| *** gyee has quit IRC | 00:08 | |
| *** jakedahn_zz is now known as jakedahn | 00:12 | |
| *** dwcramer has joined #openstack-meeting | 00:18 | |
| *** littleidea has joined #openstack-meeting | 00:36 | |
| *** jgriffith is now known as jgriffith_away | 00:38 | |
| *** blamar has left #openstack-meeting | 00:39 | |
| *** jog0 has joined #openstack-meeting | 00:40 | |
| *** s0mik has quit IRC | 00:54 | |
| *** bencherian has quit IRC | 01:01 | |
| *** adjohn has quit IRC | 01:04 | |
| *** johnpostlethwait has quit IRC | 01:07 | |
| *** Mandell has quit IRC | 01:16 | |
| *** joearnold has quit IRC | 01:42 | |
| *** edygarcia has joined #openstack-meeting | 01:45 | |
| *** johnpostlethwait has joined #openstack-meeting | 01:49 | |
| *** edygarcia has quit IRC | 02:01 | |
| *** shang has joined #openstack-meeting | 02:03 | |
| *** novas0x2a|laptop has joined #openstack-meeting | 02:05 | |
| *** danwent has quit IRC | 02:17 | |
| *** ayoung has quit IRC | 02:18 | |
| *** edygarcia has joined #openstack-meeting | 02:21 | |
| *** ryanpetr_ has joined #openstack-meeting | 02:24 | |
| *** ryanpetrello has quit IRC | 02:26 | |
| *** ryanpetr_ has quit IRC | 02:33 | |
| *** ryanpetrello has joined #openstack-meeting | 02:41 | |
| *** anderstj has joined #openstack-meeting | 02:53 | |
| *** anderstj has quit IRC | 02:56 | |
| *** ryanpetrello has quit IRC | 02:57 | |
| *** dwcramer has quit IRC | 03:00 | |
| *** dwcramer has joined #openstack-meeting | 03:04 | |
| *** littleidea has quit IRC | 03:09 | |
| *** ijw has quit IRC | 03:12 | |
| *** littleidea has joined #openstack-meeting | 03:14 | |
| *** anderstj has joined #openstack-meeting | 03:15 | |
| *** bencherian has joined #openstack-meeting | 03:27 | |
| *** joearnold has joined #openstack-meeting | 03:31 | |
| *** edygarcia has quit IRC | 03:32 | |
| *** Mandell has joined #openstack-meeting | 03:34 | |
| *** dwcramer has quit IRC | 03:35 | |
| *** joearnold has quit IRC | 03:42 | |
| *** edygarcia has joined #openstack-meeting | 03:44 | |
| *** ryanpetrello has joined #openstack-meeting | 03:45 | |
| *** danwent has joined #openstack-meeting | 03:47 | |
| *** feiyuliu has joined #openstack-meeting | 03:54 | |
| *** johnpostlethwait has quit IRC | 03:55 | |
| *** bencherian has quit IRC | 04:27 | |
| *** garyk has quit IRC | 04:29 | |
| *** mnewby has quit IRC | 04:34 | |
| *** maoy has quit IRC | 04:43 | |
| *** s0mik has joined #openstack-meeting | 04:46 | |
| *** s0mik has quit IRC | 04:49 | |
| *** ryanpetrello has quit IRC | 04:49 | |
| *** johnpostlethwait has joined #openstack-meeting | 04:50 | |
| *** ywu_ has quit IRC | 04:58 | |
| *** edygarcia has quit IRC | 05:02 | |
| *** bencherian has joined #openstack-meeting | 05:17 | |
| *** bencherian has left #openstack-meeting | 05:17 | |
| *** littleidea has quit IRC | 05:27 | |
| *** johnpostlethwait has quit IRC | 05:28 | |
| *** Mandell has quit IRC | 05:53 | |
| *** garyk has joined #openstack-meeting | 05:57 | |
| *** danwent has quit IRC | 06:03 | |
| *** jakedahn is now known as jakedahn_zz | 06:10 | |
| *** sleepsonthefloor is now known as sleepsonzzz | 06:20 | |
| *** anderstj has quit IRC | 06:41 | |
| *** feiyuliu has quit IRC | 06:47 | |
| *** feiyuliu has joined #openstack-meeting | 06:53 | |
| *** ijw has joined #openstack-meeting | 06:56 | |
| *** ijw has quit IRC | 06:58 | |
| *** ttrifonov_zZzz is now known as ttrifonov | 07:25 | |
| *** adjohn has joined #openstack-meeting | 07:53 | |
| *** derekh has joined #openstack-meeting | 08:04 | |
| *** adjohn has quit IRC | 08:18 | |
| *** matwood has quit IRC | 09:09 | |
| *** semyazz has joined #openstack-meeting | 09:44 | |
| *** semyazz has left #openstack-meeting | 09:44 | |
| *** sandywalsh has joined #openstack-meeting | 10:29 | |
| *** LuizOz has left #openstack-meeting | 10:32 | |
| *** rkukura has left #openstack-meeting | 10:56 | |
| *** rkukura has quit IRC | 10:57 | |
| *** adrian17od has joined #openstack-meeting | 11:18 | |
| *** adrian17od has left #openstack-meeting | 11:18 | |
| *** hggdh has quit IRC | 11:38 | |
| *** markvoelker has joined #openstack-meeting | 11:42 | |
| *** sandywalsh has quit IRC | 11:47 | |
| *** sandywalsh has joined #openstack-meeting | 11:57 | |
| *** sandywalsh has quit IRC | 11:59 | |
| *** maoy has joined #openstack-meeting | 12:05 | |
| *** sandywalsh has joined #openstack-meeting | 12:06 | |
| *** hggdh has joined #openstack-meeting | 12:09 | |
| *** dwcramer has joined #openstack-meeting | 12:12 | |
| *** littleidea has joined #openstack-meeting | 12:21 | |
| *** semyazz has joined #openstack-meeting | 12:23 | |
| *** semyazz has left #openstack-meeting | 12:23 | |
| *** littleidea has quit IRC | 12:23 | |
| *** ywu has joined #openstack-meeting | 12:38 | |
| *** ryanpetrello has joined #openstack-meeting | 12:39 | |
| *** Razique has joined #openstack-meeting | 12:42 | |
| *** ryanpetrello has quit IRC | 12:42 | |
| *** mdomsch has quit IRC | 12:55 | |
| *** maoy has quit IRC | 13:02 | |
| *** ywu has quit IRC | 13:08 | |
| *** oubiwann has quit IRC | 13:11 | |
| *** littleidea has joined #openstack-meeting | 13:13 | |
| *** ayoung has joined #openstack-meeting | 13:23 | |
| *** writerDi_ has joined #openstack-meeting | 13:23 | |
| *** writerD__ has joined #openstack-meeting | 13:24 | |
| *** writerDiane has quit IRC | 13:27 | |
| *** writerDi_ has quit IRC | 13:28 | |
| *** dwcramer has quit IRC | 13:42 | |
| *** edygarcia has joined #openstack-meeting | 13:44 | |
| *** nikhil_ has joined #openstack-meeting | 13:46 | |
| *** nikhil_ is now known as Guest19011 | 13:46 | |
| *** GheRivero_ has joined #openstack-meeting | 13:49 | |
| *** ryanpetrello has joined #openstack-meeting | 13:49 | |
| *** blamar has joined #openstack-meeting | 13:58 | |
| *** maoy has joined #openstack-meeting | 14:02 | |
| *** Mandell has joined #openstack-meeting | 14:09 | |
| *** rnirmal has joined #openstack-meeting | 14:13 | |
| *** dwcramer has joined #openstack-meeting | 14:17 | |
| *** Mandell_ has joined #openstack-meeting | 14:25 | |
| *** Mandell has quit IRC | 14:25 | |
| *** anderstj has joined #openstack-meeting | 14:27 | |
| *** feiyuliu has quit IRC | 14:29 | |
| *** danwent has joined #openstack-meeting | 14:29 | |
| *** krtaylor has joined #openstack-meeting | 14:34 | |
| *** writerD__ has quit IRC | 14:41 | |
| *** Mandell_ has quit IRC | 14:50 | |
| *** Razique has quit IRC | 14:51 | |
| *** dolphm has joined #openstack-meeting | 14:52 | |
| *** garyk has quit IRC | 15:06 | |
| *** Gordonz has joined #openstack-meeting | 15:08 | |
| *** matwood has joined #openstack-meeting | 15:09 | |
| *** Gordonz has quit IRC | 15:09 | |
| *** Gordonz has joined #openstack-meeting | 15:10 | |
| *** bencherian has joined #openstack-meeting | 15:11 | |
| *** anderstj has quit IRC | 15:12 | |
| *** jgriffith_away has quit IRC | 15:33 | |
| *** jgriffith has joined #openstack-meeting | 15:35 | |
| *** ryanpetrello has quit IRC | 15:37 | |
| *** jjm3 has quit IRC | 15:50 | |
| *** bencherian has quit IRC | 15:53 | |
| *** jakedahn_zz is now known as jakedahn | 15:57 | |
| *** garyk has joined #openstack-meeting | 16:02 | |
| *** Guest19011 has quit IRC | 16:03 | |
| *** nikhil_ has joined #openstack-meeting | 16:03 | |
| *** Adri2000 has quit IRC | 16:03 | |
| *** Adri2000 has joined #openstack-meeting | 16:04 | |
| *** nikhil_ is now known as Guest55884 | 16:04 | |
| *** Adri2000 is now known as Guest67276 | 16:04 | |
| *** Guest55884 is now known as help | 16:05 | |
| *** help is now known as Guest28742 | 16:05 | |
| *** sleepsonzzz is now known as sleepsonthefloor | 16:08 | |
| *** sleepsonthefloor is now known as sleepsonzzz | 16:09 | |
| *** Guest28742 is now known as register | 16:09 | |
| *** sleepsonzzz is now known as sleepsonthefloor | 16:09 | |
| *** register is now known as Guest19777 | 16:09 | |
| *** s0mik has joined #openstack-meeting | 16:11 | |
| *** joearnold has joined #openstack-meeting | 16:16 | |
| *** Guest19777 has quit IRC | 16:19 | |
| *** nikhil__ has joined #openstack-meeting | 16:25 | |
| *** ryanpetrello has joined #openstack-meeting | 16:34 | |
| *** s0mik has quit IRC | 16:38 | |
| *** s0mik has joined #openstack-meeting | 16:42 | |
| *** lloydde has joined #openstack-meeting | 16:43 | |
| *** martine has joined #openstack-meeting | 16:48 | |
| *** blamar has quit IRC | 16:49 | |
| *** Guest67276 has quit IRC | 16:49 | |
| *** jakedahn is now known as jakedahn_zz | 16:50 | |
| *** Adri2000_ has joined #openstack-meeting | 16:50 | |
| *** Adri2000_ is now known as Guest43626 | 16:50 | |
| *** anderstj has joined #openstack-meeting | 16:50 | |
| *** danwent has quit IRC | 16:53 | |
| *** s0mik has quit IRC | 16:58 | |
| *** Mandell has joined #openstack-meeting | 16:58 | |
| *** s0mik has joined #openstack-meeting | 16:58 | |
| *** oubiwann has joined #openstack-meeting | 16:59 | |
| *** mestery has quit IRC | 17:00 | |
| *** Guest43626 is now known as Adri2000 | 17:00 | |
| *** Adri2000 has quit IRC | 17:00 | |
| *** Adri2000 has joined #openstack-meeting | 17:00 | |
| *** derekh has quit IRC | 17:02 | |
| *** jdurgin has joined #openstack-meeting | 17:04 | |
| *** gyee has joined #openstack-meeting | 17:07 | |
| *** glenc_ has quit IRC | 17:07 | |
| *** glenc has joined #openstack-meeting | 17:07 | |
| *** gyee has quit IRC | 17:11 | |
| *** glenc has quit IRC | 17:11 | |
| *** glenc has joined #openstack-meeting | 17:12 | |
| *** semyazz has joined #openstack-meeting | 17:13 | |
| *** semyazz has left #openstack-meeting | 17:13 | |
| *** jakedahn_zz is now known as jakedahn | 17:13 | |
