*** artom has joined #openstack-meeting | 00:00 | |
*** whoami-rajat has quit IRC | 00:01 | |
*** yamamoto has joined #openstack-meeting | 00:02 | |
*** larainema_ has joined #openstack-meeting | 00:48 | |
*** iyamahat has quit IRC | 00:49 | |
*** larainema_ is now known as larainema | 00:49 | |
*** gyee has quit IRC | 00:49 | |
*** ricolin has joined #openstack-meeting | 00:55 | |
*** igordc has quit IRC | 01:04 | |
*** yamamoto has quit IRC | 01:04 | |
*** slaweq has joined #openstack-meeting | 01:11 | |
*** slaweq has quit IRC | 01:15 | |
*** tdasilva has quit IRC | 01:20 | |
*** tdasilva has joined #openstack-meeting | 01:21 | |
*** brinzhang has joined #openstack-meeting | 01:28 | |
*** enriquetaso has quit IRC | 01:40 | |
*** mriedem has quit IRC | 01:49 | |
*** iyamahat has joined #openstack-meeting | 01:55 | |
*** yamamoto has joined #openstack-meeting | 02:46 | |
*** Liang__ has joined #openstack-meeting | 03:00 | |
*** Liang__ is now known as LiangFang | 03:01 | |
*** whoami-rajat has joined #openstack-meeting | 03:06 | |
*** slaweq has joined #openstack-meeting | 03:11 | |
*** slaweq has quit IRC | 03:16 | |
*** dviroel has quit IRC | 03:37 | |
*** psachin has joined #openstack-meeting | 03:38 | |
*** yamamoto has quit IRC | 03:42 | |
*** yamamoto has joined #openstack-meeting | 03:46 | |
*** yamamoto has quit IRC | 03:51 | |
*** yamamoto has joined #openstack-meeting | 03:53 | |
*** rcernin has quit IRC | 03:55 | |
*** yamamoto has quit IRC | 03:57 | |
*** imsurit has joined #openstack-meeting | 03:58 | |
*** yamamoto has joined #openstack-meeting | 04:02 | |
*** links has joined #openstack-meeting | 04:15 | |
*** pcaruana has joined #openstack-meeting | 04:44 | |
*** vishalmanchanda has joined #openstack-meeting | 04:46 | |
*** boxiang has quit IRC | 04:48 | |
*** boxiang has joined #openstack-meeting | 04:48 | |
*** pcaruana has quit IRC | 04:56 | |
*** Luzi has joined #openstack-meeting | 05:03 | |
*** slaweq has joined #openstack-meeting | 05:11 | |
*** slaweq has quit IRC | 05:16 | |
*** kopecmartin|offf is now known as kopecmartin | 05:18 | |
*** rcernin has joined #openstack-meeting | 05:33 | |
*** brault has quit IRC | 05:35 | |
*** ykatabam has joined #openstack-meeting | 05:42 | |
*** tetsuro has joined #openstack-meeting | 05:56 | |
*** rcernin has quit IRC | 06:03 | |
*** tetsuro has quit IRC | 06:04 | |
*** yamamoto has quit IRC | 06:07 | |
*** belmoreira has joined #openstack-meeting | 06:08 | |
*** brinzhang has quit IRC | 06:10 | |
*** brinzhang has joined #openstack-meeting | 06:11 | |
*** slaweq has joined #openstack-meeting | 06:11 | |
*** slaweq has quit IRC | 06:15 | |
*** yamamoto has joined #openstack-meeting | 06:18 | |
*** rcernin has joined #openstack-meeting | 06:19 | |
*** pcaruana has joined #openstack-meeting | 06:21 | |
*** rcernin has quit IRC | 06:21 | |
*** rcernin has joined #openstack-meeting | 06:22 | |
*** slaweq has joined #openstack-meeting | 06:33 | |
*** dtrainor has quit IRC | 06:38 | |
*** dtrainor has joined #openstack-meeting | 06:43 | |
*** yaawang has quit IRC | 06:55 | |
*** yaawang has joined #openstack-meeting | 06:57 | |
*** apetrich has quit IRC | 07:00 | |
*** jamesmcarthur has joined #openstack-meeting | 07:04 | |
*** dmacpher has joined #openstack-meeting | 07:05 | |
*** rcernin has quit IRC | 07:06 | |
*** ykatabam has quit IRC | 07:10 | |
*** tesseract has joined #openstack-meeting | 07:15 | |
*** boxiang has quit IRC | 07:30 | |
*** boxiang_ has joined #openstack-meeting | 07:30 | |
*** tssurya has joined #openstack-meeting | 07:33 | |
*** priteau has joined #openstack-meeting | 07:45 | |
*** hyunsikyang__ has quit IRC | 07:57 | |
*** ralonsoh has joined #openstack-meeting | 08:13 | |
*** moguimar has quit IRC | 08:15 | |
*** ttsiouts has joined #openstack-meeting | 08:18 | |
*** apetrich has joined #openstack-meeting | 08:24 | |
*** belmoreira has quit IRC | 08:28 | |
*** panda has quit IRC | 08:28 | |
*** belmoreira has joined #openstack-meeting | 08:29 | |
*** belmoreira has quit IRC | 08:29 | |
*** panda has joined #openstack-meeting | 08:31 | |
*** tetsuro has joined #openstack-meeting | 08:37 | |
*** jamesmcarthur has quit IRC | 08:48 | |
*** apetrich has quit IRC | 08:53 | |
*** apetrich has joined #openstack-meeting | 09:02 | |
*** lpetrut has joined #openstack-meeting | 09:15 | |
*** lpetrut has quit IRC | 09:16 | |
*** lennyb has joined #openstack-meeting | 09:16 | |
*** lpetrut has joined #openstack-meeting | 09:16 | |
*** tetsuro has quit IRC | 09:28 | |
*** tetsuro has joined #openstack-meeting | 09:29 | |
*** e0ne has joined #openstack-meeting | 09:32 | |
*** LiangFang has quit IRC | 09:33 | |
*** yamamoto has quit IRC | 09:39 | |
*** apetrich has quit IRC | 09:42 | |
*** moguimar has joined #openstack-meeting | 09:47 | |
*** Lucas_Gray has joined #openstack-meeting | 09:55 | |
*** cheng1 has quit IRC | 10:01 | |
*** Lucas_Gray has quit IRC | 10:06 | |
*** iyamahat has quit IRC | 10:08 | |
*** yamamoto has joined #openstack-meeting | 10:17 | |
*** ttsiouts has quit IRC | 10:17 | |
*** ttsiouts has joined #openstack-meeting | 10:18 | |
*** ttsiouts has quit IRC | 10:22 | |
*** carloss has joined #openstack-meeting | 10:23 | |
*** yamamoto has quit IRC | 10:27 | |
*** yamamoto has joined #openstack-meeting | 10:27 | |
*** brtknr has quit IRC | 10:27 | |
*** brtknr has joined #openstack-meeting | 10:33 | |
*** yamamoto has quit IRC | 10:54 | |
*** brtknr has quit IRC | 10:56 | |
*** brtknr has joined #openstack-meeting | 10:56 | |
*** imsurit_ofc has joined #openstack-meeting | 11:00 | |
*** yamamoto has joined #openstack-meeting | 11:01 | |
*** imsurit has quit IRC | 11:01 | |
*** imsurit_ofc is now known as imsurit | 11:01 | |
*** yamamoto has quit IRC | 11:06 | |
*** baojg has quit IRC | 11:17 | |
*** tetsuro has quit IRC | 11:24 | |
*** yamamoto has joined #openstack-meeting | 11:32 | |
*** raildo has quit IRC | 11:33 | |
*** raildo has joined #openstack-meeting | 11:33 | |
*** yamamoto has quit IRC | 11:37 | |
*** imsurit has quit IRC | 11:41 | |
*** pcaruana has quit IRC | 11:42 | |
*** igordc has joined #openstack-meeting | 11:43 | |
*** ttsiouts has joined #openstack-meeting | 11:50 | |
*** dviroel has joined #openstack-meeting | 11:51 | |
*** mriedem has joined #openstack-meeting | 11:51 | |
*** apetrich has joined #openstack-meeting | 11:58 | |
*** armax has quit IRC | 11:58 | |
*** armax has joined #openstack-meeting | 11:59 | |
*** yamamoto has joined #openstack-meeting | 12:11 | |
*** takashin has joined #openstack-meeting | 12:13 | |
*** yamamoto has quit IRC | 12:17 | |
*** yamamoto has joined #openstack-meeting | 12:18 | |
*** pcaruana has joined #openstack-meeting | 12:22 | |
*** yamamoto has quit IRC | 12:27 | |
*** raildo has quit IRC | 12:42 | |
*** raildo has joined #openstack-meeting | 12:42 | |
*** yamamoto has joined #openstack-meeting | 13:00 | |
*** yamamoto has quit IRC | 13:14 | |
*** jhesketh has quit IRC | 13:22 | |
*** jhesketh has joined #openstack-meeting | 13:26 | |
*** _hemna has joined #openstack-meeting | 13:30 | |
*** Luzi has quit IRC | 13:33 | |
*** _hemna has quit IRC | 13:35 | |
*** ricolin has quit IRC | 13:36 | |
*** AlanClark has joined #openstack-meeting | 13:41 | |
*** apetrich has quit IRC | 13:43 | |
*** yamamoto has joined #openstack-meeting | 13:44 | |
*** apetrich has joined #openstack-meeting | 13:47 | |
*** yamamoto has quit IRC | 13:48 | |
*** mhen has joined #openstack-meeting | 13:50 | |
*** enriquetaso has joined #openstack-meeting | 13:52 | |
*** cdent has joined #openstack-meeting | 13:59 | |
*** efried has joined #openstack-meeting | 14:00 | |
efried | #startmeeting nova | 14:00 |
---|---|---|
openstack | Meeting started Thu Jul 25 14:00:40 2019 UTC and is due to finish in 60 minutes. The chair is efried. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:00 |
*** openstack changes topic to " (Meeting topic: nova)" | 14:00 | |
openstack | The meeting name has been set to 'nova' | 14:00 |
takashin | o/ | 14:00 |
cdent | ahoy hoy | 14:01 |
efried | #link agenda https://wiki.openstack.org/wiki/Meetings/Nova#Agenda_for_next_meeting | 14:01 |
artom | o/ | 14:01 |
dansmith | Oj <- here but on a call | 14:02 |
efried | cute | 14:02 |
efried | dansmith getting away with murder as usual | 14:03 |
cdent | https://youtu.be/8K2JYdY2Hok?t=13 | 14:03 |
dansmith | um | 14:03 |
*** yamamoto has joined #openstack-meeting | 14:04 | |
*** yamamoto has quit IRC | 14:04 | |
artom | dansmith, so you drive white Ford Bronco, right? | 14:04 |
dansmith | oooh, OJ, I see. <groan> | 14:04 |
efried | yeah, sorry about that | 14:05 |
efried | okay, let's go | 14:05 |
efried | #topic Last meeting | 14:05 |
efried | #link Minutes from last meeting: http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-07-18-21.00.html | 14:05 |
*** openstack changes topic to "Last meeting (Meeting topic: nova)" | 14:05 | |
efried | any old bidniss? | 14:05 |
* mriedem shows up late | 14:05 | |
efried | #topic Release News | 14:06 |
efried | Spec freeze today | 14:06 |
efried | #link spec review notice on ML (with handy review.o.o search) http://lists.openstack.org/pipermail/openstack-discuss/2019-July/008019.html | 14:06 |
*** openstack changes topic to "Release News (Meeting topic: nova)" | 14:06 | |
efried | Above thread draws attention to four specs (two in the original post, two in mriedem's response) that stand a chance of making it today. | 14:06 |
efried | if you are core-like, please cast your eyes thereupon | 14:07 |
efried | (or even if you're not) | 14:07 |
efried | but it would be polite of us to at least ack the remainder, if nothing else then with a -1 "this isn't far enough along to make freeze, please propose to backlog" or similar. | 14:08 |
