Wednesday, 2016-07-06

*** ducttape_ has quit IRC00:00
*** EricGonczer_ has quit IRC00:17
*** ducttape_ has joined #openstack-dns00:42
*** rudrajit has joined #openstack-dns00:55
*** EricGonczer_ has joined #openstack-dns01:10
*** ducttape_ has quit IRC01:16
*** EricGonc_ has joined #openstack-dns01:17
*** EricGonczer_ has quit IRC01:20
*** stanzgy has joined #openstack-dns01:23
*** stanzgy_ has joined #openstack-dns01:23
*** EricGonc_ has quit IRC01:25
*** ducttape_ has joined #openstack-dns01:26
*** EricGonczer_ has joined #openstack-dns01:27
*** ducttape_ has quit IRC01:37
*** chlong has quit IRC01:40
*** ducttape_ has joined #openstack-dns01:50
*** ducttape_ has quit IRC01:51
*** chlong has joined #openstack-dns01:53
*** ducttape_ has joined #openstack-dns01:53
*** ducttape_ has quit IRC01:55
*** 17WAAXO8P has joined #openstack-dns02:19
*** EricGonczer_ has quit IRC02:26
*** maestropandy has joined #openstack-dns03:03
*** ducttape_ has joined #openstack-dns03:09
*** 17WAAXO8P has quit IRC03:10
*** richm has quit IRC03:12
*** maestropandy has quit IRC03:23
*** puck has quit IRC03:23
openstackgerritMerged openstack/python-designateclient: Use osc_lib instead of cliff  https://review.openstack.org/33591203:25
*** puck has joined #openstack-dns03:26
*** ducttape_ has quit IRC03:52
*** ducttape_ has joined #openstack-dns05:22
*** ducttape_ has quit IRC05:27
*** rudrajit has quit IRC05:47
*** rudrajit has joined #openstack-dns05:48
*** rudrajit has quit IRC05:53
*** rudrajit has joined #openstack-dns05:56
*** pcaruana has joined #openstack-dns06:05
*** ducttape_ has joined #openstack-dns06:24
-openstackstatus- NOTICE: All python 3.5 jobs are failing today, we need to build new xenial images first.06:27
*** ducttape_ has quit IRC06:30
*** rudrajit has quit IRC06:44
*** rudrajit has joined #openstack-dns06:45
*** rudrajit has quit IRC06:49
*** abalutoiu has joined #openstack-dns07:17
*** ReSam has joined #openstack-dns07:58
ReSamgood morning!07:59
ReSamI'm trying to setup designate with neutron, to register a new dns name when creating a new instance through the dashboard. so far designate works (tested with CLI). But neutron keeps telling me: "DNSDomainNotFound: Domain foobar.example.com. not found in external DNS service".08:05
ReSamBut running "designate domain-list" shows it.08:05
openstackgerritDavanum Srinivas (dims) proposed openstack/designate: [WIP] Testing latest u-c  https://review.openstack.org/31802008:10
*** en_austin has joined #openstack-dns08:15
*** ducttape_ has joined #openstack-dns08:27
*** nyechiel has joined #openstack-dns08:28
*** ducttape_ has quit IRC08:31
*** rudrajit has joined #openstack-dns09:24
*** rudrajit has quit IRC09:28
*** en_austin has quit IRC09:52
*** ducttape_ has joined #openstack-dns11:29
*** ducttape_ has quit IRC11:33
*** ducttape_ has joined #openstack-dns11:56
*** EricGonczer_ has joined #openstack-dns12:01
*** EricGonc_ has joined #openstack-dns12:03
*** EricGonczer_ has quit IRC12:07
*** gord0 has left #openstack-dns12:19
*** stanzgy_ has quit IRC12:21
*** stanzgy has quit IRC12:21
*** ducttape_ has quit IRC12:23
*** ducttape_ has joined #openstack-dns12:52
*** maestropandy has joined #openstack-dns13:10
*** ducttape_ has quit IRC13:11
mugsieReSam: and it is the same project for both the network and the dns zone?13:12
openstackgerritMerged openstack/designate: Updated from global requirements  https://review.openstack.org/33617113:23
*** M00nr41n has quit IRC13:29
*** EricGonc_ has quit IRC13:42
*** richm has joined #openstack-dns13:43
openstackgerritMerged openstack/designate: Move APIv2 Docs to api-ref site  https://review.openstack.org/32945913:46
*** eandersson_ has joined #openstack-dns14:27
eandersson_A silly question, but does each worker have a 1k greenlet thread pool, or do all workers share the 1k thread pool?14:27
eandersson_*share14:27
mugsieeach worker has their own pool eandersson_14:34
eandersson_So having 64 workers could potentially spawn 64k threads then? :D14:36
