Wednesday, 2015-01-07

*** david-lyle is now known as david-lyle_afk00:01
*** julienvey has joined #heat00:02
*** barra204 has joined #heat00:05
asalkeldany redhatters about?00:06
asalkeldhow do i stop maintaining a fedora package00:07
*** julienvey has quit IRC00:07
*** pm90_ has joined #heat00:10
*** serg_melikyan has joined #heat00:14
*** dsneddon has joined #heat00:15
*** dsneddon has quit IRC00:15
*** dsneddon has joined #heat00:15
*** serg_melikyan has quit IRC00:19
*** dgonzalez has joined #heat00:30
*** dgonzalez has quit IRC00:35
*** barra204 has quit IRC00:37
*** lvdongbing has joined #heat00:42
*** alexheneveld has quit IRC00:43
*** alexheneveld has joined #heat00:45
*** vijayagurug1 has joined #heat00:47
*** vijayagurug has quit IRC00:47
*** pm90_ has quit IRC01:06
*** hdd has quit IRC01:13
*** reed has quit IRC01:19
*** vijayagurug has joined #heat01:20
*** vijayagurug has quit IRC01:20
*** vijayagurug1 has quit IRC01:20
*** vijayagurug has joined #heat01:21
*** reed has joined #heat01:22
*** nosnos has joined #heat01:27
*** dgonzalez has joined #heat01:31
*** tiantian has joined #heat01:34
*** dgonzalez has quit IRC01:36
*** tiantian has quit IRC01:40
*** reed has quit IRC01:40
*** tiantian has joined #heat01:40
*** randallburt has quit IRC01:42
*** Putns has quit IRC01:50
*** julienvey has joined #heat01:51
*** vijayagurug has quit IRC01:54
*** vijayagurug has joined #heat01:55
*** julienvey has quit IRC01:56
*** tiantian has quit IRC01:57
*** tiantian has joined #heat01:57
*** Yanyanhu has joined #heat02:00
*** dsneddon has quit IRC02:01
*** dsneddon has joined #heat02:01
*** packet has joined #heat02:19
*** pm90_ has joined #heat02:21
*** dsneddon has quit IRC02:22
openstackgerritMerged openstack/heat: Stop patching oslo.messaging private bits  https://review.openstack.org/14509402:26
asalkeldyay02:27
*** alexheneveld has quit IRC02:27
*** pm90_ has quit IRC02:28
*** aweiteka has joined #heat02:30
*** dgonzalez has joined #heat02:32
*** dgonzalez has quit IRC02:36
*** Qiming has joined #heat02:37
Qiminggood morning!02:38
asalkeldhi Qiming02:38
Qiminghi, asalkeld02:38
Qimingasalkeld, just noticed that Heat API documentation needs some fixes02:39
asalkeldok02:39
Qiminghttp://developer.openstack.org/api-ref-orchestration-v1.html02:39
asalkeldQiming: is that generated?02:41
asalkeldbrb: getting some lunch02:43
*** Qiming has quit IRC02:43
*** Qiming has joined #heat02:44
Qimingstevebaker, online?02:45
*** Yanyan has joined #heat02:46
asalkeldQiming: he is at lca02:49
*** Yanyanhu has quit IRC02:49
asalkeldlinux conf. australia (in auckland)02:49
Qimingasalkeld, okay, just curious if he agrees to pas-ha on https://review.openstack.org/#/c/144989/02:51
QimingI tend to agree with pas-ha on that.  If a user is customizing the cloud_backend options, it means he/she wants something happen there.02:51
Qimingif Heat cannot load the specified cloud_backend, it should fail explicitly02:51
Qiminganyway, I'll revise that and let him know02:51
*** erkules has quit IRC02:53
*** Qiming_ has joined #heat03:03
*** Qiming has quit IRC03:06
openstackgerritQiming Teng proposed openstack/heat: Deal with misconfigured cloud_backend  https://review.openstack.org/14498903:10
*** signed8bit is now known as signed8bit_ZZZzz03:11
asalkeldQiming_: yes the operator needs to see that03:13
asalkeldi'd say we need a log (error) to make sure the operator gets the message03:14
Qiming_okay03:14
*** kebray has joined #heat03:18
*** nosnos has quit IRC03:20
*** erkules has joined #heat03:21
openstackgerrithuangtianhua proposed openstack/heat: Need to call _delete_resource() anyway for sd deletion  https://review.openstack.org/14459303:24
*** dgonzalez has joined #heat03:33
sdakeasalkeld you around?03:37
*** dgonzalez has quit IRC03:37
asalkeldhi sdake03:38
sdakere csync203:38
asalkeldo, yeah03:38
sdakeyour listed as a main contact03:38
sdakeall you hav e to do is assign the main contact to simonp03:38
asalkeldi know that sucks03:38
asalkeldok03:38
sdakefor fedora devel, fedora 21 etc03:38
* asalkeld heads off to try and do that03:39
sdakeyou should be able to do that after logging in03:39
sdakebut you do need to be logged in to do it03:39
asalkeldyip doing that03:39
sdakewho wrote csync2?03:39
*** julienvey has joined #heat03:40
*** chlong has quit IRC03:41
asalkeldsdake: forgot03:42
asalkeldsdake: "You are not allowed to update ACLs of someone else."03:42
asalkeld:(03:42
*** chlong has joined #heat03:42
*** chlong has quit IRC03:42
asalkeldwhat's the orphan package button do, sounds sad03:43
sdakecan you set your password to somethign so I can login and look03:43
sdakeorphan deletes it from fedora03:43
sdakedon't do that, someone may actually want that in there for whatever reason03:43
*** chlong has joined #heat03:44
asalkeldsdake: priv chat?03:44
