Monday, 2016-02-29

*** haomaiwang has quit IRC00:01
*** haomaiwang has joined #openstack-glance00:01
*** haomaiwang has quit IRC00:58
*** achanda has quit IRC01:00
*** haomaiwa_ has joined #openstack-glance01:42
*** vilobhmm11 has joined #openstack-glance01:43
*** ducttape_ has joined #openstack-glance01:53
*** vilobhmm11 has quit IRC02:00
*** haomaiwa_ has quit IRC02:01
*** haomaiwang has joined #openstack-glance02:01
*** ducttape_ has quit IRC02:05
*** achanda has joined #openstack-glance02:10
*** achanda has quit IRC02:14
*** achanda has joined #openstack-glance02:15
*** achanda has quit IRC02:22
*** mingdang1 has joined #openstack-glance02:41
*** mdavidson has quit IRC02:46
*** lennyb__ has quit IRC02:46
*** jokke_ has quit IRC02:47
*** jokke_ has joined #openstack-glance02:47
*** lennyb__ has joined #openstack-glance02:47
*** kfox1111 has quit IRC02:49
*** kfox1111 has joined #openstack-glance02:49
*** mdavidson has joined #openstack-glance02:50
*** boris-42 has joined #openstack-glance02:50
*** vilobhmm11 has joined #openstack-glance02:58
*** mdnadeem has joined #openstack-glance02:59
*** haomaiwang has quit IRC03:01
*** haomaiwang has joined #openstack-glance03:01
openstackgerritMerged openstack/glance-specs: Move implemented specs out of approved  https://review.openstack.org/28479803:06
*** julim has quit IRC03:07
*** baojg has joined #openstack-glance03:07
*** achanda has joined #openstack-glance03:37
*** achanda has quit IRC03:42
*** links has joined #openstack-glance03:44
*** achanda has joined #openstack-glance03:49
*** stevemar has joined #openstack-glance03:53
*** achanda has quit IRC03:55
*** haomaiwang has quit IRC04:01
*** haomaiwang has joined #openstack-glance04:01
*** links has quit IRC04:01
*** flwang1 has quit IRC04:02
*** baojg has quit IRC04:02
*** itisha has joined #openstack-glance04:03
*** david-lyle has joined #openstack-glance04:13
*** links has joined #openstack-glance04:18
*** baojg has joined #openstack-glance04:30
*** haomaiwang has quit IRC04:31
*** david-lyle has quit IRC04:36
*** david-lyle has joined #openstack-glance04:50
*** TravT has joined #openstack-glance04:51
*** kstepniewski has joined #openstack-glance04:52
*** achanda has joined #openstack-glance04:55
*** david-lyle has quit IRC04:56
*** achanda has quit IRC05:01
openstackgerritCao ShuFeng proposed openstack/python-glanceclient: Fix loss of debug info after we use session  https://review.openstack.org/28588905:07
*** ishant has joined #openstack-glance05:19
*** baojg has quit IRC05:22
openstackgerritCao ShuFeng proposed openstack/python-glanceclient: Fix loss of debug info after we use session  https://review.openstack.org/28588905:22
*** baojg has joined #openstack-glance05:24
openstackgerritCao ShuFeng proposed openstack/python-glanceclient: Fix loss of debug info after we use session  https://review.openstack.org/28588905:32
*** mine0901 has joined #openstack-glance05:33
*** achanda has joined #openstack-glance05:58
*** achanda has quit IRC06:02
*** achanda has joined #openstack-glance06:11
*** nikhil has quit IRC06:32
*** groen692 has joined #openstack-glance06:44
*** rcernin has joined #openstack-glance06:45
*** rcernin has quit IRC06:49
*** AJaeger has joined #openstack-glance07:02
AJaegerglance stable cores, could you import translations again, please? https://review.openstack.org/#/c/277699/07:02
*** baojg has quit IRC07:17
*** baojg has joined #openstack-glance07:18
*** rcernin has joined #openstack-glance07:24
*** belmoreira has joined #openstack-glance07:25
*** nikhil has joined #openstack-glance07:32
*** haomaiwang has joined #openstack-glance07:41
*** pcaruana has joined #openstack-glance07:43
*** haomaiwang has quit IRC08:01
*** haomaiwang has joined #openstack-glance08:01
*** ihrachys has joined #openstack-glance08:06
*** mine0901 has quit IRC08:09
*** baojg has quit IRC08:24
*** achanda has quit IRC08:26
*** baojg has joined #openstack-glance08:26
*** rcernin has quit IRC08:29
*** achanda has joined #openstack-glance08:37
*** rcernin has joined #openstack-glance08:37
*** d0ugal_ has quit IRC08:46
*** baojg has quit IRC08:46
*** d0ugal has joined #openstack-glance08:46
*** flwang1 has joined #openstack-glance08:46
*** kstepniewski has quit IRC08:48
flwang1flaper87: ping08:53
flwang1flaper87: can you help review https://review.openstack.org/280786 ? i really hope we can get it in Mitaka08:53
*** baojg has joined #openstack-glance08:56
*** mfedosin has joined #openstack-glance08:58
*** haomaiwang has quit IRC09:01
*** haomaiwang has joined #openstack-glance09:01
*** dshakhray has joined #openstack-glance09:06
*** achanda has quit IRC09:08
*** achanda has joined #openstack-glance09:12
*** jistr has joined #openstack-glance09:20
*** vilobhmm11 has quit IRC09:31
*** e0ne has joined #openstack-glance09:43
*** baojg has quit IRC09:44
*** achanda has quit IRC09:53
*** boris-42 has quit IRC09:54
*** ihrachys has quit IRC09:54
*** e0ne has quit IRC09:55
*** ihrachys has joined #openstack-glance09:59
*** haomaiwang has quit IRC10:01
*** haomaiwang has joined #openstack-glance10:01
*** baojg has joined #openstack-glance10:04
*** ishant has quit IRC10:05
*** groen692 has quit IRC10:09
*** groen692 has joined #openstack-glance10:09
*** daemontool_ has quit IRC10:23
*** flwang1 has quit IRC10:26
*** daemontool has joined #openstack-glance10:29
kairatflaper87, Looks like we can remove -2 here: https://review.openstack.org/#/c/258904/10:31
*** daemontool_ has joined #openstack-glance10:39
*** daemontool has quit IRC10:41
*** daemontool_ is now known as daemontool10:42
*** baojg has quit IRC10:42
*** groen692 has quit IRC10:49
*** daemontool__ has joined #openstack-glance10:56
*** flaper87 has quit IRC10:56
*** flaper87 has joined #openstack-glance10:56
*** groen692 has joined #openstack-glance10:57
*** daemontool has quit IRC10:57
flaper87flwang: we're in feature freeze week. We have time for bug fixes (although it'd be nicer if we'd get them all in asap11:00
