*** ducttape_ has quit IRC | 00:01 | |
*** furlongm has joined #puppet-openstack | 00:17 | |
*** vinsh has joined #puppet-openstack | 00:20 | |
*** vinsh_ has quit IRC | 00:20 | |
*** _joes_ has quit IRC | 00:20 | |
*** _joes_ has joined #puppet-openstack | 00:21 | |
*** vinsh has quit IRC | 00:23 | |
*** davideagle has joined #puppet-openstack | 00:25 | |
*** ducttape_ has joined #puppet-openstack | 00:33 | |
*** markvoelker has quit IRC | 00:38 | |
*** davideagle has quit IRC | 00:39 | |
*** saneax is now known as saneax_AFK | 00:40 | |
*** ducttape_ has quit IRC | 00:45 | |
*** xarses has quit IRC | 01:05 | |
*** ducttape_ has joined #puppet-openstack | 01:11 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-tripleo: IPv6: duak-stack support for Keystone https://review.openstack.org/286344 | 01:12 |
---|---|---|
*** angdraug has quit IRC | 01:20 | |
*** xarses has joined #puppet-openstack | 01:37 | |
*** markvoelker has joined #puppet-openstack | 01:38 | |
*** ducttape_ has quit IRC | 01:57 | |
*** markvoelker has quit IRC | 02:08 | |
*** markvoelker has joined #puppet-openstack | 02:08 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-tripleo: IPv6: duak-stack support for Keystone https://review.openstack.org/286344 | 02:15 |
*** ducttape_ has joined #puppet-openstack | 02:20 | |
*** baker has joined #puppet-openstack | 03:20 | |
*** dhollinger has joined #puppet-openstack | 03:21 | |
*** dhollinger has quit IRC | 03:21 | |
*** richm has quit IRC | 03:37 | |
openstackgerrit | Matt Fischer proposed openstack/puppet-keystone: WIP Keystone hooks support https://review.openstack.org/283898 | 03:40 |
openstackgerrit | Merged openstack/puppet-keystone: stop managing files that the package makes https://review.openstack.org/283308 | 03:41 |
*** saneax_AFK is now known as saneax | 04:06 | |
*** baker has quit IRC | 04:09 | |
*** ducttape_ has quit IRC | 04:22 | |
*** fedexo has joined #puppet-openstack | 04:59 | |
openstackgerrit | Matt Fischer proposed openstack/puppet-keystone: WIP Keystone hooks support https://review.openstack.org/283898 | 05:03 |
*** jaosorior has joined #puppet-openstack | 05:49 | |
*** rcernin has joined #puppet-openstack | 06:09 | |
*** trown|outtypewww has quit IRC | 06:34 | |
*** trown has joined #puppet-openstack | 06:35 | |
*** _matthias_ has joined #puppet-openstack | 07:32 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/puppet-tripleo: Always override X-Forwarded-Proto header for Heat https://review.openstack.org/286420 | 07:36 |
*** bnemec has quit IRC | 07:36 | |
*** bnemec has joined #puppet-openstack | 07:39 | |
*** hjensas has joined #puppet-openstack | 07:48 | |
*** hjensas has joined #puppet-openstack | 07:48 | |
*** jtomasek has joined #puppet-openstack | 07:50 | |
*** dgurtner has joined #puppet-openstack | 07:58 | |
*** xingchao has joined #puppet-openstack | 08:00 | |
*** foxhunt_away is now known as foxhunt72 | 08:05 | |
openstackgerrit | Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default https://review.openstack.org/279444 | 08:10 |
*** paramite has joined #puppet-openstack | 08:18 | |
*** jpena has joined #puppet-openstack | 08:21 | |
*** xingchao has quit IRC | 08:23 | |
*** xingchao has joined #puppet-openstack | 08:24 | |
*** paramite is now known as paramite|afk | 08:32 | |
*** paramite|afk is now known as paramite | 08:37 | |
*** openstackgerrit has quit IRC | 08:48 | |
*** openstackgerrit has joined #puppet-openstack | 08:48 | |
*** xingchao_ has joined #puppet-openstack | 08:53 | |
*** xingchao has quit IRC | 08:53 | |
*** paramite is now known as paramite|afk | 08:55 | |
*** paramite|afk is now known as paramite | 08:57 | |
*** xingchao_ has quit IRC | 08:57 | |
*** gfidente has joined #puppet-openstack | 08:58 | |
*** xingchao has joined #puppet-openstack | 08:58 | |
*** fedexo has quit IRC | 08:58 | |
*** _degorenko|afk is now known as degorenko | 09:02 | |
*** xingchao has quit IRC | 09:10 | |
*** xingchao has joined #puppet-openstack | 09:12 | |
*** xingchao has quit IRC | 09:12 | |
*** xingchao has joined #puppet-openstack | 09:13 | |
*** jistr has joined #puppet-openstack | 09:14 | |
*** xingchao has quit IRC | 09:16 | |
*** xingchao has joined #puppet-openstack | 09:18 | |
*** igajsin1 has left #puppet-openstack | 09:20 | |
*** xingchao has quit IRC | 09:23 | |
*** ddmitriev has joined #puppet-openstack | 09:30 | |
*** davideagle has joined #puppet-openstack | 09:34 | |
*** derekh has joined #puppet-openstack | 09:39 | |
*** xingchao has joined #puppet-openstack | 09:46 | |
*** aarefiev has quit IRC | 09:48 | |
*** aarefiev has joined #puppet-openstack | 09:49 | |
openstackgerrit | Xingchao Yu proposed openstack/puppet-oslo: Add oslo.middleware defines https://review.openstack.org/274422 | 09:56 |
