Wednesday, 2021-02-17

« Tuesday, 2021-02-16 Index Thursday, 2021-02-18 »
*** xarlos has quit IRC00:07
*** terdei has joined #openstack-lbaas00:18
*** ccamposr has quit IRC01:03
openstackgerritMichael Johnson proposed openstack/octavia master: Add support for Keystone default roles  https://review.opendev.org/c/openstack/octavia/+/77595702:15
openstackgerritMichael Johnson proposed openstack/octavia master: Add support for scoped tokens and default roles  https://review.opendev.org/c/openstack/octavia/+/77595702:16
johnsomOctavia community, I would like some feedback and thorough review on that scoped token patch. It will be the basis for the other RBAC update patches.02:20
*** rcernin has quit IRC02:27
openstackgerritMichael Johnson proposed openstack/octavia master: Add support for scoped tokens and default roles  https://review.opendev.org/c/openstack/octavia/+/77595702:33
johnsomBlah, needed to bump the lower constraint farther than Lance did....02:34
*** rcernin has joined #openstack-lbaas03:07
*** psachin has joined #openstack-lbaas03:41
*** xgerman has quit IRC03:48
*** yamamoto has quit IRC04:02
*** yamamoto has joined #openstack-lbaas04:23
*** vishalmanchanda has joined #openstack-lbaas04:36
*** gcheresh has joined #openstack-lbaas06:26
*** mnaser has quit IRC06:32
*** mnaser has joined #openstack-lbaas06:34
*** ccamposr has joined #openstack-lbaas07:06
*** rcernin has quit IRC07:47
*** luksky has joined #openstack-lbaas07:57
*** rpittau|afk is now known as rpittau08:12
*** rcernin has joined #openstack-lbaas08:12
*** rcernin has quit IRC08:19
openstackgerritMerged openstack/octavia master: Fix pools going into ERROR when updating the pool  https://review.opendev.org/c/openstack/octavia/+/76046108:26
*** rcernin has joined #openstack-lbaas08:26
*** rcernin has quit IRC08:31
*** rcernin has joined #openstack-lbaas08:37
*** xarlos has joined #openstack-lbaas08:43
*** rcernin has quit IRC08:51
*** rcernin has joined #openstack-lbaas08:56
*** rcernin has quit IRC09:02
*** yamamoto has quit IRC09:04
*** yamamoto has joined #openstack-lbaas09:05
*** yamamoto has quit IRC09:05
*** yamamoto has joined #openstack-lbaas09:07
*** yamamoto has quit IRC09:07
*** yamamoto has joined #openstack-lbaas09:08
*** yamamoto has quit IRC09:08
*** yamamoto has joined #openstack-lbaas09:08
cgoncalvesataraday, good morning! thanks for reviewing the stable/train amp image build fix!09:22
cgoncalvesataraday, could you please review https://review.opendev.org/c/openstack/octavia/+/774426 (stable/stein) too?09:22
cgoncalvesit's the remaining patch to unblock the gate in octavia-tempest-plugin09:22
*** rcernin has joined #openstack-lbaas09:28
*** rcernin has quit IRC09:35
*** yamamoto has quit IRC09:37
*** rcernin has joined #openstack-lbaas09:59
*** yamamoto has joined #openstack-lbaas10:07
*** rcernin has quit IRC10:31
*** yamamoto has quit IRC10:40
*** yamamoto has joined #openstack-lbaas11:02
*** yamamoto has quit IRC11:02
*** yamamoto has joined #openstack-lbaas11:04
*** yamamoto has quit IRC11:09
*** yamamoto has joined #openstack-lbaas11:10
*** yamamoto has quit IRC11:15
*** yamamoto has joined #openstack-lbaas11:21
*** yamamoto has quit IRC11:22
*** yamamoto has joined #openstack-lbaas11:23
*** yamamoto has quit IRC11:23
*** yamamoto has joined #openstack-lbaas11:23
*** yamamoto has quit IRC11:28
*** yamamoto has joined #openstack-lbaas11:35
*** yamamoto has quit IRC11:35
*** yamamoto has joined #openstack-lbaas11:35
*** ccamposr has quit IRC12:03
*** yamamoto has quit IRC12:39
*** rcernin has joined #openstack-lbaas12:58
*** rcernin has quit IRC13:02
*** yamamoto has joined #openstack-lbaas13:15
*** sapd1 has joined #openstack-lbaas13:20
*** yamamoto has quit IRC13:28
*** xarlos has quit IRC14:10
*** psachin has quit IRC14:18
*** zzzeek has quit IRC14:49
*** ccamposr has joined #openstack-lbaas14:50
*** zzzeek has joined #openstack-lbaas14:50
*** yamamoto has joined #openstack-lbaas15:25
*** yamamoto has quit IRC15:36
rm_workYou can ping me for reviews too cgoncalves, I'm back to being around kinda15:58
