*** gokrokve has quit IRC | 00:01 | |
*** gokrokve has joined #heat | 00:01 | |
*** arbylee has quit IRC | 00:02 | |
*** gokrokve has quit IRC | 00:06 | |
*** gokrokve has joined #heat | 00:09 | |
*** alexheneveld has joined #heat | 00:24 | |
*** gokrokve has quit IRC | 00:29 | |
*** gokrokve has joined #heat | 00:30 | |
*** gokrokve has quit IRC | 00:34 | |
openstackgerrit | A change was merged to openstack/python-heatclient: Sort resource-type-list output https://review.openstack.org/64557 | 00:35 |
---|---|---|
*** rongze has joined #heat | 00:44 | |
*** rongze has quit IRC | 00:49 | |
openstackgerrit | A change was merged to openstack/heat: Add policy enforcement to ReST API https://review.openstack.org/63185 | 01:03 |
openstackgerrit | A change was merged to openstack/heat: Add test coverage for SignalResponder delete https://review.openstack.org/62988 | 01:03 |
*** nosnos has joined #heat | 01:06 | |
*** amrit has joined #heat | 01:11 | |
*** amrit has quit IRC | 01:19 | |
*** amrit has joined #heat | 01:20 | |
openstackgerrit | A change was merged to openstack/heat: Make LoadBalancer nested stack template configurable https://review.openstack.org/64874 | 01:23 |
openstackgerrit | A change was merged to openstack/heat: Deleted TEMPDIR on exit https://review.openstack.org/64506 | 01:23 |
*** arbylee has joined #heat | 01:24 | |
*** arbylee has quit IRC | 01:40 | |
*** gokrokve has joined #heat | 01:43 | |
*** gokrokve has quit IRC | 01:48 | |
*** arbylee has joined #heat | 01:56 | |
*** rongze has joined #heat | 02:00 | |
openstackgerrit | A change was merged to openstack/heat: add assertion to heat-keystone-setup script https://review.openstack.org/61905 | 02:01 |
openstackgerrit | A change was merged to openstack/heat: Filter resource types by support status https://review.openstack.org/55567 | 02:06 |
*** amrit has quit IRC | 02:14 | |
*** liang has joined #heat | 02:16 | |
*** liang has left #heat | 02:17 | |
*** liang has joined #heat | 02:17 | |
*** erkules_ has joined #heat | 02:19 | |
*** erkules has quit IRC | 02:22 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Removed unused variables https://review.openstack.org/62827 | 02:23 |
*** alienyyg1 has left #heat | 02:24 | |
*** sdake_ has quit IRC | 02:39 | |
*** sdake has joined #heat | 02:39 | |
*** sdake has quit IRC | 02:39 | |
*** sdake has joined #heat | 02:39 | |
*** _ruhe is now known as ruhe | 02:40 | |
*** erkules_ has quit IRC | 02:47 | |
*** erkules_ has joined #heat | 02:49 | |
*** alienyyg has joined #heat | 02:49 | |
*** alienyyg1 has joined #heat | 02:54 | |
*** ruhe is now known as ruhe_away | 03:01 | |
*** alienyyg has left #heat | 03:01 | |
asalkeld_ | https://review.openstack.org/#/c/64451/ | 03:08 |
asalkeld_ | that needs an ack | 03:08 |
*** alexheneveld has quit IRC | 03:11 | |
stevebaker | done | 03:12 |
asalkeld_ | ta | 03:13 |
asalkeld_ | stevebaker, how do mark lp bugs as duplicates? | 03:14 |
asalkeld_ | found it | 03:15 |
*** alienyyg1 has quit IRC | 03:18 | |
*** ruhe_away is now known as _ruhe | 03:20 | |
*** alienyyg has joined #heat | 03:24 | |
alienyyg | hello | 03:24 |
alienyyg | are your here? | 03:24 |
alienyyg | are you here ? | 03:25 |
asalkeld_ | alienyyg, seems like we are | 03:26 |
asalkeld_ | welcome to earth ;) | 03:26 |
alienyyg | yeah, I back to earth after my weekends in mars,BTW I love bruno mars | 03:27 |
*** gokrokve has joined #heat | 03:31 | |
alienyyg | I have some questions about boto: when we use aws compatible resource in heat, we need boto to delivery stats(cfn-push-state) to heat, and in the procedure,does the authentication necessary, and how the cfn-push-state cooporate with keystone in openstack ? | 03:34 |
*** rcleere has joined #heat | 03:37 | |
*** andersonvom has joined #heat | 03:43 | |
stevebaker | alienyyg: an ec2 keypair is required for validation, and keystone validates that the request was signed correctly with the expected keypair | 03:44 |
*** andersonvom has quit IRC | 03:47 | |
*** slong_ has joined #heat | 03:48 | |
*** slong has quit IRC | 03:48 | |
alienyyg | stevebaker: the ec2 keypare is what we create in openstack dashboard? and the credentials set in boto.cfg is something based on the keypair? | 03:50 |
stevebaker | alienyyg: the keypair is created by heat when the stack is launched, currently with an explicit AccessKey resource in the template | 03:52 |
alienyyg | stevebaker: you mean the keypair is AWSAccessKeyId and AWSAccessKey ?? | 03:53 |
alienyyg | stevebaker: it is create by the resource AWS::IAM::AccessKey? | 03:54 |
stevebaker | alienyyg: yes, see http://git.openstack.org/cgit/openstack/heat-templates/tree/cfn/F17/AutoScalingCeilometer.yaml for an example | 03:55 |
alienyyg | stevebaker: the heat create five new user in keystone in that example template , and why do we need five user? | 03:57 |
alienyyg | stevebaker: they are sd-CfnUser,sd-ElasticLoadBalancer-sef3hnwi56nb-CfnLBUser,sd-ElasticLoadBalancer-sef3hnwi56nb-WaitHandle,sd-WebServerScaleDownPolicy, sd-WebServerScaleUpPolicy | 04:00 |
alienyyg | stevebaker: maybe one user can do all the things? | 04:00 |
stevebaker | they are each associated with their respective resources. This may all be changing soon anyway with shardy's current auth work | 04:01 |
openstackgerrit | A change was merged to openstack/heat: Fix regression in Rackspace Cloud Servers tests https://review.openstack.org/64451 | 04:02 |
*** nkhare has joined #heat | 04:14 | |
*** nkhare has quit IRC | 04:26 | |
*** nkhare has joined #heat | 04:26 | |
*** arbylee has quit IRC | 04:27 | |
*** andersonvom has joined #heat | 04:32 | |
openstackgerrit | A change was merged to openstack/heat: Fixes typo of explanation on exception.py https://review.openstack.org/64765 | 04:35 |
*** slong_ has quit IRC | 04:37 | |
*** rongze has quit IRC | 04:40 | |
*** chandankumar has joined #heat | 04:48 | |
*** andersonvom has quit IRC | 05:01 | |
*** Linz has joined #heat | 05:01 | |
*** andersonvom has joined #heat | 05:05 | |
alienyyg | stevebaker: So what is the password of these users created by heat ? | 05:07 |
alienyyg | stevebaker: because I wanna to take a look at the ec2-credentials in keystone, try to solve my authentication errors in autoscaling | 05:09 |
alienyyg | stevebaker: I think they shouln't be the AWSAccessKey | 05:11 |
*** chandankumar has quit IRC | 05:16 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/python-heatclient: Added API reference document https://review.openstack.org/63665 | 05:21 |
*** urulama has joined #heat | 05:22 | |
*** chandankumar has joined #heat | 05:23 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/python-heatclient: Added API reference document https://review.openstack.org/63665 | 05:25 |
*** andersonvom has quit IRC | 05:27 | |
*** arbylee has joined #heat | 05:27 | |
*** rushiagr has joined #heat | 05:31 | |
*** nosnos_ has joined #heat | 05:34 | |
*** arbylee has quit IRC | 05:35 | |
*** nosnos__ has joined #heat | 05:36 | |
*** nosnos_ has quit IRC | 05:37 | |
*** nosnos has quit IRC | 05:38 | |
*** rpothier_ has quit IRC | 05:54 | |
*** rpothier_ has joined #heat | 05:58 | |
openstackgerrit | Jenkins proposed a change to openstack/heat: Imported Translations from Transifex https://review.openstack.org/64504 | 06:05 |
*** nati_ueno has joined #heat | 06:05 | |
*** rongze has joined #heat | 06:18 | |
*** rongze_ has joined #heat | 06:21 | |
*** rongze has quit IRC | 06:25 | |
*** alienyyg1 has joined #heat | 06:33 | |
*** alienyyg1 has left #heat | 06:48 | |
*** nosnos__ has quit IRC | 07:06 | |
*** nosnos has joined #heat | 07:06 | |
*** rcleere has quit IRC | 07:21 | |
alienyyg | hi guys: I got something intresting,I'm doing autoscaing with aws resource as the demo template in github, as the template indicate the instance to push the state every one minite, so in the heat-api-cloudwatch.log we can see the heat-api-cloudwatch got request every one minite, but in the first authentication, it fails (code 401), 3s later ,the instance send the request again, and the authentication passed, it is all like this every period and seems the s | 07:23 |
