Tuesday, 2018-12-11

*** markvoelker has joined #refstack03:57
*** markvoelker has quit IRC04:02
*** openstackgerrit has joined #refstack06:16
openstackgerritChandan Kumar proposed openstack/python-tempestconf master: Use member role for demo user  https://review.openstack.org/62407806:16
openstackgerritChandan Kumar proposed openstack/python-tempestconf master: Added python-tempestconf-tempest-devstack-py3  https://review.openstack.org/62286507:16
openstackgerritChandan Kumar proposed openstack/python-tempestconf master: Use member role for demo user  https://review.openstack.org/62407807:27
openstackgerritQuique Llorente proposed openstack/python-tempestconf master: Adapt python-tempestconf to python3  https://review.openstack.org/62234307:29
openstackgerritChandan Kumar proposed openstack/python-tempestconf master: Use Member role for demo user  https://review.openstack.org/62407807:34
*** tosky has joined #refstack07:58
openstackgerritChandan Kumar proposed openstack/python-tempestconf master: [WIP]First create image, Member role for demo user  https://review.openstack.org/62407808:43
*** kopecmartin|off is now known as kopecmartin08:56
openstackgerritQuique Llorente proposed openstack/python-tempestconf master: Adapt python-tempestconf to python3  https://review.openstack.org/62234309:51
*** chandan_kumar has joined #refstack13:38
openstackgerritMartin Kopec proposed openstack/python-tempestconf master: Handle Forbidden exception when creating role  https://review.openstack.org/62441114:29
kopecmartintosky, arxcruz ^^ that should fix the devstack demo job14:30
arxcruzkopecmartin: let's see if zuul god will be satisfied14:31
kopecmartinsure14:32
kopecmartinis the change ok? I'm asking just to prevent rechecking it later14:32
openstackgerritChandan Kumar proposed openstack/python-tempestconf master: Added python-tempestconf-tempest-devstack-py3  https://review.openstack.org/62286514:35
toskykopecmartin: did you find out what triggered the issue (aka "why was it working before?")14:37
kopecmartintosky, I'm still searching  .. it was working because listing roles for a demo user was forbidden14:38
toskykopecmartin: and isn't it forbidden now too?14:39
kopecmartinno14:39
kopecmartini reproduced it, i still have the env if you want to take a look14:39
toskyoh, creation is now forbidden14:40
toskybut if listing was forbidden, and now it isn't, why doesn't tempestconf find the role? Maybe because it is not assigned to the demo user?14:41
kopecmartintosky, only these roles are present by default: http://paste.openstack.org/show/737019/14:42
chandan_kumarkopecmartin:is it not the case that those roles are only used/meant for admin user only ?14:46
kopecmartinchandan_kumar, probably .. at least only admin user can create a role14:47
toskychandan_kumar, kopecmartin: roles and users and independent14:50
toskyroles are used to associate a users or a group to a project or a domain14:50
tosky(or to a system, but that's a special case)14:50
tosky(the system, not a system)14:50
toskykopecmartin: and member is there; Member and member are the same14:51
kopecmartintosky, is it just in this case or all roles are not case sensitive?14:53
chandan_kumartosky: but in previous cases on tripleo side, it behaves differently14:53
toskykopecmartin: roles are not case sensitive14:53
toskyroles are not case sensitive :)14:54
toskylet me find the relevant documentation14:54
kopecmartintosky, so then we have to modify this statement https://github.com/openstack/python-tempestconf/blob/master/config_tempest/services/object_storage.py#L5214:54
toskytripleo may or may not create the same set of roles than devstack does14:54
toskyuhm, or better, let me check one thing14:56
toskyit depends on the keystone backend14:56
toskywhen using MySQL and SQLite, keystone is case-insensitive14:57
toskysame for LDAP14:57
toskyit's case-sensitive when using PostgreSQL14:57
chandan_kumarkopecmartin: https://review.openstack.org/#/c/624411/ this fix is it possible to handle the same https://github.com/openstack/python-tempestconf/blob/master/config_tempest/services/object_storage.py#L43 below here?14:58
toskykopecmartin: would it work if you try to check if the role exist?14:58
kopecmartinchandan_kumar, yes15:00
tosky(for the record: https://docs.openstack.org/keystone/latest/admin/case-insensitive.html )15:00
*** markvoelker has joined #refstack15:00
kopecmartintosky, what do you mean? it checks if the role exists here https://github.com/openstack/python-tempestconf/blob/master/config_tempest/services/object_storage.py#L52 and on line 5615:01
