| *** ncode has joined #openstack-meeting | 00:02 | |
| *** ncode has quit IRC | 00:02 | |
| *** ncode has joined #openstack-meeting | 00:02 | |
| *** novas0x2a|laptop has quit IRC | 00:06 | |
| *** s0mik has quit IRC | 00:07 | |
| *** danwent has quit IRC | 00:09 | |
| *** gongys has quit IRC | 00:20 | |
| *** mnewby has quit IRC | 00:22 | |
| *** nati_uen_ has quit IRC | 00:26 | |
| *** nati_ueno has joined #openstack-meeting | 00:27 | |
| *** nati_ueno has quit IRC | 00:31 | |
| *** kindaopsdevy has quit IRC | 00:37 | |
| *** ryanpetr_ has joined #openstack-meeting | 00:55 | |
| *** nati_ueno has joined #openstack-meeting | 00:59 | |
| *** ryanpetrello has quit IRC | 00:59 | |
| *** ncode has quit IRC | 01:00 | |
| *** anderstj has joined #openstack-meeting | 01:01 | |
| *** anderstj has quit IRC | 01:03 | |
| *** jdurgin has quit IRC | 01:03 | |
| *** ryanpetr_ has quit IRC | 01:08 | |
| *** joearnold has quit IRC | 01:13 | |
| *** joearnold has joined #openstack-meeting | 01:35 | |
| *** ryanpetrello has joined #openstack-meeting | 01:39 | |
| *** ryanpetrello has quit IRC | 01:54 | |
| *** ryanpetrello has joined #openstack-meeting | 01:56 | |
| *** shang has joined #openstack-meeting | 01:59 | |
| *** nati_uen_ has joined #openstack-meeting | 02:06 | |
| *** ryanpetr_ has joined #openstack-meeting | 02:06 | |
| *** Gordonz_ has joined #openstack-meeting | 02:06 | |
| *** Mandell_ has joined #openstack-meeting | 02:06 | |
| *** Mandell has quit IRC | 02:06 | |
| *** ryanpetrello has quit IRC | 02:06 | |
| *** nati_ueno has quit IRC | 02:07 | |
| *** xtoddx has quit IRC | 02:07 | |
| *** devcamcar has quit IRC | 02:07 | |
| *** devcamca- has joined #openstack-meeting | 02:07 | |
| *** xtoddx has joined #openstack-meeting | 02:07 | |
| *** cdub has quit IRC | 02:08 | |
| *** cdub has joined #openstack-meeting | 02:08 | |
| *** Gordonz has quit IRC | 02:08 | |
| *** anniec has quit IRC | 02:12 | |
| *** rkukura has quit IRC | 02:16 | |
| *** salv-orlando has left #openstack-meeting | 02:17 | |
| *** mnewby has joined #openstack-meeting | 02:19 | |
| *** anderstj has joined #openstack-meeting | 02:34 | |
| *** zhuadl has quit IRC | 02:39 | |
| *** matwood has joined #openstack-meeting | 02:48 | |
| *** shang has quit IRC | 03:00 | |
| *** shang has joined #openstack-meeting | 03:00 | |
| *** jgriffith has quit IRC | 03:07 | |
| *** Dr_Who has joined #openstack-meeting | 03:08 | |
| *** Dr_Who has joined #openstack-meeting | 03:08 | |
| *** blamar has quit IRC | 03:17 | |
| *** danwent has joined #openstack-meeting | 03:17 | |
| *** dwcramer has quit IRC | 03:23 | |
| *** ryanpetr_ has quit IRC | 03:24 | |
| *** joearnold has joined #openstack-meeting | 03:24 | |
| *** blamar has joined #openstack-meeting | 03:27 | |
| *** anderstj has quit IRC | 03:30 | |
| *** joearnold has quit IRC | 03:33 | |
| *** matwood has quit IRC | 03:35 | |
| *** bencherian has quit IRC | 03:37 | |
| *** anderstj has joined #openstack-meeting | 03:38 | |
| *** zhuadl has joined #openstack-meeting | 03:44 | |
| *** jgriffith has joined #openstack-meeting | 03:56 | |
| *** bencherian has joined #openstack-meeting | 03:56 | |
| *** zhuadl has quit IRC | 03:56 | |
| *** anderstj has quit IRC | 03:56 | |
| *** anderstj has joined #openstack-meeting | 04:08 | |
| *** joearnold has joined #openstack-meeting | 04:11 | |
| *** matwood has joined #openstack-meeting | 04:20 | |
| *** nati_uen_ has quit IRC | 04:27 | |
| *** ozstacker has quit IRC | 04:36 | |
| *** ozstacker has joined #openstack-meeting | 04:37 | |
| *** fergal has quit IRC | 04:38 | |
| *** anniec has joined #openstack-meeting | 04:49 | |
| *** Mandell_ has quit IRC | 04:51 | |
| *** matwood_ has joined #openstack-meeting | 04:55 | |
| *** matwood has quit IRC | 04:55 | |
| *** matwood_ is now known as matwood | 04:55 | |
| *** zhuadl has joined #openstack-meeting | 04:58 | |
| *** Dr_Who has quit IRC | 05:00 | |
| *** anniec has quit IRC | 05:03 | |
| *** garyk has quit IRC | 05:13 | |
| *** anderstj has quit IRC | 05:14 | |
| *** blamar has quit IRC | 05:21 | |
| *** garyk has joined #openstack-meeting | 05:49 | |
| *** ttrifonov_zZzz is now known as ttrifonov | 05:52 | |
| *** littleidea has quit IRC | 06:02 | |
| *** joearnold has joined #openstack-meeting | 06:02 | |
| *** GheRivero has joined #openstack-meeting | 06:16 | |
| *** jgriffith has quit IRC | 06:26 | |
| *** ttrifonov is now known as ttrifonov_zZzz | 06:53 | |
| *** mnewby has quit IRC | 06:54 | |
| *** ttrifonov_zZzz is now known as ttrifonov | 06:55 | |
| *** matwood has quit IRC | 07:02 | |
| *** joearnold has quit IRC | 07:05 | |
| *** Mandell has joined #openstack-meeting | 07:05 | |
| *** markmcclain has quit IRC | 07:07 | |
| *** matwood has joined #openstack-meeting | 07:23 | |
| *** danwent has quit IRC | 07:28 | |
| *** fergal has joined #openstack-meeting | 07:43 | |
| *** danwent has joined #openstack-meeting | 07:48 | |
| *** danwent has quit IRC | 07:49 | |
| *** derekh has joined #openstack-meeting | 08:01 | |
| *** darraghb has joined #openstack-meeting | 08:05 | |
| *** bencherian has quit IRC | 08:08 | |
| *** matwood has quit IRC | 08:18 | |
| *** jakedahn is now known as jakedahn_zz | 08:32 | |
| *** swarley has joined #openstack-meeting | 08:39 | |
| *** Mandell has quit IRC | 08:46 | |
| *** oubiwann has quit IRC | 09:16 | |
| *** oubiwann has joined #openstack-meeting | 09:56 | |
| *** zhuadl has quit IRC | 10:34 | |
| *** swarley has quit IRC | 10:48 | |
| *** markmcclain has joined #openstack-meeting | 11:24 | |
| *** zhuadl has joined #openstack-meeting | 11:26 | |
| *** ayoung-afk is now known as ayoung | 12:09 | |
| *** anniec has joined #openstack-meeting | 12:14 | |
| *** dprince has joined #openstack-meeting | 12:29 | |
| *** dprince has joined #openstack-meeting | 12:30 | |
| *** dwcramer has joined #openstack-meeting | 12:36 | |
| *** littleidea has joined #openstack-meeting | 12:46 | |
| *** flaviamissi has joined #openstack-meeting | 12:46 | |
| *** littleidea has quit IRC | 12:49 | |
| *** littleidea has joined #openstack-meeting | 12:51 | |
| *** littleidea has left #openstack-meeting | 12:51 | |
| *** GheRivero has quit IRC | 12:52 | |
| *** dwcramer has quit IRC | 13:12 | |
| *** jaypipes has quit IRC | 13:12 | |
| *** markmcclain has quit IRC | 13:16 | |
| *** Dr_Who has joined #openstack-meeting | 13:38 | |
| *** jaypipes has joined #openstack-meeting | 13:42 | |
| *** hggdh has quit IRC | 13:50 | |
| *** zhuadl has quit IRC | 13:58 | |
| *** hggdh has joined #openstack-meeting | 13:59 | |
| *** GheRivero has joined #openstack-meeting | 14:11 | |
| *** dtroyer is now known as dtroyer_zzz | 14:24 | |
| *** mattray has joined #openstack-meeting | 14:28 | |
| *** anderstj has joined #openstack-meeting | 14:28 | |
| *** dwcramer has joined #openstack-meeting | 14:31 | |
| *** matwood has joined #openstack-meeting | 14:32 | |
| *** dendrobates is now known as dendro-afk | 14:33 | |
| *** ryanpetrello has joined #openstack-meeting | 14:36 | |
| *** Dr_Who has quit IRC | 14:36 | |
| *** mnewby has joined #openstack-meeting | 14:36 | |
| *** markmcclain has joined #openstack-meeting | 14:37 | |
| *** bencherian has joined #openstack-meeting | 14:37 | |
| *** markmcclain has left #openstack-meeting | 14:38 | |
| *** ayoung has quit IRC | 14:40 | |
| *** maoy has joined #openstack-meeting | 14:40 | |
| *** PotHix has joined #openstack-meeting | 14:48 | |
| *** blamar has joined #openstack-meeting | 14:55 | |
| *** blamar has quit IRC | 14:57 | |
| *** blamar has joined #openstack-meeting | 14:58 | |
| *** dwcramer has quit IRC | 15:03 | |
| *** reed has quit IRC | 15:05 | |
| *** dwcramer has joined #openstack-meeting | 15:06 | |
| *** rnirmal has joined #openstack-meeting | 15:12 | |
| *** dabo has quit IRC | 15:12 | |
| *** sleepson- has quit IRC | 15:12 | |
| *** dabo has joined #openstack-meeting | 15:13 | |
| *** sleepsonthefloor has joined #openstack-meeting | 15:13 | |
| *** cp16net is now known as cp16net|away | 15:18 | |
| *** anderstj has quit IRC | 15:19 | |
| *** heckj has joined #openstack-meeting | 15:22 | |
| *** zul has quit IRC | 15:28 | |
| *** clarkb has joined #openstack-meeting | 15:28 | |
| *** yapeng has joined #openstack-meeting | 15:28 | |
| *** dendro-afk is now known as dendrobates | 15:32 | |
| *** darraghb has quit IRC | 15:38 | |
| *** ryanpetrello has quit IRC | 15:40 | |
| *** zul has joined #openstack-meeting | 15:43 | |
| *** mnewby has quit IRC | 15:43 | |
| *** anniec has quit IRC | 15:44 | |
| *** jgriffith has joined #openstack-meeting | 15:47 | |
| *** gyee has joined #openstack-meeting | 15:51 | |
| *** gyee has quit IRC | 15:54 | |
| *** johnpur has joined #openstack-meeting | 15:55 | |
| *** dendrobates is now known as dendro-afk | 15:56 | |
| *** danwent has joined #openstack-meeting | 16:01 | |
| *** AlanClark has joined #openstack-meeting | 16:04 | |
| *** davidkranz has quit IRC | 16:04 | |
| *** davidkranz has joined #openstack-meeting | 16:05 | |
| *** joearnold has joined #openstack-meeting | 16:25 | |
| *** alrs has joined #openstack-meeting | 16:25 | |
| *** matiu_ has joined #openstack-meeting | 16:26 | |
| *** littleidea has joined #openstack-meeting | 16:28 | |
| *** dendro-afk is now known as dendrobates | 16:29 | |
| *** kindaopsdevy has joined #openstack-meeting | 16:33 | |
| *** bencherian has quit IRC | 16:33 | |
| *** jog0 has quit IRC | 16:35 | |
| *** jog0 has joined #openstack-meeting | 16:35 | |
| *** s0mik has joined #openstack-meeting | 16:38 | |
| *** reed has joined #openstack-meeting | 16:44 | |
