Thursday, 2014-03-06

*** blamar has quit IRC00:03
*** Fin1te has joined #heat00:04
*** dims has joined #heat00:11
*** cody-somerville has quit IRC00:12
*** alexpilotti has quit IRC00:19
*** randallburt has quit IRC00:21
*** giulivo has quit IRC00:25
*** packet has quit IRC00:26
*** Fin1te has quit IRC00:27
*** ZZpablosan is now known as pablosan00:37
*** lindsayk1 has quit IRC00:37
*** pvaneck has left #heat00:38
*** Fin1te has joined #heat00:40
*** openstackgerrit has joined #heat00:40
*** lindsayk has joined #heat00:47
*** shakayumi has joined #heat00:48
*** Fin1te has quit IRC00:48
*** derekh has quit IRC00:49
*** wchrisj has quit IRC00:49
*** jdob has quit IRC00:49
*** wchrisj has joined #heat00:50
*** jprovazn has quit IRC00:50
*** randallburt has joined #heat00:52
*** slagle has quit IRC00:53
*** fandi has quit IRC00:54
*** blomquisg has quit IRC00:57
*** randallburt has quit IRC00:59
*** tomek_adamczewsk has quit IRC01:02
* zaneb needs to eat01:02
* asalkeld needs to write some code01:03
zanebo/01:03
asalkeldSlower, where is the source for image factory?01:03
Slowerasalkeld: http://imgfac.org/01:04
asalkeldhttps://github.com/redhat-imaging/imagefactory01:04
asalkeldSlower, what is the state of it?01:04
asalkeldactive/?01:05
Slowerwell, I know it was very active maybe 1.5yrs ago01:05
Slower:)01:05
Slowerwhen we were depending on it01:05
openstackgerritA change was merged to openstack/heat: Fixup uuid stubbing in test_stack_user.py  https://review.openstack.org/7792001:05
SlowerI haven't used it in a long while01:05
*** spzala has quit IRC01:05
asalkeldok01:06
Slowerasalkeld: there were several RH people on it at the time01:06
asalkeldpart of the problem is the input01:06
asalkeldbut maybe we could hack that01:07
Slowerimcleod was one of the main guys01:07
stevebakerasalkeld: I would really prefer dib elements to an XML definition file01:07
SlowerI see he is still making changes01:07
asalkeldstevebaker, we also need to support heroku apps01:07
asalkeldand it needs to be fast01:07
SlowerI bet if it looked like it could work you could talk to imcleod and see about a different front end01:07
asalkeldk, I'll take a look - thanks Slower01:08
Slowerhe was good to work with01:08
asalkeldSlower, was this a tool (cli) or service?01:08
*** tango has quit IRC01:08
asalkeldlooks like a tool01:09
SlowerI think it was both01:09
SlowerI was involved with it directly01:09
*** andersonvom has quit IRC01:09
SlowerI was doing the backend scheduling part01:09
asalkeldok01:09
Slowers/was/wasn't/01:10
Slowerheh01:10
SlowerI wasn't involved with it directly01:10
*** fandi has joined #heat01:10
*** blomquisg has joined #heat01:11
*** andersonvom has joined #heat01:15
*** pablosan has quit IRC01:17
openstackgerritA change was merged to openstack/heat: heat_keystoneclient add legacy fallback path  https://review.openstack.org/7831001:18
*** IlyaE has quit IRC01:20
*** andersonvom has quit IRC01:20
asalkeldSlower, where is imcleod based? what channel might I find him?01:21
stevebakerasalkeld: as an aside, I'm pretty sure he was in HK attempting to convince glance or nova to home an image building service01:22
asalkeldyeah, I know01:22
asalkeldthe problem is need. we need this01:22
asalkeldnot sure if any one really needed it01:22
*** fandi has quit IRC01:22
*** slagle has joined #heat01:26
sdakeasalkeld re image factory, i don't think that will fit your needs for openstack01:27
asalkeldyeah, but it's worth having a look at01:27
sdakeasalkeld IMO you either want to use something like virt-builder which is fast, or roll your own daemon01:27
asalkeldthe fail of imgfac is the one input01:28
sdakeatm ian is focused on buidling images without customization01:28
asalkeldthat's no good01:28
sdakeif you want customization I'd check out virt-builder01:28
asalkeldwe only want customization01:29
sdakepart of guestfs01:29
asalkeldk01:29
sdakethere is a tool in my github showing how to use it01:29
asalkeldwe are using guestfs now01:29
sdakevirt-builder takes 2 minutes to customize an image, whereas loading a dib inside a vm takes 20 minutes01:29
*** Tross has joined #heat01:29
sdakeif your using guestfs to customize images, just use virt builder and wrap a rest api around it01:29
sdakevirt-builder is a wrapper around guestfs that is more sanitary01:30
asalkeldok01:30
sdakeusing guestfish directly is a pita01:30
asalkeldhttps://github.com/sdake/heat-dib/01:30
asalkeldthat ^?01:30
sdakeheat-vb01:30
sdakeheat-dib is DIBin a nova server using heat01:30
openstackgerritSteven Dake proposed a change to openstack/heat: Migrate to oslo.messaging from oslo-incubator rpc  https://review.openstack.org/7279801:31
openstackgerritSteven Dake proposed a change to openstack/heat: Update config generator for oslo.messaging  https://review.openstack.org/7747201:31
openstackgerritSteven Dake proposed a change to openstack/heat: Decorate StackNotFound exceptions for a variety of RPC calls  https://review.openstack.org/7810101:31
stevebakerSpamapS: fallback has landed https://review.openstack.org/#/c/78310/01:32
*** jprovazn has joined #heat01:33
*** arbylee has quit IRC01:33
SpamapSstevebaker: thank you we've been staring at it for hours and now we're running around like crazy people trying to get our CI spun back up ;)01:35
*** nosnos has joined #heat01:35
*** randallburt has joined #heat01:38
*** randallburt has quit IRC01:39
*** randallburt has joined #heat01:39
*** funzo has quit IRC01:39
*** funzo has joined #heat01:40
*** stevebaker has quit IRC01:40
*** stevebaker has joined #heat01:40
*** funzo has quit IRC01:43
*** funzo has joined #heat01:44
*** funzo has quit IRC01:44
*** funzo has joined #heat01:44
*** liang has quit IRC01:45
*** tomek_adamczewsk has joined #heat01:50
*** liang has joined #heat01:51
*** gokrokve has joined #heat01:53
*** rwsu has quit IRC01:54
*** harlowja has quit IRC01:58
*** arbylee has joined #heat01:59
*** lindsayk has quit IRC01:59
*** fandi has joined #heat02:02
*** arbylee has quit IRC02:03
*** andersonvom has joined #heat02:03
*** harlowja has joined #heat02:04
stevebakerSpamapS: are you going to run with stack_user_domain unset for now?02:05
*** erkules_ has joined #heat02:12
randallburtstevebaker:  should I hold off on +A for stuff like https://review.openstack.org/#/c/77755/?02:13
*** slagle has quit IRC02:14
stevebakerrandallburt: that can go in, we're assuming we have an FFE for these blueprints https://launchpad.net/heat/+milestone/icehouse-rc102:14
randallburtstevebaker:  rgr that. thanks!02:14
*** erkules has quit IRC02:14
*** liang has quit IRC02:15
*** david-lyle has joined #heat02:20
*** liang has joined #heat02:22
*** chandan_kumar has joined #heat02:22
*** nati_uen_ has quit IRC02:27
*** IlyaE has joined #heat02:27
*** bada_ has joined #heat02:28
*** bada has quit IRC02:28
*** jprovazn has quit IRC02:30
*** randallburt has quit IRC02:39
*** bada has joined #heat02:50
*** bada_ has quit IRC02:52
*** chandan_kumar has quit IRC02:59
*** funzo has quit IRC03:02
openstackgerritSteve Baker proposed a change to openstack/heat: Use stack ID to create domain project name  https://review.openstack.org/7850303:02
*** stevebaker has quit IRC03:02
*** stevebaker has joined #heat03:02
*** gokrokve_ has joined #heat03:04
*** funzo has joined #heat03:04
*** stevebaker has quit IRC03:05
*** stevebaker has joined #heat03:05
*** gokrokve has quit IRC03:08
*** ramishra has joined #heat03:09
*** renlt has joined #heat03:11
openstackgerritA change was merged to openstack/heat: Move HOT parameters code to a separate module  https://review.openstack.org/7775203:18
*** IlyaE has quit IRC03:19
*** wchrisj has quit IRC03:21
*** samstav has quit IRC03:31
*** samstav has joined #heat03:32
*** samstav_ has joined #heat03:34
*** andrew_plunk has joined #heat03:34
andrew_plunkhello everyone03:34
*** wchrisj has joined #heat03:35
andrew_plunkdoes anyone get a KeyError when trying to use a provider template?03:35
