Wednesday, 2020-04-15

*** enriquetaso has quit IRC00:04
*** tetsuro has joined #openstack-meeting-alt00:10
*** rfolco has quit IRC00:30
*** andrebeltrami has quit IRC00:53
*** ttsiouts has joined #openstack-meeting-alt01:00
*** ricolin has joined #openstack-meeting-alt01:13
*** ricolin_ has joined #openstack-meeting-alt01:18
*** ricolin has quit IRC01:21
*** ttsiouts has quit IRC01:34
*** lbragstad has quit IRC01:38
*** ttsiouts has joined #openstack-meeting-alt02:03
*** ttsiouts has quit IRC02:07
*** apetrich has quit IRC02:09
*** ysandeep|away is now known as ysandeep|rover02:11
*** tetsuro has quit IRC02:29
*** tetsuro has joined #openstack-meeting-alt02:32
*** ttsiouts has joined #openstack-meeting-alt02:36
*** ttsiouts has quit IRC03:10
*** ysandeep|rover is now known as ysandeep|BRB04:08
*** ttsiouts has joined #openstack-meeting-alt04:12
*** gyee has quit IRC04:13
*** ysandeep|BRB is now known as ysandeep|rover04:23
*** ttsiouts has quit IRC04:46
*** ttsiouts has joined #openstack-meeting-alt05:22
*** ttsiouts has quit IRC05:27
*** vishalmanchanda has joined #openstack-meeting-alt05:40
*** tobberydberg has joined #openstack-meeting-alt05:46
*** ttsiouts has joined #openstack-meeting-alt05:55
*** maaritamm has joined #openstack-meeting-alt06:07
*** ttsiouts has quit IRC06:29
*** slaweq_ has joined #openstack-meeting-alt06:37
*** rdopiera has joined #openstack-meeting-alt06:46
*** ttsiouts has joined #openstack-meeting-alt06:51
*** ttsiouts has quit IRC06:51
*** ttsiouts has joined #openstack-meeting-alt06:52
*** lpetrut has joined #openstack-meeting-alt07:07
*** ccamacho has joined #openstack-meeting-alt07:11
*** maaritamm has quit IRC07:45
*** ysandeep|rover is now known as ysandeep|lunch07:48
*** maaritamm has joined #openstack-meeting-alt07:54
*** links has joined #openstack-meeting-alt07:56
*** slaweq_ is now known as slaweq08:10
*** e0ne has joined #openstack-meeting-alt08:12
*** ttsiouts has quit IRC08:13
*** ttsiouts has joined #openstack-meeting-alt08:19
*** ccamacho has quit IRC08:20
*** ricolin_ is now known as ricolin08:30
*** maaritamm has quit IRC08:39
*** ysandeep|lunch is now known as ysandeep|rover08:40
*** ccamacho has joined #openstack-meeting-alt08:40
*** ccamacho has quit IRC08:40
*** ccamacho has joined #openstack-meeting-alt08:45
*** tetsuro has quit IRC08:45
*** apetrich has joined #openstack-meeting-alt09:16
*** maaritamm has joined #openstack-meeting-alt09:36
*** ccamacho has quit IRC09:44
*** ccamacho has joined #openstack-meeting-alt10:05
*** ttsiouts has quit IRC10:07
*** ttsiouts has joined #openstack-meeting-alt10:11
*** derekh has joined #openstack-meeting-alt10:49
*** e0ne has quit IRC10:52
*** e0ne has joined #openstack-meeting-alt10:53
*** jtomasek has quit IRC10:56
*** ysandeep|rover is now known as ysandeep|coffee11:00
*** jtomasek has joined #openstack-meeting-alt11:02
*** ysandeep|coffee is now known as ysandeep|rover11:17
*** geguileo has quit IRC11:29
*** ganso has joined #openstack-meeting-alt11:34
*** ttsiouts has quit IRC11:59
*** rfolco has joined #openstack-meeting-alt12:17
*** ttsiouts has joined #openstack-meeting-alt12:20
*** raildo has joined #openstack-meeting-alt12:28
*** enriquetaso has joined #openstack-meeting-alt12:36
*** maaritamm has quit IRC12:46
*** maaritamm has joined #openstack-meeting-alt12:47
*** ttsiouts has quit IRC12:53
*** gshippey has joined #openstack-meeting-alt12:57
*** ttsiouts has joined #openstack-meeting-alt13:13
*** lbragstad has joined #openstack-meeting-alt13:14
*** ysandeep|rover is now known as ysandeep|away13:32
*** liuyulong has joined #openstack-meeting-alt13:33
*** rcernin has quit IRC13:37
*** eharney has joined #openstack-meeting-alt13:50
*** rosmaita has joined #openstack-meeting-alt13:52
*** Liang__ has joined #openstack-meeting-alt13:53
*** Liang__ is now known as LiangFang13:54
*** ruffian_sheep has joined #openstack-meeting-alt13:56
*** tosky has joined #openstack-meeting-alt13:57
rosmaita#startmeeting cinder14:00
rosmaita#link https://etherpad.openstack.org/p/cinder-ussuri-meetings14:00
rosmaita#topic roll call14:00
openstackMeeting started Wed Apr 15 14:00:02 2020 UTC and is due to finish in 60 minutes.  The chair is rosmaita. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
*** ruffian_sheep36 has joined #openstack-meeting-alt14:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
*** openstack changes topic to " (Meeting topic: cinder)"14:00
openstackThe meeting name has been set to 'cinder'14:00
*** openstack changes topic to "roll call (Meeting topic: cinder)"14:00
rajinirhi14:00
LiangFanghi14:00
gansoo/14:00
m5zhi14:00
eharneyhi14:00
vkmco/14:00
smcginniso/14:01
whoami-rajatHi14:01
jungleboyjo/14:01
toskyo/14:01
rosmaitalots on the agenda today so i'll get started14:01
rosmaita#topic announcements14:01
*** openstack changes topic to "announcements (Meeting topic: cinder)"14:01
rosmaita{mitaka,newton}-driverfixes branches have been tagged eol and deleted14:01
rosmaita#link http://lists.openstack.org/pipermail/openstack-discuss/2020-April/014055.html14:02
rosmaitawe agreed to do this a few months ago, but it required some manual intervention to make it happen14:02
