14:00:00 <abhishekk> #startmeeting glance
14:00:00 <opendevmeet> Meeting started Thu Dec  2 14:00:00 2021 UTC and is due to finish in 60 minutes.  The chair is abhishekk. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:00:00 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
14:00:00 <opendevmeet> The meeting name has been set to 'glance'
14:00:03 <abhishekk> #topic roll call
14:00:07 <abhishekk> #link https://etherpad.openstack.org/p/glance-team-meeting-agenda
14:00:10 <abhishekk> o/
14:00:27 <whoami-rajat__> Hi
14:00:48 <abhishekk> lets wait couple of minutes for others to join
14:01:56 <rosmaita> o/
14:02:52 <croelandt> o/
14:03:08 <abhishekk> cool, lets start, others will join in between
14:03:16 <abhishekk> #topic release/periodic jobs update
14:03:22 <abhishekk> Milestone 2 - 5 weeks away
14:03:47 <abhishekk> We are going to target project-manager role this milestone and other specs if approved
14:04:29 <abhishekk> Most of the members will be on leave/PTO this time, so not sure how much we will achieve
14:04:50 <whoami-rajat> sorry I'm interrupting but project-manager role first needs to be implemented by keystone right?
14:05:04 <abhishekk> I don't think so
14:05:38 <abhishekk> it will just need to modify keystone-manage to add it in hierarchy in between admin and member
14:05:59 <abhishekk> IMO if we want to test it we can do it manually by using some keystone commands
14:06:21 <abhishekk> this is my understanding though
14:06:37 <whoami-rajat> but that code first needs to exist in keystone right?
14:06:40 <rosmaita> that sounds OK, if it's not implemented yet in keystone, it just won't do anything
14:06:52 <whoami-rajat> but maybe I'm not too familiar with the implementation perspective
14:06:54 <rosmaita> well, the tests will have to create the role and modify the hierarchy
14:07:08 <rosmaita> until keystone does it during bootstrapping itself
14:07:21 <whoami-rajat> ack
14:07:22 <abhishekk> right, but we can test it manually till then
14:07:28 <rosmaita> but it would be available for any operator who wants to do the same
14:07:29 <whoami-rajat> got it
14:07:43 <rosmaita> yeah, i was skeptical at first, but this sounds do-able
14:08:01 <abhishekk> I think so as well, will try it this week
14:08:17 <rosmaita> the modified goal was accepted by the TC, so i guess openstack is committed to the project-manager being a thing
14:08:44 <rosmaita> (hopefully no one will change their minds)
14:08:53 <abhishekk> right, and we need to implement/support the same in Yoga only
14:09:12 <abhishekk> fingers crossed to not have Sr manager :D
14:09:32 <abhishekk> Ok, moving ahead
14:09:33 <rosmaita> the only problem i see is how to handle the checkstring
14:10:09 <rosmaita> because any calls that would be done by a project manager can also be done by a project-admin
14:10:22 <rosmaita> but the usual way to handle that is to rely on inheritance
14:10:33 <rosmaita> and only mention 'role:manager'
14:10:44 <abhishekk> yes, that is what I am thinking
14:10:59 <abhishekk> assuming
14:11:00 <rosmaita> but these will need role:manager or role:admin to work in deployments without the 'manager' role
14:11:32 <rosmaita> which is still do-able, you'll just want to refactor at some point
14:11:50 <abhishekk> hmm
14:12:18 <rosmaita> yeah, that complicates the testing, doesn't it
14:12:21 <whoami-rajat> seems quite hacky but i believe we will have same discussion for cinder as well
14:13:38 <abhishekk> just to be sure, you are saying if we configure policy as role:manager and manager role is not configured/added then it should treat it as role:admin ?
14:14:48 <abhishekk> Ok, lets move ahead, I guess we will get clear picture by next week
14:15:04 <abhishekk> Periodic job is all green
14:15:32 <abhishekk> Nothing to worry here
14:15:49 <abhishekk> this reminds me, whoami-rajat your dependency problem is resolved, right?
