| *** zzzeek has quit IRC | 00:01 | |
| *** MentalSiege has quit IRC | 00:02 | |
| *** zzzeek has joined #openstack-ironic | 00:02 | |
| *** tosky has quit IRC | 00:27 | |
| *** ianychoi__ has quit IRC | 00:37 | |
| *** ianychoi__ has joined #openstack-ironic | 00:37 | |
| *** pmannidi has quit IRC | 00:40 | |
| *** pmannidi has joined #openstack-ironic | 00:42 | |
| *** zzzeek has quit IRC | 01:33 | |
| *** zzzeek has joined #openstack-ironic | 01:34 | |
| *** zzzeek has quit IRC | 01:45 | |
| *** zzzeek has joined #openstack-ironic | 01:48 | |
| *** pmannidi has quit IRC | 01:56 | |
| *** zzzeek has quit IRC | 01:57 | |
| *** pmannidi has joined #openstack-ironic | 01:58 | |
| *** zzzeek has joined #openstack-ironic | 01:59 | |
| *** tzumainn has quit IRC | 02:26 | |
| *** lbragstad has quit IRC | 02:35 | |
| *** pmannidi has quit IRC | 03:02 | |
| *** pmannidi has joined #openstack-ironic | 03:04 | |
| *** lbragstad has joined #openstack-ironic | 03:15 | |
| *** mkrai has joined #openstack-ironic | 03:18 | |
| *** rcernin has quit IRC | 03:24 | |
| *** rcernin has joined #openstack-ironic | 03:27 | |
| *** pmannidi has quit IRC | 03:43 | |
| *** zzzeek has quit IRC | 04:08 | |
| *** zzzeek has joined #openstack-ironic | 04:09 | |
| *** monica_pardhi has joined #openstack-ironic | 05:27 | |
| *** mkrai has quit IRC | 05:37 | |
| *** mkrai has joined #openstack-ironic | 05:37 | |
| *** monica_pardhi has quit IRC | 06:02 | |
| openstackgerrit | Arun S A G proposed openstack/ironic master: Add anaconda configuration and template https://review.opendev.org/c/openstack/ironic/+/772166 | 06:54 |
|---|---|---|
| *** ricolin has quit IRC | 06:55 | |
| *** ricolin has joined #openstack-ironic | 07:04 | |
| *** uzumaki has joined #openstack-ironic | 07:10 | |
| *** mkrai has quit IRC | 07:10 | |
| openstackgerrit | Yogesh proposed openstack/ironic master: WIP Add idrac HW type IPMI interface support https://review.opendev.org/c/openstack/ironic/+/771862 | 07:37 |
| arne_wiebalck | Good morning, ironic! | 07:49 |
| *** rpittau|afk is now known as rpittau | 07:57 | |
| rpittau | good morning ironic! o/ | 07:57 |
| openstackgerrit | Merged openstack/sushy-tools master: Move some test requirements to tox.ini https://review.opendev.org/c/openstack/sushy-tools/+/771945 | 07:57 |
| *** rcernin has quit IRC | 07:57 | |
| *** vesper11 has joined #openstack-ironic | 07:58 | |
| *** rcernin has joined #openstack-ironic | 08:14 | |
| *** rcernin has quit IRC | 08:19 | |
| *** monica_pardhi has joined #openstack-ironic | 08:21 | |
| *** rcernin has joined #openstack-ironic | 08:26 | |
| *** vesper11 has quit IRC | 08:30 | |
| *** rcernin has quit IRC | 08:32 | |
| *** mkrai has joined #openstack-ironic | 08:36 | |
| *** dougsz has joined #openstack-ironic | 08:37 | |
| *** tosky has joined #openstack-ironic | 08:41 | |
| *** rcernin has joined #openstack-ironic | 08:44 | |
| *** rcernin has quit IRC | 08:50 | |
| *** mgoddard has quit IRC | 08:51 | |
| *** mgoddard has joined #openstack-ironic | 08:51 | |
| *** rcernin has joined #openstack-ironic | 09:01 | |
| *** rcernin has quit IRC | 09:06 | |
| *** lucasagomes has joined #openstack-ironic | 09:06 | |
| *** monica_pardhi has quit IRC | 09:15 | |
| *** ociuhandu has joined #openstack-ironic | 09:21 | |
| *** ociuhandu has quit IRC | 09:22 | |
| *** ociuhandu has joined #openstack-ironic | 09:23 | |
| *** rcernin has joined #openstack-ironic | 09:27 | |
| *** JayF has quit IRC | 09:32 | |
