| *** dims has joined #heat | 00:00 | |
| *** sdake has quit IRC | 00:01 | |
| jamielennox | miguelgrinberg, stevebaker: there's a keystone session where we will be discussing ways we pass around user auth: http://libertydesignsummit.sched.org/event/5c44b68fe95ff66d85c3a805787fc9e7 | 00:02 |
|---|---|---|
| jamielennox | may or may not be relevant as it's mostly about the user rather than a service auth | 00:03 |
| miguelgrinberg | jamielennox: okay, so correct me if I'm wrong. We need three auth objects: #1 the user's admin (same as every other module), #2 the heat domain admin users (the one that creates the temp users), #3 the auth for the temp users themselves. Are we missing anything? | 00:03 |
| *** achanda has quit IRC | 00:04 | |
| jamielennox | i don't think so, but i'm not an expert here | 00:04 |
| miguelgrinberg | well, we have at least that many in the code, unless I'm misunderstanding it | 00:05 |
| jamielennox | i'm just going back to look at current master rather than my patches | 00:05 |
| miguelgrinberg | okay, I'm currently looking at the diffs in your patch | 00:07 |
| jamielennox | so #2 is the domain_admin creds | 00:07 |
| jamielennox | but #1 is in context and is different based on whether there is a trust_id or not | 00:08 |
| miguelgrinberg | yeah, the one created by domain_admin_auth function. Which still uses keystone_authtoken for the auth_uri endpoint | 00:08 |
| jamielennox | that ones is relatively easy to solve | 00:08 |
| jamielennox | gerrit down again | 00:09 |
| miguelgrinberg | So for #1 I think you had another patch that did the right thing, correct? | 00:09 |
| jamielennox | so domain_admin_auth doesn't use keystone_authtoken - or it does for the auth_url but you have to provide a domain_admin_uesr | 00:09 |
| miguelgrinberg | crap, gerrit is down now | 00:10 |
| jamielennox | but admin_auth uses the keystone_authtoken | 00:10 |
| jamielennox | which appears to be the auth we delegate trusts to | 00:11 |
| asalkeld | any rax guys about? | 00:11 |
| asalkeld | maybe too late | 00:12 |
| jamielennox | but it's half handled in keystoneclient where it creates the trust, and completely differently in context where it uses keystone_authtoken to load if a trust_id is set in context | 00:12 |
| jamielennox | the relationship between context and keystoneclient is weird | 00:12 |
| miguelgrinberg | asalkeld: I'm a rax guy, but you probably don't mean me :) | 00:13 |
| asalkeld | doh, that's right | 00:13 |
| asalkeld | miguelgrinberg: can you replace cloud-server resource with a nova server? | 00:13 |
| miguelgrinberg | you mean the rax specific server resource? | 00:14 |
| asalkeld | miguelgrinberg: i am wondering if these: https://github.com/rackspace-orchestration-templates can be used on "normal" openstack | 00:14 |
| asalkeld | or what needs to be done to do that | 00:14 |
| asalkeld | it does seem like the cloud server in contrib has the same properties as nova server | 00:15 |
| miguelgrinberg | I'm not on the public cloud team, but my understanding is that these days they prefer OS::Nova::Server over the rax specific one | 00:15 |
| *** Drago1 has joined #heat | 00:15 | |
| miguelgrinberg | I have always used that regular resource w/o any problems | 00:15 |
| asalkeld | miguelgrinberg: it's more "can I use those template ^" | 00:16 |
| asalkeld | but seems ok | 00:16 |
| asalkeld | i'll give them a go | 00:16 |
| miguelgrinberg | sounds like the best way to find out is to try them. They look pretty normal | 00:16 |
| miguelgrinberg | asalkeld: except there is our load balancer resource on some | 00:17 |
| asalkeld | sure | 00:18 |
| miguelgrinberg | I haven't used that one, not sure if it is based on the neutron resource or is completely custom to our setup | 00:18 |
| asalkeld | miguelgrinberg: good to get your input here too: https://etherpad.openstack.org/p/liberty-cross-project-user-notifications | 00:22 |
| *** alanf-mc has joined #heat | 00:23 | |
| asalkeld | that's the cross project session for user notifications, probably needs some api wg people there | 00:23 |
| asalkeld | and plus rax is working (apparently) on a solution to this | 00:23 |
| miguelgrinberg | asalkeld: of which I know nothing about :) | 00:23 |
| asalkeld | miguelgrinberg: lol, go find out | 00:24 |
| miguelgrinberg | asalkeld: funny that I need to ask you, but any idea who/what team? | 00:24 |
| asalkeld | hang on, getting a link | 00:24 |
| *** Drago1 has quit IRC | 00:26 | |
| asalkeld | "However, there is a team within Rax working on this SaaS offering: | 00:26 |
| asalkeld | Peter Kazmir and Joe Savak." | 00:26 |
| miguelgrinberg | asalkeld: thanks, I don't know them, but I'll track them down. Big companies... | 00:26 |
| asalkeld | read this: http://lists.openstack.org/pipermail/openstack-dev/2015-April/060748.html | 00:27 |
| miguelgrinberg | asalkeld: we have a couple of API-WG sessions at the summit, I'll make sure to add this topic to the agenda | 00:36 |
| asalkeld | thanks | 00:36 |
| *** packet has joined #heat | 00:44 | |
| openstackgerrit | Kanagaraj Manickam proposed openstack/heat-specs: Property Group https://review.openstack.org/172386 | 00:46 |
| asalkeld | Bill Murray > "I see you're admiring my Crocs," said no one ever. | 00:53 |
| *** ChanServ changes topic to "support @ https://ask.openstack.org | developer wiki @ https://wiki.openstack.org/wiki/Heat | development @ https://launchpad.net/heat | logged @ http://eavesdrop.openstack.org/irclogs/%23heat/" | 00:53 | |
| -openstackstatus- NOTICE: Gerrit has been downgraded to version 2.8 due to the issues observed today. Please report further problems in #openstack-infra. | 00:53 | |
| *** alanf-mc_ has joined #heat | 00:57 | |
| miguelgrinberg | asalkeld: somewhere in that long thread you said we wanted to get rid of heat events. Don't want to take a lot of your time, but if you can summarize why it would help me understand the need for notifications. | 00:57 |
| *** alanf-mc_ has quit IRC | 00:57 | |
| *** tobe has joined #heat | 00:58 | |
| asalkeld | miguelgrinberg: so yes i want to replace heat events | 00:59 |
| asalkeld | (i wanted to keep the topic generic to all projects) | 00:59 |
| asalkeld | and not talk endlessly about heat | 00:59 |
| miguelgrinberg | yeah, I understand | 00:59 |
| *** alanf-mc has quit IRC | 00:59 | |
| *** Qiming has joined #heat | 01:00 | |
| miguelgrinberg | So I see the problem as two different sub-problems. First is generating these notifications. To me it looks like events with proper filtering are just that. The second part is delivery to the user, and that are a ton of options for that. | 01:00 |
| *** achanda has joined #heat | 01:03 | |
| *** KanagarajM has quit IRC | 01:07 | |
| *** Marga_ has quit IRC | 01:07 | |
| *** achanda has quit IRC | 01:08 | |
| *** Qiming_ has joined #heat | 01:11 | |
| *** achanda has joined #heat | 01:11 | |
| *** Qiming has quit IRC | 01:14 | |
| miguelgrinberg | jamielennox: so gerrit is back. Did you have a specific question about that trustee auth patch? I have no objections to that change. | 01:17 |
| jamielennox | miguelgrinberg: i think we can work it out at the summit, i was looking over things again and i think i just want to move everything to do with auth onto the context | 01:17 |
| jamielennox | and get rid of the make a new context with this information | 01:18 |
| jamielennox | just have a couple of different auth plugins that are available on the context and then the code picks the one they want | 01:18 |
| asalkeld | sorry miguelgrinberg , had someone at the door | 01:18 |
