| *** javeriak has quit IRC | 00:15 | |
| openstackgerrit | Ian Cordasco proposed stackforge/os-ansible-deployment: Upgrade the Keystone library to use v3 https://review.openstack.org/196943 | 00:36 |
|---|---|---|
| *** javeriak has joined #openstack-ansible | 00:48 | |
| *** annashen has joined #openstack-ansible | 00:53 | |
| *** annashen has quit IRC | 00:58 | |
| *** javeriak has quit IRC | 01:13 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 01:40 | |
| *** annashen has joined #openstack-ansible | 01:54 | |
| *** annashen has quit IRC | 01:58 | |
| *** jaypipes has quit IRC | 02:30 | |
| *** darrenc is now known as darrenc_afk | 02:45 | |
| *** annashen has joined #openstack-ansible | 02:55 | |
| *** annashen has quit IRC | 02:59 | |
| *** galstrom_zzz is now known as galstrom | 03:49 | |
| *** annashen has joined #openstack-ansible | 03:56 | |
| *** galstrom is now known as galstrom_zzz | 03:56 | |
| *** annashen has quit IRC | 04:00 | |
| *** galstrom_zzz is now known as galstrom | 04:13 | |
| *** sdake has joined #openstack-ansible | 04:30 | |
| *** galstrom is now known as galstrom_zzz | 04:33 | |
| *** errr has joined #openstack-ansible | 04:35 | |
| *** annashen has joined #openstack-ansible | 04:56 | |
| *** darrenc_afk is now known as darrenc | 05:00 | |
| *** annashen has quit IRC | 05:01 | |
| *** shausy has joined #openstack-ansible | 05:15 | |
| *** annashen has joined #openstack-ansible | 05:57 | |
| *** JRobinson__ is now known as JRobinson__afk | 06:00 | |
| *** annashen has quit IRC | 06:02 | |
| *** JRobinson__afk is now known as JRobinson__ | 06:28 | |
| *** radek_ has joined #openstack-ansible | 06:45 | |
| *** annashen has joined #openstack-ansible | 06:58 | |
| *** annashen has quit IRC | 07:03 | |
| evrardjp | hello everyone | 07:55 |
| evrardjp | I read the conversation about ansible and inventory | 07:55 |
| evrardjp | I think staying close to ansible standards helps readability and understandability | 07:55 |
| evrardjp | and it's really easy to overwrite variables this way | 07:56 |
| *** annashen has joined #openstack-ansible | 07:59 | |
| *** annashen has quit IRC | 08:04 | |
| *** javeriak has joined #openstack-ansible | 08:05 | |
| mattt | evrardjp: i won't disagree | 08:16 |
| *** javeriak has quit IRC | 08:16 | |
| mattt | evrardjp: i think that's where getting more community w/ strong ansible experience involved would be great | 08:16 |
| *** javeriak has joined #openstack-ansible | 08:16 | |
| *** javeriak has quit IRC | 08:24 | |
| odyssey4me | mattt evrardjp agreed - git-harry has recently been putting some energy into trying to understand how we do variables now and how we could do better | 08:35 |
| odyssey4me | right now it's a bit of a mash-up and it's easy to get confused about precedence... we should fix that | 08:36 |
| *** JRobinson__ has quit IRC | 08:57 | |
| *** annashen has joined #openstack-ansible | 09:00 | |
| *** annashen has quit IRC | 09:04 | |
| *** openstackgerrit has quit IRC | 09:19 | |
| *** openstackgerrit has joined #openstack-ansible | 09:20 | |
| openstackgerrit | Matt Thompson proposed stackforge/os-ansible-deployment: Clear expired Django sessions regularly from DB https://review.openstack.org/197744 | 09:46 |
| evrardjp | also roles could be pushed in galaxy for further visibility of the project | 09:53 |
| evrardjp | visibility bringing possibly more contibutions | 09:53 |
| openstackgerrit | Hugh Saunders proposed stackforge/os-ansible-deployment: Upgrade the Keystone library to use v3 https://review.openstack.org/196943 | 09:53 |
| evrardjp | I have questions about OSAD "backporting" model... For example, I'll have to bring Keystone v3 and ceph/ support on my kilo openstack deployments... Atm, everything is in master | 09:57 |
| evrardjp | I'd like to know what will eventually come to kilo | 09:57 |
| evrardjp | I've seen that point on the meeting today: "What is our roadmap like?" is this worth a part of the conversation? | 09:59 |
| *** annashen has joined #openstack-ansible | 10:01 | |
| *** annashen has quit IRC | 10:06 | |
| *** annashen has joined #openstack-ansible | 11:02 | |
| mattt | evrardjp: we'd like to push to galaxy, but it gets a bit more tricky w/ stackforge/openstack github repos as you'd effectively need a separate repo for each role | 11:03 |
| *** annashen has quit IRC | 11:06 | |
| mattt | evrardjp: regarding your question, i don't think it's black and white regarding what will get backported | 11:27 |
| mattt | evrardjp: i think most stuff going into os-a-d right now is also backported to kilo | 11:31 |
| *** toddnni has quit IRC | 11:31 | |
