| *** arbylee1 has quit IRC | 00:00 | |
| stevebaker | alt.meeting.time | 00:00 |
|---|---|---|
| zaneb | SpamapS: in theory rollback should work pretty well | 00:00 |
| stevebaker | randallburt, SpamapS, jasond around for meeting? | 00:03 |
| randallburt | whoops | 00:03 |
| *** ifarkas has quit IRC | 00:12 | |
| *** achampion has joined #heat | 00:26 | |
| *** matsuhashi has joined #heat | 00:34 | |
| *** pablosan has quit IRC | 00:34 | |
| zaneb | how did SpamapS manage to do 33 reviews in one day? | 00:36 |
| *** liang has joined #heat | 00:36 | |
| *** liang has quit IRC | 00:39 | |
| *** edmund has quit IRC | 00:39 | |
| *** asalkeld has quit IRC | 00:48 | |
| *** topol has quit IRC | 00:52 | |
| *** mkollaro has quit IRC | 00:54 | |
| *** saurabhs has left #heat | 00:57 | |
| *** tsmadds has joined #heat | 01:00 | |
| *** asalkeld has joined #heat | 01:00 | |
| *** pvaneck has quit IRC | 01:03 | |
| *** tsmadds has quit IRC | 01:04 | |
| *** tango has quit IRC | 01:07 | |
| *** yogesh has joined #heat | 01:10 | |
| *** arbylee has joined #heat | 01:17 | |
| openstackgerrit | A change was merged to openstack/heat: Fix OS::Neutron::Pool validation https://review.openstack.org/67788 | 01:20 |
| openstackgerrit | ZhiQiang Fan proposed a change to openstack/python-heatclient: Enable hacking H233 rule https://review.openstack.org/68534 | 01:23 |
| openstackgerrit | A change was merged to openstack/python-heatclient: Copy run_test.sh from heat repo https://review.openstack.org/66258 | 01:25 |
| *** kfox1111 has quit IRC | 01:25 | |
| *** rpothier has joined #heat | 01:26 | |
| *** yogesh has quit IRC | 01:27 | |
| *** nosnos has joined #heat | 01:34 | |
| *** asalkeld has quit IRC | 01:41 | |
| *** alexpilotti has quit IRC | 01:54 | |
| openstackgerrit | A change was merged to openstack/heat: Allow choice in how SignalResponder user id is stored. https://review.openstack.org/61902 | 01:55 |
| *** Tross has joined #heat | 01:56 | |
| *** tsmadds has joined #heat | 02:00 | |
| *** randallburt has quit IRC | 02:01 | |
| *** tsmadds has quit IRC | 02:05 | |
| *** gokrokve has quit IRC | 02:07 | |
| *** gokrokve has joined #heat | 02:07 | |
| *** gokrokve has quit IRC | 02:12 | |
| *** Guest76965 has quit IRC | 02:12 | |
| *** Tross has quit IRC | 02:13 | |
| *** rongze has joined #heat | 02:13 | |
| *** randallburt has joined #heat | 02:13 | |
| *** rpothier_ has joined #heat | 02:14 | |
| *** rpothier has quit IRC | 02:17 | |
| *** Tross has joined #heat | 02:33 | |
| *** asalkeld has joined #heat | 02:42 | |
| *** alienyyg has quit IRC | 02:45 | |
| *** erkules_ has joined #heat | 02:50 | |
| *** gokrokve has joined #heat | 02:51 | |
| *** ramishra has joined #heat | 02:52 | |
| *** erkules has quit IRC | 02:52 | |
| *** sballe_ has quit IRC | 02:59 | |
| *** sballe_ has joined #heat | 03:00 | |
| *** tsmadds has joined #heat | 03:01 | |
| *** spzala has quit IRC | 03:03 | |
| *** tsmadds has quit IRC | 03:06 | |
| *** sballe_ has quit IRC | 03:08 | |
| openstackgerrit | Lee Li proposed a change to openstack/python-heatclient: Remove unused method 'string_to_bool' from utils https://review.openstack.org/68317 | 03:09 |
| *** nati_ueno has quit IRC | 03:10 | |
| *** sdake-ooo is now known as sdake | 03:13 | |
| *** gokrokve has quit IRC | 03:17 | |
| *** ramishra has quit IRC | 03:19 | |
| *** ramishra has joined #heat | 03:20 | |
| *** Tross has quit IRC | 03:20 | |
| sdake | off to bed enjoy | 03:24 |
| *** ramishra has quit IRC | 03:24 | |
| stevebaker | later | 03:24 |
| *** cody-somerville has quit IRC | 03:35 | |
| openstackgerrit | Steve Baker proposed a change to openstack/heat-templates: An example template demonstrating cloud-init config resources https://review.openstack.org/68549 | 03:39 |
| openstackgerrit | Steve Baker proposed a change to openstack/heat-templates: An example template demonstrating cloud-init config resources https://review.openstack.org/68549 | 03:41 |
| *** ramishra has joined #heat | 03:44 | |
| *** andersonvom has joined #heat | 03:44 | |
| *** asalkeld has quit IRC | 03:44 | |
| *** gokrokve has joined #heat | 03:49 | |
| *** cody-somerville has joined #heat | 03:51 | |
| *** faramir has joined #heat | 03:52 | |
| openstackgerrit | Lee Li proposed a change to openstack/python-heatclient: Using common methods from oslo cliutils https://review.openstack.org/67120 | 03:53 |
| *** mattgriffin has joined #heat | 03:58 | |
| *** tsmadds has joined #heat | 04:02 | |
| *** andersonvom has quit IRC | 04:03 | |
| *** andersonvom has joined #heat | 04:05 | |
| *** tsmadds has quit IRC | 04:07 | |
| *** rcleere has joined #heat | 04:15 | |
| *** harlowja is now known as harlowja_away | 04:23 | |
| *** aignatov_ is now known as aignatov | 04:29 | |
| *** Tross has joined #heat | 04:38 | |
| *** giulivo has quit IRC | 04:38 | |
| *** rongze has quit IRC | 04:47 | |
| *** rongze has joined #heat | 04:48 | |
| *** nkhare has joined #heat | 04:51 | |
| *** rongze has quit IRC | 04:53 | |
| lifeless | so SpamapS is https://review.openstack.org/#/c/63245/ ready for review? | 04:54 |
| SpamapS | lifeless: yeah, it has been ready for a few days now. :) | 04:55 |
| SpamapS | no idea why it has seen no action | 04:55 |
| lifeless | ok so we need two +2s. | 04:55 |
| lifeless | stevebaker: shardy: ^ Please :) | 04:55 |
| *** akuznetsov has joined #heat | 04:56 | |
| *** aignatov is now known as aignatov_ | 04:56 | |
| *** asalkeld has joined #heat | 04:57 | |
| lifeless | oh look, an angus | 04:58 |
| lifeless | asalkeld: https://review.openstack.org/#/c/63245/ if you have some review juice left in you :) | 04:58 |
| *** tsmadds has joined #heat | 05:03 | |
| *** nati_ueno has joined #heat | 05:03 | |
| SpamapS | zaneb: re "33 reviews in one day" .. that included tripleo and that day lifeless and StevenK "assploded" our dev/test story with tons of little patches. | 05:04 |
| *** nati_uen_ has joined #heat | 05:05 | |
| lifeless | all patches can be little | 05:05 |
| *** tsmadds has quit IRC | 05:07 | |
| *** nati_ueno has quit IRC | 05:08 | |
| asalkeld | looking lifeless | 05:09 |
| asalkeld | more like feeling lifeless ;) | 05:10 |
| SpamapS | doh | 05:10 |
| *** harlowja_away is now known as harlowja | 05:10 | |
| SpamapS | we need more core reviewers | 05:10 |
| SpamapS | http://russellbryant.net/openstack-stats/heat-openreviews.txt | 05:10 |
| SpamapS | --> Waiting on Reviewer: 52 | 05:10 |
| SpamapS | --> Stats since the latest revision: | 05:11 |
| SpamapS | ----> Average wait time: 4 days, 0 hours, 16 minutes | 05:11 |
| asalkeld | yeah, I am doing more solum stuff now | 05:12 |
| asalkeld | SpamapS, did you chat to shardy about "OS::Heat::WaitHandle"? | 05:13 |
| asalkeld | "Basically I think we need fully native WaitCondition resource(s) which satisfy this requirement, instead of providing a temporary (albeit simple) fix, which won't make sense to maintain when we have the native resource." | 05:13 |
| asalkeld | o, it is that ;) | 05:14 |
| SpamapS | that is shardy's opinion | 05:14 |
| asalkeld | was reading reviews before code | 05:14 |
| SpamapS | but seeing as we do not have a native resource | 05:14 |
| *** gokrokve has quit IRC | 05:14 | |
| *** randallburt has quit IRC | 05:14 | |
| *** cmyster has joined #heat | 05:14 | |
| SpamapS | We can deprecate it the moment a better solution is available. | 05:15 |
| cmyster | morning | 05:15 |
| asalkeld | SpamapS, why not just have a new property on the current waitcond.? | 05:17 |
| asalkeld | (just curious) | 05:17 |
