| *** gyee has quit IRC | 00:07 | |
| *** yasufum has joined #openstack-meeting | 00:32 | |
| *** yasufum_ has joined #openstack-meeting | 00:36 | |
| *** yasufum has quit IRC | 00:36 | |
| *** yasufum_ is now known as yasufum | 00:36 | |
| *** yamamoto has joined #openstack-meeting | 00:40 | |
| *** yaawang_ has joined #openstack-meeting | 00:45 | |
| *** rfolco has quit IRC | 00:53 | |
| *** ricolin has joined #openstack-meeting | 00:55 | |
| *** ricolin has quit IRC | 00:59 | |
| *** andrebeltrami has quit IRC | 01:21 | |
| *** yamamoto has quit IRC | 01:25 | |
| *** markvoelker has joined #openstack-meeting | 01:39 | |
| *** markvoelker has quit IRC | 01:44 | |
| *** diurnalist has joined #openstack-meeting | 02:10 | |
| *** yamamoto has joined #openstack-meeting | 02:23 | |
| *** diurnalist has quit IRC | 02:44 | |
| *** diurnalist has joined #openstack-meeting | 02:51 | |
| *** diurnalist has quit IRC | 02:56 | |
| *** diurnalist has joined #openstack-meeting | 02:57 | |
| *** diurnalist has quit IRC | 03:02 | |
| *** diurnalist has joined #openstack-meeting | 03:06 | |
| *** diurnalist has quit IRC | 03:12 | |
| *** rcernin has quit IRC | 03:14 | |
| *** jmasud has joined #openstack-meeting | 03:14 | |
| *** diurnalist has joined #openstack-meeting | 03:15 | |
| *** diablo_rojo has quit IRC | 03:15 | |
| *** rcernin has joined #openstack-meeting | 03:17 | |
| *** diurnalist has quit IRC | 03:20 | |
| *** rcernin has quit IRC | 03:24 | |
| *** rcernin has joined #openstack-meeting | 03:31 | |
| *** psachin has joined #openstack-meeting | 03:34 | |
| *** markvoelker has joined #openstack-meeting | 03:40 | |
| *** rcernin has quit IRC | 03:45 | |
| *** rcernin has joined #openstack-meeting | 03:49 | |
| *** markvoelker has quit IRC | 03:50 | |
| *** rcernin has quit IRC | 03:56 | |
| *** yasufum_ has joined #openstack-meeting | 04:01 | |
| *** yasufum has quit IRC | 04:03 | |
| *** yasufum_ is now known as yasufum | 04:03 | |
| *** rcernin has joined #openstack-meeting | 04:05 | |
| *** rh-jelabarre has quit IRC | 04:23 | |
| *** evrardjp has quit IRC | 04:34 | |
| *** evrardjp has joined #openstack-meeting | 04:34 | |
| *** lhinds|out has joined #openstack-meeting | 04:41 | |
| *** lhinds has quit IRC | 04:44 | |
| *** yasufum_ has joined #openstack-meeting | 05:12 | |
| *** yasufum has quit IRC | 05:12 | |
| *** yasufum_ is now known as yasufum | 05:12 | |
| *** links has joined #openstack-meeting | 05:32 | |
| *** ricolin has joined #openstack-meeting | 05:47 | |
| *** dklyle has quit IRC | 05:50 | |
| *** links has quit IRC | 05:50 | |
| *** links has joined #openstack-meeting | 05:59 | |
| *** jiaopengju1 has quit IRC | 06:05 | |
| *** jiaopengju1 has joined #openstack-meeting | 06:05 | |
| *** hyunsikyang has joined #openstack-meeting | 06:11 | |
| *** hyunsikyang__ has quit IRC | 06:14 | |
| *** rpittau|afk is now known as rpittau | 06:20 | |
| *** gibi_off is now known as gibi | 06:55 | |
| *** ralonsoh has joined #openstack-meeting | 07:17 | |
| *** slaweq has joined #openstack-meeting | 07:27 | |
| *** afazekas has joined #openstack-meeting | 07:57 | |
| *** e0ne has joined #openstack-meeting | 07:59 | |
| *** ociuhandu has quit IRC | 08:05 | |
| *** ricolin has quit IRC | 08:13 | |
| *** rcernin has quit IRC | 08:17 | |
| *** corvus has quit IRC | 08:17 | |
| *** corvus has joined #openstack-meeting | 08:30 | |
| *** sluna has quit IRC | 08:31 | |
| *** sluna has joined #openstack-meeting | 08:31 | |
| *** browny has quit IRC | 08:33 | |
| *** jawad_ax_ has joined #openstack-meeting | 08:35 | |
| *** jawad_axd has quit IRC | 08:39 | |
| *** ricolin has joined #openstack-meeting | 08:43 | |
| *** ociuhandu has joined #openstack-meeting | 08:57 | |
| *** Lucas_Gray has joined #openstack-meeting | 09:00 | |
| *** Lucas_Gray has quit IRC | 09:06 | |
| *** Lucas_Gray has joined #openstack-meeting | 09:08 | |
| *** tetsuro has quit IRC | 09:13 | |
| *** Lucas_Gray has quit IRC | 09:13 | |
| *** Lucas_Gray has joined #openstack-meeting | 09:15 | |
| *** Wryhder has joined #openstack-meeting | 09:51 | |
| *** Lucas_Gray has quit IRC | 09:52 | |
| *** Wryhder is now known as Lucas_Gray | 09:52 | |
| *** rpittau is now known as rpittau|bbl | 10:20 | |
| *** ricolin has quit IRC | 10:26 | |
| *** ttsiouts has joined #openstack-meeting | 10:41 | |
| *** jmasud has quit IRC | 10:44 | |
| *** jmasud has joined #openstack-meeting | 10:46 | |
| *** yasufum has quit IRC | 11:11 | |
| *** raildo has joined #openstack-meeting | 11:39 | |
| *** rh-jelabarre has joined #openstack-meeting | 12:13 | |
| *** rfolco has joined #openstack-meeting | 12:21 | |
| *** Lucas_Gray has quit IRC | 12:42 | |
| *** rpittau|bbl is now known as rpittau | 12:42 | |
| *** mjturek has joined #openstack-meeting | 12:43 | |
| *** yamamoto has quit IRC | 12:43 | |
| *** Lucas_Gray has joined #openstack-meeting | 12:44 | |
| *** ttsiouts has quit IRC | 12:58 | |
| *** ttsiouts has joined #openstack-meeting | 12:58 | |
| *** ttsiouts has quit IRC | 13:03 | |
| *** moguimar has joined #openstack-meeting | 13:10 | |
| *** Lucas_Gray has quit IRC | 13:14 | |
| *** Lucas_Gray has joined #openstack-meeting | 13:15 | |
| *** yamamoto has joined #openstack-meeting | 13:15 | |
| *** yamamoto has quit IRC | 13:15 | |
| *** yamamoto has joined #openstack-meeting | 13:16 | |
| *** andrebeltrami has joined #openstack-meeting | 13:17 | |
| *** yamamoto has quit IRC | 13:20 | |
| *** psachin has quit IRC | 13:21 | |
| *** ttsiouts has joined #openstack-meeting | 13:23 | |
