*** openstack has joined #heat | 00:49 | |
*** SpamapS has quit IRC | 00:49 | |
*** SpamapS has joined #heat | 00:50 | |
*** LiangC has joined #heat | 00:52 | |
*** spzala has quit IRC | 00:57 | |
*** liang has quit IRC | 00:57 | |
*** asalkeld has quit IRC | 00:57 | |
*** asalkeld has joined #heat | 00:57 | |
*** yogesh has joined #heat | 01:01 | |
*** IlyaE has joined #heat | 01:03 | |
*** yogesh has quit IRC | 01:06 | |
*** IlyaE has quit IRC | 01:16 | |
openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Remove X-Auth-Url header from authtoken middleware https://review.openstack.org/60991 | 01:18 |
---|---|---|
*** nosnos has joined #heat | 01:28 | |
*** arbylee has quit IRC | 01:29 | |
*** arbylee has joined #heat | 01:30 | |
*** andersonvom has quit IRC | 01:30 | |
*** clarkb has joined #heat | 01:30 | |
clarkb | just driving by to mention 'openstack' joined this channel ~45 minutes ago. It is the bot that does logging to eavesdrop. tl;dr you are now logged tehre | 01:30 |
*** Tross has joined #heat | 01:33 | |
*** Tross has left #heat | 01:33 | |
*** fandikurnia01 has joined #heat | 01:34 | |
*** arbylee has quit IRC | 01:34 | |
*** nanjj has joined #heat | 01:40 | |
*** ccs has quit IRC | 01:41 | |
*** ccs has joined #heat | 01:44 | |
*** rongze has joined #heat | 01:51 | |
*** rongze has quit IRC | 01:51 | |
*** rongze has joined #heat | 01:52 | |
*** rongze is now known as 36DABWUXY | 01:53 | |
*** rongze has joined #heat | 01:53 | |
*** sjmc has quit IRC | 01:53 | |
*** rongze is now known as 45PAAS1G1 | 01:53 | |
*** 45PAAS1G1 has quit IRC | 01:57 | |
*** ccs has quit IRC | 01:58 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Remove oslo uuidutils.generate_uuid from heat code https://review.openstack.org/60665 | 02:01 |
*** 36DABWUXY has quit IRC | 02:04 | |
openstackgerrit | Ryo Miki proposed a change to openstack/heat: Add OS::Neutron::NetDHCPAgent for neutron/net.py https://review.openstack.org/59626 | 02:04 |
*** rongze has joined #heat | 02:04 | |
*** radix__ has quit IRC | 02:10 | |
*** rwsu has quit IRC | 02:12 | |
*** asalkeld is now known as angus_is_eating | 02:14 | |
*** al-maisan has quit IRC | 02:16 | |
*** al-maisan has joined #heat | 02:17 | |
*** adrian_otto has quit IRC | 02:24 | |
*** adrian_otto has joined #heat | 02:25 | |
*** adrian_otto has quit IRC | 02:25 | |
*** rwsu has joined #heat | 02:26 | |
*** rongze_ has joined #heat | 02:35 | |
*** rongze has quit IRC | 02:35 | |
*** erkules has joined #heat | 02:36 | |
*** erkules has quit IRC | 02:42 | |
*** vkozhukalov has joined #heat | 02:49 | |
*** ccs has joined #heat | 02:50 | |
*** spzala_ has quit IRC | 02:50 | |
*** erkules has joined #heat | 02:55 | |
*** bgorski has quit IRC | 02:59 | |
*** adrian_otto has joined #heat | 03:10 | |
*** angus_is_eating is now known as asalkeld | 03:14 | |
*** slong- has joined #heat | 03:26 | |
*** slong has quit IRC | 03:27 | |
*** rushiagr has joined #heat | 03:31 | |
*** chandankumar__ has quit IRC | 03:43 | |
*** ccs has quit IRC | 03:48 | |
*** ccs has joined #heat | 03:48 | |
*** chandankumar has joined #heat | 03:52 | |
*** rushiagr has quit IRC | 04:13 | |
*** arbylee has joined #heat | 04:13 | |
*** andersonvom has joined #heat | 04:14 | |
*** slong has joined #heat | 04:16 | |
*** slong- has quit IRC | 04:16 | |
*** ccs has quit IRC | 04:22 | |
*** rcleere has joined #heat | 04:25 | |
*** SergeyLukjanov has joined #heat | 04:38 | |
*** nati_ueno has quit IRC | 04:42 | |
*** andersonvom has quit IRC | 04:42 | |
*** arbylee1 has joined #heat | 04:50 | |
*** arbylee has quit IRC | 04:50 | |
*** rushiagr has joined #heat | 04:53 | |
*** arbylee has joined #heat | 04:56 | |
*** arbylee1 has quit IRC | 04:56 | |
*** yogesh has joined #heat | 05:01 | |
openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Remove unused dumps validation in JsonParam value https://review.openstack.org/60770 | 05:03 |
*** yogesh has quit IRC | 05:06 | |
openstackgerrit | Ryo Miki proposed a change to openstack/heat: Add OS::Neutron::NetDHCPAgent for neutron/net.py https://review.openstack.org/59626 | 05:10 |
*** rcleere has quit IRC | 05:12 | |
*** swygue has joined #heat | 05:22 | |
*** kfox1111 has joined #heat | 05:32 | |
*** gokrokve has quit IRC | 05:34 | |
*** rongze_ has quit IRC | 05:34 | |
*** akuznetsov has quit IRC | 05:41 | |
*** rongze has joined #heat | 05:44 | |
*** ccs has joined #heat | 05:47 | |
*** rongze has quit IRC | 05:50 | |
*** faramir1 has quit IRC | 05:51 | |
*** rongze has joined #heat | 05:59 | |
*** akuznetsov has joined #heat | 06:04 | |
openstackgerrit | Jenkins proposed a change to openstack/heat: Imported Translations from Transifex https://review.openstack.org/60648 | 06:06 |
*** SergeyLukjanov is now known as _SergeyLukjanov | 06:10 | |
*** _SergeyLukjanov has quit IRC | 06:10 | |
*** nkhare has joined #heat | 06:11 | |
*** vkozhukalov has quit IRC | 06:12 | |
*** ccs has quit IRC | 06:15 | |
*** rushiagr has quit IRC | 06:15 | |
*** cody-somerville has quit IRC | 06:21 | |
*** rushiagr has joined #heat | 06:24 | |
*** rongze has quit IRC | 06:35 | |
*** tomek_adamczewsk has joined #heat | 06:35 | |
*** faramir has joined #heat | 06:36 | |
skraynev | morning heaters) | 06:37 |
*** rongze has joined #heat | 06:38 | |
*** sergmelikyan has joined #heat | 06:46 | |
*** yogesh has joined #heat | 06:54 | |
openstackgerrit | A change was merged to openstack/heat: Add attributes schema to OS::Neutron::FloatingIP https://review.openstack.org/59710 | 06:58 |
*** amritanshu_RnD has joined #heat | 06:59 | |
*** arbylee has quit IRC | 07:02 | |
*** gokrokve has joined #heat | 07:05 | |
*** gokrokve has quit IRC | 07:10 | |
*** tomek_adamczewsk has quit IRC | 07:16 | |
*** aignatov has joined #heat | 07:20 | |
*** yogesh has quit IRC | 07:21 | |
*** yogesh has joined #heat | 07:21 | |
*** IlyaE has joined #heat | 07:21 | |
*** yogesh has quit IRC | 07:25 | |
*** urulama has joined #heat | 07:27 | |
*** akuznetsov has quit IRC | 07:31 | |
*** ccs has joined #heat | 07:32 | |
*** SushilKM has joined #heat | 07:37 | |
*** yogesh has joined #heat | 07:38 | |
*** fandikurnia01 has quit IRC | 07:43 | |
*** fandikurnia01 has joined #heat | 07:44 | |
*** yogesh_ has joined #heat | 07:44 | |
*** fandikurnia01 has quit IRC | 07:45 | |
*** yogesh_ has quit IRC | 07:45 | |
*** fandikurnia01 has joined #heat | 07:45 | |
*** fandikurnia01 has quit IRC | 07:46 | |
*** yogesh has quit IRC | 07:47 | |
*** adrian_otto has quit IRC | 07:47 | |
*** fandikurnia01 has joined #heat | 07:47 | |
*** yogesh_ has joined #heat | 07:48 | |
*** TonyBurn__ has joined #heat | 07:49 | |
*** adrian_otto has joined #heat | 07:50 | |
*** vkozhukalov has joined #heat | 07:52 | |
*** fandikurnia01 has quit IRC | 07:52 | |
*** SergeyLukjanov has joined #heat | 07:53 | |
*** adrian_otto has quit IRC | 07:53 | |
*** SushilKM has quit IRC | 07:53 | |
*** nati_ueno has joined #heat | 07:56 | |
*** Tross has joined #heat | 07:58 | |
*** rongze has quit IRC | 07:59 | |
*** rongze has joined #heat | 08:05 | |
*** gokrokve has joined #heat | 08:05 | |
sergmelikyan | I am trying to resolve bug #1259078, it's appears as low hanging fruit. Do we need to extract LBaaS VIP as separate resource? Or keep as it is? | 08:05 |
uvirtbot | Launchpad bug 1259078 in heat "[OS::Neutron::Pool] session_persistence should be added in vip" [Undecided,Confirmed] https://launchpad.net/bugs/1259078 | 08:05 |
kfox1111 | The bug just mentions an additional property. I think you should be able to just add to the existing stuff. | 08:08 |
kfox1111 | hmmm.. yeah. around heat/engine/resources/neutron/loadbalancer.py line 391 | 08:10 |
skraynev | sergmelikyan: hm. I think, you should look bug #1258490 | 08:11 |
