| *** hoonetorg has quit IRC | 00:02 | |
| *** yassine has joined #heat | 00:19 | |
| *** hoonetorg has joined #heat | 00:19 | |
| *** yassine is now known as Guest63844 | 00:19 | |
| *** SmearedBeard has quit IRC | 00:22 | |
| *** SmearedBeard has joined #heat | 00:36 | |
| *** Guest63844 has quit IRC | 00:47 | |
| *** SmearedBeard has quit IRC | 00:53 | |
| *** ramishra has joined #heat | 00:58 | |
| *** Guest63844 has joined #heat | 01:05 | |
| *** cervigni has joined #heat | 01:13 | |
| cervigni | hello everybody. I am trying to create a heat template and assign a project id to a router, though the property is always unrecognised by the parser | 01:14 |
|---|---|---|
| cervigni | https://pastebin.com/A3bKemvV | 01:15 |
| cervigni | defined exactly the same for neutron::net and neutron::subnet, neutron::router seem not accepting the tenant_id parameter | 01:16 |
| cervigni | though it is there, both in the ocata documentation, and in the resources available on the openstack environment as well | 01:16 |
| cervigni | related documentation https://docs.openstack.org/heat/ocata/template_guide/openstack.html#OS::Neutron::Router-attr-tenant_id | 01:17 |
| cervigni | though not accepted with error: ERROR: Property error: resources.router.properties: Unknown Property tenant_id | 01:18 |
| *** JamesW has joined #heat | 01:32 | |
| *** kiennt26 has joined #heat | 01:34 | |
| *** JamesW has quit IRC | 01:44 | |
| ramishra | cervigni: that's the tenant_id attribute, not property (don't have tanant_id prop for router), try to pass it in vlue_specs | 01:49 |
| ramishra | cervigni: https://docs.openstack.org/heat/ocata/template_guide/openstack.html#OS::Neutron::Router-prop-value_specs | 01:49 |
| ramishra | value_specs is a dict for additional properties | 01:50 |
| ramishra | though it's not meant for that, I think it should work | 01:50 |
| *** JamesW has joined #heat | 01:52 | |
| cervigni | many thanks ramishra . what I find a bit strange is that in ::net and ::subnet tenant_id is defined as attribute and not as property as well, but it works under properties, while in ::router it does not | 02:04 |
| cervigni | the value btw is accepted, now I'll see if it works | 02:04 |
| *** fragatina has quit IRC | 02:06 | |
| ramishra | cervigni: nope, net and subnet have tenant_id property https://docs.openstack.org/heat/ocata/template_guide/openstack.html#OS::Neutron::Net-prop-tenant_id | 02:22 |
| ramishra | cervigni: what's your usecase? In heat all resources are scoped to the tenant of the user creating the stack, normally you should not use tenant_id with these resources | 02:25 |
| cervigni | the scope is automatically creating network resources for very inexperienced users | 02:31 |
| cervigni | is there a better way to do it? | 02:31 |
| *** JamesW has quit IRC | 02:32 | |
| cervigni | ramishra the idea is after creating the project for a user, to initialise automatically internal network, router and basic security rules | 02:38 |
| ramishra | Any user in the project can create the resources in the specific projects, I think at present admin role has cross-project permissions | 02:39 |
| *** chason has left #heat | 02:40 | |
| ramishra | so a user with admin role can be in in a project and create the resources for other users | 02:40 |
| *** armaan has quit IRC | 02:41 | |
| cervigni | yes, that is the idea. with admin I create the project, and I launch heat stack to create network and security groups. | 02:42 |
| *** nicolasbock has quit IRC | 02:42 | |
| cervigni | at the same time now in my testing environment everything wokrs, while in the production environment apparently the user admin does not have the permissions to do so :D | 02:43 |