| *** milner has quit IRC | 16:45 | |
| *** ryanpetrello has joined #openstack-meeting | 16:48 | |
| *** GheRivero has quit IRC | 16:54 | |
| *** jakedahn_zz is now known as jakedahn | 16:55 | |
| *** s0mik has quit IRC | 16:55 | |
| *** s0mik has joined #openstack-meeting | 16:57 | |
| *** danwent has quit IRC | 16:57 | |
| *** dwcramer has quit IRC | 17:00 | |
| *** jaypipes has quit IRC | 17:00 | |
| *** derekh has quit IRC | 17:00 | |
| *** xtoddx has quit IRC | 17:00 | |
| *** maoy has quit IRC | 17:00 | |
| *** matiu has quit IRC | 17:00 | |
| *** kiffer84 has quit IRC | 17:00 | |
| *** jeblair has quit IRC | 17:00 | |
| *** anniec has joined #openstack-meeting | 17:00 | |
| *** anniec_ has joined #openstack-meeting | 17:01 | |
| *** bencherian has joined #openstack-meeting | 17:02 | |
| *** dwcramer has joined #openstack-meeting | 17:02 | |
| *** maoy has joined #openstack-meeting | 17:02 | |
| *** jaypipes has joined #openstack-meeting | 17:02 | |
| *** derekh has joined #openstack-meeting | 17:02 | |
| *** xtoddx has joined #openstack-meeting | 17:02 | |
| *** matiu has joined #openstack-meeting | 17:02 | |
| *** kiffer84 has joined #openstack-meeting | 17:02 | |
| *** jeblair has joined #openstack-meeting | 17:02 | |
| *** derekh has quit IRC | 17:03 | |
| *** joearnold has quit IRC | 17:04 | |
| *** anniec has quit IRC | 17:05 | |
| *** anniec_ is now known as anniec | 17:05 | |
| *** mnewby has joined #openstack-meeting | 17:07 | |
| *** Mandell has joined #openstack-meeting | 17:11 | |
| *** kindaopsdevy has quit IRC | 17:12 | |
| *** jdurgin has joined #openstack-meeting | 17:12 | |
| *** kindaopsdevy has joined #openstack-meeting | 17:12 | |
| *** milner has joined #openstack-meeting | 17:15 | |
| *** ayoung has joined #openstack-meeting | 17:18 | |
| *** joearnold has joined #openstack-meeting | 17:28 | |
| *** anderstj has joined #openstack-meeting | 17:30 | |
| *** liemmn has joined #openstack-meeting | 17:31 | |
| *** garyk has quit IRC | 17:31 | |
| *** rafaduran has joined #openstack-meeting | 17:33 | |
| *** ryanpetrello has quit IRC | 17:33 | |
| *** dendrobates is now known as dendro-afk | 17:34 | |
| *** nati_ueno has joined #openstack-meeting | 17:39 | |
| *** jakedahn is now known as jakedahn_zz | 17:55 | |
| *** mnewby_ has joined #openstack-meeting | 17:56 | |
| *** mnewby_ has quit IRC | 17:56 | |
| *** adjohn has joined #openstack-meeting | 17:56 | |
| *** adjohn has quit IRC | 17:57 | |
| *** mnewby has quit IRC | 17:57 | |
| heckj | here for the keystone meeting? o/ | 17:59 |
|---|---|---|
| rafaduran | o/ | 18:00 |
| ayoung | o/ | 18:00 |
| ayoung | heckj, liemmn, I'm going kill the elluminate sesson. | 18:00 |
| ayoung | we can use IRC for now | 18:01 |
| heckj | gotcha | 18:01 |
| heckj | #startmeeting | 18:01 |
| openstack | Meeting started Tue Jul 24 18:01:35 2012 UTC. The chair is heckj. Information about MeetBot at http://wiki.debian.org/MeetBot. | 18:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 18:01 |
| heckj | Ola all! | 18:01 |
| heckj | The big topic for today is the PKI code review work/descriptions/etc from ayoung | 18:02 |
| heckj | Before we get there, is there any immediate issues folks have? | 18:02 |
| heckj | #topic anything immediate? | 18:02 |
| *** openstack changes topic to "anything immediate?" | 18:02 | |
| heckj | there's a new security bug that was alerted in today - received it, but haven't tested/verified against it. | 18:03 |
| liemmn | ok | 18:03 |
| *** mnewby has joined #openstack-meeting | 18:03 | |
| ayoung | heckj, should we talking about that in a public chat room? | 18:04 |
| ayoung | If it is OK to do so, please post the link | 18:04 |
| heckj | I don't think it's too butal of an exploit - https://bugs.launchpad.net/keystone/+bug/1028563 | 18:04 |
| heckj | since it's a security vuln, you need to be explicitly subscribed to see it. I've added ayoung, termie, and dolph to it | 18:05 |
| *** lcheng has joined #openstack-meeting | 18:05 | |
| heckj | content: "Identity authentication does not check if user is enabled" | 18:05 |
| ayoung | heckj, ah, ok. yeah, LDAP enabled is going to need a little massaging, as that field doesn't exist in the base schema. The others are checked in the authenticate call...we should hit some of that in todays walk through | 18:06 |
| heckj | cool | 18:06 |
| ayoung | I can chime in on the ticket | 18:06 |
| heckj | have at at your time | 18:06 |
| heckj | Let's get into the main topic then | 18:07 |
| heckj | #topic PKI code review | 18:07 |
| *** openstack changes topic to "PKI code review" | 18:07 | |
| *** s34n has joined #openstack-meeting | 18:07 | |
| *** bbrown has joined #openstack-meeting | 18:07 | |
| ayoung | OK, lets start with authenticate then... | 18:08 |
| ayoung | https://review.openstack.org/#/c/7754/9/keystone/service.py | 18:08 |
| ayoung | line 269 | 18:08 |
| heckj | #link https://review.openstack.org/#/c/7754/9/keystone/service.py | 18:09 |
| ayoung | This is the call for either creating a new token, or validating an existing one | 18:09 |
| ayoung | on line 290, you see the start of the big "if" that splits these two use cases | 18:09 |
| ayoung | bascially, if you pass in the password credential, any existing token is ignored. This logic is maintained | 18:10 |
| ayoung | that majority of the heavy lifting is done by self.identity_api.get_user_by_name | 18:10 |
| *** dendro-afk is now known as dendrobates | 18:11 | |
| ayoung | hmm... | 18:11 |
| *** anderstj has quit IRC | 18:12 | |
| ayoung | no, the heavy lifting isin the common lines that are hidden, 1 sec | 18:12 |
| *** joearnold has quit IRC | 18:12 | |
| ayoung | anyone know how to expand those? | 18:12 |
| ayoung | the real heavy lifting is done by | 18:12 |
| ayoung | auth_info = self.identity_api.authenticate(context=context, | 18:12 |
| ayoung | user_id=user_id, | 18:12 |
| ayoung | password=password, | 18:12 |
| ayoung | tenant_id=tenant_id) | 18:12 |
| ayoung | line 277 prior to the patch | 18:13 |
| heckj | yeah, not sure - was just mucking with the interface to see that | 18:13 |
| ayoung | https://github.com/openstack/keystone/blob/master/keystone/service.py#L277 | 18:13 |
| *** jjm3 has quit IRC | 18:13 | |
| ayoung | as a note, this call needs to be refactored, | 18:13 |
| ayoung | identity api builds up the data that will be sent back as the authenticate response | 18:13 |
| heckj | click on "preferences", then change context to "whole file" and you'll see the whole thing side by side | 18:13 |
| *** danwent has joined #openstack-meeting | 18:14 | |
| ayoung | heckj, thanks. You guys with me? | 18:14 |
| heckj | with you | 18:15 |
| ayoung | so line 315 | 18:15 |
| ayoung | that is what A: checks that uid and password is correct and builds up the data for the token | 18:15 |
| ayoung | there is a little postprocessing, but let skip ahead to | 18:15 |
| ayoung | after the if statement | 18:16 |
| ayoung | line 426 | 18:16 |
| heckj | 426? | 18:16 |
| ayoung | heckj yes | 18:16 |
| ayoung | I am skipping the token path for now | 18:16 |
| ayoung | er | 18:16 |
| ayoung | the path where an existing token is passed in | 18:17 |
| ayoung | and instead followng the userid and password are passed in | 18:17 |
| heckj | gimme a sec, catching up | 18:17 |
| ayoung | we'll go back to the else block in a second | 18:17 |
| heckj | okay - good | 18:18 |
| ayoung | to sum up: line 315 creates the data for the token , line 426 signs it | 18:18 |
| *** milner has quit IRC | 18:18 | |
| heckj | what's "cms" stand for? | 18:18 |
| ayoung | crypto message syntax | 18:18 |
| heckj | got it | 18:18 |
| ayoung | it is the format of the signed document | 18:18 |
| ayoung | it is what is used for SMIME among other things | 18:19 |
| ayoung | and it maps to the following command line call: | 18:19 |
| ayoung | openssl cms -sign -in auth_token.json -nosmimecap -signer cert.pem -inkey key.pem -outform DER -nodetach -nocerts -noattr -out auth_token.signed | 18:19 |
| ayoung | that call, and the corresponding call to verify are in | 18:20 |
| ayoung | https://review.openstack.org/#/c/7754/9/keystone/common/cms.py | 18:20 |
| ayoung | note that they are done using popen. THis is the best supported parallelisation mechanism in Eventlet (AFAICT) | 18:20 |
| ayoung | so a new process is forked off, then execs openssl ... | 18:21 |
| ayoung | the output is read back into the parent process | 18:21 |
| heckj | yep, with ya | 18:21 |
| ayoung | so cms.cms_sign_text(json.dumps(token_data), | 18:21 |
| ayoung | gets signed. on line 54 | 18:22 |
| ayoung | cms_to_token (called line 73) does a little postprocessing | 18:22 |
| ayoung | strips off the header, footer, and replaces / with - | 18:22 |
| liemmn | ayoung, so line 375 (checking token's length) basically allows the old-fashioned token support if it's not a CMS token, correct? | 18:22 |
| heckj | slaps it all together into one big string | 18:23 |
| liemmn | (service.py), sorry | 18:23 |
| ayoung | chops line returns to | 18:23 |
| ayoung | heckj, yes | 18:23 |
| ayoung | liemmn, that is correct | 18:23 |
| liemmn | thx | 18:23 |
| ayoung | liemmn, as does the check to see if it is disabled | 18:23 |
| ayoung | line... | 18:23 |
| ayoung | 422 | 18:23 |
| liemmn | got it | 18:23 |
| ayoung | and for now default is to disable | 18:23 |
| heckj | ayoung: nice, looks good | 18:24 |
| *** jakedahn_zz is now known as jakedahn | 18:24 | |
| ayoung | OK, heckj so the big thing I would change, and will do so in the near future... | 18:24 |
| ayoung | lets jump back to service.py | 18:24 |
