*** vinod has quit IRC | 00:01 | |
*** vinod has joined #openstack-dns | 00:02 | |
*** vinod has quit IRC | 00:03 | |
*** jmcbride has joined #openstack-dns | 00:17 | |
*** openstackgerrit has quit IRC | 00:24 | |
*** openstackgerrit has joined #openstack-dns | 00:24 | |
*** ChanServ sets mode: +v openstackgerrit | 00:24 | |
*** jmcbride has quit IRC | 00:24 | |
*** ekarlso has quit IRC | 00:25 | |
*** ekarlso has joined #openstack-dns | 00:25 | |
*** vipul is now known as vipul-away | 00:35 | |
*** vipul-away is now known as vipul | 00:35 | |
*** jmcbride has joined #openstack-dns | 00:40 | |
*** vipul is now known as vipul-away | 00:51 | |
*** vipul-away is now known as vipul | 00:53 | |
*** jmcbride has quit IRC | 00:58 | |
*** jmcbride has joined #openstack-dns | 01:07 | |
*** jmcbride has quit IRC | 01:19 | |
*** CaptTofu has joined #openstack-dns | 02:03 | |
*** CaptTofu_ has joined #openstack-dns | 02:42 | |
*** CaptTofu has quit IRC | 02:44 | |
*** vinod has joined #openstack-dns | 03:36 | |
*** vinod has quit IRC | 03:39 | |
*** vinod has joined #openstack-dns | 03:42 | |
*** vinod has quit IRC | 03:45 | |
*** vinod has joined #openstack-dns | 03:49 | |
*** CaptTofu_ has quit IRC | 04:25 | |
*** CaptTofu has joined #openstack-dns | 04:25 | |
*** CaptTofu has quit IRC | 04:30 | |
*** vinod has quit IRC | 04:39 | |
*** vinod has joined #openstack-dns | 04:59 | |
*** vinod has quit IRC | 05:14 | |
*** vinod has joined #openstack-dns | 05:15 | |
*** jmcbride has joined #openstack-dns | 05:29 | |
*** jmcbride has quit IRC | 05:33 | |
*** vinod1 has joined #openstack-dns | 05:36 | |
*** vinod1 has quit IRC | 06:30 | |
*** vinod1 has joined #openstack-dns | 06:39 | |
*** vinod1 has quit IRC | 07:23 | |
*** vinod1 has joined #openstack-dns | 08:12 | |
*** vinod1 has quit IRC | 08:30 | |
*** nosnos has joined #openstack-dns | 08:55 | |
*** nosnos has quit IRC | 09:51 | |
*** vinod1 has joined #openstack-dns | 10:00 | |
*** vinod1 has quit IRC | 10:01 | |
*** cflmarques has joined #openstack-dns | 10:37 | |
*** vinod1 has joined #openstack-dns | 11:02 | |
*** vinod1 has quit IRC | 11:33 | |
*** vinod1 has joined #openstack-dns | 11:37 | |
*** vinod1 has quit IRC | 12:00 | |
*** vinod1 has joined #openstack-dns | 12:02 | |
*** jmcbride has joined #openstack-dns | 12:35 | |
*** vinod1 has quit IRC | 12:43 | |
*** vinod1 has joined #openstack-dns | 12:45 | |
kiall | eankutse: sorry, have been off IRC the last few days! I expect we'll set the all_tenants=True in the KeystoneContextMiddleware, after performing a policy check that the user is allowed use all_tenants. | 12:48 |
---|---|---|
kiall | artom: artom entirely possible, My database isn't an exact match to what the migrations produce (mix of old versions of the migrations, and a dump of our staging db's etc) | 12:49 |
kiall | cflmarques: Honestly, never seen that message before! It's coming from the Keystone middleware, rather than Designate itself.. But I suspect it's related to: Keystone has 2 APIs.. 1 on 35357 and 1 on 5000 (or something) | 12:50 |
*** HenryG has quit IRC | 12:51 | |
kiall | the port 5000 one is an "admin only" API with some extra features for admins.. | 12:51 |
kiall | the 35357 one is the public endpoint.. | 12:51 |
kiall | Either your designate.conf is pointing to the wrong one, OR your keystone catalog's "identity" service is using the same URL for both the public and admin URLs, so it's having a hard time guessing if it's right | 12:52 |
kiall | (^ total guesses.. though) | 12:52 |
*** cflmarques has quit IRC | 12:53 | |
*** HenryG has joined #openstack-dns | 12:58 | |
*** jmcbride has quit IRC | 13:31 | |
*** shakayumi has joined #openstack-dns | 13:43 | |
*** msisk has joined #openstack-dns | 13:59 | |
*** betsy has joined #openstack-dns | 14:03 | |
betsy | 766706 | 14:06 |
