Thursday, 2020-11-19

*** armax has quit IRC00:05
*** yamamoto has joined #openstack-meeting00:12
*** tosky has quit IRC00:14
*** armax has joined #openstack-meeting00:16
*** yamamoto has quit IRC00:23
*** jmasud has joined #openstack-meeting00:26
*** jmasud has quit IRC00:28
*** jmasud has joined #openstack-meeting00:37
*** ricolin has joined #openstack-meeting00:37
*** yamamoto has joined #openstack-meeting00:39
*** jmasud has quit IRC00:44
*** yamamoto has quit IRC00:47
*** jmasud has joined #openstack-meeting00:53
*** csatari has quit IRC00:57
*** jmasud has quit IRC00:59
*** jmasud has joined #openstack-meeting00:59
*** csatari has joined #openstack-meeting01:00
*** jgriffith has quit IRC01:04
*** jmasud has quit IRC01:10
*** jmasud has joined #openstack-meeting01:16
*** jmasud has quit IRC01:25
*** yamamoto has joined #openstack-meeting01:27
*** gyee has quit IRC01:38
*** yamamoto has quit IRC01:38
*** yamamoto has joined #openstack-meeting01:50
*** macz_ has quit IRC02:08
*** rcernin has quit IRC02:22
*** rcernin has joined #openstack-meeting02:26
*** armax has quit IRC03:10
*** macz_ has joined #openstack-meeting03:20
*** macz_ has quit IRC03:25
*** manpreet has joined #openstack-meeting04:24
*** vishalmanchanda has joined #openstack-meeting04:30
*** ianychoi has joined #openstack-meeting04:36
*** jmasud has joined #openstack-meeting04:42
*** dklyle has quit IRC04:57
*** rh-jlabarre has quit IRC04:58
*** macz_ has joined #openstack-meeting05:02
*** macz_ has quit IRC05:06
*** jmasud has quit IRC05:10
*** jmasud has joined #openstack-meeting05:11
*** yamamoto has quit IRC05:24
*** yamamoto has joined #openstack-meeting05:32
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-meeting05:33
*** yamamoto has quit IRC05:34
*** yamamoto has joined #openstack-meeting06:11
*** yamamoto has quit IRC06:20
*** macz_ has joined #openstack-meeting06:29
*** macz_ has quit IRC06:34
*** yamamoto has joined #openstack-meeting06:51
*** slaweq has joined #openstack-meeting07:00
*** yamamoto has quit IRC07:00
*** yamamoto has joined #openstack-meeting07:30
*** yamamoto has quit IRC07:38
*** ralonsoh has joined #openstack-meeting07:43
*** jmasud has quit IRC07:51
*** yamamoto has joined #openstack-meeting08:01
*** rpittau|afk is now known as rpittau08:03
*** yamamoto has quit IRC08:05
*** icey has joined #openstack-meeting08:17
*** baojg has quit IRC08:34
*** baojg has joined #openstack-meeting08:35
*** baojg has quit IRC08:35
*** imcsk8 has quit IRC08:37
*** rcernin has quit IRC08:37
*** ircuser-1 has quit IRC08:38
*** imcsk8 has joined #openstack-meeting08:39
*** baojg has joined #openstack-meeting08:42
*** tosky has joined #openstack-meeting08:44
*** ykatabam has quit IRC08:45
*** lpetrut has joined #openstack-meeting08:47
*** ykatabam has joined #openstack-meeting09:02
*** mlavalle has quit IRC09:09
*** mlavalle has joined #openstack-meeting09:12
*** yamamoto has joined #openstack-meeting09:16
*** icey has quit IRC09:17
*** yamamoto has quit IRC09:23
*** icey has joined #openstack-meeting09:24
*** ykatabam has quit IRC09:27
*** ricolin has quit IRC09:38
*** ociuhandu has joined #openstack-meeting09:41
*** rakhmerov has joined #openstack-meeting09:58
*** yamamoto has joined #openstack-meeting10:03
*** rakhmerov has quit IRC10:06
*** yamamoto has quit IRC10:16
*** e0ne has joined #openstack-meeting10:29
*** ociuhandu has quit IRC10:36
*** icey has quit IRC10:36
*** ociuhandu has joined #openstack-meeting10:43
*** yamamoto has joined #openstack-meeting10:47
*** icey has joined #openstack-meeting10:47
*** icey has quit IRC10:52
*** yamamoto has quit IRC10:57
*** yamamoto has joined #openstack-meeting10:57
*** bnemec has quit IRC11:00
*** bnemec has joined #openstack-meeting11:01
*** icey has joined #openstack-meeting11:03
*** baojg has quit IRC11:04
