| gongysh | do you mean other guys are fixing the format issues at the same time? | 00:01 |
|---|---|---|
| gongysh | i just formated the specs, make them easier to read. | 00:02 |
| sridhar_ram | gongysh: understood, they are quite valuable... however the gerrit patchsets for EVP spec, auto-resource creation and multi-site have already merged into tacker-specs mitaka | 00:04 |
| sridhar_ram | gongysh: sfc spec can definitely fixed up...they are going to repropose to newton | 00:05 |
| gongysh | just small format, no new functions or sematics change. i think, we can do it on the same cycle. | 00:07 |
| sridhar_ram | gongysh: never seen such "touch ups" after a spec merges | 00:09 |
| *** gongysh_ has joined #tacker | 00:09 | |
| sridhar_ram | gongysh: gongysh_: does this happen in other projects ? | 00:10 |
| gongysh_ | I see some before. | 00:10 |
| gongysh_ | but I forgot which one. | 00:10 |
| gongysh_ | let me try to find | 00:10 |
| gongysh_ | sridhar_ram, https://review.openstack.org/#/c/208847/ if it is one. | 00:13 |
| * sridhar_ram looking up | 00:14 | |
| sridhar_ram | gongysh_: This is bikeshedding.. but I do realize our specs will show up soon in specs.openstack.org and it will look good w/ these changes. Can this be reviewed / merged after we are done w/ Mitaka code changes ? Perhaps after Apr 1st as part of our doc cleanup cycle ? | 00:18 |
| gongysh_ | sridhar_ram, new comers enter into the project via: wiki, BP's spec docs. They easily turn away due to the format problem. | 00:19 |
| gongysh_ | sridhar_ram, I just wondering where are our specs landing. | 00:20 |
| sridhar_ram | gongysh_: agree, lets plan to take this up after Apr 1st | 00:21 |
| sridhar_ram | gongysh_: btw, how did you nail this using tox -e docs ? I tried it and I get the html version in the .tox dir | 00:21 |
| sridhar_ram | gongysh_: nothing else to indicate these syntax / format issues .. | 00:22 |
| gongysh_ | sridhar_ram, ok. thought I cannot see any sense to post off these change. | 00:22 |
| gongysh_ | some thing must be done by man's eyes. | 00:22 |
| gongysh_ | this is not syntax error. tox -e docs cannot tell. | 00:23 |
| gongysh_ | s/post off/ put off | 00:23 |
| sridhar_ram | gongysh_: got it.. (for the tox -e docs).. it is manual but still will make our specs readable.. so +1 to that.. | 00:24 |
| gongysh_ | sripriya, I am wondering the identity change in multi-site feature. | 00:24 |
| sridhar_ram | gongysh_: however, I want to prioritize the items that will go into our release... we need to do a python-tackerclient by early next week and the rest by last week of march | 00:24 |
| sripriya | gongysh: yes, i missed your ping earlier | 00:25 |
| gongysh_ | sridhar_ram, python-tackerclient should be done along with the API parts of our features. | 00:25 |
| gongysh_ | sridhar_ram, no API written, not easy to tell if the tackerclient is right. | 00:26 |
| sridhar_ram | gongysh_: according to the mitaka release schedule client libraries are due Mar 4 (last week). we might get an exception this time to do it by next week | 00:26 |
| gongysh_ | sridhar_ram, we can set up API without implementation, and then write the tackerclient, and then implement. | 00:26 |
| sridhar_ram | gongysh_: that's why I want to get max focus on code-reviews now... | 00:27 |
| sridhar_ram | gongysh_: both multisite and tosca-parser | 00:27 |
| gongysh_ | sridhar_ram, ok, got it. | 00:27 |
| sridhar_ram | only multisite has new APIs .. we need to review that ASAP | 00:27 |
| *** gongysh has quit IRC | 00:28 | |
| gongysh_ | sripriya, assume tenant A of tacker API register a VIM with tenant B credential. | 00:29 |
| gongysh_ | sripriya, tenant A of tacker API probably does not exist on VIM. | 00:30 |
| gongysh_ | sripriya, right? | 00:31 |
| *** gongysh has joined #tacker | 00:31 | |
