| *** tosky has quit IRC | 00:02 | |
| *** timburke has joined #openstack-meeting | 00:08 | |
| *** baojg has quit IRC | 00:18 | |
| *** baojg has joined #openstack-meeting | 00:19 | |
| *** yasufum has joined #openstack-meeting | 00:24 | |
| *** macz_ has quit IRC | 00:25 | |
| *** rfolco has joined #openstack-meeting | 00:26 | |
| *** yasufum has quit IRC | 00:29 | |
| *** yasufum has joined #openstack-meeting | 00:30 | |
| *** armax has quit IRC | 00:30 | |
| *** mlavalle has quit IRC | 00:30 | |
| *** benj_- has joined #openstack-meeting | 00:53 | |
| *** benj_ has quit IRC | 00:54 | |
| *** benj_- is now known as benj_ | 00:54 | |
| *** rfolco has quit IRC | 01:17 | |
| *** thgcorrea has quit IRC | 01:29 | |
| *** ricolin has quit IRC | 01:35 | |
| *** jmasud has joined #openstack-meeting | 02:31 | |
| *** jmasud has quit IRC | 02:34 | |
| *** priteau has quit IRC | 03:03 | |
| *** timburke has quit IRC | 03:03 | |
| *** manpreet has joined #openstack-meeting | 03:11 | |
| *** psachin has joined #openstack-meeting | 03:45 | |
| *** zbr has quit IRC | 03:57 | |
| *** zbr has joined #openstack-meeting | 03:58 | |
| *** gyee has quit IRC | 04:00 | |
| *** hyunsikyang has quit IRC | 04:20 | |
| *** yasufum has quit IRC | 04:33 | |
| *** yasufum has joined #openstack-meeting | 04:39 | |
| *** bauzas has quit IRC | 05:02 | |
| *** bauzas has joined #openstack-meeting | 05:09 | |
| *** dasp has quit IRC | 05:18 | |
| *** yasufum has quit IRC | 05:23 | |
| *** yasufum has joined #openstack-meeting | 05:28 | |
| *** evrardjp has quit IRC | 05:33 | |
| *** evrardjp has joined #openstack-meeting | 05:33 | |
| *** dasp has joined #openstack-meeting | 05:34 | |
| *** rpittau|afk has quit IRC | 06:11 | |
| *** mnaser has quit IRC | 06:11 | |
| *** rpittau|afk has joined #openstack-meeting | 06:12 | |
| *** mnaser has joined #openstack-meeting | 06:12 | |
| *** timburke has joined #openstack-meeting | 06:34 | |
| *** timburke has quit IRC | 06:43 | |
| *** evrardjp has quit IRC | 06:49 | |
| *** evrardjp_ has joined #openstack-meeting | 06:49 | |
| *** lpetrut has joined #openstack-meeting | 07:00 | |
| *** rcernin has quit IRC | 07:10 | |
| *** slaweq has joined #openstack-meeting | 07:18 | |
| *** ralonsoh has joined #openstack-meeting | 07:25 | |
| *** rcernin has joined #openstack-meeting | 07:29 | |
| *** dklyle has quit IRC | 07:37 | |
| *** macz_ has joined #openstack-meeting | 07:51 | |
| *** macz_ has quit IRC | 07:55 | |
| *** timburke has joined #openstack-meeting | 08:06 | |
| *** rcernin has quit IRC | 08:07 | |
| *** rpittau|afk is now known as rpittau | 08:17 | |
| *** e0ne has joined #openstack-meeting | 08:23 | |
| *** larainema has joined #openstack-meeting | 08:35 | |
| *** tosky has joined #openstack-meeting | 08:47 | |
| *** rcernin has joined #openstack-meeting | 08:56 | |
| *** dsariel has joined #openstack-meeting | 09:01 | |
| *** zbr has quit IRC | 09:10 | |
| *** zbr has joined #openstack-meeting | 09:11 | |
| *** zbr has quit IRC | 09:13 | |
| *** rcernin has quit IRC | 09:13 | |
| *** zbr has joined #openstack-meeting | 09:13 | |
| *** zbr has quit IRC | 09:35 | |
| *** zbr has joined #openstack-meeting | 09:37 | |
| *** zbr has quit IRC | 09:40 | |
| *** zbr has joined #openstack-meeting | 09:40 | |
| *** zbr has quit IRC | 09:54 | |
| *** zbr has joined #openstack-meeting | 09:56 | |
| *** ralonsoh_ has joined #openstack-meeting | 10:00 | |
| *** ralonsoh has quit IRC | 10:01 | |
| *** yasufum has quit IRC | 10:07 | |
| *** yasufum has joined #openstack-meeting | 10:09 | |
| *** macz_ has joined #openstack-meeting | 10:33 | |
| *** ralonsoh_ is now known as ralonsoh | 10:33 | |
| *** bbowen has quit IRC | 10:34 | |
| *** bbowen has joined #openstack-meeting | 10:35 | |
| *** macz_ has quit IRC | 10:38 | |
| *** ociuhandu has joined #openstack-meeting | 10:40 | |
| *** ociuhandu has quit IRC | 10:54 | |
| *** zbr has quit IRC | 10:54 | |
| *** zbr has joined #openstack-meeting | 10:56 | |
| *** rcernin has joined #openstack-meeting | 10:57 | |
| *** yasufum has quit IRC | 11:09 | |
| *** larainema has quit IRC | 11:44 | |
| *** rfolco has joined #openstack-meeting | 11:54 | |
| *** zbr has quit IRC | 11:58 | |
| *** zbr has joined #openstack-meeting | 12:00 | |
| *** ociuhandu has joined #openstack-meeting | 12:02 | |
| *** ociuhandu has quit IRC | 12:03 | |
| *** ociuhandu has joined #openstack-meeting | 12:03 | |
| *** zbr has quit IRC | 12:10 | |
| *** zbr has joined #openstack-meeting | 12:11 | |
| *** larainema has joined #openstack-meeting | 12:12 | |
| *** rcernin has quit IRC | 12:13 | |
