*** haomaiwang has quit IRC | 00:00 | |
*** haomaiwang has joined #openstack-swift | 00:00 | |
*** esker has joined #openstack-swift | 00:02 | |
*** kota_ has joined #openstack-swift | 00:08 | |
*** ChanServ sets mode: +v kota_ | 00:08 | |
*** zul has joined #openstack-swift | 00:09 | |
kota_ | good morning | 00:09 |
---|---|---|
*** esker has quit IRC | 00:20 | |
*** esker has joined #openstack-swift | 00:21 | |
*** haomaiwang has quit IRC | 00:35 | |
*** delattec has quit IRC | 00:42 | |
*** cdelatte has quit IRC | 00:43 | |
*** delattec has joined #openstack-swift | 00:43 | |
*** nadeem has joined #openstack-swift | 00:43 | |
*** changbl has quit IRC | 00:59 | |
*** bill_az has quit IRC | 01:00 | |
tdasilva | kota_: hi! | 01:16 |
*** david-lyle has joined #openstack-swift | 01:19 | |
kota_ | tdasilva: hi! | 01:23 |
tdasilva | kota_: thanks for your help with patch 134347 | 01:24 |
patchbot | tdasilva: https://review.openstack.org/#/c/134347/ | 01:24 |
kota_ | tdasilva: thanks to work a lot for versions_writes and am a bit worried I was overkilling for that. | 01:25 |
tdasilva | kota_: no no, it's all good...you have been helping find real issues | 01:25 |
tdasilva | kota_: maintaining backwards compatibility is a real pain | 01:26 |
kota_ | tdasilva: thanks and I think it's ok that we pends something like refactoring the code to follow up patch | 01:27 |
kota_ | and now | 01:27 |
kota_ | I'm looking at patch 134347 addressed the issues you fixed between patch set 41 and 42. | 01:28 |
patchbot | kota_: https://review.openstack.org/#/c/134347/ | 01:28 |
*** changbl has joined #openstack-swift | 01:28 | |
kota_ | in my quick view, it seems ok but now testing in my env. | 01:28 |
tdasilva | kota_: sounds good...hopefully we are closer to the end :-) | 01:29 |
kota_ | tdasilva: I think so, too. There are awesome # of patch sets | 01:30 |
tdasilva | kota_: awesome or awful ? :P | 01:32 |
kota_ | tdasilva: might be awful :/ | 01:32 |
kota_ | tdasilva: I don't want to try such a number, I'd like to do handclap for your effort. | 01:34 |
tdasilva | kota_: it was a series of very small increments and since it's been going for a while, there are a lot of patchsets that are just rebases, so the number is probably a little inflated | 01:38 |
kota_ | tdasilva: I see. | 01:39 |
*** nadeem has quit IRC | 01:40 | |
openstackgerrit | Kota Tsuyuzaki proposed openstack/swift: Refactor versioned_writes middleware https://review.openstack.org/209315 | 01:57 |
*** blmartin has joined #openstack-swift | 01:59 | |
*** zul has quit IRC | 02:09 | |
kota_ | tdasilva: still here? | 02:16 |
mattoliverau | I think he's gone to bed :) | 02:16 |
kota_ | mattoliverau: I think so. | 02:17 |
kota_ | mattoliverau: time zone difference sometimes blocks or conversation. | 02:17 |
kota_ | mattoliverau: can i talk about patch 134347 | 02:18 |
patchbot | kota_: https://review.openstack.org/#/c/134347/ | 02:18 |
kota_ | ? | 02:18 |
kota_ | mattoliverau: that's versiones_writes middleware stuff. | 02:18 |
mattoliverau | kota_: sure you can.. I should take a look at the latest revision :) | 02:19 |
kota_ | thanks but I found I might miss something before talking with you. | 02:19 |
kota_ | sorry | 02:19 |
kota_ | with the latest one, I found my curl reports there is X-Versions-Location in the resposne header twice. | 02:20 |
kota_ | but now, I cannot reproduce the situation... | 02:20 |
kota_ | I thought that is because using pure env/start_response in the container_request but...not? I'm not sure. | 02:21 |
kota_ | so I have to dig more before asking you sorry :/ | 02:22 |
*** annegentle has quit IRC | 02:22 | |
mattoliverau | Lol, no probs | 02:22 |
*** zaitcev has joined #openstack-swift | 02:23 | |
*** ChanServ sets mode: +v zaitcev | 02:23 | |
*** annegentle has joined #openstack-swift | 02:23 | |
openstackgerrit | Ben Martin proposed openstack/swift: +Document method to avoid rsync filling root drive https://review.openstack.org/199203 | 02:31 |
*** gyee has quit IRC | 02:35 | |
openstackgerrit | Rui Zang proposed openstack/python-swiftclient: Replace assertEquals() with assertEqual() assertEquals() is deprecated in Python 3.x Using it logs a DeprecationWarning in Python 3.x. The same goes for assertNotEquals() https://review.openstack.org/209319 | 02:36 |
kota_ | I got it, I am ready to ask mattliverau! | 02:41 |
mattoliverau | Lol, fire away | 02:42 |
kota_ | mattoliverau: thanks | 02:42 |
kota_ | mattoliveau: so considerting for using versioned_middleware. | 02:43 |
kota_ | at first we have already a config "allow_versions" in container config. | 02:43 |
kota_ | assuming operator set allow_versioning to True already. | 02:43 |
kota_ | and an user set X-Version-Location something like... 'target' container | 02:44 |
kota_ | like PUT /a/c -H 'X-Versions-Location: target' | 02:44 |
kota_ | and then | 02:45 |
kota_ | operator install and setup new versions_write middelware with setting "allow_versions_writes" = True. | 02:45 |
kota_ | "allow_versions_writes" is a config in the middleware to turn on/off the new middleware. | 02:46 |
kota_ | After that, the user who already set versions-location to "target" container change the location to "target2" | 02:47 |
kota_ | like as PUT /a/c -H "X-Versions-Location: target2" | 02:47 |
kota_ | I want to talk about this situation. | 02:47 |
kota_ | In the case, HEAD /a/c shows duplicated X-Versions-Location headers | 02:48 |
kota_ | one is target, the other is target2 | 02:48 |
kota_ | I already know the reason and the case is not recommended in the middleware documentation. | 02:49 |
kota_ | but I'm not sure I may put good score I leaves it as it is. | 02:50 |
kota_ | and that is absolutely fixed in the follow up patch I wrote up at patch 209315 | 02:51 |
patchbot | kota_: https://review.openstack.org/#/c/209315/ | 02:51 |
mattoliverau | Yeah I see the problem | 02:51 |
charz | peluse: here | 02:53 |
kota_ | mattoliverau: thanks, ok we can reproduce that. | 02:54 |
