*** xuhanp has joined #openstack-meeting-3 | 00:05 | |
*** HenryG has quit IRC | 00:11 | |
*** nati_ueno has joined #openstack-meeting-3 | 00:12 | |
*** xuhanp has quit IRC | 00:16 | |
*** kenhui has joined #openstack-meeting-3 | 00:16 | |
*** nati_ueno has quit IRC | 00:17 | |
*** nati_uen_ has joined #openstack-meeting-3 | 00:22 | |
*** nati_ue__ has joined #openstack-meeting-3 | 00:27 | |
*** banix has quit IRC | 00:29 | |
*** nati_uen_ has quit IRC | 00:30 | |
*** nati_ue__ has quit IRC | 00:32 | |
*** nati_uen_ has joined #openstack-meeting-3 | 00:35 | |
*** xuhanp has joined #openstack-meeting-3 | 00:36 | |
*** banix has joined #openstack-meeting-3 | 00:37 | |
*** nati_uen_ has quit IRC | 00:39 | |
*** tomoe_ has quit IRC | 00:47 | |
*** xuhanp has quit IRC | 00:49 | |
*** nati_uen_ has joined #openstack-meeting-3 | 00:52 | |
*** nati_ue__ has joined #openstack-meeting-3 | 00:54 | |
*** nati_uen_ has quit IRC | 00:57 | |
*** nati_ueno has joined #openstack-meeting-3 | 00:57 | |
*** nati_ue__ has quit IRC | 00:59 | |
*** nati_ueno has quit IRC | 00:59 | |
*** nati_ueno has joined #openstack-meeting-3 | 01:00 | |
*** carl_baldwin_m has quit IRC | 01:03 | |
*** carl_baldwin_m has joined #openstack-meeting-3 | 01:03 | |
*** nati_ueno has quit IRC | 01:04 | |
*** peristeri has quit IRC | 01:06 | |
*** carl_baldwin_m has quit IRC | 01:07 | |
*** nati_ueno has joined #openstack-meeting-3 | 01:09 | |
*** david-lyle has quit IRC | 01:30 | |
*** kenhui has quit IRC | 01:31 | |
*** nati_ueno has quit IRC | 01:33 | |
*** yamahata has joined #openstack-meeting-3 | 01:37 | |
*** nati_ueno has joined #openstack-meeting-3 | 02:00 | |
*** persia has quit IRC | 02:01 | |
*** persia_ has joined #openstack-meeting-3 | 02:03 | |
*** persia_ is now known as Guest77850 | 02:04 | |
*** persia has joined #openstack-meeting-3 | 02:04 | |
*** persia is now known as Guest9975 | 02:04 | |
*** Guest9975 has joined #openstack-meeting-3 | 02:04 | |
*** Guest9975 is now known as persia | 02:04 | |
*** nati_ueno has quit IRC | 02:10 | |
*** tomoe_ has joined #openstack-meeting-3 | 02:12 | |
*** nati_ueno has joined #openstack-meeting-3 | 02:19 | |
*** nati_ueno has quit IRC | 02:25 | |
*** david-lyle has joined #openstack-meeting-3 | 02:31 | |
*** nati_ueno has joined #openstack-meeting-3 | 02:33 | |
*** david-lyle has quit IRC | 02:35 | |
*** lcheng_ has joined #openstack-meeting-3 | 02:35 | |
*** HenryG has joined #openstack-meeting-3 | 02:37 | |
*** kenhui has joined #openstack-meeting-3 | 02:59 | |
*** coolsvap|afk is now known as coolsvap | 03:06 | |
*** kenhui has quit IRC | 03:08 | |
*** kenhui has joined #openstack-meeting-3 | 03:09 | |
*** kenhui has quit IRC | 03:23 | |
*** yamamoto_ has joined #openstack-meeting-3 | 03:27 | |
*** eghobo has joined #openstack-meeting-3 | 03:30 | |
*** david-lyle has joined #openstack-meeting-3 | 03:32 | |
*** david-lyle has quit IRC | 03:36 | |
*** david-lyle has joined #openstack-meeting-3 | 03:38 | |
*** david-lyle has quit IRC | 03:43 | |
*** banix has quit IRC | 04:18 | |
*** david-lyle has joined #openstack-meeting-3 | 04:24 | |
*** nati_ueno has quit IRC | 04:31 | |
*** nati_ueno has joined #openstack-meeting-3 | 04:32 | |
*** TravT has joined #openstack-meeting-3 | 04:33 | |
*** coolsvap is now known as coolsvap|afk | 04:54 | |
*** lcheng_ has quit IRC | 05:01 | |
*** TravT has quit IRC | 05:33 | |
*** lcheng_ has joined #openstack-meeting-3 | 05:43 | |
*** eghobo has quit IRC | 05:44 | |
*** coolsvap|afk is now known as coolsvap | 05:50 | |
*** lcheng_ has quit IRC | 05:52 | |
*** mrunge has joined #openstack-meeting-3 | 06:03 | |
*** mrunge has quit IRC | 06:43 | |
*** jtomasek has joined #openstack-meeting-3 | 06:52 | |
*** david-lyle has quit IRC | 06:54 | |
*** boris-42 has quit IRC | 07:03 | |
*** boris-42 has joined #openstack-meeting-3 | 07:11 | |
*** jtomasek has quit IRC | 07:15 | |
*** jtomasek has joined #openstack-meeting-3 | 07:15 | |
*** jcoufal has joined #openstack-meeting-3 | 07:17 | |
*** nati_ueno has quit IRC | 07:18 | |
*** nati_ueno has joined #openstack-meeting-3 | 07:19 | |
*** markmcclain has joined #openstack-meeting-3 | 07:23 | |
*** nati_ueno has quit IRC | 07:23 | |
*** yamamoto_ has quit IRC | 07:24 | |
*** d0ugal_ has quit IRC | 07:25 | |
*** jtomasek has quit IRC | 07:29 | |
*** ttrifonov_zZzz is now known as ttrifonov | 07:30 | |
*** markmcclain has quit IRC | 07:35 | |
*** amotoki has joined #openstack-meeting-3 | 07:49 | |
*** nati_ueno has joined #openstack-meeting-3 | 07:50 | |
*** nati_ueno has quit IRC | 07:54 | |
*** safchain has joined #openstack-meeting-3 | 07:54 | |
*** nacim has joined #openstack-meeting-3 | 08:02 | |
*** coolsvap is now known as coolsvap|afk | 08:34 | |
*** jamielennox is now known as jamielennox|away | 08:40 | |
*** coolsvap|afk is now known as coolsvap | 08:45 | |
*** nati_ueno has joined #openstack-meeting-3 | 08:50 | |
*** mrunge has joined #openstack-meeting-3 | 08:52 | |
*** nati_ueno has quit IRC | 08:55 | |
*** nelsnelson has joined #openstack-meeting-3 | 09:07 | |
*** igordcard has joined #openstack-meeting-3 | 09:10 | |
*** jtomasek has joined #openstack-meeting-3 | 09:14 | |
*** keshavahp has joined #openstack-meeting-3 | 09:20 | |
keshavahp | Hi | 09:21 |
---|---|---|
keshavahp | Hi This is Test in IRC Meeting | 09:21 |
*** amotoki has quit IRC | 09:22 | |
*** ttrifonov is now known as ttrifonov_zZzz | 09:22 | |
*** sahid has quit IRC | 09:26 | |
*** ttrifonov_zZzz is now known as ttrifonov | 09:30 | |
*** ttrifonov is now known as ttrifonov_zZzz | 09:46 | |
*** nacim has quit IRC | 09:47 | |
*** gangs-hp has joined #openstack-meeting-3 | 09:49 | |
gangs-hp | Test IRC connection | 09:49 |
*** nati_ueno has joined #openstack-meeting-3 | 09:51 | |
*** ttrifonov_zZzz is now known as ttrifonov | 09:54 | |
*** nati_ueno has quit IRC | 09:55 | |
*** ttrifonov is now known as ttrifonov_zZzz | 09:59 | |
*** ttrifonov_zZzz is now known as ttrifonov | 09:59 | |
*** coolsvap is now known as coolsvap|afk | 10:00 | |
*** nacim has joined #openstack-meeting-3 | 10:01 | |
*** ttrifonov is now known as ttrifonov_zZzz | 10:02 | |
*** nacim has quit IRC | 10:03 | |
*** ttrifonov_zZzz is now known as ttrifonov | 10:03 | |
*** nacim has joined #openstack-meeting-3 | 10:04 | |
*** nacim_ has joined #openstack-meeting-3 | 10:31 | |
*** nacim has quit IRC | 10:33 | |
*** tomoe_ has quit IRC | 10:34 | |
*** keshavahp has quit IRC | 10:43 | |
*** nati_ueno has joined #openstack-meeting-3 | 10:52 | |
*** nati_ueno has quit IRC | 10:56 | |
*** tomoe_ has joined #openstack-meeting-3 | 11:01 | |
*** tomoe_ has joined #openstack-meeting-3 | 11:02 | |
*** igordcard has quit IRC | 11:02 | |
*** gangs-hp has quit IRC | 11:06 | |
*** tomoe_ has quit IRC | 11:10 | |
*** safchain has quit IRC | 11:31 | |
*** safchain has joined #openstack-meeting-3 | 11:36 | |
*** yamahata has quit IRC | 11:36 | |
*** nati_uen_ has joined #openstack-meeting-3 | 11:55 | |
*** nati_uen_ has quit IRC | 11:59 | |
*** ttrifonov is now known as ttrifonov_zZzz | 12:06 | |
*** mwagner_lap has quit IRC | 12:08 | |
*** ttrifonov_zZzz is now known as ttrifonov | 12:10 | |
*** vinay_yadhav has joined #openstack-meeting-3 | 12:15 | |
*** vinay_yadhav has quit IRC | 12:18 | |
*** thomasem has joined #openstack-meeting-3 | 12:35 | |
*** yamahata has joined #openstack-meeting-3 | 12:42 | |
*** yamahata has quit IRC | 12:45 | |
*** yamahata has joined #openstack-meeting-3 | 12:46 | |
*** jamie_h has joined #openstack-meeting-3 | 12:53 | |
*** nati_ueno has joined #openstack-meeting-3 | 12:55 | |
*** nati_ueno has quit IRC | 13:00 | |
*** carl_baldwin_m has joined #openstack-meeting-3 | 13:02 | |
*** julim has joined #openstack-meeting-3 | 13:05 | |
*** lenrow has joined #openstack-meeting-3 | 13:05 | |
*** thomasem has quit IRC | 13:07 | |
*** jcoufal has quit IRC | 13:07 | |
*** jcoufal_ has joined #openstack-meeting-3 | 13:07 | |
*** carl_baldwin_m has quit IRC | 13:07 | |
*** carl_baldwin_m has joined #openstack-meeting-3 | 13:07 | |
*** xuhanp has joined #openstack-meeting-3 | 13:13 | |
*** banix has joined #openstack-meeting-3 | 13:14 | |
*** lblanchard has joined #openstack-meeting-3 | 13:16 | |
*** thomasem has joined #openstack-meeting-3 | 13:17 | |
*** tomoe_ has joined #openstack-meeting-3 | 13:21 | |
*** carl_baldwin_m has quit IRC | 13:22 | |
*** carl_baldwin_m has joined #openstack-meeting-3 | 13:22 | |
*** jaypipes has joined #openstack-meeting-3 | 13:22 | |
*** carl_baldwin_m has quit IRC | 13:23 | |
*** kenhui has joined #openstack-meeting-3 | 13:27 | |
*** jpomero has quit IRC | 13:35 | |
*** peristeri has joined #openstack-meeting-3 | 13:36 | |
*** sballe_ has joined #openstack-meeting-3 | 13:37 | |
*** sballe has quit IRC | 13:39 | |
*** sballe_ has quit IRC | 13:42 | |
*** danpb has joined #openstack-meeting-3 | 13:42 | |
*** peristeri has quit IRC | 13:46 | |
*** peristeri has joined #openstack-meeting-3 | 13:46 | |
*** cody-somerville has left #openstack-meeting-3 | 13:47 | |
*** jcoufal has joined #openstack-meeting-3 | 13:49 | |
*** jcoufal_ has quit IRC | 13:52 | |
*** nati_ueno has joined #openstack-meeting-3 | 13:56 | |
*** nati_ueno has quit IRC | 14:00 | |
*** tomoe_ has quit IRC | 14:01 | |
*** lcheng_ has joined #openstack-meeting-3 | 14:06 | |
*** jpomero has joined #openstack-meeting-3 | 14:16 | |
*** ttrifonov is now known as ttrifonov_zZzz | 14:16 | |
*** dlenrow has joined #openstack-meeting-3 | 14:22 | |
*** lcheng_ has quit IRC | 14:22 | |
*** lcheng_ has joined #openstack-meeting-3 | 14:24 | |
*** lenrow has quit IRC | 14:25 | |
*** busterswt has quit IRC | 14:28 | |
*** david-lyle has joined #openstack-meeting-3 | 14:30 | |
*** otherwiseguy has joined #openstack-meeting-3 | 14:36 | |
*** TravT has joined #openstack-meeting-3 | 14:39 | |
*** busterswt has joined #openstack-meeting-3 | 14:41 | |
*** zul has joined #openstack-meeting-3 | 14:45 | |
*** sew has joined #openstack-meeting-3 | 14:47 | |
*** gcb has joined #openstack-meeting-3 | 14:52 | |
*** apmelton has joined #openstack-meeting-3 | 14:55 | |
*** hallyn has joined #openstack-meeting-3 | 14:56 | |
*** nati_ueno has joined #openstack-meeting-3 | 14:57 | |
*** otherwiseguy has quit IRC | 14:57 | |
*** vladikr has joined #openstack-meeting-3 | 14:57 | |
*** otherwiseguy has joined #openstack-meeting-3 | 14:58 | |
*** gcb has quit IRC | 14:58 | |
*** s1rp__ has joined #openstack-meeting-3 | 14:59 | |
*** s1rp__ is now known as s1rp | 15:00 | |
*** bauzas has joined #openstack-meeting-3 | 15:00 | |
danpb | #startmeeting libvirt | 15:01 |
openstack | Meeting started Tue May 27 15:01:01 2014 UTC and is due to finish in 60 minutes. The chair is danpb. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:01 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:01 |
