Monday, 2011-08-15

*** RobertLaptop has quit IRC00:42
*** RobertLaptop has joined #openstack-dev00:46
*** RobertLaptop has quit IRC02:15
*** lts has joined #openstack-dev02:28
*** RobertLaptop has joined #openstack-dev02:30
*** lts has quit IRC02:32
openstackgerritZiad Sawalha proposed a change to openstack/keystone: Added reponse handling for xsd static file rendering  https://review.openstack.org/23302:41
openstackgerritA change was merged to openstack/keystone: Added reponse handling for xsd static file rendering  https://review.openstack.org/23302:44
openstackgerritVerification of a change to openstack/keystone failed: Extension handling and static file content reorganization  https://review.openstack.org/23402:45
openstackgerritA change to openstack/keystone has been rejected: Ziads changes and fixes for them.  https://review.openstack.org/23002:45
openstackgerritZiad Sawalha proposed a change to openstack/keystone: Extension handling and static file content reorganization  https://review.openstack.org/23402:54
openstackgerritVerification of a change to openstack/keystone failed: Added reponse handling for xsd static file rendering  https://review.openstack.org/23402:54
openstackgerritZiad Sawalha proposed a change to openstack/keystone: Added reponse handling for xsd static file rendering  https://review.openstack.org/23403:00
openstackgerritVerification of a change to openstack/keystone failed: Schema updates. Split WADLs and extensions and got xsds to compile  https://review.openstack.org/23403:01
tr3buchetvishy: ping03:39
tr3bucheti'm about 1000 lines in03:39
tr3buchetwell it was 8 something last i checked03:40
tr3bucheti'm trying to figure out wtf to do with libvirt's refresh security groups03:40
tr3bucheti have the libvirt get_network_info() function completely removed now and all functions that used it before and their tests passing03:41
tr3buchetthere are a few functions which previously optionally accepted network_info left to cleanse03:41
*** chomping has joined #openstack-dev03:57
openstackgerritMonty Taylor proposed a change to openstack/openstack-ci: Added a version of the rfc script from gluster.  https://review.openstack.org/23504:55
vishytr3buchet: i already did it and proposed05:03
vishylook at merge queue05:03
*** nci has quit IRC07:03
*** reidrac has joined #openstack-dev07:04
*** nickon has joined #openstack-dev07:17
*** darraghb has joined #openstack-dev07:29
*** mnour has joined #openstack-dev08:06
*** phil121 has quit IRC08:09
openstackgerritYogeshwar Srikrishnan proposed a change to openstack/keystone: Additional tests and minor changes to support services CRUD.  https://review.openstack.org/23608:26
openstackgerritZiad Sawalha proposed a change to openstack/keystone: Schema updates. Split WADLs and extensions and got xsds to compile  https://review.openstack.org/23410:07
openstackgerritVerification of a change to openstack/keystone failed: Added reponse handling for xsd static file rendering  https://review.openstack.org/23410:08
*** rods has joined #openstack-dev10:44
*** Guest77784 has quit IRC11:23
*** lorin1 has joined #openstack-dev11:53
*** mfer has joined #openstack-dev11:59
*** bsza has joined #openstack-dev12:35
*** lts has joined #openstack-dev12:56
*** chuck_ has quit IRC13:00
*** zul has joined #openstack-dev13:01
*** kbringard has joined #openstack-dev13:02
*** Guest77784 has joined #openstack-dev13:03
*** dprince has joined #openstack-dev13:13
*** ameade has joined #openstack-dev13:24
*** amccabe has joined #openstack-dev13:44
*** Binbin has joined #openstack-dev14:08
*** dolphm has joined #openstack-dev14:09
*** dprince has quit IRC14:10
*** troytoman-away is now known as troytoman14:15
openstackgerritDolph Mathews proposed a change to openstack/keystone: Additional tests and minor changes to support services CRUD.  https://review.openstack.org/23614:22
openstackgerritA change was merged to openstack/keystone: Additional tests and minor changes to support services CRUD.  https://review.openstack.org/23614:25
openstackgerritDolph Mathews proposed a change to openstack/keystone: Added reponse handling for xsd static file rendering  https://review.openstack.org/23414:33
*** vladimir3p has joined #openstack-dev14:34
openstackgerritA change was merged to openstack/keystone: Added reponse handling for xsd static file rendering  https://review.openstack.org/23414:36
tr3buchetvishy: i hate that we did that. :(14:40
*** vladimir3p has quit IRC14:46
*** rnirmal has joined #openstack-dev14:55
*** dragondm has joined #openstack-dev15:00
smoseris it expected that uploading a vmdk formated full disk image should be supported?15:01
jaypipesdolphm: ping15:01
dolphmjaypipes: pong15:02
jaypipessmoser: in Glance, sure. Not sure about the VMWare driver though15:02
*** reidrac has quit IRC15:03
jaypipesdolphm: hey, I want to get z's git and gerrit stuff sorted... mtaylor and jeblair have responded to his emails about his trouble with Gerrit this weekend. It seems that he's not using topic branches, and by making chnages in the master local branch he's messing something up.15:03
jaypipesdolphm: I noticed you merged in his change on the static file stuff. He mentioned there is "stuff on GitHub to pull in". What is that?15:03
dolphmjaypipes: yeah, i got his gerrit change in this morning.. and he just emailed me about github too15:03
smoserjaypipes, i'm trying vmdk upload and then running under kvm15:03
dolphmjaypipes: he said he "didn't have any way to share his code with Jorge" so he pushed it to github15:04
