| *** ChanServ sets mode: +v tdasilva | 00:24 | |
| *** mingyu has joined #openstack-swift | 00:45 | |
| *** mingyu has quit IRC | 00:49 | |
| *** zhengyin has joined #openstack-swift | 01:24 | |
| *** mingyu has joined #openstack-swift | 02:00 | |
| *** mingyu has quit IRC | 02:05 | |
| *** hoonetorg has quit IRC | 02:20 | |
| *** zhugaoxiao has quit IRC | 02:57 | |
| *** mmcardle has joined #openstack-swift | 02:58 | |
| *** mmcardle has quit IRC | 03:16 | |
| *** mmcardle has joined #openstack-swift | 03:17 | |
| *** mingyu has joined #openstack-swift | 03:21 | |
| *** chlong has quit IRC | 03:25 | |
| *** mingyu has quit IRC | 03:25 | |
| *** zhugaoxiao has joined #openstack-swift | 03:36 | |
| *** chsc has joined #openstack-swift | 03:51 | |
| mattoliverau | wow, quiet day here today | 03:52 |
|---|---|---|
| *** mingyu has joined #openstack-swift | 03:58 | |
| *** mingyu has quit IRC | 04:04 | |
| *** chsc has quit IRC | 04:10 | |
| *** chromatin has quit IRC | 04:17 | |
| *** klrmn has quit IRC | 04:33 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-swiftclient: Updated from global requirements https://review.openstack.org/89250 | 04:39 |
| *** mmcardle has quit IRC | 04:43 | |
| *** vint_bra has joined #openstack-swift | 04:46 | |
| *** SkyRocknRoll has joined #openstack-swift | 04:59 | |
| *** KriskK has joined #openstack-swift | 05:00 | |
| *** flwang1 has quit IRC | 05:01 | |
| *** KriskK has quit IRC | 05:01 | |
| *** pcaruana has quit IRC | 05:03 | |
| *** mingyu has joined #openstack-swift | 05:20 | |
| *** ppai has joined #openstack-swift | 05:23 | |
| *** psachin has joined #openstack-swift | 05:25 | |
| *** mingyu has quit IRC | 05:25 | |
| *** vint_bra has quit IRC | 05:29 | |
| *** ChubYann has quit IRC | 05:32 | |
| *** mingyu has joined #openstack-swift | 05:38 | |
| *** mingyu has quit IRC | 05:45 | |
| *** chlong has joined #openstack-swift | 05:59 | |
| *** cdoron has joined #openstack-swift | 06:16 | |
| *** oshritf has joined #openstack-swift | 06:20 | |
| *** mingyu has joined #openstack-swift | 06:27 | |
| *** flwang1 has joined #openstack-swift | 06:37 | |
| *** pcaruana has joined #openstack-swift | 06:38 | |
| *** rcernin has joined #openstack-swift | 06:41 | |
| *** geaaru has joined #openstack-swift | 06:41 | |
| *** mingyu has quit IRC | 06:42 | |
| *** maestropandy has joined #openstack-swift | 06:48 | |
| *** tesseract- has joined #openstack-swift | 06:53 | |
| openstackgerrit | lokesh s proposed openstack/swift: Py3: Fixes AssertionError https://review.openstack.org/348322 | 07:00 |
| *** flwang1 has quit IRC | 07:06 | |
| *** flwang1 has joined #openstack-swift | 07:06 | |
| *** flwang1 has quit IRC | 07:06 | |
| csmart | mattoliverau: \o | 07:09 |
| * csmart makes some noise | 07:09 | |
| mattoliverau | csmart: thanks man :) | 07:13 |
| oshritf | acoles_: morning | 07:19 |
| *** rledisez has joined #openstack-swift | 07:21 | |
| *** permalac has joined #openstack-swift | 07:24 | |
| mattoliverau | oshritf: o/ (noting I'm not acoles_) | 07:25 |
| *** maestropandy has quit IRC | 07:25 | |
| *** Trixboxer has joined #openstack-swift | 07:32 | |
| oshritf | mattoliverau: wouldnt confuse between you :) Never better time than Bristol Monday morning to discuss container sync | 07:33 |
| mattoliverau | Lol, well it's Monday arvo (5:34pm) here so not as nice :) | 07:34 |
| *** mingyu has joined #openstack-swift | 07:36 | |
| Trixboxer | Hi Everyone, I would like to know a possible way to set policy where users from same tenants do not get to rw * | 07:43 |
| Trixboxer | in that tenant | 07:43 |
| oshritf | mattoliverau: Working on container sync performance, https://review.openstack.org/#/c/210099/ | 07:46 |
| patchbot | oshritf: patch 210099 - swift - Add process level concurrency to container sync | 07:47 |
| *** flwang1 has joined #openstack-swift | 07:48 | |
