| noonedeadpunk | admin1: I assume that failed task has rescue path, doesn't it? | 05:51 |
|---|---|---|
| jrosser | good morning | 08:53 |
| noonedeadpunk | o/ | 09:46 |
| noonedeadpunk | damiandabrowski: can you kindly check on that? https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/898247 | 09:57 |
| damiandabrowski | noonedeadpunk: ofc, done | 10:09 |
| andrewbonney | noonedeadpunk: have you seen '#tmp' (and similar) re-appear in the list of databases in mariadb post-upgrade? | 11:02 |
| andrewbonney | It's not causing us an obvious problem, but I spotted it after upgrading another galera cluster | 11:02 |
| noonedeadpunk | Yeah... But I have no idea why | 11:03 |
| noonedeadpunk | I wasn't able to spend enough time checking on that | 11:03 |
| noonedeadpunk | And also I've seen other reports that it's not working as intended anymore | 11:03 |
| andrewbonney | Ok, glad it's not just me. I haven't spotted a matching MariaDB bug yet | 11:04 |
| noonedeadpunk | it felt like it's smth related to quotes.... | 11:05 |
| noonedeadpunk | As I think idea was to have `#tmp` but not `'#tmp'` | 11:05 |
| noonedeadpunk | and quotes were added so that ansible treat it properly... | 11:06 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Stop generating ssh keypair for nova user https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/898247 | 12:05 |
| opendevreview | Merged openstack/openstack-ansible stable/zed: Bump SHAs for Zed https://review.opendev.org/c/openstack/openstack-ansible/+/898252 | 12:30 |
| opendevreview | Merged openstack/openstack-ansible stable/yoga: Bump SHAs for Yoga https://review.opendev.org/c/openstack/openstack-ansible/+/898250 | 12:40 |
| NeilHanlon | morning, folks | 13:02 |
| mgariepy | morning NeilHanlon | 13:02 |
| jamesdenton | o/ | 13:05 |
| noonedeadpunk | o/ | 13:24 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-core to 2.12.8 https://review.opendev.org/c/openstack/openstack-ansible-tests/+/897403 | 13:59 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-core to 2.12.8 https://review.opendev.org/c/openstack/openstack-ansible-tests/+/897403 | 14:39 |
| spatel | jamesdenton hey! | 14:58 |
| spatel | have you seen this kind of issue? - https://paste.opendev.org/show/bWUBfDUsINieZyezBnsN/ | 14:58 |
| spatel | I want to give permission to end user to create ports | 14:59 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-core to 2.12.8 https://review.opendev.org/c/openstack/openstack-ansible-tests/+/897403 | 15:15 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-tests master: Bump ansible-core to 2.12.8 https://review.opendev.org/c/openstack/openstack-ansible-tests/+/897403 | 15:32 |
| jamesdenton | spatel haven't tried anything like that in a while. Was neutron-server restarted? | 15:42 |
| jamesdenton | can't remember if policies are dynamic | 15:42 |
| noonedeadpunk | policies should be, yes | 15:50 |
| noonedeadpunk | except there's some error in a code somewhere | 15:51 |
| spatel | jamesdenton noonedeadpunk there is only way to handle it with policy.yaml | 16:00 |
| spatel | I have check policy file is inplace and service restarted | 16:00 |
| spatel | feels like a bug | 16:01 |
| spatel | I am using RBAC policy with network to shared it between multiple project | 16:01 |
| noonedeadpunk | Ok, so I've found what's wrong with the horizon on debian12. And it's specifically this patch that would fix it: https://github.com/Kronuz/pyScss/commit/60414f5d573315a8458b5fbcdf69e5c648c44a9a | 16:33 |
| noonedeadpunk | It's not tagged yet though | 16:35 |
| admin1 | spatel, i also use networks with rbac, i think if you don't own the network, but is just shared with you, it will be denied for you to specify ports | 16:58 |
| spatel | admin1 But that is a bug. It should allow to access network based rbac. | 16:59 |
| admin1 | its not a network you own, but just shared with you | 17:00 |
| spatel | https://bugs.launchpad.net/neutron/+bug/1833455 | 17:00 |
| spatel | There is a patch already there but somehow its not working for Zed release | 17:00 |
| spatel | Look like it broke after rocky release.. | 17:01 |
