| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2021-10-05 | |||
| 16:28:17 | sean-k-mooney | we need to test interservice interaction | |
| 16:28:18 | dansmith | definitely need tempest, IMHO | |
| 16:28:26 | bauzas | oh yes | |
| 16:28:28 | dansmith | functional will definitely not cut it | |
| 16:28:30 | sean-k-mooney | lances intiall testing show we cant boot with a neutron port | |
| 16:28:37 | bauzas | can't see how we could achieve this without tempest | |
| 16:28:49 | sean-k-mooney | because neturon as configured by devstack at lest currently cant send the network plugged event correctly | |
| 16:29:01 | dansmith | sean-k-mooney: is that their fault or ours? | |
| 16:29:03 | sean-k-mooney | so we definetly need to do tempeest integration testing | |
| 16:29:14 | dansmith | seems like it's likely ours | |
| 16:29:15 | bauzas | we need a job | |
| 16:29:19 | sean-k-mooney | dansmith: not sure yet proably a mix of devstack config and our policy | |
| 16:29:32 | dansmith | or maybe a combo I guess. if they use a system-scoped token but need to augment with project maybe | |
| 16:29:34 | dansmith | sean-k-mooney: ack | |
| 16:29:48 | bauzas | and first and foremost, we need people working on it, if so :) | |
| 16:29:52 | sean-k-mooney | i think it enabeld the new policy on our side but did not create the nova user with the right scope and neutron config | |
| 16:30:27 | sean-k-mooney | so we enforced scope but the token neutron used did not have system scope but was an admin token | |
| 16:30:27 | dansmith | sean-k-mooney: honestly, I probably need to think on how that event interface should work | |
| 16:30:40 | dansmith | like maybe a system-scoped token that looks up any instance on the system is okay | |
| 16:31:02 | dansmith | I would normally think that should be project-scoped, because instances are project-scoped and events are tied to instances | |
| 16:31:11 | dansmith | but it's intended to mostly be used by other services, so .. I dunno | |
| 16:31:22 | sean-k-mooney | i think it should be system scope | |
| 16:31:27 | bauzas | do we have sort of guidance from the keystone team about those events ? | |
| 16:31:33 | sean-k-mooney | becasue as you said this is for service to service interaction | |
| 16:31:38 | sean-k-mooney | but ya its tricky | |
| 16:31:39 | bauzas | or is it us just picking what we want ? | |
| 16:31:48 | dansmith | sean-k-mooney: but it's not something you can ever do without a project-scoped resource ... | |
| 16:31:56 | dansmith | bauzas: we should probably consult a bit | |
| 16:32:10 | sean-k-mooney | dansmith: yep which is why its tricky | |
| 16:32:20 | dansmith | this is kinda my problem with system scope, is that it actually doesn't apply to a lot of stuff, because almost everything is a project-scoped resource | |
| 16:32:21 | artom | Can ports ever be system-scope? | |
| 16:32:35 | artom | Instances are obviously project-scope, but Neutron external events have to do with ports as well | |
| 16:32:38 | sean-k-mooney | im a little relucted to say that api should be project-admin however | |
| 16:32:39 | bauzas | if that becomes a goal, we need some owner of this goal, just sayin' :) | |
| 16:32:43 | dansmith | aggregates are the one example of a system-scoped resource I use a lot | |
| 16:32:49 | artom | Is there some funky network topology that can have system-scoped ports? | |
| 16:32:56 | dansmith | sean-k-mooney: that's another thing, definitely doesn't need admin | |
| 16:32:57 | sean-k-mooney | dansmith: it proably shoudl be system-admin with project-ide set | |
| 16:33:13 | dansmith | sean-k-mooney: that's project-scoped, AFAIK | |
| 16:33:20 | dansmith | events don | |
| 16:33:24 | dansmith | don't need to be admin either | |
| 16:33:33 | sean-k-mooney | the event api is admin only | |
| 16:33:48 | dansmith | they don't need to be, and I don't think they initially were | |
| 16:33:49 | sean-k-mooney | since enduser including operators are not ment to call it | |
| 16:34:01 | dansmith | but admin != scope | |
| 16:34:03 | dansmith | anyway | |
| 16:34:07 | dansmith | clearly needs some discussion and thinking | |
| 16:34:10 | sean-k-mooney | we could make it system member | |
| 16:34:17 | sean-k-mooney | so yes | |
