Friday, 2013-11-15

*** nati_ueno has quit IRC00:04
*** nati_ueno has joined #openstack-meeting-alt00:04
*** jmaron has joined #openstack-meeting-alt00:07
*** nati_ueno has quit IRC00:09
*** ryanpetrello has joined #openstack-meeting-alt00:10
*** julim has quit IRC00:11
*** jmaron has quit IRC00:12
*** kevinconway has quit IRC00:17
*** MarkAtwood has quit IRC00:24
*** tanisdl has quit IRC00:25
*** sarob_ has joined #openstack-meeting-alt00:26
*** sarob has quit IRC00:30
*** sarob_ has quit IRC00:32
*** eankutse has joined #openstack-meeting-alt00:43
*** alazarev has quit IRC00:47
*** sacharya has joined #openstack-meeting-alt00:54
*** eankutse has quit IRC00:56
*** eankutse has joined #openstack-meeting-alt00:56
*** aignatov has quit IRC00:57
*** ashaikh has quit IRC00:57
*** nosnos has joined #openstack-meeting-alt01:00
*** yogesh has joined #openstack-meeting-alt01:04
*** sarob has joined #openstack-meeting-alt01:05
*** jmaron has joined #openstack-meeting-alt01:08
*** amcrn has joined #openstack-meeting-alt01:10
*** nati_ueno has joined #openstack-meeting-alt01:12
*** eankutse has quit IRC01:13
*** jmaron has quit IRC01:13
*** alazarev has joined #openstack-meeting-alt01:22
*** vipul is now known as vipul-away01:28
*** sarob has quit IRC01:30
*** sarob has joined #openstack-meeting-alt01:31
*** bdpayne has quit IRC01:31
*** brents has joined #openstack-meeting-alt01:33
*** alazarev has quit IRC01:33
*** devkulkarni has quit IRC01:34
*** vipul-away is now known as vipul01:35
*** sarob has quit IRC01:35
*** flwang has quit IRC01:37
*** yogesh has quit IRC01:37
*** eankutse has joined #openstack-meeting-alt01:41
*** nati_ueno has quit IRC01:47
*** nati_ueno has joined #openstack-meeting-alt01:47
*** ryanpetrello_ has joined #openstack-meeting-alt01:48
*** ryanpetrello has quit IRC01:48
*** ryanpetrello_ is now known as ryanpetrello01:48
*** eankutse has quit IRC02:07
*** dguitarbite has joined #openstack-meeting-alt02:08
*** eankutse has joined #openstack-meeting-alt02:08
*** jmaron has joined #openstack-meeting-alt02:09
*** jmaron has quit IRC02:14
*** rnirmal has quit IRC02:16
*** eankutse has quit IRC02:16
*** amcrn has quit IRC02:18
*** eankutse has joined #openstack-meeting-alt02:18
*** eankutse has quit IRC02:21
*** gokrokve has quit IRC02:22
*** gokrokve has joined #openstack-meeting-alt02:23
*** gokrokve has quit IRC02:27
*** twoputt has quit IRC02:32
*** twoputt_ has quit IRC02:33
*** nati_uen_ has joined #openstack-meeting-alt02:35
*** sarob has joined #openstack-meeting-alt02:36
*** radix has quit IRC02:38
*** nati_ueno has quit IRC02:38
*** sarob has quit IRC02:43
*** sarob has joined #openstack-meeting-alt02:43
*** eankutse has joined #openstack-meeting-alt02:47
*** esker has joined #openstack-meeting-alt02:47
*** esker has quit IRC02:48
*** sarob has quit IRC02:48
*** esker has joined #openstack-meeting-alt02:49
*** eankutse has quit IRC03:02
*** devkulkarni has joined #openstack-meeting-alt03:08
*** jmaron has joined #openstack-meeting-alt03:09
*** eankutse has joined #openstack-meeting-alt03:11
*** eankutse has quit IRC03:11
*** dkehn has quit IRC03:11
*** dkehn has joined #openstack-meeting-alt03:13
*** sarob has joined #openstack-meeting-alt03:13
*** jmaron has quit IRC03:15
*** markwash has quit IRC03:29
*** cody-somerville has quit IRC03:33
*** gokrokve has joined #openstack-meeting-alt03:36
*** enikanorov_ has joined #openstack-meeting-alt03:43
*** ilyashakhat_ has joined #openstack-meeting-alt03:44
*** vipuls has joined #openstack-meeting-alt03:45
*** enikanorov___ has joined #openstack-meeting-alt03:45
*** bnemec_ has joined #openstack-meeting-alt03:48
*** noslzzp has joined #openstack-meeting-alt03:51
*** vipul has quit IRC03:51
*** enikanorov__ has quit IRC03:52
*** enikanorov has quit IRC03:52
*** ilyashakhat has quit IRC03:52
*** bnemec has quit IRC03:52
*** sergmelikyan has quit IRC03:52
*** ekarlso has quit IRC03:52
*** gokrokve has quit IRC03:54
*** gokrokve has joined #openstack-meeting-alt03:54
*** ekarlso has joined #openstack-meeting-alt03:54
*** gokrokve has quit IRC03:59
*** nati_uen_ has quit IRC04:04
*** nati_ueno has joined #openstack-meeting-alt04:05
*** noslzzp has quit IRC04:09
*** nati_ueno has quit IRC04:09
*** jmaron has joined #openstack-meeting-alt04:10
*** radix has joined #openstack-meeting-alt04:12
*** flwang has joined #openstack-meeting-alt04:13
*** jmaron has quit IRC04:15
*** markwash has joined #openstack-meeting-alt04:19
*** yamahata__ has quit IRC04:25
*** yamahata has joined #openstack-meeting-alt04:27
*** vipuls is now known as vipuls-away04:32
*** nati_ueno has joined #openstack-meeting-alt04:33
*** yamahata has quit IRC04:35
*** bdpayne has joined #openstack-meeting-alt04:42
*** noslzzp has joined #openstack-meeting-alt04:42
*** bdpayne has quit IRC04:42
*** bdpayne has joined #openstack-meeting-alt04:43
*** bdpayne has quit IRC04:43
*** nati_ueno has quit IRC04:43
*** zhiyan has joined #openstack-meeting-alt04:44
*** zhiyan has quit IRC04:45
*** zhiyan1 has joined #openstack-meeting-alt04:45
*** zhiyan1 has quit IRC04:45
*** zhiyan has joined #openstack-meeting-alt04:46
*** coolsvap has joined #openstack-meeting-alt04:46
*** nati_ueno has joined #openstack-meeting-alt04:49
*** gokrokve has joined #openstack-meeting-alt04:50
*** kraman has quit IRC04:52
*** noslzzp has quit IRC04:53
*** nati_ueno has quit IRC05:02
*** sarob has quit IRC05:04
*** sarob has joined #openstack-meeting-alt05:05
*** noslzzp has joined #openstack-meeting-alt05:08
*** nati_ueno has joined #openstack-meeting-alt05:09
*** sarob has quit IRC05:10
*** jmaron has joined #openstack-meeting-alt05:11
*** jmaron has quit IRC05:16
*** noslzzp has quit IRC05:22
*** brents has quit IRC05:36
*** yogesh has joined #openstack-meeting-alt05:38
*** yogesh has quit IRC05:41
*** yogesh has joined #openstack-meeting-alt05:41
*** yogesh_ has joined #openstack-meeting-alt05:44
*** yogesh has quit IRC05:46
*** gokrokve has quit IRC05:49
*** gokrokve has joined #openstack-meeting-alt05:50
*** yogesh_ has quit IRC05:52
*** gokrokve has quit IRC05:55
*** devkulkarni has quit IRC05:59
*** sacharya has quit IRC06:01
*** gokrokve has joined #openstack-meeting-alt06:01
*** zhiyan has quit IRC06:02
*** dguitarbite has quit IRC06:03
*** nati_ueno has quit IRC06:03
*** aignatov has joined #openstack-meeting-alt06:04
*** sacharya