| *** julienvey has joined #openstack-trove | 00:18 | |
| *** julienvey has quit IRC | 00:22 | |
| *** juantwo_ has quit IRC | 00:24 | |
| *** juantwo has joined #openstack-trove | 00:25 | |
| *** ViswaV has joined #openstack-trove | 00:59 | |
| *** ViswaV has quit IRC | 01:00 | |
| *** julienvey has joined #openstack-trove | 01:19 | |
| *** julienvey has quit IRC | 01:24 | |
| *** georgelorch has quit IRC | 01:30 | |
| openstackgerrit | Nikhil Manchanda proposed a change to openstack/trove: Updated from global requirements https://review.openstack.org/119149 | 01:30 |
|---|---|---|
| *** georgelorch has joined #openstack-trove | 01:35 | |
| *** newb__ has quit IRC | 01:38 | |
| *** nosnos has joined #openstack-trove | 01:51 | |
| *** Riddhi has quit IRC | 02:12 | |
| *** julienvey has joined #openstack-trove | 02:19 | |
| *** julienvey has quit IRC | 02:25 | |
| *** ramishra has joined #openstack-trove | 02:35 | |
| *** vkmc has quit IRC | 02:47 | |
| *** rushiagr_away is now known as rushiagr | 02:52 | |
| *** rushiagr is now known as rushiagr_away | 03:03 | |
| *** rushiagr_away is now known as rushiagr | 03:05 | |
| *** rushiagr is now known as rushiagr_away | 03:16 | |
| *** julienvey has joined #openstack-trove | 03:20 | |
| *** mrsnivvel has joined #openstack-trove | 03:23 | |
| *** hollandais has quit IRC | 03:24 | |
| *** julienvey has quit IRC | 03:25 | |
| *** prasoon has joined #openstack-trove | 03:38 | |
| *** ramishra has quit IRC | 03:45 | |
| *** ramishra has joined #openstack-trove | 03:47 | |
| *** achampion has quit IRC | 04:03 | |
| *** achampion has joined #openstack-trove | 04:09 | |
| *** rushiagr_away is now known as rushiagr | 04:11 | |
| openstackgerrit | Nikhil Manchanda proposed a change to openstack/trove: Delete backup created during replication https://review.openstack.org/119169 | 04:14 |
| *** eghobo has joined #openstack-trove | 04:14 | |
| *** julienvey has joined #openstack-trove | 04:21 | |
| *** ramishra has quit IRC | 04:21 | |
| *** ramishra has joined #openstack-trove | 04:22 | |
| *** ramishra has quit IRC | 04:23 | |
| *** ramishra has joined #openstack-trove | 04:24 | |
| *** jasonb365 has joined #openstack-trove | 04:24 | |
| *** julienvey has quit IRC | 04:26 | |
| *** eghobo has quit IRC | 04:30 | |
| *** juantwo has quit IRC | 04:33 | |
| *** ramishra has quit IRC | 04:35 | |
| *** ramishra has joined #openstack-trove | 04:36 | |
| *** edmund has quit IRC | 04:45 | |
| *** eghobo has joined #openstack-trove | 04:47 | |
| *** edmund has joined #openstack-trove | 04:47 | |
| *** eguz has joined #openstack-trove | 04:48 | |
| *** jasonb365 has quit IRC | 04:48 | |
| *** eghobo has quit IRC | 04:49 | |
| *** ViswaV has joined #openstack-trove | 04:49 | |
| *** edmund has quit IRC | 04:51 | |
| *** jasonb365 has joined #openstack-trove | 05:05 | |
| *** eguz has quit IRC | 05:06 | |
| *** eghobo has joined #openstack-trove | 05:06 | |
| *** ViswaV has quit IRC | 05:15 | |
| *** ViswaV has joined #openstack-trove | 05:15 | |
| *** boblebauce has joined #openstack-trove | 05:17 | |
| *** ajayaa has joined #openstack-trove | 05:18 | |
| *** julienvey has joined #openstack-trove | 05:22 | |
| *** boblebauce has quit IRC | 05:22 | |
| *** julienvey has quit IRC | 05:26 | |
| *** sgotliv has joined #openstack-trove | 05:32 | |
| *** boblebauce has joined #openstack-trove | 05:33 | |
| *** boblebauce has quit IRC | 05:39 | |
| *** flaper87|afk is now known as flaper87 | 05:39 | |
| *** ViswaV has quit IRC | 05:56 | |
| *** nosnos has quit IRC | 05:57 | |
| *** nosnos_ has joined #openstack-trove | 06:00 | |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/trove: Imported Translations from Transifex https://review.openstack.org/117695 | 06:06 |
| *** jasonb365 has quit IRC | 06:08 | |
| *** ajayaa has quit IRC | 06:11 | |
| *** vigneshvar has joined #openstack-trove | 06:18 | |
| *** julienvey has joined #openstack-trove | 06:22 | |
| *** julienvey has quit IRC | 06:28 | |
| *** PeterSchwaller has quit IRC | 06:33 | |
| *** ViswaV has joined #openstack-trove | 06:36 | |
| *** ajayaa has joined #openstack-trove | 06:38 | |
| *** ViswaV has quit IRC | 06:39 | |
| *** sgotliv has quit IRC | 06:44 | |
| *** eguz has joined #openstack-trove | 06:46 | |
| *** eghobo has quit IRC | 06:49 | |
| *** PeterSchwaller has joined #openstack-trove | 06:50 | |
| *** julienvey has joined #openstack-trove | 06:50 | |
| *** julienvey has quit IRC | 06:54 | |
| *** eguz has quit IRC | 06:55 | |
| *** ajayaa has quit IRC | 07:08 | |
| *** vigneshvar has quit IRC | 07:09 | |
| *** Longgeek has joined #openstack-trove | 07:16 | |
| *** ajayaa has joined #openstack-trove | 07:21 | |
| *** Longgeek has quit IRC | 07:33 | |
| *** ajayaa has quit IRC | 07:33 | |
| *** ramishra has quit IRC | 07:35 | |
| *** ramishra has joined #openstack-trove | 07:35 | |
| *** vigneshvar has joined #openstack-trove | 07:36 | |
| *** ramishra has quit IRC | 07:46 | |
| *** ViswaV has joined #openstack-trove | 07:46 | |
| *** ramishra has joined #openstack-trove | 07:47 | |
| *** ajayaa has joined #openstack-trove | 07:55 | |
| *** sgotliv has joined #openstack-trove | 08:07 | |
| *** julienvey has joined #openstack-trove | 08:07 | |
| *** Longgeek has joined #openstack-trove | 08:07 | |
| *** ramishra has quit IRC | 08:21 | |
| *** ramishra has joined #openstack-trove | 08:21 | |
| *** ViswaV_ has joined #openstack-trove | 08:28 | |
| *** ViswaV has quit IRC | 08:30 | |
| *** ramishra has quit IRC | 08:37 | |
| *** ramishra has joined #openstack-trove | 08:37 | |
| *** ViswaV_ has quit IRC | 08:40 | |
| *** ramishra has quit IRC | 08:40 | |
| *** ramishra has joined #openstack-trove | 08:41 | |
| *** ramishra has quit IRC | 08:51 | |
| *** ramishra has joined #openstack-trove | 09:01 | |
| *** eghobo has joined #openstack-trove | 09:22 | |
| *** julienvey has quit IRC | 09:23 | |
| *** eghobo has quit IRC | 09:23 | |
| *** ramishra has quit IRC | 09:35 | |
| *** ramishra has joined #openstack-trove | 09:37 | |
| *** isviridov_away is now known as isviridov | 09:45 | |
| *** vigneshvar has quit IRC | 09:49 | |
| *** vigneshvar has joined #openstack-trove | 09:50 | |
| *** sgotliv has quit IRC | 09:57 | |
| *** ramishra has quit IRC | 10:20 | |
| *** ramishra has joined #openstack-trove | 10:20 | |
| denis_makogon | guys, i've noticed Trove CI jobs are failing due to timeouts on replication tests, see https://bugs.launchpad.net/trove/+bug/1366735 | 10:26 |
| *** sgotliv has joined #openstack-trove | 10:38 | |
| *** prasoon has quit IRC | 10:42 | |
| *** ramishra has quit IRC | 10:42 | |
| *** ramishra has joined #openstack-trove | 10:48 | |
| *** IanGovett has joined #openstack-trove | 10:50 | |
| *** isviridov is now known as isviridov_away | 10:51 | |
| *** prasoon has joined #openstack-trove | 11:17 | |
| *** tomblank has quit IRC | 11:21 | |
| *** prasoon has quit IRC | 11:32 | |
| *** prasoon has joined #openstack-trove | 11:32 | |
| *** vkmc has joined #openstack-trove | 11:32 | |
| *** prasoon has quit IRC | 11:38 | |
| *** prasoon has joined #openstack-trove | 11:39 | |
| *** prasoon has quit IRC | 11:40 | |
| *** ramishra has quit IRC | 11:42 | |
| *** ramishra has joined #openstack-trove | 11:46 | |
| *** ramishra has quit IRC | 11:49 | |
| *** juantwo has joined #openstack-trove | 12:00 | |
| *** juantwo has quit IRC | 12:01 | |
| *** juantwo has joined #openstack-trove | 12:02 | |
| *** julienvey has joined #openstack-trove | 12:02 | |
