Wednesday, 2018-07-04

« Tuesday, 2018-07-03 Index Thursday, 2018-07-05 »
*** liyi has joined #heat00:03
*** sai- has left #heat00:17
*** harlowja has joined #heat00:26
*** harlowja has quit IRC00:27
*** hongbin has joined #heat01:27
openstackgerritFeilong Wang proposed openstack/heat-agents master: Add region_name for heat-config-notify  https://review.openstack.org/57966901:28
*** edmondsw has joined #heat01:42
*** edmondsw has quit IRC01:46
*** ricolin has joined #heat01:48
*** schaney_ has quit IRC01:50
*** jmlowe has quit IRC01:53
*** Guest38444 has quit IRC02:04
*** Guest38444 has joined #heat02:08
*** neatherweb has joined #heat02:11
*** jmlowe has joined #heat03:03
*** masber has quit IRC03:09
*** skramaja has joined #heat03:09
*** liyi_ has joined #heat03:13
*** liyi has quit IRC03:16
*** liyi_ has quit IRC03:17
*** liyi has joined #heat03:18
openstackgerritRico Lin proposed openstack/heat master: [TEST][DMT] check unittest issue  https://review.openstack.org/58002303:19
openstackgerritRico Lin proposed openstack/heat master: Check NotFound with pool property in pool member  https://review.openstack.org/54155803:23
*** edmondsw has joined #heat03:30
*** mdnadeem has joined #heat03:33
*** edmondsw has quit IRC03:35
*** yangyapeng has joined #heat03:43
*** yangyapeng has quit IRC03:46
*** yangyapeng has joined #heat03:46
*** ramishra has joined #heat03:49
*** liyi has quit IRC03:53
*** hongbin has quit IRC03:55
openstackgerritRico Lin proposed openstack/heat master: Support remote stack from another OpenStack provider  https://review.openstack.org/57839304:00
openstackgerritRico Lin proposed openstack/heat master: Add document for Multi OpenStack Cloud support  https://review.openstack.org/57839404:00
*** yangyapeng has quit IRC04:08
*** liyi has joined #heat04:21
*** yangyapeng has joined #heat04:23
*** mdnadeem_ has joined #heat04:28
*** mdnadeem has quit IRC04:29
*** mdnadeem_ has quit IRC04:32
*** yangyapeng has quit IRC04:32
*** mdnadeem_ has joined #heat04:45
*** yangyapeng has joined #heat04:53
*** yangyapeng has quit IRC05:11
*** yangyapeng has joined #heat05:12
*** yangyapeng has quit IRC05:17
*** edmondsw has joined #heat05:19
*** edmondsw has quit IRC05:24
*** dyasny has quit IRC05:46
*** liyi_ has joined #heat05:49
*** liyi_ has quit IRC05:50
*** liyi has quit IRC05:50
*** liyi has joined #heat05:51
*** dyasny has joined #heat05:57
*** armaan has joined #heat05:57
*** hassaan has joined #heat06:00
*** skramaja_ has joined #heat06:00
*** skramaja has quit IRC06:02
*** ysandeep has joined #heat06:25
*** yangyapeng has joined #heat06:28
*** nicolasbock has joined #heat06:35
*** shardy has joined #heat06:40
*** liyi_ has joined #heat06:42
*** liyi has quit IRC06:44
*** ysandeep has quit IRC06:50
openstackgerritNguyen Hung Phuong proposed openstack/heat-templates master: fix tox python3 overrides  https://review.openstack.org/57978606:54
openstackgerritNguyen Hung Phuong proposed openstack/heat-templates master: fix tox python3 overrides  https://review.openstack.org/57978606:58
*** edmondsw has joined #heat07:07
*** ysandeep has joined #heat07:08
*** edmondsw has quit IRC07:12
*** rcernin_ has quit IRC07:13
*** mdnadeem_ has quit IRC07:13
*** yangyapeng has quit IRC07:16
*** mdnadeem_ has joined #heat07:26
*** Guest38444 has quit IRC07:28
*** Guest38444 has joined #heat07:32
*** kiennt26 has joined #heat07:38
openstackgerritRico Lin proposed openstack/heat master: [TEST][DMT] check unittest issue  https://review.openstack.org/58002307:50
*** gkadam__ has joined #heat07:59
openstackgerritRico Lin proposed openstack/heat master: [TEST][DMT] check unittest issue  https://review.openstack.org/58002308:12
*** derekh has joined #heat08:14
*** dbecker has joined #heat08:34
*** liyi_ has quit IRC08:36
openstackgerritRico Lin proposed openstack/heat master: [TEST][DMT] check unittest  https://review.openstack.org/58009108:38
