*** openstack has joined #puppet-openstack | 00:10 | |
*** ducttape_ has quit IRC | 00:12 | |
*** openstackgerrit has quit IRC | 00:17 | |
*** openstackgerrit has joined #puppet-openstack | 00:18 | |
*** rahulait has quit IRC | 00:25 | |
*** rstarmer has quit IRC | 00:26 | |
*** guessi has joined #puppet-openstack | 00:27 | |
*** morazi has quit IRC | 00:29 | |
*** baker has quit IRC | 00:29 | |
*** xarses has quit IRC | 00:31 | |
*** baker has joined #puppet-openstack | 00:34 | |
*** brandon has quit IRC | 00:38 | |
*** fc___ has joined #puppet-openstack | 00:44 | |
*** michchap has joined #puppet-openstack | 00:45 | |
*** mwhahaha_ has joined #puppet-openstack | 00:46 | |
*** saneax is now known as saneax_AFK | 00:47 | |
*** starmer has joined #puppet-openstack | 00:47 | |
*** starmer is now known as rstarmer | 00:47 | |
*** gchamoul has quit IRC | 00:49 | |
*** mwhahaha has quit IRC | 00:49 | |
*** fc__ has quit IRC | 00:49 | |
*** finchd has quit IRC | 00:49 | |
*** michchap_ has quit IRC | 00:49 | |
*** sbadia has quit IRC | 00:49 | |
*** johnmilton has quit IRC | 00:49 | |
*** fc___ is now known as fc__ | 00:49 | |
*** sbadia_ has joined #puppet-openstack | 00:49 | |
*** mwhahaha_ is now known as mwhahaha | 00:49 | |
*** sbadia_ is now known as sbadia | 00:49 | |
*** finchd-also has joined #puppet-openstack | 00:51 | |
*** johnmilton has joined #puppet-openstack | 00:52 | |
*** gchamoul has joined #puppet-openstack | 00:52 | |
*** finchd-also is now known as finchd | 01:02 | |
*** ducttape_ has joined #puppet-openstack | 01:08 | |
*** angdraug has quit IRC | 01:09 | |
*** ducttape_ has quit IRC | 01:14 | |
*** ducttape_ has joined #puppet-openstack | 01:15 | |
*** rstarmer has quit IRC | 01:23 | |
*** guessi has left #puppet-openstack | 01:33 | |
*** ducttape_ has quit IRC | 01:45 | |
*** johnmilton has quit IRC | 01:49 | |
*** _ody has quit IRC | 02:38 | |
*** _ody has joined #puppet-openstack | 02:38 | |
*** richm has quit IRC | 02:38 | |
dmsimard | EmilienM: that review is weird | 02:40 |
---|---|---|
*** ilbot3 has quit IRC | 02:45 | |
*** ilbot3 has joined #puppet-openstack | 02:47 | |
*** ducttape_ has joined #puppet-openstack | 03:11 | |
*** ducttape_ has quit IRC | 03:11 | |
EmilienM | dmsimard: looking now | 03:16 |
*** bapalm has quit IRC | 03:24 | |
*** markvoelker has joined #puppet-openstack | 03:29 | |
*** baker_ has joined #puppet-openstack | 03:40 | |
*** baker__ has joined #puppet-openstack | 03:42 | |
*** baker has quit IRC | 03:43 | |
*** bapalm has joined #puppet-openstack | 03:43 | |
*** markvoelker has quit IRC | 03:43 | |
EmilienM | http://www.rabbitmq.com down again, our ci jobs failing again... | 03:45 |
*** baker_ has quit IRC | 03:45 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch Keystone/Glance/Ironic/Nova to SSL https://review.openstack.org/286899 | 03:58 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to IPv6 https://review.openstack.org/287521 | 03:58 |
*** johnmilton has joined #puppet-openstack | 03:59 | |
*** jaosorior has quit IRC | 04:02 | |
*** jaosorior has joined #puppet-openstack | 04:03 | |
*** johnmilton has quit IRC | 04:04 | |
*** v1k0d3n has quit IRC | 04:09 | |
*** johnmilton has joined #puppet-openstack | 04:17 | |
*** saneax_AFK is now known as saneax | 04:25 | |
openstackgerrit | Matt Fischer proposed openstack/puppet-keystone: WIP Keystone hooks support https://review.openstack.org/283898 | 04:29 |
*** v1k0d3n has joined #puppet-openstack | 04:46 | |
*** saneax is now known as saneax_AFK | 04:54 | |
*** fedexo has joined #puppet-openstack | 05:19 | |
*** darkxploit has quit IRC | 05:25 | |
*** darkxploit has joined #puppet-openstack | 05:37 | |
*** jaosorior has quit IRC | 05:40 | |
*** mwhahaha has quit IRC | 05:40 | |
*** fc__ has quit IRC | 05:40 | |
*** mwhahaha has joined #puppet-openstack | 05:46 | |
*** fc__ has joined #puppet-openstack | 05:46 | |
*** jaosorior has joined #puppet-openstack | 05:46 | |
*** jaosorior has quit IRC | 05:46 | |
*** baker__ has quit IRC | 05:47 | |
*** jtomasek has joined #puppet-openstack | 05:53 | |
*** ayoung has quit IRC | 05:53 | |
*** brad[] has quit IRC | 05:56 | |
*** mfisch has quit IRC | 05:56 | |
*** brad[] has joined #puppet-openstack | 05:56 | |
*** mwhahaha has quit IRC | 06:02 | |
*** fc__ has quit IRC | 06:02 | |
*** ayoung has joined #puppet-openstack | 06:04 | |
*** mwhahaha has joined #puppet-openstack | 06:08 | |
*** fc__ has joined #puppet-openstack | 06:08 | |
*** johnmilton has quit IRC | 06:12 | |
*** bapalm has quit IRC | 06:23 | |
*** johnmilton has joined #puppet-openstack | 06:26 | |
*** mfisch has joined #puppet-openstack | 06:27 | |
*** mfisch is now known as Guest38484 | 06:27 | |
*** dgurtner has joined #puppet-openstack | 06:33 | |
*** dgurtner has quit IRC | 06:33 | |
*** dgurtner has joined #puppet-openstack | 06:33 | |
*** bapalm has joined #puppet-openstack | 06:42 | |
*** v1k0d3n has joined #puppet-openstack | 06:47 | |
*** v1k0d3n has quit IRC | 06:52 | |
*** jtomasek has quit IRC | 06:53 | |
*** saneax_AFK is now known as saneax | 06:58 | |
*** fedexo has quit IRC | 06:58 | |
dgurtner | dmsimard: ping re: https://review.openstack.org/#/c/280351 | 07:09 |
*** toMeloos has joined #puppet-openstack | 07:14 | |
*** dgurtner has quit IRC | 07:32 | |
*** rcernin has joined #puppet-openstack | 07:33 | |
*** dgurtner has joined #puppet-openstack | 07:58 | |
*** dgurtner has quit IRC | 08:00 | |
*** dgurtner has joined #puppet-openstack | 08:00 | |
*** rain has joined #puppet-openstack | 08:08 | |
*** rain is now known as Guest78631 | 08:09 | |
*** Guest78631 is now known as leanderthal | 08:09 | |
*** paramite has joined #puppet-openstack | 08:14 | |
openstackgerrit | Matt Fischer proposed openstack/puppet-keystone: WIP Keystone hooks support https://review.openstack.org/283898 | 08:23 |
*** jpena|zzz is now known as jpena | 08:27 | |
*** simonmcc has quit IRC | 08:36 | |
*** rhefner has quit IRC | 08:36 | |
*** holser_ has quit IRC | 08:36 | |
*** kgalanov has quit IRC | 08:36 | |
*** foxhunt_away is now known as foxhunt72 | 08:37 | |
*** simonmcc has joined #puppet-openstack | 08:39 | |
*** rhefner has joined #puppet-openstack | 08:40 | |
*** kgalanov has joined #puppet-openstack | 08:42 | |
*** beddari has quit IRC | 08:43 | |
*** chem has joined #puppet-openstack | 08:46 | |
*** v1k0d3n has joined #puppet-openstack | 08:48 | |
*** holser_ has joined #puppet-openstack | 08:50 | |
*** jaosorior has joined #puppet-openstack | 08:52 | |
*** v1k0d3n has quit IRC | 08:53 | |
*** igajsin1 has joined #puppet-openstack | 09:00 | |
*** jaosorior has quit IRC | 09:09 | |
*** jaosorior has joined #puppet-openstack | 09:09 | |
*** jistr has joined #puppet-openstack | 09:09 | |
*** _skolekonov is now known as skolekonov | 09:14 | |
*** openstackgerrit has quit IRC | 09:30 | |
*** openstackgerrit_ has joined #puppet-openstack | 09:30 | |
*** openstackgerrit_ is now known as openstackgerrit | 09:31 | |
*** openstackgerrit has quit IRC | 09:31 | |
*** openstackgerrit_ has joined #puppet-openstack | 09:32 | |
*** openstackgerrit_ is now known as openstackgerrit | 09:32 | |
*** openstackgerrit has quit IRC | 09:32 | |
*** openstackgerrit_ has joined #puppet-openstack | 09:33 | |
*** openstackgerrit_ is now known as openstackgerrit | 09:33 | |
*** openstackgerrit has quit IRC | 09:33 | |
*** openstackgerrit_ has joined #puppet-openstack | 09:34 | |
*** openstackgerrit_ is now known as openstackgerrit | 09:34 | |
*** _degorenko|afk is now known as degorenko | 09:42 | |
*** mkarpin has joined #puppet-openstack | 09:54 | |
*** toMeloos has quit IRC | 10:07 | |
openstackgerrit | Ricardo Rocha proposed openstack/puppet-magnum: Add conductor install and configuration. https://review.openstack.org/275223 | 10:10 |
*** iberezovskiy has joined #puppet-openstack | 10:11 | |
*** derekh has joined #puppet-openstack | 10:13 | |
openstackgerrit | Ricardo Rocha proposed openstack/puppet-magnum: Add conductor install and configuration. https://review.openstack.org/275223 | 10:13 |
*** jtomasek has joined #puppet-openstack | 10:16 | |
*** paramite is now known as paramite|afk | 10:26 | |
*** paramite|afk is now known as paramite | 10:28 | |
*** rstarmer has joined #puppet-openstack | 10:28 | |
*** beddari has joined #puppet-openstack | 10:37 | |
openstackgerrit | Athlan-Guyot sofer proposed openstack/puppet-keystone: Missing dependency for domain config. https://review.openstack.org/291094 | 10:39 |
openstackgerrit | Merged openstack/puppet-openstack-cookiecutter: db.pp: fix lint issue https://review.openstack.org/290899 | 10:48 |
*** v1k0d3n has joined #puppet-openstack | 10:48 | |
*** paramite is now known as paramite|afk | 10:50 | |
*** bapalm has quit IRC | 10:51 | |
*** v1k0d3n has quit IRC | 10:53 | |
*** rstarmer has quit IRC | 11:06 | |
*** johnmilton has quit IRC | 11:08 | |
*** bapalm has joined #puppet-openstack | 11:08 | |
*** magicboiz has joined #puppet-openstack | 11:10 | |
*** paramite|afk is now known as paramite | 11:16 | |
*** igajsin1 has left #puppet-openstack | 11:17 | |
*** bapalm has quit IRC | 11:24 | |
*** trown|outtypewww is now known as trown | 11:27 | |
openstackgerrit | Jerzy Mikolajczak proposed openstack/puppet-neutron: Deprecate API parameters from metadata agent https://review.openstack.org/282276 | 11:31 |
