| *** elmiko is now known as _elmiko | 01:02 | |
| *** alazarev has quit IRC | 01:21 | |
| *** shakamunyi has joined #openstack-sahara | 01:33 | |
| *** witlessb has joined #openstack-sahara | 01:56 | |
| *** witlessb has quit IRC | 02:01 | |
| *** Krast_ has quit IRC | 02:26 | |
| *** Krast has joined #openstack-sahara | 02:26 | |
| *** shakayumi has joined #openstack-sahara | 03:07 | |
| *** shakamunyi has quit IRC | 03:09 | |
| *** shakayumi has quit IRC | 03:10 | |
| *** tmckay has quit IRC | 03:37 | |
| *** ViswaV has joined #openstack-sahara | 04:01 | |
| *** xianghuihui has quit IRC | 04:03 | |
| *** ViswaV_ has joined #openstack-sahara | 04:03 | |
| *** xianghuihui has joined #openstack-sahara | 04:03 | |
| *** ViswaV has quit IRC | 04:05 | |
| *** shakamunyi has joined #openstack-sahara | 04:07 | |
| *** ViswaV has joined #openstack-sahara | 04:08 | |
| *** ViswaV_ has quit IRC | 04:10 | |
| *** xianghuihuihui has joined #openstack-sahara | 04:15 | |
| *** xianghuihui has quit IRC | 04:18 | |
| *** xianghuihuihui has quit IRC | 04:20 | |
| *** xianghui has joined #openstack-sahara | 04:21 | |
| *** Krast has quit IRC | 05:08 | |
| *** shakamunyi has quit IRC | 05:13 | |
| *** k4n0 has joined #openstack-sahara | 05:36 | |
| *** Krast has joined #openstack-sahara | 06:14 | |
| *** Krast has quit IRC | 06:28 | |
| *** tnovacik has quit IRC | 06:48 | |
| *** Longgeek has joined #openstack-sahara | 07:26 | |
| *** ViswaV has quit IRC | 07:47 | |
| *** witlessb has joined #openstack-sahara | 07:58 | |
| *** Longgeek has quit IRC | 08:04 | |
| *** Longgeek has joined #openstack-sahara | 08:05 | |
| *** Longgeek has quit IRC | 08:06 | |
| *** Longgeek has joined #openstack-sahara | 08:06 | |
| *** tnovacik has joined #openstack-sahara | 08:10 | |
| *** julienvey has joined #openstack-sahara | 08:17 | |
| openstackgerrit | Nikita Konovalov proposed a change to openstack/sahara-dashboard: Repository cleanup https://review.openstack.org/114498 | 08:19 |
|---|---|---|
| *** Krast has joined #openstack-sahara | 08:22 | |
| *** LoveLife has joined #openstack-sahara | 08:42 | |
| *** Longgeek has quit IRC | 08:42 | |
| *** Longgeek has joined #openstack-sahara | 08:43 | |
| openstackgerrit | Andrey Pavlov proposed a change to openstack/sahara: Add tests for ops.py https://review.openstack.org/115215 | 08:47 |
| *** Longgeek has quit IRC | 08:47 | |
| *** Longgeek has joined #openstack-sahara | 08:49 | |
| *** skolekonov has joined #openstack-sahara | 09:13 | |
| openstackgerrit | A change was merged to stackforge/sahara-ci-config: Refactoring localrc https://review.openstack.org/114982 | 09:23 |
| openstackgerrit | A change was merged to stackforge/sahara-ci-config: Remove unused parameter SSH_USERNAME from configs https://review.openstack.org/113262 | 09:40 |
| openstackgerrit | A change was merged to stackforge/sahara-ci-config: Enable pig job for Hadoop 2.4.1 https://review.openstack.org/115026 | 09:40 |
| openstackgerrit | Yaroslav Lobankov proposed a change to openstack/sahara: The first test for Vanilla 1.2.1 in Tempest style https://review.openstack.org/115033 | 09:44 |
| *** tosky has joined #openstack-sahara | 09:52 | |
| openstackgerrit | Alexander Ignatov proposed a change to openstack/sahara: Correction of words decoMMiSSion-decoMMiSSioning https://review.openstack.org/115232 | 10:16 |
| *** witlessb has quit IRC | 10:16 | |
| *** witlessb has joined #openstack-sahara | 10:17 | |
| *** julienvey has quit IRC | 10:18 | |
| *** Longgeek has quit IRC | 10:24 | |
| *** julienvey has joined #openstack-sahara | 10:29 | |
| *** Longgeek has joined #openstack-sahara | 10:53 | |
| *** LoveLife has quit IRC | 11:03 | |
| openstackgerrit | Sergey Reshetnyak proposed a change to openstack/sahara: Fix using cinder volumes with nodemanager in HDP2 https://review.openstack.org/115247 | 11:23 |
| *** Longgeek has quit IRC | 11:26 | |
| *** Longgeek has joined #openstack-sahara | 11:26 | |
| openstackgerrit | Yaroslav Lobankov proposed a change to openstack/sahara: The first test for Vanilla 1.2.1 in Tempest style https://review.openstack.org/115033 | 11:58 |
| openstackgerrit | Kazuki OIKAWA proposed a change to openstack/sahara-specs: [EDP] Hive works with Swift (vanilla1 plugin) https://review.openstack.org/115259 | 11:59 |
