Tuesday, 2018-10-16

*** hongbin has quit IRC00:16
*** macza has joined #openstack-meeting-alt00:37
*** macza has quit IRC00:42
*** tetsuro has joined #openstack-meeting-alt00:43
*** cloudrancher has quit IRC00:47
*** cloudrancher has joined #openstack-meeting-alt00:49
*** lhinds has quit IRC00:51
*** lhinds has joined #openstack-meeting-alt00:55
*** slaweq has joined #openstack-meeting-alt01:11
*** slaweq has quit IRC01:16
*** cloudrancher has quit IRC01:19
*** cloudrancher has joined #openstack-meeting-alt01:20
*** yamahata has quit IRC01:24
*** yamamoto has quit IRC01:41
*** yamamoto has joined #openstack-meeting-alt01:41
*** hongbin has joined #openstack-meeting-alt02:09
*** diablo_rojo has quit IRC02:17
*** cloudrancher has quit IRC02:44
*** cloudrancher has joined #openstack-meeting-alt02:45
*** macza has joined #openstack-meeting-alt02:55
*** macza has quit IRC02:59
*** bhavikdbavishi has joined #openstack-meeting-alt03:07
*** cloudrancher has quit IRC03:08
*** cloudrancher has joined #openstack-meeting-alt03:09
*** slaweq has joined #openstack-meeting-alt03:11
*** slaweq has quit IRC03:16
*** hongbin has quit IRC03:48
*** bswartz has quit IRC03:51
*** lpetrut has joined #openstack-meeting-alt03:52
*** bhavikdbavishi has quit IRC03:54
*** slaweq has joined #openstack-meeting-alt04:11
*** macza has joined #openstack-meeting-alt04:12
*** slaweq has quit IRC04:16
*** lpetrut has quit IRC04:34
*** bhavikdbavishi has joined #openstack-meeting-alt04:35
*** bhavikdbavishi has quit IRC04:52
*** bhavikdbavishi has joined #openstack-meeting-alt04:52
*** liuyulong has quit IRC04:58
*** tetsuro has quit IRC05:04
*** macza_ has joined #openstack-meeting-alt05:08
*** slaweq has joined #openstack-meeting-alt05:11
*** macza has quit IRC05:12
*** macza_ has quit IRC05:12
*** macza has joined #openstack-meeting-alt05:13
*** slaweq has quit IRC05:15
*** macza has quit IRC05:20
*** macza has joined #openstack-meeting-alt05:20
*** macza has quit IRC05:24
*** apetrich has quit IRC05:40
*** janki has joined #openstack-meeting-alt05:47
*** dpawlik has joined #openstack-meeting-alt05:55
*** dpawlik has quit IRC06:00
*** apetrich has joined #openstack-meeting-alt06:00
*** dpawlik has joined #openstack-meeting-alt06:11
*** slaweq has joined #openstack-meeting-alt06:11
*** dpawlik has quit IRC06:12
*** dpawlik has joined #openstack-meeting-alt06:12
*** slaweq has quit IRC06:16
*** apetrich has quit IRC06:23
*** rdopiera has joined #openstack-meeting-alt06:36
*** apetrich has joined #openstack-meeting-alt06:44
*** e0ne has joined #openstack-meeting-alt06:48
*** slaweq has joined #openstack-meeting-alt06:56
*** rcernin has quit IRC07:01
*** jtomasek has joined #openstack-meeting-alt07:05
*** bhavikdbavishi1 has joined #openstack-meeting-alt07:14
*** bhavikdbavishi has quit IRC07:16
*** bhavikdbavishi1 is now known as bhavikdbavishi07:16
*** lpetrut has joined #openstack-meeting-alt07:20
*** lpetrut has quit IRC07:25
*** markvoelker has quit IRC07:29
*** markvoelker has joined #openstack-meeting-alt07:29
*** ttsiouts has joined #openstack-meeting-alt07:30
*** bhavikdbavishi has quit IRC07:32
*** markvoelker has quit IRC07:34
*** yamahata has joined #openstack-meeting-alt07:41
*** bhavikdbavishi has joined #openstack-meeting-alt07:53
*** bhavikdbavishi has quit IRC08:14
*** bhavikdbavishi has joined #openstack-meeting-alt08:15
*** bhavikdbavishi has quit IRC08:19
*** tetsuro has joined #openstack-meeting-alt08:21
*** yikun has quit IRC08:22
*** bhavikdbavishi has joined #openstack-meeting-alt08:27
*** markvoelker has joined #openstack-meeting-alt08:30
*** priteau has joined #openstack-meeting-alt08:31
*** e0ne has quit IRC08:37
*** e0ne has joined #openstack-meeting-alt08:44
*** derekh has joined #openstack-meeting-alt08:52
*** bertys has joined #openstack-meeting-alt08:57
priteau#startmeeting blazar09:00
openstackMeeting started Tue Oct 16 09:00:02 2018 UTC and is due to finish in 60 minutes.  The chair is priteau. Information about MeetBot at http://wiki.debian.org/MeetBot.09:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.09:00
*** openstack changes topic to " (Meeting topic: blazar)"09:00
openstackThe meeting name has been set to 'blazar'09:00
priteau#topic Roll call09:00
*** openstack changes topic to "Roll call (Meeting topic: blazar)"09:00
tetsuroo/09:01
priteauHi tetsuro09:01
*** masahito has joined #openstack-meeting-alt09:01
masahitoo/09:01
priteauHi masahito09:01
priteauI also see bertys is online09:02
priteauAgenda for today:09:02
priteau1. Project Update @ Berlin Summit09:03
priteau2. Forum @ Berlin Summit09:03
priteau3. Changes to release cycle process09:03
bertyso/09:03
priteau4. stein-1 milestone09:03
priteau5.09:03
priteauAOB09:03
priteauHi bertys09:03
bertysHi all09:03
*** markvoelker has quit IRC09:03
priteau#topic Project Update @ Berlin Summit09:03
*** openstack changes topic to "Project Update @ Berlin Summit (Meeting topic: blazar)"09:03
priteauOur talk is taking shape09:04
priteau#link https://docs.google.com/presentation/d/1nsuiQe72E0cYELSI8qLmNwVm4SOXzuf01akzqKEZ1TE/edit09:04
priteauI added preliminary content for "What is Blazar?" and completed the Stein slide09:05
priteauTetsuro wrote a slide on cross-project work with placement09:05
tetsuro:)09:05
priteauBertrand wrote one on how to give feedback09:05
priteauThank you both09:05
priteaumasahito: Are you still planning to write content for the Rocky slide? If you don't have time, I can help09:06
masahitoSorry, I didn't have much time to write last week. I'll do this in this week.09:06
*** yamahata has quit IRC09:06
priteauThat's fine. We started early, still almost a month :-)09:06