| ayoung | and look in that else block | 18:24 |
| ayoung | line 340 | 18:25 |
| ayoung | we read the old token out of the Header | 18:25 |
| ayoung | somewhere earlier... | 18:25 |
| ayoung | and here we validate | 18:26 |
| ayoung | first by checking to see if it is in the datastore....there are pros and cons to doing this, but this is the least change approach | 18:26 |
| ayoung | if it is not in the backend, we can assume "disabled" or "invalid token" | 18:27 |
| ayoung | note that this is in Keystone | 18:27 |
| ayoung | a remote service does not go through this code path | 18:27 |
| ayoung | up to line 374 is fairly close to the old logic | 18:27 |
| ayoung | and then we hit 375 which liemmn pointed out before... | 18:28 |
| ayoung | UUID tokens are shorter | 18:28 |
| *** kindaopsdevy has quit IRC | 18:28 | |
| ayoung | there is also some interspersed logic here for expiry, which we maintain | 18:29 |
| ayoung | the common lines, like the block at 394 | 18:30 |
| *** matiu_ has quit IRC | 18:30 | |
| ayoung | is for building up the response to the verify call | 18:30 |
| *** matiu_ has joined #openstack-meeting | 18:30 | |
| *** matiu_ has joined #openstack-meeting | 18:30 | |
| ayoung | and should be refactored into the identity api | 18:30 |
| ayoung | thus, this code should be much simpler ideally | 18:30 |
| liemmn | +1 for shorter methods :) | 18:31 |
| ayoung | line 385 on is all really common code | 18:31 |
| ayoung | OK..jump ahead to 430 | 18:31 |
| *** mnewby_ has joined #openstack-meeting | 18:31 | |
| ayoung | regardless of password or token, if we issue a new token, once we sign it, we need to persist it | 18:31 |
| ayoung | the big change is that the ID is no longer a uuid | 18:32 |
| ayoung | 431: token_ref = self.token_api.create_token( | 18:32 |
| ayoung | so this code is per-backend. Lets look at the SQL one | 18:32 |
| ayoung | https://review.openstack.org/#/c/7754/9/keystone/token/backends/sql.py | 18:33 |
| ayoung | line 31 | 18:33 |
| ayoung | we have dropped the id column | 18:33 |
| ayoung | because it is confusing | 18:33 |
| ayoung | well, not dropped | 18:33 |
| *** mnewby has quit IRC | 18:33 | |
| *** mnewby_ is now known as mnewby | 18:33 | |
| ayoung | but it is no longer the primary key | 18:33 |
| ayoung | the id *is* the signed document | 18:34 |
| ayoung | way too long to be indexable by MySQL etc | 18:34 |
| ayoung | buy SQL Alchemy insists on a primary key | 18:34 |
| ayoung | so that is | 18:34 |
| ayoung | id_hash | 18:34 |
| ayoung | camn anyone guess what that is? | 18:34 |
| *** mnewby has quit IRC | 18:34 | |
| ayoung | hint on line 65 | 18:34 |
| liemmn | nice | 18:35 |
| heckj | quick md5 of the signed token, eh? | 18:35 |
| ayoung | yep | 18:35 |
| ayoung | rkukura gets props for the idea | 18:35 |
| ayoung | It is short enough and unique enough for our purposes | 18:35 |
| s34n | unique enough? | 18:35 |
| s34n | what is the collission rate? | 18:36 |
| ayoung | s34n, s34n on md5? QUite small | 18:36 |
| ayoung | and for these | 18:36 |
| heckj | s34n: unique for a primary key in SQLAlchemy - it has the standard md5 hashing characteristics | 18:36 |
| ayoung | because the docs are so similar, even smaller | 18:36 |
| ayoung | MD5 is sensitive to small changes in the document. 2 dos that are similar are more likely to have different MD5s than wildly differen docs. | 18:37 |
| s34n | something is tickling my brain on that. Something I recently read on md5 collisions. Let me research. I'm probably wrong. | 18:37 |
| ayoung | thatis, of course, a laymans understanding, and would proabably make most people that know stats annoyed | 18:38 |
| ayoung | s34n, we should also be flushing the tokens after they are expired somehow. We are not doing that now, but once we do, collisions should be statistically sufficiently ignorable | 18:39 |
| ayoung | s34n, note that UUIDs have the same problem | 18:39 |
| ayoung | OK, before we move on to the auth_)token middlewar | 18:40 |
| ayoung | e | 18:40 |
| ayoung | I'd like to talk a bit about SQL migration | 18:40 |
| heckj | kk | 18:40 |
| ayoung | note that I had to change https://review.openstack.org/#/c/7754/9/keystone/common/sql/migrate_repo/versions/001_add_initial_tables.py | 18:40 |
| ayoung | that is because if you automate the table creation for tokens, they will be defined according to the new schema, with the id_hash column | 18:41 |
| ayoung | and 001 needs to define them the way that they are today, with id as the pkey | 18:41 |
| ayoung | hence line 38 defining the table explicitly | 18:41 |
| ayoung | and dropping the import of the token into the migrate code | 18:41 |
| ayoung | on line 26 | 18:42 |
| ayoung | then, because we are altering a table, it is really hard to do it right in sqlalchemy...maybe impossible | 18:42 |
| ayoung | so upgrade and downgrade is done using goo-ole-SQL | 18:42 |
| heckj | got it | 18:42 |
| ayoung | I have different files fdor mysdql and sqlite. I've been told that Postgres follows the sqlite | 18:43 |
| ayoung | lets assume you are doign an on-the-fly upgrade | 18:43 |
| ayoung | the old uuid token goes into the id and the id_hash columns...no harm there | 18:43 |
| ayoung | and the old authenticate code kicks in (same thing that liemmn noted above) | 18:43 |
| ayoung | only new tokens are signed and hashed for realz | 18:43 |
| ayoung | on downgrade, we just dump all data | 18:44 |
| heckj | ayoung: sounds good | 18:44 |
| ayoung | heckj, thanks | 18:44 |
| ayoung | that is why for mysql we can get away with an altertable command. it changes the column name, anddrops the pkey, but maintains the data | 18:44 |
| ayoung | for sqlite etc we do it more explicitly | 18:45 |
| ayoung | OK, brief aside on config before auth_token | 18:45 |
| ayoung | https://review.openstack.org/#/c/7754/9/keystone/config.py | 18:45 |
| ayoung | line 128 is all we need | 18:46 |
| *** devananda has joined #openstack-meeting | 18:46 | |
| ayoung | as the majoprity of the values we use we accepted in an earlier patch | 18:46 |
| ayoung | opnce PKI is beat on somewhat, I'll submite a patch that flips line 129 to False | 18:46 |
| ayoung | OK, any questions so far? | 18:47 |
| heckj | ayoung: lookin' good so far! | 18:47 |
| liemmn | looks good... Is the default token validity 3650 days? | 18:47 |
| ayoung | https://review.openstack.org/#/c/7754/9/keystone/middleware/auth_token.py | 18:47 |
| ayoung | liemmn, um...let me see | 18:47 |
| *** dtroyer_zzz is now known as dtroyer | 18:47 | |
| * ayoung just closed that tab | 18:47 | |
| liemmn | 137 | 18:47 |
| heckj | liemmn: yep | 18:48 |
| liemmn | That's a long time :) | 18:48 |
| ayoung | yeah...that should be 1 | 18:48 |
| ayoung | that might be for the cert...let me check | 18:48 |
| ayoung | that is not for token time out | 18:48 |
| ayoung | that mechanism has not changed | 18:48 |
| liemmn | oh, ok... makes sense | 18:49 |
| *** mdomsch has joined #openstack-meeting | 18:49 | |
| ayoung | OK auth_token middleware, line 392 | 18:49 |
| ayoung | again, we gate on length | 18:49 |
| ayoung | verify UUID token is the old path...on line validation | 18:50 |
| ayoung | basically the red lines from line 350 to 392 | 18:50 |
| ayoung | moved to line 571 | 18:51 |
| liemmn | still wondering if there is value in caching these bigger cms tokens, since we are not incurring network cost anymore | 18:51 |
| ayoung | liemmn, yes there is | 18:51 |
| ayoung | if it is cached you don't have to do the fork/exec of openssl | 18:51 |
| heckj | ayoung: so as long as your local cache is good, you only take the decrypt hit once | 18:52 |
| ayoung | heckj, that is right | 18:52 |
| liemmn | ok | 18:52 |
| ayoung | line 613 is where we verify signed tokens | 18:52 |
| *** adjohn has joined #openstack-meeting | 18:52 | |
| ayoung | again, using the code in keystone/common/cms.py | 18:52 |
| ayoung | bascially adds back in the header, - to / and line breaks | 18:53 |
| ayoung | then run through the openssl code | 18:53 |
| ayoung | for now, I am just assuming one ca and one signing cert | 18:53 |
| ayoung | they are fetched on demand | 18:54 |
| liemmn | ayoung, you have a typo error on line 628 and 631... "this" -> "self" | 18:54 |
| ayoung | see the exception blocks in line 627 | 18:54 |
| heckj | ayoung: so a deployment expectation is that you'd likely drop in a ca and cert on every machine running the auth_token middleware, restricted directory, and they use it direclty as needed | 18:54 |
| ayoung | heckj, yes | 18:54 |
| ayoung | heckj, however | 18:55 |
| ayoung | you might want to keep the fetch | 18:55 |
| ayoung | especially for the signing cert | 18:55 |
| ayoung | as that might expire. or you might have to deal with a security breach | 18:55 |
| ayoung | breech | 18:55 |
| ayoung | break in | 18:55 |
| heckj | heh | 18:55 |
| heckj | yeah, got it | 18:55 |
| *** jakedahn is now known as jakedahn_zz | 18:55 | |
| ayoung | heckj, in the future, I want auth_token to allow a list of keystone servers. We prime the pump with one | 18:56 |
| ayoung | and the rest are fetched from the service catalog | 18:56 |
| ayoung | then, in the signed token, it indicates "I was signed by foo" | 18:56 |
| heckj | ayoung: reasonable for the larger installations | 18:56 |
| ayoung | and we fetch the cert for foo | 18:56 |
| ayoung | heckj, it will also allow for federation, etc | 18:57 |
| ayoung | we can specify that a given signing cert can only sign for a specific domain.... | 18:57 |