dolphmjaypipes: instead of, i don't know, opening a review15:04
jaypipessmoser: let us know if it works! ;)15:04
smoserwell, it doesn't :)15:05
smoserjaypipes, https://bugs.launchpad.net/nova/+bug/82679815:05
uvirtbotLaunchpad bug 826798 in nova "ubuntu vmdk uploaded does not boot" [Undecided,New]15:05
jaypipesdolphm: heh. alright, so he pushed his code by doing a git remote add github.com/rackspace/keystone...15:05
jaypipessmoser: ah, well that was a quick answer :)15:05
*** cp16net has joined #openstack-dev15:05
smoseri'm digging info on whether or not glance was involved at all, this is a public openstack on oneiric that i'm not aware of the details of15:05
*** mnour has quit IRC15:06
*** mnour has joined #openstack-dev15:06
jaypipesdolphm: because I get he tried to git review that code but it kept having merge conflicts. the reason it was having merge conflicts was because he did a git pull in his local master, that pulled in commits, then he made code changes in his master branch then git rebase'd and stuff got messed up....15:07
*** troytoman is now known as troytoman-away15:07
jaypipessmoser: k, lemme know if it's Glance related.15:07
dolphmjaypipes: should i setup a how-to-git-gerrit session with him?15:07
smoserglance was used, jaypipes but i know nothing else at the moment.15:08
jaypipessmoser: k15:08
jaypipesdolphm: I think we need to. We need to get him to stop pushing his private history to GitHub...15:08
smoserjaypipes, you can easily try to reproduce though15:08
dolphmjaypipes: 110% agree15:09
jaypipesdolphm: well, he is in training much of today on some new release and code management tool that RAX development teams are now going to be using, so perhaps tomorrow?15:09
dolphmjaypipes: he's a little aggressive on +2's, and, umm, passionate about "more commits = better"15:09
Davieysmoser: The cloud implementation you are talking about doesn't use glance, it currently uses nova-objectstore.15:10
Davieyerr, i am a plonker, scrub that15:10
jaypipesdolphm: more commits == better is fine for local development. But git's workflow really pushes for rebasing those local commits into a single changeset when you push public history.15:10
smoserDaviey, i was told by agy it uses glance just minutes ago15:10
Davieysmoser: yes, i am a plonker.15:11
smoseryou are.15:11
jaypipesdolphm: and ack on the +2 stuff. That is a real problem that is going to be an issue with the incubated -> core process, just to let you know...15:11
dolphmjaypipes: no no, i mean "more commits in openstack/keystone NOW NOW NOW no matter what they are = better"15:11
dolphmjaypipes: i recognize that and i've tried to subtly suggest that to him15:11
jaypipesdolphm: the +2 stuff is emblematic of the GitHub "just close and merge it"...15:12
dolphmjaypipes: yep15:12
jaypipesdolphm: which works fine when you have 2 or 3 people requesting pulls. Not so much once you grow a bit larger...15:12
dolphmjaypipes: yeah, he hasn't recognized how much benefit gerrit has provided keystone (yet), and he's only impeding that benefit15:13
jaypipesdolphm: anyway, I think the big thing is to a) get Ziad using topic branches and b) walking through the difference between public and private history. notmyname posted an excellent link for an article that I think Z should go through: http://sandofsky.com/blog/git-workflow.html15:13
dolphmjaypipes: ha, i love the opening paragraph..15:14
jaypipesdolphm: yes, indeed. when I read that article, I tried imagining that creiht was reading it to me, sitting with a pipe in front of a fire in a nice big leather chair.15:15
jaypipesdolphm: it helped me consume the content better ;)15:16
dolphmdolphm: i'll go find a cigar15:16
dolphmjaypipes: ^ lol15:16
jaypipeshehe15:16
notmynamedolphm: follow -up twitter conversation to that git post http://paste.openstack.org/show/2170/15:20
*** letterj has joined #openstack-dev15:24
*** ChanServ sets mode: +v letterj15:24
dolphmnotmyname: for future reference =) http://i.imgur.com/paTr6.jpg15:25
* creiht worries about what other fantasies jaypipes has about me15:25
jaypipescreiht: lol15:27
notmynamedolphm: indeed15:28
jaypipessmoser: interesting thought from you on that bug: "disabling a filesystem check has nothing to do with disabling filesystem checks."15:28
smoser:)15:29
smoseryeah...15:29
smoser"injecting a file has nothing to do with disabling filesystem checks"15:29
*** heckj has joined #openstack-dev15:32
jaypipessmoser: :)15:32
smoseri fixed that.15:33
jaypipessmoser: hehe, no worries.15:33
smoserthe bug i meant to give to you was https://bugs.launchpad.net/nova/+bug/82679815:33
uvirtbotLaunchpad bug 826798 in nova "ubuntu vmdk uploaded does not boot" [Undecided,New]15:33
smoserthats the vmdk one15:33
jaypipessmoser: I pretty much knew what you meant ;) was a good tautology though.15:33
smoseryeah.15:33
smoserdisabling a filesystem check has *something* to do with disabling filesystem checks, assuming tune2fs works properly15:34
mtaylorjaypipes, dolphm ++ on that article15:34
mtaylorjaypipes: and +10 on creiht reading it in an armchair15:34
creihthow about on a horse?15:36
mtaylorcreiht: only if you're riding it backwards bare-chested and also holding a bottle of old spice15:38
*** mnour has quit IRC15:38
creihtlook at your git workflow, now look at mine15:38
jaypipesooooh, the imagery...15:40
creihtlook now I am on github...15:40
mtaylornow I'm a clam15:40
*** bsza has quit IRC15:55
openstackgerritDolph Mathews proposed a change to openstack/keystone: Added reponse handling for xsd static file rendering  https://review.openstack.org/23715:57
