Tuesday, 2022-05-31

*** tbachman_ is now known as tbachman03:53
gibibauzas: o/ There is a good chance that I have to be away from the keyboard during the team meeting today07:37
gibistephenfin, sean-k-mooney[m]: your view would me much appreciated here https://review.opendev.org/c/openstack/nova/+/843443/1#message-ac73126bbaa46cbbccdccb15c4c6d28358a328fc08:07
bauzaselodilles: thanks for the nova-stable-maint additions ;)08:16
bauzasgibi: ack, no worries08:16
elodillesbauzas: np :)08:28
sean-k-mooney2gibi: ah the autopep8 change. i intentionally did not put it in test-reqirements since others experessed that they wanted ti to be optional and not require autopep809:48
*** sean-k-mooney2 is now known as sean-k-mooney09:49
sean-k-mooneyam09:49
sean-k-mooneyso we could do as you suggest09:49
sean-k-mooneyand move it there and pin09:49
gibiI affraid that we start listing deps in different palces09:49
gibiplaces09:49
sean-k-mooneyor we could add it to global requirements and pin in upper-constraits09:49
sean-k-mooneygibi: now that devestack does not install test-requiremetns09:49
gibiI don't know if we track test only requirements in global09:50
sean-k-mooneyits less of an issue with me to do that09:50
sean-k-mooneygibi: we have flake8 i think09:50
sean-k-mooneyand pytest09:50
gibinoe flake is not in global but pytest is in global09:50
sean-k-mooneygibi: https://github.com/openstack/requirements/blob/master/global-requirements.txt#L396=09:50
gibiohh cool09:51
sean-k-mooneyso ya we have a section for test tools09:51
gibithen I would like to track autopep8 in global09:51
sean-k-mooneywould you like me to add it with a patch09:51
gibiI can do it09:51
gibiI just wanted to make an agreement first09:52
sean-k-mooneyok i think that will be better longterm09:52
gibiyepp09:52
sean-k-mooneyby the way on a related not stephenfin made an intersting point on the mailing list09:52
sean-k-mooneyapprently we can now tell git blame to ignore commits09:53
sean-k-mooneyso if i was to push a ptach to pre-commit normalis all the quotes for example 09:53
gibiyepp I saw. I still think it will be a big debate to blackify nova09:53
sean-k-mooneywe can tell git blame to ignore that09:53
sean-k-mooneyoh i was not plannign to add black09:53
sean-k-mooneyjus ta few more  pre-comit hooks09:54
sean-k-mooneyusing black is an option i guess but i wanteed to avoid the linelenth debate09:54
gibiI'm a bit of all or nothing. as any normalization gives us the backport conflict so why not then do all the normalization at once09:54
sean-k-mooneyand just make some small imporvements09:54
gibiblack handles linelegth09:54
gibiyou can ask it to restrict to 7909:55
sean-k-mooneyi would like to do all09:55
sean-k-mooneyi really really wish we had auto code formating09:55
gibi  -l, --line-length INTEGER       How many characters per line to allow.09:55
gibi                                  [default: 88]09:55
gibiwhat an insteresting default :)09:55
sean-k-mooneybut i dont want to break people's workflow just for my comfort09:55
sean-k-mooneygibi: there was an articl on why that was chosen i think09:56
sean-k-mooneygibi: the issue is i dont think there is currently a way to set that in a file09:56
gibiyeah now that you said it 09:56
*** tbachman_ is now known as tbachman09:57
sean-k-mooneyoh the other hand i think have autoformating using any tool woudl improve new contibutor experince09:57
sean-k-mooneyand all our live in the long run09:57
gibiI totally agree09:57
gibiI just want a single commit to reformat everything with a tool and then forget about it09:57
gibigradual change will mean a lot of commit to ignore later09:58
sean-k-mooneyyep same09:58
* gibi goes to get something to eat09:59
sean-k-mooneyalso https://black.readthedocs.io/en/stable/the_black_code_style/current_style.html#line-length09:59
sean-k-mooneyapprently it now follow the flak8 max-line-lenth09:59
sean-k-mooneywhich was missing for so long09:59
gibiI still use https://github.com/gibizer/zuul-log-search/blob/main/tox.ini#L30 09:59
sean-k-mooneyyep we coudl do that but the disadvantage is10:00
sean-k-mooneyit wont work for ides10:00
sean-k-mooneylike vscode10:00
sean-k-mooneyim using nano/emacs so not an issue for me personally i would be runnign black with precommit10:00
sean-k-mooneybut ya go eat. i can wip up a patch if we want to consider it10:01
sean-k-mooneyim not really show how it would look10:01
gibiack10:01
stephenfingibi: sean-k-mooney: If you do normalization, I see no reason not to apply that normalization to stable branches also11:43
sean-k-mooneyhum we coudl i guess11:43
gibiincluding downstream? :)11:43
sean-k-mooneyim just fixign a few long lines on a black patch11:43
sean-k-mooneygibi: it woudl get imported downstream if we did it upstream11:43
sean-k-mooneybut also yes11:43
gibisean-k-mooney: ahh good point11:44
stephenfingibi: yeah, what sean-k-mooney says11:44
stephenfinI mean, in theory black's "slow" formatter checks to make sure the AST is identical before and after so there will be no functional differences11:44
