| *** hjensas has joined #puppet-openstack | 00:01 | |
| *** ilbot3 has quit IRC | 02:47 | |
| *** ilbot3 has joined #puppet-openstack | 02:56 | |
| *** hjensas has quit IRC | 03:08 | |
| *** hjensas has joined #puppet-openstack | 03:08 | |
| *** rcernin_ has joined #puppet-openstack | 03:23 | |
| *** rcernin has quit IRC | 03:25 | |
| *** rcernin_ has quit IRC | 03:29 | |
| *** rcernin has joined #puppet-openstack | 03:29 | |
| *** rcernin has quit IRC | 03:33 | |
| openstackgerrit | zhongshengping proposed openstack/puppet-neutron stable/queens: Configure metadata agent 'metadata_proxy_shared_secret' as secret https://review.openstack.org/554097 | 03:35 |
|---|---|---|
| openstackgerrit | zhongshengping proposed openstack/puppet-neutron stable/pike: Configure metadata agent 'metadata_proxy_shared_secret' as secret https://review.openstack.org/554098 | 03:36 |
| openstackgerrit | zhongshengping proposed openstack/puppet-heat stable/queens: Add oslo::cache to dependency chain https://review.openstack.org/554099 | 03:37 |
| openstackgerrit | zhongshengping proposed openstack/puppet-heat stable/pike: Add oslo::cache to dependency chain https://review.openstack.org/554100 | 03:37 |
| openstackgerrit | zhongshengping proposed openstack/puppet-ceilometer stable/queens: Add oslo::cache to dependency chain https://review.openstack.org/554101 | 03:38 |
| openstackgerrit | zhongshengping proposed openstack/puppet-ceilometer stable/pike: Add oslo::cache to dependency chain https://review.openstack.org/554102 | 03:38 |
| openstackgerrit | zhongshengping proposed openstack/puppet-nova stable/queens: Add oslo::cache to dependency chain https://review.openstack.org/554103 | 03:39 |
| openstackgerrit | zhongshengping proposed openstack/puppet-nova stable/pike: Add oslo::cache to dependency chain https://review.openstack.org/554104 | 03:39 |
| openstackgerrit | zhongshengping proposed openstack/puppet-designate stable/queens: Designate/Neutron communicaton failure https://review.openstack.org/554106 | 03:41 |
| openstackgerrit | zhongshengping proposed openstack/puppet-openstack-integration master: Include ironic ipmi class https://review.openstack.org/553114 | 03:47 |
| *** rcernin has joined #puppet-openstack | 03:49 | |
| openstackgerrit | zhongshengping proposed openstack/puppet-designate stable/pike: Designate/Neutron communicaton failure https://review.openstack.org/554111 | 03:53 |
| openstackgerrit | zhongshengping proposed openstack/puppet-murano stable/queens: Murano needs explicit v3 in auth_uri https://review.openstack.org/554112 | 03:56 |
| openstackgerrit | zhongshengping proposed openstack/puppet-magnum stable/queens: Fix mysql connection https://review.openstack.org/554113 | 03:59 |
| openstackgerrit | zhongshengping proposed openstack/puppet-magnum stable/pike: Fix mysql connection https://review.openstack.org/554114 | 03:59 |
| openstackgerrit | zhongshengping proposed openstack/puppet-murano stable/queens: Fix mysql connection https://review.openstack.org/554115 | 04:01 |
| openstackgerrit | zhongshengping proposed openstack/puppet-murano stable/pike: Fix mysql connection https://review.openstack.org/554116 | 04:01 |
| openstackgerrit | zhongshengping proposed openstack/puppet-vitrage stable/queens: Fix mysql connection https://review.openstack.org/554117 | 04:02 |
| openstackgerrit | zhongshengping proposed openstack/puppet-vitrage stable/pike: Fix mysql connection https://review.openstack.org/554118 | 04:02 |
| *** skramaja has joined #puppet-openstack | 04:09 | |
| *** skramaja_ has joined #puppet-openstack | 04:16 | |
| *** skramaja has quit IRC | 04:16 | |
| *** ykarel has joined #puppet-openstack | 04:20 | |
| *** rwsu has joined #puppet-openstack | 04:24 | |
| *** rwsu has quit IRC | 04:25 | |
| *** ykarel_ has joined #puppet-openstack | 04:30 | |
| *** ykarel has quit IRC | 04:33 | |
| *** skramaja has joined #puppet-openstack | 04:38 | |
| *** skramaja_ has quit IRC | 04:38 | |
