*** fusmu has quit IRC | 00:01 | |
openstackgerrit | Jay Bryant proposed openstack/cinder-specs master: Add HA section to template file https://review.openstack.org/550295 | 00:12 |
---|---|---|
openstackgerrit | Eric Harney proposed openstack/cinder stable/ocata: Log config options with oslo.config https://review.openstack.org/548891 | 00:20 |
*** gouthamr has joined #openstack-cinder | 00:23 | |
*** wanghao has quit IRC | 00:31 | |
*** wanghao has joined #openstack-cinder | 00:32 | |
*** masuberu has quit IRC | 00:35 | |
*** masuberu has joined #openstack-cinder | 00:37 | |
*** wanghao_ has joined #openstack-cinder | 00:45 | |
*** wanghao has quit IRC | 00:45 | |
*** zhaochao has joined #openstack-cinder | 01:05 | |
*** wanghao has joined #openstack-cinder | 01:08 | |
*** itlinux has joined #openstack-cinder | 01:10 | |
*** david-lyle has joined #openstack-cinder | 01:10 | |
*** wanghao_ has quit IRC | 01:11 | |
*** prashkre has joined #openstack-cinder | 01:22 | |
*** jmlowe has quit IRC | 01:24 | |
*** lbragstad has quit IRC | 01:27 | |
*** prashkre has quit IRC | 01:31 | |
*** zhangguoqing has joined #openstack-cinder | 01:31 | |
*** itlinux has quit IRC | 01:42 | |
*** zhurong has joined #openstack-cinder | 01:45 | |
*** jmlowe has joined #openstack-cinder | 01:46 | |
*** david-lyle has quit IRC | 01:47 | |
*** AlexeyAbashkin has joined #openstack-cinder | 01:49 | |
*** gouthamr has quit IRC | 01:50 | |
*** AlexeyAbashkin has quit IRC | 01:53 | |
*** dave-mccowan has joined #openstack-cinder | 01:56 | |
tommylikehu | hey eharney, I updated the launchpad, I think this is not a security or critial issue: https://bugs.launchpad.net/cinder/+bug/1714858 | 01:57 |
openstack | Launchpad bug 1714858 in Cinder "Some APIs doesn't check the owner policy" [Medium,In progress] - Assigned to TommyLike (hu-husheng) | 01:57 |
*** imacdonn has quit IRC | 02:02 | |
*** imacdonn has joined #openstack-cinder | 02:03 | |
*** mriedem_afk has quit IRC | 02:03 | |
*** zhaochao has quit IRC | 02:06 | |
*** markstur has quit IRC | 02:12 | |
*** harlowja has quit IRC | 02:13 | |
*** chrisyang_0660 has joined #openstack-cinder | 02:19 | |
*** zhaochao has joined #openstack-cinder | 02:19 | |
*** edmondsw has quit IRC | 02:21 | |
*** itlinux has joined #openstack-cinder | 02:22 | |
*** edmondsw has joined #openstack-cinder | 02:22 | |
*** markvoelker has quit IRC | 02:25 | |
*** markvoelker has joined #openstack-cinder | 02:26 | |
*** edmondsw has quit IRC | 02:26 | |
*** jmlowe has quit IRC | 02:28 | |
*** liverpooler has joined #openstack-cinder | 02:29 | |
openstackgerrit | Vivek Soni proposed openstack/cinder stable/queens: 3PAR: Monitor task of promoting a virtual copy https://review.openstack.org/550310 | 02:34 |
*** itlinux has quit IRC | 02:36 | |
openstackgerrit | Merged openstack/cinder stable/pike: Solving permission errors due to directory ownership on NFS https://review.openstack.org/550227 | 02:37 |
openstackgerrit | Merged openstack/cinder master: VMAX driver - Concurrency issues involving replicated volumes https://review.openstack.org/550021 | 02:37 |
*** masuberu has quit IRC | 02:42 | |
*** andreas_s has joined #openstack-cinder | 02:43 | |
*** namnh has joined #openstack-cinder | 02:47 | |
*** andreas_s has quit IRC | 02:48 | |
*** liverpooler has quit IRC | 02:48 | |
*** mikal has quit IRC | 02:51 | |
*** markvoelker has quit IRC | 02:53 | |
*** mikal has joined #openstack-cinder | 02:53 | |
*** markvoelker has joined #openstack-cinder | 02:53 | |
*** prashkre has joined #openstack-cinder | 02:55 | |
*** salv-orl_ has joined #openstack-cinder | 02:57 | |
*** salv-orlando has quit IRC | 03:00 | |
*** masber has joined #openstack-cinder | 03:02 | |
*** itlinux has joined #openstack-cinder | 03:04 | |
*** mikal_ has joined #openstack-cinder | 03:05 | |
*** itlinux has quit IRC | 03:07 | |
*** mikal has quit IRC | 03:07 | |
*** markstur has joined #openstack-cinder | 03:08 | |
*** markstur has quit IRC | 03:11 | |
*** markstur has joined #openstack-cinder | 03:11 | |
*** wanghao_ has joined #openstack-cinder | 03:18 | |
*** wanghao has quit IRC | 03:20 | |
*** masber has quit IRC | 03:36 | |
*** prashkre has quit IRC | 03:43 | |
*** masber has joined #openstack-cinder | 03:47 | |
*** links has joined #openstack-cinder | 03:59 | |
*** dave-mccowan has quit IRC | 04:08 | |
*** dalgaaf has quit IRC | 04:18 | |
*** dalgaaf has joined #openstack-cinder | 04:19 | |
*** nicolasbock has quit IRC | 04:21 | |
openstackgerrit | Vivek Soni proposed openstack/cinder stable/pike: 3PAR: Add `force detach` support https://review.openstack.org/550324 | 04:21 |