| *** uzumaki has quit IRC | 09:32 | |
| *** derekh has joined #openstack-ironic | 09:32 | |
| *** ociuhandu has quit IRC | 09:33 | |
| *** JayF has joined #openstack-ironic | 09:36 | |
| *** ociuhandu has joined #openstack-ironic | 09:40 | |
| *** ociuhandu has quit IRC | 09:40 | |
| *** ociuhandu has joined #openstack-ironic | 09:41 | |
| *** rcernin has quit IRC | 09:43 | |
| *** hjensas|afk is now known as hjensas | 09:44 | |
| *** dtantsur|afk is now known as dtantsur | 10:01 | |
| dtantsur | morning, happy Friday | 10:02 |
| dtantsur | SPUC anyone? rpittau, ajya, arne_wiebalck? | 10:02 |
| *** mkrai has quit IRC | 10:09 | |
| *** monica_pardhi has joined #openstack-ironic | 10:11 | |
| openstackgerrit | Yogesh proposed openstack/ironic master: WIP Add idrac HW type IPMI interface support https://review.opendev.org/c/openstack/ironic/+/771862 | 10:11 |
| arne_wiebalck | dtantsur: another meeting, sorry | 10:17 |
| *** ociuhandu has quit IRC | 10:18 | |
| *** rcernin has joined #openstack-ironic | 10:19 | |
| rpittau | I'm going to skip it today, sorry :/ | 10:19 |
| *** rcernin has quit IRC | 10:21 | |
| *** mushrushu has quit IRC | 10:22 | |
| *** mushrushu has joined #openstack-ironic | 10:24 | |
| *** ociuhandu has joined #openstack-ironic | 10:29 | |
| *** ociuhandu has quit IRC | 10:31 | |
| *** ociuhandu has joined #openstack-ironic | 10:31 | |
| *** monica_pardhi has quit IRC | 10:37 | |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Prevent redfish-virtual-media from being used with Dell nodes https://review.opendev.org/c/openstack/ironic/+/771619 | 11:08 |
| dtantsur | iurygregory, ajya, ptal ^^ | 11:08 |
| dtantsur | oh, forgot to update the commit message, one sec | 11:08 |
| openstackgerrit | Dmitry Tantsur proposed openstack/ironic master: Prevent redfish-virtual-media from being used with Dell nodes https://review.opendev.org/c/openstack/ironic/+/771619 | 11:09 |
| dtantsur | now ^^^ | 11:09 |
| *** k_mouza has joined #openstack-ironic | 11:23 | |
| iurygregory | dtantsur, ack | 11:29 |
| iurygregory | good morning Ironic, happy friday | 11:29 |
| janders | hey iurygregory o/ | 11:29 |
| janders | Happy Friday! | 11:29 |
| iurygregory | janders, o/ | 11:32 |
| *** anuradha1904 has joined #openstack-ironic | 11:34 | |
| *** ociuhandu has quit IRC | 11:45 | |
| *** ociuhandu has joined #openstack-ironic | 12:00 | |
| *** ociuhandu has quit IRC | 12:06 | |
| *** monica_pardhi has joined #openstack-ironic | 12:08 | |
| *** ociuhandu has joined #openstack-ironic | 12:14 | |
| *** ociuhandu has quit IRC | 12:18 | |
| *** ociuhandu has joined #openstack-ironic | 12:19 | |
| *** ociuhandu has quit IRC | 12:19 | |
| *** ociuhandu has joined #openstack-ironic | 12:20 | |
| *** monica_pardhi has quit IRC | 12:20 | |
| *** ociuhandu has quit IRC | 12:25 | |
| *** ociuhandu has joined #openstack-ironic | 12:31 | |
| *** ociuhandu has quit IRC | 12:35 | |
| *** ociuhandu has joined #openstack-ironic | 12:46 | |
| openstackgerrit | Iury Gregory Melo Ferreira proposed openstack/bifrost stable/train: Use tag for ipa-builder https://review.opendev.org/c/openstack/bifrost/+/774237 | 12:46 |
| iurygregory | rpittau, I think this will probably help with the problem we have in the bifrost job in https://review.opendev.org/c/openstack/ironic-inspector/+/773332 | 12:47 |
| *** ociuhandu has quit IRC | 12:53 | |
| *** lbragstad_ has joined #openstack-ironic | 12:56 | |
| *** lbragstad has quit IRC | 12:56 | |
