Earlier  
Later
New Search
Posted Nick Remark
#openstack-sdks - 2020-12-11
18:30:45 openstackgerrit Oleksandr Kozachenko proposed openstack/python-openstackclient master: Add project field in image list subcommand https://review.opendev.org/c/openstack/python-openstackclient/+/766523
18:38:26 openstackgerrit Tosin Farai proposed openstack/ansible-collections-openstack master: Add support for new features https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766776
19:49:00 openstackgerrit Artem Goncharov proposed openstack/openstacksdk master: Switch networking function in cloud layer to proxy https://review.opendev.org/c/openstack/openstacksdk/+/766783
#openstack-sdks - 2020-12-13
11:31:37 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
20:06:37 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Migrating dns_zone from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/765760
21:17:56 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
21:51:37 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections -2 https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766868
22:07:05 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections -2 https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766868
22:28:54 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
22:36:42 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
23:34:46 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
23:38:43 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
#openstack-sdks - 2020-12-14
00:40:24 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
07:50:17 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
08:26:37 openstackgerrit Tosin Farai proposed openstack/ansible-collections-openstack master: Add support for new features https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766776
08:41:43 openstackgerrit Tosin Farai proposed openstack/ansible-collections-openstack master: Add support for new features https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766776
08:41:56 openstackgerrit Mark Chappell proposed openstack/openstacksdk master: Add support for updating Block Storage Volume type extra_spec attributes https://review.opendev.org/c/openstack/openstacksdk/+/757891
09:13:55 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
11:42:05 openstackgerrit Ananya proposed openstack/ansible-collections-openstack master: Add network tests for versioned args https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766013
11:46:16 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
11:47:03 openstackgerrit Mark Chappell proposed openstack/openstacksdk master: Add support for updating Block Storage Volume type extra_spec attributes https://review.opendev.org/c/openstack/openstacksdk/+/757891
11:52:45 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
13:19:47 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
14:15:38 openstackgerrit Ananya proposed openstack/ansible-collections-openstack master: Add network tests for versioned args https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766013
14:24:46 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
15:30:28 openstackgerrit Oleksandr Kozachenko proposed openstack/python-openstackclient master: Add project field in image list subcommand https://review.opendev.org/c/openstack/python-openstackclient/+/766523
15:44:52 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
17:39:44 openstackgerrit Tosin Farai proposed openstack/ansible-collections-openstack master: Add support for new features https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766776
22:08:20 openstackgerrit Merged openstack/ansible-collections-openstack master: Fix branchful jobs for collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766282
22:45:47 openstackgerrit Oleksandr Kozachenko proposed openstack/python-openstackclient master: Add project field in image list subcommand https://review.opendev.org/c/openstack/python-openstackclient/+/766523
#openstack-sdks - 2020-12-15
01:15:10 openstackgerrit zhufl proposed openstack/openstacksdk master: Fix invalid argument formatting in log messages https://review.opendev.org/c/openstack/openstacksdk/+/765732
06:48:58 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: New Module: volume_type https://review.opendev.org/c/openstack/ansible-collections-openstack/+/757562
06:49:43 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Migrating network from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764411
06:50:01 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Migrating security_group from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764381
06:50:21 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Migrating routers from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764379
06:50:36 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Migrating server_volume from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764060
06:54:54 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Enable update for recordset and add tests for dns and recordset module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766528
06:55:00 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Enable update for recordset and add tests for dns and recordset module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766528
06:56:02 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Migrating dns_zone from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/765760
12:22:59 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: New Module: volume_type https://review.opendev.org/c/openstack/ansible-collections-openstack/+/757562
12:30:24 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Add security_group_rule_info module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/765580
12:38:49 openstackgerrit Artem Goncharov proposed openstack/openstacksdk master: Change nodepool job to build CentOS-8-stream (unblock gate) https://review.opendev.org/c/openstack/openstacksdk/+/767126
12:47:39 openstackgerrit Merged openstack/ansible-collections-openstack master: Migrating server_volume from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764060
12:47:41 openstackgerrit Merged openstack/ansible-collections-openstack master: Migrating routers from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764379
13:13:25 openstackgerrit Merged openstack/ansible-collections-openstack master: Migrating dns_zone from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/765760
13:33:37 sshnaidm gtema_, can you take a look please in your time on sdk job failure here? https://review.opendev.org/c/openstack/devstack/+/766622
13:34:33 gtema_ there's another blocker - https://review.opendev.org/c/openstack/openstacksdk/+/767126
13:34:45 gtema_ CentOS-8 stuff
13:37:24 gtema_ anyway - I'm on the thing you pointed
13:47:25 sshnaidm gtema_, great, thanks
13:48:20 gtema_ interestingly I was recenly (pretty much one of the latest merged changes) touching nova aggregates, but that stuff was not touched. Something else changed down the road as well