priteauExactly four weeks actually09:07
masahitoI uploaded the Vancouver summit's one.09:07
priteauI see it now, thanks!09:07
priteauCould you please also add a little bit of information about the NFV use case on the first slide?09:08
priteauWell, on slide #209:08
masahitogot it.09:08
priteauThanks!09:08
priteauI'll take care of the "Beyond Stein" slide.09:09
priteaubertys: Will you take care of the "How to contribute" slide as well?09:10
bertyspriteau: yes, as agreed.09:10
priteauAll looks good then, thanks everyone :-)09:10
priteauAny comment on this topic?09:10
priteauLet's move to the next one09:12
priteau#topic Forum @ Berlin Summit09:12
*** openstack changes topic to "Forum @ Berlin Summit (Meeting topic: blazar)"09:12
priteauThe Forum schedule is now up:09:13
priteau#link https://www.openstack.org/summit/berlin-2018/summit-schedule/#track=26209:13
priteauThe two sessions we submitted have been accepted!09:13
priteau#link https://www.openstack.org/summit/berlin-2018/summit-schedule/events/22807/extending-blazar-reservations-to-new-resource-types09:13
priteau#link https://www.openstack.org/summit/berlin-2018/summit-schedule/events/22806/python-bindings-for-the-placement-api09:13
priteauNow is the time to check for any schedule conflict09:14
priteauA good thing is that our placement session is right after "Update on placement extraction from nova", in the same room09:15
masahitoBoth are accepted! Nice!09:15
priteauSo we should have lots of people interested in placement attend!09:15
*** panda|off has quit IRC09:15
masahitosounds good.09:16
priteauThe Summit schedule is now mostly complete. Apparently just some BoFs and WGs are not yet up.09:17
tetsuroWould you mind if I put some topics about the host-reservation with placement to that Forum if we have time?09:18
*** panda has joined #openstack-meeting-alt09:18
masahitoI don't mind if the topics is needed for the Forum.09:19
masahitos/if/unless/09:20
priteautetsuro: Preferably only if we have time at the end of the session, as it is potentially of interest for lots of projects consuming placement (Neutron, Cinder, Cyborg), not just Blazar + Placement09:20
tetsuroYup, that's fair.09:21
priteauWe should start Etherpads for each Forum session09:22
priteauI will create one for Blazar reservations. tetsuro, can you do the placement one?09:23
tetsuroSure.09:24
priteau#action Create Etherpads for Forum @ Berlin Summit09:24
priteauAnything else to say about this?09:25
priteauMoving on09:26
priteau#topic Changes to release cycle process09:26
*** openstack changes topic to "Changes to release cycle process (Meeting topic: blazar)"09:26
priteauYou may have seen on the mailing list, there are some changes being made to the release process09:26
*** persia has quit IRC09:27
priteauThe cycle-with-milestones model will stop tagging milestones (i.e. for stein-1, stein-2, stein-3)09:27
priteau#link http://lists.openstack.org/pipermail/openstack-dev/2018-October/135706.html09:27
*** persia has joined #openstack-meeting-alt09:28
priteauThis has impact on people testing upgrades because of versioning between stable branch and master (more detailed in the email thread), so the proposed solution is to use PBR Sem-Ver tagging09:29
priteauA commit has been proposed on each project, here's ours: https://review.openstack.org/#/c/610568/09:29
priteauIt automatically bumps our version number to 2.1.009:30
priteauSee pip2 freeze output of the Zuul job: http://logs.openstack.org/68/610568/1/check/blazar-devstack-dsvm/1ed406c/logs/pip2-freeze.txt.gz09:31
priteauCompared to before the PBR commit: http://logs.openstack.org/78/610678/1/check/blazar-devstack-dsvm/4bfb0fa/logs/pip2-freeze.txt.gz09:31
priteauIf there's no objection I will approve this patch09:31
priteauThere's also a proposed change for library releases09:33
masahitoI missed the ML thread, so not fully understand yet.09:33
bertysI am also wondering if we need patch for blazar-dashboard?09:33
priteaubertys: blazar-dashboard is cycle-with-intermediary, not cycle-with-milestones09:34
bertyspriteau: I see, thanks09:35
priteauSee https://releases.openstack.org/reference/release_models.html#cycle-with-intermediary vs https://releases.openstack.org/reference/release_models.html#cycle-with-milestones09:35
priteaumasahito: A short summary is:09:36
priteauTo reduce release overhead, they propose to stop tagging milestones, instead tagging only RCs09:36
priteauThis has an impact on people testing upgrades from Rocky release to Stein development, as the version number has not bumped and Rocky release is seen as newer09:37
priteauSolution is to bump the release number early in the cycle, this is done via PBR Sem-Ver tag in a commit09:37
priteauThere's not much impact for us. We merge this patch and continue working on our milestones as usual.09:38
masahitoThanks the summary. I'm fine to the change.09:39
priteauThere is also a proposed change for cycle-with-intermediary library09:39
priteau#link http://lists.openstack.org/pipermail/openstack-dev/2018-October/135689.html09:39
priteauThey will force a release at each milestone if there are changes and a release has not been done already09:39
priteauWe have a few changes in python-blazarclient, but only internal infra (Zuul job) to small README change09:41
priteauI am not sure if that will trigger a release, we'll see09:41
priteauThey are also thinking of requiring a person for each team to add their name to a "manifest" of sorts for the release cycle.09:43
priteau"That "final release liaison" person would be the designated person to follow through on finishing out the releases for that team, and would be designated ahead of the final release phases."09:43