| *** glenc has quit IRC | 17:13 | |
| *** gyee has joined #openstack-meeting | 17:13 | |
| *** glenc has joined #openstack-meeting | 17:13 | |
| *** PotHix has joined #openstack-meeting | 17:15 | |
| *** danwent has joined #openstack-meeting | 17:16 | |
| *** glenc has quit IRC | 17:24 | |
| *** glenc has joined #openstack-meeting | 17:24 | |
| *** mestery has joined #openstack-meeting | 17:29 | |
| *** glenc has quit IRC | 17:32 | |
| *** jakedahn is now known as jakedahn_zz | 17:33 | |
| *** glenc has joined #openstack-meeting | 17:33 | |
| *** jakedahn_zz is now known as jakedahn | 17:34 | |
| *** GheRivero_ has quit IRC | 17:43 | |
| *** rafaduran has joined #openstack-meeting | 17:48 | |
| *** mnewby has joined #openstack-meeting | 17:49 | |
| *** blamar has joined #openstack-meeting | 17:52 | |
| *** bencherian has joined #openstack-meeting | 17:53 | |
| *** rafaduran has quit IRC | 17:55 | |
| *** tongli|2 has joined #openstack-meeting | 17:57 | |
| *** rafaduran has joined #openstack-meeting | 17:57 | |
| ayoung | dolphm, you are running today's meeting, right? | 17:58 |
|---|---|---|
| dolphm | ayoung: as far as i know! | 17:58 |
| *** jr__ has joined #openstack-meeting | 17:59 | |
| ayoung | gyee, want to ping liem to see if he wants to join? | 17:59 |
| *** novas0x2a|laptop has quit IRC | 18:01 | |
| gyee | ayoung, I am pinging him right now | 18:01 |
| tongli|2 | hi, is this just text (no audio) meeting? | 18:01 |
| gyee | ayoung, he'll be here shortly | 18:02 |
| ayoung | tongli|2, yes, just text | 18:02 |
| dolphm | is audio normally available? | 18:02 |
| ayoung | boy I hope not | 18:03 |
| tongli|2 | thanks. I added an item for the agenda. | 18:03 |
| *** liemmn has joined #openstack-meeting | 18:03 | |
| liemmn | o/ | 18:03 |
| ayoung | dolphm, anyone else we should ping, or do we have a quorum? | 18:04 |
| dolphm | anyone else here for keystone? | 18:05 |
| rafaduran | me | 18:05 |
| gyee | \o | 18:05 |
| *** chenglin has joined #openstack-meeting | 18:06 | |
| tongli|2 | I am here for keystone as well. mostly get myself familar with the form of discussion. | 18:06 |
| dolphm | #startmeeting | 18:06 |
| openstack | Meeting started Tue Jun 5 18:06:43 2012 UTC. The chair is dolphm. Information about MeetBot at http://wiki.debian.org/MeetBot. | 18:06 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 18:06 |
| dolphm | might as well get started | 18:06 |
| dolphm | fyi- joe heck is traveling today, so i'll be proxying for him | 18:07 |
| ayoung | #topic Status and Progress | 18:07 |
| ayoung | Not sure if I can even do that... | 18:07 |
| dolphm | #topic status and progress | 18:07 |
| *** openstack changes topic to "status and progress" | 18:07 | |
| ayoung | guess not | 18:08 |
| dolphm | might be tied to whoever did startmeeting (?) | 18:08 |
| *** jakedahn is now known as jakedahn_zz | 18:08 | |
| dolphm | gyee: did you want to give us an update on bp keystone-domains? | 18:08 |
| gyee | yep | 18:08 |
| dolphm | I know it took some extra effort/time to get the draft review going | 18:08 |
| gyee | I uploaded the initial version to gerrit for draft review | 18:08 |
| *** danwent_ has joined #openstack-meeting | 18:09 | |
| gyee | anyone else want to be included? | 18:09 |
| ayoung | #link http://etherpad.openstack.org/keystone-domains | 18:09 |
| ayoung | gyee, yes, please | 18:09 |
| rafaduran | gyee, me too please | 18:09 |
| gyee | got it | 18:09 |
| dolphm | #link https://blueprints.launchpad.net/keystone/+spec/keystone-domains | 18:09 |
| *** termie has joined #openstack-meeting | 18:10 | |
| gyee | I'll be finishing up the architectural doc some time this week | 18:10 |
| ayoung | gyee, post link? | 18:10 |
| liemmn | gyee, you want to summarize the core concepts for domain here? (for those who are not familiar with it yet) | 18:11 |
| *** lloydde has quit IRC | 18:11 | |
| gyee | https://review.openstack.org/#/c/8114/ | 18:11 |
| gyee | its a draft review so I'll have to add you guys in | 18:11 |
| gyee | not yet public | 18:11 |
| gyee | conceptually, domains are administrative boundaries/containers for users, tenants, and optionally roles | 18:12 |
| ayoung | gyee, alternatively, you could do what I've been doing for "signed tokens" which is posting it to github. Might make more sense | 18:12 |
| *** sleepsonthefloor is now known as sleepsonzzz | 18:12 | |
| *** danwent has quit IRC | 18:12 | |
| *** danwent_ is now known as danwent | 18:12 | |
| gyee | ayoung, yet, that'll work too | 18:12 |
| tongli|2 | so domain will have roles associated? | 18:12 |
| gyee | role definitions can be either domain-agnostic or domain-specific | 18:13 |
| tongli|2 | which limit or grant certain action rights? | 18:13 |
| dolphm | gyee: i'm not a fan of that extra complexity at all | 18:13 |
| tongli|2 | right, but it will be associated with domain, correct? | 18:13 |
| gyee | dolphm, its flexibility | 18:13 |
| dolphm | tongli|2: correct, there's a domain-role association table in the implementation | 18:14 |
| dolphm | gyee: flexibility to achieve what specific use cases? | 18:14 |
| tongli|2 | in that case, how will it be different from user groups? | 18:14 |
| termie | the goal is to provide the ability for somebody to be a domain admin | 18:15 |
| gyee | termie, correct | 18:15 |
| gyee | separation of duties, delegate administration, etc | 18:15 |
| *** s0mik has quit IRC | 18:15 | |
| termie | the simplest implementation would be to add an additional category of roles that is a user-domain role, rather than a user-tenant role | 18:15 |
| termie | gyee: i don't buy the rest of that | 18:15 |
| termie | my goal is to allow a domain administrator with the same policy semantics as already exist | 18:16 |
| *** semyazz has joined #openstack-meeting | 18:16 | |
| gyee | what's user-domain role? | 18:16 |
| tongli|2 | I thought that during the design summit, the decision was made clear that delegation should not be in keystone. | 18:16 |
| *** semyazz has left #openstack-meeting | 18:16 | |
| termie | gyee: a role that applies to a user-domain pair, rather than a user-tenant pair | 18:16 |
| *** rnirmal has quit IRC | 18:16 | |
| dolphm | tongli|2: that's correct | 18:16 |
| gyee | so all tenants in that domain will have that role? | 18:16 |
| termie | gyee: any tenant that user is using within a given a domain will provide in additon to "roles" a set of "domain-roles" | 18:16 |
| termie | gyee: no | 18:16 |
| termie | gyee: it is user-domain | 18:16 |
| termie | not tenant-domain | 18:17 |
| termie | whenever that user is operating within that domain they have some domain-roles associated | 18:17 |
| gyee | so if I authenticate and scope to a tenant in that domain, will I get that role? | 18:17 |
| jr__ | domain is a collection of users, tenants, roles, and groups... not just users or just roles | 18:17 |
| termie | jsut as whenever the user is operating within a tenant they will have the normal roles they have associated with that tenant | 18:17 |
| termie | jr__: wrong | 18:17 |
| termie | jr__: a domain is a collection of tenants | 18:18 |
| jr__ | wrong | 18:18 |
| dolphm | jr__: i'd argue that it's not users or roles at all, it's just a collection of tenants, everything else is implicit | 18:18 |
| dolphm | if at all | 18:18 |
| jr__ | I wrote the domain spec, i think i would know | 18:18 |
| termie | jr__: i rejected the spec | 18:18 |
| * ayoung grabs some popcorn | 18:18 | |
| jr__ | just a collection of tenants provides little value | 18:18 |
| *** johnpostlethwait has joined #openstack-meeting | 18:19 | |
| termie | jr__: we went over this all at the design conf, the needs you were trying to address were all addressed | 18:19 |
| termie | as were the needs of the others interested in such a concept | 18:19 |
| termie | i am not sure which person you were in the meeting | 18:19 |
| termie | but i do recall one person with a grumpy face after it | 18:20 |
| *** jr__ has quit IRC | 18:20 | |
| *** jlr has joined #openstack-meeting | 18:21 | |
| termie | morale of the story: we are not trying to incorporate HP's system into keystone, we are trying to solve the same problems in a way that works for other people as well | 18:21 |
| termie | s/morale/moral/ (i'm not really that into morale) | 18:21 |
| jlr | grouping of tenants is just 'grouping' of tenants. it does nothing for separation of duties and all the other goodness provided | 18:22 |
| dolphm | isn't that where rbac comes in? | 18:22 |
| termie | it does totally fine | 18:22 |
| jlr | that is not what domains is about... if you want tenant grouping, then call it that and create another blueprint | 18:22 |
| termie | domain-roles with the same policy semantics get you all you needed | 18:22 |
| gyee | termie, can you elaborate how domain-roles work? | 18:23 |
| termie | i just did man | 18:23 |
| dolphm | role grants are currently performed on a user-role-tenant combination | 18:23 |
| dolphm | a domain-level grant would simply be a user-role-domain combination, i presume | 18:23 |
| termie | dolphm: correct | 18:23 |
| gyee | k? and? | 18:23 |
| termie | 11:16 <termie> gyee: any tenant that user is using within a given a domain will provide in additon to "roles" a set of "domain-roles" | 18:24 |
| termie | 11:16 <termie> gyee: no | 18:24 |
| termie | 11:16 <termie> gyee: it is user-domain | 18:24 |
| termie | 11:17 <termie> not tenant-domain | 18:24 |
| termie | 11:17 <termie> whenever that user is operating within that domain they have some domain-roles associated | 18:24 |
| termie | 11:17 <termie> jsut as whenever the user is operating within a tenant they will have the normal roles they have associated with that tenant | 18:24 |
