Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2017-04-06
19:19:05 dansmith k
19:19:08 macsz waswas wondering what happened but it seems that once more you were faster than me and created the bp, mriedem
19:19:35 dansmith mriedem: heh, that conflicts with my hostapi patch.. damn you
19:20:02 mriedem it shouldn't
19:20:09 mriedem yours doesn't touch the delete path
19:20:54 sdague mriedem: when ever anyone writes the deprecation spec
19:21:03 sdague I am sure that it hasn't worked in years
19:21:35 mriedem i would, but (1) i don't want to and (2) i'm not sure i even understand what it is to explain it and why we want to remove it, except it's not supported
19:21:44 mriedem some kind of direct vpn image download to the vm or something?
19:22:20 mriedem ooo https://www.mirantis.com/blog/cloudpipe-image-creation-automation/
19:22:21 dansmith mriedem: well, gerrit says it does.. it's fine anyway
19:22:58 mriedem damn the link to the cactus release docs don't work anymore...
19:25:11 sdague mriedem: it all depends on vlan nova network stuff right? which means whenever the great nova-network delete happens it's all definitely bust
19:26:02 openstackgerrit Sujitha proposed openstack/nova master: Add sync_instances action in os-cells API https://review.openstack.org/453366
19:26:04 mriedem yeah i guess
19:27:05 mriedem so cloudpipe just basically creates a vm and then you ssh into that vm to get into the internal tenant network?
19:28:27 mriedem yeah anyway, nova-network plus unmaintained plus neutron vpnaas
19:28:30 mriedem equals death
19:33:46 mriedem ooo https://www.sebastien-han.fr/blog/2012/06/20/setup-cloud-pipe-vpn-in-openstack/ talks about using nova x509-create-cert which relies on none other than the nova-cert service...
19:33:52 mriedem which we just said we were going to kill
19:34:18 mriedem so, as part of the nova-cert removal, we probably also need to deprecate os-cloudpipe
19:51:32 openstackgerrit Mathieu Gagné proposed openstack/nova master: Add ability to signal and perform online volume size change https://review.openstack.org/454322
20:01:27 openstackgerrit Sean Dague proposed openstack/nova master: Change livesnapshot to true by default https://review.openstack.org/454323
20:08:14 openstackgerrit Matt Riedemann proposed openstack/python-novaclient master: Deprecate certs commands and APIs https://review.openstack.org/454326
20:08:17 mriedem macsz: ^
20:09:01 macsz mriedem: should i draft a spec for it?
20:12:11 mriedem macsz: for what?
20:12:17 mriedem cloudpipe/
20:12:18 mriedem sure
20:12:35 macsz or can we smuggle it under the cert deprecation banner?
20:12:47 sdague macsz: I'm pro smuggle
20:13:06 mriedem if we smuggle, we should probably amend the spec
20:13:11 sdague mriedem: yeh
20:13:14 macsz the spec was merged, but i can also do a follow-up patch that modifies the current spec
20:13:26 sdague macsz: ++ an ammend would be great
20:13:27 macsz yeah, shorter way to say what i meant
20:20:47 openstackgerrit Sihan Wang proposed openstack/nova master: Update checking vm state in vmware driver https://review.openstack.org/454328
20:22:01 macsz mriedem: it seems that os-cloudpipe is already deprecated
20:22:02 macsz https://github.com/openstack/nova/blob/master/api-ref/source/os-cloudpipe.inc
20:23:13 mriedem just in the docs
20:23:31 mriedem it doesn't return an error though on any microversion like 2.36 would for listing networks
20:24:14 mriedem i don't know if we're proposing to just remove it, like os-certificates, or deprecating it with a microversion, but if we remove nova-network and nova-cert, then it seems kind of pointless to do the microversoin
20:24:16 mriedem sdague: ^ thoughts?