| *** gongysh has quit IRC | 00:32 | |
| sripriya | gongsh_: a user can be associated with multiple tenants | 00:33 |
| sripriya | gongysh_: when a user registers VIM with specific credential and tenant, the actual instances land on the registerted VIM tenant only | 00:34 |
| sripriya | gongysh_: this is independent of the tenant where the Tacker API is exposed | 00:35 |
| gongysh_ | sripriya, this way, the normal tenants in a VIM cannot create their own VNFs? | 00:38 |
| gongysh_ | sripriya, by normal, I mean they are not registered vim tenant. | 00:40 |
| sripriya | gongysh_: the feature as of today moves out of the default 'service' tenant and lands all VNFs on the VIM tenant provided in vim register API for a given vim_id. The case of user landing VNFs in their own tenant will be taken up as a RFE. See https://bugs.launchpad.net/tacker/+bug/1554287 | 00:40 |
| openstack | Launchpad bug 1554287 in tacker "[multi-site-vim] Provide tenant id support for VNF create" [High,New] | 00:40 |
| sripriya | gongysh_: thats correct | 00:41 |
| gongysh_ | ok, let's follow this path. thanks | 00:41 |
| sripriya | gongysh_: np | 00:42 |
| gongysh_ | sridhar_ram, are u landing our specs to specs.openstack.org? | 00:47 |
| gongysh_ | sridhar_ram, do u have review URL? | 00:48 |
| gongysh_ | sridhar_ram, do we have other tacker topics selected at summit? | 00:49 |
| sridhar_ram | gongysh_: yes, that's that plan - to hook tacker repo to specs.o.o and docs.o.o | 00:49 |
| sridhar_ram | gongysh_: but first our *highest* priority is get to land the code ASAP | 00:50 |
| sridhar_ram | gongysh_: I'm glad you are already reviewing multisite.. | 00:51 |
| sridhar_ram | gongysh_: I'd love to get your code review for bobh' | 00:51 |
| sridhar_ram | gongysh_: bobh's tosca parser as well.. | 00:51 |
| sridhar_ram | once those two lands we will get some breathing time for things like docs, user-guide, etc... | 00:52 |
| sridhar_ram | gongysh_: another summit topic that got selected was an hands on lab on Tacker :) | 00:52 |
| sridhar_ram | https://www.openstack.org/summit/austin-2016/summit-schedule/events/7804 | 00:53 |
| * gongysh_ on the way to office | 00:57 | |
| *** gongysh_ has quit IRC | 00:57 | |
| *** sridhar_ram has quit IRC | 01:10 | |
| *** sridhar_ram has joined #tacker | 01:10 | |
| *** sridhar_ram has quit IRC | 01:15 | |
| *** uck has quit IRC | 01:16 | |
| *** gongysh has joined #tacker | 01:44 | |
| *** gongysh_ has joined #tacker | 01:46 | |
| *** gongysh_ has quit IRC | 01:50 | |
| *** lhcheng_ has quit IRC | 01:58 | |
| *** sripriya has quit IRC | 02:02 | |
| *** gongysh_ has joined #tacker | 02:04 | |
| *** yfujioka has joined #tacker | 02:08 | |
| *** yfujioka has quit IRC | 02:09 | |
| *** lhcheng has joined #tacker | 02:28 | |
| *** yfujioka_mobile has joined #tacker | 02:31 | |
| *** sridhar_ram has joined #tacker | 02:39 | |
| *** sridhar_ram1 has joined #tacker | 02:41 | |
| *** prashantD_ has quit IRC | 02:45 | |
| *** sridhar_ram1 has quit IRC | 02:45 | |
| *** s3wong has quit IRC | 02:46 | |
| *** lhcheng has quit IRC | 03:24 | |
| *** trozet has joined #tacker | 03:34 | |
| *** gongysh has quit IRC | 03:36 | |
| openstackgerrit | gongysh proposed openstack/tacker: [WIP] Initial patchset for tosca-parser integration https://review.openstack.org/278121 | 04:04 |
| *** sripriya has joined #tacker | 04:05 | |
| *** sripriya_ has joined #tacker | 04:07 | |
| *** sripriya has quit IRC | 04:11 | |
| *** yfujioka_mobile_ has joined #tacker | 04:11 | |
| *** yfujioka_mobile has quit IRC | 04:11 | |
| *** yfujioka_mobile has joined #tacker | 04:17 | |
| *** yfujioka_mobile_ has quit IRC | 04:21 | |
| openstackgerrit | gongysh proposed openstack/tacker: Initial patchset for tosca-parser integration https://review.openstack.org/278121 | 04:41 |