*** davideagle has quit IRC | 10:10 | |
*** xingchao has quit IRC | 10:13 | |
*** dgurtner has quit IRC | 10:26 | |
zigo | EmilienM: That's off-topic for this channel, but Debconf 17 will be in Montreal ! :) | 10:35 |
zigo | https://wiki.debconf.org/wiki/DebConf17/Bids/Montreal | 10:35 |
zigo | I'll get to see how your place is... :P | 10:36 |
-openstackstatus- NOTICE: Gerrit is going to be restarted due to poor performance | 10:38 | |
*** ChanServ changes topic to "Gerrit is going to be restarted due to poor performance" | 10:38 | |
*** ChanServ changes topic to "Puppet OpenStack modules - https://wiki.openstack.org/wiki/Puppet" | 10:44 | |
-openstackstatus- NOTICE: gerrit finished restartign | 10:44 | |
openstackgerrit | Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default https://review.openstack.org/279444 | 10:50 |
*** davideagle has joined #puppet-openstack | 10:54 | |
openstackgerrit | Merged openstack/puppet-heat: Implement crontab to purge deleted data https://review.openstack.org/286290 | 11:00 |
*** davideagle has quit IRC | 11:11 | |
openstackgerrit | Merged openstack/puppet-neutron: Neutron subnet will now be able to update https://review.openstack.org/285518 | 11:37 |
*** davideagle has joined #puppet-openstack | 12:00 | |
EmilienM | good morning | 12:01 |
EmilienM | zigo: cool | 12:01 |
*** johnmilton has joined #puppet-openstack | 12:02 | |
openstackgerrit | Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default https://review.openstack.org/279444 | 12:09 |
*** dgurtner has joined #puppet-openstack | 12:10 | |
*** davideagle has quit IRC | 12:14 | |
EmilienM | degorenko: I replied to https://review.openstack.org/#/c/285586/ a bit late but I did :) | 12:15 |
openstackgerrit | Babu Shanmugam proposed openstack/puppet-vswitch: Added custom type vs_config and OVS provider for it https://review.openstack.org/285996 | 12:16 |
*** leanderthal|afk is now known as leanderthal | 12:21 | |
*** saneax is now known as saneax_AFK | 12:22 | |
degorenko | EmilienM, no problem :) | 12:28 |
*** davideagle has joined #puppet-openstack | 12:29 | |
*** jaosorior has quit IRC | 12:36 | |
*** jaosorior has joined #puppet-openstack | 12:37 | |
*** davideagle has quit IRC | 12:45 | |
*** davideagle has joined #puppet-openstack | 12:48 | |
*** ducttape_ has joined #puppet-openstack | 13:05 | |
*** davideagle has quit IRC | 13:07 | |
*** davideagle has joined #puppet-openstack | 13:10 | |
*** paramite is now known as paramite|afk | 13:13 | |
*** Aegil has quit IRC | 13:15 | |
*** furlongm has quit IRC | 13:16 | |
*** furlongm has joined #puppet-openstack | 13:21 | |
*** davideagle has quit IRC | 13:23 | |
*** jayg|g0n3 is now known as jayg | 13:23 | |
*** xingchao has joined #puppet-openstack | 13:25 | |
*** dprince has joined #puppet-openstack | 13:25 | |
*** saneax_AFK is now known as saneax | 13:29 | |
*** ducttape_ has quit IRC | 13:31 | |
*** jpena is now known as jpena|lunch | 13:31 | |
*** davideagle has joined #puppet-openstack | 13:32 | |
openstackgerrit | Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default https://review.openstack.org/279444 | 13:34 |
*** richm has joined #puppet-openstack | 13:36 | |
*** kashyap has joined #puppet-openstack | 13:37 | |
*** furlongm_ has joined #puppet-openstack | 13:38 | |
*** davideagle has quit IRC | 13:39 | |
kashyap | EmilienM: I'm looking at this change - https://review.openstack.org/#/c/286584/2/puppet/manifests/overcloud_compute.pp | 13:39 |
*** paramite|afk is now known as paramite | 13:39 | |
EmilienM | kashyap: hey! you here | 13:39 |
kashyap | EmilienM: Aren't you doing two unrelated changes? | 13:39 |
kashyap | Yeah, just joined here to quickly ACK it, while it's fresh in memory | 13:39 |
EmilienM | kashyap: no I moved the nova_config so I can reuse rbd_ephemeral_storage boolean | 13:39 |
EmilienM | kashyap: in puppet, order matters | 13:40 |
kashyap | EmilienM: Duh, I just needed to scroll down! | 13:40 |
kashyap | I'll add a comment to your question there. | 13:40 |
EmilienM | kashyap: do I need to configure live_migration_flag too ? | 13:40 |
EmilienM | thanks! | 13:40 |
kashyap | EmilienM: Well, for now, yes. In future, it'll all be handled with a single tri-state flag. | 13:40 |
*** furlongm has quit IRC | 13:40 | |
EmilienM | ok | 13:40 |
kashyap | I'll add the details there for reference. | 13:40 |
EmilienM | ok, great, I'll iterate after that | 13:41 |
*** jtomasek_ has joined #puppet-openstack | 13:43 | |
kashyap | EmilienM: One more: You special-cased RBD, and used TUNNELLED for 'block_migration_flag', any reason? | 13:46 |
EmilienM | kashyap: because of https://bugzilla.redhat.com/show_bug.cgi?id=1301986#c12 | 13:46 |
openstack | bugzilla.redhat.com bug 1301986 in rhel-osp-director "Block based migration fails with unable to execute QEMU command 'migrate': this feature or command is not currently supported" [High,New] - Assigned to hbrock | 13:46 |