| SpamapS | asalkeld: I dislike that as it is unclear that we've extended CFN in that case. | 05:18 |
| SpamapS | asalkeld: this way it is very clear: you are using a Heat specific feature. | 05:18 |
| asalkeld | I guess | 05:18 |
| asalkeld | done | 05:22 |
| *** rongze has joined #heat | 05:22 | |
| lifeless | asalkeld: thanks! | 05:24 |
| lifeless | SpamapS: who else can we drag in? | 05:24 |
| SpamapS | jpeeler: https://review.openstack.org/#/c/63245/ | 05:26 |
| SpamapS | therve: https://review.openstack.org/#/c/63245/ | 05:26 |
| SpamapS | sdake: https://review.openstack.org/#/c/63245/ | 05:26 |
| SpamapS | I think thats all the IRC people | 05:27 |
| *** rongze has quit IRC | 05:27 | |
| lifeless | is radix core? | 05:28 |
| lifeless | SpamapS: ^ | 05:28 |
| SpamapS | no | 05:33 |
| SpamapS | and isn't even trying really.. ;) | 05:34 |
| SpamapS | | radix | 5 0 4 1 0 0 20.0% | 0 ( 0.0%) | | 05:34 |
| asalkeld | ga working for 2 weeks on tethered cell phone kinda sucks | 05:35 |
| stevebaker | SpamapS: done, as long as we can shoot it once it has served its purpose | 05:41 |
| SpamapS | stevebaker: gladly | 05:41 |
| SpamapS | stevebaker: we're CD.. we need it because we're CD.. and we can shoot it ASAP because we're CD. :) | 05:41 |
| SpamapS | asalkeld: 4G makes everything better. :) | 05:42 |
| asalkeld | data just costs | 05:43 |
| *** gokrokve has joined #heat | 05:45 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 05:46 | |
| *** yogesh has joined #heat | 05:46 | |
| *** arbylee has quit IRC | 05:46 | |
| SpamapS | stevebaker: oh and thanks! :) | 05:46 |
| SpamapS | lifeless: great, so in 40h, we should have that patch in Heat. | 05:46 |
| SpamapS | <sigh> | 05:46 |
| * SpamapS goes to watch some ridiculous TV | 05:46 | |
| openstackgerrit | A change was merged to openstack/heat: Add a new ThreadGroupManager class https://review.openstack.org/67971 | 05:47 |
| *** faramir has quit IRC | 05:49 | |
| cmyster | I should probably need a better understanding of the whole bug-review-fix-submit process. I want to start a local builder on a local VM | 05:49 |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 05:49 | |
| *** nati_ueno has joined #heat | 05:53 | |
| *** nati_ueno has quit IRC | 05:53 | |
| *** rongze has joined #heat | 05:54 | |
| *** nati_ueno has joined #heat | 05:54 | |
| *** faramir has joined #heat | 05:56 | |
| *** nati_uen_ has quit IRC | 05:56 | |
| *** rongze has quit IRC | 06:01 | |
| *** tsmadds has joined #heat | 06:03 | |
| *** rcleere has quit IRC | 06:06 | |
| openstackgerrit | Jenkins proposed a change to openstack/heat: Imported Translations from Transifex https://review.openstack.org/64504 | 06:06 |
| *** tsmadds has quit IRC | 06:08 | |
| *** tzumainn has quit IRC | 06:09 | |
| *** renlt has joined #heat | 06:11 | |
| *** ativelkov has left #heat | 06:14 | |
| *** mattgriffin has quit IRC | 06:18 | |
| *** mattgriffin has joined #heat | 06:19 | |
| skraynev | Morning guys | 06:24 |
| *** akuznetsov has quit IRC | 06:27 | |
| skraynev | Could somebody else review https://review.openstack.org/#/c/65970/ . needs other opinion on question in comment. | 06:27 |
| *** yogesh has quit IRC | 06:27 | |
| *** yogesh has joined #heat | 06:29 | |
| *** akuznetsov has joined #heat | 06:31 | |
| *** yogesh has quit IRC | 06:33 | |
| *** rongze has joined #heat | 06:35 | |
| *** yogesh has joined #heat | 06:39 | |
| *** rongze_ has joined #heat | 06:39 | |
| *** rongze has quit IRC | 06:40 | |
| *** yogesh_ has joined #heat | 06:42 | |
| *** harlowja is now known as harlowja_away | 06:45 | |
| *** yogesh__ has joined #heat | 06:45 | |
| *** yogesh has quit IRC | 06:46 | |
| *** yogesh_ has quit IRC | 06:48 | |
| *** nati_uen_ has joined #heat | 06:48 | |
| *** matsuhashi has quit IRC | 06:50 | |
| *** nati_ueno has quit IRC | 06:51 | |
| *** matsuhashi has joined #heat | 06:54 | |
| openstackgerrit | A change was merged to openstack/heat: Fix syntax error in docs https://review.openstack.org/67615 | 06:55 |
| *** faramir has quit IRC | 06:59 | |
| *** tsmadds has joined #heat | 07:04 | |
| *** tsmadds has quit IRC | 07:09 | |
| *** asalkeld has quit IRC | 07:09 | |
| *** gokrokve has quit IRC | 07:11 | |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: A cloud-config resource based on SoftwareConfig https://review.openstack.org/63214 | 07:12 |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: A multipart cloud-init resource based on SoftwareConfig https://review.openstack.org/63215 | 07:12 |
| openstackgerrit | Jun Jie Nan proposed a change to openstack/heat: Resource type for software configuration https://review.openstack.org/67621 | 07:12 |
| *** gokrokve has joined #heat | 07:18 | |
| *** asalkeld has joined #heat | 07:22 | |
| *** gokrokve has quit IRC | 07:22 | |
| *** jprovazn has joined #heat | 07:30 | |
| *** mattgriffin has quit IRC | 07:36 | |
| *** mkollaro has joined #heat | 07:40 | |
| *** gokrokve has joined #heat | 07:41 | |
| *** nati_ueno has joined #heat | 07:42 | |
| *** che-arne has joined #heat | 07:45 | |
| *** nati_uen_ has quit IRC | 07:46 | |
| *** gokrokve has quit IRC | 07:46 | |
| *** gokrokve has joined #heat | 07:47 | |
| *** tspatzier has joined #heat | 07:49 | |
| *** ramishra_ has joined #heat | 07:51 | |
| *** ramishra has quit IRC | 07:52 | |
| *** ifarkas has joined #heat | 07:54 | |
| *** jamieh has joined #heat | 08:03 | |
| *** tsmadds has joined #heat | 08:06 | |
| *** tsmadds has quit IRC | 08:10 | |
| *** mkollaro has quit IRC | 08:18 | |
| therve | 'morning | 08:21 |
| cmyster | hi | 08:22 |
| shardy | morning all | 08:32 |
| *** jistr has joined #heat | 08:32 | |
| *** sergmelikyan has joined #heat | 08:33 | |
| *** renlt has quit IRC | 08:42 | |
| *** tsmadds has joined #heat | 08:47 | |
| *** aignatov_ is now known as aignatov | 08:54 | |
| cmyster | morning shardy | 08:54 |
| *** che-arne has quit IRC | 08:56 | |
| *** aignatov is now known as aignatov_ | 09:00 | |
| *** oubiwann has quit IRC | 09:05 | |
| *** ramishra_ has quit IRC | 09:06 | |
| *** tspatzier has quit IRC | 09:06 | |
| *** rongze_ has quit IRC | 09:06 | |
| *** oubiwann has joined #heat | 09:06 | |
| *** yogesh__ has quit IRC | 09:10 | |
| *** ramishra_ has joined #heat | 09:11 | |
| *** tspatzier has joined #heat | 09:11 | |
| *** rongze_ has joined #heat | 09:11 | |
| *** ramishra_ has quit IRC | 09:13 | |
| *** tspatzier has quit IRC | 09:13 | |
| *** rongze_ has quit IRC | 09:13 | |
| *** rongze has joined #heat | 09:14 | |
| *** derekh has joined #heat | 09:14 | |
| *** tspatzier has joined #heat | 09:14 | |
| *** ramishra has joined #heat | 09:14 | |
| *** ramishra_ has joined #heat | 09:21 | |
| *** ramishra has quit IRC | 09:22 | |
| *** aignatov_ is now known as aignatov | 09:30 | |
| *** ramishra_ has quit IRC | 09:30 | |
| *** tomek_adamczewsk has joined #heat | 09:31 | |
| *** jeju has joined #heat | 09:38 | |
| openstackgerrit | Serg Melikyan proposed a change to openstack/heat: Fixed OS::Neutron::Pool creation https://review.openstack.org/67792 | 09:39 |
| *** aignatov is now known as aignatov_ | 09:42 | |
| *** aignatov_ is now known as aignatov | 09:46 | |
| *** john-n-seattle has joined #heat | 09:48 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 09:51 | |
| *** liang has joined #heat | 09:51 | |
| *** jamieh has quit IRC | 09:54 | |
| *** ramishra has joined #heat | 10:01 | |
| *** e0ne has joined #heat | 10:08 | |
| *** e0ne_ has quit IRC | 10:09 | |
| *** tomek_adamczewsk has quit IRC | 10:17 | |