| *** nosnos_ has quit IRC | 12:13 | |
| *** julienvey has quit IRC | 12:14 | |
| *** nosnos has joined #openstack-trove | 12:14 | |
| *** newb__ has joined #openstack-trove | 12:16 | |
| *** nosnos has quit IRC | 12:18 | |
| *** georgelorch has quit IRC | 12:21 | |
| *** georgelorch has joined #openstack-trove | 12:21 | |
| *** newb__ has quit IRC | 12:21 | |
| *** achampion has quit IRC | 12:26 | |
| *** IanGovett1 has joined #openstack-trove | 12:30 | |
| *** IanGovett has quit IRC | 12:32 | |
| *** tomblank has joined #openstack-trove | 12:40 | |
| *** julienvey has joined #openstack-trove | 12:42 | |
| *** amrith is now known as _amrith_ | 12:47 | |
| *** radez_g0n3 is now known as radez | 12:51 | |
| *** isviridov_away is now known as isviridov | 13:03 | |
| *** newb__ has joined #openstack-trove | 13:05 | |
| *** newb__ is now known as newb | 13:05 | |
| *** Longgeek has quit IRC | 13:08 | |
| *** Longgeek has joined #openstack-trove | 13:11 | |
| *** tkatarki has joined #openstack-trove | 13:13 | |
| *** ramishra has joined #openstack-trove | 13:22 | |
| *** IanGovett has joined #openstack-trove | 13:23 | |
| *** jasonb365 has joined #openstack-trove | 13:25 | |
| *** IanGovett has quit IRC | 13:25 | |
| *** IanGovett1 has quit IRC | 13:26 | |
| *** IanGovett1 has joined #openstack-trove | 13:27 | |
| *** IanGovett1 has quit IRC | 13:29 | |
| *** IanGovett1 has joined #openstack-trove | 13:29 | |
| *** achampion has joined #openstack-trove | 13:34 | |
| *** boblebauce has joined #openstack-trove | 13:34 | |
| *** rhodgin has quit IRC | 13:40 | |
| *** julienvey has quit IRC | 13:42 | |
| *** boblebauce has quit IRC | 13:45 | |
| *** miqui has joined #openstack-trove | 13:49 | |
| *** prasoon has joined #openstack-trove | 14:03 | |
| openstackgerrit | Denis M. proposed a change to openstack/trove: Forbid replica provisioning from non-root replica site https://review.openstack.org/117298 | 14:12 |
| openstackgerrit | Denis M. proposed a change to openstack/trove: Fix master status validation while replica provisioning https://review.openstack.org/117255 | 14:12 |
| *** _amrith_ is now known as amrith | 14:13 | |
| openstackgerrit | Denis M. proposed a change to openstack/trove: Fix master status validation while replica provisioning https://review.openstack.org/119770 | 14:14 |
| openstackgerrit | Denis M. proposed a change to openstack/trove: Forbid replica provisioning from non-root replica site https://review.openstack.org/119771 | 14:14 |
| openstackgerrit | Peter Stachowski proposed a change to openstack/trove: Document Trove configuration options https://review.openstack.org/118759 | 14:19 |
| *** rhodgin has joined #openstack-trove | 14:23 | |
| *** ramishra has quit IRC | 14:24 | |
| *** ramishra has joined #openstack-trove | 14:24 | |
| *** ajayaa has quit IRC | 14:29 | |
| *** mattgriffin has joined #openstack-trove | 14:29 | |
| *** eghobo has joined #openstack-trove | 14:30 | |
| *** grapex has joined #openstack-trove | 14:40 | |
| *** isviridov is now known as isviridov_away | 14:40 | |
| *** Barker has joined #openstack-trove | 14:42 | |
| *** edmund has joined #openstack-trove | 14:43 | |
| *** kevinconway has joined #openstack-trove | 14:44 | |
| denis_makogon | guys, i'm getting an error for fresh new Trove repo https://bugs.launchpad.net/trove/+bug/1366837 | 14:47 |
| *** iartarisi has joined #openstack-trove | 14:48 | |
| *** sriram_tesora has joined #openstack-trove | 14:49 | |
| *** eghobo has quit IRC | 14:50 | |
| *** prasoon has quit IRC | 14:51 | |
| *** julienvey has joined #openstack-trove | 14:55 | |
| *** grapex has quit IRC | 14:55 | |
| *** grapex has joined #openstack-trove | 14:55 | |
| *** prasoon has joined #openstack-trove | 14:58 | |
| *** Riddhi has joined #openstack-trove | 14:59 | |
| *** prasoon has quit IRC | 15:01 | |
| *** tomblank has quit IRC | 15:05 | |
| denis_makogon | grapex, ping | 15:05 |
| denis_makogon | grapex, hey, could you please take a look at https://review.openstack.org/#/c/97194/ (it was approved once, long time ago, but was forgotten later) | 15:06 |
| *** jmontemayor has joined #openstack-trove | 15:09 | |
| *** boblebauce has joined #openstack-trove | 15:12 | |
| *** julienvey has quit IRC | 15:18 | |
| *** amrith is now known as _amrith_ | 15:20 | |
| *** boblebauce has quit IRC | 15:21 | |
| *** boblebauce has joined #openstack-trove | 15:21 | |
| *** boblebauce has quit IRC | 15:22 | |
| *** isviridov_away is now known as isviridov | 15:23 | |
| iccha | denis_makogon: do u know where to see the rdjenkins logs? its no longer posting stuff on the review | 15:27 |
| iccha | buffer 18 | 15:27 |
| denis_makogon | iccha, i added link and "how-to" get rdjenkins logs to the review =) | 15:27 |
| denis_makogon | iccha, it is still posting, but hidden | 15:27 |
| denis_makogon | iccha, there's a button called "Toggle CI" at the bottom, left corner | 15:28 |
| iccha | thanks yeah | 15:28 |
| iccha | ok gotcha | 15:28 |
| denis_makogon | iccha, you're welcome | 15:28 |
| *** boblebauce has joined #openstack-trove | 15:30 | |
| openstackgerrit | Riddhi Shah proposed a change to openstack/trove: Allow users the ability to update an instance name https://review.openstack.org/92701 | 15:31 |
| *** tkatarki has quit IRC | 15:35 | |
| *** tkatarki has joined #openstack-trove | 15:44 | |
| *** tomblank has joined #openstack-trove | 15:46 | |
| *** johnma has joined #openstack-trove | 15:47 | |
| openstackgerrit | Riddhi Shah proposed a change to openstack/trove: Add visibility filter to datastore versions https://review.openstack.org/110197 | 15:47 |
| flaper87 | hey folks, at the Juno summit we talked about possible use cases in Trove for Zaqar (ex Marconi). My memory is terrible so I don't remember to whom I talked to but I was hoping I could gather those use cases again in this etherpad: https://etherpad.openstack.org/p/zaqar-integrated-projects-use-cases | 15:48 |
| flaper87 | if any of you have some time to add them there, I'd really appreciate it | 15:48 |
| denis_makogon | hey, guys, i've wrote small cool thing for documenting our opts, hope you enjoy in https://gist.github.com/denismakogon/602620e0200f512d39f9 | 15:50 |
| flaper87 | denis_makogon: have you seen this? https://github.com/openstack/oslo-incubator/tree/master/tools/config | 15:51 |
| flaper87 | it generates the config file with the doc strings | 15:51 |
| denis_makogon | flaper87, i saw, but i hate bash, python variant looks a bit cleaner =) | 15:53 |
| flaper87 | denis_makogon: it's actually python because that script uses: https://github.com/openstack/oslo-incubator/blob/master/openstack/common/config/generator.py | 15:54 |
| flaper87 | lots of folks have worked on cleaning `config.generator`, it'll soon not depend on the bash script anymore. | 15:54 |
| denis_makogon | flaper87, sound awesome =) | 15:56 |
| *** _amrith_ is now known as amrith | 16:02 | |
| *** tomblank_ has joined #openstack-trove | 16:04 | |
| *** boblebauce has quit IRC | 16:04 | |
| *** tomblank has quit IRC | 16:05 | |
| *** tomblank_ is now known as tomblank | 16:05 | |
| *** nealph_ has joined #openstack-trove | 16:08 | |
| openstackgerrit | Sergey Gotliv proposed a change to openstack/trove: [WIP] Updates RPC API to use oslo.messaging https://review.openstack.org/94484 | 16:08 |
| *** nealph_ has quit IRC | 16:11 | |
| *** isviridov is now known as isviridov_away | 16:13 | |
| *** sgotliv has quit IRC | 16:13 | |
| *** rushiagr is now known as rushiagr_away | 16:14 | |
