Tuesday, 2017-08-29

*** rajathagasthya has quit IRC00:12
*** yamamoto_ has joined #openstack-oslo00:13
*** yamamoto_ has quit IRC00:13
openstackgerritMerged openstack/oslo.messaging master: Ensure RPC endpoint target attribute is correct  https://review.openstack.org/49185100:13
*** ragasthya has quit IRC00:14
*** rajathagasthya has joined #openstack-oslo00:52
*** ragasthya has joined #openstack-oslo00:55
*** rajathagasthya has quit IRC00:56
*** yamamoto_ has joined #openstack-oslo01:14
*** yamamoto_ has quit IRC01:20
*** aselius has quit IRC01:37
*** spzala has quit IRC01:50
*** yamamoto_ has joined #openstack-oslo02:16
*** yamamoto_ has quit IRC02:22
*** ragasthya has quit IRC02:31
*** dave-mccowan has quit IRC02:32
*** yamamoto has joined #openstack-oslo02:49
*** gcb has joined #openstack-oslo02:50
*** yamamoto has quit IRC03:12
*** rajathagasthya has joined #openstack-oslo03:55
*** links has joined #openstack-oslo04:03
*** hoonetorg has quit IRC04:11
*** yamamoto has joined #openstack-oslo04:13
*** yamamoto has quit IRC04:19
*** hoonetorg has joined #openstack-oslo04:23
*** lpetrut has joined #openstack-oslo04:26
*** rajathagasthya has quit IRC04:47
*** lpetrut has quit IRC04:56
*** kornicameister has quit IRC05:03
*** pbourke has quit IRC05:10
*** pbourke has joined #openstack-oslo05:12
*** yamamoto has joined #openstack-oslo05:15
openstackgerritMerged openstack/osprofiler master: Make dependency on oslo.messaging runtime only  https://review.openstack.org/49215405:21
*** yamamoto has quit IRC05:21
*** yamamoto has joined #openstack-oslo06:13
*** yamamoto has quit IRC06:38
*** yamamoto has joined #openstack-oslo06:39
*** yamamoto has quit IRC06:39
*** pcaruana has joined #openstack-oslo06:39
*** rcernin has joined #openstack-oslo07:10
*** tesseract has joined #openstack-oslo07:25
*** Kimamisa has joined #openstack-oslo07:30
*** yamamoto has joined #openstack-oslo07:40
*** yamamoto has quit IRC07:45
*** ralonsoh has joined #openstack-oslo07:50
openstackgerritIlya Shakhat proposed openstack/osprofiler master: Remove dependency on oslo.log library  https://review.openstack.org/49850708:23
*** yamamoto has joined #openstack-oslo08:42
*** yamamoto has quit IRC08:47
*** lucas-afk is now known as lucasagomes08:59
*** Adri2000 has joined #openstack-oslo09:27
Adri2000hello09:27
Adri2000I've got a question regarding the [oslo_middleware] enable_proxy_headers_parsing option09:28
Adri2000does it hurt to enable it even if the service is *not* behind a reverse proxy?09:28
Adri2000if it doesn't hurt, why isn't it enabled by default?09:29
*** sambetts|afk is now known as sambetts09:36
*** yamamoto has joined #openstack-oslo09:43
*** yamamoto has quit IRC09:49
*** sdague has joined #openstack-oslo09:54
Adri2000looks like the explanation: https://git.openstack.org/cgit/openstack/oslo.middleware/commit/oslo_middleware/http_proxy_to_wsgi.py?id=f62c3a74c07238d91efb17e9ac64373f0889449009:55
Adri2000jaosorior: hello, regarding ^ could you explain the potential security problems of having enable_proxy_headers_parsing enabled when not behind a reverseproxy? I'm not sure I get it09:56
openstackgerritSami Makki proposed openstack/oslo.policy master: Add JSON output option to sample generator  https://review.openstack.org/49162910:02
*** rook is now known as rook|pto10:06
*** boden has joined #openstack-oslo10:24
*** lpetrut has joined #openstack-oslo10:34
*** lpetrut_ has joined #openstack-oslo10:34
*** pbourke has quit IRC10:35
*** pbourke has joined #openstack-oslo10:37
*** pbourke has quit IRC10:39
*** yamamoto has joined #openstack-oslo10:45
*** zxy has quit IRC10:47
*** zxy has joined #openstack-oslo10:48
*** yamamoto has quit IRC10:51
*** e0ne has joined #openstack-oslo10:52
*** e0ne has quit IRC10:56
*** e0ne has joined #openstack-oslo10:57
*** ansmith has quit IRC11:06
*** e0ne has quit IRC11:14
*** pbourke has joined #openstack-oslo11:20
*** raildo has joined #openstack-oslo11:25
*** e0ne has joined #openstack-oslo11:26
*** eck` is now known as eck`gone11:31
*** yamamoto has joined #openstack-oslo11:47
*** chhavi has joined #openstack-oslo11:48
chhaviharlowja: I am trying to use taskflows, have couple of queries for the same11:49
