Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2020-02-07
21:05:18 Sundar I'll try boot + delete. Was it hard reboot?
21:06:36 sean-k-mooney no just boot then delete
21:06:47 sean-k-mooney hardreboot seams to be fine
21:08:23 sean-k-mooney Sundar: https://etherpad.openstack.org/p/sean-cyborg-testing-delete-logs
21:08:36 sean-k-mooney paste.openstack.org isnt loadign for me
21:08:44 sean-k-mooney but that is all the nova and cyborg logs
21:10:19 sean-k-mooney it look like the cyborg api returned a 401
21:12:19 Sundar devstack@cyborg-api.service[26903]: 2020-02-07 20:56:05.719 .... Authorization failed for token: keystonemiddleware.auth_token._exceptions.InvalidToken: Token authorization failed.
21:12:53 sean-k-mooney yep
21:13:35 sean-k-mooney so the call to cyborg either need an admin token which i dont think is correct or the token expired and you need to handel that
21:14:29 sean-k-mooney deleting the vm again does not fix it by they way
21:14:40 sean-k-mooney but i can create and delete non cyborg vms
21:15:05 sean-k-mooney i get the same 401 reponce on the second attempt
21:15:13 sean-k-mooney but i can delete hte arq myself
21:15:58 Sundar What does it take to handle an expired token? BTW: https://opendev.org/openstack/cyborg/src/branch/master/cyborg/common/policy.py#L86 applies defuault rule for ARQ deletes
21:16:39 Sundar *default rule: rule:admin_or_owner
21:17:02 sean-k-mooney so there is basically two ways to try and resovle it or you can raise an error
21:17:38 sean-k-mooney if service tokens are configured youc an fall back to using those alternitvly you can have an admin token for the servcie in the nova conf and escalate
21:17:42 sean-k-mooney or you can fail
21:17:51 sean-k-mooney but in this can my token was not expired
21:18:14 sean-k-mooney when i did it again i was issue a new token and it failed again
21:18:58 sean-k-mooney my devstack also issue tokesn that last for an hour so it shoudl be fine
21:20:41 sean-k-mooney anyway im done for the day o/
21:21:21 Sundar Ok. Not sure what is going wrong here. I'll try it out as non-admin.
21:21:34 Sundar Thanks a lot for all your efforts. ;) Have a good weekend!
21:43:38 Sundar efried: Re. "blocking unsupported operations", the objection seems to be that each change requires microversion changes.
21:45:49 Sundar FWIW, I think any further changes after this series will be few and far between. We could put in a microversion change now. Any further changes should be clumped together as much as possible, based on operator requirements.
#openstack-nova - 2020-02-08
03:02:28 openstackgerrit HYSong proposed openstack/nova master: fix bug 1861964 https://review.opendev.org/706647
03:02:28 openstack bug 1861964 in OpenStack Compute (nova) "availability_zone in request_specs not updated when live migrate vm from one availability zone to another" [Undecided,New] https://launchpad.net/bugs/1861964
05:15:09 openstackgerrit HYSong proposed openstack/nova master: fix format https://review.opendev.org/706655
16:16:26 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing admin_password policies https://review.opendev.org/701629
16:17:09 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing admin_password policies https://review.opendev.org/701629
16:17:17 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-admin-password https://review.opendev.org/701630
16:17:32 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-admin-password policies https://review.opendev.org/701639
16:20:05 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-agents policies https://review.opendev.org/701648
17:02:18 openstackgerrit Merged openstack/nova master: Fix instance.hidden migration and querying https://review.opendev.org/706331
18:24:10 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-agents policies https://review.opendev.org/701648
18:24:26 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Pass the actual target in os-agents policy https://review.opendev.org/701649
18:37:36 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-atttach-inerfaces policies https://review.opendev.org/706672
19:15:02 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-atttach-inerfaces policies https://review.opendev.org/706672
19:24:02 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing admin_password policies https://review.opendev.org/701629
22:48:08 openstackgerrit Merged openstack/nova stable/train: Fix instance.hidden migration and querying https://review.opendev.org/706582
23:05:04 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-admin-password https://review.opendev.org/701630
23:05:16 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-admin-password policies https://review.opendev.org/701639
23:31:26 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing availability-zone policies https://review.opendev.org/706682
23:51:01 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-availability-zone policy to be admin https://review.opendev.org/706683
#openstack-nova - 2020-02-09
00:59:28 gmann melwitt: dansmith one question on GET AZ permission. Currently GET os-availability-zone (list) is admin_or_owner but allowed for everyone(details in bug)- https://bugs.launchpad.net/nova/+bug/1862484
00:59:28 openstack Launchpad bug 1862484 in OpenStack Compute (nova) "GET os-availability-zone API policy is allowed for everyone even policy defaults is admin_or_owner" [Undecided,In progress] - Assigned to Ghanshyam Mann (ghanshyammann)
01:01:19 gmann I am changing it to Admin (like GET os-avalability-zone/detail but that is admin because that has the host information also). I am not sure if changing it to admin by default is right or we should keep is open for everyone as AZ is end-user things.
