Thursday, 2015-02-19

*** pm90_ has joined #heat00:01
*** randallburt has quit IRC00:02
*** Marga_ has quit IRC00:05
*** Marga_ has joined #heat00:05
*** Tango has quit IRC00:06
*** Tango has joined #heat00:06
*** alexheneveld has quit IRC00:07
BillArnoldIs there a way for an admin to delete stacks created under another tenant?00:08
*** Tango has quit IRC00:09
*** pm90_ has quit IRC00:19
*** pm90_ has joined #heat00:21
asalkeldBillArnold: i think stack look ups are filtered by tenant00:21
asalkeldlet me check00:21
asalkeldhttps://github.com/openstack/heat/blob/master/heat/engine/service.py#L41000:22
asalkeldhttps://github.com/openstack/heat/blob/master/heat/db/sqlalchemy/api.py#L31000:24
asalkeldBillArnold: i think "no" is the answer00:25
openstackgerritSteve Baker proposed openstack/heat: Deployment signal_transport: TEMP_URL_SIGNAL  https://review.openstack.org/15152600:25
openstackgerritSteve Baker proposed openstack/heat: Integration test for software-config tools  https://review.openstack.org/11371100:25
openstackgerritSteve Baker proposed openstack/heat: Move deployment handle_signal to rpc call  https://review.openstack.org/15721000:25
BillArnoldasalkeld thank you. that's what i feared from looking at the code. It looks like the checks are pervasive in the code.00:26
*** sarob has quit IRC00:27
asalkeldBillArnold: you could use a trust to get delete the stack on the user's behalf?00:27
BillArnoldasalkeld ok, i'll investigate that thanks. was there a design decision forcing this behavior? didn't spot it in the archives but searched only briefly.00:29
asalkeldi don't think so, but I agree that lots of other projects let admin's modify user's resources00:29
openstackgerritSteve Baker proposed openstack/heat: Deployment signal_transport: TEMP_URL_SIGNAL  https://review.openstack.org/15152600:30
openstackgerritSteve Baker proposed openstack/heat: Move deployment handle_signal to rpc call  https://review.openstack.org/15721000:30
openstackgerritSteve Baker proposed openstack/heat: Integration test for software-config tools  https://review.openstack.org/11371100:30
*** david-lyle is now known as david-lyle_afk00:41
*** EricGonczer_ has joined #heat00:42
*** jdob has quit IRC00:43
*** Marga_ has quit IRC00:46
*** Marga_ has joined #heat00:46
*** Marga_ has quit IRC00:47
*** Marga_ has joined #heat00:47
*** alexheneveld has joined #heat00:50
*** sdake__ has joined #heat00:58
*** sdake_ has quit IRC01:01
*** Marga_ has quit IRC01:06
*** Marga_ has joined #heat01:07
*** GonZo2K has quit IRC01:10
*** Marga_ has quit IRC01:12
*** sdake__ has quit IRC01:13
*** Qiming has joined #heat01:22
*** BillArnold has quit IRC01:23
asalkeldrolling update policy is confusing in aws scale group it is in the UpdatePolicy, in OS instancegroup it is also in Updatepolicy, in OS scale group it is in both UpdatePolicy and the properties (but only seems read the properties)01:31
*** 64MABZ0GB is now known as strictlyb01:36
*** EmilienM is now known as EmilienM|afk01:36
*** pm90_ has quit IRC01:38
*** pm90_ has joined #heat01:41
*** smc7 has quit IRC01:41
*** EricGonczer_ has quit IRC01:44
*** ramishra_ has joined #heat01:46
*** alexheneveld has quit IRC01:47
*** pm90_ has quit IRC02:01
*** Qiming has quit IRC02:16
*** erkules_ has joined #heat02:27
*** erkules has quit IRC02:29
*** achanda has quit IRC02:33
*** ramishra_ has quit IRC02:33
*** alexheneveld has joined #heat02:34
*** achanda has joined #heat02:42
*** achanda has quit IRC02:46
*** dims_ has quit IRC02:52
*** cody-somerville has joined #heat02:53
*** ananta has joined #heat02:59
anantagood morning/afternoon03:00
*** achanda has joined #heat03:02
stevebakerhi03:03
*** spzala has joined #heat03:09
*** harlowja_ is now known as harlowja_away03:15
*** ramishra_ has joined #heat03:44
*** achanda has quit IRC03:45
*** kaufer has joined #heat03:48
*** ramishra_ has quit IRC03:49
*** spzala has quit IRC03:50
*** achanda has joined #heat03:52
*** dims__ has joined #heat03:52
*** dims__ has quit IRC03:57
cmystermorning03:58
*** ramishra_ has joined #heat04:00
*** snk has quit IRC04:13
*** achanda has quit IRC04:16
*** coolsvap_ is now known as coolsvap04:28
*** nkhare has joined #heat04:30
*** saju_m has joined #heat04:43
*** pm90_ has joined #heat04:53
*** saju_m has quit IRC04:56
*** saju_m has joined #heat04:56
*** saju_m has quit IRC04:58
*** ramishr__ has joined #heat04:58
*** kaufer has quit IRC04:59
*** ramishra_ has quit IRC05:01
*** ramishr__ has quit IRC05:02
*** alexheneveld has quit IRC05:05
*** coolsvap is now known as coolsvap_05:05
*** coolsvap_ is now known as coolsvap05:15
*** achanda has joined #heat05:16
*** achanda has quit IRC05:18
*** achanda has joined #heat05:18
*** cmyster has quit IRC05:22
*** pm90_ has quit IRC05:28
*** pm90_ has joined #heat05:29
*** ParsectiX has quit IRC05:30
*** ParsectiX has joined #heat05:31
*** saju_m has joined #heat05:36
*** Marga_ has joined #heat05:40
*** Marga_ has quit IRC05:41
*** Marga_ has joined #heat05:42
*** achanda has quit IRC05:45
*** zigo has quit IRC05:54
*** zigo has joined #heat05:55
*** akuznetsov has joined #heat05:55
*** achanda has joined #heat05:56
*** ramishra_ has joined #heat05:57
*** ParsectiX has quit IRC05:58
*** ParsectiX has joined #heat05:58
*** signed8bit has joined #heat06:22
*** signed8bit_ZZZzz has quit IRC06:23
*** pitr-ch has quit IRC06:28
*** alexheneveld has joined #heat06:37
*** ramishra_ has quit IRC06:43
*** jprovazn has joined #heat06:46
*** alexheneveld has quit IRC06:50
*** alexheneveld has joined #heat06:50
*** pitr-ch has joined #heat07:03
*** akuznetsov has quit IRC07:04
*** hdd has joined #heat07:08
*** ramishra_ has joined #heat07:10
openstackgerritKanagaraj Manickam proposed openstack/heat: Convergence message bus  https://review.openstack.org/15399907:10
