| *** awalende has joined #openstack-glance | 00:31 | |
| *** awalende has quit IRC | 00:36 | |
| *** jcosmao has left #openstack-glance | 00:36 | |
| *** gyee has quit IRC | 01:09 | |
| *** Liang__ has joined #openstack-glance | 01:12 | |
| *** goldyfruit_ has joined #openstack-glance | 01:27 | |
| *** jmlowe has joined #openstack-glance | 01:32 | |
| *** rcernin has quit IRC | 01:53 | |
| *** jmlowe has quit IRC | 02:10 | |
| *** goldyfruit_ has quit IRC | 02:15 | |
| *** goldyfruit_ has joined #openstack-glance | 02:15 | |
| *** awalende has joined #openstack-glance | 02:32 | |
| *** awalende has quit IRC | 02:37 | |
| *** goldyfruit_ has quit IRC | 02:40 | |
| *** rcernin has joined #openstack-glance | 02:54 | |
| *** awalende has joined #openstack-glance | 04:10 | |
| *** udesale has joined #openstack-glance | 04:13 | |
| *** awalende has quit IRC | 04:15 | |
| *** bhagyashris has joined #openstack-glance | 04:20 | |
| *** abhishekk has joined #openstack-glance | 04:53 | |
| *** dansmith has quit IRC | 05:10 | |
| *** dansmith has joined #openstack-glance | 05:14 | |
| *** Laszlo-74 has joined #openstack-glance | 05:38 | |
| Laszlo-74 | hello | 05:58 |
|---|---|---|
| Laszlo-74 | I have a problem with glance in queens | 05:58 |
| Laszlo-74 | after an openstack ansible upgrade, glance is not able to get or create images | 05:59 |
| Laszlo-74 | we are using rbd as backend | 05:59 |
| Laszlo-74 | and in the same deployment cinder is working well with rbd | 05:59 |
| Laszlo-74 | I have switched glance to debug mode, but it doesn't display any error | 06:00 |
| Laszlo-74 | I've checked and glance is communicating with the ceph mons (at least I can see traffic between them) | 06:01 |
| Laszlo-74 | this is the log that I get when trying to download an image from glance: http://paste.openstack.org/show/787414/ | 06:06 |
| Laszlo-74 | I can list images, and also show their details | 06:06 |
| Laszlo-74 | it seems that the problem is when I try to reach their content | 06:07 |
| Laszlo-74 | either to create a new image or to get data from an existing one | 06:07 |
| Laszlo-74 | on the client side I get a gateway timeout from the ha-proxy | 06:09 |
| *** pcaruana has joined #openstack-glance | 06:09 | |
| Laszlo-74 | as for the haproxy I have increased the timeout values to 30 sec. So I guess it's not that the ceph is not responding in time to the glance. | 06:11 |
| Laszlo-74 | do you have any idea what could be wrong with glance? | 06:11 |
| abhishekk | Laszlo-74, nothing is in the logs, when you create the image, did you see your request is accepted by API in g-api logs? | 06:42 |
| Laszlo-74 | abhishekk this is the log when I'm trying to create an image: http://paste.openstack.org/show/787415/ | 07:04 |
| *** tosky has joined #openstack-glance | 07:09 | |
| abhishekk | Laszlo-74, I can see this line in the logs | 07:12 |
| abhishekk | since image size is zero we will be doing resize-before-write for each chunk which will be considerably slower than normal | 07:12 |
| *** Laszlo-74 has quit IRC | 07:17 | |
| *** lpetrut has joined #openstack-glance | 07:18 | |
| openstackgerrit | Abhishek Kekane proposed openstack/glance master: Drop old neutron-grenade job https://review.opendev.org/698410 | 07:26 |
| *** zainub_wahid has joined #openstack-glance | 07:31 | |
| *** Laszlo-74 has joined #openstack-glance | 07:40 | |
| *** bhagyashris has quit IRC | 07:54 | |
| *** Laszlo-74 has quit IRC | 07:56 | |
| *** belmoreira has joined #openstack-glance | 07:56 | |
| *** tesseract has joined #openstack-glance | 07:57 | |
| *** bhagyashris has joined #openstack-glance | 08:06 | |
| *** tkajinam has quit IRC | 08:12 | |