has joined #openstack-meeting-alt06:04
*** kraman has joined #openstack-meeting-alt06:06
*** yogesh has joined #openstack-meeting-alt06:07
*** kraman has quit IRC06:11
*** jmaron has joined #openstack-meeting-alt06:11
*** vipuls-away is now known as vipuls06:13
*** jmaron has quit IRC06:13
*** yogesh has quit IRC06:13
*** yogesh has joined #openstack-meeting-alt06:13
*** yogesh_ has joined #openstack-meeting-alt06:15
*** yogesh has quit IRC06:15
*** coolsvap has quit IRC06:26
*** yogesh_ has quit IRC06:30
*** gokrokve has quit IRC06:32
*** gokrokve has joined #openstack-meeting-alt06:32
*** nati_ueno has joined #openstack-meeting-alt06:35
*** alazarev has joined #openstack-meeting-alt06:35
*** gokrokve has quit IRC06:37
*** sacharya has quit IRC06:42
*** coolsvap has joined #openstack-meeting-alt06:45
*** denis_makogon has joined #openstack-meeting-alt06:48
*** mjbright_ has quit IRC06:56
*** akuznetsov has quit IRC06:59
*** akuznetsov has joined #openstack-meeting-alt06:59
*** yogesh has joined #openstack-meeting-alt07:04
*** esker has quit IRC07:06
*** kraman has joined #openstack-meeting-alt07:06
*** jprovazn has joined #openstack-meeting-alt07:08
*** kraman has quit IRC07:11
*** gokrokve has joined #openstack-meeting-alt07:13
*** gokrokve has quit IRC07:18
*** gokrokve has joined #openstack-meeting-alt07:18
*** aignatov has quit IRC07:19
*** gokrokve_ has joined #openstack-meeting-alt07:19
*** SergeyLukjanov has joined #openstack-meeting-alt07:21
*** gokrokve has quit IRC07:22
*** gokrokve_ has quit IRC07:24
*** esker has joined #openstack-meeting-alt07:32
*** noslzzp has joined #openstack-meeting-alt07:48
*** gokrokve has joined #openstack-meeting-alt07:49
*** nati_ueno has quit IRC07:52
*** gokrokve has quit IRC07:53
*** akuznetsov has quit IRC08:00
*** kraman has joined #openstack-meeting-alt08:07
*** alazarev has quit IRC08:07
*** flaper87|afk is now known as flaper8708:08
*** esker has quit IRC08:09
*** dukhlov has joined #openstack-meeting-alt08:09
*** IlyaE has joined #openstack-meeting-alt08:28
*** IlyaE has quit IRC08:28
*** akuznetsov has joined #openstack-meeting-alt08:37
*** noslzzp has quit IRC08:39
*** kraman has quit IRC08:41
*** rsblendido has joined #openstack-meeting-alt08:41
*** rossella_s has joined #openstack-meeting-alt08:41
*** gokrokve has joined #openstack-meeting-alt08:49
*** gokrokve has quit IRC08:54
*** aignatov has joined #openstack-meeting-alt08:54
*** denis_makogon has quit IRC08:56
*** flwang has quit IRC09:01
*** jcoufal has joined #openstack-meeting-alt09:03
*** derekh has joined #openstack-meeting-alt09:18
*** nosnos has quit IRC09:26
*** nosnos has joined #openstack-meeting-alt09:27
*** nati_ueno has joined #openstack-meeting-alt09:27
*** yogesh has quit IRC09:28
*** yogesh has joined #openstack-meeting-alt09:28
*** nosnos has quit IRC09:31
*** yogesh has quit IRC09:33
*** yogesh has joined #openstack-meeting-alt09:33
*** ruhe has joined #openstack-meeting-alt09:37
*** kraman has joined #openstack-meeting-alt09:37
*** yogesh has quit IRC09:37
*** ruhe has quit IRC09:40
*** aignatov has quit IRC09:41
*** kraman has quit IRC09:41
*** IlyaE has joined #openstack-meeting-alt09:42
*** nati_ueno has quit IRC09:42
*** _ozstacker_ has joined #openstack-meeting-alt09:46
*** IlyaE has quit IRC09:46
*** ozstacker has quit IRC09:49
*** gokrokve has joined #openstack-meeting-alt09:49
*** boris-42 has joined #openstack-meeting-alt09:51
*** gokrokve has quit IRC09:54
*** ruhe has joined #openstack-meeting-alt10:07
*** aignatov has joined #openstack-meeting-alt10:24
*** ruhe has quit IRC10:37
*** kraman has joined #openstack-meeting-alt10:38
*** jtomasek has joined #openstack-meeting-alt10:41
*** kraman has quit IRC10:42
*** ruhe has joined #openstack-meeting-alt10:44
*** aostapenko has left #openstack-meeting-alt10:46
*** gokrokve has joined #openstack-meeting-alt10:49
*** gokrokve has quit IRC10:54
*** ruhe has quit IRC10:55
*** ruhe has joined #openstack-meeting-alt10:57
*** ruhe has quit IRC11:00
*** IlyaE has joined #openstack-meeting-alt11:02
*** ruhe has joined #openstack-meeting-alt11:03
*** pcm_ has joined #openstack-meeting-alt11:13
*** pcm_ has quit IRC11:14
*** pcm_ has joined #openstack-meeting-alt11:14
*** akuznetsov has quit IRC11:28
*** boris-42 has quit IRC11:28
*** SergeyLukjanov is now known as _SergeyLukjanov11:31
*** ruhe has quit IRC11:32
*** _SergeyLukjanov has quit IRC11:32
*** akuznetsov has joined #openstack-meeting-alt11:32
*** ruhe has joined #openstack-meeting-alt11:37
*** boris-42 has joined #openstack-meeting-alt11:43
*** ruhe has quit IRC11:49
*** gokrokve has joined #openstack-meeting-alt11:49
*** SergeyLukjanov has joined #openstack-meeting-alt11:51
*** SergeyLukjanov is now known as _SergeyLukjanov11:53
*** _SergeyLukjanov has quit IRC11:53
*** gokrokve has quit IRC11:53
*** vkmc has joined #openstack-meeting-alt11:56
*** jtomasek has quit IRC11:57
*** coolsvap has quit IRC11:58
*** jtomasek has joined #openstack-meeting-alt12:12
*** SergeyLukjanov has joined #openstack-meeting-alt12:14
*** SergeyLukjanov has quit IRC12:15
*** ruhe has joined #openstack-meeting-alt12:16
*** SergeyLukjanov has joined #openstack-meeting-alt12:16
*** ruhe has quit IRC12:21
*** aignatov has quit IRC12:29
*** natishalom has joined #openstack-meeting-alt12:33
*** akuznetsov has quit IRC12:35
*** ruhe has joined #openstack-meeting-alt12:36
*** natishalom has quit IRC12:38
*** natishalom has joined #openstack-meeting-alt12:39
*** jmaron has joined #openstack-meeting-alt12:39
*** kraman has joined #openstack-meeting-alt12:39
*** akuznetsov has joined #openstack-meeting-alt12:40
*** SergeyLukjanov is now known as _SergeyLukjanov12:42
*** aignatov has joined #openstack-meeting-alt12:43
*** _SergeyLukjanov has quit IRC12:43
*** natishalom has quit IRC12:43
*** boris-42 has quit IRC12:48
*** gokrokve has joined #openstack-meeting-alt12:49
*** pdmars has joined #openstack-meeting-alt12:52
*** gokrokve has quit IRC12:54
*** ruhe has quit IRC12:54
*** SergeyLukjanov has joined #openstack-meeting-alt12:55
*** aignatov has quit IRC12:55
*** ruhe has joined #openstack-meeting-alt13:00
*** jmaron has quit IRC13:02
*** kraman has quit IRC13:14
*** jmaron has joined #openstack-meeting-alt13:20
*** kevinconway has joined #openstack-meeting-alt13:27
*** kevinconway has quit IRC13:28
*** jmaron has quit IRC13:35