*** openstack changes topic to " (Meeting topic: libvirt)" | 15:01 | |
openstack | The meeting name has been set to 'libvirt' | 15:01 |
*** jgrimm has joined #openstack-meeting-3 | 15:01 | |
lparth_ | hello | 15:01 |
apmelton | o/ | 15:01 |
*** nati_ueno has quit IRC | 15:01 | |
*** mspreitz has joined #openstack-meeting-3 | 15:01 | |
jgrimm | o/ | 15:01 |
*** mspreitz has left #openstack-meeting-3 | 15:01 | |
danpb | ah, great, some people added some agenda items | 15:01 |
thomasem | o/ | 15:02 |
*** garyk has joined #openstack-meeting-3 | 15:02 | |
*** rkukura has joined #openstack-meeting-3 | 15:02 | |
thomasem | Yeah, wouldn't want crickets chirping, now would we? | 15:02 |
sew | o/ | 15:02 |
danpb | lets be traditional and begin at the beginning | 15:02 |
danpb | #topic LXC boot from block device | 15:02 |
*** openstack changes topic to "LXC boot from block device (Meeting topic: libvirt)" | 15:02 | |
danpb | vladikr: you added this item ....anything you want to say | 15:02 |
*** sgordon has joined #openstack-meeting-3 | 15:03 | |
vladikr | danpb, thank you for the help with this | 15:03 |
vladikr | I'm a bit confused with what should actually be done regarding your last comment | 15:03 |
s1rp | o/ | 15:04 |
danpb | i think that all we need is a bit more description about some of the supported scenarios | 15:04 |
vladikr | on checking the number of partitions in the volume | 15:04 |
vladikr | and shouldn't we do the same for images, in this case? | 15:04 |
danpb | ie say that the change is only intended to work with the case of an unpartitioned block dev | 15:04 |
danpb | and describe the security considerations inherent in mounting untrusted filesystems | 15:05 |
danpb | vladikr: yes most of the comments there apply just as well to images | 15:05 |
danpb | so you're spec is really just going to be describing the status quo | 15:06 |
vladikr | danpb, ah, I see, it's not about the actual implementation? they don't expect us to mount the device and look into how many partitions are there? | 15:06 |
danpb | no, no, definitely not | 15:06 |
danpb | just document what scenarios you intend to support with your change | 15:06 |
vladikr | danpb, ok :) thanks, I got it. | 15:07 |
danpb | ok cool | 15:07 |
*** jpich has joined #openstack-meeting-3 | 15:07 | |
danpb | #topic IPv6 Guest Configuration | 15:07 |
*** openstack changes topic to "IPv6 Guest Configuration (Meeting topic: libvirt)" | 15:07 | |
danpb | thomasem: ^^ | 15:07 |
thomasem | So, s1rp and myself were messing around with IP configurations in the guest. Pretty much the scenario is the /etc/network/interfaces file is generated for the guest, and then cloud-init uses that. | 15:08 |
thomasem | We found that IPv6 was failing to get configured since, when it used an inet6 static configuration in the interfaces file, the upstart job was trying to change the following value via sysctl: net.ipv6.conf.eth0.autoconf=0 | 15:09 |
thomasem | it appeared to be the case outlined in this bug: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/964882 from a couple years ago | 15:09 |
danpb | hmmm, ok, interesting problem | 15:09 |
thomasem | Libvirt mounts /proc/sys as readonly | 15:09 |
thomasem | So, I'm wondering | 15:10 |
danpb | so the mounting of /proc/sys readonly is mostly considered security-through-obscurity - it only ever really prevented accidental changes | 15:10 |
*** terryw has joined #openstack-meeting-3 | 15:10 | |
thomasem | hmm okay | 15:10 |
danpb | real security requried that SELinux/AppArmour prevent the changes, or for user namespaces to be active | 15:11 |
s1rp | right, so we made a change that just made /proc/sys/net RW, but left everything else RO | 15:11 |
thomasem | So, that's what I'm wondering... with the appropriate documentation, could we change that and assume that if you want that security, you'll use namespaces? | 15:11 |
thomasem | based on the documented way to secure containers :) | 15:11 |
*** otherwiseguy has quit IRC | 15:11 | |
thomasem | I found that when I changed the host value, it wasn't reflected in the guest, so the guest seems to have its own set of values, at least in /proc/sys/net. | 15:12 |
danpb | so the problem is that some stuff in /proc/sys/net is host-global while some stuff is namespace-local | 15:12 |
*** akrivoka has joined #openstack-meeting-3 | 15:12 | |
thomasem | oh | 15:12 |
*** carl_baldwin_ has joined #openstack-meeting-3 | 15:12 | |
danpb | when user namespaces are active we'd need to figure out how to allow access - presumably we'd have the chown the files we need to grant acess for | 15:12 |
danpb | thomasem: oh, hmm, i thought that only the tunables related to network interfaces were made local, but perhaps the kernel does more than i thought | 15:13 |
danpb | in any case, doing a read-write mount is easy enough in libvirt for the non-userns case | 15:14 |
thomasem | danpb: I didn't test thoroughly, or anything, I just know that the value it was trying to set when configuring IPv6 wasn't the shared between host and guest. | 15:14 |
thomasem | s/the// | 15:14 |
danpb | we'll need to check what we can do in the user-namespace case - hopefully chown would work | 15:14 |
danpb | this is probably something we should just take to the upstream libvirt mailing list, since i think any fix belongs in the libvirt layer | 15:15 |
thomasem | agreed | 15:15 |
thomasem | I'll do that | 15:15 |
hallyn | and any place where chown does not suffice might require kernel fix (i.e. s/capable/ns_capable in sysctl handler) | 15:15 |
danpb | hallyn: yep, good point | 15:16 |
thomasem | +1 | 15:17 |
thomasem | Okay, I'll write up an e-mail when I get a chance with some gists and what-not to help the discussion and fire off to the libvirt upstream ML | 15:17 |
danpb | ok, great | 15:17 |
*** rkukura has left #openstack-meeting-3 | 15:17 | |
danpb | #topic Config drive with LXC | 15:18 |
*** openstack changes topic to "Config drive with LXC (Meeting topic: libvirt)" | 15:18 | |
s1rp | yeah, so we want to be able to pass info into the guests, just like the hypervisor case | 15:18 |
danpb | yep, use case totally makes sense | 15:18 |
s1rp | seems like there are two possible approaches, blockstyle and fs-style | 15:18 |
s1rp | i've already done fs-style, using a plain-old directory that gets bind mounted | 15:19 |
s1rp | but for the upstream patch, i'm thinking that block-style would be more 'harmonious' with the other hypervisors | 15:19 |
s1rp | since it doesn't introduce another config-drive backend | 15:19 |
danpb | hmmm, i could see that fs-style is more convenient for containers though | 15:19 |
s1rp | it really is | 15:19 |
s1rp | and it's a very small patch | 15:19 |
danpb | because if your container image is a single app binary that is launched as init | 15:20 |
*** directxman12 has joined #openstack-meeting-3 | 15:20 | |
danpb | then you don't need to worry about having a shell wrapper script to mount the config drive and so forth | 15:20 |
danpb | openstack just takes care of making it immediately accessible to the app | 15:20 |
danpb | FWIW, a FS style approach is not totally unreasonable for hypervisors too | 15:21 |
*** sew has quit IRC | 15:21 | |
danpb | KVM has 9p filesystem passthrough from the host, and vmware has a shared filesystem capability too | 15:21 |
thomasem | s1rp: Maybe we should toss that patch upstream and see where it goes? | 15:21 |
danpb | so I think it is pretty reasonable for openstack to support both FS-style and block-style config drives | 15:22 |
s1rp | danpb: good poiints | 15:22 |
s1rp | thomasem: yeah, can do | 15:22 |
s1rp | i can toss up the patch, wonder if i need to retroactively create a spec | 15:22 |
danpb | i think FS style approach would probably appeal to docker people too | 15:22 |
s1rp | it's so simple, i hope not | 15:22 |
thomasem | It's like 3 lines of code, lol. | 15:22 |
thomasem | pretty awesome, imo. | 15:22 |
danpb | i think you do need to have a spec | 15:23 |
*** sew has joined #openstack-meeting-3 | 15:23 | |
danpb | if only to let us bikeshed about the "best" mount point for the config drive | 15:23 |
*** lblanchard has quit IRC | 15:23 | |
*** sew has quit IRC | 15:23 | |
thomasem | Haha, well by default cloud-init looks in /var/lib/cloud/seed/config_drive | 15:23 |
danpb | and to allow us to explain why it is conceptually useful for multiple hypervisors, even if we don't intend to implement fs-approach for others | 15:23 |
s1rp | yeah have it hard coded to config-drive's preferred dest, but could make it configurable | 15:24 |
danpb | thomasem: ah, well that's something to say in the spec :-) | 15:24 |
s1rp | with cloud-init the option's default | 15:24 |
*** sew has joined #openstack-meeting-3 | 15:24 | |
thomasem | definitely | 15:24 |
thomasem | cool cool, s1rp, I'll work with you on that | 15:25 |
danpb | good, sounds like a plan | 15:26 |
danpb | #topic Any other business ? | 15:26 |
*** openstack changes topic to "Any other business ? (Meeting topic: libvirt)" | 15:26 | |
danpb | ....we're out of agenda items now... so speak up if you've anything else to add | 15:26 |
s1rp | so remove-fakelibvirt turned out to be pretty contraversial | 15:26 |
s1rp | busy at the moment, so holding off for a bit, hope to get to it later in the cycle | 15:27 |
danpb | lol, yeah | 15:27 |
danpb | it isn't really blocking anything on critical path, so no particular rush | 15:27 |
s1rp | yeah exactly, just sort of a nice-to-have | 15:27 |
s1rp | but johannes had a good point about trying to figure out what's expected across hypervisors testing-wise | 15:28 |
s1rp | right not it's very ad hoc, some integration tests, some unit, etc | 15:28 |
thomasem | How're they going to figure that out? | 15:28 |
thomasem | or we, rather... not sure what all's involved there. :) | 15:28 |
danpb | yeah, its kind of fuzzy | 15:29 |
s1rp | guessing we just need a ML thread to hash it out | 15:29 |
thomasem | Gotcha | 15:29 |
danpb | i was always rather under the impression that its primarily unit testing | 15:29 |
s1rp | so i think it's mostly integration tests under the guise of unit-tests | 15:29 |
danpb | but that we need the real libvirt module around, so we can access module constants & the like | 15:29 |
s1rp | i think we have very few true unit-tests | 15:29 |
s1rp | but that's a whole can-of-worms :) | 15:29 |
*** abramley has joined #openstack-meeting-3 | 15:30 | |
*** emagana has joined #openstack-meeting-3 | 15:30 | |
danpb | s1rp: the stuff in nova/tests/virt/libvirt isn't actually making changes against the real hypervisors though is it ? | 15:30 |
thomasem | Yeah... | 15:30 |
apmelton | s1rp: true unit tests turn out to have tons of @patch's in nova >_> | 15:30 |
