| *** jamesmcarthur has quit IRC | 00:17 | |
| *** tosky has quit IRC | 00:26 | |
| *** yasufum has joined #openstack-meeting | 00:30 | |
| *** mlavalle has quit IRC | 01:00 | |
| *** jamesmcarthur has joined #openstack-meeting | 01:19 | |
| *** jamesdenton has quit IRC | 01:26 | |
| *** jamesden_ has joined #openstack-meeting | 01:27 | |
| *** jmasud has quit IRC | 01:42 | |
| *** jmasud has joined #openstack-meeting | 01:43 | |
| *** ociuhandu has joined #openstack-meeting | 01:45 | |
| *** ociuhandu has quit IRC | 01:50 | |
| *** rcernin has quit IRC | 02:01 | |
| *** macz_ has quit IRC | 02:02 | |
| *** rcernin has joined #openstack-meeting | 02:05 | |
| *** jamesmcarthur has quit IRC | 02:32 | |
| *** SotK has quit IRC | 02:36 | |
| *** SotK has joined #openstack-meeting | 02:37 | |
| *** jamesmcarthur has joined #openstack-meeting | 02:39 | |
| *** rcernin has quit IRC | 02:39 | |
| *** rcernin has joined #openstack-meeting | 02:42 | |
| *** macz_ has joined #openstack-meeting | 02:49 | |
| *** rcernin has quit IRC | 02:51 | |
| *** macz_ has quit IRC | 02:54 | |
| *** rcernin has joined #openstack-meeting | 03:05 | |
| *** rcernin has quit IRC | 03:12 | |
| *** jamesmcarthur has quit IRC | 03:19 | |
| *** jamesmcarthur has joined #openstack-meeting | 03:21 | |
| *** rcernin has joined #openstack-meeting | 03:23 | |
| *** jamesmcarthur has quit IRC | 03:23 | |
| *** jamesmcarthur has joined #openstack-meeting | 03:23 | |
| *** rcernin has quit IRC | 03:24 | |
| *** rcernin has joined #openstack-meeting | 03:24 | |
| *** jmasud has quit IRC | 03:26 | |
| *** jmasud has joined #openstack-meeting | 03:42 | |
| *** rh-jelabarre has quit IRC | 04:10 | |
| *** e0ne has joined #openstack-meeting | 04:12 | |
| *** e0ne has quit IRC | 04:12 | |
| *** jamesden_ has quit IRC | 04:36 | |
| *** jamesdenton has joined #openstack-meeting | 04:36 | |
| *** yasufum has quit IRC | 04:53 | |
| *** jmasud has quit IRC | 05:02 | |
| *** udesale has joined #openstack-meeting | 05:04 | |
| *** ociuhandu has joined #openstack-meeting | 05:22 | |
| *** ociuhandu has quit IRC | 05:26 | |
| *** yasufum has joined #openstack-meeting | 05:27 | |
| *** jmasud has joined #openstack-meeting | 05:29 | |
| *** evrardjp has quit IRC | 05:33 | |
| *** evrardjp has joined #openstack-meeting | 05:33 | |
| *** jamesmcarthur has quit IRC | 05:47 | |
| *** gyee has quit IRC | 05:52 | |
| *** zbr6 has joined #openstack-meeting | 06:04 | |
| *** zbr has quit IRC | 06:06 | |
| *** zbr6 is now known as zbr | 06:06 | |
| *** jamesdenton has quit IRC | 06:21 | |
| *** jamesden_ has joined #openstack-meeting | 06:22 | |
| *** e0ne has joined #openstack-meeting | 06:24 | |
| *** e0ne has quit IRC | 06:24 | |
| *** jmasud has quit IRC | 06:25 | |
| *** jmasud has joined #openstack-meeting | 06:43 | |
| *** ralonsoh has joined #openstack-meeting | 06:51 | |
| *** ociuhandu has joined #openstack-meeting | 07:02 | |
| *** ociuhandu has quit IRC | 07:06 | |
| *** ociuhandu has joined #openstack-meeting | 07:08 | |
| *** ociuhandu has quit IRC | 07:12 | |
| *** slaweq has joined #openstack-meeting | 07:13 | |
| *** jmasud has quit IRC | 07:21 | |
| *** jmasud has joined #openstack-meeting | 07:25 | |
| *** rcernin has quit IRC | 07:40 | |
| *** lpetrut has joined #openstack-meeting | 07:41 | |
| *** david-lyle has joined #openstack-meeting | 07:47 | |
| *** rcernin has joined #openstack-meeting | 07:47 | |
| *** jamesmcarthur has joined #openstack-meeting | 07:47 | |
| *** dklyle has quit IRC | 07:49 | |
| *** jamesmcarthur has quit IRC | 07:52 | |
| *** belmoreira has joined #openstack-meeting | 08:04 | |
| *** rcernin has quit IRC | 08:06 | |
| *** dklyle_ has joined #openstack-meeting | 08:08 | |
| *** david-lyle has quit IRC | 08:10 | |
