| *** tetsuro has joined #openstack-meeting-alt | 00:01 | |
| *** tetsuro_ has joined #openstack-meeting-alt | 00:06 | |
| *** tetsuro has quit IRC | 00:10 | |
| *** tetsuro_ has quit IRC | 00:16 | |
| *** yamamoto has joined #openstack-meeting-alt | 00:28 | |
| *** yamamoto has quit IRC | 00:42 | |
| *** yamamoto has joined #openstack-meeting-alt | 00:42 | |
| *** masahito has joined #openstack-meeting-alt | 01:10 | |
| *** ricolin has quit IRC | 01:17 | |
| *** gyee has quit IRC | 01:49 | |
| *** ijw has quit IRC | 02:16 | |
| *** ijw has joined #openstack-meeting-alt | 02:25 | |
| *** whoami-rajat__ has quit IRC | 02:48 | |
| *** hongbin has joined #openstack-meeting-alt | 03:15 | |
| *** carthaca has quit IRC | 03:31 | |
| *** ricolin has joined #openstack-meeting-alt | 03:33 | |
| *** masahito has quit IRC | 03:40 | |
| *** ajay33 has joined #openstack-meeting-alt | 03:41 | |
| *** sfernand has quit IRC | 04:22 | |
| *** hongbin has quit IRC | 04:39 | |
| *** vishalmanchanda has joined #openstack-meeting-alt | 04:47 | |
| *** strigazi has quit IRC | 04:52 | |
| *** strigazi has joined #openstack-meeting-alt | 04:54 | |
| *** strigazi has quit IRC | 05:12 | |
| *** ijw has quit IRC | 05:25 | |
| *** ijw has joined #openstack-meeting-alt | 05:25 | |
| *** ijw has quit IRC | 05:30 | |
| *** ijw has joined #openstack-meeting-alt | 05:33 | |
| *** ijw has quit IRC | 05:37 | |
| *** belmoreira has joined #openstack-meeting-alt | 05:56 | |
| *** ijw has joined #openstack-meeting-alt | 06:04 | |
| *** ijw has quit IRC | 06:09 | |
| *** carthaca has joined #openstack-meeting-alt | 06:18 | |
| *** ijw has joined #openstack-meeting-alt | 06:36 | |
| *** ijw has quit IRC | 06:40 | |
| ricolin | multi-arch SIG meeting in 15mins feel free to join https://etherpad.opendev.org/p/Multi-Arch-agenda | 06:45 |
|---|---|---|
| *** masahito has joined #openstack-meeting-alt | 06:50 | |
| *** tetsuro has joined #openstack-meeting-alt | 06:51 | |
| ricolin | #startmeeting multi_arch | 07:00 |
| openstack | Meeting started Tue Aug 18 07:00:41 2020 UTC and is due to finish in 60 minutes. The chair is ricolin. Information about MeetBot at http://wiki.debian.org/MeetBot. | 07:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 07:00 |
| *** openstack changes topic to " (Meeting topic: multi_arch)" | 07:00 | |
| openstack | The meeting name has been set to 'multi_arch' | 07:00 |
| ricolin | #topic roll call | 07:00 |
| *** openstack changes topic to "roll call (Meeting topic: multi_arch)" | 07:00 | |
| ricolin | o/ | 07:00 |
| *** tetsuro has quit IRC | 07:01 | |
| *** rcernin has quit IRC | 07:02 | |
| *** kevinz has joined #openstack-meeting-alt | 07:03 | |
| kevinz | o/ | 07:03 |
| ricolin | kevinz, hi | 07:03 |
| kevinz | hi ricolin | 07:03 |
| *** rcernin has joined #openstack-meeting-alt | 07:03 | |
| ricolin | kevinz, Thanks for join, I would like to discuss about devstack job with you and ianw | 07:05 |
| ricolin | #link https://review.opendev.org/#/c/708317/ | 07:05 |
| ricolin | #topic CI followup | 07:05 |
| *** openstack changes topic to "CI followup (Meeting topic: multi_arch)" | 07:05 | |
| kevinz | OK | 07:05 |
| *** slaweq has joined #openstack-meeting-alt | 07:06 | |
| kevinz | that is a bit tricky one, and I reduce the concurrency to 2 ,but still has error occurs | 07:06 |
| ricolin | I saw it passed now with certain failure | 07:06 |
| *** ijw has joined #openstack-meeting-alt | 07:07 | |
| kevinz | well sometimes it has error with reboot_hard | 07:07 |
| kevinz | but tempest team said that we should at least pass either reboot_soft or reboot_hard | 07:07 |
| kevinz | should pass one case | 07:08 |
| ricolin | what's that mean? | 07:08 |
| ricolin | to pass either one | 07:08 |
| kevinz | means that we should pass test_server_reboot_hard, or pass test_server_reboot_soft | 07:08 |