*** ruffian_sheep has quit IRC14:02
rosmaitaif you haven't noticed, there's been a etherpad migration and domain change14:02
rosmaita#link http://lists.opendev.org/pipermail/service-announce/2020-April/000003.html14:03
rosmaitahopefully, you won't see anything, though monday the meeting agenda page was causing an internal server error14:03
rosmaitabut that was fixed14:03
*** ruffian_sheep36 is now known as ruffian_sheep14:03
rosmaita#topic announcements - Victoria Virtual PTG14:03
*** openstack changes topic to "announcements - Victoria Virtual PTG (Meeting topic: cinder)"14:03
rosmaitaok, so the dates have been set14:04
rosmaitaone week earlier than the physical event14:04
rosmaitanot sure why14:04
jungleboyjYay!?!14:04
rosmaitanew dates: June 1 through June 514:04
rosmaita#link http://lists.openstack.org/pipermail/openstack-discuss/2020-April/014126.html14:04
rosmaitathat email outlines the ground rules for the virtual PTG14:04
rosmaitakey things impacting us are:14:05
rosmaitaNo team can sign up for more than 4 hours per UTC day14:05
enriquetasoo/14:05
rosmaitaNo team can sign up for more than 16 hours across all time slots14:05
jungleboyjWhich is good.14:05
rosmaitayeah, our 2-hour blocks have worked well for the midcycle sessions14:05
rosmaitaanyway, here are the time slots:14:05
rosmaita#link https://ethercalc.openstack.org/126u8ek25noy14:06
*** geguileo has joined #openstack-meeting-alt14:06
* lseki sneaks in14:06
rosmaitaand here is a meeting time planner for the first day, covering the TZs usually represented at our cinder meeting14:06
*** xover-23 has joined #openstack-meeting-alt14:06
rosmaita#link https://www.timeanddate.com/worldclock/meetingtime.html?month=6&day=1&year=2020&p1=159&p2=881&p3=141&p4=367&p5=176&p6=237&iv=014:06
rosmaitai don't want to spend a lot of time on this today14:06
rosmaitai guess the thing to do is, please put time suggetions on the etherpad14:07
*** ttsiouts has quit IRC14:07
rosmaita#link https://etherpad.opendev.org/p/cinder-victoria-ptg-planning14:07
rosmaitaor something14:07
rosmaitai really don't know a good way to organize this14:07
rosmaitaso feel free to suggest ideas14:07
jungleboyj:-)14:08
rosmaitabut, do put time slot suggestions on the etherpad14:08
rosmaitaor else i will schedule everytihing to be convenient for Roanoke time :)14:08
xover-23hello world friends14:08
jungleboyjLooks like 7 am Monday is the most likely time where things start to work.14:08
rosmaitaok, moving on14:08
e0nejungleboyj: :)14:09
rosmaita#topic announcements - FFEs14:09
*** openstack changes topic to "announcements - FFEs (Meeting topic: cinder)"14:09
rosmaita#link http://lists.openstack.org/pipermail/openstack-discuss/2020-April/014035.html14:09
*** ttsiouts has joined #openstack-meeting-alt14:09
rosmaitathat was the announcement to the ML14:09
rosmaitano other requests came in before yesterday's deadline, so that's all14:09
rosmaitai've been tracking progress here:14:10
rosmaita#link https://etherpad.opendev.org/p/cinder-ussuri-FFE-progress14:10
rosmaitalooks like stuff is happening14:10
*** andrebeltrami has joined #openstack-meeting-alt14:10
rosmaitai am beginning to wonder whether the nfs-volume-encryption is going to have to wait until victoria14:10
rosmaitaenriquetaso: eharney: opinions?14:10
*** jcoufal has joined #openstack-meeting-alt14:10
eharneyi have also wondered the same14:11
enriquetasoyep, I think is going to victoria14:11
jungleboyjSomething like that doesn't sound like something that we want to rush in place.14:11
rosmaitaok, i will re=target that bp14:11
eharneywhich is to say i wouldn't be upset about moving it out14:11
rosmaitaand let's try to focus on it very early in victoria14:11
rosmaitaok, the other FFE is macrosan, but they are on the agenda for later14:12
rosmaitaok final item14:12
rosmaita#topic announcements - end-of-cycle driver stuff14:12
*** openstack changes topic to "announcements - end-of-cycle driver stuff (Meeting topic: cinder)"14:12
rosmaita#link http://lists.openstack.org/pipermail/openstack-discuss/2020-April/014124.html14:12
rosmaitathere are some outstanding items14:12
rosmaitathe link above is something i sent to the ML and also forwarded directly to the driver maintainers of record14:13
rosmaitaalso, tracking that on this etherpad:14:13
rosmaita#topic https://etherpad.opendev.org/p/cinder-ussuri-driverstuff14:13
*** openstack changes topic to "https://etherpad.opendev.org/p/cinder-ussuri-driverstuff (Meeting topic: cinder)"14:13
rosmaitaoops14:13
enriquetaso:P14:13
rosmaita#link https://etherpad.opendev.org/p/cinder-ussuri-driverstuff14:14
rosmaitaanyway, mostly driver maintainers need to check that list14:14
rosmaitai'll raise the priority flag on reviews as they come in14:14
rosmaitaalso, I'm beginning the 3rd party compliance check14:14
jungleboyj++14:15
rosmaitabut, like i said last week, driver maintainers can check proactively to make sure their CIs are functioning reliably14:15
rosmaitabecause RC-1 is next week, and that's the deadline for having everything working14:15
rosmaitathough, it was brought to my attention that the covid-19 situation is keeping people out of datacenters14:16
