*** markvoelker has joined #openstack-meeting | 00:02 | |
*** markvoelker has quit IRC | 00:06 | |
*** brinzhang has joined #openstack-meeting | 00:31 | |
*** enriquetaso has joined #openstack-meeting | 00:44 | |
*** markvoelker has joined #openstack-meeting | 00:45 | |
*** nitinuikey has joined #openstack-meeting | 00:52 | |
*** ykatabam has quit IRC | 00:55 | |
*** ykatabam has joined #openstack-meeting | 00:56 | |
*** jamesmcarthur has quit IRC | 00:57 | |
*** nitinuikey has quit IRC | 01:06 | |
*** markvoelker has quit IRC | 01:09 | |
*** jamesmcarthur has joined #openstack-meeting | 01:19 | |
*** enriquetaso has quit IRC | 01:23 | |
*** jamesmcarthur has quit IRC | 01:32 | |
*** ykatabam has quit IRC | 01:34 | |
*** yamamoto has joined #openstack-meeting | 01:45 | |
*** cheng1 has quit IRC | 02:00 | |
*** ykatabam has joined #openstack-meeting | 02:00 | |
*** cheng1 has joined #openstack-meeting | 02:01 | |
*** markvoelker has joined #openstack-meeting | 02:01 | |
*** jamesmcarthur has joined #openstack-meeting | 02:03 | |
*** yamamoto has quit IRC | 02:04 | |
*** ykatabam has quit IRC | 02:04 | |
*** yamamoto has joined #openstack-meeting | 02:04 | |
*** markvoelker has quit IRC | 02:06 | |
*** cheng1 has quit IRC | 02:09 | |
*** cheng1 has joined #openstack-meeting | 02:10 | |
*** enriquetaso has joined #openstack-meeting | 02:21 | |
*** cheng1 has quit IRC | 02:32 | |
*** markvoelker has joined #openstack-meeting | 02:32 | |
*** cheng1 has joined #openstack-meeting | 02:34 | |
*** yamamoto has quit IRC | 02:35 | |
*** whoami-rajat has joined #openstack-meeting | 02:38 | |
*** yamamoto has joined #openstack-meeting | 02:38 | |
*** ykatabam has joined #openstack-meeting | 02:39 | |
*** markvoelker has quit IRC | 02:42 | |
*** ricolin has joined #openstack-meeting | 02:51 | |
*** ykatabam has quit IRC | 02:52 | |
*** enriquetaso has quit IRC | 03:07 | |
*** jamesmcarthur has quit IRC | 03:11 | |
*** markvoelker has joined #openstack-meeting | 03:13 | |
*** markvoelker has quit IRC | 03:17 | |
*** psachin has joined #openstack-meeting | 03:29 | |
*** ricolin_ has joined #openstack-meeting | 03:35 | |
*** ricolin has quit IRC | 03:38 | |
*** jamesmcarthur has joined #openstack-meeting | 03:42 | |
*** yaawang has quit IRC | 03:42 | |
*** yaawang has joined #openstack-meeting | 03:43 | |
*** nitinuikey has joined #openstack-meeting | 03:51 | |
*** cheng1 has quit IRC | 04:24 | |
*** cheng1 has joined #openstack-meeting | 04:24 | |
*** markvoelker has joined #openstack-meeting | 04:28 | |
*** Lucas_Gray has joined #openstack-meeting | 04:29 | |
*** jamesmcarthur has quit IRC | 04:30 | |
*** markvoelker has quit IRC | 04:33 | |
*** rubasov has quit IRC | 04:40 | |
*** ekcs has quit IRC | 04:43 | |
*** nitinuikey has quit IRC | 04:57 | |
*** janki has joined #openstack-meeting | 05:02 | |
*** jamesmcarthur has joined #openstack-meeting | 05:04 | |
*** Luzi has joined #openstack-meeting | 05:06 | |
*** yaawang has quit IRC | 05:08 | |
*** ykatabam has joined #openstack-meeting | 05:09 | |
*** yonglihe has quit IRC | 05:10 | |
*** yaawang has joined #openstack-meeting | 05:10 | |
*** vishalmanchanda has joined #openstack-meeting | 05:13 | |
*** boxiang has quit IRC | 05:19 | |
*** boxiang has joined #openstack-meeting | 05:20 | |
*** Lucas_Gray has quit IRC | 05:25 | |
*** yaawang has quit IRC | 05:29 | |
*** yaawang has joined #openstack-meeting | 05:30 | |
*** yaawang has quit IRC | 05:34 | |
*** yaawang has joined #openstack-meeting | 05:35 | |
*** notmyname has quit IRC | 05:40 | |
*** notmyname has joined #openstack-meeting | 05:41 | |
*** kota_ has quit IRC | 05:46 | |
*** yamamoto has quit IRC | 05:47 | |
*** yamamoto has joined #openstack-meeting | 05:48 | |
*** jamesmcarthur has quit IRC | 05:53 | |
*** boxiang has quit IRC | 05:56 | |
*** boxiang has joined #openstack-meeting | 05:57 | |
*** boxiang has quit IRC | 05:58 | |
*** yaawang has quit IRC | 06:15 | |
*** yaawang has joined #openstack-meeting | 06:15 | |
*** hyunsikyang has joined #openstack-meeting | 06:18 | |
*** jamesmcarthur has joined #openstack-meeting | 06:23 | |
*** jamesmcarthur has quit IRC | 06:27 | |
*** ykatabam has quit IRC | 06:29 | |
*** yaawang has quit IRC | 06:32 | |
*** yaawang has joined #openstack-meeting | 06:33 | |
*** ykatabam has joined #openstack-meeting | 06:35 | |
*** kota_ has joined #openstack-meeting | 06:38 | |
*** yaawang has quit IRC | 06:40 | |
*** yaawang has joined #openstack-meeting | 06:41 | |
*** ricolin__ has joined #openstack-meeting | 06:41 | |
*** ricolin__ is now known as ricolin | 06:41 | |
*** ricolin_ has quit