Friday, 2015-09-18

*** eghobo has quit IRC00:01
*** achanda_ has joined #openstack-containers00:02
*** adrian_otto has quit IRC00:05
*** eghobo has joined #openstack-containers00:05
*** achanda has quit IRC00:06
*** achanda_ has quit IRC00:08
Tangosdake: I can scp to fedora now, uploading the image.  Thanks Steve.00:09
*** Qiming has quit IRC00:17
*** daneyon_ has quit IRC00:19
*** harshs has joined #openstack-containers00:21
*** jruano has quit IRC00:23
*** suro-patz has quit IRC00:24
*** vilobhmm_11 has quit IRC00:29
*** vilobhmm_11 has joined #openstack-containers00:29
*** vilobhmm_11 has quit IRC00:33
*** annegentle has joined #openstack-containers00:34
*** Tango has quit IRC00:34
*** dims_ has joined #openstack-containers00:38
*** banix has joined #openstack-containers00:40
*** david-lyle has quit IRC00:40
*** jruano has joined #openstack-containers00:42
*** juggler_ has joined #openstack-containers00:43
*** dims_ has quit IRC00:43
*** dims_ has joined #openstack-containers00:43
*** david-lyle has joined #openstack-containers00:44
*** juggler_ has quit IRC00:45
*** juggler_ has joined #openstack-containers00:45
*** juggler_ has quit IRC00:48
*** juggler has joined #openstack-containers00:49
*** juggler has quit IRC00:50
*** hongbin has joined #openstack-containers00:58
*** juggler has joined #openstack-containers01:02
*** banix has quit IRC01:02
*** erkules_ has joined #openstack-containers01:05
*** erkules has quit IRC01:08
*** ganeshna has joined #openstack-containers01:10
*** annegentle has quit IRC01:10
*** wenchma has quit IRC01:18
*** banix has joined #openstack-containers01:18
*** Qiming has joined #openstack-containers01:21
*** ganeshna has quit IRC01:22
*** banix has quit IRC01:24
*** apuimedo has quit IRC01:25
*** shuquan has joined #openstack-containers01:25
*** dims_ has quit IRC01:27
*** sthillma has quit IRC01:27
*** dims_ has joined #openstack-containers01:29
*** lyanchih has joined #openstack-containers01:36
*** dims_ has quit IRC01:37
*** zz_dimtruck is now known as dimtruck01:43
*** julim has joined #openstack-containers01:45
*** gangil1 has quit IRC01:45
*** unicell has quit IRC01:46
*** puranamr has joined #openstack-containers02:07
*** suro-patz has joined #openstack-containers02:09
*** sdake_ has joined #openstack-containers02:09
*** banix has joined #openstack-containers02:13
*** sdake has quit IRC02:13
openstackgerritHua Wang proposed openstack/magnum: Code refactor for keystoneclient  https://review.openstack.org/21869902:19
*** eghobo has quit IRC02:22
*** suro-patz has quit IRC02:23
*** jruano has quit IRC02:27
*** achanda has joined #openstack-containers02:28
openstackgerritHua Wang proposed openstack/magnum: Add registry to template  https://review.openstack.org/22352602:28
*** zhenguo has joined #openstack-containers02:28
*** hongbin has quit IRC02:31
*** jruano has joined #openstack-containers02:32
*** humble_ has joined #openstack-containers02:33
*** humble__ has quit IRC02:37
*** suro-patz has joined #openstack-containers02:38
*** ganeshna has joined #openstack-containers02:40
*** gangil has joined #openstack-containers02:42
*** julim has quit IRC02:43
*** deepthi has joined #openstack-containers02:56
*** harshs has quit IRC02:59
*** lyanchih has quit IRC03:00
*** yuanying_ has joined #openstack-containers03:02
*** lyanchih has joined #openstack-containers03:06
*** shuquan has quit IRC03:15
*** ganeshna has quit IRC03:18
*** ganeshna has joined #openstack-containers03:19
*** dims_ has joined #openstack-containers03:22
*** fawadkhaliq has joined #openstack-containers03:26
*** achanda has quit IRC03:27
*** sdake has joined #openstack-containers03:28
*** dims_ has quit IRC03:28
*** sthillma has joined #openstack-containers03:32
*** sdake_ has quit IRC03:32
*** harshs has joined #openstack-containers03:33
*** sthillma_ has joined #openstack-containers03:34
*** sthillma has quit IRC03:36
*** sthillma_ is now known as sthillma03:36
*** sdake_ has joined #openstack-containers03:38
*** sdake_ has quit IRC03:39
*** sdake_ has joined #openstack-containers03:40
*** sdake_ has quit IRC03:40
*** sdake_ has joined #openstack-containers03:40
*** VikasC has joined #openstack-containers03:41
*** sdake has quit IRC03:41
*** suro-patz has quit IRC03:42
*** puranamr has quit IRC03:45
*** jruano has quit IRC03:48
*** sdake_ is now known as sdake03:48
*** madhuri has joined #openstack-containers03:49
*** yuanying_ has quit IRC03:54
*** unicell has joined #openstack-containers03:57
*** eghobo has joined #openstack-containers04:00
*** EricGonczer_ has joined #openstack-containers04:01
*** eghobo_ has joined #openstack-containers04:02
openstackgerritDimitry Ushakov proposed openstack/magnum: Functional tests with Tempest - BayModel CRUD  https://review.openstack.org/22417004:02
