Tuesday, 2016-01-12

*** panda has quit IRC00:06
*** pradk has quit IRC00:06
*** panda has joined #tripleo00:06
openstackgerritIan Wienand proposed openstack/diskimage-builder: Prune old branches when updating cache  https://review.openstack.org/26608600:32
*** shakamunyi has quit IRC00:35
*** shakamunyi has joined #tripleo00:35
*** dmacpher-afk has quit IRC00:48
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: WIP - Deploy Aodh services, replacing Ceilometer Alarm  https://review.openstack.org/24140800:54
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: WIP - Deploy Aodh services, replacing Ceilometer Alarm  https://review.openstack.org/24140800:55
openstackgerritMerged openstack/diskimage-builder: deploy-ironic: Fix syntax error when checking for root device hints  https://review.openstack.org/26473600:55
*** barra204 has joined #tripleo00:56
*** shakamunyi has quit IRC00:57
*** eil397 has quit IRC01:00
*** eil397 has joined #tripleo01:05
*** alop has quit IRC01:09
*** barra204 has quit IRC01:14
*** shakamunyi has joined #tripleo01:15
*** trozet has joined #tripleo01:27
*** barra204 has joined #tripleo01:31
*** shakamunyi has quit IRC01:32
*** shakamunyi has joined #tripleo01:36
*** dmacpher has joined #tripleo01:36
*** trozet has quit IRC01:37
*** barra204 has quit IRC01:38
*** barra204 has joined #tripleo01:38
*** shakamunyi has quit IRC01:39
*** thrash is now known as thrash|g0ne01:39
*** shakamunyi has joined #tripleo01:44
*** barra204 has quit IRC01:45
*** shakamunyi has quit IRC01:48
*** shakamunyi has joined #tripleo01:48
*** shakamunyi has quit IRC01:54
*** rbrady has quit IRC01:58
*** eil397 has quit IRC02:07
*** shakamunyi has joined #tripleo02:08
*** shakamunyi has quit IRC02:10
*** shakamunyi has joined #tripleo02:12
slagleif there are any cores around, https://review.openstack.org/#/q/I3c1ecadceb9623fa03edaf87226297834448d161,n,z removes our stable/liberty pin02:17
*** tzumainn has quit IRC02:17
*** shakamunyi has quit IRC02:22
*** shakamunyi has joined #tripleo02:23
*** cwolferh has quit IRC02:32
*** shakamunyi has quit IRC02:32
*** sthillma has quit IRC02:38
*** rbrady has joined #tripleo02:45
openstackgerritReedip proposed openstack/instack-undercloud: Remove Py33 support  https://review.openstack.org/26611202:52
openstackgerritReedip proposed openstack/instack: Remove Py33 support  https://review.openstack.org/26611603:05
*** spredzy has quit IRC03:07
*** spredzy has joined #tripleo03:10
*** trozet has joined #tripleo03:14
*** cwolferh has joined #tripleo03:46
*** prometheanfire has quit IRC03:57
*** Marga_ has joined #tripleo03:58
*** Marga_ has quit IRC03:59
*** Marga_ has joined #tripleo03:59
*** cwolferh has quit IRC04:03
*** prometheanfire has joined #tripleo04:08
*** yamahata has quit IRC04:10
*** rhallisey has quit IRC04:19
*** links has joined #tripleo04:26
*** Marga_ has quit IRC04:26
*** coolsvap|away is now known as coolsvap04:29
*** morazi has joined #tripleo04:30
*** teju has joined #tripleo04:38
*** trozet has quit IRC04:42
*** cwolferh has joined #tripleo04:42
tejuHi, I need help with this question - https://ask.openstack.org/en/question/87294/tripleo-heat-stack-failed/04:47
*** tserong has quit IRC05:00
*** stendulker has joined #tripleo05:01
*** dmacpher has quit IRC05:05
*** masco has joined #tripleo05:06
*** tserong has joined #tripleo05:07
*** rlandy has quit IRC05:12
*** dmacpher has joined #tripleo05:22
*** oshvartz has quit IRC05:24
*** dmacpher_ has joined #tripleo05:38
*** dmacpher has quit IRC05:42
*** jaosorior has joined #tripleo05:47
tejuHi, I am installing RHEL OS P7. I ran the command to deploy overcloud and it failed. I see few deployments failed. I fixed few infra related issues. Now, can I resume the stack to start where it left off last time it failed?05:50
*** yamahata has joined #tripleo05:51
*** dmacpher_ has quit IRC06:28
*** ryansb has quit IRC06:31
*** dsneddon has quit IRC06:37
*** jaosorior has quit IRC06:48
*** akuznetsov has joined #tripleo06:52
*** akuznetsov has quit IRC07:02
*** akuznetsov has joined #tripleo07:06
*** jaosorior has joined #tripleo07:09
*** dshulyak_ has joined #tripleo07:09
*** bvandenh has joined #tripleo07:12
*** ukalifon1 has joined #tripleo07:15
*** oshvartz has joined #tripleo07:18
*** bvandenh has quit IRC07:22
*** ryansb has joined #tripleo07:24
*** ryansb has joined #tripleo07:24
*** akuznetsov has quit IRC07:40
*** jprovazn has joined #tripleo07:49
*** jtomasek has joined #tripleo07:57
*** akrivoka has joined #tripleo07:58
*** rasca has joined #tripleo07:58
*** panda has quit IRC08:06
*** rasca has quit IRC08:06
*** jistr has joined #tripleo08:06
*** rasca has joined #tripleo08:06
*** panda has joined #tripleo08:06
*** jistr is now known as jistr|doc08:07
*** hewbrocca has joined #tripleo08:13
*** bvandenh has joined #tripleo08:14
*** aufi has joined #tripleo08:15
*** athomas has joined #tripleo08:15
openstackgerrityolanda.robla proposed openstack/diskimage-builder: Add dib element to generate logical volumes  https://review.openstack.org/25204108:17
*** devvesa has joined #tripleo08:28
*** shardy has joined #tripleo08:28
*** akuznetsov has joined #tripleo08:30
*** liverpooler has joined #tripleo08:35
openstackgerritSwapnil Kulkarni (coolsvap) proposed openstack-infra/tripleo-ci: Keep py3.X compatibility for urllib  https://review.openstack.org/26118208:36
*** mcornea has joined #tripleo08:41
*** yamahata has quit IRC08:51
*** yamahata has joined #tripleo08:51
openstackgerritSteven Hardy proposed openstack/tripleo-heat-templates: Convert port cidr splitting to str_split  https://review.openstack.org/26624608:57
*** ifarkas has joined #tripleo08:57
*** dtantsur|afk is now known as dtantsur08:57
shardyIf anyone is regularly testing network isolation, it'd be good to get feedback on ^^ given we don't test it in the gate08:57
shardyI've done basic local testing and it seems to work, but additional eyes would be good :)08:58
*** jistr|doc has quit IRC08:59
*** mbound has joined #tripleo09:01
*** Marga_ has joined #tripleo09:02
*** jdob has quit IRC09:02
hewbroccaboy I would love it if we could get that gate going09:05
*** jdob has joined #tripleo09:07
*** nico_auv has joined #tripleo09:09
*** gfidente has joined #tripleo09:11
*** gfidente has quit IRC09:11
*** gfidente has joined #tripleo09:11
cmystershardy: re ^, I am having mysql issues as well. I wonder if its the same thing...09:15
cmyster(usually here it was RAM, DB loves RAM)09:16
cmysteras for exit code 1, thats really none informative. I'de want to see here an stdout of running the same command with the same arguments manually.09:17
*** openstackgerrit has quit IRC09:17
*** openstackgerrit has joined #tripleo09:17
shardyhewbrocca: Yeah, I think we can/should just add it to one of the exiting jobs09:20
shardycmyster: My patch is a change to the net-iso port templates, so probably not related to DB issues09:20
*** jistr has joined #tripleo09:20
hewbroccaI thought that there was some actual rework of the network in the rack that needed to happen09:21
hewbroccaNo idea09:21
shardyhewbrocca: Hmm, Ok not sure about that, will have to check w/dprince09:21
cmystershardy: once the DB is down all hell breaks loose so unless we want to make sure a DB is up and running every call and report back (probably not) then there is nothing we can do here. I'll answer here as it doesn't seem to me to be net-iso related in this case.09:24
*** yamahata has quit IRC09:27
*** Marga_ has quit IRC09:30
cmystershardy: BTW regarding what I asked with using all communications with ctrlplane and only having the controllers use an external net, who did you say can help me there? slagle?09:32
*** paramite has joined #tripleo09:32
*** olap_ has joined #tripleo09:34
*** derekh has joined #tripleo09:35
*** athomas has quit IRC09:41
*** athomas has joined #tripleo09:46
shardycmyster: I'd chat to dsneddon about it when he wakes up09:47