*** ramishr__ has joined #heat07:13
*** ramishra_ has quit IRC07:16
*** chlong has quit IRC07:19
*** ramishr__ has quit IRC07:19
*** ramishra_ has joined #heat07:19
*** ramishra_ has quit IRC07:20
*** ramishra_ has joined #heat07:20
*** ramishra_ has quit IRC07:24
*** ramishra_ has joined #heat07:25
*** Marga_ has quit IRC07:29
*** dims__ has joined #heat07:30
openstackgerritSergey Kraynev proposed openstack/heat: Translate exception in the right way  https://review.openstack.org/15700307:31
*** dims__ has quit IRC07:35
*** ramishra_ has quit IRC07:37
*** hdd has quit IRC07:37
*** ramishra_ has joined #heat07:41
*** alexheneveld has quit IRC07:44
*** ramishra_ has quit IRC07:45
*** sdake_ has joined #heat07:49
*** cinerama has quit IRC07:49
*** ishant has joined #heat07:55
*** cmyster has joined #heat07:57
*** cmyster has quit IRC07:57
*** cmyster has joined #heat07:57
*** harlowja_away has quit IRC08:03
*** tspatzier has joined #heat08:06
*** dmn_ has joined #heat08:11
*** GonZo2K has joined #heat08:23
*** akuznetsov has joined #heat08:23
dmn_I'm trying to use software deployment resource with puppet hook and I've run into a problem.08:24
dmn_When I create a stack using the template (http://pastebin.com/nD33TsSc - template and manifest file),  the stack creation process never gets completed; it always shows CREATE_IN_PROGRESS.08:24
*** jcoufal has joined #heat08:25
therveYou don't use the puppet manifest?08:25
dmn_On debugging I got to know that the software deployment resource creation never gets completed.08:25
dmn_therve - I do.08:25
shardy"group: script"08:26
shardythat's not going to trigger the puppet hook, it's just going to run the script08:26
cmystermorning shardy08:26
shardyanyway, the most common reason for this is the VM can't connect to tcp/8000 on the machine running heat08:26
dmn_shardy: "group: puppet" also doesn't work08:26
dmn_that was just me trying other things08:27
shardythe SoftwareDeployment resource requires a signal back from the VM, so if anything (firewall) prevents connecting to heat-api-cfn then the deployment never completes08:27
shardyI normally install nmap in the VM and port-scan the host running heat-api-cfn to debug08:27
dmn_shardy: Is there any specific location where we should store the manifest file?08:29
*** achanda has quit IRC08:29
shardydmn_: no, python-heatclient just reads it from the relative path you specify in the template08:29
*** achanda has joined #heat08:29
*** sdake__ has joined #heat08:29
*** vijayagurug has joined #heat08:30
*** achanda has quit IRC08:30
dmn_shardy: oh okay. I'll look into the firewall  thing now.08:31
*** sdake_ has quit IRC08:33
dmn_http://pastebin.com/Vs9TvKLQ08:33
dmn_^ this was the template that I used08:33
dmn_sorry for posting the wrong file08:35
dmn_template*08:35
*** ifarkas has joined #heat08:35
*** inc0 has joined #heat08:41
*** ramishra_ has joined #heat08:41
*** jistr has joined #heat08:42
*** akuznetsov has quit IRC08:44
*** ramishra_ has quit IRC08:46
*** cinerama has joined #heat08:48
*** dulek has joined #heat08:50
inc0good morning08:52
cmystermorning08:56
*** stannie has joined #heat08:58
*** GonZo2K has quit IRC09:04
*** jcoufal_ has joined #heat09:05
*** dmn_ has quit IRC09:07
*** jcoufal has quit IRC09:08
*** sorantis has joined #heat09:12
*** sorantis has quit IRC09:12
*** pas-ha has joined #heat09:13
*** dmn_ has joined #heat09:16
*** sorantis has joined #heat09:16
*** derekh has joined #heat09:19
openstackgerritMerged openstack/heat-specs: Push instead of pull resource input data  https://review.openstack.org/15230309:21
openstackgerritMerged openstack/heat-specs: Convergence message bus  https://review.openstack.org/15230409:21
pas-hamorning all09:22
cmystermorning09:22
pas-hadoes anyone know why devstack now creates two volume groups? before it was stack-volumes-backing-file, then stack-volumes-lvmdriver-1, and now they are both there..09:23
therveI think one is for nova now?09:28
pas-haok, thanks for the info09:32
*** nkhare has quit IRC09:33
*** nkhare has joined #heat09:34
*** dmn_ has quit IRC09:34
*** dmn_ has joined #heat09:34
*** sdake_ has joined #heat09:36
*** pm90_ has quit IRC09:37
*** sdake__ has quit IRC09:40
*** ramishra_ has joined #heat09:43
sdake_shardy around?09:43
*** erkules_ is now known as erkules09:45
shardysdake_: Hi09:46
sdake_hey shardy09:46
sdake_if your keen to get working on kolla, we have a broad new outline for where we are headed09:46
sdake_and I've decomposed all the work into chunks of 4-20 hour projects09:46
