Monday, 2015-11-09

*** rady has quit IRC00:06
*** sdake has joined #openstack-ansible00:07
*** sdake_ has joined #openstack-ansible00:15
*** sdake has quit IRC00:15
openstackgerritMerged openstack/openstack-ansible: Minor cleanup of interfaces.cfg  https://review.openstack.org/24287000:30
*** sdake_ has quit IRC01:13
*** August1914 has joined #openstack-ansible01:20
*** rajalokan has joined #openstack-ansible01:44
*** davidself has joined #openstack-ansible02:41
*** woodard has joined #openstack-ansible02:52
mhaydenjust found an interesting glance bug of sorts...03:00
mhaydenor perhaps in oslo config03:00
mhaydenif your password for a swift backend has a '$' in it, you have to escape with '$$'03:01
*** cloudtrainme has joined #openstack-ansible03:03
*** alkari has joined #openstack-ansible03:05
*** sdake has joined #openstack-ansible03:06
cloudnullmhayden:  ha ! thats not super surprising.. :) I'd imagine that the issue is oslo.config related.03:11
mhaydenyeah, found a bug on it03:11
mhaydenstruggling to get glance to use rackspace swift as a backend, cloudnull03:11
mhaydencan't seem to get the auth part right03:11
cloudnullare you using the rax api key ?03:12
mhaydenshould i be using an api key or a password?03:12
cloudnullpassword03:12
mhaydenhmm, using the password03:12
mhaydenand using the auth 2.0 endpoint03:12
cloudnullAPI is not a thing03:12
cloudnullrather API-KEY03:12
cloudnulloh, your using the password ...03:12
* mhayden is rusty with this03:13
cloudnullhum.. let me go pull up a working one, one sec03:13
mhaydenthanks, cloudnull03:13
*** gomarivera__ has joined #openstack-ansible03:19
cloudnullso03:22
*** cloudtrainme has quit IRC03:22
cloudnullswift_store_auth_address: https://identity.api.rackspacecloud.com/v2.003:22
cloudnullswift_store_user: "{{ rackspace_cloud_tenant_id }}:{{ rackspace_cloud_username }}"03:22
*** haojing has joined #openstack-ansible03:22
cloudnullthe trick is `rackspace_cloud_tenant_id` has to be the mosso userid03:22
cloudnullthen -- swift_store_key: "{{ rackspace_cloud_password }}"03:22
cloudnullswift_store_container: SomeContainerName03:23
cloudnullif your using the public cloud youll need to set -- swift_store_endpoint_type: publicURL03:23
cloudnulland that should do it03:23
mhaydencloudnull: i'm an idiot -- glance was using auth v303:27
mhaydenbut i was talking to an auth v2 endpoint :|03:27
cloudnullah that'll do it03:27
cloudnull:)03:27
mhaydenthat plus the dollar sign shenanigans03:27
mhaydeni'm not sure if we could possibly escape those in jinja2 somehow03:27
cloudnullidk for sure03:28
mhaydensecond best thing might be to add comments and docs03:28
mhaydenah, it's not mentioned in user_variables.yml03:29
mhaydeni'll add it in there along with comments03:29
*** alkari has quit IRC03:39
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Adding docs/comments for glance config  https://review.openstack.org/24291803:50
mhaydencloudnull: hopefully that helps someone else from being silly like me ^^03:51
*** dolpher has joined #openstack-ansible03:51
*** gomarivera__ has left #openstack-ansible03:58
*** galstrom_zzz is now known as galstrom04:00
openstackgerritMerged openstack/openstack-ansible: remove libvirtd.conf file  https://review.openstack.org/24285604:24