*** EricGonczer_ has quit IRC04:03
*** eghobo has quit IRC04:05
*** gangil has quit IRC04:05
*** yuanying_ has joined #openstack-containers04:06
*** Tango has joined #openstack-containers04:07
openstackgerritDimitry Ushakov proposed openstack/magnum: Functional tests with Tempest - BayModel CRUD  https://review.openstack.org/22417004:08
*** sthillma has quit IRC04:13
*** lyanchih has quit IRC04:15
*** tbh has joined #openstack-containers04:16
*** puranamr has joined #openstack-containers04:16
*** yuanying_ has quit IRC04:19
*** yuanying_ has joined #openstack-containers04:20
*** puranamr has quit IRC04:20
*** harshs has quit IRC04:29
*** banix has quit IRC04:35
*** vimal has joined #openstack-containers04:37
*** dimtruck is now known as zz_dimtruck04:39
*** chandankumar has joined #openstack-containers04:40
*** achanda has joined #openstack-containers04:40
*** tbh has quit IRC04:43
*** tbh has joined #openstack-containers04:44
*** yuanying_ has quit IRC04:45
*** fawadkhaliq has quit IRC04:50
*** yuanying_ has joined #openstack-containers04:52
*** harshs has joined #openstack-containers04:55
*** lyanchih has joined #openstack-containers04:55
*** tbh has quit IRC04:56
*** sthillma has joined #openstack-containers04:59
*** lyanchih has quit IRC05:00
*** tbh has joined #openstack-containers05:05
*** vimal has quit IRC05:06
*** yuanying_ has quit IRC05:15
*** fawadkhaliq has joined #openstack-containers05:17
*** harshs has quit IRC05:22
*** coolsvap|holiday is now known as coolsvap05:28
*** vimal has joined #openstack-containers05:28
*** ganeshna has quit IRC05:29
*** ganeshna has joined #openstack-containers05:29
*** Marga_ has quit IRC05:30
*** openstackgerrit has quit IRC05:31
*** openstackgerrit has joined #openstack-containers05:31
*** Qiming has quit IRC05:31
*** muralia has quit IRC05:37
*** muralia has joined #openstack-containers05:39
*** sthillma has quit IRC05:41
*** klindgren has quit IRC05:45
*** lyanchih has joined #openstack-containers05:45
*** klindgren has joined #openstack-containers05:45
*** vilobhmm_11 has joined #openstack-containers05:48
*** Marga_ has joined #openstack-containers05:48
*** sdake has quit IRC05:49
*** Marga_ has quit IRC05:49
*** puranamr has joined #openstack-containers05:59
*** klindgren has quit IRC06:02
*** eghobo has joined #openstack-containers06:04
*** puranamr has quit IRC06:04
*** eghobo_ has quit IRC06:07
*** klindgren has joined #openstack-containers06:07
*** Marga_ has joined #openstack-containers06:10
*** Marga_ has quit IRC06:16
*** Marga_ has joined #openstack-containers06:17
*** tbh has quit IRC06:27
madhuriapmelton: there?06:28
*** Tango has quit IRC06:38
*** tbh has joined #openstack-containers06:40
*** curx1 has joined #openstack-containers06:44
*** yuanying_ has joined #openstack-containers06:47
*** achanda has quit IRC06:57
*** Marga_ has quit IRC06:59
*** Marga_ has joined #openstack-containers07:00
*** tbh has quit IRC07:12
*** Marga_ has quit IRC07:14
*** VikasC has quit IRC07:20
*** ganeshna has quit IRC07:30
*** fawadkhaliq has quit IRC07:30
*** ganeshna has joined #openstack-containers07:30
*** yuanying_ has quit IRC07:33
*** Marga_ has joined #openstack-containers07:35
*** Marga_ has quit IRC07:35
*** Marga_ has joined #openstack-containers07:35
*** fawadkhaliq has joined #openstack-containers07:36
*** erkules_ is now known as erkules07:51
*** erkules has joined #openstack-containers07:51
*** eghobo has quit IRC07:54
*** chandankumar has quit IRC07:57
*** VikasC has joined #openstack-containers07:59
*** tbh has joined #openstack-containers07:59
*** vilobhmm_11 has quit IRC08:04
*** lyanchih has quit IRC08:16
*** tbh has quit IRC08:20
*** tbh has joined #openstack-containers08:21
*** alex_klimov has joined #openstack-containers08:27
*** alex_klimov has quit IRC08:30
*** alex_klimov has joined #openstack-containers08:30
*** dims_ has joined #openstack-containers08:30
*** dims_ has quit IRC08:34
*** VikasC has quit IRC08:39
*** diga has joined #openstack-containers08:42
openstackgerritJames Page proposed openstack/python-magnumclient: Add support for python >= 3.4  https://review.openstack.org/22456508:45
