| *** yadnesh|away is now known as yadnesh | 04:40 | |
| *** ysandeep|out is now known as ysandeep | 05:40 | |
| *** mnasiadka_ is now known as mnasiadka | 06:29 | |
| *** yadnesh is now known as yadnesh|afk | 07:23 | |
| *** ysandeep is now known as ysandeep|lunch | 07:59 | |
| *** yadnesh|afk is now known as yadnesh | 08:22 | |
| *** ysandeep|lunch is now known as ysandeep | 10:17 | |
| *** yadnesh is now known as yadnesh|afk | 11:23 | |
| *** yadnesh|afk is now known as yadnesh | 12:22 | |
| *** ysandeep is now known as ysandeep|brb | 12:26 | |
| *** ysandeep|brb is now known as ysandeep | 12:56 | |
| *** gthiemon1e is now known as gthiemonge | 13:04 | |
| *** yadnesh is now known as yadnesh|away | 14:33 | |
| gthiemonge | #startmeeting Octavia | 16:00 |
|---|---|---|
| opendevmeet | Meeting started Wed Nov 2 16:00:23 2022 UTC and is due to finish in 60 minutes. The chair is gthiemonge. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| opendevmeet | The meeting name has been set to 'octavia' | 16:00 |
| johnsom | o/. | 16:00 |
| tweining | o/ | 16:00 |
| matfechner | o/ | 16:00 |
| strigazi | o/ | 16:00 |
| gthiemonge | Hi everyone | 16:01 |
| gthiemonge | #topic Announcements | 16:02 |
| gthiemonge | well, no announcement for this week | 16:02 |
| gthiemonge | unless I missed something? | 16:02 |
| johnsom | Two weeks from MS1, but otherwise I don't have anything this week | 16:03 |
| gthiemonge | yes | 16:04 |
| gthiemonge | #topic CI Status | 16:05 |
| gthiemonge | a quick update on the FIPS job: | 16:05 |
| gthiemonge | during the PTG we talked about it because it fails with timeouts | 16:05 |
| gthiemonge | we mentioned that we could split the job into 2 jobs, or that we could reduce the number of tests (tls_barbican only) | 16:06 |
| johnsom | yep | 16:07 |
| gthiemonge | we already have a FIPS job with only tls_barbican (in the check pipeline, non-voting) | 16:07 |
| gthiemonge | #link https://opendev.org/openstack/octavia/src/branch/master/zuul.d/projects.yaml#L69-L71 | 16:07 |
| gthiemonge | and the CI looks good | 16:07 |
| gthiemonge | #link https://zuul.openstack.org/builds?job_name=octavia-v2-dsvm-tls-barbican-fips&skip=0 | 16:07 |
| gthiemonge | 1. do you think it is enough and that we should remove the octavia-v2-dsvm-scenario-fips job? | 16:07 |
| gthiemonge | 2. should we split the octavia-v2-dsvm-scenario-fips job into 2 jobs? | 16:07 |
| johnsom | I think the barbican tests are probably good enough for FIPS coverage | 16:08 |
| gthiemonge | ok | 16:10 |
| gthiemonge | I will propose a patch to remove the periodic job | 16:11 |
| gthiemonge | #topic Brief progress reports / bugs needing review | 16:12 |
| tweining | the vertical scaling optimization patches are now ready for review | 16:13 |
| tweining | https://review.opendev.org/q/topic:amp-cpu-pinning | 16:13 |
| gthiemonge | tweining: ok cool | 16:14 |
| tweining | the nohz_full and SSL cache patches are non-essential | 16:14 |
| gthiemonge | I have worked on supporting the zookeeper backend for jobboard in devstack | 16:14 |
| johnsom | I am working on Barbican secrets consumers, i.e. registering that a cert/key is in use with Barbican. The proposed patches for Barbican have some bugs, but I am able to move forward with it. I hope to have a patch posted this week. | 16:14 |
| tweining | well, not non-essential, but not that important | 16:14 |
| gthiemonge | #link https://review.opendev.org/c/openstack/octavia/+/862671 | 16:15 |
| gthiemonge | it is almost ready, but grenade is failing because of a stupid issue, I have to fix it | 16:15 |
| gthiemonge | the new octavia-v2-dsvm-scenario-amphora-v2-zookeeper job (non-voting) will replace octavia-v2-dsvm-scenario-amphora-v2 which is a duplicate of octavia-v2-dsvm-scenario | 16:15 |