14:15:56 <whoami-rajat> yes
14:15:59 <abhishekk> cool
14:16:00 <whoami-rajat> thanks for the suggestion
14:16:23 <abhishekk> no worries
14:16:35 <abhishekk> croelandt, next is you
14:16:42 <croelandt> o/
14:16:50 <abhishekk> #topic Glance review da
14:16:53 <abhishekk> #topic Glance review day
14:16:53 <croelandt> So I was thinking of doing a "review party"
14:16:58 <croelandt> like the one rosmaita did with Cinder
14:17:12 <abhishekk> rosmaita, is a party person \o/
14:17:15 <croelandt> basically I'll set up a list of patches in glance/glance_store/glanceclient/glance_specs that I think we should merge/reject/discuss
14:17:24 <whoami-rajat> do you mean festival of XS reviews?
14:17:26 <croelandt> and we'll spend 2 or 3 hours in a call
14:17:38 <croelandt> whoami-rajat: a patch fiesta, call it what you want :)
14:17:48 <croelandt> having 2 or 3 core reviewers there would be nice
14:18:02 <croelandt> I'd send an email to the mailing list to ask people to rebase patches htey care about
14:18:11 <abhishekk> I will be open for any time zone
14:18:13 <croelandt> if you'd like to join, you can add your name to the Etherpad
14:18:20 <rosmaita> (sorry, had a power failure)
14:18:23 <whoami-rajat> we usually have that on 3rd Friday of the month for 2 hours and review all small patches of size XS or S
14:18:29 <croelandt> I think we would be doing it during an American morning/European afternoon/Indian evening
14:18:46 <croelandt> whoami-rajat: yes, I was thinking of destroying the backlog first
14:18:55 <croelandt> and hten maybe have a party every quarter/every cycle
14:19:02 <croelandt> maybe every month!
14:19:09 <abhishekk> ++
14:19:24 <whoami-rajat> sounds good
14:19:28 <croelandt> so yeah, if you're interested, go to point 2.1 in the etherpad
14:19:42 <croelandt> add your name, and I'll pick the most picked option :)
14:19:48 <dansmith> o/
14:20:14 <abhishekk> WC dansmith
14:21:11 <abhishekk> rosmaita, I guess we will be needing you for this review day as dansmith and jokke_ might not be available
14:21:19 <rosmaita> :(
14:21:24 <rosmaita> looking at my calendar now
14:21:37 <croelandt> I'm trying to do it next week so that jokke won't be gone yet :D
14:21:59 <rosmaita> do you have a time yet?
14:22:10 <croelandt> rosmaita: American morning
14:22:20 <croelandt> then we can refine it :)
14:22:36 <abhishekk> I can adjust to any time between 1400 UTC to 1900 UTC
14:22:47 <rosmaita> tuesday is bad for us red hatters, have storage meeting and osp all hands on 12/7
14:23:15 <croelandt> Thursday then?
14:23:30 <croelandt> or Friday
14:23:33 <rosmaita> cinder squad at 1500 utc
14:23:38 <rosmaita> friday looks good
14:23:50 <abhishekk> Works for me as well
14:23:50 <croelandt> I'd do Monday but I have a doc appointment
14:24:00 <croelandt> and the wait time is a month and a half, so I'm not missing that for aything
14:24:05 <abhishekk> jokke_, is not available on Monday
14:24:23 <croelandt> so 2021-12-10?
14:24:43 <rosmaita> that would be my vote, the week of 12/13 is bad for me
14:24:57 <rosmaita> cinder spec freeze and cinderlib release
14:25:24 <croelandt> whoami-rajat: 2021-12-10 is good for you?
14:25:26 <croelandt> jokke_: ^
14:25:53 <whoami-rajat> croelandt, I'm not sure if I'm needed in the glance review festival :P
14:26:12 <rosmaita> whoami-rajat: is friday 12/10 bad for you?
14:26:16 <croelandt> whoami-rajat: we have a few Cinder patches :)
14:26:23 <abhishekk> whoami-rajat, if there are any glance-cinder patches then we might need you :D
14:26:49 <whoami-rajat> ack, i can join :)
14:26:57 <rosmaita> \o/
14:27:19 <abhishekk> cool, thank you
14:27:40 <croelandt> let's say 14:00 UTC?
