| *** zhurong has joined #openstack-trove | 00:45 | |
| *** zhurong has quit IRC | 01:33 | |
| *** zhurong has joined #openstack-trove | 01:35 | |
| *** zhaochao has joined #openstack-trove | 01:48 | |
| *** links has joined #openstack-trove | 03:14 | |
| *** itlinux_ has joined #openstack-trove | 03:42 | |
| *** chhavi has joined #openstack-trove | 03:59 | |
| *** gouthamr_ has joined #openstack-trove | 04:06 | |
| *** gouthamr has quit IRC | 04:09 | |
| *** hoonetorg has quit IRC | 04:11 | |
| *** hoonetorg has joined #openstack-trove | 04:21 | |
| *** gcb has quit IRC | 04:24 | |
| *** gcb has joined #openstack-trove | 04:24 | |
| *** zhurong has quit IRC | 04:28 | |
| *** zhurong has joined #openstack-trove | 04:39 | |
| *** itlinux_ has quit IRC | 05:12 | |
| *** zhurong has quit IRC | 05:17 | |
| *** zhurong has joined #openstack-trove | 05:21 | |
| *** gouthamr_ has quit IRC | 05:29 | |
| *** jwcroppe_ has joined #openstack-trove | 06:07 | |
| *** rcernin has joined #openstack-trove | 06:08 | |
| *** jwcroppe has quit IRC | 06:09 | |
| *** chhavi has quit IRC | 06:13 | |
| openstackgerrit | M V P Nitesh proposed openstack/trove master: Fix doc generation for Python3 https://review.openstack.org/457223 | 06:36 |
|---|---|---|
| *** jwcroppe_ has quit IRC | 06:59 | |
| openstackgerrit | Yu Chaochao proposed openstack/trove-integration master: Revert "Using assertFalse(A) instead of assertEqual(False, A)" https://review.openstack.org/474086 | 07:06 |
| *** tesseract has joined #openstack-trove | 07:16 | |
| *** gcb has quit IRC | 07:34 | |
| *** gcb has joined #openstack-trove | 07:37 | |
| *** damien_r has joined #openstack-trove | 07:43 | |
| damien_r | smatze, amrith: of course I don't want to block nova vm creation, only nova snapshot, nova rescue, etc. The idea is to completely restrict vm user acces (code injection, rabbit password leak, etc). So yes policy.json may be the right way. Now the question is how to be 100% sure that it's trove Vm, and not customer one's. I will dig for this | 07:51 |
| openstackgerrit | Yu Chaochao proposed openstack/python-troveclient master: Revert "Using assertFalse(A) instead of assertEqual(False, A)" https://review.openstack.org/474097 | 07:57 |
| *** flwang has quit IRC | 08:22 | |
| *** flwang has joined #openstack-trove | 09:29 | |
| *** tosky has joined #openstack-trove | 09:32 | |
| *** zhurong has quit IRC | 09:40 | |
| *** magicboiz has quit IRC | 09:57 | |
| *** magicboiz has joined #openstack-trove | 10:33 | |
| *** tosky has quit IRC | 10:52 | |
| *** _danpawlik is now known as danpawlik | 11:08 | |
| *** tosky has joined #openstack-trove | 12:11 | |
| *** chlong has quit IRC | 12:20 | |
| *** gouthamr has joined #openstack-trove | 12:44 | |
| *** links has quit IRC | 12:46 | |
| amrith | damien_r you are chasing something which is, honestly, a non-issue | 12:59 |
| damien_r | yeah it depends on point of view and what type of experience you want to propose to your customers :) | 13:08 |
| damien_r | but I can understand that on your point of view it's not a bug ;) | 13:08 |
| *** magicboiz has quit IRC | 13:12 | |
| amrith | so tell me what experience you'd like to provide your customer(s) | 13:12 |
| amrith | and how the fact that they can snapshot an instance and get into it is a bad thing | 13:13 |
| amrith | if, once they get into the instance, they can't do anything bad | 13:13 |
| amrith | there are other ways around this, for example, single-tenant or shadow-tenant remote | 13:13 |