*** lyanchih has joined #openstack-containers08:52
*** yuanying_ has joined #openstack-containers08:55
*** yuanying_ has quit IRC08:59
*** ganeshna has quit IRC09:04
*** shuquan has joined #openstack-containers09:05
*** ganeshna has joined #openstack-containers09:06
*** yuanying_ has joined #openstack-containers09:13
*** yuanying_ has quit IRC09:19
*** yuanying_ has joined #openstack-containers09:21
*** diga has quit IRC09:21
*** curx1 has left #openstack-containers09:24
*** meehanman has joined #openstack-containers09:27
*** dims_ has joined #openstack-containers09:32
*** dims_ has quit IRC09:36
*** madhuri has quit IRC09:38
*** tbh has quit IRC09:39
*** yuanying_ has quit IRC09:41
*** tbh has joined #openstack-containers09:46
*** dims_ has joined #openstack-containers09:50
*** zhenguo has quit IRC09:50
*** shuquan has quit IRC09:54
*** lyanchih has quit IRC09:57
openstackgerritTom Cammann proposed openstack/magnum: Fix H405 and E131 ignored pep8 rules  https://review.openstack.org/22418309:59
*** tbh has quit IRC09:59
openstackgerritTom Cammann proposed openstack/magnum: Use --max-complexity flake8 rule  https://review.openstack.org/22418410:02
openstackgerritTom Cammann proposed openstack/magnum: Fix E251 unnecessarily ignored pep8 rule  https://review.openstack.org/22419810:02
*** yuanying_ has joined #openstack-containers10:09
*** tbh has joined #openstack-containers10:10
*** fawadkhaliq has quit IRC10:15
*** alex_klimov has quit IRC10:24
*** lyanchih has joined #openstack-containers10:32
*** tbh has quit IRC10:32
*** tbh has joined #openstack-containers10:37
*** lyanchih has quit IRC10:48
*** yuanying_ has quit IRC10:48
*** tbh has quit IRC10:51
*** fawadkhaliq has joined #openstack-containers10:55
*** alex_klimov has joined #openstack-containers10:59
*** mfalatic has quit IRC11:00
*** meehanman has quit IRC11:01
*** tbh has joined #openstack-containers11:03
*** mfalatic has joined #openstack-containers11:06
*** tbh has quit IRC11:08
*** alex_klimov has quit IRC11:09
*** alex_klimov has joined #openstack-containers11:09
*** lyanchih has joined #openstack-containers11:20
*** lyanchih has quit IRC11:25
*** ganeshna has quit IRC11:25
*** tbh has joined #openstack-containers11:27
*** klindgren has quit IRC11:36
*** klindgren has joined #openstack-containers11:43
*** tbh has quit IRC11:48
*** rpothier has joined #openstack-containers12:00
*** kebray has joined #openstack-containers12:00
*** yuanying_ has joined #openstack-containers12:01
*** puranamr has joined #openstack-containers12:02
*** deepthi has quit IRC12:04
*** puranamr has quit IRC12:06
*** yuanying_ has quit IRC12:20
*** banix has joined #openstack-containers12:28
openstackgerritMerged openstack/magnum: Fix naming of variables/classes in tests  https://review.openstack.org/22429112:29
openstackgerritMerged openstack/magnum: Refactors Heat templates for Container Networking Model  https://review.openstack.org/21476212:30
openstackgerritMerged openstack/python-magnumclient: Updated from global requirements  https://review.openstack.org/22467412:30
openstackgerritMerged openstack/magnum: Adds network_driver Support of Container Network Model  https://review.openstack.org/21490912:32
*** zz_dimtruck is now known as dimtruck12:39
*** julim has joined #openstack-containers12:39
*** rpothier has quit IRC12:40
openstackgerritDimitry Ushakov proposed openstack/magnum: Functional tests with Tempest - BayModel CRUD  https://review.openstack.org/22417012:40
*** fawadkhaliq has quit IRC12:50
*** alex_klimov has quit IRC12:50
*** rlrossit has joined #openstack-containers12:52
*** dimtruck is now known as zz_dimtruck12:55
*** fawadkhaliq has joined #openstack-containers12:59
*** puranamr has joined #openstack-containers13:03
*** alex_klimov has joined #openstack-containers13:06
*** puranamr has quit IRC13:07
*** zz_dimtruck is now known as dimtruck13:20
*** banix has quit IRC13:21
*** banix has joined #openstack-containers13:22
*** harshs has joined #openstack-containers13:25
rlrossitdimtruck: here's an example for doing abstract base classes https://github.com/openstack/nova/blob/master/nova/conductor/tasks/base.py#L31-L3213:28
rlrossitI always have to look it up too13:28
dimtruck:) rlrossit that's what i did hahah...took me forever13:28
rlrossitwe need to use six to add the metaclass or else pep8 (or hacking) gets mad at us13:28
dimtruckhttps://review.openstack.org/#/c/224170/15/magnum/tests/functional/common/client.py13:29
*** dimtruck is now known as zz_dimtruck13:39
*** kebray has quit IRC13:42
*** zhenguo has joined #openstack-containers13:43
*** _navneet has joined #openstack-containers13:44
*** openstackgerrit has quit IRC13:46
*** openstackgerrit has joined #openstack-containers13:46
*** hongbin has joined #openstack-containers13:49
*** zz_dimtruck is now known as dimtruck13:55
*** rpothier has joined #openstack-containers13:58
*** kebray has joined #openstack-containers13:59
*** davhou has joined #openstack-containers14:00
dimtruckrlrossit: so are you cool with the other assertion that basically checks if the error has been raised or are you thinking that both should just check on assertRaises?14:15
