| *** e0ne has quit IRC | 00:01 | |
| *** tosky has quit IRC | 00:10 | |
| *** jmasud has joined #openstack-meeting | 00:55 | |
| *** mlavalle has quit IRC | 00:57 | |
| *** jmasud_ has quit IRC | 00:58 | |
| *** jmasud has quit IRC | 01:04 | |
| *** jmasud has joined #openstack-meeting | 01:06 | |
| *** ricolin_ has joined #openstack-meeting | 01:21 | |
| *** timburke_ has quit IRC | 01:45 | |
| *** macz_ has quit IRC | 02:04 | |
| *** jmasud has quit IRC | 02:08 | |
| *** ricolin_ has quit IRC | 02:11 | |
| *** ricolin_ has joined #openstack-meeting | 02:11 | |
| *** jmasud has joined #openstack-meeting | 02:15 | |
| *** rcernin has quit IRC | 02:37 | |
| *** jmasud has quit IRC | 02:58 | |
| *** rh-jelabarre has quit IRC | 03:01 | |
| *** jmasud has joined #openstack-meeting | 03:05 | |
| *** macz_ has joined #openstack-meeting | 03:05 | |
| *** macz_ has quit IRC | 03:10 | |
| *** macz_ has joined #openstack-meeting | 03:26 | |
| *** yamamoto has quit IRC | 03:27 | |
| *** macz_ has quit IRC | 03:31 | |
| *** macz_ has joined #openstack-meeting | 04:06 | |
| *** jmasud has quit IRC | 04:10 | |
| *** macz_ has quit IRC | 04:10 | |
| *** jmasud has joined #openstack-meeting | 04:20 | |
| *** macz_ has joined #openstack-meeting | 04:27 | |
| *** macz_ has quit IRC | 04:32 | |
| *** rcernin has joined #openstack-meeting | 04:44 | |
| *** macz_ has joined #openstack-meeting | 04:48 | |
| *** macz_ has quit IRC | 04:52 | |
| *** rcernin has quit IRC | 04:54 | |
| *** rcernin has joined #openstack-meeting | 04:55 | |
| *** jmasud has quit IRC | 04:57 | |
| *** jmasud has joined #openstack-meeting | 05:00 | |
| *** macz_ has joined #openstack-meeting | 05:09 | |
| *** macz_ has quit IRC | 05:13 | |
| *** rcernin has quit IRC | 05:14 | |
| *** udesale has joined #openstack-meeting | 05:21 | |
| *** rcernin has joined #openstack-meeting | 05:21 | |
| *** evrardjp has quit IRC | 05:33 | |
| *** evrardjp has joined #openstack-meeting | 05:33 | |
| *** gyee has quit IRC | 05:34 | |
| *** ricolin has quit IRC | 06:00 | |
| *** ricolin_ has quit IRC | 06:27 | |
| *** ricolin has joined #openstack-meeting | 06:28 | |
| *** timburke_ has joined #openstack-meeting | 06:45 | |
| *** timburke_ is now known as timburke | 06:45 | |
| *** macz_ has joined #openstack-meeting | 06:47 | |
| *** macz_ has quit IRC | 06:52 | |
| *** dklyle has quit IRC | 07:16 | |
| *** slaweq has joined #openstack-meeting | 07:27 | |
| *** e0ne has joined #openstack-meeting | 07:38 | |
| *** jmasud has quit IRC | 07:38 | |
| *** rcernin has quit IRC | 07:39 | |
| *** e0ne has quit IRC | 07:39 | |
| *** ralonsoh has joined #openstack-meeting | 07:48 | |
| *** belmoreira has joined #openstack-meeting | 07:55 | |
| *** edagawa_kc has joined #openstack-meeting | 08:00 | |
| *** edagawa_kc has joined #openstack-meeting | 08:02 | |
| *** edagawa_kc has quit IRC | 08:02 | |
| *** rpittau|afk is now known as rpittau | 08:11 | |
| *** rcernin has joined #openstack-meeting | 08:15 | |
| *** ociuhandu has joined #openstack-meeting | 08:20 | |
| *** ociuhandu has quit IRC | 08:31 | |
| *** rcernin has quit IRC | 08:31 | |
| *** rcernin has joined #openstack-meeting | 08:33 | |
| *** ociuhandu has joined #openstack-meeting | 08:36 | |
| *** macz_ has joined #openstack-meeting | 08:44 | |
| *** macz_ has quit IRC | 08:49 | |
| *** rcernin has quit IRC | 09:08 | |
| *** ociuhandu has quit IRC | 09:09 | |
| *** tosky has joined #openstack-meeting | 09:18 | |
| *** e0ne has joined #openstack-meeting | 09:21 | |
| *** ociuhandu has joined #openstack-meeting | 09:40 | |
| *** ociuhandu has quit IRC | 09:49 | |
| *** ociuhandu has joined #openstack-meeting | 09:52 | |
| *** ociuhandu has quit IRC | 09:53 | |
| *** ociuhandu has joined #openstack-meeting | 09:53 | |
| *** ociuhandu has quit IRC | 09:58 | |
| *** ociuhandu has joined #openstack-meeting | 10:00 | |
| *** ociuhandu has joined #openstack-meeting | 10:01 | |
| *** ociuhandu has quit IRC | 10:03 | |
| *** ociuhandu has joined #openstack-meeting | 10:03 | |
| *** macz_ has joined #openstack-meeting | 10:07 | |
| *** macz_ has quit IRC | 10:12 | |
| *** rcernin has joined #openstack-meeting | 10:27 | |
| *** rcernin has quit IRC | 10:42 | |
| *** rcernin has joined #openstack-meeting | 10:52 | |
| *** oneswig has joined #openstack-meeting | 11:01 | |
| oneswig | #startmeeting scientific-sig | 11:01 |
|---|---|---|
| openstack | Meeting started Wed Feb 24 11:01:17 2021 UTC and is due to finish in 60 minutes. The chair is oneswig. Information about MeetBot at http://wiki.debian.org/MeetBot. | 11:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 11:01 |
| *** openstack changes topic to " (Meeting topic: scientific-sig)" | 11:01 | |
| openstack | The meeting name has been set to 'scientific_sig' | 11:01 |
| *** eliaswimmer has joined #openstack-meeting | 11:01 | |
