Friday, 2015-07-24

« Thursday, 2015-07-23 Index Saturday, 2015-07-25 »
*** mdorman has quit IRC00:09
*** sergmelikyan has quit IRC00:10
*** sergmelikyan has joined #puppet-openstack00:23
*** xingchao has joined #puppet-openstack00:35
*** rcallawa has joined #puppet-openstack00:35
*** ddmitriev has quit IRC00:37
*** rcallawa has quit IRC00:38
*** rcallawa_ has joined #puppet-openstack00:40
*** xingchao has quit IRC00:40
*** rcallawa_ has quit IRC00:40
*** rcallawa_ has joined #puppet-openstack00:40
*** sergmelikyan has quit IRC00:45
*** rcallawa_ has quit IRC00:51
*** xarses has quit IRC00:53
*** xingchao has joined #puppet-openstack00:59
*** xarses has joined #puppet-openstack01:10
*** xingchao has quit IRC01:16
*** angdraug has quit IRC01:24
*** markvoelker has joined #puppet-openstack01:25
*** mattymo_ has quit IRC02:17
*** mattymo_ has joined #puppet-openstack02:19
richmimcsk8: dc=my-domain, dc=com02:24
*** xingchao has joined #puppet-openstack02:35
*** mdorman has joined #puppet-openstack02:50
*** jasondotstar has quit IRC03:10
*** richm has quit IRC03:21
*** markvoelker has quit IRC03:38
*** markvoelker has joined #puppet-openstack04:03
*** markvoelker has quit IRC04:08
*** xingchao has quit IRC04:10
*** bklei has quit IRC04:23
*** mdorman has quit IRC04:23
*** xingchao has joined #puppet-openstack04:30
*** xingchao has quit IRC04:35
*** markvoelker has joined #puppet-openstack05:04
*** bklei has joined #puppet-openstack05:08
*** markvoelker has quit IRC05:09
*** bklei has quit IRC05:14
*** sergmelikyan has joined #puppet-openstack06:01
*** dgurtner has joined #puppet-openstack06:02
*** sergmelikyan has quit IRC06:06
HunnerI agree with crinkle; if you don't need provisioning, then you don't need beaker for integration testing. But if you plan on allowing people to run the integration tests on a laptop with virtualbox, then maybe beaker WOULD be helpful to have. It would only be a <10 line spec file (plus manifests) anyway06:34
HunnerIf you only care about running integration against nodepool (as is most likely) then don't bother with it06:35
*** saneax has quit IRC06:35
*** paramite has joined #puppet-openstack06:45
*** mkoderer_cloud has joined #puppet-openstack06:54
bogdandofolks, what is the current status of Fernet tokens support in keystone module?06:55
bogdandoCould someone please point me the spec, if any?..06:55
bogdandoI see only https://review.openstack.org/#/c/185441/06:57
*** arnaud_orange1 has quit IRC07:04
*** markvoelker has joined #puppet-openstack07:05
*** pcaruana has joined #puppet-openstack07:10
*** markvoelker has quit IRC07:10
*** pcaruana is now known as centos07:13
*** centos is now known as Guest5973007:13
*** Guest59730 is now known as pcaruana07:13
*** michchap_ has joined #puppet-openstack07:13
*** michchap has quit IRC07:15
*** michchap_ has quit IRC07:18
*** michchap_ has joined #puppet-openstack07:28
*** sergmelikyan has joined #puppet-openstack08:02
*** gfidente has joined #puppet-openstack08:03
*** jistr has joined #puppet-openstack08:04
*** sergmelikyan has quit IRC08:07
*** arnaud_orange has joined #puppet-openstack08:11
*** derekh has joined #puppet-openstack08:13
*** Guest89121 has joined #puppet-openstack08:43
*** markvoelker has joined #puppet-openstack08:51
*** markvoelker has quit IRC08:56
gchamoulimcsk8: ack no worries09:00
*** sergmelikyan has joined #puppet-openstack09:03
*** linkedinyou has quit IRC09:06
*** sergmelikyan has quit IRC09:07
*** chkumar246 is now known as chandankumar09:23
openstackgerritMartin Mágr proposed openstack/puppet-heat: Use resource for domain  https://review.openstack.org/20454109:58
openstackgerritAthlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/20268910:04
*** mkoderer_cloud has quit IRC10:04
*** leanderthal has joined #puppet-openstack10:07
*** dgurtner has quit IRC10:09
*** rcallawa has joined #puppet-openstack10:23
*** paramite has quit IRC10:35
*** gfidente has quit IRC10:42
*** logan2 has quit IRC10:47
openstackgerritAthlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/20268910:48
*** logan2 has joined #puppet-openstack10:50
openstackgerritAthlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/20268910:50