*** mlavalle has joined #openstack-dns14:36
mugsiewell, they are greenlets14:37
mugsieoh14:38
mugsiewait14:38
mugsiethe htreadpool is real14:38
mugsieso, yeah - it could14:38
mugsieeandersson_: why the need for 64 workers?14:38
eandersson_You wouldn't :p14:39
*** EricGonczer_ has joined #openstack-dns14:50
*** pglass has joined #openstack-dns15:01
*** abalutoiu has quit IRC15:03
*** pcaruana has quit IRC15:06
*** maestropandy has quit IRC15:12
*** maestropandy has joined #openstack-dns15:18
*** Kiall has quit IRC15:25
*** Kiall has joined #openstack-dns15:28
dmsimardo/ have a question regarding the bind backend15:36
dmsimardpuppet-designate drops a line in bind config to include /var/lib/designate/bind9/zones.config (and it creates that file but leaves it empty)15:37
*** eandersson_ has quit IRC15:37
dmsimardI don't have a lot of knowledge around designate but I don't see mentions of that in http://docs.openstack.org/developer/designate/getting-started.html15:37
dmsimardSo should puppet-designate stop doing that or something ?15:38
dmsimardIt otherwise involves getting bind to be able to read that configuration file (named-checkconf and afterwards include it) so that includes permissions (and on CentOS, selinux) considerations15:39
elarsondmsimard: I think puppet-designate doesn't need to do that15:40
elarsonespecially if it leaves it empty15:41
dmsimardI don't know what's the intended purpose of that file :(15:41
elarsonme neither15:41
dmsimardIt was added back in 2013! https://github.com/openstack/puppet-designate/commit/23f5954f97b3b5822f9b4131caf8e1cd3b5c7e4915:42
mugsiedmsimard: there is not a lot of overlap between the designate devs and the puppet-designate dev unfoirtunatly15:43
dmsimardmugsie: a lot ? or not a lot ?15:44
mugsienot a lot15:44
dmsimardoh, yeah, I read that wrong15:44
dmsimardIt's okay, I'm trying to bring it up to par :p15:44
mugsieI saw the email to the list :)15:44
mugsiethanks! it would be great to have it actually CI'd15:45
dmsimardso you might see me asking some questions here to try and bring it in line with upstream recommendations15:45
dmsimardso I'll get rid of that file then, if someone complains, he'll need a good reason :)15:45
*** maestropandy has quit IRC15:46
mugsiedmsimard: cool - ask away when ever15:46
dmsimardappreciate it, thanks :)15:47
timsimhey mugsie how do I even grenade15:49
mugsieheh15:49
timsimLike, get a devstack vm up15:49
timsimset some nebulous env vars somewhere15:49
timsimrun ./grenade.sh ?15:50
mugsieyeah15:50
mugsieif you run the vagrant/contrib vms the files are all mounted in the right place15:50
mugsietimsim: #openstack-qa is a good place as well15:51
mugsieif they actually respond15:51
timsimWhy can't there just be a goddam Makefile15:51
*** abalutoiu has joined #openstack-dns15:51
mugsiethere is15:51
mugsietox.ini15:51
timsimNo15:51
mugsiejust grenade doesnt use it15:52
mugsie:P15:52
timsimweeeeeeeee15:52
*** penick has joined #openstack-dns15:57
*** dxu has joined #openstack-dns16:06
dxuIs there any way to change the name of a recordset after it's been created?16:22
dxuI dug through the source a little and it looks like it's set as immutable16:23
mugsieit is16:27
mugsiewe don't currently support rename16:27
dxu:( alright. Thanks16:29
*** penick has quit IRC16:51
*** nyechiel has quit IRC17:07
*** gnuoy is now known as jamespage_shadow17:17
*** jamespage_shadow is now known as gnuoy17:18
*** gnuoy is now known as jamespage_shadow17:23
*** jamespage_shadow is now known as gnuoy17:25
*** gnuoy is now known as jamespage_shadow17:29
*** jamespage_shadow is now known as gnuoy17:30
*** gnuoy is now known as jamespage_shadow17:35
*** jamespage_shadow is now known as gnuoy17:36
*** gnuoy is now known as jamespage_shadow17:45
*** jamespage_shadow is now known as gnuoy17:48
*** rudrajit has joined #openstack-dns17:50
*** rudrajit has quit IRC17:55
*** ducttape_ has joined #openstack-dns18:15
dmsimardI'm trying to test designate with tempest, typically we run smoke but I see that no designate tests are tagged as such.18:28