*** baojg has joined #openstack-meeting11:05
*** ociuhandu has quit IRC11:08
*** dsariel has joined #openstack-meeting11:25
*** ociuhandu has joined #openstack-meeting11:28
*** baojg has quit IRC11:40
*** baojg has joined #openstack-meeting11:41
*** ociuhandu has quit IRC11:41
*** ociuhandu has joined #openstack-meeting11:42
*** macz_ has joined #openstack-meeting11:46
*** macz_ has quit IRC11:51
*** baojg has quit IRC11:55
*** baojg has joined #openstack-meeting11:56
*** sluna has quit IRC12:10
*** sluna has joined #openstack-meeting12:10
*** raildo has joined #openstack-meeting12:14
*** ricolin has joined #openstack-meeting12:18
*** ociuhandu has quit IRC12:22
*** kevinz has joined #openstack-meeting12:36
*** ociuhandu has joined #openstack-meeting12:52
*** ociuhandu has quit IRC12:57
*** rh-jlabarre has joined #openstack-meeting13:07
*** rpittau is now known as rpittau|brb13:16
*** ociuhandu has joined #openstack-meeting13:24
*** rosmaita has joined #openstack-meeting13:55
abhishekk#startmeeting glance14:00
openstackMeeting started Thu Nov 19 14:00:14 2020 UTC and is due to finish in 60 minutes.  The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
abhishekk#topic roll call14:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
*** openstack changes topic to " (Meeting topic: glance)"14:00
openstackThe meeting name has been set to 'glance'14:00
*** openstack changes topic to "roll call (Meeting topic: glance)"14:00
jokkeo/14:00
*** liuyulong has joined #openstack-meeting14:00
abhishekk#link https://etherpad.openstack.org/p/glance-team-meeting-agenda14:00
abhishekko/14:00
abhishekkShort agenda today14:00
abhishekkMight be finished within 15-20 minutes14:01
abhishekkwaiting couple of minutes for others to join14:01
*** ociuhandu has quit IRC14:02
*** ociuhandu has joined #openstack-meeting14:02
abhishekkLooks like just us :D14:02
abhishekklets start14:03
jokke:)14:03
abhishekk#topic release/periodic jobs update14:03
*** openstack changes topic to "release/periodic jobs update (Meeting topic: glance)"14:03
abhishekkWallaby milestone 1 - 2 weeks away14:03
abhishekkI am going to tag glance-store release next week on Monday to unblcok cinder multistore functional tests14:04
abhishekkPeriodic jobs 1 failure this week14:04
abhishekkWill go through logs after the meeting14:04
jokkekk, was jus gonna ask if something we need to be worried about or just glitch14:04
rosmaitao/14:04
jokkeHi Brian14:04
abhishekko/14:04
rosmaitasorry i'm late14:05
abhishekkno need to worry at the moment14:05
abhishekkno problem rosmaita :D14:05
abhishekk#topic Milestone 1 priorities14:05
*** openstack changes topic to "Milestone 1 priorities (Meeting topic: glance)"14:05
abhishekkReform cluster awareness specs14:05
abhishekkReform cache-api specs (very less priority)14:05
abhishekkLite spec for task API for general user (mostly just like task show API)14:06
abhishekkI will try to put this lite spec by Monday, at the moment working on PoC14:06
abhishekkOther than this, kindly go through glance-specs patches, I have asked couple of contributors to file lite specs for their work14:07
jokkeI will have the cluster awareness spacs up either today or tomorrow, likely today14:07
abhishekkcool14:07
abhishekkMoving ahead14:07
abhishekk#topic RBAC14:07
*** openstack changes topic to "RBAC (Meeting topic: glance)"14:07
rosmaitaeverybody's favorite topic!14:07
abhishekk:P14:08
abhishekkI have attended Open hour meeting this week and cleared some of my doubts14:08
abhishekkNo need to have policies close to API layer14:08
abhishekkAt the moment they said there is no need to refactor our policy layer much14:08
abhishekkWIP patch - https://review.opendev.org/76320814:09
abhishekkI will discuss this patch with lbragstad for the inputs and direction14:09
