| *** born2bake has quit IRC | 00:21 | |
| *** armax has joined #openstack-lbaas | 00:33 | |
| *** yamamoto has joined #openstack-lbaas | 00:39 | |
| *** rcernin has quit IRC | 00:42 | |
| *** rcernin has joined #openstack-lbaas | 00:46 | |
| rouk | johnsom: ever heard of people having issues using terminated_https with application credentials? cant retrieve cert, but only with appcreds, is there something in the barbican ACL flow that breaks if not a regular user? | 00:52 |
|---|---|---|
| *** rcernin has quit IRC | 02:13 | |
| *** rcernin has joined #openstack-lbaas | 02:15 | |
| *** rcernin has quit IRC | 02:33 | |
| *** rcernin has joined #openstack-lbaas | 02:55 | |
| *** armax has quit IRC | 03:34 | |
| *** wuchunyang has joined #openstack-lbaas | 04:33 | |
| *** gcheresh has joined #openstack-lbaas | 05:34 | |
| *** wuchunyang has quit IRC | 05:35 | |
| *** wuchunyang has joined #openstack-lbaas | 05:36 | |
| *** wuchunyang has quit IRC | 06:21 | |
| *** trident has quit IRC | 06:39 | |
| *** wuchunyang has joined #openstack-lbaas | 06:39 | |
| *** trident has joined #openstack-lbaas | 06:42 | |
| *** rpittau has joined #openstack-lbaas | 06:50 | |
| *** rcernin has quit IRC | 06:59 | |
| *** luksky has joined #openstack-lbaas | 07:00 | |
| *** wuchunyang has quit IRC | 07:05 | |
| *** rcernin has joined #openstack-lbaas | 07:06 | |
| *** maciejjozefczyk has joined #openstack-lbaas | 07:09 | |
| *** wuchunyang has joined #openstack-lbaas | 07:17 | |
| *** rpittau has quit IRC | 07:23 | |
| *** rpittau has joined #openstack-lbaas | 07:25 | |
| *** rpittau has quit IRC | 07:31 | |
| openstackgerrit | Ann Taraday proposed openstack/octavia master: Add requirements for jobboard drivers https://review.opendev.org/739187 | 07:34 |
| *** also_stingrayza is now known as stingrayza | 07:35 | |
| *** rcernin has quit IRC | 07:41 | |
| *** rpittau has joined #openstack-lbaas | 07:42 | |
| *** tkajinam has quit IRC | 08:23 | |
| *** spatel has joined #openstack-lbaas | 08:36 | |
| *** spatel has quit IRC | 08:41 | |
| *** wuchunyang has quit IRC | 08:56 | |
| *** luksky has quit IRC | 09:03 | |
| *** wuchunyang has joined #openstack-lbaas | 09:05 | |
| *** born2bake has joined #openstack-lbaas | 09:13 | |
| *** wuchunyang has quit IRC | 09:16 | |
| *** luksky has joined #openstack-lbaas | 09:16 | |
| *** rcernin has joined #openstack-lbaas | 09:26 | |
| *** yamamoto has quit IRC | 09:39 | |
| *** rcernin has quit IRC | 09:41 | |
| *** yamamoto has joined #openstack-lbaas | 09:42 | |
| *** ataraday_ has joined #openstack-lbaas | 09:52 | |
| *** yamamoto has quit IRC | 10:00 | |
| *** yamamoto has joined #openstack-lbaas | 10:02 | |
| *** yamamoto has quit IRC | 10:18 | |
| openstackgerrit | Merged openstack/octavia master: Remove translation sections from setup.cfg https://review.opendev.org/728025 | 10:22 |
| *** wuchunyang has joined #openstack-lbaas | 10:42 | |
| *** wuchunyang has quit IRC | 10:47 | |
| *** armax has joined #openstack-lbaas | 10:48 | |
| *** yamamoto has joined #openstack-lbaas | 10:51 | |
| *** yamamoto has quit IRC | 10:56 | |
| openstackgerrit | wu.chunyang proposed openstack/octavia master: [doc] add missing but required package https://review.opendev.org/739953 | 11:18 |
| openstackgerrit | Ann Taraday proposed openstack/octavia master: Avoid trying to run jobboard conductor on error https://review.opendev.org/739959 | 11:51 |
| *** rcernin has joined #openstack-lbaas | 12:08 | |
| openstackgerrit | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: WIP SCTP traffic scenario tests https://review.opendev.org/738643 | 12:14 |
