Wednesday, 2021-02-17

stevebakerjanders: hey00:00
*** anuradha1904 has quit IRC00:01
*** ayoung has quit IRC00:04
*** ayoung has joined #openstack-ironic00:13
TheJuliastevebaker: oddly enough, it seems more like the collection is getting returned, and that I'm just mentally lacking the connection since it doesn't seem to be get_all :\00:29
TheJuliaAnyway, will need to work backwards tomorrow00:29
* TheJulia goes and processes stuff00:29
*** k_mouza has joined #openstack-ironic00:30
*** k_mouza has quit IRC00:34
*** ricolin has joined #openstack-ironic01:29
openstackgerritVerification of a change to openstack/ironic-python-agent-builder failed: Remove PYOPTIMIZE_TINYIPA capability  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77588401:31
*** k_mouza has joined #openstack-ironic01:49
*** k_mouza has quit IRC02:00
*** rcernin has quit IRC02:27
*** rcernin has joined #openstack-ironic03:07
*** mkrai has joined #openstack-ironic03:14
*** rh-jelabarre has quit IRC03:49
*** mkrai has quit IRC03:49
*** mkrai_ has joined #openstack-ironic03:50
openstackgerritMerged openstack/ironic-lib master: Split out a common helper for blkid  https://review.opendev.org/c/openstack/ironic-lib/+/77493103:57
openstackgerritMerged openstack/ironic-lib master: utils.mounted: retry umount and allow retrying mount  https://review.opendev.org/c/openstack/ironic-lib/+/77490803:57
openstackgerritJacob Anders proposed openstack/ironic-python-agent master: Add support for using NVMe specific cleaning  https://review.opendev.org/c/openstack/ironic-python-agent/+/77190404:00
*** k_mouza has joined #openstack-ironic04:00
janders\o/ that was a bit of a tricky rebase04:03
*** k_mouza has quit IRC04:04
*** k_mouza has joined #openstack-ironic04:13
*** ricolin has quit IRC04:16
*** k_mouza has quit IRC04:18
openstackgerritJacob Anders proposed openstack/ironic-python-agent master: Add support for using NVMe specific cleaning  https://review.opendev.org/c/openstack/ironic-python-agent/+/77190404:22
*** uzumaki has quit IRC04:40
*** gyee has quit IRC05:01
openstackgerritMerged openstack/ironic-python-agent-builder master: Remove PYOPTIMIZE_TINYIPA capability  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77588405:09
*** mkrai_ has quit IRC05:15
*** mkrai has joined #openstack-ironic05:28
*** uzumaki has joined #openstack-ironic05:36
*** monica_pardhi has joined #openstack-ironic05:39
*** monica_pardhi has quit IRC05:56
openstackgerritKartikeya Jain proposed openstack/ironic-python-agent master: Fixes local boot for partition images  https://review.opendev.org/c/openstack/ironic-python-agent/+/77579906:14
*** ricolin has joined #openstack-ironic06:29
*** mnaser has quit IRC06:32
*** mnaser has joined #openstack-ironic06:34
*** moshiur has joined #openstack-ironic07:05
*** mkrai has quit IRC07:19
*** mkrai has joined #openstack-ironic07:29
*** k_mouza has joined #openstack-ironic07:29
*** k_mouza has quit IRC07:34
*** rcernin has quit IRC07:47
*** ricolin has quit IRC08:08
*** rpittau|afk is now known as rpittau08:12
rpittaugood morning ironic! o/08:12
*** ricolin_ has joined #openstack-ironic08:12
*** rcernin has joined #openstack-ironic08:12
*** ricolin_ is now known as ricolin08:17
*** uzumaki has quit IRC08:18
*** rcernin has quit IRC08:19
*** rcernin has joined #openstack-ironic08:26
*** uzumaki has joined #openstack-ironic08:30
*** rcernin has quit IRC08:31
*** rcernin has joined #openstack-ironic08:37
*** dougsz has joined #openstack-ironic08:38
*** anuradha1904 has joined #openstack-ironic08:38
*** rcernin has quit IRC08:51
*** rcernin has joined #openstack-ironic08:56
*** rcernin has quit IRC09:02
*** ociuhandu has joined #openstack-ironic09:07
openstackgerritRiccardo Pittau proposed openstack/ironic-python-agent master: Move some raid specific functions to raid_utils  https://review.opendev.org/c/openstack/ironic-python-agent/+/77485409:11
rpittau^ open for reviews, now typos free (hopefully)09:11
*** lucasagomes has joined #openstack-ironic09:12
*** tosky has joined #openstack-ironic09:14
*** ociuhandu has quit IRC09:17
rpittauTheJulia: why was dependencies removed from the tinyipa Makefile all entry in https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/775884 ?09:19