*** fawadkhaliq has quit IRC14:15
dimtruckwhat i'm thinking is i can just remove those 2 assert_exception messages altogether and like you mentioned, just do assertRaises and check the exception type14:15
*** eghobo has joined #openstack-containers14:16
*** eghobo has quit IRC14:17
*** dims_ has quit IRC14:20
*** dims_ has joined #openstack-containers14:21
*** sdake has joined #openstack-containers14:27
*** banix has quit IRC14:29
*** Qiming has joined #openstack-containers14:30
*** adrian_otto has joined #openstack-containers14:30
*** david-lyle has quit IRC14:31
*** agireud has quit IRC14:35
*** agireud has joined #openstack-containers14:37
*** kebray has quit IRC14:40
*** banix has joined #openstack-containers14:42
openstackgerritDimitry Ushakov proposed openstack/magnum: Functional tests with Tempest - BayModel CRUD  https://review.openstack.org/22417014:42
*** alex_klimov has quit IRC14:42
*** hongbin has quit IRC14:45
*** hongbin_ has joined #openstack-containers14:45
*** adrian_otto has quit IRC14:47
*** adrian_otto has joined #openstack-containers14:47
*** zhenguo has quit IRC14:48
*** adrian_otto has quit IRC14:48
*** adrian_otto has joined #openstack-containers14:48
*** kebray has joined #openstack-containers14:52
*** harshs has quit IRC14:54
*** kebray has quit IRC14:54
*** harshs has joined #openstack-containers14:55
*** kebray has joined #openstack-containers14:55
*** ganeshna has joined #openstack-containers14:56
*** manjeets has joined #openstack-containers14:57
openstackgerritMerged openstack/python-magnumclient: Adds Container Network Model network_driver support  https://review.openstack.org/22274914:59
openstackgerritMerged openstack/python-magnumclient: Adds Labels Support  https://review.openstack.org/21526014:59
*** dims_ is now known as dimsum__15:03
*** harshs has quit IRC15:03
*** Drago has joined #openstack-containers15:03
*** Drago has quit IRC15:03
*** Drago has joined #openstack-containers15:04
*** eghobo has joined #openstack-containers15:05
rlrossitdimtruck: After looking at it, what I would like to see is asserting the exception type and check the return code, not the message15:06
rlrossitit would be nice to see when return codes are changing15:06
dimtruckso in tempest.exceptions exception type matches the return code 1 to 115:06
dimtruckso would we be cool with just checking the exception type then?15:07
dimtrucksince exception.NOT_FOUND would always equal 40415:07
rlrossitso wait, how are return codes determined when they are raised?15:08
rlrossitbecause while not found will always be 404, I want to be sure we are seeing when something changes from like a 408 to a 406 (totally made up)15:08
dimtruckI changed it to self.assertRaises(NotFound, magnum_api_call)15:09
dimtruckthat way if it's a 409, for exampl,e  it would raise Conflict15:09
dimtruckso assertRaises would fail15:10
*** Tango has joined #openstack-containers15:10
openstackgerritManjeet Singh Bhatia proposed openstack/magnum: Docs update for new fedora atomic 1.0.4  https://review.openstack.org/22150415:11
openstackgerritMerged openstack/magnum: Updated from global requirements  https://review.openstack.org/22462215:15
*** Drago has quit IRC15:16
*** fawadkhaliq has joined #openstack-containers15:16
*** alex_klimov has joined #openstack-containers15:20
*** fawadkhaliq has quit IRC15:20
*** fawadkhaliq has joined #openstack-containers15:27
*** Drago has joined #openstack-containers15:35
*** harshs has joined #openstack-containers15:44
*** tbh has joined #openstack-containers15:45
*** vimal has quit IRC15:47
*** Marga_ has quit IRC15:48
*** vimal has joined #openstack-containers15:51
*** banix has quit IRC15:52
*** gangil has joined #openstack-containers15:52
*** EricGonczer_ has joined #openstack-containers16:00
*** EricGonczer_ has quit IRC16:00
*** vimal has quit IRC16:01
openstackgerritManjeet Singh Bhatia proposed openstack/magnum: WIP: Add Functional Tests for mesos cluster  https://review.openstack.org/22521216:03
*** ganeshna has quit IRC16:05
openstackgerritManjeet Singh Bhatia proposed openstack/magnum: WIP: Add Functional Tests for mesos cluster  https://review.openstack.org/22521216:05