*** cdelatte has joined #puppet-openstack | 13:46 | |
*** fwdit has joined #puppet-openstack | 13:47 | |
kashyap | EmilienM: Oh, yes, that's the correct rationale. | 13:48 |
*** kashyap has left #puppet-openstack | 13:49 | |
*** jtomasek_ has quit IRC | 13:54 | |
*** rmart04 has joined #puppet-openstack | 13:56 | |
EmilienM | upstream meeting starts in one hour, feel free to add topics / bugs / patches: https://etherpad.openstack.org/p/puppet-openstack-weekly-meeting-20160301 | 14:03 |
*** derekh is now known as ndipanov_ | 14:04 | |
*** ndipanov_ is now known as derekh | 14:04 | |
*** mdorman has joined #puppet-openstack | 14:05 | |
*** furlongm_ is now known as furlongm | 14:09 | |
openstackgerrit | Dmitry Tantsur proposed openstack/puppet-ironic: [inspector] use dnsmasq dhcp-sequential-ip flag in dnsmasq.conf https://review.openstack.org/286617 | 14:14 |
mfisch | EmilienM: that steverdore change broke me it seems | 14:15 |
mfisch | I'm going to have to put the long names back in hiera | 14:15 |
EmilienM | mfisch: what version are you running? | 14:15 |
mfisch | still an old copy of L | 14:15 |
mfisch | L before release really | 14:15 |
EmilienM | and you running master? | 14:15 |
EmilienM | (puppet-keystone) | 14:16 |
mfisch | I think this is stevedore issue | 14:16 |
mfisch | ValueError: Empty module name | 14:16 |
mfisch | yeah, well im in process of trying the new module | 14:16 |
openstackgerrit | Merged openstack/puppet-openstack-integration: Bump RDO repo to February 29th trunk https://review.openstack.org/286258 | 14:16 |
EmilienM | mfisch: the upstream doc and keystone folks says "use stevedore names" | 14:17 |
EmilienM | mfisch: please file a bug, with logs, etc | 14:17 |
mfisch | once I pin this down I will let you know, this is a test merge from about 3 weeks of stuff | 14:17 |
EmilienM | mfisch: but you have hit this issue because you run on Liberty while our module is for master (mitaka) | 14:17 |
mfisch | are the docs you found for M? | 14:18 |
mfisch | if this is really for M then I'll work around it | 14:18 |
EmilienM | mfisch: I don't know details | 14:18 |
EmilienM | i looked at doc and how devstack works | 14:18 |
*** paramite is now known as paramite|afk | 14:21 | |
mfisch | I'll dig into it today | 14:22 |
*** paramite|afk is now known as paramite | 14:22 | |
mfisch | yep thats it | 14:23 |
mfisch | EmilienM: I fixed with hiera, good to know I can clean up in Mitaka | 14:23 |
EmilienM | cool | 14:24 |
mfisch | keystone::token_driver: 'keystone.token.persistence.backends.sql.Token' | 14:24 |
mfisch | keystone::catalog_driver: 'keystone.catalog.backends.sql.Catalog' | 14:24 |
*** furlongm_ has joined #puppet-openstack | 14:25 | |
*** furlongm has quit IRC | 14:26 | |
openstackgerrit | Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default https://review.openstack.org/279444 | 14:27 |
*** vinsh has joined #puppet-openstack | 14:28 | |
*** jpena|lunch is now known as jpena | 14:32 | |
*** _ody has quit IRC | 14:40 | |
*** dfisher has joined #puppet-openstack | 14:44 | |
*** furlongm_ has quit IRC | 14:44 | |
openstackgerrit | Ivan Berezovskiy proposed openstack/puppet-ceilometer: Deprecate ceilometer alarm classes https://review.openstack.org/282258 | 14:46 |
*** furlongm_ has joined #puppet-openstack | 14:47 | |
*** _ody has joined #puppet-openstack | 14:56 | |
*** skolekonov_ has joined #puppet-openstack | 14:57 | |
*** ducttape_ has joined #puppet-openstack | 14:58 | |
openstackgerrit | Martin Millnert proposed openstack/puppet-horizon: Avoid causing redirect loop https://review.openstack.org/286647 | 15:08 |
*** skolekonov_ has quit IRC | 15:11 | |
EmilienM | mwhahaha: can you look https://review.openstack.org/285586 if you have time today? | 15:13 |
mwhahaha | sure | 15:14 |
*** xarses has quit IRC | 15:14 | |
*** fwdit has quit IRC | 15:23 | |
openstackgerrit | Martin Millnert proposed openstack/puppet-keystone: Make apache::vhost::headers configuration possible https://review.openstack.org/286656 | 15:25 |
*** haplo37 has joined #puppet-openstack | 15:27 | |
*** vinsh has quit IRC | 15:32 | |
mfisch | EmilienM: sorry I had a commute this morning | 15:32 |
*** vinsh has joined #puppet-openstack | 15:33 | |
EmilienM | mfisch: sorry for what? | 15:34 |
EmilienM | ah for the meeting, no worries, we had 0 item | 15:35 |
EmilienM | mfisch: though you and chem have an action that is postponed for weeks | 15:35 |
EmilienM | maybe we can work on it soon | 15:35 |
*** jpena is now known as jpena|brb | 15:42 | |
*** dhollinger has joined #puppet-openstack | 15:45 | |
*** delattec has joined #puppet-openstack | 15:55 | |
*** cdelatte has quit IRC | 15:55 | |
*** xarses has joined #puppet-openstack | 16:02 | |
*** xarses has quit IRC | 16:02 | |
*** xarses has joined #puppet-openstack | 16:03 | |
*** haplo37 has quit IRC | 16:04 | |
*** jaosorior is now known as jaosorior_away | 16:06 | |
*** rochaporto has joined #puppet-openstack | 16:06 | |
openstackgerrit | Athlan-Guyot sofer proposed openstack/puppet-tripleo: IPv6: duak-stack support for Keystone https://review.openstack.org/286344 | 16:12 |