| *** diurnalist has joined #openstack-meeting | 13:26 | |
| *** yamamoto has joined #openstack-meeting | 13:46 | |
| *** yamamoto has quit IRC | 13:46 | |
| *** TrevorV has joined #openstack-meeting | 13:47 | |
| *** yamamoto has joined #openstack-meeting | 13:47 | |
| *** yamamoto has quit IRC | 13:47 | |
| *** yamamoto has joined #openstack-meeting | 13:48 | |
| *** manuvakery has joined #openstack-meeting | 13:53 | |
| *** yamamoto has quit IRC | 13:53 | |
| *** sluna has quit IRC | 13:59 | |
| *** sluna has joined #openstack-meeting | 13:59 | |
| abhishekk | #startmeeting glance | 14:01 |
|---|---|---|
| openstack | Meeting started Thu Jun 25 14:01:11 2020 UTC and is due to finish in 60 minutes. The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:01 |
| *** openstack changes topic to " (Meeting topic: glance)" | 14:01 | |
| abhishekk | #topic roll call | 14:01 |
| openstack | The meeting name has been set to 'glance' | 14:01 |
| *** openstack changes topic to "roll call (Meeting topic: glance)" | 14:01 | |
| abhishekk | #link https://etherpad.openstack.org/p/glance-team-meeting-agenda | 14:01 |
| abhishekk | o/ | 14:01 |
| dansmith | o/ | 14:01 |
| jokke | o/ | 14:01 |
| abhishekk | lets wait 2 minutes for others | 14:01 |
| *** rosmaita has joined #openstack-meeting | 14:02 | |
| rosmaita | o/ | 14:02 |
| abhishekk | lets start | 14:02 |
| abhishekk | We have dansmith today :D | 14:02 |
| abhishekk | #topic release/periodic jobs update | 14:02 |
| *** openstack changes topic to "release/periodic jobs update (Meeting topic: glance)" | 14:02 | |
| abhishekk | glance_store and python-glanceclient released for V1 milestone | 14:03 |
| *** ykatabam has quit IRC | 14:03 | |
| * mordred waves | 14:03 | |
| abhishekk | thanks to jokke and smcginnis for taking care of this | 14:03 |
| abhishekk | mordred, as well | 14:03 |
| abhishekk | V2 is 4 weeks away from now and we have handful of specs to get reviewed | 14:04 |
| abhishekk | Kindly focus on reviewing the specs | 14:04 |
| abhishekk | Regarding periodic job, we have 1 time out this week, else were green | 14:05 |
| abhishekk | Moving ahead | 14:05 |
| abhishekk | #topic Specs reviews | 14:05 |
| *** openstack changes topic to "Specs reviews (Meeting topic: glance)" | 14:05 | |
| abhishekk | sparse image upload - https://review.opendev.org/733157 | 14:05 |
| abhishekk | Unified limits - https://review.opendev.org/729187 | 14:05 |
| abhishekk | Image encryption - https://review.opendev.org/609667 | 14:05 |
| abhishekk | Cinder store multiple stores support - https://review.opendev.org/695152 | 14:05 |
| abhishekk | Apart from these we have Duplicate downloads spec as well | 14:06 |
| *** alistarle has joined #openstack-meeting | 14:06 | |
| abhishekk | #link https://review.opendev.org/734683 | 14:06 |
| abhishekk | Please review at top priority | 14:07 |
| abhishekk | Moving to next topic | 14:07 |
| rosmaita | ok | 14:07 |
| alistarle | Hi, any news about the next steps about this spec for sparse upload ? https://review.opendev.org/#/c/733157/ | 14:07 |
| abhishekk | alistarle, there are some comments on the specs, please go through those | 14:08 |
| abhishekk | jokke, has added one suggestion on it | 14:08 |
| alistarle | Yes I see the one of erno, but I didn't understand yours | 14:08 |
| alistarle | because I have added all the things we discuss during the PTG | 14:09 |
| abhishekk | You had provided two ways to do sparse upload in the specs under proposed section | 14:09 |
| abhishekk | I am saying keep what we agreed on in Proposed section and another one in Alternative section | 14:09 |
| alistarle | Yes because there is two successive optimisation, do you want me to split it in two different spec ? | 14:10 |
| alistarle | the two proposal will be implemented | 14:10 |
| *** dklyle has joined #openstack-meeting | 14:10 | |
| jokke | abhishekk: There is read part of it and write part of it | 14:10 |
| abhishekk | jokke, ack | 14:11 |
| abhishekk | alistarle, I will revisit my comment and update accordingly | 14:11 |
| jokke | abhishekk: the read part is if we read everything from staging or if we try to take the advantage of the FS call that gives us holes directly | 14:11 |
| alistarle | And Erno, do you want me to rename the option to "enable_thin_provisionning" ? | 14:12 |
| abhishekk | jokke, got it | 14:12 |
| *** dklyle has quit IRC | 14:12 | |
| alistarle | In my understanding of your comment, this flip should enable all optimizations, not only sparse upload right ? | 14:12 |
| jokke | alistarle: if it's not too much trouble that would be great. Based on the feedback from the Ceph engineering, it would make sense to avoid sending all the 0s over the wire in either case so calling it thin provisioning would be more decriptive for the deployers/admins | 14:14 |
| jokke | alistarle: so for your spec it will be the sparse upload, what we should look as followup is to use the ceph rewrite buffer for those who don't want the images being thin provisioned | 14:15 |
| jokke | which allows us to send like few kB of zeros over the line and tell ceph "Write this 200 000 times" | 14:15 |
| abhishekk | alistarle, jokke should we continue this in Open Discussion? | 14:16 |
| jokke | abhishekk: sure, sorry | 14:16 |
| abhishekk | jokke, no problem | 14:16 |
| abhishekk | moving ahead | 14:17 |
| abhishekk | #topic cross tenant/user copy image authorization | 14:17 |
| *** openstack changes topic to "cross tenant/user copy image authorization (Meeting topic: glance)" | 14:17 | |
