Thursday, 2018-10-04

*** tpsilva has quit IRC00:00
*** slaweq has joined #openstack-meeting00:11
*** slaweq has quit IRC00:15
*** spartakos has quit IRC00:19
*** dtrainor has joined #openstack-meeting00:22
*** diablo_rojo has quit IRC00:26
*** jamesmcarthur has joined #openstack-meeting00:31
*** longkb has joined #openstack-meeting00:50
*** longkb has quit IRC00:51
*** longkb has joined #openstack-meeting00:52
*** gyee has quit IRC00:54
*** felipemonteiro has quit IRC00:55
*** tetsuro has joined #openstack-meeting01:05
*** mhen has quit IRC01:05
*** mhen has joined #openstack-meeting01:06
*** slaweq has joined #openstack-meeting01:11
*** felipemonteiro has joined #openstack-meeting01:13
*** slaweq has quit IRC01:15
*** mschuppert has joined #openstack-meeting01:18
*** dtrainor has quit IRC01:18
*** felipemonteiro has quit IRC01:18
*** iyamahat__ has joined #openstack-meeting01:32
*** yamahata has quit IRC01:35
*** iyamahat_ has quit IRC01:35
*** longkb has quit IRC01:37
*** longkb has joined #openstack-meeting01:37
*** ijw has quit IRC01:37
*** iyamahat__ has quit IRC01:38
*** iyamahat has joined #openstack-meeting01:39
*** tetsuro has quit IRC01:41
*** tetsuro has joined #openstack-meeting01:41
*** iyamahat has quit IRC01:44
*** felipemonteiro has joined #openstack-meeting01:49
*** tetsuro has quit IRC01:51
*** tetsuro has joined #openstack-meeting01:55
*** hongbin has joined #openstack-meeting01:55
*** iyamahat has joined #openstack-meeting02:00
*** tetsuro has quit IRC02:01
*** tetsuro has joined #openstack-meeting02:03
*** mhen has quit IRC02:03
*** mhen has joined #openstack-meeting02:07
*** Bhujay has joined #openstack-meeting02:24
*** yamamoto has quit IRC02:47
*** yamamoto has joined #openstack-meeting02:47
*** jding1_ has joined #openstack-meeting03:00
*** ircuser-1 has quit IRC03:01
*** Bhujay has quit IRC03:03
*** jackding has quit IRC03:03
*** ircuser-1 has joined #openstack-meeting03:06
*** slaweq has joined #openstack-meeting03:11
*** slaweq has quit IRC03:16
*** hongbin has quit IRC03:27
*** jamesmcarthur has quit IRC03:39
*** felipemonteiro has quit IRC03:45
*** jamesmcarthur has joined #openstack-meeting03:46
*** rbudden has joined #openstack-meeting03:53
*** tetsuro has quit IRC04:06
*** jamesmcarthur has quit IRC04:08
*** armax_ has joined #openstack-meeting04:14
*** ianychoi_ has joined #openstack-meeting04:15
*** electrofelix has quit IRC04:15
*** armax has quit IRC04:17
*** armax_ is now known as armax04:17
*** ianychoi has quit IRC04:17
*** jamesmcarthur has joined #openstack-meeting04:20
*** jamesmcarthur has quit IRC04:25
*** jamesmcarthur has joined #openstack-meeting04:26
*** jamesmcarthur has quit IRC04:31
*** jamesmcarthur has joined #openstack-meeting04:31
*** tdasilva has quit IRC04:39
*** armax has quit IRC04:41
*** rbudden has quit IRC04:46
*** jamesmcarthur has quit IRC04:49
*** felipemonteiro has joined #openstack-meeting04:51
*** jamesmcarthur has joined #openstack-meeting04:52
*** ykatabam has quit IRC04:53
*** jamesmcarthur has quit IRC05:02
*** jamesmcarthur has joined #openstack-meeting05:10
*** slaweq has joined #openstack-meeting05:11
*** tetsuro has joined #openstack-meeting05:14
*** slaweq has quit IRC05:16
*** jamesmcarthur has quit IRC05:16
*** sridharg has joined #openstack-meeting05:18
*** jamesmcarthur has joined #openstack-meeting05:19
*** jamesmcarthur has quit IRC05:24
*** ijw has joined #openstack-meeting05:25
*** ijw is now known as ijw_05:25
*** ijw_ is now known as ijw05:26
*** jamesmcarthur has joined #openstack-meeting05:51
*** jamesmcarthur has quit IRC05:55
*** Luzi has joined #openstack-meeting05:57
*** ykatabam has joined #openstack-meeting05:59
*** jamesmcarthur has joined #openstack-meeting06:24
*** aojea has joined #openstack-meeting06:31
*** iyamahat has quit IRC06:35
*** rcernin has quit IRC06:38
*** rcernin has joined #openstack-meeting06:38
*** pcaruana has joined #openstack-meeting06:40
*** rockyg has joined #openstack-meeting06:48
*** rockyg_ has joined #openstack-meeting06:50
*** rockyg_ has quit IRC06:51
*** rockyg has quit IRC06:53
*** felipemonteiro has quit IRC06:53
*** slaweq has joined #openstack-meeting06:57
*** ttsiouts has joined #openstack-meeting06:59
*** rcernin has quit IRC07:10
*** ykatabam has quit IRC07:10
*** ttsiouts has quit IRC07:16
*** iyamahat has joined #openstack-meeting07:53
*** pcaruana has quit IRC07:55
*** pcaruana has joined #openstack-meeting07:57
*** ttsiouts has joined #openstack-meeting08:00
*** tssurya has joined #openstack-meeting08:03
*** ralonsoh has joined #openstack-meeting08:06
*** ralonsoh has quit IRC08:30
*** ralonsoh has joined #openstack-meeting08:37
*** e0ne has joined #openstack-meeting08:42
*** ttsiouts has quit IRC08:49
*** ttsiouts has joined #openstack-meeting08:59
*** iyamahat has quit IRC09:02
*** ttsiouts has quit IRC09:04
*** ttsiouts has joined #openstack-meeting09:08
*** electrofelix has joined #openstack-meeting09:12
*** yamamoto has quit IRC09:22
*** yamamoto has joined #openstack-meeting09:22
*** jesusaur has joined #openstack-meeting09:30
*** Bhujay has joined #openstack-meeting09:48
*** priteau has joined #openstack-meeting09:48
*** longkb has quit IRC10:01
*** Bhujay has quit IRC10:06
*** ttsiouts has quit IRC10:21
*** ttsiouts has joined #openstack-meeting10:31
*** slaweq_ has joined #openstack-meeting10:38
*** kopecmartin|ruck is now known as kopecmartin|scho10:38
*** slaweq has quit IRC10:40
*** erlon has joined #openstack-meeting10:49
*** yamamoto has quit IRC10:49
*** yamamoto has joined #openstack-meeting10:49
*** yamamoto has quit IRC10:54
*** ganso has joined #openstack-meeting10:54
*** ganso has left #openstack-meeting10:54
*** slaweq__ has joined #openstack-meeting10:56
*** slaweq_ has quit IRC10:57
*** pcaruana has quit IRC11:02
*** pcaruana has joined #openstack-meeting11:02
*** janki has joined #openstack-meeting11:06
*** ttsiouts has quit IRC11:32
*** yamamoto has joined #openstack-meeting11:38
*** raildo has joined #openstack-meeting11:41
*** tpsilva has joined #openstack-meeting11:44
*** slagle has quit IRC11:51
*** tetsuro has quit IRC12:04
*** ttsiouts has joined #openstack-meeting12:07
*** dustins has joined #openstack-meeting12:09
*** erlon has quit IRC12:10
*** rbudden has joined #openstack-meeting12:14
*** ssbarnea_ has joined #openstack-meeting12:23
*** ssbarnea|bkp2 has quit IRC12:25
*** erlon has joined #openstack-meeting12:29
*** tdasilva has joined #openstack-meeting12:34
*** nguyenhai93 has quit IRC12:43
*** nguyenhai93 has joined #openstack-meeting12:43
*** kopecmartin|scho is now known as kopecmartin|ruck12:46
*** slagle has joined #openstack-meeting12:47
*** bobh has joined #openstack-meeting12:59
*** slagle has quit IRC13:22
*** erlon_ has joined #openstack-meeting13:25
*** tetsuro has joined #openstack-meeting13:25
*** erlon has quit IRC13:29
*** Emine has joined #openstack-meeting13:34
*** slaweq__ is now known as slaweq13:36
*** mjturek has joined #openstack-meeting13:37
*** evrardjp has quit IRC13:40
*** slagle has joined #openstack-meeting13:41
*** evrardjp has joined #openstack-meeting13:42
*** michael-beaver has joined #openstack-meeting13:43
*** eharney has joined #openstack-meeting13:43
*** Emine has quit IRC13:44
*** takashin has joined #openstack-meeting13:48
*** helenafm has joined #openstack-meeting13:48
*** pcaruana has quit IRC13:50
*** jangutter has joined #openstack-meeting13:52
*** munimeha1 has joined #openstack-meeting13:58
*** priteau has quit IRC13:58
*** priteau has joined #openstack-meeting13:59
*** iyamahat has joined #openstack-meeting14:02
*** njohnston has quit IRC14:02
bauzasgibi: shouldn't we have a nova meeting14:03
bauzas?14:03
tssuryao/14:03
gibi#startmeeting nova14:03
openstackMeeting started Thu Oct  4 14:03:20 2018 UTC and is due to finish in 60 minutes.  The chair is gibi. Information about MeetBot at http://wiki.debian.org/MeetBot.14:03
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:03
*** openstack changes topic to " (Meeting topic: nova)"14:03
openstackThe meeting name has been set to 'nova'14:03
takashino/14:03
tssuryaoops o/ again14:03
Luzio/14:03
gmanno/14:03
dansmitho/14:03
efriedō/14:03
mheno/14:03
edleafe\o14:04
gibihi, I think I will be your guide today14:04
bauzas\o14:04
*** sean-k-mooney has joined #openstack-meeting14:04
*** lyarwood has joined #openstack-meeting14:04
gibilet's get started14:04
gibi#topic Release News14:04
*** cdent has joined #openstack-meeting14:04
*** openstack changes topic to "Release News (Meeting topic: nova)"14:04
gibi#link Stein release schedule: https://wiki.openstack.org/wiki/Nova/Stein_Release_Schedule14:04
* cdent wanders in late. time is hard.14:04
*** munimeha1 has quit IRC14:05
gibi#link Stein runway etherpad: https://etherpad.openstack.org/p/nova-runways-stein14:05
gibi#link runway #1: https://blueprints.launchpad.net/nova/+spec/use-nested-allocation-candidates (gibi) [END: 2018-10-04] next patch is https://review.openstack.org/58366714:05
gibi#link runway #2: https://blueprints.launchpad.net/nova/+spec/vmware-live-migration (rgerganov) [END: 2018-10-12] one patch https://review.openstack.org/27011614:05
gibi#link runway #3: https://blueprints.launchpad.net/nova/+spec/boot-instance-specific-storage-backend (brinzhang)[END:2018-10-14]14:05
gibithe runway queue is empty14:06
*** awaugama has joined #openstack-meeting14:06
gibianything about release schedule or runways to discuss?14:06
gibithen moving on14:07
gibi#topic Bugs14:07
*** openstack changes topic to "Bugs (Meeting topic: nova)"14:07
gibino critical bugs14:07
gibi#link 60 new untriaged bugs (small decrease since last meeting): https://bugs.launchpad.net/nova/+bugs?search=Search&field.status=New14:08
gibi#link 5 untagged untriaged bugs (down 18 since the last meeting): https://bugs.launchpad.net/nova/+bugs?field.tag=-*&field.status%3Alist=NEW14:08
gibithat is actually pretty good ^^14:08
gibithanks for whoever did the triage14:08
gibi#link bug triage how-to: https://wiki.openstack.org/wiki/Nova/BugTriage#Tags14:09
gibianything about bugs to discuss?14:09
sean-k-mooneyhttps://bugs.launchpad.net/nova/+bug/179592014:09