*** mikal_ has quit IRC | 04:25 | |
*** mikal has joined #openstack-cinder | 04:25 | |
*** Swimingly has quit IRC | 04:25 | |
*** links has quit IRC | 04:25 | |
*** Swimingly has joined #openstack-cinder | 04:26 | |
*** chrisyang_0660 has quit IRC | 04:27 | |
*** links has joined #openstack-cinder | 04:27 | |
*** masuberu has joined #openstack-cinder | 04:36 | |
*** psachin has joined #openstack-cinder | 04:40 | |
*** masber has quit IRC | 04:40 | |
*** masber has joined #openstack-cinder | 04:40 | |
*** pgadiya has joined #openstack-cinder | 04:41 | |
*** masuberu has quit IRC | 04:42 | |
*** zhurong has quit IRC | 05:08 | |
*** edmondsw has joined #openstack-cinder | 05:09 | |
*** edmondsw has quit IRC | 05:14 | |
*** abhishekk has joined #openstack-cinder | 05:19 | |
*** prashkre has joined #openstack-cinder | 05:27 | |
*** masuberu has joined #openstack-cinder | 05:32 | |
*** masber has quit IRC | 05:35 | |
*** david-lyle has joined #openstack-cinder | 05:59 | |
*** e0ne has joined #openstack-cinder | 06:11 | |
vivsoni | Hi Team, please review https://review.openstack.org/#/c/550310/ | 06:11 |
*** e0ne has quit IRC | 06:15 | |
*** rcernin_ has joined #openstack-cinder | 06:18 | |
*** fusmu has joined #openstack-cinder | 06:20 | |
*** lucky_ has joined #openstack-cinder | 06:21 | |
*** rcernin has quit IRC | 06:21 | |
*** lucky_ has quit IRC | 06:25 | |
*** markstur has quit IRC | 06:25 | |
*** vishal__ has joined #openstack-cinder | 06:26 | |
*** sapd_ has joined #openstack-cinder | 06:35 | |
*** alexchadin has joined #openstack-cinder | 06:38 | |
*** masuberu has quit IRC | 06:38 | |
*** sapd__ has quit IRC | 06:39 | |
*** links has quit IRC | 06:41 | |
*** lkuchlan has joined #openstack-cinder | 06:41 | |
openstackgerrit | wanghao proposed openstack/cinder master: Support to query volume filter by changes since/before https://review.openstack.org/352688 | 06:44 |
*** zhurong has joined #openstack-cinder | 06:50 | |
*** links has joined #openstack-cinder | 06:52 | |
openstackgerrit | TommyLike proposed openstack/cinder master: Add 'list_volume' in Group show&list API Doc https://review.openstack.org/539145 | 06:52 |
*** edmondsw has joined #openstack-cinder | 06:58 | |
*** wanghao_ has quit IRC | 06:58 | |
*** gkadam has joined #openstack-cinder | 06:58 | |
*** wanghao has joined #openstack-cinder | 07:01 | |
*** edmondsw has quit IRC | 07:03 | |
openstackgerrit | yixuan zhang proposed openstack/cinder master: Storwize: update flashcopy_rate range and add it to volume type https://review.openstack.org/550365 | 07:03 |
*** winston-d has joined #openstack-cinder | 07:04 | |
*** rcernin has joined #openstack-cinder | 07:05 | |
*** rcernin_ has quit IRC | 07:06 | |
*** threestrands_ has joined #openstack-cinder | 07:09 | |
*** threestrands_ has quit IRC | 07:09 | |
*** threestrands_ has joined #openstack-cinder | 07:09 | |
*** threestrands has quit IRC | 07:10 | |
*** threestrands_ has quit IRC | 07:13 | |
*** hamdyk has joined #openstack-cinder | 07:17 | |
*** andreas_s has joined #openstack-cinder | 07:21 | |
*** wanghao has quit IRC | 07:22 | |
*** wanghao has joined #openstack-cinder | 07:23 | |
*** armaan has joined #openstack-cinder | 07:51 | |
*** pcaruana has joined #openstack-cinder | 07:54 | |
*** pcaruana has quit IRC | 07:55 | |
*** pcaruana has joined #openstack-cinder | 07:55 | |
*** wanghao has quit IRC | 07:55 | |
*** e0ne has joined #openstack-cinder | 07:56 | |
*** vivsoni_ has joined #openstack-cinder | 07:57 | |
vivsoni_ | hi | 07:57 |
*** AlexeyAbashkin has joined #openstack-cinder | 07:58 | |
*** wanghao has joined #openstack-cinder | 08:00 | |
*** vivsoni_ has quit IRC | 08:02 | |
*** gus has quit IRC | 08:02 | |
*** gus has joined #openstack-cinder | 08:04 | |
*** alexchadin has quit IRC | 08:07 | |
*** alexchadin has joined #openstack-cinder | 08:10 | |
*** lhx_ has joined #openstack-cinder | 08:16 | |
*** lhx_ has quit IRC | 08:17 | |
*** e0ne has quit IRC | 08:19 | |
*** danpawlik has joined #openstack-cinder | 08:21 | |
*** tesseract has joined #openstack-cinder | 08:22 | |
*** lhx_ has joined #openstack-cinder | 08:30 | |
*** threestrands has joined #openstack-cinder | 08:32 | |
*** threestrands has quit IRC | 08:32 | |
*** threestrands has joined #openstack-cinder | 08:32 | |
*** threestrands has quit IRC | 08:36 | |
vivsoni | Hi Team, please review https://review.openstack.org/#/c/550324/ | 08:39 |
*** rcernin has quit IRC | 08:42 | |
*** edmondsw has joined #openstack-cinder | 08:46 | |
*** edmondsw has quit IRC | 08:50 | |
*** moshele has joined #openstack-cinder | 08:57 | |
*** Anand has joined #openstack-cinder | 09:11 | |
*** Anand has quit IRC | 09:12 | |
openstackgerrit | Ciara Stacke proposed openstack/cinder stable/queens: VMAX driver - Concurrency issues involving replicated volumes https://review.openstack.org/550410 | 09:23 |
*** armaan has quit IRC | 09:24 | |
*** armaan has joined #openstack-cinder | 09:25 | |
openstackgerrit | wanghao proposed openstack/cinder master: Support to query volume filter by changes since/before https://review.openstack.org/352688 | 09:29 |
