Thursday, 2016-05-26

*** openstack has joined #heat00:06
*** sdake has quit IRC00:06
*** EricGonczer_ has quit IRC00:07
*** DevBox has quit IRC00:08
*** sdake has joined #heat00:08
*** vishwana_ has quit IRC00:14
*** harlowja has joined #heat00:19
*** khushbu has joined #heat00:19
*** Qiming has quit IRC00:24
*** sdake_ has joined #heat00:28
*** sdake has quit IRC00:30
*** vishwanathj has joined #heat00:44
*** khushbu has quit IRC00:44
*** chlong has quit IRC00:46
*** openstackstatus has quit IRC00:46
*** khushbu_ has joined #heat00:49
*** sdake_ has quit IRC00:50
*** openstack has joined #heat00:57
*** FL1SK has joined #heat01:09
*** Qiming has joined #heat01:13
*** sdake has quit IRC01:25
*** yanyanhu has joined #heat01:32
*** bana_k has quit IRC01:38
*** tmatsu_ has joined #heat01:43
*** wangbo has quit IRC01:44
*** kebray has quit IRC01:46
*** tmatsu has quit IRC01:46
*** kebray has joined #heat01:49
*** openstackgerrit has quit IRC01:49
*** elynn has joined #heat01:50
*** elynn has quit IRC01:54
*** elynn has joined #heat01:55
*** openstackgerrit has joined #heat01:58
openstackgerrithuangtianhua proposed openstack/heat: Add timeout for software/structured deployments  https://review.openstack.org/31751802:00
*** chlong has joined #heat02:00
*** wangbo has joined #heat02:01
*** sabeen has quit IRC02:04
*** sabeen has joined #heat02:05
*** tmatsu has joined #heat02:09
*** tmatsu_ has quit IRC02:12
*** sdake has joined #heat02:19
elynnMorning heat02:19
*** sabeen1 has joined #heat02:22
*** sabeen has quit IRC02:23
openstackgerrithuangtianhua proposed openstack/heat: Correct type of HeatTemplate20161014 to cfn  https://review.openstack.org/32132502:31
*** bana_k has joined #heat02:35
*** openstack has joined #heat02:41
*** yuanying has quit IRC02:50
*** bana_k has quit IRC02:56
openstackgerritMerged openstack/heat: Adds clarity to the default value of num_engine_workers  https://review.openstack.org/32098502:56
*** sdake_ has joined #heat03:00
*** Drago has joined #heat03:02
*** sdake has quit IRC03:02
*** Drago has quit IRC03:04
*** sdake_ is now known as sdake03:05
*** vishwanathj has joined #heat03:06
openstackgerritMerged openstack/heat: De-duplicate raw_template.files  https://review.openstack.org/30369203:16
*** KanagarajM has joined #heat03:17
*** eliqiao has quit IRC03:21
*** eliqiao has joined #heat03:22
*** bana_k has joined #heat03:25
*** tochi has quit IRC03:27
*** yuanying has joined #heat03:30
*** links has joined #heat03:34
*** tmatsu has quit IRC03:39
*** tmatsu has joined #heat03:40
*** fbo has quit IRC03:44
*** yuanying has quit IRC03:45
*** dimtruck is now known as zz_dimtruck03:45
*** yuanying has joined #heat03:47
*** zz_dimtruck is now known as dimtruck03:48
*** fbo has joined #heat03:48
*** FL1SK has quit IRC03:51
*** tochi has joined #heat03:55
*** ramishra has quit IRC03:59
*** KanagarajM_ has joined #heat04:01
*** KanagarajM has quit IRC04:01
*** jamielennox is now known as jamielennox|away04:08
*** bana_k has quit IRC04:13
*** chlong has quit IRC04:15
*** jamielennox|away is now known as jamielennox04:22
*** FL1SK has joined #heat04:22
*** FL1SK has quit IRC04:31
*** elynn has quit IRC04:33
*** chlong has joined #heat04:35
openstackgerritMerged openstack/heat: Don't load nested stack to build the identifier  https://review.openstack.org/31480604:42
*** khushbu_ has quit IRC04:48
*** elynn has joined #heat04:50
openstackgerritMerged openstack/heat: doc: fix issue in template_guide/software_deployment  https://review.openstack.org/31819704:52
*** elynn_ has joined #heat04:54
*** elynn has quit IRC04:54
*** jaosorior has joined #heat05:05
*** kebray has quit IRC05:05
*** kebray has joined #heat05:09
*** ishant has joined #heat05:28
*** dimtruck is now known as zz_dimtruck05:29
*** bnemec has quit IRC05:30
*** bnemec has joined #heat05:31
*** jamielennox is now known as jamielennox|away05:33
openstackgerritMerged openstack/heat: Use a weakref for the data object context  https://review.openstack.org/31721705:39
*** ananta has joined #heat05:41
*** bnemec has quit IRC05:44
*** ramishra has joined #heat05:47
*** chlong has quit IRC05:47
*** elynn_ has quit IRC05:49
*** jamielennox|away is now known as jamielennox05:50
*** bnemec has joined #heat05:52
*** sdake has quit IRC05:54
*** rcernin has joined #heat05:54
*** sdake has joined #heat05:59
*** chlong has joined #heat05:59
*** eliqiao has quit IRC06:06
*** eliqiao has joined #heat06:09
*** bnemec has quit IRC06:12
*** bana_k has joined #heat06:12
*** bnemec has joined #heat06:14
*** FL1SK has joined #heat06:17
*** fragatina has quit IRC06:18
pas-hamorning all06:18
openstackgerritMerged openstack/python-heatclient: Clean up osc fakes and mocks  https://review.openstack.org/28104906:21
anantamorning06:23
*** bnemec has quit IRC06:23
openstackgerritKanagaraj Manickam proposed openstack/heat: heat.template parameter and group  https://review.openstack.org/31494906:25
