Tuesday, 2014-01-14

*** harlowja has joined #heat00:00
*** faramir has joined #heat00:33
*** jcru has quit IRC00:33
*** jcru has joined #heat00:34
*** sdake has quit IRC00:34
*** jcru has quit IRC00:35
*** sjmc has quit IRC00:36
*** jasond` has quit IRC00:41
openstackgerritA change was merged to openstack/heat: Update heat.conf.sample  https://review.openstack.org/6642800:41
*** faramir has quit IRC00:50
*** nati_uen_ has quit IRC00:58
*** nati_ueno has joined #heat01:02
*** nati_ueno has quit IRC01:02
*** nati_ueno has joined #heat01:04
*** randallburt has quit IRC01:05
*** nati_uen_ has joined #heat01:05
*** nati_ueno has quit IRC01:08
*** nosnos has joined #heat01:13
*** randallburt has joined #heat01:17
*** harlowja has quit IRC01:22
*** nati_uen_ has quit IRC01:22
*** nati_ueno has joined #heat01:23
openstackgerritRandall Burt proposed a change to openstack/heat: Refactor CLB to work with groups  https://review.openstack.org/6558601:28
openstackgerritRandall Burt proposed a change to openstack/heat: Use region for cinder management uri  https://review.openstack.org/6640601:28
*** larsks|alt has joined #heat01:32
*** larsks- has joined #heat01:33
*** harlowja has joined #heat01:33
*** larsks has quit IRC01:34
*** larsks|alt has quit IRC01:35
*** larsks- has quit IRC01:35
*** larsks has joined #heat01:35
*** gokrokve has quit IRC01:35
*** gokrokve has joined #heat01:36
*** gokrokve_ has joined #heat01:37
*** gokrokve has quit IRC01:41
*** gokrokve_ has quit IRC01:42
*** IlyaE has quit IRC01:45
*** rongze has joined #heat01:51
*** swygue has joined #heat02:03
*** alexheneveld has quit IRC02:04
*** erkules has joined #heat02:10
*** nati_uen_ has joined #heat02:11
openstackgerritAnderson Mesquita proposed a change to openstack/heat: Remove X-Auth-Url header from authtoken middleware  https://review.openstack.org/6099102:12
*** erkules_ has quit IRC02:12
*** sdake has joined #heat02:13
*** sdake has quit IRC02:13
*** sdake has joined #heat02:13
*** randallburt has quit IRC02:13
*** nati_ueno has quit IRC02:15
*** rpothier has joined #heat02:15
openstackgerritA change was merged to openstack/heat: Implements Nova FloatingIP resources  https://review.openstack.org/6283602:27
openstackgerritA change was merged to openstack/heat: Fix showing events on swift.  https://review.openstack.org/6509902:32
*** rpothier_ has joined #heat02:36
*** rpothier has quit IRC02:39
openstackgerritAnderson Mesquita proposed a change to openstack/python-heatclient: Add support for build info API  https://review.openstack.org/6648302:40
*** nati_uen_ has quit IRC02:50
*** nati_ueno has joined #heat02:51
openstackgerritAnderson Mesquita proposed a change to openstack/python-heatclient: Add pagination (limit and marker) to stack-list  https://review.openstack.org/6648402:52
openstackgerritAnderson Mesquita proposed a change to openstack/python-heatclient: Add filter option to stack-list  https://review.openstack.org/6648502:52
openstackgerritJun Jie Nan proposed a change to openstack/heat: Update python-keystoneclient version in requirements.txt  https://review.openstack.org/6648702:54
openstackgerritAnderson Mesquita proposed a change to openstack/python-heatclient: Add support for build info API  https://review.openstack.org/6648302:54
*** nati_ueno has quit IRC03:00
*** mkollaro has quit IRC03:00
openstackgerrithuangtianhua proposed a change to openstack/heat: Fixes template not using the JSON or YAML format  https://review.openstack.org/6564403:04
*** randallburt has joined #heat03:10
*** randallburt has quit IRC03:14
*** swygue has quit IRC03:40
*** liang has joined #heat03:51
*** swygue has joined #heat03:55
*** slong has quit IRC03:57
openstackgerritJun Jie Nan proposed a change to openstack/heat: Database model for software config/deployment  https://review.openstack.org/5887603:57
openstackgerritJun Jie Nan proposed a change to openstack/heat: RPC service for software config/deployment  https://review.openstack.org/5887703:57
openstackgerritJun Jie Nan proposed a change to openstack/heat: RPC service for software config/deployment  https://review.openstack.org/5887704:00
*** nati_ueno has joined #heat04:10
*** nati_ueno has quit IRC04:15
*** edmund has quit IRC04:32
*** rongze has quit IRC04:43
*** rongze has joined #heat04:44
*** slong has joined #heat04:49
*** rongze has quit IRC04:49
*** SergeyLukjanov has joined #heat04:52
*** slong has quit IRC04:53
*** nati_ueno has joined #heat04:53
*** nati_ueno has quit IRC04:55
*** nati_ueno has joined #heat04:55
*** slong has joined #heat05:05
*** sgordon` has quit IRC05:05
*** sgordon` has joined #heat05:07
*** akuznetsov has joined #heat05:10
*** aignatov has joined #heat05:11
*** rongze has joined #heat05:14
*** rongze_ has joined #heat05:16
*** rongze has quit IRC05:16
*** rongze_ has quit IRC05:21
*** chandankumar has joined #heat05:24
*** aignatov has quit IRC05:41
*** nati_uen_ has joined #heat05:49
*** nati_uen_ has quit IRC05:50
*** nati_uen_ has joined #heat05:50
*** nati_ueno has quit IRC05:53
openstackgerritJenkins proposed a change to openstack/heat: Imported Translations from Transifex  https://review.openstack.org/6450406:05
*** denis_makogon has joined #heat06:06
*** SergeyLukjanov has quit IRC06:12
*** rongze has joined #heat06:15
openstackgerritSergey Kraynev proposed a change to openstack/heat: Let Integer property convert strings to numbers  https://review.openstack.org/6626506:21
