| *** harlowja has quit IRC | 00:08 | |
| *** Reepicheep has quit IRC | 00:44 | |
| *** Reepicheep has joined #openstack-manila | 00:47 | |
| *** abhi has quit IRC | 01:02 | |
| *** gouthamr has joined #openstack-manila | 01:46 | |
| *** gouthamr has quit IRC | 01:49 | |
| *** gouthamr has joined #openstack-manila | 01:49 | |
| *** pvc_ has joined #openstack-manila | 02:23 | |
| pvc_ | hi, i've successfully created a share-server but it doesnt support snapshot. im using cinder as my backend | 02:24 |
|---|---|---|
| *** gouthamr has quit IRC | 02:33 | |
| *** gouthamr has joined #openstack-manila | 02:35 | |
| *** gouthamr_ has joined #openstack-manila | 02:40 | |
| *** gouthamr has quit IRC | 02:40 | |
| zhongjun_ | pvc_: Did you add snapshot_support=True in your share type https://docs.openstack.org/manila/pike/admin/shared-file-systems-share-types.html | 02:50 |
| pvc_ | i see i dont add athat | 02:57 |
| *** pvc_ has quit IRC | 03:06 | |
| openstackgerrit | zhongjun proposed openstack/manila-specs master: Support metadata for access rule resource https://review.openstack.org/551106 | 03:13 |
| *** kaisers has joined #openstack-manila | 03:15 | |
| *** kaisers has quit IRC | 03:20 | |
| *** gouthamr_ is now known as gouthamr | 03:31 | |
| *** gouthamr has quit IRC | 04:10 | |
| *** kaisers has joined #openstack-manila | 04:54 | |
| *** ianychoi_ has joined #openstack-manila | 05:19 | |
| *** ianychoi has quit IRC | 05:23 | |
| *** openstackgerrit has quit IRC | 05:48 | |
| *** caowei has quit IRC | 05:56 | |
| *** caowei has joined #openstack-manila | 05:58 | |
| *** AlexeyAbashkin has joined #openstack-manila | 05:58 | |
| *** kaisers has quit IRC | 06:00 | |
| *** caowei has quit IRC | 06:02 | |
| *** threestrands has joined #openstack-manila | 06:05 | |
| *** threestrands has quit IRC | 06:05 | |
| *** threestrands has joined #openstack-manila | 06:05 | |
| *** rraja__ has joined #openstack-manila | 06:07 | |
| *** rraja_ has joined #openstack-manila | 06:09 | |
| *** e0ne has joined #openstack-manila | 06:11 | |
| *** rraja__ has quit IRC | 06:12 | |
| *** kaisers has joined #openstack-manila | 06:14 | |
| *** AlexeyAbashkin has quit IRC | 06:24 | |
| *** AlexeyAbashkin has joined #openstack-manila | 06:35 | |
| *** vivsoni has quit IRC | 06:38 | |
| *** AlexeyAbashkin has quit IRC | 06:44 | |
| *** belmoreira has joined #openstack-manila | 06:53 | |
| *** belmoreira has quit IRC | 06:54 | |
| *** kaisers has quit IRC | 06:58 | |
| *** e0ne has quit IRC | 06:58 | |
| *** AlexeyAbashkin has joined #openstack-manila | 07:01 | |
| *** e0ne has joined #openstack-manila | 07:05 | |
| *** kaisers has joined #openstack-manila | 07:07 | |
| *** openstackgerrit has joined #openstack-manila | 07:51 | |
| openstackgerrit | zhongjun proposed openstack/manila-specs master: Support metadata for access rule resource https://review.openstack.org/551106 | 07:51 |
| *** e0ne_ has joined #openstack-manila | 07:52 | |
| *** e0ne__ has joined #openstack-manila | 07:53 | |
| *** e0ne has quit IRC | 07:53 | |
| *** e0ne_ has quit IRC | 07:57 | |
| *** gcb has quit IRC | 07:57 | |
| *** assassin has joined #openstack-manila | 08:00 | |
| *** pcaruana has joined #openstack-manila | 08:12 | |
| *** dsariel has joined #openstack-manila | 08:18 | |
| *** assassin has quit IRC | 08:19 | |
| *** assassin has joined #openstack-manila | 08:24 | |
| *** AlexeyAbashkin has quit IRC | 08:29 | |
| *** AlexeyAbashkin has joined #openstack-manila | 08:30 | |