| *** zbr has quit IRC | 12:18 | |
| *** zbr has joined #openstack-meeting | 12:20 | |
| *** ociuhandu has quit IRC | 12:23 | |
| *** ociuhandu has joined #openstack-meeting | 12:31 | |
| *** rfolco has quit IRC | 12:38 | |
| *** rfolco has joined #openstack-meeting | 12:42 | |
| *** raildo has joined #openstack-meeting | 12:42 | |
| *** baojg has quit IRC | 12:46 | |
| *** baojg has joined #openstack-meeting | 12:47 | |
| *** ociuhandu has quit IRC | 12:55 | |
| *** ricolin has joined #openstack-meeting | 12:56 | |
| *** zbr has quit IRC | 13:01 | |
| *** zbr has joined #openstack-meeting | 13:04 | |
| *** ociuhandu has joined #openstack-meeting | 13:05 | |
| *** priteau has joined #openstack-meeting | 13:10 | |
| *** ociuhandu has quit IRC | 13:15 | |
| *** zbr has quit IRC | 13:21 | |
| *** zbr has joined #openstack-meeting | 13:24 | |
| *** hemna has quit IRC | 13:28 | |
| *** slaweq has quit IRC | 13:29 | |
| *** zbr has quit IRC | 13:30 | |
| *** hemna has joined #openstack-meeting | 13:31 | |
| *** zbr has joined #openstack-meeting | 13:33 | |
| *** slaweq has joined #openstack-meeting | 13:33 | |
| *** _erlon_ has joined #openstack-meeting | 13:50 | |
| *** zigo has joined #openstack-meeting | 13:52 | |
| *** ociuhandu has joined #openstack-meeting | 13:52 | |
| *** rosmaita has joined #openstack-meeting | 13:55 | |
| jokke | #startmeeting glance | 14:01 |
|---|---|---|
| openstack | Meeting started Thu Dec 10 14:01:17 2020 UTC and is due to finish in 60 minutes. The chair is jokke. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:01 |
| *** openstack changes topic to " (Meeting topic: glance)" | 14:01 | |
| openstack | The meeting name has been set to 'glance' | 14:01 |
| jokke | #topic roll call | 14:01 |
| *** openstack changes topic to "roll call (Meeting topic: glance)" | 14:01 | |
| jokke | Abhishek just lost power so will be minute or two when he tries to get on from mobile | 14:01 |
| rosmaita | o/ | 14:02 |
| jokke | o/ | 14:02 |
| rosmaita | ok, i was wondering | 14:02 |
| abhishekk | o/ from mobile | 14:03 |
| Steap | o/ | 14:03 |
| jokke | #link https://etherpad.opendev.org/p/glance-team-meeting-agenda quite a few things on the agenda | 14:03 |
| jokke | wb abhishekk | 14:03 |
| jokke | #chair abhishekk | 14:03 |
| openstack | Current chairs: abhishekk jokke | 14:03 |
| abhishekk | will be difficult for me to switch over agenda, so jokke could you please continue chairing? | 14:04 |
| jokke | sure | 14:04 |
| abhishekk | thank you | 14:04 |
| jokke | #topic release/periodic job updates | 14:04 |
| *** openstack changes topic to "release/periodic job updates (Meeting topic: glance)" | 14:04 | |
| abhishekk | just passed milestone 1 | 14:05 |
| jokke | so we seem to gave some serious gating issues still. Milestone 1 has not been tagged as of now | 14:05 |
| *** zbr has quit IRC | 14:05 | |
| abhishekk | yes | 14:05 |
| abhishekk | those jobs are failing for othercouple of projects as well | 14:06 |
| rosmaita | is it lower-constraints? | 14:06 |
| abhishekk | yes | 14:06 |
| abhishekk | and same error for docs job | 14:06 |
| *** ociuhandu has quit IRC | 14:06 | |
| rosmaita | i had to update requirements and l-c for cinder, it's the new pip resolver | 14:06 |
| abhishekk | then some tempest jobs are failing with unknown error and no logs were generated | 14:07 |
| rosmaita | https://review.opendev.org/c/openstack/cinder/+/766085 | 14:07 |
| rosmaita | a bit of a PITA | 14:07 |
| jokke | ok, I will look the cinder patch after the meeting and see if I can find the help for us from there | 14:07 |
| abhishekk | jokke, rosmaita ++ | 14:07 |
| rosmaita | jokke: i did a pip freeze on a successful local unit test run, and used those versions | 14:08 |
| rosmaita | but i don't remember why we even have a lower constraints job any more | 14:08 |
| *** zbr has joined #openstack-meeting | 14:08 | |
| abhishekk | also we need to get Steap's patch once these issues resolved | 14:08 |
| jokke | rosmaita: ah, so it's just dependency versions instead of something about formatting of them files | 14:08 |
| rosmaita | yeah, pretty sure | 14:09 |
| *** ociuhandu has joined #openstack-meeting | 14:09 | |
| jokke | rosmaita: I remember one upon a time we had centralized dependency management where these things had to be done only on global requirements and bot would propose them down, but someone thought that rather than having unified requirements it's better to let everyone just swing it project by project | 14:10 |
| rosmaita | :) | 14:10 |
| abhishekk | i think we faced this issue earlier as well | 14:11 |