openstackgerritSergey Kraynev proposed a change to openstack/heat: Fix ceilometer alarm properties schema  https://review.openstack.org/6393206:28
*** liang has quit IRC06:32
*** liang has joined #heat06:37
*** nati_ueno has joined #heat06:38
*** prathamesh461 has joined #heat06:39
*** nati_uen_ has quit IRC06:41
*** nkhare has joined #heat06:43
skraynevGood morning06:46
*** gokrokve has joined #heat06:47
*** elcot has joined #heat06:47
*** akuznets_ has joined #heat06:49
*** akuznetsov has quit IRC06:49
elcottell something new invention of heat06:49
elcotwhats that06:50
*** gokrokve has quit IRC06:53
*** slong has quit IRC06:55
*** alienyyg has joined #heat06:59
*** alienyyg_ has quit IRC06:59
openstackgerritLiang Chen proposed a change to openstack/heat: Marconi message queue resource implementation  https://review.openstack.org/6103607:05
*** PhilK has quit IRC07:09
*** elcot has quit IRC07:20
*** nati_uen_ has joined #heat07:26
*** nati_uen_ has quit IRC07:26
*** nati_uen_ has joined #heat07:27
*** nkhare has quit IRC07:27
*** nati_ueno has quit IRC07:30
*** akuznets_ has quit IRC07:32
*** akuznetsov has joined #heat07:33
*** SergeyLukjanov has joined #heat07:35
*** ifarkas has joined #heat07:37
*** aignatov has joined #heat07:46
*** gokrokve has joined #heat07:48
*** tspatzier has joined #heat07:48
*** gokrokve has quit IRC07:52
openstackgerritSergey Kraynev proposed a change to openstack/heat: Showing member list for nested resources  https://review.openstack.org/6597007:58
*** harlowja is now known as harlowja_away08:00
*** tspatzier_ has joined #heat08:00
*** jistr has joined #heat08:01
*** tspatzier has quit IRC08:04
*** ifarkas has quit IRC08:07
openstackgerritJun Jie Nan proposed a change to openstack/heat: Database model for software config/deployment  https://review.openstack.org/5887608:12
openstackgerritJun Jie Nan proposed a change to openstack/heat: RPC service for software config/deployment  https://review.openstack.org/5887708:12
therve'morning!08:16
skraynevhi, therve08:16
shardymorning all08:16
skraynevhello, shardy08:17
openstackgerritJun Jie Nan proposed a change to openstack/heat: REST API for software config/deployment  https://review.openstack.org/6651408:18
*** nati_ueno has joined #heat08:21
*** jamieh has joined #heat08:23
*** nati_uen_ has quit IRC08:24
*** bvandenh has joined #heat08:25
*** nati_ueno has quit IRC08:25
*** nati_ueno has joined #heat08:25
*** tomek_adamczewsk has joined #heat08:35
*** tomek_adamczewsk has quit IRC08:42
*** denis_makogon has quit IRC08:42
*** jprovazn has joined #heat08:46
*** tspatzier_ is now known as tspatzier08:48
*** gokrokve has joined #heat08:48
openstackgerritSergey Kraynev proposed a change to openstack/heat: Showing member list for nested resources  https://review.openstack.org/6597008:49
*** jamieh has quit IRC08:52
openstackgerritThomas Herve proposed a change to openstack/heat: Make context available during constraint validation  https://review.openstack.org/6630408:52
*** _ruhe has joined #heat08:53
*** gokrokve has quit IRC08:53
*** che-arne has quit IRC08:53
*** _ruhe is now known as ruhe08:54
*** liang has quit IRC09:10
*** liang has joined #heat09:10
*** tomek_adamczewsk has joined #heat09:11
*** giulivo has joined #heat09:13
prathamesh461hi09:16
prathamesh461i have to embed python code in user data09:17
prathamesh461http://paste.openstack.org/show/61166/09:17
prathamesh461but this is not working09:17
prathamesh461it says template not in valid format09:17
*** ifarkas has joined #heat09:18
*** ifarkas has quit IRC09:19
*** ifarkas has joined #heat09:19
*** nati_uen_ has joined #heat09:20
*** nkhare has joined #heat09:20
shardyprathamesh461: It's not valid yaml09:21
openstackgerrithuangtianhua proposed a change to openstack/heat: "version" section should be required in template  https://review.openstack.org/6589509:21
shardyLooks like you need to strip the ' from before the #!09:21
*** nati_ueno has quit IRC09:23
prathamesh461thanks shardy09:24
prathamesh461:)09:24
prathamesh461that worked fine!09:24
openstackgerritJun Jie Nan proposed a change to openstack/heat: RPC service for software config/deployment  https://review.openstack.org/5887709:31
openstackgerritJun Jie Nan proposed a change to openstack/heat: REST API for software config/deployment  https://review.openstack.org/6651409:31
*** ifarkas has quit IRC09:31
*** derekh has joined #heat09:36
*** lsmola_ has quit IRC09:39
*** ruhe is now known as ruhe_away09:41
*** ruhe_away is now known as ruhe09:41
*** ruhe is now known as ruhe_away09:42
*** ifarkas has joined #heat09:42
*** gokrokve has joined #heat09:48
*** tiantian_ has joined #heat09:49
*** ruhe_away is now known as ruhe09:49
openstackgerritJun Jie Nan proposed a change to openstack/heat: Added heat url in config for heat standalone mode  https://review.openstack.org/6451809:50