| ramishra | 'admin' role is kind of a superuser. I think if you split the project/role/user creations(separate template) from the other resources, then you can manage withour using tenant_id property | 02:45 |
| cervigni | how do you specify though on which project you want to create the resources in, if not with the tenant_id in the heat template? | 02:48 |
| *** sai has quit IRC | 02:49 | |
| ramishra | if you're in that project --os-project-name | 02:50 |
| *** htruta has quit IRC | 02:50 | |
| ramishra | may your production has https://github.com/openstack/keystone/blob/master/etc/keystone.conf.sample#L2342 defined | 02:50 |
| *** xinni9e has quit IRC | 02:51 | |
| *** syjulian has quit IRC | 02:51 | |
| *** hoonetorg has quit IRC | 02:51 | |
| *** jdandrea has quit IRC | 02:51 | |
| *** lifeless has quit IRC | 02:51 | |
| *** jdandrea_ has joined #heat | 02:51 | |
| *** sai has joined #heat | 02:52 | |
| cervigni | that would be a good idea, though I cannot do it. I don't want to add the admin as a member of the project and cannot enable that flag in the keystone.conf . I tried the stack in testing and it worked. in production I have permission issues | 02:56 |
| *** ayoung has quit IRC | 02:56 | |
| cervigni | ERROR: Missing required credential: roles [u'admin'] | 02:56 |
| *** JamesW has joined #heat | 02:57 | |
| *** syjulian has joined #heat | 02:57 | |
| *** htruta has joined #heat | 02:58 | |
| *** lifeless has joined #heat | 02:58 | |
| *** armaan has joined #heat | 03:01 | |
| *** JamesW has quit IRC | 03:01 | |
| *** xinni9e has joined #heat | 03:02 | |
| *** hoonetorg has joined #heat | 03:05 | |
| *** JamesW has joined #heat | 03:11 | |
| *** strobelight_ has joined #heat | 03:11 | |
| *** strobelight is now known as Guest20977 | 03:11 | |
| *** strobelight_ has quit IRC | 03:12 | |
| *** jmlowe_ has joined #heat | 03:13 | |
| *** strobelight_ has joined #heat | 03:13 | |
| *** strobelight_ is now known as strobelight | 03:13 | |
| *** jmlowe has quit IRC | 03:15 | |
| *** Guest20977 has quit IRC | 03:15 | |
| *** jnettlet[m] has quit IRC | 03:15 | |
| *** JamesW has quit IRC | 03:16 | |
| *** JamesW has joined #heat | 03:18 | |
| *** JamesW has quit IRC | 03:26 | |
| *** JamesW has joined #heat | 03:28 | |
| *** hoolio has joined #heat | 03:29 | |
| *** links has joined #heat | 03:34 | |
| *** JamesW has quit IRC | 03:46 | |
| *** mdnadeem has joined #heat | 03:54 | |
| *** AlexeyAbashkin has joined #heat | 03:58 | |
| *** mdnadeem is now known as mdnadeem|afk | 03:59 | |
| *** AlexeyAbashkin has quit IRC | 04:02 | |
| *** JamesW has joined #heat | 04:06 | |
| *** JamesW has quit IRC | 04:06 | |
| *** skramaja has joined #heat | 04:13 | |
| *** dbecker has quit IRC | 04:24 | |
| *** jtomasek has joined #heat | 04:25 | |
| *** fragatina has joined #heat | 04:27 | |
| *** fragatina has quit IRC | 04:30 | |
| *** fragatina has joined #heat | 04:30 | |
| *** jtomasek has quit IRC | 04:35 | |
| *** dbecker has joined #heat | 04:37 | |
| *** fragatina has quit IRC | 05:32 | |
| *** jnettlet[m] has joined #heat | 05:40 | |
| *** armaan has quit IRC | 06:02 | |
| *** armaan has joined #heat | 06:03 | |
| *** zzzeek_ has joined #heat | 06:14 | |
| *** kazsh has quit IRC | 06:15 | |
| *** zzzeek has quit IRC | 06:15 | |
| *** skramaja_ has joined #heat | 06:16 | |
| *** kazsh has joined #heat | 06:16 | |
| *** Tyrantelf_ has joined #heat | 06:17 | |
| *** dbecker has quit IRC | 06:22 | |
| *** skramaja has quit IRC | 06:22 | |
| *** links has quit IRC | 06:22 | |
| *** Tyrantelf has quit IRC | 06:22 | |
