*** sdake has quit IRC | 00:30 | |
*** funzo has joined #heat | 00:35 | |
*** funzo has quit IRC | 00:39 | |
*** funzo has joined #heat | 00:39 | |
*** rongze has joined #heat | 00:42 | |
*** funzo has quit IRC | 00:42 | |
*** rongze has quit IRC | 00:46 | |
*** liang has quit IRC | 00:49 | |
*** rongze has joined #heat | 01:15 | |
*** gokrokve has joined #heat | 01:28 | |
*** rongze has quit IRC | 01:34 | |
*** funzo has joined #heat | 01:43 | |
*** alexheneveld has quit IRC | 01:44 | |
*** funzo has quit IRC | 01:48 | |
*** rongze has joined #heat | 01:49 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Deleted TEMPDIR on exit https://review.openstack.org/64506 | 02:03 |
---|---|---|
*** liang has joined #heat | 02:03 | |
*** funzo has joined #heat | 02:05 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Deleted TEMPDIR on exit https://review.openstack.org/64506 | 02:11 |
*** erkules_ has joined #heat | 02:24 | |
Alienyyg | Hi guys ,anyone here ? | 02:24 |
*** erkules has quit IRC | 02:26 | |
Alienyyg | nanjj: I create a new cfn image with diskimage-builder and got the same problem : http://paste.openstack.org/show/59482/ anyhelp? | 02:29 |
*** funzo has quit IRC | 02:32 | |
*** funzo has joined #heat | 02:32 | |
*** funzo has quit IRC | 02:37 | |
*** rpothier__ has quit IRC | 02:45 | |
*** rpothier_ has joined #heat | 02:45 | |
Alienyyg | anyone can help with this ? | 02:51 |
*** erkules_ has quit IRC | 02:52 | |
openstackgerrit | huangtianhua proposed a change to openstack/heat: "mountpoint" should not be required parameter https://review.openstack.org/64636 | 03:06 |
*** funzo has joined #heat | 03:32 | |
*** funzo has quit IRC | 03:35 | |
*** funzo has joined #heat | 03:35 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Removed unused variables https://review.openstack.org/62827 | 03:39 |
*** funzo has quit IRC | 03:40 | |
*** nkhare has joined #heat | 03:41 | |
*** nati_ueno has joined #heat | 04:04 | |
*** nkhare has quit IRC | 04:14 | |
*** nati_ueno has quit IRC | 04:16 | |
*** Alienyyg_ has joined #heat | 04:33 | |
*** funzo has joined #heat | 04:36 | |
*** Alienyyg has quit IRC | 04:36 | |
*** funzo has quit IRC | 04:41 | |
*** rongze has quit IRC | 04:47 | |
*** rongze has joined #heat | 04:48 | |
*** erkules_ has joined #heat | 04:51 | |
*** rongze has quit IRC | 04:52 | |
*** alienyyg has joined #heat | 04:58 | |
*** urulama has joined #heat | 04:59 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Sort the output of config/generator.py by group name https://review.openstack.org/64500 | 05:14 |
*** nkhare has joined #heat | 05:18 | |
*** rongze has joined #heat | 05:18 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Added heat url in config https://review.openstack.org/64518 | 05:18 |
*** rongze has quit IRC | 05:20 | |
*** rongze_ has joined #heat | 05:20 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/python-heatclient: Fixed typo error OS_IMAGE_URL https://review.openstack.org/63661 | 05:21 |
openstackgerrit | Jun Jie Nan proposed a change to openstack/python-heatclient: Wrapped some long lines https://review.openstack.org/63662 | 05:23 |
*** jay-lau-513 has quit IRC | 05:23 | |
*** jay-lau-513 has joined #heat | 05:24 | |
*** rongze_ has quit IRC | 05:25 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/python-heatclient: Added API reference document https://review.openstack.org/63665 | 05:26 |
*** jay-lau-513 has quit IRC | 05:27 | |
*** jay-lau-513 has joined #heat | 05:28 | |
*** funzo has joined #heat | 05:37 | |
*** funzo has quit IRC | 05:41 | |
*** chandankumar has joined #heat | 05:48 | |
openstackgerrit | Jenkins proposed a change to openstack/heat: Imported Translations from Transifex https://review.openstack.org/64504 | 06:05 |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Added heat url in config for heat standalone mode https://review.openstack.org/64518 | 06:09 |
*** rongze has joined #heat | 06:18 | |
*** rongze has quit IRC | 06:23 | |
*** rongze has joined #heat | 06:28 | |
*** funzo has joined #heat | 06:37 | |
*** funzo_ has joined #heat | 06:39 | |
*** funzo has quit IRC | 06:39 | |
*** funzo_ has quit IRC | 06:44 | |
*** zigo has joined #heat | 06:56 | |
openstackgerrit | Liang Chen proposed a change to openstack/heat: Marconi message queue resource implementation https://review.openstack.org/61036 | 07:06 |
openstackgerrit | Liang Chen proposed a change to openstack/heat: Add marconi client https://review.openstack.org/61035 | 07:06 |
openstackgerrit | A change was merged to openstack/heat: Empty files shouldn't contain copyright nor license https://review.openstack.org/63915 | 07:11 |
*** rushiagr has joined #heat | 07:19 | |
Alienyyg_ | hi guys, after I rebuild my own fedora-cfn-image with diskimage-builde, I launch a autoscaing stack with aws loadbalancer, and load balancer failed to create, because the waitcondition resource wait for the success signal, and in the loadbalancer ,I got heat-provision.log :http://paste.openstack.org/show/59482/ | 07:39 |
Alienyyg_ | so , can anyone figure where went wrong? | 07:40 |
*** funzo has joined #heat | 07:40 | |
Alienyyg_ | the cf-signal.log http://paste.openstack.org/show/59538/ | 07:42 |
*** gokrokve has quit IRC | 07:43 | |
*** ifarkas has joined #heat | 07:44 | |
*** funzo has quit IRC | 07:45 | |
*** rongze has quit IRC | 07:45 | |
*** nkhare has quit IRC | 07:47 | |
*** nkhare has joined #heat | 07:49 | |
*** rongze has joined #heat | 07:51 | |
*** gokrokve has joined #heat | 08:14 | |
*** gokrokve_ has joined #heat | 08:16 | |
*** gokrokve has quit IRC | 08:19 | |
*** gokrokve_ has quit IRC | 08:20 | |
*** pasquier-s has joined #heat | 08:21 | |
*** jprovazn has joined #heat | 08:24 | |
*** gokrokve has joined #heat | 08:32 | |
Alienyyg_ | anyone can take a look at this error ? | 08:34 |
