Monday, 2015-07-06

*** sdake has quit IRC00:53
*** annashen has joined #openstack-ansible02:00
*** annashen has quit IRC02:05
*** annashen has joined #openstack-ansible02:07
*** annashen has quit IRC02:08
*** annashen has joined #openstack-ansible02:08
*** davidself has quit IRC02:09
*** sdake has joined #openstack-ansible02:11
*** sdake_ has joined #openstack-ansible02:14
*** sdake has quit IRC02:18
*** annashen has quit IRC02:21
*** annashen has joined #openstack-ansible02:26
*** annashen has quit IRC02:50
*** annashen has joined #openstack-ansible03:03
*** annashen has quit IRC03:05
*** annashen has joined #openstack-ansible03:23
*** annashen has quit IRC03:27
*** annashen has joined #openstack-ansible03:41
*** sdake_ is now known as sdake03:56
*** annashen has quit IRC04:12
*** JRobinson__ has quit IRC04:17
*** daneyon has joined #openstack-ansible04:28
*** daneyon has quit IRC04:28
*** daneyon has joined #openstack-ansible04:28
*** annashen has joined #openstack-ansible04:47
*** annashen has quit IRC04:49
*** JRobinson__ has joined #openstack-ansible05:19
*** shausy has joined #openstack-ansible05:29
*** JRobinson__ has quit IRC05:42
*** JRobinson__ has joined #openstack-ansible05:49
*** ig0r__ has joined #openstack-ansible05:52
*** ig0r_ has quit IRC05:55
*** radek__ has joined #openstack-ansible06:05
*** daneyon has quit IRC06:28
*** vdo has joined #openstack-ansible07:15
*** annashen has joined #openstack-ansible07:50
*** annashen has quit IRC07:55
openstackgerritMatt Thompson proposed stackforge/os-ansible-deployment: Upgrade the Keystone library to use v3  https://review.openstack.org/19694308:04
*** JRobinson__ has quit IRC08:06
*** shausy has quit IRC08:11
*** shausy has joined #openstack-ansible08:11
*** subscope has joined #openstack-ansible08:17
*** daneyon has joined #openstack-ansible08:17
*** daneyon has quit IRC08:22
openstackgerritMatt Thompson proposed stackforge/os-ansible-deployment: Fix scripts/run-upgrade.sh  https://review.openstack.org/19831108:42
openstackgerritgit-harry proposed stackforge/os-ansible-deployment: Add v3 calls for federation to keystone module  https://review.openstack.org/19767709:04
*** subscope has quit IRC09:14
*** subscope has joined #openstack-ansible09:15
*** daneyon has joined #openstack-ansible10:06
*** daneyon has quit IRC10:11
openstackgerritJesse Pretorius proposed stackforge/os-ansible-deployment-specs: Keystone Federation Deployment  https://review.openstack.org/19414710:15
openstackgerritHugh Saunders proposed stackforge/os-ansible-deployment: [WIP] Keystone IdP configuration  https://review.openstack.org/19425910:18
matttcloudnull: problem w/ that is we don't take into account the new cinder is_metal setting, which is going to be problematic10:45
matttcloudnull: how about https://gist.github.com/mattt416/0c1b6d0b074c01fee0eb instead?10:45
*** subscope has quit IRC11:12
*** subscope has joined #openstack-ansible11:36
*** gparaskevas has joined #openstack-ansible11:39
*** gparaskevas has quit IRC11:42
openstackgerritJesse Pretorius proposed stackforge/os-ansible-deployment-specs: Keystone Service Provider with ADFS Identity Provider Deployment  https://review.openstack.org/19425511:49
*** daneyon has joined #openstack-ansible11:55
*** daneyon has quit IRC12:00
*** leakypipes is now known as jaypipes12:12
*** sigmavirus24_awa is now known as sigmavirus2413:24
*** TheIntern has joined #openstack-ansible13:24
*** shausy has quit IRC13:38
*** KLevenstein has joined #openstack-ansible13:39
*** KLevenstein has quit IRC13:43
*** daneyon has joined #openstack-ansible13:44
*** KLevenstein has joined #openstack-ansible13:48
*** daneyon has quit IRC13:48
*** galstrom_zzz is now known as galstrom13:52
openstackgerritJesse Pretorius proposed stackforge/os-ansible-deployment-specs: Keystone Federation Deployment  https://review.openstack.org/19414713:56
openstackgerritJesse Pretorius proposed stackforge/os-ansible-deployment-specs: Keystone Service Provider with ADFS Identity Provider Deployment  https://review.openstack.org/19425514:00
