| *** jamesmcarthur has joined #openstack-meeting-alt | 00:02 | |
| *** slaweq has joined #openstack-meeting-alt | 00:11 | |
| *** bobmel has joined #openstack-meeting-alt | 00:13 | |
| *** slaweq has quit IRC | 00:15 | |
| *** bobmel has quit IRC | 00:17 | |
| *** jamesmcarthur has quit IRC | 00:58 | |
| *** jamesmcarthur has joined #openstack-meeting-alt | 01:15 | |
| *** igordc has joined #openstack-meeting-alt | 01:49 | |
| *** jamesmcarthur has quit IRC | 02:02 | |
| *** slaweq has joined #openstack-meeting-alt | 02:11 | |
| *** slaweq has quit IRC | 02:16 | |
| *** igordc has quit IRC | 02:43 | |
| *** bobmel has joined #openstack-meeting-alt | 02:56 | |
| *** bobmel has quit IRC | 03:00 | |
| *** slaweq has joined #openstack-meeting-alt | 03:11 | |
| *** rcernin_ has joined #openstack-meeting-alt | 03:13 | |
| *** rcernin has quit IRC | 03:13 | |
| *** slaweq has quit IRC | 03:16 | |
| *** hongbin has joined #openstack-meeting-alt | 03:34 | |
| *** rcernin_ has quit IRC | 03:56 | |
| *** rcernin has joined #openstack-meeting-alt | 04:00 | |
| *** hongbin has quit IRC | 04:24 | |
| *** bobmel has joined #openstack-meeting-alt | 04:44 | |
| *** bobmel has quit IRC | 04:49 | |
| *** gyee has quit IRC | 05:00 | |
| *** slaweq has joined #openstack-meeting-alt | 05:11 | |
| *** slaweq has quit IRC | 05:16 | |
| *** links has joined #openstack-meeting-alt | 05:46 | |
| *** dave-mccowan has quit IRC | 06:07 | |
| *** kevinz has joined #openstack-meeting-alt | 06:20 | |
| *** rcernin has quit IRC | 06:54 | |
| *** ccamacho has joined #openstack-meeting-alt | 07:01 | |
| *** e0ne has joined #openstack-meeting-alt | 07:09 | |
| *** slaweq has joined #openstack-meeting-alt | 07:11 | |
| *** slaweq has quit IRC | 07:17 | |
| *** bobmel has joined #openstack-meeting-alt | 07:26 | |
| *** bobmel has quit IRC | 07:31 | |
| *** Kevin_Zheng has joined #openstack-meeting-alt | 07:42 | |
| *** e0ne has quit IRC | 07:46 | |
| *** xinliang has joined #openstack-meeting-alt | 07:54 | |
| *** hrw has joined #openstack-meeting-alt | 07:56 | |
| hrw | morning | 07:56 |
|---|---|---|
| ricolin | o/ | 07:57 |
| Kevin_Zheng | o/ | 07:57 |
| xinliang | morning | 07:57 |
| ricolin | multi-arch will have our initial meetup in 3 mins, feel free to join:) | 07:58 |
| *** joxyuki37 has joined #openstack-meeting-alt | 07:58 | |
| ricolin | as it's initial, no much formed agenda there, so add whatever you like in https://etherpad.openstack.org/p/Multi-Arch-agenda :) | 07:59 |
| kevinz | o/ | 08:00 |
| ricolin | #startmeeting multi_arch | 08:00 |
| openstack | Meeting started Tue Jan 7 08:00:35 2020 UTC and is due to finish in 60 minutes. The chair is ricolin. Information about MeetBot at http://wiki.debian.org/MeetBot. | 08:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 08:00 |
| *** openstack changes topic to " (Meeting topic: multi_arch)" | 08:00 | |
| openstack | The meeting name has been set to 'multi_arch' | 08:00 |
| ricolin | #topic roll call | 08:00 |
| *** openstack changes topic to "roll call (Meeting topic: multi_arch)" | 08:00 | |
| hrw | o/ | 08:00 |
| ricolin | \o/ | 08:00 |
| Kevin_Zheng | o/ | 08:01 |
| kevinz | o/ | 08:01 |
| ricolin | ianw_pto, is on pto so he's not likely join this time | 08:01 |
| ricolin | I think tonyb might be as well:) | 08:01 |
| *** slaweq has joined #openstack-meeting-alt | 08:02 | |
| ricolin | The SIG propose is landed yesterday | 08:03 |
| ricolin | https://governance.openstack.org/sigs/ | 08:03 |
| ricolin | #link https://governance.openstack.org/sigs/ | 08:03 |
| ricolin | so we're official now | 08:03 |
| ricolin | #topic greeting | 08:04 |
| *** openstack changes topic to "greeting (Meeting topic: multi_arch)" | 08:04 | |
| hrw | cool | 08:04 |
| hrw | so the simple question: which archs this sig covers? other than arm64 | 08:04 |
| *** joxyuki37 has left #openstack-meeting-alt | 08:05 | |
| *** lplearn21 has joined #openstack-meeting-alt | 08:05 | |
| ricolin | hrw, I put following words in initial goal of SIG | 08:05 |
| ricolin | At first stage: We aim to reach better coverage for ARM support in OpenStack. | 08:05 |
| ricolin | This includes documents, test jobs, tracking issues, and building ecosystem. | 08:05 |
| ricolin | We also welcome other architecture to join and triggering tasks. | 08:05 |