*** gokrokve has quit IRC | 08:37 | |
*** funzo has joined #heat | 08:41 | |
*** rushiagr is now known as rushiagr_away | 08:41 | |
*** funzo has quit IRC | 08:46 | |
*** lsmola_ has joined #heat | 09:10 | |
*** derekh has joined #heat | 09:10 | |
*** liang has quit IRC | 09:19 | |
shardy | Alienyyg_: If you install nmap in the instance, and nmap 7.7.7.7, do you see port 8000 open? | 09:20 |
shardy | It looks like cfn-signal is working, so maybe you're missing some firewall rules? | 09:20 |
Alienyyg_ | shardy: the 8000 is open | 09:21 |
Alienyyg_ | shardy: I can get it with netsate -an | grep 8000 | 09:21 |
shardy | Alienyyg_: Next step is to tail /var/log/heat/api-cfn.log on the box running heat-api-cfn, looking for errors | 09:22 |
Alienyyg_ | no errors | 09:22 |
shardy | Alienyyg_: You can re-run cfn-signal yourself inside the instance | 09:22 |
Alienyyg_ | the last line is start listen 0.0.0.0:8000 | 09:22 |
shardy | Alienyyg_: You can kill heat-api-cfn and run it on the CLI in debug mode (-d), or set the loglevel to debug in /etc/heat/heat.conf | 09:23 |
openstackgerrit | Thomas Herve proposed a change to openstack/heat: Remove usage of mox class https://review.openstack.org/64169 | 09:23 |
*** rushiagr_away is now known as rushiagr | 09:24 | |
shardy | Then you should see the request getting processed in the API logs | 09:24 |
*** jistr has joined #heat | 09:24 | |
Alienyyg_ | shard: yes, I can turn on the debug level, I forgot it... | 09:25 |
*** giulivo has joined #heat | 09:25 | |
shardy | Alienyyg_: In your pastes earlier this week you had some issues with very slow connectivity to the internet, has that been solved? | 09:25 |
*** bgorski has joined #heat | 09:26 | |
Alienyyg_ | shary: It is Ok now, the administrator set some rules | 09:26 |
*** gokrokve has joined #heat | 09:33 | |
therve | chmouel, "ERROR: (ProgrammingError) column "id" cannot be cast to type integer" from the devstack migrate step | 09:34 |
chmouel | therve: are you speaking about https://review.openstack.org/#/c/63839/ ? | 09:34 |
therve | chmouel, Yeah | 09:34 |
therve | The error is buried in http://logs.openstack.org/39/63839/6/check/check-tempest-dsvm-postgres-full/756394c/logs/devstacklog.txt.gz | 09:35 |
chmouel | therve: oh, its weird that i don't see this error on my vm | 09:35 |
chmouel | therve: just saw it in the log | 09:35 |
therve | chmouel, You're using postgres locally? | 09:36 |
chmouel | therve: ah good point | 09:36 |
therve | :) | 09:36 |
chmouel | therve: tks :) | 09:36 |
therve | chmouel, Isn't there a problem with that migration anyway? | 09:37 |
therve | Casting a string to an integer isn't going to work | 09:37 |
chmouel | well yeah but this doesnt seem to show under myself | 09:38 |
chmouel | mysql | 09:38 |
therve | chmouel, You should probably rename the id column instead. | 09:38 |
therve | I'm not sure how to create an autoincrement column with proper values though | 09:39 |
chmouel | therve: proper? you mean default values? | 09:40 |
therve | chmouel, Well values so that the rows are ordered | 09:40 |
chmouel | therve: well let me come to the office so you can explain me :) | 10:01 |
*** Alienyyg_ has quit IRC | 10:19 | |
*** Alienyyg_ has joined #heat | 10:19 | |
*** nkhare has quit IRC | 10:31 | |
*** funzo has joined #heat | 10:42 | |
*** rongze_ has joined #heat | 10:43 | |
*** nkhare has joined #heat | 10:44 | |
*** rongze has quit IRC | 10:46 | |
*** funzo has quit IRC | 10:47 | |
*** rongze_ has quit IRC | 10:48 | |
*** rongze has joined #heat | 11:14 | |
*** rongze_ has joined #heat | 11:18 | |
*** rongze has quit IRC | 11:19 | |
openstackgerrit | A change was merged to openstack/heat: Add test for AutoScalingGroup resize and metadata https://review.openstack.org/64060 | 11:21 |
*** rongze_ has quit IRC | 11:22 | |
Alienyyg_ | shardy: can you take a look at the firewallr? I know little about iptables:( , http://paste.openstack.org/show/59577/ | 11:39 |
shardy | Alienyyg_: I don't see anything opening port 8000, but I thought you said nmap showed it open from the VM? | 11:41 |
Alienyyg_ | shardy: the 8000 is listen on the machine heat-api-cfn runs | 11:42 |
shardy | Alienyyg_: You need to check from inside the instance | 11:43 |
*** liang has joined #heat | 11:43 | |
*** funzo has joined #heat | 11:43 | |
shardy | yum -y install nmap && nmap 7.7.7.7 | 11:43 |
Alienyyg_ | shardy: It seems Ok ,http://paste.openstack.org/show/59593/ | 11:45 |
shardy | So you need to check the api-cfn.logs and see if you can see the request hitting the API | 11:47 |
shardy | Presumably there will be an error in there, unless the timeout is actually being exceeded | 11:48 |
*** funzo has quit IRC | 11:48 | |
*** Alienyyg__ has joined #heat | 11:58 | |
*** rpothier__ has joined #heat | 11:58 | |
*** Alienyyg_ has quit IRC | 11:59 | |
*** rushiagr is now known as rushiagr_away | 11:59 | |
*** rpothier_ has quit IRC | 12:01 | |
*** rongze has joined #heat | 12:02 | |
Alienyyg__ | shardy: got it ,I am doing this | 12:04 |
*** rushiagr_away is now known as rushiagr | 12:10 | |
openstackgerrit | A change was merged to openstack/heat: Use WithScenarios base class instead of load_tests https://review.openstack.org/64145 | 12:13 |
