Thursday, 2014-04-17

« Wednesday, 2014-04-16 Index Friday, 2014-04-18 »
*** gokrokve has joined #murano00:08
*** rakhmerov has joined #murano00:31
*** rakhmerov has quit IRC00:36
*** IlyaE has quit IRC01:16
*** IlyaE has joined #murano01:19
*** IlyaE has quit IRC01:20
*** IgorYozhikov has quit IRC01:22
*** katyafervent has quit IRC01:22
*** IgorYozhikov has joined #murano01:22
*** katyafervent has joined #murano01:22
*** rakhmerov has joined #murano01:32
*** julienvey has joined #murano01:32
*** julienvey has quit IRC01:36
*** rakhmerov has quit IRC01:36
*** ankurrr has joined #murano02:32
*** rakhmerov has joined #murano02:32
*** julienvey has joined #murano02:33
*** rakhmerov has quit IRC02:37
*** julienvey has quit IRC02:37
*** asalkeld is now known as asalkeld_lunch02:38
*** IlyaE has joined #murano02:42
openstackgerritGeorgy Okrokvertskhov proposed a change to stackforge/murano-dashboard: Enable actual API call for stats  https://review.openstack.org/8812703:10
*** IlyaE has quit IRC03:10
openstackgerritGeorgy Okrokvertskhov proposed a change to stackforge/python-muranoclient: Fix the issue with stats API call  https://review.openstack.org/8812803:11
*** julienvey has joined #murano03:33
*** rakhmerov has joined #murano03:33
*** asalkeld_lunch is now known as asalkeld03:34
*** julienvey has quit IRC03:38
*** rakhmerov has quit IRC03:39
*** rakhmerov has joined #murano03:40
openstackgerritGeorgy Okrokvertskhov proposed a change to stackforge/murano-api: Add CPU info to stats  https://review.openstack.org/8813404:01
*** IlyaE has joined #murano04:04
*** sab has joined #murano04:13
*** julienvey has joined #murano04:34
*** chandan_kumar has joined #murano04:35
*** julienvey has quit IRC04:39
*** gokrokve has quit IRC04:56
*** gokrokve_ has joined #murano05:01
*** gokrokve_ has quit IRC05:03
*** chandan_kumar has quit IRC05:03
*** chandan_kumar has joined #murano05:03
sabHi I have logged a bug for murano-deployment -- https://bugs.launchpad.net/murano/+bug/130849305:11
*** sab_ has joined #murano05:13
*** sab_ has quit IRC05:13
*** sab_ has joined #murano05:13
*** sab has quit IRC05:15
*** gokrokve has joined #murano05:45
*** gokrokve has quit IRC05:50
*** ankurrr has quit IRC06:22
*** IlyaE has quit IRC06:33
*** gokrokve has joined #murano06:45
*** IlyaE has joined #murano06:47
*** gokrokve has quit IRC06:50
*** ekarlso has quit IRC07:12
*** IlyaE has quit IRC07:16
*** gokrokve has joined #murano07:46
*** gokrokve has quit IRC07:51
openstackgerritTimur Sufiev proposed a change to stackforge/murano-api: Use the same AppType in dynamic UI as in applications's manifest  https://review.openstack.org/8820608:13
openstackgerritTimur Sufiev proposed a change to stackforge/murano-api: Use the same AppType in dynamic UI as in applications's manifest  https://review.openstack.org/8820608:16
openstackgerritTimur Sufiev proposed a change to stackforge/murano-api: Fix class FQNs for Active Directory in Dynamic UI  https://review.openstack.org/8820608:34
*** chandan_kumar has quit IRC09:08
openstackgerritTimur Sufiev proposed a change to stackforge/murano-dashboard: Tailor Deployments Tab to the new object model  https://review.openstack.org/8656909:11
*** julienvey has joined #murano09:32
*** asalkeld has quit IRC09:40
*** gokrokve has joined #murano09:49
*** gokrokve has quit IRC09:53
*** julienvey has quit IRC10:16
*** julienvey has joined #murano10:34
*** julienvey has quit IRC10:39
*** julienvey has joined #murano10:48
*** gokrokve has joined #murano10:50
*** julienvey has quit IRC10:52
*** gokrokve has quit IRC10:55
*** sab_ has quit IRC11:10
*** killer_prince has quit IRC11:13
openstackgerritTimur Sufiev proposed a change to stackforge/murano-dashboard: Fix 'Name' field in Environment -> Services table  https://review.openstack.org/8726411:23
openstackgerritTimur Sufiev proposed a change to stackforge/murano-dashboard: Tailor Deployments Tab to the new object model  https://review.openstack.org/8656911:28
*** julienvey has joined #murano11:31
*** lazy_prince has joined #murano11:32
*** lazy_prince is now known as killer_prince11:32
openstackgerritTimur Sufiev proposed a change to stackforge/murano-dashboard: Tailor Deployments Tab to the new object model  https://review.openstack.org/8656911:36
