*** sdake has quit IRC | 00:01 | |
*** rcernin_ has quit IRC | 00:02 | |
zaneb | stewie925: look at the keystone logs to see why it's being rejected | 00:02 |
---|---|---|
stewie925 | hello zaneb - my keystone token authentication actually passed | 00:03 |
zaneb | in that case look at the heat-api log | 00:03 |
stewie925 | zaneb: btw thank you for your reply... ok let me check my keystone log (am using ocata devstack btw) | 00:03 |
stewie925 | zaneb: speaking of heat-api log - this is all it says: | 00:04 |
stewie925 | stack@ubuntu:~/devstack$ sudo tail -f /var/log/apache2/heat-api.log | sed -u 's/\\x1b/\o033/g' & echo $! >/opt/stack/status/stack/heat-api.pid; fg || echo "heat-api failed to start" | tee "/opt/stack/status/stack/heat-api.failure" [1] 29100 sudo tail -f /var/log/apache2/heat-api.log | sed -u 's/\\x1b/\o033/g' | 00:04 |
stewie925 | so first thing I was surprised about was why it is using /var/log/apache2/ as the log directory... | 00:05 |
zaneb | I interpreted your initial question as you successfully got a token from keystone but then heat rejected your token when you tried to authenticate with it? | 00:05 |
zaneb | I'm gonna say because devstack | 00:06 |
*** sdake has joined #heat | 00:06 | |
*** sdake has quit IRC | 00:06 | |
*** sdake has joined #heat | 00:06 | |
stewie925 | let me paste what it has.... | 00:06 |
*** sshnaidm|off has quit IRC | 00:06 | |
*** zioproto has quit IRC | 00:06 | |
*** eandersson has quit IRC | 00:06 | |
stewie925 | so my application creates a heat template to pass it on to heat | 00:06 |
stewie925 | I'll put it on paste.openstack.org brb | 00:07 |
zaneb | stewie925: btw when you get to queens you'll want to check this out: https://docs.openstack.org/keystone/queens/user/application_credentials.html | 00:08 |
stewie925 | zaneb: thnk you for that share - yeah right now my keystone authentication type is password | 00:10 |
*** jnettlet[m] has quit IRC | 00:10 | |
* zaneb is telling anybody who will listen about it :) | 00:10 | |
stewie925 | I like how keystone queens accepts application credentials | 00:11 |
*** felipemonteiro has joined #heat | 00:11 | |
stewie925 | zaneb: http://paste.openstack.org/show/726313/ | 00:13 |
stewie925 | the first line shows keystone success authentication, second line shows the curl request, and the third line shows the failure :( | 00:13 |
*** sshnaidm|off has joined #heat | 00:15 | |
*** zioproto has joined #heat | 00:15 | |
*** eandersson has joined #heat | 00:15 | |
*** rcernin_ has joined #heat | 00:16 | |
zaneb | stewie925: so where it's failing indicates that the project_id in the request URL (5005406c177445ca8ff63190692028f9) doesn't match the project_id of the token | 00:18 |
stewie925 | hmmm | 00:19 |
stewie925 | in devstack when I do 'openstack project list' I see "5005406c177445ca8ff63190692028f9 | admin " | 00:22 |
*** felipemonteiro has quit IRC | 00:22 | |
stewie925 | oh wait.. aha!!! | 00:22 |
stewie925 | zaneb: I just realized - | 00:23 |
stewie925 | my application's conf [keystone-authtoken] project_name is admin - whereas devstack heat.conf project name is something else | 00:24 |
stewie925 | let me change my application conf project name to match that of devstack heat.conf's | 00:24 |
*** livelace2 has quit IRC | 00:28 | |
*** livelace2 has joined #heat | 00:28 | |
*** ricolin has joined #heat | 00:28 | |
stewie925 | zaneb: interesting :( I did finally change my app conf [keystone_authtoken] project_name to match devstack's heat.conf [keystone_authtoken] project_name | 00:29 |