| hrw | ok | 08:06 |
| ricolin | the scope on sigs page defined as follow | 08:06 |
| ricolin | This SIG aim to reach better coverage for multiple architecture support in OpenStack. This includes provide documents, building test jobs, tracking issues, and building ecosystem for multiple architecture. | 08:06 |
| ricolin | hrw, do you have any other arch. in your mind that we maybe can get people and resources on it too? | 08:07 |
| hrw | ricolin: I would love to see someone with ppc64le resources ;D | 08:07 |
| kevinz | I know that jchen from IBM are working with S390x | 08:08 |
| kevinz | But he is not here today | 08:08 |
| hrw | ok, so to arm64... | 08:09 |
| ricolin | hrw, maybe we can ask around with ML to see who whould like to join us and work on ppc64le | 08:09 |
| hrw | sure | 08:09 |
| hrw | someone other than linaro with resources? | 08:09 |
| ricolin | is there any works you know already targeting ppc64le in OpenStack? | 08:10 |
| ricolin | hrw, we're also try to ask Huawei too | 08:10 |
| hrw | ricolin: other than kolla having some kind of ppc64le support no | 08:10 |
| ricolin | Kunluncloud is also checking if they can provide their new resources out | 08:11 |
| hrw | would be great as for now there are just 8 nodes | 08:11 |
| ricolin | and big thanks to ianw_pto to make a separate pipeline for them:) | 08:12 |
| hrw | ricolin: it was quite a discussion on how to handle it ;D | 08:12 |
| hrw | I suggested separate queue to not have main jobs blocked and then separate pipeline was suggested | 08:13 |
| ricolin | oh, also kevinz is working on provide another group of resources to OpenStack community too | 08:13 |
| *** mrda has joined #openstack-meeting-alt | 08:14 | |
| ricolin | kevinz, how's that working for you?:) | 08:14 |
| kevinz | Aha, that resource is almost ready | 08:15 |
| ricolin | hrw, is there anywhere I can see the discussion? which I can learn more on the history:) | 08:15 |
| kevinz | I'm working on the ssl certificate, and reconfigure | 08:15 |
| kevinz | After that Openstack-infra team can use it | 08:15 |
| hrw | ricolin: #openstack-infra logs | 08:15 |
| * ricolin think we should switch topic:) | 08:16 | |
| ricolin | #topic SIG initial setup | 08:16 |
| *** openstack changes topic to "SIG initial setup (Meeting topic: multi_arch)" | 08:16 | |
| hrw | ricolin: 2019.12.11 irc log | 08:16 |
| ricolin | thanks! | 08:16 |
| ricolin | kevinz, that's great news! | 08:17 |
| *** tesseract has joined #openstack-meeting-alt | 08:17 | |
| kevinz | Thanks | 08:19 |
| kevinz | the cluster will offer about 400 vcpu | 08:19 |
| ricolin | that's huge improve to what we have | 08:20 |
| hrw | kevinz: 50 8vcpu nodes? :D | 08:21 |
| kevinz | 9 * 46 I, but in the first phase will be 8*46 | 08:21 |
| kevinz | The other 2 nodes, one is as a operation node, they other is served as a router | 08:22 |
| hrw | sure | 08:22 |
| kevinz | Centriq 2400 | 08:22 |
| hrw | o. another set of not existing machines ;d | 08:23 |
| hrw | nice 46 core machines. | 08:24 |
| kevinz | yes sure, hope more and more resources will join | 08:24 |
| ricolin | kevinz, Long live Linaro:) | 08:25 |
| *** admcleod has joined #openstack-meeting-alt | 08:25 | |
| kevinz | \o/ | 08:25 |
| ricolin | And back to the SIG setup, I think it will be nice to have a StoryBoard to track all tasks | 08:26 |
| mrda | +1 | 08:26 |
| ricolin | mrda, o/ | 08:26 |
| mrda | \o | 08:26 |
| hrw | +1 | 08:26 |
| kevinz | +1 | 08:26 |
| ricolin | #action ricolin will help to set up the environment for our StoryBoard | 08:27 |
| ricolin | Do we need any initial documents? | 08:27 |
| ricolin | or any documents that we should build in short/long run? | 08:28 |
| mrda | ricolin: what did you have in mind? | 08:29 |
| ricolin | mrda, a document to point out where people need to change to adopt ARM? but not sure that's required | 08:30 |
| ricolin | collecting use cases? | 08:30 |
| mrda | Right, so a "how to support archs other than x86" and "these are the use cases that we definitely want to support"? | 08:31 |
| ricolin | yep | 08:32 |
| hrw | I would like to see something like 'oh, on arm64 you need to do XYZ in other way - here is how and why' | 08:32 |