*** prazumovsky has joined #heat06:28
*** sdake has quit IRC06:30
*** tmatsu_ has joined #heat06:33
*** bnemec has joined #heat06:36
*** tmatsu has quit IRC06:36
*** vishwanathj has quit IRC06:37
*** tmatsu has joined #heat06:38
*** tmatsu__ has joined #heat06:39
*** jprovazn has joined #heat06:39
*** tmatsu_ has quit IRC06:41
*** tmatsu has quit IRC06:42
*** FL1SK has quit IRC06:44
openstackgerritMerged openstack/heat: Correct type of HeatTemplate20161014 to cfn  https://review.openstack.org/32132506:46
*** openstack has joined #heat06:57
*** ccamacho|hungry is now known as ccamacho06:59
*** sorantis has joined #heat07:12
*** sdake has quit IRC07:13
*** sdake has joined #heat07:16
*** vincentll has joined #heat07:18
*** tochi has quit IRC07:19
*** Wenzhi_ has joined #heat07:20
*** tochi has joined #heat07:20
*** sdake has quit IRC07:21
Wenzhi_Hi folks, I have a question about heatclient, I want to list the resources of a stack and filter out the resources whose status is "FAILED"07:22
Wenzhi_I tried heat resource-list STACK -f status=FAILED but got an error "The specified reference "extrouter_inside" (in kube_minions) is incorrect"07:23
Wenzhi_anyone can help on this?07:24
Wenzhi_is this a bug in heatclient?07:25
*** bana_k has quit IRC07:30
openstackgerritMerged openstack/heat: Allow creation of cache classes associated with a context  https://review.openstack.org/31721807:38
therveWenzhi_, That sounds like a problem in your template, not a heatclient issue07:39
therveWenzhi_, Can you paste what you actually got?07:39
Wenzhi_yuywz@yuywz-virtual-machine:~$ heat stack-list07:41
Wenzhi_WARNING (shell) "heat stack-list" is deprecated, please use "openstack stack list" instead07:41
Wenzhi_+--------------------------------------+-----------------------+-----------------+---------------------+--------------+07:41
Wenzhi_| id                                   | stack_name            | stack_status    | creation_time       | updated_time |07:41
Wenzhi_+--------------------------------------+-----------------------+-----------------+---------------------+--------------+07:41
openstackgerrithuangtianhua proposed openstack/heat: WIP - Support resource/output condition  https://review.openstack.org/28336607:41
Wenzhi_| 9448d29e-3c3d-479c-9198-f73a6aea7b47 | k8sbay-7h5oribkvzoy   | CREATE_COMPLETE | 2016-05-26T00:56:56 | None         |07:41
Wenzhi_| e4c21dcd-7a70-44c0-8477-722d691b35a9 | fail_bay-5kmn7urcgii3 | CREATE_FAILED   | 2016-05-26T01:34:15 | None         |07:41
Wenzhi_+--------------------------------------+-----------------------+-----------------+---------------------+--------------+07:41
Wenzhi_yuywz@yuywz-virtual-machine:~$ heat resource-list fail_bay-5kmn7urcgii3 -f status=FAILED07:41
Wenzhi_WARNING (shell) "heat resource-list" is deprecated, please use "openstack stack resource list" instead07:41
Wenzhi_ERROR: The specified reference "extrouter_inside" (in kube_minions) is incorrect.07:41
Wenzhi_yuywz@yuywz-virtual-machine:~$ heat stack-list07:41
Wenzhi_WARNING (shell) "heat stack-list" is deprecated, please use "openstack stack list" instead07:41
Wenzhi_+--------------------------------------+-----------------------+-----------------+---------------------+--------------+07:41
Wenzhi_| id                                   | stack_name            | stack_status    | creation_time       | updated_time |07:41
Wenzhi_+--------------------------------------+-----------------------+-----------------+---------------------+--------------+07:41
Wenzhi_| 9448d29e-3c3d-479c-9198-f73a6aea7b47 | k8sbay-7h5oribkvzoy   | CREATE_COMPLETE | 2016-05-26T00:56:56 | None         |07:41
Wenzhi_| e4c21dcd-7a70-44c0-8477-722d691b35a9 | fail_bay-5kmn7urcgii3 | CREATE_FAILED   | 2016-05-26T01:34:15 | None         |07:41
Wenzhi_+--------------------------------------+-----------------------+-----------------+---------------------+--------------+07:41
Wenzhi_yuywz@yuywz-virtual-machine:~$ heat resource-list fail_bay-5kmn7urcgii3 -f status=FAILED07:42
Wenzhi_WARNING (shell) "heat resource-list" is deprecated, please use "openstack stack resource list" instead07:42
Wenzhi_ERROR: The specified reference "extrouter_inside" (in kube_minions) is incorrect.07:42
Wenzhi_therve: and -f status=COMPLETE works well on the same stack07:42
openstackgerrithuangtianhua proposed openstack/heat: Support resource/output condition  https://review.openstack.org/28336607:42
Wenzhi_yuywz@yuywz-virtual-machine:~$ heat resource-list fail_bay-5kmn7urcgii3 -f status=COMPLETE07:42
Wenzhi_WARNING (shell) "heat resource-list" is deprecated, please use "openstack stack resource list" instead07:42
Wenzhi_+----------------------+-------------------------------------------------------------------------------------+------------------------------+-----------------+---------------------+07:42