| *** e0ne has quit IRC | 10:18 | |
| *** e0ne has joined #heat | 10:18 | |
| *** ramishra has quit IRC | 10:20 | |
| *** ramishra has joined #heat | 10:21 | |
| *** yogesh has joined #heat | 10:21 | |
| *** yogesh has quit IRC | 10:26 | |
| jeju | hi | 10:33 |
| jeju | I'm trying to get work this template http://pastebin.com/V7NYJDvR , but in my ceilometer-agent's log I see "transitioning to insufficient data because 1 datapoints are unknown" and the alarms is in "insufficient data" state.. :| | 10:33 |
| jeju | why? :| | 10:33 |
| skraynev | jeju: AFAIK, this problem is related with ceilometer configuration. | 10:37 |
| skraynev | jeju: ceilometer has not enough time for collect data. | 10:37 |
| skraynev | jeju: you may look in /etc/ceilometer/pipeline.yaml (I am not sure, that it's correct path for you) | 10:39 |
| skraynev | jeju: and check parameter 'interval'. | 10:39 |
| jeju | skraynev, interval: 600 .. so I must wait 10 minutes?! | 10:40 |
| skraynev | jeju: yeap. | 10:40 |
| jeju | skraynev, it's safe to set interval to 60 for testing pourpose ?! | 10:41 |
| *** ramishra_ has joined #heat | 10:41 | |
| skraynev | jeju: yes, you can try it. | 10:41 |
| jeju | skraynev, thanks for the hint ;) | 10:42 |
| skraynev | jeju: but I offer you set this value to 30 or something else (less then period in your template) | 10:42 |
| skraynev | jeju: this solution worked for me | 10:43 |
| jeju | skraynev, it works! thank you so much! :) | 10:44 |
| *** rongze has quit IRC | 10:45 | |
| *** ramishra has quit IRC | 10:45 | |
| skraynev | jeju: np ;) | 10:45 |
| therve | pscheie, There are many tests that empty lists are skipped | 10:45 |
| therve | Like, all the tests I changed | 10:45 |
| *** rongze has joined #heat | 10:45 | |
| *** tomek_adamczewsk has joined #heat | 10:49 | |
| *** rongze has quit IRC | 10:50 | |
| *** jamieh has joined #heat | 10:51 | |
| *** che-arne has joined #heat | 10:51 | |
| *** matsuhashi has quit IRC | 11:05 | |
| *** matsuhashi has joined #heat | 11:14 | |
| *** rongze has joined #heat | 11:16 | |
| *** jprovazn_ has joined #heat | 11:20 | |
| *** rongze has quit IRC | 11:20 | |
| *** ramishra has joined #heat | 11:24 | |
| *** ramishra_ has quit IRC | 11:24 | |
| *** e0ne has quit IRC | 11:28 | |
| *** tomek_adamczewsk has quit IRC | 11:29 | |
| shardy | therve, liang: around? | 11:30 |
| *** michchap has quit IRC | 11:40 | |
| *** che-arne has quit IRC | 11:44 | |
| *** ramishra_ has joined #heat | 11:50 | |
| *** ramishra_ has quit IRC | 11:52 | |
| *** ramishra has quit IRC | 11:53 | |
| *** ramishra_ has joined #heat | 11:53 | |
| *** nkhare has quit IRC | 11:56 | |
| *** rongze has joined #heat | 11:57 | |
| *** e0ne has joined #heat | 11:59 | |
| *** pshchelo has joined #heat | 11:59 | |
| *** ramishra_ has quit IRC | 11:59 | |
| liang | shardy, looking for me? | 12:00 |
| shardy | liang: Hi, I was just wondering about the decision to put the marconi resource in contrib | 12:00 |
| shardy | liang: As marconi is incubated rather than a third-party project, I was wondering if using the PROTOTYPE support status might be an alternative? | 12:01 |
| liang | shardy, oh, that's because marconi isn't an integrated project yet | 12:02 |
| *** erkules_ is now known as erkules | 12:02 | |
| shardy | liang: Yeah, I'm not sure what the best approach is but wanted to discuss the options :) | 12:02 |
| shardy | The disadvantage of contrib is we'll have to move it when marconi graduates for J | 12:03 |
| liang | shardy, I was thinking to speed up the review process by moving the implementation to contrib directory as it's supposed to be less critical ;) | 12:03 |
| liang | shardy, yeah, exactly, I will have to move it in tree | 12:03 |
| shardy | liang: Ha, I don't think I review any differently depending on directory :) | 12:04 |
| *** e0ne has quit IRC | 12:04 | |
| shardy | liang: Ok, well maybe we need to have a discussion about the intended usage of the resource.Resource SUPPORT_STATUSES as it's not clear to me atm | 12:04 |
| liang | ah,, I thought the graduation needs the heat plugin, I need to speed up | 12:05 |
| *** ramishra has joined #heat | 12:05 | |
| therve | shardy, We can't put marconiclient in requirements yet though | 12:05 |
| therve | I think | 12:05 |
| shardy | therve: aha - that's a good point | 12:05 |
| shardy | Ok, contrib it is then :) | 12:05 |
| liang | therve, you got the point! | 12:05 |
| liang | it's still not a stable release | 12:06 |
| liang | shardy, I forgot to say | 12:06 |
| shardy | liang: Yup, sure, I just saw the new prototype resource support status and it seemed to be a good fit for incubated project resources | 12:07 |
| liang | shardy, https://pypi.python.org/pypi/python-marconiclient | 12:07 |
| liang | shardy, yeah, thanks! I just took a look and had the same feeling. | 12:08 |
| shardy | lol @ 0.0.1a1 :) | 12:08 |
| liang | shardy, If we got a stable client release, that would be the best option to me too | 12:08 |
| *** jeju has quit IRC | 12:09 | |
| shardy | liang: Ok, well we can go with contrib for now and move it later then | 12:09 |
| liang | shardy, yup | 12:10 |
| shardy | thanks | 12:10 |
| liang | ;) | 12:10 |
| *** ramishra has quit IRC | 12:11 | |
| *** ramishra has joined #heat | 12:11 | |
| *** ramishra has quit IRC | 12:15 | |
| *** ramishra has joined #heat | 12:16 | |
| *** e0ne has joined #heat | 12:24 | |
| *** akuznetsov has quit IRC | 12:24 | |
| *** alexpilotti has joined #heat | 12:25 | |
| *** akuznetsov has joined #heat | 12:25 | |
| *** e0ne has quit IRC | 12:26 | |
| *** e0ne has joined #heat | 12:26 | |
| *** asalkeld has quit IRC | 12:29 | |
| *** alexpilotti has quit IRC | 12:30 | |
| *** e0ne has quit IRC | 12:31 | |
| *** ramishra has quit IRC | 12:34 | |
| *** nosnos has quit IRC | 12:36 | |
| *** matsuhashi has quit IRC | 12:39 | |
| *** ramishra has joined #heat | 12:48 | |
| *** rpothier_ has quit IRC | 12:51 | |
| cmyster | hmmm | 12:55 |
| skraynev | shardy, therve: could you review https://review.openstack.org/#/c/65970/ ? Clint and I have discussion about better approach in one code place and now we need other opinions. | 12:55 |
| cmyster | in grizzly, how can I install heat correctly with all its correct DB schema ? | 12:55 |
| *** coolsvap has joined #heat | 12:57 | |
| cmyster | (in rhel 6.4) | 12:57 |
| therve | skraynev, Clint is right, it should be a list | 12:57 |
| shardy | cmyster: On grizzly you use heat-db-setup, on Havana and later you use heat-manage db_sync | 12:57 |
| therve | skraynev, As a side note, this is not the right place to build that list IMHO | 12:58 |
| *** ramishra has quit IRC | 12:58 | |
| *** sgordon has joined #heat | 12:58 | |
| *** sgordon has quit IRC | 12:58 | |
| *** sgordon has joined #heat | 12:58 | |
| cmyster | I need to very a bug that was backported to grizzly and I never installed heat on it... | 12:58 |
| cmyster | thanks shadower | 12:58 |
| *** coolsvap has quit IRC | 12:58 | |
| *** ramishra has joined #heat | 12:58 | |
| cmyster | tabulator++ | 12:58 |
| skraynev | therve: we have had talk with him about it. | 12:58 |
| *** alexpilotti has joined #heat | 12:59 | |
| skraynev | therve: and he suggested make it like a json field and get access to it for other resources. (if I understood right his) | 12:59 |
| *** jdob has joined #heat | 13:00 | |
| therve | I think he means that the API will serialize the list as JSON | 13:00 |
| *** _ruhe is now known as ruhe | 13:01 | |