| dolphm | use cases are documented in: | 18:25 |
| dolphm | #link http://etherpad.openstack.org/keystone-domains | 18:25 |
| tongli|2 | I feel this is an introduction of nested tenant. | 18:25 |
| termie | the domain they are operating under are defined by the tenant they are operating under | 18:25 |
| tongli|2 | that really hurts. | 18:25 |
| termie | tongli|2: it is a collection of tenants | 18:25 |
| termie | tongli|2: not nested, nested implies recursion | 18:25 |
| liemmn | The intention of domain is to separate users, roles and tenants in one domain from another. The only way to link them is via trust relationship. | 18:26 |
| termie | tongli|2: in practice large organizations tend to need three levels | 18:26 |
| dolphm | i'd actually prefer arbitrary tenant hierarchies rather than introducing new concepts | 18:26 |
| tongli|2 | right, two levels inclusion, basically like a tenant can have other tenants inside. | 18:26 |
| termie | dolphm: that is a bad idea and forces your datastructures into graph traverals | 18:26 |
| termie | tongli|2: not exactly, they have different properties | 18:26 |
| dolphm | termie: only as deep as your real-world use case | 18:26 |
| tongli|2 | termie, but conceptually they are all containers. | 18:27 |
| termie | tongli|2: one is a container, one is a resource owner | 18:27 |
| dolphm | termie: with domains, you're forcing two levels, when one could satisfy a majority, while a minority will eventually want additional complexity | 18:27 |
| termie | dolphm: additional complexity means additionally complex code | 18:27 |
| termie | dolphm: and additionally complex testing, edge cases | 18:28 |
| *** novas0x2a|laptop has joined #openstack-meeting | 18:28 | |
| termie | dolphm: design the right system, not something you aren't going to need | 18:28 |
| dolphm | termie: i haven't thought it all the way through, but it seems much simpler in terms of API-impact and implementation changes | 18:28 |
| termie | dolphm: feel free to take it offline and propose such a concept | 18:29 |
| termie | dolphm: if you think we should wait on domains until you write it up | 18:29 |
| termie | dolphm: i'm not against that | 18:29 |
| termie | as existing advocates for the domains still seem to not be on the same page | 18:30 |
| dolphm | termie: i'll spend some time on it and see where my opinion lands :) | 18:30 |
| termie | dolphm: keep what happened to "zones" in mind when you do ;) | 18:30 |
| tongli|2 | probably it will really help to make a case to describe how domain can solve that tenant and user group combination can not. | 18:31 |
| termie | tongli|2: it provides an abstraction for managing multiple tenants as a group | 18:32 |
| tongli|2 | so we move on to open discussions now? | 18:32 |
| ayoung | tongli|2, not yet, we are still on "Progress" | 18:32 |
| dolphm | is anyone else not included in the domains draft review that would like to be? | 18:32 |
| tongli|2 | ok. not a problem. | 18:32 |
| tongli|2 | can you please add me? | 18:32 |
| ayoung | we done on domains? | 18:32 |
| dolphm | gyee: can you add tongli|2 ? | 18:32 |
| tongli|2 | launchpad id is litong01@us.ibm.com | 18:33 |
| gyee | sure | 18:33 |
| rafaduran | me too please | 18:33 |
| tongli|2 | thanks a lot. | 18:33 |
| termie | ayoung: yes | 18:33 |
| *** rnirmal has joined #openstack-meeting | 18:34 | |
| ayoung | I've gotten some good feedback on the signed tokens work | 18:34 |
| rafaduran | termie: I would like to know about your opinon on the queryng by name V3 API | 18:34 |
| rafaduran | this week tow duplicates for #link https://bugs.launchpad.net/keystone/+bug/972800 | 18:34 |
| termie | rafaduran: i wrote down comments on the doc | 18:34 |
| uvirtbot | Launchpad bug 972800 in keystone "Identity backends provide get_by_name methods but they aren't available via API" [Wishlist,Incomplete] | 18:34 |
| termie | maybe this link works? https://docs.google.com/document/d/1s9C4EMxIZ55kZr62CKEC9ip7He_Q4_g1KRfSk9hY-Sg/edit?disco=AAAAAEYr61Q# | 18:35 |
| rafaduran | termie: sorry, I didn't see, I'm going to check | 18:35 |
| termie | it looks dubious | 18:35 |
| *** dendro-afk is now known as dendrobates | 18:35 | |
| ayoung | termie, what looks dubious? | 18:35 |
| *** rafaduran has quit IRC | 18:35 | |
| dolphm | i think querying by name is pretty well discussed in the v3 draft, which is a more appropriate venue for that type of discussion | 18:36 |
| dolphm | ayoung: want to give us an update on pki? | 18:36 |
| ayoung | sure. | 18:36 |
| dolphm | proceed! | 18:36 |
| termie | added anotehr comment on the doc, didn't see dolph's question | 18:36 |
| termie | ayoung: the link does | 18:36 |
| ayoung | I've gotten some good feedback, with a couple *big* questions | 18:37 |
| termie | ayoung: i don't know if it will work for others | 18:37 |
| ayoung | termie, link worked for me | 18:37 |
| ayoung | anyway | 18:37 |
| *** rafaduran has joined #openstack-meeting | 18:37 | |
| ayoung | gyee, asked if signed tokens should replace the existing, or if we should keep the existing around | 18:37 |
| ayoung | my gut says that if we give people the option to not change, they won't change | 18:37 |
| dolphm | ayoung: a fair assumption | 18:38 |
| ayoung | I'd rather have the signed tokens out there soon and find out if it breaks things | 18:38 |
| termie | ayoung: i would love for that to be the case (signed required) | 18:38 |
| ayoung | termie, glad to hear it | 18:38 |
| ayoung | I have been going through and fixing all of the unit tests I broke | 18:38 |
| ayoung | and in doing so learning a little bit | 18:38 |
| ayoung | I think it is fair to say that we would want to run those tests over both token mechanisms if we kept both | 18:39 |
| ayoung | and I think that is prohibiative | 18:39 |
| termie | ayoung: i don't thnkk so | 18:39 |
| termie | ayoung: we have existing patterns for running tests against multiple drivers | 18:39 |
| ayoung | termie, it isn't just a different driver here, though. | 18:40 |
| ayoung | The logic for processing the tokens is slightly different | 18:40 |
| termie | ayoung: i haven't looked at your proposed implementation, but it largely is in my mind | 18:40 |
| ayoung | as the signed tokens don't need the network call, etc | 18:40 |
| termie | ayoung: that just means bumping a strategy abstraction up a level somewhere | 18:41 |
| ayoung | termie, take a look. Thjere are still details to work out, but the approach in general is pretty close. | 18:41 |
| ayoung | termie, yeah, it is starting to feel that way | 18:41 |
| ayoung | there are a bunch of #termie comments and #dolph comments in there that indicate that as well | 18:41 |
| ayoung | "move this to common:" type stuff | 18:41 |
| *** martine has quit IRC | 18:42 | |
| ayoung | I'll post an updated patch later on today with the next set of unit tests fixed | 18:42 |
| ayoung | there was also the question about whether we still want to have memcache support for ticket validation | 18:43 |
| dolphm | ayoung: github link? | 18:43 |
| ayoung | https://github.com/admiyo/keystone/tree/signed-tokens | 18:44 |
| dolphm | ayoung: / intending to open a draft/public review? | 18:44 |
| termie | ayoung: i don't think it will be the most common use case, but memcache is more robust than most people tend to think | 18:44 |
| ayoung | dolphm, I've been rebasing that | 18:44 |
| termie | ayoung: it has the main benefit of having built-in cleanup | 18:44 |
| dolphm | #link https://github.com/admiyo/keystone/tree/signed-tokens | 18:44 |
| rafaduran | termie: about the querying by name, it makes sense to me your comments, moving it under /search path makes it easier to include it as an extension rather than core, keeping core clean | 18:45 |
| dolphm | rafaduran: (we're still discussing pki) | 18:45 |
| ayoung | termie, it is not a question of robust, but whether we need to shortcut the token validation. Right now, we cache so we don't need to go back to Keystone. With signed-tokens, the cost of validating is less | 18:45 |
| ayoung | termie, the cost of validating is spinning up an additional process and waiting for it to finish. THis is non-zero, but still not too bad compared to a network call | 18:46 |
| termie | ayoung: for most kinds of signed tokens, but things in multifactor auth will still probably need a temporary store | 18:46 |
| ayoung | termie, sounds good. It is easier for me to leave it in. Just don't want that to be decision made out of lazyness | 18:46 |
| ayoung | termie, are you cool with the Popen approach to running openssl? | 18:47 |
| termie | ayoung: mostly i just don't think we need to ditch all the code yet, that may change shortly but i think there are probably still some uses for having it in tehre, even if it just means not re-typing half of it | 18:47 |
| termie | ayoung: aye, can add an abstraction to make another machine do it for us later on | 18:47 |
| dolphm | ayoung: anything else on pki for today? | 18:48 |
| ayoung | termie, I would probably suggest that we use AMQP or some other local RPC to talk to a process that just cranks through validation requests saying "yes" or "no" to each if we find we need to minimize the cost of the proces start up | 18:49 |
| gyee | ayoung, so token revocation will be meaningless with the PKI stuff then? | 18:49 |
| ayoung | gyee, correct | 18:49 |
| termie | gyee: besides pki cert revocation | 18:49 |
| ayoung | gyee, I have a write up of how to do it, but it makes things more complicated | 18:49 |
| ayoung | oh | 18:49 |