| johnsom | Nice | 16:15 |
| johnsom | I think OSA wants to use zookeeper instead of Redis | 16:16 |
| gthiemonge | it looks less hackish than the redis backend | 16:18 |
| johnsom | But it brings Java | 16:18 |
| gthiemonge | yeah | 16:18 |
| johnsom | There are trade offs both ways IMO | 16:18 |
| gthiemonge | #topic Open Discussion | 16:20 |
| gthiemonge | Any other topics today? | 16:23 |
| tweining | I have nothing today | 16:24 |
| danfai | I would have some (support) questions regarding a specific setup, but we can have that after the meeting. | 16:24 |
| gthiemonge | ok | 16:24 |
| gthiemonge | danfai: yeah np, we can do that now | 16:25 |
| danfai | I am trying to create an Octavia deployment on a flat network and like to only use one interface on the amphoras. Is there an easy way to do that by creating the nova instance and not care about vips? | 16:25 |
| johnsom | Well, if you don't specify a subnet when adding members, it will use the VIP interface to access the backend member servers. | 16:26 |
| danfai | So far I was able to patch out every netns call and spawn an haproxy on the same interface as the lb-mgmt port, but I had hoped there would be an easier way | 16:26 |
| johnsom | But, the amphora driver always needs an lb-mgmt-net, so the amp will always have at least two interfaces. One outside the netns, one inside | 16:27 |
| johnsom | Yeah, that just wasn't part of the design of the driver. The need for the lb-mgmt-net was based on the fact that Octavia can deploy in private tenant networks where there are no routes out. | 16:28 |
| danfai | ok, then maybe another question. Would it be possible to specify the VIP at the time the listener is created? | 16:28 |
| johnsom | Again, that was not part of the design of the amphora driver, so, no, not with the current code. | 16:29 |
| johnsom | Curious though, why? | 16:30 |
| danfai | Its a problem in the specific setup, because of dependencies we need the nova instance before the VIP... | 16:31 |
| johnsom | Well, technically that is how it works. The nova instance boots with the lb-mgmt-net interface, then later in the LB create process we hot-plug the VIP interface in the netns. | 16:32 |
| johnsom | But all of that happens inside the one API call for LB create. | 16:32 |
| danfai | yes, for two IPs that works. I had hoped to have only one, but the order of the driver goes the other way around | 16:34 |
| johnsom | Yeah, if you want to have an amp with only one port attached, you are looking at writing a new provider driver. | 16:35 |
| danfai | ok thanks for the clarification, i had the same conclusion so far, that these are the options: 2 Ips or own provider driver | 16:36 |
| johnsom | Yep. It's just a different use case than the amphora provider is targeting. | 16:36 |
| strigazi | thanks for the input johnsom (I'm working with danfai) | 16:40 |
| johnsom | Sure, NP | 16:40 |
| gthiemonge | anything else? or we can close the meeting | 16:41 |
| tweining | let's close it then | 16:42 |
| gthiemonge | ok ;-) | 16:42 |
| gthiemonge | thank you Folks! | 16:42 |
| gthiemonge | #endmeeting | 16:42 |
| opendevmeet | Meeting ended Wed Nov 2 16:42:54 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:42 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/octavia/2022/octavia.2022-11-02-16.00.html | 16:42 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/octavia/2022/octavia.2022-11-02-16.00.txt | 16:42 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/octavia/2022/octavia.2022-11-02-16.00.log.html | 16:42 |
| *** ysandeep is now known as ysandeep|out | 17:08 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!