*** yamamoto has quit IRC11:52
*** lucasagomes is now known as lucas-hungry11:58
*** rmascena has joined #openstack-oslo12:00
*** raildo has quit IRC12:03
*** dave-mccowan has joined #openstack-oslo12:05
*** MVenesio has joined #openstack-oslo12:20
*** MVenesio has quit IRC12:20
openstackgerritPooja Jadhav proposed openstack/oslo.utils master: Check for valid uuid length  https://review.openstack.org/49878612:25
*** gcb has quit IRC12:29
*** gcb has joined #openstack-oslo12:30
*** eck`gone is now known as eck`12:43
*** yamamoto has joined #openstack-oslo12:49
*** ansmith has joined #openstack-oslo12:52
*** janzian has joined #openstack-oslo12:53
*** yamamoto has quit IRC12:54
*** lucas-hungry is now known as lucasagomes13:01
*** pblaho has quit IRC13:02
*** hoonetorg has quit IRC13:08
*** hoonetorg has joined #openstack-oslo13:09
*** kgiusti has joined #openstack-oslo13:13
*** gordc has joined #openstack-oslo13:15
*** eck` is now known as eck`gone13:16
*** ihrachys has joined #openstack-oslo13:18
*** links has quit IRC13:18
*** eck`gone is now known as eck`13:19
*** dave-mccowan has quit IRC13:19
*** lucasagomes is now known as lucas-brb13:26
Adri2000so https://bugs.launchpad.net/oslo.middleware/+bug/1590635 is related to what I said earlier13:28
openstackLaunchpad bug 1590635 in oslo.middleware "http_proxy_to_wsgi middleware shouldn't be disabled by default " [Undecided,New]13:28
Adri2000jaosorior: ^; or dims ^ as you +1'ed the initial change13:32
jaosoriorAdri2000: it's been a while, but you can potentially pass anything in the proxy headers; could be a very cleverly crafted string, on which there's barely any verification for on the OpenStack services side. So, ideally, these headers should only be set by the proxy (such as HAProxy)13:36
jaosoriorand if there's no need for it, then it should be disabled.13:36
openstackgerritWuKong proposed openstack/oslo-specs master: external pdp hood for oslo.policy  https://review.openstack.org/49254313:38
jaosoriorAdri2000: but yeah, if MOST deployments use a loadbalancer (which is probably true), then I guess it could actually default to true.13:40
Adri2000jaosorior: I understand that with http_proxy_to_wsgi enabled, the middleware will parse those headers and take action if they are present; if they are not present, the middleware should do nothing?13:40
Adri2000so I fail to see the added security risk :/13:40
*** dave-mccowan has joined #openstack-oslo13:41
jaosoriorAdri2000: right, but anybody could put any sort of crap into those headers. Which should ideally not be the case when you're behind a loadbalancer, since the loadbalancer would overwrite any setting coming from the client.13:41
Adri2000ah in that sense I see13:41
Adri2000so you are being careful in case the parsing function in oslo.middleware has some vulnerabilities, right?13:42
jaosoriorof course, depends if you configured the endpoint correctly13:42
jaosoriorthat won't help if you let those headers through in the haproxy config13:43
jaosoriorAdri2000: right13:43
Adri2000that's a good point, but that should be balanced with the fact that most/all production deployments use a reverse proxy in front of the APIs13:44
Adri2000I can probably comment in the bug report, it'd be nice to have other opinions as well13:44
Adri2000thanks for the clarification anyway!13:48
*** yamamoto has joined #openstack-oslo13:50
Adri2000https://bugs.launchpad.net/oslo.middleware/+bug/1590635 feel free to comment - I may send an email as well on this topic13:56
openstackLaunchpad bug 1590635 in oslo.middleware "http_proxy_to_wsgi middleware shouldn't be disabled by default " [Undecided,New]13:56
*** yamamoto has quit IRC13:56
lbragstadhey folks - i'd like to propose adding the ability to deprecate policies to oslo.policy. is it best to start that effort with a spec?14:02
openstackgerritWuKong proposed openstack/oslo-specs master: external pdp hood for oslo.policy  https://review.openstack.org/49254314:05
*** zxy has quit IRC14:21
*** lucas-brb is now known as lucasagomes14:41
*** yamamoto has joined #openstack-oslo14:52
openstackgerritMerged openstack/oslo.rootwrap master: Fix test_daemon_no_cleanup_for_uninitialized_server  https://review.openstack.org/49423714:54
*** yamamoto has quit IRC14:58
stevemardhellmann: poke15:18
stevemardhellmann: did you want to -1 this patch: https://review.openstack.org/#/c/491629/ ?15:18