| dansmith | So, I'm working on making nova able to use the copy-image functionality to make sure a user's image is copied to a local rbd store for remote compute nodes, | 14:17 |
| dansmith | and one of the big things that I think doesn't quite fit is that only images the user owns directly can be copied | 14:17 |
| dansmith | which is fine for some circumstances, but not for others.. there's one pretty serious bug, which is that we get no indication that we were disallowed from copying, which is fixed by this early auth check, which I think we need to merge regardless: https://review.opendev.org/#/c/737548/ | 14:18 |
| dansmith | however, I would also like some way to grant a user the ability to copy images that aren't theirs, i.e. public images that aren't charged to any specific paying user and that just need to be copied when they are deployed to a store at a remote site with computes for the first time | 14:19 |
| *** markvoelker has joined #openstack-meeting | 14:19 | |
| dansmith | one way to do that is a special property on the image, that either glance sees as relaxing the auth check, or that nova sees and knows to use admin credentials to do the copy | 14:19 |
| dansmith | however, I think the better plan would to be do this in policy somehow, so that users of a specific role or relationship can copy images | 14:20 |
| dansmith | so something like "if it is shared with me via member list, then I'm allowed to copy it" or "if this image is public, then allow it to be copied" etc | 14:20 |
| abhishekk | jokke, rosmaita AFAIK we have policy checks at different layer, right? | 14:20 |
| dansmith | so I'm looking for thoughts on the policy approach vs. the property hack | 14:21 |
| dansmith | it seems to me that through some refactoring, we could spawn the actual copy thread with an admin context, if the policy allows the user to copy, which would cut down on the refactoring, but I know that may be a little less palatable than refactoring any such checks further down | 14:22 |
| rosmaita | abhishekk: mostly, though there is that tasks-api policy that is at the api layer | 14:22 |
| jokke | If we limit this to public images I think the policy approach would be great. Then deployer could specify user or role which those copies would be allowed | 14:22 |
| jokke | if that needs to be happening in shared images as well, that gets messy quickly | 14:23 |
| *** diurnalist has quit IRC | 14:23 | |
| dansmith | jokke: what are the mechanical differences there? | 14:23 |
| *** diurnalist has joined #openstack-meeting | 14:24 | |
| *** markvoelker has quit IRC | 14:24 | |
| jokke | dansmith: Making image public is behind policy wall already and what I have heard in most cases restricted to admins and image maintaners. Which likely is like you pointed out, not charged customer. Sharing image is much more flexed and then it might need indeed the owners approval for consuming exra storage rather than just admin call | 14:25 |
| rosmaita | but is the proposal that the user who initiated the copy would own the copy? | 14:26 |
| dansmith | jokke: I understand the semantic differences, I meant.. if it's just policy checks in glance, are the shared images somehow more complex than the public ones? | 14:26 |
| dansmith | rosmaita: the copy is just an additional location in the image, so no | 14:27 |
| *** yamamoto has joined #openstack-meeting | 14:27 | |
| dansmith | If we start with just "owner or public" I think that's a major step forward, so I'm happy with that to start... I can just imagine someone being confused about why they can grant people copy access to public images, but not any image a user can see | 14:27 |
| jokke | dansmith: Just the fact that you need to check that the user is in the shared users list as in has actually right to see and consume the image | 14:28 |
| dansmith | jokke: okay, but presumably that is already a routine somewhere since we have to do that check in order to show them the image? | 14:28 |
| dansmith | can shared images be modified (i.e. metadata) by a share-ee or just downloaded? | 14:29 |
| jokke | dansmith: I think the question is at least as difficult politically if not more than technically. So the politics of public image are likely easier and cleaner to deal with when documented well | 14:29 |
| dansmith | definitely understand that :) | 14:29 |
| jokke | dansmith: just consumed | 14:29 |
| dansmith | jokke: okay, well, that's the same as the public case then, in terms of the effect you can have on an image | 14:30 |
| jokke | yup | 14:30 |
| rosmaita | what about community images? | 14:30 |
| *** mlavalle has joined #openstack-meeting | 14:30 | |
| dansmith | rosmaita: personally, I would expect that I should be able to grant this functionality to any kind of image that a user can already see | 14:31 |
| rosmaita | so who pays for the storage? | 14:31 |
| *** ricolin has joined #openstack-meeting | 14:31 | |
| jokke | rosmaita: I think politically we should put them into the basket of shared images in a sense that they are more likely to be charged on the owner for storage consumption | 14:31 |
| dansmith | if you're a private cloud and not charging for image space, then you really want to grant a user the ability to use an image, which includes using that image in whatever remote edge site they can spin up instances in | 14:31 |
| *** jamesmcarthur has joined #openstack-meeting | 14:32 | |