*** xingchao has quit IRC | 16:13 | |
*** xingchao has joined #puppet-openstack | 16:14 | |
*** paramite has quit IRC | 16:14 | |
*** xingchao has quit IRC | 16:14 | |
*** haplo37 has joined #puppet-openstack | 16:16 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-tripleo: IPv6: duak-stack support for Keystone https://review.openstack.org/286344 | 16:17 |
*** leanderthal is now known as leanderthal|afk | 16:19 | |
*** vinsh_ has joined #puppet-openstack | 16:29 | |
*** vinsh has quit IRC | 16:29 | |
*** jpena|brb is now known as jpena | 16:30 | |
xarses | dmsimard: thanks for the laugh | 16:45 |
dmsimard | xarses: oh ? | 16:46 |
xarses | https://github.com/openstack/keystone/commit/7c6556ce18eb170fd8102168b33a50272b22ec5a | 16:46 |
dmsimard | yeah | 16:46 |
dmsimard | lol | 16:46 |
*** rochaporto has quit IRC | 16:46 | |
xarses | the tests fail 1 day, every 4 years | 16:46 |
xarses | oh, some one just mentioned that horizon had a leap year bug too | 16:47 |
dmsimard | this is almost y2k all over again | 16:49 |
EmilienM | skolekonov: have you seen http://logs.openstack.org/86/285586/20/gate/gate-puppet-openstack-integration-scenario001-tempest-dsvm-trusty/bc7ce9f/logs/neutron/neutron-server.txt.gz#_2016-03-01_15_32_37_313 ? | 16:51 |
EmilienM | same question for http://logs.openstack.org/86/285586/20/gate/gate-puppet-openstack-integration-scenario001-tempest-dsvm-trusty/bc7ce9f/logs/neutron/neutron-server.txt.gz#_2016-03-01_15_32_37_310 | 16:51 |
*** rcernin has quit IRC | 16:55 | |
openstackgerrit | Denis Egorenko proposed openstack/puppet-heat: test do not merge https://review.openstack.org/286717 | 17:04 |
mfisch | EmilienM: the merge of removing /etc/keystone broke fernet tokens | 17:05 |
*** jistr has quit IRC | 17:05 | |
mfisch | the resource dep isnt working properly | 17:05 |
mfisch | I'm working on it | 17:05 |
dmsimard | mfisch: thank you third party CI | 17:05 |
EmilienM | lol | 17:05 |
EmilienM | if I could, I would put mfisch in our CI jobs | 17:06 |
mfisch | you mean my lab? | 17:06 |
mfisch | lol | 17:07 |
EmilienM | yeah! | 17:10 |
mfisch | EmilienM: I dont get how key-manage fernet ran before keystone was installed | 17:10 |
mfisch | https://github.com/openstack/puppet-keystone/blob/master/manifests/init.pp#L915-L920 | 17:11 |
mfisch | that look right to you? | 17:11 |
mfisch | here's what my CI says: http://paste.openstack.org/show/488796/ | 17:11 |
EmilienM | mfisch: in your catalog, do you see the pkg installed after or before fernet? | 17:12 |
mfisch | oddly im not seeing it installed in this run | 17:14 |
mfisch | hmm | 17:14 |
EmilienM | mfisch: maybe can you submit a patch in our CI to test it? | 17:14 |
mfisch | yeah | 17:14 |
EmilienM | you proposed to have a scenario deploying it | 17:14 |
EmilienM | mfisch: please submit a patch, or at least a PoC, that we can finish but I have 0 experience in fernet | 17:15 |
mfisch | this is our issue | 17:15 |
mfisch | but I Think upstream should make the fernet keys folder | 17:15 |
mfisch | EmilienM: can you make a bug to add a CI test for fernet? | 17:16 |
mfisch | the code there in upstream is not 100% thre | 17:16 |
mfisch | there | 17:16 |
mfisch | the bug is really "make fernet work out of the box + CI" | 17:18 |
EmilienM | mfisch: upstream == keystone or puppet-keystone? | 17:19 |
mfisch | puppet-keystone | 17:19 |
mfisch | we have our own special sauce to get fernet 100% working that we use | 17:19 |
EmilienM | feel free to submit a patch then | 17:19 |
EmilienM | and a CI patch too | 17:19 |
mfisch | I'll file a bug so that I dont forget | 17:19 |
EmilienM | mfisch: thanks. | 17:22 |
EmilienM | mfisch: and please send a patch to puppet-openstack-integration, pick up a scenario | 17:22 |
mfisch | yep will do | 17:25 |
EmilienM | thanks | 17:25 |
openstackgerrit | Merged openstack/puppet-glance: Supports IPv6 in registry_host https://review.openstack.org/286319 | 17:26 |
*** degorenko is now known as _degorenko|afk | 17:31 | |
openstackgerrit | Denis Egorenko proposed openstack/puppet-heat: test do not merge https://review.openstack.org/286717 | 17:32 |
*** trown is now known as trown|lunch | 17:37 | |
openstackgerrit | Merged openstack/puppet-glance: Switch glance to rspec-puppet-facts https://review.openstack.org/282182 | 17:37 |
*** tiswanso has joined #puppet-openstack | 17:37 | |
*** baker has joined #puppet-openstack | 17:43 | |
*** derekh has quit IRC | 17:43 | |
*** dgurtner has quit IRC | 17:43 | |
EmilienM | _ody: have you seen https://bugs.launchpad.net/puppet-horizon/+bug/1551759 ? | 17:47 |
