| opendevreview | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: WIP Add tests for additional VIPs https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/664462 | 05:51 |
|---|---|---|
| opendevreview | Gregory Thiemonge proposed openstack/octavia-tempest-plugin master: WIP Add tests for additional VIPs https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/664462 | 06:50 |
| mbrown05 | @johnsom Hello, I was wondering if you had time to discuss the audit map file for Octavia? | 15:17 |
| johnsom | Yes, I have my coffee, so let's chat! | 15:18 |
| johnsom | I did that work about five years ago, so I may need to refresh my memory in some cases | 15:18 |
| mbrown05 | Awesome, hopefully this question will be a simple one | 15:19 |
| mbrown05 | My question is, I was tasked with enabling auditing for Octavia and part of that includes adding the map file. What I would like to know is, in the sample map file, do I need to change any of those fields or should I leave them as is? | 15:20 |
| johnsom | I am sorry to have delayed you if it is... grin | 15:20 |
| johnsom | You should not need to modify that file, it should work as-is. There is a doc for auditing I wrote here: https://docs.openstack.org/octavia/latest/admin/api-audit.html | 15:21 |
| mbrown05 | Okay awesome and when I enable auditing, I have to manually add the map file to the nodes? Octavia wont do that automatically once I enable auditing? | 15:23 |
| johnsom | Also of interest, our API no-op test job runs with API auditing enabled for test coverage: | 15:24 |
| johnsom | https://zuul.opendev.org/t/openstack/build/e100fc9a26d04d20b1834b805d7a3bdd/log/controller/logs/screen-o-api.txt#982 | 15:24 |
| johnsom | Correct, you need to place the audit map in a location the API controllers can access. Typically this is handled by the deployment tool (if they support enabling the audit logging). | 15:24 |
| mbrown05 | Awsome, thats answers my questions. Thank you so much for the help! I really appreaciate it! | 15:26 |
| johnsom | Sure, no problem. Good luck with your deployment! | 15:26 |
| gthiemonge | #startmeeting Octavia | 16:00 |
| opendevmeet | Meeting started Wed Oct 4 16:00:10 2023 UTC and is due to finish in 60 minutes. The chair is gthiemonge. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| opendevmeet | The meeting name has been set to 'octavia' | 16:00 |
| gthiemonge | hello! | 16:00 |
| oschwart | o/ | 16:00 |
| johnsom | o/ | 16:00 |
| gthiemonge | #topic Announcements | 16:01 |
| gthiemonge | * 2023.2 Bobcat Release | 16:02 |
| gthiemonge | Good news, Bobcat is released! | 16:02 |
| gthiemonge | https://lists.openstack.org/pipermail/openstack-announce/2023-October/002073.html | 16:02 |
| johnsom | Wahoo! | 16:02 |
| gthiemonge | Congrats and thank you Folks! | 16:02 |
| oschwart | Great to hear! | 16:02 |
| gthiemonge | * 2024.1 Caracal vPTG | 16:04 |
| gthiemonge | Quick reminder | 16:04 |
| gthiemonge | Our PTG session: October 24th (Tuesday) - 14:00 UTC - 18:00 UTC | 16:04 |
| gthiemonge | The etherpad: | 16:04 |
| gthiemonge | https://etherpad.opendev.org/p/caracal-ptg-octavia | 16:04 |
| gthiemonge | (and I haven't yet updated the official link to the etherpad) | 16:04 |
| johnsom | lol, I just checked that. I can do it. | 16:05 |
| gthiemonge | oh thanks | 16:05 |
| johnsom | Fixed | 16:06 |
| gthiemonge | +1 johnsom | 16:06 |
| gthiemonge | any other announcements? | 16:06 |
| tweining | o/ | 16:07 |
| johnsom | Nothing from me | 16:07 |
| oschwart | Nothing from me | 16:07 |
| gthiemonge | ack | 16:08 |
| gthiemonge | #topic CI Status | 16:08 |
| gthiemonge | FYI we still have those awful warnings in zuul | 16:08 |
| gthiemonge | can we merge those patches today? | 16:08 |
| gthiemonge | https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/893705 | 16:08 |
| gthiemonge | https://review.opendev.org/c/openstack/octavia/+/893704 | 16:08 |
| tweining | done | 16:10 |
| gthiemonge | thank you! | 16:10 |
| gthiemonge | that's it for CI status | 16:10 |
| gthiemonge | #topic Brief progress reports / bugs needing review | 16:11 |
| gthiemonge | Just a reminder we have many backports in review in gerrit | 16:12 |
