| *** gyee has quit IRC | 00:08 | |
| *** NM has joined #openstack-swift | 01:02 | |
| kota_ | hello world | 01:17 |
|---|---|---|
| *** NM has quit IRC | 01:29 | |
| *** NM has joined #openstack-swift | 01:32 | |
| *** NM has quit IRC | 01:41 | |
| *** spsurya has joined #openstack-swift | 01:47 | |
| *** irclogbot_1 has quit IRC | 02:09 | |
| *** irclogbot_2 has joined #openstack-swift | 02:13 | |
| *** BjoernT has quit IRC | 03:16 | |
| *** Jeffrey4l has quit IRC | 03:38 | |
| *** Jeffrey4l has joined #openstack-swift | 03:40 | |
| *** henriqueof has quit IRC | 04:33 | |
| *** henriqueof1 has joined #openstack-swift | 04:33 | |
| *** dasp has quit IRC | 04:40 | |
| *** pcaruana has joined #openstack-swift | 04:52 | |
| *** rcernin_ has joined #openstack-swift | 05:59 | |
| *** rcernin has quit IRC | 06:01 | |
| *** dasp has joined #openstack-swift | 06:40 | |
| *** rcernin_ has quit IRC | 06:45 | |
| *** rcernin has joined #openstack-swift | 06:45 | |
| *** tesseract has joined #openstack-swift | 06:57 | |
| *** rcernin has quit IRC | 07:04 | |
| *** diablo_rojo has joined #openstack-swift | 07:18 | |
| *** binwiederhier has quit IRC | 07:27 | |
| *** e0ne has joined #openstack-swift | 07:57 | |
| *** tkajinam has quit IRC | 08:04 | |
| *** mikecmpbll has joined #openstack-swift | 08:06 | |
| *** e0ne has quit IRC | 08:20 | |
| *** mkrai_ has joined #openstack-swift | 09:12 | |
| mkrai_ | Hi, I am facing issue running devstack due to some error in swift setup.cfg file on stein release | 09:13 |
| *** diablo_rojo has quit IRC | 09:13 | |
| *** diablo_rojo has joined #openstack-swift | 09:14 | |
| mkrai_ | This is my conf file http://paste.openstack.org/show/780660/ | 09:14 |
| mkrai_ | and the error is here http://paste.openstack.org/show/780661/ | 09:15 |
| mkrai_ | Can someone please help? | 09:15 |
| alecuyer | mkrai_: This may be caused by an old version of setuptools, would check this : https://blog.cloudhelix.io/resolving-the-syntaxerror-operator-not-allowed-in-environment-markers-error-on-centos-7-2636c36aecac , see if it helps ? | 09:18 |
| mkrai_ | alecuyer, Thanks, it worked :) | 09:24 |
| *** e0ne has joined #openstack-swift | 09:24 | |
| alecuyer | mkrai_: you're welcome! | 09:26 |
| *** diablo_rojo has quit IRC | 10:08 | |
| *** mkrai_ has quit IRC | 10:20 | |
| *** rcernin has joined #openstack-swift | 10:25 | |
| *** e0ne has quit IRC | 10:51 | |
| *** diablo_rojo has joined #openstack-swift | 10:54 | |
| *** csmart has quit IRC | 11:07 | |
| *** openstackstatus has quit IRC | 11:09 | |
| *** csmart has joined #openstack-swift | 11:21 | |
| *** rdejoux has joined #openstack-swift | 11:51 | |
| *** ianychoi has quit IRC | 12:21 | |
| *** ianychoi has joined #openstack-swift | 12:25 | |
| *** diablo_rojo has quit IRC | 12:37 | |
| *** diablo_rojo has joined #openstack-swift | 12:49 | |
| *** new_student1411 has joined #openstack-swift | 12:57 | |
| new_student1411 | Hi, after I disable any account/project in keystone, I am still able to access the containers/objects using previously generated ec2 credentials. Any reason, why is it happening? | 12:58 |
| *** NM has joined #openstack-swift | 13:04 | |
| *** e0ne has joined #openstack-swift | 13:13 | |
| *** henriqueof1 has quit IRC | 13:51 | |
| *** mkrai_ has joined #openstack-swift | 13:52 | |
| *** diablo_rojo has quit IRC | 13:52 | |
| *** mkrai_ has quit IRC | 14:11 | |
| *** gkadam has joined #openstack-swift | 14:12 | |
| *** gkadam has quit IRC | 14:12 | |
| *** baffle has joined #openstack-swift | 14:14 | |
| *** mkrai_ has joined #openstack-swift | 14:17 | |
| *** BjoernT has joined #openstack-swift | 14:26 | |
| *** openstackstatus has joined #openstack-swift | 14:28 | |
| *** ChanServ sets mode: +v openstackstatus | 14:28 | |
| *** rcernin has quit IRC | 14:30 | |
| *** NM has quit IRC | 14:34 | |
| *** mkrai_ has quit IRC | 14:47 | |
| *** mkrai__ has joined #openstack-swift | 14:47 | |
| *** mkrai__ has quit IRC | 14:51 | |
| *** henriqueof has joined #openstack-swift | 14:55 | |
