Thursday, 2019-03-21

*** lbragstad has quit IRC00:14
*** jamesmcarthur has quit IRC00:27
*** jamesmcarthur has joined #openstack-tc00:58
*** jamesmcarthur has quit IRC01:15
*** jamesmcarthur has joined #openstack-tc01:16
*** mriedem has quit IRC01:26
*** ricolin has joined #openstack-tc01:29
*** lbragstad has joined #openstack-tc01:35
*** jamesmcarthur has quit IRC01:39
*** jamesmcarthur has joined #openstack-tc01:40
*** jamesmcarthur has quit IRC01:44
*** jamesmcarthur has joined #openstack-tc02:35
*** jamesmcarthur has quit IRC02:59
*** jamesmcarthur has joined #openstack-tc03:04
*** jamesmcarthur has quit IRC03:18
*** jamesmcarthur has joined #openstack-tc03:19
*** jamesmcarthur has quit IRC03:49
*** whoami-rajat has joined #openstack-tc04:11
*** diablo_rojo has quit IRC04:12
*** marst has joined #openstack-tc04:28
*** marst has quit IRC04:45
*** ricolin has quit IRC05:15
*** ricolin has joined #openstack-tc05:32
*** lbragstad has quit IRC06:06
*** e0ne has joined #openstack-tc06:06
*** e0ne has quit IRC06:07
*** Luzi has joined #openstack-tc06:44
*** e0ne has joined #openstack-tc07:45
*** openstackgerrit has quit IRC08:17
*** dtantsur|afk is now known as dtantsur08:24
*** tosky has joined #openstack-tc08:27
*** jpich has joined #openstack-tc08:31
*** e0ne has quit IRC08:48
*** e0ne has joined #openstack-tc08:51
asettleMorning o/09:01
evrardjpmorning09:03
*** whoami-rajat has quit IRC09:10
*** whoami-rajat has joined #openstack-tc09:18
ricolinmorning09:26
mugsieo/10:06
*** cdent has joined #openstack-tc10:08
*** zbr has quit IRC10:08
*** zbr has joined #openstack-tc10:10
*** e0ne has quit IRC10:14
*** zbr has quit IRC10:16
*** e0ne has joined #openstack-tc10:17
*** openstackgerrit has joined #openstack-tc10:47
openstackgerritThierry Carrez proposed openstack/governance master: Appoint Weng Hao as Zaqar PTL  https://review.openstack.org/64512110:47
ttxhmm missed the appointed key. Will repost10:49
*** jaosorior has quit IRC10:53
openstackgerritThierry Carrez proposed openstack/governance master: Appoint Trinh Nguyen as Telemetry PTL  https://review.openstack.org/64512210:53
openstackgerritThierry Carrez proposed openstack/governance master: Appoint Weng Hao as Zaqar PTL  https://review.openstack.org/64512110:55
*** e0ne has quit IRC10:58
*** e0ne has joined #openstack-tc10:59
openstackgerritThierry Carrez proposed openstack/governance master: Appoint Divya K Konoor as PowerVMStackers PTL  https://review.openstack.org/64512611:03
ttxtc-members: those ^ should support the Train PTL appointment discussion. If you have alternate solutions please post them as reviews as well11:04
*** whoami-rajat has quit IRC11:30
*** whoami-rajat has joined #openstack-tc11:34
*** zbr has joined #openstack-tc11:39
*** jaosorior has joined #openstack-tc11:51
*** cdent has quit IRC12:04
*** jamesmcarthur has joined #openstack-tc12:11
*** jamesmcarthur has quit IRC12:30
*** jamesmcarthur has joined #openstack-tc12:31
*** jamesmcarthur has quit IRC12:35
*** ijolliffe has joined #openstack-tc12:36
dhellmannasettle : I added a few items to the ptg planning etherpad and added lines for folks to sign up to lead the discussion and express interest so we can see what people actually want to talk about12:37
*** mriedem has joined #openstack-tc12:38
dhellmannmnaser : am I right that the outcome of the poll for the goal discussion was to use today's office hour slot?12:49
mnaserdhellmann: yep, I think I updated the ML on that. I hope I didn’t just update the ML in my head only12:50
dhellmannI think I remember seeing that, but I'm a bit behind12:50
dhellmannthanks for confirming :-)12:50
*** e0ne has quit IRC12:51
*** dtantsur is now known as dtantsur|brb12:52
*** lbragstad has joined #openstack-tc12:54
*** irclogbot_2 has quit IRC13:07
*** irclogbot_2 has joined #openstack-tc13:09
fungimnaser did post the results to the ml. i know since i responded to them about being unavailable13:10
fungibut looking forward to seeing the outcome of the discussion13:10
*** jamesmcarthur has joined #openstack-tc13:10
fungii may still lurk, but also have some stuff i need to bring up in another irc meeting at the same time *and* scheduled to be on a conference call at that time too13:11
*** marst has joined #openstack-tc13:21
asettledhellmann, thank you13:21
*** altlogbot_3 has quit IRC13:23
*** e0ne has joined #openstack-tc13:23
*** altlogbot_0 has joined #openstack-tc13:25
*** e0ne has quit IRC13:37
*** altlogbot_0 has quit IRC13:39
*** whoami-rajat has quit IRC13:40
*** altlogbot_3 has joined #openstack-tc13:41
*** marst has quit IRC13:42
*** irclogbot_2 has quit IRC13:45
*** e0ne has joined #openstack-tc13:45
*** jaypipes has quit IRC13:46
*** irclogbot_2 has joined #openstack-tc13:47
*** adriant has quit IRC13:51
*** adriant has joined #openstack-tc13:52
*** marst has joined #openstack-tc13:56
adriantmnaser: that goal related discussion, isn't that nowish? Or did i get my NZ vs UTC times wrong?14:14
*** jaosorior has quit IRC14:15
adriantin like 45mins right?14:15
lbragstadi believe so adriant14:16
adriantalright, cool, will stick around as being the person suggesting one of the goals it may be worth hanging around for that14:17
* lbragstad nods14:17
lbragstadthanks14:17
*** whoami-rajat has joined #openstack-tc14:23
*** jamesmcarthur has quit IRC14:29
*** jamesmcarthur has joined #openstack-tc14:35
*** altlogbot_3 has quit IRC14:35
*** altlogbot_2 has joined #openstack-tc14:37
*** dtantsur|brb is now known as dtantsur14:37
*** irclogbot_2 has quit IRC14:38
*** irclogbot_0 has joined #openstack-tc14:39
mnaseradriant: can i buy you coffee14:56
mnaserbecause right now that's aw hole another definition of being a goal champion :)14:56
* gmann sorry for late14:59
mnasertc-members: office hours are here!15:00
mnaserdo we feel like using meetbot to get some sort of referencable logging?15:00
evrardjpI don't mind15:00
mnaserunless someone is opposed to it, i only see benefits15:00
asettleDitto.15:00
* jroll doesn't mind15:00
gmanno/15:00
evrardjpI think we didn't do it because people could consider it was too formal to start to casually speak during office hours15:01
mnaseryeah15:01
ricolinmnaser, that give you the benefits to get `action` recorded15:01
dhellmanno/15:01
asettleThat's a good point too15:01
mnasersounds good to meh15:01
gmannas this is adhoc meeting too so we can do15:01
mnaser#startmeeting tc-goals15:01
openstackMeeting started Thu Mar 21 15:01:29 2019 UTC and is due to finish in 60 minutes.  The chair is mnaser. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
lbragstado/15:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