openstack | Launchpad bug 1551759 in puppet-horizon "Redirect loop with root_url = '/'" [Undecided,In progress] - Assigned to Martin Millnert (r-martin-5) | 17:47 |
openstackgerrit | Leon Zachery proposed openstack/puppet-neutron: Cisco nexus config manifest - obsolete parameter (switch_replay_count). https://review.openstack.org/286243 | 17:55 |
*** hjensas has quit IRC | 17:58 | |
*** hjensas has joined #puppet-openstack | 18:02 | |
EmilienM | mwhahaha: before I continue the work, can you please provide feedback on https://review.openstack.org/#/c/285600/ ? | 18:07 |
mwhahaha | sure | 18:07 |
EmilienM | I plan to continue the work for having all APIs on SSL & IPv6 | 18:07 |
EmilienM | (for scenario002) | 18:08 |
mwhahaha | so should we use some sort of config class for these toggles? | 18:08 |
mwhahaha | so that you don't have to specify all of them | 18:08 |
mwhahaha | ie create a openstack_integration::config class that you can use for ssl/ipv6 and just pull them in as defaults for the classes | 18:08 |
mwhahaha | so you can just class { openstack_integration::config: ssl => true} and everything that then gets pulled in will have it enabled | 18:09 |
*** rahulait has joined #puppet-openstack | 18:09 | |
EmilienM | mwhahaha: or params? | 18:09 |
EmilienM | wait, what would do config.pp? | 18:09 |
mwhahaha | let me show you | 18:09 |
mwhahaha | sec | 18:09 |
EmilienM | ok cool | 18:09 |
*** rahulait has quit IRC | 18:10 | |
*** jpena has quit IRC | 18:10 | |
mwhahaha | EmilienM: http://paste.openstack.org/show/488815/ | 18:13 |
EmilienM | oh nice | 18:14 |
EmilienM | I like that | 18:14 |
EmilienM | mwhahaha: can't I just use params.pp ? | 18:14 |
mwhahaha | sure | 18:14 |
mwhahaha | but it's more a config | 18:14 |
EmilienM | ok I'll add config then | 18:14 |
mwhahaha | since openstack_integration itself is more like an application than a module to install/config other stuff | 18:15 |
*** rmart04 has quit IRC | 18:15 | |
EmilienM | makes sense | 18:15 |
mwhahaha | globals or config is better for what we're using it for | 18:15 |
mwhahaha | params classes usually don't have configurable params | 18:15 |
EmilienM | right | 18:16 |
*** openstackgerrit has quit IRC | 18:18 | |
*** openstackgerrit has joined #puppet-openstack | 18:18 | |
EmilienM | mwhahaha: I also plan to switch other ubuntu jobs on ubuntu-trusty instead of bare | 18:22 |
EmilienM | will be faster to run in our CI | 18:23 |
mwhahaha | ok | 18:23 |
*** aglarendil__ has joined #puppet-openstack | 18:30 | |
*** jaosorior_away is now known as jaosorior | 18:31 | |
*** trown|lunch is now known as trown | 18:35 | |
*** aglarendil has quit IRC | 18:37 | |
*** hjensas has quit IRC | 18:37 | |
*** aglarendil__ is now known as aglarendil | 18:37 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: refactorize SSL configuration https://review.openstack.org/286767 | 18:38 |
*** imcsk8 has quit IRC | 18:43 | |
*** imcsk8 has joined #puppet-openstack | 18:43 | |
*** haplo37 has quit IRC | 18:46 | |
*** itsuugo has quit IRC | 18:50 | |
*** ducttape_ has quit IRC | 18:52 | |
*** furlongm_ has quit IRC | 18:52 | |
*** finchd has quit IRC | 18:52 | |
*** artem_panchenko_ has quit IRC | 18:52 | |
*** _ody has quit IRC | 18:52 | |
*** furlongm_ has joined #puppet-openstack | 18:54 | |
*** openstack has joined #puppet-openstack | 19:16 | |
*** openstackstatus has joined #puppet-openstack | 19:18 | |
*** ChanServ sets mode: +v openstackstatus | 19:18 | |
*** openstackgerrit has joined #puppet-openstack | 19:19 | |
*** hjensas has quit IRC | 19:25 | |
*** mwhahaha has quit IRC | 19:25 | |
*** nibalizer has quit IRC | 19:25 | |
openstackgerrit | Colleen Murphy proposed openstack/puppet-keystone: Add keystone::disable_admin_token_auth class https://review.openstack.org/280929 | 19:25 |
*** imcsk8_ is now known as imcsk8 | 19:26 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: deploy RabbitMQ with IPv6 binding https://review.openstack.org/286788 | 19:27 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: refacto: use params.pp for distro specific params https://review.openstack.org/286789 | 19:30 |
*** mwhahaha has joined #puppet-openstack | 19:31 | |
*** nibalizer has joined #puppet-openstack | 19:31 | |
*** wolfe.freenode.net sets mode: +o mwhahaha | 19:31 | |
*** hjensas has joined #puppet-openstack | 19:32 | |
*** hjensas has joined #puppet-openstack | 19:32 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: deploy RabbitMQ with IPv6 binding https://review.openstack.org/286788 | 19:32 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: refactorize SSL configuration https://review.openstack.org/286767 | 19:32 |
*** fc__ has quit IRC | 19:33 | |
*** fc__ has joined #puppet-openstack | 19:33 | |
*** delattec has quit IRC | 19:44 | |
*** delattec has joined #puppet-openstack | 19:47 | |
EmilienM | 8.0.0b1 is out | 19:51 |