*** eankutse has joined #openstack-dns | 14:21 | |
*** eankutse has quit IRC | 14:23 | |
*** eankutse has joined #openstack-dns | 14:23 | |
*** eankutse has quit IRC | 14:29 | |
*** eankutse has joined #openstack-dns | 14:37 | |
kiall | betsy: 766706 ? Looks like a one time pin to me ;) | 14:41 |
*** vinod1 has quit IRC | 14:41 | |
*** cflmarques has joined #openstack-dns | 14:45 | |
*** HenryG_ has joined #openstack-dns | 14:45 | |
cflmarques | kiall: I Kiall. Thank's for the answer. I manage to create a domain using admin token and all went well. I then listed the designate database and saw that the domain as an id of admin tenant associated to that domain. But If am a different user? Do I have to change on designate.conf file under [keystone_authtoken] the credentials to that tenant every time that I want to access api with a different tenant? | 14:46 |
kiall | No, if a normal user token is rejected, then you have the wrong keystone endpoint URLs in the designate.conf.. | 14:47 |
kiall | i.e. It's pointing to Keystones Admin API - which will only validate admin tokens.. | 14:47 |
kiall | If it's pointed to Keystones public API, it will validate all tokens | 14:47 |
cflmarques | so probably I have to chage from 5000 to 35357 on designate.conf | 14:48 |
*** HenryG has quit IRC | 14:49 | |
*** shakayumi has quit IRC | 14:49 | |
kiall | Yea - Exactly | 14:50 |
kiall | port 5000 is the keystone admin API, 35357 is the public API | 14:50 |
*** eankutse has quit IRC | 14:52 | |
*** jmcbride has joined #openstack-dns | 14:53 | |
cflmarques | I just open my designate.conf and the port is 35357 allready defined | 14:55 |
kiall | cflmarques: I probably have the port numbers confused them :) | 14:56 |
kiall | then* | 14:56 |
kiall | Yea - from the sample keystone config: | 14:56 |
kiall | # public_port = 5000 | 14:56 |
kiall | # admin_port = 35357 | 14:56 |
kiall | So, it should be 5000 actually | 14:56 |
cflmarques | :) | 14:56 |
cflmarques | going for testing | 14:57 |
* kiall gets back to driving powerpoint... "Fun". | 14:59 | |
artom | Ask Clippy for help. | 14:59 |
* mugsie shoots clippy | 15:00 | |
mugsie | sorted | 15:00 |
mugsie | :D | 15:00 |
artom | Noooo Clippy! | 15:01 |
* artom mourns. | 15:01 | |
*** shakayumi has joined #openstack-dns | 15:03 | |
*** shakayumi has quit IRC | 15:08 | |
*** shakayumi has joined #openstack-dns | 15:10 | |
artom | kiall, so maybe it's worth it to add some tests that check for the ability to add servers/domains with a brand new database? | 15:20 |
artom | Or rather, modify current tests to use a database that's been created with database-init/database-sync... | 15:21 |
kiall | artom: absolutely :) our tests currently don't use the migrations -_-, they build the DB via a totally different mechanism (for speed) | 15:21 |
kiall | Running the migrations takes like 11 sec .. and we build a new DB for every database | 15:21 |
kiall | for every test* | 15:21 |
artom | Ouch. | 15:21 |
kiall | What we probably want is a way to build the DB once, "backup" the sqlite file, and then use that over and over | 15:22 |
artom | Smrt ;) | 15:22 |
artom | I'll see what I can do. I'm in this weird limbo - official mandate with Designate done, but internship ends in a week. So I don't have much to do. | 15:23 |
*** tsimmons has joined #openstack-dns | 15:24 | |
*** jmcbride has quit IRC | 15:28 | |
*** jmcbride has joined #openstack-dns | 15:36 | |
*** eankutse has joined #openstack-dns | 15:40 | |
*** vinod has joined #openstack-dns | 15:52 | |
*** vinod has quit IRC | 15:56 | |
*** vinod has joined #openstack-dns | 15:57 | |
*** vinod has joined #openstack-dns | 16:00 | |
*** vinod has quit IRC | 16:00 | |
*** vinod has joined #openstack-dns | 16:02 | |
*** vinod has quit IRC | 16:02 | |
*** shakayumi has quit IRC | 16:08 | |
*** jmcbride has quit IRC | 16:09 | |
*** jmcbride has joined #openstack-dns | 16:15 | |
*** jmcbride has quit IRC | 16:23 | |
artom | Actually, I think we just need to add tests to sqlalchemy... | 16:25 |