alienyyg | to this, so can anyone tell me how could this happen?? | 07:23 |
alienyyg | http://paste.openstack.org/show/60384/ | 07:24 |
*** andersonvom has joined #heat | 07:28 | |
*** arbylee has joined #heat | 07:32 | |
*** andersonvom has quit IRC | 07:32 | |
*** jprovazn has joined #heat | 07:35 | |
*** gokrokve has quit IRC | 07:40 | |
*** arbylee has quit IRC | 07:41 | |
*** ifarkas has joined #heat | 07:46 | |
alienyyg | someone aviliable to take a look at that? | 07:47 |
*** radix has joined #heat | 07:48 | |
*** zigo has joined #heat | 07:48 | |
*** gondoi has joined #heat | 07:48 | |
grncdr | alienyyg: you would probably have better luck during US working hours tomorrow | 07:48 |
grncdr | there are quite a few people spread around the world in here, but it's some degree of Sunday night in most places. | 07:49 |
*** ifarkas has quit IRC | 07:49 | |
alienyyg | grncdr: but I am living on the other side of earth :( | 07:52 |
*** rushiagr is now known as rushiagr_away | 07:52 | |
grncdr | alienyyg: have you seen the openstack stackexchange site? | 07:52 |
grncdr | might be good to post your problem there and then link back to it here | 07:53 |
grncdr | IRC isn't very good for holding conversations with that much delay | 07:53 |
*** john-n-seattle has joined #heat | 07:53 | |
alienyyg | grncdr: good idear,thank you :) | 07:54 |
*** ifarkas has joined #heat | 07:58 | |
*** rushiagr_away is now known as rushiagr | 08:10 | |
*** gokrokve has joined #heat | 08:11 | |
alienyyg | grncdr: I asked a question in launchpad, seems earier to find the site "openstack " thanks for your idear. https://answers.launchpad.net/heat-cfntools/+question/241767 | 08:11 |
*** pasquier-s has joined #heat | 08:12 | |
*** urulama_ has joined #heat | 08:12 | |
*** urulama has quit IRC | 08:12 | |
*** ppetit has joined #heat | 08:14 | |
*** gokrokve has quit IRC | 08:15 | |
*** TonyBurn has joined #heat | 08:15 | |
*** gokrokve has joined #heat | 08:20 | |
therve | 'morning | 08:24 |
alienyyg | mornig | 08:25 |
*** lsmola_ has joined #heat | 08:26 | |
*** bvandenh has joined #heat | 08:29 | |
shardy | morning all | 08:36 |
alienyyg | shardy: hi,very nice to meet you | 08:42 |
*** jistr has joined #heat | 08:49 | |
openstackgerrit | Mitsuru Kanabuchi proposed a change to openstack/heat: Implements resource type NetworkGateway https://review.openstack.org/62287 | 08:50 |
alienyyg | shardy: can you take a look at this ? it is the question I have asked last firday, but I think it maybe not that simple. https://answers.launchpad.net/heat-cfntools/+question/241767 | 08:53 |
shardy | alienyyg: I've been testing trying to reproduce your issues, and I can't - autoscaling works fine for me with recent Heat and RDO Havana | 08:53 |
shardy | alienyyg: Are you using one of our prebuilt images, and is the template completely unmodified? | 08:54 |
alienyyg | shardy: I test the F17-x86_64-cfntools from here: http://fedorapeople.org/groups/heat/prebuilt-jeos-images/ , also I have create my own F19-cfntool image with diskimage-builder ,all of them can not work:( | 08:57 |
shardy | alienyyg: So far I've tested with F17, F19 and F20 images and they all work fine | 09:01 |
shardy | alienyyg: I'm setting up another box with a fresh Havana install so I'll re-test on that, probably not until tomorrow though | 09:01 |
alienyyg | shardy: really? that's amazing | 09:02 |
shardy | alienyyg: Are you sure you don't have a stale instance around from a deleted stack, which is sending bogus requests? | 09:02 |
shardy | That is the only explanation I can think of for why some requests would work and some fail | 09:02 |
alienyyg | shardy: I have a zombie stack , and can't delete it | 09:03 |
shardy | alienyyg: So delete the instances direct with nova delete <instance id> | 09:03 |
alienyyg | shardy: not stale instace was found. | 09:05 |
*** derekh has joined #heat | 09:10 | |
alienyyg | shardy: can you share your openstack enviroment if it is possibe?I mean the answerfile? | 09:11 |
*** alexheneveld has joined #heat | 09:11 | |
alienyyg | shary: and did you deploy openstack to vm such as virtualbox or just pysical machine? | 09:12 |
shardy | alienyyg: physical machine | 09:13 |
*** alexheneveld has quit IRC | 09:13 | |
alienyyg | shardy: I tried vmware ,but the network alway be a problem | 09:14 |
shardy | alienyyg: I've only ever used VMs for devstack deployments, as IME the performance is not good enough for anything other than trival testing/developement | 09:15 |
shardy | alienyyg: I'm not sure this is related to your problem though, as your logs show the network and authentication is working | 09:16 |
shardy | I definitely have never tested on virtualbox ;) | 09:17 |
alienyyg | shary: all my current openstack are on pysical machines | 09:17 |
openstackgerrit | huangtianhua proposed a change to openstack/heat: Fixes missing resource number checking https://review.openstack.org/65050 | 09:21 |
*** rongze_ has quit IRC | 09:23 | |
*** rongze has joined #heat | 09:43 | |
*** nati_ueno has quit IRC | 09:54 | |
*** giulivo has joined #heat | 09:55 | |
*** nati_ueno has joined #heat | 10:01 | |
*** scroiset_ is now known as scroiset | 10:08 | |
*** che-arne has joined #heat | 10:13 | |
*** alexheneveld has joined #heat | 10:15 | |
*** urulama_ has quit IRC | 10:15 | |
*** sjain has joined #heat | 10:18 | |
*** urulama has joined #heat | 10:18 | |
*** urulama has quit IRC | 10:24 | |
*** urulama has joined #heat | 10:25 | |
*** urulama has quit IRC | 10:27 | |
*** liang has quit IRC | 10:35 | |
*** Linz has quit IRC | 10:48 | |
*** Linz has joined #heat | 10:49 | |
*** rushiagr2 has joined #heat | 10:57 | |
*** nati_ueno has quit IRC | 10:58 | |
*** rushiagr has quit IRC | 11:00 | |
*** sjain has quit IRC | 11:02 | |
*** scroiset is now known as scroiset-hungry | 11:02 | |
*** rongze has quit IRC | 11:04 | |
*** rongze has joined #heat | 11:05 | |
*** nkhare has quit IRC | 11:05 | |
chmouel | SpamapS: ping | 11:07 |
openstackgerrit | Steven Hardy proposed a change to openstack/heat: Update Loadbalancer default template to F20 image https://review.openstack.org/65060 | 11:07 |
therve | chmouel, It should be 3am for him fwiw | 11:08 |
*** rongze has quit IRC | 11:09 | |
chmouel | therve: oh ok is he based in australasia? | 11:11 |
chmouel | therve: or west coast :) | 11:12 |
therve | chmouel, Yeah LA | 11:12 |
chmouel | I just realised it was only 12AM here 8-) | 11:13 |
chmouel | is there any sqlalchemy.migrate expert by any chances? | 11:14 |
*** liang has joined #heat | 11:19 | |
therve | Not by any stretch, but ask anyway :) | 11:20 |
chmouel | therve: well basically adding a new primary key column with sqlite seems nearly impossible | 11:22 |
chmouel | therve: i can figure out with postgres | 11:22 |
chmouel | and mysql | 11:22 |
chmouel | but sqlite it does not seem supported in sqlalchemy.migrate | 11:23 |
therve | Ah you mean for testing | 11:23 |
chmouel | yep for the tests to pass | 11:23 |
chmouel | and if i wanted to add the support for it in sqlalchemy.migrate it seems that i have to go by some crazy statement http://stackoverflow.com/a/20561207/145125 | 11:23 |
therve | Yeah it doesn't sounds good | 11:24 |
chmouel | so i can sure add that manually in my migration just so the tests can go but that doesn't going to look good | 11:26 |
