| *** jbadiapa|off is now known as jbadiapa | 09:46 | |
| abhishekk | #startmeeting glance | 14:00 |
|---|---|---|
| opendevmeet | Meeting started Thu Dec 2 14:00:00 2021 UTC and is due to finish in 60 minutes. The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 14:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 14:00 |
| opendevmeet | The meeting name has been set to 'glance' | 14:00 |
| abhishekk | #topic roll call | 14:00 |
| abhishekk | #link https://etherpad.openstack.org/p/glance-team-meeting-agenda | 14:00 |
| abhishekk | o/ | 14:00 |
| whoami-rajat__ | Hi | 14:00 |
| *** whoami-rajat__ is now known as whoami-rajat | 14:00 | |
| abhishekk | lets wait couple of minutes for others to join | 14:00 |
| rosmaita | o/ | 14:01 |
| croelandt | o/ | 14:02 |
| abhishekk | cool, lets start, others will join in between | 14:03 |
| abhishekk | #topic release/periodic jobs update | 14:03 |
| abhishekk | Milestone 2 - 5 weeks away | 14:03 |
| abhishekk | We are going to target project-manager role this milestone and other specs if approved | 14:03 |
| abhishekk | Most of the members will be on leave/PTO this time, so not sure how much we will achieve | 14:04 |
| whoami-rajat | sorry I'm interrupting but project-manager role first needs to be implemented by keystone right? | 14:04 |
| abhishekk | I don't think so | 14:05 |
| abhishekk | it will just need to modify keystone-manage to add it in hierarchy in between admin and member | 14:05 |
| abhishekk | IMO if we want to test it we can do it manually by using some keystone commands | 14:05 |
| abhishekk | this is my understanding though | 14:06 |
| whoami-rajat | but that code first needs to exist in keystone right? | 14:06 |
| rosmaita | that sounds OK, if it's not implemented yet in keystone, it just won't do anything | 14:06 |
| whoami-rajat | but maybe I'm not too familiar with the implementation perspective | 14:06 |
| rosmaita | well, the tests will have to create the role and modify the hierarchy | 14:06 |
| rosmaita | until keystone does it during bootstrapping itself | 14:07 |
| whoami-rajat | ack | 14:07 |
| abhishekk | right, but we can test it manually till then | 14:07 |
| rosmaita | but it would be available for any operator who wants to do the same | 14:07 |
| whoami-rajat | got it | 14:07 |
| rosmaita | yeah, i was skeptical at first, but this sounds do-able | 14:07 |
| abhishekk | I think so as well, will try it this week | 14:08 |
| rosmaita | the modified goal was accepted by the TC, so i guess openstack is committed to the project-manager being a thing | 14:08 |
| rosmaita | (hopefully no one will change their minds) | 14:08 |
| abhishekk | right, and we need to implement/support the same in Yoga only | 14:08 |
| abhishekk | fingers crossed to not have Sr manager :D | 14:09 |
| abhishekk | Ok, moving ahead | 14:09 |
| rosmaita | the only problem i see is how to handle the checkstring | 14:09 |
| rosmaita | because any calls that would be done by a project manager can also be done by a project-admin | 14:10 |
| rosmaita | but the usual way to handle that is to rely on inheritance | 14:10 |
| rosmaita | and only mention 'role:manager' | 14:10 |
| abhishekk | yes, that is what I am thinking | 14:10 |
| abhishekk | assuming | 14:10 |
| rosmaita | but these will need role:manager or role:admin to work in deployments without the 'manager' role | 14:11 |
| rosmaita | which is still do-able, you'll just want to refactor at some point | 14:11 |
| abhishekk | hmm | 14:11 |
| rosmaita | yeah, that complicates the testing, doesn't it | 14:12 |
| whoami-rajat | seems quite hacky but i believe we will have same discussion for cinder as well | 14:12 |
| abhishekk | just to be sure, you are saying if we configure policy as role:manager and manager role is not configured/added then it should treat it as role:admin ? | 14:13 |
| abhishekk | Ok, lets move ahead, I guess we will get clear picture by next week | 14:14 |
| abhishekk | Periodic job is all green | 14:15 |
| abhishekk | Nothing to worry here | 14:15 |
| abhishekk | this reminds me, whoami-rajat your dependency problem is resolved, right? | 14:15 |
| whoami-rajat | yes | 14:15 |
| abhishekk | cool | 14:15 |
| whoami-rajat | thanks for the suggestion | 14:16 |
| abhishekk | no worries | 14:16 |
| abhishekk | croelandt, next is you | 14:16 |
| croelandt | o/ | 14:16 |
| abhishekk | #topic Glance review da | 14:16 |
| abhishekk | #topic Glance review day | 14:16 |