stevemardhellmann: otherwise i was going to +A it, seems reasonable, but you had a concern about direction15:19
dhellmannstevemar : I think it's a bad idea, in principle, to add more support for something we're trying to deprecate. I don't feel strongly enough to -2 it though.15:19
stevemarwell now you've got me in a bind :)15:20
dhellmannit's fine to approve it if you think it's a good change. It just means a bit more work down the road when/if we drop JSON support. Maybe we'll never bother to do that, though.15:21
*** lucasagomes is now known as lucas-afk15:28
Kimamisajust to be sure, the only reason to switch to YAML is the possibility to add comments, right ?15:32
stevemarKimamisa: that was a motivating factor, yes15:33
Kimamisabut apart from that, is there any technical reason ( I mean code constraints )  that would prevent keeping both ?15:35
*** e0ne has quit IRC15:42
*** aselius has joined #openstack-oslo15:48
*** lpetrut_ has quit IRC15:50
*** yamamoto has joined #openstack-oslo15:54
*** rajathagasthya has joined #openstack-oslo15:55
stevemarKimamisa: not really, just as doug mentions, the whole move to yaml becomes harder15:59
*** yamamoto has quit IRC16:00
Kimamisastevemar: in this case, I think the switch will ta16:04
Kimamisake time16:04
Kimamisaand that's a good tool to have16:04
*** tesseract has quit IRC16:15
*** sambetts is now known as sambetts|afk16:21
*** rajathagasthya has quit IRC16:35
*** rajathagasthya has joined #openstack-oslo16:36
*** rcernin has quit IRC16:46
harlowjachhavi feel free to ask, depending on where in the world u are, it might be easier just to post any questions :)16:48
harlowja(instead of waiting for people to get online at the same time)16:48
*** pcaruana has quit IRC16:48
*** dave-mccowan has quit IRC16:50
*** lpetrut has quit IRC16:54
*** links has joined #openstack-oslo16:55
*** Kimamisa has quit IRC16:55
chhaviharlowja: I have a question on Retry, If I have a main flow and some subflows in linear order, and i want to attempt retry if any of the subflow fails.16:55
*** yamamoto has joined #openstack-oslo16:56
harlowjaok, u should just be able to put a retry node on the main flow and that should force a retry to happen16:56
chhaviin this case, if i add retry to each subflows, what i am seing if the final result is a failure after max attempt, since the flow is linear, the number of attempts is more.16:57
harlowjaya, i'd just add the retry to the top 'main flow'16:57
*** Kimamisa has joined #openstack-oslo16:58
chhaviwhat is the difference adding the retry to top or subflow, I was expecting since subflow fails, only that should be retried,16:58
harlowjachhavi ya, if a subflow keeps on failing though, then from what i remember the main flow will then be retried17:00
harlowjaie if the inner retry 'doesn't work out' then the parent one will start to take affect17:01
*** Kimamisa has quit IRC17:01
*** yamamoto has quit IRC17:02
chhaviso if we put the retry on the mainFlow, we don't need to put in subflows,17:02
harlowjathat's your choice17:02
harlowjathink of it like17:03
harlowja# main flow17:03
harlowjawhile failing:17:03
harlowja   do_task()17:03
harlowja# subflow17:03
harlowjadef do_task():17:03
harlowja   while task_failing:17:03
harlowja      do_subtask()...17:03
chhaviok so if we put in mainflow as well as subflows, the number of attempts will be sum of both. is this correct understanding17:03
*** ralonsoh has quit IRC17:03
harlowjaya17:03
harlowjamakes sense to me17:04
chhaviok got it.17:04
chhavione more issue which I was facing is to check the return value for the subflows, is there a way to verify if the subflow is executed successfully17:05
chhaviI ended up using provides, but are there any other way.17:06
harlowjahmmm, so subflows don't currently really return values17:07
harlowjathough u can get whether or not an task in a subflow worked or didn't17:08
harlowjaprob need to make this better...17:08
harlowjahttps://github.com/openstack/taskflow/blob/master/taskflow/storage.py#L509-L512 can get whether it worked or didn't17:08
chhavihow to check if the subflow executed successfully atleast17:08
chhaviok, but i think this work only in case of persistence,17:10
harlowjastuff is always persisted (even in memory)17:10
harlowjaso should be fine to depend on that17:10