*** slagle has quit IRC09:52
*** morazi has quit IRC09:52
*** derekh has quit IRC09:54
*** slagle has joined #tripleo09:54
*** derekh has joined #tripleo09:55
*** social has quit IRC09:55
*** social has joined #tripleo09:55
*** morazi has joined #tripleo09:56
*** mkovacik has joined #tripleo09:58
*** mgould has joined #tripleo10:02
cmysterack10:03
*** devvesa has quit IRC10:12
*** devvesa has joined #tripleo10:12
*** morazi has quit IRC10:15
*** derekh has quit IRC10:16
*** derekh has joined #tripleo10:19
shardylucas-dinner or dtantsur: Hey, is there any way for data in the ironic db to be provided via a nova config drive?10:19
*** morazi has joined #tripleo10:19
shardyI remember there was a patch to enable injection of the discovery data when we stored it in the extra column10:20
dtantsurshardy, hi, that patch was not accepted by nova10:20
shardyI need a way to provide mac->nic mappings, is there any other way you can think of?10:20
* dtantsur thinks10:20
shardydtantsur: ah, yeah I seem to recall that now10:20
shardydtantsur: one thing dprince and I were discussing is the discovery/inspector data in swift10:21
shardye.g, is there some way (tempurl?) we can provide that data to each instance10:21
shardyit's currently stored under the inspector keystone account, are there plans to expose that data via the inspector API?10:21
shardyAccess to that data may be another way to generate this mapping10:22
dtantsurshardy, it is exposed via API in inspector as of liberty, however it's only exposed in inspector-client in Mitaka10:22
dtantsur(which should not be a too big deal)10:22
shardydtantsur: Ok - I'm really looking for a way to consume it at runtime inside each node10:22
shardywhere we won't necessarily have credentials to access the inspector API10:22
dtantsurwell, you still need credentials for this particular API...10:23
shardysimilar to what we could do previously with that nova config drive patch applied10:23
shardydtantsur: Yeah, that's why I'm wondering about a pre-signed URL per-node or something10:23
dtantsurshardy, can't we build a configdrive in tripleoclient?10:23
shardyit's tricky since we don't know the ironic ID inside the node do we?10:23
dtantsurshardy, I think we don't10:23
shardydtantsur: Hmm, that's an interesting idea, possibly yes10:24
shardyso, we'd retrieve the swift data, do some processing on it, then attach another config drive to the instance?10:24
shardywe already specify force_config_drive=True, so there's a config drive for each node w/the normal nova user/meta-data10:25
dtantsurat least it's more or less straightforward and is under our control10:26
shardyI guess we'd need to ensure the "admin" user/tenant can access the inspector swift data directly10:27
devvesaHi. I'm testing TripleO stable/liberty and I find grub errors when overcloud images are spawned10:27
shardyas inside tripleoclient we can't really switch to the IRONIC_INSPECTOR_PASSWORD etc10:28
shardymaybe we just need to configure the container acl's etc to enable that10:28
devvesaerror: attempt to read or write outside of partition.10:28
devvesagrub rescue>10:28
devvesaanyone else has experienced this error?10:28
dtantsurshardy, from tripleoclient you can use inspector API to get this data10:28
shardydtantsur: ah, OK, so we no longer require switching to the inspector credentials to read the data from swift?10:29
shardyhttp://docs.openstack.org/developer/tripleo-docs/advanced_deployment/profile_matching.html10:29
shardythat still talks about using the inspector password, so I guess it needs an update10:29
dtantsurwhatever credentials you use for accessing inspector API will work10:29
dtantsurshardy, this documentation is completely outdated, don't believe a single work from it :)10:30
*** paramite is now known as paramite|afk10:30
shardydtantsur: Ok, thanks very much for the info, I'll give it a try10:30
dtantsurshardy, speaking of which, when you have some time, may I ask you to review the profile matching patch https://review.openstack.org/#/c/250405/ ?10:30
shardydtantsur: sure, will do10:30
*** weshay_xchat has joined #tripleo10:34
*** electrofelix has joined #tripleo10:36
openstackgerritMerged openstack/diskimage-builder: Add pip-and-virtualenv element  https://review.openstack.org/23956110:37
*** dsneddon has joined #tripleo10:43
*** dsneddon has quit IRC10:50
*** dsneddon has joined #tripleo10:51
*** dsneddon has quit IRC10:51
*** dsneddon has joined #tripleo10:51
*** dsneddon has quit IRC10:52
*** dsneddon has joined #tripleo10:52
*** jaosorior has quit IRC10:55
*** jaosorior has joined #tripleo10:55
*** weshay_xchat has quit IRC10:56
*** coolsvap is now known as coolsvap|away10:56
*** stendulker has quit IRC10:57
openstackgerritMerged openstack/python-tripleoclient: Install python-hardware package on the agent image by default  https://review.openstack.org/26322510:59
*** weshay_xchat has joined #tripleo11:14
*** openstackgerrit has quit IRC11:17
*** openstackgerrit has joined #tripleo11:17
*** jcoufal has joined #tripleo11:26
*** lucas-dinner is now known as lucasagomes11:27
*** jaosorior has quit IRC11:49
*** jaosorior has joined #tripleo11:50
*** pblaho has joined #tripleo12:01
*** Tristitia has quit IRC12:05
*** panda has quit IRC12:05
*** panda has joined #tripleo12:07
*** jcoufal has quit IRC12:07
openstackgerritDmitry Tantsur proposed openstack/python-tripleoclient: Fail the introspection command if introspection has failed  https://review.openstack.org/25785512:09
*** cmyster has quit IRC12:10
*** cmyster has joined #tripleo12:12
*** cmyster has quit IRC12:12
*** cmyster has joined #tripleo12:12
mgouldmorning folks! Can you please take a look at https://review.openstack.org/#/c/266320/ ?12:19
d0ugalmgould: it might be worth asking in  #openstack-infra (I *think* that is where the requirements cores are usually)12:20
d0ugalmgould: you may want to use depends-on in the tripleoclient patch btw to link them12:21
*** paramite|afk is now known as paramite12:24
dtantsurmgould, right #openstack-infra is a better place (do not forget to explicitly mention that this is a requirements update, not all infra cores are requirements cores)12:26
mgoulddtantsur, will do - thanks!12:27
openstackgerritMiles Gould proposed openstack/python-tripleoclient: Remove tripleoclient.baremetal wrapper  https://review.openstack.org/26533612:28
*** jcoufal has joined #tripleo12:29
d0ugalmgould: Thanks :) The nice thing about a depends-on is that I can +2 it without worrying it will merge too early12:30
mgouldd0ugal, nifty! And thanks for reviewing :-)12:31
d0ugalmgould: Thank you for doing one of my todos!12:31
mgouldd0ugal, np :-)12:31
*** masco has quit IRC12:31
*** d0ugal has quit IRC12:42
*** d0ugal has joined #tripleo12:43
*** d0ugal is now known as Guest5838512:43
openstackgerritMarek Aufart proposed openstack/tripleo-common: Add environment capabilities  https://review.openstack.org/23253412:43
openstackgerritMarek Aufart proposed openstack/tripleo-common: Add environment capabilities  https://review.openstack.org/23253412:45
*** Guest58385 is now known as d0ugal12:45
*** d0ugal has quit IRC12:45
*** d0ugal has joined #tripleo12:45
*** dprince has joined #tripleo12:58
*** shakamunyi has joined #tripleo13:04
*** jprovazn has quit IRC13:06
*** jprovazn has joined #tripleo13:07
*** jcoufal has quit IRC13:07
*** akuznetsov has quit IRC13:08
*** panda has quit IRC13:11
*** panda has joined #tripleo13:11
*** derekh has quit IRC13:11
*** derekh has joined #tripleo13:16
*** thrash|g0ne is now known as thrash13:20
*** jayg|g0n3 is now known as jayg13:22
EmilienMI have a patch in puppet-elements, passing all jobs and is here for long time, and just need +A. Can someone approve https://review.openstack.org/#/c/256640/ please?13:25
*** jprovazn has quit IRC13:25
*** Marga_ has joined #tripleo13:26
*** aufi has quit IRC13:26
*** rhallisey has joined #tripleo13:27
*** trown|outttypeww is now known as trown13:28
*** akuznetsov has joined #tripleo13:36
*** liverpooler has quit IRC13:38
openstackgerritMerged openstack/tripleo-puppet-elements: Add logging components  https://review.openstack.org/25664013:39
