Wednesday, 2015-12-16

*** pratikma_ has quit IRC00:02
*** e0ne has quit IRC00:04
*** sthillma has joined #heat00:04
*** pratikmallya has joined #heat00:07
*** cwolferh has joined #heat00:12
*** randallburt has quit IRC00:16
*** Qiming has quit IRC00:16
*** randallburt has joined #heat00:25
*** cwolferh has quit IRC00:25
*** cwolferh has joined #heat00:25
*** sridhar_ram1 has joined #heat00:28
*** sridhar_ram has quit IRC00:31
*** Marga_ has joined #heat00:35
*** david-lyle has joined #heat00:36
*** david-lyle_ has quit IRC00:36
openstackgerritMerged openstack/python-heatclient: remove py26 specific code from heatclient  https://review.openstack.org/25715600:48
*** manishg has joined #heat00:49
*** manishg has quit IRC00:51
*** manishg has joined #heat00:52
*** signed8bit has quit IRC00:55
*** Drago has quit IRC00:56
*** signed8bit has joined #heat00:57
*** signed8bit has quit IRC00:58
*** sridhar_ram1 is now known as sridhar_ram01:01
openstackgerrithuangtianhua proposed openstack/heat: Add release note for bp/support-neutron-qos  https://review.openstack.org/25777801:05
*** zeih has joined #heat01:21
*** chlong has joined #heat01:21
*** ricolin has joined #heat01:23
*** dyasny has joined #heat01:23
*** zeih has quit IRC01:26
*** randallburt has quit IRC01:27
*** Qiming has joined #heat01:36
*** pratikmallya has quit IRC01:38
*** zhenguo has joined #heat01:47
*** zeih has joined #heat01:48
*** Yanyanhu has joined #heat01:49
*** dixiaoli has joined #heat01:49
*** elynn has joined #heat01:52
*** zeih has quit IRC01:53
*** elynn_ has joined #heat01:57
*** elynn has quit IRC01:58
*** dims has quit IRC01:59
*** sthillma has quit IRC02:03
*** cwolferh has quit IRC02:08
*** vishwanathj has quit IRC02:15
*** dyasny has quit IRC02:17
*** dyasny has joined #heat02:18
*** Shangxdy has joined #heat02:26
*** manishg has quit IRC02:29
*** sridhar_ram has quit IRC02:37
*** sdake has joined #heat02:53
*** dyasny has quit IRC03:06
openstackgerritMerged openstack/python-heatclient: Updated from global requirements  https://review.openstack.org/25715803:12
*** dyasny has joined #heat03:13
* jamespd is looking for some docs on using OS::Heat::Stack for multi-region stacks.03:14
jamespdanyone able to point me towards an example?03:14
Qimingjamespd, http://git.openstack.org/cgit/openstack/heat/tree/heat/engine/resources/openstack/heat/remote_stack.py03:17
Qimingit is a resource type for creating/managing a 'remote' stack03:17
Qimingby 'remote', I mean it enables you to specify a region_name for that stack03:17
Qimingyou will need to configure your keystone endpoints so that you have a orchestration endpoint for the new region03:18
jamespdyes, I have a keystone endpoint and two regions with kilo heat in each.03:19
jamespdI'd like to orchrestrate a Neutron VPN between the two regions.03:19
jamespdbut I'm not sure what the structure of my template should be.03:19
* jamespd would be happy with any template that shows a basic multi-region use case.03:20
Qimingokay, then you need to play with the OS::Neutron::VPNService resource type03:21
QimingI'm not aware of any existing sample templates on this03:21
*** yuanying has quit IRC03:22
Qimingthere is only a simple one here: http://git.openstack.org/cgit/openstack/heat-templates/tree/hot/multi_region_hello_world.yaml03:22
*** tiantian has quit IRC03:22
jamespdQiming: this example looks perfect. Thanks for pointing me at it.03:24
*** tiantian has joined #heat03:24
jamespdI pulled from that repo and failed to see the multi region one.  sorry to bother you!03:24
Qimingjamespd, never mind03:24
*** tochi has quit IRC03:30
*** bana_k has quit IRC03:31
openstackgerritDi XiaoLi proposed openstack/heat: Add OS::Neutron::RBACPolicy resource  https://review.openstack.org/25572003:39
*** ricolin has quit IRC03:39
openstackgerritDi XiaoLi proposed openstack/heat-specs: Support Role-based Access Control for Networks in Heat  https://review.openstack.org/25403703:42
*** dims has joined #heat03:45
*** neelashah has joined #heat03:47
*** gberginc has joined #heat03:50
*** liusheng has quit IRC03:53
*** liusheng has joined #heat03:54
*** ricolin has joined #heat03:56
*** dyasny has quit IRC03:57
*** ricolin has quit IRC04:01
openstackgerritMerged openstack/python-heatclient: Add JsonFormat display option  https://review.openstack.org/25552304:03
*** tochi has joined #heat04:04
*** yuanying has joined #heat04:07
*** elynn_ has quit IRC04:12
*** ricolin has joined #heat04:15
*** neelashah has quit IRC04:19
*** dims has quit IRC04:20
*** KanagarajM has joined #heat04:27
KanagarajMgood morning all !04:28
*** sdake has quit IRC04:40
*** sdake has joined #heat04:41
cmystermorning04:50
*** sthillma has joined #heat05:00
*** elynn_ has joined #heat05:00
*** sthillma_ has joined #heat05:01
*** Shangxdy has quit IRC05:03
*** sthillma has quit IRC05:05
*** sthillma_ is now known as sthillma05:05
*** ananta has joined #heat05:06
ricolinmorning05:06
*** ryansb has quit IRC05:11
cmystermorning05:15
anantamorning05:20
*** zeih has joined #heat05:30
*** bana_k has joined #heat05:32
*** links has joined #heat05:34
*** zeih has quit IRC05:35
openstackgerritRabi Mishra proposed openstack/heat: Fix port handle_update to use prop_diff  https://review.openstack.org/25632805:36
openstackgerritRabi Mishra proposed openstack/heat: Don't call neutron when there is no prop_diff  https://review.openstack.org/25176205:36
openstackgerritRabi Mishra proposed openstack/heat: Fix OS::Neutron:Net handle_update  https://review.openstack.org/25515805:36
openstackgerritRabi Mishra proposed openstack/heat: Fix provider_net resource update  https://review.openstack.org/25219205:36
*** Marga_ has quit IRC05:39
*** Marga_ has joined #heat05:40
openstackgerritDi XiaoLi proposed openstack/python-heatclient: OpenstackClient plugin for software deployment show  https://review.openstack.org/24906705:45
openstackgerritRabi Mishra proposed openstack/heat: Restrict update/replace of resource  https://review.openstack.org/25307405:48
*** gberginc has quit IRC05:49
openstackgerritDi XiaoLi proposed openstack/python-heatclient: OpenstackClient plugin for software deployment list  https://review.openstack.org/24912705:53