*** annegentle has quit IRC | 02:54 | |
kota_ | mattoliverau: and raise it again for tdasilva at gerrit. | 02:55 |
kota_ | IMO, the duplicated headers might cause another problem around security software. | 02:56 |
mattoliverau | Seeing as you already have a follow up patch to fix it written and submitted to gerrit, maybe mention the bug in thiagos change, that this patch fixes it. Then give it a good score (but don't +A) (not that you can cause 0 +2s ATM) so thiago can decide if he wants to merge your patch into his.. But personally I think its fine as a follow up, so long as the follow up is merged before the next release | 02:56 |
kota_ | I have an experience that security software raised a bunch of warning when there is duplicated header key. | 02:57 |
*** blmartin has quit IRC | 02:57 | |
mattoliverau | True, its a good find | 02:58 |
kota_ | mattoliverau: nice comments! | 02:58 |
kota_ | mattoliverau: ok, I'm going to add +2 with my suggestion after taking my lunch :P | 02:59 |
kota_ | mattoliverau: thanks a lot! | 03:00 |
mattoliverau | Sounds great and I won't +A until someone else takes a look ;) | 03:00 |
mattoliverau | Anytime kota_, we timezone mates need to stick together ;) | 03:00 |
zaitcev | There's still a lot of overlap. | 03:02 |
mattoliverau | In timezones? | 03:04 |
zaitcev | Yes. | 03:04 |
mattoliverau | True and most the Americans don't seem to sleep ;) | 03:05 |
openstackgerrit | Daisuke Morita proposed openstack/swift: WIP: Changing Policies https://review.openstack.org/209329 | 03:15 |
*** dmorita_ has quit IRC | 03:16 | |
*** sanchitmalhotra has joined #openstack-swift | 03:20 | |
*** annegentle has joined #openstack-swift | 03:29 | |
*** jrichli has joined #openstack-swift | 03:32 | |
*** SkyRocknRoll has joined #openstack-swift | 03:35 | |
peluse | hey can anyone out there explain the semantics behind HTTP_CONFLICT in the case of PUT? I'm missing something really obvious I think, what is the scenario we are catching here? | 03:37 |
peluse | (wrt timestamps) | 03:37 |
*** annegentle has quit IRC | 03:38 | |
*** sanchitmalhotra1 has joined #openstack-swift | 03:46 | |
*** sanchitmalhotra has quit IRC | 03:48 | |
*** hrou has quit IRC | 03:50 | |
openstackgerrit | Kota Tsuyuzaki proposed openstack/swift: Refactor versioned_writes middleware https://review.openstack.org/209315 | 04:01 |
*** zaitcev has quit IRC | 04:05 | |
*** kota_ has quit IRC | 04:06 | |
*** mahatic has joined #openstack-swift | 04:09 | |
*** janonymous has quit IRC | 04:32 | |
*** fifieldt has joined #openstack-swift | 04:32 | |
*** SkyRocknRoll has quit IRC | 04:35 | |
*** ppai has joined #openstack-swift | 04:35 | |
*** ppai has quit IRC | 04:41 | |
*** bill_az has joined #openstack-swift | 04:45 | |
*** remix_tj has quit IRC | 04:50 | |
*** jrichli has quit IRC | 04:58 | |
*** pcaruana has quit IRC | 04:59 | |
*** haomaiwang has joined #openstack-swift | 05:08 | |
ho | peluse: i guess time difference b/w proxy-serves. one request via proxy-server A and next request via proxy-server to account/container/object-servers. if timestamp of laster request is older than first request, we can get 409. | 05:12 |
*** tab___ has quit IRC | 05:12 | |
*** silor has joined #openstack-swift | 05:31 | |
*** bill_az has quit IRC | 05:41 | |
*** bill_az has joined #openstack-swift | 05:43 | |
*** SkyRocknRoll has joined #openstack-swift | 05:44 | |
*** bill_az has quit IRC | 05:45 | |
*** bill_az has joined #openstack-swift | 05:46 | |
*** janonymous has joined #openstack-swift | 05:47 | |
*** haomaiwang has quit IRC | 05:52 | |
*** haomaiwang has joined #openstack-swift | 05:52 | |
*** esker has quit IRC | 06:01 | |
*** esker has joined #openstack-swift | 06:03 | |
*** hezhiqiang has joined #openstack-swift | 06:10 | |
*** breitz has joined #openstack-swift | 06:29 | |
*** breitz has quit IRC | 06:33 | |
*** marzif_ has quit IRC | 06:35 | |
*** pcaruana has joined #openstack-swift | 06:36 | |
*** breitz has joined #openstack-swift | 06:37 | |
*** SkyRocknRoll_ has joined #openstack-swift | 06:37 | |
*** SkyRocknRoll has quit IRC | 06:39 | |
*** breitz has quit IRC | 06:41 | |
openstackgerrit | Clay Gerrard proposed openstack/swift: Fix TypeError if backend response doesn't have expected headers https://review.openstack.org/209370 | 06:50 |
*** marzif_ has joined #openstack-swift | 07:13 | |
*** marzif__ has joined #openstack-swift | 07:16 | |
*** marzif_ has quit IRC | 07:18 | |
*** silor has quit IRC | 07:18 | |
*** geaaru has joined #openstack-swift | 07:22 | |
*** ppai has joined #openstack-swift | 07:28 | |
*** geaaru has quit IRC | 07:50 | |
*** SkyRocknRoll_ has quit IRC | 07:52 | |
*** bill_az has quit IRC | 07:55 | |
*** tsubic has joined #openstack-swift | 08:01 | |
*** jordanP has joined #openstack-swift | 08:02 | |
*** joeljwright has joined #openstack-swift | 08:08 | |
*** ChanServ sets mode: +v joeljwright | 08:08 | |
*** jistr has joined #openstack-swift | 08:14 | |
*** geaaru has joined #openstack-swift | 08:16 | |
*** jordanP has quit IRC | 08:20 | |
*** jordanP has joined #openstack-swift | 08:21 | |
*** acoles_away is now known as acoles | 08:23 | |
*** barra204 has quit IRC | 08:25 | |
acoles | good morning | 08:26 |
joeljwright | mornin | 08:27 |
acoles | hi joeljwright you going to make it to austin next week? | 08:27 |
joeljwright | no, sadly not | 08:27 |
joeljwright | I was chatting to people and it seemed that swiftclient stuff was unlikely to be high priority in Austin | 08:28 |
acoles | ok nm. | 08:28 |
acoles | that sounds like a reasonable assumption | 08:28 |
*** km has quit IRC | 08:40 | |
*** remix_tj has joined #openstack-swift | 08:41 | |
*** sanchitmalhotra has joined #openstack-swift | 08:51 | |
*** kei_yama has quit IRC | 08:51 | |
*** sanchitmalhotra1 has quit IRC | 08:52 | |
openstackgerrit | Hisashi Osanai proposed openstack/swift: Remove _keystone_identity method https://review.openstack.org/204050 | 09:01 |
