Tuesday, 2019-08-13

*** macz has quit IRC00:00
*** macz has joined #openstack-meeting-alt00:01
*** yamamoto has joined #openstack-meeting-alt00:02
*** macz has quit IRC00:04
*** macz has joined #openstack-meeting-alt00:15
*** macz has quit IRC00:18
*** markvoelker has quit IRC00:39
*** gyee has quit IRC00:40
*** markvoelker has joined #openstack-meeting-alt00:44
*** dave-mccowan has quit IRC00:58
*** ijw_ has joined #openstack-meeting-alt01:33
*** ijw has quit IRC01:36
*** ijw_ has quit IRC01:38
*** yamamoto has quit IRC01:55
*** yamamoto has joined #openstack-meeting-alt01:55
*** yamamoto has quit IRC01:59
*** yamamoto has joined #openstack-meeting-alt02:12
*** igordc has quit IRC02:17
*** igordc has joined #openstack-meeting-alt02:39
*** igordc has quit IRC02:55
*** yamamoto has quit IRC02:58
*** hongbin has joined #openstack-meeting-alt03:00
*** bhavikdbavishi has joined #openstack-meeting-alt03:05
*** bhavikdbavishi1 has joined #openstack-meeting-alt03:12
*** bhavikdbavishi has quit IRC03:14
*** bhavikdbavishi1 is now known as bhavikdbavishi03:14
*** rfolco has quit IRC03:27
*** yamamoto has joined #openstack-meeting-alt03:33
*** macz has joined #openstack-meeting-alt03:51
*** links has joined #openstack-meeting-alt03:55
*** macz has quit IRC03:55
*** macz has joined #openstack-meeting-alt03:56
*** macz has quit IRC03:57
*** macz has joined #openstack-meeting-alt03:57
*** macz has quit IRC04:01
*** macz has joined #openstack-meeting-alt04:02
*** carloss has quit IRC04:06
*** macz has quit IRC04:06
*** hongbin has quit IRC04:17
*** whoami-rajat has joined #openstack-meeting-alt04:18
*** yamamoto has quit IRC04:46
*** dave-mccowan has joined #openstack-meeting-alt04:56
*** absubram has joined #openstack-meeting-alt04:58
*** dave-mccowan has quit IRC05:01
*** igordc has joined #openstack-meeting-alt05:28
*** absubram has quit IRC05:34
*** igordc has quit IRC06:02
*** haixin has joined #openstack-meeting-alt06:11
*** yamamoto has joined #openstack-meeting-alt06:15
*** jtomasek has joined #openstack-meeting-alt06:26
*** yamamoto has quit IRC06:27
*** yamamoto has joined #openstack-meeting-alt06:42
*** yamamoto has quit IRC06:50
*** yamamoto has joined #openstack-meeting-alt06:59
*** yamamoto has quit IRC06:59
*** yamamoto has joined #openstack-meeting-alt06:59
*** yamamoto has quit IRC07:04
*** slaweq has joined #openstack-meeting-alt07:05
*** yamamoto has joined #openstack-meeting-alt07:06
*** tssurya has joined #openstack-meeting-alt07:16
*** tesseract has joined #openstack-meeting-alt07:17
*** rcernin has quit IRC07:21
*** kopecmartin|off is now known as kopecmartin07:29
*** macz has joined #openstack-meeting-alt07:46
*** macz has quit IRC07:50
*** macz has joined #openstack-meeting-alt07:57
*** macz has quit IRC07:59
*** ccamacho has joined #openstack-meeting-alt08:03
*** ccamacho has quit IRC08:03
*** ccamacho has joined #openstack-meeting-alt08:03
*** priteau has joined #openstack-meeting-alt08:04
*** derekh has joined #openstack-meeting-alt08:24
priteau#startmeeting blazar09:00
openstackMeeting started Tue Aug 13 09:00:04 2019 UTC and is due to finish in 60 minutes.  The chair is priteau. Information about MeetBot at http://wiki.debian.org/MeetBot.09:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.09:00
*** openstack changes topic to " (Meeting topic: blazar)"09:00
openstackThe meeting name has been set to 'blazar'09:00
priteau#topic Roll call09:00
*** openstack changes topic to "Roll call (Meeting topic: blazar)"09:00
*** ccamacho has quit IRC09:11
priteauNo one online today. I guess it's Obon in Japan.09:14
priteau#endmeeting09:14
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"09:14
openstackMeeting ended Tue Aug 13 09:14:46 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)09:14
openstackMinutes:        http://eavesdrop.openstack.org/meetings/blazar/2019/blazar.2019-08-13-09.00.html09:14
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/blazar/2019/blazar.2019-08-13-09.00.txt09:14
openstackLog:            http://eavesdrop.openstack.org/meetings/blazar/2019/blazar.2019-08-13-09.00.log.html09:14
