Monday, 2014-09-22

*** dmsimard_away is now known as dmsimard00:40
*** smart_developer has left #openstack-swift00:50
*** smart_developer has joined #openstack-swift00:50
*** dmsimard is now known as dmsimard_away00:55
*** smart_developer has quit IRC00:58
*** smart_developer has joined #openstack-swift01:07
*** dmsimard_away is now known as dmsimard01:19
*** dabbler has joined #openstack-swift01:22
*** yuanzz has quit IRC01:26
*** dmsimard is now known as dmsimard_away01:28
*** miqui has quit IRC02:06
*** dabbler has quit IRC02:21
notmynamesmart_developer: re proxy_logging. logging is implemented as middleware for the proxy but done from the app in the storage servers because logging in the proxy server has more complex requirements.02:28
notmynamesmart_developer: two things, really. first is that there are several features implemented in middleware that generate requests to the system on behalf of the end-user (eg large objects and bulk operations). these need to be tracked differently. see https://github.com/openstack/swift/blob/master/swift/common/middleware/proxy_logging.py#L5202:31
notmynamesmart_developer: also, the proxy logging middleware implementation makes it easier for someone to replace it and add their own logging if they have different log requirements (I don't know anyone who does this, but it's possible)02:32
*** haomaiwang has joined #openstack-swift02:38
*** haomaiwang has quit IRC02:38
*** haomaiwang has joined #openstack-swift02:39
*** haomaiw__ has joined #openstack-swift02:46
*** haomaiwang has quit IRC02:50
smart_developernotmyname : Thank you very much.03:22
smart_developernotmyname : Do you know how to prevent Swift process fork bombs on RHEL ?03:23
smart_developernotmyname : Any recommended suggestions that you've tried, and know work ?03:23
*** shakamunyi has joined #openstack-swift03:24
*** j_king has quit IRC03:48
*** j_king has joined #openstack-swift03:54
*** shakamunyi has quit IRC04:00
smart_developerWhat is "ACL v2" when referring to public/private containers ?04:33
smart_developerThanks :)04:33
*** hhuang has joined #openstack-swift04:46
*** sungju has joined #openstack-swift05:03
*** kopparam has joined #openstack-swift05:09
*** sungju has quit IRC05:09
*** dabbler has joined #openstack-swift05:13
*** kopparam has quit IRC05:23
*** kopparam has joined #openstack-swift05:24
*** ppai has joined #openstack-swift05:32
*** tkay has joined #openstack-swift05:47
*** kopparam has quit IRC05:59
*** kopparam has joined #openstack-swift06:00
*** bkopilov has quit IRC06:11
*** bkopilov has joined #openstack-swift06:11
*** tkay has quit IRC06:14
*** Sanchit has joined #openstack-swift06:15
*** dabbler has quit IRC06:16
*** dabbler has joined #openstack-swift06:16
SanchitHi06:20
SanchitWhen "allow_account_management" is set to true in "proxy-server.conf" file, the reseller admin is allowed to perform PUT and DELETE operations on an account, but when "allow_account_management" is set to false in "proxy-server.conf" file, the mentioned operations are not allowed.06:20
SanchitSo, in the second case, when "allow_account_management" is set to false in "proxy-server.conf" file , Who(and How) can create and delete an account?06:20
*** k4n0 has joined #openstack-swift06:20
*** dabbler has quit IRC06:23
*** jude90 has joined #openstack-swift06:32
*** jude90 has quit IRC06:56
SanchitHi07:04
SanchitWhen "allow_account_management" is set to true in "proxy-server.conf" file, the reseller admin is allowed to perform PUT and DELETE operations on an account, but when "allow_account_management" is set to false in "proxy-server.conf" file, the mentioned operations are not allowed.07:04
SanchitSo, in the second case, when "allow_account_management" is set to false in "proxy-server.conf" file , Who(and How) can create and delete an account?07:04