efried | Any discussion on spec freeze? | 14:08 |
*** wwriverrat has quit IRC | 14:08 | |
mriedem | i'll be updating those other 2 i pointed out | 14:08 |
mriedem | since they just need cleaning | 14:08 |
efried | Thanks mriedem. | 14:09 |
*** ttsiouts has quit IRC | 14:09 | |
efried | Any other release news (other than stable, which is later)? | 14:09 |
*** ttsiouts has joined #openstack-meeting | 14:09 | |
efried | #topic Bugs (stuck/critical) | 14:10 |
efried | No Critical bugs | 14:10 |
efried | #link 67 new untriaged bugs (-2 since the last meeting): https://bugs.launchpad.net/nova/+bugs?search=Search&field.status=New | 14:10 |
efried | #link 3 untagged untriaged bugs (-1 since the last meeting): https://bugs.launchpad.net/nova/+bugs?field.tag=-*&field.status%3Alist=NEW | 14:10 |
*** openstack changes topic to "Bugs (stuck/critical) (Meeting topic: nova)" | 14:10 | |
efried | any bug discussion? | 14:10 |
efried | #topic Gate status | 14:10 |
efried | #link check queue gate status http://status.openstack.org/elastic-recheck/index.html | 14:10 |
efried | #link 3rd party CI status (seems to be back in action) http://ciwatch.mmedvede.net/project?project=nova | 14:10 |
*** openstack changes topic to "Gate status (Meeting topic: nova)" | 14:10 | |
*** ayoung has joined #openstack-meeting | 14:10 | |
mriedem | not really gate related, but ci related, i've got a change up which converts nova-next to zuulv3 native https://review.opendev.org/#/c/670196/ | 14:11 |
efried | gate hasn't been *horrible* lately. Spurious failure rates feel normal-ish, but response time seems somewhat improved. | 14:11 |
mriedem | i plan on eventually doing that for nova-lvm next | 14:11 |
cdent | (obvmwareciexcuse: all the internal quota is used up on internal testing) | 14:11 |
cdent | (someone is "working to get more") | 14:12 |
efried | mriedem: yay, anything that reduces the amount of sh-in-yaml is a win as far as I'm concerned. | 14:12 |
efried | I'm probably not qualified to +2 that one, but I'll have a look. | 14:12 |
mriedem | also, | 14:12 |
*** baojg has joined #openstack-meeting | 14:12 | |
mriedem | long-term i think that will allow us to break apart the now-getting-big post_stack_test.sh | 14:13 |
mriedem | into separate ansible tasks | 14:13 |
*** ttsiouts has quit IRC | 14:14 | |
efried | what's the zoomed-out result of that? | 14:14 |
efried | Shorter jobs on more nodes? | 14:14 |
mriedem | no | 14:14 |
mriedem | manageability of the script | 14:14 |
mriedem | i.e. not a huge ass bash script | 14:14 |
efried | ack | 14:14 |
efried | #topic Reminders | 14:16 |
efried | any? | 14:16 |
*** openstack changes topic to "Reminders (Meeting topic: nova)" | 14:16 | |
efried | #topic Stable branch status | 14:16 |
efried | #link stable/stein: https://review.openstack.org/#/q/status:open+(project:openstack/os-vif+OR+project:openstack/python-novaclient+OR+project:openstack/nova)+branch:stable/stein | 14:16 |
efried | #link stable/rocky: https://review.openstack.org/#/q/status:open+(project:openstack/os-vif+OR+project:openstack/python-novaclient+OR+project:openstack/nova)+branch:stable/rocky | 14:16 |
efried | #link stable/queens: https://review.openstack.org/#/q/status:open+(project:openstack/os-vif+OR+project:openstack/python-novaclient+OR+project:openstack/nova)+branch:stable/queens | 14:16 |
*** openstack changes topic to "Stable branch status (Meeting topic: nova)" | 14:16 | |
efried | mriedem: stable news? | 14:16 |
mriedem | mel and i flushed a few stein backports | 14:16 |
mriedem | but probably not any release plans right now | 14:16 |
efried | oh, that reminds me, back on release news - are we (nova) responsible for any "libraries" that need a pro forma m-2 release? | 14:17 |
efried | like novaclient or os-vif? | 14:17 |
mriedem | idk if the release team automatically does those, but i'd assume they don't, so it's probably not a bad idea to do a release, though we just recently did a novaclient release | 14:18 |
mriedem | but idk about os-vif | 14:18 |
mriedem | so todo to look at releasing os-vif | 14:18 |
efried | Oh, it's cycle-with-intermediary libs that need a release http://lists.openstack.org/pipermail/openstack-discuss/2019-July/008018.html | 14:19 |
efried | python-novaclient is cycle-with-intermediary | 14:20 |
efried | ...as is os-vif | 14:20 |
efried | so yeah. | 14:20 |
efried | and based on --^ it looks like we're probably responsible for making sure those get proposed, or we'll be shunted to cycle-with-rc | 14:20 |
efried | so | 14:21 |
efried | #action efried to (delegate or) ensure releases as appropriate for python-novaclient and os-vif | 14:21 |
*** AlanClark has quit IRC | 14:21 | |
efried | moving on | 14:21 |
mriedem | like i said, we just did novaclient so i don't think we need another now | 14:21 |