| *** flwang1 has quit IRC | 07:54 | |
| cdoron | mattoliverau: Good afternoon. Could you take a look at https://review.openstack.org/#/c/321041/ ? I got a +2 from Kota over 2 months ago. | 08:05 |
| patchbot | cdoron: patch 321041 - swift - Added a test for delayed reap. | 08:05 |
| -openstackstatus- NOTICE: Gerrit is going to be restarted | 08:39 | |
| *** jistr|mtg is now known as jistr | 08:50 | |
| *** mingyu has quit IRC | 08:57 | |
| *** mingyu has joined #openstack-swift | 08:59 | |
| *** ouchkernel has quit IRC | 09:02 | |
| *** joeljwright has joined #openstack-swift | 09:03 | |
| *** ChanServ sets mode: +v joeljwright | 09:03 | |
| *** acoles_ is now known as acoles | 09:04 | |
| acoles | oshritf: good morning | 09:06 |
| acoles | mattoliverau: good evening | 09:07 |
| acoles | Trixboxer: is your question in contecxt of keystone? if so then a user must have operator_role on the tenant/project in order to access the tenant's swift account | 09:09 |
| acoles | where operator_role(s) are defined in the swift proxy-server.conf keystoneauth section | 09:10 |
| Trixboxer | acoles: Yes, Im using keystone for authentication and have operator_role configured | 09:10 |
| Trixboxer | my query is, that from one tenant if two users are accessing their swift account, they both can see containers of each other and can operate on them | 09:10 |
| *** ouchkernel has joined #openstack-swift | 09:10 | |
| Trixboxer | I want to set a policy where each container is owned by creating_user and not the all users of tenant | 09:11 |
| acoles | Trixboxer: ok, so operator_roles isn't going to give you that level of control. you might close to what you need using container ACLs. With and ACL you could have a user with admin role create containers for other users and then set an ACL that grants the specific user RW access to that container | 09:14 |
| *** daemontool has joined #openstack-swift | 09:14 | |
| Trixboxer | acoles: right. Is there a way I can achieve this using policy.json ? | 09:18 |
| acoles | Trixboxer: unfortunately Swift doesn't yet support policy.json :/ | 09:23 |
| *** mvk has joined #openstack-swift | 09:24 | |
| *** mvk_ has joined #openstack-swift | 09:27 | |
| Trixboxer | acoles: ouch. Will have to set ACL programatically then | 09:28 |
| Trixboxer | acoles: Does horizon+swift respect ACLs and work without issue ? | 09:29 |
| acoles | Trixboxer: I'm not too familiar with horizon, I've not heard of any issues in that respect but can't tell you for sure. | 09:30 |
| *** daemontool has quit IRC | 09:31 | |
| *** silor has joined #openstack-swift | 09:32 | |
| *** joeljwright1 has joined #openstack-swift | 09:38 | |
| *** mvk_ has quit IRC | 09:38 | |
| *** joeljwright1 has quit IRC | 09:39 | |
| *** joeljwright has quit IRC | 09:41 | |
| *** silor1 has joined #openstack-swift | 09:41 | |
| *** silor has quit IRC | 09:43 | |
| *** silor1 is now known as silor | 09:43 | |
| cdoron | acoles: I wrote a probe test for delayed reap. Could you take a look at it? https://review.openstack.org/#/c/321041/ . I got a +2 from Kota over 2 months ago. | 09:55 |
| patchbot | cdoron: patch 321041 - swift - Added a test for delayed reap. | 09:55 |
| acoles | cdoron: is there a particular scenario that the new test is checking, when reaping is delayed, beyond what the unit tests cover? | 10:09 |
| *** oshritf_ has joined #openstack-swift | 10:19 | |
| cdoron | acoles: the new probe test also runs replicators and updaters and makes sure that the reaping continues to hold | 10:22 |
| *** oshritf has quit IRC | 10:23 | |
| oshritf_ | join | 10:24 |
| *** circ-user-3SNpi has joined #openstack-swift | 10:25 | |
| *** cshastri has joined #openstack-swift | 10:27 | |
| acoles | cdoron: ok | 10:27 |