IRC | 06:45 | |
*** apetrich has joined #openstack-meeting | 06:48 | |
*** jamesmcarthur has joined #openstack-meeting | 06:49 | |
*** kopecmartin|pto is now known as kopecmartin | 06:51 | |
*** belmoreira has joined #openstack-meeting | 06:51 | |
*** ralonsoh has joined #openstack-meeting | 06:54 | |
*** jamesmcarthur has quit IRC | 06:54 | |
*** rsimai has joined #openstack-meeting | 07:03 | |
*** rcernin has quit IRC | 07:04 | |
*** slaweq has joined #openstack-meeting | 07:04 | |
*** ykatabam has quit IRC | 07:05 | |
*** rubasov has joined #openstack-meeting | 07:05 | |
*** pcaruana has joined #openstack-meeting | 07:08 | |
*** markvoelker has joined #openstack-meeting | 07:17 | |
*** tesseract has joined #openstack-meeting | 07:17 | |
*** markvoelker has quit IRC | 07:51 | |
*** brault has joined #openstack-meeting | 08:03 | |
*** belmoreira has quit IRC | 08:08 | |
*** yonglihe has joined #openstack-meeting | 08:10 | |
*** belmoreira has joined #openstack-meeting | 08:12 | |
*** yamamoto has quit IRC | 08:13 | |
*** hyunsikyang__ has joined #openstack-meeting | 08:16 | |
*** hyunsikyang has quit IRC | 08:19 | |
*** tesseract-RH has joined #openstack-meeting | 08:22 | |
*** tesseract has quit IRC | 08:22 | |
*** Lucas_Gray has joined #openstack-meeting | 08:24 | |
*** tesseract-RH has quit IRC | 08:24 | |
*** tesseract has joined #openstack-meeting | 08:24 | |
*** Lucas_Gray has quit IRC | 08:30 | |
*** ykatabam has joined #openstack-meeting | 08:35 | |
*** tssurya has joined #openstack-meeting | 08:41 | |
*** janki has quit IRC | 08:43 | |
*** e0ne has joined #openstack-meeting | 08:48 | |
*** yamamoto has joined #openstack-meeting | 08:54 | |
*** markvoelker has joined #openstack-meeting | 08:56 | |
*** belmoreira has quit IRC | 09:03 | |
*** yamamoto has quit IRC | 09:09 | |
*** ykatabam has quit IRC | 09:09 | |
*** markvoelker has quit IRC | 09:30 | |
*** Luzi has quit IRC | 09:43 | |
*** yamamoto has joined #openstack-meeting | 09:44 | |
*** janki has joined #openstack-meeting | 09:45 | |
*** dasp has quit IRC | 09:49 | |
*** dasp has joined #openstack-meeting | 09:49 | |
*** belmoreira has joined #openstack-meeting | 09:49 | |
*** Luzi has joined #openstack-meeting | 09:56 | |
*** ociuhandu has joined #openstack-meeting | 10:20 | |
*** janki has quit IRC | 10:27 | |
*** markvoelker has joined #openstack-meeting | 10:38 | |
*** baojg has quit IRC | 10:41 | |
*** markvoelker has quit IRC | 10:43 | |
*** baojg has joined #openstack-meeting | 10:46 | |
*** baojg has quit IRC | 10:50 | |
*** baojg has joined #openstack-meeting | 10:53 | |
*** lseki has joined #openstack-meeting | 11:11 | |
*** brault has quit IRC | 11:11 | |
*** raildo has joined #openstack-meeting | 11:44 | |
*** jamesmcarthur has joined #openstack-meeting | 11:46 | |
*** ociuhandu has quit IRC | 11:49 | |
*** ociuhandu has joined #openstack-meeting | 11:50 | |
*** yamamoto has quit IRC | 11:53 | |
*** markvoelker has joined #openstack-meeting | 11:55 | |
*** dviroel has joined #openstack-meeting | 12:00 | |
*** gibi_off is now known as gibi | 12:01 | |
*** markvoelker has quit IRC | 12:02 | |
*** markvoelker has joined #openstack-meeting | 12:02 | |
*** jamesmcarthur has quit IRC | 12:05 | |
*** tssurya has quit IRC | 12:07 | |
*** tssurya has joined #openstack-meeting | 12:08 | |
*** markvoelker has quit IRC | 12:09 | |
*** markvoelker has joined #openstack-meeting | 12:11 | |
*** ociuhandu has quit IRC | 12:12 | |
*** yamamoto has joined #openstack-meeting | 12:13 | |
*** rfolco has joined #openstack-meeting | 12:16 | |
*** rfolco is now known as rfolco|ruck | 12:16 | |
*** ociuhandu has joined #openstack-meeting | 12:20 | |
*** rubasov has quit IRC | 12:22 | |
*** yamamoto has quit IRC | 12:24 | |
*** raildo has quit IRC | 12:24 | |
*** raildo has joined #openstack-meeting | 12:32 | |
*** jroll has quit IRC | 12:39 | |
*** belmoreira has quit IRC | 12:39 | |
*** jroll has joined #openstack-meeting | 12:39 | |
*** jamesmcarthur has joined #openstack-meeting | 12:41 | |
*** yaawang has quit IRC | 12:43 | |
*** yaawang has joined #openstack-meeting | 12:45 | |
*** priteau has joined #openstack-meeting | 12:45 | |
*** yamamoto has joined #openstack-meeting | 12:48 | |
*** mhen has joined #openstack-meeting | 12:49 | |
*** moguimar has joined #openstack-meeting | 12:50 | |
*** priteau has quit IRC | 12:54 | |
*** belmoreira has joined #openstack-meeting | 12:59 | |
Luzi | #startmeeting image_encryption | 13:00 |
---|---|---|
openstack | Meeting started Mon Aug 5 13:00:45 2019 UTC and is due to finish in 60 minutes. The chair is Luzi. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