*** markvoelker has joined #puppet-openstack10:52
*** gfidente has joined #puppet-openstack10:55
*** gfidente has quit IRC10:55
*** gfidente has joined #puppet-openstack10:55
*** markvoelker has quit IRC10:57
*** rcallawa_ has joined #puppet-openstack11:00
*** openstackgerrit has quit IRC11:01
*** xarses_ has joined #puppet-openstack11:02
*** openstackgerrit has joined #puppet-openstack11:02
*** andreww has joined #puppet-openstack11:03
*** sergmelikyan has joined #puppet-openstack11:03
*** andreww has quit IRC11:04
*** rcallawa has quit IRC11:04
*** andreww has joined #puppet-openstack11:04
*** xarses has quit IRC11:05
*** xarses_ has quit IRC11:06
claytonbogdando: We're using fernet tokens w/puppet-keystone, check with mfisch11:06
*** sergmelikyan has quit IRC11:08
*** Guest89121 has quit IRC11:16
*** rcallawa_ has quit IRC11:46
*** rcallawa has joined #puppet-openstack11:46
EmilienMgood morning!11:47
EmilienMHunner: good point. We might need to clarify if not done already11:47
*** ducttape_ has quit IRC11:59
*** ducttape_ has joined #puppet-openstack12:00
*** saneax has joined #puppet-openstack12:03
*** jayg|g0n3 is now known as jayg12:11
*** ducttape_ has quit IRC12:16
iurygregorygood morning12:21
*** markvoelker has joined #puppet-openstack12:25
openstackgerritIury Gregory Melo Ferreira proposed openstack/puppet-swift: Update Swift README  https://review.openstack.org/20528512:26
*** rcallawa has quit IRC12:27
*** sergmelikyan has joined #puppet-openstack12:34
*** rhefner has joined #puppet-openstack12:34
*** prad has joined #puppet-openstack12:37
*** sergmelikyan has quit IRC12:39
*** dprince has joined #puppet-openstack12:39
*** sergmelikyan has joined #puppet-openstack12:41
*** sergmelikyan has quit IRC12:46
claytonis there an easy way to run acceptance tests against all nodesets in a single run?12:54
*** ferest has joined #puppet-openstack13:02
*** ferest has quit IRC13:04
*** jasondotstar has joined #puppet-openstack13:13
*** richm has joined #puppet-openstack13:25
*** jistr is now known as jistr|mtg13:29
*** xarses_ has joined #puppet-openstack13:30
*** ducttape_ has joined #puppet-openstack13:31
*** tristanC has quit IRC13:31
*** tristanC has joined #puppet-openstack13:32
*** andreww has quit IRC13:33
*** morazi has joined #puppet-openstack13:35
*** ducttape_ has quit IRC13:39
openstackgerritGuilherme Balzana proposed openstack/puppet-swift: Config resources applied after config template  https://review.openstack.org/20524313:45
*** xarses_ is now known as xarses13:52
openstackgerritGuilherme Balzana proposed openstack/puppet-swift: Add a blank line to the beginning of each filter  https://review.openstack.org/20528413:56
*** ducttape_ has joined #puppet-openstack14:03
*** tchaypo has quit IRC14:03
*** tchaypo has joined #puppet-openstack14:04
*** jistr|mtg is now known as jistr14:12
*** Fin1te has joined #puppet-openstack14:35
*** Fin1te has quit IRC14:37
richmEmilienM: https://bugs.launchpad.net/puppet-keystone/+bug/147803715:01
openstackLaunchpad bug 1478037 in puppet-keystone "default domain must be set first" [Undecided,New]15:01
EmilienMrichm: perfect, thanks15:01
richmEmilienM: related - https://bugs.launchpad.net/bugs/147228515:03
openstackLaunchpad bug 1472285 in Keystone "set default domain dynamically" [Wishlist,Opinion]15:03
richmEmilienM: There may be a solution 1) untested 2) have to use JSON API directly15:03
openstackgerritAthlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/20268915:05
*** leanderthal has quit IRC15:05
*** dprince has quit IRC15:07
*** derekh has quit IRC15:10
*** mdorman has joined #puppet-openstack15:11
*** angdraug has joined #puppet-openstack15:16
*** arnaud_orange has quit IRC15:21
*** saneax has quit IRC15:32
*** aimon_ has quit IRC15:39
*** sergmelikyan has joined #puppet-openstack15:47
*** degorenko has quit IRC15:53
*** bitblt has joined #puppet-openstack15:56
*** saneax has joined #puppet-openstack16:09
*** chandankumar has quit IRC16:16
*** aimon has joined #puppet-openstack16:22
*** dprince has joined #puppet-openstack16:27
*** jtomasek has quit IRC16:30
pabelangerEmilienM: going to get a coffee, ready when you are16:42
pabelangerPM if you want16:42
*** rcallawa has joined #puppet-openstack16:58
*** rcallawa has quit IRC16:59
*** rcallawa has joined #puppet-openstack17:00
openstackgerritIury Gregory Melo Ferreira proposed openstack/puppet-openstack-specs: Enabling-federation  https://review.openstack.org/19036117:09
iurygregoryrichm, i've updated the mode mellon reference, since your patch (https://review.openstack.org/#/c/198083/) is merged ^^17:14
*** sergmelikyan has quit IRC17:38
*** sergmelikyan has joined #puppet-openstack17:38
EmilienMpabelanger: ready! we can chat here17:40