| oneswig | #link agenda for today https://wiki.openstack.org/wiki/Scientific_SIG#IRC_Meeting_February_24th_2021 | 11:02 |
| oneswig | eliaswimmer: hi! | 11:02 |
| eliaswimmer | hi Stig! | 11:02 |
| oneswig | Thanks for coming along | 11:03 |
| oneswig | (Just concluding another meeting) | 11:04 |
| oneswig | How's things? | 11:07 |
| oneswig | #topic use of glance image metadata for inter-cloud portability | 11:08 |
| *** openstack changes topic to "use of glance image metadata for inter-cloud portability (Meeting topic: scientific-sig)" | 11:08 | |
| oneswig | In the topic of inter-cloud portability, image naming is probably square one | 11:09 |
| oneswig | #link Listed properties in Glance docs https://docs.openstack.org/glance/latest/admin/useful-image-properties.html | 11:11 |
| oneswig | Setting lots of these is helpful to people trying to port their deployment to your cloud | 11:11 |
| *** rcernin has quit IRC | 11:12 | |
| *** macz_ has joined #openstack-meeting | 11:13 | |
| eliaswimmer | is there some naming convention for images yet? | 11:13 |
| oneswig | In practice we could probably set more, for example here's table stakes | 11:14 |
| oneswig | os_type: "linux" | 11:14 |
| oneswig | os_distro: "centos" | 11:14 |
| oneswig | os_version: "7.5" | 11:14 |
| oneswig | hw_rng_model: "virtio" | 11:14 |
| oneswig | Ah, naming, I think there are only informal conventions there. | 11:14 |
| *** udesale_ has joined #openstack-meeting | 11:14 | |
| oneswig | This is where the discovery process comes in - how do I ask Glance, "What is the latest best CentOS 8 image" for example | 11:15 |
| oneswig | a metadata-driven lookup | 11:15 |
| oneswig | Alas we didn't get details ahead on Chris Layton's thoughts on this. | 11:16 |
| eliaswimmer | ok, now I get it! For me a patch level tag would be an important label. | 11:16 |
| eliaswimmer | cause centos 8 can be a lot off different versions | 11:17 |
| oneswig | so true | 11:17 |
| *** udesale has quit IRC | 11:18 | |
| *** macz_ has quit IRC | 11:18 | |
| oneswig | eliaswimmer: are you providing infrastructure-as-a-service on your system? | 11:19 |
| *** ociuhandu has quit IRC | 11:19 | |
| oneswig | (or planning to?) | 11:19 |
| *** e0ne has quit IRC | 11:20 | |
| eliaswimmer | that's the plan! Currently only in an early stage | 11:20 |
| *** ociuhandu has joined #openstack-meeting | 11:20 | |
| eliaswimmer | There is still a lot to do, like CD of images to OpenStack, image scanning etc | 11:20 |
| eliaswimmer | Another question is how to lock images with vulnerabilities | 11:22 |
| *** e0ne has joined #openstack-meeting | 11:22 | |
| oneswig | To prevent further deployments with it? | 11:22 |
| oneswig | Sounds like a good idea | 11:22 |
| eliaswimmer | exactly | 11:22 |
| eliaswimmer | one can't remove them as long as the used, at least not when using ceph | 11:23 |
| oneswig | Just delete the image perhaps? Deployed instances would only lose the name of the image they used | 11:23 |
| oneswig | eliaswimmer: are you sure? could that be a copy-on-write detail | 11:24 |
| eliaswimmer | oneswig: Not 100%, maybe it was a permission issue | 11:24 |
| *** ociuhandu has quit IRC | 11:25 | |
| eliaswimmer | But when deleting, users miss the metadata from the images | 11:26 |
| *** ociuhandu has joined #openstack-meeting | 11:26 | |
| *** ociuhandu has quit IRC | 11:30 | |
| oneswig | That's true, but perhaps they don't need it after the VM is deployed. | 11:32 |
| eliaswimmer | About image scanning. Even if it is a bit off topic now, but we should also do so with Kolla images. | 11:34 |
| *** ociuhandu has joined #openstack-meeting | 11:34 | |
| oneswig | The container images? | 11:37 |
| oneswig | We've done some interesting exploration with using Clair | 11:37 |
| eliaswimmer | ah, yes. that is what I was thinking | 11:38 |
| oneswig | It was enough to convince us that it is a very useful function - we'll definitely use it | 11:38 |
| eliaswimmer | I do so with my images for jupyterhub, it's quite easy and the recent sudo bug shows how important that is | 11:40 |
| eliaswimmer | same can be done for all types of images, even live systems | 11:40 |
| *** ociuhandu has quit IRC | 11:41 | |
| oneswig | On the image tags, there was an effort to set some standards as part of the IRIS federation in the UK, but I don't know if anything has been adopted by that group | 11:48 |
| oneswig | Anyway, I don't think we'll progress much further today, between us :-) | 11:52 |
| *** ociuhandu has joined #openstack-meeting | 11:58 | |
| verdurin | I've also looked at Anchore for image scanning. | 11:58 |
| oneswig | Hi verdurin, just in time... | 11:59 |
| oneswig | Can you compare and contrast? | 11:59 |
| oneswig | Ah, we should wrap up. Thanks eliaswimmer verdurin | 12:03 |
| oneswig | #endmeeting | 12:03 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 12:03 | |