priteauIt can be the PTL but it doesn't have to be. I am happy to take this role unless someone wants to do it.09:43
priteauThat was a rather long "For Your Information" really.09:44
priteauWe need to move on as we have just 15 minutes left09:44
priteau#topic stein-1 milestone09:44
*** openstack changes topic to "stein-1 milestone (Meeting topic: blazar)"09:44
priteau#link https://launchpad.net/blazar/+milestone/stein-109:45
priteaustein-1 is next week09:45
priteauThere's lots to do that we won't be able to complete, so we'll have to move them to stein-209:45
priteauLet's focus on reviewing what's ready09:46
masahito+109:46
priteauI have these two patches ready to review: https://review.openstack.org/#/q/topic:bug/1797940+(status:open+OR+status:merged)09:46
priteauI also gave a +2 to masahito's patches for instance reservation scenarios, we need another review: https://review.openstack.org/#/q/status:open+project:openstack/blazar-tempest-plugin+branch:master+topic:bug/171443809:47
priteauI am hoping to review tetsuro's code soon09:47
priteaubertys: Would you be able to review masahito's tempest code?09:48
tetsuroI rebased it today09:48
tetsuro^just FYI09:48
masahitoFor s-1 milestone 4 series of my patch are ready to review.09:49
masahitohttps://review.openstack.org/#/q/status:open+project:openstack/blazar+branch:master+topic:bug/130443509:49
masahitohttps://review.openstack.org/#/q/status:open+project:openstack/blazar+branch:master+topic:bp/resource-availability-api09:49
masahitohttps://review.openstack.org/#/q/status:open+project:openstack/blazar+branch:stable/queens+topic:bug/1786007-stable/queens09:49
masahitohttps://review.openstack.org/#/q/status:open+project:openstack/blazar+branch:master+topic:bp/basic-network-plugin09:49
priteauThanks for the reminder masahito09:50
masahitoMost of tetsuro's patches looks good to me. If there're no objection, I'd like to merge the patches.09:51
bertyspriteau: ok, will do today or tomorrow on best effort basis. I am not available on Thursday / Friday09:52
masahitoEspecially, the patches under blazar.utils doesn't affect current Blazar code.09:52
priteaumasahito: I'll try to take a look at tetsuro's code later today09:52
priteaumasahito: Thanks for the floating IP spec. I left a comment on Gerrit, wondering if there's an approach that would allow users to still associate IPs via Horizon rather than updating reservation params09:55
masahitopriteau: That's what I ask you. The another approach is creating external networks for each reservations, right?09:56
masahitomeaning one reservation is mapped to one external network.09:58
priteauThat's an alternative, but as you explain in the spec, it is complex to configure for operators.09:58
masahitoright.09:58
priteauI was wondering if there was an approach that would take a floating IP out of a single external network and assign it to the project which made the reservation09:58
priteauLike we drafted in Dublin09:59
priteauIt may need some advanced configuration of Neutron policies. I found an approach for VLANs where I can create networks as Blazar using trusts, which makes them owned by the reserving project.10:00
*** markvoelker has joined #openstack-meeting-alt10:00
priteauWe're running out of time. I will share the details with you.10:00
priteau#topic AOB10:00
masahitopriteau: do you have time after the meeting? I want to check my understand is correct.10:00
*** openstack changes topic to "AOB (Meeting topic: blazar)"10:00
priteauAny AOB?10:00
priteaumasahito: Unfortunately I have to go in another meeting right after10:01
masahitoGot it.  I also checked your one, but hit an issue. I'll reply it on the gerrit.10:01
priteauI can be on IRC tomorrow morning or we can discuss by email.10:02
masahitothanks.10:02
priteauThanks!10:02
priteauWe need to end. Have a good rest of the week.10:02
priteau#endmeeting10:02
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"10:02
openstackMeeting ended Tue Oct 16 10:02:38 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)10:02
openstackMinutes:        http://eavesdrop.openstack.org/meetings/blazar/2018/blazar.2018-10-16-09.00.html10:02
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/blazar/2018/blazar.2018-10-16-09.00.txt10:02
openstackLog:            http://eavesdrop.openstack.org/meetings/blazar/2018/blazar.2018-10-16-09.00.log.html10:02
*** tetsuro has quit IRC10:03
masahitobye10:04
*** bertys has quit IRC10:04
*** erlon has joined #openstack-meeting-alt10:07
*** ttsiouts has quit IRC10:08
*** masahito has quit IRC10:13
*** tetsuro has joined #openstack-meeting-alt10:14
*** tetsuro has quit IRC10:16
*** ttsiouts has joined #openstack-meeting-alt10:29
*** markvoelker has quit IRC10:34
*** macza has joined #openstack-meeting-alt10:43
*** macza has quit IRC10:47
*** ttsiouts has quit IRC11:02
*** ttsiouts has joined #openstack-meeting-alt11:03
*** macza has joined #openstack-meeting-alt11:04
*** ttsiouts has quit IRC11:07
*** macza has quit IRC11:09
*** ttsiouts has joined #openstack-meeting-alt11:17
*** e0ne has quit IRC11:18
*** bhavikdbavishi has quit IRC11:23
*** markvoelker has joined #openstack-meeting-alt11:31
*** ttsiouts has quit IRC11:31
*** ttsiouts has joined #openstack-meeting-alt11:32
*** e0ne has joined #openstack-meeting-alt11:32
*** ttsiouts has quit IRC11:34
*** ttsiouts has joined #openstack-meeting-alt11:35
*** ttsiouts has quit IRC11:37
*** ttsiouts has joined #openstack-meeting-alt11:38
*** cloudrancher has quit IRC11:39
*** ttsiouts has quit IRC11:46
*** ttsiouts has joined #openstack-meeting-alt11:47
*** ttsiouts has quit IRC11:47
*** ttsiouts has joined #openstack-meeting-alt11:47
*** ttsiouts has