mriedem | but os-vif probably | 14:21 |
efried | ack | 14:22 |
efried | I'll poke (and possibly delegate to) sean about it. | 14:22 |
efried | #topic Sub/related team Highlights | 14:22 |
efried | Placement (cdent) | 14:22 |
efried | #link latest pupdate http://lists.openstack.org/pipermail/openstack-discuss/2019-July/007907.html | 14:22 |
*** openstack changes topic to "Sub/related team Highlights (Meeting topic: nova)" | 14:22 | |
cdent | nothing critical to report. tssurya has made some progress on consumer types | 14:22 |
*** bobh has joined #openstack-meeting | 14:23 | |
cdent | all the nested magic stuff that we planned to do is done, so if there are nova folk who need/want to use it, it's there and we should talk about it | 14:23 |
cdent | eof | 14:24 |
efried | Yeah, I was sort of hoping that | 14:25 |
efried | #link NUMA modeling spec https://review.opendev.org/#/c/552924/ | 14:25 |
efried | would get refreshed in time to do something in Train, but that hasn't happened. | 14:25 |
efried | which means we may want to re-look at | 14:25 |
efried | #link best-effort VGPU affinity spec https://review.opendev.org/552924 | 14:25 |
efried | doh | 14:25 |
efried | #undo | 14:25 |
openstack | Removing item from minutes: #link https://review.opendev.org/552924 | 14:25 |
efried | #link best-effort VGPU affinity spec https://review.opendev.org/#/c/650963/ | 14:26 |
*** ykatabam has joined #openstack-meeting | 14:26 | |
*** ykatabam has left #openstack-meeting | 14:26 | |
efried | I know RH is pretty interested in getting some kind of VGPU affinity landed in Train. | 14:26 |
efried | How are other cores feeling about making this go? | 14:27 |
efried | mriedem: dansmith | 14:27 |
mriedem | shrug | 14:27 |
dansmith | I thought you already nak'd it? | 14:27 |
efried | I -1d, I did not -2 | 14:27 |
mriedem | i would have to reload the context since at one time it was talking about limits and all sorts of crap | 14:28 |
mriedem | idk if it was a new weigher or passing limits down to compute or what | 14:28 |
dansmith | so, I think that bauzas has probably refocused at this point as a result of that, given proximity to the deadline | 14:28 |
efried | and my -1 was based on the possibility of doing the real stuff in Train. | 14:28 |
dansmith | so restarting now is probably going to be rough | 14:28 |
dansmith | (and yes, I wanted you to make a call one way or the other, so I'm not complaining) | 14:28 |
dansmith | mriedem: yep, that's what it is | 14:29 |
mriedem | i also think our plate is already full so... | 14:29 |
mriedem | and i'm still not getting reviews on my mega series so... | 14:29 |
mriedem | double meh | 14:29 |
mriedem | RH should be focused on numa aware live migration imo | 14:30 |
mriedem | and windriver | 14:30 |
artom | I am :) | 14:30 |
mriedem | since starlingx assumes we're just going to deliver it | 14:30 |
mriedem | on a platter | 14:30 |
artom | (When I'm not putting out product fires, which have abated for a bit) | 14:30 |
mriedem | moving on? | 14:32 |
efried | Okay, well, I'll leave this alone for now, and bauzas can request a SFE if necessary. | 14:32 |
efried | API (gmann) | 14:32 |
efried | No update this week. I was in opensource/openstack days Tokyo for full week. | 14:32 |
efried | gmann: anything to add? | 14:33 |
efried | #topic Stuck Reviews | 14:34 |
efried | any? | 14:34 |
*** openstack changes topic to "Stuck Reviews (Meeting topic: nova)" | 14:34 | |
*** ttsiouts has joined #openstack-meeting | 14:34 | |
efried | #topic Review status page | 14:35 |
*** openstack changes topic to "Review status page (Meeting topic: nova)" | 14:35 | |
efried | #link http://status.openstack.org/reviews/#nova | 14:35 |
efried | Count: 462 (+1); Top score: 1331 (-102) | 14:35 |
efried | #help Pick a patch near the top, shepherd it to closure | 14:35 |
efried | I just abandoned the top one since it had had no activity for >1y | 14:35 |
*** mnaser has joined #openstack-meeting | 14:36 | |
efried | #topic Open discussion | 14:36 |
*** openstack changes topic to "Open discussion (Meeting topic: nova)" | 14:36 | |
efried | Can we talk summit/PTG for a bit? | 14:36 |
efried | It is not at all clear whether we're going to have critical mass to warrant a room at the PTG. | 14:37 |
efried | I'm not sure whether I'll be able to attend. | 14:37 |
mriedem | i've been told to not think about booking until late sept/oct | 14:37 |
*** ayoung has quit IRC | 14:37 | |
mriedem | so i'm not sure i'll be there yet | 14:37 |
efried | mriedem: and give up discounted ticket price?? | 14:38 |
mriedem | heh... | 14:38 |
mriedem | i know lots of people aren't going | 14:38 |
efried | and yet, we have to tell them whether we want a room in like two weeks. | 14:38 |
mriedem | well, | 14:38 |