*** puranamr has joined #openstack-containers16:05
*** ganeshna has joined #openstack-containers16:06
*** Qiming has quit IRC16:07
openstackgerritManjeet Singh Bhatia proposed openstack/magnum: WIP: Add Functional Tests for mesos cluster  https://review.openstack.org/22521216:08
*** unicell has quit IRC16:09
*** ganeshna has quit IRC16:09
*** ganeshna has joined #openstack-containers16:09
*** alex_klimov has quit IRC16:09
*** EricGonczer_ has joined #openstack-containers16:10
*** Marga_ has joined #openstack-containers16:17
*** mfalatic has quit IRC16:17
*** puranamr has quit IRC16:18
*** EricGonczer_ has quit IRC16:18
sdakeTango ping16:20
Tangosdake: Hi Steve16:20
sdaketango did you manage to get your credentials sorted out?16:20
*** mfalatic has joined #openstack-containers16:20
Tangosdake: yep it worked, just took some time16:20
sdakewer eou able to upload?16:21
Tangosdake: Yes I uploaded the new image16:21
sdakeafter you upload you generally have to chmod 664 the image16:21
sdakerather 644 the image16:21
Tangosdake: ah ok, let me do that. Should we clean up the old ones?16:21
sdakeno please dont do that16:21
sdakewe should keep all old images because people may sitll be loading them16:22
*** ganeshna_ has joined #openstack-containers16:22
sdakealso if we could follow a basic atomic-1/atomic-2/atomic-3 and not have extra stuff int he image name that might be helpful16:22
sdakewhen i see extra stuff in the image name its confusing16:22
Tangook, I am debating whether to just replace the #516:22
Tangoinstead of naming the new one 5-LB16:23
sdakeideally we want to be in a world where we only provide implementations against the latet image16:23
sdakeis the current 5 doa?16:23
sdakeI'd just call it -6 :)16:23
TangoWe have been testing against 5 and it works fine16:23
sdakethink of images like a tag in a repo - undeleteable ;)16:23
sdakethe lb works fine?16:23
sdakeor the image works16:23
*** ganeshna has quit IRC16:24
Tango#5 has k8s version 1.0.4 and it works fine, but the LB part doesn't work because of bugs16:24
sdakefantastic ;)16:24
*** suro-patz has joined #openstack-containers16:24
sdakehey suro-patz16:24
Tangothe new one also is same as #5 except the LB part works16:24
sdakeoh nice they finally go thte lb working ?16:25
sdakenice job sticking with it tango :)16:25
sdakejust to clarify, is image building still busted in some subtle way?16:25
TangoThere are still issues to work through, but at least the basic functionality works16:25
TangoSo now we can do wordpress :)16:25
sdakesweet - we have arrived16:25
*** mfalatic_ has joined #openstack-containers16:26
TangoSo let me ask your thought on this one issue16:26
*** ganeshna has joined #openstack-containers16:26
sdakeshoot16:27
TangoThe k8s backend uses Rackspace gophercloud to talk to OpenStack16:27
suro-patzsdake:hello16:27
sdakewhat is gophercloud16:27
TangoIt's a code repo that wraps OpenStack with additional functionalities16:28
*** ganeshna_ has quit IRC16:28
sdakeso magnum is dependent on gophercloud now?16:28
Tangohttps://github.com/rackspace/gophercloud/16:28
*** fawadkhaliq has quit IRC16:28
TangoKubernetes does16:29
*** Marga_ has quit IRC16:29
Tangoit's built into k8s binaries16:29
sdakeoh got it16:29
sdakei just ooked at hte repo16:29
sdakeok that dep looks fine to me, no issues16:29
sdakeI thought we somehow slipped an entire new dependency into magnum :)16:30
TangoSo the gophercloud code autenticates with OpenStack by using credentials from a config file that we have to set up16:30
*** mfalatic has quit IRC16:30
sdakei recall that16:30
Tangousername, auth_url, password16:30
TangoThe sticking point is the password16:30
TangoI haven't figured out a good way to handle this yet16:30
Tangothe rest can be pulled from the context, so they are ok16:31
TangoI already coded them up16:31
sdakethe password isn't in the api context?16:31
TangoI don't see it16:31
sdakeyou may have to add it although that wont work for situations in which people only specify the token16:32
sdakecan't gophercloud work with a token?16:32
sdakethat would be teh best way to approach this problem16:32
*** ganeshna has quit IRC16:33
TangoSo we pass along the token from the api context?  I haven't looked at the gophercloud code to see if they support this option.16:33
TangoIf they do, we have to change the plugin code in k8s to handle the token16:33
sdakei am not sure if we have the token in the api context but it can eaisly be stored somewhere int he context16:33
sdaketoken would be the way I'd go with an implementation16:34
sdakepassword is insecure16:34
TangoI see something in the context that looks like a token16:34
sdakejamming the password around seems less then ideal16:34
