15:02:13 #startmeeting manila 15:02:14 Meeting started Thu Dec 15 15:02:13 2016 UTC and is due to finish in 60 minutes. The chair is bswartz. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:02:15 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:02:17 The meeting name has been set to 'manila' 15:02:21 hello all 15:02:24 hello 15:02:25 hi 15:02:25 hello 15:02:29 hi 15:02:31 hi 15:02:35 hi 15:02:43 hi 15:02:49 hello o/ 15:03:03 hmm looks like we don't have an agenda for today 15:03:09 >_< 15:03:31 o/ 15:03:44 open discuss 15:03:51 I'll just use the remaining topics from last week 15:04:06 first thing though 15:04:10 #topic announcements 15:04:15 O-2 is today 15:04:29 high priority spec freeze is today 15:04:37 today? 15:04:45 yes 15:05:28 we still have 3 unmerged specs 15:05:55 unless we're ready to merge them now, we'll have to kick stuff out of the release 15:06:30 I think we still have a day for them 15:06:39 I am working on it 15:06:42 I should also point out that due to how short Ocata is, unlessimplementation is far along on these specs, they still probably don't stand a chance of landing in Ocata 15:07:07 so let's start with discussion of remaining specs 15:07:11 #topic race conditions 15:07:22 ready to merge after you fix typo in commit msg 15:07:27 #link https://review.openstack.org/#/c/396255/ 15:07:45 bswartz: small update required, should be fast one 15:07:53 bswartz: can fit deadline 15:08:03 changed 15:08:26 can we merge this one or is more work required? 15:08:28 actually not )) 15:08:29 https://review.openstack.org/#/c/396255/13..14/specs/ocata/eliminate-race-conditions.rst 15:08:37 bswartz: needs to address vponomaryov 's concern 15:09:00 I have design questions about access-list fixes spec 15:09:16 but I think we should work on this in ocata 15:09:23 vponomaryov's comment is about testing 15:09:28 fundamental approach seems right 15:09:44 but design issues are more than just work it out in code review 15:09:52 My stance is that the only required testing is regression testing -- things should not get worse 15:10:07 yes there are more tests we can add but those are out of scope 15:10:42 i'm back today, so i will take a look at tbarron's concerns 15:10:57 gouthamr: and I could just be confused :D 15:11:02 tbarron: I want to voer that topic next 15:11:14 wb gouthamr 15:11:20 bswartz: sorry, thought you'd moved to it 15:11:31 I want to close on race conitions 15:11:37 thanks bswartz... tbarron: nope, i did have what you suggest in code, but my statements on the spec may be misleading.. 15:11:49 if more work is needed I can do it today but if not I'd like to just merge it 15:12:00 * dustins skids into meeting 15:12:09 I think all the cores have read it 15:12:17 * bswartz marks dustins tardy 15:12:52 bswartz: I think there is an overall confusion about the spec's purpose, and I agree with vponomaryov 15:13:00 bswartz: your spec title is "Eliminate race conditions" 15:13:19 bswartz: but there are a few use cases listed, and we need rally and other tests to capture other race conditions and fix them 15:13:29 ganso: are you concerned about when the work would be Done? 15:13:34 bswartz: so, it should be in fact titled "Mechanism for elimination of race conditions" 15:13:43 ganso: are you suggesting a change to the title? to the problem statment? 15:13:48 bswartz: as they will still exist once what's in the scope of the spec is implemented 15:14:32 bswartz: I initially assumed that testing, enumerating the race conditions etc were going to be in scope 15:14:36 bswartz: but you stated that they are not 15:14:39 fwiw, it's more of an "architecture" or "high level design" or "specification for eliminating" than a "mechanism" 15:14:46 I see 15:14:48 and I'm fine with that 15:14:57 well we want to do all of that but we have to face the reality of time 15:15:02 I am fine too, but I think it is good to address the confusion 15:15:05 and ask what is achieveable in ocata 15:15:15 mechanism should be switchable