*** matsuhashi has joined #openstack-dns | 00:29 | |
*** CaptTofu has quit IRC | 00:38 | |
*** CaptTofu has joined #openstack-dns | 00:39 | |
*** matsuhashi has quit IRC | 00:50 | |
*** matsuhashi has joined #openstack-dns | 00:50 | |
*** matsuhas_ has joined #openstack-dns | 00:53 | |
*** matsuhashi has quit IRC | 00:54 | |
*** vinod1 has quit IRC | 01:02 | |
*** nosnos has joined #openstack-dns | 01:26 | |
*** CaptTofu has quit IRC | 01:42 | |
*** CaptTofu has joined #openstack-dns | 01:43 | |
*** vinod1 has joined #openstack-dns | 01:59 | |
openstackgerrit | Endre Karlson proposed a change to stackforge/designate: Part 1 of FloatingIP PTR record functionality https://review.openstack.org/58316 | 02:03 |
---|---|---|
*** vinod1 has quit IRC | 02:20 | |
*** CaptTofu has quit IRC | 02:21 | |
*** CaptTofu has joined #openstack-dns | 02:21 | |
*** matsuhas_ has quit IRC | 02:31 | |
*** matsuhashi has joined #openstack-dns | 02:31 | |
*** CaptTofu has quit IRC | 02:56 | |
*** CaptTofu has joined #openstack-dns | 02:57 | |
*** nosnos has quit IRC | 02:58 | |
*** nosnos has joined #openstack-dns | 02:59 | |
*** vinod1 has joined #openstack-dns | 03:04 | |
*** vinod1 has quit IRC | 03:15 | |
*** matsuhashi has quit IRC | 03:42 | |
*** matsuhashi has joined #openstack-dns | 04:25 | |
*** CaptTofu has quit IRC | 04:34 | |
*** CaptTofu has joined #openstack-dns | 04:35 | |
*** matsuhashi has quit IRC | 05:00 | |
*** matsuhashi has joined #openstack-dns | 05:08 | |
*** matsuhashi has quit IRC | 05:27 | |
*** jmcbride has joined #openstack-dns | 05:29 | |
*** jmcbride has quit IRC | 05:33 | |
*** matsuhashi has joined #openstack-dns | 05:59 | |
*** vipul has quit IRC | 07:32 | |
*** vipul has joined #openstack-dns | 07:33 | |
*** pasquier-s has joined #openstack-dns | 08:17 | |
*** matsuhashi has quit IRC | 09:51 | |
*** matsuhashi has joined #openstack-dns | 09:54 | |
*** rjrjr has quit IRC | 11:51 | |
openstackgerrit | A change was merged to stackforge/designate: Fix typo in config and rename Quantrum > Neutron everywhere https://review.openstack.org/59352 | 11:56 |
kiall | artom: your multi-backend review should be merge now that ekarlso test fixes went in last night - should just need to be rebased | 12:04 |
kiall | ekarlso might comment on if that test needs to be restructured though | 12:04 |
*** CaptTofu has quit IRC | 12:08 | |
*** CaptTofu has joined #openstack-dns | 12:08 | |
ekarlso | kiall: I can fixup the test | 12:23 |
*** msisk has joined #openstack-dns | 13:04 | |
*** CaptTofu has quit IRC | 13:15 | |
*** CaptTofu has joined #openstack-dns | 13:16 | |
*** jmcbride has joined #openstack-dns | 13:22 | |
*** matsuhashi has quit IRC | 13:40 | |
ekarlso | artom: yo | 13:46 |
openstackgerrit | Endre Karlson proposed a change to stackforge/designate: Multi-backend https://review.openstack.org/55887 | 13:48 |
openstackgerrit | Endre Karlson proposed a change to stackforge/designate: Multi-backend https://review.openstack.org/55887 | 13:49 |
ekarlso | sorry kiall for making you go FML atm with all my changes :p | 13:49 |
kiall | ;) | 13:49 |
*** jmcbride1 has joined #openstack-dns | 13:51 | |
*** jmcbride has quit IRC | 13:52 | |
*** eankutse has joined #openstack-dns | 14:13 | |
*** eankutse has quit IRC | 14:13 | |
*** eankutse has joined #openstack-dns | 14:13 | |
*** msisk has quit IRC | 14:17 | |
*** vinod1 has joined #openstack-dns | 14:20 | |
*** nosnos has quit IRC | 14:20 | |
*** msisk has joined #openstack-dns | 14:23 | |
*** msisk has quit IRC | 14:23 | |
*** CaptTofu has quit IRC | 14:31 | |
*** CaptTofu has joined #openstack-dns | 14:31 | |
openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Denormalize tenant_id into the records table https://review.openstack.org/59732 | 14:35 |
eankutse | Hello Kiall | 14:49 |
kiall | eankutse: heya | 14:49 |
eankutse | regarding Filtering | 14:49 |
eankutse | across all tenants | 14:49 |
eankutse | Does the elevation to admin status help that ? | 14:49 |