*** tosky_ has joined #openstack-ironic09:20
*** tosky has quit IRC09:24
*** tosky_ is now known as tosky09:25
*** rcernin has joined #openstack-ironic09:28
*** rcernin has quit IRC09:35
*** stendulker has joined #openstack-ironic09:38
*** derekh has joined #openstack-ironic09:39
*** ociuhandu has joined #openstack-ironic09:47
*** k_mouza has joined #openstack-ironic09:51
*** rcernin has joined #openstack-ironic09:59
jandersgood morning rpittau and Ironic o/10:00
rpittauhey janders :)10:00
*** dtantsur|afk is now known as dtantsur10:01
dtantsurmorning ironic10:01
dtantsurTheJulia: I think you're right re subresources10:01
rpittaugood morning dtantsur :)10:01
dtantsurJayF: could you elaborate on your comment on inject-files? there is not (and has never been) a way to run purely deploy steps in cleaning (and vice verse)10:02
jandersrpittau thank you for your review, before I upload a revised patch, a quick one: https://review.opendev.org/c/openstack/ironic-python-agent/+/771904/29/ironic_python_agent/tests/unit/samples/hardware_samples.py#840 is it okay if I have several variants of the nvme-cli output, or do we need to parametrize this?10:02
jandersgood morning dtantsur o/10:02
dtantsuro/10:02
jandersrpittau BTW great work on moving samples out of the main hardware test file10:02
jandersI'm not trying to litter it too much hence the question10:02
rpittaujanders: that's ok, I was wondering instead if we could base the result of nvme format on the exit code and not parsing the stdout10:03
rpittaujanders: heh sorry if you had to rebase :P10:03
jandersyeah I did and it was a fun one :)10:03
jandersI have up on doing it with vim and fired up meld10:03
dtantsuroh, I remember when I moved a lot of code from manager.py to deployments.py/cleaning.py10:03
jandersand then I slightly stuffed it up and realised git creates the .orig file manually, so didnt need to pull the old patches10:03
dtantsurall cherry-picks were a lot of fun after that10:03
rpittauwe all have a very similar concept of "fun" around here :D10:04
janders:D rpittau good point with the exit codes. If we're moving away from parsing random text while going for the json output, we might just as well do this10:05
rpittaujanders: 1k lines for the samples should not be a problem, you can even create your own nvme_samples file if you want10:05
jandersrpittau if sanitize comes onboard it may be a good idea - for now I think it's okay the way it is10:05
jandersI will get onto the revision now10:06
rpittaucool with me :)10:06
* rpittau second breakfast time (coffee + cookie)10:06
dtantsurwe shouldn't hesitate to create more small files10:06
*** ociuhandu has quit IRC10:10
janderstalking about small files in (even if slightly) NVMe related context alludes to my previous roles in a really funny way :)10:11
jandersspeaking of Meld, this week I came to a conclusion I need multiple screens in... my car10:17
jandersthe tablet on the dash should be pretty good split screen, but I think I will get a mount for the phone as well. Split screen tablet + phone should be enough I hope.10:18
*** mkrai has quit IRC10:19
*** ociuhandu has joined #openstack-ironic10:20
openstackgerritDmitry Tantsur proposed openstack/bifrost master: Fix the Debian Buster version number  https://review.opendev.org/c/openstack/bifrost/+/77604410:20
* dtantsur facepalms at ^^^10:20
dtantsurjanders: a whole mobile control center :)10:20
jandersyeah! :)10:20
jandersI actually call it that when I fly the drone from inside the car (life saver in strong sun)10:21
jandersbut having flightradar on the other screen while I fly would be awesome10:21
rpittauI facepalm too as I think I approved that in the past :/10:21
jandersfor the actual driving - high-res maps, weather radar on the tablet and performance/telemetry data on the phone would be handy - with phone's half screen for whatever else might be handy at a given point in time10:22
jandersbut I could totally use three screens too10:23
jandershabit from my work setup I suppose10:24
jandersI wont be surprised if teslas have that or will in the near future, but in an electric car things might actually be simpler (and not need that much)10:24