| openstack | Meeting ended Wed Feb 24 12:03:30 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 12:03 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/scientific_sig/2021/scientific_sig.2021-02-24-11.01.html | 12:03 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/scientific_sig/2021/scientific_sig.2021-02-24-11.01.txt | 12:03 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/scientific_sig/2021/scientific_sig.2021-02-24-11.01.log.html | 12:03 |
| *** e0ne has quit IRC | 12:19 | |
| *** ociuhandu has quit IRC | 12:24 | |
| *** ociuhandu has joined #openstack-meeting | 12:24 | |
| *** ociuhandu has quit IRC | 12:29 | |
| *** vishalmanchanda has joined #openstack-meeting | 12:46 | |
| *** oneswig has quit IRC | 12:54 | |
| *** macz_ has joined #openstack-meeting | 13:01 | |
| *** macz_ has quit IRC | 13:06 | |
| *** rh-jelabarre has joined #openstack-meeting | 13:20 | |
| *** liuyulong has joined #openstack-meeting | 13:39 | |
| *** ociuhandu has joined #openstack-meeting | 13:42 | |
| *** Luzi has joined #openstack-meeting | 13:47 | |
| *** e0ne has joined #openstack-meeting | 13:50 | |
| liuyulong | test | 13:55 |
| *** belmoreira has quit IRC | 13:56 | |
| *** belmoreira has joined #openstack-meeting | 13:56 | |
| *** macz_ has joined #openstack-meeting | 13:58 | |
| slaweq | hi liuyulong | 14:00 |
| slaweq | I'm in the other meeting in same time but I will be lurking here | 14:00 |
| liuyulong | Hi | 14:01 |
| haleyb | hi | 14:02 |
| liuyulong | #startmeeting neutron_l3 | 14:02 |
| openstack | Meeting started Wed Feb 24 14:02:14 2021 UTC and is due to finish in 60 minutes. The chair is liuyulong. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:02 |
| *** openstack changes topic to " (Meeting topic: neutron_l3)" | 14:02 | |
| openstack | The meeting name has been set to 'neutron_l3' | 14:02 |
| liuyulong | Long time no see. :) | 14:02 |
| *** macz_ has quit IRC | 14:02 | |
| slaweq | hi | 14:02 |
| liuyulong | OK, let's start. | 14:03 |
| liuyulong | #topic Bugs | 14:04 |
| *** openstack changes topic to "Bugs (Meeting topic: neutron_l3)" | 14:04 | |
| liuyulong | #link https://bugs.launchpad.net/neutron/+bug/1913621 | 14:04 |
| openstack | Launchpad bug 1913646 in neutron "duplicate for #1913621 DVR router ARP traffic broken for networks containing multiple subnets" [Medium,Confirmed] - Assigned to LIU Yulong (dragon889) | 14:04 |
| liuyulong | #link https://bugs.launchpad.net/neutron/+bug/1913646 | 14:04 |
| openstack | Launchpad bug 1913646 in neutron "DVR router ARP traffic broken for networks containing multiple subnets" [Medium,Confirmed] - Assigned to LIU Yulong (dragon889) | 14:04 |
| *** rpittau is now known as rpittau|afk | 14:04 | |
| liuyulong | This was fixed in a way that we change the ARP reply dest mac to the router gateway. | 14:04 |
| liuyulong | But the bug reporter said that 1913646 is a bit different. | 14:05 |
| liuyulong | Sorry, it's 1913621 | 14:05 |
| liuyulong | The main issue of bug/1913621 is why the Permant ARP was not added. | 14:06 |
| *** lajoskatona has joined #openstack-meeting | 14:06 | |
| lajoskatona | Hi | 14:06 |
| liuyulong | Hi, lajoskatona | 14:07 |
| liuyulong | So I just removed the duplicated mark. | 14:07 |
| liuyulong | I agree that point, the main problem of 1913621 may exist in dvr related code. | 14:07 |
| liuyulong | I will revisit this bug 1913621 and try to reproduce that. | 14:10 |
| liuyulong | next | 14:10 |
| liuyulong | #link https://bugs.launchpad.net/neutron/+bug/1916022 | 14:10 |
| openstack | Launchpad bug 1916022 in neutron "L3HA Race condition during startup of the agent may cause inconsistent router's states" [Low,In progress] - Assigned to Slawek Kaplonski (slaweq) | 14:10 |
| liuyulong | #link https://review.opendev.org/c/openstack/neutron/+/776423 | 14:11 |
| liuyulong | The patch is here. | 14:11 |
| liuyulong | I've read the code, but not test it yet. | 14:11 |
| liuyulong | A "Race condition" bug sometimes is not so much easy to test, IMO. | 14:12 |
| slaweq | yes we found it with tobiko tests | 14:13 |
| slaweq | those tobiko tests can be very useful for us in some cases :) | 14:14 |
| liuyulong | maybe run some times job in that tobiko to verify the fix | 14:15 |
| slaweq | liuyulong: I did | 14:16 |
| slaweq | https://review.opendev.org/c/openstack/neutron/+/776284/5 | 14:16 |
| slaweq | this is "test patch" which runs tobiko jobs | 14:16 |
| slaweq | and it passed many times already | 14:16 |
| slaweq | so for me it's clearly solving the issue | 14:16 |
| liuyulong | Cool | 14:16 |
| liuyulong | Yep, Great work! | 14:17 |
| slaweq | thx | 14:17 |
| liuyulong | Just post my +2 | 14:18 |
| slaweq | thx | 14:18 |
| liuyulong | OK, next one | 14:18 |
| liuyulong | #link https://bugs.launchpad.net/neutron/+bug/1916024 | 14:18 |
