15:00:50 #startmeeting manila 15:00:51 Meeting started Thu Mar 4 15:00:50 2021 UTC and is due to finish in 60 minutes. The chair is gouthamr. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:52 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:54 The meeting name has been set to 'manila' 15:00:58 o/ 15:00:59 o/ 15:01:05 hi 15:01:05 o/ 15:01:05 o/ 15:01:08 hi 15:01:26 o/ 15:01:36 hi 15:01:40 o/ 15:01:45 courtesy ping: ganso vkmc lseki carloss tbarron felipe_rodrigues 15:02:04 hello everyone, welcome to our second meeting for the day :) 15:02:14 :) 15:02:16 o/ 15:02:23 #topic Announcements 15:02:51 Next week is feature freeze week 15:03:00 #link http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020760.html ([release] Release countdown for week R-6 Mar 01 - Mar 05) 15:03:38 yes, so i need review about my patch:https://review.opendev.org/c/openstack/manila/+/765975 thanks 15:04:17 ack haixin 15:04:44 I'll review it soon :) 15:04:47 thank you, gouthamr 15:04:48 we'd be requesting a release of python-manilaclient for wallaby on 11th March, and merging any feature changes into manila 15:05:00 and manila-ui 15:05:32 we'll talk about some of those changes in a bit 15:06:22 but, thanks to dviroel, we have some new deadlines chalked up for the upcoming release 15:06:32 #link https://releases.openstack.org/xena/schedule.html (Xena project schedule) 15:07:08 :) 15:07:42 The Project Technical Gathering for the Xena release is going to be in the second week on that schedule 15:07:56 April 19-23, 2021 15:08:03 #link http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020778.html 15:08:40 #link https://april2021-ptg.eventbrite.com/ (PTG Registration) 15:09:25 i'm hoping you can all register and attend this virtual event, we are yet to sign up for slots and plan topics 15:09:40 #link https://etherpad.opendev.org/p/xena-ptg-manila-planning (Manila Xena PTG Planning etherpad) 15:09:43 i will register it 15:09:59 thanks haixin 15:10:21 you can put your irc nick down on the etherpad, and bookmark it to add topics in the coming weeks 15:10:49 ok, 15:12:17 it's also election time in OpenStack land 15:12:24 #link http://lists.openstack.org/pipermail/openstack-discuss/2021-March/020797.html ([all][elections][ptl][tc] Combined PTL/TC March 2021 Election Season_ 15:13:09 if you wish to nominate yourself for PTL/TC, this is your cue :) the nomination period ends on March 09 2021 15:13:56 that's all i had in terms of announcements today 15:14:00 does anyone else have any? 15:15:29 then lets dive right in, no new topics have been added to the meeting page, so we'll check on the feature freeze items 15:15:33 #topic Reviews needing feedback 15:15:42 #link https://etherpad.opendev.org/p/manila-wallaby-review-focus (Wallaby cycle review focus etherpad) 15:15:48 how are we doing? 15:16:34 not too shabby, but there's a lot on that etherpad 15:16:40 yep 15:16:43 lets go down the list 15:16:45 support min/max share size limited by share_type 15:16:50 #link https://review.opendev.org/c/openstack/manila/+/765975 15:17:39 i'll try to review this one asap 15:17:41 * tbarron will review that one too 15:17:47 +1 15:17:54 ack ty dviroel tbarron carloss - more the merrier :) 15:17:56 See if there is any room for improvement, thanks 15:18:23 thanks for your patience with this haixin 15:19:05 haixin: could you sign up to review some of the changes on that etherpad? we could use your help 15:19:18 already has a +1 from Dina, thanks disap ++ 15:19:45 ok, i will review other patch by my free time, i will. 15:19:45 alright, next one: 15:19:49 thanks haixin 15:20:20 #link https://review.opendev.org/q/topic:%2522secure-rbac%2522+status:open+project:openstack/manila (Secure RBAC) 15:20:29 #link https://etherpad.opendev.org/p/manila-wallaby-secure-rbac (Secure RBAC review tracker) 15:20:51 this one has a lot, ty for your reviews dviroel carloss 15:21:18 anytime, gouthamr :) 15:21:24 some of those changes need a refresh, but the ones in the first set on the etherpad should be ready 15:21:39 ack 15:21:49 and there are open bugs for some of the flaws 15:22:34 for example: system member and reader roles will not work as expected with the default policy 15:22:43 #link https://bugs.launchpad.net/manila/+bug/1917504 (Context checks in the db layer prevent default RBAC from working correctly) 15:22:44 Launchpad bug 1917504 in OpenStack Shared File Systems Service (Manila) "Context checks in the db layer prevent default RBAC from working correctly" [Undecided,New] 15:24:05 there's a workaround for that bug, however, i do hope we can fix it in the wallaby timeframe 15:25:56 when you turn on the new defaults, you may see that project admins have permissions in some of the APIs to do cross project stuff - these are rough edges we hope to trim 15:26:08 good thing is that we have growing test coverage 15:26:21 however, i'm not sure we'll get everything working by next week 15:27:37 since there's a known and feasible workaround (see the bug notes on LP #1917504) 15:27:39 Launchpad bug 1917504 in OpenStack Shared File Systems Service (Manila) "Context checks in the db layer prevent default RBAC from working correctly" [Undecided,New] https://launchpad.net/bugs/1917504 15:28:01 i still think we can merge these secure defaults, and keep chipping away at this 15:29:04 i do plan to suggest in the release notes that enforce_scope and enforce_new_defaults are going to be experimental in the wallaby cycle 15:29:37 and we'll take backports for any flaws we may find after as test coverage keeps increasing 15:29:59 there's some good patterns for tempest testing elsewhere which we may take a look at and borrow ideas from 15:31:08 next up on that list was OSProfiler 15:31:22 everything for this change has merged in manila/python-manilaclient 15:31:44 #link https://review.opendev.org/c/openstack/manila/+/762725 (Add share server limits) 15:32:04 i owe you a review here, carloss - will do today 15:32:12 thanks, gouthamr! 