| miguelgrinberg | jamielennox: for our purposes we need the keystone_authtoken 100% banned from the code, all those replace(v2, v3) need to go | 01:19 |
| jamielennox | yep | 01:19 |
| miguelgrinberg | jamielennox: also something I briefly discussed with shardy_z the other day for an unrelated topic, is webhooks. Are there any plans to talk about keystone helping with that? Basically a token that is limited in use and doesn't expire ever. | 01:20 |
| miguelgrinberg | asalkeld: no | 01:20 |
| miguelgrinberg | no problem | 01:20 |
| jamielennox | miguelgrinberg: trusts are as far as we are going to take that | 01:21 |
| jamielennox | unexpiring tokens are a problem | 01:21 |
| *** huangtianhua has joined #heat | 01:21 | |
| miguelgrinberg | jamielennox: they would be very useful for heat signals | 01:21 |
| asalkeld | lots of problems, generation, format, how to sanitise so no operator info gets leaked, api, format of the event that the user sees | 01:22 |
| jamielennox | they'd be very useful for a bunch of things :) | 01:22 |
| jamielennox | but they do break a lot of the security model we have | 01:23 |
| miguelgrinberg | jamielennox: yeah, they'll have to be very restricted, ideally they would only authorize a single endpoint | 01:24 |
| jamielennox | we really don't have the policy control we would need to be able to restrict them like that | 01:24 |
| jamielennox | trusts get us a long way there because you can limit what a trust can do | 01:24 |
| jamielennox | but i don't see us ever getting the concept of a non-expiring token | 01:25 |
| *** erkules_ has joined #heat | 01:25 | |
| miguelgrinberg | it's for convenience, with webhooks you just want to pass around a URL, without having to do a keystone interaction | 01:25 |
| *** cyli has quit IRC | 01:25 | |
| *** ameade has joined #heat | 01:27 | |
| *** pitr-ch_ has quit IRC | 01:27 | |
| *** erkules has quit IRC | 01:28 | |
| miguelgrinberg | asalkeld: okay, so nothing inherently wrong with the event storage in the db, but what events are currently generated. | 01:29 |
| asalkeld | miguelgrinberg: you mean by other services/ | 01:29 |
| asalkeld | ? | 01:30 |
| jamielennox | miguelgrinberg: so what does it provide you over the trust_id | 01:30 |
| *** cyli has joined #heat | 01:30 | |
| miguelgrinberg | asalkeld: well, in general I'm thinking notifications have to be stored somewhere. I'm wondering if with proper cleanup the events table can be the source of the notifications. | 01:31 |
| *** baikai has joined #heat | 01:31 | |
| jamielennox | i mean i know what it provides, but if you consider the trust_id equivalent of the webhook it just means you need credentials as well | 01:31 |
| miguelgrinberg | asalkeld: or at least one possible source | 01:31 |
| *** pitr-ch has joined #heat | 01:31 | |
| ameade | asalkeld: hello | 01:32 |
| asalkeld | hi ameade | 01:35 |
| asalkeld | ameade: you wanted to chat about the notification stuff? | 01:36 |
| ameade | asalkeld: yeah | 01:36 |
| miguelgrinberg | jamielennox: correct me if I'm wrong. I think a trust_id is too broad for a webhook, because once it is given out for one specific signal, the owner can then use it for other signals. We want a token that is exclusive to one signal endpoint, and cannot be used on others. | 01:36 |
| jamielennox | miguelgrinberg: i'm not sure of the use case, but i guess it wasn't built for like a one off signalling | 01:37 |
| asalkeld | ameade: https://plus.google.com/hangouts/_/gwqg4vioffcrnmiif7t2zmimuqa | 01:38 |
| *** Qiming_ has quit IRC | 01:38 | |
| miguelgrinberg | jamielennox: I think for basic security these signal endpoints should stand on their own, you don't want to be able to use the auth that is given out for a signal to delete the whole stack, for example. | 01:39 |
| *** multi_io has quit IRC | 01:40 | |
| *** multi_io has joined #heat | 01:41 | |
| *** pitr-ch has quit IRC | 01:41 | |
| *** pitr-ch has joined #heat | 01:43 | |
| jamielennox | miguelgrinberg: by endpoints i assume you mean like nova and other services, this isn't something that will be internal to heat | 01:45 |
| *** Qiming has joined #heat | 01:45 | |
| *** pitr-ch has quit IRC | 01:45 | |
| *** pitr-ch has joined #heat | 01:46 | |
| *** Tross1 has joined #heat | 01:46 | |
| miguelgrinberg | jamielennox: no, by endpoint I mean a heat URL that triggers some action, such as an autoscaling event | 01:46 |
| jamielennox | miguelgrinberg: ok, so no i don't see keystone providing anything additional there, but it is something that heat can implement themselves that make use of trusts | 01:47 |
| *** zzxwill has joined #heat | 01:48 | |
| *** Tross has quit IRC | 01:50 | |
| miguelgrinberg | jamielennox: the temp URLs generated by swift are another example of a similar feature, basically a URL that has embedded auth in it. It would be nice to be able to get this functionality from keystone eventually. | 01:54 |
| jamielennox | i'm not sure what keystone would store in that case, you are looking to bypass auth going to a given url not have keystone validate it | 01:56 |
| *** pitr-ch has quit IRC | 01:58 | |
| *** Yanyanhu has joined #heat | 01:59 | |
| *** packet has quit IRC | 02:00 | |
| *** pitr-ch has joined #heat | 02:01 | |
| *** hdd has quit IRC | 02:03 | |
| *** Raj1 has joined #heat | 02:03 | |
| *** metral is now known as metral_zzz | 02:04 | |
| miguelgrinberg | jamielennox: It's not really bypassing auth, certain URLs get an alternative auth mechanism that uses a one-off token. The big difference is that these tokens need to be validated against the URL they were created for, their scope is much smaller than a usual token. | 02:04 |
| jamielennox | miguelgrinberg: so you are looking to use one-off tokens rather than fancy urls? that might be possible | 02:05 |
| jamielennox | maybe | 02:05 |
| jamielennox | the problems is we persist tokens in a few different ways and so you can't necessarily count how many times a token has been passed | 02:06 |
| miguelgrinberg | jamielennox: the idea is that these URLs + token are given out to other services to invoke on certain events | 02:06 |
| miguelgrinberg | and since they are part of the URL they can get stored on logs, etc. so they should be restricted to the intended use and nothing more | 02:07 |
| jamielennox | bring it up at a summit session, i think we would need a special token format and a bunch of policy stuff we don't have | 02:07 |
| *** achanda has quit IRC | 02:07 | |
| jamielennox | it still might be the sort of thing that is easier to implement in heat | 02:08 |
| *** achanda has joined #heat | 02:09 | |
| miguelgrinberg | yes, it can be implemented, in fact we have them in the EC2 compatible API | 02:09 |
| miguelgrinberg | but on they heat-api side we have a few different options for signals, none as convenient as a webhook URL | 02:10 |
| miguelgrinberg | I'll bring it up at a session if I get a chance, if not I'll continue bugging you/dolph/stanek :) | 02:12 |
| jamielennox | yea, keep bugging - it would be a fair bit of infrastructure on the keystone side, we don't have a way to scope a token down as far as an endpoint | 02:13 |
| jamielennox | there are things we are working on in that regard, but it's a deployer option, not like a dynamic thing | 02:13 |
| jamielennox | and again we can limit a token down as far as a role, but that's a deployer defined thing | 02:14 |
| jamielennox | well, the role is a deployer defined thing | 02:14 |
| miguelgrinberg | Could this be a role created by the trust user? That might work. | 02:16 |