abhishekkUpstream goal wise we are on track and just need to submit one reno saying we are using policy.yaml than policy.json14:10
abhishekkThis we will address while releasing milestone 1 for glance14:10
jokkeyeah14:10
SteapIs the upstream goal for W to implement the 4 "basic" persona?14:11
rosmaitai think there are 5?14:11
abhishekkUpstream goal for W is to use policy.yaml instead of policy.json14:11
rosmaita3 project scope, 2 system scope14:11
lbragstado/14:11
abhishekko/14:12
abhishekklbragstad, I have added you as a reviewer to WIP patch14:12
abhishekkkindly have a look and let me know your suggestions14:12
lbragstadwill do - thank you for starting that process abhishekk14:13
Steaprosmaita: damn, on Tuesday it was 4, now it's 514:13
rosmaitaSteap: it's almost as bad as covid14:13
lbragstadthe 5th is kind of a noop14:13
rosmaitalbragstad: what do you mean?14:13
abhishekklbragstad, no worries, there is lot to do :D14:14
lbragstadso - we have system admin, system member, system reader, project member, and project reader14:14
rosmaitalbragstad: so system-member is useless, but project admin is ++14:14
abhishekkno project admin?14:14
lbragstadbased on feedback from the groups we've talked to so far, project admin is something we can do later14:15
lbragstadrosmaita and yes, system-member is essentially another name for system-reader since member implies reader14:15
lbragstadbut - it is useful if a deployment wants to offload some administrative functionality from system admin to system member (all they have to do is supply the override)14:15
rosmaitawell, and test the heck out of it14:15
lbragstad++14:16
rosmaitaok, but the key issue is what personas are "required"?14:16
*** TrevorV has joined #openstack-meeting14:16
lbragstadsystem admin, system reader, project member, and project reader14:16
rosmaitaok, cool14:16
lbragstadeverything that "project admins" do today should get refactored into system admin14:17
jokkerosmaita: abhishekk: didn't we remove the "tenant_is_owner" config option and made it default? And IIUC project == tenant so we we should not have anything different between project member and project admin, the reader is going to bitch and a half to ensure14:17
rosmaitajokke: we deprecated it, now sure if it was actually removed14:17
abhishekkNeed to check whether we have removed it or not14:18
jokke^^ and od we have migration in place for those who did use user as owner :|14:18
lbragstadjokke can you elaborate on the concerns for reader?14:18
rosmaitano, we were not going to do a migration14:18
rosmaitai think we said so in the deprecation notice14:19
jokkelbragstad: our policies are all over the place between API and actual db calls. To actually ensure that there is no changes to happen for what ever gets scoped as reader is not just looking the API call type. Specially as we have lazy store converts in a place that would cause even normal listing by reader to be denied14:21
lbragstadok - interesting...14:21
rosmaitajokke: just checked, deprecation specified no migration path : https://review.opendev.org/#/c/552642/14:21
lbragstadi need to take a harder look at glance - but i'll see if i can scrub up an example14:22
jokkerosmaita: hmm-m ok was it just deprecated as signalling "please, don't use" or were we actually planning to remove that?14:22
rosmaitawell, actually the deprecation release note doesn't say that, but the warning in the log does14:22
abhishekkand as usual, its not removed yet :D14:22
rosmaitawho was the dumbass who wrote that release note14:22
rosmaitaactually, i blame the reviewers14:23
jokkerosmaita: was it me or you?14:23
rosmaitait was me14:23
jokke:P14:23
rosmaitabut you +2d it!14:23
rosmaitai'm pretty sure we took an operator survey about it, so there was definitely notice that we did not plan a DB migration14:24