smcginnisAlso a reminder that it is good to point new driver submitters to https://docs.openstack.org/cinder/latest/contributor/new_driver_checklist.html to make sure they are covering everything that we should be checking.14:16
rosmaitaand not everyone can do stuff remotely14:16
rosmaitasmcginnis: ty, good reminder14:16
rosmaitaok, that's all for announcements14:16
rosmaita#topic MacronSAN driver discussion14:16
*** openstack changes topic to "MacronSAN driver discussion (Meeting topic: cinder)"14:16
rosmaitaruffian_sheep: that's you14:16
ruffian_sheepRegarding tempest.api.compute.admin.test_volume_swap.TestMultiAttachVolumeSwap.test_volume_swap_with_multiattach in the tempest test case, there is a problem that cannot be passed.14:17
ruffian_sheepWithout any changes to the driver, I additionally create an instance and a volume, and perform the mount operation. This test case can pass.14:18
rosmaitayou mean you can manually do what the test is doing, and you succeed?14:18
ruffian_sheephttp://120.77.149.115/88/711388/6/check/cinder-isicsi-driver/848d283/tempest_log/tox.log14:19
ruffian_sheephttp://120.77.149.115/88/711388/6/check/cinder-isicsi-driver/4a616b6/tempest_log/tox.log14:19
whoami-rajatruffian_sheep, did you find any other error log except from the n-cpu one?14:19
ruffian_sheepThis is the log result of two condition changes14:19
ruffian_sheepwhoami-rajat | rosmaita: This test can be performed, but an error will occur when the resource is finally cleaned up. Moreover, in the logs of related test cases, only errors are found in the n-cpu.14:20
ruffian_sheepIn fact, the same error report exists in n-cpu, but after changing the conditions, the use case can be executed without error.14:21
rosmaitawhen you say "changing the conditions", what do you mean exactly?14:22
whoami-rajatthe driver seems to work correctly if the test passes in the local run14:22
ruffian_sheepCreate a new instance and volume, and perform the attach_volume operation.14:22
ruffian_sheepI don't know what the specific reason is, but when I do this and then execute the tempest use case, it can be executed completely correctly.14:24
smcginnisruffian_sheep: Unrelated, but just want to note that the tempest run output should really be in the root log file. So job-output.log would be where most would expect to go to find that. Don't want to divert this discussion, but just letting you know.14:24
eharneythere are some strange cinder api errors associated with that test failure in screen-c-api.log14:24
ruffian_sheepsmcginnis : get, i will change it14:25
ruffian_sheepeharney: I also saw it, but from the execution results, it seems to have no effect? And it is not directly related to the use case of multiattach?14:26
eharneyc-vol shows a lock held for 51 seconds, maybe something is taking longer than tempest expects there14:26
eharneylook at req-6f364876-aafd lines in c-api and c-vol logs... probably don't have time to debug it all here14:27
*** jberg-dev has joined #openstack-meeting-alt14:28
rosmaitaruffian_sheep: so, multiattach is a new feature you are adding14:28
rosmaitai wonder whether you should hold off on that until V14:28
rosmaitaso you can get everything set to mark the driver 'supported' in U14:28
ruffian_sheepYes, I wanted to add this feature to the ussuri version, but from the deadline, it is a bit unrealistic.14:29
rosmaitait looks like everything else is working though?14:29
ruffian_sheepYes, and I initially passed the test case on the s version.14:30
*** maaritamm has quit IRC14:30
*** ysandeep|away is now known as ysandeep14:31
ruffian_sheepBecause it was unclear at the beginning to execute the ci environment regularly. And use the latest openstack version. I carried out the tempest test on the s version.14:31
rosmaitai think the thing to do is revise your patch without multiattach and address the comments on the review14:31
rosmaitaanything else?14:31
whoami-rajatrosmaita++14:32
smcginnisrosmaita: ++14:32
ruffian_sheepYes, I confirmed this problem with whoami-rajat in the afternoon. For now, do not add related new features.14:32
rosmaitaok, thanks ... we will keep an eye on your patch14:32
whoami-rajatThis way the CI could be marked supported and other features (apart from multiattach) could make it as well (probably)14:32
whoami-rajatinto ussuri14:33
rosmaita#topic Continued discussion of: Cinder throws error creating incremental backup from parent in another project14:33
*** openstack changes topic to "Continued discussion of: Cinder throws error creating incremental backup from parent in another project (Meeting topic: cinder)"14:33
rosmaitaganso: that's you14:33
rosmaitawe started this 2 weeks ago14:33
*** xover-2385 has joined #openstack-meeting-alt14:33
rosmaitalink on the etherpad14:33
rosmaitai forget where we were on this, though14:34
enriquetaso#link https://bugs.launchpad.net/cinder/+bug/186974614:35
openstackLaunchpad bug 1869746 in Cinder "Cinder throws error creating incremental backup from parent in another project" [Undecided,Confirmed]14:35
*** xover-23 has quit IRC14:35
*** baiziyu-inspur has joined #openstack-meeting-alt14:35
rosmaitaganso: comments?14:36
gansooh sorry I missed the ping14:36
rosmaitaok14:36
gansoso, last time we discussed several different ways to tackle the problem14:36