*** yumapath has joined #openstack-cinder | 09:31 | |
*** yumapath has quit IRC | 09:32 | |
*** wanghao has quit IRC | 09:34 | |
*** wanghao has joined #openstack-cinder | 09:35 | |
*** wanghao has quit IRC | 09:35 | |
*** wanghao has joined #openstack-cinder | 09:36 | |
*** wanghao has quit IRC | 09:36 | |
*** wanghao has joined #openstack-cinder | 09:36 | |
*** wanghao has quit IRC | 09:37 | |
*** wanghao has joined #openstack-cinder | 09:37 | |
*** wanghao has quit IRC | 09:38 | |
*** armaan has quit IRC | 09:38 | |
*** armaan has joined #openstack-cinder | 09:38 | |
*** wanghao has joined #openstack-cinder | 09:38 | |
*** wanghao has quit IRC | 09:39 | |
*** wanghao has joined #openstack-cinder | 09:39 | |
*** wanghao has quit IRC | 09:39 | |
*** wanghao has joined #openstack-cinder | 09:41 | |
*** namnh has quit IRC | 09:49 | |
*** slunkad_ has quit IRC | 09:51 | |
*** slunkad has joined #openstack-cinder | 09:54 | |
*** stakeda has quit IRC | 10:04 | |
*** e0ne has joined #openstack-cinder | 10:04 | |
*** hamdyk has quit IRC | 10:13 | |
*** zeestrat has left #openstack-cinder | 10:14 | |
*** kukacz has quit IRC | 10:17 | |
*** zhurong has quit IRC | 10:23 | |
*** lvdombrkr has joined #openstack-cinder | 10:25 | |
*** hamdyk has joined #openstack-cinder | 10:25 | |
*** prashkre_ has joined #openstack-cinder | 10:27 | |
*** prashkre has quit IRC | 10:29 | |
*** edmondsw has joined #openstack-cinder | 10:34 | |
*** edmondsw has quit IRC | 10:38 | |
*** KeithMnemonic has joined #openstack-cinder | 10:40 | |
*** ganso has joined #openstack-cinder | 11:00 | |
*** abhishekk has quit IRC | 11:12 | |
*** salv-orl_ has quit IRC | 11:29 | |
*** salv-orlando has joined #openstack-cinder | 11:29 | |
*** nicolasbock has joined #openstack-cinder | 11:31 | |
*** salv-orlando has quit IRC | 11:34 | |
*** alexchadin has quit IRC | 11:43 | |
*** salv-orlando has joined #openstack-cinder | 11:48 | |
*** diablo_rojo has quit IRC | 11:57 | |
*** alexchadin has joined #openstack-cinder | 12:00 | |
*** moshele has quit IRC | 12:11 | |
*** moshele has joined #openstack-cinder | 12:14 | |
*** salv-orl_ has joined #openstack-cinder | 12:18 | |
*** pooja-jadhav has joined #openstack-cinder | 12:18 | |
*** abishop_ has joined #openstack-cinder | 12:18 | |
*** abishop has quit IRC | 12:20 | |
*** salv-orlando has quit IRC | 12:20 | |
*** pooja_jadhav has quit IRC | 12:21 | |
*** armaan has quit IRC | 12:26 | |
*** armaan has joined #openstack-cinder | 12:26 | |
*** psachin has quit IRC | 12:27 | |
*** Cyb3rManiak has quit IRC | 12:28 | |
*** Cyb3rManiak has joined #openstack-cinder | 12:28 | |
*** alexchadin has quit IRC | 12:29 | |
*** nicolasbock has quit IRC | 12:31 | |
*** dave-mccowan has joined #openstack-cinder | 12:32 | |
*** sticker has joined #openstack-cinder | 12:33 | |
*** alexchadin has joined #openstack-cinder | 12:34 | |
*** alexchadin has quit IRC | 12:39 | |
*** lbragstad has joined #openstack-cinder | 12:39 | |
*** prashkre_ has quit IRC | 12:40 | |
*** alexchadin has joined #openstack-cinder | 12:42 | |
*** yangyapeng has quit IRC | 12:42 | |
*** yangyapeng has joined #openstack-cinder | 12:43 | |
*** yangyapeng has quit IRC | 12:47 | |
*** alexchadin has quit IRC | 12:47 | |
openstackgerrit | Luiz Benedito Aidar Gavioli proposed openstack/cinder master: NetApp: Add use-exact-size parameter when creating a LUN on ONTAP iSCSI https://review.openstack.org/550261 | 12:53 |
*** armaan has quit IRC | 12:55 | |
*** armaan has joined #openstack-cinder | 12:56 | |
*** moshele has quit IRC | 12:57 | |
*** alexchadin has joined #openstack-cinder | 12:58 | |
*** moshele has joined #openstack-cinder | 12:59 | |
*** lhx_ has quit IRC | 13:01 | |
*** alexchadin has quit IRC | 13:03 | |
*** alexchadin has joined #openstack-cinder | 13:03 | |
*** alexchadin has quit IRC | 13:07 | |
*** alexchadin has joined #openstack-cinder | 13:15 | |
*** edmondsw_ has joined #openstack-cinder | 13:25 | |
*** pchavva has joined #openstack-cinder | 13:25 | |
openstackgerrit | Merged openstack/cinder master: Dell EMC SC: Added timeout options for SC driver https://review.openstack.org/548091 | 13:28 |
openstackgerrit | Merged openstack/cinder stable/queens: ScaleIO Driver: Document support for ScaleIO 2.5 https://review.openstack.org/549747 | 13:28 |
*** yangyapeng has joined #openstack-cinder | 13:29 | |
*** yangyapeng has quit IRC | 13:33 | |
*** liverpooler has joined #openstack-cinder | 13:35 | |
*** pgadiya has quit IRC | 13:35 | |
*** moshele has quit IRC | 13:39 | |
*** mmethot has joined #openstack-cinder | 13:51 | |
*** lhx_ has joined #openstack-cinder | 13:53 | |
*** dustins has joined #openstack-cinder | 14:10 | |
*** lbragstad has quit IRC | 14:15 | |
*** armaan has quit IRC | 14:16 | |
DuncanT | Hi. Just looking at the PTG summary. Regarding signed images, there doesn't seem to be any discussion of a config option to block unsigned images, which makes the whole thing rather pointless. Any attacked who has access to modify an image can replace it with an unsigned image and get the same effect now, so all signing is doing is acting as an optional checksum, which isn't what is usually understood by | 14:16 |