| jokke | yup | 14:11 |
| jokke | it's every few months | 14:11 |
| abhishekk | hmm | 14:12 |
| jokke | but we can move forward I'll ping ye guys if I can't figure it out myself looking what had to be taken in for cinder and with local runs | 14:12 |
| rosmaita | ok, i will be around today (on PTO tomorrow) | 14:12 |
| jokke | rosmaita: great, thanks | 14:13 |
| abhishekk | ping me on telegram if I didn't returned back online due to power failure | 14:13 |
| jokke | #topic milestone 2 | 14:13 |
| *** openstack changes topic to "milestone 2 (Meeting topic: glance)" | 14:13 | |
| jokke | 5 weeks away | 14:13 |
| jokke | abhishekk had some priorities laid down in the agenda | 14:13 |
| *** ociuhandu has quit IRC | 14:13 | |
| abhishekk | yes, and we have couple of specs + RBAC stuff to address | 14:14 |
| jokke | Mainly looking into the proxying those calls for Image Import and RBAC | 14:14 |
| abhishekk | ++ | 14:14 |
| abhishekk | others are trivial and can be implemented quickly | 14:15 |
| *** ociuhandu has joined #openstack-meeting | 14:15 | |
| jokke | I will look into addressing any comments on the image import proxy spec and cluster awareness spec tomorrow if I got the gate unblocked by that | 14:16 |
| rosmaita | i left comments on all the specs listed in the agenda | 14:16 |
| abhishekk | rosmaita, ack, thank you | 14:16 |
| rosmaita | was curious what others thought about the chunk download support for RBD | 14:16 |
| jokke | rosmaita: great, thanks! | 14:16 |
| rosmaita | jokke: don't thank me, made more work for you | 14:16 |
| abhishekk | :P | 14:17 |
| abhishekk | So next topic is review priorities where I listed some specs to be reviewed | 14:18 |
| jokke | so I'm failing to see the usecase for that chunk download | 14:18 |
| jokke | and if we do it, we really should do it for all stores, not just rbd | 14:18 |
| jokke | oh sorry | 14:19 |
| abhishekk | agree | 14:19 |
| rosmaita | well, we do support the range header | 14:19 |
| abhishekk | agree for use case | 14:19 |
| jokke | #topic important spec reviews | 14:19 |
| *** TrevorV has joined #openstack-meeting | 14:19 | |
| *** openstack changes topic to "important spec reviews (Meeting topic: glance)" | 14:19 | |
| rosmaita | i remember Darini fixing a bug about that back in the osic days | 14:19 |
| *** ociuhandu has quit IRC | 14:19 | |
| abhishekk | is it documented somewhere? | 14:19 |
| rosmaita | anyway, i left a comment there that i'd like to hear more about how this will be tested | 14:19 |
| abhishekk | about range header? | 14:20 |
| rosmaita | i'll look for a reference | 14:20 |
| jokke | rosmaita: ok, so clearly there is some holes on it and it's not tested ;) | 14:20 |
| jokke | One of those again | 14:20 |
| jokke | on top of those there's the discovery api for tasks and sqlalchemy-migrate deprecation on the list. Any marks on them before we move on? | 14:22 |
| abhishekk | for task thing we will continue discussion on specs | 14:23 |
| rosmaita | sqlalchemy-migrate is fine | 14:23 |
| rosmaita | i'm not sold on using the discovery endpoint for tasks, though | 14:24 |
| rosmaita | left a comment on the spec | 14:24 |
| rosmaita | abhishekk: i added the commit hashes for range header support to the agenda | 14:24 |
| abhishekk | rosmaita, ack, will have a look | 14:25 |
| abhishekk | also I replied to your comment on tasks specs | 14:25 |
| jokke | rosmaita: ok, I see your point. Maybe we need to have fresh new endpoint for probing the tasks | 14:25 |
| abhishekk | I took shortcut :D | 14:26 |
| rosmaita | or have multiple api-level policies on the tasks API | 14:26 |
| jokke | the tasks api is just usage nightmare and we deprecated it for removal ages ago for good reason. I'd be very much against just opening it back up as it is | 14:26 |
| rosmaita | that tasks-api-access thing was a last minute hack | 14:26 |
| jokke | yeah | 14:27 |
| rosmaita | well, you could maybe do something like v2/messages/{id} | 14:27 |
| rosmaita | and under the hood, grab the task and reformat it for display | 14:27 |
| abhishekk | ack, sounds good | 14:27 |
| *** psachin has quit IRC | 14:28 | |
| *** ociuhandu has joined #openstack-meeting | 14:28 | |
| abhishekk | will update the specs accordinglyu | 14:28 |
| jokke | ok, lets keep the discussion going on the spec and move on | 14:28 |
| jokke | oh, od left | 14:28 |
| jokke | #open discussion | 14:28 |
| jokke | #topic open discussion | 14:29 |
| *** openstack changes topic to "open discussion (Meeting topic: glance)" | 14:29 | |