*** julienvey has quit IRC03:45
*** chlong has quit IRC03:48
*** aweiteka has quit IRC03:48
*** chlong has joined #heat03:48
*** packet has quit IRC03:51
*** GonZoPT has quit IRC03:58
*** tiantian has quit IRC04:01
*** GonZo2K has joined #heat04:02
*** tiantian has joined #heat04:02
*** swygue has quit IRC04:09
*** swygue has joined #heat04:10
*** signed8bit_ZZZzz is now known as signed8bit04:11
*** ananta has joined #heat04:12
*** signed8bit has quit IRC04:12
*** nosnos has joined #heat04:15
*** lvdongbing has quit IRC04:15
*** Marga_ has quit IRC04:15
*** Marga_ has joined #heat04:16
*** rm_work|away is now known as rm_work04:18
*** Marga_ has quit IRC04:20
*** rm_work is now known as rm_work|away04:24
*** kebray has quit IRC04:27
*** kebray has joined #heat04:27
*** dgonzalez has joined #heat04:33
*** dgonzalez has quit IRC04:38
*** vijayagurug has left #heat04:39
*** kebray has quit IRC04:48
*** packet has joined #heat04:53
*** radez is now known as radez_g0n304:54
*** cmyster has joined #heat05:06
cmystermorning05:06
*** Marga_ has joined #heat05:07
*** Marga_ has quit IRC05:08
*** Marga_ has joined #heat05:08
*** tiantian has quit IRC05:19
*** packet has quit IRC05:23
*** hdd has joined #heat05:23
*** julienvey has joined #heat05:29
*** cmyster has quit IRC05:32
*** julienvey has quit IRC05:33
*** dgonzalez has joined #heat05:34
*** ygoto has joined #heat05:37
*** dgonzalez has quit IRC05:39
*** unmeshg has joined #heat05:48
*** tiantian has joined #heat05:48
*** dims__ has quit IRC05:50
*** dims__ has joined #heat05:50
*** tomek_adamczews1 has joined #heat05:54
*** dims__ has quit IRC05:54
*** tiantian has quit IRC05:54
*** tomek_adamczewsk has quit IRC05:56
*** liusheng has joined #heat06:00
*** saju_m has joined #heat06:01
*** nkhare has joined #heat06:02
*** tiantian has joined #heat06:03
jamielennoxhey - what does heat stack-create -o do? is it deprecated as it seems simply broken06:09
*** GonZo2K has quit IRC06:14
jamielennoxthe fetcher that is used: https://github.com/openstack/python-heatclient/blob/master/heatclient/common/template_utils.py#L46 expects a string to be returned06:15
jamielennoxhowever https://github.com/openstack/python-heatclient/blob/master/heatclient/v1/shell.py#L102 the raw_request function returns a request06:16
asalkeldhi jamielennox , looking06:17
asalkeld - o <swift object>06:18
openstackgerritAngus Salkeld proposed openstack/heat: ** WIP - do not approve ** Remove all tests that don't run :-O  https://review.openstack.org/14025006:18
openstackgerritAngus Salkeld proposed openstack/heat: Move template resource tests to functional  https://review.openstack.org/14462206:18
openstackgerritAngus Salkeld proposed openstack/heat: Add missing template resource member list test  https://review.openstack.org/14462306:18
openstackgerritAngus Salkeld proposed openstack/heat: WIP: Move aws nested stack tests to functional tests  https://review.openstack.org/14462106:18
openstackgerritAngus Salkeld proposed openstack/heat: Convert parser tests that need nested stacks to unit tests  https://review.openstack.org/14492906:18
openstackgerritAngus Salkeld proposed openstack/heat: Move resource group property update tests to functional  https://review.openstack.org/14492806:18
openstackgerritAngus Salkeld proposed openstack/heat: Move launch configuration into tests/autoscaling/  https://review.openstack.org/14226806:18
openstackgerritAngus Salkeld proposed openstack/heat: Move autoscaling vpc zone test into autoscaling/  https://review.openstack.org/14298106:18
openstackgerritAngus Salkeld proposed openstack/heat: Make the attribute tests not need a nested stack  https://review.openstack.org/14492406:18
openstackgerritAngus Salkeld proposed openstack/heat: Prevent occasional test failures due to duplicate stack names  https://review.openstack.org/14522606:18
openstackgerritAngus Salkeld proposed openstack/heat: Move the resource group adopt test to functional  https://review.openstack.org/14492506:18
openstackgerritAngus Salkeld proposed openstack/heat: Move ResourceGroup update sequence test to functional  https://review.openstack.org/14492606:18
openstackgerritAngus Salkeld proposed openstack/heat: Unit test name_list and black_list  https://review.openstack.org/14492706:18
openstackgerritAngus Salkeld proposed openstack/heat: Move tests for _lb_reload() into test_instance_group  https://review.openstack.org/14298206:18
jamielennoxasalkeld: there is a test, however it appears to mock with a string return rather than a response return06:18
openstackgerritAngus Salkeld proposed openstack/heat: Remove duplicate autoscaling adjustment tests  https://review.openstack.org/14226506:18
openstackgerritAngus Salkeld proposed openstack/heat: Separate the nested resources attribute tests  https://review.openstack.org/14462606:18
openstackgerritAngus Salkeld proposed openstack/heat: Move heat_autoscaling_group into tests/autoscaling/  https://review.openstack.org/14226606:18
openstackgerritAngus Salkeld proposed openstack/heat: Move heat_autoscaling_policy to tests/autoscaling/  https://review.openstack.org/14226706:18
openstackgerritAngus Salkeld proposed openstack/heat: Add some crud tests to nested stacks  https://review.openstack.org/14462406:18
openstackgerritAngus Salkeld proposed openstack/heat: Rework stack_resource *complete method unit tests  https://review.openstack.org/14492306:18
jamielennoxasalkeld: damn06:19
asalkeldok, i honestly have never used -o06:19
jamielennoxasalkeld: from the way it's written using raw_request it just looks like a standard http call06:20
jamielennoxthough for some reason it uses urllib directly rather than requests06:20
