Thursday, 2012-03-08

*** reed_ has quit IRC00:01
heckjanotherjesse: https://review.openstack.org/#change,5054 <-- what's the background on this one?00:04
anotherjesseheckj: it wasn't removed from the header docs00:04
heckjah00:04
anotherjessegrep through the code00:04
anotherjesseno meantion of authorization00:04
anotherjesseheckj: we should get dolph to review as well00:04
heckjdolphm: ^^ (yeah)00:05
*** oneiroi has quit IRC00:05
*** oneiroi has joined #openstack-dev00:12
*** zykes- has quit IRC00:12
*** michaelchapman has quit IRC00:14
*** zykes- has joined #openstack-dev00:15
*** michaelchapman has joined #openstack-dev00:16
*** reed_ has joined #openstack-dev00:16
*** lloydde has joined #openstack-dev00:19
*** anotherjesse is now known as anotherjesse_zz00:20
*** lloydde has quit IRC00:22
*** flaviamissi has joined #openstack-dev00:24
*** lloydde has joined #openstack-dev00:24
*** dtroyer has quit IRC00:25
*** flaviamissi_ has joined #openstack-dev00:28
*** flaviamissi has quit IRC00:29
*** hub_cap has joined #openstack-dev00:29
*** flaviamissi_ is now known as flaviamissi00:32
*** flaviamissi has quit IRC00:34
*** flaviamissi has joined #openstack-dev00:34
*** lloydde has quit IRC00:37
*** lloydde has joined #openstack-dev00:45
*** littleidea has quit IRC00:50
*** littleidea has joined #openstack-dev00:57
*** yamahata__ has quit IRC00:58
*** yamahata__ has joined #openstack-dev00:59
*** sniperd has joined #openstack-dev01:00
hub_caphey if there are some keystone devs around, plz review. fixing as per the api spec. https://review.openstack.org/505501:00
*** littleidea has quit IRC01:01
mnewbyAny keystone devs here?01:02
*** sandywalsh has quit IRC01:02
*** littleidea has joined #openstack-dev01:03
mnewbyOr rather, anybody that understands the cfg module?01:03
*** littleidea has quit IRC01:05
hub_capmnewby: shoot, i might or might not be able to help… im usually not helpful ;)01:05
mnewbyI've found a bug in devstack related to a keystone config change, but am wondering if the fix needs to happen in devstack or keystone.01:05
mnewbyhttps://github.com/openstack/keystone/commit/d0429ea9b8849f99aa170cd09aef7776e2651dbf#etc/keystone.conf01:05
mnewbyThis change introduced a configurable bind_host.  Devstack's version of keystonel.conf doesn't include bind_host, so the stack run fails to start keystone.01:06
hub_capwell if the default keystone.conf has a bind_host id say its devstacks problem, right?01:07
hub_capby default keystone.conf i mean the one in keystones repo01:07
mnewbyI'm looking at keystone.config and it registers bind_host with a default, but in the keystone-all script the options don't reflect a value for bind_host unless it is explicitly defined.01:07
hub_capsry for the confusing wording :P01:07
mnewbyIs that by design?01:07
mnewbyI'm a bit confused as to why a default would be specified in keystone.config but that default would not be reflected in the loaded options.01:08
mnewbyDoes that question make sense?01:08
hub_capdef, give me a min to look about01:08
mnewbyok01:09
hub_capwell keystone_all loads the default config file in its repo, and then prints it all out. do u not see that bind_host printed when keystone starts?01:10
*** pixelbeat has quit IRC01:10
hub_caplet me reclone my devstack repo and see what happens01:10
mnewbyhub_cap: I see the output, and the output does include bind_host.01:11
mnewbyBut the value of the options variable does not reflect the defaults set in CONF01:11
mnewbyIt looks like the options are being loaded without regard to the default in CONF01:11
mnewbyI'm guessing that is a bug in keystone - otherwise, why would the logged option values not reflect the options that are to be used?01:12
hub_capso i do see the config.py in keystone is setting that and defaulting it01:12
hub_capregister_str('bind_host', default='0.0.0.0')01:12
mnewbyCheck the keystone-all sscript01:13
hub_capya it grabs config.CONF01:13
mnewbyOn line 61, the CONF values are being output.01:13
mnewbyBut on line 63, the options are being loaded directly from the file.01:13
hub_capya for sure thats why i asked u if it was printed :P01:13
hub_capk sec01:13
hub_capbut even so, it should be printing it on 61 right?01:13
mnewbySo options is not being updated with the CONF defaults.01:13
mnewbyYes, it is printing on 61.  But what is being printed differs from what is actually used.01:14
hub_capah ok so it _is_ printed01:14
hub_capthe config stuff that im doing w/ reddwarf is def different from this. my devstack install is _still_ rebooting ;)01:15
hub_caperr recloning01:15
hub_capid agree that it migth not be a devstack issue if keystone, w/o devstack, fails starting cuz of this01:15
mnewbyIt is an easy thing to repro - try to start keystone without a 'bind_host' entry in keystone.conf.01:16
*** sandywalsh has joined #openstack-dev01:16
mnewbyThe logged output will show the default value for bind_host, but the startup will fail with a KeyError for bind_host.01:16
hub_capexactly, ill do that w/o devstack once i get it all recloned01:16
hub_capnote line 68 in it, try printing out options['bind_host'] and see if its blank01:17
*** flaviamissi has quit IRC01:18
mnewbyIf bind_host is not in keystone.conf, the failure will be KeyError on line 6801:18
hub_capyup01:18
hub_capis that the case?01:18
mnewbyYes01:18
hub_capya seems like a keystone bug then for sure01:19
mnewbyOk01:19
hub_capyup failing for me too, w/ a fresh devstack01:19
mnewbyDoes any other openstack project use cfg to set defaults?01:19
mnewbyI'm wondering how the explicit config should get merged with the default config.01:20
hub_capoh wait up01:20
hub_capthis is _not_ a keystone issue01:20
mnewby?01:20
hub_capCONF.config_file[0]01:21
mnewbyThe devstack version of keystone.conf is missing bind_host01:21
hub_capright thats the issue like u stated earlier01:21
mnewbyBut keystone is still printing out options that don't reflect what's used.01:21
hub_capits really a dual issue i think01:21
hub_capright, it uses defaults, but then wipes them out, just like you said01:21
mnewbyIt doesn't wipe them, it just doesn't apply them to the loaded config.01:22
hub_capid say keystone is at fault, but devstack should also be notified of the issue to add it01:22
mnewbyIt only prints them out.01:22
mnewbyOk01:22
mnewbyI can add a change to devstack easily enough.01:22
mnewbyOr rather, submit a change.01:22
mnewbyThe keystone issue is a bit more problematic.01:22
*** jdg has quit IRC01:23
hub_capright01:23
*** dtroyer has joined #openstack-dev01:27
hub_capya looking at the pastedeploy src there is no easy way to munge them together01:29
hub_capthe new openstackcommon stuff simplifies this so they may need to move some of the wsgi paste stuff to use that01:29
mnewbyAh, hahah01:30
mnewbyheckj already committed a fix.01:30
heckjmnewby: and there's an outstanding bug to made the defaults work correctly, which I think will flow when Mark's openstack common config reviews get through and merged.01:31
mnewbyAh, ok.01:31
mnewbyGood to know it is being looked at then.01:32
hub_caphaha nice work heckj01:32
hub_capi can sees fix?01:32
*** tserong has quit IRC01:34
mnewbyarg01:34
mnewbymy dev box was using the cloudbuilder's devstack01:34
*** lloydde has quit IRC01:34
*** jaypipes has joined #openstack-dev01:35
hub_capoh fix in devstack01:35
hub_capi was hoping to see a keystone fix01:35
mnewbyheckj: When did devstack switch from cloudbuilders to openstack-dev?01:35
*** tserong has joined #openstack-dev01:35
heckjmnewby: some time back, actually. When we started gating commits to projects on it's basic integration testing01:36