| spatel | something has been changed recently doesn't like this policy. | 17:02 |
| admin1 | my use case is diff and it works .. its a cloud without an external network and all traffic for each tenant must pass via their own respective pfsense fw | 17:04 |
| admin1 | so in the dmz tenant, i create a network and as admin, can create .1 port , which is added as gateway , and then respective tenant can plug into the dmz with their dhcp assigned ip, but cannot take .1 as it does not allow them to create ports | 17:05 |
| admin1 | :) | 17:05 |
| admin1 | spatel, why not create an additonal role and attach that role also to the user | 17:07 |
| admin1 | i don't think just adding or rule:shared would allow it to be created | 17:07 |
| spatel | add what roles? adding user in neutron role? | 17:08 |
| spatel | that would be dangerous.. don't you think? | 17:09 |
| admin1 | no .. just 1 specific role like port_master for example | 17:09 |
| admin1 | i see yuo made the bug update .. maybe it will get a reply soon | 17:10 |
| jrosser | spatel: is this CLI or horizon? | 17:13 |
| spatel | both | 17:13 |
| spatel | admin1 I talked to neutron developer and he also think its bug and going to take a look | 17:13 |
| admin1 | basically like os add role port_master, then in policy create_port:fixed_ips role:port_master and then once applied, openstack role add --user user project port_master to also have this new role with required port ownership setting | 17:13 |
| spatel | admin1 are you sure that will work? did you test it ? | 17:15 |
| spatel | do you have full syntax of create_port:fixed_ips role:port_master... blah.. | 17:16 |
| admin1 | "create_port:fixed_ips": "role:port_master or rule:admin_or_owner" -- in policy.json ?? | 17:17 |
| admin1 | basically we are giving rights to a new role | 17:17 |
| admin1 | that we create from openstack add role port_master | 17:18 |
| spatel | okie! I can try if that is valid solution. I haven't heard of this before so very curious | 17:18 |
| admin1 | custom roles are one way to get out of the default ones .. instead of fighting with what is there | 17:21 |
| admin1 | use case like this for example | 17:21 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_horizon master: Override pyScss version with a bugfixed one https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/898463 | 18:00 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add CI jobs for debian bookworm https://review.opendev.org/c/openstack/openstack-ansible/+/894561 | 18:01 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Bump galera version to 10.11.5 https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/894740 | 18:04 |
| opendevreview | Merged openstack/openstack-ansible master: Remove common nova playbook https://review.opendev.org/c/openstack/openstack-ansible/+/897568 | 18:10 |
| opendevreview | Merged openstack/openstack-ansible master: Run nova db post setup from nova playbook https://review.opendev.org/c/openstack/openstack-ansible/+/897570 | 18:11 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Add documentation on running as non-root https://review.opendev.org/c/openstack/openstack-ansible/+/897999 | 18:11 |
| opendevreview | Merged openstack/openstack-ansible-os_zun master: Fix indent in example playbook https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/898259 | 19:38 |
| opendevreview | Merged openstack/openstack-ansible-os_zun master: Stop generating ssh keypair for zun and kuryr user https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/898248 | 19:45 |
| opendevreview | Merged openstack/openstack-ansible-tests master: Bump ansible-core to 2.12.8 https://review.opendev.org/c/openstack/openstack-ansible-tests/+/897403 | 20:37 |
| opendevreview | Merged openstack/openstack-ansible master: [doc] Update releasing documentation https://review.opendev.org/c/openstack/openstack-ansible/+/885376 | 20:43 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Run nova_db_post_setup from playbook directly https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/897571 | 22:45 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!