Thursday, 2020-01-30

*** jmlowe has quit IRC00:01
*** slaweq has joined #openstack-nova00:11
openstackgerritArtom Lifshitz proposed openstack/nova master: Functional tests for NUMA live migration  https://review.opendev.org/67259500:11
openstackgerritArtom Lifshitz proposed openstack/nova master: NUMA LM: Add func test for bug 1845146  https://review.opendev.org/68740400:11
openstackbug 1845146 in OpenStack Compute (nova) train "NUMA aware live migration failed when vCPU pin set" [High,Fix committed] https://launchpad.net/bugs/1845146 - Assigned to Dan Smith (danms)00:11
*** slaweq has quit IRC00:16
*** tbachman has quit IRC00:17
*** damien_r has quit IRC00:18
*** damien_r has joined #openstack-nova00:19
*** igordc has quit IRC00:28
*** tetsuro has joined #openstack-nova00:32
*** damien_r has quit IRC00:40
*** igordc has joined #openstack-nova00:59
*** luksky has quit IRC01:04
*** gyee has quit IRC01:13
*** Liang__ has joined #openstack-nova01:40
openstackgerritBrin Zhang proposed openstack/nova master: Follow-up: Add delete_on_termination to volume-attach API  https://review.opendev.org/68065501:48
*** TxGirlGeek has quit IRC01:49
*** brinzhang has joined #openstack-nova01:50
*** damien_r has joined #openstack-nova02:02
*** damien_r has quit IRC02:02
*** damien_r has joined #openstack-nova02:02
*** tinwood has quit IRC02:10
*** slaweq has joined #openstack-nova02:11
*** tinwood has joined #openstack-nova02:12
*** slaweq has quit IRC02:16
*** gentoora- has joined #openstack-nova02:29
*** gentoorax has quit IRC02:30
*** gentoora- is now known as gentoorax02:30
*** nweinber has joined #openstack-nova02:37
*** ccamacho has quit IRC02:50
*** brinzhang has quit IRC02:59
*** nweinber has quit IRC03:07
*** nweinber has joined #openstack-nova03:09
*** sapd1 has joined #openstack-nova03:20
*** adriant has quit IRC03:26
*** psachin has joined #openstack-nova03:35
*** nweinber has quit IRC03:39
*** damien_r has quit IRC03:42
*** damien_r has joined #openstack-nova03:54
*** damien_r has quit IRC04:01
*** igordc has quit IRC04:08
*** slaweq has joined #openstack-nova04:11
openstackgerritSundar Nadathur proposed openstack/nova master: Create and bind Cyborg ARQs.  https://review.opendev.org/63124404:14
openstackgerritSundar Nadathur proposed openstack/nova master: Pass accelerator requests to each virt driver from compute manager.  https://review.opendev.org/69858104:14
openstackgerritSundar Nadathur proposed openstack/nova master: Compose accelerator PCI devices into domain XML in libvirt driver.  https://review.opendev.org/63124504:14
openstackgerritSundar Nadathur proposed openstack/nova master: Delete ARQs for an instance when the instance is deleted.  https://review.opendev.org/67373504:14
openstackgerritSundar Nadathur proposed openstack/nova master: Enable hard/soft reboot with accelerators.  https://review.opendev.org/69794004:14
openstackgerritSundar Nadathur proposed openstack/nova master: Enable start/stop of instances with accelerators.  https://review.opendev.org/69955304:14
openstackgerritSundar Nadathur proposed openstack/nova master: Enable and use COMPUTE_ACCELERATORS trait.  https://review.opendev.org/69955404:14
openstackgerritSundar Nadathur proposed openstack/nova master: Bump compute rpcapi version and reduce Cyborg calls.  https://review.opendev.org/70422704:14
openstackgerritSundar Nadathur proposed openstack/nova master: Add cyborg tempest job.  https://review.opendev.org/67099904:14
*** slaweq has quit IRC04:16
*** damien_r has joined #openstack-nova04:34
*** damien_r has quit IRC04:39
*** udesale has joined #openstack-nova04:40
*** sapd1 has quit IRC04:46
*** ociuhandu has joined #openstack-nova04:58
*** sapd1 has joined #openstack-nova04:59
*** links has joined #openstack-nova05:00
*** ociuhandu has quit IRC05:02
*** adriant has joined #openstack-nova05:05
*** jmlowe has joined #openstack-nova05:05
*** jmlowe has quit IRC05:08
*** adriant has quit IRC05:09
*** damien_r has joined #openstack-nova05:09
*** adriant has joined #openstack-nova05:10
*** damien_r has quit IRC05:14
*** jmlowe has joined #openstack-nova05:16
*** sapd1 has quit IRC05:24
*** damien_r has joined #openstack-nova05:32
*** damien_r has quit IRC05:37
*** brinzhang has joined #openstack-nova05:41
*** jmlowe has quit IRC05:55
*** jmlowe has joined #openstack-nova05:57
*** jmlowe has quit IRC06:04
*** damien_r has joined #openstack-nova06:06
*** hariii2503 has joined #openstack-nova06:10
*** slaweq has joined #openstack-nova06:11
*** damien_r has quit IRC06:11
*** slaweq has quit IRC06:16
hariii2503Hi Guys . I am writing a python script to get some data from nova python client .06:29
hariii2503I m getting authentication error , when I used below commands06:29
hariii2503from novaclient import client06:30
hariii2503nova = client.Client(VERSION, USERNAME, PASSWORD, PROJECT_ID, AUTH_URL)06:30
hariii2503nova.servers.list()06:30
hariii2503Please help me in this06:30
hariii2503openstack version is stein06:30
*** Liang__ has quit IRC06:30
*** ratailor has joined #openstack-nova06:34
*** damien_r has joined #openstack-nova06:44
*** udesale_ has joined #openstack-nova06:46
*** brinzhang has quit IRC06:47
*** udesale has quit IRC06:47
*** damien_r has quit IRC06:49
*** slaweq has joined #openstack-nova07:06
*** diconico07 has quit IRC07:06
*** eharney has quit IRC07:08
*** luksky has joined #openstack-nova07:14
*** eharney has joined #openstack-nova07:21
*** jawad_axd has joined #openstack-nova07:26
*** ratailor has quit IRC07:26
*** brinzhang has joined #openstack-nova07:27
*** ratailor has joined #openstack-nova07:27
*** ralonsoh has joined #openstack-nova07:31
*** brinzhang has quit IRC07:45
openstackgerritVictor Coutellier proposed openstack/nova-specs master: Non-admin user can filter their instances by AZs  https://review.opendev.org/70176307:45
*** brinzhang has joined #openstack-nova07:45
*** tesseract has joined #openstack-nova07:47
*** damien_r has joined #openstack-nova07:51
*** maciejjozefczyk has joined #openstack-nova07:53
*** damien_r has quit IRC07:56
*** udesale_ has quit IRC07:58
*** udesale_ has joined #openstack-nova07:58
openstackgerritVictor Coutellier proposed openstack/nova-specs master: Non-admin user can filter their instances by AZs  https://review.opendev.org/70176308:04