dolphmjaypipes: mtaylor: ^^ these are z's changes from github.com/rackspace/keystone15:57
*** bsza has joined #openstack-dev15:58
mtaylordolphm: great. now all we've got to do is get him moving forward properly15:58
openstackgerritKevin L. Mitchell proposed a change to openstack/glance: Add support for shared images  https://review.openstack.org/20115:58
*** martine has joined #openstack-dev16:04
openstackgerritA change was merged to openstack/openstack-ci: Add a script to close Github pull requests.  https://review.openstack.org/22416:04
dolphmmtaylor: i don't want these changes merged in yet either... there's some terrible slop in there that needs to be fixed... so this is a good chance for him to learn the review process :)16:04
mtaylordolphm: yay!16:04
openstackgerritA change was merged to openstack/openstack-ci-puppet: Add cron job for closing pull requests.  https://review.openstack.org/22516:05
openstackgerritDolph Mathews proposed a change to openstack/keystone: Added reponse handling for xsd static file rendering  https://review.openstack.org/23716:06
jeblairdolphm: awesome, thanks!16:07
dolphmjeblair: np16:07
*** zaitcev has joined #openstack-dev16:13
openstackjenkinsProject nova build #1,248: SUCCESS in 3 min 27 sec: https://jenkins.openstack.org/job/nova/1248/16:20
openstackjenkinsTarmac: Add durable flag for rabbit queues.16:20
*** zul has quit IRC16:24
openstackgerritA change to openstack/keystone has been rejected: Ziad's changes from github.com/rackspace/openstack  https://review.openstack.org/23716:25
dolphmif i -2, the z-hammer can't just +2 and merge it anyway, right?16:25
mtaylordolphm: I believe that is the case16:27
mtaylorjeblair: ^^16:27
*** markvoelker has joined #openstack-dev16:28
*** zul has joined #openstack-dev16:28
jeblairmtaylor, dolphm: correct16:29
*** Binbin has quit IRC16:37
*** Tushar has joined #openstack-dev16:56
openstackgerritA change was merged to openstack/glance: Bug fix lp:824706  https://review.openstack.org/22916:59
openstackgerritA change was merged to openstack/glance: Bug Fix lp:825493  https://review.openstack.org/22617:00
openstackgerritVerification of a change to openstack/glance failed: Add notifications for uploads, updates and deletes  https://review.openstack.org/19217:03
*** mgius has joined #openstack-dev17:13
*** jhtran has joined #openstack-dev17:14
*** negronjl has quit IRC17:19
*** negronjl has joined #openstack-dev17:19
*** lorin1 has quit IRC17:27
*** anotherjesse has joined #openstack-dev17:42
vishytr3buchet: I saw you push a branch, was trying to ping you to let you know that I was doing it, but you weren't on irc at the time :(17:47
vishytr3buchet: I assume you made the same set of changes?17:47
*** dprince has joined #openstack-dev17:56
dolphmopen question (vishy?): in keystone, does it make more sense for the "default tenant" relationship to be described as "a Tenant is Owned by a User" and therefore be explicitly modeled as an attribute of the tenant referencing it's owner (TenantModel.owner --> UserModel) instead of an attribute of the User (UserModel.default_tenant --> TenantModel)?18:16
vishydolphm: i think that breaks down if you have a user that owns multiple tenants18:17
dolphmvishy: then multiple tenants point to a single user, the owner18:17
dolphmvishy: the current model breaks down in that scenario (a user can only point to a single tenant)18:18
vishyright but then when the user logs in, how do you pick its default tenant?18:18
*** dprince_ has joined #openstack-dev18:18
*** dprince has quit IRC18:18
dolphmvishy: if they only own a single tenant, it can be looked up, and a scoped token can be immediately provided18:19
*** dprince_ has quit IRC18:19
dolphmvishy: if they own multiple tenants, they must go through the 2.0 process of selecting a tenant to get a token for18:19
vishydolphm: isn't that the alternate solution we came up with?18:20
vishydolphm: I thought that there was a strong feeling that default tenant was preferred18:20
dolphmvishy: or their "unscoped" token is naturally "scoped" to their Own tenants, but not to anything they have a Role on18:20
vishyI don't really care personally18:20
dolphmvishy: we didn't talk about modeling it this way18:20
vishyi don't think they should be properties on either object personally18:20
*** mszilagyi has joined #openstack-dev18:21
vishyuser, tenant, association seems way simpler to me18:21
*** anotherjesse_ has joined #openstack-dev18:21
dolphmvishy: i personally agree18:21
*** dprince has joined #openstack-dev18:22
vishyI don't understand why this becomes so complicated18:23
vishyhave users tenants18:23
vishyand an association table with role_type18:23
vishyuser_id, tenant_id, role_type18:23
vishyyou do a join and you have all of the tenants and roles18:23
vishyif you have one, return it...18:23
*** anotherjesse has quit IRC18:25
*** anotherjesse_ is now known as anotherjesse18:25
annegentleyou're all invited - doc team meeting in #openstack-meeting channel in about an hour and 15 minutes from now18:46
tr3buchetvishy: they were fairly similar yeah18:48
tr3buchetvishy: same goal too, rip out the libvirt get_network_info nonsense18:48
vishyyeah sorry about that :(18:49
vishyi was fixing a couple of bugs, and it made sense to just go ahead and fix that whole part18:49
openstackgerritMonty Taylor proposed a change to openstack/openstack-ci: Added a version of the rfc script from gluster.  https://review.openstack.org/23518:52
