Thursday, 2017-12-07

« Wednesday, 2017-12-06 Index Friday, 2017-12-08 »
*** linkmark has quit IRC00:45
openstackgerritwangxiyuan proposed openstack/glance master: Scrubber refactor  https://review.openstack.org/51044901:07
*** gyee has quit IRC01:12
*** zhurong has joined #openstack-glance01:18
*** takedakn has joined #openstack-glance01:20
*** Dinesh_Bhor has joined #openstack-glance01:50
*** dalgaaf has quit IRC01:58
*** dalgaaf has joined #openstack-glance02:00
*** rcernin has quit IRC02:12
*** trungnv has quit IRC02:12
*** rcernin has joined #openstack-glance02:20
*** harlowja has quit IRC02:22
*** pbourke has quit IRC02:27
*** pbourke has joined #openstack-glance02:29
*** btully has joined #openstack-glance02:59
*** btully has quit IRC03:03
*** takedakn has quit IRC03:08
*** MattMan has quit IRC03:10
*** MattMan has joined #openstack-glance03:11
*** abhishekk has joined #openstack-glance03:31
openstackgerritBrian Rosmaita proposed openstack/glance master: Fix 500 on ValueError during image-import  https://review.openstack.org/52270803:37
openstackgerritBrian Rosmaita proposed openstack/glance master: Prevent image become active without disk and container formats  https://review.openstack.org/52277403:41
abhishekkrosmaita: hi, anything to take care/watch during my day time?03:50
*** threestrands has joined #openstack-glance03:52
*** threestrands has quit IRC03:52
*** threestrands has joined #openstack-glance03:52
*** udesale has joined #openstack-glance04:01
*** adisky_ has joined #openstack-glance04:21
*** zhurong has quit IRC04:22
*** links has joined #openstack-glance04:26
rosmaitaabhishekk please keep an eye on 522774, 522708 and 521457 ... they are taking a long time to get through the gate, i had to rebase some of them again04:26
rosmaitaalso, the scrubber: https://review.openstack.org/#/c/510449/04:27
abhishekkrosmaita: sure04:27
rosmaitai'm just downloading that one now to test it out04:27
rosmaitathanks!04:27
abhishekkI will do it too04:27
*** harlowja has joined #openstack-glance04:39
*** pdeore has joined #openstack-glance04:43
*** btully has joined #openstack-glance04:47
*** btully has quit IRC04:52
*** pdeore has quit IRC04:54
*** pdeore has joined #openstack-glance04:56
*** tshefi has joined #openstack-glance04:58
*** Dinesh_Bhor has quit IRC05:00
*** tshefi has quit IRC05:28
*** zhurong has joined #openstack-glance05:30
*** harlowja has quit IRC05:30
*** pdeore_ has joined #openstack-glance05:34
*** pdeore has quit IRC05:37
*** pdeore_ has quit IRC05:56
*** pdeore_ has joined #openstack-glance05:57
*** takedakn has joined #openstack-glance05:58
*** pdeore_ has quit IRC06:01
*** takedakn has quit IRC06:02
*** gcb has quit IRC06:08
*** mosulica has joined #openstack-glance06:09
*** gcb has joined #openstack-glance06:10
*** trungnv has joined #openstack-glance06:12
*** AlexeyAbashkin has joined #openstack-glance06:15
*** pdeore has joined #openstack-glance06:24
*** AlexeyAbashkin has quit IRC06:26
*** threestrands has quit IRC06:32
*** sapd_ has joined #openstack-glance06:32
*** sapd has quit IRC06:32
*** rosmaita has quit IRC06:39
*** e0ne has joined #openstack-glance06:41
*** e0ne has quit IRC06:46
*** rcernin has quit IRC07:11
*** zhurong has quit IRC07:16
*** alexchadin has joined #openstack-glance07:51
*** AlexeyAbashkin has joined #openstack-glance08:07
*** tesseract has joined #openstack-glance08:15
*** rcernin has joined #openstack-glance08:19
*** sapd_ has quit IRC08:24
*** btully has joined #openstack-glance08:25
*** sapd_ has joined #openstack-glance08:26
*** btully has quit IRC08:30
kairatso yes, eventually we need to get off all these layers=)08:32
kairatTBH, I replaced all these layers with only 1 wrapper in Glare=)08:33