| mattt | evrardjp: but once liberty is out we may no longer backport absolutely everything to kilo | 11:31 |
| mancdaz | can some cores please look at this review: https://review.openstack.org/#/c/195399/2 | 11:35 |
| mancdaz | it either needs support for the comments around the -1, or someone to decide the comments are not applicable, and add a +w | 11:36 |
| *** toddnni has joined #openstack-ansible | 11:46 | |
| mattt | mancdaz: i will have a look, i need to spin up an AIO to see how that all works | 11:46 |
| mancdaz | thanks mattt | 11:56 |
| svg | evrardjp: the ceph paatch easily applies on top of kilo atm | 11:59 |
| svg | perhaps some minor merge conflicts, but nothing you can easily solve | 12:00 |
| evrardjp | "can't" I guess ;) | 12:00 |
| svg | euhm yes | 12:01 |
| mattt | svg: everything should backport to kilo cleanly | 12:01 |
| svg | mattt: the minor things are more of updates in the example user config and things like that | 12:02 |
| svg | at least, it's the kind of things i see when I rebase on latest master | 12:02 |
| *** annashen has joined #openstack-ansible | 12:02 | |
| odyssey4me | evrardjp on launchpad you'll see many of those feature patches are targeted for 11.1.0, which we're hoping to ship in two weeks | 12:04 |
| odyssey4me | and yes, we'll be discussing feature patches in the meeting later | 12:05 |
| evrardjp | 2 weeks is when I'll leave for holidays! (dreaming) | 12:05 |
| evrardjp | good | 12:05 |
| *** annashen has quit IRC | 12:07 | |
| evrardjp | Sam-I-Am: FYI, IPv6 functions perfectly fine for tenant and public networks | 12:12 |
| evrardjp | didn't try prefix delegation yet (I guess I'll wait for Liberty to have it more stable) | 12:14 |
| *** jaypipes has joined #openstack-ansible | 12:32 | |
| Sam-I-Am | evrardjp: wheres your sense of adventure | 12:38 |
| evrardjp | I'll get it back when I'll have a first release ;) | 12:54 |
| evrardjp | but I'm checking at prefix delegation right now :D | 12:54 |
| *** annashen has joined #openstack-ansible | 13:03 | |
| *** annashen has quit IRC | 13:08 | |
| openstackgerrit | Hugh Saunders proposed stackforge/os-ansible-deployment: Add v3 calls for federation to keystone module https://review.openstack.org/197677 | 13:15 |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated the clone process to exclude unneeded files https://review.openstack.org/195399 | 13:29 |
| cloudnull | morning . | 13:30 |
| cloudnull | mattt: git-harry: updated based on your reviews. | 13:30 |
| * cloudnull driving in now. | 13:31 | |
| mattt | thanks cloudnull ! | 13:32 |
| cloudnull | no thank you mattt | 13:41 |
| cloudnull | :) | 13:41 |
| *** Bjoern_ has joined #openstack-ansible | 13:42 | |
| *** Bjoern_ is now known as BjoernT | 13:42 | |
| cloudnull | Notice are high priority inflight reviews for upcoming patch releases - https://review.openstack.org/#/q/starredby:cloudnull+status:open,n,z | 13:42 |
| cloudnull | we also need to submit and gate a few backports for 11.0.4 https://launchpad.net/openstack-ansible/+milestone/11.0.4 | 13:43 |
| *** TheIntern has joined #openstack-ansible | 13:46 | |
| evrardjp | hughsaunders: You're working on having keystone + shibboleth using osad? | 13:51 |
| hughsaunders | evrardjp: yep | 13:52 |
| evrardjp | do you have a bp I may check? | 13:54 |
| hughsaunders | evrardjp: https://blueprints.launchpad.net/openstack-ansible/+spec/keystone-federation https://blueprints.launchpad.net/openstack-ansible/+spec/keystone-federation | 13:55 |
| evrardjp | thanks | 13:55 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:56 | |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Remove unused swift vars https://review.openstack.org/197094 | 14:02 |
| *** annashen has joined #openstack-ansible | 14:04 | |
| *** Mudpuppy has joined #openstack-ansible | 14:08 | |
| *** annashen has quit IRC | 14:09 | |
| *** bagezio has quit IRC | 14:09 | |
| *** TheIntern has quit IRC | 14:11 | |
| *** jwagner_away is now known as jwagner | 14:12 | |
| palendae | cloudnull: https://review.openstack.org/#/q/starredby:cloudnull+status:open+label:Workflow%253D0,n,z same high priority list, minus ones with +W | 14:13 |
| *** _defrag is now known as defrag | 14:17 | |
| openstackgerrit | Miguel Alejandro Cantu proposed stackforge/os-ansible-deployment: Implement Ceilometer[WIP] https://review.openstack.org/173067 | 14:25 |
| *** KLevenstein has joined #openstack-ansible | 14:27 | |
| *** TheIntern has joined #openstack-ansible | 14:37 | |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Configurable memcached connections limit & threads https://review.openstack.org/197729 | 14:38 |
