*** _mattf is now known as mattf | 01:43 | |
*** sacharya has quit IRC | 04:29 | |
*** akuznetsov has joined #savanna | 04:32 | |
*** DinaBelova has joined #savanna | 04:56 | |
*** SergeyLukjanov has joined #savanna | 05:20 | |
*** nprivalova has joined #savanna | 05:31 | |
*** akuznetsov has quit IRC | 05:47 | |
*** DinaBelova has quit IRC | 05:49 | |
*** SergeyLukjanov has quit IRC | 05:55 | |
*** openstack has joined #savanna | 06:18 | |
*** tmckay1 has joined #savanna | 06:20 | |
*** crobertsrh has joined #savanna | 06:23 | |
*** tmckay has quit IRC | 06:23 | |
*** _crobertsrh has quit IRC | 06:24 | |
*** akuznetsov has joined #savanna | 06:37 | |
*** mattf has quit IRC | 06:53 | |
*** mattf has joined #savanna | 06:53 | |
*** SergeyLukjanov has joined #savanna | 07:10 | |
*** SlickNik has quit IRC | 07:14 | |
*** SlickNik has joined #savanna | 07:14 | |
*** DinaBelova has joined #savanna | 07:19 | |
*** DinaBelova has quit IRC | 08:08 | |
*** DinaBelova has joined #savanna | 08:11 | |
*** akuznetsov has quit IRC | 08:12 | |
*** SergeyLukjanov has quit IRC | 08:13 | |
*** alazarev has joined #savanna | 08:17 | |
*** SergeyLukjanov has joined #savanna | 08:20 | |
*** dmitryme has joined #savanna | 08:22 | |
*** alazarev has quit IRC | 08:23 | |
*** alazarev has joined #savanna | 08:24 | |
*** tmckay has joined #savanna | 08:31 | |
*** tmckay1 has quit IRC | 08:33 | |
*** alazarev has quit IRC | 08:44 | |
*** akuznetsov has joined #savanna | 08:44 | |
*** alazarev has joined #savanna | 08:57 | |
*** DinaBelova has quit IRC | 09:28 | |
*** akuznetsov has quit IRC | 09:45 | |
*** akuznetsov has joined #savanna | 10:14 | |
*** nprivalova has quit IRC | 10:14 | |
openstackgerrit | Andrew Lazarev proposed a change to stackforge/savanna: Fixed output of --version command https://review.openstack.org/46921 | 10:23 |
---|---|---|
*** dmitryme has quit IRC | 10:52 | |
*** alazarev has quit IRC | 11:07 | |
*** nprivalova has joined #savanna | 11:12 | |
aignatov | mattf, pong is not acttual anymore, I wanted to review my patchsets regrding moving Hadoop from 1.1.2 to 1.2.1 | 11:13 |
aignatov | but i's already merged) | 11:13 |
mattf | yeah, i'm running through my email and noticed | 11:20 |
mattf | i tossed a lgtm anyway | 11:20 |
mattf | i burned too much of yesterday trying to get gre neutron working | 11:21 |
mattf | eventually aborted back to nova-networking, so sad | 11:21 |
*** dmitryme has joined #savanna | 11:21 | |
mattf | SergeyLukjanov, ping re --version | 11:23 |
mattf | did your commit miss a file? the patch isn't working for me. | 11:23 |
SergeyLukjanov | mattf, hi | 11:23 |
SergeyLukjanov | mattf, it works ok for me | 11:23 |
mattf | does it need a config mod? | 11:24 |
* mattf wonders if it's a pbr version issue | 11:25 | |
*** DinaBelova has joined #savanna | 11:28 | |
*** nprivalova has quit IRC | 11:30 | |
SergeyLukjanov | mattf, which version of pbr are you using? | 11:32 |
*** nprivalova has joined #savanna | 11:34 | |
*** alazarev has joined #savanna | 11:41 | |
mattf | SergeyLukjanov, fyi we directly depend on iso8601, but don't have it listed in requirements -- "savanna/openstack/common/timeutils.py", line 26 | 11:42 |
SergeyLukjanov | mattf, mm, yeah, good point | 11:43 |
SergeyLukjanov | btw some of our requirements depends on it too, but it'll be good to specify it obviously | 11:44 |
mattf | yup | 11:44 |
mattf | --version is working now for me, had to setup a clean venv | 11:44 |
*** SergeyLukjanov has quit IRC | 11:49 | |
*** SergeyLukjanov has joined #savanna | 11:49 | |
openstackgerrit | A change was merged to stackforge/savanna: Fixed output of --version command https://review.openstack.org/46921 | 11:49 |
openstackgerrit | Matthew Farrellee proposed a change to stackforge/savanna: Add direct dependency on iso8601 https://review.openstack.org/46929 | 11:55 |
openstackgerrit | A change was merged to stackforge/savanna: Partial implementation for bug 1217983 https://review.openstack.org/46810 | 12:19 |
*** alazarev has quit IRC | 12:29 | |
*** alazarev has joined #savanna | 12:31 | |
openstackgerrit | Ilya Tyaptin proposed a change to stackforge/savanna: Update to using keystone api v3. https://review.openstack.org/46938 | 12:48 |