stewie925 | i checked the project id in the curl request URL and it does match the heat project_name but still I get the same 403 forbidden... | 00:30 |
stewie925 | oh dont tell me.... (talking to myself) | 00:31 |
stewie925 | ok I need to match every line in my app conf [keystone_authtoken] entries to match that of heat.conf's in devstack | 00:32 |
*** rcernin_ has quit IRC | 00:43 | |
*** rcernin has joined #heat | 00:44 | |
*** jnettlet[m] has joined #heat | 00:48 | |
stewie925 | zaneb: how do i check if the project does or does not match the project_id of the token? | 00:49 |
* zaneb has no idea :/ | 00:49 | |
zaneb | I guess if it fails at that same line, it doesn't | 00:50 |
stewie925 | zaneb: thanks ... its alright :) | 00:52 |
stewie925 | guess my question should be how do I figure out the project id of the token | 00:52 |
openstackgerrit | Merged openstack/heat-specs master: Add Rocky Spec Template https://review.openstack.org/578674 | 00:58 |
*** tpatil has joined #heat | 01:07 | |
*** harlowja has quit IRC | 01:09 | |
*** neatherweb has joined #heat | 01:18 | |
*** joxyuki has joined #heat | 01:20 | |
*** hongbin_ has joined #heat | 01:32 | |
*** stewie925 has quit IRC | 02:20 | |
*** tpatil has quit IRC | 02:35 | |
*** links has joined #heat | 02:40 | |
*** lifeless has quit IRC | 02:51 | |
*** lifeless has joined #heat | 02:58 | |
*** skramaja has joined #heat | 03:09 | |
*** skramaja_ has joined #heat | 03:14 | |
*** skramaja has quit IRC | 03:14 | |
*** felipemonteiro_ has joined #heat | 03:18 | |
*** skramaja_ is now known as skramaja | 03:29 | |
*** ramishra has joined #heat | 03:33 | |
openstackgerrit | Merged openstack/heat-tempest-plugin master: Move Octavia tests to scenario tests https://review.openstack.org/576269 | 03:46 |
*** mdnadeem has joined #heat | 04:05 | |
*** tpatil has joined #heat | 04:13 | |
*** hongbin_ has quit IRC | 04:22 | |
openstackgerrit | Rabi Mishra proposed openstack/heat master: Option for retrieving child templates and env files from swift https://review.openstack.org/551871 | 04:22 |
openstackgerrit | Rabi Mishra proposed openstack/heat master: Add API doc for files_container support https://review.openstack.org/583108 | 04:22 |
*** harlowja has joined #heat | 04:30 | |
tpatil | Hi Heat Team: Request you to please review patch https://review.openstack.org/#/c/583821/ . It's a blocker issue for Tacker project. | 04:35 |
tpatil | Just saw +2 and worflow +1. Thank you, ramishra | 04:36 |
ramishra | tpatil: np:) | 04:38 |
*** mdnadeem has quit IRC | 04:39 | |
*** harlowja has quit IRC | 04:52 | |
*** mdnadeem has joined #heat | 05:47 | |
*** dmellado has quit IRC | 05:48 | |
*** stevebaker has quit IRC | 05:49 | |
*** ramishra has quit IRC | 05:58 | |
*** ramishra has joined #heat | 05:59 | |
*** AlexeyAbashkin has joined #heat | 06:15 | |
*** hjensas has joined #heat | 06:25 | |
*** hjensas has joined #heat | 06:25 | |
*** stevebaker has joined #heat | 06:29 | |
*** dmellado has joined #heat | 06:29 | |
*** AlexeyAbashkin has quit IRC | 06:41 | |
*** piepmatz has joined #heat | 06:47 | |
*** hoonetorg has quit IRC | 06:54 | |
*** AlexeyAbashkin has joined #heat | 06:58 | |
*** Alexey_Abashkin has joined #heat | 07:01 | |
*** AlexeyAbashkin has quit IRC | 07:02 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 07:02 | |
*** rcernin has quit IRC | 07:02 | |
*** jtomasek has joined #heat | 07:04 | |
*** hoonetorg has joined #heat | 07:11 | |
*** hjensas has quit IRC | 07:22 | |
*** peereb has joined #heat | 07:26 | |
*** dummy_account has quit IRC | 07:31 | |
*** wirehead_ has quit IRC | 07:31 | |
*** gkadam has joined #heat | 07:37 | |
*** tpatil has quit IRC | 07:40 | |
openstackgerrit | Merged openstack/heat master: Bump monascaclient to at less 1.12.0 https://review.openstack.org/583433 | 07:42 |