thomasem | Lol! Boy, do they. | 15:30 |
danpb | i mean it might connect to the hypervisor, but its stubbing out the real interesting APIs to avoid hitting the host | 15:30 |
*** directxman12 has quit IRC | 15:30 | |
*** lenrow has joined #openstack-meeting-3 | 15:30 | |
s1rp | danpb: yeah, we're not hitting the real hypervisor, but we're making very high-level calls and then asserting stuff at a very low-level (via fakelibvirt or fakexenapi), so we're testing multiple 'units' | 15:31 |
danpb | ok, right, i see what you mean | 15:31 |
danpb | i guess i was still thinking of that as unit testing but I see why you might call it integration testing | 15:32 |
*** sew has quit IRC | 15:32 | |
s1rp | yeah consistent terminology is probably half-the-battle | 15:32 |
s1rp | so many of the discussions about this, we end up talking past each other | 15:33 |
danpb | yeah, i can imagine | 15:33 |
*** dlenrow has quit IRC | 15:33 | |
danpb | anyhow, I guess we can end this meeting now | 15:34 |
*** kenhui has quit IRC | 15:34 | |
danpb | thanks to all for coming, see you same time / place next week | 15:34 |
apmelton | o/ | 15:34 |
vladikr | thanks | 15:34 |
thomasem | Thanks! o/ | 15:34 |
lparth_ | thanks | 15:34 |
*** thomasem has left #openstack-meeting-3 | 15:34 | |
danpb | #endmeeting | 15:34 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 15:34 | |
openstack | Meeting ended Tue May 27 15:34:58 2014 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:35 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/libvirt/2014/libvirt.2014-05-27-15.01.html | 15:35 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/libvirt/2014/libvirt.2014-05-27-15.01.txt | 15:35 |
openstack | Log: http://eavesdrop.openstack.org/meetings/libvirt/2014/libvirt.2014-05-27-15.01.log.html | 15:35 |
s1rp | thanks all! | 15:35 |
*** lparth_ has left #openstack-meeting-3 | 15:36 | |
*** hallyn has left #openstack-meeting-3 | 15:36 | |
*** lblanchard has joined #openstack-meeting-3 | 15:37 | |
*** sgordon has left #openstack-meeting-3 | 15:38 | |
*** jgrimm has quit IRC | 15:39 | |
*** sew has joined #openstack-meeting-3 | 15:40 | |
*** sew has quit IRC | 15:41 | |
*** ericpeterson has joined #openstack-meeting-3 | 15:41 | |
*** sew has joined #openstack-meeting-3 | 15:41 | |
*** eghobo has joined #openstack-meeting-3 | 15:43 | |
*** nlahouti_ has joined #openstack-meeting-3 | 15:47 | |
*** xuhanp has quit IRC | 15:49 | |
*** jgrimm has joined #openstack-meeting-3 | 15:52 | |
*** zul has left #openstack-meeting-3 | 15:55 | |
*** shakamunyi has joined #openstack-meeting-3 | 15:56 | |
*** xuhanp has joined #openstack-meeting-3 | 15:57 | |
*** santib has joined #openstack-meeting-3 | 15:57 | |
*** devlaps has joined #openstack-meeting-3 | 15:58 | |
*** tqtran has joined #openstack-meeting-3 | 15:58 | |
*** vladikr has left #openstack-meeting-3 | 15:58 | |
*** apmelton has left #openstack-meeting-3 | 15:58 | |
*** doug-fish has joined #openstack-meeting-3 | 15:58 | |
*** alexpilotti has joined #openstack-meeting-3 | 15:59 | |
*** tzumainn has joined #openstack-meeting-3 | 15:59 | |
*** gary-smith has joined #openstack-meeting-3 | 15:59 | |
david-lyle | #startmeeting Horizon | 15:59 |
openstack | Meeting started Tue May 27 15:59:55 2014 UTC and is due to finish in 60 minutes. The chair is david-lyle. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:59 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:59 |
*** openstack changes topic to " (Meeting topic: Horizon)" | 15:59 | |
openstack | The meeting name has been set to 'horizon' | 15:59 |
david-lyle | Hello everyone! | 16:00 |
lsmola | hello | 16:00 |
gary-smith | hi | 16:00 |
akrivoka | hi everyone | 16:00 |
jcoufal | o/ | 16:00 |
devlaps | hi all! | 16:00 |
doug-fish | hello! | 16:00 |
jpich | Hello | 16:00 |
santib | hi all | 16:00 |
jrist | what do we call many Horizon-ers | 16:00 |
jrist | horizonites? | 16:00 |
jrist | o/ | 16:00 |
*** jthopkin has joined #openstack-meeting-3 | 16:00 | |
jrist | horizonizers | 16:00 |
jrist | horizinians | 16:00 |
jtomasek | hi | 16:01 |
*** xuhanp has quit IRC | 16:01 | |
tzumainn | hiya! | 16:01 |
*** johnma has joined #openstack-meeting-3 | 16:01 | |
david-lyle | We'll we've almost hit Juno-1, surprise | 16:01 |
david-lyle | June 12 is the date for Juno-1 | 16:02 |
david-lyle | first one always sneaks up on me | 16:02 |
david-lyle | https://launchpad.net/horizon/+milestone/juno-1 | 16:02 |
*** clu_ has joined #openstack-meeting-3 | 16:02 | |
jcoufal | doug-fish: that was fast | 16:02 |
jcoufal | doug-fish: sorry :) | 16:02 |
david-lyle | is not cleaned up yet and I have to put together 2 and 3 | 16:02 |
david-lyle | will work on that this week | 16:02 |
david-lyle | anyway, just a heads up on that | 16:03 |
*** vkmc has joined #openstack-meeting-3 | 16:03 | |
david-lyle | Second general item, I attended the TC meeting last week and we discussed the integration gap analysis for Horizon | 16:03 |
david-lyle | https://etherpad.openstack.org/p/horizon-gap-analysis | 16:04 |
david-lyle | This is a process to make sure that Horizon meets the current criteria for exiting incubation to become part of openstack, so that new projects are not being asked to achieve something above and beyond what integrated projects have done | 16:05 |
david-lyle | We have just a few issues to address | 16:05 |
david-lyle | the first and most glaring is a mission statement | 16:05 |
david-lyle | We do UI wasn't enough | 16:05 |
doug-fish | lol | 16:06 |
jcoufal | lol | 16:06 |
jcoufal | nice :) | 16:06 |
david-lyle | So I'm putting together a plan to address the rest of the short-comings and will present that to the TC today | 16:06 |
jrist | "A unified user interface that exposes most of the OpenStack infrastructure to users and operators"? | 16:06 |
lsmola | david-lyle: I would say it was enough :-D | 16:07 |
jcoufal | jrist: where is that? | 16:07 |
jrist | jcoufal: I just made it up | 16:07 |
jrist | should I add a TM ? | 16:07 |
jrist | :) | 16:07 |
lsmola | jrist: you forgot graphical | 16:07 |
jrist | lsmola: or I purposefully omitted it! | 16:08 |
lsmola | jrist: user interface can be also like command line, bananas, etc. | 16:08 |
jcoufal | jrist: why OpenStack infrastructure? | 16:08 |
tzumainn | "bananas"? | 16:08 |
lsmola | tzumainn: you know, for monkeys.. | 16:08 |
jrist | jcoufal: what is another way to put it | 16:08 |
david-lyle | To provide an extensible unified web based user interface for all integrated OpenStack services. | 16:08 |
jrist | david-lyle++ | 16:08 |
ericpeterson | yep, remove infrastructure | 16:08 |
david-lyle | was my attempt | 16:08 |
jcoufal | david-lyle: +1 | 16:08 |
doug-fish | yeah that's us +1 | 16:09 |
jtomasek | +1 | 16:09 |
lsmola | david-lyle: sounds good | 16:09 |
david-lyle | extensibility is a core value of Horizon and should be in there | 16:09 |
jpich | +1 to to a mission statement that includes supporting integrated projects and extensibility as goals | 16:09 |
santib | david-lyle: +1 | 16:09 |
david-lyle | jpich: should there be more? | 16:09 |
tqtran | im thinking something along of the line of managing stuff.... | 16:10 |
david-lyle | I think quality and usability should be implied from the core values | 16:10 |
jrist | +1 | 16:10 |
jrist | agreed to that | 16:10 |
*** jamie_h has quit IRC | 16:10 | |
david-lyle | not explicitly stated | 16:10 |
ericpeterson | could add the tagline : now with 20% more quality ? | 16:10 |
jcoufal | david-lyle: that sounds reasonable | 16:10 |
*** crobertsrh has joined #openstack-meeting-3 | 16:10 | |
david-lyle | 20% seems high | 16:10 |
david-lyle | maybe 12.5% | 16:11 |
jpich | david-lyle: Your proposal sounds good to me | 16:11 |
jrist | Now with approximately 12% more quality! | 16:11 |
doug-fish | now with nearly 20% more quality | 16:11 |
*** sew has quit IRC | 16:11 | |
ericpeterson | floating point - 11.9999999999% | 16:11 |
jpich | Is it a pain to tweak / update the mission statement if we find the Perfect Way To Phrase It later? | 16:11 |
tqtran | lol !!! +1 doug | 16:11 |
david-lyle | jpich: I don't believe so, it just lives in https://github.com/openstack/governance/blob/master/reference/programs.yaml | 16:12 |
jrist | oh man | 16:12 |
lsmola | lol | 16:12 |
david-lyle | so a patch and vote by TC is all it takes | 16:12 |
*** danpb has left #openstack-meeting-3 | 16:13 | |
* doug-fish is way off track testing out mission statement generators. | 16:13 | |
* david-lyle fearful of results | 16:13 | |
jpich | david-lyle: Ok thank you | 16:13 |
doug-fish | "To enthusiastically supply viral methods to allow us to continue to competently integrate graphical interface materials while maintaining the highest standards." (slightly edited) | 16:13 |
david-lyle | other items were around integration testing and the upcoming repo split | 16:14 |
*** nati_ueno has joined #openstack-meeting-3 | 16:14 | |
david-lyle | no real red flags just questions about timelines and goals | 16:14 |
doug-fish | david-lyle - is integration testing a new topic, or part of the TC needs? | 16:14 |
david-lyle | for projects integrating it is a graduation requirement to have tempest integration | 16:15 |
david-lyle | we have 1 test | 16:15 |
david-lyle | not a banner effort | 16:15 |
ericpeterson | I found an issue to consider around repo split... the APIBaseResource type classes..... might want to consider moving those into a horizon location ????? | 16:15 |
lsmola | doug-fish: I miss like web>2.0, drag & drop and look & feel in that statement :-) | 16:15 |
*** jgravel has joined #openstack-meeting-3 | 16:15 | |
doug-fish | :-) Drag & Drop present accessibility challenges. I left it out on purpose! | 16:16 |
jcoufal | lsmola: and nicely colored unicorns :) | 16:17 |
lsmola | oh yeah and those | 16:17 |
doug-fish | david-lyle - I talked with ... the PTL for Tempest (name?) ... about UI integration testing at the summit. It seems that it is explicitly kept very light in tempest because its hard to coordinate intentional changes to the UI with changes to the tests. I know the test architecture jpich has started on helps with that | 16:17 |
*** amotoki has joined #openstack-meeting-3 | 16:17 | |
jpich | Yup, the page object pattern with separate pages and tests should take care of that. dkorn should get the credit :) | 16:18 |
doug-fish | well thought out dkorn! | 16:18 |
jpich | More exciting reading on the page object pattern: https://wiki.openstack.org/wiki/Horizon/Testing/UI#Page_Object_Pattern_.28Selected_Approach.29 | 16:18 |
david-lyle | I didn't have any more general items | 16:19 |
david-lyle | #topic Open Discussion | 16:19 |