| *** ociuhandu has joined #openstack-ironic | 13:03 | |
| *** ociuhandu has quit IRC | 13:03 | |
| *** ociuhandu has joined #openstack-ironic | 13:04 | |
| *** ociuhandu has quit IRC | 13:11 | |
| *** ociuhandu has joined #openstack-ironic | 13:12 | |
| *** ociuhandu has quit IRC | 13:12 | |
| *** ociuhandu has joined #openstack-ironic | 13:20 | |
| iurygregory | bifrost-integration-tinyipa-ubuntu-xenial worked but we have some jobs that are broken =( | 13:22 |
| *** ociuhandu has quit IRC | 13:24 | |
| *** uzumaki has joined #openstack-ironic | 13:30 | |
| janders | see you Ironic - have a great weekend everyone o/ | 13:31 |
| dtantsur | see you janders | 13:31 |
| *** uzumaki has quit IRC | 13:36 | |
| rpittau | iurygregory: I doubt bifrost works in train as it is, at least centos8 won't work for sure | 13:36 |
| rpittau | iurygregory: you also need to remove lower-constraints job | 13:37 |
| *** ociuhandu has joined #openstack-ironic | 13:37 | |
| *** paras33__ has quit IRC | 13:42 | |
| *** ociuhandu has quit IRC | 13:47 | |
| *** ociuhandu has joined #openstack-ironic | 13:48 | |
| *** tkajinam has quit IRC | 13:50 | |
| iurygregory | rpittau, so maybe we can put centos8 non-voting and try to remove the l-c job? wdyt? | 13:51 |
| rpittau | iurygregory: yeah, we could, also opensuse doesn't seem very happy :/ | 13:51 |
| iurygregory | yeah | 13:52 |
| dtantsur | opensuse should be non-voting at this point | 13:52 |
| dtantsur | I don't feel easy making centos8 non-voting, because if it's not passing, it pretty much means bifrost is broken | 13:52 |
| rpittau | dtantsur: me too, but bifrost is broken in centos8 in train | 13:53 |
| rpittau | I'm still having issues in ussuri too | 13:54 |
| *** ociuhandu has quit IRC | 13:55 | |
| dtantsur | this is bad | 13:57 |
| dtantsur | do you have a rough case why? | 13:57 |
| *** ociuhandu has joined #openstack-ironic | 13:57 | |
| rpittau | so far I ended up backporting some fixes from victoria that make things work until it tries to load the ipa ramdisk | 13:58 |
| rpittau | I did some troubleshooting and it seems it doesn't load correctly from nginx | 13:59 |
| rpittau | it could be firewall, although so far I didn't find anything wrong there | 13:59 |
| rpittau | for example the zones look ok https://cc04af0204f1f05f9d99-2ff8f9467c39881ef83876a3ff9f514b.ssl.cf2.rackcdn.com/766742/14/check/bifrost-integration-tinyipa-centos-8/c5f4f6b/logs/firewalld-zones.log | 14:00 |
| rpittau | one interesting thing is the difference between the nginx access log files between ussuri and victoria | 14:04 |
| rpittau | http://paste.openstack.org/show/802386/ | 14:06 |
| iurygregory | wow | 14:07 |
| dtantsur | well, quite clearly the machine cannot PXE boot | 14:07 |
| dtantsur | on Ussuri | 14:07 |
| dtantsur | hence you only see accesses from Ironic | 14:08 |
| *** ociuhandu has quit IRC | 14:09 | |
| rpittau | yeah | 14:09 |
| rpittau | I'm trying to understand why :) | 14:09 |
| *** hjensas has quit IRC | 14:11 | |
| TheJulia | good morning | 14:13 |
| *** rloo has joined #openstack-ironic | 14:13 | |
| *** tzumainn has joined #openstack-ironic | 14:14 | |
| dtantsur | good Friday morning TheJulia | 14:21 |
| *** tosin has joined #openstack-ironic | 14:29 | |
| TheJulia | good morning | 14:29 |
| TheJulia | rloo: replied to the spec comments | 14:29 |
| *** lmcgann has joined #openstack-ironic | 14:30 | |
| rloo | TheJulia: thx! will look in the next hour. | 14:30 |
