15:00:18 <noonedeadpunk> #startmeeting openstack_ansible_meeting
15:00:18 <opendevmeet> Meeting started Tue Jan 17 15:00:18 2023 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:18 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:00:18 <opendevmeet> The meeting name has been set to 'openstack_ansible_meeting'
15:00:23 <noonedeadpunk> #topic rollcall
15:00:25 <noonedeadpunk> o/
15:00:38 <jrosser> hello
15:00:39 <damiandabrowski> hi!
15:00:57 <jamesdenton> o/, sortof
15:02:22 <noonedeadpunk> #topic office hours
15:02:37 <mgariepy> hello o/
15:03:07 <noonedeadpunk> I was about to do bump for Z, but then https://bugs.launchpad.net/openstack-ansible/+bug/2002897 raised
15:04:06 <noonedeadpunk> Fix for it has been already pushed, so given some reviews on https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/870801 it should be fast after all
15:05:10 <noonedeadpunk> Then for OVN driver for Octavia, we're still missing fixing SHA for the plugin. jamesdenton do you want to push the change? I can do it if needed
15:05:37 <jamesdenton> if you can that would be great, i'm tied up a bit
15:05:40 <admin1> i am trying to recreate a setup for upgrade test .. its on focal and tag 24.4.2 .. having trouble with rabbitmq-server install  rabbitmq-server : Depends: erlang-base (< 1:25.0) but 1:25.2-1 is to be installed or erlang-base-hipe (< 1:25.0) but it is not going to be installed or  esl-erlang (< 1:25.0) but it is not installable
15:05:40 <noonedeadpunk> #link https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/868462
15:06:04 <NeilHanlon> o/
15:06:07 <admin1> oh .. we are in a meeting ..
15:06:13 <admin1> \o
15:06:34 <noonedeadpunk> admin1: https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/868107
15:07:07 <admin1> thank you noonedeadpunk
15:07:35 <noonedeadpunk> jamesdenton: ok, will do.
15:07:57 <jamesdenton> it will also help me understand what you mean about the sha :)
15:07:58 <noonedeadpunk> btw, I'm going to join you NeilHanlon on FOSDEM :)
15:08:07 <mgariepy> cool
15:08:37 <NeilHanlon> :gasp:
15:08:42 <admin1> i have 50/50 chances of coming in fosdem
15:09:15 <noonedeadpunk> jamesdenton: I mean adding octavia_ovn_octavia_provider_git_install_branch to https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/defaults/repo_packages/openstack_services.yml
15:09:43 <noonedeadpunk> And yes, we also need to decide a scope we want for AA
15:10:03 <jamesdenton> ahhh yes yes, thanks
15:11:08 <noonedeadpunk> I've checked etherpad lately, and we already merged most of things
15:11:14 <noonedeadpunk> #link https://etherpad.opendev.org/p/osa-antelope-ptg
15:11:19 <jamesdenton> woot
15:12:34 <noonedeadpunk> We have huge topic about internal TLS at very least
15:13:20 <noonedeadpunk> Also finilizing skyline is smth we can totally do
15:14:18 <noonedeadpunk> oh, and we also do have huge question about modular libvirt
15:15:11 <noonedeadpunk> And things regaridng CI/functional testing, but that's not blocking releasing at least
15:15:57 <noonedeadpunk> As of functional changes I'd try to minimize them as Zed was quite stressfull
15:16:21 <noonedeadpunk> We always saying about releasing earlier, but never managed to do so :(
15:16:29 <noonedeadpunk> It's mostly me to blame though, I guess
15:16:43 <jrosser> is internal TLS realistic for AA?
15:16:49 <noonedeadpunk> damiandabrowski: ?
15:16:54 <jrosser> like huge and we have not really started
15:17:11 <jamesdenton> noonedeadpunk you're a beast, thank you
15:17:34 <jrosser> i do wonder how much we need to step back and just let the OVN stuff settle
15:17:36 <damiandabrowski> jrosser: yes totally
15:17:42 <damiandabrowski> and i to have started
15:17:47 <damiandabrowski> do*
15:17:57 <jamesdenton> maybe a big docs push for AA?
15:18:09 <noonedeadpunk> yes, this is good ^
15:18:24 <noonedeadpunk> Let me start new etherpad maybe?