| *** xuhaiwei has quit IRC | 02:17 | |
| *** metral_zzz is now known as metral | 02:19 | |
| baikai | Hi @sdake_ | 02:22 |
| openstackgerrit | Kanagaraj Manickam proposed openstack/heat: Split abandon into pre-abandon(export) and abandon https://review.openstack.org/181880 | 02:25 |
| *** Raj1 has quit IRC | 02:29 | |
| *** Raj1 has joined #heat | 02:29 | |
| *** KanagarajM has joined #heat | 02:30 | |
| *** Raj1 has quit IRC | 02:45 | |
| *** dims has quit IRC | 02:45 | |
| *** packet has joined #heat | 02:45 | |
| *** packet has quit IRC | 02:47 | |
| *** EricGonczer_ has joined #heat | 02:51 | |
| *** KanagarajM has quit IRC | 02:55 | |
| cmyster_ | morning | 02:58 |
| cmyster_ | hmm | 02:58 |
| *** cmyster_ is now known as cmyster | 02:59 | |
| *** cmyster has joined #heat | 02:59 | |
| cmyster | better | 02:59 |
| cmyster | better: | 03:00 |
| *** hdd has joined #heat | 03:01 | |
| elynn | morning cmyster | 03:02 |
| cmyster | hey | 03:03 |
| *** Qiming_ has joined #heat | 03:04 | |
| *** Qiming__ has joined #heat | 03:05 | |
| *** Qiming has quit IRC | 03:06 | |
| *** Qiming_ has quit IRC | 03:08 | |
| *** cumulus_ has quit IRC | 03:17 | |
| *** cumulus has joined #heat | 03:18 | |
| *** andersonvom has joined #heat | 03:26 | |
| asalkeld | etherpad is getting wobbly | 03:28 |
| ramishra | morning all | 03:29 |
| asalkeld | people add your thoughts here -> https://wiki.openstack.org/wiki/Summit/Liberty/Etherpads#Heat (into the etherpads) | 03:32 |
| asalkeld | good to get the ideas flowing earlier rather than too late | 03:33 |
| *** vijayagurug has joined #heat | 03:33 | |
| *** EricGonczer_ has quit IRC | 03:36 | |
| *** kebray has quit IRC | 03:37 | |
| *** EricGonczer_ has joined #heat | 03:44 | |
| *** kebray has joined #heat | 03:52 | |
| *** vijayagurug has quit IRC | 03:54 | |
| *** EricGonczer_ has quit IRC | 03:58 | |
| *** EricGonczer_ has joined #heat | 04:06 | |
| *** EricGonczer_ has quit IRC | 04:16 | |
| openstackgerrit | huangtianhua proposed openstack/heat: Correct volume restore behavior https://review.openstack.org/182152 | 04:21 |
| *** stevebaker has quit IRC | 04:22 | |
| *** stevebaker has joined #heat | 04:22 | |
| *** dims has joined #heat | 04:33 | |
| *** Marga_ has joined #heat | 04:36 | |
| *** Marga__ has joined #heat | 04:37 | |
| *** sdake_ has quit IRC | 04:37 | |
| *** dims has quit IRC | 04:38 | |
| *** jaypipes has quit IRC | 04:40 | |
| *** Marga_ has quit IRC | 04:41 | |
| *** tobe has quit IRC | 04:52 | |
| openstackgerrit | Kanagaraj Manickam proposed openstack/heat-specs: Monasca resource plugin for Alarm and Notification https://review.openstack.org/174262 | 04:54 |
| *** KanagarajM has joined #heat | 04:54 | |
| *** sabeen2 has quit IRC | 04:55 | |
| *** jaypipes has joined #heat | 04:57 | |
| *** hdd has quit IRC | 05:03 | |
| *** Qiming__ is now known as Qiming | 05:08 | |
| openstackgerrit | Ethan Lynn proposed openstack/heat: Add network uuid to server networks attribute https://review.openstack.org/171534 | 05:19 |
| *** LimorStotland has joined #heat | 05:20 | |
| *** huangtianhua has quit IRC | 05:27 | |
| *** ishant has joined #heat | 05:38 | |
| *** vijayagurug has joined #heat | 05:41 | |
| openstackgerrit | Ethan Lynn proposed openstack/heat: Add network uuid to server networks attribute https://review.openstack.org/171534 | 05:50 |
| openstackgerrit | Ethan Lynn proposed openstack/heat-specs: Enhance property constraints https://review.openstack.org/173799 | 05:54 |
| *** Murali has joined #heat | 06:09 | |
| *** kebray has quit IRC | 06:15 | |
| *** coolsvap|afk is now known as coolsvap | 06:18 | |
| *** coolsvap is now known as coolsvap|afk | 06:21 | |
| *** tspatzier has joined #heat | 06:25 | |
| *** huangtianhua has joined #heat | 06:26 | |
| *** coolsvap|afk has quit IRC | 06:28 | |
| *** coolsvap has joined #heat | 06:29 | |
| *** jprovazn has joined #heat | 06:33 | |
| openstackgerrit | Ethan Lynn proposed openstack/heat-specs: Enhance property constraints https://review.openstack.org/173799 | 06:37 |
| *** sdake_ has joined #heat | 06:38 | |
| *** nihilifer has joined #heat | 06:42 | |
| openstackgerrit | Ishant Tyagi proposed openstack/heat: Add attribute type for aws resources https://review.openstack.org/182169 | 06:42 |
| *** Marga__ has quit IRC | 06:48 | |
| *** jcoufal has joined #heat | 06:59 | |
| *** pitr-ch has quit IRC | 06:59 | |
| *** tobe43 has joined #heat | 07:00 | |
| *** erkules_ is now known as erkules | 07:11 | |
| *** erkules has joined #heat | 07:12 | |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Add functional tests from Tempest https://review.openstack.org/180217 | 07:19 |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Add OS_TEST_PATH to testr https://review.openstack.org/180216 | 07:19 |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Add first pass at post_test_hook for functional https://review.openstack.org/180539 | 07:19 |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Move unittests to subdir unit https://review.openstack.org/180215 | 07:19 |
| *** sdake_ has quit IRC | 07:23 | |
| ramishra | skraynev: Hi! | 07:25 |
| skraynev | ramishra: hi | 07:25 |
| ramishra | skraynev: It seems you're already working on this https://bugs.launchpad.net/python-heatclient/+bug/1446442 | 07:25 |
| openstack | Launchpad bug 1446442 in python-heatclient "Move read only heat CLI tests from tempest" [Medium,Triaged] - Assigned to Rabi Mishra (rabi) | 07:25 |
| skraynev | good morning all | 07:25 |
| skraynev | yeah | 07:26 |
| skraynev | ramishra: honestly I have not seen it, when upload patches | 07:26 |
| ramishra | skraynev: hmm ok. I had started working on it and did not know that you're working on it as there were no bugs | 07:27 |
| skraynev | I checked patches on review and did not meet any about migration | 07:27 |
| skraynev | ramishra: I did it without any bug, because I thought, that it is more similar on BP... | 07:28 |
| ramishra | skraynev: it's ok. please refer the bug in the patches so no one would work on it again;) | 07:28 |
| skraynev | ramishra: sure, thanks ;) | 07:28 |
| skraynev | will add on the next patchset | 07:28 |
| *** inc0 has joined #heat | 07:29 | |
| inc0 | good morning | 07:29 |
| *** jistr has joined #heat | 07:33 | |
| openstackgerrit | Merged openstack/heat: Fix resource-signal for OS::Mistral::Workflow https://review.openstack.org/181727 | 07:36 |
| nihilifer | good morning | 07:36 |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Add functional tests from Tempest https://review.openstack.org/180217 | 07:45 |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Add OS_TEST_PATH to testr https://review.openstack.org/180216 | 07:45 |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Add first pass at post_test_hook for functional https://review.openstack.org/180539 | 07:45 |
| openstackgerrit | Sergey Kraynev proposed openstack/python-heatclient: Move unittests to subdir unit https://review.openstack.org/180215 | 07:45 |
| *** ifarkas has joined #heat | 07:45 | |
| openstackgerrit | Sergey Kraynev proposed openstack/heat: Add functional test for neutron port https://review.openstack.org/178189 | 07:49 |
| *** shardy_z is now known as shardy | 07:50 | |
| *** xuhaiwei has joined #heat | 07:51 | |
| openstackgerrit | huangtianhua proposed openstack/heat-specs: Support actions for remote stacks https://review.openstack.org/182183 | 07:52 |
| *** openstackstatus has quit IRC | 07:52 | |
| *** openstack has joined #heat | 07:54 | |