| openstackgerrit | Merged openstack/puppet-murano stable/queens: Fix mysql connection https://review.openstack.org/554115 | 04:48 |
| openstackgerrit | Merged openstack/puppet-murano stable/pike: Fix mysql connection https://review.openstack.org/554116 | 04:48 |
| openstackgerrit | Merged openstack/puppet-murano stable/queens: Murano needs explicit v3 in auth_uri https://review.openstack.org/554112 | 04:48 |
| openstackgerrit | Merged openstack/puppet-magnum stable/pike: Fix mysql connection https://review.openstack.org/554114 | 04:49 |
| openstackgerrit | Merged openstack/puppet-magnum stable/queens: Fix mysql connection https://review.openstack.org/554113 | 04:49 |
| *** quasisane414 has joined #puppet-openstack | 05:12 | |
| *** ykarel_ is now known as ykarel | 05:41 | |
| *** openstackgerrit has quit IRC | 05:49 | |
| *** openstackgerrit has joined #puppet-openstack | 05:57 | |
| openstackgerrit | Merged openstack/puppet-designate stable/pike: Designate/Neutron communicaton failure https://review.openstack.org/554111 | 05:57 |
| openstackgerrit | Merged openstack/puppet-designate stable/queens: Designate/Neutron communicaton failure https://review.openstack.org/554106 | 05:59 |
| openstackgerrit | Merged openstack/puppet-ceilometer stable/pike: Add oslo::cache to dependency chain https://review.openstack.org/554102 | 06:06 |
| openstackgerrit | Merged openstack/puppet-ceilometer stable/queens: Add oslo::cache to dependency chain https://review.openstack.org/554101 | 06:06 |
| *** skramaja_ has joined #puppet-openstack | 06:10 | |
| *** skramaja has quit IRC | 06:11 | |
| *** danpawlik has joined #puppet-openstack | 06:15 | |
| *** danpawlik has quit IRC | 06:20 | |
| openstackgerrit | Merged openstack/puppet-nova stable/queens: Add oslo::cache to dependency chain https://review.openstack.org/554103 | 06:25 |
| *** agurenko has joined #puppet-openstack | 06:35 | |
| *** jaganathan has joined #puppet-openstack | 06:42 | |
| openstackgerrit | Merged openstack/puppet-vitrage stable/pike: Fix mysql connection https://review.openstack.org/554118 | 06:47 |
| openstackgerrit | Merged openstack/puppet-vitrage stable/queens: Fix mysql connection https://review.openstack.org/554117 | 06:47 |
| *** skramaja_ is now known as skramaja | 07:07 | |
| *** rcernin has quit IRC | 07:07 | |
| openstackgerrit | Merged openstack/puppet-heat stable/pike: Add oslo::cache to dependency chain https://review.openstack.org/554100 | 07:21 |
| *** tesseract has joined #puppet-openstack | 08:17 | |
| openstackgerrit | zhongshengping proposed openstack/puppet-keystone master: Configure memcache_secret_key as secret https://review.openstack.org/554161 | 08:17 |
| openstackgerrit | zhongshengping proposed openstack/puppet-keystone stable/queens: Configure memcache_secret_key as secret https://review.openstack.org/554162 | 08:18 |
| openstackgerrit | zhongshengping proposed openstack/puppet-keystone stable/pike: Configure memcache_secret_key as secret https://review.openstack.org/554163 | 08:18 |
| *** skramaja_ has joined #puppet-openstack | 08:25 | |
| *** skramaja has quit IRC | 08:25 | |
| *** jaganathan has quit IRC | 08:25 | |
| *** jaganathan has joined #puppet-openstack | 08:26 | |
| *** skramaja_ has quit IRC | 08:29 | |
| *** skramaja_ has joined #puppet-openstack | 08:29 | |
| *** skramaja has joined #puppet-openstack | 08:38 | |
| *** jaganathan_ has joined #puppet-openstack | 08:38 | |
| *** skramaja_ has quit IRC | 08:38 | |
| *** jaganathan has quit IRC | 08:38 | |
| *** jaosorior has joined #puppet-openstack | 08:40 | |
| *** skramaja has quit IRC | 08:42 | |
| *** skramaja_ has joined #puppet-openstack | 08:42 | |
| *** jaganathan_ has quit IRC | 08:42 | |
| *** gfidente has joined #puppet-openstack | 08:43 | |
| *** gfidente has quit IRC | 08:43 | |
| *** gfidente has joined #puppet-openstack | 08:43 | |
| *** amoralej|off is now known as amoralej | 08:45 | |
| *** jaganathan_ has joined #puppet-openstack | 08:54 | |