| notmyname | heckj: just to get in under the wire, the keystone middleware was merged into swift. should be released next week in the next swift release | 18:57 |
| heckj | notmyname: thxusir | 18:57 |
| ayoung | OK... the rest of the patch is commentary: tests and so forth | 18:58 |
| termie | ;win 1 | 18:58 |
| ayoung | there is one thing I've found that makes me self-nack, but I did't want to speak up until after this walk through | 18:58 |
| *** Daisy has joined #openstack-meeting | 18:58 | |
| ayoung | I will buy a beer at the meetup if anyone can guess what it is | 18:58 |
| ayoung | I will provide one hint: it is not in any of the files in this patch | 18:59 |
| ayoung | any guesses? | 18:59 |
| ayoung | going once.... | 18:59 |
| ayoung | going twice.... | 18:59 |
| heckj | lack of docs | 18:59 |
| ayoung | nope | 18:59 |
| heckj | :-) | 19:00 |
| Daisy | Hi | 19:00 |
| ayoung | heckj, I would be willing to checking withou tdocs | 19:00 |
| ayoung | as the default behavior hasn;'t changed | 19:00 |
| ayoung | no the missig feature is ec2 and s3 tokens in contrib | 19:00 |
| heckj | ayoung: yeah, I'm fine with it - but we'll want to describe how to use the new features very quickly | 19:00 |
| ayoung | I think those will work as is by default | 19:00 |
| ayoung | but not with PKI tokens | 19:00 |
| ayoung | they only generate UUID tokens...which actually might be fine | 19:01 |
| Daisy | Is this CI weekly meeting? | 19:01 |
| ayoung | but they should be using common code for token generation | 19:01 |
| ayoung | Daisy, not yet | 19:01 |
| ayoung | still keystone | 19:01 |
| ayoung | I'm waxing poetic | 19:01 |
| ayoung | heckj, anyway...now that you know, I'll let you decide whether to nack on that...I think it is ok to do in a separate patch | 19:01 |
| liemmn | very cool, ayoung... thanks for the walkthru! | 19:02 |
| ayoung | My pleasure | 19:02 |
| ayoung | now go forth and review! | 19:02 |
| liemmn | :) | 19:02 |
| *** dprince has quit IRC | 19:02 | |
| liemmn | of course | 19:02 |
| * mtaylor taps foot patiently... | 19:02 | |
| heckj | #endmeeting | 19:03 |
| *** openstack changes topic to "OpenStack meeting channel. See http://wiki.openstack.org/Meetings for schedule and http://eavesdrop.openstack.org/meetings/openstack-meeting/ for meeting logs" | 19:03 | |
| openstack | Meeting ended Tue Jul 24 19:03:14 2012 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 19:03 |
| heckj | sorry, sorry... | 19:03 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-18.01.html | 19:03 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-18.01.txt | 19:03 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-18.01.log.html | 19:03 |
| ayoung | heckj, one last thing...I am pretty sold on Domains. I think we should chop off the groups concept, and anything not essential, and merge it into identity | 19:03 |
| * jeblair steps on mtaylor's foot | 19:03 | |
| ayoung | not in contrib | 19:03 |
| heckj | ayoung: awesome work, thanks for the walkthrough | 19:03 |
| ayoung | but since gyee is not here...we should plan on discussing that in depth next week | 19:03 |
| mtaylor | #startmeeting | 19:04 |
| openstack | Meeting started Tue Jul 24 19:04:18 2012 UTC. The chair is mtaylor. Information about MeetBot at http://wiki.debian.org/MeetBot. | 19:04 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 19:04 |
| mtaylor | bwahahaha. I haz taken over! | 19:04 |
| Daisy | :) | 19:04 |
| Daisy | Hello ! | 19:04 |
| *** aclark_ has joined #openstack-meeting | 19:04 | |
| mtaylor | hi there. | 19:04 |
| clarkb | hello | 19:04 |
| mtaylor | anybody else want to talk about, you know, things? | 19:04 |
| *** AlanClark has quit IRC | 19:04 | |
| Daisy | any agenda ? | 19:05 |
| annegentle | stuff and things! | 19:05 |
| mtaylor | we normally start through just with some updates from folks on anything they've done, then open up the floor for things | 19:05 |
| Daisy | ok | 19:05 |
| mtaylor | so... clarkb - what's been up in your world? | 19:05 |
| clarkb | I get to go first whee! | 19:06 |
| clarkb | I am trying to think about what happened week before last because OSCON | 19:06 |
| clarkb | gerritlib is now its own project with tests and stuff as well as all the packaging foo | 19:07 |
| *** aclark_ has quit IRC | 19:07 | |
| jeblair | clarkb: is that ready for a release no that gerritbot can consume it? | 19:07 |
| jeblair | s/no that/so that/ | 19:07 |
| clarkb | jeblair: I think so, unless we want to PBR it first | 19:07 |
| mtaylor | nope. pbr is killing me at the moment | 19:07 |
| clarkb | but functionally PBR isnt necessary | 19:07 |
| jeblair | okay, i'll see about cutting a release then. | 19:08 |
| clarkb | sounds good. | 19:08 |
| mtaylor | clarkb: if it has the right jobs and stuff, you should be able to cut a release by tagging it | 19:08 |
| jeblair | mtaylor: i think i need to register it first...? | 19:08 |
| *** milner has joined #openstack-meeting | 19:08 | |
| *** aclark_ has joined #openstack-meeting | 19:08 | |
| *** milner has quit IRC | 19:08 | |
| mtaylor | yup | 19:08 |
| *** milner has joined #openstack-meeting | 19:09 | |
| clarkb | oh yes, that was the big thing I was forgetting. Zuul is now a little smarter. If a job not at the front of the queue has a failure all of the jobs behind it are cancelled to free resources | 19:09 |
| mtaylor | register it and then go to the project page and add openstackci as a maintainer | 19:09 |
| clarkb | (they will be rerun again anyways so there is little sense in burning up CPU cycles running them multiple times) | 19:09 |
| jeblair | mtaylor: (i'll do that) | 19:09 |
| mtaylor | clarkb: awesome! I think that will be quite handy | 19:10 |
| clarkb | so far it appears to have been working. I haven't seen any really long job queues since that patch went in | 19:10 |
| jeblair | clarkb: indeed, it's already made a difference. | 19:10 |
| *** kindaopsdevy has joined #openstack-meeting | 19:10 | |
| clarkb | jeblair fixed a bug in Zuul to make this possible | 19:11 |
| mtaylor | jeblair: sounds like the baton is being passed there | 19:11 |
| clarkb | other than that I added asciidoc building dependencies to build slaves, just merged in the bits that should make selenium testing possible, and I can't think of anything else at them moment | 19:12 |
| jeblair | mtaylor: zuul has three contributors now! | 19:12 |
| mtaylor | jeblair: w00t! | 19:13 |
| mtaylor | jeblair: watch out- you're going to eclipse openstack itself | 19:14 |
| jeblair | mtaylor: don't get me started on eclipse. | 19:14 |
| mtaylor | jeblair: you wanna use netbeans instead? | 19:14 |
| jeblair | mtaylor: who has the floor? :) | 19:15 |
| mtaylor | jeblair: you do | 19:15 |
| jeblair | so, in addition to working with clarkb on some of the zuul stuff he already mentioned, i also make a few more changes to zuul: | 19:16 |
| jeblair | suppression of duplicate events (so we don't test something twice if it's approved twice) | 19:16 |
| jeblair | and the option to delay testing of changes until at least the -merge job of the change ahead has passed | 19:17 |
| *** heckj has quit IRC | 19:17 | |
| mtaylor | ++ | 19:17 |
| Daisy | hi | 19:17 |
| jeblair | i'm currently working on getting zuul to change tests in a better order | 19:17 |
| mtaylor | the change to gerrit for that seemed to be reasonably painless | 19:18 |
| jeblair | specifically, to recognize dependencies between changes, and to merge-gate them in the correct order. | 19:18 |
| jeblair | (and not merge-gate them until they can actually be merged) | 19:18 |
| Daisy | I'm working on the document translation process. I come here to see if somebody can help me to integrate the translation process in CI. | 19:18 |
| Daisy | I got some chance to read CI documents. I still have some questions. | 19:18 |
| Daisy | The Puppet Modules "Doc Server" is not existed. Is it still being used ? | 19:19 |
| jeblair | the change to gerrit is to facilitate zuul understanding when a change is ready to be merged (does it have the needed approvals) | 19:19 |
| jeblair | Daisy: we'd love to talk about that! can you wait a few more minutes? | 19:19 |
| mtaylor | jeblair: yeah, that seemed like a generally good (and thankfully small patch) | 19:19 |
| jeblair | i'll start working on upstreaming it once we have a little experience with it. | 19:20 |
| Daisy | jblair: sure | 19:20 |
| jeblair | there are three core projects that are still not participating in the devstack gate | 19:20 |
| mtaylor | agree. you put that on review-dev just now, yeah? | 19:20 |
| mtaylor | jeblair: swift and what else? | 19:20 |
| jeblair | mtaylor: hasn't merged yet, but i'll do it after the meeting | 19:20 |
| jeblair | swift, cinder, and quantum | 19:21 |
| jeblair | quantum has been outstanding since mid-april; supposedly if this change merges, the exercises should pass: https://review.openstack.org/#/c/8642/ | 19:21 |
| mtaylor | ah yes | 19:21 |
| jeblair | cinder is being actively worked on by jaypipes and jgriffith | 19:22 |
| jeblair | it passes exercises now, but has a problem with a tempest smoke test | 19:22 |
| jeblair | and the last time i ran the swift check, it passed | 19:22 |
| mtaylor | fancy! | 19:22 |
| jeblair | notmyname: you around? | 19:22 |
| notmyname | yup | 19:22 |
| jeblair | what do you think about turning on devstack-gate for swift? | 19:22 |
| notmyname | anything changed since we last talked about it? | 19:23 |
| notmyname | failure modes, etc | 19:23 |
| *** kindaopsdevy has quit IRC | 19:24 | |
| *** kindaopsdevy has joined #openstack-meeting | 19:24 | |
| notmyname | is it currently running in a non-gating fashion now? | 19:24 |
