstack-lbaas13:53
*** beagles is now known as beagles|brb13:54
rm_workcgoncalves: it's a tiny static-compiled binary13:55
rm_workwe already use it in our testing, it's checked in13:55
*** salmankhan has quit IRC13:55
rm_workhttps://github.com/openstack/octavia-tempest-plugin/tree/master/octavia_tempest_plugin/contrib/httpd13:56
rm_workand we were discussing adding the binary to the octavia tree as well, since the code is there also: https://github.com/openstack/octavia/tree/cebfd319aef9e82b23f4af4a2f676d4cff4941e3/octavia/tests/contrib13:57
rm_workcgoncalves: ^^ so feel free to copy httpd.bin from our tempest repo there into our main repo's contrib (next to the source for it)13:58
cgoncalvesrm_work: I noticed it being compiled in tests. I don't understand the reason for that. why not using python simplehttpserver?13:58
*** yamamoto has quit IRC13:58
rm_workcgoncalves: eh, the go one is significantly faster13:58
rm_workwe were using it for stress testing13:58
rm_workc10k13:59
rm_workand we usually don't compile it in tests, just copy the binary13:59
rm_workis something actually compiling it?13:59
*** ianychoi has joined #openstack-lbaas13:59
cgoncalvesrm_work: hmm ok in that case +1, also because we started working on rally support ;)13:59
rm_workah i guess the c10k test script13:59
rm_workbut that doesn't run in a gate or anything14:00
*** pcaruana has quit IRC14:01
*** pcaruana has joined #openstack-lbaas14:15
rm_workcgoncalves: anywho, here's how we put it on a member cirros: https://github.com/openstack/octavia-tempest-plugin/blob/master/octavia_tempest_plugin/tests/server_util.py#L278-L32614:17
*** salmankhan has joined #openstack-lbaas14:17
cgoncalvesrm_work: I've seen it, thanks14:18
rm_workkk14:18
cgoncalvesrm_work: I'm not in favor of adding the binary in-tree though14:18
*** pcaruana has quit IRC14:30
rm_workI think we were already planning to in another patch14:31
rm_workbut if you are also grabbing the tempest tests, you could get it from there14:31
*** beagles|brb is now known as beagles14:32
*** yamamoto has joined #openstack-lbaas14:38
*** yamamoto has quit IRC14:43
*** pcaruana has joined #openstack-lbaas14:43
andreykurilinhey! any chance to get help for configuring octavia to be launched in gates?14:43
*** yamamoto has joined #openstack-lbaas14:53
*** yamamoto has quit IRC14:53
*** yamamoto has joined #openstack-lbaas14:53
rm_workandreykurilin: which project's gates?14:57
rm_workandreykurilin: also ... are you on my team at GD? :P14:57
andreykurilinhah. possible possible )14:58
*** yamamoto has quit IRC14:58
andreykurilinfor rally ;) we have an old legacy job which works fine. I'm trying to setup a new one for Zuul V314:58
rm_workhmm14:59
rm_workI mean, I think you still just need to enable our devstack plugin?15:00
rm_workand everything should just work15:00
andreykurilinrm_work: not so easy :)15:00
rm_workhmm15:00
rm_workI mean, we use for example, Barbican, in our gate15:00
rm_workand the usage didn't change much between v2 and v3 of zuul15:00
rm_workbut I don't know exactly how rally works15:01
andreykurilinrm_work: by default it will fail due to unavailable `q-svc` service. But it is easy to fix15:01
rm_workahh well15:01
rm_workyou may for that want to look at: https://review.openstack.org/#/c/544281/15:02
rm_workwhich should fix this issue15:02
andreykurilinrm_work: when I enabled it, other neutron interfaces became unavailable (listing floating ips, for examle)15:02
dmelladoandreykurilin: actually I meant to speak with you as we were thinking about creating a rally job for kuryr too15:02
dmelladoo/15:02
rm_workenabling octavia broke floating-ips?!15:02
rm_workthat's ... not something that should be possible to happen, lol15:02
dmelladobut if it's not zuulv3 compliant then we'll wait15:02