*** kopparam has quit IRC07:05
*** akp has quit IRC07:14
*** jamiehannaford has joined #openstack-swift07:28
*** geaaru has joined #openstack-swift07:28
*** jamiehan_ has joined #openstack-swift07:33
*** jamiehannaford has quit IRC07:35
*** jamiehan_ has quit IRC07:41
*** jamiehannaford has joined #openstack-swift07:44
*** kopparam has joined #openstack-swift07:57
*** bkopilov has quit IRC08:10
*** jamiehan_ has joined #openstack-swift08:13
*** jamiehannaford has quit IRC08:17
*** kbee has joined #openstack-swift08:18
*** bkopilov has joined #openstack-swift08:31
*** k4n0 has quit IRC08:33
*** bkopilov has quit IRC08:38
*** mahatic has joined #openstack-swift08:39
*** jamiehan_ has quit IRC08:46
*** jamiehannaford has joined #openstack-swift08:48
*** jamiehan_ has joined #openstack-swift08:49
*** k4n0 has joined #openstack-swift08:50
*** jamiehannaford has quit IRC08:53
*** jamiehan_ has quit IRC08:54
*** bkopilov has joined #openstack-swift08:55
*** jamiehannaford has joined #openstack-swift09:02
*** viklund has quit IRC09:10
*** viklund has joined #openstack-swift09:20
*** kopparam has quit IRC09:23
*** kopparam has joined #openstack-swift09:26
*** kopparam_ has joined #openstack-swift09:30
*** kopparam has quit IRC09:30
*** kopparam_ has quit IRC09:37
*** kopparam has joined #openstack-swift09:37
*** hhuang has quit IRC09:41
*** k4n0 has quit IRC09:44
*** Trixboxer has joined #openstack-swift09:44
*** kopparam has quit IRC10:04
*** kopparam has joined #openstack-swift10:07
*** jasondotstar has joined #openstack-swift10:07
*** kopparam has quit IRC10:10
*** craig has quit IRC10:11
*** delatte has joined #openstack-swift10:12
*** kopparam has joined #openstack-swift10:13
*** aix has joined #openstack-swift10:16
*** mahatic_ has joined #openstack-swift10:18
*** mahatic has quit IRC10:18
Sanchitclayg: Hi. I am having some queries regarding roles and operations.10:20
Sanchitclayg: When "allow_account_management" is set to true in "proxy-server.conf" file, the reseller admin is allowed to perform PUT and DELETE operations on an account, but when "allow_account_management" is set to false in "proxy-server.conf" file, the mentioned operations are not allowed.10:21
Sanchitclayg: So, in the second case, when "allow_account_management" is set to false in "proxy-server.conf" file , Who(and How) can create and delete an account?10:21
*** mitz_ has joined #openstack-swift10:22
*** k4n0 has joined #openstack-swift10:29
*** dmsimard_away is now known as dmsimard10:41
mattoliverauSanchit: I'm not an expert but if you turn it off and have auto create accounts set then you could manage your accounts in keystone etc. If you want to clean up files later you could always turn it on in a proxy somewhere (maybe your own management proxy).10:43
*** zigo has quit IRC10:50
*** kbee has quit IRC10:51
*** zigo has joined #openstack-swift10:52
*** kopparam has quit IRC11:02
*** mkollaro has joined #openstack-swift11:08
*** kopparam has joined #openstack-swift11:10
*** bkopilov has quit IRC11:10
*** ppai has quit IRC11:12
*** shakamunyi has joined #openstack-swift11:17
*** shakamunyi has quit IRC11:20
SanchitThank you mattoliverau for the response/11:20
Sanchitmattoliverau: This is applicable in tempauth only then, I suppose.11:22
mattoliverauNo problem, sorry I didn't earlier been in and out all day so haven't been watching irc much.11:22
mattoliverauYeah that, and if you manage users via keystone (with v2, etc), so you only need to set auto create accounts and let keystone deal with authentication and user management etc. You could have different proxies too, maybe one internal for admins, external ones for users, the latter have the management turned off.11:25
mattoliverauI hope that makes sense I'm on a phone and its getting late in the evening where I am :)11:26
*** ppai has joined #openstack-swift11:26
*** bkopilov has joined #openstack-swift11:28
*** bkopilov has quit IRC11:32
*** bkopilov has joined #openstack-swift11:33
*** kopparam has quit IRC11:38
Sanchitmattoliverau: Thank you so much. That helped a lot.11:46
Sanchitmattoliverau: i understand that through auto-create feature, we can creatre account, while creation of first container under that account11:48
Sanchitmattoliverau: but i am more concerned about ACCOUNT DELETE... is there any way to delete account, without calling the direct DELETE on account level?11:49