14:27:57 <abhishekk> croelandt, thank you for taking initiative
14:28:15 <whoami-rajat> +1
14:28:18 <abhishekk> +1
14:28:19 <rosmaita> +1
14:28:27 <abhishekk> sold
14:28:29 <croelandt> 1400 UTC it is
14:28:52 <abhishekk> great, lets move ahead
14:29:05 <abhishekk> # topic Glance Secure RBAC
14:29:48 <abhishekk> Image sharing API is good candidate for manager role, so we will be working/testing the changes in local environment this/next week for the same
14:30:19 <abhishekk> only question is, as it is not yet there in keystone we can not push testing related patches
14:30:55 <dansmith> yeah
14:31:33 <abhishekk> So we can test/run tempest plugin tests locally and push it as WIP/PoC if required
14:32:02 <rosmaita> either that, or add it to devstack
14:32:17 <rosmaita> because the TC says it is going to happen eventually
14:32:30 <dansmith> yeah, could add it to devstack,
14:32:39 <rosmaita> having the role/hierarchy there should not break anyone who's not using it
14:32:43 <dansmith> but the change is likely to be quite small right? just role:member -> role:manager ?
14:32:51 <abhishekk> yes
14:33:11 <abhishekk> and new test class in glance-tempest-plugin
14:33:14 <rosmaita> what does your '->' mean?
14:33:22 <abhishekk> change to
14:33:24 <dansmith> changing role:member to role:manager
14:33:32 <dansmith> for the sharing policy rule
14:33:45 <rosmaita> oh, i thought you meant the devstack patch
14:33:52 <abhishekk> for add_member, delete_member and modify_member
14:33:54 <rosmaita> right, should be easy on the glance side
14:34:12 <dansmith> no, just saying, might not need to do our homework quite so far ahead, even though I applaud the initiative :)
14:34:48 <abhishekk> :D, next thing is glance does not support system token yet, so that support needs to be added
14:35:05 <abhishekk> glance/python-glanceclient
14:35:30 <dansmith> I think the only system api I know of might be unpublicize
14:35:50 <dansmith> and that's phase 3 really, so even less concern over that in the short term
14:36:14 <abhishekk> hmm, but it is target for yoga right?
14:36:48 <whoami-rajat> i think there are 2 things here, system admin -> Yoga, system member and reader -> CC (i guess)
14:36:49 <dansmith> no, glance's only work for yoga is make sure the project personas are working
14:37:04 <abhishekk> \o/
14:38:46 <abhishekk> ok, will get more answers in weekly group meeting about it
14:38:59 <abhishekk> moving to Open discussion
14:39:05 <abhishekk> #topic Open discussion
14:39:34 <whoami-rajat> Hi
14:39:43 <crohmann> If I may drop a question? I am trying to use the web-download import method - so actually the api_image_import task via the web-download. I am able to create tasks just fine, but they only reach the processing state - with literally no indication on what happens. I just need a pointer on where to dig deeper? How can I debug the task execution further?
14:40:09 <abhishekk> crohmann, are you using multiple stores or single store setup ?
14:40:34 <crohmann> multiple. We just converted our config to the new style.
14:40:42 <abhishekk> 2nd is which version you are using, is it master?
14:40:45 <crohmann> It's an Ussuri on Ubuntu Bionic BTW
14:40:58 <dansmith> you're not creating the task directly, right? you're calling import?
14:41:06 <crohmann> I tried both.
14:41:09 <abhishekk> 3rd have you added os_glance_staging_store section in api.conf ?
14:41:53 <dansmith> crohmann: assume you're running glance-api as standalone and not as a wsgi app right?
14:41:59 <abhishekk> and 4th are you running under uwsgi
14:42:05 <abhishekk> or just what dansmith asked
14:42:21 <crohmann> [os_glance_tasks_store]
14:42:21 <crohmann> filesystem_store_datadir = /var/lib/glance/tasks_work_dir
14:42:21 <crohmann> [os_glance_staging_store]
14:42:21 <crohmann> filesystem_store_datadir = /var/lib/glance/staging
14:42:48 <crohmann> we are using wsgi running under Apache.
14:42:54 <dansmith> womp womp
14:43:14 <dansmith> that won't work in U, and will do exactly what you describe: just never run tasks
14:43:39 <crohmann> Uh, that's a bummer.
14:43:58 <rosmaita> i forgot that U was so long ago
14:44:00 <dansmith> the bad news is yep, but the good news is I fixed it some time after that so it does actually work now
14:44:01 <crohmann> I suppose there is no independent thread running - just handling of incoming request.
14:44:08 <dansmith> crohmann: right
14:44:45 <crohmann> Wow ... we wasted some hours an this - but man am I happy to hear we were just holding it wrong.