*** samstav has quit IRC03:37
*** stevebaker has quit IRC03:38
*** stevebaker has joined #heat03:38
*** stevebaker has quit IRC03:42
*** stevebaker has joined #heat03:42
*** stevebaker has quit IRC03:42
*** stevebaker has joined #heat03:43
openstackgerritZhang Yang proposed a change to openstack/heat: Add state check when suspend or resume stack  https://review.openstack.org/7615503:43
*** rcleere has joined #heat03:44
*** liang has quit IRC03:48
*** liang has joined #heat03:49
*** tomek_adamczewsk has quit IRC03:50
*** tomek_adamczewsk has joined #heat03:52
*** alexheneveld has quit IRC03:53
*** pablosan has joined #heat03:55
*** bada has quit IRC04:00
*** mojorison has joined #heat04:00
openstackgerritAndrew Plunk proposed a change to openstack/heat: KeyError generated when using a provider template  https://review.openstack.org/7851404:14
*** wchrisj has quit IRC04:15
*** ramishra has quit IRC04:17
*** stevebaker has quit IRC04:27
*** stevebaker has joined #heat04:27
*** asalkeld has quit IRC04:28
*** funzo_ has joined #heat04:32
*** funzo has quit IRC04:34
*** bvandenh has joined #heat04:41
*** stevebaker has quit IRC04:47
*** stevebaker has joined #heat04:47
*** harlowja is now known as harlowja_away04:49
*** ramishra has joined #heat04:57
*** ramishra has quit IRC05:01
*** harlowja_away is now known as harlowja05:02
openstackgerritSteven Dake proposed a change to openstack/heat: Migrate to oslo.messaging from oslo-incubator rpc  https://review.openstack.org/7279805:06
openstackgerritSteven Dake proposed a change to openstack/heat: Update config generator for oslo.messaging  https://review.openstack.org/7747205:06
sdake_config generator working now05:06
sdake_boy that sucked to rewrite05:06
*** wchrisj has joined #heat05:07
*** cfriesen_ has quit IRC05:10
*** ramishra has joined #heat05:15
*** nkhare has joined #heat05:21
*** nati_ueno has joined #heat05:22
*** nkhare_ has joined #heat05:26
*** cmyster has joined #heat05:32
*** cmyster has joined #heat05:32
cmystermorning05:33
*** nkhare_ has quit IRC05:37
*** wchrisj has quit IRC05:44
*** jprovazn has joined #heat05:49
*** erkules_ is now known as erkules05:55
*** chandan_kumar has joined #heat06:04
*** gokrokve_ has quit IRC06:04
*** gokrokve has joined #heat06:04
*** pablosan has quit IRC06:04
*** samstav_ has quit IRC06:04
*** gokrokve has quit IRC06:08
openstackgerritJenkins proposed a change to openstack/heat: Imported Translations from Transifex  https://review.openstack.org/7256606:09
*** topol has joined #heat06:10
*** yogesh has joined #heat06:13
*** gokrokve has joined #heat06:15
*** nati_uen_ has joined #heat06:21
*** nati_ueno has quit IRC06:24
*** topol has quit IRC06:27
*** skraynev_afk is now known as skraynev06:30
skraynevMorning all06:30
skraynevliang: are you around?06:31
*** jprovazn has quit IRC06:41
*** yogesh has quit IRC06:49
*** amritanshu_RnD has joined #heat06:49
*** amritanshu_RnD is now known as Guest4631606:50
*** andrew_plunk has quit IRC06:53
*** harlowja is now known as harlowja_away06:59
openstackgerritSteven Dake proposed a change to openstack/heat: Migrate to oslo.messaging from oslo-incubator rpc  https://review.openstack.org/7279807:06
openstackgerritSteven Dake proposed a change to openstack/heat: Update config generator for oslo.messaging  https://review.openstack.org/7747207:06
*** asalkeld has joined #heat07:09
sdake_asalkeld I rewrote the generator at https://review.openstack.org/7747207:10
sdake_mind having a look?07:10
asalkeldok07:10
asalkeldso sdake_ did you get it into oslo?07:11
openstackgerritSergey Kraynev proposed a change to openstack/heat: Fix resolving for Ref function  https://review.openstack.org/7792307:12
sdake_asalkeld no07:12
asalkeldso what part is different?07:12
sdake_generator.py07:12
sdake_i plan to submit to oslo-incubator in the morning07:12
asalkeldI'd suggest getting it into oslo first07:12
sdake_but right now our generator in master is broken and nonfunctional07:13
sdake_and I'm not waiting for an oslo-incubator review cycle to get it fixed07:14
asalkeldyikes serious reordering07:14
asalkeld(is the sample)07:14
sdake_it orders alphabetically07:14
sdake_first by default then by group07:14
sdake_in each section, by option name07:14
sdake_tbh I dont even know how check_uptodate is working in master - it makes no sense07:16
sdake_because generate_sample makes something completely different, then check_uptodate doens't work07:16
*** yogesh has joined #heat07:17
asalkeldsdake_ put it up for review on oslo in the mean while07:18
asalkeldyou might get good feedback07:18
asalkeldbeer o clock here07:18
sdake_ya midnight here07:19
sdake_not happening tonight07:19
asalkeldnot feeling smart07:19
*** harlowja_away has quit IRC07:21
*** saju_m has joined #heat07:22
cmystersdake_: I see you are still working while asleep :)07:42
*** ifarkas has joined #heat07:44
*** lsmola has joined #heat07:47
*** Akshik has joined #heat07:49
therveGood morning07:49
cmystermorning07:51
*** ramishra has quit IRC07:52
*** gokrokve has quit IRC08:00
*** gokrokve has joined #heat08:00
*** gokrokve has quit IRC08:04
*** saju_m has quit IRC08:06
*** e0ne has joined #heat08:10
*** jistr has joined #heat08:15
*** saju_m has joined #heat08:19
*** yogesh has quit IRC08:19
*** shakayumi has quit IRC08:21
*** ramishra has joined #heat08:22
*** saju_m has quit IRC08:24
*** ramishra has quit IRC08:28
*** ramishra has joined #heat08:28
*** openstackgerrit has quit IRC08:34
*** openstackgerrit has joined #heat08:34
*** liang has quit IRC08:36
*** saju_m has joined #heat08:36
*** Guest46316 has quit IRC08:36
*** liang has joined #heat08:37
*** Guest46316 has joined #heat08:39
*** gokrokve has joined #heat08:43
*** gokrokve_ has joined #heat08:45
*** gokrokve has quit IRC08:47
*** gokrokve_ has quit IRC08:49
*** tomek_adamczewsk has quit IRC08:52
*** giulivo has joined #heat08:59
*** killer_prince has quit IRC09:01
*** dteselkin has quit IRC09:03
*** sergmelikyan has quit IRC09:04
*** dteselkin has joined #heat09:07
*** tomek_adamczewsk has joined #heat09:12
*** saju_m has quit IRC09:12
*** giulivo has quit IRC09:13
*** bada has joined #heat09:14
shardymorning all09:16
*** alexheneveld has joined #heat09:16
*** giulivo has joined #heat09:17
*** mkerrin has quit IRC09:18
*** mkerrin has joined #heat09:19
*** renlt has quit IRC09:24
pshchelomorning09:27
*** ramishra has quit IRC09:34
openstackgerritPavlo Shchelokovskyy proposed a change to openstack/heat: Fix start_with_acquired_lock - pass kwargs to func  https://review.openstack.org/7625109:34
*** ramishra has joined #heat09:35
openstackgerritPavlo Shchelokovskyy proposed a change to openstack/heat: Add unit tests for ThreadGroupManager  https://review.openstack.org/7828609:36
*** tspatzier has joined #heat09:37
*** ramishra has quit IRC09:45
*** gokrokve has joined #heat09:45
*** ramishra has joined #heat09:48
*** gokrokve has quit IRC09:50
*** tomek_adamczewsk has quit IRC09:51
*** killer_p- has joined #heat09:53
*** killer_p- is now known as killer_prince09:54
openstackgerritSteven Hardy proposed a change to openstack/heat: heat_keystoneclient don't pass project and trust_id  https://review.openstack.org/7856209:54
shardytherve: ^^09:55
therveCool looking09:55
*** tspatzier has quit IRC09:55
*** tomek_adamczewsk has joined #heat09:57
*** jamieh has joined #heat09:57
*** saju_m has joined #heat09:59
therveshardy, BTW I created https://blueprints.launchpad.net/ceilometer/+spec/trust-alarm-notifier10:05
openstackgerritPavlo Shchelokovskyy proposed a change to openstack/heat: Order imports in alphabetical order (1/9)  https://review.openstack.org/7151110:05
therveJ plan obviously10:05
shardytherve: Nice, thanks!10:06
shardytherve: perhaps we can work on an associated wiki page describing how it works now and how we'd like it to work10:06
shardyI wonder about the url encoding thing, maybe easier to just add some arguments to the ceilometerclient interface/API10:07
shardyI guess that will be up to the ceilometer folks to decide10:07
*** blomquisg has quit IRC10:08
therveYeah10:09
therveshardy, The API is just an URL for now unfortunately10:09
therveIf we just need a user, I thought that we can try to fit everything in10:10
shardytherve: Yeah, I guess it would work but my personal preference would be to just add some fields if that's acceptable to the ceilometer team10:11