*** dpawlik has quit IRC08:14
*** rpittau|afk is now known as rpittau08:14
*** tkajinam has quit IRC08:15
*** ccamacho has joined #openstack-nova08:19
*** damien_r has joined #openstack-nova08:22
*** dpawlik has joined #openstack-nova08:23
*** udesale_ has quit IRC08:28
*** damien_r has quit IRC08:35
*** HagunKim has joined #openstack-nova08:36
*** iurygregory has joined #openstack-nova08:42
*** tosky has joined #openstack-nova08:46
*** damien_r has joined #openstack-nova08:51
*** damien_r has quit IRC08:55
*** luksky has quit IRC08:58
*** damien_r has joined #openstack-nova09:13
*** xek_ has joined #openstack-nova09:17
*** damien_r has quit IRC09:18
*** ivve has joined #openstack-nova09:19
*** dtantsur|afk is now known as dtantsur09:29
*** derekh has joined #openstack-nova09:33
*** udesale has joined #openstack-nova09:35
*** luksky has joined #openstack-nova09:35
*** damien_r has joined #openstack-nova09:38
*** martinkennelly has joined #openstack-nova09:38
*** kiseok7 has quit IRC09:39
*** damien_r has quit IRC09:42
*** damien_r has joined #openstack-nova09:46
*** damien_r has quit IRC09:51
openstackgerritVictor Coutellier proposed openstack/nova-specs master: Non-Admin user can filter their instances by more filters  https://review.opendev.org/70176309:54
*** damien_r has joined #openstack-nova09:56
*** damien_r has quit IRC10:01
stephenfinbauzas: Could you hit https://review.opendev.org/#/c/695380/ ?10:05
stephenfinAppears to be the only remaining issue we have for the py3 goal10:05
*** salmankhan has joined #openstack-nova10:09
*** IvensZambrano has joined #openstack-nova10:24
*** ratailor has quit IRC10:24
*** ratailor has joined #openstack-nova10:26
*** ratailor has quit IRC10:26
*** ratailor has joined #openstack-nova10:27
*** spatel has joined #openstack-nova10:29
*** ratailor has quit IRC10:29
*** IvensZambrano has quit IRC10:30
*** ratailor has joined #openstack-nova10:30
*** ratailor has quit IRC10:31
*** ratailor has joined #openstack-nova10:32
*** spatel has quit IRC10:34
*** ratailor has quit IRC10:40
*** ratailor has joined #openstack-nova10:41
*** ratailor has quit IRC10:41
*** ratailor has joined #openstack-nova10:44
*** pcaruana has quit IRC10:46
*** spatel has joined #openstack-nova10:47
jawad_axd Hi all ! Question is, from instances, download/upload speed is around 10MB/s while from underlying host is 80MB/s. How can I increase/tune bandwidth parameters? I am using Stein,linux bridge,vxlans setup.Any pointers?10:51
*** udesale has quit IRC10:53
*** ratailor_ has joined #openstack-nova10:55
*** ratailor has quit IRC10:58
*** damien_r has joined #openstack-nova11:04
*** damien_r has quit IRC11:09
*** damien_r has joined #openstack-nova11:13
*** rpittau is now known as rpittau|bbl11:14
donnyd@jawad_axd you need to look for your bottleneck. Download speeds can depend on a lot of different things11:22
donnydmaybe start with some simple iperf testing in and out of the tenant space.11:22
donnydWhat are you using for a storage backend on your instances - that is the second place i would look11:23
donnydmaybe also try some fio disk benchmarking to ensure your instances can write to disk at faster than 10MB/s11:24
*** ociuhandu has joined #openstack-nova11:25
*** ociuhandu has quit IRC11:26
*** ociuhandu has joined #openstack-nova11:26
jawad_axd@donnyd I am using ceph as storage backend.11:29
donnydI would start with a disk benchmark then11:30
jawad_axdOkay..thats good pointer. I will look into it. Thanks11:30
donnydalso maybe reachout to #openstack-operators11:30
jawad_axdSure.11:31
donnydthat is where all the operators hang out and you may get to an end a little sooner there11:31
*** ociuhandu has quit IRC11:31
donnydnp @jawad_axd11:32
*** avolkov has joined #openstack-nova11:36
*** ratailor_ has quit IRC11:46
*** pcaruana has joined #openstack-nova11:48
*** brinzhang has quit IRC11:52
openstackgerritVladyslav Drok proposed openstack/nova master: Fix volume attachment rollback  https://review.opendev.org/70484711:57
openstackgerritStephen Finucane proposed openstack/nova-specs master: Re-propose the flavor extra spec validation spec  https://review.opendev.org/68265512:09
*** damien_r has quit IRC12:17
*** damien_r has joined #openstack-nova12:18
openstackgerritsean mooney proposed openstack/os-vif master: [OVS] VLAN tag should be set in the Port register  https://review.opendev.org/70337312:19
*** pcaruana has quit IRC12:21
*** damien_r has quit IRC12:22
*** mvkr has quit IRC12:26
gibistephenfin: there are two additional places that uses USE_PYTHON3 in our tree. Can we get rid of those as well now? https://review.opendev.org/#/c/69538012:32
sean-k-mooneygibi: you mean in the legacy jobs12:35
sean-k-mooneygibi: we could remove them there at this point too however i htink we might need to keep it for grenade12:35
*** xek_ has quit IRC12:36
gibisean-k-mooney: do we have grenade job where the from state is py27 and the dest state is py36?12:36
sean-k-mooneyno12:36
sean-k-mooneyat least not intentionally12:36
sean-k-mooneywe are having issue related to that however12:37
sean-k-mooneyspecificly because on train devstack install under py2 and py3 on train when you enable py312:37
gibiI see.12:37
gibimy knowledge is limited here so I follow your lead12:38
sean-k-mooneyand that causees issues with osc and other console script still being the python 2 version in the py3 only ussuri12:38
sean-k-mooneygibi: i belive its still one of the issue tosky is trying to fix in the new zuul v3 native grenade job to get plugins to work12:38
gibisean-k-mooney: OK, thanks12:39
gibistephenfin: +A-d https://review.opendev.org/#/c/695380/12:39
sean-k-mooneygibi: did you have a chance to review the numa proposal following the conversation efried and i had yesterday12:40
stephenfingibi: Thanks. Looks like sean-k-mooney addressed your earlier question :)12:40
sean-k-mooneystephenfin: acully ^ goes for you and bauzas12:40
stephenfinI saw the etherpad, yup. LGTM12:42
sean-k-mooneystephenfin: bauzas gibi https://review.opendev.org/#/c/552924/15/specs/ussuri/approved/numa-topology-with-rps.rst@126 is the main comment.12:42
sean-k-mooneystephenfin: cool12:43
openstackgerritStephen Finucane proposed openstack/nova-specs master: Re-propose the flavor extra spec validation spec  https://review.opendev.org/68265512:43
sean-k-mooneyhehe i was just reviewing that12:43
sean-k-mooneyalthough its small so ill start again12:43
gibisean-k-mooney: I read the scrollback but did not read the etherpad and the review yet. stay tuned12:45