*** liyi has joined #heat08:39
*** neatherweb has quit IRC08:41
*** dbecker has quit IRC08:42
*** edmondsw has joined #heat08:56
openstackgerritRico Lin proposed openstack/heat master: [TEST][DMT] check unittest issue  https://review.openstack.org/58002308:57
*** dbecker has joined #heat09:00
*** edmondsw has quit IRC09:01
*** serlex has joined #heat09:02
*** armaan has quit IRC09:02
openstackgerritRico Lin proposed openstack/heat master: [TEST][DMT] check unittest issue  https://review.openstack.org/58002309:04
*** pbourke has quit IRC09:12
*** pbourke has joined #heat09:13
*** dbecker has quit IRC09:14
*** armaan has joined #heat09:38
openstackgerritRico Lin proposed openstack/heat master: Support remote stack from another OpenStack provider  https://review.openstack.org/57839309:39
openstackgerritRico Lin proposed openstack/heat master: Add document for Multi OpenStack Cloud support  https://review.openstack.org/57839409:39
*** liyi_ has joined #heat09:40
*** liyi has quit IRC09:43
*** liyi_ has quit IRC09:45
*** armaan has quit IRC09:56
*** armaan has joined #heat09:57
*** armaan has quit IRC09:57
*** armaan has joined #heat09:59
*** kiennt26 has quit IRC10:07
*** jmlowe has quit IRC10:24
*** liyi has joined #heat10:30
*** liyi has quit IRC10:35
*** dbecker has joined #heat10:37
*** armaan has quit IRC10:42
*** armaan has joined #heat10:43
*** edmondsw has joined #heat10:45
*** armaan has quit IRC10:48
*** edmondsw has quit IRC10:50
*** armaan has joined #heat11:11
*** yangyapeng has joined #heat11:19
*** yangyapeng has quit IRC11:23
*** yangyapeng has joined #heat11:23
*** peereb has joined #heat11:52
*** Guest38444 has quit IRC12:01
*** jmlowe has joined #heat12:02
*** armaan has quit IRC12:03
*** armaan has joined #heat12:04
*** mdnadeem_ has quit IRC12:05
*** mdnadeem has joined #heat12:06
*** jmlowe has quit IRC12:07
*** Guest38444 has joined #heat12:10
*** armaan has quit IRC12:13
*** edmondsw has joined #heat12:33
*** edmondsw has quit IRC12:38
*** liyi has joined #heat12:39
*** jmlowe has joined #heat12:39
*** serlex has quit IRC12:41
*** liyi has quit IRC12:43
openstackgerritRico Lin proposed openstack/python-heatclient master: Add extra functional tests in heatclient  https://review.openstack.org/41006312:57
ricolinzaneb, is today a day off in US?13:01
*** mdnadeem has quit IRC13:03
*** ysandeep has quit IRC13:10
*** serlex has joined #heat13:13
*** mdnadeem has joined #heat13:18
thervericolin: Yes13:18
ricolintherve, independence day!13:20
therveYes :)13:21
openstackgerritMerged openstack/python-heatclient master: fix tox python3 overrides  https://review.openstack.org/57333513:22
*** hjensas has quit IRC13:22
*** ysandeep has joined #heat13:27
*** liyi has joined #heat13:28
*** mdnadeem has quit IRC13:30
*** liyi has quit IRC13:33
*** armaan has joined #heat13:36
*** serlex has quit IRC13:38
*** armaan has quit IRC13:41
*** cliffparsons has quit IRC13:41
*** hassaan has quit IRC13:53
*** hjensas has joined #heat13:55
*** hjensas has quit IRC13:55
*** hjensas has joined #heat13:55
*** ysandeep has quit IRC13:56
*** ysandeep has joined #heat13:56
*** skramaja_ has quit IRC13:58
ricolin#startmeeting heat14:00
openstackMeeting started Wed Jul  4 14:00:32 2018 UTC and is due to finish in 60 minutes.  The chair is ricolin. Information about MeetBot at http://wiki.debian.org/MeetBot.14:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.14:00
*** openstack changes topic to " (Meeting topic: heat)"14:00
openstackThe meeting name has been set to 'heat'14:00
ricolin#topic roll call14:00
*** openstack changes topic to "roll call (Meeting topic: heat)"14:00
ricolinAnyone around for meeting?:)14:00
ramishrahi14:01
ricolino/14:01
ramishraricolin: Do we've anything pressing in the agenda for today?14:02
