*** tetsuro has joined #openstack-meeting | 00:02 | |
*** tetsuro has quit IRC | 00:09 | |
*** armax has quit IRC | 00:14 | |
*** yamamoto has joined #openstack-meeting | 00:23 | |
*** ijw has joined #openstack-meeting | 00:35 | |
*** ijw_ has quit IRC | 00:39 | |
*** yamamoto has quit IRC | 01:08 | |
*** rcernin has quit IRC | 01:19 | |
*** rcernin has joined #openstack-meeting | 01:29 | |
*** jmasud has quit IRC | 01:32 | |
*** Liang__ has joined #openstack-meeting | 01:33 | |
*** jmasud has joined #openstack-meeting | 01:34 | |
*** andrebeltrami has quit IRC | 01:41 | |
*** yamamoto has joined #openstack-meeting | 01:58 | |
*** manpreet has quit IRC | 02:00 | |
*** gyee has quit IRC | 02:03 | |
*** rcernin has quit IRC | 02:28 | |
*** ijw has quit IRC | 02:29 | |
*** rcernin has joined #openstack-meeting | 02:30 | |
*** ijw has joined #openstack-meeting | 02:43 | |
*** Liang__ has quit IRC | 02:46 | |
*** ijw has quit IRC | 02:48 | |
*** ijw has joined #openstack-meeting | 03:14 | |
*** ijw has quit IRC | 03:19 | |
*** rcernin has quit IRC | 03:24 | |
*** psachin has joined #openstack-meeting | 03:35 | |
*** rcernin has joined #openstack-meeting | 03:47 | |
*** manpreet has joined #openstack-meeting | 04:20 | |
*** evrardjp has quit IRC | 04:33 | |
*** evrardjp has joined #openstack-meeting | 04:33 | |
*** vishalmanchanda has joined #openstack-meeting | 04:33 | |
*** psahoo has joined #openstack-meeting | 04:43 | |
*** Liang__ has joined #openstack-meeting | 05:01 | |
*** ociuhandu has joined #openstack-meeting | 05:09 | |
*** ociuhandu has quit IRC | 05:14 | |
*** hyunsikyang has joined #openstack-meeting | 05:51 | |
*** hyunsikyang__ has quit IRC | 05:54 | |
*** sri_ has quit IRC | 05:56 | |
*** yamamoto has quit IRC | 05:56 | |
*** sri_ has joined #openstack-meeting | 05:57 | |
*** yamamoto has joined #openstack-meeting | 06:22 | |
*** moguimar has joined #openstack-meeting | 06:48 | |
*** lpetrut has joined #openstack-meeting | 06:50 | |
*** dklyle has quit IRC | 06:55 | |
*** apetrich has joined #openstack-meeting | 06:59 | |
*** slaweq has joined #openstack-meeting | 07:08 | |
*** ociuhandu has joined #openstack-meeting | 07:15 | |
*** belmoreira has joined #openstack-meeting | 07:18 | |
*** jamespage has quit IRC | 07:40 | |
*** johnsom has quit IRC | 07:41 | |
*** ykatabam has quit IRC | 07:41 | |
*** masayukig has quit IRC | 07:42 | |
*** e0ne has joined #openstack-meeting | 07:42 | |
*** masayukig has joined #openstack-meeting | 07:43 | |
*** jamespage has joined #openstack-meeting | 07:46 | |
*** rpittau has quit IRC | 07:47 | |
*** rpittau has joined #openstack-meeting | 07:56 | |
*** johnsom has joined #openstack-meeting | 07:57 | |
*** rcernin has quit IRC | 07:58 | |
*** ociuhandu has quit IRC | 08:02 | |
*** tosky has joined #openstack-meeting | 08:18 | |
*** manpreet has quit IRC | 08:30 | |
*** manpreet has joined #openstack-meeting | 08:30 | |
*** vishalmanchanda has quit IRC | 08:30 | |
*** vishalmanchanda has joined #openstack-meeting | 08:30 | |
*** sri_ has quit IRC | 08:30 | |
*** sri_ has joined #openstack-meeting | 08:30 | |
*** masayukig has quit IRC | 08:30 | |
*** masayukig has joined #openstack-meeting | 08:30 | |
*** rpittau has quit IRC | 08:30 | |
*** rpittau has joined #openstack-meeting | 08:30 | |
*** johnsom has quit IRC | 08:30 | |
*** johnsom has joined #openstack-meeting | 08:30 | |
*** ociuhandu has joined #openstack-meeting | 08:36 | |
*** ociuhandu has quit IRC | 08:41 | |
*** priteau has joined #openstack-meeting | 08:50 | |
*** e0ne has quit IRC | 09:13 | |
*** psahoo has quit IRC | 09:17 | |
*** ociuhandu has joined #openstack-meeting | 09:17 | |
*** e0ne has joined #openstack-meeting | 09:18 | |
*** ociuhandu has quit IRC | 09:22 | |
*** psahoo has joined #openstack-meeting | 09:32 | |
*** Lucas_Gray has joined #openstack-meeting | 09:35 | |
*** Liang__ has quit IRC | 09:46 | |
*** Liang__ has joined #openstack-meeting | 09:47 | |
*** ociuhandu has joined #openstack-meeting | 09:47 | |
*** psahoo has quit IRC | 10:21 | |
*** psahoo has joined #openstack-meeting | 10:35 | |
*** Liang__ has quit IRC | 10:36 | |
*** psahoo has quit IRC | 10:40 | |
*** psahoo has joined #openstack-meeting | 10:52 | |
*** psahoo has quit IRC | 11:08 | |
*** yamamoto has quit