mriedem | i know alex_xu and Fred Li (huawei) have organized meetups in china, | 14:38 |
mriedem | so what i'd probably do is reach out to them to see if they have ideas on local numbers for ptg attendance | 14:39 |
artom | Where's that etherpad of people going/not going? | 14:39 |
mriedem | you'd likely not need a huge ballroom like we normally have, but at least a side meeting room | 14:39 |
efried | #link shanghai nova ptg etherpad https://etherpad.openstack.org/p/nova-shanghai-ptg | 14:39 |
mriedem | i can ask alex/fred in wechat if that helps | 14:39 |
efried | thanks, that would be neat. Alex has acked on the etherpad | 14:39 |
mriedem | i've asked in a wechat room | 14:41 |
mriedem | will let you know | 14:41 |
efried | tbh this is the main thing that's keeping me up nights. | 14:41 |
mriedem | also pinged shane wang | 14:41 |
mriedem | bauzas: isn't in there but i thought he was requesting approval | 14:42 |
artom | efried, the PTG attendee situation> | 14:42 |
dansmith | efried: what, lack of critical mass at ptg? | 14:42 |
dansmith | efried: if so, I don't think you need to worry about that, just MHO | 14:42 |
dansmith | nobody (including the foundation, I expect) is surprised that attendance is going to be very low at this one, so it's going to be whatever it's going to be | 14:43 |
*** yamamoto has joined #openstack-meeting | 14:43 | |
mriedem | efried: yeah i'll let you know what i hear, if there are choices on room size i'd say not a ballroom but a meeting room is probably fine | 14:44 |
efried | Yeah, like on a personal level my family and I are not very happy (understatement) about the prospect of a trip to China in general. If we wind up not running a room, I'd feel better about saying no. | 14:44 |
mriedem | if you personally can't travel that's a different thing, but alex could run the room or something | 14:44 |
dansmith | efried: there will be people there regardless | 14:44 |
mriedem | like they have at local bug smash events | 14:45 |
dansmith | right, alex or any of the people already saying they're going | 14:45 |
dansmith | opportunity to step up and all | 14:45 |
mriedem | right - good management speak there dan | 14:45 |
efried | oo, I like that line. | 14:45 |
* dansmith puffs up his chest | 14:45 | |
efried | And who knows who will be PTL by then | 14:45 |
mriedem | that's twice in one week | 14:45 |
mriedem | ibm can sniff new first line management potential already | 14:45 |
clarkb | mriedem: there are a range of room sizes | 14:46 |
mriedem | ok, so i'd just say "not a cavernous hall please" | 14:46 |
mriedem | whoever makes it makes it | 14:47 |
mriedem | pick a room lead later | 14:47 |
mriedem | do as much pre-ptg in ML like placement did last time as possible | 14:47 |
efried | ++ | 14:47 |
efried | Okay, any other open discussion? | 14:47 |
* mriedem awkwardly hugs eric to make him feel....different | 14:48 | |
efried | mission accomplished | 14:48 |
efried | Thanks all. | 14:48 |
efried | o/ | 14:48 |
efried | #endmeeting | 14:48 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 14:48 | |
openstack | Meeting ended Thu Jul 25 14:48:47 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:48 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-07-25-14.00.html | 14:48 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-07-25-14.00.txt | 14:48 |
openstack | Log: http://eavesdrop.openstack.org/meetings/nova/2019/nova.2019-07-25-14.00.log.html | 14:48 |
*** takashin has left #openstack-meeting | 14:49 | |
*** lbragstad has joined #openstack-meeting | 14:51 | |
*** yamamoto has quit IRC | 14:53 | |
*** zaneb has joined #openstack-meeting | 14:56 | |
*** zaneb has quit IRC | 15:02 | |
*** gagehugo has joined #openstack-meeting | 15:03 | |
*** zaneb has joined #openstack-meeting | 15:03 | |
gagehugo | #startmeeting security | 15:03 |
openstack | Meeting started Thu Jul 25 15:03:47 2019 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:03 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:03 |
*** openstack changes topic to " (Meeting topic: security)" | 15:03 | |
openstack | The meeting name has been set to 'security' | 15:03 |
*** brault has joined #openstack-meeting | 15:03 | |
fungi | aloha | 15:03 |
gagehugo | sorry still in a meeting | 15:04 |
fungi | no worries, me too ;) | 15:04 |
mhen | o/ | 15:04 |
gagehugo | Should be done soon | 15:04 |
gagehugo | o/ | 15:04 |
*** cdent has left #openstack-meeting | 15:04 | |
*** nickthetait has joined #openstack-meeting | 15:04 | |
*** zbitter has joined #openstack-meeting | 15:05 | |
*** dkehn has joined #openstack-meeting | 15:06 | |
*** artom has quit IRC | 15:06 | |
fungi | #link https://etherpad.openstack.org/p/security-agenda Security SIG Weekly Meeting Agenda | 15:06 |
gagehugo | thanks, I was failing on my phone | 15:07 |
fungi | no worries, there's another bugset i can add | 15:08 |
