Thursday, 2025-06-26

*** mhen_ is now known as mhen01:51
opendevreviewMerged openstack/glance master: Remove glance-centralized-cache job  https://review.opendev.org/c/openstack/glance/+/95312004:53
opendevreviewRajiv Mucheli proposed openstack/glance-specs master: Add spec to support domain_id in Glance Policy  https://review.opendev.org/c/openstack/glance-specs/+/95343512:25
croelandt#startmeeting glance14:01
opendevmeetMeeting started Thu Jun 26 14:01:14 2025 UTC and is due to finish in 60 minutes.  The chair is croelandt. Information about MeetBot at http://wiki.debian.org/MeetBot.14:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:01
opendevmeetThe meeting name has been set to 'glance'14:01
croelandt#topic roll call14:01
croelandto/14:01
priteauo/14:01
abhishek_o/14:02
croelandtnot many people around, but let's go :)14:03
croelandt#link https://etherpad.openstack.org/p/glance-team-meeting-agenda14:03
croelandt#topic Periodic jobs14:03
croelandtglance-multistore-cinder-import-fips is failing because it required Python3.10, and our node only has 3.914:03
croelandtso 2 ways of fixing this:14:03
croelandt1) switch to ubuntu-noble14:03
croelandt2) wait for centos-10 to be available in the infra (and send patches so it gets there faster)14:03
croelandtI'm not sure why we use centos for this job, does anyone know?14:04
abhishek_Ubuntu itself does not natively include FIPS14:05
croelandtoh14:05
croelandtyep that explains it14:05
croelandtok a centos 10 image is available in diskimage-builder14:05
croelandtand we need patches in other projects14:05
croelandtI was looking at it earlier, so I'll try and send patches14:06
croelandtMoving on14:06
croelandt#topic M2 release 2025-07-03 (in 1 week)14:06
croelandt#link https://review.opendev.org/q/topic:%22bug/2110185-all-backends%2214:06
croelandtSo ^ is our top priority14:06
croelandtdansmith: rosmaita: do you think you'll have time to review these in the coming days?14:06
dansmithsorry, lost track of time14:07
croelandtI could merge them with only my +2 but they are very impactful patches and I'd love to have a second opinion14:07
croelandtdansmith: happens to all of us :-(14:07
dansmithI'm out tomorrow, here next week and then gone the following14:07
dansmithbut yeah, I know I need to get back to those14:07
dansmithI'll try to do that today, but keep hounding me if not so we can get them done by next week14:07
dansmith(I give you permission to nag) :P14:08
croelandtthe release is on the 3rd14:08
croelandtso I guess I need to send the patch to openstack/releases on the 2nd?14:08
abhishek_yes14:08
dansmithack14:08
croelandtif we don't have common config options from Rajat, that is not optimal, but fine14:09
croelandt#topic Open Discussion14:09
abhishek_dansmith: IF you review one rest are the same for other backends, I think rbd and s3 should be good to review first14:09
* dansmith nods14:09
abhishek_croelandt: could you please review my pending functional test migration patch?14:09
rajivhi, i wanted feedback on https://review.opendev.org/c/openstack/glance-specs/+/95343514:10
abhishek_https://review.opendev.org/c/openstack/glance/+/94784514:10
croelandtabhishek_: yes, will do right after this meeting14:10
priteauHello. I was asked by abhishek_ if I could join the meeting today to discuss a patch14:11
abhishek_croelandt: thanks14:11
croelandtrajiv: are you willing to do the dev work on this?14:11
rajivsure, need little guidance, is this a valid request ?14:12
rajivthe background is to control image visibility per domain14:12
croelandtrajiv: well I guess users requested this?14:13
abhishek_priteau: this is related to fix directly proposed to stable branch, right?14:14
croelandtI am not sure whether OpenStack is "evolving towards better domain-scoped operations" but I am also not an admin for any real OpenStack deployment :)14:15
rajivcroelandt: yes, i was looking for options to hide images, --tag and --hidden were not accurate as policy changes14:15
priteauabhishek_: I submitted it to master but I wanted to discuss if it would even be considered for backports.14:15
priteauHappy to give more context but I don't want to interrupt the other discussion14:15
croelandtrajiv: if I were you I'd add links to explain how and why we evolve towards...14:16
croelandtbecause I honestly have no idea about that topic14:16
abhishek_yes, you can after the current one14:16
croelandtrajiv: this also seems like something we'll end up discussing at the next PTG, but having a good spec and a PoC by then will help14:17
rajivokay, i will update the spec. the current policy only supports project_id bases scoping, i wanted to enhance it to domain_id based like other openstack services.14:17
croelandtso point out to the documentation of these other services14:18
croelandtprove that we are lagging behind14:18
rajivokay14:19
croelandtAlso run tox locally, that will help catch issues that the CI pointed out :)14:20
croelandtpriteau: ok, you have the mic :)14:22