| openstackgerrit | Merged openstack/ironic master: ilo: do not change deploy_boot_mode in instance_info https://review.opendev.org/c/openstack/ironic/+/773631 | 14:30 |
| TheJulia | rloo: I'll try to rev the entire thing today, I think we're on the same page but I hope that all of the contextual question answers make sense at this poitn | 14:31 |
| TheJulia | Any objections to a Monday review jam for US/APAC and then Tuesday morning for EMEA ? | 14:33 |
| rloo | TheJulia: :) I think it is important to understand, at least at a high level, because this will inform what the default settings will be. I worry about 'corner cases' that we may have missed, but the spec is quite thorough so hopefully... | 14:33 |
| rloo | ah... good question. | 14:33 |
| TheJulia | rloo: and I've been working on the policy code in parallel and having to think through things multiple times | 14:33 |
| rloo | ok, i've got a lot on my plate but i'll make time on Monday for this :) | 14:34 |
| *** ociuhandu has joined #openstack-ironic | 14:34 | |
| *** k_mouza has quit IRC | 14:44 | |
| *** k_mouza has joined #openstack-ironic | 14:44 | |
| TheJulia | https://wiki.openstack.org/wiki/Meetings/Ironic#Review_Jams <-- | 14:50 |
| *** paras333 has joined #openstack-ironic | 14:53 | |
| rpittau | dtantsur: bifrost ussuri testing: running the same comamnd twice, one right after the first, with NO changes, works | 15:02 |
| rpittau | can I scream ? | 15:02 |
| *** lbragstad_ is now known as lbragstad | 15:03 | |
| TheJulia | sounds like ansible? | 15:07 |
| *** MentalSiege has joined #openstack-ironic | 15:10 | |
| rpittau | heh I don't know, the version is exactly the same | 15:16 |
| rpittau | there are no so many differences | 15:16 |
| rpittau | I'll check again on monday | 15:16 |
| rpittau | done | 15:17 |
| rpittau | wrong window ... | 15:17 |
| rpittau | ok I'm tired and the neck is killing me | 15:17 |
| rpittau | I guess I'll stop here | 15:17 |
| rpittau | have a great weekend everyone! o/ | 15:17 |
| *** rpittau is now known as rpittau|afk | 15:17 | |
| TheJulia | o/ | 15:20 |
| *** ociuhandu has quit IRC | 15:32 | |
| *** ociuhandu has joined #openstack-ironic | 15:33 | |
| *** ociuhandu has quit IRC | 15:38 | |
| rloo | TheJulia: I may not be able to do the monday review jam (i have another meeting then so will see). since the spec is the first thing, ping me when updated and I'll do the +2 dance. | 15:50 |
| TheJulia | rloo: ack, will do | 15:51 |
| TheJulia | rloo: thanks! | 15:51 |
| rloo | TheJulia: thank YOU for all this work so far! | 15:51 |
| TheJulia | Thanks, I'm glad it is appreciated, unfortunately it as also eaten away at my review bandwidth this cycle :( | 15:52 |
| TheJulia | but, it is best to just try and get as much of the rbac stuff done at once | 15:52 |
| TheJulia | Especially given all the potential new usages down the road. I'd hate to chase it for years. | 15:52 |
| rloo | understood. which is why we prob need to just whack it out the door. or maybe it is ballpark... | 15:53 |
| *** MentalSiege has quit IRC | 15:53 | |
| TheJulia | It is honestly feeling like ballpark, even though it is a huge chain of patches | 15:55 |
| TheJulia | I had a call with someone earlier in the week who kind of echoed the "oh this would solve so many things" so I think it actually positions ironic nicely in the long term | 15:56 |
| *** MentalSiege has joined #openstack-ironic | 15:56 | |
| *** paras333 has quit IRC | 16:00 | |
| *** ociuhandu has joined #openstack-ironic | 16:00 | |