*** openstack changes topic to " (Meeting topic: tc-goals)"15:01
openstackThe meeting name has been set to 'tc_goals'15:01
mnasercool thanks for coming here everyone15:01
adriantyay! i'm online15:02
ttxo/15:02
* fungi is trying to lurk, but also in a couple other meetings15:02
adriantmy home internet died minutes before the meeting...15:02
adrianti'm hotspoting off my phone...15:02
evrardjpbetter than during it  adriant :)15:02
evrardjpadriant: limited data plan?15:02
mnaseri've got _some_ sort of very basic etherpad to start on15:02
mnaserhttps://etherpad.openstack.org/p/project-goal-meeting15:03
mnaseri wanted to use the first bit of time to discuss the actual goal selection itself, dhellmann raised some concerns in his review15:03
adriantevrardjp: home plan is basically a highspeed fibre business plan, but I guess they don't people to be awake at 4am15:03
dhellmanno/15:03
zanebo/15:03
mnaseri wanna try to timebox this to 20 minutes so we have time to talk about the other goals, but doug's review is here https://review.openstack.org/#/c/639010/15:04
mnaseri'll let him take it from here15:04
dhellmannwell, I'm a little worried about the evolution of the solution to that goal in terms of how it fits our goals process15:04
dhellmannthe idea for goals is to rally the community around something that we all need to do together and that needs to land more or less at the same time15:04
dhellmannthis feels like a much much smaller thing that could be done iteratively by a small group15:04
dhellmannthe *original* definition would have required new APIs in all services, but the current draft (which I think makes sense technically) is basically adding features to the SDK15:05
dhellmannwhat do the rest of you think?15:05
lbragstadi agree, and i think this thread is applicable to the other goal under review as well15:06
gmanndhellmann: you mean the part-1 of this goal, in that i agree with your point.15:06
gmannbut part-2 still need interface from each services15:06
evrardjplbragstad: I think it's even smaller grasp for the other goal15:06
jrollI agree, and I also want to point out that every project team contributing to "one single library" would be a merge conflict nightmare15:07
dhellmannare we talking about doing part 2 during train?15:07
adriantjroll: that's why the original plan was a plugin based solution15:07
zanebI think this is highlighting (again) that we don't have a process for driving changes like this15:07
jrollsure15:07
evrardjpjroll: plugins?15:07
adriantwe can always reconsider doing part 2 in train15:07
gmannok, let's leave the part-2 separate (away from train)15:07
evrardjphaha ok adriant :)15:07
dhellmannadriant : I think the plugin solution was adding unnecessary technical complication just to make it fit the goals process15:07
dhellmannzaneb : yes, you're right15:08
zanebshoehorning something that doesn't fit the goals process into the goals process would be a mistake IMHO (reserving judgement on whether this proposal still fits)15:08
adriantdhellmann: I don't disagree that plugins over-complicated it15:08
dhellmannit seems to fit a popup team or even help-most-needed item better than the community-wide goals process15:08
evrardjpthis looks _per se_ as a thing that should be globally done over openstack, and we could work together. That sounds like community goal.15:09
adriantand if this ultimately isn't right for a goal, then it isn't.15:09
lbragstadat the same time, i wonder if we feel pressure to actually have community goals?15:09
adriantbut it does need some TC support to get done15:09
adriantbecause any official attempt to solve project deletion has sadly kind of failed before :(15:09
evrardjpthat's a different problem adriant15:09
evrardjpimo15:10
ttxI think release goals involve some overhead to track that work lands in every project team15:10
ricolindhellmann, popup indeed, if we only consider doing phase 1 in train15:10
adriantI agree, and that's why maybe it isn't idea for a goal15:10
dhellmannadriant : I think the SDK team (at least via mordred) have expressed that they would be interested in supporting this feature15:10
ttxHere we get the goal overhead, but for stuff that ultimately does not require that much coordination work15:10
ttxIt really needs $people, not $coordination15:11
gmannis goal means adding code in each service side ? I think it can be fewer code but largely agreed from each service where goal need some sort of technical help or interface involvement15:11
lbragstadthat and it leaves several projects wondering "um, what are we supposed to do for this, again?"15:11
dhellmannthe OSC centralization goal is slightly different, in that we would be asking every team to deprecate their client (IIUC)15:11
ttxyeah, it seems to have at least /some/ per-project work15:11
evrardjpI guess it depends if we consider part2 or not15:11
ttxit's just a bit pessimistic and assumes only one team will complete the goal :)15:12
gmannand as openstack as whole, i feel like even this is SDK implementation in part-1 but this overall tool will be completed with part-2 only which we should  consider now also.15:12
zanebdhellmann: from the project deletion goal: "If the SDK does not support the feature yet, implement it," - does that part sound like a legit community goal? (possibly overlapping with the other one)15:12
dhellmannthat OCS change still pretty minimal, but it would have a larger impact on users who need to start considering changing tools15:12
ttxzaneb: ++15:12
adriantthere are actually some services which don't have admin level delete resources as an admin15:12
adriantso that is needed and could be goal driven potentilly15:12
adriantpotentially*15:12
dhellmannzaneb : it depends on what "the feature" means? is that the OSC or deletion goal?15:12
zanebdhellmann: deletion goal, but it means OSC support for deleting the resources IIUC15:13
gmannadriant: and we need project team involvement in at least 'dependency tree build for their resource'  ?15:13
adriantdhellmann: as in, full service/resource support in the SDK would be needed so we can actually query/delete it.15:13
dhellmannadriant : depending on how many, yes. we may want to document expectations for admin APIs more formally than we have15:13
adriantgmann: maybe15:13
dhellmannwhich services does that apply to today?15:13
adriantdhellmann: some one commented about it in the review, but I forget who (will look later).15:14
gmanni think sahara it was if i remember15:14
adriantyeah Sahara sounds right15:14