quit IRC11:50
*** ttsiouts has joined #openstack-meeting-alt11:51
*** ttsiouts has quit IRC11:55
*** ttsiouts has joined #openstack-meeting-alt12:00
*** markvoelker has quit IRC12:04
*** yamamoto has quit IRC12:04
*** yamamoto has joined #openstack-meeting-alt12:05
*** yamamoto has quit IRC12:05
*** yamamoto has joined #openstack-meeting-alt12:05
*** dtrainor has joined #openstack-meeting-alt12:14
*** bhavikdbavishi has joined #openstack-meeting-alt12:17
*** e0ne has quit IRC12:24
*** e0ne has joined #openstack-meeting-alt12:27
*** ttsiouts has quit IRC12:32
*** raildo has joined #openstack-meeting-alt12:35
*** cloudrancher has joined #openstack-meeting-alt12:38
*** priteau has quit IRC12:39
*** priteau has joined #openstack-meeting-alt12:40
*** bhavikdbavishi has quit IRC12:49
*** macza has joined #openstack-meeting-alt12:53
*** macza has quit IRC12:58
*** efried has joined #openstack-meeting-alt13:10
*** yamamoto has quit IRC13:10
*** yamamoto has joined #openstack-meeting-alt13:11
*** e0ne has quit IRC13:12
*** dpawlik has quit IRC13:13
*** yamamoto has quit IRC13:15
*** e0ne has joined #openstack-meeting-alt13:16
*** dpawlik has joined #openstack-meeting-alt13:18
*** cloudrancher has quit IRC13:27
*** dpawlik has quit IRC13:30
*** dpawlik has joined #openstack-meeting-alt13:40
*** e0ne has quit IRC13:53
*** janki has quit IRC13:58
*** yamamoto has joined #openstack-meeting-alt14:00
*** yamahata has joined #openstack-meeting-alt14:01
*** e0ne has joined #openstack-meeting-alt14:01
*** hongbin has joined #openstack-meeting-alt14:05
*** dpawlik has quit IRC14:11
*** munimeha1 has joined #openstack-meeting-alt14:19
*** dpawlik has joined #openstack-meeting-alt14:46
*** dpawlik has quit IRC14:50
*** gagehugo has joined #openstack-meeting-alt14:56
*** ccamacho has quit IRC14:57
*** ccamacho has joined #openstack-meeting-alt15:00
*** SimAloo has joined #openstack-meeting-alt15:18
*** wxy| has joined #openstack-meeting-alt15:19
*** macza has joined #openstack-meeting-alt15:39
*** macza has quit IRC15:44
*** e0ne has quit IRC15:50
*** macza has joined #openstack-meeting-alt15:57
*** macza has quit IRC15:58
*** macza has joined #openstack-meeting-alt16:00
lbragstad#startmeeting keystone16:00
openstackMeeting started Tue Oct 16 16:00:04 2018 UTC and is due to finish in 60 minutes.  The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: keystone)"16:00
openstackThe meeting name has been set to 'keystone'16:00
lbragstad#link https://etherpad.openstack.org/p/keystone-weekly-meeting16:00
knikollao/16:00
lbragstado/16:00
wxy|o/16:00
gagehugoo/16:00
lbragstadwe have a lot to get through today - so we'll get started in a minute16:01
kmallocO/16:01
lbragstad#topic Release status16:02
*** openstack changes topic to "Release status (Meeting topic: keystone)"16:02
lbragstad#info reminder that milestone 1 is going to be next16:02
lbragstadweek16:02
lbragstad#link https://releases.openstack.org/stein/schedule.html16:02
lbragstad#info next weeks is the deadline for specification proposals16:03
hrybackio/ (better channel)16:03
lbragstad(more onthat later)16:03
*** ayoung has joined #openstack-meeting-alt16:03
lbragstadalso - it would be good to get as much community goal work squared away before next week as possibl e16:03
lbragstad#info mutable configuration goal implementation is up for review16:04
lbragstad#link https://review.openstack.org/#/c/585417/16:04
lbragstad#info python3 first goal is nearly complete, and cmurphy is going to put the finishing touches on zuul changes so that keystone runs functional tests in python316:05
lbragstad#info the upgrade checker goal implementation is up for review16:05
lbragstad#link https://review.openstack.org/#/c/608785/16:05
ayoungDo I need to go more official for my 2 Feature-Bugs for Domains and Federation?16:05
ayounghttps://bugs.launchpad.net/keystone/+bugs?search=Search&field.assignee=ayoung16:06
lbragstadwhat's that ayoung?16:06
ayoungIs the bug report sufficient process, or do I need a spec?  They seem small enough, and explainable enough to me, but then I am the author16:06
lbragstadum16:07
ayounger16:07
ayoungsorry, thought that got the right set of bugs16:07
ayoung1 sec16:07
ayounghttps://bugs.launchpad.net/keystone/+bug/1794527  is right16:07
openstackLaunchpad bug 1794527 in OpenStack Identity (keystone) "Allow domain creation with a specific ID" [Wishlist,Incomplete] - Assigned to Adam Young (ayoung)16:07
ayounghttps://bugs.launchpad.net/keystone/+bug/1641639  is right16:07
openstackLaunchpad bug 1641639 in OpenStack Identity (keystone) "use mapping_id for shadow users" [Wishlist,In progress] - Assigned to Adam Young (ayoung)16:07
ayoungyeah, those two16:07
lbragstadlooks like https://bugs.launchpad.net/keystone/+bug/1794527 is going to be a spec anyway?16:07
ayounglbragstad, I can.  It just seems like busy work.16:08
ayoungI think I can explain it just as well in the bug16:08
ayoungBut...I thought everyone understood the use case, and I'm more interested in making that the case16:08
ayounga spec means spec approval process, etc16:09
ayoungand this is more like a tool that can be used for a larger use case, but not tied to it16:09
lbragstadsince we've historically debated this case, i wouldn't mind a spec since it's more intuitive for discussion16:09
ayoungwell, it really is just a dependency for the other one16:09
ayoungin my view16:09
ayoung"use mapping_id for shadow users"  needs a common domain ID or the user ids change16:10
lbragstadyeah - that's understandable16:10
lbragstadi think specs work for this16:10
kmalloci honestly am fine with a spec or a bug, if it is a spec, it will need a tracking bug anyway.16:10