jandersmotor itself is simpler and the electrical system is more central to the core functions, so it'l show key details on the factory dash10:25
dtantsurmakes sense10:26
* dtantsur has only two monitors: the main one and the laptop one10:26
jandersdtantsur efficiency!10:27
rpittauI have 3 and sometimes I feel the need for a 4th and another set of eyes10:27
jandersI was genuinely using four half-screen terminals while merging code this morning, with the third running IRC and the terminal for running unit tests10:27
rpittauoh yeah, and a clone10:27
dtantsurmy normal mode of operation is ViM split into 2 columns on the main screen and IRC on the laptop screen10:27
dtantsurwith the separate slack application I could possible use another one..10:27
janders*third monitor10:27
dtantsurbut for now I tend to ignore slack instead! :D10:27
janders:D10:28
jandersIRC aged gracefully10:28
jandersI still find it more better'er :D10:28
*** rcernin has quit IRC10:31
rpittauto be honest I find slack nowadays more appealing :D10:32
jandersit's good (I quite like the mobile side of it) but especially for our team, I can't justify the added "weight" relative to the functionality I actually use10:33
jandersit does seem really heavy on resources for what it is10:34
jandersIRC is the XFCE of communicators, but even whatsapp and Signal don't make my laptop work as hard as Slack10:34
dtantsurSo, the mobile client is actually decent? Good to know, because the desktop application is mediocre10:38
openstackgerritMerged openstack/bifrost master: Fix the Debian Buster version number  https://review.opendev.org/c/openstack/bifrost/+/77604410:39
jandersthat is my impression (and I agree regarding the desktop app - or the bloated browser based implementation)10:40
jandersmobile one ain't perfect but it was very usable last time I checked10:40
jandersI don't really need the mobile app at RHAT though so my experience is over 6 months old10:40
openstackgerritDmitry Tantsur proposed openstack/bifrost stable/victoria: Fix the Debian Buster version number  https://review.opendev.org/c/openstack/bifrost/+/77591310:41
openstackgerritDmitry Tantsur proposed openstack/bifrost master: More compact README.rst  https://review.opendev.org/c/openstack/bifrost/+/77610710:55
openstackgerritDmitry Tantsur proposed openstack/bifrost master: More compact README.rst  https://review.opendev.org/c/openstack/bifrost/+/77610710:56
openstackgerritRiccardo Pittau proposed openstack/ironic master: Enforce autospec in test_chassis  https://review.opendev.org/c/openstack/ironic/+/77610810:56
iurygregorygood morning Ironic o/11:01
dtantsur\o11:05
*** stendulker has quit IRC11:07
iurygregorydtantsur, did I just woke up with a ping about sushy-tools + secure boot or I'm still sleeping? XD11:10
openstackgerritMerged openstack/bifrost stable/victoria: Fix the Debian Buster version number  https://review.opendev.org/c/openstack/bifrost/+/77591311:14
*** sshnaidm has quit IRC11:15
* iurygregory time for more coffee11:16
*** sshnaidm has joined #openstack-ironic11:18
*** tosin has joined #openstack-ironic11:21
openstackgerritMerged openstack/ironic-python-agent master: Fixes local boot for partition images  https://review.opendev.org/c/openstack/ironic-python-agent/+/77579911:27
openstackgerritDmitry Tantsur proposed openstack/bifrost master: More compact README.rst  https://review.opendev.org/c/openstack/bifrost/+/77610711:45
dtantsuriurygregory: hehe, good morning :)11:46
openstackgerritDmitry Tantsur proposed openstack/ironic-python-agent stable/victoria: Fixes local boot for partition images  https://review.opendev.org/c/openstack/ironic-python-agent/+/77591411:47
*** ociuhandu has quit IRC11:53
openstackgerritMerged openstack/ironic-python-agent-builder master: Support installing ironic-lib from source  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77515312:05
*** k_mouza has quit IRC12:16
*** k_mouza has joined #openstack-ironic12:17
*** uzumaki has quit IRC12:23
*** uzumaki has joined #openstack-ironic12:24
*** fdegir5 is now known as fdegir12:24
*** uzumaki has quit IRC12:27
*** uzumaki has joined #openstack-ironic12:27
openstackgerritDmitry Tantsur proposed openstack/ironic master: Validate configdrive string format  https://review.opendev.org/c/openstack/ironic/+/77592212:33