Alienyyg__ | shardy: the loadbalancer now successfully created, I delete two reject rules in iptables before I pasted them to paste.o.o, so the stack is created ,but in the webserver instance ,the heat-init is failed, the template is for F17,but I am now using F19.cat heat-provision.log | 12:13 |
Alienyyg__ | Provision began: 2014-01-02 12:08:30.143348 | 12:13 |
Alienyyg__ | /var/lib/heat-cfntools/cfn-userdata | 12:13 |
Alienyyg__ | #!/bin/bash -v | 12:13 |
Alienyyg__ | /opt/aws/bin/cfn-signal -e 1 -r \"$1\" /opt/aws/bin/cfn-init -s g -r LaunchConfig --region ap-southeast-1 | 12:13 |
Alienyyg__ | usage: cfn-signal [-h] [-s SUCCESS] [-r REASON] [-d DATA] [-i UNIQUE_ID] | 12:13 |
Alienyyg__ | [-e EXIT_CODE] [--exit EXIT] | 12:13 |
Alienyyg__ | url | 12:13 |
Alienyyg__ | cfn-signal: error: unrecognized arguments: --region ap-southeast-1 | 12:13 |
Alienyyg__ | # Setup MySQL root password and create a user | 12:13 |
Alienyyg__ | mysqladmin -u root password 'admin' | 12:13 |
Alienyyg__ | /var/lib/heat-cfntools/cfn-userdata: line 4: mysqladmin: command not found | 12:13 |
Alienyyg__ | mysql -u root --password='admin' < /tmp/setup.mysql | 12:13 |
Alienyyg__ | /var/lib/heat-cfntools/cfn-userdata: line 5: /tmp/setup.mysql: No such file or directory | 12:13 |
Alienyyg__ | sed -i "/Deny from All/d" /etc/httpd/conf.d/wordpress.conf | 12:13 |
Alienyyg__ | sed: can't read /etc/httpd/conf.d/wordpress.conf: No such file or directory | 12:14 |
Alienyyg__ | sed --in-place --e s/database_name_here/wordpress/ --e s/username_here/admin/ --e s/password_here/admin/ /usr/share/wordpress/wp-config.php | 12:14 |
Alienyyg__ | sed: can't read /usr/share/wordpress/wp-config.php: No such file or directory | 12:14 |
Alienyyg__ | systemctl restart httpd.service | 12:14 |
Alienyyg__ | Failed to issue method call: Unit httpd.service failed to load: No such file or directory. See system logs and 'systemctl status httpd.service' for details. | 12:14 |
Alienyyg__ | # install crontab | 12:14 |
Alienyyg__ | crontab /tmp/stats-crontab.txt | 12:14 |
Alienyyg__ | /tmp/stats-crontab.txt: No such file or directory | 12:14 |
therve | Urg :/ | 12:14 |
Alienyyg__ | Provision done: 2014-01-02 12:08:30.544815 | 12:14 |
Alienyyg__ | Provision failed with exit code 1 | 12:14 |
Alienyyg__ | really sorry for this | 12:14 |
therve | Alienyyg__, please use a pastebin | 12:14 |
Alienyyg__ | my mistake | 12:14 |
shardy | Alienyyg__: paste.openstack.org, please. | 12:14 |
Alienyyg__ | OK ,I just enter ctrl | 12:14 |
Alienyyg__ | really sorry for that | 12:15 |
shardy | Alienyyg__: Some of the templates have not been tested on F19, it may be that some modifications are required, in particular IIRC the httpd config is slightly different | 12:15 |
shardy | compare the F17 and F19 templates in heat-templates to see what I mean | 12:16 |
Alienyyg__ | shardy: OK ,I will try it. and sorry for my misoperation again | 12:17 |
shardy | https://github.com/openstack/heat-templates/blob/master/cfn/F19/WordPress_NoKey.yaml | 12:18 |
shardy | See that example, the sedding of /etc/httpd/conf.d/wordpress.conf is different from F17 | 12:18 |
Alienyyg__ | shardy: but it get s signal error :http://paste.openstack.org/show/59599/ | 12:21 |
shardy | "error: unrecognized arguments: --region ap-southeast-1" | 12:22 |
Alienyyg__ | shadry: and it result in all the rest errors | 12:22 |
shardy | What template are you using? | 12:22 |
Alienyyg__ | shardy: https://github.com/openstack/heat-templates/blob/master/cfn/F17/AutoScalingMultiAZSample.yaml | 12:23 |
Alienyyg__ | shardy: I had a mistake | 12:25 |
Alienyyg__ | shardy : I did not check the template , I forgot I have modified it | 12:26 |
Alienyyg__ | shardy: sorry for this :( | 12:26 |
*** rongze has quit IRC | 12:36 | |
*** rongze has joined #heat | 12:37 | |
*** jistr has quit IRC | 12:39 | |
*** liang has quit IRC | 12:42 | |
*** rongze has quit IRC | 12:42 | |
*** funzo has joined #heat | 12:44 | |
*** nkhare has quit IRC | 12:47 | |
*** funzo has quit IRC | 12:49 | |
*** rpothier__ has quit IRC | 13:02 | |
*** rongze has joined #heat | 13:03 | |
therve | skraynev, Hi, around? | 13:05 |
*** jistr has joined #heat | 13:07 | |
*** aweiteka has joined #heat | 13:22 | |
openstackgerrit | A change was merged to openstack/heat: Remove usage of mox class https://review.openstack.org/64169 | 13:28 |
*** sgordon has joined #heat | 13:35 | |
*** sgordon has quit IRC | 13:35 | |
*** sgordon has joined #heat | 13:35 | |
*** funzo has joined #heat | 13:45 | |
*** jcru has joined #heat | 13:46 | |
*** funzo has quit IRC | 13:49 | |
*** bvandenh has joined #heat | 13:57 | |
*** vijendar has joined #heat | 13:57 | |
therve | shardy, Unfortunately it still doesn't work with nose :/ | 13:57 |
shardy | therve: :( | 13:57 |
*** rpothier__ has joined #heat | 13:59 | |
bgorski | therve, What does not work with nose? | 13:59 |
shardy | bgorski: Any test using magic like testscenarios, which makes it a lot less convenient to e.g put a print in the code to see what's going on | 14:01 |
*** pafuent has joined #heat | 14:04 | |
*** therve_ has joined #heat | 14:05 | |
*** therve_ has quit IRC | 14:05 | |
*** jprovazn has quit IRC | 14:05 | |
*** urulama has quit IRC | 14:14 | |
*** erkules_ is now known as erkules | 14:26 | |
*** jprovazn has joined #heat | 14:28 | |
*** sabeen has joined #heat | 14:31 | |
*** jasond` has quit IRC | 14:34 | |
openstackgerrit | A change was merged to openstack/heat: Remove redundant word from OS::Nova::Server https://review.openstack.org/64566 | 14:38 |