*** openstack changes topic to " (Meeting topic: image_encryption)" | 13:00 | |
openstack | The meeting name has been set to 'image_encryption' | 13:00 |
Luzi | #topic Roll Call | 13:01 |
moguimar | o/ | 13:01 |
*** openstack changes topic to "Roll Call (Meeting topic: image_encryption)" | 13:01 | |
mhen | o/ | 13:01 |
fungi | aloha | 13:01 |
redrobot | \o | 13:01 |
*** jamesmcarthur has quit IRC | 13:04 | |
Luzi | #topic Barbican Consumer API Update | 13:04 |
*** openstack changes topic to "Barbican Consumer API Update (Meeting topic: image_encryption)" | 13:04 | |
Luzi | I've seen moguimar working on it :) | 13:05 |
moguimar | yup | 13:05 |
moguimar | https://review.opendev.org/#/c/674302/ | 13:05 |
moguimar | just started scratching barbican and the spec | 13:05 |
moguimar | will work a bit more on it after the meeting | 13:05 |
moguimar | and tomorrow is my biggest fish to fry | 13:06 |
moguimar | it is* | 13:06 |
redrobot | I'll also be working on getting client side support on openstacksdk | 13:08 |
Luzi | wow, thats something efried would like to hear I think :D | 13:08 |
redrobot | We've noted the Nova spec for openstacksdk | 13:08 |
redrobot | #link https://blueprints.launchpad.net/nova/+spec/openstacksdk-in-nova | 13:08 |
efried | o/ Sorry I'm late | 13:08 |
Luzi | so only good news from Barbican side :D | 13:09 |
redrobot | On the agenda for tomorrow we'll talk about possibly deprecating python-barbicanclient in favor of openstacksdk | 13:09 |
efried | +1000 | 13:09 |
redrobot | as we would prefer not to maintain 3 clients. | 13:09 |
efried | Let me know if you need help with that strategy | 13:09 |
efried | I know zip about barbican btw | 13:09 |
redrobot | thanks efried | 13:09 |
efried | but I know about deprecating python-*client in favor of sdk | 13:09 |
fungi | as a user i know that i like being able to use one client to interact with services, rather than potentially dozens ;) | 13:10 |
fungi | (client/library that is) | 13:11 |
redrobot | cool. After the team discussion in our weekly meeting tomorrow I'll send something to the ML to figure out timelines for deprecating python-barbicanclient | 13:11 |
Luzi | #topic Image Encryption Specs | 13:12 |
*** openstack changes topic to "Image Encryption Specs (Meeting topic: image_encryption)" | 13:12 | |
Luzi | we have a topic from cinder side | 13:12 |
*** yaawang has quit IRC | 13:13 | |
Luzi | jungleboyj or hemna_ is one of you here? | 13:13 |
*** yaawang has joined #openstack-meeting | 13:13 | |
*** Lucas_Gray has joined #openstack-meeting | 13:14 | |
*** mriedem has joined #openstack-meeting | 13:14 | |
Luzi | otherwise I would start with a little problem which we encountered in the nova spec | 13:14 |
efried | While we're waiting for them... | 13:14 |
efried | In the nova meeting last week, it was decided that dansmith gets to cast the deciding vote as to whether to grant a freeze exception for | 13:14 |
efried | #link nova side of image encryption https://review.opendev.org/608696 | 13:14 |
efried | dansmith returns from vacation today, so he'll have a pile of catchup to do. He's US Pacific time. | 13:14 |
Luzi | it is about the scheduling on libvirt hosts only and our originally proposed metadata "image_key_id" | 13:15 |
*** enriquetaso has joined #openstack-meeting | 13:15 | |
*** jamesmcarthur has joined #openstack-meeting | 13:15 | |
Luzi | the point is that we wanted to allow anyone to just set a "image_key_id" to a server and use it to encrypt any images that are created from the server | 13:16 |
Luzi | but: then it would be possible to set that metadata on a server which is on a host which does not support image encryption | 13:17 |
efried | #link relevant Nova meeting logs http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-08-01-21.00.log.html#l-59 | 13:17 |
Luzi | in that case the driver will just ignore that metadata and create an unencrypted image, which is bad user experience | 13:17 |
Luzi | mhen and i discussed that it would be the best option for now to make "image_key_id" immutable. So that is just can be set in the server create step. | 13:19 |
Luzi | in a future task, an appropriate validation could be introduced, when setting this metadata | 13:22 |
Luzi | what do you think about this? | 13:22 |
efried | If there's no way to do that validation when attempting to set the value, then I guess that's fine | 13:24 |
Luzi | efried, okay, I will add this to the spec | 13:27 |
Luzi | from cinder we got the request for some clarification around the changes to os_brick, which would be nearly the same as the abandoned oslo spec | 13:30 |
