| *** rushiagr has joined #heat | 00:04 | |
| *** alexheneveld has joined #heat | 00:05 | |
| *** rongze has joined #heat | 00:14 | |
| *** rushiagr has quit IRC | 00:17 | |
| *** rongze has quit IRC | 00:18 | |
| *** Linz_ has quit IRC | 00:25 | |
| *** jergerber has quit IRC | 00:29 | |
| *** gokrokve has quit IRC | 00:30 | |
| *** gokrokve has joined #heat | 00:31 | |
| *** Linz has joined #heat | 00:43 | |
| openstackgerrit | DennyZhang proposed a change to openstack/heat: Fix get_column_num problem in heat-keystone-setup https://review.openstack.org/61904 | 00:52 |
|---|---|---|
| *** Linz has quit IRC | 00:59 | |
| *** Linz_ has joined #heat | 00:59 | |
| *** giulivo has quit IRC | 01:00 | |
| *** jay-lau-513 has quit IRC | 01:07 | |
| *** rongze has joined #heat | 01:15 | |
| *** rongze has quit IRC | 01:20 | |
| *** alexheneveld has quit IRC | 01:37 | |
| *** rongze has joined #heat | 01:38 | |
| *** alexheneveld has joined #heat | 01:40 | |
| *** yogesh has quit IRC | 01:50 | |
| openstackgerrit | A change was merged to openstack/python-heatclient: Fixed typo error OS_IMAGE_URL https://review.openstack.org/63661 | 02:00 |
| openstackgerrit | A change was merged to openstack/python-heatclient: Wrapped some long lines https://review.openstack.org/63662 | 02:00 |
| *** nati_ueno has joined #heat | 02:03 | |
| *** liang has joined #heat | 02:17 | |
| *** rongze has quit IRC | 02:18 | |
| *** rongze has joined #heat | 02:19 | |
| *** rongze has quit IRC | 02:19 | |
| *** rongze has joined #heat | 02:20 | |
| openstackgerrit | huangtianhua proposed a change to openstack/heat: Fixes typo of explanation on exception.py https://review.openstack.org/64765 | 02:23 |
| *** erkules has quit IRC | 02:23 | |
| *** john-n-seattle has quit IRC | 02:24 | |
| *** john-n-seattle has joined #heat | 02:26 | |
| *** rongze has quit IRC | 02:32 | |
| *** rongze has joined #heat | 02:33 | |
| *** erkules has joined #heat | 02:39 | |
| *** rpothier_ has joined #heat | 02:43 | |
| *** rpothier_ is now known as rpothier | 02:45 | |
| *** rpothier__ has quit IRC | 02:46 | |
| *** liang has quit IRC | 03:06 | |
| *** sabeen has quit IRC | 03:07 | |
| openstackgerrit | DennyZhang proposed a change to openstack/heat: Improve tools/uninstall-heat https://review.openstack.org/64694 | 03:07 |
| *** Daviey has quit IRC | 03:15 | |
| sdake | stevebaker are you out of the office or in the office today? | 03:17 |
| *** liang has joined #heat | 03:19 | |
| *** Daviey has joined #heat | 03:26 | |
| openstackgerrit | huangtianhua proposed a change to openstack/heat: Fixes missing "_" on msg_fmt https://review.openstack.org/64770 | 03:28 |
| *** alexheneveld has quit IRC | 03:33 | |
| *** alexheneveld has joined #heat | 03:34 | |
| *** liang has quit IRC | 03:35 | |
| *** spzala has quit IRC | 03:49 | |
| *** harlowja is now known as harlowja_away | 03:51 | |
| *** liang has joined #heat | 03:52 | |
| *** nkhare has joined #heat | 03:57 | |
| *** nkhare has quit IRC | 03:58 | |
| *** nkhare has joined #heat | 03:59 | |
| *** rongze has quit IRC | 04:04 | |
| *** gokrokve has quit IRC | 04:40 | |
| *** gokrokve has joined #heat | 04:41 | |
| *** gokrokve has quit IRC | 04:45 | |
| *** blamar has quit IRC | 05:00 | |
| *** Linz_ has quit IRC | 05:04 | |
| *** Linz has joined #heat | 05:05 | |
| *** john-n-seattle has quit IRC | 05:08 | |
| *** john-n-seattle has joined #heat | 05:10 | |
| *** alexheneveld has quit IRC | 05:10 | |
| *** uvirtbot has quit IRC | 05:20 | |
| *** rpothier_ has joined #heat | 05:21 | |
| *** rpothier has quit IRC | 05:25 | |
| *** gokrokve has joined #heat | 05:31 | |
| openstackgerrit | A change was merged to openstack/heat: update rackspace clients.py https://review.openstack.org/62483 | 05:32 |
| openstackgerrit | A change was merged to openstack/heat: Add new Ceilometer combination alarm resource https://review.openstack.org/62672 | 05:33 |
| *** gokrokve has quit IRC | 05:35 | |
| *** andersonvom has quit IRC | 05:35 | |
| *** chandankumar has joined #heat | 05:37 | |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Removed unused variables https://review.openstack.org/62827 | 05:40 |
| *** yogesh has joined #heat | 05:41 | |
| *** chandankumar has quit IRC | 05:44 | |
| *** sgordon has quit IRC | 05:45 | |
| *** chandankumar has joined #heat | 05:45 | |
| *** chandankumar has quit IRC | 05:50 | |
| *** chandankumar has joined #heat | 05:52 | |
| *** rushiagr has joined #heat | 05:53 | |
| *** gokrokve has joined #heat | 05:54 | |
| *** gokrokve has quit IRC | 06:01 | |
| *** nanjj has joined #heat | 06:01 | |
| openstackgerrit | Jenkins proposed a change to openstack/heat: Imported Translations from Transifex https://review.openstack.org/64504 | 06:05 |