*** andersonvom has joined #heat | 11:28 | |
chmouel | and for what is worth alembic seems to explicitly disallow that (for every engines) http://stackoverflow.com/a/13757758/145125 | 11:29 |
*** andersonvom has quit IRC | 11:32 | |
openstackgerrit | Steven Hardy proposed a change to openstack/heat: Tolerate deleted trust on stack delete https://review.openstack.org/65064 | 11:32 |
*** rongze has joined #heat | 11:35 | |
*** arbylee has joined #heat | 11:37 | |
openstackgerrit | A change was merged to openstack/heat-templates: OS::Metering::Alarm -> OS::Ceilometer::Alarm https://review.openstack.org/62677 | 11:39 |
*** rongze has quit IRC | 11:40 | |
*** arbylee has quit IRC | 11:42 | |
*** rushiagr2 is now known as rushiagr_away | 11:43 | |
*** jamieh has joined #heat | 11:46 | |
*** rushiagr_away is now known as rushiagr2 | 11:47 | |
*** dims_ is now known as dims | 11:59 | |
*** liang has quit IRC | 11:59 | |
*** erkules_ is now known as erkules | 12:07 | |
*** rpothier_ has quit IRC | 12:09 | |
*** urulama has joined #heat | 12:20 | |
*** alienyyg has quit IRC | 12:21 | |
*** Linz has quit IRC | 12:24 | |
*** Linz has joined #heat | 12:28 | |
*** rongze has joined #heat | 12:35 | |
*** nosnos has quit IRC | 12:36 | |
*** rongze has quit IRC | 12:39 | |
*** funzo has joined #heat | 12:43 | |
*** jdob has joined #heat | 12:49 | |
*** aweiteka has joined #heat | 12:57 | |
openstackgerrit | A change was merged to openstack/python-heatclient: Fix help formatting for resource-template https://review.openstack.org/64547 | 13:05 |
*** rushiagr2 has quit IRC | 13:08 | |
*** urulama has quit IRC | 13:09 | |
*** rpothier_ has joined #heat | 13:20 | |
*** rongze has joined #heat | 13:25 | |
*** arbylee has joined #heat | 13:33 | |
*** arbylee has quit IRC | 13:38 | |
*** arbylee has joined #heat | 13:39 | |
*** jdob has quit IRC | 13:45 | |
*** scroiset-hungry is now known as scroiset | 13:47 | |
openstackgerrit | Jordan Pittier proposed a change to openstack/heat: Add ability to configure Heat and Trove client options https://review.openstack.org/63644 | 13:47 |
*** chandankumar has quit IRC | 13:47 | |
*** jdob has joined #heat | 13:48 | |
*** sgordon has joined #heat | 13:50 | |
*** sgordon has quit IRC | 13:50 | |
*** sgordon has joined #heat | 13:50 | |
*** agileclipse has joined #heat | 14:00 | |
openstackgerrit | Richard Lee proposed a change to openstack/heat: Check resources are in expected states https://review.openstack.org/58641 | 14:07 |
openstackgerrit | Richard Lee proposed a change to openstack/heat: Add way to group exceptions in DependencyTaskGroup https://review.openstack.org/62479 | 14:07 |
openstackgerrit | Swann Croiset proposed a change to openstack/heat: Add autoscaling notifications https://review.openstack.org/62087 | 14:14 |
*** sjain has joined #heat | 14:14 | |
*** nkhare has joined #heat | 14:22 | |
*** rushiagr2 has joined #heat | 14:27 | |
*** Linz has quit IRC | 14:28 | |
*** jcru has joined #heat | 14:28 | |
*** radix_ has joined #heat | 14:28 | |
*** radez_g0n3 is now known as radez | 14:31 | |
sdake | morning | 14:33 |
*** blamar has joined #heat | 14:33 | |
*** openstack has joined #heat | 14:33 | |
shardy | Hi sdake | 14:33 |
sdake | hey shards | 14:35 |
*** sabeen has joined #heat | 14:39 | |
*** jay-lau-513 has quit IRC | 14:41 | |
*** Linz has joined #heat | 14:42 | |
*** jay-lau-513 has joined #heat | 14:42 | |
*** alienyyg has joined #heat | 14:49 | |
*** jamieh has quit IRC | 14:53 | |
*** beekneemech is now known as bnemec | 14:54 | |
*** tims1 has quit IRC | 14:56 | |
therve | shardy, Is config supposed to changed with the new policy enforcement? | 14:57 |
shardy | therve: Yep, the new policy.json will need to be copied into /etc/heat | 14:57 |
*** rongze has quit IRC | 14:58 | |
therve | Ahah | 14:59 |
* therve tries | 14:59 | |
*** rongze has joined #heat | 14:59 | |
therve | shardy, Thanks! | 14:59 |
*** Linz has quit IRC | 15:01 | |
radix | Good morning Heat! | 15:02 |
sdake | good morning radix! | 15:02 |
zaneb | morning radix! | 15:03 |
radix | back from holiday :) | 15:03 |
zaneb | so, 100% of my patches failed the gate... | 15:03 |
*** rongze has quit IRC | 15:03 | |
therve | Hi radix! | 15:03 |
zaneb | my question is: how does neutron manage to get this stuff in in the first place??? | 15:03 |
radix | :( | 15:04 |
sdake | bitcoin closing in on 1k/coin | 15:04 |
openstackgerrit | Thomas Herve proposed a change to openstack/heat: Add a validation step to parameters schema https://review.openstack.org/65091 | 15:04 |
* sdake \o/'s | 15:04 | |
therve | zaneb, Lots of typing, little thinking | 15:04 |
therve | (I'm kidding neutron is great hooray) | 15:05 |
zaneb | lol | 15:05 |
*** Linz has joined #heat | 15:06 | |
zaneb | therve: btw that patch you just pushed looks good, just FYI in case you were unaware tspatzier's plan is to replace the parameter stuff with a subclass of constraints.Schema (which is effectively the part of properties.Schema that we can make common) | 15:07 |
therve | zaneb, Ah dang. I was indeed unaware. | 15:07 |
zaneb | yeah, thought you might need to know | 15:08 |
zaneb | I don't think that's a reason not to commit this though | 15:08 |
*** _ruhe has quit IRC | 15:09 | |
therve | zaneb, Yeah there are tons of things missing in properties validation too | 15:09 |
zaneb | in HOT specifically, or just in general? | 15:10 |
*** _ruhe has joined #heat | 15:10 | |
therve | In general | 15:10 |
therve | Like if you make a typo in the name "Properties" | 15:11 |
therve | Nothing complains | 15:11 |
zaneb | yeah, that's more of a top-level thing but we should definitely start enforcing only valid keys there | 15:12 |
*** rwsu has joined #heat | 15:12 | |
therve | The 2 different steps in property validation are a bit weird too | 15:13 |
therve | It'd be nice if template-validate checked more things | 15:13 |
*** jmckind has joined #heat | 15:13 | |
zaneb | yes, template-validate doesn't check nearly enough | 15:14 |
*** che-arne has quit IRC | 15:14 | |
shardy | zaneb: So was I missing something re that neutron stuff, seems like we'd be exposing a future hole in their API to me | 15:15 |
zaneb | shardy: which neutron stuff are we talking about? | 15:15 |
shardy | The tenant_id property addition | 15:15 |
shardy | which you +2'd, then I -2'd ;) | 15:16 |
*** vijendar has joined #heat | 15:16 | |
shardy | I haven't seen paufent around here today to discuss it | 15:17 |
zaneb | so the use case is e.g. for TripleO, when they set up the cloud they need to create Neutron networks in various tenants | 15:19 |
zaneb | which seems like a legit use case | 15:19 |
shardy | zaneb: I don't see how that can be supported via the current keystone auth model | 15:19 |
zaneb | although I hate the idea of an "admin-only property" | 15:19 |
zaneb | and I wish there was a way we could hide it from other users | 15:20 |
*** sjmc has joined #heat | 15:20 | |
zaneb | (actually there are ways, and perhaps some day we will implement them) | 15:20 |
shardy | when bug #1246629 gets fixed, everyone expecting global-admin type behavior becomes a cross-tenant secrurity hole | 15:20 |
shardy | security even | 15:20 |
therve | shardy, What about tenant-scope admin though? | 15:20 |
*** rongze has joined #heat | 15:20 | |
therve | Hum maybe it's irrelevant here | 15:21 |
*** rushiagr2 is now known as rushiagr_away | 15:21 | |
zaneb | I don't see how we can be the hole when we are passing the same credentials the user supplied us to neutron | 15:21 |
shardy | therve: Every token is scoped to a tenant, and we should only allow admin-ness scoped to that tenant | 15:21 |
zaneb | if it's not allowed, Neutron's policy.json will disallow it | 15:21 |
