Tuesday, 2019-06-25

openstackgerritAlexander Noskov proposed airship/treasuremap master: WIP Separate fluentbit and fluentd charts  https://review.opendev.org/66723600:04
openstackgerritAlexander Noskov proposed airship/treasuremap master: WIP Uplift all components  https://review.opendev.org/66446900:04
openstackgerritAlexander Hughes proposed airship/pegleg master: [WIP] Set 640 file permissions at time of creation  https://review.opendev.org/66631900:11
*** cheng1 has quit IRC00:14
*** cheng1 has joined #airshipit00:14
*** DougSchv has quit IRC00:14
*** DougSchv has joined #airshipit00:15
*** DougSchv has quit IRC00:20
*** nishantkr has quit IRC00:23
*** DougSchv has joined #airshipit00:41
openstackgerritAlexander Hughes proposed airship/pegleg master: [WIP] Set 640 file permissions at time of creation  https://review.opendev.org/66631900:51
*** DougSchv has quit IRC01:00
*** DougSchv has joined #airshipit01:03
*** DougSchv has quit IRC01:08
*** mrcuttlefish has joined #airshipit01:19
*** kskels has quit IRC01:19
*** mrcuttlefish has left #airshipit01:21
*** DougSchv has joined #airshipit01:32
*** DougSchv has quit IRC01:38
*** DougSchv has joined #airshipit01:41
openstackgerritAlexander Hughes proposed airship/pegleg master: Set 640 file permissions at time of creation  https://review.opendev.org/66631901:45
*** DougSchv has quit IRC01:55
openstackgerritAlexander Hughes proposed airship/shipyard master: [WIP] Allow user to specify token as env var  https://review.opendev.org/66640202:23
*** DougSchv has joined #airshipit02:27
*** AlexNoskov has quit IRC02:30
openstackgerritMerged airship/spyglass master: Implements data object models  https://review.opendev.org/66209202:34
*** DougSchv has quit IRC02:35
openstackgerritChris Wedgwood proposed airship/promenade master: API anchor: store snapshots on host, to survive pod restarts  https://review.opendev.org/66441602:41
*** kskels has joined #airshipit03:07
*** gagehugo has quit IRC03:22
*** DougSchv has joined #airshipit03:43
*** DougSchv has quit IRC03:48
*** DougSchv has joined #airshipit04:54
*** DougSchv has quit IRC04:58
*** kskels has quit IRC05:47
*** DougSchv has joined #airshipit06:06
*** DougSchv has quit IRC06:12
*** mcfuller has quit IRC06:25
*** pgaxatte has joined #airshipit06:26
*** mcfuller has joined #airshipit06:34
*** altlogbot_0 has quit IRC06:46
*** altlogbot_0 has joined #airshipit06:54
*** phasespace has joined #airshipit07:03
*** DougSchv has joined #airshipit07:14
*** DougSchv has quit IRC07:19
*** DougSchv has joined #airshipit07:50
*** DougSchv has quit IRC07:54
*** lemko has joined #airshipit08:36
*** DougSchv has joined #airshipit09:06
*** DougSchv has quit IRC09:10
openstackgerritSmruti Soumitra Khuntia proposed airship/treasuremap master: [WIP] Enable Metrics Collection for UCP RabbitMQ Cluster  https://review.opendev.org/66560910:00
openstackgerritSmruti Soumitra Khuntia proposed airship/treasuremap master: Enable Metrics Collection for UCP RabbitMQ Cluster  https://review.opendev.org/66560910:00
openstackgerritRoman Gorshunov proposed airship/election master: Fix formatting  https://review.opendev.org/66731810:07
*** DougSchv has joined #airshipit10:08
*** DougSchv has quit IRC10:13
*** DougSchv has joined #airshipit10:43
*** DougSchv has quit IRC10:48
*** DougSchv has joined #airshipit11:01
*** DougSchv has quit IRC12:04
*** alexanderhughes has joined #airshipit12:36
openstackgerritDirk Mueller proposed airship/election master: Spelling / Typo fixes  https://review.opendev.org/66735012:39
openstackgerritAlexander Hughes proposed airship/shipyard master: Allow user to specify token as env var  https://review.opendev.org/66640212:46
*** MattCoachCarter has joined #airshipit12:47
*** howell has joined #airshipit12:54
*** bh526r has joined #airshipit12:55
*** lemko has quit IRC12:55
*** amalrajgenocidex has joined #airshipit12:55
amalrajgenocidexHi, I'm setting up airsloop and deployment is showing as success in MAAS. But the compute node didn't get added to the node list.12:56
