| kfox1111 | Oh.... heh. https://review.openstack.org/#/c/64874/ looks like it might let me work around that... | 00:00 |
|---|---|---|
| radix | SpamapS: so on retry-failed-update, what do you think about all the feedback that shardy and zane gave you? | 00:00 |
| radix | er, not shardy, the other steve :) | 00:01 |
| *** andersonvom has quit IRC | 00:03 | |
| radix | huh, guess the gate got reset | 00:03 |
| kfox1111 | shardy: Have you ever tried to use neutron lbaas with your Make LoadBalancer nested stack template configurable changeset? | 00:06 |
| *** derekh has joined #heat | 00:06 | |
| randallburt | kfox1111: shardy is probably fast asleep atm | 00:07 |
| kfox1111 | ah. ok. Thanks. | 00:07 |
| SpamapS | radix: I'm actually testing out the updatereplace suggestion now. I just wanted to get an incremental change up that worked with create failed only. | 00:08 |
| radix | okie doke | 00:08 |
| *** gokrokve has quit IRC | 00:08 | |
| SpamapS | radix: but the approach I've taken will end up being resurrected by update failure recovery anyway.. because on update failed, we don't want to force replacement, we want to force _the same update action as before_ | 00:09 |
| *** gokrokve has joined #heat | 00:09 | |
| *** rpothier_ has joined #heat | 00:10 | |
| *** gokrokve has quit IRC | 00:13 | |
| *** slong has joined #heat | 00:15 | |
| *** sjmc7 has quit IRC | 00:15 | |
| *** achampion has joined #heat | 00:15 | |
| *** TravT has joined #heat | 00:17 | |
| *** spzala has quit IRC | 00:19 | |
| *** slong has quit IRC | 00:26 | |
| *** matsuhashi has joined #heat | 00:27 | |
| *** jergerber has quit IRC | 00:33 | |
| *** tsmadds has joined #heat | 00:34 | |
| *** rcleere has quit IRC | 00:35 | |
| *** tsmadds has quit IRC | 00:38 | |
| *** pvaneck has quit IRC | 00:46 | |
| *** tango has quit IRC | 01:07 | |
| *** TravT has quit IRC | 01:09 | |
| openstackgerrit | A change was merged to openstack/heat: Always specify preserve_ephemeral on server rebuild https://review.openstack.org/68294 | 01:10 |
| openstackgerrit | A change was merged to openstack/heat: add the validation of MaxSize ,MinSize and DesiredCapacity https://review.openstack.org/67618 | 01:11 |
| *** radez_g0n3 has quit IRC | 01:22 | |
| openstackgerrit | Jenkins proposed a change to openstack/heat: Updated from global requirements https://review.openstack.org/68240 | 01:26 |
| *** kfox1111 has quit IRC | 01:31 | |
| *** blamar_ has joined #heat | 01:31 | |
| *** blamar has quit IRC | 01:34 | |
| *** blamar_ is now known as blamar | 01:34 | |
| *** tsmadds has joined #heat | 01:34 | |
| *** nosnos has joined #heat | 01:35 | |
| *** derekh has quit IRC | 01:38 | |
| *** tsmadds has quit IRC | 01:38 | |
| *** randallburt has quit IRC | 01:49 | |
| *** randallburt has joined #heat | 01:50 | |
| *** andersonvom has joined #heat | 02:00 | |
| *** john-n-seattle1 has left #heat | 02:00 | |
| *** asalkeld has quit IRC | 02:03 | |
| *** ramishra has joined #heat | 02:04 | |
| *** andersonvom has quit IRC | 02:05 | |
| *** radez_g0n3 has joined #heat | 02:07 | |
| *** obondarev has quit IRC | 02:09 | |
| *** obondarev has joined #heat | 02:10 | |
| *** radez_g0n3 has quit IRC | 02:11 | |
| *** radez_g0n3 has joined #heat | 02:13 | |
| *** spzala has joined #heat | 02:24 | |
| openstackgerrit | huangtianhua proposed a change to openstack/heat: "version" section should be required in template https://review.openstack.org/65895 | 02:30 |
| openstackgerrit | huangtianhua proposed a change to openstack/heat: Fixes template not using the JSON or YAML format https://review.openstack.org/67396 | 02:30 |
| *** asalkeld has joined #heat | 02:31 | |
| *** tsmadds has joined #heat | 02:35 | |
| openstackgerrit | Zane Bitter proposed a change to openstack/heat: Fix AWS::StackId pseudo-parameter during stack update https://review.openstack.org/66741 | 02:35 |
| *** tiantian has joined #heat | 02:38 | |
| openstackgerrit | A change was merged to openstack/heat: Adding Range constraint for SIZE property https://review.openstack.org/67114 | 02:38 |
| *** ramishra has quit IRC | 02:38 | |
| *** rpothier has joined #heat | 02:39 | |
| openstackgerrit | Randall Burt proposed a change to openstack/python-heatclient: Add more defalt CA paths https://review.openstack.org/68836 | 02:39 |
| *** tsmadds has quit IRC | 02:40 | |
| *** ramishra has joined #heat | 02:42 | |
| *** rpothier_ has quit IRC | 02:43 | |
| *** pablosan has quit IRC | 02:43 | |
| *** liang has joined #heat | 02:44 | |
| *** ramishra has quit IRC | 02:44 | |
| *** ramishra_ has joined #heat | 02:44 | |
| *** ramishra_ has quit IRC | 02:46 | |
| *** ramishra has joined #heat | 02:46 | |
| *** erkules_ has joined #heat | 02:49 | |
| *** tims has joined #heat | 02:50 | |
| *** erkules has quit IRC | 02:51 | |
| *** ramishra has quit IRC | 02:52 | |
| *** ramishra has joined #heat | 02:53 | |
| *** ramishra has quit IRC | 02:59 | |
| *** gokrokve has joined #heat | 03:03 | |
| *** randallburt has quit IRC | 03:07 | |
| *** ramishra has joined #heat | 03:11 | |
| *** funzo has quit IRC | 03:13 | |
| *** matsuhashi has quit IRC | 03:14 | |
| *** rongze has joined #heat | 03:14 | |
| *** ramishra has quit IRC | 03:16 | |
| *** ramishra has joined #heat | 03:18 | |
| *** ramishra has quit IRC | 03:22 | |
| *** ramishra_ has joined #heat | 03:22 | |
| *** kebray_ has quit IRC | 03:24 | |
| *** ramishra_ has quit IRC | 03:29 | |
| *** erkules_ is now known as erkules | 03:32 | |
| *** sballe has quit IRC | 03:33 | |
| *** ramishra has joined #heat | 03:33 | |
| *** sballe has joined #heat | 03:34 | |
| *** nanjj has joined #heat | 03:35 | |
| *** tsmadds has joined #heat | 03:36 | |
| *** oubiwann has quit IRC | 03:37 | |
| *** andersonvom has joined #heat | 03:38 | |
| *** liang has quit IRC | 03:38 | |
| *** jrist has quit IRC | 03:39 | |
| *** tango has joined #heat | 03:40 | |
| *** ramishra_ has joined #heat | 03:40 | |
| *** ramishra has quit IRC | 03:41 | |
| *** tsmadds has quit IRC | 03:41 | |
| *** ramishra has joined #heat | 03:42 | |
| *** ramishra_ has quit IRC | 03:42 | |
| *** ramishra has quit IRC | 03:46 | |
| *** ramishra_ has joined #heat | 03:46 | |
| *** ramishra_ has quit IRC | 03:51 | |
| *** ramishra has joined #heat | 03:51 | |
| *** liang has joined #heat | 03:51 | |
| *** jrist has joined #heat | 03:52 | |
| *** ramishra has quit IRC | 03:54 | |
| *** ramishra_ has joined #heat | 03:54 | |
| *** sballe has quit IRC | 03:56 | |
| *** ramishra_ has quit IRC | 04:01 | |
| *** spzala has quit IRC | 04:03 | |
| *** nanjj has quit IRC | 04:07 | |
| *** funzo has joined #heat | 04:08 | |
| *** ramishra has joined #heat | 04:08 | |
| *** gokrokve has quit IRC | 04:09 | |
| *** gokrokve has joined #heat | 04:09 | |
| *** andersonvom has quit IRC | 04:10 | |
| *** andersonvom has joined #heat | 04:10 | |
| *** andersonvom has quit IRC | 04:11 | |
| openstackgerrit | A change was merged to openstack/python-heatclient: Move environment and template file functions to own module https://review.openstack.org/66226 | 04:12 |
| openstackgerrit | A change was merged to openstack/python-heatclient: Test coverage of empty environment https://review.openstack.org/66227 | 04:12 |
| openstackgerrit | A change was merged to openstack/python-heatclient: Improve and unit-test template contents fetching https://review.openstack.org/66228 | 04:12 |
| *** asalkeld has quit IRC | 04:13 | |
| *** gokrokve has quit IRC | 04:13 | |
| *** gokrokve has joined #heat | 04:16 | |
| *** harlowja is now known as harlowja_away | 04:19 | |
| *** tiantian has quit IRC | 04:25 | |
| *** rcleere has joined #heat | 04:25 | |
| *** asalkeld has joined #heat | 04:26 | |
| *** ramishra_ has joined #heat | 04:29 | |
| *** ramishra has quit IRC | 04:29 | |
| *** kebray_ has joined #heat | 04:31 | |
| *** ramishra_ has quit IRC | 04:34 | |
| *** ramishra has joined #heat | 04:34 | |
| *** tsmadds has joined #heat | 04:37 | |
| *** faramir has joined #heat | 04:38 | |
| *** matsuhashi has joined #heat | 04:39 | |
| *** tsmadds has quit IRC | 04:41 | |
| skraynev | Morning! ) | 04:44 |
| *** ramishra has quit IRC | 04:45 | |
| *** ramishra has joined #heat | 04:46 | |
| *** edmund1 has quit IRC | 04:51 | |
| *** rongze has quit IRC | 04:54 | |
| *** rongze has joined #heat | 04:54 | |
| *** coolsvap has joined #heat | 04:59 | |
| openstackgerrit | Sergey Kraynev proposed a change to openstack/heat: Remove default option for fixed_ips https://review.openstack.org/68648 | 04:59 |
| *** rongze has quit IRC | 04:59 | |
| *** ramishra has quit IRC | 05:02 | |
| *** ramishra has joined #heat | 05:08 | |
| *** akuznetsov has joined #heat | 05:11 | |
| *** ramishra has quit IRC | 05:17 | |
| *** ramishra has joined #heat | 05:17 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 05:22 | |
| *** rongze has joined #heat | 05:25 | |
| *** rongze_ has joined #heat | 05:27 | |
| *** rongze has quit IRC | 05:29 | |
| *** rongze_ has quit IRC | 05:32 | |
| *** shadower_ has joined #heat | 05:36 | |
| *** shadower has quit IRC | 05:36 | |
| *** tsmadds has joined #heat | 05:37 | |