| *** rishabh has joined #openstack-manila | 08:30 | |
| *** rishabh is now known as rishabh_ | 08:30 | |
| *** a-pugachev has joined #openstack-manila | 09:03 | |
| openstackgerrit | zhongjun proposed openstack/manila-specs master: Support metadata for access rule resource https://review.openstack.org/551106 | 09:30 |
| *** assassin has quit IRC | 09:44 | |
| *** assassin has joined #openstack-manila | 09:45 | |
| *** rishabh__ has joined #openstack-manila | 09:51 | |
| *** rishabh_ has quit IRC | 09:53 | |
| *** rishabh_ has joined #openstack-manila | 09:56 | |
| *** rishabh__ has quit IRC | 09:58 | |
| *** AlexeyAbashkin has quit IRC | 10:10 | |
| *** threestrands has quit IRC | 10:24 | |
| *** e0ne__ has quit IRC | 10:46 | |
| *** AlexeyAbashkin has joined #openstack-manila | 10:53 | |
| *** tpsilva has joined #openstack-manila | 11:05 | |
| openstackgerrit | zhongjun proposed openstack/manila-specs master: Add priority for access rule https://review.openstack.org/552935 | 11:25 |
| *** rraja_ has quit IRC | 11:36 | |
| *** rraja_ has joined #openstack-manila | 11:36 | |
| *** IdoKaplan has joined #openstack-manila | 11:55 | |
| IdoKaplan | Hi, Is anyone here can help me please with Manila? I'm getting an error when I'm trying to add "user" access to "cifs" protocol - "ERROR oslo_messaging.rpc.server InvalidShareAccess: Invalid access rule: Only 'ip' access type allowed" . Please advise. | 11:55 |
| *** ganso has joined #openstack-manila | 11:57 | |
| tbarron | IdoKaplan: which back end are you using? | 12:02 |
| IdoKaplan | tbarron: cephfs | 12:05 |
| tbarron | IdoKaplan: user access rules and "cifs" aren't supported for cephfs native or cephfs nfs back end | 12:08 |
| tbarron | IdoKaplan: https://docs.openstack.org/manila/queens/admin/cephfs_driver.html | 12:09 |
| *** erlon has joined #openstack-manila | 12:15 | |
| *** assassin has quit IRC | 12:16 | |
| *** eharney has joined #openstack-manila | 12:21 | |
| *** assassin has joined #openstack-manila | 12:25 | |
| *** AlexeyAbashkin has quit IRC | 12:28 | |
| *** AlexeyAbashkin has joined #openstack-manila | 12:29 | |
| IdoKaplan | tbarron: ohh, so "cifs" is working but not supported? | 12:33 |
| *** assassin has quit IRC | 12:42 | |
| *** assassin has joined #openstack-manila | 12:42 | |
| *** assassin has quit IRC | 12:43 | |
| *** assassin has joined #openstack-manila | 12:43 | |
| tbarron | IdoKaplan: cifs access rules won't work for those back ends but it works for others, see the "User" column at https://docs.openstack.org/manila/queens/admin/share_back_ends_feature_support_mapping.html#mapping-of-share-drivers-and-share-access-rules-support | 12:50 |
| *** knylander has joined #openstack-manila | 12:50 | |
| *** assassin has quit IRC | 12:52 | |
| *** assassin has joined #openstack-manila | 12:55 | |
| *** vgreen has joined #openstack-manila | 13:19 | |
| *** ubijtsa has joined #openstack-manila | 13:21 | |
| *** assassin has quit IRC | 13:23 | |
| *** ubijtsa is now known as assassin | 13:25 | |
| *** a-pugachev has quit IRC | 13:30 | |
| *** a-pugachev has joined #openstack-manila | 13:30 | |
| *** a-pugachev has quit IRC | 13:31 | |
| *** gouthamr has joined #openstack-manila | 13:32 | |
| *** a-pugachev has joined #openstack-manila | 13:35 | |
| *** luizbag has joined #openstack-manila | 13:56 | |
| *** IdoKaplan has quit IRC | 14:01 | |
| *** a-pugachev has quit IRC | 14:09 | |
| *** e0ne has joined #openstack-manila | 14:12 | |
