Monday, 2021-02-22

« Sunday, 2021-02-21 Index Tuesday, 2021-02-23 »
*** zzzeek has quit IRC00:15
*** zzzeek has joined #openstack-glance00:15
*** zzzeek has quit IRC00:23
*** zzzeek has joined #openstack-glance00:26
*** rcernin has quit IRC02:55
*** rcernin has joined #openstack-glance03:07
*** rcernin has quit IRC03:20
*** rcernin has joined #openstack-glance03:25
*** lbragstad_ has joined #openstack-glance03:41
*** lbragstad has quit IRC03:43
*** zzzeek has quit IRC03:47
*** zzzeek has joined #openstack-glance03:49
*** zzzeek has quit IRC03:53
*** zzzeek has joined #openstack-glance03:55
*** zzzeek has quit IRC03:59
*** zzzeek has joined #openstack-glance04:01
*** ricolin has joined #openstack-glance04:01
*** udesale has joined #openstack-glance04:11
*** zzzeek has quit IRC04:14
*** ratailor has joined #openstack-glance04:15
*** zzzeek has joined #openstack-glance04:18
*** rcernin has quit IRC04:37
abhishekklbragstad_, ack04:55
*** zzzeek has quit IRC04:57
*** zzzeek has joined #openstack-glance04:58
*** rcernin has joined #openstack-glance05:03
*** zzzeek has quit IRC05:03
*** zzzeek has joined #openstack-glance05:05
*** m75abrams has joined #openstack-glance05:10
*** rcernin has quit IRC05:42
*** rcernin has joined #openstack-glance05:42
*** whoami-rajat has joined #openstack-glance06:23
openstackgerritAbhishek Kekane proposed openstack/glance master: New API /v2/images/{id}/tasks  https://review.opendev.org/c/openstack/glance/+/77483006:46
openstackgerritAbhishek Kekane proposed openstack/glance master: Update API docs for new /v2/images/{image_id}/tasks API  https://review.opendev.org/c/openstack/glance/+/77559706:46
openstackgerritAbhishek Kekane proposed openstack/glance master: Bump Images API version to 2.12  https://review.opendev.org/c/openstack/glance/+/77586006:46
*** benj_ has quit IRC06:48
*** benj_ has joined #openstack-glance06:52
*** rcernin has quit IRC07:10
openstackgerritAlexandre arents proposed openstack/glance_store master: swift: Take into account swift_store_endpoint  https://review.opendev.org/c/openstack/glance_store/+/77661107:13
*** lpetrut has joined #openstack-glance07:17
*** rcernin has joined #openstack-glance07:18
*** ralonsoh has joined #openstack-glance07:38
*** rcernin has quit IRC07:51
*** rcernin has joined #openstack-glance07:52
*** rcernin has quit IRC08:00
*** rcernin has joined #openstack-glance08:03
*** rcernin has quit IRC08:09
*** rcernin has joined #openstack-glance08:10
*** rcernin has quit IRC08:16
*** rcernin has joined #openstack-glance08:26
*** rcernin has quit IRC08:32
*** rcernin has joined #openstack-glance08:36
*** rcernin has quit IRC08:41
*** k_mouza has joined #openstack-glance08:58
*** k_mouza has quit IRC09:05
*** k_mouza has joined #openstack-glance09:08
*** zzzeek has quit IRC09:59
*** zzzeek has joined #openstack-glance10:01
*** k_mouza has quit IRC10:21
*** k_mouza has joined #openstack-glance10:38
*** udesale_ has joined #openstack-glance10:47
*** udesale has quit IRC10:50
*** k_mouza has quit IRC11:01
*** k_mouza has joined #openstack-glance11:06
*** k_mouza has quit IRC11:17
*** k_mouza has joined #openstack-glance11:32
*** Luzi has joined #openstack-glance12:29
*** dirtwash has joined #openstack-glance12:45
dirtwashhi, I am told to ask about help here, I have a possible glance bug with Victoria release: https://bugs.launchpad.net/glance/+bug/191648212:45
openstackLaunchpad bug 1916482 in Glance "rbd.IncompleteWriteError: RBD incomplete write (Wrote only 8388608 out of 8394566 bytes) since Victoria Upgrade, ceph v nautilus" [Undecided,New]12:45
dirtwashstuck debugging since 3d, getting nowhere, this only affects snapshots, not images12:45
*** zzzeek has quit IRC13:05
*** zzzeek has joined #openstack-glance13:07
*** jrosser has joined #openstack-glance13:11
*** lbragstad_ is now known as lbragstad13:16
*** lbragstad has quit IRC13:35
*** lbragstad has joined #openstack-glance13:37
*** ratailor has quit IRC13:38
*** xarlos has quit IRC13:48
abhishekkdirtwash, is 'rbd_thin_provisioning' is set in glance-api.conf ?13:55
dirtwashabhishekk: no14:09
dirtwashif its not enbled by default I dont have it in14:09
abhishekkdirtwash, ack, will try to have a look at it14:09
abhishekkbetween, is it possible to set it to True and check again?14:09
dirtwashsure14:09
dirtwashwill test now14:10
