Wednesday, 2016-12-14

*** bpokorny has quit IRC00:02
*** bpokorny has joined #openstack-glance00:02
openstackgerritOpenStack Proposal Bot proposed openstack/glance_store: Updated from global requirements  https://review.openstack.org/40580700:08
*** mtanino has quit IRC00:10
*** itisha has quit IRC00:12
*** ativelkov has quit IRC00:15
*** ativelkov has joined #openstack-glance00:17
*** ducttape_ has joined #openstack-glance00:17
*** rcernin has quit IRC00:22
*** harlowja has joined #openstack-glance00:30
*** ducttape_ has quit IRC00:53
*** Zer0Byte__ has quit IRC01:06
*** mingyu has joined #openstack-glance01:09
*** markvoelker has quit IRC01:29
*** bpokorny_ has joined #openstack-glance01:32
*** bpokorny_ has quit IRC01:32
*** mingyu has quit IRC01:34
*** bpokorny has quit IRC01:35
*** ativelkov has quit IRC01:40
*** ativelkov has joined #openstack-glance01:40
*** ducttape_ has joined #openstack-glance01:53
*** ducttape_ has quit IRC01:55
*** ducttape_ has joined #openstack-glance01:55
*** ducttape_ has quit IRC02:09
*** ducttape_ has joined #openstack-glance02:21
*** mingyu has joined #openstack-glance02:38
*** mingyu has quit IRC02:48
*** bpokorny has joined #openstack-glance02:51
*** bpokorny has quit IRC02:55
*** ducttape_ has quit IRC02:56
*** mingyu has joined #openstack-glance02:59
*** EmilienM has quit IRC03:19
*** EmilienM has joined #openstack-glance03:19
*** bpokorny has joined #openstack-glance03:24
*** bpokorny has quit IRC03:29
*** markvoelker has joined #openstack-glance03:30
*** markvoelker has quit IRC03:35
*** prateek has joined #openstack-glance03:49
*** bpokorny has joined #openstack-glance03:55
*** bpokorny has quit IRC03:56
*** ducttape_ has joined #openstack-glance03:57
*** ducttape_ has quit IRC04:01
*** nicolasbock has quit IRC04:05
*** hieulq has quit IRC04:07
*** hieulq has joined #openstack-glance04:08
*** udesale has joined #openstack-glance04:14
*** mingyu has quit IRC04:20
*** mingyu has joined #openstack-glance04:21
*** mingyu has quit IRC04:26
*** prateek has quit IRC04:31
*** ducttape_ has joined #openstack-glance04:33
openstackgerritMerged openstack/glance: Use upper constraints for all jobs in tox.ini  https://review.openstack.org/35849804:41
*** ducttape_ has quit IRC04:44
*** chlong has joined #openstack-glance04:44
*** wxy_ has quit IRC04:55
*** links has joined #openstack-glance04:57
*** prateek has joined #openstack-glance05:09
*** prateek has quit IRC05:09
*** ratailor has joined #openstack-glance05:13
*** prateek has joined #openstack-glance05:14
*** pdeore has joined #openstack-glance05:28
*** markvoelker has joined #openstack-glance05:31
*** markvoelker has quit IRC05:37
*** tshefi has joined #openstack-glance05:38
*** ducttape_ has joined #openstack-glance05:44
*** ducttape_ has quit IRC05:49
*** hyakuhei has quit IRC06:03
*** hieulq has quit IRC06:16
*** mingyu has joined #openstack-glance06:18
*** hieulq has joined #openstack-glance06:20
*** groen692 has joined #openstack-glance06:20
*** tshefi has quit IRC06:24
*** markvoelker has joined #openstack-glance07:00
*** ducttape_ has joined #openstack-glance07:04
*** markvoelker has quit IRC07:06
*** maestropandy has joined #openstack-glance07:07
*** maestropandy has left #openstack-glance07:14
*** bapalm has quit IRC07:18
*** ducttape_ has quit IRC07:24
*** mingyu has quit IRC07:37
*** bapalm has joined #openstack-glance07:38
*** mingyu has joined #openstack-glance07:45
*** mingyu_ has joined #openstack-glance07:52
*** mingyu has quit IRC07:54
*** mingyu_ has quit IRC07:55
*** rcernin has joined #openstack-glance07:56
*** mingyu has joined #openstack-glance07:56
*** rcernin has quit IRC07:56
*** rcernin has joined #openstack-glance07:57
*** pcaruana has joined #openstack-glance07:59