*** ruhe has quit IRC13:36
*** kevinconway has joined #openstack-meeting-alt13:37
*** natishalom has joined #openstack-meeting-alt13:39
*** kevinconway has quit IRC13:40
*** natishalom has quit IRC13:44
*** julim has joined #openstack-meeting-alt13:46
*** devkulkarni has joined #openstack-meeting-alt13:46
*** gokrokve has joined #openstack-meeting-alt13:47
*** kevinconway has joined #openstack-meeting-alt13:47
*** natishalom has joined #openstack-meeting-alt13:48
*** gokrokve_ has joined #openstack-meeting-alt13:51
*** gokrokve has quit IRC13:52
*** HenryG has joined #openstack-meeting-alt13:52
*** natishalom has quit IRC13:53
*** boris-42 has joined #openstack-meeting-alt13:54
*** ruhe has joined #openstack-meeting-alt13:57
*** ruhe has quit IRC13:59
*** dprince has joined #openstack-meeting-alt13:59
*** lblanchard has joined #openstack-meeting-alt13:59
*** jmaron has joined #openstack-meeting-alt14:07
*** amytron has joined #openstack-meeting-alt14:09
*** kraman has joined #openstack-meeting-alt14:09
*** eankutse has joined #openstack-meeting-alt14:11
*** eankutse has quit IRC14:11
*** eankutse has joined #openstack-meeting-alt14:11
*** esker has joined #openstack-meeting-alt14:12
*** anteaya is now known as anttteaya14:14
*** kraman has quit IRC14:14
*** bnemec_ is now known as beekneemech14:18
*** jmaron has quit IRC14:21
*** cody-somerville has joined #openstack-meeting-alt14:22
*** boris-42 has quit IRC14:23
*** boris-42 has joined #openstack-meeting-alt14:28
*** boris-42 has quit IRC14:32
*** jtomasek has quit IRC14:34
*** SergeyLukjanov is now known as _SergeyLukjanov14:34
*** _SergeyLukjanov has quit IRC14:35
*** kgriffs_afk is now known as kgriffs14:42
*** jmaron has joined #openstack-meeting-alt14:44
*** Barker has joined #openstack-meeting-alt14:46
*** esker has quit IRC14:47
*** jtomasek has joined #openstack-meeting-alt14:49
*** boris-42 has joined #openstack-meeting-alt14:51
*** nati_ueno has joined #openstack-meeting-alt14:54
*** flwang has joined #openstack-meeting-alt14:56
*** alazarev has joined #openstack-meeting-alt14:57
*** boris-42 has quit IRC14:59
*** mclaren has joined #openstack-meeting-alt15:01
mclarenmarkwash: hey15:01
*** natishalom has joined #openstack-meeting-alt15:02
markwashmclaren: hello15:02
markwashhmm, do you think we can have it in here?15:02
*** natishalom has quit IRC15:03
mclarenmarkwash: wasn't sure ... is openstack-glance better?15:03
markwashthis might be better, and I think its free15:03
markwashthe meeting schedule indicates it is free15:03
mclarenah, ok so :-) lets squat!15:04
markwash#startmeeting glance15:04
openstackMeeting started Fri Nov 15 15:04:39 2013 UTC and is due to finish in 60 minutes.  The chair is markwash. Information about MeetBot at http://wiki.debian.org/MeetBot.15:04
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:04
*** openstack changes topic to " (Meeting topic: glance)"15:04
openstackThe meeting name has been set to 'glance'15:04
icchahey15:04
rosmaitahowdy15:04
*** zhiyan has joined #openstack-meeting-alt15:05
*** natishalom has joined #openstack-meeting-alt15:05
flaper87o/15:05
mclarenhey all, not sure if everyone got a chance to see the latest draft of the doc I put together?15:05
* rosmaita is reading now15:06
icchasame here15:06
*** natishalom has quit IRC15:06
icchathanks for putting together the document mclaren15:06
mclarenhttps://region-a.geo-1.objects.hpcloudsvc.com/v1/61624292678963/public_referenced/consistent-multi-tenant-swift-backend.pdf15:06
markwash#topic swift backend and security15:06
*** openstack changes topic to "swift backend and security (Meeting topic: glance)"15:06
markwashI'm still catching up to the latest revision15:06
mclarennp, its all selfishly motivated, I'll like to sleep more peacefully ;-)15:06
markwashI was going over this with a security guy recently, and realized again how desperately we need a fix for this15:07
mclarenSo I still don't have a perfect proposal...15:07
*** natishalom has joined #openstack-meeting-alt15:07
mclarenClosest right now is a 2nd swift (but expensive, admin headache etc)15:08
mclarenAnyone know any Keystone gurus? I hit the limit of knowlege on how they might be able to help really fast15:08
rosmaitamclaren: quick question15:08
mclarensure15:08
rosmaitafor multitenant, are images really stored one-per-container (bottom of p 1)?15:09
rosmaita(i am completely ignorant of multitenant)15:09
markwashrosmaita: yes15:09
mclarenI believe so, I think that must be the case because Swift ACLs are at the container level15:09
icchathats how we can share images15:09
icchawith per containter image acls15:09
icchaby granting other users read priviledge15:10
*** devkulkarni has quit IRC15:10
mclarenyup15:10
mclarenI'm interested to know how people feel about15:10
*** kraman has joined #openstack-meeting-alt15:10
mclarenmulti-tenant being less fragile than single tenant15:11
icchalike you mentioned mclaren the biggest concern is user being able to access them directly outside of glance and manipulatun them15:11
icchai definitely see the benefits of multitenant15:11
icchaalso ho easy/painful would it be to migrate from single tenant to multitenant?15:11
*** jaypipes has joined #openstack-meeting-alt15:11
markwashI do personally wonder if multitenant even really works at a basic level15:11
markwashfor a long time the basic sharing aspect did not work with swift acls15:12
mclarenmarkwash: ok, can you expand? do you mean the current implementation?15:12
markwashyeah15:12
rosmaitawell, as mclaren points out, it's a pretty crappy user experience when you list your containers15:12
markwashI also wonder if we could accomplish some of the general robustness to deletion of X by allowing for a more complex default structure among swift containers in the single tenant store15:13
icchacould you elaborate markwash15:13
markwashlike, instead of having one default set of credentials for all writes15:13
markwashwe could have some sort of round-robin15:13
markwashso that folks generally ended up with multiple equally balanced containers15:14
*** natishalom has quit IRC15:14
mclarenso password change issues with that! :-P15:14
mclarenso/no15:14
markwashlet's talk about password changes for a sec15:15
markwashI have a naive hope15:15
icchahave we eliminated all possible work arounds for password issue?15:15
