*** superanne has joined #openstack-glance | 00:05 | |
*** superanne has quit IRC | 00:41 | |
*** superanne has joined #openstack-glance | 00:47 | |
*** zul has joined #openstack-glance | 00:52 | |
*** superanne has quit IRC | 01:03 | |
*** superanne has joined #openstack-glance | 01:04 | |
*** superanne has quit IRC | 01:12 | |
*** superanne has joined #openstack-glance | 01:17 | |
*** boris-42 has quit IRC | 01:42 | |
*** ParsectiX has quit IRC | 01:42 | |
*** ParsectiX has joined #openstack-glance | 01:42 | |
*** superanne has quit IRC | 02:41 | |
*** superanne has joined #openstack-glance | 03:27 | |
*** chlong has quit IRC | 03:50 | |
*** flaper87 has quit IRC | 04:01 | |
*** flaper87 has joined #openstack-glance | 04:04 | |
*** Longgeek has joined #openstack-glance | 04:06 | |
*** rwsu-afk has quit IRC | 04:24 | |
*** buzztroll has joined #openstack-glance | 04:55 | |
*** superanne has quit IRC | 04:58 | |
*** superanne has joined #openstack-glance | 05:00 | |
*** Longgeek has quit IRC | 05:02 | |
*** superanne has quit IRC | 05:05 | |
*** haomai___ has joined #openstack-glance | 05:23 | |
*** vilobhmm has joined #openstack-glance | 05:25 | |
*** haomai___ has quit IRC | 05:28 | |
*** sgotliv has joined #openstack-glance | 05:38 | |
*** Longgeek has joined #openstack-glance | 05:45 | |
*** r-daneel_ has quit IRC | 05:54 | |
*** superanne has joined #openstack-glance | 06:00 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/glance: Imported Translations from Transifex https://review.openstack.org/158570 | 06:02 |
---|---|---|
*** superanne has quit IRC | 06:06 | |
*** bkopilov has joined #openstack-glance | 06:11 | |
*** vilobhmm has quit IRC | 06:44 | |
*** vilobhmm has joined #openstack-glance | 06:44 | |
*** nlevinki has joined #openstack-glance | 06:45 | |
*** vilobhmm has quit IRC | 06:46 | |
*** superanne has joined #openstack-glance | 07:01 | |
*** Longgeek has quit IRC | 07:04 | |
*** vilobhmm has joined #openstack-glance | 07:05 | |
*** superanne has quit IRC | 07:07 | |
*** ParsectiX has quit IRC | 07:32 | |
*** ParsectiX has joined #openstack-glance | 07:32 | |
*** superanne has joined #openstack-glance | 08:02 | |
*** superanne has quit IRC | 08:07 | |
*** vilobhmm has quit IRC | 08:16 | |
*** GB21 has joined #openstack-glance | 08:18 | |
*** GB21 has quit IRC | 08:18 | |
*** tshefi has joined #openstack-glance | 08:29 | |
*** buzztroll has quit IRC | 08:41 | |
*** Miouge has joined #openstack-glance | 08:59 | |
*** jistr has joined #openstack-glance | 09:11 | |
*** jistr has quit IRC | 09:23 | |
*** julim has quit IRC | 10:03 | |
*** julim has joined #openstack-glance | 10:05 | |
*** chlong has joined #openstack-glance | 10:40 | |
openstackgerrit | Zhi Yan Liu proposed openstack/glance_store: Switch to use oslo.log library https://review.openstack.org/161147 | 10:41 |
openstackgerrit | Zhi Yan Liu proposed openstack/glance_store: Use oslo_config.cfg.ConfigOpts in glance_store https://review.openstack.org/160163 | 10:43 |
*** ParsectiX has quit IRC | 10:46 | |
*** ParsectiX has joined #openstack-glance | 10:47 | |
*** boris-42 has joined #openstack-glance | 10:48 | |
*** Longgeek has joined #openstack-glance | 10:51 | |
*** ParsectiX has quit IRC | 11:15 | |
*** chlong has quit IRC | 11:21 | |
*** ParsectiX has joined #openstack-glance | 11:29 | |
*** flaper87 has quit IRC | 12:06 | |
*** flaper87 has joined #openstack-glance | 12:06 | |
*** ParsectiX has quit IRC | 12:37 | |
*** ParsectiX has joined #openstack-glance | 12:38 | |
*** chlong has joined #openstack-glance | 12:39 | |
*** Longgeek has quit IRC | 12:40 | |
*** Longgeek has joined #openstack-glance | 12:57 | |
*** superanne has joined #openstack-glance | 13:00 | |
*** nellysmitt has joined #openstack-glance | 13:32 | |
*** nellysmitt has quit IRC | 13:32 | |
*** superanne has quit IRC | 13:40 | |
*** bkopilov has quit IRC | 13:40 | |
*** GB21 has joined #openstack-glance | 13:55 | |
*** chlong has quit IRC | 14:06 | |
*** superanne has joined #openstack-glance | 14:15 | |
*** gb21_ has joined #openstack-glance | 14:20 | |
*** GB21 has quit IRC | 14:20 | |
*** gb21_ has quit IRC | 15:01 | |
*** nlevinki has quit IRC | 15:11 | |
*** ParsectiX has quit IRC | 15:11 | |
*** ParsectiX has joined #openstack-glance | 15:11 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 15:58 | |
*** r-daneel_ has joined #openstack-glance | 16:11 | |
*** r-daneel__ has joined #openstack-glance | 16:12 | |
*** r-daneel_ has quit IRC | 16:16 | |
*** ParsectiX has quit IRC | 16:37 | |
*** ParsectiX has joined #openstack-glance | 16:37 | |
*** buzztroll has joined #openstack-glance | 16:39 | |
openstackgerrit | Ian Cordasco proposed openstack/glance: Add operators to provide multivalue support https://review.openstack.org/148213 | 16:42 |
openstackgerrit | Ian Cordasco proposed openstack/glance: WIP - Functional tests for catalog index service https://review.openstack.org/157209 | 16:49 |
*** superanne has quit IRC | 16:51 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 17:14 | |
*** superanne has joined #openstack-glance | 17:30 | |
*** superanne has quit IRC | 17:35 | |
*** superanne has joined #openstack-glance | 17:36 | |
*** buzztroll has quit IRC | 17:41 | |
*** buzztroll has joined #openstack-glance | 17:44 | |
*** ParsectiX has quit IRC | 17:48 | |
*** ParsectiX has joined #openstack-glance | 17:48 | |
*** ParsectiX has quit IRC | 17:50 | |
*** ParsectiX has joined #openstack-glance | 17:51 | |
*** Longgeek has quit IRC | 18:16 | |
*** ParsectiX has quit IRC | 18:22 | |
*** ParsectiX has joined #openstack-glance | 18:22 | |
*** bkopilov has joined #openstack-glance | 18:42 | |
*** r-daneel__ has quit IRC | 18:47 | |
*** superanne has quit IRC | 18:52 | |
*** bkopilov has quit IRC | 18:54 | |
*** ParsectiX has quit IRC | 19:03 | |
*** ParsectiX has joined #openstack-glance | 19:04 | |
*** buzztroll has quit IRC | 19:09 | |
nikhil_k | zhiyan: please try to get someone from infra to merge this https://review.openstack.org/#/c/161079/ | 19:10 |
nikhil_k | zhiyan: we'd get your capabilities spec approved soon | 19:11 |
nikhil_k | spec == spec + code :) | 19:11 |
hemanthm | nikhil_k: o/ | 19:13 |
nikhil_k | hemanthm: hi | 19:13 |
hemanthm | nikhil_k: I was working on zhiyan's comments on image deactivate MP | 19:14 |
nikhil_k | hemanthm: ah nice, I was about to send you an email | 19:14 |
*** pkoniszewski has joined #openstack-glance | 19:14 | |
hemanthm | nikhil_k: while it makes complete sense to handle locations, I begin to think marking location status will open other set of issues/concerns | 19:15 |
hemanthm | nikhil_k: say, what if one tries to add another location to a deactivated image | 19:15 |
hemanthm | then we'll have to alter that flow too | 19:16 |
hemanthm | since we didn't want to alter other operations muhc for a deactivated image, I'm wondering if disabling showing locations for deactivated images would be a better fix? | 19:17 |
hemanthm | just thinking in that direction, not very sure | 19:18 |
nikhil_k | hemanthm: the issue there is that, operators who allow direct access to location string will not have any benefit from deactivating | 19:20 |
nikhil_k | so, if someone tries to add location to deactivated image, they should get 403 no? | 19:21 |
*** pkoniszewski has quit IRC | 19:21 | |
hemanthm | nikhil_k: not if we forbid direct access to locations for deactivated images, right? | 19:26 |
nikhil_k | hemanthm: are we adding new config for that? | 19:26 |
hemanthm | nikhil_k: looking to make sure about 403, not sure if the current PS does that | 19:26 |
nikhil_k | eh? | 19:26 |
nikhil_k | I think read access is allowed on deactivated image, write should not be! | 19:27 |
nikhil_k | ? | 19:27 |
*** buzztroll has joined #openstack-glance | 19:27 | |
hemanthm | nikhil_k: well, as of now, download is the only forbidden operation. All other operations are allowed irrespective of read/write | 19:28 |
hemanthm | I think the idea was to let all other operations work as expected because its still not a proven malicious image | 19:29 |