*** priteau has quit IRC09:20
*** e0ne has joined #openstack-meeting-alt09:34
*** bhavikdbavishi has quit IRC10:04
*** rcernin has joined #openstack-meeting-alt10:09
*** yamamoto has quit IRC10:35
*** carloss has joined #openstack-meeting-alt11:07
*** yamamoto has joined #openstack-meeting-alt11:09
*** yamamoto has quit IRC11:10
*** yamamoto has joined #openstack-meeting-alt11:10
*** yamamoto has quit IRC11:17
*** yamamoto has joined #openstack-meeting-alt11:26
*** yamamoto has quit IRC11:26
*** yamamoto has joined #openstack-meeting-alt11:26
*** slaweq_ has joined #openstack-meeting-alt11:30
*** rcernin has quit IRC11:31
*** yamamoto has quit IRC11:31
*** slaweq has quit IRC11:33
*** yaawang has quit IRC11:47
*** yaawang has joined #openstack-meeting-alt11:48
*** yaawang has quit IRC11:53
*** yaawang has joined #openstack-meeting-alt11:55
*** beagles is now known as beagles_pto11:57
*** yamamoto has joined #openstack-meeting-alt12:18
*** yamamoto has quit IRC12:19
*** yamamoto has joined #openstack-meeting-alt12:19
*** rfolco has joined #openstack-meeting-alt12:26
*** priteau has joined #openstack-meeting-alt12:41
*** slaweq_ has quit IRC12:45
*** slaweq__ has joined #openstack-meeting-alt12:45
*** yamamoto has quit IRC12:45
*** raildo has joined #openstack-meeting-alt12:47
*** yamamoto has joined #openstack-meeting-alt13:14
*** bhavikdbavishi has joined #openstack-meeting-alt13:19
*** priteau has quit IRC13:20
*** yamamoto has quit IRC13:27
*** lbragstad has joined #openstack-meeting-alt13:32
*** slaweq__ is now known as slaweq13:33
*** ijw has joined #openstack-meeting-alt13:35
*** ijw has quit IRC13:39
*** bhavikdbavishi has quit IRC13:43
*** yamamoto has joined #openstack-meeting-alt13:47
*** links has quit IRC13:52
*** gagehugo has joined #openstack-meeting-alt13:55
*** whoami-rajat has quit IRC13:59
*** lbragstad has quit IRC14:02
*** whoami-rajat has joined #openstack-meeting-alt14:25
*** yamamoto has quit IRC14:29
*** links has joined #openstack-meeting-alt14:30
*** yamamoto has joined #openstack-meeting-alt14:55
*** yamamoto has quit IRC14:55
*** yamamoto has joined #openstack-meeting-alt14:56
*** dave-mccowan has joined #openstack-meeting-alt14:57
*** yamamoto has quit IRC14:58
*** yamamoto has joined #openstack-meeting-alt14:58
*** yamamoto has quit IRC14:58
*** yamamoto has joined #openstack-meeting-alt14:59
*** dave-mccowan has quit IRC15:04
*** yamamoto has quit IRC15:04
*** liuyulong has joined #openstack-meeting-alt15:17
*** links has quit IRC15:18
*** bhavikdbavishi has joined #openstack-meeting-alt15:18
*** links has joined #openstack-meeting-alt15:21
*** yamamoto has joined #openstack-meeting-alt15:22
*** yamamoto has quit IRC15:22
*** tssurya has quit IRC15:22
*** yamamoto has joined #openstack-meeting-alt15:22
*** yamamoto has quit IRC15:29
*** jbadiapa has joined #openstack-meeting-alt15:35
*** bhavikdbavishi has quit IRC15:43
*** bhavikdbavishi1 has joined #openstack-meeting-alt15:43
*** gyee has joined #openstack-meeting-alt15:44
*** bhavikdbavishi1 is now known as bhavikdbavishi15:46
*** macz has joined #openstack-meeting-alt15:52
*** vesper11 has quit IRC15:58
*** vesper11 has joined #openstack-meeting-alt16:00
cmurphy#startmeeting keystone16:00
openstackMeeting started Tue Aug 13 16:00:33 2019 UTC and is due to finish in 60 minutes.  The chair is cmurphy. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: keystone)"16:00
openstackThe meeting name has been set to 'keystone'16:00
cmurphy#link https://etherpad.openstack.org/p/keystone-weekly-meeting agenda16:00
cmurphyo/16:00
vishakhao/16:00
bnemeco/16:01
kmalloco/16:01
gagehugoo/16:01
*** markvoelker has quit IRC16:02
cmurphyhi everyone16:02
cmurphy#topic Shanghai Forum/PTG16:03
*** openstack changes topic to "Shanghai Forum/PTG (Meeting topic: keystone)"16:03
cmurphyI went ahead and responded to the foundation survey saying we don't need ptg space16:03
*** yamamoto has joined #openstack-meeting-alt16:03
kmallocbasically no one showing up?16:03
kmalloc=/16:03
cmurphybasically16:03
