Re: [openstack-dev] [manila] [security] [tc] Add the vulnerability:managed tag to Manila

2016-08-31 Thread John Spray
On Tue, Aug 30, 2016 at 6:07 PM, Jeremy Stanley wrote: > Ben has proposed[1] adding manila, manila-ui and python-manilaclient > to the list of deliverables whose vulnerability reports and > advisories are overseen by the OpenStack Vulnerability Management > Team. This proposal

[openstack-dev] [Manila] Service VMs, CI, etc

2016-07-29 Thread John Spray
Hi folks, We're starting to look at providing NFS on top of CephFS, using NFS daemons running in Nova instances. Looking ahead, we can see that this is likely to run into similar issues in the openstack CI that the generic driver did. I got the impression that the main issue with testing the

Re: [openstack-dev] [manila] nfs-ganesha export modification issue

2016-07-01 Thread John Spray
On Thu, Jun 30, 2016 at 1:37 PM, Alexey Ovchinnikov wrote: > Hello everyone, > > here I will briefly summarize an export update problem one will encounter > when using nfs-ganesha. > > While working on a driver that relies on nfs-ganesha I have discovered that > it > is

[openstack-dev] [Manila] Any updates on share groups?

2016-05-04 Thread John Spray
Hi all, Back in the office with only minor jetlag... unfortunately I had to skip the discussion last Friday, I was wondering if there was much more discussion about how share groups were going to work, especially from a driver POV? The etherpad notes are mainly recap. I'd like to get ahead of

Re: [openstack-dev] [Manila] Concurrent execution of drivers

2016-03-04 Thread John Spray
to do operations on the same share at the same time? John > Valeriy > > On Fri, Mar 4, 2016 at 3:15 PM, John Spray <jsp...@redhat.com> wrote: >> >> On Fri, Mar 4, 2016 at 12:11 PM, Shinobu Kinjo <shinobu...@gmail.com> >> wrote: >> > What are you facing

Re: [openstack-dev] [Manila] Concurrent execution of drivers

2016-03-04 Thread John Spray
, but I'm guessing much this stuff is still at a "word of mouth" stage. John > On Fri, Mar 4, 2016 at 9:06 PM, John Spray <jsp...@redhat.com> wrote: >> Hi, >> >> What expectations should driver authors have about multiple instances >> of the driver being instan

[openstack-dev] [Manila] Concurrent execution of drivers

2016-03-04 Thread John Spray
Hi, What expectations should driver authors have about multiple instances of the driver being instantiated within different instances of manila-share? For example, should I assume that when one instance of a driver is having ensure_share called during startup, another instance of the driver

Re: [openstack-dev] [Manila] ALLOWED_EXTRA_MISSING is cover.sh

2016-02-11 Thread John Spray
core >> reviewers know if they should look more deeply into unit test coverage. >> For a new driver such as yours, I typically pull the code and check >> coverage for each new file in PyCharm rather than relying on the coverage >> job. Feel free to propose enhancements to the jo

[openstack-dev] [Manila] ALLOWED_EXTRA_MISSING is cover.sh

2016-02-10 Thread John Spray
Hi, I noticed that the coverage script is enforcing a hard limit of 4 on the number of extra missing lines introduced. We have a requirement that new drivers have 90% unit test coverage, which the ceph driver meets[1], but it's tripping up on that absolute 4 line limit. What do folks think

Re: [openstack-dev] [Manila] Tempest scenario tests vs. gate condition

2015-12-07 Thread John Spray
On Mon, Dec 7, 2015 at 6:14 PM, Ben Swartzlander <b...@swartzlander.org> wrote: > On 12/03/2015 06:38 AM, John Spray wrote: >> >> Hi, >> >> We're working towards getting the devstack/CI parts ready to test the >> forthcoming ceph native driver, and have a

[openstack-dev] [Manila] Tempest scenario tests vs. gate condition

2015-12-03 Thread John Spray
Hi, We're working towards getting the devstack/CI parts ready to test the forthcoming ceph native driver, and have a question: will a driver be accepted into the tree if it has CI for running the api/ tempest tests, but not the scenario/ tempest tests? The context is that because the scenario

Re: [openstack-dev] [Manila] Attach/detach semantics

2015-11-18 Thread John Spray
On Wed, Nov 18, 2015 at 4:33 AM, Ben Swartzlander <b...@swartzlander.org> wrote: > On 11/17/2015 10:02 AM, John Spray wrote: >> >> Hi all, >> >> As you may know, there is ongoing work on a spec for Nova to define an >> "attach/detach" API for tighte