| *** jpeeler has quit IRC | 06:11 | |
| *** chandankumar is now known as ciypro | 06:36 | |
| *** Linz has quit IRC | 06:49 | |
| *** gokrokve has joined #heat | 07:01 | |
| *** gokrokve has quit IRC | 07:06 | |
| *** rongze has joined #heat | 07:12 | |
| openstackgerrit | huangtianhua proposed a change to openstack/heat: I18N support for InvalidContentType exception https://review.openstack.org/64770 | 07:17 |
| *** gokrokve has joined #heat | 07:31 | |
| *** gokrokve has quit IRC | 07:36 | |
| openstackgerrit | A change was merged to openstack/heat: Sort the output of config/generator.py by group name https://review.openstack.org/64500 | 07:45 |
| *** ifarkas has joined #heat | 07:50 | |
| *** rushiagr has quit IRC | 07:56 | |
| *** jprovazn has joined #heat | 08:02 | |
| shardy | morning | 08:04 |
| chmouel | hello | 08:06 |
| Alienyyg__ | shardy: hi | 08:06 |
| asalkeld_ | hi | 08:10 |
| Alienyyg__ | Hi guys, I meet an authenitcation error while doing autoscaing with aws resources: the cloudwatch seems ok ,but an authentication errors appear in heat-api, and after I stress the instance, no more instance appears, the heat-engine.log : http://paste.openstack.org/show/59830/ | 08:14 |
| Alienyyg__ | the heat-api.log : http://paste.openstack.org/show/59832/ | 08:14 |
| shardy | "AWS authentication failure" | 08:16 |
| shardy | There is something wrong with the signed URL you're using | 08:16 |
| shardy | Are you using cfn-signal in-instance, ceilometer signals, or a curl call? | 08:17 |
| shardy | s/cfn-signal/cfn-push-stats | 08:18 |
| Alienyyg__ | shardy: cfn-push-stats | 08:18 |
| shardy | Alienyyg__: And you've created the user/accesskey as here? | 08:19 |
| shardy | https://github.com/openstack/heat-templates/blob/master/cfn/F17/AutoScalingMultiAZSample.template#L199 | 08:19 |
| Alienyyg__ | shardy: yes | 08:20 |
| Alienyyg__ | shardy: I followed this example | 08:20 |
| *** asalkeld_ has quit IRC | 08:22 | |
| *** asalkeld_ has joined #heat | 08:22 | |
| Alienyyg__ | shardy: but when I create the stack ,the first webserver is correct, then the second failed because of the webserverkey? what is the diffirence between the first one and the second one? | 08:24 |
| shardy | Alienyyg__: This seems to be another manifestation of the issue you reported under rhbz #1047316 | 08:25 |
| shardy | It's not failing to validate the signature, keystone is just denying the request | 08:25 |
| Alienyyg__ | sharyd: in that bug,I use neutron network | 08:27 |
| Alienyyg__ | shardy: I use nova network herer | 08:27 |
| shardy | Alienyyg__: I don't think that's relevant, in both cases the ec2tokens validation is failing with denied | 08:27 |
| Alienyyg__ | shardy:maybe some config error in keystone? | 08:29 |
| *** bgorski has joined #heat | 08:30 | |
| *** gokrokve has joined #heat | 08:31 | |
| shardy | Alienyyg__: Possibly, is there anything in the keystone log indicating errors? | 08:31 |
| Alienyyg__ | shardy: I just turn it to debug level, and will take me some time to get the log information | 08:32 |
| therve | Good morning! | 08:33 |
| Alienyyg__ | hello, | 08:33 |
| *** Alienyyg__ has quit IRC | 08:34 | |
| shardy | Hi therve | 08:34 |
| *** gokrokve has quit IRC | 08:35 | |
| *** alienyyg has joined #heat | 08:37 | |
| *** lsmola_ has joined #heat | 08:43 | |
| *** nkhare has quit IRC | 08:45 | |
| *** nkhare has joined #heat | 08:50 | |
| *** yogesh has quit IRC | 08:51 | |
| *** yogesh has joined #heat | 08:52 | |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Replace try...except...pass block with assertRaises https://review.openstack.org/64797 | 08:53 |
| *** alienyy has joined #heat | 08:54 | |
| *** alienyy has quit IRC | 08:56 | |
| *** yogesh has quit IRC | 08:56 | |
| *** nkhare has quit IRC | 08:56 | |
| *** nkhare has joined #heat | 08:56 | |
| *** alienyyg1 has joined #heat | 08:57 | |
| *** alienyyg1 has left #heat | 08:58 | |
| *** alienyyg1 has joined #heat | 08:58 | |
| *** alienyyg has quit IRC | 09:01 | |
| *** jistr has joined #heat | 09:02 | |
| alienyyg1 | shardy: the keystone.log http://paste.openstack.org/show/59842/ | 09:05 |
| *** alienyyg1 has left #heat | 09:05 | |
| *** alienyyg1 has joined #heat | 09:05 | |
| therve | I have a problem creating a AWS::ElasticLoadBalancing::LoadBalancer resource when I have several networks | 09:05 |
| therve | Nova complains that I need to specify the network ID, but I don't seem to have the possibility? | 09:06 |
| alienyyg1 | therve: It seem impossible to assign a network ID to loadbalancer. | 09:06 |
| therve | It sounds problematic :/ | 09:06 |
| shardy | therve: Can you use the neutron loadbalaner resource instead? | 09:07 |
| therve | shardy, I don't have it deployed in this environment yet... | 09:08 |