*** mahatic has quit IRC | 09:24 | |
*** hezhiqiang has quit IRC | 09:24 | |
*** sanchitmalhotra1 has joined #openstack-swift | 09:30 | |
*** sanchitmalhotra has quit IRC | 09:31 | |
*** sanchitmalhotra has joined #openstack-swift | 09:47 | |
*** sanchitmalhotra1 has quit IRC | 09:49 | |
*** mahatic has joined #openstack-swift | 10:11 | |
*** ho has quit IRC | 10:23 | |
openstackgerrit | Kota Tsuyuzaki proposed openstack/swift-specs: Add global ec cluster improvement https://review.openstack.org/209447 | 10:35 |
*** mahatic has quit IRC | 10:38 | |
*** jasondotstar has joined #openstack-swift | 10:47 | |
*** h00327910__ has quit IRC | 10:58 | |
*** johnsonejezie has joined #openstack-swift | 10:59 | |
*** hezhiqiang has joined #openstack-swift | 11:04 | |
*** mahatic has joined #openstack-swift | 11:06 | |
*** johnsonejezie_ has joined #openstack-swift | 11:13 | |
*** johnsonejezie has quit IRC | 11:13 | |
*** johnsonejezie_ is now known as johnsonejezie | 11:13 | |
*** marzif__ has quit IRC | 11:15 | |
*** marzif__ has joined #openstack-swift | 11:16 | |
*** sanchitmalhotra1 has joined #openstack-swift | 11:31 | |
*** sanchitmalhotra has quit IRC | 11:33 | |
*** johnsonejezie has quit IRC | 11:36 | |
*** johnsonejezie has joined #openstack-swift | 11:38 | |
johnsonejezie | Hi everyone. getting this error The operation couldn’t be completed. (com.google.HTTPStatus error 400. with google GIDSignIn. It only happens when user has google+ app installed in the device. And if I remove the [GIDSignIn sharedInstance].setServerClientID, it works. Any idea why this is so? Thanks | 11:40 |
*** joeljwright has quit IRC | 11:41 | |
*** sanchitmalhotra has joined #openstack-swift | 11:42 | |
*** sanchitmalhotra1 has quit IRC | 11:45 | |
tdasilva | johnsonejezie: sounds like you have a question for apple swift | 11:54 |
johnsonejezie | tdasilva hi I already asked the question. Did you see it? | 11:55 |
*** jistr has quit IRC | 11:56 | |
tdasilva | johnsonejezie: sorry, what i meant to say is that I think you are asking the question in the wrong place. This channel is for openstack-swift | 11:57 |
*** johnsonejezie has left #openstack-swift | 11:59 | |
*** mahatic_ has joined #openstack-swift | 12:04 | |
*** mahatic has quit IRC | 12:04 | |
*** mahatic_ has quit IRC | 12:11 | |
*** mahatic has joined #openstack-swift | 12:11 | |
*** jistr has joined #openstack-swift | 12:18 | |
*** jistr is now known as jistr|biab | 12:19 | |
*** alejandrito has joined #openstack-swift | 12:19 | |
*** robefran has joined #openstack-swift | 12:33 | |
*** hezhiqiang has quit IRC | 12:37 | |
*** hrou has joined #openstack-swift | 12:37 | |
*** esker has quit IRC | 12:38 | |
*** marzif__ has quit IRC | 12:43 | |
*** marzif__ has joined #openstack-swift | 12:44 | |
*** marcusvrn has joined #openstack-swift | 12:49 | |
*** bkopilov has quit IRC | 12:51 | |
*** bapalm has joined #openstack-swift | 12:52 | |
*** bapalm_ has joined #openstack-swift | 12:53 | |
*** joeljwright has joined #openstack-swift | 12:56 | |
*** ChanServ sets mode: +v joeljwright | 12:56 | |
*** bapalm has quit IRC | 12:57 | |
*** thumpba has joined #openstack-swift | 13:01 | |
*** dustins has joined #openstack-swift | 13:02 | |
*** petertr7_away is now known as petertr7 | 13:03 | |
*** thumpba has quit IRC | 13:04 | |
*** zul has joined #openstack-swift | 13:05 | |
*** jistr|biab is now known as jistr | 13:06 | |
*** esker has joined #openstack-swift | 13:07 | |
*** bill_az has joined #openstack-swift | 13:09 | |
*** alejandrito has quit IRC | 13:10 | |
*** esker has quit IRC | 13:12 | |
*** mahatic has quit IRC | 13:21 | |
*** sanchitmalhotra has quit IRC | 13:28 | |
*** sanchitmalhotra has joined #openstack-swift | 13:29 | |
*** silor has joined #openstack-swift | 13:30 | |
*** petertr7 is now known as petertr7_away | 13:34 | |
*** mahatic has joined #openstack-swift | 13:36 | |
*** petertr7_away is now known as petertr7 | 13:38 | |
*** ppai has quit IRC | 13:45 | |
*** sc68cal_ has joined #openstack-swift | 13:46 | |
*** esker has joined #openstack-swift | 13:47 | |
*** breitz has joined #openstack-swift | 13:51 | |
*** briancline has quit IRC | 13:52 | |
*** sc68cal has quit IRC | 13:52 | |
*** ccavanna has joined #openstack-swift | 13:52 | |
*** jrichli has joined #openstack-swift | 13:53 | |
*** blmartin has joined #openstack-swift | 13:53 | |
*** briancline has joined #openstack-swift | 13:54 | |
*** esker has quit IRC | 14:04 | |
*** zigo has quit IRC | 14:05 | |
*** esker has joined #openstack-swift | 14:05 | |
*** sanchitmalhotra has quit IRC | 14:06 | |
*** zigo has joined #openstack-swift | 14:06 | |
*** NM has joined #openstack-swift | 14:07 | |
*** thumpba has joined #openstack-swift | 14:07 | |
openstackgerrit | Charles Hsu proposed openstack/swift: Add extra_header_count to document and config. https://review.openstack.org/209525 | 14:10 |
*** breitz has quit IRC | 14:11 | |
*** esker has quit IRC | 14:12 | |
*** esker has joined #openstack-swift | 14:14 | |
*** jlhinson has joined #openstack-swift | 14:15 | |
mahatic | jrichli: I put down some notes for probe tests on etherpad. FYI | 14:16 |
*** delattec has quit IRC | 14:22 | |
*** annegentle has joined #openstack-swift | 14:23 | |
*** mordred has quit IRC | 14:25 | |
jrichli | mahatic: Thanks. I made some comments as well. | 14:26 |
openstackgerrit | Ben Martin proposed openstack/swift: +Document method to avoid rsync filling root drive https://review.openstack.org/199203 | 14:28 |
openstackgerrit | Ben Martin proposed openstack/swift: +Document method to avoid rsync filling root drive https://review.openstack.org/199203 | 14:29 |
mahatic | jrichli: sure, looking | 14:30 |
*** bapalm_ has quit IRC | 14:38 | |
*** esker has quit IRC | 14:39 | |
*** NM has quit IRC | 14:39 | |
*** esker has joined #openstack-swift | 14:40 | |
ccavanna | Hi. Good moring everyone. Question about Jerkins tests. I noticed that the cluster test was re-added. However, I also noticed that when it was misconfigured last week (there are some setup errors) | 14:41 |
ccavanna | I tried rerunning posting a "recheck" comment. However, that reruns the Jenkins check only. Is there another way to re-run the cluster tests? | 14:41 |