abhishekkyou need to set it under glance_store section if you are using single store14:10
dirtwashnot under rbd?14:11
dirtwashok14:11
abhishekkif you are using multi store then under that store section14:12
dirtwashhm seems glance is not happy about this, upton restarting its hanging14:13
dirtwashweird, well i test14:13
dirtwashthis wont mess up anything existing right?14:13
abhishekkI guess not14:14
dirtwashabhishekk: same error14:15
abhishekkdirtwash, ack14:16
abhishekkwill try to have a look14:16
dirtwashI'll revert that cange14:16
abhishekkyes14:16
dirtwashabhishekk: again fyi it only happens with snapshots, i figure has something to do with it starting size0 and te resize...what I dontknow is where the extra bytes come from14:21
abhishekkyes, that's what I am looking for14:21
dansmithabhishekk: I also wrote these tests on friday: https://review.opendev.org/c/openstack/glance/+/774830/8/glance/tests/functional/db/base.py  <-- this uses the actual sqlalchemy api right?14:23
abhishekkyes14:23
dansmithokay14:23
*** rajivmucheli has joined #openstack-glance14:26
*** zzzeek has quit IRC14:28
*** zzzeek has joined #openstack-glance14:29
*** rajivmucheli has quit IRC14:35
abhishekklbragstad, I think we should move the experimental config option patch up in the tree to unblock other reviews14:36
lbragstadabhishekk ok - that sounds good14:37
lbragstadabhishekk i spent friday spelunking around the metadef API and writing tempest tests14:38
abhishekkI will try today if possible14:38
lbragstadabhishekk i can do it, too14:38
lbragstadi have a meeting here, but then i'm free the rest of the day and I can propose it14:38
abhishekklbragstad, had a look, I think we should concentrate on image and tasks14:38
abhishekklbragstad, cool14:38
lbragstadabhishekk so - would the metadef API be available to people?14:39
abhishekkIf we manage to get image and tasks within this week then we should go for metadef14:39
abhishekklbragstad, anyway this will be experimental in W14:39
abhishekkso we are not going to recommend it to use it14:40
lbragstadbecause i think the metadef API has a lot of the same authorization-isms as the image api (authorization is implemented in the authorization layer, the policy layer, and the database)14:40
abhishekkright14:40
lbragstadabhishekk should we consider only rewriting the policies to target the project personas, and leave the system persona work for Xena?14:40
abhishekkthat should also a good option14:41
lbragstadif we can get support for project-admin (e.g., still a system administrator), project-member, and project-reader then we have something that works consistently across all of glance's API14:41
lbragstadin a single release14:41
abhishekksounds good14:41
abhishekklet me know if you need any help14:42
abhishekkI could carry your work during my day time14:42
lbragstadi'd like to sweep all the authorization bits from the database up to the policy layer, but i don't know how much of a refactor that's going to be14:42
lbragstadand i'm worried that would be an invasive change this late in the release14:42
*** rosmaita has joined #openstack-glance14:43
dansmithyeah that seems a bit scary at this point14:44
abhishekkSo can we not use this new experimental flag for it?14:44
lbragstadyeah - tbh i'd rather not twiddle database bits right before wallaby goes out the door14:44
lbragstadwell - i think glance already deals with project scope for everything, right?14:45
abhishekkyes14:45
dansmithabhishekk: I meant a full refactor of checks out of the database to a different layer seems scary at this point in the cycle14:45
lbragstadso - it might just be a matter of 1.) keeping all administrative things associated to project-admin 2.) update write operations to use project-member 3.) update read-only to use project-reader14:45
lbragstadif you want - you can still classify ^ as experiemental (IMO)14:45
abhishekkyes, we do14:46
abhishekkdansmith, right14:46
lbragstadbut - at least those three personas would work consistently in wallaby14:46
lbragstadand then we can see just how much stuff is going to break in Xena and plan for a refactor to support system scope14:47
abhishekkmake sense14:47
lbragstadok - thanks abhishekk, i'll get those patches updated to reflect that14:48
abhishekkdansmith, what I was asking that what if with the help of experimental flag, if it is true then we will enforce policy outer layer and if it is false then we will keep it at db layer (though that would be a lot refactoring)14:49