uvirtbot | Launchpad bug 1258490 in heat "Moving vip in separate resource or making it more clear." [Undecided,New] https://launchpad.net/bugs/1258490 | 08:11 |
*** gokrokve has quit IRC | 08:11 | |
skraynev | I think, that is duplicate. | 08:12 |
*** jprovazn has joined #heat | 08:13 | |
sergmelikyan | kfox1111, it is oblivious, but after looking at sources, I had a thoughts about moving VIP to separate resource. Did'nt know that there is already bug about this. | 08:13 |
openstackgerrit | Liang Chen proposed a change to openstack/heat: Add marconi client https://review.openstack.org/61035 | 08:14 |
openstackgerrit | Liang Chen proposed a change to openstack/heat: Marconi message queue resource implementation https://review.openstack.org/61036 | 08:14 |
sergmelikyan | skraynev, 1259078 is about adding additional field, 1258490 about extracting to separate resource. What duplicates are you talking about | 08:15 |
sergmelikyan | ? | 08:15 |
kfox1111 | At the moment, I think neutron can't have more then one. If true, then it doesn't make too much sense to refactor it yet. | 08:15 |
kfox1111 | Getting the PoolMember stuff sorted out is much more important IMHO. | 08:15 |
therve | SergeyLukjanov, FWIW, the reasons I didn't make it separate is 1) You can't have a functional pool without a vip and 2) At the time there was a 1-1 relationship | 08:16 |
kfox1111 | sergmelikyan: I think you are right. they are separate. | 08:16 |
kfox1111 | therve: that makes sense. | 08:17 |
skraynev | sergmelikyan: Yes. Main problem is getting additional field. But one of solution is - moving vip to separate resource | 08:17 |
skraynev | and it was written in the bug description. | 08:17 |
sergmelikyan | therve +1, only one downside - different representation in CLI/UI and in Heat | 08:18 |
kfox1111 | yeah. same with the loadbalancer resource. It doesn't quite map to poolmembers. | 08:19 |
therve | sergmelikyan, You mean because those entities are represented separately? | 08:19 |
therve | kfox1111, LoadBalancer was an explicit backward compatible resource for AutoScaling | 08:19 |
skraynev | sergmelikyan: doh. my apologize. | 08:20 |
sergmelikyan | Yes, in CLI you create VIP explicitly. But it is minor thing anyway. Ability to create fully functional LoadBalancer is much more important | 08:20 |
kfox1111 | therve: I'm refering to https://blueprints.launchpad.net/heat/+spec/loadbalancer-pool-members | 08:20 |
kfox1111 | talking about Neutron::LoadBalancer, not the AWS one. | 08:21 |
skraynev | sergmelikyan: yep, I did not carefully read you bug description. | 08:21 |
therve | kfox1111, I'm talking about Neutron::LoadBalancer as well :) | 08:22 |
sgran | neutron is changing to have a loadbalancer object, and a map to one or many vips | 08:23 |
sergmelikyan | kfox1111, I believe you are talking about 60520 change. Do you have additional comments or different vision? | 08:23 |
sgran | so making a separate vip resource may make sense now | 08:23 |
*** akuznetsov has joined #heat | 08:24 | |
skraynev | therve: your message addressed to SergeyLukjanov - really for him. It is so confused when 3 different Sergey in one chat :) | 08:24 |
* SergeyLukjanov reading logs | 08:24 | |
therve | Oops sorry | 08:24 |
skraynev | therve: I may guess that it was for me. Is it right? | 08:25 |
openstackgerrit | Thomas Herve proposed a change to openstack/heat: Document Port properties https://review.openstack.org/60476 | 08:26 |
therve | skraynev, No to sergmelikyan | 08:26 |
shardy | morning | 08:26 |
therve | Tab completion failed me | 08:26 |
therve | Hi shardy | 08:26 |
* sergmelikyan already replied :) | 08:26 | |
skraynev | morning shardy) | 08:26 |
skraynev | therve: ok))) | 08:27 |
therve | I'm just reading your review comments | 08:27 |
sergmelikyan | sgran, there is work in progress about VIPs or something assigned on this release? If this is true we may update bug/bp and make as dependent to that bug/bp and implement right after work in Neutron is done. | 08:28 |
therve | sergmelikyan, So I don't follow your comments about LoadBalancer | 08:29 |
therve | Sure there are 2 ways to create members, but I don't see that as a problem | 08:29 |
therve | They don't fill the same needs | 08:29 |
skraynev | I agree with sergmelikyan. making separate vip is needed now) | 08:30 |
sergmelikyan | therve, sorry. It is confusing, without looking in sources first thing I would do is create PoolMember and assign to the members property. Or leave only pool_id assigned in the PoolMember. | 08:30 |
sergmelikyan | *looking in sources. First ... | 08:31 |
therve | sergmelikyan, Well, you don't have to look at the sources, there is documentation | 08:31 |
therve | And it says "list of nova server ids" | 08:31 |
therve | As I said, OS::Neutron::LoadBalancer is here for AutoScaling, you can't change it for now (and I don't see the point) | 08:32 |
therve | skraynev, sergmelikyan: Somewhat relatedly, please don't discuss those things in a review. gerrit is really not optimized for this IMHO. | 08:33 |
sergmelikyan | therve, sorry about discussion in the review. | 08:33 |
skraynev | therve: ok. I promise ;) | 08:34 |
therve | Anyway, after seeing your conversation, what's the suggestion now? | 08:34 |
skraynev | therve: create bp on new resource vip | 08:35 |
skraynev | I think it make sense | 08:35 |
skraynev | for feature changes in neutron | 08:35 |
therve | Okay | 08:35 |
therve | Well it didn't happen yet, did it? | 08:35 |
skraynev | yes. you are right. | 08:36 |
skraynev | so I ask guys from netron team | 08:36 |
therve | Presumably we should wait, there is not much point to have such a resource until you can have several VIPs for a Pool | 08:37 |
therve | Then you can create the new resource, and add a vips property to the Pool | 08:37 |
skraynev | ok, may I create this bp and target on feature. | 08:39 |
sergmelikyan | therve, returning to the PoolMember discussion - why do we need to keep both? AutoScaling relies on 'members' field? | 08:40 |
therve | sergmelikyan, Yes. It needs a resource with a Property being a list of nova server IDs | 08:41 |
kfox1111 | But if you want more then one stack to be able to add members to a pool, it doesn't work so well as is. | 08:41 |
kfox1111 | Usually the native openstack resources map pretty closely to the openstack resource's native api's. | 08:42 |
kfox1111 | PoolMember's are how they do things in Neutron Lbaas. | 08:42 |
therve | kfox1111, What doesn't work exactly? | 08:42 |
sergmelikyan | kfox1111, you are talking about connection between PoolMember and Pool? | 08:43 |
therve | We try to map the APIs when it makes sense. Sometimes it doesn't. | 08:43 |
kfox1111 | therve: https://github.com/EMSL-MSC/heat-templates/commit/f0594410f558bb753c41336d754331fec8cddf31 | 08:43 |
kfox1111 | A load balancer pool member works kind of like a neutron port. | 08:44 |
kfox1111 | an object that glues an instance to a network. | 08:44 |
kfox1111 | a pool member glues an instance to a lbaas pool. | 08:44 |
*** radix_ has joined #heat | 08:44 | |
kfox1111 | actually, more correctly, it maps an ip adress. | 08:44 |
therve | Yeah I'm aware of that | 08:45 |
therve | kfox1111, So your problem will be fixed with the new PoolMember resource? | 08:45 |
kfox1111 | The elasticsearch templates I have, have a scalable node that you spawn as many as you want. If I could pass the pool id to the node stack, it could autoadd the instance to the pool as needed. | 08:46 |
kfox1111 | therve: yeah. | 08:47 |
therve | Well great then? | 08:47 |
kfox1111 | I had to get the horizon folks to fix horizon too. I was only able to make lbaas work with the cli. | 08:47 |
kfox1111 | That is, if the poolMember resource is allowed to merge. | 08:47 |
*** rgodinez has quit IRC | 08:47 | |
sgran | sergmelikyan: https://blueprints.launchpad.net/neutron/+spec/lbaas-multiple-vips-per-pool | 08:48 |