| kevinz | we can not skip both of them | 07:09 |
| ricolin | okay, you just remind me that our plan was to skip tests that keep failing | 07:09 |
| kevinz | apart from this error, after reduce the tempest_concurrency can make thing better | 07:10 |
| kevinz | yes | 07:10 |
| ricolin | how long will it take if we running with no concurrency at all? | 07:11 |
| *** slaweq has quit IRC | 07:11 | |
| kevinz | I don not tried, but concurrency=2 usually take 2.5h | 07:11 |
| *** ijw has quit IRC | 07:11 | |
| kevinz | Enlarge the Concurrency to higher we can see some OVS error, or Rabbitmq error, I believe this is due to low performance. | 07:13 |
| kevinz | Now I skip those cases: https://review.opendev.org/#/c/724239/ | 07:14 |
| ricolin | kevinz, looks like we need some update on devstack patch and this one | 07:16 |
| ricolin | #link https://review.opendev.org/#/c/724239/ | 07:16 |
| kevinz | yes | 07:16 |
| kevinz | I will update today | 07:16 |
| ricolin | Thx | 07:16 |
| *** slaweq has joined #openstack-meeting-alt | 07:16 | |
| kevinz | np | 07:16 |
| kevinz | I'm working on some schduler limitation, to make sure that the Nodepool provision vm is rational...I saw somethings they are tending to launch a lot of VM to the same 1 node | 07:18 |
| kevinz | And at that time the CI jobs could fail more cases... | 07:18 |
| ricolin | that's a bug for sure | 07:19 |
| ricolin | kevinz, is there a link to the issue? | 07:20 |
| kevinz | not yet, I just "observed" that cases.. | 07:21 |
| ricolin | got it, just curious, because it's not happen when I using Nodepool. Would love to learn why that's happening | 07:22 |
| *** lpetrut has joined #openstack-meeting-alt | 07:23 | |
| kevinz | OK, I think we should adjust the scheduler policy in Linaro Cluster | 07:24 |
| ricolin | yeah, the test performance might getting better if we can make sure the schedule not result all in one node | 07:25 |
| kevinz | Yes definitely | 07:26 |
| *** e0ne has joined #openstack-meeting-alt | 07:26 | |
| ricolin | for another CI job | 07:27 |
| ricolin | UT with py38 | 07:27 |
| ricolin | https://review.opendev.org/#/c/742090/ | 07:27 |
| ricolin | I guess it's reasonable to land it now | 07:28 |
| ricolin | #link https://review.opendev.org/#/c/742090/ | 07:28 |
| ricolin | ianw, please help to review it when you got time | 07:28 |
| ricolin | I guess the next task for that will be make sure we packaging with arm64 for services | 07:29 |
| *** whoami-rajat__ has joined #openstack-meeting-alt | 07:30 | |
| kevinz | cool ricolin | 07:30 |
| ricolin | after that, the job should be reasonable to ask projects to run it as non-voting check job | 07:31 |
| ricolin | Okay that's all I have for update | 07:31 |
| ricolin | Thanks kevinz for the update on devstack job | 07:32 |
| kevinz | np, thanks ricolin | 07:32 |
| ricolin | let's end the meeting here, thanks for join:) | 07:32 |
| ricolin | #endmeeting | 07:33 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 07:33 | |
| openstack | Meeting ended Tue Aug 18 07:33:20 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 07:33 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/multi_arch/2020/multi_arch.2020-08-18-07.00.html | 07:33 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/multi_arch/2020/multi_arch.2020-08-18-07.00.txt | 07:33 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/multi_arch/2020/multi_arch.2020-08-18-07.00.log.html | 07:33 |
| *** ijw has joined #openstack-meeting-alt | 07:38 | |
| *** hongbin has joined #openstack-meeting-alt | 07:39 | |
| *** tetsuro has joined #openstack-meeting-alt | 07:42 | |
| *** ijw has quit IRC | 07:43 | |
| *** hongbin has quit IRC | 07:43 | |
| *** yamamoto has quit IRC | 07:45 | |