shardyWe can discuss when we get there I suppose :)10:11
shardytherve: we probably need to discuss with asalkeld and/or eglynn10:12
therveSure10:12
*** jistr has quit IRC10:13
*** jamieh has quit IRC10:14
*** jamieh has joined #heat10:15
*** dmakogon_ is now known as denis_makogon10:18
*** giulivo has quit IRC10:20
*** blomquisg has joined #heat10:21
*** giulivo has joined #heat10:31
*** ramishra has quit IRC10:34
*** bvandenh has quit IRC10:36
*** jistr has joined #heat10:37
*** ramishra has joined #heat10:39
*** gokrokve has joined #heat10:45
*** saju_m has quit IRC10:46
*** gokrokve has quit IRC10:50
*** bvandenh has joined #heat11:03
*** saju_m has joined #heat11:03
*** nkhare has quit IRC11:16
*** gokrokve has joined #heat11:45
lsmolashardy: hello, do you have a minute?11:48
*** gokrokve has quit IRC11:49
*** e0ne_ has joined #heat11:51
*** e0ne has quit IRC11:51
*** fandi has quit IRC11:52
*** ramishra has quit IRC11:55
*** blomquisg has quit IRC12:00
*** sgordon_ has quit IRC12:00
*** nkhare has joined #heat12:15
*** Akshik has quit IRC12:15
*** ramishra has joined #heat12:16
*** bvandenh has quit IRC12:18
*** mkollaro has joined #heat12:19
*** bada has quit IRC12:21
*** tspatzier has joined #heat12:23
*** giulivo has quit IRC12:27
*** giulivo has joined #heat12:29
cmysterquiestion, I made a simple stack (fooling around with tempest) and the end result is OK (I think) http://paste.openstack.org/show/72768/12:42
cmysterNow heat stack-list returns empty12:43
thervezaneb, In https://review.openstack.org/#/c/76261/ you meant heat.engine.parameters?12:43
*** tspatzier has quit IRC12:43
*** gokrokve has joined #heat12:45
openstackgerritThomas Herve proposed a change to openstack/heat: Fix HOT set_stack_id  https://review.openstack.org/7626112:48
*** gokrokve has quit IRC12:49
*** rpothier has quit IRC12:52
*** nkhare has quit IRC12:53
shardylsmola: hi!12:54
shardysorry was just grabbing lunch12:54
cmysterlunch++12:54
lsmolashardy: np12:54
lsmolashardy: I wanted to ask about the way that heat talks to scheduler12:54
shardycmyster: are you sure you're doing heat stack-list as the same user/tenant as the test?12:55
cmysteryes12:55
cmysteradmin both12:55
lsmolashardy: is it possible to send some parameters? like custom filters?12:55
shardycmyster: 69ca344914ac40b2b2c66735915a9c09==admin, definitely?12:55
shardycmyster: I can't think of any other reason why heat stack-list wouldn't show the stack12:56
shardylsmola: You mean scheduler hints?12:56
lsmolashardy: and does heat talks to scheduler for every node separately? or it sends a bulk of instances to be created?12:56
lsmolashardy: http://docs.openstack.org/developer/nova/devref/filter_scheduler.html12:56
cmysterunless its a false positive. I'm restarting the machine for something completly different and will try to reproduce and give more info12:56
lsmolashardy: not sure what are scheduler hints, though I saw is somewhere :-)12:56
shardylsmola: we create the instances one by one, but you can send scheduler hints via a resource property12:57
lsmolashardy: ok, will checkout scheduler hints12:58
shardylsmola: yes, I believe that doc is referring to scheduler hints, which you can pass e.g via scheduler_hints to OS::Nova::Server12:58
shardylsmola: last time I looked the nova group-scheduling functionality didn't exist (although it has been discussed for over a year), so we don't create instances in batches12:59
shardylsmola: if that functionality has now landed in nova, we could consider moving to using it in J12:59
openstackgerritA change was merged to openstack/heat: heat_keystoneclient add delete_stack_domain_user_keypair  https://review.openstack.org/7192913:06
*** rbuilta has joined #heat13:07
*** david-lyle has quit IRC13:10
lsmolashardy: not sure, but the doc I pasted talks about group scheduling and registering of virtual resoruces, etc13:12
lsmolashardy:  So I guess it is there :-)13:13
*** sgordon has joined #heat13:13
shardylsmola: do you have a link to the nova API docs for group scheduling?13:13
shardyI've not follwed the latest developments tbh13:13
lsmolashardy: no, I just read it here http://docs.openstack.org/developer/nova/devref/filter_scheduler.html13:13
lsmolashardy: ' it virtually consumes resources on it, so subsequent selections can adjust accordingly'13:15
lsmolashardy: 'In the end Filter Scheduler sorts selected hosts by their weight and provisions instances on them.'13:15
lsmolashardy: this sounds to me like provisioning of group of instances13:16
shardyhttps://blueprints.launchpad.net/nova/+spec/instance-group-api-extension13:16
lsmolashardy: right? :-)13:16
shardyThat says delayed until Juno13:16
shardyhttps://blueprints.launchpad.net/nova/+spec/vm-ensembles13:16
shardy"Support for scheduler hints for VM groups"13:16
lsmolashardy: ah, ok13:16
shardyhttps://review.openstack.org/#/c/21070/13:17
shardylsmola: You may have to research the nova stuff a bit, but if you encounter functionality you can't access via scheduler hints please raise a heat bug/blueprint and we'll add it to heat13:17
lsmolashardy: ok so sheduler_hints is a way to pass the data to the existing filters, right?13:18
*** dims has quit IRC13:18
shardylsmola: that is my understanding, yes13:18
lsmolashardy: ok, good to know13:19
*** dims has joined #heat13:19
lsmolashardy: it was this sentence that brought my attention13:19
lsmolashardy: 'The RamFilter, ComputeFilter, and MyFilter are used by default when no filters are specified in the request.'13:19
shardyI guess the default filters just try to specify sane settings so instances get placed on a compute node with sufficient resources13:21
shardytbh, we're at the limit of my knowledge on filters here, you may want to ask russellb or one of the other nova guys :)13:21
*** jistr has quit IRC13:21
lsmolashardy: ok13:22
lsmolashardy: my original question was that only way for us is to define the filters in nova.conf, right?13:22
lsmolashardy: cause the possibility of defining other filters per request made me wonder whether we do it :-)13:23
shardylsmola: heat by default specifies no hints, but you can specify whatever hints you like in the template13:23
lsmolashardy: ok, cool, will look into this more, thanks13:24
*** rbuilta has quit IRC13:25
*** rbuilta has joined #heat13:25
*** saju_m has quit IRC13:27
*** rpothier has joined #heat13:29
*** blomquisg has joined #heat13:29
ramishrashardy: Hello13:33
ramishrashardy: If you havee sometime to spare, I have a few questions.. however, they can wait if you are busy13:34
russellbyes, can't do it by request13:35
russellbonly via config (the list of filters)13:35
shardyrussellb: aha, thanks for the clarification :)13:36
shardyramishra: hi, sure13:36
russellbnp13:37
ramishrashardy: regarding https://bugs.launchpad.net/heat/+bug/1286128, Its requires change in quite a few resources and breaks many of the tests, I would like split them to one patch per resource..13:37
ramishrashardy: does that sound good?13:38
lsmolarussellb: ok, so it always takes the list of filters from nova.conf? (or default)13:38
russellbyes13:38
shardyramishra: sure, but can you not do the network_id lookup in prepare_properties?13:39
russellbassuming the filter scheduler is in use13:39
russellb:)13:39
russellbbut it probably is.13:39
lsmolarussellb: ok, the docs got me little confused :-)13:39
shardyramishra: thanks for picking that up btw, I was going to look at it later :)13:39
ramishrasure: but this requires much more changes, we have to keep both network_id, and network as properties (backward compatibility).. then they can not be 'required'. so we have to add a validation in validate_properties13:42
*** e0ne has joined #heat13:42
shardyramishra: I was thinking we'd just support passing either the name or an ID via the network_id property13:42
shardythe _id suffix is unfortunate but I'm not sure what we gain by duplicating everything13:43
shardymaybe when we sort out versioned resources we can clean it up in a future resource version13:43
shardyramishra: maybe discuss with stevebaker, but that is my opinion fwiw13:43