ccavanna | Or should I just issue a git review again. | 14:42 |
*** jistr has quit IRC | 14:44 | |
*** jistr has joined #openstack-swift | 14:44 | |
*** delattec has joined #openstack-swift | 14:45 | |
*** bapalm_ has joined #openstack-swift | 14:46 | |
*** amoturi has joined #openstack-swift | 14:49 | |
*** robefran has quit IRC | 14:49 | |
*** blmartin has quit IRC | 14:51 | |
*** blmartin has joined #openstack-swift | 14:52 | |
tdasilva | ccavanna: is the 'cluster tests' the same as the swiftstack tests? | 14:59 |
tdasilva | ccavanna: I think charz can manually re-run them | 14:59 |
ccavanna | I think they are the same. | 14:59 |
ccavanna | The full name of the tests is "SwiftStack Cluster CI check" | 14:59 |
tdasilva | don't know of an automated way besides another patchset | 14:59 |
ccavanna | I can just post an update on the commit message, then. | 15:00 |
ccavanna | That should trigger the re-check. | 15:00 |
tdasilva | yep | 15:00 |
*** esker has quit IRC | 15:00 | |
charz | ccavanna: or you can add comment "recheck". | 15:01 |
ccavanna | recheck didn't work. | 15:01 |
*** mahatic has quit IRC | 15:01 | |
ccavanna | It only re-rean Jenkins tests. | 15:01 |
charz | ccavanna: which patchset. | 15:01 |
*** esker has joined #openstack-swift | 15:02 | |
*** esker has quit IRC | 15:02 | |
ccavanna | https://review.openstack.org/#/c/202657/ | 15:02 |
*** breitz has joined #openstack-swift | 15:02 | |
ccavanna | latest patset and the previous one. | 15:02 |
*** esker has joined #openstack-swift | 15:02 | |
*** mahatic has joined #openstack-swift | 15:02 | |
charz | ccavanna: one second, let me check the jenkins | 15:02 |
*** minwoob has joined #openstack-swift | 15:03 | |
*** zaitcev has joined #openstack-swift | 15:04 | |
*** ChanServ sets mode: +v zaitcev | 15:04 | |
hrou | Those aren't gating ccavanna right ? I think jenkins gave you a +1 ? I think someone mentioned there were issues with those ? | 15:12 |
ccavanna | I saw those tests executing properly in another review. I guess they were fixed. | 15:13 |
charz | ccavanna: That's our code issue, I'll fix that. I'm going to re-trigger it for your patchset manually. | 15:13 |
ccavanna | charz: great. thanks. | 15:13 |
*** marzif__ has quit IRC | 15:15 | |
*** marzif__ has joined #openstack-swift | 15:16 | |
*** esker has quit IRC | 15:22 | |
*** esker has joined #openstack-swift | 15:23 | |
*** esker has quit IRC | 15:23 | |
*** esker has joined #openstack-swift | 15:25 | |
*** esker has quit IRC | 15:30 | |
*** resker has joined #openstack-swift | 15:30 | |
*** esker has joined #openstack-swift | 15:30 | |
*** bapalm_ has quit IRC | 15:34 | |
*** petertr7 is now known as petertr7_away | 15:35 | |
*** shakamunyi has joined #openstack-swift | 15:35 | |
*** gyee has joined #openstack-swift | 15:36 | |
*** nadeem has joined #openstack-swift | 15:39 | |
*** acoles is now known as acoles_away | 15:40 | |
*** esker has quit IRC | 15:40 | |
*** nadeem has quit IRC | 15:44 | |
*** nadeem has joined #openstack-swift | 15:44 | |
*** esker has joined #openstack-swift | 15:48 | |
*** robefran has joined #openstack-swift | 15:55 | |
*** bapalm_ has joined #openstack-swift | 15:57 | |
*** esker has quit IRC | 15:57 | |
*** robefran_ has joined #openstack-swift | 15:58 | |
*** esker has joined #openstack-swift | 15:59 | |
*** robefran_ has quit IRC | 15:59 | |
robefran | I cloned a new SAIO env (2.3.1.dev244) and I hit an error linking libJerasure.so | 16:00 |
robefran | liberasurecode_backend_open: dynamic linking error libJerasure.so: cannot open shared object file: No such file or directory | 16:00 |
robefran | am I missing some SAIO setup? | 16:01 |
charz | ccavanna: I fixed that, it seems we ignore "recehck" in comment, but "recheck no bug" is work. | 16:01 |
ccavanna | do you want me to post a "recheck no bug" to test it? | 16:01 |
charz | ccavanna: "recheck" is work now, and your patchset are already in jenkins queue. | 16:02 |
ccavanna | oh, great. | 16:02 |
ccavanna | Thank you! | 16:02 |
charz | ccavanna: you're welcome. | 16:02 |
robefran | found a solution, apt-get install libjerasure-dev (should this be added to SAIO instructions?) | 16:09 |
*** doffm has joined #openstack-swift | 16:12 | |
peluse | tsg coming.... | 16:13 |
*** tsg has joined #openstack-swift | 16:13 | |
*** ccavanna has quit IRC | 16:17 | |
*** ccavanna has joined #openstack-swift | 16:17 | |
*** jordanP has quit IRC | 16:19 | |
minwoob | Has anyone seen unit test errors=29 after pulling in the latest changes from master? | 16:21 |
*** breitz has quit IRC | 16:22 | |
*** jistr has quit IRC | 16:23 | |
*** esker has quit IRC | 16:23 | |
*** jistr has joined #openstack-swift | 16:23 | |
*** jistr has quit IRC | 16:24 | |
*** pcaruana has quit IRC | 16:26 | |
*** janonymous_ has joined #openstack-swift | 16:27 | |
*** esker has joined #openstack-swift | 16:27 | |
openstackgerrit | paul luse proposed openstack/swift: Add ability for GET path to see/select alternate frag archs https://review.openstack.org/207165 | 16:27 |
tsg | robefran: missed the pyeclib/liberasurecode discussion earlier - mind repeating what problem were you having and what did you have to do to fix it? | 16:29 |
peluse | minwoob, nope, did you update your test requirements though? | 16:29 |
*** petertr7_away is now known as petertr7 | 16:29 | |
robefran | I cloned out a new SAIO env (2.3.1.dev244) and hit | 16:29 |
*** openstackgerrit_ has joined #openstack-swift | 16:30 | |
robefran | liberasurecode_backend_open: dynamic linking error libJerasure.so: cannot open shared object file: No such file or directory | 16:30 |
robefran | apt-get install python-pyeclib libjerasure-dev, solved my problem | 16:30 |
robefran | I'll look into adding this to the SAIO instructions | 16:31 |
tsg | robefran: that makes sense - we have had jerasure as the default backend for Swift | 16:31 |
tsg | robefran: although - the "sudo pip install -r requirements.txt" step should have taken care of jerasure install | 16:33 |