| *** rcernin has quit IRC | 12:16 | |
| *** ramishra has quit IRC | 12:31 | |
| *** luksky has quit IRC | 12:36 | |
| *** squarebracket has quit IRC | 12:43 | |
| *** squarebracket has joined #openstack-lbaas | 12:44 | |
| *** rpittau has quit IRC | 12:57 | |
| *** rpittau has joined #openstack-lbaas | 13:00 | |
| *** ramishra has joined #openstack-lbaas | 13:02 | |
| *** TrevorV has joined #openstack-lbaas | 13:28 | |
| *** johnsom has joined #openstack-lbaas | 13:42 | |
| johnsom | Weee, another 14+ hour outage for irccloud. If you private messaged me, I didn't get it. | 13:44 |
| johnsom | rouk Hi, so you have a listener that has client certificate authentication enabled and you are having trouble connecting? | 13:46 |
| rouk | nope, trouble making the listener, if youre using an application credential regardless of the perms the cred has, including admin, octavia will respond with 400 cant retrieve cert, presumably the barbican acl set breaks? | 13:48 |
| rouk | attempt to make terminated_https listener with appcred, fails with a 400, likely an error in the backend too, but its easy to reproduce if you wanna try | 13:49 |
| johnsom | Oh, so it's a special type of token? Like a scoped token? | 13:49 |
| rouk | yeah, application credentials, https://docs.openstack.org/keystone/train/user/application_credentials.html | 13:50 |
| johnsom | Yeah, if you have reproducer steps, let's open a story in storyboard for it. I have an idea I know what the problem is. I think it is similar to an issue we just fixed on the neutron subnet lookup. | 13:50 |
| rouk | they should behave the same as a user with the same creds. | 13:50 |
| rouk | yeah the steps are create appcred, use it to auth, then use it to try and make a terminated_https listener, i guess i can paste the 3 commands in a story :p | 13:51 |
| johnsom | rouk Stories are good for tracking and making sure we don't forget something, etc. Plus required for backports. | 13:52 |
| rouk | yeah | 13:52 |
| johnsom | rouk Thanks. What version of Octavia are you running? | 13:52 |
| rouk | 5.0.2.dev43 (stable/train as of the last time we spoke, cause of those cert bugs) | 13:55 |
| johnsom | Ok | 13:55 |
| *** rpittau_ has joined #openstack-lbaas | 13:56 | |
| *** rpittau has quit IRC | 13:58 | |
| ataraday_ | cgoncalves, Hi! I need your expert thoughts on https://storyboard.openstack.org/#!/story/2007892 If you have time, please add a comment about what I'm missing... | 14:09 |
| *** rm_you has joined #openstack-lbaas | 14:31 | |
| *** dmsimard has quit IRC | 14:41 | |
| *** dmsimard has joined #openstack-lbaas | 14:41 | |
| *** gcheresh has quit IRC | 15:08 | |
| cgoncalves | ataraday_, hey. sure, let me have a quick look. | 15:12 |
| cgoncalves | ataraday_, the lib dependency with redis in stable/ussuri is missing | 15:19 |
| cgoncalves | https://zuul.opendev.org/t/openstack/build/42eb30d96bb74606b4fbff60470e0cd8/log/controller/logs/old/devstacklog.txt#29105 | 15:19 |
| cgoncalves | o-cw did not even start ussuri/pre-upgrade cloud: https://zuul.opendev.org/t/openstack/build/42eb30d96bb74606b4fbff60470e0cd8/log/controller/logs/screen-o-cw.txt | 15:20 |
| *** armax has quit IRC | 15:25 | |
| *** gcheresh has joined #openstack-lbaas | 15:50 | |
| ataraday_ | so, we need to backport requirements changes sto stable/ussuri... | 15:56 |
| ataraday_ | cgoncalves, is this possible? | 15:56 |
| cgoncalves | ataraday_, sometimes there are exceptions, yes | 15:57 |
| cgoncalves | ataraday_, but I'm not sure we want to test upgrade from ussuri + amphorav2 to victoria/master + amphorav2 | 15:57 |
| cgoncalves | since v2 was/is still experimental | 15:57 |