sean-k-mooneywill do12:46
sean-k-mooneythe etherpad has a diagram which hopefully makes the design clear12:46
sean-k-mooneywhen it comes to placement pictures help a lot12:46
gibitotally agree ^^12:47
sean-k-mooneystephenfin: im happy with the latest version of the extra spec validation12:55
gibistephenfin: I have one, hopefully the last question in https://review.opendev.org/#/c/682655/5/specs/ussuri/approved/flavor-extra-spec-validators.rst@15212:58
openstackgerritMerged openstack/nova-specs master: Non-Admin user can filter their instances by more filters  https://review.opendev.org/70176313:02
stephenfingibi: replied13:03
*** damien_r has joined #openstack-nova13:03
sean-k-mooneystephenfin: if you are storing the validator in a dict you could use set_defautl to get the right behavior13:06
sean-k-mooneydepending on how you are doing the lookup13:06
stephenfinset_default?13:06
sean-k-mooneyon a dict set default only sets the value if the key is not already present13:07
stephenfin oh, I was going to hard fail if it was there13:07
stephenfinrather than ignore it13:07
sean-k-mooneyso if you regeister all the intree ones first by namespace and then  the out of tree ones the intree would win13:07
sean-k-mooneyya thats an option13:08
sean-k-mooneybut i have found that if you try to block peole doing things they will find a way to work around it13:08
sean-k-mooneylike with os-vif13:08
sean-k-mooneywe blocked people form importing our internal module by requireing the plugins to start with os_vif to only support intree plugins13:09
sean-k-mooneyso a vendor that will go unnamed renamed there plugin to be able to import them13:09
stephenfin\o/13:10
kashyapStable folks, am I correct in assuming that this is a "feature" and not a likely backport candidate for Train? -- https://opendev.org/openstack/nova/commit/de512f2c0213:12
gibistephenfin: thank. I'm +2 on the extra spec validation again13:12
kashyapIt's a small, non-invasive change, though13:12
sean-k-mooney kashyap changing default ya i think that is not a backport candiate13:13
stephenfinkashyap: not stable-core, but the change in behaviour of the extra spec suggests to me it's not backportable, no13:13
stephenfinjinx13:13
sean-k-mooney:)13:13
stephenfingimme my coke, damn it13:13
lyarwoodyup, I wouldn't describe it as non-invasive tbh13:13
kashyapstephenfin: sean-k-mooney: Yeah, guessed as much13:13
sean-k-mooneykashyap: also i missed that merging congrats its nice to have that done13:13
sean-k-mooneykashyap: i also would not really like to backport that downstream13:14
kashyaplyarwood: Yeah, I was a "broad" def of "non-invasive" (db changes, etc)13:14
kashyapsean-k-mooney: I won't.  Just wondering, in case people come knocking13:14
sean-k-mooneykashyap: we could maybe add it to 16 since that is not released yet13:14
openstackgerritStephen Finucane proposed openstack/nova master: WIP: api: Add support for extra spec validation  https://review.opendev.org/70464313:14
*** ociuhandu has joined #openstack-nova13:14
sean-k-mooneybut ya i think that will have to wait to 1713:14
stephenfindon't bother reviewing that ^ I've still a lot to do13:15
sean-k-mooneystephenfin: by the way you dont need to my "we shoudl really move this" comments13:15
stephenfineh, it's good to note for the future13:16
sean-k-mooneywe shoudl totally rename/move them at somepoint but ya not related to your work13:16
*** hariii2503 has quit IRC13:17
stephenfinefried: When you're about, if you'd care to provide docs for these (or point me to someone that could) I'd be most grateful https://review.opendev.org/#/c/704643/3/nova/api/validation/extra_specs/powervm.py13:17
toskysean-k-mooney, gibi: we don't have jobs which starts from py27 and ends with py3*; the patch which backports the "don't install python2 library packages" has been backported to train a few hours ago, so grenade jobs should be fine for a final review (and merge) now13:18
gibisean-k-mooney, efried: I like the numa modeling proposal. thanks for crafting it13:18
gibitosky: ack, thanks13:19
toskygibi: afaik (gmann can provide a better answer), we don't support at all that py2->py3 scenario; if you want to test the train->master migration, just deploy train with py313:20
sean-k-mooneytosky: awsome13:20
*** ociuhandu has quit IRC13:20
sean-k-mooneytosky: that more because we dont have a good way of cleaning the packages13:21
*** maciejjozefczyk has quit IRC13:21
gmannyeah and do not have someone to do that13:21
sean-k-mooneywell we are also not sure if there could in be a difference in the rpc traffic somehow13:22
sean-k-mooneywe dont think there will be but that was one of the worries. e.g. the ovo we send over amqp could some how be incompatiable13:23
*** xek has joined #openstack-nova13:23
sean-k-mooneyi dont think that is the case but i know it was raised in the past13:23
sean-k-mooneyno one has reported upgrade issues at least so its untested in the gate but appears to work in reality13:24
*** nweinber has joined #openstack-nova13:26
*** artom has quit IRC13:26
gmannyeah, other integration py2 job on train or older release along with py3 jobs can tell both py version works well and should not be issue on upgrade with py2 version too. but yes it is not tested on gate.13:26
gibistephenfin: if you can fix the funct test then I can +2 https://review.opendev.org/#/c/66252213:28
*** rpittau|bbl is now known as rpittau13:29
*** maciejjozefczyk has joined #openstack-nova13:30
*** mlycka has joined #openstack-nova13:31
*** mlycka has quit IRC13:31
*** mrch_ has joined #openstack-nova13:47
openstackgerritSylvain Bauza proposed openstack/nova master: Add a placement audit command  https://review.opendev.org/67011213:55
openstackgerritSylvain Bauza proposed openstack/nova master: Avoid PlacementFixture silently swallowing kwargs  https://review.opendev.org/69518013:55
bauzasgibi: I updated the audit command for fixing the tests14:00
bauzasgibi: I also saw your other change for the PlacementFixture14:00
bauzasas you want14:00
efriedstephenfin: Hah, "docs".14:01
efriedI fear there were never actually docs. But let me go refresh my memory on where they're translated over to actual PowerVM-isms (which *should* have docs... somewhere).14:03
*** pcaruana has joined #openstack-nova14:03
efriedI don't think it would be super unreasonable for you to assign the work to the #openstack-powervm team to track that down. But only if you don't want it to get done.14:04