jamielennoxpretty sure that means there are some https cert validation issues as well06:21
asalkeldcan you have a public swift object?06:22
asalkeldmaybe, it assumes that?06:22
asalkeldjamielennox: it's using this: https://github.com/openstack/python-heatclient/blob/master/heatclient/common/http.py#L27806:23
asalkeldso it's putting all the auth stuff in: https://github.com/openstack/python-heatclient/blob/master/heatclient/common/http.py#L15306:24
jamielennoxasalkeld: right - but that's a requests.Response object: https://github.com/openstack/python-heatclient/blob/master/heatclient/common/http.py#L23206:24
jamielennoxthen it passes it to template_format.parse which expects a string06:25
asalkelddoes response have a __str__ that achieves that06:26
jamielennoxno, response.text is a string, response.content is bytes06:27
*** LiJiansheng has joined #heat06:27
jamielennoxchange to that area seems to come from: https://github.com/openstack/python-heatclient/commit/e86a40e3ba1510cb196e3a080757d78c5c80c70106:27
*** lvdongbing has joined #heat06:28
*** GonZo2K has joined #heat06:28
jamielennoxasalkeld: the same pattern seems to be used for stack-create stack-update template-validate stack-preview06:29
asalkeldmakes sense06:29
*** Marga_ has quit IRC06:31
*** Marga_ has joined #heat06:31
asalkeldbbl, taking a break06:33
jamielennoxasalkeld: ok - i'll file it as a bug and look into it, just thought it might have been something06:34
jamielennoxyou knew about or something06:34
*** dgonzalez has joined #heat06:35
*** dgonzalez has quit IRC06:39
*** liusheng has quit IRC06:46
*** ishant has joined #heat06:48
jamielennoxasalkeld: https://bugs.launchpad.net/python-heatclient/+bug/140819906:48
uvirtbotLaunchpad bug 1408199 in python-heatclient "Fetching template from swift fails with CLI" [Undecided,New]06:48
openstackgerritMerged openstack/heat: external link not working in heat doc  https://review.openstack.org/14517506:59
*** tspatzier__ has joined #heat07:13
*** GonZo2K has quit IRC07:14
*** julienvey has joined #heat07:17
*** julienvey has quit IRC07:22
asalkeldthanks jamielennox07:24
asalkeldjamielennox: are you working on a fix for that? if not i can fix it07:26
openstackgerritJamie Lennox proposed openstack/python-heatclient: Fix passing an object url to the heat CLI  https://review.openstack.org/14542207:28
jamielennoxasalkeld: ^ it's a pretty quick fix rather than trying to fix everything07:28
jamielennoxasalkeld: if you want to do something more comprehensive them go ahead and i'll let that one go07:28
*** GonZo2K has joined #heat07:29
asalkeldjamielennox: that seems perfect!07:31
asalkeldi rode my bike up past dutton park, urg that hill is steep07:33
*** hdd has quit IRC07:34
*** dgonzalez has joined #heat07:36
*** dgonzalez has quit IRC07:41
asalkeldgrrr. @%#%$ ERROR: Stack Adopt is not supported.07:42
*** tiantian has quit IRC07:43
openstackgerrithuangtianhua proposed openstack/heat-templates: Correct unresolved reference 'true' and 'false'  https://review.openstack.org/14542407:43
*** tiantian has joined #heat07:43
*** ifarkas has joined #heat07:45
*** GonZo2K has quit IRC07:48
*** GonZo2K has joined #heat07:48
*** GonZo2K has quit IRC07:49
*** tiantian has quit IRC07:49
*** tiantian has joined #heat07:51
*** tomek_adamczewsk has joined #heat07:51
*** tomek_adamczews1 has quit IRC07:52
ekarlso-hey gang07:53
ekarlso-so when doing a stack-delete towarsd a heat that is behind a stunnel thing and heat redirects to http ?07:54
ekarlso-how can I fix that since stunnel doesn't add the x-forwarded stuff07:54
asalkeldekarlso-: honestly don't know, short term - provide the full heat identifier?07:57
ekarlso-asalkeld: :'(07:58
ekarlso-boo07:58
asalkeldekarlso-: i don't know how stunnel works07:58
ekarlso-hehe07:58
*** dgonzalez has joined #heat08:00
*** jamielennox is now known as jamielennox|away08:06
*** chlong has quit IRC08:07
*** jprovazn has joined #heat08:09
*** inc0 has joined #heat08:15
*** julienvey has joined #heat08:23
*** julienvey has joined #heat08:23
*** dulek has joined #heat08:24
*** dgonzalez has quit IRC08:25
*** julienvey has quit IRC08:25
*** GonZo2K has joined #heat08:27
*** jtomasek has joined #heat08:27
*** tspatzier__ has quit IRC08:30
*** dkusidlo has joined #heat08:30
*** tspatzier has joined #heat08:32
*** LiJiansheng has quit IRC08:37
*** LiJiansheng has joined #heat08:38
*** Putns has joined #heat08:41
*** dkusidlo has quit IRC08:44
openstackgerrithuangtianhua proposed openstack/heat: Implement 'InstanceId' for LaunchConfiguration  https://review.openstack.org/13340108:47
openstackgerrithuangtianhua proposed openstack/heat: Implement 'InstanceId' for autoscaling group  https://review.openstack.org/13390508:47
openstackgerrithuangtianhua proposed openstack/heat: Apply neutron network constraint  https://review.openstack.org/13582308:49
openstackgerrithuangtianhua proposed openstack/heat: Apply neutron port constraint  https://review.openstack.org/13583508:49
openstackgerrithuangtianhua proposed openstack/heat: Apply neutron subnet constraint  https://review.openstack.org/13587508:49
openstackgerrithuangtianhua proposed openstack/heat: Apply neutron router constraint  https://review.openstack.org/13588008:50