artom | Currently, the CRUD methods aren't tested. | 16:25 |
*** tsimmons has left #openstack-dns | 16:25 | |
*** jmcbride has joined #openstack-dns | 16:34 | |
kiall | artom: they are tested | 16:35 |
kiall | https://github.com/stackforge/designate/blob/master/designate/tests/test_storage/__init__.py | 16:35 |
*** openstackgerrit has quit IRC | 16:37 | |
*** artom has quit IRC | 16:37 | |
*** artom has joined #openstack-dns | 16:37 | |
*** openstackgerrit has joined #openstack-dns | 16:38 | |
*** hobana.freenode.net sets mode: +v openstackgerrit | 16:38 | |
*** baffle_ has joined #openstack-dns | 16:42 | |
*** justinsb has joined #openstack-dns | 16:42 | |
*** baffle has quit IRC | 16:43 | |
*** justinsb_ has quit IRC | 16:44 | |
*** openstackgerrit has quit IRC | 16:49 | |
*** tsimmons has joined #openstack-dns | 17:06 | |
*** eankutse has quit IRC | 17:19 | |
*** eankutse has joined #openstack-dns | 17:20 | |
*** jmcbride has quit IRC | 17:21 | |
*** jmcbride has joined #openstack-dns | 17:21 | |
*** openstackgerrit has joined #openstack-dns | 17:21 | |
*** ChanServ sets mode: +v openstackgerrit | 17:21 | |
*** baffle_ has quit IRC | 17:25 | |
*** baffle has joined #openstack-dns | 17:27 | |
*** jmcbride has quit IRC | 17:49 | |
*** eankutse has quit IRC | 17:49 | |
*** jmcbride has joined #openstack-dns | 17:51 | |
*** eankutse has joined #openstack-dns | 17:52 | |
*** eankutse has quit IRC | 17:53 | |
*** jmcbride has quit IRC | 17:55 | |
*** jmcbride has joined #openstack-dns | 18:20 | |
*** tsimmons has quit IRC | 18:21 | |
*** cflmarques has quit IRC | 18:24 | |
*** jmcbride has quit IRC | 18:26 | |
*** eankutse has joined #openstack-dns | 19:12 | |
*** tsimmons has joined #openstack-dns | 19:15 | |
*** jmcbride has joined #openstack-dns | 19:18 | |
*** jmcbride1 has joined #openstack-dns | 19:22 | |
*** jmcbride has quit IRC | 19:24 | |
*** CaptTofu has joined #openstack-dns | 19:25 | |
*** sinstenes has joined #openstack-dns | 19:33 | |
*** eankutse has quit IRC | 19:44 | |
*** eankutse has joined #openstack-dns | 19:46 | |
*** eankutse has quit IRC | 19:49 | |
*** eankutse has joined #openstack-dns | 19:49 | |
*** msisk has quit IRC | 19:50 | |
*** CaptTofu has quit IRC | 19:55 | |
openstackgerrit | Artom Lifshitz proposed a change to stackforge/designate: Apply db migrations for all sqlalchemy tests https://review.openstack.org/62079 | 20:15 |
tsimmons | rjrjr: I was reading over what you said yesterday, nobody is currently working on the bind9 driver and there is no current blueprint for it's improvement. If you'd like to get in there go for it. | 20:28 |
rjrjr | tsimmons, i appreciate the response. my plans are to do just that! | 20:40 |
rjrjr | question: with the work that is completed and going on, are we going to be able to share zones between multiple tenants? | 20:48 |
tsimmons | I don't believe that is the design, no. | 20:49 |
betsy | rjrjr: Is there a use case for that? | 20:52 |
*** jmcbride1 has quit IRC | 21:04 | |
rjrjr | not sure yet. :( | 21:05 |
betsy | ah | 21:07 |
tsimmons | You could perhaps do something fancy with your authentication that allowed two accounts to change one zone. | 21:12 |
rjrjr | will the concept of public and private pools that are being contemplated with server pools address this? | 21:53 |
rjrjr | getting caught up on the existing blueprints now and noticed this concept in that blueprint. | 21:53 |
*** CaptTofu has joined #openstack-dns | 21:58 | |
*** tsimmons has left #openstack-dns | 22:01 | |
*** eankutse has quit IRC | 22:42 | |
*** CaptTofu has quit IRC | 22:49 | |
*** CaptTofu has joined #openstack-dns | 22:50 | |
*** artom has quit IRC | 23:02 | |
*** eankutse has joined #openstack-dns | 23:36 | |
*** eankutse has quit IRC | 23:39 | |
*** eankutse has joined #openstack-dns | 23:40 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!