*** pratikmallya has joined #heat05:55
*** vijayagurug has joined #heat06:00
*** hdd has quit IRC06:19
*** sthillma has quit IRC06:23
*** gberginc has joined #heat06:29
*** KanagarajM_ has joined #heat06:31
*** KanagarajM_ has quit IRC06:32
*** Marga_ has quit IRC06:32
*** KanagarajM_ has joined #heat06:32
*** Marga_ has joined #heat06:33
*** KanagarajM has quit IRC06:35
*** signed8bit has joined #heat06:42
ramishra_gate-grenade-dsvm-heat is failing again06:53
ramishra_:(06:53
therveramishra_, Please don't do rechecks without looking at the logs :)06:54
therveAlso what the hell grenade06:54
therveALSO PLEASE DON'T DO BLANK RECHECKS AT ALL THANK YOU06:55
ramishra_therve: I did look at the logs before rechecking one or two.06:59
ramishra_therve:  http://logs.openstack.org/92/252192/8/check/gate-grenade-dsvm-heat/7a99180/console.html#_2015-12-16_05_56_10_71106:59
ramishra_http://logs.openstack.org/92/252192/8/check/gate-grenade-dsvm-heat/7a99180/logs/devstack-gate-setup-workspace-new.txt.gz#_2015-12-16_05_49_23_53206:59
therveramishra_, At any rate blank rechecks never help07:00
therveThat's not the issue07:00
thervehttps://review.openstack.org/#/c/257537/ most likely07:00
ramishra_hmm.. I mostly don't do blank checks though:)07:01
therveGreat. Change mostly to never :p07:03
ramishra_Infra is not reliable to make that 'never' though;)07:05
therveThey generally have bugs to track unreliable components07:05
*** pratikmallya has quit IRC07:11
*** ricolin has quit IRC07:11
*** pas-ha has joined #heat07:13
*** KanagarajM has joined #heat07:13
pas-hamorning all07:13
*** vishwanathj has joined #heat07:14
*** KanagarajM_ has quit IRC07:17
*** pas-ha has quit IRC07:18
*** signed8bit has quit IRC07:19
skraynevmorning07:22
therveramishra_, https://review.openstack.org/#/c/258291/07:22
skraynevramishra_: heh. new day - new fail on grenade07:23
*** boris-42_ has quit IRC07:23
ramishra_therve: yeah following the conversation on #openstack-infra07:23
therveCool07:24
*** ricolin has joined #heat07:24
ramishra_skraynev:  yeah:) disruptive changes from infra;)07:25
skraynevramishra_: exactly07:26
ramishra_we should start the day with 'good morning and the gate is green for a change'07:27
*** pas-ha has joined #heat07:31
*** sthillma has joined #heat07:40
*** sdake has quit IRC07:47
*** sdake has joined #heat07:49
openstackgerritRui Chen proposed openstack/python-heatclient: Fix Resource.__eq__ mismatch semantics of object equal  https://review.openstack.org/25183007:53
*** jprovazn has joined #heat08:02
openstackgerritDi XiaoLi proposed openstack/python-heatclient: OpenstackClient plugin for software deployment delete  https://review.openstack.org/24972408:04
openstackgerritjaveme proposed openstack/heat: oslo_middleware.http_proxy_to_wsgi instead of ssl  https://review.openstack.org/25831108:08
*** yuanying has quit IRC08:09
*** chlong has quit IRC08:17
*** e0ne has joined #heat08:18
*** sthillma has quit IRC08:18
*** e0ne has quit IRC08:23
*** rakesh_hs has joined #heat08:23
*** e0ne has joined #heat08:24
*** shardy has joined #heat08:25
openstackgerritEthan Lynn proposed openstack/heat: Add handle_update for senlin cluster  https://review.openstack.org/25834408:33
skraynevsahrdy: short/fast question :) Do I correctly understand, that I may abandon this one https://review.openstack.org/#/c/214222/2 in favor of your patch https://review.openstack.org/#/c/254755/1 ?08:34
*** jtomasek has joined #heat08:36
*** tochi has quit IRC08:36
skraynevshardy: ^08:36
openstackgerritKanagaraj Manickam proposed openstack/heat: Stack resource search  https://review.openstack.org/25786508:37
skraynevsorry. fast printing == typos in words :)08:37
openstackgerritKanagaraj Manickam proposed openstack/python-heatclient: Stack resource search  https://review.openstack.org/25786408:38
*** sdake has quit IRC08:39
*** zeih has joined #heat08:43
*** bana_k has quit IRC08:47
*** jcoufal has joined #heat08:52
openstackgerritjaveme proposed openstack/heat: remove the mutable default arguments "[]" or "{}"  https://review.openstack.org/25835208:52
shardyskraynev: Yes, that should be obsoleted by my patch as we no longer need to set auth_uri08:54
shardyskraynev: I'll see if I can chase for a +A on mine today as it already has a +2 and is passing CI08:55
*** dims has joined #heat08:55
skraynevshardy: Cool. it will be really awesome :) thx08:56
*** e0ne has quit IRC09:04
*** blues-man has joined #heat09:06
*** vishwanathj has quit IRC09:06
*** ricolin has quit IRC09:06
*** yassine__ has joined #heat09:08
*** dims has quit IRC09:13
*** jistr has joined #heat09:13
*** sorantis has joined #heat09:39
openstackgerritDi XiaoLi proposed openstack/python-heatclient: OpenstackClient plugin for software deployment delete  https://review.openstack.org/24972409:53
*** e0ne has joined #heat09:57
*** zhenguo has quit IRC10:00
openstackgerritRabi Mishra proposed openstack/heat: Use flavors.find interface to find flavors  https://review.openstack.org/25838410:01
*** Qiming has quit IRC10:05
*** dixiaoli has quit IRC10:14
*** Yanyanhu has quit IRC10:27
*** Kennan has quit IRC10:33
openstackgerritSergey Kraynev proposed openstack/heat: Unify workers options for API services  https://review.openstack.org/25472810:35
*** Kennan has joined #heat10:37
*** yassine__ has quit IRC10:46
*** elynn_ has quit IRC10:58
*** coolsvap is now known as coolsvap|away11:01
openstackgerritMerged openstack/heat: Re-enable ceilometer test  https://review.openstack.org/25408111:08
openstackgerritMerged openstack/heat: remove the mutable default arguments "[]" or "{}"  https://review.openstack.org/25835211:11
openstackgerritMerged openstack/heat: Updated from global requirements  https://review.openstack.org/25648011:11
*** vgridnev has joined #heat11:13
*** Qiming has joined #heat11:15
*** pratikmallya has joined #heat11:24
*** ananta has quit IRC11:27
*** ryansb has joined #heat11:34
*** ryansb has quit IRC11:34
*** ryansb has joined #heat11:34
*** pratikmallya has quit IRC11:44
openstackgerritRabi Mishra proposed openstack/heat: Use flavors.find interface to find flavors  https://review.openstack.org/25838411:44
openstackgerritOleksii Chuprykov proposed openstack/python-heatclient: Resolve outputs from stack object  https://review.openstack.org/25796311:55
*** KanagarajM has quit IRC11:56
*** sorantis_ has joined #heat12:04
*** vgridnev has quit IRC12:04
*** yassine__ has joined #heat12:05
*** sorantis has quit IRC12:06
*** sorantis_ is now known as sorantis12:06
*** vgridnev has joined #heat12:10
openstackgerritSergey Kraynev proposed openstack/heat: Unify workers options for API services  https://review.openstack.org/25472812:15