andreykurilinrm_work: turning on just `q-svc`15:03
rm_workis that because of q-svc being neutron-legacy?15:03
rm_workor something else15:03
andreykurilinI guess so15:03
rm_workbecause maybe that will be fixed with the patch i linked15:03
andreykurilinI suppose it had happened since new neutron devstack plugin found enabling old service and expects that I will turn on other q-* manually as well15:03
andreykurilinrm_work: ok, will wait :)15:04
rm_workwe should rely on "neutron" not "q-svc" :P15:04
andreykurilinsure :)15:04
rm_workyeah try with a "depends-on" for that patch15:04
rm_workand see if it helps15:04
andreykurilindone. last attempt took ~40 minutes, so the result will not be so quick:)15:06
rm_workyeah15:06
andreykurilindmellado: hi! we already have a basic rally-task-on-devstack job and it is fully Zuul V3 native (a bunch of ansible roles and so)15:07
dmelladoandreykurilin: oh, cool, any link where I can fetch some info?15:09
andreykurilindmellado: I did not make any annonce yet. hope will find a time this week.15:11
andreykurilindmellado: https://github.com/openstack/rally-openstack/tree/master/.zuul.d#what-do-we-have-in-this-this-dir This dir includes all job definitiones .15:11
dmelladoandreykurilin: thanks, looking forward to it ;)15:11
andreykurilindmellado: and here is an example of re-using one of our jobs(which we launch in our gates) in another project - https://review.openstack.org/#/c/55000315:11
johnsomo/ Hi folks, I am back from travelling and vacation...15:23
dayouo/, jason is waiting for you for many days :-D15:24
*** yamamoto has joined #openstack-lbaas15:26
xgerman_o/15:26
xgerman_guess everyone gets a number to talk to johnsom15:27
johnsomHa, yeah.  My welcome back was an 8am video meeting...15:28
johnsomA lot of stuff to catch up on15:28
*** yamamoto has quit IRC15:34
*** irenab has quit IRC15:35
*** oanson has quit IRC15:38
rm_workton of changes sitting around the top of the octavia queue awaiting +2/+a15:49
*** amotoki_ is now known as amotoki15:50
*** kobis has quit IRC15:56
xgerman_yeah, also we have the periodic for the image build we can merge —16:06
*** irenab has joined #openstack-lbaas16:11
*** oanson has joined #openstack-lbaas16:11
*** pcaruana has quit IRC16:12
rm_workxgerman_: one question on that16:13
xgerman_yes16:13
rm_worki posted it16:14
xgerman_saw it16:15
xgerman_commented16:18
rm_workxgerman_: i'm referring to our requirements file *in* our diskimage-create folder, which does include diskimage-builder16:20
rm_workbut also some other stuff16:20
rm_workand usually --constraint is used for upper-constraints.txt16:21
rm_workwhich probably we should be doing?16:21
rm_workdunno16:21
rm_workhttps://github.com/openstack/octavia/blob/master/diskimage-create/requirements.txt16:21
rm_workof course, that may be hilariously out of date16:21
xgerman_yeah, this doesn’t contrain DIB at all16:22
rm_workmaybe your approach is fine16:22
rm_worki mean, when we are setting up to build an amp, we don't need to install the main octavia requirements file, usually JUST this one16:22
xgerman_mmh, I just want to install DIB…16:23
rm_workwell, what you want to do is build an amp image16:23
xgerman_yes, but once DIB runs it will chroot and honor it’s own requirements16:23
rm_workbut yeah, i think this file is a little wonky anyway, as I don't know why we are pulling in Babel explicitly, or PyYAML16:24
xgerman_yep, the only two changes I am happy with 1) remove constraints 2) pull in requirements project16:24
rm_worki might just drop the constraint altogether16:25
xgerman_ok16:26
rm_workwhen we build for devstack we pull in *master*16:26
rm_workof dib16:26
rm_workhttps://github.com/openstack/octavia/blob/master/devstack/settings#L5-L616:27
openstackgerritGerman Eichberger proposed openstack/octavia master: Periodic job to build + publish diskimage  https://review.openstack.org/54925916:28
