| *** ejat has quit IRC | 00:59 | |
| kota_ | enjoy notmyname on your vacation | 01:19 |
|---|---|---|
| kota_ | good morning the world | 01:19 |
| mattoliverau | kota_: morning | 01:59 |
| *** psachin has joined #openstack-swift | 02:44 | |
| kota_ | mattoliverau: o/ | 02:55 |
| *** viks_ has joined #openstack-swift | 04:47 | |
| *** rcernin has quit IRC | 04:54 | |
| *** rcernin has joined #openstack-swift | 04:54 | |
| *** psachin has quit IRC | 05:04 | |
| *** openstackgerrit has quit IRC | 05:18 | |
| *** links has joined #openstack-swift | 05:30 | |
| *** quicker_io has joined #openstack-swift | 05:39 | |
| *** pavelkv has joined #openstack-swift | 05:55 | |
| *** pcaruana has joined #openstack-swift | 05:59 | |
| pavelkv | lukaslemes: yes, it is possible, but be sure that Keystone is production ready (becaouse swauth tokens are checked in Keystone too). It is important to use authtoken and keystoneauth before swauth | 06:01 |
| pavelkv | for example use: pipeline = catch_errors gatekeeper healthcheck proxy-logging cache container_sync bulk tempurl ratelimit authtoken keystoneauth swauth container-quotas account-quotas copy slo proxy-logging proxy-server | 06:02 |
| pavelkv | And set delay_auth_decision = True in filter:authtoken section | 06:02 |
| *** pcaruana has quit IRC | 06:05 | |
| *** quicker_io has quit IRC | 06:16 | |
| *** lukaslemes has joined #openstack-swift | 06:17 | |
| lukaslemes | hi, thx; | 06:17 |
| *** pcaruana has joined #openstack-swift | 06:19 | |
| lukaslemes | pavelkv: same pipeline config when i would use tempauth?? and is it best practies for all auth metohod difrent reseler_prefix? Becuse when i dont set it i get errors | 06:19 |
| *** rcernin has quit IRC | 07:03 | |
| *** psachin has joined #openstack-swift | 07:14 | |
| mattoliverau | lukaslemes: all auths need a different reseller_prefix, that's what reseller_prefix's are for. | 07:16 |
| *** lukaslemes has quit IRC | 07:20 | |
| *** ccamacho has joined #openstack-swift | 07:40 | |
| *** pcaruana has quit IRC | 07:43 | |
| *** cbartz has joined #openstack-swift | 07:55 | |
| *** quicker_io has joined #openstack-swift | 07:55 | |
| *** mikecmpbll has joined #openstack-swift | 07:56 | |
| *** pcaruana has joined #openstack-swift | 07:57 | |
| *** cbartz has quit IRC | 08:00 | |
| *** cbartz has joined #openstack-swift | 08:00 | |
| *** mikecmpbll has quit IRC | 08:05 | |
| *** mikecmpbll has joined #openstack-swift | 08:08 | |
| *** quicker_io has quit IRC | 08:14 | |
| *** psachin has quit IRC | 08:17 | |
| *** psachin has joined #openstack-swift | 08:20 | |
| *** ccamacho has quit IRC | 09:21 | |
| *** ccamacho has joined #openstack-swift | 09:39 | |
| pavelkv | lukaslemes: I don't know if it is good practise. We have the same prefix because we migrate users from swauth to keystone so the ID must be the same. If you would like to have swauth and keystone projects simultaneously, you can - swauth creates IDs with "-" and keystone alphanumeric only so there should not be a coflict. But admin can set ID in swauth so it is safe to configure different prefix as | 10:10 |
| pavelkv | Matt answered. | 10:10 |
| *** quicker_io has joined #openstack-swift | 10:24 | |
| *** ccamacho has quit IRC | 10:31 | |
| *** ccamacho has joined #openstack-swift | 10:32 | |
| quicker_io | hi, i have a bit trouble with config swift auth methods keystone, swauth and tempauth together. I added tempauth | 10:32 |
| quicker_io | pipline like this: authtoken keystoneauth swauth tempauth | 10:33 |
| quicker_io | and when i call pipline like this: authtoken keystoneauth swauth tempauth get 401 | 10:33 |
| quicker_io | when i call swift stat --debug -A http://127.0.0.1:8080/auth/v1.0/ -U test:testerA -K testingA -V 1 get 401 | 10:34 |
| *** threestrands has quit IRC | 10:36 | |
| *** links has quit IRC | 10:44 | |
| *** links has joined #openstack-swift | 10:49 | |