15:32:25 there are some stuff that must be discussed in the last comments me and carthaca added 15:32:35 so having some more opinions would help us a lot 15:32:42 sure, do we want to do that now? 15:33:21 I guess we can take the discussion to the change and it will grant us more time to go over some more items from the review focus list 15:34:08 sure, works 15:34:12 #link https://review.opendev.org/c/openstack/manila/+/768590 (Zadara Share Driver) 15:34:35 thanks dviroel carloss vkmc for comments on this, looks like the latest change is passing CI 15:35:05 we perhaps look today and see if we can merge this? 15:35:16 agree 15:35:25 good stuff 15:35:29 +1 15:35:34 #link https://review.opendev.org/c/openstack/manila/+/768816 (New Quota control for per share size limit) 15:36:02 this one is carloss and myself, the previous comments about microversioning this change have been made 15:36:33 no other major concerns, i'd like to test it a bit more 15:37:04 yeah, I'll review this too 15:37:29 cool - lets chat on #openstack-manila or on the review, carloss 15:37:36 #link https://review.opendev.org/q/topic:%22bp%252Fadd-security-service-in-use-share-networks%22+(status:open%20OR%20status:merged) (Add security service update for in-use share networks) 15:38:03 #link https://review.opendev.org/c/openstack/manila-image-elements/+/775242 (Add OpenLDAP to manila-docker-container) 15:38:42 ecsantos: o/ the lower constraints job is failing on your change 15:39:20 ecsantos: i saw you were trying to fix that job a while ago 15:39:29 i think we should just remove the job from this repository 15:39:53 yep, we might need to do that 15:39:55 we don't make any releases for manila-image-elements, and don't promise coinstallability of any sort - its not a service that you install anywhere 15:40:43 gouthamr: i can help ecsantos to propose the removal of this job 15:41:01 so i guess the lower-constraints file and the job got added at some point inadvertently, and since the requirements files are up to our satisfaction, we can drop the lower-contsraints.txt and the job from the zuul manifest 15:41:08 dviroel: thank you dviroel 15:41:19 ++ 15:41:50 ++ 15:42:25 regarding the rest of this set of patches, we had a pretty cool collaborative review session yesterday 15:42:32 #link https://youtu.be/uvIkE1JmQw8 (Security Service Updates - Wallaby Collaborative Code Review - 3rd Mar 2021) 15:43:14 this one has more likes that the rbac one :) 15:43:22 * gouthamr what! 15:43:52 lol 15:44:30 there's some good discussion captured on the review as well as on 15:44:45 #link https://etherpad.opendev.org/p/security-service-update-collab-review (wallaby security service update collab review) 15:45:29 so i'd like folks to sign up to review this 15:46:37 i feel all alone - given that carloss/dviroel cleverly wrote up the whole change to avoid review duties 15:47:15 lol 15:47:21 #link https://review.opendev.org/c/openstack/manila/+/775038 ([NetApp] Add support for FPolicy native mode) 15:47:29 lol 15:47:58 passing ci, and is a change isolated to the netapp driver 15:48:21 should be a good one to review as well, how's it looking carloss felipe_rodrigues ? 15:49:00 carloss is also working on QA'ing this feature for us 15:49:32 felipe_rodrigues: can you take a look again in this fpolicy feature? when you have some time 15:49:35 yep, I'll post results of the QA in the change. I have performed the review internally in the past, but I'll take a look on it again :) 15:49:55 good stuff, isn't something we can test via tempest except expect no regressions 15:50:11 thanks carloss 15:50:32 my pleasure :) 15:50:45 #link https://review.opendev.org/c/openstack/manila/+/741560 ([CephFS] Create share from snapshot) 15:50:45 we still don't have internal tempest tests to provide the outputs, we should have them only after FF 15:51:04 #link https://review.opendev.org/c/openstack/manila/+/775268 (create_share/delete_share) 15:51:09 #link https://review.opendev.org/c/openstack/manila/+/775278 (extend_share/shrink_share) 15:51:58 dviroel: ack, good to know you're testing it well! 15:52:23 vkmc plans to have a collab review session to go over these changes 15:52:44 yes, I'll see the details of the session on the mailing list today :D 15:52:59 thanks vkmc 15:53:07 this ceph gate change is also necessary: 15:53:13 #link https://review.opendev.org/c/openstack/devstack-plugin-ceph/+/777232 (Update ceph default version to octopus) 15:54:32 #link https://review.opendev.org/c/openstack/manila-ui/+/767017 (Manila-UI) 15:55:53 disap has a new patchset today, but would benefit from reviews 15:56:49 cool, that's all the changes we are tracking 15:56:54 and that's a lot 15:57:19 so if there's anything else that's missing here, do holler - or add it to the etherpad so we don't forget 15:58:22 thanks everyone for your hard work on these changes, and for every review. i firmly believe every review matters, so if you have some time, please do take a look at any of these open changes and add your comments 15:59:41 sorry we couldn't get to bugs today, vhari 16:00:01 we'll definitely talk more about it next week, since we'll have a bug squash in two weeks 16:00:02 gouthamr, np 16:00:18 we're at the top of the hour - it was good to sync on all these reviews 16:00:21 gouthamr, ack ty.. good discussions ^^ 16:00:28 thank you all for attending! :) 16:00:33 see you on #openstack-manila 16:00:37 #endmeeting