flaper87_11:00
flaper87)11:00
flaper87Hey folks, don't forget today is Review Monday11:00
flaper87:D11:00
*** haomaiwang has quit IRC11:01
flaper87^^^^ kairat: mfedosin sabari flwang nikhil jokke_ rosmaita bunting (tell mclaren too) :P11:01
*** haomaiwang has joined #openstack-glance11:01
AJaegerflaper87: could you do a final import of translations for liberty, please? 27769911:01
*** mingdang1 has quit IRC11:02
flaper87AJaeger: done11:08
AJaegerthanks, flaper8711:09
AJaegernow we need to wait for Zuul to go through a massive backlog ;(11:09
flaper87:(11:10
openstackgerritCao ShuFeng proposed openstack/python-glanceclient: Fix missing of debug info after we use session  https://review.openstack.org/28588911:19
*** daemontool_ has joined #openstack-glance11:23
*** achanda has joined #openstack-glance11:24
*** daemontool__ has quit IRC11:27
*** achanda has quit IRC11:29
*** dims has joined #openstack-glance11:29
*** mfedosin has quit IRC11:31
*** dims has quit IRC11:32
*** dims has joined #openstack-glance11:32
*** groen692 has quit IRC11:37
*** mfedosin has joined #openstack-glance11:44
*** groen692 has joined #openstack-glance11:45
openstackgerritMerged openstack/python-glanceclient: Removes MANIFEST.in as it is not needed explicitely by PBR  https://review.openstack.org/25890411:51
AJaegerglance cores, I've removed my WIP from https://review.openstack.org/#/c/285827/ - this fixes your post jobs. flaper87 gave already a +2, I suggest to merge this soon...11:51
AJaegerkragniz: thanks!11:53
*** khushbu_ has joined #openstack-glance11:53
flaper87AJaeger: what an awesome time. Right ? :D11:53
flaper87kragniz: You get cookies!11:54
* kragniz noms the cookies11:54
AJaeger;)11:54
*** marcusvrn_ has joined #openstack-glance11:56
*** htruta` is now known as htruta11:58
*** mfedosin has quit IRC11:58
*** haomaiwang has quit IRC12:01
*** haomaiwa_ has joined #openstack-glance12:02
*** baojg has joined #openstack-glance12:02
-openstackstatus- NOTICE: Infra currently has a long backlog. Please be patient and where possible avoid rechecks while it catches up.12:06
*** smatzek has joined #openstack-glance12:08
*** khushbu_ has quit IRC12:13
*** mfedosin has joined #openstack-glance12:16
*** daemontool_ has quit IRC12:18
*** daemontool has joined #openstack-glance12:20
*** achanda has joined #openstack-glance12:26
*** achanda has quit IRC12:30
*** daemontool has quit IRC12:32
*** daemontool has joined #openstack-glance12:34
*** haomaiwa_ has quit IRC12:42
*** haomaiwang has joined #openstack-glance12:43
*** haomaiwang has quit IRC12:43
*** haomaiwa_ has joined #openstack-glance12:43
*** haomaiwa_ has quit IRC12:43
kairatflaper87, would be cool if you would response here: https://review.openstack.org/#/c/28116512:48
kairatwe can get 2 patches merged12:48
*** pcaruana has quit IRC12:53
*** daemontool has quit IRC12:55
*** daemontool has joined #openstack-glance12:55
*** daemontool has quit IRC12:56
*** julim has joined #openstack-glance12:56
flaper87kairat: done, thanks for the heads up12:57
*** daemontool has joined #openstack-glance12:59
openstackgerritMerged openstack/python-glanceclient: Handle 403 forbidden on download  https://review.openstack.org/25432813:04
*** Oku_OS has joined #openstack-glance13:05
*** mine0901 has joined #openstack-glance13:07
*** pcaruana has joined #openstack-glance13:08
*** haomaiwang has joined #openstack-glance13:12
*** takedakn has joined #openstack-glance13:16
*** dane-fichter has joined #openstack-glance13:18
*** links has quit IRC13:18
openstackgerritWenjun Wang proposed openstack/glance: 'image-show' does not show attributes whose value is 'None'  https://review.openstack.org/28603413:21
flaper87kairat: your patches are blocked in jenkins13:23
flaper87kairat: glance_store ones13:23
flaper87kairat: oh you reverified them13:23
kairatYep13:24
kairatwaiting for result13:24
flaper87good, hope the gate will pass now13:24
openstackgerritWenjun Wang proposed openstack/glance: 'image-show' does not show attributes whose value is 'None'  https://review.openstack.org/28603413:24
dane-fichterflaper87: can I get some eyes on this? I'd like to get image-signing in for Mitaka... https://review.openstack.org/#/c/255584/13:24
flaper87kairat: will release glance_store after that13:24
kairatflaper87, ok, thanks13:24
flaper87dane-fichter: sure, let's see if sigmavirus24_awa has some time today to dedicate to https://review.openstack.org/#/c/255584/13:25
flaper87dane-fichter: I'll review as well13:25
*** edmondsw has joined #openstack-glance13:25
dane-fichterflaper87: excellent. thanks :)13:25
kairatOh, seems gates are overloaded13:35
*** takedakn has quit IRC13:37
*** ninag has joined #openstack-glance13:47
*** daemontool has quit IRC13:48
*** achanda has joined #openstack-glance13:53
*** daemontool has joined #openstack-glance13:54
*** daemontool_ has joined #openstack-glance13:55
*** links has joined #openstack-glance13:59
*** daemontool has quit IRC13:59
*** haomaiwang has quit IRC14:01
*** haomaiwang has joined #openstack-glance14:01
flaper87kairat: super overloaded14:01
*** baojg has quit IRC14:06
*** MVenesio has joined #openstack-glance14:09
*** achanda has quit IRC14:13
*** baojg has joined #openstack-glance14:15
*** links has quit IRC14:16
*** boris-42 has joined #openstack-glance14:17
*** cdelatte has joined #openstack-glance14:21
flaper87folks, please, focus on reviewing features. I've added a FF section to our meeting etherpad: https://etherpad.openstack.org/p/glance-team-meeting-agenda14:26
flaper87Note that this is not to say bug fixes are not important but let's let features that are ready land14:26