| *** mikecmpbll has quit IRC | 10:49 | |
| *** mikecmpbll has joined #openstack-swift | 10:49 | |
| *** links has quit IRC | 10:50 | |
| *** geaaru has quit IRC | 10:54 | |
| *** geaaru has joined #openstack-swift | 10:59 | |
| *** mikecmpbll has quit IRC | 11:00 | |
| *** mikecmpbll has joined #openstack-swift | 11:01 | |
| mattoliverau | quicker_io: did you set different reseller prefixes for each one? | 11:07 |
| pavelkv | quicker_io: do you have delay_auth_decision = True in filter:authtoken section? | 11:25 |
| quicker_io | mattoliverau: yes for tempauth, swauth and keystone use different prefix | 12:01 |
| quicker_io | mattoliverau: i got 401 only when use tempauth accounts, i got 401 immediately when call swift stat --debug -A http://127.0.0.1:8080/auth/v1.0/ -U test:testerA -K testingA , i dont get authtoken utl | 12:04 |
| *** jistr is now known as jistr|call | 12:32 | |
| *** psachin has quit IRC | 12:56 | |
| *** jistr|call is now known as jistr | 13:04 | |
| tdasilva | good morning | 13:23 |
| *** mvkr has quit IRC | 13:29 | |
| tdasilva | pavelkv any chance you might be able to add those instructions re keystone and swauth to the docs? | 13:31 |
| *** mvkr has joined #openstack-swift | 13:59 | |
| *** mikecmpb_ has joined #openstack-swift | 14:03 | |
| *** mikecmpbll has quit IRC | 14:05 | |
| *** ccamacho has quit IRC | 14:50 | |
| *** ccamacho has joined #openstack-swift | 14:56 | |
| *** cbartz has quit IRC | 15:13 | |
| *** quicker_io has quit IRC | 15:17 | |
| *** pcaruana has quit IRC | 15:37 | |
| *** SkyRocknRoll has joined #openstack-swift | 15:49 | |
| *** SkyRocknRoll has quit IRC | 16:00 | |
| *** geaaru has quit IRC | 16:07 | |
| *** SkyRocknRoll has joined #openstack-swift | 16:13 | |
| *** gyee has joined #openstack-swift | 16:23 | |
| *** ccamacho has quit IRC | 16:31 | |
| *** mikecmpb_ has quit IRC | 16:33 | |
| *** pcaruana has joined #openstack-swift | 16:40 | |
| *** mvkr has quit IRC | 16:48 | |
| *** itlinux has joined #openstack-swift | 16:49 | |
| *** eandersson has quit IRC | 17:32 | |
| timburke | so i'm working on cleaning up some of our gate tests, and on p 591064 AJaeger did a great job of reminding me about the cross-branch problems of project-config changes | 17:35 |
| patchbot | https://review.openstack.org/#/c/591064/ - openstack-infra/project-config - Drop legacy-swift*-dsvm-functional-identity-v3-onl... - 0h 4m 48s spent in CI | 17:35 |
| timburke | what do people think about dropping legacy-swift-dsvm-functional-identity-v3-only from stable branches? my first thought was, "oh, crap, that's right... maybe we *do* still want that..." | 17:35 |
| timburke | but the more i thought about it, it's non-voting anyway, and i don't think i've ever seen us introduce a regression on v3 support... our auth bits generally just *don't change*, and i *really* don't think they'd change on a stable branch. so maybe it's ok to just drop it? | 17:36 |
| *** ianychoi_ has joined #openstack-swift | 17:38 | |
| *** mvkr has joined #openstack-swift | 17:39 | |
| *** ianychoi has quit IRC | 17:41 | |
| *** pcaruana has quit IRC | 17:59 | |
| tdasilva | timburke: just tring to wrap my head around this...why drop only v3 jobs and not legacy-swift-dsvm-functional? AJaeger in his comment mentioned handling in our repo? could we setup the same job to run against only against stable? or even better yet, could we change project-config definition to only run against stable? | 18:15 |
| timburke | tdasilva: so legacy-swift-dsvm-functional is already v3 only for queens and beyond -- i still want to test that integration, we just don't have a way to still cover v2 going forward (short of standing up some old version of keystone... which is probably doable, but it's not a real high priority for me) | 18:19 |