amalrajgenocidexshowing below error in syslog " Jun 24 22:54:18 airsloop-compute-1 kubelet[8051]: E0624 22:54:18.923457    8051 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:47: Failed to list *v1.Pod: Get https://127.0.0.1:6553/api/v1/pods?fieldSelector=spec.nodeName%3Dairsloop-compute-1&limit=500&resourceVersion=0: dial tcp 127.0.0.1:6553:12:56
amalrajgenocidexconnect: connection refused12:56
amalrajgenocidexAny idea?12:57
mattmceuenHey amalrajgenocidex, in a meeting but will take a look soon13:02
mattmceuenIf anyone is trying to get into the airship design call, note that it's on a different webex bridge today:  https://attcorp.webex.com/join/mm974513:03
portdirectis the meeting now, or in one hour?13:04
mattmceuennow, but now13:05
mattmceuenthat was two different messges smushed together.  Read as "now."13:05
portdirect:D13:08
*** aaronsheffield has joined #airshipit13:09
*** sthussey has joined #airshipit13:10
*** DougSchv has joined #airshipit13:11
openstackgerritPete Birley proposed airship/airshipctl master: Gerrit: Add .gitreview file  https://review.opendev.org/66736413:12
*** DougSchv has quit IRC13:16
*** kskels has joined #airshipit13:20
sthussey^ looks like I can't approve the above. I guess Airship 2.0 is a new core group.13:29
mattmceuenAll projects have been getting created with new core groups; I seeded this one with the folks already working on / having experience with the project13:33
amalrajgenocidexHi mattmceuen  Thanks. Please check when you have time.13:41
*** ab2434_ has joined #airshipit13:47
*** openstackgerrit has quit IRC13:48
*** openstackgerrit has joined #airshipit13:53
openstackgerritJaesuk Ahn proposed airship/election master: Adding Jaesuk Ahn candidacy for TC role  https://review.opendev.org/66737213:53
openstackgerritJaesuk Ahn proposed airship/election master: Adding Jaesuk Ahn candidacy for TC role  https://review.opendev.org/66737213:55
*** DougSchv has joined #airshipit13:58
*** DougSchv has quit IRC14:02
*** michael-beaver has joined #airshipit14:10
*** kranthikirang has joined #airshipit14:21
*** kguttikonda has joined #airshipit14:24
*** lemko has joined #airshipit14:24
*** nishantkr has joined #airshipit14:25
*** kranthikirang has quit IRC14:27
roman_gmattmceuen: working comittee is more about development, and technical comittee is more governance, right? Is my understanding correct?14:29
*** DougSchv has joined #airshipit14:30
*** phasespace has quit IRC14:31
*** gagehugo has joined #airshipit14:32
*** DougSchv has quit IRC14:35
*** kguttikonda has quit IRC14:37
openstackgerritJan-Erik MÃ¥ngs proposed airship/election master: Adding Jan-Erik Mangs candidacy for TC role  https://review.opendev.org/66737614:44
amalrajgenocidexHi, I'm setting up airsloop and deployment is showing as success in MAAS. But the compute node didn't get added to the node list. showing below error in syslog " Jun 24 22:54:18 airsloop-compute-1 kubelet[8051]: E0624 22:54:18.923457    8051 reflector.go:205] k8s.io/kubernetes/pkg/kubelet/config/apiserver.go:47: Failed to list *v1.Pod: Get https://14:47
amalrajgenocidex127.0.0.1:6553/api/v1/pods?fieldSelector=spec.nodeName%3Dairsloop-compute-1&limit=500&resour... dial tcp 127.0.0.1:6553: connect: connection refusedAny idea?14:47
*** mbologna has quit IRC14:47
amalrajgenocidexAny idea?14:47
openstackgerritScott Hussey proposed airship/promenade master: Allow etcd anchor to recover from bad state  https://review.opendev.org/66737814:49
openstackgerritNishant Kumar proposed airship/shipyard master: Add realease uuid annotation to POD spec  https://review.opendev.org/66574514:49
openstackgerritNishant Kumar proposed airship/armada master: Add release uuid annotation to POD spec  https://review.opendev.org/66574714:50
*** pgaxatte has quit IRC14:51
openstackgerritNishant Kumar proposed airship/maas master: Add release uuid annotation to POD spec  https://review.opendev.org/66641814:51