| skraynev | therve: well, could you explain me where should I move this list for getting it worked? | 13:03 |
| *** ramishra_ has joined #heat | 13:05 | |
| *** ramishra has quit IRC | 13:05 | |
| therve | skraynev, So first I think you should modify format_stack_resource, not the Service class | 13:05 |
| shardy | therve: +1 | 13:05 |
| therve | Then the actual built of the list should probably be in StackResource? | 13:05 |
| * shardy was about to add a commment saying that | 13:05 | |
| skraynev | therve: so, I will change format_stack_resource and stay Sevice class without changes. | 13:08 |
| therve | skraynev, http://paste.openstack.org/show/61732/ for example | 13:09 |
| skraynev | therve: Hm, if I use this examples, I may do nothing changes in StackResource. right? | 13:11 |
| skraynev | or will be better add some attribute for this class too? | 13:11 |
| therve | Yeah your call on that one | 13:11 |
| skraynev | s/examples/example | 13:11 |
| skraynev | therve: cool. thanks. | 13:12 |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 13:13 | |
| * skraynev go to remove bad code from Service class | 13:13 | |
| *** andersonvom has quit IRC | 13:16 | |
| *** ramishra_ has quit IRC | 13:18 | |
| *** ramishra has joined #heat | 13:18 | |
| *** aignatov is now known as aignatov_ | 13:18 | |
| *** aignatov_ is now known as aignatov | 13:20 | |
| *** ruhe is now known as _ruhe | 13:22 | |
| *** aweiteka has joined #heat | 13:22 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 13:22 | |
| *** andersonvom has joined #heat | 13:25 | |
| *** e0ne has joined #heat | 13:26 | |
| *** pafuent has joined #heat | 13:26 | |
| *** asalkeld has joined #heat | 13:28 | |
| *** aignatov is now known as aignatov_ | 13:29 | |
| *** ramishra has quit IRC | 13:30 | |
| *** e0ne has quit IRC | 13:30 | |
| *** ramishra has joined #heat | 13:31 | |
| *** arbylee has joined #heat | 13:32 | |
| *** aignatov_ is now known as aignatov | 13:35 | |
| *** mattgriffin has joined #heat | 13:37 | |
| *** mattgriffin has quit IRC | 13:41 | |
| *** andersonvom has quit IRC | 13:42 | |
| sdake | morning | 13:43 |
| shardy | Hi sdake | 13:47 |
| *** achampion has quit IRC | 13:50 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_a | 13:50 | |
| *** arbylee has quit IRC | 13:50 | |
| *** SergeyLukjanov_a is now known as SergeyLukjanov_ | 13:51 | |
| *** rpothier has joined #heat | 13:52 | |
| *** ramishra has quit IRC | 13:54 | |
| *** ramishra has joined #heat | 13:54 | |
| *** tzumainn has joined #heat | 14:01 | |
| *** ramishra has quit IRC | 14:04 | |
| *** sballe has joined #heat | 14:06 | |
| *** aignatov is now known as aignatov_ | 14:08 | |
| *** ramishra has joined #heat | 14:12 | |
| *** aignatov_ is now known as aignatov | 14:12 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 14:12 | |
| *** ramishra_ has joined #heat | 14:14 | |
| *** ramishra has quit IRC | 14:14 | |
| *** dteselkin_ has quit IRC | 14:15 | |
| *** ramishra_ has quit IRC | 14:15 | |
| *** dteselkin_ has joined #heat | 14:16 | |
| *** ramishra has joined #heat | 14:16 | |
| sdake | sup shards o glass :) | 14:17 |
| sdake | shardyonay | 14:17 |
| sdake | ok Im done :) | 14:17 |
| *** _ruhe is now known as ruhe | 14:17 | |
| shardy | lol | 14:17 |
| *** coolsvap has joined #heat | 14:18 | |
| *** ramishra_ has joined #heat | 14:21 | |
| *** vijendar has joined #heat | 14:22 | |
| *** ramishra_ has quit IRC | 14:24 | |
| *** ramishra_ has joined #heat | 14:24 | |
| *** jcru has joined #heat | 14:24 | |
| *** ramishra has quit IRC | 14:24 | |
| *** e0ne has joined #heat | 14:25 | |
| *** dims has quit IRC | 14:26 | |
| *** dims has joined #heat | 14:28 | |
| *** arbylee has joined #heat | 14:30 | |
| *** arbylee has quit IRC | 14:32 | |
| *** arbylee has joined #heat | 14:32 | |
| *** ramishra has joined #heat | 14:33 | |
| *** cmyster has quit IRC | 14:34 | |
| *** ramishra_ has quit IRC | 14:37 | |
| *** mkollaro has joined #heat | 14:37 | |
| *** ramishra has quit IRC | 14:38 | |
| therve | vijendar, Don't do reverify no bug | 14:42 |
| therve | I don't even think it does anything anymore | 14:42 |
| vijendar | therve: ok | 14:43 |
| therve | Your patches are in the queue, it's just taking a long time | 14:43 |
| vijendar | therve: as there was no progress since yesterday evening, I thought something went wrong :( | 14:44 |
| shardy | vijendar: this week most patches have been taking 40-60hours to merge | 14:45 |
| shardy | I think that is improving now though | 14:45 |
| therve | See http://status.openstack.org/zuul/ | 14:45 |
| vijendar | shardy, therve: sorry. I was not aware of that. thanks for info | 14:46 |
| *** achampion has joined #heat | 14:47 | |
| *** radez_g0n3 is now known as radez | 14:48 | |
| openstackgerrit | Sergey Kraynev proposed a change to openstack/heat: Remove default option for fixed_ips https://review.openstack.org/68648 | 14:49 |
| *** rongze has quit IRC | 14:51 | |
| *** bvandenh has joined #heat | 14:54 | |
| *** ramishra has joined #heat | 14:56 | |
| *** rcleere has joined #heat | 15:00 | |
| openstackgerrit | Sergey Kraynev proposed a change to openstack/heat: Remove default option for fixed_ips https://review.openstack.org/68648 | 15:00 |
| *** ramishra has quit IRC | 15:01 | |
| pafuent | jasond: Are you around? | 15:04 |
| jasond | pafuent: yep | 15:08 |
| *** aweiteka has quit IRC | 15:08 | |
| pafuent | jasond: Sorry to bother you, but I tried to reproduce your comment and I can't | 15:08 |
| jasond | pafuent: i was just trying to get more info on that | 15:09 |
| pafuent | jasond: Ok | 15:09 |
| jasond | i will add a comment soon | 15:09 |
| *** jamieh has quit IRC | 15:10 | |
| *** jomara_ has quit IRC | 15:13 | |
| pafuent | jasond: Ok, thanks | 15:13 |
| *** e0ne_ has joined #heat | 15:14 | |
| *** tims1 has quit IRC | 15:15 | |
| *** jergerber has joined #heat | 15:15 | |
| *** e0ne has quit IRC | 15:17 | |
| *** aweiteka has joined #heat | 15:21 | |
| radix | morning heaters | 15:21 |
| *** ramishra has joined #heat | 15:22 | |
| *** mattgriffin has joined #heat | 15:25 | |
| *** nkhare has joined #heat | 15:29 | |
| *** ramishra has quit IRC | 15:30 | |
| *** ramishra has joined #heat | 15:31 | |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: Don't delete trust on backup stack delete https://review.openstack.org/68668 | 15:35 |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: Store credential ID for AccessKey and SignalResponder https://review.openstack.org/67530 | 15:35 |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: heat_keystoneclient convert get_ec2_keypair to v3 API https://review.openstack.org/67531 | 15:35 |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: heat_keystoneclient migrate create_ec2_keypair to v3 API https://review.openstack.org/67529 | 15:35 |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: Purge remaining heat_keystoneclient v2 code https://review.openstack.org/67534 | 15:35 |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: heat_keystoneclient convert delete_ec2_keypair to v3 API https://review.openstack.org/67532 | 15:35 |
| openstackgerrit | Steven Hardy proposed a change to openstack/heat: Fix user and signal responder exception import https://review.openstack.org/67533 | 15:35 |
| *** spzala has joined #heat | 15:36 | |
| shardy | therve: FYI that's the remainder of v3 keystone patches we discussed, now ready for review | 15:37 |
| *** ramishra has quit IRC | 15:38 | |
| *** jdob has quit IRC | 15:41 | |
| therve | Awesome, looking | 15:41 |