*** alexheneveld has joined #heat08:51
*** serg_melikyan has joined #heat08:59
*** nosnos has quit IRC09:00
*** GonZo2K has quit IRC09:01
*** nosnos has joined #heat09:01
openstackgerritMerged openstack/heat: Need to call _delete_resource() anyway for sd deletion  https://review.openstack.org/14459309:03
*** jcoufal has joined #heat09:07
*** serg_melikyan has quit IRC09:08
*** nosnos has quit IRC09:08
*** nosnos has joined #heat09:10
*** rakesh_hs has joined #heat09:12
*** jistr has joined #heat09:14
openstackgerritMerged openstack/heat: Add a strict_validate flag to Stacks  https://review.openstack.org/14480409:21
*** jamielennox|away is now known as jamielennox09:33
*** ananta has quit IRC09:34
*** julienvey has joined #heat09:36
*** stannie has joined #heat09:39
*** julienve_ has joined #heat09:40
*** julienvey has quit IRC09:40
*** ygoto has quit IRC09:45
*** boris-42 has quit IRC09:53
*** lvdongbing has quit IRC09:56
*** derekh has joined #heat10:05
*** Qiming_ has quit IRC10:08
*** jamielennox is now known as jamielennox|away10:09
*** che-arne has joined #heat10:10
*** Yanyan has quit IRC10:28
*** alexheneveld has quit IRC10:30
*** nkhare has quit IRC10:37
*** nkhare has joined #heat10:37
*** chlong has joined #heat10:39
*** yassine has joined #heat10:48
asalkeldwe have a meeting in a hour, right?11:02
shardyasalkeld: Sounds right, I wasn't quite sure if it was 1200 or 2000 today11:03
asalkeldphew, me neither11:04
asalkeldmy calander says so, why not11:04
asalkeldany agenda items?11:04
shardylast one was 2014-12-18 2000 UTC then we missed two weeks, so 1200 sounds right to me11:05
inc0that agrees with my calendar as well, so I guess its right if its 3 separate sources11:06
*** boris-42 has joined #heat11:06
inc0asalkeld, maybe move topic of mid-cycle?11:07
asalkeldyeah - i am bringing that one forwardy11:07
asalkeldno one had any ideas last time11:07
shardyasalkeld: is it worth trying to figure out priorities for k2?11:07
*** jamielennox|away is now known as jamielennox11:08
asalkeldyip11:08
*** chlong has quit IRC11:08
asalkeldi want to know whats up with convergence11:08
*** rakesh_hs2 has joined #heat11:08
asalkeldcan't we do *something* to help out there11:08
shardyYeah, we need to start carving it up into implementable chunks or we'll run out of time11:09
shardyI think zaneb had some plans around that, hopefully he'll be awake in time for the meeting ;)11:09
asalkeldok11:09
asalkeldshardy: if you can approve as much of those tests (the ones that pass) that would help11:10
shardyasalkeld: Absolutely, I did a few reviews yesterday, but will do more today11:10
asalkeldi need to rebase, but don't want to mess up the first bunch11:10
asalkeldalso i need to enable adopt in the gate11:11
*** julienve_ has quit IRC11:12
shardyasalkeld: FYI, I'm fixing up https://review.openstack.org/#/c/144766/, and it turns out we hit parameter constraints as well as property schema ones, so I'm not sure we can do the switch to non-strict validation conditionally, unfortunately11:13
shardyref bug #140544611:13
uvirtbotLaunchpad bug 1405446 in tripleo "overcloud-without-mergepy.yaml Parameter 'MysqlClusterUniquePart' is invalid" [High,In progress] https://launchpad.net/bugs/140544611:13
shardyI'm adding more tests which will hopefully show the two (parameter/property) failure paths11:13
asalkeldok11:14
*** saju_m has quit IRC11:15
jamielennoxshardy: can you look at https://review.openstack.org/#/c/145422/ and https://review.openstack.org/#/c/145148/11:18
jamielennoxi have a few more things coming and it will prevent me having to rebase it all11:18
shardyjamielennox: sure, will do!11:18
*** serg_melikyan has joined #heat11:18
jamielennoxshardy: also in the next few days i'm going to have to bug you about how heat manages all the clients and how to make use of plugins11:19
shardyjamielennox: Sure, stevebaker implemented that but I can definitely help11:19
jamielennoxi'm working on the code now but i'll get a POC up so i'll at least know what i'm trying to accomplish11:19
*** saju_m has joined #heat11:19
shardyjamielennox: that reminds me, I need to refactor heat_keystoneclient into the plugin, unless that's what you're doing?11:20
jamielennoxshardy: that's kind of what i'm aiming for11:20
ekarlso-has anyone been able to get heat to work behind a stunnel ?11:21
shardyYeah, all that heat specific logic should be hidden in the plugin which wraps the client11:21
jamielennoxthere is just a few code paths that i really can't tell if they're just really old or if they are odd edge cases11:21
ekarlso-stunnel doesn't add the x-forwarded bits and the ssl middleware borks resulting in redirects going to http vs https11:21
shardyjamielennox: the reason it doesn't is just that the plugin stuff didn't exist when I wrote the heat_keystoneclient wrapper11:21
jamielennoxshardy: i'm a little confused at all the different types of auth11:21
jamielennoxshardy: sure - it's only relatively recently where it's really becoming useful across clients11:22
shardyjamielennox: I can probably help with the confusion, it's mostly because we need to create clients from both credentials provided via the request, and later via a trust ID retrieved from the DB11:22
jamielennoxi know you have a blog post explaining all the auth types, just need to find it and go through it11:22