| *** vigneshvar has quit IRC | 16:16 | |
| *** eghobo has joined #openstack-trove | 16:21 | |
| openstackgerrit | A change was merged to openstack/python-troveclient: Use 'replica' instead of 'slave' https://review.openstack.org/117925 | 16:23 |
| *** ramishra has quit IRC | 16:24 | |
| *** ramishra has joined #openstack-trove | 16:24 | |
| *** ramishra has quit IRC | 16:29 | |
| *** ViswaV has joined #openstack-trove | 16:36 | |
| *** ViswaV_ has joined #openstack-trove | 16:37 | |
| *** ViswaV has quit IRC | 16:40 | |
| *** iartarisi has quit IRC | 16:44 | |
| openstackgerrit | Ramashri Umale proposed a change to openstack/trove: Adds backup/restore support for mongodb https://review.openstack.org/78339 | 16:51 |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/trove: Updated from global requirements https://review.openstack.org/119818 | 16:55 |
| *** ViswaV_ has quit IRC | 16:58 | |
| *** Barker has quit IRC | 17:03 | |
| *** jasonb365 has quit IRC | 17:06 | |
| *** rushiagr_away is now known as rushiagr | 17:06 | |
| *** ViswaV has joined #openstack-trove | 17:11 | |
| iccha | SlickNik: glucas i am planning to create a bug for moving the replication.cnf for master and slave to templates as well or a config value | 17:14 |
| *** harlowja_away is now known as harlowja | 17:14 | |
| *** tomblank has quit IRC | 17:14 | |
| iccha | SlickNik: glucas because I want to add gtids related config values for replication | 17:15 |
| iccha | but replication.cnf is hard coded | 17:15 |
| esp | howdy SlickNik | 17:22 |
| esp | I’m pretty sure we don’t need this anymore correct? https://review.openstack.org/#/c/102315/ | 17:22 |
| *** vigneshvar has joined #openstack-trove | 17:24 | |
| esp | ping SlickNik | 17:26 |
| denis_makogon | esp, why do we have to abandon V3 ? | 17:27 |
| SlickNik | esp: howdy | 17:28 |
| *** newb has quit IRC | 17:28 | |
| esp | denis_makogon: cuz I think someone else has already soved it ;) | 17:28 |
| denis_makogon | esp, when ? =) | 17:28 |
| *** newb has joined #openstack-trove | 17:29 | |
| * esp pulling up my notes | 17:29 | |
| esp | still lookin | 17:31 |
| denis_makogon | esp, ok =) | 17:33 |
| esp | denis_makogon: I wish I could show you … haha | 17:33 |
| * esp embarrassing… | 17:33 | |
| SlickNik | esp: I don't think we need it anymore, although a refresher from your notes will also certainly be helpful. | 17:34 |
| denis_makogon | esp, you can share it somehow with me | 17:34 |
| denis_makogon | SlickNik, so, why do we might need to drop V3? | 17:35 |
| esp | So SlickNik and denis_makogon: here is the short story.. | 17:36 |
| denis_makogon | esp, hit it | 17:36 |
| esp | there was a requirement on our end to make the python-troveclient talk to keystone v3 | 17:36 |
| denis_makogon | and? | 17:37 |
| esp | since then this requirement has gone away | 17:37 |
| esp | but I think someone else has a better patch where they just use keystone client directly.. | 17:38 |
| esp | I’m trying to find that one now | 17:38 |
| esp | so we can abandon my overly complicated and confusing patch in favor of the other one... | 17:38 |
| denis_makogon | esp, ok, i'll try to find it | 17:38 |
| esp | I just have to find it | 17:38 |
| denis_makogon | if that's it, i'm fine | 17:38 |
| esp | thx denis_makogon! | 17:38 |
| esp | extra pair of eyes always helps | 17:38 |
| denis_makogon | esp, is that patch for trove or client ? | 17:40 |
| esp | yeah dude it’s only for python-troveclient | 17:40 |
| denis_makogon | esp, can't see it here https://review.openstack.org/#/q/status:open+project:openstack/python-troveclient,n,z | 17:40 |
| denis_makogon | at least among open ones | 17:41 |
| esp | hmm.. I don’t see it there… | 17:42 |
| denis_makogon | esp, was it published ? | 17:43 |
| esp | I think so denis_makogon, we have in an internal spreadsheet somewhere... | 17:45 |
| denis_makogon | ok | 17:45 |
| esp | found it! | 17:46 |
| esp | so here is what the spreadsheet says | 17:46 |
| esp | Patch to use keystonemiddleware (instead of python keystone client): | 17:46 |
| esp | https://review.openstack.org/#/c/108541 | 17:47 |
| esp | ha, denis_makogon and SlickNik, you guys reviewed it! | 17:47 |
| esp | good work | 17:47 |
| denis_makogon | i'm a bit confused, how does keystone middleware enables V3 ? | 17:49 |
| esp | I bet we just need to update the pipeline in the trove api.ini file or whatever it’s called | 17:49 |
| denis_makogon | hm | 17:50 |
| denis_makogon | need to investigate this question | 17:50 |
| esp | the v3 implementation was this wonky plugin support that detects what version of keyston the client is trying to use | 17:50 |
| esp | denis_makogon: yeah it’s probably worth a look. fyi keystone v3 was in devstack last I looked, you just have to specify the v3 endpoint. | 17:51 |
| denis_makogon | i'll take a look at it, esp, thanks | 17:51 |
| esp | np denis_makogon, thank you ;) | 17:52 |
| denis_makogon | esp, thanks to you too | 17:52 |
| *** iartarisi has joined #openstack-trove | 17:57 | |
| *** iartarisi has quit IRC | 18:00 | |
| *** Riddhi has quit IRC | 18:00 | |
| *** iartarisi has joined #openstack-trove | 18:00 | |
| *** Riddhi has joined #openstack-trove | 18:00 | |
| denis_makogon | meeting? | 18:01 |
| SlickNik | yes | 18:02 |
| SlickNik | #startmeeting trove-bp-review | 18:02 |
| openstack | Meeting started Mon Sep 8 18:02:14 2014 UTC and is due to finish in 60 minutes. The chair is SlickNik. Information about MeetBot at http://wiki.debian.org/MeetBot. | 18:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 18:02 |
| grapex | o/ | 18:02 |
| openstack | The meeting name has been set to 'trove_bp_review' | 18:02 |
| denis_makogon | o/ | 18:02 |
| iccha | o/ | 18:02 |
| iartarisi | o/ | 18:02 |
| SlickNik | Agenda at: | 18:02 |
| zhiyan | o/ | 18:02 |
| SlickNik | #link https://wiki.openstack.org/wiki/Meetings/TroveBPMeeting | 18:02 |
| amrith | ./ | 18:02 |
| dougshelley66 | o/ | 18:03 |
| schang | o/ | 18:03 |
| vgnbkr | o/ | 18:03 |
| SlickNik | #topic SUSE support | 18:03 |
| SlickNik | #link https://blueprints.launchpad.net/trove/+spec/suse-support | 18:04 |
| amrith | iartarisi, floor is yours | 18:04 |
| iartarisi | thank you | 18:04 |
| iartarisi | so I think the action item from last time was for me to create a blueprint which we can discuss | 18:04 |
| iartarisi | that's the blueprint ^^. If everyone's ok, I can start targeting the existing change requests against that | 18:04 |
| iartarisi | and over the coming weeks I will also start working on a SUSE(zypper) PackagerMixin | 18:05 |
| iartarisi | how does that sound to everyone? | 18:05 |
| SlickNik | iartarisi: Thanks for creating that. I had two questions: | 18:05 |
| SlickNik | 1. Is there a list of work items / reviews that this BP entails? | 18:06 |
| iartarisi | I can quickly come up with one. There are three outstanding reviews + the not yet started PackagerMixin issue | 18:06 |
| openstackgerrit | Dan Nguyen proposed a change to openstack/trove-integration: Add a script to package the guest agent in a venv https://review.openstack.org/108562 | 18:07 |
| *** jmontemayor_ has joined #openstack-trove | 18:08 | |
| iartarisi | https://review.openstack.org/108394 https://review.openstack.org/108703 https://review.openstack.org/108972 | 18:08 |
| iartarisi | those are the outstanding reviews | 18:08 |
| *** Barker has joined #openstack-trove | 18:08 | |