sdake_by participating maybey ou an figure out a way to integrate with tripleo09:47
*** ramishra_ has quit IRC09:47
shardysdake_: I'm definitely interested, but tbh I'm pretty heavily loaded with other stuff atm09:47
sdake_anyway just a thought - I know you mentione dpreviously you were interested09:47
shardysdake_: Sure, thanks - is there an etherpad or something with the chunks of work listed?09:48
sdake_https://blueprints.launchpad.net/kolla09:48
sdake_https://github.com/stackforge/kolla/blob/master/specs/containerize-openstack.rst09:48
sdake_our borad plans09:48
sdake_keep in mind the container development is done - we already have a whoel boatload of workign containers09:49
sdake_nexxt step is single node orchestration of the container launching process09:49
sdake_we are planning to use docker compose for this process09:49
*** cmyster has quit IRC09:49
sdake_what would be hot is a heat software config that works with docker-compose files09:49
sdake_but I think beforey ou were to develop that you would want to see how docker ocmposeworks in this new model09:50
sdake_if you could read the spec and provide any comments, I'd value them even if you can't contribute code09:50
sdake_I know your overloaded - looking like I'm going to have 60 hr workweeks for eternity here :)09:50
shardyha, I know that feeling ;)09:51
shardysdake_: will you be at the summit?09:51
sdake_yup09:51
sdake_I have two speaking sessios if hey are voted in09:51
shardyI think we probably need another heat session on container integration, would be great to get your input09:51
*** ramishra_ has joined #heat09:51
sdake_yup i'll be there09:51
shardyhttps://etherpad.openstack.org/p/liberty-heat-sessions09:53
shardyI'll add a container one there09:53
*** cmyster has joined #heat09:56
*** cmyster has quit IRC09:56
*** cmyster has joined #heat09:56
sdake_looks good09:56
sdake_please read the spec - it shoudl take less then 10 minutes09:56
*** ramishra_ has quit IRC10:01
*** ramishr__ has joined #heat10:01
*** jtomasek_ has joined #heat10:07
*** prazumovsky has joined #heat10:12
openstackgerritSergey Kraynev proposed openstack/heat: Add functional test for AWS loadbalancer  https://review.openstack.org/15319210:13
openstackgerritSergey Kraynev proposed openstack/heat: Translate exception in the right way  https://review.openstack.org/15700310:14
*** ramishr__ has quit IRC10:14
*** cmyster has quit IRC10:16
*** tlashchova has joined #heat10:18
*** cmyster has joined #heat10:19
*** cmyster has quit IRC10:19
*** cmyster has joined #heat10:19
shardysdake_: Looks good, I'm very interested in exploring how we could make heat the/a multi-node orchestration tool as you mention10:21
sdake_yup - I dont want to tackle that in kola10:21
sdake_I prefer kolla do one thing do it well ;)10:21
shardyI've created a summit session proposal in the etherpad, but feel free to raise a heat spec if you have a clear idea of what integration is needed (new software config hook?)10:21
shardyI know stevebaker and ramishra started looking at container integration via software config, but I'm not sure of the current status, or how compatible their approach is with the revised kolla architecture10:22
sdake_if it is the pod based work that stevebake rdid, thatwont wok at all10:23
*** cmyster has quit IRC10:23
sdake_its a cool idea, just not viable for this mainly because we need super privileged containers10:24
sdake_http://sdake.io/2015/01/28/an-atomic-upgrade-process-for-openstack-compute-nodes/10:25
*** jcoufal_ has quit IRC10:45
*** jcoufal has joined #heat10:46
*** dims__ has joined #heat10:50
*** dims__ has quit IRC10:54
*** ramishra_ has joined #heat10:55
openstackgerritPeter Razumovsky proposed openstack/heat: Improve Property error msg for properties validate  https://review.openstack.org/12715011:03
*** Qiming has joined #heat11:07
*** ramishr__ has joined #heat11:14
*** ramishra_ has quit IRC11:15
*** sorantis has quit IRC11:18
*** akuznetsov has joined #heat11:19
*** akuznetsov has quit IRC11:19
*** ramishr__ has quit IRC11:19
*** ramishra_ has joined #heat11:20
*** ramishra_ has quit IRC11:25
*** ramishra_ has joined #heat11:26
*** dulek has quit IRC11:29
*** dulek has joined #heat11:30
pas-hawe have constant failures in functional tests job due to "no valid host was found". anyone knows a reason?11:31
openstackgerritMiro Hroncok proposed openstack/heat-cfntools: Python 3 compatibility  https://review.openstack.org/14520011:35
openstackgerritPeter Razumovsky proposed openstack/heat: Add OS::Mistral::Workflow for Mistral workflows  https://review.openstack.org/14764511:36
*** sorantis has joined #heat11:37
*** chlong has joined #heat11:42
*** dmn_ has quit IRC11:44
*** alexpilotti has joined #heat11:51
*** inc0_ has joined #heat11:58
*** dmn_ has joined #heat11:58
dmn_where can I find heat logs to debug?11:59
*** inc0 has quit IRC11:59
*** inc0_ has quit IRC11:59
*** cmyster has joined #heat12:02
openstackgerritSergey Kraynev proposed openstack/heat: Add functional test for AWS loadbalancer  https://review.openstack.org/15319212:06
