| *** ccneill has quit IRC | 00:15 | |
| *** penick has quit IRC | 00:20 | |
| *** johnbelamaric has quit IRC | 00:26 | |
| *** jmcbride has joined #openstack-dns | 00:31 | |
| *** jbasalone has quit IRC | 00:47 | |
| *** jbasalone has joined #openstack-dns | 00:50 | |
| *** rudrajit has joined #openstack-dns | 00:55 | |
| *** banix has joined #openstack-dns | 01:06 | |
| *** jmcbride has quit IRC | 01:17 | |
| *** jmcbride has joined #openstack-dns | 01:21 | |
| *** rudrajit has quit IRC | 01:31 | |
| *** stanzgy has joined #openstack-dns | 01:34 | |
| *** stanzgy__ has joined #openstack-dns | 01:35 | |
| *** jbasalone has quit IRC | 01:36 | |
| *** jbasalone has joined #openstack-dns | 01:39 | |
| *** jmcbride has quit IRC | 01:40 | |
| *** jmcbride has joined #openstack-dns | 01:59 | |
| *** ducttape_ has joined #openstack-dns | 02:02 | |
| *** banix has quit IRC | 02:21 | |
| *** jasonsb has joined #openstack-dns | 02:43 | |
| *** jasonsb has quit IRC | 02:46 | |
| *** banix has joined #openstack-dns | 02:47 | |
| *** mlavalle has quit IRC | 03:02 | |
| *** ducttape_ has quit IRC | 03:13 | |
| *** ducttape_ has joined #openstack-dns | 03:16 | |
| *** ducttape_ has quit IRC | 03:22 | |
| *** timsim has quit IRC | 03:27 | |
| *** ryanpetrello has quit IRC | 03:28 | |
| *** jroll has quit IRC | 03:28 | |
| *** ryanpetrello has joined #openstack-dns | 03:30 | |
| *** rudrajit has joined #openstack-dns | 03:30 | |
| *** ducttape_ has joined #openstack-dns | 03:31 | |
| *** timsim has joined #openstack-dns | 03:31 | |
| *** jroll has joined #openstack-dns | 03:31 | |
| *** banix has quit IRC | 03:32 | |
| *** rudrajit has quit IRC | 03:33 | |
| *** rudrajit has joined #openstack-dns | 03:33 | |
| *** ducttape_ has quit IRC | 03:35 | |
| *** jroll has quit IRC | 03:41 | |
| *** timsim has quit IRC | 03:41 | |
| *** ryanpetrello has quit IRC | 03:41 | |
| *** d34dh0r53 has quit IRC | 03:42 | |
| *** d34dh0r53 has joined #openstack-dns | 04:04 | |
| *** ryanpetrello has joined #openstack-dns | 04:04 | |
| *** jroll has joined #openstack-dns | 04:04 | |
| *** timsim has joined #openstack-dns | 04:05 | |
| *** rudrajit has quit IRC | 04:28 | |
| *** richm has quit IRC | 05:37 | |
| *** jbasalone is now known as jbasalone-away | 05:56 | |
| *** mpbnka has joined #openstack-dns | 06:42 | |
| *** boris-42 has quit IRC | 07:10 | |
| *** jordanP has joined #openstack-dns | 07:38 | |
| *** jbasalone-away has quit IRC | 07:54 | |
| *** jbasalone has joined #openstack-dns | 07:55 | |
| *** mpbnka has quit IRC | 08:52 | |
| *** l6unchpad has joined #openstack-dns | 08:56 | |
| *** l6unchpad has quit IRC | 09:30 | |
| *** jbasalone is now known as jbasalone-away | 09:32 | |
| *** Billias has quit IRC | 09:33 | |
| *** l6unchpad has joined #openstack-dns | 09:35 | |
| *** bradjones|away has quit IRC | 09:47 | |
| *** bradjones has joined #openstack-dns | 09:49 | |
| *** bradjones has quit IRC | 09:49 | |
| *** bradjones has joined #openstack-dns | 09:49 | |
| *** Billias has joined #openstack-dns | 10:03 | |
| *** richm has joined #openstack-dns | 10:06 | |
| *** chlong has quit IRC | 10:09 | |
| *** chlong has joined #openstack-dns | 10:11 | |
| *** l6unchpad has quit IRC | 10:28 | |
| *** mwagner_lap has quit IRC | 10:29 | |
| *** l6unchpad has joined #openstack-dns | 10:29 | |
| *** stanzgy__ has quit IRC | 10:46 | |
| *** stanzgy has quit IRC | 10:46 | |
| *** jbasalone-away is now known as jbasalone | 11:00 | |
| *** jbasalone is now known as jbasalone-away | 11:01 | |
| openstackgerrit | sonu proposed openstack/designate: Replace request.request_mac with request.mac https://review.openstack.org/223524 | 11:07 |
