Thursday, 2021-11-18

*** soniya29|ruck is now known as soniya29|ruck|lunch07:13
*** soniya29|ruck|lunch is now known as soniya29|ruck08:11
abhishekk#startmeeting glance14:00
opendevmeetMeeting started Thu Nov 18 14:00:02 2021 UTC and is due to finish in 60 minutes.  The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
opendevmeetThe meeting name has been set to 'glance'14:00
abhishekk#topic roll call14:00
abhishekk#link https://etherpad.openstack.org/p/glance-team-meeting-agenda14:00
abhishekko/14:00
abhishekkwaiting for others to join14:00
pdeoreo/14:02
abhishekklets wait couple of minutes more14:02
rosmaitao/14:02
abhishekkOk, lets start, others may/can join in between14:04
abhishekk#topic Announcement14:04
abhishekkOpenInfra summit is back14:04
rosmaitado you know whether the PTG will be there, too?14:04
abhishekkSo in person OpenInfra events are back14:04
abhishekkat the moment there is only summit14:05
rosmaitaok14:05
abhishekkI think PTG is still under discussion14:05
abhishekkFor early registration you can use,  https://openinfra.dev/summit/14:05
abhishekkIt is between 7 to 9 June and in Berlin14:05
abhishekkHopefully we will be able to meet in person this time 14:06
jokke_fingers crossed14:06
abhishekk++14:06
abhishekkMoving ahead14:06
abhishekk#topic release/periodic jobs update14:06
abhishekkThis is milestone 1 release week14:06
abhishekkand we are not releasing anything this time14:07
abhishekkSo we are good \o/14:07
jokke_:P14:07
jokke_I guess our m1 targets didn't make it ;)14:07
abhishekk:D14:07
abhishekkAND periodic jobs all are green as well14:07
jokke_uuh14:08
jokke_that's cool14:08
abhishekkI saw couple of timeouts on glance patches this week, but that is due to heavy queue in the gate14:08
abhishekkMoving to next topic14:08
abhishekk#topic Catching up with reviews and specs14:08
abhishekkWe have couple of specs up for reviews14:09
abhishekkSo requesting all of you to kindly provide your feedback on them14:09
abhishekkAFAIK, Quota usage API, metadef tag append and resource type modification specs are up14:09
abhishekkPlease put some time in reviewing them14:10
abhishekkmoving ahead14:10
Mitya_Eremeevsorry14:10
Mitya_EremeevCould you disscuss my patch ?14:10
abhishekkMitya_Eremeev, your topic is next so we can discuss it at that time14:11
Mitya_Eremeevsorry)))14:11
abhishekkno problem14:11
abhishekk#topic Secure RBAC - Impact, what's next?14:11
abhishekklbragstad, if you are around, can you put some light on current Yoga goal for RBAC14:12
abhishekkDoes addition of project-manager role has any impact for glance project personas14:13
rosmaitai thought project-manager was a stretch goal for Yoga?14:13
abhishekkyeah, I think so as well14:14
rosmaitahere's the proposal: https://review.opendev.org/c/openstack/governance/+/81515814:14
rosmaitai haven't read the latest version, but looks like dansmith has14:14
abhishekkright, and it has two specific targets14:15
abhishekk1 is implementation of project-manager role14:15
abhishekk2 openstack client compatibility14:15
lbragstado/14:15
lbragstadi'm catching up on that today14:15
abhishekkcool, here he is14:15
lbragstadand addressing feedback14:15
lbragstadbut the biggest change from previous versions is that,14:16
abhishekklbragstad, ack, I think we can sync some time early next week (if you have time)14:16
lbragstadproject-admin will remain an operator specific persona14:16
abhishekkok14:18
abhishekkwhen is next RBAC open office hours meeting?14:18
lbragstadthe system personas are truly reserved for system-specific APIs (which I don't think glance has?)14:18
* lbragstad checks14:18
abhishekkright14:19
lbragstadthe TC is discussing the goal today 14:19
lbragstadin about 3 hours14:19
abhishekkOk, I will try to be there to clear some doubts14:19
abhishekkthank you14:19
lbragstadin 2.5 hours 14:19
lbragstadactually14:19
abhishekkand also if you have some time, we can sync as per your availability as well14:20
lbragstad++ sounds good14:20
abhishekknext week *14:20
abhishekkthank you, please let me know14:20
lbragstadi'll be around all day monday - wednesday14:20
lbragstadso - i can make any time work14:20
abhishekkGreat, I will ping you on monday then14:20
abhishekkmoving ahead14:21