| openstackgerrit | Matt Thompson proposed stackforge/os-ansible-deployment: Default to use host/port for glance_api_servers https://review.openstack.org/195497 | 14:38 |
| svg | I read earlier here 11.1.0 was ETA in about two weeks, is there an ETA for 11.0.4, or is that superseded by 11.1.0? | 14:39 |
| palendae | svg: 11.0.4 is coming Monday | 14:39 |
| palendae | Would be tomorrow, but holiday in the US | 14:39 |
| svg | k, thx | 14:39 |
| *** galstrom_zzz is now known as galstrom | 14:40 | |
| mattt | holiday in US? how unpatriotic | 14:40 |
| svg | tomorrow? that's 7/3 no? | 14:40 |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Default to use host/port for glance_api_servers https://review.openstack.org/195497 | 14:41 |
| palendae | svg: Yes, Independence Day observed for the US | 14:42 |
| palendae | 7/4 is the actual holiday | 14:42 |
| cloudnull | most of us will be "working from home" tomorrow. | 14:42 |
| svg | ah so day of on friday instead of saturday | 14:42 |
| mattt | cloudnull: cheesy | 14:43 |
| svg | so it's a holiday, but you still get to work? | 14:43 |
| cloudnull | mattt: irk !? | 14:43 |
| mattt | svg: my thoughts! | 14:43 |
| palendae | svg: I think cloudnull's working because he can't stop. I won't be :p | 14:44 |
| svg | I'm often wondering is he really lives in a US based timezone | 14:45 |
| palendae | He does, he just doesn't sleep | 14:45 |
| Mudpuppy | Every other week, there is a change of batteries though | 14:45 |
| * Sam-I-Am will hopefully be not working tomorrow | 14:45 | |
| palendae | Sam-I-Am: You'll probably be working too | 14:46 |
| evrardjp | lol @tesla batteries :p | 14:46 |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Create Junit XML Report from tempest run https://review.openstack.org/197512 | 14:49 |
| odyssey4me | svg all the questions about milestone deliberables and dates are answered here: https://launchpad.net/openstack-ansible | 14:50 |
| cloudnull | palendae: when I bounce out on Friday I'll likely not touch my compute for the weekend, besides to play fifa15 | 14:50 |
| svg | thx odyssey4me was already looking at that | 14:51 |
| palendae | cloudnull: Good | 14:51 |
| palendae | As it should be | 14:51 |
| Sam-I-Am | palendae: i'm expecting to be working from my bicycle | 14:51 |
| evrardjp | So, let me get this straight... You have holidays and you don't use it for a big party to celebrate independance? (not criticizing, just trying to understand the culture) | 14:53 |
| Sam-I-Am | evrardjp: http://theoatmeal.com/comics/america | 14:54 |
| cloudnull | evrardjp: in the US there are no holidays , just days less people work. | 14:54 |
| palendae | evrardjp: I do | 14:54 |
| Sam-I-Am | that comic about sums it up | 14:54 |
| palendae | cloudnull: Ok, that's accurate | 14:54 |
| palendae | More about skeleton crew staffing | 14:54 |
| evrardjp | nice comic :) that's exactly what I thought, even the 4th of July ;) | 14:55 |
| cloudnull | its spot o n | 14:56 |
| openstackgerrit | Serge van Ginderachter proposed stackforge/os-ansible-deployment: Ceph/RBD support https://review.openstack.org/181957 | 14:56 |
| palendae | My neighborhood is usually full of fireworks explosions from end of May to beginning of August | 14:56 |
| evrardjp | \o/ it could be an attempt of murdering old people by suprise, pay attention to your neighborhood then :p [disclaimer: joke] | 14:57 |
| palendae | evrardjp: It's happened :( | 14:57 |
| Sam-I-Am | palendae: those are gunshots | 14:57 |
| Sam-I-Am | after all you do live in indiana | 14:58 |
| palendae | Sam-I-Am: Not all of them | 14:58 |
| *** fawadkhaliq has joined #openstack-ansible | 14:58 | |
| *** annashen has joined #openstack-ansible | 15:05 | |
| openstackgerrit | Kevin Carter proposed stackforge/os-ansible-deployment: Updated the clone process to exclude unneeded files https://review.openstack.org/198014 | 15:06 |
| *** annashen has quit IRC | 15:10 | |
| *** TheIntern has quit IRC | 15:18 | |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Updated tempest isolation options https://review.openstack.org/197342 | 15:20 |
| openstackgerrit | Miguel Alejandro Cantu proposed stackforge/os-ansible-deployment: Added documentation for ceilometer https://review.openstack.org/198025 | 15:20 |
| alextricity | how do I add dependencies in gerrit? | 15:22 |
| cloudnull | create a branch for your change | 15:22 |
| palendae | alextricity: https://www.mediawiki.org/wiki/Gerrit/Advanced_usage#Create_a_dependency | 15:22 |
| cloudnull | git review -d <change-num> | 15:22 |
| cloudnull | checkout your old branch | 15:22 |
| cloudnull | git rebase -i <change-num-brnach> | 15:23 |