| *** tims has joined #heat | 15:43 | |
| openstackgerrit | Chmouel Boudjnah proposed a change to openstack/python-heatclient: Use python requests lib for all our http thingies https://review.openstack.org/65704 | 15:49 |
| *** liang has quit IRC | 15:50 | |
| *** sjmc7 has joined #heat | 15:53 | |
| *** ramishra has joined #heat | 15:53 | |
| *** jdob has joined #heat | 15:55 | |
| *** gokrokve has quit IRC | 15:56 | |
| *** ramishra has quit IRC | 15:57 | |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Allow an in-progress stack to be deleted https://review.openstack.org/63002 | 15:59 |
| *** andersonvom has joined #heat | 16:01 | |
| *** ramishra has joined #heat | 16:01 | |
| *** nkhare has quit IRC | 16:05 | |
| *** ramishra has quit IRC | 16:06 | |
| shardy | andersonvom: around? | 16:06 |
| *** giulivo has joined #heat | 16:06 | |
| andersonvom | shardy: yup! what's up? | 16:06 |
| *** ifarkas has quit IRC | 16:07 | |
| shardy | andersonvom: Hey, I finally got back to looking at Unscoped List Stacks | 16:07 |
| shardy | I have a question - with the changes to the stack_get, I think the change now affects all stack operations, not just listing | 16:07 |
| shardy | is that intended? | 16:08 |
| andersonvom | shardy: let me get context here. just a sec | 16:10 |
| *** ramishra has joined #heat | 16:11 | |
| shardy | andersonvom: I think EngineService._get_stack will call the DB API stack_get and be able to reference any stack, for any operation in any tenant | 16:12 |
| *** e0ne_ has quit IRC | 16:13 | |
| shardy | which seems a bit, uh, dangerous :) | 16:13 |
| *** jomara has joined #heat | 16:13 | |
| *** aignatov is now known as aignatov_ | 16:13 | |
| jomara | hello heat friends! i have an api question im hoping someone can help me with: trying to figure out the correct API call for changing a stack's template, rather than updating its parameters | 16:15 |
| andersonvom | shardy: hummm true. somehow I missed the check on L331 there as well. I'll update it and resubmit | 16:15 |
| andersonvom | shardy: oh... no | 16:15 |
| andersonvom | that's correct | 16:15 |
| andersonvom | shardy: tenant_safe effectively got replaced by context.is_service_admin | 16:16 |
| shardy | andersonvom: The problem is it's now applied globally rather than in a couple of places | 16:16 |
| andersonvom | shardy: so if you're not service_admin, you won't see the stack | 16:16 |
| jomara | (if the answer is, you still use stack update, but just with new template info, that is fine) | 16:17 |
| andersonvom | shardy: but if you're service admin and you can see the stack in a list, shouldn't you be able to retrieve this stack in other places as well? (e.g. show details) | 16:17 |
| *** ramishra has quit IRC | 16:18 | |
| *** ramishra_ has joined #heat | 16:18 | |
| andersonvom | shardy: IMO, it would be confusing to have access to it in a list, but not elsewhere | 16:18 |
| shardy | jomara: yup, just pass the modified template to stack update | 16:18 |
| shardy | andersonvom: until someone makes a typo and deletes the wrong stack or something | 16:18 |
| andersonvom | shardy: with great power, comes great responsibility | 16:18 |
| andersonvom | ;) | 16:19 |
| shardy | andersonvom: I thought it was going to be a limited audit typle thing like the count, not full superpowers | 16:19 |
| jomara | shardy: so if you're editing a stack template, youd expect JUST new parameters, but if you're choosing a new template, youd expect the new template URL and the set of new parameters in 1 call, correct? | 16:19 |
| shardy | andersonvom: Yeah, but there are no boundaries at all which is what worries me | 16:20 |
| shardy | jomara: You always have to pass the template and parameters, even if they've not changed | 16:20 |
| andersonvom | shardy: what would you say a sane boundary would be? | 16:20 |
| shardy | andersonvom: How about we just have everything scoped to a project, oh wait.. ;) | 16:21 |
| jomara | shardy: hrm, in the case of juts changing parameters (but keeping the same template), you dont know the original source of the template any more | 16:21 |
| tims | jomara: Heat currently doesn't notice or care whether you have just edited the existing template or chosen a new one complete | 16:21 |
| shardy | andersonvom: It's just that you're short circuiting keystone boundaries for everything, surely that can't be wise? | 16:22 |
| shardy | andersonvom: do you expect to modify the definition of customer stacks, without first creating a user in the appropriate tenant? | 16:22 |
| *** bvandenh has quit IRC | 16:23 | |
| shardy | jomara: You can retrieve the current template via heat template-show | 16:23 |
| jomara | shardy: is that actually the full template? that you can pass back to heat on an update? | 16:23 |
| shardy | jomara: should be, but if you specified a URL on create, the easiest thing is just to specify the same URL again | 16:24 |
| tims | jomara: but heat does not store that url for you, is the answer I think you are looking for | 16:24 |
| jomara | shardy: well, i'm trying to make it easier for the user | 16:24 |
| jomara | tims: right, i learned that last week :) i've added the 2-step process in horizon, but trying to figure out the API payload for the final step | 16:24 |
| jomara | which it sounds like is: if (no new URL present), resend entire template as template data | 16:25 |
| tims | jomara right, on stack update you have to dump the entire template to the user and then back to heat | 16:25 |
| jomara | kk | 16:25 |
| jomara | and just to confirm what we talked about last week, i added 2 new pages, the first lets you change the template, the second (if you dont click on the first one) just lets you modify parameters | 16:26 |
| tims | yep | 16:26 |
| jomara | great | 16:26 |
| tims | and if you change teh template you automatically are prompted to update parameters correct? | 16:26 |
| jomara | yup | 16:26 |
| tims | cool | 16:26 |
| jomara | just as if you launched a new one | 16:26 |
| jomara | do you guys have preferred phrasing for these two steps? | 16:27 |
| jomara | right now its, "reselect template" nad "update template parameters" | 16:27 |
| jomara | but if theres a more common nomenclature i can change it | 16:27 |
| *** ramishra_ has quit IRC | 16:27 | |
| tims | I've always referred to the first step as "edit template" | 16:27 |
| andersonvom | shardy: actually, we don't expect to modify the stacks at all, but rather just have access to the general status, so that if there's something that needs to be taken care of, a support person will provide assistance. so, I guess being able to list stacks would be enough. | 16:28 |
| *** nati_ueno has quit IRC | 16:28 | |
| shardy | andersonvom: I'm just thinking that will be way safer, and less open to abuse in the event an admins account gets hacked | 16:28 |
| andersonvom | shardy: agreed. I'll take a look into it again to so how to go about making sure only lists are possible | 16:29 |
| shardy | andersonvom: At least if you enforce tenant scoping (derived from the token) for all lifecycle operations, then the result of a compromised account is at worst one tenant | 16:30 |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Add personality files property to Server resource https://review.openstack.org/68685 | 16:31 |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Add privateIPv4 attribute to Server resource https://review.openstack.org/68686 | 16:31 |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Native Nova Server compatibility for Cloud Server https://review.openstack.org/58043 | 16:31 |