openstackgerritMonty Taylor proposed a change to openstack/openstack-ci: Added a version of the rfc script from gluster.  https://review.openstack.org/23518:55
jaypipesvishy, dolphm: since when did users "own" tenants? I thought a user "belonged to" a tenant (i.e. a tenant is the account/project)18:55
dolphmjaypipes: it's just a thought... i'm wondering why it won't work18:55
vishyjaypipes: in the current project model there is an 'owner': called the project manager18:55
jaypipesvishy: but that's a role, not a user, right?18:56
vishybut i think it is way easier to have an association table18:56
vishyjaypipes: it is actaully a field in the projects table18:56
vishybut it shouldn't be :)18:56
jaypipesvishy: I see18:56
dolphmvishy: jaypipes: are ya'll referring to nova?18:57
vishyyes in nova that is how it is18:57
jaypipesyes18:57
dolphmso, isn't this "better" for keystone too, if it also satisfies rackspace's business case?18:58
dprincevishy: when you have a minute I have a question on instance states in nova. Looking at implementing pvo blueprint.18:58
vishydprince: got a minute18:58
vishydolphm: no, i think it is too limiting, the association table is way simpler and more flexible18:59
vishyotherwise you have all sorts of special cases in the logic18:59
dolphmvishy: like what?18:59
vishylook at the current code checking for default_tenant, it is in way too many places19:00
dprincevishy: So instead of adding a new column what are your thoughts on reworking how the current 'state' and 'state_description' columns work.19:01
dolphmvishy: my thought is to replace with "unscoped" token with a "default-scope" token... the default scope being tenants the user Owns ... so it simply becomes business logic on the token... "can the token operate on this tenant"19:01
dprincevishy: Specifically. We are considering what if we made them 'vm_state' and 'api_state'.19:01
dprincevishy: The existing columns seem to map more directly to an EC2 API use case. Just wondering if we could rework things to work better for the transision states and then have the OS and EC2 API's map them according to those SPECs.19:03
*** jhtran_ has joined #openstack-dev19:06
*** jhtran has quit IRC19:06
*** jhtran_ is now known as jhtran19:06
vishydprince: there are some comments in the db models file from ewan19:06
*** jhtran has quit IRC19:06
vishydprince: talking about how xen models this stuff19:06
dprincelooking...19:06
vishybasically the idea is that there are three states19:07
vishythe power state, the vm_state and the current task19:07
dprinceComments in nova/db/sqlalchemy/models.py?19:07
vishyyou could probably get away without powerstate19:07
vishyyeah19:07
vishyhe wrote an email about it to the list long ago19:08
vishypowerstate should be able to be introspected from vmstate19:08
dprinceSure.19:08
vishydprince: but in general i think you're correct, we should have rich states internally and map them to states that the api knows19:09
vishydprince: I think two states internally is probably best though, where it is, and where it is trying to get to19:09
vishysince we don't have the concept of an external task19:10
dprinceOkay. We weren't thinking about the 'task_state'. I was going to call Ewans power state 'vm_state'.19:10
dprinceBut I could go either way.19:10
vishydolphm: I think ownership is too limiting19:10
dprinceThis would obviously involve changes all over the place (probably not D4 material) but you would be open with a 2 column model?19:10
dolphmvishy: but this is *less-limiting* than a "default_tenant"19:11
vishydolphm: ownership is inherently 1 - many and tenants - users should be many - many19:11
vishydolphm: it just switches the 1 side of the 1 - many19:11
dolphmvishy: ... to the side that makes more sense :)19:12
vishydolphm: but why have that limitation at all.  It just means you have to jump through hoops to do things like roles, because you've limited one side of the relationship19:12
vishydprince: yes definitely19:13
dolphmvishy: you're just arguing against a default_tenant... and i thought we lost that argument on friday... so i'm just trying to fix rackspace's proprietary-ness19:14
vishydolphm: you can do the same thing in my model that you can do in yours19:15
*** yogirackspace has joined #openstack-dev19:15
vishydolphm: if there is only one association, return it as the default19:15
dolphmvishy: i totally agree, but we lost that fight19:16
vishydolphm: I don't really see how the owner thing is any simpler than default tenant19:16
dolphmfor starters, it'd be more intuitive to newcomers19:16
vishythe only difference is you have to do a uniqueness test to make sure you can return it19:16
vishyseems more complicated actually19:16
dolphm"tenants can be owned by user" vs "users have the concept of default tenantness"19:16
vishydolphm: but the only way that is simpler is if you enforce one owned tenant per user19:17
vishyotherwise you are back in my model anyway19:17
vishydolphm: i really don't care which way it is modeled19:18
vishydolphm: i think you are making more work for yourself by changing it without any tangible benefit19:18
dolphmthe major benefit is the simplicity of an "unscoped token" --> "default-scoped token" or "self-scoped token"19:18
dprincevishy: Still. Using Ewan's nomanclature to keep it simple... I would probably advocate that we have just vm_state and power_state. How does keeping track of the 'task_state' help us?19:19
vishyself-scoped-token?19:19