IRC | 11:10 | |
*** yamamoto has joined #openstack-meeting | 11:10 | |
*** yamamoto has quit IRC | 11:11 | |
*** Lucas_Gray has quit IRC | 11:12 | |
*** psahoo has joined #openstack-meeting | 11:22 | |
*** yamamoto has joined #openstack-meeting | 11:24 | |
*** Lucas_Gray has joined #openstack-meeting | 11:27 | |
*** rfolco has joined #openstack-meeting | 11:36 | |
*** belmoreira has quit IRC | 11:49 | |
*** raildo has joined #openstack-meeting | 12:04 | |
*** belmoreira has joined #openstack-meeting | 12:06 | |
*** belmoreira has quit IRC | 12:08 | |
*** psahoo has quit IRC | 12:09 | |
*** ociuhandu has quit IRC | 13:06 | |
*** redrobot has quit IRC | 13:08 | |
*** andrebeltrami has joined #openstack-meeting | 13:09 | |
*** e0ne has quit IRC | 13:20 | |
*** ociuhandu has joined #openstack-meeting | 13:21 | |
*** ociuhandu has quit IRC | 13:25 | |
*** e0ne has joined #openstack-meeting | 13:31 | |
*** Lucas_Gray has quit IRC | 13:37 | |
*** Wryhder has joined #openstack-meeting | 13:38 | |
*** Wryhder is now known as Lucas_Gray | 13:39 | |
*** TrevorV has joined #openstack-meeting | 13:45 | |
*** Luzi has joined #openstack-meeting | 13:45 | |
*** rosmaita has joined #openstack-meeting | 13:56 | |
*** alistarle has joined #openstack-meeting | 14:00 | |
abhishekk | #startmeeting glance | 14:01 |
---|---|---|
openstack | Meeting started Thu Aug 20 14:01:37 2020 UTC and is due to finish in 60 minutes. The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:01 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:01 |
*** openstack changes topic to " (Meeting topic: glance)" | 14:01 | |
openstack | The meeting name has been set to 'glance' | 14:01 |
abhishekk | #topic roll call | 14:01 |
*** openstack changes topic to "roll call (Meeting topic: glance)" | 14:01 | |
dansmith | o/ | 14:01 |
abhishekk | #link https://etherpad.openstack.org/p/glance-team-meeting-agenda | 14:01 |
abhishekk | o/ | 14:01 |
*** jokke has joined #openstack-meeting | 14:02 | |
alistarle | O/ | 14:02 |
jokke | o/ | 14:02 |
abhishekk | cool, everyone is here, so lets start | 14:02 |
*** psachin has quit IRC | 14:02 | |
abhishekk | we have short agenda today | 14:02 |
abhishekk | #topic Updates | 14:02 |
*** openstack changes topic to "Updates (Meeting topic: glance)" | 14:02 | |
abhishekk | October 2020 PTG slot booking is open | 14:03 |
abhishekk | I am proposing to book timeslots between 1400 UTC 1700 UTC | 14:03 |
jokke | ++ | 14:03 |
abhishekk | It might be conflict for dansmith and rosmaita | 14:03 |
alistarle | ++ too | 14:03 |
abhishekk | If you guys have any plans then I can keep one day for later hours | 14:04 |
dansmith | I'm okay with 1400 as far as it being early, but I don't know what else I will have on those days | 14:04 |
abhishekk | dansmith, ack | 14:04 |
dansmith | definitely don't schedule it around me | 14:04 |
abhishekk | ack | 14:05 |
abhishekk | I will talk with rosmaita as well and then will book the slots | 14:05 |
abhishekk | #topic release/periodic job updates | 14:05 |
*** openstack changes topic to "release/periodic job updates (Meeting topic: glance)" | 14:05 | |
abhishekk | glance_store 2.2.0 released | 14:05 |
rosmaita | the cinder slots are on the ethercalc thing already | 14:06 |
abhishekk | rosmaita, ack | 14:06 |
rosmaita | i'll try to attend anything you schedule other than those times | 14:06 |
abhishekk | V3 milestones 3 weeks away | 14:06 |
abhishekk | Final release for non clients libraries - 3 weeks from now | 14:06 |
*** belmoreira has joined #openstack-meeting | 14:07 | |
abhishekk | So we need to reviews glance_store related patches this and next week on priority basis | 14:07 |
abhishekk | I will highlight those patches in next topic | 14:07 |
abhishekk | Periodic job all green, TIME_OUT, frequent failure of py36 is resolved | 14:07 |
abhishekk | thanks to dansmith we have finally got rid of TIME_OUT and frequent failure of function-py36/py38 issues | 14:08 |
dansmith | \/o | 14:08 |
dansmith | er, heh | 14:08 |
abhishekk | \o/ | 14:08 |
abhishekk | Moving ahead | 14:08 |
abhishekk | #topic Important reviews | 14:08 |
*** openstack changes topic to "Important reviews (Meeting topic: glance)" | 14:08 | |
abhishekk | Copy image race condition - https://review.opendev.org/743597 | 14:09 |