| termie | gyee: and things of that nature | 18:49 |
| termie | i doubt it will be supported right away | 18:50 |
| ayoung | when starting Keystone, I was wondering if it should self generate the certs it needs if they do not exist | 18:50 |
| termie | ayoung: i agree on wanting to farm out the work, i think that is something that is second priority to getting it working | 18:50 |
| dolphm | ayoung: hmm.. and write them to disk? | 18:50 |
| ayoung | I was thinking more along the lines of devstack than for live deployments | 18:50 |
| ayoung | dolphm, yes | 18:50 |
| termie | ayoung, dolphm: i'd probably put that in the whatever setup command (like db_sync) | 18:51 |
| *** deva-mobile has joined #openstack-meeting | 18:51 | |
| ayoung | termie, +1 | 18:51 |
| dolphm | termie: agree | 18:51 |
| termie | we don't want to add many additional setup steps, but it still seems like something people should be knowingly doing | 18:51 |
| dolphm | but i do like the idea of auto-generating them if necessary, but perhaps just keep them in memory and throw lots of warnings about how all your tokens will be invalid if you shut down keystone | 18:52 |
| termie | could probably add a flag to auto-generate for testing or whatnot | 18:52 |
| ayoung | termie, so the services *are* downloading the ca certs and the signing certs in order to validate. | 18:52 |
| termie | ayoung: statement or question? | 18:52 |
| ayoung | I think that is OK | 18:52 |
| ayoung | do you? | 18:52 |
| dolphm | #allow_autogenerated_keys = False | 18:52 |
| gyee | ayoung, just to clarify, so PKI token is not configurable correct? | 18:53 |
| jlr | i think it should be | 18:53 |
| *** deva-mobile has quit IRC | 18:53 | |
| termie | gyee, ayoung: signed token, i don't think pki is the only version of that | 18:53 |
| ayoung | gyee, correct. It will replace the token code | 18:53 |
| *** deva has joined #openstack-meeting | 18:53 | |
| jlr | why not an option? | 18:54 |
| dolphm | ayoung: without api impact, though | 18:54 |
| dolphm | ayoung: correct? | 18:54 |
| ayoung | dolphm, no API impact | 18:54 |
| dolphm | ayoung: just sort of renders a few calls useless | 18:54 |
| ayoung | dolphm, and, the remote services can, in theory, run with the PKI tokens and the existing auth_token middleware, but I wouldn't want to support it | 18:54 |
| gyee | ayoung, no API impact? | 18:55 |
| gyee | what about the 3rd party clients don't use middleware? | 18:55 |
| ayoung | gyee, no. from an API perspective, nothing changes | 18:55 |
| gyee | well, there won't be validate token call right? | 18:56 |
| dolphm | gyee: it's just not necessary | 18:56 |
| ayoung | they can request a token, can use it as a blob, send it back to keystone to validate if they want | 18:56 |
| liemmn | ayoung: Even though there is no API impact, for clients that do not want to deal with certs, they are now out of option | 18:56 |
| dolphm | gyee: keystone could still implement one, for clients that don't understand that they can validate signed tokens themselves | 18:56 |
| *** Shrews has joined #openstack-meeting | 18:56 | |
| gyee | ok, so it's backward compatible then | 18:56 |
| dolphm | gyee: yes | 18:57 |
| gyee | I am more concern with reference implementations | 18:57 |
| dolphm | alright, for the sake of completeness... | 18:57 |
| dolphm | #topic high priority bugs or immediate issues? | 18:57 |
| *** openstack changes topic to "high priority bugs or immediate issues?" | 18:57 | |
| dolphm | we had a pair of bugs opened against admin API operations that weren't requiring *any* sort of auth | 18:57 |
| dolphm | #link https://bugs.launchpad.net/keystone/+bug/1006815 | 18:57 |
| uvirtbot | Launchpad bug 1006815 in keystone "Admin API /v2.0/tenants/{tenant_id}/users/{user_id}/roles doesn't validate token" [Critical,In progress] | 18:57 |
| *** adjohn has joined #openstack-meeting | 18:57 | |
| dolphm | #link https://bugs.launchpad.net/keystone/+bug/1006822 | 18:57 |
| uvirtbot | Launchpad bug 1006822 in keystone "API（v2.0/OS-KSADM/services，v2.0/OS-KSADM/services/{service_id}）doesn't validate token" [Critical,Fix committed] | 18:57 |
| termie | services one is in | 18:57 |
| ayoung | liemmn, is that a show stopper for you? DO you need to deploy in "no certs allowed" environments? | 18:57 |
| *** martine has joined #openstack-meeting | 18:58 | |
| termie | ayoung: i wouldn't explicitly remove the old functionality just yet, for the record, but i think we probably want to deprecate it | 18:58 |
| ayoung | that is not right. I just looked at /tenants/{tenant_id} | 18:58 |
| ayoung | it confirms that an admin token was sent it | 18:58 |
| ayoung | termie, how would it get configured? | 18:58 |
| liemmn | ayoung: I think Dolph answered my question... It is not a show stopper, but as a reference implementation, I would try to keep it as simple as possible. | 18:58 |
| dolphm | and for more completeness, i'm going to assume there aren't any other high priority issues (i'm not aware of any, at least), and... | 18:59 |
| dolphm | #topic open discussion | 18:59 |
| *** openstack changes topic to "open discussion" | 18:59 | |
| ayoung | right not it is specified as a middle_ware | 18:59 |
| ayoung | right now | 18:59 |
| dolphm | and now we wait for mtaylor to dance us out of here | 18:59 |
| termie | NOONTIME | 19:00 |
| termie | well, in the real timezone | 19:00 |
| termie | our meeting is now over, i think | 19:00 |
| dolphm | true | 19:00 |
| tongli|2 | guys, | 19:00 |
| termie | let's all run for the hills | 19:00 |
| tongli|2 | I have an item. | 19:00 |
| ayoung | heh | 19:00 |
| tongli|2 | can we talk about it? | 19:00 |
| termie | spit it out son | 19:00 |
| dolphm | tongli|2: open discussion until mtaylor kicks us | 19:00 |
| ayoung | tongli|2, fire away...we might get chased out soon | 19:00 |
| tongli|2 | Keystone log in with invalid tenant name return 200, should there be a difference between good and bad tenant name? | 19:01 |
| tongli|2 | I added into the agenda. | 19:01 |
| dolphm | tongli|2: imo, yes, it should return a 401 | 19:01 |
| ayoung | agreed | 19:01 |
| termie | sounds like it was already a bug? | 19:01 |
| tongli|2 | that bothers me a lot. | 19:01 |
| mtaylor | dolphm: take your time, I doubt we have a full hour of stuff anyway | 19:01 |
| dolphm | tongli|2: i'm pretty sure https://review.openstack.org/#/c/6875/ takes care of that (please test!) | 19:01 |
| dolphm | mtaylor: i always think the same thing about keystone | 19:01 |
| termie | i am in the middle of approving that patch | 19:02 |
| mtaylor | dolphm: ++ | 19:02 |
| termie | FTR | 19:02 |
| termie | unless i forget over lunch | 19:02 |
| tongli|2 | great. I will take a look at , thanks folks. | 19:02 |
| dolphm | termie: i wouldn't blame you, lunch is awesome | 19:02 |
| dolphm | in general | 19:02 |
| dolphm | cool | 19:02 |
| dolphm | #endmeeting | 19:02 |
| termie | dolphm: i'm feeling a little chubby | 19:02 |
| *** openstack changes topic to "OpenStack meeting channel. See http://wiki.openstack.org/Meetings for schedule and http://eavesdrop.openstack.org/meetings/openstack-meeting/ for meeting logs" | 19:02 | |
| openstack | Meeting ended Tue Jun 5 19:02:28 2012 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 19:02 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-18.06.html | 19:02 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-18.06.txt | 19:02 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-18.06.log.html | 19:02 |
| dolphm | mtaylor: /salute | 19:02 |
| jeblair | _ | 19:03 |
| jeblair | O/ | 19:03 |
| mtaylor | #startmeeting | 19:03 |
| openstack | Meeting started Tue Jun 5 19:03:45 2012 UTC. The chair is mtaylor. Information about MeetBot at http://wiki.debian.org/MeetBot. | 19:03 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 19:03 |
| jeblair | thank goodness that made it in before the startmeeting. | 19:04 |
| clarkb | jeblair: we were racing? | 19:04 |
| mtaylor | who wants to talk about barrell racing? | 19:04 |
| mtaylor | OR, I guess we can talk about CI stuff | 19:04 |
| * jeblair wants to know what a barrell is. | 19:04 | |
| * mtaylor can't spell | 19:04 | |
| mtaylor | #topic zuul | 19:05 |
| jeblair | bigger than a barrel, i'd imagine | 19:05 |
| *** openstack changes topic to "zuul" | 19:05 | |
| mtaylor | jeblair: so - you wanna tell folks all about the new hotness? | 19:05 |
| jeblair | yeah, so zuul is in production, basically globally for openstack now | 19:05 |
| jeblair | because of the interdependencies of all the projects, we can't phase it in, it's pretty much all or nothing. | 19:05 |
| jeblair | I wrote a mailing list post about it, which you should receive in the next 6 hours if you haven't already | 19:05 |
| * mtaylor hands jeblair a large salmon | 19:06 | |
| jeblair | and a blog post here | 19:06 |
| mtaylor | totally awesome | 19:06 |
| jeblair | #link http://amo-probos.org/post/14 | 19:06 |
| jeblair | After rolling it out, it pretty much immediately started testing keystone changes in parallel | 19:06 |
| jeblair | http://paste.openstack.org/show/18354/ | 19:06 |
| jeblair | that's what that looks like. | 19:06 |
| jeblair | not to be outdone, 4 nova changes were tested in parallel shortly after that | 19:06 |
| jeblair | http://paste.openstack.org/show/18357/ | 19:06 |
| mtaylor | things I like a) parallel testing b) dependent testing (yay for not running long-running tests if the quick ones don't pass) | 19:07 |
| jeblair | i'm pretty sure the ssh connection is going to die at some point | 19:07 |
