*** bpokorny has quit IRC | 00:02 | |
*** bpokorny has joined #openstack-glance | 00:02 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/glance_store: Updated from global requirements https://review.openstack.org/405807 | 00:08 |
---|---|---|
*** mtanino has quit IRC | 00:10 | |
*** itisha has quit IRC | 00:12 | |
*** ativelkov has quit IRC | 00:15 | |
*** ativelkov has joined #openstack-glance | 00:17 | |
*** ducttape_ has joined #openstack-glance | 00:17 | |
*** rcernin has quit IRC | 00:22 | |
*** harlowja has joined #openstack-glance | 00:30 | |
*** ducttape_ has quit IRC | 00:53 | |
*** Zer0Byte__ has quit IRC | 01:06 | |
*** mingyu has joined #openstack-glance | 01:09 | |
*** markvoelker has quit IRC | 01:29 | |
*** bpokorny_ has joined #openstack-glance | 01:32 | |
*** bpokorny_ has quit IRC | 01:32 | |
*** mingyu has quit IRC | 01:34 | |
*** bpokorny has quit IRC | 01:35 | |
*** ativelkov has quit IRC | 01:40 | |
*** ativelkov has joined #openstack-glance | 01:40 | |
*** ducttape_ has joined #openstack-glance | 01:53 | |
*** ducttape_ has quit IRC | 01:55 | |
*** ducttape_ has joined #openstack-glance | 01:55 | |
*** ducttape_ has quit IRC | 02:09 | |
*** ducttape_ has joined #openstack-glance | 02:21 | |
*** mingyu has joined #openstack-glance | 02:38 | |
*** mingyu has quit IRC | 02:48 | |
*** bpokorny has joined #openstack-glance | 02:51 | |
*** bpokorny has quit IRC | 02:55 | |
*** ducttape_ has quit IRC | 02:56 | |
*** mingyu has joined #openstack-glance | 02:59 | |
*** EmilienM has quit IRC | 03:19 | |
*** EmilienM has joined #openstack-glance | 03:19 | |
*** bpokorny has joined #openstack-glance | 03:24 | |
*** bpokorny has quit IRC | 03:29 | |
*** markvoelker has joined #openstack-glance | 03:30 | |
*** markvoelker has quit IRC | 03:35 | |
*** prateek has joined #openstack-glance | 03:49 | |
*** bpokorny has joined #openstack-glance | 03:55 | |
*** bpokorny has quit IRC | 03:56 | |
*** ducttape_ has joined #openstack-glance | 03:57 | |
*** ducttape_ has quit IRC | 04:01 | |
*** nicolasbock has quit IRC | 04:05 | |
*** hieulq has quit IRC | 04:07 | |
*** hieulq has joined #openstack-glance | 04:08 | |
*** udesale has joined #openstack-glance | 04:14 | |
*** mingyu has quit IRC | 04:20 | |
*** mingyu has joined #openstack-glance | 04:21 | |
*** mingyu has quit IRC | 04:26 | |
*** prateek has quit IRC | 04:31 | |
*** ducttape_ has joined #openstack-glance | 04:33 | |
openstackgerrit | Merged openstack/glance: Use upper constraints for all jobs in tox.ini https://review.openstack.org/358498 | 04:41 |
*** ducttape_ has quit IRC | 04:44 | |
*** chlong has joined #openstack-glance | 04:44 | |
*** wxy_ has quit IRC | 04:55 | |
*** links has joined #openstack-glance | 04:57 | |
*** prateek has joined #openstack-glance | 05:09 | |
*** prateek has quit IRC | 05:09 | |
*** ratailor has joined #openstack-glance | 05:13 | |
*** prateek has joined #openstack-glance | 05:14 | |
*** pdeore has joined #openstack-glance | 05:28 | |
*** markvoelker has joined #openstack-glance | 05:31 | |
*** markvoelker has quit IRC | 05:37 | |
*** tshefi has joined #openstack-glance | 05:38 | |
*** ducttape_ has joined #openstack-glance | 05:44 | |
*** ducttape_ has quit IRC | 05:49 | |
*** hyakuhei has quit IRC | 06:03 | |
*** hieulq has quit IRC | 06:16 | |
*** mingyu has joined #openstack-glance | 06:18 | |
*** hieulq has joined #openstack-glance | 06:20 | |
*** groen692 has joined #openstack-glance | 06:20 | |
*** tshefi has quit IRC | 06:24 | |
*** markvoelker has joined #openstack-glance | 07:00 | |
*** ducttape_ has joined #openstack-glance | 07:04 | |
*** markvoelker has quit IRC | 07:06 | |
*** maestropandy has joined #openstack-glance | 07:07 | |
*** maestropandy has left #openstack-glance | 07:14 | |
*** bapalm has quit IRC | 07:18 | |
*** ducttape_ has quit IRC | 07:24 | |
*** mingyu has quit IRC | 07:37 | |
*** bapalm has joined #openstack-glance | 07:38 | |
*** mingyu has joined #openstack-glance | 07:45 | |
*** mingyu_ has joined #openstack-glance | 07:52 | |
*** mingyu has quit IRC | 07:54 | |
*** mingyu_ has quit IRC | 07:55 | |
*** rcernin has joined #openstack-glance | 07:56 | |
*** mingyu has joined #openstack-glance | 07:56 | |
*** rcernin has quit IRC | 07:56 | |
*** rcernin has joined #openstack-glance | 07:57 | |
*** pcaruana has joined #openstack-glance | 07:59 | |
*** tshefi has joined #openstack-glance | 08:02 | |
*** ezoszed has joined #openstack-glance | 08:02 | |
*** wxy_ has joined #openstack-glance | 08:20 | |
*** ducttape_ has joined #openstack-glance | 08:25 | |
*** ducttape_ has quit IRC | 08:30 | |
*** ezoszed has quit IRC | 08:30 | |
*** ezoszed has joined #openstack-glance | 08:34 | |
*** Zer0Byte__ has joined #openstack-glance | 08:39 | |
*** ezoszed has quit IRC | 08:40 | |
*** openstackgerrit has quit IRC | 08:48 | |
*** mingyu has quit IRC | 08:49 | |
*** mingyu has joined #openstack-glance | 08:50 | |
*** zzzeek has quit IRC | 09:00 | |
*** zzzeek has joined #openstack-glance | 09:00 | |
*** markvoelker has joined #openstack-glance | 09:02 | |
*** mingyu has quit IRC | 09:04 | |
*** mingyu has joined #openstack-glance | 09:04 | |
*** markvoelker has quit IRC | 09:07 | |
*** mingyu has quit IRC | 09:34 | |
*** mingyu has joined #openstack-glance | 09:36 | |
*** itisha has joined #openstack-glance | 09:39 | |
*** Zer0Byte__ has quit IRC | 09:41 | |
*** ducttape_ has joined #openstack-glance | 09:56 | |
*** ducttape_ has quit IRC | 10:00 | |
*** mingyu has quit IRC | 10:02 | |
*** ezoszed has joined #openstack-glance | 10:22 | |
*** mvk has quit IRC | 10:24 | |
*** links has quit IRC | 10:38 | |
*** links has joined #openstack-glance | 10:38 | |
*** mvk has joined #openstack-glance | 10:56 | |
*** wxy_ has quit IRC | 11:00 | |
*** abhishekk has joined #openstack-glance | 11:00 | |
*** wxy_ has joined #openstack-glance | 11:01 | |
*** markvoelker has joined #openstack-glance | 11:02 | |
*** MattMan has quit IRC | 11:04 | |
*** MattMan has joined #openstack-glance | 11:04 | |
*** udesale has quit IRC | 11:05 | |
*** markvoelker has quit IRC | 11:07 | |
*** exploreshaifali has joined #openstack-glance | 11:19 | |
*** exploreshaifali has quit IRC | 11:20 | |
*** prateek_ has joined #openstack-glance | 11:21 | |
*** prateek has quit IRC | 11:21 | |
*** ducttape_ has joined #openstack-glance | 11:26 | |
*** ratailor has quit IRC | 11:28 | |
*** openstackgerrit has joined #openstack-glance | 11:29 | |
openstackgerrit | xhzhf proposed openstack/glance: fix e711 warning of pep8 https://review.openstack.org/410704 | 11:29 |
*** ducttape_ has quit IRC | 11:31 | |
*** nicolasbock has joined #openstack-glance | 11:32 | |
*** pdeore has quit IRC | 11:37 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/glance: Updated from global requirements https://review.openstack.org/408088 | 11:52 |
*** e0ne has joined #openstack-glance | 12:03 | |
*** prateek_ has quit IRC | 12:14 | |
*** smatzek has joined #openstack-glance | 12:21 | |
*** e0ne has quit IRC | 12:39 | |
*** jamielennox is now known as jamielennox|away | 12:43 | |
*** jamielennox|away is now known as jamielennox | 12:50 | |
*** ducttape_ has joined #openstack-glance | 12:57 | |
*** pdeore has joined #openstack-glance | 12:59 | |
*** ezoszed has quit IRC | 13:00 | |
*** ducttape_ has quit IRC | 13:01 | |
*** ezoszed has joined #openstack-glance | 13:03 | |
*** tshefi has quit IRC | 13:03 | |
*** markvoelker has joined #openstack-glance | 13:03 | |
*** markvoelker has quit IRC | 13:08 | |
*** ducttape_ has joined #openstack-glance | 13:09 | |
*** mvk has quit IRC | 13:15 | |
*** e0ne has joined #openstack-glance | 13:15 | |
*** ezoszed has quit IRC | 13:16 | |
*** ezoszed has joined #openstack-glance | 13:17 | |
*** edmondsw_ has joined #openstack-glance | 13:20 | |
*** edmondsw_ has quit IRC | 13:20 | |
*** pdeore has quit IRC | 13:21 | |
*** markvoelker has joined #openstack-glance | 13:24 | |
*** chlong has quit IRC | 13:32 | |
*** pdeore has joined #openstack-glance | 13:38 | |
*** ducttape_ has quit IRC | 13:45 | |
*** exploreshaifali has joined #openstack-glance | 14:02 | |
*** tshefi has joined #openstack-glance | 14:13 | |
*** ducttape_ has joined #openstack-glance | 14:15 | |
*** wxy| has joined #openstack-glance | 14:28 | |
*** ducttape_ has quit IRC | 14:34 | |
*** smatzek has quit IRC | 14:35 | |
*** mvk has joined #openstack-glance | 14:36 | |
*** udesale has joined #openstack-glance | 14:47 | |
*** mtanino has joined #openstack-glance | 14:52 | |
*** ezoszed1 has joined #openstack-glance | 14:55 | |
*** ezoszed has quit IRC | 14:56 | |
*** links has quit IRC | 14:57 | |
*** smatzek has joined #openstack-glance | 15:02 | |
*** mvk has quit IRC | 15:02 | |
*** wxy| is now known as wxy | 15:07 | |
*** wxy is now known as wxy1 | 15:08 | |
*** mrkz_afk is now known as mrkz | 15:15 | |
*** mvk has joined #openstack-glance | 15:16 | |
*** ducttape_ has joined #openstack-glance | 15:16 | |
*** mrkz has left #openstack-glance | 15:16 | |
sigmavirus | jokke_: Could you look at I7d9df75b7f76f5019daae6e9fab30ebea5a7a834 backports? | 15:17 |
*** exploreshaifali has quit IRC | 15:20 | |
*** chlong has joined #openstack-glance | 15:21 | |
*** esmiurium_ has quit IRC | 15:30 | |
*** pdeore has quit IRC | 15:42 | |
*** udesale has quit IRC | 15:47 | |
*** ezoszed1 has quit IRC | 15:54 | |
*** _ducttape_ has joined #openstack-glance | 15:57 | |
*** ducttape_ has quit IRC | 16:00 | |
*** wxy_ has quit IRC | 16:01 | |
*** mingyu has joined #openstack-glance | 16:12 | |
sigmavirus | jokke_: Also if you could look at https://review.openstack.org/319960 | 16:13 |
*** rcernin has quit IRC | 16:14 | |
*** nicolasbock has quit IRC | 16:25 | |
*** burgerk has joined #openstack-glance | 16:27 | |
*** Linkmark has joined #openstack-glance | 16:30 | |
*** mvk has quit IRC | 16:32 | |
*** _ducttape_ has quit IRC | 16:32 | |
*** ducttape_ has joined #openstack-glance | 16:33 | |
openstackgerrit | Alexander Bashmakov proposed openstack/glance: Enable python3.5 testing. https://review.openstack.org/410428 | 16:35 |
openstackgerrit | Merged openstack/glance_store: Use storage_url in DB for multi-tenant swift store https://review.openstack.org/387719 | 16:35 |
*** nicolasbock has joined #openstack-glance | 16:35 | |
*** chlong has quit IRC | 16:45 | |
*** rcernin has joined #openstack-glance | 16:46 | |
*** Linkmark has quit IRC | 16:51 | |
*** groen692 has quit IRC | 16:54 | |
*** croelandt has joined #openstack-glance | 16:56 | |
*** chlong has joined #openstack-glance | 16:58 | |
*** TravT has joined #openstack-glance | 16:58 | |
*** Zer0Byte__ has joined #openstack-glance | 17:03 | |
*** mingyu has quit IRC | 17:05 | |
*** e0ne has quit IRC | 17:11 | |
*** wxy1 has quit IRC | 17:35 | |
*** cmart has joined #openstack-glance | 17:35 | |
openstackgerrit | Merged openstack/python-glanceclient: Revert "Add last_request_id member to HTTPClient and SessionClient" https://review.openstack.org/319960 | 17:35 |
