| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2017-10-12 | |||
| 13:59:42 | mriedem | talking about trusted filters and traits | |
| 14:00:23 | alex_xu | efried: ok...thanks | |
| 14:00:39 | efried | alex_xu You looking for SQL brainstorm collab? | |
| 14:00:56 | efried | on traits stuff | |
| 14:01:19 | alex_xu | efried: yea, I rewrite the trait patch as Jay suggested, want to get jay take a look whether it is he expected | |
| 14:01:34 | bauzas | mriedem: sorry, was around | |
| 14:01:48 | bauzas | mriedem: so, no, VMware is no longer using more than one node | |
| 14:01:50 | efried | alex_xu Cool. I have to admit, the way you had it before was pretty baffling to me, though I'm definitely not an expert. | |
| 14:02:04 | efried | alex_xu Which patch? | |
| 14:02:13 | alex_xu | efried: here is one https://review.openstack.org/#/c/479766/10 | |
| 14:02:17 | efried | ... | |
| 14:02:51 | alex_xu | yea, the sql is complex, but as jay said, do that in the python also complex... | |
| 14:03:58 | alex_xu | efried: the original one is https://review.openstack.org/#/c/489206/ | |
| 14:04:32 | openstackgerrit | Chris Dent proposed openstack/nova master: [placement] add coverage for update of standard resource class https://review.openstack.org/511485 | |
| 14:04:37 | efried | alex_xu We decided to call it 'required' in GET /allocation_candidates, 对吧 ? | |
| 14:05:05 | efried | alex_xu I'm not completely up on the flow; is it getting translated from 'required' to 'traits' at some point? | |
| 14:05:08 | alex_xu | efried: yes, I will rename it | |
| 14:05:16 | efried | okay, cool | |
| 14:05:28 | alex_xu | efried: 酷 | |
| 14:05:51 | efried | :) | |
| 14:07:33 | mriedem | bauzas: want to have a pass at this spec? https://review.openstack.org/#/c/501017/ | |
| 14:07:42 | mriedem | i'm going to try and go through spec reviews today | |
| 14:09:51 | openstackgerrit | Dan Smith proposed openstack/nova master: Refactor resource tracker to account for migration allocations https://review.openstack.org/506419 | |
| 14:09:51 | openstackgerrit | Dan Smith proposed openstack/nova master: Make migration uuid hold allocations for migrating instances https://review.openstack.org/506420 | |
| 14:09:52 | openstackgerrit | Dan Smith proposed openstack/nova master: Make live migration hold resources with a migration allocation https://review.openstack.org/507638 | |
| 14:11:15 | bauzas | mriedem: sure, I already looked at that one and I remember the PTG discussion | |
| 14:11:18 | mriedem | sdague: is this looking ok for the file injection deprecation plan? https://review.openstack.org/#/c/509013/ | |
| 14:17:03 | openstackgerrit | Chris Dent proposed openstack/nova master: [placement] Confirm that empty resources query causes 400 https://review.openstack.org/511488 | |
| 14:20:43 | mriedem | hongbin: re https://bugs.launchpad.net/nova/+bug/1690439 | |
| 14:20:44 | openstack | Launchpad bug 1690439 in neutron "[RFE] Deal with NetworkAmbiguous error" [Wishlist,Triaged] | |
| 14:21:04 | mriedem | hongbin: i'm not aware of anyone working on adding a 'default' flag to neutron networks when there are multiple available to the tenant and one isn't specified during server create, | |
| 14:21:33 | mriedem | arguably we could add a config option to nova to let operators say something like, default to public shared=True network or default to private tenant network | |
| 14:26:12 | sdague | mriedem: that seems sane | |
| 14:30:23 | mriedem | sdague: cool | |
| 14:30:38 | openstackgerrit | Chris Dent proposed openstack/nova master: [placement] Confirm that empty resources query causes 400 https://review.openstack.org/511488 | |
| 14:31:50 | hongbin | mriedem: o/ | |
| 14:31:57 | andreas_s | mriedem: just FYI - I will do the filter change in the zkvm CI by tomorrow - I first want to check if the new regex is working in our test environment before applying it... | |
| 14:32:57 | hongbin | mriedem: it sounds like there are two options and people don't have consensus of which one is preferrable ? | |
| 14:35:54 | gibi | mriedem, sdague, stephenfin: Can we somehow choose one of this two compeeting solutions? https://review.openstack.org/#/c/507253/ and https://review.openstack.org/#/c/507239/ | |
| 14:37:31 | mriedem | gibi: you'll have to find an impartial 3rd party moderator | |
| 14:37:54 | gibi | dansmith: ^^ could you help us? | |
| 14:38:00 | sdague | make dansmith pick one :) | |
| 14:38:18 | sdague | I'm fine with whatever he picks | |
| 14:38:25 | dansmith | why do I have to pick? | |
| 14:38:40 | dansmith | oh because mriedem weaseled out | |
| 14:38:43 | dansmith | ffs | |
| 14:39:15 | gibi | and because we like your decisions | |
| 14:40:56 | dansmith | well, tbh, I feel like mriedem's is easier for me to wrap my brain around.. while I get it's less OO, it's much easier for me to find those for a test that sets them then tons of object hierarchy, like we have with the integrated tests | |
| 14:43:36 | gibi | based on the silence I think there is no objection | |
| 14:45:22 | gibi | dansmith: Will you +2 mriedem's patch or shall | |
| 14:45:25 | gibi | I? | |
| 14:45:27 | dansmith | I did | |
| 14:45:51 | gibi | dansmith: cool, thanks | |