flaper87^^^^^^ nikhil kairat mfedosin jokke_ bunting rosmaita sabari sigmavirus24_awa flwang14:28
kairatOk, got iy14:28
kairat*got it14:28
rosmaitaflaper87: ok14:29
*** baojg has quit IRC14:32
openstackgerritMerged openstack/glance: Do not use constraints for venv  https://review.openstack.org/28582714:33
*** smatzek has quit IRC14:33
*** baojg has joined #openstack-glance14:34
*** pt_15 has joined #openstack-glance14:34
jokke_flaper87: ack14:34
*** pcaruana has quit IRC14:38
*** TravT has quit IRC14:39
*** TravT has joined #openstack-glance14:41
*** sigmavirus24_awa is now known as sigmavirus2414:42
*** baojg has quit IRC14:50
openstackgerritNiall Bunting proposed openstack/glance: Halt deletion if image is deactivated  https://review.openstack.org/25638114:50
*** pcaruana has joined #openstack-glance14:52
*** ducttape_ has joined #openstack-glance14:53
buntingflaper87: Okay14:54
*** baojg has joined #openstack-glance14:57
*** haomaiwang has quit IRC15:01
*** haomaiwang has joined #openstack-glance15:01
sigmavirus24flaper87: reviewed that signature utils patch15:02
sigmavirus24flaper87: also, got it, bug fixes only ;)15:02
*** smatzek has joined #openstack-glance15:02
*** lennyb__ is now known as lennyb15:03
*** khushbu has joined #openstack-glance15:10
*** khushbu_ has joined #openstack-glance15:11
*** mtanino has joined #openstack-glance15:16
*** permalac has joined #openstack-glance15:19
*** permalac has quit IRC15:19
openstackgerritMike Fedosin proposed openstack/glance-specs: Glare API  https://review.openstack.org/28313615:20
*** permalac has joined #openstack-glance15:20
*** vijendar has joined #openstack-glance15:33
*** vijendar1 has joined #openstack-glance15:35
*** vijendar has quit IRC15:38
mfedosinflaper87: hey, what do you think? https://review.openstack.org/#/c/237742/15:41
*** pushkaru has joined #openstack-glance15:45
*** baojg has quit IRC15:48
*** julim has quit IRC15:51
*** julim has joined #openstack-glance15:53
*** wolsen has joined #openstack-glance15:53
*** haomaiwang has quit IRC16:01
*** haomaiwang has joined #openstack-glance16:01
openstackgerritMerged openstack/glance: Add unit test for default number of workers  https://review.openstack.org/28116516:11
openstackgerritMerged openstack/glance: Make sure the generated glance-api.conf.sample is always the same  https://review.openstack.org/28058716:11
openstackgerritMerged openstack/glance: Updated from global requirements  https://review.openstack.org/28555216:11
*** rcernin has quit IRC16:16
*** dane-fichter has quit IRC16:17
*** pcaruana has quit IRC16:17
*** stevelle_ is now known as stevelle16:18
*** mine0901 has quit IRC16:21
*** mine0901 has joined #openstack-glance16:22
*** belmoreira has quit IRC16:24
*** sigmavirus24 is now known as sigmavirus24_awa16:25
*** sigmavirus24_awa is now known as sigmavirus2416:25
*** groen692 has quit IRC16:55
*** daemontool_ has quit IRC16:55
*** vijendar1 has quit IRC16:56
*** vijendar has joined #openstack-glance16:56
*** dane-fichter has joined #openstack-glance16:59
*** haomaiwang has quit IRC17:01
*** haomaiwa_ has joined #openstack-glance17:01
*** boris-42 has quit IRC17:14
*** MattMan has quit IRC17:14
*** MattMan has joined #openstack-glance17:14
*** openstackgerrit has quit IRC17:18
*** openstackgerrit has joined #openstack-glance17:18
*** vijendar has quit IRC17:18
*** vijendar has joined #openstack-glance17:18
*** ayoung has quit IRC17:23
openstackgerritNiall Bunting proposed openstack/glance: Changes behaviour when an image fails uploading  https://review.openstack.org/21515417:24
*** sigmavirus24 is now known as sigmavirus24_awa17:26
*** daemontool_ has joined #openstack-glance17:26
*** jistr has quit IRC17:26
nikhilmfedosin: hi17:28
nikhilmfedosin: please check the change in the meeting-id and INFO section to agenda etherpad https://etherpad.openstack.org/p/glance-artifacts-sub-team-meeting-agenda17:28
nikhilit was a request from flaper8717:28
*** lakshmiS has joined #openstack-glance17:29
nikhilmfedosin: trying to point it out before you start the glare meeting.17:29
mfedosinnikhil, hi17:30
*** david-lyle has joined #openstack-glance17:30
mfedosinI see17:30
mfedosinlet's begin17:30
*** AJaeger has left #openstack-glance17:30
nikhilcool17:30
mfedosinCourtesy meeting reminder ( #openstack-meeting-alt ): nikhil_k, ativelkov, mfedosin, docaedo, dshakhray, kfox111, kairat, nikhil, sudipto17:30
*** dane-fichter has quit IRC17:32
rosmaitaflaper87: was looking again at the CIM metadata patch, realized that I forgot to look at the response from the Images v1 and Compute v2 images/detail call ... those calls DO respect whatever case the property was defined in ... so my analysis in the email was oversimplified.  Now I am thinking that the CIM stuff should use CamelCase ... kind of sucks for API consumers, but we already have the situation that you get differing-cased property names i17:38
rosmaitai will put this into a comment on the patch17:38
*** davideagnello has joined #openstack-glance17:40
flaper87rosmaita: right. IIRC, I proposed on that email thread that we should have case insensitive queries but respect cases in the DB17:40
flaper87The case insensitive queries are to avoid duplicates17:41
rosmaitaflaper87: i will have to reread your response17:41
rosmaitai agree on the duplicates, but how do you feel about the GET responses?17:41
flaper87I guess they should respect the case, right? That's what they do now, IIUC17:42
rosmaitawell, sometimes they do and sometimes they don't17:43
rosmaitaif you use v2 to create CamelProp , v1 returns camelprop, unless you do v1/images/detail, and then  you get CamelProp17:44
*** ihrachys has quit IRC17:45
nikhilrosmaita: may be the char encoding at the API level from this guideline help https://specs.openstack.org/openstack/api-wg/guidelines/metadata.html ?17:45