priteauI submitted https://review.opendev.org/c/openstack/glance_store/+/946382 a few months ago to work around an issue we have with a customer. They are using Glance with S3 backend, the S3 being NetApp StorageGRID. When we create an image from a Cinder volume, the upload to S3 is done without multipart upload. It works but StorageGRID is logging these errors: A client is14:22
priteauattempting a PUT Object operation that exceeds S3 size limits: https://docs.netapp.com/us-en/storagegrid/troubleshoot/troubleshoot-s3-put-object-size-too-large-alert.html14:22
priteauI understand this is because Glance doesn't know the size of the Cinder volume and thus doesn't enable multipart upload, even though the volume is bigger than the threshold14:24
priteauThe size is known as 0 during the upload, so I made this patch which just enables to force multipart upload for 0-sized images14:25
croelandtYou tested this and it solves your issue?14:25
priteauIt appears to be (I don't have direct access to this NetApp, but got told that the error went away). Although this is clearly just a workaround, and I understand that abhishek_ is working on a 2025.2 spec for fixing it properly.14:26
priteauI was just wondering if there is any chance my patch would be approved + backportable?14:26
croelandtso if abhishek_ is working on a proper fix, we might not want to work around it14:27
croelandtpriteau: what distro are you using? Would they be opened to patch glance_store?14:27
priteauPatching is not a problem, we use our own Kolla containers14:27
croelandtoh ok14:28
croelandtabhishek_: what do you think about this patch? Is it not the "proper" way of fixing the issue?14:28
croelandtIs this going to be solved with your size patch series?14:28
priteauIt's more about fixing it for other people, especially for those who will be on 2025.1 or 2024.1 for a while14:28
abhishek_I think it will force to use multipart upload for all images14:28
croelandtpriteau: so ideally, two things14:29
croelandt1) I think you should patch your containers for now14:29
croelandt2) If you could try https://review.opendev.org/c/openstack/glance_store/+/949129 that would help us a lot14:29
croelandtwe are planning to release glance_store with this patch next week14:30
abhishek_croelandt: I don't know whether we allow fixing bugs directly towards stable branches14:30
priteaucroelandt: thanks, I could try patch 949129. Is it independant or do I need to pull others?14:31
croelandtabhishek_: yes, we'll have to figure somehting later for stable branches14:31
croelandtabhishek_: does priteau need to cherry-pick something else?14:32
abhishek_priteau: it's independent, you can apply s3 patch only in your env14:32
priteauOK, I can give it a try.14:32
priteauThanks14:32
croelandtif you can easily do that and come back to tell us whether that works, it would be really helpful14:33
priteauWill do14:33
croelandt\o/14:34
croelandtDo we have anything else?14:34
croelandtI think not, thanks everyone for joining!14:37
croelandt#endmeeting14:37
opendevmeetMeeting ended Thu Jun 26 14:37:08 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:37
opendevmeetMinutes:        https://meetings.opendev.org/meetings/glance/2025/glance.2025-06-26-14.01.html14:37
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/glance/2025/glance.2025-06-26-14.01.txt14:37
opendevmeetLog:            https://meetings.opendev.org/meetings/glance/2025/glance.2025-06-26-14.01.log.html14:37
mhenoh snap I missed the call for open discussion, I sneaked in the image encryption topic into the agenda last minute but then was distracted by other work while the meeting was held14:51
abhishek_mhen: any specific thing you want to point out?14:52
mhenessentially what I wrote into the etherpad14:53
abhishek_ack14:53
mhenimplemented scenario tests but had to add a skip check that effectively makes them being skipped by Zuul CI14:53
mhensee my comment here: https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/952699/comments/752a67e9_cdabbcd9?tab=comments14:54
mhenI copied this check from other existing tests that seem to have the same issue14:54
mhendunno if there is anything that can be done about that or if I'm doing it wrong as a whole14:55
abhishek_I will have a look, but will take some time14:55
mhenthanks!14:55
* abhishek_ not around machine for next couple of hours14:56
abhishek_np!14:56
*** mhen_ is now known as mhen17:57
opendevreviewRajat Dhasmana proposed openstack/glance_store master: Add support for backend_defaults group  https://review.opendev.org/c/openstack/glance_store/+/94651220:02
opendevreviewRajat Dhasmana proposed openstack/glance_store master: Add support for backend_defaults group  https://review.opendev.org/c/openstack/glance_store/+/94651220:06
opendevreviewCyril Roelandt proposed openstack/glance-tempest-plugin master: Zuul: do not use USE_PYTHON3  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/95349422:06

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!