openstackgerrit | Merged openstack/trove: Add better input checking for MongoDB https://review.openstack.org/247744 | 00:06 |
---|---|---|
*** shakamunyi has joined #openstack-trove | 00:09 | |
*** chlong has quit IRC | 00:12 | |
openstackgerrit | Doug Shelley proposed openstack/trove-specs: Datastore Log Operations https://review.openstack.org/188168 | 00:18 |
dougshelley66 | cp16net ^^^ I added that appendix section to the bottom as per your comment...will need +2 put back on | 00:20 |
openstackgerrit | Mayuri Ganguly proposed openstack/trove: Update Management Console user and password https://review.openstack.org/208670 | 00:27 |
openstackgerrit | Mayuri Ganguly proposed openstack/trove: Modifying Vertica clusters to have a master node https://review.openstack.org/204271 | 00:27 |
*** rcernin has quit IRC | 00:37 | |
openstackgerrit | Merged openstack/trove-specs: Postgresql streaming replication https://review.openstack.org/240986 | 00:40 |
openstackgerrit | Merged openstack/trove-specs: Removing SQL Schema Downgrade https://review.openstack.org/252477 | 00:41 |
openstackgerrit | Merged openstack/trove-specs: Add Backup & Restore feature for CouchDB database https://review.openstack.org/246616 | 00:43 |
*** mingdang1 has joined #openstack-trove | 00:50 | |
*** mingdang1 has quit IRC | 00:50 | |
*** mingdang1 has joined #openstack-trove | 00:50 | |
openstackgerrit | Rico Lin proposed openstack/python-troveclient: Remove py26 support https://review.openstack.org/252470 | 00:52 |
*** amrith is now known as _amrith_ | 00:57 | |
*** shakamunyi has quit IRC | 01:02 | |
*** shakamunyi has joined #openstack-trove | 01:03 | |
*** sabeen has quit IRC | 01:07 | |
*** csoukup has joined #openstack-trove | 01:18 | |
*** sgotliv__ has quit IRC | 01:22 | |
*** mingdang1 has quit IRC | 01:39 | |
*** chlong has joined #openstack-trove | 01:48 | |
*** chlong has quit IRC | 01:51 | |
*** chlong has joined #openstack-trove | 02:00 | |
*** chlong has quit IRC | 02:06 | |
*** imandhan has quit IRC | 02:17 | |
*** chlong has joined #openstack-trove | 02:19 | |
*** pmackinn has quit IRC | 02:29 | |
openstackgerrit | Merged openstack/trove: updating with other reno changes https://review.openstack.org/252560 | 02:30 |
*** chlong has quit IRC | 02:35 | |
*** mingdang1 has joined #openstack-trove | 02:40 | |
cp16net | _amrith_: vkmc thanks! | 02:41 |
cp16net | i think we are capable of doing the release now | 02:41 |
vkmc | supaaaah | 02:41 |
cp16net | oh damn spoke to soon... | 02:43 |
cp16net | going to have something else i need to do as well... | 02:43 |
*** mingdang1 has quit IRC | 02:45 | |
cp16net | got a few other things to do before the release is ready... | 02:47 |
*** chlong has joined #openstack-trove | 02:48 | |
*** pmackinn has joined #openstack-trove | 02:56 | |
openstackgerrit | Craig Vyvial proposed openstack/trove: Remove version per M-1 release instructions https://review.openstack.org/252722 | 02:57 |
cp16net | alright now i think we are good. | 02:59 |
cp16net | vkmc: ^^ that patch will need to land after they cut the release tomorrow | 03:00 |
vkmc | cp16net, roger roger | 03:00 |
*** chlong has quit IRC | 03:21 | |
*** ViswaV_ has quit IRC | 03:35 | |
*** ViswaV has joined #openstack-trove | 03:37 | |
*** sabeen1 has joined #openstack-trove | 03:40 | |
*** sabeen2 has joined #openstack-trove | 03:43 | |
*** sabeen1 has quit IRC | 03:46 | |
*** links has joined #openstack-trove | 05:06 | |
*** ianbrown has joined #openstack-trove | 05:14 | |
*** haomaiwang has joined #openstack-trove | 05:16 | |
*** ianbrown has quit IRC | 05:21 | |
*** csoukup has quit IRC | 05:46 | |
*** pmackinn has quit IRC | 05:57 | |
*** imandhan has joined #openstack-trove | 06:15 | |
*** imandhan has quit IRC | 06:22 | |
*** imandhan has joined #openstack-trove | 06:27 | |
*** sabeen2 has quit IRC | 06:27 | |
*** imandhan has quit IRC | 06:29 | |
*** imandhan has joined #openstack-trove | 06:29 | |
*** imandhan has quit IRC | 06:33 | |
*** mingdang1 has joined #openstack-trove | 06:36 | |
*** imandhan has joined #openstack-trove | 06:36 | |
*** ViswaV has quit IRC | 06:52 | |
*** imandhan has quit IRC | 07:04 | |
*** sgotliv__ has joined #openstack-trove | 07:16 | |
*** rcernin has joined #openstack-trove | 07:19 | |
*** rcernin_ has joined #openstack-trove | 07:24 | |
*** imandhan has joined #openstack-trove | 07:31 | |
*** vkmc has quit IRC | 07:43 | |
*** vkmc has joined #openstack-trove | 07:44 | |
*** chlong has joined #openstack-trove | 07:55 | |
*** imandhan has quit IRC | 08:27 | |
*** chlong has quit IRC | 08:29 | |
*** rcernin has quit IRC | 08:50 | |
*** rcernin_ has quit IRC | 08:51 | |
*** rcernin has joined #openstack-trove | 09:59 | |
*** haomaiwang has quit IRC | 10:38 | |
*** tosky has joined #openstack-trove | 10:50 | |
*** chlong has joined #openstack-trove | 11:01 | |
*** pmalik_ is now known as pmalik | 12:18 | |
pmalik | _amrith_: cp16net: edmondk: SlickNik: vkmc: The test race condition fix is now passing the gate. Can we possibly push it through please? Thanks. :-) https://review.openstack.org/#/c/248421/ | 12:26 |
*** openstackgerrit has quit IRC | 12:32 | |
*** openstackgerrit has joined #openstack-trove | 12:32 | |
*** haomaiwa_ has joined #openstack-trove | 12:43 | |
*** vkmc has quit IRC | 12:50 | |
*** vkmc has joined #openstack-trove | 12:50 | |
*** pmackinn has joined #openstack-trove | 12:52 | |
*** openstackgerrit has quit IRC | 13:17 | |
*** openstackgerrit has joined #openstack-trove | 13:17 | |
*** haomaiwa_ has quit IRC | 13:40 | |
*** links has quit IRC | 13:51 | |
*** _crobertsrh is now known as crobertsrh | 14:04 | |
*** csoukup has joined #openstack-trove | 14:09 | |
*** mingdang1 has quit IRC | 14:20 | |
*** _amrith_ is now known as amrith | 15:21 | |
cp16net | M-1 of trove is released | 15:43 |
*** amrith is now known as _amrith_ | 15:46 | |
*** haomaiwa_ has joined #openstack-trove | 15:52 | |
cp16net | edmondk: vkmc: https://review.openstack.org/#/c/245356/ | 16:00 |
*** haomaiwa_ has quit IRC | 16:00 | |
*** 18VAAEQWZ has joined #openstack-trove | 16:01 | |
*** 18VAAEQWZ has quit IRC | 16:02 | |
openstackgerrit | Merged openstack/trove-specs: Datastore Log Operations https://review.openstack.org/188168 | 16:02 |
*** haomaiwa_ has joined #openstack-trove | 16:02 | |
*** haomaiwa_ has quit IRC | 16:03 | |
*** haomaiwa_ has joined #openstack-trove | 16:03 | |
*** haomaiwa_ has quit IRC | 16:04 | |
*** haomaiwang has joined #openstack-trove | 16:04 | |
*** haomaiwang has quit IRC | 16:05 | |
*** haomaiwa_ has joined #openstack-trove | 16:05 | |
*** haomaiwa_ has quit IRC | 16:06 | |
*** haomaiwang has joined #openstack-trove | 16:06 | |
*** haomaiwang has quit IRC | 16:07 | |
*** haomaiwang has joined #openstack-trove | 16:07 | |
*** haomaiwang has quit IRC | 16:08 | |
*** haomaiwa_ has joined #openstack-trove | 16:08 | |
*** haomaiwa_ has quit IRC | 16:09 | |
*** haomaiwa_ has joined #openstack-trove | 16:09 | |
*** haomaiwa_ has quit IRC | 16:10 | |
*** 5EXAADMHT has joined #openstack-trove | 16:10 | |
*** 5EXAADMHT has quit IRC | 16:11 | |
*** haomaiwang has joined #openstack-trove | 16:11 | |
*** haomaiwang has quit IRC | 16:12 | |
*** 5EXAADMKT has joined #openstack-trove | 16:12 | |
*** rcernin has quit IRC | 16:12 | |
*** 5EXAADMKT has quit IRC | 16:13 | |
*** 5EXAADML5 has joined #openstack-trove | 16:13 | |
*** 5EXAADML5 has quit IRC | 16:13 | |
*** sabeen has joined #openstack-trove | 16:20 | |
*** sabeen has quit IRC | 16:49 | |
*** rcernin has joined #openstack-trove | 16:53 | |
*** tosky has quit IRC | 16:57 | |
*** tosky has joined #openstack-trove | 16:59 | |
cp16net | whos around? | 17:06 |
vkmc | me | 17:07 |
vkmc | o/ | 17:07 |
peterstac | o/ | 17:24 |
cp16net | vkmc: peterstac i think we need to determine what datastores are "stable" | 17:25 |
cp16net | we have experimental | 17:25 |
cp16net | we need to determine a path between experimental and stable datastores | 17:26 |
peterstac | well, one of the conditions was to have CI running on the DS (whether OS or 3rd-party) | 17:26 |
peterstac | we've got most of the infrastructure to start running the scenario tests in the gate | 17:26 |
peterstac | but we need the capacity (internal or from outside) | 17:26 |
cp16net | yeah i think thats part of it | 17:27 |
cp16net | i think there are some other conditions as well | 17:27 |