mnewbyheckj: Ah, ok.  I'd just been blithely git pulling from cloudbuilders for the past couple of weeks.  It's a wonder more didn't break!01:36
*** Kiall has quit IRC01:37
heckjthey keep it sync'd pretty close.01:37
mnewbyThat explains it.01:37
*** tserong has quit IRC01:39
*** Kiall has joined #openstack-dev01:40
*** tserong has joined #openstack-dev01:40
*** cp16net has joined #openstack-dev01:40
*** tserong has quit IRC01:41
*** tserong has joined #openstack-dev01:41
mnewbyheckj: While I'm in the business of distracting you, could I ask a question about auth_token and swift_auth?01:42
heckjmnewby: I'll do my best to answer01:42
heckj(swift_auth is not my strong point)01:42
mnewbyI used them as the basis for some swift auth stuff I did here at Internap, and have written some tests for swift_auth.  If i wanted to submit them, would I need a launchpad bug?01:43
mnewbyAlso, I created a simple Identity class that would serialize to and from headers to simplify the code in both auth_token and swift_auth.  Does this sound like something worth contributing?01:44
heckjIt's generally best to have either a bug or a blueprint for code that you're submitting. I'm still getting our blueprints (which typically represent new features or functionality) reset to lead into the folsom design summit, so right now there's a pile of bugs that should really be blueprints (for Keystone)01:44
mnewbyOk, good to know.01:45
mnewbySo a change that adds tests could target a bug complaining of missing tests?01:46
heckjmnewby: more tests is ALWAYS good :-)01:47
mnewbyok :)01:47
heckjmnewby: the class sounds useful, but I'd want to generally review it with the other core devs01:48
hub_captests ftw!01:48
mnewbySo a blueprint for the class addition.01:49
notmynamemnewby: can you add some simple tox docs to the swift docs? how to run, etc. I think that's the only outstanding issue. something like "to test with tox, install like this and run like this". I think adding it to the http://swift.openstack.org/development_guidelines.html page would be good01:49
mnewbynotmyname: can do01:50
notmynamemnewby: thanks :-)01:50
*** littleidea has joined #openstack-dev01:51
*** heckj has quit IRC01:57
*** gyee has quit IRC02:09
*** anotherjesse_zz is now known as anotherjesse02:10
*** anotherjesse is now known as anotherjesse_zz02:12
*** anotherjesse_zz is now known as anotherjesse02:16
*** reed_ has quit IRC02:16
*** anotherjesse is now known as anotherjesse_zz02:18
*** mszilagyi has quit IRC02:18
*** johnpostlethwait has joined #openstack-dev02:18
*** johnpostlethwait has left #openstack-dev02:19
*** johnpostlethwait has joined #openstack-dev02:19
*** anotherjesse_zz is now known as anotherjesse02:19
*** johnpostlethwait has quit IRC02:20
*** anotherjesse is now known as anotherjesse_zz02:20
*** sniperd has quit IRC02:24
*** vincentricci has quit IRC02:28
*** adjohn has quit IRC02:28
*** dalang has quit IRC02:30
*** hugokuo has joined #openstack-dev02:35
rmkSo, when I try a connection to the wsproxy using Diablo, I initially get an invalid token response before it succeeds02:37
rmkAs in, I need to try again02:37
*** danwent has quit IRC02:43
*** vizsla has joined #openstack-dev02:51
*** Ryan_Lane has quit IRC02:51
*** rkukura has joined #openstack-dev02:56
*** maplebed_ has joined #openstack-dev02:59
*** maplebed_ is now known as Guest3235302:59
*** maplebed has quit IRC03:01
*** novas0x2a|laptop has quit IRC03:01
*** Guest32353 is now known as maplebed03:04
*** maplebed has joined #openstack-dev03:04
*** ayoung has quit IRC03:07
*** spiffxp has quit IRC03:09
*** madhav has joined #openstack-dev03:09
*** madhav has left #openstack-dev03:10
*** rkukura has quit IRC03:13
*** mszilagyi has joined #openstack-dev03:14
*** rkukura has joined #openstack-dev03:17
*** martine has joined #openstack-dev03:21
*** sniperd has joined #openstack-dev03:39
rmkConnection to vnc works every other time.03:42
*** anotherjesse_zz is now known as anotherjesse03:47
*** rkukura has quit IRC03:55
*** jdurgin has quit IRC04:01
*** maplebed has quit IRC04:09
andrewbogottAre any nova developers still up?04:09
anotherjessemnewby: we have a script that keeps cloudbuilder's repo up-to-date & doc'd - but the github ssh issue caused our jenkins job to break04:10
anotherjessefixed and updated04:10
mnewbyanotherjesse: ah, makes sense04:11
*** vincentricci has joined #openstack-dev04:11
andrewbogottI'm confused because in Horizon I see that I have four projects; but in my code I'm calling project_get_all and getting an empty list.  Why would they disagree?04:12
*** vincentricci has left #openstack-dev04:15
anotherjesseandrewbogott: diablo or essex?04:15
andrewbogottessex.04:16
anotherjessekeystone or deprecated auth?04:16
andrewbogottI've rebased in the last couple of days.04:16
andrewbogottWhatever devstack does... keystone, I think.04:16
anotherjesseandrewbogott: the project_get_all code is nova code that goes against deprecated auth04:16
andrewbogottOh... does that mean that the whole db api is deprecated?04:17
anotherjesseyeah - all users exist in keystone04:17
anotherjesseandrewbogott: to get your list of projects you can use keystone's get_tenants_for_user04:17
anotherjessewith a token you can call /v2.0/tenants (which is what the dash is doing)04:17
andrewbogottOk... this almost makes sense.04:18
andrewbogottIs 'tenant' a synonym for project?  I thought a tenant was... something else.04:18
anotherjesseswift's accounts / nova's project = keystone's tenants04:19
anotherjessealthough the horizon folks don't like the word tenant so they show project in the dropdown04:19
andrewbogottiirc horizon uses both words in different contexts.04:20
anotherjesseyeah, the switch to project was recent … and didn't ripple through04:20
andrewbogottSo, users and projects (aka tenants) are managed by keystone now...04:21
andrewbogottSo, to manage the permissions of an instance, the nova db holds keys into a keystone db?04:21
andrewbogottOr do keystone tenants hold a list of instances?04:22
andrewbogott(does this question make sense, even?)04:22
*** thingee has joined #openstack-dev04:23
anotherjesseandrewbogott: resources are owned by their service - nova knows about servers, volumes, ips, ...04:24
anotherjessekeystone knows about uesrs/tenants/...04:24
anotherjessewhen you authenticate against nova, nova asks keystone to validate the token and provide the user/tenant/roles04:24
anotherjessethis happens when it hits this in the middleware: https://github.com/openstack/keystone/blob/master/keystone/middleware/auth_token.py04:25
anotherjesseresources in swift/nova/... are marked with the user_id / tenant_id (in the db it is still called project_id)04:25
anotherjessebut there is no active user/project table (those are there for deprecated auth which we hope to remove in essex)04:26
andrewbogottSo in nova, the instance table has a fields for tenant and user, but those fields relate to keystone's data -- correct?04:27
anotherjesseandrewbogott: correct04:27
andrewbogottAnd keystone is mandatory for essex and later, right?  So I can just presume that any nova install has an associated keystone?04:28
anotherjessethe only change DATABASE wise - is that all nova knows now is the "foreign keys" (the user/tenant id's provided by auth_token middleware)04:28
*** rkukura has joined #openstack-dev04:28
anotherjesseand the user/project table are in keystone04:28
anotherjessenova *could* keep a local cache of names/emails/... but the idea is that you probably want to backend keystone with your existing LDAP/AD system04:29
* andrewbogott nods04:29