| 14:47:44 | openstackgerrit | Merged openstack/nova stable/pike: Add a regression test for bug 1718455 https://review.openstack.org/508590 | |
| 14:47:45 | openstack | bug 1718455 in OpenStack Compute (nova) pike "[pike] Nova host disable and Live Migrate all instances fail." [High,In progress] https://launchpad.net/bugs/1718455 - Assigned to Matt Riedemann (mriedem) | |
| 14:48:11 | mriedem | thanks claudiub|2 | |
| 14:59:30 | openstackgerrit | Sean Dague proposed openstack/nova master: Move test_uuid_sentinels to NoDBTestCase https://review.openstack.org/507253 | |
| 14:59:30 | openstackgerrit | Sean Dague proposed openstack/nova master: Don't use mock.patch.stopall https://review.openstack.org/507527 | |
| 14:59:39 | sdague | ok, my stuff rebased on mriedem's now | |
| 15:00:25 | zioproto | mriedem: I answered on the blog to your comments. Btw I will be in Sydney if you need to talk face to face about these experiences with large number of instances. | |
| 15:02:22 | mriedem | zioproto: cool. i proposed a forum session about scale testing too, and there was a similar one for stress testing at large scale | |
| 15:02:35 | efried | sdague Regarding barbican affordance in bp/use-ksa-adapter-for-endpoints -- I've been looking into it, and I don't think Nova is the right place to tackle it. Would like to discuss when you have a few. | |
| 15:02:37 | mriedem | i guess mine was refused http://forumtopics.openstack.org/cfp/details/55 | |
| 15:03:01 | sdague | efried: sure, I have a slice now | |
| 15:03:06 | sdague | efried: what's the concern? | |
| 15:03:10 | mriedem | zioproto: this session was selected: http://forumtopics.openstack.org/cfp/details/21 | |
| 15:03:20 | efried | sdague The opts are defined in castellan itself | |
| 15:03:43 | efried | sdague And they're *used* within castellan itself, not directly from Nova. | |
| 15:03:52 | sdague | oh, interesting | |
| 15:04:04 | sdague | how much do they diverge? | |
| 15:04:45 | efried | sdague So I could register the ksa opts in Nova with deprecations for the barbican names. And what I think would then happen is that castellan (still referring to them by their barbican names) would pick them up because the deprecations would alias them. | |
| 15:05:26 | sdague | yeh, it would be good to get the barbican/castellan folks engaged on that to figure out what their preference is | |
| 15:06:00 | efried | wrt divergence: there's barbican_endpoint vs. endpoint_override. And api_version vs. version - BUT in the ksa stuff we've been not letting the op dictate versions for the other services - I have a util that rips those opts out. | |
| 15:06:27 | efried | Sorry, barbican_api_version* | |
| 15:07:01 | efried | sdague So yeah, I think long term what we want is for castellan to deprecate in favor of the ksa opts. | |
| 15:07:15 | efried | If that happened, Nova wouldn't have to change anything. | |
| 15:07:25 | gibi | mriedem: could you report about the notification meeting on my behalf on the nova meeting? | |
| 15:08:20 | efried | sdague ...which I think is better than trying to force it in Nova in the interim. | |
| 15:09:42 | efried | sdague What IRC channel would a guy use to talk to barbican/castellan folk? | |
| 15:09:48 | efried | or should I hit the ML? | |
| 15:10:38 | mriedem | gibi: sure | |
| 15:11:09 | mriedem | efried: #openstack-barbican | |
| 15:11:14 | efried | got it | |
| 15:11:34 | mriedem | sdague: the keypair + rebuild spec updated the security impact section, i think this is what you were asking for but wanted to confirm http://docs-draft.openstack.org/21/375221/11/check/gate-nova-specs-docs-ubuntu-xenial/1f04019//doc/build/html/specs/queens/approved/rebuild-keypair-reset.html#security-impact | |
| 15:11:46 | mriedem | basically, you can't rebuild a server for another user and update the keypair at the same time | |
| 15:11:59 | mriedem | so don't inject user B's key into user A's serer | |
| 15:12:01 | mriedem | *server | |
| 15:12:07 | sdague | efried: also, if you find active people over there, please get them to come join here, because I've got a big chunk of feedback on their image singing work that needs to be there | |
| 15:12:21 | sdague | mriedem: honestly, it's not a security issue | |
| 15:12:42 | sdague | users don't really own servers | |
| 15:13:23 | gibi | mriedem: thanks a lot | |
| 15:13:25 | mriedem | so you think this is fine to do and should just be documented? | |
| 15:13:37 | mriedem | sdague: i'm trying to think if this would be surprising behavior | |
| 15:14:23 | sdague | mriedem: yeh, I just think we should document it | |
| 15:15:00 | sdague | I think it highlights that our notion of users owning keys is actually bad | |
| 15:15:08 | sdague | and projects should own keys | |
| 15:15:09 | openstackgerrit | Matt Riedemann proposed openstack/nova stable/ocata: Add release note for running nova-api under wsgi in Ocata https://review.openstack.org/511503 | |
| 15:15:10 | mriedem | dansmith: reno for ocata to maybe help with the wsgi service version thing ^ | |
| 15:16:12 | mriedem | sdague: ok want to make that comment on here https://review.openstack.org/#/c/375221/11/specs/queens/approved/rebuild-keypair-reset.rst@89 ? | |
| 15:16:17 | sdague | sure | |