|---|---|---|
| *** ducttape_ has joined #openstack-dns | 11:13 | |
| *** l6unchpad has quit IRC | 11:14 | |
| *** ducttape_ has quit IRC | 11:17 | |
| *** ducttape_ has joined #openstack-dns | 11:19 | |
| *** l6unchpad has joined #openstack-dns | 11:39 | |
| *** kei_yama has quit IRC | 11:40 | |
| openstackgerrit | Eric Peterson proposed openstack/designate-dashboard: Removed unnecessary header docs for pep8. https://review.openstack.org/222800 | 11:46 |
| *** ericpeterson has joined #openstack-dns | 11:52 | |
| *** ducttape_ has quit IRC | 11:55 | |
| *** ducttape_ has joined #openstack-dns | 11:55 | |
| *** ericpeterson has quit IRC | 11:57 | |
| *** ducttape_ has quit IRC | 12:00 | |
| *** mwagner_lap has joined #openstack-dns | 12:06 | |
| *** jmcbride has joined #openstack-dns | 12:19 | |
| *** km has quit IRC | 12:24 | |
| *** EricGonczer_ has joined #openstack-dns | 12:25 | |
| *** EricGonczer_ has quit IRC | 12:27 | |
| *** jmcbride has quit IRC | 12:34 | |
| *** richm has quit IRC | 12:43 | |
| *** banix has joined #openstack-dns | 12:45 | |
| *** l6unchpad has quit IRC | 12:49 | |
| *** richm has joined #openstack-dns | 12:56 | |
| *** andrewbogott has left #openstack-dns | 12:57 | |
| *** banix has quit IRC | 13:16 | |
| *** l6unchpad has joined #openstack-dns | 13:21 | |
| *** johnbelamaric has joined #openstack-dns | 13:25 | |
| *** l6unchpad has quit IRC | 13:32 | |
| *** jmcbride has joined #openstack-dns | 13:52 | |
| *** EricGonczer_ has joined #openstack-dns | 13:56 | |
| *** jbasalone-away has quit IRC | 13:57 | |
| *** jbasalone has joined #openstack-dns | 13:57 | |
| *** ducttape_ has joined #openstack-dns | 13:58 | |
| ducttape_ | bdx - I updated your commit message. Usually the bugs in launchpad will cross link when the commit message gets corrected, not sure what is going on with that thing | 14:01 |
| *** mlavalle has joined #openstack-dns | 14:04 | |
| mlavalle | Kiall: ping | 14:04 |
| mlavalle | Kiall: please don't forget to reach out to the infra team by email to have designate + neutron in the gate. Please include carl_baldwin in the message | 14:18 |
| mlavalle | mugsie, timsim: in API V2, how do you create PTR records? Or are they just created for you out of the A and AAA records? | 14:19 |
| timsim | mlavalle: You can do it manually like this: http://docs.openstack.org/developer/designate/howtos/manage-ptr-records.html or use the (apparently undocumented) /v2/reverse endpoint, which will get your floatingips from neutron. | 14:23 |
| *** banix has joined #openstack-dns | 14:28 | |
| *** jmcbride has quit IRC | 14:29 | |
| *** kbyrne has quit IRC | 14:31 | |
| *** kbyrne has joined #openstack-dns | 14:37 | |
| *** kbyrne has quit IRC | 14:38 | |
| *** kbyrne has joined #openstack-dns | 14:40 | |
| *** pglass has joined #openstack-dns | 14:45 | |
| *** pglass has quit IRC | 14:45 | |
| *** pglass has joined #openstack-dns | 14:46 | |
| mlavalle | timsim: thanks :-) | 14:57 |
| *** mlavalle has quit IRC | 14:57 | |
| *** jbasalone is now known as jbasalone-away | 15:04 | |
| *** jbasalone-away is now known as jbasalone | 15:06 | |
| *** jbasalone is now known as jbasalone-away | 15:07 | |
| *** csoukup has joined #openstack-dns | 15:07 | |
| elarson | hey all, when passing criterion to a central find_* method, how can I do an OR? | 15:15 |
| elarson | ie foo = bar or foo = baz | 15:15 |
| timsim | I think you can do 'foo': ['bar','baz'] | 15:17 |
| timsim | yeah, https://github.com/openstack/designate/blob/master/designate/sqlalchemy/base.py#L142-L143 | 15:19 |
| timsim | Doing a list should do a select * from x where foo in (bar,baz) | 15:20 |