*** openstack changes topic to "Open Discussion (Meeting topic: Horizon)" | 16:19 | |
doug-fish | I'm on integrations tests still - is it required that we keep our integration tests in tempest? | 16:20 |
david-lyle | doug-fish: no | 16:20 |
nlahouti_ | how can we find a horizon BP is approved for juno-1? | 16:20 |
david-lyle | nlahouti_: link? | 16:21 |
jpich | doug-fish: It'd be a nice end goal but we're starting them in our own repo till we figure it all out and see if it makes sense to merge them back into Tempest | 16:21 |
nlahouti_ | david-lyle: link to BP? | 16:21 |
david-lyle | yes, please | 16:21 |
doug-fish | I'd suggest keeping the tests in our project if we can then. its not hard to image we'll have refactors that change the page a particular function should be performed on | 16:21 |
nlahouti_ | david-lyle: https://blueprints.launchpad.net/horizon/+spec/horizon-cisco-dfa-support | 16:21 |
clu_ | is there a way to test if the layout "looks" right - like if there is text overflowing out of a div, or something... | 16:22 |
ericpeterson | tqtran and I have some ajax table stuff to share: https://blueprints.launchpad.net/horizon/+spec/table-client-rendering too | 16:22 |
doug-fish | clu_: do you mean as part of the integration test? | 16:23 |
clu_ | yes | 16:23 |
doug-fish | no | 16:23 |
doug-fish | I don't know of a framework that does that sort of testing in an automated basis -- do you know of one? | 16:23 |
tqtran | clu_: i think it will be hard to test those kind of stuff, human eye? | 16:24 |
jpich | doug-fish: Most projects have their tests in Tempest, it'd give us the advantage that they'd be automatically part of every project's gate so breaking changes would be caught before they get to us. Though once we have a stable integration gate we could also see if it can be run for the other projects but that'll be later either way | 16:24 |
clu_ | doug-fish, tqtran: don't know any framework like that... only the "human eye" test | 16:24 |
doug-fish | jpich - right. I understand we need the UI driven integration tests to gate the other projects one day. I just doing think UI tests seem very much like the other tempest stuff - which is very stable/API driven. | 16:25 |
doug-fish | s/I just doing think UI tests seem/I just doing think UI tests doesn't seem | 16:25 |
doug-fish | wow | 16:25 |
doug-fish | can't type today anymore can I | 16:26 |
tqtran | lol | 16:26 |
doug-fish | UI != API | 16:26 |
jpich | doug-fish: I suspect these tests are not as stable as one might expect :-) but yeah I get your point, we can rediscuss later either way, it's very much "future" discussion | 16:26 |
doug-fish | jpich - agreed this is a future discussion. I'd rather get some written first then decide what to do with them | 16:27 |
jcoufal | One quick announcement: Next week on Monday (June 2) there is going to be the first UX meeting at 1700 UTC (#openstack-meeting-3). Everybody is welcome and if you plan to join, please, fill yourself into this etheprad: https://etherpad.openstack.org/p/ux-meetings so we can arrange meeting times for the most convenient time slot for everyone. | 16:27 |
jpich | doug-fish: Yup! | 16:27 |
david-lyle | nlahouti_: so re: your bp, I'm trying to get a better handle on how we can effectively support 3rd party extensions, the current model of a flag per setting/device is not scalable | 16:28 |
jpich | Woohoo UX meetings \o/ I can't make the first one but hope to attend in the future, thanks for setting these up jcoufal | 16:28 |
*** jackib has joined #openstack-meeting-3 | 16:28 | |
amotoki | jpich: doug-fish: in the neutron summit session there is a siimlar discussion about having functional tests in its own repo for better testing coverage. | 16:28 |
amotoki | imo cross-project testing requiring API calls to backend projects (nvoa, cinder, ..) is better to be in tempest. | 16:29 |
clu_ | jcoufal: nice! | 16:29 |
david-lyle | the benefit of Horizon tests is exercising the python-*clients so they don't break us and heat as they change | 16:29 |
nlahouti_ | david-lyle: I replied to comments in the review. For instance for avoiding the flag... There is existing api (list_extensions()) that can be used instead of flag | 16:30 |
david-lyle | nlahouti_: that's new in Juno? | 16:30 |
nlahouti_ | david-lyle: The API exists in api/neutron.py | 16:30 |
david-lyle | does neutronclient support it? | 16:31 |
nlahouti_ | david-lyle: yes. | 16:31 |
nlahouti_ | david-lyle: Basically it returns all the supported exstension. | 16:31 |
david-lyle | nlahouti_: that is a much better way to approach the problem. We should be triggering off that | 16:31 |
jpich | amotoki: I agree, and I think people get annoyed when Horizon requires yet again Special Snowflake treatment, but either way we can revisit the conversation when we have a stable and stronger suite of integration tests actually implemented | 16:31 |
nlahouti_ | david-lyle: I think security group using it If I'm not mistaken. | 16:31 |
*** jcoufal has quit IRC | 16:32 | |
nlahouti_ | david-lyle: But again, using the list_extension API we still need to have if...else in the code in workflow, forms... to display a vendor specific options in the GUI | 16:32 |
amotoki | jpich: agree. (i am catching up with the meeting log now) | 16:33 |
david-lyle | nlahouti_: let's use that in your patch rather than the settings flag, and I think we'll have a workable solution | 16:33 |
jpich | amotoki: No worries! Your input from a consistency-across-projects perspective is definitely appreciated :) | 16:33 |
*** lsmola2 has joined #openstack-meeting-3 | 16:33 | |
david-lyle | ericpeterson: you had a table on the table? | 16:34 |
nlahouti_ | david-lyle: Ok, I'll update the patch based on this solution and post it for review. | 16:34 |
*** bauzas has left #openstack-meeting-3 | 16:34 | |
ericpeterson | yep... tqtran and I have a method to add json versions of data tables | 16:34 |
ericpeterson | https://review.openstack.org/#/c/94706/6/openstack_dashboard/dashboards/project/instances/views.py see line 50 for how to plug this into a view | 16:34 |
amotoki | david-lyle: nlahouti_: related to cisco DFA bp, the correponsing neturon feature is proposed for juno too and not implemented yet. | 16:34 |
amotoki | david-lyle: nlahouti_: is it better to wait horizon patch unitl neutron feature is implemented? | 16:35 |
david-lyle | amotoki: that would change things :) | 16:35 |
nlahouti_ | amotoki: what feature? | 16:35 |
*** mwagner_lap has joined #openstack-meeting-3 | 16:35 | |
amotoki | nlahouti_: i think DFA feature is not implemeted yet. am i wrong? | 16:36 |
amotoki | nlahouti_: *in neutron | 16:36 |
ericpeterson | and that table mixin.... adds the ability to get a json-ified table via https://review.openstack.org/#/c/94706/6/horizon/tables/views.py . this stuff is WIP very clearly.... but am wondering the interest level of the more web 2.0 version of table rendering | 16:36 |
*** terryw is now known as otherwiseguy | 16:36 | |
david-lyle | OSAPIJSONEncoder not the best camel case name :) | 16:36 |
nlahouti_ | amotoki: Yes. It is not implemented. But what I'm referring to is the list_extensions() in neutron API which exist today. | 16:36 |
ericpeterson | yeah, tqtran and I really like capital letters | 16:37 |
david-lyle | nlahouti_: the concern is turning on support for a feature in Horizon, cfa that is not yet supported in neutron | 16:37 |
david-lyle | for many reasons, it may change, it may not make it, it may make it in K | 16:38 |
amotoki | nlahouti_: ok... what i have in my mind is a feature depedency between hroizon and backend project. horizon team needs to consider merge timing even if the bp is approved. | 16:38 |
david-lyle | that leaves broken/dead code in Horizon | 16:38 |
nlahouti_ | david-lyle: It won't cause any issue as the extensions does not return the dfa. | 16:38 |
david-lyle | which we're not excited to bring in | 16:38 |
jpich | I agree with amotoki and david-lyle, in general it's better to wait for the Neutron (or whatever project's) code to be merged before the Neutron feature is implemented. At least make sure to mark the Horizon code as Work In Progress | 16:38 |
david-lyle | nlahouti_: but it's code you can't exercise | 16:38 |
doug-fish | nlahouti_ dead code creates issues | 16:38 |
nlahouti_ | david-lyle: so code is not gtting exercise. | 16:39 |
david-lyle | and thus not necessary until neutron integrates | 16:39 |
nlahouti_ | david-lyle: only the if ... statement is executed. | 16:39 |
jpich | nlahouti_: and the Neutron implementation may change before it gets merged making the horizon part broken | 16:39 |
doug-fish | dead code creates extra work for translators, unnecessary work for reviews, and confusion among new developers | 16:39 |
david-lyle | nlahouti_: we will not merge before neutron does | 16:39 |
*** kenhui has joined #openstack-meeting-3 | 16:39 | |
david-lyle | end of story | 16:39 |
*** jtomasek has quit IRC | 16:39 | |
*** lsmola3 has joined #openstack-meeting-3 | 16:40 | |
jpich | lsmola is multiplying... | 16:40 |
nlahouti_ | david-lyle: so first the feature has to be implemented in neutron? | 16:40 |
david-lyle | yes | 16:40 |
amotoki | nlahouti_: of course it is no problem that horizon patch is upload for review even before merging neutron feature (in parallel). we are just talking about the merge timing. no worries. | 16:41 |
david-lyle | yes the patch can progress, just not merge | 16:41 |
amotoki | but we need to have a clear criteria to merge features into hoirzon repo. | 16:41 |
lsmola3 | jpich, hehe | 16:41 |
doug-fish | like a working integration test! | 16:41 |
david-lyle | ericpeterson, how are actions handled with the client side rendering? | 16:42 |
*** lsmola2 has quit IRC | 16:42 | |
*** nacim_ has quit IRC | 16:42 | |
david-lyle | do action classes in the table view need to be rewritten, or used as is? | 16:42 |
nlahouti_ | david-lyle: david-lyle, amotoki: yes it is merge timing. In my case the feautre in neutron is related to changes in horizon and they are related together. | 16:42 |
*** safchain has quit IRC | 16:42 | |
david-lyle | nlahouti_: neutron does not depend on Horizon | 16:42 |
ericpeterson | I am working on the actions right now..... those should get encoded to json as well..... so you will have something like actions : [ {type: link, href: 'http://..."} ] | 16:43 |
ericpeterson | so actions will be in the json.... and those will be at both the table level and the row level..... just like what we have right now | 16:43 |
david-lyle | and where does allowed come into play, whether it gets added to the JSON to ship to the client | 16:43 |
david-lyle | ? | 16:43 |
ericpeterson | those get eval'd on the server | 16:43 |
ericpeterson | table.get_row_actions(datum) | 16:44 |