| croelandt | So I was thinking of doing a "review party" | 14:16 |
| croelandt | like the one rosmaita did with Cinder | 14:16 |
| abhishekk | rosmaita, is a party person \o/ | 14:17 |
| croelandt | basically I'll set up a list of patches in glance/glance_store/glanceclient/glance_specs that I think we should merge/reject/discuss | 14:17 |
| whoami-rajat | do you mean festival of XS reviews? | 14:17 |
| croelandt | and we'll spend 2 or 3 hours in a call | 14:17 |
| croelandt | whoami-rajat: a patch fiesta, call it what you want :) | 14:17 |
| croelandt | having 2 or 3 core reviewers there would be nice | 14:17 |
| croelandt | I'd send an email to the mailing list to ask people to rebase patches htey care about | 14:18 |
| abhishekk | I will be open for any time zone | 14:18 |
| croelandt | if you'd like to join, you can add your name to the Etherpad | 14:18 |
| rosmaita | (sorry, had a power failure) | 14:18 |
| whoami-rajat | we usually have that on 3rd Friday of the month for 2 hours and review all small patches of size XS or S | 14:18 |
| croelandt | I think we would be doing it during an American morning/European afternoon/Indian evening | 14:18 |
| croelandt | whoami-rajat: yes, I was thinking of destroying the backlog first | 14:18 |
| croelandt | and hten maybe have a party every quarter/every cycle | 14:18 |
| croelandt | maybe every month! | 14:19 |
| abhishekk | ++ | 14:19 |
| whoami-rajat | sounds good | 14:19 |
| croelandt | so yeah, if you're interested, go to point 2.1 in the etherpad | 14:19 |
| croelandt | add your name, and I'll pick the most picked option :) | 14:19 |
| dansmith | o/ | 14:19 |
| abhishekk | WC dansmith | 14:20 |
| abhishekk | rosmaita, I guess we will be needing you for this review day as dansmith and jokke_ might not be available | 14:21 |
| rosmaita | :( | 14:21 |
| rosmaita | looking at my calendar now | 14:21 |
| croelandt | I'm trying to do it next week so that jokke won't be gone yet :D | 14:21 |
| rosmaita | do you have a time yet? | 14:21 |
| croelandt | rosmaita: American morning | 14:22 |
| croelandt | then we can refine it :) | 14:22 |
| abhishekk | I can adjust to any time between 1400 UTC to 1900 UTC | 14:22 |
| rosmaita | tuesday is bad for us red hatters, have storage meeting and osp all hands on 12/7 | 14:22 |
| croelandt | Thursday then? | 14:23 |
| croelandt | or Friday | 14:23 |
| rosmaita | cinder squad at 1500 utc | 14:23 |
| rosmaita | friday looks good | 14:23 |
| abhishekk | Works for me as well | 14:23 |
| croelandt | I'd do Monday but I have a doc appointment | 14:23 |
| croelandt | and the wait time is a month and a half, so I'm not missing that for aything | 14:24 |
| abhishekk | jokke_, is not available on Monday | 14:24 |
| croelandt | so 2021-12-10? | 14:24 |
| rosmaita | that would be my vote, the week of 12/13 is bad for me | 14:24 |
| rosmaita | cinder spec freeze and cinderlib release | 14:24 |
| croelandt | whoami-rajat: 2021-12-10 is good for you? | 14:25 |
| croelandt | jokke_: ^ | 14:25 |
| whoami-rajat | croelandt, I'm not sure if I'm needed in the glance review festival :P | 14:25 |
| rosmaita | whoami-rajat: is friday 12/10 bad for you? | 14:26 |
| croelandt | whoami-rajat: we have a few Cinder patches :) | 14:26 |
| abhishekk | whoami-rajat, if there are any glance-cinder patches then we might need you :D | 14:26 |
| whoami-rajat | ack, i can join :) | 14:26 |
| rosmaita | \o/ | 14:26 |
| abhishekk | cool, thank you | 14:27 |
| croelandt | let's say 14:00 UTC? | 14:27 |
| abhishekk | croelandt, thank you for taking initiative | 14:27 |
| whoami-rajat | +1 | 14:28 |
| abhishekk | +1 | 14:28 |
| rosmaita | +1 | 14:28 |
| abhishekk | sold | 14:28 |
| croelandt | 1400 UTC it is | 14:28 |
| abhishekk | great, lets move ahead | 14:28 |
| abhishekk | # topic Glance Secure RBAC | 14:29 |
| abhishekk | Image sharing API is good candidate for manager role, so we will be working/testing the changes in local environment this/next week for the same | 14:29 |
| abhishekk | only question is, as it is not yet there in keystone we can not push testing related patches | 14:30 |
| dansmith | yeah | 14:30 |
| abhishekk | So we can test/run tempest plugin tests locally and push it as WIP/PoC if required | 14:31 |
| rosmaita | either that, or add it to devstack | 14:32 |
| rosmaita | because the TC says it is going to happen eventually | 14:32 |
| dansmith | yeah, could add it to devstack, | 14:32 |