dhellmannI don't think we need project teams to write code for the dependency tree stuff. The people writing the code may need advice, and if those relationships aren't documented those are doc bugs in the project documentation, but that doesn't mean every project needs to contribute a developer to this15:14
dhellmannok, well, if I was working on this I would just do sahara last and work out the basics with the other projects first15:15
dhellmannand then get someone with some sahara knowledge to help with that part15:15
mnaserif the project deletion feature becomes api-level changes only (i.e. introduce an api to delete an entire project) .. does this make it fit our goal model?15:15
mnaseri agree with adriant that this is something that seems _so_ obvious, but not inside openstack15:15
adriantAPI level changes probably would15:15
ttxmnaser: sure, that requires stuff to land everywhere, and then the tracking overhead in goals is justified15:16
adriantbut API level changes needs A LOT of thought and design work15:16
dhellmannit would be closer, for me, but I understand the technical objections to that approach -- we still need something to do the orchestration, and bulk delete is an optimization15:16
adriantbulk deletion APIs would solve a lot of the issues15:16
ttxWe should definitely not adopt a weird implementation just so that it can fit the artificial goal process15:16
mnaserwell the orchestration can be done by a small group of people, but 'bulk delete APIs' would simplify and defer the problem to be more project level15:16
adriantand allow the SDK work to become the core of the deletion logic with efficient ways to do it.15:16
mnaseri agree, ttx.15:16
gmannyeah, either way API or any other intrerface that need project side implementation15:17
dhellmannit makes the "just go away" mode simpler, but introduces more complexity with dealing with dependency cleanup between services15:17
asettleTuning in and out due to overlapping meetings, why *don't* we allow bulk deletion of APIs? Speak to the moron here, people.15:17
dhellmannwe do allow them, we just don't have them15:17
mnaserthese apis just don't exist15:17
asettle(probably shouldn't call myself a moron on a recorded meeting)15:17
mnaserwe do have a lot of cross-project dependencies though15:17
asettleGotcha.15:17
gmannyeah not all project have bulk deletion API15:17
mnaseri.e. if you try to do a bulk delete in neutron, and ports are assigned somewhere into nova, that might fail15:17
mnaserso that can fail miserably15:17
lbragstadit also requires projects to grok new authorization concepts15:18
ttxasettle: too late15:18
asettlettx, *shrug* how bad could it be15:18
evrardjpttx:  :)15:18
adriantwhich is where building some dependency stuff is useful. and find the points where you can bulk delete :/15:18
gmannlbragstad: you mean scope type things ?15:18
asettleadriant, makes sense15:18
asettleThanks all15:18
lbragstadgmann correct - in the API level approach for each service15:18
mnaseri agree in the value, but i feel what dhellmann brings up is a strong point15:18
mnaserwhich is, for train, if we do step 1 only, it seems like a community effort15:19
dhellmannzaneb's point from earlier is good, that we have a couple of things here we'd like to drive but that don't fit our current processes15:19
zanebyeah, I really really really want this to happen15:20
adriantEven if it isn't a goal, getting support for it and some push to get it done, and for each service to (as part of adopting the SDK as their client library) commit to adding new resources to this logic, is important.15:20
adriantessentially, yes we need this15:20
zaneb(I think we have a Forum session to discuss other ways we might drive these sorts of changes)15:20
adriantbut once we have it, the services have to commit to helping maintain it and their resources in the SDK15:21
adriantit can't just be on the SDK team15:21
ricolinThe part I hope we can provide this goal a better start and be quicker to reach is it have people to organize all these information, and help on holding and summarize discussion into actions. Than it's a community goal for sure. But I'm not to worry to put it as a goal even we need some work before we can push it to each teams15:21
evrardjpyeah, I don't really care about the format myself. I just see the value of having those deletion APIs + central client (those 2 goals are good imo)15:21
gmannadriant: that is hard part. project team maintaining it in SDK would not success always15:22
mnaserunless SDK team builds tests15:22
adriantyes each service owns their own python-<service>client, but that's soon to be deprecated15:22
mnaserwhich run in gates15:22
adriantthe SDK will be the main and primary client15:22
adriantso shouldn't all the services have some ownership there?15:23
adriantand in turn, support deletion features for their existing and new resources there?15:23
adriantthat's a bigger topic, but applicable to this15:23
gmannIMO, doing this lib implementation and then think of goal (part-2) may introduce complication/question from projects side about "why we need to do this" is/was this goal.15:24
zanebyeah, that's the part where it seems like a goal might be most applicable15:24
asettleSupport and ownership is important, but I see that as different to driving and developing these changes. Would it not be easier to have a centralised body to orchestrate part 1? Part 2 definitely looks like it's a greater effort.15:24
gmannCombining both part together as goal is something we should do even that can take 2 cycle15:24
adriantthe issue is finding a consensus on what part 2 looks like15:25
adriantwhat should the delete API be?15:25
*** Luzi has quit IRC15:25
adriantbulk delete? Orchestrated deleted?15:25
lbragstadwhat was something we brought up in berlin's forum session15:25
adriantthat's why I want to put that off until we have the client side work15:25
lbragstads/what/that/15:25
adriantbecause we can look at the dependencies in a better light, and then thing about where the APIs would help15:26
adriantthink*15:26
lbragstadthere was an action item to write up what the delete APIs would look like, then we can pick them apart15:26
dhellmannmaybe we should focus on the scope of work proposed for this cycle15:26
mnaseri have an idea (rare occurance): why don't we come up with a potential group of folks to work on the client side work in Train for project deletion, and come up with some sort of 'standard' ideas inside U and propose another goal for T.15:27
gmannyeah, i think we need to decide the best interface which project team can maintain and comfortable with.15:27
mnaserlike say, maybe, RBAC support which keystone has put the foundation to15:27
