| *** barra204 has quit IRC | 00:03 | |
| *** electrocucaracha has quit IRC | 00:28 | |
| *** puranamr has quit IRC | 01:18 | |
| *** puranamr has joined #openstack-community | 01:20 | |
| *** puranamr has quit IRC | 01:30 | |
| *** puranamr has joined #openstack-community | 01:30 | |
| *** puranamr has quit IRC | 01:30 | |
| *** puranamr has joined #openstack-community | 01:31 | |
| *** puranamr has quit IRC | 01:39 | |
| *** puranamr has joined #openstack-community | 01:41 | |
| *** coolsvap|away has quit IRC | 02:10 | |
| *** coolsvap|away has joined #openstack-community | 02:12 | |
| *** puranamr has quit IRC | 02:18 | |
| *** mmasaki has quit IRC | 02:26 | |
| *** mmasaki has joined #openstack-community | 02:26 | |
| *** coolsvap has quit IRC | 02:45 | |
| *** hakimo has joined #openstack-community | 02:52 | |
| *** hakimo_ has quit IRC | 02:54 | |
| *** mmasaki has quit IRC | 03:36 | |
| *** mmasaki has joined #openstack-community | 03:37 | |
| *** puranamr has joined #openstack-community | 04:07 | |
| *** puranamr_ has joined #openstack-community | 04:11 | |
| *** puranamr has quit IRC | 04:13 | |
| *** mmasaki has quit IRC | 04:20 | |
| *** coolsvap|away is now known as coolsvap | 04:20 | |
| *** mmasaki has joined #openstack-community | 04:21 | |
| *** fifieldt has joined #openstack-community | 04:28 | |
| *** puranamr_ has quit IRC | 04:47 | |
| *** mrmartin has joined #openstack-community | 04:55 | |
| *** Adri2000 has joined #openstack-community | 05:00 | |
| mrmartin | fifieldt hi | 05:15 |
|---|---|---|
| *** puranamr has joined #openstack-community | 05:30 | |
| *** puranamr_ has joined #openstack-community | 05:32 | |
| *** puranamr has quit IRC | 05:34 | |
| fifieldt | hi | 05:51 |
| mrmartin | Tom, I've read your remark about ask user angry. | 05:55 |
| mrmartin | The situation here, that we have a working ask-staging, just a restore from prod db required, where I cannot help too much, because I don't have the proper permissions to access the servers. | 05:55 |
| mrmartin | I feel myself a littlebit powerless here, this migration is a max. 1 week task, we are doing since april | 05:56 |
| mrmartin | the service model behind the upfront web services are good, we need to fine-tune a bit the execution model. | 05:58 |
| mrmartin | maybe with splitting out all those upfront web-services into a separate infra, and allocating the proper permissions / resources could drastically improve the delivery times | 05:58 |
| mrmartin | this requires a different operation model, than the CI. When the CI is not working, the devs are angry, but if the upfront web services has issues, it is a world-wide visible story. | 05:59 |
| mrmartin | fifieldt ^^ | 06:14 |
| fifieldt | yup, so hence why I want to fix prod | 06:15 |
| fifieldt | migration will take too long | 06:15 |
| mrmartin | yeah, but it is not trivial to going to prod, and fix it, because it requires an askbot upgrade, that brakes a lot's of things | 06:17 |
| mrmartin | that was the reason that we needed to upgrade to trusty, and upgrade a lot's of things in config mgmt and dependencies | 06:18 |
| mrmartin | Jeremy didn't have time to make the db restore yesterday, but I sent in a patch to get an access at least to staging instance, and I can help him to speed up this process | 06:18 |
| mrmartin | it is waiting for a core-infra approval: https://review.openstack.org/#/c/201711/ | 06:19 |
| mrmartin | the code-review part had been accepted by infra | 06:19 |
| fifieldt | my reported issue is not related to the upgrade though | 06:24 |
| fifieldt | it can be fixed by the upgrade, but the pain is now :) | 06:24 |
| *** tobe has joined #openstack-community | 06:28 | |
| *** puranamr_ has quit IRC | 06:30 | |
| mrmartin | fifieldt, anyway do you get the admin access fro ask.o.o ? | 06:41 |
| mrmartin | fro / for | 06:41 |
| *** neeti has joined #openstack-community | 06:46 | |
| fifieldt | I have the admin interface now, yeah | 06:48 |
| *** mrmartin has quit IRC | 07:16 | |
| *** dabukalam has quit IRC | 07:30 | |
| *** dabukalam has joined #openstack-community | 07:32 | |
| *** dizquierdo has joined #openstack-community | 08:28 | |
| *** dizquierdo has quit IRC | 09:34 | |
| *** dizquierdo has joined #openstack-community | 09:50 | |
| *** tobe has quit IRC | 09:54 | |
| *** tobe has joined #openstack-community | 10:17 | |
| *** mrmartin has joined #openstack-community | 10:21 | |