Luzi | #link https://review.opendev.org/#/c/618754/ | 13:30 |
*** rosmaita has joined #openstack-meeting | 13:30 | |
Luzi | i will add this as a patch to the cinder spec as requested | 13:31 |
rosmaita | apologies for being late | 13:32 |
rosmaita | ChangeMe | 13:32 |
*** ociuhandu has quit IRC | 13:32 | |
rosmaita | i's only a VM | 13:32 |
rosmaita | guess this is too early for me | 13:32 |
Luzi | rosmaita, I just mentioned, that the changed in os_brick will be nearly the same as we proposed in the abandoned olso spec | 13:34 |
Luzi | see link above | 13:34 |
rosmaita | ok, great | 13:34 |
Luzi | last topic from my side: i will be on vacation for the next two weeks, meanwhile mhen will be the one chairing the meeting and answering questions :) | 13:35 |
mhen | will try my best | 13:35 |
Luzi | #topic Open Discussion | 13:36 |
*** openstack changes topic to "Open Discussion (Meeting topic: image_encryption)" | 13:36 | |
Luzi | are there any other questions? | 13:36 |
fungi | sounds like great progress--thanks for working on this! | 13:38 |
*** jbadiapa has joined #openstack-meeting | 13:39 | |
Luzi | okay, thank you all for attending this meeting :) | 13:39 |
Luzi | #endmeeting image_encryption | 13:39 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 13:39 | |
openstack | Meeting ended Mon Aug 5 13:39:52 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:39 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/image_encryption/2019/image_encryption.2019-08-05-13.00.html | 13:39 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/image_encryption/2019/image_encryption.2019-08-05-13.00.txt | 13:39 |
openstack | Log: http://eavesdrop.openstack.org/meetings/image_encryption/2019/image_encryption.2019-08-05-13.00.log.html | 13:39 |
*** jbadiapa has quit IRC | 13:44 | |
*** Luzi has quit IRC | 13:46 | |
*** pcaruana has quit IRC | 13:47 | |
*** yamamoto has quit IRC | 13:58 | |
*** AlanClark has joined #openstack-meeting | 14:00 | |
*** pcaruana has joined #openstack-meeting | 14:00 | |
*** belmoreira has quit IRC | 14:02 | |
*** belmoreira has joined #openstack-meeting | 14:03 | |
*** yamamoto has joined #openstack-meeting | 14:08 | |
*** ociuhandu has joined #openstack-meeting | 14:19 | |
*** eharney has joined #openstack-meeting | 14:20 | |
*** Lucas_Gray has quit IRC | 14:20 | |
*** Lucas_Gray has joined #openstack-meeting | 14:22 | |
*** _erlon_ has joined #openstack-meeting | 14:23 | |
*** mriedem has quit IRC | 14:29 | |
*** rosmaita has left #openstack-meeting | 14:29 | |
*** mriedem has joined #openstack-meeting | 14:29 | |
*** yamamoto has quit IRC | 14:31 | |
*** yamamoto has joined #openstack-meeting | 14:32 | |
*** boxiang has joined #openstack-meeting | 14:35 | |
*** boxiang has quit IRC | 14:36 | |
*** yamamoto has quit IRC | 14:37 | |
*** rubasov has joined #openstack-meeting | 14:38 | |
*** boxiang has joined #openstack-meeting | 14:40 | |
*** belmoreira has quit IRC | 14:48 | |
*** brault has joined #openstack-meeting | 14:50 | |
*** belmoreira has joined #openstack-meeting | 14:51 | |
*** Lucas_Gray has quit IRC | 14:54 | |
*** brault has quit IRC | 14:55 | |
*** bnemec-pto is now known as bnemec | 15:01 | |
*** Lucas_Gray has joined #openstack-meeting | 15:07 | |
*** yamamoto has joined #openstack-meeting | 15:19 | |
*** yamamoto has quit IRC | 15:25 | |
*** ralonsoh has quit IRC | 15:29 | |
*** ociuhandu has quit IRC | 15:40 | |
*** ociuhandu has joined #openstack-meeting | 15:40 | |
*** ociuhandu has quit IRC | 15:41 | |
*** ociuhandu has joined #openstack-meeting | 15:42 | |
*** ociuhandu has quit IRC | 15:43 | |
*** ociuhandu has joined #openstack-meeting | 15:43 | |
*** ociuhandu has quit IRC | 15:43 | |
*** enriquetaso has quit IRC | 15:43 | |
*** ociuhandu has joined #openstack-meeting | 15:45 | |
*** ociuhandu has quit IRC | 15:45 | |
*** ociuhandu has joined #openstack-meeting | 15:45 | |
*** gyee has joined #openstack-meeting | 15:48 | |
*** Lucas_Gray has quit IRC | 15:51 | |
*** belmoreira has quit IRC | 15:52 | |
*** belmoreira has joined #openstack-meeting | 16:02 | |
*** belmoreira has quit IRC | 16:03 | |
*** tesseract has quit IRC | 16:04 | |
*** ociuhandu_ has joined #openstack-meeting | 16:04 | |
*** ociuhandu has quit IRC | 16:07 | |
*** lpetrut has joined #openstack-meeting | 16:09 | |
*** e0ne has quit IRC | 16:19 | |
*** ociuhandu_ has quit IRC | 16:33 | |
*** ociuhandu has joined #openstack-meeting | 16:33 | |
*** mattw4 has joined #openstack-meeting | 16:34 | |
*** enriquetaso has joined #openstack-meeting | 16:34 | |
*** mattw4 has quit