*** jamesmcarthur has quit IRC15:27
mnaserand honestly, it's a bit embarassing that ~openstack~ in all of it's might means you need to write hundnreds of policies to get a read only account15:27
adriantI'd support a readonly rolein openstack as a goal :P15:27
ricolinmnaser, that sounds like a popup team material15:27
mnaserRBAC is something each project can implement in their policy15:28
zanebmnaser: they really can't15:28
mnaserhuh?15:28
adriantsome have hardcoded policy logic15:28
adriantat least I think that's what he means...15:29
zanebmnaser: if other projects don't respect the same RBAC policies then they're worse than useless15:29
mnaserzaneb: the problem is that.. not all projects would follow it, so if i create a reader role, i have to do it across all deployed projects15:29
zanebmnaser: correct15:29
mnaserso in some way, if we implement this, we'll finally fix the long living issue of the fact that adminness doesnt exist15:29
lbragstadi would issue a word of caution on the rbac stuff as a goal - having done a bunch of that work this release in keystone, i think if you're going to push it across the community the goal has to be **ultra** specific and clear15:30
mnaseraka i cant have 'domain' admins15:30
dhellmannare we talking about a new goal now? or did we drift off track?15:30
mnaseri am going REALLY on a huge change of direction but i think rbac fits more of a goal, and i can imagine it would be a *huge* sell15:30
evrardjpdhellmann: I have the impression15:30
mnasermy (non committed idea) was that we can split the delete one into two goals15:31
mnaserthe first one is just to get a group of people to prepare for it15:31
zanebmnaser: lbragstad has been plugging away at that for a while now15:31
asettlemnaser, +115:31
mnaserand that way we have a _proper_ infrastructure for U goal to bulk delete15:31
mnaserso rather than having a goal in a cycle where only 1/2 of it is done..15:31
adriantI can live with that15:31
mnaserbut then again, im just throwing this out there.15:32
zanebI agree that any goal that doesn't fit in a cycle should be split into smaller goals that do15:32
dhellmannso how do we structure whatever portion of that work we want done in train?15:32
mnaserdhellmann: this is where we can discuss at the ptg/forum to come up with that "platform"15:32
adriantand if Monty is willing to help add it to the SDK, and we can get some other support/review from people who know more about the services/resources, then great15:32
mnaserthat allows us to get work done on *community* work that is not yet goal level15:32
mnaseror whatever infrastructure we want to put in place, as what zaneb was talking about earlier15:32
dhellmannmnaser : I'm confused. Are you saying we should wait until the PTG to pick goals?15:32
ttxsounds too late to me15:33
mnaserdhellmann: no, i'm suggesting a replacement goal for the deletion goal with something that fits our goal and putting the delete aside for now15:33
ttxteams need to know what they are up to as they discuss other priorities15:33
dhellmannok15:33
mnaserand in the ptg, we can discuss on coming up with a platform/infrastructure to get cross-project work done (what zaneb referred to at the start)15:33
dhellmannok15:34
mnaserwhich is stuff that "gotta be done" but doesn't involve every single project doing a bit of work in their codebase15:34
lbragstadso - if there is something that is rbac related that aids in the deletion goal down the road, we should find out which aspects of rbac need to be done first and we can write up a goal for that15:34
dhellmannI added "popup teams" to https://etherpad.openstack.org/p/tc-train-ptg15:34
adrianta cross project project? with their own stories/bugs and PTL? :P15:34
asettleGawd15:35
mnaserbut that's just a suggestion, and i don't know how others feel about it.  i'd love to know if lbragstad feels it's also the right time for things like rbac, but man, how many years are we into openstack and getting a read only user or a user that can access a specific service only.. is still a struggle15:35
lbragstadfwiw - i've spent an ungodly amount of time trying to document this - so you anyone can give me an idea of what they need RBAC-wise for project deletion bits to go smooth, i can probably lay out the process15:36
lbragstads/you/if/15:36
dhellmannstandardizing roles feels like a good goal, but do you think we'd have time to organize that for train?15:36
lbragstadmaybe? it will be close15:36
* lbragstad looks for a magic wand15:37
mnaserand it's the type of thing we all need to land together in a single release to make it work, because if any of them don't, it would be a failure15:37
adriantthe issue is that deployers can make their own policy, but better sane and tested defaults would be amazing. A read only role, or roles per service would be amazing, but would need to be a combination of policy AND implied roles.15:37
dhellmannmnaser : is it? or would it just not be done yet?15:37
zanebmnaser++15:37
ricolinIMO if we can first put all potential goal into a popup team, than we don't have to worry about that goal at all, but such action should settle in previous PTG, just a little weird to take it into goal now. But it's definitely a good stuff for Train or U cycle for sure15:37
mnaserdhellmann: it would be not done yet would be accurate, but so long as a project doesn't do it, we can never claim we have RBAC15:37
* dhellmann nods15:37
zanebdhellmann: it's essentially useless until everybody does it, so that's a good candidate for a goal15:37
mnaserso we can pretty much _never_ get rbac if $foo decides they dont want to get it done15:37
dhellmannok, that makes sense15:38
dhellmannwe talked about documenting expectations for admin APIs, and documenting RBAC expectations feels like another good area of guidance for the TC to provide15:38
ttxyeah, goals are really for when (1) every team has to land changes and (2) there is some value if all teams do it around the same time15:38
lbragstad++15:39
lbragstadRBAC fits that bill, imo15:39
jrollmnaser: to be clear, you mean "never get good default rbac", right?15:39
ttx(for some definition of "every". Can be "most")15:39
jrollwe can still have lame manual rbac by editing policy files and such15:39
mnaserjroll: no, pretty much non functional, because if you give role:admin with project scope, and a project doesn't implement it properly, then youll have full admin access to that project15:39
evrardjpI am confused what's here proposed15:40
gmanngood defaults RBAC is not there and it may needs lot of work depends on how good/bad projects policy are15:40