| *** coolsvap is now known as coolsvap|away | 10:41 | |
| *** tobe has quit IRC | 10:48 | |
| *** openstack has joined #openstack-community | 11:38 | |
| *** puranamr has joined #openstack-community | 11:58 | |
| *** ozstacker_ has joined #openstack-community | 12:03 | |
| *** ozstacker has quit IRC | 12:07 | |
| *** puranamr has quit IRC | 12:11 | |
| *** tobe has joined #openstack-community | 12:15 | |
| *** tobe has quit IRC | 12:18 | |
| *** tobe has joined #openstack-community | 12:19 | |
| *** tobe has quit IRC | 12:24 | |
| *** julim has joined #openstack-community | 13:00 | |
| *** neeti has quit IRC | 13:02 | |
| *** rbowen has joined #openstack-community | 13:10 | |
| fungi | mrmartin: fifieldt: which e-mail? | 13:14 |
| fifieldt | email? | 13:15 |
| mrmartin | fungi: I not get the question | 13:15 |
| fungi | oh, "remark about ask user angry" (i assumed it was in an e-mail) | 13:15 |
| mrmartin | oh it was | 13:16 |
| mrmartin | :) | 13:16 |
| fifieldt | so | 13:16 |
| fifieldt | basically | 13:16 |
| fifieldt | people who previously logged into Ask using a google account | 13:16 |
| fifieldt | now can't login | 13:16 |
| fungi | ahh, that. google disabling openid access | 13:16 |
| fifieldt | the issue comes in | 13:16 |
| fifieldt | where we still spam them | 13:16 |
| fifieldt | and they have no ability to stop the mails coming in | 13:16 |
| fifieldt | this would make me personally frustrated, so I understand their frustration :) | 13:17 |
| mrmartin | fungi: yeap, this story | 13:17 |
| fungi | yeah, allowing openid from sources outside our control was a great concept up until the point where those other entities decide to change/stop their authentication service | 13:17 |
| mrmartin | :) | 13:18 |
| fifieldt | I feel like a monty python reference is needed here :) | 13:18 |
| mrmartin | fungi: do you think that enabling g+ accounts will connect with the user's previous openid account? | 13:18 |
| * fungi starts humming the bruces' philosophers song to himself wryly | 13:19 | |
| fifieldt | :D | 13:19 |
| fungi | mrmartin: that's a great question for evgeny, but i can see potential reasons why it wouldn't | 13:19 |
| mrmartin | because it is not a trivial thing, need to link the accounts based on email address | 13:20 |
| fifieldt | my suggested short-term workaround fix is to update the email settings for those who can't login to stop the spam | 13:20 |
| fifieldt | could just do that for the weekly emails, which are the only ones people complained about | 13:21 |
| fungi | about the only way to allow transitioning between external id services is to also have a backdoor allowing users to log into the site aith an actual password, and provide a password recovery mechanism (in case they never set one) which uses their registered e-mail address | 13:21 |
| fungi | keying them together by e-mail address _might_ work as long as you don't allow them to use any id provider they want, and as long as you have trust in the id providers you allow them to use | 13:21 |
| mrmartin | ask is retrieving the email address, so I guess we have this information stored somewhere in the user's profile | 13:22 |
| fungi | otherwise i can just fire up my own idp service which says i have your e-mail address, and use that to take over your account | 13:22 |
| mrmartin | ask have a recover account feature | 13:23 |
| mrmartin | https://ask-staging.openstack.org/en/account/signin/?next=/en/ | 13:23 |
| mrmartin | fifieldt: do you know anyone who have issues with ask, and would like to help for us? Maybe he can try to recover his account using this page | 13:24 |
| mrmartin | just a quick idea before we start to hack the db | 13:24 |
| mrmartin | the prod ask site also have this feature: https://ask.openstack.org/en/account/signin/?next=/en/ | 13:25 |
| fifieldt | basically everyone I got who ended up in the zendesk system was at the point where they were "I don't care what you have to do, just make the email stop" | 13:26 |
| fifieldt | so, no good candidates so far | 13:27 |
| mrmartin | they are too angry | 13:27 |
| mrmartin | nice | 13:27 |
| fifieldt | this is also why I'm asking on the community list about default email settings for ask :) | 13:28 |
| mrmartin | so, to disable the email notifications we need to do two things: 1. collect all of the user accounts who are affected (used openid auth before) | 13:28 |