| mrda | I guess the first is known common pitfalls, and the 2nd is things that we think should (alomst) work out of the box | 08:32 |
| mrda | hrw: right | 08:32 |
| hrw | as we can then work on moving that logic into openstack components to allow to remove that option | 08:32 |
| hrw | like 'hw_firmware_type=uefi' which was needed <queens to get anything booted | 08:32 |
| ricolin | hrw, good idea | 08:33 |
| hrw | how many of you know how to create instance with 20 pcie slots? | 08:33 |
| *** rdopiera has joined #openstack-meeting-alt | 08:33 | |
| kevinz | hrw, strong agree | 08:34 |
| ricolin | We definitely should keep tracking who is using ARM with OpenStack too | 08:34 |
| hrw | on x86 with i440fx user has unlimited amount of pci slots. on q35/aarch64 you have 2-3 slots and nothing more | 08:34 |
| *** links has quit IRC | 08:34 | |
| *** qiuwenbo61 has joined #openstack-meeting-alt | 08:34 | |
| mrda | ok, cool | 08:34 |
| hrw | ricolin: 'who' + 'issues they had'? | 08:35 |
| ricolin | hrw, and also 'who'+'helping the community to build env.' | 08:35 |
| ricolin | So we can high light the help from Linaro, Red hat, etc | 08:36 |
| ricolin | s/help/helps/ | 08:36 |
| *** maohongbo has joined #openstack-meeting-alt | 08:37 | |
| *** links has joined #openstack-meeting-alt | 08:37 | |
| ricolin | feel like we can start to build some doc for `oh, on arm64 you need to do XYZ in other way - here is how and why` and `use cases, who, and issues they had`? | 08:38 |
| hrw | sounds good | 08:38 |
| ricolin | anyone willing to help writing:) | 08:38 |
| mrda | yep | 08:38 |
| ricolin | I can help to build the repo ready for docs | 08:39 |
| ricolin | #action ricolin help build multi-arch SIG repo | 08:39 |
| *** bobmel has joined #openstack-meeting-alt | 08:40 | |
| ricolin | #action we need people to help on documents `oh, on arm64 you need to do XYZ in other way - here is how and why` and `use cases, who, and issues they had` | 08:41 |
| ricolin | And now CI jobs:) | 08:41 |
| hrw | CI is easy | 08:42 |
| mrda | lol | 08:42 |
| ricolin | hrw, I assume you will keep working on kolla part? | 08:42 |
| hrw | ricolin: kolla(-ansible) is where I am core | 08:42 |
| ricolin | hrw, you're now on auto signed up to ci stories!:) | 08:42 |
| hrw | mrda: in properly managed project you just duplicate existing job, add -aarch64 to name and define aarch64 nodeset | 08:43 |
| mrda | Sure, I'm just not familiar | 08:43 |
| hrw | I can help with CI definitions if needed | 08:44 |
| ricolin | hrw, do you think it will be easy to set up job for openstack-helm as well? | 08:44 |
| hrw | ricolin: never looked at helm but should be | 08:45 |
| ricolin | kind of interested to verify on too | 08:45 |
| hrw | ricolin: if something does not work then it needs to be fixed in project ;D | 08:45 |
| ricolin | agree, I guess to see if everything works or not is one of our initial goal, right:) | 08:46 |
| hrw | yep | 08:47 |
| *** priteau has joined #openstack-meeting-alt | 08:47 | |
| ricolin | okay, now chairs | 08:48 |
| ricolin | anyone interested:) | 08:48 |
| ricolin | ? | 08:48 |
| *** qiuwenbo61 has quit IRC | 08:48 | |
| mrda | I vote for tonyb :-P | 08:48 |
| ricolin | tonyb+1:) | 08:48 |
| hrw | I prefer not to apply myself. | 08:48 |
| ricolin | we can have about three(or more) | 08:49 |
| mrda | How about you ricolin ? | 08:49 |
| ricolin | I'm volunteer too | 08:50 |
| ricolin | to help set up stuff | 08:50 |
| ricolin | totally fine to have others to replace me:) | 08:51 |
| ricolin | maybe ianw_pto will be interested too?:) | 08:51 |
| ricolin | I will ask them when they back on works | 08:52 |
| mrda | sounds good | 08:52 |
| ricolin | mrda, how about you:) | 08:53 |
| *** tetsuro has quit IRC | 08:53 | |
| mrda | It is unfair to suggest tonyb while he's travelling, but he would be excellent. | 08:53 |
| ricolin | agree | 08:53 |
| mrda | ricolin: I've just come back to the community after a 2 year break, so I should settle in a little more longer | 08:53 |
| *** tetsuro has joined #openstack-meeting-alt | 08:54 | |
| ricolin | mrda, do you happen to know when tony will back on works? | 08:54 |
| mrda | And to be honest, I'm still learning ppc64le. I don't know if I can learn aarch64 as well | 08:55 |
| ricolin | mrda, you're the one hrw looking for! | 08:56 |
