Wednesday, 2023-03-15

gthiemongeskraynev: Hi, we proposed a patch for the issue you reported: https://storyboard.openstack.org/#!/story/2010646#comment-20252407:46
skraynevgthiemonge: I have seen a PR from you. Did you have a chance to check it on the scenario mentioned in story?07:46
skraynevgthiemonge: and yes! thank you very much :) 07:47
skraynevgthiemonge: I ask about testing, because I did not find some tests in this PR07:47
gthiemongeskraynev: yes I tested it in my env, the patch blocks simultaneous batch update requests07:54
gthiemongeskraynev: so from now, one worker cannot delete a member while the other worker expects that the member stll exists07:54
skraynevgthiemonge: sounds awesome! thank you very much for the so fast fix! 08:02
opendevreviewMerged openstack/octavia master: Purge some dev tools from the amphora image  https://review.opendev.org/c/openstack/octavia/+/87714109:32
gthiemonge#startmeeting Octavia16:00
opendevmeetMeeting started Wed Mar 15 16:00:56 2023 UTC and is due to finish in 60 minutes.  The chair is gthiemonge. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
opendevmeetThe meeting name has been set to 'octavia'16:00
gthiemongeHi Folks16:00
johnsomo/16:01
tweiningo/16:01
jdacunhaHello16:01
QGo/16:01
gthiemonge#topic Announcements16:02
gthiemonge* Antelope Release schedule: RC216:02
gthiemongeas discussed last week, we proposed a RC2 for Octavia16:02
gthiemongeit includes a workaround for an openstacksdk bug that would have broken octavia-dashboard16:02
johnsom+116:03
gthiemonge#link https://review.opendev.org/c/openstack/octavia/+/87691916:03
gthiemongenow I think we're done for Antelope16:03
tweiningnice16:03
gthiemonge* PTG16:04
gthiemongethe Octavia PTG will be on March 28th (14:00-18:00 UTC)16:04
gthiemonge#link https://etherpad.opendev.org/p/bobcat-ptg-octavia16:05
gthiemongedon't forget to register16:05
tweiningsounds good16:05
gthiemongeand add your topics to the etherpad!16:05
johnsomI think a hot topic will be the let's encrypt RFE16:06
jdacunhajonhsom, yes :)16:06
gthiemongeI need to read the spec before the PTG16:07
johnsomYeah, there is a lot to unpack there16:08
gthiemongeany other announcements?16:10
gthiemonge#topic CI Status16:12
gthiemongeFYI johnsom fixed an issue when bulding ubuntu images16:12
gthiemonge#link https://review.opendev.org/c/openstack/octavia/+/87714116:12
gthiemongeit merged earlier today16:12
johnsomYeah, saves almost 1GB of space inside the amphora images16:12
gthiemongethanks again johnsom 16:12
QGa question about ubuntu image; did already anyone test to build amphora image with jammy ?16:13
johnsomThe "build-essentials" uninstall was not removing everything16:13
johnsomYes, we test on Jammy in the gates now16:13
QGohhh ok last time i tried it i had issue with openssl v316:14
johnsom#link https://review.opendev.org/c/openstack/octavia/+/86213116:14
QGjohnsom: Thanks !16:14
johnsomBut as we recently found, they are using more disk space in the cloud image as of a week or two ago16:14
gthiemongehmm I'm not sure, this job ran on focal: https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_0b4/857676/11/check/octavia-v2-dsvm-scenario/0b42def/job-output.txt16:15
gthiemongehttps://review.opendev.org/c/openstack/octavia-tempest-plugin/+/86136916:15
johnsomUmm, that is a big problem then. Antelope was supposed to be tested on Jammy16:16
johnsom#link https://zuul.opendev.org/t/openstack/build/69cc6fb302d74064be499eead9af5f1e/log/controller/logs/dib-build/amphora-x64-haproxy.qcow2_log.txt#33516:18
gthiemongeI think we are running jammy amphora images on focal16:18
johnsomThis job ran Jammy, the scenario for the disk space reduction.16:18
johnsomThat needs to be fixed ASAP, as all of antelope should have been on Jammy16:19
gthiemongecould you review:16:20
gthiemonge#link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/86136916:20
johnsomDone16:21
gthiemongethanks16:21
johnsomWell, I guess the answer still stands, the amp image is running jammy in the upstream gate jobs16:21
johnsomI also have manually run Octavia/devstack on Jammy without issue16:22
tweiningme too AFAIR16:22
johnsombobcat/2023.2 will also be on Jammy16:23
johnsom#link https://governance.openstack.org/tc/reference/runtimes/2023.2.html16:23
tweiningnice. Rocky will be supported too16:24
gthiemongeAFAIK rocky linux doesn't work ATM16:24
gthiemonge(in dib)16:24
johnsom"best effort" 16:24
gthiemongeI have WIP commit that adds rockylinux support: https://review.opendev.org/c/openstack/octavia/+/87348916:25
tweiningwell, the intention counts already16:25
gthiemongebut I got some firewalling issues with the o-hm0 iface16:25
gthiemonge#topic Brief progress reports / bugs needing review16:27
gthiemongeI've worked on an interesting issue with sqlalchemy:16:27