*** lsmola_ has joined #heat09:51
*** liang has quit IRC09:52
*** gokrokve has quit IRC09:53
*** ruhe is now known as ruhe_away10:00
*** ruhe_away is now known as ruhe10:01
*** alexheneveld has joined #heat10:03
*** klwilson has quit IRC10:05
*** klwilson has joined #heat10:06
*** nati_ueno has joined #heat10:07
*** brint has quit IRC10:09
*** nati_uen_ has quit IRC10:11
*** brint has joined #heat10:12
*** cyli has quit IRC10:12
*** cyli has joined #heat10:13
*** nati_ueno has quit IRC10:13
*** nati_ueno has joined #heat10:13
*** jistr has quit IRC10:14
*** tiantian_ has quit IRC10:16
*** dmakogon_ is now known as denis_makogon10:18
*** ruhe is now known as ruhe_away10:31
*** akuznetsov has quit IRC10:31
*** akuznetsov has joined #heat10:32
*** aignatov has quit IRC10:39
*** lsmola_ has quit IRC10:40
*** ruhe_away is now known as _ruhe10:41
*** tspatzier_ has joined #heat10:44
*** mkollaro has joined #heat10:47
*** gokrokve has joined #heat10:48
*** tspatzier has quit IRC10:48
*** gokrokve has quit IRC10:52
*** lsmola_ has joined #heat10:53
*** jistr has joined #heat10:57
*** nati_uen_ has joined #heat11:01
*** nati_ueno has quit IRC11:05
*** tomek_adamczewsk has quit IRC11:05
*** _ruhe is now known as ruhe11:11
*** aignatov has joined #heat11:12
*** tomek_adamczewsk has joined #heat11:13
*** john-n-seattle1 has quit IRC11:15
*** john-n-seattle1 has joined #heat11:16
*** tomek_adamczewsk has quit IRC11:22
*** agileclipse has joined #heat11:30
*** pshchelo has joined #heat11:35
*** tomek_adamczewsk has joined #heat11:38
*** gokrokve has joined #heat11:48
*** swygue has quit IRC11:52
*** gokrokve has quit IRC11:53
lsmola_shardy: hello11:59
*** rongze has quit IRC12:06
*** rongze has joined #heat12:07
*** blomquisg has quit IRC12:08
*** rongze has quit IRC12:11
*** nati_uen_ has quit IRC12:12
*** nati_ueno has joined #heat12:17
*** rongze has joined #heat12:18
*** SergeyLukjanov has quit IRC12:18
*** SergeyLukjanov has joined #heat12:19
*** nkhare has quit IRC12:20
*** agileclipse has quit IRC12:22
*** rpothier_ has quit IRC12:30
*** asalkeld has joined #heat12:36
*** ruhe is now known as ruhe_away12:42
*** agileclipse has joined #heat12:42
*** mkollaro has quit IRC12:45
*** gokrokve has joined #heat12:48
*** ruhe_away is now known as ruhe12:51
*** asalkeld has quit IRC12:52
*** SergeyLukjanov has quit IRC12:53
*** gokrokve has quit IRC12:53
*** SergeyLukjanov has joined #heat12:54
*** nati_ueno has quit IRC12:54
*** asalkeld has joined #heat12:59
*** agileclipse has quit IRC13:11
*** blomquisg has joined #heat13:14
*** rpothier has joined #heat13:15
sdakemorning13:17
skraynevhi, sdake13:18
sdakehey skraynev13:21
*** ruhe is now known as ruhe_away13:23
*** sgordon has joined #heat13:26
*** agileclipse has joined #heat13:30
*** jdob has joined #heat13:30
*** ruhe_away is now known as _ruhe13:31
asalkeldmorning sdake13:32
*** _ruhe is now known as ruhe13:32
asalkeld(I am now in Brisbane :)13:32
*** asalkeld is now known as asalkeld_zz13:34
sdakehey angus13:37
sdakecool good to know13:37
*** SergeyLukjanov is now known as _SergeyLukjanov13:40
*** _SergeyLukjanov has quit IRC13:40
*** agileclipse has quit IRC13:47
*** gokrokve has joined #heat13:48
*** pafuent has joined #heat13:51
*** gokrokve has quit IRC13:53
*** akuznetsov has quit IRC13:55
*** agileclipse has joined #heat13:58
*** SergeyLukjanov has joined #heat14:06
*** dims has quit IRC14:22
*** jcru has joined #heat14:23
*** dims has joined #heat14:24
*** andersonvom has joined #heat14:24
*** larsks has quit IRC14:26
*** larsks has joined #heat14:26
*** larsks is now known as Guest6667714:27
*** Guest66677 has quit IRC14:29
*** andersonvom1 has joined #heat14:30
*** andersonvom has quit IRC14:30
*** andersonvom1 is now known as andersonvom14:30
*** tspatzier_ is now known as tspatzier14:31
*** jprovazn has quit IRC14:33
*** spzala has joined #heat14:33
*** andersonvom1 has joined #heat14:36
*** andersonvom has quit IRC14:36
openstackgerritPablo Andres Fuente proposed a change to openstack/heat: New middleware to handle SSL termination proxies  https://review.openstack.org/6414214:36
*** andersonvom1 is now known as andersonvom14:36
*** arbylee has joined #heat14:46
*** mkollaro has joined #heat14:47
*** arbylee has quit IRC14:47
*** arbylee has joined #heat14:48
*** gokrokve has joined #heat14:48
*** klwilson has quit IRC14:50
*** nosnos has quit IRC14:50
*** larsks has joined #heat14:50
*** gokrokve has quit IRC14:53
*** vijendar has joined #heat14:53
*** chandankumar has quit IRC14:55
*** radez_g0n3 is now known as radez14:56
*** sdake has quit IRC15:03
*** klwilson has joined #heat15:04
*** ruhe is now known as ruhe_away15:05
*** ruhe_away is now known as _ruhe15:11
*** _ruhe is now known as ruhe15:12
*** jmckind has joined #heat15:14
*** sdake has joined #heat15:15
*** Linz has quit IRC15:15
*** rongze has quit IRC15:15
vijendarSpamapS: Hi Clint15:16
vijendarSpamapS: https://review.openstack.org/#/c/62730/11/heat/engine/service.py15:17
vijendarSpamapS:  shall I change it like "(stack.state ==  (stack.CREATE, stack.COMPLETE) or stack.state == (stack.ADOPT, stack.COMPLETE)) ?15:19
*** tsmadds has joined #heat15:20
*** agileclipse has quit IRC15:21
tsmaddshi all15:21
tsmaddsanyone about that knows about the current status of boto working with heat-api-cfn?15:22
tsmaddsI'm having trouble creating stacks in particular. Other commands are working Ok15:22
*** gokrokve has joined #heat15:24
*** gokrokve_ has joined #heat15:27
*** gokrokve has quit IRC15:28
*** tims has joined #heat15:29
*** Linz has joined #heat15:29
*** IlyaE has joined #heat15:30
openstackgerritVijendar Komalla proposed a change to openstack/heat: Add _() to rackspace resource strings  https://review.openstack.org/6292215:31
sdakezaneb morning around?15:38
zanebsdake: o/15:39
sdakezaneb you upgraded to f20 right?15:39
sdakerecommend turning off libvirt log_level=1 and change to 215:39
*** sjmc has joined #heat15:39
zanebno, only went as far as F1915:39
sdakemy system locked up (oom)15:39
sdakezaneb - living on the edge :)15:39
