| openstackgerrit | Merged openstack/manila master: Enforce policy checks getting share-type by name https://review.opendev.org/738941 | 00:19 |
|---|---|---|
| vkmc | gouthamr, if you are around... quick question | 00:50 |
| gouthamr | hey vkmc | 00:50 |
| vkmc | is there an advised way on how to add entries to rootwrap.d? | 00:50 |
| vkmc | I'm trying to add ceph client calls | 00:50 |
| vkmc | but it's getting messy | 00:50 |
| vkmc | :) | 00:50 |
| gouthamr | vkmc: i haven't added one recently.. | 00:53 |
| gouthamr | vkmc: the parameters are getting messy? | 00:53 |
| vkmc | yeah | 00:53 |
| gouthamr | vkmc: is sudo required? | 00:53 |
| vkmc | yes | 00:53 |
| vkmc | I was expecting that adding ceph only would work | 00:53 |
| vkmc | but... seems that the implementation takes it as different commands | 00:54 |
| vkmc | ceph fs snapshot ls, for instance | 00:54 |
| gouthamr | vkmc: i was going to ask for an example :) | 00:54 |
| vkmc | http://paste.openstack.org/show/795925/ | 00:55 |
| gouthamr | vkmc: what happens when you do "run_as_root=False" | 00:55 |
| gouthamr | vkmc: i mean, as a service user, i should be able to execute ceph, no? | 00:55 |
| vkmc | *** FileNotFoundError: [Errno 2] No such file or directory: 'ceph fs subvolume snapshot ls': 'ceph fs subvolume snapshot ls' | 00:56 |
| vkmc | gouthamr, that's a good question | 00:56 |
| vkmc | I think we need to fix devstack-plugin-ceph so the service user can run ceph | 00:57 |
| vkmc | right now you need to run as root | 00:57 |
| vkmc | it should be fixed with some groups configs maybe... let me see | 00:57 |
| vkmc | ... or not | 00:59 |
| openstackgerrit | Merged openstack/puppet-manila master: Add support for the interface parameter in authtoken middleware https://review.opendev.org/740947 | 01:00 |
| gouthamr | vkmc: if the service is being run as the manila user, that has access to their keyring and the ceph.conf, we don't need to use sudo with the ceph cli | 01:07 |
| vkmc | that's what I thought | 01:08 |
| gouthamr | usually ceph.conf is world readable - so that's covered | 01:09 |
| vkmc | this throws me off | 01:09 |
| vkmc | http://paste.openstack.org/show/795926/ | 01:09 |
| vkmc | and... running manually... http://paste.openstack.org/show/795927/ | 01:11 |
| vkmc | I thought it was the rootwrap | 01:11 |
| gouthamr | makes sense, can you remove sudo from that request and execute manually? | 01:12 |
| gouthamr | or do you get the same error? | 01:12 |
| vkmc | stack@bionic:~$ ceph fs subvolume snapshot ls cephfs 80935697-9141-404a-a123-027e9ccc8db6 | 01:12 |
| vkmc | [errno 2] error connecting to the cluster | 01:12 |
| gouthamr | ah, try with "--user manila" | 01:13 |
| vkmc | like this? | 01:13 |
| vkmc | stack@bionic:~$ ceph fs subvolume snapshot ls cephfs 80935697-9141-404a-a123-027e9ccc8db6 --user manila | 01:13 |
| vkmc | Error EACCES: access denied: does your client key have mgr caps? See http://docs.ceph.com/docs/master/mgr/administrator/#client-authentication | 01:13 |
| gouthamr | ooh, do we need new caps? | 01:13 |
| gouthamr | for this feature? | 01:13 |
| vkmc | it's just listing the snapshots | 01:14 |
| vkmc | but we do that using the cli instead the volume_client | 01:14 |
| gouthamr | looks like we need new caps to talk to the manager vkmc | 01:14 |
| gouthamr | vkmc: mgr allow * | 01:14 |
| gouthamr | vkmc: wait, we probably aren't setting manila caps at all in devstack - could that be a bug? | 01:16 |
| vkmc | gouthamr, look | 01:16 |
| vkmc | http://paste.openstack.org/show/795928/ | 01:16 |
| vkmc | I'll try adding the caps mgr | 01:16 |
| gouthamr | vkmc: we recommend creating the manila user with the mgr caps, but, on my dsvm, the manila keyring doesn't have it | 01:16 |
| vkmc | and yes, it might be a bug in devstack-plugin-ceph | 01:16 |
| gouthamr | +1 | 01:17 |
| gouthamr | vkmc: https://github.com/openstack/devstack-plugin-ceph/blob/16f8bef33b9278547eee540fb3bb0e5a84eb2d3d/devstack/lib/ceph#L726-L729 | 01:19 |
| gouthamr | vkmc: need mgr there | 01:19 |
| vkmc | gouthamr, cool, will add it | 01:20 |
| vkmc | seems I need to restart some service to changes to take effect | 01:23 |
| vkmc | so I'll continue with this tomorrow | 01:23 |
| vkmc | thanks gouthamr o/ | 01:23 |
| gouthamr | great, you're welcome vkmc | 01:26 |
| gouthamr | gooodnight! | 01:26 |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila-tempest-plugin master: WIP: Dummy driver jobs https://review.opendev.org/740534 | 02:10 |