| *** ramishra has quit IRC | 05:38 | |
| *** ramishra_ has joined #heat | 05:38 | |
| *** tsmadds has quit IRC | 05:42 | |
| *** ramishra_ has quit IRC | 05:42 | |
| *** ramishra has joined #heat | 05:42 | |
| *** ramishra has quit IRC | 05:46 | |
| *** ramishra_ has joined #heat | 05:46 | |
| *** gokrokve has quit IRC | 05:47 | |
| *** gokrokve has joined #heat | 05:48 | |
| *** gokrokve has quit IRC | 05:53 | |
| *** ramishra_ has quit IRC | 05:53 | |
| *** ramishra has joined #heat | 05:55 | |
| *** ramishra has quit IRC | 06:00 | |
| *** ramishra has joined #heat | 06:00 | |
| openstackgerrit | Jenkins proposed a change to openstack/heat: Imported Translations from Transifex https://review.openstack.org/64504 | 06:05 |
| *** tspatzier has joined #heat | 06:13 | |
| *** gokrokve has joined #heat | 06:14 | |
| *** rongze has joined #heat | 06:25 | |
| *** nkhare has joined #heat | 06:27 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 06:29 | |
| *** rongze has quit IRC | 06:29 | |
| *** ramishra_ has joined #heat | 06:33 | |
| *** ramishra has quit IRC | 06:36 | |
| *** tzumainn has quit IRC | 06:49 | |
| *** ramishra_ has quit IRC | 06:52 | |
| *** ramishra has joined #heat | 06:52 | |
| openstackgerrit | Sergey Kraynev proposed a change to openstack/heat: Showing member list for nested resources https://review.openstack.org/65970 | 06:54 |
| openstackgerrit | A change was merged to openstack/heat: Implement adopt-stack https://review.openstack.org/62730 | 06:58 |
| openstackgerrit | A change was merged to openstack/heat: Implement adopt-stack for nested stacks https://review.openstack.org/64720 | 06:59 |
| openstackgerrit | A change was merged to openstack/heat: Enable better sub-classing of common Schema class https://review.openstack.org/65688 | 07:00 |
| *** kebray_ has quit IRC | 07:02 | |
| *** jprovazn_ has joined #heat | 07:04 | |
| *** ramishra_ has joined #heat | 07:07 | |
| *** ramishra_ has quit IRC | 07:07 | |
| *** ramishra has quit IRC | 07:08 | |
| *** rongze has joined #heat | 07:09 | |
| *** aignatov_ is now known as aignatov | 07:13 | |
| *** ramishra has joined #heat | 07:20 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 07:22 | |
| *** ramishra has quit IRC | 07:26 | |
| *** ramishra has joined #heat | 07:26 | |
| *** ramishra has quit IRC | 07:28 | |
| *** ramishra_ has joined #heat | 07:28 | |
| *** ramishra_ has quit IRC | 07:31 | |
| *** ramishra has joined #heat | 07:31 | |
| *** ramishra has quit IRC | 07:32 | |
| *** ramishra has joined #heat | 07:32 | |
| *** lsmola_ has joined #heat | 07:35 | |
| *** ramishra_ has joined #heat | 07:38 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_a | 07:39 | |
| *** tsmadds has joined #heat | 07:39 | |
| *** ramishra has quit IRC | 07:39 | |
| *** SergeyLukjanov_a is now known as SergeyLukjanov_ | 07:40 | |
| *** matsuhashi has quit IRC | 07:42 | |
| *** nosnos has quit IRC | 07:43 | |
| *** tsmadds has quit IRC | 07:43 | |
| *** aignatov is now known as aignatov_ | 07:47 | |
| *** ramishra has joined #heat | 07:48 | |
| *** ramishra_ has quit IRC | 07:49 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 07:49 | |
| *** tango has quit IRC | 07:53 | |
| *** ramishra_ has joined #heat | 07:56 | |
| *** ramishra has quit IRC | 07:57 | |
| *** ramishra has joined #heat | 08:00 | |
| *** sergmelikyan has quit IRC | 08:00 | |
| *** ramishra_ has quit IRC | 08:00 | |
| openstackgerrit | Lee Li proposed a change to openstack/python-heatclient: Using common methods from oslo cliutils https://review.openstack.org/67120 | 08:00 |
| *** gokrokve has quit IRC | 08:08 | |
| *** gokrokve has joined #heat | 08:08 | |
| *** ramishra has quit IRC | 08:10 | |
| *** ramishra_ has joined #heat | 08:10 | |
| *** e0ne has joined #heat | 08:11 | |
| openstackgerrit | huangtianhua proposed a change to openstack/heat: Fix errors on OS::Neutron::Port resource https://review.openstack.org/68870 | 08:11 |
| *** gokrokve has quit IRC | 08:12 | |
| *** ramishra_ has quit IRC | 08:15 | |
| therve | 'morning | 08:15 |
| *** ramishra has joined #heat | 08:15 | |
| therve | skraynev, Don't do recheck no bug please | 08:16 |
| *** ramishra has quit IRC | 08:18 | |
| *** ramishra_ has joined #heat | 08:18 | |
| skraynev | therve: hello, ok. If I get error again, I will create bug. | 08:18 |
| therve | Most of the time it exists | 08:19 |
| *** ramishra_ has quit IRC | 08:22 | |
| *** ramishra has joined #heat | 08:22 | |
| therve | It looks like bug #1223469 reappeared | 08:25 |
| *** giulivo has joined #heat | 08:26 | |
| tspatzier | hi therve | 08:28 |
| therve | tspatzier, Hello | 08:28 |
| tspatzier | I have a question on a review: https://review.openstack.org/67171 | 08:28 |
| *** tomek_adamczewsk has joined #heat | 08:29 | |
| tspatzier | There is a gerrit code review message that says I should do a merge locally and submit a new patch. But after it a jenkins message that says everything is ok. | 08:29 |
| tspatzier | do I have to do anything? | 08:29 |
| *** jamieh has joined #heat | 08:31 | |
| therve | tspatzier, Hum, that's strange. | 08:31 |
| tspatzier | I did a rebase locally without any conflicts. | 08:32 |
| tspatzier | Should I just wait and see what happens? | 08:32 |
| *** ramishra has quit IRC | 08:33 | |
| therve | Let's see if I can reapprove | 08:34 |
| *** ramishra has joined #heat | 08:35 | |
| openstackgerrit | Serg Melikyan proposed a change to openstack/heat: Fixed OS::Neutron::Pool creation https://review.openstack.org/67792 | 08:38 |
| *** aignatov_ is now known as aignatov | 08:40 | |
| *** tsmadds has joined #heat | 08:40 | |
| *** ifarkas has joined #heat | 08:40 | |
| *** jistr has joined #heat | 08:40 | |
| *** ramishra_ has joined #heat | 08:42 | |
| *** ramishra has quit IRC | 08:42 | |
| *** aignatov is now known as aignatov_ | 08:42 | |
| *** alienyyg has joined #heat | 08:42 | |
| pshchelo | morning all :) | 08:43 |
| *** alienyyg has quit IRC | 08:43 | |
| *** ramishra has joined #heat | 08:44 | |
| *** tsmadds has quit IRC | 08:44 | |
| *** aignatov_ is now known as aignatov | 08:44 | |
| skraynev | therve: need your attention. | 08:45 |
| *** tsmadds has joined #heat | 08:45 | |
| therve | skraynev, Hi | 08:46 |
| skraynev | therve: hi) I want ask about tenant_id option | 08:46 |
| therve | tspatzier, Looks to be in the queue | 08:46 |
| therve | skraynev, Yes | 08:46 |
| skraynev | therve: I know, that for neutron resources it was unused (according not correct working f.e.https://review.openstack.org/#/c/60607/) | 08:47 |
| *** ramishra_ has quit IRC | 08:48 | |
| *** ramishr__ has joined #heat | 08:48 | |
| *** tspatzier has quit IRC | 08:48 | |
| skraynev | therve: and now we don't add this parameter in resource's schema | 08:49 |
| therve | Yes because it's not a good idea | 08:50 |
| skraynev | therve: but as huangtianhua said here https://review.openstack.org/#/c/68870/, we have this option in Net resource | 08:50 |
| therve | Yeah that was a mistake | 08:50 |
| skraynev | therve: and I have a little doubt about should we remove it or not? | 08:50 |
| therve | Removing stuff is hard | 08:51 |
| *** ramishra has quit IRC | 08:51 | |
| skraynev | therve: why is it hard? has it some requirements? | 08:52 |
| therve | skraynev, Because we care about backward compatibility | 08:52 |
| *** pshchelo has quit IRC | 08:53 | |
| skraynev | therve: OMG. again this hell phrase 'backward compatibility' ))) | 08:53 |
| *** pshchelo has joined #heat | 08:53 | |
| skraynev | therve: anyway, thanks. you helped me to find an answer. | 08:54 |
| *** pshchelo has joined #heat | 08:54 | |
| *** nkhare has quit IRC | 08:57 | |
| *** ramishr__ has quit IRC | 09:00 | |
| *** ramishra has joined #heat | 09:01 | |
| *** ramishra_ has joined #heat | 09:06 | |
| *** ramishra has quit IRC | 09:07 | |
| *** nkhare has joined #heat | 09:10 | |
| *** ramishra_ has quit IRC | 09:12 | |
| openstackgerrit | Pavlo Shchelokovskyy proposed a change to openstack/python-heatclient: Fix order of arguments in assertEqual https://review.openstack.org/64039 | 09:26 |
| *** derekh has joined #heat | 09:27 | |
| openstackgerrit | A change was merged to openstack/heat: Add a new "UpdateWaitConditionHandle" resource https://review.openstack.org/63245 | 09:27 |
| *** julienvey has joined #heat | 09:29 | |
| *** shardy_afk is now known as shardy | 09:31 | |
| *** nanjj has joined #heat | 09:31 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_a | 09:31 | |
| *** SergeyLukjanov_a is now known as SergeyLukjanov_ | 09:32 | |
| *** tomek_adamczewsk has quit IRC | 09:34 | |
| *** tspatzier has joined #heat | 09:43 | |
| openstackgerrit | Pavlo Shchelokovskyy proposed a change to openstack/python-heatclient: Add `update_type` as parameter to stack-update https://review.openstack.org/64274 | 09:46 |
| *** nanjj has quit IRC | 09:47 | |
| *** tomek_adamczewsk has joined #heat | 09:50 | |
| *** chandankumar_ has quit IRC | 09:56 | |
| *** ramishra has joined #heat | 10:10 | |
| *** che-arne has joined #heat | 10:11 | |
| *** che-arne|2 has joined #heat | 10:11 | |
