Wednesday, 2015-05-06

*** johnbelamaric has quit IRC00:01
*** johnbelamaric has joined #openstack-dns00:03
*** penick has quit IRC00:08
*** johnbelamaric has quit IRC00:27
-openstackstatus- NOTICE: Restarted gerrit due to stuck stream-events connections. Events since 23:49 were missed and changes uploaded since then will need to be rechecked.00:42
*** EricGonczer_ has quit IRC01:15
*** ericpeterson has joined #openstack-dns01:19
*** ericpeterson has quit IRC01:26
*** ericpeterson has joined #openstack-dns01:27
*** ericpeterson has quit IRC01:30
*** ericpeterson has joined #openstack-dns01:31
*** penick has joined #openstack-dns01:48
*** penick_ has joined #openstack-dns01:51
*** penick has quit IRC01:52
*** penick_ is now known as penick01:52
*** ericpeterson has quit IRC01:53
*** ericpeterson has joined #openstack-dns01:54
*** ericpeterson has quit IRC01:54
*** stanzgy has joined #openstack-dns01:54
*** ericpeterson has joined #openstack-dns02:14
*** richm has quit IRC02:21
*** mwagner_lap has joined #openstack-dns02:32
*** stanzgy has quit IRC02:41
*** penick has quit IRC02:41
*** ericpeterson has quit IRC02:44
*** stanzgy has joined #openstack-dns02:49
*** EricGonczer_ has joined #openstack-dns02:55
*** EricGonczer_ has quit IRC03:01
*** ericpeterson has joined #openstack-dns03:19
*** ericpeterson has quit IRC03:31
*** crc32 has quit IRC05:17
*** kodoku has joined #openstack-dns08:05
*** jordanP has joined #openstack-dns08:14
*** cliles has quit IRC08:58
*** cliles has joined #openstack-dns09:00
*** redixin has joined #openstack-dns09:13
stanzgyhi all, I find it very inconvenient that admin account cannot list other tenants' domains/records or create domains/records directly belongs to other tenant. Do you think it's necessary to add functions to allow admin tenant directly CRUD other tenants' data? at least Read?09:21
*** redixin has left #openstack-dns09:36
*** kodoku has quit IRC09:44
*** untriaged-bot has joined #openstack-dns10:02
untriaged-botNo untriaged bugs so far! \o/10:02
*** untriaged-bot has quit IRC10:02
*** stanzgy has quit IRC10:53
ekarlsostanzgy__: I think there's a way to do that11:19
ekarlsoit was accidently removed but then added back nio Kiall or mugsie ?11:19
*** boris-42 has joined #openstack-dns11:27
Kiallstanzgy__: re the rechecks, it seems the gate is wedged :(11:32
KiallMore than just your change failing over + over11:32
openstackgerritKiall Mac Innes proposed openstack/designate: Test Change  https://review.openstack.org/18049311:36
mugsiestanzgy__: there is an all_tennants flag you can set12:05
mugsiehttp://docs.openstack.org/developer/designate/rest.html#http-headers12:06
mugsiesorry, its is X-Auth-Sudo-Tenant-ID12:06
mugsieso if you set that as a HTTP header, you can impersonate the user12:07
*** EricGonczer_ has joined #openstack-dns12:09
*** EricGonczer_ has quit IRC12:19
*** EricGonczer_ has joined #openstack-dns12:26
*** kodoku has joined #openstack-dns12:41
Kiallstanzgy__: aha, someone fixed swift/glance and the gates are passing again.. woo :)12:44
*** EricGonczer_ has quit IRC12:49
*** openstackgerrit has quit IRC12:53
*** openstackgerrit has joined #openstack-dns12:53
*** ChanServ sets mode: +v openstackgerrit12:53
kodokuKiall Hi, question :) I see lot of Unacknowledged message in central queue. This is normal ?13:03
Kiallkodoku: that depends... Unacknowledged messages in the central queue means central is working on processing the message, but hasn't finished yet13:03
Kiallhow many is lots?13:04
kodoku7 - 1013:04
kodokuand I have  Timed out waiting for a reply to message ID13:04
kodokuin api logs13:05
kodokuwith trace13:05
kodoku15 message now13:05
Kiall7-10 seems fine, but getting timeouts - not so much.13:05
kodokumessage always increase and error with API13:05
kodoku0 logs in central13:06
KiallCentral logs have anything useful? Chances are something is broke/stalled there?13:06
KiallNothing at all?13:06
kodokulast log DEBUG designate.service [-] Starting RPC server on topic 'central' start /usr/lib/python2.7/site-packages/designate/service.py:12313:06
KiallHumm.. That sounds like central is wedged, was there a "Connected to rabbitmq on 1.2.3.4" message in there?13:06
kodokunop13:07
kodokuI reboot it13:07