tsg | robefran: can you check if you didn't do that as part of SAIO bring up? Or if the pip install step failed? | 16:34 |
peluse | yeah, I just built a new VM from the SAIO directions last week and didn't have any issues. I'll fire that VM up real quick and make sure EC works there | 16:34 |
mahatic | I've had issues whil installing cryptography though (when I ran sudo pip install -r requirements.txt). I had to manually install OpenSSL dev package and then run that step again | 16:36 |
mahatic | I ran this "sudo apt-get install libssl-dev" for OpenSSL | 16:37 |
*** acoles_away is now known as acoles | 16:37 | |
hrou | Hey mahatic, yep me too i.e. 'sudo apt-get install libssl-dev', but I think the reason for that is building swift, it needs some C libraries for AES. | 16:37 |
peluse | robefran, so my fresh VM following current SAIO has no issues w/EC and installed the dependencies w/o issue. Maybe something went wrong with your isntall that you didn't notice (failure lost in scroll by or something)? | 16:38 |
tsg | yeah, perhaps a network/build issue | 16:39 |
mahatic | hrou: shouldn't we be including that in the SAIO instructions? | 16:39 |
*** esker has quit IRC | 16:39 | |
peluse | mahatic, yeah, I think I had to do that too but that's a different topic than the EC stuff (in case anyone thought this was one conversation). I think the error there is a missing .h file until you do that step. That's something to fix on feature/crypto | 16:39 |
hrou | mahatic, I think we should find a way to include it through requirements.txt or what not if at all possible. | 16:40 |
mahatic | hrou: part of requirements.txt | 16:40 |
mahatic | yeah | 16:40 |
robefran | peluse,tsg: I'll check back through the scroll to see if requirements.txt failed | 16:40 |
tsg | thanks | 16:40 |
mahatic | peluse: ah | 16:41 |
peluse | robefran, cool - I'm sure I missed an error in the ton of stuff that flies by during the first install of the EC requirments at least once in the past... | 16:41 |
minwoob | peluse: Yeah, that was the issue. Thanks. | 16:41 |
mahatic | peluse: although i didn't think this was to do with EC stuff | 16:42 |
peluse | minwoob, OK, what is the error? | 16:42 |
hrou | robefran, I also just recently set things up, and noticed I already had libjerasure-dev pulled down, which I assume comes from PyECLib, yea maybe we can repeat the SAIO install and see what error happened. | 16:42 |
robefran | peluse: scroll doesn't go back far enough, I'll try again with a clean VM, capture the output and see if requirements.txt failed | 16:43 |
peluse | that'd be great. thanks | 16:44 |
mahatic | robefran: you could enable that in terminal settings I believe, scrolling unlimited | 16:44 |
mahatic | yeah a capture would work too :) | 16:44 |
*** bill_az has quit IRC | 16:46 | |
*** bill_az has joined #openstack-swift | 16:47 | |
*** dmorita has joined #openstack-swift | 16:48 | |
notmyname | good morning | 16:56 |
mahatic | morning | 16:59 |
*** bapalm_ has quit IRC | 17:00 | |
*** openstackgerrit_ has quit IRC | 17:05 | |
*** esker has joined #openstack-swift | 17:09 | |
*** esker has quit IRC | 17:09 | |
*** esker has joined #openstack-swift | 17:10 | |
*** tongli has joined #openstack-swift | 17:12 | |
*** SkyRocknRoll has joined #openstack-swift | 17:16 | |
*** esker has quit IRC | 17:16 | |
*** esker has joined #openstack-swift | 17:20 | |
*** esker has quit IRC | 17:21 | |
*** openstackgerrit_ has joined #openstack-swift | 17:24 | |
mahatic | hrou: here | 17:27 |
mahatic | hrou: yeah there was a discussion about probe tests, it's on the etherpad | 17:27 |
mahatic | https://etherpad.openstack.org/p/swift_encryption_issues | 17:28 |
hrou | mahatic, great I'll check that out | 17:28 |
*** chsc has joined #openstack-swift | 17:28 | |
peluse | charz, still around? | 17:29 |
charz | peluse: here | 17:29 |
mahatic | hrou: I'm currently looking into that | 17:30 |
peluse | cool, hey can you send me the exact cmd line you use to start ssbench in your repro (i'm no a big ssbench user) | 17:30 |
hrou | mahatic, thanks, I see there's still some debate about the solution. | 17:30 |
hrou | mahatic, oh ok that sounds great! | 17:30 |
charz | peluse: sure | 17:31 |
peluse | charz, just paste here in IRC is fine :) thanks | 17:31 |
peluse | oh wait, looks like you did that already in the gist. geeze | 17:32 |
peluse | charz, wait, the bug says you added it but I dont see it | 17:33 |
charz | peluse: yeah, just want to post gist link to here again. | 17:33 |
*** zhill has joined #openstack-swift | 17:33 | |
charz | peluse: https://gist.github.com/charz/5e53c3f735f736bc6ced#file-1-ssbench-result-md search "ssbench-master" | 17:34 |
*** marzif__ has quit IRC | 17:34 | |
peluse | ahh, see it now. thanks. will try | 17:34 |
*** openstackgerrit_ has quit IRC | 17:34 | |
peluse | OK, runs now. thanks :) | 17:35 |
*** SkyRocknRoll has quit IRC | 17:35 | |
*** SkyRocknRoll_ has joined #openstack-swift | 17:35 | |
*** mahatic has quit IRC | 17:38 | |
tdasilva | seriously??? http://ur1.ca/nd1vh | 17:41 |
hrou | tdasilva, : ) I ran into this that's an old version of hacking (H402 no longer exists), the new test-requirments.txt specifies a newer version of hacking (and you need to rebuild tox env with tox -r ...) | 17:43 |
tdasilva | hrou: phew, thanks! trying out now | 17:43 |
hrou | tdasilva, sure thing, that should do the trick (make sure to do the pip install -r test-requirements.txt step first) | 17:44 |
tdasilva | hrou: cool, will do, thx :-) | 17:45 |
*** petertr7 is now known as petertr7_away | 17:46 | |
*** dustins has quit IRC | 17:46 | |
*** dustins has joined #openstack-swift | 17:52 | |
*** bkopilov has joined #openstack-swift | 17:54 | |
zaitcev | Fedora is backwards: onelines MUST NOT have the ending period. Just because. | 17:54 |
zaitcev | You can see it enforced in RPMs. | 17:55 |