abhishekklbragstad, thank you, that will be much helpful14:24
rosmaitajokke: we were definitely planning to remove14:25
jokkecause if we do not remove that and stop supporting user owned images, the reader will become even more difficult14:25
rosmaitai think we should do it now14:25
lbragstadabhishekk if i don't followup with you later today - i'll make a note to sync up with glance early next week14:25
abhishekklbragstad, great14:25
rosmaitajokke: ++14:25
rosmaitaabhishekk: i suggest prioritizing removing owner_is_tenant14:26
abhishekksome one should put a patch to remove it14:26
rosmaitaSteap: ^^ how are you set on time?14:26
abhishekkrosmaita, ack14:26
jokkeor not difficult per se, we just can't do project reader and grand read access to all project members as that would be quite horrific security violation14:26
rosmaitano, we don't want to mess with it at all14:26
rosmaitalet's remove it and not worry14:27
abhishekk+114:27
jokkerosmaita: abhishekk: just note on the removal. Specially as there is no migration path we need to make sure we don't accept user as owner after that config option is removed and basically render all images still in that state unusable unles the owner is changed14:29
Steaprosmaita: I'm not sure I understand what you're asking14:29
abhishekkjokke, ack14:30
jokkeSteap: I think he means, "Want to take nice lil upstream task on?" very easy and simple, you just gotta remove one config option :P14:30
rosmaitaSteap: i am asking you to do the work for https://review.opendev.org/#/c/550096/2/specs/rocky/approved/glance/spec-lite-deprecate-owner_is_tenant.rst14:30
rosmaitait's probably checked like 500 places in the code, though14:31
Steaphaha14:31
rosmaita(did i say that out loud?)14:31
Steapok I'll take a look at it14:31
Steap(have I doomed myself?)14:31
rosmaitait shouldn't be too bad code-wise, there will be a lot of tests to remove/refactor, i suspect14:32
abhishekkSteap, I will be around14:32
Steap$ git grep owner_is_tenant |wc -l14:33
Steap2114:33
Steapseems < 50014:33
jokkenot too bad then14:33
*** liuyulong has quit IRC14:33
abhishekkawesome, all the best :D14:33
rosmaitacool, i look forward to seeing your patch tomorrow14:33
abhishekkthat's it for today14:33
abhishekkMoving to open discussion14:34
Steaprosmaita: sure thing, boss14:34
abhishekk#topic Open discussion14:34
*** openstack changes topic to "Open discussion (Meeting topic: glance)"14:34
abhishekkanything else ??14:34
jokkeyes14:34
jokke#link https://review.opendev.org/#/c/762498/ Stable backport question14:34
jokkeWe'd like to have this downstream in OSP 16 and least work would be if we can backport it to Train14:35
abhishekkYes14:35
jokkeQuestion is, how is the new backport rules with all the old stable branches around etc. Can we actually do it?14:35
abhishekkIMO we can backport upto two stable branches14:36
*** baojg has quit IRC14:36
abhishekkas this was done in victoria we can backport it upto Train14:36
rosmaitai think you can backport it as far as you want14:37
*** baojg has joined #openstack-meeting14:37
rosmaitasmall change, low risk, only affects one glance_store driver14:37
abhishekk+114:38
rosmaitaplus, Sean already +2d the ussuri backport14:38
*** ociuhandu has quit IRC14:39
abhishekkthat means you can +2 it :D14:39
jokkeCool, I thought it should be fine, but wanted to make sure14:39
abhishekkcool14:39
jokkeand makes Steap's life lot easier if we get it all the way to train :P14:39
abhishekk:D14:39
Steapjokke: you can also not open a downstream bug :)14:40
abhishekkanything else, before closing14:41
jokkebut that's all from me14:41
Steapyeah14:41
jokkeapart from lets get that done :P14:41
abhishekk:P14:42
abhishekkSteap, anything else?14:42
lbragstadabhishekk do you mind if i update the topic on your patch to secure-rbac?14:43
abhishekklbragstad, no problem14:43