| jokke | rosmaita: looks like you added the chunk download refs on the agenda, thanks | 14:29 |
| rosmaita | fungi helped me figure out how to fix the redirects | 14:29 |
| rosmaita | https://review.opendev.org/c/openstack/glance-specs/+/766260 | 14:29 |
| rosmaita | for glance-specs | 14:29 |
| abhishekk | great | 14:29 |
| jokke | \\o \o/ o// o/7 | 14:29 |
| rosmaita | i didn't add any new ones, this just fixes the current ones (up to stein) | 14:30 |
| jokke | rosmaita++ fungi++ that's great news, thanks! | 14:30 |
| rosmaita | but i don't think there's any way to test it other than to merge it and see what happens | 14:30 |
| abhishekk | will have a look and work for other redirects | 14:30 |
| rosmaita | it worked for cinder, so that's some evidence | 14:30 |
| abhishekk | cool | 14:30 |
| fungi | well, it's an apache behavior, so the way to test it is to serve content from apache | 14:30 |
| abhishekk | ack | 14:31 |
| fungi | the apache configuration we use is public, if anyone wants it | 14:31 |
| abhishekk | thank you fungi | 14:31 |
| rosmaita | try this out: https://specs.openstack.org/openstack/cinder-specs/specs/ussuri/image-encryption.html | 14:31 |
| abhishekk | will ping you if required | 14:31 |
| abhishekk | rosmaita, thank you, will try once back online | 14:32 |
| rosmaita | :) | 14:32 |
| abhishekk | great, I don't have anything else to discuss at the moment | 14:33 |
| jokke | I'm still trying to wrap my head around the rbac stuff and it's impact | 14:33 |
| Steap | regarding RBAC | 14:34 |
| Steap | Lance mentioned that migrating policies would be a "manual" process | 14:34 |
| Steap | that worries me a tiny bit :) | 14:34 |
| abhishekk | :D | 14:35 |
| jokke | we just need to be super vigilant and make sure we do not expose anything unintended | 14:36 |
| jokke | Which is my biggest worry on the amount of pressure this wor has to rush it through | 14:36 |
| jokke | s/wor/work/ | 14:36 |
| abhishekk | testing, more testing and more and more testing is what we need to do in less time | 14:37 |
| abhishekk | we should sign a MOU :D | 14:37 |
| jokke | MOU? | 14:38 |
| *** tobberydberg has quit IRC | 14:38 | |
| rosmaita | memorandum of understanding? | 14:39 |
| abhishekk | just kidding, memo for understanding the regression | 14:39 |
| jokke | ah | 14:39 |
| jokke | ;) | 14:39 |
| *** tobberydberg has joined #openstack-meeting | 14:39 | |
| jokke | well if anyone has understanding of that and wants to write it down, I'd be very happy to read and comment :P | 14:40 |
| abhishekk | haha, rosmaita is the perfect person for this | 14:40 |
| rosmaita | i'm driving through a tunnel, couldn't catch that last comment | 14:41 |
| jokke | Yeah I think rosmaita is pretty much the only one left who has even chance of having full understanding tf is going on there ;) | 14:41 |
| jokke | rosmaita: I just said that if anyone has understanding and wants to write it down, I'd be more than happy to read and comment | 14:41 |
| rosmaita | still can't hear you | 14:42 |
| jokke | :P | 14:42 |
| rosmaita | :) | 14:42 |
| abhishekk | :P | 14:42 |
| jokke | yeah I guess most of the people whe were around when that masterpiece was written are long gone. At least I've been exposed only in small bits to it | 14:43 |
| abhishekk | :D | 14:44 |
| jokke | but I've nothing else. We can take the 15 unless someone else has something still to bring up | 14:44 |
| abhishekk | sounds good | 14:44 |
| rosmaita | nothing from me | 14:45 |
| jokke | ok, thanks all! | 14:45 |
| abhishekk | thank you all | 14:45 |
| rosmaita | bye! | 14:45 |
| jokke | #endmeeting | 14:45 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 14:45 | |
| openstack | Meeting ended Thu Dec 10 14:45:19 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:45 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-12-10-14.01.html | 14:45 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-12-10-14.01.txt | 14:45 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-12-10-14.01.log.html | 14:45 |
| *** ociuhandu has quit IRC | 14:57 | |
| gagehugo | #startmeeting security | 15:00 |
| openstack | Meeting started Thu Dec 10 15:00:16 2020 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| *** openstack changes topic to " (Meeting topic: security)" | 15:00 | |
| openstack | The meeting name has been set to 'security' | 15:00 |
| gagehugo | #link https://etherpad.opendev.org/p/security-agenda agenda | 15:00 |
| fungi | ahoy | 15:01 |
| *** andrebeltrami has joined #openstack-meeting | 15:02 | |
| *** ociuhandu has joined #openstack-meeting | 15:05 | |
| *** e0ne has quit IRC | 15:07 | |