| *** ociuhandu has joined #openstack-meeting | 08:11 | |
| *** jmasud has quit IRC | 08:13 | |
| *** rcernin has joined #openstack-meeting | 08:17 | |
| *** tosky has joined #openstack-meeting | 08:33 | |
| *** mahatic has quit IRC | 08:36 | |
| *** ociuhandu has joined #openstack-meeting | 08:38 | |
| *** ociuhandu has quit IRC | 08:42 | |
| *** jamesden_ has quit IRC | 08:44 | |
| *** jamesdenton has joined #openstack-meeting | 08:46 | |
| *** xinranwang has joined #openstack-meeting | 08:47 | |
| *** tosky_ has joined #openstack-meeting | 08:52 | |
| *** tosky is now known as Guest86814 | 08:53 | |
| *** tosky_ is now known as tosky | 08:53 | |
| *** Guest86814 has quit IRC | 08:55 | |
| *** ociuhandu has joined #openstack-meeting | 08:57 | |
| *** rcernin has quit IRC | 09:01 | |
| *** rcernin has joined #openstack-meeting | 09:28 | |
| *** rcernin has quit IRC | 09:47 | |
| *** yasufum has quit IRC | 09:50 | |
| *** yasufum has joined #openstack-meeting | 09:50 | |
| *** udesale_ has joined #openstack-meeting | 09:59 | |
| *** ociuhandu has quit IRC | 10:01 | |
| *** ociuhandu has joined #openstack-meeting | 10:02 | |
| *** udesale has quit IRC | 10:03 | |
| *** rcernin has joined #openstack-meeting | 10:04 | |
| *** ociuhandu has quit IRC | 10:11 | |
| *** ociuhandu has joined #openstack-meeting | 10:16 | |
| *** rcernin has quit IRC | 10:20 | |
| *** ociuhandu has quit IRC | 10:25 | |
| *** e0ne has joined #openstack-meeting | 10:30 | |
| *** ociuhandu has joined #openstack-meeting | 10:46 | |
| *** e0ne has quit IRC | 11:03 | |
| *** rcernin has joined #openstack-meeting | 11:07 | |
| *** jawad_axd has joined #openstack-meeting | 11:17 | |
| *** ociuhandu has quit IRC | 11:51 | |
| *** yasufum has quit IRC | 11:53 | |
| *** rcernin has quit IRC | 11:58 | |
| *** macz_ has joined #openstack-meeting | 12:06 | |
| *** macz_ has quit IRC | 12:11 | |
| *** jamesdenton has quit IRC | 12:13 | |
| *** jamesdenton has joined #openstack-meeting | 12:14 | |
| *** rcernin has joined #openstack-meeting | 12:23 | |
| *** emmadavis has joined #openstack-meeting | 12:27 | |
| *** emmadavis has joined #openstack-meeting | 12:28 | |
| *** rcernin has quit IRC | 12:29 | |
| *** rcernin has joined #openstack-meeting | 12:41 | |
| *** rcernin has quit IRC | 12:46 | |
| *** rcernin has joined #openstack-meeting | 12:52 | |
| *** yasufum has joined #openstack-meeting | 12:53 | |
| *** rcernin has quit IRC | 12:57 | |
| *** rcernin has joined #openstack-meeting | 12:58 | |
| *** openstack has joined #openstack-meeting | 13:16 | |
| *** ChanServ sets mode: +o openstack | 13:16 | |
| *** rosmaita has joined #openstack-meeting | 13:27 | |
| *** rh-jelabarre has joined #openstack-meeting | 13:39 | |
| *** dklyle_ has quit IRC | 13:43 | |
| *** ociuhandu has joined #openstack-meeting | 13:44 | |
| *** manpreet has quit IRC | 13:46 | |
| *** mjturek has joined #openstack-meeting | 13:47 | |
| *** yasufum has quit IRC | 13:53 | |
| abhishekk | #startmeeting glance | 14:00 |
|---|---|---|
| openstack | Meeting started Thu Mar 11 14:00:10 2021 UTC and is due to finish in 60 minutes. The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:00 |
| *** openstack changes topic to " (Meeting topic: glance)" | 14:00 | |
| openstack | The meeting name has been set to 'glance' | 14:00 |
| abhishekk | #topic roll call | 14:00 |
| *** openstack changes topic to "roll call (Meeting topic: glance)" | 14:00 | |
| abhishekk | #link https://etherpad.openstack.org/p/glance-team-meeting-agenda | 14:00 |
| abhishekk | o/ | 14:00 |
| rosmaita | o/ | 14:01 |
| abhishekk | Looks like just two of us :D | 14:01 |
| abhishekk | anyways we have very short agenda, so we could wrap this up early | 14:01 |
| rosmaita | works for me! | 14:01 |
| abhishekk | lets start then | 14:02 |
