| *** jinyuanliu has quit IRC | 00:03 | |
| *** jinyuanliu has joined #openstack-meeting-alt | 00:04 | |
| *** knomura has joined #openstack-meeting-alt | 00:21 | |
| *** knomura has quit IRC | 00:25 | |
| *** sfernand has quit IRC | 00:32 | |
| *** miniroy has quit IRC | 00:53 | |
| *** jinyuanliu has quit IRC | 01:33 | |
| *** jinyuanliu has joined #openstack-meeting-alt | 01:34 | |
| *** baojg has joined #openstack-meeting-alt | 01:51 | |
| *** enriquetaso has quit IRC | 02:12 | |
| *** dviroel has quit IRC | 02:13 | |
| *** macz_ has quit IRC | 02:15 | |
| *** rcernin has joined #openstack-meeting-alt | 02:39 | |
| *** carloss has quit IRC | 03:06 | |
| *** reddy has joined #openstack-meeting-alt | 03:19 | |
| *** reddy1 has joined #openstack-meeting-alt | 03:20 | |
| *** reddy has quit IRC | 03:24 | |
| *** macz_ has joined #openstack-meeting-alt | 03:33 | |
| *** macz_ has quit IRC | 03:38 | |
| *** reddy1 has quit IRC | 03:53 | |
| *** vishalmanchanda has joined #openstack-meeting-alt | 05:19 | |
| *** whoami-rajat__ has joined #openstack-meeting-alt | 05:23 | |
| *** ricolin has quit IRC | 05:28 | |
| *** ricolin_ has joined #openstack-meeting-alt | 05:45 | |
| *** yonglihe has quit IRC | 05:57 | |
| *** zzzeek has quit IRC | 07:07 | |
| *** zzzeek has joined #openstack-meeting-alt | 07:08 | |
| *** lpetrut has joined #openstack-meeting-alt | 07:11 | |
| *** slaweq has joined #openstack-meeting-alt | 07:15 | |
| *** e0ne has joined #openstack-meeting-alt | 07:26 | |
| *** ralonsoh has joined #openstack-meeting-alt | 07:36 | |
| *** yamamoto has quit IRC | 08:26 | |
| *** tosky has joined #openstack-meeting-alt | 08:46 | |
| *** yamamoto has joined #openstack-meeting-alt | 08:55 | |
| *** yamamoto has quit IRC | 09:02 | |
| *** yamamoto has joined #openstack-meeting-alt | 09:05 | |
| *** rcernin has quit IRC | 09:07 | |
| *** yamamoto has quit IRC | 09:12 | |
| *** rcernin has joined #openstack-meeting-alt | 09:17 | |
| *** yamamoto has joined #openstack-meeting-alt | 09:21 | |
| *** yamamoto has quit IRC | 09:22 | |
| *** derekh has joined #openstack-meeting-alt | 09:22 | |
| *** rcernin has quit IRC | 09:25 | |
| *** rcernin has joined #openstack-meeting-alt | 09:43 | |
| *** yamamoto has joined #openstack-meeting-alt | 09:49 | |
| *** yamamoto has quit IRC | 09:55 | |
| *** rdopiera has joined #openstack-meeting-alt | 09:56 | |
| *** ricolin_ has quit IRC | 10:05 | |
| *** Jamison has joined #openstack-meeting-alt | 10:06 | |
| *** Jamison has quit IRC | 10:09 | |
| *** yamamoto has joined #openstack-meeting-alt | 10:09 | |
| *** e0ne has quit IRC | 10:14 | |
| *** e0ne_ has joined #openstack-meeting-alt | 10:14 | |
| *** baojg has quit IRC | 10:35 | |
| *** baojg has joined #openstack-meeting-alt | 10:35 | |
| *** baojg has quit IRC | 10:45 | |
| *** dviroel has joined #openstack-meeting-alt | 10:47 | |
| *** rcernin has quit IRC | 10:48 | |
| *** rcernin has joined #openstack-meeting-alt | 10:53 | |
| *** rcernin has quit IRC | 10:57 | |
| *** ricolin_ has joined #openstack-meeting-alt | 11:15 | |
| *** jinyuanliu has quit IRC | 11:17 | |
| *** jinyuanliu has joined #openstack-meeting-alt | 11:18 | |
| *** carloss has joined #openstack-meeting-alt | 11:27 | |
| *** rcernin has joined #openstack-meeting-alt | 11:49 | |
| *** sangeet has joined #openstack-meeting-alt | 12:02 | |
| *** yamamoto has quit IRC | 12:38 | |
| *** Dantalio- has joined #openstack-meeting-alt | 13:01 | |
| *** Dantalion has quit IRC | 13:02 | |
| *** yamamoto has joined #openstack-meeting-alt | 13:22 | |
| *** yamamoto has quit IRC | 13:34 | |
| *** enriquetaso has joined #openstack-meeting-alt | 13:35 | |
| *** e0ne_ has quit IRC | 13:42 | |
| *** rcernin has quit IRC | 13:43 | |
| *** senrique_ has joined #openstack-meeting-alt | 14:02 | |
| *** enriquetaso has quit IRC | 14:02 | |
| *** ricolin_ has quit IRC | 14:04 | |
| *** ricolin has joined #openstack-meeting-alt | 14:05 | |
| *** reddy has joined #openstack-meeting-alt | 14:07 | |
| *** reddy1 has joined #openstack-meeting-alt | 14:11 | |