| *** chem` has joined #puppet-openstack | 08:57 | |
| openstackgerrit | Thomas Goirand proposed openstack/puppet-keystone master: Make it so that service_name can handle Debian https://review.openstack.org/554171 | 08:58 |
| *** jpena|off is now known as jpena | 08:59 | |
| *** shardy has joined #puppet-openstack | 08:59 | |
| *** chem` is now known as chem | 09:00 | |
| *** jtomasek has joined #puppet-openstack | 09:02 | |
| *** rpittau has joined #puppet-openstack | 09:07 | |
| *** rpittau has quit IRC | 09:08 | |
| *** rpittau has joined #puppet-openstack | 09:10 | |
| openstackgerrit | Merged openstack/puppet-heat stable/queens: Add oslo::cache to dependency chain https://review.openstack.org/554099 | 09:10 |
| *** rmart04 has joined #puppet-openstack | 09:20 | |
| *** chkumar|off is now known as chandankumare | 09:21 | |
| *** chandankumare is now known as chandankumar | 09:21 | |
| *** danpawlik has joined #puppet-openstack | 09:29 | |
| openstackgerrit | zhongshengping proposed openstack/puppet-openstack-integration master: Grep command error https://review.openstack.org/554184 | 09:48 |
| *** salmankhan has joined #puppet-openstack | 10:19 | |
| *** dtantsur|afk is now known as dtantsur | 10:19 | |
| *** salmankhan has quit IRC | 10:23 | |
| *** salmankhan has joined #puppet-openstack | 10:23 | |
| *** skramaja_ has quit IRC | 10:32 | |
| *** colonwq has quit IRC | 11:41 | |
| *** colonwq has joined #puppet-openstack | 11:44 | |
| *** salmankhan has quit IRC | 11:52 | |
| *** beagles_biab is now known as beagesl | 12:00 | |
| *** beagesl is now known as beagles | 12:00 | |
| *** salmankhan has joined #puppet-openstack | 12:07 | |
| *** trown|outtypewww is now known as trown|ruck | 12:12 | |
| *** atoth has joined #puppet-openstack | 12:18 | |
| *** gyankum has joined #puppet-openstack | 12:23 | |
| *** jpena is now known as jpena|lunch | 12:56 | |
| *** morazi has joined #puppet-openstack | 12:57 | |
| *** dprince has joined #puppet-openstack | 12:57 | |
| *** danpawlik has quit IRC | 12:57 | |
| *** morazi_ has joined #puppet-openstack | 12:59 | |
| *** morazi has quit IRC | 13:01 | |
| *** amoralej is now known as amoralej|lunch | 13:08 | |
| *** pradk has joined #puppet-openstack | 13:20 | |
| *** shardy is now known as shardy_mtg | 13:28 | |
| *** chem has quit IRC | 13:41 | |
| *** chem has joined #puppet-openstack | 13:44 | |
| *** dtantsur is now known as dtantsur|brb | 13:56 | |
| *** amoralej|lunch is now known as amoralej | 13:56 | |
| *** beekneemech is now known as bnemec | 14:02 | |
| *** jpena|lunch is now known as jpena | 14:06 | |
| *** gyankum has quit IRC | 14:36 | |
| *** agurenko has quit IRC | 14:38 | |
| *** hjensas has quit IRC | 14:58 | |
| *** atoth has quit IRC | 15:04 | |
| *** atoth has joined #puppet-openstack | 15:05 | |
| *** ykarel has quit IRC | 15:09 | |
| *** dtantsur|brb is now known as dtantsur | 15:10 | |
| *** gbarbutti has joined #puppet-openstack | 15:33 | |
| gbarbutti | Good afternoon, I will add support for sahara-dashboard because my environment needs it. But I don't know if this goes in puppet-horizon or puppet-sahara. Can anybody help me with that? | 15:37 |
| openstackgerrit | Merged openstack/puppet-magnum master: remove duplicate word 'the' to fix typo https://review.openstack.org/547708 | 15:37 |
| mnaser | EmilienM, mwhahaha, gbarbutti: we don't have an established pattern for this, where do you feel might be the nicest place for that? | 15:40 |
| mwhahaha | we did | 15:40 |
| mwhahaha | murano had a dashboard | 15:40 |
| * mwhahaha is unsure of the integration points for sahara-dashboard | 15:41 | |
| mwhahaha | what does the install for that look like? | 15:41 |
| *** ykarel has joined #puppet-openstack | 15:42 | |
| *** vnogin has joined #puppet-openstack | 15:53 | |
| *** markvoelker_ has joined #puppet-openstack | 15:56 | |
| *** morazi_ has quit IRC | 15:56 | |
| *** markvoelker has quit IRC | 15:56 | |