anotherjesseso nova would always have an old cache04:29
med_I'm thinking the last 20 minutes of scrollback would make a great presentation... paper... etc.04:29
andrewbogottShould the nova db api have a bunch of 'warning: deprecated' log messages in all those function calls?04:29
andrewbogott(not that I'm volunteering...)04:29
anotherjesseandrewbogott: ++ let's fall04:29
anotherjesseerr04:29
*** zaitcev has quit IRC04:30
anotherjessecan you file a bug ?  I'll get it fixed ;)04:30
andrewbogottsure.04:30
anotherjesseI have to run - be back in ~15 minutes to answer more keystone/nova user questions04:31
andrewbogottIt's nearly bedtime for me anyway, so I probably have enough info for now.  Thanks for your explanation.04:31
anotherjessenp04:32
*** yamahata has quit IRC04:33
*** yamahata__ has quit IRC04:33
anotherjessemed_: what would be most effective for you - presentation, video overview, we have docs like http://docs.openstack.org/trunk/openstack-identity/admin/content/what-is.html04:33
anotherjesse(in process of being updated from diablo to essex)04:33
med_that link is good. thanks.04:34
andrewbogottanotherjesse:  bug 94965204:39
uvirtbotLaunchpad bug 949652 in nova "Mark deprecated db calls as 'deprecated'" [Undecided,New] https://launchpad.net/bugs/94965204:39
andrewbogottheh04:39
*** sniperd has quit IRC04:40
*** sniperd has joined #openstack-dev04:45
*** x86brandon has quit IRC04:56
rmkTraced the wsproxy problem I was having -- turned out to be an issue with setting queues durable.04:58
rmkAlso wsproxy wasn't logging a failure to connect to the queue04:59
rmkMaybe current versions do04:59
*** gkotton has joined #openstack-dev05:07
*** mszilagyi has quit IRC05:07
*** andrewsmedina has quit IRC05:07
*** adjohn has joined #openstack-dev05:09
*** sniperd has quit IRC05:09
*** sniperd has joined #openstack-dev05:17
notmynamemnewby: thanks for the docs05:18
mnewbynotmyname: np.  Does that work, or should the saio be updated too?05:19
mnewbynotmyname: And what would you like to see the default tox builds be?05:19
notmynameI think it works. we'll see how pickly gholt is :-)05:19
mnewbyok. sounds good :)05:19
notmynamemnewby: we target latest LTS (which is py26) and don't want to gate on pep805:20
notmynameI'm guessing that precise (next LTS) will have py27, but we don't/havent' targeted it yet05:21
mnewbynotmyname: I understand.  When I say 'default tox builds' I mean what developers will get when the execute 'tox' without arguments.05:21
mnewbythe => they05:21
notmynameI'd say py26 and pep805:21
mnewbyOk, I'll post an updated change.05:21
notmynamesince that's pretty similar to what ./.unitests does05:21
mnewbyOh, wait.  That's already the default.  Nevermind.05:21
mnewbyyup05:22
mnewbyOk, so provided gholt is happy with the docs the change is good.05:22
notmynameI don't think the pep8 ignore line is the best though05:22
notmynameya, I think so05:22
mnewbyThe ignore was taken from nova.  What would you prefer?05:23
notmynamebecause of a bug in the pep8 tool, we don't actually pass pep8 unless you suppress that warning. but it's a valid warning in other cases05:23
notmynameideally, I'd want it with no ignored warnings05:24
notmynamebut that's a very minor thing to me05:24
mnewbySo long as tox.ini is consistent across all projects, once the pep8 bug is fixed all projects can be updated at once.05:24
mnewbyIs pep8 not under active development?  That would seem a pretty trivial thing to fix.05:25
notmynameI'm fine with keeping it consistent. we'll probably still run it by hand to check submitted patches. I don't think I've ever seen anyone submit a patch that would give a false positive with the ignore yet05:26
mnewbyIt seems like a pretty rare case.  I'd be hard-pressed not to spot that in a change with just my eyeballs.05:27
notmynameIOW, I think the patch is good for now. :-005:27
notmyname*:-)05:27
mnewbyheh05:27
*** relateable has joined #openstack-dev05:28
*** yamahata__ has joined #openstack-dev05:30
*** yamahata_ has joined #openstack-dev05:30
*** yamahata_ has left #openstack-dev05:32
*** hub_cap has quit IRC05:36
*** yamahata__ has quit IRC05:42
*** yamahata has joined #openstack-dev05:42
*** vizsla has quit IRC05:43
*** Asim has joined #openstack-dev05:45
cloudflyanyone have any example code of an authentication query against keystone somewhere?05:46
mnewbyDoes anybody want to talk to me about DeprecationWarning?05:46
*** dayou has joined #openstack-dev05:47
cloudflyah found it05:48
cloudflydanke anotherjesse05:48
*** lloydde has joined #openstack-dev05:51
*** sniperd has quit IRC05:54
*** relateable_ has joined #openstack-dev05:58
*** mszilagyi has joined #openstack-dev05:59
*** danwent has joined #openstack-dev06:00
*** martine has quit IRC06:02
*** cp16net has quit IRC06:03
*** markmc has joined #openstack-dev06:13
*** sniperd has joined #openstack-dev06:18
*** zigo has joined #openstack-dev06:23
*** hattwick has quit IRC06:31
*** bepernoot has joined #openstack-dev06:35
*** bencherian has joined #openstack-dev06:38
*** relateable_ has quit IRC06:38
*** gkotton has quit IRC06:41
*** Asim has quit IRC06:48
*** lloydde has quit IRC06:48
*** littleidea has quit IRC06:53
*** mnewby has quit IRC06:54
*** sniperd has quit IRC06:54
*** sniperd has joined #openstack-dev06:55
*** zigo has quit IRC06:56
*** Mkenneth has joined #openstack-dev06:57
*** deshantm has joined #openstack-dev07:01
*** bepernoot has quit IRC07:02
*** Mkenneth1 has joined #openstack-dev07:04
*** Mkenneth has quit IRC07:06
*** dtroyer has quit IRC07:07
*** thingee has quit IRC07:10
*** zykes- has quit IRC07:19
*** zykes- has joined #openstack-dev07:21
*** deshantm has quit IRC07:26
*** zigo has joined #openstack-dev07:40
*** danwent has quit IRC07:41
*** mszilagyi has quit IRC08:02
*** bepernoot has joined #openstack-dev08:03
*** dneary has joined #openstack-dev08:09
*** dneary has quit IRC08:09
*** dneary has joined #openstack-dev08:09
*** Mkenneth1 has quit IRC08:10
*** mnewby has joined #openstack-dev08:10
*** pixelbeat has joined #openstack-dev08:11
*** reidrac has joined #openstack-dev08:20
*** Mkenneth has joined #openstack-dev08:22
*** sandywalsh has quit IRC08:24
*** bencherian has quit IRC08:26
*** gkotton has joined #openstack-dev08:37
LarsErikPhi. Is there any document with upcoming features in Essex dashboard?08:37
*** shevek_ has joined #openstack-dev08:37
*** Ryan_Lane has joined #openstack-dev08:38
*** sandywalsh has joined #openstack-dev08:39
*** Remco_ has joined #openstack-dev08:53
*** hattwick has joined #openstack-dev09:00
*** derekh has joined #openstack-dev09:01
*** mszilagyi has joined #openstack-dev09:03
*** hashar has joined #openstack-dev09:05
*** mnewby has quit IRC09:06
*** pixelbeat has quit IRC09:08
*** zigo has quit IRC09:10
*** pixelbeat has joined #openstack-dev09:24
*** oneiroi has joined #openstack-dev09:27
*** Ryan_Lane has quit IRC09:29
*** dayou has quit IRC09:35
*** dayou has joined #openstack-dev09:47
*** GheRivero has quit IRC09:56
*** hashar has left #openstack-dev10:00
*** adjohn has quit IRC10:00
*** darraghb has joined #openstack-dev10:01
*** maploin has joined #openstack-dev10:08
*** maploin has quit IRC10:09
*** maploin has joined #openstack-dev10:09
*** dayou has quit IRC10:13
*** gkotton has quit IRC10:34
*** gkotton has joined #openstack-dev10:34
*** gkotton has quit IRC10:37
*** gkotton has joined #openstack-dev10:41
*** apevec has joined #openstack-dev11:03
*** lts has joined #openstack-dev11:11
*** Remco_ has quit IRC11:14
*** Remco_ has joined #openstack-dev11:15
*** Remco__ has joined #openstack-dev11:17
*** Remco_ has quit