mattoliverauNot that I am aware of.. But I could be mistaken. I'll take a look into the code tomorrow to find out for myself, but I'm sure once the US cores wake up they'd answer before then.11:53
*** delatte has quit IRC11:58
*** cdelatte has joined #openstack-swift11:58
*** marzif__ has quit IRC12:02
*** marcusvrn has joined #openstack-swift12:12
*** openstackgerrit has joined #openstack-swift12:15
*** robbybb has joined #openstack-swift12:26
smart_developerHi, does anyone know what the significance is of "is_admin = true/false" under [filter : keystoneauth] ?12:45
smart_developerThank you :)12:45
*** vkmc has joined #openstack-swift12:48
vkmchey notmyname, do you have a moment? :)12:49
openstackgerritJoshua Hesketh proposed a change to openstack/python-swiftclient: Fix race condition with _retry  https://review.openstack.org/12311812:56
*** miqui has joined #openstack-swift13:00
*** BAKfr has joined #openstack-swift13:06
*** astellwag has joined #openstack-swift13:07
smart_developerAlso, does anyone know how to calculate the total number of Swift processes (what you get from a system "ps aux" command) that you should expect when Swift is running ?13:21
smart_developerIs it equal to the total # of workers defined in the .conf files ?13:21
smart_developer:)13:21
*** zaitcev has joined #openstack-swift13:23
*** ChanServ sets mode: +v zaitcev13:23
*** kbee has joined #openstack-swift13:34
*** ppai has quit IRC13:38
*** hhuang has joined #openstack-swift13:52
*** kbee has quit IRC13:56
*** echevemaster has joined #openstack-swift13:56
*** kbee has joined #openstack-swift13:57
*** mahatic_ has quit IRC14:12
*** k4n0 has quit IRC14:19
*** mahatic_ has joined #openstack-swift14:26
*** robbybb has quit IRC14:28
*** jamiehan_ has joined #openstack-swift14:43
*** jamiehannaford has quit IRC14:43
*** mahatic_ has quit IRC14:49
*** Guest75828 has joined #openstack-swift14:52
*** geaaru has quit IRC14:59
*** smart_developer1 has joined #openstack-swift15:02
*** smart_developer has quit IRC15:02
*** mahatic has joined #openstack-swift15:09
*** jamiehan_ has quit IRC15:09
*** foexle has joined #openstack-swift15:12
*** geaaru has joined #openstack-swift15:12
*** jamiehannaford has joined #openstack-swift15:15
*** mwstorer has joined #openstack-swift15:20
*** kragniz has quit IRC15:24
*** mwstorer has quit IRC15:24
*** mwstorer has joined #openstack-swift15:25
*** kevinc_ has joined #openstack-swift15:26
*** smart_developer1 has quit IRC15:33
*** smart_developer has joined #openstack-swift15:33
*** kragniz has joined #openstack-swift15:35
*** kevinc_ has quit IRC15:37
*** Guest75828 is now known as annegentle15:38
*** kevinc_ has joined #openstack-swift15:43
openstackgerritA change was merged to openstack/swift: Add "--no-overlap" option to swift-dispersion populate  https://review.openstack.org/11841115:44
openstackgerritA change was merged to openstack/swift: Update documentation for using keystone auth  https://review.openstack.org/12148115:44
*** jergerber has joined #openstack-swift15:45
smart_developerWhat is "delay_auth_decision = true/false" under [filter : authtoken] in proxy-server.conf ?15:54
smart_developerThanks :)15:55
smart_developerAs in, what is its significance ?15:55
*** rmcall has joined #openstack-swift16:02
openstackgerritAlistair Coles proposed a change to openstack/python-swiftclient: Fix bug with some OS options not being passed to client  https://review.openstack.org/12316816:07
*** geaaru has quit IRC16:17
*** kyles_ne has joined #openstack-swift16:23
*** BAKfr has quit IRC16:26
*** geaaru has joined #openstack-swift16:30
notmynamegood morning16:31
kbeenotmyname: good morning16:31
kbeenotmyname: Had a Question.. the imports and other blocks in swift donot strictly follow http://docs.openstack.org/developer/hacking/..16:33
kbeenotmyname: is this known ? atleast imports look very inconsistent16:33
*** tdasilva has joined #openstack-swift16:34
notmynamethat's not a hacking rule we enforce/gate on. https://github.com/openstack/swift/blob/master/tox.ini#L5716:34