openstackLaunchpad bug 1795920 in OpenStack Compute (nova) "SR-IOV shared PCI numa not working " [Undecided,Confirmed]14:09
sean-k-mooneywe did not fully implement the spec resulting in this bug14:10
sean-k-mooneyi am going to reporpose teh spec for completion if there are no objections14:10
gibisean-k-mooney: make sense to me. Thanks for taking care of it14:11
*** annp has joined #openstack-meeting14:11
gibiI think the silence means no objection :)14:11
gibianything else?14:11
gibion bugs14:12
gibithen14:12
gibiGate status14:12
gibi#link check queue gate status http://status.openstack.org/elastic-recheck/index.html14:12
bauzasgibi: you're correct on the assumption :)14:12
gibi3rd party CI14:12
gibi#link 3rd party CI status http://ci-watch.tintri.com/project?project=nova&time=7+days14:12
gibithe gate feels faster for me but the parallel evacuation bug hit us hard14:12
bauzasright14:12
gibihttp://status.openstack.org/elastic-recheck/index.html#176318114:13
gibimriedem proposed a patch to turn the test off but mdbooth has a fix up as well14:13
* gibi grabbing link14:13
gibi#link https://review.openstack.org/#/c/60762014:13
gibi#link https://review.openstack.org/#/c/60543614:14
bauzaswe can skip for now14:14
bauzasI'll +W the change14:14
gibibauzas: works for me14:14
bauzasand then we can test the change separately14:14
*** awaugama has quit IRC14:14
efriedFWIW, the fix fixes the test case14:14
*** awaugama has joined #openstack-meeting14:15
efriedBut dansmith is concerned (rightly so) about the scope/impact/side effects of the fix14:15
dansmithyup14:15
gibiI saw that mdbooth answered dansmith in the review so I think that discussion can move forward14:15
bauzasefried: sure, but we can ask to remove the skipTest in the change14:15
efriedyes14:16
dansmithI see I have things to read this morning14:16
bauzasefried: so while other changes aren't impacted, we can check it works14:16
bauzasnothing really blocking the fix14:16
bauzasexcept maybe to have it rebased on top of https://review.openstack.org/#/c/60762014:16
bauzasso that it can remove the skipTest14:16
bauzasmdbooth : ^14:17
efriedI just didn't want to have us forget about the fix because it's hard and the failure is no longer occurring because we simply skipped it.14:17
bauzasefried: I promise I won't :)14:17
efried:)14:17
bauzasand I guess matt won't too14:17
gibiOK I think we have a clear way forward. moving on :)14:17
*** hongbin has joined #openstack-meeting14:17
gibianything else about gate?14:18
gibi#topic Reminders14:18
*** openstack changes topic to "Reminders (Meeting topic: nova)"14:18
gibi#link high level nova PTG summary: http://lists.openstack.org/pipermail/openstack-dev/2018-September/135122.html14:18
gibi#link Stein Subteam Patches n Bugs: https://etherpad.openstack.org/p/stein-nova-subteam-tracking14:18
gibiany other reminder to note?14:19
gibi#topic Stable branch status14:19
*** openstack changes topic to "Stable branch status (Meeting topic: nova)"14:19
gibi#link stable/rocky: https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/rocky,n,z14:19
gibi#link stable/queens: https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/queens,n,z14:19
gibi#link stable/pike: https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/pike,n,z14:20
gibi#link stable/ocata: https://review.openstack.org/#/q/status:open+project:openstack/nova+branch:stable/ocata,n,z14:20
gibimriedem is not here do somebody has a short summary about the stable status?14:20
gibiAre we still working on flushing out the last ocata release before EM?14:20
*** munimeha1_ has joined #openstack-meeting14:21
gibiwe have couple of patches in the ocata queue  so I guees those are needed to be released before EM14:22
gibianything else on stable?14:22
gibi#topic Subteam Highlights14:23
*** openstack changes topic to "Subteam Highlights (Meeting topic: nova)"14:23
*** mdbooth_ has joined #openstack-meeting14:23
mdbooth_o/14:23
gibiCells v2 (dansmith)14:23
*** mdbooth_ is now known as mdbooth14:23
jding1_o/14:23
dansmithno meeting this week,14:23
dansmithbut down cell is proceeding,14:23
dansmithand matt has a PoC up for the cross-cell migration stuff14:23
dansmithwhich is fairly amazing14:23
dansmithoh, and there's a bug with the console stuff we deprecated last cycle14:24
dansmithwhich melwitt has some patches up for.. I haven't fully grokked that situation but I think it's progressing as well14:24
dansmiththat's about it I think,.14:24
gibithanks14:24
gibiScheduler (efried)14:24
efried#link Last NovaScheduler meeting minutes http://eavesdrop.openstack.org/meetings/nova_scheduler/2018/nova_scheduler.2018-10-01-14.00.html14:24
bauzasheh14:25
bauzasgood luck14:25
efriedWe talked about the consumer gen series. I'll get through as much of that as I can today.14:25
efriedExtraction is still progressing.14:25
efried#link ML thread on "intended purpose" of traits http://lists.openstack.org/pipermail/openstack-dev/2018-September/135209.html14:25
efriedwas mentioned and briefly discussed14:25