*** logan2 has quit IRC14:17
b3rnard0Needs review: https://review.openstack.org/#/c/198441/14:26
sigmavirus24b3rnard0: you have no power here =P14:34
odyssey4meb3rnard0 done14:36
*** logan2 has joined #openstack-ansible14:41
*** jwagner_away is now known as jwagner14:50
*** Mudpuppy has joined #openstack-ansible15:00
openstackgerritMatt Thompson proposed stackforge/os-ansible-deployment: Fix scripts/run-upgrade.sh  https://review.openstack.org/19831115:02
*** serverascode has quit IRC15:05
*** serverascode has joined #openstack-ansible15:07
mgariepyquick questions, does OSAD support upgrading openstack from juno to kilo , or K to L ?15:08
mgariepyK to L when it's out.. of course..15:09
palendaemgariepy:Yeah, juno -> kilo does work15:09
palendaeVia the run-upgrade.sh script15:09
palendaeWhich will be the convention going forward15:09
palendaeSo K->L should use it15:09
palendaeThough J->K was a much bigger changeset, since we removed a lot of rackspace-isms in the process15:10
mgariepyOh cool. and are the api endpoints use https ?15:10
palendaeThat's configureable, so yes, they can be15:11
*** logan2 has quit IRC15:11
mgariepythanks.15:11
palendaeWelcome15:13
*** markvoelker has quit IRC15:14
mgariepywe are currently looking into deployment solution since the one we are currently using isn't great.15:14
odyssey4memgariepy you may find the docs in-repo useful - there's an output of them here: http://osad.readthedocs.org/en/latest/15:16
palendaeYeah, those docs may be helpful. Hopefully closer to L we'll have them updated with commits and hosted on openstack's doc site15:17
*** logan2 has joined #openstack-ansible15:19
*** vdo has quit IRC15:24
mgariepyok, I have read a bit of the doc already, i just wasn't sure of some things. and since doc is always behind it's easier to ask ;)15:28
palendaemgariepy: Yeah. We're working on those, slowly15:29
sigmavirus24mgariepy: to be clear15:29
sigmavirus24osad supports upgrading osad juno to osad kilo15:29
sigmavirus24not some other deployment solution juno to osad kilo15:29
palendaeSpeaking of, Sam-I-Am, you said you'd look at https://review.openstack.org/#/c/193277/315:29
sigmavirus24if that makes sense15:29
palendaeAh, yes, that's a good point15:29
palendaeOSAD only does OSAD; it won't migrate any other existing environment15:29
mgariepyyeah i am not expecting upgrading mirantis fuel OS juno to OSAD kilo15:30
palendaeOk :015:30
palendae:)15:30
Sam-I-Ampalendae: yarp, sort of doing that now in between ohhhhhh there's another meeting15:31
mgariepyi also don't expect to ride unicorn ;p15:31
palendaeSam-I-Am: Yeah, I figured. Just a reminder :)15:31
palendaemgariepy: Well that makes you kind of unique, then ;)15:31
odyssey4memgariepy to be fair, it'll just need you to copy your OpenStack db's over to the OSAD setup - provide the right creds (or overwrite them), and I expect there'll be some other bits you'll have to move/convert in some way - but the OpenStack installation of Kilo will handle the DB upgrade bits...15:32
odyssey4mewe'd love a write-up in the docs for how to migrate from another setup to OSAD :)15:32
*** daneyon has joined #openstack-ansible15:33
palendaeodyssey4me: Sounds like you know how it'll work!15:33
palendaeDocs welcome15:33
odyssey4mepalendae if I had a gap, I'd do a spike and doc it - I really do think it'd work15:33
*** daneyon has quit IRC15:33
palendaeYeah, that actually would be interesting15:33
palendaeIf for no other reason than SCIENCE15:34
mgariepywell my setup is icehouse and it will be a lot less work just to reinstall with OSAD then to migrate the data.  and anyway my service is BETA and i have like 5 or 6 users.15:35
openstackgerritMerged stackforge/os-ansible-deployment: Fixed the upgrade script edge case  https://review.openstack.org/19844115:43
openstackgerritKevin Carter proposed stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19878416:02