mnaserwhen in reality, you wanted to give someone admin access to a project15:40
jrollmnaser: ah right, gotcha.15:40
jrollthanks15:40
dhellmannevrardjp : we've gone into the weeds of rbac implementation again15:40
adriantMy worry with major RBAC work is that at best all we can do is make sane defaults, and docs. And ultimately a deployer can edit and screw all that work up.15:40
evrardjpyes indeed15:40
mnaserwell then let's take a step back15:40
evrardjpso basically we'll need to go through the details of personas and stuff?15:40
mnaserevrardjp: keystone team already did all of that15:41
mnaserteams literally just have to implement the policy, thats all15:41
evrardjpbut we change it, for the new usage :p15:41
mnaseradmin/member/reader and system/domain/project scope15:41
adriantI think we NEED rbac work, but remember that ultimately policy and which roles are created is up to the deployer15:41
zanebadriant: isn't that better than the current insane defaults and deployers can still screw it up?15:41
mnaserok let's take a step back15:41
adriantzaneb: I totally agree15:41
gmannmnaser: "implement the policy" or "improve the policy" ?15:41
adriantI we need something better15:41
evrardjpgmann: good question.15:41
mnaserit looks like the current project deletion goal in it's current state doesn't fit our goal process, does anyone disagree with this?15:41
adriantany saner default rbac and roles is better than what we have now15:42
adriantbut we need to be careful to document why it is like that, and how existing deployers can switch to using it from their own weird policy as well15:42
ricolinmnaser, we need to make sure we have something like a popup team for it before we drop it out of goal IMO15:42
mnaserricolin: yes, popup team IMHO would be a ptg/forum type of discussion, i'm not saying "we don't get it done"15:43
asettlemnaser, no disagreement. But ack ricolin - need to make sure it's owned by a central body before we move on.15:43
mnaseri'm saying it doesn't fit under "cycle goals"15:43
asettleOr at least, an action item somewhere to ensure it's covered.15:43
adriantmnaser: as the person proposing the goal, yes I agree that it does not fit the goal process15:43
zanebmnaser: as a whole, I don't disagree, but I think there may be parts related to SDK support that are. we can probably discuss that in the context of the other proposed goal though15:43
adriantbut I would still like something done which allows projects like this to exist with support from the likes of the TC15:44
zanebadriant++15:44
ricolinadriant, +15:44
mnaseradriant: absolutely, hence the discussion at ptg/forum which i think dhellmann mentioned they added15:44
adriantbecause there are a lot of small things like this, which need that push to get done15:44
mnaserhttps://etherpad.openstack.org/p/tc-train-ptg <-- popup teams here15:44
mnaserso we're def going to make sure we cover it15:44
mnaserand "Goal selection retrospective" in there too15:44
ttxyes, something that makes at least as much noise as the goals process, to attract as much attention15:44
mnaserabsolutely15:45
adriantttx: ++15:45
adriantyes, that15:45
zanebwe need some way of saying yes, this is a thing that needs to be done and it has been consulted on widely enough and everybody needs to take account of it as part of how OpenStack works, signed: the TC15:45
mnaserok, so that means we're in a place where we need a 2nd goal15:45
ttxbut better suited in recruiting a small dedicated team of people to accomplish one objective15:45
*** jamesmcarthur has joined #openstack-tc15:45
mnaseror rather a goal to replace the project delete one for Train15:45
adriantttx: so a working group? :P15:45
dhellmannmnaser : what's the status of the testing platform upgrade?15:46
ttxadriant: I think it needs a more shiny name15:46
dhellmannthat lingered during stein, is it done now?15:46
jrolldumb question: do we *need* 2 goals? why?15:46
ttxnot "YAWG"15:46
ttx(yet another working group)15:46
asettlejroll, not dumb question. Would be good to know.15:46
mnaserdhellmann: so moving towards bionic? i think we're in a good place and that's mostly done15:46
ttxMaybe "DAWG" (dang, another working group)15:46
ricolinttx, common! it can be YASIG!15:46
dhellmannttx: YAWN: yet another working (group) name15:46
ttxYo Dawg15:47
mnasergmann: probably can comment better about that15:47
mnaser!addquote <ttx> Yo Dawg15:47
openstackmnaser: Error: "addquote" is not a valid command.15:47
mnaserthis one is for the books15:47
gmannmnaser: dhellmann we left with 5-6 patches to land on project side to move project specific jobs to bionic15:47
mnaser:P15:47
gmannand trove and networking-midonet are the one which need some work to do before that15:47
dhellmanngmann : ok, so that's done enough that we probably don't need to consider it a goal this time?15:48
gmannI am working with them and based on progress and when they finsh, we will be able to say it is done15:48
ttxhttps://imgflip.com/i/2wlm8n15:48
adriantOh, actually a goal suggestion: Move off Paste15:48
gmanndhellmann: yeah, thats does not need to be in goal15:48
adriantPaste is pretty much used by almost all services, and is on life support15:48
gmannone I idea am thinking for goal is moving the legacy jobs to zuulv315:48
* smcginnis imagines ttx with cornrows15:49
ttxdisturbing15:49
adriantand a lot of services also use eventlet, which also should go away...15:49
dhellmannas a reminder, here's our goal backlog: https://etherpad.openstack.org/p/community-goals15:49
gmannlegacy jobs are pain whenever any updates we need to do on gate things15:49
adrianteither of those could be community wide goal15:49
adriantgoals*15:49
smcginnisPaste seems like a good start.15:49
dhellmanndo we have enough of any of those worked out to have them documented before the ptg?15:49
*** jamesmcarthur has quit IRC15:50
jrolldumb question: do we *need* 2 goals? why?15:50
* jroll asks again15:50
dhellmannjroll: not really15:50
ttxjroll: no15:50
dhellmanndo we have any at all right now?15:50
mnaserwe have the osc legacy client killing15:50
ttxI'm fine with a single large goal15:50
mnaserwell okay15:50
mnaserlegacy client deprecation in favour of osc15:50
jrollok, had to ask as there was some implication we had to scramble to find a second if we dropped the project deletion thing15:50
dhellmannmaybe we should talk about the client goal in more detail then?15:50
* dhellmann looks at the clock15:51
smcginnisNot even deprecation, right? Just getting osc caught up.15:51
ttxmaybe we can be a bit more optimistic if that's the only train goal15:51
asettleLine 290, "Add Configuration References to Project Doc Trees" is this not complete?15:51
