14:00:19 #startmeeting magnetodb 14:00:20 Meeting started Thu Dec 11 14:00:19 2014 UTC and is due to finish in 60 minutes. The chair is isviridov. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:00:21 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:00:24 The meeting name has been set to 'magnetodb' 14:00:35 Who is with us today? 14:00:54 Hello nunosantos 14:00:58 hi, guys 14:00:59 hello 14:01:08 hello 14:01:09 o/ 14:01:11 hi 14:01:25 What is the weather in Boston now? 14:01:35 nunosantos any snow? 14:01:36 Thanks isviridov 14:02:00 0/ 14:02:08 \0 14:02:34 Ok, let start 14:02:47 o/ 14:02:52 no major snow yet. cold though 14:02:59 The agenda for today https://wiki.openstack.org/wiki/MagnetoDB/WeeklyMeetingAgenda#Agenda 14:03:36 nunosantos there was a lot of snow here, but now mostly all melt 14:03:46 #topic Go through action items isviridov 14:04:07 Seems there are no action items from last time 14:04:15 http://eavesdrop.openstack.org/meetings/magnetodb/2014/magnetodb.2014-12-04-14.00.html 14:04:53 I believe we have what to discuss in Open discussions part 14:05:07 #Open discussion isviridov 14:05:24 o/ 14:05:27 achudnovets would you like to start? 14:05:44 * isviridov doesn't see charlesw 14:06:25 ok 14:06:34 Andrei V. Ostapenko proposed stackforge/magnetodb: Adds table_id field to table description https://review.openstack.org/140740 14:07:05 we have an idea to change monitoring API url 14:07:38 and use something like this /v1/admin/monitoring/tables?tenant_id=bla-bla 14:07:51 do you have any doc? 14:07:52 charlesw hey, we are discussing exposing the statistics per table, but in comfortable way for statsd 14:07:58 not yet 14:08:15 it's just an idea now 14:08:36 charlesw there is no doc yet, but there is a problem we would like to hear your oppinion about 14:08:52 response will contain uuid, table name, tenant id and table stats 14:09:33 response can be filtered by tenant, table id, table name etc 14:09:58 big question is auth for this api 14:10:16 personally I would prefer to use keystone auth 14:10:18 achudnovets, what does admin mean in /v1/admin/monitoring/tables?tenant_id=bla-bla? 14:10:41 admin is just part of url 14:10:45 like 'data' 14:11:11 I have same question. Why url is not hierarchical? 14:11:11 but we have data, management monitoring 14:11:21 it is type of aplication 14:11:21 +1 to Dima 14:11:41 admin is something new to me 14:12:12 we can stick all non-data url under 'admin' url part. Or we can live it as it is 14:12:40 yes we can but why? 14:12:51 main idea is to use single url for all monitoring tasks 14:12:51 Before we proced with url, let us define the problem. 14:13:01 do we have some reason for that? 14:13:11 achudnovets: why not just /v1/monitoring/...? 14:13:11 dukhlov let me clarify 14:13:39 ikhudoshyn current Monitoring API is designed for user, and really difficult to use by monitoring tools like collectd, nagios so on. Mostly because of dependency to to keystone and necessity to manage credentials. So, the idea is to introduce an api for collecting this data under the cloud 14:13:42 ikhudoshyn: it's ok for me 14:14:38 isviridov: ic 14:14:55 isviridov: I would like to say the main problem is that client needs to know all tenants to be able to monitor them 14:15:18 ikhudoshyn for /v1/monitoring we still have to manage authorization and don't have a tenant_list feature, to see statistics over all mdb 14:15:24 isviridov, it is authentification staff and should be configurable 14:15:31 achudnovets just mentioned, thank you 14:16:00 dukhlov ikhudoshyn charlesw let us move back to problem 14:16:02 isviridov: than it looks like a completely separate app 14:16:20 with a separate endpoint, not just url 14:16:26 The suggested solution is one more api, anu other ideas? 14:16:39 +1 for another api 14:16:47 -1 14:16:52 -1 14:17:13 again, what is the problem? 14:17:18 achudnovets dukhlov ideas? 14:17:50 I think it can be just part of existing API but it should be accessible only by users with admin role 14:18:03 dukhlov again, current Monitoring API is designed for user, and really difficult to use by monitoring tools like collectd, nagios so on. Mostly because of dependency to to keystone and necessity to manage credentials and no ability to have a tenant list.\ 14:18:14 dukhlov: seems like the problem is we need to make /v1/monitoring// url 14:18:31 ikhudoshyn exactly 14:18:46 ok, so 2 problems - authentification and how to get tenant list 14:18:49 right? 14:19:09 achudnovets it means we need to have keystone call before calling mdb. F.e. in nagios 14:19:19 so my idea is /v1/monitoring/tables with filters. Only admin can use it. 403 in all other cases 14:19:26 dukhlov, +1 14:19:36 dukhlov let us start from these two 14:19:41 isviridov: yes 14:19:57 achudnovets: how do you know he is an admin? 14:19:58 authentification should be configurable, we can switch off it if it is needed 14:20:24 dukhlov right, but to switch off/on we need it separate first 14:20:31 isviridov: admin role in "magnetodb" tenant 14:20:45 polisy.json 14:21:01 achudnovets: i.e. we still need request to keystone first? 