| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2021-10-05 | |||
| 16:30:40 | dansmith | like maybe a system-scoped token that looks up any instance on the system is okay | |
| 16:31:02 | dansmith | I would normally think that should be project-scoped, because instances are project-scoped and events are tied to instances | |
| 16:31:11 | dansmith | but it's intended to mostly be used by other services, so .. I dunno | |
| 16:31:22 | sean-k-mooney | i think it should be system scope | |
| 16:31:27 | bauzas | do we have sort of guidance from the keystone team about those events ? | |
| 16:31:33 | sean-k-mooney | becasue as you said this is for service to service interaction | |
| 16:31:38 | sean-k-mooney | but ya its tricky | |
| 16:31:39 | bauzas | or is it us just picking what we want ? | |
| 16:31:48 | dansmith | sean-k-mooney: but it's not something you can ever do without a project-scoped resource ... | |
| 16:31:56 | dansmith | bauzas: we should probably consult a bit | |
| 16:32:10 | sean-k-mooney | dansmith: yep which is why its tricky | |
| 16:32:20 | dansmith | this is kinda my problem with system scope, is that it actually doesn't apply to a lot of stuff, because almost everything is a project-scoped resource | |
| 16:32:21 | artom | Can ports ever be system-scope? | |
| 16:32:35 | artom | Instances are obviously project-scope, but Neutron external events have to do with ports as well | |
| 16:32:38 | sean-k-mooney | im a little relucted to say that api should be project-admin however | |
| 16:32:39 | bauzas | if that becomes a goal, we need some owner of this goal, just sayin' :) | |
| 16:32:43 | dansmith | aggregates are the one example of a system-scoped resource I use a lot | |
| 16:32:49 | artom | Is there some funky network topology that can have system-scoped ports? | |
| 16:32:56 | dansmith | sean-k-mooney: that's another thing, definitely doesn't need admin | |
| 16:32:57 | sean-k-mooney | dansmith: it proably shoudl be system-admin with project-ide set | |
| 16:33:13 | dansmith | sean-k-mooney: that's project-scoped, AFAIK | |
| 16:33:20 | dansmith | events don | |
| 16:33:24 | dansmith | don't need to be admin either | |
| 16:33:33 | sean-k-mooney | the event api is admin only | |
| 16:33:48 | dansmith | they don't need to be, and I don't think they initially were | |
| 16:33:49 | sean-k-mooney | since enduser including operators are not ment to call it | |
| 16:34:01 | dansmith | but admin != scope | |
| 16:34:03 | dansmith | anyway | |
| 16:34:07 | dansmith | clearly needs some discussion and thinking | |
| 16:34:10 | sean-k-mooney | we could make it system member | |
| 16:34:17 | sean-k-mooney | so yes | |
| 16:34:25 | sean-k-mooney | we could drop admin but ya | |
| 16:34:29 | bauzas | could we now put our thoughts into https://etherpad.opendev.org/p/nova-yoga-ptg L204 and move to other things ? | |
| 16:34:31 | sean-k-mooney | lets defer for now | |
| 16:34:49 | sean-k-mooney | am sure but we might want a sperate etherpad | |
| 16:35:00 | sean-k-mooney | linked form there to go though this in more detail | |
| 16:35:01 | bauzas | sean-k-mooney: feel free to link to it | |
| 16:35:09 | bauzas | also, this ties to my other point | |
| 16:35:28 | bauzas | for the moment, we don't have cinder, neutron and keystone cross project sessions at the PTG | |
| 16:35:52 | bauzas | I'd recommend us to engage some talks with the keystone team so we could wrap some stuff about RBAC during the PTG :) | |
| 16:35:54 | bauzas | just sayin' | |
| 16:35:58 | sean-k-mooney | if we had a neutorn one i have one potential topic | |
| 16:36:11 | sean-k-mooney | https://etherpad.opendev.org/p/ovn_live_migration | |
| 16:36:17 | bauzas | ok, so, I guess I can ask the neutron folks and the keystone folks at least | |
| 16:36:23 | bauzas | for timeslots | |
| 16:36:55 | gibi | I don't have any neutron topic at the momement | |