| 16:34:25 | sean-k-mooney | we could drop admin but ya | |
| 16:34:29 | bauzas | could we now put our thoughts into https://etherpad.opendev.org/p/nova-yoga-ptg L204 and move to other things ? | |
| 16:34:31 | sean-k-mooney | lets defer for now | |
| 16:34:49 | sean-k-mooney | am sure but we might want a sperate etherpad | |
| 16:35:00 | sean-k-mooney | linked form there to go though this in more detail | |
| 16:35:01 | bauzas | sean-k-mooney: feel free to link to it | |
| 16:35:09 | bauzas | also, this ties to my other point | |
| 16:35:28 | bauzas | for the moment, we don't have cinder, neutron and keystone cross project sessions at the PTG | |
| 16:35:52 | bauzas | I'd recommend us to engage some talks with the keystone team so we could wrap some stuff about RBAC during the PTG :) | |
| 16:35:54 | bauzas | just sayin' | |
| 16:35:58 | sean-k-mooney | if we had a neutorn one i have one potential topic | |
| 16:36:11 | sean-k-mooney | https://etherpad.opendev.org/p/ovn_live_migration | |
| 16:36:17 | bauzas | ok, so, I guess I can ask the neutron folks and the keystone folks at least | |
| 16:36:23 | bauzas | for timeslots | |
| 16:36:55 | gibi | I don't have any neutron topic at the momement | |
| 16:36:56 | bauzas | lyarwood or others, do people feel wanting to discuss some cinder topics ? | |
| 16:37:21 | artom | I believe he dropped off early today, might want to check with him async | |
| 16:37:25 | sean-k-mooney | i think lee had one topic but lee wont be able to attend the PTG | |
| 16:37:26 | bauzas | gibi: I'll ask the neutron team if they have nova-specific concerns too | |
| 16:37:45 | bauzas | I know lyarwood wants to address the Manila thing | |
| 16:37:46 | gibi | sure | |
| 16:37:49 | sean-k-mooney | Removing os-volume proxy API during Yoga | |
| 16:37:59 | sean-k-mooney | that was the one that i tought lee might bring up | |
| 16:38:10 | bauzas | but here, the question is, do we need the Cinder team for discussing those topics ? | |
| 16:38:14 | artom | That doesn't really affect Cinder, does it? | |
| 16:38:24 | bauzas | artom: that's my question | |
| 16:38:37 | bauzas | do we have topics to discuss that engage the cinder team ? | |
| 16:38:44 | bauzas | I can leave this for next week | |
| 16:39:00 | sean-k-mooney | the manila thing beign supprot for virtio-fs | |
| 16:39:18 | sean-k-mooney | if so then no there is no interation nwith cinder in that case | |
| 16:39:44 | bauzas | for the keystone x-p session, do you think it would be nice for us getting the whole crew or only publicize our discussions about Secure RBAC so people like lance would join ? | |
| 16:40:52 | sean-k-mooney | assuming unified limits work will continue we might want to discuss that too but im not sure if there is anything left on the keystone side | |
| 16:41:18 | sean-k-mooney | dansmith: you wanted some changes to the lib interface i think but not sure if that needs to be covered at the ptg | |
| 16:41:34 | dansmith | no, I don't think soi | |
| 16:41:50 | dansmith | I also think that the issues have been resolved with some of my recent changes to oslo.limit, | |
| 16:41:53 | dansmith | but I need to circle back | |
| 16:42:00 | dansmith | regardless, nothing needing lots of discussion I don't think | |
| 16:42:11 | bauzas | yeah | |
| 16:42:22 | bauzas | so this is rbac only | |
| 16:42:39 | bauzas | we'll figure that out | |
| 16:42:50 | bauzas | moving on | |
| 16:42:53 | bauzas | #topic Stable Branches | |
| 16:42:59 | bauzas | Nova Wallaby 23.1.0 release is proposed #link https://review.opendev.org/c/openstack/releases/+/809000 | |
| 16:43:05 | bauzas | Nova Victoria 22.3.0 release is proposed #link https://review.opendev.org/c/openstack/releases/+/812291 | |
| 16:43:11 | bauzas | Nova Ussuri 21.2.3 release is proposed #link https://review.opendev.org/c/openstack/releases/+/812292 | |
| 16:43:17 | bauzas | elodilles: other things to mention ? | |
| 16:43:31 | elodilles | i'll ping release folks to review those tomorrow | |
| 16:43:49 | bauzas | cool | |
| 16:43:50 | elodilles | and maybe we could merge this: https://review.opendev.org/c/openstack/nova/+/810461 | |
| 16:44:02 | bauzas | oh | |
| 16:44:16 | elodilles | as far as i remember we agreed to accept this | |