*** natishalom has joined #openstack-meeting-alt15:15
*** natishalom has quit IRC15:15
icchamarkwash: types faster than me :p15:15
markwashwhich is that it is possible to have multiple passwords simultaneously valid on a given account15:15
mclarenI think that the user access key keystone blueprint gives hope in that area15:15
icchamclaren: can you link to the bp?15:16
mclarenit would allow rolling upload of credentials (key now rather than p/w)15:16
markwashso that way you can do a simple "add second creds", "roll update to creds", "delete old creds"15:16
markwashah good15:16
markwashmclaren: how much of the issue with password updates would that resolve?15:16
mclarenhttps://blueprints.launchpad.net/keystone/+spec/access-key-authentication15:16
mclarena lot15:17
icchaand we would abstract away the user credentials from locatuion15:17
*** natishalom has joined #openstack-meeting-alt15:17
icchaand store it elsewhere like config?15:17
icchais that what you re thinking about mark?15:17
mclarenbut personally I feel multi-tenant has fewer paths to disaster15:17
*** ryanpetrello has quit IRC15:18
mclarenif we switched to user access keys we're still storing them on disk and can still leak them15:18
markwashmclaren: I definitely get that. . I'm just worried about the changes to swift we might need for multi-tenant to get someplace good15:18
mclarenthe Zen of no-password in the multi-tenant approach I find hugely appealing, and the distributed container nature15:18
markwashmulti-tenant on an internal-only swift is pretty much the "best" solution15:18
markwashbut I don't think its viable for any other deployers than the largest15:19
icchabut unfortunately hardest one to actually do15:19
mclarensure, I do wonder if there's some keystone 'magic' that could help (waves hands)15:19
iccharosmaita: and me were having the same discussion if we could blacklist/white ips to contains15:20
iccha*containers in swift15:20
markwashtalking about passwords again for a moment15:20
markwashI think the highest priority concern on the list is the fact that passwords are being stored in a database (even encrypted is pretty bad)15:20
*** nati_ueno has quit IRC15:21
rosmaitayes, makes it impossible to change pw without big DB operations (very slow)15:21
markwashrosmaita: well, we could fix the speed of that DB update just by normalizing out the credentials to their own table15:22
mclarenyes and no, if the API process has an all powerful password in plaintext it can leak it -- this has happened before and is *bad*15:22
markwashbut again, that means anyone who owns the db anywhere can try to attack those passwords15:22
markwashmclaren: hmm, good point. . but the only way to get around that is to figure out going completely passwordless, right?15:23
mclarenI think the single tenant password change is solvable, but I want to go futher!15:23
mclarenright15:24
notmynamewould temporary URLs in swift be useful here?15:24
notmynameie a signed URL that doesn't require extra creds?15:24
markwashokiedokie. . I'll back off for a bit. . I'm still really interested in your "best" approach :-)15:24
markwashnotmyname: I think that does help us with the "client downloads image directly from swift" story15:25
icchanotmyname: we would still need the store creentials in a single tenant approach right?15:25
*** ruhe has joined #openstack-meeting-alt15:25
notmynameiccha: you would need to know the shared secret, which is set on a per-account basis15:25
markwashnotmyname: but glance still needs credentials in some form to have permissions to generate that temp url15:25
markwashyeah15:25
*** rnirmal has joined #openstack-meeting-alt15:25
*** nati_ueno has joined #openstack-meeting-alt15:26
notmynamemarkwash: if the shared secret is known, the tempurl can be generated with no other access required15:26
icchanotmyname: but we would need to store the shared secret15:26
notmynamemarkwash: and you can fetcht he shared secret if you have the creds for the account (ie it's set in account metadata)15:26
nikhil__o/15:27
markwashinteresting15:27
notmynameand I'm guessing you already have the user creds15:27
*** natishalom has quit IRC15:27
mclarenI did think about a per container shared secret with signing as part of a dual auth approach, is that roughtly what we're talking about?15:27
nikhil__wonder if you all thinking about shared secrets, we can try to think about a 3 pass auth mechnism15:27
notmynamehttp://docs.openstack.org/developer/swift/misc.html#module-swift.common.middleware.tempurl15:27
mclarenare we trying to suggest a way to prevent a user modifying objects in their own container?15:28
*** ozstacker has joined #openstack-meeting-alt15:28
*** nati_ueno has quit IRC15:28
*** ryanpetrello has joined #openstack-meeting-alt15:28
*** rnirmal has quit IRC15:28
*** natishalom has joined #openstack-meeting-alt15:28
*** _ozstacker_ has quit IRC15:28
*** rnirmal has joined #openstack-meeting-alt15:29
* markwash is not sure15:29
icchaso glance would have shared secret+user token from context. but users would not have shared secret so cannot access it ? is this a swft setting to ensure dual auth?15:29
*** kraman has quit IRC15:29
markwashit seems kind of like we're all focusing on different things right now15:29
*** sacharya has joined #openstack-meeting-alt15:30
markwashwhich is good for parallelism, but really hard to construct a coherent conversation out of it15:30
iccha+115:30
notmynameseems like you were looking for a way to give people access to an object without having to create many different containers. tempurl is a way to do it15:30
*** devkulkarni has joined #openstack-meeting-alt15:30
markwashso the focus right now I think is still, how could we make multitenant viable so that we could go passwordless15:31
markwashmclaren: do you agree with that focus for the moment?15:31
mclarenok, we can investigate if tempurl potentially helps with that15:31
mclarenmarkwash: yes15:31
mclarenI think extra swift hardware is one way, and the holy grail is something software based15:31
markwashsoftware based -> something like an internal only endpoint15:32
mclarenexactly15:32
markwashor a way to mark a container ABAC as "internal only" ?15:32
*** devkulkarni1 has joined #openstack-meeting-alt15:32
mclarenlike a virtual region (waves handes)15:32
*** natishalom has quit IRC15:32
mclarenyeah15:32
icchayou read my mind mclaren15:32