vishydprince: it simplifies the number of different states necessary in vm_state19:19
vishydprince: for example, you need to do a reboot for rescue, unrescue, reboot, etc.19:20
dolphmvishy: a token that is, by default, scoped to only the Tenant's the User Owns ("scoped to my own stuff"... rather than "scoped to something I only have a Role in")19:20
vishydprince: with only one state you have to add rescuing, unrescuing, rebooting, etc.19:20
vishydprince: and then have some logic that can understand that all of those states really mean that the vm is rebooting19:21
vishydprince: and you can't really know where it is in the process.  Is it shutoff, has the ACPI command been sent to the chassis? etc.19:21
vishydprince: if vm_state actually shows the non-transitory state and task_state shows the action that is being performed19:22
vishydprince: it is easy to always know what state the vm is actually in.19:22
vishydprince: but I'm not married to the idea.  I just thought ewan made a lot of sense when he described how they do it.19:23
vishydolphm: that doesn't make a whole lot of sense.  From the service perspective we want token = 1 tenant and 1 user19:24
dprincevishy: Sure. Looking for that email. But it looks like our 'state' column would become 'power_state' and the existing state_description would become 'vm_state'.19:24
vishydprince: that is fine19:24
vishydprince: i think we can do with 2 columns total19:24
dolphmvishy: what's the implication i'm missing there?19:24
vishydolphm: when we authenticate a token we need to be told the tenant that the token is for19:25
dolphmvishy: ah.... let me check something19:25
vishydolphm: it sounds like you are returning an amorphous list19:25
dolphmvishy: yeah, you're right... i'm wondering if i can fix that19:27
vishydolphm: if you have just one owned tenant, it works just like default tenant19:27
vishydolphm: if you have multiple, than it works just like some limited version of roles19:28
vishydolphm: so i don't see what you gain19:28
vishydolphm: if you want multiple just create a role that says owner19:28
dolphmvishy: the only way i see to fix that is to return a *list* of tokens to the user on login, where each token is scoped to one tenant the user owns... and that's not a place i'd want to change the api contract19:29
vishydolphm: i suppose authorize could return a list of tenants, but then roles get kind of confusing19:29
vishydolphm: how is what you're suggesting different than roles?19:30
*** alekibango has quit IRC19:30
*** alekibango has joined #openstack-dev19:30
dolphmvishy: "ownership" and "default_tenant-ness" are just a proprietary "core" roles19:31
vishywell, implement them as roles then.  Way easier!19:31
dolphmvishy: and by proprietary i mean proprietary to rackspace.19:31
vishyso do the general user tenant associations19:31
vishyand for rackspace create a "default tenant role"19:32
vishy:)19:32
vishygotta grab some lunch19:32
vishycontinue this later19:32
dolphmvishy: "but then the "simplicity" of auth is reduced for rackspace"19:32
dolphmvishy: -ziad19:32
dolphmreduced = lost19:32
*** chipc has joined #openstack-dev19:33
openstackjenkinsProject nova build #1,249: SUCCESS in 3 min 36 sec: https://jenkins.openstack.org/job/nova/1249/19:35
openstackjenkinsTarmac: Libvirt has some autogenerated network info that is breaking ha network.19:35
openstackjenkins* pases network info from manager wherever it is needed19:35
openstackjenkins* fixes libvirt tests19:35
openstackjenkins* renames allow_project_net_traffic to allow_same_net_traffic19:35
openstackjenkins* makes firewall driver use dhcp_server instead of gateway for dhcp exception.19:35
openstackgerritKevin L. Mitchell proposed a change to openstack/glance: Add support for shared images  https://review.openstack.org/20119:39
*** darraghb has quit IRC19:39
*** anotherjesse_ has joined #openstack-dev19:42
*** anotherjesse has quit IRC19:44
*** anotherjesse_ is now known as anotherjesse19:44
*** nickon has quit IRC19:48
openstackjenkinsProject nova build #1,250: SUCCESS in 3 min 39 sec: https://jenkins.openstack.org/job/nova/1250/19:48
openstackjenkinsTarmac: This branch allows the standard inclusion of a body param which most http clients will send along with a POST request.19:48
*** ameade has quit IRC19:54
vishydolphm: jesse just pointed out that your owner thing doesn't really work19:57
anotherjessevishy: here is the issue:19:58
anotherjesse    def remove_user_from_tenant(self, tenant_id, user_id):19:58
anotherjesse        params = {"roleRef": {"tenantId": tenant_id, "roleId": "Member"}}19:58
anotherjesse        # FIXME(ja): we have to get the roleref?  what is 5?19:58
anotherjesse        return self._delete("/users/%s/roleRefs/5" % user_id)19:58
vishydolphm: what if two users should have the same default tenant19:58
vishydolphm: it isn't possible in your model19:58
annegentleDoc team meeting in a few minutes in #openstack-meeting19:58
anotherjessethat is how you remove "Member" role from a user in a tenant...19:58
anotherjessemaybe19:58
anotherjessethe api for adding/removing role-ness in a tenant needs to be cleaned?19:58
anotherjesseThere are three nouns: user, tenant, role … what is the restifarian way of saying - remove this role from the tenant?19:59
dolphmvishy: anotherjesse: yep, proprietary roles are dumb19:59
openstackgerritJohannes Erdfelt proposed a change to openstack/glance: Add notifications for uploads, updates and deletes  https://review.openstack.org/19220:00