cn28hcan an environment file contain intrinsic calls? Will heat actually execute them?12:40
cn28hI realize for some, like get_param, it may not make sense12:41
shardycn28h: No, it can't12:48
openstackgerritSteven Hardy proposed openstack/heat: Neutron port allow switching between network_id and network  https://review.openstack.org/25796612:48
cn28hok, yeah that's not too surprising. Thanks12:48
*** dprince has joined #heat12:48
*** jcoufal has quit IRC12:52
*** jcoufal has joined #heat12:55
*** links has quit IRC12:57
*** sorantis has quit IRC13:03
*** sorantis has joined #heat13:05
*** pratikmallya has joined #heat13:09
*** shardy has quit IRC13:10
*** chlong has joined #heat13:11
*** shardy has joined #heat13:12
pas-haall, what's the point of gate-tempest-dsvm-neutron-src-python-heatclient? it seems it executes tempest that is using its own clients.13:16
pas-haall the Heat scenario tests are skipped as Heat is not enabled on this gate13:16
*** zhenguo has joined #heat13:16
pas-haand Heat API tests too. so what does it test? and it runs for more than an hour13:17
pas-haeven if the intention was to test heatclient re working when called from other services, to my knowledge no other projects except murano, sahara and mistral are using heatclient. but this gate does not have them enabled either13:20
pas-haskraynev, ^13:21
*** pratikmallya has quit IRC13:24
*** rakesh_hs has quit IRC13:26
skraynevpas-ha: we can discuss it on meeting today13:26
pas-haок13:26
pas-haok13:26
skraynev@pas-ha could you add it to agenda&13:26
skraynev?13:26
pas-haskraynev, done13:32
skraynevpas-ha, thx13:32
skraynev :)13:32
openstackgerritSergey Kraynev proposed openstack/heat: Unify workers options for API services  https://review.openstack.org/25472813:46
*** liusheng has quit IRC13:52
*** liusheng has joined #heat13:53
openstackgerritOleksii Chuprykov proposed openstack/python-heatclient: Resolve outputs from stack object  https://review.openstack.org/25796313:56
*** dyasny has joined #heat13:57
*** gberginc has quit IRC14:00
*** gberginc has joined #heat14:00
*** dyasny has quit IRC14:02
*** dyasny has joined #heat14:03
ramishra_skraynev:  hi would you be able to review/approve these two backports for liberty?  https://review.openstack.org/#/c/253388,  https://review.openstack.org/#/c/255856/14:03
*** gberginc has quit IRC14:04
jdobshardy: ping14:05
skraynevramishra_: done14:06
ramishra_skraynev:  thanks:)14:06
skraynevramishra_: np. I just worried about second patch. But tests look ok, so I suppose, it should work correct for liberty too14:07
ramishra_yeah, it would:)14:07
*** jonesbr has joined #heat14:09
*** mdavidson has quit IRC14:11
jdobskraynev: got a quick second to give me a second opinion on something?14:11
shardyjdob: Hi!14:14
jdobhey :)  can you check out rabi's comment on https://review.openstack.org/#/c/228615/5/specs/mitaka/resource-chains.rst  about serialize v. something else?14:14
jdobi could go either way, so i'm curious what others think14:14
shardyramishra_: Hey, I guess it's getting late for you, but if you get a moment pls check out the revised https://review.openstack.org/#/c/257966/ :)14:14
*** rpothier has joined #heat14:15
jdobshardy: you too on the above comment ^14:15
jdobhoping to get the name of that property nailed down before I revise the patch and spec14:16
jdobfigured it'd be quicker in chat14:16
shardyjdob: meh.  FWIW I'm fine with serialize as it's terse and communicates it's purpose pretty clearly14:17
jdobterse is what I was leaning towards too, if we changed it i'd prefer "ordered" over "ordered_dependency"14:17
*** dixiaoli has joined #heat14:18
shardyjdob: If I have a single thread, my jobs are serialized vs If I have a single thread, my jobs have an implicit orderered dependency14:19
shardywhich is clearer?14:19
jdobanother option is to flip the idea and call it "concurrent" and default to false14:20
shardyI'll go with the consensus, but my vote goes on the former14:20
*** neelashah has joined #heat14:21
shardyjdob: +1 on that, as "Chain" does somewhat imply serialized anyway14:21
jdobi'm kinda liking that idea too, especially since the default is to do it in order, so you'd explicitly go out of your way to indicate you want concurrent14:21
jdobramishra_: that sound good to you? ^14:21
ramishra_jdob: I'm not hung up about it :)14:22
jdobgotcha, wanted to make sure it didnt seem like I was ignoring the comment14:22
*** tiantian has quit IRC14:23
*** tiantian has joined #heat14:24
ramishra_shardy: I've a few questions aboout https://review.openstack.org/#/c/257966/14:24
shardyramishra_: sure14:24
ramishra_shardy:  do we need this check 'if None not in (before_net, after_net):' as NETWORK is a now required property?14:25
*** jprovazn has quit IRC14:25
*** vishwanathj has joined #heat14:26
ramishra_also can we not exclude NETWORK_ID from update_exclude_properties.  As  this is checked after the translation and I think it would be removed during translation.14:26
ramishra_the last one, can we not check 'if after_props != before_props' before comparing the ids?14:28
*** signed8bit has joined #heat14:29
ramishra_I mean in the beginning itslef.14:29
*** ricolin has joined #heat14:29
openstackgerritJay Dobies proposed openstack/heat-specs: Added resource chains spec  https://review.openstack.org/22861514:31
*** jcoufal has quit IRC14:34
shardyramishra_: good points, I think before I was assuming we could get either NETWORK or NETWORK_ID, and wanted to avoid the lookup by name failing if NETWORK was None14:35
shardyseems that may not be needed due to translation tho, although it will completely break the test14:35
shardyI'll see if I can fix the test and remove it14:35
shardy(the test feeds the properties in directly, which bypasses all the translation)14:35
shardyramishra_: I'll look to address those in the next revision, feel free to comment on the review, thanks14:37
ramishra_sorry about that, I pulled it and tested with the changes, and it seems only test_port_needs_update needs fixing14:37
shardyramishra_: ack, thanks!14:37
*** sdake has joined #heat14:39
shardyramishra_: if before_props and after_props are the same, do we even call _needs_update?14:40
shardyOh, it seems we do14:40
ramishra_yeah14:40
shardythat's not how it used to be done, I was remembering the old prop_diff way ;)14:41