therve | There is no reason why it wouldn't | 08:48 |
kfox1111 | ok. cool. thanks. :) | 08:49 |
skraynev | therve, kfox1111: As i understand poolMember resource (witch on review) is ok? | 08:50 |
therve | skraynev, Well, you tell me :) | 08:51 |
skraynev | sgran: Really it will be implemented new of G - release or after them. | 08:51 |
skraynev | therve: For me - LGTM))) | 08:51 |
*** giulivo has joined #heat | 08:51 | |
* sergmelikyan still slightly concerned about 'members' field :( | 08:53 | |
sgran | sergmelikyan: what about it? | 08:54 |
skraynev | therve, sgran, sergmelikyan: what is solution about this bugs: bug #1258490 , bug #1258490 | 08:54 |
uvirtbot | Launchpad bug 1258490 in heat "Moving vip in separate resource or making it more clear." [Undecided,New] https://launchpad.net/bugs/1258490 | 08:54 |
skraynev | ooops ;) bug #1259078 | 08:55 |
uvirtbot | Launchpad bug 1259078 in heat "[OS::Neutron::Pool] session_persistence should be added in vip" [Undecided,Confirmed] https://launchpad.net/bugs/1259078 | 08:55 |
sergmelikyan | May be refactoring AutoScaling to use PoolMember is a good idea? If it is can be done, of cause. Refactoring some functionality and leaving behind old code looks strange to me. | 08:55 |
therve | Let's see | 08:56 |
kfox1111 | As I understand the api discussion, there would be an autoscaling loadbalancer you could register a nested stack with, that would create the stack as needed. | 08:57 |
kfox1111 | The nested stack could create a PoolMember for itself and add its relavent bits to the pool. | 08:57 |
kfox1111 | That would allow a clean undo too. | 08:57 |
*** sdake_ has quit IRC | 08:58 | |
*** pshchelo has joined #heat | 08:58 | |
*** ccs has quit IRC | 08:59 | |
sgran | yes, there is going to be a new object, called LoadBalancer, that all the other things attach to, as I understand it | 08:59 |
skraynev | sgran: do you mean new resource in neutron? | 09:00 |
sgran | yes | 09:00 |
*** fandikurnia01 has joined #heat | 09:00 | |
skraynev | sgran: so. yes. it's sounds like Loadbalncer instance | 09:00 |
sgran | https://review.openstack.org/#/c/60207/ | 09:00 |
sgran | yes | 09:00 |
sergmelikyan | guys, sorry if may questions looks strange or offending. I don't try to offend anyone, I am just new to the Heat and LBaaS, trying simply help. | 09:01 |
sgran | no offense on my side, at least | 09:01 |
sergmelikyan | You obliviously have much more insight. | 09:01 |
sergmelikyan | You obliviously have much more insight. | 09:01 |
therve | skraynev, The first bug isn't too bad to me. Why do you need the port-id to begin with? | 09:01 |
sgran | you want to give the vip a floating ip, is that right? | 09:01 |
skraynev | sgran: yes | 09:01 |
kfox1111 | so, neutron's addign a loadbalancer object, which will also function differently then the current heat neutron::LoadBalancer resource? :/ | 09:02 |
therve | skraynev, If it was me I'd wait for the multiple vip work to be done in Neutron first before introducing a new VIP resource | 09:02 |
sgran | the loadbalancer resource will largely be a collection of relations to other resources | 09:03 |
therve | skraynev, Regarding the second bug, you can simply add the property | 09:03 |
*** arbylee has joined #heat | 09:03 | |
skraynev | therve: ok. I agree about second bug | 09:03 |
skraynev | therve: about first: now I should you 'awful hack'? | 09:04 |
skraynev | therve: I mean example in bug | 09:04 |
*** gokrokve has joined #heat | 09:05 | |
* sergmelikyan going to add property | 09:06 | |
skraynev | therve: if you say - yes, I will not afraid | 09:06 |
skraynev | therve: only will create bp with this aim) | 09:07 |
*** arbylee has quit IRC | 09:08 | |
skraynev | sgran: should current LB will be changed after changes in neutron? | 09:09 |
*** derekh has joined #heat | 09:09 | |
*** gokrokve has quit IRC | 09:09 | |
*** rongze has quit IRC | 09:11 | |
*** rgodinez has joined #heat | 09:12 | |
*** rongze has joined #heat | 09:15 | |
sgran | skraynev: I would think so, yes | 09:15 |
sgran | or a new thing added, or something | 09:15 |
skraynev | sgran: time will show ?) | 09:16 |
sgran | yes, I think so :) | 09:17 |
sgran | it's still early yet | 09:17 |
skraynev | even closer than we think))) | 09:19 |
therve | skraynev, It's not super awful, it's just attributes manipulation | 09:24 |
skraynev | therve: yes, it's) I exaggerated a little. But I worried about, that this attributes you can't see in code. | 09:26 |
therve | Yeah that's a bit unfortunate | 09:27 |
skraynev | therve: when I tried to do it - I have only guess, that it will be work | 09:28 |
*** tomek_adamczewsk has joined #heat | 09:28 | |
skraynev | therve: May we some way for creating attribute schema for vip in Pool resource | 09:29 |
skraynev | ? | 09:29 |
*** IlyaE has quit IRC | 09:29 | |
skraynev | *Does we have some way for creating attribute schema for vip in Pool resource? | 09:29 |
therve | I was thinking about that | 09:29 |
therve | skraynev, We could add a port-id attribute to the Pool | 09:30 |
therve | Which would map to the VIP port-id | 09:30 |
therve | It could be bad when we have several VIPs, though | 09:30 |
sgran | ick | 09:30 |
sgran | indeed | 09:30 |
skraynev | May I try to do it? | 09:30 |
sgran | pool should have a relation to loadbalancer which has a relation to N vips, which have port ids | 09:30 |
sgran | (IMO) | 09:30 |
sgran | in the current setup it would be pool -> vip -> port-id | 09:31 |
sgran | but pool shouldn't have a port-id directly | 09:31 |
therve | sgran, a pool is a loadbalancer | 09:31 |
therve | In neutron terminology | 09:32 |
skraynev | therve: yep, it's main object now. | 09:32 |
skraynev | I mean pool | 09:32 |
sgran | "A VIP is the primary load balancing configuration object" | 09:33 |
sgran | https://wiki.openstack.org/wiki/Neutron/LBaaS/API | 09:33 |
therve | We have a subnet_id attribute on the pool already | 09:33 |
*** obondarev has joined #heat | 09:33 | |
*** SergeyLukjanov is now known as _SergeyLukjanov | 09:34 | |
therve | sgran, This is out of date AFAICT | 09:34 |
*** _SergeyLukjanov has quit IRC | 09:34 | |
openstackgerrit | A change was merged to openstack/heat: Remove oslo uuidutils.generate_uuid from heat code https://review.openstack.org/60665 | 09:35 |
openstackgerrit | A change was merged to openstack/heat: Replace try...except block with assertRaises https://review.openstack.org/60789 | 09:35 |
therve | Although http://docs.openstack.org/api/openstack-network/2.0/content/lbaas_ext.html states the same thing | 09:35 |
sgran | yes | 09:37 |
sgran | you create a pool first because you need a pool id when creating a vip | 09:37 |
sgran | but the vip is the central thing that holds all the relations | 09:37 |
skraynev | So vip should has own port_id in schema? | 09:38 |
therve | Not really? Members are not attached to the VIP | 09:38 |
therve | skraynev, You can't have a nested schema in attributes, unfortunately | 09:39 |
sgran | but members are attached to a pool which is attached to a vip? | 09:40 |
skraynev | skraynev: doh. I thought as much( | 09:40 |
therve | Anyway, I feel we're going circles, I'll try to restate my thoughts | 09:40 |
therve | 1) I did the current design for several reasons, some probably wrong ,some probablyu right | 09:40 |
sgran | vip does have a port-id in the api | 09:40 |
therve | 2) We need to maintain compatiblity | 09:40 |
therve | 3) I feel changing the current resources without waiting for neutron supporting several VIPs is unnecessary | 09:41 |
sgran | I agree with 3 | 09:41 |
sgran | when neutron changes, 2) is not relevant (IMHO) | 09:41 |
skraynev | I agree too) | 09:41 |
sgran | and 1) - everything is different in hindsight :) | 09:41 |