gansoI summarized them in this etherpad14:37
gansohttps://etherpad.opendev.org/p/cinder-backup-bug14:37
gansobasically I came up with 3 approaches from what we discussed, each with its pros and cons14:38
rosmaitaganso: how big a deal is this bug?14:38
eharneyi'm getting server errors trying to load the etherpad14:38
smcginnisganso: Having gone through all of those, is there one approach that makes the most sense to you?14:38
smcginniseharney: Try a hard reload (ctrl+shift+r).14:38
smcginnisThey upgraded etherpad, so it could be a bad cached js lib.14:39
*** maaritamm has joined #openstack-meeting-alt14:39
gansorosmaita: it is workaroundable, and IMO it is the consequence of the customer doing it not in the most appropriate way, my main concern is actually fixing it to avoid anybody else from hitting it in the future.14:39
rosmaitaganso: excellent14:39
rosmaitai think we should fix it, just looks like it could wait for V?14:39
gansosmcginnis: I haven't gone through them at the implementation level, I didn't have many cycles, I was mostly gathering info to see if I could map all the concerns and spot a dealbreaker14:40
gansorosmaita: I was actually expecting a backportable fix14:40
smcginnisganso: I mean just conceptually, what would be the most expected behavior of the service?14:40
gansorosmaita: however, as you can see in the etherpad, the fix that looks more semantically correct is (c), but that doesn't look like it can be backported14:41
smcginnisIn other words, how _should_ cinder handle something like this. What is the most correct and expected behavior under this scenario.14:41
rosmaitaok, let's all take an item to look over the etherpad and return to this next week14:41
rosmaitaand ganso maybe you can answer smcginnis's question on the etherpad14:41
smcginnisBased on the discussion of whether an admin should be able to backup a tenant's volumes, (c) did sound like the more correct path to me.14:41
whoami-rajatsmcginnis, can't load the etherpad with ctrl+shift+r :/14:42
gansosmcginnis: exactly, so the expected behavior, we tackled the situations where someone creates a backup on behalf of someone else, and accounts against that someone else's quota, this looks slightly unusual to me. What we see today makes sense semantically, but causes the bug, and it becomes a bit unusual because backup have parent relationships14:42
rosmaitamore continued discussion: tosky are you around?14:42
eharneywhoami-rajat: yeah, looks broken on the server side :/14:42
enriquetasoIn order to add more info: After debugging this a bit more and thanks to Rajat's investigation. There is a difference between the API using elevated (admin role) and manager using the user role. Looks like, there is not reason reason why we are using elevated context on the API code (checked into the DB) but removing the elevated may lead to some other broken functionality that worked previously (in general this could affect other14:42
enriquetasocases).14:42
toskyrosmaita: yep14:42
* tosky waits for green light14:42
rosmaita#topic continuation of: cinder-tempest-plugin14:42
*** openstack changes topic to "continuation of: cinder-tempest-plugin (Meeting topic: cinder)"14:42
toskyapart from the reminder ("please go over the open cinder-tempest-plugin reviews"), I have a question about https://review.opendev.org/#/c/639205/14:43
toskyas you can see it is an interesting experiment for a more complex scenario tests, which could deserve its own job14:44
toskybut it requires iSCSI multipath, and I'm not sure how to setup that on the gates14:44
hemna_you would need the multipath daemon running14:45
toskyfrom some past discussions with some people, as I wrote in a comment on the review, I may have (incorrectly) got that it's possible to use LVM for that?14:45
eharneythe theory (per geguileo) is that we could do this with the lvm driver by setting some additional options -- but not sure what all the steps are14:45
geguileoyeah, it's easy to do14:45
eharneyi don't know if it requires configuring additional IPs or anything like that14:46
toskyyes! So the questions are if a) if you would like to have this complex realistic scenario in the gates and b) if someone could please provide the instructions or guidelines for that14:46
toskythat's it14:46
*** ruffian_sheep has quit IRC14:46
enriquetasoI think 639205 needs a rebase in order to run the new job "cinder-tempest-plugin-cbak-ceph"14:46
rosmaitait would definitely be cool to get this running14:46
toskyoh, sure, and also for the ddt thing14:46
hemna_what are we testing here with that review?  that multipath daemon can handle failover, or that cinder/os-brick can do a multipath attach?14:47
rosmaitanext up: enriquetaso14:47
geguileoone needs to set iscsi_secondary_ip_addresses with other IP addresses14:47
rosmaita#topic continuation of: Allow removing NFS snapshots in error status is stuck14:47
*** openstack changes topic to "continuation of: Allow removing NFS snapshots in error status is stuck (Meeting topic: cinder)"14:47
geguileoif we are using a single node deployment, one can use 127.0.0.1 as the secondary IP14:47
toskygeguileo: please comment on the review :)14:47
rosmaitageguileo: doesn't have to be exact, if you can just point what to look for14:48