kiall | all tenants stuff is actially something I'm working on at the very moment :) | 14:50 |
kiall | actually* | 14:50 |
eankutse | Cool | 14:50 |
eankutse | What approach are you using? | 14:50 |
eankutse | I looked at the openstack projects yesterday | 14:50 |
eankutse | nova uses the all_tenants=1 approach | 14:50 |
eankutse | which you are not too keen about :-) | 14:51 |
kiall | I haven't actually thought about on how it should "look" in the API, just the internals for now | 14:51 |
eankutse | ok | 14:51 |
kiall | But - the context will have a "context.all_tenants" property which can be set via whatever we decide in the API | 14:51 |
eankutse | Ok. So will it depend on the elevation to admin status? | 14:52 |
kiall | Well, it will depend on the user having the necessary permission (via the policy stuff) to set context.all_tenants = True.. Depending on the policy, that might not require "full admin access" (e.g. support shouldn't have free reign across the entire system..) | 14:53 |
eankutse | Yes. You are right | 14:54 |
kiall | Right now, I'm going for the minimal version - you have it, or you don't.. Later, we can make it more fine grained.. e.g. allowed to delete other tenants domains, or just view etc | 14:56 |
eankutse | Cool. That sounds like a great first step | 14:56 |
*** vinod1 has quit IRC | 15:00 | |
kiall | Adding the all_tenants thing has highlighted a pile of issues where we don't handle tenant_id's correctly in the tests :( | 15:10 |
artom | ekarlso, yo :) | 15:16 |
ekarlso | artom: I think you're change is rdy to go | 15:17 |
ekarlso | I'll +2 it if ok | 15:17 |
artom | Let me rebase it and make any changes needed for the new way of testing. | 15:17 |
ekarlso | artom: already rebased :) | 15:17 |
artom | Wha? | 15:18 |
artom | I haven't been keeping up with emails so far... | 15:18 |
artom | Also, why are HP trying to send me gifts? | 15:19 |
kiall | lol | 15:19 |
ekarlso | ~ | 15:19 |
kiall | artom: Mark decided to do it, just accept it ;) | 15:19 |
artom | Is that like the Mozilla/IE cakes? | 15:19 |
kiall | No clue what it is to be honest.. I've apparently got one in the post too | 15:20 |
artom | I hope yours is bigger than mine. | 15:20 |
artom | (That sounded wrong). | 15:20 |
kiall | I hope so too ;) | 15:20 |
ekarlso | ~~ | 15:21 |
*** betsy has joined #openstack-dns | 15:22 | |
artom | So multi looks ok. | 15:23 |
artom | Though I'm confused as to why changes to the nsd4slave backend got throw in. | 15:23 |
artom | For the tests, at least. | 15:23 |
kiall | ekarlso had made some changes to how the tests are structured, I haven't looked at what he did, but I think he just updated your one to match | 15:24 |
artom | Well, yes, but why mix the multi backend with changes to testing? | 15:25 |
kiall | Humm - will have to look | 15:37 |
kiall | on a call though | 15:37 |
*** tsimmons has joined #openstack-dns | 15:45 | |
*** vinod1 has joined #openstack-dns | 15:47 | |
artom | I think I'll split them off into two patchsets... | 15:50 |
artom | One of the backend tests restructure, one for multi. | 15:51 |
artom | Just copying ekarlso's code around. | 15:51 |
*** vinod1 has quit IRC | 15:57 | |
openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Ensure logs are captured and displayed when tests fail https://review.openstack.org/59764 | 16:03 |
openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Denormalize tenant_id into the records table https://review.openstack.org/59732 | 16:04 |
*** vinod1 has joined #openstack-dns | 16:08 | |
*** vinod1 has quit IRC | 16:08 | |
openstackgerrit | Artom Lifshitz proposed a change to stackforge/designate: Backend tests restructure https://review.openstack.org/59768 | 16:12 |
artom | Ok, that's ekarlso tests restructure. | 16:12 |
artom | Or should be. | 16:13 |
artom | If that can merge, I can rebase multi and avoid mixing different things in the same patchset. | 16:13 |
*** jmcbride has joined #openstack-dns | 16:15 | |
*** jmcbride1 has quit IRC | 16:16 | |
ekarlso | oh, ok :) | 16:17 |