| gbarbutti | mnaser: I feel puppet-sahara would be better because it is part of sahara | 15:56 |
| mnaser | mwhahaha: i think sahara dashboard is just like the murano one | 15:57 |
| mnaser | oh yeah | 15:57 |
| mnaser | oh man it looks filthy because it does so many things on its own | 15:57 |
| mwhahaha | so depending on how it gets installed, it could just be done like sahara::dashboard or whatever | 15:57 |
| mnaser | https://github.com/openstack/puppet-murano/blob/master/manifests/dashboard.pp | 15:57 |
| mnaser | gbarbutti: ^ how does that look as a reference? | 15:58 |
| mwhahaha | horizon integrations aren't pretty | 15:58 |
| mnaser | but i think the problem with that is it will not be idempotent | 15:58 |
| mnaser | at least the way its done there | 15:58 |
| *** gyankum has joined #puppet-openstack | 15:59 | |
| *** markvoelker has joined #puppet-openstack | 15:59 | |
| *** morazi has joined #puppet-openstack | 16:00 | |
| *** gyankum has quit IRC | 16:00 | |
| *** markvoelker_ has quit IRC | 16:01 | |
| gbarbutti | mnaser: I think this is a good reference to start, especially since this is my first contribution | 16:04 |
| gbarbutti | mwhahaha: Thank you for mentioning Murano, the projects I used were in the core of Horizon. So their integration were pretty | 16:07 |
| *** hjensas has joined #puppet-openstack | 16:09 | |
| mwhahaha | yea i mean the external integrations | 16:09 |
| *** hjensas has quit IRC | 16:09 | |
| *** hjensas has joined #puppet-openstack | 16:09 | |
| mwhahaha | the issue stems around the horizon config file itself | 16:09 |
| mwhahaha | it's not very extensible | 16:09 |
| mwhahaha | since its just a python file and doesn't use something like oslo config all the traditional plugin integrations that the other openstack services can't be mirrored. | 16:10 |
| gbarbutti | mwhahaha: This is the first external integration I'm doing and you are right, it is not very pretty | 16:15 |
| mwhahaha | ideally the part that needs to end up in the horizon config file needs to go in puppet-horizon | 16:15 |
| gbarbutti | Thank you for the help | 16:15 |
| mwhahaha | and then the sahara stuff would go in puppet-sahara | 16:15 |
| mwhahaha | but short of that, try the puppet-murano stuff | 16:16 |
| *** rmart04 has quit IRC | 16:19 | |
| *** vnogin has quit IRC | 16:23 | |
| *** vnogin has joined #puppet-openstack | 16:24 | |
| openstackgerrit | Alfredo Moralejo proposed openstack/puppet-openstack-integration master: Fix ipv6 and ipv4 certificates to make it compliant with IDNA https://review.openstack.org/553436 | 16:31 |
| *** rwsu has joined #puppet-openstack | 16:38 | |
| *** morazi has quit IRC | 16:42 | |
| *** jpena is now known as jpena|brb | 16:43 | |
| *** trown|ruck is now known as trown|lunch | 16:44 | |
| *** shardy_mtg has quit IRC | 16:52 | |
| *** morazi has joined #puppet-openstack | 16:55 | |
| *** vnogin has quit IRC | 16:59 | |
| *** hjensas has quit IRC | 17:02 | |
| *** shardy_mtg has joined #puppet-openstack | 17:08 | |
| *** hjensas has joined #puppet-openstack | 17:19 | |
| *** hjensas has quit IRC | 17:19 | |
| *** hjensas has joined #puppet-openstack | 17:19 | |
| *** shardy_mtg has quit IRC | 17:26 | |
| *** salmankhan has quit IRC | 17:27 | |
| *** salmankhan has joined #puppet-openstack | 17:29 | |
| *** hjensas has quit IRC | 17:31 | |
| *** vnogin has joined #puppet-openstack | 17:33 | |
| *** jpena|brb is now known as jpena | 17:37 | |
| *** ykarel has quit IRC | 17:37 | |
| *** vnogin has quit IRC | 17:38 | |
| openstackgerrit | Merged openstack/puppet-gnocchi master: fix mysql connection https://review.openstack.org/549677 | 17:41 |
| *** hjensas has joined #puppet-openstack | 17:45 | |
| *** hjensas has quit IRC | 17:45 | |
| *** hjensas has joined #puppet-openstack | 17:45 | |
| *** tesseract has quit IRC | 18:07 | |
| *** dtantsur is now known as dtantsur|afk | 18:09 | |
| *** trown|lunch is now known as trown | 18:25 | |