markwashABAC = attribute based access control, where something like your ip, or the interface you came in on, is an attribute15:33
icchayeah like the whitelisting concept15:33
markwashone potential problem with this approach15:33
*** _ozstacker_ has joined #openstack-meeting-alt15:33
markwashis that it would cause headaches for existing billing folks15:33
markwashbecause I think the normal right now is to charge folks for their swift storage & their glance image storage15:33
*** ozstacker has quit IRC15:34
icchais the charge different?15:34
mclarenthat's on the swift side, there may be keystone possibilities (eg https://github.com/openstack/keystone/commit/601eeb50b60a2e99041690fe19238202bc203503) but my knowlege on keystone is poor15:34
markwashiccha: well, in such a system, if we rolled this out it would suddenly be charging double, even if they're the same15:34
*** natishalom has joined #openstack-meeting-alt15:35
*** natishalom has quit IRC15:35
mclarenpersonally I think billing is a secondary issue; design a robust system then figure out how to charge the $15:35
markwashmclaren: that makes sense15:35
rosmaitait would require coordination before rollout15:35
rosmaitabut not insurmountable15:35
markwashmclaren: would users be able to see such a container in their account?15:35
*** natishalom has joined #openstack-meeting-alt15:35
*** devkulkarni has quit IRC15:35
mclarenso, anyone know any keystone gurus? :-)15:35
*** ruhe has quit IRC15:35
nikhil__markwash: if we keep pass in db and send it as a "digest" we can aboid whitelisting15:36
mclarenmarkwash: ideally no, ideally users wouldn't even know swift is the backend15:36
nikhil__(single tenant)15:37
*** dolphm has joined #openstack-meeting-alt15:37
markwashwell, one thing to keep in mind is that this effort would be concurrent to the general effort of always publishing the location details15:37
dolphmo/15:37
markwashoh, hey, I know a keystone guru :-)15:37
icchaand keystone guu appears15:37
markwashhi dolphm15:37
dolphm\o/15:37
markwashA keystone guru uses knowledge! Its super effective.15:38
*** natishalom has quit IRC15:38
mclarenhey dolphm general background doc for some night time reading https://region-a.geo-1.objects.hpcloudsvc.com/v1/61624292678963/public_referenced/consistent-multi-tenant-swift-backend.pdf15:38
dolphmmclaren: thanks15:38
*** vponomaryov has joined #openstack-meeting-alt15:39
*** vponomaryov1 has quit IRC15:39
mclarennp, its basically a big shopping list with no solid proposals :-P15:39
mclarenalthough I do think that a multi-tenant approach feels right15:39
*** boris-42 has joined #openstack-meeting-alt15:39
icchamaybe we could start by asking dolphm the questions we had about what keystone could do or might be planning to do15:39
*** natishalom has joined #openstack-meeting-alt15:39
dolphm(i'm reading this doc, but fire away)15:40
*** natishalom has quit IRC15:40
markwashmclaren: i think you could probably state the questions best15:40
mclarenok15:40
mclarenI think we're wondering if there is something which exists in keystone15:41
*** kraman has joined #openstack-meeting-alt15:41
mclarenor could be reasonably implemented15:41
mclarenwhich would give us a 'consistent multi tenant' solution15:41
dolphmin the multi-tenant case, shouldn't glance be querying the container for the images, rather than relying on it's own stale db?15:42
*** natishalom has joined #openstack-meeting-alt15:42
mclarenswift objects would be stored on behalf of a user but would not be directly accessible by that user15:42
*** natishalom has quit IRC15:42
dolphmexcept for a special group of users, everyone else only needs read access to the container for the multi-tenant solution?15:42
mclarenhmm15:43
*** gokrokve_ has quit IRC15:43
markwashits like we're looking for another swift endpoint that in general is guaranteed to have some sort of internal-only ABAC restriction on it15:43
dolphmit seems like you want some images shared, and some images managed privately per-tenant?15:43
dolphmmarkwash: abac or rbac?15:43
markwashabac15:43
*** gokrokve has joined #openstack-meeting-alt15:43
dolphmmarkwash: based on what attributes?15:43
mclarendolphm: shared images can be handled easily enough with swift ACLs I think15:43
markwashnetwork location, as a straw man15:44
mclarenso I think considering just the non-shared case at first keeps it a little simpler15:44
*** natishalom has joined #openstack-meeting-alt15:44
dolphmis it one container per image in the multi-tenant case?15:44
mclarenyes15:44
dolphmi guess the other way around (one image per container)15:45
markwashthat's just there for sharing, we could change that15:45
*** betsy has quit IRC15:45
*** sacharya has quit IRC15:45
icchamarkwash: is there object level acl in swift?15:45
mclarenswift ACLs are enforced on a container so it may be practical to keep that way of working15:45
notmynamesharing can be done with tempurls. which would then allow you to do one glance account + one container per tenant15:45
dolphmiccha: i thought there was?15:45
dolphmchmouel: o/15:45
mclarenno object level ACLs in swift I believe15:46
*** natishalom has quit IRC15:46
notmynameno. ACLs are container-based15:46
dolphmnotmyname: thanks!15:46
markwashiccha: let's just forget about sharing for now. if we had this swift solution we could make it so only glance has access to the containers and still manage sharing15:46
icchamakes sense15:46
*** natishalom has joined #openstack-meeting-alt15:46
*** ryanpetrello has quit IRC15:47
*** ccrouch has left #openstack-meeting-alt15:47
markwashdolphm: on a slightly different thread, can I use trusts/delegation to give someone a token that only allows them to download a single object from swift?15:47
*** natishalom has quit IRC15:47
*** gokrokve_ has joined #openstack-meeting-alt15:47
chmouelmclaren: no object acl indeed15:48
chmoueldolphm: ^15:48
*** natishalom has joined #openstack-meeting-alt15:48
*** gokrokve has quit IRC15:48
dolphmmarkwash: unfortunately, no15:48
*** natishalom has quit IRC15:48
dolphmmarkwash: roles wouldn't be granular enough15:48
markwashk, I guess tempurl is enough for that anyway15:48
*** natishalom has joined #openstack-meeting-alt15:49
markwashmclaren: is it fair to say that the big need in this approach is for swift containers that are only accessible over the internal endpoint?15:49