notmynamehmm...and it looks like that needs to be updated just slightly16:35
*** mkollaro has quit IRC16:36
notmynameacoles: any updates on keystone v3 in the client?16:36
*** kyles_ne has quit IRC16:39
kbeenotmyname: I was talking about unorganized imports..16:39
*** kyles_ne has joined #openstack-swift16:40
notmynamekbee: do you have a specific example you're looking at? just so we're looking at the same thing16:40
acolesnotmyname: yes, fix here  https://review.openstack.org/12316816:40
notmynameacoles: it is currently broken and this fixes ti?16:40
acolesnotmyname: correct, i logged it as a bug https://bugs.launchpad.net/python-swiftclient/+bug/137246516:41
notmynameacoles: thanks. first reaction: nearly 400 lines to fix?!? second reaction: oh, that's great! keystone tests! :-)16:42
acolesnotmyname: :) 10 minutes to fix, several hours to write tests!16:43
*** kyles_ne has quit IRC16:44
acolesnotmyname: i'd like to track down some of the stack traces i'm seeing from the command line, but thats a separate issue16:44
notmynameok16:45
kbeenotmyname: one example i put now -> https://gist.github.com/keshavab/d33b2b69fb67672f001f .. but i can find similar in multiple places16:47
openstackgerritJohn Dickinson proposed a change to openstack/swift: updated hacking rules  https://review.openstack.org/12318116:48
notmynamekbee: yeah. I'm sure there are more places like that too. that's not something we've chosen to enforce in reviews or in the gate as swift devs. the link I gave above (and my tiny update to it in the patch I just submitted) are what we do enforce.16:51
notmynameand enforcing a subset of hacking isn't a bug16:52
kbeenotmyname: I'm not talking of bug, but some uniformity in the code..16:52
notmynamekbee: sure. I wasn't meaning the "bug" statement as an attack or commentary on you. it's just something that comes up from time to time :-)16:54
kbeenotmyname: not at all.. sure i understand..16:55
kbeenotmyname: Would you accept a patch that cleans this up and makes it uniform ? or is that too much effort not required ?16:55
kbeetorgomatic: https://review.openstack.org/#/c/122225/ is ready with incorporated comments..16:58
*** kyles_ne has joined #openstack-swift17:00
*** tkay has joined #openstack-swift17:02
notmynamekbee: IMO it's too much effort and not required. it's not an enforced hacking rule, so there's nothing to keep it that way. I think a patch to just change import orders would be seen as low-priority code churn to review17:04
notmynamekbee: on the other hand, if you've got a feature or fix implemented in a file that has what, in your opinion, are messy imports, it would certainly be appropriate to change it at that time. ie include it in another patch that already updates the given file17:05
kbeenotmyname: hmm.. ok.. i'll note it down and take care in next patches..17:07
*** smart_developer1 has joined #openstack-swift17:10
*** smart_developer has quit IRC17:13
openstackgerritJohn Dickinson proposed a change to openstack/swift: Reject overly-taxing ranged-GET requests  https://review.openstack.org/11757917:13
acolesnotmyname: compare swift cli output before and after recent change... http://paste.openstack.org/show/114214/ :(17:13
notmynameacoles: bah!17:14
*** gyee has joined #openstack-swift17:21
*** kbee has quit IRC17:21
notmynamezaitcev: you had previously put a +2 on https://review.openstack.org/#/c/117579/. torgomatic fixed the marge conflict (with no code changes). can you please check it and put your +2 back on it if appropriate?17:21
*** shri has joined #openstack-swift17:28
*** IRTermite has joined #openstack-swift17:41
*** gyee has quit IRC17:43
*** gyee has joined #openstack-swift17:53
*** aix has quit IRC17:55
*** jamiehannaford has quit IRC17:55
*** geaaru has quit IRC17:56
*** rmcall has quit IRC17:57
*** jamiehannaford has joined #openstack-swift17:58
*** gvernik has joined #openstack-swift18:02
*** rmcall has joined #openstack-swift18:02
openstackgerritAlistair Coles proposed a change to openstack/python-swiftclient: Fix bug with some OS options not being passed to client  https://review.openstack.org/12316818:05