abhishekk | Sparse image upload - https://review.opendev.org/#/c/744282 | 14:09 |
abhishekk | Cinder multiple stores support - https://review.opendev.org/746556 | 14:09 |
abhishekk | Rampup rbd resize - https://review.opendev.org/746579 | 14:09 |
abhishekk | Fixing flaky copy-image-revert-lifecycle test - https://review.opendev.org/#/c/745937/ | 14:09 |
abhishekk | Last patch is merged, so ignore that | 14:09 |
dansmith | I just reviewed the sparse file one | 14:09 |
alistarle | Thanks for your review | 14:09 |
alistarle | I didn't have the time to check it | 14:09 |
jokke | yeah same | 14:09 |
jokke | just minutes before the meeting | 14:09 |
abhishekk | ack, today I am conducting meeting from mobile, so not able to look at those | 14:10 |
abhishekk | These are some important reviews which we need to be focus on this week and next week | 14:11 |
alistarle | Thanks for that guys, I will implement the fix before I go to holidays for 3 week tomorrow, then yebinama will take the lead to get that merged asap | 14:11 |
abhishekk | alistarle, ack, thank you | 14:11 |
dansmith | alistarle: all minor stuff I think, should be quick | 14:11 |
alistarle | good new then | 14:12 |
alistarle | Quick question | 14:12 |
abhishekk | alistarle, there is still some partial work pending or this is it? | 14:12 |
*** ociuhandu has joined #openstack-meeting | 14:12 | |
alistarle | should I add more functionnal tests ? Or test for RBD ? | 14:12 |
alistarle | yes this first patch implement only the write optimisation of the spec, not the read one, which require much more cleaning work on our side | 14:13 |
abhishekk | more meaningful tests are always good | 14:13 |
abhishekk | alistarle, so the commit message should say partial implements? | 14:13 |
alistarle | I will update that then | 14:13 |
abhishekk | cool | 14:14 |
jokke | alistarle: I'd definitely would love if we had tempest test for that (I think it's only env where we have actual rbd store available) to make sure that th checksum matches if the thin provision is on. | 14:14 |
dansmith | we can float a patch against glance that depends-on this and will run the rbd job configured thusly | 14:14 |
alistarle | about meaninfull test, I see that functionnal test should be the the same for all stores, but thin provisionning is not possible for all stores | 14:14 |
jokke | alistarle: I have no idea how much work it would need, but would be very nice peace of mind | 14:14 |
dansmith | perhaps we should just always enable thin on our jobs after this? | 14:15 |
dansmith | jokke: trivial just to run the job with this enabled | 14:15 |
abhishekk | I guess that is good idea, to always run job with thin provisioning enabled | 14:16 |
dansmith | I'll put a patch up and alistarle can use it to recheck while waiting for the glance_store patch to merge | 14:16 |
alistarle | Ok, should I update the functionnal test of glance_store in this commit then ? | 14:16 |
alistarle | oh thanks | 14:17 |
jokke | well that just flips the situation around when we never test the fat provisioned. Thus I was thinking rather just specific test than full tempest run | 14:17 |
jokke | flip, create an image, download it, see the hash matches | 14:17 |
dansmith | that's not how tempest jobs work | 14:18 |
dansmith | everyone else would test the thick case though | 14:18 |
abhishekk | I am not sure it is possible to flip the glance config parameter in tempest | 14:18 |
dansmith | correct | 14:18 |
jokke | oh, k | 14:18 |
jokke | so every config variation needs it's own test run? | 14:19 |
abhishekk | AFAIK, you can specify your configs in zuul.yaml while defining job | 14:20 |
dansmith | pretty much, although there are some shortcut ways around that but that's not employed very often | 14:20 |
abhishekk | Ok, alistarle thank you for your work | 14:21 |
jokke | fair enough ... so yeah, lets flip it on by default and I think we have periodic ceph job as well, don't we? Maybe having that fat and we have both ways covered on something we monitor | 14:21 |
alistarle | Not for glance_store, but for glance I think | 14:22 |
jokke | yeah, need to test it in glance runs | 14:22 |
alistarle | functionnal test are very light in glance store, only a simple crud for filesystem en swift | 14:22 |
alistarle | *and | 14:22 |