| openstackgerrit | Merged openstack/python-glanceclient master: Cleanup session object https://review.opendev.org/674133 | 08:16 |
| *** awalende has joined #openstack-glance | 08:20 | |
| *** pcaruana has quit IRC | 08:22 | |
| *** bhagyashris has quit IRC | 08:30 | |
| abhishekk | jokke_, around? | 08:51 |
| *** awalende has quit IRC | 08:59 | |
| *** awalende has joined #openstack-glance | 09:01 | |
| *** bhagyashris has joined #openstack-glance | 09:01 | |
| *** Laszlo-74 has joined #openstack-glance | 09:01 | |
| Laszlo-74 | abhishekk hi again, I've been disconnected for a while ... It's strange that message with the zero size, as I am creating an image with some non zero content. | 09:04 |
| *** udesale has quit IRC | 09:29 | |
| *** udesale has joined #openstack-glance | 09:32 | |
| *** zainub_wahid has quit IRC | 09:37 | |
| *** rcernin has quit IRC | 09:50 | |
| *** abhishekk has quit IRC | 09:57 | |
| *** farhanjamil has joined #openstack-glance | 09:59 | |
| *** farhanjamil has quit IRC | 10:07 | |
| *** Liang__ has quit IRC | 10:17 | |
| *** belmoreira has quit IRC | 10:44 | |
| *** belmoreira has joined #openstack-glance | 10:45 | |
| *** belmoreira has quit IRC | 10:49 | |
| *** bhagyashris has quit IRC | 10:53 | |
| *** udesale has quit IRC | 11:04 | |
| *** bhagyashris has joined #openstack-glance | 11:07 | |
| *** awalende has quit IRC | 11:20 | |
| *** awalende has joined #openstack-glance | 11:21 | |
| *** awalende_ has joined #openstack-glance | 11:23 | |
| *** awalende has quit IRC | 11:25 | |
| *** awalende_ has quit IRC | 11:27 | |
| *** abhishekk has joined #openstack-glance | 11:29 | |
| *** udesale has joined #openstack-glance | 11:35 | |
| *** pcaruana has joined #openstack-glance | 11:36 | |
| *** brinzhang has joined #openstack-glance | 12:00 | |
| *** awalende has joined #openstack-glance | 12:01 | |
| *** brinzhang has quit IRC | 12:02 | |
| *** brinzhang has joined #openstack-glance | 12:02 | |
| *** brinzhang has quit IRC | 12:03 | |
| *** brinzhang has joined #openstack-glance | 12:03 | |
| *** brinzhang has quit IRC | 12:04 | |
| *** spsurya has joined #openstack-glance | 12:05 | |
| *** brinzhang has joined #openstack-glance | 12:07 | |
| *** brinzhang has quit IRC | 12:07 | |
| *** brinzhang has joined #openstack-glance | 12:08 | |
| *** brinzhang has quit IRC | 12:09 | |
| *** brinzhang has joined #openstack-glance | 12:11 | |
| *** brinzhang has quit IRC | 12:11 | |
| *** brinzhang has joined #openstack-glance | 12:12 | |
| *** brinzhang_ has joined #openstack-glance | 12:16 | |
| *** nicolasbock has joined #openstack-glance | 12:18 | |
| *** brinzhang has quit IRC | 12:19 | |
| *** Liang__ has joined #openstack-glance | 12:27 | |
| *** udesale has quit IRC | 12:50 | |
| *** Laszlo-74 has quit IRC | 13:01 | |
| *** CeeMac has quit IRC | 13:08 | |
| *** goldyfruit_ has joined #openstack-glance | 13:17 | |
| *** abhishekk has quit IRC | 13:22 | |
| *** brinzhang_ has quit IRC | 13:33 | |
| zaneb | jokke_: any thoughts on my suggestion in https://review.opendev.org/#/c/693129/ ? | 13:50 |
| *** Liang__ is now known as LiangFang | 13:54 | |
| jokke_ | zaneb: I kind of like the check_str approach but I don't 100% catch what's the problem in your second example, does that mean that if we take that approach the default will not be just override but applied in every case? | 13:55 |
| jokke_ | like do we have any reasonable option where we could define the "default" from policy.json just as override for the defaults we have in code and if that's not provided from the admin we would behave like it didn't exist? (That would solve the backwards incompatibility which is my biggest fear here) | 13:57 |