KiallSounds like it's failing to properly connect to RabbitMQ, but it's clearly getting part of the way there if messages are being consumed, but not ack'd13:07
kodokuOk I reboot central and queue is empty13:08
Kiallany logs in central indiciating it did any work?13:08
kodokuyes I see log with rabbit13:08
kodokuI have this warning at boot13:08
kodokuWARNING designate.central.service [-] Managed Resource Tenant ID is not properly configured13:08
KiallYou can ignore that, if you're not using anything that creates managed records.. otherwise there's a flag in the conf file for you to fill out a tenant id where managed stuff will live by default.13:09
claytonKiall: that only matters for reverse IP creation, right?13:10
Kiallclayton: yea, and from memory the stock sink handlers use it too13:10
claytonhuh, does that allow that tenant id to delete the records?13:10
Kiallclayton: the records always live in some tenant, typically, you would create a placeholder style tenant without any users etc and use that ID13:11
claytonwe're using managed records in our sink handler, but mostly so that we can store additional metadata with the record, like floating ip id, and port id13:11
KiallBut - again - that's really only for the stock sink handlers and reverse DNS zones.. Both of which have an "alternative" way to manage the records without actually using the normal APIs13:12
claytonone of the downsides I saw with that approach is that I didn't see any way to clean up records if something went wrong, short of db modifications13:12
claytonso when you mentioned it, I was hoping the managed tenant id would allow editing those records13:12
*** andrewbogott_afk is now known as andrewbogott13:12
Kiallclayton: ah, there's a header you can set to "sudo" into another tenant (if your an admin), and another header you can set to say "Let me edit managed=True records", again, if youre an admin13:13
kodokuKiall If I conf this flag with admin tenant id, Can I modify managed records with admin user ? in horizon13:13
kodokulike delete or create13:13
claytonok, that's good to know.  No way yet to do that via the cli yet though?13:13
Kiallclayton: ehh, sudo I think yes... edit managed I think no13:14
claytonI think really I'd prefer edit managed was exposed via policy.json13:14
Kiallkodoku: yea, admin tenant id works.. to edit the manage records, you would need to set the right Header (and have admin access).. http://docs.openstack.org/developer/designate/rest.html#http-headers13:14
claytonthen I could say users with role x (probably just us) would be able to clean up the records if something broke13:15
Kiallclayton: it is exposed with policy, it's often simpler to just say "admin" though ;)13:15
Kiallhttps://github.com/openstack/designate/blob/master/etc/designate/policy.json#L1813:15
claytonok, but you need to be in that group, plus pass the header then?13:16
*** andrewbogott is now known as andrewbogott_afk13:16
KiallYea, you still have to pass the header.. it should be an intentional thing to modify them, as that should be an expection to the norm13:16
claytonnod.  well, this is all good to know, I'm hoping to work on my slides for the summit today and tomorrow :)13:17
Kiall:)13:17
kodokuKiall ok but in horizon I can't edit header13:17
kodokuI need to modify code13:18
Kiallkodoku: correct, for now, it's something you have to do via the API by hand13:18
Kialland - I'm not sure it would make sense to implement it in Horizon, at least not without adding some new concepts to Horizon first13:18
*** johnbelamaric has joined #openstack-dns13:19
kodokuKiall: yeah, an admin interface for manage DNS with all domains13:19
kodokulike for instances13:19
KiallWell, even in an admin panel for Designte, editing of managed records should be off by default.. Think of it a bit like using sudo (when people use sudo right ;)).. You're an admin using the admin panel for day to day stuff.. makes sense.. then, you see a managed record you want to edit/delete/etc.. You should have to "sudo" into "Edit managed records mode" to do so, then drop that previledge once done etc13:21
*** richm has joined #openstack-dns13:21
*** kodoku_ has joined #openstack-dns13:22
Kiall(touching managed=True stuff should be a last resort... i.e. Something broke horriby, and you have to perform some cleanup)13:22