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Deploy Logging on the undercloud with Puppet  https://review.openstack.org/25865313:44
EmilienMshardy: see my comment on13:46
EmilienMhttps://review.openstack.org/#/c/258653/13:46
shardyEmilienM: ack, thanks! :)13:47
openstackgerritRyan Hallisey proposed openstack/tripleo-heat-templates: Allow container template to recognize an update  https://review.openstack.org/26536813:47
*** dmacpher has joined #tripleo13:54
*** eggmaster has joined #tripleo13:54
*** tzumainn has joined #tripleo13:57
*** akuznetsov has quit IRC14:00
dprincemeeting time14:01
*** rlandy has joined #tripleo14:03
*** Goneri has joined #tripleo14:04
*** rebrego has joined #tripleo14:06
*** regebro is now known as Guest5371114:06
*** rebrego is now known as regebro14:06
*** jcoufal has joined #tripleo14:10
*** jprovazn has joined #tripleo14:10
*** julim has joined #tripleo14:14
*** masco has joined #tripleo14:17
*** trozet has joined #tripleo14:18
*** akuznetsov has joined #tripleo14:21
*** masco has quit IRC14:23
*** shardy is now known as shardy_mtg14:27
openstackgerritGiulio Fidente proposed openstack/puppet-tripleo: Use HAProxy 'transparent' bind option instead of sysctl ip_nonlocal  https://review.openstack.org/26530914:28
*** shardy_mtg has quit IRC14:32
*** shardy_mtg has joined #tripleo14:34
*** regebro has quit IRC14:35
*** lblanchard has joined #tripleo14:35
*** regebro has joined #tripleo14:36
openstackgerritBrad P. Crochet proposed openstack/instack-undercloud: Clean out os-refresh-config on every run  https://review.openstack.org/26640414:39
openstackgerritMerged openstack/tripleo-specs: Add spec for TripleO UI  https://review.openstack.org/23905614:39
*** jaosorior has quit IRC14:40
openstackgerritBrad P. Crochet proposed openstack/instack-undercloud: Clean out os-refresh-config on every run  https://review.openstack.org/26640414:42
*** kbyrne has quit IRC14:46
*** Marga_ has quit IRC14:50
*** links has quit IRC14:50
*** Marga_ has joined #tripleo14:50
*** rpothier has joined #tripleo14:53
*** liverpooler has joined #tripleo14:54
dprincetzumainn, jdob: I would ask that you keep an open mind I guess. Like I said I think it would be grand if Heat API proper supported deploying templates that resided in a swift container15:01
dprincetzumainn, jdob: but I think if heatclient does this (which it already intended to do with --template-object which has been in there for quite some time) then it works for us as is15:01
jdobi'm not having a closed mind about it, I agree it'd be good15:02
tzumainndprince, that's not what I'm hesitant about - I'm hesitant that we put all this business logic in openstack clients for the sake of speed15:02
jdobright, what tzumainn said15:02
dprincetzumainn: we are putting logic in a libarary, which will be behind an API15:02
dprincetzumainn: my preference is simply rather than adding custom code to tripleo-common, lets fix things in the root project. In this case Heat15:03
tzumainndprince, but we're doing that in a way different from every other openstack api, by saying that an openstack client acts as a library for Mistral15:03
*** jrist has quit IRC15:03
dprincetzumainn: so... rather than have tripleo-common go and download files from Swift so we can essentially call heatclient locally, I just fixed heatclient15:03
dprincetzumainn: My view was this was just a bug15:04
tzumainndprince, I think it's a bug if we're fixing things in heat that can't be accessed through the standard Heat API15:04
dprincetzumainn: https://bugs.launchpad.net/python-heatclient/+bug/153232615:04
openstackLaunchpad bug 1532326 in python-heatclient "--template-object doesn't support nested stacks" [High,Fix released] - Assigned to Dan Prince (dan-prince)15:04
tzumainndprince, that's what led to the GUI/CLI divergence in the first place15:05
dprincetzumainn: there is no divergence here15:05
dprincetzumainn: the same API request is sent to Heat in either case15:05
*** teju has quit IRC15:06
*** lucasagomes is now known as lucas-hungry15:06
dprincetzumainn: in one case the client downloads the files locally and processes them. In the other case the client downloads them from Swift and processes them15:06
tzumainndprince, if you put that swift functionality in the heat cli, then cli users can do something that api users can't do?  or am I missing something15:06
dprinceno, both will use exactly the same path15:07
dprincetzumainn: because we will always upload to a swift container in either case15:07
tzumainnhow does the heat api access the heat client logic?15:07
dprincetzumainn: exactly the same path, for CLI and GUI15:07
*** egafford has joined #tripleo15:08
dprincetzumainn: heat API doesn't need the heatclient at all15:08
dprincetzumainn: it is just an API15:08
tzumainndprince, okay, so I'm completely confused now15:08
tzumainndprince, I thought you were advocating implementing feature X in heat client, and if so, my question is how the heat API allows access to feature X15:08
egaffordEmilienM: ping15:09
dprincetzumainn: I'm advocating just a simple thing. Lets fix heatclients --template-object support (and associated --environment-object) so that it allows users to deploy directly from Swift15:09
dprincetzumainn: this gives us both a CLI and library15:09
tzumainndprince, I don't see how a client is a library for an API?15:10
dprincetzumainn: which we can easily put behind an API to do the things we need to do15:10
EmilienMegafford: in upstream meeting now, but please let me know what's up, I'll catchup later15:10
dprincetzumainn: right, I'm going to create a Mistral action that does this for us15:10
dprincetzumainn: as a prototype, and if people like it we'll see where it goes15:10
tzumainndprince, okay, so I completely disagree now15:10
egaffordCool; no problem. Just pinging about what you'd like to do about https://review.openstack.org/#/c/233229/. I'm open to literally anything that provides an accurate deprecation path. :)15:10
tzumainndprince, you're advocating that in Heat, we put functionality in heatclient, and then provide API access *not* through the Heat API but through Mistral?15:11
*** Marga_ has quit IRC15:11
egaffordEmilienM: ^ totally at your convenience; thanks.15:11
EmilienMegafford: will look in a few, thanks for the headsup15:11
dprincetzumainn: the functionality I want already exists (mostly) I'm just advocating we make use of it15:11
EmilienMalso ping gchamoul please15:11
dprincetzumainn: We still still be using Heat API just like we always did15:12
*** Marga_ has joined #tripleo15:12
tzumainndprince, but you're putting feature X in Heat client and then saying we should use Mistral for API access feature X in Heat, correct?15:12
dprincetzumainn: I'm exposing a client library capability via Mistral. Yes15:13
dprincetzumainn: to be fair I think that is totally reasonable15:13
tzumainndprince, hm, okay15:13
tzumainndprince, I think we should see what others thing : )15:13
tzumainner, think : )15:13
dprincetzumainn: jtomasek asked directly if we could do "local disk" things on the email thread. Same thing I think15:13
dprincetzumainn: I would also create a Mistral action to upload "stock" templates from /usr/share I think15:14
dprincetzumainn: and if the end user doesn't supply those we could simply upload that...15:14
gchamoulegafford: just need to pick up my daugther at school and I will try finish that one! but tbh I am quite confused about it now :D15:14
tzumainndprince, to be honest these seem like solutions of convenience rather than ones that fit the openstack model15:14
gchamoulegafford: will be back in ~20min15:14
dprincetzumainn: I am trying to simplify things, yes15:15
*** jrist has joined #tripleo15:15
egaffordgchamoul: Ack; thanks.15:15
dprincetzumainn: as for OpenStack model I'm not sure what rules I'm breaking15:15
tzumainndprince, the expectation that feature X in project Y is accessible through project Y's API, rather than Mistral's API15:16
*** jrist has quit IRC15:16
dprincetzumainn: the essence of TripleO is to use OpenStack to deploy OpenStack.15:16