| *** yamamoto has joined #openstack-meeting-alt | 07:45 | |
| *** yamamoto has quit IRC | 07:46 | |
| *** apetrich has joined #openstack-meeting-alt | 07:48 | |
| *** yamamoto has joined #openstack-meeting-alt | 07:55 | |
| *** rdopiera has joined #openstack-meeting-alt | 07:57 | |
| *** tetsuro has quit IRC | 08:00 | |
| *** tetsuro has joined #openstack-meeting-alt | 08:01 | |
| *** tetsuro has quit IRC | 08:06 | |
| *** ijw has joined #openstack-meeting-alt | 08:09 | |
| *** kitamura has joined #openstack-meeting-alt | 08:10 | |
| *** ijw has quit IRC | 08:14 | |
| *** kitamura has quit IRC | 08:33 | |
| *** rcernin has quit IRC | 08:34 | |
| *** priteau has joined #openstack-meeting-alt | 08:36 | |
| *** ijw has joined #openstack-meeting-alt | 08:40 | |
| *** ijw has quit IRC | 08:45 | |
| *** tetsuro has joined #openstack-meeting-alt | 08:52 | |
| *** tetsuro_ has joined #openstack-meeting-alt | 08:57 | |
| *** tetsuro has quit IRC | 08:59 | |
| priteau | #startmeeting blazar | 09:00 |
| openstack | Meeting started Tue Aug 18 09:00:08 2020 UTC and is due to finish in 60 minutes. The chair is priteau. Information about MeetBot at http://wiki.debian.org/MeetBot. | 09:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 09:00 |
| *** openstack changes topic to " (Meeting topic: blazar)" | 09:00 | |
| openstack | The meeting name has been set to 'blazar' | 09:00 |
| priteau | #topic Roll call | 09:00 |
| *** openstack changes topic to "Roll call (Meeting topic: blazar)" | 09:00 | |
| *** ijw has joined #openstack-meeting-alt | 09:00 | |
| priteau | Hi tetsuro_ | 09:02 |
| *** tosky has joined #openstack-meeting-alt | 09:03 | |
| tosky | o/ | 09:03 |
| priteau | Hi tosky | 09:03 |
| *** tetsuro has joined #openstack-meeting-alt | 09:03 | |
| priteau | Hi tetsuro | 09:04 |
| tetsuro | Hi | 09:04 |
| priteau | I hope you had a good holiday :-) | 09:05 |
| priteau | Let's get started | 09:05 |
| priteau | #topic Victoria OpenStack-wide Goals | 09:05 |
| *** openstack changes topic to "Victoria OpenStack-wide Goals (Meeting topic: blazar)" | 09:05 | |
| priteau | Some good progress! I fixed the failing tests with https://review.opendev.org/#/c/746188/ | 09:06 |
| *** tetsuro_ has quit IRC | 09:06 | |
| tosky | yay, thanks! | 09:06 |
| priteau | Now https://review.opendev.org/#/c/732697/ can be merged. | 09:06 |
| priteau | tetsuro: Could you please review ^^^ | 09:06 |
| priteau | tosky: Is there anything else required to complete the goal? | 09:07 |
| tosky | as far as I can see, there are no other legacy jobs in the blazar repositories | 09:08 |
| tosky | when it's merged, I will propose a backport to cover ussuri and the older releases; it is *not* part of the goal, but it may make your life easier in the future when handling the stable branches | 09:08 |
| priteau | Thank you! | 09:10 |
| priteau | We've also merged migrate-to-focal patches but the storyboard entry still shows as todo | 09:12 |
| priteau | #action Check status with gmann | 09:12 |
| priteau | That's all for Victoria OpenStack-wide goals | 09:14 |
| priteau | #topic Code review priorities | 09:14 |
| *** openstack changes topic to "Code review priorities (Meeting topic: blazar)" | 09:14 | |
| priteau | Review priority is still the oslo.context changes: https://review.opendev.org/#/c/731586/ | 09:15 |
| priteau | I've had a discussion with Chameleon contributors last week | 09:16 |
| priteau | Unfortunately one of them is on extended leave and the other very busy | 09:17 |
| priteau | We'll have to pick up their contributions if we want them merged | 09:17 |
| priteau | I'll see if I can find time to finish network reservation before the freeze | 09:17 |
| priteau | There are small patches which need work in blazar-nova and python-blazarclient, which will be the first to be released | 09:21 |