20:26:20 macsz doc mentions that os-cloudpipe works only with nova-net, so there is really no point in having it around, with or without nova-cert, it seems
20:27:16 mriedem we still have nova-net
20:27:20 mriedem although
20:27:24 mriedem nova-net is cells v1 only now
20:27:33 mriedem and i assume os-cloudpipe doesn't work with cells v1
20:29:06 mriedem it might, it's a weird orchestration api that creates an instance for you
20:29:10 mriedem with a configured vpn image
20:30:04 mriedem so the cloudpipe api should have been deprecated with 2.36 when we did the other nova-net stuff, like multinic
20:30:24 mriedem alex_xu: is deprecating the multinic api https://review.openstack.org/#/c/384261/
20:30:32 mriedem since it's nova-net really
20:30:41 mriedem maybe we should do cloudpipe and multinic in the same spec?
20:30:42 openstackgerrit Sihan Wang proposed openstack/nova master: Update checking vm state in vmware driver https://review.openstack.org/454328
20:31:16 mriedem but if you need os-certificates to use os-cloudpipe and we remove os-certificates, then...
20:31:45 sdague mriedem: yeh, I feel like we should just couple it to the os-certificates delete
20:31:50 mriedem that's fine
20:33:31 macsz is there a spec for os-certificates?
20:33:41 mriedem dansmith: so i'm trying to think about impacts with your workaround config, and what if any other config options we should note are related to that one, like track_instance_changes
20:33:46 mriedem since i think track_instance_changes is tied to affinity
20:33:57 mriedem macsz: your one for removing nova-cert :)
20:34:00 mriedem remember?!
20:34:11 macsz xD
20:34:22 macsz yeah, i do... :D
20:34:38 mriedem dansmith: i'm trying to sort out where the instance info stuff that the computes send up to the scheduler is used
20:34:45 macsz did not connect the dots between nova-cert and os-certificates ;)
20:37:26 openstackgerrit Maciej Szankin proposed openstack/nova-specs master: Add os-cloudpipe to remove-nova-cert spec https://review.openstack.org/454332
20:43:44 dansmith mriedem: yeah, so track changes will also not work, so maybe I should mention that in there for the connection
20:43:55 mriedem dansmith: i left a comment about that in the review
20:43:58 dansmith okay
20:44:01 mriedem i'm just looking at how all of this crap gets used
20:44:13 dansmith it's fairly terribad
20:44:13 mriedem and all of it is just for the affinity/anti-affinity filters/weighers it looks like
20:44:19 dansmith right
20:44:21 dansmith it's nuts
20:44:22 mriedem so a ton of code just for those
20:44:26 dansmith right
20:44:51 mriedem ok i also need to update https://review.openstack.org/#/c/453916/ since i didn't realize the compute manager and host manager were doing the exact same thing in the init
20:44:55 dansmith claims in the scheduler will let us do affinity without all that stuff
20:45:17 cdent mriedem: I haven't caught up on backlog, but are you looking at the stuff that does affinity based on live host/instance info?
20:45:28 mriedem so if you're using caching scheduler or not using these filters/weighers, and not paying attention to default options, you could have all of this extra rpc traffic and db lookups for nothing
20:45:47 mriedem cdent: it's the instance info stuff in the host manager and scheduler filter yeah
20:46:13 dansmith this mess is the source of my tweet from last week :)
20:46:17 mriedem dansmith: like https://github.com/openstack/nova/blob/master/nova/scheduler/host_manager.py#L731
20:46:31 mriedem if we knew you weren't using those filters/weighers, that could just be a noop
20:46:37 mriedem but, those are defaults so i guess...
20:46:47 cdent those are the things that make me say that we'll never have a fully single transaction placement engine
20:46:48 dansmith mriedem: well, also,
20:46:55 dansmith mriedem: compute sends instance info when an instance boots,
20:47:03 dansmith mriedem: but host manager just uses that as a trigger to re-query the db
20:47:05 dansmith it's madness
20:47:20 mriedem to refresh it's cache right?
20:47:36 dansmith yeah
20:47:37 dansmith but it sends the whole instance,
20:47:40 dansmith and we just ignore it and re-query
20:47:43 dansmith unless it sends all of them,
20:47:45 dansmith and then we assume it's right
20:48:07 mriedem cripes
20:48:09 dansmith it's very complicated and wasteful

Earlier   Later