16:01:06 <david-lyle> #startmeeting Horizon
16:01:07 <openstack> Meeting started Tue Jul  8 16:01:06 2014 UTC and is due to finish in 60 minutes.  The chair is david-lyle. Information about MeetBot at http://wiki.debian.org/MeetBot.
16:01:08 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
16:01:10 <openstack> The meeting name has been set to 'horizon'
16:01:19 <david-lyle> Hello anyone here today?
16:01:26 <tzumainn> hiya!
16:01:27 <jpich> Hello o/
16:01:27 <t_mazur> hello o/
16:01:27 <rhagarty> hello
16:01:30 <ericpete_> Hiya
16:01:39 <tsufiev> hi
16:02:19 <jtomasek_> hey
16:02:46 <crobertsrh> Hello
16:02:54 <jomara> ahoy
16:03:04 <jcoufal> o/
16:04:16 <david-lyle> The only general item I have for today is https://launchpad.net/horizon/+milestone/juno-2
16:04:36 <david-lyle> j-2 closes on July 24
16:05:37 <david-lyle> lots of reviews and most not already under review are going to likely bump to j03
16:05:45 <david-lyle> s/j03/j-3/
16:06:21 <david-lyle> the sahara panels remain a priority and are getting lots of reviews
16:06:32 <david-lyle> so thanks to everyone on their efforts there
16:06:42 <crobertsrh> Yes.  Thank you!
16:06:59 <tzumainn> is the custom gerrit dashboard useful for seeing the reviews that need to be done?
16:07:09 <david-lyle> the less to scss switch went in and we now anxiously await a bootstrap upgrade, no pressure jtomasek ;)
16:07:26 <david-lyle> tzumainn: I've been using it, so for me yes, thank you
16:07:49 <tzumainn> okay, great - want an updated one?  it doesn't self-update as new bugs are added to juno-2
16:07:52 <jtomasek> david-lyle: I am on it, I'd like to send first review tomorrow
16:08:10 <david-lyle> jtomasek: no worries, whenever it's ready
16:08:14 <david-lyle> thanks
16:08:22 <lblanchard> hi all
16:09:18 <david-lyle> The only other lingering item was a potential mid-cycle meetup, limited interest https://etherpad.openstack.org/p/juno-horizon-meetup, so we may just punt on that
16:09:44 <david-lyle> anyone going to Django Con US? could we arrange something there?
16:10:16 <david-lyle> http://www.djangocon.us/
16:10:27 <jpich> Without the location it's hard to say anything. Going to the US is a different budget and time requirement :)
16:10:39 <david-lyle> jpich: understood
16:11:03 <david-lyle> I think if we plan on a midcyle, we need to have it mostly in place by the summit and give people time to plan
16:11:12 <jpich> It'd be cool if you can manage something at DjangoCon US though, maybe start a habit of meeting up in cons all over the world :-)
16:11:19 <jpich> Agreed!
16:11:23 <jpich> or soon after
16:13:10 <david-lyle> #topic Open Discussion
16:13:24 <david-lyle> there were no items added to the agenda so we'll open it up
16:13:53 <tsufiev> i'd like to ask about this one: http://lists.openstack.org/pipermail/openstack-dev/2014-July/039448.html
16:13:58 <david-lyle> I don't see radomir today, any one have an update on the javascript extraction?
16:15:01 <david-lyle> tsufiev: I haven't had time to dig into that too deeply, the benefit of signed cookies is HA support and ease of use
16:15:10 <david-lyle> the downside is certainly the 4K limit
16:15:40 <tsufiev> david-lyle, and some security issues highlighted in that letter
16:15:46 <david-lyle> Keystone wants to move to a model of non-persistent tokens by default, which causes us to need a session store backend on the horizon server
16:16:33 <david-lyle> If Horizon is not configured to use SSL, I think all solutions are perilous
16:16:51 <tsufiev> agree
16:17:24 <david-lyle> I imagine needing to move to memcached being the default session store
16:17:34 <tsufiev> david-lyle, is there some mail thread about keystone moving to none-persistent tokens?
16:18:18 <david-lyle> tsufiev: I have to track it down, they talked about it at the summit and I was given a heads up that it's in flight
16:18:19 <tsufiev> david-lyle, yes, afaik, it also provides HA, but perhaps a bit harder to set up
16:19:00 <jpich> http://lists.openstack.org/pipermail/openstack-dev/2014-July/039398.html or is that something else again?
16:20:37 <david-lyle> the short story on the non-persistent tokens is, keystone wants to not maintain the tokens server side, so once we get a PKI or PKIZ token, we can no longer just use the hash of it and pass that around, because keystone won't be able to map that hash to a token on their side
16:20:52 <david-lyle> jpich: somewhat related, but yet something else
16:20:55 <david-lyle> :)
16:21:35 <david-lyle> I need to get a realistic timeframe on these changes from keystone because I don't think they just effect Horizon
16:21:43 <jpich> I see. Thanks david-lyle! I just noted the "tokens short-lived to 10 minutes" point in that thread
16:22:32 <tsufiev> david-lyle, thank you for the short explanation. Issue with storage backend has more in it that i thought :)
16:22:52 <tsufiev> s/that/than/
16:23:20 <david-lyle> potentially a fair amount of work showing up at our door
16:25:04 <jpich> yay
16:25:31 <david-lyle> opportunities
16:27:36 <david-lyle> Anything else? Or dare we end early?
16:27:40 <tzumainn> here's an updated gerrit review dashboard if people want to see the stuff added to j-2 over the last week: http://goo.gl/8x5gZa
16:29:46 <david-lyle> thanks tzumainn, I think it's getting smaller :)
16:29:57 <tzumainn> np!
16:30:05 <tzumainn> it does look smaller than I had feared
16:31:19 <david-lyle> alright, quiet day, everyone's busy reviewing :) Let's end early. Have a great week everyone!
16:31:22 <david-lyle> #endmeeting