Thursday, 2021-02-11

*** dsariel has quit IRC00:15
*** dsariel has joined #openstack-meeting00:15
*** tosky has quit IRC00:17
*** andrebeltrami has quit IRC00:20
*** macz_ has quit IRC00:42
*** jmasud has joined #openstack-meeting01:04
*** mlavalle has quit IRC01:10
*** dklyle has quit IRC01:18
*** dklyle has joined #openstack-meeting01:18
*** manpreet has joined #openstack-meeting01:27
*** yamamoto has joined #openstack-meeting01:46
*** yamamoto has quit IRC01:50
*** ianychoi has joined #openstack-meeting02:09
*** yamamoto has joined #openstack-meeting02:27
*** macz_ has joined #openstack-meeting02:29
*** macz_ has quit IRC02:33
*** yamamoto has quit IRC02:44
*** jmasud has quit IRC02:47
*** jmasud has joined #openstack-meeting02:49
*** dklyle has quit IRC02:51
*** jmasud has quit IRC03:00
*** yamamoto has joined #openstack-meeting03:12
*** yamamoto has quit IRC03:16
*** gyee has quit IRC03:33
*** psachin has joined #openstack-meeting03:43
*** dsariel has quit IRC04:02
*** jmasud has joined #openstack-meeting04:07
*** jamesmcarthur has quit IRC04:12
*** jamesmcarthur has joined #openstack-meeting04:13
*** jamesmcarthur has quit IRC04:18
*** yamamoto has joined #openstack-meeting04:22
*** armax has joined #openstack-meeting04:25
*** armax has quit IRC04:26
*** jamesmcarthur has joined #openstack-meeting04:37
*** yamamoto has quit IRC04:52
*** yamamoto has joined #openstack-meeting05:05
*** yamamoto has quit IRC05:06
*** udesale has joined #openstack-meeting05:20
*** jamesmcarthur has quit IRC05:23
*** jamesmcarthur has joined #openstack-meeting05:23
*** jamesmcarthur has quit IRC05:28
*** jamesmcarthur has joined #openstack-meeting05:28
*** yamamoto has joined #openstack-meeting05:28
*** yamamoto has quit IRC05:28
*** yamamoto has joined #openstack-meeting05:28
*** yamamoto has quit IRC05:29
*** yamamoto has joined #openstack-meeting05:29
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-meeting05:33
*** ircuser-1 has quit IRC06:04
*** yamamoto has quit IRC06:07
*** yamamoto has joined #openstack-meeting06:08
*** yamamoto has quit IRC06:08
*** jamesmcarthur has quit IRC06:11
*** jamesmcarthur has joined #openstack-meeting06:11
*** yamamoto has joined #openstack-meeting06:14
*** yamamoto has quit IRC06:14
*** yamamoto has joined #openstack-meeting06:15
*** jamesmcarthur has quit IRC06:16
*** yamamoto has quit IRC06:20
*** vishalmanchanda has joined #openstack-meeting06:22
*** yamamoto has joined #openstack-meeting06:26
*** jamesmcarthur has joined #openstack-meeting06:42
*** ralonsoh has joined #openstack-meeting06:49
*** dsariel has joined #openstack-meeting07:01
*** dsariel has quit IRC07:07
*** jamesmcarthur has quit IRC07:29
*** dsariel has joined #openstack-meeting07:34
*** jamesmcarthur has joined #openstack-meeting07:43
*** slaweq has joined #openstack-meeting07:44
*** jamesmcarthur has quit IRC07:52
*** rpittau|afk is now known as rpittau07:53
*** belmoreira has joined #openstack-meeting08:00
*** jamesmcarthur has joined #openstack-meeting08:08
*** belmoreira has quit IRC08:16
*** jmasud has quit IRC08:22
*** jamesmcarthur has quit IRC08:30
*** ianychoi has quit IRC08:33
*** tosky has joined #openstack-meeting08:36
*** jamesmcarthur has joined #openstack-meeting08:44
*** ianychoi has joined #openstack-meeting08:48
*** jamesmcarthur has quit IRC09:03
*** yamamoto has quit IRC09:03
*** jamesmcarthur has joined #openstack-meeting09:20
*** yamamoto has joined #openstack-meeting09:22
*** yamamoto has quit IRC09:27
*** jamesmcarthur has quit IRC09:30
*** ralonsoh has quit IRC09:34
*** ralonsoh has joined #openstack-meeting09:34
*** yamamoto has joined #openstack-meeting09:44
*** macz_ has joined #openstack-meeting10:12
*** macz_ has quit IRC10:17
*** udesale_ has joined #openstack-meeting10:28
*** udesale has quit IRC10:29
*** jamesmcarthur has joined #openstack-meeting11:28
*** macz_ has joined #openstack-meeting11:34
*** jamesmcarthur has quit IRC11:35
*** macz_ has quit IRC11:39
*** ociuhandu has joined #openstack-meeting11:46
*** macz_ has joined #openstack-meeting11:55
*** macz_ has quit IRC12:00
*** andrebeltrami has joined #openstack-meeting12:02
*** ociuhandu has quit