xgerman_yes, but I am not testing diskimagebuilder but more making some image16:28
rm_workheh yes16:29
rm_workit should be fine16:29
xgerman_yeah, let’s see how johnsom likes that patch. I see changes…16:30
rm_workeh I +2'd16:30
rm_workit won't harm anything16:30
rm_workand i want to see what happens when it runs16:30
*** yamamoto has joined #openstack-lbaas16:32
xgerman_if it runs periodics have a bad rep16:38
*** yamamoto has quit IRC16:38
rm_workyou are literally the only person i have heard say that, though you've said it 10+ times I think :P16:39
openstackgerritMerged openstack/octavia master: Move scenario-lxd over to experimental  https://review.openstack.org/55180516:40
*** irenab has quit IRC16:56
*** sshank has joined #openstack-lbaas16:57
*** oanson has quit IRC16:57
rm_workwtb this https://review.openstack.org/551801 and https://review.openstack.org/55178917:05
rm_workand https://review.openstack.org/#/c/551796/17:05
openstackgerritCarlos Goncalves proposed openstack/octavia master: Reduce stestr concurrency to 1 for tempest jobs  https://review.openstack.org/55180117:08
cgoncalvesrm_work: ^ minor update. please revisit and +2/-117:11
*** Swami has joined #openstack-lbaas17:12
*** dmellado has quit IRC17:12
openstackgerritCarlos Goncalves proposed openstack/octavia master: Add experimental scenario-ovsfw job  https://review.openstack.org/55043117:17
*** pcaruana has joined #openstack-lbaas17:18
*** AlexeyAbashkin has quit IRC17:23
*** pcaruana has quit IRC17:27
johnsomI see you guys review my patches...  I just deleted the lxd job in one of my gate fix patches.17:31
johnsomThere really isn't anything to that job, so no real point at the moment17:31
*** salmankhan has quit IRC17:32
*** irenab has joined #openstack-lbaas17:33
*** oanson has joined #openstack-lbaas17:35
*** salmankhan has joined #openstack-lbaas17:35
*** irenab has quit IRC17:42
*** imacdonn has quit IRC17:43
*** imacdonn has joined #openstack-lbaas17:44
*** oanson has quit IRC17:44
*** oanson_ has joined #openstack-lbaas17:44
*** irenab has joined #openstack-lbaas17:44
*** oanson_ is now known as oanson17:46
rm_workjohnsom: ummm yeah totally <_<17:52
rm_workah i think it was in the one where i gave up after like 30 comments and slept, and then never got back to17:52
johnsomYeah, part of that chain.17:53
johnsomI plan to work on that today, after digging out a bit here17:53
*** pcaruana has joined #openstack-lbaas17:53
johnsomFYI, I am -1ing the OVSFW gate.  I don't see why WE should be testing OVSFW17:54
rm_worki asked him17:55
rm_workit's experimental17:55
* rm_work shrugs17:55
johnsomSeems like that should be over on the OVSFW patches, not here.17:56
rm_workhmm yeah i guess that's true17:56
rm_workthough i bet 99% what is going to happen is that this whole test will just get dropped17:57
johnsomI have faith that Carlos will follow through.  It's just not a good development process to push patches to fix OVSFW, merge them, and then run this experimental gate to see if it fixed it.17:58
rm_workyeah so actually i'm wondering if it even matters if this merges17:59
rm_workreally it can be used as-is without merging17:59
rm_workto test whether the patch in depends-on fixes things17:59
johnsomTrue17:59
rm_workreally, we need to get the last few gate stabilization things through18:06
rm_workhttps://review.openstack.org/#/c/551789/18:06
rm_workhttps://review.openstack.org/#/c/551796/18:06
rm_workthose18:06
*** tesseract has quit IRC18:06
rm_workthe intermittent failures from the tempest concurrency thing in n-lbaas have been making me cry18:06
