| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2017-04-06 | |||
| 18:54:46 | sdague | ? | |
| 18:59:57 | diana_clarke | Anyone have time to put my last nova patch out of its misery? https://review.openstack.org/#/c/447688/ thx! | |
| 19:01:38 | dansmith | I bet sdague wants that one | |
| 19:01:53 | mriedem | sdague: probably | |
| 19:02:19 | stevemar | mriedem: why you gotta break osc for! | |
| 19:02:35 | mriedem | stevemar: novaclient 8.0? | |
| 19:02:41 | stevemar | yah | |
| 19:02:42 | mriedem | stevemar: upper-constraints? | |
| 19:03:04 | stevemar | i assume the gate is fine, someone pinged me from BB about latest pip install of osc is broken | |
| 19:03:08 | stevemar | cause they don't UC | |
| 19:03:18 | mriedem | nuts to them | |
| 19:03:23 | mriedem | i don't work for BB anymore sucka | |
| 19:03:26 | stevemar | :) | |
| 19:03:31 | stevemar | we'll fix it up | |
| 19:04:13 | mriedem | btw, more than 6 months to notice the deprecation warning | |
| 19:04:58 | mriedem | sdague: did anyone from ec2api ever chime in? | |
| 19:05:01 | mriedem | b/c this will break them | |
| 19:05:12 | mriedem | oh i see ftersin did | |
| 19:10:38 | mriedem | sdague: +W | |
| 19:12:36 | mriedem | when can we remove os-cloudpipe? | |
| 19:13:06 | mriedem | macsz: https://blueprints.launchpad.net/nova/+spec/remove-nova-cert | |
| 19:13:10 | mriedem | :( | |
| 19:16:01 | mriedem | i created it | |
| 19:16:15 | macsz | mriedem: ? | |
| 19:16:23 | mriedem | you hadn't created the actual bp in lp | |
| 19:16:47 | macsz | oh, i lost something | |
| 19:18:05 | mriedem | who wants it? https://review.openstack.org/#/c/453859/ | |
| 19:18:18 | mriedem | dansmith: i'll trade you ^ for your workaround patch | |
| 19:19:05 | dansmith | k | |
| 19:19:08 | macsz | waswas wondering what happened but it seems that once more you were faster than me and created the bp, mriedem | |
| 19:19:35 | dansmith | mriedem: heh, that conflicts with my hostapi patch.. damn you | |
| 19:20:02 | mriedem | it shouldn't | |
| 19:20:09 | mriedem | yours doesn't touch the delete path | |
| 19:20:54 | sdague | mriedem: when ever anyone writes the deprecation spec | |
| 19:21:03 | sdague | I am sure that it hasn't worked in years | |
| 19:21:35 | mriedem | i would, but (1) i don't want to and (2) i'm not sure i even understand what it is to explain it and why we want to remove it, except it's not supported | |
| 19:21:44 | mriedem | some kind of direct vpn image download to the vm or something? | |
| 19:22:20 | mriedem | ooo https://www.mirantis.com/blog/cloudpipe-image-creation-automation/ | |
| 19:22:21 | dansmith | mriedem: well, gerrit says it does.. it's fine anyway | |
| 19:22:58 | mriedem | damn the link to the cactus release docs don't work anymore... | |
| 19:25:11 | sdague | mriedem: it all depends on vlan nova network stuff right? which means whenever the great nova-network delete happens it's all definitely bust | |
| 19:26:02 | openstackgerrit | Sujitha proposed openstack/nova master: Add sync_instances action in os-cells API https://review.openstack.org/453366 | |
| 19:26:04 | mriedem | yeah i guess | |
| 19:27:05 | mriedem | so cloudpipe just basically creates a vm and then you ssh into that vm to get into the internal tenant network? | |
| 19:28:27 | mriedem | yeah anyway, nova-network plus unmaintained plus neutron vpnaas | |
| 19:28:30 | mriedem | equals death | |
| 19:33:46 | mriedem | ooo https://www.sebastien-han.fr/blog/2012/06/20/setup-cloud-pipe-vpn-in-openstack/ talks about using nova x509-create-cert which relies on none other than the nova-cert service... | |
| 19:33:52 | mriedem | which we just said we were going to kill | |
| 19:34:18 | mriedem | so, as part of the nova-cert removal, we probably also need to deprecate os-cloudpipe | |
| 19:51:32 | openstackgerrit | Mathieu Gagné proposed openstack/nova master: Add ability to signal and perform online volume size change https://review.openstack.org/454322 | |
| 20:01:27 | openstackgerrit | Sean Dague proposed openstack/nova master: Change livesnapshot to true by default https://review.openstack.org/454323 | |