claytonnod, that makes sense.  I just want a --edit-managed flag in the CLI so I don't have to use curl to make API calls when I'm already having a bad day :)13:22
mugsieclayton: that should be easy enough to implement13:23
claytonnod, I may look into it when the openstack client stuff is merged13:23
kodoku_clayton +1, when sink bug I need to connect to API, delete all manage records.....13:23
KiallYea, the sudo one was like a 10 line diff.. This would probably be less as its an on/off rather than random tenant ID ;)13:23
claytonkodoku_: I've just deleted from directly out of the database13:23
*** kodoku has quit IRC13:24
kodoku_clayton : with juno yes, but now with kilo, delete in database doesn't delete in pdns database13:24
claytonoh, another thing we've run into, it doesn't seem like there is anything that ever cleans up recordsets that have no records, at least with the juno release.  Does that sound right?13:24
KiallI change my mind weekly on if a empty recordset is a valid thing to have to not.. But, last I remember we treated that as a bug and fixed it in Kilo.. I thought we backported to the Juno branch too.. Not 100% sure13:27
claytondefinitely still seeing it in the latest juno last I looked13:27
claytonI figured it was the sort of thing you'd have a designate-manage job to do13:27
*** andrewbogott_afk is now known as andrewbogott13:28
Kiallhttps://review.openstack.org/#/c/108840/ is what I'm thinking of13:29
Kiallwhich is Included in stable/juno .. guess that's not it13:29
Kiall(I think there was also a followup to that, to avoid a check+set race)13:29
claytonah, ok, I thought that would be in central, so I was looking there13:29
Kiallyea, I seem to remember moving it to central13:30
Kiallor thinking about moving it to central13:30
openstackgerritGraham Hayes proposed openstack/python-designateclient: Add --edit-managed flag to cli  https://review.openstack.org/18054113:30
claytonit's not a big deal, I was just wondering if I was thinking about it right.  If it becomes a problem we could easily setup a cron job to delete orphaned recordsets13:30
Kialllol .. that was quick mugsie ;)13:30
mugsieyeah, i knew where it had to go, so I just put it together13:31
claytonnice!  Thanks :)13:31
KiallSo.. It seems I only thought about moving it to central.. still in the API.. heh13:31
claytonseems like it'd have to be in central to properly handle the check+set race13:32
Kiallexactly my thinking!13:32
KiallI must have spotted it, then promptly forgot about it.. Heh :(13:33
*** openstackgerrit has quit IRC13:38
*** openstackgerrit has joined #openstack-dns13:38
*** ChanServ sets mode: +v openstackgerrit13:38
*** ericpeterson has joined #openstack-dns13:54
*** busterswt has joined #openstack-dns14:02
*** pglass has joined #openstack-dns14:04
*** vinod1 has joined #openstack-dns14:05
*** shakamunyi has joined #openstack-dns14:09
*** shakamunyi has quit IRC14:13
openstackgerritEric Peterson proposed openstack/designate: Improve UX of create record screen  https://review.openstack.org/17698514:16
*** andrewbogott is now known as andrewbogott_afk14:18
ericpetersonstanzgy__ - let me know if have any pushback on my comments for my review above.   Thanks for the feedback!14:19
KiallOh yea, forgot about that change.. sorry ericpeterson, should have got to review it earlier14:25
ericpetersonyeah, I have two reviews that have been waiting for a while14:25
ericpetersonone is to add back in support for juno horizon14:26
KiallSorry ;) I've been travelling and dealing with PILES of other stuff :'(14:26
ericpetersonthe other is general ui improvements14:26
ericpetersonno worries Kiall14:29
Kiallre the Juno support, discussed that one with mugsie last night actually.. wondering if it's worth keeping that goal14:30
KiallI suspect it's going to be harder and header given the massive changes Horizon is going through for the Angular etc stuff14:30
Kiallharder and harder*14:30
openstackgerritKiall Mac Innes proposed openstack/designate: Vagrant: NFS should only be used for libvirt  https://review.openstack.org/18056414:33