nlahouti_ | david-lyle: I understand. I wasn't clear. I was refering the whole solution. | 16:44 |
ericpeterson | I think that should do that for me | 16:44 |
nlahouti_ | david-lyle: anyhow, I'll update the patch to get comment on the implementaion. not to use flag ... | 16:45 |
*** lsmola3 has quit IRC | 16:45 | |
ericpeterson | the approach with the json stuff is the continue using the horzion table classes / constructs..... and have a quick switch to add, to add the json version of your table | 16:45 |
david-lyle | nlahouti_: I understand, let's keep iterating on the patch in Horizon get it ready to merge, once the feature support goes into neutron the horizon patch can quickly follow | 16:45 |
*** lsmola2 has joined #openstack-meeting-3 | 16:45 | |
ericpeterson | and stuff should continue to work in the same way | 16:46 |
nlahouti_ | david-lyle: Sure. | 16:46 |
nlahouti_ | david-lyle: will do that. | 16:46 |
*** sjcazzol has joined #openstack-meeting-3 | 16:46 | |
tqtran | yep, its basically an alternative way to render your table data. | 16:46 |
*** beyounn_1 has joined #openstack-meeting-3 | 16:46 | |
david-lyle | ericpeterson, I need to take a closer look, but I think the idea seems sound | 16:47 |
*** vinay_yadhav has joined #openstack-meeting-3 | 16:47 | |
tqtran | it will work alongside the current implementation nicely | 16:47 |
ericpeterson | there is some cross repo dependency stuff like we have a horizon/tables/ import of openstack_dashboard/api stuff..... that is wonky.... which is why I brought that up with repo split | 16:48 |
david-lyle | that is very wonky | 16:48 |
lsmola2 | :-0 | 16:49 |
ericpeterson | that json encoder thing needs to know if it is dealing with an APIBaseResource type class, that's why | 16:49 |
david-lyle | the APIBaseResources are particular to the implementation (openstack_dashboard) and don't belong in the toolkit side | 16:49 |
ericpeterson | yeah.... I could move that jsonecoder code out to the openstack_dashboard section then..... and have a base implementation to override | 16:50 |
david-lyle | Unfortunately, I have to end 10 minutes early today due to a conflict, please carry on in #openstack-horizon See everyone next week! | 16:51 |
david-lyle | #endmeeting | 16:51 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 16:51 | |
openstack | Meeting ended Tue May 27 16:51:24 2014 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:51 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/horizon/2014/horizon.2014-05-27-15.59.html | 16:51 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/horizon/2014/horizon.2014-05-27-15.59.txt | 16:51 |
openstack | Log: http://eavesdrop.openstack.org/meetings/horizon/2014/horizon.2014-05-27-15.59.log.html | 16:51 |
*** ericpeterson has left #openstack-meeting-3 | 16:51 | |
tzumainn | thanks all! | 16:51 |
jpich | Yay to short meetings, thanks everyone! | 16:51 |
jrist | o/ | 16:51 |
jpich | *shorter | 16:51 |
*** johnma has left #openstack-meeting-3 | 16:51 | |
*** david-lyle has quit IRC | 16:51 | |
*** gary-smith has left #openstack-meeting-3 | 16:51 | |
*** tzumainn has left #openstack-meeting-3 | 16:52 | |
lsmola2 | thanks, goodbye | 16:52 |
*** david-lyle has joined #openstack-meeting-3 | 16:52 | |
*** david-lyle has quit IRC | 16:52 | |
lblanchard | thanks all! | 16:53 |
santib | thanks | 16:53 |
*** santib has left #openstack-meeting-3 | 16:53 | |
*** nati_ueno has quit IRC | 16:53 | |
akrivoka | bye | 16:54 |
*** jgravel has left #openstack-meeting-3 | 16:54 | |
*** lsmola2 has quit IRC | 16:54 | |
*** SumitNaiksatam has quit IRC | 16:54 | |
*** akrivoka has quit IRC | 16:54 | |
*** jpich has left #openstack-meeting-3 | 16:54 | |
*** doug-fish has left #openstack-meeting-3 | 16:55 | |
*** yamahata has quit IRC | 16:55 | |
*** jackib has quit IRC | 16:55 | |
*** nati_ueno has joined #openstack-meeting-3 | 16:56 | |
*** rajdeep has joined #openstack-meeting-3 | 16:58 | |
*** thinrichs has joined #openstack-meeting-3 | 16:59 | |
thinrichs | Hi all. Anyone here for Congress? | 17:01 |
*** tqtran has left #openstack-meeting-3 | 17:01 | |
thinrichs | Also making sure I have the right room, unlike last week. | 17:01 |
rajdeep | hi | 17:01 |
*** iben has joined #openstack-meeting-3 | 17:01 | |
thinrichs | Hi rajdeep | 17:01 |
banix | hi | 17:01 |
thinrichs | Hi banix—good to “see” you here. | 17:01 |
rajdeep | i guess this is the one | 17:01 |
*** skn_ has joined #openstack-meeting-3 | 17:02 | |
*** pballand has joined #openstack-meeting-3 | 17:02 | |
banix | thinrichs: thanks. I will be a bit slow catching up :) | 17:02 |
sjcazzol | hi | 17:02 |
thinrichs | banix: no worries—we’ll do what we can to help. | 17:02 |
pballand | sorry I’m late | 17:02 |
thinrichs | sjcazzol: hi—glad you could make it. | 17:02 |
skn_ | thinrichs: were you able to see my name/id? | 17:03 |
iben | this is the congress meeting, right? | 17:03 |
thinrichs | iben: yes—this is congress. | 17:03 |
thinrichs | skn_: not yet. | 17:03 |
*** mspreitz has joined #openstack-meeting-3 | 17:03 | |
thinrichs | Let’s get this started officially. | 17:03 |
thinrichs | #startmeeting CongressTeamMeeting | 17:03 |
openstack | Meeting started Tue May 27 17:03:25 2014 UTC and is due to finish in 60 minutes. The chair is thinrichs. Information about MeetBot at http://wiki.debian.org/MeetBot. | 17:03 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 17:03 |
*** openstack changes topic to " (Meeting topic: CongressTeamMeeting)" | 17:03 | |
openstack | The meeting name has been set to 'congressteammeeting' | 17:03 |
skn_ | Its weird. I used launchpad to create the id | 17:03 |
*** vinay_yadhav has quit IRC | 17:04 | |
thinrichs | skn_: I don’t know how to get your name to show up on review.openstack as a potential reviewer. | 17:04 |
thinrichs | If anyone knows a quick-fix, let us know. Otherwise we’ll do that offline. | 17:04 |
skn_ | Yup. Let me know too. | 17:04 |
thinrichs | Let’s do our usual thing of going over action items from last week, briefly. | 17:05 |
thinrichs | sarob: are you here? | 17:05 |
iben | he's not signed on now | 17:05 |
thinrichs | Hmm.. doesn’t look like it. Let’s hope he joins later. | 17:05 |
thinrichs | We had a couple of new use cases that were supposed to go up on the wiki. | 17:05 |
thinrichs | skn_: how’d you do with yours? | 17:06 |
skn_ | I have some write up, but I’ll have to first figure out out where to put | 17:06 |
banix | is there a link? | 17:06 |
skn_ | where to put it, i mean | 17:06 |
thinrichs | https://wiki.openstack.org/wiki/Congress#Use_Cases | 17:07 |
skn_ | Oh ok | 17:07 |
thinrichs | We have a list with brief descriptions at the URL. | 17:07 |
banix | thinrichs: thanks | 17:07 |
skn_ | But these are like one liners | 17:07 |
thinrichs | banix (and all other newcomers): the wiki *should* have links to all the resources. So that’s the one-stop shop. | 17:07 |
skn_ | I thought we’d have a lil more descriptive | 17:07 |
thinrichs | skn_: We don’t yet have a doc with longer descriptions. Want to start one? | 17:08 |
skn_ | HI banix, what’s your name? | 17:08 |
skn_ | I think so, we should have a doc | 17:08 |
banix | Mohammad Banikazemi | 17:08 |
banix | skn_: Hi ^^^ | 17:08 |
*** sarob has joined #openstack-meeting-3 | 17:09 | |
thinrichs | skn: sounds good. Can we use your writeup to seed that doc? | 17:09 |
thinrichs | pballand: where should we host the doc? | 17:09 |
skn_ | Yes, I will | 17:09 |
pballand | thinrichs: doc for use cases? | 17:09 |
skn_ | Hi Mohammad. Are you from IBM, who presented the neutron group policy? | 17:09 |
thinrichs | pballand: yes | 17:09 |
banix | we use google docs | 17:10 |
banix | skn_: Yes that’s me :) | 17:10 |
pballand | I’d go with google docs, or in the repo | 17:10 |
*** sarob_ has joined #openstack-meeting-3 | 17:10 | |
sarob_ | Halo | 17:10 |
skn_ | Oh, cool. This is Susanta from Symantec. We chatted a lil bit after your talk at OpenStack, remember? | 17:10 |
skn_ | Hey sarob | 17:10 |
pballand | if we don’t expct many comments, checking them in near the specs sounds good to me | 17:10 |
sarob_ | Yup | 17:11 |
thinrichs | sarob: glad you could make it. | 17:11 |
banix | skn_: Ahhh yes. great to see you here :) | 17:11 |
skn_ | Good to see all you guys made it today | 17:11 |
thinrichs | sarob: we were just discussing the use case writeups we talked about last week. | 17:11 |
sarob_ | Board stuff bleeding over | 17:11 |
thinrichs | sarob: We’re going to either put them in the repo or on a google doc. Sound good? | 17:11 |
sarob_ | Got it | 17:12 |
*** crobertsrh has left #openstack-meeting-3 | 17:12 | |
sarob_ | Yup | 17:12 |
skn_ | So we create a google doc for the use cases and put it where? | 17:12 |
*** igordcard has joined #openstack-meeting-3 | 17:12 | |
pballand | does anyone have any preference? | 17:12 |
thinrichs | A google doc might make it easier for non-coders to add use cases. | 17:12 |
thinrichs | I’m leaning toward a google doc. | 17:13 |
skn_ | May be we can just link it from those one liners in Congress wiki | 17:13 |
thinrichs | skn: yep. | 17:13 |
*** sarob has quit IRC | 17:13 | |
pballand | https://docs.google.com/document/d/1ExDmT06vDZjzOPePYBqojMRfXodvsk0R8nRkX-zrkSw/edit?usp=sharing | 17:13 |
sarob_ | Gdoc will be easier for the non git gerrit people | 17:13 |
rajdeep | google docs is easier unless the doc becomes large | 17:13 |
rajdeep | or we need to maintain history | 17:13 |
pballand | I’ll link from the wiki | 17:14 |
thinrichs | pballand: no need for even an action item for that, it seems. Nice. :) | 17:14 |
skn_ | Thanks pballand | 17:14 |
thinrichs | skn_: when you copy your description in there, let us all know so we can take a look. | 17:15 |
thinrichs | sarob: any progress on your use case? | 17:15 |
skn_ | We should have at least one paragraph for each of the use cases | 17:15 |
skn_ | sarob: I have something written, I’ll try to clean it up and put it in the doc today or tomorrow when I get time | 17:15 |
sarob_ | No sorry. I was slammed last week | 17:16 |
sarob_ | I have some time today | 17:16 |
*** nlahouti_ has quit IRC | 17:16 | |
thinrichs | sarob: no worries. Let us know if we can help. | 17:16 |
sarob_ | I'll post to the gdoc for collaboration and such | 17:17 |
thinrichs | sarob: sounds good. | 17:17 |
thinrichs | Especially for you newcomers, if you have use cases you’re interested in, put them in the doc and drop us a note so we can take a look. | 17:17 |
skn_ | pballand: is the gdoc open to edit for everyone? | 17:17 |
pballand | it should be editable by anyone with the link | 17:18 |
thinrichs | I just edited it. | 17:18 |
sjcazzol | good, we are developing some new scenarios that could be addressed | 17:18 |
pballand | I can lock it down to emails I have | 17:18 |