therve | With the new PoolMember resource, we should support most (all?) use cases, possibly a bit awkwardly | 09:41 |
skraynev | I would have some step-by-step plan: how will we change existed resource? | 09:45 |
therve | skraynev, We should add session-persistence to vip_schema | 09:45 |
skraynev | therve: LOL))) | 09:45 |
therve | I would do just that for now, if that's what you need | 09:45 |
*** SergeyLukjanov has joined #heat | 09:45 | |
skraynev | quote message from log: "* sergmelikyan going to add property" | 09:46 |
therve | Okay cool | 09:47 |
skraynev | therve: It is 1 step, what will be next? | 09:47 |
therve | skraynev, Wait for the multiple vips work to land | 09:48 |
therve | I added a comment on 1258490 too | 09:49 |
*** dmakogon_ is now known as denis_makogon | 09:50 | |
skraynev | therve: thanks for the comment) | 09:50 |
skraynev | therve: Let's wait multiple vips) | 09:50 |
*** che-arne has joined #heat | 09:52 | |
*** rgodinez has quit IRC | 09:59 | |
*** rushiagr has quit IRC | 09:59 | |
*** chandankumar has quit IRC | 10:00 | |
*** faramir has quit IRC | 10:01 | |
therve | shardy, So, uh, X509? | 10:03 |
therve | I feel like I've been lied to :) | 10:03 |
*** gokrokve has joined #heat | 10:05 | |
*** chandankumar has joined #heat | 10:08 | |
*** gokrokve has quit IRC | 10:10 | |
Alienyyg_ | Hi guys: i wanna to know something about the resource "AWS::CloudWatch::Alarm", how can it monitor the status of vm? via the rest API or something else ? | 10:11 |
Alienyyg_ | is there some document discuss this ?? | 10:12 |
*** rgodinez has joined #heat | 10:13 | |
sergmelikyan | Alienyyg_, AFAIK it is using CFNTools | 10:18 |
sergmelikyan | therve, in comments to bug # 1259078 you asked about bug to documentation. Did you mean Heat documentation or Neutron CLI? | 10:21 |
therve | sergmelikyan, Neutron CLI | 10:21 |
Alienyyg_ | <sergmelikyan> that means ,the cfntool monitor the status of each vm ,and then deliver the status information to AWS::CloudWatch::Alarm? | 10:21 |
therve | Alienyyg_, in Havana, "AWS::CloudWatch::Alarm" uses ceilometer to monitor VMs | 10:23 |
sergmelikyan | therve, Thank you, most interesting is that session_persistence actually does not defined explicitly in python-neutronclient: https://github.com/openstack/python-neutronclient/blob/master/neutronclient/neutron/v2_0/lb/vip.py | 10:25 |
Alienyyg_ | <therve> and how does OS::Ceilometer::Alarm work ? | 10:25 |
therve | Alienyyg_, It creates an alarm object using the ceilometer API. Ceilometer is responsible for gathering the information | 10:26 |
therve | sergmelikyan, Yeah, if you add it there it will be automatically documented I believe | 10:26 |
*** nanjj has quit IRC | 10:28 | |
Alienyyg_ | <therve>so the cfn-tool is not required in havana ? I mean I can monitor any vm without doing anthing to it ? | 10:31 |
therve | Alienyyg_, It's my understand that you don't need to cfn-tools for alarming, yes | 10:33 |
*** nkhare has quit IRC | 10:35 | |
Alienyyg_ | therve: how can I get the information it monitor?in /var/log/ceilometer/collector.log? | 10:36 |
therve | Alienyyg_, ceilometer meter-list, I'd say | 10:38 |
openstackgerrit | Andrey Kurilin proposed a change to openstack/python-heatclient: Replace inheritance hierarchy with composition https://review.openstack.org/61069 | 10:44 |
*** aignatov has quit IRC | 10:44 | |
openstackgerrit | Andrey Kurilin proposed a change to openstack/python-heatclient: Replace inheritance hierarchy with composition https://review.openstack.org/61069 | 10:51 |
*** rongze has quit IRC | 10:52 | |
*** rongze has joined #heat | 10:52 | |
openstackgerrit | Serg Melikyan proposed a change to openstack/heat: Added session_persistence property to VIP https://review.openstack.org/61074 | 10:54 |
*** bvandenh has joined #heat | 10:55 | |
*** rongze has quit IRC | 10:55 | |
*** sergmelikyan has quit IRC | 10:58 | |
*** sergmelikyan has joined #heat | 11:00 | |
*** arbylee has joined #heat | 11:03 | |
*** yogesh_ has quit IRC | 11:03 | |
*** yogesh has joined #heat | 11:04 | |
*** gokrokve has joined #heat | 11:05 | |
*** arbylee has quit IRC | 11:07 | |
*** yogesh has quit IRC | 11:08 | |
*** gokrokve has quit IRC | 11:09 | |
openstackgerrit | A change was merged to openstack/heat: Imported Translations from Transifex https://review.openstack.org/60648 | 11:10 |
*** aignatov has joined #heat | 11:12 | |
*** rushiagr has joined #heat | 11:21 | |
openstackgerrit | Denis M. proposed a change to openstack/heat: Trove Resource Update https://review.openstack.org/60532 | 11:31 |
openstackgerrit | Serg Melikyan proposed a change to openstack/heat: Added session_persistence property to VIP https://review.openstack.org/61074 | 11:40 |
*** rongze has joined #heat | 11:41 | |
*** SushilKM has joined #heat | 11:47 | |
*** rongze has quit IRC | 11:51 | |
Alienyyg_ | <therve> OK , thanks, there are three kinda of things in ceilometer: alarm,meter,resource where resource is the object we want to monitor,the meter is the result of monitor,adn alarm is the action after we get the meter-data,right? | 11:53 |
*** SushilKM has quit IRC | 11:54 | |
Alienyyg_ | but I got many reosuces after ceilometer resource-show, and nearly 50 resource begine with instance, but I only have 1 instance in my openstack , so what are them? | 11:56 |
*** rongze has joined #heat | 11:56 | |
*** rgodinez has quit IRC | 11:57 | |
*** tomek_adamczewsk has quit IRC | 12:02 | |
*** gokrokve has joined #heat | 12:05 | |
*** gokrokve has quit IRC | 12:10 | |
*** rgodinez has joined #heat | 12:12 | |
*** rpothier has joined #heat | 12:13 | |
*** SergeyLukjanov is now known as _SergeyLukjanov | 12:21 | |
*** _SergeyLukjanov has quit IRC | 12:21 | |
*** nosnos has quit IRC | 12:29 | |
*** swygue has quit IRC | 12:32 | |
*** SergeyLukjanov has joined #heat | 12:38 | |
*** rushiagr has quit IRC | 12:42 | |
*** sergmelikyan has quit IRC | 12:52 | |
*** tsufiev has quit IRC | 12:53 | |
*** tsufiev has joined #heat | 12:53 | |
*** SushilKM has joined #heat | 12:57 | |
*** swygue has joined #heat | 12:58 | |
*** rpothier has quit IRC | 13:01 | |
*** arbylee has joined #heat | 13:03 | |
*** SushilKM has quit IRC | 13:04 | |
*** aignatov has quit IRC | 13:04 | |
*** aignatov_ has joined #heat | 13:05 | |
*** SushilKM has joined #heat | 13:05 | |
*** gokrokve has joined #heat | 13:05 | |
*** arbylee has quit IRC | 13:08 | |
*** SushilKM has quit IRC | 13:09 | |
*** gokrokve has quit IRC | 13:10 | |
skraynev | Could anybody from core team review https://blueprints.launchpad.net/heat/+spec/neutron-metering-resources, please. Feedback or approve are welcome) | 13:11 |
openstackgerrit | Andrey Kurilin proposed a change to openstack/python-heatclient: Replace inheritance hierarchy with composition https://review.openstack.org/61069 | 13:12 |
*** alexheneveld has joined #heat | 13:18 | |
*** tomek_adamczewsk has joined #heat | 13:20 | |
*** swygue has quit IRC | 13:21 | |
*** rgodinez has quit IRC | 13:24 | |
*** rongze_ has joined #heat | 13:29 | |
*** fandikurnia01 has quit IRC | 13:30 | |
zaneb | morning y'all | 13:30 |
*** rongze has quit IRC | 13:33 | |
*** swygue has joined #heat | 13:34 | |
*** sgordon has joined #heat | 13:35 | |
*** openstackgerrit has quit IRC | 13:37 | |
*** openstackgerrit has joined #heat | 13:37 | |
*** rgodinez has joined #heat | 13:38 | |
*** dims has quit IRC | 13:39 | |
*** dims has joined #heat | 13:41 | |
*** alexheneveld has quit IRC | 13:43 | |
*** rushiagr has joined #heat | 13:44 | |
*** rpothier has joined #heat | 13:44 | |
*** adrian_otto has joined #heat | 13:45 | |
*** rongze_ has quit IRC | 13:48 | |
*** andersonvom has joined #heat | 13:50 | |
*** andersonvom has quit IRC | 13:57 | |
*** rcleere has joined #heat | 13:58 | |
*** arbylee has joined #heat | 14:00 | |
*** rgodinez has quit IRC | 14:05 | |
*** rgodinez has joined #heat | 14:05 | |
*** Tross has quit IRC | 14:05 | |
*** gokrokve has joined #heat | 14:05 | |
*** Tross has joined #heat | 14:06 | |
*** tomek_adamczewsk has quit IRC | 14:06 | |
*** pleia2 has quit IRC | 14:07 | |
*** SushilKM has joined #heat | 14:07 | |
skraynev | zaneb: hi) | 14:08 |