| timburke | new_student1411, there are two potential causes i could see: first, if you configured secret_cache_duration for s3token, any already-cached credentials will continue to be valid until they fall out of the cache | 15:06 |
| timburke | second, the project/user disablement in keystone may not be reflected the credentials api -- i'm not sure; haven't looked closely at that code | 15:08 |
| timburke | how are you disabling things? i could try to repro... | 15:11 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Fix some request-smuggling vectors on py3 https://review.opendev.org/684041 | 15:20 |
| *** gyee has joined #openstack-swift | 15:30 | |
| *** ianychoi has quit IRC | 15:51 | |
| *** BjoernT has quit IRC | 15:53 | |
| *** ianychoi has joined #openstack-swift | 15:54 | |
| *** BjoernT has joined #openstack-swift | 15:56 | |
| *** mikecmpbll has quit IRC | 16:01 | |
| *** mikecmpbll has joined #openstack-swift | 16:04 | |
| clayg | timburke: so I think we can get the prefix behavior we want by throwing a "and '\x00' not in name" on the end of query... I'll have to double check that doesn't blow the index | 16:08 |
| *** pcaruana has quit IRC | 16:10 | |
| *** pcaruana has joined #openstack-swift | 16:11 | |
| rledisez | hi, we are enabling s3api and we are having an issue related to the Authorization header. some users were used to store this header in objects metadata and now the requests are rejected because s3token raise the the header is invalid. did you ever hit that case? | 16:20 |
| *** rdejoux has quit IRC | 16:23 | |
| timburke | "some users were used to store this header in objects metadata" -- wait, what?? what would that even *mean*? | 16:24 |
| rledisez | timburke: I got wrong informations, sorry, they do a get with that "invalid" header. they do not store it :D | 16:25 |
| rledisez | so, it's totally on them if they have issues | 16:25 |
| timburke | whew! had me worried there ;-) | 16:25 |
| timburke | fwiw, i added a reject_non_aws_authorization config option as a drive-by in https://review.opendev.org/#/c/613452/ -- i should probably refresh that | 16:26 |
| patchbot | patch 613452 - swift - s3api: Move authenticator logic to separate module - 4 patch sets | 16:26 |
| *** tesseract has quit IRC | 16:29 | |
| *** NM has joined #openstack-swift | 16:37 | |
| timburke | i might look into breaking that out as a separate patch... then you've got more options, anyway | 16:40 |
| timburke | i'll be really interested in seeing what parts of the API your users use most, and which features they really want :-) | 16:41 |
| *** mikecmpbll has quit IRC | 16:52 | |
| *** e0ne has quit IRC | 16:55 | |
| *** zaitcev_ is now known as zaitcev | 17:00 | |
| timburke | release team's getting antsy about creating a stable/train branch -- anybody got spare review bandwidth for https://review.opendev.org/#/c/684041/ ? then i'll turn the crank on getting 2.23.0 out | 17:08 |
| patchbot | patch 684041 - swift - Fix some request-smuggling vectors on py3 - 3 patch sets | 17:08 |
| clayg | timburke: fwiw thinking about 'nulls in object paths is scary' - I'm starting to think it might be *good* for us | 17:19 |
| clayg | when we're writing object names out to console like devices (logging, stdout, etc) we *should* be worried about control characters that users could *already* have been sneaking into object names | 17:19 |
| timburke | certainly true | 17:20 |
| clayg | better for us to find a "bug" with how we're writing out names on an object that we created than something trying to do something sneaky | 17:20 |
| clayg | but if we have these bugs I think we already have them - null is *a* tricky byte for sure - but I'm unconvinced it's any worse than... backspace? | 17:21 |
| timburke | did you notice that you can colorize your text listings by dropping some ANSI escape codes into your names? š¤£ | 17:22 |
| clayg | that might be debateable... but I for one am glad you're finding these issues and hope we can address a good deal of them by the time we're ready to merge in the feature | 17:22 |
| clayg | *feature* | 17:22 |