abhishekk#topic Discussion of spec lite14:21
abhishekkAdd ability to purge all needed rows by glance-manage script14:21
abhishekkMitya_Eremeev, stage is yours14:21
abhishekkjust to put some light14:22
Mitya_Eremeevthanks14:22
abhishekkMitya_Eremeev, reported a bug for the same, and as it is enhancement I have asked him for spec lite14:22
abhishekk#link https://review.opendev.org/c/openstack/glance-specs/+/81793814:22
Mitya_Eremeevhttps://review.opendev.org/c/openstack/glance/+/81369114:22
abhishekkI do think we can have one option max-rows for glance db purge operation14:23
abhishekkMitya_Eremeev, have you tried that ?14:23
Mitya_Eremeevmax-rows have nothing in common with number of all deleted rows14:23
Mitya_Eremeevit's just some limitation how many rows will be deleted by script14:24
abhishekkok14:24
abhishekkso you just want to delete/purge all rows in one command14:25
Mitya_Eremeevso no guarantess that all deleted rows will be purged14:25
Mitya_EremeevYes, I think user should have ability to purge in one pass14:25
jokke_So currently we're checking that max-rows is at least one. We could be consisten and use -1 there14:26
abhishekkack, so we have a spec lite up for the same, please review it and give some early feedback to Mitya_Eremeev 14:26
Mitya_Eremeevotherwise user wil do some monkey job just by launching script many times until script deleted all14:26
abhishekkso -1 means delete all ?14:26
Mitya_Eremeevno14:26
jokke_abhishekk: that's how our other limits works14:27
abhishekkMitya_Eremeev, he is giving suggestion 14:27
jokke_so yeah, --max-rows -1 and --age-in-days 0 would equal to purge all14:27
Mitya_Eremeevif pass key --purhe_all then --max row is just number of rows in one step14:28
jokke_no need for an extra parameter for that nor breaking anyone14:28
Mitya_EremeevI don't think that max-rows allows negative values14:28
jokke_Mitya_Eremeev: that's what I'm saying .... don't add the extra --purhe-all, but allow -1 as --max-rows14:29
Mitya_Eremeevunderstood14:29
abhishekkMitya_Eremeev, we can modify it to allow14:29
Mitya_Eremeevbut we should not do that14:29
abhishekkjokke_, please add this suggestion on the speclite14:29
jokke_simple way to indicate that we don't want to patch it ... if we're looping anyways doing it in patches is just tons of extra queries into the db that are not needed14:30
jokke_abhishekk: sure14:30
abhishekkany specific reason for not doing it Mitya_Eremeev 14:30
Mitya_Eremeevsometimes db can be very huge and sometimes it's better to divide deleting in steps14:30
dansmithin nova we have a date-based filter as well, so you can say "older than last month"14:31
Mitya_Eremeevso max-rows helps regarding performance14:31
abhishekkdansmith, I think similar we have age-in-days option14:31
dansmithokay cool, I'm not sure why anyone would use max-rows if they have an age-based option14:32
jokke_dansmith: well we for some reason default that to 100 rows14:32
Mitya_Eremeevmax-rows is just for db performance14:32
dansmithjokke_: oh max-rows counts against an age-based purge as well?14:32
Mitya_Eremeevyes14:33
dansmithyeah, that seems weird to me14:33
jokke_dansmith: yeah yeah ... by default it does only 100 rows and you loop it as needed or give it sufficient value14:33
jokke_makes no sense14:33
dansmithmaybe loop and do $max_rows at a time until there are no more that satisfy the age query?14:33
dansmithI mean, make the tool do that for them14:33
abhishekkI think if age-in-days is mentioned then it should ignore max-rows14:33
jokke_as it just introduces more load for db to loop the data and identify those rows14:33
abhishekkI think its time to revisit glance-manage utility tool and do some enhancements there as well14:34
dansmithabhishekk: well, depends on how the loop works - but max-rows may be desirable to avoid loading a billion things into memory just to delete them,14:35
dansmithbut the user should expect it to behave sanely, regardless of internal batching, IMHO14:35
jokke_abhishekk: they both have default values14:35
jokke_dansmith: but that should be handled in the db_api side, rather than from the command client14:36
abhishekkhmm, I need to recheck how it works, we never looked back once we added purge image table separately14:36