| SlickNik | 2. There were some concerns around the CI and maintenance around this, since it's not tested by upstream. You guys mention there's a SUSE CI, and you guys will be on the ball for any breaks in SUSE related areas, right? | 18:08 |
| iartarisi | these are already part of our packages and we have working trove with them. | 18:08 |
| iartarisi | SlickNik: right! | 18:09 |
| amrith | SlickNik, I believe the bugs being addressed here are the result of the SUSE CI (see, I got the capitaliztion right this time) | 18:09 |
| iartarisi | amrith: thanks! and that's right! | 18:09 |
| openstackgerrit | amrith proposed a change to openstack/trove: Remove unused entries in cfg.py https://review.openstack.org/112995 | 18:10 |
| SlickNik | iartarisi / amrith: got it, thanks! | 18:10 |
| SlickNik | Sounds good to me. | 18:11 |
| iartarisi | ok, I have an aside here related to the PackagerMixin | 18:11 |
| *** jmontemayor has quit IRC | 18:11 | |
| iartarisi | that last review is about adding a NoOpPackagerMixin which wouldn't touch the system at all, but rather assume that the admin has set everything up | 18:11 |
| iartarisi | are you fine with adding that to trove? | 18:11 |
| iartarisi | to me, as a distro packager, this seems like a much more sensible way for trove to act, rather than installing things itself which should be outside of the attributions of an app | 18:12 |
| iartarisi | that's also related to the SUSE support actually, since I believe we'd be more comfortable with just handling everything in packaging rather than in a SUSEPackagerMixin | 18:13 |
| *** jmontemayor_ has quit IRC | 18:13 | |
| *** robertmyers has joined #openstack-trove | 18:14 | |
| amrith | iartarisi, is this part of the BP as written? I think not, is that correct? | 18:14 |
| SlickNik | The approach seems reasonable to me that this would be a selectable option if a deployer chose it — although I haven't had a chance to review the code yet, so you might get some more feedback once I review the code. | 18:14 |
| iartarisi | amrith: this is about one of the standing reviews and it would remove one item from the blueprint | 18:14 |
| iartarisi | SlickNik: that sounds good, selectable where? | 18:15 |
| iartarisi | as a guestagent config value? | 18:15 |
| amrith | i assume the selection is that the deployer chooses the NoOpPackagerMixin? | 18:15 |
| iartarisi | in the review, the NoOpPackagerMixin is only a fallback, in case a compatible OS was not found | 18:16 |
| SlickNik | So right now they're choses based on the distro, IIRC. | 18:16 |
| iartarisi | but I would definitely encourage having it as a configuration option, too | 18:17 |
| SlickNik | iartarisi: Let's hold that thought and keep the discussion on the review. | 18:18 |
| SlickNik | FWIW: I like the fallback to No-op in case we can't detect the distro. | 18:18 |
| denis_makogon | iartarisi, agreed with SlickNik | 18:18 |
| SlickNik | (in the interest of time) | 18:18 |
| iartarisi | SlickNik: alright, so I'll wait for how that goes before starting work on a SUSE Mixin | 18:18 |
| SlickNik | iartarisi: Sounds good. Thanks for the work on this! | 18:18 |
| iartarisi | SlickNik: cool. Thank you! | 18:19 |
| SlickNik | Any other comments on this? | 18:19 |
| SlickNik | . | 18:19 |
| amrith | I move that this be approved as written. | 18:19 |
| SlickNik | Seconded. | 18:20 |
| iccha | sounds good to me. | 18:20 |
| SlickNik | Let's move on — we have a full agenda. | 18:20 |
| SlickNik | #topic SSL support | 18:20 |
| SlickNik | kevinconway: around? | 18:20 |
| kevinconway | o/ | 18:20 |
| cp16net | o\ | 18:20 |
| SlickNik | #linkhttps://wiki.openstack.org/wiki/Trove/TroveSSL | 18:21 |
| kevinconway | ssl! | 18:21 |
| kevinconway | so i outlined in the BP how ssl would work for mysql and postgresql | 18:22 |
| kevinconway | i did some research on the others and wrote up how they would fit in | 18:22 |
| SlickNik | kevinconway: Yup, went through that -- but one of the concerns I have around this is the chicken and egg problem. | 18:23 |
| SlickNik | kevinconway: Since we don't have TLS, we don't have a secure way of getting the certs on to the datastore instance. | 18:23 |
| kevinconway | ah, i see. i should have specified in the BP. the keys would be delivered via the message q | 18:24 |
| kevinconway | as a part of the prepare call, for example | 18:24 |
| SlickNik | Ah, I see. | 18:24 |
| cp16net | could they be injected into the instance via nova create? | 18:24 |
| *** jasonb365 has joined #openstack-trove | 18:24 | |
| amrith | kevinconway, I'm concerned about the work involved in key management and storage. These are non-trivial activities to get right. I'm also concerned about trove getting into the business of key creation, management, storage, etc., | 18:25 |
| kevinconway | so the precursor chicken lays a proto chicken egg. science! | 18:25 |
| denis_makogon | cp16net, i like this idea | 18:25 |
| vgnbkr | But you shouldn't send a private key unless the connection you send it over is also secured. | 18:25 |
| denis_makogon | amrith, correct, this is a task for barbican =) | 18:25 |
| kevinconway | amrith: so part of the BP is that the key provider should be an interface. we could have one or two default impls, but deployers should manage keys | 18:25 |
| denis_makogon | vgnbkr, honest true ! | 18:25 |
| amrith | I submit to you that in the fullness of time, trove should merely indicate to the guest instance that it must enable ssl and the guest instance should request the various things directly from barbican | 18:26 |
| amrith | and trove should stay out of the equation. | 18:26 |
| grapex | amrith: when you say "guest instance", do you mean the agent? | 18:26 |
| amrith | grapex: yes | 18:26 |
| kevinconway | i agree that bbq is a part of the equation, but it doesn't actually support SSL certs. | 18:26 |
| grapex | Because the guest agent is Trove as well | 18:26 |
| amrith | trove itself should neither know nor see any part of SSL | 18:26 |
| denis_makogon | amrith, +1 | 18:27 |
| amrith | grapex: understood | 18:27 |
| amrith | terminology | 18:27 |
| grapex | amrith: Your concern is that the Trove server daemons see the SSL certs | 18:27 |
| amrith | grapex: yes | 18:27 |
| grapex | I think that's a solution for today's pre-Barbican era | 18:27 |
| amrith | other than the guest where the keys and the cert are installed, no other part of trove should see these things | 18:28 |
| grapex | In the post-Barbican future Trove could contact it vicariously on behalf of the user | 18:28 |
| amrith | I don't like the fact that a prepare call provides the things | 18:28 |
| amrith | I'd rather the prepare call provide a URI where the guest can go and get the things it wants | 18:28 |
| kevinconway | amrith: right now we don't have much of a choice. we would need to wait for bbq to support certs | 18:28 |
| *** eghobo has quit IRC | 18:28 | |
| amrith | not necessarily true | 18:28 |
| amrith | if a user provides you the certs | 18:28 |
| *** eghobo has joined #openstack-trove | 18:29 | |
| grapex | amrith: Also, consider in the future that what Trove injects is a URI to Barbican rather than the certs itself | 18:29 |
| amrith | then you could point the guest agent to get them from some location, no? | 18:29 |
| amrith | grapex, I wouldn't assume that | 18:29 |
| *** jmontemayor has joined #openstack-trove | 18:29 | |
| kevinconway | so the way the BP is written now allows for amrith's solution as well as others | 18:29 |
| robertmyers | then the guest still has to download it | 18:29 |