ayoungthese were designed to be as minimal as possible.  Spec process means we don't get it this release.16:10
lbragstadas opposed to trying to debate the justification in bug comments and associating the two16:10
ayoungI mean...I could have tried to slip the domain_id change into the other bug, as that is really what is needed to fix it, just figured it was clearer to pull it out into its own16:11
lbragstadi think it should be it's own16:11
*** cloudrancher has joined #openstack-meeting-alt16:11
ayoungis everyone ok with these changes?  Is there any real misunderstanding or objection?16:11
lbragstadi need to review it again16:12
lbragstadit's on my list16:12
lbragstad#topic specifications16:12
*** openstack changes topic to "specifications (Meeting topic: keystone)"16:12
*** macza has quit IRC16:13
kmallochttps://imgflip.com/i/2k8jz9 <--- OBJECTION16:13
kmalloc>.>16:13
kmalloc<.<16:13
*** macza has joined #openstack-meeting-alt16:13
lbragstadi would vote that we propose a specification for the domain id change, because that's always been a hot topic16:14
lbragstadand it affects the API16:14
kmallocit's small enough i could see it being a bug alone. if it's a spec, i expect it to be very very empty16:14
lbragstadit's the discussion that i'd like to capture16:15
kmallocand if people get too picky about the spec's contents, i'd be annoyed.16:15
lbragstadthat and we have specification proposed for review that attempted to do something similar16:15
kmallocso, ayoung can you propose a very light spec, anything that is "spec content" should be left to the side of the convo of if this is "good"16:15
kmallocconvo about merits of the change, not the spec content16:15
kmallocand we should review that spec explicitly today/tomorrow16:15
kmallocif we are making ayoung post it16:16
ayoungok16:16
kmallocayoung: basic justification.16:16
lbragstad#action ayoung to propose https://bugs.launchpad.net/keystone/+bug/1794527 as a specification16:16
openstackLaunchpad bug 1794527 in OpenStack Identity (keystone) "Allow domain creation with a specific ID" [Wishlist,Incomplete] - Assigned to Adam Young (ayoung)16:16
kmallocplease keep the bug as the tracker for it16:16
ayoungwill do16:16
lbragstadthanks ayoung16:17
kmallocand if folks do not register complaints about functionality in the next couple days, I warn you, it's going to be merged :)16:17
lbragstadif that's the case, socialize it on the mailing list so that it gets proper visibility16:17
kmalloc#action everyone review justification of ayoung's spec (please do not nit pick the content)16:17
lbragstadcmurphy is super busy this week16:17
*** smyers has quit IRC16:18
kmallocright. this should be a quick review16:18
kmallocand should be the core teams #1 review target for discussion16:18
kmallocif there is discussion it can wait till S1 day16:18
*** apetrich has quit IRC16:18
kmallocif there isn't active discussion/dissent we can merge it sooner16:18
kmalloci expect this can land.16:18
lbragstadrememeber that specification freeze is january 11th16:19
lbragstadbut - the earlier the better if we can helpit16:19
kmallocexactly16:19
knikolla++16:19
kmalloci expect there will be little dissent on this one16:19
kmallocit is straightforward.16:19
*** smyers has joined #openstack-meeting-alt16:19
kmallocso please review it this week.16:19
lbragstadayoung outside of those two, do you have other specs to bring up?16:20
kmalloclbragstad: also, holy crap jan 11 is a ways down the road for spec freeze :P long cycle is long16:20
ayoungI brought jamie's back to life, too16:20
*** bhavikdbavishi has joined #openstack-meeting-alt16:20
lbragstadyeah - this release is going to be a marathon16:20
ayounghttps://review.openstack.org/#/c/607346/16:20
lbragstad#link https://review.openstack.org/#/c/607346/16:20
kmallocunscoped catalog16:21
*** d0ugal has quit IRC16:21
kmalloci would love to see this.16:21
ayoungthat spec was approved, but then backlogged.  I brought it back to the front.16:21
ayoungAnd its on the agenda for later, I think16:21
kmallocjust point blank.16:21
ayoungwanna talk it through now?16:21
lbragstadcan we circle back if we have time?16:21
ayoung++16:21
kmalloc++16:21
ayoungjust know that it is there16:21
lbragstadok16:22
lbragstadayoung looks like you have something for read-only role?16:22
ayoungso...sort of16:22
ayoungit is more than just that16:22
kmallocquick backtrack, caching is questionable in a couple ways for py316:22
kmallocjust fyi16:22
kmallocit will "work"... ish16:22
kmalloci need to revisit pymemcache16:22
*** d0ugal has joined #openstack-meeting-alt16:23
kmallocok we can move on for read-only role.16:23
ayoungActually, lets go in order16:23
ayoungunscoped token...short question16:23
ayoungI need to firgure out what to populate in that service catalog16:23
ayoungtests do all uuids, even for names,16:24
*** yamahata has quit IRC16:24
ayoungso I can't just strip out all but 'identity' service16:24
ayoungwhich is what I was origianlly planning on doing16:24
ayoungtalked it over with jamie last night:16:24
ayoungwe don't foresee anything in the catalog for unscoped tokens but the identity services16:24
kmallochave services (e.g. nova) fixed thier requirement for a project id in the path?16:24
kmallocbecause i know that was an initiative16:24
kmallocfor a while16:24
lbragstadi don't think nova uses the project id in the path anymore16:25
ayoungdoes that apply here?16:25
lbragstadcinder does though16:25
lbragstadwxy| opened a bug for that with system-scope16:25
ayoungthis is unscoped catalog only, so no cinder or nova uin the catalog anyway16:25
ayoungdifferent subject16:25