| dansmith | public is good enough for a lot of those people, but if they want only some users to be able to spin up a sensitive image, then losing the ability to do the copy is unfortunate, | 14:32 |
| *** jamesmcarthur has quit IRC | 14:32 | |
| *** jamesmcarthur has joined #openstack-meeting | 14:33 | |
| dansmith | and may lead to people downloading and re-uploading the image so they have control over the copy, just using more space | 14:33 |
| jokke | dansmith: one thing to take into account with shared images is that it requires out of band communication between those two users already | 14:33 |
| jokke | Which means that the collaboration where that image should be located is not much overhead on that case | 14:33 |
| dansmith | rosmaita: in case it's not clear, the case here is a cloud spread across a central DC and several edge sites, the edge sites having their own ceph. with this, nova can (if needed) copy your image from the central store to the appropriate edge store before booting your instance so you get fast clone, snapshot, etc ceph goodness | 14:34 |
| dansmith | rosmaita: which right now is only possible for images you own | 14:34 |
| dansmith | rosmaita: and if you have multiple things doing that in different tenants, you have to upload the image multiple times, one for each tenant in order for this to work, which sucks | 14:34 |
| rosmaita | i guess my worry is filling up the edge storage (which is likely to be smaller) if you leave this up to tenants to pick what should be at the edge if they don't have to pay for it | 14:35 |
| dansmith | jokke: yep, understand, but if there's no technical way to grant that access then making an actual copy of the image and diverging is the only user-consumable solution | 14:35 |
| jokke | rosmaita: I agree, that's why I think we cannot just by default let anyone do this. And why I think policy where admin can grant that permission for the tenant trusted to behave and having need for it can do it | 14:36 |
| *** yamamoto has quit IRC | 14:36 | |
| dansmith | rosmaita: at the expense of duplicating every image for every tenant in the central site though | 14:36 |
| *** ricolin has quit IRC | 14:37 | |
| abhishekk | that's what we assumed while designing this | 14:37 |
| dansmith | and of course, if that image duplication happens, | 14:37 |
| jokke | and there is that ^^ we have no per store policy either so anyone who can create an image, can do it to any store available | 14:37 |
| dansmith | then the edge site gets even full-er because two tenants that should share the same base imge, don't, since they're "different" images | 14:37 |
| *** ricolin has joined #openstack-meeting | 14:37 | |
| dansmith | anyway, if we can start with "public or owner" that's a big step forward | 14:39 |
| abhishekk | How about we start with limiting it to public images ? | 14:39 |
| dansmith | and if the demand for finer grained sharing comes, then we can do that and I can collect beers :) | 14:39 |
| jokke | dansmith: I glanced through your early fail bug, which was very nice catch. I think controlled public image copy will get us much closer to decent user experience for both sides consumers and owners of those images | 14:39 |
| dansmith | it will | 14:39 |
| jokke | And we can refine these in future if store user cases arise | 14:39 |
| dansmith | yep, I'm good with that | 14:40 |
| jokke | s/store/strong/ | 14:40 |
| abhishekk | We need a spec for this | 14:40 |
| jokke | if abhishekk and rosmaita are on board with this approach | 14:40 |
| abhishekk | I am fine with this approach | 14:40 |
| rosmaita | i'm not against it, but i have not been following along too closely | 14:41 |
| dansmith | we still need to merge the early auth check patch of mine rather soon because right now nova will wait until timeout not knowing it wasn't allowed to copy an image | 14:41 |
| abhishekk | +1 | 14:41 |
| dansmith | and extend it with the expanded public stuff | 14:41 |
| jokke | dansmith: yep agreed, I just targeted it to Victoria and Ussuri as high priority ... that is not by any means Nova specific fault | 14:42 |
| abhishekk | Moving ahead as has less time | 14:42 |
| dansmith | thanks | 14:42 |
| abhishekk | #topic Copy Image race condition | 14:42 |
| *** openstack changes topic to "Copy Image race condition (Meeting topic: glance)" | 14:42 | |
| *** alistarle has quit IRC | 14:42 | |
| abhishekk | #link https://bugs.launchpad.net/glance/+bug/1884596 | 14:42 |
| openstack | Launchpad bug 1884596 in Glance "image import copy-to-store will start multiple importing threads due to race condition" [Critical,New] - Assigned to Abhishek Kekane (abhishek-kekane) | 14:42 |
| abhishekk | this is another bug we had found around copy-image operation | 14:43 |
| jokke | And just for the record this is just "copy-image" moethod specific as the image state transition catches it in the actual import jobs | 14:44 |
| abhishekk | This is valid race condition and needs to be addressed, as we have common staging area, two different API calls to same image will provide unexpected results | 14:44 |
| abhishekk | I am working with dansmith to solve this issue | 14:45 |
| jokke | it will also cause all kind of mess when they get to the point of location handling and try to add duplicate locations | 14:45 |
| abhishekk | yes | 14:45 |
| jokke | dansmith: thanks for good catch on this too | 14:46 |
| abhishekk | dansmith, has added one patch to update image property for image only once | 14:46 |
| abhishekk | #link https://review.opendev.org/737868 | 14:46 |