*** ramishra_ has quit IRC12:17
openstackgerritTetiana Lashchova proposed openstack/heat: Add OS::Mistral::CronTrigger resource  https://review.openstack.org/14932712:20
openstackgerritSergey Kraynev proposed openstack/heat-specs: Improvements in deprecation process  https://review.openstack.org/15323512:20
*** ramishra_ has joined #heat12:20
*** ramishr__ has joined #heat12:24
*** ramishra_ has quit IRC12:24
*** dmn_ has quit IRC12:31
*** cmyster has quit IRC12:36
*** asalkeld has quit IRC12:37
*** htruta has joined #heat12:40
*** cdent has joined #heat12:40
*** akuznetsov has joined #heat12:41
*** dims__ has joined #heat12:44
openstackgerritSergey Kraynev proposed openstack/heat: Add functional test for AWS loadbalancer  https://review.openstack.org/15319212:47
*** EricGonczer_ has joined #heat12:52
*** EricGonczer_ has quit IRC12:53
*** akuznetsov has quit IRC12:55
*** EmilienM|afk is now known as EmilienM12:58
*** alexpilotti has quit IRC13:05
*** ramishr__ has quit IRC13:16
*** ramishra_ has joined #heat13:16
*** rlt_ has quit IRC13:19
*** ramishra_ has quit IRC13:21
*** tspatzier has quit IRC13:22
*** sgordon is now known as steveg13:24
*** EricGonczer_ has joined #heat13:24
*** vijendar has joined #heat13:24
*** ishant has quit IRC13:29
*** ananta has quit IRC13:30
*** nkhare has quit IRC13:31
*** jistr_ has joined #heat13:37
*** jistr has quit IRC13:39
*** ramishra_ has joined #heat13:43
*** nkhare has joined #heat13:45
*** jistr_ is now known as jistr13:48
openstackgerritAnant Patil proposed openstack/heat: Store template + environment for rollback.  https://review.openstack.org/15737613:50
*** jtomasek_ has quit IRC13:52
*** jtomasek has joined #heat13:53
kairat_kushaevHi guys, i have a question: are you facing from time to time with qemu-img: error while reading sector XXXXX: Input/output error?13:54
kairat_kushaevThe full log is available here13:54
kairat_kushaevhttp://logs.openstack.org/85/156985/5/gate/check-heat-dsvm-functional-mysql/b21de47/logs/screen-n-cpu.txt.gz?level=TRACE13:54
*** kaufer has joined #heat13:54
kairat_kushaevWe face with it on our gates from time to time.13:55
kairat_kushaevsorry guys13:55
*** alexheneveld has joined #heat13:55
kairat_kushaevaddresses to other guys=(13:55
*** mkerrin has quit IRC13:55
*** tspatzier has joined #heat13:56
*** ramishra_ has quit IRC14:03
*** sdake_ has quit IRC14:03
openstackgerritSergey Kraynev proposed openstack/heat: Add extra columns for resource table  https://review.openstack.org/15669314:03
*** blomquisg has quit IRC14:05
*** vijayagurug has left #heat14:07
*** akuznetsov has joined #heat14:11
*** prazumovsky has quit IRC14:14
openstackgerritPeter Razumovsky proposed openstack/heat: Improve Property error msg for properties validate  https://review.openstack.org/12715014:16
*** diga_ has joined #heat14:17
*** ramishra_ has joined #heat14:17
*** tochi_ has quit IRC14:22
*** ramishra_ has quit IRC14:22
*** jmckind has joined #heat14:27
*** EmilienM is now known as EmilienM|afk14:32
*** jmckind has quit IRC14:32
*** jmckind has joined #heat14:34
*** sabeen has joined #heat14:39
*** saju_m has quit IRC14:42
*** nkhare has quit IRC14:42
*** Qiming has quit IRC14:46
*** sabeen has quit IRC14:55
*** ParsectiX_ has joined #heat14:58
ParsectiX_Hello. Where I can find documentation for heat python API v1 ?14:58
*** sabeen has joined #heat14:59
ParsectiX_http://developer.openstack.org/api-ref-orchestration-v1.html ?15:01
*** saju_m has joined #heat15:02
*** ParsectiX_ has quit IRC15:11
openstackgerritTomas Sedovic proposed openstack/heat: Add breakpoint support  https://review.openstack.org/14612315:15
*** cdent has quit IRC15:15
*** cdent has joined #heat15:16
openstackgerritTomas Sedovic proposed openstack/python-heatclient: Add options for setting and clearing of breakpoints  https://review.openstack.org/14931915:17
*** dims__ has quit IRC15:17
*** dims__ has joined #heat15:18
*** ramishra_ has joined #heat15:32
*** achanda has joined #heat15:33
*** akuznetsov has quit IRC15:33
*** blomquisg has joined #heat15:34
*** achanda has quit IRC15:41
*** EmilienM|afk is now known as EmilienM15:41
*** MasterPiece has joined #heat15:41
*** ramishra_ has quit IRC15:47
*** jaypipes has quit IRC15:51
*** pas-ha has quit IRC15:58
*** cmyster has joined #heat15:59
*** ParsectiX has quit IRC16:00
cmysterzaneb: heya16:00
*** ParsectiX has joined #heat16:01
zanebcmyster: o/16:01
*** jaypipes has joined #heat16:01
cmystermeeting ?16:01
*** EricGonczer_ has quit IRC16:02
*** david-lyle_afk is now known as david-lyle16:04
*** vijayagurug has joined #heat16:10
*** lpmulligan has joined #heat16:10
*** vijayagurug has left #heat16:11
*** dulek has quit IRC16:11
*** pitr-ch has quit IRC16:12
*** sorantis has quit IRC16:12
*** cody-somerville has quit IRC16:13
*** pm90_ has joined #heat16:17
*** pm90_ has quit IRC16:19
*** pm90_ has joined #heat16:19
*** ramishra_ has joined #heat16:22
*** kebray has joined #heat16:25
*** kebray has quit IRC16:25
*** kebray has joined #heat16:26
*** blues-man has joined #heat16:26
*** ramishra_ has quit IRC16:27
*** vijayagurug has joined #heat16:29
*** kairat_kushaev has left #heat16:29
*** vijayagurug has left #heat16:29
*** jdob has joined #heat16:33
*** openstackgerrit has quit IRC16:36
*** openstackgerrit has joined #heat16:36
*** KanagarajM has joined #heat16:39
KanagarajMzuul is failing with "No valid host was found. There are not enough hosts available"  for https://review.openstack.org/#/c/153999/. is any one seeing this error for your patch builds ?16:41