| shardy | miguelgrinberg, jamielennox: reading scrollback, the problem with trusts for in-instance signalling is you still need credentials to get a token | 07:55 |
| shardy | that's why we have the domain-isolated "stack domain user" model, as well as trusts (which are only really useful for deferred authentication, e.g storing credentials inside heat) | 07:55 |
| *** pas-ha has joined #heat | 07:55 | |
| shardy | the whole problem is we *don't* want the credentials inside the instance associated with the stack owner (for the reasons mentioned by miguelgrinberg) | 07:56 |
| shardy | and also, ideally, we don't want to deploy a username/password | 07:56 |
| shardy | for now, that's what we do, a username and randomly generated password, since there's no other option | 07:56 |
| shardy | ideally we'd have a way to prepare a more limited scope secret which could be passed instead of the password, such as the non-expiring endpoint/policy limited token mentioned by miguelgrinberg | 07:57 |
| shardy | morning all btw ;) | 07:58 |
| openstackgerrit | Ethan Lynn proposed openstack/heat: Add address format check for property https://review.openstack.org/173688 | 07:58 |
| *** daneyon has quit IRC | 08:01 | |
| *** andersonvom has quit IRC | 08:01 | |
| pas-ha | morning all | 08:03 |
| *** derekh has joined #heat | 08:09 | |
| openstackgerrit | Ethan Lynn proposed openstack/heat: Add address format check for property https://review.openstack.org/173688 | 08:10 |
| *** nkhare has joined #heat | 08:10 | |
| *** achanda has quit IRC | 08:25 | |
| openstackgerrit | Ishant Tyagi proposed openstack/heat: Add attribute type for heat resources https://review.openstack.org/182192 | 08:30 |
| *** Marga_ has joined #heat | 08:42 | |
| openstackgerrit | Ethan Lynn proposed openstack/heat: Add mac address format validation https://review.openstack.org/182196 | 08:47 |
| *** Qiming_ has joined #heat | 08:48 | |
| *** Qiming has quit IRC | 08:48 | |
| *** pal has joined #heat | 08:49 | |
| *** andersonvom has joined #heat | 08:57 | |
| openstackgerrit | Kanagaraj Manickam proposed openstack/heat: heat_keystone README update for service and endpoint https://review.openstack.org/178586 | 08:58 |
| openstackgerrit | Kanagaraj Manickam proposed openstack/heat: Resource plug-in for keystone endpoint https://review.openstack.org/178585 | 08:58 |
| openstackgerrit | Kanagaraj Manickam proposed openstack/heat: Resource plug-in for keystone service https://review.openstack.org/178584 | 08:58 |
| *** htruta has quit IRC | 09:00 | |
| *** huangtianhua has quit IRC | 09:00 | |
| *** andersonvom has quit IRC | 09:02 | |
| *** BManojlovic has joined #heat | 09:03 | |
| *** jtomasek has joined #heat | 09:06 | |
| *** vijayagurug has quit IRC | 09:14 | |
| *** vijayagurug has joined #heat | 09:15 | |
| *** tobe43 has quit IRC | 09:31 | |
| *** daneyon has joined #heat | 09:31 | |
| *** dyasny has quit IRC | 09:32 | |
| openstackgerrit | Kairat Kushaev proposed openstack/heat: Implement update for Manila::Share https://review.openstack.org/171845 | 09:33 |
| openstackgerrit | Kairat Kushaev proposed openstack/heat: Implement create-delete-check for Manila::Share https://review.openstack.org/171806 | 09:33 |
| openstackgerrit | Ethan Lynn proposed openstack/heat: Add CIDR format validation https://review.openstack.org/182209 | 09:35 |
| openstackgerrit | Ishant Tyagi proposed openstack/heat: Fix InstanceList attribute of instance group to return List https://review.openstack.org/182210 | 09:36 |
| openstackgerrit | Anant Patil proposed openstack/heat-specs: Retry a request based on error and response codes. https://review.openstack.org/181691 | 09:45 |
| *** dyasny has joined #heat | 09:46 | |
| *** pitr-ch has joined #heat | 09:47 | |
| *** MasterPiece has joined #heat | 09:52 | |
| *** baikai has quit IRC | 09:53 | |
| *** cdent has joined #heat | 09:55 | |
| *** MasterPiece`` has joined #heat | 09:55 | |
| *** andersonvom has joined #heat | 09:57 | |
| *** MasterPiece has quit IRC | 09:58 | |
| *** DaveJ__ has joined #heat | 09:58 | |
| *** andersonvom has quit IRC | 10:02 | |
| *** Yanyanhu has quit IRC | 10:03 | |
| *** MasterPiece`` has quit IRC | 10:06 | |
| *** Qiming_ has quit IRC | 10:06 | |
| *** Minion_ has joined #heat | 10:12 | |
| *** zuzu has joined #heat | 10:14 | |
| openstackgerrit | Anant Patil proposed openstack/heat-specs: Retry a request based on error and response codes. https://review.openstack.org/181691 | 10:16 |
| openstackgerrit | Merged openstack/heat-specs: Designate resource plug-ins https://review.openstack.org/174275 | 10:18 |
| *** Minion_ has left #heat | 10:21 | |
| *** zzxwill has quit IRC | 10:29 | |
| *** zuzu has quit IRC | 10:29 | |
| *** dims has joined #heat | 10:33 | |
| *** andrearo1 has joined #heat | 10:34 | |
| *** andrearosa has quit IRC | 10:36 | |
| openstackgerrit | Merged openstack/heat: Move barbican client in main tree https://review.openstack.org/180958 | 10:36 |
| *** tochi has quit IRC | 10:38 | |
| *** LimorStotland has quit IRC | 10:47 | |
| *** LimorStotland has joined #heat | 10:47 | |
| openstackgerrit | Merged openstack/heat-specs: Support actions for remote stacks https://review.openstack.org/182183 | 10:48 |
| *** ananta_ has joined #heat | 10:49 | |
| asalkeld | night all | 10:50 |
| *** asalkeld has quit IRC | 10:50 | |
| *** coolsvap is now known as coolsvap|afk | 10:52 | |
| *** nkhare has quit IRC | 11:01 | |
| *** links has joined #heat | 11:04 | |
| *** andrearo1 is now known as andrearosa | 11:07 | |
| *** pal has quit IRC | 11:12 | |
| *** nkhare has joined #heat | 11:14 | |
| *** blues-man has joined #heat | 11:24 | |
| openstackgerrit | Merged openstack/python-heatclient: Move unittests to subdir unit https://review.openstack.org/180215 | 11:24 |
| *** MasterPiece has joined #heat | 11:27 | |
| openstackgerrit | Merged openstack/heat: Add remaining_executions attribute to OS::Mistral::CronTrigger https://review.openstack.org/177308 | 11:28 |
| *** tspatzier has quit IRC | 11:30 | |
| *** tspatzier has joined #heat | 11:30 | |
| *** tspatzier has quit IRC | 11:30 | |
| *** blues-man has quit IRC | 11:32 | |
| *** LimorStotland_ has joined #heat | 11:36 | |
| *** ananta_ has quit IRC | 11:37 | |
| *** stevebaker has quit IRC | 11:39 | |
| *** LimorStotland has quit IRC | 11:39 | |
| openstackgerrit | Merged openstack/heat: Split engine service test cases (3) https://review.openstack.org/180426 | 11:44 |
| openstackgerrit | Ishant Tyagi proposed openstack/heat: Add attribute type for neutron resources https://review.openstack.org/182249 | 11:44 |
| *** jistr is now known as jistr|class | 11:46 | |
| *** jistr|class is now known as jistr | 11:47 | |
| *** nkhare has quit IRC | 11:47 | |
| *** jistr is now known as jistr|class | 11:50 | |
| *** pitr-ch has quit IRC | 11:51 | |
| *** EricGonczer_ has joined #heat | 11:53 | |
| openstackgerrit | Ishant Tyagi proposed openstack/heat: Add attribute type for openstack resources https://review.openstack.org/182255 | 11:56 |
| *** jistr|class is now known as jistr | 11:57 | |
| *** lkarm has joined #heat | 12:00 | |
| *** harmw has quit IRC | 12:00 | |
| *** nkhare has joined #heat | 12:02 | |
| *** dims_ has joined #heat | 12:03 | |
| *** dims has quit IRC | 12:06 | |
| *** nkhare has quit IRC | 12:16 | |
| *** tspatzier has joined #heat | 12:16 | |
| *** ananta_ has joined #heat | 12:19 | |
| *** htruta has joined #heat | 12:21 | |
| openstackgerrit | Ryan Brown proposed openstack/heat: Add a periodic task to clean up engine threads https://review.openstack.org/181559 | 12:27 |