| therve | But I have have to | 09:08 |
| therve | I may have to | 09:09 |
| shardy | Obviously we're constrained by the AWS properties for the cfn compatible resources | 09:09 |
| shardy | I'd like to see all of them replaced with provider templates over time | 09:09 |
| *** rongze has quit IRC | 09:10 | |
| *** rushiagr has joined #heat | 09:14 | |
| *** derekh has joined #heat | 09:18 | |
| *** rushiagr has quit IRC | 09:22 | |
| *** rushiagr has joined #heat | 09:23 | |
| *** rushiagr2 has joined #heat | 09:28 | |
| openstackgerrit | Angus Salkeld proposed a change to openstack/heat: Add migration method to test sqldump files https://review.openstack.org/63251 | 09:29 |
| openstackgerrit | Angus Salkeld proposed a change to openstack/heat: Test db migration 31 https://review.openstack.org/63253 | 09:29 |
| *** rushiagr has quit IRC | 09:31 | |
| asalkeld_ | anyone keen to review: https://review.openstack.org/#/c/58723/ | 09:31 |
| *** gokrokve has joined #heat | 09:31 | |
| *** gokrokve has quit IRC | 09:35 | |
| shardy | asalkeld_: looking | 09:39 |
| asalkeld_ | ta | 09:39 |
| asalkeld_ | shardy, to me a question is whether to hash the plugin code or use the new version | 09:40 |
| shardy | asalkeld_: One interesting side effect of this is it will make testing handle_update, or retrying failed updates (in development where you're changing the code between attempts) kinda interesting ;) | 09:42 |
| shardy | Maybe should be a config option to disable it | 09:42 |
| *** sdake has quit IRC | 09:43 | |
| asalkeld_ | well shardy we could use the version for that | 09:43 |
| asalkeld_ | that's why the question of hash/version | 09:43 |
| asalkeld_ | but it's progress, don't be nervous ;) | 09:44 |
| shardy | Yeah, I'm not that keen on the hash tbh - I'm thinking it will also hit users after a heat upgrade, the next update blows away nearly every resource in their stacks, cos we've changed stuff ;) | 09:44 |
| asalkeld_ | not yaco (yet another config option) | 09:44 |
| asalkeld_ | well the update should be a no-op | 09:45 |
| asalkeld_ | if values have not actually changed | 09:46 |
| *** sdake has joined #heat | 09:46 | |
| asalkeld_ | only if the plugin sucks | 09:46 |
| shardy | Even if the signature has changed? | 09:46 |
| asalkeld_ | and doesn't have a update | 09:46 |
| * shardy looks at the patch more closely.. | 09:46 | |
| asalkeld_ | sure it will run update | 09:46 |
| asalkeld_ | shardy, there is a major and minor "version" | 09:47 |
| *** liang has quit IRC | 09:47 | |
| asalkeld_ | so impl. signature == replace | 09:47 |
| asalkeld_ | sorry, major version change == replace | 09:48 |
| asalkeld_ | for a plugin the class name has to change before a replace happens | 09:49 |
| shardy | asalkeld_: I'm not sure that's what users will want - they want to update the definition of their stack, and if we then replace stuff they haven't changed, it could get really confusing | 09:49 |
| asalkeld_ | but if the code changes then it is just an update | 09:49 |
| shardy | Ok, so if the code changes, we don't replace the resource? | 09:50 |
| asalkeld_ | shardy, correct | 09:50 |
| shardy | Maybe a wiki page with a few worked examples would help, to illustrate the use-cases | 09:50 |
| asalkeld_ | the main use case is for template resource | 09:51 |
| asalkeld_ | the plugin stuff shouldn't change much | 09:51 |
| asalkeld_ | the use case is in the commit message | 09:51 |
| shardy | Yeah I just don't get how that relates to hashing the python plugins - seems like we should only be comparing the templates of the before/after provider templates | 09:52 |
| shardy | maybe I just need more coffee :) | 09:52 |
| asalkeld_ | I made it generic | 09:52 |
| asalkeld_ | (on your request) | 09:53 |
| *** giulivo has joined #heat | 09:53 | |
| asalkeld_ | lol shardy read your own review a month ago | 09:53 |
| shardy | Haha, yeah, it's been a while, sorry ;) | 09:54 |
| asalkeld_ | "I have a question re the scope of this change - I'd like to understand why we can't have a hash signature for all resources, as provided we can figure out the right stuff to hash, this seems more widely useful than just for template_resources?" | 09:54 |
| asalkeld_ | I think it is ok as-is (my only qu. is hash/static version) | 09:55 |
| shardy | So my original comment was about hashing the template snippet, not the plugin implementation | 09:56 |
| * asalkeld_ thinks it's improved | 09:58 | |
| shardy | if prev_class != cur_class | 09:59 |
| shardy | Won't that replace the resource every time the signature changes? | 09:59 |
| asalkeld_ | self.__class__.__name__ | 10:00 |
| asalkeld_ | no, it's just the name | 10:00 |
| asalkeld_ | it returns (class name, hash) | 10:00 |