*** achanda has joined #openstack-glance17:47
rosmaitanikhil: thanks for the ref ... did you notice that that doc appears to be unaware of the PATCH verb?17:48
*** rbradfor_ is now known as rbradfor17:49
nikhilrosmaita: oh I did not.. I know that api wg is very particular about using POST for (sub)resources may be that it17:49
rosmaitasometimes it seems like glance was designed by people who wanted to be incompatible with the rest of openstack ... for exmaple, the v2 flat-properties scheme instead of image metadata17:49
nikhilheh17:50
nikhildef a weird craft out from nova and now we're getting nova compat layer in the client :D17:50
*** vijendar has quit IRC17:52
*** david-lyle has quit IRC17:55
*** david-lyle_ has joined #openstack-glance17:55
*** sudipto has joined #openstack-glance18:00
*** kairat_ has joined #openstack-glance18:00
*** kzaitsev_mb has joined #openstack-glance18:00
*** haomaiwa_ has quit IRC18:01
kzaitsev_mbso. my followup on glare meeting.18:01
nikhilo/18:01
mfedosino/18:01
*** haomaiwang has joined #openstack-glance18:01
*** agireud has quit IRC18:01
mfedosinkzaitsev_mb: afair, you need something to deploy plugins with pip18:02
docaedoo/ (for a few minutes at least)18:02
kzaitsev_mbmurano currently stores it's plugin under /contrib dir in murano-code-base. This creates some confusion, especially for packagers (And there are a lot of those around OS =))18:02
kzaitsev_mbso the question is — what would be the correct way to distribute, develop those plugins18:03
*** agireud has joined #openstack-glance18:03
kzaitsev_mbmfedosin: and yes, being able to install 3d-party plugins looks important to me =)18:03
nikhilkzaitsev_mb: would you be okay to call them glare-objects (or GLO/glo) ?18:03
nikhileveryone?18:03
mfedosinI though we found the solution18:03
nikhilso, I have a lot of concerns wrt having something outside of the source tree be a dynamic (even lazy_load) dependency on the project (like installing from pip)18:04
mfedosinglobs :D18:04
nikhilok, mfedosin wins18:04
kzaitsev_mbmfedosin: we talked it through, yes, but I want it to be documented and avail for everyone =)18:04
nikhilglobs it is18:04
mfedosinnikhil: let me tell you about it18:04
*** achanda has quit IRC18:04
nikhilk18:04
mfedosinthere are 2 ways of installing globs18:05
mfedosinby default they are located in glance/objects folder18:05
kzaitsev_mbglobs is a bad name, since they're taken18:05
kzaitsev_mbhttps://docs.python.org/2/library/glob.html18:05
nikhilglos (like glows) ?18:06
mfedosinhttps://en.wikipedia.org/wiki/Glob_%28programming%29 :(18:06
kzaitsev_mbnikhil: my question is — would there be an option to add custom logic, for example for validation?18:06
mfedosinkzaitsev_mb: yes18:06
mfedosinthere is a proposal from api-wg18:07
mfedosinit's not merged yet18:07
nikhilkzaitsev_mb: you mean a custom API response serializer ?18:07
mfedosinno-no18:07
kzaitsev_mbi.e if there is a blob — verify what's inside of it. if there param X is true — check that Y param is present18:07
mfedosinjust custom actions18:07
mfedosinkzaitsev_mb: it will be like that https://review.openstack.org/#/c/23499418:07
*** sudipto has quit IRC18:08
docaedokzaitsev_mb: when you say "verify what's inside of it" do you mean like a signed blob?18:08
mfedosinPOST /v1/artifacts/{artifact_type}/{artifacts_id}/actions18:08
kzaitsev_mbmfedosin: that's not what I'm asking about18:08
nikhilah ok18:08
nikhilyes, I think that makes sense18:08
kzaitsev_mbdocaedo: yes, I mean, that when an artifact get's loaded into glare — at that particular moment we might want to perform some custom verification18:09
nikhilCan you please elaborate?18:09
mfedosinafter that we don't need 'something' after 'actions' and API becomes unified18:09
kzaitsev_mbok, I might have started from the wrong side of things )18:10
docaedothis sounds to me like it's just a signed artifact, I thought there was a definition already for how to do that?18:10
mfedosinkzaitsev_mb: it's exactly what you need18:10
mfedosinPOST /v1/artifacts/{artifact_type}/{artifacts_id}/actions18:11
nikhilmfedosin: I think he's talking about install time verification18:11
mfedosinand in the body  "name": "verify",18:11
nikhilso install time verification is operator issue and API side verification is a user issue18:11
nikhilis that correct kzaitsev_mb ?18:12
mfedosinyour plugin may add any logic you want18:12
kzaitsev_mbmfedosin: that's not what I'm asking for. I'm asking to have custom verification logic. imagine an artifact, that has 3 fields X, Y and Z. X is bool. I want Y to be required if X is true. Otherwise I want Z to be required, but X not.18:12
mfedosinone requirement it must correspond with base interface18:13
kzaitsev_mbcurrently I can only set artifact properties as required or not18:13
kairat_kzaitsev_mb: why this logic can't be implemented in glare?18:13
kzaitsev_mbkairat_: what do you mean in glare?18:13
nikhilumm, let's all calm down a bit here.18:14
kzaitsev_mbsure, sorry if I sound angry or anything =)18:14
kzaitsev_mbthat's not the case =)18:14
nikhilI think we need some exact use case from you kzaitsev_mb, like at what point of installation, instantiation and use of the Glare API you need what actions.18:14
mfedosinkzaitsev_mb: you just need to determine your verification method, I think18:15
mfedosinand describe what exactly you want when you activate artifact18:16
mfedosinit's pretty customizable18:16
mfedosinabout plugin installation - you can specify full pythonic name in glare.conf and then use it18:18
*** lakshmiS_ has joined #openstack-glance18:19
kzaitsev_mbso all in all — I have 2 concerns. 1) I want to be able to install glare plugins/art-types, that do not live inside glare code-base18:20
kzaitsev_mb2) I want to have custome verification methods for an artifact type18:20