| dansmith | just got a couple tweaks from mike, which I will make, but otherwise that'll do it | 14:46 |
| abhishekk | please have a look as well, I need to build my solution around this patch | 14:47 |
| abhishekk | moving ahead | 14:47 |
| abhishekk | #topic openstackclient/sdk patches | 14:48 |
| *** openstack changes topic to "openstackclient/sdk patches (Meeting topic: glance)" | 14:48 | |
| abhishekk | rosmaita, this is you? | 14:48 |
| dansmith | mordred: I think | 14:48 |
| jokke | ^^ | 14:48 |
| rosmaita | i added them, but it's mordred's issue | 14:48 |
| *** alistarle has joined #openstack-meeting | 14:48 | |
| dansmith | these are patches to make osc able to do the import flow | 14:48 |
| dansmith | which I've modified the devstack patch to use instead of glanceclient | 14:49 |
| dansmith | still working on getting them tested against a real deployment, but latest rev is probably good | 14:49 |
| dansmith | we'll know in a few hours | 14:49 |
| abhishekk | So this is again came to pace due to Dan's work | 14:49 |
| dansmith | \o/ | 14:49 |
| mordred | heya - yeah | 14:49 |
| mordred | mostly just wanted ot let folks know they're there - they worked in my local testing, so hopefully dan's patch goes green now | 14:50 |
| abhishekk | will have a look at those patches | 14:50 |
| abhishekk | #topic Open discussion | 14:50 |
| *** openstack changes topic to "Open discussion (Meeting topic: glance)" | 14:50 | |
| dansmith | it won't go green for other reasons like the image sharing thing, but.. it should go red later :) | 14:50 |
| jokke | :) | 14:51 |
| mordred | please do - we also discovered that the api-ref docs and reality don't match on all_stores_must_succeed | 14:51 |
| jokke | mordred: oh? | 14:51 |
| jokke | please do tell | 14:51 |
| rosmaita | i filed a bug | 14:51 |
| jokke | ok, cool | 14:51 |
| abhishekk | there is one location where it states default as False | 14:51 |
| mordred | yeah. the actual default behavior is true in the glance code - the api-ref says defaults to false in one place and is silent in the other place | 14:51 |
| mordred | yeah | 14:51 |
| abhishekk | will put a correction patch soon | 14:52 |
| abhishekk | Then there is 3rd bug which we found yesterday | 14:52 |
| rosmaita | https://bugs.launchpad.net/glance/+bug/1884996 | 14:52 |
| openstack | Launchpad bug 1884996 in Glance "default value for all_stores_must_succeed is not stated" [Low,Triaged] | 14:52 |
| abhishekk | #link https://bugs.launchpad.net/glance/+bug/1885003 | 14:52 |
| openstack | Launchpad bug 1885003 in Glance "Interrupted copy-image may break a subsequent operation or worse" [High,In progress] | 14:52 |
| jokke | ah, nice catch then, lets make sure that is corrected. IIRC the spec clearly defined it should be true so docs neds changing | 14:52 |
| rosmaita | "or worse" sounds bad | 14:52 |
| abhishekk | agree | 14:53 |
| jokke | alistarle: did you have something to continue around the sparse upload stuff | 14:53 |
| abhishekk | I have a fix up for above bug | 14:53 |
| abhishekk | I need to change bug title as well | 14:54 |
| abhishekk | #link https://review.opendev.org/#/c/737867/ | 14:54 |
| alistarle | Yes about the flag name, you expect to have another flag for optimization from ceph engineering or keeping the same "thin provisionning" one ? | 14:55 |
| abhishekk | Last 5 minutes | 14:55 |
| alistarle | because seems ceph engineering optimization don't relate to thin provisionning | 14:56 |
| jokke | alistarle: so that's why I wanted to change the name. I'd like to keep it only as one option | 14:56 |
| *** diurnalist has quit IRC | 14:56 | |
| jokke | alistarle: that way if "thin provisioning" is enabled we use the sparse upload and if it's disabled we use th rewrite buffer mechanism | 14:56 |
| alistarle | Oh ok I get it, you don't want to be called "thin provisionning" like | 14:56 |
| alistarle | I thought it was your recommandation | 14:57 |
| jokke | both ways we don't send majority of the zeros across but the end result in the storege changes ;) | 14:57 |
| jokke | So everybody wins :) | 14:57 |
| alistarle | Ok understood | 14:58 |
| mordred | I asked rosmaita about this briefly yesterday ... he said that there is no current support for having import staging space be in a backing store like ceph | 14:58 |
| alistarle | I will update that | 14:58 |
| mordred | are there any future plans for that or blueprint already? | 14:58 |
| *** diurnalist has joined #openstack-meeting | 14:58 | |
| jokke | mordred: I'm working on it, but haven't had time to set it up yet to test | 14:59 |
| mordred | jokke: cool! | 14:59 |
| mordred | mnaser: ^^ | 14:59 |
| abhishekk | time's up | 15:00 |
| rosmaita | we made the change a while back so that it uses a local filesystem store for the stage, so what jokke is working on is the next step | 15:00 |
| jokke | mordred: The (first) approach would be utilizing cephfs so stuff like qemu-image will work. and second would be to look into using actual rbd driver for it if none of the file operations are needed | 15:00 |
| abhishekk | shift to #openstack-glance for any further discussion | 15:00 |
| abhishekk | Thank you all | 15:01 |
| rosmaita | bye! | 15:01 |
| jokke | thanks! | 15:01 |
| abhishekk | #endmeeting | 15:01 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:01 | |
| openstack | Meeting ended Thu Jun 25 15:01:18 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:01 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-06-25-14.01.html | 15:01 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-06-25-14.01.txt | 15:01 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-06-25-14.01.log.html | 15:01 |