enriquetasook.. so after discussing  with eharney, I guess the patch isn't so bad14:48
*** Andreas681 has joined #openstack-meeting-alt14:48
rosmaita#link https://review.opendev.org/#/c/679138/14:48
enriquetasoAbout NFS snapshot in error... the model is always -- try to delete the snapshot on the backend, if it doesn't exist, then succeed, all drivers do that, this should just follow the same model14:48
enriquetasoso, I should update the patch with this comment and see what happens14:49
rosmaitathat sounds sensible14:49
smcginnis++14:49
rosmaitathat was quick, thank you enriquetaso14:49
enriquetaso\o/14:49
rosmaita#topic Cinder master compatibility status with Ceph Nautilus and beyond14:50
*** openstack changes topic to "Cinder master compatibility status with Ceph Nautilus and beyond (Meeting topic: cinder)"14:50
rosmaitavkmc: that's you14:50
vkmco/14:50
vkmchey folks14:50
vkmcI'm working on updating the devstack-ceph-plugin script14:50
vkmcsomething we use on the ci for manila, cinder, glance and nova14:50
vkmcright now we are testing the master branch for openstack with old versions of ceph14:51
*** maaritamm has quit IRC14:51
vkmcluminous is the latest version we have in there14:51
hemna_I had looked at rewriting the plugin using ceph-ansible since it seems to handle scenarios and versioning better than the old plugin code14:51
vkmcso... I don't want to break your ci, and therefore I wanted to ask before moving forward14:52
hemna_ceph-ansible can also handle ceph iscsi too14:52
vkmchave you been testing cinder with nautilus?14:52
eharneyso if we change the default release of ceph in there, it will change it for our jobs on stable branches too, right?14:52
toskyit depends on how it is set on that job, I guess14:53
vkmcmy idea was to submit an experimental job first14:53
vkmckeep what we have now, continue testing with luminous14:53
toskyonly the master (and maybe ussuri) variant of the job could be changed to use nautilus14:53
vkmcand then, with time, drop the experimental job and promote it14:53
eharneyi don't recall that we specify versions in our jobs... probably need to decide what the correct ceph version is to use for older stable branches, and if it matters14:53
*** maaritamm has joined #openstack-meeting-alt14:54
vkmcbtw, this is the patch for this update I'm talking about, if you want to take a look https://review.opendev.org/#/c/676722/14:54
vkmceharney, we don't have that option on the plugin yet, we just pull whatever version is hardcoded there14:54
vkmcand that's what I want to implement :)14:54
vkmcI see you have two gates in cinder (the ones I could see)... one in the check pipeline and one for third party IBM, not sure if you have another one using the plugin14:55
eharneyoh... that CEPH_RELEASE var is misleading currently14:55
toskyvkmc: you would need to set CEPH_RELEASE in the vars section of the branch-specific variant of the job14:55
vkmctosky, yes14:55
toskyuh14:55
vkmc<eharney> so if we change the default release of ceph in there, it will change it for our jobs on stable branches too, right? <- yes14:56
vkmcso, experimental gate for master, continue using whatever version we were using for stable branches14:57
eharneywe just need to pick what version(s) we want to run for stable14:58
vkmcwe have 2 more minutes, so we can continue the discussion on the cinder channel if that sounds good for you14:58
rosmaitaok, experimental sounds good, won't break anything14:58
rosmaitawe can figure out the details on reviews14:58
rosmaitaok, 1 minute14:59
rosmaitathanks, vkmc14:59
vkmcthanks folks14:59
rosmaita#topic open discussion14:59
*** openstack changes topic to "open discussion (Meeting topic: cinder)"14:59
rosmaita30 seconds14:59
enriquetasothanks14:59
whoami-rajatThanks!14:59
rosmaitaanything?14:59
eharneycinder is awesome14:59
rosmaitaok, can't top that14:59
e0ne:)14:59
smcginnisJust wanted to point out that we will need this before victoria when py38 becomes voting: https://review.opendev.org/#/c/720008/14:59
whoami-rajat:D14:59
rosmaita#endmeeting14:59
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"14:59
openstackMeeting ended Wed Apr 15 14:59:45 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:59
openstackMinutes:        http://eavesdrop.openstack.org/meetings/cinder/2020/cinder.2020-04-15-14.00.html14:59
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/cinder/2020/cinder.2020-04-15-14.00.txt14:59
openstackLog:            http://eavesdrop.openstack.org/meetings/cinder/2020/cinder.2020-04-15-14.00.log.html14:59
rosmaitasmcginnis: sorry about that15:00
*** tosky has left #openstack-meeting-alt15:00
*** priteau has joined #openstack-meeting-alt15:00
amotoki#startmeeting horizon15:01
openstackMeeting started Wed Apr 15 15:01:28 2020 UTC and is due to finish in 60 minutes.  The chair is amotoki. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
*** openstack changes topic to " (Meeting topic: horizon)"15:01
openstackThe meeting name has been set to 'horizon'15:01
NizarsHi!15:01
amotokihi15:01
vishalmanchandahi15:01
Andreas681Hello15:01
e0nehi15:01
jberg-devgreetings!15:01
rdopieraaloha15:02
amotokiwe have enough folks here :)15:02
amotokilet's start15:02