| *** che-arne|2 has quit IRC | 10:11 | |
| *** bvandenh has joined #heat | 10:12 | |
| *** aignatov is now known as aignatov_ | 10:13 | |
| *** nkhare has quit IRC | 10:13 | |
| *** nkhare has joined #heat | 10:25 | |
| *** rongze has quit IRC | 10:27 | |
| *** cody-somerville has quit IRC | 10:28 | |
| openstackgerrit | A change was merged to openstack/heat: Fix order of arguments in assertEqual (patch 2/2) https://review.openstack.org/64415 | 10:28 |
| openstackgerrit | A change was merged to openstack/heat: Ignore tox -e cover generated files https://review.openstack.org/67030 | 10:28 |
| openstackgerrit | A change was merged to openstack/heat: Database model for software config/deployment https://review.openstack.org/58876 | 10:28 |
| *** che-arne has quit IRC | 10:30 | |
| *** che-arne has joined #heat | 10:32 | |
| *** EmilienM has quit IRC | 10:32 | |
| *** tomek_adamczewsk has quit IRC | 10:32 | |
| *** EmilienM has joined #heat | 10:32 | |
| *** asalkeld has quit IRC | 10:38 | |
| *** aignatov_ is now known as aignatov | 10:41 | |
| *** cody-somerville has joined #heat | 10:42 | |
| *** liang has quit IRC | 10:54 | |
| openstackgerrit | Pavlo Shchelokovskyy proposed a change to openstack/heat: Fix order of arguments in assertEqual (patch 1/2) https://review.openstack.org/61457 | 11:01 |
| *** nkhare has quit IRC | 11:11 | |
| openstackgerrit | Angus Salkeld proposed a change to openstack/heat: Update olso gettextutils https://review.openstack.org/67758 | 11:15 |
| openstackgerrit | Angus Salkeld proposed a change to openstack/heat: Update oslo db https://review.openstack.org/67759 | 11:15 |
| openstackgerrit | Angus Salkeld proposed a change to openstack/heat: Update base oslo modules https://review.openstack.org/67757 | 11:15 |
| *** ramishra has quit IRC | 11:20 | |
| *** ramishra_ has joined #heat | 11:20 | |
| *** ramishra has joined #heat | 11:23 | |
| *** rongze has joined #heat | 11:25 | |
| *** ramishra_ has quit IRC | 11:25 | |
| *** rongze has quit IRC | 11:32 | |
| *** agileclipse has joined #heat | 11:34 | |
| *** agileclipse has quit IRC | 11:36 | |
| openstackgerrit | A change was merged to openstack/heat: Remove dependencies on pep8, pyflakes and flake8 https://review.openstack.org/67129 | 11:38 |
| openstackgerrit | A change was merged to openstack/heat: Make LB-updating in rolling update more reliable https://review.openstack.org/68311 | 11:38 |
| *** tspatzier__ has joined #heat | 11:40 | |
| *** tspatzier has quit IRC | 11:43 | |
| *** sirushti has quit IRC | 11:43 | |
| *** ramishra has quit IRC | 11:44 | |
| *** ramishra has joined #heat | 11:45 | |
| *** sirushti has joined #heat | 11:45 | |
| *** ramishra has quit IRC | 11:47 | |
| *** ramishra has joined #heat | 11:48 | |
| *** _ruhe is now known as ruhe | 11:49 | |
| *** tspatzier__ has quit IRC | 11:53 | |
| *** tspatzier__ has joined #heat | 11:54 | |
| *** coolsvap_away has joined #heat | 11:54 | |
| *** coolsvap has quit IRC | 11:55 | |
| *** coolsvap_away has quit IRC | 11:58 | |
| *** e0ne has quit IRC | 12:08 | |
| *** e0ne has joined #heat | 12:09 | |
| *** ramishra_ has joined #heat | 12:10 | |
| *** ramishra has quit IRC | 12:13 | |
| *** tango has joined #heat | 12:16 | |
| *** rongze has joined #heat | 12:18 | |
| *** ramishra_ has quit IRC | 12:29 | |
| *** chandankumar_ has joined #heat | 12:31 | |
| openstackgerrit | Mitsuru Kanabuchi proposed a change to openstack/heat: Implements resource type NetworkGateway https://review.openstack.org/62287 | 12:33 |
| *** chandankumar_ has quit IRC | 12:34 | |
| DaveJ_ | Hi guys | 12:42 |
| DaveJ_ | seening an old issue where stack delete fails | 12:42 |
| DaveJ_ | is there anyway to manually remove stacks ? | 12:42 |
| DaveJ_ | looks like all the resources have been deleted | 12:42 |
| *** liang has joined #heat | 12:46 | |
| *** liang has quit IRC | 12:54 | |
| *** achampion has quit IRC | 12:55 | |
| *** sgordon has joined #heat | 12:58 | |
| shardy | DaveJ_: Have you tried just re-running stack-delete, and if so what is the error in the /var/log/heat/engine.log? | 12:59 |
| DaveJ_ | It's complaining about a resource that has already been deleted (a network port) | 13:00 |
| DaveJ_ | 2014-01-24 13:00:05.359 14101 TRACE heat.engine.resource PortNotFoundClient: Port 2cc2416c-9e04-4df8-9f17-03a1ab31dc1f could not be found | 13:00 |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 13:01 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 13:02 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 13:03 | |
| shardy | DaveJ_: What version of Heat are you using? | 13:04 |
| shardy | AFAICS that exception should be caught and ignored in both master and stable/havana | 13:04 |
| shardy | https://github.com/openstack/heat/blob/stable/havana/heat/engine/resources/neutron/port.py#L110 | 13:04 |
| *** ruhe is now known as _ruhe | 13:07 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 13:11 | |
| *** tspatzier has joined #heat | 13:12 | |
| *** tspatzier__ has quit IRC | 13:13 | |
| *** tspatzier__ has joined #heat | 13:15 | |
| DaveJ_ | Yeah I'm using latest Havana from RDO | 13:15 |
| DaveJ_ | Just checked the source file and it has that exception block, but must not be getting hit. | 13:15 |
| shardy | DaveJ_: Hmm, sounds odd, maybe a bug - would be nice to figure out why, are you able to debug a little further? | 13:17 |
| shardy | maybe change the except neutron_exp.NeutronClientException to except Exception and log the type in the except block? | 13:17 |
| *** tspatzier has quit IRC | 13:18 | |
| *** _ruhe is now known as ruhe | 13:18 | |
| *** nkhare has joined #heat | 13:19 | |
| DaveJ_ | shardy: yep - just going to grab lunch then have another look | 13:19 |
| *** tspatzier__ has quit IRC | 13:19 | |
| shardy | DaveJ_: Ok, thanks! | 13:19 |
| *** aweiteka has joined #heat | 13:22 | |
| *** andersonvom has joined #heat | 13:23 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 13:24 | |
| *** jdob has joined #heat | 13:27 | |
| DaveJ_ | shardy: looks like the exception is being caught here https://github.com/openstack/heat/blob/stable/havana/heat/engine/resources/network_interface.py#L83 | 13:34 |
| DaveJ_ | The status code is 0 | 13:34 |
| *** pafuent has joined #heat | 13:36 | |
| shardy | DaveJ_: Is it a PortNotFoundClient exception getting raised? | 13:36 |
| shardy | maybe we need a or like in the link I pasted | 13:36 |
| DaveJ_ | dam it - forgot to print that out. I'll re-create it, and figure out what instance it actualy is. | 13:37 |
| DaveJ_ | yeah I think a specific check like the other block would work. I raise a bug and make that change. | 13:37 |
| shardy | DaveJ_: Maybe the top level _handle_not_found_exception in the base NeutronResource needs updating, and the per-resource functions removing | 13:39 |
| *** openstackgerrit has quit IRC | 13:42 | |
| *** DandyPandy has quit IRC | 13:43 | |
| *** scollier has quit IRC | 13:43 | |
| *** blamar has quit IRC | 13:43 | |
| *** mkollaro has joined #heat | 13:44 | |
| *** DandyPandy has joined #heat | 13:45 | |
| *** abramley has quit IRC | 13:45 | |
| *** harlowja_away has quit IRC | 13:45 | |
| *** scollier has joined #heat | 13:47 | |
| *** Tross1 has joined #heat | 13:47 | |
| *** Tross has quit IRC | 13:47 | |
| *** blamar has joined #heat | 13:47 | |
| *** achampion has joined #heat | 13:49 | |
| *** gilliard has quit IRC | 13:50 | |
| *** abramley has joined #heat | 13:50 | |
| radix | good morning heaters | 13:52 |
| *** Michalik has quit IRC | 13:53 | |
| therve | Hey radix | 13:53 |
| radix | morning therve :) | 13:58 |
| *** tzumainn has joined #heat | 14:02 | |
| *** dims has quit IRC | 14:02 | |
| *** dims has joined #heat | 14:05 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 14:07 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 14:09 | |
| *** sballe has joined #heat | 14:21 | |
| pshchelo | hi all, have a question about allowed_pattern. How should it be specified in the template? special quotes or smth? | 14:21 |
| pshchelo | because http://paste.openstack.org/show/61822/ does not work it seems | 14:21 |
| therve | pshchelo, I think you need quotes | 14:24 |
| *** Michalik has joined #heat | 14:26 | |
| pshchelo | which kind? both " and ' do not work. or should I quote the parameter in the command line too? | 14:26 |
| *** arbylee has joined #heat | 14:27 | |
| *** faramir has quit IRC | 14:27 | |
| *** blomquisg has joined #heat | 14:28 | |
| *** radez_g0n3 is now known as radez | 14:28 | |
| *** arbylee has quit IRC | 14:30 | |
| *** arbylee has joined #heat | 14:30 | |
| shardy | pshchelo: You have to specify a full match not just the fragment | 14:32 |
| shardy | pshchelo: try '^server.*' | 14:32 |
| *** jasond` has quit IRC | 14:34 | |
| pshchelo | shardy, thanks, that worked | 14:36 |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 14:41 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 14:41 | |
| *** nkhare has quit IRC | 14:47 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 14:51 | |
| *** ppetit has joined #heat | 14:55 | |
| *** jasond` has joined #heat | 14:59 | |