gagehugo:(16:03
cmurphyi am still moreorless planning on being there barring the usual uncertainty so can be around for ad hoc discussions16:03
bnemecSo no onboarding then?16:04
cmurphyno i was still planning on doing the onboarding16:04
cmurphyi guess i should clarify with them16:04
bnemecI think those moved to the PTG this time.16:04
bnemecI guess I don't know if they were going to be scheduled separately though.16:05
cmurphymaybe i can just request an hour for the onboarding16:05
cmurphythey didn't really mention the onboarding part in the survey email16:05
cmurphyregardless, i will still propose a session or two for the forum16:06
cmurphyand would like help coming up with topics16:06
cmurphy#link https://etherpad.openstack.org/p/keystone-shanghai-ptg ptg/forum etherpad16:06
cmurphywill also start planning the pre- and post- virtual ptgs soon16:07
cmurphyany questions or concerns?16:08
cmurphyor ideas? :)16:08
*** absubram has joined #openstack-meeting-alt16:09
cmurphy#topic Feature proposal freeze this week16:10
*** openstack changes topic to "Feature proposal freeze this week (Meeting topic: keystone)"16:10
cmurphy#link https://releases.openstack.org/train/schedule.html cycle schedule16:10
cmurphywe're still missing a few implementation proposals that are due this week16:10
cmurphy#link http://specs.openstack.org/openstack/keystone-specs/specs/keystone/train/expiring-group-memberships.html refreshable group membership16:11
cmurphy#link http://specs.openstack.org/openstack/keystone-specs/specs/keystone/train/resource-options-for-all.html resource options for all16:11
cmurphy#link http://specs.openstack.org/openstack/keystone-specs/specs/keystone/train/support-federated-attr.html federated attributes16:11
*** markvoelker has joined #openstack-meeting-alt16:12
gyeeexpiring group membership is not intend for LDAP groups right?16:12
cmurphygyee: correct, just federated users16:12
gyeek16:12
cmurphyunfortunately knikolla isn't here to discuss two of those16:12
cmurphykmalloc: any update on resource options?16:13
*** absubram_ has joined #openstack-meeting-alt16:13
kmallocit's slow going16:14
kmallocbecause i've had a lot of other things on my plate.16:15
kmalloci am carving some time out to land the migrations here soon16:15
kmallocand the rest of the code shuffle is getting easier.16:15
*** yamamoto has quit IRC16:15
*** absubram has quit IRC16:15
*** absubram_ is now known as absubram16:15
kmalloci think the approach i'm going to do is implement the new table and setup the scaffolding and *then* migrate user options16:15
*** yamamoto has joined #openstack-meeting-alt16:16
kmallocso we have the support for everything independant of the user options16:16
kmallocwhich ahs been the hard(est) part to put together16:16
cmurphythat sounds reasonable16:16
cmurphywould a 1-week extension give enough breathing room to help you with that?16:17
kmallocpossibly.16:17
cmurphyif we went forward with resource options just for roles as in https://review.opendev.org/666739 would that get seriously in the way of the migration work?16:21
cmurphykmalloc: ^16:24
*** macz has quit IRC16:26
cmurphyokay, well wrt expiring group membership and federated attributes, i will sync up with knikolla but my initial proposal is 1) drop federated attributes till next cycle 2) propose an extension for refreshable group membership16:27
*** haleyb has quit IRC16:27
cmurphyif needed16:27
kmallocyeah it probably would16:27
cmurphykmalloc: yeah i figured :/16:28
kmalloci can take on the resource options for roles if i get the other support done it should really be minimal code.16:28
kmallocthen adding immutable should be a very small patch.16:28
kmalloc;i'll do waht i can to get something up this week.16:28
cmurphyalright, thanks kmalloc16:29
cmurphyI will sync up with people by the end of the week and send an email if we need to propose to drop or extend things16:30
cmurphy#topic Noisy policy deprecation warnings16:31
*** openstack changes topic to "Noisy policy deprecation warnings (Meeting topic: keystone)"16:31
cmurphyso we landed the fix to get these out of the unit tests which is nice16:31