dmsimardWhat would be a fitting regex to run a viable amount of tests for designate ?18:28
timsimI believe there are tests marked as smoke in designate-tempest-plugin18:29
*** ducttape_ has quit IRC18:29
dmsimardoh, I might be looking at the wrong place18:30
*** ducttape_ has joined #openstack-dns18:30
dmsimardah, there's https://github.com/openstack/designate-tempest-plugin .. I was looking in in-tree functional tests18:30
*** penick has joined #openstack-dns18:31
mugsiedmsimard: yeah - we moved to an out of tree plugin18:52
mugsiejust pip install it, then running `tox -e all-plugin -- designate` gets our tests18:53
dmsimardmugsie: testing it with RDO packaging and with designate installed with puppet-designate right now ;)18:54
mugsiesweet :)18:55
*** penick has quit IRC18:56
*** penick has joined #openstack-dns18:59
dxuI was reading the documentation, and if I'm reading it right, it says there's currently no way to implement access controls. Is that right?19:02
dxuBy access control I mean something like19:02
dxuOnly the people in a certain project X can delete records created by people in project X19:02
timsimdxu: There is. If you're using keystone, and the designate keystone middleware you have to authenticate with a tenant/project before you do anything and that will separate things by tenant19:03
timsimYou can do it without keystone too by passing certain headers19:04
timsimBut it's generally assumed that you're using keystone19:04
dxutimsim: Cool! Is there documentation I can take a look at?19:05
openstackgerritGraham Hayes proposed openstack/designate-tempest-plugin: Add functional testing for the v2 API quotas endpoint  https://review.openstack.org/33732119:06
openstackgerritGraham Hayes proposed openstack/designate: Add v2/quotas  https://review.openstack.org/33510019:06
timsimdxu: I think you just need to configure the keystone_authtoken section of the config to make it work with your existing keystone19:07
timsimThat's in step 6 of "configure designate" here http://docs.openstack.org/developer/designate/install/ubuntu-liberty.html19:07
mugsiedxu: we scope zones to projects - so only people in project x can even see the records exist19:08
mugsiewe do not allow zones to be shared across projects yet19:08
mugsie(it is on the list, but not a priority yet - it is also difficult to do well, and with decent performance)19:09
dxuOk, thanks. I'll take a look19:10
ducttape_mugsie: question on that ux review.   is everything going zones?   I don't see the term domains anywhere etc19:13
ducttape_apologies if that is an extra derpy question19:14
timsimducttape_: Yeah in the designate v2 api, domains -> zones19:19
timsimSimilarly, records -> recordsets, where recordsets are actually sets of "records"19:20
mugsieducttape_:yeah keystone won that battle19:22
ducttape_if keystone domains (v3) was the winner - not sure what the loser looks like   ;)19:23
mugsiehaah19:25
mugsieyeah19:25
*** penick has quit IRC19:27
*** penick has joined #openstack-dns19:36
*** rudrajit has joined #openstack-dns19:57
timsimIs that really why we did that?19:57
*** rudrajit has quit IRC20:02
*** rudrajit has joined #openstack-dns20:02
mugsietimsim: yes20:23
mugsieand it is technically more correct20:23
timsimYeah like how recordsets are more correct.20:30
* timsim can't count the number of times he's had to explain zones/recordsets to people :(20:31
openstackgerritEmilien Macchi proposed openstack/designate-tempest-plugin: Remove 'smoke' decorator usage  https://review.openstack.org/33854920:43
openstackgerritEmilien Macchi proposed openstack/designate-tempest-plugin: Remove 'smoke' decorator usage  https://review.openstack.org/33854920:45
mugsietimsim: well it is more correct20:56
mugsie:P20:56
mugsieRAX were the ones who wanted v2/zones/id/recordsets/id/records dropped ;)20:56
timsimTurns out no one cares what's correct20:57
timsimMuch to my chagrin20:57
timsimRAX != me in that scenario20:57