kairatand logic became VERY clear IMO08:34
kairatit seems original author wrote a lot of java code=)08:34
*** e0ne has joined #openstack-glance08:42
*** tshefi has joined #openstack-glance08:46
*** arcolife has joined #openstack-glance08:55
*** arcolife has quit IRC09:05
*** linkmark has joined #openstack-glance09:23
*** arcolife has joined #openstack-glance09:24
*** alexchadin has quit IRC09:35
*** alexchad_ has joined #openstack-glance09:38
*** bhagyashri_s has joined #openstack-glance09:39
*** Tahvok has quit IRC09:40
*** niraj_singh has joined #openstack-glance09:40
*** nsingh has quit IRC09:41
*** bhagyashris has quit IRC09:41
*** Tahvok has joined #openstack-glance09:43
*** btully has joined #openstack-glance10:14
*** btully has quit IRC10:19
*** rcernin has quit IRC10:21
*** alexchad_ has quit IRC10:27
*** alexchadin has joined #openstack-glance10:28
*** gcb has quit IRC10:29
*** pdeore has quit IRC10:38
*** alexchadin has quit IRC10:39
*** alexchadin has joined #openstack-glance10:40
*** abhishekk has quit IRC10:44
*** pdeore has joined #openstack-glance10:44
*** trungnv has quit IRC10:50
*** trungnv has joined #openstack-glance10:50
*** udesale has quit IRC11:28
*** alexchadin has quit IRC11:43
*** alexchadin has joined #openstack-glance11:43
openstackgerritMerged openstack/glance master: Fix 500 on ValueError during image-import  https://review.openstack.org/52270812:13
*** rosmaita has joined #openstack-glance12:29
openstackgerritliuyamin proposed openstack/glance master: doc migrate: update the doc link address  https://review.openstack.org/50778412:33
*** pdeore has quit IRC12:47
*** alexchadin has quit IRC13:21
openstackgerritOpenStack Proposal Bot proposed openstack/glance master: Updated from global requirements  https://review.openstack.org/52637013:21
openstackgerritBrian Rosmaita proposed openstack/glance master: Fix 500 from duplicate stage call  https://review.openstack.org/52145713:32
*** alexchadin has joined #openstack-glance13:52
*** abhishekk has joined #openstack-glance13:54
*** alexchadin has quit IRC13:56
rosmaitaCourtesy meeting reminder on #openstack-meeting-4: ativelkov, cpallares, flaper87, flwang1, hemanthm, jokke_, kragniz, lakshmiS, mclaren, mfedosin, nikhil_k, Nikolay_St, Olena, pennerc, rosmaita, sigmavirus24, sabari, TravT, ajayaa, GB21, bpoulos, harshs, abhishekk, bunting, dshakhray, wxy, dhellmann, kairat, alex_bash, smcginnis, arcolife13:56
*** takedakn has joined #openstack-glance13:58
*** mine0901 has joined #openstack-glance13:59
arcoliferosmaita, hello !14:00
*** links has quit IRC14:01
abhishekkarcolife: shift to openstack-meeting-414:01
arcolifeabhishekk, roger14:04
*** McClymontS has joined #openstack-glance14:05
*** gb21 has joined #openstack-glance14:06
*** AlexeyAbashkin has quit IRC14:12
*** gb21 has quit IRC14:17
*** McClymontS has quit IRC14:35
*** McClymontS has joined #openstack-glance14:37
*** takedakn has quit IRC14:39
*** arcolife has quit IRC14:47
*** niraj_singh has quit IRC14:48
*** bhagyashri_s has quit IRC14:48
*** mosulica has quit IRC14:48
*** pbourke has quit IRC14:48
*** openstackgerrit has quit IRC14:48
*** lifeless has quit IRC14:48
*** mfisch has quit IRC14:48
*** diegows has quit IRC14:48
*** jinli has quit IRC14:48
*** adisky_ has quit IRC14:48
*** clayton has quit IRC14:48
*** fungi has quit IRC14:48
*** twouters has quit IRC14:48
*** ameade has quit IRC14:48
*** wxy has quit IRC14:48
*** robcresswell has quit IRC14:48
*** DuncanT has quit IRC14:48
*** toan has quit IRC14:48
*** johnthetubaguy has quit IRC14:48
*** dirk has quit IRC14:48
*** mvk has quit IRC14:48
*** slunkad_ has quit IRC14:48
*** niedbalski has quit IRC14:48
*** hugokuo has quit IRC14:48
*** cargonza