in a good architecture 15:15:29 bswartz: then spec should say what we will do, so, I agree with ganso 15:15:43 tbarron: I'd argue that the mechanism is the architecture 15:16:01 if we have to scope what will get done we won't start 15:16:04 okay please put some more -1 on that spec and I'll push another draft after the meeting 15:16:13 bswartz: ok 15:16:17 bswartz: I won't dig in on that but I disagree :) 15:16:23 nobody go to sleep without reviewing PS15 15:16:30 :-/ 15:16:37 alright moving on 15:17:09 * bswartz curses gerrit 15:17:18 #topic access rules 15:17:39 #link https://review.openstack.org/#/c/399049/ 15:17:47 * tbarron already spoke out of turn 15:18:21 #link https://review.openstack.org/#/c/399049/ 15:19:03 Looks like I forgot to put my vote on here 15:19:30 so i think denies can race with allows here and it's OK if we re-read the DB before calling into the driver, but 15:19:39 the state machine may need a little revision 15:19:56 that's a design issue, not just a coding issue 15:20:04 tbarron: have you discussed that with gouthamr 15:20:10 but the fundamental approach is good and we should proceed 15:20:10 I thought that case was addessed 15:20:20 i brought this stuff up while he was on vacation 15:20:27 I can reread that part of the sepc 15:20:56 gouthamr? 15:21:01 it may just be a matter of wording and my understanding, but e.g. I think we need a 'new'->'denyiing' transition 15:21:11 tbarron: you do have that.. 15:21:17 tbarron: +1 15:21:22 nothing we can't work out 15:21:26 gouthamr: I didn't see it 15:21:34 so this may just be my misreading 15:21:50 tbarron: let me take a look and update it. 15:22:08 I see applying to denying 15:22:40 gouthamr: why don't you add that there will be a state-machine diagram like what bswartz is providing in the devref, where it is kept up to date as implementation is done 15:22:51 i asked bswartz for same in his spec 15:22:56 tbarron: yep, good idea 15:23:05 reality is that these need to be up-to-date as manila evolves 15:23:11 tbarron: you mean the diagram will be moved to the devref and maintained there right? 15:23:15 tbarron: i meant to add that to the devref anyway after the implementation 15:23:16 yes 15:23:20 ok 15:23:24 any other issues with this spec? 15:23:33 yeah, tooz 15:23:35 :P 15:23:41 what about it 15:23:59 it's not gotten a lot of review attention 15:24:11 how does that afect the spec 15:24:17 gouthamr: working top down with other stuff to do too :D 15:24:42 we'll get the implementation reviews done 15:24:57 bswartz: sure, it's a dependency in both the specs we discussed so far.. 15:25:11 I'm asking about the spec now 15:25:20 can it be merged or does it need another patchset? 15:25:42 no -1 - no concerns )) 15:25:45 needs another patchset 15:25:52 it's getting late for some core reviewers and we have a deadline today 15:26:09 i can work my issues out w/ gouthamr today 15:26:16 okay 15:26:44 remember that vponomaryov, toabctl, and ganso are all someone further east of us 15:26:54 not to mention gouthamr who is on the other side of the planet 15:27:00 :P 15:27:04 lol 15:27:06 i'm on the same side as you are now 15:27:07 aand on vacation ) 15:27:11 oh you got back? 15:27:26 okay hope you're not too jetlagged gouthamr 15:27:28 yes, this morning :) 15:27:34 vponomaryov will be able to review specs in about 4-5 hours 15:27:40 okay 15:27:43 let's move on then 15:27:46 #topic ipv6 15:27:56 how do you think of this vponomaryov 15:28:06 #link https://review.openstack.org/#/c/362786/ 15:28:32 vponomaryov: could have been updated according to comments, for the moment it mixes two different goals under the one spec 15:28:43 details can be seen in manila chat 15:29:09 it should become simpler that it is now 15:29:19 separating part of logic to different spec 15:29:24 that will be in pike+ 15:29:31 if will be in general 15:29:41 s/that/than/ 15:29:43 vponomaryov: i think those two goals - assuming they are two - came from bswartz asking how to support use of