| *** e0ne has joined #openstack-meeting | 15:08 | |
| *** ociuhandu has quit IRC | 15:10 | |
| *** ociuhandu has joined #openstack-meeting | 15:11 | |
| gagehugo | sorry got pulled away | 15:15 |
| gagehugo | #topic OSSA-2020-008 released | 15:15 |
| *** openstack changes topic to "OSSA-2020-008 released (Meeting topic: security)" | 15:15 | |
| *** ociuhandu has quit IRC | 15:15 | |
| fungi | no worries, we've got the whole hour | 15:15 |
| gagehugo | #link https://security.openstack.org/ossa/OSSA-2020-008.html | 15:16 |
| gagehugo | We released OSSA-2020-008 earlier this week | 15:18 |
| gagehugo | If anyone is interested, see the link above ^ | 15:20 |
| fungi | good job! | 15:20 |
| fungi | thanks for taking care of that one | 15:20 |
| gagehugo | thanks for the help! | 15:20 |
| *** ociuhandu has joined #openstack-meeting | 15:20 | |
| gagehugo | #topic no meetings rest of the year | 15:20 |
| *** openstack changes topic to "no meetings rest of the year (Meeting topic: security)" | 15:21 | |
| gagehugo | This will be the last meeting for 2020, we will meet back again in Jan | 15:21 |
| gagehugo | Jan 07th specifically | 15:21 |
| fungi | sounds good to me | 15:21 |
| fungi | i can always be found in #openstack-security or by e-mail if there's an urgent issue | 15:22 |
| gagehugo | yeah I'm online usually as well | 15:25 |
| gagehugo | #topic open discussion | 15:25 |
| *** openstack changes topic to "open discussion (Meeting topic: security)" | 15:25 | |
| gagehugo | fungi: anything else for 2020? | 15:25 |
| *** dklyle has joined #openstack-meeting | 15:27 | |
| fungi | i don't think so | 15:29 |
| fungi | have a great rest of the year! | 15:29 |
| gagehugo | you too! | 15:34 |
| gagehugo | thanks fungi | 15:34 |
| gagehugo | #endmeeting | 15:35 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:35 | |
| openstack | Meeting ended Thu Dec 10 15:35:00 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:35 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/security/2020/security.2020-12-10-15.00.html | 15:35 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/security/2020/security.2020-12-10-15.00.txt | 15:35 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/security/2020/security.2020-12-10-15.00.log.html | 15:35 |
| fungi | thanks gagehugo! | 15:39 |
| *** rosmaita has left #openstack-meeting | 15:44 | |
| *** tdasilva_ has joined #openstack-meeting | 15:54 | |
| *** tdasilva has quit IRC | 15:55 | |
| *** thiago__ has joined #openstack-meeting | 15:56 | |
| *** lpetrut has quit IRC | 15:57 | |
| *** tdasilva_ has quit IRC | 15:59 | |
| *** tdasilva_ has joined #openstack-meeting | 16:00 | |
| *** macz_ has joined #openstack-meeting | 16:01 | |
| *** thiago__ has quit IRC | 16:03 | |
| *** armax has joined #openstack-meeting | 16:04 | |
| *** zbr has quit IRC | 16:04 | |
| *** zbr has joined #openstack-meeting | 16:07 | |
| *** zbr has quit IRC | 16:07 | |
| *** zbr has joined #openstack-meeting | 16:08 | |
| *** zbr has quit IRC | 16:24 | |
| *** zbr has joined #openstack-meeting | 16:27 | |
| *** e0ne has quit IRC | 16:28 | |
| *** zbr has quit IRC | 16:29 | |
| *** zbr has joined #openstack-meeting | 16:30 | |
| *** ociuhandu has quit IRC | 16:31 | |
| *** ociuhandu has joined #openstack-meeting | 16:36 | |
| *** zbr has quit IRC | 16:46 | |
| *** ociuhandu has quit IRC | 16:48 | |
| *** armstrong has joined #openstack-meeting | 16:52 | |
| *** ociuhandu has joined #openstack-meeting | 16:53 | |
| *** zbr has joined #openstack-meeting | 16:55 | |
| *** ociuhandu_ has joined #openstack-meeting | 16:59 | |
| *** ociuhandu has quit IRC | 17:03 | |
| *** Trevor_V has joined #openstack-meeting | 17:05 | |
| *** TrevorV has quit IRC | 17:06 | |
| *** zbr has quit IRC | 17:21 | |
| *** zbr has joined #openstack-meeting | 17:24 | |
| *** zbr has quit IRC | 17:35 | |
| *** zbr has joined #openstack-meeting | 17:37 | |
| *** ociuhandu_ has quit IRC | 17:42 | |
| *** ociuhandu has joined #openstack-meeting | 17:54 | |
| *** zbr has quit IRC | 17:55 | |
| *** raildo has quit IRC | 17:57 | |
| *** zbr has joined #openstack-meeting | 17:57 | |
| *** raildo has joined #openstack-meeting | 17:58 | |
| *** zbr5 has joined #openstack-meeting | 17:58 | |
| *** zbr has quit IRC | 17:58 | |
| *** ociuhandu has quit IRC | 17:58 | |
| *** zbr has joined #openstack-meeting | 17:59 | |
| gmann | raildo: meeting time for policy popup | 18:02 |
| gmann | #startmeeting policy_popup | 18:02 |
| openstack | Meeting started Thu Dec 10 18:02:21 2020 UTC and is due to finish in 60 minutes. The chair is gmann. Information about MeetBot at http://wiki.debian.org/MeetBot. | 18:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 18:02 |