15:19:02 <jamesdenton> sure
15:19:41 <damiandabrowski> right now i'm testing if it's worth to configure haproxy services separately in os_ roles rather then preconfigure all of them with haproxy_server
15:20:10 <damiandabrowski> today i deployed all base openstack services like this, but i need to improve few things before I push a change
15:21:37 <noonedeadpunk> #link https://etherpad.opendev.org/p/osa-bobcat-ptg
15:21:51 <noonedeadpunk> decided to start PTG etherpad for tracking these things
15:23:01 <noonedeadpunk> yes, totally jrosser I want also to calm things down with OVN a bit, and maybe do docs and bug fixes mostly
15:23:25 <jrosser> it is frustrating not to be able to resolve moha7 troubles too
15:23:38 <jrosser> its not possible to determine if it is environment trouble or actual bugs
15:24:52 <noonedeadpunk> but as internal tls was started quite a while ago and presumably damiandabrowski will have some time for it, and given there won't be anything really breaking I'd say we can see how this will go
15:25:31 <noonedeadpunk> yeah, true. But I'd say with OVN it's in general hard to tell/debug some things. We also had some step back in using journals for logging
15:25:47 <noonedeadpunk> As example - ovn and gluster that do just local logs
15:26:00 <jamesdenton> jrosser i think a small combination, but likely due to lack of clarity in the docs
15:26:39 <jamesdenton> i will do a deploy now and test the SSL metadata issue mentioned
15:26:58 <jrosser> it is also hard translating bugs/trouble in multinode onto an AIO
15:27:18 <noonedeadpunk> I'd say what worth testing is somehow test ordering issues when config is changed
15:27:34 <jamesdenton> agreed. Hoping to solve that with this MNAIOv2 thing i'm working on, but it's dependent on deploying VMs on OpenStack vs KVM.
15:27:40 <jrosser> or at the end of a fresh deploy, i think thats a really good question
15:27:52 <jrosser> if just letting the playbooks run to success is it working/broken
15:28:26 <noonedeadpunk> I assume it's working, otherwise tempest won't succeed...
15:28:44 <noonedeadpunk> Hm, does octavia leverage metadata in any way?
15:28:59 <noonedeadpunk> as for cirros it's not really required...
15:29:11 <jamesdenton> i don't know - the agent is http based i think
15:29:15 <jamesdenton> no ssh key required afaik
15:29:34 <jrosser> there is possibility of a debug key - not sure how that gets in
15:29:47 <jamesdenton> metadata, but i don't think we test that
15:29:52 <noonedeadpunk> I assume through metadata, but that could be config drive as well
15:30:09 <noonedeadpunk> yeah, so that's good to test...
15:33:06 <NeilHanlon> jamesdenton: random question, any OSV resources you recommend for deep dives/learning?
15:38:19 <jamesdenton> OVS? Hmm, not offhand
15:38:35 <jamesdenton> happy to look
15:38:58 <mgariepy> i think the best way to learn is to have issue that you want to fix .. :D
15:45:31 <NeilHanlon> hehe.. yeah, that's been my learning path so far but I was looking for a more unified/top down approach to the architecture, I guess. sometimes it leaves me scratching my head
15:45:36 <NeilHanlon> and yeah jamesdenton: OVS.. oops :)
15:46:35 <NeilHanlon> this helped.. a little :P https://www.kernel.org/doc/html/latest/networking/openvswitch.html
15:46:38 <jamesdenton> i have sustained surface level knowledge, then i go down a rabbit hole when necessary and promptly forget
15:46:39 <mgariepy> i want to add some doc on how to find specific stuff in the ovn/ovs db
15:47:04 <NeilHanlon> well at least it sounds like it's not just me 😂
15:47:22 <jamesdenton> there's just too much to know!
15:47:46 <NeilHanlon> good company, anyways :)
15:48:04 <mgariepy> https://blog.russellbryant.net/2016/11/11/ovn-logical-flows-and-ovn-trace/
15:48:04 <jamesdenton> :)
15:48:17 <jamesdenton> 6 years ago... is a lifetime :D
15:48:36 <mgariepy> well the base is kinda the same anyway ;p
15:48:55 <mgariepy> and also doc is always outdated ;p haha
15:49:13 <NeilHanlon> problem? buy a <company> license and our experts will fix it for you!
15:49:32 <jamesdenton> juju what?
15:49:43 <mgariepy> yeah.. pay us and we will figure it out to fix it..
15:49:59 <mgariepy> that's how it works.
15:52:52 <NeilHanlon> anyways, sorry for the diversion lol
15:54:15 <johnsom> Octavia defaults to using config drive to get the initial configuration data on an amphora boot. It can use the metadata service, but that was unstable back in the day we developed this (since fixed), so we stuck to config drive.
15:55:02 <noonedeadpunk> thanks johnsom, that explains why we don't see failure in our tests if we have broken metadata :)
15:59:16 <jamesdenton> nice
16:00:39 <opendevreview> James Denton proposed openstack/openstack-ansible master: Add Octavia OVN Provider repo requirements  https://review.opendev.org/c/openstack/openstack-ansible/+/870834
16:02:35 <noonedeadpunk> #endmeeting