pscheie_I am trying to recreate a stack in a UPDATE_FAILED state for testing purposes.13:43
pscheie_I have an existing stack for this.  I removed an instance (Resource) from the heat template, along with its InstanceType from the AllowedValues list in Parameters.13:45
*** gokrokve has joined #heat13:45
pscheie_Updated the stack, and that instance disappeared from the stack.  So far, so good13:45
ramishrashardy: yeah.. I'll speak to him... he has sugested we do it for subnet too.. there are other places network is directly referenced other than prepare_properties..13:45
cmystershardy: my bad, the username was OK, the tenant id was not.13:46
ramishrashardy: example add_dependencies in some of the resources..13:46
pscheie_Then I added the instance back in the Resources in the template but did not add its InstanceType in the AllowedValues list.13:46
*** e0ne_ has quit IRC13:46
shardyramishra: Ok, cool, well IMO adding the ability to lookup *_id by name should be OK if we just document "name or id" in the properties schema description13:46
pscheie_This was to simulate what happened earlier with a stack that ended up in UPDATE_FAILED state.13:46
cmyster./quit13:47
cmysteryes that happened13:47
shardywith the benefit of hindsight, we should not have used the _id suffix, but nvm13:47
*** cmyster has quit IRC13:47
pscheie_However, when I updated my test stack, the instance did come back up and with an InstanceType that is not in the AllowedValues list.13:47
ramishrashardy: anyway, will speak to stevebaker... one more thing.. if you have sometime can you please review https://review.openstack.org/#/c/77084/7 ?13:47
pscheie_I think this is a bug (right?), since an instance should not be able to use a InstanceType that is not in the AllowedValues list, should it?13:48
pscheie_It's not a big deal, I suppose, but doesn't seem to work as it should.13:49
shardyramishra: looks like you have a comment related to usage of constants to address13:49
ramishrashardy: already done that13:49
*** gokrokve has quit IRC13:49
shardypscheie_: please raise a bug with details of the reproduce procedure13:50
shardyramishra: Oh right, sorry13:50
*** jistr has joined #heat13:52
*** ramishra has quit IRC13:53
*** andersonvom has quit IRC13:56
*** zns has joined #heat14:01
*** jasond has joined #heat14:19
*** aweiteka has joined #heat14:25
*** funzo_ is now known as funzo14:33
*** cfriesen_ has joined #heat14:33
openstackgerritSteven Hardy proposed a change to openstack/heat: Add user_creds_delete to the DB API  https://review.openstack.org/7693014:34
openstackgerritSteven Hardy proposed a change to openstack/heat: Delete user_creds on stack delete  https://review.openstack.org/7693114:34
openstackgerritSteven Hardy proposed a change to openstack/heat: Make user_creds_id a parser.Stack attribute  https://review.openstack.org/7692814:34
openstackgerritSteven Hardy proposed a change to openstack/heat: fix DB API user_creds_get for non-existent ID  https://review.openstack.org/7692914:34
*** wchrisj has joined #heat14:35
*** e0ne has quit IRC14:37
*** e0ne has joined #heat14:37
*** jmckind has joined #heat14:38
*** andersonvom has joined #heat14:39
*** ramishra has joined #heat14:41
*** mkollaro has quit IRC14:41
ramishrashardy: hello14:42
*** andersonvom has quit IRC14:43
*** andersonvom has joined #heat14:43
shardyramishra: hi14:43
ramishrashardy: regarding your comment about constants, there is no subnet_id in _VIP_KEYS14:43
openstackgerritCyril Roelandt proposed a change to openstack/python-heatclient: Python3: fix test_stack_list_with_args()  https://review.openstack.org/7861914:44
ramishrashardy: it's 'subnet' only..14:45
*** gokrokve has joined #heat14:45
*** andersonvom has quit IRC14:47
ramishrashardy: Also I've put a comment regarding 1-2-1 mapping not existing in many places between properties and neutron client json14:47
*** andersonvom has joined #heat14:48
*** arbylee has joined #heat14:48
*** gokrokve has quit IRC14:49
shardyramishra: Hmm, OK I see what you mean, it just looks a little odd14:52
*** samstav has joined #heat14:52
ramishrashardy: here I have used subnet so that they can use id or name, inline with bug/128612814:52
shardyramishra: Yup, Ok, removed my objection, thanks for clarifying14:53
ramishrashardy: thanx14:54
*** nosnos has quit IRC14:55
*** jprovazn has joined #heat14:56
*** radez_g0n3 is now known as radez15:00
*** mkollaro has joined #heat15:00
*** topol has joined #heat15:01
*** shakayumi has joined #heat15:01
*** gokrokve has joined #heat15:02
*** vijendar has joined #heat15:02
*** aweiteka has quit IRC15:03
*** zns has quit IRC15:08
*** sabeen has joined #heat15:10
*** denis_makogon has quit IRC15:10
openstackgerritTomas Sedovic proposed a change to openstack/heat: Fix AccessPolicy update with added resources  https://review.openstack.org/7862415:11
*** DaveJ__ has joined #heat15:17
shardyshadower: Hey, commented on that - won't that get stuck if one of the resources in the list ref's the AccessPolicy?15:18
*** liang has quit IRC15:18
*** aweiteka has joined #heat15:20
openstackgerritZane Bitter proposed a change to openstack/heat: Make template formats pluggable  https://review.openstack.org/7775515:22
openstackgerritZane Bitter proposed a change to openstack/heat: Add an InvalidTemplateVersion exception  https://review.openstack.org/7775415:22
openstackgerritZane Bitter proposed a change to openstack/heat: Move HOT template code to its own module  https://review.openstack.org/7775315:22
shadowershardy: hm, I don't know enough about the timing and the dependencies to say if it creates a loop or not (can test it though!). How does the validate thing work? Can you point me to an example?15:22
*** Guest46316 has quit IRC15:22
shadowersounds like it would make more sense (if validate is a static rather than a runtime check)15:23
shardyhttps://github.com/openstack/heat/blob/master/heat/engine/resources/server.py#L55115:24
shardyshadower: It seems like just adding the check to a validate() method like that would solve the issue, then we basically have nothing to do on create15:24
shardyAnd would have the advantage of making things failing early if the user makes a typo in the resource list15:25
shardys/failing/fail15:25
shadowershardy: thanks. When are the validations being invoked? When we parse the template?15:25
shardyhttps://github.com/openstack/heat/blob/master/heat/engine/service.py#L50215:26
shardySo AFAICS it should be validated in the context of the complete new updated stack template15:26
shardywhich, I think, is what you want15:26
shadoweryeah, seems that's perfect for this15:27
shadowerthanks15:27
shardyI added zaneb to the review as he has lots of recent experience with the update implementation and may have other suggestions15:27
* zaneb looks15:27
shadowermuch appreciated15:27
zanebthe short answer is that AccessPolicy is completely and utterly broken15:30
shadowerlol15:31
*** david-lyle has joined #heat15:35
*** rcleere has quit IRC15:46
zanebshadower: btw if you are suggesting that you will revert https://github.com/openstack/heat/commit/5e8414425cf78240977093ba98f48e9c0406cae1 then I'd really rather you didn't15:46
shadowerzaneb: not necessarily revert but maybe replace __set__ with something clearer? Right now `stack['res'] = myres` modifies myres which is quite hard to spot15:48
shadowerif we have to mutate a resource when adding it to a stack (it seems we do), then something like stack.addopt('res', myres) would be more explicit15:49
zanebI guess15:49
therveThose things being mapping is really confusing and useless15:50
zanebmy thinking was it's a backref, so it needs to be updated when you assign it to a new object15:50
shardySpamapS, slagle: Hi, is all good in tripleo-land since that fallback hack landed?15:50
therveshadower, Frankly that doesn't make a big difference15:51
shadowerzaneb: yea I get that. But it's really unexpected to see a dict/array assignment operator to mutate the right-hand value15:51
shadowertherve: it's a bit more explicit that  a mutation can occur there. But I agree15:51
* shadower should probably just be more distrustful of any operator since it can be overridden15:52