| cgoncalves | it would be nice to test upgrade from ussuri + amphora v1 to master + amphorav2 | 15:58 |
| *** armax has joined #openstack-lbaas | 15:58 | |
| cgoncalves | which could be a no-nop if we alias "amphora" to "amphorav2" | 15:58 |
| ataraday_ | hm... OK, so I'll need to change experimental job then | 15:58 |
| ataraday_ | so grenade job would be meaningful | 15:59 |
| ataraday_ | cgoncalves, thanks a lot for help! | 16:00 |
| johnsom | #startmeeting Octavia | 16:00 |
| openstack | Meeting started Wed Jul 8 16:00:10 2020 UTC and is due to finish in 60 minutes. The chair is johnsom. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: Octavia)" | 16:00 | |
| openstack | The meeting name has been set to 'octavia' | 16:00 |
| johnsom | Hi everyone! | 16:00 |
| gthiemonge | Hi! | 16:00 |
| haleyb | hi | 16:00 |
| cgoncalves | hi | 16:00 |
| ataraday_ | hi | 16:00 |
| johnsom | I am having a slow start to the morning with irccloud down and chrome blowing up on me this morning. | 16:00 |
| johnsom | Nothing like having four desktops worth of chrome windows all pile on the main desktop. lol | 16:01 |
| johnsom | #topic Announcements | 16:01 |
| *** openstack changes topic to "Announcements (Meeting topic: Octavia)" | 16:01 | |
| johnsom | HAProxy 2.2 LTS released yesterday. | 16:01 |
| johnsom | #link https://www.haproxy.com/blog/announcing-haproxy-2-2/ | 16:02 |
| johnsom | Those are the high level details. | 16:02 |
| johnsom | Mostly bug fixes, performance stuff. There are some nice certificate update enhancements we could pull in once we have a path to 2.2 | 16:02 |
| johnsom | Just another reminder, the MS2 milestone is at the end of this month. | 16:03 |
| *** aannuusshhkkaa has joined #openstack-lbaas | 16:05 | |
| johnsom | The summit program committee is looking for people to review summit presentations: | 16:05 |
| johnsom | #link https://openstackfoundation.formstack.com/forms/programmingcommitteenom_summit2020 | 16:05 |
| rm_you | o/ | 16:05 |
| johnsom | It's nice that this is being announced this round, but I don't think I can do it this time. | 16:06 |
| johnsom | Any other announcements this weekk? | 16:06 |
| cgoncalves | Summit as in the Berlin Summit later this year? | 16:06 |
| johnsom | As far as I am aware, yes | 16:06 |
| johnsom | #link https://www.openstack.org/summit/2020/ | 16:06 |
| rm_you | I was pretty sure that wasn't gonna happen? | 16:06 |
| rm_you | especially since the US is a shitshow right now with no signs of looking up until after early November <_< | 16:07 |
| johnsom | I know they were talking about delaying it, but that was a while ago. I haven't heard anything new. | 16:07 |
| johnsom | Yeah, I think travel is going to be an issue | 16:08 |
| johnsom | Probably not for cgoncalves though.... lol | 16:08 |
| cgoncalves | it would still a 5h30 journey :) | 16:08 |
| johnsom | Ok, anything else? | 16:10 |
| johnsom | #topic Brief progress reports / bugs needing review | 16:10 |
| *** openstack changes topic to "Brief progress reports / bugs needing review (Meeting topic: Octavia)" | 16:10 | |
| ataraday_ | I created a section with some fixes for amphorav2 in https://etherpad.opendev.org/p/octavia-priority-reviews | 16:11 |
| johnsom | Reviews, various little bug fixes, and progress on failover for amphorav2. The tasks should all be converted now, I just need to work on the flows. | 16:11 |
| johnsom | Got the first green test run last night (though stuff is still broken) | 16:12 |
| johnsom | Ah, yeah, that has been on my todo list. I need to update the priority review list for Victoria. Thanks for the start! | 16:12 |