*** paramite is now known as paramite|afk | 11:31 | |
*** guessi has joined #puppet-openstack | 11:32 | |
openstackgerrit | Merged openstack/puppet-tripleo: Make OpenStack service ports configurable in HAProxy https://review.openstack.org/287961 | 11:42 |
*** bapalm has joined #puppet-openstack | 11:44 | |
*** magicboiz has left #puppet-openstack | 11:49 | |
*** paramite|afk is now known as paramite | 11:51 | |
*** trown is now known as trown|outtypewww | 11:56 | |
*** jaosorior has quit IRC | 12:02 | |
*** jaosorior has joined #puppet-openstack | 12:03 | |
openstackgerrit | Merged openstack/puppet-openstacklib: Fix type in os_service_default fact https://review.openstack.org/290587 | 12:17 |
*** johnmilton has joined #puppet-openstack | 12:30 | |
openstackgerrit | Merged openstack/puppet-glance: spec: Add Unit Tests for glance paste_ini types/providers https://review.openstack.org/290437 | 12:36 |
*** paramite is now known as paramite|afk | 12:39 | |
*** v1k0d3n has joined #puppet-openstack | 12:41 | |
*** paramite|afk is now known as mmagr | 12:42 | |
*** mmagr is now known as paramite | 12:42 | |
EmilienM | good morning folks! | 12:45 |
openstackgerrit | Merged openstack/puppet-tempest: Add parameter to configure enabled Sahara plugins https://review.openstack.org/290049 | 12:50 |
openstackgerrit | Merged openstack/puppet-openstack-integration: Update glance::api stores parameters https://review.openstack.org/287477 | 12:50 |
*** trown|outtypewww is now known as trown | 12:52 | |
openstackgerrit | Jerzy Mikolajczak proposed openstack/puppet-neutron: Deprecate API parameters from metadata agent https://review.openstack.org/282276 | 12:53 |
*** Guest8646 is now known as zeus | 12:56 | |
*** zeus has quit IRC | 12:56 | |
*** zeus has joined #puppet-openstack | 12:56 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch Keystone/Glance/Ironic/Nova to SSL https://review.openstack.org/286899 | 12:57 |
*** cdelatte has quit IRC | 12:57 | |
*** dprince has joined #puppet-openstack | 13:01 | |
*** ducttape_ has joined #puppet-openstack | 13:12 | |
openstackgerrit | Radoslaw Smigielski proposed openstack/puppet-nova: Add missing block_device_allocate_* params in nova.conf https://review.openstack.org/290496 | 13:13 |
*** jayg|g0n3 is now known as jayg | 13:13 | |
degorenko | morning :) | 13:14 |
*** morazi has joined #puppet-openstack | 13:15 | |
EmilienM | degorenko: can you look https://review.openstack.org/#/c/213315/ again please? | 13:18 |
EmilienM | degorenko: and https://review.openstack.org/#/c/289562/ | 13:19 |
degorenko | EmilienM, looking | 13:19 |
*** cdelatte has joined #puppet-openstack | 13:20 | |
*** paramite is now known as paramite|afk | 13:21 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch Keystone/Glance/Ironic/Nova to SSL https://review.openstack.org/286899 | 13:22 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: Deploy Nova API in WSGI with Apache https://review.openstack.org/289562 | 13:22 |
EmilienM | degorenko: I had to rebase it :( sorry | 13:22 |
degorenko | EmilienM, i have on question to you :) that's probably not exactly question, some kind of request or pray :D | 13:23 |
degorenko | and not only to you, but to all cores | 13:23 |
EmilienM | shoot | 13:23 |
degorenko | EmilienM, as you know we are running fuel ci now, it should comment on all patches soon | 13:24 |
degorenko | and if you see broken fuel ci, can you wait for ~1 hour and do not merge such change please? | 13:24 |
degorenko | just for my team find out reason for failing | 13:24 |
EmilienM | degorenko: I suggest to do like we do with tripleo | 13:25 |
EmilienM | if the job is failing, not ignore it, but telling tripleo/fuel folks the job is failing | 13:26 |
EmilienM | and if possible, looking at logs | 13:26 |
EmilienM | the more logs you provide, more people will try to find the root cause | 13:26 |
degorenko | yeah, that's will be cool :) | 13:26 |
*** ducttape_ has quit IRC | 13:29 | |
degorenko | EmilienM, for 213315 have only one question before vote it | 13:29 |
EmilienM | degorenko: go ahead | 13:30 |
degorenko | do we really need array by default for enabled_api and then transform it to string anyway? :) | 13:30 |