ricolinramishra, we might need to talk about keypair resource, ssl in remote stack, multicloud, but nothing pressing:)14:03
*** neatherweb has joined #heat14:04
ricolinwe can skip this one if you like:)14:04
ramishrayeah, we can keep those for the next meeting I suppose. I don't have anything than asking for some reviews14:04
therveHi14:04
ricolinhi therve :)14:04
ricolintherve, ramishra if you have time, please help me review https://review.openstack.org/#/q/topic:bp/multiple-cloud-support+(status:open+OR+status:merged)14:05
ramishraricolin: sure, will check. I would request we prioritize and review some bug fixes too:)14:06
ricolintherve, we're just talking about skip this meeting!14:06
ricolinramishra, good point14:07
ricolinwe can start to list bug/bps we needs to fix14:08
thervericolin: As a remark, we don't need objects14:09
therveI thought about getting rid of them, not sure adding them is a great idea14:09
openstackgerritMerged openstack/heat master: fix tox python3 overrides  https://review.openstack.org/57295914:09
ricolintherve, which part?14:10
thervericolin: https://review.openstack.org/57839114:10
ricolin#topic Open discussion14:10
*** openstack changes topic to "Open discussion (Meeting topic: heat)"14:10
ricolintherve, yeah, that object actually doing nothing14:10
*** sshnaidm|rover is now known as sshnaidm|afk14:11
ricolintherve, I can remove it, if that's fine by you all(actually prefer that)!14:12
ramishrathe whole object layer is just passthrough14:12
thervericolin: I don't know, it's just an idea14:13
ricolinramishra, and do we required to have that the extra function that object bring might only be checking fields(compare to it's db api)14:14
ricolin#action move all topics to next meeting14:16
ricolintherve, ramishra let's continue with those meeting topics in next meeting14:17
*** liyi has joined #heat14:18
therveok14:18
*** ramishra has quit IRC14:18
ricolin#link https://etherpad.openstack.org/p/Heat-Rocky-Targets-bps-and-bugs14:19
*** flwang has quit IRC14:20
ricolinI'm creating this etherpad for listing bugs/bps, let's collect some and before next meeting and try to ordering it next time(hope it downsize to zero before next meeting:) )14:20
ricolin#action Put bug/bps prioritized into https://etherpad.openstack.org/p/Heat-Rocky-Targets-bps-and-bugs14:21
ricolinOkay let's end this meeting thanks therve14:21
ricolin#endmeeting14:21
*** openstack changes topic to "OpenStack Heat Team (logs: http://eavesdrop.openstack.org/irclogs/%23heat/)"14:21
openstackMeeting ended Wed Jul  4 14:21:56 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:21
openstackMinutes:        http://eavesdrop.openstack.org/meetings/heat/2018/heat.2018-07-04-14.00.html14:22
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/heat/2018/heat.2018-07-04-14.00.txt14:22
openstackLog:            http://eavesdrop.openstack.org/meetings/heat/2018/heat.2018-07-04-14.00.log.html14:22
*** edmondsw has joined #heat14:22
*** ramishra has joined #heat14:22
ramishradisconnected sorry!14:23
ricolinramishra, NP:)14:23
*** liyi has quit IRC14:23
ricolinjust talking about an action to Put bug/bps prioritized into https://etherpad.openstack.org/p/Heat-Rocky-Targets-bps-and-bugs14:23
ramishraricolin: sounds good14:24
ricolinand than end meeting:)14:24
thervericolin: You still around to chat about https://review.openstack.org/#/c/578363/5/specs/rocky/multi-cloud-support.rst ?14:26
ricolintherve, yes14:26
*** edmondsw has quit IRC14:27
thervericolin: It needs to define the clouds server side apparently?14:27
therveI guess... that makes sense?14:27
ricolinyou mean needs to define clouds in remote server side?14:28
ricolintherve,14:28
therveYes14:28
ricolinIt can either be predefined clouds.yaml in server side, or directly provide a credential (Barbican secret) and we will use that to load authN info14:29
therve"All cloud general information will be fetched from clouds.yaml/secure.yaml file under ``~/.config/openstack/`"14:30