| openstackgerrit | gongysh proposed openstack/tacker-specs: Spec for tosca-parser/heat-translator integration https://review.openstack.org/275475 | 04:53 |
| *** sridhar_ram has quit IRC | 04:54 | |
| gongysh_ | vishnoianil, hi | 04:56 |
| *** vishnoianil has quit IRC | 04:59 | |
| *** deepakcs has joined #tacker | 05:06 | |
| gongysh_ | sripriya_, hi | 05:29 |
| gongysh_ | sripriya_, vim client patch cannot merge, can u update it? | 05:29 |
| *** tbh has joined #tacker | 05:30 | |
| *** tbh has quit IRC | 05:32 | |
| *** tbh has joined #tacker | 05:33 | |
| *** lhcheng_ has joined #tacker | 05:34 | |
| *** tbh has quit IRC | 05:40 | |
| *** santoshk has joined #tacker | 05:44 | |
| *** santoshk has quit IRC | 05:58 | |
| openstackgerrit | Aqsa proposed openstack/tacker: Function to upload OpenWRT sample VNFD during Tacker devstack installation https://review.openstack.org/289776 | 06:21 |
| *** lhcheng has joined #tacker | 06:23 | |
| *** amotoki has joined #tacker | 06:25 | |
| *** lhcheng_ has quit IRC | 06:26 | |
| *** trozet has quit IRC | 06:36 | |
| *** vishwanathj has quit IRC | 06:49 | |
| *** vishwanathj has joined #tacker | 06:51 | |
| *** vishwana_ has joined #tacker | 07:10 | |
| *** vishwanathj has quit IRC | 07:13 | |
| *** tbh has joined #tacker | 07:41 | |
| openstackgerrit | vishwanath jayaraman proposed openstack/tacker: Implements the Enhanced VNF placement blueprint https://review.openstack.org/269295 | 07:49 |
| *** tbh has quit IRC | 07:59 | |
| *** zeih has joined #tacker | 08:00 | |
| *** tbh has joined #tacker | 08:01 | |
| *** tbh has quit IRC | 08:08 | |
| *** tbh has joined #tacker | 08:10 | |
| *** tbh has quit IRC | 08:11 | |
| *** tbh has joined #tacker | 08:13 | |
| *** lhcheng_ has joined #tacker | 08:14 | |
| *** lhcheng has quit IRC | 08:17 | |
| *** tbh has quit IRC | 08:18 | |
| *** tbh has joined #tacker | 08:20 | |
| *** lhcheng_ has quit IRC | 08:32 | |
| *** tbh has quit IRC | 08:35 | |
| *** tbh has joined #tacker | 08:36 | |
| *** yfujioka_mobile has quit IRC | 08:37 | |
| *** tbh has quit IRC | 08:37 | |
| *** tbh has joined #tacker | 08:38 | |
| *** tbh has quit IRC | 08:38 | |
| *** tbh has joined #tacker | 08:41 | |
| *** tbh has quit IRC | 08:43 | |
| *** tbh has joined #tacker | 08:43 | |
| *** tbh has quit IRC | 08:47 | |
| *** openstackgerrit has quit IRC | 08:47 | |
| *** tbh has joined #tacker | 08:48 | |
| *** tbh has quit IRC | 08:48 | |
| *** openstackgerrit has joined #tacker | 08:48 | |
| *** zeih_ has joined #tacker | 08:54 | |
| *** zeih_ has quit IRC | 08:54 | |
| *** zeih_ has joined #tacker | 08:54 | |
| *** mbound has joined #tacker | 09:04 | |
| *** amotoki has quit IRC | 09:10 | |
| *** amotoki has joined #tacker | 09:25 | |
| openstackgerrit | Martin Oemke proposed openstack/python-tackerclient: Clean up references to neutron https://review.openstack.org/289013 | 09:25 |
| *** gongysh has joined #tacker | 09:33 | |
| *** amotoki has quit IRC | 09:34 | |
| *** amotoki has joined #tacker | 09:43 | |
| openstackgerrit | gongysh proposed openstack/tacker: Initial patchset for tosca-parser integration https://review.openstack.org/278121 | 09:43 |
| gongysh | vishwana_, hi | 09:45 |
| *** amotoki has quit IRC | 09:51 | |
| *** amotoki has joined #tacker | 09:55 | |
| *** amotoki has quit IRC | 09:56 | |
| *** amotoki has joined #tacker | 10:06 | |
| *** gongysh has quit IRC | 10:06 | |
| *** zeih_ has quit IRC | 10:25 | |
| *** zeih has quit IRC | 10:29 | |
| *** gongysh_ has quit IRC | 10:34 | |
| *** zeih has joined #tacker | 10:38 | |
| *** zeih has quit IRC | 10:40 | |
| *** vishnoianil has joined #tacker | 10:49 | |
| *** mbound has quit IRC | 10:52 | |
| *** mbound has joined #tacker | 10:59 | |
| *** zeih has joined #tacker | 11:28 | |
| *** vishnoianil has quit IRC | 11:52 | |
| *** zeih has quit IRC | 11:55 | |