IRC | 16:37 | |
*** mattw4 has joined #openstack-meeting | 16:39 | |
*** jamesmcarthur has quit IRC | 16:39 | |
*** raildo has quit IRC | 16:40 | |
*** ociuhandu has quit IRC | 16:45 | |
*** diablo_rojo has joined #openstack-meeting | 16:47 | |
*** raildo has joined #openstack-meeting | 16:48 | |
*** markvoelker has quit IRC | 16:49 | |
*** ociuhandu has joined #openstack-meeting | 16:50 | |
*** jamesmcarthur has joined #openstack-meeting | 16:54 | |
*** carloss has joined #openstack-meeting | 16:56 | |
*** ricolin has quit IRC | 16:57 | |
*** kopecmartin is now known as kopecmartin|off | 16:59 | |
*** markvoelker has joined #openstack-meeting | 17:01 | |
*** jamesmcarthur has quit IRC | 17:07 | |
*** jamesmcarthur has joined #openstack-meeting | 17:12 | |
*** ekcs has joined #openstack-meeting | 17:18 | |
*** psachin has quit IRC | 17:28 | |
*** ociuhandu has quit IRC | 17:28 | |
*** ociuhandu has joined #openstack-meeting | 17:29 | |
*** ociuhandu has quit IRC | 17:31 | |
*** ociuhandu has joined #openstack-meeting | 17:31 | |
*** jamesmcarthur has quit IRC | 17:32 | |
*** tssurya has quit IRC | 17:34 | |
*** ociuhandu has quit IRC | 17:35 | |
*** jamesmcarthur has joined #openstack-meeting | 17:37 | |
*** jamesmcarthur_ has joined #openstack-meeting | 17:39 | |
*** jamesmcarthur has quit IRC | 17:41 | |
*** jamesmcarthur has joined #openstack-meeting | 17:42 | |
*** jamesmcarthur_ has quit IRC | 17:43 | |
*** jamesmcarthur has quit IRC | 17:48 | |
*** jamesmcarthur has joined #openstack-meeting | 17:53 | |
*** jamesmcarthur_ has joined #openstack-meeting | 18:03 | |
*** e0ne has joined #openstack-meeting | 18:05 | |
*** jamesmcarthur has quit IRC | 18:06 | |
*** jamesmcarthur has joined #openstack-meeting | 18:13 | |
*** jamesmcarthur_ has quit IRC | 18:14 | |
*** dviroel has quit IRC | 18:16 | |
*** jamesmcarthur_ has joined #openstack-meeting | 18:24 | |
*** jamesmcarthur has quit IRC | 18:26 | |
*** AlanClark has quit IRC | 18:27 | |
*** jamesmcarthur has joined #openstack-meeting | 18:28 | |
*** jamesmcarthur_ has quit IRC | 18:30 | |
*** AlanClark has joined #openstack-meeting | 18:33 | |
*** jamesmcarthur_ has joined #openstack-meeting | 18:34 | |
*** jamesmca_ has joined #openstack-meeting | 18:36 | |
*** jamesmcarthur has quit IRC | 18:36 | |
*** jamesmcarthur_ has quit IRC | 18:39 | |
*** jamesmca_ has quit IRC | 18:41 | |
*** e0ne has quit IRC | 18:45 | |
*** jamesmcarthur has joined #openstack-meeting | 18:46 | |
*** jamesmcarthur_ has joined #openstack-meeting | 18:48 | |
*** jamesmcarthur has quit IRC | 18:50 | |
*** jamesmcarthur has joined #openstack-meeting | 18:53 | |
*** jamesmcarthur_ has quit IRC | 18:55 | |
*** jamesmcarthur has quit IRC | 19:01 | |
*** jamesmcarthur_ has joined #openstack-meeting | 19:01 | |
*** lpetrut has quit IRC | 19:05 | |
*** jamesmcarthur_ has quit IRC | 19:06 | |
*** igordc has joined #openstack-meeting | 19:08 | |
*** jamesmcarthur has joined #openstack-meeting | 19:12 | |
*** e0ne has joined #openstack-meeting | 19:16 | |
*** jamesmcarthur has quit IRC | 19:17 | |
*** jamesmcarthur has joined #openstack-meeting | 19:19 | |
*** carloss has quit IRC | 19:23 | |
*** jamesmcarthur has quit IRC | 19:24 | |
*** diablo_rojo has quit IRC | 19:25 | |
*** jamesmcarthur has joined #openstack-meeting | 19:31 | |
*** e0ne has quit IRC | 19:31 | |
*** jamesmcarthur_ has joined #openstack-meeting | 19:36 | |
*** jamesmcarthur has quit IRC | 19:37 | |
*** jamesmcarthur has joined #openstack-meeting | 19:38 | |
*** jamesmcarthur_ has quit IRC | 19:40 | |
*** rubasov has quit IRC | 19:47 | |
*** jamesmcarthur has quit IRC | 19:48 | |
*** yamahata has joined #openstack-meeting | 19:53 | |
*** jamesmcarthur has joined #openstack-meeting | 20:27 | |
*** ykatabam has joined #openstack-meeting | 20:42 | |
*** jamesmcarthur has quit IRC | 20:47 | |
*** jamesmcarthur has joined #openstack-meeting | 20:48 | |
*** jamesmcarthur has quit IRC | 20:48 | |
*** jamesmcarthur has joined #openstack-meeting | 20:48 | |
*** mlavalle has joined #openstack-meeting | 21:00 | |
mlavalle | #startmeeting networking | 21:00 |
openstack | Meeting started Mon Aug 5 21:00:09 2019 UTC and is due to finish in 60 minutes. The chair is mlavalle. Information about MeetBot at http://wiki.debian.org/MeetBot. | 21:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 21:00 |
*** openstack changes topic to " (Meeting topic: networking)" | 21:00 | |
openstack | The meeting name has been set to 'networking' | 21:00 |
slaweq | hi | 21:00 |
haleyb | hi | 21:01 |
mlavalle | slow Monday? | 21:01 |
tidwellr | hi | 21:01 |