| *** ociuhandu has quit IRC | 16:00 | |
| *** ociuhandu has joined #openstack-ironic | 16:01 | |
| *** ociuhandu has quit IRC | 16:05 | |
| *** ociuhandu has joined #openstack-ironic | 16:06 | |
| *** ociuhandu has quit IRC | 16:06 | |
| *** ociuhandu_ has joined #openstack-ironic | 16:06 | |
| *** tosky has quit IRC | 16:29 | |
| *** k_mouza_ has joined #openstack-ironic | 16:36 | |
| *** k_mouza has quit IRC | 16:37 | |
| *** mkowalski_ has quit IRC | 16:41 | |
| *** lucasagomes has quit IRC | 17:00 | |
| dtantsur | TheJulia, JayF, rloo, SPUC? | 17:01 |
| JayF | yes, shortly | 17:01 |
| TheJulia | dtantsur: on another call at the moment | 17:03 |
| *** ociuhandu_ has quit IRC | 17:05 | |
| *** mkowalski_ has joined #openstack-ironic | 17:05 | |
| *** ociuhandu has joined #openstack-ironic | 17:08 | |
| *** ociuhandu has quit IRC | 17:08 | |
| viks____ | finally i got ssh working with config-drive... thanx to TheJulia arne_wiebalck rpittau|afk dtantsur ... | 17:11 |
| *** mkowalski_ has quit IRC | 17:12 | |
| viks____ | however hw to set password for root? for non baremetal, i use something like `nova set-password d6a49e0f-0405-43a5-8609-97ee8484a2e0` in case of non-baremetal vm's which does not seem to be working with baremetal.. so what's the recommended approach in case of baremetal? | 17:14 |
| *** ociuhandu has joined #openstack-ironic | 17:15 | |
| *** mkowalski_ has joined #openstack-ironic | 17:18 | |
| arne_wiebalck | viks____: that's great news; for the root password: we use a key for instantiation and have a config management system (Puppet in our case) to configure and manage the root pw and access | 17:19 |
| arne_wiebalck | have a great week-end everyone o/ | 17:20 |
| *** ociuhandu has quit IRC | 17:25 | |
| *** ociuhandu has joined #openstack-ironic | 17:26 | |
| viks____ | arne_wiebalck: you mean to say, puppet agent will be running on the baremetal instance, you push the root passwd via puppet server? | 17:31 |
| *** dougsz has quit IRC | 17:31 | |
| *** ociuhandu has quit IRC | 17:47 | |
| *** ociuhandu has joined #openstack-ironic | 17:49 | |
| arne_wiebalck | viks____: yes, but (in our case) the root pw is more a fallback: puppet configures kerberos access for all authorised users (all this is mostly to say that we do not push a root pw via openstack :-) | 17:53 |
| *** ociuhandu_ has joined #openstack-ironic | 17:57 | |
| *** ociuhandu has quit IRC | 18:01 | |
| *** ociuhandu_ has quit IRC | 18:02 | |
| TheJulia | brains | 18:04 |
| TheJulia | is it friday yet? | 18:04 |
| *** derekh has quit IRC | 18:05 | |
| rloo | dtantsur: darn, thx for the reminder. i was out on an errand :-( Will have to try to make it, i keep missing them. I hope you had a great SPUCfest today! | 18:05 |
| dtantsur | yep :) | 18:05 |
| dtantsur | TheJulia: seems to be! | 18:05 |
| rloo | TGIF!!! | 18:06 |
| dtantsur | have a great weekend folks | 18:06 |
| *** dtantsur is now known as dtantsur|afk | 18:06 | |
| TheJulia | you too dtantsur|afk | 18:06 |
| *** k_mouza_ has quit IRC | 18:11 | |
| *** hoonetorg has quit IRC | 18:19 | |
| *** bburns has quit IRC | 18:19 | |
| *** hoonetorg has joined #openstack-ironic | 18:22 | |
| *** tosky has joined #openstack-ironic | 18:37 | |
| iurygregory | hummm maybe on monday we should talk about having our projects using fail-fast for check jobs | 18:41 |
| *** paras333_ has joined #openstack-ironic | 18:45 | |
| *** bburns has joined #openstack-ironic | 18:45 | |
| *** k_mouza has joined #openstack-ironic | 18:46 | |