openstackgerrit | A change was merged to stackforge/designate: Ensure logs are captured and displayed when tests fail https://review.openstack.org/59764 | 16:18 |
*** vinod1 has joined #openstack-dns | 16:22 | |
*** vinod1 has joined #openstack-dns | 16:23 | |
*** jmcbride has quit IRC | 16:27 | |
*** jmcbride has joined #openstack-dns | 16:28 | |
ekarlso | i'll +2 your thing :) | 16:29 |
ekarlso | or just +1 | 16:30 |
ekarlso | let someone else sign off :) | 16:30 |
artom | Too late :P | 16:30 |
ekarlso | and not interfere with kiall before he's done | 16:30 |
artom | Ah, not too late. | 16:31 |
*** eankutse1 has joined #openstack-dns | 16:31 | |
*** tsimmons_ has joined #openstack-dns | 16:31 | |
artom | Actually, what happens if you change your review *after* Jenkins starts the gate jobs? | 16:31 |
artom | We'll find out :) | 16:31 |
*** eankutse has quit IRC | 16:32 | |
kiall | artom: from memory, it aborts the currently running jobs and puts it back in the queue | 16:33 |
artom | In this case, it verified but didn't merge... | 16:34 |
ekarlso | it just doesnt merge :) | 16:34 |
ekarlso | easy ;) | 16:34 |
*** tsimmons has quit IRC | 16:34 | |
*** tsimmons_ has quit IRC | 16:35 | |
*** eankutse1 has quit IRC | 16:41 | |
*** eankutse has joined #openstack-dns | 16:41 | |
*** rjrjr has joined #openstack-dns | 16:59 | |
openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Provide support for "All Tenants" access https://review.openstack.org/59785 | 17:19 |
kiall | eankutse: ^ total and utter first draft, haven't even re-read it myself yet | 17:19 |
openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Provide support for "All Tenants" access https://review.openstack.org/59785 | 17:20 |
eankutse | Kaill: Wow! I'll take a look at this ASAP. Thx | 17:20 |
kiall | The v2 API should then be updated with a way of setting all_tenants = True when we figure out what that is.. | 17:29 |
kiall | Also need some tests to ensure it actually works ;) | 17:29 |
kiall | Heh - Just realized I deleted a bunch of tests from that review because they were broken .. dooh -_- | 17:49 |
kiall | Added some test cases that proves it works :) | 17:51 |
openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Provide support for "All Tenants" access https://review.openstack.org/59785 | 17:51 |
kiall | And .. nearly time for another call :( | 17:51 |
*** jmcbride1 has joined #openstack-dns | 18:11 | |
*** eankutse has quit IRC | 18:12 | |
*** vinod1 has quit IRC | 18:12 | |
*** jmcbride2 has joined #openstack-dns | 18:14 | |
*** jmcbride has quit IRC | 18:14 | |
*** vipul is now known as vipul-away | 18:15 | |
*** jmcbride1 has quit IRC | 18:16 | |
*** jmcbride2 has quit IRC | 18:18 | |
*** vipul-away is now known as vipul | 18:32 | |
*** openstackgerrit has quit IRC | 18:33 | |
*** openstackgerrit has joined #openstack-dns | 18:33 | |
*** ChanServ sets mode: +v openstackgerrit | 18:33 | |
*** jmcbride has joined #openstack-dns | 18:42 | |
openstackgerrit | Artom Lifshitz proposed a change to stackforge/designate: Put test resources into own folder https://review.openstack.org/59806 | 19:03 |
artom | Finally got around to making that test resources patchset. | 19:04 |
*** jmcbride has quit IRC | 19:04 | |
kiall | artom: pity the openstack-infra folks are doing maintaining so builds are just queuing up! | 19:26 |
artom | Zuul went Spaceballs on us | 19:29 |
artom | 'Prepating to exit!' | 19:29 |
kiall | Yep :) | 19:30 |
*** vipul is now known as vipul-away | 19:33 | |
*** vipul-away is now known as vipul | 19:33 | |
*** vinod1 has joined #openstack-dns | 19:43 | |
*** cederb02 has joined #openstack-dns | 19:44 | |
*** jmcbride has joined #openstack-dns | 19:46 | |
*** cederb02 has quit IRC | 19:46 | |
*** rjrjr has quit IRC | 19:47 | |
*** vipul is now known as vipul-away | 19:53 | |
*** vinod1 has quit IRC | 19:55 | |
*** vinod1 has joined #openstack-dns | 19:56 | |
*** vinod1 has quit IRC | 19:56 | |
*** eankutse has joined #openstack-dns | 19:58 | |
*** eankutse has quit IRC | 19:58 | |
*** eankutse has joined #openstack-dns | 19:59 | |
*** vipul-away is now known as vipul | 20:04 | |
artom | Zuul is back! | 20:04 |