| *** rpothier has joined #heat | 12:34 | |
| *** Marga_ has quit IRC | 12:38 | |
| openstackgerrit | noa proposed openstack/heat-specs: Spec for Add lock and unlock stack actions. https://review.openstack.org/171781 | 12:39 |
| *** dims_ has quit IRC | 12:40 | |
| *** aweiteka has joined #heat | 12:42 | |
| *** dims has joined #heat | 12:42 | |
| *** ananta_ has quit IRC | 12:45 | |
| *** ananta_ has joined #heat | 12:46 | |
| *** Adri2000 has quit IRC | 12:49 | |
| *** radez_g0n3 is now known as radez | 12:49 | |
| *** Adri2000 has joined #heat | 12:50 | |
| *** DaveJ__ has quit IRC | 12:51 | |
| *** blues-man has joined #heat | 12:54 | |
| *** EricGonczer_ has quit IRC | 12:56 | |
| *** hdd has joined #heat | 13:01 | |
| *** sdake has joined #heat | 13:01 | |
| openstackgerrit | Ryan Brown proposed openstack/heat: Add a periodic task to clean up engine threads https://review.openstack.org/181559 | 13:02 |
| *** sdake_ has joined #heat | 13:03 | |
| *** jistr is now known as jistr|mtg | 13:04 | |
| *** sdake has quit IRC | 13:06 | |
| *** nihilifer has quit IRC | 13:13 | |
| *** KanagarajM has quit IRC | 13:14 | |
| *** sdake_ is now known as sdake | 13:18 | |
| *** ananta_ has quit IRC | 13:22 | |
| openstackgerrit | Merged openstack/heat: Don't use scoping information for admin auth https://review.openstack.org/178045 | 13:22 |
| *** blues-man has quit IRC | 13:24 | |
| *** blues-man has joined #heat | 13:24 | |
| *** jprovazn has quit IRC | 13:27 | |
| *** andersonvom has joined #heat | 13:34 | |
| openstackgerrit | Tetiana Lashchova proposed openstack/heat: Import python modules instead of objects https://review.openstack.org/182291 | 13:34 |
| therve | skraynev, Why should I use sys.iteritems? | 13:37 |
| therve | Just saw your comment on https://review.openstack.org/181865 | 13:38 |
| *** andersonvom has quit IRC | 13:38 | |
| *** ananta_ has joined #heat | 13:38 | |
| ryansb | therve: six.iteritems is a compatibility thing for python 2/3 | 13:39 |
| skraynev | therve: hi. it is related with migration to py3 and we had several patches to use six.iteritems instead items | 13:39 |
| ryansb | because items() returns a list in python 2, and an iterator in python3 | 13:39 |
| therve | skraynev, We still use items in many places | 13:39 |
| therve | I'd understand if I used iteritems(), but it's not the case here | 13:39 |
| ryansb | so to merge the behavior, you use iteritems() which returns an iterator in both cases | 13:39 |
| therve | ryansb, That's irrelevant for my code, though | 13:40 |
| skraynev | therve: probably we have not fix all yet ;) but add new one is not good idea | 13:40 |
| therve | skraynev, Why, though? | 13:40 |
| therve | The code will work perfectly fine in both py2 and py3 | 13:41 |
| skraynev | therve: minus one line change on review in future ;) | 13:41 |
| therve | You don't need to change that line, is what I'm saying | 13:41 |
| therve | You should replace usage of iteritems by six.iteritems | 13:42 |
| therve | Replacing usage of items is either not necessary or even wrong | 13:43 |
| skraynev | therve: hm. got your idea. you are right. so just ignore this one. | 13:44 |
| *** links has quit IRC | 13:44 | |
| therve | I guess you were referring to https://bugs.launchpad.net/heat/+bug/1282888 which mentions iteritems | 13:47 |
| openstack | Launchpad bug 1282888 in heat "Python 3.x Compatibility - convert x.iteritems to six.iteritems(x)" [Low,Fix released] - Assigned to Razumovsky Peter (prazumovsky) | 13:47 |
| therve | Not sure why we actually fixed this without an automated check | 13:48 |
| openstackgerrit | Thomas Herve proposed openstack/heat: Support additional Barbican orders https://review.openstack.org/181865 | 13:50 |
| *** jasond` has joined #heat | 13:51 | |
| skraynev | therve: yes. I meant this one | 13:52 |
| *** xek is now known as x3k | 13:52 | |
| skraynev | therve: Probably because other tests and check are in progress state (I gave seen it on review) | 13:53 |
| skraynev | therve: Hope, that we will get it during L | 13:53 |
| therve | skraynev, Are there actually any tests/checks for that? | 13:54 |
| skraynev | therve: you mean gate job or for local testing. | 13:55 |
| skraynev | anyway for both - no ;) | 13:55 |
| skraynev | but second is on review | 13:55 |
| skraynev | let me find | 13:55 |
| therve | https://review.openstack.org/#/c/176767/ is in limbo | 13:55 |
| skraynev | skraynev: yes. I mentioned this | 13:56 |
| *** kebray has joined #heat | 13:56 | |
| therve | Well let's fix that | 13:57 |
| openstackgerrit | Thomas Herve proposed openstack/heat: Add a py34 env https://review.openstack.org/176767 | 13:59 |
| *** ananta_ has quit IRC | 13:59 | |
| *** ananta_ has joined #heat | 13:59 | |
| *** stevebaker has joined #heat | 14:00 | |
| skraynev | therve: Thumbs up! | 14:00 |
| skraynev | therve: did you try it locally? | 14:00 |
| *** andersonvom has joined #heat | 14:01 | |
| therve | No, the gate will talk :) | 14:01 |
| therve | Hum I do have py34 for some reasons | 14:01 |
| *** jprovazn has joined #heat | 14:04 | |
| therve | Seems happy enough | 14:07 |
| *** cmyster has left #heat | 14:09 | |
| *** inc0 has quit IRC | 14:11 | |
| *** Marga_ has joined #heat | 14:11 | |
| *** smccully has joined #heat | 14:16 | |
| *** _smccully has joined #heat | 14:16 | |
| *** _smccully has quit IRC | 14:16 | |
| *** smccully has quit IRC | 14:16 | |
| *** Marga_ has quit IRC | 14:16 | |
| *** smccully has joined #heat | 14:17 | |
| *** Marga_ has joined #heat | 14:17 | |
| *** EricGonczer_ has joined #heat | 14:17 | |
| *** aweiteka has quit IRC | 14:19 | |
| *** signed8bit has joined #heat | 14:25 | |
| *** MasterPiece has quit IRC | 14:25 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/heat: Updated from global requirements https://review.openstack.org/181910 | 14:29 |
| *** MasterPiece has joined #heat | 14:29 | |
| sirushti | therve, skraynev, yeah, the py34 stuff is really, really stale, I'll revise that in a bit and add a gate job for it in project-config. | 14:33 |
| therve | sirushti, Just updated the patch fwiw | 14:33 |
| sirushti | Honestly, I wanted some grenade testing for it before I went in on it considering we broke Heat on upgrade with a PY34 compatibility change | 14:33 |
| sirushti | therve, thanks, I just saw, I think the requirements are out of date on that one. | 14:34 |
| *** thedodd has joined #heat | 14:34 | |
| therve | sirushti, "broke Heat on upgrade" how so? | 14:34 |
| sirushti | therve, let me find that bug | 14:34 |
| sirushti | therve, https://bugs.launchpad.net/heat/+bug/1448186 | 14:36 |
| openstack | Launchpad bug 1448186 in heat "Error when restart heat-engine" [Undecided,Fix committed] - Assigned to Oleksii Chuprykov (ochuprykov) | 14:36 |
| therve | Ah yeah that one | 14:36 |
| therve | Well not sure grenade would help, but possibly | 14:36 |
| sirushti | therve, probably | 14:36 |
| therve | That's something that can be introduced by any kind of change though, wouldn't sweat it | 14:36 |
| sirushti | therve, I suppose I shouldn't be too paranoid about it ;) | 14:37 |
| *** Murali has quit IRC | 14:38 | |
| *** vijayagurug has left #heat | 14:39 | |
| *** jistr|mtg is now known as jistr | 14:39 | |
| skraynev | sirushti: about separate test. I tried to run it locally, but it failed. | 14:39 |
| sirushti | skraynev, sorry, 'separate'? which test is this? | 14:40 |
| skraynev | https://review.openstack.org/#/c/176767/ | 14:40 |
| skraynev | sirushti: I mean separate env for py34 | 14:40 |