IRC11:19
*** sandywalsh has quit IRC11:28
*** sandywalsh has joined #openstack-dev11:40
*** kbringard has joined #openstack-dev11:41
*** oneiroi has quit IRC11:43
*** fesnel has quit IRC12:07
*** cdub has quit IRC12:08
*** dneary has quit IRC12:08
*** cdub has joined #openstack-dev12:08
*** fesnel has joined #openstack-dev12:09
*** bsza has joined #openstack-dev12:09
*** armaan has joined #openstack-dev12:12
*** zykes- has quit IRC12:13
*** zykes- has joined #openstack-dev12:15
*** dneary has joined #openstack-dev12:18
*** dneary has quit IRC12:18
*** dneary has joined #openstack-dev12:18
*** zykes- has quit IRC12:25
*** zykes- has joined #openstack-dev12:27
*** vincentricci has joined #openstack-dev12:37
*** vizsla has joined #openstack-dev12:39
*** ncode has joined #openstack-dev12:42
*** ncode has joined #openstack-dev12:42
*** ncode has quit IRC12:49
*** markvoelker has joined #openstack-dev12:53
*** armaan has left #openstack-dev12:57
*** vizsla has quit IRC13:12
*** mdomsch has quit IRC13:20
*** dprince has joined #openstack-dev13:21
*** hashar has joined #openstack-dev13:22
*** Mkenneth has quit IRC13:23
*** sniperd has quit IRC13:24
*** andrewsmedina has joined #openstack-dev13:26
*** vincentricci has joined #openstack-dev13:33
*** vincentricci has left #openstack-dev13:33
*** dprince has quit IRC13:40
*** dprince has joined #openstack-dev13:40
*** andrewsmedina has quit IRC13:41
*** andrewsmedina has joined #openstack-dev13:41
*** PotHix has joined #openstack-dev13:50
*** CatKiller has quit IRC13:53
*** martine has joined #openstack-dev13:57
*** lts has quit IRC14:04
*** CatKiller has joined #openstack-dev14:08
*** littleidea has joined #openstack-dev14:14
*** sniperd has joined #openstack-dev14:19
*** rnirmal has joined #openstack-dev14:22
*** Remco__ has quit IRC14:22
*** dneary has quit IRC14:23
*** Remco_ has joined #openstack-dev14:23
*** Glacee has joined #openstack-dev14:25
*** dtroyer has joined #openstack-dev14:26
*** maploin has quit IRC14:26
*** maploin has joined #openstack-dev14:27
*** maploin has quit IRC14:27
*** maploin has joined #openstack-dev14:27
*** Remco_ has quit IRC14:28
*** Mandell_ has quit IRC14:35
*** aweiss1 has joined #openstack-dev14:35
*** aweiss1 has quit IRC14:39
*** aweiss has joined #openstack-dev14:40
*** ccorrigan has joined #openstack-dev14:40
*** eglynn_ has quit IRC14:42
*** davlap has joined #openstack-dev14:43
*** ncode has joined #openstack-dev14:45
*** ncode has joined #openstack-dev14:45
*** eglynn has joined #openstack-dev14:50
*** Mandell has joined #openstack-dev14:55
*** deshantm has joined #openstack-dev14:57
*** jdg has joined #openstack-dev15:02
*** zaitcev has joined #openstack-dev15:07
*** lloydde has joined #openstack-dev15:08
*** lloydde has quit IRC15:08
*** rods has joined #openstack-dev15:09
*** ayoung has joined #openstack-dev15:10
*** aweiss has quit IRC15:13
*** AlanClark has joined #openstack-dev15:20
*** dneary has joined #openstack-dev15:22
*** dneary has quit IRC15:22
*** dneary has joined #openstack-dev15:22
*** ywu-os has joined #openstack-dev15:23
*** lloydde has joined #openstack-dev15:23
*** bsza has quit IRC15:28
*** jakedahn has quit IRC15:29
*** jakedahn_zz is now known as jakedahn15:29
*** mancdaz has quit IRC15:29
*** ayoung has quit IRC15:39
*** deshantm has quit IRC15:39
*** glenc has joined #openstack-dev15:41
*** eglynn has quit IRC15:41
*** GheRivero_ has joined #openstack-dev15:42
*** glenc_ has quit IRC15:42
*** bsza has joined #openstack-dev15:43
*** mancdaz has joined #openstack-dev15:45
*** jdg has quit IRC15:46
*** ayoung has joined #openstack-dev15:50
*** lloydde has quit IRC15:50
*** dolphm has joined #openstack-dev15:53
*** eglynn has joined #openstack-dev15:54
*** mattray has joined #openstack-dev15:58
*** aweiss has joined #openstack-dev15:58
*** zzed has joined #openstack-dev15:59
*** dtroyer has quit IRC16:05
*** reidrac has quit IRC16:06
*** heckj has joined #openstack-dev16:07
*** bencherian has joined #openstack-dev16:08
*** anotherjesse is now known as anotherjesse_zz16:12
*** hhoover has joined #openstack-dev16:14
*** danwent has joined #openstack-dev16:15
*** hub_cap has joined #openstack-dev16:19
*** dtroyer has joined #openstack-dev16:19
*** dwalleck has joined #openstack-dev16:20
*** dtroyer has quit IRC16:25
*** dtroyer has joined #openstack-dev16:25
*** sniperd has quit IRC16:28
*** bepernoot has quit IRC16:30
*** JStoker_ has quit IRC16:30
*** maplebed has joined #openstack-dev16:33
*** maplebed has quit IRC16:33
*** maplebed has joined #openstack-dev16:33
*** bencherian has quit IRC16:37
*** JStoker_ has joined #openstack-dev16:41
*** jaypipes has quit IRC16:44
*** dwalleck_ has joined #openstack-dev16:45
*** danwent has quit IRC16:46
*** dwalleck has quit IRC16:49
*** danwent has joined #openstack-dev16:53
*** dwalleck_ has quit IRC16:53
*** anotherjesse_zz is now known as anotherjesse16:54
*** sniperd has joined #openstack-dev16:56
*** lloydde has joined #openstack-dev17:00
*** rnirmal has quit IRC17:00
*** rnirmal has joined #openstack-dev17:00
*** dwalleck has joined #openstack-dev17:02
*** roge has joined #openstack-dev17:02
*** mdomsch has joined #openstack-dev17:03
*** dwalleck has quit IRC17:05
*** infernix has joined #openstack-dev17:05
*** cp16net has joined #openstack-dev17:06
anotherjessecomstud: around? got opinions on if/where I should move fake memcache - https://review.openstack.org/#change,5042 makes use of it not just for testing17:06
*** mattray has quit IRC17:07
*** mattray has joined #openstack-dev17:07
*** mattray has quit IRC17:07
*** mattray has joined #openstack-dev17:07
*** sniperd has quit IRC17:07
*** dolphm has quit IRC17:09
*** sniperd has joined #openstack-dev17:16
annegentleanotherjesse: did anything in the index.html change surrounding the Google search? See this bug:17:18
annegentlehttps://bugs.launchpad.net/openstack-manuals/+bug/95009217:18
uvirtbotLaunchpad bug 950092 in openstack-manuals "Search results on docs.openstack.org now display Google Ads and shouldn't" [High,Confirmed]17:18
annegentleanotherjesse: if anyone can take a look, I'd appreciate it!17:18
*** dwalleck has joined #openstack-dev17:19
anotherjesseannegentle: looking - sending a private message17:19
comstudanotherjesse: i am around.. looking17:20
anotherjessecomstud: vishy is around too - we can yell at him for thoughts on it17:21
comstudah yes, this one17:21
anotherjesseannegentle: if you could answer private message about details17:21
*** dolphm has joined #openstack-dev17:24
*** spiffxp has joined #openstack-dev17:25
anotherjesseannegentle: updated bug with details - don't think it is something that is controlled from code - but from google17:28
comstudanotherjesse: left a comment17:31
*** troytoman-away is now known as troytoman17:32
*** jdurgin has joined #openstack-dev17:33
*** dolphm has quit IRC17:35
anotherjessevishy: http://evan.prodromou.name/Software/Python/LRUCache17:37
anotherjessefor later17:37
*** gkotton has quit IRC17:37
comstudi have a bone to pick with vishy, also.  one of his commits made me waste a lot of time last night :)17:40
anotherjessejust one?17:41
comstudhaha17:41
comstudjust one last night17:41
comstudhe caused a messaging change by changing RequestContext17:41
anotherjesseah, hence the kwargs patch17:42
comstudyep17:42
comstudit wasn't his fault it was so difficult to track down17:42
anotherjessesure it is17:43
comstudok17:43
comstudyes it is17:43
comstudor waldon.17:43
*** maploin has quit IRC17:43
comstudit's waldon's fault.17:43
