| *** cwright_ has joined #openstack-swift | 00:19 | |
| *** szaher has quit IRC | 00:22 | |
| *** mvkr has quit IRC | 00:22 | |
| *** sorrison has quit IRC | 00:22 | |
| *** cwright has quit IRC | 00:22 | |
| *** sorrison has joined #openstack-swift | 00:22 | |
| *** mvkr has joined #openstack-swift | 00:22 | |
| *** viks___ has quit IRC | 00:25 | |
| *** pawan-gupta has quit IRC | 00:25 | |
| *** donnyd has quit IRC | 00:25 | |
| *** ab-a has quit IRC | 00:25 | |
| *** fyx has quit IRC | 00:25 | |
| *** pawan-gupta has joined #openstack-swift | 00:25 | |
| *** donnyd has joined #openstack-swift | 00:25 | |
| *** fyx has joined #openstack-swift | 00:25 | |
| *** cjloader has quit IRC | 00:26 | |
| *** StevenK has quit IRC | 00:27 | |
| *** StevenK has joined #openstack-swift | 00:27 | |
| *** openstackstatus has quit IRC | 00:28 | |
| *** Jeffrey4l has quit IRC | 00:29 | |
| *** ab-a has joined #openstack-swift | 00:30 | |
| *** Jeffrey4l has joined #openstack-swift | 00:31 | |
| *** TViernion has joined #openstack-swift | 01:26 | |
| TViernion | Evening all. I know you said you hang around here most of the time timburke, but i don't know what time zone o.O | 02:01 |
|---|---|---|
| tdasilva | timburke: IIRC, we should be able to use this role: https://github.com/openstack/liberasurecode/blob/master/roles/test_liberasurecode/tasks/main.yaml to facilitate building libec in the probe test | 02:26 |
| openstackgerrit | Thiago da Silva proposed openstack/liberasurecode master: Build and test on centos-8 node https://review.opendev.org/706169 | 02:36 |
| *** gyee has quit IRC | 03:03 | |
| *** zhurong has joined #openstack-swift | 03:04 | |
| *** psachin has joined #openstack-swift | 03:43 | |
| kota_ | hmm... my company seems to worry about Coronavirus too much. that might affect the decision whether I will be able to join the next Vancouver PTG... | 03:55 |
| *** ormandj has quit IRC | 04:10 | |
| *** zhurong has quit IRC | 04:41 | |
| *** viks___ has joined #openstack-swift | 04:48 | |
| tdasilva | kota_: hey, I hope things will settle down and you might be able to go | 05:05 |
| kota_ | tdasilva: me too. thx. | 05:06 |
| *** zhurong has joined #openstack-swift | 05:07 | |
| openstackgerrit | Pete Zaitcev proposed openstack/liberasurecode master: Do not discard a technical return value in tests https://review.opendev.org/706180 | 05:29 |
| *** evrardjp has quit IRC | 05:33 | |
| *** evrardjp has joined #openstack-swift | 05:34 | |
| *** zaitcev has quit IRC | 06:05 | |
| *** zaitcev has joined #openstack-swift | 06:06 | |
| *** ChanServ sets mode: +v zaitcev | 06:06 | |
| zaitcev | Our travel to APAC region is also restricted. | 06:08 |
| viks___ | Hi, | 06:24 |
| viks___ | I directly updated my swift installation in my cluster to version 2.24.0 both in proxy and storage nodes using pip on top of existing. It's on top of stein. I have a self signed certificate in my cluster. But after this upgrade, now i get the below error in logs and hence i'm not able to do any swift operation: | 06:24 |
| viks___ | ```log | 06:24 |
| viks___ | swift-proxy-server[19524]: keystoneauth1.exceptions.discovery.DiscoveryFailure: Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. SSL exception connecting to https://identity.api.mycloud.io: ("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",) | 06:24 |
| viks___ | ``` | 06:24 |
| viks___ | Anyone has any idea? | 06:24 |
| *** ccamacho has quit IRC | 06:26 | |
| zaitcev | Sorry, I have to pass. Well, I can spout platitudes about TLS and making sure the client can verify the cert... These days I had to give up on self-signed certs. I created a private CA and then supply its cert everywhere. | 06:34 |
| zaitcev | If your keystoneauth middleware can't talk to Keystone, there's basically nothing we can do about it in Swift. But fortunately it's a shared middleware and the problem is generic, so you may be able to find help in one of general OpenStack forums (or channels). | 06:36 |
| openstackgerrit | Merged openstack/liberasurecode master: Build and test on centos-8 node https://review.opendev.org/706169 | 06:38 |
| *** zhurong has quit IRC | 06:42 | |
| viks___ | zaitcev: Hmm.. will try to figure out... Thanks anyways.. | 06:46 |
| openstackgerrit | Charles Hsu proposed openstack/swift master: Ensure domain stored in memcached is utf8 encoded. https://review.opendev.org/706187 | 07:37 |
| *** diablo_rojo__ has joined #openstack-swift | 08:01 | |
| *** diablo_rojo has quit IRC | 08:01 | |
| *** tkajinam has quit IRC | 08:04 | |
| *** rdejoux has joined #openstack-swift | 08:10 | |
| *** tesseract has joined #openstack-swift | 08:13 | |
| *** ccamacho has joined #openstack-swift | 08:33 | |