| cervigni | what would be the cause of a template not running from the admin user, while running from a _member_ in its project? | 06:26 |
| cervigni | the heat stack creates networks and security groups in a specific project, but runned from admin it results in: | 06:26 |
| cervigni | ERROR: Missing required credential: roles [u'admin'] | 06:26 |
| *** dbecker has joined #heat | 06:29 | |
| *** links has joined #heat | 06:29 | |
| *** om2 has quit IRC | 06:32 | |
| *** AlexeyAbashkin has joined #heat | 06:34 | |
| *** rwsu has joined #heat | 06:43 | |
| *** armaan has quit IRC | 06:43 | |
| *** armaan has joined #heat | 06:44 | |
| cervigni | anyone can help? | 06:46 |
| *** hoonetorg has quit IRC | 06:48 | |
| *** armaan has quit IRC | 06:50 | |
| *** AlexeyAbashkin has quit IRC | 06:58 | |
| *** hoonetorg has joined #heat | 07:07 | |
| *** dr_gogeta86 has quit IRC | 07:09 | |
| *** EmilienM has quit IRC | 07:09 | |
| *** jprovazn has joined #heat | 07:16 | |
| *** rcernin has quit IRC | 07:45 | |
| *** ivveh has quit IRC | 07:53 | |
| *** ebarrera has joined #heat | 08:11 | |
| *** ebarrera has quit IRC | 08:21 | |
| openstackgerrit | huangtianhua proposed openstack/heat master: Don't return the sensitive information to user https://review.openstack.org/490320 | 08:25 |
| *** d0ugal_ has quit IRC | 08:30 | |
| *** d0ugal has joined #heat | 08:30 | |
| *** d0ugal has quit IRC | 08:30 | |
| *** d0ugal has joined #heat | 08:30 | |
| *** rcernin has joined #heat | 08:37 | |
| *** ivveh has joined #heat | 08:37 | |
| *** armaan has joined #heat | 08:39 | |
| *** chason has joined #heat | 08:42 | |
| *** jistr is now known as jistr|mtg | 08:48 | |
| therve | ramishra, You around? https://bugs.launchpad.net/tripleo/+bug/1731032 looks like a pretty bad convergence issue, if you have an idea... | 08:58 |
| openstack | Launchpad bug 1731032 in tripleo "CI: Deployment fails on controller timeout with task creation in heat timing out" [Critical,Triaged] | 08:58 |
| *** SmearedBeard has joined #heat | 09:00 | |
| *** AlexeyAbashkin has joined #heat | 09:01 | |
| *** SmearedBeard has quit IRC | 09:04 | |
| ramishra | therve: Is it convergence related? Anything in the logs that tells you that? | 09:04 |
| ramishra | looks to me like a deployment timeout, though not looked in detail | 09:05 |
| therve | ramishra, Well, that it never happened before we enabled convergence :) | 09:05 |
| *** SmearedBeard has joined #heat | 09:05 | |
| therve | I don't think, there is no script failing on the host | 09:05 |
| ramishra | therve: Ok I thought that would be your answer:) | 09:05 |
| ramishra | No clue why the scheduler is stuck | 09:06 |
| ramishra | It should retrigger after timeout, but we added that recently | 09:06 |
| ramishra | not sure if it's in there | 09:07 |
| *** gfidente has joined #heat | 09:07 | |
| therve | Yeah maybe check what's in the promotion | 09:07 |
| *** ivveh has quit IRC | 09:07 | |
| ramishra | probably not, retrigger only happens if there is a new traversal | 09:09 |
| therve | ramishra, Isn't a signal a new traversal? | 09:11 |
| ramishra | therve: you mean resource signal? probably not, if it's just to mark the resource COMPLETE), scaling signals may result in new traversal though | 09:15 |
| therve | Hum ok | 09:15 |
| ramishra | therve: Do they see that CI failure everytime? | 09:18 |
| therve | ramishra, Trying to see that | 09:18 |
| therve | Apparently no | 09:21 |
| ramishra | OK, then why the nbug is critical? | 09:22 |
| *** armaan_ has joined #heat | 09:23 | |
| *** armaan has quit IRC | 09:25 | |
| therve | Well because it fails sometimes | 09:25 |
| ramishra | critical is blocker in my dictionary:) something is wrong though, don't know what that is:/ | 09:28 |