*** IRTermite has quit IRC18:05
*** vkmc has left #openstack-swift18:05
claygSanchit: allow_account_management = false is there for extra security on your public facing proxies if you wanna do manual account provisioning - in that case the auth system needs to have access to a proxy instance with allow_account_management = true18:16
*** kyles_ne has quit IRC18:27
*** kyles_ne has joined #openstack-swift18:28
*** gyee has quit IRC18:30
*** jamiehannaford has quit IRC18:32
*** kyles_ne has quit IRC18:33
*** kyles_ne has joined #openstack-swift18:34
*** kyles_ne has quit IRC18:36
*** kyles_ne has joined #openstack-swift18:36
torgomaticwhat do I do about this transifex review? is that something I should be examining in detail, or is it just a bunch of strings in languages I probably don't speak and that I should assume are correct?18:39
notmynametorgomatic: ah good question. hadn't had a chance to get around to it. I think we should give it an overview, but it's more the second thing18:40
torgomaticI don't even know what to look at, to be honest18:40
notmynametorgomatic: don't worry aboutit18:42
notmynameit's an automated thing to update strings etc18:42
torgomaticif it's an auto-merge, I can automate that, is why I ask :)18:42
notmynameI think eventually it will have some actual translations18:42
notmynametorgomatic: ya, auto-merge18:43
notmynameI approved it18:43
*** kevinc_ has quit IRC18:44
*** openstack has joined #openstack-swift18:56
openstackgerritSamuel Merritt proposed a change to openstack/swift-specs: Proposed spec for on-disk encryption  https://review.openstack.org/12322018:58
*** kyles_ne has quit IRC19:00
*** kyles_ne has joined #openstack-swift19:01
mahatictorgomatic, regarding "UUIDdisplay". I thought since you give a command, and you take the UUID from whatever that is displayed :D19:02
*** kyles_ne has quit IRC19:05
smart_developer1Using the ratelimit middleware, is it possible to limit the requests-per-second to requests-per-minute, or requests-per-hour, instead ?19:17
smart_developer1Or is it possible to set the requests-per-second to be > 0 but less than 1 ?19:18
smart_developer1Basically, I'm looking for a way to set a very low ratelimit.19:18
smart_developer1And was wondering if these are possibilities.19:18
smart_developer1Thank you :)19:18
*** annegent_ has joined #openstack-swift19:20
*** kyles_ne has joined #openstack-swift19:31
*** echevemaster has quit IRC19:37
*** kyles_ne has quit IRC19:45
*** kyles_ne has joined #openstack-swift19:45
*** gvernik has quit IRC19:47
torgomaticmahatic: ah, okay... maybe just make it "UUID"? I don't know; maybe I'm bikeshedding and you should ignore me.19:51
*** kevinc_ has joined #openstack-swift19:55
*** shakamunyi has joined #openstack-swift19:57
*** gyee has joined #openstack-swift20:02
*** tdasilva has quit IRC20:03
mahatictorgomatic, :D I will make it. And also, i made an inline comment about another rewording20:06
smart_developer1Hi, I'd like to test whether my ratelimiting is working.20:06
mahatictorgomatic, please check and let me know20:06
smart_developer1What's the best way to do this, without having to set up a stress tester ?20:06
torgomaticmahatic: ok, I'll go look20:06
smart_developer1Something like a very low ratelimit20:06
smart_developer1So that it's easy to surpass it (and thus cause the requests to fail).20:06
smart_developer1mahatic torgomatic : Do either of you know how to do this, by any chance ?20:07
*** echevemaster has joined #openstack-swift20:07
*** annegent_ has quit IRC20:09
torgomaticsmart_developer1: well, you set a ratelimit of 1, curl something, then press uparrow-enter a few times rapidly until you start seeing errors... is there something you've already tried that you found inadequate?20:11
mahaticsmart_developer1, no way. I'm just beginning to get around :)20:11
*** Trixboxer has quit IRC20:12
mahatictorgomatic, if you can do so now, can you please confirm? So i can send the change right away20:25