gagehugo | #topic CIDR's of the form 12.34.56.78/0 should be an error Edit | 15:08 |
*** openstack changes topic to "CIDR's of the form 12.34.56.78/0 should be an error Edit (Meeting topic: security)" | 15:08 | |
gagehugo | #link https://bugs.launchpad.net/horizon/+bug/1837339 | 15:08 |
openstack | Launchpad bug 1837339 in OpenStack Security Advisory "CIDR's of the form 12.34.56.78/0 should be an error" [Undecided,Incomplete] | 15:08 |
*** zaneb has quit IRC | 15:08 | |
gagehugo | Looks like this is a good security hardening opportunity | 15:09 |
gagehugo | If interested, feel free to take a look | 15:11 |
gagehugo | #topic IFLA_BR_AGEING_TIME of 0 causes flooding across bridges | 15:11 |
*** openstack changes topic to "IFLA_BR_AGEING_TIME of 0 causes flooding across bridges (Meeting topic: security)" | 15:11 | |
gagehugo | #link https://bugs.launchpad.net/os-vif/+bug/1837252 | 15:12 |
openstack | Launchpad bug 1837252 in os-vif "IFLA_BR_AGEING_TIME of 0 causes flooding across bridges" [High,Confirmed] - Assigned to sean mooney (sean-k-mooney) | 15:12 |
fungi | yeah, at the moment it's in a good place to weigh in on what you think the correct user interface is for horizon's handling of cidrs | 15:12 |
fungi | 1837339 i mean | 15:12 |
fungi | 1837252 got brought to my attention today | 15:12 |
gagehugo | yeah I will take a look at it today | 15:14 |
*** artom has joined #openstack-meeting | 15:14 | |
fungi | there's also another linked in the agenda which was known as a potential vulnerability for a while (via one of its marked duplicates), and seems to have very similar symptoms but is thought to stem from somewhere else | 15:14 |
gagehugo | ah ok | 15:14 |
gagehugo | #link https://bugs.launchpad.net/neutron/+bug/1732067 | 15:15 |
openstack | Launchpad bug 1732067 in neutron "openvswitch firewall flows cause flooding on integration bridge" [High,In progress] - Assigned to LIU Yulong (dragon889) | 15:15 |
* gagehugo will read those later | 15:16 | |
gagehugo | fungi: anything else to add to those? | 15:16 |
*** zbitter is now known as zaneb | 15:16 | |
*** wwriverrat has joined #openstack-meeting | 15:16 | |
fungi | nothing i haven't already put in comments on the bugs themselves, no | 15:17 |
gagehugo | ok | 15:17 |
gagehugo | #topic open discussion | 15:17 |
*** openstack changes topic to "open discussion (Meeting topic: security)" | 15:17 | |
gagehugo | floor is open if anyone has anything | 15:17 |
fungi | assistance in reproducing/fixing those public reports would be most appreciated | 15:17 |
gagehugo | ^ | 15:17 |
*** dklyle has quit IRC | 15:17 | |
* mhen raises hand | 15:17 | |
fungi | especially figuring out whether they're related | 15:17 |
*** _erlon_ has joined #openstack-meeting | 15:18 | |
mhen | I'd like to discuss a topic regarding API policy files | 15:18 |
*** dklyle has joined #openstack-meeting | 15:18 | |
mhen | recently I tried enforcing non-default rules in Cinder and Nova and happened to notice that: 1) Nova only accepted json but not yaml and 2) Cinder did accept only yaml but not json for the policy.yaml or policy.json respectively | 15:19 |
gagehugo | interesting | 15:20 |
mhen | Cinder does override [1] the default from oslo policy [2], whereas Nova doesn't seem to do that | 15:20 |
mhen | [1] https://github.com/openstack/cinder/blob/0ec28f84289490c80688a58244e091224c9c8393/cinder/policy.py#L31 | 15:20 |
mhen | [2] https://github.com/openstack/oslo.policy/blob/1e3f81c89b49451bd4c32a12f5a338441c5c1e56/oslo_policy/opts.py#L38 | 15:20 |
gagehugo | cinder's commit for that was https://github.com/openstack/cinder/commit/8c132193923168150fdc7f62a20e2d887cde723b | 15:21 |
*** larainema has quit IRC | 15:21 | |
mhen | So if an operator/provider deploys their own policy files and doesn't pay attention, one of their files might be ignored without them immediately noticing | 15:22 |
mhen | if you search online, there is much talk about the json or yaml but it's hard to find a resource telling you exactly where to use which | 15:22 |
*** ricolin has joined #openstack-meeting | 15:22 | |
gagehugo | I thought there was a movement a while ago to use yaml, but I could be remembering that wrong | 15:23 |
gagehugo | obv still supporting json | 15:23 |
bnemec | yaml was preferred because it allows comments | 15:23 |
gagehugo | ah yeah | 15:23 |
mhen | yaml has advantages, but simply ignoring a supplied json silently doesn't look good to me | 15:23 |
*** e0ne has quit IRC | 15:23 | |
bnemec | So it's what we're shipping for sample policy configs because it allows us to inline the description text. | 15:23 |
bnemec | Agreed that neither should be ignored though. Both are still supported. | 15:24 |
*** kopecmartin is now known as kopecmartin|off | 15:24 | |
nickthetait | this does sound like a security bug to me | 15:24 |