zanebyah, my policy is to wait a couple of months after release for folks like you to trip over all the bugs ;)15:40
sdakezaneb likely did not drive a red porsche in a past life ;)15:40
sdakejpeeler ping me when you get in15:40
zanebexcept it usually ends up being more like 6 or 8 or 18 months...15:40
andersonvomshardy: morning! you around?15:41
sdakezaneb yar I generally try to stay on top of new fedora as soon as devstack is working15:41
sdakefedup works pretty well these days15:41
sdakealthough I run the proprietary nvidia driver so that adds some pain15:41
*** rongze has joined #heat15:46
*** tims1 has joined #heat15:47
zanebyeah, fedup worked surprisingly well, except for not rebooting at the end15:47
zaneband the progress screen didn't really seem to work15:48
zanebthat was the F17 version though, so things have probably improved already15:48
*** tims has quit IRC15:49
shardyandersonvom: Hi, yup15:49
jpeelersdake: i've been here, what's up15:50
sdakejpeeler have time for  a quick call?15:50
jpeeleryes15:50
sdakecool give me a ring15:50
andersonvomshardy: oh, just commented on the auth url issue now: https://review.openstack.org/#/c/60991/9/heat/common/context.py15:50
andersonvomshardy: can you take a look at it and see what you think?15:51
*** aignatov has quit IRC15:51
shardyrval['X-Auth-Url'] = self.auth_uri15:52
shardyWe don't read user-provided X-Auth-Url headers in the current authtoken implementation15:52
shardyhence my concern ;)15:52
*** SergeyLukjanov has quit IRC15:53
therveandersonvom, I actually had a question about that bug15:54
therveandersonvom, If you remove the authtoken middleware, how do you know the request is properly authentified?15:54
shardyandersonvom: the multicloud stuff is kinda a totally different use-case, my concern is that we don't create a hole for cloud-provider deployments of Heat15:55
shardytherve: Well the auth headers are set by keystone's authtoken middleware15:55
therveshardy, yeah I'm asking about bug #125936415:55
uvirtbotLaunchpad bug 1259364 in heat "Should be able to remove authtoken middleware without breaking" [Medium,In progress] https://launchpad.net/bugs/125936415:55
radixif a resource is being updated, do dependent resources get notified somehow?15:56
therveI don't understand how you could remove it15:56
therveradix, update is called on them too iirc15:56
radixtherve: when?15:56
therveradix, during stack update? :)15:56
shardytherve: I think that's about working with other, non-authtoken auth middleware15:56
andersonvomtherve: this would be for customers that have their own keystone in place already authenticating every request15:56
andersonvomnot customers, cloud providers15:57
radixwell, if A depends on B, and B is updated, does A get updated after B is updated? or during? or before?15:57
therveHum ok15:57
shardye.g we have auth_password, and folks could conceivably want to plug in their own auth solution I guess15:57
therveradix, After15:57
radixok, so kinda sucks for PoolMember :)15:57
andersonvomtherve: and, of course, what shardy mentioned as well15:57
therveradix, How so15:58
radixtherve: well, if a Server is being updated (in a way that makes it unavailable), and a PoolMember depends on the Server, there's no way that PoolMember can temporarily disable the node in the load balancer15:59
andersonvomshardy: so, I'm not quite sure I follow your suggestion....15:59
therveradix, Sure there is a way. Write some code :)15:59
radixI don't follow15:59
radixdo you mean add more resource notifications to heat core, or is there something that's possible purely inside of PoolMember's code?16:00
therveradix, What you want is not supported right now, but we knew that for the beginning?16:00
shardyandersonvom: what suggestion?16:00
*** ruhe is now known as ruhe_away16:00
radixtherve: oh, ok, I was just trying to recall :)16:00
therveI think we want generic resource notifications, yes16:00
shardyandersonvom: In the review, I'm just saying I don't think we can do what you propose, I'm not sure what the solution is (other than leaving it as it is ;)16:00
*** pablosan has joined #heat16:00
andersonvomshardy: so, that's what I tried to address on the comment. we could completely separate the setting of X-Auth-Url from authtoken and auth_password, and put it in its own middleware16:02
andersonvomshardy: that way, we could plug/unplug authentication middleware as we wish16:02
*** rcleere has joined #heat16:02
shardyandersonvom: what does that gain us though, can't your replacement middleware just set the URL?16:03
andersonvomshardy: e.g. we could have in the pipeline: ... authurl authtoken context ... OR ... authurl auth_password context ...16:03
therveradix, So how do we start the work btw? Should we start creating some lib patch16:04
radixtherve: I am, yeah16:04
therveOk cool16:05
radixtherve: I'm working on pure simple functions that know how to generate and update templates, with the rolling update logic16:05
therveradix, Cool, so then we create the native resources out of it?16:05
radixshould have a patch soon16:05
radixtherve: yeah. I'm actually trying to have the AWS Autoscaling resources use the functions too16:05
radixbut there may be some divergence at some point16:06
therveThe more we can share the better16:06
radixagreed16:06
radixthe rolling update logic is... intricate, I'm in the middle of that right now :)16:07
shardyandersonvom: I gues I'm missing the context on the use-case, you seem to want to plug something other than heat-provided auth middlware in, but I don't understand what exactly16:08