| johnsom | Still working on SR-IOV. I have pivoted from the "new network driver" approach to a "use a different flow" approach. This is mostly due to changes for jobboard that would make the network driver approach messy. | 16:12 |
| gthiemonge | https://review.opendev.org/q/(project:openstack/octavia+OR+project:openstack/octavia-lib+OR+project:openstack/octavia-dashboard+OR+project:openstack/octavia-tempest-plugin+OR+project:openstack/python-octaviaclient)+status:open+branch:%255Estable/.* | 16:12 |
| oschwart | I will take a look at them | 16:13 |
| gthiemonge | thanks! | 16:13 |
| oschwart | It could be nice if you guys review the noop certificate manager patch | 16:14 |
| oschwart | https://review.opendev.org/c/openstack/octavia/+/894196 | 16:14 |
| gthiemonge | I will probably create more backports in the next weeks, we had a few bugfixes merged at the end of the Bobcat cycle | 16:14 |
| johnsom | Yikes, that is a lot of unreviewed patches | 16:15 |
| gthiemonge | oschwart: I think there's also a patch that tests it, right? | 16:15 |
| oschwart | I think that the noop cert mgr patch will allow the TERMINATED_HTTPS listener API tests to pass the check pipeline | 16:15 |
| oschwart | https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/893066 | 16:15 |
| gthiemonge | oschwart: I'll take a look at this "depends-on" issue | 16:15 |
| gthiemonge | maybe there's something else | 16:15 |
| oschwart | gthiemonge: even though I applied the Depends-On, I don't know why it fails. it passed on my local devstack env | 16:16 |
| tweining | oschwart: it missed your update. I'll review it later | 16:16 |
| johnsom | I think the job needs to be updated to set the noop cert driver in the octavia.conf | 16:17 |
| oschwart | thanks gthiemonge tweining. What do you mean with missed my update? | 16:17 |
| tweining | I didn't notice you pushed an update. | 16:18 |
| tweining | there is still the typo in the releasenotes btw | 16:18 |
| johnsom | #link https://github.com/openstack/octavia-tempest-plugin/blob/master/zuul.d/jobs.yaml#L484 | 16:18 |
| tweining | won'y | 16:18 |
| johnsom | Opps, line 489 actually | 16:18 |
| johnsom | #link https://github.com/openstack/octavia-tempest-plugin/blob/master/zuul.d/jobs.yaml#L489 | 16:19 |
| gthiemonge | +1 | 16:19 |
| oschwart | johnsom: thanks, I missed it! I will add it | 16:19 |
| oschwart | tweiing: I missed that typo too, thanks | 16:19 |
| oschwart | tweining | 16:19 |
| oschwart | for now I will leave it on the release notes as a feature, until I hear other opinions | 16:20 |
| oschwart | (as you wrote in the comment) | 16:20 |
| opendevreview | Omer Schwartz proposed openstack/octavia master: Add Noop Certificate Manager https://review.opendev.org/c/openstack/octavia/+/894196 | 16:21 |
| opendevreview | Omer Schwartz proposed openstack/octavia-tempest-plugin master: Add TERMINATED_HTTPS listener API tests https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/893066 | 16:24 |
| gthiemonge | BTW I'm working on the tempest tests for multivip (really old patch https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/664462) | 16:25 |
| gthiemonge | I think I'm almost done, but I need to check the duration of the tests | 16:25 |
| gthiemonge | so maybe I'll ask for reviews next week! | 16:25 |
| oschwart | sure, I will be happy to review it | 16:26 |
| gthiemonge | #topic Open Discussion | 16:28 |
| gthiemonge | do you have any other topics? | 16:29 |
| tweining | I don't think so | 16:29 |
| oschwart | I don't | 16:30 |
| johnsom | Nothing from me | 16:30 |
| gthiemonge | ok, thank you folks! | 16:31 |
| gthiemonge | #endmeeting | 16:31 |
| opendevmeet | Meeting ended Wed Oct 4 16:31:14 2023 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:31 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-10-04-16.00.html | 16:31 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-10-04-16.00.txt | 16:31 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/octavia/2023/octavia.2023-10-04-16.00.log.html | 16:31 |
| opendevreview | Merged openstack/octavia master: Fix Zuul warnings with regexps https://review.opendev.org/c/openstack/octavia/+/893704 | 17:48 |
| opendevreview | Merged openstack/octavia-tempest-plugin master: Fix Zuul warnings https://review.opendev.org/c/openstack/octavia-tempest-plugin/+/893705 | 18:18 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!