Tuesday, 2019-11-19

*** renich has quit IRC00:03
*** diablo_rojo has quit IRC00:04
*** nanzha has joined #openstack-swift01:04
*** redrobot has quit IRC01:07
*** nanzha has quit IRC01:10
*** nanzha has joined #openstack-swift01:13
*** mvkr has quit IRC01:18
*** gyee has quit IRC01:29
*** onovy has quit IRC02:09
*** onovy has joined #openstack-swift02:11
*** baojg has joined #openstack-swift02:46
*** mvkr has joined #openstack-swift03:12
*** nanzha has quit IRC05:18
*** nanzha has joined #openstack-swift05:19
*** baojg has quit IRC05:31
*** baojg has joined #openstack-swift05:34
*** pcaruana has joined #openstack-swift05:43
*** openstackstatus has joined #openstack-swift06:09
*** ChanServ sets mode: +v openstackstatus06:09
*** pcaruana has quit IRC06:56
*** rcernin has quit IRC06:58
*** nanzha has quit IRC07:04
*** nanzha has joined #openstack-swift07:04
*** ccamacho has joined #openstack-swift07:48
*** manuvakery has quit IRC08:17
*** tesseract has joined #openstack-swift08:18
*** rdejoux has joined #openstack-swift08:29
*** pcaruana has joined #openstack-swift08:36
*** tkajinam has quit IRC08:56
*** FlorianFa has joined #openstack-swift08:58
*** mikecmpbll has joined #openstack-swift08:58
*** baojg has quit IRC09:01
*** rpittau|afk is now known as rpittau09:08
*** pawan-gupta has quit IRC09:17
*** mahatic has joined #openstack-swift09:57
*** ChanServ sets mode: +v mahatic09:57
*** tkajinam has joined #openstack-swift13:56
*** tkajinam has quit IRC13:56
*** tkajinam has joined #openstack-swift13:57
*** tkajinam has quit IRC15:00
*** pcaruana has quit IRC15:50
*** pcaruana has joined #openstack-swift15:51
*** gyee has joined #openstack-swift16:05
*** nanzha has quit IRC16:17
timburkeclayg, tdasilva so i had a thought last night about trying to create hard links or SLOs in normal containers where the target is in a container with versioning enabled16:32
openstackgerritThierry Carrez proposed openstack/swift master: Start README.rst with a better title  https://review.opendev.org/69502616:32
timburkei wonder if *symlink* (rather than versioned writes) should be responsible for allowing the null-namespace when following a versioning link16:33
timburkemaybe take our SYMLOOP_EXTEND header and turn it into a "system symlink" concept, where it both prevents the hop from counting against symloop_max *and* drops in the X-Backend-Allow-Reserved-Names header16:35
claygtimburke: I think that's reasonable - but you probably have some initial starting point context that you didn't state explicitly16:37
claygwhat is happening currently if you create a hard link or slo in a normal container where the target is in a container with versioning enabled?16:37
tdasilvatimburke: did you see this gist from clayg: https://gist.githubusercontent.com/clayg/c4bac5e7f0cee65688a68238b3574002/raw/00e028087c58ccdc4811b8efe36f153be53d48ef/fix-hardlinks.patch16:39
timburkei suspect (haven't confirmed yet) that the hardlink will fail. *maybe* slo will be ok, since it's left of VW?16:39
tdasilvaare you referring to something like that?16:39
timburkesimilar, i think -- does that pass or fail right now?16:42
tdasilvapass16:43
claygthe hardlink test fails on master w/o the included fix in symlink to pass on the -backend header from the req to the new_req16:43
timburkeand if the static link gets created in some *other* container?16:44
claygtimburke: yeah i just tested that - it's failing16:46
claygdoesn't have to be static - symlink to a name in a versioned container will fail16:46
clayg😞16:46
timburkefail on GET, not PUT, though, yeah?16:47
claygright you can create the symlink to anything 😁16:47
*** tesseract has quit IRC16:51
claygtimburke: yeah so I'm aboslutely fine with a sysmeta you can put on a symlink that makes symlink automatically include the x-backend header for the null namespace16:51
claygsounds totally reasonable to me16:51
claygvery much like symloop_extend16:51
claygnot sure yet if there's an obvious reason to conflate the two under a generic "system symlink" umbrella16:52
timburkefair enough -- maybe it's a separate header16:52
timburkesecond thought i had: forbidding user names in reserved containers is 100% the way to go -- because otherwise you have to worry about people doing dumb things pre-upgrade, like `curl http://saio:8090/v1/AUTH_test/c -X PUT -H x-history-location:%00versions%00not-c`, waiting for not-c to get versioning enabled *post*-upgrade, then writing a bunch of data that is basically inaccessible16:52