shardys/gues/guess16:08
andersonvomshardy: I guess we could, but when I look at both authtoken and auth_password, it seems to me they both do X-Auth-Url related sutff, and context relies on that information to properly work. So we could refactor all X-Auth-Url stuff into its own middleware.16:08
shardyandersonvom: I'm not opposed to that, I'm just trying to understand why16:09
*** ruhe_away is now known as _ruhe16:09
andersonvomshardy: to give you our context, we have our own keystone set in place before the request even hits Heat, so we authenticate twice if you keep authtoken16:10
shardyandersonvom: Ok, so refactoring so the auth url logic is in its own middlware sounds reasonable then16:10
shardyandersonvom: thanks16:10
andersonvomshardy: not a problem! =)16:11
sjmcshardy, andersonvom - sorry to butt in, but would this allow heat to support auth extensions?16:11
sjmcapi key, for instance?16:12
andersonvomsjmc: I guess. I mean, you would still need to authenticate the key against some endpoint, right? what we're talking about will keep the same behavior we have today, only mode modular16:13
sjmci meant pluggable auth middleware in general16:14
*** akuznetsov has joined #heat16:14
shardysjmc: In theory, you can already plug in whatever middlware you like16:14
shardysjmc: but most of heat assumes fairly close integration with keystone, and that is the only auth solution we support16:14
SpamapSvijendar: no, just change the [] to ()16:15
sjmcok shardy. i know keystone used to support plugins through entry_points but last time i checked that seemed to have changed16:15
sjmcbut that would be the way to do it? for instance, pass a key/secret as the username/password and make keystone aware to treat it as such?16:16
vijendarSpamapS: thanks16:17
shardysjmc: That would be one way, or have the credentials stored via keystones credentials API and have auth middleware which authenticates against that16:18
shardysjmc: Are you talking about oauth credentials or something else?16:18
sjmcapi access/secret instead of username/password16:18
sjmcrackspace and HP support that AFAIK16:18
SpamapSvijendar: like I said.. _tiny_ issue16:18
shardysjmc: If there is existing keystone middleware for those, it would probably be pretty simple to make heat work with it16:21
shardysjmc: however it's not something we currently have any plans to support16:21
*** radez is now known as radez_g0n316:22
SpamapSsjmc: that is called "the ec2 api"16:22
SpamapSsjmc: it only works for compute and s316:22
SpamapSAFAIK16:22
shardySpamapS: Oh, well in that case, we already support ec2 signed requests via the CFN compatible API16:22
SpamapSright16:23
SpamapSsame thing16:23
sjmcSpamapS - the extension names are HP-IDM and RAX-KEKEY16:23
*** jistr has quit IRC16:23
sjmci think they're different from the ec2 extension, but i might be wrong16:23
SpamapSsjmc: oh that. But those aren't signed request extensions, are they?16:23
sjmcno, they're full auth extensions - used instead of console username/password16:24
*** radez_g0n3 is now known as radez16:25
pshchelohi all :) I have question - does heatclient support working through http proxy (like the one set in /etc/environment)?16:28
*** tomek_adamczewsk has quit IRC16:35
openstackgerritPablo Andres Fuente proposed a change to openstack/heat: New middleware to handle SSL termination proxies  https://review.openstack.org/6414216:38
radixoh boy, I just discovered what happens when you run tox from within a tox-owned virtualenv16:40
*** SergeyLukjanov has joined #heat16:41
tsmaddsHi all, Hopefully a quick question - I'm writing a tool that will manage stacks in AWS and OpenStack. I'd like to support CloudFormation style templates for both but the conflicting boto requirements are proving an issue. With the more recent versions of boto, it seams like only the create stack method fails with "Access Denied". Is this a known issue and if so, is there a workaround/patch?16:42
tsmaddss/seams/seems16:42
shardytsmadds: define more recent version of boto, there were issues but I thought we fixed them all16:43
tsmaddsv2.20.0+16:43
shardygah, maybe they've broken us again16:43
tsmaddsanything before that version but after 2.6.0 gives the Access Denied issue for all commands16:43
shardytsmadds: Oh, what version of python-keystoneclient do you have (on the host running keystone)?16:44
tsmaddsii  python-keystone                  1:2013.2-0ubuntu1~cloud0                            OpenStack identity service - Python library16:45
tsmaddsii  python-keystoneclient            1:0.3.2-0ubuntu1~cloud0                             Client library for OpenStack Identity API16:45
tsmaddsfixed in 2013.2.1?16:45
*** mkollaro has quit IRC16:46
*** randallburt has joined #heat16:47
tsmaddsshardy: ^ as above, I'm running 2013.2 ^16:48
shardytsmadds: sec16:48
*** jasond` has joined #heat16:49
*** beekneemech is now known as bnemec16:50
*** aignatov has joined #heat16:50
*** _ruhe is now known as ruhe16:51
*** sergmelikyan has joined #heat16:51
andersonvomhey folks, what's the difference between paste.filter_factory and heat.filter_factory in api-paste.ini? Is there a rule of thumb as to when to use just paste.filter and when to use both?16:52
*** radez is now known as radez_g0n316:53
*** blamar has quit IRC16:53
*** radez_g0n3 is now known as radez16:53
*** mkollaro has joined #heat16:53
*** blamar has joined #heat16:55
shardytsmadds: http://paste.openstack.org/show/61196/16:56