*** Wryhder has joined #openstack-meeting | 14:22 | |
jokke | yup | 14:22 |
abhishekk | we have periodic job for swift and cinder for glance_store | 14:22 |
*** Lucas_Gray has quit IRC | 14:23 | |
jokke | was something couple of people started/were supposed to do and both of them moved to other things before much progress was made | 14:23 |
abhishekk | that was ages ago :D | 14:23 |
*** Wryhder is now known as Lucas_Gray | 14:23 | |
alistarle | I will not have the time to check that before my holiday, but I can put yebinama on that glance test work if he has the time | 14:23 |
abhishekk | alistarle, ack | 14:24 |
*** lpetrut has quit IRC | 14:24 | |
*** yamamoto has quit IRC | 14:24 | |
abhishekk | apart from this we have Rampup rbd resizing and cinder multiple store support for reviews | 14:24 |
abhishekk | Ok, moving ahead | 14:25 |
jokke | alistarle: if it's just definition of new job/changing a config option in existing one instead of figuring out how to reconfigure and respin the service, I don't see it being requirement for that patch to merge, just something we should have in place before release | 14:25 |
abhishekk | or I can also take care of that | 14:25 |
dansmith | I'm working on the job right now | 14:26 |
abhishekk | cool | 14:26 |
*** alistarle has quit IRC | 14:27 | |
abhishekk | #topic Open discussion | 14:27 |
*** openstack changes topic to "Open discussion (Meeting topic: glance)" | 14:27 | |
abhishekk | So we have some tempest tests for multiple stores | 14:27 |
abhishekk | #link https://review.opendev.org/745712 | 14:27 |
*** alistarle has joined #openstack-meeting | 14:28 | |
dansmith | nice | 14:29 |
jokke | good stuff | 14:29 |
dansmith | that reminds me, | 14:30 |
abhishekk | It is difficult to trigger failure from tempest so adding negative tests might need more time | 14:30 |
dansmith | I should enable my nova-and-glance-rbd-multistore job on glance as well | 14:31 |
*** dklyle has joined #openstack-meeting | 14:31 | |
abhishekk | dansmith, it is possible to restart the g-api service on cleanup? | 14:31 |
abhishekk | gmann, ^^ in tempest | 14:31 |
dansmith | cleanup of what? the job yes, a test no | 14:32 |
abhishekk | ohh, so in a job can we have single test running? | 14:32 |
abhishekk | but that will be too much of overhead | 14:32 |
dansmith | in nova we have a couple tests that require really weird stuff for live migration, so we actually run tempest restricted to a couple tests multiple times with config switching in between | 14:32 |
dansmith | it's not very common, and a bit tricky, but it's doable | 14:33 |
abhishekk | I will have a look at those tests to get some ideas, could you please point it ? | 14:33 |
dansmith | but tempest tests that confirm invalid configs or something are probably not likely to merge | 14:33 |
gmann | yeah, what dansmith said. | 14:34 |
dansmith | abhishekk: I'll have to go find it, will point you at them in a bit | 14:34 |
gmann | is it changing the config in between of test? | 14:34 |
abhishekk | I want to try revert logic on all_stores_must_succeed is True, by deleting the staging_store or one of the file store in between | 14:34 |
alistarle | can't we use mutating config for that ? | 14:35 |
alistarle | in order to change glance live config without running a new job | 14:35 |
dansmith | abhishekk: if you mean one test that stages, and then break staging, and another test that tries import, that's not a legit thing to land in tempest I think | 14:35 |
abhishekk | gmann, it is about if I delete the staging store file directory during test then that will cause failure for other tests as well if that staging dir is not created again | 14:35 |
dansmith | abhishekk: that's out of scope for tempest I think | 14:36 |
gmann | yeah | 14:36 |
gmann | you can write functional tests for that | 14:36 |
abhishekk | hmm, so may be we need to depend on functional test which we have | 14:36 |
dansmith | abhishekk: we could do that with some shell scripting in post or something, but yeah.. that's what functional tests are for | 14:36 |
tosky | also tempest-like tests in a plugin, if you want to reuse the infrastructure, I guess | 14:36 |
abhishekk | dansmith, ack | 14:37 |
gmann | tosky: it would not be in scope of how tempest tests work. | 14:37 |