openstackgerritDmitry Tantsur proposed openstack/ironic master: Validate configdrive string format  https://review.opendev.org/c/openstack/ironic/+/77592212:38
iurygregorydtantsur, I have some questions about introspection-rules API to have the support on openstacksdk. 1- We have the DELETE for all rules and for a specific rule, I'm wondering if for the delete all we need to have some logic to list all rules and delete one at a time12:53
iurygregory2- I think we are missing the link fields in the table https://docs.openstack.org/api-ref/baremetal-introspection/?expanded=create-introspection-rule-detail#id17 right?12:55
*** rcernin has joined #openstack-ironic12:58
*** rcernin has quit IRC13:02
jandersdtantsur rpittau would it be a good idea to put references to NVMe spec explaining where the binary values (0b10 for format support; 0b100 for crypto format support) we're looking for come from? The way I see it: Pros: it's good to have it handy; Cons: It will get out of date and I dont think anyone will be checking the spec and updating figure13:04
jandersnumbers in the comment. We could specify the revision but might get taken offline with time. What do you think?13:04
dtantsuriurygregory: 1) why? DELETE /v1/rules does exactly that.13:05
dtantsurjanders: I think it's okay if you just provide named constants for these13:05
jandersdtantsur ok!13:05
dtantsuriurygregory: 2) probably, I never cared too much about links :)13:05
jandersthank you13:05
iurygregorydtantsur, let me try to be more clear about 1 =) https://review.opendev.org/c/openstack/openstacksdk/+/775878/1/openstack/baremetal_introspection/v1/_proxy.py#207 delete_introspection_rules would be the equivalent for DELETE all, so inside of it we need to have the logic to list all rules and call "delete_introspection_rule" ?13:07
iurygregoryhahaha poor links XD13:07
dtantsuriurygregory: no, just DELETE /v1/rules13:07
dtantsurmaybe call the function delete_all_introspection_rules for clarity13:07
dtantsur(since most other resources don't have a delete-all call)13:07
iurygregoryyeah13:07
iurygregoryand should require any parameter13:08
iurygregorythanks for clarifying!13:08
rpittaujanders: as dtantsur suggested, constants should suffice13:09
jandersdtantsur rpittau where should I put these? in the class (GenericHardwareManager)? method (_nvme_erase)?13:10
rpittaujanders: top of the file13:10
jandersok!13:10
janderseasy13:10
rpittau:)13:10
jandersI started with that but realised that aren't that many there13:10
jandersso wasn't sure13:10
iurygregoryoh we probably can't just call the _delete from _proxy https://github.com/openstack/openstacksdk/blob/58b28ee59231a53a66f8f5a3b8a5a5e7a3b79704/openstack/proxy.py#L374 since it requires the resource13:11
openstackgerritOpenStack Release Bot proposed openstack/ironic-python-agent bugfix/6.6: Update .gitreview for bugfix/6.6  https://review.opendev.org/c/openstack/ironic-python-agent/+/77616713:11
dtantsuriurygregory: yeah, you may need some custom code (or skip this call for now)13:13
iurygregorydtantsur, ack13:14
openstackgerritJacob Anders proposed openstack/ironic-python-agent master: Add support for using NVMe specific cleaning  https://review.opendev.org/c/openstack/ironic-python-agent/+/77190413:18
*** rh-jelabarre has joined #openstack-ironic13:19
openstackgerritJacob Anders proposed openstack/ironic-python-agent master: Add support for using NVMe specific cleaning  https://review.opendev.org/c/openstack/ironic-python-agent/+/77190413:27
janders^ forgot to remove the nvme-cli outputs from samples the first time :)13:28
janderssee you tomorrow Ironic o/13:30
rpittausee ya janders :)13:30
jandersclosing my five terminal windows and meld with relief after the badass rebase earlier today :)13:34
jandershow many more layers of windows before I can see the background? :)13:34
rpittau:D13:36
openstackgerritVerification of a change to openstack/ironic-inspector failed: Fix memcached host address.  https://review.opendev.org/c/openstack/ironic-inspector/+/77564013:38