kopecmartinchandan_kumar, it is possible, however in that case the except block will not know if listing or creating is the problem  .. do we want that?15:03
chandan_kumarkopecmartin: i think so15:04
kopecmartinchandan_kumar, I'll wait to see if it solved the issue in the job and then I'll push another patchset which does that15:05
chandan_kumarkopecmartin: use this card for tracking https://tree.taiga.io/project/tripleo-ci-board/issue/502?kanban-status=2027734 added your review here15:07
kopecmartinchandan_kumar, do you know why refstack job fails with the same issue although it was fixed in our devstack demo job (see the review 624411 in zuul )?15:23
kopecmartinhttp://logs.openstack.org/11/624411/1/check/refstack-client-devstack-tempestconf/d357c2d/job-output.txt.gz#_2018-12-11_15_10_33_59118215:24
chandan_kumarkopecmartin: need to check whether that review is picked up or not here15:27
kopecmartinit's not, how to do it?15:27
chandan_kumarby refstack-cleint job15:27
chandan_kumarkopecmartin: http://logs.openstack.org/11/624411/1/check/refstack-client-devstack-tempestconf/d357c2d/job-output.txt.gz#_2018-12-11_15_09_35_14204415:28
chandan_kumarkopecmartin: not sure need to check with infra15:28
kopecmartinchandan_kumar, the way how it's installed it seems that we are using not current python-tempestconf (cherry picked about the newest changes) to gate python-tempestconf changes, that's not good15:29
kopecmartinhttps://github.com/openstack/refstack-client/blob/master/roles/generate-tempestconf-refstack/tasks/main.yaml#L615:29
chandan_kumarkopecmartin: -c master is used for tempest branch15:29
chandan_kumarnot for tempestconf15:29
kopecmartinpython-tempestconf is installed together with tempest inside that setup_env script15:30
chandan_kumarkopecmartin: yes15:30
kopecmartinand if setup_env doesn't cherry pick python-tempestconf than old python-tempestconf is used15:31
chandan_kumarone min15:31
kopecmartinold = without the latest change it's gating15:31
chandan_kumarkopecmartin: https://github.com/openstack/refstack-client/blob/master/setup_env#L111 -> it will clone the master branch15:32
chandan_kumarkopecmartin: this part also needs to be fixed15:33
kopecmartinyes15:34
kopecmartinwe should add a new task which installs the newest python-tempestconf in another venv and used that venv for running python-tempestconf15:34
chandan_kumarkopecmartin: in order to land current patch, we need to make refstack job nv then15:34
kopecmartinor something like that15:34
kopecmartini guess, because now it looks like a checkmate :D15:35
chandan_kumarkopecmartin: yes hehe15:35
toskykopecmartin: I think whac-a-mole is the word that you are looking for15:35
kopecmartinis it? /me googling what it is :D :D15:36
kopecmartintosky, chandan_kumar how can i make the job non-voting?15:43
chandan_kumarkopecmartin: one15:43
chandan_kumarkopecmartin: just add voting: false15:44
kopecmartinwhere?15:44
chandan_kumarjust below the job15:44
toskykopecmartin: http://git.openstack.org/cgit/openstack/sahara-tests/tree/.zuul.yaml#n2815:44
toskyor even http://git.openstack.org/cgit/openstack/sahara-tests/tree/.zuul.yaml#n1215:45
chandan_kumaryes better example :-)15:45
kopecmartinin our .zuul.yaml file, right? .. tripleo-ci-centos-7-scenario002-multinode-oooq-container is non voting too, but i don't see any voting:false in .zuul.yaml15:46
kopecmartinthat confuses me15:46
toskykopecmartin: maybe it has voting: false in the place where it's defined (tripleo-ci)15:48
kopecmartinprobably yes .. ok, I'm editing the patch15:49
openstackgerritMartin Kopec proposed openstack/python-tempestconf master: Handle Forbidden exception when creating role  https://review.openstack.org/62441115:52
kopecmartinchandan_kumar, will you fix refstack's job or should I ?15:53
*** markvoelker has quit IRC15:55
*** markvoelker has joined #refstack15:56
*** markvoelker has quit IRC16:01
openstackgerritMartin Kopec proposed openstack/python-tempestconf master: Handle Forbidden exception when creating role  https://review.openstack.org/62441117:09
*** kopecmartin is now known as kopecmartin|off17:16
*** markvoelker has joined #refstack21:45
*** markvoelker has quit IRC21:49
*** markvoelker has joined #refstack22:24
openstackgerritMartin Kopec proposed openstack/python-tempestconf master: Handle Forbidden exception when creating role  https://review.openstack.org/62441123:24

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!