| clarkb | so in that output the change at the top was tested with all of the changes below it merged in as well? | 19:08 |
| jeblair | but that's a matter of waiting until that happens, and figuring out why from the debug messages. | 19:08 |
| jeblair | clarkb: yep | 19:08 |
| *** JoseSwiftQA has joined #openstack-meeting | 19:08 | |
| jeblair | clarkb: and only merged if they all passed (they did) | 19:08 |
| deva | Cross project dependencies, even? | 19:09 |
| jeblair | deva: yes and no... | 19:09 |
| jeblair | yes in that the changes across dependent projects are sequenced | 19:09 |
| jeblair | no in that you can not specify a change to one project must be tested with a change to another project | 19:09 |
| jeblair | deva: it may be possible to do that if we can get the merge job behaving exactly like gerrit's merge check. it's something i plan on looking into. | 19:10 |
| deva | Gotcha | 19:11 |
| mtaylor | jeblair: should we do pep8 before unittests similar to how we do merge first now? | 19:11 |
| *** ttrifonov is now known as ttrifonov_zZzz | 19:12 | |
| jeblair | mtaylor: we could do that; the pep8 tests take a little longer since they're done in a tox venv | 19:12 |
| mtaylor | jeblair: good point | 19:12 |
| jeblair | mtaylor: also, unit tests can still be meaningful even if pep8 fails | 19:13 |
| jeblair | (which isn't true for a failing merge test) | 19:13 |
| mtaylor | indeed | 19:13 |
| jeblair | so i think we'd at least want to keep the current setup for the check queue | 19:14 |
| jeblair | let's look into how long the pep8 tests take before deciding to change the gate queue | 19:14 |
| mtaylor | yeah - I can be on board with that | 19:14 |
| jeblair | that's probably it for zuul | 19:15 |
| *** sleepsonzzz is now known as sleepsonthefloor | 19:16 | |
| *** s0mik has joined #openstack-meeting | 19:16 | |
| mtaylor | cool | 19:17 |
| mtaylor | lemme see ... | 19:17 |
| mtaylor | #topic gerrit changes | 19:17 |
| *** openstack changes topic to "gerrit changes" | 19:17 | |
| mtaylor | Shrews, clarkb: how are we doing on our new gerrit features? | 19:17 |
| Shrews | Work In Progress is ready, available on review-dev now. | 19:18 |
| clarkb | and I think the first attempt at a better dashboard and list of "reviewable" changes is complete | 19:18 |
| Shrews | As an enhancement, we'll soon be adding a new per-project permission so more people can use the WIP feature. | 19:18 |
| Shrews | right now, only change submitter, branch owner, project owner, and admins can use it | 19:19 |
| mtaylor | I think we should land both of your most recent changes, install those on review-dev to double-check ... and then release to review.openstack.org | 19:19 |
| mtaylor | unless somebody thinks we should wait for Shrews' acl fix? | 19:19 |
| *** dolphm has quit IRC | 19:19 | |
| Shrews | mtaylor: i see no reason to wait on it | 19:20 |
| *** mrmartin has joined #openstack-meeting | 19:20 | |
| clarkb | I have no problems with it | 19:20 |
| mtaylor | I think that gerrit 2.4 + dashboard are pretty compelling, and giving change owner ability to WIP is nice | 19:20 |
| mtaylor | and might get us a little bit more real-world use of wip | 19:20 |
| clarkb | I have a feeling the better priority sorting will take some time | 19:21 |
| jeblair | how long do you think the acl will take? | 19:21 |
| clarkb | and I haven't really dug into it yet, so don't wait | 19:21 |
| jeblair | (because if it's not going to be too long, we may want to wait until we can announce the feature, and announce that -core developers can wip changes) | 19:22 |
| mtaylor | that's a good point - Shrews? thoughts? | 19:22 |
| Shrews | jeblair: i'm *hoping* this week | 19:23 |
| Shrews | so we can hold off a couple of days if you want to see where i stand then | 19:23 |
| clarkb | I was going to update puppet to land http://ci.openstack.org/tarballs/test/gerrit-2.4-11-gd4a0c4b.war on review-dev. Should I go ahead or will Shrews' change and my latest one be approved soon? | 19:25 |
| *** danwent has quit IRC | 19:25 | |
| *** deva has quit IRC | 19:27 | |
| mtaylor | I'm good with both changes landing | 19:27 |
| clarkb | I can update puppet after they land then | 19:28 |
| mtaylor | cool | 19:28 |
| mtaylor | alright, let's hold off a couple of days before updating review and see how the acl changes go | 19:28 |
| *** jakedahn_zz is now known as jakedahn | 19:29 | |
| mtaylor | I think that's all the big-ticket topics for the moment ... | 19:30 |
| mtaylor | #topic open discussion | 19:30 |
| *** openstack changes topic to "open discussion" | 19:30 | |
| mtaylor | I'm trying to get the global dependency list stuff up and going (after realizing that we can use the update.py machinery in openstack-common to our advantage) | 19:30 |
| mtaylor | and I got pure-nosetests changes done for nova and glance | 19:30 |
| mtaylor | OH - I did something else I forgot about ... new pypi mirror code | 19:31 |
| clarkb | LinuxJedi isn't here, but after cleaning up etherpad-lite's puppet module I think I may want a precise host instead of an oneiric host for that >_> | 19:31 |
| mtaylor | pypi.openstack.org is created from all of the packages downloaded by pip-installing all of the requirements from all of the branches of all of our projects | 19:31 |
| jeblair | mtaylor: re dependency list, is awesome -- basic idea to have the list in openstack-common, and use update.py to copy it into projects? | 19:31 |
| mtaylor | jeblair: yes. | 19:31 |
| mtaylor | jeblair: except | 19:31 |
| LinuxJedi | clarkb: can't do that yet | 19:31 |
| clarkb | LinuxJedi: darn, ok | 19:32 |
| mtaylor | jeblair: we won't copy entries from the global list into the projects unless that depend is there first | 19:32 |
| LinuxJedi | clarkb: since Rackspace doesn't give us Precise | 19:32 |
| jeblair | and nosetests is awesome, except it outputs a lot of logging to console. | 19:32 |
| mtaylor | so each projects list will be a subset of the global list ... but the versions will be tied... | 19:32 |
| LinuxJedi | clarkb: unless mtaylor wants it on the SF HP Cloud account or something | 19:32 |
| mtaylor | jeblair: yeah, I've gotta fix the nosetest output thing ... vishy said he was cool with our proposed change | 19:32 |
| jeblair | LinuxJedi: i think precise images exist now. | 19:32 |
| mtaylor | they do | 19:32 |
| LinuxJedi | jeblair: ah, awesome | 19:33 |
| mtaylor | we can spin up precise slaves via jclouds-plugin even | 19:33 |
| LinuxJedi | clarkb: ok, scrap what I said ;) | 19:33 |
| clarkb | LinuxJedi: if you can swap oneiric out for precise when you get back that would be awesome | 19:34 |
| mtaylor | speaking of that ... | 19:34 |
| mtaylor | #topic etherpad | 19:34 |
| *** openstack changes topic to "etherpad" | 19:34 | |
| clarkb | I am still fiddling with it a little on my test box though. Not entirely sure logrotate is working the way I want it to | 19:34 |
| mtaylor | should we talk about a transition plan? | 19:34 |
| LinuxJedi | clarkb: sure, can I erase the oneiric one in the process or do you temporarily need both? | 19:34 |
| clarkb | LinuxJedi: I do not need the oneiric box so erasing is fine | 19:35 |
| LinuxJedi | cool | 19:35 |
| * LinuxJedi goes back to lurking and pretending to be not working on a public holiday ;) | 19:35 | |
| jeblair | clarkb: lovely puppet work, btw. | 19:35 |
| *** JoseSwiftQA has quit IRC | 19:36 | |
| *** jlr has quit IRC | 19:36 | |
| *** chenglin has quit IRC | 19:36 | |
| *** liemmn has quit IRC | 19:36 | |
| clarkb | #link https://github.com/Pita/etherpad-lite/wiki/How-to-migrate-the-database-from-Etherpad-to-Etherpad-Lite | 19:36 |
| clarkb | that link describes the technical process behind migrating | 19:36 |
| clarkb | basically run a js script to dump the old DB then cat that back into the etherpad lite DB | 19:37 |
| mtaylor | so we should be able to dry run the data migration a few times to make sure it's solid and see how long it takes | 19:37 |
| LinuxJedi | clarkb: let me know if you need any more VMs for the dry runs | 19:37 |
| * LinuxJedi can spin up as many as you need | 19:37 | |
| clarkb | ok | 19:37 |
| mtaylor | at that point, should just be a scheduled downtown and migration, yeah? | 19:37 |
| mtaylor | are we close enough on it to be thinking about that? or am I jumping the gun? | 19:38 |
| clarkb | probably jumping the gun a little, but yes if things look good after migrating a couple times we should be able to schedule a downtime and DNS cutover or however you want to actually flip the switch | 19:38 |
| clarkb | does the CI team admin etherpad.openstack.org? | 19:39 |
| mtaylor | ok. I'll just sit back on my haunches for a while | 19:39 |
| LinuxJedi | clarkb: yes | 19:39 |
| mtaylor | well, sort of | 19:39 |
| mtaylor | we have the login to it :) | 19:39 |
| LinuxJedi | clarkb: I can help you with a migration plan when ready | 19:39 |
| clarkb | so access to the old DB shouldn't be a problem? | 19:39 |
| LinuxJedi | clarkb: I have logins for everything | 19:39 |
| clarkb | great | 19:39 |
| mtaylor | LinuxJedi: has global root on the internet | 19:39 |
| LinuxJedi | rm -rf /internet | 19:40 |
| mtaylor | crap. now I can't work | 19:40 |
| mtaylor | #topic open discussion | 19:40 |
| *** openstack changes topic to "open discussion" | 19:40 | |
| mtaylor | anybody got anything else? questions? comments? | 19:41 |
| * LinuxJedi has had 2 days off this week and lots of non-public admin stuff this week so it will probably be a quietish week from me | 19:41 | |
| LinuxJedi | but I can fix everyone's problems as usual and I have a few things planned | 19:42 |
| LinuxJedi | :) | 19:42 |