mattmceuenamalrajgenocidex, do you see any errors in the apiserver pod logs?14:51
openstackgerritNishant Kumar proposed airship/drydock master: Add release uuid annotation to POD spec  https://review.opendev.org/66641914:51
openstackgerritNishant Kumar proposed airship/deckhand master: Add release uuid annotation to POD spec  https://review.opendev.org/66642014:54
openstackgerritNishant Kumar proposed airship/promenade master: Add release uuid annotation to POD spec  https://review.opendev.org/66642114:55
openstackgerritNishant Kumar proposed airship/divingbell master: Add release uuid annotation to POD spec  https://review.opendev.org/66663714:55
mattmceuenamalrajgenocidex: it looks like for some reason the compute host wasn't able to talk back to the apiserver on the control plane host after kubernetes was installed on it14:56
mattmceuenthat might be due to some networking issue blocking the communication, or might be because the apiserver is having issues14:56
mattmceuendoes kubectl / pod listings / etc work fine on the genesis host itself?14:56
amalrajgenocidexmattmceuen, genesis node seems to be mostly okay. There is no service running in port 6553 of compute server.14:58
amalrajgenocidexIs it supposed to run haproxy service in the port 6553 of compute too?14:59
amalrajgenocidexI can see multiple api pods in ucp node. Which one should I specifically check?15:01
*** obravo has joined #airshipit15:03
openstackgerritNishant Kumar proposed airship/divingbell master: Add release uuid annotation to POD spec  https://review.opendev.org/66663715:14
mattmceuenamalrajgenocidex:  yes, on your compute host you should have k8s_haproxy_haproxy-<blahblah> container15:14
mattmceuenIn its logs  you should see a bind *:655315:14
mattmceuenas far as the api pods, could be either one15:15
openstackgerritDan Crank proposed airship/promenade master: [WIP] Use etcd encryption for webhook-apiserver  https://review.opendev.org/66576115:15
mattmceuendo you see a k8s_haproxy container running on the compute?15:15
kskelsquick tip: if you login to the compute node, run 'sudo cat /var/log/syslog |grep promjoin'15:16
kskelsthis will tell you if promenade join had any errors to bootstrap k8s15:16
mattmceuenroman_g:  yep that's a fair assessment -- I would characterize the main responsibility of working committee as "keeping the dev community thriving" and the technical committee as "driving the forward looking airship vision"15:18
roman_gmattmceuen: thanks. Will apply for a working comittee membership role then.15:22
amalrajgenocidexHi mattmceuen and kskels, Thank you for guiding me. lthe grep promjoin did help me find the issue.15:23
amalrajgenocidexIs there any way to add additional nic to the compute on deployment15:24
amalrajgenocidexAll my 4 VLAN's are currently private, which seems to have caused problem.15:24
kskelsright - it probably tries to download docker, tc15:25
kskelsand other needed packages15:25
kskelsnormally the default route is configured via drydock15:26
kskelsso I would suggest to adjust the physical networking to add another network and then in the hardware/host profiles to add needed interfaces15:26
mattmceuenHey team, the agenda for our meeting in a half hour is up at:  https://etherpad.openstack.org/p/airship-meeting-2019-06-2515:27
mattmceuenplease add any additional discussion points you'd like to include on the agenda!15:27
kskelsamalrajgenocidex: https://github.com/airshipit/treasuremap/blob/master/site/airsloop/profiles/host/compute.yaml#L25 here - primary network means default route in this case15:28
kskelsand you may add any networks/nics that you need in your setup15:28
kskels(our default route is configured on one of the VLANs/oam)15:29
amalrajgenocidexyes kskels , exactly. docker installation failed.15:29
mattmceuengood explanation kskels15:29