| sirushti | skraynev, ah that issue, that's a known testr issue. Delete .testrepository and try again? | 14:41 |
| skraynev | sirushti: ok. wait a second | 14:41 |
| *** sdake_ has joined #heat | 14:49 | |
| *** ananta_ has quit IRC | 14:51 | |
| *** ananta__ has joined #heat | 14:51 | |
| *** ishant has quit IRC | 14:51 | |
| *** achanda has joined #heat | 14:52 | |
| skraynev | sirushti: yeap. now it works. thx | 14:52 |
| *** sdake has quit IRC | 14:52 | |
| *** jaypipes has quit IRC | 14:54 | |
| sirushti | skraynev, just a second, let me update requirements/test-requirements, it got outdated | 14:54 |
| skraynev | sirushti: sure. I can lower to +1 | 14:55 |
| openstackgerrit | Sirushti Murugesan proposed openstack/heat: Add a py34 env https://review.openstack.org/176767 | 14:57 |
| *** jaime49 has joined #heat | 14:57 | |
| sirushti | skraynev, thanks^ | 14:58 |
| *** rwsu has joined #heat | 14:59 | |
| *** achanda has quit IRC | 15:01 | |
| *** alexpilotti has joined #heat | 15:01 | |
| *** kebray has quit IRC | 15:05 | |
| *** nihilifer has joined #heat | 15:09 | |
| *** pas-ha has quit IRC | 15:10 | |
| *** cdent has quit IRC | 15:12 | |
| *** Marga_ has quit IRC | 15:13 | |
| *** hdd has quit IRC | 15:14 | |
| *** daneyon_ has joined #heat | 15:15 | |
| *** crose has joined #heat | 15:16 | |
| *** daneyon has quit IRC | 15:18 | |
| *** sabeen has joined #heat | 15:18 | |
| *** nihilifer has quit IRC | 15:18 | |
| *** Drago has joined #heat | 15:18 | |
| *** Drago has quit IRC | 15:20 | |
| *** Drago has joined #heat | 15:21 | |
| *** pas-ha has joined #heat | 15:21 | |
| *** shakamunyi has joined #heat | 15:22 | |
| openstackgerrit | noa proposed openstack/heat-specs: Spec for Add lock and unlock stack actions. https://review.openstack.org/171781 | 15:22 |
| *** Raj1 has joined #heat | 15:22 | |
| *** barra204 has joined #heat | 15:22 | |
| skraynev | therve: which issue you mentioned in https://review.openstack.org/#/c/182328/1 ? do we have any bug ? | 15:23 |
| therve | skraynev, I didn't bother to open one no | 15:24 |
| openstackgerrit | Kairat Kushaev proposed openstack/heat: Implement update for Manila::Share https://review.openstack.org/171845 | 15:25 |
| openstackgerrit | Kairat Kushaev proposed openstack/heat: Implement create-delete-check for Manila::Share https://review.openstack.org/171806 | 15:25 |
| *** derekh_ has joined #heat | 15:25 | |
| skraynev | therve: do you have any link on traceback or something, that allows to indicate that it's exactly this issue? | 15:26 |
| therve | skraynev, No | 15:26 |
| therve | Maybe I should just remove that message it seems to confuse you :) | 15:26 |
| skraynev | therve: just want to be sure if something goes wrong it's related with exactly this issue | 15:26 |
| skraynev | therve: may be :) | 15:27 |
| skraynev | it solve issue, but I steel want to know what the issue was :) | 15:27 |
| therve | skraynev, In devstack, have you tried to shutdown heat-engine? | 15:27 |
| skraynev | because if I meet something similar I will not spent time to investigating issue | 15:28 |
| skraynev | therve: yes | 15:28 |
| skraynev | my devstack 2 weeks old | 15:28 |
| therve | skraynev, You didn't see anything suspect? | 15:28 |
| therve | If you use ctrl^c | 15:28 |
| *** derekh has quit IRC | 15:29 | |
| skraynev | HUGE log! | 15:29 |
| skraynev | like: Waiting stack 36e8b00d-b53b-4d6d-a37e-e5cfadac2dd5 processing to be finished | 15:29 |
| skraynev | is it what you mean ? | 15:29 |
| therve | No | 15:29 |
| therve | For me it just doesn't stop the first time | 15:30 |
| therve | I have to do it twice | 15:30 |
| therve | There is something weird in SIGINT handling which is fixed by this commit | 15:30 |
| skraynev | Oh. | 15:30 |
| skraynev | I have the same, but always suspect that it is expected behavior for devstack. | 15:31 |
| skraynev | heh. | 15:31 |
| therve | No it's been that way recently :) | 15:31 |
| *** pitr-ch has joined #heat | 15:33 | |
| *** jtomasek has quit IRC | 15:33 | |
| skraynev | therve: checked with updated code. WFM. thx for spotting ;) | 15:34 |
| therve | No problem :) | 15:34 |
| *** BManojlovic has quit IRC | 15:35 | |
| *** hdd has joined #heat | 15:36 | |
| *** pitr-ch has quit IRC | 15:38 | |
| *** sabeen2 has joined #heat | 15:39 | |
| *** ccrouch has quit IRC | 15:42 | |
| openstackgerrit | Thomas Herve proposed openstack/heat: Switch to oslo.policy https://review.openstack.org/171527 | 15:43 |
| *** sabeen has quit IRC | 15:43 | |
| *** jaypipes has joined #heat | 15:45 | |
| *** nihilifer has joined #heat | 15:46 | |
| *** daneyon_ has quit IRC | 15:47 | |
| *** daneyon has joined #heat | 15:48 | |
| *** vijayagurug has joined #heat | 15:49 | |
| *** jistr has quit IRC | 15:50 | |
| *** nihilifer has quit IRC | 15:50 | |
| *** links has joined #heat | 15:50 | |
| *** Marga_ has joined #heat | 15:54 | |
| *** pitr-ch has joined #heat | 15:55 | |
| *** jaime49 has quit IRC | 15:56 | |
| *** mtreinish has quit IRC | 15:58 | |
| *** rwsu has quit IRC | 15:58 | |
| *** rwsu has joined #heat | 15:59 | |
| *** Tango has joined #heat | 15:59 | |
| openstackgerrit | Jason Dunsmore proposed openstack/heat: Encrypt Heat template hidden parameters https://review.openstack.org/97900 | 15:59 |
| *** cyli has quit IRC | 15:59 | |
| *** cyli has joined #heat | 15:59 | |
| *** mtreinish has joined #heat | 16:00 | |
| *** lvh has left #heat | 16:00 | |
| *** Marga_ has quit IRC | 16:01 | |
| *** Marga_ has joined #heat | 16:01 | |
| *** kebray has joined #heat | 16:02 | |
| *** jaime49 has joined #heat | 16:03 | |
| *** thedodd has quit IRC | 16:04 | |
| *** thedodd has joined #heat | 16:04 | |
| *** pas-ha has quit IRC | 16:08 | |
| *** thedodd has quit IRC | 16:09 | |
| *** andersonvom has quit IRC | 16:09 | |
| *** openstackgerrit_ has quit IRC | 16:11 | |
| *** thedodd has joined #heat | 16:16 | |
| *** pm90_ has joined #heat | 16:18 | |
| *** Marga_ has quit IRC | 16:21 | |
| *** Marga_ has joined #heat | 16:22 | |
| *** alexheneveld has joined #heat | 16:26 | |
| *** pm90_ has quit IRC | 16:27 | |
| *** pm90_ has joined #heat | 16:28 | |
| *** Marga_ has quit IRC | 16:28 | |
| *** Marga_ has joined #heat | 16:28 | |
| *** alanf-mc has joined #heat | 16:32 | |
| *** Raj1 has quit IRC | 16:33 | |
| *** nijaba has quit IRC | 16:34 | |
| *** derekh_ has quit IRC | 16:45 | |
| *** ananta__ has quit IRC | 16:48 | |
| *** jcoufal has quit IRC | 16:52 | |
| *** sergmelikyan has joined #heat | 16:57 | |
| *** hdd_ has joined #heat | 17:02 | |
| *** alanf-mc has quit IRC | 17:02 | |
| *** mtreinish has quit IRC | 17:02 | |
| *** hdd has quit IRC | 17:02 | |
| *** cumulus has quit IRC | 17:02 | |
| *** tlashchova has quit IRC | 17:02 | |
| *** jpeeler has quit IRC | 17:02 | |
| *** mtreinish_ has joined #heat | 17:02 | |
| *** tlashchova has joined #heat | 17:02 | |
| *** mtreinish_ is now known as mtreinish | 17:02 | |
| *** jpeeler has joined #heat | 17:02 | |
| *** jpeeler has joined #heat | 17:02 | |
| *** alanf-mc has joined #heat | 17:02 | |
| *** cumulus has joined #heat | 17:03 | |
| larsks | When triggering a scaling policy, I am getting "Nested stack UPDATE failed: State invalid for UPDATE". What does that mean? At the moment, everything seems to be in CREATE_COMPLETE, UPDATE_COMPLETE, or CREATE_IN_PROGRESS states. | 17:04 |
| therve | larsks, CREATE_IN_PROGRESS may be an invalid state for UPDATE | 17:07 |
| *** blues-man has left #heat | 17:10 | |
| *** sdake has joined #heat | 17:11 | |
| larsks | therve: weird. Because I'm pretty sure the CREATE_IN_PROGRESS was the result of actions triggered by the UPDATE that was triggered by the autoscaling. | 17:12 |