*** gokrokve has joined #murano11:50
*** gokrokve has quit IRC11:55
openstackgerritTimur Sufiev proposed a change to stackforge/murano-dashboard: Fix 'Name' field in Environment -> Services table  https://review.openstack.org/8726411:56
sergmelikyansab, thanks for the bug report :) Scripts used by you are marked as deprecated, please try this ones: https://github.com/stackforge/murano-api/tree/master/contrib/devstack11:57
*** sab has joined #murano12:03
openstackgerritStan Lagun proposed a change to stackforge/murano-dashboard: Add generateHostname function  https://review.openstack.org/8785112:03
openstackgerritDmitry Teselkin proposed a change to stackforge/murano-api: Configure rabbit vhost for Murano  https://review.openstack.org/8825912:05
*** gokrokve has joined #murano12:09
openstackgerritA change was merged to stackforge/murano-api: Fix class FQNs for Active Directory in Dynamic UI  https://review.openstack.org/8820612:12
*** gokrokve has quit IRC12:13
*** julienvey has quit IRC12:15
*** julienvey has joined #murano12:16
openstackgerritStan Lagun proposed a change to stackforge/murano-dashboard: Add generateHostname function  https://review.openstack.org/8785112:19
*** julienvey has quit IRC12:20
*** tnurlygayanov has quit IRC12:53
*** julienvey has joined #murano13:00
*** tnurlygayanov has joined #murano13:05
*** gokrokve has joined #murano13:10
openstackgerritTimur Sufiev proposed a change to stackforge/murano-dashboard: Catch CommunicationError at Packages panel  https://review.openstack.org/8772513:14
*** gokrokve has quit IRC13:14
*** chandan_kumar has joined #murano13:36
*** dteselkin_ has quit IRC13:52
*** dteselkin_ has joined #murano13:54
*** drupalmonkey has joined #murano14:07
*** gokrokve has joined #murano14:11
*** sjmc7 has joined #murano14:12
*** julienvey has quit IRC14:14
*** gokrokve has quit IRC14:15
*** gokrokve has joined #murano14:27
*** gokrokve_ has joined #murano14:29
*** chandan_kumar has quit IRC14:31
*** gokrokve has quit IRC14:33
*** julienvey has joined #murano14:37
*** sergmelikyan has quit IRC14:40
*** sergmelikyan has joined #murano14:40
openstackgerritGeorgy Okrokvertskhov proposed a change to stackforge/murano-api: Add CPU info to stats  https://review.openstack.org/8813414:41
openstackgerritGeorgy Okrokvertskhov proposed a change to stackforge/murano-dashboard: Fix floating number appearence on stats page  https://review.openstack.org/8832514:43
*** tnurlygayanov has quit IRC14:52
*** IlyaE has joined #murano14:57
*** chandan_kumar has joined #murano14:58
*** tnurlygayanov has joined #murano14:59
openstackgerritA change was merged to stackforge/murano-dashboard: Tailor Deployments Tab to the new object model  https://review.openstack.org/8656915:06
openstackgerritDmitry Teselkin proposed a change to stackforge/murano-api: Configure rabbit vhost for Murano  https://review.openstack.org/8825915:08
*** sab has quit IRC15:23
*** sab has joined #murano15:24
*** chandan_kumar has quit IRC15:27
*** chandan_kumar has joined #murano15:28
*** tnurlygayanov has quit IRC15:30
sjmc7morning guys. is there already a blueprint to add policy checks to the api?15:33
openstackgerritA change was merged to stackforge/murano-dashboard: Add generateHostname function  https://review.openstack.org/8785115:35
*** tnurlygayanov has joined #murano15:38
*** chandan_kumar has quit IRC15:42
*** sab has quit IRC15:43
*** akuznetsova_ has joined #murano15:44
sergmelikyansjmc7, not yet15:45
* sergmelikyan missed topic about policy checks15:45
*** sab has joined #murano15:45
sergmelikyansjmc7, could you explore more or share a link?15:45
sjmc7yeah.. it's common to all services i think, but designate (DNS) for instance has a policy file https://github.com/stackforge/designate/blob/master/etc/designate/policy.json and its API checks against the policy rules (eg https://github.com/stackforge/designate/blob/master/designate/central/service.py#L314)15:46
sjmc7it means you can have a keystone user for murano that can do what it's allowed and no more15:47
sjmc7and i think we'll be required to do it, our ops folks don't like blanket admin privileges15:47
sjmc7i can put a blueprint in. it's not urgent15:48
sjmc7ah.. you have RBAC blueprints already15:49
sjmc7it'll be related to that15:49
