| openstackgerrit | Hidekazu Nakamura proposed openstack/murano-specs: Multiple engine workers https://review.openstack.org/246273 | 00:05 |
|---|---|---|
| *** openstackgerrit has quit IRC | 00:16 | |
| *** openstackgerrit has joined #murano | 00:16 | |
| *** hidekazu has joined #murano | 00:17 | |
| *** hidekazu has quit IRC | 00:21 | |
| *** jfluhmann has quit IRC | 00:37 | |
| *** hidekazu has joined #murano | 01:00 | |
| *** yamamoto has joined #murano | 01:02 | |
| hidekazu | i finally found murano weekly meetings logs and agenda. those are not listed in meeting schedule page. http://eavesdrop.openstack.org/ | 01:05 |
| hidekazu | logs : http://eavesdrop.openstack.org/meetings/murano/ | 01:06 |
| hidekazu | agenda : https://wiki.openstack.org/wiki/Meetings/MuranoAgenda#Agenda | 01:07 |
| *** yamamoto has quit IRC | 01:07 | |
| hidekazu | i want to update http://eavesdrop.openstack.org/ | 01:07 |
| kzaitsev_mb | oh, you're right | 01:09 |
| hidekazu | I have never update http://eavesdrop.openstack.org/ | 01:09 |
| hidekazu | if everyone can update, I'll do. | 01:10 |
| kzaitsev_mb | hidekazu: oh sorry, I've already filed the change ;) | 01:14 |
| kzaitsev_mb | but you can +1 it | 01:14 |
| kzaitsev_mb | https://review.openstack.org/#/c/248966/ | 01:14 |
| kzaitsev_mb | but thanks for pointing that out =) | 01:15 |
| hidekazu | kzaitsev_mb, OK, thanks! | 01:17 |
| *** x00350071 has joined #murano | 01:23 | |
| kzaitsev_mb | https://review.openstack.org/248969 just for the record | 01:29 |
| *** kzaitsev_mb has quit IRC | 01:45 | |
| *** jfluhmann has joined #murano | 01:49 | |
| *** zhurong has joined #murano | 01:52 | |
| *** kzaitsev_mb has joined #murano | 01:56 | |
| *** ducttape_ has joined #murano | 02:09 | |
| *** kzaitsev_mb has quit IRC | 02:15 | |
| *** yamamoto has joined #murano | 02:17 | |
| *** yamamoto has quit IRC | 02:21 | |
| *** ducttape_ has quit IRC | 02:48 | |
| *** ducttape_ has joined #murano | 02:53 | |
| *** Nikolay_St has joined #murano | 02:59 | |
| *** yamamoto has joined #murano | 03:04 | |
| openstackgerrit | Hidekazu Nakamura proposed openstack/murano: Fix method comment typo https://review.openstack.org/248983 | 03:05 |
| *** ducttape_ has quit IRC | 03:06 | |
| *** klkumar has joined #murano | 03:11 | |
| *** slagun has joined #murano | 03:16 | |
| *** ducttape_ has joined #murano | 03:19 | |
| *** StanLagun has quit IRC | 03:19 | |
| *** klkumar has quit IRC | 03:28 | |
| *** ducttape_ has quit IRC | 03:44 | |
| *** klkumar has joined #murano | 03:44 | |
| *** ducttape_ has joined #murano | 03:49 | |
| *** ducttape_ has quit IRC | 03:50 | |
| *** ducttape_ has joined #murano | 04:19 | |
| *** ducttape_ has quit IRC | 04:24 | |
| *** ducttape_ has joined #murano | 04:36 | |
| *** Nikolay_St has quit IRC | 04:41 | |
| *** klkumar has quit IRC | 04:54 | |
| *** klkumar has joined #murano | 05:07 | |
| *** ashishb has joined #murano | 05:14 | |
| *** ducttape_ has quit IRC | 05:18 | |
| *** klkumar has quit IRC | 05:46 | |
| *** klkumar has joined #murano | 06:02 | |
| *** zhurong_ has joined #murano | 06:05 | |
| *** zhurong has quit IRC | 06:09 | |
| openstackgerrit | Li Yingjun proposed openstack/murano: Replacing application_catalog with application-catalog https://review.openstack.org/243421 | 06:16 |
| openstackgerrit | Hidekazu Nakamura proposed openstack/murano: [docs] Update error message https://review.openstack.org/249026 | 06:24 |
| *** vahidh has quit IRC | 06:37 | |