| amrith | which would mean that the custoemr can't see the instance | 13:13 |
| amrith | there's shadow nova, which some people prefer, which does the same thing | 13:13 |
| amrith | (and all of these are referenced in the video I sent you the link to) | 13:14 |
| amrith | damien_r ^^ | 13:14 |
| *** gcb has quit IRC | 13:14 | |
| *** kylek3h has joined #openstack-trove | 13:17 | |
| *** openstackgerrit has quit IRC | 13:18 | |
| *** kumarmn has joined #openstack-trove | 13:28 | |
| *** openstackgerrit has joined #openstack-trove | 13:37 | |
| openstackgerrit | Yu Chaochao proposed openstack/python-troveclient master: Revert "Using assertFalse(A) instead of assertEqual(False, A)" https://review.openstack.org/474097 | 13:37 |
| *** jwcroppe has joined #openstack-trove | 13:40 | |
| *** zhurong has joined #openstack-trove | 13:42 | |
| damien_r | amrith: on our side, we want to keep the customer tenant, for example because of customer local network creation, or specific customer flavors. Even billing is easier. So I was more looking for a solution to prevent customer to have acces to the Vms. On our mind, we don't want to give acces to the Vm. The customer can only "use" his database (with mysql cli for example). | 13:49 |
| *** smatzek has joined #openstack-trove | 13:49 | |
| damien_r | So if I let the customer do a nova snapshot, he can have rabbit password, if he can make a rescue he can inject arbitary code in the Vm, etc etc | 13:49 |
| amrith | so great, use a private nova, cinder | 13:51 |
| amrith | you get to have priority/class of service settings on that nova/cinder | 13:52 |
| amrith | and charge | 13:52 |
| amrith | etc. | 13:52 |
| smatzek | amrith, I'm not sure you saw my question yesterday for suggestions on how to prioritize reviews. Should I focus on reviews that don't have review status yet? Prioritize +1 verified over -1? Re-review ones you've already reviewed? | 13:58 |
| amrith | I did, I didn't know how to answer it | 13:58 |
| amrith | we currently don't have a 'hitlist' of things we want merged for pike | 13:59 |
| amrith | we had some, we merged them | 13:59 |
| amrith | now we are in 'catch-as-catch-can' mode | 13:59 |
| smatzek | k. If you don't have an opinion then I'll look through the ones that don't have a CR check as first priority. | 14:00 |
| smatzek | also, I won't be able to join the meeting today until 30 to 45 minutes after it starts, at which point it may be over. | 14:01 |
| *** chlong has joined #openstack-trove | 14:01 | |
| amrith | ok, thx | 14:02 |
| *** chlong has quit IRC | 14:06 | |
| kumarmn | Same here amrith. Have someone showing up at my office. So I doubt that I can participate in the meeting. | 14:08 |
| *** kumarmn_ has joined #openstack-trove | 14:14 | |
| *** kumarmn has quit IRC | 14:16 | |
| *** kumarmn_ has quit IRC | 14:19 | |
| *** links has joined #openstack-trove | 14:19 | |
| *** kumarmn_ has joined #openstack-trove | 14:20 | |
| *** chlong has joined #openstack-trove | 14:34 | |
| *** chlong has quit IRC | 14:35 | |
| *** links has quit IRC | 14:36 | |
| *** chlong has joined #openstack-trove | 14:38 | |
| *** songjian has joined #openstack-trove | 14:38 | |
| songjian | hi trevor,are you here | 14:41 |
| amrith | songjian trevormc isn't here | 14:42 |
| songjian | ok,Amrith, if you have time, I have a question....Whether troveclient does not have the operation of mgmt. | 14:44 |
| amrith | trove client does not have management commands | 14:44 |
| amrith | yes, that is correct | 14:44 |