*** sgordon has quit IRC | 14:08 | |
*** amritanshu_RnD has quit IRC | 14:09 | |
*** pleia2 has joined #heat | 14:09 | |
*** gokrokve has quit IRC | 14:10 | |
openstackgerrit | Denis M. proposed a change to openstack/heat: Trove Resource Update https://review.openstack.org/60532 | 14:10 |
*** tomek_adamczewsk has joined #heat | 14:11 | |
*** jasond` has joined #heat | 14:12 | |
*** alexheneveld has joined #heat | 14:13 | |
*** tomek_adamczewsk has quit IRC | 14:15 | |
*** tomek_adamczewsk has joined #heat | 14:15 | |
zaneb | shardy: I think I would have given the opposite advice to pshchelo's question about patches... | 14:18 |
shardy | zaneb: In what way? | 14:19 |
zaneb | if you make a change to every test file, won't it be practically impossible to get that through the gate without conflicts? | 14:19 |
shardy | zaneb: Why? | 14:19 |
zaneb | I think I would have suggested one patch per file | 14:19 |
shardy | zaneb: He's just talking about sedding a bunch of asserts AFAICT | 14:20 |
*** jasond` has quit IRC | 14:20 | |
zaneb | yeah, but it's never as simple as sedding | 14:20 |
zaneb | (the indenting gets screwed up) | 14:20 |
larsks | Hi all. I'm trying to provision a neutron security group with Heat, and while the security group is created Heat never populates it with rules from my template. Has anyone else seen this behavior? | 14:21 |
zaneb | and a massive change to all the tests is really hard to review, even if the individual changes are all minor | 14:21 |
shardy | zaneb: Ok, well fell free to reply saying I'm totally wrong :D | 14:21 |
zaneb | shardy: well, I don't want to do that because it will be confusing as hell for him ;) | 14:21 |
shardy | zaneb: Well I think we want some compromise between one mega-patch and 100 patches with tiny changes | 14:21 |
shardy | I don't really care that much how it's diced | 14:21 |
therve | (maybe no patch at all) | 14:22 |
shardy | personally I find it much easier to review repetitive changes where they've been mostly mechanically applied, rather than a big refactor | 14:22 |
*** sgordon has joined #heat | 14:22 | |
zaneb | there's a limit to anyone's concentration span though | 14:22 |
*** amritanshu_RnD has joined #heat | 14:23 | |
*** rongze has joined #heat | 14:23 | |
zaneb | btw I am working on changes of similar scope to migrate to the new properties schema format | 14:23 |
zaneb | my plan is one patch per resource type | 14:24 |
skraynev | zaneb: good approach ) | 14:24 |
shardy | zaneb: well my reading of his question was, SpamapS has already decided to split stuff per-assert-type, should he then commit each individual assert conversion per-file, which would result in a giant stream of patches all doing the exact same change | 14:24 |
zaneb | but I am also going to define constants for property names at the same time | 14:24 |
* zaneb looks at the bugs | 14:25 | |
zaneb | it doesn't appear that SpamapS has started working on it, just that he wanted separate bugs | 14:27 |
shardy | zaneb: So we have a bug per assert type, then 170+ patches per bug | 14:28 |
shardy | I would prefer a couple of patches per bug | 14:28 |
shardy | even if they are a bit big, but repetitive | 14:28 |
pshchelo | shardy: well may be not a giant stream, I just not sure a patch affecting 180+ files will be easy to review | 14:29 |
*** jamieh has joined #heat | 14:29 | |
zaneb | I count only 83 test_*.py files | 14:29 |
pshchelo | sorry, my fault | 14:30 |
shardy | pshchelo: I guess the message is, use your judgement and try to submit in a manageable but not crazily fragmented patchset | 14:30 |
pshchelo | so I can split'em like 40/40, will it be manageable for reviewers? | 14:30 |
shardy | zaneb: Yeah, sorry I did test* | 14:30 |
pshchelo | ok, thanks | 14:30 |
*** jasond` has joined #heat | 14:33 | |
zaneb | pshchelo: suggestion: when you're ready, push a branch to your own GitHub account and ask people to take a look before posting reviews | 14:33 |
zaneb | that will give folks an idea of what to expect | 14:34 |
pshchelo | will do | 14:34 |
zaneb | I will do the same | 14:34 |
pshchelo | thanks for th eadvice | 14:34 |
*** rcleere has quit IRC | 14:34 | |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Database changes for multi-engine support https://review.openstack.org/56476 | 14:37 |
openstackgerrit | Jordan Pittier proposed a change to openstack/heat: Make endpoint_type configurable https://review.openstack.org/57717 | 14:38 |
*** rpothier has quit IRC | 14:49 | |
*** LiangC has quit IRC | 14:51 | |
*** alcabrera has joined #heat | 14:55 | |
*** arbylee has joined #heat | 14:56 | |
*** andersonvom has joined #heat | 14:57 | |
*** akuznetsov has quit IRC | 14:58 | |
*** rpothier has joined #heat | 14:58 | |
*** nkhare has joined #heat | 14:59 | |
*** brint has joined #heat | 15:05 | |
*** gokrokve has joined #heat | 15:05 | |
*** sjmc has joined #heat | 15:07 | |
andersonvom | shardy: you around? | 15:08 |
shardy | andersonvom: yup | 15:09 |
andersonvom | shardy: good morning/afternoon! =) | 15:09 |
*** jcru has joined #heat | 15:10 | |
*** gokrokve has quit IRC | 15:10 | |
andersonvom | shardy: do you have a minute to talk about your comment here (https://review.openstack.org/#/c/60991/1/heat/common/context.py)? | 15:10 |
shardy | andersonvom: I do! :) | 15:11 |
andersonvom | shardy: so, it turns out that auth_url is actually used in other places other than heat_keystoneclient | 15:12 |
*** swygue has quit IRC | 15:13 | |
shardy | andersonvom: Ok, whereabouts? | 15:13 |
andersonvom | shardy: engine/clients.py and contrib/heat/engine/clients.py | 15:14 |
andersonvom | shardy: which are, indeed, engine-related | 15:14 |
shardy | andersonvom: Yeah, so I was thinking all that could come from the config file, unless we can think of a strong argument against that? | 15:15 |
andersonvom | shardy: but it felt stange to keep reading the config file in all these places, especially after talking with stevebaker and he mentioned that we're going to support multi-cloud in the future anywat | 15:15 |
shardy | Ok, hmm. Well multi-cloud is a whole other can-o-worms :) | 15:16 |
shardy | but maybe that's an argument for keeping it in the context | 15:16 |
andersonvom | I don't know if that's a strong enough reason, though, but it seemed ok enough to send the patch | 15:18 |
shardy | andersonvom: Yeah, sure, I just wanted to have this conversation, to check the reason wasn't "it was less to type" :D | 15:18 |
andersonvom | shardy: lol! sure! =P | 15:19 |
andersonvom | shardy: though, I must say the fact that heat.conf may be different in the engine / api concerns me in this case... | 15:20 |
shardy | Yeah, it could cause some confusion (and limit flexibility) if you want the engine to hit a different keystone endpoint to the API | 15:21 |
shardy | I guess maybe we use your patch as step-1, and see if that actually turns out to be a real issue | 15:21 |
*** topol has joined #heat | 15:22 | |
andersonvom | it sounds reasonable, cause my next question was going to be: "how often/likely are different keystone endpoints used in this scenario?" | 15:23 |
andersonvom | if not often/likely, then we could go ahead with this patch | 15:23 |
shardy | andersonvom: I was thinking of deployments where you have network separation between API services and "backend" services like the engine | 15:23 |
shardy | andersonvom: Your patch is just retaining the status-quo, which is passing the URL from the API config file, so I guess it's OK to leave it as is | 15:24 |