| circ-user-3SNpi | Hi all.. I have tried swift storage with glusterfs backend which ends in failure. Whether glusterfs volume can be used as swift backend without swiftonfile?pls guide | 10:34 |
| *** mingyu has quit IRC | 10:51 | |
| *** maestropandy has joined #openstack-swift | 10:57 | |
| *** circ-user-3SNpi has quit IRC | 11:01 | |
| *** maestropandy has quit IRC | 11:01 | |
| *** maestropandy has joined #openstack-swift | 11:04 | |
| *** maestropandy has left #openstack-swift | 11:05 | |
| *** jith_ has joined #openstack-swift | 11:05 | |
| jith_ | Hi all.. I have tried swift storage with glusterfs backend which ends in failure. Whether glusterfs volume can be used as swift backend without swiftonfile? | 11:06 |
| *** pcaruana has quit IRC | 11:06 | |
| *** pcaruana has joined #openstack-swift | 11:07 | |
| *** permalac has quit IRC | 11:09 | |
| *** kei_yama has quit IRC | 11:14 | |
| *** cdelatte has joined #openstack-swift | 11:15 | |
| oshritf_ | acoles: hello | 11:20 |
| *** oshritf_ is now known as oshritf | 11:23 | |
| *** furlongm_ has joined #openstack-swift | 11:23 | |
| *** maestropandy1 has joined #openstack-swift | 11:28 | |
| *** furlongm_ has quit IRC | 11:44 | |
| Trixboxer | If I have to create a hook in swift, so that the tenant:user creating the container will be sole owner of that container to do RW, where should I start ? | 11:45 |
| *** furlongm_ has joined #openstack-swift | 11:48 | |
| *** cshastri has quit IRC | 11:51 | |
| *** furlongm_ has quit IRC | 11:51 | |
| *** mingyu has joined #openstack-swift | 11:52 | |
| *** furlongm_ has joined #openstack-swift | 11:54 | |
| *** mingyu has quit IRC | 11:57 | |
| *** furlongm_ has quit IRC | 11:59 | |
| *** baojg has joined #openstack-swift | 12:02 | |
| *** cshastri has joined #openstack-swift | 12:04 | |
| *** mingyu has joined #openstack-swift | 12:07 | |
| *** maestropandy1 has quit IRC | 12:09 | |
| *** furlongm_ has joined #openstack-swift | 12:10 | |
| *** baojg has quit IRC | 12:12 | |
| *** chmouel has joined #openstack-swift | 12:13 | |
| acoles | Trixboxer: if you mean in middleware, keystoneauth.py maybe starting place | 12:15 |
| *** SkyRocknRoll has quit IRC | 12:18 | |
| Trixboxer | acoles: keystoneauth.py wont post acl permission on swift, I'll need hook in swift | 12:19 |
| Trixboxer | something like create_container from ./common/internal_client.py if headers=None | 12:20 |
| *** furlongm_ has quit IRC | 12:21 | |
| openstackgerrit | Mahati Chamarthy proposed openstack/swift: Delete old tombstones https://review.openstack.org/346865 | 12:22 |
| ahale | is that the kind of thing that the defaulter middleware was looking to do ? (i cant remember details) | 12:23 |
| acoles | Trixboxer: I'm not sure what you are looking for when you say 'hook' - do you want to intercept any container create request and set an ACL? | 12:24 |
| acoles | ahale: possibly, but in this case it seems like the 'default' values would need to be dynamically generated from request auth parameters | 12:26 |
| acoles | default m/ware == patch 342857 | 12:27 |
| patchbot | acoles: https://review.openstack.org/#/c/342857/ - swift - Add defaulter middleware | 12:27 |
| Trixboxer | acoles: yes, I want to intercept any container create request and set an ACL | 12:27 |
| *** swat30 has joined #openstack-swift | 12:32 | |
| acoles | Trixboxer: ok. I suggested looking at keystoneauth.py because it creates a dict in the request environ (under key keystone.identity) with identity info from keystone authtoken, and illustrates how middleware can handle requests. So if you want to create a custom middleware there are some useful pointers in there. | 12:32 |
| *** maestropandy has joined #openstack-swift | 12:33 | |
| *** maestropandy has left #openstack-swift | 12:34 | |
| Trixboxer | acoles: Thanks for the much needed headsup | 12:34 |
| acoles | Trixboxer: Assuming your acl is based on the creating tenant/user id's, those id's are in that dict. (They are also in headers from authoken.py) | 12:34 |