amalrajgenocidexAnd thank you once again, let me check host profile and see if I can try adding a new interface. Otherwise, I will ask DC to convert OAM network to public15:30
*** mbologna has joined #airshipit15:31
amalrajgenocidexAnother doubt, on which port can I access openstack dashboard and successful deployment.15:31
*** AlexNoskov has joined #airshipit15:33
amalrajgenocidex*after15:42
kskelsit will be ingress URL, e.g. DNS/FQDN15:48
kskelsas we didn't use external DNS, it will use the default15:49
kskelson your client side (laptop) add this to your `/etc/hosts`15:49
kskels10.22.71.21 horizon horizon.openstack.svc.cluster.local *.openstack.svc.cluster.local15:49
kskelsand then access the dashboard via15:50
kskelshttp://horizon.openstack.svc.cluster.local/15:50
kskelsin more general/prod way - it is possible to override this with more proper DNS if you have access to have entries there15:50
*** ian-pittwood has joined #airshipit15:53
amalrajgenocidexOk. I understand. If I need to use a proper domainname, In which all files should I make changes?15:53
kskelsyou can look at the Seaworthy (full reference site) for the enpoints https://github.com/airshipit/treasuremap/blob/master/site/seaworthy/software/config/endpoints.yaml#L1315:59
kskelsit has 2 parts there - substitutions for DNS and also for TLS/certificates15:59
kskelsyou will only need the DNS part - and also later if you need TLS - you may setup certs (must be proper certs, self-signed will not work)15:59
mattmceuen#startmeeting airship16:00
openstackMeeting started Tue Jun 25 16:00:28 2019 UTC and is due to finish in 60 minutes.  The chair is mattmceuen. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: airship)"16:00
mattmceuen#topic Rollcall16:00
openstackThe meeting name has been set to 'airship'16:00
*** openstack changes topic to "Rollcall (Meeting topic: airship)"16:00
mattmceuenHey everyone, we will be starting our weekly team meeting in a few minutes16:00
openstackgerritRoman Gorshunov proposed airship/airshipctl master: [WIP] Add basic gates and docs build  https://review.opendev.org/66739316:00
mattmceuenPlease add anything you'd like to discuss to our agenda here: https://etherpad.openstack.org/p/airship-meeting-2019-06-2516:00
dwalto/ !16:01
michael-beavero/16:01
kskelso/16:02
alexanderhugheso/16:02
mattmceuenalright, let's get movin'16:03
howello/16:03
mattmceuen#topic Meeting time voting16:03
*** openstack changes topic to "Meeting time voting (Meeting topic: airship)"16:03
mattmceuenJust a reminder that we currently have a vote open here: https://etherpad.openstack.org/p/airship-meeting-vote-201916:03
mattmceuenTo vote for the meeting time(s) for this meeting16:03
mattmceuenIf you have an opinion, please vote in there!16:04
mattmceuenWe are set to close by EOD.  Does anyone feel like that's not enough time, or would need some more time to gather valuable votes?16:04
alexanderhughesit's been up for some time, imo close at EOD and revisit later if we're suffering low attendance regularly16:05
mattmceuen+1 to that16:05
mattmceuenAlright, I will tally them up and send out results EOD (I honestly haven't reviewed them yet)16:05
mattmceuenUnless anything else on the meeting time topic, I will plow ahead16:06
*** roman_g has quit IRC16:06
mattmceuen#topic Revisit OpenSUSE Airskiff integration approach16:06
*** openstack changes topic to "Revisit OpenSUSE Airskiff integration approach (Meeting topic: airship)"16:06
mattmceuenJust to close the loop on this from last week16:06
mattmceuena few weeks ago, we'd decided that OpenSUSE support for Airskiff could be accomplished by using a fourth deckhand layer, below site (named `cicd`)16:07
mattmceuenlast week, we decided to think that through a bit again, just to make sure there were no issues16:07
mattmceuenarunkant are you around by chance?16:07
mattmceuen(or any of the other opensuse gurus)16:09
mattmceuenIn this morning's design call, we started discussing how we can "do this right" in Airship 2.0, since we're moving toward reworking our manifest layering using Kustomize anyway16:10