| jeblair | nope. devstack has been fixed so that it doesn't try to use swift3 when swift is enabled, so the gate-test passes now (or did last time i ran it) | 19:24 |
| notmyname | good | 19:24 |
| jeblair | it's not running regularly with swift, only when this change is tested: https://review.openstack.org/#/c/8809/ | 19:25 |
| notmyname | I'd like to either wait a week before gating, but I'm ok with adding it in a non-gating manner now. we've got a release next monday, and I'd hate to add stuff that slows down that process right before the release | 19:25 |
| notmyname | * either wait a week, or add it now in a non-gating manner | 19:26 |
| jeblair | that works for me. we can aim to add it after the release next week. | 19:26 |
| notmyname | actually, is it possible to add it as a non-gating test before gating on it? | 19:26 |
| jeblair | notmyname: it's possible, but quite a bit of effort for not much reward. (it would require a separate job and consume twice the test resources) | 19:28 |
| jeblair | triggering rechecks of https://review.openstack.org/#/c/8809/ will let us spot check that everything's still working, and of course, that change itself won't merge unless everything is working. | 19:29 |
| mtaylor | any more on swift gating? | 19:32 |
| mtaylor | from my end, I'm happy to report that we've moved all of our main servers over to puppetmaster now | 19:32 |
| mtaylor | yay | 19:32 |
| jeblair | mtaylor: the new layout looks lovely | 19:32 |
| clarkb | grep helps when looking for things :) | 19:33 |
| mtaylor | that's what happens when you run in to the puppet people at oscon | 19:33 |
| mtaylor | so thanks bodepd | 19:33 |
| mtaylor | I've also got the first pass at puppet-dashboard installed | 19:34 |
| mtaylor | but it's having issues when it's run via apache | 19:34 |
| mtaylor | so it seems there might be ruby debugging in my future | 19:34 |
| notmyname | sorry, got called away for a customer issue. jeblair: mtaylor: let's enable it next week after the release | 19:34 |
| jeblair | notmyname: sounds good | 19:35 |
| mtaylor | ++ | 19:35 |
| mtaylor | I think that's all I've got on my end | 19:35 |
| mtaylor | #topic documentation translations | 19:35 |
| *** openstack changes topic to "documentation translations" | 19:35 | |
| mtaylor | Daisy: howdy | 19:35 |
| mtaylor | annegentle: you around? | 19:35 |
| Daisy | hi | 19:36 |
| *** adjohn has quit IRC | 19:36 | |
| *** bencherian has quit IRC | 19:36 | |
| annegentle | ye | 19:37 |
| annegentle | yes, even | 19:37 |
| *** Daisy_ has joined #openstack-meeting | 19:37 | |
| Daisy_ | Hi, I'm back | 19:37 |
| mtaylor | Daisy_: awesome. we're all yours | 19:37 |
| Daisy_ | :) | 19:37 |
| Daisy_ | first of all, I have some questions after reading CI documents. | 19:37 |
| Daisy_ | The Puppet Modules "Doc Server" is not existed. Is this still used ? | 19:38 |
| Daisy_ | And, I cannot find openstack-manuals job definition in YAML scripts. | 19:39 |
| mtaylor | openstack-manuals I believe is still manually done in jenkins, yeah? | 19:39 |
| jeblair | i think so | 19:39 |
| mtaylor | and also, the Doc Server moduel is not used and is gone | 19:39 |
| Daisy_ | oh. | 19:39 |
| jeblair | we need to convert that to job filler -- we should be able to now that we have shell scripts | 19:39 |
| mtaylor | jeblair: ++ | 19:40 |
| Daisy_ | manually defined some jobs ? | 19:40 |
| jeblair | and maven support | 19:40 |
| *** Daisy has quit IRC | 19:40 | |
| *** kindaopsdevy_ has joined #openstack-meeting | 19:40 | |
| mtaylor | Daisy_: yeah - the old way we used to make jobs in jenkins was just through the web ui | 19:40 |
| Daisy_ | ok. I see. | 19:41 |
| mtaylor | it's not scalable, so we've been replacing it - but we havne't fully converted everything yet | 19:41 |
| Daisy_ | I see the job definitions through web UI. | 19:41 |
| Daisy_ | ok. thanks. | 19:41 |
| Daisy_ | Let me describe my requirements. | 19:41 |
| Daisy_ | Can I have a job run regularly, like, once per 12 hours in Jenkins? | 19:42 |
| Daisy_ | What language can be used to describe such job ? python script or YAML ? | 19:42 |
| jeblair | Daisy_: yes, you can run a job on a schedule | 19:43 |
| jeblair | Daisy_: (but we like to have jobs run in response to events as much as possible -- anything that happens in gerrit can generate an event that triggers a jenkins job) | 19:43 |
| *** kindaopsdevy has quit IRC | 19:43 | |
| *** kindaopsdevy_ is now known as kindaopsdevy | 19:43 | |
| jeblair | Daisy_: and if you want to hook a job up to an outside event source -- like a translation service -- if it has events or hooks, we can look at triggering jobs from that too. | 19:44 |
| jeblair | Daisy_: but otherwise, a schedule is easy to do. | 19:44 |
| mtaylor | Daisy_: ++ | 19:44 |
| mtaylor | yeah - is the job wanting to grab translatoins from somewhere and publish them? | 19:44 |
| jeblair | Daisy_: as for how to describe a job... | 19:45 |
| Daisy_ | Now we are using Transifex to host the translation. The DocBooks are sliced into pieces. I found it was not convenient to see the whole translated documents under such situation. I'm looking for a way to show the latest translation result. | 19:45 |
| Daisy_ | Even the translation is not completed, we can see a document with mixed languages, some parts are translated, some parts are still in Englisn. | 19:45 |
| jeblair | Daisy_: the jenkins job_filler yaml files are the way we'd like to define the jobs in jenkins -- if the jobs are more than one or two lines of shell script, you should write a script (python or shell, whatever you need), and then call that from the jenkins job you specify with yaml. | 19:46 |
| mtaylor | Daisy_: do you have a link to the transifex project? | 19:46 |
| Daisy_ | I have. | 19:46 |
| Daisy_ | https://www.transifex.net/projects/p/openstack-manuals-i18n/ | 19:46 |
| mtaylor | cool. so, in general it seems like we need to figure out how to get data back out of transifex | 19:48 |
| mtaylor | is transifex watching the trunk git repos? | 19:48 |
| Daisy_ | And, what's more, after document transaltion, there will be documents in different languages. How to show these in website? I have no idea. | 19:48 |
| mtaylor | now that's a question for annegentle | 19:49 |
| Daisy_ | Transifex uses its client to push the resources to transifex website and pull the translation back to local file disk. | 19:49 |
| annegentle | Daisy_: I believe the openstack-manuals github repo's www folder will have to have new index.html that enables display of the translated documents | 19:50 |
| annegentle | better yet, we'd have a CMS front end that could handle this, but for now it's hand-written HTML linking | 19:50 |
| * annegentle wonders how publican handles? | 19:50 | |
| mtaylor | well lookie there | 19:51 |
| mtaylor | http://pypi.python.org/pypi/transifex-client/ | 19:51 |
| clarkb | so we would probably want a python script that pulls translations from transifex and submits them to gerrit? | 19:52 |
| Daisy_ | maybe. I remember the transifex client is also writen in python. | 19:53 |
| *** ayoung has quit IRC | 19:53 | |
| Daisy_ | http://help.transifex.com/features/client/index.html#user-client | 19:53 |
| jeblair | yeah, there's a similar job that pulled translations from launchpad we can base it on | 19:53 |
| mtaylor | how are the new things being update right now | 19:54 |
| mtaylor | as in, who owns that? | 19:54 |
| jeblair | basically, git checkout, pull translations, commit and git-review | 19:54 |
| *** thingee has joined #openstack-meeting | 19:54 | |
| Daisy_ | what is git checkout ? | 19:54 |
| mtaylor | Daisy_: it looks like you are the owner of https://www.transifex.com/projects/p/openstack-manuals-i18n/ | 19:54 |
| Daisy_ | Yes, I created it. | 19:54 |
| mtaylor | Daisy_: how do you update the source strings to be translated when new changes are made in git | 19:55 |
| *** mnewby has joined #openstack-meeting | 19:55 | |
| mtaylor | do you personally run the tx command? | 19:55 |
| Daisy_ | msg mtaylor Yes for now. | 19:56 |
| mtaylor | ok. so, steps moving foward are going to be: | 19:56 |
| mtaylor | a) getting a transifex account made for jenkins | 19:56 |
| mtaylor | b) getting that jenkins account added to the openstack-manuals-i18n project | 19:56 |
| annegentle | sorry all, have to run to a meeting, but I will read the logs | 19:56 |
| mtaylor | c) getting a jenkins job that pushes new base changes to transifex | 19:57 |
| mtaylor | d) getting a jenkins job that pulls new translations from transifex and submits them to gerrit | 19:57 |
| Daisy_ | correct ! | 19:57 |
| jeblair | i'll take (a) | 19:58 |
| mtaylor | actually - heckj and GabrielHurley run the openstack uhub | 19:58 |
| mtaylor | hub | 19:58 |
| mtaylor | so what we _really _ want is to get the openstackci user added to that hub | 19:58 |
| clarkb | we should probably add this project to the hub if possible | 19:58 |
| Daisy_ | ok. I will request again. | 19:58 |
| mtaylor | and the manuals project added to that hub | 19:58 |
| mtaylor | and we need to get the CI team added as admins of that hub | 19:58 |
| Daisy_ | who can add that project to hub ? | 19:58 |
| mtaylor | I'll take on tracking down heckj and gabriel | 19:58 |
| Daisy_ | thank you, mtaylor ! | 19:59 |
| mtaylor | Daisy_: I think we'll be doing good if we can just get account permissions sorted this week | 19:59 |
| jeblair | Daisy_: can you join us in #openstack-infra ? | 19:59 |
| *** markmc has joined #openstack-meeting | 19:59 | |