| *** k_mouza has quit IRC | 18:50 | |
| *** hoonetorg has quit IRC | 19:06 | |
| *** hoonetorg has joined #openstack-ironic | 19:10 | |
| TheJulia | iurygregory: ++ we've wanted to fail fast for a LONG time | 19:13 |
| TheJulia | like... run unit tests and if they don't pass don't trigger integration jobs | 19:13 |
| iurygregory | yeah | 19:14 |
| iurygregory | If this is set to `true`, Zuul will report a build failure immediately and abort all still running builds :D | 19:16 |
| iurygregory | I've learned something today that wasn't in my list XD | 19:17 |
| TheJulia | does it still post available logs? | 19:17 |
| iurygregory | not 100% sure, let me take this question to zuul folks | 19:18 |
| TheJulia | \o/ | 19:18 |
| *** tosin has quit IRC | 19:19 | |
| *** hoonetorg has quit IRC | 19:22 | |
| iurygregory | TheJulia, only logs for jobs that finished before the failed job | 19:25 |
| TheJulia | and the failed job I hope? | 19:26 |
| iurygregory | if we don't get I think it won't make sense the feature lol | 19:27 |
| iurygregory | yeah corvus confirmed | 19:27 |
| *** hoonetorg has joined #openstack-ironic | 19:28 | |
| iurygregory | it would be a good thing to have in the check pipeline I would say, let's confirm with the community on Monday =) | 19:28 |
| iurygregory | I will have patches ready to go XD | 19:29 |
| openstackgerrit | Leo McGann proposed openstack/ironic master: Adds Security Interface to Node https://review.opendev.org/c/openstack/ironic/+/755836 | 19:30 |
| openstackgerrit | Bill Dodd proposed openstack/ironic master: Add Redfish RAID management to Ironic https://review.opendev.org/c/openstack/ironic/+/730000 | 19:35 |
| *** hoonetorg has quit IRC | 20:18 | |
| *** hoonetorg has joined #openstack-ironic | 20:22 | |
| TheJulia | iurygregory: ++ | 20:31 |
| TheJulia | people will need to be better behaved about just rechecking though | 20:31 |
| iurygregory | yeah | 20:34 |
| iurygregory | enr seems like there is a problem with the openstack community https://review.opendev.org/c/openstack/project-config/+/774300 .-. | 20:39 |
| iurygregory | it would be related to the recheck it seems | 20:40 |
| openstackgerrit | Lance Bragstad proposed openstack/ironic master: Update oslo.policy requirement to version 3.6.2 https://review.opendev.org/c/openstack/ironic/+/774307 | 21:04 |
| lbragstad | TheJulia ^ | 21:04 |
| TheJulia | lbragstad: awesome, thanks | 21:29 |
| *** paras333_ has quit IRC | 21:35 | |
| *** paras333 has joined #openstack-ironic | 21:43 | |
| *** anuradha1904 has quit IRC | 21:44 | |
| *** paras333 has quit IRC | 21:48 | |
| *** bfournie has quit IRC | 21:57 | |
| TheJulia | lbragstad: so in theory, would it make sense for there to be "generally able to update attriutes" and if that is denied fall into more specific rule checking? | 22:01 |
| TheJulia | just from the whole possibility of churning heavily on rules? | 22:01 |
| *** ricolin has quit IRC | 22:05 | |
| lbragstad | update attributes of the context object or the target? | 22:08 |
| TheJulia | The object for which we are controlling access for | 22:08 |
| TheJulia | so say a field on a node | 22:08 |
| lbragstad | yeah - i don't think there are issues with that | 22:09 |
| lbragstad | you're talking about implementing a fast fail if someone can't update attributes? | 22:09 |
| TheJulia | no | 22:09 |
| lbragstad | and iff they can, take the next step? | 22:09 |
| TheJulia | "if we can do x, we can skip the rest of these checks" | 22:09 |