* smcginnis hasn't read the latest proposal15:51
ttx(a train goal is called a destination)15:51
dhellmannhttps://review.openstack.org/#/c/639376/15:51
asettledhellmann, see note above15:51
mnaserit seems to me that this goal fits the fact it's team-based15:51
smcginnisasettle: I believe so15:51
mnaserso i am not really opposed to it15:51
dhellmannasettle : that etherpad may be out of date15:51
asettleAh right. Cause that wasn't the only one I thought had been done15:52
dhellmannmaybe mnaser wants a volunteer to prune the backlog there15:52
asettleThat would be really heplful.15:52
asettlehelpful*15:52
* mnaser takes notes15:52
adriantnumber 3 is basically: Get rid of Paste15:52
asettleWe should look through the legacy client dep goal, but it would be nice to look through what we already *have* and want to complete rather than taking on more and new issues15:52
asettleadriant, heh15:53
asettleyes15:53
adriantthat is a legitimately good goal15:53
adriantand doesn't need a major amount of work to define15:53
mnaserdoes anyone object under the the "Move legacy client CLIs to OSC goal to Train" goal?15:53
evrardjpI don't think so -- as a user of the cloud, I don't really care if it's using paste of any other mw15:53
adriantevrardjp: paste is deprecated and unsupported15:54
adriantso you should15:54
lbragstadmnaser i think that goal needs to have it's criteria broken into separate lists15:54
evrardjpyes, so will python2 next year15:54
*** jamesmcarthur has joined #openstack-tc15:54
jrollevrardjp: as an operator, paste is annoying15:54
mnaserwe can discuss the other goal soon15:54
dhellmannit could use more detail, yeah15:54
evrardjpjroll: yes kinda15:54
asettleWe don't still have any projects on py2, do we?15:54
jrollmnaser: I don't object to the idea, I haven't read the latest iteration15:54
asettleThat was a ocata/pike goal15:54
lbragstadotherwise it feels similar to the project deletion goal in that it is very specific to only a handful of projects15:54
evrardjpasettle: we still carry it15:54
dhellmannasettle : some teams have had technical issues completing the work, but it's still in progress15:55
ricolinmnaser, so are we keep the community-goals etherpad so we can looking for goals for future releases?15:55
asettleevrardjp, yes, I saw that. We don't have any projects still functioning on py2 though, do we? Like, everything is defaulted to py3?15:55
evrardjpI think my intent was not clear in what I said -- We need to think the user facing value15:55
mnaseryes ricolin that's how we kinda maintain it overall15:55
smcginnisasettle: We currently support both 2 and 3, with the stated plan of looking at dropping 2 in the U release.15:55
mnaserand i agree with evrardjp.  paste is rpetty stable and doesn't really change as much.  afaik cdent took it over too so we can maintain it somewhat15:55
ricolinmnaser, than I think we should put RABC and paste into that etherpad:)15:55
mnaserpaste is already there under #315:55
asettleMayhaps I'm being a little too literal - but to me this is the other half of finish what you started. If we require a second goal, starting the work on removing py2 seems like the logical next step15:55
evrardjpIt's a nice thing to remove paste, don't get me wrong15:56
mnaserplease, let's try to focus if the osc client goal removal is a thing15:56
asettleIt would also help push projects to finish the original goal15:56
mnaserwe can decide about those details later of another second potential goal15:56
asettleSorry, yes15:56
evrardjpmnaser: I think it's a nice goal15:57
*** tdasilva has joined #openstack-tc15:57
asettle(yes it's got a lovely personality, good at dinner parities evrardjp :p )15:57
adriantmnaser: standalone client deprecation in favor of OSC as the CLI is a good goal, but should also include switching to the SDK as the main python client15:57
adriantor at least lead into the latter15:57
dhellmannwe've said we weren't going to drop python2 support until the U cycle15:57
* dhellmann looks at the clock again15:57
dhellmann#link https://governance.openstack.org/tc/resolutions/20180529-python2-deprecation-timeline.html15:57
gmannyeah15:57
mnaseryeah i feel so far all we've managed to accomplish is figure out the project deletion goal is not ideal15:58
asettledhellmann, good to know15:58
mnaserand then also it seems that everyone is half unsure about the OSC one15:58
asettlemnaser, lots to talk about? Perhaps an agenda might not have been such an bad idea o.015:58
evrardjpI didn't want to bring py2 on the table -- that was just an example ! I should have shut up.15:58
asettle(strict agenda, I mean)15:58
asettleevrardjp, sorry I took that and ran with it.15:58
mnasersorry, i dropped the ball on properly planning this.  we started from discussing the goals to moving to finding other goals because those apparently don't seem to fit as well15:59
mnaseri don't know if we should _discuss_ them more often, or if we should review more often.  but i think _now_ is really not a good time for us to realize it's not a good fit15:59
asettleNot at all mnaser - sorry for insinuating that. This was an office hours casual chat.15:59
mnaseri also don't want us to just leap forward "just cause"15:59
asettleFair16:00
ttxneed to jump to release meeting16:00
* fungi can't wait to read all 400 lines of this ;)16:00
fungi(after the release meeting)16:00
* dhellmann also needs to change meetings16:00
mnaserdoes anyone feel like we have some homework after this?16:00
asettleIndeed16:00
lbragstadi think i do16:00
adriantI'll write up an email about dropping the project deletion goal, and that we intend to still do it, but not as a goal.16:01
*** diablo_rojo has joined #openstack-tc16:01
mnaserthanks adriant16:01
zanebI feel like we need to reconvene and discuss the OSC goal specifically, with the parts needed to achieve the project deletion thing front and centre16:01
adriantand I'll have a chat with monty and see how willing he is with helping design and implement it along with me. But chances are more eyes on that work will be good.16:01
dhellmannzaneb : ++16:02
evrardjpthanks adriant16:02
* gmann need to jump to qa office hour16:02
adriantzaneb: full support for the SDK from each project would be amazing!16:02
mnaserok, i'll end for now and we can keep talking within office hours16:02
mnaser#endmeeting16:02
*** openstack changes topic to "OpenStack Technical Committee office hours: Tuesdays at 09:00 UTC, Wednesdays at 01:00 UTC, and Thursdays at 15:00 UTC | https://governance.openstack.org/tc/ | channel logs http://eavesdrop.openstack.org/irclogs/%23openstack-tc/"16:02
openstackMeeting ended Thu Mar 21 16:02:24 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:02