| *** cschwede has joined #openstack-swift | 08:43 | |
| *** ChanServ sets mode: +v cschwede | 08:43 | |
| *** rpittau|afk is now known as rpittau | 10:45 | |
| *** pcaruana has quit IRC | 12:13 | |
| *** jvisser has joined #openstack-swift | 12:17 | |
| *** jvisser has quit IRC | 12:17 | |
| *** jvisser has joined #openstack-swift | 12:18 | |
| *** rpittau is now known as rpittau|bbl | 12:52 | |
| *** beisner has quit IRC | 13:08 | |
| *** pawan-gupta has quit IRC | 13:12 | |
| *** fyx has quit IRC | 13:13 | |
| *** clayg has quit IRC | 13:16 | |
| *** jvisser has quit IRC | 13:19 | |
| *** gmann has quit IRC | 13:23 | |
| *** irclogbot_2 has quit IRC | 13:26 | |
| *** rpittau|bbl is now known as rpittau | 13:30 | |
| *** irclogbot_0 has joined #openstack-swift | 13:30 | |
| *** jvisser has joined #openstack-swift | 13:52 | |
| *** diablo_rojo__ is now known as diablo_rojo | 14:00 | |
| *** fyx has joined #openstack-swift | 14:01 | |
| *** beisner has joined #openstack-swift | 14:03 | |
| *** pawan-gupta has joined #openstack-swift | 14:04 | |
| *** clayg has joined #openstack-swift | 14:05 | |
| *** ChanServ sets mode: +v clayg | 14:05 | |
| *** manuvakery has quit IRC | 14:05 | |
| *** ccamacho has quit IRC | 14:25 | |
| TViernion | Good morning everyone. | 14:25 |
| *** ccamacho has joined #openstack-swift | 14:33 | |
| *** mahatic has joined #openstack-swift | 14:43 | |
| *** ChanServ sets mode: +v mahatic | 14:43 | |
| openstackgerrit | Charles Hsu proposed openstack/swift master: Ensure domain stored in memcached is utf8 encoded. https://review.opendev.org/706187 | 14:55 |
| *** cjloader has joined #openstack-swift | 14:59 | |
| timburke | good morning | 15:36 |
| *** ccamacho has quit IRC | 15:36 | |
| timburke | TViernion, i'm in california, but my exact hours tend to vary -- today i'm definitely on the early side; some days i might not come online for another 3 hours | 15:37 |
| timburke | viks___, what happens when you try to hit the keystone endpoint from that same swift proxy with curl? or pulling up a python repl and using requests (like keystonemiddleware would do)? | 15:39 |
| timburke | do you have a CA cert plumbed in, or are you relying on the certs installed on the system? | 15:39 |
| *** diablo_rojo has quit IRC | 15:46 | |
| *** diablo_rojo has joined #openstack-swift | 15:57 | |
| TViernion | Hey, any time you're at work before noon is a good thing. | 16:15 |
| TViernion | Timburke, I do have a few questions about use case capabilities if you have the time? | 16:16 |
| timburke | sure! | 16:17 |
| *** prometheanfire has joined #openstack-swift | 16:22 | |
| prometheanfire | py27 tests having issues? most of the oslo libs show issues with it, but maybe they are finally removing py27 support | 16:23 |
| *** psachin has quit IRC | 16:24 | |
| timburke | prometheanfire, we haven't noticed any, as far as i'm aware. as recently as yesterday patches like https://review.opendev.org/#/c/706010/ came back all-green | 16:25 |
| patchbot | patch 706010 - swift - sharding: filter shards based on prefix param when... - 1 patch set | 16:25 |
| prometheanfire | ok | 16:28 |
| prometheanfire | I'm guessing they are finally dropping py27 then https://review.opendev.org/706127 | 16:28 |
| patchbot | patch 706127 - requirements - update constraint for oslo.serialization to new re... - 1 patch set | 16:28 |
| prometheanfire | it's like that for a bunch, haven't looked at it much yet (just waking up) | 16:29 |
| prometheanfire | looks like mirroring may be the issue | 16:30 |
| timburke | no, looks like upper-constraints has been saving us in the gate, and i'm guessing swift devs rarely run `pip install -r test-requirements.txt` | 16:33 |
| *** gyee has joined #openstack-swift | 16:35 | |
| *** rpittau is now known as rpittau|afk | 16:40 | |
| prometheanfire | there's also some issue with oslo building universal wheels for non-universal stuff | 16:44 |
| prometheanfire | see -infra :D | 16:44 |
| *** rdejoux has quit IRC | 16:46 | |
| *** tesseract has quit IRC | 16:54 | |
| *** diablo_rojo__ has joined #openstack-swift | 16:59 | |
| *** diablo_rojo has quit IRC | 17:01 | |
| *** cschwede has quit IRC | 17:09 | |
| openstackgerrit | Tim Burke proposed openstack/swift master: Ensure domain stored in memcached gets utf8 decoded on py2 https://review.opendev.org/706187 | 17:17 |
| timburke | whee, regressions! | 17:18 |
| *** onovy has quit IRC | 17:25 | |
| timburke | hmm... why *do* have healthcheck in the recommended object-server configs? https://github.com/openstack/swift/blob/2.24.0/etc/object-server.conf-sample#L212-L216 | 17:29 |
| timburke | that's mainly used for load-balancer checks, no? | 17:30 |