*** ruhe has joined #heat | 14:42 | |
*** funzo has joined #heat | 14:45 | |
*** funzo has quit IRC | 14:49 | |
*** andersonvom has joined #heat | 14:52 | |
*** ruhe has quit IRC | 14:55 | |
*** jasond` has joined #heat | 15:04 | |
*** sjmc has joined #heat | 15:07 | |
*** sabeen has quit IRC | 15:09 | |
*** sabeen has joined #heat | 15:10 | |
andersonvom | Morning, folks! Happy 2014! | 15:14 |
*** jpeeler has joined #heat | 15:16 | |
*** jpeeler has quit IRC | 15:16 | |
*** jpeeler has joined #heat | 15:16 | |
*** zaneb has joined #heat | 15:16 | |
*** tomek_adamczewsk has joined #heat | 15:16 | |
*** spzala has joined #heat | 15:17 | |
openstackgerrit | A change was merged to openstack/heat: Enhance message for watch rule https://review.openstack.org/64495 | 15:18 |
zaneb | happy new year y'all | 15:21 |
shardy | Hi zaneb & andersonvom, happy new year :) | 15:21 |
shardy | Hey zaneb, I assigned bug #1265209 to you as it seemed related to the Schema rework, hope that's OK | 15:22 |
uvirtbot | Launchpad bug 1265209 in heat "heat resource-template fails for most resources" [High,Triaged] https://launchpad.net/bugs/1265209 | 15:22 |
zaneb | hey shardy :) | 15:22 |
shardy | I had a look but it wasn't that clear to me what the best fix was | 15:22 |
spzala | Happy New Year zaneb and all | 15:22 |
zaneb | looking... | 15:22 |
bgorski | thx and Happy New Year for you too | 15:23 |
zaneb | shardy: so generating the template fails? or trying to use it for something fails? | 15:24 |
shardy | zaneb: Generating the template fails | 15:24 |
zaneb | ok thanks, I'll look into it | 15:24 |
spzala | bgorski thanks :) | 15:24 |
shardy | zaneb: Thanks, seems like we need to somhow abstract away the legacy keynames, as various places seem to be trying to use the SCHEMA_KEYS keys to look up things in the Schema object | 15:31 |
shardy | mostly seems to be in _generate_input but I only had a quick look | 15:32 |
zaneb | yeah, we just need to switch it over to reading the Schema objects | 15:32 |
*** tomek_adamczewsk has quit IRC | 15:32 | |
zaneb | I forgot that hadn't been done already | 15:32 |
zaneb | I did it everywhere else (e.g. in generating docs) | 15:32 |
zaneb | before we started creating resources with the new schema | 15:32 |
zaneb | but missed this one | 15:33 |
shardy | zaneb: Cool, I figured you'd probably know what needed doing, I'm not that familiar with that code yet | 15:33 |
*** rongze has quit IRC | 15:34 | |
*** bvandenh has quit IRC | 15:36 | |
*** gokrokve has quit IRC | 15:41 | |
*** gokrokve has joined #heat | 15:41 | |
*** funzo has joined #heat | 15:44 | |
*** rongze has joined #heat | 15:44 | |
andersonvom | shardy: just looking at your comments now (https://review.openstack.org/#/c/63041/). do you have a min? | 15:47 |
shardy | andersonvom: sure | 15:48 |
andersonvom | shardy: so, I thought of adding the tenant scoping at the database level, but it felt slightly weird for the database to know about the current user (i.e. is the user a cloud admin?). and it felt slightly better to wrap the engine methods with the appropriate filtering, though still annoying. | 15:51 |
andersonvom | shardy: what do you think? | 15:51 |
shardy | Well my thinking is the context contains everything we need to scope the query at the DB API level | 15:51 |
*** sdake has joined #heat | 15:52 | |
*** sdake has quit IRC | 15:52 | |
*** sdake has joined #heat | 15:52 | |
shardy | so doing it in one place seems potentially less error prone than expecting every place which queries stuff to be appropriately decorated | 15:52 |
shardy | andersonvom: If you look at the sqlalchemy in e.g nova, they do quite a bit of context specific filtering in the model_query | 15:53 |
sdake | morning | 15:53 |
shardy | Hi sdake | 15:53 |
sdake | hey shardy | 15:53 |
bgorski | sdake, Hi, Happy New Year | 15:54 |
shardy | andersonvom: So my thinking is we should set all the data we need to appropriately scope the data returned in the context, then enforce that scope in the DB API | 15:54 |
*** lsmola_ has quit IRC | 15:56 | |
andersonvom | shardy: that was precisely my thinking to put it there too, but it still feels like we're "leaking" information to the database | 15:57 |
shardy | andersonvom: how? | 15:57 |
shardy | The DB API isn't "the database", it's just our interface for querying it | 15:58 |
*** alexheneveld has joined #heat | 15:59 | |
andersonvom | shardy: in the sense that the context, as is it today, can almost be removed from the db_api without losing anything (just session caching), so it's as if it wasn't even "supposed" to be there | 16:01 |
*** Linz has quit IRC | 16:03 | |
therve | zaneb, Hi! Could we get your feedback on https://bugs.launchpad.net/heat/+bug/1264933 ? | 16:03 |
uvirtbot | Launchpad bug 1264933 in heat "The result is inconsistent on identify_stack()" [Undecided,In progress] | 16:03 |
andersonvom | shardy: I'm really playing the devil's advocate here, since I'm leaning towards agreeing with you. This is just me thinking out loud =P | 16:03 |
*** Linz has joined #heat | 16:04 | |
zaneb | therve: you're correct, it's intentional | 16:04 |
therve | zaneb, OK cool. Maybe we should document it? | 16:04 |
therve | I think it makes sense, but the question will reappear :) | 16:05 |
shardy | andersonvom: well there are arguments either way I guess, but my feeling atm is that pushing the context-scoping into the lowest level (ie the DB API) makes sense, because then every layer above doesnt have to care about requesting stuff scoped according to what is already known in the context | 16:05 |
shardy | e.g we can kill all of that get_foo_by_tenant stuff | 16:06 |
andersonvom | shardy: true! I think I can agree with that | 16:06 |