openstackgerritCharles Hsu proposed openstack/python-swiftclient master: WIP: Support uploading Swift symlinks without content.  https://review.opendev.org/69421116:53
clayg^ whoa!  wtg @chaz16:54
timburkewe probably need to think about people creating DLOs that try to grab all versions in a container16:54
clayg@timburke uhhh, no we don't 😁16:55
clayg@timburke I mean... if we have a "future work" list going somewhere we can add that16:55
claygI think we also wanted to "think about" having symlinks to specific versions - but it seems like having "symlinks to objects in versioned containers" is probably more on topic16:56
clayg@timburke currently @tdasilva has DELETE?version-id=<current-version> responding with 40016:56
tdasilvaor maybe 50116:57
claygI think we need to talk more about an API to create a static link to a specific version so that s3api can implement "restore on DELETE" at least in the standard case16:57
claygthen maybe we can leave the bulk delete case still resulting with a tombstone if you happen to send a delete for the current version - see if people complain16:58
claygwe don't currently support PUT?version-id=16:58
clayg^ can we hijack that to mean "make a symlink to a given version"16:59
claygthat plus DELETE?version-id=null I think solves pretty much anything a user or middleware might want to do with the is_latest pointer16:59
openstackgerritCharles Hsu proposed openstack/python-swiftclient master: WIP: Support uploading Swift symlinks without content.  https://review.opendev.org/69421117:00
*** rpittau is now known as rpittau|afk17:06
*** rdejoux has quit IRC17:13
*** ccamacho has quit IRC17:23
*** mikecmpbll has quit IRC17:33
DHEto clarify something, if keystoneauth middleware is in use, any user using their own project normally must be in a role in which is listed in "operator_roles", correct?17:55
DHE(ACLs notwithstanding)17:55
openstackgerritTim Burke proposed openstack/swift master: py3: Fix s3api header casing  https://review.opendev.org/69505317:57
timburkeDHE, correct. if not explicitly configured, that defaults to "admin" and "swiftoperator"18:02
timburkemy impression is that a lot of deployments add "member"18:02
DHEokay, thanks. I'll take care of that then18:04
DHEI guess I was hoping for a distinct tier level or something...18:04
openstackgerritThiago da Silva proposed openstack/swift master: New Object Versioning mode  https://review.opendev.org/68238218:05
timburkeDHE: a distinct tier to do what? the keystoneauth middleware was last updated like two years ago, it almost certainly needs more love than it receives -- what would you like to see out of it?18:06
DHEI'm not entirely sure. Maybe 3 tiers: "admin" (can create/delete accounts), "operator" (can create containers and set container fields within their project/project), and "user" (can manipulate objects within existing containers)18:07
timburke(i realize this has a very high likelihood of devolving to a conversation about how we ought to have something like policy.json, preferably with defaults in code ;-)18:08
DHEhahaha.. probably...18:08
timburkefwiw, create/delete accounts mostly maps to our idea of a "reseller admin", which *does* at least have some support18:08
DHEor maybe an ACL that takes 3 fields: user, project, and role, with the expectation that if you use the 'role' field then for 'user' you would use a *18:09
timburkeand i've often thought it would be useful to have a read-only tier, where users can do listings and fetch objects, but not modify anything18:10
DHEmeh, a man can dream. I can manage with what I have18:11
openstackgerritTim Burke proposed openstack/swift master: Switch py2 DSVM jobs to only run swift under py2  https://review.opendev.org/69505718:17
timburkei *think* ^^^ is the right idea in light of http://lists.openstack.org/pipermail/openstack-discuss/2019-November/010938.html ?18:18
openstackgerritClay Gerrard proposed openstack/swift master: New Object Versioning mode  https://review.opendev.org/68238218:49
openstackgerritClay Gerrard proposed openstack/swift master: WIP: s3api: Implement object versioning API  https://review.opendev.org/67368218:49
openstackgerritClay Gerrard proposed openstack/swift master: Allow internal clients to use reserved namespace  https://review.opendev.org/68213818:52