abhishekklbragstad, sounds good14:49
dansmithabhishekk: ah I see14:50
dansmithabhishekk: that might be the way to transition things in xena though, yeah14:50
abhishekkack14:51
dansmithif it was anything other than a security feature, I'd be less concerned, but the penalty for letting something leak here could be bad14:51
abhishekkright14:51
abhishekkI need to hop out for a meeting, will be back in an hour14:52
*** lpetrut has quit IRC15:29
*** m75abrams has quit IRC16:19
*** whoami-rajat has quit IRC16:19
*** Luzi has quit IRC16:46
*** udesale_ has quit IRC17:04
*** udesale has joined #openstack-glance17:05
*** udesale has quit IRC17:15
* abhishekk going offline for the day17:18
*** jokke has joined #openstack-glance17:18
*** jdillaman has joined #openstack-glance17:49
*** k_mouza has quit IRC17:52
*** k_mouza has joined #openstack-glance17:53
openstackgerritLance Bragstad proposed openstack/glance master: Stop raising 403 when image is not found  https://review.opendev.org/c/openstack/glance/+/77543518:04
openstackgerritLance Bragstad proposed openstack/glance master: Bump requirements to prepare for secure RBAC  https://review.opendev.org/c/openstack/glance/+/76423618:04
openstackgerritLance Bragstad proposed openstack/glance master: Explicitly unset tempest_roles in devstack plugin  https://review.opendev.org/c/openstack/glance/+/77430818:04
openstackgerritLance Bragstad proposed openstack/glance master: Add basic/common personas to base policies  https://review.opendev.org/c/openstack/glance/+/76424118:04
openstackgerritLance Bragstad proposed openstack/glance master: Properly handle InvalidScope exceptions  https://review.opendev.org/c/openstack/glance/+/77430918:04
openstackgerritLance Bragstad proposed openstack/glance master: Pass oslo.context RequestContext objects directly to policy enforcement  https://review.opendev.org/c/openstack/glance/+/76742518:04
lbragstadok - those should be ready to go ^18:04
lbragstadi'm going to put the experimental warning on top of that series and then start removing the system-personas from the remaining patches18:05
openstackgerritLance Bragstad proposed openstack/glance master: nit: Clarify how check() is different from enforce()  https://review.opendev.org/c/openstack/glance/+/77428218:12
*** ralonsoh has quit IRC18:35
openstackgerritLance Bragstad proposed openstack/glance master: Log an experimental warning at startup for secure RBAC  https://review.opendev.org/c/openstack/glance/+/77658819:25
*** k_mouza has quit IRC19:27
*** gyee has joined #openstack-glance19:53
*** rosmaita has quit IRC20:23
*** rosmaita has joined #openstack-glance20:33
openstackgerritDan Smith proposed openstack/glance master: Add housekeeping module and staging cleaner  https://review.opendev.org/c/openstack/glance/+/77701221:23
*** zzzeek has quit IRC21:26
*** zzzeek has joined #openstack-glance21:28
openstackgerritDan Smith proposed openstack/glance master: Test restarting glance for staging cleanup  https://review.opendev.org/c/openstack/glance/+/77701421:52
openstackgerritDan Smith proposed openstack/glance master: Add housekeeping module and staging cleaner  https://review.opendev.org/c/openstack/glance/+/77701221:57
openstackgerritDan Smith proposed openstack/glance master: Test restarting glance for staging cleanup  https://review.opendev.org/c/openstack/glance/+/77701421:57
*** rcernin has joined #openstack-glance22:00
*** rcernin has quit IRC22:01
*** rcernin has joined #openstack-glance22:01
openstackgerritDan Smith proposed openstack/glance master: Add housekeeping module and staging cleaner  https://review.opendev.org/c/openstack/glance/+/77701222:02
openstackgerritDan Smith proposed openstack/glance master: Test restarting glance for staging cleanup  https://review.opendev.org/c/openstack/glance/+/77701422:02
jokkedansmith: that was quick <322:35
openstackgerritErno Kuvaja proposed openstack/glance master: Add get_ksa_client() helper  https://review.opendev.org/c/openstack/glance/+/77701722:41
openstackgerritErno Kuvaja proposed openstack/glance master: WIP: Staging refactor  https://review.opendev.org/c/openstack/glance/+/77701822:41
« Sunday, 2021-02-21 Index Tuesday, 2021-02-23 »

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!