| *** amotoki has quit IRC | 12:10 | |
| *** amotoki has joined #tacker | 12:24 | |
| *** amotoki has quit IRC | 12:29 | |
| *** deepakcs has quit IRC | 12:51 | |
| *** bobh has joined #tacker | 13:16 | |
| openstackgerrit | Bob Haddleton proposed openstack/tacker-specs: Spec for tosca-parser/heat-translator integration https://review.openstack.org/275475 | 13:18 |
| *** bobh has quit IRC | 13:20 | |
| openstackgerrit | Bob Haddleton proposed openstack/tacker: Implement tosca-parser/heat-translator integration https://review.openstack.org/278121 | 13:38 |
| *** amotoki has joined #tacker | 13:54 | |
| *** gongysh has joined #tacker | 14:14 | |
| *** gongysh has quit IRC | 14:20 | |
| *** gongysh has joined #tacker | 14:25 | |
| *** gongysh has quit IRC | 14:35 | |
| *** bobh has joined #tacker | 14:44 | |
| *** gongysh has joined #tacker | 14:44 | |
| *** bobh has quit IRC | 14:55 | |
| *** gongysh has quit IRC | 15:01 | |
| *** zeih has joined #tacker | 15:17 | |
| *** zeih has quit IRC | 15:21 | |
| *** trozet has joined #tacker | 15:35 | |
| *** trozet has quit IRC | 15:36 | |
| *** trozet has joined #tacker | 15:36 | |
| *** zeih has joined #tacker | 15:44 | |
| *** zeih has quit IRC | 15:49 | |
| *** zeih has joined #tacker | 16:11 | |
| *** zeih has quit IRC | 16:15 | |
| *** janki_chhatbar has joined #tacker | 16:21 | |
| janki_chhatbar | Hi | 16:25 |
| janki_chhatbar | I found a bug in kilo tacker | 16:25 |
| janki_chhatbar | and have reported it on launchpad | 16:25 |
| janki_chhatbar | it is at https://bugs.launchpad.net/tacker/+bug/1555130 | 16:27 |
| openstack | Launchpad bug 1555130 in tacker "tackerclient git repo URL changed" [Undecided,New] - Assigned to Janki Chhatbar (jankihchhatbar) | 16:27 |
| janki_chhatbar | I have a patch too | 16:27 |
| janki_chhatbar | this will be my first commit | 16:27 |
| janki_chhatbar | do I have to wait for the bug to be "confirmed" to release the patch? | 16:28 |
| *** mbound has quit IRC | 16:32 | |
| *** sridhar_ram has joined #tacker | 16:34 | |
| *** vishwana_ is now known as vishwanathj | 16:48 | |
| *** vishnoianil has joined #tacker | 17:06 | |
| *** prashantD has joined #tacker | 17:12 | |
| *** tbh has joined #tacker | 17:18 | |
| *** tbh has quit IRC | 17:18 | |
| *** tbh has joined #tacker | 17:19 | |
| *** tbh has quit IRC | 17:20 | |
| *** tbh has joined #tacker | 17:21 | |
| *** tbh has quit IRC | 17:22 | |
| *** sridhar_ram has quit IRC | 17:25 | |
| *** tbh has joined #tacker | 17:30 | |
| janki_chhatbar | Hi | 17:30 |
| janki_chhatbar | I just proposed a patch for a bug on tacker | 17:31 |
| janki_chhatbar | https://bugs.launchpad.net/tacker/+bug/1555130 | 17:31 |
| openstack | Launchpad bug 1555130 in tacker "tackerclient git repo URL changed" [Undecided,New] - Assigned to Janki Chhatbar (jankihchhatbar) | 17:31 |
| janki_chhatbar | https://review.openstack.org/#/c/290674/ | 17:31 |
| janki_chhatbar | 1 test fails with following error | 17:32 |
| janki_chhatbar | ImportError: No module named neutron.version | 17:32 |
| janki_chhatbar | ERROR: InvocationError: '/home/jenkins/workspace/gate-tacker-docs/.tox/venv/bin/python setup.py build_sphinx' | 17:32 |
| janki_chhatbar | Can anyone please guide me into solving this | 17:32 |
| *** mbound has joined #tacker | 17:33 | |
| *** tbh has quit IRC | 17:38 | |
| *** tbh has joined #tacker | 17:38 | |
| *** mbound has quit IRC | 17:38 | |
| *** tbh has quit IRC | 17:39 | |
| *** vishnoianil has quit IRC | 17:40 | |
| openstackgerrit | dharmendra kushwaha proposed openstack/tacker-horizon: Doc addition in methods. https://review.openstack.org/290722 | 17:44 |
| *** mbound has joined #tacker | 17:49 | |
| *** mbound has quit IRC | 17:50 | |
| *** amotoki has quit IRC | 17:57 | |
| *** zeih has joined #tacker | 17:59 | |
| *** sripriya_ has quit IRC | 18:00 | |