| *** alexpilotti has joined #heat | 15:03 | |
| *** vijendar has joined #heat | 15:04 | |
| *** tims1 has joined #heat | 15:07 | |
| *** tims has quit IRC | 15:09 | |
| *** vijendar has quit IRC | 15:11 | |
| sdake | morning | 15:13 |
| *** aignatov is now known as aignatov_ | 15:14 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 15:19 | |
| *** cmyster has joined #heat | 15:20 | |
| *** aignatov_ is now known as aignatov | 15:22 | |
| *** rongze has quit IRC | 15:31 | |
| *** jergerber has joined #heat | 15:54 | |
| *** jergerber has quit IRC | 15:55 | |
| *** jergerber has joined #heat | 15:55 | |
| *** oubiwann has joined #heat | 15:57 | |
| *** ramishra has joined #heat | 15:58 | |
| *** randallburt has joined #heat | 15:59 | |
| *** gokrokve has joined #heat | 16:01 | |
| *** coolsvap has joined #heat | 16:06 | |
| *** ramishra has quit IRC | 16:06 | |
| *** pablosan has joined #heat | 16:07 | |
| *** ramishra has joined #heat | 16:07 | |
| shardy | window 33 | 16:11 |
| shardy | oops | 16:11 |
| randallburt | no | 16:11 |
| randallburt | window 42 | 16:11 |
| randallburt | ;) | 16:11 |
| shardy | :) | 16:12 |
| *** openstackgerrit has joined #heat | 16:12 | |
| *** ifarkas has quit IRC | 16:13 | |
| *** alexpilotti_ has joined #heat | 16:14 | |
| *** alexpilotti has quit IRC | 16:16 | |
| *** alexpilotti_ is now known as alexpilotti | 16:16 | |
| *** ramishra_ has joined #heat | 16:22 | |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Enabled source code coverage for contrib directory https://review.openstack.org/68953 | 16:24 |
| *** ramishra has quit IRC | 16:25 | |
| *** gokrokve has quit IRC | 16:26 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add Docker resources to docs https://review.openstack.org/68753 | 16:29 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Rename rackspace.rst to contrib.rst https://review.openstack.org/68752 | 16:29 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add Rackspace resources summary to docs https://review.openstack.org/68793 | 16:29 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Restructure Rackspace resources https://review.openstack.org/68747 | 16:29 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Reorganize docker-plugin for consistency https://review.openstack.org/68748 | 16:29 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Allow force registration of docker resource https://review.openstack.org/68749 | 16:29 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Change Docker resource mapping name https://review.openstack.org/68750 | 16:29 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Generate docs for contrib plugins https://review.openstack.org/68751 | 16:29 |
| *** ramishra has joined #heat | 16:30 | |
| *** ramishra_ has quit IRC | 16:31 | |
| *** oubiwann has left #heat | 16:32 | |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Added testr-args option support for tox coverage https://review.openstack.org/67036 | 16:34 |
| *** edmund has joined #heat | 16:35 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 16:37 | |
| *** ramishra has quit IRC | 16:39 | |
| *** ramishra has joined #heat | 16:42 | |
| *** gokrokve has joined #heat | 16:43 | |
| edmund | Anyone know how we create/generate the REST API documentation (http://api.openstack.org/api-ref-orchestration.html)? The APIs related to GETs don't show what the XML or JSON looks like in the detail | 16:44 |
| *** arbylee has quit IRC | 16:45 | |
| *** aignatov is now known as aignatov_ | 16:45 | |
| *** ramishra has quit IRC | 16:46 | |
| *** russellb is now known as rustlebee | 16:46 | |
| *** ramishra has joined #heat | 16:46 | |
| shardy | Hi edmund: It's created via the api-site repo: | 16:46 |
| shardy | https://github.com/openstack/api-site | 16:46 |
| *** arbylee has joined #heat | 16:47 | |
| therve | https://github.com/openstack/api-site/tree/master/api-ref/src/wadls/orchestration-api/src/v1/samples more exactly | 16:48 |
| shardy | edmund: Here's an example of how you can add an example response to the doc: | 16:48 |
| shardy | https://review.openstack.org/#/c/65484/2/api-ref/src/wadls/orchestration-api/src/v1/orchestration-api.wadl | 16:48 |
| shardy | edmund: As you've noticed, not all of them have example responses yet | 16:48 |
| *** gokrokve has quit IRC | 16:49 | |
| *** ramishra has quit IRC | 16:51 | |
| *** ramishra has joined #heat | 16:51 | |
| *** ramishra_ has joined #heat | 16:52 | |
| *** ramishra has quit IRC | 16:52 | |
| *** cmyster has quit IRC | 16:53 | |
| *** aignatov_ is now known as aignatov | 16:53 | |
| *** aignatov is now known as aignatov_ | 16:54 | |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Refactor software config db model to use LongText https://review.openstack.org/68967 | 16:57 |
| *** ramishra_ has quit IRC | 16:57 | |
| *** ramishra has joined #heat | 16:59 | |
| *** aignatov_ is now known as aignatov | 16:59 | |
| *** e0ne has quit IRC | 17:00 | |
| *** david-lyle is now known as david-lyle_ | 17:00 | |
| *** aignatov is now known as aignatov_ | 17:00 | |
| *** e0ne has joined #heat | 17:00 | |
| *** ppetit has quit IRC | 17:00 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add Docker resources to docs https://review.openstack.org/68753 | 17:01 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Rename rackspace.rst to contrib.rst https://review.openstack.org/68752 | 17:01 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add Rackspace resources summary to docs https://review.openstack.org/68793 | 17:01 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add force_resource_mapping option https://review.openstack.org/68746 | 17:01 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Restructure Rackspace resources https://review.openstack.org/68747 | 17:01 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Reorganize docker-plugin for consistency https://review.openstack.org/68748 | 17:01 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Allow force registration of docker resource https://review.openstack.org/68749 | 17:02 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Change Docker resource mapping name https://review.openstack.org/68750 | 17:02 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Generate docs for contrib plugins https://review.openstack.org/68751 | 17:02 |
| *** ruhe is now known as _ruhe | 17:04 | |
| *** e0ne has quit IRC | 17:04 | |
| *** bnemec is now known as beekneemech | 17:06 | |
| *** ramishra_ has joined #heat | 17:06 | |
| *** ramishra has quit IRC | 17:06 | |
| *** david-lyle has joined #heat | 17:06 | |
| *** pvaneck has joined #heat | 17:10 | |
| *** ramishra_ has quit IRC | 17:13 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 17:17 | |
| *** kfox1111 has joined #heat | 17:18 | |
| openstackgerrit | Pablo Andres Fuente proposed a change to openstack/heat: Global environment ignores files starting with dot https://review.openstack.org/68971 | 17:18 |
| *** pshchelo has quit IRC | 17:24 | |
| edmund | shardy, thank! | 17:26 |
| *** sjmc7 has joined #heat | 17:27 | |
| *** arbylee has quit IRC | 17:31 | |
| *** jistr has quit IRC | 17:32 | |
| sjmc7 | shardy, you have a sec? | 17:33 |
| shardy | sjmc7: sure | 17:33 |
| sjmc7 | thanks. since the merge a few days ago to move some functions to the keystone v3 api | 17:34 |
| *** gokrokve has joined #heat | 17:34 | |
| sjmc7 | it's introduced a problem running for me because keystone by default sets a domain id of 'default' | 17:34 |
| sjmc7 | which isn't recognized by our identity server - is that something you've seen? | 17:34 |
| sjmc7 | it's been in keystone since last june, but is only used for v3 calls so i haven't come across it til now | 17:35 |
| shardy | sjmc7: Well all requests via the v3 API use the default domain unless you specify one | 17:35 |
| sjmc7 | right - and that default is hardcoded to be 'default' ? | 17:35 |
| randallburt | shardy: any heartburn over me approving https://review.openstack.org/#/c/60991? | 17:36 |
| shardy | sjmc7: I believe that is the, uh, default, unless you have overriden it with default_domain_id in keystone.conf | 17:36 |
| shardy | randallburt: Nope, I think thats all good now | 17:37 |
| sjmc7 | ok, so this is something our identity guys have configured unusually, so we'll need to always provide one | 17:37 |
| randallburt | shardy: cool, thanks! | 17:37 |
| shardy | sjmc7: Possibly, I need more info really to fully understand your issue | 17:38 |
| shardy | sjmc7: Are you running with latest master keystone? | 17:38 |
| sjmc7 | no - keystone's running on HP cloud | 17:38 |
| shardy | sjmc7: So you're running heat in standalone mode against HP cloud's API's? | 17:39 |
| sjmc7 | yeah | 17:39 |
| shardy | Hrm, I didn't test that | 17:39 |
| sjmc7 | i wouldn't expect you to :) | 17:39 |
| sjmc7 | if i comment out the 'default' assignment in keystoneclient all is well again. i'm trying to figure out if there's an issue i can bug someone about or whether it's just getting to the point where the version mismatch is too much | 17:40 |