openstackgerritMerged openstack/glance: Add sign-the-data signature verification  https://review.openstack.org/25558418:20
*** lakshmiS has quit IRC18:21
kzaitsev_mband #2 brings me to an interesting point18:21
kzaitsev_mbwhere at some point I might want to use project specific code in that verification code18:21
kzaitsev_mbdo I make sense? =)18:21
mfedosinlook...18:22
mfedosinthere will be base artifact type, that implements *base* artifact logic18:22
mfedosinplugins may append it or reimplement it18:22
mfedosinso, all you need is write your verification method in your plugin18:23
kzaitsev_mbmfedosin: awesome!18:23
nikhilmfedosin: and he wants that plugin outside of glare18:23
mfedosinbefore activation glare will call it and verify your artifact18:23
*** Guest63721 is now known as mfisch18:24
mfedosinnikhil, there is a nuance :)18:24
kzaitsev_mbnikhil: is that a problem?18:24
nikhiland my concern is that we can't allow pip/github/tarball/http based installs18:24
*** mfisch is now known as Guest200418:25
nikhilI will let mfedosin say his opinion first :)18:25
mfedosinall 'blessed' plugins will be located in galnce repo18:25
nikhil++18:25
mfedosinif operator wants to install something else he can, I think18:25
nikhiland that is where I think we disagree18:25
mfedosinof course there is security risk18:25
nikhilyes18:26
nikhiland one more18:26
nikhilthat we need to support pbr like logic18:26
kairat_We could look at heat18:26
nikhilwithin glare/glance18:26
nikhilkairat_: sure .. how does that work?18:27
kzaitsev_mbnikhil: wouldn't that technically mean, that to get anything on glare — one would need to push that to glare repository and wait for next major OS release?18:27
mfedosinfirst, I think we have to add config opt: 'allow_custom_types'18:27
kairat_All plugins in heat codebase18:27
nikhilso, my tradeoff proposal there is to create another oslo-incubator like repo that can sync logic into glare and ensure no operator mess at the source level18:28
nikhilkzaitsev_mb: so you get to sync in intervals18:28
*** Guest2004 is now known as mfisch18:28
*** mfisch has quit IRC18:28
*** mfisch has joined #openstack-glance18:28
nikhilConsider this situation18:28
nikhilwhen a operator installs a custom plugin with a hope that all the packages do not conflict18:29
kairat_Heat refused from plugins after a while18:29
kzaitsev_mbkairat_: https://wiki.openstack.org/wiki/Heat/Plugins#Installation_and_Configuration18:29
nikhilcurrently the upper constraints in the openstack wide requirements effort ensure that projects and operators are stable18:29
kzaitsev_mbor is it outdated?18:29
kairat_All contribs were moved to main tree18:30
kairat_Afaik18:30
*** vijendar has joined #openstack-glance18:30
kairat_You can install them, of course18:30
*** boris-42 has joined #openstack-glance18:30
mfedosinkzaitsev_mb: also, you don't need to update your plugin too often18:30
nikhilIt's a operator mess to install custom packages18:30
nikhilas pip is not as advanced like apt-* or yum18:30
kairat_But overall idea was not so successful afaiu18:31
mfedosinnikhil: you can install it with apt :)18:31
kzaitsev_mbmfedosin: that's a bad argument IMO =)18:31
nikhilmfedosin: that's even worse18:31
johnthetubaguynikhil: we should catch up if that compat layer is nova specific, thats not the intention of the request from Nova18:31
kzaitsev_mbkairat_: https://github.com/openstack/heat/search?utf8=✓&q=plugin_dirs&type=Code a quick look at the code says, that you can have custom plugins in heat18:31
nikhiljohnthetubaguy: sure thing. I am afraid to turn glanceclient into a openstack compat layer where we need layer over layer logic for small API calls :)18:32
kairat_kzaitsev_mb: no new plugins18:32
kairat_Only old plugins18:32
mfedosinjohnthetubaguy: may I join too?18:32
kairat_They stopped support it afaok18:32
nikhiljohnthetubaguy: I find a different repo better route.18:33
mfedosinfolks, let's add support of custom plugins for Murano18:33
kzaitsev_mbkairat_: any link to any discussion? =)18:33
mfedosinbut add it secure18:33
nikhilI would like this approach to be documented too18:33
kairat_Now i am walking18:33
kairat_But will provide ))18:33
mfedosinand say - if you want to shoot you in the foot, enable this option18:33
mfedosinand of course it will be documented18:34
nikhilbecause I don't want to sign off on something that's prolly going to establish no-guarantee API run in the middle of upgrades (including failure to comply to failover logic etc)18:34
kairat_mfedosin: seems reasonable18:34
kairat_We must provide ot18:35
*** flwang1 has joined #openstack-glance18:36
nikhilsure, let's discuss technical details over the technical draft.18:36
mfedosinanyway, operator always can put his type in glance/objects18:36
mfedosinit's almost the same18:36
mfedosinnikhil: okay, let's do it on the next meeting18:36
mfedosinthere will be a lot of votings there :D18:37
nikhilI would like to understand better, may be I am missing something really important here.18:37
nikhilmfedosin: sure, but I feel a bit disconnected with everyone in terms of the level of risk involved.18:38
nikhilso, if possible please share some collaborative document with us, kairat_ kzaitsev_mb and mfedosin18:38
kzaitsev_mbnikhil: I see 2 major problems with not allowing plugins from outside. 1) speed of development & delivering. It becomes basically impossible to add anything to stable glare, once it has been released. 2) custom verification logic. If everything lives inside glance — there will be no way to use external code for it.18:38
kzaitsev_mbnot saying, that the approach is bad though18:38
nikhilkzaitsev_mb: ok, I think that gives me clearer picture.18:39
nikhilkzaitsev_mb: but did you get my concern?18:39