johnsomrm_work Meeting?16:02
johnsom#startmeeting Octavia16:03
openstackMeeting started Wed Feb 17 16:03:21 2021 UTC and is due to finish in 60 minutes.  The chair is johnsom. Information about MeetBot at http://wiki.debian.org/MeetBot.16:03
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:03
*** openstack changes topic to " (Meeting topic: Octavia)"16:03
openstackThe meeting name has been set to 'octavia'16:03
johnsom#chair rm_work16:03
openstackCurrent chairs: johnsom rm_work16:03
rm_workAh, yes16:03
gthiemongeo/16:03
rm_workLol I was literally just here and got distracted with email16:04
rm_worko/16:04
johnsomThat is why I was giving you the opportunity to run the meeting. grin16:04
cgoncalveshi16:05
johnsomo/16:06
rm_workNot on my actual computer yet, too early, sec16:06
johnsomIt *is* too early, but sadly I have already been on an hour of meetings16:06
johnsom#topic Announcements16:07
*** openstack changes topic to "Announcements (Meeting topic: Octavia)"16:07
johnsomI can get started with the boiler plate stuff16:07
johnsomFinal client release is first week in March16:08
johnsomFeature freeze for everything else is the second week in March16:08
johnsomWe have a priority bug review list:16:08
johnsom#link https://etherpad.openstack.org/p/octavia-priority-reviews16:08
johnsomAny other announcements this week?16:08
johnsom#topic Brief progress reports / bugs needing review16:10
*** openstack changes topic to "Brief progress reports / bugs needing review (Meeting topic: Octavia)"16:10
johnsomI added an RBAC topic later in the agenda, but my focus has been on updating our RBAC policies for the Keystone scoped tokens and default roles.16:11
johnsomI will talk more about that in the later topic16:11
gthiemongeI fixed the two-node job: https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/77388816:12
openstackgerritMerged openstack/octavia master: Add SCTP support in Amphora  https://review.opendev.org/c/openstack/octavia/+/75324716:12
gthiemongeit will be useful to have it to merge the AZ tests in octavia-tempest-plugin16:12
johnsomNice16:12
gthiemongeI also worked on the centos-8 job (dirty hack), we're still discussing it with cgoncalves16:13
gthiemongeanother interesting octavia-tempest-plugin commit: https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/77415716:14
gthiemongeit fixes an issue with our ipv6 vip tests (ipv6 vip tests are using devstack non-shared/private network)16:15
johnsomThanks for working on that.16:20
johnsomAny other updates? rm_work?16:20
johnsom#topic RBAC work16:22
*** openstack changes topic to "RBAC work (Meeting topic: Octavia)"16:22
johnsomOk, I will move on16:22
johnsomSo, if you are not aware Keystone has two initiatives (token scopes and default roles). Even though this isn't a community goal, Red Hat is pushing to have these implemented across the services for Wallaby.16:23
johnsomAn initial set of patches were pushed16:24
johnsom#link https://review.opendev.org/q/project:openstack/octavia+status:open+owner:lbragstad%2540redhat.com16:24
johnsomhowever those were "blow it away" patches that removed all of the advanced RBAC Octavia has had.16:24
johnsomI have point on getting these straightened out. The first step in that is:16:25
johnsom#link https://review.opendev.org/c/openstack/octavia/+/77595716:25
johnsomThe intent here is to merge our more strict advanced RBAC with the new default roles and scopes.16:26
johnsomPlease take some time and carefully review that patch as it's the basis for the following patches and we don't want to make a mistake in our API Rules Based Access Control (RBAC).16:26
johnsomThat would be bad. (tm)16:27
rm_workfortunately I think our testing on the RBAC stuff is pretty good16:27
johnsomYeah, it's going to need to be updated as well. It's on my list16:28