| mtaylor | hehehe | 19:42 |
| mtaylor | well, for the record, I did NOT break anything this weekend | 19:42 |
| LinuxJedi | yay \o/ | 19:42 |
| * LinuxJedi buys mtaylor a beer | 19:43 | |
| clarkb | are we fully recovered from the forkbombs? | 19:43 |
| mtaylor | good question. actually... | 19:43 |
| mtaylor | #topic multiprocess forkbombs | 19:43 |
| *** openstack changes topic to "multiprocess forkbombs" | 19:43 | |
| mtaylor | we should probably talk about that for a sec just for the record | 19:43 |
| jeblair | i think so, unless a test snuck in last night as i was merging the revert patch | 19:43 |
| jeblair | #link https://wiki.jenkins-ci.org/display/JENKINS/ProcessTreeKiller | 19:44 |
| jeblair | becaues of that, i believe that jenkins should have killed the processes that got out of control | 19:44 |
| jeblair | on the two machines i could (eventually) log into, the processes in question had the correct environment for that to operate | 19:45 |
| clarkb | is there any value in setting ulimits on the test VMs? | 19:45 |
| jeblair | so i'm not sure why it didn't happen. | 19:45 |
| mtaylor | someone was suggesting that the forkbomb was going so fast that perhaps the killer couldn't keep up | 19:45 |
| jeblair | it may have been so pathologically bad that jenkins couldn't run that code. | 19:45 |
| jeblair | perhaps, but that's a naive implementation of a process killer; it should do a complete pass and eventually kill the parent. | 19:46 |
| jeblair | but i don't know how it's implemented in jenkins. | 19:46 |
| * mtaylor blames java | 19:46 | |
| jeblair | clarkb: we may want to look into that. or something with cgroups | 19:46 |
| clarkb | I think the goal with ulimit/cgroups would be to keep the machine in a useable state for debugging? | 19:47 |
| clarkb | and possibly give jenkins a better shot at cleaning things up | 19:47 |
| jeblair | and probably look into the processtreekiller code to see what it's actually doing. | 19:47 |
| mtaylor | jeblair: any further thoughts on the post-build action of cleaning up lurking processes? | 19:47 |
| jeblair | mtaylor: my thoughts on that are disrupted by the processtreekiller -- if it was supposed to run but failed, i think there's probably nothing we can do from within jenkins to do the same thing. | 19:48 |
| mtaylor | jeblair: good point | 19:49 |
| Shrews | heh, it lists ALL processes and check the env variables of each. ick | 19:50 |
| mtaylor | wow, really? that's special | 19:50 |
| *** matwood has quit IRC | 19:50 | |
| jeblair | Shrews: better ideas? | 19:51 |
| Shrews | jeblair: store list of pids? not sure without understanding jenkins code | 19:52 |
| jeblair | jenkins spawns processes that can spawn processes that can spawn processes whose parents can die making the children be reparented to PID 1. | 19:52 |
| jeblair | all of which happened yesterday | 19:53 |
| jeblair | so i'm hard pressed to see a better way (other than using cgroups which isn't cross-platform) | 19:53 |
| LinuxJedi | jeblair: still loving Jenkins? ;) | 19:54 |
| jeblair | LinuxJedi: in my statement above, the processes i'm talking about are the test processes. | 19:55 |
| LinuxJedi | ah, ok :) | 19:55 |
| Shrews | eh, there could probably be some sort of central reporting system when a new child is spawned. | 19:55 |
| mtaylor | well... I think that's about it for real this time | 19:56 |
| jeblair | Shrews: I think what you're describing doesn't exist in unix. | 19:56 |
| mtaylor | last thoughts? | 19:56 |
| clarkb | Shrews: you should write a custom init just for jenkins hosts | 19:56 |
| Shrews | jeblair: i'm thinking at the jenkins level. | 19:56 |
| jeblair | perhaps we should use systemd. | 19:56 |
| jeblair | Shrews: the processes we're talking about aren't spawned by jenkins, they're spawned by the test runner that we told jenkins to run. | 19:57 |
| Shrews | jeblair: oh, well that is different indeed | 19:57 |
| mtaylor | thanks everybody! | 19:58 |
| mtaylor | #endmeeting | 19:58 |
| *** openstack changes topic to "OpenStack meeting channel. See http://wiki.openstack.org/Meetings for schedule and http://eavesdrop.openstack.org/meetings/openstack-meeting/ for meeting logs" | 19:58 | |
| openstack | Meeting ended Tue Jun 5 19:58:22 2012 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 19:58 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-19.03.html | 19:58 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-19.03.txt | 19:58 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-19.03.log.html | 19:58 |
| *** danwent has joined #openstack-meeting | 20:00 | |
| *** mattray has joined #openstack-meeting | 20:05 | |
| *** Shrews has left #openstack-meeting | 20:07 | |
| *** dwcramer has quit IRC | 20:13 | |
| *** glenc has quit IRC | 20:15 | |
| *** matwood has joined #openstack-meeting | 20:19 | |
| *** markmc has joined #openstack-meeting | 20:23 | |
| *** oubiwann has quit IRC | 20:27 | |
| *** glenc has joined #openstack-meeting | 20:39 | |
| *** pcrews has joined #openstack-meeting | 20:39 | |
| *** jmeredit has joined #openstack-meeting | 20:41 | |
| *** dendrobates is now known as dendro-afk | 20:43 | |
| *** tongli|2 has quit IRC | 20:45 | |
| *** dwcramer has joined #openstack-meeting | 20:49 | |
| *** ewindisch has joined #openstack-meeting | 20:50 | |
| *** bcwaldon has joined #openstack-meeting | 20:55 | |
| ttx | o/ | 20:59 |
| ttx | heckj, notmyname, bcwaldon, vishy, devcamcar, danwent: around ? | 21:00 |
| notmyname | here | 21:00 |
| danwent | here | 21:00 |
| bcwaldon | ttx: hello | 21:00 |
| * ttx hopes vishy is no longer in Hawaii. | 21:00 | |
| vishy | o/ | 21:01 |
| mtaylor | ola | 21:01 |
| bcwaldon | ttx: your dreams have been answered | 21:01 |
| ttx | so we are missing the Nebuloids | 21:01 |
| mtaylor | ttx: may not be appropriate - but quick question ... what, if anything, should I be doing with melange? | 21:02 |
| ttx | Let's start and see if the light attracts them | 21:02 |
| ttx | mtaylor: nothing, should be merged into quantum by F2 | 21:02 |
| ttx | #startmeeting | 21:02 |
| openstack | Meeting started Tue Jun 5 21:02:25 2012 UTC. The chair is ttx. Information about MeetBot at http://wiki.debian.org/MeetBot. | 21:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 21:02 |
| ttx | Agenda @ http://wiki.openstack.org/Meetings/ProjectMeeting | 21:02 |
| ttx | Milestone-proposed for Folsom-2 will be cut on July 3. So the affected projects have 4 weeks left. | 21:02 |
| ttx | #info Milestone-proposed for Folsom-2 will be cut on July 3. So the affected projects have 4 weeks left. | 21:03 |
| ttx | #topic Actions from previous meeting | 21:03 |
| *** openstack changes topic to "Actions from previous meeting" | 21:03 | |
| ttx | * vishy to adjust 'undefined' folsom bp priorities | 21:03 |
| * ttx looks it up | 21:03 | |
| ttx | was done but someone added a new one | 21:03 |
| ttx | https://blueprints.launchpad.net/nova/+spec/predictable-s3-image-id | 21:04 |
| ttx | let's consider it done :) | 21:04 |
| ttx | skipping keystone to let heckj a chance to join us | 21:04 |
| ttx | #topic Swift status | 21:04 |
| *** openstack changes topic to "Swift status" | 21:04 | |
| ttx | notmyname: yo | 21:04 |
| notmyname | swift 1.5.0 released today | 21:04 |
| ttx | \o/ | 21:05 |
| notmyname | yay :-) | 21:05 |
| ttx | A bit early to talk about 1.5.1 ? | 21:05 |
| notmyname | heh. ya | 21:05 |
| ttx | notmyname: Anything you wanted to mention ? | 21:05 |
| notmyname | make sure you read my email or the changelog before upgrading to 1.5.0. there are some required config changes | 21:05 |
| ttx | I guess we should also attract distro packagers attention on that | 21:06 |
| notmyname | great work from everyone who contributed | 21:06 |
| ttx | #action ttx to point Swift distro packagers to required config changes in Swift 1.5.0 | 21:06 |
| vishy | ttx: Looks like based on the discussion that this should be obsoleted. Eoghan? --Vish (i didn't prioritize that one because i was waiting on eoghan to potentially delete it | 21:07 |
| *** lzyeval has joined #openstack-meeting | 21:08 | |
| ttx | Note that there are ~78 New Swift bugs that should get triaged on Thursday's BugTriage day ! | 21:08 |
| ttx | #info Participate to the BugTriage day, see http://wiki.openstack.org/BugDays/20120607BugTriage | 21:08 |
| ttx | notmyname: anything else ? | 21:08 |
| notmyname | I don't have anything else | 21:08 |
| ttx | Questions on Swift ? | 21:08 |
| ttx | #topic Glance status | 21:09 |
| *** openstack changes topic to "Glance status" | 21:09 | |
| ttx | bcwaldon: o/ | 21:09 |
| bcwaldon | hey hey | 21:09 |
| ttx | #link https://launchpad.net/glance/+milestone/folsom-2 | 21:09 |
| ttx | bcwaldon: How is api-v2 going ? | 21:09 |
| bcwaldon | It's going great! | 21:09 |
| ttx | Is https://blueprints.launchpad.net/glance/+spec/api-v2-links a part of api-v2 ? I see no dependency between the two. | 21:09 |
| bcwaldon | markwash and some guys from titan are helping out quite a bit | 21:10 |
| bcwaldon | ttx: yes, I'll set deps in a sec | 21:10 |
| bcwaldon | and I started work on the db refactoring this week | 21:10 |
| ttx | ok, so the set of api-v2 things are still on track so far ? | 21:10 |
| bcwaldon | making it fully pluggable! | 21:10 |
| bcwaldon | ttx: yes sir | 21:10 |
| ttx | My other questions were about: | 21:10 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/swift-tenant-specific-storage (dprince) | 21:10 |
| *** russellb has joined #openstack-meeting | 21:10 | |
| ttx | How is that going ? | 21:11 |
| bcwaldon | We'll have to ask dprince on that one | 21:11 |