IRC12:27
*** ociuhandu has joined #openstack-meeting12:27
*** ociuhandu has quit IRC12:28
*** ociuhandu has joined #openstack-meeting12:28
*** eglynn_ has quit IRC12:35
*** ociuhandu has quit IRC12:41
*** ociuhandu has joined #openstack-meeting12:41
*** ociuhandu has quit IRC12:46
*** yamamoto has quit IRC12:50
*** ociuhandu has joined #openstack-meeting12:50
*** mgagne has quit IRC12:52
*** mgagne has joined #openstack-meeting12:53
*** yamamoto has joined #openstack-meeting13:00
*** yamamoto has quit IRC13:00
*** yamamoto has joined #openstack-meeting13:00
*** yamamoto has quit IRC13:04
*** yamamoto has joined #openstack-meeting13:05
*** yamamoto has quit IRC13:05
*** yamamoto has joined #openstack-meeting13:05
*** yamamoto has quit IRC13:06
*** yamamoto has joined #openstack-meeting13:07
*** yamamoto has quit IRC13:07
*** yamamoto has joined #openstack-meeting13:07
*** yamamoto has quit IRC13:07
*** yamamoto has joined #openstack-meeting13:08
*** yamamoto has quit IRC13:08
*** e0ne has joined #openstack-meeting13:09
*** yamamoto has joined #openstack-meeting13:09
*** yamamoto has quit IRC13:13
*** psachin has quit IRC13:26
*** jamesmcarthur has joined #openstack-meeting13:32
*** jamesmcarthur has quit IRC13:39
*** ociuhandu has quit IRC13:40
*** ociuhandu has joined #openstack-meeting13:41
*** ociuhandu has quit IRC13:52
*** stand has quit IRC13:54
*** ociuhandu has joined #openstack-meeting13:54
*** rosmaita has joined #openstack-meeting13:56
abhishekk#startmeeting glance14:00
openstackMeeting started Thu Feb 11 14:00:05 2021 UTC and is due to finish in 60 minutes.  The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
*** openstack changes topic to " (Meeting topic: glance)"14:00
openstackThe meeting name has been set to 'glance'14:00
abhishekk#topic roll call14:00
*** openstack changes topic to "roll call (Meeting topic: glance)"14:00
abhishekk#link https://etherpad.openstack.org/p/glance-team-meeting-agenda14:00
abhishekko/14:00
jokkeo/14:00
dansmitho/14:00
abhishekklets wait for rosmaita for couple of minutes14:00
rosmaitao/14:00
abhishekkcool lets start14:01
abhishekk#topic release/periodic jobs update14:01
*** openstack changes topic to "release/periodic jobs update (Meeting topic: glance)"14:01
abhishekkFinal release of non-client libraries - 2 weeks14:01
abhishekkpriority patch: https://review.opendev.org/c/openstack/glance_store/+/77470314:01
abhishekkThis one patch is up for review in glance_store14:01
abhishekkThis is type of blocker for some deployment tools to configure multiple cinder backends in glance14:02
abhishekkPlease have a look at it14:02
abhishekkMilestone 3 - 3 weeks14:02
abhishekkWe have series of open patches in glance along with secure RBAC14:02
abhishekkSo need to gear up and start reviewing14:03
abhishekkPeriodic jobs - green again14:03
abhishekkMoving to next topic14:03
abhishekk#topic Distributed image import14:03
*** openstack changes topic to "Distributed image import (Meeting topic: glance)"14:03
abhishekkDan's spec -  https://review.opendev.org/c/openstack/glance-specs/+/763574 (2 +2 and 1 -2)14:04
abhishekkWe still need to come into agreement14:04
*** ociuhandu has quit IRC14:04
abhishekkI am still hoping we can get this done in this cycle, I might also think of granting FFE if required14:04
rosmaitaabhishekk: is that the correct url for the review?14:05
rosmaitamabye this: https://review.opendev.org/c/openstack/glance-specs/+/77409714:05
abhishekkmy bad14:05
abhishekk#link https://review.opendev.org/c/openstack/glance-specs/+/77409714:05
jokkeI think it's time to stop beating the dead horse and focus the little time we have left in the cycle on the stuff we have agreed on and inflight like the rbac14:06
abhishekkjokke, will think over your advice, thank you14:07
rosmaitaexcept that there's already code for this proposal14:07
rosmaitaso it's not speculative as a spec, it's basically working14:07
dansmithbasically working? :)14:07
abhishekkI also need to make sure that we have opted all the options to get this done14:07
rosmaitaok, as far as i can tell, it's really working without causing regressions14:08
rosmaitadansmith: how's that?14:08