| openstack | Launchpad bug 1916024 in neutron "HA router master instance in error state because qg-xx interface is down" [High,In progress] - Assigned to Rodolfo Alonso (rodolfo-alonso-hernandez) | 14:18 |
| liuyulong | #link https://review.opendev.org/c/openstack/neutron/+/776427 | 14:19 |
| liuyulong | The fix ^ | 14:19 |
| liuyulong | The fix is simple, just use the normal workaround method "retry". | 14:20 |
| liuyulong | #link https://review.opendev.org/c/openstack/neutron/+/776427/4//COMMIT_MSG | 14:20 |
| liuyulong | I have left some comment here. | 14:20 |
| liuyulong | #link http://paste.openstack.org/show/802779/ | 14:21 |
| liuyulong | There are some actions " DelPortCommand(port=qg-3e872c7f-68" and "AddPortCommand(bridge=br-int, port=qg-3e872c7f-68" | 14:21 |
| liuyulong | I don't know if these method can be the root cause, but it is really close to the behavior we found. | 14:22 |
| liuyulong | While ovsdbapp is doing the "delete and add" work, the privsep deamon is trying to run the "ip link" related command. | 14:23 |
| liuyulong | So, maybe we can refactor that replace_port method to a more grace way: not delete it, but clear attributes and reset. | 14:28 |
| *** Luzi has quit IRC | 14:28 | |
| liuyulong | Just some thoughts, do not be sure if it really works. | 14:28 |
| liuyulong | OK, no more bugs from me then. | 14:29 |
| liuyulong | Any updates? | 14:29 |
| *** ociuhandu has quit IRC | 14:29 | |
| *** ociuhandu has joined #openstack-meeting | 14:30 | |
| liuyulong | OK, let's move on | 14:31 |
| liuyulong | #topic distributed_dhcp | 14:31 |
| *** openstack changes topic to "distributed_dhcp (Meeting topic: neutron_l3)" | 14:31 | |
| liuyulong | I have uploaded all code. | 14:31 |
| liuyulong | #link https://review.opendev.org/q/topic:%22bp%252Fdistributed-dhcp-for-ml2-ovs%22+(status:open%20OR%20status:merged) | 14:31 |
| liuyulong | #link https://review.opendev.org/c/openstack/neutron/+/776568 | 14:32 |
| liuyulong | The fullstack test case is passed locally in my devstack environment. | 14:32 |
| liuyulong | I'm not quite sure why the upstream is failing. | 14:32 |
| liuyulong | One issue may be the DHCP client version. | 14:33 |
| *** ociuhandu has quit IRC | 14:34 | |
| liuyulong | Since we use namespace as the fake VM, the dhcp client should be from "Linux ubuntu-focal-ovh-gra1-0023152345 5.4.0-65-generic #73-Ubuntu SMP Mon Jan 18 17:25:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux" | 14:35 |
| liuyulong | Maybe I should run a devstack deployment in ubuntu to verify this case. | 14:35 |
| liuyulong | Some other concerns are that maybe protocol coverage of the DHCPv4/v6 responder. | 14:37 |
| liuyulong | All these options and replies are based on the dnsmasq example of dhcp-instance from DHCP-agent. | 14:38 |
| liuyulong | We use Wireshark to verify and compare all related options from distribtued_dhcp and dnsmasq | 14:39 |
| liuyulong | Maybe it's not enough. | 14:39 |
| liuyulong | So, any comments/problem/testing/issues you have about these DHCPv4/v6 responder are welcomed. | 14:40 |
| haleyb | i wonder if looking at things in an OVN environment would help? at least the flows? | 14:40 |
| liuyulong | This is the main part of the distributed DHCP. | 14:40 |
| liuyulong | haleyb, I did that, seems negtive. | 14:41 |
| liuyulong | The flows from OVN and OVS are totally different. | 14:41 |
| liuyulong | Actually for the implementation here for ovs agent, we only add one flow for DHCP request. | 14:42 |
| liuyulong | "submit to controller, aka ovs-agent" | 14:42 |
| liuyulong | OVN's flow has some user data, then upload to ovn-controller. | 14:42 |
| haleyb | ack, just thinking out loud | 14:43 |
| liuyulong | ovn-controller can read those userdata, but ovs-agent with ryu app does not. | 14:43 |
| *** Luzi has joined #openstack-meeting | 14:43 | |
| *** ociuhandu has joined #openstack-meeting | 14:44 | |
| liuyulong | Last thing about this bp is that config option... | 14:45 |
| liuyulong | "disable_traditional_dhcp" or "enable_traditional_dhcp" | 14:45 |
| liuyulong | I'm still thinking that we should not add config option to "enable neutron's default behavior by default". | 14:46 |
| lajoskatona | I would say to make anyway default the "legacy" dhcp, otherwise I am fine with any | 14:46 |
| liuyulong | The original purpose and main aim is to "disable" something. | 14:47 |
| liuyulong | lajoskatona, yes, we will make sure that. | 14:49 |
| haleyb | liuyulong: yes, it seems a little backwards, but to me it looks similar to other config options we've added where the default is True | 14:49 |
| haleyb | for example, we've done that when we wanted to add a new thing then backport the config option, not that this is the same case | 14:50 |
| haleyb | i.e. set the option to what the current default is - enabling dhcp-agent | 14:51 |
| haleyb | i don't think the "votes" agreed on either direction in the review | 14:51 |