| shardy | sjmc7: Well that is a use-case (standalone) which we want to support, but it may be difficult until the public cloud providers update to icehouse, because for this v3 stuff to work, really we're relying on icehouse keystone (mostly due to bugfixes) | 17:40 |
| sjmc7 | that was what i was afraid of. ok, understood | 17:41 |
| shardy | sjmc7: If you pass domain=None does it work? | 17:41 |
| sjmc7 | yeah | 17:41 |
| sjmc7 | so that's the workaround | 17:41 |
| shardy | So maybe that's a viable workaround - we could pass that into keystoneclient, but I'll have to test to ensure that works OK for the non-standalone case | 17:42 |
| *** SergeyLukjanov is now known as SergeyLukjanov_a | 17:42 | |
| sjmc7 | sure. that's not something i can pass as a header, is it? | 17:42 |
| sjmc7 | it seems unusual to default to 'default' instead of being left None | 17:43 |
| *** SergeyLukjanov_a is now known as SergeyLukjanov_ | 17:43 | |
| shardy | sjmc7: yeah, maybe that's a keystoneclient bug | 17:43 |
| sjmc7 | ok. if it's not too specific to us maybe it can go into the heat config, otherwise i'll workaround it | 17:45 |
| *** topol has joined #heat | 17:46 | |
| shardy | sjmc7: None works for me too, where do you see the 'default' assignment in keystoneclient? | 17:47 |
| sjmc7 | in httpclient - one sec, will get the line number and commit | 17:47 |
| sjmc7 | shardy - lines 184 and 202 in keystoneclient/httpclient.py, 2239c3b27c657dc0ffe2dbd0f95325e0ed7ae7c5 | 17:49 |
| *** aignatov_ is now known as aignatov | 17:49 | |
| *** harlowja has joined #heat | 17:51 | |
| *** aignatov is now known as aignatov_ | 17:51 | |
| *** tango has quit IRC | 17:52 | |
| *** derekh has quit IRC | 17:52 | |
| shardy | sjmc7: I think that is a bug, otherwise it will never work with any non-default default_domain_id | 17:56 |
| shardy | which is probably what you're seeing | 17:56 |
| shardy | sjmc7: I can look at sending a keystoneclient patch, unless you're planning to do so? | 17:56 |
| openstackgerrit | Randall Burt proposed a change to openstack/heat: Refactor CLB to work with groups https://review.openstack.org/65586 | 17:57 |
| sjmc7 | shardy - if you're able to, that would be great. if not, i can at least file a ticket, but i haven't spent a great deal of time looking at keystone | 17:59 |
| openstackgerrit | Randall Burt proposed a change to openstack/heat: Rackspace Cloud Networks resource https://review.openstack.org/68790 | 17:59 |
| *** yogesh has joined #heat | 18:00 | |
| shardy | sjmc7: https://bugs.launchpad.net/python-keystoneclient/+bug/1272451 | 18:07 |
| sjmc7 | ah, great, thanks shardy. i'll keep an eye on the issue - if nobody comes up with a good reason for the code i'll try and find time to submit a patch | 18:08 |
| shardy | sjmc7: I'm looking at it now, will submit a patch later today hopefully | 18:09 |
| sjmc7 | you move fast! awesome, thanks | 18:09 |
| shardy | sjmc7: If you can subscribe to the bug and test my fix when it's posted that would be great | 18:10 |
| sjmc7 | sure thing | 18:10 |
| *** mkollaro has quit IRC | 18:11 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 18:12 | |
| *** harlowja has quit IRC | 18:14 | |
| *** kfox1111 has quit IRC | 18:14 | |
| *** kfox1111 has joined #heat | 18:16 | |
| *** harlowja has joined #heat | 18:16 | |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Add personality files property to Server resource https://review.openstack.org/68685 | 18:22 |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Add privateIPv4 attribute to Server resource https://review.openstack.org/68686 | 18:22 |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Native Nova Server compatibility for Cloud Server https://review.openstack.org/58043 | 18:22 |
| *** spzala has joined #heat | 18:26 | |
| *** che-arne has quit IRC | 18:27 | |
| *** arbylee has joined #heat | 18:32 | |
| *** tango has joined #heat | 18:33 | |
| *** arbylee has quit IRC | 18:41 | |
| openstackgerrit | Pablo Andres Fuente proposed a change to openstack/heat: Global environment ignores files starting with dot https://review.openstack.org/68971 | 18:43 |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Make Server compatible with Nova Key Pair resource https://review.openstack.org/68230 | 18:43 |
| shardy | sjmc7: can you provide a cut/paste of the engine backtrace you're seeing please? | 18:44 |
| sjmc7 | sure. in the keystone bug? | 18:45 |
| shardy | sjmc7: yeah attached to the bug would be ideal, thanks | 18:45 |
| *** nati_ueno has joined #heat | 18:50 | |
| *** BullSherd has joined #heat | 18:51 | |
| BullSherd | Wow, Google is making really strange things http://goo.gl/YEkaMA | 18:51 |
| BullSherd | funny haha xD | 18:51 |
| *** BullSherd has left #heat | 18:51 | |
| pafuent | Hi. What should I do when the patches on which my patch depends on are merged? Should I rebase my patch and remove the dependencies or leave the patch as is? | 18:51 |
| shardy | pafuent: Yep, just do git checkout master; git pull; git checkout <topic branch>; git rebase -i origin | 18:52 |
| shardy | then when you next do git review the dependencies will be updated | 18:52 |
| pafuent | shardy: The <topic branch> is the same that had the dependencies on it? | 18:53 |
| shardy | pafuent: yup | 18:54 |
| pafuent | shardy: Thanks | 18:54 |
| *** e0ne has joined #heat | 18:56 | |
| sjmc7 | done, shardy | 19:02 |
| sjmc7 | let me know if you need anything else | 19:02 |
| *** gokrokve_ has joined #heat | 19:02 | |
| *** jprovazn_ has quit IRC | 19:02 | |
| shardy | sjmc7: Thanks, will do - I hit some problems testing the simple fix (s/'default'/None) so may have to dig a bit deeper | 19:02 |
| sjmc7 | ok, shardy. hopefully someone'll know why those assignments were added; it seems strange | 19:03 |
| *** tsmadds has quit IRC | 19:04 | |
| shardy | sjmc7: by the looks of it it's because some v3 API interfaces expect a domain or you get this: | 19:04 |
| shardy | http://paste.openstack.org/show/61843/ | 19:05 |
| sjmc7 | urgh | 19:05 |
| *** gokrokve has quit IRC | 19:05 | |
| shardy | I may need to speak to one of the keystone devs and/or spend some more time looking at the keystone API code to undestand what's happening | 19:05 |
| sjmc7 | ok, thanks. i can try and track down one of our keystone guys | 19:06 |
| shardy | I don't see how it can be reasonable to expect the clients to know what the default domain ID is, since it's a server-side setting | 19:06 |
| sjmc7 | right. and i don't know if there's a way to provide it in lots of cases | 19:06 |
| shardy | sjmc7: Ok, sounds good, I was going to spend a bit more time looking then probably speak to jamielennox about it, probably not till Monday now tho | 19:07 |
| sjmc7 | ok, great | 19:07 |
| shardy | For a moment there it looked like a nice simple fix ;) | 19:07 |
| sjmc7 | :) in my heart i knew it would be | 19:07 |
| sjmc7 | tricky | 19:07 |
| *** gokrokve has joined #heat | 19:08 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/python-heatclient: Add support for build info API https://review.openstack.org/66483 | 19:09 |
| *** arbylee has joined #heat | 19:10 | |
| *** arbylee has quit IRC | 19:11 | |
| *** arbylee has joined #heat | 19:12 | |
| *** gokrokve_ has quit IRC | 19:12 | |
| *** vijendar has joined #heat | 19:15 | |
| *** david-lyle has quit IRC | 19:15 | |
| *** dims has quit IRC | 19:21 | |
| *** morazi has joined #heat | 19:30 | |
| *** nati_ueno has quit IRC | 19:32 | |
| *** nati_ueno has joined #heat | 19:35 | |
| *** gokrokve has quit IRC | 19:39 | |
| *** tango has quit IRC | 19:40 | |
| *** akuznetsov has quit IRC | 19:47 | |
| *** cmyster has joined #heat | 19:49 | |
| *** harlowja is now known as harlowja_away | 19:53 | |
| *** tsmadds has joined #heat | 20:00 | |
| *** tsmadds has quit IRC | 20:05 | |
| *** rwsu has quit IRC | 20:14 | |
| *** rwsu has joined #heat | 20:20 | |
| *** nati_ueno has quit IRC | 20:28 | |
| *** rbrady has joined #heat | 20:31 | |
| rbrady | stevebaker: ping | 20:32 |
| rbrady | SpamapS: ping | 20:32 |
| *** radez is now known as radez_g0n3 | 20:44 | |
| *** tspatzier has joined #heat | 20:49 | |
| SpamapS | rbrady: pong, wassup? | 20:49 |
| *** _ruhe is now known as ruhe | 20:53 | |
| rbrady | SpamapS: I'm still wrestling heat with a heat template. Do you know of a usage example of: https://github.com/openstack/tripleo-heat-templates/blob/master/nova-compute-group.yaml to deploy muitlple compute nodes? | 20:54 |
| *** tsmadds has joined #heat | 20:56 | |
| rbrady | SpamapS: I'm less interested in the compute nodes and more interested in multi-* nodes. I've tried a couple of different approaches and I either get an error in heat validate-template or when i tried to simply copy resources and change the name I get a random key error from merge.py | 20:56 |
| *** yogesh has quit IRC | 20:56 | |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Native Nova Server compatibility for Cloud Server https://review.openstack.org/58043 | 20:56 |
| openstackgerrit | Vijendar Komalla proposed a change to openstack/heat: Delete rackspace database resource https://review.openstack.org/68144 | 20:59 |