14:45:15 <dansmith> crohmann: fwiw, I believe the docs for those older releases says "don't do this" (in reference to running as wsgi)
14:45:21 <crohmann> So is there anything but switching to standalone or upgrade to $RELEASE to make this work?
14:45:57 <dansmith> nothing short of backporting all the patches to fix it, but I really really wouldn't for something like this
14:46:51 <crohmann> nah .. we are in the process to upgrading all the way to Xena as quickly as we can. We just wanted to switch our image maintainance tooling to somthing fancier as a side-job ... and then ran into the web-download issue.
14:48:30 <abhishekk> Victoria release, dansmith has fixed this in
14:48:44 <dansmith> https://review.opendev.org/q/topic:%22async-native-threads%22+(status:open%20OR%20status:merged)
14:49:00 <dansmith> there might have been more conflict with the other task stuff so not sure that's really all of it
14:49:00 <crohmann> allright. Be in any case reading https://docs.openstack.org/glance/latest/admin/apache-httpd.html#mod-wsgi I believe running mod-wsgi is not recommended anyways.
14:49:11 <dansmith> but yeah, if you're planning to upgrade, that'd be better
14:49:47 <dansmith> hmm,
14:49:52 <whoami-rajat> so I wanted to discuss regarding the expose store specific info spec
14:49:53 <dansmith> I thought we removed that from the doc
14:50:00 <dansmith> abhishekk: ^
14:50:13 <dansmith> crohmann: our tests run in wsgi mode now, with uwsgi, FWIW
14:51:17 <whoami-rajat> Abhishek has network issues, he is rejoining
14:51:23 <crohmann> whoami-rajat: Sorry - I don't want to take up any more of your time. Thanks dansmith. For the info now and fixing this for V :-)
14:51:32 <dansmith> crohmann: ++
14:51:42 <whoami-rajat> crohmann, no issue, thanks :)
14:52:19 <whoami-rajat> dansmith, and akekane_  had some concerns regarding the spec and I've updated it with the requested details
14:52:23 <whoami-rajat> #link https://review.opendev.org/c/openstack/glance-specs/+/817391
14:52:35 <dansmith> whoami-rajat: I saw it was updated, but haven't looked at the latest version
14:52:48 <whoami-rajat> just wanted to answer any queries or doubts regarding the current proposal
14:53:12 <dansmith> whoami-rajat: I've been awake for 20 minutes, so.. sorry I haven't re-reviewed yet :)
14:53:15 <whoami-rajat> dansmith, ack, no issue, wanted to get your review before you leave :)
14:53:45 <dansmith> whoami-rajat: ack, I have meetings after this but stay on me about it
14:54:00 <whoami-rajat> dansmith, oh, yeah I'm kind of forgetful of timezones sometimes sorry
14:54:05 <dansmith> :)
14:54:19 <dansmith> me too because abhishekk works around the clock
14:54:22 <dansmith> he's timezone-less :)
14:54:25 <akekane__> whoami-rajat, glad that we are in same timezone :P
14:54:54 <whoami-rajat> akekane__, yes, but as dansmith said, you're in all timezones :D
14:55:30 * akekane__ going on another trip now
14:56:03 <whoami-rajat> ok, if there are any question/queries let me know on spec or IRC, will answer/update it as soon as possible
14:56:07 <whoami-rajat> that's all from my side
14:56:10 <whoami-rajat> thanks!
14:56:28 <akekane__> ack, I haven't reviewed latest revision, will do it after the meeting
14:56:34 <akekane__> last 4 minutes
14:56:42 <akekane__> I don't have anything else
14:59:01 <rosmaita> whoami-rajat: please remember to bug me to read your spec
14:59:09 <abhishekk> I thin that's it for today
14:59:11 <abhishekk> thank you all
14:59:19 <rosmaita> actually, that's not your spec
14:59:26 <rosmaita> https://review.opendev.org/c/openstack/glance-specs/+/817391
14:59:28 <whoami-rajat> rosmaita, sure, thanks for the help! :)
14:59:32 <rosmaita> i will have to bug myself
14:59:48 <whoami-rajat> yeah not mine but working closely to get it in
14:59:59 <whoami-rajat> I've a similar one for cinder
15:00:10 <abhishekk> #endmeeting