openstackMinutes:        http://eavesdrop.openstack.org/meetings/tc_goals/2019/tc_goals.2019-03-21-15.01.html16:02
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/tc_goals/2019/tc_goals.2019-03-21-15.01.txt16:02
openstackLog:            http://eavesdrop.openstack.org/meetings/tc_goals/2019/tc_goals.2019-03-21-15.01.log.html16:02
mnaserzaneb: that would mean we're getting some sort of agreement that the sdk goal is the way to go?16:02
mnasererr osc goal16:02
adriantI think we can't really separate that goal from the SDK16:03
mnaserand seeing smcginnis comment that glance or cinder wouldn't be able to do it seems to be setting ourselves up for failure :\16:03
adriantthe OSC is moving to using JUST the SDK16:03
adriantso deprecating the standalone clients in favor of the SDK and the OSC is pretty much a given16:03
zanebmnaser: I don't know. I have been slack about reading the comments on the goal reviews16:03
mnaseri just feel rbac is a much stronger goal than all of these and it fits our structure much more16:05
dtroyermnaser: 2 out of 20-some is failure?16:05
mnaserbut i think i should have spoken up earlier, but i just recently started realizing how bad the situation seems to be16:05
mnaserdtroyer: well, 2 fundamental projects16:05
mnasermost clouds rely on cinder and/or glance, if folks have to still use their CLIs to do $some_op -- i dont know if we've succeded at providing a unified cli16:06
ricolinmnaser, I agree with you on that, and we should do some action even it's not a goal16:06
zanebmnaser: I agree that RBAC is the most urgent of the potential goals. I'll defer to lbragstad on whether there is some part of that that is ready to be a project-wide goal for Train16:06
ricolinmnaser, I mean the RBAC one16:06
mnaserRBAC seems big too, so it can be a single goal. also, i know that some folks expressed interest in putting in the work to make it happen16:07
dtroyerIf you see the deprecation ans the only goal, then yeah, we'll never succeed16:07
dtroyerprojects just work that way16:07
dtroyerusers don't care if the 'cinder' command exists, they want 'openstack volume create' to work16:07
dtroyerthe two have co-existed for 6 years, which is more important?16:07
mnaserright but if they can only do operation X via cinder command because its where the cinder team implements things...16:07
lbragstadzaneb mnaser i think rbac will be too big and isn't specific16:07
mnaserlbragstad: ah, okay :(16:08
adriantis there a good reason why cinder and glance won't drop/deprecate their cli?16:08
smcginnisdtroyer: ++16:08
dtroyerwhich -> deprecation of parity16:08
dtroyersof/or/16:08
zanebmnaser: don't feel bad, I remember being in a design summit session in Austin (2015) when we agreed on it... I don't think lack of people speaking up earlier was the obstacle16:08
lbragstadmnaser that's not to say we couldn't find a "piece" of that work to do16:08
mnaserlbragstad: well, updating policies to use scopes and the new roles16:08
dtroyeradriant: I quit caring about their reasons a long time ago, I don't knwo what they are now16:08
zaneblbragstad: I think if we can find a piece that we can feasibly move forward, then we should16:08
zanebotherwise it will always be out of reach16:09
mnaserso start implementing system/domain/project scope for policies AND using the new roles16:09
lbragstadpre-reading: https://docs.openstack.org/keystone/latest/contributor/services.html#why-are-authorization-scopes-important16:09
lbragstadhow-to: https://docs.openstack.org/keystone/latest/contributor/services.html#how-to-i-incorporate-authorization-scopes-into-a-service16:09
adriantdtroyer: but that makes no sense in a large community driven thing like openstack... if it makes sense for 18/20 to do it, then they should too16:09
lbragstad^ those were written specifically for developers so that doing a multi-goal push would be easier16:09
gmannmnaser: lbragstad that need policy granular work also to adopt the new roles. (at least for nova lot of policies to be granular)16:10
*** e0ne has quit IRC16:10
gmannlbragstad: does scope thing work/benefit alone without default roles ?16:10
mnaseryeah maybe adding scope to all policies as a step 1 i guess16:10
lbragstadgmann it can16:10
gmannok16:10
lbragstadbut... there are a bunch of services with rbac enforcement scattered through out the stack16:10
dtroyeradriant: projects have independence, some have it much stronger than others.16:11
lbragstadnova and cinder are examples of two16:11
gmannat least to separate the system-admin and project-admin right ?16:11
lbragstadimo - refactoring that into a single compartmentalized layer is a good step, but doing that should probably be validated by tests16:11
lbragstadhttps://docs.openstack.org/keystone/latest/contributor/services.html#ruthless-testing might be a good first goal16:12
adriantdtroyer: I mean, you aren't wrong, but a lot of OpenStack doesn't exist or make much sense outside of the scope of OpenStack, and Glance and Cinder kind of feel like they don't make sense as standalone projects...16:12
dtroyerCinder actually kinda sort is already used outside of OpenStack16:13
mnaseryep with standalone stuff16:13
mnaserand k8s csi afaik16:13
dtroyerOSC exists exactly because it took 5 months to get the 4 auth environment variables into all 5 (at the time) CLIs16:13
dtroyerand FWIW, Keystone has by far been our biggest supporter project-wise (I blame dolphm for agreeing with me in the first place)16:14
* mnaser wonders how we could speed up osc too at some point16:15
mnasertime openstack --help => 4.79s user 0.16s system 99% cpu 4.978 total16:15
adriantdtroyer: would it be possible to maybe allow both... Cinder can maintain their part of the CLI in their codebase, and the OSC imports and includes it?16:16
adriantif installed standalone, it has it's own CLI, otherwise it's a plugin of the OSC16:16
dtroyermnaser: yup, we know basically what the problem is there and we're not going to re-write setuptools entrypoint to fix it16:16
adriantit would be a complex solution, but if the service can work standalone then yes it does make sense to have a standalone client... but duplicating the work/code is a mess16:17
dtroyeradriant: absolutely.  osc-lib exists to support stand-alone CLIs, Ironic asked for it a long time ago, I'm not sure if they ever changed over though16:17
adriantthen maybe that's the soluton16:18
adriant... I serious can't type toni... today16:18
adriantmaybe we do this goal, and as part of the deprecation work, we look at which clients make sense as standalone, and move the OSC code out to them instead of merging it into the OSC16:19