| mrda | He should be back on deck soon, albeit working from a eu tz for a short while | 08:56 |
| ricolin | we ware talk about what elese arch we can find people or resources to work on | 08:56 |
| hrw | mrda: ignore aarch64, ppc64le has less devs | 08:56 |
| mrda | :) | 08:57 |
| ricolin | lol | 08:57 |
| mrda | Well, that's what I'm focusing on. I think the SIG coming along is good timing. | 08:57 |
| hrw | mrda: if you have ppc64le access and work on openstack there then aarch64 is more like a source to look on how to solve !x86isms | 08:57 |
| mrda | yep | 08:58 |
| hrw | I remember times of fixing rhel7/aarch64 where my aarch64 fixes were fixing ppc64le and s390x too | 08:58 |
| ricolin | mrda, is there any work in progress in community now? | 08:58 |
| hrw | as most of them were 'if you are not x86 then' | 08:58 |
| *** qiuwenbo61 has joined #openstack-meeting-alt | 08:58 | |
| mrda | Yes, I'm looking at upstream fixes for ppc64le wherever they come | 08:59 |
| ricolin | mrda, if you see something can you update the etherpad too(since our documents repo and storyboard is not yet ready)? | 09:00 |
| ricolin | #link https://etherpad.openstack.org/p/Multi-arch | 09:00 |
| *** maohongbo1 has joined #openstack-meeting-alt | 09:00 | |
| mrda | ricolin: sure | 09:01 |
| hrw | I added some github links there | 09:01 |
| *** maohongbo has quit IRC | 09:01 | |
| *** maohongbo1 is now known as maohongbo | 09:01 | |
| ricolin | #action mrda help to collect update ppc64le actions and resources in community if see any | 09:01 |
| ricolin | hrw, super! | 09:02 |
| ricolin | I think we're out of time | 09:02 |
| hrw | ricolin: was easy - just looked into my summary of december work ;D | 09:02 |
| mrda | Thanks ricolin (for everything) | 09:02 |
| ricolin | hrw, everything feels easy with you around! | 09:02 |
| hrw | ricolin: if you say so... | 09:03 |
| hrw | ;D | 09:03 |
| ricolin | anything else before we end our very first meetup?:D | 09:03 |
| hrw | see you in 7h on second meeting? | 09:03 |
| mrda | Next week, same time? | 09:03 |
| ricolin | hrw, yes:) | 09:03 |
| hrw | time slot fits my calendar | 09:04 |
| ricolin | mrda, we got another one after 7hours | 09:04 |
| mrda | Well, that will be 1:30am for me, so I will see you for 3rd meeting the same time next week | 09:04 |
| mrda | :-) | 09:04 |
| ricolin | I put the meeting schedule biweekly-even | 09:04 |
| ricolin | or anyone think we should do this weekly? | 09:04 |
| hrw | will see | 09:05 |
| mrda | every second week is ok for now | 09:05 |
| ricolin | okay | 09:05 |
| ricolin | Thanks all for join:) | 09:05 |
| *** slaweq_ has joined #openstack-meeting-alt | 09:05 | |
| ricolin | see you around! | 09:05 |
| mrda | Thanks! | 09:05 |
| ricolin | #endmeeting | 09:05 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 09:05 | |
| openstack | Meeting ended Tue Jan 7 09:05:30 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 09:05 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/multi_arch/2020/multi_arch.2020-01-07-08.00.html | 09:05 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/multi_arch/2020/multi_arch.2020-01-07-08.00.txt | 09:05 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/multi_arch/2020/multi_arch.2020-01-07-08.00.log.html | 09:05 |
| *** qiuwenbo61 has quit IRC | 09:05 | |
| hrw | thanks | 09:06 |
| priteau | #startmeeting blazar | 09:06 |
| openstack | Meeting started Tue Jan 7 09:06:21 2020 UTC and is due to finish in 60 minutes. The chair is priteau. Information about MeetBot at http://wiki.debian.org/MeetBot. | 09:06 |
| hrw | have fun | 09:06 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 09:06 |
| *** hrw has left #openstack-meeting-alt | 09:06 | |
| *** openstack changes topic to " (Meeting topic: blazar)" | 09:06 | |
| openstack | The meeting name has been set to 'blazar' | 09:06 |
| priteau | #topic Roll call | 09:06 |
| *** openstack changes topic to "Roll call (Meeting topic: blazar)" | 09:06 | |
| tetsuro | o/ | 09:06 |
| priteau | Hi tetsuro | 09:07 |
| priteau | I am afraid it's going to be just the two of us again | 09:07 |
| *** slaweq has quit IRC | 09:07 | |
| priteau | Agenda for today: | 09:08 |
| priteau | Update on specs work | 09:08 |