harlowjacode would have to be created to do it better17:10
harlowja*the information is there, just not exposed...17:10
chhaviok17:10
harlowjachhavi if u want to work on some taskflow code, that'd prob be a medium size thing to do17:26
harlowjafeel free :)17:26
chhavisure will let u know, currently exploring how can i leverage this in our codeflows. they solve lot of common problems.17:29
harlowjacools17:33
harlowjachhavi if u want talk to some of the octavia folks; they are heavily using taskflow17:33
harlowjamight be worthwhile to chat with them17:34
johnsomo/17:34
*** links has quit IRC17:34
*** lpetrut has joined #openstack-oslo17:45
harlowjachhavi johnsom is the last time i checked the octavia PTL so might have some idears17:47
harlowjachhavi though some context on which/what project u are working on might help to :)17:47
johnsomYep, crazy enough to re-up17:47
harlowja:-P17:47
johnsomSo, stuck with me through Queens17:47
harlowjaand beyond17:49
harlowjalo17:49
harlowjalol17:49
johnsomAnyway, if you want to see the crazy stuff we are doing this is a good starting point: https://docs.openstack.org/octavia/latest/contributor/devref/flows.html17:50
harlowjahmmmm, need to make that more pretty johnsom  :-p17:51
*** lpetrut has quit IRC17:51
harlowjahttps://github.com/networkx/networkx/blob/master/networkx/readwrite/json_graph/__init__.py#L1 apparently exists (which might be readable by d3.js)17:51
johnsomharlowja Not all of us have so much spare time to polish.....17:51
*** lpetrut has joined #openstack-oslo17:51
harlowjahttp://bl.ocks.org/mbostock/4062045 (an example from that i guess)17:51
johnsomHahaha17:52
harlowjamanagement will give u extra bonus if u use that johnsom17:52
harlowja2x extra bonus17:52
harlowjalol17:52
johnsomWell, harlowja, you develop we will leverage (steal?)17:52
harlowjalol17:52
harlowjado u profit share?17:52
harlowjalol17:52
johnsomSure, happy to give you a slice of the "None"17:53
harlowjaha17:53
harlowjaso thats like 1 million right17:54
johnsomIt's as many None as you would like....17:55
johnsomJust think of the options you will have with 1,000,000,000,000,000 * 0.....17:55
johnsomgrin17:55
harlowjaoh man17:55
harlowjalol17:55
harlowjajust need to switch * 0 to * 117:56
johnsomYeah, still working on that part.17:56
*** yamamoto has joined #openstack-oslo17:58
*** yamamoto has quit IRC18:04
*** rajathagasthya has quit IRC18:09
*** rajathagasthya has joined #openstack-oslo18:22
*** chhavi has quit IRC18:23
*** lpetrut has quit IRC18:37
*** lpetrut has joined #openstack-oslo18:59
*** yamamoto has joined #openstack-oslo18:59
*** lpetrut has quit IRC19:05
*** yamamoto has quit IRC19:05
*** yamamoto has joined #openstack-oslo19:27
*** gcb has quit IRC19:33
*** lpetrut has joined #openstack-oslo19:33
*** e0ne has joined #openstack-oslo19:34
*** dave-mccowan has joined #openstack-oslo19:35
*** e0ne has quit IRC19:47
*** e0ne has joined #openstack-oslo19:53
*** eck` is now known as eck`gone20:12
*** e0ne has quit IRC20:14
*** kgiusti has left #openstack-oslo20:20
*** ansmith has quit IRC20:33
*** rmascena has quit IRC20:33
*** Kimamisa1 has joined #openstack-oslo20:46
*** eck`gone is now known as eck`20:53
*** Kimamisa1 has quit IRC21:02
*** kimamisa has joined #openstack-oslo21:03
*** yamamoto has quit IRC21:04
*** kimamisa has left #openstack-oslo21:05
*** yamamoto has joined #openstack-oslo21:08
*** kimamisa has joined #openstack-oslo21:14
*** kimamisa has quit IRC21:23
*** ansmith has joined #openstack-oslo21:27
*** yamamoto has quit IRC21:30
*** yamamoto has joined #openstack-oslo21:32
*** yamamoto has quit IRC21:32
*** tbarron is now known as tbarron|errand21:46
*** janzian has quit IRC21:50
*** lpetrut has quit IRC21:55
*** sdague has quit IRC22:04
*** boden has quit IRC22:11
*** lbragstad has quit IRC22:20
*** gordc has quit IRC23:09
*** ianychoi has quit IRC23:17
*** ianychoi has joined #openstack-oslo23:17
*** yamamoto has joined #openstack-oslo23:28
openstackgerritSean McCully proposed openstack/oslo.versionedobjects master: iso8601.is8601.Utc No Longer Exists  https://review.openstack.org/49827523:32
*** spzala has joined #openstack-oslo23:33
*** spzala has quit IRC23:33
*** yamamoto has quit IRC23:46

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!