Wenzhi_| resource_name        | physical_resource_id                                                                | resource_type                | resource_status | updated_time        |07:42
Wenzhi_+----------------------+-------------------------------------------------------------------------------------+------------------------------+-----------------+---------------------+07:42
Wenzhi_| api_monitor          | 14ce1ff3-c3e7-41ad-843f-77a5b601c58b                                                | OS::Neutron::HealthMonitor   | CREATE_COMPLETE | 2016-05-26T01:34:15 |07:42
therveWenzhi_, Please!07:42
Wenzhi_| api_pool             | df4c0f61-e022-4349-8f57-901fa3514bb3                                                | OS::Neutron::Pool            | CREATE_COMPLETE | 2016-05-26T01:34:15 |07:42
therveWenzhi_, paste.openstack.org07:42
Wenzhi_| api_pool_floating    | d869197d-cba1-4161-a14e-8c9388b61ee7                                                | OS::Neutron::FloatingIP      | CREATE_COMPLETE | 2016-05-26T01:34:15 |07:42
Wenzhi_| etcd_monitor         | d3f6fdba-68d3-4f71-87cd-5d622dd6a5d9                                                | OS::Neutron::HealthMonitor   | CREATE_COMPLETE | 2016-05-26T01:34:15 |07:42
therveUrg07:42
Wenzhi_| etcd_pool            | 82c03078-a9a4-49af-b9d4-0a1e4e4541b2                                                | OS::Neutron::Pool            | CREATE_COMPLETE | 2016-05-26T01:34:15 |07:42
Wenzhi_| extrouter            | 5b34600c-2e32-4180-94f8-8a35d6654f1b                                                | OS::Neutron::Router          | CREATE_COMPLETE | 2016-05-26T01:34:15 |07:42
Wenzhi_| extrouter_inside     | 5b34600c-2e32-4180-94f8-8a35d6654f1b:subnet_id=69b29094-cb27-4c35-b874-3cfc50403dc9 | OS::Neutron::RouterInterface | CREATE_COMPLETE | 2016-05-26T01:34:15 |07:42
Wenzhi_| fixed_network        | 0c203cd4-07:43
Wenzhi_therve: sorry, I'll use paste.openstack.org07:43
ramishrawow;)07:43
*** hjensas has quit IRC07:43
*** sdake has joined #heat07:44
therveWenzhi_, It's a bit hard to tell, but I still suspect there is an issue in your template07:45
therveMaybe looking at heat logs would give a better idea too07:45
therveprazumovsky, I don't think specifying all properties as json parameter was ever meant to be supported07:48
*** sdake has quit IRC07:49
*** sdake has joined #heat07:50
prazumovskyit's not only for json-type param. If I want to specify all properties values in file, I'll get same error. I agree with you that it should be supported, I thought only about correct error message something like "Using functions for properties is prohibited"07:50
prazumovskytherve ^07:50
prazumovsky*should not, of course07:50
therveWell I didn't say it shouldn't :)07:51
therveJust it never was07:51
therveBut yeah I guess your point is that if it's not, it should raise a proper error07:51
therveWhich is fair07:51
*** dbecker has joined #heat07:52
prazumovskyyes, heat should be user-friendly orchestration service :)07:52
*** chlong has quit IRC08:04
*** cmyster has quit IRC08:07
*** cmyster has joined #heat08:12
*** cmyster has joined #heat08:12
*** afazekas is now known as afazekas|sick08:12
Wenzhi_therve: I opened a bug for this and attached the logs https://bugs.launchpad.net/heat/+bug/158593108:14
openstackLaunchpad bug 1585931 in heat "'heat resource-list STACK -f status=FAILED' does NOT work well" [Undecided,New]08:14
*** tmatsu has joined #heat08:14
therveThanks, looking08:14
Wenzhi_therve: thank you08:15
therveWenzhi_, Which magnum version are you using?08:16
Wenzhi_latest master08:17
therveAh08:17
*** tmatsu__ has quit IRC08:18
therveWenzhi_, https://github.com/openstack/magnum/blob/master/magnum/templates/kubernetes/kubecluster-fedora-ironic.yaml#L149 the bug is here08:19
therveAt least why you get that message08:19
therveWhy heat doesn't complain earlier, I don't know08:19
Wenzhi_therve: thanks for your help!08:21
openstackgerritPeter Razumovsky proposed openstack/heat: Improve translation properties  https://review.openstack.org/28609808:22
*** dmk0202 has joined #heat08:23
*** tmatsu has quit IRC08:33
*** sshnaidm has quit IRC08:34
openstackgerritPeter Razumovsky proposed openstack/heat: Improve translation properties  https://review.openstack.org/28609808:35
*** tmatsu has joined #heat08:39
*** derekh has joined #heat08:39
*** yassine__ has joined #heat08:42
*** jaosorior is now known as jaosorior_lunch08:45
*** tmatsu_ has joined #heat08:45
*** tmatsu has quit IRC08:49
therveWenzhi_, Can you confirm it's the right template deployed?08:53
prazumovskyramishra: I resolved your comments https://review.openstack.org/#/c/286098/08:59
*** jtomasek_ has joined #heat09:00
*** jtomasek_ has quit IRC09:02
*** jtomasek_ has joined #heat09:03
*** tmatsu_ has quit IRC09:05
*** nijaba has quit IRC09:06
*** tmatsu has joined #heat09:06
*** nijaba has joined #heat09:07
*** jtomasek_ has quit IRC09:08
therveWenzhi_, Nevermind! I managed to reproduce the issue09:09