mlavalle | ok, let's get going | 21:02 |
mlavalle | #topic Announcements | 21:03 |
*** openstack changes topic to "Announcements (Meeting topic: networking)" | 21:03 | |
*** vishalmanchanda has quit IRC | 21:03 | |
mlavalle | The next milestone is Train-3 on the week of September 9th | 21:03 |
mlavalle | so that's a liuttle bit more than a month | 21:03 |
mlavalle | from today | 21:03 |
mlavalle | Yesterday I nominated ralonsoh to join the Neutron core team: http://lists.openstack.org/pipermail/openstack-discuss/2019-August/008225.html | 21:04 |
*** mattw4 has quit IRC | 21:04 | |
mlavalle | Most of you have provided positive feedback | 21:04 |
*** mattw4 has joined #openstack-meeting | 21:04 | |
mlavalle | the nomination will be open all this week | 21:05 |
mlavalle | This week is the last one to enter your name in the Shanghai PTG planning etherpad, if you are planning to attend: https://etherpad.openstack.org/p/Shanghai-Neutron-Planning | 21:06 |
*** diablo_rojo has joined #openstack-meeting | 21:06 | |
mlavalle | by the end of the week I will use the number of people registered to estimate how many people will attend out PTG | 21:06 |
mlavalle | any other announcements? | 21:07 |
slaweq | not too many so far on the list :/ | 21:07 |
*** eharney has quit IRC | 21:07 | |
mlavalle | ok, let's move on | 21:08 |
mlavalle | #topic Blueprints | 21:09 |
*** openstack changes topic to "Blueprints (Meeting topic: networking)" | 21:09 | |
mlavalle | These are the blueprints that we are tracking for T-3 https://etherpad.openstack.org/p/Shanghai-Neutron-Planning | 21:09 |
mlavalle | #undo | 21:09 |
openstack | Removing item from minutes: #topic Blueprints | 21:09 |
mlavalle | #topic Blueprints | 21:09 |
*** openstack changes topic to "Blueprints (Meeting topic: networking)" | 21:09 | |
*** ircuser-1 has quit IRC | 21:10 | |
mlavalle | These are the blueprints we are tracking for T-3: https://launchpad.net/neutron/+milestone/train-3 | 21:10 |
mlavalle | any updates? | 21:10 |
slaweq | this one https://blueprints.launchpad.net/neutron/+spec/subnets-different-pools-same-net looks for me like done, but maybe tidwellr has something more related to it which isn't linked there | 21:11 |
tidwellr | that one is done | 21:11 |
slaweq | thx tidwellr for confirmation :) | 21:12 |
mlavalle | ok, updated in Launchpad | 21:12 |
mlavalle | thanks tidwellr for this implementation | 21:12 |
tidwellr | np | 21:13 |
mlavalle | ok, let's move on | 21:14 |
mlavalle | #topic Community Goals | 21:14 |
*** openstack changes topic to "Community Goals (Meeting topic: networking)" | 21:14 | |
mlavalle | any updates on community goals? | 21:14 |
mlavalle | ok, let's move on then | 21:16 |
slaweq | nothing new from me | 21:16 |
mlavalle | #topic Bugs | 21:16 |
*** openstack changes topic to "Bugs (Meeting topic: networking)" | 21:17 | |
mlavalle | Our deputy this week was haleyb | 21:17 |
mlavalle | and here's his report http://lists.openstack.org/pipermail/openstack-discuss/2019-August/008258.html | 21:17 |
haleyb | there were a few in the DVR/L3 space which we can handle in that meeting | 21:18 |
mlavalle | ok | 21:18 |
*** jamesmcarthur has quit IRC | 21:18 | |
haleyb | there were a couple others that needed owners, let me link | 21:18 |
haleyb | https://bugs.launchpad.net/neutron/+bug/1838431 | 21:18 |
openstack | Launchpad bug 1838431 in neutron "[scale issue] ovs-agent port processing time increases linearly and eventually timeouts" [Medium,Confirmed] | 21:18 |
*** mriedem has quit IRC | 21:19 | |
haleyb | liu had filed it, perhaps he can pick up | 21:19 |
*** jamesmcarthur has joined #openstack-meeting | 21:20 | |
mlavalle | if he doesn't< i will take it | 21:20 |
haleyb | ack | 21:20 |
mlavalle | kind of matches what we are doing in the performance sub-team | 21:20 |
mlavalle | I already left him a question in the bug | 21:20 |
slaweq | I just wrote a comment there too | 21:20 |
haleyb | https://bugs.launchpad.net/neutron/+bug/1838431 was the second one | 21:21 |
openstack | Launchpad bug 1838431 in neutron "[scale issue] ovs-agent port processing time increases linearly and eventually timeouts" [Medium,Confirmed] | 21:21 |
slaweq | it looks for me like "well known" problem with remote_security_group_id in SG | 21:21 |
*** mriedem has joined #openstack-meeting | 21:21 | |
haleyb | i could not reproduce one of the issues in ^^, and have asked what release it is. there might be a missing notification, or some missing information when a port delete happens and a floating ip is associated | 21:22 |
slaweq | haleyb: You pasted same link twice | 21:22 |
haleyb | sigh | 21:22 |