sean-k-mooneyyep that is true for the most part11:45
sean-k-mooneyalso its faster tehn autopep811:45
sean-k-mooneyor flake811:45
gibithere will be a sh*tload of merge conflicts in open reviews but that is just one-time pain11:45
gibiand easy to resolve by rebase, run black, push11:46
sean-k-mooneythe patch is pretty bix but the list of files where i actully need to make code chages by intoducing new varbailes is pretty small11:54
sean-k-mooneyhttps://paste.opendev.org/show/be8e3ZYGZeIjFv8uOcvz/11:54
sean-k-mooneywell that or () to put things onto a new line11:54
sean-k-mooneyblack was able to handel almost all of it its slef but some of  our mock names are kind of long11:55
sean-k-mooneyover all the code is looking quite readable after the format11:57
sean-k-mooneystephenfin: you will like htat it seam to be quite close to your coding style already11:57
stephenfinsean-k-mooney: yeah, I've been slowly forcing myself to move to that style of late since it seems to be getting pretty widespread now11:59
sean-k-mooneysame but mainly because of you11:59
sean-k-mooneyto premempt you asking me to change things in nits :)11:59
gibi:)12:00
sean-k-mooneygot to make you work harder for those -1 stats :)12:00
gibisean-k-mooney: did you moved to 88 char line limit as the paster suggests? 12:00
sean-k-mooneyya12:01
sean-k-mooneyso the reason i did that is to mvoe to 79 with black12:01
sean-k-mooneyi would need to add project.toml12:01
sean-k-mooneywhich i could do12:01
sean-k-mooneybut that seam like an even bigger change12:01
gibiI would add -l 79 to the black command line as a stopgap12:01
sean-k-mooneyonce i have this passing for 88 i can add a scond commit for 7912:01
sean-k-mooneyif we want 79 we could sqaush them12:02
sean-k-mooneygibi: i have configured flak8 for 88 too in this patch12:03
sean-k-mooneyso im not removing flak8 or hacking12:03
sean-k-mooneythey will still enforce checks but im makign them compatibale with black12:03
gibiahh I see12:03
gibiI'm OK with the two commit to review but I would like to squash before we merge12:03
sean-k-mooneyyep so the reason im going to do two commits is 1 we can decide if we prefer one vs the other12:04
sean-k-mooneyand two i know i will likely have to resolve more long nested calls for 7912:04
sean-k-mooneyi.e. obj.sub_obj.long_function_name....12:05
sean-k-mooneyour convention of mock_full_long_function_name.return_value.assert_called_once_with(12:06
sean-k-mooneysometimes is over 88 when all on one line12:06
gibiI see12:06
sean-k-mooneylol i just opend the libvirt driver unit test and emacs warned me of performance issues with large files12:09
sean-k-mooneyto be fiar to ti it  is 32k lines long12:10
sean-k-mooneywe really do need to decompsoe the libvirt driver into more moduels and split up the unit test file eventually12:10
sean-k-mooneyits just a lot of merge conflicts12:11
sean-k-mooneyits one of those things that we just need to decide to do at teh end or start of a cycle12:12
gibisean-k-mooney: I totally agree. pycharm simply dies on that file :D12:14
sean-k-mooneyi dont know if im the only one that does this but one trick i have adopted recently for fixing pep8 issue is starting form the end fo the file and working backwards12:21
sean-k-mooneythat way the earlier errors dont change line number12:21
gibigood idea :)12:22
gibiif we merge the black patch you can forget this trick :)12:22
sean-k-mooneyhehe mostly true12:22
sean-k-mooneyself.task.compute_rpcapi.finish_revert_snapshot_based_resize_at_source.assert_called_once_with(12:22
sean-k-mooneythat is an example of something it cant fix12:23
opendevreviewribaudr proposed openstack/python-novaclient master: Microversion 2.91: Support specifying destination host to unshelve  https://review.opendev.org/c/openstack/python-novaclient/+/83165112:24
sean-k-mooneyi am manually fixign those like this 12:24
sean-k-mooney        mock_finish_at_source = (12:24
sean-k-mooney            self.task.compute_rpcapi.finish_revert_snapshot_based_resize_at_source12:24
sean-k-mooney        )12:24
sean-k-mooney        mock_finish_at_source.assert_called_once_with(12:25
opendevreviewribaudr proposed openstack/nova master: Allow unshelve to a specific host  https://review.opendev.org/c/openstack/nova/+/83150712:40
opendevreviewBalazs Gibizer proposed openstack/osc-placement master: Support microversion 1.39  https://review.opendev.org/c/openstack/osc-placement/+/82854512:47
opendevreviewBalazs Gibizer proposed openstack/osc-placement master: Support microversion 1.39  https://review.opendev.org/c/openstack/osc-placement/+/82854512:48
Ugglasean-k-mooney, pep8 from the end of file, good idea.12:50
opendevreviewBalazs Gibizer proposed openstack/nova stable/xena: Add service version check workaround for FFU  https://review.opendev.org/c/openstack/nova/+/83117412:50
Ugglagibi, a black patch ? To get rid of formatting ?12:51
gibiUggla: yepp12:51
sean-k-mooneywell more make a tool do it12:52
Ugglagibi, oh, that will be really cool. 12:52
* sean-k-mooney likes the irony of spending 90mins manually formating stuff black cant so we could use black to format code12:53