| openstackgerrit | Ian Cordasco proposed stackforge/os-ansible-deployment: Upgrade the Keystone library to use v3 https://review.openstack.org/196943 | 15:26 |
| openstackgerrit | Miguel Alejandro Cantu proposed stackforge/os-ansible-deployment: Implement Ceilometer https://review.openstack.org/173067 | 15:26 |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Default to use host/port for glance_api_servers https://review.openstack.org/195496 | 15:28 |
| *** weezS has joined #openstack-ansible | 15:36 | |
| *** TheIntern has joined #openstack-ansible | 15:48 | |
| alextricity | Thanks! It seems there is a need to squash my commits now. It has the commit from the review/ branch rebase, and the commit from my old branch | 15:49 |
| alextricity | Is that normal? | 15:49 |
| cloudnull | alextricity: when you create a dependency youll have multiple commits when you run git review | 15:51 |
| cloudnull | simply say yes | 15:52 |
| cloudnull | it should do the right thing | 15:52 |
| openstackgerrit | Miguel Alejandro Cantu proposed stackforge/os-ansible-deployment: Added documentation for ceilometer https://review.openstack.org/198025 | 15:52 |
| alextricity | I trust you man | 15:52 |
| alextricity | lol | 15:52 |
| cloudnull | boom and it works | 15:52 |
| alextricity | :) | 15:52 |
| cloudnull | meeting time | 15:59 |
| cloudnull | ^ cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, mancdaz, dolphm, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung | 15:59 |
| palendae | roger | 15:59 |
| jwagner | o/ | 16:00 |
| cloudnull | Festivus will be held in the #openstack-meeting-4 room. Please make your way there now. | 16:01 |
| *** annashen has joined #openstack-ansible | 16:06 | |
| hughsaunders | sigmavirus24: I see what you did in patch set 16. That does make a much smaller change. | 16:07 |
| sigmavirus24 | hughsaunders: yeah | 16:08 |
| sigmavirus24 | I'm hoping it just works now | 16:08 |
| sigmavirus24 | I was about to go fix everything else and then realized that's the better change | 16:08 |
| sigmavirus24 | cloudnull: question, does yaprt barf on -e requirements in a requirements.txt? | 16:08 |
| sigmavirus24 | If so, we can't update the liberty glance sha for a while =P | 16:08 |
| *** annashen has quit IRC | 16:10 | |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Updated the clone process to exclude unneeded files https://review.openstack.org/195399 | 16:12 |
| evrardjp | I have a question about dependencies of openstack projects, like libapache2-mod-shib2 (for keystone federation) or mongodb (for ceilometer)... is this supposed to be included in the OSAD playbook roles? | 16:20 |
| Sam-I-Am | yeah, they're usually installed as packages | 16:22 |
| Sam-I-Am | but its osad's duty to get them, because it doesnt know what the openstack source packages need outside of python things | 16:22 |
| evrardjp | for me, they should be part of the roles installing them | 16:22 |
| evrardjp | I agree then | 16:23 |
| palendae | Mmmm, mongodb's been a contentious issue | 16:24 |
| evrardjp | I know | 16:24 |
| evrardjp | that's why I'm asking the question | 16:24 |
| evrardjp | It doesn't seem black or white, so it's hard to understand | 16:24 |
| palendae | I think there's opposition to maintaining too many non-openstack roles/packages | 16:24 |
| palendae | evrardjp: It's not | 16:24 |
| evrardjp | I understand | 16:25 |
| palendae | Line drawn are kind of squiggly :) | 16:25 |
| palendae | IMO, the best compromise is stating our assumptions on what's is and isn't included. e.g. we don't necessarily install the proper kernel with vlan support | 16:25 |
| evrardjp | for an end user, there should be a mention of the line in the doc... for example, if you want to install ceilometer, you could still use this playbook, but it's not supported (as it is with haproxy IIRC) | 16:25 |
| *** annashen has joined #openstack-ansible | 16:26 | |
| evrardjp | palendae: +1 | 16:26 |
| evrardjp | mentionning is the best | 16:26 |
| palendae | Yeah | 16:27 |
| evrardjp | most of the time the assumptions are based on real life experience, which is worth sharing | 16:27 |
| palendae | Totally agreed | 16:27 |
| palendae | I've been meaning to get to an 'assumptions' doc section for dev docs | 16:27 |
| palendae | For example, we had a bug report that OSAD didn't work with Ubuntu netinstalls, but we never intended OSAD to be a 'bare metal' installer | 16:28 |
| Sam-I-Am | i wonder why it wouldnt work with netinstalls | 16:29 |
| Sam-I-Am | iirc those are just minimal installs | 16:29 |
| evrardjp | I started with netinstall | 16:29 |