*** vilobhmm has joined #openstack-glance | 19:29 | |
hemanthm | you can still add/change/delete properties | 19:29 |
hemanthm | and, if I'm not completely wrong, you do so with locations as well | 19:30 |
hemanthm | *can | 19:31 |
nikhil_k | hemanthm: hmm, downloading from that location is still an issue right? | 19:31 |
nikhil_k | or we'r letting the clients of glance deal with that? | 19:31 |
nikhil_k | the latter does make sense | 19:31 |
hemanthm | nikhil_k: https://github.com/openstack/glance-specs/blob/master/specs/kilo/deactivate-image.rst#proposed-change | 19:32 |
nikhil_k | hemanthm: so, how can we restrict location access to non-admin? | 19:32 |
nikhil_k | or should we change the spec? | 19:32 |
*** echevemaster has joined #openstack-glance | 19:33 | |
nikhil_k | I'm thiking independently of what's out there, just to ensure we'r not blocked bacause of it | 19:33 |
nikhil_k | (exact reason for not appoving specs until code is sorted out) | 19:33 |
hemanthm | nikhil_k: yeah, the direct location stuff is definitely an issue | 19:34 |
nikhil_k | may be we can add another config that says whether to allow direct access on deactive state? | 19:35 |
*** ParsectiX has quit IRC | 19:35 | |
*** ParsectiX has joined #openstack-glance | 19:35 | |
nikhil_k | or let zhiyan say more on what his use case is | 19:35 |
hemanthm | nikhil_k: https://github.com/openstack/glance/blob/master/glance/db/sqlalchemy/api.py#L165 | 19:36 |
hemanthm | nikhil_k: I was thinking of adding checks on status and admin context there | 19:36 |
hemanthm | you basically don't see locations if an image is deactivated | 19:37 |
hemanthm | unless you are an admin user | 19:37 |
hemanthm | or we can do force_show_deactivated on the lines of force_show_deleted | 19:39 |
nikhil_k | hemanthm: hmm, I think first one is more restrictive so we'd go with it for now | 19:41 |
nikhil_k | let's see what zhiyan says about it on the review | 19:41 |
hemanthm | ok, sure | 19:44 |
*** bkopilov has joined #openstack-glance | 20:28 | |
*** hemanth has joined #openstack-glance | 20:39 | |
*** superanne has joined #openstack-glance | 20:41 | |
*** bkopilov has quit IRC | 20:46 | |
*** superanne has quit IRC | 20:49 | |
*** Miouge has quit IRC | 20:50 | |
*** jamielennox|away is now known as jamielennox | 20:58 | |
*** Miouge has joined #openstack-glance | 21:20 | |
*** dhellmann has quit IRC | 21:21 | |
*** dhellmann has joined #openstack-glance | 21:22 | |
*** bkopilov has joined #openstack-glance | 21:23 | |
*** dhellmann has quit IRC | 21:23 | |
*** dhellmann has joined #openstack-glance | 21:24 | |
*** dhellmann has quit IRC | 21:24 | |
*** dhellmann has joined #openstack-glance | 21:25 | |
ativelkov | miguelgrinberg: thanks for your comments in artifacts spec. I've aswered some of the questions | 21:26 |
*** dhellmann has quit IRC | 21:28 | |
*** dhellmann has joined #openstack-glance | 21:29 | |
*** chlong has joined #openstack-glance | 21:38 | |
*** Miouge has quit IRC | 21:43 | |
*** vilobhmm has quit IRC | 21:55 | |
*** chlong has quit IRC | 21:56 | |
*** mfedosin_ has joined #openstack-glance | 22:00 | |
*** diegows has joined #openstack-glance | 22:33 | |
openstackgerrit | Jamie Lennox proposed openstack/python-glanceclient: Replace mox in tests with requests-mock https://review.openstack.org/141982 | 22:49 |
openstackgerrit | Jamie Lennox proposed openstack/python-glanceclient: Stub authentication requests rather than plugins https://review.openstack.org/141993 | 22:49 |
openstackgerrit | Jamie Lennox proposed openstack/python-glanceclient: Remove keystoneclient mocks https://review.openstack.org/141992 | 22:49 |
openstackgerrit | Jamie Lennox proposed openstack/python-glanceclient: Don't accept *args for client https://review.openstack.org/141699 | 22:49 |
*** buzztroll has quit IRC | 23:34 | |
*** chlong has joined #openstack-glance | 23:35 | |
*** mfedosin_ has quit IRC | 23:39 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!