shardytsmadds: keystoneclient 0.3.2 should work, so maybe there is some new Boto breakage fun to sort out16:56
shardytsmadds: I'll take a look later16:56
*** jasond` has quit IRC16:58
*** mkollaro has quit IRC16:58
*** jasond` has joined #heat17:00
shardytsmadds: I think the issue is the regex match for user agent in https://review.openstack.org/#/c/38784/2/keystoneclient/contrib/ec2/utils.py17:00
shardytsmadds: should match multiple digits in the major version, I'll send a patch17:01
shardytsmadds: Actually, ignore that, sorry17:01
* shardy needs more coffee17:01
tsmaddsshardy: :) no worries17:02
*** aignatov has quit IRC17:02
tsmaddsshardy: all efforts are much appreciated!17:02
shardytsmadds: I will re-test with the latest boto release, and send patches if it doesn't work tomorrow17:02
shardyboto has a habit of periodically changing things in ways which break us unfortunately17:03
tsmaddsshardy: thanks for that. really appreciated. and yeah, i've noticed that theme in my fix hunting :S17:03
*** akuznetsov has quit IRC17:06
*** ruhe is now known as ruhe_away17:07
*** woodspa has joined #heat17:09
*** bvandenh has quit IRC17:10
radixoh, I meant to ask this the other day: does anyone know why _some_ resources replace self.properties in handle_update?17:10
*** gokrokve_ has quit IRC17:11
*** woodspa has quit IRC17:11
*** gokrokve has joined #heat17:11
*** tspatzier has quit IRC17:12
stevebakermorning17:15
openstackgerritVijendar Komalla proposed a change to openstack/python-heatclient: python-heatclient stack-abandon support  https://review.openstack.org/6292517:15
shardyHi stevebaker17:15
randallburtmorning stevebaker17:16
stevebakershardy: did you seem my replies on this? https://review.openstack.org/#/c/61902/17:16
*** gokrokve has quit IRC17:16
*** ruhe_away is now known as _ruhe17:17
*** akuznetsov has joined #heat17:18
shardystevebaker: Hadn't seen them, but just read now, sounds reasonable17:18
shardystevebaker: The upgrade thing is difficult, I'm having to think hard about the same kind of problems migrating to the v3 keystone API and moving towards domain-users instead of ec217:19
*** alexheneveld has quit IRC17:19
stevebakershardy: maybe if it is easy, support upgrades, otherwise we need to get better at identifying criteria for re-launching stacks after a major upgrade17:20
shardystevebaker: Yeah, I'm trying to decide if we need a new set of native resources which use the domain-user-auth, or if we should have a config file switch which flips everything from ec2 to instance-user auth17:21
shardyobviously the latter will require restarting all stacks17:22
*** tims1 has quit IRC17:22
shardybut maintaining everything indefinitely is going to get messy pretty quickly17:22
stevebakerit would be good if templates didn't need to be modified, so -1 on native resources unless they have their own use-cases for other purposes17:24
*** tsmadds has quit IRC17:25
stevebakermaybe an explicit stack update operation post-upgrade could do a converge which checks that domain-user-auth things are in place, and create them if not17:26
shardystevebaker: true, but existing templates using the AWS-compatible resources could just continue working via ec2 auth17:26
*** jasond` has quit IRC17:26
*** jasond` has joined #heat17:26
*** tsmadds has joined #heat17:26
stevebakershardy: I'm more thinking of SoftwareDeployment resources which would ideally not require extra resources in the template just to auth the instance->heat signals17:27
stevebakerat least there is no upgrade concerns with SoftwareDeployment17:28
shardystevebaker: I'm acutally thinking we should add a property to OS::Nova::Server which provides a domain-user name/password to the instance via nova metadata17:28
shardyso potentially there's no additional scaffolding required other than one property17:29
*** jmckind has quit IRC17:29
*** pvaneck has joined #heat17:29
stevebakershardy: how about a property on the deployment resource rather than the server?17:30
shardystevebaker: Sure, that could work too17:30
stevebakershardy: I think there will eventually be different deployment resource implementations for different signalling transports, or a bunch of properties on one deployment implementation to support all the transports17:30
stevebakerand domain-user/pass sounds like a "thing to configure the transport for a deployment resource"17:32
shardystevebaker: sure - I'm planning to take a two-pronged approach, firstly make the existing ec2 auth work via users in a different domain (removing the admin requirement), then as a second phase, allow auth via those users directly17:32
stevebakersounds good17:32
shardyOne issue with that is the keystone v3/credentials API is admin-only by default, but I've raised a bug to hopefully fix that17:33
shardymoar keystone bugs ;)17:33
openstackgerritVijendar Komalla proposed a change to openstack/heat: Implement adopt-stack for nested stacks  https://review.openstack.org/6472017:35
openstackgerritVijendar Komalla proposed a change to openstack/heat: Implement adopt-stack  https://review.openstack.org/6273017:35
openstackgerritSteven Hardy proposed a change to openstack/heat: Convert heat_keystoneclient user-create logic to v3 API  https://review.openstack.org/6664617:38
openstackgerritSteven Hardy proposed a change to openstack/heat: Convert heat_keystoneclient user-delete logic to v3 API  https://review.openstack.org/6664717:38