TangoYeah that's what I am worried about16:34
TangoThe thing about the token is that it's temporary, right?16:35
TangoSo we will have to pass it along on every request16:35
Tangowe can't store it in a config file like the way they do it now16:35
sdakehttps://github.com/rackspace/gophercloud/blob/master/provider_client.go#L5516:35
sdaketoken ca nchange yes16:36
*** Marga_ has joined #openstack-containers16:36
sdakeI think its on a timer but not certain precisely how it works16:36
sdakeit may be per requet16:36
TangoThe password stored in a config file also has the same problem, it can change16:36
*** EricGonczer_ has joined #openstack-containers16:36
sdakethe idea of a token is it is generated to match a password/user id16:36
sdakeso token is secure and temporary16:37
sdakeif a password leaks, bad things happen16:37
sdakeif a token leaks, it only leaks for a limited period16:37
sdakethis is why we use tokens over the wire vs passwords in most cases16:37
sdaketokens also hae a performance benefit16:37
sdakenot that we care about that16:37
*** mfalatic_ is now known as mfalatic16:37
sdake(just explaining for the sake of completeness:)16:38
Tangoright.  So to solve this problem will require change in k8s upstream.16:38
sdakeif it can be done, we should tr yto get it done correctly16:38
sdakei think from now forward, we need to be very demanding of security implications in magnum16:39
sdakemagnum has reached the point where it is secure16:40
sdakeor is closing in16:40
sdakewe dont want to leak credentials or authentication stuff around16:40
sdakebeing secure is more important then having features16:40
*** EricGonczer_ has quit IRC16:40
TangoSo the way k8s works right now to support LB is that their service kube-controller-manager reads the config file on start up, which contains the OpenStack credential.16:41
* sdake groans16:42
TangoThat credential is actually not even per user, since it's read only once16:42
Tangoit has to be some kind of service credential16:42
TangoThen it uses it to talk to OpenStack and make request16:42
sdakeusing a token in that case sounds extremely painful to implement then16:43
sdakeas in requiring alot of upstream k8s work16:43
Tangoit will require work16:43
sdakeso what do you need me to do, swallow it ? :)16:44
Tangocan we have a special service credential with limted scope?16:44
sdaketango I was thinking of this - you mean add a user in the same domain with less creds16:45
TangoRight.16:45
sdakeI dont know how to do that but that seems feasible16:45
Tangojust enough to talk to Neutron and create LB pool, members, VIP, monitor16:45
*** unicell has joined #openstack-containers16:45
TangoAdrian mentioned about this some time ago16:46
sdakestill this user shoudl us etokens rather then passwords ;)16:46
sdakeso that is an orthogonal issue16:46
sdakebasically we shold be doing both of those things16:46
sdakewe need to turn the knobs up on security16:47
sdakegoing forward16:47
TangoYeah, that's that sticking point I have come to16:48
TangoHow do we handle service credential for services to talk to each other?16:49
openstackgerritDimitry Ushakov proposed openstack/magnum: Functional tests with Tempest - BayModel CRUD  https://review.openstack.org/22417016:52
sdakesecurely is the answer ;)16:53
TangoOK, let me write this up on the whiteboard and see how we want to work this out16:54
*** fawadkhaliq has joined #openstack-containers16:56
*** vilobhmm_11 has joined #openstack-containers16:57
*** harshs_ has joined #openstack-containers16:58
*** suro-patz has quit IRC17:00
apmeltonyuanying: you aren't still around are you?17:01
*** achanda has joined #openstack-containers17:01
*** harshs has quit IRC17:01
*** harshs_ is now known as harshs17:01
*** suro-patz has joined #openstack-containers17:01
openstackgerritAndrew Melton proposed openstack/magnum: Add TLS to Docker-Swarm Template  https://review.openstack.org/21259817:06
apmelton^^ could use some eyes if any reviewers are around17:06
*** kebray has quit IRC17:06
*** absubram has joined #openstack-containers17:09
*** eghobo_ has joined #openstack-containers17:12
*** adrian_otto has quit IRC17:12
*** eghobo has quit IRC17:15
*** Drago has quit IRC17:17
*** vilobhmm_11 has quit IRC17:18
*** sthillma has joined #openstack-containers17:19
*** achanda has quit IRC17:30
*** fawadkhaliq has quit IRC17:33
*** fawadkhaliq has joined #openstack-containers17:33
*** tbh has quit IRC17:39
*** gangil1 has joined #openstack-containers17:41
*** gangil has quit IRC17:42
*** suro-patz has quit IRC17:50
*** achanda has joined #openstack-containers17:52
*** suro-patz has joined #openstack-containers17:53
*** suro-patz has joined #openstack-containers17:53
*** muralia has quit IRC17:57
*** muralia has joined #openstack-containers17:57
*** harlowja has quit IRC17:58
*** harlowja has joined #openstack-containers17:58
*** suro-patz has quit IRC18:01
*** rlrossit has quit IRC18:02
*** vilobhmm_11 has joined #openstack-containers18:02
*** rlrossit has joined #openstack-containers18:03
*** fawadkhaliq has quit IRC18:04
*** suro-patz has joined #openstack-containers18:05
*** gangil has joined #openstack-containers18:06
*** gangil1 has quit IRC18:06
manjeets._.18:09