EmilienMpabelanger: readying Colleen's comment, maybe you can reconsider your -117:42
EmilienMreading*17:42
*** angdraug has quit IRC17:43
*** xarses has quit IRC17:45
iurygregoryhey richm can use you site.pp example in https://github.com/richm/puppet-apache-auth-mods to put in the spec? bruce-benjamin is asking to mention an example17:46
*** aimon has quit IRC17:48
*** aimon_ has joined #puppet-openstack17:49
*** aimon has joined #puppet-openstack17:50
*** morazi has quit IRC17:51
pabelangerEmilienM: ack'ed17:51
pabelangerEmilienM: but left new comment17:51
pabelangerthere is a typo17:51
EmilienMpabelanger: I was looking at it and you found it thanks17:52
EmilienMpabelanger: done17:52
pabelangerCool, I think we can +1 that now17:53
pabelangerand even get merged today17:53
*** aimon_ has quit IRC17:54
EmilienMpabelanger: w00t17:57
*** saneax has quit IRC18:07
*** xarses has joined #puppet-openstack18:12
*** gfidente is now known as gfidente|AFK18:14
*** jistr has quit IRC18:14
openstackgerritIury Gregory Melo Ferreira proposed openstack/puppet-openstack-specs: Enabling-federation  https://review.openstack.org/19036118:14
iurygregoryEmilienM,  if you have time please take a look. I think I have covered the two comments. ^18:17
EmilienMiurygregory: it was crinkle's comments18:18
EmilienMbut I'll look too18:18
iurygregoryyeah i've forgoten =X sorry18:18
iurygregoryforgotten*18:18
mfischbogdando: yes we're using it but none of the keystone tools to generate tokens or rotate them18:26
openstackgerritEmilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/20564818:31
EmilienMrichm: trying something ^18:32
*** jistr has joined #puppet-openstack18:35
EmilienMcrinkle: Hunner's comment is good. So we agree we are not supposed to run integration testing on our laptop. It's run_tests.sh will only run on OS infra, right?18:35
*** jistr is now known as jistr|afk18:35
*** linkedinyou has joined #puppet-openstack18:53
richmiurygregory: what do you need?18:54
iurygregoryrichm, i have modify  your class  'apache_auth::keystone_ipsilon' (site.pp) to use as example in the spec18:56
richmiurygregory: ok18:56
richmthe real code will probably end up being different - that was just a poc of keystone using mellon/ipsilon/freeipa18:57
EmilienMcrinkle: I'm still hitting https://launchpad.net/bugs/1474049 so to unblock I'll take the code that fix it from https://review.openstack.org/#/c/199676/ and do another patch, ok?18:59
openstackLaunchpad bug 1474049 in puppet-keystone "if admin_project_domain == admin_user_domain, admin_domain is never created" [High,In progress] - Assigned to Emilien Macchi (emilienm)18:59
openstackgerritEmilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/20564819:04
*** EmilienM is now known as EmilienM|brb19:18
*** bitblt has quit IRC19:22
*** sergmelikyan has quit IRC19:30
openstackgerritGuilherme Balzana proposed openstack/puppet-swift: Config resources applied after config template  https://review.openstack.org/20524319:40
*** sergmelikyan has joined #puppet-openstack19:45
openstackgerritGuilherme Balzana proposed openstack/puppet-swift: Config resources applied after config template  https://review.openstack.org/20524319:49
crinkleEmilienM|brb: re integration testing I imagine it would look like devstack testing, where it's up to the developer to find something to run it on19:53
crinkleEmilienM|brb: re keystone bug yes it makes sense to fix the bug in one patch and do the refactor in a different patch19:53
*** jasondotstar has quit IRC19:57
*** EmilienM|brb is now known as EmilienM19:59
openstackgerritEmilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/20564820:05
EmilienMcrinkle: ack20:05
iurygregoryhey crinkle ,the parameters are optional so i'll set them to undef ok?20:09
crinkleiurygregory: I don't care what they're set to i just want it documented in the spec, saying None doesn't make sense from a puppet perspective20:09
iurygregoryok i'll change ^^20:11
richmiurygregory: crinkle: see my latest comment in the review20:13
richmperhaps it makes sense to just omit them altogether20:13
richmand have a link to the keystone docs table instead20:13
iurygregoryok richm i'll see in a few minutes20:13
richmmtreinish: ping - re: https://review.openstack.org/#/c/198561/ - is it possible to get tempest to dump the JSON data being sent to/from Keystone?20:15
*** jayg is now known as jayg|g0n320:18
crinklerichm: ok20:23