| timburke | i've got another patch to get legacy-swift-dsvm-functional out of project-config, too (p 591114), and it depends on us moving the job in-tree (p 589270). but i need to learn more about how to fix up the other projects that use it and, more generally, how zuul job definitions get shared across projects | 18:20 |
| timburke | *grumble, grumble* p 591114 p 589270 | 18:22 |
| patchbot | https://review.openstack.org/#/c/591114/ - openstack-infra/project-config - Remove legacy-swift-dsvm-functional job from swift - 0h 4m 59s spent in CI | 18:22 |
| patchbot | https://review.openstack.org/#/c/589270/ - swift - Move legacy-swift-dsvm-functional job in-tree - 9h 43m 38s spent in CI | 18:22 |
| timburke | (as a side-note, i don't *really* want to land the in-tree jobs patch until there's a plan forward for the project-config changes, 'cause that'd just be wasteful to have two jobs that are ostensibly equivalent) | 18:24 |
| timburke | you can confirm the v3-only-ness by (for example) looking for the string "/v2" in http://logs.openstack.org/70/589270/11/check/legacy-swift-dsvm-functional/5a8b3d2/logs/screen-keystone.txt.gz -- it's flat-out never used | 18:27 |
| *** SkyRocknRoll has quit IRC | 18:29 | |
| *** geaaru has joined #openstack-swift | 18:31 | |
| *** geaaru has quit IRC | 19:16 | |
| *** lxkong_ has joined #openstack-swift | 19:17 | |
| *** geaaru has joined #openstack-swift | 19:19 | |
| *** geaaru has quit IRC | 19:19 | |
| *** mgagne_ has joined #openstack-swift | 19:24 | |
| *** lxkong has quit IRC | 19:25 | |
| *** serverascode_ has quit IRC | 19:25 | |
| *** tommylikehu has quit IRC | 19:25 | |
| *** ujjain has quit IRC | 19:25 | |
| *** mgagne has quit IRC | 19:25 | |
| *** Miouge has quit IRC | 19:25 | |
| *** charz has quit IRC | 19:25 | |
| *** lxkong_ is now known as lxkong | 19:25 | |
| *** Miouge- has joined #openstack-swift | 19:25 | |
| *** ujjain has joined #openstack-swift | 19:27 | |
| *** ahale has quit IRC | 19:27 | |
| *** ahale has joined #openstack-swift | 19:32 | |
| *** openstackgerrit has joined #openstack-swift | 19:33 | |
| openstackgerrit | Thiago da Silva proposed openstack/swift master: Update saio sample config files https://review.openstack.org/586703 | 19:33 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Add IPv6 DSVM tests https://review.openstack.org/591497 | 19:55 |
| tdasilva | just realized that a saio VM requires at least 2GB of ram, only 1gb and unit tests fail | 20:06 |
| timburke | :-( i wonder where the bloat comes from... and whether we can bring that memory footprint down | 20:06 |
| timburke | tdasilva: how does it fail? | 20:06 |
| tdasilva | timburke: lost my scrollback now that i fixed the issue, but there were two tests under test/unit/common one was a really large container listing and the other was "fallocate" i think.... | 20:08 |
| tdasilva | i might start another vm to recreate it | 20:09 |
| timburke | i guess my big question at the moment is, can those tests pass if run *in isolation* in a 1GB vm? | 20:10 |
| tdasilva | test_static_web_pretend_to_be_giant_json | 20:13 |
| timburke | ick. yeah, my bad: https://github.com/openstack/swift/blob/2.18.0/test/unit/common/middleware/test_listing_formats.py#L270 | 20:17 |
| timburke | i can surely make that work better. like, have a generator expression for the response body and pre-calc the resulting content-length | 20:19 |
| timburke | :-( and the test isn't even testing what i thought it was testing... | 20:32 |
| openstackgerrit | Merged openstack/swift master: Stop holding on to sys.exc_info tuples quite so much https://review.openstack.org/570477 | 20:47 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Add IPv6 DSVM tests https://review.openstack.org/591497 | 20:56 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Fix up test_static_web_pretend_to_be_giant_json https://review.openstack.org/591520 | 20:58 |
| timburke | tdasilva: see if ^^^ works better. cut it down by like a factor of 6 | 20:59 |