| *** zeih has quit IRC | 18:04 | |
| *** vishnoianil has joined #tacker | 18:11 | |
| openstackgerrit | bharaththiruveedula proposed openstack/tacker: [WIP] Implements auto flavor creation https://review.openstack.org/290751 | 18:23 |
| *** tbh has joined #tacker | 18:26 | |
| *** zeih has joined #tacker | 18:26 | |
| *** sridhar_ram has joined #tacker | 18:27 | |
| *** tbh has quit IRC | 18:27 | |
| *** tbh has joined #tacker | 18:28 | |
| tbh | sridhar_ram, ping | 18:29 |
| sridhar_ram | tbh: pong | 18:29 |
| *** tbh has quit IRC | 18:30 | |
| *** zeih has quit IRC | 18:31 | |
| *** tbh has joined #tacker | 18:32 | |
| tbh | I wrongly assumed that tacker will use service tenant and nova_admin_* credentials for creating the stacks | 18:32 |
| tbh | so I got "not authorized error" | 18:32 |
| *** tbh has quit IRC | 18:32 | |
| *** tbh has joined #tacker | 18:33 | |
| sridhar_ram | tbh: is your patchset based off sripriya's multisite ? | 18:34 |
| tbh | sridhar_ram, no ... on tosca_parser only | 18:35 |
| sridhar_ram | she is introducing a "nfv-tenant" and a privileged user with advsvc, admin role | 18:35 |
| tbh | sridhar_ram, oh okay .. as part of EVP? | 18:36 |
| sridhar_ram | tbh: no, as part of multisite.. | 18:37 |
| tbh | sridhar_ram, yeah .. sry | 18:37 |
| sridhar_ram | btw, which user are you using for tacker api | 18:37 |
| sridhar_ram | actually, that doesn't matter | 18:37 |
| tbh | sridhar_ram, admin | 18:38 |
| sridhar_ram | can you explain ur issue again ? | 18:38 |
| tbh | sridhar_ram, I am trying to create a flavor using HOT | 18:38 |
| *** zeih has joined #tacker | 18:38 | |
| tbh | sridhar_ram, but heat stack was created by "tacker" user | 18:38 |
| openstackgerrit | Bob Haddleton proposed openstack/tacker-specs: Spec for tosca-parser/heat-translator integration https://review.openstack.org/275475 | 18:38 |
| sridhar_ram | the user that tacker uses is what matters here .. | 18:39 |
| tbh | sridhar_ram, yes | 18:39 |
| *** sripriya has joined #tacker | 18:39 | |
| tbh | sridhar_ram, later for testing I ran "keystone user-role-add --user tacker --tenant service --role admin" | 18:39 |
| tbh | sridhar_ram, then it worked | 18:39 |
| tbh | sridhar_ram, new patch set for tosca-parser | 18:40 |
| tbh | need to update the patch | 18:40 |
| * sridhar_ram notes sripriya in channel | 18:40 | |
| sridhar_ram | tbh: HOT flavor creation is controlled by policy.json file in /etc/heat/ | 18:40 |
| sridhar_ram | sripriya: in multisite patchset what roles does tacker user get ? | 18:42 |
| sripriya | sridhar_ram: they need to set the advsvc role for vim user | 18:42 |
| tbh | sripriya, and admin too? | 18:42 |
| vishwanathj | tbh you need to edit /etc/heat/policy.json and /etc/nova/policy.json for flavor creation through HOT | 18:43 |
| openstackgerrit | dharmendra kushwaha proposed openstack/tacker-horizon: Doc addition in methods. https://review.openstack.org/290722 | 18:43 |
| vishwanathj | only if its executed as a non-admin | 18:43 |
| sripriya | tbh: not needed , this is required for the neutron port attach | 18:43 |
| sridhar_ram | tacker "user" need to be privileged enough to create flavors... | 18:43 |
| sridhar_ram | roles what matter here.. the user can be anybody | 18:44 |
| tbh | vishwanathj, yes, that we can do. But we must not change those values | 18:44 |
| sridhar_ram | I think for now we can go with the rule tacker user needs to have both advsvc and admin roles associated with it | 18:45 |
| *** tbh has quit IRC | 18:45 | |
| sripriya | from heat's policy.json file, the user needs to be admin to create flavor | 18:45 |
| * sridhar_ram notes tbh has flaky netwrok | 18:45 | |
| sripriya | sridhar_ram: agree, so it basically means only admins of remote VIMs can register VIMs | 18:45 |
