| *** tosky has quit IRC | 00:14 | |
| *** macz_ has quit IRC | 00:17 | |
| *** jmasud has joined #openstack-meeting | 00:41 | |
| *** jmasud has quit IRC | 00:42 | |
| *** macz_ has joined #openstack-meeting | 01:27 | |
| *** macz_ has quit IRC | 01:32 | |
| *** Liang__ has joined #openstack-meeting | 01:37 | |
| *** Liang__ has quit IRC | 01:39 | |
| *** rcernin has quit IRC | 01:43 | |
| *** rcernin_ has joined #openstack-meeting | 01:43 | |
| *** rh-jelabarre has quit IRC | 03:19 | |
| *** rcernin_ has quit IRC | 03:24 | |
| *** rcernin_ has joined #openstack-meeting | 03:34 | |
| *** rcernin_ has quit IRC | 03:47 | |
| *** Liang__ has joined #openstack-meeting | 04:13 | |
| *** rcernin has joined #openstack-meeting | 04:20 | |
| *** vishalmanchanda has joined #openstack-meeting | 04:31 | |
| *** rcernin has quit IRC | 05:13 | |
| *** rcernin has joined #openstack-meeting | 05:15 | |
| *** jmasud has joined #openstack-meeting | 05:18 | |
| *** armstrong has quit IRC | 05:30 | |
| *** evrardjp has quit IRC | 05:33 | |
| *** evrardjp has joined #openstack-meeting | 05:33 | |
| *** rcernin has quit IRC | 06:37 | |
| *** rcernin has joined #openstack-meeting | 06:50 | |
| *** Liang__ has quit IRC | 07:06 | |
| *** Liang__ has joined #openstack-meeting | 07:07 | |
| *** lpetrut has joined #openstack-meeting | 07:11 | |
| *** rcernin has quit IRC | 07:12 | |
| *** melwitt has quit IRC | 07:20 | |
| *** melwitt has joined #openstack-meeting | 07:21 | |
| *** dklyle has quit IRC | 07:24 | |
| *** rcernin has joined #openstack-meeting | 07:34 | |
| *** rcernin has quit IRC | 07:43 | |
| *** jmasud has quit IRC | 07:45 | |
| *** slaweq has joined #openstack-meeting | 07:54 | |
| *** ralonsoh has joined #openstack-meeting | 07:59 | |
| *** tosky has joined #openstack-meeting | 08:13 | |
| *** macz_ has joined #openstack-meeting | 08:37 | |
| *** rpittau|afk is now known as rpittau | 08:39 | |
| *** macz_ has quit IRC | 08:42 | |
| *** ociuhandu has joined #openstack-meeting | 09:06 | |
| *** ociuhandu has quit IRC | 09:16 | |
| *** ociuhandu has joined #openstack-meeting | 09:22 | |
| *** ociuhandu has quit IRC | 09:25 | |
| *** ociuhandu has joined #openstack-meeting | 09:26 | |
| *** macz_ has joined #openstack-meeting | 09:43 | |
| *** macz_ has quit IRC | 09:48 | |
| *** ociuhandu has quit IRC | 09:57 | |
| *** ociuhandu has joined #openstack-meeting | 09:58 | |
| *** ociuhandu has quit IRC | 10:01 | |
| *** ociuhandu has joined #openstack-meeting | 10:02 | |
| *** Liang__ has quit IRC | 10:10 | |
| *** e0ne has joined #openstack-meeting | 10:46 | |
| *** ociuhandu has quit IRC | 12:00 | |
| *** ociuhandu has joined #openstack-meeting | 12:01 | |
| *** rfolco has joined #openstack-meeting | 12:02 | |
| *** ociuhandu has quit IRC | 12:06 | |
| *** raildo has joined #openstack-meeting | 12:23 | |
| *** rfolco has quit IRC | 13:01 | |
| *** rfolco has joined #openstack-meeting | 13:01 | |
| *** rh-jelabarre has joined #openstack-meeting | 13:07 | |
| *** ociuhandu has joined #openstack-meeting | 13:14 | |
| *** rosmaita has joined #openstack-meeting | 13:55 | |
| *** falencastro has joined #openstack-meeting | 13:56 | |
| abhishekk | #startmeeting glance | 14:01 |
|---|---|---|
| openstack | Meeting started Thu Nov 5 14:01:16 2020 UTC and is due to finish in 60 minutes. The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:01 |
| *** openstack changes topic to " (Meeting topic: glance)" | 14:01 | |
| openstack | The meeting name has been set to 'glance' | 14:01 |
| abhishekk | #topic roll call | 14:01 |
| *** openstack changes topic to "roll call (Meeting topic: glance)" | 14:01 | |
| abhishekk | #link https://etherpad.openstack.org/p/glance-team-meeting-agenda | 14:01 |
| abhishekk | o/ | 14:01 |