shardyhttp://hardysteven.blogspot.co.uk/2014/04/heat-auth-model-updates-part-2-stack.html11:23
shardyThat describes the domain model11:23
shardyhttp://hardysteven.blogspot.co.uk/2014/04/heat-auth-model-updates-part-1-trusts.html11:23
shardyand that's our usage of trusts11:23
jamielennoxshardy: right - but it appears that if trusts are in use then it will always auth and use the auth_token user11:23
shardythe one outdated thing in that is we now delegate all roles, not heat_stack_owner via the trust (configurable)11:23
jamielennoxalso - using the auth_token user is bad, but i can fix that one at the same time11:24
shardyjamielennox: well the idea is we needed a trustee to delegate to, and the service user is the only other actor than the user making the request11:24
shardyperhaps we could optionally enable an independent user in heat.conf11:24
shardysimilar to the domain admin user11:25
jamielennoxso when loading auth plugins from the CONF file you can specify an auth section11:25
jamielennoxso we can do [keystone_authtoken] auth_section = password_auth11:25
jamielennox[heat_user] auth_section = password_auth11:25
jamielennoxand then share the credentials that way but not rely on auth_token options11:26
*** serg_melikyan has quit IRC11:26
shardyjamielennox: Ok, very open to ideas on how we can do that better11:27
jamielennoxshardy: so the thing i'm seeing though is that even on the first request to the api service it goes straight into trust mode - shouldn't it just be able to use the existing user token at that point11:27
jamielennoxthough that just might be me just not understanding the different services boundaries yet11:28
shardyjamielennox: hrm, yeah that doesn't sound right11:29
shardywe should use the token from the request context for all operations during e.g the create, then the stored context (e.g the trust) should only be used for deferred operations, e.g AutoScaling11:30
*** dims__ has joined #heat11:30
shardyit's possible we get a trust scoped token during the create if that's what you're seeing on the keystone side, but AFAIK we should just create the trust but not use it11:30
jamielennoxshardy: ok - cool, so i assume that is something i misunderstood11:31
jamielennoxthat's what i thought would be happening11:31
shardyfeel free to raise a bug if you think that's not working right & we can dig into details11:31
shardyjamielennox: One situation where we might want to switch to the trust during create is bug #130629411:32
uvirtbotLaunchpad bug 1306294 in tripleo "Heat fails to re-authenticate when faced with authentication failure during stack operations" [High,In progress] https://launchpad.net/bugs/130629411:32
shardyI've not fixed that yet, but the problem is folks like TripleO creating gigantic stacks then having a token expire part-way through11:32
shardyone possible option is to switch to the trust before token expiry happens11:32
jamielennoxshardy: hmm, yea that seems like a trusts thing11:33
jamielennoxthough i'm not sure what you use as the line for when you use trusts vs when you use user cred in those cases11:34
shardyjamielennox: Yeah, that was one of the things which stalled me fixing it11:34
shardywe either need a flag which says "use trust", or logic which checks for will_expire_soon and switches to the trust11:35
shardyI started looking at the latter approach in conjuction with movingto Sessions, but the expiry check part didn't work as I expected11:35
shardyneed to circle back onto that at some point11:35
jamielennoxyea, reauth requires you to have the user/pass and we typically wont11:36
jamielennoxthere is definetly something missing in keystone auth here somewhere11:37
shardyjamielennox: Yeah, and also I couldn't find a way to force reauthentication when using a trust-scoped client11:37
shardyref https://review.openstack.org/#/c/96298/11:38
shardyeven with sessions, I couldn't get that working right11:38
jamielennoxshardy: it should be easier with sessions,  i'm trying not to touch that old stuff at all11:38
shardySo even with the "use trust" flag approach, we'd still expire when the initial trust scoped token expires, rather than automatically reauthenticating with the session, using the service user user/pass and trust_id to get a new token11:39
jamielennoxhowever reauth with the trust should work just fine using sessions11:39
shardyjamielennox: the problem was, IIRC, that because the auth object already had a token, it didn't use the username/password and trust to get a new token11:39
shardyso you couldn't defeat the expiry11:39
shardyjamielennox: Ok, perhaps I need to have another try, it was a while back and I forget all the details11:40
*** andreaf has joined #heat11:40
jamielennoxthe re-auth time is stupidly short, like it accepts a token with 1 sec left of validity11:40
shardyOh yeah, and IIRC that was hard-coded somewhere in keystoneclient11:40
jamielennoxhowever assuming you have the user/pass of the trustor then it should reauth automatically11:41
openstackgerritMerged openstack/heat: Clarify "attributes" support status for ResourceGroup  https://review.openstack.org/14315611:41
shardyjamielennox: Ok, cool, if you have any examples or tests which demonstrate that working, it'd be most helpful11:41