| priteau | Code review priorities | 09:08 |
| priteau | Next meeting | 09:08 |
| priteau | AOB | 09:08 |
| priteau | #topic Update on specs work | 09:09 |
| *** openstack changes topic to "Update on specs work (Meeting topic: blazar)" | 09:09 | |
| priteau | As a reminder our spec priorities are outlined at https://etherpad.openstack.org/p/blazar-ptg-ussuri | 09:10 |
| priteau | Initial timeline was too optimistic I am afraid | 09:10 |
| priteau | Jake doesn't have time to work on upstream anymore at the moment, so I will have to pick up his specs & code. | 09:11 |
| priteau | I didn't make progress on usage enforcement spec, but I wrote an initial draft for preemptibles | 09:11 |
| priteau | #link https://review.opendev.org/#/c/701286/ | 09:11 |
| priteau | I have proof of concept code as well, which has been used on a real cloud (only preprod though, not in production) | 09:12 |
| priteau | I would appreciate your input on it | 09:13 |
| tetsuro | I am very glad that now preemptible spec is there. I'll have a look on it. | 09:14 |
| *** maohongbo1 has joined #openstack-meeting-alt | 09:14 | |
| priteau | Thank you. | 09:15 |
| priteau | Any progress on your side? | 09:15 |
| *** maohongbo has quit IRC | 09:16 | |
| *** maohongbo1 is now known as maohongbo | 09:16 | |
| tetsuro | Not on my side, I am afraid | 09:17 |
| priteau | If I can make enough progress on other specs, I will help with the quota one. | 09:20 |
| tetsuro | That would be really helpful, thanks. | 09:20 |
| priteau | #topic Code review priorities | 09:21 |
| *** openstack changes topic to "Code review priorities (Meeting topic: blazar)" | 09:21 | |
| priteau | Other projects are actively dropping py27 code and dependencies so it would be good to follow | 09:22 |
| priteau | The problem is that with just two cores active over the last month, if one of us submits a patch we have only one +2 | 09:22 |
| priteau | I propose that we relax the rules and allow a W+1 with a single +2. | 09:23 |
| priteau | Thoughts? | 09:25 |
| tetsuro | That is a reasonable proposal with the current condition | 09:25 |
| tetsuro | So I am good with that rule. | 09:25 |
| priteau | I hope that the patches will merge cleanly. I've updated a change from Sam Morrison (Nectar Coud) and it hasn't passed CI: https://review.opendev.org/#/c/699518/ | 09:27 |
| priteau | The failure is always the same, in Tempest it fails to submit a lease because "Start date must be later than current date'" | 09:28 |
| priteau | Oh, I think I now | 09:29 |
| priteau | Some gabbi tests have hardcoded: | 09:29 |
| priteau | start_date: "2020-01-01 10:00" | 09:29 |
| priteau | I'll push a patch to fix it | 09:30 |
| tetsuro | Ah, good catch, thanks. | 09:30 |
| tetsuro | happy new year... | 09:31 |
| priteau | https://review.opendev.org/#/c/701344 | 09:32 |
| priteau | Heh | 09:32 |
| priteau | This is a high priority review. | 09:32 |
| priteau | #topic Next meeting | 09:34 |
| *** openstack changes topic to "Next meeting (Meeting topic: blazar)" | 09:34 | |
| priteau | I am on travel all of next week, so I will have to cancel the next meeting | 09:34 |
| priteau | Next meeting would be on January 21 | 09:35 |
| tetsuro | Works fo me | 09:36 |
| *** derekh has joined #openstack-meeting-alt | 09:36 | |
| priteau | #topic AOB | 09:37 |
| *** openstack changes topic to "AOB (Meeting topic: blazar)" | 09:37 | |
| priteau | Anything else to share? | 09:37 |
| tetsuro | Nothing. | 09:38 |
| priteau | Thanks for joining today! | 09:39 |
| priteau | Have a good week | 09:39 |
| tetsuro | Thanks, priteau | 09:39 |
| priteau | #endmeeting | 09:39 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 09:39 | |
| openstack | Meeting ended Tue Jan 7 09:39:48 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 09:39 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-01-07-09.06.html | 09:39 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-01-07-09.06.txt | 09:39 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-01-07-09.06.log.html | 09:39 |
| *** maohongbo1 has joined #openstack-meeting-alt | 09:42 | |
| *** maohongbo has quit IRC | 09:43 | |
| *** maohongbo1 is now known as maohongbo | 09:43 | |
| *** slaweq_ is now known as slaweq | 10:16 | |
| *** xinliang has quit IRC | 10:20 | |