| abhishekk | #topic Updates | 14:02 |
| *** openstack changes topic to "Updates (Meeting topic: glance)" | 14:02 | |
| abhishekk | I have created planning etherpad for Xena | 14:02 |
| jokke | o/ | 14:02 |
| abhishekk | cool, jokke is here as well | 14:02 |
| abhishekk | #link https://etherpad.opendev.org/p/xena-ptg-glance-planning | 14:02 |
| abhishekk | Kindly add your name if you are planning to attend the PTG | 14:03 |
| abhishekk | also add topics for discussion if you have any | 14:03 |
| abhishekk | I have booked 1400 to 1700 UTC from Tuesday to Friday for our discussion | 14:03 |
| abhishekk | I will discuss with rosmaita if we need to coordinate for cinder-glance session and decide time for the same | 14:04 |
| abhishekk | Moving ahead | 14:04 |
| jokke | sounds good | 14:04 |
| abhishekk | cool | 14:04 |
| abhishekk | #topic release/periodic jobs update | 14:04 |
| *** openstack changes topic to "release/periodic jobs update (Meeting topic: glance)" | 14:04 | |
| abhishekk | This is M3 release week | 14:04 |
| abhishekk | python-glanceclient is released today | 14:04 |
| abhishekk | Glance is also in good shape to tag M3 | 14:05 |
| abhishekk | just couple of patches are open and 1 of them is related to config refresh | 14:05 |
| abhishekk | so either of you please have a look at it and please review | 14:05 |
| rosmaita | ok, that should be an easy one | 14:05 |
| abhishekk | Glance status - https://etherpad.opendev.org/p/glance-wallaby-m3-status | 14:06 |
| abhishekk | I am planning to tag M3 on 15th March, that is Monday | 14:06 |
| abhishekk | Periodic jobs are green, so we are pretty much good | 14:07 |
| abhishekk | I guess I have covered next topic as well | 14:07 |
| abhishekk | any questions about release planning? | 14:07 |
| abhishekk | I take that as no | 14:08 |
| abhishekk | Moving into open discussion | 14:09 |
| abhishekk | #topic Open discussion | 14:09 |
| *** openstack changes topic to "Open discussion (Meeting topic: glance)" | 14:09 | |
| abhishekk | rosmaita, jokke anything you want to discuss | 14:09 |
| jokke | I have one | 14:09 |
| abhishekk | ok, stage is yours | 14:09 |
| jokke | #link https://wiki.openstack.org/wiki/OSSN/OSSN-0088 | 14:10 |
| jokke | The security note you issued earlier this week | 14:10 |
| abhishekk | right | 14:10 |
| *** Steap_ has joined #openstack-meeting | 14:10 | |
| jokke | I'm pretty concerned about the impact that has with no fixes not even investigation of actual attack vector with just blanket statement of "turn the whole api off" | 14:11 |
| jokke | The impact that statement has to any deployment relying metadefs and being audited is big | 14:12 |
| abhishekk | This is taken as a preventive action with advisory to open those in the deployments with notice | 14:13 |
| abhishekk | If the deployers are willing to take risks they can enable metadef API's in there environment | 14:15 |
| abhishekk | I don't think that this will be a concern, also we are planning to fix those in X milestone 1 and will re-enable those by default | 14:16 |
| jokke | "turn off your service" advisory based on something that has no clear attack vector is not preventive action. It's lifting embargo on potential issue without investigation and telling the users that it's their problem now. | 14:16 |
| rosmaita | well, it seems like there are 2 different issues: the DOS can be averted by restricting the create policies | 14:17 |
| jokke | thus the concern, and that's why I pressed from the very beginning that Lance's findings should be _investigated_ as private security bugs so the details are not discussed publicly before they can be confirmed and addressed | 14:17 |