*** julienvey has quit IRC15:51
sergmelikyansjmc7, it would be perfect to add another blueprint about policy, and note that this may be related to RBAC. I think policy may be much more powerful  and easy to implement. I think RBAC blueprint was created when we did know anything about policy15:52
sergmelikyan*did know nothing15:53
sjmc7ok. i'll dig out the openstack docs about it and read up some more15:53
openstackgerritA change was merged to stackforge/murano-dashboard: Fix Quick Environment not deleting on errors  https://review.openstack.org/8761815:54
*** julienvey has joined #murano15:59
*** chandan_kumar has joined #murano16:02
*** akuznetsova_ has quit IRC16:06
*** stanlagun has joined #murano16:12
*** julienvey has quit IRC16:12
*** akuznetsova_ has joined #murano16:13
sergmelikyanGuys, katyafervent is almost finished small demo for Murano v0.5: https://drive.google.com/file/d/0B3F5XCmYtnRdWDdET1EzX2xIeWs/edit16:14
sergmelikyanWhat do you think? :)16:15
*** dteselkin_ has quit IRC16:17
*** dteselkin_ has joined #murano16:21
sergmelikyansjmc7, your feedback will be very appreciated :)16:22
sjmc7ah, excellent. i'll take a look at it16:22
*** sab has quit IRC16:24
sjmc7sergmelikyan - https://blueprints.launchpad.net/murano/+spec/policy-checks-in-api16:27
sjmc7i put some more blueprints in yesterday, we can maybe discuss them after 0.5 is out of the door16:27
openstackgerritTimur Sufiev proposed a change to stackforge/murano-dashboard: Tailor Topology Tab view to the new object model  https://review.openstack.org/8653016:29
ruhesjmc7: can you please set me (https://launchpad.net/~ruhe) as approver when you file a blueprint? there is no way to subscribe to new blueprints, so it's the only workaround to catch new BPs :)16:34
sjmc7ah, yes. sorry16:35
sjmc7i submitted some more yesterday16:35
openstackgerritGeorgy Okrokvertskhov proposed a change to stackforge/murano-api: Add CPU info to stats  https://review.openstack.org/8813416:44
sjmc7done, ruhe16:49
ruhesjmc7: thank you!16:50
sjmc7how're the final 0.5 changes going?16:50
igormarnatsjmc7, going good, you can take a look at overall status of 0.5 based on blueprints here: https://launchpad.net/murano/+milestone/0.516:51
openstackgerritSerg Melikyan proposed a change to stackforge/python-muranoclient: Added HTTP proxy support  https://review.openstack.org/8501416:56
igormarnatsjmc7, btw, there are several bugs which we marked today as low hanging fruits - feel free to fix them, if you wish:)16:59
sjmc7igormarnat - excellent, thanks. my team's starting to work on them now, they're good learning experiences16:59
igormarnatyep, this was the idea17:02
*** chandan_kumar has quit IRC17:19
*** akuznetsova_ has quit IRC17:26
openstackgerritA change was merged to stackforge/murano-api: Default MuranoPL function argument value was evaluated incorrectly  https://review.openstack.org/8799717:27
*** gokrokve_ has quit IRC17:28
*** gokrokve has joined #murano17:29
sjmc7ruhe/sergmelikyan - also on the subject of authentication, is there a list of permissions the murano service user needs?17:29
sjmc7i.e. validate keystone tokens17:29
*** ankurrr has joined #murano17:29
*** gokrokve has quit IRC17:47
*** tnurlygayanov has quit IRC17:53
*** tnurlygayanov has joined #murano17:55
*** gokrokve has joined #murano18:04
stanlagunsjmc7, nothing special for Murano18:11
*** gokrokve has quit IRC18:13
*** IlyaE has quit IRC18:16
sjmc7ok, stanlagun. i'll need to give a list to our ops guys18:33
stanlagunI never created any permissions in keystone and everything works fine18:37
sjmc7in the keystone_authtoken section?18:37
stanlagunit is just keystone location18:39
*** gokrokve has joined #murano18:39
sjmc7I'll need to request a user for the admin_user in there18:39
sjmc7and be specific about what permissions it needs18:39
*** chandan_kumar has joined #murano18:44
stanlagunI've used admin so far. AFAIK API/engine works on user behalf using provided token. The only place I've seen those parameters are used are tempest tests18:44
sjmc7your admin user is one set up by devstack or something? in a production deploy, i won't be allowed to use that user since it has administrative contorl over the entire installation18:45
sjmc7i'll get granted a limited user, and i'll need to know what keystone permissions to request. i can go through and document them18:45