| *** chromatin has joined #openstack-swift | 12:35 | |
| *** baojg has joined #openstack-swift | 12:35 | |
| * acoles afk for lunch | 12:36 | |
| *** cshastri has quit IRC | 12:38 | |
| *** baojg has quit IRC | 12:51 | |
| *** furlongm_ has joined #openstack-swift | 12:57 | |
| *** baojg has joined #openstack-swift | 12:59 | |
| *** baojg has quit IRC | 13:00 | |
| *** baojg has joined #openstack-swift | 13:10 | |
| *** StraubTW has joined #openstack-swift | 13:14 | |
| *** furlongm_ has quit IRC | 13:15 | |
| *** vint_bra has joined #openstack-swift | 13:16 | |
| *** vint_bra has quit IRC | 13:16 | |
| *** maestropandy1 has joined #openstack-swift | 13:18 | |
| *** rvasilets___ has joined #openstack-swift | 13:21 | |
| *** furlongm_ has joined #openstack-swift | 13:21 | |
| *** furlongm_ has quit IRC | 13:22 | |
| *** furlongm_ has joined #openstack-swift | 13:29 | |
| *** baojg has quit IRC | 13:36 | |
| *** klamath has joined #openstack-swift | 13:41 | |
| *** klamath has quit IRC | 13:43 | |
| *** klamath has joined #openstack-swift | 13:44 | |
| *** ouchkernel has quit IRC | 13:49 | |
| *** baojg has joined #openstack-swift | 13:53 | |
| *** ouchkernel has joined #openstack-swift | 13:56 | |
| *** baojg has quit IRC | 13:58 | |
| *** ppai has quit IRC | 14:00 | |
| *** chromatin has quit IRC | 14:00 | |
| tdasilva | good morning | 14:07 |
| openstackgerrit | Alistair Coles proposed openstack/swift: Tighten up expirer tests https://review.openstack.org/352438 | 14:08 |
| *** esker has joined #openstack-swift | 14:10 | |
| *** baojg has joined #openstack-swift | 14:11 | |
| *** maestropandy1 has quit IRC | 14:12 | |
| *** ppai has joined #openstack-swift | 14:14 | |
| acoles | tdasilva: hi | 14:15 |
| *** vint_bra has joined #openstack-swift | 14:16 | |
| tdasilva | acoles: hello! o/ | 14:16 |
| acoles | oshritf: re. your comment on patch 348495, about testing deleted manifests...once deleted the manifest would be like any other deleted object, which is covered by the test_sync_* tests I think. | 14:16 |
| patchbot | acoles: https://review.openstack.org/#/c/348495/ - swift - Make container sync copy SLO manifests | 14:16 |
| *** maestropandy1 has joined #openstack-swift | 14:20 | |
| *** maestropandy1 has left #openstack-swift | 14:20 | |
| *** maestropandy has joined #openstack-swift | 14:21 | |
| *** permalac has joined #openstack-swift | 14:21 | |
| *** maestropandy has left #openstack-swift | 14:21 | |
| *** StraubTW_ has joined #openstack-swift | 14:24 | |
| mmotiani | Good Morning | 14:25 |
| *** StraubTW has quit IRC | 14:27 | |
| *** zaitcev has joined #openstack-swift | 14:27 | |
| *** ChanServ sets mode: +v zaitcev | 14:27 | |
| oshritf | acoles: perfect then | 14:32 |
| oshritf | acoles: Thanks for the great work on 210099! Highly appreciated | 14:33 |
| oshritf | what | 14:33 |
| oshritf | 's the next step? squash them in? | 14:34 |
| acoles | oshritf: NP. yes, if you are ok with the proposals then let's squash them into 210099 (I can do that if you like - there is a pep8 error I should fix) Bit I am just thinking about your comment re the changes impact on the threading patch. | 14:35 |
| *** psachin has quit IRC | 14:35 | |
| oshritf | I was wondering whether moving the child stats to local variables would have any impact on the future adding threads level, and add some minor comments - which I could fix/discuss after squashing them in | 14:35 |
| oshritf | acoles: oh, also - with the forking patch, your comment about having 2 processes instead of one with processes = 1 is still relevant | 14:37 |
| oshritf | acoles: but I'm not sure there is an elegant way to avoid it | 14:38 |
| *** mingyu has quit IRC | 14:38 | |
| *** baojg_ has joined #openstack-swift | 14:39 | |
| *** baojg has quit IRC | 14:40 | |