*** Jezogwza_ has quit IRC04:34
*** galstrom is now known as galstrom_zzz04:50
*** galstrom_zzz is now known as galstrom04:58
*** britthouser has quit IRC04:58
*** galstrom is now known as galstrom_zzz05:05
*** britthouser has joined #openstack-ansible05:07
*** tlian has quit IRC05:44
*** woodard has quit IRC05:53
*** phiche has joined #openstack-ansible06:44
*** mss has quit IRC07:09
*** phiche has quit IRC07:11
*** javeriak has joined #openstack-ansible07:18
*** javeriak_ has joined #openstack-ansible07:22
*** phiche has joined #openstack-ansible07:22
*** javeriak has quit IRC07:23
*** sdake has quit IRC07:37
*** sdake has joined #openstack-ansible07:38
*** javeriak_ has quit IRC07:39
*** sdake_ has joined #openstack-ansible08:03
*** javeriak has joined #openstack-ansible08:03
*** mss has joined #openstack-ansible08:05
*** sdake has quit IRC08:06
*** mpavone has joined #openstack-ansible08:10
*** mss has quit IRC08:11
*** haojing has quit IRC08:16
*** haojing has joined #openstack-ansible08:16
*** mpavone has quit IRC08:17
*** tiagogomes_ has joined #openstack-ansible08:34
*** rajalokan has quit IRC08:38
*** woodard has joined #openstack-ansible08:52
*** woodard has quit IRC08:57
*** openstack has joined #openstack-ansible09:21
*** subscope has joined #openstack-ansible09:22
*** sdake_ has quit IRC09:36
*** mss has joined #openstack-ansible09:43
*** mss has quit IRC09:47
*** haojing has quit IRC10:07
*** subscope has quit IRC10:51
*** subscope has joined #openstack-ansible10:55
*** subscope has quit IRC11:03
*** javeriak has quit IRC11:32
*** jaypipes has joined #openstack-ansible11:41
*** javeriak has joined #openstack-ansible11:43
*** mss has joined #openstack-ansible11:44
*** mss has quit IRC11:48
*** subscope has joined #openstack-ansible12:14
*** ig0r__ has joined #openstack-ansible12:17
*** javeriak has quit IRC12:38
*** cloudtrainme has joined #openstack-ansible12:39
*** cloudtrainme has quit IRC12:49
*** subscope has quit IRC12:57
*** cloudtrainme has joined #openstack-ansible13:07
*** subscope has joined #openstack-ansible13:08
*** tlian has joined #openstack-ansible13:09
*** tlian has quit IRC13:19
openstackgerritXiaBing Yao proposed openstack/openstack-ansible: Choose virt type automatically  https://review.openstack.org/24309813:20
*** cloudtrainme has quit IRC13:20
*** tlian has joined #openstack-ansible13:26
openstackgerritXiaBing Yao proposed openstack/openstack-ansible: Choose virt type automatically  https://review.openstack.org/24309813:29
*** cloudtrainme has joined #openstack-ansible13:29
*** woodard has joined #openstack-ansible13:32
*** cloudtrainme has quit IRC13:39
openstackgerritXiaBing Yao proposed openstack/openstack-ansible: Choose virt type automatically  https://review.openstack.org/24309813:40
*** mss has joined #openstack-ansible13:44
*** mss has quit IRC13:49
openstackgerritMerged openstack/openstack-ansible-security: Adding notes for V-385{43,45,54,80}  https://review.openstack.org/24210114:06
mhaydenhappy monday, folks ;)14:13
matttmhayden: did you get the glance + CF stuff sorted ?14:14
*** mgoddard_ has joined #openstack-ansible14:21
mhaydenyeah, i didn't realize it was setting auth v3 by default14:21
mhaydenmattt: so i made this -> https://review.openstack.org/#/c/242918/14:21
mhaydenand the other problem was escaping dollar signs in my swift password :/14:21
mhaydenthat was a fun one14:21
matttah!  nice14:24