| *** munimeha1 has joined #openstack-meeting | 14:51 | |
| liuyulong | This option should not be backported to stable branch. : ) | 14:53 |
| *** macz_ has joined #openstack-meeting | 14:53 | |
| liuyulong | Maybe someday this "disable_traditional_dhcp = True" will be default value. | 14:53 |
| liuyulong | OK, time is running out. | 14:55 |
| haleyb | or the enable default is False :) maybe i should ask someone that works on tripleo what they think, since they're maybe more in-tune with exposing config options to customers | 14:55 |
| liuyulong | haleyb, great, thank you. | 14:56 |
| liuyulong | We can continue the discussion on the gerrit. | 14:56 |
| haleyb | sure | 14:56 |
| liuyulong | #topic On demand agenda | 14:56 |
| *** openstack changes topic to "On demand agenda (Meeting topic: neutron_l3)" | 14:56 | |
| liuyulong | I have one update here: | 14:56 |
| liuyulong | The spec for "elastic snat" https://review.opendev.org/c/openstack/neutron-specs/+/770540 | 14:57 |
| *** macz_ has quit IRC | 14:57 | |
| liuyulong | Reviews are welcomed. | 14:57 |
| liuyulong | OK, thank you guys | 14:59 |
| liuyulong | Let's end here. | 14:59 |
| liuyulong | Bye | 14:59 |
| lajoskatona | Bye | 14:59 |
| liuyulong | #endmeeting | 15:00 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:00 | |
| openstack | Meeting ended Wed Feb 24 15:00:05 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/neutron_l3/2021/neutron_l3.2021-02-24-14.02.html | 15:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/neutron_l3/2021/neutron_l3.2021-02-24-14.02.txt | 15:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/neutron_l3/2021/neutron_l3.2021-02-24-14.02.log.html | 15:00 |
| *** liuyulong has quit IRC | 15:00 | |
| *** lajoskatona has left #openstack-meeting | 15:00 | |
| *** lpetrut has joined #openstack-meeting | 15:13 | |
| *** abhishekk is now known as abhishekk|afk | 15:20 | |
| *** soniya29 is now known as soniya29|ruck | 15:22 | |
| *** lpetrut has quit IRC | 15:24 | |
| *** dklyle has joined #openstack-meeting | 15:46 | |
| *** abhishekk|afk is now known as abhishekk | 15:47 | |
| *** munimeha1 has quit IRC | 15:52 | |
| *** ociuhandu has quit IRC | 16:09 | |
| *** ociuhandu has joined #openstack-meeting | 16:10 | |
| *** ociuhandu has quit IRC | 16:14 | |
| *** macz_ has joined #openstack-meeting | 16:15 | |
| *** jmasud has joined #openstack-meeting | 16:22 | |
| *** vishalmanchanda has quit IRC | 16:36 | |
| *** gyee has joined #openstack-meeting | 16:41 | |
| *** jmasud has quit IRC | 16:41 | |
| *** jmasud has joined #openstack-meeting | 16:44 | |
| *** ociuhandu has joined #openstack-meeting | 16:47 | |
| *** belmoreira has quit IRC | 16:48 | |
| *** udesale_ has quit IRC | 16:54 | |
| *** ociuhandu_ has joined #openstack-meeting | 17:04 | |
| *** ociuhandu has quit IRC | 17:07 | |
| *** ociuhandu_ has quit IRC | 17:08 | |
| *** ociuhandu has joined #openstack-meeting | 17:18 | |
| *** ociuhandu has quit IRC | 17:22 | |
| *** dklyle has quit IRC | 17:53 | |
| *** Luzi has quit IRC | 17:56 | |
| *** ralonsoh has quit IRC | 18:00 | |
| *** dklyle has joined #openstack-meeting | 18:13 | |
| *** rcernin has joined #openstack-meeting | 19:10 | |
| *** rcernin has quit IRC | 19:15 | |
| *** eliaswimmer has quit IRC | 19:18 | |
| *** rh-jelabarre has quit IRC | 19:27 | |
| *** rh-jelabarre has joined #openstack-meeting | 19:30 | |
| *** jmasud has quit IRC | 19:51 | |
| *** eliaswimmer has joined #openstack-meeting | 19:51 | |
| *** rcernin has joined #openstack-meeting | 20:33 | |
| *** rcernin has quit IRC | 20:47 | |
| *** eliaswimmer has quit IRC | 20:57 | |
| *** acoles has joined #openstack-meeting | 21:00 | |
| timburke | #startmeeting swift | 21:00 |
| openstack | Meeting started Wed Feb 24 21:00:19 2021 UTC and is due to finish in 60 minutes. The chair is timburke. Information about MeetBot at http://wiki.debian.org/MeetBot. | 21:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 21:00 |
| *** openstack changes topic to " (Meeting topic: swift)" | 21:00 | |
| openstack | The meeting name has been set to 'swift' | 21:00 |
| timburke | who's here for the swift meeting? | 21:00 |
| mattoliverau | o/ | 21:00 |
| acoles | o/ | 21:01 |
| acoles | kota sent his apologies earlier in #openstack-swift | 21:01 |
| rledisez | hi o/ | 21:03 |
| timburke | agenda's at https://wiki.openstack.org/wiki/Meetings/Swift | 21:03 |
| timburke | first up | 21:03 |
| timburke | #topic sharding backports | 21:03 |
| *** openstack changes topic to "sharding backports (Meeting topic: swift)" | 21:03 | |
| timburke | zaitcev isn't in here right now, but i wanted to at least give a short status update | 21:03 |
| timburke | looks like he's been busy making sure that all the patches proposed for train made it onto ussuri and victoria | 21:04 |
| clayg | o/ | 21:04 |