johnsomUnfortunately this new stuff complicates the RBAC. So I also spent some time updating the docs to help with that. Let me know if we need more16:28
johnsomI ran into an issue where Tempest was giving every credential the new "member" role, which .... means you can't test with non-member or reader roles via Tempest. A patch is pending to fix that.16:29
johnsom#link https://review.opendev.org/c/openstack/devstack/+/77452416:30
johnsomOk, that is all I had. Please give it a good look over so we don't  end up with some CVE or something. grin16:30
johnsomOr non-backward compatible.16:31
gthiemongeack, I will take a look16:31
johnsom#topic Open Discussion16:31
*** openstack changes topic to "Open Discussion (Meeting topic: Octavia)"16:31
johnsomAnything else today?16:31
rm_worknot much here16:33
johnsomI still need to take a look at the bug about failover with subnets out of IPs causing VIP issues. It's top on my list.16:34
johnsomWell, if there isn't anything else we can get on with reviews!16:36
johnsom#endmeeting16:37
*** openstack changes topic to "Discussions for OpenStack Octavia | Priority bug review list: https://etherpad.openstack.org/p/octavia-priority-reviews"16:37
openstackMeeting ended Wed Feb 17 16:37:00 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:37
openstackMinutes:        http://eavesdrop.openstack.org/meetings/octavia/2021/octavia.2021-02-17-16.03.html16:37
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/octavia/2021/octavia.2021-02-17-16.03.txt16:37
openstackLog:            http://eavesdrop.openstack.org/meetings/octavia/2021/octavia.2021-02-17-16.03.log.html16:37
openstackgerritGhanshyam proposed openstack/octavia master: [goal] Deprecate the JSON formatted policy file  https://review.opendev.org/c/openstack/octavia/+/76457816:50
mchlumskyjohnsom Sorry, I missed this meeting because of another meeting but I was going to ask about "bug about failover with subnets out of IPs causing VIP issues" but it's cool it's on top of your list. Let me know if you need more logs or other info I can supply.16:58
*** rcernin has joined #openstack-lbaas16:58
johnsomYep, sorry it's taking a bit of time to get to16:58
*** rcernin has quit IRC17:02
mchlumskyNo worries. Seems everyone's busy with final release is around the corner.17:04
rm_workthis may be relevant to us as we're dealing with IP shortages in VIP nets :/17:12
johnsomThe issue appears to be that if a failover triggers, and there is an IP shortage, if the VIP port is owned by Octavia it might get deallocated on the revert flow.17:18
*** yamamoto has joined #openstack-lbaas17:32
rm_workyeah eugh17:35
rm_workthat's bad17:36
johnsomYep17:36
*** yamamoto has quit IRC17:37
*** rpittau is now known as rpittau|afk17:41
*** sapd1 has quit IRC18:21
openstackgerritMerged openstack/octavia master: Configure rsyslog on Octavia service nodes in devstack  https://review.opendev.org/c/openstack/octavia/+/77459618:45
*** yamamoto has joined #openstack-lbaas19:33
*** yamamoto has quit IRC19:38
*** luksky has quit IRC19:51
*** luksky has joined #openstack-lbaas19:52
*** ccamposr has quit IRC20:15
*** ccamposr has joined #openstack-lbaas20:17
*** rcernin has joined #openstack-lbaas20:58
openstackgerritGregory Thiemonge proposed openstack/octavia-tempest-plugin master: WIP Fix two-node job configuration  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/77388821:02
*** rcernin has quit IRC21:03
*** gcheresh has quit IRC21:04
*** rcernin has joined #openstack-lbaas21:22
*** ccamposr has quit IRC21:25
*** yamamoto has joined #openstack-lbaas21:34
*** vishalmanchanda has quit IRC21:37
*** yamamoto has quit IRC21:39
*** eandersson has quit IRC21:40
*** gmann is now known as gmann_afk21:51
*** rcernin has quit IRC21:53
*** rcernin has joined #openstack-lbaas22:00
*** yamamoto has joined #openstack-lbaas22:15
*** gmann_afk is now known as gmann23:22
« Tuesday, 2021-02-16 Index Thursday, 2021-02-18 »

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!