EmilienM | the array makes things cleaner to use "in" | 13:31 |
*** paramite|afk is now known as paramite | 13:31 | |
*** fwdit has joined #puppet-openstack | 13:31 | |
degorenko | EmilienM, can you point me where we are using 'in' ? | 13:31 |
EmilienM | and the second this is I don't like parameters that are arrays but in fact puppet give strings | 13:31 |
EmilienM | https://review.openstack.org/#/c/213315/34/manifests/api.pp | 13:32 |
EmilienM | L255 | 13:32 |
degorenko | ah | 13:32 |
degorenko | see now | 13:32 |
degorenko | okay :) | 13:32 |
EmilienM | well, it works without array | 13:32 |
EmilienM | but imho it's better with array | 13:32 |
degorenko | just question 'why it is array?' | 13:32 |
EmilienM | it makes sense to me to give a list of APIs we want to enable | 13:32 |
degorenko | agree :) | 13:32 |
openstackgerrit | Jerzy Mikolajczak proposed openstack/puppet-neutron: Deprecate API parameters from metadata agent https://review.openstack.org/282276 | 13:33 |
*** jpena is now known as jpena|lunch | 13:40 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to IPv6 https://review.openstack.org/287521 | 13:44 |
dmsimard | dgurtner: it's a fine use case, just not how I'd (personally) do it | 13:44 |
dmsimard | +A | 13:44 |
dmsimard | EmilienM: ^ | 13:44 |
*** rmart04 has joined #puppet-openstack | 13:44 | |
EmilienM | dmsimard: thanks! I'm interested to know how you would handle this, regarding current puppet-ceph design | 13:45 |
*** saneax is now known as saneax_AFK | 13:45 | |
dmsimard | Would've set the public_addr in hiera for ceph::profile::mon, though ceph::profile::mon is limitative (on purpose) as it has no parameters | 13:46 |
dmsimard | ::params for me is really for constants to be re-used in other places | 13:46 |
dmsimard | this is one variable for one host /me shrugs | 13:47 |
dmsimard | maybe ceph::profile::mon could take a hash of parameters so it could wrap around anything ceph::mon provides | 13:47 |
EmilienM | I would like to see that kind of re-design happening, indeed | 13:48 |
dmsimard | kind of like ceph::mons | 13:48 |
dmsimard | https://github.com/openstack/puppet-ceph/blob/master/manifests/mons.pp | 13:48 |
*** delattec has joined #puppet-openstack | 13:49 | |
*** degorenko is now known as _degorenko|afk | 13:49 | |
*** markvoelker has joined #puppet-openstack | 13:50 | |
*** cdelatte has quit IRC | 13:52 | |
*** baker has joined #puppet-openstack | 13:54 | |
*** richm has joined #puppet-openstack | 13:55 | |
*** jaosorior has quit IRC | 13:59 | |
*** openstackgerrit has quit IRC | 14:03 | |
*** openstackgerrit_ has joined #puppet-openstack | 14:04 | |
*** openstackgerrit_ is now known as openstackgerrit | 14:04 | |
*** openstackgerrit has quit IRC | 14:04 | |
*** openstackgerrit_ has joined #puppet-openstack | 14:05 | |
*** openstackgerrit_ is now known as openstackgerrit | 14:05 | |
*** openstackgerrit has quit IRC | 14:05 | |
*** openstackgerrit_ has joined #puppet-openstack | 14:06 | |
*** openstackgerrit_ is now known as openstackgerrit | 14:06 | |
*** openstackgerrit has quit IRC | 14:07 | |
*** openstackgerrit_ has joined #puppet-openstack | 14:07 | |
*** openstackgerrit_ is now known as openstackgerrit | 14:08 | |
*** openstackgerrit has quit IRC | 14:08 | |
*** openstackgerrit_ has joined #puppet-openstack | 14:08 | |
*** openstackgerrit_ is now known as openstackgerrit | 14:09 | |
*** openstackgerrit has quit IRC | 14:09 | |
*** openstackgerrit_ has joined #puppet-openstack | 14:09 | |
*** openstackgerrit_ is now known as openstackgerrit | 14:10 | |
*** Guest41345 has joined #puppet-openstack | 14:10 | |
*** baker has quit IRC | 14:12 | |
openstackgerrit | Merged openstack/puppet-glance: api: allow ssl communications with registry https://review.openstack.org/290760 | 14:35 |
openstackgerrit | Merged openstack/puppet-ceph: Allow setting of public_addr from ::profile::mon and ::mon https://review.openstack.org/280351 | 14:35 |
*** ducttape_ has joined #puppet-openstack | 14:43 | |
*** jaosorior has joined #puppet-openstack | 14:56 | |
*** _degorenko|afk is now known as degorenko | 14:56 | |
*** bogdando has quit IRC | 14:58 | |
*** emccormick has quit IRC | 15:00 | |
*** dfisher has joined #puppet-openstack | 15:04 | |
*** jpena|lunch is now known as jpena | 15:04 | |
*** fwdit has quit IRC | 15:06 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to IPv6 https://review.openstack.org/287521 | 15:19 |
*** jaosorior has quit IRC | 15:23 | |
EmilienM | degorenko: https://review.openstack.org/#/c/286899/ is passing ! | 15:27 |