| clayg | timburke: do you have any idea why he's doing that? | 21:05 |
| timburke | victoria's just about all caught up, but i haven't looked at any of the ussuri patches yet. expect a bunch more merges | 21:05 |
| mattoliverau | hopeuflly he has clients who just want some shardy goodness | 21:05 |
| timburke | or do you mean why he's backporting to u and v? so if someone takes the new train release with all those fixes, we want to make sure they could upgrade to u/v | 21:06 |
| timburke | some of the patches include things like new states in the sharder's state machine -- at the end of all this, it'd likely be pretty bad to go from tip of stable/train to the master -> stable/ussuri branch point, for example | 21:07 |
| *** eliaswimmer has joined #openstack-meeting | 21:08 | |
| timburke | a bunch of the train patches are in need of rebasing; i'll likely get to it if zaitcev doesn't, but likely after making progres on ussuri and victoria | 21:08 |
| timburke | that's about it | 21:09 |
| timburke | #topic CORS tests | 21:09 |
| *** openstack changes topic to "CORS tests (Meeting topic: swift)" | 21:09 | |
| clayg | sounds weird, we just don't normally backport stuff like this (fixes to "experimental" features) - so i wasn't sure what was going on | 21:09 |
| timburke | it's getting less and less experimental on master, so it seems reasonable to me to get a bunch of those fixes on whatever version people want to use sharding on, too | 21:10 |
| clayg | speaking of "less experimental" that CORS is pretty hawt | 21:11 |
| timburke | i figure there can be a lot of reasons to hold off on upgrading (even if master swift should Just Work with old OpenStack) | 21:11 |
| timburke | so yeah | 21:11 |
| timburke | a long while back, i started poking at writing some in-browser CORS func tests | 21:11 |
| timburke | #link https://review.opendev.org/c/openstack/swift/+/533028 | 21:11 |
| timburke | this was originally to feel out a patch torgomatic was working on to pull CORS handling out to middleware, but that kinda stalled, so my tests did, too | 21:12 |
| clayg | "func" tests - browser integration tests - point is javascript in a browser is the only reasonable way to exercise CORS (since half of it is "the browser won't let the request XYZ") | 21:13 |
| timburke | but for more than a year now i've had users wanting to be able to use s3api and CORS, and it's sure been a useful way to ensure that works | 21:13 |
| clayg | ... *if* the origin says this or that ... which is what our "CORS support" is going about configuring | 21:13 |
| *** rcernin has joined #openstack-meeting | 21:14 | |
| timburke | there have been a few iterations of how the test runs, but the core of it now seems fairly reasonable/useful to people | 21:14 |
| clayg | right; we need to ship some CORS support for s3api - aws s3 has some/enough support for some CORS things we already do in the swift side - so it's mostly just making s3api let things through | 21:14 |
| clayg | I'm getting a strong feel for the makeup of the test suite - the various stages and how things get put together | 21:15 |
| timburke | i think acoles, clayg, and mattoliverau have all managed to run the tests locally, and there's even a gate job | 21:15 |
| clayg | I have some experience debugging the main.py setup and webserver, and the javascript tests | 21:15 |
| acoles | yes, I have played with the tests quite a bit | 21:16 |
| acoles | I tried out selenium today with safari automation, all worked fine | 21:16 |
| clayg | i'm less familiar with how the gate job works - I've run and broken and fixed them locally | 21:16 |
| clayg | acoles: NICE!!! | 21:16 |
| acoles | I also put up a deliberate regression today to check the gate job https://review.opendev.org/c/openstack/swift/+/777405 | 21:16 |
| timburke | so i guess this is the point at which we try to sell everyone else in the community on the idea of merging it | 21:16 |
| clayg | acoles: awww but we're still waiting on results | 21:17 |
| timburke | ...which makes it a little unfortunate that the only non-nvidian this week is rledisez ;-) | 21:17 |
| clayg | rledisez: is all about that CORS tho - and testing rledisez loves testing | 21:17 |
| *** rcernin has quit IRC | 21:19 | |
| timburke | so rledisez, if you've got any thoughts now, i'd love to hear them; if not, we'll probably bring it up again next week (assuming we've got more people here) | 21:19 |
| timburke | next week it is ;-) | 21:21 |
| timburke | #topic shrinking | 21:21 |
| *** openstack changes topic to "shrinking (Meeting topic: swift)" | 21:21 | |
| timburke | how are things going there? | 21:21 |
| acoles | IIRC main progress over last week has been mattoliverau getting shrinking candidate into recon cache | 21:22 |
| acoles | I've been working on estimating tombstone rows in dbs to better inform shrinking decision - hope to have a WIP patch soon | 21:23 |
