| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2017-10-12 | |||
| 14:05:05 | efried | alex_xu I'm not completely up on the flow; is it getting translated from 'required' to 'traits' at some point? | |
| 14:05:08 | alex_xu | efried: yes, I will rename it | |
| 14:05:16 | efried | okay, cool | |
| 14:05:28 | alex_xu | efried: 酷 | |
| 14:05:51 | efried | :) | |
| 14:07:33 | mriedem | bauzas: want to have a pass at this spec? https://review.openstack.org/#/c/501017/ | |
| 14:07:42 | mriedem | i'm going to try and go through spec reviews today | |
| 14:09:51 | openstackgerrit | Dan Smith proposed openstack/nova master: Refactor resource tracker to account for migration allocations https://review.openstack.org/506419 | |
| 14:09:51 | openstackgerrit | Dan Smith proposed openstack/nova master: Make migration uuid hold allocations for migrating instances https://review.openstack.org/506420 | |
| 14:09:52 | openstackgerrit | Dan Smith proposed openstack/nova master: Make live migration hold resources with a migration allocation https://review.openstack.org/507638 | |
| 14:11:15 | bauzas | mriedem: sure, I already looked at that one and I remember the PTG discussion | |
| 14:11:18 | mriedem | sdague: is this looking ok for the file injection deprecation plan? https://review.openstack.org/#/c/509013/ | |
| 14:17:03 | openstackgerrit | Chris Dent proposed openstack/nova master: [placement] Confirm that empty resources query causes 400 https://review.openstack.org/511488 | |
| 14:20:43 | mriedem | hongbin: re https://bugs.launchpad.net/nova/+bug/1690439 | |
| 14:20:44 | openstack | Launchpad bug 1690439 in neutron "[RFE] Deal with NetworkAmbiguous error" [Wishlist,Triaged] | |
| 14:21:04 | mriedem | hongbin: i'm not aware of anyone working on adding a 'default' flag to neutron networks when there are multiple available to the tenant and one isn't specified during server create, | |
| 14:21:33 | mriedem | arguably we could add a config option to nova to let operators say something like, default to public shared=True network or default to private tenant network | |
| 14:26:12 | sdague | mriedem: that seems sane | |
| 14:30:23 | mriedem | sdague: cool | |
| 14:30:38 | openstackgerrit | Chris Dent proposed openstack/nova master: [placement] Confirm that empty resources query causes 400 https://review.openstack.org/511488 | |
| 14:31:50 | hongbin | mriedem: o/ | |
| 14:31:57 | andreas_s | mriedem: just FYI - I will do the filter change in the zkvm CI by tomorrow - I first want to check if the new regex is working in our test environment before applying it... | |
| 14:32:57 | hongbin | mriedem: it sounds like there are two options and people don't have consensus of which one is preferrable ? | |
| 14:35:54 | gibi | mriedem, sdague, stephenfin: Can we somehow choose one of this two compeeting solutions? https://review.openstack.org/#/c/507253/ and https://review.openstack.org/#/c/507239/ | |
| 14:37:31 | mriedem | gibi: you'll have to find an impartial 3rd party moderator | |
| 14:37:54 | gibi | dansmith: ^^ could you help us? | |
| 14:38:00 | sdague | make dansmith pick one :) | |
| 14:38:18 | sdague | I'm fine with whatever he picks | |
| 14:38:25 | dansmith | why do I have to pick? | |
| 14:38:40 | dansmith | oh because mriedem weaseled out | |
| 14:38:43 | dansmith | ffs | |
| 14:39:15 | gibi | and because we like your decisions | |
| 14:40:56 | dansmith | well, tbh, I feel like mriedem's is easier for me to wrap my brain around.. while I get it's less OO, it's much easier for me to find those for a test that sets them then tons of object hierarchy, like we have with the integrated tests | |
| 14:43:36 | gibi | based on the silence I think there is no objection | |
| 14:45:22 | gibi | dansmith: Will you +2 mriedem's patch or shall | |
| 14:45:25 | gibi | I? | |
| 14:45:27 | dansmith | I did | |
| 14:45:51 | gibi | dansmith: cool, thanks | |
| 14:47:44 | openstackgerrit | Merged openstack/nova stable/pike: Add a regression test for bug 1718455 https://review.openstack.org/508590 | |
| 14:47:45 | openstack | bug 1718455 in OpenStack Compute (nova) pike "[pike] Nova host disable and Live Migrate all instances fail." [High,In progress] https://launchpad.net/bugs/1718455 - Assigned to Matt Riedemann (mriedem) | |
| 14:48:11 | mriedem | thanks claudiub|2 | |
| 14:59:30 | openstackgerrit | Sean Dague proposed openstack/nova master: Move test_uuid_sentinels to NoDBTestCase https://review.openstack.org/507253 | |
| 14:59:30 | openstackgerrit | Sean Dague proposed openstack/nova master: Don't use mock.patch.stopall https://review.openstack.org/507527 | |
| 14:59:39 | sdague | ok, my stuff rebased on mriedem's now | |
| 15:00:25 | zioproto | mriedem: I answered on the blog to your comments. Btw I will be in Sydney if you need to talk face to face about these experiences with large number of instances. | |
| 15:02:22 | mriedem | zioproto: cool. i proposed a forum session about scale testing too, and there was a similar one for stress testing at large scale | |
| 15:02:35 | efried | sdague Regarding barbican affordance in bp/use-ksa-adapter-for-endpoints -- I've been looking into it, and I don't think Nova is the right place to tackle it. Would like to discuss when you have a few. | |
| 15:02:37 | mriedem | i guess mine was refused http://forumtopics.openstack.org/cfp/details/55 | |
| 15:03:01 | sdague | efried: sure, I have a slice now | |