shardy | zaneb: I'm saying we shouldn't perpetuate the wrong assumption | 15:21 |
zaneb | shirley? | 15:21 |
shardy | the main reason keystone are having such trouble fixing that bug is because too many folks assume the buggy behavior | 15:21 |
zaneb | the main reason is that they have no documentation, but I digress ;) | 15:22 |
shardy | well there are lots of reasons, and as you've said before, there is a missing layer above "Project" etc | 15:23 |
shardy | but I don't see how neutron can allow this when that admin-ness bug gets fixed | 15:23 |
zaneb | oh, so you're saying that Neutron is broken? | 15:24 |
*** sjain has quit IRC | 15:24 | |
*** jay-lau-513 has quit IRC | 15:24 | |
shardy | zaneb: Yes, exactly | 15:24 |
zaneb | (I'm shocked, shocked!) | 15:24 |
shardy | we should probably raise a neutron bug instead of exposing the brokenness | 15:24 |
zaneb | ok, and that we shouldn't attempt to model Neuron's broken API because they will probably have to change it in short order... | 15:24 |
shardy | zaneb: That's my argument, yes | 15:26 |
*** che-arne has joined #heat | 15:26 | |
zaneb | is it completely borked though? don't they just need to define the correct roles and have a more sophisticated policy,json to enforce them? | 15:26 |
shardy | maybe we need to engage some neutron folks to discuss | 15:26 |
sdake | engage the warp coils! | 15:26 |
*** tims has joined #heat | 15:27 | |
shardy | zaneb: with the current token-scoped-to-one-project, I don't see how they can allow a tenant_id other than that derived from the token | 15:27 |
zaneb | i.e. allow anyone who has the operator-admin role in the service tenant + anyone who has the admin role in this tenant | 15:27 |
shardy | zaneb: Maybe, perhaps I need to look at their policy | 15:27 |
zaneb | Neutron is weird because the resources it is managing are not all virtual :/ | 15:28 |
zaneb | as weird as it looked to me when I first saw this, I think they will probably need some way of managing this case. SpamapS might have more details | 15:28 |
shardy | https://github.com/openstack/neutron/blob/master/etc/policy.json#L2 | 15:31 |
shardy | So they just look for the admin role in the context afaics | 15:31 |
shardy | so they should enforce the scope of the token too | 15:31 |
zaneb | yes, clearly it's broken right now | 15:33 |
zaneb | I wish I could stop typing 'borken' | 15:33 |
*** spzala has joined #heat | 15:36 | |
*** rushiagr_away is now known as rushiagr2 | 15:38 | |
openstackgerrit | Chmouel Boudjnah proposed a change to openstack/heat: Fix showing events on swift. https://review.openstack.org/65099 | 15:39 |
zaneb | shardy: I added a comment summarising this discussion and dropped the review to +1 | 15:39 |
*** ifarkas has quit IRC | 15:39 | |
*** funzo has quit IRC | 15:40 | |
*** funzo has joined #heat | 15:40 | |
*** blomquisg has joined #heat | 15:44 | |
*** tims has left #heat | 15:55 | |
*** TonyBurn has quit IRC | 15:58 | |
*** tims has joined #heat | 15:59 | |
*** TonyBurn has joined #heat | 15:59 | |
*** rushiagr2 is now known as rushiagr | 16:01 | |
*** randallburt has joined #heat | 16:04 | |
*** jprovazn has quit IRC | 16:05 | |
*** nkhare has quit IRC | 16:06 | |
*** randallburt has quit IRC | 16:09 | |
*** randallburt has joined #heat | 16:09 | |
openstackgerrit | Steven Hardy proposed a change to openstack/heat: Update Loadbalancer default template to F20 image https://review.openstack.org/65060 | 16:10 |
therve | shardy, Do we have a plan for not having to do that ^ every time? | 16:13 |
sdake | therve yes | 16:13 |
sdake | therve the basic idea is to use providers templates for that iirc | 16:14 |
sdake | but for the moment, we essentially have a DOA resource in havana | 16:14 |
sdake | since f17 is EOL | 16:14 |
therve | sdake, Yeah, there is still a lot of logic in LoadBalancer though :/ | 16:14 |
sdake | so short term that needs to be fixed ;-) | 16:14 |
therve | Oh there is already a config parameter for it | 16:16 |
*** rongze has quit IRC | 16:16 | |
*** agileclipse has quit IRC | 16:16 | |
sdake | that got added in a previous patch ;-) | 16:16 |
*** rongze has joined #heat | 16:17 | |
*** rongze has quit IRC | 16:17 | |
*** randallburt has quit IRC | 16:18 | |
therve | I guess we should extract that string into a file and make it the default value? | 16:18 |
*** rongze has joined #heat | 16:19 | |
shardy | therve: Yeah, I revived asalkelds patch allowing the template to be overridden in the config file | 16:19 |
*** rongze has quit IRC | 16:19 | |
shardy | I think we'll end up with either a provider template implementation or a LB backed by neutron long term though | 16:19 |
*** rongze has joined #heat | 16:20 | |
shardy | that F20 patch gives us another year to figure it out ;) | 16:20 |
therve | :) | 16:20 |
*** rongze has quit IRC | 16:20 | |
*** rongze has joined #heat | 16:20 | |
*** rongze has quit IRC | 16:21 | |
*** rongze has joined #heat | 16:21 | |
*** rongze has quit IRC | 16:22 | |
*** rongze has joined #heat | 16:22 | |
*** rongze has quit IRC | 16:23 | |
*** rongze has joined #heat | 16:23 | |
*** rongze has quit IRC | 16:24 | |
*** rongze has joined #heat | 16:24 | |
*** rongze has quit IRC | 16:25 | |
*** rongze has joined #heat | 16:26 | |
*** rongze has quit IRC | 16:26 | |
*** rongze has joined #heat | 16:27 | |
*** rongze has joined #heat | 16:27 | |
*** rongze has quit IRC | 16:28 | |
*** rongze has joined #heat | 16:28 | |
*** ppetit has quit IRC | 16:28 | |
*** rongze has quit IRC | 16:29 | |
*** rongze has joined #heat | 16:29 | |
*** rongze has quit IRC | 16:29 | |
*** rongze has joined #heat | 16:30 | |
*** rongze has quit IRC | 16:30 | |
*** rongze has joined #heat | 16:30 | |
*** rongze has quit IRC | 16:30 | |
*** rongze has joined #heat | 16:31 | |
*** ppetit has joined #heat | 16:35 | |
*** ifarkas has joined #heat | 16:37 | |
*** ifarkas has quit IRC | 16:41 | |
*** ifarkas has joined #heat | 16:41 | |
*** alexheneveld_ has joined #heat | 16:41 | |
*** alexheneveld__ has joined #heat | 16:45 | |
*** alexheneveld has quit IRC | 16:45 | |
*** alexheneveld__ is now known as alexheneveld | 16:45 | |
*** alexheneveld_ has quit IRC | 16:47 | |
openstackgerrit | Steven Hardy proposed a change to openstack/heat: Store AccessKey secret_key in resource data https://review.openstack.org/63829 | 16:50 |
openstackgerrit | Steven Hardy proposed a change to openstack/heat: heat_keystoneclient revise get_ec2_keypair https://review.openstack.org/62441 | 16:50 |
*** randallburt has joined #heat | 16:51 | |
shadower | shardy, asalkeld_: can you please have a look at this? https://review.openstack.org/#/c/59685/ It's been approved but I think we should add a comment explaiting why we're leaving "heat_decrypt" there -- it looks like dead code | 16:54 |
*** randallburt has quit IRC | 16:54 | |
*** randallburt has joined #heat | 16:54 | |
*** rcleere has joined #heat | 16:56 | |
shardy | shadower: Ok, thanks, I've removed the +A as it didn't look close to merging | 16:57 |
shardy | shadower: you're right a comment probably is a good idea | 16:58 |
shadower | cool, thanks | 16:58 |
*** alexheneveld has quit IRC | 16:59 | |
*** TonyBurn has quit IRC | 17:03 | |
*** gokrokve has quit IRC | 17:20 | |
openstackgerrit | Zane Bitter proposed a change to openstack/heat-templates: Unset execute bits on Yaml templates https://review.openstack.org/65116 | 17:21 |
*** jistr has quit IRC | 17:21 | |
zaneb | sdake: ^ that was causing rpmlint errors | 17:22 |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Validate number of instance metadata entries https://review.openstack.org/61864 | 17:25 |