| sridhar_ram | I see this line in /etc/heat/policy.json .... "resource_types:OS::Nova::Flavor": "rule:deny_stack_user" | 18:46 |
| *** tbh has joined #tacker | 18:46 | |
| sridhar_ram | tbh: you missed couple of lines above ^^^ | 18:46 |
| sridhar_ram | sripriya: sridhar_ram: agree, so it basically means only admins of remote VIMs can register VIMs | 18:46 |
| vishwanathj | sridhar_ram that's the modification needed for non-admin user to create flavor using heat | 18:47 |
| sridhar_ram | sripriya: sridhar_ram: agree, so it basically means only admins of remote VIMs can register VIMs | 18:47 |
| sridhar_ram | not sure how appropriate is to piggybacking on 'admin' role... for short-term we could go w/ that... | 18:47 |
| sridhar_ram | the ideal solution in my mind is to create a "nfv-admin" role and granularly change policy.json to allow privileges | 18:48 |
| sridhar_ram | sripriya: could this be absorbed into your multisite patchset ? | 18:49 |
| tbh | sridhar_ram, you mean tacker user with admin role for now ... or any user with admin role | 18:49 |
| sripriya | sridhar_ram: you mean we need to modify the heat policy.json file to have this nfv-admin role? | 18:49 |
| sridhar_ram | tbh: with multisite it could be any user .. ofcource devstack will have a default | 18:49 |
| tbh | sripriya, sridhar_ram but I am not sure is it feasible to change heat policy.json file | 18:50 |
| sripriya | tbh: yes we cannot change that | 18:50 |
| tbh | sridhar_ram, one qq why do we need nova_admin_* credentials | 18:50 |
| sridhar_ram | sripriya: tbh: I thought that is upto the deployer to allow such privileges... | 18:51 |
| vishwanathj | changing the /etc/heat/policy.json and /etc/nova/policy.json should be a documented in pre=requisites section | 18:51 |
| sripriya | sridhar_ram: tbh: or we could use identity trusts to allow certain user to do this operation exclusively | 18:51 |
| sridhar_ram | sripriya: is that something feasible to implement in a week ? | 18:51 |
| tbh | sridhar_ram, I was in a assumption that we use these parameters to create heat stack | 18:51 |
| sripriya | sridhar_ram: tbh: right now, flavor creation is the only operation i believe which needs admin privilege | 18:52 |
| tbh | sripriya, yes | 18:52 |
| tbh | sridhar_ram, or for now, why can't we have admin role to tacker user? | 18:52 |
| sridhar_ram | again we have to solutions . (1) the easy one, add tacker user to have 'admin' role (2) look for some granular options | 18:52 |
| sridhar_ram | s/to/two/ | 18:53 |
| sripriya | sridhar_ram: i personally have not tested it, but that is the intention of trusts which is available from keystone version 3, should be doable in a week if it works | 18:53 |
| *** tbh has quit IRC | 18:53 | |
| sridhar_ram | sripriya: we don't have time for experimentation .. we are cutting too close | 18:53 |
| * sridhar_ram holding off asking a question until tbh shows up again | 18:54 | |
| sripriya | sridhar_ram: i understand, then option 1 is the way i guess | 18:54 |
| sridhar_ram | anyone here have a issue using 'admin' role for now ? | 18:54 |
| *** tbh has joined #tacker | 18:55 | |
| tbh | (sry internet flucatuations :) ) | 18:55 |
| sridhar_ram | tbh: noticed..! | 18:55 |
| sripriya | sridhar_ram: we initially started off with the assumption of user not having admin privilege for multisite vim, and that is why we expect the user, tenant to be precreated to register the VIM | 18:55 |
| openstackgerrit | Louis Fourie proposed openstack/tacker-specs: Tacker and networking-sfc Integration https://review.openstack.org/290771 | 18:56 |
| vishwanathj | I see no issues with that for the EVP....but I am planning to also document that if an enduser is using a role such as 'nfv-admin' what tweaks need to be done by the operator to the policy.json files | 18:56 |
| sridhar_ram | okay.. decision time..! | 18:57 |