| *** priteau has quit IRC | 10:37 | |
| *** links has quit IRC | 10:45 | |
| *** links has joined #openstack-meeting-alt | 10:49 | |
| *** dviroel has joined #openstack-meeting-alt | 10:50 | |
| *** tetsuro has quit IRC | 11:01 | |
| *** jraju__ has joined #openstack-meeting-alt | 11:13 | |
| *** links has quit IRC | 11:13 | |
| *** bobmel has quit IRC | 11:54 | |
| *** tmazur has joined #openstack-meeting-alt | 12:08 | |
| *** lpetrut has joined #openstack-meeting-alt | 12:33 | |
| *** rfolco has joined #openstack-meeting-alt | 12:45 | |
| *** szaher has joined #openstack-meeting-alt | 13:00 | |
| *** e0ne has joined #openstack-meeting-alt | 13:20 | |
| *** e0ne has quit IRC | 13:25 | |
| *** e0ne_ has joined #openstack-meeting-alt | 13:25 | |
| *** tmazur has quit IRC | 13:27 | |
| *** dave-mccowan has joined #openstack-meeting-alt | 13:28 | |
| *** priteau has joined #openstack-meeting-alt | 13:47 | |
| *** diablo_rojo has joined #openstack-meeting-alt | 13:47 | |
| *** liuyulong has joined #openstack-meeting-alt | 13:47 | |
| *** e0ne_ has quit IRC | 13:55 | |
| *** jraju__ has quit IRC | 14:30 | |
| *** lbragstad_ is now known as lbragstad | 14:34 | |
| *** lbragstad has quit IRC | 14:35 | |
| *** lbragstad has joined #openstack-meeting-alt | 14:41 | |
| *** gagehugo has joined #openstack-meeting-alt | 15:00 | |
| *** lplearn21 has quit IRC | 15:01 | |
| *** lpetrut has quit IRC | 15:31 | |
| *** gyee has joined #openstack-meeting-alt | 16:16 | |
| *** rfolco is now known as rfolcOUT | 16:16 | |
| *** diablo_rojo has quit IRC | 16:52 | |
| cmurphy | #startmeeting keystone | 17:00 |
| openstack | Meeting started Tue Jan 7 17:00:28 2020 UTC and is due to finish in 60 minutes. The chair is cmurphy. Information about MeetBot at http://wiki.debian.org/MeetBot. | 17:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 17:00 |
| *** openstack changes topic to " (Meeting topic: keystone)" | 17:00 | |
| openstack | The meeting name has been set to 'keystone' | 17:00 |
| cmurphy | #link https://etherpad.openstack.org/p/keystone-weekly-meeting agenda | 17:00 |
| cmurphy | o/ | 17:00 |
| knikolla | o/ | 17:01 |
| vishakha | o/ | 17:01 |
| gagehugo | o/ | 17:01 |
| cmurphy | welcome back everyone | 17:02 |
| cmurphy | how were your holidays? | 17:02 |
| gagehugo | busier than I wanted, but not bad | 17:03 |
| knikolla | went by too quickly | 17:04 |
| gagehugo | ^ | 17:04 |
| cmurphy | i didn't take much time off but it was nice and quiet :) | 17:05 |
| vishakha | They were good :) how was yours? | 17:06 |
| cmurphy | not bad :) | 17:06 |
| cmurphy | #topic Reminder: spec freeze week of Feb 10 | 17:07 |
| *** openstack changes topic to "Reminder: spec freeze week of Feb 10 (Meeting topic: keystone)" | 17:07 | |
| cmurphy | over a month away but just a reminder to help with reviews | 17:07 |
| cmurphy | #link https://review.opendev.org/#/q/status:open+project:openstack/keystone-specs+path:%22%255Especs/.*/ussuri.*%2524%22 | 17:07 |
| cmurphy | #topic L1 duty rotation | 17:08 |
| *** openstack changes topic to "L1 duty rotation (Meeting topic: keystone)" | 17:08 | |
| cmurphy | #link https://etherpad.openstack.org/p/keystone-l1-duty | 17:08 |
| cmurphy | last time was vishakha - any bugs triaged that you want to discuss? | 17:08 |
| vishakha | Yes i wanted to discuss about the bug | 17:09 |
| vishakha | https://bugs.launchpad.net/keystone/+bug/1857086 | 17:09 |
| openstack | Launchpad bug 1857086 in OpenStack Identity (keystone) "Trying to update user options field for ldap user gives 403 forbidden" [Undecided,Invalid] | 17:09 |
| * lbragstad walks in late | 17:10 | |
| vishakha | I wasn’t sure about mfa with ldap user | 17:10 |
| * cmurphy waves to lbragstad | 17:11 | |
| vishakha | I was wondering if anyone can share some knowledge over this | 17:11 |
| lbragstad | vishakha sorry - i jumped on that and tried triaging it yesterday | 17:11 |
| lbragstad | IMO - all the resource option for identity APIs is specific to SQL... i don't think we can support MFA with ldap without some serious thought | 17:13 |
| vishakha | lbragstad: does mfa works differently for ldap user as compared to normal user? | 17:13 |
| cmurphy | abhishek makes a good point, totp is an auth method and not a property of a user | 17:13 |