*** zeih_ has joined #heat14:45
*** zeih has quit IRC14:45
*** jcoufal has joined #heat14:48
*** signed8bit is now known as signed8bit_ZZZzz14:53
*** vijayagurug has quit IRC14:54
*** vijendar has joined #heat14:54
*** signed8bit_ZZZzz is now known as signed8bit14:58
*** sdake has quit IRC14:59
openstackgerritSteven Hardy proposed openstack/heat: Neutron port allow switching between network_id and network  https://review.openstack.org/25796614:59
shardyramishra_: ^^14:59
*** derekh has joined #heat15:01
*** vijendar has quit IRC15:02
*** vijendar has joined #heat15:03
*** EricGonczer_ has joined #heat15:03
*** spotz_zzz is now known as spotz15:04
*** vijendar has quit IRC15:07
openstackgerritJay Dobies proposed openstack/heat: Added ResourceChain plugin  https://review.openstack.org/25001015:08
*** jaosorior has joined #heat15:11
*** manishg has joined #heat15:15
*** sabeen1 has joined #heat15:15
*** spzala has joined #heat15:16
*** Qiming has quit IRC15:16
*** Marga_ has quit IRC15:23
*** Marga_ has joined #heat15:23
*** manishg has quit IRC15:25
*** sabeen1 has quit IRC15:30
*** manishg has joined #heat15:31
al_indigoguys, can't catch what's wrong. Trying to create cluster with sahara and everything stuck on the following15:33
al_indigo2015-12-16 10:20:50.105 909 INFO heat.engine.resource [req-001938fd-3951-4bce-a2ef-f4d9e8f8187e admin admin - - -] Validating SecurityGroup "ttrt-test-master-default-network-2de98dba"15:34
al_indigo2015-12-16 10:20:50.149 909 INFO heat.engine.resource [req-001938fd-3951-4bce-a2ef-f4d9e8f8187e admin admin - - -] Validating Port "port"15:34
al_indigo2015-12-16 10:20:50.295 909 INFO heat.engine.resource [req-001938fd-3951-4bce-a2ef-f4d9e8f8187e admin admin - - -] Validating HeatWaitConditionHandle "test-master-default-network-wc-handle"15:34
al_indigo2015-12-16 10:20:50.296 909 INFO heat.engine.resource [req-001938fd-3951-4bce-a2ef-f4d9e8f8187e admin admin - - -] Validating FloatingIP "floating_ip"15:34
al_indigo2015-12-16 10:20:50.409 909 INFO heat.engine.resource [req-001938fd-3951-4bce-a2ef-f4d9e8f8187e admin admin - - -] Validating Server "inst"15:34
al_indigoAfter that everything fails with "MessagingTimeout: Timed out waiting for a reply to message ID f66530685382490b94ccd4356511ad34"15:34
al_indigoHow can I see what was that message?15:34
shardyal_indigo: Have you checked that rabbit is still running OK?15:35
al_indigo*I've changed timeout from 60 to 300 seconds, result is the same15:35
al_indigoshardy, yes, rabbit is ok and the rest of the openstack works fine - i can create instances15:35
al_indigoand they totally work - even when i create 50 at once15:36
al_indigoBut every attempt to create CDH cluster fails the same way. The last hope is to make Sahara use direct_engine, but I would like to use Heat if it's possible15:37
al_indigoCan I intercept messages any way? I just can't understand what exactly Heat is trying to do here15:38
shardyal_indigo: are you creating a large deployment, with lots of nested stacks?15:38
al_indigoshardy, Don't think so - I use a template with one master and 4 slaves (the same template works in devstack all-in-one installation)15:39
al_indigoshardy, Just don't have any clues: instances are not spawned at the moment of failure15:40
shardyal_indigo: Ok, so it works in devstack, what is different in the environment where it fails, older heat?15:40
shardyor are you just attempting a much bigger deployment?15:40
al_indigoshardy, devstack is a single machine with one network. Big deployment is 4TB cluster with 16 compute nodes and 7 controller machines15:41
*** dixiaoli has quit IRC15:41
shardyal_indigo: Ok, seeing the full heat-engine backtrace would help here15:41
*** zeih_ has quit IRC15:41
al_indigoshardy, so it's really difficult to catch a difference15:41
shardyal_indigo: the main thing we use RPC for (other than API->Engine messaging) is creating nested stacks (engine->engine)15:42
*** vgridnev has quit IRC15:42
al_indigoshardy, one moment, I'll try to get clear logs15:42
*** Drago has joined #heat15:42
al_indigo*it may take a minute or two15:42
Dragoshardy: ping15:43
shardyDrago: Hi!15:43
Dragoshardy: Hey :)15:44
DragoMore discussion about that code to remove15:44
*** spotz is now known as spotz_zzz15:45
Dragoshardy: (this code) https://github.com/openstack/heat/blob/master/heat/engine/resources/stack_user.py#L7615:45
al_indigoshardy, heat-engine.log https://gist.github.com/al-indigo/d500b16812f24b562a2c15:47
al_indigoshardy, heat-api-cfn.log https://gist.github.com/al-indigo/f785bb7c2ecf7b68707f15:47
al_indigoshardy, heat-api.log https://gist.github.com/al-indigo/01ea511590cd0c03a03e15:47
al_indigoshardy, all logs for clean restart - I've restarted Heat and Sahara and tried to create cluster.15:48
*** sdake has joined #heat15:48
*** signed8bit is now known as signed8bit_ZZZzz15:49
Dragoshardy: I've investigated a couple of approaches to this, and the seem to all end up messy. The first, which we came up with in our previous discussion, requires logging an error in place of that code. However, I don't think it'd be a good idea to always log an error, only when user_id should be set and isn't. So I was thinking of adding a _should_have_user_id method15:49
*** zhenguo has quit IRC15:49
*** signed8bit_ZZZzz is now known as signed8bit15:49
shardyal_indigo: stack_resource.py is where the timeout happens, which means it's one heat-engine timing out trying to poll another heat-engine (probably one on a different controller)15:50
therveal_indigo, Try to reduce the number of workers maybe15:50
therveOr what shardy said15:50
shardyal_indigo: when creating nested stacks (stack_resource.py) heat round-robins the nested stacks onto all available heat-engines15:50
shardyso, yeah, check none of the heat-engines have died, and check logs on each of them15:51
shardyto see if one fell over15:51
shardyand if not, try reducing the API workers as therve mentions, as it's possible the API workers are hitting the engines too hard (but with a long timeout it should still work)15:51
al_indigoshardy, therve, I'll try to reduce number of workers. All of them are on one physical node, and they are a lot15:52
shardyal_indigo: you could also try a simple stress test, e.g a ResourceGroup containing a lot of nested stacks15:52
shardyto prove you don't have one bad or misconfigured controller15:53
