14:00:44 #startmeeting glance 14:00:45 Meeting started Thu Jul 21 14:00:44 2016 UTC and is due to finish in 60 minutes. The chair is nikhil. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:00:46 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:00:48 The meeting name has been set to 'glance' 14:00:54 someone has messed up the etherpad 14:01:05 hopefully not me 14:01:10 all the text on info, best practices etc are gone 14:01:14 o/ 14:01:22 \o 14:01:27 o/ 14:01:27 all: please try to undo your changes and see if we can recover stuff 14:01:31 definitely not me 14:01:36 o/ 14:01:53 o/ 14:02:04 maybe we should use wiki for agenda? 14:02:05 nikhil: I added the alembic one yesterday 14:02:14 I will try to create more reliable docs for this round 14:02:25 no, let's not change the etherpad 14:02:35 you can rewind bits 14:02:43 I just added it all back 14:02:53 and wiki needs lot of updating and is inaccessible for those who don't have account (new accounts suspended) 14:03:09 o/ 14:03:18 bunting: you using the history/timeslider? 14:03:27 yeah, i just copied it 14:03:33 pasted it in 14:03:33 thanks 14:03:42 I may have missed the 24hr deadline, will move my item 14:03:43 good stuff 14:04:00 in any case, I think this is a alarm for more permanant docs 14:04:07 +1 14:04:08 because the history is limited 14:04:16 wow, new font) 14:04:24 and next time it happens we may not be lucky 14:04:31 * nikhil stops his rage 14:04:35 let's move on 14:04:47 #topic Glare Updates ( mfedosin ) 14:04:55 hi folks 14:05:10 #info agenda for today https://etherpad.openstack.org/p/glance-team-meeting-agenda 14:05:16 hi mike! 14:05:18 last week we uploaded a set of patches on review 14:05:46 it's working glare code that can be used in production 14:06:10 based on this code we're developing artifact types for Heat, Murano and Tosca 14:06:32 https://review.openstack.org/#/c/343787/ 14:07:17 a couple of small issues were found - one file is placed in wrong commit and jsonpatch is not validated properly 14:07:30 but other things are good :) 14:07:53 all core members are added in reviewers of the code 14:08:06 so we're waiting your feedback 14:08:42 excellent 14:08:57 nikhil: thanks, I know 14:09:02 Thanks for the updates! 14:09:24 maybe there are any questions? 14:09:34 I hope that the team will feel free to casually disucss glare code on openstack-glance 14:09:50 yeah 14:10:09 we also asked about feedback about heat artifact from heat team 14:10:13 especially if you need more clarifications on reivews (please link such convos eavesdrop weblink to the reviews) 14:11:10 I am thinking about a doc that explains some enhancements in glare that could be used by Glance 14:11:28 for example, how glare treat policies 14:11:38 what glare did with custom locations 14:11:48 kairat: yeah, it's a good enhancement 14:11:57 how we implemented micro-versioning 14:12:12 I think a lot of these enhancements can be easily used by Glance 14:13:03 great 14:13:12 * nikhil waits for the document 14:13:15 for example, microversioning framework can be used by Glance IMO without big troubles 14:13:28 except compatibility but I am not sure 14:13:34 So what do you think? 14:13:38 policies as well 14:13:41 nikhil, ok 14:13:49 we need specs for all of these :) 14:14:08 I think flaper87 wanted to adopt microversioning but I'm not sure if he's b/w 14:14:42 mircroversioning by itself may not be enough for glance, we may need to implement stuff in client and collab with osc 14:15:00 yep 14:15:01 anyway, I want to stop thinking ahead 14:15:11 server is not enough 14:15:18 but it is starting point 14:15:51 But all of these are great ideas and definitely worth implementation. Let's just make sure we plan different priorities properly so that not everything is congested in one cycle. 14:17:12 should we move on? 14:17:27 only one question 14:18:22 mfedosin: yeas? 14:18:22 feature freeze will be next week 14:18:39 29th of July afaik 14:19:13 mfedosin: feature frezze is NOT next week 14:19:27 #info glance project specific dates : http://lists.openstack.org/pipermail/openstack-dev/2016-May/094780.html 14:19:32 just spec freeze? 