| Daisy_ | when is #openstack-infra? | 19:59 |
| mtaylor | let's check back in next week and ensure that we've got that done and can start making jobs | 19:59 |
| Daisy_ | I'd like to join. | 19:59 |
| jeblair | Daisy_: we can continue to talk about this in that channel | 19:59 |
| *** s34n has left #openstack-meeting | 19:59 | |
| Daisy_ | so the next meeting is #openstack-infra? | 20:00 |
| jeblair | Daisy_: we're in that channel all the time | 20:00 |
| *** cp16net|away is now known as cp16net | 20:00 | |
| Daisy_ | great to know that ! a day meeting in Tuesday ! | 20:00 |
| jeblair | Daisy_: no, most of the infrastructure/ci people are in that channel all the time and available to talk about this sort of thing | 20:00 |
| Daisy_ | ok, thanks. | 20:00 |
| mtaylor | cool. I think that's good for this week. thanks everybody! | 20:01 |
| mtaylor | #endmeeting | 20:01 |
| *** openstack changes topic to "OpenStack meeting channel. See http://wiki.openstack.org/Meetings for schedule and http://eavesdrop.openstack.org/meetings/openstack-meeting/ for meeting logs" | 20:01 | |
| openstack | Meeting ended Tue Jul 24 20:01:49 2012 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 20:01 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-19.04.html | 20:01 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-19.04.txt | 20:01 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-19.04.log.html | 20:01 |
| *** Daisy_ has quit IRC | 20:05 | |
| *** joearnold has joined #openstack-meeting | 20:07 | |
| *** littleidea has quit IRC | 20:08 | |
| *** anderstj has joined #openstack-meeting | 20:13 | |
| *** littleidea has joined #openstack-meeting | 20:13 | |
| *** littleidea has quit IRC | 20:18 | |
| *** littleidea has joined #openstack-meeting | 20:18 | |
| *** nati_ueno has quit IRC | 20:26 | |
| *** rnirmal has quit IRC | 20:30 | |
| *** joearnold has quit IRC | 20:31 | |
| *** alrs has quit IRC | 20:35 | |
| *** Mandell_ has joined #openstack-meeting | 20:35 | |
| *** jakedahn_zz is now known as jakedahn | 20:38 | |
| *** Mandell has quit IRC | 20:39 | |
| *** gyee has joined #openstack-meeting | 20:40 | |
| *** adjohn has joined #openstack-meeting | 20:43 | |
| *** alrs has joined #openstack-meeting | 20:52 | |
| *** nati_ueno has joined #openstack-meeting | 20:52 | |
| *** nati_ueno has quit IRC | 20:53 | |
| *** bcwaldon has joined #openstack-meeting | 20:54 | |
| *** bencherian has joined #openstack-meeting | 20:54 | |
| *** anderstj has quit IRC | 20:57 | |
| *** salv-orlando has joined #openstack-meeting | 20:59 | |
| ttx | o/ | 21:00 |
| ttx | heckj, notmyname, bcwaldon, jgriffith, vishy, devcamcar, danwent: around ? | 21:00 |
| jgriffith | o/ | 21:01 |
| notmyname | here | 21:01 |
| danwent | o/ | 21:01 |
| vishy | o/ | 21:01 |
| ttx | no heckj | 21:01 |
| *** maoy has quit IRC | 21:02 | |
| ttx | vishy: bcwaldon around you ? | 21:02 |
| vishy | no he is not | 21:02 |
| bcwaldon | yes | 21:02 |
| bcwaldon | ttx: I have arrived | 21:03 |
| ttx | let's start and reorder to let heckj some time to join | 21:03 |
| ttx | #startmeeting | 21:03 |
| openstack | Meeting started Tue Jul 24 21:03:12 2012 UTC. The chair is ttx. Information about MeetBot at http://wiki.debian.org/MeetBot. | 21:03 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 21:03 |
| ttx | Agenda @ http://wiki.openstack.org/Meetings/ProjectMeeting | 21:03 |
| ttx | #info We are halfway through F3, so will look into progress, especially on essential stuff | 21:03 |
| ttx | #info Will also look into upcoming Swift 1.5.1 | 21:03 |
| ttx | #topic Actions from previous meeting | 21:03 |
| *** openstack changes topic to "Actions from previous meeting" | 21:03 | |
| ttx | * ttx to see how danwent could track bugs outside quantum without creating noise | 21:03 |
| *** gabrielhurley has joined #openstack-meeting | 21:03 | |
| ttx | Sent an email explaining options | 21:04 |
| danwent | ttx: yeah, sorry, i've been behind following up on that. | 21:04 |
| ttx | gabrielhurley: standing in for devcamca- ? | 21:04 |
| gabrielhurley | ttx: yessir | 21:04 |
| gabrielhurley | sorry I'm late | 21:04 |
| ttx | awesome. Nobody replacing heckj yet ? | 21:04 |
| ttx | #topic Swift status | 21:04 |
| *** openstack changes topic to "Swift status" | 21:04 | |
| ttx | #link https://launchpad.net/swift/+milestone/1.5.1 | 21:04 |
| ttx | notmyname: hello! | 21:05 |
| notmyname | howdy! | 21:05 |
| ttx | notmyname: I targeted a few existing blueprints to 1.5.1 based on https://github.com/notmyname/swift/blob/1.5.1-changelog/CHANGELOG | 21:05 |
| notmyname | thanks | 21:05 |
| notmyname | so, about 1.5.1 | 21:05 |
| ttx | Was wondering if blueprints should be retroactively created for Illumos compatibility or logger UDP support ? | 21:05 |
| ttx | or are those minor features ? | 21:05 |
| notmyname | ya, I was planning on creating those | 21:05 |
| ttx | ok, cool | 21:05 |
| notmyname | we want to call this swift 1.6.0 | 21:05 |
| notmyname | based on the amount of changes and the significance of some of the changes | 21:06 |
| ttx | notmyname: sounds ok to me, just need to rename the milestone | 21:06 |
| ttx | notmyname: should I do so now ? | 21:06 |
| notmyname | yes, please | 21:06 |
| ttx | #info Renamed to https://launchpad.net/swift/+milestone/1.6.0 | 21:07 |
| *** heckj has joined #openstack-meeting | 21:07 | |
| notmyname | thanks | 21:07 |
| ttx | heckj: you're next ;) | 21:07 |
| heckj | o/ (sorry I'm late) | 21:07 |
| notmyname | we will start the testing/QA process for the release tomorrow | 21:07 |
| ttx | notmyname: you should probably bump the version to 1.6.0/False before | 21:07 |
| notmyname | ttx: I should be able to get the final commit hash by friday pm or on the weekend so you can cut the release on monday am | 21:08 |
| notmyname | ok, good call on the version bump | 21:08 |
| notmyname | I'll take care of that | 21:09 |
| ttx | notmyname: sounds good. When you have the commitid you sent to QA, I'll cut milestone-proposed from it | 21:09 |
| ttx | so that others can do QA as well | 21:09 |
| notmyname | I should have that tomorrow | 21:09 |
| ttx | #action notmyname to retroactively create some blueprints to cover 1.6.0 main features | 21:09 |
| ttx | I see one 1.6.0-targeted bug: bug 1026830 | 21:09 |
| ttx | Should it be considered blocking 1.6.0 right now ? | 21:10 |
| * jgriffith wonders if he's still in IRC? | 21:10 | |
| *** jgriffith has quit IRC | 21:10 | |
| creiht | maybe he put his keyboard on mute? ;) | 21:10 |
| uvirtbot | Launchpad bug 1026830 in swift "replication will never reload the ring file if it is initially empty" [High,In progress] https://launchpad.net/bugs/1026830 | 21:10 |
| creiht | holy irc lag batman | 21:10 |
| * creiht hides again | 21:10 | |
| notmyname | that's been committed | 21:11 |
| ttx | notmyname: bug status didn't catch up yet. Will update | 21:11 |
| notmyname | sorry, dealing with customer issues at the same time... | 21:11 |
| *** dwcramer has quit IRC | 21:11 | |
| ttx | notmyname: anything else ? | 21:11 |
| *** jgriffith has joined #openstack-meeting | 21:12 | |
| notmyname | ah I see what happened | 21:12 |
| notmyname | The linked patch was abandoned and a different one was merged instead | 21:12 |
| notmyname | I probably forgot the bug number in the updated patch commit message | 21:12 |
| ttx | ok, can you set FixCommitted ? (and maybe link to the commit of the patch) | 21:12 |
| notmyname | no, I have nothing else. questions? | 21:12 |
| ttx | #topic Keystone status | 21:13 |
| *** openstack changes topic to "Keystone status" | 21:13 | |
| ttx | heckj: o/ | 21:13 |
| heckj | o/ | 21:13 |
| ttx | #link https://launchpad.net/keystone/+milestone/folsom-3 | 21:13 |
| ttx | heckj: Looks like slow progress overall... | 21:13 |
| heckj | yep - good on the PKI stuff, but others need to get seriously re-evaluated | 21:14 |
| ttx | Especially the 3 "not started" blueprints sound a bit unlikely to make it now ? | 21:14 |
| heckj | The AD based backend is still likely to get some traction, but the temp objects is suspect | 21:14 |
| heckj | Liemnn is moving on to other projects, and has had to defer our the policy documentation work beyond what he's already done | 21:15 |
| heckj | I'll be reviewing this this week and marking things out of the F3 milestone where there's no sign or hope of progress. | 21:15 |
| ttx | heckj: is it still worth keeping that target in ? https://blueprints.launchpad.net/keystone/+spec/document-deployment-suggestions-policy ? | 21:15 |
| ttx | Sounds like doc that could be done post-F3, fwiw | 21:16 |
| heckj | I'm going to make a call for help on that - I feel from a deployment point of view, it's very important and needs to be done. It's somewhat doc related, so I'll try and sync with Anne to see what I can find there | 21:16 |
| ttx | heckj: still working on an alpha-level v3 API ? | 21:17 |
| heckj | ttx: yep, just not much progress with OSCON last week | 21:17 |
| ttx | heckj: anything else ? | 21:17 |
| heckj | that's it from me | 21:18 |
| ttx | Questions about Keystone ? | 21:18 |
| *** johnpostlethwait has joined #openstack-meeting | 21:18 | |
| ttx | #topic Glance status | 21:19 |
| *** openstack changes topic to "Glance status" | 21:19 | |
| ttx | bcwaldon: o/ | 21:19 |
| ttx | #link https://launchpad.net/glance/+milestone/folsom-3 | 21:19 |
| bcwaldon | ttx: hey | 21:19 |
| ttx | General progress looks good... | 21:19 |
| ttx | Let's look into the essential stuff in more detail: | 21:19 |
| bcwaldon | ok | 21:19 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/api-v2-store-access (Not started) | 21:19 |