*** shakamunyi has joined #openstack-dns14:35
*** shakamunyi has quit IRC14:36
*** shakamunyi has joined #openstack-dns14:36
ericpetersonKiall - Its not that bad to add that support back in, IMHO.   There will be rewrites down the road, but horizon still has a lot of churn in the core libraries etc.   It will be awhile before designate needs to worry.  (my $.02)14:39
Kiallleft a comment on the main one anyway ;)14:46
KiallIt could be way off.. not 100% sure where those strings end up used!14:46
*** EricGonczer_ has joined #openstack-dns14:47
*** johnbelamaric has quit IRC14:48
openstackgerritMerged openstack/designate: Fixed SO_REUSEPORT not supported by Linux <3.9  https://review.openstack.org/18004514:51
openstackgerritEric Peterson proposed openstack/designate: Improve UX of create record screen  https://review.openstack.org/17698514:58
Kiallhttps://review.openstack.org/#/c/180573/ is a cherry-pick of ^ to stabe/kilo14:59
*** johnbelamaric has joined #openstack-dns14:59
ericpetersonhttps://hipchat.os.cloud.twc.net/files/1/37/oQXZGAEwH9fDAyY/upload.png  - Kiall that is what it looks like, with most recent change you requested15:06
Kiall:)15:06
KiallThough, I just spotted the "For most record types"... The name always (currently) ends with a period15:07
Kiallthe values may not, but the name always does15:07
ericpetersonthat certainly sounds like most ;)15:07
ericpetersonwe've have user feedback around that - they always fail to add the period and they are not sure why it fails.   this change helps that, but I can reword it if you like too15:08
KiallWell, I totally agree about calling it out - but I think it's "always" rather than "most" :)15:09
openstackgerritEric Peterson proposed openstack/designate: Improve UX of create record screen  https://review.openstack.org/17698515:09
ericpetersonask and you shall receive15:09
*** jeh has joined #openstack-dns15:11
mugsieericpeterson: I just have one quetion - for the work in the create screen, should we replicate it in the update screen?15:36
ericpetersonhmm, probably15:36
Kiallpoor eric is suddently getting feedback, immedialy after posting a review. lol15:37
*** openstackgerrit has quit IRC15:37
*** openstackgerrit has joined #openstack-dns15:37
*** ChanServ sets mode: +v openstackgerrit15:37
mugsie(i finally booted a devstackl to look at it ;) )15:37
ericpetersonsome of it might be automatically added, from reusing same base class.  I'm checking right now15:37
kodoku_mugsie Hi, I delete managed records with X-Designate-Edit-Managed-Records:True but the records is always here15:37
kodoku_mugsie Kiall this is logs of API ==> no error ==> http://paste.openstack.org/show/215463/15:38
* ericpeterson realizes mugsie is correct, goes scrubbing out the update screen15:39
Kiallkodoku_: humm, mugsie wrote that code.. if it's broke, you can lynch him?15:39
Kiall(I've never actually tried the X-Designate-Edit-Managed-Records:True thing)15:39
mugsiekodoku_: is there logs from central and the pool manger?15:40
kodoku_mugsie yeah I copy15:40
kodoku_mugsie central ==> http://paste.openstack.org/show/215464/15:42
kodoku_no logs in mdns :/15:42
*** andrewbogott_afk is now known as andrewbogott15:43
kodoku_I can request API to delete 20 times ==> code 20015:44
kodoku_So I have 4 records are not delete managed by sink.15:45
kodoku_mugsie and 0 message in queue15:48
mugsiekodoku_: ok, give me a few mins I will dig into it15:51
kodoku_mugsie after delete instance ==> pool-manager logs http://paste.openstack.org/show/215468/15:52
kodoku_mugsie ok, records are delete after restart pool-manager15:54
kodoku_so pool have freeze ?15:54
*** jhazen has joined #openstack-dns15:54
kodoku_mugsie I go home. I'll read irc logs ;)15:57
*** shakamunyi has quit IRC15:58
*** jordanP has quit IRC15:59
openstackgerritEric Peterson proposed openstack/designate: Improve UX of create and update record screen  https://review.openstack.org/17698515:59
ericpetersonmugsie - changes above, screens look similar for create and update record now.  ping me if you need screen shots16:00
openstackgerritOpenStack Proposal Bot proposed openstack/designate: Updated from global requirements  https://review.openstack.org/17990216:02
*** untriaged-bot has joined #openstack-dns16:02
untriaged-botNo untriaged bugs so far! \o/16:02