| *** jesuspg has joined #murano | 07:00 | |
| *** jesuspg has quit IRC | 07:14 | |
| *** vahidh has joined #murano | 07:22 | |
| *** vahidh has quit IRC | 07:26 | |
| *** jesuspg has joined #murano | 07:32 | |
| *** jesuspg has quit IRC | 07:43 | |
| *** Nikolay_St has joined #murano | 07:46 | |
| *** henar has joined #murano | 07:50 | |
| *** henar_ has joined #murano | 07:55 | |
| *** henar has quit IRC | 07:56 | |
| *** henar_ is now known as henar | 07:56 | |
| *** henar has quit IRC | 07:57 | |
| *** jesuspg has joined #murano | 08:12 | |
| *** gillesMo has joined #murano | 08:13 | |
| *** henar has joined #murano | 08:39 | |
| *** x00350071 has quit IRC | 08:49 | |
| *** gangadhar has joined #murano | 08:59 | |
| *** samuelBartel has joined #murano | 08:59 | |
| *** vgridnev has joined #murano | 09:15 | |
| *** openstackgerrit has quit IRC | 09:16 | |
| *** openstackgerrit has joined #murano | 09:16 | |
| *** tlashchova has joined #murano | 09:20 | |
| *** zhurong_ has quit IRC | 09:22 | |
| *** ashishb has quit IRC | 09:35 | |
| *** ashishb has joined #murano | 09:41 | |
| openstackgerrit | Tetiana Lashchova proposed openstack/murano: Remove 'not in global requirenments' section https://review.openstack.org/247374 | 09:50 |
| *** vahidh has joined #murano | 10:05 | |
| *** hidekazu has quit IRC | 10:07 | |
| *** vahidh has quit IRC | 10:09 | |
| *** kzaitsev_mb has joined #murano | 10:20 | |
| *** naresht has joined #murano | 10:20 | |
| *** Liuqing has joined #murano | 10:50 | |
| *** kzaitsev_mb has quit IRC | 11:01 | |
| *** dgonzalez has joined #murano | 11:08 | |
| *** yamamoto has quit IRC | 11:10 | |
| *** kzaitsev_mb has joined #murano | 11:22 | |
| naresht | Hi all, I want only label without having checkbox, how can I do this ? | 11:26 |
| *** x00350071 has joined #murano | 11:38 | |
| naresht | Hi all, I want only label without having checkbox, how can I do this ? | 11:45 |
| gangadhar | How to create instance without any security group? | 11:45 |
| katyafervent | Hi! | 11:49 |
| kzaitsev_mb | naresht: hm, I'm not sure that is easily possible ) | 11:49 |
| kzaitsev_mb | but you can have a hidden field with description. | 11:50 |
| kzaitsev_mb | that was the workaround we used. | 11:50 |
| kzaitsev_mb | We had plans (or maybe even a bug to fix it.) | 11:50 |
| katyafervent | yeah, may be it's can be done with rewriting core library, but it's not a 5-minute fix | 11:51 |
| gangadhar | Any help on creating instance without security group? | 11:55 |
| katyafervent | gangadhar, check my previous message | 11:56 |
| kzaitsev_mb | gangadhar: Kate might be right. I'm not sure if murano allows that right now. | 11:57 |
| *** yamamoto has joined #murano | 11:57 | |
| kzaitsev_mb | hm | 11:57 |
| kzaitsev_mb | katyafervent: are security groups created for HOT-based packages? | 11:58 |
| katyafervent | let's see | 11:58 |
| kzaitsev_mb | gangadhar: you can try 2 options: 1) construct your own object model without security groups 2) use HOT-based package | 11:58 |
| kzaitsev_mb | gangadhar: not sure if any of those would actually work, but there's only one way to find out, right? =) | 11:59 |
| katyafervent | kzaitsev_mb, no, only LinuxMuranoInstance adds Security group | 12:00 |
| kzaitsev_mb | cool. | 12:00 |
| slagun | gangadhar: it is up to an application if it needs security groups or not. LinuxMuranoInstance does create rules for port 22 but it is easy to create another Instance inheritor which will not do so | 12:00 |