*** annegentle has quit IRC | 17:56 | |
*** petertr7_away is now known as petertr7 | 17:56 | |
*** bapalm_ has joined #openstack-swift | 18:00 | |
*** thurloat_isgone is now known as thurloat | 18:03 | |
*** lpabon has joined #openstack-swift | 18:04 | |
*** tsg has quit IRC | 18:06 | |
*** bapalm_ has quit IRC | 18:06 | |
*** tsg has joined #openstack-swift | 18:12 | |
*** esker has joined #openstack-swift | 18:13 | |
*** acoles is now known as acoles_away | 18:18 | |
*** aagrawal has joined #openstack-swift | 18:29 | |
*** zhill has quit IRC | 18:32 | |
*** annegentle has joined #openstack-swift | 18:35 | |
*** zhill has joined #openstack-swift | 18:41 | |
*** lpabon has quit IRC | 18:43 | |
*** openstackgerrit has quit IRC | 18:46 | |
*** openstackgerrit has joined #openstack-swift | 18:46 | |
robefran | peluse: I cloned a SAIO in a new VM, and hit the same libJerasure.so error. I also captured the log off my SAIO setup/clone. It successfully installed PyECLib-1.0.7 | 18:48 |
peluse | robefran, not sure I understand, same issue but it successfully installed?? Which is it, did it work ot not? :) | 18:52 |
robefran | peluse: my SAIO setup is scripted, but I don't see any diffs in the apt-gets from the SAIO instructions. My setup did not apt-get install libjerasure-dev | 18:52 |
robefran | peluse: the SAIO instructions I'm looking at are: http://docs.openstack.org/developer/swift/development_saio.html | 18:53 |
*** tsg has quit IRC | 18:54 | |
*** tsg has joined #openstack-swift | 18:54 | |
robefran | peluse: It did not work out. The startmain fails with the missing libJerasure.so error. So far I have not manually done the apt-get install libjerasure-dev. | 18:55 |
tdasilva | robefran, peluse: so it is installing pyECLib-1.0.7, but not libjerausre-dev? | 18:55 |
robefran | tdasilva: yes, for me, it is installing PyECLIb-1.0.7, but not libjerasure-dev | 18:55 |
peluse | I'm going to be offline for a bit but I'd prefer this be filled as a bug and not a doc patch. AFAIK right now it is supposed to just work (and for some reason did for me but now that I think about it I may have had older versions installed on that VM) | 18:56 |
peluse | tsg, can you confirm that pip install pyeclin is indeed suppsoed to install libjerasure? | 18:57 |
tsg | robefran: can you check if you have libJerasure.so on your system? | 18:58 |
tsg | robefran: the next step would be to run "sudo ldconfig" and try again | 18:58 |
peluse | oh yeah, I forgot I had to do that too! its in the last output line after the isntall so if scripted you might not see it | 18:59 |
peluse | if that's the problem then yes *that* should be in the doc | 18:59 |
robefran | tsg, peluse: I did not do the ldconfig, I'll give it a try | 18:59 |
peluse | charz, still there? | 19:01 |
*** bhakta has quit IRC | 19:03 | |
*** ajiang has quit IRC | 19:03 | |
*** ajiang has joined #openstack-swift | 19:04 | |
*** bhakta has joined #openstack-swift | 19:05 | |
openstackgerrit | Thiago da Silva proposed openstack/swift: versioned writes middleware https://review.openstack.org/134347 | 19:29 |
openstackgerrit | janonymous proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209642 | 19:29 |
openstackgerrit | janonymous proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209643 | 19:30 |
openstackgerrit | janonymous proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209645 | 19:31 |
openstackgerrit | janonymous proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209646 | 19:32 |
robefran | tsg: ldconfig did not help. I did not find a libJerasure.so on my system. I'm looking in /usr/lib/x86_64-linux-gnu/ | 19:33 |
openstackgerrit | janonymous proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209647 | 19:33 |
*** silor has quit IRC | 19:34 | |
tsg | robefran: can you capture the output of "sudo pip install -r requirements.txt" and share a gist? | 19:35 |
janonymous_ | Please find the patches for assert checks for review ,i have uploaded the changes based on directories to avoid large patch set and easy reviews :) | 19:37 |
*** zhill has quit IRC | 19:42 | |
*** bkopilov has quit IRC | 19:43 | |
*** NM has joined #openstack-swift | 19:45 | |
*** bkopilov has joined #openstack-swift | 19:45 | |
*** zhill has joined #openstack-swift | 19:51 | |
openstackgerrit | Bill Huber proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209649 | 19:53 |
*** proteusguy has quit IRC | 19:54 | |
*** esker has quit IRC | 19:55 | |
robefran | tsg: the captured sudo pip install -r requirements.txt stated Requirement already satisfied | 19:55 |
robefran | tsg: I tried sudo pip install --upgrade --force-reinstall PyECLib (after the ldconfig), and this did the trick. My startmain now works. | 19:56 |
*** janonymous_ has left #openstack-swift | 19:56 | |
robefran | tsg: should I update the SAIO instructions to run a ldconfig before the sudo pip install -r requirements.txt ? | 19:57 |
*** thumpba has quit IRC | 19:58 | |
tsg | robefran: after pip install makes sense - not sure why you would suggest running it before? (unless you were install jerasure by hand) | 19:59 |
tsg | robefran: that is, you were installing jerasure from source before running "pip install" .. | 19:59 |
openstackgerrit | Bill Huber proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209652 | 20:00 |
peluse | robefran, so this is a pyeclib thing (not a swift thing) but we do need to make note of it since its kind of important and clearly the msg that spits out at the end of the pyeclib isntall can easilybe missed | 20:01 |
robefran | tsg: I did the following | 20:01 |
robefran | tsg: sudo ldconfig | 20:01 |
robefran | tsg: sudo pip install --upgrade --force-reinstall PyECLib | 20:01 |
robefran | tsg: the ldconfig by itself did not solve the problem | 20:02 |
peluse | robefran, however its not just the SAIO doc... please submit a patch with a small but clear note for the user docs as well as SAIO (maybe in the form of a footnote that calls out this step as being needed by one of the swift requiements) | 20:02 |
peluse | tsg, remind me again why this can't be part of the install of pyeclib (this last step)? | 20:02 |