*** nkhare has quit IRC11:41
shardyentirely possible I was doing something wrong ;)11:42
jamielennoxit should be the standard usage, you can disable reauthenticate via flag but it's on by default11:43
jamielennoxif you create a plugin with a user, pass and trust_id it should reauth correctly  -11:43
jamielennoxi've never actually tried with a trust_id in the mix but i see no reason for it to be different11:43
jamielennoxshardy: anyway i'll see what i can do about rewriting the heat_keystoneclient to be plugin based11:45
jamielennoxjust with current functionality11:45
*** jcoufal_ has joined #heat11:45
shardyjamielennox: Ok, sounds great, thanks! :)11:45
jamielennoxi've got it kind of working, but it involves a mess of test adjustments11:45
shardypls add me to any reviews you post and I'll take a look11:45
shardyyeah, our tests are a nightmare :(11:46
jamielennoxi'll probably need some help but i'll wait till i've got something concrete11:46
shardysure, just shout if you need some help11:46
jamielennoxyea, i've got a few client side ones already just to try and sanitize it11:46
jamielennoxdo you know if anyone downstream of heatclient is using it with a session yet11:46
jamielennoxthe session usage implementations is a little... unusual11:47
shardyI'm really not sure tbh11:47
shardyall that was added via the port to enable v3 auth11:47
*** dgonzalez has joined #heat11:47
*** dgonzalez has quit IRC11:47
jamielennoxyea, assumed11:47
*** cdent has joined #heat11:47
*** dgonzalez has joined #heat11:48
jamielennoxthere was a big push to make the CLIs work, and the library aspect suffered in most of those cases11:48
shardyI think a lot of us are unfamiliar with sessions, so feel free to raise bugs or send patches if there's bad stuff in there we need to fix11:48
*** jcoufal has quit IRC11:49
shardyI know there were a bunch of TODO's in there about moving stuff to keystoneclient11:49
jamielennoxyep, but for some reason it subclasses the old implementation so there is a lot of weird edge cases you could hit upon11:49
shardyeek11:50
shardywell, help appreciated sorting it out :)11:50
*** ananta has joined #heat11:50
*** ananta has left #heat11:50
*** ananta has joined #heat11:51
jamielennoxnp, if you can have a look at (/approve) those 2 client reviews i linked earlier then i don't have to rebase a few other patches tomorrow and make some progress there11:52
*** alexheneveld has joined #heat11:52
*** rpothier has joined #heat11:56
*** alexpilotti has joined #heat11:57
*** david-lyle_afk is now known as david-lyle11:58
*** tochi has quit IRC11:59
asalkeldshardy: meeting12:00
shardyasalkeld: sorry, running late, here now..12:07
*** julienvey has joined #heat12:13
*** rakesh_hs has quit IRC12:16
*** rakesh_hs2 has quit IRC12:17
*** julienvey has quit IRC12:17
*** jamielennox is now known as jamielennox|away12:19
*** dkusidlo has joined #heat12:23
*** Qiming has joined #heat12:29
*** julienvey has joined #heat12:36
*** lazy_prince is now known as killer_prince12:38
*** nosnos has quit IRC12:43
*** Flcn has joined #heat12:46
*** steveg is now known as sgordon12:46
*** sgordon is now known as steveg12:50
*** LiJiansheng has quit IRC12:55
*** serg_melikyan has joined #heat12:57
asalkeldzaneb: warm up your skype12:58
zanebasalkeld: ok, give me 5 minutes to put my porridge on ;)12:58
asalkeld:-)12:59
*** tspatzier__ has joined #heat13:00
*** serg_melikyan has quit IRC13:01
unmeshg@therve: please revisit https://review.openstack.org/143425 when you find time, thanks13:03
*** tspatzier has quit IRC13:04
*** unmeshg has quit IRC13:05
*** ananta has quit IRC13:05
*** david-lyle is now known as david-lyle_afk13:08
*** ishant|2 has joined #heat13:09
*** ishant|2 has quit IRC13:09
*** alexheneveld has quit IRC13:10
*** saju_m has quit IRC13:11
*** ishant has quit IRC13:11
*** alexheneveld has joined #heat13:15
*** EricGonczer_ has joined #heat13:21
*** rpothier has quit IRC13:26
*** radez_g0n3 is now known as radez13:26
*** blomquisg has joined #heat13:30
*** jcoufal_ has quit IRC13:31
*** jcoufal has joined #heat13:31
*** EricGonczer_ has quit IRC13:31
*** dkusidlo has quit IRC13:32
*** jdob has joined #heat13:32
zanebasalkeld: http://www.joinfu.com/2015/01/understanding-reservations-concurrency-locking-in-nova/13:36
asalkeldyeah, thx reading13:36
*** dkusidlo has joined #heat13:41
*** aweiteka has joined #heat13:44
*** bdossant has joined #heat13:47
*** kbyrne has quit IRC13:50
asalkeldnight all13:57
*** asalkeld has quit IRC13:57
*** dulek_ has joined #heat14:01
*** dulek_ has quit IRC14:04
*** dulek has quit IRC14:04
*** dulek has joined #heat14:06
*** inc0 has quit IRC14:07
*** killer_prince is now known as lazy_prince14:10
*** dkusidlo has quit IRC14:11
*** tomek_adamczewsk has quit IRC14:13
*** tomek_adamczewsk has joined #heat14:13
*** dulek has quit IRC14:16
*** dulek_ has joined #heat14:16
*** inc0 has joined #heat14:21
*** inc0 has quit IRC14:26
openstackgerritSergey Lukjanov proposed openstack/heat: Add support ssl for sahara client  https://review.openstack.org/14551614:27