| amrith | one of the things we need is a management client | 14:44 |
| amrith | we don't have it | 14:45 |
| amrith | there are some management commands in the client | 14:45 |
| amrith | like datastore management commands | 14:45 |
| amrith | which hit the management API | 14:45 |
| amrith | but not full fledged | 14:45 |
| songjian | mgmt is currently only available for the horizon? | 14:45 |
| amrith | no, there are many commands in the CLI which are also available in horizon. and all things in horizon are also available in CLI | 14:46 |
| songjian | Does this mean I can't display the configsvr and query_router through the "cluster-instance" command? | 14:47 |
| amrith | I don't know, can you? | 14:47 |
| songjian | https://bugs.launchpad.net/trove/+bug/1697394 | 14:48 |
| openstack | Launchpad bug 1697394 in OpenStack DBaaS (Trove) "show mongodb configsvr and mongos for cluster-instances" [Undecided,New] - Assigned to jian.song (jiansong) | 14:48 |
| songjian | please see this | 14:48 |
| amrith | ok, sounds like you are saying you can't | 14:48 |
| *** zhurong has quit IRC | 14:49 | |
| songjian | yes,so I reference MongoDbMgmtClusterView to change MongoDbClusterView | 14:50 |
| songjian | so I wonder if this makes sense for the community? | 14:50 |
| *** trevormc has joined #openstack-trove | 14:55 | |
| amrith | sounds interesting but worth discussing whether it is a compatible change, whether there is issues with backward compatibility, and what would you do for db's that don't have this kind of heterogeneous clusters. | 14:55 |
| songjian | ok,let start weekly-meeting ,and after that discuss this. | 15:00 |
| songjian | thx | 15:00 |
| amrith | trove meeting starting now ... johnma slicknik songjian trevormc amrith | 15:01 |
| *** danpawlik has quit IRC | 15:03 | |
| *** zhaochao has quit IRC | 15:16 | |
| openstackgerrit | jian.song proposed openstack/trove master: Redis 'repl-backlog-size' conf parameter using wrong MIN value https://review.openstack.org/473709 | 15:33 |
| *** damien_r has quit IRC | 15:51 | |
| *** tosky has quit IRC | 15:53 | |
| *** tosky has joined #openstack-trove | 15:53 | |
| *** itlinux_ has joined #openstack-trove | 16:00 | |
| *** tosky has quit IRC | 16:37 | |
| *** tosky has joined #openstack-trove | 16:37 | |
| *** rcernin has quit IRC | 16:49 | |
| *** tesseract has quit IRC | 16:56 | |
| *** pcaruana has quit IRC | 17:29 | |
| *** fishbone has joined #openstack-trove | 17:30 | |
| fishbone | Hello all, I am receiving an error in the trove-taskmanager 2017-06-14 13:29:28.183 20993 ERROR oslo_messaging.rpc.server ConnectFailure: Unable to establish connection to http://0.0.0.0:5000/v2.0/tokens: HTTPConnectionPool(host='0.0.0.0', port=5000): Max retries exceeded with url: /v2.0/tokens (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7eff60031990>: Failed to establish | 17:32 |
| fishbone | But I have it set in debug as trove_auth_url = http://CONTROLLER:5000/v3 log_opt_values /usr/lib/python2.7/dist-packages/oslo_config/cfg.py:2736 | 17:32 |
| *** itlinux_ has quit IRC | 17:41 | |
| *** tosky has quit IRC | 17:42 | |
| eandersson | fishbone: Running Ocata? | 17:44 |
| eandersson | You will need the patch from this bug report applied on your db image - https://bugs.launchpad.net/trove/+bug/1671655 | 17:45 |
| openstack | Launchpad bug 1671655 in OpenStack DBaaS (Trove) "trove_auth_url is not populated properly everywhere" [Medium,Fix released] - Assigned to Erik Olof Gunnar Andersson (eandersson) | 17:45 |