vkmc | API coverage is something we may want to consider as well | 17:27 |
cp16net | i'll write up a page on some conditions i cann think of and then i think its something that we should discuss | 17:28 |
SlickNik | What's up folks! | 17:29 |
cp16net | because should the fact that there are operators deployed a datastore in prod be given some weight? | 17:29 |
cp16net | i.e. mongo and redis have been run for a while by multiple people | 17:30 |
cp16net | the datastores need to have a minimal feature set | 17:31 |
vgnbkr | Does anyone have mongo or redis in use by customers based on standand Trove code (i.e., no downstream additions). | 17:32 |
peterstac | but we as a community declare something 'stable' I think we'd need to have tests running on a continual basis | 17:33 |
peterstac | s/but we/but if we/ | 17:33 |
cp16net | peterstac: i'd agree with that as well as a condition for it | 17:34 |
cp16net | vgnbkr: thats a loaded question | 17:34 |
dougshelley66 | cp16net as i recall, the original discussion of why we did this was because the only datastore being routinely tested was mysql | 17:34 |
dougshelley66 | I think the key item was CI testing for other datastores | 17:34 |
cp16net | yeah i think thats true | 17:35 |
cp16net | then with a good definition of what we determine stable/experimental leads to me next question | 17:35 |
dougshelley66 | ... | 17:37 |
cp16net | if we find issues with a datastore that are security related for stable do we make a sercurity patch for them or not. (i'd think we would) | 17:38 |
cp16net | then what about experimental? | 17:38 |
cp16net | maybe we wouldnt | 17:38 |
dougshelley66 | it's a good question that wasn't previously discussed in the experimental context | 17:41 |
dougshelley66 | i don't think there is any reason we wouldn't provide stable patches for experimental | 17:42 |
cp16net | right its something that we need to figure out | 17:43 |
cp16net | what makes the most sense | 17:43 |
cp16net | dougshelley66: your 2nd comment doesnt really make sense in the context i was thinking | 17:44 |
cp16net | stable patches for experimental? | 17:44 |
tosky | if there is an official CVE, I don't think it would even been an option to not backport a security patch | 17:44 |
cp16net | tosky: right that makes sense | 17:45 |
cp16net | so if there is a found security issue in a stable datastore we should address it with a CVE and backport and all | 17:47 |
cp16net | i think thats less controversial than the experimental in my mind | 17:47 |
cp16net | if experimental datastore issue is found then we should or shouldnt create a CVE for it? | 17:49 |
cp16net | i think from the dictionary definition of experimental it makes sense that we shouldnt create a CVE | 17:50 |
tosky | I think anyone could file a CVE for it (any vendor), it's shipped code | 17:50 |
cp16net | from a vender pov i think that makes sense | 17:51 |
cp16net | but if Trove's definition of experimental is a bit wider then it would mean that its a grey area if we should make a public bug fix or not | 17:54 |
tosky | mhh... it's still shipped code | 17:56 |
cp16net | tosky: from your pov everything that has been versioned matters | 17:58 |
*** imandhan has joined #openstack-trove | 17:58 | |
tosky | for security bugs, yes | 17:58 |
cp16net | makes sense | 17:58 |
tosky | (sorry, I have to leave) | 17:58 |
*** tosky has quit IRC | 17:58 | |
cp16net | tosky: no worries thanks for your input | 17:58 |
cp16net | dougshelley66: peterstac vkmc since you were here what do you think? | 17:59 |
cp16net | vgnbkr: ? | 17:59 |
vgnbkr | cp16net, sorry, was on phone - reading now... | 18:00 |
cp16net | no worries the last thing tosky said is what i'm asking about | 18:00 |
*** PeterSchwaller has joined #openstack-trove | 18:02 | |
peterstac | Just because a datastore is considered experimental, we should probably still fix any CVE issues | 18:02 |
peterstac | We could state that the timeframe for fixes for experimental datastores may be longer | 18:03 |