croelandt | Hey! Let's say I'd like to prevent everybody but the admin tenant from listing images | 17:41 |
croelandt | I'd love to write something like that in my policy.json: "get_images": "project_id:admin" | 17:42 |
croelandt | but it prevents everybody from doing so | 17:42 |
croelandt | whereas "get_images": "$(ID of the admin)" seems to be working | 17:42 |
croelandt | is this expected? | 17:42 |
openstackgerrit | Merged openstack/glance: Add working functional tests to tox.ini https://review.openstack.org/392888 | 17:46 |
sigmavirus | croelandt: so, 1. That's an oslo.policy thing. 2. You'd want project_name not project_id for admin unless your admin's project id is actually "admin" | 17:51 |
sigmavirus | As for "get_images": "<id-of-admin>" I'm not sure why that works, but it should be something like "get_images": "project_id:<id-of-admin>" | 17:51 |
sigmavirus | or tenant_id | 17:52 |
croelandt | sigmavirus: oh, right obviously | 17:55 |
sigmavirus | croelandt: :) | 17:56 |
croelandt | there's project_id and project_name, that was obvious | 17:56 |
sigmavirus | And what I meant by "That's an oslo.policy thing" is that their documentation used to be half-way decent so you might find better answers there than my >1year old memories ;) | 17:56 |
croelandt | hehe | 17:57 |
croelandt | yeah I kind of looked, and it seemed really amazing | 17:57 |
croelandt | reality is a bit different | 17:57 |
croelandt | like "get_images": "project_id:$(project_id)s" does not really do what I think it does | 17:57 |
croelandt | it basically prevents me from listing images with any user | 17:57 |
sigmavirus | croelandt: isn't it %(project_id)s | 18:00 |
sigmavirus | nto $(project_id)s? | 18:00 |
sigmavirus | I would suspect that might have been your problem :) | 18:00 |
croelandt | "get_images": "project_id:%(project_id)s" | 18:01 |
croelandt | that would be my line :) | 18:01 |
* croelandt is so damn tired | 18:01 | |
sigmavirus | heh | 18:02 |
sigmavirus | So that could be a bug in glance | 18:02 |
sigmavirus | glance generates the dictionary keys that are interpolated in to the policy rule | 18:02 |
croelandt | yeah, not sure whether that is an issue in glance or oslo | 18:02 |
sigmavirus | So it could be we're not providing project_id | 18:02 |
sigmavirus | probably glance if that doesn't work | 18:02 |
croelandt | hum | 18:02 |
sigmavirus | oh | 18:02 |
sigmavirus | wait | 18:02 |
sigmavirus | so yeah | 18:03 |
croelandt | sigmavirus: it should allow people to list only their own images, right? | 18:03 |
sigmavirus | this is a tricky thing | 18:03 |
sigmavirus | croelandt: okay so I have to run real quick, but I'll be back in like 20 minutues | 18:03 |
sigmavirus | can you wait? | 18:03 |
croelandt | yeah sure | 18:03 |
croelandt | there is no hurry | 18:03 |
sigmavirus | be right back | 18:03 |
*** e0ne has joined #openstack-glance | 18:15 | |
*** david-lyle has quit IRC | 18:21 | |
*** markvoelker has quit IRC | 18:29 | |
*** david-lyle has joined #openstack-glance | 18:30 | |
sigmavirus | croelandt: so, here's the thing I forgot | 18:34 |
*** markvoelker has joined #openstack-glance | 18:35 | |
sigmavirus | oslo.policy does a strict == check. For example when it gets a request it says is `users-project-id` == `"project_id"` | 18:35 |