| openstackgerrit | Pablo Andres Fuente proposed a change to openstack/heat: HOT templates get_attr allows extra attributes https://review.openstack.org/67562 | 16:31 |
| andersonvom | shardy: could you elaborate on that a little bit more? not sure I follow you. | 16:31 |
| andersonvom | shardy: also, be right back. huddle time here. | 16:31 |
| jomara | tims: intuitively it seems that changing the parameters makes more sense as'edit template', but im not too picky | 16:32 |
| *** coolsvap is now known as coolsvap_away | 16:33 | |
| shardy | andersonvom: I'm saying there should be no global admin-ness for lifecycle and detailed introspection operations to limit the impact if an admin gets their account compromised | 16:34 |
| shardy | andersonvom: If you need admins to have that power, there should be a process whereby they can temporarily add themselves to a customer project, to obtain an approproately scoped token | 16:34 |
| shardy | andersonvom: I'm assuming that keystone bug #968696 will be fixed at some point when I'm saying that btw | 16:35 |
| *** coolsvap_away is now known as coolsvap | 16:35 | |
| *** coolsvap is now known as coolsvap_away | 16:37 | |
| *** arbylee has quit IRC | 16:49 | |
| *** anteaya has joined #heat | 16:49 | |
| anteaya | hi, this patch failed in the gate due to lack of disk space on the slave: https://review.openstack.org/#/c/68135/ | 16:49 |
| anteaya | fungi is looking into it now | 16:50 |
| anteaya | any data on how much disk space heat tests normally take to complete successfully in the gate? | 16:50 |
| *** pablosan has joined #heat | 16:54 | |
| therve | Well the tempest tests failed? Why would the problem be with the heat tests? | 16:55 |
| zaneb | therve: I think anteaya means the heat tests in tempest? | 16:56 |
| anteaya | this was the failing test http://logs.openstack.org/35/68135/1/gate/gate-tempest-dsvm-full/b17cdc5/ | 16:56 |
| anteaya | the problem was disk space, not enough of it | 16:56 |
| anteaya | we are trying to find out why | 16:56 |
| *** coolsvap_away is now known as coolsvap | 16:59 | |
| therve | zaneb, I meant that this run shouldn't have anything heat specific, AFAIU | 17:00 |
| *** jcru has quit IRC | 17:01 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 17:03 | |
| *** arbylee has joined #heat | 17:03 | |
| *** arbylee1 has joined #heat | 17:04 | |
| *** jcru has joined #heat | 17:06 | |
| *** pvaneck has joined #heat | 17:06 | |
| *** ifarkas has joined #heat | 17:06 | |
| *** arbylee has quit IRC | 17:08 | |
| shardy | anteaya: I believe that's https://bugs.launchpad.net/openstack-ci/+bug/1268732 | 17:13 |
| shardy | anteaya: I guess there is just a huge amount of log data to upload? | 17:13 |
| *** lsmola_ has quit IRC | 17:13 | |
| shardy | I don't think it's anything specific to the heat test, but could be wrong | 17:13 |
| anteaya | okay, yes it wasn't feeling heat specific per se, unless the space required to run heat tests had expanded compared to the space required to run other tests | 17:15 |
| *** randallburt has joined #heat | 17:15 | |
| *** randallburt has quit IRC | 17:15 | |
| *** randallburt has joined #heat | 17:15 | |
| anteaya | yeah, the tests succeeded and then the node went offline, looks like the same bug to me | 17:16 |
| sdake | up to 14 tempest tagged bugs - if folks want to get started with Heat implementing tempest support is valued :) | 17:26 |
| sdake | https://bugs.launchpad.net/heat/+bugs?field.tag=tempest | 17:26 |
| *** jistr has quit IRC | 17:28 | |
| randallburt | weighing in on https://review.openstack.org/#/c/63041/11 would be much appreciated if anyone has the time | 17:32 |
| openstackgerrit | calfonso proposed a change to openstack/heat-templates: Removing internal url and using epel 6 for heat-cfntools dependencies https://review.openstack.org/68700 | 17:34 |
| openstackgerrit | calfonso proposed a change to openstack/heat-templates: Use epel 6 for heat-cfntools dependencies https://review.openstack.org/68700 | 17:35 |
| *** pafuent has left #heat | 17:47 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add API support for stack preview https://review.openstack.org/68406 | 17:48 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add StackResource specific preview behavior https://review.openstack.org/68407 | 17:48 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add preview for LoadBalancer https://review.openstack.org/68412 | 17:48 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add engine preview stack with Template and Params https://review.openstack.org/65576 | 17:48 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add preview for NestedStack https://review.openstack.org/68408 | 17:48 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add preview for ResourceGroup https://review.openstack.org/68409 | 17:48 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add preview for InstanceGroup https://review.openstack.org/68410 | 17:48 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Add preview for TemplateResource https://review.openstack.org/68411 | 17:48 |
| *** aweiteka has quit IRC | 17:49 | |
| *** pafuent has joined #heat | 17:51 | |
| therve | So dsvm-full fails all the time now? | 17:54 |
| jasond | therve: might be https://bugs.launchpad.net/heat/+bug/1271190 | 17:55 |
| therve | Yes but 1268732 too | 17:56 |
| jasond | oh geez | 17:56 |
| *** jcru has quit IRC | 17:57 | |
| *** aweiteka has joined #heat | 18:00 | |
| *** derekh has quit IRC | 18:00 | |
| *** nati_ueno has joined #heat | 18:00 | |
| *** mkollaro has quit IRC | 18:02 | |
| *** aignatov_ is now known as aignatov | 18:02 | |
| *** SergeyLukjanov_ is now known as SergeyLukjanov | 18:06 | |
| *** harlowja_away is now known as harlowja | 18:10 | |
| shardy | I've just added all @heat-core to https://review.openstack.org/#/c/63041/ | 18:12 |
| shardy | would appreciate opinions if others have time to review | 18:13 |
| randallburt | shardy: thanks! appreciate the feedback and don't disagree per-se. Do you have opinions on the policy option? | 18:14 |
| randallburt | jasond: didn't I already review https://review.openstack.org/#/c/68685 in another life? | 18:14 |
| shardy | randallburt: Well the angle I have is that the only time it makes sense to defeat tenant scoping is if you want to do a "list" type operation for more than one tenant | 18:14 |
| shardy | randallburt: It makes no sense to me to allow e.g create stack with a token scoped to the wrong tenant | 18:15 |
| jasond | randallburt: yes. it was part of https://review.openstack.org/#/c/58043/ which you reviewed a while ago | 18:15 |
| shardy | or any of the other API operations related to a specific stack | 18:15 |
| shardy | randallburt: IMO anything else is just bound to come back and bite us | 18:15 |
| randallburt | shardy: sure, and the concern is valid IMO, but the issue with https://github.com/openstack/heat/blob/master/heat/engine/parser.py#L60 is a tricky one. | 18:15 |
| shardy | maybe I'm just being paranoid :) | 18:15 |
| randallburt | shardy: doesn't mean their not out to get you. | 18:16 |
| shardy | haha | 18:16 |
| randallburt | s/their/they're | 18:16 |
| therve | Well, if you see something in a list, being able to do a get with one of the item is not super crazy | 18:16 |
| shardy | therve: Yeah, until an admin has their account hacked then every customer in the entire cloud is comprimised | 18:17 |