*** Swami has quit IRC18:11
*** Swami_ has joined #openstack-lbaas18:11
*** Swami_ has quit IRC18:11
*** Swami has joined #openstack-lbaas18:12
-openstackstatus- NOTICE: Most jobs in zuul are currently failing due to a recent change to zuul; we are evaluating the issue and will follow up with a recommendation shortly. For the moment, please do not recheck.18:17
*** ChanServ changes topic to "Most jobs in zuul are currently failing due to a recent change to zuul; we are evaluating the issue and will follow up with a recommendation shortly. For the moment, please do not recheck."18:17
johnsomYeah, I am looking at the functional patch.  I had a few more changes in mine, so evaluating what I should do there.18:22
johnsomTrying to dig up what the story is with this stestr stuff. We just migrated to ostester like a year ago...18:27
rm_workyeah >_<18:32
rm_workwe had to quickly swap over because everything broke when someone did something18:32
*** kobis has joined #openstack-lbaas18:34
*** gcheresh has joined #openstack-lbaas18:35
johnsomDarn, there are no pre-patch logs.   This nlbaas patch output looks wrong18:37
rm_workoh?18:37
rm_worki was trawling through the outputs to figure out why everything was breaking, and i did not notice any significant issues with it18:37
*** ChanServ changes topic to "Discussion of OpenStack Load Balancing (Octavia) | Rocky is open for development!"18:40
-openstackstatus- NOTICE: Zuul has been restarted without the breaking change; please recheck any changes which failed tests with the error "Accessing files from outside the working dir ... is prohibited."18:40
*** sshank has quit IRC18:40
johnsomI just wish we had a run output from before that patch.18:41
rm_workhmmmm18:41
openstackgerritiain MacDonnell proposed openstack/octavia master: Amphora agent should recognise Oracle Linux  https://review.openstack.org/54872918:43
rm_workjohnsom: i mean, what makes you think it's wrong?18:43
johnsomI just wanted to confirm the file paths, output formatting, and the # of jobs run.18:44
johnsomI compared to octavia pre-change and I feel better about it.18:44
rm_workreally all logs from before that are wiped?18:45
johnsomYeah, we aren't turning patches on nlbaas really18:45
johnsomThey all expired out18:45
rm_workhttps://review.openstack.org/#/c/545767/18:46
rm_workthere?18:46
rm_workit's on stable but18:46
rm_workthe tests should be the same for the same reason you just mentioned, lol18:46
johnsomYeah, hmm, 554->611 tests18:47
johnsomSeems odd18:47
rm_workor here https://review.openstack.org/#/c/549697/18:47
johnsomOh, that is ocata18:47
rm_workthat one is master18:47
rm_workmaybe better18:47
*** harlowja has joined #openstack-lbaas18:50
johnsomDid you test tox -e cover with his change?18:51
*** kobis has quit IRC18:53
*** kobis has joined #openstack-lbaas18:55
*** AlexeyAbashkin has joined #openstack-lbaas18:56
*** kobis has quit IRC19:00
*** AlexeyAbashkin has quit IRC19:00
johnsomYeah, that patch broke the cover environment badly19:02
rm_worki don't run cover locally :(19:02
rm_workjust functional and py35 and pep819:02
*** openstackgerrit has quit IRC19:04
* rm_work looks19:05
*** eandersson has joined #openstack-lbaas19:06
rm_workhmm yes it appears to die19:06
rm_workhow is it "passing" in the gate then19:07
rm_workoh nm i think these are local fails19:07
rm_workmostly passing19:08
*** salmankhan has quit IRC19:08
rm_workforgot i was in the middle of a patch19:08
*** gcheresh has quit IRC19:09
johnsomWe don't seem to have a coverage gate for nlbaas19:20
cgoncalvesah, coverage test right19:25
cgoncalvesI intended to fix it today but I got a load of internal stuff19:25
johnsomcgoncalves Did you see my comments on the OVSFW gate?19:27
cgoncalvesjohnsom: reading now19:28
cgoncalvesjohnsom: we needed a way to test the neutron patch in a fullstack and since octavia isn't working when firewall=openvswitch I thought of adding that experimental job19:29