| mrmartin | 2. exec an sql update on the prod db and disable the notification somewhere | 13:28 |
| mrmartin | yeah, I got a chinese summary email from ask, don't why | 13:28 |
| mrmartin | don't know why | 13:29 |
| fifieldt | yup, that's the weekly :) | 13:29 |
| fifieldt | oh - BTW | 13:29 |
| fifieldt | ask-staging is now behind cloudflare | 13:29 |
| fifieldt | to potentially help with the spammers | 13:29 |
| fifieldt | so far it looks like cloudflare is not interfering | 13:30 |
| fifieldt | but if you see anything interesting, do let us know | 13:31 |
| mrmartin | fungi: can you put a db backup to the ask-staging instance? and approve my ssh access to staging: https://review.openstack.org/#/c/201711/ ? | 13:32 |
| mrmartin | then I can do the restore for ask-staging, and check the required sql for openid users email notification | 13:33 |
| fungi | mrmartin: let me see if i can get a second core reviewer to agree just so i'm not sidestepping our review conventions on something significant (ssh access to a server is fairly significant), but yes shortly | 13:33 |
| mrmartin | ok. | 13:34 |
| mrmartin | who can decide to giving away ssh access? the PTL of infra, a bunch of core-reviewers, or TC? | 13:35 |
| mrmartin | it would be great to get an access to the prod server, so I can do this recover task, remove some load from you, and speed up things a bit | 13:35 |
| mrmartin | :) | 13:35 |
| mrmartin | it is rare that I'm totally ruining servers. | 13:36 |
| *** Piet has quit IRC | 13:38 | |
| fungi | agreed. access to dev/staging is easier to make a case for. production access also seems reasonable to me for this particular case (copying backups), we're just generally hesitant because we want to make sure getting whatever's needed also added into config management doesn't get bypassed out of convenience | 13:40 |
| *** agireud has joined #openstack-community | 13:42 | |
| fungi | though it also seems reasonable as a middle ground that we could puppet an ssh private key onto ask.o.o and add it to an authorized_keys on ask-staging.o.o so that we can rsync the backups directory from production to staging making import data locally available, even if we don't have the import itself automated | 13:45 |
| mrmartin | fungi: yeap, it can work, just need to add an rsync cron job to ask-staging. | 13:46 |
| fungi | mrmartin: well, the rsync cron would be on production and it would push to staging. always authenticate from higher to lower trust levels, never the other way around | 13:47 |
| mrmartin | ok. | 13:48 |
| fungi | otherwise you're opening a potential hole for someone who compromises the staging server to be able to gain shell access to the production server | 13:48 |
| fungi | whereas if someone compromises the production server, we generally don't care that it happens to also grant them access to staging | 13:49 |
| *** Piet has joined #openstack-community | 14:00 | |
| *** annegentle has joined #openstack-community | 14:06 | |
| *** electrocucaracha has joined #openstack-community | 14:11 | |
| *** rbrooker has joined #openstack-community | 14:31 | |
| *** electroc_ has joined #openstack-community | 14:42 | |
| *** electroc_ has quit IRC | 14:43 | |
| *** electrocucaracha has quit IRC | 14:46 | |
| *** electrocucaracha has joined #openstack-community | 14:46 | |
| *** AlanClark has joined #openstack-community | 14:53 | |
| *** electrocucaracha has quit IRC | 15:00 | |
| *** electroc_ has joined #openstack-community | 15:05 | |
| *** electrocucaracha has joined #openstack-community | 15:08 | |
| *** electroc_ has quit IRC | 15:10 | |
| *** ddaskal has joined #openstack-community | 15:19 | |
| *** agireud has quit IRC | 15:24 | |
| *** rbowen has quit IRC | 15:29 | |
| *** puranamr has joined #openstack-community | 15:30 | |
| *** rbowen has joined #openstack-community | 15:34 | |
| *** ig0r__ has quit IRC | 15:39 | |
| *** ig0r_ has joined #openstack-community | 15:40 | |
| *** logan2 has quit IRC | 16:00 | |
| *** agireud has joined #openstack-community | 16:01 | |
| *** puranamr has quit IRC | 16:21 | |
| *** ddaskal has quit IRC | 16:24 | |
| *** puranamr has joined #openstack-community | 16:24 | |
| *** logan2 has joined #openstack-community | 17:10 | |
| *** electrocucaracha has quit IRC | 17:11 | |
| *** agireud has quit IRC | 17:22 | |
| *** mgarza_ has joined #openstack-community | 17:32 | |
| *** agireud has joined #openstack-community | 17:43 | |
| *** dizquierdo has quit IRC | 17:45 | |