efriedTalked a bit further about how to handle configuring min_unit (and others) in a forward-looking (i.e. generic NRP) way. jaypipes agreed to look at the specs that might move us in that direction:14:25
efried#link kosamara's spec for modeling passthrough https://review.openstack.org/#/c/591037/14:25
efried#link sean-k-mooney's wip spec for generic device discovery/modeling https://review.openstack.org/#/c/603805/14:25
efriedIdea being to pick one of those so we can narrow our focus and move the ball forward.14:26
efriedEND14:26
gibiefried: thanks14:26
gibiNotification (gibi)14:26
gibiI've cancelled the weekly meeting indefinitely due to low interest: https://review.openstack.org/#/c/607314/14:26
gibiso I guess this is the last report14:27
gibibut I still be around for notification work (too)14:27
gibiEND14:27
gibiAPI (gmann)14:27
gibigmann left note on the wiki: no office hour this week.14:27
gmannno API office hour this week. i have added API related stein items in subteam etherpad  last week #link https://etherpad.openstack.org/p/stein-nova-subteam-tracking14:27
gmannnot other update to share. will start reviewing those items14:28
*** Bhujay has joined #openstack-meeting14:28
gibigmann: thanks14:28
gibianything else subteam related?14:28
gibi#topci Stuck Reviews14:28
gibinothing on the agenda14:29
gibidoes anybody want to mention something here?14:29
gibi#topic Stuck Reviews14:29
*** openstack changes topic to "Stuck Reviews (Meeting topic: nova)"14:29
bauzasgibi: #undo is cool for such things ;)14:29
gibibauzas: the keyword was wrong, so nothing to undo14:30
gibi#topic Open discussion14:30
*** openstack changes topic to "Open discussion (Meeting topic: nova)"14:30
gibiwe have one item on the agenda14:30
gibiHPET support on x86 guests: https://blueprints.launchpad.net/nova/+spec/support-hpet-on-guest14:30
efriedI took a preliminary look at the code:14:30
efried#link HPET patch https://review.openstack.org/#/c/605902/14:30
* bauzas won't make the joke again14:30
efriedThe thing I thought we might want to discuss is a) how strict we should be in terms of making sure we get on a HPET-capable host if that was requested in the flavor14:30
efriedand b) whether we should be using traits in here14:31
efriedThe case for b) becomes stronger if a) is a yes.14:31
efriedrather, if a) is "we should be strict"14:31
sean-k-mooneyefried: if we request a hpet in the guest i think we shoudl refuse to spawn if the host cant supprot it14:31
gibiefried: would libvirt fail to spawn if the host does not support hpet ?14:32
efriedOkay. Not really having a handle on how users perceive this thing, that was my reaction too.14:32
efriedNo, right now the code is set up to be really forgiving. If you include the extra spec, but you spell it wrong, or the host isn't capable, it just spawns anyway with HPET off.14:32
gibiefried: I see14:32
efriedIf we make it stricter just in the driver, then the failure would be late, which isn't ideal, and is precisely what traits are meant for.14:33
sean-k-mooneywell spelling mistaks can be ignored but the later is a bug in my view14:33
efriedwe can't do anything about spelling the key wrong. But if you misspell "treu" that should be an early failure.14:33
sean-k-mooneyefried: we could report hpet suport as a cpu/compute node trait14:33
efriedyes, sean-k-mooney, exactly.14:33
gibiefried: I totally agree that if we want to fail we should fail in placement GET a_c14:34
efriedand either parlay hw:hpet=True into a required=<trait_name> or require the flavor to include the latter explicitly.14:34
*** liuyulong has joined #openstack-meeting14:34
efriedThis goes back to the discussion about having to say a thing twice, once to schedule and once to turn it on.14:35
efriedwhich is not an ideal ux14:35
sean-k-mooneyefried: well we  do not want traits to enable things correct so if we removed one of the two we would keep the extra spec and have nova generate the trait14:35
efriedif we make a call for this case, it sets a precedent for the whole ironic deploy template design too...14:35
gibiI like the idea of saying once "I want this to be turned on" and as a result the instance get scheduled accordingly and the feature is turned on in the backend14:36
efriedsean-k-mooney: I think that's probably the decision least likely to result in all-out war.14:36
efriedThe problem of course being that it's kind of arcane knowledge that some extra specs get parlayed into required traits. Doc doc doc.14:36
* sean-k-mooney wait im not onthe all-out war side this feels weird14:36
bauzaswell14:37
sean-k-mooneyefried: that is true but i think that is preferable to documentin you must ad extra spec x and trait y14:37
bauzasI don't have a particular opinion on that, except that fat-fingering shouldn't be a nova issue14:38
bauzaswhether it should be an direct extraspec trait or something we would transform is not really important for me14:38
sean-k-mooneytypos could be addresed seperatly with the extra spec validation proposal so i think thats a seperate issue14:38
efriedUsing strict=True when interpreting the bool value14:38