| openstackgerrit | Mohit Motiani proposed openstack/swift: Detect duplicate storage policy 0 section in func tests https://review.openstack.org/351934 | 14:40 |
| *** ppai has quit IRC | 14:43 | |
| *** psachin has joined #openstack-swift | 14:46 | |
| *** asettle has joined #openstack-swift | 14:48 | |
| acoles | oshritf: w.r.t. the stats updates with multiple threads, I think I would explore having each container_sync_row thread return its contribution to stats rather than updating a shared dict. | 14:49 |
| acoles | oshritf: re. 2 vs 1 processes, I'll give it some thought, I'm not sure its a big deal either way. It looks like the auditor does the same thing (i.e. concurrency==1 -> parent + 1 child process) | 14:53 |
| *** kragniz has quit IRC | 15:00 | |
| acoles | oshritf: so, are you going to squash those patches or shall I? | 15:00 |
| oshritf | acoles: yes, probably better since currently no locking mechanism too. Could later be performance compared as well. re fork + pipe, same mechanism as in auditor and updater | 15:01 |
| oshritf | acoles: please squash - I'll work on it after squashed | 15:01 |
| acoles | oshritf: ok, and were you happy to use patch 350717 too? | 15:02 |
| patchbot | acoles: https://review.openstack.org/#/c/350717/ - swift - Refactor forking in container sync run_forever | 15:02 |
| *** psachin has quit IRC | 15:02 | |
| *** baojg_ has quit IRC | 15:03 | |
| oshritf | acoles: yes, I liked your proposal, appreciate the effort and your time | 15:06 |
| *** StraubTW_ has quit IRC | 15:11 | |
| *** cdoron has quit IRC | 15:15 | |
| openstackgerrit | Alistair Coles proposed openstack/swift: Add process level concurrency to container sync https://review.openstack.org/210099 | 15:31 |
| acoles | oshritf: ^^ squashed version, we can work from that with any other changes | 15:31 |
| *** oshritf has quit IRC | 15:35 | |
| *** pgbridge has joined #openstack-swift | 15:38 | |
| *** rfinn has joined #openstack-swift | 15:38 | |
| *** klrmn has joined #openstack-swift | 15:40 | |
| tdasilva | ccccccdkkgthffjhkbltbeckeegrdendkgnclbkglctf | 15:46 |
| zaitcev | he's going to blame the cat | 15:50 |
| *** rcernin has quit IRC | 16:01 | |
| *** cdoron has joined #openstack-swift | 16:02 | |
| *** pkovar has joined #openstack-swift | 16:06 | |
| *** pcaruana has quit IRC | 16:11 | |
| *** chsc has joined #openstack-swift | 16:11 | |
| *** chsc has joined #openstack-swift | 16:11 | |
| *** permalac has quit IRC | 16:12 | |
| *** rvasilets___ has quit IRC | 16:17 | |
| *** chsc has quit IRC | 16:18 | |
| jrichli | acoles: i see you doing container-sync this morning. would you like if I take a look into the probe test failures for patch 352438 ? I had gotten even different ones than the gate test. | 16:24 |
| patchbot | jrichli: https://review.openstack.org/#/c/352438/ - swift - Tighten up expirer tests | 16:24 |
| *** catintheroof has joined #openstack-swift | 16:28 | |
| *** klrmn has quit IRC | 16:29 | |
| *** david-lyle_ has joined #openstack-swift | 16:29 | |
| timburke | good morning | 16:30 |
| pkovar | hi, could someone review this swift install docs patch for me? https://review.openstack.org/#/c/346925/ | 16:30 |
| patchbot | pkovar: patch 346925 - swift - [install-guide] Include environment-networking | 16:30 |
| notmyname | good morning | 16:31 |
| *** asettle has quit IRC | 16:31 | |
| *** asettle has joined #openstack-swift | 16:32 | |
| *** david-lyle has quit IRC | 16:33 | |
| *** mmcardle has joined #openstack-swift | 16:35 | |
| *** rledisez has quit IRC | 16:37 | |
| zaitcev | pkovar: Do you know why the install-guide is a separate directory and is not nested under docs? With this layout I cannot click on the docs gate and examine the formatted docs. | 16:42 |
| zaitcev | pkovar: actually, never mind. There's a separate job for it. | 16:42 |