v6 and v4 at the same time 15:30:04 so if tommylikehu_ does what you suggest, the question is whether bswartz will -1 it 15:30:16 yeah I though this was covered last night but I don't see the spec updated acordingly 15:30:36 bswartz: another conversation this morning provides different guidance 15:30:47 let's have about 6 hours before we close the doors 15:30:50 the key here is that our mechanism for supporting v6 in network plugins is to make network plugins aware of both v4 and v6 15:31:06 sorry I haven't read the scrollback in manila channel 15:31:19 * bswartz reads 15:31:45 is it just a matter of the word support vs enabled? 15:31:54 no 15:32:09 bswartz: it is matter of supporting multiple networks/subnets "at once" 15:32:33 vponomaryov: can't a subnet have v4+v6 together? 15:32:41 bswartz: no 15:32:43 or do I misunderstand neutron 15:32:49 bswartz: IMO, it's not OK to to do v4 or v6, but not both. 15:32:51 bswartz: you asked the question I did 15:32:56 bswartz: neutron subnet has only one Ip version 15:33:02 * bswartz curses 15:33:19 use case of exporting both ipv4 & ipv6 and having compute instances choose either to do mount is not suported. 15:33:23 on eneutron network canhave two subnets, each for each Ip versions 15:33:30 I see 15:33:43 vponomaryov can a "port" have 2 subnets? 15:33:51 to support it we'd have to have multiple subnets/gateways per share network 15:33:56 the spec shouldn't need to include making the network plug-ins support both 4 and 6. Similar to the drivers it should just be a good enough spec that we can add support once this framework is in place. 15:34:01 bswartz: yes, it can be related to several subnets 15:34:15 bswartz: we use that feature of port in generic driver 15:34:36 okay 15:34:50 markstur: but it covers case to support IPv6 in network plugins 15:34:52 I think I understand what the neutron guys were thinking then 15:35:02 i can use same port from compute instance to mount via ipv4 or mount via ipv6, manually setting up exports 15:35:33 okay so we have to make a decision 15:35:45 it seems like we're not ready to deal with the issues around network plugins and v4+v6 15:35:53 it covers ipv6 for drivers, but that doesn't mean all the work will be done to enhance the drivers 15:35:57 vponomaryov: it's the "subnets" that are IPv4 or IPv6 specific, not the neutron "networks" 15:36:04 so do we leave that unspecified, or do we specify some limiteed behavior that we know we can implement? 15:36:24 bswartz: I think we can go with "limited" for now 15:36:44 ganso: what should that lmited behavior be? 15:36:49 bswartz: we need to understand the endgame, even if there is an intermediate step 15:37:13 bswartz: still support only one network-subnet per network plugin 15:37:21 bswartz: if we know we can achieve v4+v6 network plugin in the future, we can proceed supporting only one for now 15:37:24 cknight: I think we've missed that boat -- as we don't understand, and we're out of time 15:37:26 bswartz: but allow it to be either IPv6 or IPv4 15:37:30 bswartz: in other words, not both at the same time 15:37:48 bswartz: then the spec should wait 15:38:01 I don't think it's a good idea to punt the whole spec -- ipv6 is valuable and important 15:38:21 bswartz: that is why I am saying to exclude part of it 15:38:22 what about just doing dhss=false ipv6 -- does that make sense? 15:38:25 okay let's keep working on it then and try to understand the correct solution now 15:38:31 markstur: +1 15:38:33 cknight: if the end game means supporting ipv4 and ipv6 export locations from the same share to compute instances who can choose either at will then we have to redo our plugin arch before allowing any ipv6 access by that standard 15:38:58 dhss=False will not touch plugin, that will further reduce the scope 15:39:06 s/plugin/plugins 15:39:08 yeah I think we know that eventually there must be a way to create share servers with v4+v6 15:39:11 bswartz, tbarron: yes, ipv6 is valuable, but I'm hesitant to plunge forward in the dark if we don't know where we're going. 