| *** openstack changes topic to " (Meeting topic: policy_popup)" | 18:02 | |
| openstack | The meeting name has been set to 'policy_popup' | 18:02 |
| lbragstad | o/ | 18:02 |
| gmann | lbragstad: hi | 18:03 |
| gmann | let's wait for couple of min | 18:03 |
| lbragstad | sounds good | 18:04 |
| *** rpittau is now known as rpittau|afk | 18:04 | |
| gmann | lbragstad: seems like two of us, anyways let's start. | 18:06 |
| gmann | today agenda #link https://etherpad.opendev.org/p/default-policy-meeting-agenda | 18:06 |
| gmann | #topic General doubts about Default policy | 18:06 |
| *** openstack changes topic to "General doubts about Default policy (Meeting topic: policy_popup)" | 18:06 | |
| gmann | #link https://bugs.launchpad.net/oslo.policy/+bug/1886857 | 18:07 |
| openstack | Launchpad bug 1886857 in oslo.policy "Improve documentation of what data is used in checks" [High,In progress] - Assigned to Raildo Mascena de Sousa Filho (raildo) | 18:07 |
| gmann | this is pending on raildo side to fix the review comments in #link https://review.opendev.org/c/openstack/oslo.policy/+/743318 | 18:07 |
| gmann | Migrate Default Policy Format from JSON to YAML | 18:08 |
| gmann | this is ongoing work for this goal #link https://review.opendev.org/q/topic:%22policy-json-to-yaml%22+(status:open%20OR%20status:merged) | 18:09 |
| gmann | I am waiting for oslo.upgradechecks update and then release to use it on service side | 18:09 |
| lbragstad | nice | 18:09 |
| gmann | basically this one- #link https://review.opendev.org/c/openstack/oslo.upgradecheck/+/765631 | 18:09 |
| gmann | lbragstad: if you can have a look | 18:09 |
| lbragstad | sure | 18:10 |
| gmann | thanks | 18:10 |
| gmann | Need to verify where glance stands as per communit goal (abhishekk) | 18:11 |
| lbragstad | gmann which community goal? | 18:11 |
| lbragstad | migrating the policy format? | 18:11 |
| gmann | this is not clear to me, abhishekk added this item nit sure if he is online now | 18:11 |
| lbragstad | he was online a couple of hours ago - but i do know he's about 15 hours ahead of us? | 18:11 |
| gmann | not sure if it is policy format or new RBAC one | 18:11 |
| gmann | 11.30 ahead, in India time | 18:12 |
| lbragstad | ok - so i lied about 15 | 18:12 |
| lbragstad | definitely not 15 hours :) | 18:12 |
| gmann | :) | 18:12 |
| gmann | I will try to catch him on glance channel | 18:12 |
| lbragstad | ok | 18:12 |
| gmann | #topic Review Requests | 18:13 |
| *** openstack changes topic to "Review Requests (Meeting topic: policy_popup)" | 18:13 | |
| gmann | I added your patches in this #link https://review.opendev.org/q/topic:%22secure-rbac%22+(status:open%20OR%20status:merged) | 18:13 |
| lbragstad | oh - nice | 18:13 |
| lbragstad | thanks | 18:13 |
| gmann | i think we can update the topic name also in wiki, it was different | 18:13 |
| lbragstad | sorry about that | 18:13 |
| gmann | done | 18:14 |
| gmann | #link https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popup_Team#Communication | 18:14 |
| gmann | lbragstad: your topic name is more closed to work :) | 18:14 |
| gmann | any luck on projects side start reviewing or adding tests etc | 18:15 |
| lbragstad | getting there | 18:15 |
| lbragstad | i know a few projects have looked at the patches i've proposed | 18:15 |
| lbragstad | s/i've/we've/ | 18:15 |
| lbragstad | but - the patches really just group resources and APIs into buckets | 18:15 |
| lbragstad | i think most projects have at least something in review | 18:16 |
| lbragstad | i'm starting to work back through each project and pick out a few patches to implement testing | 18:16 |
| lbragstad | my goal is to have two or three resources/APIs for each series testing the new defaults | 18:16 |
| gmann | great, i think this is nice start. I saw your email also but I did not reply yet as I was busy in back to back meeting (usual Thursday :)) | 18:17 |
| lbragstad | which will include the testing infrastructure/plumbing and the actual test cases | 18:17 |
| lbragstad | ++ | 18:17 |
| lbragstad | so - this week and next week i'm focusing on placement and cinder | 18:17 |
| gmann | I will also help in that once I get policy format work done which I am targeting before new year | 18:17 |
| gmann | +1 | 18:17 |
| lbragstad | awesome - yeah, i'll take as much help as possible | 18:17 |
| lbragstad | i'm picking placement because it should be a relatively easy one to do | 18:18 |