cgoncalvesas for the zuul v2/v2, I thought about it and my take on it was that once we do it for one we do it for all19:30
johnsomYeah, but that gate should be over on the OVSFW project (neutron?).  Here, they have to change the patch to depend on their fix patches each time they push an attempted fix.19:30
cgoncalveswhich should be a dedicated review imo19:31
johnsomWell, "legacy" is purely for jobs converted with the migration scripts.19:31
johnsomThis patch: https://review.openstack.org/#/c/541039/ does them all except for the multinodes, but now needs some additional work.19:32
cgoncalvesok, that one was not under my radar19:33
johnsomMy biggest issue is that it shouldn't be in our project, but theirs to test their patches.  In ours it's not very useful, they would have to merge there stuff or add depends-on for each of their patches19:33
cgoncalvesok, I get your point and is valid. bottom line is that I'm happy now with ovsfw being fixed and octavia working fine with ovs as firewall19:35
johnsomAh, so they have fixed it?  then maybe this can just be abandoned?19:35
cgoncalvesit has not been merged yet. the patch I submitted verifies that 1) the neutron patch works as expected and 2) octavia works now when firewall=ovs19:36
cgoncalvesso I propose to keep it open until the neutron patch gets merged, and then we can abandon this one19:37
johnsomOk, so maybe just WIP it until they merge19:37
cgoncalvesI'd rather keep it as experimental since it doesn't cost us anything, though19:38
cgoncalvesk, will set WIP19:38
*** openstackgerrit has joined #openstack-lbaas19:39
openstackgerritCarlos Goncalves proposed openstack/octavia master: [DNM] Add experimental scenario-ovsfw job  https://review.openstack.org/55043119:39
johnsomIt's more job bloat IMO. If it's not used it will just rot and take up space. I wouldn't mind seeing it as an experimental on their side though.  It's a good test for OVSFW19:40
cgoncalves-W'ed it and left a comment19:44
johnsomThanks19:44
cgoncalvesso now onward to fixing the coverage test I broke...19:45
openstackgerritMerged openstack/octavia master: Updated from global requirements  https://review.openstack.org/55153919:48
cgoncalvesjohnsom: not sure you're already up-to-date on the requirements.txt issues?19:50
johnsomNo19:51
cgoncalveshttps://github.com/openstack/octavia/blob/stable/queens/requirements.txt#L3519:52
cgoncalvesminimum required version should have been 17.1.019:52
cgoncalveshttps://github.com/openstack/octavia/blob/stable/queens/requirements.txt#L3719:53
johnsomLooks like upper has 17.5.019:53
cgoncalvesand minimum for jinja should have been 2.1019:53
cgoncalvesright19:53
johnsomSame, upper has 2.1019:53
cgoncalvesmy understanding is that if the our minimum does not match with our requirements.txt we should propose bumping it in global-requirements19:54
johnsomjinja is for the namespace support, what needs that version of pyopenssl?19:54
cgoncalvespyopenssl: https://bugzilla.redhat.com/show_bug.cgi?id=155352019:55
openstackbugzilla.redhat.com bug 1553520 in openstack-octavia "Cannot create listener with TLS termination" [Urgent,Assigned] - Assigned to cgoncalves19:55
johnsomYeah, jinja2 is my bad. I should have pushed a bump for that, however I think the patch landed after the freeze19:55
johnsomI.e the bug and fix came in after requirements wouldn't accept a change any longer.19:56
cgoncalveswhoever's installing octavia from source may ran into these issues in case has jinja>=2.8,<2.9 installed19:58
johnsomHave you talked with the requirements folks about these?19:59
cgoncalvesno, I've been waiting for you plus busy with other urgent stuff20:00
johnsomHa, thanks? grin20:00
*** atoth has quit IRC20:03
* cgoncalves bows to johnsom 20:03
johnsomSo G-R for jinja2 is already up to date in master requirements.20:03