| *** dustins has joined #openstack-manila | 14:16 | |
| *** kaisers_ has joined #openstack-manila | 14:25 | |
| *** kaisers has quit IRC | 14:28 | |
| *** AlexeyAbashkin has quit IRC | 14:45 | |
| *** markstur has joined #openstack-manila | 14:52 | |
| *** gouthamr has quit IRC | 14:56 | |
| *** rishabh_ has quit IRC | 15:00 | |
| tbarron | weekly manila meeting ... | 15:00 |
| * bswartz notices tbarron fixed his clock | 15:01 | |
| *** gouthamr has joined #openstack-manila | 15:02 | |
| *** AlexeyAbashkin has joined #openstack-manila | 15:07 | |
| *** AlexeyAbashkin has quit IRC | 15:12 | |
| openstackgerrit | Ciara Stacke proposed openstack/manila master: VMAX driver - Implement IPv6 support for Dell EMC VMAX driver https://review.openstack.org/560937 | 15:13 |
| *** e0ne has quit IRC | 15:30 | |
| *** AlexeyAbashkin has joined #openstack-manila | 15:32 | |
| *** markstur_ has joined #openstack-manila | 15:44 | |
| *** markstur has quit IRC | 15:46 | |
| *** erlon has quit IRC | 15:56 | |
| *** rraja_ has quit IRC | 15:57 | |
| * ganso is heading out to lunch | 16:01 | |
| gouthamr | ganso: bon apetit | 16:01 |
| amito | ganso: anything good? | 16:01 |
| vgreen | ganso: bring me back something? thanks | 16:02 |
| tbarron | bswartz: zhongjun_ if aws is doing it then maybe we should too, let me digest that. | 16:02 |
| amito | gouthamr tbarron: going to check if there's any pizza left, be back soon to continue the discussion :) | 16:02 |
| tbarron | bswartz: zhongjun_ but on the other hand "more specific wins" semantics has a long heritage | 16:03 |
| zhongjun_ | It looks like aws didn't doing that | 16:03 |
| tbarron | amito: when you get back let's talk about so-called denies | 16:03 |
| bswartz | AWS seems to use security groups to control access | 16:03 |
| tbarron | zhongjun_: bswartz ah | 16:03 |
| zhongjun_ | tbarron: AWS is different with us | 16:04 |
| tbarron | bswartz: do the security groups have CIDRs in them?> | 16:04 |
| bswartz | Security groups are a first class concept in AWS I think | 16:04 |
| tbarron | bswartz: do they have any "contains" relationship? | 16:05 |
| tbarron | if not, then they aren't a precedent for us I guess | 16:05 |
| bswartz | Not sure -- I'm not a heavy AWS user | 16:05 |
| tbarron | me either :) | 16:05 |
| * tbarron has actually never used EFS | 16:06 | |
| zhongjun_ | We don''t care about other cloud how to doing, only care about AWS? :) | 16:08 |
| gouthamr | wut, we don't care about AWS | 16:08 |
| amito | tbarron: back. | 16:08 |
| tbarron | zhongjun_: of course we care about ali baba etc. too | 16:09 |
| amito | so... denies | 16:09 |
| tbarron | amito: it's too bad we use the word 'deny' for these. They just delete a rule. | 16:10 |
| tbarron | We don't insert a deny rule. | 16:10 |
| *** erlon has joined #openstack-manila | 16:10 | |
| gouthamr | this has history, bswartz explained it to me once | 16:10 |
| zhongjun_ | tbarron: Do we vote for it or just continue to do it and waiting for review comments about priority? | 16:10 |
| amito | I see, so a "deny" rule can only come for an existing "allow" rule? | 16:10 |
| tbarron | zhongjun_: stay on track with your spec; we need to understand the proposal well to evaluate it versus alternatives. | 16:11 |
| gouthamr | yep, we assume absolutely no-one has access at the very beginning and only rules that manila knows about are implemented | 16:11 |