has quit IRC14:48
*** f0o has quit IRC14:48
*** d34dh0r53 has quit IRC14:48
*** mine0901 has quit IRC14:48
*** mfedosin has quit IRC14:48
*** szaher has quit IRC14:48
*** Tahvok has quit IRC14:48
*** jose-phillips has quit IRC14:48
*** masber has quit IRC14:48
*** hoonetorg has quit IRC14:48
*** zigo has quit IRC14:48
*** Nil_ has quit IRC14:48
*** sapd_ has quit IRC14:48
*** lin_yang has quit IRC14:48
*** serverascode has quit IRC14:48
*** mugsie has quit IRC14:48
*** vkmc has quit IRC14:48
*** amito has quit IRC14:48
*** melwitt has quit IRC14:48
*** oomichi_afk has quit IRC14:48
*** keekz has quit IRC14:48
*** odyssey4me has quit IRC14:48
*** ejat has quit IRC14:48
*** amrith has quit IRC14:48
*** EmilienM has quit IRC14:48
*** jdillaman has quit IRC14:48
*** tonyb has quit IRC14:48
*** kairat has quit IRC14:48
*** timburke has quit IRC14:48
*** freerunner has quit IRC14:48
*** andreykurilin has quit IRC14:48
*** adisky_ has joined #openstack-glance14:54
*** clayton has joined #openstack-glance14:54
*** fungi has joined #openstack-glance14:54
*** twouters has joined #openstack-glance14:54
*** ameade has joined #openstack-glance14:54
*** wxy has joined #openstack-glance14:54
*** robcresswell has joined #openstack-glance14:54
*** DuncanT has joined #openstack-glance14:54
*** toan has joined #openstack-glance14:54
*** johnthetubaguy has joined #openstack-glance14:54
*** dirk has joined #openstack-glance14:54
*** mvk has joined #openstack-glance14:54
*** slunkad_ has joined #openstack-glance14:54
*** niedbalski has joined #openstack-glance14:54
*** hugokuo has joined #openstack-glance14:54
*** cargonza has joined #openstack-glance14:54
*** f0o has joined #openstack-glance14:54
*** d34dh0r53 has joined #openstack-glance14:54
*** d0ugal has quit IRC14:54
*** jinli has joined #openstack-glance14:54
*** diegows has joined #openstack-glance14:54
*** mfisch has joined #openstack-glance14:54
*** lifeless has joined #openstack-glance14:54
*** openstackgerrit has joined #openstack-glance14:54
*** pbourke has joined #openstack-glance14:54
*** mosulica has joined #openstack-glance14:54
*** niraj_singh has joined #openstack-glance14:54
*** bhagyashri_s has joined #openstack-glance14:54
*** mine0901 has joined #openstack-glance14:54
*** Tahvok has joined #openstack-glance14:54
*** sapd_ has joined #openstack-glance14:54
*** lin_yang has joined #openstack-glance14:54
*** jose-phillips has joined #openstack-glance14:54
*** masber has joined #openstack-glance14:54
*** hoonetorg has joined #openstack-glance14:54
*** Nil_ has joined #openstack-glance14:54
*** zigo has joined #openstack-glance14:54
*** EmilienM has joined #openstack-glance14:54
*** mfedosin has joined #openstack-glance14:54
*** ejat has joined #openstack-glance14:54
*** jdillaman has joined #openstack-glance14:54
*** szaher has joined #openstack-glance14:54
*** tonyb has joined #openstack-glance14:54
*** kairat has joined #openstack-glance14:54
*** odyssey4me has joined #openstack-glance14:54
*** amrith has joined #openstack-glance14:54
*** serverascode has joined #openstack-glance14:54
*** mugsie has joined #openstack-glance14:54
*** vkmc has joined #openstack-glance14:54
*** amito has joined #openstack-glance14:54
*** melwitt has joined #openstack-glance14:54
*** timburke has joined #openstack-glance14:54
*** freerunner has joined #openstack-glance14:54
*** andreykurilin has joined #openstack-glance14:54
*** oomichi_afk has joined #openstack-glance14:54
*** keekz has joined #openstack-glance14:54
*** d0ugal has joined #openstack-glance14:55
*** mtreinish has quit IRC14:55
*** mtreinish has joined #openstack-glance14:58
*** abhishekk has quit IRC15:00
rosmaitai need 5 min to grab some coffee15:01