*** anotherjesse is now known as anotherjesse_zz17:45
*** dneary has quit IRC17:48
*** aweiss has quit IRC17:48
*** vincentricci has joined #openstack-dev17:54
*** davlap has quit IRC17:56
*** bepernoot has joined #openstack-dev17:57
*** dtroyer_ has joined #openstack-dev17:57
*** gyee has joined #openstack-dev17:58
*** bepernoot has quit IRC17:59
*** mdomsch has quit IRC17:59
*** johnpostlethwait has joined #openstack-dev18:00
*** johnpostlethwait has quit IRC18:00
*** johnpostlethwait has joined #openstack-dev18:01
*** dtroyer has quit IRC18:01
*** dtroyer_ is now known as dtroyer18:01
*** pixelbeat has quit IRC18:04
*** dwalleck has quit IRC18:07
vishycomstud: uh oh18:07
vishycomstud: which one?18:07
*** gkotton has joined #openstack-dev18:09
comstudthe context change18:09
comstudswitching the determination of auth strategy18:09
comstudyou removed 'strategy' from RequestContext18:09
comstudsince it disappeared as a keyword arg in __init__()18:09
*** dalang has joined #openstack-dev18:10
comstudrpc code calling to_dict() barfed on an old message that still had 'strategy' in it18:10
comstudvishy: ^18:10
comstudunfortunately, no exception was logged18:10
comstudand rpc code stopped consuming messages18:11
comstudso it'd pull a message off the queue and just silently halt.18:11
vishyouch18:11
comstudi submitted a 2nd fix for that18:11
vishythere was an old message?18:11
comstudyep18:12
comstudin our queue18:12
vishycomstud: note to self: don't mess with req.context18:12
comstudi guess we restarted as just the right time18:12
comstudas/at18:12
comstudvishy:https://review.openstack.org/#change,507218:12
comstudthat should address it18:12
comstudat least.. this specific case :)18:12
comstudthat's what I monkey patched in to get things flowing again18:13
*** sniperd has quit IRC18:15
*** thingee has joined #openstack-dev18:15
*** jakedahn is now known as jakedahn_zz18:16
*** sdake has quit IRC18:16
*** sdake has joined #openstack-dev18:16
*** johnpostlethwait has quit IRC18:18
*** dwalleck has joined #openstack-dev18:19
*** johnpostlethwait has joined #openstack-dev18:19
*** dwalleck has quit IRC18:19
*** bencherian has joined #openstack-dev18:20
*** Ryan_Lane has joined #openstack-dev18:21
*** shevek_ has quit IRC18:22
*** mdomsch has joined #openstack-dev18:23
*** johnpostlethwait has quit IRC18:26
*** johnpostlethwait has joined #openstack-dev18:27
*** johnpostlethwait has quit IRC18:29
*** johnpostlethwait has joined #openstack-dev18:29
*** rnirmal has quit IRC18:33
*** johnpostlethwait has quit IRC18:34
*** johnpostlethwait has joined #openstack-dev18:35
*** johnpostlethwait has quit IRC18:37
*** johnpostlethwait has joined #openstack-dev18:38
*** novas0x2a|laptop has joined #openstack-dev18:39
*** lloydde has quit IRC18:40
*** rnirmal has joined #openstack-dev18:47
*** rnirmal has quit IRC18:48
sleepsonzzzheckj - what is the recommended way for configuring a service catalog right now?  is default_catalog.templates no longer required?18:48
*** mattstep has quit IRC18:53
*** mattstep has joined #openstack-dev18:53
sleepsonzzzheckl:  should we change the way devstack is configuring the endpoints?18:55
*** mattray has quit IRC19:02
*** dwalleck has joined #openstack-dev19:03
*** sandywalsh has quit IRC19:03
*** dwalleck has quit IRC19:04
*** dwalleck has joined #openstack-dev19:04
*** dwalleck has quit IRC19:06
*** vizsla has joined #openstack-dev19:08
*** darraghb has quit IRC19:12
*** vizsla has quit IRC19:13
*** mattray has joined #openstack-dev19:19
*** mnewby has joined #openstack-dev19:23
*** griff has joined #openstack-dev19:25
*** hub_cap has quit IRC19:25
*** hub_cap has joined #openstack-dev19:26
heckjsleepsonzzz: still using service catalog right now - we just slipped the SQL backend in for catalog prior to E4, but there's some larger "what are we actually modeling?" issues around the existing API.19:30
tr3buchetvishy: i see19:30
vishytr3buchet: so the deal is that release actually forces a dhcp release which adds the ip back into the pool19:30
tr3buchetvishy: whereas update just stops dnsmasq from responding?19:31
vishyif we are tearing down a network, we don't want to give the ip back19:31
vishytr3buchet: update just updates the list of ips that dnsmasq is responding to19:31
*** mnewby has quit IRC19:31
tr3buchetok, makes sense19:31
*** mnewby has joined #openstack-dev19:31
tr3buchetthat function is nasty though...19:31
vishytr3buchet: yeah :(19:32
sleepsonzzzheckj ah ok.  was looking at https://bugs.launchpad.net/bugs/938243 - so for now, deployers will still need to use keystone service-create as well as the default_catalog.templates?19:32
uvirtbotLaunchpad bug 938243 in keystone "keystone service-create seems redundant with default_catalog.templates" [Medium,Invalid]19:32
tr3buchetscaling at 2n is bad19:32
vishytr3buchet: I will be happy when melange takes that over19:32
tr3buchetvishy: me too19:32
vishytr3buchet: that said, it is pretty rare for a vm to have more than one ip on the same network19:32
vishytr3buchet: so it will almost never get called twice19:32
tr3buchetvishy: it's more the size of the network that bothers me19:33
tr3buchetcalling it once when there are 250 IPs in th enetwork results in 501 db calls19:33
mnewbymtaylor: Can you help with landing the tox patch for swift?19:34
*** sandywalsh has joined #openstack-dev19:34
vishytr3buchet: ah actually there is an error19:36
vishytr3buchet: I'm just noticing that deallocate_fixed_ip is using teardown19:36
heckjsleepsonzzz: for now, expecting deployers to use templates, but we need to have some clarity in a (currently missing) catalog.core.Driver class as to what it needs to do and how it's allowed to responsd (internal to keystone python API). i.e. specifically returning NotImplemented or NotAllowedToDoThatWithThisBackend errors.19:36
tr3buchetvishy: that's how it was before19:36
vishytr3buchet: but i clobberred the dhcp release functionality19:37
tr3buchetvishy: ah i see19:37
vishytr3buchet: so deallocate_fixed_ip, should it be tearing down network every time?19:39
tr3buchetwell19:39
vishytr3buchet: seems like it should only happen if it is the last fixed ip in the network?19:39
tr3buchetthe way it was written, i separated out setup and teardown from allocate and deallocate ip19:39
tr3buchetso i took was deallocate was doing and put it into teardown19:40
tr3buchetsome of what it was doing19:40
tr3buchetso that it could be called by setup_networks19:40
vishytr3buchet: so the issue is, update_dhcp doesn't need to be called there19:41
vishybecause it is called by release ip19:41
vishytr3buchet: so i actually think that it should be called in release_ip instead if it is necessary to call it19:41
sleepsonzzzheckj - ok, makes sense, though that bug should probably remain active until such a time that users can actually have a usable non-redundant configuration method.  Unless I'm mis-understanding, and using the template backend now obviates the need to use keystone service-create.19:42
tr3buchethmmm19:43
tr3buchetvishy: do you know what deallocate fixed ip was called dhcp release?19:43
tr3buchets/what/why/19:43
vishytr3buchet: it didn't19:43
vishyit calls it if force_dhcp_release is enabled19:44
tr3buchetright19:44
tr3buchetit still does exactly that19:44
vishywell it does before my change19:44
tr3bucheton now "that" is called _teardown_network_on_host19:44
vishybut the deal is teardown needs to update_dhcp19:44
vishynot force_release19:44
tr3buchetit seems like to me we can revert deallocate to call dhcp release as it did before19:45