| *** trown is now known as trown|compassing | 18:25 | |
| openstackgerrit | Merged openstack/puppet-neutron stable/queens: Configure metadata agent 'metadata_proxy_shared_secret' as secret https://review.openstack.org/554097 | 18:34 |
| openstackgerrit | Merged openstack/puppet-openstack-integration master: Include ironic ipmi class https://review.openstack.org/553114 | 18:44 |
| openstackgerrit | Merged openstack/puppet-openstack-integration master: Grep command error https://review.openstack.org/554184 | 18:44 |
| *** openstackgerrit has quit IRC | 18:48 | |
| *** gfidente has quit IRC | 19:09 | |
| *** ykarel has joined #puppet-openstack | 19:13 | |
| *** jpena is now known as jpena|off | 19:15 | |
| *** atoth has quit IRC | 19:29 | |
| *** dprince has quit IRC | 19:33 | |
| *** morazi has quit IRC | 19:33 | |
| zigo | mwhahaha: EmilienM: Hi there! Hey, what's the way to bootstrap keystone's catalogue with puppet-openstack? I haven't found out, and it looks like the only bootstraping it does is "keystone-manage --bootstrap-password" ... | 20:10 |
| zigo | In my package, when using debconf, I'm doing a way more than just this ... | 20:10 |
| *** salmankhan has quit IRC | 20:11 | |
| *** trown|compassing is now known as trown|ruck | 20:43 | |
| *** colonwq has quit IRC | 20:54 | |
| *** amoralej is now known as amoralej|off | 20:55 | |
| *** zerick has quit IRC | 20:56 | |
| *** zerick has joined #puppet-openstack | 20:56 | |
| zigo | mwhahaha: It's really a shame that the switch to oslo.config wasn't merged for Horizon ... | 20:58 |
| zigo | All the patches were there. | 20:58 |
| mwhahaha | zigo: hey | 20:58 |
| zigo | mwhahaha: !!! | 20:59 |
| zigo | :) | 20:59 |
| mwhahaha | zigo: so what do you mean keystone catalog bootstrap? | 20:59 |
| mwhahaha | like populating all the service entries? | 20:59 |
| mwhahaha | those get created by the service installs | 20:59 |
| zigo | mwhahaha: I mean, I'm setting-up keystone with puppet, all works, but the service entries are empty. | 20:59 |
| zigo | mwhahaha: How do I do that then? | 20:59 |
| mwhahaha | sec | 20:59 |
| zigo | mwhahaha: Should I lookup in service.pp ? | 21:00 |
| *** jtomasek has quit IRC | 21:00 | |
| mwhahaha | no | 21:00 |
| mwhahaha | it's all in each modules *::keystone::auth | 21:00 |
| mwhahaha | ie nova::keystone::auth | 21:00 |
| mwhahaha | https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/nova.pp#L86-L97 | 21:00 |
| *** trown|ruck is now known as trown|outtypewww | 21:01 | |
| zigo | currently, I wrote this in hiera: http://paste.openstack.org/show/705135/ | 21:01 |
| mwhahaha | yea so p-o-i for the basics to configure the various services, https://github.com/openstack/puppet-openstack-integration/tree/master/manifests | 21:03 |
| zigo | mwhahaha: Yeah, I saw that, but it wasn't helpful ... :( | 21:04 |
| zigo | mwhahaha: I still don't get what I should enter in my hiera.yaml to get keystone to register its service. | 21:04 |
| zigo | :( | 21:04 |
| mwhahaha | let me see | 21:05 |
| zigo | mwhahaha: Oh, btw, did you see this? https://review.openstack.org/#/c/554171/ | 21:05 |
| mwhahaha | zigo: https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/keystone.pp#L122-L127 | 21:05 |
| mwhahaha | keystone::endpoint | 21:05 |
| zigo | I'm not sure if I wrote it the right way though... | 21:05 |
| mwhahaha | yea i saw that hadn't had time to try it out, would be a good idea to add test coverage for that | 21:05 |
| zigo | Oh... | 21:06 |
| zigo | mwhahaha: So, basically, I just add this to my hiera.yaml, and I'm good to go? | 21:07 |
| zigo | keystone::endpoint::public_url: 'http://stigo.infomaniak.ch:5000' | 21:07 |
| zigo | keystone::endpoint::admin_url: 'http://stigo.infomaniak.ch:35357' | 21:07 |
| mwhahaha | yea should be enough if you've got include ::keystone::endpoint in your catalog | 21:07 |
| zigo | mwhahaha: Nop, doesn't work ... :( | 21:09 |
| zigo | mwhahaha: Or do I have to restart the setup from scratch? | 21:09 |