abhishekkthank you all14:43
abhishekksee you next week, have a nice weekend14:43
jokkethanks everyone14:44
rosmaitabye!14:44
abhishekk#endmeeting14:44
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"14:44
openstackMeeting ended Thu Nov 19 14:44:25 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:44
openstackMinutes:        http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-11-19-14.00.html14:44
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-11-19-14.00.txt14:44
openstackLog:            http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-11-19-14.00.log.html14:44
*** jiaopengju2 has quit IRC14:50
*** rpittau|brb is now known as rpittau14:51
*** jiaopengju2 has joined #openstack-meeting14:51
*** andrebeltrami has joined #openstack-meeting14:56
*** rosmaita has left #openstack-meeting15:03
*** ociuhandu has joined #openstack-meeting15:05
*** tosky has quit IRC15:18
*** mlavalle has quit IRC15:21
*** tosky has joined #openstack-meeting15:22
*** tosky has quit IRC15:26
*** macz_ has joined #openstack-meeting15:39
*** dklyle has joined #openstack-meeting15:41
*** armax has joined #openstack-meeting15:44
*** tosky has joined #openstack-meeting15:50
*** ociuhandu_ has joined #openstack-meeting16:00
*** vishalmanchanda has quit IRC16:00
*** ociuhandu has quit IRC16:03
*** evrardjp has quit IRC16:17
*** armstrong has joined #openstack-meeting16:34
*** gyee has joined #openstack-meeting16:34
*** jmasud has joined #openstack-meeting16:36
*** ociuhandu_ has quit IRC16:40
*** ociuhandu has joined #openstack-meeting16:42
*** lpetrut has quit IRC16:42
*** ociuhandu has quit IRC16:48
*** gyee has quit IRC16:50
*** rpittau is now known as rpittau|afk16:52
*** ociuhandu has joined #openstack-meeting16:52
*** sluna has quit IRC16:53
*** andrebeltrami has quit IRC17:02
*** jiaopengju2 has quit IRC17:03
*** jiaopengju2 has joined #openstack-meeting17:04
*** macz_ has quit IRC17:05
*** gyee has joined #openstack-meeting17:05
*** ralonsoh_ has joined #openstack-meeting17:27
*** ralonsoh_ has left #openstack-meeting17:27
*** ralonsoh has quit IRC17:28
*** ociuhandu_ has joined #openstack-meeting17:28
*** ociuhandu has quit IRC17:31
*** ociuhandu_ has quit IRC17:33
*** hemna has quit IRC17:46
*** hemna has joined #openstack-meeting17:47
*** macz_ has joined #openstack-meeting17:53
*** mlavalle has joined #openstack-meeting18:00
*** geguileo has quit IRC18:03
*** dsariel has quit IRC18:05
*** dsariel has joined #openstack-meeting18:06
*** macz_ has quit IRC18:08
*** dsariel has quit IRC18:10
*** jmasud has quit IRC18:20
*** jmasud has joined #openstack-meeting18:32
*** macz_ has joined #openstack-meeting18:51
*** jmasud has quit IRC19:05
*** bbowen has quit IRC19:07
*** macz_ has quit IRC19:19
*** macz_ has joined #openstack-meeting19:37
*** rcernin has joined #openstack-meeting20:33
*** rcernin has quit IRC20:37
*** bbowen has joined #openstack-meeting20:40
*** ircuser-1 has joined #openstack-meeting20:55
*** rcernin has joined #openstack-meeting21:02
*** TrevorV has quit IRC21:09
*** e0ne has quit IRC21:24
*** dsariel has joined #openstack-meeting21:58
*** dsariel has quit IRC22:03
*** jmasud has joined #openstack-meeting22:41
*** jmasud has quit IRC22:47
*** baojg has quit IRC22:56
*** baojg has joined #openstack-meeting22:57
*** baojg has quit IRC23:20
*** baojg has joined #openstack-meeting23:21
*** jmasud has joined #openstack-meeting23:27
*** jmasud has quit IRC23:32
*** jmasud has joined #openstack-meeting23:33
*** rcernin has quit IRC23:35
*** jmasud has quit IRC23:35
*** rcernin has joined #openstack-meeting23:35
*** jmasud has joined #openstack-meeting23:35
*** jmasud has quit IRC23:39
*** baojg has quit IRC23:42
*** baojg has joined #openstack-meeting23:42

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!