*** jrist has joined #tripleo15:16
*** jrist has joined #tripleo15:16
dprincetzumainn: FWIW, once project Y gets the capabilities we need I'm game for using it15:16
jtomasekdprince, tzumainn: I think we agree that problem is that some feature implemented in heatclient should reside in Heat directly. It does not really matter if we use tripleo-common+api or mistral action to call heatclient, both seems to have the same original issue15:17
dprincetzumainn: I don't think we have the luxury of waiting for these things in all cases though...15:17
tzumainndprince, yes, but what you're describing sounds like a somewhat hackish solution15:17
shardy_mtgtzumainn: The feature under discussion is a workflow to deploy heat stacks15:17
shardy_mtgUpload some heat templates to swift, run some template validation on those templates, deploy those templates, poll heat until completion15:18
shardy_mtgthat is a workflow15:18
dprincetzumainn: so yes, perhaps there is a "release valve" sort of nature to what I'm suggesting. We you rather I just used Ansible Tower... because I mean there are people who use that and don't think it dirty at all15:18
shardy_mtgtzumainn: the fact that some convenience functions exist in heatclient is incidental really15:18
dprincejtomasek: yes15:19
jtomasekshardy_mtg: from GUI POW it is a multiple workflows because GUI needs to add inputs at certain parts of the overal workflow15:19
dprinceI actually think there are many things we agree on here15:19
shardy_mtge.g they just avoid folks having to dowload the files from swift (heatclient does it, same as for HTTP URLs or local files)15:19
*** shardy_mtg is now known as shardy15:19
slagle+2 plz :), https://review.openstack.org/#/q/I3c1ecadceb9623fa03edaf87226297834448d161,n,z15:20
tzumainnshardy, is that accurate?  I thought that dprince was saying that we should implement all of that within heat client, and then use mistral to access it from an API perspective15:20
tzumainnshardy, wait, let me simplify15:21
tzumainnshardy, I asked dprince if it was correct that he was 'putting feature X in Heat client and then saying we should use Mistral for API access feature X in Heat, correct?' and he agreed15:21
dprincetzumainn: what shardy says is correct I think15:21
tzumainnshardy, and I'm saying that seems wrong15:21
dprincetzumainn: I think you are just looking at the wrong "feature" perhaps15:22
openstackgerritMerged openstack/tripleo-heat-templates: Changes for configuring Nuage  https://review.openstack.org/26039915:22
dprincetzumainn: the Heat API already has the feature we really need, namely to deploy a stack15:22
dprincetzumainn: we are really just arguing about where the code to deal with local vs. Swift template storage goes15:23
shardytzumainn: the ability to download templates from swift already exists in heatclient, it's just a bit old and incomplete15:23
tzumainnshardy, dprince, why doesn't that code belong in Heat outside of the heatclient?15:23
shardytzumainn: It's possible a future heat API version might also enable directly referincing swift, but this capability exists now15:23
dprincetzumainn: and given... that today heatclient already attempts to deal with all this... a small refinement and fix is all we need in heatclient I think to get us in a good place to develop our workflow around say a Swift storage backend15:24
shardytzumainn: because in general it's better not to allow users to DoS heat by passing random URLs to it, it's safer to require the user to create a request containing all the artefacts that define a stack15:24
shardytzumainn: that's one reason heat doesn't download the files internally15:25
shardyit may be possible in a future version, but the workflow of 1. download templates from $somewhere and 2. Call heat with said templates, already works15:25
tzumainnshardy, so you think it's logical to say 'heat won't provide API access to this functionality, so it's just in the heatclient; but it's okay that we proxy that API access through Mistral'?15:25
shardytzumainn: it's not proxying that API, it's defining a workflow to store templates in swift then deploy them15:26
shardythe API is dowload from swift, then call heat15:26
dprincetzumainn: I think it is okay. But do note that I would use this same path regardless of CLI or UI. All of our workflows would use it the same15:26
shardytzumainn: what I think you would prefer is if heat accepted the swift object identifier directly15:27
shardywhich may be possible, but the DoS concerns remain, and then we'd be proxying user requests to swift15:27
*** Tristitia has joined #tripleo15:27
shardyI can see both sides of the argument, but I think it's not accurate to say the mistral thing is a stealth heat API15:28
shardyit's defining a series of actions which interact with heat, and swift, and potentially other services in future15:28
*** Marga_ has quit IRC15:28
shardytzumainn: the same series of actions will be required inside the tripleO API15:28
dprinceshardy: exactly, Mistral is no more a stealth Heat API than Heat is a stealth Nova API15:28
*** kbyrne has joined #tripleo15:29
tzumainndprince, shardy, does the Heat API call the Nova CLI?15:29
dprinceit is just a different way to organize the workflows15:29
*** kbyrne has quit IRC15:29
openstackgerritJaume Devesa proposed openstack/tripleo-heat-templates: Make enabling of controller services configurable.  https://review.openstack.org/26041315:29
dprincetzumainn: Heat uses novaclient, yes :)15:29
shardytzumainn: Yes, it does, but it calls it to instantiate an object defined in the declarative HOT model15:29
*** kbyrne has joined #tripleo15:30
shardytzumainn: it also calls swift, via resources defined in templates e.g to create a container15:30
shardywhat it can't do, currently, is download the pieces to create a stack directly from swift15:30
shardyheatclient can do that tho, as a convenience thing15:30
shardyyou could do exactly the same with a small script doing the download from swift to the local filesystem, then a stack-create15:31
dprinceAgain, If heat grows this capability then great. If not I can live with it. Given we have client work arounds I'm not sure "Heat API" is our biggest problem ATM15:31
*** bvandenh has quit IRC15:32
tzumainndprince, that's what I don't like; the idea of putting in a bunch of client workarounds and then using mistral instead of waiting for individual projects to express the features through their own API15:33
tzumainnbut meh, may as well see how this discussion shakes out in the mailing list :P15:33
dprincetzumainn: these aren't client workarounds15:33
dprincetzumainn: these are client features, that stand on their own15:33
dprincetzumainn: regardless of whether we use them the patches stand15:34
dprincetzumainn: and that I think is what sways me to like this sort of solution... it encourages us to add to existing clients (heat, nova, neutron, etc.) rather than build our own thing in tripleo-common15:35
dprincetzumainn: we will require some wrappers in TripleO common, sure to combine things in the right places15:35
tzumainndprince, myabe I misstated my objection; it feels like Mistral is a workaround for having a feature in heatclient that can't be expressed through the project's API15:36
dprincetzumainn: Yeah. I don't think so. All I'm doing is re-working some of the tripleo-common/python-tripleoclient workflows so that we have less code in TripleO15:37
dprincetzumainn: and ultimately less code, but exactly the same workflow15:37
shardytzumainn: it can be expressed via the projects APIs though, 1. download template from swift, 2. heat stack-create15:37
tzumainndprince, shardy, if you told me that heatclient was also using mistral, then I think I'd be less up in arms; both the heatclient and our API access would go directly through mistral15:37
dprincetzumainn: Mistral is just the workflow API, nothing more really15:37
shardythat can be done regardless of anything in heatclient15:38