| kzaitsev_mb | gangadhar: so, option 3 is to inherit from Instance class and not create any security groups =) | 12:01 |
| kzaitsev_mb | just what Stan said =) | 12:01 |
| gangadhar | I'm noobe to openstack. I'm not sure how to do this. | 12:02 |
| gangadhar | But good to know | 12:02 |
| kzaitsev_mb | gangadhar: well =) this is not really releated to openstack, but to murano | 12:03 |
| slagun | there is "createDefaultInstanceSecurityGroupRules" method in Instance class that can be overridden to have empty body | 12:05 |
| gangadhar | I deployed openstack with Murano in machine 172.16.2.35. And I created a openVPN package which will deploy openVPN package into instance. | 12:06 |
| gangadhar | For VPN functionality i have to do some port forwarding from 2.35 machine to the instance. | 12:07 |
| slagun | so just inherit LinuxMuranoInstance and override it. But we never tried it so they may be other obstacles | 12:07 |
| gangadhar | Can I run those iptables rules in Murano package? | 12:08 |
| slagun | gangadhar: you can execute any shell script you want on VM | 12:09 |
| slagun | how does this relates to security groups? | 12:09 |
| gangadhar | Because VPN is working when only Port security rules are disabled. To do that we have to remove security groups. | 12:10 |
| gangadhar | slagun any sample codes for disbling security groups and running shell scripts on VM? | 12:12 |
| slagun | gangadhar: why not just open VPN ports in security group? Security groups are like firewall rules. You don't need to disable firewall to open some port. Or am I missing something? | 12:13 |
| slagun | gangadhar: any Murano application is an example on how to run scripts on VM. This is basically the most common operation in any app | 12:14 |
| gangadhar | Oh. I will try by opening that port and let you know. | 12:16 |
| gangadhar | How about running shell command, is there any example app in murano apps? | 12:17 |
| slagun | gangadhar: which version of Murano do you use? | 12:18 |
| gangadhar | slagun: stable liberty | 12:18 |
| slagun | gangadhar: there is a helper method introduced in Liberty that does just that | 12:20 |
| slagun | ddovbii: do you have a good example for Linux.runScript? | 12:20 |
| ddovbii | slagun: trying to find | 12:20 |
| ddovbii | gangadhar: https://github.com/openstack/murano-specs/blob/master/specs/liberty/simple-software-configuration.rst | 12:22 |
| ddovbii | see 'Example of usage' section | 12:22 |
| slagun | gangadhar: http://murano.readthedocs.org/en/stable-liberty/articles/workflow.html may help. Also any app from https://github.com/openstack/murano-apps can serve as an example. For example https://github.com/openstack/murano-apps/blob/master/ApacheHTTPServer/package/Classes/ApacheHttpServer.yaml#L55-L57 | 12:23 |
| gangadhar | Thats very helpful | 12:24 |
| gangadhar | Thanks to everyone | 12:24 |
| *** sergmelikyan has joined #murano | 12:30 | |
| *** alejandrito has joined #murano | 12:34 | |
| *** ashishb has quit IRC | 12:38 | |
| *** yamamoto has quit IRC | 12:47 | |
| openstackgerrit | Merged openstack/murano: Remove 'not in global requirenments' section https://review.openstack.org/247374 | 12:48 |
| *** ducttape_ has joined #murano | 12:55 | |
| *** MVenesio has joined #murano | 12:56 | |
| openstackgerrit | Merged openstack/murano: Public environment template https://review.openstack.org/215542 | 12:58 |
| *** yamamoto has joined #murano | 12:59 | |
| *** ducttape_ has quit IRC | 13:20 | |