gibisean-k-mooney: even the best hero needs help from a sidekick \12:54
sean-k-mooneyone thing i dont like but i dont see a way to avoid is i have to #noqa: E501 lambdas13:00
sean-k-mooneyi.e. if a lamda defition does not fit on one line i have to ignore the line lenght13:01
sean-k-mooneysince there is not a valid way to break it up that black wont undo13:01
sean-k-mooneythere might be a config setting i could tweak in a followup but for now im just ignoring the lenght check in that specific case13:02
sean-k-mooneythe other option is to allow lamdas to be named but we block that currently13:03
sean-k-mooneyso i cant just pull it out into a varible or similar13:03
sean-k-mooneyand pulling them out into private fucntiosn is more then i want to do in this patch13:03
sean-k-mooneyim really trying to keep the manual changes as small as possible13:04
sean-k-mooneywe can always go back and fix that later by looking for the #noqa comments13:04
gibiyeah, I think the official suggestion is that if it does not fit into a line then it should be def 13:07
gibibut I agree not do change everything in one go13:08
*** whoami-rajat__ is now known as whoami-rajat13:42
bauzassean-k-mooney: gibi: fwiw, I loudly replied to the E501 thread13:44
bauzastl:dr: this is a at least a bikeshed and maybe a pandora box that will generate a lot of efforts for something needless13:45
opendevreviewMerged openstack/nova stable/ussuri: [CI] Install dependencies for docs target  https://review.opendev.org/c/openstack/nova/+/83981313:45
sean-k-mooneybauzas: perhaps but im still going to finish my nova black patch13:48
sean-k-mooneybauzas: dealing with formating it perhaps the thing i hate most about working on nova other then the dowstream paperwork13:49
bauzassean-k-mooney: take it as you wish, but I won't accept any change touching this limit13:50
bauzasthis will also break style consistency between projects and some people using terms with 80 chars will see a difference13:50
bauzaswhile the other way is just because people feel useless to have 80 chars on a 1440 display13:51
bauzasthis is maybe useless, but changing the default has a cost I'm not ready to pay13:51
bauzasand I wish our contributor energy would be better used to some other things but just a stylish nitty modification13:52
bauzaspro-tip : 80-char limit allows you to open multiple files in parallel, that being said13:52
bauzasbtw. sean-k-mooney you wanted me to review some os-vif changes13:54
bauzasthat looks to me better use of my worktime13:54
sean-k-mooneybauzas: i can reduce it down to 79 then and keep the limit13:56
sean-k-mooneythe black defaul is 8813:57
sean-k-mooneywhich works fine even on 1080 screesn or my phone13:57
sean-k-mooneywhich is actully 1080 on landscpae so i guess thats the same13:57
bauzassean-k-mooney: changing our pep8 tool is a totally different effort than changing the limit13:58
sean-k-mooneyunless you have a 720p screen you can open two 90 char termins in a 1080 screen and still have space13:58
sean-k-mooneybauzas: its not changing the pep8 tool by the way13:58
sean-k-mooneyits still using flake813:58
bauzassean-k-mooney: sorry I meant the formatter13:59
sean-k-mooneybut isnt of autopep8 which does minimal formating it would be black which does everything for you13:59
bauzassean-k-mooney: if black stays optional, I'm not opposed to it13:59
bauzassean-k-mooney: are you planning to make it a tox target ?14:00
sean-k-mooneyin terms of developer mental healt not having auto formating is defferntly bad for burn out14:00
sean-k-mooneybauzas: it would have to be enforced in ci14:00
bauzaswell, I certainly had burnout conditions in the past that didn't occur because of the formatting...14:00
sean-k-mooneyotherwise there is no real point14:00
sean-k-mooneyi condiered stopping working on nova because of the effort required to get patches merged much of which was becasue of style considerations14:01
bauzasa formatter wouldn't help, no ?14:01
sean-k-mooneyit would14:02
sean-k-mooneyauto fromating would remove debates of how to format thigns14:02
sean-k-mooneyits what the tool does and done14:02
bauzasI'm certainly not one who debated the stylish things14:02
bauzasfor line limits, I'm not opposed to use either brackets or backslashes, eg.14:03
bauzasor even local variables14:03
bauzasat least, I could comment on it, but I'm not *opposed* to it14:03
bauzasso, if you felt exhausted by those debates, I really feel your frustration and I think we should rather document the fact that we shouldn't enforce exact styling guidelines14:04
bauzasyet again a code review issue and not a tool miss14:05
bauzas(not saying pypià14:05
bauzas;)14:05
dansmithsean-k-mooney: bauzas: the other day we were talking about something related to file-backed memory support in libvirt/nova14:20
dansmithI don't remember for what, but I wrote something to get support started for the guy that added that support, which never got merged: https://review.opendev.org/c/openstack/devstack/+/57479214:20
kashyapsean-k-mooney: What is the "black default is 88"?14:21