[openstack-dev] [Manila] Attach/detach semantics

2015-11-17 Thread John Spray
Hi all, As you may know, there is ongoing work on a spec for Nova to define an "attach/detach" API for tighter integration with Manila. The concept here is that this mechanism will be needed to implement hypervisor mediated FS access using vsock, but that the mechanism should also be applicable

Re: [openstack-dev] [Manila] Share allow/deny by shared secret

2015-10-27 Thread John Spray
On Tue, Oct 27, 2015 at 6:39 AM, Ben Swartzlander wrote: >> The NFS-style process that Manila expects is: >> Caller> I know a credential (IP address, x509 certificate) and I want >> you to authorize it >> Driver> OK, I have stored that credential and you can now use it to

[openstack-dev] [Manila] Share allow/deny by shared secret

2015-10-21 Thread John Spray
Hi, (I wanted to put this in an email ahead of Tokyo, where I hope we'll find time to discuss it. This is a follow up to http://osdir.com/ml/openstack-dev/2015-10/msg00381.html) With the current code, there doesn't appear to be a proper way to expose Ceph's native authentication system via

Re: [openstack-dev] [Manila] CephFS native driver

2015-10-07 Thread John Spray
On Tue, Oct 6, 2015 at 11:59 AM, Deepak Shetty wrote: >> >> Currently, as you say, a share is accessible to anyone who knows the >> auth key (created a the time the share is created). >> >> For adding the allow/deny path, I'd simply create and remove new ceph >> keys for each

Re: [openstack-dev] [Manila] CephFS native driver

2015-10-01 Thread John Spray
On Thu, Oct 1, 2015 at 8:36 AM, Deepak Shetty <dpkshe...@gmail.com> wrote: > > > On Thu, Sep 24, 2015 at 7:19 PM, John Spray <jsp...@redhat.com> wrote: >> >> Hi all, >> >> I've recently started work on a CephFS driver for Manila. The (early) >> c

Re: [openstack-dev] [Manila] CephFS native driver

2015-10-01 Thread John Spray
ev@lists.openstack.org> > Sent: Saturday, September 26, 2015 9:27:58 AM > Subject: Re: [openstack-dev] [Manila] CephFS native driver > > On 09/24/2015 09:49 AM, John Spray wrote: >> Hi all, >> >> I've recently started work on a CephFS driver for Manila. The (early)

Re: [openstack-dev] [Manila] CephFS native driver

2015-10-01 Thread John Spray
On Thu, Oct 1, 2015 at 8:26 AM, Deepak Shetty wrote: >> > I think it will be important to document all of these limitations. I >> > wouldn't let them stop you from getting the driver done, but if I was a >> > deployer I'd want to know about these details. >> >> Yes,

Re: [openstack-dev] [Manila] CephFS native driver

2015-09-26 Thread John Spray
On Sat, Sep 26, 2015 at 12:02 PM, John Spray <jsp...@redhat.com> wrote: > On Sat, Sep 26, 2015 at 1:27 AM, Ben Swartzlander <b...@swartzlander.org> > wrote: >> All snapshots are read-only... The question is whether you can take a >> snapshot and clone it into so

Re: [openstack-dev] [Manila] CephFS native driver

2015-09-26 Thread John Spray
On Sat, Sep 26, 2015 at 1:27 AM, Ben Swartzlander <b...@swartzlander.org> wrote: > On 09/24/2015 09:49 AM, John Spray wrote: >> >> Hi all, >> >> I've recently started work on a CephFS driver for Manila. The (early) >> code is here: >> https://github.co

Re: [openstack-dev] [Manila] CephFS native driver

2015-09-25 Thread John Spray
pecifically about Manila; general improvements in Ceph integration would be a different topic. Thanks, John > > Thank you so much for your explanation in advance. > > Shinobu > > - Original Message - > From: "John Spray" <jsp...@redhat.com> > To: open

Re: [openstack-dev] [Manila] CephFS native driver

2015-09-25 Thread John Spray
louds). John > > >> This piece of work is specifically about Manila; general improvements >> in Ceph integration would be a different topic. > > That's interesting to me. > > Shinobu > > - Original Message - > From: "John Spray" <jsp...@redhat.com

[openstack-dev] [Manila] CephFS native driver

2015-09-24 Thread John Spray
Hi all, I've recently started work on a CephFS driver for Manila. The (early) code is here: https://github.com/openstack/manila/compare/master...jcsp:ceph It requires a special branch of ceph which is here: https://github.com/ceph/ceph/compare/master...jcsp:wip-manila This isn't done yet