14:59:59 <primeministerp> #startmeeting hyper-v 15:00:00 <openstack> Meeting started Tue Sep 25 14:59:59 2012 UTC. The chair is primeministerp. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:01 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:02 <openstack> The meeting name has been set to 'hyper_v' 15:00:09 <primeministerp> morning everyone 15:00:12 <primeministerp> or good day 15:00:27 <primeministerp> we'll start the discussion today with cinder bits for windows 15:00:32 <primeministerp> #topic cinder 15:00:55 <primeministerp> pedro I saw that you submitted the code and it successfully made it through jenkins 15:01:07 <primeministerp> pnavarro: ^ 15:01:25 <primeministerp> pnavarro: thanks again 15:01:30 <pnavarro> #link https://review.openstack.org/#/c/13621/ 15:01:31 <primeministerp> jgriffith: ping 15:01:42 <primeministerp> jgriffith: any chance to get a review on ^ 15:01:55 <primeministerp> pnavarro: thanks for providing the link 15:02:17 <primeministerp> pnavarro: I automated the installation already into the existing puppet bits I created 15:02:18 <pnavarro> I've changed the blueprint to Needs code review 15:02:24 <primeministerp> pnavarro: perfect 15:02:48 <primeministerp> pnavarro: if we don't get someone to take a look today, I suggest sending something into the mailing list 15:03:20 <primeministerp> pnavarro: so I guess unless we hear from jgriffith we'll move on 15:03:31 <primeministerp> pnavarro: o actually 15:03:32 <pnavarro> primeministerp: ok ! I'll wait a bit before sending it 15:03:40 <primeministerp> pnavarro: go 15:03:42 <pnavarro> if not I can try to attend Cinder meeting 15:03:49 <primeministerp> pnavarro: that will work too 15:04:06 <primeministerp> pnavarro: you should probably start attending those regardless if possible 15:04:21 <primeministerp> pnavarro: if not let's coordinate so we can have someone to cover 15:04:38 <primeministerp> pnavarro: also I'm ready to start testing 15:04:46 <primeministerp> pnavarro: those bits as well 15:05:05 <pnavarro> primeministerp: I'll try to assist 15:05:15 <pnavarro> I mean attend 15:05:16 <primeministerp> i was hoping EmilienM would be on 15:05:27 <primeministerp> he stated he was going to start the documentation 15:05:40 <primeministerp> I supplied him with the powershell to setup the windows side 15:05:51 <primeministerp> pnavarro: i'm assuming there's not much more than that 15:06:05 <pnavarro> I'm talked with Emilien this morning 15:06:13 <primeministerp> pnavarro: actually let's take that off line, because i need to know 15:06:20 <primeministerp> pnavarro: will you have some time after this 15:06:28 <primeministerp> pnavarro: so i can understand as well, the requirements 15:06:34 <primeministerp> pnavarro: i'll add it to the puppet bits 15:06:54 <pnavarro> ok primeministerp 15:06:58 <primeministerp> great 15:07:07 <primeministerp> luis_fdez: morning 15:07:12 <primeministerp> luis_fdez: er good day! 15:07:39 <primeministerp> #topic compute installer 15:07:54 <primeministerp> alexpilotti: any status updates 15:08:16 <alexpilotti> hi guys! 15:08:24 <alexpilotti> setup almost done 15:08:30 <primeministerp> alexpilotti: great 15:08:42 <alexpilotti> we are working on Keystone AD interaction 15:08:50 <alexpilotti> Tavi left 5' 15:08:59 <primeministerp> alexpilotti: 5am? 15:09:07 <alexpilotti> I guess he'll need to ask a few things to ayoung 15:09:27 <primeministerp> alexpilotti: ok can you have tavi send an email? 