therveI'm not sure it's great to support local auth info14:30
ricolinyeah, which might be a problem of resource trying to access server file, but still keep it for now14:30
therveMok14:31
therveI'm a bit puzzled on how it works :)14:32
ricolintherve, which part14:32
thervericolin: Why is there an API change?14:33
*** flwang has joined #heat14:33
therveWhy do you need to pass credentials separetly14:33
therveseparately14:33
ricolinwe needs to parse a credential info(a barbican secret id) to remote site14:33
thervericolin: Why? Shouldn't we load it *before* talking to the remote site?14:35
therveFrom the look of it, you use it in RemoteStack14:36
therveSo in the local OpenStack, not on the remote one14:36
ricolintherve, we don't want to parse authN info cross two OpenStack cloud14:36
*** serlex has joined #heat14:37
therveWhat14:37
thervericolin: How do you talk to the remote OpenStack if you don't do authorisation?14:38
therveSee https://review.openstack.org/#/c/578393/7/heat/engine/resources/openstack/heat/remote_stack.py14:39
therveSeems that you fetch the barbican secret here, and then talk to the remote openstack with the creds that you got14:40
ricolintherve, there is two credential, one for access to remote OpenStack, one for actually authorize to manage resources. we're parsing the second credential(secret id) to remote OpenStack side and parse it to refresh context14:40
therveI don't see why you need to pass additional credentials14:40
thervericolin: OK so what's that second one for?14:41
therve"Authorize to manage resources", what does that mean14:41
ricolinyes, that's what the second one for. And the first credential is for access to remote OpenStack, which needs to store in local Barbican service. It's more secure if user limit the authZ of the first credential like you can only access to heat stack action etc14:43
therveI don't understand :)14:44
ricolintherve, that means actually have power to access to Nova, Cinder, etc14:44
thervericolin: As opposed to what?14:45
therveI don't understand why you don't talk directly to the remote cloud with the proper credentials14:46
ricolinThat's actually allowed if you just provide provider_credential_secret_id and don't provide `credential_secret_id`14:47
ricolinIn that way, it will directly use the only credential you provided14:48
ricolinTo directly access to remote OpenStack with a single credential means you need to either store the AuthN info in local Barbican server, or put it in property14:51
*** hongbin has joined #heat14:51
therveI thought we dismissed the second option as insecure14:51
*** ramishra has quit IRC14:51
ricolinyes, and I didn't implement it for sure14:52
thervericolin: I still don't understand what those 2nd credentials do14:52
therveWhat's the benefit?14:52
therveIs there added security?14:52
ricolintherve, yes14:52
thervericolin: OK, which one?14:52
*** ramishra has joined #heat14:53
ricolinto provide two credential, the `credential_secret_id` will only parsed in remote OpenStack and only user who allowed to access can read it14:53
therveDoesn't that mean that this user has more privileges than what `credential_secret_id` holds?14:55
ricolinSo we can limit the first credential to only allow create/update/etc. a stack and get that barbican secret and that's all we give for that credential14:55
*** armaan has joined #heat14:56
therveThat sounds super weird to me :)14:56
therveAlso not really related to multi cloud support14:56
therveYou're trying to reimplement keystone roles in Heat or something14:56
ricolinI mean, we allow to parse one credential all the way, but that means the user's authN info also parse around from local OpenStack to remote OpenStack14:58
therveI mean, yes, that's how auth works, no?15:00
therveIf you don't pass creds, you can't talk to the remote service15:00