EmilienM | our first mitaka release (beta) | 19:51 |
dfisher | yay! | 19:52 |
EmilienM | zigo, jayg: note for packagers ^ | 19:52 |
jayg | EmilienM: thanks | 19:52 |
zigo | EmilienM: Oh !!!!!!!!!! Much love for that! | 19:53 |
zigo | Fantastic. | 19:53 |
zigo | EmilienM: It is JUST ON TIME for me. | 19:53 |
EmilienM | wait, not all modules though | 19:53 |
zigo | EmilienM: I've just finished packaging Fuel for Debian, and I needed to start testing. | 19:53 |
zigo | Though I've seen lots of Ubuntu-ism there already so this will need to be patched first ... | 19:54 |
zigo | EmilienM: 8.0.0b1, and not 8.0.0.0b1 ?!? | 19:57 |
EmilienM | zigo: I respected the tags we currently have | 19:57 |
zigo | EmilienM: You're not following the semantic version scheme? | 19:57 |
zigo | Quite not. | 19:57 |
EmilienM | https://github.com/openstack/puppet-nova/releases | 19:57 |
EmilienM | we == puppet group | 19:57 |
zigo | Oh... | 19:58 |
EmilienM | so if you think that's bad tell it and we'll see if we need to change it | 19:58 |
zigo | EmilienM: Well, that's bad because that's not following what other packages are doing. | 19:58 |
zigo | Normally, you'd add another zero before the release. | 19:58 |
zigo | As in, 8.0.0.0b1, then 8.0.0.0rc1, then 8.0.0 | 19:59 |
EmilienM | zigo: we are following this tag numbers way before openstack agreed on tag conventions | 19:59 |
zigo | If you do 8.0.0b1, it means you'd be release 8.0 later on. | 19:59 |
EmilienM | but I honestly don't care about that, we can change it. | 19:59 |
EmilienM | zigo: http://lists.openstack.org/pipermail/openstack-dev/2016-March/087962.html | 19:59 |
EmilienM | for the list | 19:59 |
zigo | It's just a mater of consistency, and I need to know what to do on my packaging. | 19:59 |
zigo | Will you later release 8.0.0 ? | 19:59 |
zigo | Or 8.0 ? | 19:59 |
EmilienM | 8.0.0 if I follow what we did until now | 20:00 |
EmilienM | but again, we can change that if it's not good | 20:00 |
zigo | Look at the tag for Nova for example: https://github.com/openstack/nova/releases | 20:00 |
EmilienM | I don't care about tags | 20:00 |
zigo | They have one zero more ... | 20:00 |
zigo | That's a python stuff though. | 20:00 |
EmilienM | yeah | 20:01 |
zigo | I honestly don't care that much, because anyway I have to re-tag on top. | 20:01 |
EmilienM | we are puppet guys ! | 20:01 |
zigo | Meaning that if you tag 8.0.0b1, I will retag it as 8.0.0_b1, so that it becomes 8.0.0~b1 later. | 20:01 |
zigo | So, as long as I know what the future will be, what you did is ok for me! :P | 20:02 |
EmilienM | cool | 20:02 |
EmilienM | we all want to make zigo happy | 20:03 |
zigo | :) | 20:03 |
* zigo goes to sleep, 4am here... | 20:04 | |
*** tiswanso has joined #puppet-openstack | 20:08 | |
*** jaosorior has quit IRC | 20:12 | |
*** francois1 has quit IRC | 20:42 | |
*** ikkeT has left #puppet-openstack | 20:43 | |
EmilienM | crinkle: do you plan to deploy infracloud with mysql/ssl too? | 20:49 |
crinkle | EmilienM: mysql only listens locally so ssl isn't needed | 20:52 |
crinkle | in our setup | 20:52 |
EmilienM | indeed, it makes sense | 20:52 |
EmilienM | crinkle: I think you don't need the enable_ssl in ::keystone class, it's for eventlet | 20:54 |
EmilienM | but I'm not sure | 20:54 |
crinkle | EmilienM: i think you're right but i'm also not sure | 20:55 |
EmilienM | it does not hurt to keep it imho | 20:55 |
*** jayg is now known as jayg|g0n3 | 21:19 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: CI run with RDO trunk - do not merge https://review.openstack.org/286845 | 21:22 |
*** johnmilton has quit IRC | 21:28 | |
mfisch | EmilienM: ... mfisch CI found another issue | 21:37 |
EmilienM | mfisch: shoot | 21:38 |
mfisch | neutron really needs python-keystoneclient I think | 21:38 |
mfisch | I get failure to auth tokens | 21:38 |
mfisch | still digging but thats my initial take | 21:38 |
mfisch | yep, validated | 21:41 |
mfisch | does our CI run any neutron calls at all? | 21:41 |
*** derekh has joined #puppet-openstack | 21:41 | |
EmilienM | mfisch: lol we are running tempest for months | 21:42 |
EmilienM | you have been reviewing my patches | 21:42 |
EmilienM | and you're asking me if we test neutron | 21:43 |
mfisch | well | 21:43 |
EmilienM | mfisch: https://github.com/openstack/puppet-openstack-integration#description | 21:43 |
mfisch | so somewhere in those modules you must have an explicit dep on keystone::client | 21:43 |
mfisch | right I know about those... | 21:43 |
EmilienM | we run single node | 21:43 |
mfisch | aha | 21:43 |
mwhahaha | it's cause we install keystone on the same host | 21:43 |
mfisch | that explains | 21:43 |
EmilienM | so obviously we have the package installed | 21:43 |
EmilienM | but I guess you don't | 21:43 |
EmilienM | so you found a bug | 21:43 |