cmurphy#link https://review.opendev.org/67393316:31
cmurphyit didn't really help with the ci like i had hoped16:32
bnemec:-(16:32
cmurphyi suspect we need to revisit https://review.opendev.org/663065 and actually get the efficiency of our protection tests under control16:32
cmurphybut with regard to the operator-facing issues I proposed kind of a cop-out https://review.opendev.org/67494016:33
cmurphywondering if there are any concerns about that approach?16:33
cmurphywe tend to cargocult that warning message to every other policy so want to be sure we agree on it16:35
kmalloccmurphy: maybe we make the warning the generic one16:36
kmallocand debug run through each rule?16:36
kmallocand make sure the policy checker CLI emits verbose warnings16:36
kmallocdoesn't address CI things but addresses operator impact16:37
gyeehow did it impact ci? we can't handle large log files?16:37
kmallochard to read logs, stupid large logs, and slow because emitting tons of lines16:37
cmurphykmalloc: not sure what you mean by debug run16:37
cmurphygyee: the logs were around 150MB16:37
cmurphythe ci was sometimes choking on uploading them to the log server16:37
gyeemaybe we can setup a filter to optionally filter them out?16:38
kmalloccmurphy: emit the warning for each policy when in debug16:38
cmurphyand trying to load them in a browser caused the browser to crash16:38
cmurphygyee: we tried that, there are so many it's even more inefficinet16:38
kmalloccmurphy: emit only a generic "hey, we noticed some things, use X command to see more details" when in not-debug mode16:38
cmurphykmalloc: would we need to add a new thing to oslo.policy?16:38
kmalloccmurphy: and make sure the policy checker tool can emit full output of each rule16:39
kmalloccmurphy: we would need to adjust olso.policy16:39
kmalloccmurphy: for logging purposes, and for CI we would need to keep the "don't emit deprecation warnings" flag.16:39
kmallocthis feels like a debug level message vs a warning message to follow up on16:40
cmurphyokay, i can play around with that16:40
kmallocand the oslo policy checker tool can be very verbose.,16:40
kmallocand likely should be16:40
bnemecThe only thing is that debugging is probably when the log spam is most annoying.16:40
bnemecMaybe we should expose a verbose_deprecations option or something to make it explicit.16:40
kmallocor we crater this to trace level logging16:41
kmallocbut hard -2 on "verbose_deprecations"16:41
bnemecI thought we were trying to kill off trace?16:41
kmallocare we?16:41
cmurphyyeah i don't think we use trace any more16:41
kmallocor just make it a policy checker tool16:41
kmallocbut really -2 on verbose_deprecations.16:41
kmallocwarn that some policys are wonky (1 line) and make the checker tool emit verbose information16:42
kmallocand indicate the checker tool shgould be used to know what policys are in this state.16:42
kmallocpolicy-rules*16:42
bnemecYeah, I like that.16:42
gyeeI am kinda surprised that a log filter didn't work. I thought that's what its for.16:42
kmallocgyee: too many lines to parse16:43
*** macz has joined #openstack-meeting-alt16:43
kmallocgyee: it works, it makes CI runs 2-3x longer16:43
*** tesseract has quit IRC16:43
gyeeoh wow16:43
kmallocgyee: and that is a bigger issue than filtering is.16:43
cmurphyso one WARN that indicates something is wrong, a one-line DEBUG for each policy, and a detailed message in the policy checker?16:44
kmallocone warn that says use the policy checker tool16:44
kmallocand policy checker tool more verbose16:44
kmallocno debug for each policy16:44
*** kopecmartin is now known as kopecmartin|off16:44
bnemec+116:44
cmurphyokay16:45
kmallocwe can escalate that one warn up to error/critical as we move closer to finalizing the move16:45
cmurphysounds good to me16:45
cmurphy#topic review requests16:46
*** openstack changes topic to "review requests (Meeting topic: keystone)"16:46
cmurphyany other reviews to highlight?16:46