*** vipul is now known as vipul-away | 20:11 | |
*** vipul-away is now known as vipul | 20:12 | |
openstackgerrit | Endre Karlson proposed a change to stackforge/designate: Part 1 of FloatingIP PTR record functionality https://review.openstack.org/58316 | 20:15 |
*** blogan has joined #openstack-dns | 20:22 | |
*** crc32 has joined #openstack-dns | 20:27 | |
*** vipul is now known as vipul-away | 20:27 | |
*** jorgem has joined #openstack-dns | 20:28 | |
*** artom has quit IRC | 20:29 | |
*** jmcbride has quit IRC | 20:30 | |
*** jmcbride has joined #openstack-dns | 20:36 | |
*** vinod1 has joined #openstack-dns | 20:39 | |
*** vinod1 has quit IRC | 20:40 | |
*** vinod1 has joined #openstack-dns | 20:40 | |
jorgem | Question: Does designate have the ability to not allow API users to create a server? What if as a provider I want to manage the DNS servers? | 20:44 |
*** vipul-away is now known as vipul | 20:45 | |
*** CaptTofu has quit IRC | 20:56 | |
*** CaptTofu has joined #openstack-dns | 20:57 | |
*** vipul is now known as vipul-away | 21:00 | |
openstackgerrit | Endre Karlson proposed a change to stackforge/designate: Part 1 of FloatingIP PTR record functionality https://review.openstack.org/58316 | 21:02 |
*** vipul-away is now known as vipul | 21:19 | |
jorgem | Who should I talk to for the above question? | 21:19 |
*** timfreund has quit IRC | 21:20 | |
ekarlso | jorgem: it's only admin users that should be allowed to create servers | 21:20 |
jorgem | gotcha, so are the API docs posted for an admin API or does one configure specify which calls are available to general users vs admin users? | 21:22 |
*** CaptTofu has quit IRC | 21:22 | |
ekarlso | ? | 21:23 |
ekarlso | if you're not a admin yo should get a failure for creating a server I believe | 21:23 |
ekarlso | you can check policy.json for that : ) | 21:23 |
jorgem | I guess I'm trying to understand why the servers call is there. What if I wanted to stand up hardware for my DNS servers but allow the creation of domains and records via the designate API? | 21:23 |
ekarlso | kiall: .. | 21:24 |
jorgem | I'm concerned about performance | 21:24 |
ekarlso | so | 21:24 |
ekarlso | I believe the "servers" call is just to assign a server in the database | 21:24 |
ekarlso | for relations | 21:25 |
jorgem | ah I see | 21:25 |
ekarlso | so that when you create a domain | 21:25 |
ekarlso | it will be created on one of the servers in the db | 21:25 |
ekarlso | later I think we will allow "scheduling" of domains to diff servers, atm I believe a domain is created on each confed server | 21:26 |
jorgem | That makes more sense. So some of the API calls in the doc are intended for admin users and some are intended for tenant users? | 21:28 |
*** CaptTofu has joined #openstack-dns | 21:29 | |
kiall | jorgem: yea, the docs probably don't make the default policy (aka who can do what) particularly clear | 21:30 |
kiall | but, the servers resource as it stands today is totally admin only... | 21:30 |
kiall | In the future, we're adding the ability for users to spin up managed DNS servers dedicated to them.. but that would still be something you can control.. | 21:31 |
jorgem | sweet, thanks for the clarification. I thought designate was spinning up nova instances and installing the DNS backend on that lol | 21:31 |
ekarlso | jorgem: "future" ; | 21:32 |
kiall | Nope - Not yet :) We'll always support real hardware / "unmanaged" DNS servers .. But will have support for managed nova instances too | 21:32 |
jorgem | correct but not multi tenant | 21:32 |
jorgem | awesome, for the future is this the right place to ask questions? I couldn't find an email list | 21:33 |
kiall | Not sure I understand? Today, the admin managed set of servers is multi tenant.. In the future, we'll support per-tenant nova instance(s) and admin managed multi-tenant :) | 21:33 |