| tbarron | zhongjun_: what I'd ask you to consider though is if there would be any disadvantage to saying that the semantics for manila is that "more specific wins" | 16:11 |
| tbarron | It seems to me clear semantics. | 16:12 |
| amito | However, you can "allow" 10.0.0.0/32 and then "deny" only part of that subnet, no? | 16:12 |
| tbarron | Back ends that implement "first match" would need to sort so that more specific rules are first. | 16:12 |
| tbarron | It would eliminate the user error cases where more general rules are given higher priority than more specific rules. | 16:13 |
| tbarron | I'm not convinced that having more general rules with higher priority than more specific rules has any actual use. | 16:13 |
| tbarron | amito: conceptually yes but in manila no | 16:13 |
| tbarron | amito: your back end might be able to do that but manila doesn't support it | 16:14 |
| tbarron | amito: in manila 'deny' means 'delete' | 16:14 |
| tbarron | amito: I don't like it :( | 16:14 |
| zhongjun_ | amito: you can "allow" 10.0.0.0/32 and if the 10.0.0.0/32 exist in the access rules, it will work even if the subnet has been "deny" | 16:14 |
| tbarron | zhongjun_: amito right, because the 'deny' deleted the rule and the allow put it back | 16:15 |
| tbarron | so with the "more specific wins" semantics we still have to spell out that "deny" just means delete and doesn't do anything unless there's already a matchiing rule | 16:16 |
| amito | tbarron: so if I understand correctly, there is indeed no need to prioritize 'deny' rules | 16:16 |
| tbarron | amito: that's what I think given that it means 'delete'; zhongjun_ do you agree? | 16:16 |
| * tbarron wonders if we should microversion an api change that replaces 'deny' with 'delete' ... | 16:17 | |
| * gouthamr wonders if tbarron's fishing for an easy way to start a war | 16:18 | |
| zhongjun_ | tbarron: yeah, I agree with that | 16:18 |
| tbarron | gouthamr: unfort that's too easy in the world but we're all friends here | 16:18 |
| zhongjun_ | If we add prioritize in 'deny' rules, it cloud let user more confuse | 16:19 |
| tbarron | zhongjun_: I agree. So please think about the semantics I suggested w/o any priorities or order semantics and see if it has flaws. | 16:20 |
| amito | tbarron: why is there no actualy 'deny'? I see the various issues with implementing it, but I guess some backends support it, and some backends support allowing access to shares for IP ranges (rather than for subnets) so existing rules can be split if part of a subnet is 'denied'. It can be an attribute added to the driver (deny_support=True/False). | 16:20 |
| amito | s/actualy/actually | 16:20 |
| amito | s/actualy/actual | 16:20 |
| amito | long day :| | 16:21 |
| tbarron | The main drawback I can think of is that it will force backends that process by first match to sort most specific first | 16:21 |
| tbarron | amito: I don't know the history. I'm guessing bswartz is at lunch (I'm going to do that myself in a bit) but he can | 16:22 |
| tbarron | amito: probably explain how we got to where we are today on this. | 16:22 |
| amito | tbarron: ok, thanks. Enjoy lunch, I think I'll head home since it's getting late here. | 16:22 |
| tbarron | amito: if you want drivers to advertise that capability it's a new spec :) | 16:22 |
| tbarron | amito: yeah, and zhongjun_ it's really late for you I know. Thank you for your work on | 16:23 |
| tbarron | zhongjun_: on this and for your patience with ideas that weren't brought up at PTG. | 16:23 |