15:09:37 <alexpilotti> primeministerp: sure 15:09:52 <primeministerp> or if he's available now i think ayoung is around 15:10:18 <primeministerp> alexpilotti: well send an email or file a bug 15:10:37 <alexpilotti> primeministerp: I added a "OpenStack Command Prompt" to the setup 15:10:48 <primeministerp> alexpilotti: great as we discussed 15:10:57 <ociuhandu> hi all 15:11:02 <primeministerp> alexpilotti: so all the path's correct 15:11:06 <primeministerp> ociuhandu: howdy 15:11:13 <primeministerp> alexpilotti: and variables set 15:11:18 <alexpilotti> primeministerp: yep, everything works great so far 15:11:35 <primeministerp> alexpilotti: will you have something for me to test? 15:11:35 <alexpilotti> primeministerp: the service gets registered flawlessly using Apache deamons 15:11:44 <alexpilotti> primeministerp: sure 15:11:48 <primeministerp> alexpilotti: great to know, good idea 15:12:20 <luis_fdez> primeministerp: hi!, sorry, I'was fixing some issues with my friend pep8 15:12:21 <alexpilotti> primeministerp: we're adding now an "avanced configuration" screen 15:12:35 <jgriffith> primeministerp: pong 15:12:42 <alexpilotti> luis_fdez: did u manage to deploy hyperv already? 15:12:47 <primeministerp> jgriffith: hey thanks for responding 15:13:01 <primeministerp> jgriffith: pnavarro submitted cinder support for windows 15:13:02 <alexpilotti> luis_fdez: if not I have a setup for you to beta test ;-) 15:13:10 <luis_fdez> yes, but by the moment in our essex install... 15:13:11 <primeministerp> pnavarro: we were hoping we could get you to review it 15:13:26 <primeministerp> jgriffith: we were hoping we could get you to review it 15:13:31 <jgriffith> primeministerp: haven't seen it yet, but I certainly will take a look 15:13:39 <alexpilotti> who are the core reviewers for Cinders? 15:14:04 <primeministerp> jgriffith: https://review.openstack.org/#/c/13621/ 15:14:06 <jgriffith> alexpilotti: myself, clayg, jdurgin, vishy.... 15:14:07 <luis_fdez> we were following today the fedora openstack test day, and Jan was wondering if you have been thinking about ceilometer support in windows 15:14:16 <jgriffith> alexpilotti: Best to just look on launchpad 15:14:23 <primeministerp> luis_fdez: we have 15:14:30 <primeministerp> luis_fdez: pedro and i discussed it yesterday 15:14:36 <ayoung> primeministerp, alexpilotti yeah, I am around. What is up? 15:14:56 <alexpilotti> jgriffith: tx, was going to check on launchpad 15:14:58 <primeministerp> luis_fdez: but that will probably be a bit off 15:15:08 <luis_fdez> ok 15:15:15 <primeministerp> luis_fdez: maybe post g cycle unless you are looking to start that work 15:15:18 <primeministerp> luis_fdez: ;) 15:15:25 <alexpilotti> jgriffith: I tested the cinder Windows volume obits on Windows 15:15:44 <luis_fdez> hehe 15:15:45 <primeministerp> ayoung: ociuhandu has some keystone questions 15:16:08 <ociuhandu> ayoung: I'm trying to figure out the keystone ldap integration with active directory. The endpoints remain defined in the database, only users/tenants/roles are in ldap, right? 15:16:10 <alexpilotti> jgriffith: what would you suggest for integrating the Windows volume tests in SmokeStack? 15:16:31 <ayoung> ociuhandu, that is correct 15:16:46 <jgriffith> alexpilotti: We'll need to talk to the test guys about that 15:16:56 <jgriffith> alexpilotti: I'm not aware of any windows set-ups as of yet 15:16:58 <ayoung> ociuhandu, users etc are the identity provider, versus the catalog 15:17:08 <jgriffith> alexpilotti: But it's something that will be needed in other places as well 15:17:12 <ayoung> ociuhandu, in the config file, it is: 15:17:15 <primeministerp> jgriffith: that's what we're adding support for 15:17:30 <ociuhandu> identity vs catalog in config file 15:17:47 <jgriffith> primeministerp: I understand... what I'm saying is the infrastructure setup itself (ie tempest VM's etc) 15:17:48 <alexpilotti> jgriffith: yep, we will need also Windows set-up for Hyper-V as well 15:17:53 <ayoung> [identity] 15:17:53 <ayoung> # driver = keystone.identity.backends.sql.Identity 15:17:55 <primeministerp> jgriffith: o gotcha 15:18:02 <jgriffith> alexpilotti: That's what I was thinking 15:18:03 <ayoung> ociuhandu, ^^ that is from the default file 15:18:10 <ayoung> ociuhandu, so for LDAP you need 15:18:19 <ayoung> driver = keystone.identity.backends.ldap.Identity 15:18:21 <ociuhandu> ayoung: thanks. I'm now working on the mapping for the credentials 15:18:29 <ayoung> ociuhandu, why 15:18:35 <jgriffith> primeministerp: alexpilotti Looks good first glance 15:18:48 <primeministerp> jgriffith: great, thanks again for the help 15:18:51 <ayoung> ociuhandu, ah, you don't mean tokens, OK 15:18:57 <jgriffith> Would probably do well to submit a blue-print 15:19:07 <primeministerp> jgriffith: pnavarro already did 15:19:17 <primeministerp> pnavarro: do you have the link to the blueprint? 15:19:19 <pnavarro> #link https://blueprints.launchpad.net/cinder/+spec/windows2012driver 15:19:25 <ociuhandu> ayoung: I mean mapping of OU/CN/... 15:19:28 <primeministerp> jgriffith: ^ 15:19:30 <jgriffith> primeministerp: cool, should modify the commit to include it 15:19:47 <primeministerp> jgriffith: great 15:19:54 <primeministerp> jgriffith: thanks for the advice 15:20:00 <ociuhandu> ayoung: i managed to connect and authenticate keystone but the query results are not yet ok 15:20:02 <primeministerp> pnavarro: are you on that? 15:20:09 <pnavarro> ok, I'll modify the commit to include it 15:20:11 <jgriffith> primeministerp: I don't think we can push this into Folsom at this point but we can get it in trunk 15:20:23 <primeministerp> jgriffith: i'm fine with that 15:20:26 <alexpilotti> jgriffith: here's the BP https://blueprints.launchpad.net/cinder/+spec/windows2012driver 15:20:32 <primeministerp> jgriffith: it was kind of last minute 15:20:43 <primeministerp> jgriffith: however if you happen to push it into folsom.... 15:20:45 <primeministerp> ;) 15:20:45 <jgriffith> primeministerp: Always happens at release :) 15:20:49 <jgriffith> LOL 15:20:51 <primeministerp> jgriffith: we'll buy you a beer 15:21:08 * jgriffith is easily bribed, but the rest of the team may be different :) 15:21:27 <primeministerp> alexpilotti: bring those cigars to the conf 15:21:30 <alexpilotti> jgriffith: primeministerp okok, we'll buy a six pack :-D 15:21:41 <jgriffith> :) 15:21:47 <primeministerp> alexpilotti: i've met some of them, make it a twelve 15:22:03 <primeministerp> ok, let's progress 15:22:06 <ayoung> ociuhandu, there are a handful of tickets in for AD issues. You should take a look in the bug tracker 15:22:28 <primeministerp> #topic AD Integration 15:22:30 <primeministerp> ^ 15:22:38 <primeministerp> lots of stuff already going buy 15:22:52 <primeministerp> ociuhandu: you should probably hook up with jose 15:22:59 <primeministerp> ociuhandu: have you reached out to him? 15:23:15 <primeministerp> ociuhandu: I believe he's already got everything functioning 15:23:25 <ociuhandu> primeministerp: not yet, just started the work on this recently 15:23:41 <primeministerp> ociuhandu: ok, then I would definately reach out to him. 15:24:08 <alexpilotti> primeministerp ayoung ociuhandu: beside AD integration, the next step would be Kerberos 15:24:15 <ociuhandu> primeministerp: will do for sure 15:24:40 <primeministerp> alexpilotti: agree 15:24:42 <alexpilotti> ayoung: did you already think about integrating the full Windows auth in keystone? 