kiall | Right now.. Yep.. This is generally the best place | 21:34 |
*** betsy has quit IRC | 21:34 | |
jorgem | Sorry I mean single tenant at the DNS server level. Right now it is multi tenant on the DNS server (i.e. multiple domains from multiple tenants are hosted on the DNS backend) | 21:35 |
kiall | yep | 21:35 |
*** betsy has joined #openstack-dns | 21:37 | |
jorgem | Also, what sorts of "advanced DNS features" is designate aiming for? I saw DNSsec on the horizon. What about using dns for routing global traffic such as geoip support? | 21:38 |
*** vipul is now known as vipul-away | 21:39 | |
jorgem | If this is on a wiki somewhere I can spare you but I wasn't sure | 21:39 |
*** vipul-away is now known as vipul | 21:39 | |
openstackgerrit | A change was merged to stackforge/designate: Backend tests restructure https://review.openstack.org/59768 | 21:39 |
kiall | We have a bunch of blueprints on launchpad - but it's def not complete https://blueprints.launchpad.net/designate/ | 21:41 |
jorgem | cool, thanks I'll check them out before I bombard the channel with more questions :) | 21:42 |
ekarlso | jorgem: company you with ? | 21:42 |
ekarlso | ah, rax ^ | 21:43 |
jorgem | Rax | 21:43 |
jorgem | I know our DNS team has been in contact with you guys. I'm part of our load balancing team and was looking at designate to see what overlap it has when it comes to routing traffic with DNS | 21:44 |
kiall | jorgem: oh, working with the DNS guys there, or another team? (There's a whole bunch of them in here right now ;)) | 21:44 |
kiall | Probably not much in the way of overlap in my opinion .. DNS is a blunt instrument when it comes to balancing traffic (ignoring geo-balancing..) | 21:45 |
jorgem | kiall: I need to talk with our DNS team but I think we wanted to have a conversation in regards to how global load balancing via dns fits in with designate | 21:46 |
jorgem | Is there an email I can reach you at? | 21:47 |
kiall | Yep - kiall@hp.com, or dnsaas@hp.com for the team | 21:47 |
jorgem | thanks. I have to go right now but I'll sync up with the DNS team and try to set something up in the near future. | 21:48 |
kiall | cya | 21:48 |
*** artom has joined #openstack-dns | 21:49 | |
openstackgerrit | Artom Lifshitz proposed a change to stackforge/designate: Put test resources into own folder https://review.openstack.org/59806 | 21:51 |
*** jorgem has quit IRC | 21:53 | |
*** timfreund has joined #openstack-dns | 21:59 | |
openstackgerrit | Artom Lifshitz proposed a change to stackforge/designate: Multi-backend https://review.openstack.org/55887 | 22:01 |
openstackgerrit | Artom Lifshitz proposed a change to stackforge/designate: Multi-backend https://review.openstack.org/55887 | 22:02 |
*** jmcbride has quit IRC | 22:06 | |
*** vinod1 has quit IRC | 22:07 | |
*** eankutse has quit IRC | 22:10 | |
openstackgerrit | A change was merged to stackforge/designate: Put test resources into own folder https://review.openstack.org/59806 | 22:12 |
*** betsy_ has joined #openstack-dns | 22:14 | |
*** vinod1 has joined #openstack-dns | 22:15 | |
*** betsy has quit IRC | 22:15 | |
*** betsy_ is now known as betsy | 22:15 | |
*** betsy has quit IRC | 22:20 | |
*** vinod1 has quit IRC | 22:33 | |
openstackgerrit | Endre Karlson proposed a change to stackforge/designate: Part 1 of FloatingIP PTR record functionality https://review.openstack.org/58316 | 22:34 |
*** CaptTofu has quit IRC | 22:57 | |
*** CaptTofu has joined #openstack-dns | 23:03 | |
*** CaptTofu has quit IRC | 23:44 | |
openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Provide support for "All Tenants" access https://review.openstack.org/59785 | 23:53 |
*** CaptTofu has joined #openstack-dns | 23:55 | |
*** openstackgerrit has quit IRC | 23:56 | |
*** openstackgerrit has joined #openstack-dns | 23:56 | |
*** ChanServ sets mode: +v openstackgerrit | 23:56 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!