therveIt is a problem with resource list filtering, good catch09:09
*** tmatsu has quit IRC09:10
*** prazumovsky has quit IRC09:16
*** tlashchova has joined #heat09:17
openstackgerrithuangtianhua proposed openstack/heat: Support resource/output condition  https://review.openstack.org/28336609:25
*** sshnaidm has joined #heat09:30
openstackgerrithuangtianhua proposed openstack/heat: WIP - Provides 'if' intrinsic function  https://review.openstack.org/28347909:31
*** jaosorior_lunch is now known as jaosorior09:35
*** tochi has quit IRC09:42
*** elynn_ has joined #heat09:43
*** elynn_ has quit IRC09:47
*** elynn_ has joined #heat09:48
*** wangbo has quit IRC09:52
openstackgerritThomas Herve proposed openstack/heat: Fix resource loading in resource filtering  https://review.openstack.org/32144910:06
*** Qiming has quit IRC10:08
*** yanyanhu has quit IRC10:09
*** tmatsu has joined #heat10:10
*** wangbo has joined #heat10:11
*** elynn_ has quit IRC10:14
*** tmatsu has quit IRC10:15
*** tmatsu has joined #heat10:16
*** tmatsu_ has joined #heat10:22
*** tmatsu has quit IRC10:22
openstackgerritMerged openstack/heat: Refactor resource update function to reduce complexity  https://review.openstack.org/30088110:23
*** tmatsu_ has quit IRC10:28
*** sorantis has quit IRC10:28
*** wangbo has quit IRC10:30
*** blues-man has joined #heat10:30
*** jprovazn has quit IRC10:37
*** code-R has joined #heat10:41
*** wangbo has joined #heat10:46
*** yassine__ has quit IRC10:47
*** wangbo has quit IRC10:55
*** jprovazn has joined #heat10:57
*** ananta has quit IRC10:59
*** Qiming has joined #heat10:59
*** blomquisg is now known as blomquisg_gone11:02
Wenzhi_therve: cool11:04
openstackgerritPeter Razumovsky proposed openstack/heat: Improve translation properties  https://review.openstack.org/28609811:05
*** links has quit IRC11:08
*** wangbo has joined #heat11:12
*** wangbo has quit IRC11:18
*** ccamacho is now known as ccamacho|lunch11:18
*** ishant has quit IRC11:25
openstackgerritPeter Razumovsky proposed openstack/heat: Improve translation properties  https://review.openstack.org/28609811:26
*** wendar has quit IRC11:31
*** wendar has joined #heat11:31
*** zz_dimtruck has quit IRC11:32
*** wangbo has joined #heat11:35
*** zz_dimtruck has joined #heat11:35
*** zz_dimtruck is now known as dimtruck11:35
*** tmatsu has joined #heat11:42
*** tmatsu has quit IRC11:46
openstackgerritThomas Herve proposed openstack/heat: Fix resource loading in resource filtering  https://review.openstack.org/32144911:48
therveKanagarajM_, Around to talk about that review? ^^11:54
*** jaosorior has quit IRC12:00
*** jaosorior has joined #heat12:00
*** pradk has joined #heat12:05
*** blomquisg_gone is now known as blomquisg12:06
*** elynn_ has joined #heat12:12
*** fultonj has joined #heat12:14
*** dprince has joined #heat12:19
openstackgerritMerged openstack/heat: Don't support floating ip if only specify 'network'  https://review.openstack.org/31546712:25
*** sorantis has joined #heat12:27
*** rajpatel has joined #heat12:34
*** vgridnev has quit IRC12:37
jdobhuangtianhua: ping12:39
therveramishra, The tripleo ci failed on https://review.openstack.org/286098 , are you sure it's unrelated?12:41
ramishrayeah, it seems like, We can give it one more try.12:42
*** KanagarajM_ has quit IRC12:43
ramishratherve^12:43
therveOK12:43
*** code-R has quit IRC12:48
*** yassine has joined #heat12:49
*** yassine is now known as Guest8699812:50
*** steveg_afk has joined #heat12:58
*** pradk has quit IRC13:05
openstackgerritMerged openstack/heat: Adding two parameters into Software configuration  https://review.openstack.org/31490813:13
*** EricGonc_ has quit IRC13:15
*** spzala has joined #heat13:17
*** pradk has joined #heat13:18
*** code-R has joined #heat13:34
*** blomquisg is now known as blomquisg_gone13:35
*** lrensing has joined #heat13:39
*** code-R_ has joined #heat13:41
*** spotz_zzz is now known as spotz13:43
*** tmatsu has joined #heat13:44
*** code-R has quit IRC13:45
ramishratherve: hey around?13:46
openstackgerritJuan Antonio Osorio Robles proposed openstack/heat: Support client side certificate verification  https://review.openstack.org/32154413:47
*** blomquisg_gone is now known as blomquisg13:48
*** tmatsu has quit IRC13:49
*** rajpatel has quit IRC13:51
*** rpothier has joined #heat13:52
therveramishra, Yep13:58
ramishrathere is an error in the triplo ci log, http://logs.openstack.org/98/286098/22/experimental-tripleo/gate-tripleo-ci-f22-nonha/7a5fa0e/logs/undercloud/var/log/heat/heat-engine.txt.gz#_2016-05-26_13_16_16_09414:00
ramishrahowever nothing in the engine log, it says the stack created successfully14:01
ramishrahttp://logs.openstack.org/98/286098/22/experimental-tripleo/gate-tripleo-ci-f22-nonha/7a5fa0e/console.html#_2016-05-26_13_16_16_07814:01