dprinceshardy: exactly, with more code mind you15:38
tzumainndprince, shardy, but what I think is being suggested here, is that heatclient doesn't use mistral, and to gain the exact same feature through an API we'd use mistral15:38
dprinceshardy: but perhaps I should stop confusing people with heatclient things here15:38
shardydprince: maybe it'd be simpler to discuss a more general "deployment workflow"15:39
dprinceshardy: agree15:39
*** aufi has joined #tripleo15:43
dprinceon a similar note... the pattern I'm really arguing here is lets add our "library" code to the right places15:44
dprincewe take a similar tone with Puppet for example15:44
dprincelike rather than adding our own puppet-tripleo composition classes for a Nova feature... just add them to puppet-nova instead if it makes sense15:45
dprinceso in this case heatclient (the library) gets a couple of fixes to deploy from Swift, rather than us adding it to our own tripleo-common library like we currently do15:45
dprincehow that all fits into our grand deployment workflow is a related... but different issue. I'm sorry we've intermixed these things in the conversation today15:48
dprincetzumainn: ^^15:48
*** kbyrne has quit IRC15:50
*** mkovacik has quit IRC15:51
*** mcornea has quit IRC15:52
*** dshulyak_ has quit IRC15:53
*** dshulyak_ has joined #tripleo15:54
*** bvandenh has joined #tripleo15:55
*** dshulyak_ has quit IRC15:55
shardydprince: Hey, I looked into the configdrive vs deploy artefacts thing15:57
openstackgerritDan Prince proposed openstack/instack-undercloud: Set default Glance backend to Swift  https://review.openstack.org/24849215:57
shardyturns out there is no way to pass the data needed via the configdrive, because the nova patch enabling ironic to inject config drive data was rejected15:58
*** masco has joined #tripleo15:58
shardyso my options are either a new deployment resource (which runs before NetworkDeployment), put the mapping in swift and generate a tempurl, or move the deploy artefacts deployment to before NetworkDeployment15:59
shardyit's a shame, because adding this data to ironic would really be ideal15:59
*** rpothier_ has joined #tripleo16:00
dprinceshardy: I wonder if it is worth a mailing list discussion about the Nova config drive support16:00
dprinceshardy: lucas-hungry's patch was only a couple of Nova lines...16:00
dprinceshardy: and quite simple16:00
shardydprince: maybe, it'd certainly make things simpler16:00
*** liverpooler has quit IRC16:00
dprinceshardy: anyways, If you need to proceed with other options we don't have to block on that. I'd just be keen to have this in the right spot and it is sad that Nova -> Ironic is limited in this case16:01
*** rpothier has quit IRC16:03
*** lucas-hungry is now known as lucasagomes16:05
lucasagomesdprince, hi there16:05
lucasagomesdprince, yeah, it was 1 line change actually (w/o tests)16:05
*** panda has quit IRC16:05
lucasagomesdprince, but there other problems with the approach I remember was pointed out, for e.g, configdrive for Ironic would be different than the config drive for other drivers16:06
*** julim has quit IRC16:06
*** panda has joined #tripleo16:06
lucasagomesdprince, the metadata service would have different information than the configdrive (unless we also updated the configdrive)16:06
shardyDo we have a reference for the simplest possible network-isolation setup?  E.g I have a 2 node nonha environment, do I need to configure --baremetal-bridge-names etc to make it work?16:06
lucasagomes(the metadata)*16:06
*** julim has joined #tripleo16:07
trozetEmilienM: there has been some talk that the puppet-aodh module isn't stable.  Is that true or does it work just fine with liberty?16:08
*** kbyrne has joined #tripleo16:09
EmilienMtrozet: what? puppet-aodh is very stable and working16:10
trozetEmilienM: thanks figured it was just rumors16:11
EmilienMit's just OPM master which was not built16:11
EmilienMbut should be fix now16:11
trozetEmilienM: ok cool, do you still need help on the tht portion?\16:14
EmilienMI'm trying to deploy aodh on the ovecloud16:14
trozetEmilienM: ok there is a Doctor project on OPNFV that uses aodh, they are asking if we can add support by our release in 2.5 weeks16:15
openstackgerritJaume Devesa proposed openstack/tripleo-heat-templates: MidoNet heat templates  https://review.openstack.org/26041516:15
trozetEmilienM: so if I can get past a few other bugs I can help you either code/test it16:16
*** masco has quit IRC16:16
EmilienMtrozet: well, I'm working on it, but very had to push for new features lately16:16
*** ayoung has quit IRC16:16
trozetEmilienM: we can even manually patch in your patch to our build16:16
trozetEmilienM: and test it16:16
EmilienMtrozet: undercloud has aodh16:16
EmilienMtrozet: see https://review.openstack.org/24140816:16
trozetEmilienM: yeah my opendaylight patch in tripleO has been sitting there for months, so we manually patch it into tht16:16
trozetduring our build16:16
trozetEmilienM: we only need for overcloud16:16
*** aufi has quit IRC16:20
*** fgimenez has joined #tripleo16:20
openstackgerritJiri Stransky proposed openstack/tripleo-heat-templates: TEST: this will help testing major upgrades  https://review.openstack.org/26045616:24
openstackgerritJiri Stransky proposed openstack/tripleo-heat-templates: Add resources for major upgrade in Pacemaker scenario  https://review.openstack.org/25327616:24
openstackgerritMerged openstack/tripleo-common: Adds file deletion to plan manager  https://review.openstack.org/25536616:26
*** sparkyco_ has joined #tripleo16:26
*** athomas has quit IRC16:28
*** mkovacik has joined #tripleo16:31
*** athomas has joined #tripleo16:33
*** olap_ has quit IRC16:33
*** dcain has joined #tripleo16:35
tzumainndprince, sorry, just saw your comment - that broadly makes sense to me, actually16:38
dprincetzumainn: cool16:39
dprinceegafford: +2 on the sahara patches BTW16:39
dprinceegafford: if we can get someone else to review them it would be nice to have them land soo16:39
dprincen16:39
dprinceegafford: one of your Trove patches was still WIP?16:40
openstackgerritMerged openstack/tripleo-common: Add the missing plan name to the PlanAlreadyExistsError  https://review.openstack.org/25734316:41
*** pradk has joined #tripleo16:42
openstackgerritBen Nemec proposed openstack/tripleo-heat-templates: Configure keystone public_endpoint  https://review.openstack.org/26592216:42
openstackgerritBen Nemec proposed openstack/tripleo-heat-templates: Enable TLS in loadbalancer if cert path is detected  https://review.openstack.org/26646916:42
*** rasca has quit IRC16:44
*** dtantsur is now known as dtantsur|brb16:45
egafforddprince: Oh my goodness that's wonderful.16:45
*** derekh has quit IRC16:46
egafforddprince: Yeah, I fear that I haven't gotten enough expert testing on the heat templates patch just yet; happily the patch is structurally extremely similar to Sahara.16:46
egaffordAny change to trove-integration is likely to come in the fairly minor block of actually pushing properties to puppet-trove, and should be easy to review, though, and I know that my patch does get trove up, running, and responding, so if we're willing to accept an potentially intermediary and not utterly tested patch at this stage, with the idea that fix patches will be comparatively tiny, I'd love to remove the WIP.,16:48
egaffordI just also don't want to introduce any issues into your product.16:48
egafforddprince: ^ Happy to go with your preferences on that.16:48
dprinceegafford: okay, I will review it too then, thanks16:49
*** akuznetsov has quit IRC16:49
*** sparkyco_ has quit IRC16:52
egafforddprince: You have pre-emptively made my year, and it's only January.16:54
dprinceegafford: yeah, well you patches were posted early last fall I think... so we've kept you waiting a good bit I think16:55
egaffordshardy: Any chance you can take a look @ https://review.openstack.org/220863 ? dprince has 1 +2; it'd be awesome to merge it if we can.16:55
