[Other] Items to be discussed in Team IaaS

[fkr]

Items to be discussed in Sprint Planning / Refinement Team IaaS (Team 1)

• Prepare a custom playbook to update a firmeware via LFVS osism/issues#140
• Discuss the introduction of a new security guide osism/issues#189
• Implement sosreport-plugin-osism osism/issues#47 (needs refinement)
• Add external Ansible Collections and Ansible Roles to the SBOM Repository osism/issues#191
• Maintainers needed terraform-provider-openstack/terraform-provider-openstack#1376

[berendt]

• Discuss if it makes sense to use newer Libvirt/QEMU versions osism/issues#169

[horazont]

In Yaook, we came across this topic: https://gitlab.com/yaook/operator/-/issues/272. Is this something we want to discuss in Team 1 some time maybe? I'd like to hear your experience regarding this and tips how we can improve our status quo.

[horazont]

Another topic from Yaook (yes, I'm cleaning up issues): https://gitlab.com/yaook/operator/-/issues/18. How does osism/kolla-ansible handle this? Is there any prepared guideline how to constrain the different nova/neutron/cinder keystone service accounts so that they can only do exactly what they are allowed to do? The background is to limit the damage credentials which have been exposed in some way can do.

[fkr]

• Maintainers needed terraform-provider-openstack/terraform-provider-openstack#1376

[berendt]

• Automatic renewal of (letsencrypt) certificates osism/issues#215

[berendt]

• kolla/kolla-ansible: discuss migration from Docker to Podman osism/issues#223

[berendt]

• Discuss the ceph-ansible deprecation osism/issues#225 - will be scheduled for CW 29 by @fkr

[fkr]

• see that Refactor code: Create a class for the Image-Manager osism/openstack-image-manager#243 is finished up

[fkr]

• benchmarks from PS reg. customer facing disk encryption

[fkr]

• OIF 2022 Watchlist - https://input.osb-alliance.de/p/20220617-oif-summit-watchlist

[fkr]

• Monasca - https://wiki.openstack.org/wiki/Monasca

[fkr]

• hands-on session osism inventories merging / multi-region deployments - 13.07. - 12:05 - @fkr will send invite to scs-tech

[fkr]

• fix broken links docs#9
• Add project for Harbor deployment docs#12

[fkr]

• zuul for scs

[berendt]

• Discuss if the elasticsearch-curator service should be enabled by default osism/issues#272

[fkr]

@berendt shouldn't this (osism/issues#272) be discussed in Team OPS tomorrow?

[berendt]

@berendt shouldn't this (osism/issues#272) be discussed in Team OPS tomorrow?

Not sure about this. It affects the ES service of the infrastructure layer.

[fkr]

Discussion is ongoing and also moved to SIG monitoring. Thanks @berendt for raising it.

[berendt]

• openstack: deprecate some openstack services osism/release#586

* Heat is deprecated in favor of more generic Infrastructure as Code tools like Terraform
   as of now and will be removed in the future (exact removal date is not yet known)
 * Magnum (currently available as Technical Preview) will be removed in favor of Gardener and
   Cluster API
 * Mistral (currently available as Technical Preview) will be removed
 * Swift (currently available as Technical Preview) will be removed in favor of Ceph RGW
 * Trove (currently available as Technical Preview) will be removed in favor of Kubernetes
   database operators

[berendt]

• Zun Images missing osism/issues#360

[berendt]

• Discuss use of Keycloak osism/issues#361

[berendt]

• Check how local disks are deleted in the Nova service osism/issues#369

[berendt]

• Compare performance of Ceph with and without encryption  osism/issues#368

[berendt]

• How do we continue with the Flavor Manager? osism/issues#370

[flyersa]

• openstack: deprecate some openstack services osism/release#586

* Heat is deprecated in favor of more generic Infrastructure as Code tools like Terraform
   as of now and will be removed in the future (exact removal date is not yet known)
 * Magnum (currently available as Technical Preview) will be removed in favor of Gardener and
   Cluster API
 * Mistral (currently available as Technical Preview) will be removed
 * Swift (currently available as Technical Preview) will be removed in favor of Ceph RGW
 * Trove (currently available as Technical Preview) will be removed in favor of Kubernetes
   database operators

Why do you want to remove mistral? We have clients as example that use mistral to schedule automated snapshots and backups.

[fkr]

@flyersa afaik the reason is that there is a proposal upstream to deprecate Mistral: https://review.opendev.org/c/openstack/governance/+/866562

See this thread on OpenStack discuss: https://lists.openstack.org/pipermail/openstack-discuss/2022-December/031388.html

However, apparently OVH is stepping up to maintain mistral, so this could change things.

[berendt]

• have a look at https://github.com/ovh/distronaut (https://distronaut.ovh)
• decision for Upgrade OpenStack to Zed osism/cloud-in-a-box#31

[berendt]

• Discuss use of MAAS osism/issues#427

[berendt]

• Check if it is possible to deactivate the sever admin password in Nova osism/issues#377

[berendt]

• How to best run OpenStack trademark tests osism/issues#425

[berendt]

• Does it makes sense to enforce the use of at least 2 DNS name servers osism/issues#309

[berendt]

• Provide health check for all containers osism/issues#433

[berendt]

• Check if we have to replace Grafana with something else osism/issues#434

[berendt]

• Evaluate magnum-cluster-api osism/issues#436 (also related to Team Kubernetes)

[fkr]

obsoleted by hedgedoc and the meeting preps there