*** bvandenh has quit IRC | 17:25 | |
*** Linz has quit IRC | 17:31 | |
*** Linz has joined #heat | 17:31 | |
*** cody-somerville has joined #heat | 17:36 | |
*** rushiagr is now known as rushiagr_away | 17:37 | |
*** rushiagr_away is now known as rushiagr | 17:38 | |
SpamapS | zaneb: re wanting to do cross-tenant things with Neutron.. I'm not sure that is really true. Perhaps I mis-read your backscroll.. but everything we want to do in TripleO is tenant scoped. | 17:40 |
SpamapS | zaneb: its just that our tenant is "the one that owns all the networks" | 17:41 |
zaneb | ok | 17:41 |
SpamapS | zaneb: and thus we have super powers endowed by having the appropriate role. | 17:41 |
SpamapS | but it stays in one tenant always | 17:41 |
zaneb | so you have to create a new network for another tenant though? | 17:41 |
zaneb | i.e. what is that API for? | 17:42 |
SpamapS | no, if tenants need to be able to create networks, your policy needs to allow that | 17:42 |
SpamapS | there is nothing weird or wrong about that actually | 17:42 |
SpamapS | it works quite well. :) | 17:42 |
SpamapS | if they need to route.. the networks they need to route to have to be made public | 17:43 |
SpamapS | or rather, if they need to route across tenants | 17:43 |
zaneb | well, everything else in openstack you create with a token scoped to the tenant you want to create it in | 17:43 |
zaneb | I don't know of another example where you create something and pass a different tenant to the API | 17:43 |
SpamapS | and that is sort of the special power that you get as an admin in neutron.. you get to create external / provider / etc. networks that can bind to real routes | 17:43 |
SpamapS | zaneb: neutron never does that either. | 17:44 |
SpamapS | I create "external-net" and mark it as public. Now all tenants can route to it. | 17:44 |
SpamapS | I create a floating ip pool in it, and now all tenants can allocate from that pool. | 17:44 |
SpamapS | but they do so as their tenant, and I do as mine. | 17:44 |
* zaneb looks again at the patch | 17:45 | |
SpamapS | what patch are we talking about btw, so i can get context | 17:46 |
zaneb | https://review.openstack.org/#/c/60607/6/heat/engine/resources/neutron/router.py | 17:46 |
SpamapS | I have some vague recollection of these bits | 17:46 |
zaneb | so actually we're creating a router and passing a tenant_id that is the owner of the router | 17:46 |
zaneb | if that's not wrong per se, it's definitely weird ;) | 17:46 |
SpamapS | reading | 17:47 |
SpamapS | Oh if that is even possible, it is weird. | 17:47 |
SpamapS | We definitely don't do that in TripleO | 17:47 |
zaneb | OK :) | 17:47 |
SpamapS | Perhaps Neutron has recently merged some insanity | 17:48 |
zaneb | I only +2'd this because I thought you said you did, but probably I was explaining then as badly as I have been today ;) | 17:48 |
*** rongze has quit IRC | 17:48 | |
SpamapS | So this is where we have to get out of philosophy and follow our API's | 17:49 |
*** harlowja has joined #heat | 17:49 | |
SpamapS | if the Neutron API allows this insanity.. | 17:49 |
SpamapS | :( | 17:49 |
SpamapS | we have to too. | 17:49 |
zaneb | I respectfully disagree | 17:49 |
SpamapS | We're only allowed to judge our own insanity. :) | 17:49 |
*** gokrokve has joined #heat | 17:50 | |
SpamapS | zaneb: well I think it may be wise to raise a bug and try to reverse it _before_ we follow suit | 17:50 |
*** rongze has joined #heat | 17:50 | |
SpamapS | but if Icehouse ships with the ability to do 'neutron router-create --tenant-id xxxxx xxxx-router' ... it is a bug that Heat cannot express that. | 17:50 |
zaneb | at the very least we should find someone willing to defend it as not insane before we implement it | 17:50 |
SpamapS | zaneb: I think we agree actually. | 17:51 |
*** rongze has quit IRC | 17:51 | |
SpamapS | We should drag our feet on this one. | 17:51 |
SpamapS | and make loud noises | 17:51 |
zaneb | ++ | 17:51 |
*** rongze has joined #heat | 17:51 | |
*** rongze has quit IRC | 17:52 | |
*** rongze has joined #heat | 17:52 | |
sdake | could I get a fellow heat-core to ack https://review.openstack.org/#/c/65116/ - just a permissions change | 17:52 |
*** rongze has quit IRC | 17:53 | |
sdake | zaneb thanks ;) | 17:53 |
SpamapS | I can see where Neutron people may have not been comfortable with quota systems and instead want to just make router management an admin only thing for some weird use case. | 17:53 |
*** rongze has joined #heat | 17:53 | |
zaneb | sdake: np, I have some more issues for you coming up ;) | 17:53 |
SpamapS | Perhaps there are some hardware devices where that is necessary. I dunno. | 17:53 |
*** derekh has quit IRC | 17:53 | |
*** rongze has quit IRC | 17:54 | |
*** rongze has joined #heat | 17:54 | |
*** rongze has quit IRC | 17:54 | |
*** rongze has joined #heat | 17:55 | |
*** rongze has quit IRC | 17:55 | |
*** rongze has joined #heat | 17:56 | |
*** rongze has quit IRC | 17:56 | |
*** rongze has joined #heat | 17:56 | |
*** rongze has quit IRC | 17:57 | |
*** rongze has joined #heat | 17:57 | |
*** rongze has quit IRC | 17:58 | |
*** rongze has joined #heat | 17:58 | |
*** rongze has quit IRC | 17:58 | |
*** nati_ueno has joined #heat | 17:59 | |
*** rongze has joined #heat | 17:59 | |
*** rongze has quit IRC | 17:59 | |
*** rongze has joined #heat | 18:01 | |
*** rongze has quit IRC | 18:01 | |
*** rongze has joined #heat | 18:02 | |
*** rongze has quit IRC | 18:02 | |
sdake | rongze needs new intranets | 18:02 |
*** che-arne has quit IRC | 18:04 | |
*** rongze_ has joined #heat | 18:05 | |
*** rongze has joined #heat | 18:05 | |
*** rongze has quit IRC | 18:06 | |
*** rongze has joined #heat | 18:06 | |
*** alexheneveld has joined #heat | 18:08 | |
*** rongze has joined #heat | 18:09 | |
*** rongze_ has joined #heat | 18:10 | |
*** lsmola_ has quit IRC | 18:11 | |
*** rongze_ has joined #heat | 18:11 | |
*** rongze_ has quit IRC | 18:11 | |
*** gokrokve has quit IRC | 18:12 | |
*** rongze has quit IRC | 18:14 | |
*** rongze has joined #heat | 18:14 | |
stevebaker | morning | 18:16 |
*** rongze has quit IRC | 18:19 | |
*** gokrokve has joined #heat | 18:23 | |
*** pvaneck has joined #heat | 18:25 | |
zaneb | stevebaker: morning! easy one for you to start out: https://review.openstack.org/#/c/65116/ ;) | 18:35 |
openstackgerrit | A change was merged to openstack/heat-templates: Unset execute bits on Yaml templates https://review.openstack.org/65116 | 18:40 |
*** yogesh has joined #heat | 18:42 | |
radix | ummm | 18:43 |
radix | is it intended that other modules imports stuff from parser.py that didn't originate in parser.py? | 18:43 |
radix | like, code referring to parser.Parameters instead of parameters.Parameters? | 18:43 |
*** rongze has joined #heat | 18:45 | |
*** rushiagr has quit IRC | 18:45 | |
*** rongze has quit IRC | 18:45 | |
*** rongze has joined #heat | 18:46 | |
*** rongze has quit IRC | 18:46 | |
*** rongze has joined #heat | 18:47 | |
*** rongze has quit IRC | 18:47 | |
*** rongze has joined #heat | 18:47 | |
randallburt | radix: sounds fishy to me. | 18:48 |
*** rongze has quit IRC | 18:48 | |
*** rongze has joined #heat | 18:48 | |
*** rongze has quit IRC | 18:49 | |
*** rongze has joined #heat | 18:49 | |
*** rongze has quit IRC | 18:50 | |
*** rongze has joined #heat | 18:50 | |
*** rongze has quit IRC | 18:51 | |
*** rongze_ has joined #heat | 18:51 | |
*** rongze_ has quit IRC | 18:52 | |
*** rongze has joined #heat | 18:52 | |
*** rongze has quit IRC | 18:52 | |
*** rongze has joined #heat | 18:53 | |
*** rongze has quit IRC | 18:53 | |
*** rongze has joined #heat | 18:54 | |
*** rongze has quit IRC | 18:54 | |
*** rongze has joined #heat | 18:55 | |
*** rongze has quit IRC | 18:56 | |
*** rongze has joined #heat | 18:56 | |
*** rongze has quit IRC | 18:57 | |
*** rongze has joined #heat | 18:57 | |
*** rongze has quit IRC | 18:57 | |
*** rongze has joined #heat | 18:58 | |
*** rongze has quit IRC | 18:58 | |
*** rongze has joined #heat | 18:59 | |
*** rongze has quit IRC | 18:59 | |
radix | okie | 18:59 |