| robertmyers | and see it | 18:29 |
| amrith | in the future, I'd assume that all trove infors the guest is that "go forth and configure SSL" | 18:29 |
| amrith | and let the guest do it directly | 18:29 |
| grapex | amrith: I think you trust the guest agent too much | 18:29 |
| amrith | grapex, in an SSL implementation, you have to trust the end point that has the database. | 18:30 |
| grapex | because in the end its a piece of Trove infrastructure running on the server | 18:30 |
| amrith | and we have to rely on the guest agent to get stuff there. | 18:30 |
| amrith | I don't believe that trove should get into the business of generating, or providing any ability to manage keys | 18:30 |
| amrith | now, or in the future. | 18:30 |
| denis_makogon | amrith, +1 | 18:30 |
| robertmyers | amrith that is not in hte BP | 18:30 |
| kevinconway | so amrith, in the BP it does not dictate how keys are created or managed | 18:30 |
| kevinconway | it suggests an impl interface that a deployer can provide | 18:31 |
| kevinconway | so if you want ssl links to the guest and a guest impl that downloads the keys you can have that | 18:31 |
| amrith | but it does indicate that the interface would convey the PKI+cert | 18:31 |
| kevinconway | if i as another deployer want something else i can do that as well | 18:31 |
| *** tomblank has joined #openstack-trove | 18:31 | |
| *** sgotliv has joined #openstack-trove | 18:31 | |
| denis_makogon | i'd rather keep proprietary key management out of codebase (unless it's bbq) | 18:31 |
| amrith | IMHO, the extent of the interace should be: prepare (enable_ssl=True) | 18:32 |
| grapex | When we say interface, are we talking about the guest agent RPC calls? Because if so that word may be too kind. :) | 18:32 |
| kevinconway | denis_makogon: it would be out of the trove trunk if a deployer did a custom impl | 18:32 |
| amrith | and it is up to the guest agent to go figure out how to get it. | 18:32 |
| *** vigneshvar has quit IRC | 18:32 | |
| denis_makogon | that's may work | 18:32 |
| *** rushiagr is now known as rushiagr_away | 18:32 | |
| kevinconway | amrith: that is still a possibility with the BP | 18:32 |
| kevinconway | yes, it suggests the keys are tx'ed along the q | 18:33 |
| kevinconway | but that is a matter of impl | 18:33 |
| amrith | kevinconway, that may be true. | 18:33 |
| amrith | but what I'd like is to have the discussion now, about the implementation | 18:33 |
| amrith | rather than have it with code in flight | 18:33 |
| cp16net | you still need something outside of the prepare to fix older instances and in this case the mgmt call adds ssl | 18:33 |
| amrith | we had some of the discussion of what the role and bounds of trove should be (at mid-cycle) | 18:33 |
| kevinconway | so the trove impl could easily be a noop. i imagine deployers will all have different key management strategies | 18:33 |
| amrith | and to that point, I'd like to at least have the discussion now that frames the outlines of what the API changes would look like | 18:34 |
| amrith | and get agreement on that, in principle. | 18:34 |
| grapex | amrith: when you say API are you talking about the RPC calls? | 18:34 |
| amrith | grapex, I'm talking about the interaction between the guestagent and the rest of trove. | 18:35 |
| grapex | One thing I dislike about this notion that the guest agent has to become smart enough to do all of the key handling itself by default. | 18:35 |
| amrith | currently, for example, ssl_payload contains keys and certs. | 18:35 |
| grapex | We already have it talking to Swift but in that case it was unavoidable | 18:36 |
| amrith | that's an API | 18:36 |
| amrith | and I think that part of the API is not Trove's responsibility | 18:36 |
| kevinconway | amrith: so nothing in the BP should suggest that you _have_ to send the actual keys as payloads | 18:36 |
| kevinconway | that's why there is also an interface for the guest portion | 18:36 |
| kevinconway | which consumes the ssl_payload and handles it | 18:36 |
| amrith | kevinconway, what I'm suggesting is that the BP should explicitly state that the keys will not be in part of the payload of the enable_ssl command | 18:37 |
| amrith | the enable_ssl command should only tell the guest ... go forth and enable SSL | 18:37 |
| kevinconway | i think that's an unnecessary restriction on the impls | 18:37 |
| grapex | amrith: So basically, you're enforcing that no deployer of Trove may ever send the keys? | 18:37 |
| grapex | kevinconway: +1 | 18:37 |
| amrith | grapex, I'm proposing that the open source product not get into that | 18:37 |
| amrith | if a deployer wishes to change Trove, so be it. | 18:38 |
| grapex | amrith: I think it's fair to say kevinconway and I disagree | 18:38 |
| amrith | that would be fair to say. | 18:39 |
| grapex | I think we can make it flexible enough to work both ways | 18:39 |
| amrith | I agree too. | 18:39 |
| grapex | I don't see the downside of that | 18:39 |
| denis_makogon | i've got one question | 18:39 |
| amrith | unfortunately, I do. | 18:39 |
| kevinconway | so in your model amrith, trove would send a simple binary payload to the guest and the guest would perform all work related to ssl. is that correct? | 18:39 |
| amrith | kevinconway, i think that's correct. | 18:40 |
| denis_makogon | no matter how it is going to be implemented, it is really matter how would we test it? | 18:40 |
| kevinconway | other than preventing a deployer from sending keys to the guest, what is the value added of that over the suggested BP? | 18:40 |
| amrith | kevinconway, it is a matter of what one thinks is the 'role' of trove. | 18:41 |
| iccha | if its the deployers decision whether to send the keys or not, then they know what they are getting into | 18:41 |
| denis_makogon | kevinconway, amriths way is much safer that sending keys over AMPQ | 18:41 |
| amrith | at the mid-cycle, we had conversations about whether or not we should have thresholds for what constituted a delay in replication | 18:41 |
| vgnbkr | Is the objective to merely support SSL connections to the database, or must the database support connecting with a pre-defined certificate? | 18:41 |
| amrith | and the decision was that trove should not decide what constitutes 'degraded'. let the deployer decide that | 18:41 |
| iccha | i think kevinconway has made it clear that trove is not generating the keys | 18:41 |
| amrith | in the same way, the question is whether trove should generate and transmit keys. | 18:42 |
| amrith | I believe it should not | 18:42 |
| amrith | are keys required, yes they are. | 18:42 |
| kevinconway | then use the no-op ssl provider impl? | 18:42 |
| amrith | but let them be obtained without trove getting into the mix. | 18:42 |
| SlickNik | I think we're all agreed in that trove shouldn't generate and manage these keys. | 18:42 |
| amrith | kevinconway, you are missing the point | 18:42 |
| robertmyers | SlickNik +1 | 18:42 |
| amrith | I'm suggesting that there shouldn't be an implementation in the open source product that has trove shipping keys | 18:42 |
| SlickNik | The question is whether the trove API should be the medium through which these keys are transmitted. | 18:43 |
| amrith | what deployers want to do in their versions is their issue. | 18:43 |
| denis_makogon | amrith, +1 | 18:43 |
| amrith | relate this to the conversation of triggering what constitutes a degraded situation wrt replication lag. | 18:43 |