| ttx | How complex is that ? Still doable in time ? ETA for code proposal ? | 21:20 |
| bcwaldon | I've been in some offline conversations about it | 21:20 |
| bcwaldon | we can get the basic functionality in easily | 21:20 |
| bcwaldon | and it absolutely will be for f3 | 21:20 |
| bcwaldon | trying to determine what the best approach is | 21:20 |
| ttx | ok | 21:20 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/api-v2-links | 21:20 |
| bcwaldon | markwash should be able to knock that out pretty easily | 21:21 |
| bcwaldon | he's been pulled in a bunch of different directions and hasn't had time to get back to it | 21:21 |
| ttx | Would be good to knock everything we can as early as possible :) | 21:21 |
| bcwaldon | I can pick it up if he can't | 21:21 |
| bcwaldon | yes, I'm going to sync up with him after this | 21:21 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/separate-client | 21:21 |
| ttx | That's blocking on https://blueprints.launchpad.net/python-glanceclient/+spec/glance-client-parity , right ? How close is that ? | 21:21 |
| bcwaldon | I've got code for it, just waiting on the nova piece | 21:21 |
| bcwaldon | which I am also working on | 21:21 |
| bcwaldon | everything is slowly falling into place | 21:22 |
| ttx | nova ? | 21:22 |
| bcwaldon | I'm at the *last* blocker | 21:22 |
| bcwaldon | yes, we need to rewrite the glance client code in nova to talk to new client | 21:22 |
| bcwaldon | wait! | 21:22 |
| bcwaldon | wrong bp | 21:22 |
| bcwaldon | we need to port over the client ssl code from old glance client | 21:22 |
| bcwaldon | thats the last thing | 21:22 |
| bcwaldon | for glance-client-parity | 21:22 |
| ttx | Hmm.. so separate-client is blocked on... what ? | 21:23 |
| bcwaldon | well, it's soft-blocked on nova integration | 21:23 |
| bcwaldon | integrate-glance-client | 21:23 |
| bcwaldon | ...I think thats the proper name | 21:24 |
| ttx | Hmm, do you agree to set the status of this one to Blocked until the Nova part is solved ? | 21:24 |
| bcwaldon | if that makes you happier, sure! | 21:24 |
| ttx | Will make my life simpler. This is not the only blueprint I track :) | 21:25 |
| ttx | ETA for integrate-glance-client ? | 21:25 |
| bcwaldon | I started it a couple of times and realized there was more python-glanceclient work to be done | 21:26 |
| bcwaldon | that work just landed yesterday, so I am now shooting for the end of this week | 21:26 |
| ttx | Is glance-client-parity the last thing blocking python-glanceclient 1.0 release ? | 21:26 |
| ttx | You talked several time about curtting a release for the client code | 21:26 |
| ttx | but I haven't seen it yet ;) | 21:27 |
| bcwaldon | yes, that is the blocker | 21:27 |
| ttx | ack | 21:27 |
| bcwaldon | bar | 21:27 |
| ttx | * https://blueprints.launchpad.net/glance/+spec/api-v2-image-caching | 21:27 |
| ttx | Will this be complete once https://review.openstack.org/#/c/9930/ is in ? | 21:27 |
| bcwaldon | in review right now | 21:27 |
| bcwaldon | yes | 21:27 |
| ttx | Sounds good, hopefully most of those will be in better shape a week from now | 21:28 |
| ttx | a.k.a. "before the end of the month" | 21:28 |
| ttx | bcwaldon: Anything else ? | 21:28 |
| bcwaldon | ttx: I might go a different path with python-glanceclient versioning | 21:28 |
| bcwaldon | ttx: different as in releasing all the work Ive been doing under a v0.2 | 21:29 |
| bcwaldon | rather than straight to v1 | 21:29 |
| ttx | bcwaldon: sounds a bit more careful indeed | 21:29 |
| bcwaldon | yes | 21:29 |
| ttx | people tend to find bugs | 21:29 |
| bcwaldon | and I'm kind of breaking my own rule by going from v0 to v1 | 21:29 |
| bcwaldon | the project is in a weird spot, and I want to make the best next step | 21:29 |
| ttx | Questions on Glance ? | 21:30 |
| ttx | #topic Quantum status | 21:30 |
| *** openstack changes topic to "Quantum status" | 21:30 | |
| ttx | #link https://launchpad.net/quantum/+milestone/folsom-3 | 21:31 |
| ttx | danwent: yo | 21:31 |
| danwent | hey | 21:31 |
| ttx | Good progress on High/Essential stuff... let's see the Essential ones in more detail | 21:31 |
| ttx | * https://blueprints.launchpad.net/quantum/+spec/provider-networks | 21:31 |
| danwent | the worst one is assigned to me :) | 21:31 |
| ttx | Will this be completed once https://review.openstack.org/#/c/9069/ hits ? Or is there more to it ? | 21:31 |
| danwent | that patch is part 2 of 3 | 21:31 |
| danwent | part 1 merged recently. | 21:31 |
| danwent | part 3 is fairly small, so i'm not too worried. | 21:32 |
| ttx | danwent: ok | 21:32 |
| ttx | * https://blueprints.launchpad.net/quantum/+spec/quantum-v2-public-networks | 21:32 |
| ttx | Will this be completed once https://review.openstack.org/#/c/9845/ hits ? | 21:32 |
| danwent | yes | 21:32 |
| ttx | and the last one :) | 21:32 |
| ttx | * https://blueprints.launchpad.net/quantum/+spec/quantum-l3-fwd-nat | 21:32 |
| danwent | this is mostly just hung up on terminology discussions, which I think we cleared up meeting yesterday | 21:32 |
| danwent | (comment was about previous link) | 21:32 |
| danwent | yeah, that's the biggest item outstanding, and its on me. | 21:32 |
| ttx | Any progress on that ? ETA ? | 21:32 |
| danwent | progress has been slower than I like in the past week. | 21:33 |
| ttx | wonder why | 21:33 |
| danwent | but I have some volunteers to help as well, so I'll probably split it into two by next week. | 21:33 |
| danwent | a lot of the underlying stuff is there thanks to the dhcp work, so i'm not too concerned | 21:33 |
| ttx | danwent: two parts: both essential ? | 21:33 |
| danwent | if its not good progress by next week though, definitely would be worried. | 21:33 |
| danwent | yes | 21:34 |
| ttx | ok | 21:34 |
| danwent | but worked on by two people | 21:34 |
| ttx | You mentioned last week that there were a lot of blueprints, but you wanted to track them all because someone said they would do it... | 21:34 |
| ttx | But there are a number of unassigned blueprints in there. So I'd think they should have an assignee or be removed from the F3 goals ? | 21:34 |
| danwent | yeah, i saw your script called those out. | 21:34 |
| danwent | currently, i have things assigned to F-3, as when people finish up their essential/high BPs, they often look for other ways to help | 21:35 |
| danwent | I could probably create a tag for that though, if you prefer | 21:35 |
| ttx | No that's ok | 21:35 |
| ttx | Just thought that they would be busy enough with one of the other 28 blueprintds | 21:35 |
| danwent | we actually have a very large number of people contributing these days. | 21:36 |
| ttx | danwent: some other projects use the series goal = Folsom with no milestone for the "wishlist fof folsom if there is time left" thing | 21:36 |
| danwent | that's a good idea. i'll switch to that. | 21:37 |
| ttx | Very visible under https://blueprints.launchpad.net/quantum/folsom | 21:37 |
| *** aclark_ has quit IRC | 21:37 | |
| ttx | danwent: Anything else ? | 21:37 |
| danwent | not that I can think of. | 21:37 |
| ttx | Questions on Quantum ? | 21:37 |
| ttx | #topic Cinder status | 21:38 |
| *** openstack changes topic to "Cinder status" | 21:38 | |
| ttx | jgriffith: howdy! | 21:38 |
| jgriffith | hey there | 21:38 |
| ttx | #link https://launchpad.net/cinder/+milestone/folsom-3 | 21:38 |
| ttx | Looking at targeted blueprints... | 21:38 |
| ttx | * https://blueprints.launchpad.net/cinder/+spec/cinder-notifications | 21:38 |
| jgriffith | The first two have landed | 21:38 |
| ttx | This one is marked "Deferred", does that mean it's been pushed back to Grizzly ? | 21:38 |
| jgriffith | The only one that is outstanding is the migration | 21:38 |
| *** nati_ueno has joined #openstack-meeting | 21:38 | |
| ttx | remove-extra-dbapi-methods is completed ? I can set it to "Implemented" ? | 21:39 |
| jgriffith | Yes, | 21:39 |
| jgriffith | I'll need to see if cp16net is going to pick back up the notifications | 21:39 |
| jgriffith | That just leaves the migration | 21:39 |
| ttx | For the notifications: please update when you know (set priority and status) | 21:40 |
| jgriffith | ttx: Will do | 21:40 |
| ttx | * https://blueprints.launchpad.net/cinder/+spec/migrate-nova-volumes-to-cinder | 21:40 |
| ttx | This one is a bit undefined... No priority, no assignee, series goal unset, unknown status... Could you explain what's expected from that one ? | 21:41 |
| jgriffith | That's coming up with a plan to do a clean and tested migration | 21:41 |
| jgriffith | I don't have anything to add "yet" | 21:41 |
| ttx | jgriffith: Sounds like high priority to me... who is working on that ? | 21:42 |
| jgriffith | Not yet, but hopefully later this week | 21:42 |
| jgriffith | It's going to be the highest priortiy | 21:42 |
| ttx | Who will be working on that ? | 21:42 |
| jgriffith | Also need to come up with tests etc (ie live clusters) | 21:42 |
| *** dendrobates is now known as dendro-afk | 21:42 | |
| jgriffith | ttx: Me for sure... | 21:42 |
| ttx | jgriffith: so OK if I mark it yours, Not started and High prio ? | 21:43 |
| jgriffith | ttx: I suspect vishy will have some input :) | 21:43 |
| *** heckj has quit IRC | 21:43 | |
| jgriffith | ttx: Yep | 21:43 |
| ttx | Are those 3 the only features missing in Folsom Cinder ? | 21:43 |
| ttx | hmm those 2 actually | 21:43 |
| jgriffith | No... I still have a few things I'm trying to get finished | 21:43 |
| jgriffith | Well... striclty speaking yes | 21:43 |
| jgriffith | I still have to get everyting working on parity | 21:44 |