| cgoncalves | I proposed backport of the failover refactor to ussuri and train. ussuri is ready, train fixing py2 issues. worked on a path in the amphorav2 provider to not use jobboard and so not require extra infrastructure like redis/zookeeper and additional mysql database | 16:13 |
| *** aannuusshhkkaa has quit IRC | 16:13 | |
| *** aannuusshhkkaa39 has joined #openstack-lbaas | 16:14 | |
| johnsom | Someone almost deleted the priority review list... (there is a history so it can be recovered) | 16:14 |
| gthiemonge | I proposed patches for SCTP support in the Amphora | 16:14 |
| gthiemonge | johnsom: ahem | 16:14 |
| johnsom | Yeah, cool | 16:14 |
| cgoncalves | I have a handful of patches to add to the priority review list... | 16:15 |
| johnsom | Please do. I will try to go through it sometime this week. | 16:16 |
| cgoncalves | ataraday_, thanks for reviewing https://review.opendev.org/#/c/739053/. be assured we want jobboard enabled by default | 16:17 |
| rm_you | We are working on refactoring the statistics collection driver layer -- per johnsom's comments on the patch, it looks like we're going to have to do a ton more work, and actually move it up a level, outside of the amphora driver and as a top level interface (since it will be usable be all providers, not just amphora -- and already is being used that way actually) | 16:18 |
| johnsom | Yeah, I just want to make sure we include/consider the non-amphora drivers in that effort. | 16:19 |
| cgoncalves | rm_you, it came to my attention you -2 Backport-Candidate the failover refactor patch. why do you think it is not backport material? | 16:21 |
| johnsom | Oh, I also found the issue with our IPv6 only gate job, so that is back to passing once the patch merges. | 16:22 |
| rm_you | it's a complete rewrite of our failover flows and is a major and very complex change | 16:22 |
| cgoncalves | the commit title may be misleading but it fixes a ton of issues we've been seeing people getting into due to nova issues | 16:22 |
| rm_you | I in no way would have expected it to be backport material | 16:22 |
| rm_you | which is why i said i was surprised to see you backporting it | 16:22 |
| johnsom | I went to some lengths to make sure there are no "non-backportable" changes, but it is a large change. | 16:23 |
| rm_you | I'm not ... strictly opposed to VERY careful work backporting it.... | 16:23 |
| rm_you | but GREAT CARE must be taken | 16:23 |
| johnsom | That said, it does fix some nasty issues we have seen people run into. Most notably the nova bugs | 16:23 |
| rm_you | I am hesitant to actually merge a change of that magnitude in such a critical path, as a backport | 16:23 |
| cgoncalves | yeah, for sure it's a massive patch | 16:23 |
| rm_you | and we definitely haven't had much time-testing on this yet | 16:24 |
| rm_you | I am ... *relatively* confident it works, but ... | 16:24 |
| cgoncalves | we've lately seen outages in different clouds due to these nova bugs, causing us to spend time go fix it manually | 16:25 |
| johnsom | For personal reasons, I would really like to see it make it to train | 16:25 |
| rm_you | I understand it's a balance between trying not to backport things that could upset the stability of *stable* releases, and also fixing things in stable releases that aren't so "stable: | 16:25 |
| rm_you | " | 16:25 |
| johnsom | yep | 16:26 |
| johnsom | #topic Open Discussion | 16:26 |
| *** openstack changes topic to "Open Discussion (Meeting topic: Octavia)" | 16:26 | |