| mwhahaha | zigo: no you should just be able to reapply the catalog | 21:10 |
| zigo | (it's a virtualbox machine on my laptop, so I can roll-back a snapshot) | 21:10 |
| zigo | I've just ran: puppet apply --debug --hiera_config=hiera.yaml site.pp | 21:10 |
| zigo | and nothing happened... :( | 21:10 |
| zigo | (yeah, I'm just using hiera locally, nothing more...) | 21:10 |
| zigo | (just for my tests until I write something more serious) | 21:10 |
| mwhahaha | what's in the site.pp | 21:11 |
| zigo | hiera_include('classes') | 21:11 |
| zigo | Nohting more. | 21:11 |
| mwhahaha | nothing happened cause it's probably idempotent so there's no changes | 21:11 |
| mwhahaha | i've seen that interface but not used it | 21:11 |
| zigo | hiera.yaml has: | 21:11 |
| zigo | :yaml: | 21:11 |
| zigo | :datadir: "data" | 21:11 |
| zigo | then in my data/nodes dir, I have a file with the hostname.yaml containing: | 21:12 |
| zigo | classes: | 21:12 |
| zigo | - ntp | 21:12 |
| zigo | - mysql::server | 21:12 |
| zigo | - keystone | 21:12 |
| zigo | - ::keystone::endpoint | 21:12 |
| zigo | So the class is there... | 21:12 |
| mwhahaha | ah you may need to drop the leading :: on the keystone::endpoint | 21:12 |
| zigo | Right. | 21:12 |
| * mwhahaha doesn't know the specifics aroudn that | 21:12 | |
| zigo | Oh, it looks like that made it ! :) | 21:13 |
| zigo | Debug: Executing: '/usr/bin/openstack service list --quiet --format csv --long' | 21:13 |
| zigo | Debug: Puppet::Type::Keystone_service::ProviderOpenstack: Non-fatal error: 'Execution of '/usr/bin/openstack service list --quiet --format csv --long' returned 1: The service catalog is empty.'. Retrying for 168 more seconds | 21:13 |
| zigo | It wont work. | 21:13 |
| zigo | You can't list the catalog unless it has at least keystone in it. | 21:14 |
| zigo | mwhahaha: And that's why I was asking: how come puppet-openstack doesn't do that using keystone-manage boostrap? How does this work then? | 21:14 |
| mwhahaha | but it does | 21:14 |
| mwhahaha | so you may not have properly run it | 21:14 |
| mwhahaha | https://github.com/openstack/puppet-keystone/blob/master/manifests/init.pp#L476 | 21:15 |
| zigo | It does *what*? The bootstrap as I wrote earlier? | 21:15 |
| mwhahaha | https://github.com/openstack/puppet-keystone/blob/master/manifests/init.pp#L1273 | 21:15 |
| zigo | mwhahaha: Yeah, but look at the code, it only bootstrap the admin's password. | 21:15 |
| mwhahaha | keystone-manage bootstrap --bootstrap-password $whatever | 21:15 |
| mwhahaha | so it might not have worked because you didnt' do the endpoint in the first keystone run | 21:16 |
| zigo | mwhahaha: Yeah, but you're supposed to also bootstrap the first keystone entries for itself in the catalog... | 21:16 |
| mwhahaha | so i have a feeling that's the problem | 21:16 |
| zigo | Hum... | 21:16 |
| mwhahaha | so on the second run it switches to use teh API | 21:16 |
| mwhahaha | so you have to configure keystone and the endpoints in a single puppet run | 21:16 |
| zigo | mwhahaha: Look what I normally do: https://salsa.debian.org/openstack-team/services/keystone/blob/debian/queens/debian/keystone.postinst.in#L77 | 21:17 |
| zigo | A long list of --bootstrap-FOO params ... | 21:18 |
| zigo | That's what I was expecting. | 21:18 |
| mwhahaha | yea we dont' do that because we're using an interface that predated that | 21:18 |
| zigo | :) | 21:18 |
| zigo | mwhahaha: Ok, I'll reinstall the virtual machine from scratch and re-run the puppet script, see if it works better. Thanks for your help, I already have some progress anyway (ie: at least, it's TRYING to register the endpoint now...). | 21:19 |
| zigo | mwhahaha: I suppose that if I was to propose a patch for doing like in my package, that'd be accepted, right? | 21:20 |
| zigo | (ie: using bootstrap for most things) | 21:20 |
| mwhahaha | ehhh maybe | 21:20 |
| mwhahaha | it's not idempotent | 21:20 |