*** bkopilov has quit IRC | 20:04 | |
tsg | peluse: it can be - although with v1.0.8 we don't have jerasure integrated with pyeclib anymore | 20:04 |
tsg | so soon enough jerasure install will have to be a separate step anyway | 20:04 |
peluse | so the step isn't needed > 1.0.8? At that point in time do we then need to add it as its own requirement or do we need to then add doc to explain how to install one of the available EC libs? | 20:05 |
peluse | >= | 20:05 |
peluse | oh you already answered before I finished typing :) | 20:05 |
peluse | OK so robefran don't submit a patch right now it will just make it even more confusing | 20:06 |
tsg | peluse: we'll switch to "liberasurecode_rs_vand" for default EC scheme for Swift (I have a patch I need to submit for review) | 20:06 |
*** proteusguy has joined #openstack-swift | 20:06 | |
peluse | tsg, OK, cool. that's the answer then | 20:06 |
tsg | peluse: so jerasure will not be a must-have for SAIO | 20:06 |
robefran | tsg, peluse: ok, I won't submit anything | 20:06 |
peluse | when? | 20:06 |
peluse | 1.0.8 that is | 20:06 |
tsg | 1.0.8 has already been tagged - zigo built .debs last night | 20:07 |
peluse | and at that time lets be *sure* to document where to find directions on installing both ISA-L and jerasure after the fact, we don't have that now | 20:07 |
tsg | we need to push a pypi package .. should happen today | 20:07 |
peluse | great! | 20:07 |
tsg | peluse: makes sense | 20:07 |
*** jasondot_ has joined #openstack-swift | 20:07 | |
notmyname | tsg: but isn't there an issue with the packaging that will allow a 1.0.9 quickly? | 20:08 |
notmyname | or was that only "for next time" sort of thing | 20:08 |
tsg | peluse: we are holding off pypi release due to the integrated-liberasurecode thingy, where we may just move to 1.0.9 | 20:08 |
tsg | notmyname: those changes have already been pushed | 20:08 |
notmyname | ok | 20:08 |
notmyname | great | 20:08 |
*** jasondotstar has quit IRC | 20:08 | |
tsg | so liberasurecode-1.0.8, pyeclib-1.0.9 is what we are thinking | 20:08 |
peluse | notmyname, do you prefer we include instructions on how to install jerasure and ISAL in the swift docs or just include links to other sites that explain how to install those? | 20:09 |
tsg | peluse: that's a great idea IMO | 20:09 |
notmyname | peluse: in swift | 20:09 |
peluse | notmyname, agreed but wanted to make sure you don't have an issue with it | 20:09 |
notmyname | peluse: nope. not right now | 20:09 |
peluse | tsg, can you include the doc change w/the req change so we know they land at the same time? | 20:10 |
tsg | peluse: will do | 20:10 |
peluse | gracias | 20:10 |
peluse | robefran, sorry for the confusion :) | 20:10 |
notmyname | tsg: and when you push to pypi you'll push as 1.0.9 with the changes zigo said? | 20:11 |
notmyname | tsg: and it will be tagged as such in the repo? | 20:11 |
tsg | notmyname: yes | 20:11 |
notmyname | great | 20:11 |
notmyname | same version everywhere | 20:11 |
peluse | reobefan, and thanks for asking the questions that help drive making this thing better | 20:11 |
tsg | notmyname: the only relevant change there for us will be making the liberasurecode install optional | 20:11 |
robefran | peluse: it's amazing how I trip over these things just before they are solved. I must remember to remove that 'kick me' sign from my back ;-) | 20:11 |
tsg | (automated install that is) | 20:11 |
peluse | heh, OK I'm outta here.... later | 20:12 |
tsg | robefran: it will still be good to get a log from your "sudo pip install -r requirements.txt" on a clean VM | 20:12 |
tsg | robefran: just in case we still need to amend the docs .. | 20:12 |
tsg | robefran: can you send me the complete log (with "screen" or similar) | 20:13 |
*** sc68cal_ is now known as sc68cal | 20:13 | |
robefran | tsg: I have to run, but I have the log saved, and will get it to you tomorrow | 20:13 |
*** bapalm has joined #openstack-swift | 20:16 | |
*** bkopilov has joined #openstack-swift | 20:18 | |
*** amoturi has quit IRC | 20:25 | |
*** robefran has quit IRC | 20:27 | |
*** bill_az has quit IRC | 20:28 | |
*** bill_az has joined #openstack-swift | 20:30 | |
*** marzif__ has joined #openstack-swift | 20:38 | |
*** changbl has quit IRC | 20:39 | |
*** changbl has joined #openstack-swift | 20:40 | |
*** NM has quit IRC | 20:44 | |
*** itlinux has joined #openstack-swift | 20:46 | |
itlinux | hi all | 20:46 |
itlinux | does anyone have a ref by chance of the usage of Swift as a photo storage | 20:47 |
itlinux | I know shutterfly uses object but not sure which one. Thanks | 20:47 |
notmyname | itlinux: all of the wikimedia images (ie all the pictures you see on wikipedia) are stored in swift | 20:47 |
itlinux | thanks I forgot about that. | 20:48 |
tdasilva | itlinux: http://blog.wikimedia.org/2012/02/09/scaling-media-storage-at-wikimedia-with-swift/ | 20:48 |
*** zhill has quit IRC | 20:48 | |
notmyname | and yes, one of those big ones (like shutterfly) uses swift, but I'm not sure how public that is | 20:49 |
itlinux | thank you | 20:49 |
openstackgerrit | Bill Huber proposed openstack/swift: pep8 fix: assertEquals -> assertEqual https://review.openstack.org/209649 | 20:50 |
notmyname | itlinux: oh, ok. I found some public references. snapfish uses swift | 20:50 |
*** aerwin has joined #openstack-swift | 20:53 | |
*** ho has joined #openstack-swift | 20:54 | |
*** acoles_away is now known as acoles | 20:57 | |
mattoliverau | Morning | 20:57 |
notmyname | good morning | 20:57 |
*** kota_ has joined #openstack-swift | 20:57 | |
*** ChanServ sets mode: +v kota_ | 20:57 | |
*** zhill has joined #openstack-swift | 20:57 | |
joeljwright | morning | 20:57 |
kota_ | morning | 20:57 |
ho | good morning | 20:59 |
notmyname | ok, it's meeting time. wheeee | 20:59 |
*** lcurtis has joined #openstack-swift | 21:02 | |
*** blmartin has quit IRC | 21:03 | |
*** breitz has joined #openstack-swift | 21:05 | |
-openstackstatus- NOTICE: Zuul has been restarted to resolve a reconfiguration failure: previously running jobs have been reenqueued but change events between 19:50-20:54 UTC have been lost and will need to be rechecked or their approvals reapplied to trigger testing. | 21:06 | |