| pkovar | zaitcev: for background info on this, see http://specs.openstack.org/openstack/docs-specs/specs/newton/project-specific-installguides.html | 16:42 |
| pkovar | (and http://specs.openstack.org/openstack/docs-specs/specs/newton/project-specific-installguides.html#publishing specifically) | 16:43 |
| zaitcev | pkovar: What do you think about moving the warnings outside of the node hierarchy (e.g. below "Second node") and just having one of each? | 16:44 |
| zaitcev | Currently it looks like something that The OpenStack Department of Redundant Redundancies produced. | 16:45 |
| pkovar | heh. let me have a look | 16:46 |
| zaitcev | It's more apparent in the formatted output - http://docs-draft.openstack.org/25/346925/1/check/gate-swift-install-guide/3d9f987//install-guide/build/html/environment-networking.html | 16:47 |
| pkovar | zaitcev: you mean moving the two admonitions to the bottom of the http://docs-draft.openstack.org/25/346925/1/check/gate-swift-install-guide/3d9f987//install-guide/build/html/environment-networking.html ? | 16:48 |
| pkovar | i can do that, sure | 16:48 |
| zaitcev | Yes. I can see why identical copies of /etc/hosts are included, to make it easier for guys going step by step. | 16:49 |
| *** nadeem has joined #openstack-swift | 16:49 | |
| *** diogogmt has joined #openstack-swift | 16:50 | |
| *** nadeem has quit IRC | 16:50 | |
| pkovar | zaitcev: right. i could also s/Edit the /etc/hosts file to contain the following:/Edit the /etc/hosts file to have the same content as the hosts file in the previous procedure/ -- but that would require people scrolling back | 16:53 |
| zaitcev | pkovar: exactly | 16:53 |
| pkovar | okay, let me update the patch then :) | 16:53 |
| zaitcev | thanks, didn't mean to make you sweat the details, but if it's possible, it's for the best | 16:54 |
| zaitcev | IMHO | 16:54 |
| zaitcev | in before second +2 comes around with "what the eff is this" | 16:55 |
| *** nadeem has joined #openstack-swift | 16:55 | |
| pkovar | np. thanks for your feedback :) | 16:55 |
| *** tesseract- has quit IRC | 16:57 | |
| *** esker has quit IRC | 16:58 | |
| pkovar | and you were right, it looks much better in the preview | 16:58 |
| *** mmcardle has quit IRC | 16:59 | |
| openstackgerrit | Petr Kovar proposed openstack/swift: [install-guide] Include environment-networking https://review.openstack.org/346925 | 17:00 |
| pkovar | zaitcev: done. thanks again | 17:01 |
| *** asettle has quit IRC | 17:05 | |
| *** esker has joined #openstack-swift | 17:08 | |
| *** zul_ has joined #openstack-swift | 17:09 | |
| *** zul has quit IRC | 17:09 | |
| *** ChubYann has joined #openstack-swift | 17:11 | |
| *** esker has quit IRC | 17:13 | |
| *** chsc has joined #openstack-swift | 17:13 | |
| *** ozeri has joined #openstack-swift | 17:14 | |
| *** mmcardle has joined #openstack-swift | 17:16 | |
| *** daemontool has joined #openstack-swift | 17:16 | |
| *** _JZ_ has joined #openstack-swift | 17:17 | |
| *** asettle has joined #openstack-swift | 17:19 | |
| *** mmcardle has quit IRC | 17:21 | |
| *** asettle has quit IRC | 17:24 | |
| *** ozeri has quit IRC | 17:31 | |
| *** timss has quit IRC | 17:33 | |
| *** asettle has joined #openstack-swift | 17:33 | |
| *** klrmn has joined #openstack-swift | 17:33 | |
| *** asettle has quit IRC | 17:37 | |
| acoles | jrichli: thanks for review, looks like I forgot about encryption :/ | 17:39 |
| *** mingyu has joined #openstack-swift | 17:39 | |
| acoles | jrichli: and I guess you ran the test with encryption enabled | 17:39 |
| jrichli | acoles: yep | 17:39 |
| *** geaaru has quit IRC | 17:41 | |
| *** david-lyle_ has quit IRC | 17:42 | |
| *** mingyu has quit IRC | 17:43 | |
| openstackgerrit | Alistair Coles proposed openstack/swift: Tighten up expirer tests https://review.openstack.org/352438 | 17:45 |