DuncanT | 'signed images' | 14:16 |
DuncanT | @jungleboyj ^^^ | 14:17 |
*** diablo_rojo has joined #openstack-cinder | 14:19 | |
*** armaan has joined #openstack-cinder | 14:20 | |
*** lbragstad has joined #openstack-cinder | 14:21 | |
*** erlon has joined #openstack-cinder | 14:21 | |
*** armaan has quit IRC | 14:22 | |
*** sar has joined #openstack-cinder | 14:23 | |
eharney | yeah, i wondered if there should be a "strict" option that requires signatures for all images | 14:31 |
erlon | @all, does ZNC bouncer with freenode? | 14:31 |
erlon | *does anyone uses... | 14:33 |
*** links has quit IRC | 14:37 | |
*** yangyapeng has joined #openstack-cinder | 14:37 | |
*** r-daneel has joined #openstack-cinder | 14:38 | |
*** mvk has quit IRC | 14:41 | |
*** yangyapeng has quit IRC | 14:42 | |
*** zhangguoqing has quit IRC | 14:43 | |
*** lvdombrkr has quit IRC | 14:45 | |
*** mriedem has joined #openstack-cinder | 14:45 | |
openstackgerrit | Balazs Gibizer proposed openstack/cinder master: Improve notification short-circuit https://review.openstack.org/442016 | 14:49 |
*** yangyapeng has joined #openstack-cinder | 14:53 | |
*** erlon_ has joined #openstack-cinder | 14:54 | |
*** yangyape_ has joined #openstack-cinder | 14:56 | |
*** lhx__ has joined #openstack-cinder | 14:56 | |
*** erlon has quit IRC | 14:57 | |
*** erlon_ is now known as erlon | 14:57 | |
*** mmethot has quit IRC | 14:57 | |
*** mmethot has joined #openstack-cinder | 14:57 | |
*** yangyapeng has quit IRC | 14:58 | |
*** lhx_ has quit IRC | 14:59 | |
*** prashkre_ has joined #openstack-cinder | 15:03 | |
*** yangyape_ has quit IRC | 15:06 | |
*** yangyapeng has joined #openstack-cinder | 15:07 | |
*** yangyapeng has quit IRC | 15:07 | |
*** yangyapeng has joined #openstack-cinder | 15:07 | |
*** eharney has quit IRC | 15:12 | |
*** edmondsw_ is now known as edmondsw | 15:13 | |
*** sar has quit IRC | 15:23 | |
*** alexchadin has quit IRC | 15:24 | |
*** mvk has joined #openstack-cinder | 15:30 | |
*** armaan has joined #openstack-cinder | 15:32 | |
DuncanT | eharney: Added to spec review | 15:33 |
*** yangyapeng has quit IRC | 15:40 | |
*** yangyapeng has joined #openstack-cinder | 15:41 | |
*** jbernard has quit IRC | 15:41 | |
*** hamdyk has quit IRC | 15:43 | |
*** yangyapeng has quit IRC | 15:45 | |
jungleboyj | DuncanT: Thanks for looking at that. :-) Yeah, you are right. It would seem that we would need to handle that case as well. | 15:46 |
*** jbernard has joined #openstack-cinder | 15:46 | |
*** salv-orlando has joined #openstack-cinder | 15:48 | |
*** salv-orl_ has quit IRC | 15:50 | |
jungleboyj | erlon: Not sure. I see that a number of people use it. | 15:51 |
*** e0ne has quit IRC | 15:53 | |
*** e0ne has joined #openstack-cinder | 15:54 | |
jungleboyj | geguileo: When you have a chance can you look at this: https://review.openstack.org/#/c/550295/ | 15:54 |
*** david-lyle has quit IRC | 15:54 | |
tommylikehu | geguileo: and this one too:) https://review.openstack.org/#/c/542691/ | 15:57 |
jungleboyj | geguileo: Is going to wish he didn't have so much to say at the PTG. ;-) | 15:58 |
geguileo | lol | 15:58 |
*** gouthamr has joined #openstack-cinder | 16:00 | |
*** eharney has joined #openstack-cinder | 16:06 | |
*** hemna_ has joined #openstack-cinder | 16:06 | |
hemna_ | hey, was there a reason why we didn't allow this backport? https://review.openstack.org/#/c/506091/ | 16:07 |
hemna_ | I'm running into create vol from snaps puking on pike, because that didn't land | 16:07 |
*** lkuchlan has quit IRC | 16:08 | |
hemna_ | queens and master have that fix | 16:08 |
hemna_ | create vol from snap just dies w/o it | 16:08 |
hemna_ | (lvm) | 16:08 |
*** crose has joined #openstack-cinder | 16:09 | |
*** pcaruana has quit IRC | 16:10 | |
*** markstur has joined #openstack-cinder | 16:10 | |
*** zhaochao has quit IRC | 16:11 | |
*** markstur has quit IRC | 16:12 | |
*** markstur has joined #openstack-cinder | 16:12 | |
*** andreas_s has quit IRC | 16:14 | |
*** andreas_s has joined #openstack-cinder | 16:19 | |
hemna_ | beuller? | 16:20 |
hemna_ | everyone still on Dublin time? | 16:21 |
eharney | probably in the meeting channel :) | 16:21 |
hemna_ | oh that.... | 16:22 |
hemna_ | lolz | 16:22 |
*** andreas_s has quit IRC | 16:28 | |
*** KeithMnemonic has quit IRC | 16:31 | |
*** andreas_s has joined #openstack-cinder | 16:33 | |
*** tobasco is now known as tobasco|away | 16:35 | |
*** itlinux has joined #openstack-cinder | 16:35 | |
openstackgerrit | Ciara Stacke proposed openstack/cinder master: VMAX driver - Retype replicated volumes https://review.openstack.org/550524 | 16:41 |