therveradix, So I was thinking that the Server+LBMember is a really common usecase. What would you think of having a template resource shipped in Heat for that15:53
shadowerzaneb: so what do you suggest? Should I fix this using validation (just tried it, works fine) and file bug/blueprint for fixing AccessPolicy in general? Or drop this patch and try and fix AccessPolicy now?15:57
zanebI'm inclined toward the former15:58
shadowercool15:58
zanebas much as I'd like to drive a stake through the current AccessPolicy15:59
shardylol15:59
zanebbut definitely file a bug for fixing it15:59
openstackgerritTomas Sedovic proposed a change to openstack/heat: Fix AccessPolicy update with added resources  https://review.openstack.org/7862415:59
shadowerupdated ^15:59
shadowerzaneb: so other than this implicit dependency-but-not-really thing, anything else wrong with AccessPolicy?16:00
zanebyes, the whole idea is flawed from the ground up16:01
zanebhttp://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-policy.html16:01
sdakemorning16:01
zanebthat's what it's supposed to be a replacement for ^16:01
shardyzaneb: well, to be fair, it's an ancient hack placeholder resource, which was supposed to be a precursor for a "proper" implementation, which never happened16:02
zanebshardy: with your latest work, implementing that might even be feasible now16:02
zaneb?16:02
shardyI take responsibility, I'd delete it if folks weren't using it already16:02
shardyzaneb: Possibly, yes16:03
shardythen we could deprecate the old broken resource and replace it with something else16:03
zaneb+116:03
shardyI'll add it to my list of things to look into ;)16:03
zanebyeah, none of us had any idea what we were doing back then ;)16:03
shardy+1 ;)16:04
zanebat that stage I don't think Fn::GetAttr even added a dependency16:04
*** aweiteka has quit IRC16:05
*** randallburt has joined #heat16:05
*** randallburt has joined #heat16:05
shadowershardy: what's the "latest work" that could help replacing AccessPolicy?16:10
sdakehey guys, oslo.messaging has been granted an FFE, but only if it hits the repo by tuesday of next week16:11
shardyshadower: the fact that heat actually supports policy enforcement at the API level now, and that we have control of the role assignments for users associated with the AccessPolicy16:11
sdakeI need a day or two to address reviewer comments16:11
sdakecan I get some folks to review the patch?16:11
randallburtsdake:  sure.16:11
sdakehttps://review.openstack.org/#/c/72798/16:11
randallburtshardy:  and I'll try and make time to look at those patches from the ML today too16:12
jasondsdake: is there a trick to getting the unit tests running on that patch?16:12
sdake./run_tests.sh ?16:13
sdakeprevious versions didnt' have working tests16:13
*** chandan_kumar has quit IRC16:13
sdakebut they should allbe good now except for about 6 or 7 test cases which arec commented out16:13
sdakeI plan to tackle that  today16:13
sdakethe pep8 check is failing because of an odd sslutils change in oslo.config - i  think my version is different then the gate16:14
sdakeI'll address soon16:14
sdakejasond one trick, need to have a specific version of oslo.messaging - not master16:15
sdakeI think 1.3.0a7 does it16:16
jasondsdake: ah, maybe that's it.  tox is printing a blob of junk16:16
*** ifarkas has quit IRC16:16
openstackgerritAaron Weitekamp proposed a change to openstack/heat-templates: Fix parameter constraints syntax  https://review.openstack.org/7800516:17
*** aweiteka has joined #heat16:17
sdake1.3.0a4 is what is in the gate I think16:17
openstackgerritSteven Dake proposed a change to openstack/heat: Migrate to oslo.messaging from oslo-incubator rpc  https://review.openstack.org/7279816:19
sdakethis should fix the pep8 gate problem16:19
*** tomek_adamczewsk has quit IRC16:19
sdakejasond, I just double checked my oslo.messaging in devstack - I am on master branch16:20
sdaketry git pulling it16:20
jasondsdake: actually, i didn't even have oslo.messaging installed.  whoops.  it works now with the version in requirements.txt.  thanks16:22
sdakenot sure how you got nova working :)16:23
sdakeI don't have oslo.messaging installed at all16:24
sdakeit justruns from /opt/stack16:24
jasondoh, this is not on a devstack server16:24
sdakeoh I see16:24
*** pshchelo has quit IRC16:26
*** tspatzier has joined #heat16:26
openstackgerritAaron Weitekamp proposed a change to openstack/heat-templates: Fix parameter constraints syntax  https://review.openstack.org/7800516:30
openstackgerritCyril Roelandt proposed a change to openstack/python-heatclient: Python 3: decode bytes before feeding them to jsonutils.loads()  https://review.openstack.org/7865216:30
*** jprovazn has quit IRC16:32
radixtherve: I guess I don't mind one way or another16:33
radixtherve: about Server+LBMember16:33
therveradix, What's the other way? :)16:33
radixtherve: having it or not :)16:33
therveradix, So you hate our users is what you're saying16:34
therve:)16:34
radixI'm a pretty spiteful person16:34
*** coolsvap has joined #heat16:34
therveI guess I'll ask stevebaker. The "nice" is that it's not a code change, we can just add a template16:35
shadowerzaneb, shardy: something like this? https://blueprints.launchpad.net/heat/+spec/replace-accesspolicy16:37
zanebshadower: +116:38
shardyshadower: Looks good, although the actual requirement seems to be resource granularity access control rather the API action level RBAC16:38
shardyI guess we can work out the details when we implement it, but I personally am not all that excited about implementing the AWS resource16:39
*** killer_prince is now known as lazy_prince16:40
shardyperhaps we should create a linked wiki page and start collecting use-cases for a native resource, which might be backed by the keystone policy API16:41
shadowershardy: right. I didn't want to suggest that we have to reimplement AWS here. Just that AccessPolicy should go and be replaced by something better16:41
shardyshadower: yup, sounds good16:42
shadowershardy: instead of the API level policy sentence, how about: "Heat now supports role-based access control on the resource level which can be utilised here."16:42
*** mkollaro has quit IRC16:42
shadower(if I understood you correctly)16:42
openstackgerritCyril Roelandt proposed a change to openstack/python-heatclient: Python 3: decode bytes before feeding them to jsonutils.loads()  https://review.openstack.org/7865216:43
shardyshadower: that's not quite correct - AccessPolicy is the only resource-granularity access control, the API policy enforcement is currently only enforcing API actions not the content of the request16:44
shadowerI see16:44
*** mkollaro has joined #heat16:44
shardyWe'd have to consider how a new resource-access-policy resource might be implemented, perhaps we would overload the API policy enforcement based on the request path instead of doing it in the engine16:45
shardycertainly more of the pieces needed are there than when AccessPolicy was created :)16:45
*** dims has quit IRC16:45
shadowershardy: okay, how about I just remove that sentence from the blueprint. As you said, we'll need to collect use cases and come up with the right design16:46
*** ttx has joined #heat16:46
shardyshadower: Sounds good16:46
shadowercool16:46
ttxHi guys. Shall tag icehouse-3 from the milestone-proposed branch anytime soon. Scream now if you have a big tag blocker16:46
shardyshadower: I'll give it some thought, but if you could create a related wiki page with details of how/why you use the current AccessPolicy that would be a good start16:46
shadowershardy: have to drop off now but I can do it tomorrow16:47
ttxnothing was added to https://launchpad.net/heat/+milestone/icehouse-3 so I assume you have none :)16:47
shardyshadower: k o/16:47
shadowersee y'all16:47
*** bgorski has joined #heat16:48
shardyttx: we might want to backport https://bugs.launchpad.net/heat/+bug/128798016:48
shardyttx: that was a blocker for tripleo and as such marked as critical16:48
ttxshardy: i can include it if you backport it now... remember the drill ?16:49