openstackgerritA change was merged to openstack/glance: Add notifications for uploads, updates and deletes  https://review.openstack.org/19220:02
anotherjessedolphm: is there a way to say "delete all roles in user/tenant combo"20:03
anotherjessedolphm: since I removing a user from a tenant needs to remove all roles they have in the tenant20:03
jaypipesVek: https://review.openstack.org/#patch,sidebyside,201,5,glance/tests/__init__.py20:04
jaypipesVek: so... that change is from a commit that is in master, but not related to your patchset 5 for shared image groups.20:05
jaypipesVek: wondering how that got in there...20:05
dolphmanotherjesse: i would think the method you pasted should implement taht20:05
dolphm*should*20:05
openstackgerritDolph Mathews proposed a change to openstack/keystone: Ziad's changes from github.com/rackspace/openstack  https://review.openstack.org/23820:06
*** dprince has quit IRC20:06
openstackjenkinsProject nova build #1,251: SUCCESS in 3 min 26 sec: https://jenkins.openstack.org/job/nova/1251/20:06
openstackjenkinsTarmac: Make response structure for list floating ips conform with rest of openstack api20:06
openstackgerritDolph Mathews proposed a change to openstack/keystone: Ziad's changes from github.com/rackspace/openstack  https://review.openstack.org/23720:08
openstackjenkinsProject nova-tarball-bzr-delta build #478: FAILURE in 12 sec: https://jenkins.openstack.org/job/nova-tarball-bzr-delta/478/20:10
openstackjenkinsTarmac: We don't have source for open-wrt in the source tree, so we shouldn't use the images.  Since the images are only there for uploading smoketests, They are now replaced with random images.20:10
zykes-open-wrt ?20:10
zykes-what the hell :p20:11
anotherjesseI put that in there over a year ago20:11
anotherjessesince it was the smallest thing we had that should launch20:11
zykes-ah20:11
anotherjessebut since then ami-tiny and openstack occured20:11
zykes-ami and what ?20:11
anotherjesseI added it back before it was called nova and before we even heard about rackspace&openstack20:12
vishyami-tty20:12
anotherjessethe old days of spring 201020:12
zykes-ah20:13
zykes-does swift run as a vm at xenserve R?20:13
anotherjessezykes-: citrix currently runs everything inside a VPX (application domU)20:14
anotherjesseso - yes for swift & nova20:15
zykes-glance as well  ?20:15
*** dolphm has quit IRC20:19
openstackgerritVerification of a change to openstack/glance failed: Add support for shared images  https://review.openstack.org/20120:20
jaypipesVek: ignore comment above... looks to be a peculiarity with Gerrit -- it's showing changes to files that were changed in trunk master since the last time you pull master I suppose...20:20
*** Tushar has quit IRC20:21
openstackgerritDolph Mathews proposed a change to openstack/keystone: Git-ignore python coverage data  https://review.openstack.org/23920:21
openstackgerritA change was merged to openstack/keystone: Git-ignore python coverage data  https://review.openstack.org/23920:24
vishysoren: ping20:25
sorenvishy: 'sup?20:29
vishysoren: theories on cluster installs for migration.  The libvirts need to talk to each other20:29
vishysoren: options as I see it are: give one ssh key to the nova user on every compute host in the cluster20:30
vishysoren: or have libvirt listen tcp over a management interface20:30
vishysoren: is there another option that I haven't considered?20:30
vishysoren: I also have some stuff regarding source security group to discuss20:31
sorenI'd definitely shoot for ssh.20:32
openstackgerritKevin L. Mitchell proposed a change to openstack/glance: Add support for shared images  https://review.openstack.org/20120:32
vishysoren: you think it is acceptable to have the nova user have an ssh key that allows them to get to every machine in the cluster?20:32
sorenThe tcp+ssl is much more compllicated and the plain SSL is not going to be acceptable for obvious security reasons.20:33
openstackgerritVerification of a change to openstack/glance failed: Add support for shared images  https://review.openstack.org/20120:33
vishysoren: well if it is over a private interface, that seems like less of an attack surface then giving logins to all the boxes no?20:33
sorenvishy: That's assuming noone ever screws up their network config.20:34
sorenvishy: :)20:34
vishysoren: true.  I'm not actually thinking of putting this in generally20:34
sorenvishy: It only takes a minor routing/firewall misconfiguration to accidentally let guests access the hosts.20:34
sorenvishy: What would you do in the more general case?20:35
vishysoren: yes good point20:35
sorenI'm assuming it's for live migration and such?20:35
vishysoren: yes live migration20:35
vishysoren: We don't really have a general solution for multimachine installs yet20:35
openstackjenkinsProject nova build #1,252: SUCCESS in 3 min 33 sec: https://jenkins.openstack.org/job/nova/1252/20:35
openstackjenkins* Tarmac: Adding kvm-block-migration feature.20:35
openstackjenkinsI wrote some description the below URL. I hope it may help for reviewing.20:35
openstackjenkins<http://etherpad.openstack.org/kvm-block-migration>20:35
openstackjenkins* Tarmac: We don't have source for open-wrt in the source tree, so we shouldn't use the images.  Since the images are only there for uploading smoketests, They are now replaced with random images.20:35
vishywhoot block migration is in20:35
zykes-that's only for kvm vishy ?20:36
vishysoren: ok I see your point, ssh is probably the "safer" of the options. Maybe it could be configured to ssh into an especially unpriveleged account20:36