14:22:04 stephenfin gtema_: Comments on https://review.opendev.org/c/openstack/openstacksdk/+/767126
14:22:49 gtema_ ok, am on the phone right now
14:23:33 stephenfin no rush
14:39:39 openstackgerrit Ananya proposed openstack/ansible-collections-openstack master: Migrating network from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764411
15:06:11 openstackgerrit Artem Goncharov proposed openstack/openstacksdk master: Change nodepool job to build CentOS-8-stream (unblock gate) https://review.opendev.org/c/openstack/openstacksdk/+/767126
15:25:21 openstackgerrit Artem Goncharov proposed openstack/openstacksdk master: Modify cloud.get_aggregate to use proxy.find https://review.opendev.org/c/openstack/openstacksdk/+/767176
16:39:06 openstackgerrit Merged openstack/ansible-collections-openstack master: Migrating security_group from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764381
17:34:25 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Add network tests for versioned args https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766013
18:08:22 openstackgerrit Merged openstack/openstacksdk master: Fix invalid argument formatting in log messages https://review.opendev.org/c/openstack/openstacksdk/+/765732
20:47:00 openstackgerrit Emilien Macchi proposed openstack/openstacksdk master: network/v2/port: add support for tags https://review.opendev.org/c/openstack/openstacksdk/+/767216
21:03:24 openstackgerrit Emilien Macchi proposed openstack/ansible-collections-openstack master: networking/port: add support for tags https://review.opendev.org/c/openstack/ansible-collections-openstack/+/767219
#openstack-sdks - 2020-12-16
01:20:24 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Add network tests for versioned args https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766013
03:22:37 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Run images tests https://review.opendev.org/c/openstack/ansible-collections-openstack/+/767265
03:22:51 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Run images tests https://review.opendev.org/c/openstack/ansible-collections-openstack/+/767265
03:28:16 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Separate volume tests from servers tests https://review.opendev.org/c/openstack/ansible-collections-openstack/+/767268
07:34:47 openstackgerrit Polina Gubina proposed openstack/ansible-collections-openstack master: Enable update for recordset and add tests for dns and recordset module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766528
08:16:31 openstackgerrit Merged openstack/openstacksdk master: Change nodepool job to build CentOS-8-stream (unblock gate) https://review.opendev.org/c/openstack/openstacksdk/+/767126
08:52:20 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: Add network tests for versioned args https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766013
09:57:26 openstackgerrit Merged openstack/ansible-collections-openstack master: Run images tests https://review.opendev.org/c/openstack/ansible-collections-openstack/+/767265
13:36:56 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: WIP add designate to install with devstack https://review.opendev.org/c/openstack/ansible-collections-openstack/+/767352
16:00:50 ade_lee fungi, hey - I need to add some changes to allow openstacksdk to work under fips -- in particular to handle md5()
16:01:10 ade_lee fungi, for example this is what we did for glance --- https://review.opendev.org/c/openstack/glance/+/756158
16:01:28 fungi looking
16:01:40 ade_lee in that we referenced an encapsulation of md5() which we had put into oslo
16:01:50 ade_lee oslo.utils
16:02:13 ade_lee but I see there are no references to oslo in openstacksdk - and I'm gusessing thats deliberate?
16:03:18 mordred very
16:03:55 ade_lee I figured that -- I can put in an implementation of that then -- just like I did for swift
16:04:59 mordred ade_lee: you said python hashlib.md5 has been updaed with the notforsecurity param?
16:05:16 ade_lee as in https://review.opendev.org/c/openstack/swift/+/751966/16/swift/common/utils.py (line 4864 -> 4888)
16:05:37 ade_lee mordred, not everywhere yet
16:06:45 mordred ade_lee: nod. well - yeah - I thnik what you've got in swift would be fine - the uses in openstacksdk are also not for security
16:07:23 ade_lee mordred, cool - I'll get up a patch soon.
16:08:44 fungi ade_lee: so, putting on my paranoid security wonk afdb for a moment, it's entirely possible that the image checksums in glance are relied on for security, and could even be susceptible to exploiting collision attacks, however the exploit scenarios i can think of are a bit specious (if someone has the ability to substitute an image with a malicious alternative, then they've almost certainly also got
16:08:46 fungi more direct ways to compromiose the entire system)
16:09:32 mordred fungi: yeah - the only think we use image checksums for is just to avoid duplicate uploads. as in "have I already uploaded this image"
16:09:57 fungi i think as long as we document that checksums are being used to spot file corruption/truncation and that users should not rely on them to catch malicious activity, then it's fine
16:10:00 mordred and the REAL reason we use them is that we've been putting them there long enough that they're part of the contract. we also do sha256 sums
16:10:05 mordred ++
16:10:14 mordred like, we cannot remove them
16:10:14 fungi or, yeah, for process optimization in your example
16:10:22 mordred but we can document their appropriate uses
16:10:57 fungi but if we're going to be tacking on the notforsecurity flag in our uses of md5() we do need to be very clear to users that these checksums are internal implementation details and not security mechanisms
16:15:52 fungi it's also worth noting that the currently feasible exploits known for md5 would essentially require the malicious actor to create the original image as well so that (using a chosen prefix attack) they could create a second compromised image and then pull a bait-and-switch after users had inspected the original
16:16:54 fungi and even that's a bit theoretical, since it would depend on them being able to choose prefixes which still produce usable image files
16:59:33 openstackgerrit Merged openstack/ansible-collections-openstack master: Migrating network from AnsibleModule to OpenStackModule https://review.opendev.org/c/openstack/ansible-collections-openstack/+/764411
17:11:47 openstackgerrit Merged openstack/ansible-collections-openstack master: Add network tests for versioned args https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766013
17:21:03 openstackgerrit Polina Gubina proposed openstack/ansible-collections-openstack master: Enable update for recordset and add tests for dns and recordset module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/766528
17:39:51 openstackgerrit Shnaidman Sagi (Sergey) proposed openstack/ansible-collections-openstack master: WIP add designate to install with devstack https://review.opendev.org/c/openstack/ansible-collections-openstack/+/767352

Earlier   Later