| 15:03:06 | sdague | efried: what's the concern? | |
| 15:03:10 | mriedem | zioproto: this session was selected: http://forumtopics.openstack.org/cfp/details/21 | |
| 15:03:20 | efried | sdague The opts are defined in castellan itself | |
| 15:03:43 | efried | sdague And they're *used* within castellan itself, not directly from Nova. | |
| 15:03:52 | sdague | oh, interesting | |
| 15:04:04 | sdague | how much do they diverge? | |
| 15:04:45 | efried | sdague So I could register the ksa opts in Nova with deprecations for the barbican names. And what I think would then happen is that castellan (still referring to them by their barbican names) would pick them up because the deprecations would alias them. | |
| 15:05:26 | sdague | yeh, it would be good to get the barbican/castellan folks engaged on that to figure out what their preference is | |
| 15:06:00 | efried | wrt divergence: there's barbican_endpoint vs. endpoint_override. And api_version vs. version - BUT in the ksa stuff we've been not letting the op dictate versions for the other services - I have a util that rips those opts out. | |
| 15:06:27 | efried | Sorry, barbican_api_version* | |
| 15:07:01 | efried | sdague So yeah, I think long term what we want is for castellan to deprecate in favor of the ksa opts. | |
| 15:07:15 | efried | If that happened, Nova wouldn't have to change anything. | |
| 15:07:25 | gibi | mriedem: could you report about the notification meeting on my behalf on the nova meeting? | |
| 15:08:20 | efried | sdague ...which I think is better than trying to force it in Nova in the interim. | |
| 15:09:42 | efried | sdague What IRC channel would a guy use to talk to barbican/castellan folk? | |
| 15:09:48 | efried | or should I hit the ML? | |
| 15:10:38 | mriedem | gibi: sure | |
| 15:11:09 | mriedem | efried: #openstack-barbican | |
| 15:11:14 | efried | got it | |
| 15:11:34 | mriedem | sdague: the keypair + rebuild spec updated the security impact section, i think this is what you were asking for but wanted to confirm http://docs-draft.openstack.org/21/375221/11/check/gate-nova-specs-docs-ubuntu-xenial/1f04019//doc/build/html/specs/queens/approved/rebuild-keypair-reset.html#security-impact | |
| 15:11:46 | mriedem | basically, you can't rebuild a server for another user and update the keypair at the same time | |
| 15:11:59 | mriedem | so don't inject user B's key into user A's serer | |
| 15:12:01 | mriedem | *server | |
| 15:12:07 | sdague | efried: also, if you find active people over there, please get them to come join here, because I've got a big chunk of feedback on their image singing work that needs to be there | |
| 15:12:21 | sdague | mriedem: honestly, it's not a security issue | |
| 15:12:42 | sdague | users don't really own servers | |
| 15:13:23 | gibi | mriedem: thanks a lot | |
| 15:13:25 | mriedem | so you think this is fine to do and should just be documented? | |
| 15:13:37 | mriedem | sdague: i'm trying to think if this would be surprising behavior | |
| 15:14:23 | sdague | mriedem: yeh, I just think we should document it | |
| 15:15:00 | sdague | I think it highlights that our notion of users owning keys is actually bad | |
| 15:15:08 | sdague | and projects should own keys | |
| 15:15:09 | openstackgerrit | Matt Riedemann proposed openstack/nova stable/ocata: Add release note for running nova-api under wsgi in Ocata https://review.openstack.org/511503 | |
| 15:15:10 | mriedem | dansmith: reno for ocata to maybe help with the wsgi service version thing ^ | |
| 15:16:12 | mriedem | sdague: ok want to make that comment on here https://review.openstack.org/#/c/375221/11/specs/queens/approved/rebuild-keypair-reset.rst@89 ? | |
| 15:16:17 | sdague | sure | |
| 15:16:29 | mriedem | the spec writer might not have been clear on this in PS10 | |
| 15:16:34 | mriedem | i know i wasn't really | |
| 15:28:46 | mriedem | need dane-fichter around for this one too https://review.openstack.org/#/c/312225/ | |
| 15:34:56 | efried | alex_xu My review is going to be missing some depth with respect to shared RPs and aggregates. Can you help me understand the architecture of those things a bit more? | |
| 15:35:29 | efried | Perhaps I need to go read the shared RP spec again. Maybe it'll make more sense now. | |
| 15:36:34 | mdbooth | dansmith: I replied to your 2 review comments on https://review.openstack.org/#/c/511466/ . If you get a chance to look again I'll update asap. Thanks! | |
| 15:41:06 | openstackgerrit | Stephen Finucane proposed openstack/nova master: disable numa feature when virt_type is not kvm https://review.openstack.org/465160 | |
| 15:42:59 | mriedem | mdbooth: counter replied | |
| 15:43:18 | mdbooth | mriedem: Looking, thanks. | |
| 16:01:23 | sean-k-mooney | mriedem: do you have a second to discuss the multiple bindings? i have a question regarding mix old+new hosts | |
| 16:05:14 | mriedem | sean-k-mooney: sure | |
| 16:05:20 | mriedem | i haven't made it back to your replies in the spec yet | |
| 16:07:49 | sean-k-mooney | mriedem: going form old to new i can add code to create the binding if they are not found in the migration data and update the xml | |
| 16:07:58 | sean-k-mooney | mriedem: going for new to old i cannot | |
| 16:08:42 | sean-k-mooney | mriedem: so in this case if i detect that the bindings differ e.g. source linux bridge and dest ovs should i fail the migration at that point since | |