| *** rosmaita has left #openstack-meeting | 15:01 | |
| gagehugo | #startmeeting security | 15:01 |
| openstack | Meeting started Thu Jun 25 15:01:54 2020 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:01 |
| *** openstack changes topic to " (Meeting topic: security)" | 15:01 | |
| openstack | The meeting name has been set to 'security' | 15:01 |
| fungi | hey there! | 15:02 |
| gagehugo | o/ | 15:02 |
| gagehugo | #link https://etherpad.opendev.org/p/security-agenda agenda | 15:03 |
| gagehugo | I was out the last couple days for training so didn't update the agenda much | 15:03 |
| fungi | we made a trove bug public | 15:04 |
| fungi | other than that i don't think i have much to cover | 15:04 |
| gagehugo | I did see that | 15:06 |
| gagehugo | I was asked about including a slide for openstack 10 years about the security sig, so I just included a section from the security sig wiki page | 15:07 |
| *** Lucas_Gray has quit IRC | 15:07 | |
| fungi | that sounds good | 15:08 |
| gagehugo | but otherwise I don't have anything really | 15:08 |
| fungi | oh, on a related note | 15:08 |
| fungi | how would folks feel about moving the wiki page into governance-sigs repo? like i did for https://governance.openstack.org/sigs/tact-sig.html | 15:09 |
| fungi | #link https://governance.openstack.org/sigs/tact-sig.html sample sig page | 15:09 |
| gagehugo | works for me | 15:09 |
| gagehugo | I don't mind | 15:09 |
| fungi | i'll add that to my to do list | 15:10 |
| fungi | on the trove report, that was bug 1884457 | 15:13 |
| openstack | bug 1884457 in OpenStack DBaaS (Trove) "Remote Code Execution in trove-conductor" [Undecided,New] https://launchpad.net/bugs/1884457 | 15:13 |
| fungi | #link https://launchpad.net/bugs/1884457 Remote Code Execution in trove-conductor | 15:13 |
| *** Lucas_Gray has joined #openstack-meeting | 15:13 | |
| fungi | this turned out to be a known risk, trove currently recommends using a service tenant for all the trove instance resources in any deployments where trove users are not trusted | 15:14 |
| fungi | otherwise you could do things like attach the trove storage device to a general purpose server instance under the control of the user and inject arbitrary code or grab message bus credentials | 15:15 |
| *** jawad_ax_ has quit IRC | 15:16 | |
| gagehugo | hmm ok | 15:16 |
| *** armstrong_ has joined #openstack-meeting | 15:17 | |
| *** jawad_axd has joined #openstack-meeting | 15:18 | |
| gagehugo | fungi: anything else? | 15:18 |
| fungi | i got nuthin' | 15:19 |
| *** armstrong has joined #openstack-meeting | 15:20 | |
| gagehugo | have a good rest of the week! | 15:20 |
| gagehugo | #endmeeting | 15:20 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:20 | |
| openstack | Meeting ended Thu Jun 25 15:20:23 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:20 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/security/2020/security.2020-06-25-15.01.html | 15:20 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/security/2020/security.2020-06-25-15.01.txt | 15:20 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/security/2020/security.2020-06-25-15.01.log.html | 15:20 |
| *** yasufum has joined #openstack-meeting | 15:21 | |
| *** jawad_axd has quit IRC | 15:22 | |
| *** yasufum has quit IRC | 15:26 | |
| *** yasufum_ has joined #openstack-meeting | 15:26 | |
| *** armstrong_ has quit IRC | 15:33 | |
| *** armstrong has quit IRC | 15:33 | |
| *** dklyle has joined #openstack-meeting | 15:50 | |
| *** david-lyle has joined #openstack-meeting | 15:52 | |
| *** Lucas_Gray has quit IRC | 15:52 | |
| *** ttsiouts has quit IRC | 15:53 | |
| *** jawad_axd has joined #openstack-meeting | 15:53 | |
| *** david-lyle has quit IRC | 15:53 | |
| *** ttsiouts has joined #openstack-meeting | 15:53 | |
| *** Lucas_Gray has joined #openstack-meeting | 15:57 | |
| *** jawad_axd has quit IRC | 15:57 | |
| *** ttsiouts has quit IRC | 15:58 | |
| *** diablo_rojo has joined #openstack-meeting | 16:01 | |
| *** ricolin has quit IRC | 16:10 | |
| *** rpittau is now known as rpittau|afk | 16:11 | |
| *** jawad_axd has joined #openstack-meeting | 16:25 | |
| *** ttsiouts has joined #openstack-meeting | 16:29 | |
| *** yasufum_ has quit IRC | 16:33 | |
| *** ttsiouts has quit IRC | 16:34 | |
| *** yaawang_ has quit IRC | 16:35 | |
| *** alistarle has quit IRC | 16:37 | |
| *** ociuhandu_ has joined #openstack-meeting | 16:38 | |
| *** Liang has quit IRC | 16:40 | |
| *** ociuhandu has quit IRC | 16:41 | |
| *** gyee has joined #openstack-meeting | 16:46 | |
| *** ociuhandu_ has quit IRC | 16:48 | |
| *** e0ne has quit IRC | 16:50 | |
| *** ociuhandu has joined #openstack-meeting | 16:53 | |
| *** cmurphy has joined #openstack-meeting | 16:53 | |
| *** Lucas_Gray has quit IRC | 16:54 | |
| *** yaawang_ has joined #openstack-meeting | 16:55 | |
| *** manuvakery has quit IRC | 16:56 | |
| *** jawad_axd has quit IRC | 16:57 | |
| *** ociuhandu has quit IRC | 16:58 | |
| gmann | #startmeeting policy-popup | 17:00 |
| openstack | Meeting started Thu Jun 25 17:00:18 2020 UTC and is due to finish in 60 minutes. The chair is gmann. Information about MeetBot at http://wiki.debian.org/MeetBot. | 17:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 17:00 |
| *** openstack changes topic to " (Meeting topic: policy-popup)" | 17:00 | |
