*** delattec has quit IRC | 00:00 | |
*** rajinir_ has quit IRC | 00:40 | |
*** pmackinn_ has quit IRC | 02:28 | |
*** diga has joined #openstack-trove | 02:56 | |
*** chlong has joined #openstack-trove | 04:03 | |
*** gouthamr has quit IRC | 04:30 | |
*** diga has quit IRC | 05:34 | |
*** tesseract has joined #openstack-trove | 07:25 | |
*** openstackgerrit has quit IRC | 07:32 | |
*** pcaruana has joined #openstack-trove | 07:37 | |
*** dalees has quit IRC | 08:42 | |
*** tosky has joined #openstack-trove | 08:53 | |
*** dalees has joined #openstack-trove | 08:54 | |
*** logan- has quit IRC | 09:16 | |
*** tnowak has joined #openstack-trove | 09:50 | |
amrith | tnowak, what are you attempting to accomplish with single tenant remote? are you at the ptg by any chance, weorking this out in person may be easier | 10:16 |
---|---|---|
tnowak | amrith: unfortunately not at the ptg. I'd like to hide guest instances from users, for security reasons, because of the problem with extracting rabbitmq passwords, but also as an implementation of the general rule of minimal privileges (you wrote about that in January). I'll be using a separate tenant for all trove components, with its own DB and rabbitmq. If instances boot also there, they... | 12:10 |
tnowak | ...would be in the same internal network as the rabbitmq hosts, so I don't need to expose these rabbitmq hosts; and just connect a second NIC of the instance to the end user's network of choice. And that's what the single_tenat_remote.py is for, isn't it? | 12:10 |
tnowak | as the solution of the password exposure problem I would start with separating the guest-accessible topics in rabbitmq from others; as the first step all guests could have the same separate account with limited permissions; for that limiting to work we would probably need to change trove's topic names for easier regexp matching in rabbitmq permission rules (like tr-g-<guestid>). | 12:18 |
tnowak | so in the beginning we still have a static configuration | 12:28 |
*** logan- has joined #openstack-trove | 12:35 | |
*** haplo37_ has quit IRC | 12:46 | |
*** haplo37_ has joined #openstack-trove | 12:49 | |
*** gcb has joined #openstack-trove | 13:08 | |
*** gouthamr has joined #openstack-trove | 13:51 | |
*** pmackinn has joined #openstack-trove | 14:04 | |
*** david-lyle has joined #openstack-trove | 14:12 | |
*** chhavi has joined #openstack-trove | 14:28 | |
amrith | tnowak, ok thx. I'm tied up with the ptg sessions now but getting single tenant remote to work after recent refactoring in nova is something I have on the list of things to do. I haven't used it recently and I certainly don't know whether it works in liberty or not (that's just too long ago). | 14:34 |
amrith | will try and get back to you soon(ish) for some value of soon. | 14:34 |
*** tqtran has joined #openstack-trove | 14:35 | |
*** gouthamr has quit IRC | 14:37 | |
*** KeithMnemonic has joined #openstack-trove | 14:38 | |
*** david-lyle has quit IRC | 14:45 | |
*** david-lyle has joined #openstack-trove | 14:46 | |
*** david-lyle has quit IRC | 14:46 | |
*** cdelatte has joined #openstack-trove | 14:48 | |
*** david-lyle has joined #openstack-trove | 14:53 | |
*** harlowja has quit IRC | 14:56 | |
*** david-lyle has quit IRC | 14:57 | |
*** gouthamr has joined #openstack-trove | 15:09 | |
*** gcb has quit IRC | 15:20 | |
*** gcb has joined #openstack-trove | 15:23 | |
*** gouthamr has quit IRC | 15:25 | |
*** david-lyle_ has joined #openstack-trove | 15:29 | |
*** KeithMnemonic has quit IRC | 15:32 | |
*** fishbone has quit IRC | 15:39 | |
*** gouthamr has joined #openstack-trove | 15:40 | |
*** chhavi has quit IRC | 15:43 | |
*** chhavi__ has joined #openstack-trove | 15:43 | |
*** chhavi__ has quit IRC | 15:50 | |
*** chhavi has joined #openstack-trove | 15:50 | |
*** david-lyle has