| asalkeld_ | for a template resource it returns (schema hash, template hash) | 10:01 |
| shardy | Aha. Maybe some variable renaming could make that a bit clearer | 10:01 |
| asalkeld_ | maybe | 10:02 |
| *** rongze has joined #heat | 10:04 | |
| *** bvandenh has joined #heat | 10:14 | |
| shardy | asalkeld_: If we rename plugins due to migrating to provider templates (like OS::Heat::CWLiteAlarm) will they all get replaced on the next update? | 10:22 |
| asalkeld_ | yip, and you would want that | 10:22 |
| shardy | well you'd only really want it if the new resource implementation was a provider template, not if we'd just renamed the old plugin? | 10:23 |
| asalkeld_ | difficult knowing that (besides hashing the code) | 10:25 |
| asalkeld_ | but shardy that is not a common thing | 10:25 |
| shardy | Yeah, just trying to figure out the path-of-least-surprises for users, I guess we can document it | 10:25 |
| asalkeld_ | and also knowing when we do/don't what a replace | 10:25 |
| shardy | asalkeld_: well it could be if we decide to reimplement all the CFN compatible resources as provider templates | 10:26 |
| asalkeld_ | I think that patch improves what we haev | 10:26 |
| shardy | but I guess we'd just have to document it as part of the release notes | 10:26 |
| shardy | asalkeld_: Sure, it definitely gives us more information at update time | 10:26 |
| shardy | asalkeld_: Couple of minor comments but OK otherwise | 10:28 |
| asalkeld_ | cool, thx shardy | 10:28 |
| asalkeld_ | I know it looks scary | 10:29 |
| asalkeld_ | but I think it's quite neat | 10:29 |
| shardy | Yeah, I just wanted to discuss it, so we can be clear what the user impact is, I like the general idea | 10:29 |
| *** nanjj has quit IRC | 10:30 | |
| *** gokrokve has joined #heat | 10:31 | |
| *** gokrokve has quit IRC | 10:36 | |
| alienyyg1 | shardy: did you get something from that log information? | 10:38 |
| shardy | alienyyg1: "Authorization failed. EC2 signature not supplied." | 10:40 |
| shardy | alienyyg1: Can you please confirm the version of python-boto and heat-cfntools in the instance? | 10:41 |
| shardy | alienyyg1: and the version of python-keystoneclient on the box running keystone | 10:41 |
| alienyyg1 | boto (2.5.2) | 10:42 |
| alienyyg1 | heat-cfntools (1.2.3) | 10:42 |
| alienyyg1 | python-keystoneclient-0.4.1-3.el6.noarch | 10:43 |
| alienyyg1 | shardy: It is the heat-engine tell keystone that a new isntance need to be lanuched, so why the boto adn cfntools in the instance? | 10:49 |
| *** alexheneveld has joined #heat | 10:50 | |
| shardy | https://github.com/hardys/presentations/raw/master/owf_heat_autoscaling_ceilometer_04102013.pdf | 10:52 |
| shardy | alienyyg1: see slide 5 | 10:52 |
| shardy | You have errors from the waitcondition notification in api-cfn.log, you also need to check for similar errors in api-cloudwatch.log | 10:53 |
| shardy | but the issue appears to be the requets don't contain the correct signature | 10:53 |
| shardy | which is created either by heat-engine (pre-signed URL, for wait conditions) | 10:53 |
| shardy | or by boto (for stats sent via cfn-push-stats) | 10:54 |
| *** gokrokve_ has joined #heat | 11:33 | |
| *** gokrokve_ has quit IRC | 11:37 | |
| *** sgordon has joined #heat | 11:45 | |
| *** bgorski has quit IRC | 12:04 | |
| *** bgorski has joined #heat | 12:08 | |
| *** sgordon has quit IRC | 12:09 | |
| *** john-n-seattle has quit IRC | 12:10 | |
| *** nkhare has quit IRC | 12:11 | |
| *** john-n-seattle has joined #heat | 12:11 | |
| *** jamieh has joined #heat | 12:23 | |
| *** gokrokve has joined #heat | 12:31 | |
| *** gokrokve has quit IRC | 12:35 | |
| alienyyg1 | shardy: It maybe something wrong with boto,because there is no /etc/boto.cfg file (or ~/.boto) is found, and it( https://wiki.openstack.org/wiki/Heat/BotoCli) says I can get the AWS key via keystone ec2-credentials-list, but it returns nothing, is this because I create the AWS key via heat ?? | 12:46 |
| openstackgerrit | A change was merged to openstack/heat: "mountpoint" should not be required parameter https://review.openstack.org/64636 | 12:46 |
| *** rushiagr2 is now known as rushiagr_away | 12:47 | |
| *** bgorski has quit IRC | 12:55 | |
| *** bgorski has joined #heat | 13:04 | |
| *** rushiagr_away is now known as rushiagr2 | 13:08 | |
| *** rongze has quit IRC | 13:10 | |
| shardy | alienyyg1: Yes heat creates the credentials for you, owned by a new keystone user (do keystone user-list to see them) | 13:25 |
| *** bgorski has quit IRC | 13:25 | |
| shardy | alienyyg1: we then deploy a heat boto config to /var/lib/heat-cfntools/cfn-boto-cfg | 13:27 |
| openstackgerrit | Simon Pasquier proposed a change to openstack/heat-cfntools: cfn-signal provides a unique default id https://review.openstack.org/64826 | 13:27 |