EmilienM | I'm working on te ipv6 patch now | 15:27 |
degorenko | :) nice | 15:28 |
EmilienM | degorenko: once 286899 lands, I'll work on scenario001 and scenario003 to have SSL too | 15:28 |
EmilienM | just on one operatingsystem | 15:28 |
*** emccormick has joined #puppet-openstack | 15:31 | |
dmsimard | EmilienM: did you figure out what was causing the jobs to timeout ? | 15:36 |
EmilienM | dmsimard: yes it was a mistake of me | 15:36 |
EmilienM | dmsimard: I did something weird where all tempest tests were running | 15:37 |
EmilienM | instead of just a set of them | 15:37 |
EmilienM | so of course jobs took much more than 1h | 15:37 |
dmsimard | It was nonsense that SSL would've added >30 minutes of overhead for the little amount of requests tempest does | 15:37 |
EmilienM | yeah | 15:37 |
* EmilienM facepalm | 15:37 | |
dmsimard | fwiw | 15:37 |
dmsimard | I found that CentOS VMs have been running without any swap for a while | 15:38 |
dmsimard | I have a review in progress to fix it | 15:38 |
EmilienM | i've seen that | 15:38 |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to IPv6 https://review.openstack.org/287521 | 15:42 |
*** paramite is now known as paramite|afk | 15:43 | |
*** darkxploit has quit IRC | 15:43 | |
dmsimard | EmilienM: so ipv6 is available from the -infra VMs ? | 15:43 |
dmsimard | or you're just using ::1 | 15:44 |
*** paramite|afk is now known as paramite | 15:46 | |
*** baker has joined #puppet-openstack | 15:46 | |
EmilienM | dmsimard: ::1 | 15:46 |
EmilienM | dmsimard: the goal is to test basic ipv6 deployment | 15:47 |
dmsimard | ok | 15:47 |
EmilienM | the most common failure we see in puppet are brackets or not brackets in parameters | 15:47 |
*** angdraug has joined #puppet-openstack | 15:52 | |
*** xarses has joined #puppet-openstack | 15:54 | |
*** baker has quit IRC | 15:55 | |
*** jistr has quit IRC | 15:59 | |
*** paramite has quit IRC | 16:00 | |
*** jtomasek has quit IRC | 16:00 | |
*** dgurtner has quit IRC | 16:05 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to IPv6 https://review.openstack.org/287521 | 16:08 |
openstackgerrit | Merged openstack/puppet-octavia: puppet-octavia: Initial commit https://review.openstack.org/290892 | 16:17 |
*** yottatsa has joined #puppet-openstack | 16:18 | |
*** leanderthal has quit IRC | 16:24 | |
chem | EmilienM: would it be possible for me to get bug triage rights on puppet-keystone ? | 16:24 |
chem | mjblack: don't know if you had time to check on https://review.openstack.org/#/c/289995/, but I updated it and asked for clarification on the keystone side there : https://bugs.launchpad.net/keystone/+bug/1555629 | 16:27 |
openstack | Launchpad bug 1555629 in OpenStack Identity (keystone) "v3/users reports all users in all domains excepts when domain_specific_drivers_enabled is set to true." [Undecided,New] | 16:27 |
chem | mjblack: whatever the outcome of the "bug" in keystone, would you mind if I takeover the patch as the solution will be trickier than just adding the the default domain | 16:28 |
mjblack | chem: actually I was about to do a test to see if what I was thinking is correct before I posted a response | 16:28 |
mjblack | one concern is that iterating over all domains might not be possible | 16:29 |
chem | mjblack: why ? | 16:29 |
mjblack | when domain specific drivers enabled is set to false, all domains share the same driver I believe (about to test that out) | 16:29 |
mjblack | so if someone has sql for openstack services, and ldap for users, it makes no sense to iterate over all domains to make sure the openstack service accounts exist | 16:30 |
mjblack | but I also wanted to test and make sure the admin user can see other domains too | 16:31 |
*** foxhunt72 is now known as foxhunt_away | 16:32 | |
chem | mjblack: in a single domain driver context, that's for sure. In the multi domain, it can even see the project of all domains, only user seems to be a problem and the 401 make no sense when using the admin token | 16:33 |
EmilienM | chem: yes | 16:33 |
chem | mjblack: that's why I open the bug on keystone side, as I don't really understand the logic of this behaviour, do you ? | 16:34 |
mjblack | sort of | 16:34 |
chem | EmilienM: thanks | 16:34 |
mjblack | or at least I think I do | 16:34 |
mjblack | I think no matter what projects have to exist in sql | 16:34 |
mjblack | but users do not need to exist in sql | 16:34 |