thervericolin: So apparently, you can't pass both creds?15:01
therveWhat do you pass as primary creds if you specify the barbican id?15:02
ricolinif both provided, the `provider_credential_secret_id` will use to access to stack API and `credential_secret_id` will use to refresh context in remote side15:03
therveOK...15:04
thervericolin: I think that all thing is very confusing15:04
ricolin`provider_credential_secret_id` will be fetch from local Barbican and get all auth info (including auth_url)15:04
therveI suspect that's the reason zaneb -2 the original patch too15:04
therveIt would require tons of explanation in the spec15:05
therveI really don't see the benefit15:05
ricolintherve, this model is actually part of zaneb's idea too. I think we still can discuss more about which way we prefer and which is not in spec (I don't think to use clouds.yaml is a  secure way but that just me), I can update it with more explanation as we got more feedback on it15:09
thervericolin: Yes that'd be nice15:10
therveBecause I think it would be much simpler without all that mechanism15:10
therveWhich now I understand is why we need the new table and everything15:10
ricolinI will also write documentation once we settle down with specific implementation15:13
ricolinramishra, about the ssl option, that's why I put ssl for remote stack as a topic15:14
ricolinwhould like to know what's the best way if we like to keep it working https://review.openstack.org/#/c/48092315:15
ricolintherve, ramishra any idea on that?15:15
*** ramishra has quit IRC15:20
*** armaan has quit IRC15:23
*** armaan has joined #heat15:24
openstackgerritMerged openstack/heat master: Allow lazy load of raw_template but log warning  https://review.openstack.org/38895115:36
*** liyi has joined #heat15:38
*** sshnaidm|afk is now known as sshnaidm|rover15:38
*** serlex has quit IRC15:39
*** liyi has quit IRC15:42
*** serlex has joined #heat15:44
*** armaan has quit IRC15:52
*** armaan has joined #heat15:52
*** armaan has quit IRC15:57
*** shardy has quit IRC15:58
*** edmondsw has joined #heat16:10
*** edmondsw has quit IRC16:15
*** gkadam__ has quit IRC16:16
*** neatherweb has quit IRC16:16
*** peereb has quit IRC16:21
openstackgerritMerged openstack/heat master: Support region_name for software deployment  https://review.openstack.org/57948516:31
*** liyi has joined #heat16:37
*** liyi has quit IRC16:41
*** armaan has joined #heat16:54
*** ysandeep has quit IRC17:00
openstackgerritMerged openstack/heat master: Fix an exception message  https://review.openstack.org/57825517:06
*** derekh has quit IRC17:10
*** armaan has quit IRC17:32
*** armaan has joined #heat17:32
*** armaan has quit IRC17:36
*** dbecker has quit IRC17:50
*** serlex has quit IRC17:52
*** edmondsw has joined #heat17:59
*** edmondsw has quit IRC18:03
openstackgerritMerged openstack/heat master: Fix purging events from stacks converted to convergence  https://review.openstack.org/57927618:08
*** Guest38444 has quit IRC18:43
*** Guest38444 has joined #heat18:46
*** liyi has joined #heat19:13
*** liyi has quit IRC19:17
*** edmondsw has joined #heat19:48
*** edmondsw has quit IRC19:52
*** liyi has joined #heat20:12
*** liyi has quit IRC20:17
*** nicolasbock has quit IRC21:16
*** ricolin_ has joined #heat21:18
*** ricolin has quit IRC21:21
*** edmondsw has joined #heat21:36
*** edmondsw has quit IRC21:41
*** hongbin has quit IRC22:19
*** ricolin_ has quit IRC22:22
*** rcernin has joined #heat22:27
*** Guest38444 has quit IRC22:58
*** Guest38444 has joined #heat23:13
*** edmondsw has joined #heat23:25
*** edmondsw has quit IRC23:30
*** yangyapeng has quit IRC23:49
*** yangyapeng has joined #heat23:50
*** neatherweb has joined #heat23:53
*** yangyapeng has quit IRC23:54
« Tuesday, 2018-07-03 Index Thursday, 2018-07-05 »

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!