| jokke_ | As our default policy is far from sane for any real life deployment. It's super permissive so we're able to test stuff | 13:58 |
| zaneb | jokke_: we should probably fix that by providing a sane default and overriding it for testing | 13:59 |
| zaneb | the problem in the second example is that currently the 'default' rule has the default value "role:admin", but in this proposal we'd change it to "" | 14:01 |
| jokke_ | Currently we don't have default unless it's provided in the policy.json iirc | 14:02 |
| zaneb | so if anybody is relying on *both* the 'default' rule *and* its default value of "role:admin" then behaviour will change | 14:02 |
| *** goldyfruit_ has quit IRC | 14:02 | |
| jokke_ | the current policy.json is example providing list of policies we have, it sets the default as example and then overrides every single policy after that so the default only takes effect if you remove lines from tht example | 14:03 |
| zaneb | https://opendev.org/openstack/glance/src/branch/master/glance/api/policy.py#L43 | 14:03 |
| jokke_ | aargh, totally forgot we merged that one | 14:04 |
| zaneb | I think it's unlikely anyone is relying on that, but it's a risk we'd be taking | 14:04 |
| zaneb | I don't think we actually have a choice though | 14:05 |
| zaneb | we can potentially use an upgrade checker to manage the risk | 14:05 |
| jokke_ | this is why I hate this whoe initiative. silently changing security setting over upgrade s just fucking moronic no matter how much easier it makes some peoples lives | 14:06 |
| *** bhagyashris has quit IRC | 14:06 | |
| zaneb | afaict glance is the only project relying on this behaviour. for every other project it was a no-op as far as users are concerned | 14:07 |
| zaneb | once the policy is in code you can actually do nice deprecation stuff in future; that's the reason for this initiative | 14:08 |
| jokke_ | but i still prefer breaking that default that is in the code now than the "default" behavior from the policy.json people are actually relying on. This will look ugly AF in code but how about: | 14:08 |
| zaneb | having a brain-dead useless policy (this applied to all projects) hard-coded in a json file that we could never change - that's what was moronic :) | 14:09 |
| jokke_ | we set the "default" in the code to None and use the "default" from file only if it's actually provided | 14:10 |
| zaneb | jokke_: I think that's the same thing that I proposed in my comment on the review | 14:13 |
| jokke_ | ok, cool | 14:13 |
| jokke_ | that (with the fact that I totally missed we merged the "default" in code already) was the part which was confusing me | 14:13 |
| jokke_ | and thinking it back I might have even been the person +W'ing it ... +2'd at least | 14:14 |
| zaneb | https://opendev.org/openstack/glance/commit/2428801c0065be665b0dc432ac6ebfe3190f4b27 | 14:14 |
| zaneb | nope you wrote it ;) | 14:15 |
| jokke_ | dafuq :o | 14:15 |
| jokke_ | how drunk have I been | 14:16 |
| jokke_ | oh, that was in there already, I just changed the value | 14:17 |
| zaneb | jokke_: yeah but if you hadn't changed the value we'd be fine now :P | 14:19 |
| jokke_ | yep | 14:19 |
| zaneb | I'm pretty sure every project had a default for the default in code since ~the beginning | 14:20 |
| jokke_ | and that section has been there for ages ... I thought it was brought in there when this initiative started ... so those three things seems to have been there like since 2015 | 14:20 |
| zaneb | 2012: https://opendev.org/openstack/glance/commit/4f36fba9969e77d01f3e296d946e6e11f1d0e82f | 14:22 |
| jokke_ | LOL ... I'm feeling like giving up on this and going like "Let somebody else to deal with it i they really care" but that's the approach we took last time and seems like you're the somebody else :P | 14:22 |