kzaitsev_mbnikhil: your main concern is that allowing external plugins basically makes glare unstable, since you do not have quality controll over plugin contents, right?18:40
johnthetubaguynikhil: mfedosin: we have pencilled in a session at the summit on this, but it would be good to review your plans for the compat layer18:41
nikhilkzaitsev_mb: not exactly18:41
nikhiljohnthetubaguy: ++ (review early)18:41
nikhiljohnthetubaguy: may be a huddle sometime in the 3rd/4th week of march?18:41
johnthetubaguynikhil: mfedosin: the thinking was simple, nova is not the only user of glance v1 API, so it seems odd for that code to live in nova, especially when glance has the experts on the differences18:41
johnthetubaguynikhil: possibly, yeah18:41
nikhiljohnthetubaguy: sounds good!18:42
*** flwang1 has quit IRC18:42
nikhilkzaitsev_mb:  Just repeating things for clarity sake: if for some reason the installation goes bad like the custom plugin conflicts with a already installed package then in the middle of a upgrade or ops maintenance glare API will fail to start and for that matter glance API too18:42
mfedosinjohnthetubaguy: but other project already have compat layers inside their codebase18:43
mfedosinand when we will have this layer inside glanceclient it will be hard to make them use it18:43
mfedosinbut we will try18:43
johnthetubaguymfedosin: there are other users of the API out there that we don't control, at least thats what folks were saying before18:44
kzaitsev_mbnikhil: oh, so your main concern is that there is no guarantee on external plugin's requirements/dependencies (like most OS projects have), and they can break installations pretty bad?18:44
nikhilkzaitsev_mb: so we have a very angry operator complaining (stable or master) glance or glare is not working where the issue was simple packaging logic that is currently governed by global requirements/release team18:44
nikhilkzaitsev_mb: correct18:44
johnthetubaguymfedosin: some private clouds exposed glance v1, and gave their users python-glanceclient to access it, they have to move too, but lets go over this post FF week18:44
nikhilwhat we may end up having is that release team asking us to revert the custom logic out of glare18:44
nikhilkzaitsev_mb: ^18:45
kzaitsev_mbpackaging is hard18:45
kzaitsev_mb=)18:45
nikhiljohnthetubaguy: I am interested in listening to the feedback too.18:45
nikhilkzaitsev_mb: yeah :|18:46
nikhilthat's been the issue with pip for long time18:46
nikhila more mature dependency mgmt may help (so if you are aware you could give potiners ...)18:46
kzaitsev_mbnikhil: actually packaging is the reason I wanted to come to the meeting today. We currently have our glare plugin inside murano and we're not happy with it =)18:46
kzaitsev_mbwell actually we are happy. but everyone else isn't =)18:47
nikhilkzaitsev_mb: I can understand18:47
nikhiland I agree that should not be the case either, for a good health of openstack18:47
mfedosinjohnthetubaguy: please ping me when you're ready to discuss the layer. I think I'll be the main developer, so I have to be aware of it18:48
kzaitsev_mbnikhil: ideal situation for packagers would be to have that plugin in a separate repository with it's own tags and and requirements.18:48
*** vilobhmm11 has joined #openstack-glance18:49
nikhilkzaitsev_mb: and that's the very reason I want to have a single unified place for all the custom plugins18:49
nikhilkzaitsev_mb: if it's just one repo then the issue can be narrowed down18:49
kzaitsev_mbnikhil: I believe, that such situation would have also solved your concerns. But not 100%, I guess, since once you allow one plugin in — everyone can come.18:50
nikhilkzaitsev_mb: sure, I think we *DO* want to encourage more custom plugins18:50
nikhiland slowly start adopting them in the main tree if at all possible18:51
nikhilbut the nascent phase can be tricky18:51
nikhiluntil the projects and scope stabilize18:51
*** e0ne has joined #openstack-glance18:51
*** khushbu has quit IRC18:52
nikhilso, ideally we want the plugins to be looked after by multiple governing factors within openstack ecosystem18:52
nikhil1. glare evolution18:52
nikhil2. security evaluation before stable18:52
nikhil3. requirements18:52
nikhil4. collaboration (primarily within openstack)18:52
*** khushbu_ has quit IRC18:52
nikhilhence, a oslo-inc style repo would mean that we look at the plugins closely and together as a cross project effort and avoid last min hustle18:53
*** sigmavirus24_awa is now known as sigmavirus2418:53
kzaitsev_mbnikhil: actually a separate repo doesn't sound bad from the point of the speed of development & ease of packaging/use18:54
nikhilkzaitsev_mb:  I share the feelings18:54
kzaitsev_mbI'm still a bit concerned about the fact, that once stable/newton is out — there would be no way to add anything to it =)18:54
nikhil(for both of the points)18:54
nikhilkzaitsev_mb: so that's where we can tweak a little bit18:55
nikhilinstead of oslo-inc we can release that repo to pip18:55
nikhiland catch up on global requirements sync18:55
nikhiland upper cap the repo everytime you want a change18:55
nikhilof course, I'm not the authority on that and this approach needs to be blessed by the release team to begin with18:55
nikhilso wasn't my first choice18:56
kzaitsev_mbnikhil: I see, that actually solves my concern, awesome idea18:56
nikhil++18:56
*** lakshmiS_ has quit IRC18:57
mfedosinnikhil: like glance_store?18:58
nikhilmfedosin: darn, but yes :D18:58
mfedosingood idea18:58
kzaitsev_mbnikhil: I think I'm sold on the idea =) gotta think it through a couple more times, but so far I like it.18:59
mfedosinI thought about it, but wanted to do it when we have a huge amount of types18:59
*** kairat__ has joined #openstack-glance18:59
*** delattec has joined #openstack-glance19:00
*** delattec has quit IRC19:00
*** haomaiwang has quit IRC19:01
kzaitsev_mbmfedosin: nikhil: so, what would be the next steps for glare and glos? =)19:01