johnsomI don't see us importing pyOpenSSL at all, so...20:03
johnsomIt hasn't been bumped yet. I need more info on my we need 17.1.0 or greater.20:04
cgoncalveshttps://review.openstack.org/#/c/549913/20:04
cgoncalvesimacdonn, who found the issue and reported here on IRC, confirmed that python-cryptography>=1.9 *and* python-pyOpenSSL>=17.1.0 fixed the listener with TLS termination20:06
imacdonnjohnsom: The specific reason is at https://pyopenssl.org/en/stable/api/crypto.html#OpenSSL.crypto.X509.to_cryptography20:07
cgoncalvesright, in octavia/certificates/common/pkcs12.py20:08
johnsomAh, ok. That I can work with.20:09
johnsomNot sure what to do about the queens requirements.txt though, I don't think we can update that now...20:09
cgoncalvesI don't think so too20:10
cgoncalveswhat we need, though, is a way to make sure our requirements.txt is good enough20:11
johnsomWell, I think this is really an issue for the requirements team. We currently test using upper-constraints so it won't catch this. Either that needs to come off, or we need packagers to ONLY use upper-constraints20:12
cgoncalvesfor the latter, forcing packages to have latest and greatest versions would prove to be problematic20:14
johnsomWell, if that's what the community is testing with...20:14
cgoncalvesalso if the latter, then it wouldn't make no sense still having requirements.txt20:16
cgoncalvesit would be u-c for all, everyone20:17
cgoncalves*everywhere20:17
imacdonnit becomes a bit grey when you consider that some of the requirements may be satisfied by packages that are part of the OS distro, not part of the OpenStack distro20:17
cgoncalvesright, specially when it touches security-related packages (e.g. pyopenssl and cryptography)20:18
johnsomYeah, it's pip's nature to always pull in the latest version that matches requirements.txt20:18
johnsomOk, I think I see.  We need a gate using the lower constraints file to catch these20:24
johnsomThough interesting that nobody else seems to have one20:25
cgoncalvesjohnsom: l-c as is now would install pyOpenSSL==16.2.0 which is not good enough for us20:46
*** fnaval has quit IRC21:03
*** fnaval has joined #openstack-lbaas21:18
*** fnaval has quit IRC21:18
*** fnaval has joined #openstack-lbaas21:18
*** sshank has joined #openstack-lbaas21:30
*** pcaruana has quit IRC21:36
johnsompyOpenSSL G-R: https://review.openstack.org/55214721:40
*** Swami has quit IRC21:50
*** Swami has joined #openstack-lbaas21:51
openstackgerritCarlos Goncalves proposed openstack/neutron-lbaas master: Reduce stestr concurrency to 1 for tempest jobs  https://review.openstack.org/55179621:54
cgoncalvesjohnsom: ^ fixes coverage test21:54
nmagnezi_cgoncalves, I start to think you relocated to rm_work's timezone.. :D21:54
johnsomYeah, it's not like he had as much jet-lag as the rest of us....21:55
cgoncalvesnmagnezi_: haha! I have to hurry up, my gf is coming back in 1h :P21:55
nmagnezi_lol21:55
cgoncalvesnmagnezi_: shouldn't you be be playing call of duty in real life? :)21:56
nmagnezi_cgoncalves, kinda :)21:57
johnsomcgoncalves Hmm, this runs local for you?21:58
cgoncalvesjohnsom: it did. double-check nevertheless :)22:03
johnsomRunning now.  I thought maybe we needed a more explicit path, but I see we ran the whole package before, so...22:04
openstackgerritCarlos Goncalves proposed openstack/octavia master: Reduce stestr concurrency to 1 for tempest jobs  https://review.openstack.org/55180122:20
cgoncalvesjohnsom: I'd like to get your view on rm_work's comment: https://review.openstack.org/#/c/549654/22/devstack/upgrade/vm_user_data.sh22:22
cgoncalvesif nc causes trouble, going the goland server way is a bit overkilling IMO22:23
cgoncalvesI'm thinking of python's SimpleHttpServer22:23