sigmavirus | so what you need is to get the ID of the project you want to restrict it to and do `<id>:%(project_id)s` | 18:35 |
croelandt | how do I say "I want tenants to be able to list images inside their own tenants" then? | 18:36 |
sigmavirus | I think it's %(project_id)s:%(owner)s | 18:36 |
croelandt | let me try that | 18:38 |
*** ducttape_ has quit IRC | 18:39 | |
croelandt | hm I'm getting 403s | 18:40 |
croelandt | and I do not even understand the syntax any more :D | 18:40 |
croelandt | Policies seemed simple to me, and then I tried to use them | 18:40 |
sigmavirus | lol | 18:43 |
sigmavirus | yeah | 18:43 |
sigmavirus | I get confused each time | 18:43 |
croelandt | also, I'm working on a bug | 18:44 |
croelandt | and OP's English is kinda broken, so I'm not even sure I understand their issue properly | 18:44 |
*** e0ne has quit IRC | 18:44 | |
*** e0ne has joined #openstack-glance | 18:47 | |
sigmavirus | So here's the thing, there's also a complication if owner_is_tenant is not true | 18:47 |
croelandt | really? | 18:47 |
*** dharinic is now known as dharinic|lunch | 18:49 | |
sigmavirus | croelandt: yes | 18:50 |
*** ducttape_ has joined #openstack-glance | 18:50 | |
sigmavirus | in that case, you the owner of the image is the user_id | 18:51 |
*** exploreshaifali has joined #openstack-glance | 18:51 | |
* croelandt is lost | 18:51 | |
sigmavirus | croelandt: so by default, glance has a config option called "owner_is_tenant" | 18:52 |
sigmavirus | by default any image the user creates is then owned by their project/tenant | 18:53 |
sigmavirus | so image.owner is the project id | 18:53 |
sigmavirus | if owner_is_tenant is False, however, then image.owner is user_id | 18:53 |
croelandt | I see | 18:53 |
croelandt | well, let's only care about the default case, that is probably what is used in my case | 18:53 |
sigmavirus | right | 18:54 |
croelandt | "- The customer want to restrict image listing with 'glance image-list' / 'openstack image list' by admin tenant only, when other tenant aren't added as member to the image, even though user has admin permission." | 18:54 |
croelandt | I'm not even sure that is possible | 18:54 |
sigmavirus | let me refresh my memory before I lead you down the wrong path again | 18:54 |
croelandt | I think they need "project_name: admin" | 18:55 |
croelandt | and then I'd have to worry about the member thing | 18:55 |
sigmavirus | So, they want: user to be able to list their own images (in their own project) | 18:55 |
croelandt | I'm not even sure they want that :D | 18:55 |
sigmavirus | lmao | 18:55 |
croelandt | That'd seem logical to me | 18:55 |
croelandt | but they have not specified it, if I'm reading this right | 18:55 |
sigmavirus | :/ | 18:56 |
croelandt | how does the member thing work in Glance ? | 18:57 |
croelandt | I've seen it used, but I wonder whether that works well with policies | 18:57 |
*** dharinic|lunch is now known as dharinic | 19:23 | |
*** e0ne has quit IRC | 19:31 | |
croelandt | sigmavirus: well, project_name does not seem to work, but anyway, thanks for the help | 19:34 |
croelandt | Gotta run, see you :) | 19:34 |
*** TravT has quit IRC | 19:52 | |
*** TravT has joined #openstack-glance | 19:56 | |
sigmavirus | In case anyone cares to review it, https://review.openstack.org/410940 is the request to release Ocata-2 milestone | 19:59 |