| *** puranamr has quit IRC | 17:56 | |
| *** agireud has quit IRC | 18:01 | |
| *** puranamr has joined #openstack-community | 18:02 | |
| *** annegentle has quit IRC | 18:06 | |
| *** puranamr_ has joined #openstack-community | 18:14 | |
| *** puranamr has quit IRC | 18:14 | |
| *** puranamr has joined #openstack-community | 18:15 | |
| *** puranamr_ has quit IRC | 18:16 | |
| *** puranamr has quit IRC | 18:16 | |
| *** puranamr has joined #openstack-community | 18:16 | |
| *** kenhui has joined #openstack-community | 18:17 | |
| *** kenhui has left #openstack-community | 18:17 | |
| *** puranamr has quit IRC | 18:22 | |
| *** vishwanathj has joined #openstack-community | 18:25 | |
| *** annegentle has joined #openstack-community | 18:35 | |
| *** charlesztan has joined #openstack-community | 18:41 | |
| charlesztan | Hi, does anybody know if people with a commit to Devstack can receive ATC summit pass for Tokyo? | 18:42 |
| *** puranamr has joined #openstack-community | 18:42 | |
| *** agireud has joined #openstack-community | 18:43 | |
| *** puranamr has quit IRC | 18:43 | |
| *** puranamr has joined #openstack-community | 18:43 | |
| charlesztan | got my answer, which is "yes" | 18:44 |
| *** charlesztan has left #openstack-community | 18:44 | |
| *** agireud has quit IRC | 18:48 | |
| *** puranamr has quit IRC | 18:49 | |
| *** puranamr has joined #openstack-community | 18:50 | |
| *** puranamr has quit IRC | 18:55 | |
| *** electrocucaracha has joined #openstack-community | 19:01 | |
| *** v1k0d3n has joined #openstack-community | 19:08 | |
| *** fifieldt_ has joined #openstack-community | 19:10 | |
| *** mgarza_ has quit IRC | 19:11 | |
| *** mgarza has joined #openstack-community | 19:11 | |
| *** fifieldt has quit IRC | 19:13 | |
| *** hakimo has quit IRC | 19:13 | |
| *** hakimo has joined #openstack-community | 19:14 | |
| *** puranamr has joined #openstack-community | 19:39 | |
| *** mgarza has quit IRC | 19:50 | |
| *** mgarza has joined #openstack-community | 19:50 | |
| *** annegentle has quit IRC | 19:53 | |
| *** annegentle has joined #openstack-community | 19:53 | |
| *** mgarza has quit IRC | 20:01 | |
| *** mgarza has joined #openstack-community | 20:02 | |
| *** mgarza has quit IRC | 20:10 | |
| *** mgarza has joined #openstack-community | 20:10 | |
| *** puranamr has quit IRC | 20:15 | |
| *** puranamr has joined #openstack-community | 20:15 | |
| *** annegentle has quit IRC | 20:18 | |
| *** annegentle has joined #openstack-community | 20:36 | |
| *** mgarza has quit IRC | 20:48 | |
| *** mgarza has joined #openstack-community | 20:49 | |
| *** agireud has joined #openstack-community | 20:52 | |
| *** mgarza has quit IRC | 21:01 | |
| *** mgarza has joined #openstack-community | 21:02 | |
| *** puranamr_ has joined #openstack-community | 21:03 | |
| *** Piet has quit IRC | 21:04 | |
| *** puranamr has quit IRC | 21:05 | |
| *** julim has quit IRC | 21:10 | |
| *** mgarza has quit IRC | 21:13 | |
| *** mgarza_ has joined #openstack-community | 21:13 | |
| *** mrmartin has quit IRC | 21:22 | |
| *** Piet has joined #openstack-community | 21:33 | |
| *** AlanClark has quit IRC | 21:38 | |
| *** mgarza_ has quit IRC | 21:43 | |
| *** annegentle has quit IRC | 21:44 | |
| *** mgarza has joined #openstack-community | 21:44 | |
| *** annegentle has joined #openstack-community | 21:44 | |
| *** annegentle has quit IRC | 21:49 | |
| *** puranamr_ has quit IRC | 21:54 | |
| *** puranamr has joined #openstack-community | 21:57 | |
| *** dizquierdo has joined #openstack-community | 22:05 | |
| *** hakimo has quit IRC | 22:07 | |
| *** hakimo has joined #openstack-community | 22:08 | |
| *** mgarza has quit IRC | 22:11 | |
| *** puranamr has quit IRC | 22:12 | |
| *** mgarza has joined #openstack-community | 22:12 | |
| *** agireud has quit IRC | 22:15 | |
| *** zul has quit IRC | 22:17 | |
| *** dizquierdo has quit IRC | 23:00 | |
| *** dizquierdo has joined #openstack-community | 23:00 | |
| *** mgarza has quit IRC | 23:04 | |
| *** puranamr has joined #openstack-community | 23:09 | |
| *** annegentle has joined #openstack-community | 23:10 | |
| *** puranamr has quit IRC | 23:11 | |
| *** annegentle has quit IRC | 23:15 | |
| *** annegentle has joined #openstack-community | 23:26 | |
| *** rbrooker has quit IRC | 23:27 | |
| *** dizquierdo has quit IRC | 23:28 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!