bauzasif you make typos in your flavor, it's your fault, right?14:39
efriedseems like a pretty low-risk, low-cost validation strategy14:39
efriedto some extent, yes. Like I say, there's no way we can validate the key, because there's not a prescriptive set of keys - you can put anything you want in there.14:39
jding1_I second that document both but only expose hw:hpet to extra spec and let now generate traits14:39
efriedBut we can at least validate that the value - of a known key - matches the "data type" we expect.14:39
jding1_let nova genarate traits14:40
efriedI would like to hear jaypipes and/or dansmith weigh in on this14:40
dansmithsorry, something unfortunate came up that is distracting me from paying attention here14:40
sean-k-mooneyefried: there is a scema for validate via the glace metdadef api already14:40
sean-k-mooneyfor extra spec validation that is14:40
gibiefried: then I guess we need to wait for them to express their oppinion on the review14:41
dansmithis this spec discussion about hpet and how to request it from placement?14:41
gibidansmith: I think it is a specless bp right now14:41
*** jamesmcarthur has quit IRC14:41
gibidansmith: and an implementation patch14:42
*** jamesmcarthur has joined #openstack-meeting14:42
dansmithokay14:42
dansmithI've only skimmed,14:42
efriedTo summarize:14:42
efriedWe add a trait, say HPET_CAPABLE, which x86 libvirt adds to the host RP next to other "capabilities".14:42
efriedOperator puts extra spec hw:hpet=True in their flavor.14:42
efriedNova looks at hw:hpet=True and adds required=HPET_CAPABLE to the GET /a_c request14:42
efriedlibvirt sees hw:hpet=True and switches HPET on in the guest.14:42
dansmithefried: yeah, was just typing that out.. what's wrong with that approach?14:42
efrieddansmith: Nothing, I'm good with it. Wanted to make sure you were.14:43
* cdent is confused14:43
dansmitham I missing the thing I should hate there?14:43
*** armax has joined #openstack-meeting14:43
cdentwhy is this differerent from requiring a trait?14:43
efriedWell, I find it slightly arcane that we're special-casing an extra spec to push a required trait t othe placement request14:43
cdentjinx14:43
dansmithwe're not?14:43
bauzasefried: just one point14:43
efriedcdent: Oh, because we're using it to switch on a thing in the guest, as well as making it part of the scheduling decision.14:44
dansmithyou can already do required=$trait in a flavor yeah?14:44
dansmithoh, I see, but..14:44
bauzasefried: we're talking a lot of transforming extra specs into traits and/or request groups14:44
dansmithisn't that kinda the approach we have with GPUs already?14:44
bauzasefried: I think someone should take his guts and write something clean for that14:44
efrieddansmith: This is the whole crux of the ironic deploy template discussion right now.14:44
bauzasefried: it could be me because $NUMA, or it could be you14:44
cdentthe use of traits in the  GET /a_c part seems solid and normal14:44
dansmithefried: it is, except that the deploy template is more than just one thing14:44
bauzasdansmith: we directly ask a resource class in the flavor14:45
cdentit's the issue of having to transform from hw:hpet=True that is odd14:45
efrieddansmith: take the UEFI example - that's just one thing, right?14:45
dansmithcdent: we don't14:45
bauzasdansmith: here, I think efried is asking to hide this into an extra spec14:45
cdentdansmith: that's what efried described abvoe14:45
bauzasI'm not opposed to, I just want to make the mapping easy14:45
dansmithcdent: oh sorry, I see, I missed those two steps14:45
dansmithwhy wouldn't we just put the required trait in the flavor?14:45
cdentbingo14:45
dansmiththat said, the whole point of the request filter stuff is to translate novaisms into placementisms to some degree14:46
efrieddansmith: Because then the operator has to remember to say both things, which kind of sucks.14:46
dansmithefried: oh, because libvirt doesn't see the request we made to placement, thus doesn't see that we asked for it,14:46
dansmithbut it can see the flavor14:46
bauzasefried: like I said, my NUMA spec proposes some transformation-ism from an extra spec to a list of numbered request groups14:46
dansmithand that the flavor asked for that trait14:46
* dansmith is catching up14:46
*** kopecmartin|ruck is now known as kopecmartin|scho14:47
bauzaswait14:47
bauzaswe have allocations, right?14:47
sean-k-mooneydansmith: even if it could see the trait we do not enable capablite based on traits14:47
bauzasfor VGPUs, we exactly know what the user asked14:47
dansmithsean-k-mooney: currently.14:47
dansmiththis seems like the trait version of what we do for GPU to me14:47
efriedSo here's the spectrum:14:47
efried- Operator says hw:hpet=True and we magically add required=HPET_CAPABLE to the placement call.14:47
efried- Operator says required=HPET_CAPABLE and libvirt uses that as its prompt to set it on the guest <== this is what jaypipes hates14:47
efried- Operator says both hw:hpet=True,required=HPET_CAPABLE, which is poor ux because if he forgets one or the other, he doesn't get what he wants.14:47
