| *** mhen_ is now known as mhen | 03:00 | |
| opendevreview | Merged openstack/glance master: Remove eventlet-specific functional tests https://review.opendev.org/c/openstack/glance/+/968209 | 03:39 |
|---|---|---|
| croelandt | rosmaita: thanks for looking at https://review.opendev.org/c/openstack/glance-specs/+/939316, we had https://review.opendev.org/c/openstack/glance-specs/+/939283 to work around that issue | 13:10 |
| croelandt | https://github.com/pygments/pygments/issues/2844 has no gotten much love :-( | 13:10 |
| croelandt | #startmeeting glance | 14:00 |
| opendevmeet | Meeting started Thu Dec 18 14:00:24 2025 UTC and is due to finish in 60 minutes. The chair is croelandt. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:00 |
| opendevmeet | The meeting name has been set to 'glance' | 14:00 |
| croelandt | #topic roll call | 14:00 |
| croelandt | o/ | 14:00 |
| croelandt | abhishekk: around? | 14:03 |
| croelandt | rosmaita: around? | 14:04 |
| abhishekk | o/ | 14:04 |
| croelandt | damn, it's just us | 14:05 |
| croelandt | #topic Release/periodic job updates | 14:05 |
| croelandt | All good! | 14:05 |
| abhishekk | I think most of the people already on year end vacation? | 14:05 |
| croelandt | maybe | 14:05 |
| croelandt | #topic Specs | 14:05 |
| croelandt | #link https://review.opendev.org/c/openstack/glance-specs/+/970214 | 14:05 |
| croelandt | so I've just read this and I sort of agree with rosmaita | 14:05 |
| croelandt | It feels like a feature we'd implement and then tell users they probably don't want to use it | 14:05 |
| croelandt | I'm not opposed to it but I'm a bit concerned | 14:06 |
| croelandt | abhishekk: have you read this? | 14:06 |
| abhishekk | not yet :/ | 14:06 |
| abhishekk | I will go though it later today | 14:06 |
| croelandt | ok ok | 14:07 |
| croelandt | rosmaita's comments make a lot of sense | 14:07 |
| croelandt | this might be OK for services only though | 14:07 |
| croelandt | #topic Dependency on lhafile | 14:08 |
| croelandt | #link https://review.opendev.org/c/openstack/glance/+/968365 | 14:08 |
| croelandt | abhishekk: so you want to ditch the dependency on lhafile? | 14:08 |
| abhishekk | yes | 14:08 |
| croelandt | so what would we replace this with? | 14:09 |
| abhishekk | means what? | 14:10 |
| abhishekk | I think we just keep support for gzip and zip and remove lhafile | 14:10 |
| croelandt | oh ok so we remove support for lhafile | 14:10 |
| croelandt | why not add lhafile to the global requirements and keep support? | 14:11 |
| abhishekk | I am not sure how much time it's going to take for adding that support in requirements | 14:11 |
| croelandt | ok | 14:12 |
| croelandt | maybe we can discuss this with rosmaita later | 14:12 |
| croelandt | Moving on | 14:12 |
| abhishekk | sounds good | 14:12 |
| croelandt | #topic HNo meetings for the next two weeks | 14:12 |
| abhishekk | \o/ | 14:12 |
| croelandt | I'm gonna be away for the next two weeks | 14:12 |
| croelandt | should we cancel? :) | 14:12 |
| croelandt | I think probably rosmaita will be away for at least one Thursday | 14:12 |
| croelandt | so yeah, i'll send an email to the list to cancel | 14:13 |
| croelandt | #topic Open Discussion | 14:13 |
| croelandt | Anything else before we wrap up? | 14:13 |
| womax | hi | 14:13 |
| rajiv | hi | 14:13 |
| womax | just wanted to comme back to this spec https://review.opendev.org/c/openstack/glance-specs/+/970214 | 14:13 |
| womax | I arrived a bit late and hadn't time to respond to a few things | 14:14 |
| abhishekk | yep, I think my property-protection patch should be approved, so I can move ahead with eventlet removal work | 14:14 |
| croelandt | abhishekk: link? | 14:14 |
| croelandt | womax: go on | 14:14 |
| abhishekk | https://review.opendev.org/c/openstack/glance/+/968766 | 14:14 |
| rajiv | while testing multi-tenancy, default (swift), when i enabled s3 and ceph, the images stored previously in swift return | 14:14 |
| rajiv | Image 2cbb7d3b-37c8-4c54-b458-ba5395549f68 is unacceptable: Image has no associated data}] | 14:14 |
| womax | mainly I wanted to discuss the security concern you have. I have trouble seeing scenario where temp url are worse that direct download | 14:14 |
| womax | noting we would mostly want it enabled for service | 14:15 |