| lbragstad | and cinder because it's probably the next largest API to work on | 18:18 |
| gmann | yeah | 18:18 |
| lbragstad | timing wize | 18:18 |
| lbragstad | wise* | 18:18 |
| lbragstad | i've been working on the audits since the PTG (so about a month)? | 18:19 |
| lbragstad | and i expect testing implementation to take much longer than that | 18:19 |
| gmann | yeah, as per my experience in nova, 70% of the time was in righting the tests as we did not have good coverage for policy testig | 18:20 |
| lbragstad | but, once the tests are up, we should be good for people to consider reviewing the patches and merging them | 18:20 |
| lbragstad | right - exactly | 18:20 |
| gmann | true | 18:20 |
| lbragstad | that was my experience in keystone, too | 18:20 |
| gmann | it will give them more confidence on the changes | 18:20 |
| gmann | Also on tempest testing support side I am still not able to debug why nova os-hypervisor test did not work with new scope token #link https://review.opendev.org/c/openstack/devstack/+/616415 | 18:21 |
| gmann | I will try to dig into this next week or so | 18:21 |
| lbragstad | ok | 18:21 |
| gmann | anything else on review side ? | 18:22 |
| lbragstad | i don't have anything | 18:23 |
| gmann | #topic Open Floor | 18:24 |
| *** openstack changes topic to "Open Floor (Meeting topic: policy_popup)" | 18:24 | |
| gmann | nothing in open discussion too. | 18:24 |
| lbragstad | sfinucan brought up a good question here https://review.opendev.org/c/openstack/placement/+/760235/2/placement/policies/base.py | 18:24 |
| lbragstad | i've been proposing the common personas as constants on some policy file | 18:24 |
| lbragstad | in each project | 18:24 |
| lbragstad | and he asked why they aren't registered rule defaults | 18:24 |
| gmann | ah good point. | 18:25 |
| lbragstad | i thought i'd ask here | 18:25 |
| lbragstad | i think i'm indifferent | 18:25 |
| raildo | hey, sorry to be late | 18:25 |
| gmann | that will give us easy to remove 'system:all' thing when enforce_scope is true by default | 18:26 |
| lbragstad | +1 | 18:26 |
| lbragstad | that's a good point | 18:26 |
| lbragstad | i also thought it would be nice to have them documented in the default policy documentation | 18:26 |
| gmann | raildo: no worries. | 18:26 |
| gmann | lbragstad: +1, I thought of moving these common rules and stanza in oslo policy side and then from there projects can use it consistently ? | 18:27 |
| lbragstad | that's what i started thinking of next | 18:27 |
| lbragstad | we'd need to a new version of oslo.policy | 18:27 |
| lbragstad | and i'm wondering if that's a good idea or not | 18:27 |
| gmann | raildo: we mainly discussed on these https://review.opendev.org/q/topic:%22secure-rbac%22+(status:open%20OR%20status:merged) | 18:27 |
| lbragstad | oslo.policy is pretty generic - and this would be a openstack-specific personas | 18:28 |
| gmann | lbragstad: good point. but with policy format work everyone needs to move to 3.6.0 latest version | 18:28 |
| gmann | lbragstad: how about with openstack_common_personas.py | 18:28 |
| lbragstad | yeah | 18:29 |
| lbragstad | i mean - policy.py includes keystone scopes | 18:29 |
| * lbragstad shrugs | 18:29 | |
| lbragstad | i guess i can see it both ways | 18:29 |
| raildo | gmann, lbragstad yeah, I started to reviewing lance's patches, seems to be my christmas gift haha | 18:30 |
| raildo | lbragstad, thank you for all this hard work dude! | 18:30 |
| gmann | +1. | 18:30 |
| lbragstad | s/christmas gift/lump of coal/ | 18:30 |
| lbragstad | ? | 18:30 |
| raildo | lol | 18:30 |
| gmann | lbragstad: i can push the common personas thing in olso.policy if fine. after my lunch | 18:31 |
| lbragstad | gmann sure - that sounds good | 18:31 |
| lbragstad | to recap | 18:31 |
| gmann | we should give more gifts to raildo :) | 18:31 |
| * raildo has enough gifts for now | 18:31 | |
| lbragstad | the main benefits would be 1.) it's a common place for common persona definitions 2.) they're included in default policy documentation rendered in each project | 18:32 |
| gmann | yeah | 18:33 |
| lbragstad | the only downside i can think of is that it's a another layer of indirection to figure out what rule:system_admin means | 18:33 |
| gmann | I think name itself if self explainer but we can add good documentation for that so that generated policy sample etc have it clear | 18:35 |
| raildo | lbragstad, well, I believe that if we properly document this common persona on oslo.policy and point for the team's docs for it would be enough | 18:35 |
| lbragstad | yeah - i think that's fair | 18:37 |