mattmceuenThat makes a good opportunity to get new features in, like "service layer" type things that let you pull documents into a site from different sources, e.g. one source for your hardware, once or more sources for your workload and overrides16:11
mattmceuenNext week we'll start reviewing some details16:11
mattmceuenSo I guess my question is, is "a cicd layer off of airskiff site" good enough for opensuse until that lands16:12
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664516:12
mattmceuenBut I think we'll need to table it for now :)16:12
mattmceuenHowever, on a related topic - another one from last week we were going to think about16:12
mattmceuen#topic Tungsten Fabric Integration16:13
*** openstack changes topic to "Tungsten Fabric Integration (Meeting topic: airship)"16:13
mattmceuenobravo, you around?16:13
*** jamesgu_ has joined #airshipit16:13
obravoYeah ,  hello!16:14
mattmceuenThe points above I made about "we want to do this right in Airship 2.0" applies to Tungsten Fabric in the same way that it applies to OpenSUSE16:14
obravoSuddenly i`m still working in migrating to treasuremap16:14
mattmceuenhaha16:14
mattmceuenoh awesome - do you have a patchset for treasuremap?  I missed it16:14
mattmceuencan you share that?16:14
mattmceuenin the etherpad would be perfect16:15
obravoit`s still in progress , i`ll try to share it before next Tuesday16:15
mattmceuenSounds great16:15
mattmceuenSo I will ask you for your thoughts on how we should manage Tunsten Fabric overrides in Airship, until Airship 2.0 makes it easier :)  here are some options:16:16
mattmceuen1. Do what we want to do with Airskiff + OpenSUSE:  make another layer underneath of a site (e.g. underneath `aiab`) that applies TF overrides on top of that site.  This would be a great example for folks and is in line with work you've already done; however it wouldn't demonstrate a full example multinode site exactly16:18
*** jezogwza has joined #airshipit16:18
mattmceuen2. Create a new `type` in Treasuremap that adds TF overrides, making it easy to base other sites off of it16:18
mattmceuenthe downside of that is it would have a lot of copy & paste overlap with other types, e.g. with `sloop`16:19
mattmceuen3. Create reference manifests outside of Treasuremap.  They could even be layered on top of Treasuremap `globals`, basically same as #2 but split out into a different repo16:20
mattmceuenThe benefit of #3 would be that you'd have a lot of control over what's in that separate repository16:20
mattmceuenWe can go one or more of these routes16:20
mattmceuenI would suggest we start with #1 and then go forward from there, but am certainly open to good ideas from you obravo or the rest of the team!16:21
kskelsMy vote would probably be #2 - but would really need to think more also..16:21
mattmceuen#2 / #3 is certainly the more correct way to do it.  And if we did start with #1, it might be good to pivot to #2 / #3 afterwards16:22
kskelsok, sounds good16:23
mattmceuenIt comes with its own additional technical debt associated with having a new type -- but that's the world we'll live in till we have service layers16:23
mattmceuenHopefully I explained those ok obravo - please let me know if it sounds like crazy talk or if you have questions16:23
obravoWell , if you ask for my opinion -  i would prefer #1 . #2 is too difficult for temporary decision , and #3 makes layering system a little more tricky16:23
*** AlexBailey has joined #airshipit16:24
mattmceuenSounds good to me.  The person doing the work gets a big vote ;-)   we can take a look at it as a `cicd` layer implementation once it's done, and then pivot from there if we want16:24
mattmceuenThen you'll also be going down a similar path to airskiff-opensuse as well16:25
mattmceuenHey jamesgu_, I think I may have seen you slip in as well?16:26
jamesgu_@mattmceuen: hello16:26