shardyttx: yup, will do16:49
* ttx glances at the zuul queue16:49
ttx2 hours deep, not too bad if we push it in now16:49
*** pablosan has joined #heat16:51
*** packet has joined #heat16:53
*** pablosan has quit IRC16:53
*** mkollaro has quit IRC16:53
*** pablosan has joined #heat16:54
shardyttx: https://review.openstack.org/7867016:55
*** gokrokve has quit IRC16:55
*** jmckind has quit IRC16:55
ttxshardy: +2/APRVd16:56
shardyttx: thanks!16:56
*** bada has joined #heat16:56
*** lazy_prince is now known as killer_prince17:00
*** killer_prince is now known as lazy_prince17:00
*** dims has joined #heat17:00
*** harlowja has joined #heat17:02
zanebjasond: in theory you should probably remove +A on https://review.openstack.org/#/c/77754/ until the check jobs have passed17:02
*** andrew_plunk has joined #heat17:02
*** andrew_plunk has quit IRC17:02
jasondzaneb: forgot about that.  done.  thanks17:02
*** rcleere has joined #heat17:03
*** pvaneck has joined #heat17:03
*** mwheckmann has joined #heat17:04
*** bada has quit IRC17:05
*** jdob has joined #heat17:07
*** rwsu has joined #heat17:08
*** mkollaro has joined #heat17:09
*** e0ne has quit IRC17:13
*** derekh has joined #heat17:13
SpamapSshardy: yes the fallback thing helped. Please don't call it a hack. Making upgrades go smoothly is not a hack.17:16
SpamapSstannie: yes we will be running without stack_user_domain until we can get together the right incantations to start using openstackclient without breaking everything else.17:17
SpamapSstannie: sorry..17:17
SpamapSstevebaker: yes we will be running without stack_user_domain until we can get together the right incantations to start using openstackclient without breaking everything else.17:17
*** piousbox has quit IRC17:17
SpamapSSomething that proved extremely difficult.17:17
shardySpamapS: I was referring to the nature of the implementation, which I was unhappy with, but I'm glad it helped17:17
*** sdake_ has quit IRC17:18
shardySpamapS: have you tried using tools/create_heat_domain instead?17:19
mwheckmannHi all. I have a question about the InstanceUsers changes that got merged a few days ago17:19
shardymwheckmann: Hi17:19
mwheckmannIn particular, my understanding is that the admin role is no longer required to create these users because they will be created by the heat service user. Is this correct?17:20
mwheckmannhi17:20
SpamapSshardy: no that didn't exist yesterday. Has it made it through the gate?17:20
shardymwheckmann: not quite, they are created by the user specified in heat.conf under stack_domain_admin17:21
*** jprovazn has joined #heat17:21
shardymwheckmann: that user should be a domain admin, i.e have the admin role in the domain ID specified in stack_user_domain in heat.conf17:21
mwheckmannok.17:21
mwheckmanngot it. So this really requires a tweak Keystone policy.json?17:22
shardythen yes, the heat users will no longer require admin role to create any heat resources17:22
shardymwheckmann: It shouldn't, no17:22
mwheckmannok... hmm I'll have to look at that.17:22
shardymwheckmann: If you want, you can give the heat service user domain-admin privileges and use the same credentials as are in [keystone_authtoken]17:23
shardyIt is probably preferable to have two separate users though17:23
mwheckmannshardy: ok.17:23
mwheckmannsecond question: for those of us that need to use Autoscaling, IAM users, etc. today in Havana, is there any way to tweak the Keystone policy.json so that we can get away without having the admin role?17:24
shardymwheckmann: I just raised this which has links to all the related patches, may provide some useful context:17:24
shardyhttps://bugs.launchpad.net/puppet-heat/+bug/128888017:24
shardymwheckmann: obviously we need to get some documentation sorted around this for the Icehouse release notes, but not quite got to it yet17:25
shardymwheckmann: basically no, unless you tweak the policy to allow anyone to create/delete users, and assign roles17:26
shardythen they are essentially admin17:26
*** gokrokve has joined #heat17:26
*** nati_uen_ has quit IRC17:27
shardySpamapS: yup https://review.openstack.org/#/c/78048/17:27
openstackgerritA change was merged to openstack/heat: Revert "Showing member list for nested resources"  https://review.openstack.org/7836317:28
mwheckmannshardy: right. I'm wondering if there is a way to tweak the policy to make that safe. i.e they could only create users and grant them roles on their own project. Of course, the risk is that the admin role becomes global even if granted only on a specific project.17:28
shardymwheckmann: Something like that might be possible, but I've not tried it myself17:29
*** jamieh has quit IRC17:30
mwheckmannshardy: so as far as you know, there is no way to do autoscaling in Havana without being an admin?17:30
shardymwheckmann: no, unless as you say a policy can be implemented which enables non-admin users to create/delete users and assign the heat_stack_user role17:31
mwheckmannok. thanks!17:32
shardymwheckmann: unfortunately it's a known issue, which I've aimed to address via the instance-users work17:32
mwheckmannthird and last question: I'm trying to wrap my head around what API calls are done by the Instance users. i.e. What are they used for exactly? Just notifications/callbacks to the CFN API?17:33
SpamapSshardy: thanks.. we might indeed be able to use that to get around having to move everything to openstackclient17:34
*** jamieh_ has joined #heat17:35
shardymwheckmann: three things really, for signalling (WaitConditionHandle), for sending stats via cfn-push-stats, and for polling metadata (cfn-hup and the tripleo os-refresh-config)17:35
mwheckmannshardy: ok, that's what I thought. Nothing that creates actual metered resources.17:36
*** piousbox has joined #heat17:36
shardymwheckmann: well as you mention, we use the same signalling method for ScalingPolicy, so the credentials cab be used to cause an AutoScalingGroup to scale up17:36
shardymwheckmann: we're looking at other ways to do that:17:37
shardyhttps://blueprints.launchpad.net/ceilometer/+spec/trust-alarm-notifier17:37
mwheckmannshardy: but the actual creation of new instances would use the creds that were used to create the actual stack right?17:37
mwheckmannshardy: via trusts?17:38
openstackgerritA change was merged to openstack/heat: Fix resolving for Ref function  https://review.openstack.org/7792317:38
shardymwheckmann: Yes, exactly, either encrypted stored username/password or via the heat service user impersonating the stack owner via trusts (if you set deferred_auth_method=trusts in heat.conf)17:38
mwheckmannshardy: so in havana today, this works with deferred_auth_method=trusts?17:39
shardymwheckmann: as far as I know, yes17:39
*** jistr has quit IRC17:40
*** ramishra has quit IRC17:40
*** gokrokve_ has joined #heat17:40
mwheckmannshardy: for Icehouse if the scaling up were to be done with the InstanceUsers , this would mean that they would have to have a role on the Project that the stack was created with17:41
shardymwheckmann: no, the instance users are still just used for the signal, trusts or stored creds are still used to to the deferred operation associated with the signal17:42
mwheckmannshardy: right. makes sense17:42
shardyinstance users are just a way of having some credentials to put in the instnace, without putting the users identity in there17:42
mwheckmannshardy: the Instance users sends the signal which then gets interpreted by the engine which fires off an instance create usign the stored creds or trusts.17:43
shardymwheckmann: yes17:43
*** gokrokve has quit IRC17:43
openstackgerritA change was merged to openstack/heat: StackUser add suspend/resume support  https://review.openstack.org/7193017:44
openstackgerritA change was merged to openstack/heat: Add test for StackUser._create_keypair  https://review.openstack.org/7276117:44
shardymwheckmann: and the instance-users are denied access to all but a minimal subset of heat API actions, via the deny_stack_user in our policy.json17:44