egafforddprince: True; then again, priorities. I get it. I'm just really excited to put the main patches and subsequent rebase cycles behind me. :)16:56
shardyegafford: Hey, looks good, but can you confirm how I disable Sahara?17:00
shardyI commented to that effect previously and I don't see the boolean to control it17:00
egafforddprince, shardy: What's our decision on this requirement? I'm getting conflicting signals.17:01
shardyegafford: if the answer is, we're deferring that to composable roles, that's OK, I just want to be clear what the plan is17:02
shardyegafford: I did ask this question back in September on the review17:02
shardyotherwise lgtm :)17:03
egaffordshardy: That was my last definition of the plan. Yeah, totally; I talked with you and dprince a bit about concerns about hanging uncontrolled concerns handled by other repos (like os-cloud-config for keystone).17:03
egaffordIt's an utterly valid concern, but in recent convos with dprince I think the sense is that we are waiting on roles to actualize that, as the infrastructure isn't fully there to disable services across all of tripleo (though doing so in just the heat templates is reasonably possible.)17:04
dprinceshardy: I could go either way on the option. Before the end of this cycle I would like to have composable roles done... but still getting buy on that17:05
shardyegafford: Ok, I guess I was expecting to see e.g a ControllerEnableSahara, which fed into a boolean in the puppet manifest17:05
dprinceshardy: if we end up not getting things composable then perhaps we add a boolean option later...17:06
shardybut if that's too hard due to cross-repo concerns, I'm OK with saying we have to wait until composable roles17:06
dprinceshardy: good questions though17:06
shardyI guess my question then is, if a boolean is too hard, will composable roles actually solve the problem?17:06
shardygiven that it's really just a fancy way of doing booleans, with a lot of flexibility17:06
*** devvesa has quit IRC17:07
shardyI guess stuff like the os-cloud-config thing & keystone endpoints is solved by moving to puppet for keystone configuration17:07
shardyegafford: but are there other things we need to be thinking about?17:07
shardyif so it'd be good to highlight them17:08
egaffordshardy: Yeah, moving into heat for all resources is important for encapsulation. Honestly, you're Way More Of An Authority on whether there are other things to think about.17:08
shardyegafford: Yeah, I was just looking for evidence if you actually tried to wire in the boolean and stuff broke :)17:09
shardycos the same stuff will probably still break w/composable roles in t-h-t17:09
shardyanyway, I'm not blocking on this, just wanted to discuss it17:09
egaffordMy fundamental concern with building the first set of optional roles is precisely that I am an outsider to your product. Well, I did absolutely try back in the day and see that os-cloud-config was still building endpoints.17:09
egaffordAfter I saw that, it became a disprove-a-universal-negative-or-deeply-learn-literally-every-line-of-code-in-tripleo proposition for me.17:10
*** penick has quit IRC17:16
*** alop has joined #tripleo17:21
openstackgerritMerged openstack/tripleo-puppet-elements: overcloud-controller: install python-networking-odl  https://review.openstack.org/26125617:24
openstackgerritEthan Gafford proposed openstack/tripleo-heat-templates: Trove Integration  https://review.openstack.org/23324017:25
*** dtantsur|brb is now known as dtantsur|afk17:27
*** fgimenez has quit IRC17:30
openstackgerritMerged openstack/tripleo-heat-templates: Sahara Integration  https://review.openstack.org/22086317:31
shardyegafford: ^^17:31
shardyAs noted on the review, I'd prefer it to be optional, but hopefully we can work that out later via composable roles17:31
egaffordshardy: That's amazing; thanks.17:32
egaffordI'd be happy to try to push an optionalization patch now that the main patch is in, though I fear that I Just Will Not Absolutely Know if there are resources elsewhere (outside heat/puppet) that are still being created.17:33
*** oshvartz has quit IRC17:40
*** mbound has quit IRC17:41
*** hewbrocca has quit IRC17:44
*** eil397 has joined #tripleo17:46
*** dshulyak_ has joined #tripleo17:48
*** paramite has quit IRC17:49
*** dshulyak_ has quit IRC17:51
*** athomas has quit IRC17:51
*** athomas has joined #tripleo17:59
*** trown is now known as trown|lunch18:02
*** jistr has quit IRC18:03
*** lblanchard has quit IRC18:08
*** lblanchard has joined #tripleo18:10
*** gfidente is now known as gfidente|afk18:11
*** akuznetsov has joined #tripleo18:12
*** mgould has quit IRC18:12
*** yamahata has joined #tripleo18:15
*** Marga_ has joined #tripleo18:17
*** regebro has quit IRC18:19
egafforddprince: Who else can +2 https://review.openstack.org/#/c/221418/ ?18:20
dprinceegafford: anyone on tripleo-core really18:22
dprinceegafford: I think steve was going to look at it from earlier...18:23
egafforddprince: I'd also like to ask where the best place to add some very light testing (probably just to ensure Sahara can still respond to an empty cluster-list call) would be.18:23
egafforddprince: It'd be great to enforce just a tiny bit of "this can still work at all."18:24
egaffordI don't want to bog down your CI building half-hour long CDH clusters, but. :)18:24
dprinceegafford: perhaps a simple test could be added onto this (if it is quick)18:25
dprinceegafford: https://review.openstack.org/#/c/241167/18:26
dprinceegafford: quick... as it it doesn't cost much in terms of CI wall time18:26
dprinceegafford: < a minute lets say18:26
egaffordCool. I literally just want to call sahara cluster-list.18:26
egaffordAnd verify a 200 and an empty list.18:26
*** jaosorior has joined #tripleo18:27
*** ukalifon1 has quit IRC18:32
*** ukalifon has joined #tripleo18:32
openstackgerritRyan Hallisey proposed openstack/tripleo-common: Deploy Docker compute role with tripleo.sh  https://review.openstack.org/26493318:40
*** ifarkas has quit IRC18:49
*** ukalifon has quit IRC18:51
*** ayoung has joined #tripleo18:52
*** rickflare has joined #tripleo18:53
rickflareanyone know what would cause this error18:53
rickflareFailed to start Hiera: RuntimeError: Config file /etc/puppetlabs/code/hiera.yaml not found18:53
*** sthillma has joined #tripleo18:58
*** jaosorior has quit IRC19:00
*** jaosorior has joined #tripleo19:00
*** sthillma has quit IRC19:03
*** electrofelix has quit IRC19:04
*** julim has quit IRC19:06
*** trown|lunch is now known as trown19:06
*** julim has joined #tripleo19:08
*** ayoung has quit IRC19:08
*** athomas has quit IRC19:11
*** athomas has joined #tripleo19:19
*** nico_auv has quit IRC19:19
*** akrivoka has quit IRC19:21
*** sthillma has joined #tripleo19:29
*** jaosorior has quit IRC19:31
*** jaosorior has joined #tripleo19:32
*** julim has quit IRC19:40
*** ayoung has joined #tripleo19:41
*** julim has joined #tripleo19:41
*** cwolferh has quit IRC19:42
*** oshvartz has joined #tripleo19:50
stevebakerdprince: hey, I had a thought https://review.openstack.org/#/c/265479/2/heatclient/common/template_utils.py20:03
dprincestevebaker: okay, lets have it :)20:03
stevebakerdprince: the thought is on line #17420:04
dprincestevebaker: even better, looking20:04
*** panda has quit IRC20:05
dprincestevebaker: okay, this would work I think20:06
dprincestevebaker: and how would we expose it via the CLI? and potentially eventually in openstackclient too?20:06
*** panda has joined #tripleo20:06
dprincestevebaker: the only downside of this approach I think is it wouldn't allow you to mix the two approaches, local files and those in swift for example20:07
dprincestevebaker: agree that the ordering issue could be a problem though with my initial approach. alternate there might be to track the ordering via a ordering_hints option too.... getting to be to many options though so what you propose might be a reasonable compromise20:09