*** vilobhmm_11 has quit IRC18:22
*** vilobhmm_11 has joined #openstack-containers18:23
openstackgerritDimitry Ushakov proposed openstack/magnum: Functional tests with Tempest - BayModel CRUD  https://review.openstack.org/22417018:26
*** kebray has joined #openstack-containers18:33
openstackgerritManjeet Singh Bhatia proposed openstack/magnum: WIP: Add Functional Tests for mesos cluster  https://review.openstack.org/22521218:34
*** kebray has quit IRC18:35
*** unicell has quit IRC18:37
*** annegentle has joined #openstack-containers18:39
*** unicell has joined #openstack-containers18:40
*** kebray has joined #openstack-containers18:45
*** kebray has quit IRC18:45
*** kebray has joined #openstack-containers18:46
*** banix has joined #openstack-containers18:47
hongbin_vilobhmm_11: you there?18:52
vilobhmm_11hey hongbin : ping18:53
hongbin_vilobhmm_11: Remember you asked me a question yesterday18:53
vilobhmm_11yes18:54
hongbin_It is about the rpc api change18:54
vilobhmm_11ok18:54
hongbin_In general, you just need to update the rpc api in tests18:54
vilobhmm_11rpc api for rc_update/ rc_delete etc you mean18:55
vilobhmm_11if you can point to some code that would be great in fact I did change some18:55
vilobhmm_11let me point you to some code18:55
hongbin_I will walk it thought18:55
hongbin_In here, https://review.openstack.org/#/c/213368/8/magnum/conductor/api.py18:55
hongbin_you change the rpc api of replication controller18:56
*** harshs has quit IRC18:56
vilobhmm_11yes so i did change here https://github.com/openstack/magnum/blob/master/magnum/tests/unit/conductor/test_rpcapi.py#L15618:56
hongbin_Then, you need to update this file magnum/tests/unit/conductor/test_rpcapi.py18:56
vilobhmm_11yes I did that in my local changes18:56
vilobhmm_11yesterday18:56
vilobhmm_11still i see the problem18:56
vilobhmm_11i pasted in IRC18:56
vilobhmm_11i changed it for all the interfaces I modified18:57
*** achanda has quit IRC18:57
vilobhmm_11because failure in magnum.tests.unit.conductor.test_rpcapi.RPCAPITestCase.test_rc_update18:57
hongbin_OK, I show you something18:57
vilobhmm_11itself suggested me that something is wrong with rpc layer changes18:57
vilobhmm_11sure18:57
vilobhmm_11that will help18:57
hongbin_Here is the change I made to fix a test http://paste.openstack.org/show/468319/18:58
hongbin_Apply a similar fix to the rest of the test, it should work18:59
vilobhmm_11with the above fix 'magnum.tests.unit.conductor.test_rpcapi.RPCAPITestCase.test_rc_update' should work I agree but magnum.tests.unit.api.controllers.v1.test_replicationcontroller.TestPatch.test_replace_with_manifest still fails19:00
hongbin_OK, let me try that test locally19:01
vilobhmm_11hongbin : hold on my bad19:01
vilobhmm_11I did not include a empty manifest19:01
vilobhmm_11let me try again19:01
vilobhmm_11please hold on19:01
hongbin_sure19:01
vilobhmm_11hongbin : now complaining like this http://paste.openstack.org/show/468329/19:06
vilobhmm_11thats why in the test_rpcapi apart from giving bay_uuid, rc_ident, manifest = '{"key" : "value"}'19:06
hongbin_k. Let me try it19:07
vilobhmm_11it expects a special format for manifest19:07
vilobhmm_11hongbin : sure thanks ! since in https://review.openstack.org/#/c/213368/8/magnum/conductor/handlers/k8s_conductor.py #184 body=manifest  manifest can't be empty19:09
hongbin_np. Looking that the API test19:10
hongbin_Looking into19:10
vilobhmm_11sure thanks19:11
vilobhmm_11hongbin : if we compare it with https://review.openstack.org/#/c/213368/8/magnum/api/controllers/v1/replicationcontroller.py #307 manifest was explicitly set to 'None' as its a mandatory field in rc object https://github.com/openstack/magnum/blob/master/magnum/objects/replicationcontroller.py#L40 I my changes for patch ( https://review.openstack.org/#/c/213368/8/magnum/api/controllers/v1/replicationcontroller.py #307 ) first o19:18
hongbin_It looks the processing of manifest is removed in your patch. Let me check carefully19:20
vilobhmm_11sure19:20