| *** enthurohini has joined #murano | 13:24 | |
| *** Liuqing_ has joined #murano | 13:31 | |
| *** Liuqing has quit IRC | 13:32 | |
| *** jesuspg has quit IRC | 13:37 | |
| *** vahidh has joined #murano | 13:42 | |
| *** vahidh has quit IRC | 13:47 | |
| *** jesuspg has joined #murano | 13:52 | |
| gillesMo | Hello ! Just like the previous discussion on security groups, I wonder if it's possible to use Murano without (external) router ? I'm not using private networks, floating IPs, security groups (I use VMware vCenter for hypervisor and don't want NSX). | 13:55 |
| *** sergmelikyan has quit IRC | 13:55 | |
| slagun | gillesMo: You can make Murano use some existing network created outside of Murano | 13:56 |
| gillesMo | slagun: That's what I want. I tried with a Tomcat package from the app catalog, but it want a router. Perhaps do I have to modify the app, I didn't look at the Tomcat app code... | 13:57 |
| *** Nikolay_St has quit IRC | 13:59 | |
| slagun | gillesMo: take a look at https://review.openstack.org/#/c/152643/ and https://review.openstack.org/#/c/152747/ | 14:00 |
| gillesMo | slagun: Oh, I see some problematic configs in UI/ui.yaml | 14:00 |
| slagun | this can be configured globally for all apps | 14:00 |
| slagun | using netconfig.yaml | 14:01 |
| gillesMo | Ah ! Perhaps a bit more complicated than asking the user which networks he wants, but I will look at it. I see you are the commiter, do you know if it's in the 1.0 murano release and more preciselly in Ubuntu 1.0.0rc1 liberty version ? | 14:03 |
| slagun | it was introduced in Kilo if not in Juno. So it is present in Liberty | 14:07 |
| gillesMo | slagun: is there some doc somewhere about netconfig.yaml ? I cannot find the blueprint via the gerrit reviews you show me... | 14:07 |
| slagun | you can ask user to pick network for environment. This is possible starting from Liberty | 14:07 |
| gillesMo | OK, fine. Ideally, We certainly prefer not asking them, all VMs will be in the same networks. But 2 (shared provider) networks by VMs. I hope I can do that with netconfig.yaml. | 14:10 |
| slagun | If you want all VMs to have the same networks without asking user then netconfig.yaml + ExistingNetwork is the way to go | 14:12 |
| gillesMo | When you say ExistingNetwork, is it a funtion to call in the app ? | 14:13 |
| *** henar has quit IRC | 14:13 | |
| *** ducttape_ has joined #murano | 14:13 | |
| *** ducttape_ has quit IRC | 14:14 | |
| slagun | no. In Murano Networks are also classes. There are 2 alternate neutron networks implementation - one that creates networks and another one that uses existing networks. ExistingNetwork is a short for io.murano.resources.ExistingNetwork class | 14:15 |
| slagun | environment has a property which says what networks all instances should join by default. If you put an instance of ExistingNetwork there they will join existing network | 14:16 |
| *** ducttape_ has joined #murano | 14:16 | |
| gillesMo | OK, without modifying the apps | 14:17 |
| slagun | yes, no changes require (unless app by itself asks for the network and you don't want it to happen) | 14:18 |
| gillesMo | I'm still looking at documentation but can't find it. Do you know wher I can find what I can use in the netconfig.yaml file ? Is the internalNetworkName an arbitrary name, can I set two different names for my two networks, like internalAdminName, internalDataName ? | 14:21 |
| *** jesuspg has quit IRC | 14:23 | |