15:39:15 ganso: +1 i think this is a saner approach 15:39:23 even if we have only ipv4 network plugins for dhss=true (I was hoping we'd at lease know how we want to do that though) 15:39:26 it's not clear if that should be done w/ multiple plugins or with smarter plugins that understand both 15:39:52 cknight: I'm willing to use the rest of the meeting to reach the answer 15:39:59 restrict to DHSS=False for now? 15:40:16 tbarron: you mean make share servers limited to ipv4/ 15:40:34 yes, don't claim support for ipv6 with share servers now 15:40:38 yes, it's an option 15:40:52 gouthamr technically share servers already do support ipv6 15:40:59 right 15:41:03 at least the standlone network plugin has v6 support 15:41:09 but not tested 15:41:12 bswartz: technically, yes, but not our neutron network plugins 15:41:13 but not v4 at the same time 15:41:19 so, we can work on that 15:41:29 lets decide how we will eventually support both 15:41:34 the options seem to be: 15:41:45 and cannot have v6 at the same time without plugin re-architecture 15:41:47 1) separate network plugins, one for v4 and one for v6 15:42:12 2) modify network plugins to handle 2 subnets where necessary for v4+v6 15:42:38 The drivers need to know if the configured plug-in will support 4 or 6 or both 15:42:47 (2) requires rearchitecture of getting network info, that is out of scope for adding general IPv6 support 15:43:04 markstur: that's a driver interface issue which is technically independent of the network plugin interface 15:43:20 vponomaryov: we can decide it's what we want to do, but postpone that work until pike 15:43:23 vponomaryov: but that is related to DHSS=True in general, for all drivers, that could be done in pike, if we consider it to be necessary to achieve what we want 15:43:24 Is there a downside to #2 other than that it may be a lot of work? 15:43:34 what we don't want is to leave it undecided 15:43:45 markstur: it's already descibed in spec 15:44:30 tbarron: good point 15:44:42 We don't have a final spec for #2 15:44:48 I was leaning towards a different flavor of (2) where neutron simply did v4+v6 in one subnet 15:45:06 but since that's not possible it seems like we could still do it, albeit with more effort 15:45:07 tbarron: it is a LOT of work 15:45:21 * tbarron thanks vponomaryov for signing up 15:45:30 lol 15:45:31 can we just push that part to pike and do the easy stuff in ocata? 15:45:35 bswartz: Let's consider the user experience. A user should know from a share type that a share will be available on v4, v6, or both. And a share of that type should report corresponding export locations. We should reject any option that doesn't eventually get us there. 15:45:42 vponomaryov: so we should maybe not decide immediately ... 15:45:59 cknight: both options on the table allow us to do that 15:46:04 vponomaryov: I am interested in this issue though and don't want to just dismiss #2 without investigation 15:46:06 I think the user-facing part of the design is clear 15:46:27 what's unclear is what the admin will need to put in the conf file to get DHSS=true+v4+v6 15:46:44 bswartz: Having separate network plugins can do that? 15:46:51 cknight: yes 15:46:55 cknight: so does that imply share network will have both ipv4 and ipv6 subnets if both familiies are in use? 15:46:56 cknight: that's option (1) 15:47:29 gouthamr: does #2 tie in any way with your spec for supporting multiple subnets in share networks? 15:47:31 bswartz: both options about supporting multiple subnets 15:47:38 bswartz: there should be other options 15:47:50 vponomaryov: what do you propose? 15:47:58 bswartz: support any IP version for single network 15:47:59 option #1 may be more expedient but having to configure 4 plugins (2*user, 2*admin) could be a pain and potentially confusing 15:48:21 no matter what we'll end up with 2 or more subnets thanks to neutron's design 15:48:37 bswartz: so, we "fix" existing network plugns to be able to work with "single" network-subnet of any Ip versions if we have issues with it 15:49:03 vponomaryov and when we want both together how to we modify the archirecture? 