| womax | user | 14:15 |
| croelandt | not all at once, womax has the floor | 14:15 |
| croelandt | basically what rosmaita has written | 14:15 |
| croelandt | you get a temp url, it's valid for all your friends | 14:15 |
| croelandt | so the scope of this feature is super limited | 14:15 |
| croelandt | basically it's for services (and probably just Ironic) | 14:15 |
| womax | Yeah but in a similar way you download an image and can share it to all your freinds | 14:15 |
| croelandt | yeah but you don't have access to it in the same way | 14:16 |
| womax | and yeah we mostly tough of service to use it | 14:16 |
| croelandt | (egress concerns also) | 14:16 |
| croelandt | how bad is it if Ironic just keeps doing its thing? | 14:16 |
| womax | maybe its better overall | 14:16 |
| womax | but we also wanted to maybe use it in nova | 14:16 |
| womax | to avoid glance being a bottleneck in dowload of image | 14:16 |
| womax | but I think if you found it too much for what it actually does. I thnk a good compromise would be to alteast implement this in glance store | 14:17 |
| womax | and make use of glance store in ironic to handle multistore | 14:17 |
| womax | as currently ironic does not support it and I think it would be good for it to add support | 14:17 |
| croelandt | so you'd import glance_store and use it directly, without glance? | 14:18 |
| womax | But adding support for multi store in ironic from scratch would mean re writing logic very close to what glance_store and I'm not sure it a good things | 14:18 |
| womax | croelandt: yeah that would solve some of problems. There will still be the problems of having to deploy config/credentials of all store and all ironic nodes | 14:19 |
| croelandt | ok would be nice to hear from Nova | 14:19 |
| womax | That what we tough a first but we were not sure it is a good things to do, and that why we wanted to it to be handled at glance levels where credentials are already there | 14:20 |
| croelandt | to better understand the needs you might both have | 14:20 |
| womax | and adding at glance level migth enable to do also use it in nova | 14:20 |
| abhishekk | what about signed urls? | 14:20 |
| womax | abhishekk: that what is is, temp URL is swift name and in s3 it is pre signed url | 14:20 |
| womax | so i think these are the same thing | 14:21 |
| abhishekk | ack | 14:21 |
| womax | croelandt: that may be worth it to go to nova, see wether they would be interested in this | 14:21 |
| croelandt | ok so maybe let's figure out all the use cases for this | 14:21 |
| croelandt | and definitely have all this disabled by default :D | 14:21 |
| abhishekk | :D | 14:21 |
| womax | croelandt: disabled by default was indeed the plan | 14:21 |
| womax | i'll go see nova and come back to this | 14:22 |
| croelandt | yeah, I don't want to design something and then have to modify it for Nova | 14:23 |
| croelandt | let's do it right the first time :) | 14:23 |
| croelandt | ok rajiv you had another topic? | 14:23 |
| womax | croelandt: agree | 14:23 |
| rajiv | croelandt: yes, lots of text, what was the answer for the 1st topic ? | 14:24 |
| rajiv | secondly, glance import also fails when multi-tenancy is enabled, it returns 401, there isnt much logs, should default_store and enabled_backends be enabled ? docu suggests default_store is deprecated. | 14:25 |
| croelandt | yes, enabled_backends is the way to go | 14:25 |
| croelandt | not sure what the 1st topic was | 14:25 |
| rajiv | while testing multi-tenancy, default (swift), when i enabled s3 and ceph, the images stored previously in swift return | 14:26 |
| rajiv | Image 2cbb7d3b-37c8-4c54-b458-ba5395549f68 is unacceptable: Image has no associated data}] | 14:26 |
| rajiv | image was in active state and had data | 14:26 |
| croelandt | abhishekk: does that ring a bell? | 14:26 |
| rajiv | in size and virtual_size, it was same in other regions where multi-tenancy wasnt enabled | 14:26 |
| abhishekk | rajiv: with multistore you need to have default_backend set and not default_store | 14:26 |
| rajiv | oops it was a typo, yes, its default_backend under glance_store | 14:27 |
| abhishekk | rajiv is swift still active after adding s3 and ceph? | 14:27 |
| rajiv | yes | 14:27 |