| gillesMo | Some start of doc here http://docs.openstack.org/developer/murano/draft/appdev-guide/use_cases.html#configuring-network-access-for-vms | 14:28 |
| slagun | gillesMo: I posted 2 links above to gerrit. There is information in commit messages. You can also look at properties declared in ExistingNetwork.yaml | 14:29 |
| openstackgerrit | Victor Ryzhenkin proposed openstack/murano: Add provision and deprovision test for cfapi https://review.openstack.org/244858 | 14:37 |
| gangadhar | Hi slagun. Still there? | 14:44 |
| slagun | gangadhar: hi! | 14:45 |
| gangadhar | I tried OpenVPN server by opening port. | 14:45 |
| gangadhar | The public node and OpenVPN server are communicating. But the instances that are in vpn server network are not communicating to public node | 14:47 |
| slagun | gangadhar: can you post your code somewhere? | 14:47 |
| *** kzaitsev_mb has quit IRC | 14:47 | |
| slagun | like paste.openstack.org | 14:47 |
| gangadhar | What part of code do you need? | 14:49 |
| slagun | those that open the ports | 14:50 |
| gangadhar | I'm manually opening the ports in security groups. | 14:51 |
| gillesMo | slagun: Thank you for your help, I think I'm on the goof track | 14:51 |
| slagun | gangadhar: are you sure that you do it in the correct security group? That it is UDP and the port number is correct? | 14:52 |
| gangadhar | slagun: yes, UDP port 1194 ingress | 14:53 |
| gangadhar | And also opened all TCP and UDP ports | 14:54 |
| slagun | so how is cutting the traffic? Maybe it is iptables in the instance? | 14:55 |
| slagun | *who is cutting* | 14:55 |
| slagun | TCP 443, TCP 943, UDP 1194 need to be opened | 14:55 |
| gangadhar | I'm not sure. And disabling port security to vpnServer is working fine | 14:57 |
| *** Nikolay_St has joined #murano | 14:59 | |
| slagun | you can check if security groups work by removing and adding back rule for the port 22. Once you remove it you should not be able to SSH to the VM. If they do work then something should be done on VM site | 14:59 |
| *** kzaitsev_mb has joined #murano | 14:59 | |
| gangadhar | No problem with SSH. But we have re-add ICMP rule to work ping. | 15:00 |
| slagun | SSH port 22 is just a good way to test how security group work | 15:01 |
| slagun | if it works for sshd there is no reason it wouldn't for OpenVPN | 15:02 |
| gangadhar | I'll try again and let you know | 15:03 |
| *** jasonsb has joined #murano | 15:06 | |
| *** kzaitsev_mb has quit IRC | 15:10 | |
| *** vgridnev has quit IRC | 15:19 | |
| *** sergmelikyan has joined #murano | 15:21 | |
| *** naresht has quit IRC | 15:28 | |
| *** jasonsb has quit IRC | 15:32 | |
| *** sergmelikyan has quit IRC | 15:48 | |
| *** Liuqing_ has quit IRC | 15:54 | |
| *** sergmelikyan has joined #murano | 16:01 | |
| *** klkumar has quit IRC | 16:08 | |
| *** klkumar has joined #murano | 16:08 | |
| *** vgridnev has joined #murano | 16:11 | |
| *** dshaw has joined #murano | 16:17 | |
| *** jfluhmann has quit IRC | 16:25 | |
| *** vahidh has joined #murano | 16:34 | |
| *** ashishb has joined #murano | 16:51 | |
| *** enthurohini has quit IRC | 16:54 | |
| openstackgerrit | Victor Ryzhenkin proposed openstack/murano: Add provision and deprovision test for cfapi https://review.openstack.org/244858 | 16:58 |
| openstackgerrit | Victor Ryzhenkin proposed openstack/murano: Skip package section from input parameters https://review.openstack.org/246401 | 16:58 |