| larsks | Oddly enough, it seems to have worked anyway, after a fashion. | 17:12 |
| therve | Ah possibly | 17:13 |
| *** links has quit IRC | 17:14 | |
| larsks | Oh wait, it didn't work. That is, it created all the resources, but heat has apparently abandoned them -- there are more os::nova:;servers running than heat reports in 'heat resource-list'. | 17:14 |
| *** sdake_ has quit IRC | 17:14 | |
| *** alexheneveld has quit IRC | 17:15 | |
| *** Marga_ has quit IRC | 17:18 | |
| *** harlowja has quit IRC | 17:22 | |
| *** harlowja has joined #heat | 17:22 | |
| *** Marga_ has joined #heat | 17:28 | |
| *** signed8bit is now known as signed8bit_ZZZzz | 17:29 | |
| *** achanda has joined #heat | 17:30 | |
| *** e0ne has joined #heat | 17:31 | |
| *** tellesnobrega_ has joined #heat | 17:38 | |
| *** tellesnobrega_ has left #heat | 17:38 | |
| *** chlong has quit IRC | 17:46 | |
| *** signed8bit_ZZZzz is now known as signed8bit | 17:47 | |
| *** e0ne is now known as e0ne_ | 17:47 | |
| *** Raj3 has joined #heat | 17:55 | |
| *** Raj3 has quit IRC | 17:55 | |
| *** Raj3 has joined #heat | 17:55 | |
| *** e0ne_ is now known as e0ne | 17:56 | |
| *** e0ne has quit IRC | 17:59 | |
| *** chlong has joined #heat | 18:00 | |
| *** tspatzier has quit IRC | 18:06 | |
| *** ashishjain has joined #heat | 18:17 | |
| *** alexheneveld has joined #heat | 18:18 | |
| ashishjain | hello can someone suggest if it is possible to deploy a cluster using heat. | 18:20 |
| *** vijayagurug has left #heat | 18:24 | |
| *** MasterPiece has quit IRC | 18:28 | |
| *** cdent has joined #heat | 18:29 | |
| *** andersonvom has joined #heat | 18:35 | |
| *** alexheneveld has quit IRC | 18:41 | |
| larsks | ashishjain: of course you can deploy a cluster using heat. | 18:43 |
| larsks | E.g., https://github.com/larsks/heat-kubernetes | 18:43 |
| *** alexheneveld has joined #heat | 18:49 | |
| ashishjain | larsks: Hey thanks a lot for this. | 18:51 |
| *** e0ne has joined #heat | 18:51 | |
| ashishjain | larsks: I am looking into it ... it deploys kube master and minion I suppose | 18:53 |
| ashishjain | but again using docker containers cloud-init will not work | 18:53 |
| ashishjain | and will have to rely on user-data | 18:54 |
| *** pm90_ has quit IRC | 18:54 | |
| larsks | Well, you *can* use cloud-init in containers, if you build them correctly. And you just use "curl" to fetch user-data and use that instead. | 18:58 |
| larsks | So you have several options, depending on what you're trying to do. | 18:59 |
| *** jprovazn has quit IRC | 19:01 | |
| *** Raj3 has left #heat | 19:02 | |
| *** pfreund has quit IRC | 19:03 | |
| *** ccrouch has joined #heat | 19:15 | |
| *** openstackgerrit_ has joined #heat | 19:16 | |
| openstackgerrit | Jason Dunsmore proposed openstack/heat: Encrypt properties data https://review.openstack.org/151388 | 19:21 |
| *** alanf-mc has quit IRC | 19:24 | |
| *** openstackgerrit_ has quit IRC | 19:25 | |
| openstackgerrit | Jason Dunsmore proposed openstack/heat: Support for encrypt/decrypt parameters in heat-manage https://review.openstack.org/174978 | 19:26 |
| *** achanda has quit IRC | 19:33 | |
| *** shakamunyi has quit IRC | 19:35 | |
| *** barra204 has quit IRC | 19:36 | |
| *** thedodd has quit IRC | 19:38 | |
| *** thedodd has joined #heat | 19:41 | |
| *** ashishjain has quit IRC | 19:41 | |
| *** shakamunyi has joined #heat | 19:50 | |
| *** barra204 has joined #heat | 19:50 | |
| shardy | larsks: Hey, I'm looking at your auth issue | 19:50 |
| shardy | it appears the problem is specific to OS::Heat::WaitConditionHandle on Juno | 19:51 |
| larsks | shardy: I think we've answered the auth question...has to do with truncating usernames to 64 characters in _get_user. | 19:51 |
| shardy | larsks: well, it's not the truncating afaict, it's that we're not consistently truncating | 19:51 |
| larsks | Well, right :). | 19:52 |
| shardy | larsks: the 64 char thing is a historical thing, we should definitely remove/increase it | 19:52 |
| larsks | Solutions including (a) do not truncate/increase limit (keystone supports 255 characters, apparently), or (b) just use the UUID, which I guess is what happens in kilo. | 19:52 |
| shardy | larsks: Yeah, we use the user ID now, but there is still name truncating, even in master | 19:52 |
| shardy | it just won't manifest in this problem | 19:53 |
| larsks | Okay. I was planning on trying with a larger limit later today. For now I'm just running heat-trunk. | 19:53 |
| shardy | larsks: for Juno, there is (c) add consistent truncation to stack_domain_user_token in heat_keystoneclient | 19:53 |
| shardy | then we would use the same username we created the user with | 19:54 |
| larsks | Makes sense. | 19:54 |
| shardy | https://github.com/larsks/heat-kubernetes/blob/master/kubecluster.yaml | 19:55 |
| shardy | larsks: just out of interest, is there a reason everything happens via user-data not using SoftwareDeployments? | 19:56 |
| *** alanf-mc has joined #heat | 19:56 | |
| larsks | shardy: at the time I started this, there was no guarantee that the images in use would have the necessary tooling in place. | 19:56 |
| shardy | larsks: Ok, cool | 19:56 |
| larsks | Converting it over to using softwaredeployments is on my list of things to look at :) | 19:57 |
| shardy | I'll raise a bug and try to figure out the least impactful fix | 19:57 |
| shardy | larsks: sorry for the delay on this, been busy with other stuff today | 19:57 |
| larsks | No worries; running the -trunk version of heat got me unstuck. | 19:58 |
| larsks | But as long as I have your attention: the current tempaltes rely on the get_file function to load in various file contents. If I drop the templates into /etc/heat/templates and add some entries to the resource registry, is there a way to make get_file work? | 19:58 |
| shardy | larsks: Hmm, that is a good question. Possibly not, since get_file is part of python-heatclient IIRC | 19:59 |
| shardy | larsks: if we can't, that's another bug for me to raise ;) | 20:00 |
| larsks | Hmmm. Maybe you can provide a suggestion, then: I've been asked to consider packaging up these templates, and I was trying to think of something better than dumping them into /usr/share/doc/foo... | 20:01 |
| *** alanf-mc_ has joined #heat | 20:02 | |
| *** alanf-mc_ has quit IRC | 20:02 | |
| *** pm90_ has joined #heat | 20:03 | |
| larsks | Maybe that's the best way, though. | 20:03 |
| *** achanda has joined #heat | 20:04 | |
| *** alanf-mc has quit IRC | 20:05 | |
| shardy | larsks: right now, I think it may be, we should enable composition of files, including get_file via the global environment though | 20:11 |
| larsks | Thanks. | 20:14 |
| shardy | https://bugs.launchpad.net/heat/+bug/1454401 | 20:15 |
| openstack | Launchpad bug 1454401 in heat "get_file doesn't work in the global environment" [Undecided,New] | 20:15 |
| *** alanf-mc has joined #heat | 20:16 | |
| shardy | larsks: https://bugs.launchpad.net/heat/+bug/1402894 covers your specific juno issue I think | 20:17 |
| openstack | Launchpad bug 1402894 in heat "Resource group with a nested wait condition handle fails on create" [Medium,Fix released] - Assigned to Miguel Grinberg (miguelgrinberg) | 20:17 |
| shardy | I actually already tagged it juno-backport-potential, but then forgot to backport it.. | 20:17 |
| * shardy sees if it applies cleanly | 20:18 | |
| *** kebray has quit IRC | 20:20 | |