*** tshefi has joined #openstack-glance08:02
*** ezoszed has joined #openstack-glance08:02
*** wxy_ has joined #openstack-glance08:20
*** ducttape_ has joined #openstack-glance08:25
*** ducttape_ has quit IRC08:30
*** ezoszed has quit IRC08:30
*** ezoszed has joined #openstack-glance08:34
*** Zer0Byte__ has joined #openstack-glance08:39
*** ezoszed has quit IRC08:40
*** openstackgerrit has quit IRC08:48
*** mingyu has quit IRC08:49
*** mingyu has joined #openstack-glance08:50
*** zzzeek has quit IRC09:00
*** zzzeek has joined #openstack-glance09:00
*** markvoelker has joined #openstack-glance09:02
*** mingyu has quit IRC09:04
*** mingyu has joined #openstack-glance09:04
*** markvoelker has quit IRC09:07
*** mingyu has quit IRC09:34
*** mingyu has joined #openstack-glance09:36
*** itisha has joined #openstack-glance09:39
*** Zer0Byte__ has quit IRC09:41
*** ducttape_ has joined #openstack-glance09:56
*** ducttape_ has quit IRC10:00
*** mingyu has quit IRC10:02
*** ezoszed has joined #openstack-glance10:22
*** mvk has quit IRC10:24
*** links has quit IRC10:38
*** links has joined #openstack-glance10:38
*** mvk has joined #openstack-glance10:56
*** wxy_ has quit IRC11:00
*** abhishekk has joined #openstack-glance11:00
*** wxy_ has joined #openstack-glance11:01
*** markvoelker has joined #openstack-glance11:02
*** MattMan has quit IRC11:04
*** MattMan has joined #openstack-glance11:04
*** udesale has quit IRC11:05
*** markvoelker has quit IRC11:07
*** exploreshaifali has joined #openstack-glance11:19
*** exploreshaifali has quit IRC11:20
*** prateek_ has joined #openstack-glance11:21
*** prateek has quit IRC11:21
*** ducttape_ has joined #openstack-glance11:26
*** ratailor has quit IRC11:28
*** openstackgerrit has joined #openstack-glance11:29
openstackgerritxhzhf proposed openstack/glance: fix e711 warning of pep8  https://review.openstack.org/41070411:29
*** ducttape_ has quit IRC11:31
*** nicolasbock has joined #openstack-glance11:32
*** pdeore has quit IRC11:37
openstackgerritOpenStack Proposal Bot proposed openstack/glance: Updated from global requirements  https://review.openstack.org/40808811:52
*** e0ne has joined #openstack-glance12:03
*** prateek_ has quit IRC12:14
*** smatzek has joined #openstack-glance12:21
*** e0ne has quit IRC12:39
*** jamielennox is now known as jamielennox|away12:43
*** jamielennox|away is now known as jamielennox12:50
*** ducttape_ has joined #openstack-glance12:57
*** pdeore has joined #openstack-glance12:59
*** ezoszed has quit IRC13:00
*** ducttape_ has quit IRC13:01
*** ezoszed has joined #openstack-glance13:03
*** tshefi has quit IRC13:03
*** markvoelker has joined #openstack-glance13:03
*** markvoelker has quit IRC13:08
*** ducttape_ has joined #openstack-glance13:09
*** mvk has quit IRC13:15
*** e0ne has joined #openstack-glance13:15
*** ezoszed has quit IRC13:16
*** ezoszed has joined #openstack-glance13:17
*** edmondsw_ has joined #openstack-glance13:20
*** edmondsw_ has quit IRC13:20
*** pdeore has quit IRC13:21
*** markvoelker has joined #openstack-glance13:24
*** chlong has quit IRC13:32
*** pdeore has joined #openstack-glance13:38
*** ducttape_ has quit IRC13:45
*** exploreshaifali has joined #openstack-glance14:02
*** tshefi has joined #openstack-glance14:13
*** ducttape_ has joined #openstack-glance14:15
*** wxy| has joined #openstack-glance14:28
*** ducttape_ has quit IRC14:34
*** smatzek has quit IRC14:35
*** mvk has joined #openstack-glance14:36
*** udesale has joined #openstack-glance14:47
*** mtanino has joined #openstack-glance14:52
*** ezoszed1 has joined #openstack-glance14:55
*** ezoszed has quit IRC14:56
*** links has quit IRC14:57
*** smatzek has joined #openstack-glance15:02
*** mvk has quit IRC15:02
*** wxy| is now known as wxy15:07
*** wxy is now known as wxy115:08
*** mrkz_afk is now known as mrkz15:15
*** mvk has joined #openstack-glance15:16
*** ducttape_ has joined #openstack-glance15:16
*** mrkz has left #openstack-glance15:16
sigmavirusjokke_: Could you look at I7d9df75b7f76f5019daae6e9fab30ebea5a7a834 backports?15:17