*** haleyb has joined #openstack-meeting-alt16:46
cmurphyguessing this one is a hard no? https://review.opendev.org/67530316:47
vishakhaSystem scope for endpoint group policies https://review.opendev.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bug/181873416:48
cmurphythanks for working on those vishakha16:48
gyee675303 is interesting16:49
gyeethat would mess up the API contract16:49
gyeeoh hey, they will be conveyed via "extras", kmalloc's favorite :-)16:50
*** e0ne has quit IRC16:51
kmallocdon't do that16:51
kmallocplease16:51
*** slaweq has quit IRC16:52
kmalloc-2, request for more information16:53
kmalloci want to know the use case and what is being solved rather than a "hey this is a thing"16:53
cmurphy++16:53
gyeeyeah, I agree16:54
cmurphyi'm also hoping someone not-me can reproduce the issues in https://review.opendev.org/674782 and https://review.opendev.org/674139 and help verify the fixes16:54
gyeeI'll take a look at 67478216:54
cmurphythanks gyee16:55
cmurphyrelevant ml post on that one http://lists.openstack.org/pipermail/openstack-discuss/2019-August/008210.html16:55
cmurphy#topic open floor16:55
*** openstack changes topic to "open floor (Meeting topic: keystone)"16:55
cmurphy5 minutes for any other topics?16:56
cmurphyno office hours after this16:56
gyee674139 is a good one. I've seen that error before. But didn't have the time to investigate how bad of leak that was.16:57
cmurphyit seems to make sense but i first couldn't verify the fix and now for some reason can't reproduce the bug16:58
cmurphyso just wanted someone to sanity check it16:58
gyeeyeah, a unit test would be nice16:59
cmurphy++16:59
cmurphytime's about up, thanks everyone16:59
cmurphy#endmeeting16:59
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"16:59
openstackMeeting ended Tue Aug 13 16:59:39 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:59
openstackMinutes:        http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-08-13-16.00.html16:59
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-08-13-16.00.txt16:59
openstackLog:            http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-08-13-16.00.log.html16:59
*** derekh has quit IRC17:00
*** jbadiapa has quit IRC17:12
*** gagehugo has left #openstack-meeting-alt17:17
*** frickler has joined #openstack-meeting-alt17:35
*** markvoelker has quit IRC18:12
*** markvoelker has joined #openstack-meeting-alt18:15
*** e0ne has joined #openstack-meeting-alt18:23
*** links has quit IRC18:32
*** bobmel has quit IRC18:35
*** diablo_rojo has joined #openstack-meeting-alt18:37
*** diablo_rojo has quit IRC18:47
*** diablo_rojo has joined #openstack-meeting-alt19:29
*** whoami-rajat has quit IRC19:33
*** slaweq has joined #openstack-meeting-alt19:34
*** bhavikdbavishi has quit IRC19:38
*** diablo_rojo has quit IRC20:00
*** ijw has joined #openstack-meeting-alt20:02
*** ijw has quit IRC20:04
*** ijw has joined #openstack-meeting-alt20:04
*** markvoelker has quit IRC20:10
*** diablo_rojo has joined #openstack-meeting-alt20:19
*** markvoelker has joined #openstack-meeting-alt20:28
*** e0ne has quit IRC20:38
*** jtomasek has quit IRC20:48
*** markvoelker has quit IRC21:07
*** raildo has quit IRC21:12
*** absubram has quit IRC21:26
*** absubram has joined #openstack-meeting-alt21:41
*** igordc has joined #openstack-meeting-alt21:52
*** slaweq has quit IRC22:10
*** markvoelker has joined #openstack-meeting-alt22:10
*** absubram has quit IRC22:14
*** markvoelker has quit IRC22:14
*** igordc has quit IRC22:28
*** igordc has joined #openstack-meeting-alt22:28
*** absubram has joined #openstack-meeting-alt22:29
*** igordc has quit IRC22:33
*** diablo_rojo has quit IRC22:41
*** carloss has quit IRC23:18
*** markvoelker has joined #openstack-meeting-alt23:25
*** dtrainor has quit IRC23:30
*** dtrainor has joined #openstack-meeting-alt23:32
*** macz has quit IRC23:32
*** ijw has quit IRC23:32
*** diablo_rojo has joined #openstack-meeting-alt23:35
*** markvoelker has quit IRC23:36
*** lseki has quit IRC23:40
*** diablo_rojo has quit IRC23:41

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!