| knikolla | ++, i also feel like if we're delegating auth to ldap, we shouldn't hack mfa on top of that. | 17:14 |
| knikolla | from a philosophical standpoint. | 17:14 |
| lbragstad | we store MFA keys on the user reference though | 17:14 |
| cmurphy | but with the ldap backend auth isn't delegated, it's handled by keystone | 17:14 |
| lbragstad | we have to find a way to toggle MFA on and off for ldap, which we don't write to | 17:14 |
| knikolla | we're just passing the username/password to the ldap server though. | 17:14 |
| knikolla | not doing much on top of that. | 17:14 |
| cmurphy | but that's still the 'password' auth method | 17:14 |
| gagehugo | do we not store user options separately for mapped users? | 17:15 |
| gagehugo | that "enabled" setting will always fail for ldap | 17:15 |
| cmurphy | i think user options is a different table | 17:16 |
| cmurphy | but maybe the "enabled" option is why they're getting the 403 | 17:16 |
| gagehugo | that's what I was thinking | 17:16 |
| knikolla | IIRC, and from what lbragstad linked, the entire update_user function is 403 | 17:17 |
| lbragstad | correct - i think we'd have to generalize that up in the manager somehow? | 17:17 |
| gagehugo | ah ok | 17:18 |
| lbragstad | but - it should have left an "ldap doesn't support writes" 403... not a permission 403 | 17:18 |
| lbragstad | which kinda threw me off | 17:18 |
| cmurphy | right | 17:18 |
| lbragstad | that's why i wanted to ask about credentials, just to make sure, since that error looks similar to a permission thing | 17:19 |
| knikolla | hmmm... good call. | 17:19 |
| cmurphy | so I don't think this is an invalid bug because I think auth methods are separate from identity driver, but the question is whether it's an issue with the credentials they're using, a broken policy rule, an issue with using the "enabled" parameter in PATCH, or a bug in the ldap manager | 17:21 |
| cmurphy | does that sum it up? | 17:21 |
| gagehugo | I think so | 17:22 |
| vishakha | Imo it does sum it up | 17:22 |
| knikolla | ah, i see what you mean now. ldap uses the password auth method. | 17:23 |
| cmurphy | can someone reopen the bug and add a comment? | 17:24 |
| vishakha | Sure i will do it | 17:24 |
| cmurphy | thanks vishakha | 17:25 |
| lbragstad | thanks for updating | 17:25 |
| cmurphy | anyone want to volunteer to take the next bug duty rotation? | 17:25 |
| knikolla | i can't do the next one, but can do the one after. | 17:26 |
| cmurphy | okay I'll take this week | 17:27 |
| knikolla | thanks cmurphy :) | 17:27 |
| cmurphy | :) | 17:28 |
| cmurphy | anything else on this topic? | 17:28 |
| cmurphy | #topic review requests | 17:29 |
| *** openstack changes topic to "review requests (Meeting topic: keystone)" | 17:29 | |
| cmurphy | anyone working on anything that they want eyes on? | 17:29 |
| lbragstad | curious if anyone would like to take another look at https://review.opendev.org/#/c/699743/ ? | 17:30 |
| gagehugo | I got https://review.opendev.org/#/c/699013/ if anyone has time | 17:30 |
| lbragstad | mordred had a ksa patch he wanted to get reviews on, too | 17:31 |
| cmurphy | lbragstad: lgtm | 17:32 |
| cmurphy | gagehugo: will review today | 17:32 |
| lbragstad | https://review.opendev.org/#/c/662734/ was the other one he had | 17:32 |
| lbragstad | ty cmurphy | 17:32 |
| gagehugo | ty cmurphy | 17:32 |
| cmurphy | i discovered a fun bug while working on functional protection tests for the assignments api https://review.opendev.org/700826 | 17:32 |
| cmurphy | also easy rst fix https://review.opendev.org/700780 | 17:33 |
| cmurphy | lbragstad: oh that's an interesting one | 17:35 |
| cmurphy | it depends on a devstack change that hasn't merged yet though | 17:35 |
| lbragstad | yeah... mordred was asking for feedback | 17:35 |
| *** mordred has joined #openstack-meeting-alt | 17:36 | |
| * mordred waves to the nice people | 17:36 | |
| cmurphy | i think there was either a mailing list discussion or a discussion on another patch about this, i think one of the questions was whether the default should be 'internal' or 'public' | 17:36 |
| mordred | for the record, that change is fricklers | 17:36 |
| lbragstad | if end users are supposed to use it - i would think it should be public... | 17:37 |