thinrichs | sjcazzol: great! Love to see them. | 17:18 |
thinrichs | pballand: let’s leave it open to the world. | 17:18 |
iben | How many use cases are we shooting for to start with? | 17:19 |
iben | will they be prioritized based on effort? | 17:19 |
banix | yeah open to the world will be better | 17:19 |
thinrichs | iben: I think we want to know what people are interested in and then yes, prioritized. | 17:19 |
iben | would security be one <— as an example? | 17:20 |
thinrichs | iben: meant to say we’ll prioritize them | 17:20 |
thinrichs | iben: I think we’d want something more specific than “security”. | 17:20 |
skn_ | iben: Yes, I am working on a security use case | 17:20 |
skn_ | IDS use case | 17:20 |
thinrichs | What data sources are needed? What’s the concrete policy? ETc. | 17:20 |
iben | sure - of course - but as a general category - okay - gotcha! | 17:20 |
pballand | iben: we would like to highlight cross-component uses | 17:21 |
skn_ | I think we’ll need some discussion on the policy caching etc, after we make some progress with the use cases | 17:22 |
thinrichs | There’s for sure lots to discuss. | 17:23 |
sarob_ | Acls being applied as set will be critical | 17:23 |
thinrichs | We are hoping to get an alpha release out in the next couple of weeks. People are starting to ask for it. | 17:23 |
*** amotoki has quit IRC | 17:23 | |
skn_ | Cant folks just download from the stackforge? | 17:24 |
thinrichs | sarob: good to know. Let’s get it up on that google doc so we can start prioritizing dev effort. | 17:24 |
thinrichs | skn: They can get the code, but they won’t be able to do much with it right now. | 17:24 |
thinrichs | The policy engine and data sources don’t talk to each other. | 17:24 |
thinrichs | I’m working on that currently. I’m hoping to have significant time this week to devote. | 17:25 |
*** mspreitz has quit IRC | 17:25 | |
thinrichs | But I’ve also got jury duty. Fun. | 17:25 |
skn_ | thinrichs: Oh, ok, got it. Do we have a readme there? | 17:25 |
thinrichs | The file is there, but I doubt it says anything interesting since the code isn’t yet functional. | 17:25 |
skn_ | I see | 17:26 |
thinrichs | I forgot to record action items for sarob and skn_. | 17:26 |
thinrichs | #action sarob, skn_ will put their use cases on the use case google doc linked from the wiki | 17:26 |
sjcazzol | thinrichs: which are the main features that are missing for the alpha? | 17:26 |
thinrichs | #action thinrichs will continue working on policy/datasource integration | 17:27 |
skn_ | Is it already linked from wiki? | 17:27 |
pballand | skn_: yes | 17:27 |
thinrichs | sjcazzol: mainly the integration I mentioned and the API implementation | 17:27 |
*** rajdeep_ has joined #openstack-meeting-3 | 17:27 | |
thinrichs | pballand is working on the API | 17:27 |
thinrichs | I’m hoping to have something in review by end of week. | 17:27 |
sjcazzol | thinrichs: ok, nice | 17:27 |
skn_ | pballand: where is the link in the wiki? | 17:27 |
*** emagana has quit IRC | 17:27 | |
thinrichs | pballand: an eta on the API? | 17:28 |
*** rajdeep has quit IRC | 17:28 | |
thinrichs | skn: refresh your web page and you’ll see it at the top. | 17:28 |
pballand | skn_: search for “use cases" | 17:28 |
skn_ | pballand: https://wiki.openstack.org/wiki/Congress#Use_Cases is where I am looking at, but I dont see the link | 17:29 |
pballand | thinrichs: I keep hoping for some serious time to devote - at the risk of sounding like a broken record, I think this week is reasonable | 17:29 |
thinrichs | kudva, who I don’t see here today, is also working on adding builtins to the policy language. | 17:29 |
thinrichs | Builtins are things like addition, subtraction, string manipulation. | 17:30 |
*** emagana has joined #openstack-meeting-3 | 17:30 | |
thinrichs | Builtins aren’t strictly necessary for the alpha, but it would be nice to have them. | 17:30 |
thinrichs | rajdeep: are you still here? I saw you signed off. | 17:31 |
rajdeep_ | yes | 17:31 |
pballand | skn_: I had linked at the top, but added a link to that section as well | 17:31 |
rajdeep_ | i am there | 17:31 |
*** nati_ueno has quit IRC | 17:31 | |
thinrichs | I saw your unit tests for Nova were merged. | 17:31 |
skn_ | pballand: Thanks! Now I see it :) | 17:32 |
rajdeep_ | thanks - those were first set of test cases | 17:32 |
thinrichs | Newcomers: rajdeep has been working on writing thing wrappers around Nova/Neutron so that we can write policy over the data they expose. | 17:32 |
rajdeep_ | which test conversion of dictionary into tuples | 17:32 |
banix | rajdeep_: nice | 17:33 |
*** kudva has joined #openstack-meeting-3 | 17:33 | |
kudva | Hi Kudva joining, sorry for the delay | 17:33 |
rajdeep_ | it will be great to take a look at the drivers for neutron and nova and provide feedback on amount of data coming in | 17:33 |
sjcazzol | rajdeep_: great | 17:33 |
thinrichs | kudva: glad you could join us. | 17:34 |
sjcazzol | rajdeep_: are you targeting other components too? | 17:34 |
rajdeep_ | yes once i have the unit tests completed | 17:34 |
rajdeep_ | nova and neutron were critical which are done | 17:34 |
rajdeep_ | next is cinder and keystone | 17:34 |
thinrichs | sjcazzol: any components you’re specifically interested in? | 17:35 |
rajdeep_ | - we should prioritize | 17:35 |
thinrichs | We were focused on integrating those necessary for one of our use cases. | 17:35 |
sjcazzol | thinrichs: for now just nova | 17:35 |
skn_ | thinrichs, rajdeep: is the wrapper for enforcement of the policies? | 17:35 |
sjcazzol | thinrichs: but we are waiting for new scenarios | 17:35 |
skn_ | or both? | 17:35 |
rajdeep_ | enforcement is the next step .. | 17:36 |
thinrichs | sjcazzol, rajdeep: Maybe you and rajdeep should connect offline to check that we have enough Nova support to handle what you need. I don’t believe we have full Nova integration. | 17:36 |
sjcazzol | thinrichs: perfect | 17:36 |
rajdeep_ | sjcazzol you can send me email at rajdeepd at vmware.com | 17:37 |
thinrichs | skn: I didn’t understand your question | 17:37 |
sjcazzol | rajdeep_: ok, I'll do | 17:37 |
skn_ | thinrics: the nova/neutron wrapper is meant to enforce the policy? | 17:37 |
iben | i would expect a policy wrapper to be like able to log or enforce | 17:38 |
iben | there should be a learning mode option | 17:38 |
iben | and an enforcement option | 17:38 |
thinrichs | The datasource wrapper just makes Nova/Neutron data look like it’s represented as tables. | 17:38 |
thinrichs | Eventually the datasource wrapper will also execute API calls on Nova/Neutron. | 17:38 |
thinrichs | But the policy engine is responsible for monitoring policy and choosing which API calls to execute (i.e. how to enforce policy). | 17:39 |
*** alexpilotti has quit IRC | 17:39 | |
banix | sorry if this question is not relevant; iignore if that is the case: Is a policy like “all passwords in servers of this group need to be at leat this long” something being considered? | 17:39 |
skn_ | thinrichs: that’s what i wanted to know. So, currently its only about modifying the data so that can be ingested by Congress data source | 17:39 |
thinrichs | skn: yes. | 17:39 |
skn_ | Got it, thanks. | 17:39 |
thinrichs | banix: that’s possible to express/enforce IF there are datasources that allow Congress to do it. | 17:40 |
thinrichs | Say we have an ActiveDirectory integration that exposes the min-length for passwords. | 17:40 |
thinrichs | Then we could write policy in Congress saying what the min-length must be. | 17:40 |
banix | thinrichs: sure. makes sense. | 17:41 |
*** alexpilotti has joined #openstack-meeting-3 | 17:41 | |
thinrichs | iben: what did you mean by “learning mode" | 17:41 |
thinrichs | ? | 17:41 |
*** eghobo has quit IRC | 17:41 | |
skn_ | thinrichs: So this wrapper will eventually be responsible for making API calls into Nova/Neutron? | 17:41 |
iben | never mind - you guys answered it | 17:42 |
*** eghobo has joined #openstack-meeting-3 | 17:42 | |
thinrichs | Great. | 17:42 |
iben | the existing functions will need to be wrapped | 17:42 |
iben | this wrapped data goes into a policy engine | 17:42 |
*** nati_ueno has joined #openstack-meeting-3 | 17:42 | |
iben | where rules can be run | 17:42 |
iben | these rules can do various things | 17:42 |
thinrichs | iben: sounds like we’re on the same page. | 17:42 |
iben | learning or analytics is one of the actions | 17:43 |
pballand | Congress needs to both get data from the components in a standard form (tables) _and_ can work with the components to enforce policy. We are focused on the first part (which enables monitoring/logging) initially | 17:43 |
iben | but of course policy enforcement would be possible too | 17:43 |
skn_ | iben: by learning you mean monitoring? | 17:43 |
thinrichs | We’re planning to look into pushing policy down to other policy-aware components (like Neutron’s GBP) so that enforcement is done more proactively. | 17:44 |
sjcazzol | pballand: do you plan to add policies enforcement for the beta? | 17:44 |
iben | i'm just thinking of a simple firewall use case - it's important not to disrupt existing traffic patterns so many vendors offer a learning mode or discover period where the sample initial rule sets get created | 17:45 |
iben | then you can decide to enable these auto generated rules (or policies) | 17:45 |
pballand | sjcazzol: I don’t know when we will tag ‘beta’, but I do envision some enforcement support comming shortly after monitoring is working | 17:46 |
skn_ | iben: got it | 17:46 |
iben | the rules can be enabled in blocking (enforcing) mode or in logging only - watching | 17:46 |
thinrichs | iben: we’re definitely not aiming to auto-generate policy. | 17:46 |
sjcazzol | pballand: ok, thanks | 17:46 |
thinrichs | logging-only makes sense for sure. | 17:46 |
iben | this allows us to experiment and see the results of any policy changes without impacting production traffic. | 17:46 |
banix | iben: well i gues that could happen in parallel with what congress does | 17:46 |
banix | what thinrichs said | 17:47 |
thinrichs | But no auto-gen b/c unlike a firewall Congress doesn’t know much about the services it is monitoring. | 17:47 |
iben | coolio! this is really great. | 17:47 |
pballand | iben: your example makes sense, but in some cases monitoring (logging) will be the final desired action (not a compromise) | 17:47 |
thinrichs | We’re sensitive to customers not trusting basically anything for a while, and trying to slowly earn their trust over time. | 17:48 |
thinrichs | Before we run out of time, let’s get to an update from kudva too. | 17:48 |
thinrichs | kudva: how are the builtins progressing? | 17:48 |