dansmithit just got some "is this still interesting" action recently, so... is it worth getting that merged?14:21
bauzaskashyap: that means by default black generates lines of 88 chars14:21
bauzasdansmith: reloading the context14:21
kashyapI don't know what is "black" here.  Maybe I'm being too dense14:21
bauzaskashyap: https://pypi.org/project/black/14:21
kashyapAh, it's a tool!14:22
kashyapThanks14:22
* kashyap still uses 72-column width personally, like a brute creature14:22
bauzaskashyap: and there is blue, a fork of black https://pypi.org/project/blue/14:23
bauzassee, we diverted from a very interesting ping from dansmith14:23
* bauzas needs to click again14:24
kashyapbauzas: Yeah, I recall seeing that in passing; th14:24
dansmithblack's coding style is so ugly14:24
* dansmith runs14:24
kashyaps/th/thx/14:24
bauzasdansmith: stay, please14:24
bauzasI need to convince a few people here14:24
bauzasdansmith: do you remember if we discuss the file-backed memory case in a meeting or somewhere else ?14:25
*** mfo is now known as Guest83014:25
*** mfo_ is now known as mfo14:25
dansmithbauzas: it was downstream in a meeting I think, I don't remember the context14:25
bauzashah14:25
bauzaswell, I'd say this is just a libvirt knob14:26
bauzasso, to answer your question, worth merging yeah14:26
dansmithaight14:26
dansmithpresumably we need a test case that uses/enables it14:27
bauzasI like the 'you can't overcommit memory if you file-back your memory" ting14:27
dansmithwhich probably existed as a depends-on to this somewhere14:27
bauzasyeah, this is a very old patch14:29
bauzasdamn, needs to run, forgot my kid14:29
sean-k-mooneydansmith: sorry in a meeting14:33
sean-k-mooneydansmith: you were askign about file backed memory14:34
sean-k-mooneydansmith: we have some support14:34
sean-k-mooneydansmith: we dont support live migration between file backed and non file backed ectra14:34
dansmithsean-k-mooney: I know, I worked on the support in nova with the original author :)14:35
sean-k-mooneywas there a specific question you had14:35
dansmithsean-k-mooney: I also wrote this devstack support for him to finish, but that never happened14:35
sean-k-mooneydansmith: no devstack support is required14:35
dansmithso I'm wondering if I should abandon or finish this patch14:35
sean-k-mooneydansmith: i manullay tested it when it was beeing merged :)14:35
sean-k-mooneydansmith: the docs are curently wrong about needignto create a partion14:35
dansmithsean-k-mooney: um14:36
dansmithwe have a conf flag for it, no?14:36
sean-k-mooneyyes 14:36
sean-k-mooneybut you can set that with [[post-conf| $NOVA_CPU_CONF]]14:37
dansmith...14:37
sean-k-mooneyits what i have done every time i used that14:37
dansmithsure, but also we need to enable it in libvirtd? or did at the time14:37
sean-k-mooneyand we dont want to mount the file backed memory on tempfs14:37
sean-k-mooneyno14:37
sean-k-mooneyyou dont need to enable anything in libvirt14:37
dansmithto what, end up with memory file-backed on your root disk?14:38
sean-k-mooneyyes that is how its ment to be used14:38
sean-k-mooneythe file is cached in ram using the hosts page cache14:38
dansmithno, it's not.. or not how this feature was intended14:38
dansmiththe original author had a box that looked like a memory-backed filesystem over IB fabric or whatever, so they needed to configure libvirt to use that mount for the memory14:39
dansmithso part of this was so they could actually configure a devstack to do that, and not stack, then configure and restart libvirt14:39
sean-k-mooneydansmith: i was also raisign adding supprot for this for dpdk before that autro got there feature merged14:39
sean-k-mooneydansmith: to be clear i brought  up supporting filebacked memroy for dpdk and it was rejected14:40
sean-k-mooneythen later tehy brought it up for a security usecse and it was accpeted14:40
sean-k-mooneyfile backed memmroy can use a file on disk14:40
sean-k-mooneyyou dont need to do any config in libvirt 14:40
dansmithI understand you *can* but I'm not sure why you would, unless you have something very fast that looks like a disk, but isn't, in which case you'd need to tell libvirt where to put it specifically14:41
sean-k-mooneydansmith: so that you can have more "ram" the system ram14:41
dansmithbut whatever, sounds like you think I should not finish this because we don't need it for CI testing specifically14:41
sean-k-mooneyi also dont think you shoudl deploy it in production on temfs14:41
dansmithsean-k-mooney: right but "more ram a the speed of a disk" is not very useful14:41
sean-k-mooneyif your disk are fast optane ssd it is14:42
dansmiththe tempfs was so that it didn't generate IO in the workers14:42
sean-k-mooneyand as i said the host page cache also acclerates recently acccess part of the files14:42
sean-k-mooneydansmith: are you working on addign file backed memory testing to ci by the way14:43
sean-k-mooneyor were you just automating it in devstack for local use14:43
dansmithI'm not doing anything14:43