*** rongze has joined #heat | 19:00 | |
*** rongze has quit IRC | 19:00 | |
*** rongze has joined #heat | 19:00 | |
*** andersonvom has joined #heat | 19:00 | |
*** rongze has quit IRC | 19:01 | |
*** rongze has joined #heat | 19:01 | |
*** rongze has quit IRC | 19:02 | |
*** rongze has joined #heat | 19:02 | |
*** rongze has quit IRC | 19:03 | |
*** rongze has joined #heat | 19:03 | |
*** rongze has quit IRC | 19:04 | |
*** rongze has joined #heat | 19:04 | |
*** rongze has quit IRC | 19:05 | |
zaneb | radix: originally all that stuff was in parser.py; i kept those imports working when I moved them out as a transitional measure | 19:06 |
radix | ok, so definitely shouldn't be a pattern to follow for new code | 19:06 |
zaneb | if anybody want to go through the whole code base and clean them up, be my guest | 19:06 |
*** rongze has joined #heat | 19:06 | |
zaneb | agreed, if you can import them from their original locations, then do so | 19:06 |
*** rongze has quit IRC | 19:06 | |
*** gokrokve has quit IRC | 19:07 | |
*** rongze has joined #heat | 19:07 | |
zaneb | sdake: I added review comments to https://bugzilla.redhat.com/show_bug.cgi?id=1004963 | 19:07 |
*** gokrokve has joined #heat | 19:07 | |
*** rongze has quit IRC | 19:07 | |
*** rongze has joined #heat | 19:08 | |
*** rongze has quit IRC | 19:08 | |
*** rongze has joined #heat | 19:09 | |
*** rongze has quit IRC | 19:09 | |
*** rongze has joined #heat | 19:10 | |
*** rongze has quit IRC | 19:10 | |
*** rongze has joined #heat | 19:11 | |
*** rongze has quit IRC | 19:11 | |
*** rongze has joined #heat | 19:11 | |
*** gokrokve has quit IRC | 19:12 | |
*** rongze has quit IRC | 19:12 | |
*** rongze has joined #heat | 19:12 | |
*** rongze has quit IRC | 19:13 | |
*** giulivo has quit IRC | 19:13 | |
*** rongze has joined #heat | 19:13 | |
*** rongze has quit IRC | 19:14 | |
sdake | zaneb thanks for the review | 19:14 |
zaneb | no worries | 19:15 |
*** andersonvom has quit IRC | 19:15 | |
*** andersonvom has joined #heat | 19:15 | |
sdake | zaneb I'll have an update in an hour or two | 19:15 |
zaneb | sdake: ok, cool, ping me when it's ready and I will look again | 19:16 |
sdake | thanks | 19:16 |
*** rongze has joined #heat | 19:17 | |
*** rongze has quit IRC | 19:17 | |
*** rongze has joined #heat | 19:18 | |
*** rongze has quit IRC | 19:18 | |
*** rongze has joined #heat | 19:18 | |
*** rongze has quit IRC | 19:18 | |
*** rongze has joined #heat | 19:20 | |
*** rongze has quit IRC | 19:20 | |
*** rongze_ has joined #heat | 19:23 | |
*** rongze_ has quit IRC | 19:23 | |
*** rongze_ has joined #heat | 19:25 | |
*** rongze_ has quit IRC | 19:25 | |
*** gokrokve has joined #heat | 19:26 | |
*** rongze has joined #heat | 19:26 | |
*** rongze has joined #heat | 19:27 | |
*** rongze has quit IRC | 19:27 | |
*** rongze has joined #heat | 19:27 | |
*** rongze has quit IRC | 19:28 | |
*** rongze has joined #heat | 19:28 | |
*** rongze has quit IRC | 19:28 | |
*** rongze has joined #heat | 19:29 | |
*** rongze has quit IRC | 19:30 | |
*** rongze_ has joined #heat | 19:31 | |
*** rongze has joined #heat | 19:33 | |
*** rongze has quit IRC | 19:33 | |
*** rongze_ has joined #heat | 19:34 | |
*** sballe has joined #heat | 19:35 | |
*** rongze_ has quit IRC | 19:35 | |
*** rongze_ has joined #heat | 19:35 | |
*** rongze_ has quit IRC | 19:35 | |
*** rongze has joined #heat | 19:38 | |
*** rongze has quit IRC | 19:39 | |
*** rongze has joined #heat | 19:39 | |
*** rongze has quit IRC | 19:39 | |
*** rongze has joined #heat | 19:40 | |
*** rongze has joined #heat | 19:40 | |
*** rongze has quit IRC | 19:41 | |
*** rongze has joined #heat | 19:41 | |
*** rongze has quit IRC | 19:41 | |
*** rongze has joined #heat | 19:42 | |
*** rongze has quit IRC | 19:42 | |
*** rongze has joined #heat | 19:42 | |
*** rongze has quit IRC | 19:42 | |
*** rongze has joined #heat | 19:45 | |
*** rongze has quit IRC | 19:46 | |
*** rongze has joined #heat | 19:46 | |
*** rongze has quit IRC | 19:46 | |
*** rongze has joined #heat | 19:48 | |
*** rongze has quit IRC | 19:48 | |
*** rongze has joined #heat | 19:49 | |
*** rongze has quit IRC | 19:50 | |
*** rongze_ has joined #heat | 19:52 | |
*** rongze_ has quit IRC | 19:52 | |
*** rongze has joined #heat | 19:53 | |
*** rongze has quit IRC | 19:53 | |
*** rongze has joined #heat | 19:53 | |
*** rongze has quit IRC | 19:53 | |
*** rongze has joined #heat | 19:54 | |
*** rongze has quit IRC | 19:54 | |
*** rongze has joined #heat | 19:54 | |
*** ifarkas has quit IRC | 19:55 | |
*** john-n-seattle has left #heat | 19:55 | |
*** rongze_ has joined #heat | 19:56 | |
*** rongze_ has joined #heat | 19:58 | |
*** rongze_ has quit IRC | 19:59 | |
*** rongze_ has joined #heat | 19:59 | |
*** rongze_ has quit IRC | 19:59 | |
*** rongze has quit IRC | 19:59 | |
*** rongze has joined #heat | 20:00 | |
*** nati_uen_ has joined #heat | 20:02 | |
*** fungi has joined #heat | 20:02 | |
*** amrit has joined #heat | 20:02 | |
*** fungi has left #heat | 20:02 | |
*** amrit has quit IRC | 20:02 | |
*** rongze_ has joined #heat | 20:02 | |
*** rongze_ has quit IRC | 20:03 | |
*** amrit has joined #heat | 20:03 | |
*** bvandenh has joined #heat | 20:04 | |
*** nati_uen_ has quit IRC | 20:04 | |
*** rongze_ has joined #heat | 20:04 | |
*** nati_uen_ has joined #heat | 20:05 | |
*** rongze_ has quit IRC | 20:05 | |
*** rongze_ has joined #heat | 20:05 | |
*** nati_ueno has quit IRC | 20:05 | |
*** rongze__ has joined #heat | 20:06 | |
*** rongze__ has quit IRC | 20:06 | |
*** rongze has joined #heat | 20:07 | |
*** rongze has quit IRC | 20:07 | |
*** rongze has joined #heat | 20:08 | |
*** rongze has quit IRC | 20:08 | |
SpamapS | who has IRC ops here? | 20:08 |
SpamapS | we should ban rongze | 20:08 |
SpamapS | rongze_: go aweay! | 20:08 |
*** rongze_ has quit IRC | 20:10 | |
zaneb | SpamapS: it worked! | 20:10 |
SpamapS | if only | 20:11 |
openstackgerrit | Tim Schnell proposed a change to openstack/heat: Adds Parameter Label to HOT spec and parameter schema https://review.openstack.org/62418 | 20:16 |
*** amrit has quit IRC | 20:18 | |
*** rongze has joined #heat | 20:19 | |
*** rongze has quit IRC | 20:19 | |
*** rongze has joined #heat | 20:19 | |
*** rongze has joined #heat | 20:20 | |
*** rongze has quit IRC | 20:20 | |
*** rongze has joined #heat | 20:21 | |
*** rongze has quit IRC | 20:21 | |
*** rongze_ has joined #heat | 20:23 | |
*** rongze_ has quit IRC | 20:23 | |
*** kfox1111 has joined #heat | 20:25 | |
*** rongze_ has joined #heat | 20:26 | |
*** rongze_ has joined #heat | 20:27 | |
*** rongze_ has quit IRC | 20:27 | |
*** rongze has joined #heat | 20:28 | |
*** rongze has quit IRC | 20:29 | |
*** jpeeler1 has quit IRC | 20:29 | |
openstackgerrit | Zane Bitter proposed a change to openstack/heat: Convert Server to new Schema format https://review.openstack.org/61786 | 20:30 |
jasond | did this commit mess up anybody else's devstack? https://github.com/openstack/heat/commit/8cdf9822 i get auth errors now | 20:33 |
*** rongze_ has joined #heat | 20:34 | |
*** rongze has joined #heat | 20:35 | |
*** rongze_ has joined #heat | 20:36 | |
*** rongze_ has joined #heat | 20:37 | |
*** rongze_ has quit IRC | 20:38 | |
*** rongze has joined #heat | 20:39 | |
*** rongze has quit IRC | 20:39 | |
*** rongze has joined #heat | 20:40 | |
*** rongze has quit IRC | 20:40 | |
*** _ruhe is now known as ruhe | 20:42 | |
*** rongze_ has joined #heat | 20:42 | |
tims | ping zaneb | 20:43 |