vgnbkr | I'm having trouble imagining what a security patch would be to an experimental database that would require a datastore-specific patch to fix. If it's a database bug, it's beyond Trove's control. If it's a framework issue, it would affect all datastores. What sort of security issue are we talking about? | 18:04 |
cp16net | not nessesrary | 18:07 |
cp16net | er... | 18:07 |
cp16net | not nessesarily vgnbkr because each datastore implements its own logic to handle the operations the datastore handles | 18:08 |
vgnbkr | cp16net, I think there could be an issue with images for experimental datastores, but that would be up to the image creator to deal with. What sort of issue would the trove code itself have? | 18:09 |
vgnbkr | Maybe there could be an API call that is deprecated for security reasons, but that's a pretty rare occurrence, I think. I don't know that we need to implement a priori procedure for such rare events. | 18:10 |
cp16net | vgnbkr: i'm talking about bugs that may affect a datastore that are found after release | 18:10 |
cp16net | bugs found in code thats not tested in ci | 18:11 |
vgnbkr | Right, but give me an example of a security issue that would be fixed by a change to trove code. I get that we can discuss theoretical issues, but if we can't think of specific ones it's probably not worth worrying about. | 18:13 |
*** tqtran has joined #openstack-trove | 18:13 | |
vgnbkr | i.e., as opposed to the many other real issues we could be discussing :-) | 18:13 |
cp16net | i think its a valid concern that could happen at any time | 18:16 |
vkmc | I think it's a valid concern too | 18:24 |
vkmc | if there is a security concern related on how we interact with a datastore, then it's something we should take care of | 18:24 |
vkmc | if it's a bug in the datastore, then the vendor should take care of it and we should upgrade as needed | 18:25 |
*** davideagnello has quit IRC | 18:26 | |
*** davideagnello has joined #openstack-trove | 18:26 | |
cp16net | yeah i'd tend to agree | 18:27 |
cp16net | i think we need to discuss this with others as well and get the conclusion documented so that we have a reference for the future | 18:29 |
vkmc | +1 | 18:35 |
*** ViswaV has joined #openstack-trove | 18:42 | |
*** sabeen has joined #openstack-trove | 19:03 | |
*** _amrith_ is now known as amrith | 19:24 | |
cp16net | i'll be afk for the next few hours i'll catch up later | 19:27 |
amrith | cp16net, vkmc, peterstac, vgnbkr, dougshelley66 ... I'm going to be in and out the rest of the day, returning home tonight. I'm trying to follow what's going on from the scrollback but I'm missing something. Is there a specific CVE against an experimental datastore or are we having an argument about the scenario should it arise? | 19:30 |
peterstac | amrith, AFAIK the discussion is about a hypothetical (although plausible) scenario | 19:32 |
*** ViswaV has quit IRC | 19:41 | |
amrith | ok, thanks. | 19:47 |
*** davideagnello has quit IRC | 19:50 | |
*** davideagnello has joined #openstack-trove | 19:50 | |
openstackgerrit | Merged openstack/trove-integration: Add Python-cli and init run dir to PG elements https://review.openstack.org/247836 | 19:51 |
*** chlong has quit IRC | 19:57 | |
*** chlong has joined #openstack-trove | 20:16 | |
*** amrith is now known as _amrith_ | 20:20 | |
*** openstackgerrit has quit IRC | 20:47 | |
*** openstackgerrit has joined #openstack-trove | 20:47 | |
*** rcernin has quit IRC | 21:05 | |
*** sabeen has quit IRC | 21:12 | |
*** sabeen1 has joined #openstack-trove | 21:19 | |
*** crobertsrh is now known as _crobertsrh | 22:02 | |
openstackgerrit | Petr Malik proposed openstack/python-troveclient: Add 'volume_type' parameter to instance create https://review.openstack.org/245970 | 22:03 |
peterstac | cp16net, I'm good with the changeset ^^^^ | 22:06 |
peterstac | (just the help updated) | 22:06 |
peterstac | If you can take a quick look, once you get a chance | 22:06 |
peterstac | Thx! | 22:06 |
*** ViswaV has joined #openstack-trove | 22:30 | |
*** arist has quit IRC | 22:47 | |
*** arist has joined #openstack-trove | 22:47 | |
*** chlong has quit IRC | 23:08 | |
*** sabeen1 has quit IRC | 23:22 | |
*** csoukup has quit IRC | 23:25 | |
*** ViswaV has quit IRC | 23:32 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!