* mugsie mumbles something about golang20:57
* timsim mumbles something about api v320:57
* timsim in golang20:57
mugsiewell, you worked there at the time - good enough for me :)20:57
mugsiebut, yea - it is a bit complicated20:57
mugsieand having domain / records as well as zone / recordsets makes it all much harder20:58
*** EmilienM has joined #openstack-dns20:59
EmilienMhello!20:59
EmilienMI'm working with dmsimard on testing Designate in upstream Puppet CI and we would need this patch to be reviewed: https://review.openstack.org/#/c/338549/ - thanks!20:59
mugsieEmilienM: I am looking at that now20:59
EmilienMw00t awesome21:00
mugsienot going to lie, it looks like a -1 at this point. We cannot remove it entirely, as people may be using it already21:01
dmsimardmugsie: so could we settle for something that is more smoke-ish than "let's run most of the tests" ?21:02
dmsimardsmoke is meant to try and make sure the service is not horribly broken21:02
mugsiecutting it back could be considered,  but I would like to get pglass and Kiall to feed in on it, as they have done a lot of the inital work21:02
dmsimarddesignate has more smoke tests than, like, nova and neutron combined :p21:04
pglassyeah. i would prefer a smaller set of smoke tests, rather than lots of cheap tests. we should also have a few of the smoke tests actually query the nameservers.21:04
pglassso then the smoke tests by themselves are a reliable indicator that your designate is good to go, without taking a long time to run.21:05
EmilienMwhatever you decide please go over 5 tests, that's already too much21:06
mugsieOK, look through what nova / neutron etc do, we can (and should cut back)21:06
EmilienMour puppet CI aims to validate designate is well configured and is actually working (API, etc)21:06
mugsieso, senario tests then?21:06
pglass5 tests is too few21:06
mugsiethat will include tests that query the nameservers21:06
pglassimo. but I'll follow nova's lead.21:06
EmilienMpglass: our CI runs more than designate21:06
EmilienMpglass: see https://github.com/openstack/puppet-openstack-integration#description for coverage21:07
pglasswell, you should filter out more tests then if you don't want to run all of them.21:07
mugsiethe smoke tests that seem to get run by others are for checking the API root, and "discovery" (which is static content)21:07
EmilienMthe more you add in smoke, more time our CI will take and maybe timeout21:07
mugsieso, neutron has 15 - 20 smoke tests in the api folder alone21:09
EmilienMfwiw, other projects don't use the tag for lot of tests (ceilometer, gnocchi, aodh, etc)21:11
pglassEmilienM: do you know roughly how long an individual test for nova or neutron takes? e.g. are they spinning up servers in those tests?21:11
EmilienMreally, please don't use it for too may tests21:11
EmilienMyes21:11
EmilienMa sec21:11
EmilienMhttp://logs.openstack.org/98/337898/4/check/gate-puppet-openstack-integration-3-scenario003-tempest-centos-7/1f6904a/logs/stackviz/#/testrepository.subunit/timeline21:12
EmilienMsee the graph21:12
EmilienMpglass: scenarios take 8 min each21:13
EmilienMthey spin up VM, create volumes, etc21:13
mugsieso you run senarios as well as smoke?21:14
mugsiehave you looked at increasing your worker count?21:14
*** mtreinish has joined #openstack-dns21:14
pglasseven with testing propagation to nameservers, none of our scenario tests takes longer than two minutes.21:14
mugsieyeah21:14
dmsimardmugsie: we're ram constrained, there's a lot of stuff going on on these VMs21:15
dmsimardupping the workers would mean having to split into a fourth scenario21:15
dmsimardwhich, while nice, is a heavier burden on -infra21:15
mugsieso, dropping the number of smoke API tests, and running a few of our senarios might be a good split21:15
dmsimardI have to brb21:16
*** dmsimard is now known as dmsimard|afk21:16
EmilienMmtreinish: we're discussing about the number of smoke tests to set21:16
EmilienMI would argue for the minimum21:16
mugsiewhat is the current thought on "minimum" ?21:17