| zaneb | correct | 14:22 |
| zaneb | I am as good as it gets ;) | 14:22 |
| jokke_ | but honestly "hard-coded in a json file that we could never change" is the argument I never understood. It's a fecking config file in a repo. The process to change it is exactly the same as changing the ocde in the repo, just with the difference that upon upgrade you don't sneak it silently over to the consumer | 14:25 |
| zaneb | on upgrade the consumer has to merge it | 14:26 |
| jokke_ | exactly, or tell from the get go "don't touch my config files, I manage them myself" | 14:27 |
| jokke_ | like any sane deployment tooling would be doing anyways | 14:28 |
| jokke_ | but it's not like Trick or treat! You didn't check it before upgrading so we just opened your APIs to whole fecking world and turned your filewall off just because | 14:29 |
| zaneb | in general we're moving stuff into code so we can make it stricter, not looser | 14:31 |
| jokke_ | and honestly I would likely agreed on that 3-4 years ago when we had good handful of security focused cores pretty much in every project making sure stuff like that does not slip. | 14:50 |
| jokke_ | Currently, guilty as charged, with handful of cores per project I can totally see myself being convinced before first cup of coffee that it's a good idea o change a default policy in code so testing can be done easier as "it's overruled in the deployments anyways, right" | 14:52 |
| openstackgerrit | Erno Kuvaja proposed openstack/glance-specs master: Delete image from single store https://review.opendev.org/698018 | 15:03 |
| *** lpetrut has quit IRC | 15:32 | |
| *** jmlowe has joined #openstack-glance | 16:30 | |
| *** gyee has joined #openstack-glance | 16:55 | |
| *** LiangFang has quit IRC | 17:01 | |
| openstackgerrit | Merged openstack/glance master: Drop old neutron-grenade job https://review.opendev.org/698410 | 17:16 |
| *** awalende has quit IRC | 17:46 | |
| *** awalende has joined #openstack-glance | 17:47 | |
| *** awalende has quit IRC | 17:51 | |
| *** awalende has joined #openstack-glance | 17:52 | |
| *** awalende_ has joined #openstack-glance | 17:54 | |
| *** awalende has quit IRC | 17:56 | |
| *** awalende_ has quit IRC | 17:57 | |
| *** awalende has joined #openstack-glance | 18:21 | |
| *** awalende has quit IRC | 18:25 | |
| *** tosky has quit IRC | 18:44 | |
| *** mvkr has quit IRC | 19:06 | |
| *** nicolasbock has quit IRC | 19:11 | |
| *** nicolasbock has joined #openstack-glance | 19:11 | |
| *** spsurya has quit IRC | 19:14 | |
| *** goldyfruit_ has joined #openstack-glance | 19:26 | |
| *** lpetrut has joined #openstack-glance | 19:33 | |
| *** tesseract has quit IRC | 19:46 | |
| *** lpetrut has quit IRC | 19:46 | |
| *** awalende has joined #openstack-glance | 19:48 | |
| *** awalende has quit IRC | 19:53 | |
| *** rcernin has joined #openstack-glance | 21:23 | |
| *** mvkr has joined #openstack-glance | 21:30 | |
| *** pcaruana has quit IRC | 21:38 | |
| *** tosky has joined #openstack-glance | 22:15 | |
| *** mvkr has quit IRC | 22:16 | |
| *** mvkr has joined #openstack-glance | 22:20 | |
| *** nicolasbock has quit IRC | 22:27 | |
| *** awalende has joined #openstack-glance | 22:34 | |
| *** awalende has quit IRC | 22:39 | |
| openstackgerrit | Grégoire Unbekandt proposed openstack/glance master: WIP: Add ability to import image into multi-stores https://review.opendev.org/667132 | 22:59 |
| *** tkajinam has joined #openstack-glance | 23:08 | |
| *** Liang__ has joined #openstack-glance | 23:20 | |
| *** tosky has quit IRC | 23:40 | |
| *** Liang__ has quit IRC | 23:42 | |
| *** brinzhang has joined #openstack-glance | 23:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!