shardy | andersonvom: That seems to fit the pattern of what I've seen in some other projects, but I'm happy to hear other ideas :) | 16:06 |
shardy | andersonvom: Also, I'm still uncomfortable with the whole idea of API requests which can defeat tenant scoping, so I think making everything tenant-scoped by default at the lowest level somewhat minimises the risk of security disasters ;) | 16:10 |
*** ifarkas has quit IRC | 16:11 | |
andersonvom | shardy: that is indeed a very compelling argument to keep it there. | 16:11 |
*** rushiagr has quit IRC | 16:12 | |
*** Linz has quit IRC | 16:16 | |
openstackgerrit | DennyZhang proposed a change to openstack/heat: Remove vim header https://review.openstack.org/64691 | 16:17 |
SpamapS | shardy: regarding OS::Heat::UpdateWaitConditionHandle vs. a new native one.. can we still just subclass AWS::CloudFormation::WaitConditionHandle until we need a different implementation? I really quite like the current approach for simple things and would rather we keep it around for the mere fact that I think it is the most primitive way to do what is being done... | 16:17 |
zaneb | shardy: there was a point at which we needed it (when e.g. waitcondition requests were not authed with keystone). It definitely does increase the risk of disaster, though, so +1 to pushing it down to the db level if we can now do that | 16:18 |
openstackgerrit | DennyZhang proposed a change to openstack/heat: quit when error happens in cinder-keystone-setup https://review.openstack.org/64692 | 16:18 |
*** jprovazn has quit IRC | 16:19 | |
therve | SpamapS, You mean subclass for code reuse purpose? | 16:20 |
SpamapS | therve: well and also "works like X except Y" in documentation :) | 16:21 |
SpamapS | https://review.openstack.org/#/c/63245/ for context | 16:21 |
zaneb | bgorski: congrats on making core! just saw the thread... late to the party but +1 :) | 16:21 |
therve | Yeah I saw the review | 16:21 |
therve | SpamapS, My only concern would be to have a "native" resource using the CFN API | 16:22 |
bgorski | zaneb, thx | 16:22 |
therve | But otherwise It seems ok | 16:22 |
shardy | SpamapS: I think we needa native resource which uses the native API | 16:22 |
shardy | but obviously we're still working out the auth for that, ref instance-users which I've been looking at | 16:23 |
*** blamar has joined #heat | 16:23 | |
*** jergerber has joined #heat | 16:23 | |
SpamapS | What is the danger of letting native things exist in the cfn API? We have.. a lot of that already. | 16:23 |
shardy | SpamapS: What i'd prefer to avoid is having some short-term-hack derived class, then another native solution | 16:24 |
SpamapS | well the 'then another' is only a danger if somebody decides to do that and more people decide to +2 it... | 16:24 |
therve | SpamapS, *only* existing there though | 16:24 |
shardy | SpamapS: One of the main issues is environments where they don't want to use cfn compatible API extensions, like ec2tokens, and heat-api-cfn I guess | 16:25 |
shardy | s/they/users I've spoken to | 16:25 |
SpamapS | shardy: those environments will get zero in-instance capability right now.. so.. until there is a native in-instance API.. I'm inclined to tell them to step up and help or punt. | 16:25 |
shardy | SpamapS: well that's the problem I'm trying to solve with instance-users | 16:26 |
SpamapS | I really dislike "we can't have this functionality because some day very soon we will have something else" unless that some day very soon is "when this patch topic lands" | 16:26 |
zaneb | shardy: both native and AWS waitconditions will need to use pre-signed URLs though... won't they? | 16:27 |
shardy | zaneb: No, I thought we were going with the domain-user idea, where we create users (as the heat service user) in a heat specific domain, with a project per stack | 16:27 |
openstackgerrit | DennyZhang proposed a change to openstack/heat: Improve tools/uninstall-heat https://review.openstack.org/64694 | 16:27 |
shardy | zaneb: then we deploy a randomly generated username/password in the instance and use normal user/pass auth | 16:28 |
SpamapS | shardy: you understand my frustration right? I'm carrying this patch now.. understanding fully well that it may not be the end solution.. but if the end solution is a whole new wait condition mechanism, I have to just carry this patch for a lot longer. | 16:28 |
zaneb | shardy: so the userdata script will have to use some in-instance tool, not just curl to a URL? | 16:28 |
openstackgerrit | DennyZhang proposed a change to openstack/heat: Improve tools/uninstall-heat https://review.openstack.org/64694 | 16:28 |
SpamapS | zaneb: curl can provide the username/pass | 16:29 |
SpamapS | or is it going to have to be multi-step with tokens and stuff? | 16:29 |
therve | SpamapS, Maybe just add a property to WaitConditionHandle? | 16:29 |
shardy | zaneb: No, we'll just have e.g an attribute of a native waitcondition handle which generates a curl call containing the appropriate headers | 16:29 |
SpamapS | therve: thats basically what I did, but I made it native because I don't want people using pure CFN to think that will port back to amazon. | 16:29 |
therve | Yeah pick your poison... | 16:30 |
therve | SpamapS, We have extensions already though... | 16:30 |
zaneb | shardy: right, so a native WaitCondition and an AWS WaitCondition should ultimately have the same implementation? the only work to be done is changing what the URL looks like? | 16:30 |
SpamapS | therve: right, and I think those were bad ideas in hindsight. | 16:30 |