14:21:03 * policy.json 14:21:11 about tenant list... we need provide path to monitored resourse 14:21:13 ikhudoshyn: yes 14:21:15 and that is all 14:21:34 achudnovets anyhow it involves keystone, it is the same we have now. You can call keystone for tenant list and call mdb n-times for data. 14:21:44 dukhlov: the idea is to grab all stats in a single request 14:22:17 ikhudoshyn it is more optimization, but with specific api we can do a lot of optimizations 14:22:18 ok let /v1/monitoring will return all tennants metrics 14:22:57 isviridov: partially agree. You'll need very simple keystone config for /v1/monitoring/tables valiant 14:23:04 *variant 14:24:20 dukhlov what about authorization if so? 14:24:47 miqui_ welcome to meeting 14:24:49 achudnovets: did i get it right, now we have a long and complex way to do it, and separate api will give us another one, fast and convenient? 14:25:44 hi isviridov... 14:26:20 ikhudoshyn: what do you mean "separate api"? new service? 14:26:33 yep 14:26:33 ikhudoshyn yes, or better to say reasonable for monitoring purposes 14:26:38 test 14:26:43 dukhlov: passed 14:26:44 dukhlov test 14:26:46 dukhlov: pong ) 14:26:47 Is it based on the idea we discussed last week, using domain admin role? 14:28:33 charlesw: yep, it's about monitoring api. 14:29:20 test2 14:29:27 dukhlov: passed2 14:30:21 "/v1/monitoring/tenants/tenant_id" for specific tenant 14:30:39 * isviridov what a nice formatting 14:31:03 "/v1/monitoring/tenants/tenant_id/tables/table_name" for specific table 14:31:42 dukhlov: too long 14:31:49 ikhudoshyn: +1 14:32:46 we can deploy two different pipelines for different urls but use the same application 14:33:06 too long but it is path to resource to be monitored 14:33:09 dukhlov: -1 for the same app 14:33:13 maybe remove the “tables” part, just tadd the table name adter tenant_id 14:33:22 * add 14:33:42 dukhlov: I think we can use single url for monitoring. 14:34:31 nunosantos, -1, not by openstack convention 14:34:52 url like /v1/monitoring/ or /v1/monitoring/tables 14:35:25 why not /v1/monitoring/tenants? 14:35:46 what about keeping url simple and passing additional params in the http headers? 14:35:46 because it's not info about tenants 14:35:49 dukhlov I don't like the way of mixing existing functionality and hacking with deployment. 14:35:55 or part of a json payload? 14:36:22 miqui_: it will be GET request with params 14:36:33 k.. 14:38:41 if we'll have monitoring with data API I'd like to use keystone auth for it. If it will be separate app, then we can use any type of auth 14:38:59 achudnovets: +1 14:40:16 +1 for a different app. Ideally we should not mix user apis with management apis. 14:40:24 * isviridov do we have any other topics to discuss/ 14:40:41 achudnovets, what do you mean in "monitoring with data API" ? 14:41:17 ominakov: just like current implementation 14:42:37 isviridov, I have a question regarding incubation of mdb? Are we planning to apply for incubation? If yes, when? What benefit do we get by becoming an incubated project? 14:43:20 if the big picture goal it to become an openstack core project.. then this is a big first step.. 14:43:26 achudnovets, what do you mean by any type of auth? Do you mean we need to come up with a separate authN other than keystone? 14:44:50 ajaya yes we are planning to do it, I really hoped to do it last cycle, so the plan is this cycle. 14:45:02 charlesw: yes. I think ikhudoshyn and isviridov means that we can use non-keystone auth for monitoring. Is it right? 14:45:53 achudnovets: possibly 14:46:02 ajaya the main benefit is some king of endorsement of project 14:46:26 isviridov, so if all goes well then mdb would be an incubated project by end of kilo? 14:48:15 ajaya we will see, the incubation process and status is changing now, but teh goal is to reach this status whatever it is. 14:48:26 ajaya more details http://lists.openstack.org/pipermail/openstack-tc/2014-November/000887.html 14:48:39 isviridov, let us know what we all can do to get there 14:49:24 charlesw sure 14:49:49 Where are we with monitoring? 14:50:03 achudnovets could you summarize? 14:50:17 ok 14:50:56 +1 on incubation, am late in the game..but i'll do what i can... 14:52:03 miqui_ great to see you with us. What company are you working on? 14:52:51 i work for Hewlett-Packard 14:53:48 Cool, it helps with diversity of team, what is one of requerements. Waiting for your patches :) 14:54:28 so the idea is to change monitoring API url and create separate app for it. or we can change our existing controllers for monitoring api. I can prepare spec for it and then we can discuss it in gerrit 14:55:07 miqui, what location? I'm with Symantec, Boston 14:55:11 Andrei V. Ostapenko proposed stackforge/magnetodb: Adds table_id field to table description https://review.openstack.org/140740 14:55:27 #action achudnovets create a spec for integration with external monitoring systems 14:55:30 charlesw: Atlanta 14:55:41 * isviridov charlesw and miqui_ are going to have some beer 14:55:47 * isviridov seems not 14:56:49 * isviridov 4 mins left 14:58:12 Countdown 14:58:20 3 14:58:24 2 14:58:28 1 14:58:57 Thank you fro comming, see you in IRC and ML 14:59:10 #endmeeting