*** radez_g0n3 is now known as radez | 15:25 | |
andersonvom | shardy: well, that's good enough then! =D | 15:25 |
shardy | but long term I guess we'll have to work out if it is the right solution by speaking to folks deploying in real production environments | 15:25 |
*** gokrokve has joined #heat | 15:26 | |
*** swygue has joined #heat | 15:26 | |
*** gokrokve_ has joined #heat | 15:26 | |
sdake | morning | 15:27 |
*** IlyaE has joined #heat | 15:29 | |
shardy | andersonvom: +2, but looks like you need a rebase | 15:29 |
shardy | sdake: morning | 15:29 |
*** tims has quit IRC | 15:30 | |
*** gokrokve has quit IRC | 15:30 | |
andersonvom | shardy: rebasing right now | 15:31 |
*** jprovazn has quit IRC | 15:34 | |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Database changes for multi-engine support https://review.openstack.org/56476 | 15:34 |
*** akuznetsov has joined #heat | 15:35 | |
*** akuznetsov has quit IRC | 15:37 | |
openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Remove X-Auth-Url header from authtoken middleware https://review.openstack.org/60991 | 15:38 |
*** amritanshu_RnD has quit IRC | 15:38 | |
*** adrian_otto has quit IRC | 15:39 | |
*** rongze_ has joined #heat | 15:39 | |
*** rongze has quit IRC | 15:40 | |
jasond` | should i rebase all multi-engine reviews every time i make a change to the first one? | 15:41 |
jasond` | do any core devs have a preference? | 15:41 |
*** rongze_ has quit IRC | 15:43 | |
shardy | jasond`: If there are dependencies between patches, you'll probably have to | 15:43 |
shardy | jasond`: I just keep the queue of patches on a branch and rebase -i origin the whole queue when resubmitting | 15:43 |
shardy | gerrit is smart enough to detect trivial rebases and re-apply previous review feedback | 15:44 |
jasond` | shardy: ok, i'll do that. thanks | 15:45 |
andersonvom | shardy: aaaaand, rebased! =D | 15:46 |
*** jergerber has joined #heat | 15:48 | |
*** nati_ueno has quit IRC | 15:48 | |
therve | shardy, I created https://blueprints.launchpad.net/heat/+spec/oauth-credentials-resource btw, if you want to have a look | 15:53 |
shardy | therve: Cool, will check it out, did you see the ML thread mentioning OAuth? | 15:53 |
*** adrian_otto has joined #heat | 15:54 | |
*** SergeyLukjanov has quit IRC | 15:55 | |
therve | shardy, Yeah... And X509? | 15:55 |
*** urulama has quit IRC | 15:55 | |
shardy | therve: I'm not sure re X509, ayoung was a bit light on details, will have to investigate | 15:56 |
therve | shardy, Yeah it sounded pretty weird | 15:57 |
therve | shardy, I talked to Steve Martinelli about oauth support in keystoneclient, but didn't get a really straight answer :) | 15:58 |
shardy | therve: Yeah, the review history looks...difficult | 15:59 |
therve | Yeah | 16:00 |
*** rcleere has joined #heat | 16:00 | |
*** randallburt has joined #heat | 16:02 | |
*** randallburt has quit IRC | 16:02 | |
*** randallburt has joined #heat | 16:02 | |
*** vkozhukalov has quit IRC | 16:05 | |
*** bvandenh has quit IRC | 16:06 | |
*** TonyBurn__ has quit IRC | 16:07 | |
*** aignatov_ has quit IRC | 16:08 | |
*** SushilKM has quit IRC | 16:09 | |
*** nkhare has quit IRC | 16:09 | |
radix | oauth support in keystone client would be pretty nice, though there are third party client libraries | 16:11 |
radix | and since IIRC keystoneclient implements oauth 1.x, maybe there's a chance they work :) | 16:11 |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Implement stack-locking for multi-engine support https://review.openstack.org/56477 | 16:13 |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Utilize stack-lock for multi-engine support https://review.openstack.org/56080 | 16:13 |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Implement engine listener service for multi-engine support https://review.openstack.org/59851 | 16:13 |
openstackgerrit | Denis M. proposed a change to openstack/heat: Trove Resource Update https://review.openstack.org/60532 | 16:16 |
*** arbylee has quit IRC | 16:16 | |
therve | radix: I don't think you can use directly an oauth lib against keystone, can you? | 16:17 |
radix | hm | 16:17 |
radix | I don't see why not, but I haven't tried :P | 16:17 |
therve | Well OK | 16:18 |
therve | You can make HTTP requests using oauth lib, sure :) | 16:18 |
SpamapS | Well you'd have to use something like apache+mod_oauth | 16:18 |
SpamapS | the mapping between oauth and keystone is a mystery to me though | 16:19 |
radix | SpamapS: wait what? apache? what? | 16:19 |
radix | I thought we were talking about the client | 16:19 |
*** john-n-seattle2 has joined #heat | 16:19 | |
SpamapS | hm no such thing | 16:20 |
SpamapS | radix: well wtf good is a client if keystone doesn't actually respond to oauth? | 16:20 |
radix | SpamapS: it does | 16:20 |
SpamapS | oh.. whhaaaa? | 16:21 |
radix | yeah :) | 16:21 |
*** john-n-seattle2 has left #heat | 16:21 | |
SpamapS | why are we wasting time with ec2 signing crap in Heat then? | 16:21 |
* SpamapS rtfms hastily | 16:21 | |
radix | well, it's new, of course :) | 16:21 |
therve | Heh | 16:21 |
* randallburt has flashbacks | 16:21 | |
randallburt | hasn't landed iirc | 16:21 |
radix | hmm, didn't it get into H? | 16:21 |
therve | randallburt, On the server side you mean? | 16:22 |
SpamapS | something in contrib | 16:22 |
therve | keystone definitely has oauth support | 16:22 |
therve | I don't know if it works though :) | 16:23 |
SpamapS | another research-project-like sql backend :-P | 16:23 |
therve | There is a also a pending refactoring to replace the oauth lib :/ | 16:24 |
*** spzala has joined #heat | 16:24 | |
SpamapS | the question is, can you delegate a set of roles to an oauth token | 16:25 |
SpamapS | or.. consumer.. or whatever confusing thing they made it | 16:25 |
randallburt | therve: right | 16:26 |
*** kfox1111 has quit IRC | 16:27 | |
therve | SpamapS, *presumably* | 16:27 |
*** arbylee has joined #heat | 16:27 | |
randallburt | therve: last I checked, and its been a while, there were patches out and being discussed, but it wasn't complete. | 16:27 |
SpamapS | so.. I wonder if oauth would be a better choice than signed ec2 urls | 16:27 |
SpamapS | shardy: ^^ ? | 16:27 |
randallburt | again, though, its been a while since I checked. | 16:27 |
therve | AFAIU everything has landed on the server side | 16:28 |
radix | SpamapS: those don't sound like apples and apples | 16:28 |
therve | SpamapS, Yeah we're investigating that | 16:28 |
radix | but yeah oauth seems like a pretty good idea for some stuff in heat :) | 16:28 |
therve | SpamapS, see https://blueprints.launchpad.net/heat/+spec/oauth-credentials-resource | 16:28 |
*** jergerber has quit IRC | 16:29 | |
radix | ohhh neat | 16:31 |
SpamapS | radix: they're not apples and apples | 16:33 |
SpamapS | but what we need is a way to give instances almost no access to a user account, but still enough access to poke waitconditions and their more evolved progeny that we're working on now | 16:33 |
SpamapS | oauth is quite useful for doing exactly that... giving an automated program limited revokable access | 16:34 |
radix | so we should use oauth to implement signed URLs, instead of creating users | 16:34 |
therve | radix: You don't need to, if you just use oauth to get a identity token? | 16:35 |
therve | Then you can have a regular API | 16:36 |
radix | oh, ok | 16:36 |
therve | i'm not sure how roles fit into that yet, though | 16:36 |
SpamapS | if oauth gives you a full fledged id token | 16:36 |
radix | er hm | 16:36 |
SpamapS | then never mind | 16:36 |
SpamapS | the point is being able to delegate roles | 16:36 |
radix | therve: but how would the instance get that token? instances can't talk to keystone | 16:36 |