| miguelgrinberg | shardy: sorry, I missed the backport flag. Let me know if you need any help with this. I'm well setup to test this condition on Juno if necessary. | 20:21 |
| *** achanda has quit IRC | 20:21 | |
| larsks | shardy: Ooo, nifty; I was just going to ask if there was a bug. Thanks. | 20:23 |
| *** andersonvom has quit IRC | 20:24 | |
| *** andersonvom has joined #heat | 20:26 | |
| shardy | miguelgrinberg: no worries, I wasn't necessarily expecting you do it, I just set it as a reminder to myself more than anything | 20:27 |
| shardy | evidently it didn't work ;) | 20:27 |
| shardy | Patch applies with only a little conflict mangling | 20:27 |
| miguelgrinberg | okay, great | 20:28 |
| shardy | I don't have a Juno environment I can test with, so I'll push it if the local unit tests pass | 20:28 |
| shardy | larsks: do you still have your juno box, or did you completely rebuild w/heat-master? | 20:29 |
| larsks | shardy: It is running heat-master right now, but I could tear that out and re-install the juno packages and re-create the database. | 20:30 |
| larsks | I am happy to test things if that's what you're looking for. | 20:31 |
| shardy | larsks: if you can try this backport without burning loads of time on it that would be great | 20:33 |
| larsks | Sure! | 20:33 |
| *** logan2 has quit IRC | 20:33 | |
| shardy | miguelgrinberg: ah, you said you're well setup to test this too :) | 20:34 |
| * shardy is relieved he's not having to tear down his brand-new devstack ;) | 20:34 | |
| *** lkarm1 has joined #heat | 20:35 | |
| *** lkarm has quit IRC | 20:35 | |
| shardy | https://review.openstack.org/182446 | 20:35 |
| miguelgrinberg | shardy: I did, just need to boot a Juno system, takes about 45min. I'll get one started. | 20:35 |
| shardy | larsks, miguelgrinberg ^^ | 20:35 |
| miguelgrinberg | shardy: I'll report later today on the patch. | 20:36 |
| *** achanda has joined #heat | 20:36 | |
| shardy | miguelgrinberg: that would be great, thanks! | 20:36 |
| *** openstackgerrit has quit IRC | 20:37 | |
| *** openstackgerrit has joined #heat | 20:37 | |
| *** pm90_ has quit IRC | 20:39 | |
| *** pm90_ has joined #heat | 20:40 | |
| shardy | miguelgrinberg: I'm calling it a day soon, feel free to push to that patch if needed | 20:42 |
| stevebaker | morning | 20:43 |
| miguelgrinberg | shardy: will do, have a good night | 20:43 |
| shardy | the pep tests passed locally, but the unit tests were very broken (most likely due to my local environment) | 20:43 |
| shardy | hey stevebaker | 20:43 |
| shardy | thanks for doing the heatclient release :) | 20:44 |
| *** radez is now known as radez_g0n3 | 20:44 | |
| stevebaker | shardy: no problem. I may attempt triggering a package update and managing with hooks today, if I can assemble all the bits | 20:45 |
| shardy | stevebaker: cool, hook-poll is slow but it all seems to work now | 20:46 |
| shardy | I've rebased and re-tested my t-h-t and devtest patches today, it all seems to work well with latest heatclient/heat | 20:47 |
| stevebaker | shardy: does it require stack events? | 20:47 |
| shardy | stevebaker: yeah, it needs the patch adding stack events and latest heatclient | 20:47 |
| stevebaker | ok | 20:47 |
| *** lkarm1 has left #heat | 20:52 | |
| *** e0ne has quit IRC | 20:52 | |
| *** e0ne has joined #heat | 20:53 | |
| shardy | stevebaker: I updated the commit message of https://review.openstack.org/#/c/162109/ with links to all the required bits | 20:55 |
| *** asalkeld has joined #heat | 20:59 | |
| *** kebray has joined #heat | 21:01 | |
| *** shardy is now known as shardy_z | 21:02 | |
| *** e0ne has quit IRC | 21:03 | |
| *** MasterPiece has joined #heat | 21:10 | |
| *** Raj3 has joined #heat | 21:13 | |
| *** Raj4 has joined #heat | 21:14 | |
| *** Raj4 has quit IRC | 21:17 | |
| *** Raj4 has joined #heat | 21:17 | |
| *** Raj3 has quit IRC | 21:17 | |
| *** EricGonczer_ has quit IRC | 21:23 | |
| *** chlong has quit IRC | 21:24 | |
| *** rpothier has quit IRC | 21:26 | |
| *** andersonvom has quit IRC | 21:31 | |
| *** alexheneveld has quit IRC | 21:32 | |
| *** jasond` has quit IRC | 21:33 | |
| *** SpamapS has quit IRC | 21:34 | |
| *** SpamapS has joined #heat | 21:34 | |
| *** jaime49 has quit IRC | 21:42 | |
| *** crose has quit IRC | 21:44 | |
| *** alexheneveld has joined #heat | 21:45 | |
| *** cdent has quit IRC | 21:47 | |
| *** pm90_ has quit IRC | 21:50 | |
| *** andersonvom has joined #heat | 21:51 | |
| *** andersonvom has quit IRC | 21:55 | |
| *** DaveJ__ has joined #heat | 21:59 | |
| *** kebray has quit IRC | 22:04 | |
| *** Raj4 has quit IRC | 22:05 | |
| *** hdd_ has quit IRC | 22:06 | |
| *** Raj3 has joined #heat | 22:06 | |
| *** cyli has quit IRC | 22:09 | |
| *** Marga__ has joined #heat | 22:09 | |
| *** andersonvom has joined #heat | 22:10 | |
| *** Marga_ has quit IRC | 22:10 | |
| *** cyli_ has joined #heat | 22:10 | |
| *** jaypipes has quit IRC | 22:13 | |
| *** andersonvom has quit IRC | 22:15 | |
| *** logan2 has joined #heat | 22:18 | |
| *** signed8b_ has joined #heat | 22:23 | |
| *** thedodd has quit IRC | 22:24 | |
| *** alexheneveld has quit IRC | 22:25 | |
| *** signed8bit has quit IRC | 22:25 | |
| *** dims_ has joined #heat | 22:28 | |
| *** sdake_ has joined #heat | 22:29 | |
| *** dims has quit IRC | 22:30 | |
| *** sdake has quit IRC | 22:33 | |
| *** sdake has joined #heat | 22:43 | |
| *** alanf-mc has quit IRC | 22:44 | |
| *** alanf-mc has joined #heat | 22:45 | |
| *** sdake_ has quit IRC | 22:46 | |
| *** alanf-mc has quit IRC | 22:50 | |
| *** alanf-mc has joined #heat | 22:51 | |
| *** alexheneveld has joined #heat | 22:53 | |
| *** dhubbard has quit IRC | 22:54 | |
| *** pm90_ has joined #heat | 22:57 | |
| *** pm90_ has quit IRC | 22:58 | |
| *** pm90_ has joined #heat | 22:58 | |
| *** alexheneveld has quit IRC | 23:00 | |
| *** derekh has joined #heat | 23:04 | |
| *** kebray has joined #heat | 23:09 | |
| *** dhubbard has joined #heat | 23:09 | |
| *** dhubbard has quit IRC | 23:09 | |
| *** dhubbard has joined #heat | 23:10 | |
| *** dhubbard has quit IRC | 23:10 | |
| *** dhubbard has joined #heat | 23:10 | |
| *** andersonvom has joined #heat | 23:11 | |
| *** smccully has quit IRC | 23:14 | |
| *** andersonvom has quit IRC | 23:15 | |
| *** chlong has joined #heat | 23:16 | |
| *** EricGonczer_ has joined #heat | 23:16 | |
| *** sabeen2 has quit IRC | 23:16 | |
| *** Marga__ has quit IRC | 23:17 | |
| *** Marga_ has joined #heat | 23:18 | |
| *** dhubbard has quit IRC | 23:19 | |
| *** dhubbard has joined #heat | 23:19 | |
| *** signed8b_ is now known as signed8bit_ZZZzz | 23:21 | |
| *** smccully has joined #heat | 23:24 | |
| *** Raj3 has quit IRC | 23:24 | |
| *** Marga_ has quit IRC | 23:25 | |
| *** Marga_ has joined #heat | 23:26 | |
| *** tochi has joined #heat | 23:29 | |
| openstackgerrit | Merged openstack/heat-specs: Enhance Manage Service with service-stack and vice-versa https://review.openstack.org/168658 | 23:32 |
| *** Raj3 has joined #heat | 23:32 | |
| asalkeld | stevebaker: https://etherpad.openstack.org/p/YVR-heat-liberty-template-format | 23:33 |
| asalkeld | slightly suprised about the yaql | 23:33 |
| asalkeld | could talk about other stuff | 23:33 |
| *** Raj3 has quit IRC | 23:37 | |
| *** EricGonc_ has joined #heat | 23:49 | |
| miguelgrinberg | stevebaker: are you still looking into the juno gate failures? | 23:52 |
| *** Tango has quit IRC | 23:52 | |
| *** EricGonczer_ has quit IRC | 23:53 | |
| *** pm90_ has quit IRC | 23:55 | |
| *** jaime49 has joined #heat | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!