| timburke | makes me glad there was already the sanity check | 20:59 |
| timburke | and if cutting down the input size is enough, i'm not gonna worry about the generator | 21:00 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Add IPv6 DSVM tests https://review.openstack.org/591497 | 21:09 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Stop logging overlapping tracebacks https://review.openstack.org/546808 | 21:16 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Fix the deletion of non-existent keys https://review.openstack.org/575842 | 21:19 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Include '-' in multipart ETags https://review.openstack.org/575860 | 21:20 |
| timburke | rebase party! | 21:20 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Include '-' in multipart ETags https://review.openstack.org/575860 | 21:22 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Add IPv6 DSVM tests https://review.openstack.org/591497 | 21:26 |
| *** itlinux has quit IRC | 21:26 | |
| openstackgerrit | Merged openstack/swift master: Update saio sample config files https://review.openstack.org/586703 | 21:26 |
| *** rcernin has joined #openstack-swift | 22:01 | |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: Use Swift's in-tree DSVM test https://review.openstack.org/591528 | 22:03 |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: DNM: horribly break auth https://review.openstack.org/591530 | 22:29 |
| mattoliverau | morning | 22:52 |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: Use Swift's in-tree DSVM test https://review.openstack.org/591528 | 23:09 |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: DNM: horribly break auth https://review.openstack.org/591530 | 23:09 |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: Use Swift's in-tree DSVM test https://review.openstack.org/591528 | 23:11 |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: DNM: horribly break auth https://review.openstack.org/591530 | 23:11 |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: Use Swift's in-tree DSVM test https://review.openstack.org/591528 | 23:15 |
| tdasilva | timburke: i added myself as a reviewer to p 591520 | 23:37 |
| patchbot | https://review.openstack.org/#/c/591520/ - swift - Fix up test_static_web_pretend_to_be_giant_json - 0h 27m 38s spent in CI | 23:37 |
| tdasilva | been kinda buried in p 575860 | 23:37 |
| patchbot | https://review.openstack.org/#/c/575860/ - swift - Include '-' in multipart ETags - 10h 2m 43s spent in CI | 23:37 |
| timburke | tdasilva: cool, thanks | 23:37 |
| openstackgerrit | Tim Burke proposed openstack/python-swiftclient master: DNM: horribly break auth https://review.openstack.org/591530 | 23:38 |
| timburke | also good :-D | 23:38 |
| tdasilva | timburke: been testing manually to see the data on disk, kinda cool, at the same time scary that we now have 3 different etags | 23:38 |
| timburke | yep... definitely the biggest worry about all this for me. at least with p 337960 i could say with a straight face that i was just exposing a secondary etag that was already present... the presence of a third (and needing to make it work with conditional requests!) is a bit icky | 23:41 |
| patchbot | https://review.openstack.org/#/c/337960/ - swift - Include SLO ETag in container updates (MERGED) - 14h 52m 37s spent in CI | 23:41 |
| tdasilva | timburke: that error " Unable to verify integrity of data download..." comes from what tool? s3cmd? | 23:42 |
| timburke | i think that one came from CyberDuck... i forget the exact message that s3cmd would spit out... | 23:43 |
| timburke | it may have been buried in debug/info logs, and the big thing you notice is that you seem to be uploading a lot more than you expected | 23:44 |
| tdasilva | k | 23:53 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!