haleyb | https://bugs.launchpad.net/neutron/+bug/1838403 | 21:22 |
openstack | Launchpad bug 1838403 in neutron "Asymmetric floating IP notifications" [Medium,New] | 21:22 |
haleyb | that's better | 21:22 |
slaweq | thx :) | 21:23 |
*** yamamoto has joined #openstack-meeting | 21:23 | |
haleyb | i can pick-up based on his response, have not confirmed the notification message on master | 21:24 |
mlavalle | thanks haleyb | 21:24 |
*** jamesmcarthur has quit IRC | 21:25 | |
haleyb | and one more that slaweq filed | 21:25 |
haleyb | https://bugs.launchpad.net/neutron/+bug/1838760 | 21:25 |
openstack | Launchpad bug 1838760 in neutron "Security groups don't work for trunk ports with iptables_hybrid fw driver" [High,Confirmed] | 21:25 |
tidwellr | hmm | 21:25 |
tidwellr | is it not documented that configuration doesn't work? | 21:26 |
slaweq | tidwellr: I don't think so | 21:26 |
tidwellr | I helped early on with some of that implementation, and we were definitely aware that the iptables_hybrid driver would not work | 21:26 |
mlavalle | a gap in the docs then? | 21:27 |
slaweq | tidwellr: and there is even test https://github.com/openstack/neutron-tempest-plugin/blob/master/neutron_tempest_plugin/scenario/test_trunk.py#L275 which is checking if such connectivity is in fact blocked | 21:27 |
*** yamamoto has quit IRC | 21:28 | |
slaweq | tidwellr: mlavalle so maybe I just didn't look for such info in docs because I assumed that if something is in tests, it should works | 21:28 |
*** mattw4 has quit IRC | 21:28 | |
tidwellr | I think this may be a long-standing gap in docs, we initially only supported the OVS firewall driver | 21:28 |
haleyb | is it this sentence? "Security rules via iptables | 21:29 |
haleyb | rules is obviously not supported, and never will be." | 21:29 |
*** mattw4 has joined #openstack-meeting | 21:29 | |
*** markvoelker has quit IRC | 21:29 | |
haleyb | contributor/internals/openvswitch_agent.rst | 21:29 |
slaweq | haleyb: ha, so it's just matter of test bug than :) | 21:29 |
haleyb | that seems more the spec/implementation though | 21:30 |
tidwellr | how many users are going to read that? :) | 21:30 |
mlavalle | so the bug is really a doc gap | 21:31 |
haleyb | someone would have to confirm that wasn't just a case of my finding a good sentence with 'iptables' in it :) | 21:31 |
slaweq | mlavalle: and test bug | 21:31 |
tidwellr | haleyb: no, your right. That is in line with what I recall working on the initial implementation of trunk ports | 21:31 |
mlavalle | but the test should be there for the ovs fw driver, right? | 21:32 |
*** mattw4 has quit IRC | 21:32 | |
slaweq | mlavalle: this is tempest test and it can be run on deployment with any driver configured | 21:32 |
slaweq | so we should probably skip at least this part if there is not supported fw driver used on L2 agents | 21:33 |
tidwellr | mlavalle: trunk tests that check connectivity should be run with the OVS firewall driver | 21:33 |
mlavalle | I think we are all saying the same thing | 21:33 |
haleyb | admin/config-trunking.rst maybe needs the update then, it doesn't mention iptables, and is vague with "If the native OVS | 21:33 |
haleyb | firewall driver is to be used, we recommend that the MAC address of the parent | 21:33 |
haleyb | port be re-used on all subports." | 21:33 |
tidwellr | it would be nice if it were a little more "in your face" that this is an unsupported configuration..... | 21:34 |
slaweq | in this document there is even "Limitations" section https://docs.openstack.org/neutron/latest/admin/config-trunking.html#limitations-and-issues | 21:35 |
slaweq | so IMO it should be mentioned there | 21:35 |
tidwellr | ie fail the port binding or something | 21:35 |
slaweq | tidwellr: so are You saying that there should be an binding error when trying to bind trunk subport with configured SG when agent is using iptables_hybrid fw driver? | 21:36 |
*** mattw4 has joined #openstack-meeting | 21:37 | |
tidwellr | slaweq: something along those lines, just thinking out loud about ways to really make it obvious this isn't supported | 21:37 |
slaweq | tidwellr: ok, understood | 21:38 |
slaweq | so IMO plan for this one would be: | 21:38 |
slaweq | 1. update docs to write this info in more visible place(s) also, | 21:38 |
slaweq | 2. fix tempest test to not run this part (or this test) on unsupported configuration, | 21:39 |
slaweq | 3. Try to do some more "in Your face" change as tidwellr proposed | 21:39 |
slaweq | do You agree? | 21:39 |
mlavalle | yes | 21:39 |
tidwellr | +1 | 21:39 |
slaweq | thx, I will update bug with this plan and will take care of it | 21:40 |