*** dimtruck is now known as zz_dimtruck19:22
*** annegentle has quit IRC19:25
*** vilobhmm_11 has quit IRC19:27
*** vilobhmm_11 has joined #openstack-containers19:28
*** suro-patz has quit IRC19:30
*** adrian_otto has joined #openstack-containers19:32
*** adrian_otto has quit IRC19:34
*** absubram has quit IRC19:40
*** fawadkhaliq has joined #openstack-containers19:43
vilobhmm_11hongbin : you yhink i have missed something with manifest processing ?19:43
hongbin_vilobhmm_11: sort of19:44
*** sthillma_ has joined #openstack-containers19:44
hongbin_vilobhmm_11: remember you asked me yesterday for the _get_manifest things19:45
vilobhmm_11hongbin : yes19:45
hongbin_That is the problem19:45
*** sdake has quit IRC19:46
hongbin_So, the problem is how to get manifest without an DB object19:46
hongbin_need some walkaround19:46
vilobhmm_11yup19:46
vilobhmm_11without a db object19:46
vilobhmm_11in rc controller a sample manifest is parsed19:47
*** sthillma has quit IRC19:47
*** sthillma_ is now known as sthillma19:47
hongbin_yes, need something to figure out a solution19:47
vilobhmm_11as part of https://github.com/openstack/magnum/blob/master/magnum/api/controllers/v1/replicationcontroller.py#L29119:47
vilobhmm_11is there some common place where we have these manifest stored like the templates19:48
*** sdake has joined #openstack-containers19:53
*** annegentle has joined #openstack-containers19:55
hongbin_vilobhmm_11: No, manifest is not persisted, it is parsed on the fly19:56
vilobhmm_11hmm19:56
vilobhmm_11the k8s API will need manifest as its body …https://review.openstack.org/#/c/213368/8/magnum/conductor/handlers/k8s_conductor.py #18419:57
*** suro-patz has joined #openstack-containers20:01
*** apuimedo has joined #openstack-containers20:20
vilobhmm_11hongbin : away for lunch for few min will be back soon20:21
hongbin_vilobhmm_11: ack20:22
*** rlrossit has left #openstack-containers20:23
*** eghobo_ has quit IRC20:32
*** suro-patz has quit IRC20:32
*** eghobo has joined #openstack-containers20:36
*** fawadkhaliq has quit IRC20:44
hongbin_vilobhmm_11: this change will make the API test work http://paste.openstack.org/show/468436/20:44
*** fawadkhaliq has joined #openstack-containers20:45
hongbin_vilobhmm_11: when I was testing your patch, I find out a new issue which I am going to comment on your review20:47
*** fawadkhaliq has quit IRC20:48
hongbin_vilobhmm_11: basically, your patch is better to divide into two20:49
hongbin_vilobhmm_11: one of them add 'bay_uuid' to the API, the other do the rest of the job20:49
hongbin_vilobhmm_11: then we can debate those two changes separately.20:51
vilobhmm_11hongbin : just back from lunch…will check the paste21:05
hongbin_vilobhmm_11: ack21:15
*** harshs has joined #openstack-containers21:15
vilobhmm_11hongbin : it works ! :) http://paste.openstack.org/show/468494/21:17
hongbin_vilobhmm_11: good to know21:17
vilobhmm_11i guess i missed magnum/tests/unit/objects/utils.py21:17
hongbin_vilobhmm_11: I haven't tested it in devstack though21:17
vilobhmm_11part of setting manifest here21:17
vilobhmm_11ok21:18
vilobhmm_11let me getting all the test working and then we can see if we still need to split the patches21:18
vilobhmm_11also will need to submit cli changes to make bay-uuid as mandatory param21:19
hongbin_sure21:19
vilobhmm_11for k8s operations21:19
vilobhmm_11hongbin : thanks again for all the help ! :)21:19
hongbin_np21:19
*** manjeets has quit IRC21:20
*** suro-patz has joined #openstack-containers21:21
*** dims_ has joined #openstack-containers21:29
*** sthillma_ has joined #openstack-containers21:30
*** eghobo has quit IRC21:30
*** sthillma has quit IRC21:32
*** sthillma_ is now known as sthillma21:32
*** dimsum__ has quit IRC21:32
*** annegentle has quit IRC21:34
*** alex_klimov has joined #openstack-containers21:47
*** vilobhmm_11 has quit IRC22:01
*** vilobhmm_11 has joined #openstack-containers22:02
*** alex_klimov has quit IRC22:38
*** hongbin_ has quit IRC22:39
*** sdake_ has joined #openstack-containers22:39
*** sdake has quit IRC22:43
*** openstackgerrit has quit IRC22:46
*** openstackgerrit has joined #openstack-containers22:46
*** sdake has joined #openstack-containers22:48
*** sdake_ has quit IRC22:51
*** achanda has joined #openstack-containers22:52
*** dims_ has quit IRC22:56
*** kebray has quit IRC23:09
*** banix has quit IRC23:10
*** banix has joined #openstack-containers23:11
*** dimsum__ has joined #openstack-containers23:23
*** rpothier has quit IRC23:33
vilobhmm_11balajin : api2.ostk.cl3.prod.gq1.yahoo.com23:35

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!