openstackgerritMerged openstack/nova-specs master: Add action event fault details  https://review.opendev.org/69966914:04
*** alistarle has joined #openstack-nova14:07
gibibauzas: ack, I will look back after my call14:07
*** alistarle has quit IRC14:08
*** bjolo has joined #openstack-nova14:09
openstackgerritMerged openstack/os-vif master: move os-vif-ovs to be a non legacy job.  https://review.opendev.org/70160114:10
openstackgerritMerged openstack/os-vif master: Revert "[Follow Up] OVS DPDK port representors support"  https://review.opendev.org/70367214:10
sean-k-mooneyefried: am i wrong in thinking that all extra spec are ment to have a spec or at least a blueprint associated with them when added14:10
sean-k-mooneyefried: today we would also add docs and a release note to that list14:10
efriedsean-k-mooney: I don't recall a rule like that, but it's not a bad one.14:11
sean-k-mooneybut im wondering if those would be documented in the nova spec repo14:11
sean-k-mooneyefried: well its technically an api change even though its an unversioned one14:11
efriedYou'll have to slap my five-years-ago wrist.14:11
sean-k-mooneynormally the accompany bigger features so they get pulled into a spec or blueprint by default14:12
efriedThere certainly aren't in-repo docs for the powervm: extra specs.14:12
efriedor in the oot driver repo, for that matter.14:13
openstackgerritwaleed mousa proposed openstack/os-vif master: [Follow Up] OVS DPDK port representors support  https://review.opendev.org/70501814:13
sean-k-mooneyso looks like it was intoduced in tree in ocata14:14
sean-k-mooneyhttps://github.com/openstack/nova-specs/blob/master/specs/ocata/approved/powervm-nova-compute-driver.rst14:14
sean-k-mooneyactully pike14:15
efriedtook us a while14:15
efriedI don't think you'll find docs for the extra specs though.14:15
sean-k-mooneyits ther in queens too14:16
sean-k-mooneylook liek ye added feature each release for a few releases14:16
efriedyes14:16
efriedstephenfin: This is going to be a manual process (for someone) I'm afraid.14:16
sean-k-mooneyspeaking of manual proces i better go update the spec repo with the implemented spec for train14:17
sean-k-mooneythere is a script to do that it just needs to be run14:18
*** eharney has quit IRC14:18
*** dtantsur is now known as dtantsur|brb14:18
sean-k-mooneybut ya no info in the spec repo. i guess sice it was out of tree there was no need14:18
*** mriedem has joined #openstack-nova14:19
efriedit just goes to show that the only consumer was internal anyway, and already knew what all that stuff meant.14:19
sean-k-mooneywhen yw were working on it day to day14:19
sean-k-mooneyhopefully there are code comments for each of them14:20
efriednope.14:20
efriedI never knew/understood all of them even when I was working on it day to day.14:20
efriedVery specialized knowledge for operators of a power data center.14:20
efriedsome pretty mysterious stuff in there.14:20
sean-k-mooneyin that case the only thing that will save us is commit history14:20
efriedno14:20
efriedcommit history won't help14:20
efriedwhy would commit history have documentation if we don't have documentation?14:21
sean-k-mooneythe commit that added it should at least explain what it does to soem degree14:21
sean-k-mooneyam i hoping for too much14:21
efriedyeah, no.14:21
*** dklyle has quit IRC14:21
efriedMaybe for newer ones that were added after the main blob was put in.14:22
sean-k-mooneywell then i second your suggest to punt this to #openstack-powervm14:22
sean-k-mooneyoh i ment the out of tree drivers git repo history not the nova one14:23
efriedyeah, I know what you meant. Same answer.14:23
sean-k-mooney:)14:23
sean-k-mooneyim going to grab breakfast/lunch brb14:24
efriedOh snap! stephenfin: turns out PowerVC (the $ product that sits on top of this) allows you to pass the extra specs through, and actually documented them: https://www.ibm.com/support/knowledgecenter/SSXK2N_1.4.4/com.ibm.powervc.standard.help.doc/powervc_pg_flavorsextraspecs_hmc.html14:29
*** ociuhandu has joined #openstack-nova14:29
*** Liang__ has joined #openstack-nova14:32
*** psachin has quit IRC14:32
*** links has quit IRC14:33
*** pcaruana has quit IRC14:34
sean-k-mooneydamb good fined. so ya powervm:dedicated_proc is cpu pinning like i guessed14:35
efriedAs you probably already figured out, VMBuilder._ATTRS_MAP [1] is the list of extra specs the powervm driver pays attention to.14:35
efriedAnd we know those are all the allowable keys because [2] and [3].14:35
efriedI think you'll find these are a subset of what's in the above doc; that's just because the in-tree driver is still behind the oot driver. For your purposes, just ignore the rest.14:35
efried[1] https://opendev.org/openstack/nova/src/branch/master/nova/virt/powervm/vm.py#L37614:35
efried[2] https://opendev.org/openstack/nova/src/branch/master/nova/virt/powervm/vm.py#L442-L44314:35
efried[3] https://opendev.org/openstack/nova/src/branch/master/nova/virt/powervm/vm.py#L466-L47314:35
efriedsean-k-mooney: I think it's actually a bit more complex than that.14:35
efriedI think dedicated proc means you get a whole physical processor.14:36
efriedwhereas shared means you get a piece of one14:36
sean-k-mooneywell its pinnign with the isolate polciy in libvirt parlance14:36
efriedbut I think you're pinned regardless.14:36
efriedbecause powervm can hard partition a proc14:36
sean-k-mooneyoh ok well it its basicaly  hw:cpu_policy=dedicated + hw:cpu_thread_policy=isolate pre train14:37
efriedso you can have, like, 20 virtual procs off of a physical proc, but you can set a minimum guarantee.14:37
sean-k-mooneyat least the semantic meaning is the same14:37
efriedI suspect powervm ops would disagree with you, but I'm not knowledgeable enough to do so :P14:38
efriedLet me put it this way: if the semantic meaning were the same, we would have just mapped the existing extra specs.14:38
sean-k-mooneyare you sure about that :)14:38
efriedno14:38
sean-k-mooneyadding your own might have just been quicker14:38
efriedbut pretty sure.14:38
*** ociuhandu has quit IRC14:39
sean-k-mooneyin anycase when this validation work is complete i think it would be workthseeing if we can normalise the extra specs14:39
efriedIf we had all the dev resources in the world, sure.14:40
efriedrealistically, I see no chance of that happening.14:40