*** danpawlik has quit IRC | 16:41 | |
*** sticker has quit IRC | 16:41 | |
*** lhx__ has quit IRC | 16:42 | |
*** fusmu has quit IRC | 16:45 | |
*** andreas_s has quit IRC | 16:47 | |
*** andreas_s has joined #openstack-cinder | 16:49 | |
*** prashkre_ has quit IRC | 16:51 | |
*** andreas_s has quit IRC | 16:58 | |
*** yangyapeng has joined #openstack-cinder | 17:00 | |
tommylikehu | hey eharney I still think we don't have security issue for this bug | 17:02 |
eharney | tommylikehu: how so? | 17:02 |
jungleboyj | Yeah, I am confused how we don't have a security issue if we have policy not working properly. | 17:03 |
tommylikehu | for those APIs we have to retrieve the resource, and the get resource method in cinder will ensure the resource in project otherwise it will raise 404 | 17:04 |
openstackgerrit | Gorka Eguileor proposed openstack/cinder stable/queens: Fix reporting old stats https://review.openstack.org/550531 | 17:04 |
openstackgerrit | Gorka Eguileor proposed openstack/cinder stable/queens: Fix allocated_capacity_gb race on create volume https://review.openstack.org/550532 | 17:04 |
eharney | that sounds like it makes an assumption that all places impacted by this happen to fail safely for another reason | 17:04 |
eharney | that's a daring bet if we don't even have a list of what the APIs are | 17:04 |
*** yangyapeng has quit IRC | 17:04 | |
jungleboyj | eharney: Agreed. That was what I was trying to parse out of geguileo response. | 17:05 |
tommylikehu | eharney: yeah, that could be a big list and we have to find out them all one by one | 17:05 |
jungleboyj | If it isn't a security hole just because it should fail elsewhere we have a hole that needs to be fixed. | 17:05 |
eharney | well step 1 is to go look at the patches landed that changed these calls, someone does need to go through them one by one | 17:06 |
tommylikehu | eharney: I do think this exists in cinder for a real long time | 17:07 |
*** danpawlik has joined #openstack-cinder | 17:07 | |
eharney | then we can prove that the recent changes didn't make it any worse, and then still go figure out where all the issues are one by one | 17:07 |
tommylikehu | eharney: ok, with your understanding what is the correct response code if I try to query a resource that doesn't belong to my project? | 17:09 |
jungleboyj | tommylikehu: I would expect an access denied. | 17:09 |
jungleboyj | Permissions error. | 17:09 |
eharney | yeah, i would expect 403s, but that detail is really not my concern about any of this | 17:09 |
jungleboyj | 403 | 17:10 |
tommylikehu | eharney: ok | 17:10 |
jungleboyj | eharney: Right. Important thing is they don't ahve access. | 17:10 |
tommylikehu | https://github.com/openstack/cinder/blob/stable/ocata/cinder/volume/api.py#L599 | 17:10 |
tommylikehu | this is code in ocata | 17:10 |
tommylikehu | one of these APIs | 17:10 |
eharney | right... | 17:11 |
*** gkadam has quit IRC | 17:11 | |
jungleboyj | I need to run to an appointment. | 17:11 |
hemna_ | lunch..... | 17:11 |
jungleboyj | Can you guys hash this out and I will check back later? | 17:11 |
jungleboyj | hemna_: I will follow up on your question when I get back. | 17:11 |
*** danpawlik has quit IRC | 17:12 | |
tommylikehu | eharney: so what should I do next, follow this up and keep fixing on my patch? | 17:13 |
*** armaan has quit IRC | 17:15 | |
*** hemna_ has quit IRC | 17:15 | |
eharney | tommylikehu: IMO we can't land your patch and resolve the bug without knowing what was broken before it and what all it fixes | 17:15 |
*** armaan has joined #openstack-cinder | 17:15 | |
erlon | hey | 17:16 |
*** david-lyle has joined #openstack-cinder | 17:16 | |
tommylikehu | eharney: I can bring more detail on the launchpad or commit message | 17:17 |
tommylikehu | it's not about something broken it's about incorrect behaviour | 17:18 |
eharney | incorrect behavior sounds pretty bad when it's behavior around security policy checks | 17:19 |
tommylikehu | for administrator I can not really configure a owner policy to use | 17:19 |
tommylikehu | and for end user I can visit/handle other project's resource (although it has been stopped by 404 error) | 17:20 |
eharney | if all APIs using this code incorrectly happen to make the right calls where that failure would occur | 17:20 |
eharney | which may or may not be true | 17:21 |
tommylikehu | first I would expect a 403 error for that case I mentioned | 17:22 |
*** andreas_s has joined #openstack-cinder | 17:22 | |
tommylikehu | and also there are some APIs would be risky if I configure a policy of admin_or_owner | 17:24 |
eharney | which sounds bad | 17:25 |
tommylikehu | https://github.com/openstack/cinder/blob/stable/ocata/cinder/api/contrib/admin_actions.py#L159 | 17:25 |
*** fusmu has joined #openstack-cinder | 17:25 | |
*** markstur has quit IRC | 17:26 | |
tommylikehu | the reset status method for volume will directly update the resource in database. | 17:26 |
tommylikehu | that is to say if I change the rule into admin_or_owner, anyone can update it. | 17:27 |