openstackgerritSteven Hardy proposed a change to openstack/heat: Convert heat_keystoneclient user enable/disable logic to v3 API  https://review.openstack.org/6664817:38
openstackgerritSteven Hardy proposed a change to openstack/heat: heat_keystoneclient migrate auth_token/service_catalog to v3 API  https://review.openstack.org/6664917:38
*** arbylee has quit IRC17:42
therveradix, I think it's in case you have operations called later in update that requires self.properties to be updated17:42
radixtherve: so does the normal machinery update self.properties after the update?17:43
radixI mean, I'm sure it does, but it seems weird that these resources are changing the whole object (self.properties = Properties)17:44
radixinstead of just updating them, but maybe it's just syntactically easier17:44
therveI don't know to be honest17:45
therveself.properties is just a in memory operation17:45
*** akuznetsov has quit IRC17:46
*** akuznetsov has joined #heat17:49
*** akuznetsov has quit IRC17:50
*** randallburt has quit IRC17:52
*** derekh has quit IRC17:54
*** randallburt has joined #heat17:55
*** tsmadds has quit IRC18:01
*** harlowja_away is now known as harlowja18:03
*** gokrokve has joined #heat18:06
*** rongze has quit IRC18:08
*** rongze has joined #heat18:10
*** yogesh has joined #heat18:11
*** arbylee has joined #heat18:12
SpamapShey fellow heaters.. is setting Default's to functions a supported thing in CFN/HOT? https://review.openstack.org/#/c/62735/9/block-storage.yaml has an example of it.18:13
*** mkollaro has joined #heat18:17
*** spzala_ has joined #heat18:19
*** arbylee has quit IRC18:20
*** spzala has quit IRC18:21
*** spzala_ is now known as spzala18:21
randallburtSpamapS:  I didn't think that would work, but don't actually know for sure. Would be super handy methinks. Did the submitter run the template through Heat and see if it barfed on that?18:27
SpamapSrandallburt: it works18:28
SpamapSbut I don't know that we test it18:28
SpamapSor document it18:28
SpamapSseems like something to stick into tempest and document18:29
randallburtSpamapS:  agreed. I can't find anywhere it says that should work.18:29
*** _ruhe is now known as ruhe18:30
therveI'd be surprised if we handled the dependencies properly18:36
jasond`i wonder what would happen if one of those parameters with a default was an attribute for the resource using the parameter18:38
randallburtit would end time and space as we know it.18:38
jasond`:)18:39
*** IlyaE has quit IRC18:41
*** arbylee has joined #heat18:42
*** arbylee has quit IRC18:50
*** arbylee has joined #heat18:51
*** jprovazn has joined #heat18:57
*** SergeyLukjanov has quit IRC18:58
*** SergeyLukjanov_ has joined #heat18:59
*** jistr has joined #heat18:59
*** alexheneveld has joined #heat19:00
openstackgerritPablo Andres Fuente proposed a change to openstack/heat: New middleware to handle SSL termination proxies  https://review.openstack.org/6414219:00
*** jcru has quit IRC19:02
*** SergeyLukjanov_ has quit IRC19:03
*** SergeyLukjanov has joined #heat19:03
openstackgerritA change was merged to openstack/heat: Add filter and pagination to stack_get_all  https://review.openstack.org/6303919:04
*** aignatov has joined #heat19:09
*** jasond` has quit IRC19:15
*** randallburt has quit IRC19:16
*** randallburt has joined #heat19:17
*** spzala has quit IRC19:18
*** tims has joined #heat19:20
*** PhilK has joined #heat19:23
*** tspatzier has joined #heat19:28
*** klwilson has quit IRC19:28
*** ruhe is now known as ruhe_away19:30
*** jasond` has joined #heat19:32
*** IlyaE has joined #heat19:32
*** ruhe_away is now known as ruhe19:33
*** klwilson has joined #heat19:33
*** blomquisg has quit IRC19:35
pscheieI spun a stack using a template written in json.19:41
pscheieIf I convert that to yaml and add a resource to it, and then update the stack with it, will the fact that the template syntax change cause any issues (such as respinning all the existing VMs)?19:42
openstackgerritChmouel Boudjnah proposed a change to openstack/python-heatclient: Raise traceback on error when using CLI and -debug  https://review.openstack.org/6613619:43
stevebakerrandallburt: did you have a change for this? https://blueprints.launchpad.net/heat/+spec/native-pseudo-params19:48
randallburtstevebaker:  there is a WiP patch I'm reviewing for it from Pablo Andres Fuente19:51
randallburtI can ask that he add you to the Draft if you want stevebaker19:51
stevebakerrandallburt: actually it should be WIP, not Draft19:52
randallburtstevebaker:  ok. I'll ask him to change it19:52
stevebakeri'll mark the BP Started19:52
randallburtcool, thanks stevebaker19:53
stevebakershardy: do you want https://blueprints.launchpad.net/heat/+spec/keystone-v3-only to target i-2 for now?19:53
*** sjmc has quit IRC19:54
*** denis_makogon_ has joined #heat19:59
*** sdake has quit IRC20:01
*** sdake has joined #heat20:01
*** sdake has quit IRC20:01
*** sdake has joined #heat20:01
*** randallburt has quit IRC20:02
*** randallburt has joined #heat20:03
*** denis_makogon has quit IRC20:06
*** denis_makogon_ is now known as denis_makogon20:06
*** dmakogon_ has joined #heat20:06
*** alexheneveld has quit IRC20:08
*** radez is now known as radez_g0n320:16
*** jcru has joined #heat20:17
*** radez_g0n3 is now known as radez20:18
stevebakerrandallburt: can this be marked Implemented? https://blueprints.launchpad.net/heat/+spec/filter-resources-by-support20:25