| mwhahaha | which is why we dont' use it | 21:20 |
| mwhahaha | for example the endpoint part https://github.com/openstack/puppet-keystone/blob/master/manifests/endpoint.pp#L109 | 21:20 |
| mwhahaha | see it's done before we get an openrc so it uses the bootstrap bits under teh covers | 21:21 |
| mwhahaha | so you just need to make sure you have the keystone stuff correctly done in the first apply of the catalog | 21:21 |
| zigo | One way to make it idempotent is to do the bootstrap, then make sure there's no duplicates ... | 21:22 |
| mwhahaha | no that wouldn't be idempotent | 21:22 |
| zigo | Why? | 21:23 |
| mwhahaha | we're already handling that part in the openstack provider | 21:24 |
| zigo | ok | 21:24 |
| zigo | As long as I have something that works, I'm happy anyway. | 21:24 |
| zigo | Expect more Debian fixes soon ! :) | 21:24 |
| mwhahaha | so running the same command twice and checking for duplicates isn't the correct way to ensure the config is in the correct spot | 21:24 |
| zigo | We are to deploy on maybe 100 physical machines before this summer. | 21:25 |
| mwhahaha | so i think you're just hanging on the initial bootstrap config which to be honest is pretty aweful in puppet | 21:25 |
| mwhahaha | nice | 21:25 |
| zigo | It's pretty bad everywhere. IMO, that's an issue in Keystone. It should have a way to hardcode itself, somehow. | 21:25 |
| mwhahaha | https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/keystone.pp | 21:25 |
| mwhahaha | that's pretty much all the bits you need for keystone | 21:25 |
| zigo | mwhahaha: I still have issues translating .pp files into hiera, but I'll get to know ... :P | 21:26 |
| zigo | mwhahaha: FYI, a week ago, I didn't know puppet. | 21:26 |
| mwhahaha | yea it's not too hard | 21:27 |
| mwhahaha | the resource conversion is probably harder | 21:27 |
| mwhahaha | but any class { ... } things are just ::class::name::<parameter>: <value> in hiera | 21:27 |
| zigo | mwhahaha: Oh, one thing, what's the {{ thing-like-this }} in ansible to replace xenial or stretch ? | 21:29 |
| mwhahaha | yea that's jinja2 templating | 21:30 |
| mwhahaha | so yea it's a variable replacement | 21:30 |
| zigo | mwhahaha: I need to fix "xenial" here: https://github.com/openstack/puppet-openstack-integration/blob/master/playbooks/prepare-node-common.yaml#L51-L51 | 21:31 |
| zigo | It need to be the result of lsb_release -s -c | 21:31 |
| zigo | mwhahaha: So again, what's the name of the variable ? :) | 21:31 |
| zigo | {{ os-SOMETHING }} ? | 21:31 |
| mwhahaha | oh i don't think we have one | 21:31 |
| zigo | Isn't this standard in Ansible ? | 21:32 |
| mwhahaha | that is | 21:32 |
| mwhahaha | i'm not sure the ansible fact for os family name | 21:32 |
| zigo | I'll figure it out. :) | 21:35 |
| mwhahaha | zigo: looks like ansible_distribution_release | 21:35 |
| mwhahaha | https://raymii.org/s/tutorials/Ansible_-_Only_if_on_specific_distribution_or_distribution_version.html | 21:35 |
| zigo | Yeah, thanks so much ! :) | 21:36 |
| * zigo writes the patch then. | 21:36 | |
| *** openstackgerrit has joined #puppet-openstack | 21:39 | |
| openstackgerrit | Thomas Goirand proposed openstack/puppet-openstack-integration master: Another Debian patch https://review.openstack.org/554363 | 21:39 |
| zigo | There you go ! | 21:40 |
| zigo | :) | 21:40 |
| zigo | Eventually, the integration script will also run on Stretch... :P | 21:40 |
| zigo | It'd be nice if we had a Stretch VM in the infra, so it could also gate on it. | 21:40 |
| zigo | Just a single full test would be enough, IMO. | 21:41 |
| openstackgerrit | Merged openstack/puppet-nova master: Add the option to only aggregate hosts that are known by openstack to be active https://review.openstack.org/550513 | 21:41 |
| mwhahaha | if we had a debian setup we could run the same things | 21:41 |
| *** ykarel has quit IRC | 21:43 | |
