Wednesday, 2025-06-25

*** mhen_ is now known as mhen01:52
qwebirc37524Hi @eharney, 06:26
qwebirc37524Is there a limitation in terms of programming language for cinder driver development? Can I call ansible scripts (playbooks) from vendor specific cinder code?06:27
jbernard#startmeeting cinder14:08
opendevmeetMeeting started Wed Jun 25 14:08:18 2025 UTC and is due to finish in 60 minutes.  The chair is jbernard. Information about MeetBot at http://wiki.debian.org/MeetBot.14:08
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:08
opendevmeetThe meeting name has been set to 'cinder'14:08
jbernard#topic roll call14:08
jbernardo/14:08
hvlcchao1o/14:08
raghavendrathi14:08
gireeshhi14:08
rosmaita0/14:08
sfernandhi14:08
* fungi added something to the agenda a few moments ago14:08
toskyo/14:09
skryhin_o/14:09
agamboao/14:09
sp-bmilanovo/14:09
jbernardok, welcome everyone14:11
jayaanand_o/14:11
jbernard#topic followup / barbican patches blocking stable/2025.114:12
jbernardraghavendrat, rosmaita: ^ it looks like we're still waiting for them to merge the requisite patches14:12
raghavendratyes, second +2 is required14:13
Saio/14:13
rosmaitai pinged doug, he is going to follow up on getting someone else to review those patches14:13
jbernardis there anything we can do, or just wait for them to follow up?14:14
jbernardrosmaita: thanks14:14
raghavendratcouple of days ago, i requested for review on the same in IRC chat barbican channel. mharley did acknowledge it14:16
jbernardwe could mark the job as non-voting if this doesn't get resolved soon14:17
gireeshhi core reviews, I also need +2 for my patch https://review.opendev.org/c/openstack/cinder/+/95148514:18
jbernardthat would be an alternative, i realize it's less desirable14:18
jbernardrosmaita: ^ what are your thoughts? is it resonable to set a deadline? i don't want this to be out there indefinately14:20
jayaanand_i have multiple PRs need your attention https://review.opendev.org/c/openstack/cinder/+/928486 14:21
jayaanand_https://review.opendev.org/c/openstack/cinder/+/94496414:21
jayaanand_https://review.opendev.org/c/openstack/cinder/+/95290014:21
rosmaitajbernard: well, we'd only have to make it non-voting for stable/2025.1 , so maybe that wouldn't be too bad14:21
rosmaitagireesh: jayaanand_: please stay on topic14:21
gireeshsure14:22
jayaanand_ok14:22
rosmaitai think we give them a day or so, and then go to the mailing list saying we're making the job non-voting 14:22
rosmaitato hopefully shame them into action 14:22
jbernardgireesh, jayaanand_: ack, if you can put them on the etherpad, that would help, htey're on my list but im completey swamped with downstream tasks this week, so my responses will be delayed quyite a bit i expect14:22
jbernardrosmaita: agree14:23
raghavendratthanks Brian & Jon. that would help14:23
jbernard#action consider marking barbican job non-voting if no progress this week14:24
SaiSorry to pitch in, I also need reviews for this patch Jon: https://review.opendev.org/c/openstack/cinder/+/95290414:24
jbernardSai: yes, see my reponse above14:25
jbernard#topic pep8 tests are failing stable/2025.114:25
jbernardraghavendrat: ^14:26
Sai> Sai: yes, see my reponse above14:26
SaiSure Jon, I am looking for the etherpad to update. Thanks.14:26
jbernardnp14:26
jbernardrosmaita: it looks like eric agreed with your comment on that patch14:26
jbernardhttps://review.opendev.org/c/openstack/cinder/+/95286214:26
raghavendratIt looks like this patch 952862 is also dependent on barbican patch in Epoxy14:27
rosmaitaeverything is!14:29
rosmaitanothing can merge to stable/2025.1 until the barbican thing is resolved14:29
jbernardoy14:31
jbernardok, 24 hours then14:31
sp-bmilanovdid I disconnect or did it get a bit quiet? :)14:35
jbernard#topic listing volumes via poilcy adjustments14:36
jbernardskryhin_: ^14:36
skryhin_hi, I previously mentioned this request in mailing list. we need to provide 3rd party tools/cmdb access to list all volumes using non-admin user.14:37
jbernardskryhin_: ok, can you provide more context? how can we help?14:39
jbernardwhile we're waiting, fungi, what are teh struggles?14:41
fungijust a quick revisit of something i mentioned in #openstack-cinder earlier today, the macrosan ci operator seems like they could use some guidance on adding their system's details to the wiki, they keep replacing the template and index on the main page rather than creating a new page and adding it to the index table14:41
fungii've had to roll back their wiki edits tice in recent months to restore the page14:42
fungier, twice14:42
jbernardok, are they present now?14:42
fungii have no idea, probably not14:42
jbernardfungi: how big are the changes? they know there's a preview before publish, right?14:42
jbernardfungi: also, thanks for the rollbacks14:43