*** rpothier has joined #heat14:27
*** dulek has joined #heat14:27
*** dulek_ has quit IRC14:28
*** tomek_adamczewsk has quit IRC14:28
*** tomek_adamczewsk has joined #heat14:28
openstackgerritSergey Lukjanov proposed openstack/heat: Add ssl support for sahara client  https://review.openstack.org/14551614:29
*** inc0 has joined #heat14:32
*** tiantian has quit IRC14:32
*** tiantian has joined #heat14:33
*** inc0 has quit IRC14:35
*** inc0_ has joined #heat14:35
*** inc0_ has quit IRC14:40
*** EricGonczer_ has joined #heat14:50
*** dulek has quit IRC14:51
*** signed8bit has joined #heat14:52
*** kbyrne has joined #heat14:52
*** dulek has joined #heat14:52
*** tomek_adamczewsk has quit IRC14:54
*** tomek_adamczewsk has joined #heat14:54
*** jistr has quit IRC14:57
*** dulek has quit IRC14:57
*** dulek has joined #heat14:58
*** jmckind has joined #heat14:58
*** dkusidlo has joined #heat14:58
*** dulek has quit IRC14:59
*** serg_melikyan has joined #heat14:59
*** jmckind has joined #heat14:59
*** jmckind has quit IRC14:59
*** jistr has joined #heat14:59
*** dulek has joined #heat14:59
*** jmckind has joined #heat15:00
*** dgonzale_ has joined #heat15:00
*** nkhare has joined #heat15:02
*** dgonzalez has quit IRC15:04
*** Marga_ has quit IRC15:10
*** Qiming has quit IRC15:12
*** tomek_adamczewsk has quit IRC15:13
*** tomek_adamczewsk has joined #heat15:13
*** lazy_prince is now known as killer_prince15:14
*** dulek has quit IRC15:16
*** serg_melikyan has quit IRC15:16
*** jprovazn has quit IRC15:22
*** pm90_ has joined #heat15:27
*** tomek_adamczewsk has quit IRC15:29
*** zz_gondoi is now known as gondoi15:29
*** rpothier has quit IRC15:34
*** dkusidlo has quit IRC15:35
*** rpothier has joined #heat15:35
*** dkusidlo has joined #heat15:37
*** Marga_ has joined #heat15:49
*** EricGonc_ has joined #heat15:50
*** kebray has joined #heat15:50
openstackgerritMerged openstack/heat: Update oslo-hacking and disable failing checks  https://review.openstack.org/14474915:50
*** andrearosa has quit IRC15:52
*** dkusidlo has quit IRC15:52
*** EricGonczer_ has quit IRC15:53
*** jtomasek has quit IRC15:58
*** metral is now known as metral_zzz15:59
*** pm90_ has quit IRC16:06
*** jprovazn has joined #heat16:08
*** Drago has joined #heat16:09
*** nkhare has quit IRC16:10
*** vijayagurug has joined #heat16:11
*** vijayagurug has left #heat16:11
*** Drago has quit IRC16:17
*** jistr has quit IRC16:18
*** jrist has quit IRC16:18
*** randallburt has joined #heat16:20
*** randallburt has quit IRC16:21
*** randallburt has joined #heat16:21
*** dsneddon has joined #heat16:23
*** jrist has joined #heat16:24
*** reed has joined #heat16:25
*** jrist has quit IRC16:27
*** jrist has joined #heat16:27
*** dkusidlo has joined #heat16:30
*** dkusidlo_ has joined #heat16:32
*** jistr has joined #heat16:34
*** dkusidlo has quit IRC16:34
*** dkusidlo_ is now known as dkusidlo16:34
*** bdossant has quit IRC16:43
*** andrearosa has joined #heat16:47
*** Flcn has quit IRC16:48
*** jtomasek has joined #heat16:50
*** coolsvap is now known as coolsvap|afk16:51
*** coolsvap|afk is now known as coolsvap16:51
*** pm90_ has joined #heat16:52
*** coolsvap is now known as coolsvap|afk16:52
*** andrearosa has quit IRC16:52
*** andrearosa has joined #heat16:53
*** dsneddon has quit IRC16:57
*** dsneddon has joined #heat16:58
*** Marga_ has quit IRC16:59
*** tspatzier__ has quit IRC17:00
*** Marga_ has joined #heat17:00
*** rm_work|away is now known as rm_work17:00
*** dkusidlo has quit IRC17:04
*** jcoufal has quit IRC17:05
*** stannie has quit IRC17:08
*** sabeen2 has joined #heat17:09
*** saju_m has joined #heat17:09
*** rm_work is now known as rm_work|away17:09
*** sabeen has quit IRC17:10
*** sbadia has quit IRC17:12
*** sbadia has joined #heat17:15
*** Marga_ has quit IRC17:17
*** Marga_ has joined #heat17:17
*** pm90_ has quit IRC17:18
*** pm90_ has joined #heat17:18
*** dkusidlo has joined #heat17:21
*** Marga_ has quit IRC17:21
*** Marga_ has joined #heat17:22
*** saju_m has quit IRC17:22
*** Marga_ has quit IRC17:23
*** Marga_ has joined #heat17:24
*** Marga_ has quit IRC17:24
*** Marga_ has joined #heat17:25
*** dkusidlo has quit IRC17:26
*** jistr has quit IRC17:26
*** metral_zzz is now known as metral17:29
*** Marga_ has quit IRC17:35
*** Marga_ has joined #heat17:35
*** ifarkas has quit IRC17:37
*** dsneddon has quit IRC17:38
*** Marga_ has quit IRC17:39
*** dsneddon has joined #heat17:40
*** Marga_ has joined #heat17:40
*** Marga_ has quit IRC17:41
*** Marga_ has joined #heat17:41
*** dims__ has quit IRC17:43
*** dims__ has joined #heat17:44
*** dims__ has quit IRC17:45
*** EmilienM is now known as EmilienM|afk17:45
*** dims__ has joined #heat17:46
*** dsneddon has quit IRC17:47
*** david-lyle_afk is now known as david-lyle17:47
*** pm90_ has quit IRC17:48
*** dsneddon has joined #heat17:54
*** julienvey has quit IRC17:57
*** pm90_ has joined #heat17:57
*** sarob has joined #heat17:59
*** derekh has quit IRC18:02
*** alexheneveld has quit IRC18:03
*** serg_melikyan has joined #heat18:04
openstackgerritMerged openstack/python-heatclient: Fix passing an object url to the heat CLI  https://review.openstack.org/14542218:06