| sridhar_ram | lets unblock tbh by adding admin role to tacker user... | 18:57 |
| sridhar_ram | add 'admin' in addition to 'advsvc' here ...https://github.com/openstack/tacker/blob/master/devstack/lib/tacker#L122 | 18:58 |
| sridhar_ram | meanwhile, separately lets see if we can experiment with some granular options.. | 18:58 |
| sridhar_ram | this experimentation is a low priority for Mitaka | 18:58 |
| sridhar_ram | sounds reasonable ? | 18:58 |
| tbh | yes sridhar_ram, that will be helpful | 18:59 |
| sridhar_ram | vishwanathj: sripriya: thoughts ? | 18:59 |
| sripriya | sridhar_ram: i believe advsvc is subset of admin role, so we can just have the admin role in tacker devstack plugin | 19:00 |
| vishwanathj | sounds reasonable given the time frame and the point in release we are at | 19:00 |
| sripriya | sridhar_ram: fine with me to go with this approach, i can try to look up trusts sometime | 19:00 |
| sridhar_ram | sripriya: no, lets have both .. with the understanding that we will transition to an comprehensive "nfv-admin" role | 19:01 |
| sridhar_ram | sripriya: vishwanathj: thanks .. again, trusts are low priority :) | 19:02 |
| sridhar_ram | tbh: can you go ahead and add the "admin" role to the above line as part of your patchset ? | 19:02 |
| tbh | sridhar_ram, sure | 19:03 |
| *** s3wong has joined #tacker | 19:03 | |
| *** janki_chhatbar has quit IRC | 19:04 | |
| vishwanathj | My Undestanding ==?I foresee VNF deployments being done by a non-admin nfv user that is identified by the Admin ahead of time, with certain tweaks to enable that non-admin nfv user to deploy VNFs.....is my understanding valid? | 19:04 |
| sridhar_ram | vishwanathj: this user we are taking is not the user invoking Tacker API .. but the user invoking other API beneath Tacker like heat API | 19:06 |
| s3wong | trozet: Tacker VNFFG and networking-sfc integration spec: https://review.openstack.org/#/c/290771/ | 19:06 |
| sripriya | sridhar_ram: the devstack plugin line does not need that change since it is specific to service tenant for tacker user and 'tacker' service, but VNFs will now not get deployed in 'service' tenant | 19:06 |
| s3wong | trozet: added you as a reviewer as well | 19:06 |
| *** tbh has quit IRC | 19:06 | |
| openstackgerrit | bharaththiruveedula proposed openstack/tacker: [WIP] Implements auto flavor creation https://review.openstack.org/290751 | 19:07 |
| *** tbh has joined #tacker | 19:07 | |
| sridhar_ram | sripriya: will come to that.. before that I've a basic question ... are you changing the devstack plugin as part of multisite patchset ? | 19:08 |
| sripriya | sridhar_ram: to register default VIM? yes, i will pushing the change soon | 19:09 |
| sridhar_ram | sripriya: okay.. will be part of https://review.openstack.org/#/c/285096/ ? | 19:09 |
| sripriya | sridhar_ram: right | 19:09 |
| sridhar_ram | sripriya: which patch is appropriate to make this change (to add admin role) to nfv user ? | 19:10 |
| sridhar_ram | *patchset | 19:10 |
| sridhar_ram | tbh or yours ? | 19:10 |
| trozet | thansk s3wong | 19:10 |
| sripriya | sridhar_ram: i think it is appropriate to take care of that change in multisite, as i'm handling creation of new nfv-user for registering default VIM | 19:11 |
| sridhar_ram | sripriya: that is what I thought.. | 19:12 |
| sripriya | sridhar_ram: i need to change from advsvc to admin role for the nfv-user | 19:13 |
| vishwanathj | sridhar_ram If I am logged in from Horizon as a demo user and upload a VNFD followed by VNF deploy that requires Flavor creation, would that be possible? making sure if my understanding and thinking is right | 19:14 |
| sridhar_ram | sripriya: again, I'd suggest to keep both roles - advsvc,admin .. so that the transition is explicit | 19:14 |
| sripriya | sridhar_ram: sure | 19:15 |