| rosmaita | having the role/hierarchy there should not break anyone who's not using it | 14:32 |
| dansmith | but the change is likely to be quite small right? just role:member -> role:manager ? | 14:32 |
| abhishekk | yes | 14:32 |
| abhishekk | and new test class in glance-tempest-plugin | 14:33 |
| rosmaita | what does your '->' mean? | 14:33 |
| abhishekk | change to | 14:33 |
| dansmith | changing role:member to role:manager | 14:33 |
| dansmith | for the sharing policy rule | 14:33 |
| rosmaita | oh, i thought you meant the devstack patch | 14:33 |
| abhishekk | for add_member, delete_member and modify_member | 14:33 |
| rosmaita | right, should be easy on the glance side | 14:33 |
| dansmith | no, just saying, might not need to do our homework quite so far ahead, even though I applaud the initiative :) | 14:34 |
| abhishekk | :D, next thing is glance does not support system token yet, so that support needs to be added | 14:34 |
| abhishekk | glance/python-glanceclient | 14:35 |
| dansmith | I think the only system api I know of might be unpublicize | 14:35 |
| dansmith | and that's phase 3 really, so even less concern over that in the short term | 14:35 |
| abhishekk | hmm, but it is target for yoga right? | 14:36 |
| whoami-rajat | i think there are 2 things here, system admin -> Yoga, system member and reader -> CC (i guess) | 14:36 |
| dansmith | no, glance's only work for yoga is make sure the project personas are working | 14:36 |
| abhishekk | \o/ | 14:37 |
| abhishekk | ok, will get more answers in weekly group meeting about it | 14:38 |
| abhishekk | moving to Open discussion | 14:38 |
| abhishekk | #topic Open discussion | 14:39 |
| whoami-rajat | Hi | 14:39 |
| crohmann | If I may drop a question? I am trying to use the web-download import method - so actually the api_image_import task via the web-download. I am able to create tasks just fine, but they only reach the processing state - with literally no indication on what happens. I just need a pointer on where to dig deeper? How can I debug the task execution further? | 14:39 |
| abhishekk | crohmann, are you using multiple stores or single store setup ? | 14:40 |
| crohmann | multiple. We just converted our config to the new style. | 14:40 |
| abhishekk | 2nd is which version you are using, is it master? | 14:40 |
| crohmann | It's an Ussuri on Ubuntu Bionic BTW | 14:40 |
| dansmith | you're not creating the task directly, right? you're calling import? | 14:40 |
| crohmann | I tried both. | 14:41 |
| abhishekk | 3rd have you added os_glance_staging_store section in api.conf ? | 14:41 |
| dansmith | crohmann: assume you're running glance-api as standalone and not as a wsgi app right? | 14:41 |
| abhishekk | and 4th are you running under uwsgi | 14:41 |
| abhishekk | or just what dansmith asked | 14:42 |
| crohmann | [os_glance_tasks_store] | 14:42 |
| crohmann | filesystem_store_datadir = /var/lib/glance/tasks_work_dir | 14:42 |
| crohmann | [os_glance_staging_store] | 14:42 |
| crohmann | filesystem_store_datadir = /var/lib/glance/staging | 14:42 |
| crohmann | we are using wsgi running under Apache. | 14:42 |
| dansmith | womp womp | 14:42 |
| dansmith | that won't work in U, and will do exactly what you describe: just never run tasks | 14:43 |
| crohmann | Uh, that's a bummer. | 14:43 |
| rosmaita | i forgot that U was so long ago | 14:43 |
| dansmith | the bad news is yep, but the good news is I fixed it some time after that so it does actually work now | 14:44 |
| crohmann | I suppose there is no independent thread running - just handling of incoming request. | 14:44 |
| dansmith | crohmann: right | 14:44 |
| crohmann | Wow ... we wasted some hours an this - but man am I happy to hear we were just holding it wrong. | 14:44 |
| dansmith | crohmann: fwiw, I believe the docs for those older releases says "don't do this" (in reference to running as wsgi) | 14:45 |
| crohmann | So is there anything but switching to standalone or upgrade to $RELEASE to make this work? | 14:45 |
| dansmith | nothing short of backporting all the patches to fix it, but I really really wouldn't for something like this | 14:45 |
| crohmann | nah .. we are in the process to upgrading all the way to Xena as quickly as we can. We just wanted to switch our image maintainance tooling to somthing fancier as a side-job ... and then ran into the web-download issue. | 14:46 |
| abhishekk | Victoria release, dansmith has fixed this in | 14:48 |