| palendae | Right, and we assume some packages are present that are not in that minimum set | 16:29 |
| evrardjp | it went fine | 16:30 |
| evrardjp | assumptions of the packages are written in the doc, on preparing the host section IIRC | 16:30 |
| palendae | Right | 16:30 |
| palendae | Which we didn't have at the time | 16:30 |
| palendae | Not in tree anyway | 16:30 |
| sigmavirus24 | hughsaunders: btw, with ps16 so far no problems. I'm already installing nova which means it's gotten further than any time in the past | 16:39 |
| hughsaunders | yep, I tested keystone and glance locally and they were fine | 16:40 |
| sigmavirus24 | Yeah | 16:40 |
| sigmavirus24 | I'm going to revert the openrc part of the patch too i think | 16:40 |
| sigmavirus24 | that wasn't necessary | 16:41 |
| sigmavirus24 | and onto neutron | 16:41 |
| openstackgerrit | Hugh Saunders proposed stackforge/os-ansible-deployment: Add v3 calls for federation to keystone module https://review.openstack.org/197677 | 16:41 |
| *** annashen has quit IRC | 16:42 | |
| *** annashen has joined #openstack-ansible | 16:43 | |
| sigmavirus24 | we do need to figure out how to get openstackclient to work now though | 16:43 |
| *** annashen has quit IRC | 16:43 | |
| sigmavirus24 | I can't do openstack endpoint list | 16:44 |
| *** annashen has joined #openstack-ansible | 16:44 | |
| Sam-I-Am | heh openstackclient | 16:45 |
| evrardjp | ahah, the fun of clients with federation... | 16:45 |
| *** galstrom is now known as galstrom_zzz | 16:46 | |
| sigmavirus24 | and tempest faield | 16:49 |
| sigmavirus24 | It's bizarre. I can authenticate with keystoneclient.v3.client.Client, but openstackclient can't seem to authenticate with keystoneclient.auth.v3.base.whateverthatis | 16:50 |
| evrardjp | Sam-I-Am: what do you think about having some kind of "what's next" in the docs of OSAD? Thinking of (for example) explaining the security upgrades to end-users by mentioning which playbook they should run | 16:50 |
| sigmavirus24 | evrardjp: I wouldn't expect that in a "What's Next" section | 16:51 |
| sigmavirus24 | I'd expect that in a "Security" section | 16:51 |
| sigmavirus24 | What's Next seems like a roadmap/plan to me | 16:51 |
| evrardjp | or upgrades | 16:51 |
| evrardjp | ugrades is not the right term | 16:51 |
| sigmavirus24 | Upgrade Notes? | 16:51 |
| sigmavirus24 | I.e., when upgrading from 11.0.3 to 11.1.0 expect Foo? | 16:51 |
| evrardjp | Security updates | 16:51 |
| sigmavirus24 | s/I.e./E.g./ | 16:52 |
| evrardjp | seems better | 16:52 |
| evrardjp | no, that's why I think upgrade isn't a good term | 16:52 |
| sigmavirus24 | Ah | 16:52 |
| evrardjp | :p | 16:52 |
| sigmavirus24 | I think I grok what you mean | 16:52 |
| sigmavirus24 | We should have a centralized location in our docs fro CVE IDs (both assigned to us and assigned to OpenStack services that affect us) | 16:52 |
| sigmavirus24 | That should also tell users what versions are affected | 16:53 |
| evrardjp | that would be indeed good but a lot of work | 16:53 |
| *** shausy has quit IRC | 16:53 | |
| evrardjp | I think the easiest is just explaining how they should work when a security update (or any) patch arrives | 16:53 |
| evrardjp | arrives means for me arrive in upstream or arrive in OSAD project (already merged) | 16:54 |
| evrardjp | at the moment OSAD seems good for deploying, but deploying is half the battle... you want to keep your customers after deployment... build engagement :D | 16:55 |
| stevelle | evrardjp: I think indexing those explanations by CVE ID as sigmavirus24 was thinking makes sense | 16:55 |
| sigmavirus24 | evrardjp: I'm not sure keeping a table liek that would be bad | 16:55 |
| evrardjp | it's good | 16:55 |
| evrardjp | it's definitely good | 16:55 |
| evrardjp | but should it be part of OSAD? | 16:55 |
| sigmavirus24 | CVE-2015-ABCD | Affects Cinder versions X-Y and OSAD versions T-V | | 16:55 |
| sigmavirus24 | And add a link to the OSSN/OSSA explaining it's OpenStack significance | 16:56 |
| evrardjp | how are the puppet guys doing? | 16:56 |
| * sigmavirus24 shrugs | 16:56 | |
| stevelle | evrardjp: I would say it can be a good fit, OSAD is operator facing and this is an operator concern | 16:56 |
| evrardjp | it is | 16:56 |
| evrardjp | I said it, I like it | 16:57 |
| sigmavirus24 | And operators will appreciate a simple way to determine these things | 16:57 |
| stevelle | :) | 16:57 |
| sigmavirus24 | It's also not a lot of work | 16:57 |
| sigmavirus24 | CVEs aren't super high traffic items | 16:57 |
| sigmavirus24 | so | 16:57 |
| sigmavirus24 | Keeping track of them won't really harm our productivity | 16:57 |