*** zane has joined #openstack-meeting-alt15:50
dolphmi'd argue with the 'accidental deletion of X' "characteristics" -- those are natural consequences and shouldn't be avoided15:50
*** tanisdl has joined #openstack-meeting-alt15:50
*** tanisdl has quit IRC15:50
notmynameFWIW, tempurl is essentially an auth system itself. if someone in the keystone world wanted something to work on, I supposed keystone could implement it too15:50
mclarendolphm: not sure I understand?15:50
dolphmmclaren: notmyname: it's a "bearer" url, the "token" is just encoded in the URL15:51
*** tanisdl has joined #openstack-meeting-alt15:51
*** ryanpetrello has joined #openstack-meeting-alt15:52
*** ashaikh has joined #openstack-meeting-alt15:52
markwashnotmyname: is there anyway to create a container that the "owner" is not allowed to delete or list, but that the glance service user would be allowed to manipulate?15:53
mclarenmarkwash: really its a way to store the data out of the direct reach of users15:53
dolphm“Users should not be able to perform operations to manipulate image data directly via the Swift Api." why not?15:53
notmynamemarkwash: that would be possible to do in auth middleware in swift (ie without changing "core" swift)15:53
markwashnotmyname: gotcha, so it would require new work, but that work would have a pretty clear place to live?15:53
icchadolphm: we want glance to reflect the current state of images15:53
mclarendolphm: image data is immutable15:54
notmynamemarkwash: but I'm not sure I understand the use case of storing something on behalf of someone where they can't do anything to it15:54
notmynamemarkwash: correct15:54
markwashnotmyname: store images in the users swift account, but don't let them muck with it and inevitably generate support calls15:54
mclarennotmyname: they can access it, but only in ways defined by Glance15:54
rosmaitathe reason is that glance stores all metadata about the image, need to keep metadata consistent with the actual image15:54
markwashmclaren's way of saying it was better :-)15:54
dolphmiccha: why is that mutually exclusive with users deleting images in swift, etc? why can't glance pull information from swift?15:54
notmynamemarkwash: hmm...actually I was typing that answer thinking about the ABAC, not the "hidden" containers15:55
mclarenmarkwash's had real world cred :-)15:55
dolphmnotmyname: are hidden containers a thing?15:55
notmynamedolphm: no15:55
*** alazarev has quit IRC15:55
markwashnotmyname: well, blocking "list objects" for that container may be sufficient15:56
*** zhiyan has left #openstack-meeting-alt15:56
notmynamemarkwash: isn't that essentially about tying stuff together at the identity/billing level? what I'm not clear on is why that requires special features in swift15:56
markwashnotmyname: it is, and that's how our other approach works15:56
icchamarkwash: this sounds like policies at container level :)15:57
markwashhowever, we really like just reusing the users credentials when they contact us15:57
notmynameie why not have a separate glance account?15:57
mclarennotmyname: right, 'something' in keystone may help us...15:57
dolphmmclaren: i'm not sure what that would be :(15:57
markwashnotmyname: essentially, we don't want to store a set of credentials that has super-ultra-mega access to all the images in the cloud15:57
dolphmit seems like the blocker here is glance being unwilling/unable to read from swift15:57
mclarendolphm: guru status revoked :-P15:57
notmynamemarkwash: ok (unlike an admin token to keystone? /troll)15:58
dolphmmarkwash: ++15:58
kgriffsfwiw, we ran into a similar issue at Rackspace when creating Cloud Backup15:58
kgriffsit is a big security risk to dump everyone's data together under one ueber account15:59
markwashnotmyname: troll point taken :-)15:59
icchadolphm: here is a usecase. there is no way to maintain the integrity of snapshots if we allow users to directly access and manipulate their images in swift15:59
dolphmnotmyname: <troll acknowledged>15:59
rosmaitakgriffs: tell us more15:59
kgriffsbut, on the other hand, we don't want users messing around with their backup sets directly15:59
markwashdolphm: hmm, I'm not sure I understand what you mean about "not being willing to read from swift" ?15:59
dolphmkgriffs: what's was the solution?!15:59
kgriffsand it adds a lot of noise when they are looking at their account in the control panel or whatever16:00
*** jtomasek has quit IRC16:00
dolphmmarkwash: a bunch of the points in that pdf would be resolved by understanding that glance's knowledge of image states is stale, and pulling the latest data from swift as necessary16:00
kgriffsdolphm: we don't have a great one; just naming the backup containers something that makes it obvious what they are16:00
markwashdolphm: ah okay I see16:00
dolphmkgriffs: that's kind of what i was thinking here16:01
kgriffsand putting a 0-byte file in there that says "do not delete this container!"16:01
dolphmglance-image-{uuid} or something16:01
dolphmas the container name16:01
icchahmmm but that way we cannot control downloads directly16:01
markwashmclaren: I'd like to put my ptl hat on for the last 5 minutes of this meeting, is it that time?16:01
mclarensure16:01
kgriffstbh, if there just a way to not make those containers show up when listing their account, that would be great16:02
kgriffssorry, make them *not* show up16:02
markwash<ptl> I think the passwordless approach shows a lot of promise, but still needs a lot more thought16:02
markwashif we can't quite figure it out, I still think we should make progress by moving the swift "single-tenant" creds into config from the db16:02
markwashin that case, we're cutting out a significant opportunity to attack those creds16:03
*** ruhe has joined #openstack-meeting-alt16:03
markwashin my view, the most significant opportunity16:03
markwash</ptl>16:03
markwashphew16:03
icchamarkwash: are you concerned about storing password(encrypted) on disk as well?16:03
markwashiccha: somewhat, but not nearly as much as storing it in DB16:04
mclarenhow about a new location format to denote read creds from file?16:04
mclarensomething like https+swift://:@xxx.com16:04
mclarenI suspect that may be illegal right now16:04
markwashmclaren: yeah, then I think we could make an online migration tool for it that would update a row at a time16:05