| zaneb | rbrady: what is the validation error you're seeing? | 21:00 |
| *** tsmadds has quit IRC | 21:00 | |
| rbrady | zaneb: with one approach I'm seeing "ERROR: Every Resource object must contain a Type member." | 21:01 |
| rbrady | zaneb: with the other approach I'm seeing http://paste.openstack.org/show/61852/ | 21:02 |
| *** bvandenh has quit IRC | 21:04 | |
| zaneb | I don't grok tripleo, so only SpamapS can help you with the second ;) | 21:05 |
| zaneb | the first one is weird though, since the templates I'm looking at appear to be correct | 21:06 |
| zaneb | rbrady: one thing to note is that https://raw.github.com/openstack/tripleo-heat-templates/master/nova-compute-instance.yaml is not in the HOT format | 21:06 |
| zaneb | so if you have a tool that is merging in parts of a HOT template, that could be the problem | 21:07 |
| *** harlowja_away is now known as harlowja | 21:07 | |
| * rbrady is off to go look at file formats | 21:08 | |
| *** yogesh has joined #heat | 21:08 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add Docker resources to docs https://review.openstack.org/68753 | 21:08 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add Rackspace resources summary to docs https://review.openstack.org/68793 | 21:08 |
| zaneb | rbrady: heat_template_format_version -> HOT; HeatTemplateFormatVersion -> not HOT | 21:11 |
| rbrady | zaneb: thanks for clearing that up. I was just looking at the docs and couldn't see much of a difference other than the date and casing | 21:12 |
| SpamapS | rbrady: hm | 21:12 |
| SpamapS | zaneb: we're still CFN-ish | 21:12 |
| SpamapS | zaneb: we'll convert to HOT when software config is ready | 21:13 |
| zaneb | btw, last I checked you can't use HOT templates as provider templates either | 21:13 |
| zaneb | SpamapS: OK, maybe that is not the issue then | 21:13 |
| SpamapS | the merge tool we have is _pure evil_ | 21:13 |
| SpamapS | <-- author | 21:13 |
| randallburt | zaneb: I though shardy fixed that at one point, but I haven't tried it in an age tbh | 21:13 |
| *** topol has quit IRC | 21:14 | |
| zaneb | ok, that's possible too | 21:14 |
| zaneb | SpamapS: what are you merging, out of curiosity? | 21:14 |
| zaneb | we may grow some more libraries to help with that at some point | 21:14 |
| SpamapS | zaneb: we have pieces of template that we need to re-use at the sub-server level | 21:15 |
| andersonvom | shardy, zaneb: you guys around? | 21:15 |
| SpamapS | zaneb: they're 100% metadata though, so hot-software-config will solve the merge problem entirely for us | 21:15 |
| zaneb | SpamapS: OK, carry on then ;) | 21:16 |
| SpamapS | zaneb: some of the things we use it for could also be done via nested stacks... but my early luck was bad with those, so sometimes we just merge two templates into one without changing anything | 21:16 |
| zaneb | andersonvom: let's say that I am :) | 21:17 |
| andersonvom | zaneb: =P I wanted to chat and see if we reached any consensus re the unscoped list stacks | 21:18 |
| zaneb | it's pretty late in the UK, so I don't imagine we'll see shardy back before Monday | 21:18 |
| SpamapS | rbrady: can you share overcloud-with-many-cinder.yaml ? | 21:19 |
| rbrady | SpamapS: do you see anything obvious with this http://paste.openstack.org/show/61857/ creating this error in the merge: http://paste.openstack.org/show/61852/ | 21:19 |
| zaneb | I think there was consensus that we shouldn't allow any of this in the default policy.json | 21:19 |
| zaneb | randallburt: ^ correct? | 21:19 |
| rbrady | SpamapS: yeah | 21:19 |
| zaneb | andersonvom: but I don't think there's consensus about the rest of it yet | 21:19 |
| randallburt | zaneb: yup | 21:19 |
| rbrady | SpamapS: if I could get it to build. :) | 21:19 |
| SpamapS | rbrady: ok hm | 21:20 |
| randallburt | andersonvom: sounded to me like we were ok for policy for v1 and something "better" using trusts in v2? zaneb not sure what you mean by "the rest of it" | 21:20 |
| SpamapS | rbrady: kind of looks like you need to add a BlockStorageImage parameter to overcloud-source.yaml | 21:20 |
| SpamapS | but.. I have no idea why | 21:21 |
| zaneb | randallburt: I mean this particular implementation, with another global admin flag | 21:21 |
| randallburt | zaneb: gotcha, though I'm not sure how we'd get around it unless/until the keystone stuff gets sorted. | 21:21 |
| randallburt | and last I looked the patches seemed stalled. | 21:21 |
| zaneb | randallburt: I left another comment you may not have seen yet | 21:22 |
| randallburt | zaneb: k. lemme check | 21:22 |
| *** gondoi has quit IRC | 21:22 | |
| zaneb | but mainly waiting on feedback from shardy | 21:22 |
| rbrady | SpamapS: no joy | 21:22 |
| zaneb | he is the expert in this stuff and has been digging into it very deeply | 21:22 |
| randallburt | zaneb: oh, I see. You mean in the policy take the absence of a tenant as the "admin" flag? | 21:23 |
| zaneb | mmm, not quite | 21:23 |
| * shardy reads backscroll | 21:24 | |
| zaneb | I'm not sure how you figure out a request is for all tenants without having a different URL | 21:24 |
| *** gondoi has joined #heat | 21:24 | |
| zaneb | but my idea was just to put tenant=None in the context if it's for all tenants | 21:25 |
| zaneb | instead of really_admin or admin_me_harder or whatever it was | 21:25 |
| randallburt | zaneb: I see. and whoops. we've said his name too many times. | 21:25 |
| randallburt | and IIRC, there is a tenentless call for all stacks as part of that patch (or another one). andersonvom? | 21:26 |
| SpamapS | rbrady: can you toss what you're trying to do into a gerrit review (make it WIP or draft or something) so I can look at it? Hard to speculate at this point. | 21:26 |
| zaneb | randallburt: oh, it is a separate url? I don't recall seeing that in that patch... may be in a related one | 21:26 |
| rbrady | SpamapS: yes...thanks. I'll get it up in a few min | 21:26 |
| randallburt | zaneb: I was mis-remembering | 21:28 |
| zaneb | ok | 21:28 |
| * zaneb is not losing it | 21:28 | |
| randallburt | yeah, so this says, if you are the service admin and call /stacks, you get all of them, not just yours. | 21:28 |
| shardy | zaneb: The idea was to move to a v2 API where the stacks GET doesn't have any tenant in the path, then the results are either scoped to the token, or in the case of a service scoped token you return results for all tenants | 21:29 |
| randallburt | I'm getting all these management api patches confused | 21:29 |
| shardy | but I don't understand any use-case where it makes sense to allow one identity to do lifecycle operations on all stacks | 21:29 |
| randallburt | shardy: and the proposal was to use the policy to limit that as I recall, but not sure where we landed there. | 21:30 |
| zaneb | randallburt: and also if you are the service admin, you can read/manipulate everyone's stacks, not just yours? | 21:30 |
| shardy | it just seems too high risk to me, and there are existing keystone workflows which would allow it | 21:30 |
| randallburt | zaneb: without policy enforcement, yes | 21:30 |
| shardy | randallburt: Yeah I think we reached the point yesterday where we all went "hmm" and went away to think about it ;) | 21:30 |
| randallburt | k | 21:31 |
| shardy | randallburt: Does your use case actually require lifecycle operations vs just listing stuff though? | 21:31 |
| shardy | Thats the thing making me really concerned | 21:31 |
| randallburt | shardy: yes, but that's not really dependent on this per-se | 21:31 |
| randallburt | the big thing is accessing all the stacks regardless of tenant, but the "hole" in this patch is the requirement imposed by that timestamp code in parser. | 21:32 |
| shardy | randallburt: As you pointed out yesterday, there are existing, much much less riskly ways to do that, e.g trusts or temporary project assignments | 21:32 |
| *** achampion has quit IRC | 21:32 | |
| zaneb | So if we add a policy rule like: "stacks:global_index": "forgetaboutit"... then we just have to determine whether a particular request is for the global index or is tenant-scoped, and then apply the correct policy | 21:33 |
| shardy | randallburt: So, what I thought we agreed to was just a global list stacks, and I can understand the use-case, ie an efficient way to get the status of everything | 21:33 |
| *** sgordon has quit IRC | 21:33 | |
| randallburt | shardy: yes, but again, i can't list stacks without having carte-blanche to the stack itself (iirc, andersonvom should probably correct me if I've misunderstood) | 21:33 |
| zaneb | and leave it up to the operator to determine that policy | 21:33 |
| *** ruhe is now known as _ruhe | 21:33 | |
| shardy | randallburt: but the patch as proposed now goes way beyond that, and tbh the idea of merging it is giving me nightmares re CVE's ;) | 21:34 |
| zaneb | randallburt: you can but enforcement at the database level is not sufficient to achieve that | 21:34 |
| openstackgerrit | Pablo Andres Fuente proposed a change to openstack/heat: Enforce event purge process to remove older events https://review.openstack.org/69021 | 21:34 |