| 16:36:56 | bauzas | lyarwood or others, do people feel wanting to discuss some cinder topics ? | |
| 16:37:21 | artom | I believe he dropped off early today, might want to check with him async | |
| 16:37:25 | sean-k-mooney | i think lee had one topic but lee wont be able to attend the PTG | |
| 16:37:26 | bauzas | gibi: I'll ask the neutron team if they have nova-specific concerns too | |
| 16:37:45 | bauzas | I know lyarwood wants to address the Manila thing | |
| 16:37:46 | gibi | sure | |
| 16:37:49 | sean-k-mooney | Removing os-volume proxy API during Yoga | |
| 16:37:59 | sean-k-mooney | that was the one that i tought lee might bring up | |
| 16:38:10 | bauzas | but here, the question is, do we need the Cinder team for discussing those topics ? | |
| 16:38:14 | artom | That doesn't really affect Cinder, does it? | |
| 16:38:24 | bauzas | artom: that's my question | |
| 16:38:37 | bauzas | do we have topics to discuss that engage the cinder team ? | |
| 16:38:44 | bauzas | I can leave this for next week | |
| 16:39:00 | sean-k-mooney | the manila thing beign supprot for virtio-fs | |
| 16:39:18 | sean-k-mooney | if so then no there is no interation nwith cinder in that case | |
| 16:39:44 | bauzas | for the keystone x-p session, do you think it would be nice for us getting the whole crew or only publicize our discussions about Secure RBAC so people like lance would join ? | |
| 16:40:52 | sean-k-mooney | assuming unified limits work will continue we might want to discuss that too but im not sure if there is anything left on the keystone side | |
| 16:41:18 | sean-k-mooney | dansmith: you wanted some changes to the lib interface i think but not sure if that needs to be covered at the ptg | |
| 16:41:34 | dansmith | no, I don't think soi | |
| 16:41:50 | dansmith | I also think that the issues have been resolved with some of my recent changes to oslo.limit, | |
| 16:41:53 | dansmith | but I need to circle back | |
| 16:42:00 | dansmith | regardless, nothing needing lots of discussion I don't think | |
| 16:42:11 | bauzas | yeah | |
| 16:42:22 | bauzas | so this is rbac only | |
| 16:42:39 | bauzas | we'll figure that out | |
| 16:42:50 | bauzas | moving on | |
| 16:42:53 | bauzas | #topic Stable Branches | |
| 16:42:59 | bauzas | Nova Wallaby 23.1.0 release is proposed #link https://review.opendev.org/c/openstack/releases/+/809000 | |
| 16:43:05 | bauzas | Nova Victoria 22.3.0 release is proposed #link https://review.opendev.org/c/openstack/releases/+/812291 | |
| 16:43:11 | bauzas | Nova Ussuri 21.2.3 release is proposed #link https://review.opendev.org/c/openstack/releases/+/812292 | |
| 16:43:17 | bauzas | elodilles: other things to mention ? | |
| 16:43:31 | elodilles | i'll ping release folks to review those tomorrow | |
| 16:43:49 | bauzas | cool | |
| 16:43:50 | elodilles | and maybe we could merge this: https://review.opendev.org/c/openstack/nova/+/810461 | |
| 16:44:02 | bauzas | oh | |
| 16:44:16 | elodilles | as far as i remember we agreed to accept this | |
| 16:44:21 | bauzas | yup | |
| 16:44:31 | elodilles | and I can backport it to older branches then | |
| 16:44:44 | elodilles | and unblcok train-stein-rocky-queens-pike :) | |
| 16:44:44 | bauzas | I guess you revisioned it because of the pin version ? | |
| 16:45:09 | elodilles | tox min version needed a bump as stephenfin marked | |
| 16:45:10 | bauzas | yeah, that | |
| 16:45:16 | bauzas | ok, I'll +2 it | |
| 16:45:22 | elodilles | thanks \o/ | |
| 16:45:30 | elodilles | that's it i think | |
| 16:45:35 | bauzas | cool | |
| 16:45:43 | bauzas | #topic Sub/related team Highlights | |
| 16:45:47 | bauzas | Libvirt (lyarwood) | |
| 16:45:50 | bauzas | well, he's off | |
| 16:46:06 | bauzas | but I haven't heard anything specifc | |
| 16:46:14 | bauzas | moving on | |
| 16:46:18 | bauzas | #topic Open discussion | |
| 16:46:35 | bauzas | nothing in the agenda, floor is yours | |
| 16:47:26 | gibi | it was a productive meeting | |