| * smcginnis is sort of here but distracted with other things | 14:01 | |
| abhishekk | ack | 14:01 |
| abhishekk | waiting for others to join | 14:01 |
| jokke | o/ | 14:01 |
| abhishekk | lets wait couple of minutes more | 14:02 |
| rosmaita | o/ | 14:02 |
| abhishekk | cool, lets start | 14:03 |
| abhishekk | #topic Updates | 14:03 |
| *** openstack changes topic to "Updates (Meeting topic: glance)" | 14:03 | |
| abhishekk | PTG concluded and we have discussed various topics and priorities for Wallaby during last week | 14:04 |
| abhishekk | you can find summary and recordings of the session in the PTG etherpad | 14:04 |
| abhishekk | #link https://etherpad.opendev.org/p/glance-wallaby-ptg | 14:04 |
| abhishekk | Same etherpad contains milestone wise priorities for Wallaby cycle | 14:05 |
| abhishekk | I will propose them to glance-specs repo by this week | 14:05 |
| abhishekk | moving ahead | 14:05 |
| abhishekk | #topic release/periodic jobs update | 14:06 |
| *** openstack changes topic to "release/periodic jobs update (Meeting topic: glance)" | 14:06 | |
| abhishekk | Wallaby milestone 1 4 weeks away | 14:06 |
| abhishekk | I will start adding priorities of milestone 1 in weekly meeting discussion from next time | 14:06 |
| abhishekk | Periodic jobs - 3/4 py38 functional jobs were failing | 14:07 |
| abhishekk | test_copy_public_image_as_non_admin_permitted test is failing with 403 error | 14:07 |
| abhishekk | sorry 409, Reason is import lock is not busted in time and call returns 409 in this case | 14:07 |
| abhishekk | I will put some time to understand this and will take help from dansmith as well | 14:08 |
| abhishekk | any questions? | 14:08 |
| abhishekk | cool, moving ahead | 14:08 |
| abhishekk | #topic Glance Tempest plugin | 14:09 |
| *** openstack changes topic to "Glance Tempest plugin (Meeting topic: glance)" | 14:09 | |
| abhishekk | As discussed in PTG, I had discussion with gmann about this yesterday | 14:09 |
| *** servagem has joined #openstack-meeting | 14:09 | |
| abhishekk | he has added his suggestion in etherpad, https://etherpad.opendev.org/p/glance-tempest-wallaby-plan | 14:09 |
| abhishekk | According to him, the plugin should contain only API related tests and not cross project/service tests | 14:10 |
| abhishekk | For API related testing we already have functional tests, so adding plugin doesn't makes sense to me | 14:10 |
| rosmaita | hmmm ... all our plugin contains is cross project tests for cinder! | 14:11 |
| abhishekk | ohh, really? | 14:11 |
| rosmaita | i mean, that's the whole point, to have some scenario tests | 14:11 |
| *** lajoskatona has joined #openstack-meeting | 14:11 | |
| abhishekk | gmann, told me otherwise | 14:11 |
| rosmaita | yeah, we maintain tests in the barbican devstack plugin to handle image encryption tests | 14:11 |
| *** lajoskatona has left #openstack-meeting | 14:11 | |
| rosmaita | and the cinder-tempest-plugin has other stuff | 14:11 |
| abhishekk | ack, My idea behind adding plugin was to test barbican and multiple stores at one place | 14:12 |
| abhishekk | I will still discuss this with him and internal team who is going to contribute towards it before taking any decision | 14:13 |
| abhishekk | rosmaita, I might need inputs from you as well | 14:13 |
| rosmaita | https://opendev.org/openstack/barbican-tempest-plugin/src/branch/master/barbican_tempest_plugin/tests/scenario | 14:13 |
| rosmaita | that's got image signature validation tests and also cinder volume encryption | 14:13 |
| abhishekk | cool, will have look and check whether it covers our use case | 14:14 |
| rosmaita | also, talk to tosky | 14:14 |
| rosmaita | he will know the correct vocabulary to use to discuss this with gmann | 14:14 |
| abhishekk | ack | 14:14 |
