| scas | i believe i have keystone straightened out. looking at it, there's functionally no difference between public and internal | 06:22 |
|---|---|---|
| scas | it's all the same endpoint | 06:22 |
| scas | however, queens still has the versioning. | 06:23 |
| scas | while things were on the right track by removing admin, removing the version is what broke things | 06:23 |
| scas | dokken is still rather broken in ovs, which is another thing to tackle. | 06:24 |
| scas | allinone converges cleanly. patches will be forthcoming. | 07:03 |
| jklare | scas did you switch your timezone? | 07:13 |
| *** mago_ has joined #openstack-chef | 10:40 | |
| *** mago__ has joined #openstack-chef | 10:40 | |
| scas | jklare: i pull long hours from time to time | 12:36 |
| scas | keystone needed such longer hours | 12:37 |
| jklare | scas :) | 13:16 |
| jklare | scas so you just skipped sleeping today? | 13:17 |
| scas | i slept from 00:00 to 05:30 :) | 13:17 |
| scas | i sat around long enough to watch my allinones complete, then kicked off a multi kitchen test that revealed some more issues | 13:17 |
| jklare | it's something :) | 13:18 |
| scas | i was also determined to fix it once-and-for-all since i did break it | 13:24 |
| scas | local kitchen tests are looking promising. i'll try to have patches in zuul, but it's going to be another sweeping change across like 12 cookbooks again | 13:25 |
| scas | i'm still :shifty-eyes: on the efficacy of internal/public in terms of keystone, since that whole thing looks superficial once the admin endpoint is dropped | 13:26 |
| scas | if anything, i'd say calling the keystone endpoint 'public' is more the problem | 13:27 |
| scas | that said, i'm not implementing openstack with multiple networks, anywhere | 13:31 |
| scas | multiple networks for the apis, that is | 13:31 |
| scas | that could be an issue with edge, but i'm fairly certain the users out there are running private clouds. only private clouds are so secretive | 13:32 |
| jklare | we use internal and public endpoints to distinguish the tenant and the openstack-service traffic/requests | 13:45 |
| jklare | this way, we just filter and log all requests against the public endpoints, since they are all man-made and potentially dangerous, while we usually don't care for the ones against the internal endpoints, since they are coming directly from the openstack services | 13:46 |
| scas | yeah. that makes sense. it's just something i've not done on a long, long time | 13:47 |
| scas | i still need to test Seb-Solon's patches. even if zuul says they're good, i want to throw them at test-kitchen a few times | 13:56 |
| scas | once my meddlings in https://review.openstack.org/#/c/566440/ solidify with test-kitchen and dokken, integration will be in a much better place | 13:58 |
| Seb-Solon | (take your time, on my side my Openstack won't move for a while) | 14:01 |
| scas | i'm pressuring myself because rocky is soon to dropping | 14:01 |
| scas | better integration has been pretty much my theme, beyond getting things to queens and chef 14 | 14:02 |
| scas | zuulv3 is a more abstracted way of doing travis, but it seems like it would do more or less the same thing | 14:03 |
| *** openstackgerrit has quit IRC | 14:04 | |
| scas | my workstation is getting a bit sparse on memory. 32GB just isn't enough for developing these days | 14:25 |
| scas | zuul is a bit backed up, so the changes won't test for at least a couple of hours | 15:03 |
| *** mago_ has quit IRC | 16:02 | |
| *** mago__ has quit IRC | 16:02 | |
| scas | with the context of using internal for openstack service traffic, my patches are continuing that thread | 16:05 |
| *** mago__ has joined #openstack-chef | 16:37 | |
| *** mago_ has joined #openstack-chef | 16:37 | |
| *** mago__ has quit IRC | 17:51 | |
| *** mago_ has quit IRC | 17:57 | |
| *** mago_ has joined #openstack-chef | 18:09 | |
| *** os-chef-bot has quit IRC | 18:56 | |
| *** openstackgerrit has joined #openstack-chef | 19:24 | |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-identity master: Fixup keystone endpoint handling https://review.openstack.org/580619 | 19:24 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-dns master: Simplify identity endpoint https://review.openstack.org/575724 | 19:31 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-dns master: Simplify identity endpoint https://review.openstack.org/575724 | 19:32 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-block-storage master: Use internal identity endpoint for services https://review.openstack.org/583031 | 19:35 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-common master: Increment etcd to 5.5 https://review.openstack.org/583032 | 19:37 |
| scas | the common change is unrelated, but fixed in the march to openstack | 19:37 |
| scas | it was broken anyway | 19:37 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-compute master: Use internal identity endpoint for services https://review.openstack.org/583033 | 19:38 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-dashboard master: Use internal identity endpoint for services https://review.openstack.org/583034 | 19:40 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-image master: Use internal identity endpoint for services https://review.openstack.org/583035 | 19:42 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-integration-test master: Use node.override for SSL resources https://review.openstack.org/583036 | 19:44 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-network master: Use internal identity endpoint for services https://review.openstack.org/583037 | 19:44 |
| *** mago_ has quit IRC | 21:51 | |
| *** os-chef-bot has joined #openstack-chef | 22:09 | |
| openstackgerrit | Samuel Cassiba proposed openstack/openstack-chef-repo master: Increment ChefDK to 2.5 https://review.openstack.org/583058 | 22:16 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-common master: Increment etcd to 5.5 https://review.openstack.org/583032 | 22:17 |
| openstackgerrit | Samuel Cassiba proposed openstack/cookbook-openstack-image master: Use internal identity endpoint for services https://review.openstack.org/583035 | 22:18 |
| scas | 2.5 is going to be the final 2.x version for queens, unless a new one emerges sooner than later | 22:19 |
| scas | rocky will get 3.x with ubuntu 18.04 | 22:19 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!