sean-k-mooneydansmith: or ever if i understand jaypipes view on that14:48
dansmithefried: jaypipes said he hates it?14:48
efriedWell, he hates the principle14:48
dansmithI guess that's on the review?14:48
efriedhe hasn't weighed in on HPET specifically14:48
efriedbut using traits to effect guest config he has come down hard on.14:48
dansmithI feel like there might be some confusion about how this does or does not overlap with the ironic case14:48
bauzasoh wait14:49
dansmithI think that is because of the traits being complex in the ironic case, and needing to be basically parsed to extract the key=value aspect14:49
sean-k-mooneydansmith: jaypipes  has said previouly that we should not use reired=X to enable X in the context of secure boot and other things14:49
dansmithbut I could be wrong14:49
bauzasfor VGPUs, we only get allocations14:49
efriedFor the ironic case, if we just stick to the UEFI case, which is 1:1, it's a good parallel.14:49
bauzasso we don't really know the traits14:49
efriedbut yeah, the multifaceted deploy templates gets off into deeper weeds.14:49
bauzaswe only see whether we have a specific resource class14:49
dansmithcan we maybe just schedule a hangout with the man himself instead of everyone parroting what they think he intends?14:49
bauzasfor HPET, we would need to pass the request down the virt driver14:49
dansmithI think we could burn through this quicker that way anyway14:50
dansmithinstead of everyone watching this14:50
efriedwfm. jding1_ would you be available for a google hangout?14:50
bauzas+14:50
bauzas+1 even14:50
bauzasbut I have to run in a call right after this meeting14:50
*** jchhatbar has joined #openstack-meeting14:50
jding1_will see what time14:51
efriedjding1_: and cfriesen too14:51
efriedso14:51
sean-k-mooneysure that siad i also do not like using traits to enable features e.g. retuired=hpet_capable give you a hpet unless i can do that with everything like hugepages14:51
*** cfriesen has joined #openstack-meeting14:51
efriedIt's probably worth writing up these three alternatives at least into the blueprint template, if not into a short spec.14:51
gibiefried: I agree14:51
*** rbudden has quit IRC14:52
efriedcfriesen: You may want to read the scrollback. Or I can catch you up in -nova after the meeting.14:52
* cdent ducks out early14:53
*** cdent has quit IRC14:53
gibidansmith: will you organize the hangouts session for this?14:53
cfriesenefried: checking scrollback now14:53
*** janki has quit IRC14:53
dansmithgibi: that won't go well, given my week14:53
sean-k-mooneycfriesen:  did you also have a topic related to vtpm that you wanted to get eyes on?14:54
dansmithI'm sure efried wants that job14:54
efriedI can write words, but not sure where I should put them.14:54
gibiefried: put it in the blueprint as a start14:54
cfriesensean-k-mooney: yeah, I wasn't sure if I was going to make it so I didn't put it on the agenda14:54
efriedI could work with cfriesen/jding1_ on a short spec and we could discuss there, if that'll ease schedules.14:54
gibiefried: thank you14:54
efriedI don't think I have authority to edit the bp, and not sure the whiteboard is a good spot for it.14:55
cfriesenIf people have a few minutes...there's a sort of similar question around how flexible to make the virtual TPM stuff. (https://review.openstack.org/#/c/571111)14:55
sean-k-mooneycfriesen: i think we are just done with the hpet topic if you want to use the last 5 mins14:55
sean-k-mooney:)14:55
efriedcfriesen, jding1_: I'll write up the essentials and propose a spec review we can discuss on, and then give it over to y'all to fill in the details and make it buildable?14:56
jaypipessorry folks, reading back...14:56
gibicfriesen: go ahead you have 3 minutes :)14:56
cfriesenefried: sounds good.  Sean had suggested specifying the tpm type and version number, (with version defaulting to something if not specified).  then nova would translate that to a resource/trait request.14:56
*** gagehugo has joined #openstack-meeting14:56
*** rbudden has joined #openstack-meeting14:57
efriedso same design pattern14:57
cfriesenalternately we could have the flavor specify it directly in placement terminology14:57
jding1_efried: sounds good14:57
*** bobh has quit IRC14:58
cfriesenso for tpm we have an actual spec14:58
*** davidsha has joined #openstack-meeting14:58
cfriesenmaybe we want to put the alternatives in there and use that as proxy for the hpet discussion?14:58
*** e0ne has quit IRC14:58
sean-k-mooneyefried: yes same pattern. if we model hugepages in placement in the futre i would also like to translate hw:mem_page_size into traits too14:59
gibicfriesen: hpet is a bit special as it only uses traits not resource classes14:59
cfriesengibi: ah, good point14:59
gibiwe are running out of time14:59
gibicontinue this on #openstack-nova14:59
cfriesenyep14:59
gibithank you all14:59
*** _erlon_ has joined #openstack-meeting14:59
gibi#endmeeting15:00
bauzasthanks15:00
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"15:00