jokke_batching I mean14:36
jokke_if needed14:36
dansmithjokke_: as long as it's not handled by the user in the shell, I agree :)14:36
abhishekk:D14:36
jokke_but any case the 100 line limit is ridiculous14:37
abhishekkWe can continue this discussion on spec lite14:37
jokke_mhm14:37
abhishekkand if required we can change it to spec where we can target all the improvements at once14:37
abhishekkMitya_Eremeev, thank you for bringing this up14:37
Mitya_EremeevThank you all !14:38
abhishekkmoving ahead14:38
abhishekk#topic in-flight encryption without Barbican Consumer API14:38
abhishekkrosmaita, this is you14:38
rosmaitayeah, my -1 on that may be preventing people from looking at it14:39
abhishekkI think I have added in PTG etherpad some feedback but forget to add it to spec before going on Vacation14:39
rosmaita-1 because it's not targeted for yoga14:39
abhishekkwill again have a look after the meeting or early tomorrow 14:40
rosmaitabut i was wondering if dansmith and jokke_ still have reservations about doing this without the secret consumer API?14:40
abhishekkOnly reservation is whether we should allow commented code as place holder or we should have dependent patch instead of having commented code in code base14:40
dansmith-1 on commented code, but I'm not up to date on the current state14:41
rosmaitai agree with dansmith on that14:41
abhishekkYeah, its better to have dependent patch 14:42
rosmaitawhat is it going to depend on?14:42
jokke_rosmaita: as actual stable feature yes, I've been promoting doing this as experimental so the development work can move on while waiting for the consumer api for over cycle now ;)14:42
rosmaitaok, my only interest is that i want them to get this thing to the state where they can run end-to-end CI tests14:43
jokke_rosmaita: the non-exiting release patch of barbican to release the consumer api ;)14:43
abhishekkhttps://review.opendev.org/c/openstack/glance/+/705445/4/glance/api/v2/images.py14:43
rosmaitabecause there are a bunch of edge cases that will have to be dealt with, i suspect14:43
abhishekkrosmaita, we can move commented code from this patch to a separate patch14:43
rosmaitai wonder about that patch14:44
rosmaitathe comment i mean14:44
rosmaitai thought castellan was a backend-neutral library14:44
rosmaitaso unlikely to have support for this thing14:44
rosmaitait doesn't even support naming a secret (unless the version i use is way out of date)14:45
rosmaitathat's a separate issue, i guess14:45
abhishekkright14:46
abhishekkis encryption weekly meeting still going on?14:46
rosmaitayes, though i keep missing it because i am stupid about the time change14:46
rosmaitamondays at 1300 UTC, i think14:47
abhishekklet me know the timing I will join it (next time)14:47
abhishekkI think it is on Monday14:47
abhishekkOk, will try to be there this time14:47
rosmaitayes, 1300 utc in #openstack-meeting14:47
abhishekkmoving ahead14:47
rosmaitathanks!14:48
abhishekkcool, thank you14:48
abhishekk#topic Open discussion14:48
abhishekkI need to revisit PTG discussions to start up pending works14:48
abhishekkI guess Cache API is one of them14:48
abhishekkSo in next meeting we will have some targets for Milestone 214:49
abhishekkthat's it from me14:49
abhishekkKindly put some time in spec reviews14:49
abhishekkanything else ?14:51
jokke_not from me14:52
rosmaitanot me14:53
dansmithnay14:53
abhishekkcool, lets wrap up for the day14:54
abhishekkthank you all14:54
abhishekkhave a great week ahead14:54
jokke_thanks14:55
abhishekk#endmeeting14:55
opendevmeetMeeting ended Thu Nov 18 14:55:23 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:55
opendevmeetMinutes:        https://meetings.opendev.org/meetings/glance/2021/glance.2021-11-18-14.00.html14:55
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/glance/2021/glance.2021-11-18-14.00.txt14:55
opendevmeetLog:            https://meetings.opendev.org/meetings/glance/2021/glance.2021-11-18-14.00.log.html14:55
dansmithif anyone is here for the policy meeting, we're in meetpad18:05
lbragstadjust a heads up the secure-rbac meeting is in https://meetpad.opendev.org/secure-rbac18:05
dansmithhttps://meetpad.opendev.org/secure-rbac18:05

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!