openstackgerritKevin Carter proposed stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19878616:03
palendaecloudnull: I'm spinning up a stack to test ^ now, unless you have people ready to stamp it16:06
palendaeandymccr, odyssey4me, hughsaunders, mattt ^^^ important patch(es)16:06
cloudnullandymccr: sigmavirus24: odyssey4me: ^16:06
cloudnullha beat me to i t16:06
palendaeMissed one16:06
hughsaunderswill wait for jenins16:08
cloudnullall cores that have reviewed the issues should auto +2 now16:08
sigmavirus24what cloudnull said16:09
sigmavirus24I tested/helped come up with those patches so I'm 100% certain they work =P16:09
palendaeYep16:09
hughsaundersbug link is invalid16:10
cloudnullthats because its private16:10
hughsaundersahh16:10
sigmavirus24cloudnull: as soon as the patches are published it should be changed to public security16:10
sigmavirus24iirc16:10
sigmavirus24this is also the public disclosure date iirc16:10
cloudnullit will . juno icehouse patches coming right up16:10
*** markvoelker has joined #openstack-ansible16:10
openstackgerritKevin Carter proposed stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19879216:11
openstackgerritKevin Carter proposed stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19879416:12
cloudnullhughsaunders:  the link should work now.16:14
*** jaypipes is now known as jay-deepthought16:21
openstackgerritMatthew Kassawara proposed stackforge/os-ansible-deployment: Document some of the common scripts  https://review.openstack.org/19327716:42
*** git-harry has quit IRC16:50
*** git-harry has joined #openstack-ansible16:54
openstackgerritMerged stackforge/os-ansible-deployment-specs: Cleaned up all specs  https://review.openstack.org/19383216:57
*** daneyon has joined #openstack-ansible17:00
*** galstrom is now known as galstrom_zzz17:03
*** javeriak has joined #openstack-ansible17:07
*** KLevenstein has quit IRC17:07
*** grumpycat has joined #openstack-ansible17:17
*** logan2 has quit IRC17:21
*** KLevenstein has joined #openstack-ansible17:22
openstackgerritMerged stackforge/os-ansible-deployment: Document some of the common scripts  https://review.openstack.org/19327717:31
openstackgerritKevin Carter proposed stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19879417:35
openstackgerritKevin Carter proposed stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19879217:35
*** alextricity_r has joined #openstack-ansible17:38
*** jay-deepthought is now known as jaypipes17:40
*** galstrom_zzz is now known as galstrom17:45
*** annashen has joined #openstack-ansible17:50
*** logan2 has joined #openstack-ansible17:50
*** abitha has joined #openstack-ansible18:02
prometheanfirecloudnull: when we move repo under openstack?18:03
*** daneyon_ has joined #openstack-ansible18:15
*** daneyon has quit IRC18:18
javeriakhey guys, do we have any ETA for new tags, 10.1.10 ?18:19
cloudnullprometheanfire: when the tc/infra team gets to it. it may be a few weeks.18:20
cloudnulljaveriak: 10.1.10 comes out today18:20
javeriakcloudnull: okay thanks18:20
prometheanfirecloudnull: the aio.swift thing is a feature, requiring a blueprint?18:26
cloudnullyup18:27
*** annashen has quit IRC18:28
cloudnullat the minimum you should have a wishlist item created in LP18:28
sigmavirus24mattt: you around18:36
*** annashen has joined #openstack-ansible18:38
*** annashen has quit IRC18:40
*** galstrom is now known as galstrom_zzz18:48
odyssey4meheh, it would appear that puppet-openstack is keeping an eye out on some of our work: https://review.openstack.org/#/c/190361/18:48
*** galstrom_zzz is now known as galstrom18:48
cloudnullhaha its the higest form of flaterry18:49
odyssey4me:) it is rather18:50
cloudnullodyssey4me:  you see http://lists.openstack.org/pipermail/openstack-dev/2015-July/068435.html18:50
cloudnullnot that theres a question there, however it was in reply to your initial RFC18:50
odyssey4mecloudnull yeah, I should actually respond to that - It should be reasonably doable, but I'll have to test it18:57