| abhishekk | yeah he was around yesterday as well | 14:14 |
| rosmaita | we may just be describing what we want to do incorrectly | 14:15 |
| abhishekk | +1 | 14:15 |
| abhishekk | thank you rosmaita | 14:15 |
| abhishekk | moving ahead | 14:15 |
| abhishekk | #topic Consistent and Secure default policies | 14:16 |
| *** openstack changes topic to "Consistent and Secure default policies (Meeting topic: glance)" | 14:16 | |
| abhishekk | I guess gmann has added it to the agenda | 14:16 |
| abhishekk | #link https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popup_Team | 14:16 |
| *** moguimar has quit IRC | 14:17 | |
| abhishekk | This is new community goal which is divided to complete in two cycles | 14:17 |
| abhishekk | This cycle we need to deprecate default policies in code and next cycle need to implement RBAC | 14:18 |
| *** moguimar has joined #openstack-meeting | 14:18 | |
| abhishekk | rosmaita, could you please share more insight around this as you had this topic for PTG discussion | 14:19 |
| rosmaita | yeah, it's not deprecate the default policies in code | 14:19 |
| rosmaita | the issue is that to see the default policies, you need to generate a file | 14:19 |
| rosmaita | you can generate (currently) in either JSON or YAML | 14:19 |
| rosmaita | yaml has comments | 14:19 |
| abhishekk | right | 14:19 |
| rosmaita | the problem is that the default policy file is still json | 14:20 |
| rosmaita | and in order to deprecate policies (or something, i didn't quite follow) the comments need to show up | 14:20 |
| rosmaita | so the community goal is to make YAML the default | 14:20 |
| rosmaita | so that when all the policies are changed to use the groovy new scoping stuff | 14:20 |
| rosmaita | the correct sample will be generated | 14:21 |
| rosmaita | something like that | 14:21 |
| abhishekk | I guess we glance do have default yaml (need to confirm) | 14:21 |
| rosmaita | oslo.policy is going to remove the ability to generate json | 14:21 |
| abhishekk | ack | 14:21 |
| rosmaita | well, everyone defaulted to generating a yaml sample | 14:21 |
| rosmaita | i had to put up patches to cinder (back in stein i think) to look for the yaml instead of json | 14:22 |
| rosmaita | i thought that was what we were supposed to do | 14:22 |
| abhishekk | Ok, I guess popup team will help us if needed | 14:22 |
| rosmaita | right | 14:22 |
| rosmaita | i don't think i did it for glance beacuse at that point we weren't using policy in code yet | 14:23 |
| abhishekk | cool, will sync with them and get it cleared as well | 14:23 |
| abhishekk | yes, we have done it Ussuri | 14:23 |
| jokke | but IIUC the RBAC part expects the policies being 1:1 mapping with the API calls | 14:23 |
| abhishekk | * in Ussuri | 14:23 |
| jokke | which of we're far from | 14:23 |
| rosmaita | yeah, that's still an issue | 14:23 |
| rosmaita | this is not going to be a clean transition for anyone, i don't think | 14:24 |
| rosmaita | but they already did nova ... | 14:24 |
| rosmaita | so i guess everything is fine | 14:24 |
| abhishekk | yes | 14:24 |
| abhishekk | I guess cinder has also one API which uses it, right? | 14:24 |
| * dansmith sneaks in | 14:25 | |
| rosmaita | abhishekk: "it" == ?? | 14:25 |
| abhishekk | it == RBAC ? | 14:25 |
| jokke | rosmaita: well the issue I see there is that this requires full rewrite of Glance policies, and not only full rewrite but proper deprecation of the old ones too | 14:25 |
| rosmaita | oh, yeah, we have > 75 policies at this point for the block storage API | 14:26 |
| rosmaita | jokke: us too, we have policy checks in the db layer | 14:26 |
| rosmaita | my concern is cross-project data leakage | 14:26 |
| rosmaita | because the model seems to be configure everything in the policy file | 14:26 |