mattmceuenI captured some thoughts above on Airship 1.0 vs 2.0 OpenSUSE integration, for airskiff or otherwise16:26
mattmceuenIf you can give that a look at some point and let me know your thoughts that would be awesome16:26
AlexNoskovHey guys! Could you please review changes for promenade https://review.opendev.org/664467. Thanks!16:26
jamesgu_sounds good.. catching up the notes here16:27
mattmceueno/ AlexNoskov will do - I'll add that to the review request list16:27
mattmceuenAlright, thanks guys - moving on16:28
mattmceuen#topic New AIAB in TM - ready to promote as *the* AIAB?16:28
*** openstack changes topic to "New AIAB in TM - ready to promote as *the* AIAB? (Meeting topic: airship)"16:28
mattmceuenSince last week I've run through the new, Treasuremap-rehomed AIAB (single node), and it's been doing great in my testing16:28
mattmceuenhas anyone else had a chance to give it a spin?  Any issues / concerns seen with it?16:29
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664516:29
kskelsI've tried it also - only 2x - worked good both cases.16:29
mattmceuenexcellent16:29
mattmceuenwe've also been pointing people who have been having problems with the "old" AIAB toward the new one16:29
mattmceuenAre we ready then to start pointing people toward the new AIAB, from the airshipit.org home page, from documentation, etc?16:30
kskelsI think this is awesome - and should provide much better care and uplifts for AIAB compare to the old16:30
mattmceuenI am leaning that way16:30
mattmceuen++16:30
kskels+1 for docs16:31
mattmceuenAs far as deprecating the "old" aiab, I suggest we do it phased, and put a note in the project readme / instructions saying something like "Note:  airship-in-a-bottle has moved to the treasuremap project <link>.  The aiab in this project is deprecated and will be removed at some point in the future"16:32
mattmceuenor some such.  does that sound reasonable16:32
dwaltThat sounds like a reasonable approach16:32
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664516:32
evgenyl++ deprecation note should suffice for now.16:33
dwaltReally excited to see the long-awaited transition :)16:33
mattmceuensame16:33
mattmceuencool, we have a path forward!16:33
mattmceuenanything else to bring up on the aiab front this week?16:34
dwaltone qq, are there areny outstanding changes?16:34
dwaltTo the old AIAB repo16:34
mattmceuenThere is obravo's tungsten fabric patchset, but he said he's working on a transition to treasuremap, so I think if he's ok with it he can abandon the old one16:35
dwaltNoticing some where we may need to inform the authors: https://review.opendev.org/#/q/project:airship/airship-in-a-bottle16:35
openstackgerritDan Crank proposed airship/promenade master: [DO NOT MERGE] combination PS for testing  https://review.opendev.org/66740216:35
mattmceuenyes - we'll need to try to reach out to them to make them aware16:35
obravosure, i`ll abandon it after this meeting16:35
mattmceuengood catch dwalt16:36
mattmceuenthanks obravo16:36
mattmceuenI'll send out a heads-up on the mailing list16:36
mattmceuen#action mattmceuen will send out a heads-up on the mailing list for aiab transition16:36
dwaltSure thing. I have one too that I need to reconcile :)16:36
mattmceuenalright, moving on16:37
mattmceuen#topic Patchset Review Requests16:37
*** openstack changes topic to "Patchset Review Requests (Meeting topic: airship)"16:37
mattmceuen    https://review.opendev.org/#/c/665667/ - Treasuremap Uplift PostgreSQL16:37
mattmceuen    https://review.opendev.org/#/c/664045/ - Check sync of only active MaaS rack controllers16:37
mattmceuen    https://review.opendev.org/664467 - Treasuremap Promenade Uplift16:37
mattmceuenthe middle one was on our list last week as well I believe, let's get some review on it for sure (as well as the uplifts)16:38
mattmceuenany other patches you guys would like to call out?16:38
nishantkrThis one please - https://review.opendev.org/#/q/topic:add-release-annotation+(status:open+OR+status:merged)16:39