*** gouthamr has joined #openstack-ansible14:24
*** mgoddard has quit IRC14:24
*** sdake has joined #openstack-ansible14:35
*** wtie has joined #openstack-ansible14:35
*** sdake_ has joined #openstack-ansible14:37
*** subscope has quit IRC14:38
*** sdake has quit IRC14:40
*** KLevenstein has joined #openstack-ansible14:42
*** Bjoern_ has joined #openstack-ansible14:44
*** marekd has quit IRC14:44
*** antonym has quit IRC14:46
*** antonym has joined #openstack-ansible14:47
*** antonym has joined #openstack-ansible14:47
*** sdake_ is now known as sdake14:48
*** spotz_zzz is now known as spotz14:50
*** sdake_ has joined #openstack-ansible14:50
*** jimchou has joined #openstack-ansible14:51
*** sdake has quit IRC14:53
*** marekd has joined #openstack-ansible14:54
*** antonym has quit IRC14:55
*** sdake_ is now known as sdake14:56
*** gparaskevas has joined #openstack-ansible14:59
*** antonym has joined #openstack-ansible15:02
*** marekd has quit IRC15:12
*** openstackgerrit has quit IRC15:17
*** openstackgerrit has joined #openstack-ansible15:17
*** ysm has joined #openstack-ansible15:25
*** ysm has quit IRC15:27
*** Mudpuppy has joined #openstack-ansible15:28
*** javeriak has joined #openstack-ansible15:33
cloudnullmorning15:35
*** mgoddard_ has quit IRC15:35
*** alextricity has quit IRC15:36
spotzmorning cloudnull15:37
*** mgoddard has joined #openstack-ansible15:39
*** marekd has joined #openstack-ansible15:42
*** ysm has joined #openstack-ansible15:44
*** jmckind has joined #openstack-ansible15:44
*** Jezogwza_ has joined #openstack-ansible15:47
*** alextricity has joined #openstack-ansible15:49
mhaydenanyone have any input on CA's for openstack-ansible?15:50
mhaydenrobert just made an interesting post on openstack-dev about potentially putting LB's in front of any services running SSL listeners so that daemons like mysql/rabbitmq wouldn't need to be restarted15:50
mhaydenit seems like there are two options here: 1) use a lightweight openssl-based CA for more permanent certs or 2) use ephemeral certs15:51
*** dolpher has quit IRC15:53
*** Mudpuppy_ has joined #openstack-ansible15:55
*** rETROpunK has joined #openstack-ansible15:56
*** gparaskevas has quit IRC15:56
*** Mudpuppy has quit IRC15:58
*** Mudpuppy_ has quit IRC15:59
*** mss has joined #openstack-ansible16:00
*** Mudpuppy has joined #openstack-ansible16:01
*** jimchou has quit IRC16:06
*** mgoddard_ has joined #openstack-ansible16:11
*** mgoddard has quit IRC16:12
*** phiche has quit IRC16:15
*** javeriak has quit IRC16:19
*** jimchou has joined #openstack-ansible16:20
*** Mudpuppy has quit IRC16:21
*** Mudpuppy has joined #openstack-ansible16:22
evrardjpmorning cloudnull16:28
cloudnullo/ evrardjp16:28
evrardjpmhayden: I'm not sure what you mean by "rabitmq wouldn't need to be restarted"16:28
evrardjpthe ephemeral certs are what you proposed with the anchor project, right?16:29
evrardjpabout the post, it's on the ML or on the chan log?16:31
mhaydenML16:34
* mhayden looks for a link16:34
mhaydenevrardjp: i'm actually *against* ephemeral for our purposes -- just to be clear16:34
mhaydenevrardjp: http://lists.openstack.org/pipermail/openstack-dev/2015-November/078891.html16:35
*** Mudpuppy_ has joined #openstack-ansible16:36
*** Mudpuppy has quit IRC16:36
*** javeriak has joined #openstack-ansible16:37
mhaydenthe suggestion is to put ephemeral certs on LB's in front of certain services that are sensitive to reboots16:37
mhaydenlike rabbitmq or mysql16:37
mhaydenbut i don't know what certs one should use between LB <-> mysql16:37
mhaydenseems like it leaves us in the same situation as before16:37
evrardjpdepends16:37
evrardjpif you run your lb on the same host has your mysql, you can have your LB connect on socket16:38
mhaydeni've been eyeballing this repository -> https://github.com/rclayton-the-terrible/Ansible-OpenSSL16:38