| openstack | The meeting name has been set to 'policy_popup' | 17:00 |
| gmann | who all here today? | 17:00 |
| redrobot | \o | 17:01 |
| gmann | sorry its is after 1 hour. | 17:01 |
| gmann | redrobot: see you exactly after an hour, sorry about mis timming | 17:01 |
| gmann | #emdmeeting | 17:01 |
| gmann | #endmeeting | 17:01 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 17:01 | |
| redrobot | gmann, cool | 17:01 |
| openstack | Meeting ended Thu Jun 25 17:01:53 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 17:01 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-06-25-17.00.html | 17:01 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-06-25-17.00.txt | 17:01 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-06-25-17.00.log.html | 17:01 |
| *** ttsiouts has joined #openstack-meeting | 17:03 | |
| *** yasufum has joined #openstack-meeting | 17:07 | |
| *** e0ne has joined #openstack-meeting | 17:24 | |
| *** e0ne has quit IRC | 17:26 | |
| *** yasufum has quit IRC | 17:30 | |
| *** ttsiouts has quit IRC | 17:35 | |
| *** links has quit IRC | 17:41 | |
| *** moguimar has quit IRC | 17:44 | |
| *** yasufum has joined #openstack-meeting | 17:49 | |
| gmann | #startmeeting policy-popup | 18:00 |
| openstack | Meeting started Thu Jun 25 18:00:34 2020 UTC and is due to finish in 60 minutes. The chair is gmann. Information about MeetBot at http://wiki.debian.org/MeetBot. | 18:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 18:00 |
| *** openstack changes topic to " (Meeting topic: policy-popup)" | 18:00 | |
| openstack | The meeting name has been set to 'policy_popup' | 18:00 |
| raildo | o/ | 18:00 |
| gmann | this is right time. | 18:00 |
| gmann | raildo: hi | 18:00 |
| raildo | gmann, yo, how you doing? | 18:01 |
| redrobot | \o | 18:01 |
| raildo | #link Agenda: https://etherpad.opendev.org/p/default-policy-meeting-agenda | 18:01 |
| gmann | 3 meeting today :) and gate stuff you know | 18:01 |
| gmann | redrobot: hi | 18:01 |
| gmann | let's wait for couple of min if more people shows up | 18:01 |
| raildo | gmann, yeah, things are getting crazy this last days... | 18:01 |
| raildo | yep | 18:02 |
| gmann | let's start | 18:04 |
| raildo | let's do it! | 18:04 |
| gmann | #topic PTG feedback | 18:04 |
| *** openstack changes topic to "PTG feedback (Meeting topic: policy-popup)" | 18:04 | |
| gmann | this is our first meeting after PTG | 18:04 |
| gmann | we had great amount of discussion over new policy things and feedback too | 18:05 |
| gmann | from oslo-nova cross projects sessions we captured the json->yaml migration plan which we will discuss in next topic | 18:05 |
| raildo | indeed, the idea of making a virtual PTG it was pretty good, imho | 18:05 |
| gmann | and keystone sessions on more investigation we should do to find out the missing things | 18:06 |
| gmann | raildo: true, | 18:06 |
| raildo | also some projects like manila, barbican, cyborg have some plans to start supporting default policies during victoria cycle | 18:06 |
| gmann | discussions were productive | 18:06 |
| gmann | yeah and neutron also | 18:06 |
| * gouthamr sneaks in | 18:06 | |
| raildo | yep, pretty cool result for the PTG :) | 18:07 |
| gmann | we need to get some pre-work done before more projects start shipping that | 18:07 |
| raildo | gouthamr, hey o/ | 18:07 |
| gouthamr | o/ raildo | 18:07 |
| gmann | discussions are n etherpad if anyone missed the sessions | 18:07 |
| gmann | raildo: gouthamr redrobot please link the spec or code links on wiki if you have started or know about any other project has started | 18:08 |
| gmann | anything else on PTG side? | 18:09 |
| raildo | gouthamr, redrobot also, we added a fixed topic for "review requests" on the agenda, you can link any patch that needs our attention over it | 18:09 |
| raildo | gmann, nope | 18:10 |
| gmann | #topic Pre-work before adopting new policy on more projects | 18:10 |
| *** openstack changes topic to "Pre-work before adopting new policy on more projects (Meeting topic: policy-popup)" | 18:10 | |
| redrobot | raildo, nice | 18:10 |
| gmann | #link https://specs.openstack.org/openstack/oslo-specs/specs/victoria/policy-json-to-yaml.html | 18:10 |
| gmann | ^^ this oslo spec captured the json->yaml transition plan | 18:10 |
| gmann | this is very much needed things to finish before you ship the new policy to avoid the operators | 18:11 |
| gmann | I will be working on this on priority and try to finish early in this cycle | 18:11 |
| gmann | and one things we need on project side is to add the upgrade-checks for json format and switch the config option default value. | 18:12 |
| bnemec | Even though that has merged, please take a look and let us know if there are any issues. | 18:12 |
| gmann | I have plan to do in nova first as example | 18:12 |
| bnemec | It's a security sensitive change so the more eyes we get on it the better. | 18:12 |
| gmann | bnemec: +1 | 18:12 |
| raildo | bnemec, ack | 18:12 |
| gmann | feedback from other projects will be valuable here if anything we are still missing or can do in better way from operators persepctive | 18:13 |
| gmann | I will say we should add these pre-work things on projects review also to ack them and get more feedback if any | 18:14 |
| gmann | let me record the action also | 18:14 |
| gmann | #action to start the upgrade-check on nova as ref | 18:14 |
| gmann | raildo: you want to take action to update wiki for pre-work section and there we will start listing down the things we need to burn down before projects start the implementation | 18:15 |