openstackgerrit | Merged openstack/heat master: Revert "Remove unittests monasca until story/2002978 is released" https://review.openstack.org/583244 | 07:42 |
*** gfidente has joined #heat | 08:00 | |
*** gfidente has quit IRC | 08:00 | |
*** gfidente has joined #heat | 08:00 | |
*** wirehead_ has joined #heat | 08:01 | |
*** shardy has joined #heat | 08:10 | |
piepmatz | ricolin: a colleague of mine asks to get his giant change merged: https://review.openstack.org/#/c/581338/ :) | 08:11 |
ricolin | piepmatz, TBH I don't think that's a useful fix, It didn't sounds like will confuse to user. I'm not gonna leave any message, so other cores might approve it. | 08:38 |
ricolin | piepmatz, If he/she can help on working on some other stuff, I believe that will be very useful:) We need more contributors:) | 08:39 |
openstackgerrit | Harald Jensås proposed openstack/heat master: OS::Neutron::Port: Add network attribute https://review.openstack.org/569053 | 08:41 |
*** joxyuki has quit IRC | 08:44 | |
piepmatz | ricolin, I'll let him know. Regarding his change: I mean, sure, it's not really important and the missing space won't confuse users. However, the missing space is an error that doesn't look good on https://docs.openstack.org/heat/queens/configuration/config-options.html | 08:44 |
*** dbecker has joined #heat | 08:44 | |
piepmatz | ricolin: besides that, could you please share your thoughts regarding my yesterday's question regarding heat_tempest_plugin.tests.scenario.test_server_software_config? | 08:47 |
*** kairat has left #heat | 08:47 | |
*** hjensas has joined #heat | 08:50 | |
*** hjensas has joined #heat | 08:50 | |
*** pbourke has quit IRC | 08:53 | |
*** pbourke has joined #heat | 08:53 | |
ricolin | piepmatz, may I ask what's the version of you environment? | 08:55 |
piepmatz | ricolin: queens | 08:55 |
piepmatz | ricolin: but as that tempest test is disabled nobody noticed that building the custom heat image is broken for quite some time and the build still tries to install the juno package which is not even available any more at the URL where it once was. that makes this test and maybe the tested feature look somewhat unimportant. I just don't know if it is or if it's worth trying to get that test succeed | 09:00 |
ricolin | piepmatz, That test is really skipped for very long time... | 09:04 |
ricolin | If we can fix that test, it's definitely provide value | 09:04 |
piepmatz | ricolin: ok, thanks for looking into it! | 09:06 |
ricolin | piepmatz, if you like to test your software config function on heat environment, you can also use https://github.com/openstack/heat-tempest-plugin/blob/master/heat_tempest_plugin/tests/functional/test_software_config.py | 09:07 |
piepmatz | ricolin: that one succeeds. I'll see if my company also wants the integration test. if yes, I'll try to fix it upstream | 09:12 |
ricolin | piepmatz, Thanks!:) | 09:13 |