al_indigoshardy, I thought all of the workers are writing logs to the files I've sent to you15:53
openstackgerritJoe D'Andrea proposed openstack/heat: Explicitly naming resources in "unsupported" warnings  https://review.openstack.org/25747715:53
therveal_indigo, heat is only installed on one controller?15:53
al_indigotherve, Yes15:53
therveAh ok. So yeah that's strange15:54
shardyal_indigo: Ok, I thought you said 7 controllers?15:54
shardyI assumed that meant multi-node heat15:54
al_indigofor the other services :)15:54
al_indigono-no, multinode openstack15:55
shardyAh, Ok so heat isn't scaled out15:55
*** sabeen1 has joined #heat15:55
Dragoshardy: as in `elif self._should_have_user_id(): log.error(…)`. The problem with this is that the method would need to be implemented in particular resources, but called in stack_user. For nova, it'd be if one of these 3 transport types https://github.com/openstack/heat/blob/master/heat/engine/resources/openstack/nova/server.py#L644-L649 The problem is that I'd have to somehow pass in props to this method because the transport is updatable (sometimes it's self.p15:56
*** vijayagurug has joined #heat15:57
shardyDrago: Hmm, so why can't we just log an error when the user id isn't in the resource data?15:57
openstackgerritJoe D'Andrea proposed openstack/heat: Explicitly naming resources in "unsupported" warnings  https://review.openstack.org/25747715:57
al_indigoshardy, I've set 4 workers for heat-api and 4 for heat-api-cfn -- the same result15:57
Dragoshardy: because it's normal to not be in the resource data15:58
shardyal_indigo: if you do ps ax | grep heat-engine, how many workers are there?15:58
al_indigoshardy, hmm, 2615:58
Dragoshardy: such as the case of temp_url. In this case, there's no user and self._delete_user (which is called no matter what) should get no user_id from _get_user_id and therefore skip trying to delete the user15:58
*** zeih has joined #heat15:58
al_indigowhat section in responsible for them?15:58
al_indigo*is15:59
shardyal_indigo: num_engine_workers in heat.conf15:59
al_indigooh, i found15:59
al_indigothanks15:59
al_indigoone sec, i'll try once more15:59
shardyal_indigo: I'd try a smaller number, say 4 to match the API16:00
*** crose has joined #heat16:00
*** sabeen3 has joined #heat16:00
*** spotz_zzz is now known as spotz16:00
*** sdake has quit IRC16:00
shardyal_indigo: it should default to 1 worker per core, so I assume this is a fairly serious machine ;)16:00
*** manishg has quit IRC16:01
shardyDrago: No, it's normal for self.data().get('user_id') to return an ID16:01
shardyunless your stack is from a very old version of heat16:02
*** sabeen1 has quit IRC16:02
shardyDrago: so I though we agreed it was OK to log an error when it doesn't and perhaps provide a means to manually migrate any very old stacks with the data in the resource_id instead of resource data()16:02
al_indigoshardy, https://gist.github.com/al-indigo/f9e5d16ead360c9a8acb16:03
shardyDrago: Ah, yeah tempurl16:03
Dragoshardy: I'm under the impression that user_id is (supposed to be) only populated if a user has been created16:03
*** zeih has quit IRC16:03
shardywe'd have to special case those, but it should be per-transport not per resource, right?16:03
al_indigoshardy, pretty much the same for me. But I've noticed that there are also another Validating Server "inst" that succed16:03
al_indigo*succeed16:03
Dragoshardy: well, the two resources that use a stack user are nova server and software deployment16:04
al_indigoshardy, It's 32 core server. We are using Liberty for all components (github tagged versions)16:04
al_indigoshardy, do you have any clues with the last log?16:06
Dragoshardy: I feel like the special case would have to be in the resources themselves and conditionalize calling _delete_user16:06
Dragoas in `if not self._is_temp_url(): self._delete_user()`. I don't really like it because it feels fragile. What if another transport comes along?16:07
*** sorantis has quit IRC16:07
*** blomquisg has quit IRC16:08
*** vishwana_ has joined #heat16:08
shardyDrago: Yeah, agreed, I'd prefer we don't do that16:09
shardyideally we do need something that can be contained withing the base class16:09
shardyal_indigo: Well it proves heat is failing when trying to create a nested stack on another worker via RPC16:10
shardyal_indigo: so, it's possible something is broken such that engine->engine RPC doesn't work16:10
shardyal_indigo: sec, let me create you a test template16:10
*** vishwanathj has quit IRC16:10
al_indigoshardy, does it mean that i should use 1 worker maybe. Ah, ok, thanks, waiting for template16:11
*** sdake has joined #heat16:11
shardyal_indigo: https://bugs.launchpad.net/heat/+bug/148954816:12
openstackLaunchpad bug 1489548 in heat "max_resources_per_stack causes scaling issues on large stacks" [High,Fix released] - Assigned to Steve Baker (steve-stevebaker)16:12
shardytry copying the reproducer from that16:12
shardysec, let me show the steps16:12
openstackgerritMark Vanderwiel proposed openstack/python-heatclient: Add openstack client resource type list and show  https://review.openstack.org/25433016:12
*** sdake has quit IRC16:13
Dragoshardy: that's why I was thinking _should_have_stack_user that each resource can implement if it needs to, but the signature needs to be _should_have_stack_user(props) and passing self.properties or prop_diff everywhere is awful (it'd have to be passed into _delete_user and _get_user_id)16:13
shardyal_indigo: http://paste.openstack.org/show/482092/16:14
shardyal_indigo: that creates a large number of nested stacks, which will exercise the same path of engine->engine RPC16:14
al_indigoshardy, ok, one sec16:14
shardyal_indigo: I suspect some issue with your RPC configuration or settings, but if that fails reliably with even small numbers of nested stacks, it'll point to a config issue16:14
shardyal_indigo: try changing the 400 to some smaller number initially16:15
openstackgerritMark Vanderwiel proposed openstack/python-heatclient: Add openstack client stack resource metadata show  https://review.openstack.org/25548316:15
shardybut I can create thousands of nested stacks with 4 workers on a laptop, so you should be fine16:15
shardyDrago: Ok, let's go back to the original problem, can you remind me why you need to remove the fallback code?16:16
Dragoshardy: subusers cannot use software config because they can't delete a user that was never created. Heat tries to delete the stack user no matter what and keystone returns 40316:17