| *** reddy has quit IRC | 14:12 | |
| *** sangeet has quit IRC | 14:20 | |
| *** chuan137 has joined #openstack-meeting-alt | 14:28 | |
| *** tmazur has joined #openstack-meeting-alt | 14:54 | |
| *** cliffparsons has quit IRC | 14:55 | |
| *** cliffparsons has joined #openstack-meeting-alt | 14:55 | |
| *** andrebeltrami has joined #openstack-meeting-alt | 14:57 | |
| *** ecsantos has joined #openstack-meeting-alt | 15:00 | |
| *** felipe_rodrigues has joined #openstack-meeting-alt | 15:00 | |
| gouthamr | #startmeeting manila | 15:00 |
|---|---|---|
| openstack | Meeting started Thu Feb 4 15:00:46 2021 UTC and is due to finish in 60 minutes. The chair is gouthamr. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| *** openstack changes topic to " (Meeting topic: manila)" | 15:00 | |
| openstack | The meeting name has been set to 'manila' | 15:00 |
| dviroel | o/ | 15:00 |
| carloss | o/ | 15:00 |
| maaritamm | o/ | 15:00 |
| carthaca | hi | 15:00 |
| andrebeltrami | hi | 15:01 |
| vhari | o/ | 15:01 |
| gouthamr | courtesy ping: ganso vkmc lseki carloss tbarron felipe_rodrigues esantos | 15:01 |
| felipe_rodrigues | o/ | 15:01 |
| tbarron | yo! | 15:01 |
| gouthamr | beat you by a second, felipe_rodrigues | 15:01 |
| tbarron | io | 15:01 |
| chuan137 | hi | 15:01 |
| gouthamr | hello everyone! thanks for joining in! | 15:01 |
| ecsantos | o/ | 15:02 |
| gouthamr | hey there chuan137! don't believe we have met, but thanks for the os-profiler reviews! | 15:02 |
| *** thefuture_ has joined #openstack-meeting-alt | 15:02 | |
| gouthamr | here's the agenda for today: https://wiki.openstack.org/wiki/Manila/Meetings#Next_meeting | 15:02 |
| chuan137 | thanks, am colleague of carthaca | 15:02 |
| gouthamr | lets get started | 15:02 |
| gouthamr | chuan137: nice, welcome! | 15:03 |
| gouthamr | #topic Announcements | 15:03 |
| *** openstack changes topic to "Announcements (Meeting topic: manila)" | 15:03 | |
| gouthamr | as you're aware, today's the new driver submission deadline | 15:03 |
| *** disap has joined #openstack-meeting-alt | 15:03 | |
| vkmc | o/ | 15:04 |
| disap | o/ | 15:04 |
| gouthamr | we have one driver that's met the deadline a few weeks ago, and is going through reviews | 15:04 |
| gouthamr | #link https://review.opendev.org/768590 | 15:04 |
| gouthamr | thanks for reviewing dviroel carloss | 15:05 |
| *** derekh has quit IRC | 15:05 | |
| dviroel | yep, just added a comment about its CI | 15:05 |
| gouthamr | looks good there, we may need to push the other two that were targeted for this release to Xena | 15:05 |
| dviroel | It is reporting Succeeded, but its failing in some tests | 15:05 |
| dviroel | nothing that can be fixed in the following weeks, i think | 15:06 |
| dviroel | s/can/can't | 15:06 |
| gouthamr | nice, that's a relief | 15:06 |
| gouthamr | good catch, dviroel | 15:06 |
| gouthamr | next week is our feature proposal freeze | 15:07 |
| gouthamr | #link: https://releases.openstack.org/wallaby/schedule.html (Wallaby release schedule) | 15:07 |
| gouthamr | per the schedule: "All new Manila features must be proposed and substantially completed, with unit, functional and integration tests by the end of the week." | 15:07 |
| gouthamr | i know a number of things are in flight, so as we've said here before, reviewer attention at this point would be our biggest strength :) | 15:08 |
| *** cliffparsons has left #openstack-meeting-alt | 15:08 | |
| dviroel | we still have a feature to propose | 15:08 |
| dviroel | isn't a 14k lines change this time | 15:09 |
| dviroel | :) | 15:09 |
| carloss | hehe | 15:09 |
| gouthamr | that's always good to hear | 15:09 |
| gouthamr | that's all for announcements today, a slew of end-of-release activity should begin soon | 15:10 |
| gouthamr | oh wait, i had another - if you're relying on upstream releases for stable branches, we have a few that went out last week: | 15:11 |
| gouthamr | #link http://lists.openstack.org/pipermail/release-announce/2021-February/010565.html (manila 9.1.5 (train)) | 15:11 |