| cmurphy | are end users supposed to use it? or is it for service-to-service communication? | 17:38 |
| mordred | keystonemiddleware is supposed to be service-to-service no? | 17:39 |
| cmurphy | right, i think the only user-facing parameter is the www-authenticate-uri parameter, so i think internal is right for this | 17:40 |
| mordred | yeah - that should work in most of the contexts - if people have both public and internal, they likely want services to talk to internal - if they don't, usually they set internal to the same as public, so it should still work for smaller ... as long as it isn't admin :) | 17:41 |
| cmurphy | ++ | 17:41 |
| cmurphy | the change needs a release note, what else do we need to move forward on it? is the devstack change controversial? | 17:44 |
| *** priteau has quit IRC | 17:45 | |
| mordred | oh - apparently there is a heat change down in teh depends-on change that's a blocker | 17:46 |
| cmurphy | ah :/ | 17:46 |
| mordred | https://review.opendev.org/#/c/675778/ | 17:46 |
| mordred | yeah - that's heat using keystoneclient | 17:46 |
| mordred | man this is a rat's nest isn't it? | 17:47 |
| mordred | ksa has support for interface as a list - that doesn't flow through to ksc does it? | 17:48 |
| mordred | if it did, we could update that heat patch to be interface=['internal', 'admin', 'public'] or something - and ksa would then select the right interface in that preference order | 17:49 |
| mordred | (at least I'm pretty sure we landed that list support in ksa right?) | 17:49 |
| cmurphy | i think so | 17:49 |
| cmurphy | and it looks like frickler tried to fix ksc https://review.opendev.org/675870 | 17:49 |
| cmurphy | i'm not sure why that didn't go anywhere | 17:50 |
| mordred | hrm | 17:50 |
| mordred | cmurphy: should I try to pick up frickler's ksc patch? maybe update it to default to a list? | 17:51 |
| mordred | if we can fix that, then we can drop the heat patch, since it should flow through | 17:51 |
| cmurphy | mordred: sounds good to me | 17:52 |
| mordred | k. I'll see if I can add that to my list | 17:52 |
| cmurphy | thanks mordred | 17:53 |
| mordred | \o/ progress! | 17:53 |
| cmurphy | #topic open discussion | 17:54 |
| *** openstack changes topic to "open discussion (Meeting topic: keystone)" | 17:54 | |
| cmurphy | anyone else working on something they want to discuss for these last few minutes? | 17:55 |
| cmurphy | i know at our last few retrospectives we talked about having more frequent checkins or retrospectives throughout the cycle to try to keep up development momentum, tbh i don't really have time to prepare for big video calls like that these days, but maybe we could use our meeting time to go through the roadmap board every once in a while to check our progress? | 17:57 |
| cmurphy | i'll let you mull it over | 17:59 |
| cmurphy | thanks for the good discussions today | 17:59 |
| cmurphy | #endmeeting | 17:59 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 17:59 | |
| openstack | Meeting ended Tue Jan 7 17:59:50 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 17:59 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone/2020/keystone.2020-01-07-17.00.html | 17:59 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone/2020/keystone.2020-01-07-17.00.txt | 17:59 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/keystone/2020/keystone.2020-01-07-17.00.log.html | 17:59 |
| *** derekh has quit IRC | 18:00 | |
| *** rdopiera has quit IRC | 18:29 | |
| *** jtomasek has quit IRC | 19:13 | |
| *** slaweq has quit IRC | 20:19 | |
| *** slaweq has joined #openstack-meeting-alt | 20:35 | |
| *** slaweq has quit IRC | 20:54 | |
| *** slaweq has joined #openstack-meeting-alt | 20:55 | |
| *** e0ne has joined #openstack-meeting-alt | 21:02 | |
| *** e0ne has quit IRC | 21:17 | |
| *** rcernin has joined #openstack-meeting-alt | 21:37 | |
| *** rcernin has quit IRC | 21:37 | |
| *** rcernin has joined #openstack-meeting-alt | 21:38 | |
| *** early has quit IRC | 21:55 | |
| *** yonglihe has quit IRC | 22:09 | |
| *** early has joined #openstack-meeting-alt | 22:12 | |
| *** tesseract has quit IRC | 23:13 | |
| *** dviroel has quit IRC | 23:26 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!