mfisch | yeah I will fix puppet-neutron | 21:44 |
EmilienM | but IMHO that bug should be fixed in packaging. | 21:44 |
mfisch | well trye | 21:44 |
mfisch | true | 21:44 |
mwhahaha | it's jsut a revert of https://review.openstack.org/#/c/278213/ | 21:44 |
EmilienM | it's part of OpenStack requirements | 21:44 |
mfisch | no | 21:44 |
mwhahaha | no? | 21:44 |
mfisch | mwhahaha: because that class is a no-op now | 21:44 |
EmilienM | each OpenStack projects manages deps regarding OpenStack requirements | 21:44 |
EmilienM | and packagers should follow that | 21:44 |
mwhahaha | ah | 21:44 |
EmilienM | RDO follows it FWIW | 21:44 |
mfisch | I think an upstream ubuntu bug + work-around in puppet-neutron | 21:45 |
EmilienM | I agree | 21:45 |
mfisch | ok | 21:45 |
mfisch | will do | 21:45 |
EmilienM | mfisch: you made my day | 21:45 |
EmilienM | thank you so much | 21:45 |
mfisch | pas ne probleme | 21:46 |
EmilienM | mfisch: if you want to look what puppet-neutron actually test, please look http://status.openstack.org/openstack-health/#/g/project/openstack~2Fpuppet-neutron?groupKey=project&resolutionKey=hour | 21:46 |
mfisch | k | 21:46 |
EmilienM | mfisch: we run tempest scenarios, neutron API calls, etc etc etc | 21:47 |
mfisch | I do know about the tests my question was more like could you tell me offhand without me looking | 21:47 |
mfisch | being lazy ;) | 21:47 |
EmilienM | grr | 21:47 |
mfisch | you know how lazy us americans are ! | 21:48 |
EmilienM | mfisch: have you ever been in Europe? :-) | 21:49 |
mwhahaha | i want european holidays :( | 21:49 |
mfisch | lol | 21:49 |
EmilienM | (on my side, I just want holidays) :-) | 21:50 |
mwhahaha | when i worked with guys from the UK and summer rolled around they were like going on holiday for a month later | 21:50 |
openstackgerrit | Matt Fischer proposed openstack/puppet-neutron: Workaround package bug and include keystone client https://review.openstack.org/286854 | 21:50 |
mfisch | mwhahaha: they're enjoying their month of sun | 21:50 |
mfisch | There's the work-around | 21:50 |
_ody | Martin Millnert | 21:53 |
_ody | ?? anyone know what is handle is? | 21:53 |
*** foxhunt_away is now known as foxhunt72 | 21:54 | |
*** foxhunt72 is now known as foxhunt_away | 21:59 | |
*** trown is now known as trown|outtypewww | 21:59 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-glance: swift backend: don't put / in the default auth url https://review.openstack.org/286859 | 22:05 |
EmilienM | dmsimard: ^ | 22:05 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: CI run with RDO trunk - do not merge https://review.openstack.org/286845 | 22:06 |
EmilienM | testing it with latest RDO trunk ^ | 22:06 |
dmsimard | EmilienM: and you'll rebase your CI on top ? | 22:06 |
dmsimard | yeah ok | 22:06 |
EmilienM | next bug plese! | 22:06 |
dmsimard | EmilienM: I'm not sure it's that | 22:06 |
dmsimard | EmilienM: let's not get ahead of ourselves :P | 22:06 |
EmilienM | dmsimard: yeah? you tested it :-P | 22:06 |
dmsimard | been trying to find an explanation for the issue in the code | 22:07 |
*** dprince has quit IRC | 22:08 | |
dmsimard | EmilienM: the only thing I can see is this.. https://github.com/openstack/glance_store/commit/14eac131845bf2762668d665d3283b5abd87eeb2#diff-132c7ed276472dce48746e30e2ffe6daR773 | 22:08 |
dmsimard | notice how there's @<AUTH_ADDRESS>/<CONTAINER> | 22:08 |
dmsimard | so does it break because it does @127.0.0.1/v2.0//<CONTAINER> or something, dunno | 22:08 |
*** francois has joined #puppet-openstack | 22:11 | |
*** tiswanso has quit IRC | 22:12 | |
openstackgerrit | Matt Fischer proposed openstack/puppet-keystone: WIP Keystone hooks support https://review.openstack.org/283898 | 22:23 |
*** brandon has joined #puppet-openstack | 22:31 | |
EmilienM | crinkle: why don't you put keystone ssl certif in /etc/keystone http://git.openstack.org/cgit/openstack-infra/puppet-infracloud/tree/manifests/controller.pp#n147 ? | 22:35 |
EmilienM | I was wondering if you had a specific reason or if I could do that | 22:35 |
EmilienM | not certif, sorry. The key | 22:36 |
*** angdraug has quit IRC | 22:36 | |
*** dgurtner has quit IRC | 22:39 | |
crinkle | EmilienM: no particular reason...it would probably make more sense to put it in /etc/keystone since it's already owned by the keystone user | 22:40 |
EmilienM | ok thanks | 22:40 |
crinkle | i think i was thinking it needed to be readable by the www-data user | 22:40 |
EmilienM | crinkle: I don't think so, the wsgi process is run under keystone:keystone | 22:41 |
*** jtomasek has quit IRC | 22:41 | |
crinkle | yeah so putting it in /etc/ssl was probably silly | 22:42 |
EmilienM | https://github.com/openstack/puppet-keystone/blob/master/manifests/wsgi/apache.pp#L235-L236 | 22:42 |
EmilienM | no problem, just checking | 22:42 |