| openstackgerrit | Victor Ryzhenkin proposed openstack/murano: [cfapi] Prevent code 500 if instance, environment or service doesn't exists. https://review.openstack.org/245938 | 17:00 |
| openstackgerrit | Victor Ryzhenkin proposed openstack/murano: Add negative test for cfapi last_status route. https://review.openstack.org/247584 | 17:00 |
| *** kzaitsev_ip_ has joined #murano | 17:00 | |
| openstackgerrit | Victor Ryzhenkin proposed openstack/murano: Add binding test for cfapi https://review.openstack.org/247876 | 17:01 |
| *** samuelBartel has quit IRC | 17:04 | |
| *** katyafervent2 has joined #murano | 17:05 | |
| *** kzaitsev_mb has joined #murano | 17:07 | |
| *** kzaitsev_ip_ has quit IRC | 17:08 | |
| *** jfluhmann has joined #murano | 17:13 | |
| *** yamamoto has quit IRC | 17:29 | |
| *** ducttape_ has quit IRC | 17:40 | |
| *** klkumar has quit IRC | 17:51 | |
| *** sergmelikyan has quit IRC | 18:00 | |
| *** katyafervent2 has quit IRC | 18:04 | |
| *** vahidh has quit IRC | 18:05 | |
| *** kzaitsev_mb has quit IRC | 18:11 | |
| *** wasmum has joined #murano | 18:12 | |
| *** yamamoto has joined #murano | 18:29 | |
| *** gillesMo has quit IRC | 18:30 | |
| *** yamamoto has quit IRC | 18:34 | |
| *** kzaitsev_mb has joined #murano | 18:35 | |
| *** kzaitsev_mb has quit IRC | 18:38 | |
| *** kzaitsev_mb has joined #murano | 18:38 | |
| *** henar has joined #murano | 18:41 | |
| *** vahidh has joined #murano | 19:01 | |
| *** alejandrito has quit IRC | 19:10 | |
| *** kzaitsev_mb has quit IRC | 19:20 | |
| *** kzaitsev_mb has joined #murano | 19:30 | |
| *** ashishb has quit IRC | 19:36 | |
| *** kzaitsev_mb has quit IRC | 19:36 | |
| *** kzaitsev_mb has joined #murano | 19:41 | |
| *** kzaitsev_mb has quit IRC | 19:50 | |
| *** sergmelikyan has joined #murano | 19:51 | |
| *** kzaitsev_mb has joined #murano | 19:52 | |
| *** ashishb has joined #murano | 20:04 | |
| *** dshaw has quit IRC | 20:04 | |
| *** sergmelikyan has quit IRC | 20:23 | |
| *** sergmelikyan has joined #murano | 20:29 | |
| *** ashishb has quit IRC | 20:34 | |
| *** swilker has joined #murano | 20:38 | |
| *** ducttape_ has joined #murano | 20:45 | |
| *** ducttape_ has quit IRC | 20:45 | |
| *** ducttape_ has joined #murano | 20:45 | |
| *** raildo is now known as raildo-afk | 21:01 | |
| *** kzaitsev_mb has quit IRC | 21:10 | |
| *** kzaitsev_mb has joined #murano | 21:13 | |
| *** kzaitsev_mb has quit IRC | 21:21 | |
| *** sergmelikyan has quit IRC | 21:33 | |
| *** swilker has quit IRC | 21:33 | |
| *** sergmelikyan has joined #murano | 21:41 | |
| openstackgerrit | Lin Yang proposed openstack/murano: Add verbosity control for Murano-test-runner https://review.openstack.org/245953 | 21:44 |
| *** MVenesio has quit IRC | 22:04 | |
| *** sergmelikyan has quit IRC | 22:04 | |
| *** sergmelikyan has joined #murano | 22:10 | |
| *** Piet has quit IRC | 22:16 | |
| *** kzaitsev_mb has joined #murano | 22:21 | |
| *** vgridnev has quit IRC | 22:24 | |
| *** kzaitsev_mb has quit IRC | 22:26 | |
| *** henar has quit IRC | 22:39 | |
| *** sergmelikyan has quit IRC | 22:45 | |
| *** sergmelikyan has joined #murano | 22:53 | |
| *** ducttape_ has quit IRC | 23:29 | |
| *** slagun has quit IRC | 23:33 | |
| *** StanLagun has joined #murano | 23:33 | |
| *** sergmelikyan has quit IRC | 23:37 | |
| *** ducttape_ has joined #murano | 23:40 | |
| openstackgerrit | Hidekazu Nakamura proposed openstack/murano: [docs] Update error message https://review.openstack.org/249026 | 23:56 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!