mugsiewe should test both API versions21:17
mtreinishwell our guidline in tempest for smoke is that a full smoke run should not exceed 10min21:17
EmilienMI would ask for > 5 and < 1021:17
mtreinishwhich the selection on tempest is pretty close to21:17
mugsiereally? even with all the neutron ones?21:18
mtreinishfor plugins I don't have a rule of thumb but I'd almost argue that they shouldn't overload that tag21:18
EmilienMright but some CIs (like Puppet) run more than Designate service, we have timeout constraint21:18
EmilienMmtreinish: just designate, max 1021:18
mugsieand that is fine, but if we are getting commits to remove smoke entirely - I would expect the same to be happening to LBaaS / VPN etc21:19
EmilienMI have to brb too, I'll catch up on Gerrit and here. Thanks guys - please feel free to take over my patch to select what you want to keep21:19
pglassokay, so what I would do is 8 tests - c/u/d zones, c/u/d recordsets, and then a zone import and a zone export.21:20
EmilienMsounds cool21:20
pglasswith one or two of those being a scenario that tests propagation out to the nameserver.21:20
mugsiepglass: we need to cover v1 as well21:20
EmilienMpglass: you can push over my patch, I really don't mind21:20
mugsieI know it is going away, but until i fully rm -rf /v1/ we need to test it, as horizon + cli still use it21:21
pglassmugsie: okay. so we can exchange the recordset tests for c/u/d v1 domains21:21
pglassand maybe instead of a zone or domain update we do a recordset or record create.21:22
mugsieyeah, that could work21:23
mugsiemtreinish: when you say "shouldnt overload that tag" do you mean use it?21:23
*** _ducttape_ has joined #openstack-dns21:24
mtreinishmugsie: right, have an equiv definition of what smoke is for the designate plugin, but don't use the tag 'smoke'21:24
mtreinishpeople tagging everything smoke in plugins has come up before and causes issues for people. Especially since everyone seems to have a different definition for it21:25
mugsieOK, I have bigger problems with that statement, but that is a discussion for another day.21:25
mugsieso, tempest team documenting a definition might be a step forward21:25
mugsieinstead of "to do a quick test to check you clkoud do smoke test, unless you use projects who are not in the special club, then run $other thing as well"21:26
*** ducttape_ has quit IRC21:28
mtreinishit doesn't apply to plugins, it can't. It's a selection of things in the projects tempest supports in tree. We have our own guidelines for that selection. But, because there is a temporal component in that guideline as you add more plugins you can't enforce that21:28
mtreinishoverloading the tag in plugins just breaks users expectations, especially when they accidently install plugins (which happens more often then you'd think)21:28
mugsiei would argue *not* using it breaks users expectations21:29
mugsie"I installed the designate tempest tests, the smoke says everythig was OK, but I can't create a zone. Are your tests broken?"21:30
mugsieif your guideline can't match the technical design tempest went for, the guideline should change21:30
mugsieor change the design, but something needs to change.21:32
mtreinishthat's assuming the tag is something we support externally, which I'm saying it isn't. The tag only applies to what's in tree, which is why plugins overloading it causes issues.21:32
mtreinishbut plugins can do whatever they want, that's kinda the point21:32
mtreinishand if you want to tag things as smoke go ahead21:32
mtreinishI'm just saying what the definition of the tag in tempest means, and plugins adding on to that will break that definition21:33
mugsiecan I suggest that this gets documented somewhere21:33
mtreinishchoosing to extend it like you did here will go against what people are expecting, which is why you have patches like EmilienM's because it ran too long and consumed too many resources21:34
pglasswe didn't make that decision deliberately.21:34