| randallburt | therve, shardy: agreed, I'm suggesting that we explicitly forbid stack-create, stack-delete, and stack-update to admins in the default policy file. If service providers want to mess with that, they are taking that risk. | 18:17 |
| randallburt | and only because of the linked code above, really. | 18:17 |
| shardy | randallburt: Ok, that goes some way to calming my nerves ;) | 18:18 |
| therve | randallburt, Well you need admin to do autoscaling today, so that's not yet possible | 18:18 |
| shardy | randallburt: I had imagined this would just be a top-level list feature, where the admin would be required to get an appropriately scoped token to do anything else with the stack | 18:18 |
| shardy | maybe events would also be valid | 18:18 |
| therve | shardy, But then you're against the feature altogether? | 18:18 |
| *** yogesh has joined #heat | 18:19 | |
| randallburt | shardy: yup, but the timestamp code in parser makes it a litte difficult to do in a clean way | 18:19 |
| shardy | but stack-show/resource-show should be limited due to the possibility of exposing sensitive metadata | 18:19 |
| therve | (I hate that timestamp code. Super inefficient too) | 18:19 |
| shardy | therve: well I've not been super happy about it since it was proposed, but I've been working hard with andersonvom to find a mutually agreeable solution :) | 18:20 |
| randallburt | shardy: true, but I think there's a bigger issue there as well. IIRC, we'd discussed at one point being able to show/hide sensitive data on stack-show, resource-show and the like. | 18:20 |
| randallburt | shardy: and that is much appreciated. I image you have keystone nightmares these days. | 18:20 |
| andersonvom | shardy: quite some nice chats about it! ;) | 18:20 |
| randallburt | s/image/imagine damn I can't type today. | 18:21 |
| shardy | therve: hence asking for more -core feedback, if it's just me with the problem, I'll shut up :) | 18:21 |
| shardy | randallburt/andersonvom: going back to my temporary group membership comment, do you envisage a workflow like that in future? | 18:21 |
| randallburt | therve: re autoscale, but those actions take place as the tenant or under a trust, yes? | 18:22 |
| therve | Security is har | 18:22 |
| therve | jard even | 18:22 |
| shardy | I'm thinking like powerbroker or something for sysadmins in datacentres | 18:22 |
| therve | randallburt, Hum, I guess | 18:22 |
| shardy | nobody deploys production infrastrucure with global admins | 18:22 |
| therve | I'm not sure what's the state of admin in keystone | 18:22 |
| therve | Is it tenant-scoped? | 18:22 |
| shardy | therve: no, but it should be: | 18:22 |
| shardy | https://bugs.launchpad.net/keystone/+bug/968696 | 18:23 |
| shardy | So any assumptions we make must be that admin is not global | 18:23 |
| therve | That smells like a 3 years old bug | 18:23 |
| shardy | (which is good practice anyway) | 18:23 |
| therve | Only 2 \o/ | 18:23 |
| radix | therve: hooray | 18:23 |
| randallburt | shardy: absolutely. that's why I wasn't going to argue too hard, save that timestamp code issue. ideally yes, you could handle the ts issue effectively and limit infra-changing actions via trusts/impersonation/temporary project membership, w/e | 18:23 |
| *** coolsvap has quit IRC | 18:23 | |
| randallburt | unfortunately, that's not the world we live in atm. :( | 18:23 |
| shardy | therve: the reason keystone have failed to fix it is because too many projects are still making the kind of assumptions I'm trying to avoid here | 18:24 |
| shardy | So if they fix it, everyone breaks | 18:24 |
| randallburt | loverly | 18:24 |
| *** coolsvap has joined #heat | 18:24 | |
| *** tspatzier has quit IRC | 18:25 | |
| SpamapS | Hrm | 18:26 |
| SpamapS | I was going to work on update retrying today.. | 18:26 |
| SpamapS | but maybe it is time to attack some gate blocking bugs | 18:26 |
| randallburt | but then you took an arrow to the knee? | 18:26 |
| shardy | randallburt: Hey yes, trusts are a far better solution for the temporary impersonation | 18:27 |
| * shardy wonders why he didn't think of that | 18:27 | |
| shardy | trusts overload | 18:27 |
| randallburt | lol. trusts = the new silver bullet. | 18:28 |
| shardy | randallburt: Ok, well I'm about to sign off for the day, happy to continue discussions tomorrow though | 18:29 |
| randallburt | shardy: sounds good. thanks and have a good evening. | 18:30 |
| *** jdag has joined #heat | 18:30 | |
| *** rpothier_ has joined #heat | 18:31 | |
| *** rpothier has quit IRC | 18:34 | |
| *** shardy is now known as shardy_afk | 18:35 | |
| *** akuznetsov has quit IRC | 18:52 | |
| *** spzala has quit IRC | 18:55 | |
| *** jprovazn_ has quit IRC | 19:03 | |
| *** pvaneckw has joined #heat | 19:03 | |
| *** pvaneck has quit IRC | 19:03 | |
| *** jcru has joined #heat | 19:13 | |
| *** ruhe is now known as _ruhe | 19:19 | |
| *** aignatov is now known as aignatov_ | 19:20 | |
| *** e0ne has joined #heat | 19:22 | |
| *** tsmadds has quit IRC | 19:23 | |
| *** harlowja is now known as harlowja_away | 19:31 | |
| *** tims1 has joined #heat | 19:32 | |
| *** tims has quit IRC | 19:33 | |
| openstackgerrit | Jason Dunsmore proposed a change to openstack/heat: Allow an in-progress stack to be deleted https://review.openstack.org/63002 | 19:40 |
| *** arbylee has joined #heat | 19:43 | |
| *** arbylee has joined #heat | 19:43 | |
| *** arbylee1 has quit IRC | 19:44 | |
| radix | are there any stack create or update timeouts? | 19:45 |
| *** amrit has joined #heat | 19:50 | |
| jasond | radix: 60 minutes | 19:50 |
| radix | is that hardcoded somewhere? I can't find anything in the config file | 19:51 |
| jasond | https://github.com/openstack/heat/blob/master/heat/engine/parser.py#L71 | 19:51 |
| radix | thanks | 19:51 |
| radix | hmm, so it's per-stack but there's no way to set it from a template or a config or anything, right? | 19:52 |
| *** gokrokve has joined #heat | 19:52 | |
| jasond | radix: i don't think so | 19:53 |
| radix | ok | 19:53 |
| *** mattgriffin has quit IRC | 19:53 | |
| *** kfox1111 has joined #heat | 19:54 | |
| randallburt | radix: you can set it at create time via the create call, but IIRC there's nowhere to set the default | 19:54 |
| kfox1111 | Any plans to allow IAM users to have additional roles be added? | 19:55 |
| radix | randallburt: oh, so the API does expose it? | 19:55 |
| radix | that's cool | 19:55 |
| kfox1111 | I'm trying to figure out how Barbican would work together with heat templates. | 19:56 |
| *** gokrokve has quit IRC | 19:58 | |
| *** harlowja_away is now known as harlowja | 19:59 | |
| *** ativelkov has joined #heat | 20:01 | |
| *** pvaneck has joined #heat | 20:12 | |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Add force_resource_mapping option https://review.openstack.org/68746 | 20:12 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Move Rackspace resources into a resources folder https://review.openstack.org/68747 | 20:12 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Rename docker-plugin to docker_plugin https://review.openstack.org/68748 | 20:12 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Allow force registration of docker resource https://review.openstack.org/68749 | 20:12 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Change Docker resource mapping name https://review.openstack.org/68750 | 20:12 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Generate docs for contrib plugins https://review.openstack.org/68751 | 20:12 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Rename rackspace.rst to contrib.rst https://review.openstack.org/68752 | 20:12 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Add Docker resources to docs https://review.openstack.org/68753 | 20:12 |