sean-k-mooneyoh i was confused by https://review.opendev.org/c/openstack/devstack/+/574792 but i guess matt was the last uploader14:44
sean-k-mooneyan it was revived 3 days ago14:44
sean-k-mooneydansmith: sorry i was trying to figure out teh context of this14:45
* artom doesn't care what, if any, code formatting tool we use, just don't have a single massive commit with 'black all teh coed!!1'14:52
artomHow to break git blame 101.14:52
dansmithI'm also not in favor of reformatting more code than is necessary during a change, because that also make history look like more was changed14:53
artomIn fact, that argument would prevent us from ever switching to an automatic formatter, unless it can be smart enough to only touch code that's already being changed in a commit.14:53
opendevreviewMerged openstack/placement stable/victoria: Use 'functional-without-sample-db-tests' tox env for placement nova job  https://review.opendev.org/c/openstack/placement/+/84076714:58
bauzasdansmith: artom: sean-k-mooney: as I said, we can create a consensus in the documentation for explaining we should not have a specific styling guideline more than using https://github.com/openstack/nova/blob/master/nova/hacking/checks.py15:08
bauzasso, we wouldn't need to have the black formatter15:08
bauzasthat said, 15:09
bauzasnova meeting in 50 mins now here15:09
sean-k-mooneybauzas: sure but i think that is a wrong thing fore the heal of the project longterm15:11
elodillesbauzas: may i update the wiki (stable section)? or do you want to do it by yourself?15:24
bauzaselodilles: feel free to do it, I'm done15:37
elodillesbauzas: ack15:38
elodillesdone15:40
opendevreviewMerged openstack/os-vif master: Delete trunk bridges to avoid race with Neutron  https://review.opendev.org/c/openstack/os-vif/+/84149915:41
bauzasreminder: nova meeting in 13 min here.15:47
bauzas#startmeeting nova16:00
opendevmeetMeeting started Tue May 31 16:00:35 2022 UTC and is due to finish in 60 minutes.  The chair is bauzas. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
opendevmeetThe meeting name has been set to 'nova'16:00
bauzasEHLO16:00
elodilleso/16:00
Ugglaqo/16:00
gmanno/16:01
bauzasnot sure if gibi is around, but let's start to discuss (he told me he couldn't be in our meeting)16:01
bauzas#topic Bugs (stuck/critical) 16:02
bauzas#info No Critical bug16:03
bauzas#link https://bugs.launchpad.net/nova/+bugs?search=Search&field.status=New 14 new untriaged bugs (-1 since the last meeting)16:03
bauzasthanks elodilles :)16:03
bauzas#link https://storyboard.openstack.org/#!/project/openstack/placement 26 open stories (0 since the last meeting) in Storyboard for Placement 16:03
elodilleso:)16:03
bauzas#info Add yourself in the team bug roster if you want to help https://etherpad.opendev.org/p/nova-bug-triage-roster16:03
bauzaselodilles: do you want to discuss about some bug ?16:03
elodillesbauzas: nothing to discuss i think,16:03
bauzascool16:03
bauzasthanks for the bug triage etherpad btw.16:04
elodillesi only triaged two bugs and they were more or less clear (or incomplete)16:04
bauzasnice16:04
bauzasso, after you, we're done with the roster16:04
bauzasif someone wants to triage, let me know now16:04
bauzasfor next week16:05
bauzasok, looks not16:05
bauzasthen, let's rerun the roster :)16:06
elodilles++16:06
bauzasI'll be the next bug baton folk16:06
bauzasI can run it for two weeks if needed as I'll ask to not have a meeting next week 16:06
elodillesi guess gibi is not here to object :)16:07
bauzasheh, I'll see him f2f next week16:08
bauzasso I could pass him the baton :p16:08
elodilles:)16:08
bauzasanyway16:08
bauzas#info Next bug baton is passed to bauzas16:08
* bauzas has to run then 16:08
bauzasmeh, joking16:09
bauzasnext topic, then16:09
bauzas#topic Gate status 16:09
bauzas#link https://bugs.launchpad.net/nova/+bugs?field.tag=gate-failure Nova gate bugs 16:09
bauzas#link https://zuul.openstack.org/builds?project=openstack%2Fplacement&pipeline=periodic-weekly Placement periodic job status 16:09
bauzas#link https://zuul.opendev.org/t/openstack/builds?job_name=nova-emulation&pipeline=periodic-weekly&skip=0 Emulation periodic job runs16:09
bauzas#info Please look at the gate failures and file a bug report with the gate-failure tag.16:09
bauzas#info STOP DOING BLIND RECHECKS aka. 'recheck' https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures16:09
bauzasall the jobs look good to me16:10
bauzassomething to tell about the gate ?16:10
bauzasok, looks not, continuing16:11
bauzas#topic Release Planning 16:12
bauzas#link https://releases.openstack.org/zed/schedule.html16:12
bauzas#info Zed-2 is in 6 weeks16:12
bauzasthe tick is clicking16:12
bauzasI'll ask for a spec review day maybe in two weeks's meeting16:12
bauzasnothing to tell here, I'm slowing reviewing a few specs16:13
bauzasand oh, this reminds me to modify Launchpad for those accepted blueprints16:14
* bauzas forgot to do it last week16:14
bauzasanything to talk about specs, per say ?16:14
bauzas-16:15
bauzas#topic OpenInfra Summit 16:16
bauzas#info bauzas, gibi and stephenfin will attend the summit (at least for those I know)16:16