ayoungwhat I need to implement is the way to extend access to the catalog API to get the right catalog for unscoped tokens16:26
kmallocright, but if we get to the point we're not substituting in projects into the catalog paths...16:26
ayoungI'd like it to be something cacheable,16:26
kmallocwe can render the same catalog16:26
kmallocand not care.16:26
ayounggot it16:26
kmalloc:)16:27
ayoungso, I was thinking this might be a new (python) API call against the catalog backend16:27
ayoungbut...16:27
ayoungwe don't hardcode "identity" anywhere16:27
ayoungso...should that be a config option?16:27
kmallochm. no.16:27
ayounglike "unscoped_token_services":  [identity]16:27
ayoungthen...what is the "right" way in our world?16:28
kmallocyou can extend the service data in the api16:28
kmallocand add "unscoped_token_service: true" as optional16:28
ayoungI can do that16:28
kmallocthis isn't config, this is system management16:28
ayoungI wonder....16:28
kmallocso it should be something done in the api16:28
ayoungso, I had a spec for "subcatalogs by id"16:28
ayoungcould "unscoped" be an id16:29
ayoungand we define that as the identity services?16:29
kmallocyou could just use the current API16:29
ayounghttps://review.openstack.org/#/c/160909/16:29
kmallocor you could add a new route, auth/catalog/unscoped16:29
kmallocyou will need to inspect endpoints and any endpoints that have project/other subst in them will be omitted from the catalog16:30
kmallocbut i think this is pretty straightforward16:30
*** apetrich has joined #openstack-meeting-alt16:30
*** tssurya has joined #openstack-meeting-alt16:31
kmallocand we can start with the default (aka bootstrap) populating the unscoped flag for keystone16:31
ayoungOK  I think I got it.  I might add that approach to the spec16:31
ayoungwe can discuss it there, as I think it will be a big enough change that will merit API level review16:32
lbragstad++16:32
lbragstadanything else on your specs ayoung ?16:32
kmalloc++16:32
ayounglets move my policy stuff to the end16:32
lbragstadok16:32
lbragstad#topic federated auto-provision improvements16:33
*** openstack changes topic to "federated auto-provision improvements (Meeting topic: keystone)"16:33
kmallocyay!16:33
ayoungwhen is the edge call?16:33
ayoungI'll get it on my calendar16:33
kmallociirc 7am pacfic, so... 1400 utc?16:33
*** diablo_rojo has joined #openstack-meeting-alt16:33
lbragstadso - james penick (from oath) has clearance to open-source their federated auto-provisioning stuff16:33
kmalloc10am eastern16:33
kmalloci *think*16:34
lbragstadwe were talking about it today on the edge call16:34
kmallocwoot.16:34
lbragstad#link https://wiki.openstack.org/wiki/Edge_Computing_Group#Meetings16:34
kmallocthat makes me happy16:34
ayoungyeah, 1016:34
lbragstadyeah - no kidding16:34
kmallocoath's approach is the correct direction to push16:34
lbragstadso - he asked if it would be ok if he wrote a spec highlighting the gaps between our implementation and theirs16:34
kmallocthis makes it much easier.16:34
kmalloci would like that very much16:35
kmallocwe can evaluate from there how far we can push to that implementation without breaking API contracts16:35
kmallocand what would need massaging16:35
lbragstadi think he wants some help with it and said that he can try and get something proposed this week16:35
kmallocthe spec is key, and as much detail as he can provide16:35
ayoungProbably worth making sure we are in sync going in to the summit, too16:35
kmallocsome of us can chip in for the code16:35
lbragstadbut he was concerned that some of it would be "wrong"16:35
lbragstador that we might reject parts of it16:36
kmallocthe only real rejection i would see is if it breaks API contracts16:36
kmallocand we'd need to work around that in either case.16:36
lbragstadyeah - i'd just be curious to see the implementation and figure out the gaps, then go from there16:36
kmallocbased upon the edge work (and discussions), I can say I already err to the side of oath is doing it correctly16:37
kmallocit is a question of how do we make it work without breaking anyone else [might be extended/new apis] in upstream16:37
lbragstadbut - next week we're going to spend more time on it after james open-sources the code and proposes the specification16:37
lbragstadand that will happen during the edge call16:37
kmalloccool.16:37
kmalloci shall try to be there.16:37
lbragstadgood deal16:37
lbragstadthat's all i had for that topic16:37
kmallocbut 7am is rough because dogs/moring being started16:38
lbragstadany questions?16:38
ayoungI have the time blocked out.  I'll also make sure the web meeting tool works16:38
kmallocthis is zoom, yes?16:38
ayoungyeah16:38
lbragstadcorrect16:38
kmalloci think they finally have a web-only version16:38
kmallocwhich works for me16:38
kmallocvs segfaulting my browser16:38
ayoungHeh16:38
ayoungOK...policy?16:38
lbragstadyessir16:38
lbragstad#topic updated policy project16:39
*** openstack changes topic to "updated policy project (Meeting topic: keystone)"16:39
kmallocmy policy is i dislike policy16:39
kmalloc>.>16:39
kmalloc<.<16:39
* kmalloc couldn't resist16:39
ayoungLast week, we had a big internal RH conference, and I met a couple people that are doing custom policy for some of our customers16:39
ayoungspecifically in search of a read only role.  THey had it in an internal git repo.16:39
ayoungSo...I had long had and idea like this on my todo list, but they actually did it.16:39
ayoungI want to make this project "short term official"16:40
ayoungmeaning, eventually all the changes should make their way back to the proejcts16:40
ayoungbut in the meanwhile, we should have a unified set of policy files that people can use to enforce best practices16:40