| *** ccneill has joined #openstack-dns | 15:21 | |
| elarson | timsim: awesome. thanks! | 15:27 |
| *** en_austin has joined #openstack-dns | 15:27 | |
| en_austin | hi all! can anybody share a designate's config with multiple backend servers (or give an advice in modifying my own) - in my case, I want to build a separate API and two backends | 15:29 |
| timsim | en_austin: You want multiple DNS servers to be the same. aka Have Designate update multiple dns servers with the same info? | 15:30 |
| en_austin | yep, exactly | 15:30 |
| en_austin | like usual master/slave instances, but Designate-controlled | 15:31 |
| timsim | Sure, paste your config in and we can help. | 15:31 |
| *** jbasalone-away is now known as jbasalone | 15:32 | |
| *** jbasalone is now known as jbasalone-away | 15:32 | |
| en_austin | timsim: http://paste.openstack.org/show/463144/ | 15:32 |
| en_austin | it's not clear for me how to use multiple backends here - i should give IDs via comma in "nameservers" param? | 15:33 |
| timsim | What version of designate are you running en_austin? | 15:34 |
| en_austin | Kilo | 15:34 |
| timsim | k | 15:34 |
| timsim | Yeah. So...just a sec | 15:34 |
| *** boris-42 has joined #openstack-dns | 15:35 | |
| timsim | http://paste.openstack.org/show/463155/ Would do if you wanted to add another BIND server at 127.0.0.2 | 15:36 |
| timsim | s/Would/should ;) | 15:37 |
| en_austin | nice, thank you! but - can you explain a difference between "nameserver" and "target" from Designate's point of view? | 15:40 |
| timsim | Sure. | 15:40 |
| timsim | A target is the thing that Designate will write to, so in BIND, that will be the BIND server itself, the thing where `rndc addzone` gets called. | 15:40 |
| timsim | The nameserver is the thing that Designate will check to ensure that a change is live. So when you create a zone, Designate will send a DNS query to validate that it was indeed created, and live at the right serial number. | 15:41 |
| *** james_li has joined #openstack-dns | 15:41 | |
| timsim | For generic BIND9, those are the same thing. But for a lot of use cases, you might want to write to say, a database, and poll some other server. | 15:41 |
| en_austin | like PowerDNS, for example, right? | 15:41 |
| timsim | Does that make sense? | 15:41 |
| timsim | Yesp | 15:41 |
| timsim | Yes | 15:41 |
| timsim | There are certain BIND9 configurations where you'd want to do that as well. | 15:42 |
| timsim | If you're working with something like Akamai, Dyn, same thing. | 15:42 |
| en_austin | So. When API receive a "create record" request, it refers to "target" in pool and try to RNDC on each on them, and after - it refers to "nameservers" with AXFR for it. Right? | 15:43 |
| en_austin | (I'm talking about bind9 backend - so that's why rndc) | 15:43 |
| en_austin | and, what will happen if one of backends will be offline for some reasons (for example, hw node failure) - will Designate sync all changes correctly? | 15:45 |
| timsim | So on a create record, it will actually just send a NOTIFY to BIND9, which should do the AXFR for itself, and update it's representation of the zone, and Designate will poll the 'nameserver' ip/port to make sure that the change went live. | 15:46 |
| timsim | It'll NOTIFY the target. | 15:46 |
| timsim | If for some reason one of the backend servers is down, the change will not go to an ACTIVE state, and the Pool Manager's periodic recover/sync jobs should catch it up when it comes back online. | 15:46 |
| en_austin | it's more clear now, thanks! | 15:46 |
| timsim | :) | 15:46 |