| *** BjoernT has quit IRC | 17:22 | |
| timburke | ah, good ol' https://review.opendev.org/#/c/300577/ | 17:24 |
| patchbot | patch 300577 - swift - Colorize Account/Container listings (ABANDONED) - 1 patch set | 17:24 |
| clayg | HAHAHAH | 17:24 |
| clayg | you're the best timburke | 17:24 |
| *** pcaruana has quit IRC | 17:45 | |
| *** dcourtoi has joined #openstack-swift | 17:51 | |
| openstackgerrit | Merged openstack/swift stable/pike: Fix stable gate https://review.opendev.org/683284 | 17:54 |
| openstackgerrit | Clay Gerrard proposed openstack/swift master: Allow internal clients to use null namespace https://review.opendev.org/682138 | 17:59 |
| *** rdejoux has joined #openstack-swift | 18:17 | |
| *** e0ne has joined #openstack-swift | 18:34 | |
| *** NM has quit IRC | 18:37 | |
| *** e0ne has quit IRC | 18:40 | |
| *** BjoernT has joined #openstack-swift | 18:45 | |
| *** NM has joined #openstack-swift | 18:47 | |
| *** BjoernT has quit IRC | 18:49 | |
| *** BjoernT has joined #openstack-swift | 18:52 | |
| openstackgerrit | Clay Gerrard proposed openstack/swift master: DNM: Frustrated rant about OOO under a shifting py2/3 base https://review.opendev.org/686250 | 19:03 |
| *** spsurya has quit IRC | 19:09 | |
| *** ccamacho has joined #openstack-swift | 19:24 | |
| *** ccamacho has quit IRC | 19:28 | |
| timburke | zaitcev, mattoliverau, clayg: thanks for all the reviews on https://review.opendev.org/#/c/684041/ -- sorry that software is so terrible | 19:31 |
| patchbot | patch 684041 - swift - Fix some request-smuggling vectors on py3 - 3 patch sets | 19:31 |
| zaitcev | np | 19:32 |
| clayg | timburke: yeah I guess you can pipeline a two requests that don't have a body w/o having to send content-length or transfer-encoding... I'd forgotten we don't like connection: close bodies and opt to 411 | 19:33 |
| clayg | so Q: "why not explicitly set connection: close" seems to A: "because that's unneccessariy and incorrect" š¤£ | 19:34 |
| clayg | I can see the justification for blocking out whole methods with not PY2 - at first - but also recongize there's probably some limit... | 19:37 |
| clayg | looks like we're mostly done now - so that's good! | 19:37 |
| clayg | all we can do is keep trying to make it better - thanks for fixing that nasty bug | 19:37 |
| *** BjoernT has quit IRC | 19:37 | |
| *** BjoernT has joined #openstack-swift | 19:47 | |
| *** rdejoux has quit IRC | 19:49 | |
| *** NM has quit IRC | 19:51 | |
| *** DHE has quit IRC | 20:05 | |
| *** remi_ness has joined #openstack-swift | 20:14 | |
| *** new_student1411 has quit IRC | 20:30 | |
| *** remi_ness has quit IRC | 20:54 | |
| timburke | meeting time! | 21:00 |
| timburke | clayg, tdasilva, kota_ ^^^ | 21:01 |
| *** BjoernT has quit IRC | 21:30 | |
| *** BjoernT has joined #openstack-swift | 21:35 | |
| *** e0ne has joined #openstack-swift | 21:49 | |
| *** BjoernT has quit IRC | 21:50 | |
| *** BjoernT has joined #openstack-swift | 21:54 | |
| clayg | Pretty much that time most days. Same time MTuF would be slightly better. If the meeting was more like now Iād have a much better time making it consistently. | 21:54 |
| clayg | But like you said after āfall backā maybe itās moot. | 21:54 |
| timburke | makes sense | 21:55 |
| timburke | still... that's another 4 meetings... just as you're trying to sell us all on versioning... | 21:58 |
| *** BjoernT has quit IRC | 22:24 | |
| *** e0ne has quit IRC | 22:35 | |
| *** rcernin has joined #openstack-swift | 22:48 | |
| *** tkajinam has joined #openstack-swift | 22:54 | |
| openstackgerrit | Merged openstack/swift master: Fix some request-smuggling vectors on py3 https://review.opendev.org/684041 | 23:09 |
| *** NM has joined #openstack-swift | 23:11 | |
| openstackgerrit | Tim Burke proposed openstack/swift master: Authors/changelog for 2.23.0 https://review.opendev.org/685503 | 23:12 |
| *** NM has quit IRC | 23:15 | |
| kota_ | sorry, I was absent from the meeting | 23:56 |
| kota_ | will check the log | 23:56 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!