mlavalle | cool | 21:40 |
mlavalle | The bugs deputy this week is amotoki | 21:40 |
slaweq | and I will also reduce importance of this bug as it's not high anymore IMO | 21:40 |
mlavalle | and next week it will be tidwellr's turn | 21:41 |
mlavalle | anything else on bugs? | 21:41 |
haleyb | not from me | 21:41 |
mlavalle | moving on | 21:41 |
mlavalle | #topic neutron-lib | 21:41 |
*** openstack changes topic to "neutron-lib (Meeting topic: networking)" | 21:41 | |
mlavalle | I think boden is off this week | 21:42 |
mlavalle | he is moving his family to Idaho, IIRC | 21:42 |
mlavalle | anything to say about neutron-lib? | 21:43 |
slaweq | there is one topic proposed by bcafarel | 21:43 |
mlavalle | I know | 21:43 |
slaweq | it's related to neutron-lib so I'm just saying :) | 21:43 |
mlavalle | let's move to open agenda | 21:44 |
mlavalle | #topic On-demand agenda | 21:44 |
*** openstack changes topic to "On-demand agenda (Meeting topic: networking)" | 21:44 | |
mlavalle | so bcafarel asked whether we should do neutron-lib backports? | 21:45 |
mlavalle | I haven't seen a strong need to do it, but in specifc cases, like the one mentioned in the topic, I don't see why not | 21:46 |
mlavalle | what do others think? | 21:46 |
slaweq | I'm now looking at neutron-lib tags | 21:46 |
slaweq | and it looks that we did something like that in the past | 21:46 |
slaweq | we have 1.9.0 1.9.1 and 1.9.2 | 21:46 |
slaweq | it is in Pike deliverables directory in releases repo | 21:47 |
slaweq | so IMO it shouldn't be any problem to do that | 21:47 |
mlavalle | yeah, that's what I think | 21:47 |
mlavalle | maybe we don't need to do it regularly, but when it is needed, let's do it | 21:48 |
slaweq | +! | 21:48 |
slaweq | +1 | 21:48 |
tidwellr | +1 | 21:48 |
slaweq | but we should be very careful with what we are backporting | 21:48 |
*** jamesmcarthur has joined #openstack-meeting | 21:49 | |
mlavalle | we should always be careful backporting... | 21:49 |
slaweq | I don't know even what CI jobs will be run for stable branches in neutron-lib | 21:49 |
slaweq | ok, it looks that we have at least tempest-full run on such patches: https://review.opendev.org/#/c/672165/ :) | 21:51 |
slaweq | and tempest-full-py3 | 21:51 |
slaweq | so it's not bad :) | 21:51 |
mlavalle | still, let's keep it limited | 21:52 |
slaweq | I agree | 21:52 |
mlavalle | ok | 21:53 |
mlavalle | anything else to discuss today? | 21:53 |
slaweq | just one short heads-up | 21:54 |
slaweq | patch https://review.opendev.org/#/c/666409/ was merged today | 21:54 |
slaweq | so we removed "gateway_external_network_id" config option from neutron | 21:54 |
slaweq | I hope it will not break anything as haleyb expects :P but if You will find anything which may be related, just be aware of this patch :) | 21:55 |
mlavalle | good heads up | 21:55 |
mlavalle | thanks! | 21:55 |
*** jamesmcarthur has quit IRC | 21:55 | |
mlavalle | anything else? | 21:56 |
slaweq | not from me | 21:56 |
mlavalle | ok, have a great week! | 21:56 |
mlavalle | thanks for attending | 21:56 |
mlavalle | #endmeeting | 21:57 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 21:57 | |
openstack | Meeting ended Mon Aug 5 21:57:08 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 21:57 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/networking/2019/networking.2019-08-05-21.00.html | 21:57 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/networking/2019/networking.2019-08-05-21.00.txt | 21:57 |
slaweq | o/ | 21:57 |
openstack | Log: http://eavesdrop.openstack.org/meetings/networking/2019/networking.2019-08-05-21.00.log.html | 21:57 |
slaweq | Good night! | 21:57 |
tidwellr | o/ | 21:57 |
*** mlavalle has left #openstack-meeting | 21:57 | |
*** whoami-rajat has quit IRC | 21:58 | |
*** mattw4 has quit IRC | 22:02 | |
*** mattw4 has joined #openstack-meeting | 22:03 | |
*** rcernin has joined #openstack-meeting | 22:06 | |
*** diablo_rojo has quit IRC | 22:28 | |
*** diablo_rojo has joined #openstack-meeting | 22:29 | |
*** markvoelker has joined #openstack-meeting | 22:46 | |
*** jamesmcarthur has joined #openstack-meeting | 22:48 | |
*** AlanClark has quit IRC | 22:56 | |
*** diablo_rojo has quit IRC | 23:03 | |
*** mattw4 has quit IRC | 23:06 | |
*** mattw4 has joined #openstack-meeting | 23:06 | |
*** markvoelker has quit IRC | 23:20 | |
*** enriquetaso has quit IRC | 23:23 | |
*** lseki has quit IRC | 23:38 | |
*** enriquetaso has joined #openstack-meeting | 23:52 | |
*** artom has joined #openstack-meeting | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!