rosmaitabut will be happy to continue any discussion after that15:01
bhagyashri_srosmaita:15:02
bhagyashri_shi15:02
bhagyashri_srosmaita: sure15:02
bhagyashri_srosmaita: just want to clear one point should i add the 'stage_image' policy in the same patch https://review.openstack.org/#/c/524060/15:03
bhagyashri_sor will need separate patch for that15:03
jokke_bhagyashri_s: my initial thought on that is no and no ;)15:08
bhagyashri_sjokke_: ok i will submit the separate patch for stage policy check15:09
rosmaitaback15:11
*** alexchadin has joined #openstack-glance15:11
*** alexchadin has quit IRC15:13
*** d0ugal is now known as Guest2746015:20
rosmaitabhagyashri_s it may be best to combine them ... jokke_ was saying we may not need import_image policy because import cannot be done unless an image has been created, and we already have a create_image policy15:21
jokke_bhagyashri_s: which part of no you did not understand?15:21
*** tshefi has quit IRC15:21
* rosmaita wonders if jokke_ is hung over from finland independence celebrations15:22
jokke_so yeah ... I do have a big problem of messing the feature up with policies and can't exactly understand what the admins have done to us to deserve that15:22
*** jochi has joined #openstack-glance15:22
bhagyashri_srosmaita: ohh ok that means there is no need to add 'import_image' policy instad of that just add 'stage_image' policy15:22
bhagyashri_si am right?15:22
rosmaitathat is what i think15:22
*** Guest27460 has quit IRC15:23
jokke_I'm currently against both, but please convince me otherwise15:23
*** d0ugal has joined #openstack-glance15:23
*** d0ugal has quit IRC15:23
*** d0ugal has joined #openstack-glance15:23
bhagyashri_sjokke_: you mean to say no need of 'stage_image' and 'import_image' polices15:24
jokke_bhagyashri_s: correct15:24
rosmaitawell, stage_image is the end-user-facing upload_image policy15:24
rosmaitaso we need stage_image for all the reasons we have upload_image15:25
jokke_rosmaita: no, we don't ... if one does not want to expose the staging to their end users they can just configure glance not having file-local15:25
*** links has joined #openstack-glance15:25
bhagyashri_sjokke_: as on the current master for PUT /v2/images/{image_id}/file there is 'uplaod_image' policyt and same policy is applied for import API call15:26
jokke_bhagyashri_s: yes and that's the part we need to _fix_ not create tons of new policies to complicate things15:26
rosmaitajokke_ but that shuts it off completely, does not allow you to shut off abusers but preserve it for good people15:26
jokke_rosmaita: you can always set those abusers to image_create = !15:27
rosmaitathen they can't create snapshots15:27
*** alexchadin has joined #openstack-glance15:28
bhagyashri_sjokke_: as in future the plan is to use the PUT /v2/images/{image_id}/file for service user and import or stage API for end user than in that case that will get problem15:28
jokke_rosmaita: bhagyashri_s: as soon as we have support for the service user we will have solution to Brian's use case _without_ dedicated glance nodes for Nova15:29
rosmaitaso maybe we just want to get rid of upload_image ?15:29
jokke_rosmaita: so now your abuser will just spam queued images to glance when they try to create images and then you end up blocking them creating images on your public nodes anyways15:30
jokke_rosmaita: for public facing, yes we do15:30
jokke_and we have nice little policy there to do that15:30
jokke_the problem with adding policies to import and stage calls is that it's way more complex beast to tackle than what is currently proposed ... seems like both of you are forgetting our discoverability API which needs to take those policy scopes in account when user asks "what can I do in this cloud"15:33