| tbarron | zhongjun_: because we didn't think of them at the time. | 16:23 |
| amito | +1 | 16:24 |
| zhongjun_ | tbarron: thank you for your patience with keep thinking my spec | 16:25 |
| zhongjun_ | tbarron: see you | 16:25 |
| *** e0ne has joined #openstack-manila | 16:25 | |
| tbarron | zhongjun_: see you tomorrow, get some rest | 16:26 |
| zhongjun_ | tbarron: good night | 16:26 |
| *** gouthamr has quit IRC | 16:38 | |
| bswartz | I've always disliked the "allow/deny" verbs for access rules, but they were decided early on and we never changed them for backward compatibility reasons | 16:41 |
| bswartz | add-rule and delete-rule would be better | 16:42 |
| *** assassin has quit IRC | 16:48 | |
| *** gouthamr has joined #openstack-manila | 17:14 | |
| *** eharney_ has joined #openstack-manila | 17:51 | |
| *** eharney has quit IRC | 17:51 | |
| *** eharney_ is now known as eharney | 17:51 | |
| *** dsariel has quit IRC | 17:58 | |
| *** pcaruana has quit IRC | 18:09 | |
| *** openstackgerrit has quit IRC | 18:19 | |
| *** chenying_ has joined #openstack-manila | 18:24 | |
| *** chenying has quit IRC | 18:24 | |
| *** eharney has quit IRC | 19:03 | |
| *** AlexeyAbashkin has quit IRC | 19:06 | |
| *** gouthamr has quit IRC | 19:20 | |
| *** gouthamr has joined #openstack-manila | 19:30 | |
| *** vgreen has quit IRC | 19:32 | |
| *** gouthamr has quit IRC | 19:50 | |
| *** gouthamr has joined #openstack-manila | 19:51 | |
| *** e0ne has quit IRC | 20:10 | |
| *** luizbag has quit IRC | 20:15 | |
| *** dsariel has joined #openstack-manila | 20:32 | |
| *** openstackgerrit has joined #openstack-manila | 20:33 | |
| openstackgerrit | Simon Dodsley proposed openstack/manila master: Add basic driver for Pure Storage FlashBlade array. https://review.openstack.org/547778 | 20:33 |
| *** gouthamr_ has joined #openstack-manila | 20:43 | |
| *** eharney has joined #openstack-manila | 21:00 | |
| openstackgerrit | Simon Dodsley proposed openstack/manila master: Add basic driver for Pure Storage FlashBlade array. https://review.openstack.org/547778 | 21:01 |
| tbarron | bswartz: what do you think about migrating gently to add-rule and delete-rule? | 21:05 |
| tbarron | bswartz: use microversions and bump first to aliases with deprecation notice | 21:05 |
| tbarron | bswartz: then a later bump to remove the old usage? | 21:05 |
| *** gouthamr has quit IRC | 21:06 | |
| *** gouthamr has joined #openstack-manila | 21:15 | |
| *** openstackstatus has quit IRC | 21:27 | |
| *** openstack has joined #openstack-manila | 21:31 | |
| *** ChanServ sets mode: +o openstack | 21:31 | |
| *** gouthamr has quit IRC | 21:54 | |
| *** eharney has quit IRC | 22:03 | |
| openstackgerrit | Simon Dodsley proposed openstack/manila master: Add basic driver for Pure Storage FlashBlade array. https://review.openstack.org/547778 | 22:05 |
| *** tpsilva has quit IRC | 22:15 | |
| *** ganso has quit IRC | 22:19 | |
| *** harlowja has joined #openstack-manila | 22:24 | |
| *** dsariel has quit IRC | 22:37 | |
| *** dustins_ has joined #openstack-manila | 22:39 | |
| *** dustins has quit IRC | 22:42 | |
| *** dustins_ has quit IRC | 23:07 | |
| *** gouthamr has joined #openstack-manila | 23:21 | |
| -openstackstatus- NOTICE: The Etherpad service at https://etherpad.openstack.org/ is being restarted to pick up the latest release version; browsers should see only a brief ~1min blip before reconnecting automatically to active pads | 23:39 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!