| shardy | And the credentials should be set in the template in /etc/cfn/cfn-credentials | 13:28 |
| *** bgorski has joined #heat | 13:31 | |
| openstackgerrit | A change was merged to openstack/heat: EventService exception handling to not log errors https://review.openstack.org/62446 | 13:36 |
| *** jpeeler has joined #heat | 13:40 | |
| *** jpeeler has joined #heat | 13:40 | |
| *** rongze has joined #heat | 13:41 | |
| *** john-n-seattle has quit IRC | 13:43 | |
| *** radez_g0n3 is now known as radez | 13:44 | |
| *** ciypro has quit IRC | 13:51 | |
| *** john-n-seattle has joined #heat | 13:52 | |
| *** rongze has quit IRC | 13:52 | |
| *** jpeeler has quit IRC | 14:00 | |
| *** jpeeler has joined #heat | 14:01 | |
| *** liang has joined #heat | 14:01 | |
| *** sgordon has joined #heat | 14:04 | |
| *** andersonvom has joined #heat | 14:13 | |
| *** jcru has joined #heat | 14:18 | |
| *** sabeen has joined #heat | 14:20 | |
| *** vijendar has joined #heat | 14:29 | |
| *** gokrokve has joined #heat | 14:31 | |
| openstackgerrit | Simon Pasquier proposed a change to openstack/heat-templates: Fix MultiNode_DevStack template https://review.openstack.org/64833 | 14:35 |
| *** gokrokve has quit IRC | 14:36 | |
| openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: Add _() to rackspace resource strings https://review.openstack.org/62922 | 14:40 |
| *** rongze has joined #heat | 14:45 | |
| *** liang has quit IRC | 14:47 | |
| *** rongze has quit IRC | 14:50 | |
| *** rongze has joined #heat | 14:56 | |
| *** jasond` has quit IRC | 14:56 | |
| *** jasond` has joined #heat | 14:57 | |
| *** chmouel has quit IRC | 14:59 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Remove X-Auth-Url header from authtoken middleware https://review.openstack.org/60991 | 15:03 |
| sdake | morning | 15:04 |
| andersonvom | morning! | 15:04 |
| *** radez is now known as radez_g0n3 | 15:09 | |
| *** arbylee has joined #heat | 15:10 | |
| *** gokrokve has joined #heat | 15:14 | |
| *** rushiagr2 has quit IRC | 15:15 | |
| *** jamieh has quit IRC | 15:18 | |
| *** alienyyg_ has joined #heat | 15:19 | |
| *** alienyyg_ has left #heat | 15:19 | |
| *** russellb is now known as rustlebee | 15:23 | |
| *** sjmc has joined #heat | 15:26 | |
| *** blamar has joined #heat | 15:29 | |
| *** dims has quit IRC | 15:30 | |
| *** dims has joined #heat | 15:33 | |
| *** radez_g0n3 is now known as radez | 15:33 | |
| *** dims is now known as dimsum | 15:34 | |
| *** spzala has joined #heat | 15:38 | |
| *** sjmc has quit IRC | 15:40 | |
| *** sjmc has joined #heat | 15:40 | |
| *** pafuent has joined #heat | 15:51 | |
| *** sabeen has quit IRC | 15:53 | |
| *** sabeen has joined #heat | 15:53 | |
| *** chmouel has joined #heat | 16:00 | |
| *** pasquier-s has quit IRC | 16:00 | |
| *** alienyyg has joined #heat | 16:04 | |
| *** ifarkas has quit IRC | 16:05 | |
| *** gokrokve has quit IRC | 16:07 | |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Refactor Instance#_check_active https://review.openstack.org/62478 | 16:07 |
| *** jprovazn is now known as jprovazn_afk | 16:07 | |
| *** gokrokve has joined #heat | 16:08 | |
| openstackgerrit | DennyZhang proposed a change to openstack/heat: Improve tools/uninstall-heat https://review.openstack.org/64694 | 16:09 |
| *** gokrokve has quit IRC | 16:12 | |
| *** alienyyg has quit IRC | 16:18 | |
| *** alexheneveld has quit IRC | 16:19 | |
| *** alienyyg has joined #heat | 16:34 | |
| *** alienyyg has quit IRC | 16:37 | |
| *** bvandenh has quit IRC | 16:40 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Check resources are in expected states https://review.openstack.org/58641 | 16:46 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add way to group exceptions in DependencyTaskGroup https://review.openstack.org/62479 | 16:46 |
| *** alienyyg has joined #heat | 16:52 | |
| pafuent | Hi everyone. Can somebody take a look at these patches? | 17:01 |
| pafuent | https://review.openstack.org/#/c/60607/ | 17:01 |
| pafuent | https://review.openstack.org/#/c/62752/ | 17:01 |
| shardy | pafuent: will do | 17:03 |
| pafuent | shardy: Thanks | 17:03 |
| *** radez is now known as radez_g0n3 | 17:04 | |
| jasond` | if someone can look at https://review.openstack.org/#/c/63002/ i'd appreciate it | 17:04 |
| *** alienyyg has quit IRC | 17:04 | |
| shardy | jasond`: Sorry I had a quick look yesterday after you asked, I'll try to take a closer look later | 17:05 |
| jasond` | shardy: thanks | 17:05 |
| jasond` | one thing i don't fully understand is when the context switching happens in the service.Service greenthreads | 17:06 |
| shardy | Nobody does because it's eventlet | 17:07 |
| jasond` | uh oh :) | 17:07 |