| lbragstad | having a common definition is a good reason | 18:37 |
| * lbragstad has to update a lot of patches | 18:38 | |
| gmann | ah that is true. may be during tests addition time we can update | 18:38 |
| lbragstad | right - they have to be updated eventually | 18:39 |
| lbragstad | so - we'll have to bump the oslo.policy requirement to 3.6.1 then? | 18:39 |
| gmann | yeah | 18:39 |
| lbragstad | ok - makes sense | 18:40 |
| gmann | I think i forgot to record AI, let's do | 18:40 |
| gmann | #action gmann to check with abhishekk on glance point in meeting agenda | 18:41 |
| gmann | raildo: to update https://review.opendev.org/#/c/743318/ | 18:41 |
| gmann | #action raildo to update https://review.opendev.org/#/c/743318/ | 18:41 |
| raildo | ack, I'll have it asap | 18:41 |
| raildo | it updated* | 18:42 |
| gmann | #action gmann to push common persona on oslo policy and release 3.6.1 and lbragstad to review that | 18:42 |
| gmann | anything else I missed ? | 18:42 |
| lbragstad | i need to review https://review.opendev.org/c/openstack/oslo.policy/+/743318 too | 18:42 |
| gmann | ah right | 18:43 |
| gmann | #action All will review and help on https://review.opendev.org/q/topic:%22secure-rbac%22+(status:open%20OR%20status:merged) | 18:43 |
| gmann | anything else for today ? | 18:44 |
| lbragstad | i plan to have placement done by next week | 18:44 |
| lbragstad | rosmatia is going to meet with me early next week to go through the best approach for protection testing in cinder | 18:44 |
| gmann | #action lbragstad to finish placement as first | 18:45 |
| gmann | great | 18:45 |
| lbragstad | next thursday is my last day of the year | 18:45 |
| lbragstad | so - i hope to have something in review for cinder by then | 18:45 |
| lbragstad | as far as the testing strategy goes | 18:45 |
| gmann | ok | 18:45 |
| gmann | so should we cancel the next meeting which is on 24th Dec ? | 18:45 |
| lbragstad | i probably won't make it on that day | 18:46 |
| lbragstad | but i can read scroll back | 18:46 |
| gmann | raildo: how ab out you? | 18:46 |
| raildo | gmann, I'll not be able to make the 24th dec meeting | 18:47 |
| gmann | ok, let's cancel then. I will update on ML too | 18:47 |
| gmann | let's close for today | 18:47 |
| gmann | thanks lbragstad raildo for joining | 18:47 |
| lbragstad | thanks gmann | 18:48 |
| raildo | gmann, lbragstad thanks! | 18:48 |
| gmann | #endmeeting | 18:48 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 18:48 | |
| raildo | have a great day | 18:48 |
| openstack | Meeting ended Thu Dec 10 18:48:16 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 18:48 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-12-10-18.02.html | 18:48 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-12-10-18.02.txt | 18:48 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-12-10-18.02.log.html | 18:48 |
| *** armstrong has quit IRC | 19:42 | |
| *** rcernin has joined #openstack-meeting | 20:21 | |
| *** tdasilva_ has quit IRC | 20:37 | |
| *** tdasilva_ has joined #openstack-meeting | 20:39 | |
| *** falencastro has joined #openstack-meeting | 20:55 | |
| *** slaweq has quit IRC | 21:16 | |
| *** Trevor_V has quit IRC | 21:16 | |
| *** rcernin has quit IRC | 21:31 | |
| *** rfolco has quit IRC | 21:34 | |
| *** rcernin has joined #openstack-meeting | 21:34 | |
| *** eharney has quit IRC | 21:38 | |
| *** ociuhandu has joined #openstack-meeting | 21:40 | |
| *** rcernin has quit IRC | 21:51 | |
| *** rcernin has joined #openstack-meeting | 21:53 | |
| *** eharney has joined #openstack-meeting | 22:02 | |
| *** andrebeltrami has quit IRC | 22:11 | |
| *** mlavalle has joined #openstack-meeting | 22:13 | |
| *** bbowen has quit IRC | 22:15 | |
| *** thiago__ has joined #openstack-meeting | 22:30 | |
| *** tdasilva_ has quit IRC | 22:32 | |
| *** thiago__ has quit IRC | 22:45 | |
| *** tdasilva_ has joined #openstack-meeting | 22:45 | |
| *** yasufum has joined #openstack-meeting | 22:49 | |
| *** ociuhandu has quit IRC | 22:59 | |
| *** smcginnis has quit IRC | 23:16 | |
| *** baojg has quit IRC | 23:22 | |
| *** baojg has joined #openstack-meeting | 23:25 | |
| *** bbowen has joined #openstack-meeting | 23:37 | |
| *** rfolco has joined #openstack-meeting | 23:41 | |
| *** smcginnis has joined #openstack-meeting | 23:42 | |
| *** smcginnis has quit IRC | 23:49 | |
| *** yasufum has quit IRC | 23:50 | |
| *** baojg has quit IRC | 23:52 | |
| *** baojg has joined #openstack-meeting | 23:53 | |
| *** tosky has quit IRC | 23:53 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!