| abhishekk | so how are you sauying default_store is deprecated? | 14:28 |
| abhishekk | I would like to see steps wise things you are doing with config examples, it is hard to understand just from this | 14:28 |
| croelandt | yes maybe open a bug report with full config + step by step reproducer | 14:29 |
| croelandt | with commands not text "openstack image create ..." rather than "create an image") | 14:29 |
| abhishekk | waht do you mean by testing multi-tenancy | 14:29 |
| rajiv | this is the file https://github.com/sapcc/helm-charts/blob/master/openstack/glance/templates/etc/_glance-api.conf.tpl, i have enabled all 3 stores in my qa setup | 14:30 |
| rajiv | sry, multi-store, got confused with barbican stuff | 14:30 |
| rajiv | sure, i will create a bug | 14:30 |
| abhishekk | yeah, that will be heplful | 14:30 |
| rajiv | but there werent any known issues with image data reported ? | 14:30 |
| abhishekk | nope | 14:31 |
| rajiv | after enabling multi-store and creating the images again, the error did not show up | 14:31 |
| abhishekk | so you are migrating from single store to multi store? | 14:31 |
| rajiv | yes | 14:31 |
| rajiv | rather swift to ceph | 14:32 |
| abhishekk | with swift? | 14:32 |
| abhishekk | fantastic | 14:32 |
| abhishekk | I think you have some config issue | 14:32 |
| rajiv | is it a wrong move ? :D | 14:32 |
| rajiv | to confirm, multi-store needs enabled_backends and single store is default_backend ? | 14:33 |
| abhishekk | I have tested migration from swift to swift, ceph to ceph, but not from single store swift to multi store ceph | 14:33 |
| abhishekk | nope | 14:33 |
| abhishekk | multisotre needs enabled_backends and default_backend and single store needs stores and default_store | 14:33 |
| rajiv | my plan is to enable multi-store and then import images to ceph and disable swift | 14:34 |
| croelandt | abhishekk: can't we do single swift -> multiple swift -> multiple ceph ? | 14:35 |
| abhishekk | So your steps should be migrate from single store siwft to multstore way swift, then add ceph store, change deafult backend to new ceph store, copy existing images form swift to ceph, delete images form swift store and remvoe swift store form config | 14:35 |
| croelandt | rather than single swift -> multiple ceph? | 14:35 |
| croelandt | yeah, this :D | 14:35 |
| abhishekk | :D | 14:35 |
| rajiv | ah ok ok, regarding deprecation i see here : https://docs.openstack.org/glance/latest/configuration/glance_api.html#glance_store.default_store | 14:35 |
| abhishekk | yes, this is deprecated as this is old legacy store setting | 14:36 |
| rajiv | okay, thanks | 14:36 |
| abhishekk | np! | 14:36 |
| rajiv | would it hurt if default_store is enabled during multi-store ? | 14:37 |
| rajiv | sry, how to enable swift multi-store ? | 14:37 |
| rajiv | is it to add it in enabled_backends ? | 14:37 |
| abhishekk | you can see example in documentation | 14:37 |
| rajiv | roger | 14:38 |
| abhishekk | there might be example of how to upgrade form single to multistore | 14:39 |
| rajiv | sure | 14:41 |
| abhishekk | https://github.com/openstack/glance/blob/master/doc/source/configuration/configuring.rst#configuring-multiple-cinder-storage-backend | 14:41 |
| abhishekk | This is example for cinder backend see example 2, you can follow similar way for swift | 14:42 |
| rajiv | super! | 14:42 |
| croelandt | ok | 14:43 |
| croelandt | are we good on this topic? | 14:43 |
| rajiv | yes! | 14:43 |
| abhishekk | croelandt: don't forget about https://review.opendev.org/c/openstack/glance/+/968766 :D | 14:43 |
| croelandt | perfect, I wanted to ask for the link | 14:43 |
| croelandt | let's wrap up then, and see you in 2026! | 14:44 |
| croelandt | #endmeeting | 14:44 |
| opendevmeet | Meeting ended Thu Dec 18 14:44:02 2025 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:44 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/glance/2025/glance.2025-12-18-14.00.html | 14:44 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/glance/2025/glance.2025-12-18-14.00.txt | 14:44 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/glance/2025/glance.2025-12-18-14.00.log.html | 14:44 |
| abhishekk | :D | 14:44 |
| rajiv | Happy holidays! | 14:44 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!