| sridhar_ram | tbh: I thought flavor creation is taken care by bobh's patchset .. so why do we need https://review.openstack.org/290751 ? | 19:16 |
| sridhar_ram | tbh: is that only for old TOSCA syntax ? | 19:17 |
| tbh | sridhar_ram, am not sure why bobh patchset will handle auto flavor creation | 19:18 |
| tbh | sridhar_ram, no.. for the old syntax, we are not handling flavor creation, I guess | 19:19 |
| sridhar_ram | tbh: yes, no need to handle any new feature for old syntax | 19:19 |
| tbh | sridhar_ram, am I missing something? | 19:19 |
| sridhar_ram | tbh: based on our previous irc chat .. my understanding was num_cpu, mem, disk are taken care by tosca-parser and heat-translator ? | 19:20 |
| *** zeih_ has joined #tacker | 19:20 | |
| sridhar_ram | tbh: damn.. sorry, brain freeze... | 19:20 |
| sridhar_ram | tbh: heat-translator is doing that weird flavor matching .. and that doesn't cut it for us.. | 19:21 |
| tbh | sridhar_ram, yes ... so we don't need to add those details in tacker_defs.yaml or tacker_nfv_defs.yaml | 19:21 |
| tbh | sridhar_ram, so my patch will remove those details from the template before it handed over to tosca-parser and translator | 19:22 |
| tbh | after converting to HOT | 19:22 |
| tbh | I will add flavor creation details to the created HOT | 19:22 |
| sridhar_ram | tbh: make sense.. no tosca parser work.. but we still are in the business of creating flavors ! | 19:22 |
| sripriya | tbh: you can remove the devstack tacker changes from your patchset, since multisite will handle that change | 19:23 |
| tbh | sripriya, yes I will remove it | 19:23 |
| *** tbh has quit IRC | 19:23 | |
| *** zeih_ has quit IRC | 19:25 | |
| *** tbh has joined #tacker | 19:27 | |
| *** tbh has quit IRC | 19:27 | |
| *** tbh has joined #tacker | 19:28 | |
| vishwanathj | sridhar_ram at your convenience, can you answer my question ^^^^^ | 19:30 |
| *** lhcheng has joined #tacker | 19:40 | |
| *** bobh has joined #tacker | 19:41 | |
| sridhar_ram | vishwanathj: your understanding is correct... the user interacting with Tacker - upload vnfd, instantiate vnf, etc - can all be done by unprivileged user like a 'demo' user | 19:43 |
| *** bobh has quit IRC | 19:44 | |
| sridhar_ram | tbh: you plan to upload separate patchsets for network and image handling ? | 19:44 |
| tbh | sridhar_ram, yes, in the mean while I like to get some comments on the flavor creation patch approach | 19:45 |
| tbh | sridhar_ram, so that I won't continue those mistakes | 19:45 |
| tbh | in the next patches for image and network | 19:46 |
| sridhar_ram | tbh: sounds good.. we all have busy review work ahead of us.. | 19:49 |
| tbh | sridhar_ram, yeah .. I am seeing large patchsets for review and new people are joining the team | 19:50 |
| *** trozet_ has joined #tacker | 19:50 | |
| sridhar_ram | tbh: yep.. busy but fun times ahead :) | 19:50 |
| tbh | true | 19:51 |
| *** trozet has quit IRC | 19:52 | |
| *** rski has joined #tacker | 19:53 | |
| *** tbh has quit IRC | 19:56 | |
| *** tbh has joined #tacker | 19:58 | |
| *** sridhar_ram1 has joined #tacker | 19:58 | |
| *** trozet_ is now known as trozet | 19:58 | |
| *** sridhar_ram has quit IRC | 19:59 | |
| *** tbh has quit IRC | 20:01 | |
| *** sridhar_ram1 has quit IRC | 21:13 | |
| *** sridhar_ram has joined #tacker | 21:15 | |
| *** sridhar_ram1 has joined #tacker | 22:02 | |
| *** sripriya_ has joined #tacker | 22:02 | |
| *** sridhar_ram has quit IRC | 22:04 | |
| *** sripriya__ has joined #tacker | 22:04 | |
| *** sripriya has quit IRC | 22:05 | |
| *** sripriya_ has quit IRC | 22:07 | |
| *** sripriya__ has quit IRC | 22:12 | |
| *** prashantD has quit IRC | 22:54 | |
| *** sridhar_ram1 has quit IRC | 22:57 | |
| *** prashantD has joined #tacker | 23:01 | |
| *** zeih has quit IRC | 23:01 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!