*** annashen has joined #openstack-ansible18:57
*** galstrom is now known as galstrom_zzz18:58
sigmavirus24mattt: anyway, I don't think https://bugs.launchpad.net/nova/+bug/1424462 is the problem19:06
openstackLaunchpad bug 1424462 in OpenStack Compute (nova) "Nova/Neutron v3 authentication" [Medium,Fix released] - Assigned to Jamie Lennox (jamielennox)19:06
sigmavirus24That's already fixed and released in 2015.1.019:06
sigmavirus24(or so launchpad says)19:06
odyssey4mecloudnull replied :)19:11
*** alextricity_r has quit IRC19:12
*** alextricity_r has joined #openstack-ansible19:22
cloudnull++ odyssey4me !19:22
*** galstrom_zzz is now known as galstrom19:25
sigmavirus24mattt: I see why you thought that was the issue19:33
*** alextricity_r has quit IRC19:33
*** alextricity_r has joined #openstack-ansible19:37
*** annashen has quit IRC19:37
*** annashen has joined #openstack-ansible19:38
*** annashen has quit IRC19:42
cloudnullwe have two commits, for juno and icehouse that need to be re-reviewed https://review.openstack.org/#/q/starredby:cloudnull+status:open,n,z19:48
cloudnulla second patch set was upload to fix the rabbit group name for icehouse and juno.19:48
palendaecloudnull: Got my +219:51
cloudnulltyvm palendae19:51
*** annashen has joined #openstack-ansible20:07
*** abitha has quit IRC20:08
*** alextricity_r has quit IRC20:09
*** abitha has joined #openstack-ansible20:10
*** abitha has quit IRC20:11
*** javeriak has quit IRC20:11
*** abitha has joined #openstack-ansible20:13
*** alextricity_r has joined #openstack-ansible20:14
dstanekodyssey4me: any luck on that bug from Friday?20:16
odyssey4medstanek yeah, marekd confirmed it earlier today: https://bugs.launchpad.net/keystone/+bug/147128920:17
openstackLaunchpad bug 1471289 in Keystone "Fernet tokens and Federated Identities result in token scope failures" [High,Confirmed] - Assigned to Marek Denis (marek-denis)20:17
odyssey4meif you check the scrollback in #openstack-keystone you'll see the discussion with lbragstad20:18
dstanekodyssey4me: well that at least confirms that what we were seeing isn't something you did20:18
odyssey4medstanek yeah, it appears so :) it's good to know that I'm not all that mad :p20:19
openstackgerritMerged stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19878420:20
openstackgerritMerged stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19878620:24
openstackgerritMerged stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19878620:24
palendaeDid it merge kilo twice?20:26
*** alextricity_r has quit IRC20:26
sigmavirus24palendae: huh?20:34
palendaeopenstackgerrit posted the kilo review as being merged twice20:34
sigmavirus24palendae: looks like no: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/log/?h=kilo20:34
palendaeWonder if an event just fired wrong then20:35
matttsigmavirus24: did you get it to work?  i loosely tried their solution and it sorta seemed to work20:41
sigmavirus24mattt: I think I found the real problems20:41
sigmavirus24We need to properly use an auth_plugin for neutron with a keystoneclient auth plugin20:41
sigmavirus24I have an AIO building that now20:42
sigmavirus24That meant modifying the nova.conf file to update the neutron section for that stuff20:42
matttyeah that's what the bug is implying no?20:42
sigmavirus24The docs for this stuff are kind of thin ish20:42
sigmavirus24yeah, they just added support for it20:42
sigmavirus24And make vague hand-wave-y pointers to the stuff in Keystoneclient20:42
matttbut yeah, that's why i didn't commit it ... it was a bit vague and while it seemed to work ish i didn't feel confident committing20:42
sigmavirus24Yeah, I'm running some tests20:43
matttcloudnull: did you see my update to your code?20:43
sigmavirus24I also re-factored how we build up the keystone URLs20:43
matttsigmavirus24: nice, i'll have a gander tomorrow morning20:43
sigmavirus24It's not up on review.o.o yet20:44