KanagarajMI think this error is some thing to do with zuul test environment.16:41
*** alexheneveld has quit IRC16:53
*** gondoi is now known as zz_gondoi16:55
*** zz_gondoi is now known as gondoi16:57
*** coolsvap is now known as coolsvap_16:57
*** jtomasek has quit IRC17:01
*** ParsectiX has quit IRC17:05
*** ParsectiX has joined #heat17:06
*** EricGonczer_ has joined #heat17:07
*** Marga_ has joined #heat17:08
*** EricGonc_ has joined #heat17:08
*** Marga_ has quit IRC17:09
*** Marga_ has joined #heat17:10
*** EricGonczer_ has quit IRC17:11
*** cdent has quit IRC17:21
fricklerKanagarajM: yes, saw that with https://review.openstack.org/156985 earlier, too17:23
*** Tango has joined #heat17:23
fricklerit looked like kairat_kushaev was looking into the details, seems that a couple of jobs are affected17:24
*** cdent has joined #heat17:24
*** jcoufal has quit IRC17:25
*** cdent has quit IRC17:26
KanagarajMfrickler: ok. thanks. I will wait for a while till get fixed.17:27
*** jistr has quit IRC17:28
*** kaufer has quit IRC17:31
*** serg_melikyan has joined #heat17:34
*** derekh has quit IRC17:34
*** serg_melikyan has quit IRC17:34
*** blues-man has quit IRC17:35
*** hdd has joined #heat17:38
openstackgerritMerged openstack/heat: Fix Keystoneclient V2 wrapper for multi-region  https://review.openstack.org/15579817:40
*** gondoi is now known as zz_gondoi17:42
openstackgerritgreghaynes proposed openstack/heat-templates: Use declarative dib features for hot elements  https://review.openstack.org/15746217:43
*** ParsectiX has quit IRC17:44
*** ParsectiX has joined #heat17:44
*** serg_melikyan has joined #heat17:47
Dragojamielennox: I have a question for you about one of your patches17:47
*** serg_melikyan has quit IRC17:48
*** serg_melikyan has joined #heat17:49
*** diga_ has quit IRC17:51
*** KanagarajM has quit IRC17:53
*** kaufer has joined #heat17:55
*** harlowja has joined #heat18:10
*** sdake_ has joined #heat18:12
*** pm90_ has quit IRC18:15
*** ParsectiX has quit IRC18:16
*** ParsectiX has joined #heat18:16
*** sdake_ has quit IRC18:17
*** smc7 has joined #heat18:26
*** cmyster has quit IRC18:26
*** pitr-ch has joined #heat18:28
*** htruta has quit IRC18:29
*** achanda has joined #heat18:31
*** htruta has joined #heat18:34
*** tspatzier has quit IRC18:39
*** serg_melikyan has quit IRC18:39
*** EmilienM is now known as EmilienM|afk18:40
*** hdd has quit IRC18:41
*** jprovazn has quit IRC18:44
*** sdake_ has joined #heat18:47
alextricityDoes anyone know the conditions that need to be meet in order for a software-deployment/config to rebuild on a stack-update?18:49
alextricityWhat exactly needs to change for the software deployement to rebuild?18:50
shardyalextricity: what do you mean by "rebuild"?  Only OS::Nova::Server rebuilds on update, which isn't really related to any SoftwareDeployments which may be associated with the server18:51
alextricityshardy: I mean updated. I can see here that my "somename" software deployment updates, but others such as "another name" do not.18:52
alextricityDo the inputs need to be different in order for the update to take place?18:53
shardyalextricity: Yes, by default the deployment isn't re-applied unless something (the config or the inputs) changes18:53
alextricityshardy: I don't see any way to change the update policy in the docs. Is there something on the "hidden menu" lol18:54
alextricity?18:54
shardyupdate_policy only works with a couple of resources, it doesn't apply to SoftwareDeployments18:54
*** randallburt has joined #heat18:54
alextricityshardy: That's what I thought. Thanks :)18:55
shardynp!18:55
*** randallburt has quit IRC18:55
*** randallburt has joined #heat18:55
*** serg_melikyan has joined #heat18:56
*** dims_ has joined #heat18:59
*** dims__ has quit IRC19:02
*** kebray_ has joined #heat19:03
*** kebray has quit IRC19:04
*** pm90_ has joined #heat19:10
*** achanda has quit IRC19:11
*** sarob has joined #heat19:19
*** dims_ has quit IRC19:26
*** serg_melikyan has quit IRC19:28
*** serg_melikyan has joined #heat19:29
*** serg_melikyan has quit IRC19:30
*** achanda has joined #heat19:34
*** jmckind has quit IRC19:36
*** alexheneveld has joined #heat19:44
*** vijendar has quit IRC19:50
*** saju_m has quit IRC19:53
*** Marga_ has quit IRC19:54
*** pm90_ has quit IRC19:56
*** pm90_ has joined #heat19:57
stevebakermorning20:01