mwheckmannshardy: thanks a lot. it clears things up for us. BTW, even with admin creds, we haven't been able to get the new style Ceilometer Autoscaling to work yet. Something about a missing "Dimension" parameter in the load balancer template.17:44
mwheckmannSome quick Googling doesn't turn up any leads. But I'll try again and come back with specifics if I still run into the problem.17:45
*** rcleere has quit IRC17:46
shardymwheckmann: I seem to remember someone else was having issues a couple of days ago, maybe we have an issue with the example template17:47
shardyDaveJ__: ^^17:47
mwheckmannI think Dave is my colleague :)17:47
shardymwheckmann: Oh Ok, well maybe he can help as he and therve were discussing it recently :)17:48
DaveJ__Yep I got autoscaling working.17:48
mwheckmannok, so maybe not the same Dave as my Dave who was working on this...17:48
*** akuznetsov has quit IRC17:48
DaveJ__mwheckmann: Where do you work ?17:48
shardyDaveJ__: was there an error in the sample template?17:48
mwheckmannDaveJ__: If you worked at the same place as me, you would alredy know me :)17:49
DaveJ__shardy: I don't actually think the template was the issue, but in the end it turned out the scaling group doesn't need the tag.17:49
mwheckmannDaveJ__: yes, something about the "Dimension" parameter17:49
DaveJ__https://www.irccloud.com/pastebin/a142LSNm17:50
DaveJ__The corrosponding alarm should look like this:17:50
DaveJ__https://www.irccloud.com/pastebin/CcAGySSX17:50
mwheckmannDaveJ__: this is in the sample template?17:51
shardymwheckmann: also, if you're on havana, note https://github.com/openstack/heat/commit/4dc987ef17:52
DaveJ__mwheckmann: This is my own template.  The only difference is there was no need to include the Tag attribute with the scaling group, although I don't belive that would cause you an issue.17:52
DaveJ__My issue appeared to come from the fact the cpu metrics on Icehouse were being polled every 10min17:52
shardyhas not been backported, so you need to specify repeat_actions=true17:53
*** rcleere has joined #heat17:53
mwheckmannshardy: yup we already added that fix :)17:53
*** sdake_ has joined #heat17:53
*** rcleere has quit IRC17:53
DaveJ__mwheckmann: I changed /etc/ceilometer/pipeline.yaml on all my compute nodes and restarted the process.  After launching a new template ceilometer alarm-list could show data17:53
mwheckmannDaveJ__: I don't think we're having the same issue, but I'll keep that in mind.17:54
mwheckmannDaveJ__: what did you change the polling frequence to?17:54
mwheckmanns/frequence/frequency/17:54
DaveJ__https://www.irccloud.com/pastebin/9EYG8yUx17:54
DaveJ__That's specific to cpu metering.  What alarm/meter are you using ?17:55
*** yogesh has joined #heat17:55
*** rcleere has joined #heat17:55
mwheckmannthanks. I don't know if per minute polling will be required for us. CPU alarms are definitely working for us with 10 minute polling17:56
mwheckmannDaveJ__ / shardy: I'll re-test and come back with the exact error later on17:56
DaveJ__mwheckmann: I can share my complete template if you want.  You'll just need to replace the image and instances that I have selected17:58
mwheckmannDaveJ__: sure. I'd appreciate that. are you using the built in load balancer template as well?17:58
*** IlyaE has joined #heat17:59
DaveJ__mwheckmann: Nope - not yet, but I guess it should be easy to add that in.18:00
DaveJ__mwheckmann: Do you have multiple networks ?18:00
*** sballe has joined #heat18:01
mwheckmannDAveJ__: on the instances? no just one18:02
DaveJ__mwheckmann: I meant configured in your project - as if you have multiple you would need to specify which one the instances are connected to (just stripping out unnecessary parts from this template for you)18:02
*** sballe_ has joined #heat18:03
*** sballe has quit IRC18:04
*** sballe_ has quit IRC18:04
mwheckmannDAveJ__: no multiple networks18:04
*** sballe has joined #heat18:04
openstackgerritA change was merged to openstack/heat: Server secgroups and network/port together invalid  https://review.openstack.org/6905218:05
*** jmckind has joined #heat18:05
*** chandan_kumar has joined #heat18:07
*** nati_ueno has joined #heat18:09
*** yogesh_ has joined #heat18:12
DaveJ__https://www.irccloud.com/pastebin/y0m68xAZ18:12
*** tspatzier has quit IRC18:13
*** alexheneveld has quit IRC18:13
DaveJ__mwheckmann: ^^ you should just be able to launch that.  You'll need edit it to include a image that exists18:13
*** yogesh has quit IRC18:13
*** yogesh has joined #heat18:17
*** yogesh_ has quit IRC18:17
*** shakayumi has quit IRC18:18
*** pablosan is now known as ZZpablosan18:19
*** aweiteka has quit IRC18:19
mwheckmannDaveJ__: Thanks. I'm off to lunch, but will try when I get back.18:24
*** zns has joined #heat18:28
*** rpothier_ has joined #heat18:30
*** yogesh_ has joined #heat18:33
*** rpothier has quit IRC18:33
*** yogesh has quit IRC18:34
*** yogesh has joined #heat18:38
*** yogesh_ has quit IRC18:42
openstackgerritJason Dunsmore proposed a change to openstack/heat: Ensure that the NoCloud data source is loaded, part 2  https://review.openstack.org/7870418:42
*** alexheneveld has joined #heat18:42
openstackgerritDaneyon Hansen proposed a change to openstack/heat-templates: Changes Neutron Security Group Ports to Integers  https://review.openstack.org/7870518:42
*** coolsvap has quit IRC18:43
*** mkollaro has quit IRC18:47
*** arbylee has quit IRC18:51
*** tango has joined #heat18:53
*** dims has quit IRC19:00
*** tango|2 has joined #heat19:01
*** dims has joined #heat19:02
*** samstav_ has joined #heat19:03
*** samstav_ has quit IRC19:03
*** tango has quit IRC19:03
*** samstav_ has joined #heat19:04
*** zns has quit IRC19:04
openstackgerritDaneyon Hansen proposed a change to openstack/heat-templates: Fixes Neutron Security Rules for Mcollective Communication  https://review.openstack.org/7871219:05
sdake_jasond jasond` I need a bit of your brainpower for a moment re mocking delete_stack and its child stop_stack call19:05
sdake_specifically the test case test_stack_delete_other_engine_active_lock_failed19:06
jasondsdake_: sure, will take a look19:06
sdake_I've got about 7 test cases that need to be fixed and  they all need the same solution19:06
*** zns has joined #heat19:06
*** samstav has quit IRC19:06
sdake_call to rpc no longer takes a topic or version19:06
jasondsdake_: the commented out ones?19:06
sdake_instead to set the topic and version are set with a _prepare call which returns a new RPCClient context19:07
sdake_jasond yup19:07
sdake_eg _client.prepare(version=x, timeout=y, topic=z)19:07
sdake_client.prepare doesn't upate the existing client object, it returns an entirely new one19:08
sdake_jasond yup the commented out test cases19:08
*** samstav_ has quit IRC19:08
jasondsdake_: cool.  will let you know what i find19:09
*** samstav has joined #heat19:09
sdake_what I'm not sure how to do is write the test cases with tihs in mind19:09
sdake_steve baker recommended mocking out remote_stop and putting it in the main EngineEndpoints class19:09
sdake_however, this doesn't actually allow us to test that delete_stack works properly for remote cases19:10
jasondok, maybe i will understand his comment in a bit19:11
*** skraynev is now known as skraynev_afk19:11
*** alexpilotti has joined #heat19:13
*** alexpilotti has quit IRC19:15
openstackgerritCyril Roelandt proposed a change to openstack/python-heatclient: Olso: sync strutils  https://review.openstack.org/7871719:15
*** alexpilotti has joined #heat19:15
*** sballe has quit IRC19:17
jasondsdake_: i have a drs appt now.  will continue looking at it in a bit19:19
*** alexheneveld has quit IRC19:22
stevebakermorning19:23
stevebakershardy: did you see this? https://bugs.launchpad.net/heat/+bug/128852319:23
*** e0ne has joined #heat19:24
*** bada has joined #heat19:27
badaHi guys, when i deploy a instance with heat everythong works fine except the fact that i have no .ssh folder and so no keypair to connect to the instance. My template is based on https://github.com/openstack/heat-templates/blob/master/cfn/F18/WordPress_Single_Instance.template and i'm 100% sure of the keypair name. DO you know where to look at ?19:31
larsksbada: no .ssh folder...where19:34
larsks?19:34