| gouthamr | #link http://lists.openstack.org/pipermail/release-announce/2021-February/010567.html (manila 10.0.2 (ussuri)) | 15:11 |
| gouthamr | #link http://lists.openstack.org/pipermail/release-announce/2021-February/010566.html (manila 11.0.1 (victoria)) | 15:11 |
| dviroel | 👏 | 15:13 |
| gouthamr | i think we should expect a refresh with more bugfixes that are in the pipeline around m-3 (4 weeks from now) | 15:13 |
| gouthamr | any other announcements for today? | 15:13 |
| gouthamr | #topic OpenStackSDK spec review | 15:14 |
| *** openstack changes topic to "OpenStackSDK spec review (Meeting topic: manila)" | 15:14 | |
| gouthamr | this is a short one | 15:15 |
| gouthamr | as you're aware, we embarked on adding manila API support in openstacksdk earlier in the cycle | 15:15 |
| gouthamr | driven by three senior year students at Boston University | 15:16 |
| gouthamr | they've submitted a release-independent specification here: | 15:16 |
| gouthamr | #link https://review.opendev.org/c/openstack/manila-specs/+/768516 (Add Manila Support on OpenStack SDK) | 15:17 |
| gouthamr | the spec includes a link to the task tracker, and highlights the APIs intended to be addressed, by priority determined by them | 15:17 |
| gouthamr | i'd like for more eyes on this | 15:18 |
| gouthamr | we're still targeting to get a few things merged in wallaby, albeit the deadline's fast approaching | 15:19 |
| gouthamr | #link https://review.opendev.org/q/topic:%22openstacksdk-manila-support%22 | 15:20 |
| gouthamr | ^ if you're interested in helping with reviews, that's the gerrit topic for patches :) | 15:20 |
| *** ecsantos has quit IRC | 15:21 | |
| gouthamr | that's what i had on the topic | 15:21 |
| gouthamr | you can reach out to me/vkmc/maaritamm with questions at the moment, the students have no irc bouncers yet, but we meet with them regularly | 15:22 |
| gouthamr | in related news, they've been working with maaritamm to propose bugfixes in manilaclient/OSC and learning a lot | 15:23 |
| *** lpetrut has quit IRC | 15:23 | |
| tbarron | maaritamm++ | 15:24 |
| gouthamr | cool, that's all about $topic - thank you for reviews! :) | 15:24 |
| gouthamr | #topic Dropping project_id from API URLs | 15:24 |
| *** openstack changes topic to "Dropping project_id from API URLs (Meeting topic: manila)" | 15:24 | |
| vkmc | maaritamm++ | 15:24 |
| *** ecsantos has joined #openstack-meeting-alt | 15:25 | |
| gouthamr | lbragstad was working with testing the secure rbac work in cinder, and he noticed that the service catalog for system users doesn't list the cinder endpoint | 15:26 |
| gouthamr | he started a discussion on the mailing list | 15:27 |
| gouthamr | #link http://lists.openstack.org/pipermail/openstack-discuss/2021-January/020103.html ([dev][cinder][keystone] Properly consuming system-scope in cinder) | 15:27 |
| gouthamr | interestingly, we have the same issue with manila | 15:27 |
| gouthamr | and we've discussed the question of removing the project_id in the API URLs in the past | 15:28 |
| gouthamr | there's code in the manila api that relies on this project_id - many API routes need it to be present | 15:29 |
| gouthamr | although, we never really use it | 15:29 |
| gouthamr | we do validate it however | 15:30 |
| gouthamr | when a project_id is present, we want to be sure the request is coming from who they say they are | 15:31 |
| gouthamr | #link https://opendev.org/openstack/manila/src/commit/39efc2bde81c2a0c747a491d3a778b822ca263b8/manila/api/openstack/wsgi.py#L816-L821 | 15:31 |
| gouthamr | but the authorization components ignore the project_id in the URL everywhere else in the API code | 15:31 |
| gouthamr | and they rely on the request context object that's constructed with the help of keystone and the token used by the caller | 15:32 |
| gouthamr | and in case you're running manila in a standalone mode, we set the project_id to "admin" so we can pass the validation above to conform to the URL structure | 15:33 |