lbragstaddoes this conflict with the default roles work or system scope/16:40
ayoungI think it complements it16:40
lbragstador is it a bandaid until that problem is fully fixed?16:41
ayounglbragstad, bigger than a band aid.  More like an iron lung16:41
ayoungLets call it a cast and crutches?16:41
lbragstadok16:41
ayoungI want to get a set of policies that we can use with TripleO, but...I think this group understands policy better16:42
ayounghere is what I have so far:16:42
ayoung#link https://pagure.io/openstack-access-policy/tree/common-rules16:42
ayoungthe master branch is what they have for osp1316:43
ayoungI took that and put a mini build system that lets us manage common rules, and built the policy.yaml files with the common sections pre-pended16:43
ayoungIt needs tests, like, desperately16:43
ayoungonce I can confirm that we can change the structure of the tests, but still keep things functioning, I want to start working toward mitigation for but 96869616:44
ayoungthat means first is_admin_project support16:44
ayoungand then service scoping16:44
kmallocso, i have a single concern16:44
lbragstadso - i'm already working on tests for system-scope and project-scope support16:45
ayoungI don't think we have service scoping in OSP 13.  If we do, I'll skip is_admin_project16:45
kmalloci dislike "official" projects that are just in place to be deconstructed and deleted long term16:45
kmallocit's ... not a huge concern16:45
ayounglbragstad, so, my idea here for tests is to use the oslopolicy-checker and a score card16:45
kmallocjust a "I don't like the hoops to just puill it apart"16:45
hrybackiI will confirm that casts have their place16:45
ayoungkmalloc, I hear you, but I also have no longer the will to try and get changes into every project out there16:46
ayoungthis needs to happen in a much faster time line16:46
kmallocand i am not saying i object to this project at all16:46
ayoungit will be an official project.  Just..not sure who will hold the office16:46
kmallocjust voicing the general "this feels icky" concern.16:46
ayoungI can see there being a long term project for the common rules16:46
kmallocwhich sometimes ick is needed to get from A to B16:46
kmalloc(just detouring a->i->c->k->y->b) ;)16:47
ayoungand, then the build system might be to pull the project specific rules from the projects to build the overall policy...or a common library that the projects pull in if we want them to have the definitiev rules in code16:47
ayoungthis gives us a place to work16:47
*** panda is now known as panda|off16:48
ayoungactually, since we put the rules in code, we really should have a common python library for common rules16:48
lbragstadthat would be oslo-policy imo16:48
ayoungnot quite16:48
ayoungoslo-policy is a rules engine16:48
ayoungbut , with the exception of the roles check, it is agnostic of content16:48
*** cloudrancher has quit IRC16:48
ayoungthis would be oslo-rbac or something like that16:48
kmallocthis could be like the vendor data in sdk16:49
ayoungyep16:49
kmallocsomething that could be extracted from policy eventually16:49
kmallocit might belong in olso-policy to start, for ease of deployment16:49
kmallocand access16:49
kmallocthat way it's available to everyone to start16:49
ayoungwe should probably namespace the common rules, then16:49
ayoungcommon:is_admin etc16:49
kmallocthat is in line with the consistent policy names lbragstad has proposed16:50
kmallocand i support namespacing common rules in a similar/consistent way16:50
lbragstadmerged*16:50
ayounghttps://bugs.launchpad.net/oslo.policy/+bug/179773916:51
openstackLaunchpad bug 1797739 in oslo.policy "checker CLI does not enumerate all rules for glance" [Undecided,In progress] - Assigned to Adam Young (ayoung)16:51
ayoungthat is what happens without namespacing16:51
lbragstad#link https://docs.openstack.org/oslo.policy/latest/user/usage.html#naming-policies16:51
lbragstadayoung glance doesn't have policy in code16:51
ayoungthay also don'16:51
ayoungthey also don't have namespacing of their rules.16:51
lbragstad#link https://review.openstack.org/#/c/501360/ needs to get picked back up16:52
kmalloctl;dr: namespace is consistent with the new "policy" for naming-policies. common rules should also be namespaced16:52
ayoungso...I don't think this set of policy files/build belongs in oslo.policy, but I am willing to post it there if I get support for it from the rest of the team16:52
kmallocmy only reasoning is for initial accessibility to the data16:53
*** yamahata has joined #openstack-meeting-alt16:53
kmallocif we are adding yet-another-thing, it is something that has to be added everywhere16:53
kmallocjust trying to make your life easier.16:53
kmallocbut if you want the harder route, by all means, propose it as a new thing :)16:54
lbragstad^ that's why i suggested it being in oslo.policy :)16:54
* kmalloc ^5's lbragstad ;)16:54
lbragstad(five minutes remaining)16:54
ayoungok...let me rethink how to structure it, so it fits in.  I guess a subdir, parallel to oslo-policy named...examples?16:55
ayoungIt feels wrong to call them examples, as they are supposed to be more production than that16:55
lbragstadis their main purpose to be referenced or consumed?16:55
ayoungconsumed16:55
lbragstad+116:55
ayoungcommon?16:55
kmalloci have one quick last thing before end of meeting16:55
lbragstadthen i'd think it's a sub-dir in oslo16:55
ayoungOK...I'll try to come up with a name16:56
lbragstadbut arguable within oslo.policy16:56
lbragstadkmalloc go ahead?16:56
kmallocflask -> Final patches proposed. There are 3 more "change the code" and some moving data, and then a lot of deleting. Please review. it's all done except for merging the last ~10 patches16:56