| abhishekk | So, actually we have assessed the situation, one of the bug was open since (DoS related) long, and our policy structure is pretty complex to provide fix at the moment | 14:17 |
| abhishekk | and that is the reason we have decided to go public with issuing security note | 14:19 |
| jokke | but the reality is, it's out there and thrown at our users to deal with. Just wanted to express my concerns how it was handled. | 14:19 |
| rosmaita | it might be a good idea to reach out to operators and see if someone who uses metadefs can attend a PTG session to give us a walkthrough | 14:20 |
| rosmaita | the implementors are long gone, and it would be good to understand how people are using these things | 14:20 |
| abhishekk | also if you look at the facts (judging by the one bug which was open since couple of cycles) we don't have that much bandwidth to work on urgent basis and provide fix | 14:20 |
| abhishekk | rosmaita, is it possible for you to create survey (I know you are very very busy at the moment) | 14:21 |
| jokke | abhishekk: I think that would be great question for the OpenStack user survey | 14:21 |
| rosmaita | abhishekk: i was thinking more just an email with [ops][glance][security] in the subject line | 14:21 |
| jokke | or that | 14:22 |
| rosmaita | yeah, the OS survey isn't very fine grained | 14:22 |
| abhishekk | jokke, will you do that? | 14:22 |
| rosmaita | it would be good to have a use case in mind before modifying them | 14:22 |
| abhishekk | +1 | 14:22 |
| rosmaita | i can draft something in an etherpad, though not before noon tomorrow | 14:23 |
| abhishekk | cool | 14:23 |
| abhishekk | I will remind you this time tomorrow | 14:23 |
| rosmaita | please do! | 14:24 |
| abhishekk | :D | 14:24 |
| abhishekk | anything else | 14:24 |
| jokke | nothing from me | 14:24 |
| rosmaita | look here (eventually) https://etherpad.opendev.org/p/glance-xena-ptg-metadefs | 14:24 |
| abhishekk | noted | 14:24 |
| abhishekk | Lets wrap up for today then | 14:25 |
| abhishekk | thank you all | 14:25 |
| rosmaita | bye! | 14:25 |
| jokke | thanks | 14:26 |
| abhishekk | #endmeeting | 14:26 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 14:26 | |
| openstack | Meeting ended Thu Mar 11 14:26:15 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:26 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/glance/2021/glance.2021-03-11-14.00.html | 14:26 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/glance/2021/glance.2021-03-11-14.00.txt | 14:26 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/glance/2021/glance.2021-03-11-14.00.log.html | 14:26 |
| *** yasufum has joined #openstack-meeting | 14:48 | |
| *** Steap_ is now known as Steap | 14:49 | |
| *** rcernin has joined #openstack-meeting | 14:59 | |
| *** rcernin has quit IRC | 15:04 | |
| *** spotz has joined #openstack-meeting | 15:10 | |
| *** ociuhandu has quit IRC | 15:16 | |
| *** ociuhandu has joined #openstack-meeting | 15:17 | |
| *** ociuhandu has quit IRC | 15:22 | |
| *** ociuhandu has joined #openstack-meeting | 15:28 | |
| *** lpetrut has quit IRC | 15:29 | |
| *** ociuhandu has quit IRC | 15:34 | |
| *** jmasud has joined #openstack-meeting | 15:39 | |
| *** jamesmcarthur has joined #openstack-meeting | 15:46 | |
| *** dklyle has joined #openstack-meeting | 15:47 | |
| *** ociuhandu has joined #openstack-meeting | 15:48 | |
| *** timburke_ has quit IRC | 15:49 | |
| *** timburke_ has joined #openstack-meeting | 15:50 | |
| *** ociuhandu has quit IRC | 15:57 | |
| *** ociuhandu has joined #openstack-meeting | 15:57 | |
| *** macz_ has joined #openstack-meeting | 16:00 | |
| *** macz_ has quit IRC | 16:01 | |
| *** macz_ has joined #openstack-meeting | 16:01 | |
| *** MapspaM is now known as SpamapS | 16:04 | |
| *** udesale_ has quit IRC | 16:11 | |
| *** jmasud has quit IRC | 16:13 | |
