15:00:01 #startmeeting puppet-openstack 15:00:03 Meeting started Tue Aug 4 15:00:01 2015 UTC and is due to finish in 60 minutes. The chair is EmilienM. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:04 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:06 The meeting name has been set to 'puppet_openstack' 15:00:09 #link agenda: https://etherpad.openstack.org/p/puppet-openstack-weekly-meeting-20150804 15:00:12 hello 15:00:13 o/ 15:00:17 hi 15:00:17 o/ 15:00:20 o/ 15:00:41 o/ 15:00:42 o/ 15:00:55 \o/ 15:01:26 #topic Review past action items 15:01:56 EmilienM to iterate on Puppet/logs -> DONE: https://review.openstack.org/#/c/206693 15:02:10 sbadia & pabelanger: figure out Gemfile split in our modules 15:02:24 sbadia: what's up? ^ 15:02:31 patchs are ready (on my laptop) 15:02:34 ready to push 15:02:43 but I wait an answer from cody 15:02:46 cool 15:02:53 sbadia & pabelanger: figure out Gemfile split in our modules -> POSTPONED 15:03:00 sbadia launch a initial msync on all our modules -> ? 15:03:02 (I used cody's patchs) 15:03:07 I guess it's related ^ 15:03:12 yep it's related 15:03:19 o/ 15:03:42 sbadia launch a initial msync on all our modules -> POSTPONED 15:03:58 sorry I'm a couple mins late 15:04:01 #topic announcements 15:04:03 #action sbadia launch a initial msync on all our modules 15:04:21 #info spredzy (yanis) is now part of core team - congrats Yanis! 15:04:28 yes congrats! 15:04:29 Thanks :) 15:04:32 congrats :D 15:04:49 #topic CI status 15:05:13 so I have some updates to share 15:05:44 * thanks to pabelanger, syntax & unit jobs are now running on centos7 - which should accelerate our CI, since centos7 nodes are faster to get in zuul 15:06:08 * integration: got tempest running successfully on centos7 and ubuntu 15:06:23 #action EmilienM & pabelanger continue to iterate on puppet integrations 15:06:27 reviews are welcome ! 15:06:46 it's happening on https://review.openstack.org/#/q/status:open+project:openstack/puppet-openstack-integration,n,z 15:06:55 #link Puppet OpenStack Integration work: https://review.openstack.org/#/q/status:open+project:openstack/puppet-openstack-integration,n,z 15:07:32 * we almost have logs in our Puppet beaker jobs: https://review.openstack.org/#/c/206693/ 15:08:07 * and this week we are pushing some patches to test CI against Liberty (got successful results locally) 15:08:17 anything else about CI we need to discuss? any blocker? 15:08:47 #action EmilienM give an update about Liberty status after testing 15:08:47 nothing on myside. Going to look into more optimizations for puppet jobs 15:08:53 EmilienM, in my review, some CI tests are failed with no relation to the implementation itself 15:08:59 pabelanger: cool, thanks for your help! 15:09:02 thanks! 15:09:03 guimaluf: link? 15:09:05 EmilienM, something like bundle errors, etc. 15:09:24 guimaluf: might be related to what pabelanger did lately, we had some fixes. Maybe 'recheck' will fix it 15:09:36 EmilienM, https://review.openstack.org/#/c/207161/ 15:09:36 ok 15:09:37 guimaluf: that was likely my fault. There was a path issue on friday 15:09:47 np! :) 15:09:55 but, recheck failures. Everything _should_ be working today 15:09:59 pabelanger: the error is from this morning though 15:10:04 if not, let me know and I can look at them 15:10:08 from 6.25am for us 15:10:16 Ya, checking now 15:10:23 pabelanger: http://logs.openstack.org/61/207161/6/check/gate-puppet-swift-puppet-beaker-rspec-dsvm-trusty/b644bf3/console.html 15:10:55 <_ody_> o/ 15:10:58 there is no other item in our agenda, so I'll open a topic for triage 15:11:18 EmilienM: will dig deeper, but I didn't make changes to beaker jobs. 15:11:18 #topic bug/patches triage 15:11:23 this could be something else 15:11:24 pabelanger: ack 15:12:05 mattymo_: around? 15:12:41 #link http://lists.openstack.org/pipermail/openstack-dev/2015-July/071089.html 15:13:25 looks like puppet-keystone part of this needs more work 15:13:32 _ody_: \o/ hi! 15:14:00 _ody_: according openstack-dev ML message, I just updated our patch serie (https://review.openstack.org/#/q/status:open+branch:master+topic:msync_rspec_version,n,z) 15:14:01 angdraug, yes I'm here 15:14:01 <_ody_> Did I see you say that msync has stablized enough to do a complete sync? 15:14:09 mattymo_: have you read my comments? 15:14:10 pabelanger: Maybe an update in net-ssh that doesn't use ruby 1.9.3 socket correctly? 