| *** pvaneckw has quit IRC | 20:14 | |
| *** gokrokve has joined #heat | 20:14 | |
| *** tsmadds has joined #heat | 20:19 | |
| *** andrew_plunk has joined #heat | 20:20 | |
| *** pvaneck has quit IRC | 20:21 | |
| *** pvaneck has joined #heat | 20:22 | |
| *** tsmadds has quit IRC | 20:24 | |
| *** SergeyLukjanov is now known as SergeyLukjanov_ | 20:28 | |
| *** ifarkas has quit IRC | 20:28 | |
| *** aignatov_ is now known as aignatov | 20:29 | |
| *** pafuent has left #heat | 20:39 | |
| *** pafuent has joined #heat | 20:39 | |
| *** coolsvap is now known as coolsvap_away | 20:44 | |
| *** ifarkas has joined #heat | 20:54 | |
| *** tsmadds has joined #heat | 20:56 | |
| *** coolsvap_away has quit IRC | 20:56 | |
| *** tsmadds has quit IRC | 21:00 | |
| *** kebray_ has joined #heat | 21:09 | |
| *** ifarkas has quit IRC | 21:18 | |
| *** pafuent has left #heat | 21:22 | |
| *** alexpilotti has quit IRC | 21:25 | |
| *** alexpilotti has joined #heat | 21:26 | |
| *** e0ne has quit IRC | 21:27 | |
| openstackgerrit | A change was merged to openstack/heat: Document Heat terms in glossary.rst https://review.openstack.org/64314 | 21:28 |
| *** alexpilotti has quit IRC | 21:30 | |
| *** vijendar has quit IRC | 21:31 | |
| *** spzala has joined #heat | 21:32 | |
| *** giulivo has quit IRC | 21:33 | |
| *** jasond` has joined #heat | 21:36 | |
| *** asalkeld has quit IRC | 21:50 | |
| *** jdob has quit IRC | 21:56 | |
| *** tsmadds has joined #heat | 21:57 | |
| *** asalkeld has joined #heat | 21:58 | |
| *** edmund1 has joined #heat | 21:58 | |
| *** tsmadds has quit IRC | 22:01 | |
| *** tango has joined #heat | 22:06 | |
| *** tango has quit IRC | 22:08 | |
| *** tango has joined #heat | 22:08 | |
| *** sms has joined #heat | 22:10 | |
| *** sms has quit IRC | 22:15 | |
| *** radez is now known as radez_g0n3 | 22:16 | |
| *** sgordon has quit IRC | 22:17 | |
| *** blomquisg has quit IRC | 22:18 | |
| *** jcru has quit IRC | 22:18 | |
| *** nati_ueno has quit IRC | 22:21 | |
| *** slong has quit IRC | 22:29 | |
| *** rpothier_ has quit IRC | 22:29 | |
| openstackgerrit | Randall Burt proposed a change to openstack/heat: Rackspace Cloud Networks resource https://review.openstack.org/68790 | 22:30 |
| openstackgerrit | Randall Burt proposed a change to openstack/heat: Refactor CLB to work with groups https://review.openstack.org/65586 | 22:32 |
| *** tsmadds has joined #heat | 22:32 | |
| *** aweiteka has quit IRC | 22:32 | |
| *** jasond` has quit IRC | 22:33 | |
| *** tsmadds has quit IRC | 22:37 | |
| stevebaker | SpamapS, zaneb, could you please take a look at the discussion in https://review.openstack.org/#/c/63215/ ? | 22:41 |
| SpamapS | stevebaker: reading | 22:45 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Add Rackspace resources summary to docs https://review.openstack.org/68793 | 22:48 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Add Docker resources to docs https://review.openstack.org/68753 | 22:48 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Rename rackspace.rst to contrib.rst https://review.openstack.org/68752 | 22:48 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Add force_resource_mapping option https://review.openstack.org/68746 | 22:48 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Move Rackspace resources into a resources folder https://review.openstack.org/68747 | 22:48 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Reorganize docker-plugin for consistency https://review.openstack.org/68748 | 22:48 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Allow force registration of docker resource https://review.openstack.org/68749 | 22:48 |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Change Docker resource mapping name https://review.openstack.org/68750 | 22:48 |
| *** jasond` has joined #heat | 22:48 | |
| openstackgerrit | Richard Lee proposed a change to openstack/heat: Generate docs for contrib plugins https://review.openstack.org/68751 | 22:48 |
| *** arbylee has quit IRC | 22:53 | |
| openstackgerrit | Randall Burt proposed a change to openstack/heat: Rackspace Cloud Networks resource https://review.openstack.org/68790 | 23:08 |
| *** andrew_plunk has quit IRC | 23:08 | |
| *** tims1 has quit IRC | 23:10 | |
| *** achampion has quit IRC | 23:11 | |
| *** aignatov is now known as aignatov_ | 23:12 | |
| *** dims has quit IRC | 23:15 | |
| SpamapS | stevebaker: posted my thoughts on the multipart mime thing (and +2'd.. looks really good actually) | 23:17 |
| stevebaker | SpamapS: cool, thanks | 23:17 |
| *** yogesh has quit IRC | 23:18 | |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Move X-Auth-Url logic to auth_url middleware https://review.openstack.org/68800 | 23:22 |
| openstackgerrit | Anderson Mesquita proposed a change to openstack/heat: Assign X-Auth-Url header in a separate middleware https://review.openstack.org/60991 | 23:22 |
| *** andersonvom has quit IRC | 23:25 | |
| *** dims has joined #heat | 23:30 | |
| SpamapS | stevebaker: is there anything else I can do to help hot software config move forward? | 23:33 |
| *** tsmadds has joined #heat | 23:33 | |
| stevebaker | SpamapS: reviews reviews reviews | 23:33 |
| kfox1111 | so I made some progress. heat + AWS::CloudWatch::Alarm was broken because /etc/heat/environment.d was badly permissioned. | 23:36 |
| kfox1111 | Now I'm getting this though: Resource create failed: StackValidationFailed: Property error : latency_watcher: Property Dimensions not assigned | 23:37 |
| *** tsmadds has quit IRC | 23:37 | |
| stevebaker | SpamapS: https://review.openstack.org/#/q/topic:bp/cloud-init-resource,n,z https://review.openstack.org/#/q/topic:bp/hot-software-config-rest,n,z https://review.openstack.org/#/q/topic:bp/get-file,n,z | 23:37 |
| *** erkules has quit IRC | 23:39 | |
| stevebaker | SpamapS: I did a pseudo-port of some tripleo templates just to see what they look like. When they sort of make sense I'll get some feedback | 23:39 |
| *** erkules has joined #heat | 23:40 | |
| kfox1111 | stevebaker: sweet. | 23:40 |
| SpamapS | stevebaker: great! The idea is, of course, to never have to use merge.py again. :) | 23:40 |
| stevebaker | kfox1111: We should return a more helpful error for /etc/heat/environment.d/ permissions issues | 23:42 |
| kfox1111 | yeah. Would have saved me a few hours. :/ | 23:43 |
| kfox1111 | I also ran into this: https://bugs.launchpad.net/heat/+bug/1272114 | 23:43 |
| kfox1111 | I'm so close to something working I think... | 23:43 |
| kfox1111 | ugg... I think this is a heat bug... AWS::ElasticLoadBalancing::LoadBalancer is creating an alarm all by itself, and doesn't look like its setting a Dimentions property. | 23:46 |
| kfox1111 | Wait... Does AWS::ElasticLoadBalancing::LoadBalancer use Neutron Lbaas? | 23:50 |
| kfox1111 | its looking like its creating its own vm with haproxy. :/ | 23:52 |
| openstackgerrit | Clint "SpamapS" Byrum proposed a change to openstack/heat: Retry failed create on update https://review.openstack.org/62936 | 23:53 |
| kfox1111 | Should I file AWS::ElasticLoadBalancing::LoadBalancer not using neutron lbaas as a blueprint or a bug? | 23:55 |
| *** andersonvom has joined #heat | 23:55 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!