vishythat only has a libvirt socket and basically nothing else20:37
vishyzykes-: yes20:37
zykes-vishy: what about xenserver and so on ?20:37
vishyzykes-: block migration doesn't exist in xen yet20:37
zykes-:/20:37
vishyzykes-: targeted for 2012 i think20:37
zykes-xenserver then ?20:38
vishysame20:38
zykes-so kvm is ahead of it there actually ;p20:38
vishyxenserver supports live migration on shared storage but not block migration afaik20:38
zykes-what's block storage then ?20:38
vishysoren: so security groups, apparently the initial version of ec2 source groups didn't allow for ports to be specified20:39
sorenEh?20:39
vishysoren: so if you use old boto for example you get a security group rule with a source group and NULL in all of the other fields20:39
sorenwhuh?20:39
vishysoren: you didn't experience this?20:40
openstackgerritVerification of a change to openstack/glance failed: Add support for shared images  https://review.openstack.org/20120:40
sorenvishy: I did not.20:40
vishysoren: did you try with boto 1.9?20:40
* soren checks20:40
* soren twiddles thumbs, waiting for rmadison20:40
sorenThere we go.20:40
soren1.9b-1ubuntu520:40
sorenSo yes, 1.9.20:40
sorenSo what would happen?20:41
vishyhttp://pastie.org/237704220:42
vishyand it worked for you?20:42
vishyhmm20:42
vishythe new version of boto has a version that passes stuff in differently20:43
sorenI absolutely tested and verified this.20:43
vishybut as far as i could tell with euca-authorize it doesn't pass in the ip_protocol when you specify a source group20:43
* soren tries to remember if there was anything particular about the testing environment that may have affected the test results..20:44
sorenIt's not entirely impossible that I was using a slightly older (by a few revs) api server, I guess.20:44
vishysoren: http://pastie.org/237705220:45
jaypipesVek: https://jenkins.openstack.org/job/glance/89183/console20:45
claygso... lucid's libvirt is too old?  (Version: 0.7.5-5ubuntu27.16)20:45
sorenvishy: That's with boto 1.9?20:45
sorenclayg: Good grief, yes.20:45
vishysoren: yes20:46
sorenvishy: 1.9b?20:46
vishyyup20:46
sorenISTR the letter there being significant.20:46
vishyand euca2ools version 1.3 i think? checking20:46
sorenvishy: Ah, good point. /me checks that too20:46
soren1.3.1-0ubuntu720:46
vishyah i'm using 1.220:47
vishyinteresting20:47
sorenvishy: Tell you what: I'll look at it in the morning to make sure it still works.20:47
sorenvishy: If not, I'll fix it. If yes, we can debug together tomorrow?20:47
vishysoren: for comparison http://pastie.org/237705920:47
vishythat is what happens with no source group20:47
vishysoren: the comments in boto makes me think that amazon didn't used to support specifying a port for the rule20:48
vishysoren: that you had to allow everything from another group20:48
soren?!?20:48
sorenreally?20:48
sorenI..20:48
sorenHm..20:48
*** Tushar has joined #openstack-dev20:48
vishyyeah see the first pastie20:48
sorenGosh, you're right.20:49
sorenI'm trying desperately to remember how I tested this.20:49
openstackgerritVerification of a change to openstack/glance failed: Add support for shared images  https://review.openstack.org/20120:50
vishysoren: we can deal with it tomorrow.  My general thought is to just interpret the null rules as allow everything20:50
vishysoren: I'm also undecided if we should have a default allow all from the same group20:51
vishyi think that is how it works in amazon, but I kind of like the flexibility of having to specify it...20:51
sorenvishy: We already have a flag to specify that, don't we?20:52
soren(come to think of it)20:52
vishysoren: it allows all from the same network20:52
vishysoren: which is fine in vlan mode, but is useless in flatdhcp20:52
vishy(and even in vlan mode it allows everything for all groups in the same project20:52
sorenErk.20:52
sorenI don't really like the "same network" think. The statically sized subnets are awkward. :-/20:53
sorens/think/thing/20:53
jaypipess1rp: getting these failures again on Vek's shared image groups: https://jenkins.openstack.org/job/glance/89184/console. Can't understand why though... what did we do to resolve those earlier and what could have changed in Vek's commit?20:54
vishysoren: just tested with euca2ools 1.3 and it works20:56
vishyso apparently it was a euca issue?20:56
s1rpjaypipes: good question, no idea why scrubber code would be affected at all20:56
Vekme either.20:56
vishysoren: so the question is do we have an error message or a workaround?  Because right now it just happilly accepts the null values and does nothing20:57
vishysoren: i will do a bug report20:57
jaypipesVek, s1rp: well, this is clearly repeatable, so we'll need to figure it out, or Vek's patches will remain quarantined. :(20:57
* jaypipes trying to remember what the fix for this was earlier...20:57
jaypipesdidn't we see this exact failure before?20:57
Vekfunny thing is that the tests work fine on my master, just not on the shared images branch20:57
jaypipesVek: wait, you can repeat the failure locally?20:58
Vekjaypipes: Yeah, actually, I can.20:59
jaypipesVek: ah, well in that case...20:59
*** bengrue has quit IRC21:00
Vekmaster is fine, but in my shared-images branch, two test failures.21:00
jaypipesvery odd..21:00
Vekand I didn't touch any of the scrubber code21:00
jaypipesof course21:00
Veks1rp: could it be some sort of timing-related change?21:01
*** bengrue has joined #openstack-dev21:01
s1rpVek: i guess that's possible..21:03