dansmithheh, better thanks :)14:08
abhishekkSo I am still little bit positive about this14:08
rosmaita:D14:08
abhishekknext one is14:09
dansmithgiven I extended devstack to have two isolated glance workers,14:09
dansmithwe can fully validate this in an automated test to a high degree of confidence I think14:09
abhishekkyes, this will be very useful14:09
abhishekk#topic Task show API14:10
*** openstack changes topic to "Task show API (Meeting topic: glance)"14:10
abhishekkSpec - https://review.opendev.org/c/openstack/glance-specs/+/763740 (needs reviews, minor changes in specs)14:10
abhishekkI have spec ready to merge14:10
abhishekkalso PoC is there if anyone wants to have a look14:10
abhishekk#link https://review.opendev.org/c/openstack/glance/+/76373914:11
abhishekkWorking on tests and will be complete by Monday14:11
dansmithrosmaita: I think you should be ready to go on this one too pretty much right?14:11
abhishekkjokke, rosmaita, smcginnis kindly review the spec14:11
rosmaitayeah, just need to look at the diff from PS714:11
dansmithyeah, cool14:11
abhishekkCool, moving ahead14:12
abhishekk#topic Secure RBAC14:12
*** openstack changes topic to "Secure RBAC (Meeting topic: glance)"14:12
abhishekkat the moment we are Waiting for new version of oslo.policy - https://review.opendev.org/c/openstack/requirements/+/77429014:12
abhishekklbragstad, have all the patches in place with working protection testing14:13
abhishekkPatches for reviews - https://review.opendev.org/q/project:openstack/glance+topic:secure-rbac14:13
abhishekkFunctional tests against devstack - https://review.opendev.org/c/openstack/glance-tempest-plugin/+/77356814:13
abhishekkThese tests are working in local environment, as I said just waiting for new oslo.policy release14:13
*** vishalmanchanda has quit IRC14:14
abhishekkIf possible kindly review these patches as well14:14
abhishekkany questions about secure RBAC stuff?14:15
jokkeI've been going through those patches few times now14:15
abhishekkcool, any concerns so far14:15
jokkethere's couple of things that needs to be flagged, but I'm missing something as whole here14:16
*** ociuhandu has joined #openstack-meeting14:16
abhishekkIt will be good to record these somewhere either on reviews or testing etherpad14:16
jokkeHow do you turn this on/off? I mean using the policies from the policy file as they are defined at the moment vs. turning on the persona policies introduced by these patches14:17
lbragstadfwiw - there are still some bit in the database that build queries based on the roles associated to the context - which results in different responses for project-admins versus project-members and project-readers14:17
jokkeabhishekk: yeah I will flag those in the relevant patches on the next pass14:17
abhishekkjokke, ack14:17
lbragstadi've added FIXMEs in the glance-tempest-plugin to highlight some of those cases14:18
abhishekkAFAIK at the moment there is no provision for on/off with old vs new policies checkup14:18
abhishekklbragstad, am I right?14:19
jokkebut either I've missed the patch or the mechanism but like said I haven't figured out how do you choose between policies as they are implemnted in Victoria vs. these new persona based policies14:19
lbragstadwell - we have configuration options in oslo.policy that determine how to process the default rules with respect to the deprecated values14:20
lbragstadwhich is invoked from https://review.opendev.org/c/openstack/glance-tempest-plugin/+/773568/14/.zuul.yaml#114:20
lbragstadand that calls this - https://opendev.org/openstack/glance/src/branch/master/devstack/plugin.sh14:20
*** ociuhandu has quit IRC14:20
abhishekkenforce_scope ?14:20
lbragstadhttps://opendev.org/openstack/glance/src/branch/master/devstack/plugin.sh#L15-L1914:21
lbragstadwell - there are two, enforce_scope and enforce_new_defaults (which ignores any deprecated rule values during processing)14:21
lbragstads/processing/enforcement/14:22
abhishekkright14:22
*** ociuhandu has joined #openstack-meeting14:22
lbragstadthe tests i'm writing are forcing glance to use the new personas14:22
abhishekkack14:23
abhishekkI will go through your FIXME comments14:23