| randallburt | zaneb: not sure I understand. I thought the whole sticking point was https://github.com/openstack/heat/blob/master/heat/engine/parser.py#L60-L63 | 21:36 |
| randallburt | and for that to work, even for global-stack-list, the user would have to have access to all stacks regardless of tenant | 21:37 |
| zaneb | randallburt: right, but the problem is that if we allow _that_ at the database level, we allow everything because the database level is the only place where permissions are checked | 21:37 |
| randallburt | andersonvom: do I have the right of it? | 21:37 |
| zaneb | randallburt: so different APIs need to have different policies | 21:37 |
| zaneb | list = ok, create/delete/update/read = not ok | 21:37 |
| randallburt | zaneb: so prevent tenantless stack creates/deletes/updates at the db level? | 21:38 |
| andersonvom | randallburt: catching up here, one sec | 21:38 |
| zaneb | but you can't enforce that at the DB level; the DB doesn't know what API the user called | 21:38 |
| *** tspatzier has quit IRC | 21:38 | |
| randallburt | zaneb: doesn't matter though. preventing that at the db level doesn't effect the use case | 21:38 |
| randallburt | if the admin user can't manipulate the stacks without having to impersonate/trust/whatever, that's fine by me. | 21:39 |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 21:39 | |
| zaneb | randallburt: I'm not saying we need to check it at the DB level. I'm saying that our API policy controls are not sufficiently granular | 21:40 |
| randallburt | zaneb: currently or "cannot be made to be"? | 21:40 |
| zaneb | currently | 21:40 |
| andersonvom | shardy, zaneb, randallburt: yes, that is correct. you can't list the stacks without having access to that particular stack because of the timestamp | 21:40 |
| zaneb | because the 'really_admin' flag applies equally to every api call | 21:41 |
| randallburt | ok, so if the patch included a "locked down" policy file, then it would be acceptable (in the interim, of course)? | 21:41 |
| shardy | zaneb: So this is kinda where I was headed with request-scoping-policy, which was to make all DB calls scoped to a project, and improve our policy support so more granular rule definitions can be supported | 21:41 |
| zaneb | it would be better, but not nearly as good as a policy file where you can enable it for just this one API, and not for every API | 21:42 |
| shardy | but this management stuff has kinda derailed the former so I've stopped working on the latter | 21:42 |
| shardy | zaneb: Well I think you could do that with the existing policy mechanism, just not in a very elegant way | 21:43 |
| randallburt | zaneb: true but I don't think you can express it that way, can you? | 21:43 |
| randallburt | or what shardy said. | 21:43 |
| zaneb | <zaneb> So if we add a policy rule like: "stacks:global_index": "forgetaboutit"... then we just have to determine whether a particular request is for the global index or is tenant-scoped, and then apply the correct policy | 21:43 |
| zaneb | quoting myself ^ | 21:43 |
| randallburt | basically three rules that say stack-create, stack-update, and stack-delete and service-admin = nope | 21:43 |
| *** jdob has quit IRC | 21:43 | |
| zaneb | above may be crazy; I don't know | 21:44 |
| zaneb | what it requires is some way of knowing that you want the global list | 21:44 |
| randallburt | zaneb: not crazy, but I think would require a separate uri for stacks:global_index, but not sure. | 21:44 |
| zaneb | that doesn't involve a magical hard-coded thing | 21:44 |
| *** nkhare has joined #heat | 21:45 | |
| randallburt | which IIRC, was one of the original approaches. | 21:45 |
| *** aweiteka has quit IRC | 21:45 | |
| zaneb | yeah, hence my suggestion that this might by our v1 approach | 21:45 |
| zaneb | I believe we get to decide in the code which policy we want to enforce though | 21:46 |
| randallburt | so we're back to GET v1/stacks in the api? | 21:46 |
| zaneb | it's not determined automatically on the basis of the URL | 21:46 |
| randallburt | zaneb: yes, I think so. | 21:46 |
| shardy | randallburt: well the point is that for the v2 API, that will be the path for *all* GET stacks | 21:46 |
| zaneb | we just need the *user* to distinguish the requests somehow | 21:46 |
| zaneb | by URL or other means | 21:47 |
| *** tango has joined #heat | 21:47 | |
| randallburt | yup and yup | 21:47 |
| shardy | so we still need a non path related way to distinguish global vs scoped | 21:47 |
| zaneb | /v1/<tenant_id/stacks?global=yesplease would be fine also | 21:47 |
| randallburt | zaneb: k. andersonvom what do you think? | 21:48 |
| zaneb | magic header would work | 21:48 |
| shardy | zaneb: but how would query parameters be enforcable in the policy? | 21:48 |
| zaneb | null tenant id would work | 21:48 |
| shardy | maybe it would be, I'm not sure | 21:48 |
| zaneb | shardy: dunno, where is the policy enforced? | 21:48 |
| randallburt | shardy: they'd map to some param in some function which could then enforce the policy. | 21:49 |
| shardy | zaneb: There's an oslo policy enforcer module | 21:49 |
| shardy | https://github.com/openstack/heat/blob/master/heat/openstack/common/policy.py | 21:49 |
| shardy | we're not making full use of that atm | 21:49 |
| zaneb | badly worded question | 21:49 |
| zaneb | where do we tell the policy enforcer which policy to enforce? | 21:50 |
| andersonvom | zaneb: @policy.enforce decorator | 21:50 |
| zaneb | https://github.com/openstack/heat/blob/master/heat/api/openstack/v1/util.py#L32 | 21:50 |
| shardy | https://github.com/openstack/heat/blob/master/heat/common/policy.py | 21:50 |
| zaneb | so if we have a separate index_global handler for the query version, then it happens for free | 21:51 |
| zaneb | alternative might be ugly, but definitely do-able | 21:51 |
| shardy | yeah the decorator basically calls the policy.enforce with a scope and target, but currently we only use the scope argument | 21:51 |
| zaneb | so if ?global is set, enforce stack_index_global policy, otherwise enforce stack_index policy | 21:52 |
| zaneb | make that stacks:global_index and stacks:index | 21:53 |
| randallburt | GET v1/tenant/stacks/all ? might be easier to map to a decorated handler | 21:53 |
| zaneb | randallburt: namespace conflict | 21:54 |
| randallburt | oh, yeah. forgot its not terribly sophisticated when it comes to routing. | 21:54 |
| andersonvom | randallburt, shardy, zaneb: I may have missed something in the convo, but how does all this get around the fact that for us to list stacks we need access to get_stack as well? | 21:55 |
| randallburt | it doesn't :( | 21:55 |
| zaneb | it's not so much that the routing is unsophisticated, as that a user can create a stack called "all", and that is its URL | 21:55 |
| randallburt | stupid name-based lookups ;) | 21:56 |
| zaneb | andersonvom: so, if the request is global we set tenant to some special value (maybe None?) in the context | 21:56 |
| zaneb | andersonvom: and the db allow access to everything in that case | 21:56 |
| *** tsmadds has joined #heat | 21:57 | |
| zaneb | so we're forcing the user to decide at the point of calling the API, "is this global or tenant-scoped?" | 21:57 |
| randallburt | which doesn't really alieviate the underlying issues in the current patch without adding the policy/api parts in it or in another patch | 21:57 |
| zaneb | (which, btw is something that should be decided explicitly anyway) | 21:57 |
| shardy | zaneb: well that's basically where we headed with this patch, only the special value is defined in the policy | 21:57 |
| shardy | using None is not a good plan IMO | 21:57 |
| zaneb | shardy: probably right on the None. special value would be better | 21:58 |
| randallburt | so this patch is good then ;) | 21:58 |
| zaneb | I don't agree that what I'm talking about is the same as what's in the patch | 21:59 |
| openstackgerrit | A change was merged to openstack/heat: Make endpoint_type configurable https://review.openstack.org/57717 | 21:59 |
| openstackgerrit | A change was merged to openstack/heat: Fix error in RS Auto Scale properties schema https://review.openstack.org/67913 | 21:59 |
| zaneb | as I was saying, we're forcing the user to decide at the point of calling the API, "is this global or tenant-scoped?" | 21:59 |
| shardy | randallburt: No, because it's not limited to listing stacks | 21:59 |
| shardy | ;) | 21:59 |
| zaneb | and we're enforcing whether this is allowed at the point of the API call | 21:59 |
| *** andrew_plunk has joined #heat | 22:00 | |
| randallburt | so how do we get around that agian? because you guys are saying "policy and api enforcement" but you still need to get any stack regardless of tenant for it to work. | 22:00 |
| shardy | randallburt: well maybe we have to fix those timestamp attributes to make it work | 22:01 |
| *** tsmadds has quit IRC | 22:01 | |
| zaneb | randallburt: if context.tenant == GLOBAL_TENANT: return stack | 22:01 |
| andersonvom | shardy: if we change the timestamp, then the patch becomes list only again | 22:01 |