gthiemonge#link https://storyboard.openstack.org/#!/story/201064616:27
gthiemongethe lock of the load balancers in the member batch update API call didn't work as expected16:27
gthiemonge#link https://review.opendev.org/c/openstack/octavia/+/87741416:28
johnsomI fix the issue with disk space inside the test amphora images.16:28
gthiemongejohnsom: thanks for helping in this issue16:28
tweiningyou're our sqlalchemy expert now :P16:28
johnsomI posted an api-ref patch to call out the 501 status code that provider drivers may return for features/options they don't support.16:28
johnsomI have also been working on fixing the octavia tempest plugin now that scoped tokens are not going to happen. That impacted admin credential tests because the admin credential would have required a scoped token. I think we have all of that straight now.16:30
gthiemonge+1 !16:30
johnsomThere is another patch that will be needed to completely remove the scoped token logic, but that is a bobcat topic16:30
johnsomI do have a question about gate jobs related to this, but I can wait for open discussion on that16:31
gthiemonge#topic Open Discussion16:31
johnsomlol16:31
johnsom#link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/87690416:31
johnsomOk, so now that scoped tokens are not happening in OpenStack, we have three scenarios:16:31
johnsom1. Advanced RBAC - this has been the default for Octavia since Pike16:32
johnsom2. Advanced RBAC with "enforce_new_defaults" - This is the above with the addition of requiring the new "member" and "reader" roles.16:33
johnsom3. Keystone default roles (aka "enforce_new_defaults" without advanced RBAC) - This means no "load balancer" specific roles required, but users must have either "reader" or "member". We provide this via a policy override file.16:34
johnsomMy question is, do we want gate jobs for all of these? Currently we test #1, my patch adds #3 as we want that for downstream use.16:35
gthiemongejohnsom: do you add #3 in octavia-tempest-plugin and in octavia?16:36
johnsomI think #2 will become the new default for Bobcat, so we could just transition #1 to #216:36
johnsomYes, here:16:36
gthiemongeI think the scope-token job was only in tempest-plugin16:36
johnsom#link https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/87690416:36
johnsomIt will need to be in octavia proper jobs, not just tempest plugin jobs16:36
gthiemongeok16:37
johnsomIMO\16:37
gthiemongeI think #1 and #3 are fine ATM (in both octavia and o-t-p)16:39
johnsomAck, then maybe transition #1 to #2 as all the service enable "enforce_new_defaults" in bobcat. I am good with that.16:39
johnsomI hate adding more jobs, but they are no-op jobs, so run quickly16:40
johnsomquickly-ish16:40
gthiemongeahem... 1h19m16:40
johnsomyeah, lol16:41
tweiningit's all relative16:41
gthiemongeI think we're building an amphora image in the noop jobs16:41
johnsomNope16:42
gthiemongeno?16:42
gthiemongeok16:42
tweiningso what is no-op doing for more than an hour then?16:42
tweiningmaybe I can try to investigate that a bit16:43
gthiemongelol16:43
johnsomRan: 578 tests in 3306.5628 sec.16:44
johnsomThe rest is all devstack/zuul16:44
johnsomIt is a bit slower than you would expect really16:44
gthiemongemaybe we can increase the number of threads in tempest16:44
gthiemonge--concurrency=416:45
johnsomWe should look at RAM usage. It could be swapping, which slows everything down. There is a devstack flag to lock mysql ram usage down that may help16:45
tweiningI guess a lot is resource setup/teardown?!16:45
johnsomThere shouldn't be much of that really, but yeah, it would be good to get fresh eyes on this.16:45
johnsom2023-03-15 00:55:34.256022 | controller | {1} octavia_tempest_plugin.tests.api.v2.test_member.MemberAPITest2.test_UDP_RR_member_batch_update [67.189751s] ... ok16:46
johnsomfor no-op is.... odd16:46
johnsomThough, no-op does run on the slower nodes too, so that will be a factor16:47
johnsomI will propose a test job today with the devstack mysql memory cap setting to see how that impacts the jobs16:48
gthiemongeack16:48
gthiemongeany other topics?16:49
gthiemongeok!16:51
gthiemongethank you guys!16:51
gthiemonge#endmeeting16:51
opendevmeetMeeting ended Wed Mar 15 16:51:14 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:51
opendevmeetMinutes:        https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-03-15-16.00.html16:51
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-03-15-16.00.txt16:51
opendevmeetLog:            https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-03-15-16.00.log.html16:51
opendevreviewMichael Johnson proposed openstack/octavia-tempest-plugin master: DNM: Testing restricted mysql memory setting  https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/87752916:55

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!