mclarenwe'd have to be careful with set image location -- to forbid that16:05
notmynameI gotta run, but if you have more stuff you need to discuss about swift, please ask in #openstack-swift16:05
markwashmclaren: I like that way of thinking about it actually16:05
markwash"read from file"16:05
mclarennotmyname: thanks16:06
markwashthat puts a logical cap around how long those creds exist in the code16:06
*** jcoufal has quit IRC16:06
markwashso opportunities to accidentally log them are much less16:06
markwashthough moving creds out of the location is the biggest win there too16:06
markwashimnsho16:06
icchathere  is patch with exists to substute it with hiddenuser or some other value right now16:07
mclarenok, thanks to everyone for their time. Let us know if you come up with some genious way to add consistency to the multi-tenant backend16:07
*** aignatov has joined #openstack-meeting-alt16:08
markwashshould I bang the gavel?16:08
mclarenyup, thanks markwash16:08
markwash#endmeeting16:08
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings"16:08
openstackMeeting ended Fri Nov 15 16:08:50 2013 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:08
openstackMinutes:        http://eavesdrop.openstack.org/meetings/glance/2013/glance.2013-11-15-15.04.html16:08
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/glance/2013/glance.2013-11-15-15.04.txt16:08
openstackLog:            http://eavesdrop.openstack.org/meetings/glance/2013/glance.2013-11-15-15.04.log.html16:08
*** IlyaE has quit IRC16:10
*** akuznetsov has quit IRC16:12
*** natishalom has quit IRC16:12
*** jmaron has quit IRC16:13
*** demorris has joined #openstack-meeting-alt16:14
*** natishalom has joined #openstack-meeting-alt16:18
*** sacharya has joined #openstack-meeting-alt16:19
*** natishalom has quit IRC16:20
*** jmaron has joined #openstack-meeting-alt16:22
*** natishalom has joined #openstack-meeting-alt16:23
*** natishalom has quit IRC16:28
*** the_real_kp has joined #openstack-meeting-alt16:28
*** ruhe has quit IRC16:31
*** markmcclain has joined #openstack-meeting-alt16:31
*** betsy has joined #openstack-meeting-alt16:32
*** natishalom has joined #openstack-meeting-alt16:34
*** natishalom has quit IRC16:35
*** ryanpetrello has quit IRC16:36
*** ruhe has joined #openstack-meeting-alt16:36
*** coolsvap has joined #openstack-meeting-alt16:38
*** kraman2 has joined #openstack-meeting-alt16:48
*** natishalom has joined #openstack-meeting-alt16:49
*** kraman has quit IRC16:49
*** katyafervent has quit IRC16:49
*** natishalom has quit IRC16:50
*** natishalom has joined #openstack-meeting-alt16:51
*** enikanorov has joined #openstack-meeting-alt16:57
*** enikanorov___ has quit IRC16:58
*** the_real_kp has left #openstack-meeting-alt16:58
*** IlyaE has joined #openstack-meeting-alt17:02
*** jprovazn has quit IRC17:02
*** demorris_ has joined #openstack-meeting-alt17:04
*** demorris has quit IRC17:06
*** demorris_ is now known as demorris17:06
*** tanisdl has quit IRC17:08
*** tanisdl has joined #openstack-meeting-alt17:10
*** ruhe has quit IRC17:18
*** aignatov has quit IRC17:19
*** devlaps has joined #openstack-meeting-alt17:21
*** akuznetsov has joined #openstack-meeting-alt17:28
*** SergeyLukjanov has joined #openstack-meeting-alt17:31
*** gokrokve_ has quit IRC17:33
*** zane has quit IRC17:35
*** flaper87 is now known as flaper87|afk17:36
*** boris-42 has quit IRC17:38
*** boris-42 has joined #openstack-meeting-alt17:39
*** boris-42 has quit IRC17:41
*** lsmola_ has quit IRC17:41
*** boris-42 has joined #openstack-meeting-alt17:42
*** derekh has quit IRC17:44
*** natishalom has quit IRC17:46
*** markwash has quit IRC17:50
*** natishalom has joined #openstack-meeting-alt17:50
*** twoputt_ has joined #openstack-meeting-alt17:51
*** twoputt has joined #openstack-meeting-alt17:51
*** demorris has quit IRC17:56
*** radix has quit IRC17:56
*** tanisdl has quit IRC18:01
*** flwang has quit IRC18:01
*** vipuls is now known as vipul18:02
*** tanisdl has joined #openstack-meeting-alt18:03
*** tanisdl has quit IRC18:03
*** alazarev has joined #openstack-meeting-alt18:11
*** natishalom has quit IRC18:16
*** yogesh has joined #openstack-meeting-alt18:17
*** natishalom has joined #openstack-meeting-alt18:17
*** natishalom has quit IRC18:18
*** natishalom has joined #openstack-meeting-alt18:18
*** gokrokve has joined #openstack-meeting-alt18:21
*** natishalom has quit IRC18:22
*** alazarev has quit IRC18:22
*** gokrokve_ has joined #openstack-meeting-alt18:23
*** lblanchard has quit IRC18:24
*** dolphm has quit IRC18:24
*** gokrokv__ has joined #openstack-meeting-alt18:25
*** natishalom has joined #openstack-meeting-alt18:25
*** natishalom has quit IRC18:25
*** gokrokve has quit IRC18:25
*** boris-42 has quit IRC18:26
*** gokrokve_ has quit IRC18:28
*** eankutse has quit IRC18:28
*** natishalom has joined #openstack-meeting-alt18:32
*** vponomaryov has left #openstack-meeting-alt18:32
*** devkulkarni1 has quit IRC18:33
*** dmakogon is now known as denis_makogon18:33
*** IlyaE has quit IRC18:35
*** lblanchard has joined #openstack-meeting-alt18:35
*** ruhe has joined #openstack-meeting-alt18:36
*** dolphm has joined #openstack-meeting-alt18:38
*** IlyaE has joined #openstack-meeting-alt18:40
*** ruhe has quit IRC18:40
*** arborism has joined #openstack-meeting-alt18:43
*** rsblendido has quit IRC18:53
*** rossella_s has quit IRC18:53
*** arborism is now known as amcrn18:54
*** sarob has joined #openstack-meeting-alt18:56
*** IlyaE has quit IRC18:56
*** eankutse has joined #openstack-meeting-alt18:59
*** sarob has quit IRC19:01
*** amytron has quit IRC19:01
*** kraman2 is now known as kraman19:02
*** pdmars has quit IRC19:02
*** pdmars has joined #openstack-meeting-alt19:03
*** IlyaE has joined #openstack-meeting-alt19:03
*** natishalom has quit IRC19:04
*** natishalom has joined #openstack-meeting-alt19:04
*** natishalom has quit IRC19:04
*** pdmars_ has joined #openstack-meeting-alt19:06
*** rnirmal has quit IRC19:06
*** natishalom has joined #openstack-meeting-alt19:07
*** pdmars has quit IRC19:07
*** zane has joined #openstack-meeting-alt19:08
*** eankutse has quit IRC19:08
*** natishalom has quit IRC19:08
*** SergeyLukjanov has quit IRC19:09
*** natishalom has joined #openstack-meeting-alt19:10
*** natishalom has quit IRC19:11
*** natishalom has joined #openstack-meeting-alt19:11
*** jergerber