zaneb | hola | 20:43 |
*** rongze has joined #heat | 20:43 | |
tims | hey, I just want to clarify the label review | 20:43 |
*** rongze has quit IRC | 20:44 | |
zaneb | sure :) | 20:44 |
tims | so if I remove the label from the parameter dictionary | 20:44 |
tims | are you suggesting that I then call the label method | 20:44 |
tims | in template.py? | 20:44 |
tims | where the param_schemata is being defined? | 20:44 |
tims | https://review.openstack.org/#/c/62418/5/heat/engine/template.py | 20:44 |
*** rongze_ has joined #heat | 20:45 | |
*** rongze_ has quit IRC | 20:45 | |
zaneb | is the label being used anywhere yet? | 20:45 |
tims | and do the same in hot.py | 20:45 |
zaneb | I wasn't suggesting calling it at all | 20:45 |
tims | oh I see | 20:45 |
tims | well this would allow it to be passed back via the validate call with the parameters | 20:46 |
zaneb | anything that wants to get the label should call it | 20:46 |
zaneb | *instead* of grabbing it from the dictionary | 20:46 |
tims | calling it in param_schemata and then adding it to the dictionary would ensure that it is returned with the parameter along with all of the other parameter data | 20:46 |
* zaneb looks at the validate code | 20:47 | |
*** rongze has joined #heat | 20:47 | |
*** rongze has quit IRC | 20:47 | |
tims | I guess I was assuming that the label should be returned with the parameter dictionary like all of the other data | 20:48 |
zaneb | I understand | 20:48 |
zaneb | so, medium term, we need to stop getting anything from the dictionary | 20:48 |
tims | and the most central place to do that is still ParamSchema | 20:48 |
zaneb | because that is keeping us locked in to the cfn format | 20:49 |
*** bvandenh has quit IRC | 20:49 | |
zaneb | so at some point https://github.com/openstack/heat/blob/master/heat/engine/service.py#L471 has to get smarter | 20:49 |
zaneb | and this seems like as good a point as any ;) | 20:49 |
tims | well should that be the thing that gets smarter? | 20:50 |
tims | or param_schemata? | 20:50 |
*** rongze has joined #heat | 20:51 | |
tims | or both | 20:51 |
tims | really | 20:51 |
*** rongze has quit IRC | 20:51 | |
tims | ok I think I understand what its doing | 20:52 |
tims | fixing it in the validate call | 20:52 |
tims | should be good enough for now | 20:52 |
*** nati_ueno has joined #heat | 20:52 | |
*** nati_uen_ has quit IRC | 20:55 | |
*** ruhe is now known as ruhe_away | 20:58 | |
*** jpeeler has joined #heat | 20:59 | |
*** jpeeler has quit IRC | 20:59 | |
*** jpeeler has joined #heat | 20:59 | |
zaneb | tims: so what I was thinking is that when you go to implement returning the label from template_validate it should look something like this for now: http://paste.openstack.org/show/60493/ | 20:59 |
*** ruhe_away is now known as ruhe | 20:59 | |
zaneb | tims: and then over time the dict part will disappear and it will start to look more like the rest of the stuff in heat.engine.api | 20:59 |
zaneb | until eventually we are template format independent | 21:00 |
tims | zaneb: ok I think that makes sense | 21:01 |
zaneb | cool :) | 21:02 |
tims | thanks | 21:02 |
zaneb | I like it when I make sense | 21:02 |
tims | me too :P | 21:03 |
zaneb | not like earlier when I was talking with SpamapS about networks and routers and tenants and policy.json :/ | 21:03 |
tims | you can't win them all :( | 21:03 |
zaneb | true dat | 21:04 |
SpamapS | zaneb: I overlook your not making sense for your making sense but only when you make sense about sensible things | 21:05 |
zaneb | SpamapS: thanks. I think ;) | 21:05 |
SpamapS | zaneb: when in rome | 21:06 |
*** radez is now known as radez_g0n3 | 21:08 | |
openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: Implement adopt-stack for nested stacks https://review.openstack.org/64720 | 21:10 |
openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: Implement adopt-stack https://review.openstack.org/62730 | 21:10 |
*** yogesh has quit IRC | 21:17 | |
*** rongze has joined #heat | 21:22 | |
*** dims has quit IRC | 21:22 | |
*** rongze has quit IRC | 21:23 | |
*** rongze has joined #heat | 21:23 | |
*** yogesh has joined #heat | 21:24 | |
*** rongze has quit IRC | 21:24 | |
*** rongze has joined #heat | 21:24 | |
*** rongze has quit IRC | 21:24 | |
*** rongze has joined #heat | 21:25 | |
*** rongze has quit IRC | 21:25 | |
*** fsargent has left #heat | 21:25 | |
*** rongze has joined #heat | 21:26 | |
*** rongze has quit IRC | 21:26 | |
*** rongze has joined #heat | 21:27 | |
*** rongze has quit IRC | 21:27 | |
*** rongze has joined #heat | 21:28 | |
*** rongze has quit IRC | 21:28 | |
*** rongze has joined #heat | 21:29 | |
*** rongze has quit IRC | 21:29 | |
*** rongze has joined #heat | 21:30 | |
*** rongze has quit IRC | 21:30 | |
*** rongze has joined #heat | 21:30 | |
*** rongze has quit IRC | 21:31 | |
*** rongze has joined #heat | 21:31 | |
*** rongze has quit IRC | 21:32 | |
*** sgordon has quit IRC | 21:32 | |
*** rongze has joined #heat | 21:32 | |
*** rongze_ has joined #heat | 21:33 | |
*** rongze_ has quit IRC | 21:34 | |
*** rongze_ has joined #heat | 21:34 | |
*** rongze__ has joined #heat | 21:35 | |
*** rongze_ has quit IRC | 21:35 | |
*** rongze__ has quit IRC | 21:36 | |
*** rongze_ has joined #heat | 21:36 | |
*** rongze_ has quit IRC | 21:36 | |
*** alexheneveld has quit IRC | 21:37 | |
*** rongze_ has joined #heat | 21:37 | |
*** dims has joined #heat | 21:37 | |
*** rongze has quit IRC | 21:37 | |
*** rongze_ has quit IRC | 21:37 | |
*** dims is now known as Guest46822 | 21:38 | |
*** rongze has joined #heat | 21:38 | |
*** rongze has quit IRC | 21:38 | |
*** rongze has joined #heat | 21:39 | |
*** rongze has quit IRC | 21:39 | |
*** rongze has joined #heat | 21:40 | |
*** rongze has quit IRC | 21:40 | |
*** rongze has joined #heat | 21:41 | |
*** rongze has quit IRC | 21:41 | |
*** rongze has joined #heat | 21:42 | |
*** rongze_ has joined #heat | 21:42 | |
*** rongze has quit IRC | 21:42 | |
*** rongze has joined #heat | 21:43 | |
*** rongze_ has quit IRC | 21:43 | |
*** rongze has quit IRC | 21:44 | |
*** rongze has joined #heat | 21:44 | |
*** jdob has quit IRC | 21:45 | |
*** rongze has quit IRC | 21:45 | |
*** rongze has joined #heat | 21:45 | |
*** rongze has quit IRC | 21:46 | |
*** rongze has joined #heat | 21:46 | |
*** rongze_ has joined #heat | 21:47 | |
*** rongze has quit IRC | 21:47 | |
*** Guest46822 has quit IRC | 21:48 | |
*** rongze_ has quit IRC | 21:48 | |
*** rongze has joined #heat | 21:48 | |
*** rongze has quit IRC | 21:48 | |
*** rongze has joined #heat | 21:49 | |
*** rongze has quit IRC | 21:50 | |
*** rongze has joined #heat | 21:50 | |
*** rongze has quit IRC | 21:51 | |
*** rongze has joined #heat | 21:51 | |
*** rongze has quit IRC | 21:51 | |
*** rongze has joined #heat | 21:52 | |
*** rongze has quit IRC | 21:53 | |
*** rongze_ has joined #heat | 21:54 | |
*** rongze_ has quit IRC | 21:54 | |
asalkeld_ | morning | 21:54 |
openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: remove obsolete comment from rackspace clients.py https://review.openstack.org/65159 | 21:54 |