smcginnisadriant: The problem with having one code base is osc makes some changes for consistency that would require a lot of changes on the cinder CLI part.16:19
dtroyerit is not (quite) the solution for the existing CLIs, they are not command-compatible.  could they be? maybe…it would likely be less work to just ocnvert the cinder command to use the SDK if that's really what you are after16:20
dtroyerthe big win for them was using ksa, using SDK's connection/adapter would be useful too, but less so16:21
adriantbecause we have two competing problems. We want a unified client which is supported by the services, and some services want a standalone client for legitimate reasons16:21
adriantand yes ultimately those service devs would prefer not to have to maintain both...16:22
adriantsmcginnis: so can we maybe deprecate the current cinder cli and make a new on that is OSC compatible and is both a standalone cinder cli AND a plugin for the OSC?16:24
smcginnisThat may be a hard sell.16:25
smcginnisWe could bring it up though.16:25
adriantbut is there a way to otherwise solve this?16:25
smcginnisConsistency is good, but I know some folks really do not like some of the choices for consistency done in osc.16:25
adriantthat isn't a good solution, but we're smart enough to find a way to make it work.16:26
smcginnisOther way to solve it is just have parity between the two and see what folks use.16:26
dtroyerWhy is it such a problem for cinder to keep its CLI?16:26
dtroyersmcginnis: ^^^ that should be the priority16:27
smcginnisWhat's the priority?16:27
adriantit isn't? But if they are only maintain their own one, will it not ultimately end up feature complete more often than the OSC?16:27
dtroyerparity16:27
smcginnisdtroyer: Oh, yep. Big +116:27
*** jaosorior has joined #openstack-tc16:27
zanebdtroyer: I don't think it's a problem Cinder having its own CLI, but if Cinder spends all of its effort on keeping its own CLI up to date at the expense of neglecting OSC, that's a problem16:28
adriantzaneb: +116:28
adriantthat is the worry16:28
adriantwho is responsible for parity16:28
dtroyeradriant: yes, that has been a problem since day 1.  Will continue to be one as long as there are two.  and is ultimately Cinder's problem because OSc doesn't have the resources to keep up16:28
*** jamesmcarthur has quit IRC16:29
adriantthat's why I'm thinking find that middle ground of: "we do it the OSC way, but you keep the code ownership and can still have a standalone client, but the OSC also exposes those commands"16:30
adriantso they ultimately still maintain it16:30
adriantand the OSC gets the benefit too16:30
adriantit may well be a stupid idea16:30
dtroyerthe problem seems to be the command choices I made16:31
dtroyernaming resources, option names, etc16:31
dtroyerI've gotten an earful more than once about not including them in those choices, 4 years after I made them16:31
adriantcan we alter that? Does the CLI need as strict a contract as an API?16:31
dtroyeradriant: yes, that is the whole point here16:31
dtroyerwe (OpenStack) already treat it that way16:32
dtroyereven sricter than some REAT APIs16:32
adriantouch16:32
dtroyerthe CLI _IS_ the OpenStack API for a lot of cloud consumers16:32
adriantbut hopefully in an interactive sense, where we can deprecate and warn about changes? or is the worry people automating things with it using bash or exec actions in automation/config management tools?16:33
dtroyerit's the automation/scripting16:33
dtroyeruser expectations is also quite high though.  We did UX testing at two summits, that was huge in the responses16:34
adriantyeeesh. They we're screwed16:34
adriantthen*16:34
dtroyerno, we're not screwed, we have to be thoughtful about what we put out there and be willing to live with it for the forseeable future16:34
dtroyerOSC still supports Juno (in theory, I haven't tried it in a while)  commands from then still work as long as the underlying service hasn't broken them16:35
dtroyeraka, nova-net16:35
adriantoh well. I should legitimately go get sleep.16:37
*** jamesmcarthur has joined #openstack-tc16:55
*** ricolin has quit IRC16:58
openstackgerritTobias Urdin proposed openstack/governance master: Update my email address  https://review.openstack.org/64523316:59
*** jamesmcarthur has quit IRC17:01
*** mriedem is now known as mriedem_grooming17:16
*** jpich has quit IRC17:23
*** dtantsur is now known as dtantsur|afk17:30
*** gmann is now known as gmann_afk17:43
*** e0ne has joined #openstack-tc18:05
*** e0ne has quit IRC18:12
*** whoami-rajat has quit IRC18:23
*** gmann_afk is now known as gmann18:40
*** mriedem_grooming is now known as mriedem18:53
*** ijolliffe has quit IRC18:58
mnasertc-members: there was talks about setting up an adhoc meeting for leaderless projects but it looks like it won't be necessary as we have candidates for all, i'll skip on that if no one objects, i added an item for the ptg to discuss 'community lead projects' rather than those that have a specific PTL as some discussion surfaced around that19:00
lbragstadcool19:01
gmann+119:01
jroll++ cancel the meeting unless the reviews for those candidates come to blows19:01
TheJulia+119:08
fungiagreed19:11
*** cdent has joined #openstack-tc19:15
*** cdent has left #openstack-tc19:17
*** whoami-rajat has joined #openstack-tc19:26
gmanntc-members:  I have started the Report for Bionic migration activity (Summary 6 projects left) - http://lists.openstack.org/pipermail/openstack-discuss/2019-March/004113.html19:26
mugsiemnaser: makes sense19:26
*** e0ne has joined #openstack-tc19:30
fungithanks gmann!19:38
gmanntrove seems to be in risk, i pinged lxkong and discuss about it once he is online19:40
*** e0ne has quit IRC19:49
*** e0ne has joined #openstack-tc19:52
*** e0ne has quit IRC20:04
*** e0ne has joined #openstack-tc20:28
*** e0ne has quit IRC21:17
openstackgerritLance Bragstad proposed openstack/governance master: Describe the business value of basic RBAC  https://review.openstack.org/64536121:21
lbragstadmnaser i had a note to do that ^ a while ago, but after today's meeting i decided i should probably bump that up the priority queue21:21
*** bsilverman has quit IRC21:41
*** whoami-rajat has quit IRC21:45
*** irclogbot_0 has quit IRC22:05
*** marst has quit IRC22:09
*** Sundar has joined #openstack-tc22:35
*** mriedem is now known as mriedem_afk22:50
*** tosky has quit IRC22:59
*** lbragstad has quit IRC23:46
*** jamesmcarthur has joined #openstack-tc23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!