*** haomaiwang has joined #openstack-glance19:01
mfedosindesign base type (interface)19:02
mfedosinthis week19:02
nikhilmfedosin: ah cool!19:02
nikhilkzaitsev_mb: ++19:02
mfedosinnext week start implementing api if there're no big concerns from api-wg19:02
mfedosinalso creating a POC for images after that19:03
mfedosinother things will be discussed on the summit19:03
kzaitsev_mbI mean regarding what we've talked about =) should we document the idea somewhere, so that it not forgotten? =)19:03
*** cdelatte has quit IRC19:03
nikhilI think we can amend the API spec19:04
nikhilAdd this in the Developer and Deployer impact sections.19:05
mfedosinkzaitsev_mb: it will be a part of glare api spec19:07
*** julim has quit IRC19:07
mfedosinI'll amend it tomorrow :)19:07
nikhilmfedosin: was about to ask19:08
nikhilmfedosin: let me comment it too for bookkeeping sake.19:08
mfedosinsure, please19:08
kzaitsev_mbnikhil: mfedosin: kairat__: thanks guys for the conversation. Please excuse me if I sounded edgy =) I would attribute that to the pressure of m-3 and upcoming FF (=19:09
mfedosinkzaitsev_mb: np man :)19:09
*** julim has joined #openstack-glance19:10
mfedosinkzaitsev_mb: go for sleep now ;)19:10
mfedosinit's late19:10
nikhilkzaitsev_mb: np at all. thanks for starting it early and for all your attempts to understand clearly during crunch time!19:11
*** dims_ has joined #openstack-glance19:11
*** dims has quit IRC19:11
*** pt_15 has quit IRC19:12
*** pt_15 has joined #openstack-glance19:14
*** mtanino has quit IRC19:14
*** ducttape_ has quit IRC19:16
*** harshs has joined #openstack-glance19:16
*** ihrachys has joined #openstack-glance19:20
*** e0ne has quit IRC19:20
openstackgerritMerged openstack/python-glanceclient: Test: use assert_has_calls() instead  https://review.openstack.org/28167619:21
*** cdelatte has joined #openstack-glance19:22
*** kzaitsev_mb has quit IRC19:23
*** ducttape_ has joined #openstack-glance19:23
*** jdillaman has quit IRC19:27
*** khushbu__ has joined #openstack-glance19:30
*** khushbu___ has joined #openstack-glance19:31
*** mtanino has joined #openstack-glance19:35
*** ihrachys has quit IRC19:44
*** achanda has joined #openstack-glance19:47
*** jdillaman has joined #openstack-glance19:56
flaper87Hey folks, if there are patches you'd like to see as part of the FF cut, please, let me know.19:57
flaper87Let's work together on building the review queue19:57
flaper87rosmaita: hey, any updates on the CIM patch?19:57
*** achanda has quit IRC19:57
*** dims_ has quit IRC19:58
*** vijendar has quit IRC19:58
rosmaitaflaper87: i expressed my opinion that instead of using all lowercase property names, they should use camel case and not worry about the problem Lin talks about in his comment on PS 4 (Feb 17, 10:13 AM)20:00
rosmaitawhat do you think about that?20:00
*** haomaiwang has quit IRC20:01
*** Guest71383 is now known as redrobot20:01
*** haomaiwang has joined #openstack-glance20:01
*** achanda has joined #openstack-glance20:11
*** dims has joined #openstack-glance20:12
*** david-lyle_ is now known as david-lyle20:12
*** pushkaru has quit IRC20:13
*** pushkaru has joined #openstack-glance20:13
flaper87rosmaita: I think I'd agree with that. I'm a bit worry on the impact of this when moving from v1 to v220:21
flaper87Don't change the state of things, that is20:21
flaper87at least not on that patch20:22
*** flwang1 has joined #openstack-glance20:23
flwangflaper87: ping re the location update20:24
flaper87flwang: yo20:24
flaper87sup ?20:25
flaper87flwang: https://review.openstack.org/#/c/238130/ <- btw, help20:25
flaper87:D20:25
flaper87rosmaita: https://review.openstack.org/#/c/237742/ <- thoughts ?20:25
*** kzaitsev_mb has joined #openstack-glance20:27
flwangflaper87: clicking....20:27
*** vijendar has joined #openstack-glance20:27
*** dims has quit IRC20:29
flwangflaper87: as for the location update patch, you asked why do we have to check if the location urls as same with current urls20:30
flwangthat because based on current design, user can't change image's locations from non-empty to non-empty20:31
flwangso we need to make sure the urls are same, but we should allow the end user change location's metadata20:31
flwangflaper87: does that answer your question?20:31
flaper87flwang: oh, I think I follow now. That if is convoluted, though20:35
flwangflaper87: yep, i can document it somewhere if it's necessary20:36
flwangflaper87: for now, the location update is totally broken :(20:36
*** mfedosin has quit IRC20:37
flaper87flwang: I guess one thing that confuses me is why we need the second `if`20:40
flaper87why can't we have a single for loop?20:40
*** kairat__ has quit IRC20:41
flwangflaper87: good question, maybe my note is not very clear20:41
flwangif the locations' url are not changed(same), then it's not necessary to recheck the locations20:41
flwangotherwise, if there is one location with restricted scheme(like file:///), then it will fail20:42
flaper87Oh man, this logic20:42
flwangand it's really not necessary to recheck if the locations' url are same, we discussed it before20:42
flwangflaper87: yep, generally PTL is always on the top level so don't care the details :D20:43
flaper87I remember when Zhi Yan wrote most of it, I commented saying that it was way to convoluted20:43
flaper87I always care about details20:43
flaper87:(20:43
flwangflaper87: it's very complicated, yes20:43
flaper87Let's fix it for now and then, hopefully, we'll clean it up a bit20:44
flwangflaper87: i'm interested in locations part, in Newton, i may do some refactoring for it20:44
flwangflaper87: so does above explanation address your concern?20:44