| lbragstad | oh - so the other way around | 22:09 |
| TheJulia | which are lower level fields with-in the object | 22:09 |
| TheJulia | I think the code will already fail fast because we have something similar elsewhere | 22:10 |
| lbragstad | so - if you're a system admin, sure you can update anything in the object (theoretically) | 22:10 |
| TheJulia | like... if we can't read something now, we don't bother going any further, we will just fail everything then. | 22:10 |
| lbragstad | but if you someone else, we have to make sure you're not mucking with something you shouldn't me | 22:10 |
| lbragstad | shouldn't be* | 22:10 |
| TheJulia | I mean, realistically someone could author a policy that way yes | 22:11 |
| TheJulia | actually, let system admin/members do the needful, and then if it is project scoped then drill down | 22:11 |
| lbragstad | yeah - we have policies similar to that in keystone, but probably not as low level | 22:11 |
| TheJulia | I'm likely erroring really on the side of caution because of just how close we are to the infrastructure. | 22:12 |
| TheJulia | but also thinking "This still needs to be semi-performant" | 22:12 |
| *** k_mouza has joined #openstack-ironic | 22:12 | |
| lbragstad | sure | 22:13 |
| lbragstad | based on what i learnt about neutron this week and how it does policy enforcement, i don't think calling enforce twice is a big deal | 22:14 |
| lbragstad | neutron calls enforcement on the API, every object in the response, and every attribute of the object in the response | 22:14 |
| TheJulia | oh, I'm not. I think for a patch object today we can call enforce 5-6 times already | 22:14 |
| TheJulia | wow | 22:14 |
| lbragstad | slawk did the math on one API call to list 4,000 ports and the policy enforce is invoked something like 120k times | 22:15 |
| lbragstad | policy enforcer* | 22:15 |
| TheJulia | I'm kind of glad I have my debugging code all the way into the enforcer at the moment on my local machine | 22:15 |
| TheJulia | lbragstad: that sounds a little excessive... tbh | 22:15 |
| lbragstad | i didn't realize that's what was happening there - but it's how they hit one of the bugs in oslo.policy that we fixed this week | 22:16 |
| TheJulia | Ahh, was that the patch you pointed me at? | 22:17 |
| *** k_mouza has quit IRC | 22:17 | |
| lbragstad | https://review.opendev.org/c/openstack/oslo.policy/+/773414 is what fixed neutron's issue | 22:18 |
| TheJulia | Yup, same patch | 22:18 |
| * TheJulia adds more policies | 22:19 | |
| lbragstad | and while we were in there we fixed the issue where oslo.policy needs a copy of the rules before it modifies them | 22:19 |
| lbragstad | https://review.opendev.org/c/openstack/oslo.policy/+/773950 | 22:19 |
| lbragstad | both of those are available in 3.6.2 | 22:19 |
| openstackgerrit | Julia Kreger proposed openstack/ironic master: WIP: Project Scoping Node endpoint https://review.opendev.org/c/openstack/ironic/+/773924 | 22:26 |
| TheJulia | rloo: if your curious on scoping for fields/usage, maybe the discussion I've been having with lance + ^^^ | 22:26 |
| * TheJulia goes a spec updating | 22:30 | |
| rloo | TheJulia: in meeting and need to take off soon. Will look on Monday... thx for letting me know :) | 22:31 |
| TheJulia | rloo: thanks! | 22:31 |
| *** tzumainn has quit IRC | 23:24 | |
| *** JayF has quit IRC | 23:30 | |
| *** MentalSiege has quit IRC | 23:55 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!