evrardjpbut that wasn't what was suggested16:38
mhaydensome nice ansible modules for managing certs16:38
mhaydenbut it has no license16:38
palendaemhayden: That's...terrible :p16:39
palendaeno license = all rights reserved :(16:39
mhaydenhttps://github.com/rclayton-the-terrible/Ansible-OpenSSL/issues/316:40
mhaydenjust asked16:40
* mhayden hopes the author just forgot16:40
palendaeYeah16:40
*** jimchou_ has joined #openstack-ansible16:42
mhaydenthere was a big snafu in Fedora the other day because someone had the "Do whatever the f*** you want to do" license applied16:42
mhaydenit's hilarious, but the license itself wasn't compatible16:42
palendaeHahaha16:42
evrardjphaha16:42
evrardjp:)16:42
palendaeHow is that not compatible?16:42
mhaydenhaha not sure16:42
*** Mudpuppy_ has quit IRC16:42
mhaydenRHT's legal team raised an eyebrow16:42
palendaeOh, it had a license that didn't let peopel do whatever they want16:42
evrardjp><16:43
mhaydenanother package had code licensed with this --> https://en.wikipedia.org/wiki/Beerware16:43
mhaydenit's funny, but if you're possibly obligated to buy a beer, it's not FOSS16:43
mhaydenoh, here's the WTFPL explanation for that earlier license (NSFW language, warning) -> https://en.wikipedia.org/wiki/WTFPL16:44
palendaeI've read it :)16:44
*** sdake has quit IRC16:45
mhaydenoh, someone translated it to french!16:45
*** jimchou has quit IRC16:45
miscmhayden: because the guy who created it is french16:45
mhaydenwell that would explain it ;)16:45
palendae"The license was approved as a GPL-compatible free software license by the Free Software Foundation but its use is “not recommended." lol16:45
mhaydenhaha16:45
miscmhh only the version 2.0 was done by a frnehc16:45
mhaydennice bedtime reading -> https://en.wikipedia.org/wiki/Comparison_of_free_and_open-source_software_licenses16:46
*** phiche has joined #openstack-ansible16:48
*** daneyon has joined #openstack-ansible16:55
*** daneyon_ has joined #openstack-ansible16:56
*** daneyon has quit IRC16:59
*** jmckind is now known as jmckind_17:00
*** jmckind_ is now known as jmckind17:00
*** mgoddard__ has joined #openstack-ansible17:00
*** tlian2 has joined #openstack-ansible17:01
*** nicolas__ has joined #openstack-ansible17:03
*** mgoddard_ has quit IRC17:03
*** tlian has quit IRC17:04
*** nicolas__ has left #openstack-ansible17:04
*** Mudpuppy has joined #openstack-ansible17:12
*** tiagogomes_ has quit IRC17:12
mhaydennew lxc out today - 1.1.517:17
*** jmckind is now known as jmckind_17:18
*** galstrom_zzz is now known as galstrom17:20
*** wtie has quit IRC17:20
*** jmckind_ is now known as jmckind17:21
*** daneyon has joined #openstack-ansible17:23
*** daneyon_ has quit IRC17:26
openstackgerritMerged openstack/openstack-ansible: Fixing /etc/rabbitmq permission bug  https://review.openstack.org/24259517:31
*** Jezogwza_ is now known as Jezogwza17:32
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Fixing /etc/rabbitmq permission bug  https://review.openstack.org/24322717:32
mhaydenbackported the rabbitmq fixes ^^17:33
cloudnullmhayden:  Kilo too please  :)17:43
*** daneyon_ has joined #openstack-ansible17:44
*** daneyon has quit IRC17:46
*** KLevenstein has quit IRC17:46
palendaecloudnull: I can't reply to some things on http://paste.openstack.org/show/478238/ :p17:47
palendaeI'm not sure if os.getcwd() will work for TARGET_DIR since tox runs from above17:47
*** sdake has joined #openstack-ansible17:47
cloudnullit worked in my local test17:47