*** sdake has joined #heat16:18
Dragowe're using temp_url16:18
shardyDrago: Ah, so we get the resource_id which isn't a valid user ID16:18
al_indigo43e05dfa-b1e3-4306-89d4-47e0eb96f872 | stress     | CREATE_IN_PROGRESS | 2015-12-16T16:18:06.76644516:19
al_indigoshardy, ERROR: Authentication failed. Please try again with option --include-password or export HEAT_INCLUDE_PASSWORD=1 Authentication required16:19
*** inc0 has joined #heat16:19
-openstackstatus- NOTICE: Gerrit will be offline for a software upgrade from 17:00 to 21:00 UTC. See: http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html16:19
al_indigooh, no, that was fine - it was horizon timeout complain16:19
al_indigoshardy, | 43e05dfa-b1e3-4306-89d4-47e0eb96f872 | stress     | CREATE_COMPLETE | 2015-12-16T16:18:06.766445 | None         |16:20
shardyYeah, we need to improve that error when tokens time out16:20
Dragoshardy: yes16:20
al_indigoshardy, don't really understand where to look - no instances created after that, but stack shows CREATE_COMPLETE16:21
shardyal_indigo: the stress test is only created some dummy stacks, no instances16:22
*** blomquisg has joined #heat16:23
*** mkoderer has quit IRC16:24
*** mkoderer has joined #heat16:26
al_indigoshardy, so everything should work, right? Where to look next?16:26
*** liusheng has quit IRC16:27
*** liusheng has joined #heat16:28
*** pratikmallya has joined #heat16:33
shardyal_indigo: you need to see the other side of the RPC request, as there's nothing logged16:33
shardyI'd be tempted to kill all the engine workers and run a small number in console windows then look at the stdout/err16:34
*** vgridnev has joined #heat16:35
shardyal_indigo: also enable debug logging in heat.conf as that may provide some more detail, e.g the pids of the workers16:36
shardylogging_default_format_string should actually show that, but your logs have - - - - -16:37
al_indigook, I'll try now16:37
*** sabeen3 has quit IRC16:41
*** sabeen1 has joined #heat16:41
*** manishg has joined #heat16:42
al_indigoit's something strange - I'm running everyone with one worker just in bash and still only dashes: req-2af8c792-66fa-43c4-942b-f6f3fe742a27 - - - - -]16:44
al_indigoor you meant smth else?16:45
*** cwolferh has joined #heat16:45
shardyal_indigo: Yeah, with debug enabled you should see the pid in the log output for each worker, provided logging_debug_format_suffix contains (pid=%(process)d)16:48
shardynot that important, just helpful when you're dealing with lots of workers ;)16:49
*** signed8bit has quit IRC16:55
*** sthillma has joined #heat16:57
*** sthillma_ has joined #heat16:57
al_indigoshardy, one worker - just exactly the same as previous log17:00
al_indigoshardy, https://gist.github.com/al-indigo/202238f16f9bf9eebad017:01
*** signed8bit has joined #heat17:02
*** sthillma has quit IRC17:02
*** sthillma_ is now known as sthillma17:02
-openstackstatus- NOTICE: Gerrit is offline for a software upgrade from 17:00 to 21:00 UTC. See: http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html17:02
*** ChanServ changes topic to "Gerrit is offline for a software upgrade from 17:00 to 21:00 UTC. See: http://lists.openstack.org/pipermail/openstack-dev/2015-December/081037.html"17:02
*** signed8bit is now known as signed8bit_ZZZzz17:02
*** signed8bit_ZZZzz is now known as signed8bit17:02
*** blomquisg has quit IRC17:03
openstackgerritRico Lin proposed openstack/heat: Add support for a resource level external_id  https://review.openstack.org/13549217:03
*** ricolin has quit IRC17:03
*** yassine__ has quit IRC17:06
shardyal_indigo: Ok, I'm confused - what's in test-master-default-network.yaml?  Is it really really huge?17:06
al_indigoshardy, hmm, I don't actually know how to get this yaml - it was done using sahara17:08
shardyal_indigo: Ok, I'm just looking for a way to bisect between my working stress.yaml and your sahara stack17:09
*** e0ne has quit IRC17:09
*** Drago2 has joined #heat17:15
*** blues-man has quit IRC17:15
*** blomquisg has joined #heat17:15
*** manishg has quit IRC17:18
*** Drago2 has quit IRC17:22
*** DandyPandy has joined #heat17:24
*** pratikmallya has quit IRC17:27
*** vishwana_ is now known as vishwanathj17:27
*** inc0 has quit IRC17:27
*** manishg has joined #heat17:27
*** signed8bit is now known as signed8bit_ZZZzz17:28
*** manishg_ has joined #heat17:28
*** sdake has quit IRC17:29
*** signed8bit_ZZZzz is now known as signed8bit17:29
*** manishg__ has joined #heat17:30
*** blues-man has joined #heat17:30
*** manishg has quit IRC17:31
*** bnemec has quit IRC17:32
*** inc0 has joined #heat17:32
*** manishg_ has quit IRC17:32
*** blues-man has quit IRC17:32
*** bnemec has joined #heat17:33
*** Drago1 has joined #heat17:34
*** Drago has quit IRC17:35
*** hdd has joined #heat17:36
*** bnemec has quit IRC17:42
*** jistr has quit IRC17:42
*** Drago1 has quit IRC17:42
*** jtomasek has quit IRC17:43
*** gberginc has joined #heat17:48
*** logan- has quit IRC17:51
*** pas-ha has quit IRC17:55
*** sabeen1 has quit IRC18:02
*** e0ne has joined #heat18:06
*** derekh has quit IRC18:06
*** vijayagurug has quit IRC18:31
*** signed8bit is now known as signed8bit_ZZZzz18:34
*** vgridnev has quit IRC18:35
*** signed8bit_ZZZzz is now known as signed8bit18:36
*** bnemec has joined #heat18:38
*** zeih has joined #heat18:44
*** bana_k has joined #heat18:47
*** sridhar_ram has joined #heat18:48
*** zeih has quit IRC18:49
*** david-lyle_ has joined #heat18:49
*** blomquisg has quit IRC18:49
*** david-lyle has quit IRC18:50
*** david-lyle_ is now known as david-lyle18:54
*** signed8bit is now known as signed8bit_ZZZzz18:57
*** crose has quit IRC18:59
*** signed8bit_ZZZzz is now known as signed8bit19:01
*** bnemec has quit IRC19:04
*** pas-ha has joined #heat19:04
*** manishg__ has quit IRC19:05
*** jcoufal has quit IRC19:06
*** gberginc has quit IRC19:10
*** bnemec has joined #heat19:10
*** sthillma has quit IRC19:13
*** e0ne_ has joined #heat19:13
*** signed8bit has quit IRC19:14
*** e0ne has quit IRC19:15
*** david-lyle has quit IRC19:17
*** manishg has joined #heat19:18
*** manishg has quit IRC19:19
*** david-lyle has joined #heat19:20
*** shardy is now known as shardy_afk19:22
*** bnemec has quit IRC19:22
*** manishg has joined #heat19:23
*** david-lyle_ has joined #heat19:24
*** david-lyle has quit IRC19:24
*** dims has joined #heat19:27
*** shardy_afk has quit IRC19:27
*** boris-42_ has joined #heat19:30
*** david-lyle_ has quit IRC19:30
*** Drago has joined #heat19:31
*** pratikmallya has joined #heat19:33
*** EricGonczer_ has quit IRC19:35
*** bnemec has joined #heat19:35
*** sthillma has joined #heat19:36
stevebakermorning19:41