| priteau | I will go over them and request your reviews | 09:21 |
| *** masahito has quit IRC | 09:22 | |
| priteau | Anything else that you would like to highlight? | 09:24 |
| tetsuro | Nope | 09:24 |
| *** masahito has joined #openstack-meeting-alt | 09:25 | |
| priteau | In a few minutes there should be these two patches to review: | 09:27 |
| priteau | https://review.opendev.org/#/c/720976/ | 09:27 |
| priteau | https://review.opendev.org/#/c/734225/ | 09:27 |
| priteau | They're currently running Zuul checks | 09:27 |
| priteau | #topic AOB | 09:28 |
| *** openstack changes topic to "AOB (Meeting topic: blazar)" | 09:28 | |
| priteau | I've got something to share | 09:28 |
| priteau | I volunteered to help with CloudKitty which was abandoned and as a result I was promoted interim PTL | 09:29 |
| priteau | I'll still dedicate time to Blazar reviews | 09:29 |
| priteau | There's something else | 09:30 |
| priteau | #topic Summit and PTG | 09:30 |
| *** openstack changes topic to "Summit and PTG (Meeting topic: blazar)" | 09:30 | |
| priteau | There is a virtual summit planned for October 19-23 | 09:31 |
| priteau | Followed by PTG from October 26th to October 30th | 09:32 |
| priteau | We usually schedule Blazar meetings for one or two days during the PTG | 09:33 |
| priteau | However this year it's quite likely I will not be able to attend, as my wife and I are expecting a newborn for October 25! | 09:34 |
| *** ijw has quit IRC | 09:34 | |
| tosky | oooh :) | 09:36 |
| priteau | tetsuro: will you want to hold a meeting? | 09:36 |
| *** tetsuro has quit IRC | 09:36 | |
| *** tetsuro has joined #openstack-meeting-alt | 09:37 | |
| *** tetsuro has quit IRC | 09:39 | |
| priteau | tetsuro is having some connections issues | 09:39 |
| *** tetsuro has joined #openstack-meeting-alt | 09:39 | |
| priteau | tetsuro: in case you missed the last messages: http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-08-18-09.00.log.txt | 09:39 |
| tetsuro | Well I don't think I have time either this year. | 09:40 |
| priteau | OK, I'll ask the Chameleon folks as well | 09:41 |
| tetsuro | many congrats to priteau anyway | 09:41 |
| *** ijw has joined #openstack-meeting-alt | 09:41 | |
| priteau | Thanks | 09:42 |
| priteau | That's all I had to discuss this week | 09:43 |
| priteau | Anything else? | 09:43 |
| priteau | Let's wrap up then | 09:46 |
| priteau | Thanks for joining! | 09:46 |
| priteau | #endmeeting | 09:46 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 09:46 | |
| openstack | Meeting ended Tue Aug 18 09:46:58 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 09:47 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-08-18-09.00.html | 09:47 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-08-18-09.00.txt | 09:47 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/blazar/2020/blazar.2020-08-18-09.00.log.html | 09:47 |
| *** tetsuro has quit IRC | 09:48 | |
| *** ijw has quit IRC | 10:14 | |
| *** yamamoto has quit IRC | 10:15 | |
| *** yamamoto has joined #openstack-meeting-alt | 10:27 | |
| *** whoami-rajat__ has quit IRC | 10:38 | |
| *** ijw has joined #openstack-meeting-alt | 10:42 | |
| *** ijw has quit IRC | 10:47 | |
| *** masahito has quit IRC | 10:57 | |
| *** yamamoto has quit IRC | 11:04 | |
| *** ijw has joined #openstack-meeting-alt | 11:14 | |
| *** yamamoto has joined #openstack-meeting-alt | 11:16 | |
| *** yamamoto has quit IRC | 11:18 | |
| *** yamamoto has joined #openstack-meeting-alt | 11:18 | |
| *** ijw has quit IRC | 11:19 | |
| *** yamamoto has quit IRC | 11:25 | |
| *** ijw has joined #openstack-meeting-alt | 11:45 | |
| *** raildo has joined #openstack-meeting-alt | 11:48 | |
| *** ijw has quit IRC | 11:50 | |
| *** yamamoto has joined #openstack-meeting-alt | 11:57 | |