| en_austin | but, if change will not go to ACTIVE state - will it be live on remaining backend? | 15:47 |
| en_austin | what does "state" means? just only Designate's internal state or smth else? | 15:48 |
| timsim | It will, Designate will consider changing it to ACTIVE based on the threshold config value inthe Pool Manager's config. | 15:48 |
| timsim | The state is supposed to reflect the actual state of resolution on the backend servers that Designate manages. If a change is PENDING, we can't be fully confident that it is live. But if it is ACTIVE, we know that it resolves (or at least did at last check). If something is in ERROR, Designate encountered a problem trying to roll the change out, and it will retry at an interval to true it up. | 15:50 |
| en_austin | Great! | 15:52 |
| *** rudrajit has joined #openstack-dns | 15:52 | |
| en_austin | Another one question about states - are there any way to know a state (active/pending/etc) via API? | 15:52 |
| en_austin | for example, I'm deploying a stack and i want to be sure, that record is already resolving (e.g created on BIND's == in ACTIVE state in Designate) | 15:53 |
| *** rudrajit has quit IRC | 15:54 | |
| *** rudrajit has joined #openstack-dns | 15:54 | |
| *** rudrajit has quit IRC | 15:56 | |
| *** rudrajit has joined #openstack-dns | 15:57 | |
| *** fawadkhaliq has joined #openstack-dns | 15:58 | |
| *** richm has quit IRC | 15:59 | |
| *** rudrajit has quit IRC | 16:00 | |
| timsim | Sure. The recordsets, and zones expose state when you get /v2/zones/id /v2/zones/id/recordsets/id | 16:00 |
| *** jmcbride has joined #openstack-dns | 16:00 | |
| *** rudrajit has joined #openstack-dns | 16:00 | |
| en_austin | well, that's all for now - thanks for your support! | 16:06 |
| *** jmcbride has quit IRC | 16:08 | |
| *** rudrajit has quit IRC | 16:08 | |
| *** jmcbride has joined #openstack-dns | 16:08 | |
| *** richm has joined #openstack-dns | 16:13 | |
| *** richm has quit IRC | 16:18 | |
| *** richm has joined #openstack-dns | 16:20 | |
| *** jordanP has quit IRC | 16:31 | |
| *** johnbelamaric1 has joined #openstack-dns | 16:46 | |
| *** johnbelamaric has quit IRC | 16:46 | |
| *** rudrajit has joined #openstack-dns | 16:47 | |
| *** ericpeterson has joined #openstack-dns | 16:53 | |
| *** ducttape_ has quit IRC | 16:56 | |
| *** johnbelamaric has joined #openstack-dns | 17:01 | |
| *** johnbelamaric1 has quit IRC | 17:02 | |
| *** james_li has quit IRC | 17:04 | |
| *** james_li has joined #openstack-dns | 17:05 | |
| *** l6unchpad has joined #openstack-dns | 17:07 | |
| *** en_austin has quit IRC | 17:24 | |
| *** james_li_ has joined #openstack-dns | 17:25 | |
| *** penick has joined #openstack-dns | 17:26 | |
| *** ericpeterson has quit IRC | 17:27 | |
| *** ducttape_ has joined #openstack-dns | 17:28 | |
| *** james_li has quit IRC | 17:28 | |
| *** kbyrne has quit IRC | 17:49 | |
| *** johnbelamaric1 has joined #openstack-dns | 17:57 | |
| *** jbasalone has joined #openstack-dns | 17:58 | |
| *** james_li_ has quit IRC | 17:58 | |
| *** johnbelamaric has quit IRC | 17:58 | |
| *** jbasalone-away has quit IRC | 18:01 | |
| *** l6unchpad has quit IRC | 18:06 | |
| *** james_li has joined #openstack-dns | 18:19 | |
| *** l6unchpad has joined #openstack-dns | 18:22 | |
| *** fawadkhaliq has quit IRC | 18:25 | |
| *** jmcbride has quit IRC | 18:27 | |
| *** jmcbride has joined #openstack-dns | 18:29 | |
| *** ccneill has quit IRC | 18:32 | |
| *** ccneill has joined #openstack-dns | 18:37 | |
| *** jbasalone has quit IRC | 18:38 | |
| openstackgerrit | Charles Neill proposed openstack/designate: Unauthed tests for RecordSets (Security) https://review.openstack.org/223745 | 18:42 |