| *** Krast has quit IRC | 12:02 | |
| openstackgerrit | Kazuki OIKAWA proposed a change to openstack/sahara-specs: [EDP] Hive works with Swift (vanilla1 plugin) https://review.openstack.org/115259 | 12:12 |
| *** ylobankov has quit IRC | 12:38 | |
| *** miqui has joined #openstack-sahara | 13:19 | |
| *** _elmiko is now known as elmiko | 13:29 | |
| *** tmckay has joined #openstack-sahara | 13:45 | |
| *** tmckay has left #openstack-sahara | 13:46 | |
| openstackgerrit | Michael McCune proposed a change to openstack/sahara-specs: Updating EDP Swift trust authentication spec https://review.openstack.org/113591 | 13:51 |
| *** tmckay has joined #openstack-sahara | 13:52 | |
| *** Networkn3rd has joined #openstack-sahara | 14:15 | |
| *** shakamunyi has joined #openstack-sahara | 14:16 | |
| tmckay | aignatov, yoohoo, are you there? :) | 14:20 |
| aignatov | tmckay: yes | 14:20 |
| aignatov | hi | 14:20 |
| tmckay | hi. I wondered what you thought about my Ooozie/iptables spec. Should we do something in Sahara automatically, or just write documentation? | 14:20 |
| tmckay | I could go either way. | 14:21 |
| tmckay | I have also been thinking that in K or L we might be able to move toward using Mesos as a scheduler for hadoop jobs. That might alleviate some of the issues with the Oozie console. | 14:22 |
| aignatov | tmckay: I like this solution as most secure way to restrict all acccess from all hosts but now I think that it could be some inconvinience for end users… probably we could have an option which allowed host we can add to iptables rules… | 14:27 |
| aignatov | in sahara configs | 14:27 |
| aignatov | need more thoughts from other community members | 14:28 |
| tmckay | aignatov, yes, exactly. I am thinking that oozie host (127.0.0.1) and Sahara host (management ip) are always allowed, and a user can add others in a list | 14:28 |
| tmckay | aignatov, okay, so in general you +1 a software solution instead of just documentation that says "hey, you can do this on the master node .... " | 14:29 |
| aignatov | yes, with an ability to give an access for end hosts I’m basically ok with such changes | 14:29 |
| tmckay | that's the question I'm debating. Because, today, someone with current Sahara could do the same thing by hand and plug up Oozie. | 14:29 |
| tmckay | okay. One more thing I have to read up on -- how hard/easy is it to spoof an ip? Because the ultimate solution is Sahara using ssh to run oozie CLI, and only localhost has access | 14:30 |
| tmckay | but that's really locked down | 14:30 |
| tmckay | aignatov, thank you, I will add config options to the spec and how I think it will work, and what the iptables rules will look lie | 14:31 |
| tmckay | like | 14:31 |
| *** shakamunyi has quit IRC | 14:32 | |
| aignatov | ok, probbaly this topic is a good candidate for design track - “Sahara&Hadoop@& security” - probably two time slots will be required :) | 14:38 |
| tmckay | aignatov, sounds good | 14:42 |
| *** shakamunyi has joined #openstack-sahara | 14:47 | |
| *** tnovacik_ has joined #openstack-sahara | 14:54 | |
| *** tnovacik has quit IRC | 14:54 | |
| *** skolekonov has quit IRC | 15:03 | |
| SergeyLukjanov | tmckay, aignatov, and several days on pods :) | 15:09 |
| aignatov | yep | 15:09 |
| tmckay | yes | 15:10 |
| tmckay | I suppose another solution here (blocking access to Oozie) is to not give the oozie server host a floating ip | 15:11 |
| tmckay | Then, you can only get there from the Sahara host and other nodes in the cluster, right? | 15:12 |
| tmckay | elmiko, ^^ I think you were referring to this the other day | 15:12 |
| *** Networkn3rd has quit IRC | 15:12 | |
| elmiko | tmckay: something similar | 15:13 |
| elmiko | also, alazarev referenced the security group method, on the spec | 15:13 |
| tmckay | oh, cool, I'll take a look | 15:13 |
| *** Networkn3rd has joined #openstack-sahara | 15:15 | |
| tmckay | I wonder if we should go with simple iptables first, and then try ssh/CLI as a second pass | 15:17 |
| elmiko | tmckay: +1 for iptables now solution | 15:18 |
| elmiko | i think we can refactor for something more complicated/configurable on the next pass | 15:18 |