abhishekkanything else you want to highlight here, lbragstad14:24
lbragstadnot really - once the FIXMEs are handled, we should be able to consolidate the tests14:24
abhishekkok, thank you14:25
abhishekk@all please try to have look at rbac patches and tests14:26
abhishekkmoving ahead14:26
abhishekk#topic Open discussion14:26
*** openstack changes topic to "Open discussion (Meeting topic: glance)"14:26
abhishekkLast 3 weeks and we have lot to review and work14:26
abhishekkSo please be focused and get things done14:27
abhishekkThat's it from me today14:27
rosmaitaummm ... what did we decide about https://review.opendev.org/c/openstack/glance-specs/+/774097 ?14:27
abhishekkwe still have 30 minutes to discuss anything else you have in your mind14:27
abhishekkI am thinking on that, on a positive note we might get this in before next meeting or apply for FFE14:29
rosmaitawell, i don't know that anyone's attitude toward the proposal will change over the next week, and i'd kind of like to merge it sooner rather than later ... even though it's got great tests and tempest coverage, it *is* software, so the more it runs the better IMO14:31
abhishekkrosmaita, noted14:33
abhishekkanything else?14:34
abhishekkgoing once14:34
abhishekkSteap, you around?14:34
abhishekkPlease push new revision for your patch, https://review.opendev.org/c/openstack/glance/+/76392014:35
abhishekkit is good to go14:35
abhishekkgoing twice14:35
abhishekkthank you all14:36
abhishekksee you next week14:36
abhishekktill then keep reviewing and have a nice weekend14:36
Steapwill do :)14:36
abhishekkSteap, thank you14:36
rosmaitaok, bye all14:36
abhishekk#endmeeting14:37
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"14:37
openstackMeeting ended Thu Feb 11 14:37:02 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:37
openstackMinutes:        http://eavesdrop.openstack.org/meetings/glance/2021/glance.2021-02-11-14.00.html14:37
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/glance/2021/glance.2021-02-11-14.00.txt14:37
openstackLog:            http://eavesdrop.openstack.org/meetings/glance/2021/glance.2021-02-11-14.00.log.html14:37
*** ociuhandu has quit IRC14:37
*** ociuhandu has joined #openstack-meeting14:40
*** rosmaita has left #openstack-meeting14:43
*** ociuhandu has quit IRC14:47
*** macz_ has joined #openstack-meeting14:47
*** ociuhandu has joined #openstack-meeting14:48
*** macz_ has quit IRC14:52
*** ociuhandu has quit IRC14:55
*** ociuhandu has joined #openstack-meeting14:56
*** zaneb has joined #openstack-meeting14:58
*** belmoreira has joined #openstack-meeting14:59
gagehugo#startmeeting security15:00
openstackMeeting started Thu Feb 11 15:00:20 2021 UTC and is due to finish in 60 minutes.  The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
*** openstack changes topic to " (Meeting topic: security)"15:00
openstackThe meeting name has been set to 'security'15:00
gagehugo#link https://etherpad.opendev.org/p/security-agenda agenda15:00
gagehugoo/15:00
fungiohai15:02
fungiwhen was our last meeting? just trying to work out what's happened since then15:02
*** ociuhandu has quit IRC15:02
gagehugoThe 21st was the last time I believe we had a meeting and an item we discussed15:03
*** ociuhandu has joined #openstack-meeting15:04
*** ricolin has joined #openstack-meeting15:08
gagehugoI saw https://bugs.launchpad.net/neutron/+bug/1732067 was updated15:09
openstackLaunchpad bug 1732067 in neutron "openvswitch firewall flows cause flooding on integration bridge" [High,Fix released] - Assigned to LIU Yulong (dragon889)15:09
*** yamamoto has joined #openstack-meeting15:10
*** e0ne has quit IRC15:11
gagehugoOtherwise I have nothing else or this week15:15
fungi#link someone has posted on openstack-discuss asking if there's any successor/alternative to syntribos: http://lists.openstack.org/pipermail/openstack-discuss/2021-January/020011.html15:18
fungiother than that, nothing else from me (sorry, double-booked in a meeting, firefighting something which just happened as meetings were starting, and also juggling other conversations)15:19
gagehugofungi: no worries15:22
gagehugoHave a good rest of the week!15:22