flaper87jokke_: https://review.openstack.org/#/c/280786/ if you have a chance! I know it's late for you so feel free to wait until tomorrow20:45
*** pt_15 has quit IRC20:45
jokke_flaper87: https://review.openstack.org/#/q/topic:glance-store_0.12.020:46
flaper87jokke_: thanks20:46
*** TravT has quit IRC20:46
*** mine0901 has quit IRC20:49
*** MVenesio has quit IRC20:49
*** itisha has quit IRC20:49
*** MVenesio has joined #openstack-glance20:49
*** MVenesio has quit IRC20:50
*** ducttape_ has quit IRC20:50
flwangflaper87: thanks20:53
* jokke_ is reading backlog20:53
*** mine0901 has joined #openstack-glance20:53
flwangflaper87: would you mind reviewing the client change for the location update issue? https://review.openstack.org/#/c/280789/20:53
*** kairat_ has quit IRC20:56
*** harshs has quit IRC20:57
jokke_flaper87, flwang: just sent you an invite ... I'd like to talk about something ref locations20:59
*** harshs has joined #openstack-glance21:01
*** haomaiwang has quit IRC21:01
*** chlong_ has joined #openstack-glance21:01
*** haomaiwang has joined #openstack-glance21:01
*** ducttape_ has joined #openstack-glance21:02
*** davideagnello has quit IRC21:03
*** davideagnello has joined #openstack-glance21:04
*** lakshmiS has joined #openstack-glance21:05
*** smatzek has quit IRC21:09
*** pushkaru has quit IRC21:09
*** khushbu__ has quit IRC21:13
*** khushbu___ has quit IRC21:13
*** vijendar has quit IRC21:16
*** ayoung has joined #openstack-glance21:17
openstackgerritdane-fichter proposed openstack/glance: Add support for ECC signatures  https://review.openstack.org/24434721:19
*** lakshmiS_ has joined #openstack-glance21:20
*** TravT has joined #openstack-glance21:23
*** dims has joined #openstack-glance21:23
*** lakshmiS has quit IRC21:23
*** vijendar has joined #openstack-glance21:26
*** lakshmiS_ has quit IRC21:29
*** lakshmiS has joined #openstack-glance21:29
*** lakshmiS_ has joined #openstack-glance21:30
*** davideagnello has quit IRC21:32
*** cdelatte has quit IRC21:33
rosmaitanikhil: got a minute?21:34
*** davideagnello has joined #openstack-glance21:34
*** lakshmiS has quit IRC21:34
*** dims has quit IRC21:40
*** lakshmiS_ has quit IRC21:41
*** lakshmiS has joined #openstack-glance21:42
*** cdelatte has joined #openstack-glance21:42
nikhilrosmaita: hey yes, was in a cp quotas meeting21:43
nikhilhere now21:43
rosmaitacool21:43
rosmaitaquick question ... did you have any reservations about deprecating use_user_token ?21:44
rosmaitai thought maybe you did , but i may be confusing it with something else21:44
*** dims has joined #openstack-glance21:44
*** sabari has joined #openstack-glance21:44
*** kebray has joined #openstack-glance21:44
rosmaitanikhil: https://review.openstack.org/#/c/237742/21:45
nikhilrosmaita: I don't personally but I think all those long running snapshots would suddenly start failing without trusts and ops relying on this config option for them to succeed would be super duper angry21:46
nikhilthose were my $0.02 (well, more like $0.10 :P) ifkwim21:46
rosmaitanikhil: thanks ... i guess the deprecation will get people's attention, and if there's an outcry, we can reconsider21:47
rosmaitathis patch set just adds the deprecation and changes the value in a test; the default was already use_user_token = true21:48
nikhilrosmaita: I don't think there's coming back because it's a sec risk. only option is to delay or enforce use of trusts and ask for all necessary changes to happen for that to succeed.21:48
nikhilrosmaita: right, I didn't see the deletion promise timeline21:49
nikhilrosmaita: if it's not Newton, I think we're safe21:49
rosmaitanikhil: it doesn't explicitly say newton (i don't think, i will look again)21:49
nikhilrosmaita: but I think for trusts to work correctly we need to provide a in-source migration to operators to help them upgrade old style swift locations to swift+config21:49
nikhilrosmaita: in-source (in-tree) migration for image-locations and I think that's nowhere on the timline!21:50
rosmaitagotcha21:50
nikhilI think such fast deprecations work fine for private clouds21:50
nikhilBUT I'm seriously worried about our approach working out for large and old public ones21:50
*** cdelatte has quit IRC21:52
*** cdelatte has joined #openstack-glance21:53
*** edmondsw has quit IRC21:53
*** cdelatte has quit IRC21:54
*** vilobhmm11 has quit IRC21:58
*** vilobhmm11 has joined #openstack-glance21:59
*** vilobhmm11 has quit IRC22:00
*** vilobhmm11 has joined #openstack-glance22:00
*** haomaiwang has quit IRC22:01
*** haomaiwa_ has joined #openstack-glance22:01
openstackgerritFei Long Wang proposed openstack/python-glanceclient: Fix location update  https://review.openstack.org/28078922:04
rosmaitanikhil: you may want to leave a comment on https://review.openstack.org/#/c/237742/ if you have a minute22:04
nikhilrosmaita: *just* saw your comment! I am adding mine too..22:05
*** dims has quit IRC22:09
*** vilobhmm11 has left #openstack-glance22:13
*** vijendar has quit IRC22:29
*** vijendar has joined #openstack-glance22:37
*** julim has quit IRC22:39
*** ninag has quit IRC22:47
*** MVenesio has joined #openstack-glance22:50
rosmaitanikhil: thanks for looking ... i don't know how i missed all those Ns ... guess i need new glasses22:51
nikhilrosmaita: np22:51
*** achanda has quit IRC22:54
*** azbiswas has joined #openstack-glance22:55
*** MVenesio has quit IRC22:56
*** azbiswas has left #openstack-glance22:59
*** haomaiwa_ has quit IRC23:01
*** haomaiwang has joined #openstack-glance23:01
*** achanda has joined #openstack-glance23:08
*** vijendar has quit IRC23:14
*** dims has joined #openstack-glance23:14
*** ninag has joined #openstack-glance23:18
*** ninag has quit IRC23:22
*** dshakhray has quit IRC23:31
*** mine0901 has quit IRC23:49

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!