sean-k-mooneyi dont think it will mater in all cacuse but the powervm:shared_weight seam a lot like the cpu:shares option the libvirt and vmware14:41
sean-k-mooneyya i guess14:41
sean-k-mooneyanyway really food this time o/ stephenfin when you get a chance can you review https://review.opendev.org/#/c/703373/ in os-vif14:42
*** artom has joined #openstack-nova14:43
*** artom has quit IRC14:48
*** jawad_axd has quit IRC14:50
*** dklyle has joined #openstack-nova14:50
*** jawad_axd has joined #openstack-nova14:50
*** francoisp has joined #openstack-nova14:53
*** jawad_ax_ has joined #openstack-nova14:54
*** jawad_a__ has joined #openstack-nova14:55
*** jawad_axd has quit IRC14:55
francoisphello lyarwood, stephenfin, doing code rework for https://review.opendev.org/#/c/669674/ and I have a question for you:14:58
francoispstephenfin you put in a comment at nova/conf/compute.py, line 871:14:58
francoisp"If something is failing to complete after 5 loops, surely that's an issue that bumping the value will only mask?"14:58
francoispI understand we want do do away with the config option, and stick with a hard-coded value for max number of re-tries.14:58
francoispare you suggesting we use a lower value (ex.: max 3 retries) ?14:58
*** udesale has joined #openstack-nova14:58
*** jawad_ax_ has quit IRC14:58
*** jawad_a__ has quit IRC15:00
*** pcaruana has joined #openstack-nova15:02
*** ociuhandu has joined #openstack-nova15:03
*** salmankhan1 has joined #openstack-nova15:03
*** salmankhan has quit IRC15:04
*** salmankhan1 is now known as salmankhan15:04
*** trident has quit IRC15:06
*** artom has joined #openstack-nova15:11
*** NostawRm has quit IRC15:15
*** mrch_ has quit IRC15:15
*** NostawRm has joined #openstack-nova15:16
*** trident has joined #openstack-nova15:17
*** eharney has joined #openstack-nova15:18
*** jaosorior has joined #openstack-nova15:21
*** ociuhandu has quit IRC15:22
*** jaosorior has quit IRC15:27
*** ccamacho has quit IRC15:27
*** Sundar has joined #openstack-nova15:28
SundarHello dansmith, sean-k-mooney: I am here if you have any questions.15:28
*** psachin has joined #openstack-nova15:28
dansmithSundar: about what? the latest rev? I haven't gone through anything yet this morning, but was hoping efried was going to take the next pass through pretty soon15:31
efried"pretty soon" yah.15:33
efriedstephenfin: sending https://review.opendev.org/#/c/682655/15:34
efriedbauzas: I didn't give you a chance for another swing at ^ -- please lmk if you have issues.15:34
* bauzas clicks15:34
bauzasoh cool15:34
bauzashonestly, I trust you15:34
*** salmankhan1 has joined #openstack-nova15:35
bauzasif I have time, I'll leave a +1 for the posterity15:35
efriedcool15:35
efriedbauzas: did you get a chance to catch up on the discussion for the numa topo spec?15:35
bauzasefried: unfortunately no15:36
bauzasyesterday evening my time you mean ?15:36
efriedYes, but summarized in the spec comments and an etherpad linked therefrom. No need to read the whole IRC log.15:36
sean-k-mooneybauzas: efried sumerised it in the spec and linked to the conversation on irc and an ehterpad15:36
efriedbauzas: no real hurry (other than spec freeze in a couple weeks), but buzz me or sean-k-mooney if you have concerns or need clarification or whatever.15:37
openstackgerritStephen Finucane proposed openstack/nova master: Recalculate 'RequestSpec.numa_topology' on resize  https://review.opendev.org/66252215:37
*** salmankhan has quit IRC15:38
*** salmankhan1 is now known as salmankhan15:38
stephenfingibi: fixed those functional tests ^15:39
bauzassean-k-mooney: efried: no worries, i'll look at it15:39
stephenfingot burned by my own refactoring work /o\15:39
stephenfinI really need to stop changing how those things work15:39
bauzasand thanks for discussing this, even if I was parenting15:39
bauzasgibi: stephenfin: efried: we have this very old cmd that would help ops, if you like getting it a swing https://review.opendev.org/#/c/670112/15:40
bauzasmriedem would be surprised if we eventually merge it :p15:40
sean-k-mooneyafter backporting acrouss 4 release im not sure you can resist it15:40
sean-k-mooneythe sad part is each refactoring does make them better15:41
stephenfinbauzas: Oh, that looks hairy. Can you ask me Monday once FOSDEM's behind me? :)15:42
bauzasstephenfin: well, if you're not hit by the Coronavirus, of course :D15:43
* bauzas couldn't resist to mention this thread that was LOLesque15:43
* stephenfin packs hand sanitizer15:43
sean-k-mooneyna stephen has better taste in beer then to be hit by that15:43
*** ociuhandu has joined #openstack-nova15:43
*** spatel has quit IRC15:43
bauzasat least there should be good news15:44
bauzasthe Delirium bar shouldn't be packed like usual times15:44
bauzasstephenfin: ^15:44
* bauzas has an idea how to make room at the Delirium : just cough15:45
*** priteau has joined #openstack-nova15:46
openstackgerritMerged openstack/nova-specs master: Re-propose the flavor extra spec validation spec  https://review.opendev.org/68265515:46
openstackgerritStephen Finucane proposed openstack/nova-specs master: Address comments on 'flavor-extra-spec-validators' spec  https://review.opendev.org/70504715:48
*** ratailor has joined #openstack-nova15:48
* sean-k-mooney look like icould have gone to fosdem after all since i wont be closing on the house for another week at this point :(15:49
*** ratailor_ has joined #openstack-nova15:50
*** spatel has joined #openstack-nova15:53
bauzasevery year I consider going to FOSDEM15:53
*** ratailor has quit IRC15:54
bauzasand every year I think it wouldn't be worth the energy I would need for being a speaker15:54
bauzasso, unless I pay...15:54
Sundardansmith: I responded and addressed your comments in my latest update last night. Understand you want efried to review first.15:54
dansmithack15:54
Sundarefried: I understand you have other things to take care of. I'll wait.15:55
sean-k-mooneybauzas: jay was thinking of going this year. i was hoping to see him but since i taough i would be getting the keys to the house im buying on monday i did not want to travel this weekend15:55
bauzasthat also means I would miss a skiing weekend. Unfair.15:56
efriedSundar: I need to do some PM-ish paperwork (reconcile blueprints with specs, kind of thing) ahead of this afternoon's meeting, but reviewing your series is next on my list after that.15:57
Sundarefried: Thanks.15:59