14:20:00 #action nikhil : add the dates to a permanant location (see if release team is still accepting updates) 14:20:12 oh :) 14:20:20 * nikhil thinks only if that thread did not start a conversation, we'd have those dates on release page 14:20:29 mfedosin, it is spec freeze 14:20:35 so, that's great then 14:20:48 moving on 14:20:54 yeah there is good month to get the code reviewed ... no panic 14:21:15 #topic Nova v1, v2 updates ( nikhil ) 14:21:25 #info use_glance_v1 defaults to false, glance v1 deprecated in nova, move to glance v2 to upgrade nova to ocata 14:21:45 Useful links: 14:21:47 I saw there had been some issues with snapshot creation 14:21:50 #link https://github.com/openstack/nova/blob/11f8c1bc3ce07cb5ffe52f6dbd5d4892bfa9c4e3/nova/conf/glance.py#L51-L74 14:21:57 #link http://specs.openstack.org/openstack/nova-specs/specs/newton/approved/deprecate-api-proxies.html 14:22:04 #link http://eavesdrop.openstack.org/irclogs/%23openstack-nova/%23openstack-nova.2016-07-20.log.html#t2016-07-20T16:07:54 14:22:15 a related bug in snapshot creation: 14:22:34 #link https://bugs.launchpad.net/python-glanceclient/+bug/1596602 14:22:34 Launchpad bug 1596602 in python-glanceclient "Instance Snapshot failure: "Unable to set 'kernel_id' to 'None'. Reason: None is not of type u'string'"" [High,Confirmed] - Assigned to Mike Fedosin (mfedosin) 14:23:20 #startvote Should we (glance team) start v1 deprecation in Newton? (yes, no, will-get-back) 14:23:21 Begin voting on: Should we (glance team) start v1 deprecation in Newton? Valid vote options are , yes, no, will-get-back, . 14:23:23 Vote using '#vote OPTION'. Only your last vote counts. 14:23:32 #vote yes 14:23:33 #vote yes 14:23:47 not start ... we should deprecate it in Newton as agreed 14:24:01 jokke_: yes, thanks for clarifying 14:24:17 by start, I only mean that we start the deprecation period 14:24:30 which at this point seems to be 2 cycles 14:24:31 https://review.openstack.org/#/c/328390/ 14:24:50 #vote yes 14:24:55 #vote yes 14:25:00 #vote yes 14:25:16 #vote yes 14:25:26 but i think the deprecation period also depends on replacement functionality being available, e.g., copy-from 14:25:27 If we deprecate this 14:25:44 we need to implement image refactor in two cycles 14:25:51 ++ to rosmaita 14:25:55 rosmaita: correct, and we need to prioritize those features accordingly 14:26:17 what about adding this to deprecation description? 14:26:49 I don't think the image refactor has too much to do with the deprecation of v1 (specially now when our major consumers are moved to use the current v2 API) 14:26:59 we need a full spec 14:27:04 we can discuss details there 14:27:09 ok 14:27:18 at least horizon has troubles with migration 14:27:27 AFAIK 14:27:29 and Heat 14:27:35 #action nikhil: start a full spec collaboration on glance v1 deprecation 14:27:36 ah, yes 14:28:08 yeah, I think their issues are not as complex as nova 14:28:20 yes both of them do rely on copy-from but there is workarounds for copy-from 14:28:29 so, they can adopt parity features as soon as they are available 14:28:43 nova and cider were the biggest pain points and specially Nova 14:29:13 so it would be good for them to use our approach instead re-implementing it in other projects=) 14:29:15 like I said before all the uses case behind 'copy-from' are not covered by the workaround 14:29:17 s/cider/cinder/ 14:29:31 * rosmaita likes cider 14:29:36 heh 14:29:54 * nikhil is frustrated why people aren't able to digest the issues workaround creates in glance 14:30:04 #vote yes 14:30:19 ok, I'm moving on for now 14:30:24 #endvote 14:30:25 Voted on "Should we (glance team) start v1 deprecation in Newton?" Results are 14:30:27 yes (7): bunting, nikhil, hemanthm, mfedosin, kairat, jokke_, rosmaita 14:30:42 #topic Releases ( nikhil ) 14:30:53 two releases this week 14:30:58 #info glanceclient 2.2.0 http://lists.openstack.org/pipermail/openstack-announce/2016-July/001363.html 14:31:06 #info glance_store 0.14.0 http://lists.openstack.org/pipermail/openstack-dev/2016-July/099660.html 14:31:42 we may need to request some lib release for the docs gate job that is broken 14:31:45 cool! 14:32:09 example for docs gate failure: http://logs.openstack.org/23/337323/3/gate/gate-glance-docs/c7bc845/ 14:32:30 I did not have b/w to dig further 14:32:45 so, this is email I sent to docs list http://lists.openstack.org/pipermail/openstack-docs/2016-July/008899.html 14:33:02 moving on 14:33:08 rosmaita: is the next topic yours? 