| amrith | no one suggests that NO deployer should have such a notion | 18:43 |
| kevinconway | amrith: so if the initial of the BP did not tx keys, would that satisfy your concern? | 18:43 |
| grapex | amrith: if there weren't dozens of things in Trove we at Rax had no use for I'd agree with this sentiment that Trove shouldn't have extra options you yourself might never use. | 18:43 |
| amrith | just that the open source project should not. | 18:43 |
| kevinconway | amrith: the initial impl that is | 18:44 |
| amrith | kevinconway, the implication is that a later implementation will? | 18:44 |
| kevinconway | amrith: no, but a deployers impl could | 18:44 |
| amrith | sure | 18:44 |
| amrith | deployers can have trove sing the national anthem, I don't mind. | 18:44 |
| amrith | that's their call. | 18:44 |
| kevinconway | there are singing robots, amrith | 18:45 |
| kevinconway | some quite popular | 18:45 |
| SlickNik | amrith: Do you agree that having SSL for datastore implementations that are deployed is a valid trove scenario? | 18:45 |
| amrith | kevinconway, and some deployers may have API calls to those too. (out of the scope of this BP) | 18:45 |
| grapex | amrith: What you haven't proven in my mind is how including this would be a detriment to Trove itself. | 18:45 |
| amrith | SlickNik, yes. I believe it is. | 18:46 |
| amrith | grapex, that is likely true. | 18:46 |
| grapex | Deployers already have the right to do whatever they want. This is an apache license piece of open source software so I don't think we need to reiterate that. | 18:46 |
| kevinconway | i'm simply suggesting an interface that allows for more than one possibility | 18:46 |
| kevinconway | so the trove reference impl can _not_ send keys, but i don't believe we should prevent other impls that do | 18:47 |
| amrith | so, what does the rest of core think? what about others who were at mid-cycle? should we (in trove) handle keys? pass them around and so on? | 18:47 |
| amrith | i agree SSL is good | 18:47 |
| amrith | the question I have is whether we should be in the business of key transport. | 18:47 |
| SlickNik | Same here. | 18:47 |
| SlickNik | I agree that we should support this. | 18:47 |
| SlickNik | I'm not sure what the reference impl for getting the keys / cert out to the guest should be (quite yet) | 18:48 |
| denis_makogon | i'd suggest to delegate key management to guestagent, and do not involve AMPQ | 18:48 |
| vgnbkr | There should be no need to transmit PRIVATE keys unless we wished to support pre-defined certs. Transmitting public keys is fine. | 18:49 |
| *** vigneshvar has joined #openstack-trove | 18:49 | |
| denis_makogon | this is a potential security issue, since we can't know if AMPQ service works with SSL/TLS | 18:49 |
| denis_makogon | vgnbkr, +1 | 18:49 |
| SlickNik | I don't think we're going to get closure on that during this meeting, so we'll probably need to discuss this OOB and perhaps again next week. | 18:50 |
| amrith | SlickNik, +1 | 18:50 |
| SlickNik | amrith / grapex / kevinconway: can we continue the discuss out of band? | 18:50 |
| *** openstackgerrit has quit IRC | 18:51 | |
| amrith | SlickNik, +1 | 18:51 |
| SlickNik | And let's move on to the next BP in the interest of time. | 18:51 |
| SlickNik | #topic ceilometer integration | 18:51 |
| denis_makogon | it's mine | 18:51 |
| SlickNik | #link https://blueprints.launchpad.net/trove/+spec/ceilometer-integration | 18:52 |
| denis_makogon | for now we have only several notifications - when instance gets created, resized, and deleted | 18:52 |
| denis_makogon | all this notifications are emitted at the start | 18:52 |
| denis_makogon | for billing purposes and resource monitoring (involving ceilomenter) we need to provide fine grained notification through resource life cycle | 18:53 |
| denis_makogon | there are three types of resources: instance, backup and cluster(new one) | 18:54 |
| denis_makogon | there are three levels of notifications: start, end, error | 18:55 |
| denis_makogon | some of those notifications are emitted by taskmanager, some of them by conductor | 18:55 |
| SlickNik | denis_makogon: So my concern is that we already have instance notifications — does it make sense to first work on a ceilometer plugin using these notifications (https://blueprints.launchpad.net/ceilometer/+spec/trove-plugin) before we go add notifications for all sorts of events in trove? | 18:56 |
| denis_makogon | SlickNik, i guess no, since it would be nice to have all notification once and for all | 18:56 |
| denis_makogon | SlickNik, it means that we need to build our own notifications first | 18:57 |
| denis_makogon | just take a look at nova, it had its notifications even before ceilometer was proposed | 18:57 |
| denis_makogon | notifications in Trove is the fine grained base for going forward with including ceilometer into monitoring workflow | 18:58 |
| SlickNik | I'm not sure that we'd even use these notifications for billing. Other folks (RAX, ebay) can chime in here, but at HP we bill backups based on Swift data, so something like backup create/delete would not be super useful to us. And clusters just made it in, so probably good to not get ahead of ourselves with this. | 18:59 |
| SlickNik | Why can't we get a POC with the ceilometer plugin and just instances as a first step? | 19:00 |
| grapex | SlickNik: +1 | 19:00 |
| denis_makogon | we might try | 19:00 |
| robertmyers | SlickNik +1 | 19:00 |
| amrith | is there someone who is looking for ceilometer integration in trove? | 19:00 |
| cp16net | we use resize/create/delete for billing | 19:00 |
| amrith | that would could make part of this POC? | 19:00 |
| denis_makogon | amrith, i'm going to do that | 19:00 |
| amrith | denis_makogon, not you. I mean someone operating trove in production who wants this feature | 19:01 |
| *** grapex has quit IRC | 19:01 | |
| denis_makogon | Ok, as i can see, initial implementation would take only instance events and ceilo plugin | 19:01 |
| *** grapex has joined #openstack-trove | 19:01 | |
| amrith | could we find out what events they want. | 19:01 |
| amrith | If no one is going to deploy trove with this enabled, it seems like a futile effort. | 19:02 |
| robertmyers | how is this different then the current notifications? | 19:03 |
| robertmyers | does it extend it? | 19:03 |
| robertmyers | or replace it? | 19:03 |
| denis_makogon | amrith, Trove only emits notification - it doesn't know who's going to consume them | 19:03 |
| denis_makogon | robertmyers, it'll extend it | 19:03 |
| denis_makogon | robertmyers, for example, we have "instance.create" | 19:03 |
| kevinconway | denis_makogon: this does not involve any changes to existing messages, correct? | 19:03 |
| robertmyers | denis_makogon ok | 19:04 |
| denis_makogon | kevinconway, it would modify topics | 19:04 |
| denis_makogon | kevinconway, for example "resize_volume" to "resize.volume.start|end|error" | 19:04 |
| denis_makogon | kevinconway, i mean resize_volume.start|end|error | 19:04 |
| kevinconway | denis_makogon: could you create new messages with those titles rather than modify existing? | 19:04 |
| iccha | yeah we dont want breaking existing systems which depend on these notifications | 19:05 |
| denis_makogon | kevinconway, to keep working Rax billing system? | 19:05 |
| SlickNik | denis_makogon: -1 to changing existing messages without a good reason. | 19:05 |
| robertmyers | denis_makogon: so for example trove.instance.create.end == trove.instance.create | 19:05 |