has joined #openstack-meeting-alt19:17
*** SergeyLukjanov has joined #openstack-meeting-alt19:19
*** alazarev has joined #openstack-meeting-alt19:20
*** devkulkarni has joined #openstack-meeting-alt19:20
*** eankutse has joined #openstack-meeting-alt19:24
*** sarob has joined #openstack-meeting-alt19:24
*** natishalom has quit IRC19:24
*** jmontemayor has joined #openstack-meeting-alt19:25
*** natishalom has joined #openstack-meeting-alt19:27
*** sarob has quit IRC19:29
*** SergeyLukjanov has quit IRC19:29
*** ryanpetrello has joined #openstack-meeting-alt19:33
*** Barker has quit IRC19:35
*** dprince has quit IRC19:35
*** vipul has quit IRC19:35
*** hub_cap has quit IRC19:35
*** ctracey has quit IRC19:35
*** fungi has quit IRC19:35
*** hub_cap has joined #openstack-meeting-alt19:37
*** ctracey has joined #openstack-meeting-alt19:37
*** Barker has joined #openstack-meeting-alt19:37
*** dprince has joined #openstack-meeting-alt19:37
*** vipul has joined #openstack-meeting-alt19:38
*** fungi has joined #openstack-meeting-alt19:38
*** markwash has joined #openstack-meeting-alt19:41
*** aignatov has joined #openstack-meeting-alt19:44
*** amytron has joined #openstack-meeting-alt19:49
*** aignatov has quit IRC19:50
*** aignatov has joined #openstack-meeting-alt19:53
*** sarob has joined #openstack-meeting-alt19:54
*** sarob has quit IRC19:56
*** nati_ueno has joined #openstack-meeting-alt19:59
*** tanisdl has joined #openstack-meeting-alt20:02
*** gokrokv__ has quit IRC20:02
*** gokrokve has joined #openstack-meeting-alt20:02
*** markmcclain has quit IRC20:05
*** natishalom has quit IRC20:08
*** natishalom has joined #openstack-meeting-alt20:08
*** devkulkarni has quit IRC20:19
*** natishalom has quit IRC20:19
*** kgriffs is now known as kgriffs_afk20:19
*** natishalom has joined #openstack-meeting-alt20:20
*** natishalom has quit IRC20:20
*** natishalom has joined #openstack-meeting-alt20:22
*** devkulkarni has joined #openstack-meeting-alt20:24
*** nati_ueno has quit IRC20:25
*** nati_ueno has joined #openstack-meeting-alt20:25
*** dprince has quit IRC20:31
*** cody-somerville has quit IRC20:31
*** IlyaE has quit IRC20:33
*** dolphm has quit IRC20:37
*** nati_ueno has quit IRC20:42
*** ryanpetrello has quit IRC20:44
*** natishalom has quit IRC20:48
*** natishalom has joined #openstack-meeting-alt20:49
*** natishalom has quit IRC20:49
*** gokrokve has quit IRC20:50
*** markmcclain has joined #openstack-meeting-alt20:51
*** natishalom has joined #openstack-meeting-alt20:51
*** sarob has joined #openstack-meeting-alt20:52
*** funzo has joined #openstack-meeting-alt21:00
*** gokrokve has joined #openstack-meeting-alt21:02
*** sarob_ has joined #openstack-meeting-alt21:04
*** ashaikh_ has joined #openstack-meeting-alt21:04
*** ashaikh has quit IRC21:05
*** ashaikh_ is now known as ashaikh21:05
*** sarob has quit IRC21:06
*** sarob__ has joined #openstack-meeting-alt21:06
*** twoputt has quit IRC21:07
*** twoputt_ has quit IRC21:07
*** dolphm has joined #openstack-meeting-alt21:08
*** sarob__ has quit IRC21:09
*** sarob has joined #openstack-meeting-alt21:09
*** sarob_ has quit IRC21:09
*** natishalom has quit IRC21:10
*** natishalom has joined #openstack-meeting-alt21:12
*** natishalom has quit IRC21:12
*** natishalom has joined #openstack-meeting-alt21:13
*** dolphm has quit IRC21:13
*** gokrokve has quit IRC21:19
*** gokrokve has joined #openstack-meeting-alt21:19
*** markmcclain has quit IRC21:19
*** sarob has quit IRC21:20
*** sarob has joined #openstack-meeting-alt21:21
*** zane has quit IRC21:22
*** gokrokve has quit IRC21:24
*** natishalom has quit IRC21:41
*** natishalom has joined #openstack-meeting-alt21:43
*** natishalom has quit IRC21:43
*** natishalom has joined #openstack-meeting-alt21:44
*** markmcclain has joined #openstack-meeting-alt21:48
*** gokrokve has joined #openstack-meeting-alt22:01
*** kevinconway has quit IRC22:08
*** dolphm has joined #openstack-meeting-alt22:09
*** dolphm has quit IRC22:13
*** natishalom has quit IRC22:15
*** natishalom has joined #openstack-meeting-alt22:15
*** markmcclain has quit IRC22:16
*** nati_ueno has joined #openstack-meeting-alt22:17
*** lblanchard has quit IRC22:20
*** nati_ueno has quit IRC22:21
*** kgriffs_afk is now known as kgriffs22:21
*** sarob has quit IRC22:26
*** sarob_ has joined #openstack-meeting-alt22:26
*** jmaron has quit IRC22:26
*** coolsvap has quit IRC22:28
*** amcrn_ has joined #openstack-meeting-alt22:30
*** dolphm has joined #openstack-meeting-alt22:31
*** eankutse has quit IRC22:32
*** jmontemayor has quit IRC22:33
*** amcrn has quit IRC22:33
*** ashaikh has quit IRC22:33
*** markmcclain has joined #openstack-meeting-alt22:35
*** sarob_ has quit IRC22:35
*** sacharya has quit IRC22:38
*** ashaikh has joined #openstack-meeting-alt22:47
*** natishalom has quit IRC22:51
*** natishalom has joined #openstack-meeting-alt22:51
*** jmaron has joined #openstack-meeting-alt22:56
*** twoputt has joined #openstack-meeting-alt22:59
*** twoputt_ has joined #openstack-meeting-alt22:59
*** yogesh has quit IRC23:04
*** yogesh has joined #openstack-meeting-alt23:05
*** twoputt__ has joined #openstack-meeting-alt23:05
*** twoputt_1 has joined #openstack-meeting-alt23:05
*** jmaron has quit IRC23:05
*** twoputt has quit IRC23:05
*** twoputt_ has quit IRC23:06
*** pdmars_ has quit IRC23:06
*** betsy has quit IRC23:06
*** pcm_ has quit IRC23:07
*** Barker has quit IRC23:07
*** yogesh has quit IRC23:09
*** devkulkarni has quit IRC23:11
*** ashaikh has quit IRC23:16
*** devkulkarni has joined #openstack-meeting-alt23:17
*** sarob has joined #openstack-meeting-alt23:20
*** RajeshMohan has quit IRC23:21
*** RajeshMohan has joined #openstack-meeting-alt23:22
*** kgriffs is now known as kgriffs_afk23:27
*** alazarev has quit IRC23:28
*** jmaron has joined #openstack-meeting-alt23:31
*** brents has joined #openstack-meeting-alt23:32
*** alazarev has joined #openstack-meeting-alt23:33
*** julim has quit IRC23:33
*** jmaron has quit IRC23:36
*** aignatov has quit IRC23:42
*** alazarev has quit IRC23:45
*** natishalom has quit IRC23:46
*** natishalom has joined #openstack-meeting-alt23:46
*** RajeshMohan has quit IRC23:54
*** RajeshMohan has joined #openstack-meeting-alt23:54
*** sacharya has joined #openstack-meeting-alt23:58
*** vkmc has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!