openstackMeeting ended Thu Oct  4 15:00:02 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:00
openstackMinutes:        http://eavesdrop.openstack.org/meetings/nova/2018/nova.2018-10-04-14.03.html15:00
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/nova/2018/nova.2018-10-04-14.03.txt15:00
openstackLog:            http://eavesdrop.openstack.org/meetings/nova/2018/nova.2018-10-04-14.03.log.html15:00
sean-k-mooneyo/15:00
*** sean-k-mooney has left #openstack-meeting15:00
*** Swami has joined #openstack-meeting15:00
*** nickthetait has joined #openstack-meeting15:00
gagehugo#startmeeting security15:01
openstackMeeting started Thu Oct  4 15:01:27 2018 UTC and is due to finish in 60 minutes.  The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
*** openstack changes topic to " (Meeting topic: security)"15:01
openstackThe meeting name has been set to 'security'15:01
*** takashin has left #openstack-meeting15:01
gagehugo#chair lhinds15:01
openstackCurrent chairs: gagehugo lhinds15:01
gagehugoping eeiden fungi gagehugo lhinds nickthetait browne redrobot15:02
fungihowdy15:02
nickthetaitheyo15:02
redroboto/15:02
gagehugoagenda: https://etherpad.openstack.org/p/security-agenda15:02
* redrobot is only half here... also in an IRL meeting.15:02
*** cdent has joined #openstack-meeting15:03
jaypipesefried: I don't see why we don't just have trait:HPET=require in the flavor extra specs?15:03
efriedjaypipes: move to -nova pls15:03
gagehugo#topic ossa/ossn15:03
*** openstack changes topic to "ossa/ossn (Meeting topic: security)"15:03
jaypipeswhy add some magic "if I see hw:hpet extra spec, then create a trait:HPET=require" automatically?15:04
*** cdent has left #openstack-meeting15:04
gagehugohttps://bugs.launchpad.net/keystone/+bug/1795800 was made public yesterday I believe15:04
openstackLaunchpad bug 1795800 in OpenStack Identity (keystone) "Username enumeration via response timing difference" [Undecided,New]15:04
*** bobh has joined #openstack-meeting15:04
nickthetaitah yes15:05
gagehugogetting the timings to match up was deemed not an easy task15:06
gagehugo#topic Documentation15:07
*** openstack changes topic to "Documentation (Meeting topic: security)"15:07
gagehugoI think doug pushed some tox changes to the security-doc repos15:07
gagehugohttps://review.openstack.org/#/q/status:open+project:openstack/security-doc+branch:master+topic:python3-first15:08
*** iyamahat has quit IRC15:08
gagehugo#topic Threat Analysis Docs15:10
*** openstack changes topic to "Threat Analysis Docs (Meeting topic: security)"15:10
gagehugoSame 3 are up for review15:10
*** bobh has quit IRC15:10
gagehugo#topic general discussion15:10
*** openstack changes topic to "general discussion (Meeting topic: security)"15:10
gagehugofungi nickthetait redrobot do you guys have anything?15:11
nickthetaitno15:11
*** ttsiouts has quit IRC15:11
fungiother than that new security hardening bug you linked for keystone, nothing from me15:12
fungithanks!15:12
fungialso the two cinder potential ossa public bugs we mentioned last week still need some help15:12
smcginnisfungi: Not sure I'm aware of those.15:12
gagehugohttps://bugs.launchpad.net/cinder/+bug/178487115:13
openstackLaunchpad bug 1784871 in OpenStack Security Advisory "ScaleIO (thin) volumes contain previous data (follow-up to 1699573)" [Undecided,Confirmed]15:13
*** e0ne has joined #openstack-meeting15:13
smcginnisgagehugo: Ah, thanks!15:13
gagehugohttps://bugs.launchpad.net/cinder/+bug/171485815:14
openstackLaunchpad bug 1714858 in OpenStack Security Advisory "Some APIs don't check the owner policy" [Undecided,Incomplete]15:14
fungione of them looks like it probably needs us to issue an advisory? less sure about the other one15:14
gagehugofungi: ack, I'll look them over15:14
fungi(us being members of the vmt, but assistance from other interested parties is also welcome since they're public reports)15:15
*** annp has quit IRC15:16
gagehugoIs anyone going to be in Berlin?15:16
gagehugonext summit is little over a month away15:17
nickthetaitI cant :'(15:18
gagehugoI don't think I will be either unfortunately15:18
gagehugoIf no one else has anything, we can end early15:21
gagehugogive back a few mins15:22
*** jding1_ is now known as jackding15:23
gagehugoThanks everyone, have a good weekend!15:23
gagehugo#endmeeting15:23
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"15:23
openstackMeeting ended Thu Oct  4 15:23:24 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:23
openstackMinutes:        http://eavesdrop.openstack.org/meetings/security/2018/security.2018-10-04-15.01.html15:23
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/security/2018/security.2018-10-04-15.01.txt15:23
openstackLog:            http://eavesdrop.openstack.org/meetings/security/2018/security.2018-10-04-15.01.log.html15:23