gagehugo#endmeeting15:22
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"15:22
openstackMeeting ended Thu Feb 11 15:22:50 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:22
openstackMinutes:        http://eavesdrop.openstack.org/meetings/security/2021/security.2021-02-11-15.00.html15:22
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/security/2021/security.2021-02-11-15.00.txt15:22
openstackLog:            http://eavesdrop.openstack.org/meetings/security/2021/security.2021-02-11-15.00.log.html15:22
fungithanks gagehugo!15:25
*** bcafarel has quit IRC15:25
*** bcafarel has joined #openstack-meeting15:26
*** supamatt has joined #openstack-meeting15:28
*** yamamoto has quit IRC15:31
*** jamesmcarthur has joined #openstack-meeting15:36
*** ociuhandu has quit IRC15:39
*** jamesmcarthur has quit IRC15:42
*** ociuhandu has joined #openstack-meeting15:44
*** macz_ has joined #openstack-meeting15:44
*** macz_ has quit IRC15:48
*** dklyle has joined #openstack-meeting15:52
*** david-lyle has joined #openstack-meeting15:54
*** david-lyle has quit IRC15:54
*** ricolin has quit IRC15:56
*** jmasud has joined #openstack-meeting16:02
*** macz_ has joined #openstack-meeting16:09
*** ganso has joined #openstack-meeting16:16
*** mlavalle has joined #openstack-meeting16:24
*** gyee has joined #openstack-meeting16:37
*** jamesmcarthur has joined #openstack-meeting16:45
*** ociuhandu has quit IRC16:54
*** ociuhandu has joined #openstack-meeting16:55
*** ricolin has joined #openstack-meeting16:56
*** ociuhandu has quit IRC17:01
*** ociuhandu has joined #openstack-meeting17:03
*** ricolin has quit IRC17:06
*** ociuhandu_ has joined #openstack-meeting17:12
*** ociuhandu has quit IRC17:15
*** ociuhandu_ has quit IRC17:16
*** jamesmcarthur has quit IRC17:20
*** jamesmcarthur has joined #openstack-meeting17:20
*** jmasud has quit IRC17:25
*** afazekas has joined #openstack-meeting17:26
*** yamamoto has joined #openstack-meeting17:29
*** jmasud has joined #openstack-meeting17:31
*** ociuhandu has joined #openstack-meeting17:38
*** ociuhandu has quit IRC17:42
*** rpittau is now known as rpittau|afk17:43
*** yamamoto has quit IRC17:45
*** udesale_ has quit IRC17:47
*** jamesmcarthur has quit IRC17:53
*** jamesmcarthur has joined #openstack-meeting17:54
*** ralonsoh has quit IRC17:54
*** jamesmcarthur has quit IRC18:00
*** jmasud has quit IRC18:09
*** dklyle has quit IRC18:09
*** jamesmcarthur has joined #openstack-meeting18:17
*** moguimar has quit IRC18:25
*** moguimar has joined #openstack-meeting18:25
*** dsariel has quit IRC18:49
*** belmoreira has quit IRC18:51
*** dklyle has joined #openstack-meeting18:56
*** yamamoto has joined #openstack-meeting19:42
*** jamesmcarthur has quit IRC19:52
*** jamesmcarthur has joined #openstack-meeting19:53
*** jamesmcarthur has quit IRC19:57
*** yamamoto has quit IRC19:59
*** jamesmcarthur has joined #openstack-meeting20:04
*** jmasud has joined #openstack-meeting20:59
*** jmasud has quit IRC21:00
*** ociuhandu has joined #openstack-meeting21:17
*** rcernin has joined #openstack-meeting21:20
*** jamesmcarthur has quit IRC21:36
*** jamesmcarthur has joined #openstack-meeting21:36
*** jamesmcarthur has quit IRC21:42
*** yamamoto has joined #openstack-meeting21:57
*** jamesmcarthur has joined #openstack-meeting21:57
*** gmann is now known as gmann_afk22:10
*** dklyle has quit IRC22:19
*** dklyle has joined #openstack-meeting22:19
*** yamamoto has quit IRC22:25
*** PrinzElvis has quit IRC22:41
*** patrickeast has quit IRC22:41
*** yamamoto has joined #openstack-meeting22:41
*** PrinzElvis has joined #openstack-meeting22:41
*** patrickeast has joined #openstack-meeting22:41
*** jamesmcarthur has quit IRC22:45
*** jamesmcarthur has joined #openstack-meeting22:45
*** jamesmcarthur has quit IRC22:49
*** jamesmcarthur has joined #openstack-meeting22:49
*** slaweq has quit IRC23:09
*** gmann_afk is now known as gmann23:11
*** ociuhandu has quit IRC23:19
*** jamesmcarthur has quit IRC23:41
*** jamesmcarthur has joined #openstack-meeting23:42
*** jgriffith has quit IRC23:42
*** jamesmcarthur has quit IRC23:58

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!