rajdeep_ | you could write a driver for firewall - which could convert congress actions into firewall configuration | 17:48 |
kudva | I tried to push into gerrit. | 17:48 |
thinrichs | Did it work? | 17:49 |
thinrichs | I didn’t see a request for review for me. | 17:49 |
kudva | seems to have. I created a new branch. I have tested the builtin directory code itself. That is working fine | 17:49 |
kudva | Let me try again then. I pushed on saturday, and got an email saying jenkins test failed. | 17:49 |
thinrichs | Don’t worry about the Jenkins test for now. | 17:50 |
skn_ | rajdeep_: agreed. That’s the right way, because Congress should not try to understand the concepts like firewalling, or for that matter anything else | 17:50 |
kudva | The runtime.py with Tim's recommended changes was also pushed, but all my code was commented out. I need some feedback on that section | 17:50 |
thinrichs | Add at least me as a reviewer (Tim Hinrichs), and we can iterate. | 17:50 |
kudva | okay, will do that. The builtin directory that manages the objects for the builtin are testing. The hook to runtime.py is about 10-20 lines of code which I need some help with since | 17:51 |
kudva | I am not completely clear on the TopDownTheory data structure | 17:51 |
kudva | So, I will push again | 17:51 |
thinrichs | kudva: I’ll definitely help out. | 17:51 |
kudva | Wondering how I can have review on the runtime.py code | 17:51 |
kudva | irc? | 17:51 |
banix | kudva: do you have a link from your push? | 17:51 |
kudva | http://logs.openstack.org/40/95340/1/check/gate-congress-pep8/178c99b | 17:52 |
kudva | http://logs.openstack.org/40/95340/1/check/gate-congress-python27/7a3e74c | 17:52 |
*** davlaps has joined #openstack-meeting-3 | 17:52 | |
banix | #link https://review.openstack.org/#/c/95340/ | 17:53 |
kudva | the first link says failure, the second one says success | 17:53 |
thinrichs | kudva: there’s probably just some formatting that needs fixing. | 17:53 |
rajdeep_ | you need to fix the pep warnings | 17:53 |
banix | kudva: no worries; mainly white space you need to clean up. | 17:54 |
rajdeep_ | white spaces etc | 17:54 |
thinrichs | You can add me as a reviewer by typing in Tim Hinrichs next to the button “Add Reviewer” | 17:54 |
banix | kudva: https://review.openstack.org/#/c/95340/1/congress/builtin/congressbuiltin.py | 17:54 |
kudva | got it, will clean up and push again | 17:55 |
thinrichs | I’ll write comments, and you should get an email saying that I’ve posted those comments. | 17:55 |
thinrichs | I think that covers all our action items from last week. | 17:55 |
thinrichs | Let’s open it up for discussion. | 17:55 |
kudva | okay, grat thanks | 17:55 |
thinrichs | #topic open discussion | 17:55 |
*** openstack changes topic to "open discussion (Meeting topic: CongressTeamMeeting)" | 17:55 | |
thinrichs | If no one has anything specific, maybe the newcomers can tell us why they’re interested in Congress. | 17:56 |
sjcazzol | thinrichs: ok | 17:57 |
banix | Let me say a few words: The Neutron group poliy is getting to a point that we may have some code merged this cycle | 17:57 |
skn_ | BTW, it would be nice if the newcomers can tell their names too | 17:57 |
sjcazzol | we are working on a POC to add SLA to openstack | 17:57 |
sjcazzol | Sergio Cazzolato | 17:57 |
banix | would be great to see how it can get used by other policy engines like Congress | 17:57 |
sjcazzol | I work at Intel | 17:57 |
*** kudva has quit IRC | 17:57 | |
skn_ | sjcazzol: Awesome | 17:58 |
iben | I've heard a lot about the need for policy to enable standard security practices across a disparate infrastrcuture. <— Iben Rodriguez - cloud security architect - leveraging my background in vmware environments to being openstack to the enterprise | 17:58 |
skn_ | SLA for availability or performance? | 17:58 |
thinrichs | banix: That’s been on our agenda for a long while. | 17:58 |
sjcazzol | SLA for both | 17:58 |
*** pballand has quit IRC | 17:59 | |
sjcazzol | also we are considering other scenarios | 17:59 |
thinrichs | sjcazzol: SLAs sound interesting. I’m looking forward to the details for your use cases. | 17:59 |
*** jpomero has quit IRC | 17:59 | |
banix | thinrichs: yes looks like we may be getting closer to the goal :) | 17:59 |
skn_ | Got to leave, running out of time. Thanks folks | 17:59 |
*** skn_ has left #openstack-meeting-3 | 17:59 | |
thinrichs | skn: thanks! | 17:59 |
iben | bye everyone! | 17:59 |
sjcazzol | thanks folks | 17:59 |
thinrichs | iben: cool—glad to have you. | 17:59 |
thinrichs | And yes it seems we’re out of time. Follow up to the ML if it can’t wait til next week! | 18:00 |
thinrichs | Thanks all! | 18:00 |
banix | bye everybody | 18:00 |
thinrichs | #endmeeting | 18:00 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 18:00 | |
openstack | Meeting ended Tue May 27 18:00:22 2014 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 18:00 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/congressteammeeting/2014/congressteammeeting.2014-05-27-17.03.html | 18:00 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/congressteammeeting/2014/congressteammeeting.2014-05-27-17.03.txt | 18:00 |
openstack | Log: http://eavesdrop.openstack.org/meetings/congressteammeeting/2014/congressteammeeting.2014-05-27-17.03.log.html | 18:00 |
*** sjcazzol has left #openstack-meeting-3 | 18:00 | |
*** emaganap has joined #openstack-meeting-3 | 18:02 | |
*** rajdeep_ has quit IRC | 18:02 | |
*** alexpilotti has quit IRC | 18:03 | |
*** emagana has quit IRC | 18:03 | |
*** jpomero has joined #openstack-meeting-3 | 18:03 | |
*** thinrichs has quit IRC | 18:04 | |
*** david-lyle has joined #openstack-meeting-3 | 18:05 | |
*** jamielennox|away is now known as jamielennox | 18:05 | |
*** mrunge has quit IRC | 18:07 | |
*** sarob_ has quit IRC | 18:07 | |
*** pballand has joined #openstack-meeting-3 | 18:11 | |
*** nati_ueno has quit IRC | 18:13 | |
*** nati_ueno has joined #openstack-meeting-3 | 18:14 | |
*** Youcef has joined #openstack-meeting-3 | 18:14 | |
*** clu_ has left #openstack-meeting-3 | 18:24 | |
*** pballand has quit IRC | 18:31 | |
*** emaganap has quit IRC | 18:36 | |
*** chuckC has quit IRC | 18:38 | |
*** emagana has joined #openstack-meeting-3 | 18:43 | |
*** emagana has quit IRC | 18:44 | |
*** emaganap has joined #openstack-meeting-3 | 18:45 | |
*** chuckC has joined #openstack-meeting-3 | 18:46 | |
*** jpomero_ has joined #openstack-meeting-3 | 18:52 | |
*** jpomero has quit IRC | 18:54 | |
*** lsmola2 has joined #openstack-meeting-3 | 18:56 | |
*** Alex_Gaynor has joined #openstack-meeting-3 | 18:56 | |
*** nati_ueno has quit IRC | 18:58 | |
*** nati_ueno has joined #openstack-meeting-3 | 18:59 | |
briancurtin | #startmeeting python-openstacksdk | 19:01 |
openstack | Meeting started Tue May 27 19:01:17 2014 UTC and is due to finish in 60 minutes. The chair is briancurtin. Information about MeetBot at http://wiki.debian.org/MeetBot. | 19:01 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 19:01 |
*** openstack changes topic to " (Meeting topic: python-openstacksdk)" | 19:01 | |
openstack | The meeting name has been set to 'python_openstacksdk' | 19:01 |
*** bknudson has joined #openstack-meeting-3 | 19:01 | |
briancurtin | if you're here for the python-openstacksdk meeting, there's a little agenda at https://wiki.openstack.org/wiki/Meetings/PythonOpenStackSDK#Agenda_for_2014-05-27_1900_UTC - it's just the open reviews to talk about so we can move on, if you need the links | 19:02 |
briancurtin | and with that, who's here? | 19:03 |
briancurtin | Brian Curtin, Rackspace | 19:03 |
edleafe | Ed Leafe, Rackspace | 19:03 |
bknudson | Brant Knudson, IBM | 19:03 |
jamielennox | Jamie Lennox, Red Hat | 19:03 |
Alex_Gaynor | Alex Gaynor, Rackspace | 19:03 |
briancurtin | #topic https://review.openstack.org/#/c/91889/ -- Authentication from keystoneclient | 19:05 |
*** openstack changes topic to "https://review.openstack.org/#/c/91889/ -- Authentication from keystoneclient (Meeting topic: python-openstacksdk)" | 19:05 | |
briancurtin | has anyone looked at the big auth review and have any comments? terry made a bunch of changes, and i have a few small comments on the last set, but anyone else? | 19:05 |
briancurtin | jamie had some comments, most of which were addressed, but a few things potentially outstanding (the factory functions are one off the top of my head) | 19:06 |
jamielennox | regarding the _factory for plugins, the reason i made it private in keystoneclient and advocate for it's removal here is that we should expect that there are going to be way more plugins and that loading them manually from a factory like that won't work | 19:06 |
jamielennox | you should never be in the position that you have a bunch of arguments and you need to figure out which plugin to use - the plugin should always be explicit | 19:07 |
Alex_Gaynor | +1 | 19:07 |
*** rockyg has joined #openstack-meeting-3 | 19:07 | |
*** lcheng_ has quit IRC | 19:08 | |
*** lcheng_ has joined #openstack-meeting-3 | 19:08 | |
*** terrylhowe has joined #openstack-meeting-3 | 19:09 | |
terrylhowe | Terry Howe HP running late | 19:09 |
briancurtin | yep, agreed there | 19:09 |
briancurtin | outside of the factories, anything else going on in the change that people like/dont like? | 19:12 |
*** ericpete_ has joined #openstack-meeting-3 | 19:13 | |
jamielennox | just looking auth/service.py has been removed - how does that affect get_token etc | 19:13 |
terrylhowe | I renamed it service_filter | 19:13 |
terrylhowe | I think there is some doc cleanup that needs to happen in other files | 19:14 |
terrylhowe | some things I'm reluctant to change because of other outstanding changes in the pipeline | 19:14 |
*** ericpete_ has quit IRC | 19:14 | |
*** vkmc has quit IRC | 19:15 | |
*** ericpeterson has joined #openstack-meeting-3 | 19:15 | |
*** ericpeterson has left #openstack-meeting-3 | 19:15 | |
briancurtin | terrylhowe: overall i'm good with this, and i think we can go back and change things if we need, in the interest of just moving on so we can build something | 19:17 |
briancurtin | does anyone have anything with this change that is a hard blocker? | 19:18 |
terrylhowe | I'd definitely like some feedback on it from jamielennox | 19:18 |
*** jamielennox_ has joined #openstack-meeting-3 | 19:18 | |
briancurtin | certainly | 19:18 |
jamielennox_ | stupid vpn | 19:18 |
*** jamielennox_ has quit IRC | 19:19 | |
*** dlenrow has joined #openstack-meeting-3 | 19:19 | |
jamielennox | terrylhowe: i'm ok with coming back to fix things | 19:20 |
jamielennox | i would like the factories gone up front though | 19:20 |
terrylhowe | cool, that'll work | 19:20 |