| rm_you | so if you are willing to take the responsibility for making sure it's all working... and you are VERY confident that it's going to be an improvement and not cause any other issues... I won't stand in your way | 16:26 |
| rm_you | I would much rather encourage people to UPGRADE to get it | 16:26 |
| rm_you | rather than backport it into existing people's deployments as a minor version increment | 16:27 |
| johnsom | What do others think? | 16:28 |
| cgoncalves | it's not that trivial to upgrade on commercial offerings :) | 16:28 |
| rm_you | heh | 16:28 |
| rm_you | can't just change the VERSION flag to "master"? :D | 16:29 |
| cgoncalves | it is also not even yet released in victoria | 16:29 |
| rm_you | I thought it actually merged in time for our ussuri release? | 16:29 |
| rm_you | did it not | 16:29 |
| ataraday_ | I'm for backporting this as it not to get customer upgraded to latest version | 16:29 |
| cgoncalves | I proposed the backport to ussuri so... | 16:29 |
| rm_you | did I very much lose track of time | 16:29 |
| rm_you | I've been running it since mid-ussuri lol | 16:30 |
| johnsom | No, it sat and didn't get into Ussuri | 16:30 |
| rm_you | :( | 16:30 |
| ataraday_ | *not so easy | 16:30 |
| rm_you | alright | 16:30 |
| rm_you | ya'll go for it :D | 16:30 |
| rm_you | I wish you the best of luck | 16:30 |
| rm_you | and i suppose I can slap a +A on there if you've very confident in it, though my ability to test on older versions is limited | 16:31 |
| cgoncalves | rm_you, the fact you run it in production gives us an extra boost of convidence that it is stable and worth backporting :) | 16:31 |
| johnsom | Let's move forward with the backports, but maybe put extra testing cycles into those patches | 16:31 |
| cgoncalves | *confidence | 16:31 |
| rm_you | yes, I imagine my environment is like 95% of the testing it has so far, lol | 16:31 |
| rm_you | *real world testing, at least | 16:31 |
| rm_you | possibly 100% <_< | 16:31 |
| cgoncalves | ataraday_, you're also supportive of the backport? cool, that makes at least 2 vendors interested | 16:32 |
| cgoncalves | rm_you, FWIW I'm not going to propose backports to stein or older releases | 16:34 |
| johnsom | We should all commit to doing some extra testing on the backports. | 16:35 |
| ataraday_ | cgoncalves, yep, I'm for backports | 16:35 |
| rm_you | i'll test the frontports ;) | 16:35 |
| cgoncalves | I reviewed the master patch line-by-line and proposed the backports. internally we will be testing this on Python 2 and 3 and on Queens and Train clouds | 16:36 |
| cgoncalves | rm_you, lol | 16:36 |
| johnsom | Ok, any other topics for today? Good discussion, it's an important patch. | 16:37 |
| cgoncalves | thank you for all your hard work on the patch, johnsom! | 16:37 |
| johnsom | That was a doozy, thanks! | 16:38 |
| cgoncalves | the single haproxy patch was also something :) and it was backported! | 16:39 |
| johnsom | True | 16:39 |
| johnsom | I don't think I have any other topics today. | 16:41 |
| johnsom | There was a discussion this morning that the barbican ACL call may need to be updated for some of these alternate keystone token types. I expect similar to what we did with the neutron subnet call. | 16:41 |
| johnsom | If someone has some cycles there should be a story open for it | 16:42 |
| johnsom | Ok, if there aren't any more topics I will call the meeting for the week. | 16:43 |
| johnsom | Thank you all for your work! | 16:43 |
| *** aannuusshhkkaa39 has quit IRC | 16:43 | |
| cgoncalves | thanks! | 16:44 |
| rm_you | o/ | 16:44 |
| johnsom | #endmeeting | 16:44 |