*** jmlowe has joined #openstack-nova16:00
*** gyee has joined #openstack-nova16:04
*** iurygregory has quit IRC16:05
*** maciejjozefczyk has quit IRC16:06
*** dtantsur|brb is now known as dtantsur16:06
*** xek has quit IRC16:10
*** ivve has quit IRC16:10
*** mvkr has joined #openstack-nova16:13
openstackgerritMerged openstack/nova-specs master: Address comments on 'flavor-extra-spec-validators' spec  https://review.opendev.org/70504716:16
efriedstephenfin: did you see response earlier about powervm extra specs?16:16
*** eharney has quit IRC16:16
stephenfinefried: I did. Did you happen to leave comments on the patch, out of curiosity?16:16
*** eharney has joined #openstack-nova16:16
stephenfinIf not, could you? I probably won't get a chance to respin that until next week now16:17
efriedstephenfin: The code side? No, I wasn't planning to do a pass through that until... uh, later. But assuming you've got a placeholder in there for powervm, I'll go stuff the link in there.16:18
efriedstephenfin: done16:20
stephenfinta16:21
*** jawad_axd has joined #openstack-nova16:23
*** tbachman has joined #openstack-nova16:25
stephenfingibi: quick question: what move operations, if any, did we support for instances with QoS interfaces in Train?16:27
*** jawad_axd has quit IRC16:27
* stephenfin notes he has to review the remainder of that series again16:27
efriedstephenfin: per release notes, cold migrate and resize https://docs.openstack.org/releasenotes/nova/train.html16:37
efriedmm, runways could use a refresh https://etherpad.openstack.org/p/nova-runways-ussuri16:39
*** mlavalle has joined #openstack-nova16:39
efriedIs anyone paying attention to those anymore?16:39
efriedlyarwood: I'm going to move stable device rescue into a slot, mkay?16:40
*** udesale has quit IRC16:43
lyarwoodefried: yarp, was going to ask about runways in the meeting this evening.16:43
lyarwoodefried: I assume this means they are still a thing?16:43
*** jawad_axd has joined #openstack-nova16:43
efriedI don't know. I, for one, hadn't looked at that etherpad in *months*16:44
lyarwoodkk16:44
efriedEasy enough to update it though, in case anyone is.16:44
efrieddustinc: Reckon it wouldn't be wrong for you to put provider config in there16:45
efriedwhat's the status btw? Are we waiting for an update based on gibi's last round of review?16:46
*** ociuhandu has quit IRC16:46
*** jawad_axd has quit IRC16:48
stephenfinefried, bauzas, dansmith, <Anyone else that cares>: We had a bug reported downstream complaining that the 'os-hypervisors' API doesn't list CPUs in the new cpu_(shared|dedicated)_set config options. That was intentional on my behalf because the API is awful and I wanted to deprecate it16:51
stephenfinI think we can get most of that information from placement now so it's also unnecessary16:51
*** ociuhandu has joined #openstack-nova16:51
bauzasyup, we can tell the people who pay us : 'go use osc-placement'16:52
stephenfinAnyone know of a reason to keep it, and do I need a spec to deprecate it in a microversion or is a specless BP good enough?16:52
efriedstephenfin: if we can deprecate that API, let's do that.16:52
efriedahcrap, I can never remember how that works. gmann?16:52
bauzaslast time we discussed, some ops disagreed AFAICR16:52
bauzasI would first raise the problem in a ML thread16:52
* gibi had a 3 hour long call, reading scrollback now16:53
bauzasand ask ops what they think16:53
dansmithif you want to deprecate then a microversion yeah16:53
bauzasand yeah a microversion if so16:53
efriedA microversion to deprecate? Or a microversion to remove?16:53
kashyapgibi: 3-hour long call, and then right after working?  You deserve a drink16:54
stephenfinWell, to remove16:54
efriedthe former doesn't make a lot of sense, does it? Is there some kind of signal we give in a response?16:54
stephenfinBut it'll still be there in the older microversions16:54
openstackgerritMerged openstack/os-vif master: [OVS] VLAN tag should be set in the Port register  https://review.opendev.org/70337316:54
stephenfini.e. we won't HTTP 410 of course16:54
gibikashyap: I wrap up my day quickly then drink :)16:54
gibistephenfin, bauzas: I added your patches to my queue for re-review for tomorrow16:55
bauzasnp, thanks16:55
bauzasgibi: and I totally understand your pain of long-running meetings16:55
gibistephenfin: qos + move in train, based on https://review.opendev.org/#/q/topic:bp/support-move-ops-with-qos-ports it is resize and cold migrate that is supported in train16:56
melwittyeah, if you want to deprecate os-hypervisors, I think that should (1) be run by some ops people like bauzas said and (2) make sure everything you can get in one swoop from os-hypervisors is also gettable from placement in one swoop. maybe two swoops would also be ok, or I guess could talk about placement cli batching. just some things to think about16:58
gibiefried: about the provider config, I think the ball is at dustinc16:58
bauzasagreed with melwitt, the (2) is important16:58
bauzasand IIRC, that was why we never deprecated this API16:59
bauzasbecause of the feature gap16:59
bauzasbut maybe I'm wrong, so I would just propose to identify all the parity between the API and the osc-placement calls and document it16:59
melwittyeah, I assumed that's why it's still around but tbh I have never dug in more16:59
bauzasit would be easier to pull the trigger and convince people after that16:59
stephenfinmelwitt: So come up with a osc-placement replacement for the 'openstack hypervisor show' command?17:00
bauzasI can't recollect in my mind but I remember we had a convo around it in some f2f like summit or ptg17:00
bauzasstephenfin: document it first17:00
bauzasand then ask whether ops are okay with the replacement as it is17:00
bauzas(that'd be my recommendation in order not to freak out ops)17:01
melwittstephenfin: no sorry, I was just saying if it takes multiple calls to placement to gather the same data that os-hypervisors gives in one call (I don't know if it does, but if this is the case) then consider a osc-placement cli batch command to give operators that ease that they had before with os-hypervisors17:01
stephenfinAh, gotcha17:01
* stephenfin adds a TODO to investigate this before posting to the list17:01
melwitt++ yeah this is all hypothetical until you dig in, just wanted to cover the considerations at a high level17:02