| timburke | what are the next major pieces of work? what all's already proposed that needs review? | 21:24 |
| clayg | i'm loving shrinking_candidates in recon - all about that compactible_ranges 💪 | 21:24 |
| acoles | I'm looking forward to reviews on swift-manage-shard-ranges repair https://review.opendev.org/c/openstack/swift/+/765624 | 21:25 |
| clayg | I think we're still trying to figure out if we can update state and keep in_progress around a little bit after the finish: https://review.opendev.org/c/openstack/swift/+/774393 | 21:25 |
| clayg | *update state *timestamp* | 21:25 |
| mattoliverau | what clay said :) | 21:26 |
| timburke | sounds good | 21:26 |
| timburke | #topic relinker | 21:26 |
| *** openstack changes topic to "relinker (Meeting topic: swift)" | 21:26 | |
| acoles | hmmmm ] | 21:26 |
| * acoles is nervous about timestamps | 21:26 | |
| mattoliverau | +1 | 21:26 |
| timburke | acoles, and mattoliverau were busy while i was out last week -- my chain's down to just one unmerged patch! | 21:27 |
| timburke | #link https://review.opendev.org/c/openstack/swift/+/769633 | 21:27 |
| timburke | (relinker: Parallelize per disk) | 21:27 |
| mattoliverau | relink all the things! | 21:27 |
| timburke | thanks for all the reviews and fix-ups! | 21:28 |
| timburke | i'll try to get that last one cleaned up some more, shift from parallelize=yes/no to workers=<N> | 21:28 |
| timburke | #topic debug_logger | 21:29 |
| *** openstack changes topic to "debug_logger (Meeting topic: swift)" | 21:29 | |
| timburke | #link https://review.opendev.org/c/openstack/swift/+/772092 | 21:29 |
| timburke | clayg, i think this is your topic? | 21:29 |
| clayg | oh gross | 21:29 |
| clayg | I guess I just wanted folks to tell me what to name the module if not `from test.unit.logging import debug_logger` or whatever the change is doing currently | 21:30 |
| acoles | what was it before? | 21:31 |
| clayg | `from test.logging import debug_logger` seemed reasonable to me, but because python2 imports are weird I had to `from __future__ import absolute_import` in `test/__init__.py` because otherwise `import logging` might do some nonsense | 21:31 |
| acoles | oh debug_loggger | 21:32 |
| *** rcernin has joined #openstack-meeting | 21:32 | |
| clayg | acoles: I suppose on master today we have test.debug_logger - I could live with `from test.debug_logger import debug_logger` I think | 21:32 |
| timburke | yeah, that seems fairly reasonable to me | 21:33 |
| acoles | IDK I sometimes find it confusing when we have modules with same names, but it's no big deal | 21:33 |
| timburke | what *is* the difference between DebugLogger and debug_logger, anyway? | 21:33 |
| acoles | I mean, same names, different qualified names | 21:33 |
| *** zaitcev has joined #openstack-meeting | 21:34 | |
| * zaitcev flies in | 21:34 | |
| clayg | the function is like a factory | 21:34 |
| acoles | debug_logger gets you an adapter wrapped DebugLogger | 21:34 |
| clayg | timburke: `return DebugLogAdapter(DebugLogger(), name)` | 21:35 |
| timburke | kk | 21:35 |
| clayg | i'm ok with dropping the module rename - so I think we're done | 21:35 |
| timburke | 👍 | 21:36 |
| acoles | clayg: thanks | 21:36 |
| timburke | #topic tempauth system-level read-only role | 21:36 |
| *** openstack changes topic to "tempauth system-level read-only role (Meeting topic: swift)" | 21:36 | |
| *** rcernin has quit IRC | 21:37 | |
| timburke | #link https://review.opendev.org/c/openstack/swift/+/774539 | 21:37 |
| timburke | zaitcev already has a +2 on it -- do we have any concerns about merging it? | 21:37 |
| timburke | i guess the main question is, is this a concept that we view as being generally good and useful in an auth middleware? having tempauth support it seems like a precursor to us writing func tests for it, which seems like a good idea | 21:39 |
| *** rcernin has joined #openstack-meeting | 21:40 | |
| zaitcev | I agree with functests. Although in general functests are supposed to be possible to run against any test cluster, not just SAIO. They would work with Keystone too. | 21:41 |
| zaitcev | But it's helpful to have the support in tempauth as well. | 21:41 |
| zaitcev | One thing that I stopped to consider is that it clearly adds baggage. We have so many various knobs and configurations already. | 21:42 |
| zaitcev | But it's a good feature, right? The upside is significant... right? | 21:42 |
| timburke | absolutely. i'd expect it to get another user entry in /etc/swift/test.conf and we could update the DSVM job to ensure that the tests get run against both auth systems | 21:42 |
| timburke | another way of looking at it: if someone were writing a new auth system today, (1) would we push them to include such a role and (2) would we point to tempauth as a starting point for writing their own thing? | 21:43 |