openstackgerritEmilien Macchi proposed openstack/puppet-keystone: admin_user_domain and admin_project_domain can now be equal  https://review.openstack.org/20569720:26
EmilienMrichm: for the tempest patch, if you want, you can rebase it on top of https://review.openstack.org/20564820:27
EmilienMcrinkle, richm: I did the split: https://review.openstack.org/205697 - thanks for review20:27
richmEmilienM: I'm having a problem with tempest - looks like it is trying to do v2 auth with a v3 user20:47
richmEmilienM: I can't figure out how/where to change it20:47
EmilienMrichm: check with mtreinish maybe20:47
richmEmilienM: yeah - (02:15:37 PM) richm: mtreinish: ping - re: https://review.openstack.org/#/c/198561/20:48
EmilienMrichm: oops, haven't seen :)20:50
openstackgerritEmilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/20564821:06
*** social_ has quit IRC21:07
openstackgerritBen Kero proposed openstack/puppet-swift: Warn that object storage parameter mount_check changes next release  https://review.openstack.org/20175521:08
openstackgerritBen Kero proposed openstack/puppet-swift: Warn that object storage parameter mount_check changes next release  https://review.openstack.org/20175521:10
openstackgerritEmilien Macchi proposed openstack/puppet-keystone: admin_user_domain and admin_project_domain can now be equal  https://review.openstack.org/20569721:13
openstackgerritIury Gregory Melo Ferreira proposed openstack/puppet-openstack-specs: Enabling-federation  https://review.openstack.org/19036121:25
*** guimaluf has quit IRC21:31
EmilienMif anyone around could have a look at 2 outstanding bug fix in puppet-keystone: https://review.openstack.org/#/c/205648/ and https://review.openstack.org/#/c/205697 - thanks a lot!21:35
*** prad has quit IRC21:40
* mwhahaha throws a defined() at richm 21:56
mwhahaha:)21:56
richmmissed me - or did you?  you can never be sure with defined()21:59
EmilienMwe are in the middle of a private joke22:03
*** dprince has quit IRC22:07
*** gfidente|AFK is now known as gfidente22:16
openstackgerritEmilien Macchi proposed openstack/puppet-keystone: admin_user_domain and admin_project_domain can now be equal  https://review.openstack.org/20569722:36
*** saneax has joined #puppet-openstack22:51
*** ducttape_ has quit IRC23:11
bodepdI'm trying to debug something related to setting credentials with the new keystone code23:12
bodepdoperations fail if I call from cron, but pass if I execute directly, looking at the code, it looks like this causes different sets of credentials to be used23:13
bodepduggh, I need to do more digging before I can intelligently ask a question.23:15
*** markvoelker has quit IRC23:15
bodepdit has something to do with the special tokens that are required to manage password23:20
bodepds23:20
bodepdI think I figured it out ,there is a conflict between teh admin url pointing to 2.0 and the version being set to 3.023:22
bodepdso I guess I just need to figure out how auth_url is being set...23:23
*** jistr|afk has quit IRC23:29
*** zino_ has joined #puppet-openstack23:29
zino_puppet-openstack and puppetlabs-havanna are both untouched for a year and both say they support Ubuntu 12.04, not 14.04 I'm going for. Is there a newer collection somewhere?23:31
bodepduggh, I figured it out. basically, it looks for credentials in $USER/openrc, so if you happen to be using that file for things using the v2 endpoint, the provider will happily write a version that conflicts with the version endpoint and then the calls to tokens (related to password updates) fail23:34
bodepdthat just took me about 4 hours to figure out :(23:34
*** mdorman has quit IRC23:35
bodepdI still have tons of operations that depend on v2, while I migrate to v3, how can I ensure that the v3 endpoint is used? (ie: where can I override /root/openrc)?23:37
*** aimon has quit IRC23:38
*** rhefner_ has joined #puppet-openstack23:50
*** tchaypo_ has joined #puppet-openstack23:51
*** rhefner has quit IRC23:54
*** linkedinyou has quit IRC23:54
*** tchaypo has quit IRC23:54
*** rhefner_ is now known as rhefner23:54
bodepdI can override as an env var for now, but I guess the truth is that since the keystone types use /root/openrc, people playing with openstack should not be using this file23:55
*** tchaypo_ is now known as tchaypo23:55
*** xarses has quit IRC23:57
« Thursday, 2015-07-23 Index Saturday, 2015-07-25 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!