*** jawad_axd has joined #openstack-nova17:04
*** ratailor_ has quit IRC17:05
*** factor has quit IRC17:08
*** tesseract has quit IRC17:08
*** jawad_axd has quit IRC17:08
openstackgerritMerged openstack/nova master: zuul: Remove unnecessary 'USE_PYTHON3'  https://review.opendev.org/69538017:09
gibidansmith: if you have time, I replied to your comments in https://review.opendev.org/#/c/70226117:12
*** jmlowe has quit IRC17:12
efrieddustinc: are you planning to do anything further with https://review.opendev.org/#/q/topic:bp/openstacksdk-in-nova+status:open ?17:12
*** ociuhandu has quit IRC17:13
*** ociuhandu has joined #openstack-nova17:13
dansmithgibi: okay I'll have to rebuild context on it17:15
*** Sundar has quit IRC17:16
dansmithgibi: are you saying that we've received an instance with a modified pci request over rpc from the destination and we're doing the refresh to dump that and avoid persisting the changed-but-no-longer-relevant field on the instance?17:17
gibidansmith: exactly17:19
dansmithif so, refresh seems like a big hammer for that because it will drop any other changes we have on the instance that we might want (even if that happens in the future). Looks like refresh can't take a list of fields (which I guess makes sense) so I don't really have an alternative17:19
*** jmlowe has joined #openstack-nova17:19
*** priteau has quit IRC17:21
gibidansmith: right now I don't feel we have a problem with refresh, but if it happens in the future then we need to extend the ovo interface or start saveing the old value of the pci request somewhere17:21
dansmithrefresh isn't an ovo thing, it's an instance thing17:21
efriedsean-k-mooney: You still planning to drive https://review.opendev.org/#/q/topic:bp/image-metadata-prefiltering+status:open in ussuri?17:21
gibidansmith: ohh, then I can hack on it right now17:21
dansmithgibi: what about checking obj_what_changed() right before the refresh and asserting that it's either empty or just contains the pci request info and logging a warning if not?17:22
dansmithgibi: in fact if you did that you could avoid the expensive refresh for everyone else if it's not SRIOV17:23
gibidansmith: I can do that. But I can also extend the refresh() call with an optiona; field list17:23
dansmithgibi: I'm less excited about the latter just because of the potential effort in validating it, but it seems like that might be useful17:23
*** jmlowe has quit IRC17:24
dansmithgibi: I think the reason we didn't initially do that is because you may be creating a franken-instance where you've pulled some updates from the db and not others, which are co-dependent and then would save it back in an inconsistent state17:24
gibidansmith: OK. I will follow your suggestion and check obj_what_changed and log a warning if we would drop other fields than pci17:24
dansmithgibi: and avoid the refresh if nothing is changed yeah?17:24
gibiyepp17:24
*** jmlowe has joined #openstack-nova17:24
dansmithcool17:24
gibiand make a note about selective refresh for later17:24
gibidansmith: thanks!17:24
*** jawad_axd has joined #openstack-nova17:25
dansmithack, also note my piconit :)17:25
gibiack :)17:25
* gibi leaves for today17:28
gibio/17:28
*** jawad_axd has quit IRC17:29
*** ociuhandu has quit IRC17:30
*** nweinber has quit IRC17:32
*** nweinber has joined #openstack-nova17:32
*** evrardjp has joined #openstack-nova17:33
*** TxGirlGeek has joined #openstack-nova17:40
gmanncmurphy: can you revisit this review. i replied in the comment,  https://review.opendev.org/#/c/701624/17:41
gmanndoing deprecation in base rule is to avoid adding the deprecation warning in each rule using base rule as their check_str17:41
gmanncmurphy: you can find more discussion here on doing deprecation in base rule than specific rules - https://review.opendev.org/#/c/676682/4/nova/policies/admin_actions.py17:44
*** jawad_axd has joined #openstack-nova17:45
*** salmankhan has quit IRC17:46
*** jmlowe has quit IRC17:48
efriedstephenfin: is there anything further to be done for https://blueprints.launchpad.net/nova/+spec/remove-xvpvncproxy or can I mark it complete?17:49
stephenfinefried: Nope, melwitt and mriedem closed it out a few weeks back. It's done.17:50
efriedsweet17:50
*** jawad_axd has quit IRC17:50
*** jmlowe has joined #openstack-nova17:51
cmurphygmann: i will come back to it today, thanks for pointing me to the discussion17:51
cmurphyi'm hoping lbragstad could also offer some insights ^17:52
gmanncmurphy: thanks17:52
gmann+117:52
*** dtantsur is now known as dtantsur|afk17:52
*** nweinber has quit IRC17:57
*** derekh has quit IRC18:00
*** rpittau is now known as rpittau|afk18:02
*** jawad_axd has joined #openstack-nova18:06
*** igordc has joined #openstack-nova18:09
*** jmlowe has quit IRC18:10
*** ralonsoh has quit IRC18:11
*** jawad_axd has quit IRC18:11
*** jmlowe has joined #openstack-nova18:21
*** luksky has quit IRC18:25
efrieddansmith: Are you pursuing this https://review.opendev.org/#/c/693226/ ?  (nova-audit)18:26
efriedIf so, would you please throw out a bp for it? I'm getting those ducks lined up.18:26
*** jawad_axd has joined #openstack-nova18:27
dansmithefried: no, I had abandoned it18:28
efriedoh, looks like melwitt restored it. melwitt ^ ?18:28
melwittI had restored it to encourage ops review, I was told the abandonedness confused the people who would comment on it18:29
*** jmlowe has quit IRC18:29
efriedmelwitt: k. Been a couple weeks. If you wouldn't mind putting up a blueprint so it's properly trackable. Then I guess we can go-no-go it at spec freeze time.18:30
melwittefried: yeah, makes sense. I will do that18:30
*** jawad_axd has quit IRC18:31
*** nweinber has joined #openstack-nova18:32
*** martinkennelly has quit IRC18:37
openstackgerritGhanshyam Mann proposed openstack/nova master: Deprecate base rules in favor of new rules  https://review.opendev.org/70162418:37
*** jmlowe has joined #openstack-nova18:38
gmanncmurphy: lbragstad done ^^18:38
*** bnemec has joined #openstack-nova18:41
*** ivve has joined #openstack-nova18:47
*** jawad_axd has joined #openstack-nova18:47
*** jawad_axd has quit IRC18:52
*** jmlowe has quit IRC19:05
*** luksky has joined #openstack-nova19:14
openstackgerritMerged openstack/nova master: Use COMPUTE_SAME_HOST_COLD_MIGRATE trait during migrate  https://review.opendev.org/69522019:22
openstackgerritMerged openstack/nova stable/stein: Remove 'test_cold_migrate_with_physnet_fails' test  https://review.opendev.org/70297119:22