*** thedodd has joined #heat18:08
*** serg_melikyan has quit IRC18:09
*** alexheneveld has joined #heat18:14
*** Flcn has joined #heat18:15
*** gondoi is now known as zz_gondoi18:16
*** thedodd has quit IRC18:20
*** saju_m has joined #heat18:22
*** serg_melikyan has joined #heat18:23
*** thedodd has joined #heat18:23
*** thedodd has quit IRC18:24
*** thedodd has joined #heat18:25
*** serg_melikyan has quit IRC18:26
*** saju_m has quit IRC18:35
openstackgerritMerged openstack/python-heatclient: Cleanup shell tests  https://review.openstack.org/14514818:35
*** aweiteka has quit IRC18:36
*** aweiteka has joined #heat18:48
*** Marga_ has quit IRC18:49
*** Marga_ has joined #heat18:50
*** Marga__ has joined #heat18:53
*** Marga_ has quit IRC18:53
*** jprovazn has quit IRC19:00
*** serg_melikyan has joined #heat19:03
*** serg_melikyan has quit IRC19:11
*** serg_melikyan has joined #heat19:16
*** hdd has joined #heat19:17
*** serg_melikyan has quit IRC19:20
*** alexheneveld has quit IRC19:25
*** GonZo2K has joined #heat19:32
*** thedodd has quit IRC19:43
*** hdd has quit IRC19:51
*** GonZo2K has quit IRC19:53
*** GonZo2K has joined #heat19:54
*** thedodd has joined #heat20:00
*** rm_work|away is now known as rm_work20:01
*** sabeen2 has quit IRC20:03
*** sabeen has joined #heat20:03
*** spzala has joined #heat20:03
*** sorantis has joined #heat20:05
*** sorantis has left #heat20:05
*** tiantian has quit IRC20:07
*** vijendar has joined #heat20:08
*** tiantian has joined #heat20:09
*** pm90_ has quit IRC20:11
*** tiantian has quit IRC20:23
*** cdent has quit IRC20:25
*** dgonzalez has joined #heat20:25
*** EmilienM|afk is now known as EmilienM20:25
*** dgonzale_ has quit IRC20:28
*** dgonzalez has quit IRC20:29
*** tnurlygayanov_ has joined #heat20:31
*** tnurlygayanov has quit IRC20:31
*** Flcn has quit IRC20:32
*** rm_work is now known as rm_work|away20:34
*** rm_work|away is now known as rm_work20:42
*** alexheneveld has joined #heat21:00
*** pm90_ has joined #heat21:05
*** pm90_ has quit IRC21:05
*** openstackgerrit has quit IRC21:05
*** openstackgerrit has joined #heat21:06
openstackgerritRandall Burt proposed openstack/heat: Make StackResource less strict on initial validation  https://review.openstack.org/14476621:12
openstackgerritRandall Burt proposed openstack/heat: Account for nested stack validation in ResourceGroup  https://review.openstack.org/14558921:12
*** olc is now known as olc_jesuischarli21:13
*** Drago has joined #heat21:17
*** Drago has quit IRC21:35
*** randallburt has quit IRC21:44
openstackgerritJamie Lennox proposed openstack/python-heatclient: Replace httpretty with requests-mock  https://review.openstack.org/14514921:44
*** aweiteka has quit IRC21:47
*** hdd has joined #heat21:52
openstackgerritSteven Hardy proposed openstack/heat: Make StackResource less strict on initial validation  https://review.openstack.org/14476621:52
openstackgerritSteven Hardy proposed openstack/heat: No parameter value validation when strict_validate disabled  https://review.openstack.org/14560221:52
*** sorantis has joined #heat21:56
*** chlong has joined #heat21:57
*** chlong has quit IRC22:03
*** jdob has quit IRC22:03
*** randallburt has joined #heat22:07
*** randallburt has quit IRC22:09
*** randallburt has joined #heat22:09
randallburtshardy:  sorry about the shadow rebase, I needed to fix ResourceGroup and wanted to get a patch up before I ran some errands.22:11
shardyrandallburt: No worries, I just had to push another revision anyway22:14
randallburtshardy:  yep, rebasing now22:15
shardynight all22:19
*** shardy is now known as shardy_z22:19
*** tiantian has joined #heat22:19
*** serg_melikyan has joined #heat22:21
*** serg_melikyan has quit IRC22:25
openstackgerritJeff Peeler proposed openstack/heat: WIP: Lazy load outputs  https://review.openstack.org/13723722:29
*** EricGonc_ has quit IRC22:34
*** EricGonczer_ has joined #heat22:34
*** EricGonczer_ has quit IRC22:40
*** hdd has quit IRC22:46
openstackgerritRandall Burt proposed openstack/heat: Account for nested stack validation in ResourceGroup  https://review.openstack.org/14561722:47
*** rpothier has quit IRC22:48
*** vijendar has quit IRC22:51
*** dgonzalez has joined #heat22:52
*** jasonamyers has joined #heat22:53
*** jtomasek has quit IRC22:58
*** jmckind has quit IRC23:00
*** signed8bit is now known as signed8bit_ZZZzz23:02
*** dgonzalez has quit IRC23:06
*** dgonzalez has joined #heat23:12
*** jamielennox|away is now known as jamielennox23:13
*** blomquisg has quit IRC23:14
*** Marga__ has quit IRC23:16
*** Marga_ has joined #heat23:16
*** yassine has quit IRC23:18
*** dgonzalez has quit IRC23:21
*** sorantis has quit IRC23:22
*** chlong has joined #heat23:22
*** pm90_ has joined #heat23:23
*** GonZo2K has quit IRC23:23
*** cody-somerville has quit IRC23:26
*** dims__ has quit IRC23:30
*** nkhare has joined #heat23:33
*** tochi has joined #heat23:38
*** andreaf has quit IRC23:38
*** cody-somerville has joined #heat23:40
*** pm90_ has quit IRC23:42
*** Marga_ has quit IRC23:44
*** Marga_ has joined #heat23:45
*** Marga_ has quit IRC23:46
*** Marga_ has joined #heat23:47
*** Marga_ has quit IRC23:48
*** Marga_ has joined #heat23:48
*** Marga_ has quit IRC23:49
*** Marga_ has joined #heat23:49
*** Marga_ has quit IRC23:49
*** Marga_ has joined #heat23:50
*** pm90_ has joined #heat23:50
*** pm90_ has quit IRC23:51
*** pm90__ has joined #heat23:51

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!