| shardy | ;) | 17:08 |
| *** bnemec is now known as beekneemech | 17:09 | |
| zaneb | lol | 17:11 |
| *** alienyyg has joined #heat | 17:16 | |
| *** rcleere has joined #heat | 17:16 | |
| *** Linz has joined #heat | 17:20 | |
| *** alexheneveld has joined #heat | 17:24 | |
| *** Linz has quit IRC | 17:26 | |
| *** Linz has joined #heat | 17:27 | |
| *** derekh has quit IRC | 17:29 | |
| *** harlowja_away is now known as harlowja | 17:38 | |
| *** ruhe has joined #heat | 17:40 | |
| *** pafuent has left #heat | 17:51 | |
| *** jistr has quit IRC | 17:55 | |
| *** ruhe is now known as _ruhe | 17:57 | |
| *** _ruhe is now known as ruhe | 18:13 | |
| *** arbylee has quit IRC | 18:17 | |
| *** pafuent has joined #heat | 18:19 | |
| *** rushiagr has joined #heat | 18:22 | |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: Make LoadBalancer nested stack template configurable https://review.openstack.org/64874 | 18:24 |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: Make LoadBalancer nested stack template configurable https://review.openstack.org/64874 | 18:26 |
| *** rwsu has quit IRC | 18:28 | |
| *** ruhe is now known as _ruhe | 18:28 | |
| *** _ruhe is now known as ruhe | 18:33 | |
| *** akuznetsov has joined #heat | 18:41 | |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Document Heat terms in glossary.rst https://review.openstack.org/64314 | 18:44 |
| *** yogesh has joined #heat | 18:45 | |
| *** arbylee has joined #heat | 18:47 | |
| *** arbylee has quit IRC | 18:50 | |
| *** arbylee has joined #heat | 18:51 | |
| *** gokrokve has joined #heat | 18:54 | |
| *** bgorski has quit IRC | 18:56 | |
| *** gokrokve has quit IRC | 18:59 | |
| *** rushiagr has quit IRC | 19:05 | |
| *** rongze has quit IRC | 19:15 | |
| *** andrew_plunk has joined #heat | 19:15 | |
| *** rongze has joined #heat | 19:16 | |
| *** rongze has quit IRC | 19:20 | |
| *** giulivo has quit IRC | 19:24 | |
| *** tomek_adamczewsk has joined #heat | 19:28 | |
| *** gokrokve has joined #heat | 19:34 | |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Add documentation for multi-engine https://review.openstack.org/63963 | 19:38 |
| *** spzala has quit IRC | 19:39 | |
| *** rwsu has joined #heat | 19:41 | |
| *** tomek_adamczewsk has quit IRC | 19:45 | |
| *** pafuent has quit IRC | 19:48 | |
| *** pafuent has joined #heat | 19:55 | |
| *** sabeen has quit IRC | 20:02 | |
| *** spzala has joined #heat | 20:15 | |
| *** rongze has joined #heat | 20:16 | |
| *** radez_g0n3 is now known as radez | 20:20 | |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Fix schema format in template generation unit tests https://review.openstack.org/64899 | 20:22 |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Use the new Schema class for template generation https://review.openstack.org/64900 | 20:22 |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Correct use of Fn::Split in generated provider templates https://review.openstack.org/64901 | 20:22 |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Generate provider templates with Boolean params correctly https://review.openstack.org/64902 | 20:22 |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Include a format version in generated templates https://review.openstack.org/64903 | 20:22 |
| *** rongze has quit IRC | 20:23 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Check resources are in expected states https://review.openstack.org/58641 | 20:35 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add way to group exceptions in DependencyTaskGroup https://review.openstack.org/62479 | 20:35 |
| *** radix_ has joined #heat | 20:39 | |
| *** sabeen has joined #heat | 20:47 | |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Convert Server to new Schema format https://review.openstack.org/61786 | 20:48 |
| *** sabeen has quit IRC | 20:50 | |
| *** sabeen has joined #heat | 20:50 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Unscoped List Stacks https://review.openstack.org/63041 | 20:53 |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Convert Server to new Schema format https://review.openstack.org/61786 | 20:54 |
| *** jprovazn_afk has quit IRC | 21:02 | |
| *** pafuent has left #heat | 21:06 | |
| *** rongze has joined #heat | 21:19 | |
| *** john-n-seattle2 has quit IRC | 21:20 | |
| *** rongze has quit IRC | 21:23 | |
| pscheie | If I want to have multiple instances of a resource (a VM), is that just a matter of having a Count parameter in the Properties for the resource? | 21:42 |
| zaneb | pscheie: no | 21:42 |
| zaneb | pscheie: for VMs, you can use a ScalingGroup resource to accomplish what you want | 21:43 |
| *** giulivo has joined #heat | 21:44 | |
| pscheie | zaneb, is that the same thing as autoscaling? | 21:44 |