*** dims__ has joined #heat20:01
*** dims__ has quit IRC20:05
*** EricGonc_ has quit IRC20:05
*** steveg has quit IRC20:10
*** steveg` has joined #heat20:10
*** smc7 has quit IRC20:11
*** vijendar has joined #heat20:17
*** EricGonczer_ has joined #heat20:22
*** Marga_ has joined #heat20:25
*** achanda has quit IRC20:28
*** vijendar has quit IRC20:29
*** jmckind has joined #heat20:29
*** Marga_ has quit IRC20:30
*** vijendar has joined #heat20:31
*** achanda has joined #heat20:32
*** hdd has joined #heat20:37
*** sdake_ has quit IRC20:54
*** ifarkas has quit IRC20:55
*** sdake_ has joined #heat20:56
*** smc7 has joined #heat20:56
*** akuznetsov has joined #heat20:57
*** serg_melikyan has joined #heat20:58
*** serg_melikyan has quit IRC21:00
*** serg_melikyan has joined #heat21:00
*** Tango has quit IRC21:01
*** sdake_ has quit IRC21:02
*** sdake_ has joined #heat21:03
*** GonZo2K has joined #heat21:04
*** GonZo2K has quit IRC21:04
*** GonZo2K has joined #heat21:04
*** achanda has quit IRC21:06
*** sabeen2 has joined #heat21:06
*** alexheneveld has quit IRC21:07
*** sabeen has quit IRC21:07
*** vijendar has quit IRC21:09
*** akuznetsov has quit IRC21:09
*** sdake_ has quit IRC21:09
*** pm90_ has quit IRC21:15
*** Marga_ has joined #heat21:19
*** Marga_ has quit IRC21:20
*** Marga_ has joined #heat21:20
*** achanda has joined #heat21:24
*** signed8bit has quit IRC21:24
*** signed8bit has joined #heat21:24
*** dims__ has joined #heat21:29
*** Marga_ has quit IRC21:30
*** Marga_ has joined #heat21:31
*** randallburt has quit IRC21:32
*** morganfainberg is now known as needscoffee21:32
*** sabeen2 has quit IRC21:35
*** serg_melikyan has quit IRC21:37
*** asalkeld has joined #heat21:38
*** pm90_ has joined #heat21:39
*** achanda has quit IRC21:40
*** pm90_ has quit IRC21:40
*** pm90_ has joined #heat21:41
*** achanda has joined #heat21:46
*** sarob has quit IRC21:46
*** jaypipes has quit IRC21:53
*** MasterPiece has quit IRC21:56
jamielennoxDrago: here i'm now21:56
jamielennoxugh21:56
jamielennoxstill might need to wake up though :)21:56
*** Marga_ has quit IRC22:01
*** zz_gondoi is now known as gondoi22:01
openstackgerritMiro Hroncok proposed openstack/heat-cfntools: Python 3 compatibility  https://review.openstack.org/14520022:09
*** openstackstatus has joined #heat22:14
*** ChanServ sets mode: +v openstackstatus22:14
*** dims__ has quit IRC22:15
*** sabeen has joined #heat22:16
*** hdd has quit IRC22:17
*** kebray_ has quit IRC22:19
*** kebray has joined #heat22:20
*** pm90_ has quit IRC22:20
*** stannie has left #heat22:21
openstackgerritMiro Hroncok proposed openstack/heat-cfntools: Ported tests from mox3 to mock to support Python >= 3.3  https://review.openstack.org/15755822:21
*** alexheneveld has joined #heat22:23
*** pm90_ has joined #heat22:26
*** signed8bit has quit IRC22:26
*** signed8bit has joined #heat22:28
*** signed8bit has quit IRC22:38
*** EricGonczer_ has quit IRC22:38
Dragojamielennox: hello!22:43
jamielennoxDrago: hey22:44
Dragojamielennox: my question is regarding the "Use keystoneclient auth plugins" patch with keystone v2, specifically this line https://github.com/openstack/heat/commit/36eaea8208ab3e4b077f21b4c8eb95716296e9c6#diff-5b2318656f211c741b2f326cada38191L5122:45
Dragojamielennox: as I understand it, the new place that the service catalog is pulling from is from the request context, which is passed to the heat engine from the heat API22:46
Dragojamielennox: if we're using keystone v3, the /v3/tokens/{token id} returns the service catalog (as far as I know, I don't actually have access to a v3 endpoint where I am). However, the call to v2 doesn't: https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token.py#L1680-L168222:47
*** dulek has joined #heat22:48
Dragojamielennox: so when the auth_plugin looks for a service_catalog in the request context, there isn't any22:48
Dragojamielennox: 1) does this sound like I'm understanding this correctly to you? 2) how can this be fixed nicely?22:49
*** Tango has joined #heat22:49
*** randallburt has joined #heat22:49
jamielennoxDrago: so that doesn't sound right - there should always be a service catalog for v2 and v3 auth22:50
jamielennoxit looks slightly different but it should be there22:50
jamielennoxthe include_service_catalog flag for v3 is on by default - it's only there to allow certain services (ones that don't talk to anyone else) to turn it off22:51
jamielennoxIMO it shouldn't be a user facing flag22:51
asalkeldmorning jamielennox22:51
jamielennoxasalkeld: hi22:51
jamielennoxasalkeld: i expect this is about the v2 bug i still haven't fixed? :)22:52
Dragojamielennox: For the POST request, it seems to, but I'm not seeing that in the identity v2 API reference http://developer.openstack.org/api-ref-identity-v2.html (search for /v2.0/tokens/ {tokenId})22:52
* asalkeld just saying hi22:52
jamielennoxasalkeld: apologies - morning, i hear it's going to be wet up there22:52
asalkeldjust raining atm, you not in bris?22:53
jamielennoxasalkeld: nope, i've relocated22:53
asalkeldwow, didn't know22:53
jamielennoxasalkeld: currently in newcastle, moving back toward sydney22:53
asalkeldok22:53
jamielennoxasalkeld: yea, i snuck out a bit22:53
*** jmckind has quit IRC22:54
jamielennoxDrago: so the service catalog is a part of the standard token response22:54
asalkeldexcept when it's not22:54
*** dulek has quit IRC22:54
asalkeld(compressed token ?)22:55
*** kaufer has quit IRC22:55
jamielennoxasalkeld: in that case it will be in the validation response22:56
asalkeldok22:56