*** signed8bit has joined #heat19:41
*** skraynev_ has joined #heat19:42
*** EricGonczer_ has joined #heat19:44
*** sabeen1 has joined #heat19:44
*** Drago has quit IRC19:46
*** Drago has joined #heat19:46
*** sabeen3 has joined #heat19:46
*** signed8bit is now known as signed8bit_ZZZzz19:48
*** david-lyle has joined #heat19:48
*** sabeen1 has quit IRC19:49
*** gberginc has joined #heat19:49
*** signed8bit_ZZZzz is now known as signed8bit19:52
*** manishg has quit IRC19:59
*** sdake has joined #heat19:59
skraynev_meeting time20:00
*** shardy has joined #heat20:02
*** ochuprykov has joined #heat20:05
*** ochuprykov has quit IRC20:05
*** blomquisg has joined #heat20:10
*** sdake_ has joined #heat20:13
*** sdake has quit IRC20:15
*** dims has quit IRC20:18
*** dims has joined #heat20:19
*** jaosorior has quit IRC20:29
*** vijendar has joined #heat20:31
*** manishg has joined #heat20:31
*** Drago has quit IRC20:34
*** Drago has joined #heat20:34
*** manishg has quit IRC20:35
*** manishg has joined #heat20:35
*** jaosorior has joined #heat20:48
*** jaosorior has quit IRC20:49
*** jaosorior has joined #heat20:50
*** ChanServ changes topic to "support @ https://ask.openstack.org | developer wiki @ https://wiki.openstack.org/wiki/Heat | development @ https://launchpad.net/heat | logged @ http://eavesdrop.openstack.org/irclogs/%23heat/"20:58
-openstackstatus- NOTICE: Gerrit has been upgraded to 2.11. Please report any issues in #openstack-infra as soon as possible.20:58
skraynev_pas-ha: looking21:01
stevebakerwe can has gerrit21:01
*** bnemec has quit IRC21:01
skraynev_yes21:01
skraynev_:)21:01
*** bnemec has joined #heat21:01
*** spzala has quit IRC21:02
*** spzala has joined #heat21:02
*** spzala has quit IRC21:02
skraynev_pas-ha: hm. I need to read logs.. but on first look it's may be removed, IMO21:03
jdobconvenient; meeting is over and gerrit is back21:03
pas-hait just takes more than an hour on every change21:03
skraynev_I see, and also skip Heat related tests21:04
pas-haactually it seems this job has appeared in almost all client gates - I was pointed by e0ne from cinder o_O21:04
*** randallburt has joined #heat21:06
Dragorandallburt: something's wrong with the cdn resource21:06
Dragoseems to be a small problem though21:06
Dragohttps://jenkins-n01.rs-heat.com/job/test/job/template/job/base/4304/console21:06
DragoResource CREATE failed: BadRequest: resources.cdn: Domain www.qe_raxcdnDev-tempest-2080573420.com is not a valid domain (HTTP 400)21:06
*** manishg has quit IRC21:06
Dragonot sure if it doesn't like capital letters or numbers21:06
*** jasond` has joined #heat21:07
randallburtDrago wrong chat?21:07
randallburt1 sec - lemme check21:07
Dragorandallburt: >.<21:07
rpothierskraynev_: any thoughts from the email you sent about Conditionals?21:07
skraynev_pas-ha: ok. I will take a look it tomorrow ;)21:07
*** manishg has joined #heat21:07
*** randallburt has quit IRC21:07
*** signed8bit is now known as signed8bit_ZZZzz21:07
*** randallburt has joined #heat21:08
skraynev_rpothier: according to the last mails, I think we may try to add support for AWS part and then extend on hot21:08
skraynev_rpothier: So I don't see blockers for implementation21:09
rpothierskraynev_:thanks! I will test that in Magnum as an alternative to Jinja21:10
*** signed8bit_ZZZzz is now known as signed8bit21:10
skraynev_rpothier: ok. will be good to share result in the same mail thread21:10
skraynev_looks like we can finish on it.21:11
skraynev_g'night all21:11
*** skraynev_ has quit IRC21:11
*** bnemec has quit IRC21:13
*** e0ne_ has quit IRC21:15
shardyDrago: Hey, sorry we didn't reach a conclusion re the stack user delete earlier, can we chat again tomorrow?21:19
shardyI started looking at the code earlier but I've run out of time for today21:19
*** gberginc has quit IRC21:21
Dragoshardy: absolutely! Thanks21:21
*** Marga__ has joined #heat21:25
stevebakershardy: hey, does tripleo actually need this fix, or just the one before it? https://review.openstack.org/#/c/257966/21:26
*** Marga__ has quit IRC21:26
*** Marga__ has joined #heat21:27
*** zeih has joined #heat21:27
*** bnemec has joined #heat21:27
pas-haoff to sleep, good night all21:27
shardystevebaker: Hey, I was just about to ping you about that21:27
*** pas-ha has quit IRC21:27
shardystevebaker: yes, it does need that, and due to the rework that now depends on another stable patch21:27
shardyI'm about to post a squashed version of the two neturon port fixes, depending on the other patch (https://review.openstack.org/#/c/258307/1)21:28
shardystevebaker: just fixing some test issues, few mins21:28
stevebakershardy: ok, let me know if I should do anything when you clock off21:28
shardystevebaker: will do, thanks!21:28
*** Marga_ has quit IRC21:29
*** dprince has quit IRC21:30
*** zeih has quit IRC21:32
*** sabeen3 has quit IRC21:43
*** e0ne has joined #heat21:45
openstackgerritJason Dunsmore proposed openstack/heat: Add a retries to Nova client methods for connection errors  https://review.openstack.org/23825721:46
openstackgerritBryan Jones proposed openstack/heat: LBaaS v2 Pool Member  https://review.openstack.org/24125121:46
openstackgerritBryan Jones proposed openstack/heat: LBaaS v2 Pool  https://review.openstack.org/24004921:46
openstackgerritBryan Jones proposed openstack/heat: LBaas v2 HealthMonitor  https://review.openstack.org/24528721:46
openstackgerritBryan Jones proposed openstack/heat: LBaaS v2 Loadbalancer  https://review.openstack.org/23861221:46
openstackgerritBryan Jones proposed openstack/heat: LBaaS v2 Listener  https://review.openstack.org/23975521:46
shardystevebaker: https://review.openstack.org/258307 updated, I had to fix some tests, and https://review.openstack.org/257904 updated to combine both neutron port patches21:48
stevebakershardy: ok, thanks21:49
shardyhttps://review.openstack.org/#/c/257966/ needs some reviews, but it's passing CI - I just referenced the ChangeId in 257904 as it's not landed yet21:49
stevebakershardy: so https://review.openstack.org/#/c/258307/ will need a backport to kilo too21:50