*** exploreshaifali has quit IRC15:20
*** chlong has joined #openstack-glance15:21
*** esmiurium_ has quit IRC15:30
*** pdeore has quit IRC15:42
*** udesale has quit IRC15:47
*** ezoszed1 has quit IRC15:54
*** _ducttape_ has joined #openstack-glance15:57
*** ducttape_ has quit IRC16:00
*** wxy_ has quit IRC16:01
*** mingyu has joined #openstack-glance16:12
sigmavirusjokke_: Also if you could look at https://review.openstack.org/31996016:13
*** rcernin has quit IRC16:14
*** nicolasbock has quit IRC16:25
*** burgerk has joined #openstack-glance16:27
*** Linkmark has joined #openstack-glance16:30
*** mvk has quit IRC16:32
*** _ducttape_ has quit IRC16:32
*** ducttape_ has joined #openstack-glance16:33
openstackgerritAlexander Bashmakov proposed openstack/glance: Enable python3.5 testing.  https://review.openstack.org/41042816:35
openstackgerritMerged openstack/glance_store: Use storage_url in DB for multi-tenant swift store  https://review.openstack.org/38771916:35
*** nicolasbock has joined #openstack-glance16:35
*** chlong has quit IRC16:45
*** rcernin has joined #openstack-glance16:46
*** Linkmark has quit IRC16:51
*** groen692 has quit IRC16:54
*** croelandt has joined #openstack-glance16:56
*** chlong has joined #openstack-glance16:58
*** TravT has joined #openstack-glance16:58
*** Zer0Byte__ has joined #openstack-glance17:03
*** mingyu has quit IRC17:05
*** e0ne has quit IRC17:11
*** wxy1 has quit IRC17:35
*** cmart has joined #openstack-glance17:35
openstackgerritMerged openstack/python-glanceclient: Revert "Add last_request_id member to HTTPClient and SessionClient"  https://review.openstack.org/31996017:35
croelandtHey! Let's say I'd like to prevent everybody but the admin tenant from listing images17:41
croelandtI'd love to write something like that in my policy.json: "get_images": "project_id:admin"17:42
croelandtbut it prevents everybody from doing so17:42
croelandtwhereas "get_images": "$(ID of the admin)" seems to be working17:42
croelandtis this expected?17:42
openstackgerritMerged openstack/glance: Add working functional tests to tox.ini  https://review.openstack.org/39288817:46
sigmaviruscroelandt: so, 1. That's an oslo.policy thing. 2. You'd want project_name not project_id for admin unless your admin's project id is actually "admin"17:51
sigmavirusAs for "get_images": "<id-of-admin>" I'm not sure why that works, but it should be something like "get_images": "project_id:<id-of-admin>"17:51
sigmavirusor tenant_id17:52
croelandtsigmavirus: oh, right obviously17:55
sigmaviruscroelandt: :)17:56
croelandtthere's project_id and project_name, that was obvious17:56
sigmavirusAnd what I meant by "That's an oslo.policy thing" is that their documentation used to be half-way decent so you might find better answers there than my >1year old memories ;)17:56
croelandthehe17:57
croelandtyeah I kind of looked, and it seemed really amazing17:57
croelandtreality is a bit different17:57
croelandtlike "get_images": "project_id:$(project_id)s" does not really do what I think it does17:57
croelandtit basically prevents me from listing images with any user17:57
sigmaviruscroelandt: isn't it %(project_id)s18:00
sigmavirusnto $(project_id)s?18:00
sigmavirusI would suspect that might have been your problem :)18:00
croelandt"get_images": "project_id:%(project_id)s"18:01
croelandtthat would be my line :)18:01
* croelandt is so damn tired18:01
sigmavirusheh18:02
sigmavirusSo that could be a bug in glance18:02