EmilienM | I try to avoid to use /etc/ssl if possible, because we run SElinux and I'm aware about some rules preventing using it from some process | 22:43 |
crinkle | ah yeah that would make things hard | 22:44 |
EmilienM | crinkle: I also noticed you don't run metadata agent, is it on purpose? | 22:44 |
EmilienM | neutron metadata agent* | 22:44 |
*** dhollinger has quit IRC | 22:46 | |
crinkle | EmilienM: yes, we use configdrive instead | 22:46 |
EmilienM | ok, indeed metadata is not needed | 22:46 |
EmilienM | dmsimard: still broken, even with the puppet-glance patch | 22:48 |
EmilienM | mwhahaha: I'm holding https://review.openstack.org/#/c/286859/ -- I thought it would help but in fact it's not. | 22:51 |
mwhahaha | :( | 22:52 |
*** delattec has quit IRC | 22:57 | |
*** delattec has joined #puppet-openstack | 23:00 | |
*** haplo37 has quit IRC | 23:14 | |
*** rahulait has joined #puppet-openstack | 23:18 | |
*** baker has quit IRC | 23:25 | |
dmsimard | EmilienM: I don't know why it works for packstack and not for you then | 23:26 |
dmsimard | hell, I even got both scenarios passing now https://review.openstack.org/#/c/286864/ | 23:26 |
EmilienM | dmsimard: I'll compare both configs | 23:26 |
EmilienM | dmsimard: honestly: I would enable voting for packstack NOW before it breaks again | 23:27 |
dmsimard | EmilienM: I have a review in project-config to add scenario003 | 23:27 |
Anticimex | _ody: I'm Martin Millnert | 23:30 |
*** ducttape_ has quit IRC | 23:38 | |
*** mdorman has quit IRC | 23:40 | |
_ody | Anticimex: Left you a note on the puppet-horizon ticket. Let me know if you want me to fix it. The issue is my fault. | 23:42 |
Anticimex | I just responded | 23:43 |
Anticimex | I don't mind fixing it myself, would appreciate the learning of the tests I haven't written. | 23:43 |
Anticimex | but regardless, what's the proper way to avoid the described *possible* error? do our "one-liner" if/else ok? | 23:44 |
Anticimex | no idea what the proper logic should be on testing this though? | 23:45 |
Anticimex | i guess, attempting to provoke the error and checking that the puppet code didn't produce the apache::vhost::redirect -variables that would cause a loop | 23:45 |
EmilienM | Anticimex: hopefully the work on having a SSL scenario in our CI will help to catch more bugs | 23:46 |
EmilienM | iiuc the bug | 23:46 |
Anticimex | it's not ssl specific though, afaict | 23:46 |
EmilienM | oh ok | 23:46 |
Anticimex | apache::vhost doesn't avoid you configuring '/' -> '/' redirects | 23:47 |
Anticimex | one could call that a root problem perhaps :) | 23:47 |
Anticimex | you need to set $root_url to '/' to get the error | 23:48 |
Anticimex | as i wrote in the bug, we did a functionally identical commit in our puppet-horizon fork last june and discovered this then | 23:48 |
Anticimex | but now i'm trying to close forks, and didn't need to attempt upstreaming that since _ody had just done so | 23:49 |
_ody | Anticimex: Ah. I took the approach that if someone wants to have a dashboard without anything after / they set root_url to ''...this is what I did when I forked puppet-horizon for out production cloud. I do not remember my reasoning. | 23:49 |
_ody | It is possible that '' just required a modify fewer things in the module's codebase. | 23:50 |
*** imcsk8 has quit IRC | 23:50 | |
*** imcsk8 has joined #puppet-openstack | 23:50 | |
_ody | We can totall go the other direction and expect people to provide a / instead of ''. | 23:50 |
_ody | Ugh. Can't remember at all why I chose that. | 23:50 |
_ody | Probably something to do with the way I think about URLs, like how one doesn't actual ever indicate the trailing slash when the provide someone a URL. | 23:52 |
_ody | We tell our users to go to https://slice.ops.puppetlabs.net. | 23:52 |
Anticimex | just need to avoid having puppetlabs-apache setting up a redirect loop, no opinion on what the best fix is | 23:52 |
_ody | Ok. What ever fixes is it fine by me then. | 23:53 |
Anticimex | your $root_url-configurability commit allows '/' though :-) | 23:53 |
Anticimex | not sure how apache::vhost treats '' vs '/' | 23:53 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to SSL https://review.openstack.org/286899 | 23:54 |
_ody | Quite differently. If you set apache to forward to a wsgi script at /dashboard is is not the same as /dashboard/. | 23:54 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to SSL https://review.openstack.org/286899 | 23:54 |
_ody | '' vs '/' after a raw fqdn is handled a bit differently, fowarding to the script is both situations. | 23:55 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to SSL https://review.openstack.org/286899 | 23:57 |
*** rahulait has quit IRC | 23:58 | |
*** dfisher has quit IRC | 23:59 | |
*** delattec has quit IRC | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!