| *** dave-mccowan has joined #openstack-meeting-alt | 12:02 | |
| *** yamamoto has quit IRC | 12:02 | |
| *** rfolco has joined #openstack-meeting-alt | 12:04 | |
| *** enriquetaso has joined #openstack-meeting-alt | 12:08 | |
| *** ijw has joined #openstack-meeting-alt | 12:16 | |
| *** zzzeek has quit IRC | 12:19 | |
| *** ijw has quit IRC | 12:21 | |
| *** zzzeek has joined #openstack-meeting-alt | 12:23 | |
| *** ijw has joined #openstack-meeting-alt | 12:47 | |
| *** enriquetaso has quit IRC | 12:50 | |
| *** ijw has quit IRC | 12:52 | |
| *** whoami-rajat__ has joined #openstack-meeting-alt | 12:59 | |
| *** sfernand has joined #openstack-meeting-alt | 13:04 | |
| *** priteau has quit IRC | 13:06 | |
| *** enriquetaso has joined #openstack-meeting-alt | 13:13 | |
| *** yamamoto has joined #openstack-meeting-alt | 13:14 | |
| *** ijw has joined #openstack-meeting-alt | 13:15 | |
| *** yamamoto has quit IRC | 13:17 | |
| *** tmazur has joined #openstack-meeting-alt | 13:21 | |
| *** masahito has joined #openstack-meeting-alt | 13:29 | |
| *** ijw has quit IRC | 13:31 | |
| *** ijw has joined #openstack-meeting-alt | 13:31 | |
| *** hongbin has joined #openstack-meeting-alt | 13:35 | |
| *** vishakha has joined #openstack-meeting-alt | 13:43 | |
| *** ijw has quit IRC | 13:45 | |
| *** yamamoto has joined #openstack-meeting-alt | 13:52 | |
| *** yamamoto has quit IRC | 14:00 | |
| *** masahito has quit IRC | 14:02 | |
| *** masahito has joined #openstack-meeting-alt | 14:02 | |
| *** masahito has quit IRC | 14:07 | |
| *** ijw has joined #openstack-meeting-alt | 14:37 | |
| *** ajay33 has quit IRC | 14:38 | |
| *** lpetrut has quit IRC | 14:48 | |
| *** yamamoto has joined #openstack-meeting-alt | 14:51 | |
| *** belmoreira has quit IRC | 14:57 | |
| gagehugo | #startmeeting openstack-helm | 15:00 |
| openstack | Meeting started Tue Aug 18 15:00:03 2020 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| *** openstack changes topic to " (Meeting topic: openstack-helm)" | 15:00 | |
| openstack | The meeting name has been set to 'openstack_helm' | 15:00 |
| gagehugo | #link https://etherpad.opendev.org/p/openstack-helm-weekly-meeting agenda | 15:00 |
| stevthedev | GM | 15:00 |
| gagehugo | double booked today | 15:01 |
| stevthedev | Seems like this will be a short meeting at least | 15:03 |
| *** priteau has joined #openstack-meeting-alt | 15:04 | |
| *** vishalmanchanda has quit IRC | 15:06 | |
| *** yamamoto has quit IRC | 15:09 | |
| gagehugo | yeah sorry | 15:09 |
| gagehugo | #topic open discussion | 15:09 |
| *** openstack changes topic to "open discussion (Meeting topic: openstack-helm)" | 15:09 | |
| gagehugo | nothing on the agenda, stevthedev do you have anything? | 15:09 |
| stevthedev | No, nothing from me this week | 15:10 |
| gagehugo | thanks stevthedev! | 15:14 |
| gagehugo | #endmeeting | 15:14 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:14 | |
| openstack | Meeting ended Tue Aug 18 15:14:30 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:14 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack_helm/2020/openstack_helm.2020-08-18-15.00.html | 15:14 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack_helm/2020/openstack_helm.2020-08-18-15.00.txt | 15:14 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack_helm/2020/openstack_helm.2020-08-18-15.00.log.html | 15:14 |
| *** gyee has joined #openstack-meeting-alt | 15:16 | |
| *** ijw_ has joined #openstack-meeting-alt | 15:21 | |
| *** lpetrut has joined #openstack-meeting-alt | 15:23 | |
| *** ijw has quit IRC | 15:24 | |
| *** hongbin has quit IRC | 15:40 | |
| *** yamamoto has joined #openstack-meeting-alt | 15:41 | |
| *** yamamoto has quit IRC | 15:51 | |
| *** ajay33 has joined #openstack-meeting-alt | 16:13 | |