| *** EmilienM has joined #heat | 09:31 | |
| *** gfidente has quit IRC | 09:31 | |
| *** gfidente has joined #heat | 09:32 | |
| *** gfidente has quit IRC | 09:32 | |
| *** gfidente has joined #heat | 09:32 | |
| *** hjensas has joined #heat | 09:34 | |
| chandankumar | ramishra: hello | 09:34 |
| ramishra | chandankumar: hi | 09:34 |
| chandankumar | ramishra: can we start the paper work? | 09:35 |
| *** dr_gogeta86 has joined #heat | 09:35 | |
| *** dr_gogeta86 has quit IRC | 09:35 | |
| *** dr_gogeta86 has joined #heat | 09:35 | |
| chandankumar | for heat tempest plugin | 09:35 |
| ramishra | chandankumar: yes, will do this/next week, was waiting someone to approve https://review.openstack.org/#/c/509098/ | 09:36 |
| ramishra | therve: may be you can help review those in-tree job patches? | 09:37 |
| therve | Looks hard :) | 09:38 |
| ramishra | and https://review.openstack.org/#/c/509140 | 09:38 |
| ramishra | therve: we can improve those later, they still use some legacy job definitions atm | 09:39 |
| ramishra | they are working now, we have to backport them to stable branches before removing them from project-config | 09:40 |
| *** derekh has joined #heat | 09:42 | |
| *** skramaja_ has quit IRC | 09:51 | |
| *** skramaja has joined #heat | 09:58 | |
| openstackgerrit | Merged openstack/heat master: Add REST api support for cancel without rollback https://review.openstack.org/491467 | 10:01 |
| openstackgerrit | Merged openstack/heat-dashboard master: Clean up npm package dependencies https://review.openstack.org/518187 | 10:02 |
| *** jistr|mtg is now known as jistr | 10:15 | |
| *** links has quit IRC | 10:15 | |
| therve | ramishra, What's the todo about ZUUL_BRANCH? Does that variable exist in the playbook? | 10:16 |
| *** armaan_ has quit IRC | 10:19 | |
| ramishra | therve: I think it's copied from the v3 legacy jobs in openstack-zuul-jobs, I think what's available is {{ zuul.branch }} | 10:37 |
| ramishra | but probably we don't need to use it anymore as we've these defns specific to branch | 10:37 |
| therve | ramishra, zuul jobs are global AFAIK | 10:37 |
| therve | I mean, unless we backport something different | 10:38 |
| therve | But stable will use those job definitions until then | 10:38 |
| ramishra | I'm not sure about that though, you mean use from master once we remove from project-config? | 10:38 |
| therve | I'm not sure, but I think that's what I understood from the session at the PTG | 10:39 |
| therve | zuul config is global | 10:39 |
| ramishra | I remeber some mails about changes recently to make it branch specific, though I'm surely missing something | 10:40 |
| therve | ramishra, Sure, but that only works if you have jobs in the branch | 10:40 |
| therve | Which we don't yet | 10:40 |
| therve | ramishra, We can test with a depend I think | 10:42 |
| ramishra | therve: OK, I thought the legacy jobs in openstack-zuul-jobs and the project-config does that. Once we remove it from project-config, we've to have them in stable branches | 10:42 |
| therve | Let's see what https://review.openstack.org/518702 says | 10:44 |
| ramishra | therve: sure | 10:44 |
| *** AlexeyAbashkin has quit IRC | 11:00 | |
| *** jprovazn has quit IRC | 11:06 | |
| *** pbourke has quit IRC | 11:10 | |
| *** pbourke has joined #heat | 11:12 | |
| *** AlexeyAbashkin has joined #heat | 11:13 | |
| *** rcernin has quit IRC | 11:26 | |
| *** armaan has joined #heat | 11:34 | |
| *** strobelight has quit IRC | 11:43 | |
| *** jprovazn has joined #heat | 11:58 | |
| *** nicolasbock has joined #heat | 12:00 | |
| *** ramishra has quit IRC | 12:13 | |