| *** lsmola_ has quit IRC | 21:55 | |
| yogesh | hi.. | 21:57 |
| yogesh | is there a way to add a lag/wait within the template so that the resource creation is sparsed....i am facing a nova over rate issue and thinking of this as one of the solutions... | 21:58 |
| yogesh | :zaneb | 21:59 |
| *** nati_ueno has quit IRC | 22:05 | |
| *** nati_ueno has joined #heat | 22:08 | |
| *** SergeyLukjanov has joined #heat | 22:10 | |
| *** sgordon has quit IRC | 22:12 | |
| *** arbylee has quit IRC | 22:12 | |
| *** mahipal has joined #heat | 22:16 | |
| *** rongze has joined #heat | 22:20 | |
| *** jergerber has joined #heat | 22:20 | |
| *** nati_ueno has quit IRC | 22:22 | |
| *** rongze has quit IRC | 22:25 | |
| zaneb | pscheie: it's autoscaling without the auto part | 22:29 |
| zaneb | yogesh: I can't actually think of a way to do that :( | 22:30 |
| yogesh | zaneb: i was reading about the waitcondition | 22:31 |
| jasond` | yogesh: you could do explicit dependencies so they all create sequentially | 22:31 |
| zaneb | yeah, but I don't think that's what you want | 22:31 |
| yogesh | need to explore more, was curious about more ways than waitcondition or dependson | 22:31 |
| zaneb | yeah, I was about to suggest what jasond` said | 22:32 |
| zaneb | so make one server depend on another | 22:32 |
| yogesh | it is not about servers... | 22:32 |
| zaneb | then you won't hit the nova api again until after the first is built | 22:32 |
| yogesh | i have to add multiple security rules... | 22:32 |
| yogesh | and all of them are within the same security group... | 22:32 |
| yogesh | which makes my nova over rate ruptured... | 22:33 |
| zaneb | ugh | 22:33 |
| yogesh | one of the ways is definitely to have multiple security groups...and distribute rules amongst them... | 22:33 |
| zaneb | waitconditions won't help you, because when they time out they cause your whole stack to fail | 22:34 |
| yogesh | with 'dependson' | 22:34 |
| yogesh | but didn't find it too elegant | 22:34 |
| *** jergerber has quit IRC | 22:34 | |
| zaneb | yogesh: that sounds like a good idea under the circumstances | 22:34 |
| yogesh | yeah, a good hack... :-) | 22:34 |
| jasond` | i was thinking about putting in a patch for the way polling happens during resource creation | 22:35 |
| zaneb | will just adding dependencies between the rules (even within one security group) not help? I suspect not, but worth a try | 22:35 |
| yogesh | it won't actually | 22:35 |
| zaneb | ok | 22:35 |
| jasond` | to make it non-linear, so the longer it takes, the longer the poll interval will be | 22:35 |
| yogesh | coz the rate limit will still exceeed until and unless there is an explicit wait | 22:36 |
| jasond` | zaneb: does that sound like a bug report or a BP? | 22:36 |
| zaneb | jasond`: ah, my least favourite question ;) Yes. Yes it does. | 22:37 |
| jasond` | depends on how close we are to freeze, right? | 22:37 |
| zaneb | lol, exactly | 22:38 |
| jasond` | ;) | 22:38 |
| yogesh | :-) | 22:38 |
| zaneb | I guess that makes it a bp then ;) | 22:39 |
| lifeless | jasond`: I'd much rather you fix the resources you're creating to callback on completion / failure, so we don't need to poll at all | 22:41 |
| *** alexheneveld has quit IRC | 22:43 | |
| jasond` | lifeless: not sure i understand. we're polling (nova, for example) to see when the resource creation is complete | 22:44 |
| jasond` | is there a way to tell nova to tell us when it's done? | 22:44 |
| *** gokrokve has quit IRC | 22:45 | |
| *** gokrokve has joined #heat | 22:45 | |
| yogesh | jasond`: is it related to my question...if yes, how is it going to help... | 22:49 |
| yogesh | sorry, for being lame... | 22:49 |
| lifeless | jasond`: there isn't, but if there was, heat and nova would both spend less wasted effort handling polling. | 22:49 |
| lifeless | jasond`: so the obvious thing to do is to fix nova :) | 22:49 |
| *** gokrokve has quit IRC | 22:50 | |
| zaneb | jasond`, lifeless: actually there is, nova has some sort of notification thingy | 22:50 |
| zaneb | or so I am told | 22:50 |
| jasond` | yogesh: yes. your rate limiting is probably N requests/minute, so dynamically increasing the polling interval would definitely affect that | 22:51 |
| yogesh | ok...got it | 22:51 |
| jasond` | zaneb: i will have to research that | 22:52 |
| zaneb | ask shardy about it, I think that's who I heard it from | 22:52 |
| jasond` | zaneb: will do. thanks | 22:52 |
| zaneb | I doubt that in yogesh's case we are polling security group rules. those are more of a one-shot thing anyway | 22:53 |
| *** alexheneveld has joined #heat | 22:54 | |
| yogesh | zaneb: yeah, point... | 22:54 |
| yogesh | security rules are not separate resources | 22:54 |