bauzasso, then I have a question for those around16:16
bauzasshall we cancel next week's meeting ?16:16
bauzasI have a vote !16:16
bauzas#startvote Cancel Nova meeting next week ? (yes/no)16:16
opendevmeetBegin voting on: Cancel Nova meeting next week ? Valid vote options are , yes, no, .16:16
opendevmeetVote using '#vote OPTION'. Only your last vote counts.16:16
bauzas#vote yes16:17
elodilles#vote yes16:17
gmannthough I will travel but ok for me to cancel, 16:17
gmann#vote yes16:17
Uggla#vote yes16:17
gmann*I will not travel16:17
bauzasgmann: you'll be missed16:17
bauzasI'll close the vote16:17
bauzasbut, before this16:17
bauzasif someone wants run the meeting, he can16:18
bauzasthis is just I'm not sure we'll have a quorum then16:18
bauzaslet's end the vote16:18
bauzas#endvote16:18
opendevmeetVoted on "Cancel Nova meeting next week ?" Results are16:18
opendevmeetyes (4): Uggla, gmann, elodilles, bauzas16:18
bauzasso, 16:19
bauzasI haven't seen interest by someone to run it,16:19
bauzas#agreed June 7th nova meeting is CANCELLED.16:19
bauzasI'll send an email accordingly16:19
bauzasone last point, if some people read our minutes,16:20
bauzas#info We'll provide a Nova meet-and-greet Operators feedback  session on Wednesday,  June 8, 2:50pm - 3:20pm. Operators are welcome.16:20
bauzasI can proxy any opinions or thoughts at the forum, btw.16:20
bauzasstick around on IRC, you could be pinged16:20
gmannbauzas: good idea. is there any etherpad i can add topic?16:21
bauzasgmann: I surely can create one16:22
gmannI would like to get soem feedback on SRBAC especially on scope thing16:22
gmannthanks, that will be great I will not be there but I think you can discuss it and I will add details in etherpad16:22
bauzasgmann: so you imagine some feedback etherpad, or rather some etherpad for adding notes before and remarks after ?16:22
bauzasah, I see16:22
gmannbauzas: latter one16:22
bauzasgmann: this is an excellent idea, let's setup this16:23
gmann+116:23
bauzasgmann: I wish the Forum sessions would have their own etherpads tho16:23
gmannwe are trying to get this topic for ope meetup also but getting per project feedback also will be great16:23
gmannbauzas: yeah, that also work, anywhere I can add this topic so that you remember it16:23
bauzasgmann: oh, you meant about operators feedback at our meet-and-greet ? gotcha.16:24
gmannyeah16:24
bauzasgmann: then, I'll start an etherpad and I'll discuss this with gibi as he co-hosts16:24
gmannthanks16:24
bauzasthis is a good point, we have a few things we'd like operators to play witgh16:24
bauzaslike the unified limits16:24
gmannindeed16:24
bauzasremember tho, operators play old versions, so they couldn't be that helpful16:25
bauzasbut this is not a reason to ask16:25
bauzasto not* ask 16:25
gmannyeah, just if we can get initial feedback what they think on these new things16:25
bauzasgotcha16:25
bauzasand brilliant idea16:25
bauzasgmann: you're doing my homework !16:26
gmann:)16:26
bauzasok, next topic, I guess ?16:26
bauzaslooks so16:27
bauzas#topic Review priorities 16:27
bauzas#link https://review.opendev.org/q/status:open+(project:openstack/nova+OR+project:openstack/placement+OR+project:openstack/os-traits+OR+project:openstack/os-resource-classes+OR+project:openstack/os-vif+OR+project:openstack/python-novaclient+OR+project:openstack/osc-placement)+label:Review-Priority%252B116:27
bauzas#link https://review.opendev.org/c/openstack/project-config/+/837595 Gerrit policy for Review-prio contributors flag. Naming bikeshed in there.16:27
bauzas#link https://docs.openstack.org/nova/latest/contributor/process.html#what-the-review-priority-label-in-gerrit-are-use-for Documentation we already have16:28
bauzaslooks we found a consensus on my proposal for https://review.opendev.org/c/openstack/project-config/+/83759516:28
bauzassean-k-mooney: could you then please provide a new rev for it ? ^16:29
sean-k-mooneyah i tought you were going to update it but sure16:30
bauzassean-k-mooney: oh, I can do it 16:31
bauzas#action bauzas to update https://review.opendev.org/c/openstack/project-config/+/83759516:32
bauzassean-k-mooney: no worries, I'll take it16:33
bauzasnext topic then16:33
bauzas#topic Stable Branches 16:33
bauzaselodilles: feel free to take the mic16:33
elodilles#info ussuri is unblocked, thanks to gmann's tempest pinning patches16:34
bauzas\o/16:34
gmannyeah, and stable/victoria is also pinned with old tempest16:34
elodilles#info stable branches are now unblocked, but intermittent failures need further investigations. melwitt's tracking etherpad: https://etherpad.opendev.org/p/nova-stable-branch-ci16:34
elodillesgmann: thanks! \o/16:34
gmanntook almsot 1 week to get all these merged16:34
elodilles:S16:34
elodilles#info placement's stable/branches are unblocked back till victoria (see melwitt's etherpad ^^^)16:34
bauzas\o/ agai,16:35
gmanncyborg-tempest plugin job which is non voting in nova gate also will be fixed by #link https://review.opendev.org/c/openstack/cyborg-tempest-plugin/+/84332916:35
elodillesgmann: ack, thanks for that, too!16:36