randallburtstevebaker:  yes, I think so.20:26
stevebakercool20:26
stevebakervijendar: It looks like https://blueprints.launchpad.net/heat/+spec/adopt-stack is implemented?20:29
vijendarstevebaker: yes20:31
stevebaker\o/20:32
*** jasond` has quit IRC20:32
*** randallburt has quit IRC20:36
*** jistr has quit IRC20:42
*** jasond` has joined #heat20:45
*** tomek_adamczewsk has joined #heat20:47
*** jasond` has quit IRC20:51
*** tsmadds has joined #heat20:57
openstackgerritVijendar Komalla proposed a change to openstack/heat: Implement adopt-stack for nested stacks  https://review.openstack.org/6472021:02
openstackgerritVijendar Komalla proposed a change to openstack/heat: Implement adopt-stack  https://review.openstack.org/6273021:02
*** tsmadds has quit IRC21:02
sdakeasalkeld whats your rax email address?21:08
sdakeor if anyone else has it handy21:09
*** alexheneveld has joined #heat21:09
*** maxskew has joined #heat21:11
timsI looked it up just for you sdake: angus.salkeld@RACKSPACE.COM21:11
openstackgerritVijendar Komalla proposed a change to openstack/python-heatclient: python-heatclient stack-abandon support  https://review.openstack.org/6292521:13
*** tomek_adamczewsk has quit IRC21:14
*** tomek_adamczewsk has joined #heat21:14
sdakethanks tims21:15
*** maxskew has quit IRC21:22
*** jprovazn has quit IRC21:23
*** pafuent has left #heat21:24
asalkeld_zzmorning21:32
*** asalkeld_zz is now known as asalkeld21:32
*** alexheneveld has quit IRC21:33
*** alexheneveld has joined #heat21:35
stevebakerasalkeld: hey, could you add the comment shadower suggested? https://review.openstack.org/#/c/59685/21:38
*** asalkeld has quit IRC21:39
*** ifarkas has quit IRC21:45
*** asalkeld has joined #heat21:52
*** jdob has quit IRC21:54
*** alexheneveld has quit IRC21:56
*** tspatzier has quit IRC22:01
*** Linz_ has joined #heat22:02
*** radez is now known as radez_g0n322:03
*** Linz has quit IRC22:04
*** tomek_adamczewsk has quit IRC22:09
*** tomek_adamczewsk has joined #heat22:10
*** tomek_adamczewsk has quit IRC22:12
*** tomek_adamczewsk has joined #heat22:12
*** sgordon has quit IRC22:14
*** modi_vnc has joined #heat22:17
*** tomek_adamczewsk has quit IRC22:19
*** ruhe is now known as _ruhe22:21
*** giulivo has quit IRC22:36
*** SergeyLukjanov has quit IRC22:36
*** tomek_adamczewsk has joined #heat22:36
andersonvomstevebaker, shardy: is there any reason why multicloud is only checked in auth_password but not auth_token? Are there any plans to include support for multicloud with auth_token in the future?22:37
stevebakerandersonvom: no plans currently22:42
*** dims has quit IRC22:42
andersonvomstevebaker: as in... "it would be ok if we added support?" ;)22:43
andersonvomstevebaker: I ask because we're changing some things with https://review.openstack.org/#/c/60991 and it makes sense to just move the multicloud logic to a single place22:43
stevebakerandersonvom: check with bgorski, and how that will integrate with multi-region. It might be better not to support multi-cloud at the API level, and instead represent it all in the template22:44
stevebakerso it might be best at some point for the existing multi-cloud to be deprecated22:45
andersonvomoh...22:45
andersonvomin this case, it's not even worth it, then... it's just that if it was going to stay, it would make more sense to have all auth_url related logic in a single place. but if it's being deprecated... I'll leave it as it is22:46
*** dims_ has joined #heat22:57
*** tomek_adamczewsk has quit IRC23:03
*** tomek_adamczewsk has joined #heat23:04
*** rpothier has quit IRC23:04
*** rcleere has quit IRC23:08
*** tomek_adamczewsk has quit IRC23:08
*** modi_vnc has quit IRC23:12
*** denis_makogon has quit IRC23:16
*** aignatov has quit IRC23:17
*** alexheneveld has joined #heat23:17
*** jcru has quit IRC23:18
*** vijendar has quit IRC23:20
*** vijendar has joined #heat23:21
*** vijendar has quit IRC23:22
*** alexheneveld has quit IRC23:22
*** alexheneveld has joined #heat23:24
openstackgerritAnderson Mesquita proposed a change to openstack/heat: Assign X-Auth-Url header in a separate middleware  https://review.openstack.org/6099123:24
andersonvomstevebaker: you still around?23:29
*** tims has quit IRC23:33
*** nati_ueno has joined #heat23:38
andersonvomanybody around? =P23:45
*** alexheneveld has quit IRC23:46
*** alexheneveld has joined #heat23:49
*** alexheneveld has quit IRC23:51
SpamapSstevebaker: heh, I guess we were a bit ambitious for i2 eh?23:51
* SpamapS archives all the bug spam23:51
andersonvomhe's not around, but since you're here......23:52
andersonvomdo you know how can one run tempest tests on devstack? (or anywhere else for that matter)23:52
*** spzala has joined #heat23:53
SpamapSandersonvom: checkout tempest and run it with tox, IIRC23:55
SpamapSandersonvom: read the README.rst .. quickstart is what I've used23:55
andersonvomSpamapS: I actually meant running the tempest tests that jenkins runs for heat at every patchset23:56
andersonvomor is it the same thing?23:56
*** pablosan has quit IRC23:56
SpamapSandersonvom: https://git.openstack.org/cgit/openstack-infra/config/23:58
SpamapSandersonvom: there is the configuration for the gate23:58
SpamapSandersonvom: in there you'll find all of the jobs that vote on the gate23:58
SpamapSandersonvom: they all run tempest via devstack-gate  -- https://git.openstack.org/cgit/openstack-infra/devstack-gate/tree/README.rst23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!