*** yohoffman has joined #heat14:01
ramishrathe logs in reverse order14:01
ramishraso not sure what's going on, it failed the second time too.14:02
*** sorantis has quit IRC14:02
ramishratherve: ^^14:03
therveramishra, That's just one nested stack, no?14:03
ramishrayep14:03
therveAh ok that's the one referenced in the other log14:03
*** jaimguer has quit IRC14:06
therveramishra, So yeah I don't know. Do we know if it passes elsewhere?14:10
therveMaybe it's a real issue with that patch14:10
ramishramay be, I don't know, it passed in the morning for https://review.openstack.org/#/c/320506/14:11
therveIt seems to be interrupted abruptly in the middle14:11
*** rajpatel has joined #heat14:13
*** jaimguer has joined #heat14:13
*** jasond has joined #heat14:13
*** tmatsu has joined #heat14:16
therveThere is a weird overcloud-VipConfig-df2v3qligao4/None link in there14:18
*** FL1SK has joined #heat14:20
*** code-R_ has quit IRC14:20
*** sabeen1 has quit IRC14:20
*** tmatsu has quit IRC14:20
*** EricGonczer_ has joined #heat14:22
*** sabeen has joined #heat14:22
therveramishra, Is it possible that the patch is messing around with some data?14:24
therveI have zero confidence in that change14:25
*** spzala has quit IRC14:25
*** cwolferh has quit IRC14:26
ramishratherve: AFAICT, it's not changing the existing stuff a lot, rather refactors them.14:27
ramishrathough we should make sure that it's not going to break things.14:28
therveYeah it's just very hard to tell14:29
thervetranslation has a history of breaking things14:29
therveI'll create a patch in tripleo to check14:30
ramishraok:)14:30
ramishrado you know how to to get "openstack overcloud deploy" output more debug info?14:31
therveNope14:32
*** LimorStotland has quit IRC14:33
*** vishwanathj has joined #heat14:33
*** rajpatel has quit IRC14:33
*** code-R has joined #heat14:34
*** Drago has joined #heat14:48
*** FL1SK has quit IRC14:49
*** Drago has quit IRC14:50
*** vijendar has joined #heat14:50
*** Drago has joined #heat14:50
thervezaneb, I realized that if we implement trust notifications in zaqar, we could remove zaqar polling for heat14:51
therveThat'd be pretty neat14:51
zanebif we allowed it to post to any URL you mean?14:52
therveYeah.14:52
therveWe could put signal URLs in there14:53
*** blomquisg is now known as blomquisg_gone14:54
zanebinteresting14:54
*** blomquisg_gone is now known as blomquisg14:54
*** spzala has joined #heat14:54
*** spzala_ has joined #heat14:56
*** spzala has quit IRC14:59
*** kebray has quit IRC15:00
*** kebray has joined #heat15:01
*** rajpatel has joined #heat15:03
*** dmk0202 has quit IRC15:04
*** code-R has quit IRC15:06
jaosoriorzaneb: is Heat is using reno for release notes?15:07
jdobyes15:07
zanebjaosorior: yes15:07
jaosorioralright, let me lookf or the documentation... I have no clue how to use it15:07
*** vijendar has quit IRC15:09
*** code-R has joined #heat15:10
*** crose has joined #heat15:11
thervejaosorior, FWIW I don't have anything against that patch15:11
therveBut I don't think ssl support should be generally advised in there15:11
*** sshnaidm has quit IRC15:11
jaosoriortherve: ??15:12
thervejaosorior, I strongly advise to terminate SSL upfront15:13
therveOr use a different wsgi container15:13
jaosoriorwell, if people don't find that useful I can abandon it. I could work on getting heat inside apache instead, so SSL would be handled there instead15:15
therveI tried to prefix that I didn't have anything against that approach :)15:16
therveHeat inside Apache *should* work15:16
*** tmatsu has joined #heat15:17
therveWhich is what I would personally advocate (especially if you care about ssl), but maybe that's just me15:18
*** FL1SK has joined #heat15:19
*** rcernin has quit IRC15:19
jaosoriortherve: the public endpoints are already terminated via HAProxy. was thinking of internal TLS mostly15:19
thervejaosorior, Yeah... That's sometimes a concern15:20
therveI mean you need to secure rabbitmq and everything too15:20
jaosoriortherve: working on that too15:20
jaosoriorrabbitmq and the databases15:20
jaosoriorso it won't be only the openstack services15:20
therveI feel that if your internal network is compromised you'll have other concerns, but maybe that's just me :)15:21
*** vijendar has joined #heat15:21
therveramishra, Looks like a real issue: https://review.openstack.org/32157715:22
*** tmatsu has quit IRC15:22
jaosoriortherve: well, indeed, even with TLS everywhere (which is the goal) there will be other concerns15:24
jaosoriorif a compute is compromised, by the way rabbitmq is set up at the moment, things can go very badly15:25
jaosoriorthere was even some talk about that in the summit, but not that much came up15:25
*** sabeen1 has joined #heat15:26
jaosoriorbut anyway, known problem in openstack, I guess15:27