EmilienM | chem: done, and mwhahaha also | 16:35 |
chem | mjblack humm ... oki, that makes kind of sense. But this kind of internal stuff should be shielded from the user I think | 16:36 |
mjblack | one would hope :) | 16:36 |
chem | mjblack: hehe, anyway thanks for the technical explanation. | 16:36 |
mjblack | in the meantime though, it creates a problem with using puppet-keystone | 16:36 |
chem | mjblack: yeap definitively. | 16:37 |
chem | mjblack: my idea was keep the current behavior for the common case. Detect the multi domain backend case and iterate on all domains to get the list of user | 16:38 |
mjblack | the other problem with iterating over domains in the prefetch is it is possible to break if the user list is large | 16:38 |
mjblack | especially if its pointing to a corporate AD of a large company :D | 16:38 |
chem | mjblack I see your point ... so maybe this will require disabling prefetch altogether! | 16:40 |
mjblack | but if you do want to continue with the iterating over domains, my suggestion would be to detect domains that are using sql | 16:40 |
mjblack | that is a good point, prefetch for keystone_user might be the way to handle it | 16:40 |
chem | mjblack: the thing is that prefetch need *all* user, as they will be duplicated if not returned by the prefetch step. It's a all or nothing stuff. | 16:41 |
mjblack | yeah and keystone sometimes doesnt have uniqueness constraints | 16:41 |
chem | mjblack: duplicated or error trying trying to re-create them | 16:41 |
chem | mjblack: the uniqueness here, is user/domain tuple | 16:42 |
mjblack | yeah | 16:42 |
*** ducttape_ has quit IRC | 16:42 | |
chem | mjblack: it's working properly with keystone_user resource | 16:42 |
chem | mjblack: you can have user_1/domain_1 and user_1/domain_2, np | 16:43 |
mjblack | well I meant the uniqueness problem more specifically with endpoints :D | 16:43 |
mjblack | we are plagued with duplicated endpoints being created by the provider | 16:43 |
chem | mjblack: endpoints ... that's another story | 16:44 |
mjblack | lol yeh | 16:44 |
chem | mjblack: backward comptatibilty plagued us... do you have a bug report on this one ? | 16:44 |
mjblack | but keystone doesnt have uniqueness constraints there | 16:44 |
mjblack | for endpoints? | 16:44 |
chem | mjblack: yep for endpoints | 16:45 |
mjblack | nope, didnt put one in because we're still on icehouse | 16:45 |
mjblack | havent seen if the issue is still there in liberty | 16:45 |
chem | mjblack: ack | 16:45 |
chem | mjblack: "but keystone doesnt have uniqueness constraints there" I don't get this one | 16:45 |
mjblack | so for example | 16:46 |
mjblack | I can create an endpoint public url with the same url in the same region | 16:46 |
mjblack | with the same service | 16:46 |
mjblack | my experience was with havana/icehouse | 16:46 |
chem | mjblack: ah, endpoints ... not keystone_user | 16:47 |
mjblack | yeah | 16:47 |
mjblack | sorry it was me taking a jab at keystone ;) | 16:47 |
chem | mjblack: hehe, np | 16:47 |
mjblack | chem: so to make sure, you're taking over the bug? you want me to cancel my review? | 16:48 |
chem | mjblack: endpoint code handling has changed a lot, and I wasn't born when puppet-keystone icehouse was created, so I cannot help easily here | 16:48 |
chem | mjblack: I was just an offer, if you feel like : 1 my idea is ok (check the case somehow and iterate) 2 you don't want to do it yourself | 16:49 |
chem | mjblack: or remove prefetch altogether from keystone_user | 16:49 |
*** rochaporto has joined #puppet-openstack | 16:49 | |
mjblack | I'm fine either way, the only issue with my change is I'm still trying to figure out how to update the unit test so it doesnt fail | 16:50 |
chem | mjblack: the thing is that as it is it breaks the "normal" usage case, listing user only in the default domain, so it cannot get in. | 16:50 |
mjblack | well | 16:51 |
mjblack | if the keystone devs fix your bug report, it might just be a moot point | 16:51 |
mjblack | but prefetch on ldap will be an issue though | 16:52 |
chem | mjblack: if it's for the learning xp, I can save some time tomorrow to check how it would have been done if we would have. And I agree the AD stuff is bad. I think it should be ported to mailing list attention ... but as I see it keystone_user prefetch is doomed | 16:53 |
mjblack | chem: btw, openstack ansible does it with passing domain | 16:55 |
chem | mjblack: well ... it doesn't have the prefetch step | 16:55 |