| rosmaita | which i guess is ok if you know what you are doing and have good tests | 14:27 |
| rosmaita | but nobody does | 14:27 |
| jokke | rosmaita: mhm | 14:27 |
| rosmaita | that's just my opinion, though | 14:27 |
| dansmith | I'm not sure what ya'll are talking about | 14:27 |
| abhishekk | yes | 14:27 |
| abhishekk | Consistent and Secure default policies | 14:27 |
| dansmith | the community goal is purely about converting the default policy file format from json to yaml | 14:27 |
| rosmaita | we are talking about part 2 | 14:28 |
| abhishekk | right | 14:28 |
| dansmith | ah okay | 14:28 |
| rosmaita | policy rewrite to use scoped tokens, support reader role, etc | 14:28 |
| dansmith | ack yeah, okay | 14:29 |
| abhishekk | heavy work to pull policy layer out of Onion | 14:29 |
| *** vishalmanchanda has quit IRC | 14:30 | |
| dansmith | I can imagine | 14:30 |
| dansmith | at least there's one you don't have to de-onionify :) | 14:30 |
| abhishekk | :D | 14:30 |
| rosmaita | yeah, theoretically it seemed to be a great idea for separation of concerns | 14:30 |
| rosmaita | that's why no one likes theorists | 14:30 |
| dansmith | nova has moved all its policy out of the db layer at this point, AFAIK, | 14:31 |
| dansmith | but the token change will be some work I think | 14:31 |
| rosmaita | we haven't done it in cinder yet (move policy checks out of DB) | 14:31 |
| rosmaita | we need much more thorough tests first | 14:31 |
| abhishekk | I thought nova has already done it (token change) | 14:31 |
| rosmaita | and that's even before adding the new stuff | 14:31 |
| dansmith | abhishekk: I think there's still something outstanding | 14:32 |
| abhishekk | ok, so the action plan is I will sync with pop-up team and discuss what is needed from glance this cycle and then will start doing it side by side | 14:33 |
| abhishekk | dansmith, ack | 14:33 |
| abhishekk | Moving to open discussion unless anything more for this topic | 14:33 |
| abhishekk | #topic Open discussion | 14:34 |
| *** openstack changes topic to "Open discussion (Meeting topic: glance)" | 14:34 | |
| abhishekk | So as per discussed in PTG, I have flagged removal of single store configuration to openstack-discuss ML | 14:34 |
| abhishekk | #link http://lists.openstack.org/pipermail/openstack-discuss/2020-November/018546.html | 14:35 |
| abhishekk | Will start working on converting unit and functional tests soon | 14:35 |
| abhishekk | that's it from me for today | 14:35 |
| rosmaita | email looks nice and clear | 14:36 |
| abhishekk | thank you | 14:36 |
| jokke | yeah looked good | 14:37 |
| rosmaita | it will be nice to get all that stuff cleared out | 14:37 |
| abhishekk | ++ | 14:37 |
| abhishekk | as discussed during PTG I am also working on combinations of different stores using devstack for CI improvements | 14:38 |
| abhishekk | lets wrap up early if nothing more to discuss | 14:40 |
| rosmaita | works for me! | 14:40 |
| abhishekk | jokke, dansmith ? | 14:41 |
| jokke | I have nothing for now | 14:41 |
| dansmith | for sure | 14:41 |
| abhishekk | cool, thank you all | 14:41 |
| abhishekk | have a nice weekend | 14:41 |
| abhishekk | #endmeeting | 14:42 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 14:42 | |
| openstack | Meeting ended Thu Nov 5 14:42:02 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:42 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-11-05-14.01.html | 14:42 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-11-05-14.01.txt | 14:42 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/glance/2020/glance.2020-11-05-14.01.log.html | 14:42 |
| *** rosmaita has left #openstack-meeting | 14:42 | |
| *** armstrong has joined #openstack-meeting | 14:46 | |