| *** david-lyle has joined #openstack-swift | 17:45 | |
| *** asettle has joined #openstack-swift | 17:47 | |
| *** acoles is now known as acoles_ | 17:47 | |
| *** asettle has quit IRC | 17:52 | |
| *** pkovar has quit IRC | 17:56 | |
| *** mingyu has joined #openstack-swift | 17:56 | |
| *** timss has joined #openstack-swift | 18:03 | |
| *** daemontool has quit IRC | 18:10 | |
| *** btorch has left #openstack-swift | 18:31 | |
| *** greghaynes has quit IRC | 18:35 | |
| *** mingyu has quit IRC | 18:39 | |
| *** rfinn has quit IRC | 18:40 | |
| *** greghaynes has joined #openstack-swift | 18:48 | |
| *** Anticime1 has joined #openstack-swift | 18:50 | |
| *** mtreinish_ has joined #openstack-swift | 18:50 | |
| *** ctennis has joined #openstack-swift | 18:50 | |
| *** thurloat_ has joined #openstack-swift | 18:50 | |
| *** thurloat has quit IRC | 18:50 | |
| *** swat30 has quit IRC | 18:50 | |
| *** mtreinish has quit IRC | 18:50 | |
| *** Anticimex has quit IRC | 18:50 | |
| *** ctennis- has quit IRC | 18:50 | |
| *** dabukalam has quit IRC | 18:50 | |
| *** thurloat_ is now known as thurloat | 18:50 | |
| *** mtreinish_ is now known as mtreinish | 18:50 | |
| *** swat30 has joined #openstack-swift | 18:50 | |
| *** dabukalam has joined #openstack-swift | 18:51 | |
| *** rfinn has joined #openstack-swift | 18:51 | |
| *** asettle has joined #openstack-swift | 18:54 | |
| *** fifieldt has quit IRC | 19:07 | |
| *** fifieldt has joined #openstack-swift | 19:18 | |
| *** silor has quit IRC | 19:29 | |
| *** vinsh has quit IRC | 19:29 | |
| *** vinsh has joined #openstack-swift | 19:30 | |
| *** jistr has quit IRC | 19:44 | |
| *** jistr has joined #openstack-swift | 19:48 | |
| *** jistr has quit IRC | 19:53 | |
| *** jistr has joined #openstack-swift | 19:56 | |
| *** cdoron has quit IRC | 19:56 | |
| openstackgerrit | Thiago da Silva proposed openstack/swift: Symlink implementation. https://review.openstack.org/232162 | 20:11 |
| *** rfinn has quit IRC | 20:21 | |
| *** ouchkernel has quit IRC | 20:23 | |
| *** mingyu has joined #openstack-swift | 20:25 | |
| *** ouchkernel has joined #openstack-swift | 20:25 | |
| *** tqtran has joined #openstack-swift | 20:29 | |
| *** mingyu has quit IRC | 20:29 | |
| tqtran | hello quick question, whenever i perform a POST action (example posting account acl) I noticed that the backend is hit with a GETorHEAD request first, then the authorization, then the POST. Why does the GETorHEAD happen at all? | 20:30 |
| tqtran | Its been puzzling me, also I cant seem to locate where we are storing the headers as metadata. Seems like add_acls_from_sys_metadata only updates the response header, but where does the actual storage happen? | 20:31 |
| *** tongli has joined #openstack-swift | 20:32 | |
| zaitcev | there has to be some get_info first, unless cached | 20:33 |
| *** Jeffrey4l has quit IRC | 20:35 | |
| *** Jeffrey4l has joined #openstack-swift | 20:35 | |
| *** rfinn has joined #openstack-swift | 20:41 | |
| *** tongli has quit IRC | 20:52 | |
| *** acoles_ is now known as acoles | 21:06 | |
| *** natarej has quit IRC | 21:11 | |
| *** chromatin has joined #openstack-swift | 21:16 | |
| *** acoles is now known as acoles_ | 21:26 | |
| *** kevinc has joined #openstack-swift | 21:34 | |
| jrichli | tqtran: the add_acls_from_sys_metadata is in the proxy controller. the proxy acct controller passes the POST request along with make_requests call in POST. | 21:39 |
| jrichli | tqtran: I think you are looking for swift/account/server.py POST | 21:39 |
| *** admin6 has joined #openstack-swift | 21:39 | |
| *** mingyu has joined #openstack-swift | 21:40 | |
| kevinc | Is there any documentation how to delete projects/tenants in swift? When I delete the project from Keystone, using the Keystone API, it doesn't appear to delete the swift project/tenant. I deleted all of the containers and objects from swift before deleting the project in Keystone. | 21:40 |