*** dolphm has joined #openstack-dev19:45
heckjsleepsonzzz: the template backend for services does mean that the service commands aren't needed - which is why I marked it invalid. The commands are still needed for the SQL backend, but the equiv of "service create" for the SQL backend is just adding lines into the template config file.19:45
*** reed_ has joined #openstack-dev19:46
tr3buchetvishy: and then setup_networks_on_host doesn't have to loop through all of the IPs19:47
tr3buchetvishy: make sense?19:47
sleepsonzzzheckj - ok sweet, so we should remove service-create calls from devstack?19:47
vishytr3buchet: hold on about to put up a patch19:47
heckjsleepsonzzz: yeah - or make them variable on having the SQL backend for the catalog19:48
*** hub_cap has quit IRC19:50
*** hub_cap has joined #openstack-dev19:50
sleepsonzzzheckj - cool, I'll take a look - thanks for the help19:51
adam_gheckj: so the default template config needs lines added for the services that are created in keystone_data.sh? IIRC, service-create is needed to define the services, but they are lost on keystone restart when using kvs backend. can those also come the template backend?19:54
*** jakedahn_zz is now known as jakedahn19:54
heckjadam_g: I'd need to re-read the code to verify, but I thought that with the catalog back end, there wasn't any KVS store for the services themselves - they were simply rendered directly from the template and that was that.19:55
vishytr3buchet: I'm starting to feel like passing vif and address into teardown_network is superfluous19:56
adam_gheckj: ya, i'd have to confirm but i *think* the services is non-persitent. in any case, i think the backend should at least be configurable  in devstack to document the different flavors20:02
tr3bucheti agree20:02
tr3buchetvishy: ^20:02
vishytr3buchet: ok one thing I don't understand, why is flat manager calling super for allocate and deallocate?20:02
*** jakedahn is now known as jakedahn_zz20:02
vishytr3buchet: ah so that force release thing needs to be moved20:02
tr3buchetvishy: you got it?20:03
vishytr3buchet: almost20:03
vishytr3buchet: so the force dhcp release thing being in the superclass is kind of nasty20:03
vishybut i won't move it right now20:03
vishytr3buchet: the problem is flat should call teardown in deallocate20:04
vishywhereas the dhcp managers should call it in release20:04
vishytr3buchet: i guess flatdhcp could call it in both places, but that seems a litle nasty20:05
tr3buchetvishy: yeah20:06
tr3buchetvishy: it's kindof hard to grow things when there are 320:06
tr3buchetwell 4 places20:07
tr3buchetthat the code can go20:07
tr3buchetpeople kept updating stuff in one and not the others20:07
tr3buchetso i put as much stuff in the superclass as possible20:07
tr3buchetthe flag ensures that bit wasn't called in flat20:07
vishytr3buchet: so I'm trying to think if calling it in deallocate will cause problems one sec20:10
tr3buchetkk20:10
*** zzed has quit IRC20:13
*** adjohn has joined #openstack-dev20:13
cloudflyhrmm so i am trying to build a pam auth module to auth against keystone..  the question is... is that really the right mechanism?  Can keystone be made to do gssapi or some other automated token passing?  for seamless authentication using the API token?  is that even a good idea?20:15
vishytr3buchet: ok i think i have a solution20:16
*** pixelbeat has joined #openstack-dev20:17
tr3buchetyay20:17
vishytr3buchet: which is to only allow allocated fixed_ips in dnsmasq20:17
vishytr3buchet: so it will stop putting them in the conf file immediately, but it won't disassociate them in the db, then I don't have to call teardown_network in release20:18
*** bencherian has quit IRC20:18
*** aweiss has joined #openstack-dev20:19
adam_gvishy: --auth_strategy is now required to be defined on both nova-api and nova-compute nodes, correct?20:20
tr3buchetvishy: wouldn't it be weird for them to be associated but not in the conf file?20:20
*** adjohn has quit IRC20:20
vishyadam_g: i would define it everywhere, yes20:20
vishytr3buchet: well if it is no longer allocated it means it just hasn't been marked released yet by dnsmasq20:21
vishytr3buchet: so I think it is fine for it to not be in conf anymore. It shouldn't be handing out new leases for that ip anyway20:21
*** adjohn has joined #openstack-dev20:21
*** sniperd has joined #openstack-dev20:21
tr3buchetvishy: right, not until it gets allocated again20:22
*** sniperd has quit IRC20:22
vishytr3buchet: updated https://review.openstack.org/#change,5038,patchset=520:29
tr3buchetvishy: i don't know about allocated=True20:30
tr3buchetin network_get_associated_fixed_ips()20:30
tr3buchetit changes the function20:30
tr3buchetnow it's only allocated/associated ips, instead of just associated ips20:31
vishytr3buchet: correct, but it is used in exactly one place, to get a list of ips for dhcp20:32
vishytr3buchet: I could add an optional param and pass it in in all three places20:32
vishyor i could change the name of the method20:33
tr3buchetif it's only used in one place i think it's fine20:33
vishy* one file (three places in the file)20:33
tr3bucheti just didnt' want to break other stuff20:33
tr3buchetvishy: i thought you didn't want to teardown_network_on_host in deallocate20:34
vishytr3buchet: That was my initial thought, but now that we are keying dhcp leases off of allocated20:34
vishytr3buchet: i don't have to call it in release_fixed_ip any more20:34
tr3buchetah ok20:35
vishyso I think it is fine there20:35
vishyI'm just going to check one possible edge case scenario and make sure nova doesn't choke20:38
vishythat is restarting dnsmasq between deallocate and release20:38
vishyalthough the odds of that occurring in production are pretty damn low20:38
termiejeblair, mtaylor: this is passing for me locally using devstack, any way to get more info about what is going wrong from jenkins? https://review.openstack.org/#change,465920:41
*** lloydde has joined #openstack-dev20:42
termiejeblair, mtaylor: the only thing i can think of is that the policy.json file is somehow not being found20:42
*** zzed has joined #openstack-dev20:43
*** zzed has quit IRC20:47
*** dalang has quit IRC20:47
*** dubsquared has joined #openstack-dev20:48
mtaylortermie: looking20:52
termie('cause that is the only new thing introduced in teh change)20:53
vishytr3buchet: I split the change into two patches, also verified that fixes work in lab environment20:54
tr3buchetawesome20:55
tr3buchetwhat's the other one?20:55
*** GheRivero_ has quit IRC20:57
*** dprince has quit IRC20:58
*** dolphm has quit IRC20:59
*** zzed has joined #openstack-dev21:01
*** dolphm has joined #openstack-dev21:02
andrewbogottSo... if I want to talk to keystone from my nova extension, should I import bits from python-keystoneclient?  I don't see a lot of examples of keystone use at the moment.21:03
*** zzed has quit IRC21:09
andrewbogottatm I am trying to do something very simple:  given a product id, I want to verify that it corresponds to an actual project.21:09
andrewbogottum project aka tenant21:09
*** dubsquared has quit IRC21:09
*** griff has quit IRC21:10
tr3buchetvishy: what is the other merge?21:10
*** mattray has quit IRC21:10
mtaylortermie: I'm guessing https://jenkins.openstack.org/job/gate-integration-tests-devstack-vm/2327/artifact/logs/syslog.txt didn't help?21:13
mtaylortermie: jeblair is afk - when he gets back, I think we can do a key injection for you on to that server do you can take a peek21:13