14:33:23 looks like somebody use + with translation messages 14:33:31 or with lazy strings 14:33:37 i put it on, but it's really bunting and kairat 14:33:37 need to dig into that 14:33:50 looks like some cinder endpoint translation 14:33:51 Ah its about my patch 14:34:07 thanks rosmaita 14:34:22 ah, that's about policies 14:34:27 yes 14:34:31 #info all: please type your/interest/proposer irc nick after your topic in meeting agenda 14:34:45 #topic Glance has been introducing policies to address specific use cases; Glare is using more general policies with specific use cases met by carefully constructed rules ( kairat , bunting ) 14:35:03 * nikhil hands the mic to bunting 14:35:07 So I didn't add that topic but will comment anyway =) 14:35:16 #link https://review.openstack.org/#/c/256381/ 14:35:33 This is about my patch to introduce the new policy delete_deactivated_image, however kairat says this could possibly be done with a complex rule 14:36:02 There is quite a bit of disucssion that took place on the bug 14:36:15 that could be done with policies AFAIK 14:36:40 I like what kairat proposed on commenton PS13 (jul 18) 14:36:52 so I am wondering why we need to introduce new policy instead of use existing policy functionality 14:37:14 (but I haven't evaluated on why so and the consequences) 14:37:17 kairat: I don't really understand how we would be able to add this in our existing policies 14:37:30 you don't need to 14:37:41 since delete_image does not let a user delete another persons image 14:37:44 you can just provide instructions how to do that 14:38:13 which this patch wants to open up 14:38:21 (as long as its deactivated) 14:38:28 so is it possible to delete with separate policy? 14:39:08 That's what the patch aims to do, allow a user to delete another users image if its deactivaed 14:39:18 I like that rule approach as well if that works 14:39:27 The example given was a security group that does not have to be given admin 14:39:49 my concern is how complex the rules will be ... i think we will have to provide some kind of support for operators, because it will be easy to write a rule that isn't quite correct 14:40:08 bunting, sorry, it is not clear for me why do we need to allow another users to delete de-activated images> 14:40:50 kairat: it's a special image-cleanup crew, who aren't admins, but have the responsibility for investigating a "bad" image 14:40:53 will the tenant be different? 14:40:55 rosmaita: correct, we need some solid example on how to write rules 14:41:05 examples* 14:41:06 the use case is that the operator doesn't want the owner to delete the "evidence" 14:41:16 hm, so you can do that as well with policies 14:41:31 I will explain that in review 14:41:37 kairat: i think you are right, it's the complexity that bothers me 14:41:43 rosmaita: yes, that's the use case I understood as well, now it seems to be turned around 14:42:13 * jokke_ goes back and looks the spec 14:43:11 rosmaita: I think I am missing something 14:43:13 Ah, i see, we built upon that idea, to produce the next spec 14:43:18 #link https://review.openstack.org/#/c/309346/ 14:43:24 so the lite-spec discusses about permitting user deleting the image it owns but is deactivated 14:43:33 I merged them in my head 14:43:51 jokke_: current situation: owner can delete a deactivated image 14:43:59 rosmaita: yes 14:44:05 bunting's patch: introduce a policy to govern that 14:44:08 bunting, that's also can be covered with policies AFAIU 14:44:20 rosmaita: and the lite-spec that the change is referring to addresses that specific case 14:44:44 rosmaita: kairat : can we talk tradeoffs? (rather than what we can and cannot do) 14:44:47 yeah, the lite-spec allows you to restrict who can delete a deactivated image if you like 14:45:09 well, the tradeoff is: policy-per-action: easy for ops to configure 14:45:13 nikhil, IMO it is better to provide a guide and not support them 14:45:14 downside is pain for devs 14:45:57 rosmaita: kairat : just that the policy remains upstream for us to consider another use case while developing? 14:45:58 we can also provide some default rules by default that can be used by ops for convinience 14:46:15 I'm any day willing to trade dev pain to user ease 14:46:31 i was thinking some kind of "policy cookbook" 14:46:48 but we would have to have tests to go with the policies to guarantee them 14:47:08 rosmaita: ++ 14:47:09 I think jokke_ meant 'for user ease' (based on knowing his intentions from prior conversations) 14:47:10 and maybe we should wait for the policy yaml stuff, not sure when that is happening in oslo 14:47:33 additionally, I would like to have default policies in code before introducing new policies 14:47:41 kairat: ++ 14:47:45 worst case scenario is that we offer policy rule to address usecase X and 3 months later we change the code invalidating that rule but don't catch it 14:47:55 we need to do something like: https://blueprints.launchpad.net/nova/+spec/policy-in-code 14:47:58 nikhil: indeed 14:48:07 +100500 14:48:11 to rosmaita =) 14:48:25 Glare did that without big troubles 14:48:37 also kairat implemented it in glare 14:48:39 how bad is the need for this change? 