15:24:45 <primeministerp> ayoung: any plans on that? 15:25:10 <primeministerp> luis_fdez: anything to add re the AD bits? 15:25:15 <pnavarro> What about Keystone throug Windows Identity Foundation? 15:25:27 <alexpilotti> pnavarro: great point 15:25:43 <primeministerp> pnavarro: i'm not familiar with that service 15:25:56 <pnavarro> It abstracts kerberos, and some identity federation services 15:25:56 <luis_fdez> no, jose is submiting code to keystone... and now... he is busy with the doc 15:26:11 <primeministerp> luis_fdez: the code for the ad bits? 15:26:15 <luis_fdez> yeps 15:26:20 <primeministerp> luis_fdez: perfect 15:26:25 <primeministerp> ociuhandu: you cought that right? 15:26:29 <primeministerp> ociuhandu: ^^ 15:26:29 <alexpilotti> pnavarro primeministerp: I know who is the PM on Identity foundation, I'm going to reach out to him 15:26:37 <luis_fdez> yes, he should talk with jose 15:26:41 <primeministerp> AlanClark: perfect 15:26:47 <luis_fdez> I will let him know that ociuhandu is interested... 15:26:47 <primeministerp> alexpilotti: er perfect 15:26:54 <primeministerp> luis_fdez: ok 15:27:50 <ayoung> alexpilotti, Kerberos requires fixes to the Eventlet container 15:27:56 <ociuhandu> primeministerp: yes 15:28:23 <primeministerp> great 15:28:24 <ayoung> alexpilotti, which is most easily done this way: http://adam.younglogic.com/2012/03/keystone-should-move-to-apache-httpd/ 15:28:28 <alexpilotti> ayoung: is there a bug for that? 15:29:08 <ayoung> alexpilotti, the code is already checked in for it, but I think I had a bug. Let me see if I submitted a fix 15:29:12 <alexpilotti> ayoung: what about moving it to IIS ;-) 15:29:24 <ayoung> alexpilotti, https://review.openstack.org/#/c/13048/ 15:29:29 <ayoung> alexpilotti, feel free. 15:30:04 <alexpilotti> ayoung: on IIS we could leverage the Windows Integrated authentication 15:31:19 <primeministerp> ok, 15:31:20 <alexpilotti> ayoung: the fix for HTTPS is simply a conf path issue. The rest works already fine on Apache? 15:31:43 <alexpilotti> ayoung: meant HTTPD, darn autocorrector 15:32:30 <primeministerp> ok 15:32:31 <ayoung> alexpilotti, yes 15:32:44 <ayoung> HTTPS works, too. Heh 15:32:54 <alexpilotti> ayoung: lol 15:33:12 <primeministerp> #topic documentation 15:33:20 <alexpilotti> ayoung: so you have already tested it w Kerberos? 15:33:31 <primeministerp> #topic ad/kerberos 15:33:41 <primeministerp> alexpilotti: ^ 15:33:54 <ayoung> alexpilotti, http://adam.younglogic.com/2012/03/ssl-nss-easy/ 15:34:15 <alexpilotti> ayoung: tx!! 15:36:13 <primeministerp> #topic documentation 15:36:19 <primeministerp> ok docs were submitted 15:36:25 <primeministerp> some changes have been made, 15:36:32 <primeministerp> EmileM helped with those 15:36:46 <primeministerp> pnavarro: he also offered to help with the docs for the cinder bits 15:36:57 <primeministerp> pnavarro: i'm assuming that's what you were discussing earlier 15:37:23 <pnavarro> primeministerp: yes 15:37:28 <primeministerp> pnavarro: perfect 15:37:41 <primeministerp> pnavarro: i'll follow up with him as well when I see him online. 