eharney | right -> security bug | 17:27 |
tommylikehu | ... | 17:27 |
*** markstur has joined #openstack-cinder | 17:27 | |
eharney | if users can reset status on other users volume's, that's a security issue | 17:28 |
tommylikehu | then I would like to fix only these APIs that seems to have a secutity bug and leave the rest as what they are today | 17:28 |
eharney | which are which APIs? | 17:29 |
tommylikehu | need investigation | 17:29 |
tommylikehu | all of the policy enforcement code without a target_obj parameter have to be investigated | 17:30 |
eharney | right | 17:30 |
*** fusmu has quit IRC | 17:30 | |
tommylikehu | ok | 17:31 |
*** david-lyle has quit IRC | 17:33 | |
*** andreas_s has quit IRC | 17:41 | |
*** prashkre_ has joined #openstack-cinder | 17:42 | |
*** andreas_s has joined #openstack-cinder | 17:44 | |
*** danpawlik has joined #openstack-cinder | 17:47 | |
*** armaan has quit IRC | 17:47 | |
*** armaan has joined #openstack-cinder | 17:48 | |
*** markstur has quit IRC | 17:49 | |
*** yangyapeng has joined #openstack-cinder | 17:49 | |
*** markstur has joined #openstack-cinder | 17:50 | |
*** prashkre_ has quit IRC | 17:51 | |
*** prashkre_ has joined #openstack-cinder | 17:51 | |
*** danpawlik has quit IRC | 17:52 | |
openstackgerrit | Merged openstack/cinder stable/queens: 3PAR: Monitor task of promoting a virtual copy https://review.openstack.org/550310 | 17:53 |
*** armaan has quit IRC | 17:53 | |
*** armaan has joined #openstack-cinder | 17:54 | |
*** sar has joined #openstack-cinder | 17:54 | |
*** yangyapeng has quit IRC | 17:54 | |
*** pcaruana has joined #openstack-cinder | 17:57 | |
*** andreas_s has quit IRC | 17:57 | |
*** admin__ has joined #openstack-cinder | 18:00 | |
*** andreas_s has joined #openstack-cinder | 18:02 | |
*** AlexeyAbashkin has quit IRC | 18:06 | |
*** hemna_ has joined #openstack-cinder | 18:13 | |
hemna_ | mep | 18:14 |
*** markstur_ has joined #openstack-cinder | 18:15 | |
*** andreas_s has quit IRC | 18:16 | |
*** danpawlik has joined #openstack-cinder | 18:17 | |
hemna_ | jungleboyj, so, can we revisit https://review.openstack.org/#/c/506091/ | 18:18 |
*** markstur has quit IRC | 18:18 | |
hemna_ | I think lvm is borked in pike w/o that fix in | 18:18 |
hemna_ | I get failures 100% of the time on create vol from snap because of it | 18:19 |
*** pchavva has quit IRC | 18:19 | |
*** david-lyle has joined #openstack-cinder | 18:21 | |
*** andreas_s has joined #openstack-cinder | 18:22 | |
*** danpawlik has quit IRC | 18:22 | |
*** e0ne has quit IRC | 18:24 | |
admin__ | hemna_: hi | 18:25 |
hemna_ | admin__, hi | 18:26 |
*** admin__ has quit IRC | 18:26 | |
*** vivsoni_ has joined #openstack-cinder | 18:29 | |
*** mvk has quit IRC | 18:31 | |
vivsoni_ | hemna_ & team: i want your suggestion | 18:31 |
hemna_ | sup | 18:31 |
vivsoni_ | hemna_: RHOSP12(i.e. pike) certification require 'force detach' to be backported to stable/pike | 18:33 |
vivsoni_ | hemna_: and in our driver we have fixed/handled that in master | 18:33 |
*** r-daneel has quit IRC | 18:33 | |
*** r-daneel has joined #openstack-cinder | 18:34 | |
vivsoni_ | hemna_: and backporting the same to stable/pike is not allowed https://review.openstack.org/#/c/550324/ | 18:35 |
*** david-lyle has quit IRC | 18:35 | |
*** andreas_s has quit IRC | 18:36 | |
hemna_ | I agree that's a new feature of the driver and not a bugfix | 18:38 |
vivsoni_ | hemna_: so in that case, can you please suggest | 18:39 |
*** yangyapeng has joined #openstack-cinder | 18:39 | |
hemna_ | not much you can do really | 18:40 |
hemna_ | new features don't get backported | 18:40 |
vivsoni_ | hemna_: ok | 18:40 |
*** andreas_s has joined #openstack-cinder | 18:41 | |
*** vivsoni_ has quit IRC | 18:43 | |
*** yangyapeng has quit IRC | 18:44 | |
*** liverpooler has quit IRC | 18:47 | |
*** tesseract has quit IRC | 18:53 | |
*** danpawlik has joined #openstack-cinder | 18:56 | |
*** sdake has joined #openstack-cinder | 18:59 | |
*** sdake has quit IRC | 18:59 | |
*** sdake has joined #openstack-cinder | 18:59 | |
*** andreas_s has quit IRC | 18:59 | |
*** danpawlik has quit IRC | 19:00 | |
*** pchavva has joined #openstack-cinder | 19:02 | |
*** david-lyle has joined #openstack-cinder | 19:03 | |
*** mvk has joined #openstack-cinder | 19:14 | |
thingee | For third-party CI testing, are we using driverlog or some random wiki? I sent out an email in moving this information into repos http://lists.openstack.org/pipermail/openstack-dev/2018-March/127929.html | 19:17 |
thingee | mriedem: ^ or with nova | 19:17 |
thingee | if so, I was trying to put together a list of things that should be captured in these ini files with each driver | 19:18 |
mriedem | thingee: i don't think anyone in nova land is using driverlog | 19:18 |
mriedem | not sure what you mean by "using" though | 19:18 |