abhishekk | tosky, that will create also create new repo, right, or could we maintain it in project repo as well | 14:38 |
abhishekk | gmann, is there any restriction on the size of image we can use for web-download? | 14:38 |
abhishekk | in tempest? | 14:38 |
dansmith | abhishekk: you can control the image in your job, | 14:39 |
gmann | Tempest tests cannot control on when API operation finish and in between verification | 14:39 |
dansmith | so unless it causes it to take longer than the job timeout, should be okay | 14:39 |
tosky | that's why I wrote tempest-like | 14:39 |
abhishekk | dansmith, ack | 14:39 |
gmann | dansmith: yeah but that might not be guaranteed right | 14:40 |
gmann | i am concern that can end up unstable test | 14:40 |
tosky | if the pattern is: run some test, change the configuration, re-run that test, couldn't that be done with some ansible/zuul glue? | 14:40 |
dansmith | surely, but he asked about specific tempest-based limits, of which there are none, AFAIK | 14:40 |
dansmith | gmann: ^ | 14:40 |
gmann | yeah | 14:40 |
gmann | Tempest limits are what API has | 14:41 |
dansmith | abhishekk: btw, really glad to see this kind of team-wide test conversation taking place in glance :) | 14:41 |
tosky | (there is whitebox-tempest-plugin, if you need to something else on the nodes) | 14:41 |
abhishekk | :D | 14:41 |
*** haleyb has quit IRC | 14:42 | |
dansmith | tosky: yeah, do we run that anywhere in upstream CI? | 14:42 |
abhishekk | still we have lot many features to cover with tempest, hopefully that will be covered in this cycle | 14:42 |
gmann | dansmith: on whitebox-tempest-plugin gate itself | 14:42 |
tosky | dansmith: I don't remember on top of my head; the people working on it are mostly working on nova | 14:43 |
dansmith | gmann: okay | 14:43 |
abhishekk | will try to figure out something for negative multiple-stores tempest tests | 14:44 |
abhishekk | that's it from me today | 14:44 |
abhishekk | do you guys have anything else in mind? | 14:44 |
tosky | question before you close: who is responsible for the 'cursive' library? It seems a dependencies, but it's in the x/ namespace | 14:44 |
tosky | I noticed while cleaning some barbican jobs | 14:45 |
tosky | but the usage pointed to glance more than other projects | 14:45 |
gmann | tosky: owner of x/<lib> repo. | 14:45 |
abhishekk | not sure, I have submitted one patch in cursive (may be 2 years before), there was only one reviewer I guess | 14:46 |
tosky | right, but if it's a glance dependency, just be aware it may break | 14:46 |
rosmaita | cursive was maintained by the johns hopkins applied physics lab | 14:46 |
rosmaita | but they stopped working on openstack maybe two cycles ago | 14:46 |
rosmaita | not sure who owns it now | 14:46 |
abhishekk | we have periodic job for cursive library | 14:47 |
tosky | I mentioned it because we had an x/ repository (devstack-plugin-nfs) which really ended up there by mistake and it was moved back to openstack/ after being officially adopted by cinder & qa | 14:47 |
abhishekk | that will help us to know if something is breaking due to cursive | 14:47 |
rosmaita | yeah, glance, cinder, and nova all use it | 14:47 |
*** haleyb has joined #openstack-meeting | 14:48 | |
abhishekk | yes | 14:48 |
rosmaita | fwiw, i think it belongs in openstack namespace | 14:48 |
abhishekk | it is now in openstack-archive :o | 14:49 |
tosky | https://opendev.org/x/cursive | 14:50 |
gmann | openstack-archive is because it was retired from opensatck - opendev is what current location is https://opendev.org/x/cursive | 14:50 |
*** armax has joined #openstack-meeting | 14:50 | |
abhishekk | ack | 14:50 |
abhishekk | so we need to find one maintainer to bring it back under openstack? | 14:51 |
abhishekk | as glance, cinder and nova all use it for image signature verification stuff? | 14:51 |
gmann | some project needs to own it or a separate project with maintainer if no project want to own | 14:52 |
abhishekk | ack | 14:52 |
rosmaita | maybe nova, glance, cinder, and barbican can get together at the PTG and work something out | 14:52 |
dansmith | [07:02:45] <abhishekk>we have short agenda today | 14:52 |
abhishekk | +1 | 14:52 |
dansmith | :P | 14:52 |
abhishekk | :D | 14:52 |
abhishekk | yep, I will add this topic on glance PTG agenda | 14:53 |