*** bnemec has quit IRC19:24
*** Liang__ has quit IRC19:29
openstackgerritArtom Lifshitz proposed openstack/nova master: Functional tests for NUMA live migration  https://review.opendev.org/67259519:34
openstackgerritArtom Lifshitz proposed openstack/nova master: NUMA LM: Add func test for bug 1845146  https://review.opendev.org/68740419:35
openstackbug 1845146 in OpenStack Compute (nova) train "NUMA aware live migration failed when vCPU pin set" [High,Fix committed] https://launchpad.net/bugs/1845146 - Assigned to Dan Smith (danms)19:35
*** jmlowe has joined #openstack-nova19:48
stephenfinsean-k-mooney: want to drop your -W from https://review.opendev.org/#/c/703115/ now that the stable/stein changes have merged19:52
sean-k-mooneydone19:53
*** TxGirlGeek has quit IRC20:05
*** hamzy_ has joined #openstack-nova20:11
*** hamzy has quit IRC20:14
*** psachin has quit IRC20:16
*** READ10 has joined #openstack-nova20:25
*** jawad_axd has joined #openstack-nova20:31
*** jawad_axd has quit IRC20:35
*** rcernin has quit IRC20:36
*** artom has quit IRC20:49
*** gentoorax has quit IRC20:50
*** gentoorax has joined #openstack-nova20:51
*** jawad_axd has joined #openstack-nova20:51
*** jawad_axd has quit IRC20:56
efriedNova meeting shortly in #openstack-meeting20:57
*** TxGirlGeek has joined #openstack-nova21:07
*** jawad_axd has joined #openstack-nova21:12
*** eharney has quit IRC21:15
*** jawad_axd has quit IRC21:16
*** dpawlik has quit IRC21:25
*** jawad_axd has joined #openstack-nova21:32
*** READ10 has quit IRC21:36
*** jawad_axd has quit IRC21:37
*** damien_r has quit IRC21:42
*** slaweq has quit IRC21:43
*** slaweq has joined #openstack-nova21:45
*** spatel has quit IRC21:46
melwittefried: created https://blueprints.launchpad.net/nova/+spec/nova-audit21:48
efriedthanks melwitt21:49
*** tbachman has quit IRC21:52
*** jawad_axd has joined #openstack-nova21:53
*** slaweq has quit IRC21:55
*** jawad_axd has quit IRC21:57
openstackgerritGhanshyam Mann proposed openstack/nova master: Add test coverage of existing attach_interfaces policies  https://review.opendev.org/70512622:16
*** jawad_axd has joined #openstack-nova22:21
*** tbachman has joined #openstack-nova22:21
*** efried has quit IRC22:24
*** jawad_axd has quit IRC22:25
*** efried has joined #openstack-nova22:25
*** sapd1 has joined #openstack-nova22:25
*** sapd1_ has quit IRC22:26
*** nweinber has quit IRC22:30
openstackgerritGhanshyam Mann proposed openstack/nova master: Remove old policy enforcement in attach_interfaces  https://review.opendev.org/70512722:40
*** jawad_axd has joined #openstack-nova22:42
*** jmlowe has quit IRC22:43
*** jawad_axd has quit IRC22:47
*** mriedem has left #openstack-nova22:51
openstackgerritGhanshyam Mann proposed openstack/nova master: Add test coverage of existing attach_interfaces policies  https://review.opendev.org/70512622:52
openstackgerritGhanshyam Mann proposed openstack/nova master: Add test coverage of existing attach_interfaces policies  https://review.opendev.org/70512622:55
*** READ10 has joined #openstack-nova23:00
*** ivve has quit IRC23:07
*** tkajinam has joined #openstack-nova23:10
*** READ10 has quit IRC23:14
openstackgerritGhanshyam Mann proposed openstack/nova master: Add test coverage of existing attach_interfaces policies  https://review.opendev.org/70512623:14
*** avolkov has quit IRC23:14
*** rcernin has joined #openstack-nova23:20
*** luksky has quit IRC23:21
*** jawad_axd has joined #openstack-nova23:23
*** jawad_axd has quit IRC23:28
melwittgmann: question on https://review.opendev.org/70162923:40
*** jawad_axd has joined #openstack-nova23:44
gmannmelwitt: replied. I am removing user_id from policy target in https://review.opendev.org/#/c/701642/23:45
gmannmelwitt: but if we keep this operation restriction at user level then we can keep.23:45
gmannwe do not pass user_id for most of the(i think all except user level API like keypair etc) API. it is all enforced at project level23:46
melwittgmann: ok. I'm thinking from the perspective of us having to keep the legacy policy behavior for some time or some transition period. is my understanding correct?23:46
melwittbecause from the look of the old tests, we support letting operators restrict password change to only the user set on the instance23:47
gmannmelwitt: yeah, that is good point. We can keep supporting it same way till we completely migrate to new23:48
melwittI'm happy to be wrong but I thought we were keeping current support as-is for now and if we want to change it, need some signal about deprecation and a transition period before dropping23:49
melwittI was reading this part of the spec again https://specs.openstack.org/openstack/nova-specs/specs/ussuri/approved/policy-defaults-refresh.html#backward-compatibility-and-migration-plan23:50
gmannyeah. by removing the user_id from target we can break some deployment.23:52
melwitt"Remove any project or user checks from the policy file defaults, as this is now done in code, without breaking user-id-based-policy-enforcement"23:52
*** jawad_axd has quit IRC23:52
melwittI'm wondering if we removed any in the already merged patches23:53
gmannno, this is first one where user_id is passed and i updated to remove that. in "pass  actual target" patches I pass the actual target wherever needed. like owner rule where project_id is needed.23:54
melwittok23:55
gmann"pass  actual target" patches can tell us if any where we are changing user-level enforcement23:55
melwittok, that is good to know23:56
melwittnot directly related to this, I do wonder if operators would be disappointed to lose user-level enforcement in the future on something like a admin password. but that's a separate issue23:57
melwittI see now in the pass actual target, thanks for the tip https://review.opendev.org/#/c/701642/1/nova/api/openstack/compute/admin_password.py23:58
gmannyeah, i think we need to change that with separate discussion if everyone ok. else keep it as it is.23:58
gmannmelwitt: i found one bug in attach_interface policy which is admin_or_owner but it pass for every context because project_id is not passed in policy target23:59
melwittyeah, agreed. I can't predict what operators would want to see there, would be a good question for the forum and if no one cares about user-level enforcement, we remove it after the transition period23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!