mugsieand we followed what most other plugins had done21:34
mtreinishsure, I wasn't saying it was intentional21:34
mtreinishit just gets cargo culted21:34
mtreinisha couple of the neutron plugins did the same thing21:34
mugsiewhich circles back to the documentation of it21:34
pglassyeah. i'm fine following a rule.21:35
mugsiebecause asking questions in #openstack-qa is like shouting into the wind21:35
pglassbut like how we had to discover which tempest modules are stable, we have to discover this as well via trial and error.21:35
mugsieI just want clarity, and a way for us to avoid hoops, and other issues.21:36
mtreinishI thought we had a doc for smoke somewhere, but I can't find it21:36
mtreinishmugsie: fwiw, the stable interfaces thing was documented. It just wasn't clearly worded. (it was in the middle of a paragraph) Kiall pushed a patch to clean that up, which makes it obvious now: http://docs.openstack.org/developer/tempest/plugin.html#stable-tempest-apis-plugins-may-use21:37
pglassalso, fwiw even with all of those tests tagged as smoke tests, they still run under 10 minutes.21:39
mugsiemtreinish: yeah, thats fine (now) but finding out how these things are supposed to work can be very time cosuming, and involve a ton of trial and error21:39
mtreinishpglass: by themselves right? what happens if you add 4 or 5 other plugins into the mix?21:40
pglassi mean: `Ran: 115 tests in 104.0000 sec.`21:40
mtreinishpglass: or include tests in tempest itself?21:40
mugsiemtreinish: the problem is, this is creating 2 tiers of projects again. if plugins cannot get in to the smoke tests, they will not be tested in real world envs.21:42
pglassmtreinish: again, if "smoke" means that all tests that ever might be run by tempest including with all plugins enabled needs to run in less than X minutes - that needs to be documented.21:42
pglassthat is a really strict requirement.21:42
mugsieunless there is a clear "this is how plugins add smoke like tests, and this is how operators can run them in a single command"21:42
mtreinishthat's what I'm trying to say, it's not a strict requirment (it's only enforcable that way in tempest)21:42
mtreinishbut because it's taht way in tempest that's the expecation from users21:43
mtreinishlike I said as a plugin you're able to do what you want21:43
pglassmtreinish: right, but there are real restrictions like job timeouts21:43
mugsiebut do they not have the expectation of testing all the services in the cloud?21:43
*** EricGonczer_ has quit IRC21:44
mtreinishpglass: right, but that's normally not an issue (well except for puppet jobs) because no one besides puppet runs >1 plugin in a ci job. Normally the selection regex is $service_name21:44
mtreinishmugsie: running with smoke as your selection regex isn't how I expect most people to run tempest, and I normally don't recommend it except for a quick sanity check after making a change. I think you're overvaluing it's importance21:46
mtreinishfor example in the gate, except for puppet we only use it on grenade21:46
mugsieso, important for us then, as we are writing our grenade test - and we want to make sure that say a keystone update doesn't break our API, or the neutron interface for floating IP lists are still working21:48
mtreinishwe've discussed adding an option in the grenade plugin interface to add onto the tempest selection regex in the past. That seems like totally valid thing to add to a grenade21:50
mtreinishso a grenade plugin can export a regex for additional tests they want for running things and because by default testr ORs the regexes that would just work21:51
openstackgerritPaul Glass proposed openstack/designate-tempest-plugin: Reduce the number of "smoke" tests  https://review.openstack.org/33854921:59
*** _ducttape_ has quit IRC22:03
*** ducttape_ has joined #openstack-dns22:04
pglassEmilienM: ^22:12
*** ducttape_ has quit IRC22:17
*** pglass has quit IRC22:17
*** penick has quit IRC22:38
*** mlavalle has quit IRC22:43

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!