stevebakerdprince: I've been thinking about that. There could be an option like --object-path-prefix which can be specified multiple times. Any env path which matches the prefix is treated as an object. So its like my object-store catalog approach but explicit instead of implicit (this would handle your localhost case). And the cli env_path_is_object implementation could always fallback to the implicit catalog20:10
stevebakerapproach, so in the common case the user wouldn't even need to specify the extra argument20:10
*** gfidente|afk has quit IRC20:11
dprincestevebaker: okay, want me to run these pasted shardy? or have at it?20:13
dprincestevebaker: or, would you like to take these over?20:13
stevebakerdprince: we can continue discussing the cli options at leisure, but I think you can safely make the lib change20:14
*** lucasagomes is now known as lucas-dinner20:14
dprincestevebaker: yeah, I think so too20:14
dprincestevebaker: and the CLI could even wait until openstackclient when that happens I guess20:14
dprincestevebaker: because you mentioned a freeze right?20:14
stevebakerdprince: yes, and shell.py can always have a env_path_is_object which only does the implicit approach, so it still works without having to add a cli option20:15
stevebakereverybody wins!20:15
*** dshulyak_ has joined #tripleo20:15
dprincestevebaker: okay, lets go with it then20:16
dprincestevebaker: thanks for the updates, I'll try to get those applied20:16
stevebakercool20:16
*** dprince has quit IRC20:23
*** dshulyak_ has quit IRC20:27
*** dcain1 has joined #tripleo20:32
*** dcain has quit IRC20:35
*** akuznetsov has quit IRC20:39
*** shivrao has joined #tripleo20:40
*** akuznetsov has joined #tripleo20:41
*** jaosorior has quit IRC20:44
shardyIf anyone has a moment https://review.openstack.org/#/c/260144/ needs a final +220:52
*** shivrao has quit IRC20:53
*** shardy has quit IRC20:55
*** rlandy has quit IRC21:03
*** jayg is now known as jayg|g0n321:07
openstackgerritEmilien Macchi proposed openstack/instack-undercloud: Deploy Logging on the undercloud with Puppet  https://review.openstack.org/25865321:10
*** ayoung has quit IRC21:14
*** jtomasek has quit IRC21:18
*** rhallisey has quit IRC21:18
*** rlandy has joined #tripleo21:22
*** jprovazn has quit IRC21:24
*** dcain1 has quit IRC21:25
*** dcain has joined #tripleo21:26
*** bvandenh has quit IRC21:26
*** oshvartz has quit IRC21:29
*** sthillma has quit IRC21:33
*** sthillma has joined #tripleo21:34
openstackgerritMatthew Thode proposed openstack/diskimage-builder: Initial add of gentoo support for diskimage-builder  https://review.openstack.org/26334921:35
prometheanfireSpamapS: hi, let me know what you think of that new patch21:36
*** yamahata has quit IRC21:36
*** cwolferh has joined #tripleo21:38
prometheanfireSpamapS: gpgv doesn't seem to work for that use, so sticking with gpg --verify21:44
*** julim has quit IRC21:49
*** trown is now known as trown|outttypeww21:53
SpamapSprometheanfire: oh, what does it do?21:59
*** ayoung has joined #tripleo22:00
*** eil397 has quit IRC22:00
prometheanfirenot work22:01
prometheanfire:P22:01
prometheanfireit doesn't like the format22:01
prometheanfiregpgv takes a specific format for the keyring22:01
*** shivrao has joined #tripleo22:01
prometheanfireit would add another step22:01
prometheanfiregpg --verify is good as I use it because it is using a keyring that has a single key22:01
prometheanfireso I'm not doing the extra step to export the key I just imported into a specific format22:02
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: Manage keystone initialization directly in t-h-t manifests  https://review.openstack.org/24416222:02
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: endpoint_map: bump nova api from 2.0 to 2.1  https://review.openstack.org/26336622:03
*** akuznetsov has quit IRC22:03
openstackgerritEmilien Macchi proposed openstack/tripleo-heat-templates: WIP - Deploy Aodh services, replacing Ceilometer Alarm  https://review.openstack.org/24140822:03
SpamapSprometheanfire: eh, not sure what you mean22:03
SpamapSprometheanfire: it works fine here.. as I wrote the original command22:03
SpamapSprometheanfire: gpgv reads the exact same keyring format as gpg.22:04
prometheanfireit didn't work for me22:05
SpamapShttp://paste.openstack.org/show/483668/22:06
SpamapSprometheanfire: thats what I did (just re-exporting it from the thing I manually pasted the echo into)22:06
prometheanfireSpamapS: I'm gonna generate a kbx file, we can commit and use that instead22:08
prometheanfireno need for gpgdir at all then22:08
*** davidlenwell has quit IRC22:09
SpamapSwhat's a kbx file?22:09
prometheanfirewhat gpgv needs22:09
prometheanfireit's a format22:09
*** lblanchard has quit IRC22:11
*** lblanchard has joined #tripleo22:11
*** davidlenwell has joined #tripleo22:11
*** ChanServ sets mode: +v davidlenwell22:11
SpamapSprometheanfire: that is.. um. Not right.22:12
SpamapSprometheanfire: it needs no such thing. :-P22:12
prometheanfireok22:13
prometheanfiretested your way, it worked22:13
*** jcoufal has quit IRC22:13
prometheanfiredidn't work in locally, but I do odd things with gpg22:13
*** yamahata has joined #tripleo22:14
SpamapSprometheanfire: are you maybe on a newer version that has changed behavior? (I hate things that do that)22:14
prometheanfire2.122:14
prometheanfire.10 even22:14
prometheanfirea friend is an upstream dev of gpg22:15
SpamapSactually I just tried with 2.0.22 and it worked fine too22:15
*** eil397 has joined #tripleo22:16
openstackgerritMatthew Thode proposed openstack/diskimage-builder: Initial add of gentoo support for diskimage-builder  https://review.openstack.org/26334922:16
prometheanfirenew review22:16
prometheanfirehas gpgv use22:16
SpamapSprometheanfire: appreciate your patience on this. I am a bit of a stickler for getting the chain of custody right. :-P22:16
prometheanfirethat's fine, I tend to be as well22:17
*** lblanchard has quit IRC22:17
prometheanfirethis last pass was more cosmetic though22:17
SpamapSyeah, I might have just +2'd that had I not started wondering if maybe gpgv2 borked the interface or something.22:18
*** michchap has joined #tripleo22:18
prometheanfire:P, anyway, it's good now22:18
SpamapSYeah, +2'd22:20
prometheanfireno22:20
prometheanfireactually...22:20
prometheanfireyou have a system with gpg 2.1?22:20
prometheanfiregpgv --keyring "${GPGDIR}"/gentookeys.gpg stage4-amd64-cloud-nomultilib-20160107.tar.bz2.DIGESTS.asc22:20
prometheanfiregpgv: Ohhhh jeeee: ... this is a bug (keyid.c:342:keystrlen)22:20
prometheanfireAborted22:21
prometheanfireI'll bug that guy I know22:21
prometheanfirehttps://lists.gnupg.org/pipermail/gnupg-devel/2016-January/030674.html22:21
prometheanfireso, I'd say stick with gpgv, 2.1 (still considered unstable) will get the fix22:22
*** ayoung has quit IRC22:23
*** Goneri has quit IRC22:24
trozetdsneddon: question for you on defining nic heat templates22:26
dsneddontrozet, Shoot22:26
trozetdsneddon: https://gerrit.opnfv.org/gerrit/gitweb?p=apex.git;a=blob;f=build/nics/controller.yaml;h=336b34a12eb35dbbc1cc7d43321ba698ebfe2720;hb=HEAD22:28
trozetdsneddon: can you see that?22:28
dsneddontrozet, I see it22:28
*** jpeeler has quit IRC22:28
trozetdsneddon: my question is (I talked to you about network isolation yesterday), you can see there is one nic and br-ex22:28
trozetdsneddon: we have 4 nics22:28
trozetdsneddon: when I ran overcloud deploy the 2nd and 4th nic failed to get an IP address, cause i dont have them in the template22:29
dsneddontrozet, Just put them in, with just type: interface, name: nicX, use_dhcp: false22:29
trozetdsneddon: so adding them to the template will get it to pass I think, but my question is if I disable those 2 networks22:29
trozetdsneddon: but use the same template, will it just ignore the NICs that do not have values for the IP addresses22:30
*** cwolferh has quit IRC22:30
*** rpothier_ has quit IRC22:30
dsneddontrozet, If you have the NICs with use_dhcp: false, you don't need to put anything for IP addresses. Those interfaces will be unused.22:30