| gmann | so that everyone can easily check the status and also can help | 18:15 |
| gmann | #action gmann to start the upgrade-check on nova as ref | 18:16 |
| raildo | #actoin to update wiki page with the pre-work for victoria cycle regarding the up-grade-check and json-to-yaml migration | 18:16 |
| gmann | thanks | 18:16 |
| raildo | oh lord... | 18:16 |
| raildo | #action to update wiki page with the pre-work for victoria cycle regarding the up-grade-check and json-to-yaml migration | 18:16 |
| raildo | gmann, awesome :) anything else? | 18:16 |
| gmann | nothing else, let's move | 18:17 |
| gmann | #topic Review Requests | 18:17 |
| *** openstack changes topic to "Review Requests (Meeting topic: policy-popup)" | 18:17 | |
| gmann | any review request? | 18:17 |
| gmann | i know cyborg started the code last cycle but did not check if that is rebased and ready now | 18:17 |
| gmann | no updates seems #link https://review.opendev.org/#/c/699102/ | 18:18 |
| raildo | gmann, ack, let's keep our eyes on it | 18:19 |
| gmann | anyways do ping us review here in meeting or add in wiki. | 18:19 |
| gmann | yeah | 18:19 |
| gmann | #topic Open Floor | 18:19 |
| *** openstack changes topic to "Open Floor (Meeting topic: policy-popup)" | 18:19 | |
| gmann | any other topic to discuss | 18:20 |
| raildo | nothing from my side | 18:20 |
| gmann | neutron team is starting the discussion, i talked to amotoki and due to TZ he could not not join meting. | 18:20 |
| gmann | I will send the updated over ML and if we get more people from Asia TZ then we can adjust the meeting time also | 18:21 |
| *** markvoelker has joined #openstack-meeting | 18:21 | |
| raildo | I'm ok with moving meeting time if needed, but let's see how it goes | 18:22 |
| gmann | yeah, once we get more movementum and more things to discuss then we can re-iterate the timing. | 18:22 |
| raildo | ack | 18:23 |
| gmann | ok, let's close for today if nothing else to discuss and we will meet on 9th July(hope i am counted date correctly :)) | 18:24 |
| raildo | that's right | 18:24 |
| raildo | thanks everyone! | 18:24 |
| gmann | ok | 18:24 |
| gmann | thanks all for joining | 18:24 |
| gmann | #endmeeting | 18:25 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 18:25 | |
| openstack | Meeting ended Thu Jun 25 18:25:01 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 18:25 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-06-25-18.00.html | 18:25 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-06-25-18.00.txt | 18:25 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-06-25-18.00.log.html | 18:25 |
| *** markvoelker has quit IRC | 18:26 | |
| *** yasufum has quit IRC | 18:28 | |
| *** yamamoto has joined #openstack-meeting | 18:34 | |
| *** cmurphy has left #openstack-meeting | 18:35 | |
| *** yamamoto has quit IRC | 18:38 | |
| *** jawad_axd has joined #openstack-meeting | 18:41 | |
| *** ttsiouts has joined #openstack-meeting | 18:41 | |
| *** geguileo has quit IRC | 18:44 | |
| *** raildo has quit IRC | 18:51 | |
| *** raildo has joined #openstack-meeting | 18:51 | |
| *** eharney has quit IRC | 18:57 | |
| *** ttsiouts has quit IRC | 19:15 | |
| *** jawad_axd has quit IRC | 19:15 | |
| *** dmacpher has quit IRC | 19:26 | |
| *** dmacpher_ has joined #openstack-meeting | 19:26 | |
| *** markvoelker has joined #openstack-meeting | 19:29 | |
| *** markvoelker has quit IRC | 19:34 | |
| *** ralonsoh has quit IRC | 19:45 | |
| *** bbowen_ has quit IRC | 19:47 | |
| *** lbragstad has joined #openstack-meeting | 19:49 | |
| *** ttsiouts has joined #openstack-meeting | 19:49 | |
| *** ttsiouts has quit IRC | 19:54 | |
| *** ttsiouts has joined #openstack-meeting | 19:57 | |
| *** ttsiouts has quit IRC | 20:01 | |
| *** icey has quit IRC | 20:04 | |
| *** TrevorV has quit IRC | 20:04 | |
| *** icey has joined #openstack-meeting | 20:06 | |
| *** jawad_axd has joined #openstack-meeting | 20:32 | |
| *** ttsiouts has joined #openstack-meeting | 20:33 | |
| *** zaneb has quit IRC | 20:34 | |
| *** zaneb has joined #openstack-meeting | 20:36 | |
| *** zaneb has quit IRC | 20:38 | |
| *** zaneb has joined #openstack-meeting | 20:39 | |
| *** zaneb has quit IRC | 20:43 | |
| *** zaneb has joined #openstack-meeting | 20:44 | |
| *** markvoelker has joined #openstack-meeting | 20:48 | |
| *** markvoelker has quit IRC | 20:53 | |
| *** diurnalist has quit IRC | 20:56 | |
| *** jawad_axd has quit IRC | 21:06 | |
| *** bbowen_ has joined #openstack-meeting | 21:06 | |
| *** ttsiouts has quit IRC | 21:06 | |
| *** diurnalist has joined #openstack-meeting | 21:14 | |
| *** raildo has quit IRC | 21:21 | |
| *** slaweq has quit IRC | 21:24 | |
| *** slaweq has joined #openstack-meeting | 21:31 | |
| *** Lucas_Gray has joined #openstack-meeting | 21:35 | |
| *** slaweq has quit IRC | 21:35 | |
| *** ttsiouts has joined #openstack-meeting | 22:09 | |
| *** jawad_axd has joined #openstack-meeting | 22:24 | |
| *** ttsiouts has quit IRC | 22:42 | |
| *** jawad_axd has quit IRC | 22:56 | |
| *** mlavalle has quit IRC | 22:58 | |
| *** jamesmcarthur has quit IRC | 23:10 | |
| *** ttsiouts has joined #openstack-meeting | 23:11 | |
| *** markvoelker has joined #openstack-meeting | 23:15 | |
| *** ttsiouts has quit IRC | 23:15 | |
| *** markvoelker has quit IRC | 23:20 | |
| *** ttsiouts has joined #openstack-meeting | 23:44 | |
| *** gyee has quit IRC | 23:59 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!