*** jprovazn has joined #heat | 16:30 | |
zaneb | if that is the case, I see no reason not to implement a native one now | 16:30 |
shardy | SpamapS: I understand your position, maybe we should just merge your patch, but what do we do when we create something which supersedes it, we have to support three different resources | 16:31 |
therve | SpamapS, I agree it's bad, but so is having a native resource with awsism | 16:31 |
* zaneb goes to find SpamapS's patch... | 16:31 | |
therve | zaneb, Well to implement a total native one we need a new API | 16:32 |
*** jistr has quit IRC | 16:32 | |
shardy | zaneb: Yeah, I think we'll probably want both to use the same method, although I was thinking initially we'd leave the AWS one alone, and just create the pre-signed URL using the new domain users and ec2-keypair | 16:32 |
therve | And we need working credential mechanism :) | 16:32 |
zaneb | therve: but that's an implementation detail as far as the template author is concerned | 16:32 |
shardy | therve: well if we use username/password, then we have one :) | 16:32 |
therve | zaneb, Fair enough | 16:32 |
therve | Well is it though? | 16:33 |
zaneb | shardy: either way, it's the same thing in the template | 16:33 |
zaneb | just a different URL comes out | 16:33 |
therve | zaneb, Template authors need a way to talk to it though in the userdata or something | 16:33 |
shardy | zaneb: I was thinking that currently all users are probably using cfn-signal not curl directly, so we could just modify that to look for the user/pass in nova metadata | 16:33 |
shardy | And have a native version which works with a curl string generated via a resource attribute | 16:34 |
SpamapS | shardy: what to do later, we deprecate it and move on. :) | 16:34 |
shardy | SpamapS: I guess that's my main issue, we've not yet worked out how to deprecate resources, and your implemenation doesn't look like a long term thing | 16:35 |
shardy | So if, as I anicipate, we work out the instance-users and native wait handle thing for icehouse GA, we ship duplicate functionality | 16:35 |
SpamapS | shardy: it is surely worth keeping long term if wait conditions are worth keeping long term. | 16:35 |
zaneb | SpamapS: I feel your pain, but deprecating resources also sucks for users. And is a PITA for us, for that matter. | 16:36 |
SpamapS | shardy: heh, duplicate functionality.. it adds 11 lines including whitespace (and 45 lines of tests...) | 16:36 |
shardy | meh | 16:36 |
*** funzo has quit IRC | 16:37 | |
SpamapS | also it is a natural need for users who will likely be using the AWS waitconditions for as long as Heat will support them doing so. | 16:37 |
*** funzo has joined #heat | 16:37 | |
shardy | SpamapS: So what will be the barrier to you using a native alternative? | 16:38 |
SpamapS | Like right now people aren't using AWS waitconditions so they can go back to EC2.. they're using it because nothing else exists in Heat. | 16:38 |
SpamapS | shardy: time | 16:38 |
SpamapS | shardy: also not spending time on this frees me up to focus on retries and rolling updates. | 16:38 |
SpamapS | which I need even more desperately :) | 16:38 |
SpamapS | I want to be supportive and use the new stuff. | 16:39 |
SpamapS | I just don't know what the state is or when it will be ready. Meanwhile I'm trying to get CD deploying of OpenStack using Heat working. | 16:40 |
zaneb | SpamapS: does your patch even do anything? surely the update code will not call handle_update() if nothing has changed (and there aren't even any properties *to* change). The existing WaitConditionHandle already raises UpdateReplace if it were to actually get updated | 16:40 |
*** wirehead_1 is now known as wirehead_ | 16:41 | |
SpamapS | zaneb: I read the code as handle_update would be called with no diff, but I may have been hasty in my reading of it. | 16:42 |
jasond` | would someone mind giving me a general thumbs up/down on the approach here (before i start on unit tests)? https://review.openstack.org/#/c/63002/ | 16:42 |
*** funzo has quit IRC | 16:42 | |
zaneb | SpamapS: https://github.com/openstack/heat/blob/master/heat/engine/resource.py#L479 | 16:42 |
SpamapS | zaneb: so is there no way to have a resource updated on every update? | 16:43 |
zaneb | SpamapS: I confess the algorithm was somewhat clearer before this: https://github.com/openstack/heat/commit/b46a4ad44222a284d372b491c7f63f0c39126d76 | 16:43 |
zaneb | SpamapS: well the good news is that that ^ patch means you can override update() to do that | 16:44 |
zaneb | (some refactoring advised) | 16:47 |
*** pscheie_ is now known as pscheie | 16:47 | |
*** therve_ has joined #heat | 16:47 | |
*** therve_ has quit IRC | 16:47 | |
zaneb | hmm, ChangeIds in review comments don't turn into links any more :( what gives? | 16:48 |
*** Linz has joined #heat | 16:48 | |
*** rongze has quit IRC | 16:48 | |
*** radez_g0` is now known as radez | 16:48 | |
SpamapS | zaneb: so you're saying I should be overriding update instead of handle_update | 16:49 |
*** rongze has joined #heat | 16:49 | |
SpamapS | I admit, I am running that patch, but 5 or 6 other things have been exploding so I haven't actually been able to verify it does wait through the update | 16:49 |
SpamapS | durn holidays making it hard to get patches in. :) | 16:49 |
zaneb | SpamapS: yes... come to think of it, just override update to raise UpdateReplace and you are done | 16:49 |
SpamapS | zaneb: that actually sounds more like what I wanted anyway. :) | 16:50 |
zaneb | :) | 16:51 |
openstackgerrit | DennyZhang proposed a change to openstack/heat: Remove vim header https://review.openstack.org/64691 | 16:54 |