15:14:11 it seems that if there is no openrc yet, it misbehaves 15:14:15 but not pushed yet, it's ok for you if I push this? 15:14:21 EmilienM, of course. You say in one that it's broken and in the other that it needs a dependency change 15:14:26 _ody_: yes 15:14:26 I'm still working to get it to pass Fuel CI 15:14:45 mattymo_: anyway, it's not tested as it is, so we can't validate it actually works 15:15:00 <_ody_> sbadia: Cool. I'll do a review of all of them immediately after breakfast. 15:15:02 EmilienM, well it's tested that it fails :) 15:15:11 _ody_: thx! 15:15:13 mattymo_: Workflow-1? 15:15:15 mattymo_: where? 15:15:43 pabelanger: Yeah! net-ssh 2.10.0 came out 2 days ago 15:16:04 yes 2.10.0 dropped 1.9 support 15:16:31 https://github.com/net-ssh/net-ssh#ruby-1x-support 15:16:33 Heh. "Lets just drop support in a feature bump" 15:16:40 fails CI in here: https://review.openstack.org/#/c/207873/ and https://review.openstack.org/#/c/207890/ 15:16:48 2.10.0 was yanked 15:16:51 https://rubygems.org/gems/net-ssh/versions 15:17:00 if you re-run tests they should get 2.9.2 and be unbroken 15:17:08 Oh that's why the betas are newer than the .0 15:17:13 regardless of my patch, looking up @credentials.auth_url should pass 15:17:13 Hunner: Ya, was going to say something must have changed upstream 15:17:20 folks, lets please don't merge topics? 15:17:31 mattymo_: ok thanks for the links 15:17:32 hard to parse 15:17:43 mattymo_: it would be useful to use Depends-On 15:17:50 so we can actually test the openstacklib 15:17:51 I did depend one on the other already 15:17:53 EmilienM: task in progress (msync) 15:17:57 #link https://review.openstack.org/#/q/status:open+branch:master+topic:msync_rspec_version,n,z 15:18:03 EmilienM, is the order of depends-on wrong? 15:18:04 mattymo_: just saw that indeed 15:18:07 no it's good 15:18:17 mattymo_: and it's still failing :( 15:18:57 I'm still trying to break it on my side. I have nothing else to report 15:19:11 mattymo_: any blocker we can help? 15:19:58 EmilienM, not yet. I may ask a couple questions later once I figure out why Fuel side fails 15:20:18 is there anything else for today? 15:20:46 hey EmilienM , can we discuss the spec? 15:20:51 iurygregory: sure 15:20:53 I've made the fixes proposed by marek and richard on the spec https://review.openstack.org/#/c/190361/ 15:21:16 you can take a look at the comments? 15:21:17 #link keystone federation spec https://review.openstack.org/#/c/190361/ 15:21:57 #action People to review https://review.openstack.org/#/c/190361/ and eventually give feedback -1/+1 15:22:07 iurygregory: I'll read it today 15:22:33 before i was considering just one class to Service Provider, now i'm suggesting one class for each type 15:22:52 iurygregory: let me see 15:23:34 iurygregory: what is Mellon? 15:23:53 it's a service provider 15:24:01 so we should implement something like in puppet-cinder 15:24:05 with backends 15:24:15 It's a choise to configure federation 15:24:26 we can have protocol SAML using shibboleth or Mellon 15:24:32 and have a ::keystone::federation::service_provider Define 15:24:39 and this Define would configure the Service Provider 15:24:46 can we have multiple service providers in the same time? 15:25:19 A service provider can have multiple IdP 15:25:27 ok so not a Define 15:25:29 but a Class 15:25:34 that would support Shibboleth and Mellon 15:25:48 oh and eventually OpenID 15:26:05 I was thinking in one class for each 15:26:16 iurygregory: why? Are parameters different ? 15:26:20 Yes 15:26:26 mhhh 15:26:40 well Mellon and Shibboleth have some common attributes 15:26:41 iurygregory: keystone parameters ? 15:27:30 not keystone parameters 15:27:50 yeah, some Apache2 bits I guess 15:28:13 for example whe using openid connector you don't need entityID 15:28:18 yes ^^ 15:28:55 I need to read the spec in details because the design of this is really important 15:29:15 sure EmilienM 15:29:31 iurygregory: I'm using http://docs.openstack.org/developer/keystone/configure_federation.html as a reference 15:29:36 I need to learn first :) 15:30:01 do we have anything else for today? 15:30:01 any questions can ask me :D (about shibboleth ) 15:30:10 iurygregory: will do 15:30:20 I close the meeting in 2 minutes of nothing comes up 15:31:15 I guess I can close it 15:31:24 have a great day - thanks for attending 15:31:27 thanks people :D 15:31:35 #endmeeting