| denis_makogon | iccha, kevinconway, i can do it | 19:05 |
| *** openstackgerrit has joined #openstack-trove | 19:06 | |
| denis_makogon | robertmyers, SlickNik, kevinconway, iccha, what about sending several events at one stage ? | 19:06 |
| *** openstackgerrit has quit IRC | 19:06 | |
| robertmyers | that is fine | 19:06 |
| *** openstackgerrit has joined #openstack-trove | 19:06 | |
| robertmyers | as long as the currnet is unchanged | 19:06 |
| denis_makogon | so it would keep everything working fine for all | 19:07 |
| iccha | +1 robertmyers | 19:07 |
| denis_makogon | robertmyers, sure | 19:07 |
| kevinconway | yeah, i wouldn't mind multiple so long as the originals are preserved | 19:07 |
| denis_makogon | cores, what do you think about multiple notifications ? | 19:07 |
| SlickNik | denis_makogon: I'd really like to see more "integration with ceilometer" pieces, and fewer "get as many events as we can emitted by Trove" pieces as part of this BP. | 19:07 |
| grapex | denis_makogon: I'm ok if you can also demonstrate some use | 19:08 |
| grapex | which I guess SlickNik just said. :) | 19:08 |
| denis_makogon | grapex, some use where ? | 19:08 |
| iccha | i could see some potential use if we use it for metrics like how long does it take to start and end a task | 19:09 |
| iccha | but no point unless someone actually uses it | 19:09 |
| amrith | iccha, +1 | 19:09 |
| denis_makogon | so, first i need to implement ceilo part, right ? | 19:09 |
| denis_makogon | if that works for all - fine, i'm cool with that | 19:09 |
| SlickNik | denis_makogon: Yes, that would be good. | 19:10 |
| denis_makogon | ok | 19:10 |
| SlickNik | Okay we're already running over. | 19:10 |
| iccha | ya way over :) | 19:10 |
| denis_makogon | can we review the last one ? | 19:10 |
| openstackgerrit | Dan Nguyen proposed a change to openstack/python-troveclient: Add mgmt upgrade call to CLI https://review.openstack.org/108796 | 19:10 |
| denis_makogon | cassandra clusters | 19:10 |
| SlickNik | denis_makogon: will have to move to next week. | 19:10 |
| SlickNik | #endmeeting | 19:11 |
| denis_makogon | bad =( | 19:11 |
| openstack | Meeting ended Mon Sep 8 19:11:07 2014 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 19:11 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/trove_bp_review/2014/trove_bp_review.2014-09-08-18.02.html | 19:11 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/trove_bp_review/2014/trove_bp_review.2014-09-08-18.02.txt | 19:11 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/trove_bp_review/2014/trove_bp_review.2014-09-08-18.02.log.html | 19:11 |
| amrith | thx SlickNik | 19:11 |
| SlickNik | Thanks folks! | 19:11 |
| denis_makogon | thanks to all | 19:11 |
| SlickNik | And sorry for the slight delay. | 19:11 |
| grapex | denis_makogon: Sorry for the delay- iccha gave a good example of what I meant. :) | 19:11 |
| iccha | vgnbkr: around? | 19:12 |
| SlickNik | grapex / amrith / kevinconway: Perhaps we can use part of the Wednesday Trove meeting to discuss the SSL issue that came up today? I think that that's something that's important for Trove, so it would be good to get some closure on it. | 19:14 |
| openstackgerrit | Mat Lowery proposed a change to openstack/trove-integration: Load cfg params conditionally https://review.openstack.org/119880 | 19:15 |
| zhiyan | SlickNik: hi, btw, may I know do we have more meetings for bp discussion in a week? I was going to edit agenda for next Monday. | 19:16 |
| SlickNik | zhiyan: Sorry we weren't able to get to your BP because of a full agenda. Yes, your item will be moved to the beginning of next week's agenda | 19:17 |
| SlickNik | I will move it. | 19:18 |
| vgnbkr | iccha: hi | 19:18 |
| iccha | vgnbkr: i just wanted to make sure u noticed the comments i had earlier before meeting about replication for 5.6 and config values associated with it | 19:19 |
| zhiyan | SlickNik: great, thanks. np :) (just only my timezone is a little issue, needs schedule.) | 19:19 |
| *** iartarisi has quit IRC | 19:20 | |
| iccha | zhiyan: make sure u add it for next monday now, so ur item is top of agenda | 19:20 |
| zhiyan | iccha: ^^ SlickNik said he will do it. | 19:21 |
| iccha | ok awesome zhiyan :) | 19:21 |
| *** jmontemayor has quit IRC | 19:22 | |
| vgnbkr | iccha: No I haven't seen them. IRC or a gerrit review? | 19:26 |
| *** Barker has quit IRC | 19:26 | |
| iccha | irc | 19:26 |
| iccha | vgnbkr: ^ | 19:27 |
| vgnbkr | iccha: Sorry, my logging got turned off somehow, and our bouncer doesn't seem to go that far back. Can you cut the relevant parts and PM/email it to me? | 19:29 |
| iccha | sure vgnbkr basically for 5.6 need additional configs for repl to turn on gtids | 19:30 |
| iccha | vgnbkr: right now we hard code it, wanted to move out replication configs to maybe the template or configs | 19:30 |
| vgnbkr | I seem to recall that there was more to it than that which was why I made a Replication Strategy, but not having it hard coded as it is would be good regardless. | 19:31 |
| *** jmontemayor has joined #openstack-trove | 19:34 | |
| vgnbkr | Were you thinking of a template selected via CONF? | 19:34 |
| kevinconway | SlickNik: I wouldn't mind continuing the conversation. We may need to pre-game a bit to make sure we're on the same page for what we are talking about. | 19:35 |
| amrith | kevinconway, grapex, SlickNik ... re: ssl, here's a proposal. | 19:39 |
| amrith | <paste bomb> follows | 19:39 |
| amrith | let us make it possible to get ssl enabled in multiple ways, and leave ssl disabled (by default). | 19:39 |
| amrith | If you enable ssl, the keypair and the certificate must get to the guest. let's make it possible to accomplish that in one of many ways. | 19:39 |
| amrith | (a) the guest generates the keypair and the ssl_enable payload is just the certificate | 19:39 |
| amrith | (b) the guest agent gets a URI (or a collection) and gets the things it needs | 19:39 |
| amrith | (c) trove sends the stuff over the message bus as part of the payload of ssl_enable | 19:39 |
| amrith | We can document clearly that the third one depends on your security on the message bus, and (a) would pass security audits. This would give deployers flexibility to use the method(s) they chose, and trove can support SSL. | 19:39 |
| amrith | Thoughts? | 19:39 |
| amrith | </paste bomb> | 19:39 |
| *** amcrn has joined #openstack-trove | 19:40 | |
| amrith | I believe this will address vgnbkr's concern of tranfering keys in the open | 19:40 |
| amrith | especially private key | 19:40 |
| amrith | it will address my concern of trove getting into the business of key management | 19:40 |
| amrith | and it will make it possible to integrate with bbq in the future. | 19:40 |
| amrith | thoughts? | 19:40 |
| amrith | vgnbkr, thoughts (re: above) | 19:41 |
| SlickNik | amrith: etherpad / paste / gist please :) | 19:41 |
| SlickNik | https://etherpad.openstack.org/p/TroveSSL | 19:41 |
| iccha | vgnbkr: like we have templates we select the replication.cnf from template too? so the reason i was thinking we dont need another strategy is because all the workflow is eaxctly the same. the only thing different is config value | 19:42 |
| amrith | SlickNik, thanks. | 19:42 |
| SlickNik | amrith / kevinconway: That proposal seems amenable to me. Just need to ensure that the API proposed allows for all 3 (a-c). | 19:44 |
| grapex | amrith SlickNik: +1 | 19:44 |