| *** strobelight has joined #heat | 12:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/heat-dashboard master: Updated from global requirements https://review.openstack.org/516580 | 13:10 |
| *** ramishra has joined #heat | 13:15 | |
| *** armaan has quit IRC | 13:27 | |
| *** armaan has joined #heat | 13:27 | |
| *** strobelight has quit IRC | 13:44 | |
| *** ivveh has joined #heat | 13:45 | |
| *** skramaja has quit IRC | 13:53 | |
| *** crose has joined #heat | 13:55 | |
| *** ramishra has quit IRC | 13:58 | |
| *** ramishra has joined #heat | 14:00 | |
| *** myoung|afk is now known as myoung | 14:00 | |
| *** ramishra_ has joined #heat | 14:23 | |
| *** ramishra has quit IRC | 14:25 | |
| *** ramishra_ has quit IRC | 14:51 | |
| *** ramishra has joined #heat | 14:53 | |
| *** crose has quit IRC | 14:56 | |
| *** blomquisg_gone is now known as blomquisg | 15:25 | |
| *** armaan has quit IRC | 15:52 | |
| *** crose has joined #heat | 15:52 | |
| *** armaan has joined #heat | 15:52 | |
| *** AlexeyAbashkin has quit IRC | 16:08 | |
| *** charlesr has joined #heat | 16:17 | |
| *** mdnadeem|afk has quit IRC | 16:32 | |
| *** fragatina has joined #heat | 16:32 | |
| *** fragatina has quit IRC | 16:33 | |
| *** fragatina has joined #heat | 16:33 | |
| *** fragatina has quit IRC | 16:38 | |
| *** jmlowe_ has quit IRC | 16:42 | |
| *** ramishra has quit IRC | 16:59 | |
| *** fragatina has joined #heat | 17:02 | |
| *** ayoung has joined #heat | 17:07 | |
| *** charlesr has quit IRC | 17:08 | |
| *** armaan has quit IRC | 17:10 | |
| *** armaan has joined #heat | 17:11 | |
| *** armaan has quit IRC | 17:12 | |
| *** armaan has joined #heat | 17:13 | |
| *** fragatina has quit IRC | 17:18 | |
| *** armaan has quit IRC | 17:32 | |
| *** armaan has joined #heat | 17:33 | |
| *** fragatina has joined #heat | 17:44 | |
| *** dsneddon has joined #heat | 17:57 | |
| *** derekh has quit IRC | 18:02 | |
| *** jmlowe has joined #heat | 18:15 | |
| *** AlexeyAbashkin has joined #heat | 18:17 | |
| *** AlexeyAbashkin has quit IRC | 18:29 | |
| *** armaan has quit IRC | 18:30 | |
| *** jprovazn has quit IRC | 19:07 | |
| *** blomquisg is now known as blomquisg_gone | 19:16 | |
| *** charlesr has joined #heat | 19:48 | |
| *** crose has quit IRC | 19:49 | |
| *** charlesr has quit IRC | 19:53 | |
| *** armaan has joined #heat | 19:57 | |
| *** fragatina has quit IRC | 20:09 | |
| jdandrea_ | Looking at the resource type for OS::Neutron::FloatingIP in heat-newton, I see that "floating_network" is a required property. Yet I have a Heat template that uses "floating_network_id" without incident. Is there some sort of _id suffix checking/allowance going on under the hood? | 20:10 |
| jdandrea_ | That's floating_network_id as a *property*, not an attribute. | 20:10 |
| *** jdandrea_ is now known as jdandrea | 20:11 | |
| jdandrea | Ah, unless there's a global environment that translates floating_network_id to floating_network gracefully. | 20:19 |
| jdandrea | Nope, that's not it. default.yaml doesn't mention floating_network_id either. | 20:44 |
| *** armaan has quit IRC | 20:52 | |
| *** fragatina has joined #heat | 20:59 | |
| *** jmlowe has quit IRC | 21:12 | |
| *** jmlowe has joined #heat | 21:32 | |
| *** crose has joined #heat | 21:58 | |
| *** rcernin has joined #heat | 22:01 | |
| *** Guest63844 has quit IRC | 22:05 | |
| *** crose has quit IRC | 22:11 | |
| *** jdandrea has quit IRC | 22:16 | |
| *** jmlowe has quit IRC | 22:22 | |
| *** jdandrea has joined #heat | 22:24 | |
| *** jmlowe has joined #heat | 22:49 | |
| *** gfidente has quit IRC | 23:05 | |
| *** gfidente has joined #heat | 23:50 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!