| *** jmasud has joined #openstack-meeting | 16:28 | |
| *** jamesmcarthur has quit IRC | 16:28 | |
| *** jamesmcarthur has joined #openstack-meeting | 16:30 | |
| *** yasufum has quit IRC | 16:47 | |
| *** belmoreira has quit IRC | 16:53 | |
| *** rcernin has joined #openstack-meeting | 17:00 | |
| *** mlavalle has joined #openstack-meeting | 17:02 | |
| *** belmoreira has joined #openstack-meeting | 17:06 | |
| *** bbowen has quit IRC | 17:07 | |
| *** jamesdenton has quit IRC | 17:16 | |
| *** jamesdenton has joined #openstack-meeting | 17:16 | |
| *** rcernin has quit IRC | 17:16 | |
| *** gyee has joined #openstack-meeting | 17:35 | |
| *** jmasud has quit IRC | 18:14 | |
| *** mlavalle has quit IRC | 18:23 | |
| *** mlavalle has joined #openstack-meeting | 18:24 | |
| *** ociuhandu has quit IRC | 18:32 | |
| *** mlavalle has quit IRC | 18:38 | |
| *** ralonsoh has quit IRC | 18:48 | |
| *** jamesmcarthur has quit IRC | 18:52 | |
| *** jamesmcarthur has joined #openstack-meeting | 18:55 | |
| *** verdurin has quit IRC | 19:05 | |
| *** ociuhandu has joined #openstack-meeting | 19:07 | |
| *** ociuhandu has quit IRC | 19:15 | |
| *** ociuhandu has joined #openstack-meeting | 19:18 | |
| *** jawad_axd has quit IRC | 19:18 | |
| *** ociuhandu has quit IRC | 19:25 | |
| *** belmoreira has quit IRC | 19:31 | |
| *** belmoreira has joined #openstack-meeting | 19:31 | |
| *** ociuhandu has joined #openstack-meeting | 19:40 | |
| *** e0ne has joined #openstack-meeting | 19:45 | |
| *** rh-jelabarre has quit IRC | 19:47 | |
| *** jamesmcarthur has quit IRC | 19:47 | |
| *** jamesmcarthur has joined #openstack-meeting | 19:48 | |
| *** ociuhandu has quit IRC | 19:51 | |
| *** rh-jelabarre has joined #openstack-meeting | 19:52 | |
| *** jamesmcarthur has quit IRC | 19:53 | |
| *** rcernin has joined #openstack-meeting | 20:00 | |
| *** xinranwang has quit IRC | 20:11 | |
| *** bbowen has joined #openstack-meeting | 20:32 | |
| *** e0ne has quit IRC | 20:36 | |
| *** jamesdenton has quit IRC | 20:53 | |
| *** jamesdenton has joined #openstack-meeting | 20:53 | |
| *** slaweq has quit IRC | 20:56 | |
| *** ociuhandu has joined #openstack-meeting | 20:56 | |
| *** rcernin has quit IRC | 21:04 | |
| *** ociuhandu has quit IRC | 21:04 | |
| *** e0ne has joined #openstack-meeting | 21:06 | |
| *** rledisez has joined #openstack-meeting | 21:17 | |
| *** belmoreira has quit IRC | 21:23 | |
| *** rcernin has joined #openstack-meeting | 21:35 | |
| *** rcernin has quit IRC | 21:51 | |
| *** rcernin has joined #openstack-meeting | 21:54 | |
| *** rcernin has quit IRC | 22:00 | |
| *** rcernin has joined #openstack-meeting | 22:00 | |
| *** jmasud has joined #openstack-meeting | 22:27 | |
| *** ociuhandu has joined #openstack-meeting | 22:45 | |
| *** ociuhandu has quit IRC | 22:51 | |
| *** smcginnis has quit IRC | 23:04 | |
| *** mattia has quit IRC | 23:07 | |
| *** mattia has joined #openstack-meeting | 23:08 | |
| *** smcginnis has joined #openstack-meeting | 23:15 | |
| *** jamesmcarthur has joined #openstack-meeting | 23:16 | |
| *** e0ne has quit IRC | 23:16 | |
| *** jmasud has quit IRC | 23:19 | |
| *** jamesdenton has quit IRC | 23:23 | |
| *** jamesdenton has joined #openstack-meeting | 23:23 | |
| *** rosmaita has left #openstack-meeting | 23:25 | |
| *** jmasud has joined #openstack-meeting | 23:27 | |
| *** smcginnis has quit IRC | 23:28 | |
| *** jamesmcarthur has quit IRC | 23:41 | |
| *** timburke_ has quit IRC | 23:45 | |
| *** jmasud has quit IRC | 23:50 | |
| *** jamesmcarthur has joined #openstack-meeting | 23:52 | |
| *** jmasud has joined #openstack-meeting | 23:54 | |
| *** jamesmcarthur has quit IRC | 23:57 | |
| *** mlavalle has joined #openstack-meeting | 23:59 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!