ramishra | piepmatz: which custom image build script is broken and using juno bits? Is https://docs.openstack.org/heat/latest/template_guide/software_deployment.html#custom-image-script not working? | 09:15 |
openstackgerrit | Harald Jensås proposed openstack/heat master: OS::Nova::Server: Extend addresses attr to include network https://review.openstack.org/568961 | 09:17 |
*** neatherweb has quit IRC | 09:17 | |
piepmatz | ramishra: I don't exactly follow the procedure you linked. that scenario test led me to https://github.com/openstack/heat-templates/blob/master/hot/software-config/test-image/build-heat-test-image.sh. the fedora image could not even be built and the centos one is broken. the juno stuff is in https://github.com/openstack/heat-templates/blob/master/hot/software-config/test-image/elements/centos7-heat-test/pkg-map. i did not try the ubuntu image | 09:20 |
ramishra | yep, that's old and no one has looked at it for ages. I thinks docs are upto date either in templates guide or https://docs.openstack.org/heat-agents/latest/install/building_image.html | 09:24 |
openstackgerrit | Merged openstack/heat master: Fix server_group create issue https://review.openstack.org/583821 | 09:24 |
ramishra | We don't run those tests as the failure rate for them was very high, but if there are any issues/bugs with those tests feel free to raise bugs | 09:26 |
*** links has quit IRC | 09:29 | |
ramishra | ricolin: we should probably maintain or remove those scripts from heat-templates some day:) | 09:29 |
ricolin | ramishra, yeah we deprecated them two month ago, so might be able to remove them right at S release I think | 09:33 |
*** jnettlet[m] has quit IRC | 09:42 | |
*** sshnaidm|off has quit IRC | 09:50 | |
*** jnettlet[m] has joined #heat | 09:52 | |
*** hjensas has quit IRC | 10:00 | |
*** AlexeyAbashkin has quit IRC | 10:08 | |
*** mdnadeem has quit IRC | 10:09 | |
*** AlexeyAbashkin has joined #heat | 10:11 | |
*** mdnadeem has joined #heat | 10:15 | |
*** AlexeyAbashkin has quit IRC | 10:18 | |
*** ricolin has quit IRC | 10:23 | |
*** AlexeyAbashkin has joined #heat | 10:31 | |
*** mdnadeem has quit IRC | 10:32 | |
*** shardy has quit IRC | 10:56 | |
*** mdnadeem has joined #heat | 11:03 | |
*** hjensas has joined #heat | 11:04 | |
*** hjensas has joined #heat | 11:04 | |
*** wolverineav has joined #heat | 11:16 | |
*** wolverineav has quit IRC | 11:24 | |
*** wolverineav has joined #heat | 11:25 | |
*** links has joined #heat | 11:32 | |
*** mdnadeem has quit IRC | 11:42 | |
*** mdnadeem has joined #heat | 11:45 | |
*** mdnadeem_ has joined #heat | 11:47 | |
*** mdnadeem has quit IRC | 11:48 | |
*** higgins has quit IRC | 12:19 | |
*** higgins has joined #heat | 12:23 | |
*** ayoung has quit IRC | 12:30 | |
*** AlexeyAbashkin has quit IRC | 12:31 | |
*** ricolin has joined #heat | 12:33 | |
*** AlexeyAbashkin has joined #heat | 12:35 | |
*** edmondsw has joined #heat | 12:42 | |
*** d0ugal has quit IRC | 12:45 | |
*** d0ugal has joined #heat | 12:45 | |
*** d0ugal has quit IRC | 12:45 | |
*** d0ugal has joined #heat | 12:45 | |
*** morsik has joined #heat | 12:48 | |
morsik | Anyone knows how can I fix stack that fails with "resource DELETE failed"? I had problems with volume, so I removed it. Now Heat don't want to apply stack, cause resource does not exists anymore… ;/ | 12:48 |