15:49:10 and allow access rules be of any IP version that is related to used network 15:49:37 bswartz: share-network interface, config-interface, share-manager logic 15:49:42 vponomaryov: that doesn't satisfy the contract of the API 15:49:53 bswartz: all of above for supporting multiple network-subnets 15:50:06 users will expect dual v4+v6 access to shares 15:50:19 it is separate goal 15:50:27 not general support of IPv6 15:50:40 yes but we're making a decision on that now to unblock the spec 15:50:41 which can be the only type of networks 15:50:59 we can explcitly not implement it 15:51:04 but we will specify what we plan to do 15:51:33 let's talk about downsides 15:51:48 (1) has the downside that it's ugly from a config perspective 15:52:00 +1 15:52:03 we already have 2 plugins -- one for users and one for admin export loations 15:52:16 (1) would mean having 3 or 4 plugins per backend 15:52:42 on the plus side (1) gives you a ridiculous amount of flexibility 15:52:55 :) 15:52:56 and confusion about plugins is already a disincentive for deployers to do DHSS=True 15:53:00 you could use standalone plugin for v4 and neturon plugin for v6 (possibly) 15:53:12 ganso: i need a rehash at all the discussions that have been happening around this - i might need to update the mutiple subnets spec with the feedback here - currently, the spec proposes multiple subnets with a tie-in to AZs 15:53:27 the downsides to (2) seem to be that it's more work and less flexible 15:53:40 however (2) might lead to better experience for admin 15:53:47 and support 15:54:09 bswartz: or we can have both approaches )) 15:54:19 how ? 15:54:21 bswartz: so deployer choose one of them to use ) 15:54:31 taking away choices leads to happier customers -- apple teaches us this 15:54:44 vponomaryov wants to drive me out of the support maniila in openstack business :D 15:54:50 bswartz: you call deployer a user? 15:55:12 they are the kind of user who buys openstack support 15:55:21 vponomaryov: we care about experiences of both end users and deployers/admin users 15:55:46 although when the 2 are in conflict we prioritize the end user 15:55:49 bswartz: it is an option anyway 15:55:55 I do not say I am for it 15:56:26 I'm in favor of (2) still 15:56:42 but we don't know how much work that is, right? 15:57:02 we have reason from vponomaryov to believe it's not at all trivial 15:57:06 bswartz: it is end-goal, current spec is intermediate goal 15:57:10 keep a single plugin, and make plugins handle both -- however declare that in the short term it doesn't work 15:57:22 nothing will be trivial 15:57:25 how much time do we left for this code job? 15:57:35 5 weeks minus holidays 15:58:00 We do not have holidays in china 15:58:07 wow )) 15:58:10 err 6 weeks minus holidays 15:58:12 sounds great 15:58:21 :(.. 15:58:25 tommylikehu_: what about chinese new year?:) 15:58:51 vponomaryov: you review up to ukranian xmas and we'll pick it up afterwards :D 15:58:54 let me check 15:58:57 it 's 6 weeks to feature freeze, but proposal freeze is in 4 weeks 15:59:14 okay we're out of time 15:59:27 tommylikehu: I think we're going to stick with what we talked about last night 15:59:47 #2 15:59:51 please update the spec to say that plugins should be able to support either or both v4 and v6 15:59:59 ok 16:00:09 bswartz: does it mean to support any amount of subnets? 16:00:12 but it's acceptable for plugins to simply fail to support both 16:00:19 vponomaryov: just 2 I think 16:00:43 we'll leaev the improvements to neutron plugins out of scope 16:00:45 but having 2 subnets is not in O? 16:00:52 markstur: correct 16:00:57 okay I'm going to end the meeting 16:01:06 everyone review the high priority specs until they merge 16:01:07 thankyou 16:01:17 anything not merged today is out 16:01:26 #endmeeting