palendaeOk17:47
palendaeI'll double check17:48
palendaeWhat's the reasoning there?17:48
cloudnullon TARGET_DIR = os.getcwd()  ?17:48
palendaeYeah17:48
palendaeI intended to run everything from the root17:49
cloudnullwithout that i wasn't able to run the tests17:49
palendaeAt all, or with your other changes?17:50
cloudnullat all17:50
palendaetox -e inventory was how I was running it17:50
palendaeNot calling it directly17:50
cloudnulli was running the tests without tox17:50
palendaeah17:51
palendaeHm17:51
cloudnullIf i ran "python2 ./test/test_inventory.py" it would work , but if i cd to the test dir it would fail17:52
palendaepython test/test_inventory.py from root works17:52
palendaeRight17:52
palendaeHm17:52
cloudnullrunniing from within the test dir causes "OSError: [Errno 2] No such file or directory"17:52
palendaeI would think running from root would break with getcwd17:52
palendaeI'll try it17:52
palendaeYeah, that makes sense17:52
palendaeIMO it should be run from root always17:53
palendaeThe closing bracket on the cleanup files is where I'd like it, but flake8 whined17:54
*** ysm has quit IRC17:54
cloudnullyea i moved it to make hacking happy17:55
palendaeWeird17:55
palendaeOh, yeah, I just ran straight up flake817:55
palendaeSo I probably didn't have hacking17:55
palendaeThat's where I prefer it17:55
cloudnulli also wrapped the get_inventory call to always run clean up even if the function fails for some reason17:56
palendaeYeah, saw that17:57
palendaeI'd like to remove a lot of this logic later when it could be imported, but for now it'll do17:59
mhaydenpalendae: success! -> https://github.com/rclayton-the-terrible/Ansible-OpenSSL/issues/318:02
*** b3rnard0 is now known as b3rnard0_away18:03
cloudnullsuper sweet!18:03
palendaemhayden: Cool. I saw his first reply, wondered if he'd get a commit in18:03
*** mgoddard has joined #openstack-ansible18:03
*** mgoddard__ has quit IRC18:04
*** sdake has quit IRC18:09
*** jmckind is now known as jmckind_18:11
*** sdake has joined #openstack-ansible18:15
*** elo has joined #openstack-ansible18:37
*** Jezogwza has quit IRC18:42
*** sdake_ has joined #openstack-ansible18:43
*** sdake has quit IRC18:45
*** KLevenstein has joined #openstack-ansible18:58
*** javeriak_ has joined #openstack-ansible18:59
*** javeriak has quit IRC19:02
*** yunpengli has joined #openstack-ansible19:10
*** tnarg has quit IRC19:10
*** jwitko has joined #openstack-ansible19:14
*** sdake_ is now known as sdake19:15
*** b3rnard0_away is now known as b3rnard019:16
*** rady has joined #openstack-ansible19:19
*** sdake has quit IRC19:20
*** sdake has joined #openstack-ansible19:21
*** mss_ has joined #openstack-ansible19:26
*** mss has quit IRC19:29
*** sdake has quit IRC19:35
*** August1914 has quit IRC19:36
*** sdake has joined #openstack-ansible19:36
*** yunpengli has quit IRC19:43
*** ysm has joined #openstack-ansible19:51
*** jmckind_ is now known as jmckind19:57
*** jimchou has joined #openstack-ansible19:58
*** jimchou_ has quit IRC20:00
*** cfarquhar has quit IRC20:01
*** cfarquhar has joined #openstack-ansible20:07
*** cfarquhar has quit IRC20:07
*** cfarquhar has joined #openstack-ansible20:07
*** jimchou has quit IRC20:26
*** jimchou has joined #openstack-ansible20:39
*** jimchou_ has joined #openstack-ansible20:41
*** jimchou has quit IRC20:44
*** rromans is now known as robbout20:53
*** jmckind is now known as jmckind_20:55
mhaydengot the tests to pass on this backport after a recheck if someone wants to take a gander: https://review.openstack.org/#/c/243227/20:57
