Monday, 2021-10-11

*** JqckB_ is now known as JqckB01:26
*** bhagyashris is now known as bhagyashris|rover04:43
*** abhishekk is now known as akekane|home04:50
*** akekane|home is now known as abhishekk04:50
opendevreviewOpenStack Proposal Bot proposed openstack/glance master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/glance/+/81338606:50
opendevreviewMerged openstack/glance master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/glance/+/81338609:26
opendevreviewAndre Aranha proposed openstack/glance master: Update qcow test to use qcow2 instead  https://review.opendev.org/c/openstack/glance/+/81340610:22
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Cleanup some images created in the tests  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/81341712:35
opendevreviewFelix Huettner proposed openstack/glance master: Fix users being able to delete disabled images  https://review.opendev.org/c/openstack/glance/+/77895112:54
opendevreviewMridula Joshi proposed openstack/glance-specs master: Provision to append the new tags with the existing tags  https://review.opendev.org/c/openstack/glance-specs/+/81342913:33
abhishekkdansmith, o/13:34
dansmithg'mornin13:34
dansmithI have to brew coffee, but keep talking :)13:34
abhishekkgood morning, how was the session and is it published ?13:47
dansmithit went fine I think.. I assume it's published because it was streamed live, but I haven't gone to look13:49
abhishekkok, would like to see it :D13:49
dansmithmeh, it was pretty quick.. we were all given four minutes, so I tried to keep mine to that13:50
dansmithbut I think I was the only one :P13:50
abhishekk:D13:50
abhishekkGreat, we have one open patch related to limits in glance, but its not high priority13:51
abhishekkhttps://review.opendev.org/c/openstack/glance/+/81249913:51
abhishekkits about just adding limits related config option in api.conf13:52
dansmithheh, I had just opened that this morning13:52
abhishekkI have added one comment there13:52
abhishekk:D13:52
abhishekkand then there is this bug, https://bugs.launchpad.net/glance/+bug/194645713:52
dansmithah, okay I'll take a look at that one too13:54
dansmithoh yeah, I had already opened the review for that one13:54
abhishekkcool13:55
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Cleanup some images created in the tests  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/81341714:21
dansmithabhishekk: do you want to talk about quota api stuff at ptg?14:26
abhishekkdansmith, related to remaining quotas, right ?14:26
abhishekkyep, that could be good topic to discuss14:26
dansmithwell, to provide usage information yeah14:26
dansmithcan you link me the etherpad?14:27
abhishekkhttps://etherpad.opendev.org/p/yoga-glance-ptg14:27
dansmiththanks14:27
abhishekknp, I totally forget about it, that will be good addition to quotas14:28
dansmithon the topic of system scope,14:28
dansmithI wonder if we could protect the locations api behind a system scope requirement to make it less risky and less complex to deploy that properly14:29
dansmithit would require nova to use a system-scoped token instead of the user's, but if it had those credentials, it might be able to just poke at the locations part with that token14:29
dansmithI guess I need to look at the nova side to see how doable that would really be14:30
abhishekkright14:30
lbragstadis there a concern about principal of least privilege if nova has admin access?14:33
lbragstad(is that true today?)14:33
dansmithwell,14:33
dansmithit wouldn't necessarily have to be admin, but yeah,14:33
dansmithit would have to be able to see the image, so..14:33
dansmithsystem_scope just seems to apply to so few things, I was kinda hoping this might be something more granular we hadn't considered yet14:34
lbragstadbut today, nova uses project-admin to view the image?14:35
dansmithno,14:36
dansmithit uses the user's token14:36
lbragstadah 14:36
dansmiththinking more back to the idea that was floated at one point, where we actually show up with two tokens, an admin one for privs, and the user's one for scope14:37
dansmithor something14:37
abhishekksorry, power outage at my end16:32
opendevreviewMerged openstack/glance-tempest-plugin master: Cleanup some images created in the tests  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/81341718:22
opendevreviewCyril Roelandt proposed openstack/glance master: Fix typos  https://review.opendev.org/c/openstack/glance/+/81353621:04
opendevreviewCyril Roelandt proposed openstack/glance_store master: Fix typos  https://review.opendev.org/c/openstack/glance_store/+/81353721:09

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!