*** jakedahn_zz is now known as jakedahn21:15
*** mattray has joined #openstack-dev21:16
*** relateable has quit IRC21:17
*** dubsquared has joined #openstack-dev21:17
*** dalang has joined #openstack-dev21:21
*** dwalleck has joined #openstack-dev21:22
*** zzed has joined #openstack-dev21:22
cp16neti am getting an error right now after starting up devstack when creating an instance. 2012-03-08 13:25:27 ERROR nova.compute.manager [-] [instance: 3687c7b5-d94f-4224-a8bb-286e55d0dbd3] Instance failed network setup21:26
cp16neti thought the network was setup after running ./stack.sh21:27
*** bsza1 has joined #openstack-dev21:27
cp16netanyone have any pointers on how i can debug this?21:27
*** bsza has quit IRC21:30
*** mattray has quit IRC21:31
apevecheckj, is 3 x +1 enough to push this one? https://review.openstack.org/#change,502721:31
termiemtaylor: yeah the syslog only shows glance stuff21:31
vishytr3buchet: it is listed as a dependent branch21:32
tr3buchetah ok21:32
tr3buchetah21:32
tr3buchetsure enough21:32
termieapevec: approved21:32
tr3bucheti was scrolled down21:32
comstudvishy: can you look @ https://review.openstack.org/#change,506921:33
apevectermie, thanks21:33
vishycomstud: what is importing signer?21:34
comstudauth.manager21:34
comstudit's in the description21:34
comstudcommit reason21:34
vishycomstud: signer is useless without boto, so that seems a little odd.21:34
comstudvishy: yeah, alternative is to mod auth.manager21:35
vishycomstud: I think i like that better21:35
comstudessentially i'll have to:21:35
*** dolphm has quit IRC21:35
comstudtry:21:35
comstud  import auth.signer21:35
comstudtho21:35
vishyi mean the code is all going boom in a couple of weeks21:35
vishyso i guess i don't care that much21:35
*** dwalleck_ has joined #openstack-dev21:35
comstudyeah, i commented on that21:36
comstudthat's why i took the simple approach21:36
*** aweiss1 has joined #openstack-dev21:36
comstudit affected a deploy last night21:36
comstudbut mostly because things were importing auth.manager21:36
comstudthat didn't need to import them21:36
tr3buchetvishy: are you finished with both patches now?21:36
comstudand I fixed those in separate patches21:37
comstudbut the bin/nova-manage problem remains21:37
comstudwhich imports auth.manager but has no need for auth.signer21:37
*** dolphm has joined #openstack-dev21:38
vishytr3buchet: yes21:38
tr3buchetk21:38
vishyalthough perhaps i should run the whole suite of unit tests :)21:38
*** dwalleck has quit IRC21:39
*** aweiss has quit IRC21:39
comstudjenkins will do that for you21:39
comstud:)21:39
markmcvishy, on auth.manager going boom ... there's no keystone equivalent of 'project zipfile' is there?21:39
vishymarkmc: there is a horizon equivalent21:42
markmcvishy, ah, interesting - thanks21:42
vishymarkmc: and a devstack equivalent21:42
andrewbogottSurely one of you has advice about calling keystone from within nova :)21:42
markmcvishy, heh, ok :)21:42
sorenvishy: Sorry, what is going to go boom in a couple of weeks?21:43
hub_capy2k21:44
vishysoren: deprecated auth!21:44
vishy(thank god)21:44
sorenvishy: I thought we decided to keep that for Essex?21:44
vishysoren: hence the couple of weeks21:45
vishysoren: (read as soon as folsom opens)21:45
sorenAh.21:45
vishymarkmc: did you see that we switched devstack over to using config syntax?21:45
markmcvishy, oh, awesome - my bad for not getting to it21:46
vishymarkmc: also, did you see the branch that added tools/conf/generate.sh21:46
vishymarkmc: I modified a script written by someone else.  I don't know if i like the way it is doing it, but it seems like a valuable thing to have21:46
markmcvishy, I reviewed an early version of the generate stuff, haven't looked since21:47
markmcvishy, agree I didn't like it too much, but generating a default nova.conf from the cfg schemas makes total sense21:47
vishymarkmc: can you take a look at it and see if there is anything in there? The output goes into etc/nova/nova.conf.sample21:47
vishymarkmc: I think i properly formatted multistring and list options21:47
markmcvishy, latest is in master? nothing pending in gerrit?21:48
vishymarkmc: my changes merged already21:48
markmcvishy, cool, looking21:48
*** zzed has quit IRC21:50
hub_capcan soomeone look @ my novaclient patch? it fixes the proxy_token behavior to work w/ the new keystone api for belongsTo https://review.openstack.org/#change,501821:50
markmcvishy, stuff like lock_path="/Users/vishvananda/cache/stack/nova/nova/../" is unfortunate21:51
jeblairtermie: ssh jenkins@50.57.66.24121:52
markmcvishy, maybe we can add a flag to cfg to disable interpolation when looking up the default21:52
vishymarkmc: oh I didn't even notice that21:52
jeblairtermie: your key from launchpad has been installed there21:52
vishymarkmc: i thought it would show without interpolation21:52
markmcvishy, what is this alien /Users anyway?21:53
* markmc frowns21:53
jeblairtermie: hopefully https://bugs.launchpad.net/devstack/+bug/945231 will improve this21:53
uvirtbotLaunchpad bug 945231 in devstack "screen output should be logged" [High,In progress]21:53
vishymarkmc: bsd--21:53
vishyaka osx21:53
markmcvishy, :)21:53
*** reed_ has quit IRC21:54
markmcvishy, it looks pretty reasonable now, cool stuff21:55
*** ayoung has quit IRC21:55
cp16neti keep having a problem starting the network when attempting to grab file lock for "iptables" for method apply.21:55
vishymarkmc: did you want to do a quick patch to remove the interpolation?21:56
markmcvishy, will do21:56
vishycp16net: you should be able to delete stale lockfiles. I'm assuming you are using an old version of the code21:56
vishycp16net: since the new code automatically does that21:56
vishycp16net: you need to find out where lock_path is putting lock files21:56
cp16neti've just redone ./stack21:57
cp16netwhich should get all the latest code21:57
cp16netand i renabled RECLONE=yes in the stack.sh21:57
vishycp16net: you are using devstack?21:57
cp16netyes21:57
*** reed_ has joined #openstack-dev21:57
cp16netvishy: i guess these are the lock files? ubuntu.Dummy-4-414221:59
vishycp16net: oddness, it is supposed to clean them up21:59
cp16netit even says it is cleaning them up21:59
vishycp16net: there should be ones called nova.lock in there21:59
vishyin /opt/stack/nova21:59
cp16nethttp://paste.openstack.org/show/7548/21:59
vishycp16net: perhaps you ran as root at some point?21:59
termiehmm, it seems like it wants to use the wrong policy driver... oh i bet devstack sets that22:00
cp16neti dont think i have run as root other than what devstack kicks off22:00
termiehrm, annoying recursive dependency stuff22:00
vishycp16net: can you delete the file manually?22:00
termie(when i tested locally i did a merge on the configs but devstack would normally just overwrite)22:01
cp16netyeah i did delete them22:02
*** hub_cap has quit IRC22:02
*** mattray has joined #openstack-dev22:02
cp16netand then it crashed network22:02
cp16netbecause it was holding on to the file22:02
cp16neti restart network and it creates a new dummy file and stops at the same point as before22:03
vishycp16net: do you have another nova process running somewhere?22:03
vishycp16net: try killall screen22:04
vishyfollowed by deleting lock files22:04
vishyfollowed by ./rejoin-stack.sh22:04
cp16neti only had a single screen session running22:04
cp16neti killed it22:04
termiejeblair: thanks a bunch, totally found the problem22:05
*** aweiss1 has quit IRC22:05
cp16netand i am stuck in a holding pattern again22:06
cp16netit created 2 dummy files22:06
cp16netin /opt/stack/nova22:06
jeblairtermie: groovy!22:07
*** andrewsmedina has quit IRC22:10
*** hashar has quit IRC22:15
*** markmc has quit IRC22:16
ohnoimdeadayoung: you around?22:16
*** martine has quit IRC22:18
mnewbyany devstack devs around?22:18