| *** onovy has joined #openstack-swift | 17:30 | |
| timburke | (looking at https://bugs.launchpad.net/swift/+bug/1862155) | 17:31 |
| openstack | Launchpad bug 1862155 in OpenStack Object Storage (swift) "Install and configure the storage nodes for Red Hat Enterprise Linux and CentOS in swift" [Undecided,New] | 17:31 |
| *** evrardjp has quit IRC | 17:33 | |
| *** evrardjp has joined #openstack-swift | 17:34 | |
| openstackgerrit | Tim Burke proposed openstack/swift master: Clean up concurrent get requests once we have a response https://review.opendev.org/706361 | 18:44 |
| timburke | i need to figure out how to write a test for ^^^ :-/ | 18:44 |
| *** mvkr has quit IRC | 18:54 | |
| *** diablo_rojo__ is now known as diablo_rojo | 19:11 | |
| TViernion | Timburke, so as we briefly discussed yesterday, our end solution is going to start mostly videos, audio records, pdfs, images (unknown various formats), and documents .. be they raw text, docx, xlsx, csv, xml, et cetera. While you did say swift + databases === bad_juju, would there be any way to run swift OUTSIDE of open stack? | 19:16 |
| TViernion | Or rather would it be recomended. | 19:16 |
| timburke | i do it all the time :-) | 19:17 |
| TViernion | Really? How difficult is it to migrate from "out of stack" to "in stack" or does it pretty much look at it in general? | 19:17 |
| timburke | auth may get hairy -- we have a (not really "hardened") tempauth middleware in-tree, but it's not really meant for production use (though i don't think that stops people) | 19:18 |
| timburke | i'm trying to remember whether we've had many user stories about either moving from a stand-alone deployment to integrated or the reverse... | 19:21 |
| timburke | in theory, it should mainly be a matter of updating the proxy-server configuration to use keystone instead of tempauth (or swauth, or whatever) | 19:21 |
| timburke | well, that and the permissions/account-mapping... | 19:22 |
| TViernion | we are currently in a proxmox environment with (6) nfs servers acting as document_storage and our API is going to be encryping, storing, recalling, and logging all metadata and access of the files into a db ... I just don't know how feasible proxmox is long term as we grow into k8s with microservices, and if we could at least get the storage part now .. i would think connecting a new openstack envrionment to the existing | 19:23 |
| TViernion | storage solution... might... be... fairly painless? | 19:23 |
| timburke | what you'd likely want to do is keep the old system around and use different "reseller prefixes" for the two auth systems | 19:23 |
| TViernion | So basically operate two seperate swift systems until the complete migration to an openstack framework is completed and all of the data from old-swift is migrated to new-swift? | 19:26 |
| timburke | same cluster -- the recommended way to configure your auth system and how it maps users to swift accounts has each swift account prefixed by some string, like "AUTH_" or "KEY_". then you can hook in multiple auth systems on the same cluster and not worry about naming collisions between the two auth systems | 19:28 |
| timburke | and since it's all one cluster, you can take advantage of things like server-side copy to move data between acounts if needed | 19:29 |
| TViernion | one cluster, for now lol | 19:29 |
| TViernion | Right now my rack here has 21 servers (adding 2 more for storage next week) and like i said all proxmox, i'm going to add a rack down in dallas probably start with 12-16 servers to start with... a couple of c6200 nodes (4 servers each) and an hp c7000 with 4-8 blades and that guy attached to (2) mds6000s with 70tb storage each. | 19:31 |
| *** openstackstatus has joined #openstack-swift | 19:57 | |
| *** ChanServ sets mode: +v openstackstatus | 19:57 | |
| openstackgerrit | Merged openstack/swift master: Remove reno from test-requirements https://review.opendev.org/706137 | 20:12 |
| *** jvisser has quit IRC | 20:50 | |
| *** irclogbot_0 has quit IRC | 20:53 | |
| *** irclogbot_0 has joined #openstack-swift | 20:54 | |
| *** jvisser has joined #openstack-swift | 21:22 | |
| *** jvisser has quit IRC | 21:30 | |
| *** jvisser has joined #openstack-swift | 21:30 | |
| *** diablo_rojo has quit IRC | 21:51 | |
| mattoliverau | morning | 22:09 |
| *** diablo_rojo has joined #openstack-swift | 22:10 | |
| *** jvisser has quit IRC | 22:18 | |
| prometheanfire | moin | 22:30 |
| *** tkajinam has joined #openstack-swift | 22:54 | |
| *** tkajinam has quit IRC | 22:57 | |
| *** tkajinam has joined #openstack-swift | 22:57 | |
| TViernion | Morning | 23:18 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!