*** dmacpher has quit IRC | 15:25 | |
gagehugo | could open one against cinder and nova and get to the bottom of this | 15:25 |
mhen | note: you can change this in the respective components config (e.g. nova.conf) but the problem here is that the defaults are different | 15:25 |
gagehugo | mhen: what release are you using? | 15:25 |
mhen | gagehugo, queens currently | 15:25 |
gagehugo | ok | 15:25 |
mhen | but looked up the code in master | 15:25 |
mhen | seems to be no different in master either, see links above | 15:26 |
mhen | Nova says json: https://github.com/openstack/nova/blob/a37a035c9d359b29fed6ea08bc99b93e51164e61/doc/source/configuration/index.rst | 15:26 |
gagehugo | their documentation might need updating | 15:26 |
gagehugo | their policy generator says policy.yaml | 15:27 |
gagehugo | https://github.com/openstack/nova/blob/master/etc/nova/nova-policy-generator.conf | 15:27 |
mhen | gagehugo, but I wasn't able to find the overriding part in Nova as found in Cinder, so Nova falls back to json as per oslo.policy code if I got that right | 15:27 |
mhen | see [1] and [2] above | 15:28 |
gagehugo | ok | 15:28 |
mhen | at least that's what I observe in queens right now and looking at the code, in master it hasn't changed | 15:29 |
* gagehugo takes notes of all this | 15:29 | |
mhen | thanks | 15:31 |
gagehugo | mhen: ok, I can dig into this a bit | 15:31 |
mhen | thank you! | 15:32 |
gagehugo | thanks for bringing this up! | 15:32 |
gagehugo | anything else? | 15:32 |
nickthetait | I have a bit of news on security guide updates | 15:32 |
nickthetait | submitted first few patches https://review.opendev.org/#/q/is:open+owner:nickthetait | 15:33 |
gagehugo | nice | 15:33 |
nickthetait | pretty minor stuff so far, needing reviews | 15:33 |
*** ricolin_ has joined #openstack-meeting | 15:33 | |
nickthetait | and one quick questions, is this "future" section right at the bottom of this page still needed? https://docs.openstack.org/security-guide/identity/federated-keystone.html | 15:34 |
gagehugo | I'll take a look | 15:34 |
gagehugo | nickthetait: I can ask in keystone | 15:34 |
nickthetait | thx | 15:34 |
nickthetait | thats all I have | 15:35 |
gagehugo | thanks! | 15:35 |
* gagehugo needs to run | 15:35 | |
gagehugo | thanks everyone! have a good rest of the week | 15:35 |
gagehugo | #endmeeting | 15:35 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:35 | |
nickthetait | take care | 15:35 |
openstack | Meeting ended Thu Jul 25 15:35:40 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:35 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/security/2019/security.2019-07-25-15.03.html | 15:35 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/security/2019/security.2019-07-25-15.03.txt | 15:35 |
openstack | Log: http://eavesdrop.openstack.org/meetings/security/2019/security.2019-07-25-15.03.log.html | 15:35 |
*** ricolin has quit IRC | 15:36 | |
*** ricolin_ is now known as ricolin | 15:38 | |
*** gyee has joined #openstack-meeting | 15:44 | |
*** artom has quit IRC | 15:46 | |
*** altlogbot_0 has quit IRC | 15:48 | |
*** altlogbot_1 has joined #openstack-meeting | 15:50 | |
*** tesseract has quit IRC | 15:50 | |
*** links has quit IRC | 15:52 | |
*** nickthetait has left #openstack-meeting | 15:53 | |
*** ttsiouts has quit IRC | 16:00 | |
*** brault has quit IRC | 16:04 | |
*** tssurya has quit IRC | 16:04 | |
*** brault has joined #openstack-meeting | 16:05 | |
*** enriquetaso has quit IRC | 16:09 | |
*** brault has quit IRC | 16:09 | |
*** artom has joined #openstack-meeting | 16:12 | |
*** mattw4 has joined #openstack-meeting | 16:14 | |
*** brinzhang_ has quit IRC | 16:18 | |
*** brinzhang has quit IRC | 16:18 | |
*** mattw4 has quit IRC | 16:23 | |
*** mattw4 has joined #openstack-meeting | 16:23 | |
*** lpetrut has quit IRC | 16:29 | |
*** iyamahat has joined #openstack-meeting | 16:31 | |
*** ricolin has quit IRC | 16:39 | |
*** iyamahat has quit IRC | 16:41 | |
*** ayoung has joined #openstack-meeting | 16:43 | |
*** links has joined #openstack-meeting | 16:45 | |
*** links has quit IRC | 16:47 | |
*** igordc has quit IRC | 16:58 | |
*** igordc has joined #openstack-meeting | 16:58 | |
*** diablo_rojo has joined #openstack-meeting | 17:11 | |
*** armax has quit IRC | 17:13 | |
*** jaypipes has quit IRC | 17:18 | |
*** ralonsoh has quit IRC | 17:24 | |
*** igordc has quit IRC | 17:28 | |
*** bobh has quit IRC | 17:39 | |
*** psachin has quit IRC | 17:50 | |
*** armax has joined #openstack-meeting | 17:50 | |
*** iyamahat has joined #openstack-meeting | 17:58 | |
*** bobh has joined #openstack-meeting | 18:11 | |
*** mattw4 has quit IRC | 18:11 | |
*** mattw4 has joined #openstack-meeting | 18:11 | |
*** dklyle has quit IRC | 18:11 | |
*** dklyle has joined #openstack-meeting | 18:12 | |
*** priteau has quit IRC | 18:13 | |
*** jamesmcarthur