Dragojamielennox: interesting, so it's really supposed to be returning the service catalog anyway? If so, that's good to know because I can go talk to our identity team22:56
Dragojamielennox: is that "standard token response" thing documented anywhere?22:57
jamielennoxDrago: well for v3, i'd have to find the v2 response22:57
jamielennoxhowever there is a full token response on that page22:58
jamielennoxDrago: there doesn't seem to be an anchor i can link you to, but if you click detail on the /v2.0/tokens POST path, then there is a JSON response there22:59
jamielennoxthat full { "access": .... } is the token data23:00
*** alexheneveld has quit IRC23:02
randallburtDrago:  yeah, I think you might need to ping someone on our identity team if you're not seeing the catalog.23:07
*** sarob has joined #heat23:07
openstackgerritMiro Hroncok proposed openstack/heat-cfntools: Python 3 compatibility  https://review.openstack.org/14520023:09
randallburtDrago, jamielennox ah, I see the problem. Doing a POST on /tokens gets you the catalog, but doing an admin api GET on /tokens/tokenid (which is what the middleware does) does NOT return the catalog23:13
Dragojamielennox, randallburt: I guess that the "admin" part is the key point here?23:14
jamielennoxrandallburt: it's been a while, but i think GET should work as well23:14
randallburtjamielennox:  not if you want the catalog according to the api docs for v223:15
jamielennoxyou do HEAD to validate without response23:15
jamielennoxrandallburt: hmm, interesting23:16
Dragojamielennox, randallburt: v2/v3 seem to differ in that there's no "admin" set in v323:16
Drago*as well23:16
jamielennoxDrago: sorry, skipped that message - what's the admin part ?23:17
*** lpmulligan has quit IRC23:17
randallburtjamielennox:  he means there's no separate "Admin API" section for the v3 docs23:17
jamielennoxrandallburt: oh - right, yea we are trying to ditch that with v3 and just rely on permissions23:18
randallburtjamielennox, Drago which I assume is because access to things is just controlled by policy (as it should be IMO)23:18
jamielennoxthe response for v3 from public/admin should be the smae23:18
Dragogood to know23:18
jamielennoxwe can't deprecate the admin port till people are comfortably off v2 API23:19
randallburtBut from what I'm reading, doing a GET on /v3/auth/tokens doesn't return the catalog either?23:19
jamielennoxso it should / must for auth_token middleware to work23:19
randallburtoh, whoops. Missed the  "README" from Dolph in the docs23:20
jamielennoxPOST /tokens is how you get a token23:20
jamielennoxGET /tokens is how you get the token info23:20
randallburtthose docs really need anchors23:20
jamielennoxthe same info as returned from POST, just for an existing token23:20
jamielennoxHEAD /tokens should give you a yes/no valid response23:20
randallburtright, its just not explicit in the examples because Dolph hasn't added it yet ;)23:20
jamielennoxrandallburt: which one are you looking at23:20
jamielennoxwhich odc23:20
jamielennoxdoc23:20
randallburtjhttp://developer.openstack.org/api-ref-identity-v3.html23:20
randallburthttp://developer.openstack.org/api-ref-identity-v3.html23:21
randallburtGET v3/auth/tokens23:21
jamielennoxyea, i prefer the github rendering: https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst23:21
jamielennoxjust v2 is in xml so impossible to read23:22
jamielennoxso https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#authentication-responses has some info23:23
*** gondoi is now known as zz_gondoi23:23
jamielennoxhttps://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#validate-token-and-get-service-catalog23:23
randallburtah, yes. much easier to read. so there's the disparity I guess. GET in v2 doesn't return a catalog which breaks v2 compatibility if we bypass our the Heat auth plugin stuff23:23
jamielennoxrandallburt: so it should return a catalog23:24
jamielennoxthe only way you shouldn't be getting a catalog is with an unscoped token23:24
jamielennoxbut that's the same between v2/v323:24
randallburtjamielennox:  but not according to the docs. A GET v2/tokens/<token id> doesn't return a catalog23:25
randallburtso its missing from the context when we go to look up services23:25
jamielennoxrandallburt: so that would pretty much break auth_token middleware since the beginning23:26
randallburtbecause a patch changed the code from using Heat's auth plugin mechanism to using "stock" keystone23:26
randallburtwhich would also break in v2 because of overriding the "endpoint_type" kwarg as well23:27
Dragojamielennox: it's possible to pass the tenant ID and the user token via POST, but not GET23:27
Drago*to get the service catalog23:27
randallburtDrago:  but the token middleware never did that either, did it?23:27
jamielennoxDrago: that makes sense - a POST is you getting a new token, a GET is you fetching the information for one that you already have23:27
Dragorandallburt: not sure, I haven't looked into that code much23:28
Dragorandallburt, jamielennox: I just figure the way it was done before wasn't using the GET version or something.23:28