| grapex | amrith: We may want to see who would use options A and B just to make sure they will have some users. | 19:45 |
| kevinconway | SlickNik: amrith: grapex: would it help if i mocked what those scenarios would look like as a part of the BP? | 19:46 |
| grapex | I know we're done for C of course. And I like that the default option is nothing, which means someone picking up stock Trove wouldn't use an option and think they had security when they didn't. | 19:46 |
| kevinconway | mocked up, rather. not intending to fun of | 19:46 |
| amrith | grapex, SlickNik +1 | 19:46 |
| openstackgerrit | Auston McReynolds proposed a change to openstack/trove: Miscellaneous Cluster Fixes https://review.openstack.org/119259 | 19:46 |
| SlickNik | kevinconway: Yes, I think that a couple of examples would help. Thanks! | 19:48 |
| *** vigneshvar has left #openstack-trove | 19:51 | |
| vgnbkr | amrith: Yes, though should point out that the certificate in case (a) is the cert of the CA, not the cert that the user will use to authenticate the server. | 19:54 |
| vgnbkr | iccha: Yes, if everything the same, no need for separate strategy - I can't remember what is was that I though was going to be different - it may have been for more advanced use cases that we haven't addressed yet. | 19:56 |
| *** sgotliv has quit IRC | 19:57 | |
| *** sgotliv has joined #openstack-trove | 19:58 | |
| vgnbkr | amrith: SlickNik: The part I don't understand for case a/b is what happens to the generated certificate. It seems we would need somewhere to register it as is already done for keys. The user would need to be able to retrieve the cert beyond the return value of the enable call, I think. | 19:58 |
| jedix | hmm.. trove-integration does not have a license file. | 19:59 |
| jedix | ah, http://www.apache.org/licenses/LICENSE-2.0 | 20:00 |
| openstackgerrit | Nikhil Manchanda proposed a change to openstack/python-troveclient: Update the README.rst with latest help https://review.openstack.org/119898 | 20:07 |
| SlickNik | Can I get some reviews on https://review.openstack.org/119898? I'm planning to push a new trove client release to pypi, and would like the README.rst that gets published to pypi to reflect the correct help info. | 20:10 |
| SlickNik | Thanks! | 20:10 |
| iccha | taking a look... | 20:11 |
| *** amrith is now known as _amrith_ | 20:13 | |
| iccha | SlickNik: does it need a bug associated with it? | 20:15 |
| *** spiffxp_ has quit IRC | 20:15 | |
| jedix | are there any built-in tests for trove, or do I need use trove-integration for testing? | 20:15 |
| *** spiffxp_ has joined #openstack-trove | 20:16 | |
| iccha | jedix: there are some unit tests and int tests in trove | 20:16 |
| *** stevelle has quit IRC | 20:17 | |
| jedix | iccha: thanks, can you point me towards documentation on those? | 20:18 |
| *** stevelle has joined #openstack-trove | 20:18 | |
| iccha | jedix: u can run tox or you the run_tests.py | 20:19 |
| *** hub_cap has quit IRC | 20:21 | |
| *** hub_cap has joined #openstack-trove | 20:21 | |
| *** achampion has quit IRC | 20:32 | |
| *** sbadia has quit IRC | 20:32 | |
| *** sbadia has joined #openstack-trove | 20:34 | |
| SlickNik | iccha: It's just a doc change, so I didn't bother opening a bug. Although it's probably a good idea to open one for it anyway. | 20:37 |
| jedix | run_tests.py is in the integration git repo, isn't it? | 20:40 |
| *** miqui has quit IRC | 20:43 | |
| amcrn | SlickNik: if you fix the small nit mentioned in that doc change, i'll +2 before i run to a meeting. | 20:54 |
| *** eguz has joined #openstack-trove | 20:56 | |
| openstackgerrit | Nikhil Manchanda proposed a change to openstack/python-troveclient: Update the README.rst with latest help https://review.openstack.org/119898 | 20:58 |
| amcrn | SlickNik: thanks, +2'd | 20:59 |
| *** eghobo has quit IRC | 20:59 | |
| SlickNik | ^^ amcrn / iccha: here you go. | 20:59 |
| SlickNik | Thanks! | 20:59 |
| iccha | thanks SlickNik | 20:59 |
| *** amcrn has quit IRC | 21:05 | |
| *** arborism has joined #openstack-trove | 21:10 | |
| *** arborism is now known as amcrn | 21:11 | |
| *** juantwo has quit IRC | 21:11 | |
| *** sriram_tesora has quit IRC | 21:11 | |
| openstackgerrit | Riddhi Shah proposed a change to openstack/trove: Associate flavor types with datastore versions https://review.openstack.org/109824 | 21:15 |
| *** IanGovett2 has joined #openstack-trove | 21:20 | |
| *** IanGovett1 has quit IRC | 21:20 | |
| Riddhi | amcrn: ^^; can you review it and remove the -2 if it looks okay?? | 21:21 |
| amcrn | Riddhi: the breaking change was removed, so i've gone ahead and wiped the -2. | 21:23 |
| amcrn | Riddhi: that should at least not discourage people from looking at it; once time permits, i'll look at it again to assess the final vote. | 21:24 |
| *** IanGovett has joined #openstack-trove | 21:24 | |
| *** robertmyers has quit IRC | 21:25 | |
| *** IanGovett has quit IRC | 21:27 | |
| *** IanGovett2 has quit IRC | 21:27 | |
| *** IanGovett has joined #openstack-trove | 21:27 | |
| Riddhi | sure,thanks amcrn | 21:28 |
| *** ViswaV has quit IRC | 21:32 | |
| *** flaper87 is now known as flaper87|afk | 21:38 | |
| *** IanGovett has quit IRC | 21:43 | |
| *** edmund has quit IRC | 21:44 | |
| *** IanGovett has joined #openstack-trove | 21:45 | |
| openstackgerrit | Sergey Gotliv proposed a change to openstack/trove: [WIP] Updates RPC API to use oslo.messaging https://review.openstack.org/94484 | 21:47 |
| *** ViswaV has joined #openstack-trove | 21:47 | |
| openstackgerrit | Riddhi Shah proposed a change to openstack/trove: Allow users the ability to update an instance name https://review.openstack.org/92701 | 21:51 |
| *** sgotliv has quit IRC | 21:52 | |
| *** eguz has quit IRC | 21:54 | |
| *** eghobo has joined #openstack-trove | 21:54 | |
| *** jasonb365 has quit IRC | 21:57 | |
| *** tomblank has quit IRC | 21:57 | |
| *** juantwo has joined #openstack-trove | 22:01 | |
| openstackgerrit | Riddhi Shah proposed a change to openstack/trove: Add visibility filter to datastore versions https://review.openstack.org/110197 | 22:13 |
| *** miqui has joined #openstack-trove | 22:13 | |
| *** amcrn_ has joined #openstack-trove | 22:30 | |
| *** amcrn has quit IRC | 22:32 | |
| *** mattgriffin has quit IRC | 22:59 | |
| openstackgerrit | A change was merged to openstack/trove-integration: Add new command to run dsvm-gate-tests https://review.openstack.org/118273 | 23:00 |
| *** amcrn_ is now known as amcrn | 23:01 | |
| *** tomblank has joined #openstack-trove | 23:02 | |
| *** rhodgin has quit IRC | 23:11 | |
| *** Longgeek has quit IRC | 23:14 | |
| *** IanGovett has quit IRC | 23:28 | |
| *** IanGovett has joined #openstack-trove | 23:28 | |
| *** IanGovett has quit IRC | 23:33 | |
| *** georgelorch has quit IRC | 23:34 | |
| *** edmund has joined #openstack-trove | 23:35 | |
| *** georgelorch has joined #openstack-trove | 23:35 | |
| *** kevinconway has quit IRC | 23:37 | |
| *** _amrith_ is now known as amrith | 23:38 | |
| *** IanGovett has joined #openstack-trove | 23:43 | |
| *** Riddhi has quit IRC | 23:47 | |
| *** jmontemayor has quit IRC | 23:48 | |
| *** IanGovett has quit IRC | 23:50 | |
| johnma | Hello, do we have any documentation around the clustering feature that will be available in the Juno release? I am trying to understand what kind of of replication is supported in this release. Thank you. | 23:54 |
| *** mattgriffin has joined #openstack-trove | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!