*** sabeen has quit IRC15:28
*** vincentll has quit IRC15:31
*** ccamacho|lunch is now known as ccamacho15:43
openstackgerritYosef Hoffman proposed openstack/heat: Correct redundancies in Scheduler Hints docs  https://review.openstack.org/32122515:45
*** code-R has quit IRC15:48
*** code-R has joined #heat15:48
*** tmatsu has joined #heat15:49
*** sergio__nubeliu has joined #heat15:50
*** sergio_nubeliu has joined #heat15:50
*** sergio_nubeliu has quit IRC15:50
*** tmatsu has quit IRC15:53
*** bana_k has joined #heat15:53
*** dprince has quit IRC15:57
*** dprince has joined #heat15:58
jdobzaneb: ping16:02
zanebjdob: pong16:03
*** sshnaidm has joined #heat16:03
jdobzaneb: all of your comments on the refs patch make sense, but "refs_map and refs, and it's probably not too late to change ResourceGroup" ... isn't it too late to change refs in ResourceGroup? refs_map either hasn't landed yet or is recent, but I thought refs was older, no?16:03
zaneboh, is it?16:04
jdobi dont see a support_status on it, so I assumed it was old as hell16:04
zanebwell, if you didn't add it it's probably old16:05
jdobgit annotate shows 5/14/1416:05
jdobya, I only added refs_map, which I personally wouldn't have chosen as the name, but followed the pattern :)16:05
*** Guest86998 has quit IRC16:05
*** blues-man has quit IRC16:06
*** pradk has quit IRC16:07
zanebjdob: fair16:07
zanebignore me then16:07
openstackgerritJaime Guerrero proposed openstack/heat: Ignore NotFound exception in metadata_set  https://review.openstack.org/32163716:07
jdobwhat about refs itself, still object to it given output_list exists?16:07
*** Qiming has quit IRC16:08
jdobdamnit, I should have said "given some asshole implemented output_list?"16:08
zanebyeah, screw that guy16:09
zanebI'm in two minds now16:10
jdobI'll look into the grouputils way of getting the IDs and use that instead of resource_id directly (i knew that felt like too easy of an answer :)16:11
*** jaosorior has quit IRC16:11
zanebyou could have just called FnGetRefId too, but grouputils already implemented that for you16:12
jdobI wanna dig through those more to understand what makes it different, but at a glance seeing things like checking for failed resources and running through six16:12
zanebsubclasses are allowed to override FnGetRefId, so just grabbing the resource_id attribute isn't sufficient16:13
jdobmakes sense16:14
*** _mgershen has joined #heat16:15
*** _mgershen has left #heat16:16
*** dprince has quit IRC16:35
*** dprince has joined #heat16:35
*** bana_k has quit IRC16:35
*** code-R has quit IRC16:37
*** pradk has joined #heat16:43
*** kraynevs has joined #heat16:47
*** spzala_ has quit IRC16:49
*** spzala has joined #heat16:50
*** tmatsu has joined #heat16:51
*** jasond has quit IRC16:53
*** spzala has quit IRC16:55
*** derekh has quit IRC16:56
*** rajpatel has quit IRC16:56
*** tmatsu has quit IRC16:56
*** bana_k has joined #heat16:59
*** kebray has quit IRC17:00
*** cwolferh has joined #heat17:04
openstackgerritOpenStack Proposal Bot proposed openstack/python-heatclient: Updated from global requirements  https://review.openstack.org/32171917:04
*** yohoffman has left #heat17:06
*** thumpba has joined #heat17:08
*** FL1SK has quit IRC17:08
*** jasond has joined #heat17:08
*** elynn_ has quit IRC17:11
*** spzala has joined #heat17:13
*** code-R has joined #heat17:14
*** fragatina has joined #heat17:15
*** spzala has quit IRC17:17
*** cwolferh has quit IRC17:19
*** fragatina has quit IRC17:20
*** cwolferh has joined #heat17:20
*** tmatsu has joined #heat17:22
*** spzala has joined #heat17:24
*** tmatsu has quit IRC17:27
*** dprince has quit IRC17:28
*** bana_k has quit IRC17:28
*** spzala has quit IRC17:29
*** code-R has quit IRC17:30
*** spzala has joined #heat17:30
*** code-R has joined #heat17:31
*** spzala has quit IRC17:34
*** spzala has joined #heat17:36
*** bana_k has joined #heat17:38
*** spzala has quit IRC17:41
*** FL1SK has joined #heat17:41
*** vgridnev has joined #heat17:44
*** vishwanathj has quit IRC17:44
*** david-lyle has quit IRC17:47
*** david-lyle has joined #heat17:47
*** spzala has joined #heat17:48
*** code-R has quit IRC17:50
openstackgerritZane Bitter proposed openstack/heat: Use intended retry delays  https://review.openstack.org/32178317:50
*** code-R has joined #heat17:50
*** spzala has quit IRC17:53
*** spzala has joined #heat17:56
*** kebray has joined #heat17:58
*** FL1SK has quit IRC17:58
*** thumpba has quit IRC17:58
*** thumpba has joined #heat17:58
*** thumpba_ has joined #heat18:02
*** thumpba has quit IRC18:02
*** spzala has quit IRC18:04
*** spzala has joined #heat18:07
*** code-R_ has joined #heat18:09
*** spzala has quit IRC18:11
*** code-R has quit IRC18:12
*** tmatsu has joined #heat18:24
openstackgerritJaime Guerrero proposed openstack/heat: Ignore NotFound exception in metadata_set  https://review.openstack.org/32163718:28