joined #openstack-trove | 16:02 | |
*** david-lyle_ has quit IRC | 16:02 | |
*** KeithMnemonic has joined #openstack-trove | 16:24 | |
*** david-lyle has quit IRC | 16:27 | |
*** chhavi has quit IRC | 16:30 | |
*** david-lyle has joined #openstack-trove | 16:34 | |
*** gcb has quit IRC | 16:45 | |
*** fishbone has joined #openstack-trove | 16:47 | |
*** gouthamr has quit IRC | 16:48 | |
*** gouthamr has joined #openstack-trove | 16:50 | |
*** david-lyle has quit IRC | 16:58 | |
*** tqtran has quit IRC | 17:03 | |
*** gouthamr has quit IRC | 17:08 | |
*** KeithMnemonic has quit IRC | 17:08 | |
*** pcaruana has quit IRC | 17:12 | |
*** david-lyle has joined #openstack-trove | 17:16 | |
*** david-lyle has quit IRC | 17:16 | |
*** chhavi has joined #openstack-trove | 17:39 | |
*** tesseract has quit IRC | 17:41 | |
*** chhavi has quit IRC | 17:46 | |
*** cdelatte has quit IRC | 17:48 | |
*** KeithMnemonic has joined #openstack-trove | 17:57 | |
*** openstack has joined #openstack-trove | 18:12 | |
*** KeithMnemonic has quit IRC | 18:19 | |
*** KeithMnemonic has joined #openstack-trove | 18:19 | |
*** gcb has joined #openstack-trove | 18:25 | |
*** gouthamr has joined #openstack-trove | 18:32 | |
*** david-lyle has joined #openstack-trove | 18:46 | |
*** tqtran has joined #openstack-trove | 18:54 | |
*** david-lyle has quit IRC | 18:57 | |
*** tqtran has quit IRC | 19:25 | |
*** tqtran has joined #openstack-trove | 19:26 | |
*** KeithMnemonic has quit IRC | 19:55 | |
*** chlong has quit IRC | 20:01 | |
*** david-lyle has joined #openstack-trove | 20:01 | |
*** chlong has joined #openstack-trove | 20:08 | |
*** gcb has quit IRC | 20:11 | |
*** KeithMnemonic has joined #openstack-trove | 20:19 | |
*** gcb has joined #openstack-trove | 20:19 | |
*** david-lyle has quit IRC | 20:23 | |
*** gcb has quit IRC | 20:30 | |
*** gcb has joined #openstack-trove | 20:31 | |
*** tqtran has quit IRC | 20:32 | |
*** KeithMnemonic has left #openstack-trove | 20:36 | |
*** david-lyle has joined #openstack-trove | 20:38 | |
*** david-lyle has quit IRC | 20:49 | |
*** david-lyle has joined #openstack-trove | 20:56 | |
*** david-lyle has quit IRC | 20:59 | |
*** gouthamr has quit IRC | 21:02 | |
*** gouthamr has joined #openstack-trove | 21:08 | |
fishbone | Hello all, is this abnormal? Argument being removed before instantiating TroveContext object - instance_uuid _remove_incompatible_context_args /usr/lib/python2.7/dist-packages/trove/common/context.py:71 | 21:12 |
fishbone | then, Instance ID: None, Payload: {u'service_status': u'blocked'} heartbeat /usr/lib/python2.7/dist-packages/trove/conductor/manager.py:88 | 21:13 |
fishbone | I think that's causing this error, ModelNotFoundError: InstanceServiceStatus Not Found | 21:13 |
*** itisha has joined #openstack-trove | 21:13 | |
*** chhavi has joined #openstack-trove | 21:26 | |
*** chhavi has quit IRC | 21:39 | |
*** chhavi has joined #openstack-trove | 21:39 | |
*** pmackinn has quit IRC | 21:40 | |
*** gcb has quit IRC | 21:43 | |
*** pmackinn has joined #openstack-trove | 21:48 | |
azlev | fishbone: still on that error? :-( | 21:55 |
fishbone | azlev: haha yeah, the more digging I do the more confused I get | 21:56 |
azlev | fishbone: yes, I'm stuck on backup here. A backup is not working (50G data file) and I dont know why | 21:57 |
fishbone | azlev: how long has that been, in my experience, if you are using cinder volumes to manage data volumes of that size it may take some time | 22:02 |
*** chhavi has quit IRC | 22:06 | |
*** tosky has quit IRC | 22:20 | |
azlev | fishbone: the xtrabackup works, but before it ends, I get an error in interface | 22:35 |
azlev | fishbone: you are receiving a None as instance ID, maybe garbage in trove database | 22:36 |
*** itisha has quit IRC | 23:32 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!