| *** belmoreira has joined #openstack-meeting | 14:56 | |
| *** moguimar has quit IRC | 14:56 | |
| *** moguimar has joined #openstack-meeting | 14:58 | |
| *** andrebeltrami has joined #openstack-meeting | 14:58 | |
| *** TrevorV has joined #openstack-meeting | 15:00 | |
| *** Steap has joined #openstack-meeting | 15:01 | |
| *** macz_ has joined #openstack-meeting | 15:07 | |
| *** thgcorrea has joined #openstack-meeting | 15:08 | |
| *** macz_ has quit IRC | 15:12 | |
| fungi | guessing we're skipping the security sig meeting this week | 15:18 |
| *** ociuhandu has quit IRC | 15:21 | |
| redrobot | Oh yeah, time changed. | 15:26 |
| *** dklyle has joined #openstack-meeting | 15:37 | |
| gagehugo | yeah, my bad, will get fixed for next week | 15:42 |
| fungi | no worries | 15:43 |
| *** ociuhandu has joined #openstack-meeting | 15:45 | |
| *** belmoreira has quit IRC | 16:09 | |
| *** jmasud has joined #openstack-meeting | 16:16 | |
| *** macz_ has joined #openstack-meeting | 16:27 | |
| *** jamesden_ has joined #openstack-meeting | 17:08 | |
| *** jmasud has quit IRC | 17:17 | |
| *** rpittau is now known as rpittau|afk | 17:21 | |
| *** jmasud has joined #openstack-meeting | 17:29 | |
| *** gyee has joined #openstack-meeting | 17:35 | |
| *** ociuhandu has quit IRC | 18:04 | |
| *** ociuhandu has joined #openstack-meeting | 18:12 | |
| *** ociuhandu has quit IRC | 18:16 | |
| *** haleyb has quit IRC | 18:18 | |
| *** haleyb has joined #openstack-meeting | 18:19 | |
| *** jmasud has quit IRC | 18:31 | |
| *** ralonsoh has quit IRC | 18:41 | |
| *** andrebeltrami has quit IRC | 18:57 | |
| *** lpetrut has quit IRC | 19:16 | |
| *** _mlavalle_2 has quit IRC | 19:16 | |
| *** lbragstad has quit IRC | 19:18 | |
| *** armstrong has quit IRC | 19:25 | |
| *** bbowen has quit IRC | 20:02 | |
| *** e0ne has quit IRC | 20:21 | |
| *** e0ne has joined #openstack-meeting | 20:37 | |
| *** jmasud has joined #openstack-meeting | 20:53 | |
| *** ociuhandu has joined #openstack-meeting | 20:57 | |
| *** ociuhandu_ has joined #openstack-meeting | 20:58 | |
| *** jmasud has quit IRC | 20:59 | |
| *** jmasud has joined #openstack-meeting | 21:02 | |
| *** e0ne has quit IRC | 21:02 | |
| *** bbowen has joined #openstack-meeting | 21:13 | |
| *** jmasud has quit IRC | 21:17 | |
| *** jmasud has joined #openstack-meeting | 21:21 | |
| *** ociuhandu_ has quit IRC | 21:23 | |
| *** ociuhandu has joined #openstack-meeting | 21:25 | |
| *** thgcorrea has quit IRC | 21:26 | |
| *** jmasud has quit IRC | 21:26 | |
| *** rcernin has joined #openstack-meeting | 21:27 | |
| *** ociuhandu has quit IRC | 21:35 | |
| *** jmasud has joined #openstack-meeting | 21:50 | |
| *** rcernin has quit IRC | 21:53 | |
| *** rcernin has joined #openstack-meeting | 21:55 | |
| *** e0ne has joined #openstack-meeting | 22:03 | |
| *** jmasud has quit IRC | 22:04 | |
| *** slaweq has quit IRC | 22:06 | |
| *** mlavalle has joined #openstack-meeting | 22:08 | |
| *** manpreet has quit IRC | 22:14 | |
| *** e0ne has quit IRC | 22:17 | |
| *** rh-jelabarre has quit IRC | 22:22 | |
| *** rh-jelabarre has joined #openstack-meeting | 22:22 | |
| *** jmasud has joined #openstack-meeting | 22:30 | |
| *** jamesden_ has quit IRC | 22:33 | |
| *** rcernin has quit IRC | 22:57 | |
| *** rcernin has joined #openstack-meeting | 23:01 | |
| *** rh-jelabarre has quit IRC | 23:03 | |
| *** jmasud has quit IRC | 23:16 | |
| *** jmasud has joined #openstack-meeting | 23:21 | |
| *** ociuhandu has joined #openstack-meeting | 23:36 | |
| *** ociuhandu has quit IRC | 23:40 | |
| *** TrevorV has quit IRC | 23:41 | |
| *** tosky has quit IRC | 23:55 | |
| *** rfolco has quit IRC | 23:55 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!