has joined #openstack-meeting | 18:17 | |
*** bobh has quit IRC | 18:17 | |
*** igordc has joined #openstack-meeting | 18:22 | |
*** brault has joined #openstack-meeting | 18:23 | |
*** brault has quit IRC | 18:27 | |
*** brault has joined #openstack-meeting | 18:27 | |
*** brinzhang has joined #openstack-meeting | 18:37 | |
*** brinzhang_ has joined #openstack-meeting | 18:37 | |
*** eharney has quit IRC | 18:39 | |
*** brinzhang_ has quit IRC | 18:42 | |
*** brinzhang has quit IRC | 18:42 | |
*** brinzhang has joined #openstack-meeting | 18:43 | |
*** brinzhang_ has joined #openstack-meeting | 18:43 | |
*** lbragstad has quit IRC | 18:51 | |
*** mriedem has quit IRC | 18:54 | |
*** mriedem has joined #openstack-meeting | 19:03 | |
*** armstrong has joined #openstack-meeting | 19:04 | |
*** bobh has joined #openstack-meeting | 19:05 | |
*** enriquetaso has joined #openstack-meeting | 19:09 | |
*** igordc has quit IRC | 19:09 | |
*** senrique_ has joined #openstack-meeting | 19:10 | |
*** bobh has quit IRC | 19:11 | |
*** enriquetaso has quit IRC | 19:13 | |
*** jaypipes has joined #openstack-meeting | 19:16 | |
*** iyamahat has quit IRC | 19:18 | |
*** igordc has joined #openstack-meeting | 19:25 | |
*** igordc has quit IRC | 19:32 | |
*** e0ne has joined #openstack-meeting | 19:39 | |
*** jamesmcarthur has quit IRC | 19:40 | |
*** jamesmcarthur has joined #openstack-meeting | 19:41 | |
*** bbowen has quit IRC | 19:41 | |
*** jamesmcarthur has quit IRC | 19:46 | |
*** dasp has quit IRC | 19:51 | |
*** senrique_ is now known as enriquetaso | 19:52 | |
*** ayoung has quit IRC | 19:52 | |
*** dasp has joined #openstack-meeting | 19:54 | |
*** ayoung has joined #openstack-meeting | 20:06 | |
*** igordc has joined #openstack-meeting | 20:08 | |
*** jamesmcarthur has joined #openstack-meeting | 20:11 | |
*** ayoung has quit IRC | 20:13 | |
*** iyamahat has joined #openstack-meeting | 20:14 | |
*** jamesmcarthur has quit IRC | 20:19 | |
*** gyee has quit IRC | 20:22 | |
*** wwriverrat has quit IRC | 20:26 | |
*** jamesmcarthur has joined #openstack-meeting | 20:30 | |
*** zbr_ has quit IRC | 20:35 | |
*** zbr has joined #openstack-meeting | 20:37 | |
*** diablo_rojo has quit IRC | 20:40 | |
*** boxiang_ has quit IRC | 20:48 | |
*** boxiang_ has joined #openstack-meeting | 20:48 | |
*** mriedem has quit IRC | 20:52 | |
*** mriedem has joined #openstack-meeting | 20:53 | |
*** bobh has joined #openstack-meeting | 20:53 | |
*** iyamahat has quit IRC | 20:59 | |
*** bobh has quit IRC | 20:59 | |
*** gyee has joined #openstack-meeting | 20:59 | |
*** iyamahat has joined #openstack-meeting | 21:00 | |
*** jamesmcarthur has quit IRC | 21:00 | |
*** Lucas_Gray has joined #openstack-meeting | 21:00 | |
*** jamesmcarthur has joined #openstack-meeting | 21:01 | |
*** bbowen has joined #openstack-meeting | 21:02 | |
*** zbr has quit IRC | 21:11 | |
*** jamesmcarthur has quit IRC | 21:13 | |
*** slaweq has quit IRC | 21:15 | |
*** diablo_rojo has joined #openstack-meeting | 21:19 | |
*** iyamahat has quit IRC | 21:25 | |
*** zbr has joined #openstack-meeting | 21:26 | |
*** whoami-rajat has quit IRC | 21:28 | |
*** pcaruana has quit IRC | 21:28 | |
*** enriquetaso has quit IRC | 21:31 | |
*** enriquetaso has joined #openstack-meeting | 21:32 | |
*** zbr has quit IRC | 21:32 | |
*** panda has quit IRC | 21:34 | |
*** panda has joined #openstack-meeting | 21:34 | |
*** brault has quit IRC | 21:36 | |
*** jamesmcarthur has joined #openstack-meeting | 21:46 | |
*** jamesmcarthur has quit IRC | 21:51 | |
*** e0ne has quit IRC | 21:56 | |
*** slaweq has joined #openstack-meeting | 22:11 | |
*** Liang__ has joined #openstack-meeting | 22:15 | |
*** slaweq has quit IRC | 22:16 | |
*** rcernin has joined #openstack-meeting | 22:16 | |
*** jamesmcarthur has joined #openstack-meeting | 22:38 | |
*** carloss has quit IRC | 22:38 | |
*** armax has quit IRC | 22:40 | |
*** Liang__ has quit IRC | 22:43 | |
*** jamesmcarthur has quit IRC | 22:44 | |
*** ykatabam has joined #openstack-meeting | 22:59 | |
*** _erlon_ has quit IRC | 23:07 | |
*** mriedem has quit IRC | 23:18 | |
*** jamesmcarthur has joined #openstack-meeting | 23:20 | |
*** jamesmcarthur has quit IRC | 23:24 | |
*** brinzhang has quit IRC | 23:24 | |
*** brinzhang has joined #openstack-meeting | 23:25 | |
*** armax has joined #openstack-meeting | 23:30 | |
*** brault has joined #openstack-meeting | 23:36 | |
*** brault has quit IRC | 23:40 | |
*** jamesmcarthur has joined #openstack-meeting | 23:50 | |
*** brinzhang_ has quit IRC | 23:52 | |
*** brinzhang_ has joined #openstack-meeting | 23:53 | |
*** enriquetaso has quit IRC | 23:55 | |
*** jamesmcarthur has quit IRC | 23:55 | |
*** armstrong has quit IRC | 23:55 | |
*** smcginnis has quit IRC | 23:56 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!