| randallburt | andersonvom: and that's ok. | 22:01 |
| randallburt | zaneb: that's essentially what it does now, though | 22:02 |
| andersonvom | shardy: plus, I would love to remove that code! seems very inefficient to me ;) | 22:02 |
| shardy | andersonvom: Yeah, it's just a question of how we do it, since the stack-list output includes the creation_time | 22:03 |
| randallburt | well, if you're up for doing that, andersonvom I'd agree wholeheartedly. I think its going to be pretty tricky, tbh. | 22:03 |
| andersonvom | zaneb: I agree with randallburt, that's pretty much the gist now. instead of context.tenant —> context.is_service_admin | 22:03 |
| zaneb | right, but it does it based on a global flag that's only tied to the user via some magic hard-coded values instead of being to both a user and a particular request by a policy | 22:03 |
| shardy | there *must* be a way to do this cleanly without giving write access to everything tho | 22:03 |
| andersonvom | zaneb: oh, I see what you're saying | 22:04 |
| andersonvom | I think | 22:04 |
| andersonvom | shardy: can't we just use whatever came from the database? without trying to fetch it again? | 22:04 |
| randallburt | shardy: why are we even doing that lookup there when those data elements get pulled on load anyway? | 22:05 |
| randallburt | maybe not as tricky as I thought. | 22:05 |
| shardy | andersonvom: probably, and randallburt I don't know ;) | 22:05 |
| pafuent | SpamapS: Are you arround? | 22:06 |
| zaneb | andersonvom: all that Timestamp stuff is crazy btw. you can basically just remove it and nothing will change | 22:06 |
| andersonvom | zaneb: that was my feeling precisely | 22:06 |
| zaneb | andersonvom: I say this as the author of it ;) | 22:06 |
| andersonvom | LOL | 22:06 |
| shardy | I'm going to have to go guys, getting late.. | 22:07 |
| randallburt | andersonvom: so lets give that a shot then. Remove or move that timestamp stuff to someplace sane and see if it breaks, then we can revisit this patch and see how it changes | 22:07 |
| zaneb | shardy: o/ | 22:07 |
| randallburt | night, shardy and thanks! | 22:07 |
| shardy | good discussion, speak again Monday, have a good weekend! | 22:07 |
| shardy | o/ | 22:07 |
| andersonvom | shardy: g'night! thanks for chatting | 22:07 |
| zaneb | randallburt: that's a good thing to do, but doesn't make this patch a good solution | 22:07 |
| randallburt | but it changes the need for it | 22:08 |
| zaneb | because it still requires operators to match up to hard-coded stuff in the api | 22:08 |
| *** shardy is now known as shardy_afk | 22:08 | |
| randallburt | that timestamp stuff is the sole reason for the "global access to everything" in stack-get | 22:08 |
| zaneb | and it still makes it implicit whether a request will return everything or tenant-local stuff | 22:08 |
| zaneb | based on a hard-coded tenant name | 22:08 |
| SpamapS | pafuent: sort of. :) Did you see my messages on the bug tracker? | 22:09 |
| randallburt | right, I'm saying there's probably little or no need for the more contriversial aspects of this patch if the timestamp goes away and then andersonvom's work becomes much easier to align with these suggestions | 22:09 |
| randallburt | so yeah, this patch will look very different after that change | 22:09 |
| andersonvom | randallburt, zaneb: how about this: I'll try to change the timestamp stuff and include a way that makes the request for all stacks explicit as an added bonus | 22:09 |
| randallburt | if not replaced by a different one. | 22:09 |
| zaneb | randallburt: understood, but this doesn't seem like the policy,json or the API we want to go forward with | 22:10 |
| andersonvom | zaneb: but this is a workaround just for v1, right? | 22:10 |
| randallburt | andersonvom: sounds good to me, and yes, once we start for serious on v2, most of this won't be needed. | 22:10 |
| pafuent | SpamapS: I just see your comment | 22:10 |
| zaneb | in v2, how will you indicate that you want the global list of stacks, not just the tenant-local one? | 22:11 |
| zaneb | it seems to me that needs to be explicit too | 22:11 |
| randallburt | it will happen based on your token and roles, IIRC. | 22:11 |
| randallburt | if you call /stacks in v2, you get a list of "all the things you can see" | 22:11 |
| pafuent | SpamapS: I saw the patch of Chmouel and seems to be struggling with the migration | 22:11 |
| randallburt | and can then filter that down if there's more than one tenant for the project you have rights to | 22:12 |
| andersonvom | randallburt: I guess what zaneb is talking about is that if you have access to your stacks PLUS all stacks, that you should be able to differentiate the two requests, IIRC | 22:12 |
| zaneb | randallburt: what does a global-scope token look like? | 22:12 |
| SpamapS | pafuent: right, so if you can get it done, that would solve the ordering problem properly. :) | 22:12 |
| pafuent | SpamapS: Why not solve the purge issue first and then solve the other one | 22:12 |
| zaneb | andersonvom: yes, exactly | 22:12 |
| randallburt | zaneb: dunno tbh, its what I understood from shardy | 22:12 |
| SpamapS | pafuent: because then you have to revert the purge patch? | 22:12 |
| randallburt | and in v2 the tenant stuff is reversed. | 22:13 |
| pafuent | SpamapS: Nope, because it cold be merge sooner | 22:13 |
| randallburt | its not /v2/tenant/stacks, its /v2/stacks and /v2/stacks/tenant | 22:13 |
| zaneb | it's still there, it's just a header instead of in the URL | 22:13 |
| pafuent | s/cold/could | 22:13 |
| *** blomquisg has quit IRC | 22:13 | |
| SpamapS | pafuent: so I think it is a waste of time to review a patch which is entirely unnecessary after another patch, which is nearly done and ready, lands. | 22:13 |
| randallburt | right, but your tenant id may have roles that allow you to see/manage other tenants things in the domain/project/whatever | 22:14 |
| randallburt | so its RBAC and not policy | 22:14 |
| * SpamapS wonders if there is a word that means "community with too much terminology" | 22:15 | |
| pafuent | SpamapS: That is true. I was asking this because the migration seems to be harder than my patch. I'll try to pick up the event-list bug. | 22:16 |
| randallburt | SpamapS: keystone? :) | 22:16 |
| SpamapS | pafuent: the migration should not be hard. I think the answer is to just go back to having the integer ID as the primary key. | 22:16 |
| SpamapS | randallburt: openstack? | 22:16 |
| randallburt | even better | 22:16 |
| pafuent | SpamapS_ | 22:17 |
| andersonvom | :P | 22:17 |
| pafuent | SpamapS: Ok. I will check the migration on Monday (or the weekend if I have time) | 22:18 |
| SpamapS | pafuent: let me know if I can help. :) | 22:19 |
| SpamapS | pafuent: I was thinking of looking at it next week too. | 22:20 |
| zaneb | randallburt: in that case yes, it sounds like everything is just temporary until v2. Not sure how we'll enforce RBAC at the DB level though? | 22:22 |
| randallburt | zaneb: another days discussion probably ;) | 22:22 |
| * zaneb suspects more than one day ;) | 22:23 | |
| randallburt | indeed | 22:23 |
| *** pafuent has left #heat | 22:34 | |
| *** nkhare has quit IRC | 22:34 | |
| openstackgerrit | Jenkins proposed a change to openstack/heat: Updated from global requirements https://review.openstack.org/68240 | 22:35 |
| *** cmyster has quit IRC | 22:39 | |
| openstackgerrit | Jenkins proposed a change to openstack/python-heatclient: Updated from global requirements https://review.openstack.org/69041 | 22:40 |
| *** giulivo has quit IRC | 22:41 | |
| *** IlyaE has joined #heat | 22:45 | |
| openstackgerrit | Steve McLellan proposed a change to openstack/heat: Disallow security_groups for Servers with neutron Ports assigned to them https://review.openstack.org/69052 | 22:45 |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Add personality files property to Server resource https://review.openstack.org/68685 | 22:47 |
| *** jasond` has quit IRC | 22:48 | |
| *** tsmadds has joined #heat | 22:57 | |
| *** tsmadds has quit IRC | 23:02 | |
| *** david-lyle has joined #heat | 23:02 | |
| *** pvaneck has quit IRC | 23:04 | |
| *** john-n-seattle2 has joined #heat | 23:04 | |
| *** jergerber has quit IRC | 23:07 | |
| *** vijendar has quit IRC | 23:08 | |
| *** vijendar has joined #heat | 23:09 | |
| *** che-arne has joined #heat | 23:09 | |
| *** topol has joined #heat | 23:11 | |
| *** topol has quit IRC | 23:12 | |
| *** topol has joined #heat | 23:13 | |
| *** arbylee has quit IRC | 23:17 | |
| *** alexpilotti has quit IRC | 23:18 | |
| *** yogesh has quit IRC | 23:19 | |
| *** morazi has quit IRC | 23:20 | |
| *** jamieh has quit IRC | 23:22 | |
| *** topol has quit IRC | 23:25 | |
| *** andersonvom has quit IRC | 23:29 | |
| *** vijendar has quit IRC | 23:30 | |
| *** vijendar has joined #heat | 23:30 | |
| *** vijendar has quit IRC | 23:31 | |
| *** faramir has joined #heat | 23:50 | |
| *** sjmc7 has quit IRC | 23:55 | |
| *** tsmadds has joined #heat | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!