*** jochi has quit IRC15:33
rosmaitaso suppose we move upload_image to the controller and out of set_data15:33
jokke_rosmaita: that sounds like a good plan15:33
rosmaitaand not add any new policies at this point15:33
jokke_to fix the issue we're currently facing15:34
rosmaitawe def need to get the service token stuff into Rocky15:34
*** nikhil has joined #openstack-glance15:35
jokke_I or someone else just needs to find time to figure out if the middlewares actually provides us all what is needed there alredy15:35
jokke_It just might be that the keystone and oslo.policy can just fine provide all that already and we just need to put in examples how to utilize that in the policy files15:36
rosmaitawe need a keystone person to discuss this with15:36
rosmaitamaybe i can set up a virtual meeting with lance15:36
*** jochi has joined #openstack-glance15:36
*** McClymontS has quit IRC15:37
rosmaitaok, so bhagyashri_s back to your patch ... so the issue on the bug is that upload_image policy prevents PUT .../stage from working15:38
rosmaitathe proposed fix now is to move the upload_image policy check from imge.set_data() to the controller15:38
rosmaitaand not introduce any new policies at this point15:38
rosmaitaon the theory that an operator can stop import by restricting the create_image policy15:39
bhagyashri_srosmaita: no no the upload_image policy is prevents the import call POST /v2/images/{image_id}/import15:39
rosmaitaoh right15:40
jokke_I might have missed something very obvious here, it just feels super counterintuitive with all the interoperability work we've put in to mess with the flow by introducing policies to every step on the flow and just hope that the admins can figure out how to configure it15:40
jokke_bhagyashri_s: so did I actually put policy enforcement there or is it coming from somewhere deeper in the layers?15:41
rosmaitabhagyashri_s you are correct15:41
rosmaitai think the problem is that during import, you eventually need to call image.set_data(), and that15:42
rosmaitais governed by upload_image policy15:42
jokke_ah so the solution is the same, it's just affecting different place15:42
rosmaitaright15:42
jokke_cool15:43
rosmaitai need either more sleep or more coffee15:43
jokke_We seriously need more hands on the deck15:43
bhagyashri_sjokke_: the policy applied incae of import call is here: https://github.com/openstack/glance/blob/master/glance/common/scripts/image_import/main.py#L14615:43
rosmaitabut jokke_ you have a good point about too many policies15:43
jokke_lots of these issues would be solvable if we had resource to take care of stuff like service tokens and quotas15:43
rosmaita++15:44
jokke_rosmaita: which reminds me15:44
jokke_one more complication to the possible future quota implementation15:45
bhagyashri_srosmaita, jokke_: i have on question as we plaining to restrict the import call using image_create policy then why 'upload_image' policy is required15:45
jokke_I bet we need to do it per storage type once we enable the multiple backend stores15:45
jokke_bhagyashri_s: so we restrict the upload call out15:46
jokke_bhagyashri_s: as that's the one drivers to implement and migrate to the new workflow15:46
jokke_"that's one of the drivers"15:48
*** McClymontS has joined #openstack-glance15:48
rosmaitajokke_ that's very possible (about diff quotas per store), but probably just getting simple quotas in first will be an improvement15:48
jokke_rosmaita: I though we have that :P15:49
jokke_at least we have hell of a lot quota code in glance :D15:49
bhagyashri_srosmaita: as the service users are using the PUT /v2/images/{image_id}/file and if we restrict the import call using the 'image_create' policy then service user will also not be able to create the image15:50