openstackgerrit | DennyZhang proposed a change to openstack/heat: log warning, when $SERVICE_HOST is localhost https://review.openstack.org/64697 | 16:59 |
*** funzo has joined #heat | 17:00 | |
*** funzo has quit IRC | 17:00 | |
*** funzo_ has joined #heat | 17:00 | |
*** lsmola_ has joined #heat | 17:01 | |
*** Linz has quit IRC | 17:09 | |
*** Linz has joined #heat | 17:13 | |
*** Linz has quit IRC | 17:14 | |
*** Linz has joined #heat | 17:15 | |
*** rongze has quit IRC | 17:17 | |
SpamapS | shardy: ok so I just confirmed zaneb's analysis that my patch actually is doing nothing for my CD cloud at the moment. ;) | 17:18 |
*** rongze has joined #heat | 17:18 | |
SpamapS | shardy: sorry for being difficult, but I really do need this "soon". :-P | 17:18 |
zaneb | SpamapS: I know you're going to hate this suggestion, but you could always carry that patch as a plugin | 17:19 |
* zaneb ducks | 17:19 | |
SpamapS | shardy: it sounds like there is an ordering problem for the long term viability which is that we need native in-instance stuff, and then most likely stevebaker's hot-software-config wait condition enhancements will encompass this need. | 17:19 |
SpamapS | zaneb: no, I can't. | 17:19 |
*** rongze has joined #heat | 17:19 | |
SpamapS | zaneb: Official deployment program.. use openstack.. etc. | 17:19 |
zaneb | yeah, fair enough I guess | 17:20 |
SpamapS | if the patch is really blocked then I have to spin-wait on external polling of services | 17:20 |
SpamapS | which I actually do already.. but I have to grow the timeout _a lot_ | 17:20 |
zaneb | although, we do provide a plug-in architecture for a reason | 17:20 |
shardy | SpamapS: Sure, I'm also not trying to be difficult, I'm just trying to look towards what we're planning to deliver for Icehouse, to make sure it makes sense, is maintainable, and won't just confuse users | 17:21 |
therve | *cough* What about contrib? | 17:21 |
zaneb | therve: ++ | 17:22 |
therve | I don't know what we said about supportability of that | 17:22 |
shardy | I, personally, would rather not be answering a million "which wait handle resource" do I use questions from uysers ad-ininitum | 17:22 |
shardy | SpamapS: But if there is general agreement it should go in, I won't block your patch :) | 17:23 |
zaneb | SpamapS: I have reservations about this approach too... basically waitconditions suck on update, because they have no way of knowing which resources that reference them are being replaced. And this doesn't do anything to fix that, the user still has to figure out how many servers are going to be replaced and handle it manually | 17:23 |
zaneb | so other than increasing the number of possible ways of doing things that Don't Work, I'm not sure what it achieves | 17:24 |
SpamapS | zaneb: that assumes that the user doesn't set things up to just refresh wait condition handles whenever anything changes | 17:25 |
SpamapS | zaneb: this handle assumes that the user has set things up to do just that. | 17:26 |
zaneb | SpamapS: you're assuming a count of 1? | 17:26 |
SpamapS | zaneb: since the count is "number of unique ids" .. it should work out just fine as long as the user has set their in-instance bits up to always refresh, not just on first boot | 17:27 |
*** rwsu has joined #heat | 17:27 | |
SpamapS | zaneb: I'm assuming in-instance bits know when the wait condition handle has changed and will refresh it. | 17:28 |
zaneb | SpamapS: thinking more about this... maybe raising UpdateReplace is not what you want, because that will change the URL and therefore force all of the servers using it to be replaced | 17:28 |
SpamapS | no | 17:28 |
SpamapS | because I don't put the handle in the server userdata | 17:28 |
SpamapS | it is in Metadata | 17:28 |
SpamapS | which does not force replacement on change | 17:29 |
SpamapS | (and that is the whole point :) | 17:29 |
zaneb | so all of the instances re-signal when they get new metadata | 17:30 |
zaneb | that seems like it solves the problem quite neatly | 17:31 |
zaneb | it also sounds really hard to explain to a user :/ | 17:32 |
*** funzo_ has quit IRC | 17:32 | |
openstackgerrit | DennyZhang proposed a change to openstack/heat: fix typo in heat-api https://review.openstack.org/64699 | 17:36 |
*** gokrokve has quit IRC | 17:44 | |
*** gokrokve has joined #heat | 17:44 | |
*** rongze has quit IRC | 17:45 | |
*** gokrokve_ has joined #heat | 17:45 | |
*** rongze has joined #heat | 17:47 | |
*** gokrokve has quit IRC | 17:48 | |
*** harlowja has joined #heat | 17:49 | |
SpamapS | zaneb: I don't think it is all that hard to explain to a user. "All consumers of the wait condition handle must signal success before the wait condition can continue on create or update." Did I miss something? | 17:52 |
SpamapS | zaneb: how to achieve that is also pretty simple if the wait condition url changes on update. | 17:53 |
*** derekh has quit IRC | 17:53 | |
SpamapS | since they will intrinsically see a new handle that they have not signalled yet. | 17:53 |
SpamapS | though TripleO just signals every time any metadata changes for an even simpler implementation | 17:54 |
zaneb | SpamapS: well, you have to explain that this resource only works if you reference the waitconditionhandle in the metadata, not in the user data, and that you need to have something set up on the instance that resends the data whenever the metadata is updated, and BTW that's all completely different to how this other waitconditionhandle over here works | 17:54 |