| timburke | (i think my answer on both of those is probably "yes", but that might just be me) | 21:44 |
| zaitcev | They could have roles with attributes, I suppose. In keystone you get a role called "compliance", and it has no intrinsic features. Is it a reader? Is it an admin? You don't know. But in a new auth system you could. | 21:45 |
| *** rcernin has quit IRC | 21:45 | |
| zaitcev | Tempauth has no RBAC. It has no roles, only identities which can have attributes such as "reseller reader". | 21:45 |
| zaitcev | So, I think the answer is yes, we'd ask the authors to support it | 21:46 |
| *** rcernin has joined #openstack-meeting | 21:46 | |
| zaitcev | Is this about the auth that Nvidia inherited from Swiftstack? | 21:46 |
| *** slaweq has quit IRC | 21:48 | |
| clayg | afaik this has nothing to do with nvidia or swiftstack - if we want a feature like this in our legacy of beta auth systems - we'd add that w/o any disruption of upsttream | 21:49 |
| timburke | not really, i don't think. i remember talking to clayg and him having a concern like "idk -- when i'm in a dev env (which is kinda the point of tempauth) auth is never really in the way of me reading data" | 21:49 |
| clayg | that's just a round about way of arguing zaitcev 's point about "baggage" | 21:49 |
| clayg | but it seemed like between the two of you - there's interest; so it's minor baggage for people that want to ignore it o/ | 21:50 |
| zaitcev | Fundamentally, all the new role adds is safety against buggy scripts run by the audit team. | 21:50 |
| *** rcernin has quit IRC | 21:51 | |
| timburke | i could see it growing beyond that -- we could move toward a container-sync that doesn't need an internal-client, say | 21:51 |
| zaitcev | I didn't think about it. | 21:51 |
| zaitcev | Hmm. | 21:52 |
| zaitcev | Well, as far as tempauth goes we might as well land it now, I think. | 21:52 |
| timburke | sounds like a plan | 21:52 |
| timburke | #topic open discussion | 21:52 |
| zaitcev | I started in keystone because of internal interests wanted Keystone. | 21:52 |
| *** openstack changes topic to "open discussion (Meeting topic: swift)" | 21:52 | |
| timburke | last few minutes: anything else we ought to bring up this week? | 21:52 |
| zaitcev | Well, I'm glad to see Clay. | 21:53 |
| zaitcev | Online, that is. | 21:53 |
| acoles | I'll flag up this change because it downgrades a warning to info https://review.opendev.org/c/openstack/swift/+/776608 | 21:53 |
| acoles | maybe I should wait for more people being here next week, just in case anyone feels it should remain a warning | 21:54 |
| zaitcev | Two +2 is sufficient | 21:54 |
| acoles | but I'm excited that it fixes a probe test intermittent failure :) | 21:54 |
| mattoliverau | I added a crazy graphviz tool so people could checkout graph views of shard ranges from container-info and s-m-s-r info. Helps to see what's going on in a sharded container esp when there are a lot of shards. https://review.opendev.org/c/openstack/swift/+/775066 | 21:55 |
| mattoliverau | No rush on that though, just wanted to put it somewhere and somewhere where it's upstream :) | 21:56 |
| timburke | oh, and i need to get a release together! i keep getting side tracked :-( | 21:56 |
| timburke | anyone opposed to dropping lower-constraints testing from swiftclient? https://review.opendev.org/c/openstack/python-swiftclient/+/776998 | 21:56 |
| *** eliaswimmer has quit IRC | 21:58 | |
| mattoliverau | oh yeah. if it's getting in our way, kill it!! If they ever fix it we can add it back | 21:58 |
| clayg | mattoliverau: ❤️ | 21:59 |
| timburke | i think it's more a matter of our lower-constraints needing to nix most/all of the keystone/osc requirements and our tests needing to skip a bunch of things if those aren't available. i just felt like i wasted enough time on trying to make it work | 22:00 |
| timburke | all right, we're at time | 22:00 |
| timburke | thank you all for coming, and thank you for working on swift! | 22:00 |
| timburke | #endmeeting | 22:00 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 22:00 | |
| openstack | Meeting ended Wed Feb 24 22:00:33 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 22:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/swift/2021/swift.2021-02-24-21.00.html | 22:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/swift/2021/swift.2021-02-24-21.00.txt | 22:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/swift/2021/swift.2021-02-24-21.00.log.html | 22:00 |
| *** zaitcev has left #openstack-meeting | 22:00 | |
| *** acoles has left #openstack-meeting | 22:00 | |
| *** rh-jelabarre has quit IRC | 22:08 | |
| *** rcernin has joined #openstack-meeting | 22:15 | |
| *** mlavalle has joined #openstack-meeting | 22:36 | |
| *** e0ne has quit IRC | 23:17 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!