nishantkrsmall change :)16:39
dwaltthx nishantkr, I'll look into those16:39
mattmceuengood one - thanks nishantkr16:40
nishantkrThank you16:40
alexanderhughesI've got some work I'll be doing on Shipyard/Pegleg to accept an auth token passed rather than having the user provide their credentials to let the code auth against keystone and generate it's own token https://review.opendev.org/#/c/666402/16:40
alexanderhugheslooking for thoughts on how to implement shipyard side before I dig into pegleg's piece16:40
alexanderhughesand forcing pegleg to use 640 permissions on any file it creates, just to make sure none of the secrets are ever overly permissive and future proofing against anything that doesn't have secrets now as an output but might depending on use case https://review.opendev.org/#/c/666319/16:41
mattmceuenthanks alexanderhughes, good ones.  Can you walk through the use case a bit for using an auth token rather than user credentials?16:43
nishantkrwell i thought this token was generated by keystone and to be used by services for proceeding ahead in the execution flow if token was valid16:43
alexanderhughessure, Darren reached out to me recently and was concerned about people using automation (Jenkins) for pegleg's upload command to shipyard.  currently you provide the --os-auth-<> flags, including a password.  this leads to tracking issues and exposing the password.  he'd rather have the option for a user to get their own token and then provide it w16:44
alexanderhughesithout their credentials16:44
mattmceuenyep, that makes a lot of sense16:44
alexanderhughesI thought if we changed shipyard to look for an environment variable 'OS_AUTH_TOKEN' and use that if present it would solve our issue, then update pegleg's shipyard_helper code to match16:45
alexanderhughesif not present, use existing code requiring the auth variables16:45
mattmceuensounds great, thanks!  always good to understand the "why", appreciate the description16:46
mattmceuen#topic Roundtable16:46
*** openstack changes topic to "Roundtable (Meeting topic: airship)"16:46
mattmceuenAny other topics that you'd like to bring up today team?16:46
openstackgerritJames Gu proposed airship/election master: Adding James Gu candidacy for TC role  https://review.opendev.org/66740916:47
mattmceuenin that case, we will call it a meeting.  thanks everybody!16:49
alexanderhughesthanks!16:49
mattmceuen#endmeeting16:49
*** openstack changes topic to "airshipit.org || General Review Dashboard: https://review.opendev.org/#/q/project:%255Eairship.*+status:open,n,z"16:49
openstackMeeting ended Tue Jun 25 16:49:47 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:49
openstackMinutes:        http://eavesdrop.openstack.org/meetings/airship/2019/airship.2019-06-25-16.00.html16:49
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/airship/2019/airship.2019-06-25-16.00.txt16:49
openstackLog:            http://eavesdrop.openstack.org/meetings/airship/2019/airship.2019-06-25-16.00.log.html16:49
openstackgerritMerged airship/election master: Adding James Gu candidacy for TC role  https://review.opendev.org/66740916:51
openstackgerritMerged airship/election master: Adding Jan-Erik Mangs candidacy for TC role  https://review.opendev.org/66737616:52
*** sthussey has quit IRC16:52
openstackgerritMerged airship/election master: Adding Jaesuk Ahn candidacy for TC role  https://review.opendev.org/66737216:52
openstackgerritIan Pittwood proposed airship/spyglass master: Use data objects for document generation  https://review.opendev.org/66109216:52
*** DougSchv has joined #airshipit16:55
*** DougSchv has quit IRC16:59
*** DougSchv has joined #airshipit17:01
*** DougSchv has quit IRC17:05
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664517:22
*** lemko has quit IRC17:34
*** obravo has quit IRC17:37
*** DougSchv has joined #airshipit17:40
*** DougSchv has quit IRC17:44
openstackgerritSamuel Pilla proposed airship/specs master: (armada) Chart Time Metrics  https://review.opendev.org/65209218:36