amotoki#topic annoucements/notices15:03
*** openstack changes topic to "annoucements/notices (Meeting topic: horizon)"15:03
amotokithe last week was the week of feature freeze for cycle-with-rc projects15:03
NizarsI would like to discuss a Horizon plugin project that me and Andreas682, jberg-dev, and two other people are working on when the floor is open. :)15:03
amotokiwe switched cycle-with-intermediary in this cycle, so I am planning to cut a release this week and considering it as the feature freeze15:03
*** rosmaita has left #openstack-meeting-alt15:03
*** gyee has joined #openstack-meeting-alt15:04
amotokilet's discuss potential reviews in the upcoming topic just after this.15:04
amotokiNizars: can we discuss your topic in "On-demand agenda" section later in this meeting?15:05
*** lpetrut has quit IRC15:05
Nizarsabsolutely, we are new to the format here so we will just follow your lead.15:05
e0neamotoki: does it mean the master will be open fro V release next week?15:06
e0nes/fro/sor15:06
e0ne*for15:06
amotokie0ne: next week or later this week. I will let you (all cores) once I cut a release.15:07
e0neamotoki: thanks15:07
amotokiNizars: FYI the meeting format is found at https://wiki.openstack.org/wiki/Meetings/Horizon which redirects you to https://etherpad.opendev.org/p/horizon-release-priorities15:07
NizarsThank you!15:08
amotokianother announcement I would like to share is we releases several xstatic modules https://review.opendev.org/#/c/718593/15:08
amotokiI will send a governance follow-up patch  to drop 'deprecation' mark in projects.yaml.15:08
amotokie0ne: any notices around the virtual PTG for Victoria?15:09
e0neamotoki: not yet. we need to start planing but I didn't do anything related yet15:10
amotokie0ne: np15:10
amotokiFYI: there is an official announment of the virtual PTG http://lists.openstack.org/pipermail/openstack-discuss/2020-April/014126.html15:10
amotokiseveral teams have started to coordinate meeting slots or some.15:10
amotokithis email is worth checking.15:10
amotokianything other to share?15:11
amotokimoving on15:12
amotoki#topic reviews for Ussuri15:12
*** openstack changes topic to "reviews for Ussuri (Meeting topic: horizon)"15:12
amotokiI would like to discuss pending review candidates for Ussuri here15:12
*** ianychoi has quit IRC15:13
amotokihttps://review.opendev.org/719777 a workaorund with pyscss 1.3.5 or later has landed. thanks e0ne15:13
amotokinext one is https://review.opendev.org/70902515:13
e0neamotoki: thanks for the tests!15:14
amotokiwe can release without regression :)15:14
*** maaritamm has quit IRC15:14
amotoki709025 is "Add support for multiple swift storage policies"15:14
*** maaritamm has joined #openstack-meeting-alt15:14
amotokithe code itself is generally good, but I have two questions15:15
amotokithe one is display_name. per reply from the author, it looks like not swift limiration but a topic specific to some deployment/public clouds15:15
amotokiI am okay with this proposal but I would like to clarify the background for future maintenance.15:16
amotokithe other is an immediate value in SCSS https://review.opendev.org/#/c/709025/9/openstack_dashboard/dashboards/project/static/dashboard/project/containers/_containers.scss@11615:16
amotokiI would like to avoid this kind of magic number.15:17
e0neamotoki: I missed it:( +1 for your comment for scss15:17
amotokiyour opinions and feedbacks would be appreciated.15:17
amotokinext one is https://review.opendev.org/#/c/708069/15:18
amotoki"Refactor error messages" from vishalmanchanda15:19
amotokiI tested the proposed code and it looks not ready for ussuri15:19
vishalmanchandayeah:(.15:19
amotokias of now, it does not support 'redirect' in exceptions.handle, so my vote is to defer it to the next cycle15:19
*** xover-2385 has quit IRC15:20
amotokithese are possible feature reviews in my mind.15:21
*** ttsiouts has quit IRC15:22
amotokiIf the first one lands soon, I will include it in the upcoming release. If it takes time, we can skip it.15:22
amotokiany other reviews for Ussuri?15:23
e0nenothing from me15:23
amotokinote: fixes and test code refactoring changes can land any time15:24
amotoki#topic general priorities15:25
*** openstack changes topic to "general priorities (Meeting topic: horizon)"15:25
amotokiI think we can skip this topic and community goals this week.15:25
e0ne+15:26
amotokimoving on15:26
amotoki#topic on-demand agenda15:26
*** openstack changes topic to "on-demand agenda (Meeting topic: horizon)"15:26
amotokiwe have a topic here this week15:26
amotokiNizars: go ahead15:26
NizarsThank you15:26
NizarsWe are working on a Horizon plugin for role based access management through keystone and oslo.policy15:27
NizarsThe blueprint for the project can be found here15:28
Nizarshttps://blueprints.launchpad.net/horizon/+spec/policies-plugin15:28
NizarsThe code currently resides on github.15:28
Nizarshttps://github.com/nizos/horizon-policies-plugin15:28
NizarsThe wiki for the project can also be found here15:28
Nizarshttps://wiki.nordix.org/display/RE/OpenStack+Policies15:29
*** ttsiouts has joined #openstack-meeting-alt15:29
NizarsTo my question. How can we get the project approved and how do we move the code to gerrit and start working on it from there?15:29