torgomaticmahatic: I see no comments on that review after the one I posted about UUIDDisplay20:26
*** tab____ has joined #openstack-swift20:27
mahatictorgomatic, oh in comment it says "1 draft"20:28
torgomaticmahatic: drafts are only visible to you until you submit them20:28
mahatictorgomatic, and i don't see an option to submit20:28
torgomaticmahatic: submit a review comment and all the draft-inline ones will go out too20:29
mahatictorgomatic, oh. just done. thank you20:30
torgomaticmahatic: sure, that will be fine20:30
mahatictorgomatic, okay20:31
*** kyles_ne has quit IRC20:33
*** kyles_ne has joined #openstack-swift20:33
*** miqui has quit IRC20:34
openstackgerritMahati proposed a change to openstack/swift: Added instructions to create a label or UUID to the XFS volume and mount using it.  https://review.openstack.org/11919320:35
*** kyles_ne has quit IRC20:38
*** foexle has quit IRC20:42
smart_developer1torgomatic mahatic : It's working now - yeah, that is what is what I originally attempted :)20:45
smart_developer1Does anyone know what the permissions of /srv/node should be, when setup occurs, and during runtime ?20:46
smart_developer1(on each node)20:46
smart_developer1(and the chown owner:group settings as well).20:55
smart_developer1so, chmod & chown20:55
*** jergerber has quit IRC21:03
*** kevinc_ has quit IRC21:06
*** kevinc_ has joined #openstack-swift21:10
smart_developer1When would you want to use 644 permissions, as opposed to 755 ?21:16
smart_developer1And should it be swift : swift, root : root, root : swift, swift : root, or something else?21:17
torgomaticthis is standard Unix permissions stuff... there are a million articles out there that'll help you far more than this channel will21:17
smart_developer1for proper Swift functionality21:18
*** peluse has joined #openstack-swift21:24
*** ChanServ sets mode: +v peluse21:26
*** jasondotstar has quit IRC21:28
*** DisneyRicky has joined #openstack-swift21:31
*** IRTermite has joined #openstack-swift21:59
openstackgerritA change was merged to openstack/swift-specs: Stop using intersphinx  https://review.openstack.org/12131922:02
mattoliveraumorning22:05
*** IRTermite has quit IRC22:06
notmynamemattoliverau: yo22:07
*** IRTermite has joined #openstack-swift22:07
mattoliverausmart_developer1: if you are talking about a directory and want to be able to access it then it needs to be executable. If /srv/ is used system wide then you might find it being owned as root, but in that case it'll need to be readiable and executible globally so the swift user can access it to get to /srv/node, /srv/ node if only used by swift should be owned by the swift user. and again if it is a directory needs to22:09
mattoliverauhave executible, and for swift obviously writable.22:09
mattoliverauso you could get away with 755 swift:swift on /srv/node22:10
mattoliverauk, nows it  coffee time so I can actually wake up :P22:10
notmynamemattoliverau: FYI I just added your name to the meeting agenda https://wiki.openstack.org/wiki/Meetings/Swift22:12
notmynamemattoliverau: just a first-week of the abandoner post-mortem22:13
mattoliveraunotmyname: cool, I'll be there :)22:15
*** tab____ has quit IRC22:25
*** judd7 has joined #openstack-swift22:36
*** annegent_ has joined #openstack-swift22:38
*** annegent_ has quit IRC22:44
*** kyles_ne has joined #openstack-swift22:47
*** dmsimard is now known as dmsimard_away22:55
*** dmsimard_away is now known as dmsimard22:58
*** dmsimard is now known as dmsimard_away22:59
*** rmcall has quit IRC23:01
*** rmcall has joined #openstack-swift23:01
*** bill_az has joined #openstack-swift23:03
notmynamebriancline: any chance you still have a freebsd swift around somewhere?23:05
*** mahatic has quit IRC23:12
*** kyles_ne has quit IRC23:17
*** kyles_ne has joined #openstack-swift23:17
*** kyles_ne has quit IRC23:22
*** hhuang has quit IRC23:22
*** gvernik has joined #openstack-swift23:22
*** mwstorer has quit IRC23:28
*** gvernik has quit IRC23:28
*** rmcall has quit IRC23:44
*** rmcall has joined #openstack-swift23:45

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!