*** sshnaidm|off has joined #heat | 12:48 | |
*** AlexeyAbashkin has quit IRC | 12:55 | |
*** AlexeyAbashkin has joined #heat | 12:56 | |
*** d0ugal has quit IRC | 12:57 | |
*** armaan has joined #heat | 13:00 | |
morsik | Hmm… looks like 'stack check' did the work | 13:00 |
*** jcoufal has joined #heat | 13:05 | |
*** d0ugal has joined #heat | 13:09 | |
*** skramaja has quit IRC | 13:26 | |
*** armaan has quit IRC | 13:28 | |
*** ifat_afek has joined #heat | 13:33 | |
*** TheJulia is now known as needssleep | 13:40 | |
*** EmilienM is now known as EvilienM | 13:41 | |
*** jcoufal has quit IRC | 13:44 | |
*** jcoufal has joined #heat | 13:45 | |
*** ifat_afek has quit IRC | 13:54 | |
*** hongbin has joined #heat | 13:55 | |
*** peereb has quit IRC | 14:05 | |
*** mdnadeem_ has quit IRC | 14:12 | |
*** jcoufal has quit IRC | 14:14 | |
*** jcoufal has joined #heat | 14:15 | |
*** blomquisg_gone is now known as blomquisg | 14:18 | |
*** jtomasek has quit IRC | 14:28 | |
*** felipemonteiro_ has quit IRC | 14:33 | |
*** armaan has joined #heat | 14:47 | |
*** felipemonteiro has joined #heat | 14:51 | |
*** links has quit IRC | 14:52 | |
*** armaan has quit IRC | 14:57 | |
*** bnemec is now known as beekneemech | 15:09 | |
*** wolverineav has quit IRC | 15:23 | |
*** hoonetorg has quit IRC | 15:24 | |
*** hoonetorg has joined #heat | 15:26 | |
*** wolverineav has joined #heat | 15:28 | |
openstackgerrit | Rico Lin proposed openstack/python-heatclient master: Load files from adopt file when adopt stack https://review.openstack.org/506743 | 15:33 |
openstackgerrit | Rico Lin proposed openstack/python-heatclient master: Load files from adopt file when adopt stack https://review.openstack.org/506743 | 15:34 |
*** sshnaidm|off has quit IRC | 15:53 | |
*** dbecker has quit IRC | 16:04 | |
openstackgerrit | Tovin Seven proposed openstack/python-heatclient master: Trivial: Update pypi url to new url https://review.openstack.org/563054 | 16:05 |
*** piepmatz has quit IRC | 16:11 | |
*** AlexeyAbashkin has quit IRC | 16:13 | |
*** gkadam has quit IRC | 16:29 | |
*** sshnaidm|off has joined #heat | 16:38 | |
*** jmlowe has quit IRC | 16:44 | |
*** felipemonteiro has quit IRC | 16:45 | |
*** ramishra has quit IRC | 17:07 | |
*** ricolin has quit IRC | 17:15 | |
*** jtomasek has joined #heat | 17:28 | |
*** jtomasek has quit IRC | 17:47 | |
*** jtomasek has joined #heat | 17:47 | |
*** jtomasek has quit IRC | 17:54 | |
*** gmoro_ has quit IRC | 18:24 | |
*** gfidente has quit IRC | 18:52 | |
*** gmoro_ has joined #heat | 18:55 | |
*** jcoufal has quit IRC | 19:00 | |
*** gmoro_ has quit IRC | 19:02 | |
*** edmondsw has quit IRC | 19:19 | |
*** edmondsw has joined #heat | 19:20 | |
*** edmondsw has quit IRC | 19:26 | |
openstackgerrit | Merged openstack/python-heatclient master: Enable some off-by-default checks https://review.openstack.org/476320 | 19:32 |
*** hjensas has quit IRC | 20:04 | |
*** edmondsw has joined #heat | 20:20 | |
*** blomquisg is now known as blomquisg_gone | 21:09 | |
*** jnettlet[m] has quit IRC | 21:16 | |
*** felipemonteiro has joined #heat | 21:38 | |
*** felipemonteiro has quit IRC | 21:41 | |
*** felipemonteiro has joined #heat | 21:41 | |
*** felipemonteiro has quit IRC | 21:59 | |
*** jnettlet[m] has joined #heat | 22:08 | |
*** weshay is now known as weshay_PTO | 22:15 | |
*** ayoung has joined #heat | 22:33 | |
*** hongbin has quit IRC | 22:50 | |
*** wolverineav has quit IRC | 23:58 | |
*** wolverineav has joined #heat | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!