| openstackgerrit | Merged openstack/manila stable/stein: Add asynchronous error info into messages when share extend error https://review.opendev.org/738927 | 02:26 |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila-tempest-plugin master: WIP: Dummy driver jobs https://review.opendev.org/740534 | 03:49 |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila-tempest-plugin master: WIP: Dummy driver jobs https://review.opendev.org/740534 | 04:24 |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila-tempest-plugin master: Fix usage of tenant_id in tests https://review.opendev.org/741083 | 04:34 |
| *** osmanlicilegi has quit IRC | 06:02 | |
| *** osmanlicilegi has joined #openstack-manila | 06:06 | |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila master: DNM: Testing config opt https://review.opendev.org/741097 | 06:52 |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila-tempest-plugin master: WIP: Dummy driver jobs https://review.opendev.org/740534 | 06:53 |
| *** takamatsu has quit IRC | 06:59 | |
| *** maaritamm has joined #openstack-manila | 07:33 | |
| *** maaritamm has quit IRC | 07:45 | |
| *** tosky has joined #openstack-manila | 07:46 | |
| *** maaritamm has joined #openstack-manila | 07:50 | |
| openstackgerrit | Maurice Escher proposed openstack/manila master: [NetApp] update set_preferred_dc for ontapi 1.150 https://review.opendev.org/741126 | 09:21 |
| openstackgerrit | Maurice Escher proposed openstack/manila master: add share server update to manila-manage share update_host https://review.opendev.org/731486 | 09:37 |
| *** maaritamm has quit IRC | 10:04 | |
| *** maaritamm has joined #openstack-manila | 10:04 | |
| *** maaritamm has quit IRC | 10:16 | |
| *** maaritamm has joined #openstack-manila | 10:35 | |
| openstackgerrit | Liron Kuchlani proposed openstack/manila-tempest-plugin master: Verify applying a new cephx rule after a previous failure https://review.opendev.org/740985 | 10:43 |
| *** tosky has quit IRC | 11:05 | |
| *** tosky has joined #openstack-manila | 11:10 | |
| *** baojg has quit IRC | 12:17 | |
| *** baojg has joined #openstack-manila | 12:17 | |
| *** tkajinam has quit IRC | 12:24 | |
| *** baojg has quit IRC | 13:33 | |
| *** vhari has quit IRC | 14:46 | |
| *** baojg has joined #openstack-manila | 16:28 | |
| *** baojg has quit IRC | 16:49 | |
| *** baojg has joined #openstack-manila | 16:50 | |
| openstackgerrit | Tom Barron proposed openstack/manila master: Update LVM volume extend https://review.opendev.org/740492 | 16:54 |
| openstackgerrit | Tom Barron proposed openstack/manila master: Update NFS helper restart https://review.opendev.org/740477 | 17:04 |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila stable/ussuri: Enforce policy checks getting share-type by name https://review.opendev.org/741278 | 17:26 |
| *** tosky has quit IRC | 18:25 | |
| *** tosky has joined #openstack-manila | 18:25 | |
| *** baojg has quit IRC | 18:38 | |
| *** baojg has joined #openstack-manila | 18:39 | |
| openstackgerrit | Goutham Pacha Ravi proposed openstack/manila stable/queens: [DNM] Testing stable/queens CI https://review.opendev.org/728472 | 18:52 |
| openstackgerrit | Carlos Eduardo proposed openstack/manila-specs master: Add lite spec for share server limits https://review.opendev.org/739136 | 19:42 |
| *** raildo has quit IRC | 20:16 | |
| *** raildo has joined #openstack-manila | 20:16 | |
| *** raildo has quit IRC | 20:22 | |
| *** raildo has joined #openstack-manila | 20:24 | |
| *** raildo has quit IRC | 20:30 | |
| openstackgerrit | Merged openstack/manila-tempest-plugin master: Fix usage of tenant_id in tests https://review.opendev.org/741083 | 20:31 |
| *** maaritamm has quit IRC | 20:49 | |
| openstackgerrit | Douglas Viroel proposed openstack/manila-specs master: Share server migration https://review.opendev.org/735970 | 21:25 |
| *** logan- has quit IRC | 22:17 | |
| *** logan- has joined #openstack-manila | 22:19 | |
| *** baojg has quit IRC | 22:43 | |
| *** baojg has joined #openstack-manila | 22:44 | |
| *** tosky has quit IRC | 22:48 | |
| *** tkajinam has joined #openstack-manila | 22:55 | |
| *** tkajinam has quit IRC | 22:55 | |
| *** tkajinam has joined #openstack-manila | 22:58 | |
| *** baojg has quit IRC | 23:58 | |
| *** baojg has joined #openstack-manila | 23:59 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!