| jgriffith | Get devstack defaulting to cinder etc | 21:44 |
| ttx | ok | 21:44 |
| ttx | jgriffith: Anything else ? | 21:44 |
| jgriffith | ttx: Nah | 21:44 |
| ttx | #topic Nova status | 21:44 |
| *** openstack changes topic to "Nova status" | 21:44 | |
| vishy | hi! | 21:44 |
| ttx | vishy: hey | 21:44 |
| ttx | #link https://launchpad.net/nova/+milestone/folsom-3 | 21:44 |
| ttx | Slow progress overall. I'm a bit concerned with the two Essential ones, which look stalled since F2: | 21:45 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/finish-uuid-conversion (mikal) | 21:45 |
| vishy | yes I just tried to ping mikal today | 21:45 |
| ttx | Been "almost there" for a long time... What's left to do here ? Any chance that it would land before next week ? | 21:45 |
| vishy | he hasn't updated the review for a week | 21:45 |
| ttx | Will chase him tomorrow morning | 21:45 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/general-host-aggregates (jog0) | 21:46 |
| vishy | he's is still working on the general host stuff | 21:46 |
| vishy | I think he's making good progress though | 21:46 |
| vishy | I want to defer trusted messaging and user configurable rbac | 21:46 |
| vishy | I don't think either of those will make it | 21:46 |
| jog0 | ttx, vishy: I am working on step 2 right now and hope to start step 3 later this week | 21:46 |
| ttx | vishy: sounds like a good idea | 21:46 |
| *** anderstj has joined #openstack-meeting | 21:46 | |
| ttx | jog0: there are only 3 steps right ? | 21:47 |
| ttx | Would be good to have all code merged or proposed by next week | 21:47 |
| ttx | (i.e. bp in "Needs code review" status) | 21:47 |
| vishy | the no-db-nova-compute is questionable | 21:47 |
| jog0 | ttx: there is a step 4 and 5 that involve extra testing and updated docs only. | 21:47 |
| jog0 | ttx: sounds good | 21:48 |
| vishy | russel is making good progress but it is a big change. We'll see how it is next week | 21:48 |
| vishy | config drive is underway. Extract volumes i will mark complete as soon as jgriffith is done moving the gating tests over | 21:48 |
| ttx | * https://blueprints.launchpad.net/nova/+spec/volume-usage-metering -> Low ? | 21:49 |
| vishy | yun is making progress on the transactional task management. I don't know if the whole thing will make it in, but perhaps some more incremental improvements | 21:49 |
| ttx | or should that just move to Cinder ? | 21:49 |
| vishy | it looks like nova-volumes might still exist so I don't mind it being in there a slow | 21:49 |
| *** dwcramer has joined #openstack-meeting | 21:50 | |
| ttx | #action vishy to defer trusted messaging and user configurable rbac to Grizzly | 21:51 |
| ttx | Finally, would be great if we could have some triaging done on Nova bugs, so that we have a clearer, prioritized view on what needs to be fixed before Folsom release | 21:51 |
| ttx | In particular we have 85+ New/Undecided bugs that need some feedback | 21:51 |
| ttx | See https://launchpad.net/~nova-bugs to join the effort | 21:51 |
| ttx | vishy: Anything else ? | 21:52 |
| ttx | hyper-v-revival -> should probably be "started" given what I heard | 21:52 |
| vishy | ttx: only a mention to nova-core that sdague still needs some more votes! | 21:52 |
| vishy | the other 3 will be added tomorrow | 21:53 |
| vishy | ttx: yes | 21:53 |
| ttx | Questions on Nova ? | 21:53 |
| ttx | #topic Horizon status | 21:53 |
| *** openstack changes topic to "Horizon status" | 21:53 | |
| ttx | #link https://launchpad.net/horizon/+milestone/folsom-3 | 21:53 |
| ttx | Slow progress overall... Still feeling on track ? | 21:54 |
| ttx | gabrielhurley: ^ | 21:54 |
| gabrielhurley | ttx: hello! | 21:54 |
| *** dendro-afk is now known as dendrobates | 21:54 | |
| gabrielhurley | ttx: things are picking up steam, I think we're doin' alright. | 21:54 |
| ttx | https://blueprints.launchpad.net/horizon/+spec/ext-roles is marked Blocked... Could you elaborate on what it's blocking on ? Isn't clear from the blueprint whiteboard. | 21:54 |
| gabrielhurley | ttx: quantum being the biggest, I've seen code there and it's pretty close | 21:54 |
| gabrielhurley | the ext-roles sounds like it has to be bumped based on joe and vish's comments in this meeting | 21:55 |
| ttx | which comments ? | 21:55 |
| gabrielhurley | It was blocked based on keystone, et. al. supporting RBAC (particularly rolling up RBAC to keystone) | 21:55 |
| gabrielhurley | so Keystone not having that and/or the v3 API falling short, plus Vish saying user-configurable policy being bumped... I'm not hopeful for seeing this come together | 21:55 |
| ttx | ok, could you clarify if this is dropped to Grizzly before next week ? | 21:56 |
| gabrielhurley | ttx: definitely can | 21:56 |
| ttx | #action gabrielhurley/devcamcar to clarify droppage of ext-roles due to lack of RBAC support | 21:57 |
| ttx | gabrielhurley: anything else you wanted to mention | 21:57 |
| ttx | ? | 21:57 |
| gabrielhurley | ttx: not especially. beyond the roles/RBAC blueprint everything else is on track. | 21:57 |
| ttx | Questions for Horizon ? | 21:57 |
| ttx | #topic Other Team reports | 21:58 |
| *** openstack changes topic to "Other Team reports" | 21:58 | |
| ttx | annegentle, jaypipes, mtaylor, *: ? | 21:58 |
| *** ohnoimdead has joined #openstack-meeting | 21:58 | |
| markmc | ttx, you wanted to catch up on stable branch status | 21:58 |
| * markmc haz status | 21:58 | |
| ttx | markmc: shoot | 21:58 |
| markmc | ok | 21:58 |
| markmc | it's been 4 weeks since 2012.1.1 | 21:58 |
| ttx | markmc matches * | 21:59 |
| markmc | most activity in nova | 21:59 |
| markmc | 20+ fixes | 21:59 |
| markmc | 1 of the a serious security fix | 21:59 |
| markmc | also ~5 fixes in keystone | 21:59 |
| markmc | nothing really in glance and horizon | 21:59 |
| markmc | figure it'd be good to do a nova and keystone 2012.1.2 release soon | 21:59 |
| *** lcheng has quit IRC | 22:00 | |
| ttx | markmc: will look at the security pipe and let you know if we are in good shape | 22:00 |
| markmc | ttx, ok | 22:00 |
| markmc | ttx, what do you think of doing a release next week? | 22:00 |
| ttx | #action ttx to confirm green light to nova and keystone 2012.1.2 | 22:00 |
| markmc | oh, and any stable-maint members - please take a look at: | 22:00 |
| ttx | markmc: pending that last item, sure | 22:00 |
| *** lzyeval has joined #openstack-meeting | 22:00 | |
| markmc | https://review.openstack.org/9534 Handle local & remote exceptions consistently. | 22:00 |
| markmc | https://review.openstack.org/10155 Adding networking rules to vm's on compute service startup | 22:00 |
| markmc | ttx, cool | 22:01 |
| ttx | Any other team lead with a status report ? | 22:01 |
| ttx | #topic Open discussion | 22:01 |
| *** openstack changes topic to "Open discussion" | 22:01 | |
| *** ohnoimdead has quit IRC | 22:01 | |
| ttx | Any last-minute comment ? | 22:01 |
| ttx | well then... | 22:02 |
| ttx | #endmeeting | 22:02 |
| *** openstack changes topic to "OpenStack meeting channel. See http://wiki.openstack.org/Meetings for schedule and http://eavesdrop.openstack.org/meetings/openstack-meeting/ for meeting logs" | 22:02 | |
| openstack | Meeting ended Tue Jul 24 22:02:42 2012 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 22:02 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-21.03.html | 22:02 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-21.03.txt | 22:02 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-07-24-21.03.log.html | 22:02 |
| ttx | Getting harder to fit in one hour | 22:02 |
| ttx | But I WON'T ADMIT DEFEAT | 22:03 |
| *** markmc has quit IRC | 22:03 | |
| *** Mandell_ has quit IRC | 22:04 | |
| *** flaviamissi has quit IRC | 22:05 | |
| *** gabrielhurley has left #openstack-meeting | 22:05 | |
| *** Mandell has joined #openstack-meeting | 22:06 | |
| *** littleidea_ has joined #openstack-meeting | 22:14 | |
| *** matiu_ has quit IRC | 22:16 | |
| *** littleidea has quit IRC | 22:18 | |
| *** littleidea_ is now known as littleidea | 22:18 | |
| *** anniec has quit IRC | 22:23 | |
| *** lzyeval has quit IRC | 22:24 | |
| *** gyee has quit IRC | 22:32 | |
| *** rafaduran has quit IRC | 22:34 | |
| *** alrs has quit IRC | 22:36 | |
| *** anniec has joined #openstack-meeting | 22:36 | |
| *** Mandell has quit IRC | 22:43 | |
| *** Mandell has joined #openstack-meeting | 22:43 | |
| *** dwcramer has quit IRC | 22:47 | |
| *** bbrown has left #openstack-meeting | 22:47 | |
| *** mattray has quit IRC | 22:51 | |
| *** anderstj has quit IRC | 22:55 | |
| *** dendrobates is now known as dendro-afk | 22:56 | |
| *** dwcramer has joined #openstack-meeting | 23:01 | |
| *** anniec has quit IRC | 23:03 | |
| *** anniec_ has joined #openstack-meeting | 23:03 | |
| *** anniec has joined #openstack-meeting | 23:06 | |
| *** anniec_ has quit IRC | 23:07 | |
| *** dtroyer is now known as dtroyer_zzz | 23:11 | |
| *** thingee has quit IRC | 23:14 | |
| *** tr3buchet has quit IRC | 23:16 | |
| *** PotHix has quit IRC | 23:19 | |
| *** dtroyer_zzz is now known as dtroyer | 23:24 | |
| *** joearnold has joined #openstack-meeting | 23:43 | |
| *** ryanpetrello has joined #openstack-meeting | 23:44 | |
| *** joearnold has quit IRC | 23:49 | |
| *** joearnold has joined #openstack-meeting | 23:50 | |
| *** jakedahn is now known as jakedahn_zz | 23:51 | |
| *** joearnold has quit IRC | 23:52 | |
| *** salv-orlando has quit IRC | 23:55 | |
| *** joearnold has joined #openstack-meeting | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!