iurygregoryussuri is unhappy13:42
rpittauiurygregory: inspector? I think it's a timing issue13:42
rpittauit's quit erratic though13:43
rpittauquite*13:43
iurygregoryyeah13:43
dtantsurfolks, if someone could check https://review.opendev.org/c/openstack/python-ironicclient/+/775889 and https://review.opendev.org/c/openstack/python-ironicclient/+/775861 we may release python-ironicclient13:51
rpittaudid the first and was doing trhe second now13:52
*** zaneb has quit IRC13:55
iurygregorysame13:58
*** rh-jelabarre has quit IRC14:08
*** rh-jelabarre has joined #openstack-ironic14:08
*** hoonetorg has quit IRC14:11
TheJuliagood morning14:12
*** rloo has joined #openstack-ironic14:15
iurygregorygood morning TheJulia14:19
openstackgerritMerged openstack/ironic-inspector master: Add upgrade check, and json2yaml policy handling  https://review.opendev.org/c/openstack/ironic-inspector/+/76328614:37
TheJulia\o/14:37
iurygregory\o/14:38
*** hoonetorg has joined #openstack-ironic14:42
dtantsurmorning TheJulia :)14:45
*** zzzeek has quit IRC14:49
*** zzzeek has joined #openstack-ironic14:50
*** jhesketh has quit IRC14:52
openstackgerritMerged openstack/python-ironicclient master: Clearer error message when unable to parse JSON  https://review.opendev.org/c/openstack/python-ironicclient/+/77588915:01
*** ociuhandu has joined #openstack-ironic15:01
*** ociuhandu has quit IRC15:05
*** ociuhandu has joined #openstack-ironic15:06
*** uzumaki has quit IRC15:06
*** bburns has quit IRC15:09
dtantsuraha, as I expected, configdrive_use_object_store is broken on python 3. yay?15:10
* dtantsur fixes15:10
*** bburns has joined #openstack-ironic15:11
openstackgerritPavlo Shchelokovskyy proposed openstack/ironic-inspector master: Fix node id vs uuid in processing_logger_prefix  https://review.opendev.org/c/openstack/ironic-inspector/+/77621315:14
*** ociuhandu has quit IRC15:15
*** ociuhandu has joined #openstack-ironic15:16
openstackgerritDmitry Tantsur proposed openstack/ironic master: Fix broken configdrive_use_object_store  https://review.opendev.org/c/openstack/ironic/+/77592415:18
*** ociuhandu_ has joined #openstack-ironic15:19
*** ociuhandu_ has quit IRC15:19
*** ociuhandu_ has joined #openstack-ironic15:20
*** k_mouza has quit IRC15:20
*** ociuhandu has quit IRC15:21
* iurygregory brb lunch time15:21
*** anuradha1904 has quit IRC15:35
JayFdtantsur: I looked at that deploy steps thing again, and I was just wrong. I'll go update the PR to say just that. Somehow, I had it stuck in my mind that you could run *any* HW manager method as a clean step15:42
JayFwhich is obviously not how it works, but I can't explain why I had that in my head yesterday /o\15:42
dtantsurheh, no worries, you missed my patch this morning fixing the Debian version I had previously put it15:43
dtantsurfor some reason I thought Debian Buster was 9 :)15:43
* iurygregory back15:46
*** uzumaki has joined #openstack-ironic15:48
openstackgerritMerged openstack/ironic-python-agent stable/victoria: Fixes local boot for partition images  https://review.opendev.org/c/openstack/ironic-python-agent/+/77591415:50
openstackgerritMerged openstack/python-ironicclient master: Support YAML files wherever JSON files are accepted  https://review.opendev.org/c/openstack/python-ironicclient/+/77586115:51
dtantsuriurygregory: if you by change have a second for the release ^^15:51
openstackgerritMerged openstack/ironic-python-agent bugfix/6.6: Update .gitreview for bugfix/6.6  https://review.opendev.org/c/openstack/ironic-python-agent/+/77616715:52
iurygregorydtantsur, totally, this would be stable/wallaby ?15:52
dtantsuriurygregory: not yet. we have a couple of weeks more.15:52
dtantsurI just want to get --deploy-steps out together with the ironic release that supports it15:53
iurygregoryoh ok =) (for some reason I had in my mind clients are in the deadline XD)15:53
dtantsurnon-client libraries (sushy, ironic-lib) come first15:53
iurygregory4.6.0 on the way15:59
iurygregoryI love the 30s wait16:00
iurygregorydtantsur,  https://review.opendev.org/c/openstack/releases/+/77622216:00
dtantsurthanks!16:03