| *** ricolin has quit IRC | 16:19 | |
| *** ricolin has joined #openstack-meeting-alt | 16:29 | |
| *** whoami-rajat__ has quit IRC | 16:48 | |
| knikolla | #startmeeting keystone | 16:59 |
| openstack | Meeting started Tue Aug 18 16:59:14 2020 UTC and is due to finish in 60 minutes. The chair is knikolla. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:59 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:59 |
| *** openstack changes topic to " (Meeting topic: keystone)" | 16:59 | |
| openstack | The meeting name has been set to 'keystone' | 16:59 |
| knikolla | o/ | 16:59 |
| cmurphy | o/ | 17:00 |
| gagehugo | o/ | 17:00 |
| gagehugo | double booked meetings :( | 17:00 |
| vishakha | o/ | 17:00 |
| knikolla | hope everyone is doing alright! | 17:01 |
| knikolla | yeah, tuesday's are meeting hell for me as well. | 17:01 |
| knikolla | are there any items/topics that you'd like to discuss besides the review requests? | 17:04 |
| vishakha | I wanted to confirm and mark this #link https://bugs.launchpad.net/keystone/+bug/1305566 bug as invalid, since we dont store tokens anymore | 17:05 |
| openstack | Launchpad bug 1305566 in OpenStack Identity (keystone) "the token still can be used if the EC2 credential has been deleted" [Low,Confirmed] | 17:05 |
| gagehugo | Is there any way we can change https://github.com/openstack/keystone/blob/106b28ad4c30948c293dc9200adb908893b24a35/keystone/common/fernet_utils.py#L69 to not emit on every single authentication? | 17:05 |
| cmurphy | vishakha: i think that is still worth investigating, you can replace "deleted" with "revoked" and it would be a valid concern | 17:06 |
| cmurphy | gagehugo: chmod 700 /etc/keystone/fernet-keys ? | 17:07 |
| knikolla | why is it world readable? | 17:07 |
| gagehugo | We have it all containerized | 17:07 |
| gagehugo | the keys are mounted separately in a read-only filesystem | 17:08 |
| vishakha | cmurphy: sure, should I register another bug for revocation ? | 17:08 |
| vishakha | or is it fine to explain investigation in the comment section for revocation? | 17:08 |
| cmurphy | vishakha: no, it's not a different bug so it doesn't need a new bug report, in either case it's still about the validity of the token | 17:09 |
| vishakha | cmurphy: okay, thanks | 17:10 |
| cmurphy | gagehugo: you could still have the mode set correctly though? | 17:10 |
| gagehugo | maybe, is there a reference for when the actual key dir is mounted separately in k8s as opposed to just a VM? | 17:13 |
| gagehugo | volume-mounted* | 17:13 |
| gagehugo | part of the issue is we have it all setup as readOnlyRootFilesystem and a specific "keystone" user that runs the service in the container | 17:14 |
| knikolla | is this through openstack-helm? | 17:15 |
| gagehugo | yup | 17:16 |
| gagehugo | It's not really an "issue" just more of an annoyance | 17:16 |
| cmurphy | hmm i guess there's not really a native way to set the mode in the volume mount in k8s but there are examples of running an init container that runs chmod on it | 17:17 |
| gagehugo | might have to chown it too | 17:17 |
| gagehugo | and hope it doesn't break the rotation job lol | 17:18 |
| knikolla | given symmetric encryption, that does seem like the appropriate log level. | 17:18 |
| knikolla | maybe not every authentication though. | 17:18 |
| knikolla | might be a startup or keystone doctor thing. | 17:18 |
| cmurphy | regardless i'm not sure it's reasonable to change that log message because i think it has to dynamically load keys on every auth so it has to validate the repo every time | 17:18 |
| gagehugo | It's totally a valid security concern\ | 17:18 |
| gagehugo | but imo more on a VM deployment than something that is containerized | 17:18 |
| gagehugo | lemme look into going the utility/init container route | 17:19 |