*** SergeyLukjanov has quit IRC | 12:49 | |
*** DinaBelova has quit IRC | 12:50 | |
*** SergeyLukjanov has joined #savanna | 12:51 | |
openstackgerrit | Ilya Tyaptin proposed a change to stackforge/savanna: Update to using keystone api v3 https://review.openstack.org/46938 | 12:53 |
*** nprivalova has quit IRC | 12:59 | |
*** nprivalova has joined #savanna | 13:02 | |
*** SergeyLukjanov has quit IRC | 13:07 | |
*** SergeyLukjanov has joined #savanna | 13:11 | |
*** DinaBelova has joined #savanna | 13:11 | |
*** tmckay has left #savanna | 13:22 | |
openstackgerrit | A change was merged to stackforge/savanna: Add direct dependency on iso8601 https://review.openstack.org/46929 | 13:23 |
*** SergeyLukjanov has quit IRC | 13:33 | |
openstackgerrit | Trevor McKay proposed a change to stackforge/savanna: Refactor job manager to isolate explicit references to job type https://review.openstack.org/46294 | 13:42 |
*** tmckay has joined #savanna | 13:43 | |
openstackgerrit | Andrew Lazarev proposed a change to stackforge/savanna: Added validation for 'default_image_id' field in create claster requiest https://review.openstack.org/46952 | 14:05 |
*** DinaBelova has quit IRC | 14:07 | |
tmckay | akuznetsov, nprivalova, I am looking for a new savanna project :) Anything outstanding on EDP? Blueprints? What needs to be done, and what are priorities? | 14:08 |
*** SergeyLukjanov has joined #savanna | 14:08 | |
tmckay | I can search through blueprints and bugs but I thought you may have a "hot" list | 14:09 |
akuznetsov | Hi tmckay I can suggest the integration with GlusterFS as data source and storage for binaries. Swift as storage for binaries as second option | 14:11 |
tmckay | okay, that sounds good. | 14:11 |
*** DinaBelova has joined #savanna | 14:12 | |
tmckay | on the phone now, but I'll start looking that way | 14:12 |
akuznetsov | great | 14:12 |
*** sacharya has joined #savanna | 14:20 | |
*** rnirmal has joined #savanna | 14:21 | |
*** dmitryme has quit IRC | 14:31 | |
*** sacharya has quit IRC | 14:31 | |
*** alazarev has quit IRC | 14:41 | |
*** alazarev has joined #savanna | 14:42 | |
*** tstclair has quit IRC | 14:48 | |
*** DinaBelova has quit IRC | 14:57 | |
openstackgerrit | Andrew Lazarev proposed a change to stackforge/savanna: Added validation for 'default_image_id' field for cluster create https://review.openstack.org/46952 | 14:58 |
*** SergeyLukjanov has quit IRC | 15:02 | |
*** DinaBelova has joined #savanna | 15:06 | |
*** dmitryme has joined #savanna | 15:10 | |
*** sacharya has joined #savanna | 15:12 | |
openstackgerrit | Nikita Konovalov proposed a change to stackforge/savanna-dashboard: Fix Cluster Template name https://review.openstack.org/46967 | 15:19 |
openstackgerrit | Nikita Konovalov proposed a change to stackforge/savanna: Fix Cluster Template name https://review.openstack.org/46970 | 15:24 |
*** SergeyLukjanov has joined #savanna | 15:47 | |
*** nprivalova has quit IRC | 15:56 | |
*** akuznetsov has quit IRC | 16:29 | |
*** nprivalova has joined #savanna | 16:42 | |
openstackgerrit | Nikita Konovalov proposed a change to stackforge/savanna: Fix Cluster Template name https://review.openstack.org/46970 | 16:44 |
*** mattf is now known as _mattf | 16:48 | |
*** _mattf is now known as mattf | 16:54 | |
openstackgerrit | Andrew Lazarev proposed a change to stackforge/savanna: Added validation for 'default_image_id' field for cluster create https://review.openstack.org/46952 | 17:02 |
*** nprivalova has left #savanna | 17:04 | |
*** DinaBelova has quit IRC | 17:05 | |
*** SergeyLukjanov has quit IRC | 17:06 | |
*** alazarev has quit IRC | 17:12 | |
*** dmitryme has quit IRC | 17:16 | |
*** alazarev has joined #savanna | 17:24 | |
*** alazarev has quit IRC | 17:26 | |
*** SergeyLukjanov has joined #savanna | 17:38 | |
*** dmitryme has joined #savanna | 17:50 | |
openstackgerrit | Nikolay Mahotkin proposed a change to stackforge/savanna: Fix submitting hive job (DRAFT) https://review.openstack.org/47000 | 17:53 |