openstackgerritScott Hussey proposed airship/promenade master: Allow etcd anchor to recover from bad state  https://review.opendev.org/66737818:46
*** ianychoi_ has quit IRC18:49
openstackgerritMerged airship/treasuremap master: Enable Metrics Collection for UCP RabbitMQ Cluster  https://review.opendev.org/66560918:50
*** ianychoi_ has joined #airshipit18:50
*** bh526r has quit IRC18:55
*** DougSchv has joined #airshipit18:56
openstackgerritAlexander Hughes proposed airship/election master: Adding Alexander Hughes candidacy for TC role  https://review.opendev.org/66744318:57
*** DougSchv has quit IRC19:01
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664519:13
openstackgerritEvgeniy L proposed airship/treasuremap master: Add Multinode dev/testing guide  https://review.opendev.org/65551719:13
*** jsun3 has quit IRC19:25
*** mbologna has quit IRC19:32
*** DougSchv has joined #airshipit19:32
*** mbologna has joined #airshipit19:33
*** DougSchv has quit IRC19:36
openstackgerritDan Crank proposed airship/promenade master: [DO NOT MERGE] combination PS for testing  https://review.opendev.org/66740219:41
openstackgerritDan Crank proposed airship/promenade master: [DO NOT MERGE] combination PS for testing  https://review.opendev.org/66740219:51
openstackgerritMerged airship/election master: Adding Alexander Hughes candidacy for TC role  https://review.opendev.org/66744319:52
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664519:55
*** amalrajgenocidex has quit IRC19:57
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664520:21
openstackgerritMatthew Carter proposed airship/divingbell master: Update uamlite.sh to handle empty user_sshkeys arrays  https://review.opendev.org/66745820:24
*** DougSchv has joined #airshipit20:31
*** jamesgu has quit IRC20:34
openstackgerritIan Howell proposed airship/airshipctl master: Remove unused constant  https://review.opendev.org/66746020:35
openstackgerritIan Howell proposed airship/airshipctl master: Remove dependency on k8s-code-generator  https://review.opendev.org/66746120:36
*** DougSchv has quit IRC20:36
*** MattCoachCarter has quit IRC20:53
*** ianychoi_ has quit IRC20:59
*** ianychoi_ has joined #airshipit21:00
openstackgerritPRATEEK REDDY DODDA proposed airship/promenade master: Inculde a post-run to the airship-promenade-genesis-gate  https://review.opendev.org/66664521:05
*** ianychoi_ has quit IRC21:05
*** ianychoi_ has joined #airshipit21:09
*** DougSchv has joined #airshipit21:10
*** DougSchv has quit IRC21:14
*** openstackgerrit has quit IRC21:18
*** ianychoi_ is now known as ianychoi21:18
*** DougSchv has joined #airshipit21:24
*** DougSchv has quit IRC21:29
*** openstackgerrit has joined #airshipit21:32
openstackgerritIan Howell proposed airship/airshipctl master: Rename module to reflect its new location  https://review.opendev.org/66746921:32
openstackgerritIan Howell proposed airship/airshipctl master: Remove travis CI config file  https://review.opendev.org/66747021:33
*** howell has quit IRC21:33
openstackgerritEvgeniy L proposed airship/treasuremap master: Add new seaworthy-virt site  https://review.opendev.org/65601521:35
*** DougSchv has joined #airshipit21:37
*** DougSchv has quit IRC21:42
*** georgk has quit IRC21:48
*** georgk has joined #airshipit21:49
*** pkaralis has quit IRC21:50
*** alexanderhughes has quit IRC21:51
*** ian-pittwood has quit IRC21:53
*** ab2434_ has quit IRC22:04
*** alexanderhughes has joined #airshipit22:06
*** alexanderhughes has quit IRC22:07
*** alexanderhughes has joined #airshipit22:11
*** obravo_ has joined #airshipit22:18
*** obravo_ is now known as obravo22:19
*** alexanderhughes has quit IRC22:20
*** obravo has quit IRC22:31
*** DougSchv has joined #airshipit22:34
*** DougSchv has quit IRC22:39
*** AlexBailey has quit IRC23:02
*** aaronsheffield has quit IRC23:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!