SpamapS | zaneb: I don't really have to explain that for just this. I have to explain that for any case that wants to do things using updates without replacing servers. | 17:56 |
SpamapS | its not really "completely" different. The other one just drops the "or update" from my original sentence. | 17:56 |
*** tomek_adamczewsk has joined #heat | 18:03 | |
*** rongze has quit IRC | 18:09 | |
*** tomek_adamczewsk has quit IRC | 18:13 | |
*** alexheneveld has quit IRC | 18:14 | |
*** chandankumar has quit IRC | 18:38 | |
*** nati_ueno has joined #heat | 18:39 | |
*** rongze has joined #heat | 18:40 | |
*** yogesh has joined #heat | 18:41 | |
*** rongze has quit IRC | 18:45 | |
*** nati_ueno has quit IRC | 18:47 | |
*** nati_ueno has joined #heat | 18:49 | |
*** lsmola_ has quit IRC | 18:52 | |
*** tomek_adamczewsk has joined #heat | 18:54 | |
*** nati_ueno has quit IRC | 18:54 | |
*** gokrokve_ has quit IRC | 18:59 | |
*** rpothier__ has quit IRC | 18:59 | |
*** sileht has quit IRC | 18:59 | |
*** pafuent1 has joined #heat | 19:01 | |
*** swygue has quit IRC | 19:01 | |
*** swygue has joined #heat | 19:02 | |
*** rongze has joined #heat | 19:03 | |
*** pafuent has quit IRC | 19:03 | |
*** gokrokve_ has joined #heat | 19:05 | |
*** rpothier__ has joined #heat | 19:05 | |
*** sileht has joined #heat | 19:05 | |
*** jasond` has quit IRC | 19:10 | |
*** sgordon has quit IRC | 19:10 | |
*** jasond` has joined #heat | 19:12 | |
*** rongze has quit IRC | 19:13 | |
*** spzala has quit IRC | 19:24 | |
*** sgordon has joined #heat | 19:25 | |
*** larsks has quit IRC | 19:35 | |
*** tomek_adamczewsk has quit IRC | 19:38 | |
*** sabeen has quit IRC | 19:46 | |
*** spzala has joined #heat | 20:07 | |
*** bgorski has quit IRC | 20:11 | |
SpamapS | zaneb: https://bugs.launchpad.net/bugs/1264933 <-- is it possible we're missing some documentation there? | 20:14 |
uvirtbot | Launchpad bug 1264933 in heat "The result is inconsistent on identify_stack()" [Undecided,Invalid] | 20:14 |
*** jprovazn has quit IRC | 20:14 | |
*** gokrokve_ has quit IRC | 20:26 | |
*** pafuent1 has quit IRC | 20:27 | |
openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: Implement adopt-stack for nested stacks https://review.openstack.org/64720 | 20:28 |
openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: Implement adopt-stack https://review.openstack.org/62730 | 20:29 |
*** gokrokve has joined #heat | 20:35 | |
*** pafuent has joined #heat | 20:39 | |
openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: Add _() to rackspace resource strings https://review.openstack.org/62922 | 20:39 |
*** gokrokve has quit IRC | 20:40 | |
zaneb | SpamapS: yes, entirely possible :) | 20:45 |
*** spzala has quit IRC | 20:49 | |
*** radez is now known as radez_g0n3 | 20:51 | |
*** gokrokve has joined #heat | 20:57 | |
*** gokrokve_ has joined #heat | 20:59 | |
*** gokrokve has quit IRC | 21:01 | |
*** gokrokve_ has quit IRC | 21:03 | |
*** rongze has joined #heat | 21:12 | |
openstackgerrit | Vijendar Komalla proposed a change to openstack/python-heatclient: python-heatclient stack-abandon support https://review.openstack.org/62925 | 21:12 |
openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: update rackspace clients.py https://review.openstack.org/62483 | 21:13 |
*** scollier has quit IRC | 21:14 | |
*** gokrokve has joined #heat | 21:14 | |
*** pafuent has left #heat | 21:16 | |
*** rongze has quit IRC | 21:17 | |
sdake | got record player for chrismas | 21:19 |
sdake | vinyl ftw! | 21:19 |
sdake | swapping records kind of a hassle | 21:20 |
sdake | but we really gave up something when we went to all digital music.. | 21:20 |
openstackgerrit | A change was merged to openstack/heat: Rename scaleout_apis.rst -> scale_deployment.rst https://review.openstack.org/63962 | 21:22 |
*** scollier has joined #heat | 21:26 | |
*** sabeen has joined #heat | 21:35 | |
asalkeld_ | morning | 21:40 |
*** aweiteka has quit IRC | 22:02 | |
*** spzala has joined #heat | 22:03 | |
andersonvom | asalkeld_: morning! happy new year! | 22:06 |
*** rongze has joined #heat | 22:12 | |
*** rongze has quit IRC | 22:17 | |
asalkeld_ | you too andersonvom | 22:24 |
*** vijendar has quit IRC | 22:24 | |
*** DaveJ_ has quit IRC | 22:32 | |
*** rwsu has quit IRC | 22:33 | |
*** rwsu has joined #heat | 22:40 | |
sdake | stevebaker pingola | 22:43 |
*** jcru has quit IRC | 22:47 | |
*** Linz has quit IRC | 22:49 | |
*** Linz has joined #heat | 22:50 | |
*** alexheneveld has joined #heat | 22:50 | |
*** rpothier__ has quit IRC | 22:52 | |
*** Linz has quit IRC | 22:53 | |
*** Linz has joined #heat | 22:53 | |
*** jasond` has quit IRC | 22:56 | |
*** rwsu has quit IRC | 22:59 | |
*** jasond` has joined #heat | 23:12 | |
*** rwsu has joined #heat | 23:13 | |
*** rongze has joined #heat | 23:13 | |
*** rongze has quit IRC | 23:18 | |
*** sjmc has quit IRC | 23:20 | |
*** Linz has quit IRC | 23:21 | |
*** Linz has joined #heat | 23:21 | |
*** sgordon has quit IRC | 23:22 | |
*** gokrokve has quit IRC | 23:27 | |
*** alexheneveld has quit IRC | 23:30 | |
*** gokrokve has joined #heat | 23:34 | |
*** sgordon has joined #heat | 23:35 | |
*** Linz has quit IRC | 23:39 | |
*** Linz has joined #heat | 23:39 | |
*** Linz_ has joined #heat | 23:40 | |
*** Linz has quit IRC | 23:43 | |
*** rpothier__ has joined #heat | 23:50 | |
openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Unscoped List Stacks https://review.openstack.org/63041 | 23:52 |
openstackgerrit | Angus Salkeld proposed a change to openstack/heat: Use oslo db.migration script https://review.openstack.org/64750 | 23:56 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!