Thursday, 2018-06-14

*** trevor_intel has joined #edge-computing-group01:20
*** trevor_intel has quit IRC02:53
*** jaosorior has quit IRC05:41
*** ricardoas has quit IRC06:20
*** epalper has joined #edge-computing-group06:40
*** ianychoi has quit IRC08:39
*** jaosorior has joined #edge-computing-group09:15
*** cdent has joined #edge-computing-group11:20
*** cdent has quit IRC12:29
*** ianychoi has joined #edge-computing-group12:46
*** esarault has joined #edge-computing-group12:56
esaraultSo I'll take it that there's no meeting today?14:10
csatariHi14:14
esaraultHi :)14:15
csatariSorry I missed my notification for this meeting.14:15
csatariShall we still go for it?14:15
esaraultSorry 'bout not making it for the F2F in Vancouver, we ended up having a crowd towars the end of the marketplace and couldn't make it out of the booth14:16
esaraultSure, unless we want to reschedule if we're missing quorum or key contributors14:16
ildikovI'm here to lurk :)14:17
csatariI think any discussions are good.14:17
csatariLet's go for it.14:17
csatari#startmeeting Review of Dublin edge notes 0414:18
openstackMeeting started Thu Jun 14 14:18:28 2018 UTC and is due to finish in 60 minutes.  The chair is csatari. Information about MeetBot at http://wiki.debian.org/MeetBot.14:18
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:18
*** openstack changes topic to " (Meeting topic: Review of Dublin edge notes 04)"14:18
openstackThe meeting name has been set to 'review_of_dublin_edge_notes_04'14:18
csatari#topic Roll Call14:18
*** openstack changes topic to "Roll Call (Meeting topic: Review of Dublin edge notes 04)"14:18
csatari#info Gergely Csatari14:19
csatari#topic Correction of previous comments14:20
*** openstack changes topic to "Correction of previous comments (Meeting topic: Review of Dublin edge notes 04)"14:20
csatariI've corrected the comments received so far.14:21
csatari#info Status of the comments are maintained here: https://etherpad.openstack.org/p/Dublin-edge-notes-wiki14:21
csatariThere are quite big changes in some chapters.14:22
csatari#info https://wiki.openstack.org/wiki/OpenStack_Edge_Discussions_Dublin_PTG#Example_of_Remote_and_Original_sites have big changes14:23
csatariI'm not sure if we should recheck these during these meeting or just handle incoming comments if anyone has any.14:24
csatariI would not like end up with 100 meetings just for reviewing this page ;)14:24
esaraultNot sure either, its aint like I'm going to argue over the KEystone and Glance points14:25
csatariLets just record this to the minutes and go on ;)14:25
csatari#info Any comments to the already checked sections are welcome on edge-computing@lists.openstack.org14:26
csatariOkay, lets jump into the requirements14:26
csatari#topic Review of 5.3 Requirements14:27
*** openstack changes topic to "Review of 5.3 Requirements (Meeting topic: Review of Dublin edge notes 04)"14:27
csatari#link https://wiki.openstack.org/wiki/OpenStack_Edge_Discussions_Dublin_PTG#Requirements14:27
csatariIf no comments for that one sentence lets move.14:28
esaraultYeah the outcome will depend heavily on Kingbird14:29
csatariSkipping the empty chapters.14:29
csatariWell, the point would be to define requirements to Kingbird or other projects.14:30
esaraultOk then14:30
esaraultDsicovery of data source section14:30
esaraultAre we expecting some sort of broadcast capabilities?14:30
csatari#topic Review of 5.3.2.1 Discovering of data sources14:31
*** openstack changes topic to "Review of 5.3.2.1 Discovering of data sources (Meeting topic: Review of Dublin edge notes 04)"14:31
esaraultOr would this be reported to amaster entity14:31
csatariI think we discussed a cascaded architecture.14:32
esaraultSome tiered reporting basically?14:32
esaraultX amount of nodes call back to their "masters"14:32
esaraultthen those call back to theirs, until back to "root"14:33
*** trevor_intel has joined #edge-computing-group14:33
csatariWhen an edge cloud instance is "switched on" it should be able to find an other edge cloud instance which have the data.14:33
esaraultOk14:33
csatariyes14:33
esaraultBroadcasting?14:33
csatariHow it is done I have no idea ;)14:33
esaraultTherE's just things to keep in mind on that point. Not every network will allow broadcasting constantly14:34
esaraultShould be a notion of being able to "call back home" knowing where the home is supposed to be made when broadcasting on the network is not a viable route14:34
csatariShould I add a note about this?14:34
esaraultIf you believe it brings value please do so14:34
csatarisure14:34
esaraultTaking for granted everyone is goign to allow broadcasting on their network is very unlikely14:35
csatari#action csatari 5.3.2.1 add a note that broadcasting might not be possible in every network, so some alternative solution should be found.14:35
csatariAny comments to this or to 5.3.1.1 An edge cloud site should be aware of its location?14:36
esaraultNope, that's it for me14:37
csatari#topic Review of 5.3.2.2 Registering for synchronisation14:37
*** openstack changes topic to "Review of 5.3.2.2 Registering for synchronisation (Meeting topic: Review of Dublin edge notes 04)"14:37
csatari#link https://wiki.openstack.org/wiki/OpenStack_Edge_Discussions_Dublin_PTG#Registering_for_synchronisation14:37
esaraultFor Registering for synch, 1. there's a typo right before the word API, 2. I think this'll address the "call back home" capability so this looks good14:37
esaraultHome being the active edge instance(s)14:38
csatari#action csatari 5.3.2.2 Fix reistration14:39
csatari2) okay14:39
csatari#topic Review of 5.3.2.3 Advertise metadata data source service14:39