amotokithere are several options to get the feature upstreamed.15:31
amotokithe one is to include it in the horizon repo if it fits15:31
amotokianother way is to have a separate repository for the feature15:32
rdopieraI thought we were moving away from in-repo plugins in the long term?15:32
amotokiin case of using a separate repository, there are two choices: an official openstack repo or third-party repo15:32
NizarsWe would like to move it to an official openstack repo15:33
NizarsBut it is not a requirement15:33
amotokimy question is how policies are maintained.15:34
amotokias of now, keystone does not provide an API to expose policies.15:34
NizarsCan you elaborate15:34
NizarsThat is true15:34
NizarsWe are planning of creating the backend functionalities ourselves.15:34
NizarsWe are currently retrieving them through oslo.policy15:35
amotokiNizars: how are they retrieved via oslo.policy?15:35
Nizars1 sec15:35
amotokithe default polices are defined in code of individual projects, so doesn't it mean you need to import all projects?15:37
Nizars`generator._generate_policy("keystone", self.FILE_PATH)`15:37
Nizarswe import it as such: `from oslo_policy import generator`15:37
Nizarsthe file path is where it outputs the effective policies15:38
amotokiwhat about default policies?15:38
NizarsThey are retrieved through the same function15:38
amotokifor example, if you would like to load policies from keystone, keystone needs to be installed.15:39
amotokiright?15:39
NizarsIt gets the defaults, then checks the policy files, from there it merges them after that15:39
*** maaritamm has quit IRC15:39
Nizarshttps://github.com/nizos/horizon-policies-plugin/blob/c9a157254fb4efe62ce2179c12f43e2cab4b005c/policies-plugin/policies_plugin/api/rest/policy_client.py15:39
NizarsThis is how the output looks like:15:40
Nizarshttps://github.com/nizos/horizon-policies-plugin/blob/c9a157254fb4efe62ce2179c12f43e2cab4b005c/policies-plugin/policies_plugin/api/rest/policy_output.txt15:40
NizarsThe first line is a policy provided from the policy.json file.15:40
Nizars`"identity:get_consumer": "role:admin and system_scope:all"`15:40
NizarsIn any case. This process is too heavy. There is a lot that is lacking.15:41
bnemecThat would be one concern. You could only use this tool if the service is installed on the same system as Horizon.15:41
NizarsCan you elaborate on that?15:41
bnemecIt also needs to not be running in a container that doesn't have access to the other service policy files.15:41
amotokibnemec: yeah, my concern is exactly same15:41
bnemecNizars: If keystone is installed standalone (or just not on the same box as horizon), you won't be able to read its policy files.15:42
NizarsHelp us understand the problem a little better so we can look into it and see if some modifications can be made.15:42
Nizarsok15:42
NizarsThat's a good point.15:42
*** LiangFang has quit IRC15:43
amotokithe original question is how to move the proposal forward.15:43
NizarsCan this be dealt with using some config files? Can you think of a way to go about using the plugin in such a use case?15:44
amotokifrom what I understand so far here, the backend would require to have various service project installed in a same system.15:44
amotokithe frontend can consume the backend API.15:44
amotokithe backend requirements would be totally different from horizon15:44
amotokiso a separate repository would be fine15:45
NizarsI see15:45
amotokiagree?15:45
NizarsYeah15:45
amotokithe second question is what project team is appropriate to cover this project.15:45
NizarsI would like to hear your thoughts on what implementation possibilities are there to use the plugin when the services are run in different systems if possible.15:46
amotokiI am not sure which project fits this....15:46
Nizarsinstalled*15:46
amotokiNizars: is "the plugin" you mention a horizon plugin?15:47
Nizarsyes15:47
*** baiziyu-inspur has quit IRC15:47
*** ianychoi has joined #openstack-meeting-alt15:47
*** jcoufal has quit IRC15:48
NizarsThis is how it looks right now when installed in Horizon:15:48
Nizarshttps://imgur.com/TMxrv9d15:48
amotokifor the frondend, it can be a horizon plugin15:48
amotokibut I am not sure the backend should be run as part of horizon server side.15:48
NizarsI see.15:48
amotokiit requires too much dependencies15:48
NizarsCan you elaborate on that point a little bit more if possible?15:49
amotokiokay15:49
amotokiwe usually use separate repositories for service, client lib and frontend.15:49
NizarsThank you15:49
amotokifor example, nova, novaclient and UI (horizon)15:49
amotokithis is because they have different dependencies.15:50
amotokithis is a discussion on the strategy for repositories (i.e. deliveables),15:50
amotokis/,/./15:51
amotokiwe also need to consider which project team can host it.15:51
NizarsI see15:51
amotokiconsider its GUI perspective, horizon might be good, but it has other aspects (like a tool to consume/handle policies)15:52
*** jcoufal has joined #openstack-meeting-alt15:52
amotokiit looks good to discuss it more broadly including TC15:53