mriedem | do you mean, how is nova communicating that drivers (or features) which require 3rd party CI are getting tested? | 19:19 |
thingee | seems like everyone is using the same success/failure patterns. I think I remember in the past CI's having different patterns and that being captured... oh looks like driverlog has it http://git.openstack.org/cgit/openstack/driverlog/tree/etc/default_data.json#n196 | 19:19 |
mriedem | https://docs.openstack.org/nova/latest/user/feature-classification.html was the feature classification effort from OSIC, led by johnthetubaguy, which attempted to do something like this - report test coverage for features and drivers | 19:20 |
mriedem | as far as i know, the feature classification / OSIC thing never got mature to the point of actually cross checking CI logs | 19:20 |
mriedem | it was all manual markup in the docs | 19:20 |
thingee | jungleboyj ^ | 19:23 |
*** erlon has quit IRC | 19:24 | |
*** harlowja has joined #openstack-cinder | 19:26 | |
*** danpawlik has joined #openstack-cinder | 19:27 | |
*** danpawlik has quit IRC | 19:31 | |
*** liverpooler has joined #openstack-cinder | 19:32 | |
*** AlexeyAbashkin has joined #openstack-cinder | 19:33 | |
*** r-daneel_ has joined #openstack-cinder | 19:34 | |
*** r-daneel has quit IRC | 19:35 | |
*** r-daneel_ is now known as r-daneel | 19:35 | |
*** AlexeyAbashkin has quit IRC | 19:37 | |
eharney | is anyone maintaining the "legacy-grenade-dsvm-cinder-mn-sub-volbak" job? | 19:38 |
eharney | it seems to be failing on stable/ocata on with some pretty mundane problems (grenade failing on an rsync command) | 19:38 |
*** AlexeyAbashkin has joined #openstack-cinder | 19:38 | |
*** nicolasbock has joined #openstack-cinder | 19:39 | |
*** e0ne has joined #openstack-cinder | 19:43 | |
*** eharney has quit IRC | 19:54 | |
*** eharney has joined #openstack-cinder | 19:59 | |
*** danpawlik has joined #openstack-cinder | 20:01 | |
jungleboyj | thingee: We discussed at the PTG moving to something like what Nova is doing for the support Matrix and away from the giant matrix in our Wiki. | 20:05 |
jungleboyj | It, however, is not automated with CI. Sean and I have been going through every so often marking drivers as unsupported if they are not passing. | 20:06 |
*** danpawlik has quit IRC | 20:06 | |
jungleboyj | Do it at least once a release. We, don't, however have a good way that that connects to a support matrix. | 20:06 |
jungleboyj | Something I hope to work on this release. | 20:06 |
*** david-lyle has quit IRC | 20:07 | |
*** r-daneel_ has joined #openstack-cinder | 20:09 | |
*** r-daneel has quit IRC | 20:09 | |
*** r-daneel_ is now known as r-daneel | 20:09 | |
*** hemna_ has quit IRC | 20:13 | |
jungleboyj | hemna: I am back. | 20:13 |
*** david-lyle has joined #openstack-cinder | 20:15 | |
openstackgerrit | Jay Bryant proposed openstack/cinder-specs master: Add HA section to template file https://review.openstack.org/550295 | 20:22 |
*** KeithMnemonic has joined #openstack-cinder | 20:23 | |
*** AlexeyAbashkin has quit IRC | 20:29 | |
*** danpawlik has joined #openstack-cinder | 20:38 | |
*** KeithMnemonic has quit IRC | 20:39 | |
*** danpawlik has quit IRC | 20:43 | |
*** AlexeyAbashkin has joined #openstack-cinder | 20:45 | |
*** AlexeyAbashkin has quit IRC | 20:50 | |
*** david-lyle has quit IRC | 20:53 | |
*** prateek has joined #openstack-cinder | 20:54 | |
*** gouthamr has quit IRC | 20:57 | |
*** crose has quit IRC | 21:01 | |
*** prateek has quit IRC | 21:02 | |
*** prateek_ has joined #openstack-cinder | 21:03 | |
*** AlexeyAbashkin has joined #openstack-cinder | 21:04 | |
*** pcaruana has quit IRC | 21:12 | |
*** danpawlik has joined #openstack-cinder | 21:14 | |
*** andreas_s has joined #openstack-cinder | 21:15 | |
*** danpawlik has quit IRC | 21:19 | |
*** andreas_s has quit IRC | 21:20 | |
*** r-daneel_ has joined #openstack-cinder | 21:22 | |
*** r-daneel has quit IRC | 21:23 | |
*** r-daneel_ is now known as r-daneel | 21:23 | |
*** AlexeyAbashkin has quit IRC | 21:28 | |
*** danpawlik has joined #openstack-cinder | 21:46 | |
*** yangyapeng has joined #openstack-cinder | 21:48 | |
*** danpawlik has quit IRC | 21:51 | |
*** yangyapeng has quit IRC | 21:54 | |
*** prateek__ has joined #openstack-cinder | 21:58 | |
*** prateek_ has quit IRC | 22:01 | |
thingee | jungleboyj: this would replace that https://review.openstack.org/#/c/481304/ | 22:02 |
thingee | well not replace, but it is it | 22:04 |
jungleboyj | thingee: Ok, so that is what we should use to generate our support matrix? | 22:04 |
jungleboyj | How is that different from what Nova has done? | 22:05 |
thingee | it's where the code came from | 22:05 |
jungleboyj | Ah, and you are wanting to have it in a library rather than pulled into each project's code. | 22:06 |
*** r-daneel has quit IRC | 22:07 | |
thingee | jungleboyj: https://review.openstack.org/#/q/status:open+topic:support-matrix | 22:07 |