| *** javeriak has joined #openstack-ansible | 16:57 | |
| stevelle | is wiki good enough for tracking or should it be in repo docs and go through the review / merge process? | 16:58 |
| stevelle | (I think I know the answer) | 16:58 |
| evrardjp | maybe we should also ask cloudnull what he thinks about it? ;) | 16:58 |
| *** KLevenstein has quit IRC | 16:58 | |
| *** TheIntern is now known as TheIntern_away | 16:59 | |
| evrardjp | anyway, with CVE published, there is still a missing link between the deployment and the cve: the documentation about how to apply it... this should be documented IMHO | 16:59 |
| odyssey4me | stevelle my vote goes for adding it into the docs repo, and the link to how to fix can be in the same table | 17:00 |
| odyssey4me | in most cases the fix will be to update to the next tag evrardjp | 17:00 |
| *** Mudpuppy_ has joined #openstack-ansible | 17:01 | |
| stevelle | odyssey4me: and to run one or more plays, but targeting those plays narrowly is the point | 17:01 |
| evrardjp | I guess so, and it's going to be easy to do, but it's still not documented :p | 17:01 |
| evrardjp | I have to leave in the middle of this interesting discussion, sorry for that... | 17:01 |
| evrardjp | good evening everyone! | 17:01 |
| *** annashen has quit IRC | 17:02 | |
| *** annashen has joined #openstack-ansible | 17:03 | |
| *** Mudpuppy has quit IRC | 17:04 | |
| *** TheIntern_away has quit IRC | 17:05 | |
| *** Mudpuppy_ has quit IRC | 17:05 | |
| *** Mudpuppy has joined #openstack-ansible | 17:06 | |
| *** Mudpuppy has quit IRC | 17:06 | |
| cloudnull | sigmavirus24 stevelle evrardjp. i like it adding it to the wiki is simple enough and can be community maintained without a lot of effort | 17:07 |
| *** annashen has quit IRC | 17:08 | |
| odyssey4me | cloudnull I prefer it in the docs repo and to have the wiki driver the eyes to the docs. | 17:08 |
| cloudnull | maybe we should look at moving the docs out of tree and into their own repo once we hit "big tent" ? | 17:08 |
| cloudnull | in that way it can gate on its own and we can elect PTLs / LTs for them as stand alone projects ? | 17:09 |
| odyssey4me | cloudnull that's probably a good idea - then we can have a different core team there | 17:09 |
| odyssey4me | it splits the review burden | 17:09 |
| cloudnull | ill add that to the next meeting as an agneda item | 17:10 |
| *** jwagner is now known as jwagner_away | 17:12 | |
| miguelgrinberg | odyssey4me: the horizon errors on the ADFS federation, you think are because horizon is still using v2 identity? | 17:12 |
| odyssey4me | miguelgrinberg that's my lazy guess :p | 17:12 |
| cloudnull | ^ that would suck . | 17:12 |
| miguelgrinberg | because horizon is configured to use v3 in local_settings.py | 17:12 |
| odyssey4me | miguelgrinberg not horizon - all the other services | 17:12 |
| odyssey4me | horizon should be using the v3 api - it's certainly set to do so | 17:13 |
| miguelgrinberg | I can investigate that today if you are not doing it already | 17:13 |
| odyssey4me | that said, I can't recall how the service catalogue is set | 17:13 |
| odyssey4me | miguelgrinberg go for it - I spent some time figuring out how to try and get the logout to work without having to close the browser | 17:13 |
| odyssey4me | it seems that there's a bug, so it's not possible :/ | 17:14 |
| odyssey4me | that only really impacts testing though, so it's not too bad | 17:14 |
| miguelgrinberg | I suppose there is a cookie that needs to be deleted for a logout? | 17:14 |
| odyssey4me | miguelgrinberg yeah, it's a session cookie which will automatically expire on browser close | 17:15 |
| miguelgrinberg | yeah, probably the _shibsession cookie, horizon should be doing that | 17:15 |
| miguelgrinberg | right, it's a session cookie, so it'll stay until the browser is closed | 17:15 |
| miguelgrinberg | thought horizon seems to logout just fine | 17:16 |
| miguelgrinberg | you can't log out of the ADFS though | 17:16 |
| odyssey4me | yeah, but login again and it'll just go straight through | 17:16 |
| miguelgrinberg | I think that's a feature, not a bug | 17:16 |
| odyssey4me | hahaha | 17:16 |
| miguelgrinberg | works the same for OAuth | 17:17 |
| miguelgrinberg | you can probably got to your ADFS server and revoke the grant you gave horizon | 17:17 |
| miguelgrinberg | and then you'll get your ADFS login again | 17:18 |
| odyssey4me | miguelgrinberg if you logout there, but haven't close your browser, then the login to horizon still works | 17:18 |
| odyssey4me | which sounds like a bug to me | 17:18 |