elodilles(that's all from my side)16:36
bauzas:)16:36
bauzasgreatly appreciated, thanks gmann16:36
gmannnp!16:37
bauzasand thanks melwitt for the tracking16:37
bauzasmoving on16:37
bauzaswe have one last item16:37
bauzas#topic Open discussion 16:37
bauzas(levy14) Discuss ability to call Barbican from inside VM without supplying credentials16:38
bauzaslevy14: around ?16:38
levy14yep16:38
levy14was not around last week to put it on the agenda16:38
bauzaslevy14: I'll be honest, I'm not sure we have quorum for discussing your point today, but we can try16:38
levy14but my org would greatly benefit if any code in a vm could call barbican to fetch secrets. now there are secrets in code, in config files, injected but not properly handled. I'd like to get rid of that.16:39
levy14without having to put the credentials in the code, I mean16:39
levy14I see this as a big security improvement for users of nova16:40
sean-k-mooneyi actuly see it as the opisite form a nova point of view16:40
sean-k-mooneyis potentally a large security whole16:40
sean-k-mooneynova today almost excilulive does not handel any tenatn secrets16:41
bauzasyup, that's what we said16:41
sean-k-mooneynova or admins by default cannot retirve secrets form barbican16:41
sean-k-mooneyonly the user can16:42
levy14I understand. but that forces users of nova to improvise. and it's not good what users do. the outcome is nasty.16:42
sean-k-mooneyyep thats also true16:42
levy14if there would be a feature to allow this specific use case, that would make life of nova users much better16:42
sean-k-mooneyrealisticaly the simpelte way to achive this today id via an external vender data service16:42
sean-k-mooneywhich could inject a bootstrap token via the metadta api16:43
sean-k-mooneysimialr to how nova-join works https://opendev.org/x/novajoin#design16:43
levy14the problem with that is that I cannot realitically get it implemented across the federation of sites we represent16:43
sean-k-mooneyhttps://docs.openstack.org/nova/latest/admin/vendordata.html16:43
sean-k-mooneylevy14: what you are trying to achive is somethign simialr to k8s ablity to inject secrets into the pods right16:44
sean-k-mooneykubernets allows secreates to be injected via config maps or other mechanium such that the pod applciation can the interact with the k8s apis16:45
sean-k-mooneylevy14: what you want is a way for nova instance to be able to bootstrap talkign to keystone/barbican16:45
sean-k-mooneyso that they can programitacly get teh secretes that are stored there16:45
levy14not necessarily. I would like a transparent mechanism. that watches for outgoing https reguests to barbican and adds a header with the auth to access the secrets. based on some form of vm identity16:45
sean-k-mooneylevy14: nova does not controll the guest networking16:46
sean-k-mooneyso such a serice woudl be outside our scope16:46
levy14sean-k-mooney: they can do that today, if they inject a secret. but that needs them to properly tend and handle the secret with care. users don't care, they are sloppy.16:46
sean-k-mooneyone posiablity but its a hack16:47
sean-k-mooneywoudl be to take teh token we are invoked with and include it in the metadata16:47
sean-k-mooneythat token would expire 16:47
sean-k-mooneybut it woudl be suffient for the app to bootsrap potenally by issueing an application credetial16:48
levy14sean-k-mooney: it was just a suggestion. or a way to describe what I expect to happen, don't know which project implements it. I thought I bring it up in nova, as it seems some sort of vm identity is needed for it to work16:48
sean-k-mooneyif you want the http request to be intercepted transparently you would need service function chaning or similar to implement that16:48
sean-k-mooneylevy14: that the thing vms dont have an identiy16:49
sean-k-mooneythey are owned by porjects 16:49
sean-k-mooneysecrets are owned by users16:49
levy14sean-k-mooney: maybe they should start having one16:49
sean-k-mooneyperhaps 16:49
levy14or secrets in barbican can be set up so that an entire project has access to them?16:49
sean-k-mooneyim not sure but that would still not allow nova to access them16:50
sean-k-mooneyservices and cloud admins cannot acces barbican secrets16:50
levy14so the possibilities are:16:50
sean-k-mooneythat is doen intentiolly for improved security16:50
levy141. metadata service16:51
levy142. interception of network calls outgoing from a vm16:51
sean-k-mooneythose are two possiblities yes16:52
levy14any other?16:52
sean-k-mooneyfor 1 you would have to define what the metadata service will provide the vm16:52
levy14and anyone sees this as a valuable feature for nova?16:53
sean-k-mooney2 is not in scope of nova16:53
sean-k-mooneylevy14: if it was done securly maybe.16:53
sean-k-mooneybut i also see it as a non trivial feature16:53
jrosser_i did some more looking at this after it was discussed ~ 1 week ago16:54
levy14sean-k-mooney: I am sure is non-trivial16:54
jrosser_and came to the same conclusion that there was no user associated with a VM so it was not possible to generate a usable token, even though it was possible to assert the identity of the vm16:54