gokrokvesjmc7: There is no RBAC implemented. Here is a patch to add roles information to Murano context. This is a first step towards RBAC. https://review.openstack.org/#/c/80090/18:50
gokrokveIn General Murano does not require user to have admin rights.18:52
sjmc7ah, thanks gokrokve. yes, this looks like the starting point to what i'm talking about18:52
sjmc7right gokrokve - but it does need an admin user configured in murano-api.conf18:52
gokrokvesjmc7: That is other. Here in keystone section you need to specify user who can authenticate in service account.18:53
gokrokveSo usually admin_tenant_name=service18:53
sjmc7yes18:53
gokrokveadmin_user=murano18:53
gokrokveand Keystone should have murano user who has only access to service tenant18:54
gokrokveyou don't need admin here as this is an account for keystone client to connect to keystone.18:54
sjmc7yes. but the murano user needs to authenticate tokens, correct?18:54
sjmc7the API, i mean18:54
gokrokveSure. All users who work with murano API must provide auth_token18:55
sjmc7yes18:55
gokrokveWe have keystone auth_token midleware in a pipeline, so each request is veryfied against keystone before it hits Murano API18:55
sjmc7perhaps i am mistaken - i thought it required more privileges than a regular user in order to authenticate tokens18:55
gokrokveNo. Murano uses privileges provided by user auth token.18:56
sjmc7ok. let me do some more research, i may be misunderstanding18:56
gokrokveI believe the only place we use auth_token directly is when we call heat api.18:57
gokrokveI usually do Murano demo with standard demo user in demo tenant. This user has no special privileges.18:57
gokrokveIt works fine :-)18:57
sjmc7yes.. let me do some more research, i don't think i'm being clear18:58
*** julienvey has joined #murano19:00
stanlagunMurano engine doesn't authenticats in keystone. It works on user behalf using provided token without verifying it. At least now. But this token will eventually be passed to Heat and Heat will verify it19:01
stanlagunSo the only place is API midlware that verifies user token. And the only permissions that are needed are those to verify user's token19:02
sjmc7ok. i think that's my answer then, thanks :)19:02
*** rakhmerov has quit IRC19:11
*** julienvey has quit IRC19:14
*** killer_prince has quit IRC19:32
*** lazy_prince has joined #murano19:39
*** lazy_prince is now known as killer_prince19:39
*** IlyaE has joined #murano19:42
*** killer_prince has quit IRC19:59
*** killer_prince has joined #murano20:08
*** chandan_kumar has quit IRC20:22
*** rakhmerov has joined #murano21:13
*** rakhmerov has quit IRC21:17
*** gokrokve has quit IRC21:19
*** TravT has joined #murano22:03
*** TravT has quit IRC22:04
*** TravT has joined #murano22:04
*** TravT has quit IRC22:05
*** TravT has joined #murano22:05
*** rakhmerov has joined #murano22:11
*** drupalmonkey has quit IRC22:14
*** rakhmerov has quit IRC22:16
*** sab has joined #murano22:21
openstackgerritStan Lagun proposed a change to stackforge/murano-api: Preserve all keys in object's system area ('?') that start with underscore  https://review.openstack.org/8845422:22
*** sab has quit IRC22:25
openstackgerritSteve McLellan proposed a change to stackforge/murano-dashboard: Fix link to image detail.  https://review.openstack.org/8845522:26
*** IlyaE has quit IRC22:57
*** rakhmerov has joined #murano23:12
*** rakhmerov has quit IRC23:17
*** IlyaE has joined #murano23:19
*** asalkeld has joined #murano23:26
*** asalkeld has left #murano23:32
*** IlyaE has quit IRC23:32
openstackgerritAnkur Rishi proposed a change to stackforge/murano-api: replace reference to .items() w/ call to items()  https://review.openstack.org/8846723:46
openstackgerritAnkur Rishi proposed a change to stackforge/murano-api: replace reference to ._items w/ call to .items()  https://review.openstack.org/8846723:48
openstackgerritStan Lagun proposed a change to stackforge/murano-api: Preserve keys in object's system area  https://review.openstack.org/8845423:51
*** TravT has quit IRC23:58
*** TravT has joined #murano23:59
*** TravT has quit IRC23:59
« Wednesday, 2014-04-16 Index Friday, 2014-04-18 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!