14:48:49 #link https://review.openstack.org/#/c/292327/48/glance/common/glare/policy.py 14:48:50 But does that only change the default, which is slightly different problem? 14:49:00 we can use it as example 14:49:17 since a cookbook would have multiple 14:49:59 changing policy behavior is literally changing core of glance 14:50:25 * nikhil thinks that should be carefully vetted rather than copied from other places 14:50:36 with policy-in-code we do not change anything 14:50:41 _if_ we agree on need to do some heavy refactoring on our policy code before facilitating, I'd propose to investigate the use of the rules to work around instead of adding stuff to our policies we need to refactor (and potentially break doing so) 14:50:42 i think that's why kairat brought it up ... we will have to support all the old policies, so we should be careful about adding new onew 14:50:53 == jokke_ 14:51:24 rosmaita: I am still dubious on the 'requirement' piece 14:51:37 nikhil: how do you mean? 14:51:50 we are proposing heavy changes when glance is already bogged down with even more important and pressing ones 14:51:54 additionally, users now have possibility to control behavior for de-activated images 14:52:19 so do we need to introduce one more approach for that for convenience only now 14:52:58 I mean if somebody would need that we can provide a doc as alternative 14:53:19 in any case, I think the whys (use cases) that trigger this level of change need to be written down 14:53:38 nikhil, yep, agree 14:53:54 I like to think from source and I am a bit confused on the value addition 14:54:24 source == requirement giving birth to this change 14:54:31 anyway, let's continue in open discussion 14:54:35 #topic open discussion 14:54:45 alembic? 14:54:48 hemanthm, ^ 14:54:52 hemanthm: you can start today and let's see if we can continue later 14:54:56 yep 14:55:00 In the last meeting, we discussed adopting expand/contract style for glance migrations. 14:55:04 Looking further it appears that we may have to move to alembic from sqlalchemy-migrate. 14:55:07 And, here's why. 14:55:13 Splitting migrations into expand and contract essentially results in two parallel migrations streams. 14:55:17 the midcycle Glare session is up and available https://youtu.be/FgbgiaAFGxE 14:55:22 We currently keep just one migration stream that's maintained with a numeric prefix to the migration file. 14:55:28 Once we split the migrations, we need to maintain two such streams, which isn't possible with sqlalchemy-migrate. 14:55:31 Or let's just say sqlalchemy isn't designed for it. 14:55:31 jokke_, cool! 14:55:45 *sqlalchemy-migrate I mean 14:55:50 So, I was wondering if anyone of you here has experience working with alembic and can 14:55:53 #1 confirm that my assessment is correct 14:55:56 #2 comment on alembic in general and it's suitability for Glance 14:55:58 jokke_: I will add that to the midcycle page (if you dont' mind) 14:56:15 nikhil: go for it 14:56:33 nikhil: it's up there so people can watch it/refer to it 14:57:22 hemanthm: would that be introducing alembic as extra for migrations or replacing sqlalchemy? 14:57:30 jokke_: replacing 14:57:56 jokke_: do you have the recording for specs discussion too? 14:57:58 spoke to Mike Bayer as well, he thinks alembic is the way forward (just FYI) 14:58:15 Unfortunately, I didn't have time to dig into alembic a lot 14:58:17 Neutron already uses alembic 14:58:22 nikhil: hopefully tonight ... needs bit more work still 14:58:26 hemanthm: I vote for alembic 14:58:28 but from what I heard a lot of projects use it 14:58:37 well, I am skeptical on taking word of a single person 14:58:41 nikhil: will send both links to the ML when they are up 14:58:46 kairat: yes, and they like it 14:58:52 hemanthm: I think this calls for a openstack-dev [all] discussion 14:58:57 (on ML) 14:59:03 nikhil: that's just FYI 14:59:08 not saying we should do it on his word 14:59:09 hemanthm: cool 14:59:27 Personally I think, if we need to move away from sqlalchemy, that's definitely out of the table for Newton 14:59:28 30 seconds to go 14:59:40 == jokke_ 14:59:44 jokke_: +1 that's my concern too 14:59:51 We have lots of things that are not done in time already 15:00:00 although I put up a change and we can take a call 15:00:14 I heard from guys who tried to build glance on containers that they had troubles with sqlalchemy-migrate 15:00:22 so I am for alembic too 15:00:25 hemanthm: happy to -2 it ;) 15:00:27 we're out of time 15:00:31 for newton 15:00:36 let's continue next week ( hemanthm ) 15:00:37 jokke_: sure, I'm used to it now :P 15:00:40 goodie 15:00:42 thanks all for joining! 15:00:44 thanks all! 15:00:45 #endmeeting