*** exploreshaifali has quit IRC | 20:13 | |
*** TravT has quit IRC | 20:31 | |
*** pcaruana has quit IRC | 20:33 | |
*** TravT has joined #openstack-glance | 20:37 | |
*** e0ne has joined #openstack-glance | 20:40 | |
*** e0ne has quit IRC | 20:42 | |
*** tshefi has quit IRC | 20:46 | |
*** mvk has joined #openstack-glance | 20:46 | |
openstackgerrit | Merged openstack/glance: Skipping tests for location 'add', 'replace' on 'queued' images https://review.openstack.org/409880 | 20:57 |
*** _ducttape_ has joined #openstack-glance | 20:58 | |
*** ducttape_ has quit IRC | 21:02 | |
*** _ducttape_ has quit IRC | 21:09 | |
*** ducttape_ has joined #openstack-glance | 21:10 | |
*** cmart has quit IRC | 21:15 | |
*** cmart has joined #openstack-glance | 21:16 | |
*** r-daneel has joined #openstack-glance | 21:20 | |
*** smatzek has quit IRC | 21:22 | |
*** catintheroof has joined #openstack-glance | 21:24 | |
catintheroof | Hi to all! quick question, does the glance image conversion feature supports on-line convertion if integrated with Ceph ? | 21:28 |
*** itisha has quit IRC | 21:42 | |
openstackgerrit | Dirk Mueller proposed openstack/glance: Adjust test suite for new psutil versions https://review.openstack.org/409140 | 21:54 |
*** e0ne has joined #openstack-glance | 22:02 | |
*** catintheroof has quit IRC | 22:19 | |
*** e0ne has quit IRC | 22:31 | |
cmart | Hi Glance folks -- I have a "code orientation" question | 22:51 |
*** ducttape_ has quit IRC | 22:51 | |
cmart | My organization uses a custom Glance store; it was originally built to work with Havana, I'm trying to get it working with Newton | 22:52 |
cmart | I have placed the driver file in `glance_store/_drivers`, and specified it as the "default_store" in glance-api.conf, as well as adding it to the "stores" collection in the same file | 22:53 |
cmart | but when I try to start the Glance API, it logs a "Failed to load driver" warning: | 22:55 |
cmart | NoMatches("No 'glance_store.drivers' driver found, looking for 'my_custom_driver'",)]. The driver will be disabled | 22:55 |
*** burgerk has quit IRC | 22:55 | |
cmart | Do I need to enumerate/install my driver in other places in order for Glance to recognise it? | 22:57 |
*** rcernin has quit IRC | 23:05 | |
flwang | cmart: so you only changed the code of glance_store? | 23:05 |
flwang | cmart: i'm sure there are some checks in glance service code | 23:06 |
flwang | s/service/server | 23:06 |
* stevelle makes a mental note that we need a docs entry specifically for custom drivers | 23:09 | |
flwang | stevelle: that's true :) | 23:10 |
flwang | stevelle: and one for location strategy if we're OK to let user use it | 23:11 |
flwang | cmart: you can refer this patch https://review.openstack.org/#/c/32864/ | 23:11 |
flwang | though at that moment glance_store hasn't been splitted out | 23:11 |
flwang | stevelle: it would be nice if you can comment this https://review.openstack.org/336761 | 23:12 |
flwang | which related to multi locations and location strategy | 23:12 |
flwang | stevelle: thanks in advance | 23:12 |
*** mtanino has quit IRC | 23:15 | |
stevelle | starring | 23:15 |
*** mtanino has joined #openstack-glance | 23:15 | |
*** ducttape_ has joined #openstack-glance | 23:24 | |
*** chlong has quit IRC | 23:37 | |
cmart | thanks flwang. yes, so far I've only changed the code of glance_store, and changed glance_api.conf. I'll look at that patch and try to tease out what else needs to be changed | 23:41 |
cmart | some basic docs on using a custom driver would be super helpful stevelle | 23:41 |
cmart | in case you're curious, this is what I'm trying to use https://github.com/c-mart/glance-irods/tree/newton | 23:42 |
flwang | cmart: cool, feel free to ask questions here | 23:51 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!