jamielennox | people tend to look at them and assume that's how you should be creating things otherwise | 19:20 |
terrylhowe | okay | 19:20 |
briancurtin | if anyone else who hasn't reviewed can try to give it a look after this, that would be great, and then we'll be rolling on | 19:21 |
*** lenrow has quit IRC | 19:22 | |
briancurtin | #action remove factory methods, should be good to go | 19:22 |
briancurtin | #topic https://review.openstack.org/#/c/94887 -- Clean up transport stuff out of the resource class | 19:22 |
*** openstack changes topic to "https://review.openstack.org/#/c/94887 -- Clean up transport stuff out of the resource class (Meeting topic: python-openstacksdk)" | 19:22 | |
terrylhowe | dtroyer needs to look at that, is he afk? | 19:23 |
briancurtin | i thought this looked fine and +2'ed, could use another look | 19:23 |
briancurtin | and yeah, from dtroyer | 19:23 |
briancurtin | not sure if he's around, but i just added him as a reviewer on the change | 19:24 |
*** kenhui has quit IRC | 19:24 | |
terrylhowe | I think I've minimized the changes and Dean might be able to live with it based on offline discussions I've had with him | 19:25 |
briancurtin | sounds good | 19:26 |
briancurtin | #action needs a dtroyer review, seems like it should be workable given minimized changes | 19:26 |
briancurtin | #topic https://review.openstack.org/#/c/94707 -- Add command structure to example code | 19:27 |
*** openstack changes topic to "https://review.openstack.org/#/c/94707 -- Add command structure to example code (Meeting topic: python-openstacksdk)" | 19:27 | |
briancurtin | this one is really small | 19:27 |
*** muralia has joined #openstack-meeting-3 | 19:28 | |
*** muralia has left #openstack-meeting-3 | 19:28 | |
jamielennox | sure, that's fine | 19:28 |
jamielennox | so long as no-one ever thinks it should be pulled out and make into a proper CLI tool :) | 19:29 |
terrylhowe | it is hill billy, but it should do | 19:29 |
briancurtin | #topic what's next? | 19:31 |
*** openstack changes topic to "what's next? (Meeting topic: python-openstacksdk)" | 19:31 | |
briancurtin | so if we think the auth change is basically good to go, what do we want our next step to be? | 19:31 |
terrylhowe | I'd like to implement some resource class and get a feel for everything | 19:32 |
*** nati_ueno has quit IRC | 19:33 | |
jamielennox | terrylhowe: i agree, i had a play with some resource classes a while ago and i think there will be some pain points to get through, but i don't think we'll know what they are until we try it | 19:33 |
briancurtin | is there any particularly good starting point on that? edleafe - from having implemented a lot of them via pyrax, any thought there? | 19:34 |
edleafe | Not sure given the reverse nature of the current design | 19:35 |
*** dlenrow has quit IRC | 19:36 | |
edleafe | if you have endpoints, you need a way to create the desired URLs for retrieving objects. Pyrax created them from the JSON response, but you've indicated that you want to pre-define the attributes, so that's another sticking point. | 19:36 |
terrylhowe | I was kind of thinking with starting with something simple like some basic glance thing and then pick a complicated one after that | 19:39 |
Alex_Gaynor | sounds good | 19:40 |
*** lsmola2 has quit IRC | 19:40 | |
briancurtin | i'll be traveling for a bit to pittsburgh and russia, but i guess i know the most about swift of anything, so maybe looking there myself | 19:42 |
*** ericpete_ has joined #openstack-meeting-3 | 19:43 | |
terrylhowe | swift would be a good one to try early since it is a bit oddball | 19:43 |
*** SumitNaiksatam has joined #openstack-meeting-3 | 19:44 | |
*** nelsnelson has quit IRC | 19:44 | |
*** nelsnelson has joined #openstack-meeting-3 | 19:45 | |
jamielennox | i'll try to have a crack at a few of the basic keystone classes, a little swamped currently though | 19:45 |
briancurtin | besides starting to play with those, is there anything else to talk about? 15 minutes left, and it seems like we're slowing down | 19:46 |
terrylhowe | more example code | 19:47 |
*** ericpete_ has left #openstack-meeting-3 | 19:47 | |
*** lcheng_ has quit IRC | 19:47 | |
briancurtin | should start making docs a hard requirement at this point as well | 19:48 |
briancurtin | (touched on that at the summit, havent had it come up though) | 19:49 |
terrylhowe | docs would be especially useful on the resource implementations | 19:49 |
*** nati_ueno has joined #openstack-meeting-3 | 19:50 | |
terrylhowe | if users are using it at that level | 19:50 |
jamielennox | are we ok to have those docs inline or should they be in a folder? | 19:50 |
*** lcheng_ has joined #openstack-meeting-3 | 19:50 | |
jamielennox | inline as in docstrings | 19:51 |
Alex_Gaynor | Docstrings and the docs/ dir are for different things IMO | 19:51 |
edleafe | +1 on not relying on docstrings | 19:51 |
Alex_Gaynor | docs/ dir is for prose, for anyone using the public API for the SDK. docstrings are reference material (not always prose) for someone who is (usually) reading the code itself | 19:51 |
edleafe | People working on the SDK use the docstrings. Developers *using* the SDK need higher-level docs | 19:52 |
terrylhowe | sounds good | 19:52 |
jamielennox | ok | 19:52 |
briancurtin | agreed. i think we need to be on top of both, and make sure we're starting to build up user docs as we're developing | 19:52 |
edleafe | You should probably write the usability docs *before* implementing the SDK | 19:53 |
briancurtin | i sketch things out locally like that from time to time, but i dont particularly care about doc driven as a process or anything like that | 19:56 |
edleafe | I just mean figure out how you would expect an SDK to work, and then implement it that way | 19:57 |
edleafe | It's too easy for technical folks to get tied up in the details of the implementation | 19:57 |
edleafe | And forget how devs need this to work | 19:57 |
briancurtin | two minutes left, anything to squeeze in? | 19:59 |
briancurtin | #endmeeting | 20:00 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 20:00 | |
openstack | Meeting ended Tue May 27 20:00:28 2014 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 20:00 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/python_openstacksdk/2014/python_openstacksdk.2014-05-27-19.01.html | 20:00 |
*** nati_ueno has quit IRC | 20:00 | |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/python_openstacksdk/2014/python_openstacksdk.2014-05-27-19.01.txt | 20:00 |
openstack | Log: http://eavesdrop.openstack.org/meetings/python_openstacksdk/2014/python_openstacksdk.2014-05-27-19.01.log.html | 20:00 |
*** markmcclain has joined #openstack-meeting-3 | 20:00 | |
*** terrylhowe has left #openstack-meeting-3 | 20:04 | |
*** Alex_Gaynor has left #openstack-meeting-3 | 20:06 | |
*** jgrimm has left #openstack-meeting-3 | 20:08 | |
*** nati_ueno has joined #openstack-meeting-3 | 20:12 | |
*** chuckC has quit IRC | 20:13 | |
*** otherwiseguy has quit IRC | 20:19 | |
*** boris-42 has quit IRC | 20:21 | |
*** boris-42 has joined #openstack-meeting-3 | 20:21 | |
*** jpomero_ has quit IRC | 20:33 | |
*** vkmc has joined #openstack-meeting-3 | 20:37 | |
*** rm_work|away is now known as rm_work | 20:38 | |
*** otherwiseguy has joined #openstack-meeting-3 | 20:41 | |
*** jtomasek has joined #openstack-meeting-3 | 20:41 | |
*** gduan has quit IRC | 20:49 | |
*** garyduan has joined #openstack-meeting-3 | 20:49 | |
*** lcheng_ has quit IRC | 20:50 | |
*** gduan has joined #openstack-meeting-3 | 20:52 | |
*** garyduan has quit IRC | 20:54 | |
*** julim has quit IRC | 21:01 | |
*** alexpilotti has joined #openstack-meeting-3 | 21:01 | |
*** chuckC has joined #openstack-meeting-3 | 21:07 | |
*** jpomero has joined #openstack-meeting-3 | 21:07 | |
*** nati_ueno has quit IRC | 21:08 | |
*** nati_ueno has joined #openstack-meeting-3 | 21:11 | |
*** lblanchard has quit IRC | 21:11 | |
*** jtomasek has quit IRC | 21:12 | |
*** lcheng_ has joined #openstack-meeting-3 | 21:13 | |
*** rockyg has quit IRC | 21:15 | |
*** markmcclain has quit IRC | 21:21 | |
-openstackstatus- NOTICE: Zuul is offline due to an operational issue; ETA 2200 UTC. | 21:33 | |
*** ChanServ changes topic to "Zuul is offline due to an operational issue; ETA 2200 UTC." | 21:33 | |
*** nati_ueno has quit IRC | 21:37 | |
*** davidlenwell_ has joined #openstack-meeting-3 | 21:40 | |
*** nati_ueno has joined #openstack-meeting-3 | 21:43 | |
*** SumitNaiksatam has quit IRC | 21:43 | |
*** davidlenwell_ has quit IRC | 21:44 | |
*** SumitNaiksatam has joined #openstack-meeting-3 | 21:45 | |
*** davidlenwell has quit IRC | 21:45 | |
*** davidlenwell has joined #openstack-meeting-3 | 21:47 | |
*** mwagner_lap has quit IRC | 21:52 | |
*** emaganap has quit IRC | 21:54 | |
*** peristeri has quit IRC | 21:55 | |
*** emagana has joined #openstack-meeting-3 | 21:55 | |
*** shakamunyi has quit IRC | 22:03 | |
*** nati_ueno has quit IRC | 22:05 | |
*** otherwiseguy has quit IRC | 22:06 | |
*** yamahata has joined #openstack-meeting-3 | 22:07 | |
*** rgbkrk has joined #openstack-meeting-3 | 22:07 | |
*** ChanServ changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 22:10 | |
-openstackstatus- NOTICE: Zuul is started and processing changes that were in the queue when it was stopped. Changes uploaded or approved since then will need to be re-approved or rechecked. | 22:10 | |
*** briancurtin has left #openstack-meeting-3 | 22:10 | |
*** shakamunyi has joined #openstack-meeting-3 | 22:10 | |
*** jthopkin has quit IRC | 22:11 | |
*** tomoe_ has joined #openstack-meeting-3 | 22:16 | |
*** SumitNaiksatam has quit IRC | 22:19 | |
*** SumitNaiksatam has joined #openstack-meeting-3 | 22:23 | |
*** emagana has quit IRC | 22:30 | |
*** nati_ueno has joined #openstack-meeting-3 | 22:32 | |
*** Sukhdev has joined #openstack-meeting-3 | 22:38 | |
*** nati_uen_ has joined #openstack-meeting-3 | 22:42 | |
*** nati_ueno has quit IRC | 22:42 | |
*** beyounn_1 has quit IRC | 23:06 | |
*** mwagner_lap has joined #openstack-meeting-3 | 23:08 | |
*** beyounn_1 has joined #openstack-meeting-3 | 23:08 | |
*** yamahata has quit IRC | 23:16 | |
*** SumitNaiksatam has quit IRC | 23:23 | |
*** otherwiseguy has joined #openstack-meeting-3 | 23:23 | |
*** SumitNaiksatam has joined #openstack-meeting-3 | 23:24 | |
*** david-lyle has quit IRC | 23:25 | |
*** igordcard has quit IRC | 23:29 | |
*** davlaps has quit IRC | 23:33 | |
*** devlaps has quit IRC | 23:33 | |
*** TravT has quit IRC | 23:35 | |
*** eguz has joined #openstack-meeting-3 | 23:51 | |
*** carl_baldwin_ has quit IRC | 23:52 | |
*** eghobo has quit IRC | 23:55 | |
*** lcheng_ has quit IRC | 23:58 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!