openstackgerritAija Jauntēva proposed x/sushy-oem-idrac master: Add Real time status check to Lifecycle service  https://review.opendev.org/c/x/sushy-oem-idrac/+/77622416:08
iurygregoryyw =)16:10
*** k_mouza has joined #openstack-ironic16:14
*** moshiur has quit IRC16:25
openstackgerritPavlo Shchelokovskyy proposed openstack/ironic-inspector master: Fix node id vs uuid in processing_logger_prefix  https://review.opendev.org/c/openstack/ironic-inspector/+/77621316:43
rpittauTheJulia: hi! Did you see my question on https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/775884? was dependencies removed on purpose from the tinyipa makefile all entry?16:52
dtantsura request for stable reviews: https://review.opendev.org/c/openstack/ironic/+/77440916:55
*** rcernin has joined #openstack-ironic16:58
*** ociuhandu_ has quit IRC17:02
*** rcernin has quit IRC17:02
*** ociuhandu has joined #openstack-ironic17:02
*** lucasagomes has quit IRC17:03
dtantsurmm, tinycore 12 http://forum.tinycorelinux.net/index.php/topic,24798.0.html17:12
rpittaummmmmm17:12
rpittauthey still have some issues with the repo17:14
*** dtantsur is now known as dtantsur|afk17:17
dtantsur|afko/17:17
TheJuliarpittau: whoops17:19
TheJuliaI didn't mean to remove deps17:19
rpittauTheJulia: ok, I can re-add it or you got it ?17:20
TheJuliaposting now17:21
openstackgerritJulia Kreger proposed openstack/ironic-python-agent-builder master: Fix Makefile from accidential change  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77624417:23
rpittauJayF was too fast :D17:25
JayFI get email notifications for any patch posted to IPA-builder17:25
JayFand it happened to land in my inbox while I was checking mail17:26
JayFplus felt a pang of guilt for seeing that when I revivewed the change that caused it and assuming it was intentional instead of asking17:26
rpittau:D17:26
JayFunrelated: is stackalytics busted? It seems like https://www.stackalytics.com/report/contribution/ironic-group/30 isn't populated with new info17:27
rpittauoh yeah, I noticed that too17:28
rpittauseems like the latest update was done around mid january17:29
TheJuliaThere was an email thread that somethign was broken last month17:29
JayFI think someone said stackalytics.io should work17:29
JayFgoing to try that17:29
rpittauif you look at the main page you'll see the banner17:29
rpittauspoiler alert: that works :)17:30
JayFthey don't have /report in stackalytics.io17:30
JayFthat's kinda lame, but beggars can't be choosers17:30
rpittauthe main page works fine for me, but yeah missing that17:32
*** dougsz has quit IRC17:32
rpittaugood night! o/17:41
*** rpittau is now known as rpittau|afk17:41
*** gyee has joined #openstack-ironic17:43
*** ociuhandu has quit IRC17:54
TheJuliastevebaker: yeah, if the parent is set at all, we need to override the node option/search and do policy checks based up on it :\18:10
*** derekh has quit IRC18:11
*** lmcgann has joined #openstack-ironic18:13
*** k_mouza has quit IRC18:14
*** anuradha1904 has joined #openstack-ironic18:45
openstackgerritVerification of a change to openstack/ironic failed: Prevent redfish-virtual-media from being used with Dell nodes  https://review.opendev.org/c/openstack/ironic/+/77440918:58
*** tosin has quit IRC19:19
stevebakerTheJulia: ah so its a genuine policy enforcement bug!19:44
*** uzumaki has quit IRC19:59
TheJuliastevebaker: no, more our style of delaying the use to far after checking20:04
TheJuliaso we have to move policy checking way upfront on things20:05
TheJuliathe _get_x_collections code has all of the parent handling to auto-constrain things20:05
TheJuliabut... that is way too late to properly go "oh, you shouldn't be able to see this parent object.20:05
TheJulia"20:05
stevebakeri see20:05
TheJuliaI need to head to the ford dealer to pickup my care ina few, but I'll get back to it a little later20:06
openstackgerritJulia Kreger proposed openstack/ironic master: WIP: port/portgroup project scoped access  https://review.opendev.org/c/openstack/ironic/+/77546520:07
TheJuliayou can kind of see the direction I'm heading there20:07
TheJuliaIt involves extra db calls to handle the enforcement... which makes me think I'm going to be spending time on database performance soon()20:08