sigmavirusglance generates the dictionary keys that are interpolated in to the policy rule18:02
croelandtyeah, not sure whether that is an issue in glance or oslo18:02
sigmavirusSo it could be we're not providing project_id18:02
sigmavirusprobably glance if that doesn't work18:02
croelandthum18:02
sigmavirusoh18:02
sigmaviruswait18:02
sigmavirusso yeah18:03
croelandtsigmavirus: it should allow people to list only their own images, right?18:03
sigmavirusthis is a tricky thing18:03
sigmaviruscroelandt: okay so I have to run real quick, but I'll be back in like 20 minutues18:03
sigmaviruscan you wait?18:03
croelandtyeah sure18:03
croelandtthere is no hurry18:03
sigmavirusbe right back18:03
*** e0ne has joined #openstack-glance18:15
*** david-lyle has quit IRC18:21
*** markvoelker has quit IRC18:29
*** david-lyle has joined #openstack-glance18:30
sigmaviruscroelandt: so, here's the thing I forgot18:34
*** markvoelker has joined #openstack-glance18:35
sigmavirusoslo.policy does a strict == check. For example when it gets a request it says is `users-project-id` == `"project_id"`18:35
sigmavirusso what you need is to get the ID of the project you want to restrict it to and do `<id>:%(project_id)s`18:35
croelandthow do I say "I want tenants to be able to list images inside their own tenants" then?18:36
sigmavirusI think it's %(project_id)s:%(owner)s18:36
croelandtlet me try that18:38
*** ducttape_ has quit IRC18:39
croelandthm I'm getting 403s18:40
croelandtand I do not even understand the syntax any more :D18:40
croelandtPolicies seemed simple to me, and then I tried to use them18:40
sigmaviruslol18:43
sigmavirusyeah18:43
sigmavirusI get confused each time18:43
croelandtalso, I'm working on a bug18:44
croelandtand OP's English is kinda broken, so I'm not even sure I understand their issue properly18:44
*** e0ne has quit IRC18:44
*** e0ne has joined #openstack-glance18:47
sigmavirusSo here's the thing, there's also a complication if owner_is_tenant is not true18:47
croelandtreally?18:47
*** dharinic is now known as dharinic|lunch18:49
sigmaviruscroelandt: yes18:50
*** ducttape_ has joined #openstack-glance18:50
sigmavirusin that case, you the owner of the image is the user_id18:51
*** exploreshaifali has joined #openstack-glance18:51
* croelandt is lost18:51
sigmaviruscroelandt: so by default, glance has a config option called "owner_is_tenant"18:52
sigmavirusby default any image the user creates is then owned by their project/tenant18:53
sigmavirusso image.owner is the project id18:53
sigmavirusif owner_is_tenant is False, however, then image.owner is user_id18:53
croelandtI see18:53
croelandtwell, let's only care about the default case, that is probably what is used in my case18:53
sigmavirusright18:54
croelandt"- The customer want to restrict image listing with 'glance image-list' / 'openstack image list' by admin tenant only, when other tenant aren't added as member to the image, even though user has admin permission."18:54
croelandtI'm not even sure that is possible18:54
sigmaviruslet me refresh my memory before I lead you down the wrong path again18:54
croelandtI think they need "project_name: admin"18:55
croelandtand then I'd have to worry about the member thing18:55
sigmavirusSo, they want: user to be able to list their own images (in their own project)18:55
croelandtI'm not even sure they want that :D18:55
sigmaviruslmao18:55
croelandtThat'd seem logical to me18:55
croelandtbut they have not specified it, if I'm reading this right18:55
sigmavirus:/18:56
croelandthow does the member thing work in Glance ?18:57
croelandtI've seen it used, but I wonder whether that works well with policies18:57