| dansmith | https://review.opendev.org/q/topic:%22async-native-threads%22+(status:open%20OR%20status:merged) | 14:48 |
| dansmith | there might have been more conflict with the other task stuff so not sure that's really all of it | 14:49 |
| crohmann | allright. Be in any case reading https://docs.openstack.org/glance/latest/admin/apache-httpd.html#mod-wsgi I believe running mod-wsgi is not recommended anyways. | 14:49 |
| dansmith | but yeah, if you're planning to upgrade, that'd be better | 14:49 |
| dansmith | hmm, | 14:49 |
| whoami-rajat | so I wanted to discuss regarding the expose store specific info spec | 14:49 |
| dansmith | I thought we removed that from the doc | 14:49 |
| dansmith | abhishekk: ^ | 14:50 |
| dansmith | crohmann: our tests run in wsgi mode now, with uwsgi, FWIW | 14:50 |
| whoami-rajat | Abhishek has network issues, he is rejoining | 14:51 |
| crohmann | whoami-rajat: Sorry - I don't want to take up any more of your time. Thanks dansmith. For the info now and fixing this for V :-) | 14:51 |
| dansmith | crohmann: ++ | 14:51 |
| whoami-rajat | crohmann, no issue, thanks :) | 14:51 |
| whoami-rajat | dansmith, and akekane_ had some concerns regarding the spec and I've updated it with the requested details | 14:52 |
| whoami-rajat | #link https://review.opendev.org/c/openstack/glance-specs/+/817391 | 14:52 |
| dansmith | whoami-rajat: I saw it was updated, but haven't looked at the latest version | 14:52 |
| whoami-rajat | just wanted to answer any queries or doubts regarding the current proposal | 14:52 |
| dansmith | whoami-rajat: I've been awake for 20 minutes, so.. sorry I haven't re-reviewed yet :) | 14:53 |
| whoami-rajat | dansmith, ack, no issue, wanted to get your review before you leave :) | 14:53 |
| dansmith | whoami-rajat: ack, I have meetings after this but stay on me about it | 14:53 |
| whoami-rajat | dansmith, oh, yeah I'm kind of forgetful of timezones sometimes sorry | 14:54 |
| dansmith | :) | 14:54 |
| dansmith | me too because abhishekk works around the clock | 14:54 |
| dansmith | he's timezone-less :) | 14:54 |
| akekane__ | whoami-rajat, glad that we are in same timezone :P | 14:54 |
| whoami-rajat | akekane__, yes, but as dansmith said, you're in all timezones :D | 14:54 |
| * akekane__ going on another trip now | 14:55 | |
| whoami-rajat | ok, if there are any question/queries let me know on spec or IRC, will answer/update it as soon as possible | 14:56 |
| whoami-rajat | that's all from my side | 14:56 |
| whoami-rajat | thanks! | 14:56 |
| akekane__ | ack, I haven't reviewed latest revision, will do it after the meeting | 14:56 |
| akekane__ | last 4 minutes | 14:56 |
| akekane__ | I don't have anything else | 14:56 |
| *** akekane__ is now known as abhishekk | 14:58 | |
| rosmaita | whoami-rajat: please remember to bug me to read your spec | 14:59 |
| abhishekk | I thin that's it for today | 14:59 |
| abhishekk | thank you all | 14:59 |
| rosmaita | actually, that's not your spec | 14:59 |
| rosmaita | https://review.opendev.org/c/openstack/glance-specs/+/817391 | 14:59 |
| whoami-rajat | rosmaita, sure, thanks for the help! :) | 14:59 |
| rosmaita | i will have to bug myself | 14:59 |
| whoami-rajat | yeah not mine but working closely to get it in | 14:59 |
| whoami-rajat | I've a similar one for cinder | 14:59 |
| abhishekk | #endmeeting | 15:00 |
| opendevmeet | Meeting ended Thu Dec 2 15:00:10 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:00 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/glance/2021/glance.2021-12-02-14.00.html | 15:00 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/glance/2021/glance.2021-12-02-14.00.txt | 15:00 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/glance/2021/glance.2021-12-02-14.00.log.html | 15:00 |
| crohmann | dansmith: I did check on our installation again and much say we are running the dedicated eventlet app port 9292, eventlet.wsgi.server. And then with apache being the reverse proxy in front. So I am wondering if this the the same issue or if web-download should work with this deployment? | 16:07 |
| dansmith | crohmann: let's move to -glance | 16:07 |
| *** tosky_ is now known as tosky | 16:17 | |
| *** priteau is now known as Guest7388 | 16:38 | |
| *** priteau_ is now known as priteau | 16:38 | |
| gmann | RBAC policy pop up meeting is happening @ https://meetpad.opendev.org/secure-rbac | 18:01 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!