01:02:42 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing availability-zone policies https://review.opendev.org/706682
01:22:48 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-agents policies https://review.opendev.org/701648
01:25:06 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-availability-zone policies https://review.opendev.org/706684
01:27:45 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-availability-zone https://review.opendev.org/706684
01:49:31 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-availability-zone policies https://review.opendev.org/706686
02:17:56 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing os-console-auth-tokens policies https://review.opendev.org/706687
02:29:28 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Introduce scope_types in os-console-auth-tokens https://review.opendev.org/706688
02:49:49 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add new default roles in os-console-auth-tokens policies https://review.opendev.org/706689
03:03:33 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Pass the actual target in os-console-auth-tokens policy https://review.opendev.org/706690
03:14:28 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Pass the actual target in os-availability-zone policy https://review.opendev.org/706691
17:45:00 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/queens: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706714
17:45:51 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/pike: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706715
17:51:31 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/rocky: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706716
18:05:51 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/rocky: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706716
18:06:54 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/queens: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706714
18:07:11 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/pike: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706715
19:15:07 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/rocky: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706716
21:29:24 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/queens: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706714
21:30:05 openstackgerrit Ghanshyam Mann proposed openstack/nova stable/pike: Use stable constraint for Tempest pinned stable branches https://review.opendev.org/706715
#openstack-nova - 2020-02-10
00:55:29 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
01:07:33 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-console-output policy to be admin_or_owner https://review.opendev.org/706725
01:07:57 gmann melwitt: alex_xu another bug in policy - https://review.opendev.org/706725
01:17:16 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
01:45:29 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing create_backup policies https://review.opendev.org/706726
01:49:30 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
01:59:35 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-create-backup policy to be admin_or_owner https://review.opendev.org/706727
02:00:14 gmann melwitt: alex_xu this is another. I think most of the admin_or_owner are buggy - https://review.opendev.org/706727
02:36:32 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing create_backup policies https://review.opendev.org/706726
02:59:04 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Fix os-console-output policy to be admin_or_owner https://review.opendev.org/706725
03:02:42 openstackgerrit Ghanshyam Mann proposed openstack/nova master: Add test coverage of existing console_output policies https://review.opendev.org/706724
03:05:12 gmann efried: melwitt dansmith lyarwood stephenfin these are the fixes to unblock the stable/pike|queens|rocky nova gate - https://review.opendev.org/#/q/topic:fix-stable-gate+(status:open+OR+status:merged)+projects:openstack/nova
03:44:55 openstackgerrit jichenjc proposed openstack/nova master: set default value to 0 instead of '' https://review.opendev.org/706730
08:53:10 openstackgerrit Brin Zhang proposed openstack/nova master: Add new default roles in os-instance-actions policies https://review.opendev.org/706470
08:56:13 openstackgerrit Brin Zhang proposed openstack/nova master: Add SYSTEM_READER role to servers actions API https://review.opendev.org/706179
09:31:25 openstackgerrit Balazs Gibizer proposed openstack/nova master: Support unshelve with qos ports https://review.opendev.org/704759
09:32:59 openstackgerrit Balazs Gibizer proposed openstack/nova master: Enable unshelve with qos ports https://review.opendev.org/705475
09:34:32 openstackgerrit Balazs Gibizer proposed openstack/nova master: Merge qos related renos for Ussuri https://review.opendev.org/706766
09:38:29 gibi stephenfin: hi! replied to you in the unshelve qos series ^^
09:39:36 gibi stephenfin: I will do some unshelve testing on master based on your points
10:28:06 bauzas gibi: stephenfin: I know it's not a specs review day today, but if you have time, it would be nice if you could review https://review.opendev.org/#/c/552924/
10:28:16 bauzas w3
10:28:19 bauzas whoops
10:29:44 kashyap bauzas: While you wait on Gibi :D -- https://review.opendev.org/#/c/693844/
10:30:02 kashyap But probably requires a non-RHT core, as it already has +2 from Stephen
10:30:05 bauzas kashyap: sure, I'll look this afternoon
10:30:09 bauzas yeah too
10:30:20 bauzas I'll look at specs this afternoon FWIW
10:30:35 kashyap Actually, it's for gibi; he already +1ed it, and once the nits are addressed, he said he'd upgrade it.
10:30:43 kashyap bauzas: So leave it to Gibi :-)
10:30:50 kashyap (Saving your time for other specs.)
10:33:32 kashyap Sure, no rush; this can wait.

Earlier   Later