sigmavirus24It's on my GitHub fork right now on the keystone-v3 branch20:44
openstackgerritNolan Brubaker proposed stackforge/os-ansible-deployment: Add MaaS specific rabbitmq user  https://review.openstack.org/19888820:53
palendaeCores ^ part of the CVE20:54
cloudnullpalendae: why are we doing that20:54
cloudnullisnt that covered here https://review.openstack.org/#/c/19879220:54
palendaeAh, you're right20:56
palendaeAbandoned20:56
cloudnullmattt: what what what ?20:56
cloudnullsorry missed the message before ?20:56
matttcloudnull: how about https://gist.github.com/mattt416/0c1b6d0b074c01fee0eb instead?21:01
mattt(resent from earlier)21:01
cloudnulllgtm21:02
matttcloudnull: that review needs more work though, i'm still running into issues w/ the upgrade21:03
mattti have to dig into it more tomorrow21:03
cloudnullwe might want to force is_metal false for cinder because we know thats how it will be for an upgrade env.21:04
*** annashen has quit IRC21:05
matttcloudnull: well this will set it to false if it hasn't explicitly been set to true21:05
*** annashen has joined #openstack-ansible21:06
cloudnullah yea so it should be good to go21:06
matttyeah it will compare all the is_metal settings and make sure it gets written out if different21:06
cloudnulli know jwagner had been testing the upgrade.21:06
matttbut issue i'm now having is that my container IPs get wiped after running the upgrade script21:07
cloudnullim not sure what the status of that is21:07
cloudnullyour container IPs get wipped ?21:08
matttyeah they end up coming up with eth0 only, so ssh times out21:08
cloudnullstrange21:09
cloudnullthis line https://github.com/stackforge/os-ansible-deployment/blob/master/scripts/run-upgrade.sh#L53421:10
*** annashen has quit IRC21:10
cloudnullshould ensure that all containers are running with the correct configs21:10
cloudnulldoes it get past the container create play ?21:11
matttcloudnull: nope21:13
matttcloudnull: that is the task it fails on21:13
matttcloudnull: where do eth1 etc. get configured after we delete them from config?21:13
cloudnullin lxc-containers-create.yml21:14
*** annashen has joined #openstack-ansible21:14
cloudnullthese three tasks https://github.com/stackforge/os-ansible-deployment/blob/master/playbooks/roles/lxc_container_create/tasks/container_create.yml#L140-L17921:15
matttcloudnull: so i see the right config in the container, but nothing in the container config to associate a device with a bridge21:15
cloudnullthose items notify the container to restart21:17
matttyeah i stop/start manually and get no IP21:20
matttattach and ifup -a and i get an IP on eth121:21
matttodd, need to dig into it more21:21
cloudnullthats odd indeed21:21
mattti need to do a clean build and try again21:23
matttthis issue coudl be environmental21:23
*** galstrom is now known as galstrom_zzz21:30
*** fawadkhaliq has joined #openstack-ansible21:31
*** Mudpuppy has quit IRC21:35
*** radek__ has quit IRC21:41
*** fawadkhaliq has quit IRC21:52
*** daneyon has joined #openstack-ansible22:09
*** daneyon_ has quit IRC22:12
*** KLevenstein has quit IRC22:14
*** weezS has joined #openstack-ansible22:19
*** galstrom_zzz is now known as galstrom22:21
openstackgerritIan Cordasco proposed stackforge/os-ansible-deployment: Upgrade the Keystone library to use v3  https://review.openstack.org/19694322:30
*** galstrom is now known as galstrom_zzz22:43
*** daneyon has quit IRC23:05
*** JRobinson__ has joined #openstack-ansible23:07
*** weezS has quit IRC23:14
*** jaypipes has quit IRC23:18
*** weezS has joined #openstack-ansible23:28
openstackgerritMerged stackforge/os-ansible-deployment: Fixes RabbitMQ guest user creation  https://review.openstack.org/19879223:29
*** abitha has quit IRC23:39
*** annashen has quit IRC23:45
*** annashen has joined #openstack-ansible23:46
*** annashen has quit IRC23:51
*** sigmavirus24 is now known as sigmavirus24_awa23:52

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!