larsksIn the instance that boots?19:35
badalarsks: On the instance. I created a user with UserData part and so log in with console after deploymen19:35
larsksBy default heat creates a ec2-user and the ssh key gets provisioned there.  Have you checked for that?19:36
badalarks:19:36
badalarks: thats exactly what i just checked19:37
badalarks: so how to deal with it ?19:37
sdake_look in /var/log/*cloud* and *heat*19:37
larsksOut of question, is your instance able to contact the metadata service?  That is, can you access http://169.254.169.254/latest/meta-data/ ?19:38
badalarsks: Yes. But should i just simply log with ec2-user ?19:39
*** e0ne has quit IRC19:39
larsksbada: Well, yes, if that's where the ssh key was provisioned.19:39
larsks...when you said you checked that, I thought you meant you tried logging in as ec2-user or had looked in the ec2-user home directory to see if the authorized_keys file was correct.19:39
*** e0ne has joined #heat19:39
badalarsks:yes i tested and it works19:40
badalarsks: is there a way to create and push the ssh key to another new user ?19:40
Sloweris there a way to pull a whole dependent set of patches out of gerrit easily?19:41
badalarsks : thank you !19:41
larsksbada: It is  possible to override the default user that heat uses...but I'm not sure how off the top of my head.  I just use ec2-user generally :).  sdake_ maybe knows?19:41
jpeelerit looks like it's the instance_user in heat.conf19:44
larsksjpeeler:  Thanks!19:44
mwheckmannDaveJ__: Your template works, just now testing to see if the scaling/alarms will work19:45
*** bgorski has quit IRC19:45
*** samstav has quit IRC19:46
*** mkollaro has joined #heat19:46
*** bada has quit IRC19:48
*** arbylee has joined #heat19:49
*** ZZpablosan is now known as pablosan19:50
*** samstav has joined #heat19:55
*** tango|2 has quit IRC19:55
*** lindsayk has joined #heat19:56
*** wchrisj_ has joined #heat19:57
*** samstav has quit IRC19:57
*** samstav has joined #heat19:59
*** rbuilta has quit IRC20:00
*** openstackgerrit has quit IRC20:00
*** openstackgerrit_ has joined #heat20:00
*** openstackgerrit_ is now known as openstackgerrit20:01
*** topol_ has joined #heat20:02
*** wchrisj__ has joined #heat20:02
*** jasond has quit IRC20:03
*** wchrisj_ has quit IRC20:03
*** tspatzier has joined #heat20:03
*** wchrisj has quit IRC20:03
*** harlowja has quit IRC20:03
*** harlowja has joined #heat20:04
*** topol has quit IRC20:05
*** topol_ is now known as topol20:05
Slowerstevebaker: do you have any templates you were using to test the hot software config stuff?20:09
stevebakerSlower: https://review.openstack.org/#/q/status:open+project:openstack/heat-templates+branch:master+topic:software_config,n,z but I'll be trying a different approach to the hooks soon20:10
Slowerstevebaker: ah, thanks20:15
*** tspatzier has quit IRC20:15
*** tspatzier has joined #heat20:16
*** tspatzier has quit IRC20:16
*** yidclare has joined #heat20:28
*** jasond has joined #heat20:28
*** samstav has quit IRC20:31
*** zns has quit IRC20:32
*** samstav has joined #heat20:32
*** zns has joined #heat20:34
*** jasond has quit IRC20:36
*** yogesh has quit IRC20:39
*** yidclare has quit IRC20:47
*** jasond has joined #heat20:48
*** e0ne has quit IRC20:56
*** e0ne has joined #heat20:57
*** pablosan is now known as ZZpablosan21:00
*** jamieh_ has quit IRC21:00
*** shakayumi has joined #heat21:01
*** radez is now known as radez_g0n321:01
*** ZZpablosan is now known as pablosan21:03
*** radez_g0n3 is now known as radez21:04
jasondsdake: are you there?21:05
jasondsdake_: ^21:06
ttxstevebaker: backport merged, i3 tag on its way21:06
stevebakerttx: \o/21:07
*** topol has quit IRC21:07
*** alexheneveld has joined #heat21:14
*** blamar has joined #heat21:14
sdakejasond shoot21:15
jasondsdake: hey, just commented on your oslo.messaging review21:16
openstackgerritRandall Burt proposed a change to openstack/heat: Add depends_on key to dependency resolution  https://review.openstack.org/7876921:18
openstackgerritZiad Sawalha proposed a change to openstack/heat: Update contrib docstrings to match guidelines  https://review.openstack.org/7307021:18
openstackgerritZiad Sawalha proposed a change to openstack/heat: Update api docstrings to match guidelines  https://review.openstack.org/7351521:19
*** asalkeld has quit IRC21:20
stevebakerttx: do we have to do an FFE email for each of the 4 blueprints we want?21:25
sdakejasond thanks I'll have a look after I finish up with my meetings21:28
openstackgerritZiad Sawalha proposed a change to openstack/heat: Update common docstrings to match guidelines  https://review.openstack.org/7351921:31
*** asalkeld has joined #heat21:32
*** yidclare has joined #heat21:38
jasondsdake: np21:39
*** yidclare has quit IRC21:41
*** blomquisg has quit IRC21:46
*** blamar has quit IRC21:52
*** blamar has joined #heat21:53
*** pablosan is now known as ZZpablosan21:53
*** tomek_adamczewsk has joined #heat21:54
*** yogesh has joined #heat21:58
openstackgerritA change was merged to openstack/heat: Allow getting attributes on suspended resources.  https://review.openstack.org/7745221:58
*** lindsayk1 has joined #heat21:59
*** lindsayk has quit IRC22:01
*** zns has quit IRC22:02
*** yidclare has joined #heat22:05
*** zns has joined #heat22:06
*** yogesh_ has joined #heat22:10
*** packet has quit IRC22:12
*** yogesh has quit IRC22:12
*** ZZpablosan is now known as pablosan22:14
*** zns has quit IRC22:14
*** tango has joined #heat22:15
*** jmckind has quit IRC22:16
*** tomek_adamczewsk has quit IRC22:21
*** tomek_adamczewsk has joined #heat22:22
*** dims has quit IRC22:28
*** sgordon has quit IRC22:28
*** dims has joined #heat22:42
*** krow has joined #heat22:45
krowSpamapS:  ping22:46
SpamapSkrow: PONG22:47
*** rpothier_ has quit IRC22:48
*** jasond has quit IRC22:50
*** zns has joined #heat22:55
*** lindsayk1 has quit IRC22:58
*** randallburt1 has joined #heat22:59
*** randallburt has quit IRC23:01
*** blamar has quit IRC23:01
*** randallburt1 has quit IRC23:02
*** randallburt has joined #heat23:02
*** krow has quit IRC23:03
*** vijendar has quit IRC23:04
*** lindsayk has joined #heat23:04
*** radez is now known as radez_g0n323:05
openstackgerritA change was merged to openstack/heat: Allow proper instance with volume suspension  https://review.openstack.org/7612623:07
piousboxhi #heat23:08
*** alexheneveld has quit IRC23:08
piousboxwhen heat deploys (in development, creating three sample slave nodes) it creates host-only networks inside virtualbox, correct?23:09
piousboxit does not create NAT or bridged networks? So, when using Fuel, my VMs are not supposed to have interfaced connected to them in NAT or bridged mode, correct?23:09
*** yidclare has quit IRC23:10
*** sabeen has quit IRC23:11
*** yidclare has joined #heat23:12
*** kfox1111 has joined #heat23:23
*** blamar has joined #heat23:24
kfox1111Got a problem:23:24
kfox1111WARNING heat.engine.resources.volume [-] Detaching Volume 4ab9478a-c623-403c-aab0-88da40e4b12b from Instance e4d844f3-5462-4def-b66e-0aa3bd034f26 - The resource could not be found. (HTTP 404) (Request-ID: req-52891e40-b3fc-462f-abc9-97531ef0ddb2)23:24
kfox1111then seems stuck.23:24
*** krow has joined #heat23:24
kfox1111any ideas?23:25
*** e0ne_ has joined #heat23:26
*** e0ne has quit IRC23:28
*** tomek_adamczewsk has quit IRC23:33
*** lindsayk has quit IRC23:34
*** lindsayk has joined #heat23:34
*** tomek_adamczewsk has joined #heat23:35
*** wusWWW has joined #heat23:35
*** e0ne_ has quit IRC23:37
*** giulivo has quit IRC23:41
piousbox<kfox1111>: I cannot delete some of my volumes either23:41
*** arbylee has quit IRC23:42
*** andersonvom has quit IRC23:44
*** rcleere has quit IRC23:46
openstackgerritA change was merged to openstack/heat: Fix AccessPolicy update with added resources  https://review.openstack.org/7862423:48
*** arbylee has joined #heat23:50
*** arbylee has quit IRC23:54
*** alexpilotti has quit IRC23:54
*** mwheckmann has quit IRC23:55
*** jdob has quit IRC23:56
SpamapSpiousbox: um, heat and virtualbox aren't two things that I think do anything together.23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!