*** mdbooth has quit IRC15:24
*** mdbooth has joined #openstack-meeting15:24
*** longkb has joined #openstack-meeting15:24
*** Luzi has quit IRC15:25
*** slagle has quit IRC15:25
*** macza has joined #openstack-meeting15:25
*** longkb has quit IRC15:26
*** mdbooth has quit IRC15:27
*** mdbooth has joined #openstack-meeting15:28
*** mdbooth has quit IRC15:28
*** mdbooth has joined #openstack-meeting15:29
*** mdbooth has quit IRC15:32
*** mdbooth_ has joined #openstack-meeting15:32
*** bobh has joined #openstack-meeting15:37
*** bobh has quit IRC15:44
*** mdbooth_ has quit IRC15:46
*** jchhatbar has quit IRC15:46
*** e0ne has quit IRC15:47
*** liuyulong has quit IRC15:51
*** michael-beaver has quit IRC15:54
*** Bhujay has quit IRC15:55
*** gyee has joined #openstack-meeting16:00
*** helenafm has quit IRC16:03
*** michael-beaver has joined #openstack-meeting16:04
*** iyamahat has joined #openstack-meeting16:14
*** slagle has joined #openstack-meeting16:20
*** Bhujay has joined #openstack-meeting16:34
*** michael-beaver has quit IRC16:35
*** aojea has quit IRC16:37
*** dosaboy has quit IRC16:39
*** dosaboy has joined #openstack-meeting16:45
*** iyamahat has quit IRC16:51
*** dosaboy has quit IRC16:55
*** diablo_rojo has joined #openstack-meeting16:55
*** Bhujay has quit IRC17:01
*** dosaboy has joined #openstack-meeting17:01
*** iyamahat has joined #openstack-meeting17:04
*** yamahata has joined #openstack-meeting17:04
*** bollig has quit IRC17:14
*** bollig has joined #openstack-meeting17:14
*** pcaruana has joined #openstack-meeting17:17
*** sridharg has quit IRC17:22
*** Bhujay has joined #openstack-meeting17:30
*** Swami has quit IRC17:36
*** bobh has joined #openstack-meeting17:45
*** tssurya has quit IRC17:48
*** Emine has joined #openstack-meeting17:51
*** yamamoto has quit IRC17:51
*** yamamoto has joined #openstack-meeting17:52
*** yamamoto has quit IRC17:57
*** pcaruana has quit IRC18:01
*** munimeha1_ has quit IRC18:01
*** iyamahat_ has joined #openstack-meeting18:02
*** Swami has joined #openstack-meeting18:04
*** iyamahat has quit IRC18:05
*** Bhujay has quit IRC18:20
*** imacdonn has quit IRC18:22
*** imacdonn has joined #openstack-meeting18:22
*** macza has quit IRC18:25
*** macza has joined #openstack-meeting18:26
*** yamamoto has joined #openstack-meeting18:30
*** e0ne has joined #openstack-meeting18:31
*** e0ne has quit IRC18:33
*** mriedem has joined #openstack-meeting18:34
*** tssurya has joined #openstack-meeting18:36
*** dustins has quit IRC18:43
*** electrofelix has quit IRC18:51
*** davidsha has quit IRC18:51
*** ralonsoh has quit IRC18:52
*** mriedem has quit IRC19:15
*** mjturek has quit IRC19:17
*** _erlon_ has quit IRC19:19
*** mriedem has joined #openstack-meeting19:24
*** munimeha1 has joined #openstack-meeting19:30
*** nickthetait has quit IRC19:31
*** awaugama has quit IRC19:37
*** dustins has joined #openstack-meeting19:41
*** munimeha1_ has joined #openstack-meeting19:42
*** slagle has quit IRC19:43
*** munimeha1 has quit IRC19:43
*** eharney has quit IRC19:47
*** mjturek has joined #openstack-meeting19:49
*** mjturek has quit IRC20:00
*** e0ne has joined #openstack-meeting20:08
*** mjturek has joined #openstack-meeting20:11
*** e0ne has quit IRC20:14
*** priteau has quit IRC20:15
*** mjturek has quit IRC20:17
*** mjturek has joined #openstack-meeting20:19
*** slagle has joined #openstack-meeting20:19
*** mjturek has quit IRC20:23
*** diablo_rojo has quit IRC20:24
*** diablo_rojo has joined #openstack-meeting20:25
*** e0ne has joined #openstack-meeting20:30
*** priteau has joined #openstack-meeting20:35
*** devananda has quit IRC20:38
*** slagle has quit IRC20:39
*** macza has quit IRC20:40
*** macza has joined #openstack-meeting20:41
*** ijw has quit IRC20:43
*** mjturek has joined #openstack-meeting20:48
*** priteau has quit IRC20:48
*** mjturek has quit IRC20:54
*** e0ne has quit IRC21:00
*** erlon_ has quit IRC21:05
*** mriedem has quit IRC21:05
*** devananda has joined #openstack-meeting21:25
*** dustins has quit IRC21:40
*** munimeha1_ has quit IRC21:45
*** ijw has joined #openstack-meeting21:48
*** bobh has quit IRC21:58
*** jamesmcarthur has quit IRC22:05
*** ykatabam has joined #openstack-meeting22:10
*** ykatabam has quit IRC22:12
*** ykatabam has joined #openstack-meeting22:12
*** ykatabam has quit IRC22:12
*** ykatabam has joined #openstack-meeting22:13
*** tssurya has quit IRC22:14
*** jamesmcarthur has joined #openstack-meeting22:17
*** jamesmcarthur has quit IRC22:22
*** rcernin has joined #openstack-meeting22:28
*** jamesmcarthur has joined #openstack-meeting22:31
*** tpsilva has quit IRC22:40
*** rbudden has quit IRC22:47
*** jamesmcarthur has quit IRC22:48
*** hongbin has quit IRC22:57
*** macza has quit IRC22:58
*** jamesmcarthur has joined #openstack-meeting23:04
*** ijw has quit IRC23:14
*** ijw_ has joined #openstack-meeting23:14
*** jamesmcarthur has quit IRC23:24
*** slagle has joined #openstack-meeting23:35
*** edmondsw has quit IRC23:38
*** edleafe has quit IRC23:39
*** jamesmcarthur has joined #openstack-meeting23:43
*** jamesmcarthur has quit IRC23:49
*** jamesmcarthur has joined #openstack-meeting23:50
*** ijw_ has quit IRC23:53
*** tetsuro_ has joined #openstack-meeting23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!