| *** yamamoto has joined #openstack-meeting-alt | 15:33 | |
| gouthamr | for noauth, it doesn't really have to be "admin" - in our testing, we use "fake" and "openstack" - so really any string | 15:34 |
| gouthamr | the problem with having the project_id in the URL is that system users that interact with manila will not have one | 15:35 |
| gouthamr | system users are meant to operate outside of projects and domains | 15:36 |
| *** derekh has joined #openstack-meeting-alt | 15:36 | |
| tbarron | so we are insisting on project id in the url even though nowadays it is the keystone request context that is used, | 15:36 |
| gouthamr | +1 | 15:37 |
| tbarron | for example, to restrict regular project members acess to resources to the appropriate scope | 15:37 |
| tbarron | just checking my understading. | 15:37 |
| *** ecsantos has quit IRC | 15:38 | |
| gouthamr | yes - we have the scope and project information from the request context and we rely solely on that | 15:38 |
| gouthamr | to ensure RBAC on resources (APIs and database objects) | 15:39 |
| gouthamr | so, we could drop this project_id requirement from the URLs and not lose any important validation | 15:40 |
| tbarron | +1 | 15:40 |
| gouthamr | other projects that required project_id in the API URLs have removed it | 15:41 |
| gouthamr | notably, nova | 15:41 |
| gouthamr | #link https://docs.openstack.org/nova/latest/reference/api-microversion-history.html#id16 | 15:41 |
| gouthamr | #link https://opendev.org/openstack/nova/commit/1f16a763e793098b26f37110db35828024e44025 | 15:42 |
| gouthamr | the idea is to advertise API routes with and without project_id | 15:43 |
| gouthamr | since we cannot just drop the requirement altogether, this could break clients | 15:44 |
| gouthamr | and for making such major breaking changes, we'd need a new major version of the API | 15:44 |
| gouthamr | the reason i don't think that's warranted is because we can easily provide this compatibility, following nova's path and using our microversions framework | 15:45 |
| gouthamr | we signal to end users by increasing the API microversion | 15:45 |
| gouthamr | and let them know that if their cloud supports that microversion, it would mean that they don't need to use their project_id in the URLs | 15:46 |
| gouthamr | if they choose to, however, it wouldn't be a big deal, since it'll still be accepted by the service | 15:47 |
| gouthamr | and everything works as it is today | 15:47 |
| *** yamamoto has quit IRC | 15:47 | |
| gouthamr | including the validation that your the project_id derived from the caller's token matches the project_id that they provide in the URL | 15:47 |
| gouthamr | any thoughts/objections to this? | 15:48 |
| tbarron | well you already know I like this approach, but for the record. | 15:49 |
| dviroel | gouthamr: thanks for the clarification and for working on this | 15:49 |
| gouthamr | #link https://review.opendev.org/q/topic:%22bp%252Fremove-project-id-from-urls%22 | 15:49 |
| gouthamr | ^ these are the changes | 15:50 |
| tbarron | alternative approaches like hacking the client to fake a project in the url when it's not supplied by the user would just be a stop gap and | 15:50 |
| tbarron | leave holes for anyone not usint the right client | 15:50 |
| tbarron | using | 15:51 |
| gouthamr | +1 - that's true, and even with that case, keystone would not be able to give us the project_id with the token | 15:51 |
| gouthamr | so we'll have to modify the API code to allow system scope users to bypass the project_id validation | 15:51 |
| gouthamr | since we're not breaking anyone and dropping the project_id is desirable in the long run | 15:53 |
| gouthamr | i advocate for doing that instead | 15:53 |
| gouthamr | it'd be a pita if _every_ client/sdk/application had to fake a project ID | 15:54 |
| gouthamr | that sort of change breaks existing clients if they want to interact as system scope users | 15:54 |
| gouthamr | sorry we've spent a long time on this discussion | 15:55 |
| gouthamr | we can't get to the rest of our agenda today - which are regular items | 15:56 |