| *** maoy has quit IRC | 21:11 | |
| bcwaldon | last I heard he was waiting on some free time to tackle it | 21:11 |
| bcwaldon | I had a rough estimate of folsom-2 on completeness | 21:11 |
| ttx | ok... | 21:11 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/glance-client-v2 (bcwaldon) | 21:11 |
| ttx | is that parralel to the api-v2 work, or following it ? | 21:12 |
| bcwaldon | it only depends on the spec, not the implementation | 21:12 |
| ttx | parallel, even | 21:12 |
| *** maoy has joined #openstack-meeting | 21:12 | |
| bcwaldon | and a lot of that work is actually getting done outside of the context of openstack | 21:12 |
| bcwaldon | i.e. a third-party library | 21:12 |
| ttx | ok, so still on track for F2 ? | 21:12 |
| bcwaldon | yes | 21:12 |
| ttx | Looking at https://blueprints.launchpad.net/glance/folsom I see two essential specs for F3 without assignee... | 21:12 |
| bcwaldon | things will pick up next week, I promise | 21:12 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/glance-client-parity | 21:12 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/streaming-server | 21:13 |
| ttx | Are you looking for help on those ? | 21:13 |
| bcwaldon | I think I have commitments for both | 21:13 |
| markwash | ttx when does f-2 close? | 21:13 |
| bcwaldon | feel free to action me | 21:13 |
| * ttx copypastes: Milestone-proposed for Folsom-2 will be cut on July 3. So the affected projects have 4 weeks left. | 21:13 | |
| ttx | #action bcwaldon to set assignees for glance-client-parity and streaming-server specs | 21:14 |
| ttx | bcwaldon: Anything else you wanted to mention ? | 21:14 |
| bcwaldon | Nope, I did want to hilight that we are working on making the db layer pluggable | 21:14 |
| bcwaldon | so anybody that wanted to explore alternateive db drivers will be able to do so | 21:14 |
| bcwaldon | and that is all | 21:15 |
| ttx | bcwaldon: so it's now like Nova ? Or more pluggable ? | 21:15 |
| bcwaldon | think of it more like Keystone's underlying pluggable data store drivers | 21:15 |
| bcwaldon | cutting the tie on sqlalchemy | 21:16 |
| ttx | ok | 21:16 |
| ttx | Other questions on Glance ? | 21:16 |
| ttx | bcwaldon: is there a particular spec that tracks this "pluggable db" work ? | 21:16 |
| bcwaldon | it's being lumped into refactor-db-layer | 21:17 |
| ttx | oh, F3. I see. | 21:17 |
| bcwaldon | yeah, there are a lot of tasks for it | 21:17 |
| ttx | I can imagine. | 21:17 |
| ttx | #topic Quantum status | 21:17 |
| *** openstack changes topic to "Quantum status" | 21:17 | |
| ttx | danwent: hey | 21:17 |
| danwent | hello | 21:18 |
| ttx | #link https://launchpad.net/quantum/+milestone/folsom-2 | 21:18 |
| vishy | afk 5 min tracking down phone | 21:18 |
| ttx | I'd like to discuss the status of the essential stuff... | 21:18 |
| ttx | * https://blueprints.launchpad.net/quantum/+spec/v2-api-melange-integration (jkoelker) | 21:18 |
| ttx | it's the one that blocks quantum-horizon and ovs-api-v2-support, right ? | 21:18 |
| danwent | yeah, our top priority has been finishing and documenting the v2 API (this BP), to unblock the other work dependent on it | 21:18 |
| ttx | how is it going ? | 21:19 |
| danwent | yes, and several others. We've gotten some draft documentation up, so I think all of those other BPs can now start doing design (and coding with unit tests that mock) | 21:19 |
| danwent | the v2 API BP is in review, though there are still some non-trivial bits to fix up. | 21:19 |
| danwent | I'm optimistically hoping we can have it cleaned-up and merged by end of week. | 21:19 |
| danwent | but my bigger prioirty is actually making sure the others are unstuck | 21:20 |
| ttx | would be great. Was about to suggest that ;à | 21:20 |
| ttx | ;) | 21:20 |
| *** sleepsonthefloor is now known as sleepsonzzz | 21:20 | |
| ttx | * https://blueprints.launchpad.net/quantum/+spec/new-cli (yong sheng gong) | 21:20 |
| danwent | so I've chatted with all of those BP owners already. having a call with arvind, who is doing the horizon stuff tomorrow, which is the last one that's really stuck. | 21:20 |
| *** ryanpetrello has quit IRC | 21:20 | |
| ttx | danwent: I see good progress on that one ? | 21:20 |
| danwent | yong is a trooper, he's been making good progess just based on the draft API docs and the v2 API review code | 21:21 |
| danwent | yes | 21:21 |
| ttx | * https://blueprints.launchpad.net/quantum/+spec/improved-nova-quantum-integration (tr3buchet) | 21:21 |
| ttx | is that one well unblocked now ? | 21:21 |
| danwent | this is tr3buchet . he said he has had a branch that does this with Quantum v1 api + melange, but needs to rework that to use quantum v2 api only | 21:22 |
| tr3buchet | ttx: i've been sortof waiting for quantum, but it's a state where i can start making progress | 21:22 |
| ttx | tr3buchet: still optimistic for F2 deadlines ? | 21:22 |
| *** jakedahn is now known as jakedahn_zz | 21:22 | |
| tr3buchet | ttx: sure. | 21:22 |
| ttx | * https://blueprints.launchpad.net/quantum/+spec/quantum-dhcp (Carl Perry) | 21:22 |
| ttx | danwent: same question here -- unblocked and on track ? | 21:23 |
| danwent | ttx: they are just getting started. carlp promised me that they were going to make "amazing" progress on this BP this week :) | 21:23 |
| danwent | so i'm looking forward to that :P | 21:23 |
| *** martine has quit IRC | 21:23 | |
| ttx | it's still 4 weeks away. | 21:23 |
| * ttx loves those slightly-more-spaced milestones | 21:23 | |
| ttx | danwent: Anything else ? | 21:23 |
| danwent | not really. as a I said, we're working on everything critical for Folsom in F-2, though some of the non-essential stuff will likely spill into F-3.. just don't know which items yet. | 21:24 |
| ttx | Note that you have ~25 new bugs to triage on that BugTriage day Thursday ! | 21:24 |
| danwent | woohoo :) | 21:24 |
| ttx | Questions on Quantum ? | 21:24 |
| danwent | one other comment | 21:25 |
| ttx | go for it | 21:25 |
| danwent | added a new BP to track getting the devstack gating working with Quantum enabled: | 21:25 |
| vishy | bak | 21:25 |
| danwent | https://blueprints.launchpad.net/quantum/+spec/quantum-gate | 21:25 |
| danwent | want to get that working ASAP. | 21:25 |
| danwent | that's it. | 21:26 |
| ttx | #topic Nova status | 21:26 |
| *** openstack changes topic to "Nova status" | 21:26 | |
| ttx | vishy: welcome back! | 21:26 |
| vishy | ttx: thx | 21:26 |
| ttx | #link https://launchpad.net/nova/+milestone/folsom-2 | 21:26 |
| ttx | A few questions: | 21:27 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/general-host-aggregates (jog0) | 21:27 |
| ttx | vishy: Do you know the status of this (essential) one ? | 21:27 |
| vishy | ttx: I don't, I was hoping to find jog0 yesterday | 21:27 |
| ttx | let's action him on updating status on his bp | 21:28 |
| ttx | #action jog0 to update status for general-host-aggregates bp | 21:28 |
| ttx | I'm a bit concerned with this one | 21:28 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/finish-uuid-conversion (mikal) | 21:28 |
| ttx | Same question. I see "Good progress" but no code proposed yet ? | 21:28 |
| vishy | the first review is in | 21:28 |
| ttx | oh. | 21:29 |
| vishy | there is just one more afterwards | 21:29 |
| vishy | looks like the blueprint didn't link | 21:29 |
| ttx | review link ? | 21:29 |
| ttx | https://review.openstack.org/#/c/8171/ | 21:30 |
| vishy | he accidentally overwrote it | 21:30 |
| vishy | i just added back in | 21:30 |
| ttx | ok, cool | 21:30 |
| vishy | ttx: so that should land quickly and then it is just the security groups table | 21:30 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/volume-decoupling (vishy) | 21:30 |
| ttx | How is that one going ? | 21:31 |
| vishy | that one is making good progress too | 21:31 |
| vishy | sleepson- has working branches for the last three items | 21:31 |
| ttx | do you have an ETA ? There are a lot of Cinder things to complete for F2 | 21:31 |
| vishy | they are still in draft mode because they are cleaning them up | 21:31 |
| jgriffith | Should be next week (early hopefully) | 21:31 |
| vishy | but once those are in we have working cinder parity | 21:32 |
| ttx | ok. while we are talking Cinder... | 21:32 |
| jog0 | ttx, still mapping out the blueprint, will start working on it this week | 21:32 |
| ttx | jgriffith: progress on https://blueprints.launchpad.net/cinder/+spec/python-cinder-client ? | 21:32 |
| ttx | jog0: still on track for F2 ? | 21:32 |
| jgriffith | Pretty much there I beleive | 21:32 |
| jog0 | ttx: as of now yes. | 21:32 |
| jgriffith | Yes, definitely. I can't update status fields on it though ??? | 21:32 |
| jgriffith | oops... jog0 | 21:33 |
| ttx | jgriffith: on python-cinder-client spec ? | 21:33 |
| jgriffith | correct | 21:34 |
| *** primeministerp has joined #openstack-meeting | 21:34 | |
| ttx | jgriffith: err.. you should be able. We'll solve this offline | 21:34 |
| ttx | #action ttx to fix jgriffith access to bp updating | 21:34 |
| jgriffith | k | 21:34 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/ec2-id-compatibilty (SINA) | 21:34 |
| ttx | vishy: Unknown status, know if it's being worked on yet ? | 21:35 |
| lzyeval | I'll check with our team | 21:35 |
| ttx | lzyeval: cool, thx | 21:35 |
| ttx | #action lzyeval to update status of ec2-id-compatibilty bp | 21:35 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/xenapi-network-info-model (tr3buchet) | 21:35 |
| ttx | tr3buchet, vishy: Looks "implemented" to me ? | 21:36 |