| openstackgerrit | Denis Egorenko proposed a change to stackforge/sahara-ci-config: Temporary set jobs with Vanilla 2.4 non-voting https://review.openstack.org/115316 | 15:20 |
| *** IvanBerezovskiy has left #openstack-sahara | 15:50 | |
| *** Timotey has quit IRC | 15:56 | |
| *** tnovacik_ is now known as tnovacik | 15:58 | |
| *** rhodgin has joined #openstack-sahara | 16:03 | |
| openstackgerrit | A change was merged to stackforge/sahara-ci-config: Temporary set jobs with Vanilla 2.4 non-voting https://review.openstack.org/115316 | 16:30 |
| openstackgerrit | Artem Osadchiy proposed a change to openstack/sahara: MapR plugin implementation https://review.openstack.org/113391 | 16:54 |
| *** ViswaV has joined #openstack-sahara | 16:55 | |
| *** ViswaV has quit IRC | 16:55 | |
| *** ViswaV has joined #openstack-sahara | 16:56 | |
| *** ViswaV has quit IRC | 16:56 | |
| *** elmiko is now known as mimccune | 17:38 | |
| *** mimccune is now known as elmiko | 17:39 | |
| *** shakamunyi has quit IRC | 17:39 | |
| *** shakamunyi has joined #openstack-sahara | 18:11 | |
| openstackgerrit | Sergey Reshetnyak proposed a change to stackforge/sahara-ci-config: Revert "Temporary set jobs with Vanilla 2.4 non-voting" https://review.openstack.org/115371 | 18:30 |
| *** shakamunyi has quit IRC | 18:30 | |
| *** tosky has quit IRC | 18:30 | |
| *** Networkn3rd has quit IRC | 18:31 | |
| *** shakamunyi has joined #openstack-sahara | 18:44 | |
| *** julienvey has quit IRC | 18:48 | |
| *** Longgeek has quit IRC | 19:06 | |
| openstackgerrit | A change was merged to openstack/sahara: Fix starting instances after scaling for CDH https://review.openstack.org/112877 | 19:06 |
| openstackgerrit | Andrew Lazarev proposed a change to openstack/sahara: Made EDP engine plugin specific https://review.openstack.org/114721 | 19:14 |
| openstackgerrit | Andrew Lazarev proposed a change to openstack/sahara: Added create_hdfs_dir method to oozie edp engine https://review.openstack.org/115115 | 19:14 |
| tmckay | alazarev, are automatic security groups for Sahara being implemented for Juno? | 19:26 |
| *** akuznetsov has quit IRC | 19:41 | |
| *** Networkn3rd has joined #openstack-sahara | 19:51 | |
| *** julienvey has joined #openstack-sahara | 20:10 | |
| *** shakamunyi has quit IRC | 20:46 | |
| *** miqui has quit IRC | 20:49 | |
| openstackgerrit | Andrew Lazarev proposed a change to openstack/sahara: Moved URI getters from plugin SPI to edp_engine https://review.openstack.org/115400 | 20:51 |
| *** ViswaV has joined #openstack-sahara | 21:08 | |
| *** tellesnobrega has quit IRC | 21:11 | |
| openstackgerrit | Andrew Lazarev proposed a change to openstack/sahara: Moved URI getters from plugin SPI to edp_engine https://review.openstack.org/115400 | 21:14 |
| openstackgerrit | Andrew Lazarev proposed a change to openstack/sahara: Moved get_oozie_server from plugin SPI to edp_engine https://review.openstack.org/115403 | 21:14 |
| *** tellesnobrega has joined #openstack-sahara | 21:14 | |
| *** rhodgin has quit IRC | 21:27 | |
| *** alazarev has joined #openstack-sahara | 21:39 | |
| *** elmiko is now known as _elmiko | 21:44 | |
| openstackgerrit | Trevor McKay proposed a change to openstack/sahara-specs: Add a config option to block the Oozie server port https://review.openstack.org/115113 | 21:47 |
| *** ViswaV_ has joined #openstack-sahara | 21:49 | |
| *** ViswaV has quit IRC | 21:52 | |
| *** julienvey has quit IRC | 21:53 | |
| *** julienvey has joined #openstack-sahara | 21:59 | |
| *** tmckay has quit IRC | 22:15 | |
| *** Networkn3rd has quit IRC | 22:38 | |
| openstackgerrit | Andrew Lazarev proposed a change to openstack/sahara: Do not rely on hash ordering in tests https://review.openstack.org/112736 | 22:46 |
| *** ViswaV_ has quit IRC | 22:47 | |
| *** julienvey has quit IRC | 22:53 | |
| *** shakamunyi has joined #openstack-sahara | 23:02 | |
| *** alazarev has quit IRC | 23:06 | |
| *** alazarev has joined #openstack-sahara | 23:07 | |
| *** shakamunyi has quit IRC | 23:18 | |
| *** julienvey has joined #openstack-sahara | 23:24 | |
| *** julienvey has quit IRC | 23:28 | |
| *** shakamunyi has joined #openstack-sahara | 23:33 | |
| *** witlessb has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!