fungii'd just rather not block their account, if someone on the cinder team has time to help them out instead14:43
fungithere is a preview feature, i think they're just misunderstanding/misreading the instructions since they've done it twice now14:44
jbernardfungi: sure, can they send me the changes?14:44
jbernardfungi: if i can get a diff, it shouldn't be too hard to do it once14:44
skryhin_currently, when a user with the SystemReader role attempts to use the all_tenants filter (e.g., via openstack volume list --all-projects), the request is blocked. we observe this occurring at the Cinder API layer, specifically within the remove_invalid_filter_options logic (reference: https://github.com/openstack/cinder/blob/stable/2024.1/cinder/volume/api.py#L667-L674). this prevents SystemReader from obtaining a system-wide view of vol14:44
skryhin_umes. Other OpenStack services, such as Nova, Keystone, and Neutron, have successfully implemented mechanisms or policy adjustments to allow a SystemReader role (when appropriately scoped) to access system-wide lists of resources without requiring full administrative privileges. for instance, Nova enables this for servers via the `os_compute_api:servers:index:get_all_tenants` policy for the SystemReader role. it would be highly beneficia14:44
skryhin_l if Cinder could adopt a similar logic or adapt its policy for `volume:get_all_tenants_filter`14:44
fungijbernard: the changes can be found in the wiki page history, or the link of their edits list i included in the agenda14:45
skryhin_jbernard: ok, can you provide more context? how can we help? - yes, please see above. thank you14:45
skryhin_in short: we want to provide access to read the info about all volumes on the cloud for non-admin role by adjusting policy.14:47
jbernardfungi: ok14:48
jbernard#action macrosan wiki update14:48
fungithanks!14:49
rosmaitaskryhin_: have you looked at https://docs.openstack.org/cinder/latest/configuration/block-storage/policy-config-HOWTO.html#example-configuring-a-read-only-administrator14:51
agamboaHey rosmaita, could you take another look at this patch: https://review.opendev.org/c/openstack/cinder/+/901318 ? We updated the release notes with your improvements14:53
skryhin_rosmaita: hm, sorry, not yet. I'll check it. thank you14:54
rosmaitaskryhin_: np ... i know we have too much reliance on admin context in our db layer, but i'm personally afraid to refactor it out of there until we have better test coverage14:55
harshHi.. Sorry for jumping in but we only have 4 mins left here. I have a doubt regarding the patch : [IBM SVf driver] Adding support for callhome plugin | https://review.opendev.org/c/openstack/cinder/+/951829 . We enabled the feature of callhome on the IBM SVf driver to know how many customers are using the IBM storage with openstack. 14:57
harshBut as this is a feature, we can't backport it to the older release. So we are wondering if there is something that can be done to backport this patch to atleast Antelope release ?14:57
rosmaitaagamboa: i think i already have a +2 on https://review.opendev.org/c/openstack/cinder/+/901318 ... were you thinking of a different patch14:57
skryhin_rosmaita: I understand that this is quite a sensitive topic. thanks again14:57
rosmaitaharsh: Antelope is in 'unmaintained' status, so we (the cinder team) doesn't do any backports to it ... but there is an unmaintained core team, you could ask them if they would be more lenient14:59
agamboarosmaita: oh, got it, thanks. Can I mark the comment resolved? Sorry, still new to gerrit, wasn't sure if I should let you resolve it15:00
harshCan we backport a feature ? 15:00
harshif the unmaintanied core team won't allow, can we backport it to Bobcat realease ?15:01
rosmaitaharsh: usually not, unless it's security related15:01
rosmaitaharsh: stable/bobcat was deleted a month or so ago, the farthest you can backport is caracal15:01
harshok thanks rosmaita :) 15:01
harshI will let my team know and see if caracal is okay or not. if not, will get in touch with the unmaintained core team.15:02
jbernardok, we're over time, last call everyone15:03
rosmaitawell, the unmaintained policy is that it's got to be in all the more recent branches before it will be accepted into unmaintained15:03
jbernard#endmeeting15:04
opendevmeetMeeting ended Wed Jun 25 15:04:41 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:04
opendevmeetMinutes:        https://meetings.opendev.org/meetings/cinder/2025/cinder.2025-06-25-14.08.html15:04
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/cinder/2025/cinder.2025-06-25-14.08.txt15:04
opendevmeetLog:            https://meetings.opendev.org/meetings/cinder/2025/cinder.2025-06-25-14.08.log.html15:04

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!