| zigo | mwhahaha: Even if I purge the keystone package and db, I get the same issue: Non-fatal error: 'Execution of '/usr/bin/openstack service list --quiet --format csv --long' returned 1: The service catalog is empty.'. | 21:47 |
| zigo | It wont work ... | 21:47 |
| mwhahaha | zigo: rm /root/openrc | 21:47 |
| zigo | mwhahaha: I don't even have such a file. | 21:47 |
| mwhahaha | hmmm | 21:47 |
| zigo | The thing is, I don't see how it can even work the way it is right now. | 21:48 |
| mwhahaha | hmm | 21:48 |
| mwhahaha | let me see | 21:48 |
| zigo | I think it's using default_catalog.templates | 21:53 |
| mwhahaha | i don't think so | 21:53 |
| zigo | I don't see how it could be done in another way. | 21:54 |
| mwhahaha | oh did you load any env vars? | 21:54 |
| mwhahaha | ie do you have any of the OS_* vars defined | 21:54 |
| zigo | No. | 21:54 |
| zigo | I mean, yes. | 21:54 |
| zigo | In my /root/.bashrc | 21:54 |
| zigo | I shouldn't ? | 21:54 |
| zigo | Gosh... | 21:54 |
| * zigo tries again without it. | 21:54 | |
| mwhahaha | export | grep OS_* | 21:54 |
| mwhahaha | yea if you did that'll cause it to try to use the api | 21:55 |
| zigo | Got ya. | 21:55 |
| zigo | Oh, it looks like working ! :) | 21:56 |
| zigo | GREAT ! | 21:56 |
| zigo | \o/ | 21:57 |
| mwhahaha | so everything else should be ok to add afterwards | 21:57 |
| mwhahaha | i think this is one of those things that needs to be correctly upfront | 21:57 |
| zigo | Yes, working indeed. | 21:57 |
| mwhahaha | that being said you'll also probably want to grab the code to generate the openrc | 21:57 |
| mwhahaha | cause that gets used by other providers | 21:58 |
| mwhahaha | or can be | 21:58 |
| zigo | mwhahaha: Other providers will read /root/openrc ? | 21:58 |
| mwhahaha | it falls back to that yea | 21:58 |
| zigo | Ok, good to know. | 21:58 |
| mwhahaha | it looks for the OS_* vars | 21:58 |
| mwhahaha | but will try and load them from /root/openrc if that exists | 21:58 |
| zigo | mwhahaha: Frankly, all this would deserve a bit of documentation ! :) | 21:58 |
| mwhahaha | https://github.com/openstack/puppet-openstack_extras/blob/master/manifests/auth_file.pp | 21:58 |
| zigo | Now that I got my first OpenStack service provisionned by puppet, I guess all the rest will just be a way more easy. | 21:59 |
| zigo | mwhahaha: Oh, I need that module too for the generic endpoint creation then? | 22:00 |
| mwhahaha | you could try it without first | 22:00 |
| mwhahaha | but if you run into errors, yea | 22:00 |
| zigo | Ok. | 22:00 |
| zigo | Really, thanks a lot for all of this help, you made me save hours of research in the code. | 22:01 |
| mwhahaha | np | 22:01 |
| *** colonwq has joined #puppet-openstack | 22:07 | |
| *** pradk has quit IRC | 22:11 | |
| zigo | mwhahaha: "name": "puppet/corosync" <--- Where's the git for that one? There's many module, it's confusing ... | 22:12 |
| * gbarbutti eating | 22:13 | |
| mwhahaha | zigo: https://github.com/openstack/puppet-openstack-integration/blob/master/Puppetfile#L237 | 22:13 |
| zigo | mwhahaha: The metadata.json for openstack_extras says: "version_requirement": ">=0.1.0 <2.0.2" | 22:14 |
| zigo | that's what confused me. | 22:14 |
| mwhahaha | it's probably out of date | 22:14 |
| *** guimaluf has joined #puppet-openstack | 22:14 | |
| zigo | mwhahaha: Is that thing completely ignored somehow? :) | 22:14 |
| mwhahaha | zigo: we don't use the metadata.json much | 22:14 |
| mwhahaha | it's required for https://github.com/openstack/puppet-openstack_extras/blob/master/manifests/pacemaker/service.pp but i don't know if that's even used anywhere | 22:15 |
| mwhahaha | old crufty code | 22:15 |
| zigo | Right. | 22:16 |
| zigo | I'll ignore it right now, and maybe will go back to it later. | 22:16 |
| mwhahaha | yea | 22:17 |
| *** rcernin has joined #puppet-openstack | 22:34 | |
| openstackgerrit | Merged openstack/puppet-heat master: Update mysql connection in doc https://review.openstack.org/552011 | 23:38 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!