| *** openstack changes topic to "Discussions for OpenStack Octavia | Priority bug review list: https://etherpad.openstack.org/p/octavia-priority-reviews" | 16:44 | |
| openstack | Meeting ended Wed Jul 8 16:44:37 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:44 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/octavia/2020/octavia.2020-07-08-16.00.html | 16:44 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/octavia/2020/octavia.2020-07-08-16.00.txt | 16:44 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/octavia/2020/octavia.2020-07-08-16.00.log.html | 16:44 |
| *** gcheresh has quit IRC | 17:09 | |
| *** ataraday_ has quit IRC | 18:18 | |
| *** also_stingrayza has joined #openstack-lbaas | 18:19 | |
| *** stingrayza has quit IRC | 18:21 | |
| *** maciejjozefczyk has quit IRC | 18:56 | |
| *** rpittau_ has quit IRC | 19:01 | |
| *** gmann_ has joined #openstack-lbaas | 19:17 | |
| *** gmann_ is now known as gmann | 19:18 | |
| openstackgerrit | Brian Haley proposed openstack/octavia master: Remove blacklist terminology in the Octavia tree https://review.opendev.org/740096 | 19:22 |
| *** aannuusshhkkaa has joined #openstack-lbaas | 19:32 | |
| *** mnaser has joined #openstack-lbaas | 19:32 | |
| *** dougwig has joined #openstack-lbaas | 19:33 | |
| *** hemanth_n has joined #openstack-lbaas | 19:34 | |
| *** kklimonda has joined #openstack-lbaas | 19:36 | |
| *** rpittau has joined #openstack-lbaas | 19:40 | |
| *** jamespage has joined #openstack-lbaas | 19:40 | |
| *** beisner has joined #openstack-lbaas | 19:42 | |
| *** jrosser has joined #openstack-lbaas | 19:48 | |
| *** nicolasbock has joined #openstack-lbaas | 19:50 | |
| *** stevenglasford has joined #openstack-lbaas | 19:53 | |
| *** rm_work has joined #openstack-lbaas | 19:53 | |
| *** vishalmanchanda has joined #openstack-lbaas | 19:53 | |
| *** fyx has joined #openstack-lbaas | 19:55 | |
| *** headphoneJames has joined #openstack-lbaas | 19:58 | |
| *** johnsom_ has joined #openstack-lbaas | 20:10 | |
| *** coreycb has joined #openstack-lbaas | 20:13 | |
| *** emccormick has joined #openstack-lbaas | 20:14 | |
| *** andrein has joined #openstack-lbaas | 20:21 | |
| *** xgerman has joined #openstack-lbaas | 20:27 | |
| *** NobodyCam has joined #openstack-lbaas | 20:36 | |
| *** mnaser is now known as mnaser|ic | 20:52 | |
| *** mnaser|ic has quit IRC | 21:08 | |
| *** mnaser|ic has joined #openstack-lbaas | 21:08 | |
| *** mnaser|ic has quit IRC | 21:08 | |
| *** mnaser|ic has joined #openstack-lbaas | 21:08 | |
| *** mnaser|ic is now known as vexxhost | 21:08 | |
| *** vexxhost is now known as mnaser | 21:14 | |
| *** mnaser is now known as mnaser|ic | 21:14 | |
| *** johnsom has quit IRC | 21:19 | |
| *** johnsom_ is now known as johnsom | 21:19 | |
| *** johnsom has joined #openstack-lbaas | 21:19 | |
| johnsom | Ok, I think my IRC client is now back up and functional. | 21:20 |
| *** TrevorV has quit IRC | 21:53 | |
| *** servagem has quit IRC | 21:59 | |
| *** vishalmanchanda has quit IRC | 22:03 | |
| *** armax has quit IRC | 22:23 | |
| *** armax has joined #openstack-lbaas | 22:56 | |
| *** tkajinam has joined #openstack-lbaas | 22:58 | |
| *** rcernin has joined #openstack-lbaas | 23:01 | |
| *** mnaser|ic has quit IRC | 23:38 | |
| *** mnaser|ic has joined #openstack-lbaas | 23:38 | |
| *** mnaser|ic has quit IRC | 23:38 | |
| *** mnaser|ic has joined #openstack-lbaas | 23:38 | |
| *** mnaser|ic is now known as mnaser | 23:38 | |
| *** born2bake has quit IRC | 23:42 | |
| *** wuchunyang has joined #openstack-lbaas | 23:45 | |
| *** wuchunyang has quit IRC | 23:49 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!