| * zaneb looks at the code | 22:55 | |
| zaneb | ooooohhh | 22:55 |
| zaneb | didn't realise a rule was not a separate resource type | 22:56 |
| zaneb | so we're actually creating them all in a tight loop :( | 22:57 |
| *** jasond` has quit IRC | 22:58 | |
| zaneb | so maybe we need to split that up into batches | 22:59 |
| *** jcru has quit IRC | 22:59 | |
| zaneb | yogesh: can you file a bug? | 22:59 |
| yogesh | sure | 23:00 |
| lifeless | zaneb: even more reason to use it | 23:06 |
| zaneb | +1, I'd love to get rid of polling | 23:06 |
| *** nati_ueno has joined #heat | 23:07 | |
| sjmc | i folks. i'm trying to pass an existing auth token to heat (rather than a username/password) but getting a 401 even though the token's valid | 23:10 |
| sjmc | are there any settings i should be looking at? i've been digging around but i haven't found any evidence the token's getting used | 23:11 |
| *** jasond` has joined #heat | 23:12 | |
| *** rongze has joined #heat | 23:20 | |
| *** vijendar has quit IRC | 23:22 | |
| *** giulivo has quit IRC | 23:24 | |
| *** rongze has quit IRC | 23:25 | |
| *** SergeyLukjanov has quit IRC | 23:26 | |
| yogesh | sjmc: | 23:28 |
| sjmc | hey yogesh | 23:28 |
| yogesh | please check that the admin credentials configured in the heat configuration are configured right | 23:28 |
| yogesh | this is 1 | 23:29 |
| sjmc | i'm not running as an admin | 23:29 |
| yogesh | there are couple other things.. | 23:29 |
| sjmc | so if that's necessary, that might be it | 23:29 |
| yogesh | that is it... | 23:29 |
| sjmc | but i can make requests using a username/password | 23:29 |
| sjmc | ok | 23:29 |
| yogesh | are u communicating with keystone in insecure mode? | 23:31 |
| yogesh | or do u have a certificate configured? | 23:32 |
| sjmc | no cert | 23:32 |
| yogesh | is insecure flag set for keystone? | 23:33 |
| yogesh | in your heat configuration? | 23:33 |
| *** rcleere has quit IRC | 23:33 | |
| sjmc | no | 23:33 |
| sjmc | my setup, for some background, is that i'm running heat as an ordinary tenant on a cloud on which i don't have admin privileges | 23:34 |
| yogesh | under [keystone_authtoken] and [clients_keystone] sections | 23:34 |
| yogesh | set insecure =true | 23:35 |
| yogesh | oh | 23:35 |
| sjmc | i know there are some things i can't do (like creating wait conditions), but are there other limitations i'm likely to run into? | 23:36 |
| yogesh | so, if the user you have configrued as admin on heat, doesn't have admin privileges on keystone...it won't work | 23:36 |
| yogesh | because the auth token u r passing...needs to be confirmed from keystone for validity | 23:36 |
| yogesh | and only the admin roile has the privilege to confirm the validity of another token | 23:37 |
| sjmc | and that requires admin? ok, my misunderstanding | 23:37 |
| yogesh | once u fix this u'll get into the insecure related issues... | 23:38 |
| sjmc | yeah.. so is it impractical to use heat at all like this? | 23:38 |
| yogesh | for them, u need to set insecure flag under [keystone_authtoken] and [clients_keystone] sections | 23:38 |
| yogesh | well... | 23:38 |
| yogesh | wehre are u running it...? | 23:39 |
| yogesh | u can run it in devstack... | 23:39 |
| sjmc | just experimenting with it for now | 23:39 |
| yogesh | to get some control.. | 23:39 |
| yogesh | i would say... | 23:39 |
| yogesh | try using heat in conjunction with devstack | 23:39 |
| yogesh | https://wiki.openstack.org/wiki/Heat/GettingStartedUsingDevstack | 23:40 |
| yogesh | u'll have some control from the openstack perspective | 23:41 |
| sjmc | yeah, that won't help longer term though | 23:41 |
| sjmc | ok, maybe i need to rethink | 23:41 |
| yogesh | there is a next step... :-) | 23:41 |
| yogesh | tehn u can try heat standalone: https://github.com/mehrayogesh/heat-standalone | 23:41 |
| yogesh | cool.. | 23:42 |
| sjmc | that's essentially what i have | 23:42 |
| yogesh | sure | 23:42 |
| yogesh | yeah but since u dont have control on teh openstack on your cloud.. | 23:42 |
| yogesh | .u need a devstack to see things happening | 23:42 |
| sjmc | no... | 23:42 |
| sjmc | i've been able to provision stuff | 23:42 |
| yogesh | using username, password? | 23:43 |
| sjmc | like i said, username and password works | 23:43 |
| sjmc | yeah | 23:43 |
| yogesh | sure | 23:43 |
| yogesh | yeah | 23:43 |
| yogesh | so standalone, anyways u have it working | 23:43 |
| *** ruhe is now known as _ruhe | 23:44 | |
| *** yogesh has quit IRC | 23:46 | |
| sjmc | does the engine try to authenticate in the same way? i.e. if i wasn't going through heat-api would the same problem crop up? | 23:47 |
| *** sjmc has quit IRC | 23:56 | |
| *** dimsum has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!