therve | SpamapS, Is that incompatible? | 16:36 |
*** rushiagr has quit IRC | 16:37 | |
therve | radix: Well, that depends. First, why not? Then, oauth middleware, maybe? | 16:37 |
SpamapS | what you need is a thing that can _only_ grant the user access to a single role.. that role would be something like 'heat_read_metadata' and then heat would still further lock down policy | 16:37 |
SpamapS | The signed url does work nicely because you can literally only use that for the single URL you were given. | 16:38 |
radix | yeah, hooray pre-authenticated webhooks :) | 16:38 |
shardy | SpamapS: re oauth, yes possibly, but there are big chunks of functionality missing in keystone | 16:38 |
shardy | e.g client support, signature validation | 16:39 |
shardy | which already exists for ec2tokens | 16:39 |
SpamapS | shardy: yeah I'm reading into the code now, and agreed. | 16:39 |
SpamapS | shardy: perhaps we should just champion the cause of making sure all users can create sub-users and signed ec2 urls.. wouldn't that solve our "problems" ? | 16:39 |
shardy | I agree it may be a good long term goal, but looking at the history of the client patch, it's not clear it will be merged anytime soon | 16:39 |
shardy | SpamapS: Well I'm going in the direction of having a credential derived (or associated with) a trust | 16:40 |
shardy | SpamapS: Users creating users is what we want to stop doing IMO | 16:40 |
SpamapS | shardy: well yeah if we can just delegate our own roles that would be ideal right? | 16:41 |
shardy | SpamapS: initially it will be ec2-credentials associated with a trust, so the user delegates a minimal untrusted role to the in-instance ec2-keypair | 16:41 |
shardy | SpamapS: we can, but there are a couple of keystone bugs I'm waiting on before it will work | 16:41 |
*** akuznetsov has joined #heat | 16:43 | |
SpamapS | shardy: ok, I think I understand now. :) | 16:44 |
SpamapS | shardy: ty for explaining this 3 different ways in the last 2 months. :) | 16:44 |
radix | ugh 28 deg f still :( | 16:44 |
*** kfox1111 has joined #heat | 16:45 | |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Sync oslo threadgroup.py to fix wait & stop methods https://review.openstack.org/60891 | 16:45 |
*** jergerber has joined #heat | 16:45 | |
*** john-n-seattle2 has joined #heat | 16:49 | |
sdake | hope my dad's fireaxe makes it for christmas | 16:49 |
sdake | http://www.thefirestore.com/store/product.aspx/productId/12287/TNT-Denver-Tools-Multi-Purpose-Tool/?gclid=CPLwuMyIhbsCFfA7Mgod-gYAfw | 16:50 |
kfox1111 | nice. :) | 16:53 |
zaneb | anybody else seeing database errors running the unit tests locally? | 16:53 |
arbylee | zaneb: i was seeing that yesterday but pip installing requirements fixed that for me | 16:54 |
jasond` | zaneb: did you upgrade sqlalchemy-migrate? | 16:54 |
*** tomek_adamczewsk has quit IRC | 16:54 | |
*** SushilKM has joined #heat | 16:56 | |
*** bvandenh has joined #heat | 16:56 | |
*** nati_ueno has joined #heat | 16:57 | |
*** _skraynev has joined #heat | 16:58 | |
zaneb | arbylee, jasond`: that fixed it, thanks guys! | 16:58 |
jasond` | np | 16:58 |
*** nkhare has joined #heat | 17:00 | |
*** TonyBurn_ has joined #heat | 17:01 | |
*** SushilKM has quit IRC | 17:01 | |
*** SergeyLukjanov has joined #heat | 17:10 | |
*** SergeyLukjanov is now known as _SergeyLukjanov | 17:11 | |
*** _SergeyLukjanov is now known as SergeyLukjanov | 17:11 | |
*** SushilKM has joined #heat | 17:16 | |
*** pablosan has joined #heat | 17:17 | |
*** rushiagr has joined #heat | 17:19 | |
*** adrian_otto has quit IRC | 17:22 | |
*** TonyBurn_ has quit IRC | 17:26 | |
*** ccs has joined #heat | 17:27 | |
*** jergerber has quit IRC | 17:27 | |
*** bgorski has joined #heat | 17:28 | |
*** sdake_ has joined #heat | 17:28 | |
* SpamapS coughs .. -->> tox -r folks | 17:32 | |
*** tsufiev has left #heat | 17:33 | |
*** jasond` has quit IRC | 17:34 | |
*** blamar has joined #heat | 17:35 | |
*** aignatov has joined #heat | 17:36 | |
openstackgerrit | Tim Schnell proposed a change to openstack/heat: Adds parameter_groups to the HOT specification. https://review.openstack.org/61182 | 17:36 |
openstackgerrit | A change was merged to openstack/heat: Document Port properties https://review.openstack.org/60476 | 17:38 |
openstackgerrit | A change was merged to openstack/heat: Sync oslo rpc https://review.openstack.org/60856 | 17:38 |
*** jamieh has quit IRC | 17:40 | |
*** _skraynev has quit IRC | 17:40 | |
*** nati_ueno has quit IRC | 17:45 | |
*** IlyaE has quit IRC | 17:46 | |
*** pshchelo has quit IRC | 17:53 | |
*** nkhare has quit IRC | 17:56 | |
*** jasond` has joined #heat | 18:03 | |
*** _skraynev has joined #heat | 18:05 | |
*** _skraynev has quit IRC | 18:06 | |
*** tims has joined #heat | 18:07 | |
*** SushilKM has quit IRC | 18:07 | |
*** nati_ueno has joined #heat | 18:08 | |
*** randallburt has quit IRC | 18:11 | |
*** jamieh has joined #heat | 18:11 | |
*** nkhare has joined #heat | 18:15 | |
*** topol has quit IRC | 18:17 | |
*** vkozhukalov has joined #heat | 18:18 | |
*** topol has joined #heat | 18:19 | |
*** tomek_adamczewsk has joined #heat | 18:22 | |
*** nkhare has quit IRC | 18:30 | |
*** shardy is now known as shardy_afk | 18:37 | |
*** yogesh has joined #heat | 18:38 | |
openstackgerrit | Tim Schnell proposed a change to openstack/heat: Adds parameter_groups to the HOT specification. https://review.openstack.org/61182 | 18:43 |
*** randallburt has joined #heat | 18:44 | |
openstackgerrit | Randall Burt proposed a change to openstack/heat: Allow docker plugin to run w/o deps https://review.openstack.org/61190 | 18:47 |
openstackgerrit | Randall Burt proposed a change to openstack/heat: Add contrib to py26 and py27 gates https://review.openstack.org/61191 | 18:47 |
*** jprovazn has joined #heat | 18:51 | |
*** gokrokve_ has quit IRC | 18:57 | |
*** gokrokve has joined #heat | 18:58 | |
*** rgodinez has quit IRC | 19:01 | |
*** che-arne has quit IRC | 19:01 | |
*** gokrokve has quit IRC | 19:02 | |
*** denis_makogon is now known as bot_bot | 19:07 | |
*** tomek_adamczewsk has quit IRC | 19:11 | |
*** yogesh has quit IRC | 19:18 | |
*** yogesh has joined #heat | 19:19 | |
*** yogesh has quit IRC | 19:20 | |
*** yogesh has joined #heat | 19:21 | |
*** akuznetsov has quit IRC | 19:23 | |
*** akuznetsov has joined #heat | 19:24 | |
*** tims has quit IRC | 19:24 | |
*** mordred has quit IRC | 19:26 | |
*** mordred has joined #heat | 19:26 | |
*** jamieh has quit IRC | 19:30 | |
*** bvandenh has quit IRC | 19:41 | |
*** erkules has quit IRC | 19:42 | |
*** IlyaE has joined #heat | 19:47 | |
*** adrian_otto has joined #heat | 19:48 | |
*** spzala has quit IRC | 19:51 | |
*** randallburt has quit IRC | 19:52 | |
*** gokrokve has joined #heat | 19:53 | |
*** erkules has joined #heat | 19:57 | |
*** gokrokve has quit IRC | 19:57 | |
*** adrian_otto has quit IRC | 20:01 | |
*** randallburt has joined #heat | 20:02 | |
*** tims has joined #heat | 20:09 | |
openstackgerrit | Jeff Peeler proposed a change to openstack/heat: heat-manage man page not generated in doc build https://review.openstack.org/61212 | 20:15 |
openstackgerrit | Pablo Andres Fuente proposed a change to openstack/heat: WaitCondition Count property is now updatable https://review.openstack.org/61218 | 20:26 |
SpamapS | randallburt: your email client still sucks ass for quoting. | 20:26 |
randallburt | SpamapS: dammit. I thought I fixed it. | 20:27 |
*** jvarlamova has quit IRC | 20:28 | |
SpamapS | randallburt: nope, text version has no >'s and no indenting | 20:28 |
SpamapS | randallburt: HTML version "works", but I can't really reply to it without manually quoting it. | 20:28 |
SpamapS | randallburt: IMO: just switch to text-only | 20:28 |
SpamapS | if they still allow that in apple mail | 20:28 |