| vishy | lzyeval: it should follow the same thing we do for glance and cinder uuids This still needs to be done for instances so we can drop the id column and rely solely on uuid | 21:36 |
| *** dwcramer has quit IRC | 21:36 | |
| vishy | ttx: agreed, that went in | 21:36 |
| *** Gordonz has quit IRC | 21:36 | |
| ttx | willfix | 21:36 |
| lzyeval | vishy: got it | 21:36 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/multi-process-api-service (Huang Zhiteng) | 21:36 |
| ttx | vishy: That one was reverted, we should make sure to communicate with the author to get it fixed and resubmitted ? | 21:37 |
| ttx | I'm not sure the author will notice the revert by himself | 21:37 |
| vishy | ttx: he is already checking into it | 21:38 |
| ttx | oh, great. | 21:38 |
| vishy | ttx: he was on irc the other day when it happened | 21:38 |
| *** maoy has quit IRC | 21:38 | |
| ttx | Finally, one question on the general Folsom plan @ https://blueprints.launchpad.net/nova/folsom | 21:38 |
| ttx | config-drive-v2, delete-in-any-state and user-configurable-rbac (all High priority) are not targeted to any milestone... | 21:38 |
| ttx | Would be good to make sure their assignees are committed to delivering in Folsom-3 ? | 21:38 |
| *** troytoman-away is now known as troytoman | 21:39 | |
| ttx | vishy: may I action you on that ? | 21:39 |
| vishy | sure | 21:39 |
| ttx | #action vishy to contact assignees for config-drive-v2, delete-in-any-state and user-configurable-rbac and confirm F3 targeting | 21:39 |
| ttx | vishy: Anything on your mind ? | 21:39 |
| vishy | ttx: yes there are still stuff on the folsom plan with no assignees | 21:40 |
| ttx | vishy: yes, though you got all the "High" covered now | 21:40 |
| vishy | this one specifically requires some discussion: https://blueprints.launchpad.net/nova/+spec/differentiate-admin | 21:40 |
| ttx | #help there are still stuff on the folsom plan with no assignees | 21:41 |
| vishy | ttx: did you have to copy my terrible english :) | 21:41 |
| ttx | vishy: half the magic of my typing speed is good use of copypaste | 21:42 |
| vishy | That is it from me | 21:42 |
| ttx | Wanted to mention Nova has ~230 New bugs to triage, so that's where most of the BugTriage day energy will be spent ! | 21:42 |
| ttx | #info Nova devs: Make sure to all join #openstack-bugday on Thursday ! | 21:42 |
| ttx | It looks huge but divided by 20 it's a lot less impressive. | 21:43 |
| med_ | Does bugday start in your local timezone or at 0:00 UTC? | 21:43 |
| ttx | med_: bugday is as long as it's Thursday somewhere. | 21:43 |
| ttx | It actually lasts 47 hours and 59 min. | 21:43 |
| ttx | Questions on Nova ? | 21:44 |
| russellb | should the priority of no-db-messaging (low) be changed since it's a pre-req for no-db-compute (high) ? | 21:44 |
| russellb | blueprints ^ | 21:44 |
| ttx | russellb: yes. | 21:44 |
| russellb | k, don't think i can change it | 21:44 |
| ttx | vishy: I'll let you do it ? ^ | 21:44 |
| ttx | devcamcar: around ? | 21:44 |
| vishy | russellb: yes i will do it | 21:44 |
| russellb | kthx | 21:44 |
| ttx | termie: want to replace heckj to report on Keystone ? | 21:45 |
| ttx | looks like Seattle was wiped out of IRC | 21:45 |
| ttx | Anyone from Keystone or Horizon in the room ? | 21:45 |
| ttx | Let's do "other team reports" to see if that creates some vocations | 21:46 |
| ttx | #topic Other Team reports | 21:46 |
| *** openstack changes topic to "Other Team reports" | 21:46 | |
| ttx | jaypipes, mtaylor: ? | 21:46 |
| ttx | Any other team lead with a status report ? | 21:46 |
| ttx | mtaylor: I saw the zuul announcement, nice work | 21:47 |
| jaypipes | ttx: hammering on with Tempest tests... now >300 tests. | 21:47 |
| *** littleidea has quit IRC | 21:47 | |
| jaypipes | ttx: still work to do on stabilizing some of the errors that are occurring, but slow and steady progress | 21:47 |
| ttx | jaypipes: how is the Tempest gate job going ? | 21:47 |
| termie | heya, just got back | 21:47 |
| termie | what's the question? just basic status? | 21:47 |
| *** pcrews has left #openstack-meeting | 21:48 | |
| jaypipes | ttx: going well. we understand the cause of all failures and errors. just going through the code reviews now. | 21:48 |
| ttx | termie: yes, in a minute -- will have a few more precise questions that you may or may not be able to answer | 21:48 |
| ttx | jaypipes: doesn't adding new tests make you farther from being able to enable the gate on Tempest ? | 21:48 |
| ttx | i.e. are you running towards a target with half your team busily moving it away from you ? | 21:49 |
| ttx | sounds like we lost Jay | 21:50 |
| ttx | back to our regular programme then... | 21:51 |
| ttx | #topic Keystone status | 21:51 |
| *** openstack changes topic to "Keystone status" | 21:51 | |
| ttx | termie: heya | 21:51 |
| jaypipes | ttx: no, not really... we need to resolve our ongoing "what is a smoke test" debate... | 21:51 |
| jaypipes | ttx: look for an update on the QA status meeting this week. | 21:51 |
| ttx | jaypipes: ok, thanks! | 21:51 |
| ttx | #link https://launchpad.net/keystone/+milestone/folsom-2 | 21:51 |
| ttx | termie: Had a few questions for heckj that you may or may not be able to answer | 21:52 |
| ttx | * https://blueprints.launchpad.net/keystone/+spec/stop-ids-in-uris (Guang Yee) | 21:52 |
| *** s0mik has quit IRC | 21:52 | |
| ttx | Looks like work has stalled, with the review being abandoned ^ | 21:52 |
| *** jakedahn_zz is now known as jakedahn | 21:53 | |
| ttx | hmm, we lost termie | 21:54 |
| * ttx thinks we should just skip Keystone and Horizon for this week. Nothing urgent anyway. | 21:55 | |
| ttx | So without further ado... | 21:55 |
| ttx | #topic Open discussion | 21:55 |
| *** openstack changes topic to "Open discussion" | 21:55 | |
| ttx | Anything newsworthy, anyone ? | 21:55 |
| termie | Keystone: domain feature arguments that i am going to win, signed tokens well under way | 21:56 |
| termie | ... andy back | 21:56 |
| ttx | termie: heh | 21:56 |
| *** dendro-afk is now known as dendrobates | 21:56 | |
| ttx | termie: do you know if the feedback on V3 API is complete ? | 21:56 |
| termie | ttx: it isn't, i've listed a bunch of things but have not heard from heckj | 21:57 |
| termie | (i only added stuff recently, been traveling) | 21:57 |
| termie | so more my fault than his | 21:57 |
| *** s0mik has joined #openstack-meeting | 21:57 | |
| ttx | ok, will follow up next week | 21:57 |
| ttx | termie: my other question was about https://blueprints.launchpad.net/keystone/+spec/stop-ids-in-uris which looks stalled, I guess it's just a matter of pinging Guang Yee | 21:58 |
| ttx | and that can wait next week for an update. | 21:58 |
| ttx | so unless anyone has something to add... | 21:59 |
| termie | i don't see the point of that one, so i suspect it will remain stalled until i do | 21:59 |
| ttx | termie: heckj put it as "essential", which is the only reason why I actually care :) | 21:59 |
| termie | ttx: aye, i'll ask him about it | 22:00 |
| ttx | OK, we are done. See you all on #openstack-bugday on Thursday! | 22:00 |
| ttx | #endmeeting | 22:00 |
| *** openstack changes topic to "OpenStack meeting channel. See http://wiki.openstack.org/Meetings for schedule and http://eavesdrop.openstack.org/meetings/openstack-meeting/ for meeting logs" | 22:00 | |
| openstack | Meeting ended Tue Jun 5 22:00:36 2012 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 22:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-21.02.html | 22:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-21.02.txt | 22:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-06-05-21.02.log.html | 22:00 |
| *** russellb has left #openstack-meeting | 22:00 | |
| *** lzyeval has quit IRC | 22:00 | |
| ttx | Friendly reminder: the netstack/quantum meeting is not now... was moved on Mondays at 21:00 UTC | 22:01 |
| ttx | this was your last show for today. | 22:01 |
| *** ayoung has quit IRC | 22:02 | |
| *** joearnold has quit IRC | 22:06 | |
| *** ywu has joined #openstack-meeting | 22:06 | |
| *** joearnold has joined #openstack-meeting | 22:06 | |
| *** edygarcia has quit IRC | 22:08 | |
| *** edygarcia has joined #openstack-meeting | 22:09 | |
| *** adjohn has quit IRC | 22:10 | |
| *** adjohn has joined #openstack-meeting | 22:11 | |
| *** s0mik has quit IRC | 22:12 | |
| *** somik has joined #openstack-meeting | 22:12 | |
| *** mrmartin has quit IRC | 22:13 | |
| *** sleepsonzzz is now known as sleepsonthefloor | 22:16 | |
| *** milner has quit IRC | 22:20 | |
| *** rnirmal has quit IRC | 22:23 | |
| *** rafaduran has quit IRC | 22:25 | |
| *** ryanpetrello has joined #openstack-meeting | 22:34 | |
| *** nikhil__ has quit IRC | 22:34 | |
| *** jmeredit has quit IRC | 22:35 | |
| *** blamar has quit IRC | 22:42 | |
| *** jgriffith is now known as jgriffith_away | 22:43 | |
| *** bcwaldon has left #openstack-meeting | 22:47 | |
| *** edygarcia has quit IRC | 22:50 | |
| *** mattray has quit IRC | 22:50 | |
| *** anderstj has quit IRC | 22:56 | |
| *** joearnold has quit IRC | 22:58 | |
| *** ryanpetrello has quit IRC | 23:01 | |
| *** edmc has joined #openstack-meeting | 23:17 | |
| *** anderstj has joined #openstack-meeting | 23:17 | |
| *** joearnold has joined #openstack-meeting | 23:18 | |
| *** edmc has left #openstack-meeting | 23:22 | |
| *** ryanpetrello has joined #openstack-meeting | 23:40 | |
| *** joearnold has quit IRC | 23:42 | |
| *** ryanpetrello has quit IRC | 23:45 | |
| *** anderstj has quit IRC | 23:48 | |
| *** jog0 has quit IRC | 23:51 | |
| *** troytoman is now known as troytoman-away | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!