abhishekk | anything else, before closing? | 14:53 |
abhishekk | happy holidays alistarle and jokke | 14:53 |
jokke | o/~ | 14:54 |
jokke | I'll be around start of next week, off from Thu latest | 14:54 |
abhishekk | cool | 14:54 |
*** jmasud has quit IRC | 14:54 | |
abhishekk | thank you all | 14:54 |
jokke | thanks everybody | 14:55 |
abhishekk | #endmeeting | 14:55 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 14:55 | |
openstack | Meeting ended Thu Aug 20 14:55:41 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:55 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-08-20-14.01.html | 14:55 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-08-20-14.01.txt | 14:55 |
openstack | Log: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-08-20-14.01.log.html | 14:55 |
*** jmasud has joined #openstack-meeting | 14:56 | |
*** rosmaita has left #openstack-meeting | 14:56 | |
gagehugo | #startmeeting security | 15:00 |
openstack | Meeting started Thu Aug 20 15:00:10 2020 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
*** openstack changes topic to " (Meeting topic: security)" | 15:00 | |
openstack | The meeting name has been set to 'security' | 15:00 |
gagehugo | #link https://etherpad.opendev.org/p/security-agenda agenda | 15:00 |
Luzi | o/ | 15:01 |
*** yamamoto has joined #openstack-meeting | 15:01 | |
fungi | oh, yeah, i'm also around | 15:02 |
gagehugo | o/ | 15:04 |
gagehugo | #link OpenDev PTG Dates Announced | 15:04 |
gagehugo | whoops | 15:04 |
gagehugo | #topic OpenDev PTG Dates Announced | 15:04 |
*** openstack changes topic to "OpenDev PTG Dates Announced (Meeting topic: security)" | 15:04 | |
gagehugo | #link http://lists.openstack.org/pipermail/openstack-discuss/2020-August/016424.html | 15:04 |
gagehugo | The dates for the next PTG are October 26th to October 30th, 2020 | 15:05 |
gagehugo | Just a reminder | 15:05 |
gagehugo | #topic Anti-spoofing bypass | 15:07 |
*** openstack changes topic to "Anti-spoofing bypass (Meeting topic: security)" | 15:07 | |
gagehugo | #link https://bugs.launchpad.net/neutron/+bug/1884341 | 15:07 |
openstack | Launchpad bug 1884341 in OpenStack Security Advisory "Anti-spoofing bypass" [Undecided,Incomplete] | 15:07 |
gagehugo | fungi: o/ | 15:07 |
fungi | this report has been switched to follow our public workflow | 15:07 |
fungi | it's been confirmed reproducible, but the neutron developers are at a bit of a loss as to how it should be tackled or who has the expertise to work up a fix | 15:08 |
fungi | it could be seen as a bug in the linux kernel, or in supporting tools | 15:09 |
*** yamamoto has quit IRC | 15:09 | |
fungi | depending on whether you expect devices to auto-unwrap null vlan tags | 15:09 |
gagehugo | hmm | 15:10 |
*** larainema has quit IRC | 15:10 | |
fungi | it's probably cleaner if this is solved via a patch/knob for the kernel or ebtables | 15:10 |
gagehugo | ok | 15:12 |
gagehugo | thanks fungi | 15:12 |
gagehugo | #topic Next week's meeting cancelled | 15:12 |
*** openstack changes topic to "Next week's meeting cancelled (Meeting topic: security)" | 15:12 | |
gagehugo | I'll be out next Thur so Im just gonna cancel the meeting | 15:12 |
gagehugo | and we will meet in Sept | 15:12 |
fungi | cool, i was going to be on "vacation" anyway ;) | 15:12 |
gagehugo | #topic open discussion | 15:13 |
*** openstack changes topic to "open discussion (Meeting topic: security)" | 15:13 | |
gagehugo | Does anyone have anything else they want to discuss? | 15:13 |
gagehugo | thanks everyone! have a good rest of the week! | 15:16 |
gagehugo | #endmeeting | 15:16 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 15:16 | |
openstack | Meeting ended Thu Aug 20 15:16:32 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:16 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/security/2020/security.2020-08-20-15.00.html | 15:16 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/security/2020/security.2020-08-20-15.00.txt | 15:16 |
openstack | Log: http://eavesdrop.openstack.org/meetings/security/2020/security.2020-08-20-15.00.log.html | 15:16 |
fungi | thanks gagehugo! | 15:17 |