| gagehugo | I was just curious | 17:19 |
| knikolla | gagehugo: lemme know what you find | 17:20 |
| gagehugo | hopefully I find more time to test things haha | 17:21 |
| knikolla | i've been trying to play a bit more with k8s, so i might give it a go as well. | 17:22 |
| bnemec | You could potentially make that a warning with a once filter. | 17:24 |
| knikolla | #topic Review Requests | 17:27 |
| *** openstack changes topic to "Review Requests (Meeting topic: keystone)" | 17:27 | |
| vishakha | I got few requests | 17:28 |
| cmurphy | https://review.opendev.org/686305 and all it's depends-on (some are in tempest) | 17:28 |
| vishakha | #link https://review.opendev.org/#/c/737225/ | 17:28 |
| *** tmazur has quit IRC | 17:28 | |
| vishakha | #link https://review.opendev.org/#/c/745376/ | 17:28 |
| vishakha | #link https://review.opendev.org/#/c/731087/ | 17:29 |
| vishakha | #link https://review.opendev.org/#/c/746049/ | 17:29 |
| *** lpetrut has quit IRC | 17:29 | |
| vishakha | #link https://review.opendev.org/#/c/745112/ | 17:29 |
| knikolla | Thanks. I'll be going through all of them after the meeting. | 17:30 |
| knikolla | #topic Bugs | 17:35 |
| *** openstack changes topic to "Bugs (Meeting topic: keystone)" | 17:35 | |
| knikolla | I haven't checked Launchpad in the past week or so. | 17:35 |
| knikolla | Anything worth discussing? | 17:35 |
| knikolla | #topic Open Floor | 17:40 |
| *** openstack changes topic to "Open Floor (Meeting topic: keystone)" | 17:40 | |
| knikolla | thanks all for coming! have a great rest of the week. | 17:46 |
| knikolla | #endmeeting | 17:46 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 17:46 | |
| openstack | Meeting ended Tue Aug 18 17:46:51 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 17:46 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone/2020/keystone.2020-08-18-16.59.html | 17:46 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone/2020/keystone.2020-08-18-16.59.txt | 17:46 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/keystone/2020/keystone.2020-08-18-16.59.log.html | 17:46 |
| *** _erlon_ has joined #openstack-meeting-alt | 18:17 | |
| *** lamt has quit IRC | 19:01 | |
| *** jopdorp has quit IRC | 19:01 | |
| *** rajinir has quit IRC | 19:01 | |
| *** jopdorp has joined #openstack-meeting-alt | 19:04 | |
| *** rajinir has joined #openstack-meeting-alt | 19:08 | |
| *** dustinc has joined #openstack-meeting-alt | 19:39 | |
| *** priteau has quit IRC | 19:44 | |
| *** vishakha has quit IRC | 19:52 | |
| *** e0ne has quit IRC | 20:21 | |
| *** e0ne has joined #openstack-meeting-alt | 20:26 | |
| *** rdopiera has quit IRC | 20:29 | |
| *** e0ne has quit IRC | 20:33 | |
| *** ajay33 has quit IRC | 20:58 | |
| *** _erlon_ has quit IRC | 21:12 | |
| *** raildo has quit IRC | 21:14 | |
| *** rcernin has joined #openstack-meeting-alt | 21:19 | |
| *** rcernin has quit IRC | 21:35 | |
| *** enriquetaso has quit IRC | 21:39 | |
| *** yamamoto has joined #openstack-meeting-alt | 21:45 | |
| *** rcernin has joined #openstack-meeting-alt | 22:09 | |
| *** tosky has quit IRC | 22:18 | |
| *** yamamoto has quit IRC | 22:19 | |
| *** rcernin has joined #openstack-meeting-alt | 22:33 | |
| *** dviroel has quit IRC | 22:43 | |
| *** srwilkers has quit IRC | 22:43 | |
| *** knikolla has quit IRC | 22:43 | |
| *** timirnich has quit IRC | 22:44 | |
| *** timirnich has joined #openstack-meeting-alt | 22:51 | |
| *** dviroel has joined #openstack-meeting-alt | 22:55 | |
| *** srwilkers has joined #openstack-meeting-alt | 22:55 | |
| *** knikolla has joined #openstack-meeting-alt | 22:56 | |
| *** smyers has quit IRC | 23:26 | |
| *** slaweq has quit IRC | 23:33 | |
| *** smyers has joined #openstack-meeting-alt | 23:36 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!