*** pasik has quit IRC22:18
ohnoimdeadtermie: maybe you can answer a keystone+ldap question?22:18
*** cp16net has quit IRC22:19
*** johnpostlethwait has quit IRC22:19
termieohnoimdead: hahahahahahahhahahahahahahaha22:21
termieohnoimdead: i mean, sure22:21
ohnoimdeadtermie: YAY! it's an easy one (probably). What should we pass as email and password for create user in the case of ldap as the auth backend?22:22
ohnoimdeadsince there's just the one create user call which expects email and password as arguments22:22
termieohnoimdead: are you actually creating the users from the crud rather than in whatever ldap stuff people use?22:23
termieohnoimdead: i assumed the user info was being pulled from ldap22:23
*** pasik has joined #openstack-dev22:23
dtroyermnewby: yo22:24
mnewbydtroyer:22:24
mnewbyI've been fighting with a dependency issue in devstack - melance inadvertently installed a newer version of WebOb than most projects were compatible with.22:24
mnewbyIt got me thinking about the need to maintain version parity across projects.22:25
mnewbyWhich covers regular deployment.22:25
ohnoimdeadtermie: so you are saying that create user should never be called when using ldap? i though keystone was keeping some metadata/authz stuff for users?22:25
mnewbyBut I was thinking that devstack would probably benefit from installing each service in an isolated venv, to ensure that version skew in development doesn't become a problem.22:25
mnewbyThoughts?22:25
ohnoimdeadtermie: for reference i'm working on: https://bugs.launchpad.net/horizon/+bug/94831022:25
uvirtbotLaunchpad bug 948310 in horizon "User password isn't a required field on creation" [Critical,In progress]22:25
*** pixelbeat has quit IRC22:26
dtroyermnewby: hmmm…that would probably work for the stuff installed via pip, and theoretically you'd just override the apt packages if required anyway.22:27
termieohnoimdead: yeah we keep some metadata, but i am not sure how that interaction is supposed to work22:27
mnewbydtroyer: correct22:27
Ryan_Laneohnoimdead, termie: I'd imagine keystore can add the metadata/authz stuff when pulled from ldap22:27
mnewbydtroyer: it wouldn't be possible to have skew in os packages.22:27
Ryan_Laneor is there some things added upon creation?22:27
Ryan_Lane*are22:27
*** kbringard has quit IRC22:28
termieRyan_Lane, ohnoimdead: i'm not really sure how it is being done22:28
* Ryan_Lane nods22:28
termiei haven't used it myself, although rpedde has, and ayoung would probably iknwo22:28
dtroyermnewby: trying to decide if that should be global or per-repo, thoughts?22:28
cloudflydtroyer i also noticed with the cloudfiles problem back at beginning of month there were untracked python dependencies in /usr/local/lib22:28
*** zzed has joined #openstack-dev22:28
ohnoimdeadok, so it sounds like what we need to do for this bug is simply disable the user create button when keystone is using ldap?22:28
cloudflywhich was annoying to isolate22:28
mnewbydtroyer: i imagine each repo getting it's own venv.  how would a global install work?22:29
dtroyermnewby: sorry, I was just thinking about the setting to make avenv or not22:29
mnewbyah, right.22:29
mnewbydtroyer: that makes sense.22:29
mnewbydtroyer: although, which would be the default?22:30
dtroyermnewby: the default would be like it is now, no vent.  We'd add a switch to enable it22:30
dtroyercloudfly: what did you find in /usr/local/lib?22:31
mnewbydtroyer: I would recommend using a venv by default.  otherwise version skew in any given project would effectively break devstack, as I experienced recently.22:31
mnewbydtroyer: but I guess some developer experience would help22:31
dtroyermnewby: also, at some point the packagers will have to resolve that.  do any packages use vents today?22:32
mnewbydtroyer: some guinea pigs (like me) could test out the venv option and report on how it affected development.22:32
dtroyerdang, can't type tailing 'v' today it seems22:32
dtroyeror trailing22:32
mnewbydtroyer: I imagine venvs being only for development, with packaging forcing the versions of dependencies to converge.22:32
mnewbydtroyer; having venv support in devstack would be to allow temporary version skew, not long-term.22:33
dtroyerand that's one reason I would default it to off too.  I don't see using vents for gating tests22:33
mnewbydtroyer: so that developers could incrementally upgrade to a new dependency rather than having to do so all at once.22:33
mnewbydtroyer: ah, true.22:33
mnewbydtroyer: So it could be optionally turned on during times of dependency version changes, but otherwise left alone.22:34
mnewbydtroyer: Makes sense.22:34
dtroyermnewby: sounds like a good idea, can you write up a bug?22:34
*** lloydde has quit IRC22:34
mnewbyCan do.22:34
dweimerIn swift, what's the reason for the object metadata size limits?22:37
*** andrewsmedina has joined #openstack-dev22:37
termieohnoimdead: that might be a good solution for now22:37
*** markvoelker has quit IRC22:38
*** mattray has quit IRC22:41
*** jakedahn is now known as jakedahn_zz22:42
*** johnpostlethwait has joined #openstack-dev22:43
*** apevec has quit IRC22:44
*** jakedahn_zz is now known as jakedahn22:56
*** dalang has quit IRC22:57
*** johnpostlethwait has quit IRC22:57
*** johnpostlethwait has joined #openstack-dev22:57
*** deshantm has joined #openstack-dev23:06
*** bsza1 has quit IRC23:09
*** mdomsch has quit IRC23:15
vishymnewby, dtroyer I like keeping shared install for gating, I think the issue is that melange is not in gating23:16
*** pixelbeat has joined #openstack-dev23:17
mnewbyvishy: ah, ok.23:18
vishymnewby: I would prefer not to have bugs like that exist for even a short time23:18
vishymnewby: perhaps non-core projects could be installed into a venv by default?23:18
mnewbyvishy: the intent isn't to take away shared install though, but rather to allow non-shared install to support updating dependencies incrementally.23:18
mnewbyvishy: the default would be a shared install23:19
mnewbyvishy: ah, that makes sense too23:19
*** dalang has joined #openstack-dev23:19
mnewbyvishy: Anything that's not in gating could be a venv install by default.23:19
*** jimbaker has quit IRC23:20
*** dolphm has quit IRC23:21
dtroyermnewby, vishy: since this is meant to be for transitional periods, I think it should be an intentional act to handle those exceptions/transitions.  I want to reinforce the notion that a venv isn't 'normal'23:23
mnewbydtroyer, vishy: I think it makes sense to include non-gated projects in a venv by default, though, so that those projects can't screw up a devstack install.23:24
mnewbydtroyer, vishy: Otherwise, what's the use in gating if it can't guarantee a working devstack?23:25
*** mattray has joined #openstack-dev23:27
dubsquaredmattray:  this doesn't look like work23:29
*** Glacee has quit IRC23:30
mattrayIRC is an occupational hazard23:36
mnewbyjkoelker: Are you here?23:40
*** deshantm_ has joined #openstack-dev23:40
*** deshantm has quit IRC23:44
*** jakedahn is now known as jakedahn_zz23:47
*** lloydde has joined #openstack-dev23:48
*** lloydde has quit IRC23:48
*** mattray has quit IRC23:48
notmynamettx: swift 1.4.7 is good to go for official release tomorrow23:49
*** dubsquared has quit IRC23:49
*** roge has quit IRC23:50
*** AlanClark has quit IRC23:50
*** roge has joined #openstack-dev23:51
*** reed_ has quit IRC23:51
*** reed_ has joined #openstack-dev23:52
*** AlanClark has joined #openstack-dev23:52
*** dubsquared has joined #openstack-dev23:52
*** dtroyer has quit IRC23:57
*** griff has joined #openstack-dev23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!