*** galstrom is now known as galstrom_zzz20:57
spotzmhayden in the commints you have 0750 in the code you have 0755, intentional or typo?20:59
mhaydenspotz: the bug happens when the dir is set to 075020:59
mhaydenbut the fix sets it to 0755 (the default)20:59
mhaydenor am i misreading your question?20:59
spotzThat's what I was seeing but wanted to make sure20:59
mhaydenah okay20:59
*** galstrom_zzz is now known as galstrom21:00
*** robbout is now known as rromans21:01
*** javeriak has joined #openstack-ansible21:04
*** daneyon has joined #openstack-ansible21:05
*** javeriak_ has quit IRC21:05
*** jmckind_ is now known as jmckind21:06
*** javeriak_ has joined #openstack-ansible21:06
*** daneyon has quit IRC21:06
*** daneyon has joined #openstack-ansible21:07
*** daneyon_ has quit IRC21:08
*** javeriak has quit IRC21:09
*** spotz is now known as spotz_zzz21:12
*** sdake has quit IRC21:12
*** sdake_ has joined #openstack-ansible21:13
*** jmckind is now known as jmckind_21:13
*** subscope has joined #openstack-ansible21:16
*** daneyon_ has joined #openstack-ansible21:17
*** daneyon has quit IRC21:20
*** jmckind_ is now known as jmckind21:21
*** jhesketh has quit IRC21:23
*** spotz_zzz is now known as spotz21:24
*** jhesketh has joined #openstack-ansible21:25
openstackgerritNolan Brubaker proposed openstack/openstack-ansible: Add testing for dynamic_inventory.py  https://review.openstack.org/24222521:25
*** spotz is now known as spotz_zzz21:26
*** spotz_zzz is now known as spotz21:26
*** phiche1 has joined #openstack-ansible21:29
*** phiche has quit IRC21:32
*** k_stev has joined #openstack-ansible21:46
*** jaypipes has quit IRC21:49
*** devl_ has joined #openstack-ansible21:51
*** woodard has quit IRC21:52
*** gouthamr has quit IRC21:58
*** jmckind has quit IRC22:02
*** phiche1 has quit IRC22:16
*** Mudpuppy has quit IRC22:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-specs: Spec: Create Certificate Authority (CA)  https://review.openstack.org/24333222:19
openstackgerritMajor Hayden proposed openstack/openstack-ansible-specs: Spec: Create Certificate Authority (CA)  https://review.openstack.org/24333222:24
*** devl_ has quit IRC22:25
*** antonym has quit IRC22:32
*** antonym has joined #openstack-ansible22:32
*** August1914 has joined #openstack-ansible22:34
*** sdake_ is now known as sdake22:34
*** javeriak_ has quit IRC22:37
*** gouthamr has joined #openstack-ansible22:37
*** gouthamr_ has joined #openstack-ansible22:38
*** rady has quit IRC22:41
*** gouthamr has quit IRC22:41
*** devl_ has joined #openstack-ansible22:42
*** harlowja_ has quit IRC22:43
*** sdake_ has joined #openstack-ansible22:45
*** sdake has quit IRC22:47
*** galstrom is now known as galstrom_zzz23:06
*** ysm has quit IRC23:10
*** jmckind has joined #openstack-ansible23:13
*** JRobinson__ has joined #openstack-ansible23:13
*** sdake_ is now known as sdake23:17
*** jimchou_ has quit IRC23:24
*** subscope has quit IRC23:26
*** sdake_ has joined #openstack-ansible23:29
*** sdake has quit IRC23:29
*** spotz is now known as spotz_zzz23:29
*** k_stev has quit IRC23:35
*** woodard has joined #openstack-ansible23:37
*** sdake_ has quit IRC23:37
*** woodard has quit IRC23:37
*** sdake has joined #openstack-ansible23:38
*** woodard has joined #openstack-ansible23:39
*** KLevenstein has quit IRC23:43
*** tnarg has joined #openstack-ansible23:52
*** tnarg has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!