| *** l6unchpad has quit IRC | 18:43 | |
| *** pglass has quit IRC | 18:56 | |
| *** pglass has joined #openstack-dns | 18:59 | |
| *** jbasalone has joined #openstack-dns | 19:02 | |
| *** james_li has quit IRC | 19:31 | |
| *** james_li has joined #openstack-dns | 19:32 | |
| *** jbasalone has quit IRC | 19:34 | |
| *** jbasalone has joined #openstack-dns | 19:36 | |
| *** johnbelamaric has joined #openstack-dns | 19:46 | |
| *** johnbelamaric1 has quit IRC | 19:48 | |
| *** jbasalone has quit IRC | 20:19 | |
| *** jbasalone has joined #openstack-dns | 20:20 | |
| *** mwagner_lap has quit IRC | 20:37 | |
| *** jbasalone has quit IRC | 20:56 | |
| *** jbasalone has joined #openstack-dns | 20:59 | |
| pglass | hey ccneill | 21:01 |
| ccneill | yo | 21:01 |
| pglass | regarding this: https://review.openstack.org/#/c/223745/ | 21:02 |
| ccneill | I saw the gate jobs failed on my CR :\ | 21:02 |
| pglass | yeah | 21:02 |
| ccneill | not sure why | 21:02 |
| pglass | so there's no noauth section in the tempest config in the gate | 21:02 |
| ccneill | ahhh | 21:02 |
| *** jmcbride has quit IRC | 21:02 | |
| ccneill | yeah, I was curious how that was going to work in the gate | 21:02 |
| ccneill | is there a way that would make more sense? | 21:02 |
| ccneill | I wanted to avoid writing my own auth provider, but maybe I need to do that? | 21:03 |
| pglass | do you just want to skip passing in the X-Auth-Token header for those tests? | 21:04 |
| ccneill | yep | 21:04 |
| ccneill | and I don't need to send x-auth-tenant-id really | 21:04 |
| ccneill | but that was the only way I could get the KeystoneV2Credentials call to work | 21:04 |
| pglass | so that NoAuthAuthProvider was a bit of a hack | 21:06 |
| pglass | I copy pasted it from tempest-lib and then edited to skip passing in the auth token header... | 21:06 |
| *** jmcbride has joined #openstack-dns | 21:07 | |
| pglass | It should work a lot better if the _decorate_request method here: https://review.openstack.org/#/c/223745/ calls super._decorate_request and then modifies the headers it gets back | 21:07 |
| ccneill | yeah, well I just kind of hacked on top of it haha | 21:07 |
| *** csoukup has quit IRC | 21:07 | |
| pglass | that should let us select what headers we want to (dis)allow more easily | 21:08 |
| pglass | although why didn't I do that initially...? | 21:08 |
| pglass | because AuthProvider._decorate_request is abstract... | 21:09 |
| pglass | hmm | 21:11 |
| ccneill | yeah I didn't dig too deep into the tempest_lib part of things, but it didn't seem like there was an easy way to avoid using keystone creds... the best I could do was just a tenant ID | 21:12 |
| pglass | yeah this is kind of awkward | 21:15 |
| ccneill | hmm, so it looks like just passing in None as creds might actually work.. since check_credentials just returns True anyway | 21:17 |
| ccneill | I swear I tried that before though... | 21:17 |
| pglass | well, but the client still needs to get the url from the service catalog for the gate | 21:18 |
| ccneill | ahh | 21:19 |
| pglass | so we'll have to use/subclass KeystoneV2AuthProvider to get the right url: https://github.com/openstack/tempest-lib/blob/master/tempest_lib/auth.py#L274 | 21:23 |
| ccneill | yeah it looks like my tests don't run right when passing None as creds :\ | 21:23 |
| pglass | okay | 21:25 |
| pglass | yeah | 21:25 |
| pglass | you can subclass KeystoneV2AuthProvider | 21:25 |
| pglass | the override its _decorate_request method to call super._decorate_request, which will return the headers that you can modify | 21:26 |