thingee | jungleboyj: we talked about this in denver ptg anyways | 22:08 |
*** david-lyle has joined #openstack-cinder | 22:08 | |
jungleboyj | thingee: Ok. I wasn't in on that discussion. So, are you planning to do the implementation for Cinder or just trying to guide us here. | 22:08 |
thingee | I could do the cinder one too. I was a little worried bringing it up because of some of the auto generated stuff you have with classes. | 22:09 |
thingee | with the driver class code itself* | 22:09 |
openstackgerrit | Merged openstack/cinder master: Correct attachment create success response code https://review.openstack.org/540972 | 22:10 |
thingee | but if your plan was to move to what nova was doing anyways, that makes it easier for me :) | 22:11 |
jungleboyj | thingee: That was part of the concern we had when we talked about this last week is we aren't really sure how to deal with it. | 22:11 |
jungleboyj | thingee: Yes, we thought that we should figure out a way to go that direction. | 22:11 |
thingee | jungleboyj: the other thing this helps with is it be what the market place pulls in. so no more updating driverlog. | 22:11 |
jungleboyj | thingee: Which I don't think we have actually been doing that. | 22:12 |
*** openstackstatus has quit IRC | 22:13 | |
*** openstack has joined #openstack-cinder | 22:17 | |
*** ChanServ sets mode: +o openstack | 22:17 | |
jungleboyj | We agree we need to do something different. It is kind-of sitting on my plate right now. | 22:18 |
jungleboyj | Sounds like I should work with you to make it happen properly. | 22:18 |
thingee | jungleboyj: it's adding an ini, the sphinx directive and requirement. not sure what process we need to talk about? :) | 22:18 |
thingee | but yes feedback on changes would be great | 22:18 |
*** yangyapeng has quit IRC | 22:19 | |
thingee | jungleboyj: this should help https://docs.openstack.org/sphinx-feature-classification/latest/usage.html | 22:20 |
*** danpawlik has quit IRC | 22:21 | |
jungleboyj | thingee: Oh, is that seriously all there is to it? | 22:23 |
thingee | heh yup | 22:23 |
jungleboyj | Ok. For some reason you were making it sound more complicated. | 22:24 |
jungleboyj | Or others were. | 22:24 |
jungleboyj | So, the requirements and stuff are all pretty free form. I can use it to write up the matrix the way we need it then. | 22:25 |
thingee | jungleboyj: not exactly. the library will recognizing syntax as given in the document. | 22:26 |
thingee | so anything beyond say, here's a list of features with their descriptions and here's which drivers support it | 22:28 |
jungleboyj | thingee: Right, I need to follow the syntax but the list of features is free form. | 22:28 |
thingee | yes of course | 22:28 |
jungleboyj | thingee: Ok, when I had glanced at it before it seemed like it was more hardcoded. Didn't realize that all the sections were pretty free form. Shouldn't be that hard to map what we have out on the website to that format then. | 22:29 |
jungleboyj | thingee: I will start working on doing that and ping you if I have issues. | 22:29 |
thingee | jungleboyj: that's great, thanks | 22:30 |
jungleboyj | thingee: Yeah, thanks for explaining it and for the doc link. | 22:30 |
*** dklyle has joined #openstack-cinder | 22:34 | |
*** eharney has quit IRC | 22:36 | |
*** itlinux has quit IRC | 22:36 | |
*** fusmu has joined #openstack-cinder | 22:37 | |
*** rcernin has joined #openstack-cinder | 22:37 | |
*** edmondsw has quit IRC | 22:38 | |
*** edmondsw has joined #openstack-cinder | 22:39 | |
*** fusmu has quit IRC | 22:42 | |
*** openstackstatus has quit IRC | 22:42 | |
*** openstack has joined #openstack-cinder | 22:46 | |
*** ChanServ sets mode: +o openstack | 22:46 | |
*** tpsilva has quit IRC | 22:47 | |
*** AlexeyAbashkin has quit IRC | 22:51 | |
*** david-lyle has joined #openstack-cinder | 22:54 | |
*** dklyle has quit IRC | 22:55 | |
*** armaan has quit IRC | 22:58 | |
*** armaan has joined #openstack-cinder | 22:59 | |
*** dachilco has joined #openstack-cinder | 23:00 | |
*** vishal__ has quit IRC | 23:07 | |
*** threestrands has joined #openstack-cinder | 23:12 | |
*** threestrands has quit IRC | 23:12 | |
*** threestrands has joined #openstack-cinder | 23:12 | |
*** danpawlik has joined #openstack-cinder | 23:30 | |
*** armaan has quit IRC | 23:33 | |
*** armaan has joined #openstack-cinder | 23:34 | |
*** dachilco has quit IRC | 23:34 | |
*** threestrands_ has joined #openstack-cinder | 23:34 | |
*** danpawlik has quit IRC | 23:35 | |
*** pchavva has quit IRC | 23:35 | |
*** threestrands_ has quit IRC | 23:35 | |
*** threestrands_ has joined #openstack-cinder | 23:36 | |
*** threestrands has quit IRC | 23:36 | |
*** jmlowe has joined #openstack-cinder | 23:39 | |
*** dachilco has joined #openstack-cinder | 23:40 | |
*** AlexeyAbashkin has joined #openstack-cinder | 23:45 | |
*** AlexeyAbashkin has quit IRC | 23:49 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!