*** Luzi has quit IRC | 15:18 | |
*** belmoreira has joined #openstack-meeting | 15:23 | |
*** belmoreira has quit IRC | 15:23 | |
*** tosky_ has joined #openstack-meeting | 15:35 | |
*** tosky has quit IRC | 15:36 | |
*** tosky_ is now known as tosky | 15:37 | |
*** mlavalle has joined #openstack-meeting | 15:45 | |
*** Lucas_Gray has quit IRC | 15:52 | |
*** armstrong has joined #openstack-meeting | 15:58 | |
*** Lucas_Gray has joined #openstack-meeting | 16:00 | |
*** yamamoto has joined #openstack-meeting | 16:01 | |
*** alistarle has quit IRC | 16:04 | |
*** hongbin has joined #openstack-meeting | 16:06 | |
*** gyee has joined #openstack-meeting | 16:08 | |
*** yamamoto has quit IRC | 16:12 | |
*** manuvakery has joined #openstack-meeting | 16:21 | |
*** ijw has joined #openstack-meeting | 16:30 | |
*** Lucas_Gray has quit IRC | 16:38 | |
*** dklyle has quit IRC | 16:48 | |
*** dklyle has joined #openstack-meeting | 16:48 | |
*** e0ne has quit IRC | 17:36 | |
*** ijw_ has joined #openstack-meeting | 17:36 | |
*** ijw has quit IRC | 17:39 | |
*** andrebeltrami has quit IRC | 17:58 | |
gmann | #startmeeting policy_popup | 18:01 |
openstack | Meeting started Thu Aug 20 18:01:15 2020 UTC and is due to finish in 60 minutes. The chair is gmann. Information about MeetBot at http://wiki.debian.org/MeetBot. | 18:01 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 18:01 |
*** openstack changes topic to " (Meeting topic: policy_popup)" | 18:01 | |
openstack | The meeting name has been set to 'policy_popup' | 18:01 |
gmann | raildo: you there? | 18:01 |
raildo | gmann, yeah, how you doing? | 18:01 |
gmann | i am good how r u | 18:01 |
raildo | not to bad :) | 18:02 |
gmann | i think we missed to have meeting on 6th | 18:02 |
gmann | anyways let's start | 18:02 |
raildo | sure | 18:03 |
gmann | just added the agenda in etherpad #link https://etherpad.opendev.org/p/default-policy-meeting-agenda | 18:03 |
gmann | same as previous meeting | 18:03 |
gmann | #topic General doubts about Default policy | 18:04 |
*** openstack changes topic to "General doubts about Default policy (Meeting topic: policy_popup)" | 18:04 | |
gmann | #link https://review.opendev.org/#/c/743318/ | 18:04 |
gmann | i did not get chance to review this | 18:04 |
gmann | i will check today or tomorrow | 18:04 |
raildo | gmann, yeah, I need to address Ben's comment, but would be nice for you to take a look as well :) | 18:05 |
gmann | sure | 18:05 |
gmann | #action gmann to review https://review.opendev.org/#/c/743318/ | 18:05 |
gmann | #action raildo need to address the feedback on https://review.opendev.org/#/c/743318/ | 18:05 |
raildo | as general news, I'm looking to be a mentor in a open source initiative in the collage that I graduated, the idea is to get someone to work on the default policy for Barbican | 18:06 |
gmann | #topic Review Requests | 18:06 |
*** openstack changes topic to "Review Requests (Meeting topic: policy_popup)" | 18:06 | |
gmann | raildo: that will be nice. | 18:06 |
gmann | we can engage the contributors in this pop up team and start targeting few projects, like baribican you mentioned | 18:07 |
raildo | and also, I'm raising awareness for this topic inside Red Hat, so I hope to have more folks working on this at least for the next cycle | 18:07 |
gmann | cool | 18:07 |
gmann | cyborg can be one to finish it as they are close | 18:07 |
gmann | #link https://review.opendev.org/#/c/740542/ | 18:08 |
raildo | gmann, yeah, I was taking a look on this patch, things are getting there :) | 18:08 |
gmann | i reviewed their policy patch, mainly i would like to see test coverage first and then set of changes to see the impact | 18:08 |
gmann | basically how I did in nova | 18:08 |
raildo | ++ | 18:09 |
gmann | they do not have much policy so it will be easy | 18:09 |
*** yamamoto has joined #openstack-meeting | 18:09 | |
gmann | not like nova which has around 100s of policy :) | 18:09 |
gmann | any other project you seen started the work? | 18:09 |
raildo | gmann, I'm expecting barbican to be a mid term between both | 18:10 |
gmann | ok | 18:10 |
raildo | gmann, I do not, would be nice to join the team's meetings at least for neutron and manila | 18:10 |
raildo | gmann, since they we're planning to work on this topic during victoria cycle | 18:11 |
gmann | yeah, let me check with amotoki for neutron. | 18:11 |
gmann | and gouthamr if he has any plan for manila | 18:11 |