sorenvishy: Awesome, thanks.21:03
openstackgerritJames E. Blair proposed a change to openstack/openstack-ci-puppet: Fix crontab typos for gerrit jobs.  https://review.openstack.org/24021:03
openstackgerritJames E. Blair proposed a change to openstack/openstack-ci-puppet: Move puppet cron job to global server config.  https://review.openstack.org/24121:03
sorenvishy: *phew*, thought I was losing it there for a few minutes :)21:03
vishysoren: bug 82696621:04
uvirtbotLaunchpad bug 826966 in nova "authorize source security group fails with euca2ools 1.2" [Undecided,New] https://launchpad.net/bugs/82696621:04
* Vek hrms...21:04
*** jakedahn has joined #openstack-dev21:04
anotherjesseanyone besides sandy able to push novaclient to pypi?21:04
Vekok, this is weird21:04
*** martine has quit IRC21:05
Vektest_immediate_delete() cleans up, starts servers, adds an image, then does "SELECT * FROM images WHERE status = 'pending_delete'" and expects to get an empty list back21:05
Vekand it's not.21:05
s1rpVek: does tests.sqlite need to be deleted first21:06
Vekthat's what I'm wondering...21:07
*** anotherjesse_ has joined #openstack-dev21:07
* Vek does an rm and sees what happens...21:07
Vekno, rm wasn't sufficient...21:08
*** anotherjesse has quit IRC21:09
*** anotherjesse_ is now known as anotherjesse21:09
*** lts has quit IRC21:10
kbringardupgrade to rm -rf21:11
kbringard:-p21:11
Vekkbringard: you first :P21:12
jaypipesVek: do a diff between the tests.functional.__init__.py file in master vs. topic branch...21:13
Vekjaypipes: I diff a full-up diff between the branch; I don't recall __init__.py being touched.21:13
Guest77784hi all, can i ask a quick question about networking in d3?21:14
VekI take that back, it was...21:14
jaypipesVek: yeah, just a little change: https://review.openstack.org/#patch,sidebyside,201,6,glance/tests/functional/__init__.py21:14
Vekbut I can't see how this change would cause problems.21:14
Vek+context_class = glance.registry.context.RequestContext21:14
jaypipesVek: me neither...21:14
jaypipesVek: still digging..21:15
VekI added some debugging prints to that test case, and there are several images already in the database at the point of failure, one in the pending_delete state.21:16
Vekbest guess is the db is not getting cleaned up properly21:17
*** chipc has quit IRC21:17
jaypipesVek: got it.21:17
jaypipesVek: line 88 of glance/store/scrubber.py21:17
jaypipesVek: passing in the wrong Context...21:17
jaypipesVek: needs to be the new RegistryContext I believe.21:18
*** letterj has left #openstack-dev21:18
Vekjaypipes: hmmm, could be...21:19
* Vek tries...21:19
jaypipesVek: the scrubber test failure messages are a bit confusing... they appear that way if something goes wrong with the scrubber daemon in any way. the error doesn't represent what is really wrong...21:19
Vekyay, that seemed to fix it.21:20
openstackgerritKevin L. Mitchell proposed a change to openstack/glance: Add support for shared images  https://review.openstack.org/20121:20
Veksubmitted...21:21
openstackgerritVerification of a change to openstack/glance failed: Add support for shared images  https://review.openstack.org/20121:33
jaypipesVek: hehe, yet another failure. different this time, though :) https://jenkins.openstack.org/job/glance/89185/console21:34
Vek*sigh* now what.21:34
Vekyeah, and it didn't show up when *I* ran the tests.21:34
* Vek restarts21:35
openstackgerritA change was merged to openstack/glance: Add support for shared images  https://review.openstack.org/20121:37
Vekok, that's slightly disturbing.  I run tests twice and no error; jenkins runs the tests and gets an obscure error the first time, then succeeds the second time...21:39
* Vek doesn't know what to make of that.21:39
*** markvoelker has quit IRC21:42
*** mfer has quit IRC21:43
*** kbringard has quit IRC21:55
openstackgerritYogeshwar Srikrishnan proposed a change to openstack/keystone: Additional changes to fix minor service support stuff and increase test coverage.  https://review.openstack.org/24222:07
*** cp16net has quit IRC22:07
*** anotherjesse has quit IRC22:10
*** anotherjesse has joined #openstack-dev22:23
jaypipesVek: was a cache problem on the jenkins server...22:24
jaypipesVek: w00t. \o/ merged finally :)22:29
openstackgerritYogeshwar Srikrishnan proposed a change to openstack/keystone: Additional changes to fix minor service support stuff and increase test coverage.  https://review.openstack.org/24222:30
Guest77784can someone support me for a minute?22:33
Guest77784i need help to setup network in d322:33
*** bsza has quit IRC22:34
Guest77784ttylinux test vm starts but doesn't recognise eth022:34
Guest77784nor meta-data server22:34
Guest77784i don't know where can i find the solution22:35
Guest77784i am blocked since this morning22:35
Guest77784the error is eth0 is not a recognized interface.22:38
*** yogirackspace has left #openstack-dev22:39
*** zorzar has quit IRC22:54
*** zorzar has joined #openstack-dev22:56
*** rnirmal has quit IRC22:58
openstackgerritA change was merged to openstack/openstack-ci-puppet: Fix crontab typos for gerrit jobs.  https://review.openstack.org/24022:58
openstackgerritA change was merged to openstack/openstack-ci-puppet: Move puppet cron job to global server config.  https://review.openstack.org/24122:59
*** anotherjesse has quit IRC23:11
*** anotherjesse has joined #openstack-dev23:11
*** dragondm has quit IRC23:28
*** bengrue has quit IRC23:35
*** amccabe has quit IRC23:40

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!