| *** catintheroof has quit IRC | 21:43 | |
| *** mingyu has quit IRC | 21:44 | |
| jrichli | kevinc: AFAIK, this would be deleting an account. you must be "reseller admin" in order to delete accounts. Is this what you mean? | 21:49 |
| jrichli | and the proxy server must have have 'allow_account_management = true' | 21:51 |
| kevinc | jrichli: Yes, it is. Sorry, it seems each OpenStack uses Account/Project/Tenant to mean the same thing. | 21:51 |
| kevinc | We have been running swift for a few using with swauth for authentication and I have been able to delete account using swauth. We recently added keystone (and nova) to our OpenStack service and I am finally getting around to purging some accounts that were created with keystone only. | 21:53 |
| zaitcev | I heard some people have all proxies with allow_account_management=false and 1 special proxy with allow_account_management=true, firewalled from the outside of course. | 21:59 |
| mattoliverau | Morning | 22:00 |
| jrichli | kevinc: I have searched the docs, and I don't see the DELETE to an account being individually addressed. the account reaper manpages speak to some internal details, but I don't think that's what you are wanting. | 22:10 |
| jrichli | kevinc: I assume its just a DELETE to the account URL, given the conditions mentioned above are true. | 22:10 |
| jrichli | mattoliverau: morning! | 22:12 |
| kevinc | jrichli: thank you! one more question, how can i tell if an account exists? when i do a get/head on https://url/v1/PREFIX_ACCOUNTID I get a http 204 status code if the account exists and if the account doesn't exist. The only difference i can tell is if the account exists the response includes headers for the storage policies. I would expect the query of a nonexistent would return an 404 error | 22:19 |
| *** chromatin has quit IRC | 22:26 | |
| *** admin6 has left #openstack-swift | 22:35 | |
| *** chlong has quit IRC | 22:35 | |
| tqtran | jrichli: yes, i had a breakpoint in both GETorHEAD and POST. seems like its hitting both. and along the way, only the response headers are modified. im just puzzled because at some point, the headers are saved as metadata. i cant seem to pinpoint in the code where exactly this steps happen | 22:36 |
| torgomatic | it's a shame there's no OutOfCheeseError in swift.common.exceptions | 22:36 |
| *** asettle has quit IRC | 22:38 | |
| *** kevinc_ has joined #openstack-swift | 22:39 | |
| *** kevinc has quit IRC | 22:42 | |
| *** kevinc_ has quit IRC | 22:43 | |
| timburke | tqtran: you'll want to look around https://github.com/openstack/swift/blob/2.9.0/swift/account/server.py#L253, which calls out to the account broker at https://github.com/openstack/swift/blob/2.9.0/swift/common/db.py#L765 | 22:45 |
| timburke | tqtran: before that update_metadata call, the account had the old ACL; after it, the new | 22:46 |
| *** rfinn has quit IRC | 22:46 | |
| tqtran | thanks timburke, that is very helpful | 22:46 |
| *** vint_bra has quit IRC | 22:58 | |
| *** nadeem has quit IRC | 23:01 | |
| *** chromatin has joined #openstack-swift | 23:03 | |
| *** mingyu has joined #openstack-swift | 23:10 | |
| *** mingyu has quit IRC | 23:15 | |
| *** chsc has quit IRC | 23:21 | |
| hogepodge | https://review.openstack.org/#/c/324739/ ping on this review, hoping it lands for Newton. We also have an immediate need for it in some deployed projects fwiw. Documentation change | 23:28 |
| patchbot | hogepodge: patch 324739 - python-swiftclient - Insufficent info about read and write ACL syntax | 23:28 |
| *** kei_yama has joined #openstack-swift | 23:35 | |
| *** klamath has quit IRC | 23:36 | |
| *** _JZ_ has quit IRC | 23:40 | |
| *** furlongm_ has quit IRC | 23:44 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!