| fishbone | eandersson: yes | 17:45 |
| *** itlinux_ has joined #openstack-trove | 17:57 | |
| *** kumarmn_ has quit IRC | 18:04 | |
| *** kumarmn_ has joined #openstack-trove | 18:07 | |
| *** itlinux_ has quit IRC | 18:14 | |
| *** itlinux has joined #openstack-trove | 18:16 | |
| *** flwang has quit IRC | 18:20 | |
| fishbone | eandersson: thanks that did the trick, I saw those examples but I was thought it might be something else as the bug seemed to be fixed in an earlier version | 18:26 |
| *** kumarmn_ has quit IRC | 18:36 | |
| *** kumarmn_ has joined #openstack-trove | 18:41 | |
| *** flwang has joined #openstack-trove | 18:55 | |
| *** jwcroppe has quit IRC | 19:05 | |
| *** jwcroppe has joined #openstack-trove | 19:06 | |
| *** rcernin has joined #openstack-trove | 19:10 | |
| *** jwcroppe has quit IRC | 19:11 | |
| *** liuqing has quit IRC | 19:18 | |
| openstackgerrit | Merged openstack/trove master: Redis 'repl-backlog-size' conf parameter using wrong MIN value https://review.openstack.org/473709 | 19:21 |
| smatzek | has anyone seen this from trove taskmanager before ? Manager.publish_exists_event: NotFound: This is not a recognized Fernet token I'm using master from a week or two ago. | 19:34 |
| smatzek | nova compute, neutron bridge agent, cinder volume driver (aka other processes that would likely use service tokens through keystone) aren't seeing similar. | 19:35 |
| *** fishbone has quit IRC | 19:39 | |
| *** kumarmn_ has quit IRC | 19:41 | |
| *** kumarmn_ has joined #openstack-trove | 19:43 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/trove master: Updated from global requirements https://review.openstack.org/472957 | 20:00 |
| *** kumarmn_ has quit IRC | 20:01 | |
| *** kumarmn has joined #openstack-trove | 20:02 | |
| *** itlinux has quit IRC | 20:13 | |
| *** smatzek has quit IRC | 20:22 | |
| *** kumarmn has quit IRC | 20:37 | |
| *** kumarmn has joined #openstack-trove | 20:39 | |
| *** flwang has quit IRC | 20:40 | |
| *** gouthamr has quit IRC | 20:45 | |
| *** itlinux has joined #openstack-trove | 20:45 | |
| *** itlinux has quit IRC | 20:46 | |
| *** jwcroppe has joined #openstack-trove | 20:52 | |
| *** jwcroppe has quit IRC | 20:52 | |
| *** jwcroppe has joined #openstack-trove | 20:52 | |
| *** itlinux_ has joined #openstack-trove | 21:04 | |
| *** abramley_ has joined #openstack-trove | 21:06 | |
| *** gouthamr has joined #openstack-trove | 21:12 | |
| *** abramley_ has quit IRC | 21:13 | |
| *** abramley has quit IRC | 21:14 | |
| *** kylek3h has quit IRC | 21:16 | |
| *** abramley has joined #openstack-trove | 21:17 | |
| *** abramley has quit IRC | 21:17 | |
| *** flwang has joined #openstack-trove | 21:20 | |
| *** abramley has joined #openstack-trove | 21:21 | |
| *** hoonetorg has quit IRC | 21:34 | |
| *** abramley has quit IRC | 21:43 | |
| *** trevormc has quit IRC | 21:47 | |
| *** kumarmn has quit IRC | 22:04 | |
| *** kumarmn has joined #openstack-trove | 22:07 | |
| *** kumarmn has quit IRC | 22:12 | |
| *** kumarmn has joined #openstack-trove | 22:26 | |
| *** flwang has quit IRC | 22:36 | |
| *** flwang has joined #openstack-trove | 22:37 | |
| *** chlong has quit IRC | 22:37 | |
| *** abramley has joined #openstack-trove | 22:48 | |
| *** abramley has quit IRC | 22:49 | |
| *** itlinux_ has quit IRC | 22:59 | |
| *** kumarmn has quit IRC | 23:17 | |
| *** flwang has quit IRC | 23:22 | |
| *** flwang has joined #openstack-trove | 23:34 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!