openstackgerritClay Gerrard proposed openstack/swift master: New Object Versioning mode  https://review.opendev.org/68238218:52
openstackgerritClay Gerrard proposed openstack/swift master: WIP: s3api: Implement object versioning API  https://review.opendev.org/67368218:52
claygi might have done it right that time 🤷‍♂️18:52
timburkeLGTM!18:52
timburkethanks clayg18:53
timburkei think i'm still gonna take a crack at version-aware listings for non-version-y containers -- let zuul chew on those ceph tests a while, see what they look like in a bit18:54
*** gmann is now known as gmann_afk19:57
openstackgerritClay Gerrard proposed openstack/swift master: New Object Versioning mode  https://review.opendev.org/68238220:30
openstackgerritClay Gerrard proposed openstack/swift master: WIP: s3api: Implement object versioning API  https://review.opendev.org/67368220:30
*** openstackgerrit has quit IRC20:35
*** openstackgerrit has joined #openstack-swift20:47
openstackgerritMerged openstack/swift master: Start README.rst with a better title  https://review.opendev.org/69502620:47
DHEtil rings (or rather, builders) built by python2 are not compatible with python3 and vice versa...21:02
*** gmann_afk is now known as gmann21:03
claygoh man, test.unit.common.middleware.helpers.FakeSwift and test.unit.common.middleware.s3api.helpers.FakeSwift are *very* similar21:29
timburkeDHE, which version of py2? i knew about https://bugs.launchpad.net/swift/+bug/1644387 and assumed that we could just tell people to upgrade to at least 2.7.13 (or whatever version first fixed that array/pickle interaction)21:40
openstackLaunchpad bug 1644387 in OpenStack Object Storage (swift) "Ring builder files need a consistent format" [Undecided,New]21:40
timburkei wasn't aware of any issue reading py2-generated builders on py3... :-/21:42
timburkealso: is that similar to the error you were seeing? whatever the error, if we *can* fix it in swift, i'd certainly like to...21:42
openstackgerritTim Burke proposed openstack/swift master: New Object Versioning mode  https://review.opendev.org/68238221:57
openstackgerritTim Burke proposed openstack/swift master: WIP: s3api: Implement object versioning API  https://review.opendev.org/67368221:57
*** rcernin has joined #openstack-swift21:59
timburkehmm... should we do a meeting tomorrow? idk that i'll have much to go over...22:01
*** rcernin has quit IRC22:01
timburkewe should *definitely* skip next week's22:01
*** rcernin has joined #openstack-swift22:01
*** rcernin has quit IRC22:01
*** rcernin has joined #openstack-swift22:02
mattoliveraumorning22:09
*** pcaruana has quit IRC22:33
openstackgerritTim Burke proposed openstack/swift master: Remove a bunch of known-failures that moved from boto to boto3  https://review.opendev.org/69510922:57
timburkea little unfortunate that those weren't flagged as missing tests...22:58
*** tkajinam has joined #openstack-swift23:07
DHEtimburke: 2.7.5 from centos7...23:17
timburkeDHE, ah. does the error match the bug? and if you take a builder written on py2, can py3 read it? if not, how does it fail?23:18
DHEtimburke: I think so, but there's a twist. the main ring builder did work, but the composite ring builder did not23:20
timburkeoh, interesting... yeah, i definitely haven't looked at composite builders in a while :-/23:21
DHEit's also possible there are some version mismatches. this host has swift installed for both python2 and python3, so maybe there's a version incompatibility?23:21
DHEit wasn't a very scientific testing23:22
timburkeif you've still got the traceback handy, i wouldn't mind taking a look...23:34
DHEsadly I don't...23:34
timburkeno worries -- i'll look into it a bit more23:35
DHEit started with an error that the component builder files were missing an 'id' field, and in my attempt to disassemble the builder files with python straight up there were pickle errors about unicode/utf8 characters23:35
DHEthat might be a version difference if the main ring builder were older than the composer...23:36
openstackgerritTim Burke proposed openstack/swift master: Allow internal clients to use reserved namespace  https://review.opendev.org/68213823:58
openstackgerritTim Burke proposed openstack/swift master: New Object Versioning mode  https://review.opendev.org/68238223:58
openstackgerritTim Burke proposed openstack/swift master: WIP: s3api: Implement object versioning API  https://review.opendev.org/67368223:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!