dsneddontrozet, If you want to use them for provider networks, then you have to put them on a bridge (still with no IP), and include them in the --bridge-mappings.22:31
trozetdsneddon: well we want to put internal api traffic on them22:32
trozetdsneddon: so the VIPs will be created, but we dont need any IP on the NICs themselves?22:32
dsneddontrozet, All you have in those templates is a control plane and an External network. Only those two VIPs should be created. If you have other VIPs, then you should configure other networks.22:33
dsneddontrozet, Do you need to see what a multiple interface configuration looks like?22:33
dsneddontrozet, Check this out: https://code.engineering.redhat.com/gerrit/#/c/65267/22:34
dsneddontrozet, Is that what you are trying to do?22:34
dsneddontrozet, Or do you really just want two NICs enabled with just control plane and External?22:35
openstackgerritJames Slagle proposed openstack/tripleo-heat-templates: Add Satellite 5 support  https://review.openstack.org/26660222:36
trozetdsneddon: no we are trying to cover multiple cases22:37
trozetdsneddon: so a user running deploy can specify the network layout22:38
dsneddontrozet, Well, in any case, you have to put the IPs somewhere in the templates, not the VIPs, but the VIPs will go on the interfaces with the matching IPs.22:38
trozetdsneddon: exactly!22:38
dsneddontrozet, So if you don't assign the IPs, then the VIPs won't be assigned either.22:38
trozetdsneddon: right22:39
dsneddontrozet, So use the example I posted above to assign the Internal API to the right NIC, and tenant, etc.22:39
trozetdsneddon: so lets say maximum i have 4 networks22:39
trozetdsneddon: but a user could decide at deploy time to only use 222:39
dsneddontrozet, Are you assuming the user doesn't have the ability to use VLANs?22:39
dsneddontrozet, Or bonds?22:40
prometheanfireSpamapS: question about dib, once it's in, do images get generated and uploaded to https://www.openstack.org/marketplace/distros/ ?22:40
trozetdsneddon: my question is, if i put all 4 NICs into the nic/controller.yaml, but only run a deployment with 2 networks, will heat fail because {get_param: InternalAPIp} would be blank22:40
trozetdsneddon: we havent gotten to vlans or bond parsing yet22:41
dsneddontrozet, os-net-config would fail, because you would have an interface with a stanza that said ip_netmask: <blank>22:41
trozetdsneddon: ok so then what I will do is make a separate nic file for each scenario, then replace that one in the resource registry at deploy time22:41
dsneddontrozet, I have an idea how to create these using an interface.22:42
prometheanfiremaybe I just need to point http://docs.openstack.org/image-guide/obtain-images.html to gentoo's mirrors22:42
trozetdsneddon: ok, what is it?22:42
SpamapSprometheanfire: no they do not. dib is just a tool. :)22:43
dsneddontrozet, First, you ask the user how many interfaces they have, and fill an array with [nic1:nic<num_ifaces>]22:43
SpamapSprometheanfire: but dib would be a nice way to build images for the marketplace.22:43
prometheanfirek22:43
prometheanfireasking my docs person who I need to contact about adding to http://docs.openstack.org/image-guide/obtain-images.html22:43
dsneddontrozet, Then you ask them which interface is used for provisioning, and assign that one to the control plane interface. Now you have X unused interfaces.22:43
dsneddontrozet, You also have the user select which of the available networks they want (all are optional, really).22:44
trozetdsneddon: we have something like that but more intelligent22:44
trozetdsneddon: https://gerrit.opnfv.org/gerrit/gitweb?p=apex.git;a=blob;f=config/deploy/network/network_settings.yaml;h=2560cc5d2bbc91bee69626ed0b4f7facdae82a99;hb=HEAD22:44
SpamapSprometheanfire: believe it or not, this is the first time I've seen that page. :)22:44
trozetdsneddon: that is all a user needs to define his tripleO network22:44
trozetdsneddon: he can even leave out values and we auto-detect them on the network22:44
trozetdsneddon: for virtual deployments we can also auto-generate missing values22:45
dsneddontrozet, OK, I see what you are going for.22:45
trozetdsneddon: so you see how in that settings file, private_network and storage_network are disabled22:45
trozetdsneddon: my patch provides the code to allow you to turn them on, but overcloud deploy failed cause the nics are missing22:45
trozetdsneddon: so you can see there is yaml there to indicate VLAN or bond, but we dont currently parse those yet22:46
dsneddontrozet, I'd have to think about this some more. I feel like this is the wrong schema to represent the common scenarios.22:47
trozetdsneddon: its tailored to OPNFV, which only uses 4 networks22:47
trozetdsneddon: admin, private, public, storage22:48
dsneddontrozet, In that case, I think you need to define different templates for 2, 3, or 4 NICs in use, or produce the templates from another template, that only includes the required nics.22:48
trozetdsneddon: but it makes deploying much easier when we handle all the translation for the user so he doesnt need to know heat or tripleO22:48
trozetdsneddon: exactly22:48
trozetdsneddon: so thanks for the info! I will go do that22:49
dsneddontrozet, Just ask them for number of interfaces, and retrieve nic_template_<num_ifaces>.yaml22:49
trozetdsneddon: yup22:49
dsneddontrozet, I have toyed with the idea of making that a recoverable error in os-net-config22:50
*** egafford has quit IRC22:50
dsneddontrozet, As long as you are using 4 networks, you might as well reuse the provisioning network as admin. Is that what you do?22:51
trozetdsneddon: what do you mean as "admin"?22:51
trozetdsneddon: oh you mean our admin_network?22:52
dsneddontrozet, You just said: "dsneddon: admin, private, public, storage"22:52
trozetdsneddon: yeah that is the provisioning network22:52
trozetdsneddon: private carries tenant and internal api22:52
trozetdsneddon: public is the external net, and storage carries storage and storagemgmt (set all that in the ServiceNetMap)22:52
dsneddontrozet, I might actually argue that admin should carry provisioning and internal api, leaving a dedicated interface for tenant.22:52
dsneddontrozet, I generally recommend against combining tenant and internal api, because they are both busy networks, and you don't want tenants impacting operational services.22:53
trozetdsneddon: yeah its true22:53
trozetdsneddon: this was decided way back in OPNFV, but perhaps we should change this22:53
dsneddontrozet, Think about it. Unless the bulk of the traffic is on public, and tenant internal traffic is minimal.22:54
dsneddontrozet, By think about it, I mean consider it. I think it would be a good change for scale.22:55
*** alop has quit IRC22:56
*** cwolferh has joined #tripleo22:56
trozetdsneddon: we arent dealing with a large scale deployment, its really something one person sets up and tests NFV22:56
trozetdsneddon: but we should do it the right way and I agree with you, but its not my decision alone to make22:56
*** alop has joined #tripleo22:57
*** dcain has quit IRC22:57
trozetdsneddon: standard was setup by OPNFV so I would need to convince other people, will try to do it after this release22:57
dsneddontrozet, OK, let me know if you need backup.22:57
trozetdsneddon: thanks...and thanks for the help!22:58
prometheanfirelol22:58
trozetdsneddon: also why i have you, any chance on you reviewing that opendaylight patch soon?22:58
*** thrash is now known as thrash|g0ne23:00
*** sthillma has quit IRC23:04
*** sthillma has joined #tripleo23:05
*** Goneri has joined #tripleo23:07
*** pradk has quit IRC23:08
*** davidlenwell has quit IRC23:17
*** davidlenwell has joined #tripleo23:18
*** ChanServ sets mode: +v davidlenwell23:18
*** weshay_xchat has quit IRC23:37
openstackgerritMatthew Thode proposed openstack/diskimage-builder: Initial add of gentoo support for diskimage-builder  https://review.openstack.org/26334923:38
prometheanfireSpamapS: updated with changes from robbat223:38
*** weshay_xchat has joined #tripleo23:50

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!