rosmaitai think we have limits that are called "quotas"15:50
rosmaitawell, at this point we won't limit import at all15:51
rosmaitaonce we have a way to detect a service user, we can have the create-image policy always allow a service user to create image15:51
jokke_rosmaita: well we can hopefully have sensible policy function to allow that15:52
rosmaitaand as jokke_ pointed out, an operator can turn off image import by having an empty list of import methods15:52
*** links has quit IRC15:59
*** jochi has quit IRC16:01
*** mosulica has quit IRC16:05
*** alexchadin has quit IRC16:09
*** jochi has joined #openstack-glance16:11
*** McClymontS has quit IRC16:13
*** McClymontS has joined #openstack-glance16:15
*** thiagolib has joined #openstack-glance16:22
*** AlexeyAbashkin has joined #openstack-glance16:24
*** AlexeyAbashkin has quit IRC16:31
*** McClymontS has quit IRC16:50
*** alee has joined #openstack-glance17:07
*** harlowja has joined #openstack-glance17:08
aleehey all - anyone here know how to tropubleshoot glance image signing?17:10
*** e0ne has quit IRC17:29
*** gyee has joined #openstack-glance17:37
*** gb21 has joined #openstack-glance17:54
*** jochi has quit IRC18:10
*** mvk has quit IRC18:11
*** tesseract has quit IRC18:13
*** e0ne has joined #openstack-glance18:23
*** nikhil has quit IRC18:34
*** gb21 has quit IRC18:35
*** adisky_ has quit IRC19:10
*** harlowja has quit IRC19:21
*** e0ne has quit IRC19:36
*** e0ne has joined #openstack-glance19:40
*** e0ne has quit IRC19:55
*** mine0901 has quit IRC20:28
openstackgerritMonty Taylor proposed openstack/python-glanceclient master: Use devstack functional base job  https://review.openstack.org/52650820:57
*** btully has joined #openstack-glance21:07
*** btully has quit IRC21:11
*** McClymontS has joined #openstack-glance21:14
*** McClymontS has quit IRC21:15
*** linkmark has quit IRC21:18
*** gyee has quit IRC21:20
*** alee has quit IRC21:28
*** slunkad_ has quit IRC21:43
*** niedbalski has quit IRC21:43
*** hugokuo has quit IRC21:43
*** cargonza has quit IRC21:43
*** f0o has quit IRC21:43
*** d34dh0r53 has quit IRC21:43
*** slunkad_ has joined #openstack-glance21:48
*** niedbalski has joined #openstack-glance21:48
*** hugokuo has joined #openstack-glance21:48
*** cargonza has joined #openstack-glance21:48
*** f0o has joined #openstack-glance21:48
*** d34dh0r53 has joined #openstack-glance21:48
*** openstackgerrit has quit IRC21:48
*** threestrands has joined #openstack-glance22:04
*** threestrands has quit IRC22:04
*** threestrands has joined #openstack-glance22:04
*** rcernin has joined #openstack-glance22:09
*** rcernin has quit IRC22:09
*** rcernin has joined #openstack-glance22:09
*** alee has joined #openstack-glance22:20
*** mvk has joined #openstack-glance22:33
*** rcernin has quit IRC22:36
*** slunkad_ has quit IRC22:36
*** niedbalski has quit IRC22:36
*** hugokuo has quit IRC22:36
*** cargonza has quit IRC22:36
*** f0o has quit IRC22:36
*** d34dh0r53 has quit IRC22:36
*** rcernin has joined #openstack-glance22:42
*** slunkad_ has joined #openstack-glance22:42
*** niedbalski has joined #openstack-glance22:42
*** hugokuo has joined #openstack-glance22:42
*** cargonza has joined #openstack-glance22:42
*** f0o has joined #openstack-glance22:42
*** d34dh0r53 has joined #openstack-glance22:42
*** gyee has joined #openstack-glance22:50
*** markvoelker has quit IRC23:03
*** markvoelker has joined #openstack-glance23:04
*** harlowja has joined #openstack-glance23:07
*** threestrands has quit IRC23:55
« Wednesday, 2017-12-06 Index Friday, 2017-12-08 »

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!