*** dharinic|lunch is now known as dharinic19:23
*** e0ne has quit IRC19:31
croelandtsigmavirus: well, project_name does not seem to work, but anyway, thanks for the help19:34
croelandtGotta run, see you :)19:34
*** TravT has quit IRC19:52
*** TravT has joined #openstack-glance19:56
sigmavirusIn case anyone cares to review it, https://review.openstack.org/410940 is the request to release Ocata-2 milestone19:59
*** exploreshaifali has quit IRC20:13
*** TravT has quit IRC20:31
*** pcaruana has quit IRC20:33
*** TravT has joined #openstack-glance20:37
*** e0ne has joined #openstack-glance20:40
*** e0ne has quit IRC20:42
*** tshefi has quit IRC20:46
*** mvk has joined #openstack-glance20:46
openstackgerritMerged openstack/glance: Skipping tests for location 'add', 'replace' on 'queued' images  https://review.openstack.org/40988020:57
*** _ducttape_ has joined #openstack-glance20:58
*** ducttape_ has quit IRC21:02
*** _ducttape_ has quit IRC21:09
*** ducttape_ has joined #openstack-glance21:10
*** cmart has quit IRC21:15
*** cmart has joined #openstack-glance21:16
*** r-daneel has joined #openstack-glance21:20
*** smatzek has quit IRC21:22
*** catintheroof has joined #openstack-glance21:24
catintheroofHi to all! quick question, does the glance image conversion feature supports on-line convertion if integrated with Ceph ?21:28
*** itisha has quit IRC21:42
openstackgerritDirk Mueller proposed openstack/glance: Adjust test suite for new psutil versions  https://review.openstack.org/40914021:54
*** e0ne has joined #openstack-glance22:02
*** catintheroof has quit IRC22:19
*** e0ne has quit IRC22:31
cmartHi Glance folks -- I have a "code orientation" question22:51
*** ducttape_ has quit IRC22:51
cmartMy organization uses a custom Glance store; it was originally built to work with Havana, I'm trying to get it working with Newton22:52
cmartI have placed the driver file in `glance_store/_drivers`, and specified it as the "default_store" in glance-api.conf, as well as adding it to the "stores" collection in the same file22:53
cmartbut when I try to start the Glance API, it logs a "Failed to load driver" warning:22:55
cmartNoMatches("No 'glance_store.drivers' driver found, looking for 'my_custom_driver'",)]. The driver will be disabled22:55
*** burgerk has quit IRC22:55
cmartDo I need to enumerate/install my driver in other places in order for Glance to recognise it?22:57
*** rcernin has quit IRC23:05
flwangcmart: so you only changed the code of glance_store?23:05
flwangcmart: i'm sure there are some checks in glance service code23:06
flwangs/service/server23:06
* stevelle makes a mental note that we need a docs entry specifically for custom drivers23:09
flwangstevelle: that's true :)23:10
flwangstevelle: and one for location strategy if we're OK to let user use it23:11
flwangcmart: you can refer this patch https://review.openstack.org/#/c/32864/23:11
flwangthough at that moment glance_store hasn't been splitted out23:11
flwangstevelle: it would be nice if you can comment this https://review.openstack.org/33676123:12
flwangwhich related to multi locations and location strategy23:12
flwangstevelle: thanks in advance23:12
*** mtanino has quit IRC23:15
stevellestarring23:15
*** mtanino has joined #openstack-glance23:15
*** ducttape_ has joined #openstack-glance23:24
*** chlong has quit IRC23:37
cmartthanks flwang. yes, so far I've only changed the code of glance_store, and changed glance_api.conf. I'll look at that patch and try to tease out what else needs to be changed23:41
cmartsome basic docs on using a custom driver would be super helpful stevelle23:41
cmartin case you're curious, this is what I'm trying to use https://github.com/c-mart/glance-irods/tree/newton23:42
flwangcmart: cool, feel free to ask questions here23:51

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!