*** ducttape_ has joined #puppet-openstack | 16:55 | |
mjblack | well it sort of does | 16:55 |
mjblack | they have a get user method :D | 16:55 |
chem | mjblack: if you remove the prefetch, then the problem goes away here as well as all users are fqdn | 16:56 |
mjblack | but they basically try to figure out which domain for the user from scope but if it isnt set they fall back to Default | 16:56 |
*** rochaporto has quit IRC | 16:57 | |
mjblack | not sure what you mean by "all users are fqdn"? | 16:57 |
*** rochaporto has joined #puppet-openstack | 16:57 | |
chem | mjblack: full qualified domain name :) | 16:57 |
mjblack | oh you mean like admin@Default? | 16:57 |
chem | mjblack: yeap, for instance | 16:58 |
chem | mjblack: every keystone_user resource will be fqdn and check against the "right" domain. Default is used if the user wasn't explicit about it | 16:58 |
chem | mjblack: every keystone_user resource is fqdn and check against the "right" domain. Default is used if the user wasn't explicit about it | 16:59 |
chem | user -> operator | 16:59 |
*** ducttape_ has quit IRC | 16:59 | |
mjblack | before we remove prefetch, want to see if EmilienM has any concerns about it | 17:00 |
chem | the prefetch is another thing and designed to make stuff happens more quickly. In the AD case, this won't make any sense | 17:00 |
EmilienM | wow the backlog is huge | 17:00 |
chem | mjblack: I think that a public mail on openstack-dev is required :) maybe a blueprint dunno | 17:00 |
mjblack | what backlog? :D | 17:00 |
mjblack | not sure if we need a bp if we just remove prefetch | 17:01 |
mjblack | if we try to do something else, probably needs a bp | 17:01 |
chem | mjblack: bp maybe not, but public mail for sure | 17:02 |
chem | mjblack: I'm being pedentic :) | 17:02 |
chem | mjblack: I can do it (the mail), but it will be tomorrow. If you have any input thoughts you can drop a line here (with chem prepended so I can see it), or in the review. | 17:03 |
chem | bye | 17:04 |
mjblack | ttyl | 17:04 |
*** derekh has quit IRC | 17:05 | |
*** emccormickva has joined #puppet-openstack | 17:05 | |
*** emccormick has quit IRC | 17:05 | |
*** rmart04 has quit IRC | 17:05 | |
*** rochaporto has quit IRC | 17:16 | |
*** emccormickva has quit IRC | 17:20 | |
*** fedexo has joined #puppet-openstack | 17:22 | |
*** rochaporto has joined #puppet-openstack | 17:22 | |
*** ducttape_ has joined #puppet-openstack | 17:25 | |
*** rochaporto has quit IRC | 17:31 | |
*** fedexo has quit IRC | 17:40 | |
*** mgarza has joined #puppet-openstack | 17:40 | |
EmilienM | FYI trunk.rdoproject.org is down, all our centos7 CI jobs should fail | 17:50 |
*** jtomasek has joined #puppet-openstack | 17:51 | |
*** rochaporto has joined #puppet-openstack | 17:53 | |
*** emccormick has joined #puppet-openstack | 17:56 | |
nibalizer | EmilienM: ouch | 17:59 |
crinkle | :'( | 18:07 |
*** rochaporto has quit IRC | 18:10 | |
*** rochaporto has joined #puppet-openstack | 18:11 | |
*** trown is now known as trown|lunch | 18:14 | |
*** rochaporto has quit IRC | 18:18 | |
EmilienM | server should be back, you can do 'recheck' if needed | 18:18 |
*** rochaporto has joined #puppet-openstack | 18:18 | |
degorenko | EmilienM, we have non-working heat with new packages | 18:19 |
rochaporto | quit | 18:19 |
degorenko | issue is not gone | 18:19 |
*** rochaporto has quit IRC | 18:19 | |
degorenko | i tried to update it again via pip | 18:19 |
degorenko | and it works | 18:19 |
EmilienM | degorenko: on ubuntu? | 18:19 |
EmilienM | sigh. | 18:20 |
degorenko | then i downgraded back - works | 18:20 |
degorenko | looks like some dependency | 18:20 |
degorenko | i will try to find out tomorrow | 18:20 |
EmilienM | nice | 18:20 |
EmilienM | let us know! | 18:20 |
degorenko | sure | 18:20 |
degorenko | EmilienM, i will try to take token just via shell | 18:20 |
degorenko | with same parameters as from heat domain | 18:21 |
degorenko | will see how it will work | 18:21 |