levy14sean-k-mooney: but I see it very valuable to have16:55
bauzastimebox : we only have 5 mins left16:55
sean-k-mooneylevy14: do you feel comfortable wrting a spec propsoal even an incomplete one with your usecases16:55
sean-k-mooneylevy14: and or would you be able to implement this with our guidance16:56
bauzasyes, we should rather discuss this by a spec16:56
levy14sean-k-mooney: I can try writing an (incomplete) spec, I am not up to implement it myself16:56
sean-k-mooneyjrosser_: i could see us adding a --application-credetial or something to the api16:56
sean-k-mooneyjrosser_: i.e. you precreate one and tell nova to pass it to the guest via the metadtaa service16:57
jrosser_i think that spcifying a service user for a VM might be enough16:57
jrosser_anyway this is a rabbit hole and i don't want to disrupt your meeting16:57
bauzasjrosser_: no worries, we don't have other discussions 16:57
bauzasat least, looks to me we have a consensus : levy14 will provide an incomplet spec or a backlog one 16:58
bauzaslevy14: do you know about https://specs.openstack.org/openstack/nova-specs/specs/backlog/index.html ?16:58
jrosser_tldr was that other $clouds let you associate a service user (thats already in your project) with that VM, and that combined with a JWT from the metadata  to auth against keystone would give you a token for that service user16:59
bauzasanyway, we're at the last minute for our meeting16:59
levy14I saw the page, seemed convoluted. next week I'm at openinfra, but for the week after that I'll try to create a spec.16:59
sean-k-mooneyjrosser_: i think the closest thing to a service user we have in openstack in an application credential16:59
bauzaslevy14: ok, then, we're done today17:00
bauzasthanks folks17:00
bauzas#endmeeting17:00
opendevmeetMeeting ended Tue May 31 17:00:56 2022 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:00
opendevmeetMinutes:        https://meetings.opendev.org/meetings/nova/2022/nova.2022-05-31-16.00.html17:00
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/nova/2022/nova.2022-05-31-16.00.txt17:00
opendevmeetLog:            https://meetings.opendev.org/meetings/nova/2022/nova.2022-05-31-16.00.log.html17:00
bauzassean-k-mooney: gibi: elodilles: fwiw, I'll be off tomorrow17:01
elodillesthanks o/17:01
elodillesbauzas: ack17:01
sean-k-mooneybauzas: ack17:01
sean-k-mooneybauzas: for rest of week or you back thursday17:01
bauzassean-k-mooney: no, only tomorrow17:19
bauzasI have a few appointments so I thought it was better to just take one day off17:19
sean-k-mooneybauzas: cool i did have one topic for the meeting but it can wait till next week 17:20
bauzassean-k-mooney: which meeting ?17:20
bauzasthe upstream nova one ?17:20
sean-k-mooneythe nova one17:20
sean-k-mooneyya17:20
sean-k-mooneywe didnt have time anyway17:20
bauzashah, we just said that we won't have a meeting next week17:21
sean-k-mooneybut i had a previous downstream meeting that ran over17:21
sean-k-mooneyoh well it can wai17:21
sean-k-mooney*wait17:21
bauzassean-k-mooney: but if you want, you can run the meeting17:21
sean-k-mooneyits not urgent17:21
sean-k-mooneyno its fine i just wanted input on a patch17:21
bauzassean-k-mooney: this is just that gibi, stephenfin and me at least won't be around17:21
sean-k-mooneybauzas: ya no worreis i frogot summit was next week17:22
sean-k-mooneyi was going to turn https://review.opendev.org/c/openstack/nova/+/842359 into a real patch with a release note17:22
sean-k-mooneybut wanted to get input form other before i do17:22
sean-k-mooneyi.e. is this somethign we want to do17:22
sean-k-mooneybefore i spend time on it17:22
bauzashah17:23
bauzasno worries17:23
bauzasI understand your point and we can surely discuss this the other week17:24
bauzassean-k-mooney: just add your topic in the agenda in order to not forget it 17:24
sean-k-mooneysure will do17:25
gibiaway17:58
gibiehh17:58
gibibauzas: I can take the triage baton next week over a beer :)18:02
opendevreviewsean mooney proposed openstack/nova master: update nova to use black for code formating.  https://review.opendev.org/c/openstack/nova/+/84412018:36
sean-k-mooneyi have run unit and functional test on that locally and they appear to pass so im pretty confident that there has been no effective code change in ^18:42
sean-k-mooneyblack, pep8 and fast8 also pass and so does pre-commit18:43
gibisean-k-mooney: thanks18:48
sean-k-mooneylol just realised it updated leet files 133718:48
sean-k-mooneyin my somewhat biased opipion the code is more readable. im also not a black fangirl by any means its jut looks nicer to me18:49
artomAre "Cinder multi-backend feature disabled" a known thing on stable/victoria?18:58
sean-k-mooneyam ping me tomorrow but im not sure what that means19:45
sean-k-mooneyi assume that is a tempest config option19:45
gmannartom: it is enabled, it is enabled tempest-slow job and in cinder-tempest-lvm-multibackend which pass in victoria 20:06

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!