amotokiNizars: one more question. Does your team plan to maintain it even after it is upstreaded (i.e. part of OpenStack governance)?15:53
NizarsI assume keystone can access policy files of projects installed in different file systems. Is this correct? Is it possible for us to implement something similar to access those files as well? How practical would that be to implement and would it cause any redundancy considering the currently exiting solutions?15:53
NizarsI plan on staying active on it.15:54
NizarsWhat does TC stand for?15:54
amotokiTC = technical committee15:54
NizarsI see, thank you.15:54
amotokiregarding the question on keystone above, the answer is no.15:54
amotokikeystone only take cares of keystone policies.15:55
NizarsI see.15:55
amotokinova take care of nova polices.15:55
amotokioslo.policy provides a common layer to handle policies.15:55
NizarsSo oslo.policy is able to access the policy files in installations on different systems?15:56
amotokiNizars: no. it can access policies installed locally15:56
NizarsI see.15:56
NizarsInteresting.15:56
amotokiit looks like a discussion on policy loading on the python side. not about GUI.15:57
NizarsYeah15:57
amotokiI am afraid it is now not the right place to discuss......15:57
NizarsI understand15:57
*** maaritamm has joined #openstack-meeting-alt15:57
NizarsThank you for your time and feedback.15:57
amotokiI can discuss it as neutron core and a person familiar with oslo.policy. it is not from horizon perspective.....15:57
amotokianyway, my suggestion in this meeting is to raise it to openstack-dsicuss ML (with [tc] tag (technical committees can be aware of it)15:58
amotokiin the mail you can explain the concept and purpose of the proposal15:59
amotoki(it is better not to discuss it based on the current implementation level)15:59
amotokidoes it work for you?15:59
amotokiwe are out of time16:00
amotokithanks for joining all16:00
NizarsA simple solution would be to just allow the user to upload the policy files they want to work on themselves and after making the changes they want they can download them and export them themselves but that makes the plugin quite restricted in terms of usefulness. The benefit of the plugin here would have to be editing features and policy checks.16:00
amotoki#endmeeting16:00
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"16:00
openstackMeeting ended Wed Apr 15 16:00:40 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:00
openstackMinutes:        http://eavesdrop.openstack.org/meetings/horizon/2020/horizon.2020-04-15-15.01.html16:00
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/horizon/2020/horizon.2020-04-15-15.01.txt16:00
NizarsThank you16:00
openstackLog:            http://eavesdrop.openstack.org/meetings/horizon/2020/horizon.2020-04-15-15.01.log.html16:00
amotokiNizars: if you need to dsicuss, visit #openstack-horizon16:01
*** maaritamm has quit IRC16:01
*** priteau has quit IRC16:12
*** jcoufal has quit IRC16:12
*** Andreas681 has quit IRC16:13
*** maaritamm has joined #openstack-meeting-alt16:13
*** jcoufal has joined #openstack-meeting-alt16:21
*** yaawang has joined #openstack-meeting-alt16:31
*** yaawang_ has quit IRC16:34
*** maaritamm has quit IRC16:35
*** jcoufal has quit IRC16:45
*** jcoufal has joined #openstack-meeting-alt16:58
*** ttsiouts has quit IRC17:00
*** ttsiouts has joined #openstack-meeting-alt17:01
*** priteau has joined #openstack-meeting-alt17:05
*** ricolin has quit IRC17:10
*** ttsiouts has quit IRC17:17
*** derekh has quit IRC17:17
*** priteau has quit IRC17:26
*** ttsiouts has joined #openstack-meeting-alt17:34
*** links has quit IRC18:01
*** ttsiouts has quit IRC18:09
*** maaritamm has joined #openstack-meeting-alt18:26
*** e0ne has quit IRC18:31
*** ttsiouts has joined #openstack-meeting-alt18:42
*** ttsiouts has quit IRC18:48
*** jcoufal has quit IRC18:49
*** hongbin has joined #openstack-meeting-alt19:01
*** ttsiouts has joined #openstack-meeting-alt19:23
*** ttsiouts has quit IRC19:34
*** ttsiouts has joined #openstack-meeting-alt19:34
*** gshippey has quit IRC19:42
*** enriquetaso has quit IRC19:48
*** ttsiouts has quit IRC19:49
*** vishalmanchanda has quit IRC19:54
*** enriquetaso has joined #openstack-meeting-alt19:57
*** slaweq has quit IRC20:08
*** slaweq has joined #openstack-meeting-alt20:08
*** maaritamm has quit IRC20:13
*** ttsiouts has joined #openstack-meeting-alt20:23
*** e0ne has joined #openstack-meeting-alt20:24
*** ttsiouts has quit IRC20:28
*** slaweq has quit IRC20:28
*** ttsiouts has joined #openstack-meeting-alt20:58
*** e0ne has quit IRC21:02
*** e0ne has joined #openstack-meeting-alt21:03
*** ttsiouts has quit IRC21:32
*** e0ne has quit IRC21:42
*** jtomasek has quit IRC21:42
*** raildo has quit IRC21:53
*** ccamacho has quit IRC22:11
*** eharney has quit IRC22:11
*** rfolco has quit IRC22:24
*** ttsiouts has joined #openstack-meeting-alt22:38
*** rcernin has joined #openstack-meeting-alt22:45
*** hongbin has quit IRC22:53
*** hongbin has joined #openstack-meeting-alt23:01
*** ttsiouts has quit IRC23:12
*** ttsiouts has joined #openstack-meeting-alt23:40
*** ttsiouts has quit IRC23:45
*** ttsiouts has joined #openstack-meeting-alt23:54
*** ttsiouts has quit IRC23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!