15:37:56 <primeministerp> #topic CI work 15:37:58 <pnavarro> primeministerp: yes, he said so 15:38:11 <primeministerp> so still pugging away 15:38:20 <primeministerp> got a lot of the puppet automation done 15:38:36 <primeministerp> still working to get more physical assets and some free hands to help rack 15:38:52 <primeministerp> pnavarro: i have san however I don't see how we can use it for cinder 15:39:07 <primeministerp> pnavarro: given how the iscsi bits work 15:39:20 <pnavarro> primeministerp: what kind of SAN? 15:39:26 <primeministerp> pnavarro: emc 15:39:31 <primeministerp> pnavarro: low end 15:39:38 <primeministerp> and about 15 hbas 15:40:17 <alexpilotti> jgriffith ayoung: we have a bug in setup.py of all the python-*client packages. I fixed it for novaclient: https://bugs.launchpad.net/python-novaclient/+bug/1052161 15:40:17 <uvirtbot> Launchpad bug 1052161 in python-novaclient "setup.py build fails on Windows due to hardcoded paths" [Undecided,Fix committed] 15:40:18 <primeministerp> pnavarro: it's supposed to have 20 tb 15:40:28 <pnavarro> primeministerp: I think there is no EMC cinder plugin 15:40:29 <primeministerp> pnavarro: I have to rerack it 15:40:35 <primeministerp> pnavarro: there's prob not 15:40:50 <primeministerp> pnavarro: but for hosting hba's through hyper-v to vms 15:41:16 <primeministerp> pnavarro: we'll have to see 15:41:17 <alexpilotti> jgriffith ayoung: should I submit similar bugs for python-cinderclient, python-keystoneclient, etc? 15:41:21 <pnavarro> primeministerp: ok 15:41:36 <primeministerp> anyone have anything else to add 15:41:46 <alexpilotti> jgriffith ayoung: or do you know if there's a "unified" way to handle them? 15:42:11 <ayoung> alexpilotti, for the love of god no! 15:42:15 <ayoung> Um, go ahead 15:42:26 <ayoung> Heh. 15:42:27 <pnavarro> I'd like to add that I'd be working to modify volume bits in nova to call new Storage WMI API 15:42:47 <heckj> alexpilotti: link them to the projects instead - it'll save a lot of typing and share that it's a common bug 15:43:08 <heckj> alexpilotti: I just linked up python-keystoneclient 15:43:50 <alexpilotti> heckj: so it's simply "link a related branch"? 15:44:49 <heckj> alexpilotti: from the bug page, there's a "Also affects project" hyperlink that's easiest to use 15:45:05 <alexpilotti> heckj ayoung: but do I have to commit separate fixes for review (referring the same bug number)? 15:45:20 <alexpilotti> heckj: tx, didn't see it! :-) 15:45:25 <heckj> alexpilotti: yep - although I thought I'd do the keystone client one right now 15:45:46 <alexpilotti> heckj: great! 15:46:28 <heckj> alexpilotti: since this is coming form the openstack-common code, you'll want to link in that project as well 15:46:45 <alexpilotti> heckj: ok 15:47:53 <primeministerp> ok guys if that's it, i'm going to end the meeting 15:47:54 <mprasad> going forward, do we have any pointers for quantum implementation in HyperV 15:47:59 <primeministerp> o 15:48:00 <primeministerp> great 15:48:12 <primeministerp> mprasad: we're thinking about that now 15:48:33 <primeministerp> mprasad: our goal is to implement the quantum bits during the G cycle 15:48:49 <primeministerp> mprasad: are you interested in assisting with those efforts 15:49:06 <mprasad> also about multi network configuration? 15:49:12 <ayoung> alexpilotti, yes, as each commit goes to a different project, and is approved by a different set of devs. For example, I could approve only the fix for Keystone 15:49:15 <mprasad> yes, can give a try 15:49:18 <primeministerp> mprasad: let's discuss further in #openstack-hyper-v after this meeting 15:49:27 <primeministerp> mprasad: for networking now we only support flat 15:49:45 <alexpilotti> ayoung: event if it's part of openstack-common? 15:49:52 <primeministerp> mprasad: i was playing with lacp and vlans using the 2012 vswitch yesterday but there's not code for anything yet 15:50:02 <mprasad> primeministerp: ok, thanks for the info 15:50:31 <primeministerp> ok continue discussions in the #openstack-hyper-v channel 15:50:37 <primeministerp> #endmeeting