*** ducttape_ has quit IRC | 18:26 | |
*** ducttape_ has joined #puppet-openstack | 18:26 | |
*** jaosorior has joined #puppet-openstack | 18:28 | |
*** openstackgerrit_ has joined #puppet-openstack | 18:30 | |
*** emccormick has quit IRC | 18:30 | |
*** degorenko is now known as _degorenko|afk | 18:31 | |
*** jpena is now known as jpena|zzz | 18:32 | |
*** iberezovskiy has quit IRC | 18:32 | |
*** angdraug has quit IRC | 18:43 | |
*** ducttape_ has quit IRC | 18:56 | |
*** trown|lunch is now known as trown | 19:12 | |
*** yottatsa has quit IRC | 19:12 | |
*** jistr has joined #puppet-openstack | 19:15 | |
*** dmsimard has quit IRC | 19:17 | |
*** ducttape_ has joined #puppet-openstack | 19:17 | |
*** yottatsa has joined #puppet-openstack | 19:19 | |
*** dmsimard has joined #puppet-openstack | 19:21 | |
*** jaosorior has quit IRC | 19:31 | |
*** dmsimard has quit IRC | 19:36 | |
*** dmsimard has joined #puppet-openstack | 19:37 | |
*** rcernin has quit IRC | 19:40 | |
*** ayoung has quit IRC | 19:52 | |
*** trown has quit IRC | 19:56 | |
*** trown has joined #puppet-openstack | 19:59 | |
*** brandon has joined #puppet-openstack | 20:05 | |
*** toMeloos has joined #puppet-openstack | 20:13 | |
*** ducttape_ has quit IRC | 20:18 | |
*** ducttape_ has joined #puppet-openstack | 20:20 | |
*** bookwar has joined #puppet-openstack | 20:35 | |
*** angdraug has joined #puppet-openstack | 20:38 | |
*** guessi has quit IRC | 20:39 | |
*** guessi has joined #puppet-openstack | 20:40 | |
*** toMeloos has quit IRC | 20:43 | |
*** emccormick has joined #puppet-openstack | 20:43 | |
*** brandon_ has joined #puppet-openstack | 20:59 | |
*** brandon has quit IRC | 21:00 | |
*** johnmilton has quit IRC | 21:03 | |
*** rochaporto has joined #puppet-openstack | 21:17 | |
*** dgurtner has joined #puppet-openstack | 21:29 | |
*** dprince has quit IRC | 21:32 | |
*** haplo37 has joined #puppet-openstack | 21:34 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to IPv6 https://review.openstack.org/287521 | 21:34 |
*** jistr has quit IRC | 21:40 | |
*** openstackstatus has quit IRC | 21:42 | |
*** openstackstatus has joined #puppet-openstack | 21:45 | |
*** ChanServ sets mode: +v openstackstatus | 21:45 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: scenario002: switch OpenStack APIs to IPv6 https://review.openstack.org/287521 | 21:52 |
*** jayg is now known as jayg|g0n3 | 21:57 | |
*** delattec has quit IRC | 22:02 | |
*** dgurtner has quit IRC | 22:06 | |
*** rcernin has joined #puppet-openstack | 22:11 | |
*** dgurtner has joined #puppet-openstack | 22:12 | |
*** jtomasek has quit IRC | 22:18 | |
openstackgerrit | Matt Fischer proposed openstack/puppet-keystone: WIP Keystone hooks support https://review.openstack.org/283898 | 22:20 |
*** trown is now known as trown|outtypewww | 22:21 | |
*** rcernin has quit IRC | 22:22 | |
openstackgerrit | Edward Balduf proposed openstack/puppet-cinder: Update the solidfire module. https://review.openstack.org/291473 | 22:32 |
*** dgurtner has quit IRC | 22:40 | |
openstackgerrit | Emilien Macchi proposed openstack/puppet-keystone: Prepare release notes for Mitaka 8.0.0 https://review.openstack.org/274409 | 22:41 |
EmilienM | if anyone wants to review ^ | 22:41 |
*** cdelatte has joined #puppet-openstack | 22:43 | |
EmilienM | can someone also look: https://review.openstack.org/#/c/290893/ https://review.openstack.org/#/c/290886/ https://review.openstack.org/#/c/289562/ thanks | 22:46 |
*** morazi has quit IRC | 22:53 | |
*** mgarza has quit IRC | 22:54 | |
*** trown|outtypewww has quit IRC | 22:55 | |
*** trown has joined #puppet-openstack | 22:58 | |
openstackgerrit | Merged openstack/puppet-modulesync-configs: add puppet-octavia to managed modules https://review.openstack.org/290886 | 23:06 |
*** derekh has joined #puppet-openstack | 23:09 | |
*** dmsimard is now known as dmsimard|pto | 23:10 | |
*** haplo37 has quit IRC | 23:11 | |
xarses | Is there a Mitaka release schedule that I can't find? | 23:13 |
*** ducttape_ has quit IRC | 23:15 | |
*** brandon_ has quit IRC | 23:17 | |
*** dmsimard|pto has quit IRC | 23:26 | |
*** derekh has quit IRC | 23:39 | |
*** dmsimard|pto has joined #puppet-openstack | 23:42 | |
angdraug | for the reference, integrated Mitaka schedule: http://releases.openstack.org/mitaka/schedule.html | 23:45 |
angdraug | doesn't look like there's a separate schedule for puppet-openstack | 23:46 |
angdraug | no link from https://wiki.openstack.org/wiki/Puppet/releases | 23:47 |
openstackgerrit | Pradeep Kilambi proposed openstack/puppet-openstack-integration: Gnocchi now natively supports default archive policy https://review.openstack.org/291491 | 23:52 |
openstackgerrit | Merged openstack/puppet-openstack-integration: Puppetfile: add puppet-oslo & puppet-octavia https://review.openstack.org/290893 | 23:53 |
openstackgerrit | Merged openstack/puppet-openstack-integration: Deploy Nova API in WSGI with Apache https://review.openstack.org/289562 | 23:53 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!