shardystevebaker: gah, it doesn't look like we have the translate properties stuff in kilo?21:52
shardyramishra and huangtianhua were keen for me to use that, so I reworked the patch to expect it21:52
shardystevebaker: the main difference is with the translation you don't have to explicitly care about NETWORK_ID21:53
shardywe'll probably have to add the stuff from the previous revision back in for kilo21:53
*** daneyon_ has joined #heat21:54
stevebakershardy: can you pop into #tripleo for a sec?21:55
shardystevebaker: sure, sec21:55
*** daneyon_ has quit IRC21:56
*** daneyon_ has joined #heat21:56
*** daneyon has quit IRC21:57
*** harlowja has quit IRC21:59
*** manishg has quit IRC22:00
*** EricGonc_ has joined #heat22:00
*** _cjones_ has joined #heat22:02
*** _cjones_ has quit IRC22:03
*** manishg has joined #heat22:04
*** _cjones_ has joined #heat22:04
*** EricGonczer_ has quit IRC22:04
*** harlowja has joined #heat22:04
_cjones_Quick question for the heat folks: I've successfully used heat in one of our tests to generate a keypair. It doesn't seem possible to return the private_key of the keypair. Is this intentional? If so, it seems fundamentally broken.22:05
_cjones_https://gist.github.com/badgerj/89234ade772eefacf26c22:07
*** dyasny has quit IRC22:09
*** sdake_ has quit IRC22:09
_cjones_Heat output in horizon: http://imgur.com/LHiM8wg22:12
*** jaosorior has quit IRC22:13
*** dyasny has joined #heat22:15
*** sdake has joined #heat22:17
*** blomquisg has quit IRC22:19
*** blomquisg has joined #heat22:20
*** shardy has quit IRC22:21
stevebaker_cjones_: are you following the documentation regarding save_private_key? http://docs.openstack.org/developer/heat/template_guide/openstack.html#OS::Nova::KeyPair22:22
_cjones_stevebaker: Yes, I just found it thank-you.22:23
stevebakerfundamental brokeness averted \o?22:23
_cjones_Was reading from here: http://docs.openstack.org/developer/heat/template_guide/hot_guide.html22:23
_cjones_So, not broken, just no documentation in this portion for a likely non-useful use-case.22:24
_cjones_Or at least the key would be predetermined. Thanks.22:24
stevebaker_cjones_: you mean something like this? http://docs.openstack.org/developer/heat/template_guide/basic_resources.html#create-a-key-pair22:25
_cjones_Yes. This is where I dug it up after reading through the code. Thanks.22:25
_cjones_I can't think of a case where you would want to create a key_pair in heat, and *not* want the private key. Wouldn't that operation rather pointless?22:26
*** jonesbr has left #heat22:27
*** rpothier has quit IRC22:28
*** EricGonc_ has quit IRC22:30
*** e0ne has quit IRC22:33
stevebaker_cjones_: as currently implemented, yes. What I would want to do is initially set save_private_key:True, store the key, then do a stack update with save_private_key:False so that heat is no longer storing my secret. But that would require a fix to make save_private_key changable without replacement22:33
stevebaker_cjones_: but what I'd really do generally is always generate my keys locally so that a private key is not travelling through multiple rest APIs and being stored on a multi-tenant API22:34
*** vijendar has quit IRC22:35
*** sridhar_ram1 has joined #heat22:36
*** Drago has quit IRC22:36
*** sridhar_ram1 has quit IRC22:37
*** sridhar_ram has quit IRC22:37
_cjones_stevebaker: Makes sense. I was just leveraging heat for some tempest tests, so really the secret for me will be short lived.22:39
stevebaker_cjones_: in that respect the save_private_key property is more of a "Are you *sure* you want heat to store your secret?"22:39
openstackgerritPratik Mallya proposed openstack/heat: Add Image/Flavor Constraint to Rackspace Server  https://review.openstack.org/25441322:41
*** sdake has quit IRC22:41
*** sdake has joined #heat22:41
*** sabeen1 has joined #heat22:43
*** sdake has quit IRC22:44
_cjones_stevebaker: Understood. But I find the default to have been obtuse and un-intuitive. This would be akin to a locksmith being asked to rekey a lock, and just when he's finished he snaps the lock off in the lock and hands you the broken end when you've just asked him to re-key it for you. Then he looks at you and says: "Well, you didn't tell me to not snap the key off".22:44
stevebaker_cjones_: sure, security vs convenience is a tradeoff, and that is where our documentation comes in22:45
*** sabeen2 has joined #heat22:46
*** sabeen1 has quit IRC22:47
_cjones_stevebaker: Anyway. Thanks for the help and explanation, much appreciated.22:47
stevebakeryou're welcome22:48
*** neelashah has quit IRC22:58
*** manishg has quit IRC23:00
*** harlowja has quit IRC23:01
*** manishg has joined #heat23:01
*** dims has quit IRC23:01
*** manishg has quit IRC23:02
*** sridhar_ram has joined #heat23:02
*** manishg has joined #heat23:02
*** jrist has quit IRC23:11
*** spotz is now known as spotz_zzz23:12
openstackgerritPratik Mallya proposed openstack/heat: Add Image/Flavor Constraint to Rackspace Server  https://review.openstack.org/25441323:15
openstackgerritPratik Mallya proposed openstack/heat: Add Image/Flavor Constraint to Server Resources  https://review.openstack.org/25441323:18
*** signed8bit is now known as signed8bit_ZZZzz23:18
*** dims has joined #heat23:24
openstackgerritPratik Mallya proposed openstack/heat: oslo_middleware.http_proxy_to_wsgi instead of ssl  https://review.openstack.org/25831123:27
*** sdake has joined #heat23:30
*** sdake has quit IRC23:30
*** sdake_ has joined #heat23:30
*** sdake_ has quit IRC23:32
*** signed8bit_ZZZzz is now known as signed8bit23:34
openstackgerritPratik Mallya proposed openstack/heat: Add image/flavor validation to OS::Nova::Server  https://review.openstack.org/25871223:34
*** jasond` has quit IRC23:34
openstackgerritPratik Mallya proposed openstack/heat: Add more image/flavor validation to Server  https://review.openstack.org/25871323:38
*** tochi has joined #heat23:40
*** Qiming has joined #heat23:43
*** kse has joined #heat23:44
*** manishg has quit IRC23:46
*** sabeen2 has quit IRC23:49
*** pratikmallya has quit IRC23:54
*** DragoRosson has joined #heat23:54
*** derekh has joined #heat23:56
*** derekh has quit IRC23:56
*** chlong has quit IRC23:57
*** signed8bit is now known as signed8bit_ZZZzz23:57
*** sabeen has joined #heat23:59
*** signed8bit_ZZZzz is now known as signed8bit23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!