*** rongze_ has joined #heat | 21:55 | |
*** rongze_ has quit IRC | 21:55 | |
*** rongze has joined #heat | 21:56 | |
*** larsks has joined #heat | 21:56 | |
*** rongze has quit IRC | 21:56 | |
*** rongze has joined #heat | 21:57 | |
*** rongze has quit IRC | 21:57 | |
*** rongze has joined #heat | 21:57 | |
*** rongze has quit IRC | 21:57 | |
*** rongze_ has joined #heat | 21:58 | |
*** rongze has joined #heat | 22:01 | |
*** rongze has quit IRC | 22:01 | |
*** rongze has joined #heat | 22:01 | |
*** rongze has quit IRC | 22:01 | |
*** rongze has joined #heat | 22:02 | |
*** rpothier_ has quit IRC | 22:04 | |
*** rongze_ has joined #heat | 22:04 | |
*** rongze_ has quit IRC | 22:05 | |
*** rongze has joined #heat | 22:08 | |
*** rongze has quit IRC | 22:08 | |
*** rongze_ has joined #heat | 22:09 | |
*** rongze_ has quit IRC | 22:09 | |
*** rongze_ has joined #heat | 22:10 | |
*** rongze_ has quit IRC | 22:10 | |
*** rongze has joined #heat | 22:11 | |
*** rongze has quit IRC | 22:11 | |
*** rongze has joined #heat | 22:12 | |
*** dims has joined #heat | 22:12 | |
*** rongze has quit IRC | 22:12 | |
*** dims is now known as Guest15139 | 22:12 | |
*** rongze has joined #heat | 22:12 | |
*** rongze has joined #heat | 22:14 | |
*** rongze has quit IRC | 22:14 | |
*** rongze has joined #heat | 22:14 | |
*** rongze__ has joined #heat | 22:16 | |
*** rongze__ has quit IRC | 22:16 | |
*** Guest15139 has quit IRC | 22:23 | |
openstackgerrit | Tim Schnell proposed a change to openstack/heat: Adds Parameter Label to HOT spec and parameter schema https://review.openstack.org/62418 | 22:26 |
*** jmckind has quit IRC | 22:28 | |
*** ruhe is now known as _ruhe | 22:28 | |
andersonvom | asalkeld_: morning! | 22:34 |
asalkeld_ | hi | 22:34 |
*** pablosan has joined #heat | 22:36 | |
andersonvom | half an hour late, but still ;) | 22:36 |
openstackgerrit | Tim Schnell proposed a change to openstack/heat: Adds Parameter Label to HOT spec and parameter schema https://review.openstack.org/62418 | 22:37 |
*** aweiteka has quit IRC | 22:37 | |
*** dims_ has joined #heat | 22:41 | |
openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Remove X-Auth-Url header from authtoken middleware https://review.openstack.org/60991 | 22:42 |
sdake | angus why the _ after your name? | 22:42 |
asalkeld_ | hey sdake | 22:43 |
sdake | yo | 22:43 |
*** asalkeld_ has quit IRC | 22:43 | |
*** asalkeld has joined #heat | 22:43 | |
asalkeld | how is that | 22:43 |
sdake | wfm :) was just curious if there was some reason :) | 22:43 |
sdake | I have _ but usually for my laptop irc session | 22:44 |
asalkeld | xchat was fighting with another irc client | 22:44 |
*** alexheneveld has joined #heat | 22:44 | |
asalkeld | I tried pidgin for 15 mins as it has a whatsapp plugin | 22:45 |
asalkeld | google and amazon have heaps of recuiters, you have to say no again and again | 22:48 |
*** rongze has joined #heat | 22:50 | |
*** rongze has quit IRC | 22:51 | |
openstackgerrit | Randall Burt proposed a change to openstack/heat: Fix more regressions in contrib https://review.openstack.org/65171 | 22:51 |
openstackgerrit | Randall Burt proposed a change to openstack/heat: Add contrib to py26 and py27 gates https://review.openstack.org/61191 | 22:51 |
openstackgerrit | Randall Burt proposed a change to openstack/heat: Remove override of "patch" function https://review.openstack.org/63543 | 22:51 |
*** rongze has joined #heat | 22:51 | |
*** rongze has quit IRC | 22:52 | |
*** rongze has joined #heat | 22:52 | |
*** rongze has joined #heat | 22:53 | |
*** rongze has quit IRC | 22:53 | |
*** rongze has joined #heat | 22:54 | |
*** rpothier has joined #heat | 22:54 | |
*** rongze has quit IRC | 22:54 | |
*** rongze has joined #heat | 22:55 | |
*** rongze has quit IRC | 22:55 | |
*** rongze has joined #heat | 22:56 | |
*** rongze has quit IRC | 22:56 | |
*** rongze has joined #heat | 22:57 | |
*** rongze has quit IRC | 22:57 | |
*** rongze has joined #heat | 22:58 | |
*** dims_ has quit IRC | 22:58 | |
*** rongze has quit IRC | 22:58 | |
*** rongze has joined #heat | 22:59 | |
*** rongze has quit IRC | 22:59 | |
*** rongze has joined #heat | 22:59 | |
*** rongze has quit IRC | 23:00 | |
*** rongze has joined #heat | 23:00 | |
*** rongze has quit IRC | 23:01 | |
*** vijendar has quit IRC | 23:01 | |
*** rongze has joined #heat | 23:02 | |
*** rongze has quit IRC | 23:02 | |
*** rongze has joined #heat | 23:02 | |
*** rongze has quit IRC | 23:03 | |
*** rongze has joined #heat | 23:03 | |
*** rongze has quit IRC | 23:04 | |
*** rongze has joined #heat | 23:04 | |
*** rongze_ has joined #heat | 23:05 | |
*** rongze has quit IRC | 23:05 | |
*** rongze_ has quit IRC | 23:06 | |
*** sjmc has quit IRC | 23:06 | |
*** rongze has joined #heat | 23:06 | |
*** rongze has quit IRC | 23:07 | |
*** rongze has joined #heat | 23:07 | |
*** rongze has quit IRC | 23:07 | |
*** rongze has joined #heat | 23:08 | |
*** rongze_ has joined #heat | 23:09 | |
*** rongze has quit IRC | 23:09 | |
*** rongze has joined #heat | 23:10 | |
*** rongze_ has quit IRC | 23:10 | |
*** dims_ has joined #heat | 23:10 | |
*** rongze has quit IRC | 23:10 | |
*** rongze has joined #heat | 23:11 | |
*** rongze_ has joined #heat | 23:12 | |
*** rongze has quit IRC | 23:12 | |
*** rongze_ has quit IRC | 23:12 | |
*** rongze has joined #heat | 23:12 | |
*** rongze has joined #heat | 23:13 | |
*** rongze has quit IRC | 23:13 | |
*** rongze has joined #heat | 23:14 | |
*** rongze has quit IRC | 23:14 | |
*** rongze_ has joined #heat | 23:15 | |
*** rongze has joined #heat | 23:17 | |
*** rongze has quit IRC | 23:17 | |
*** rongze has joined #heat | 23:18 | |
*** rongze has quit IRC | 23:18 | |
*** rongze has joined #heat | 23:19 | |
*** rongze has quit IRC | 23:19 | |
*** jcru has quit IRC | 23:23 | |
*** rongze_ has joined #heat | 23:24 | |
*** rongze_ has quit IRC | 23:24 | |
*** rongze has joined #heat | 23:24 | |
*** rongze has joined #heat | 23:25 | |
*** rongze has quit IRC | 23:25 | |
*** rongze_ has joined #heat | 23:27 | |
*** yogesh has quit IRC | 23:27 | |
*** rongze_ has joined #heat | 23:28 | |
*** rongze has joined #heat | 23:29 | |
*** rongze has quit IRC | 23:29 | |
sdake | zaneb openstack-heat-templates spec updated ready for a re-review | 23:30 |
*** rongze_ has joined #heat | 23:30 | |
zaneb | sdake: cool, will take another look | 23:30 |
sdake | thanks | 23:31 |
*** dims_ has quit IRC | 23:31 | |
*** rongze_ has joined #heat | 23:32 | |
*** rongze_ has quit IRC | 23:32 | |
*** arbylee has quit IRC | 23:35 | |
* sdake almost breaks out the temporary spam ban | 23:35 | |
*** arbylee has joined #heat | 23:35 | |
*** rwsu has quit IRC | 23:35 | |
*** rongze has joined #heat | 23:35 | |
*** rongze has quit IRC | 23:36 | |
*** rongze has joined #heat | 23:36 | |
*** tims has quit IRC | 23:38 | |
*** rongze has joined #heat | 23:40 | |
*** rongze has quit IRC | 23:40 | |
*** rongze__ has joined #heat | 23:41 | |
*** sabeen has quit IRC | 23:41 | |
*** rongze_ has joined #heat | 23:42 | |
*** rongze has joined #heat | 23:48 | |
*** rongze has joined #heat | 23:48 | |
*** dims_ has joined #heat | 23:48 | |
zaneb | sdake: "Provides: heat-jeos <= 9-1" <- I think you meant Obsoletes? | 23:48 |
*** rongze has quit IRC | 23:49 | |
zaneb | sdake: Provides is normally a specific version, not a range. and in this case we don't really provide it, because the binary name has changed | 23:49 |
*** rwsu has joined #heat | 23:50 | |
zaneb | sdake: "If a package supersedes/replaces an existing package without being a compatible enough replacement as defined in above, use only the Obsoletes from above." <- sounds like what we want | 23:50 |
*** rongze_ has joined #heat | 23:50 | |
*** rongze_ has quit IRC | 23:50 | |
*** rongze_ has joined #heat | 23:51 | |
*** rongze_ has quit IRC | 23:51 | |
*** rongze_ has joined #heat | 23:53 | |
*** rongze_ has quit IRC | 23:53 | |
*** rongze_ has joined #heat | 23:53 | |
*** rongze_ has quit IRC | 23:54 | |
*** rongze has joined #heat | 23:55 | |
*** rongze has quit IRC | 23:55 | |
*** rcleere_ has joined #heat | 23:58 | |
*** gokrokve_ has joined #heat | 23:58 | |
*** nati_uen_ has joined #heat | 23:58 | |
*** andersonvom has quit IRC | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!