| miguelgrinberg | yes, what I'm saying is that ADFS remembers your login, and also remembers that you gave horizon permission to use the account | 17:18 |
| miguelgrinberg | there's probably a config page in the ADFS server where you can remove the permission to horizon | 17:19 |
| miguelgrinberg | really the use case for these federated login flows is to do single-click login, so the IdP remembers previous grants. | 17:21 |
| openstackgerrit | Marc Gariépy proposed stackforge/os-ansible-deployment: Fix link to OSAD configuration files page. https://review.openstack.org/198069 | 17:21 |
| miguelgrinberg | similar to the "login with facebook, twitter, etc" flows you can do with OAuth | 17:21 |
| odyssey4me | yeah, it's not a train smash and is covered by the idle time-out and such anyway | 17:22 |
| odyssey4me | if you can figure out why the services are giving errors and get to a point where you can actually add/remove things in horizon - that'd be great | 17:23 |
| miguelgrinberg | yes, I'll work on that today | 17:27 |
| *** javeriak has quit IRC | 17:29 | |
| *** KLevenstein has joined #openstack-ansible | 17:32 | |
| *** annashen has joined #openstack-ansible | 17:39 | |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Add role system-crontab-coordination https://review.openstack.org/196586 | 17:39 |
| *** galstrom_zzz is now known as galstrom | 17:43 | |
| *** TheIntern has joined #openstack-ansible | 17:44 | |
| *** javeriak has joined #openstack-ansible | 17:45 | |
| *** Mudpuppy has joined #openstack-ansible | 17:51 | |
| *** CheKoLyN has joined #openstack-ansible | 17:54 | |
| *** BjoernT has quit IRC | 17:56 | |
| *** fawadkhaliq has quit IRC | 17:58 | |
| *** logan2 has quit IRC | 18:03 | |
| svg | 2015-07-02 16:14:00.187 | WARNING: The following packages cannot be authenticated! | 18:17 |
| svg | 2015-07-02 16:14:00.187 | memcached | 18:17 |
| svg | = failure in a os-ansible-deployment-dsvm-check-commit test, is this a known issue? | 18:18 |
| Sam-I-Am | is that from the console log? | 18:19 |
| *** annashen has quit IRC | 18:19 | |
| svg | yes | 18:19 |
| *** annashen has joined #openstack-ansible | 18:20 | |
| cloudnull | was that a gate job, if so I'd bet its from the hp-b4 region ? | 18:20 |
| Sam-I-Am | ^ this | 18:20 |
| cloudnull | svg: we see that all the time from hpb4 | 18:20 |
| svg | so I can safely ignore that I guess | 18:20 |
| cloudnull | i assume that is from your ceph review ? | 18:21 |
| cloudnull | http://logs.openstack.org/57/181957/27/check/os-ansible-deployment-dsvm-check-commit/504192d/console.html#_2015-07-02_15_56_52_342 | 18:21 |
| palendae | Yeah, recheck and hope it doesn't land in HP again | 18:21 |
| svg | yes | 18:21 |
| palendae | :( | 18:21 |
| palendae | We've not been able to pinpoint that with the infra team yet | 18:21 |
| *** jwagner_away is now known as jwagner | 18:21 | |
| svg | it was just a rebase triggered test, so no hurry, still got some work to do | 18:21 |
| svg | got some good comments | 18:21 |
| cloudnull | svg: yes you can ignore that | 18:22 |
| cloudnull | it happens in hpb4 about 50% of the time. | 18:22 |
| cloudnull | but seemlingly only hpb4 ... | 18:22 |
| cloudnull | which is frustrating | 18:22 |
| svg | it fits with ac/dc playing here, just carry on | 18:22 |
| svg | hpb4 is one of the test machines? | 18:23 |
| Sam-I-Am | test regions, iirc | 18:23 |
| cloudnull | ^ | 18:23 |
| svg | for those about to test, we salute yo | 18:23 |
| Sam-I-Am | where gate jobs go to die | 18:23 |
| cloudnull | its a region within the HP pulic cloud that the OpenStack CI system uses to provision test nodes. | 18:23 |
| cloudnull | svg hahaha | 18:23 |
| * svg is prepping for their gig next week | 18:24 | |
| *** annashen has quit IRC | 18:24 | |
| cloudnull | AC/DC playing in .be ? | 18:24 |
| svg | yup | 18:25 |
| svg | http://www.acdc.com/us/event/2015/07/06/dessel-belgium | 18:26 |
| cloudnull | Thats awesome ! | 18:32 |
| svg | it is | 18:33 |
| *** logan2 has joined #openstack-ansible | 18:49 | |
| *** sdake_ has joined #openstack-ansible | 18:58 | |
| *** sdake has quit IRC | 19:00 | |
| *** sdake has joined #openstack-ansible | 19:01 | |
| *** sdake_ has quit IRC | 19:04 | |
| *** javeriak has quit IRC | 19:10 | |
| *** javeriak has joined #openstack-ansible | 19:11 | |
| *** annashen has joined #openstack-ansible | 19:20 | |
| *** bagezio has joined #openstack-ansible | 19:24 | |
| *** annashen has quit IRC | 19:25 | |
| *** KLevenstein has quit IRC | 19:36 | |
| *** javeriak has quit IRC | 19:43 | |
| *** javeriak has joined #openstack-ansible | 19:44 | |