*** untriaged-bot has quit IRC16:02
mugsieericpeterson: cool, will download them now16:04
mugsies/them/the patch/16:04
*** ericpeterson is now known as ducttape_16:05
openstackgerritGraham Hayes proposed openstack/python-designateclient: Add --edit-managed flag to cli  https://review.openstack.org/18054116:13
*** kodoku_ has quit IRC16:43
*** jordanP has joined #openstack-dns16:46
*** shakamunyi has joined #openstack-dns16:49
*** andrewbogott has quit IRC16:51
*** andrewbogott has joined #openstack-dns16:53
*** andrewbogott has joined #openstack-dns16:53
*** crc32 has joined #openstack-dns16:55
*** jmcbride has joined #openstack-dns17:00
*** shakamunyi has quit IRC17:05
*** shakamunyi has joined #openstack-dns17:20
*** boris-42 has quit IRC17:28
openstackgerritAndrew Bogott proposed openstack/designate: Allow sink to create multiple entries per instance  https://review.openstack.org/17030217:29
*** jmcbride has quit IRC17:39
*** jmcbride has joined #openstack-dns17:39
*** ZZelle has quit IRC17:53
*** ZZelle has joined #openstack-dns17:53
*** ducttape_ has quit IRC17:57
*** ducttape_ has joined #openstack-dns18:11
*** f1ller is now known as filler18:12
*** jeh has quit IRC18:22
*** andrewbogott is now known as andrewbogott_afk18:23
*** jordanP has quit IRC18:34
*** ducttape_ has quit IRC18:47
*** openstackgerrit has quit IRC18:47
*** cliles has quit IRC18:48
*** ZZelle has quit IRC18:48
*** vipul has quit IRC18:48
*** vinod1 has quit IRC18:48
*** pglass has quit IRC18:48
*** raginbajin has quit IRC18:48
*** briancline has quit IRC18:48
*** ZZelle has joined #openstack-dns18:49
*** vinod1 has joined #openstack-dns18:49
*** pglass has joined #openstack-dns18:49
*** vipul has joined #openstack-dns18:49
*** raginbajin has joined #openstack-dns18:49
*** briancline has joined #openstack-dns18:49
*** ducttape_ has joined #openstack-dns18:49
*** openstackgerrit has joined #openstack-dns18:49
*** cliles has joined #openstack-dns18:49
*** sendak.freenode.net sets mode: +v openstackgerrit18:49
*** andrewbogott_afk is now known as andrewbogott19:02
*** pglass has quit IRC19:04
*** busterswt has quit IRC19:07
*** pglass has joined #openstack-dns19:08
*** ducttape_ has quit IRC19:11
*** boris-42 has joined #openstack-dns19:14
*** ZZelle has quit IRC19:18
*** vipul has quit IRC19:18
*** ZZelle has joined #openstack-dns19:19
*** vipul has joined #openstack-dns19:19
*** ducttape_ has joined #openstack-dns19:36
*** busterswt has joined #openstack-dns20:00
openstackgerritDoug Hellmann proposed openstack/designate: Drop use of 'oslo' namespace package  https://review.openstack.org/18073320:39
openstackgerritAndrew Bogott proposed openstack/designate: Allow sink to create multiple entries per instance  https://review.openstack.org/17030220:42
*** johnbelamaric has quit IRC21:53
*** jhazen has quit IRC21:58
*** jmcbride has quit IRC22:12
*** pglass has quit IRC22:23
*** busterswt has quit IRC22:25
openstackgerritBharath Venkatakrishnan proposed openstack/designate-specs: WIP: Blueprint for Granular access  https://review.openstack.org/17931522:38
KiallFirst pass a schedule up @ https://etherpad.openstack.org/p/designate-liberty-proposed-sessions22:40
openstackgerritBharath Venkatakrishnan proposed openstack/designate-specs: WIP: Blueprint for Transaction Support  https://review.openstack.org/18078422:45
*** EricGonczer_ has quit IRC23:01
*** ducttape_ has quit IRC23:07
*** andrewbogott is now known as andrewbogott_afk23:09
*** kei_yama has joined #openstack-dns23:26
*** vinod1 has quit IRC23:31
*** ducttape_ has joined #openstack-dns23:44
claytonKiall: will the official schedule be updated with that once it's finalized?23:45
*** ericpeterson has joined #openstack-dns23:45
Kiallclayton: yes, it will.. I've an email out to Nova/Neutron PTLs to try find a slot that works for us.. Once I hear back, I'll push it up to the official schedule site23:47
claytoncool, I'm definitely interested in listening to a few23:47
*** ducttape_ has quit IRC23:49
claytonthe nova/neutron integration one particularly sounds like it would make a lot of our users happy23:51
KiallYea, I'm hoping we can nail that between the teams this cycle!23:55
KiallAnyway, gotta run23:55

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!