| gouthamr | with the few mins left, any further thoughts on $topic? | 15:56 |
| tbarron | Thanks for the expanation, gouthamr, should make review a lot easier. | 15:57 |
| gouthamr | you're welcome - i'm happy to answer questions, thank you for reviewing! | 15:58 |
| gouthamr | #topic Open Discussion | 15:58 |
| *** openstack changes topic to "Open Discussion (Meeting topic: manila)" | 15:58 | |
| gouthamr | last couple of minutes to kick start anything on record and take it to #openstack-manila :) | 15:58 |
| gouthamr | sorry about the loss of bug triage time, vhari | 15:59 |
| vhari | gouthamr, how about this new bug #link https://bugs.launchpad.net/manila/+bug/1914453 | 15:59 |
| openstack | Launchpad bug 1914453 in OpenStack Shared File Systems Service (Manila) "CephFS Native driver gets blacklisted during startup with Ceph Octopus " [Undecided,New] | 15:59 |
| gouthamr | ouch, we are testing with octopus | 16:00 |
| vhari | np, but maybe a good topic for openstack-manila :) | 16:00 |
| gouthamr | ack, thank you vhari | 16:00 |
| vhari | gouthamr, yw | 16:00 |
| gouthamr | we'll continue the triage in #openstack-manila | 16:00 |
| gouthamr | thanks everyone for joining, see you here next week | 16:01 |
| gouthamr | #endmeeting | 16:01 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 16:01 | |
| openstack | Meeting ended Thu Feb 4 16:01:08 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:01 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/manila/2021/manila.2021-02-04-15.00.html | 16:01 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/manila/2021/manila.2021-02-04-15.00.txt | 16:01 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/manila/2021/manila.2021-02-04-15.00.log.html | 16:01 |
| *** disap has left #openstack-meeting-alt | 16:01 | |
| *** macz_ has joined #openstack-meeting-alt | 16:03 | |
| *** macz_ has quit IRC | 16:03 | |
| *** reddy1 has quit IRC | 16:52 | |
| *** reddy has joined #openstack-meeting-alt | 16:52 | |
| *** openstack has joined #openstack-meeting-alt | 17:23 | |
| *** ChanServ sets mode: +o openstack | 17:23 | |
| *** vishalmanchanda has quit IRC | 17:38 | |
| *** zzzeek has quit IRC | 17:42 | |
| *** zzzeek has joined #openstack-meeting-alt | 17:44 | |
| *** rdopiera has quit IRC | 17:57 | |
| *** derekh has quit IRC | 18:00 | |
| *** hemna has quit IRC | 18:11 | |
| *** hemna has joined #openstack-meeting-alt | 18:13 | |
| *** ralonsoh has quit IRC | 18:18 | |
| *** chuan137 has quit IRC | 18:23 | |
| *** sfernand has joined #openstack-meeting-alt | 18:41 | |
| *** reddy1 has joined #openstack-meeting-alt | 18:50 | |
| *** reddy has quit IRC | 18:51 | |
| *** rcernin has joined #openstack-meeting-alt | 19:40 | |
| *** yamamoto has joined #openstack-meeting-alt | 19:44 | |
| *** rcernin has quit IRC | 19:45 | |
| *** yamamoto has quit IRC | 19:49 | |
| *** rcernin has joined #openstack-meeting-alt | 20:17 | |
| *** rcernin has quit IRC | 20:31 | |
| *** rcernin has joined #openstack-meeting-alt | 21:00 | |
| *** whoami-rajat__ has quit IRC | 21:10 | |
| *** rcernin has quit IRC | 21:39 | |
| *** yamamoto has joined #openstack-meeting-alt | 21:46 | |
| *** andrebeltrami has quit IRC | 21:47 | |
| *** yamamoto has quit IRC | 21:50 | |
| *** rcernin has joined #openstack-meeting-alt | 21:56 | |
| *** yamamoto has joined #openstack-meeting-alt | 22:16 | |
| *** lbragstad_ has joined #openstack-meeting-alt | 22:22 | |
| *** lbragstad has quit IRC | 22:24 | |
| *** rcernin has quit IRC | 22:26 | |
| *** rcernin has joined #openstack-meeting-alt | 22:26 | |
| *** yamamoto has quit IRC | 22:35 | |
| *** yamamoto has joined #openstack-meeting-alt | 22:35 | |
| *** slaweq has quit IRC | 23:03 | |
| *** lbragstad_ is now known as lbragstad | 23:03 | |
| *** tmazur has quit IRC | 23:13 | |
| *** lbragstad has quit IRC | 23:21 | |
| *** lbragstad has joined #openstack-meeting-alt | 23:23 | |
| *** sfernand has quit IRC | 23:59 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!