| pglass | then when we're actually writing the tests we'll use ZoneClient.as_user('default').get_zone() | 21:27 |
| pglass | ^ when we want a token | 21:27 |
| pglass | and then ZoneClient.as_user('default-no-auth').get_zone() when we don't want a token? | 21:27 |
| pglass | that's not the greatest thing I guess | 21:27 |
| ccneill | yeah well, since these tests are all unauthed tests, I just define self.client as the no_auth client, so that would work for me | 21:28 |
| ccneill | but I'm not sure if it's the best thing for other use cases | 21:28 |
| pglass | it would probably be clearer if it was ZoneClient.as_user('default', no_token=True).get_zone() | 21:29 |
| pglass | or something like that | 21:29 |
| pglass | but then we have to forward a bunch of flags | 21:29 |
| pglass | maybe | 21:29 |
| ccneill | well at least we get rid of the "noauth" section in the tempest config | 21:30 |
| ccneill | hmm | 21:30 |
| pglass | well | 21:30 |
| pglass | so the noauth section is for running the tests against Designate without keystone | 21:30 |
| pglass | which we frequently want to do for development because setting up keystone/devstack is a pain | 21:31 |
| ccneill | ok so we leave that, but want to use something different for the case where we have keystone but we don't want to use it | 21:31 |
| ccneill | (and yeah, agreed about getting keystone set up) | 21:31 |
| pglass | the idea with this mangled AuthProvider thing I came up with is that we can run against keystone without any config changes, and selectively test for unauthenticated requests when we want to | 21:33 |
| ccneill | alright, I'll see if I can hack something together | 21:38 |
| *** richm has quit IRC | 21:38 | |
| ccneill | brb | 21:38 |
| *** EricGonczer_ has quit IRC | 21:39 | |
| *** johnbelamaric has quit IRC | 21:41 | |
| *** jbasalone has quit IRC | 21:45 | |
| *** jbasalone has joined #openstack-dns | 21:46 | |
| *** jbasalone has quit IRC | 21:52 | |
| *** richm has joined #openstack-dns | 21:55 | |
| *** csoukup has joined #openstack-dns | 21:56 | |
| *** csoukup has quit IRC | 21:57 | |
| *** jbasalone has joined #openstack-dns | 22:01 | |
| *** jbasalone has quit IRC | 22:03 | |
| *** penick has quit IRC | 22:08 | |
| *** jmcbride has quit IRC | 22:11 | |
| *** jbasalone has joined #openstack-dns | 22:20 | |
| *** pglass has quit IRC | 22:30 | |
| *** ducttape_ has quit IRC | 22:32 | |
| *** jbasalone has quit IRC | 22:48 | |
| *** banix has quit IRC | 22:48 | |
| *** jbasalone has joined #openstack-dns | 22:50 | |
| *** jbasalone has quit IRC | 22:57 | |
| *** km has joined #openstack-dns | 23:04 | |
| *** jbasalone has joined #openstack-dns | 23:04 | |
| *** jennyb has joined #openstack-dns | 23:11 | |
| *** jbasalone has quit IRC | 23:15 | |
| *** openstackgerrit has quit IRC | 23:16 | |
| *** jennyb has quit IRC | 23:16 | |
| *** openstackgerrit has joined #openstack-dns | 23:16 | |
| *** ChanServ sets mode: +v openstackgerrit | 23:16 | |
| *** jbasalone has joined #openstack-dns | 23:17 | |
| openstackgerrit | Charles Neill proposed openstack/designate: Unauthed tests for RecordSets (Security) https://review.openstack.org/223745 | 23:18 |
| *** banix has joined #openstack-dns | 23:21 | |
| *** kei_yama has joined #openstack-dns | 23:27 | |
| *** jbasalone has quit IRC | 23:33 | |
| *** jbasalone has joined #openstack-dns | 23:36 | |
| *** james_li has quit IRC | 23:40 | |
| *** dtx00ff has joined #openstack-dns | 23:41 | |
| *** EricGonczer_ has joined #openstack-dns | 23:43 | |
| *** rudrajit has quit IRC | 23:46 | |
| *** banix has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!