*** tmatsu has quit IRC18:29
*** spzala has joined #heat18:31
*** kraynevs has quit IRC18:35
*** code-R_ has quit IRC18:37
*** thumpba_ has quit IRC18:47
*** huangtianhua has quit IRC18:50
*** huangtianhua has joined #heat18:50
*** tmatsu has joined #heat18:56
*** cwolferh has quit IRC18:57
*** rajpatel has joined #heat18:58
*** thumpba has joined #heat18:59
*** tmatsu has quit IRC19:00
*** vijendar has quit IRC19:01
*** vgridnev has quit IRC19:05
*** code-R has joined #heat19:07
*** code-R_ has joined #heat19:08
*** vgridnev has joined #heat19:10
*** thumpba has quit IRC19:11
*** code-R has quit IRC19:11
*** vijendar has joined #heat19:12
*** dbecker has quit IRC19:13
*** lrensing has quit IRC19:14
*** rajpatel has quit IRC19:14
*** fragatina has joined #heat19:16
*** fragatina has quit IRC19:17
*** fragatina has joined #heat19:17
*** thumpba has joined #heat19:18
*** rajpatel has joined #heat19:25
*** fultonj has quit IRC19:26
*** fultonj has joined #heat19:26
*** dbecker has joined #heat19:26
*** dbecker has quit IRC19:26
*** dbecker has joined #heat19:30
*** pradk has quit IRC19:38
*** code-R_ has quit IRC19:43
openstackgerritZane Bitter proposed openstack/heat: Deprecate Stack.resource_restart()  https://review.openstack.org/32182519:50
zanebjdob: ^ that one is for you19:52
jdobHA.19:53
jdobcan I be made core for the scope of that one review so I can +2 it19:55
*** pradk has joined #heat19:56
*** tmatsu has joined #heat19:57
*** sdake_ has joined #heat19:58
*** sdake has quit IRC20:00
*** cwolferh has joined #heat20:01
*** jprovazn has quit IRC20:01
*** tmatsu has quit IRC20:02
*** FL1SK has joined #heat20:08
*** vijendar has quit IRC20:10
*** rajpatel has quit IRC20:10
*** vgridnev has quit IRC20:11
*** kebray has quit IRC20:13
zanebjdob: the original HARestarter deprecation message said "Avoid at all costs", but whiners made me change it20:18
*** IPv6Freely has joined #heat20:20
*** IPv6Freely has quit IRC20:26
*** IPv6Freely has joined #heat20:28
IPv6FreelyHi all. When I attempt to launch a stack in the OpenStack UI, I get the error "ERROR: Value must be a string". That's... not very descriptive. Here is my stack: http://pastebin.com/tpLEUpng20:28
*** tmatsu has joined #heat20:29
*** tmatsu has quit IRC20:33
*** annemccormick has joined #heat20:38
annemccormickhello! I’m trying to set up a heat domain to run heat stacks as non-root user, hitting some issues20:38
annemccormickdo I need to be using keystonev3 for this to work?20:38
*** jdob has quit IRC20:40
*** crose has quit IRC20:41
zanebIPv6Freely: you can't use "Ref" in heat_template_version: "2015-04-30". Use "get_resource" instead20:49
*** vijendar has joined #heat20:49
IPv6Freelygotcha, that'll cause some issues ;)20:49
*** vijendar has quit IRC20:50
*** thumpba has quit IRC20:51
zanebannemccormick: that's quite possible. by "non-root" you mean non-admin, right?20:51
zanebannemccormick: actually I'm going to go with 'yes'. gruesome details here: http://hardysteven.blogspot.com/2014/04/heat-auth-model-updates-part-2-stack.html20:52
*** rajpatel has joined #heat20:54
*** sergio__nubeliu has quit IRC20:55
stevebakermorning20:58
IPv6FreelyThanks zaneb, a few tweaks and all is good. Much appreciated.20:59
zanebnp21:04
*** IPv6Freely has quit IRC21:04
*** fultonj has quit IRC21:06
*** jasond has quit IRC21:07
*** kebray has joined #heat21:07
*** jasond has joined #heat21:07
*** kebray_ has joined #heat21:08
stevebakerzaneb: regarding your generator comment, it looks like a generator which doesn't yield returns None https://review.openstack.org/#/c/313228/7/heat/engine/service.py21:08
stevebakerhttp://paste.openstack.org/show/505743/21:08
zanebwat21:09
*** fragatina has quit IRC21:09
zanebno21:09
zanebthat's a little thing we call a function. you may have heard of them21:11
*** kebray has quit IRC21:11
zanebhere is a generator that doesn't yield anything: http://paste.openstack.org/show/505744/21:12
zanebit returns a generator object just like any other generator (it has to, it hasn't run yet so it can't know that it's not going to yield anything), and those are truthy21:13
*** rpothier has quit IRC21:19
Dragolol21:21
*** blomquisg is now known as blomquisg_gone21:26
*** fragatina has joined #heat21:29
*** tmatsu has joined #heat21:31
*** jrist has quit IRC21:32
*** dimtruck is now known as zz_dimtruck21:33
*** tmatsu has quit IRC21:35
stevebakerzaneb: ok, now I have something to respond to Sergey in this change where I remove them https://review.openstack.org/#/c/321266/1/heat/engine/service.py21:39
*** blomquisg_gone is now known as blomquisg21:39
*** jrist has joined #heat21:46
*** EricGonczer_ has quit IRC21:47
*** fultonj has joined #heat21:51
*** FL1SK has quit IRC21:53
*** sdake has joined #heat21:53
*** sdake_ has quit IRC21:54
*** tmatsu has joined #heat22:02
*** fultonj has quit IRC22:03
*** jasond has quit IRC22:04
*** rajpatel has quit IRC22:06
*** tmatsu has quit IRC22:07
*** zz_dimtruck is now known as dimtruck22:07
flwangzaneb: ping22:13