TheJulialuckily typical usage doesn't get those level of calls20:08
TheJuliaI can has a "resource subcontrollers are evil" shirt?20:25
iurygregory++ for the shirt20:31
JayFrpittau|afk: TheJulia closing the loop on previous chat: I emailed the list, it works, URL has changed: https://www.stackalytics.io/report/contribution?module=ironic-group&project_type=openstack&days=9020:53
*** rcernin has joined #openstack-ironic20:58
*** rcernin has quit IRC21:03
*** bfournie has quit IRC21:07
openstackgerritMerged openstack/ironic-python-agent-builder master: Fix Makefile from accidential change  https://review.opendev.org/c/openstack/ironic-python-agent-builder/+/77624421:12
*** rcernin has joined #openstack-ironic21:22
*** eandersson has quit IRC21:40
*** ccstone has quit IRC21:40
*** hoonetorg has quit IRC21:49
*** gmann is now known as gmann_afk21:51
*** rcernin has quit IRC21:53
*** rcernin has joined #openstack-ironic22:00
TheJuliaJayF: thanks22:07
TheJuliastevebaker: any thoughts on https://review.opendev.org/c/openstack/ironic/+/773924/8/ironic/conf/api.py  I'm wondering if I should be using that in the portgroup controller22:07
TheJulia I guess it makes sense to... over sixty failing tests22:08
JayFBluntly, I don't think there's any other security-hole-closure that we'd hide behind a config.22:10
JayFIf it gets backported; config and default-off makes sense, for the tip of master, I don't think it's a good idea22:11
stevebakerTheJulia: what if we changed behaviour to just raise 404? We don't document in the API when a 403 is raised. And if there is a developer out there who codes for specific 40x errors then I'm yet to meet them ;)22:11
TheJuliaI feel a lot better just returning 40422:12
TheJuliabecause, to their perception of the universe, the thing just doesn't exist22:12
JayFYep, exactly.22:12
stevebaker+122:12
JayFAnd exposing that it exists is a security concern22:12
TheJuliait is like "there is a microwormhole over in the corner, you can't see it to pet it, and you'll never cross-paths"22:12
TheJuliayup22:13
* TheJulia will just go update tests and make sure there is a giant reno22:13
JayFthat config-based approach is +1 from me *for backports only* to avoid changing behavior in a stable branch ... but I find it tough to imagine backporting all this RBAC stuff in general22:13
TheJuliafwiw, it is feature work, so we'd never backport this22:13
TheJuliaand if there is agreement there, I can nuke the config option in my next re-stack and lean towards 404s22:13
stevebakerAlso there is precedent for error codes changing in the WSME removal series *cough* https://review.opendev.org/c/openstack/ironic/+/747820/22/ironic/tests/unit/api/controllers/v1/test_node.py#b424822:13
JayFI could see a (strained) excuse for backporting it as a security improvement22:14
stevebaker... due to the quirks in pecan request routing22:14
TheJuliaJayF: true22:14
TheJuliastevebaker: I know nothing about that ;)22:14
*** jhesketh has joined #openstack-ironic22:32
TheJuliaThe plus side of all of the extra tests, I can see i have an issue someplace to still hunt down22:34
stevebakerit is good test coverage to have, yes22:43
stevebakerTheJulia: progress! http://paste.openstack.org/show/802757/22:50
TheJulia\o/22:51
JayFI wasn't aware Ironic even had a feature like that22:56
*** gmann_afk is now known as gmann23:22
*** anuradha1904 has quit IRC23:23
stevebakerJayF: the spec just needs a bit of finishing off (REST API and CLI) https://specs.openstack.org/openstack/ironic-specs/specs/15.0/expose-hardware-indicators.html#openstack-baremetal-cli23:27
JayFthis is a cool feature; we used this (via IPMI commands directly) all the time at rackspace23:28
JayF'do thing X to the machine with the flashing yellow light'23:28
TheJuliaWe did it for operators to be able to find a troublesome node23:37
TheJuliajust, I guess we never wrapped things up :(23:37
TheJuliaso, just going the 404 route actually makes the code cleaner23:38
TheJuliaI think23:38
*** alexmcleod has quit IRC23:45
jandersgood morning Ironic o/23:46
JayFo/23:47

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!