*** openstack changes topic to "Review of 5.3.2.3 Advertise metadata data source service (Meeting topic: Review of Dublin edge notes 04)"14:39
csatari#link https://wiki.openstack.org/wiki/OpenStack_Edge_Discussions_Dublin_PTG#Advertise_metadata_data_source_service14:40
esaraultSo here's a quesiton I have regarding authentication14:40
esaraultHow can a node apply for registration if it isn't known in keystone14:41
esaraultDoes Kingbird have a seperate list of authotized instances?14:41
esaraultwhich is then synchronized to Keystone if and only if approved14:42
esaraultor is there some Keystone implication when trying to register14:42
csatariHere we are discussing OpenStack instances not nodes, but maybe that is irrelevant for the question.14:42
esaraultWell, let's see I have a new geo I want to join to the Edge Federation let's say14:43
esaraultAnd not just a node level14:43
csatariI think the list of authrized instances should be dynamic.14:44
esaraultDo we expect the ability to add a new geo directly via Kingbird? How do the two Keystone instance sin each of those are synchronized? Which one takes over the other given the are now "one"?14:44
csatariMy thinking: 1) The new edge cloud insance finds its "master" edge cloud instance14:45
csatari(It could either find Keystone first and ask for Kingbirds API or can find Kingbird directly)14:46
csatariFor this we will need "Advertise metadata data source service" in the "master"14:47
csatari2) The new edge cloud instance registers for synchrnoisation to the master14:47
csatariFor this we will need "Registering for synchronisation"14:47
csatariKingbird in the "master" edge cloud instance records the new edge cloud instance as a client for synchronisation and drops the current metadata to it.14:48
esaraultAnd my point is around this is where do we draw the line on what we expose of the existing environment for proper segregation of traffic until the new edge region is deemed "trustworthy and secure". Which service are we willing to expose, a discovery service running in Keybird or an active Keystone instance running production workloads that if compromised, could bring an entire14:49
esaraultregion down. My understanding here is that Keybird would act as the gateway before allowing a new region to go talk to the active master Keystone14:49
csatariAham. Good point.14:50
esaraultI do agree on 1) and 2) but the security side of thing here is not to be underestimated.14:51
esaraultI see this as the first place I would go top onto to bring the region down14:51
esarault*would go tap14:51
csatariShould I add an authentication of the registering edge cloud instance requirement?14:51
esaraultI believe so14:51
esaraultThis could be MAC adress filtering, IP ranges whitelisting14:52
esaraultThe ability to define who's able to call to the edge instance14:52
csatariI was thinking about some key exchange thing.14:53
esaraultWould work too14:53
csatariWhitelist should be distributed to every "master" edge cloud instances.14:54
csatari#action csatari Add a new requirement to authenticate the registering edge cloud instances.14:54
csatariI can add these options and we can discuss it later.14:54
esaraultSure thing14:54
csatariOkay anything else for 5.3.2.3 Advertise metadata data source service ?14:55
csatari#topic Review of 5.3.2.4 User management data source side14:55
*** openstack changes topic to "Review of 5.3.2.4 User management data source side (Meeting topic: Review of Dublin edge notes 04)"14:55
csatari#link https://wiki.openstack.org/wiki/OpenStack_Edge_Discussions_Dublin_PTG#User_management_data_source_side14:56
csatari#topic Next steps14:57
*** openstack changes topic to "Next steps (Meeting topic: Review of Dublin edge notes 04)"14:57
csatari#info We will continue from 5.3.2.5 User management data receiver side14:58
csatariI will start oranizing the next one.14:58
csatariSorry for being late.14:58
csatariShould we keep doodling the time or should we go for a fixed time?14:59
csatariFor me doodling is a bit better due to my hectic calendar.14:59
*** epalper has quit IRC14:59
csatariBut maybe a fixed time would result in better participation . . .14:59
*** epalper has joined #edge-computing-group14:59
esaraultFixed time would be better it hink14:59
csatariOkay, then let me do a doodle for a fixed time :)15:00
esaraultOtherwise you get these BS ad-hoc meetings that end up taking priority for all the wrong reasons15:00
csatariokay15:00
esaraultI'm not one for sugar coating things :p15:00
csatari#action csatari to organize a fixed time meeting for the reviews15:00
csatari😄15:01
esaraultAlright, see you next week, was a short but useful session ^^15:01
csatariThanks esarault for your comments anf thanks ildikov for lurking.15:01
csatariI will not mis sthe first part of the next one ;)15:02
csatari#endmeeting15:02
*** openstack changes topic to "Finishing up (Meeting topic: Review of Dublin edge notes II)"15:02
openstackMeeting ended Thu Jun 14 15:02:13 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:02
openstackMinutes:        http://eavesdrop.openstack.org/meetings/review_of_dublin_edge_notes_04/2018/review_of_dublin_edge_notes_04.2018-06-14-14.18.html15:02
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/review_of_dublin_edge_notes_04/2018/review_of_dublin_edge_notes_04.2018-06-14-14.18.txt15:02
openstackLog:            http://eavesdrop.openstack.org/meetings/review_of_dublin_edge_notes_04/2018/review_of_dublin_edge_notes_04.2018-06-14-14.18.log.html15:02
ildikovcsatari: thanks for running the meeting!15:02
csatariMy pleasure.15:02
*** trevor_intel has quit IRC15:12
*** trevor_intel has joined #edge-computing-group15:48
*** epalper has quit IRC17:34
*** esarault has quit IRC20:34
*** trevor_intel has quit IRC22:29
*** markvoelker has quit IRC23:46

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!