SpamapS | or go home to the motherclient.. thunderbird | 20:28 |
randallburt | SpamapS: k, I'll go look through settings again (I did switch to text-only); I'll go through settings again. | 20:28 |
randallburt | bah! | 20:29 |
SpamapS | Content-Type: multipart/mixed; boundary="===============7194725005723216023==" | 20:29 |
jasond` | i have to open the html file in a browser to read html replies :/ | 20:29 |
jasond` | or try to remember what the last person said | 20:30 |
SpamapS | jasond`: right me too | 20:32 |
SpamapS | and I am always reluctant to even participate in a thread once it has been htmliminated | 20:32 |
*** yogesh has quit IRC | 20:33 | |
jasond` | :) htmliminated | 20:33 |
*** yogesh has joined #heat | 20:33 | |
*** yogesh has quit IRC | 20:38 | |
*** adrian_otto has joined #heat | 20:39 | |
openstackgerrit | A change was merged to openstack/python-heatclient: Replace inheritance hierarchy with composition https://review.openstack.org/61069 | 20:40 |
*** jprovazn has quit IRC | 20:42 | |
*** gokrokve has joined #heat | 20:52 | |
openstackgerrit | Kevin Benton proposed a change to openstack/heat: Adds extraroutes support to neutron routers https://review.openstack.org/41044 | 20:52 |
*** yogesh has joined #heat | 20:54 | |
openstackgerrit | Kevin Benton proposed a change to openstack/heat: Adds extraroutes support to neutron routers https://review.openstack.org/41044 | 20:57 |
*** yogesh has quit IRC | 20:58 | |
*** yogesh has joined #heat | 20:58 | |
jasond` | if anybody has time to comment/vote on the multi-engine reviews, i'd appreciate it | 21:00 |
jasond` | https://review.openstack.org/#/q/status:open+project:openstack/heat+branch:master+topic:bp/multiple-engines,n,z | 21:00 |
stevebaker | jasond`: its been a long road ;) | 21:03 |
jasond` | stevebaker: aye | 21:06 |
*** john-n-seattle2 has left #heat | 21:07 | |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Native Nova Server compatibility for Cloud Server https://review.openstack.org/58043 | 21:09 |
*** radez is now known as radez_g0n3 | 21:15 | |
*** topol has quit IRC | 21:22 | |
SpamapS | jasond`: +2'd all | 21:23 |
SpamapS | jasond`: ^5 and A+ for perseverence. | 21:23 |
*** alcabrera has quit IRC | 21:30 | |
asalkeld | morning | 21:35 |
randallburt | morning | 21:35 |
*** jergerber has joined #heat | 21:41 | |
asalkeld | jasond minor suggesting s/uuidutils/uuid.uuid4() | 21:42 |
jasond` | SpamapS: thanks! | 21:46 |
jasond` | asalkeld: I'll change that, thanks | 21:47 |
stevebaker | zaneb: are you in a different country? | 21:59 |
zaneb | stevebaker: different to what? ;) | 21:59 |
zaneb | yes | 21:59 |
stevebaker | are you in US yet? | 22:00 |
zaneb | yep, just arrived on Saturday | 22:02 |
*** adrian_otto has quit IRC | 22:02 | |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Implement stack-locking for multi-engine support https://review.openstack.org/56477 | 22:04 |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Utilize stack-lock for multi-engine support https://review.openstack.org/56080 | 22:04 |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Implement engine listener service for multi-engine support https://review.openstack.org/59851 | 22:04 |
*** yogesh has quit IRC | 22:05 | |
openstackgerrit | Morgan Fainberg proposed a change to openstack/heat: Sync global requirements to pin sphinx to sphinx>=1.1.2,<1.2 https://review.openstack.org/61246 | 22:06 |
openstackgerrit | Angus Salkeld proposed a change to openstack/heat: oslo: add the crypto module https://review.openstack.org/59684 | 22:07 |
openstackgerrit | Angus Salkeld proposed a change to openstack/heat: Use oslo crypto https://review.openstack.org/59685 | 22:07 |
openstackgerrit | Angus Salkeld proposed a change to openstack/heat: oslo: add the test module needed by test_migrations https://review.openstack.org/60717 | 22:07 |
openstackgerrit | Angus Salkeld proposed a change to openstack/heat: oslo: update the remainder of the modules https://review.openstack.org/59683 | 22:07 |
*** yogesh has joined #heat | 22:15 | |
*** yogesh has quit IRC | 22:18 | |
*** yogesh has joined #heat | 22:18 | |
andersonvom | hey fellows, would anybody happen to know how to rollback a migration on heat? | 22:26 |
*** aignatov has quit IRC | 22:27 | |
*** aignatov has joined #heat | 22:28 | |
*** aignatov has quit IRC | 22:28 | |
*** randallburt has quit IRC | 22:32 | |
*** AndrewMichalik has joined #heat | 22:32 | |
asalkeld | andersonvom, heat-manage db_sync [-h] [version] [current_version] | 22:32 |
asalkeld | (just provide the older version) | 22:32 |
openstackgerrit | Kevin Benton proposed a change to openstack/heat: Adds extraroutes support to neutron routers https://review.openstack.org/41044 | 22:33 |
*** rgodinez has joined #heat | 22:33 | |
andersonvom | asalkeld: ahmmmm had tried heat-manage -h db_sync :P | 22:33 |
andersonvom | asalkeld: thanks! =) | 22:33 |
asalkeld | heat-manage db_sync -h | 22:34 |
andersonvom | asalkeld: yeah... I was just pointing out that I had tried it the other way around instead (ooops) | 22:35 |
asalkeld | both ways should really work | 22:35 |
*** rpothier has quit IRC | 22:36 | |
openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Native Nova Server compatibility for Cloud Server https://review.openstack.org/58043 | 22:36 |
*** derekh has quit IRC | 22:36 | |
*** jasond` has quit IRC | 22:37 | |
*** sgordon has quit IRC | 22:40 | |
*** SergeyLukjanov has quit IRC | 22:41 | |
*** yogesh has quit IRC | 22:45 | |
*** yogesh has joined #heat | 22:46 | |
*** yogesh has quit IRC | 22:48 | |
*** yogesh has joined #heat | 22:49 | |
*** yogesh has quit IRC | 22:53 | |
*** tomek_adamczewsk has joined #heat | 22:58 | |
*** yogesh has joined #heat | 22:58 | |
*** randallburt has joined #heat | 23:01 | |
*** randallburt has quit IRC | 23:02 | |
*** randallburt has joined #heat | 23:02 | |
SpamapS | me thinks gate is broken .. somebody else please +2/+A https://review.openstack.org/#/c/61246/ | 23:04 |
*** swygue has quit IRC | 23:05 | |
asalkeld | SpamapS, done | 23:07 |
*** yogesh has quit IRC | 23:07 | |
SpamapS | asalkeld: ty | 23:07 |
*** yogesh has joined #heat | 23:07 | |
*** yogesh has quit IRC | 23:12 | |
*** alexheneveld has quit IRC | 23:12 | |
*** brint has quit IRC | 23:14 | |
asalkeld | anyone know if you *have* to say "Implements: blueprint xxx" vs. "blueprint xxx" (does that do anything different) | 23:16 |
asalkeld | https://wiki.openstack.org/wiki/GitCommitMessages#Including_external_references | 23:16 |
asalkeld | https://review.openstack.org/#/c/61035/1//COMMIT_MSG | 23:16 |
*** swygue has joined #heat | 23:18 | |
*** slong has quit IRC | 23:20 | |
*** dims has quit IRC | 23:21 | |
blak111 | can someone tell me why gate-heat-docs is failing on this patch? https://review.openstack.org/#/c/41044/ | 23:22 |
blak111 | i just rebased it and that didn't help either | 23:23 |
asalkeld | blak111, It might be a sphinx version issue | 23:24 |
asalkeld | we have just aproved a change that should hopefully fix it | 23:24 |
*** AndrewMichalik has quit IRC | 23:24 | |
blak111 | oh okay. what patch? I will watch for it to be merged and then run a recheck | 23:25 |
asalkeld | https://review.openstack.org/#/c/61246/ | 23:27 |
asalkeld | blak111, ^ | 23:27 |
*** tomek_adamczewsk has quit IRC | 23:32 | |
*** tims has quit IRC | 23:38 | |
openstackgerrit | Jenkins proposed a change to openstack/heat: Updated from global requirements https://review.openstack.org/61276 | 23:41 |
openstackgerrit | Jenkins proposed a change to openstack/python-heatclient: Updated from global requirements https://review.openstack.org/60981 | 23:45 |
*** rcleere has quit IRC | 23:46 | |
*** swygue has quit IRC | 23:49 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!