| alextricity | Isn't there a doc out there in cyberspace that explains why OSAD chose MariaDB/Galera? I was just thinking it would be a good idea to put that in the manifesto. What do you guys think? | 19:45 |
| palendae | Because it was a Rackspace product before being opened up and support felt more comfortable supporting MySQL | 19:46 |
| alextricity | lol | 19:46 |
| *** KLevenstein has joined #openstack-ansible | 19:49 | |
| *** alextricity has quit IRC | 19:55 | |
| *** KLevenstein has quit IRC | 19:56 | |
| prometheanfire | cloudnull: you have that list of reviews that need reviewing? | 20:02 |
| cloudnull | prometheanfire: https://review.openstack.org/#/q/status:open+project:stackforge/os-ansible-deployment,n,z | 20:03 |
| cloudnull | :) | 20:03 |
| b3rnard0 | cloudnull: any on the starred list that are of higher priority? | 20:07 |
| palendae | cloudnull: I see what you did that | 20:07 |
| palendae | there* | 20:07 |
| palendae | https://review.openstack.org/#/q/starredby:cloudnull+status:open+label:Workflow%253D0,n,z <- stuff starred and without a +W | 20:08 |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Default to use host/port for glance_api_servers https://review.openstack.org/195497 | 20:13 |
| svg | I'm maintaining a private patch on master and kilo to enable lbaas-ha - is that something to eventually work on to upstream, or are there specific reasons that is not enabled as of now? | 20:14 |
| cloudnull | svg: there's no reason its not functional at this point. | 20:19 |
| cloudnull | we've just not done it. | 20:19 |
| svg | IIRC didn;t you tell me it was not production ready or so? | 20:19 |
| cloudnull | thats why we've not done it. | 20:19 |
| svg | and is that still considered so? | 20:20 |
| cloudnull | i've not revisited it in Kilo/master . so i dont know quite yet | 20:20 |
| cloudnull | but if you have some bits to make it go we should get a review for it. | 20:20 |
| svg | well, wel'll see if it works once we start testing that more specifically | 20:21 |
| cloudnull | and ill be happy to go beat on it | 20:21 |
| svg | to upstream it, can I just add it to the default setup, or shoould that be conditionally? | 20:21 |
| *** annashen has joined #openstack-ansible | 20:21 | |
| cloudnull | I'd say that it should go in as a conditional. similar to how the agents are built out. | 20:22 |
| cloudnull | that way someone can turn it off / on based on wants . | 20:22 |
| svg | hm, didnt notice there were already agents installd conditionally | 20:23 |
| *** annashen has quit IRC | 20:26 | |
| openstackgerrit | Merged stackforge/os-ansible-deployment: Updated default fernet key usage https://review.openstack.org/195853 | 20:45 |
| svg | yeah | 20:51 |
| svg | now for the kilo backport! | 20:51 |
| *** annashen has joined #openstack-ansible | 21:04 | |
| *** jwagner is now known as jwagner_away | 21:05 | |
| openstackgerrit | Tom Cameron proposed stackforge/os-ansible-deployment: Rabbit config changes dont initiate a restart https://review.openstack.org/198134 | 21:21 |
| *** Mudpuppy has quit IRC | 21:22 | |
| *** logan2 has quit IRC | 21:31 | |
| *** weezS has quit IRC | 21:35 | |
| *** weezS has joined #openstack-ansible | 21:42 | |
| *** TheIntern has quit IRC | 21:56 | |
| *** logan2 has joined #openstack-ansible | 21:56 | |
| *** weezS has quit IRC | 21:57 | |
| *** javeriak has quit IRC | 22:06 | |
| *** javeriak has joined #openstack-ansible | 22:13 | |
| *** JRobinson__ has joined #openstack-ansible | 22:15 | |
| *** sdake has quit IRC | 22:22 | |
| *** sdake has joined #openstack-ansible | 22:22 | |
| *** annashen has quit IRC | 22:36 | |
| *** andymccr has quit IRC | 22:38 | |
| *** JRobinson__ is now known as JRobinson__afk | 22:39 | |
| *** galstrom is now known as galstrom_zzz | 22:40 | |
| *** CheKoLyN has quit IRC | 22:42 | |
| *** sdake has quit IRC | 22:43 | |
| *** mancdaz has quit IRC | 22:43 | |
| *** sdake has joined #openstack-ansible | 22:44 | |
| *** andymccr has joined #openstack-ansible | 22:44 | |
| *** mancdaz has joined #openstack-ansible | 22:44 | |
| *** sdake has quit IRC | 22:46 | |
| *** JRobinson__afk has quit IRC | 22:48 | |
| *** sdake has joined #openstack-ansible | 22:50 | |
| *** sdake has quit IRC | 22:51 | |
| *** sdake has joined #openstack-ansible | 22:52 | |
| *** annashen has joined #openstack-ansible | 22:53 | |
| *** sdake has quit IRC | 22:58 | |
| *** annashen has quit IRC | 23:02 | |
| *** JRobinson__afk has joined #openstack-ansible | 23:14 | |
| *** JRobinson__afk is now known as JRobinson__ | 23:14 | |
| *** radek_ has quit IRC | 23:17 | |
| *** bagezio has quit IRC | 23:20 | |
| *** sdake has joined #openstack-ansible | 23:37 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!