| 20:08:14 | openstackgerrit | Matt Riedemann proposed openstack/python-novaclient master: Deprecate certs commands and APIs https://review.openstack.org/454326 | |
| 20:08:17 | mriedem | macsz: ^ | |
| 20:09:01 | macsz | mriedem: should i draft a spec for it? | |
| 20:12:11 | mriedem | macsz: for what? | |
| 20:12:17 | mriedem | cloudpipe/ | |
| 20:12:18 | mriedem | sure | |
| 20:12:35 | macsz | or can we smuggle it under the cert deprecation banner? | |
| 20:12:47 | sdague | macsz: I'm pro smuggle | |
| 20:13:06 | mriedem | if we smuggle, we should probably amend the spec | |
| 20:13:11 | sdague | mriedem: yeh | |
| 20:13:14 | macsz | the spec was merged, but i can also do a follow-up patch that modifies the current spec | |
| 20:13:26 | sdague | macsz: ++ an ammend would be great | |
| 20:13:27 | macsz | yeah, shorter way to say what i meant | |
| 20:20:47 | openstackgerrit | Sihan Wang proposed openstack/nova master: Update checking vm state in vmware driver https://review.openstack.org/454328 | |
| 20:22:01 | macsz | mriedem: it seems that os-cloudpipe is already deprecated | |
| 20:22:02 | macsz | https://github.com/openstack/nova/blob/master/api-ref/source/os-cloudpipe.inc | |
| 20:23:13 | mriedem | just in the docs | |
| 20:23:31 | mriedem | it doesn't return an error though on any microversion like 2.36 would for listing networks | |
| 20:24:14 | mriedem | i don't know if we're proposing to just remove it, like os-certificates, or deprecating it with a microversion, but if we remove nova-network and nova-cert, then it seems kind of pointless to do the microversoin | |
| 20:24:16 | mriedem | sdague: ^ thoughts? | |
| 20:26:20 | macsz | doc mentions that os-cloudpipe works only with nova-net, so there is really no point in having it around, with or without nova-cert, it seems | |
| 20:27:16 | mriedem | we still have nova-net | |
| 20:27:20 | mriedem | although | |
| 20:27:24 | mriedem | nova-net is cells v1 only now | |
| 20:27:33 | mriedem | and i assume os-cloudpipe doesn't work with cells v1 | |
| 20:29:06 | mriedem | it might, it's a weird orchestration api that creates an instance for you | |
| 20:29:10 | mriedem | with a configured vpn image | |
| 20:30:04 | mriedem | so the cloudpipe api should have been deprecated with 2.36 when we did the other nova-net stuff, like multinic | |
| 20:30:24 | mriedem | alex_xu: is deprecating the multinic api https://review.openstack.org/#/c/384261/ | |
| 20:30:32 | mriedem | since it's nova-net really | |
| 20:30:41 | mriedem | maybe we should do cloudpipe and multinic in the same spec? | |
| 20:30:42 | openstackgerrit | Sihan Wang proposed openstack/nova master: Update checking vm state in vmware driver https://review.openstack.org/454328 | |
| 20:31:16 | mriedem | but if you need os-certificates to use os-cloudpipe and we remove os-certificates, then... | |
| 20:31:45 | sdague | mriedem: yeh, I feel like we should just couple it to the os-certificates delete | |
| 20:31:50 | mriedem | that's fine | |
| 20:33:31 | macsz | is there a spec for os-certificates? | |
| 20:33:41 | mriedem | dansmith: so i'm trying to think about impacts with your workaround config, and what if any other config options we should note are related to that one, like track_instance_changes | |
| 20:33:46 | mriedem | since i think track_instance_changes is tied to affinity | |
| 20:33:57 | mriedem | macsz: your one for removing nova-cert :) | |
| 20:34:00 | mriedem | remember?! | |
| 20:34:11 | macsz | xD | |
| 20:34:22 | macsz | yeah, i do... :D | |
| 20:34:38 | mriedem | dansmith: i'm trying to sort out where the instance info stuff that the computes send up to the scheduler is used | |
| 20:34:45 | macsz | did not connect the dots between nova-cert and os-certificates ;) | |
| 20:37:26 | openstackgerrit | Maciej Szankin proposed openstack/nova-specs master: Add os-cloudpipe to remove-nova-cert spec https://review.openstack.org/454332 | |
| 20:43:44 | dansmith | mriedem: yeah, so track changes will also not work, so maybe I should mention that in there for the connection | |
| 20:43:55 | mriedem | dansmith: i left a comment about that in the review | |
| 20:43:58 | dansmith | okay | |
| 20:44:01 | mriedem | i'm just looking at how all of this crap gets used | |