*** DinaBelova has joined #savanna | 17:59 | |
*** rnirmal has quit IRC | 18:04 | |
*** tstclair has joined #savanna | 18:04 | |
*** dmitryme has quit IRC | 18:21 | |
*** rnirmal has joined #savanna | 18:23 | |
*** DinaBelova has quit IRC | 18:37 | |
*** akuznetsov has joined #savanna | 18:43 | |
*** SergeyLukjanov has quit IRC | 19:15 | |
*** SergeyLukjanov has joined #savanna | 19:21 | |
*** dmitryme has joined #savanna | 19:29 | |
*** jfriedly has joined #savanna | 19:51 | |
*** akuznetsov has quit IRC | 20:01 | |
*** akuznetsov has joined #savanna | 20:06 | |
tmckay | akuznetsov, I have a question. When I set up a devstack and enable swift as a service, swift is running on the devstack host. We have "swift-internal" and "swift-external". Which is it? | 20:19 |
tmckay | Does swift-internal mean a swift instance running on a cluster deployed from savanna? | 20:20 |
tmckay | And swift-external is everything else? | 20:20 |
akuznetsov | tmckay no swift-external means that user specifies user name password for it | 20:21 |
tmckay | ah :) | 20:21 |
tmckay | okay. | 20:21 |
akuznetsov | swift-internal means that will use oAuth for getting data or trust for getting a job source | 20:22 |
tmckay | so if I have swift running as part of devstack, then theoretically I should be able to read/write to it from savanna | 20:22 |
akuznetsov | we already has trust for cluster shutdown | 20:22 |
tmckay | what is "trust"? | 20:23 |
akuznetsov | trust allows Savanna to perform some action on behalf of user | 20:24 |
tmckay | can you tell me where it's set up? | 20:24 |
tmckay | I want to look :) | 20:24 |
akuznetsov | for example Savanna need to shutdown cluster but has no user token, but it has a trust for it. Savanna goes to keystone with this trust and get the token | 20:25 |
akuznetsov | see patch https://review.openstack.org/#/c/44706/ | 20:26 |
akuznetsov | we create trust for each cluster | 20:26 |
akuznetsov | because we will need it not only for shutdown for transient but for scaling | 20:27 |
tmckay | great, thanks. I found trusts on the openstack wiki, too. | 20:27 |
akuznetsov | it seems that Savanna a first project with trusts :) | 20:28 |
SergeyLukjanov | akuznetsov, I think that Heat is the first one:) | 20:28 |
tmckay | hurray! So, why are we using auth for getting data, but a trust for getting a job source? Why is it a different case? | 20:29 |
tmckay | "are we" -> "will we" | 20:29 |
akuznetsov | SergeyLukjanov trusts only on Heat roadmap https://wiki.openstack.org/wiki/Heat/RoadMap | 20:30 |
akuznetsov | tmckay In first case user provide login/password for Swift | 20:31 |
akuznetsov | in second we get job source via trusts | 20:31 |
akuznetsov | trust will be created automatically when user create a job source | 20:32 |
akuznetsov | this in more convenient for end user | 20:32 |
SergeyLukjanov | akuznetsov, https://github.com/openstack/heat/blob/master/heat/common/heat_keystoneclient.py#L148 | 20:33 |
SergeyLukjanov | looks like that they are already use them or prepared all stuff to do it | 20:33 |
SergeyLukjanov | https://github.com/openstack/heat/commit/e686699b00ee2ca190946261677d89641707e6c6 | 20:33 |
SergeyLukjanov | already migrated from storing credentials to using trusts | 20:34 |
tmckay | akuznetsov, ah, I see. credentials are stored in a data_source, and then data_source is referenced from the job_execution | 20:34 |
akuznetsov | the same for job origin | 20:35 |
tmckay | but, is there a security problem there? Anyone who can access a data source object from the savanna db has a user/password they can use. | 20:35 |
SergeyLukjanov | tmckay, the same story with tokens or trusts | 20:36 |
akuznetsov | yes why we need another way to integrate with data sources | 20:36 |
SergeyLukjanov | and in production installation this db will be shared with other OS services | 20:36 |
SergeyLukjanov | so, anyone who can access db will have an ability to do anything | 20:36 |
*** dmitryme has quit IRC | 20:37 | |
akuznetsov | SergeyLukjanov trusts are better because we remove right with removing them from end user | 20:37 |
*** akuznetsov has quit IRC | 20:37 | |
*** akuznetsov has joined #savanna | 20:37 | |
*** akuznetsov has quit IRC | 20:44 | |
*** SergeyLukjanov has quit IRC | 20:56 | |
*** crobertsrh is now known as _crobertsrh | 21:20 | |
*** sacharya has quit IRC | 21:26 | |
*** mattf is now known as _mattf | 21:30 | |
*** sacharya has joined #savanna | 22:37 | |
*** rnirmal has quit IRC | 22:40 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!