notmyname | MooingLemur: you should fork cowsay | 21:06 |
*** bapalm has quit IRC | 21:06 | |
MooingLemur | hah | 21:07 |
*** petertr7 is now known as petertr7_away | 21:10 | |
-openstackstatus- NOTICE: Correction: change events between 20:50-20:54 UTC (during the restart only) have been lost and will need to be rechecked or their approvals reapplied to trigger testing. | 21:11 | |
*** chlong has quit IRC | 21:16 | |
*** kcaj has left #openstack-swift | 21:28 | |
*** chlong has joined #openstack-swift | 21:29 | |
openstackgerrit | Pete Zaitcev proposed openstack/swift: Having said H, I, J, we ought to say K https://review.openstack.org/209677 | 21:34 |
*** breitz1 has joined #openstack-swift | 21:37 | |
*** breitz has quit IRC | 21:39 | |
*** marzif__ has quit IRC | 21:39 | |
*** bill_az has quit IRC | 21:39 | |
*** haomaiwang has quit IRC | 21:42 | |
notmyname | zaitcev: nice easy patches :-) | 21:42 |
zaitcev | notmyname: sorry. A guy at work asked for Swift 101 and one after another things happened. | 21:43 |
notmyname | zaitcev: no, I think it's great | 21:43 |
zaitcev | We hired someone to care for Manila, so at least that's not on me anymore. | 21:44 |
notmyname | cool | 21:44 |
*** haomaiwang has joined #openstack-swift | 21:44 | |
* mattoliverau is off to find breakfast | 21:44 | |
*** zul has quit IRC | 21:45 | |
kota_ | tdasilva: added my thought to versions_writes one. | 21:46 |
timburke | notmyname: at what point should start dropping releases from that doc? | 21:47 |
*** kota_ has left #openstack-swift | 21:47 | |
*** kota_ has joined #openstack-swift | 21:48 | |
*** ChanServ sets mode: +v kota_ | 21:48 | |
notmyname | timburke: when the existing links break? honestly, I don't want to spend any time worrying about it ;-) | 21:49 |
tdasilva | kota_: just responded :) | 21:55 |
tdasilva | kota_: I need to drive home, but will check-in again tonight | 21:55 |
kota_ | tdasilva: ok, let me think. | 21:55 |
tdasilva | kota_: thanks! | 21:55 |
ho | notmyname: as for the allow_account_management, i checked the situation. http://paste.openstack.org/show/409723/ . if doc is correct, we need to change bahavior No.2? | 21:56 |
*** acoles is now known as acoles_away | 21:57 | |
notmyname | ho: allow_account_management is not an ACL. it enables or disables the ability for the proxy to respond to account-level PUT or DELETE requests (ie RBAC cannot override it) | 21:57 |
notmyname | ho: seems that (5) needs to be updated (the Juno installation guide) | 21:58 |
ho | notmyname: i know but in keystone env, the value is FALSE, there is no way to delete unnecessary accounts. it might be a bug. | 21:59 |
*** dustins has quit IRC | 21:59 | |
*** hrou has quit IRC | 21:59 | |
notmyname | I'm not saying it should always be false. just that the default IMO should be false. you don't want a swift proxy server that is connected to the public internet to allow for account deletion | 22:00 |
notmyname | perhaps there need to be more/better docs? "you should deploy a proxy server that is firewalled so that only keystone can talk to it and this one allows account management and is used to provision and delete accounts" | 22:01 |
ho | notmyname: i see. we need to have double checking to create/delete accounts for security reason. unn... i need to have more time to think more deeper thanks! :) | 22:06 |
notmyname | ho: yeah, I think it comes down to figuring out what the best deployment decision is and then documenting that in swift (including sample configs). let's make sure that deployers get all the right info | 22:07 |
*** lcurtis has quit IRC | 22:09 | |
*** zhill has quit IRC | 22:14 | |
*** jrichli has quit IRC | 22:14 | |
*** kota_ has quit IRC | 22:16 | |
-ho- notmyname: in keystone env, deployer needs to set TRUE for allow_account_management because they need to delete account. | 22:19 | |
-ho- notmyname: account can be created via put container (auto_create=TRUE) and it's worked with RBAC only. | 22:19 | |
-ho- notmyname: means allow_account_management(FALSE) doesn't work in keystone env. the conclusion is keystone should be deployed in safe place? maybe?? | 22:19 | |
*** delattec has quit IRC | 22:21 | |
*** bill_az has joined #openstack-swift | 22:21 | |
*** zhill has joined #openstack-swift | 22:25 | |
*** tongli has quit IRC | 22:28 | |
*** bill_az has quit IRC | 22:29 | |
*** bill_az has joined #openstack-swift | 22:34 | |
*** marcusvrn has quit IRC | 22:43 | |
*** hrou has joined #openstack-swift | 22:45 | |
*** thurloat is now known as thurloat_isgone | 22:45 | |
*** nadeem has quit IRC | 22:47 | |
*** jlhinson has quit IRC | 22:48 | |
*** tsg has quit IRC | 22:50 | |
*** kota_ has joined #openstack-swift | 22:51 | |
*** ChanServ sets mode: +v kota_ | 22:51 | |
*** mordred has joined #openstack-swift | 22:55 | |
*** xnox has quit IRC | 22:57 | |
ho | notmyname: thanks! i think i understand. spec is if allow_account_management is false, put/delete accounts are not allowed even if they have right role to do it. if this is correct understanding, i will make a patch for "account can be created via put container (auto_create=TRUE)" | 22:59 |
*** xnox has joined #openstack-swift | 22:59 | |
*** km has joined #openstack-swift | 23:01 | |
*** tsg has joined #openstack-swift | 23:01 | |
*** esker has joined #openstack-swift | 23:06 | |
*** esker has quit IRC | 23:22 | |
*** esker has joined #openstack-swift | 23:23 | |
*** kei_yama has joined #openstack-swift | 23:27 | |
*** joeljwright has quit IRC | 23:27 | |
*** geaaru has quit IRC | 23:28 | |
*** esker has quit IRC | 23:39 | |
*** esker has joined #openstack-swift | 23:41 | |
*** zhill has quit IRC | 23:42 | |
notmyname | ho: correct | 23:43 |
*** esker has quit IRC | 23:46 | |
*** breitz1 has quit IRC | 23:51 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!