zanebflwang: o/22:14
flwangzaneb: have a moment to discuss your spec?22:14
zanebsure thing22:14
flwangzaneb: in this spec, for the user case in you mind, who send what kind of messages/notifications to zaqar queue?22:15
zanebAodh alarms and Heat notifications are the obvious ones that exist already22:16
zanebin the future I hope there'll be more22:17
flwangok, cool, then do you think we need a filter pattern for the notifier?22:17
flwangbecause for now, by default, any msg posted to the queue will notify the subscriber22:18
flwangi'm thinking if we should add a filter pattern, so that when user subscribe, they can define a pattern22:18
zanebI think it's ok not, because the workflow can decide what to actually do with the message (it may ignore it)22:19
zanebbut it wouldn't hurt22:19
zanebI had imagined that people would use separate queues if they only wanted to trigger off some subset22:20
zanebbut I wouldn't be surprised if people proved me wrong as soon as they started using it ;)22:20
flwangzaneb: ok, that makes much sense22:20
flwangzaneb: i got this idea since i found tripleO is trying use only 1 queue to fit all22:21
flwangand i'm thinking people are always lazy to create many queues22:21
zanebtrue22:21
zanebHeat is similar, I believe we send all notification for the stack to a single queue22:21
zanebcan you have multiple notifications with different filters on a single queue?22:22
flwangzaneb: sure22:22
zanebok, then definitely +122:22
flwangthe pattern will be a reserved key of subscriptions' options22:22
flwangoptions is a dict22:22
*** rajpatel has joined #heat22:23
flwangwe can do the check at here https://github.com/openstack/zaqar/blob/master/zaqar/notification/notifier.py#L5222:23
flwangi proposed this before, but one team member thinks it's out of the scope of a messaging service :)22:24
flwangjust i just want to get some feedback from you guys22:24
zaneb:)22:24
flwangbesides, i aslo reviewed this https://review.openstack.org/#/c/308664/ the mistral spec22:25
flwangi'm thinking if end user can also define an even trigger, then seems it's totally duplicate with our idea22:26
flwangthough in the spec, the user case he mentioned are from ops view22:26
zanebI don't see any secure way for an end user to define a trigger off oslo.messaging22:27
flwangbut technically, from the code view, user can create an event trigger and only monitor notifications from their own tenants22:27
flwangmistral can filter based on the project id22:27
flwangunless i missed something22:28
zanebyeah, and that's really unsafe22:28
flwangzaneb: why?22:28
zaneband now we have 3 projects trying to be the place where we sanitise those messages22:28
zanebnotifications contain all sorts of stuff that's private to the operator22:29
flwangsearchlight, ceilometer and mistral? :D22:29
*** spotz is now known as spotz_zzz22:29
zanebyeah22:29
flwangbut if the project filters the notifications based on the project id, why is it unsafe?22:30
flwangthere are still something user shouldn't know?22:31
zanebyes22:31
flwangcan you give me an example?22:31
zanebkeystone tokens for other users in your tenant22:31
flwangzaneb: that's a perfect example22:32
zanebdata about your cloud internally (e.g. hostname of the compute node running your VM)22:32
flwangzaneb: yep22:33
zanebdinner time, I have to run but I'll circle back later22:33
flwangzaneb: ttyl22:36
flwangthanks22:36
*** Drago has quit IRC22:39
*** coreyob has quit IRC22:41
openstackgerritSteve Baker proposed openstack/python-heatclient: Implement "openstack stack failures list"  https://review.openstack.org/28096322:46
*** spzala has quit IRC22:50
*** spzala has joined #heat22:51
*** spzala has quit IRC22:55
*** rajpatel has quit IRC22:57
openstackgerritSteve Baker proposed openstack/python-heatclient: Implement "openstack stack failures list"  https://review.openstack.org/28096322:57
*** cwolferh has quit IRC23:05
*** rajpatel has joined #heat23:08
*** blomquisg is now known as blomquisg_gone23:16
*** rajpatel has quit IRC23:21
*** cwolferh has joined #heat23:23
*** Qiming has joined #heat23:36
zanebflwang: back23:36
flwangzaneb: cool, so basically, i think we're same the same page now for the spec23:38
zanebexcellent :)23:38
flwangoh, btw, so you still prefer to use url instead of mistral client, right?23:39
zanebI think we should implement it using mistralclient, but I think that the URI that identifies the notification type should be the URL23:41
*** FL1SK has joined #heat23:50
*** spzala has joined #heat23:51
*** elynn_ has joined #heat23:52
*** annemccormick has quit IRC23:52
flwangzaneb: ok, i can see your point23:58
flwangzaneb: that works for me23:58
flwangzaneb: so we will use   'trust+https://' instead of 'mistral://', right?23:59
*** elynn_ has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!