*** rcernin has joined #openstack-lbaas22:24
johnsomcgoncalves Yeah, the issue with the netcat approach is it doesn't handle concurrent requests well and causes random errors.  The golang server was built to have a lightweight webserver that does concurrency well.22:29
johnsomI know for our C10k tests, simplehttpserver will not work, but it may be an option for a basic test web server.22:31
johnsomThe other part of the golang is to be intelligent about the cookie handling, again which might not be needed for your tests22:32
cgoncalveswe don't need concurrency for grenade22:32
cgoncalvesok, than are we in agreement that simplehttpserver is good enough for grenade?22:33
johnsomYeah, as long as it's a once and done, you will be fine with nc. It's just when you repeatedly call it that it can fail22:33
johnsomcgoncalves I am fine with giving it a go. Also, if it is small enough, we might be able to pass it as user data into cirros and not need the SCP work arounds.22:34
cgoncalvesjohnsom: in total it's 3x GETs only IIRC22:35
johnsomYeah, if they aren't right after each other, the netcat is probably fine.22:36
cgoncalvesjohnsom: we would still need to compile it, no?22:36
cgoncalvesk, I'll then keep with netcat. if it proves to be troublesome we know why and how to fix it22:36
johnsomThe python, no.  We can just do shell tricks to get it in there.22:36
cgoncalvesyes, for simplehttpserver we don't need tricks22:37
johnsomYeah.  We have merged a pre-compiled golang server for the tempest plugin, so it's there if we want it.22:37
johnsomcgoncalves FYI, https://raymii.org/s/tutorials/Automating_Openstack_with_Cloud_init_run_a_script_on_VMs_first_boot.html22:38
*** AlexeyAbashkin has joined #openstack-lbaas22:38
johnsomI tried base64'ing the golang server, but it's too large for nova to handle, the API bombs22:40
cgoncalveswhy have I been spending time grenading when you've been bombing?! :D22:41
johnsomSome day you will bomb too....  grin22:42
*** AlexeyAbashkin has quit IRC22:42
openstackgerritCarlos Goncalves proposed openstack/octavia master: Add grenade support  https://review.openstack.org/54965422:44
cgoncalveslol22:45
*** kobis has joined #openstack-lbaas22:49
*** yamamoto has joined #openstack-lbaas22:57
johnsomcgoncalves So, the octavia stestr coverage patch, I think the parallel-mode flag is breaking things22:58
*** sshank has quit IRC22:59
*** kobis has quit IRC23:02
cgoncalveshmm23:11
cgoncalvescoverage combine {toxinidir}/.coverage-* works locally23:11
openstackgerritCarlos Goncalves proposed openstack/octavia master: Reduce stestr concurrency to 1 for tempest jobs  https://review.openstack.org/55180123:11
johnsomYeah, I'm explicitly naming the output files23:11
cgoncalvesUsage: coverage combine [options] <path1> <path2> ... <pathN>23:12
johnsomcgoncalves You forgot to add the sh whitelist back in23:12
cgoncalvesit should take multiple paths23:12
cgoncalvesoops!23:12
cgoncalvesso sloppy23:12
johnsomWell, I made it explicit because there was some trash coverage files, I don't remember exactly what was happening, but I made it explicit so combine wouldn't pickup something I didn't want.23:13
johnsomprobably overkill now23:14
johnsomIt was failing because you added parallel mode which just appends ".<something>" to the end of the filename23:15
johnsomDropping the --parallel-mode would have made the explicit filename way work again23:17
openstackgerritCarlos Goncalves proposed openstack/octavia master: Reduce stestr concurrency to 1 for tempest jobs  https://review.openstack.org/55180123:20
cgoncalvessee you tomorrow23:20
johnsomo/23:20
openstackgerritMichael Johnson proposed openstack/octavia master: Reduce stestr concurrency to 1 for tempest jobs  https://review.openstack.org/55180123:23
*** fnaval has quit IRC23:32
*** fnaval has joined #openstack-lbaas23:36

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!