randallburtjamielennox:  so re breaking the middleware from the get-go, maybe something in our internal abstraction layer took care of that. Once it was removed, things still worked fine for v3, but not v2 anymore?23:29
randallburtDrago:  ^^23:29
jamielennoxDrago: so what is the code we are looking at fixing - or is that internal?23:29
*** Marga_ has joined #heat23:30
randallburtjamielennox:  IMO, its sounds like its a Heat thing to fix, but would probably ask for help from whoever submitted the sweaping auth changes a few weeks ago to "do it right"23:30
jamielennoxrandallburt: probably me23:30
jamielennoxthere is a bug, umm23:31
Dragojamielennox: yes, that's why I came to you, to get your advice on how to proceed23:31
Dragojamielennox: and to make sure I understood where the real problem lies23:31
randallburtDrago:  you still have the link to the spot we think is broken, yes?23:31
jamielennoxthis one: https://bugs.launchpad.net/heat/+bug/142098723:31
openstackLaunchpad bug 1420987 in heat "Heat not working with keystoneclient_v2" [High,Triaged]23:31
randallburtjamielennox:  yep that's the one23:32
Dragorandallburt: https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token.py#L1680-L168223:32
jamielennoxshardy has been on to me to look at it, i gave a look through the code and couldn't spot anything but haven't figured out how to reproduce it yet23:32
*** mattoliverau has left #heat23:32
randallburtDrago:  do you have the link to the patch you showed me last night?23:33
Dragorandallburt: jamielennox's patch?23:33
randallburtDrago yes, we're not looking to change anything in keystonemiddleware23:33
Dragorandallburt: https://github.com/openstack/heat/commit/36eaea8208ab3e4b077f21b4c8eb95716296e9c6#diff-5b2318656f211c741b2f326cada38191L5123:33
Dragosorry about that23:34
randallburtDrago, the patch in gerrit23:34
randallburtDrago:  oh, nevermind, brain farted23:34
jamielennoxthere was: https://review.openstack.org/151542 and https://review.openstack.org/15196623:34
jamielennoxthat extended that for v223:35
jamielennoxbut they were essentially AttributeErrors that weren't being tested23:35
Dragorandallburt: https://review.openstack.org/#/c/146368/23:35
randallburtjamielennox:  so what we think is both lines 57-60 would break v2 because of kwarg names that are different and 65 is where it really borks23:35
jamielennoxi'm very much coming at this from the keystone side, i get the auth, not always the implications on heat23:35
jamielennoxof common/context.py?23:36
Dragojamielennox: heat/engine/clients/client_plugin.py23:36
jamielennoxrandallburt, Drago: so 57-60 of that is just renaming a kwarg23:41
randallburtjamielennox:  which results in  an error for us because the v2 client doesn't use that kwarg23:42
jamielennoxpeople used to use endpoint_type to specify the 'public/internal/admin' thing23:42
Dragorandallburt: 57-60 was only a problem because we replaced line 6523:42
randallburtDrago:  k, maybe a red herring on my part then23:43
Dragowhen debugging this23:43
jamielennoxDrago: that makes more sense, because get_endpoint is something fairly heavily baked into keystoneclient23:43
randallburtthe concern being that if that kwarg is passed to the actual v2 keystone client that it will barf anyway23:43
*** pm90_ has quit IRC23:43
*** tochi has joined #heat23:44
*** pm90_ has joined #heat23:44
Dragojamielennox: the exception is generated from this line https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/service_catalog.py#L29023:44
Dragojamielennox: because serviceCatalog is not returned upon token_validate23:45
jamielennoxDrago: is this a test machine you've got set up that's throwing this?23:52
Dragojamielennox: yes23:53
jamielennoxDrago: is it public thta i could take a look?23:53
*** kebray has quit IRC23:54
jamielennoxI've been wanting to get into that bug, and it was on my list for today, but i don't know enough heat to reproduce it23:54
Dragojamielennox, randallburt: problem is, it's pointed at the rackspace cloud23:54
randallburtDrago:  I know its late for you, but do you think tomorrow you and jamielennox can work on getting a devstack setup with keystone v2 to test this out with? If not, we'd have to "sanitise" the one youre using now because of credentials23:56
jamielennoxDrago: as in private creds?23:56
randallburtjamielennox:  yep23:56
jamielennoxDrago: np, is it something that's easy enough to configure via devstack?23:57
Dragojamielennox, randallburt: I don't know if it's easy. Yes, I can work on it23:58
jamielennoxneedscoffee: hey, is there some way to get like a developer account on helion, just enough for a few vms? everything i launch is on internal cloud and so i can't share the session with anyone23:58
Dragorandallburt: but I think jamielennox is in a way different timezone23:58
jamielennoxDrago: australia - it's like 11am23:58
needscoffeeuhm.23:59
randallburtdrat23:59
Dragojamielennox: 6p here23:59
needscoffeejamielennox, uhhh23:59
needscoffeejamielennox, i don't have a good answer to that question23:59
jamielennoxneedscoffee: i'd probably have gone to rax first but dolphm has usually gone by now23:59
needscoffeerax is a developer account you can just sign up for23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!