raildo | cool | 18:11 |
gmann | #action gmann to check neutron and manila plan for policy work. | 18:12 |
gmann | #topic Open Floor | 18:12 |
*** openstack changes topic to "Open Floor (Meeting topic: policy_popup)" | 18:12 | |
*** belmoreira has joined #openstack-meeting | 18:12 | |
gmann | one update on this is- i started working on tooling for json->yaml conversion. | 18:13 |
raildo | gmann, cool, do you have some patches that want me to take a look? | 18:13 |
gmann | and upgrade checks on nova side to declare the json format as deprecated | 18:13 |
gmann | raildo: not yet, most probably next week early I should be able to push those | 18:13 |
raildo | sounds good to me | 18:14 |
*** ijw has joined #openstack-meeting | 18:14 | |
gmann | there are some challenges i am seeing on how policy json file can be generated and how to decide whether it is default rule or not. | 18:14 |
gmann | but it will be more clear when it is up for review and unit tests | 18:15 |
raildo | agreed | 18:15 |
gmann | that is it from my side. | 18:15 |
gmann | raildo you have something ? | 18:15 |
raildo | nothing else from my side | 18:15 |
raildo | gmann, glad to see you around :) | 18:15 |
gmann | raildo: :) | 18:16 |
raildo | gmann, have a good one! | 18:16 |
gmann | let's close today | 18:16 |
gmann | raildo: thanks, you too. | 18:16 |
gmann | #endmeeting | 18:16 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 18:16 | |
openstack | Meeting ended Thu Aug 20 18:16:30 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 18:16 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-08-20-18.01.html | 18:16 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-08-20-18.01.txt | 18:16 |
openstack | Log: http://eavesdrop.openstack.org/meetings/policy_popup/2020/policy_popup.2020-08-20-18.01.log.html | 18:16 |
*** ijw_ has quit IRC | 18:17 | |
*** yamamoto has quit IRC | 18:28 | |
*** belmoreira has quit IRC | 18:30 | |
*** hongbin has quit IRC | 18:33 | |
*** armstrong has quit IRC | 18:37 | |
*** e0ne has joined #openstack-meeting | 18:50 | |
*** manuvakery has quit IRC | 19:00 | |
*** dustinc has joined #openstack-meeting | 19:16 | |
*** eharney has quit IRC | 19:26 | |
*** jmasud has quit IRC | 19:32 | |
*** jmasud has joined #openstack-meeting | 19:33 | |
*** e0ne has quit IRC | 19:34 | |
*** eharney has joined #openstack-meeting | 19:57 | |
*** yoctozepto2 has joined #openstack-meeting | 20:06 | |
*** yoctozepto has quit IRC | 20:07 | |
*** yoctozepto2 is now known as yoctozepto | 20:07 | |
*** jkulik has quit IRC | 20:10 | |
*** smcginnis has quit IRC | 20:12 | |
*** Lucas_Gray has joined #openstack-meeting | 20:21 | |
*** moguimar has quit IRC | 20:21 | |
*** yamamoto has joined #openstack-meeting | 20:27 | |
*** yamamoto has quit IRC | 20:46 | |
*** moguimar has joined #openstack-meeting | 20:50 | |
*** priteau has quit IRC | 20:52 | |
*** vishalmanchanda has quit IRC | 20:52 | |
*** TrevorV has quit IRC | 21:16 | |
*** jmasud has quit IRC | 21:29 | |
*** jmasud has joined #openstack-meeting | 21:31 | |
*** raildo has quit IRC | 21:31 | |
*** hongbin has joined #openstack-meeting | 21:31 | |
*** yamamoto has joined #openstack-meeting | 21:33 | |
*** slaweq has quit IRC | 21:34 | |
*** yamamoto has quit IRC | 21:45 | |
*** tosky has quit IRC | 22:07 | |
*** kopecmartin is now known as kopecmartin|pto | 22:16 | |
*** jmasud has quit IRC | 22:39 | |
*** jmasud has joined #openstack-meeting | 22:40 | |
*** rcernin has joined #openstack-meeting | 22:49 | |
*** mlavalle has quit IRC | 22:56 | |
*** ykatabam has joined #openstack-meeting | 22:56 | |
*** jmasud has quit IRC | 23:02 | |
*** Lucas_Gray has quit IRC | 23:05 | |
*** jmasud has joined #openstack-meeting | 23:05 | |
*** rcernin has quit IRC | 23:06 | |
*** rcernin has joined #openstack-meeting | 23:08 | |
*** yamamoto has joined #openstack-meeting | 23:45 | |
*** sri_ has quit IRC | 23:55 | |
*** csatari has quit IRC | 23:55 | |
*** patrickeast has quit IRC | 23:56 | |
*** knikolla has quit IRC | 23:56 | |
*** aprice has quit IRC | 23:56 | |
*** knikolla has joined #openstack-meeting | 23:58 | |
*** yamamoto has quit IRC | 23:58 | |
*** patrickeast has joined #openstack-meeting | 23:59 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!