ayoungw00T!16:56
lbragstad#topic open discussion16:56
*** openstack changes topic to "open discussion (Meeting topic: keystone)"16:56
kmallocthe last one is -1800+ lines.16:56
kmallocyes it felt good.16:57
gagehugolol16:57
kmalloc+240, -182916:57
vishakhalbragstad: since its a open discussion now. I have some queries regarding unified limits16:57
lbragstadvishakha go ahead16:57
kmallocvishakha: 2min, if it doesn't sneak in we can discuss in -keystone right after16:57
* lbragstad notes that it's super late in japan16:58
vishakhalbragstad: I got your point for keeping -1 as min for limits16:58
vishakhalbragstad: what can be the max value set for default or resorce limit16:58
lbragstadi think that depends on the deployer16:59
lbragstadthey should be able to set that to whatever they want16:59
vishakhalbragstad: if I tries to set limit for around 1000000000 it gives me 500 server error16:59
lbragstadso i'm not sure we should implement an upper bound, if that's what you're asking16:59
vishakhayes exactly16:59
kmallocthe upper bound should be defined as what we expect the column length to be16:59
lbragstadyeah - which would be an implementation detail of sql17:00
kmallocso if we specify a unit32, it is the upper limit17:00
kmallocso we specify the defined limit as what we use for storage in the initial impl17:00
lbragstadwe can gracefully handle that, but that's about the best we could do i think17:00
kmallocpick a number that is within the limit and mark it as upperlimit17:00
kmalloc500 error is not correct behavior imo17:00
vishakhaok . So will raise a bug for it17:00
kmallocyeah17:00
lbragstadvishakha anything else on limits?17:01
kmallocshould be a bug and Bad Request/Validation error if it exceeds the limit17:01
vishakhaYeah one last thing I can set anything for resource name also?17:01
lbragstadyes17:01
*** jesusaur has quit IRC17:02
vishakhaI mean when II tries to list limit for invalid resource name it dont give any error17:02
lbragstadwe don't implement a set of resource - those are open-ended for service developers and operators to define17:02
vishakhaIt lists all the limits17:02
kmallocthere is again a length max on that data17:02
kmallocbut otherwise no special nameing requirements17:02
lbragstadvishakha i believe that is a filtering bug with query parameters GET /v3/limits?resource_name=foobars17:03
lbragstadreturns all limits17:03
lbragstadbecause the query parameter is ignored since it doesn't exist17:03
vishakhaok got it. Thanks this much for now in unified limits17:04
kmallocand that is correct behavior in keystone.17:04
lbragstadvishakha thanks for jumping in and helping out17:04
lbragstadthanks for coming everyone, good discussions today17:04
lbragstad#endmeeting17:04
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"17:04
openstackMeeting ended Tue Oct 16 17:04:18 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:04
openstackMinutes:        http://eavesdrop.openstack.org/meetings/keystone/2018/keystone.2018-10-16-16.00.html17:04
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/keystone/2018/keystone.2018-10-16-16.00.txt17:04
kmallocwell consistent behavior*17:04
openstackLog:            http://eavesdrop.openstack.org/meetings/keystone/2018/keystone.2018-10-16-16.00.log.html17:04
*** kopecmartin|ruck is now known as kopecmartin|off17:05
*** wxy| has quit IRC17:07
*** e0ne has joined #openstack-meeting-alt17:08
*** munimeha1 has quit IRC17:10
*** panda|off has quit IRC17:24
*** panda has joined #openstack-meeting-alt17:27
*** rdopiera has quit IRC17:50
*** e0ne has quit IRC17:59
*** clone99 has joined #openstack-meeting-alt18:02
*** diablo_rojo has quit IRC18:03
*** SimAloo has quit IRC18:05
*** diablo_rojo has joined #openstack-meeting-alt18:10
*** bhavikdbavishi has quit IRC18:11
*** e0ne has joined #openstack-meeting-alt18:15
*** gyee has joined #openstack-meeting-alt18:19
*** e0ne has quit IRC18:22
*** tssurya has quit IRC18:52
*** tsmith_ has joined #openstack-meeting-alt19:12
*** tsmith_ has quit IRC19:12
*** tsmith2 has quit IRC19:14
*** tsmith2 has joined #openstack-meeting-alt19:17
*** weshay has joined #openstack-meeting-alt19:24
*** raildo has quit IRC19:46
*** rmart04 has joined #openstack-meeting-alt20:05
*** rmart04 has quit IRC20:06
*** macza has quit IRC20:25
*** macza_ has joined #openstack-meeting-alt20:25
*** macza_ has quit IRC20:28
*** macza has joined #openstack-meeting-alt20:29
*** macza has quit IRC20:31
*** macza has joined #openstack-meeting-alt20:32
*** slaweq has quit IRC20:33
*** gagehugo has left #openstack-meeting-alt20:46
*** jesusaur has joined #openstack-meeting-alt20:48
*** erlon has quit IRC20:48
*** priteau has quit IRC20:57
*** priteau has joined #openstack-meeting-alt21:01
*** munimeha1 has joined #openstack-meeting-alt21:05
*** clone99 is now known as SimAloo21:29
*** SimAloo has quit IRC21:34
*** lbragstad is now known as lbragstad-50321:42
*** munimeha1 has quit IRC21:45
*** slaweq has joined #openstack-meeting-alt21:53
*** priteau has quit IRC22:03
*** slaweq has quit IRC22:09
*** slaweq has joined #openstack-meeting-alt22:11
*** timothyb89 has joined #openstack-meeting-alt22:30
*** pbourke has quit IRC22:35
*** pbourke has joined #openstack-meeting-alt22:35
*** slaweq has quit IRC22:44
*** rcernin has joined #openstack-meeting-alt22:49
*** macza has quit IRC23:01
*** hongbin has quit IRC23:07
*** slaweq has joined #openstack-meeting-alt23:11
*** slaweq has quit IRC23:44
*** erlon has joined #openstack-meeting-alt23:55
*** cloudrancher has joined #openstack-meeting-alt23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!