Wednesday, 2012-11-07

*** roge has joined #openstack-dev00:00
*** Tross has quit IRC00:01
*** dims has joined #openstack-dev00:05
lifelessvishy: devananda: are you both around? I'd like to talk bare-metal and bugs.00:05
devanandalifeless: i wall-of-text'ed vishy about that 30 minuets ago. not sure he's around00:06
lifelessok00:07
lifelessI don't want to talk the merge, thats up your alley :)00:07
lifelessI just want to move my panel of fixit notes into launchpad.00:07
devanandaah00:07
devanandai think both are pretty important :)00:07
jgriffithstevebake: haha... I spoke too soon, now I'm seeing ssl as you guessed :)00:07
lifelessdevananda: so do I !00:07
lifelessdevananda: but one I'm still coming up to speed on.00:07
lifelessdevananda: the other ... less so :>00:08
devanandalifeless: fwiw, dlenwell has taken an interest in digging into said baremetal bug things00:08
lifelesscall00:08
lifeless*cool*00:08
notmynamewho should I talk to about tempest?00:09
*** davidlenwell has joined #openstack-dev00:09
*** cp16net|away is now known as cp16net00:12
*** aeperezt has joined #openstack-dev00:14
stevebakejgriffith, I discovered the issue, so not much of a guess ;)00:18
*** sandywalsh has quit IRC00:18
*** adalbas has quit IRC00:18
clarkbstevebake: jgriffith is that what is affecting the gate?00:18
*** nunosantos has joined #openstack-dev00:19
*** markmcclain has quit IRC00:19
*** epim has quit IRC00:19
stevebakeI'm not sure. Mine seems to be the same volume test failure but the logs don't really say why. Its speculation that it is the keystone PKI issue00:19
lifelessvishy: devananda says to poke you :)00:20
lifelessnotmyname: in what sense?00:20
*** huats has quit IRC00:20
clarkbstevebake: is there a change to fix the PKI issue?00:20
*** huats has joined #openstack-dev00:20
*** huats has quit IRC00:20
*** huats has joined #openstack-dev00:20
clarkbCI folks are trying to track the problem as best as possible00:20
notmynamelifeless: I'm exploring using tempest as a way to run tests on swift alone00:20
*** nunosantos has quit IRC00:21
lifelessnotmyname: ok, so you probably want to just run a subset of tempest tests?00:22
notmynameyes00:22
lifelessit has a reasonably flexible execution layer, so that might be as easy as nosetests swift00:22
*** mnewby has joined #openstack-dev00:23
stevebakeclarkb, https://bugs.launchpad.net/quantum/+bug/1074257/comments/1800:23
uvirtbot`Launchpad bug 1074257 in keystone "quantum-server creates openssl zombies until process limit is reached" [Undecided,In progress]00:23
stevebakethe current proposed fix requires a change to every affected project. I'm not sure if all project should be patched yet00:24
clarkbI see. Thank you for the link00:25
*** mnewby_ has quit IRC00:25
Q310jgriffith: hi00:26
*** samkottler|out is now known as samkottler00:27
notmynamelifeless: that doesn't quite work. `nosetests tempest/tests/object-storage` seems to be the right call00:28
notmynamelifeless: do you know how the strategy config in the identity section is used?00:28
*** oneiroi has quit IRC00:30
*** entropyworks is now known as Aaton00:32
*** jrodom has quit IRC00:34
*** markwash has quit IRC00:36
*** cbaeseman has joined #openstack-dev00:37
*** metral has joined #openstack-dev00:39
*** littleidea has quit IRC00:40
*** markwash has joined #openstack-dev00:40
*** cp16net is now known as cp16net|away00:40
*** dolphm has joined #openstack-dev00:41
*** reed has quit IRC00:42
*** littleidea has joined #openstack-dev00:42
*** littleidea has left #openstack-dev00:42
lifelessnotmyname: sorry, no00:43
*** nati_uen_ has joined #openstack-dev00:43
jgriffithQ310: Hola00:43
*** rkukura has quit IRC00:44
*** maurosr has joined #openstack-dev00:45
*** nati_ueno has quit IRC00:45
*** metral has quit IRC00:48
Q310jgriffith: have you got a spare 5/10mins to look at this code? http://dpaste.com/825621/00:49
*** shardy_afk has quit IRC00:49
*** dolphm has quit IRC00:49
*** otherwiseguy has quit IRC00:50
*** maurosr has quit IRC00:50
fungijgriffith: clarkb: stevebake: jeblair just pointed out that the first check run on 15429 hit the same 401 error we were hoping it might fix00:50
fungiactually, 15429 doesn't look like the change clarkb meant to link in our list. investigating now00:52
*** maurosr has joined #openstack-dev00:52
fungino, nevermind. it is. i was thrown by the terse commit message00:53
fungiso anyway, looks to not actually fix it, unless it's just part of a multi-part solution there00:53
*** cp16net|away is now known as cp16net00:56
*** maurosr has quit IRC00:56
openstackgerritA change was merged to openstack/glance: Unit test replication_dump.  https://review.openstack.org/1492400:57
*** maurosr has joined #openstack-dev00:57
*** rkukura has joined #openstack-dev01:00
*** jcmartin has quit IRC01:03
*** mnewby has quit IRC01:03
*** mnewby has joined #openstack-dev01:04
*** jog0 has joined #openstack-dev01:06
*** jog0 has left #openstack-dev01:06
*** jog0 has joined #openstack-dev01:07
*** patelna has quit IRC01:10
*** asalkeld has quit IRC01:15
*** sandywalsh has joined #openstack-dev01:15
*** hemna_ has joined #openstack-dev01:16
*** xchu has joined #openstack-dev01:17
*** danwent has quit IRC01:18
*** tmishler has joined #openstack-dev01:18
*** hemna has quit IRC01:19
*** sandywalsh has quit IRC01:19
*** asalkeld has joined #openstack-dev01:21
*** aeperezt has quit IRC01:22
*** maurosr has quit IRC01:22
*** derekh has joined #openstack-dev01:22
*** gyee has quit IRC01:23
*** eglynn__ has joined #openstack-dev01:25
*** aeperezt has joined #openstack-dev01:26
openstackgerritA change was merged to openstack/swift: add OPTIONS to proxy_logging configs and docs  https://review.openstack.org/1553101:27
openstackgerritA change was merged to openstack/swift: statsd timing refactor  https://review.openstack.org/1548801:27
*** eglynn_ has quit IRC01:28
*** tmishler has quit IRC01:28
*** otherwiseguy has joined #openstack-dev01:33
*** wenjianhn has joined #openstack-dev01:34
*** winston-d has joined #openstack-dev01:35
*** maurosr has joined #openstack-dev01:36
*** TerryH has quit IRC01:38
*** salv-orlando has quit IRC01:39
*** nati_uen_ has quit IRC01:40
*** maurosr has quit IRC01:41
*** nati_ueno has joined #openstack-dev01:41
*** s0mik has quit IRC01:42
*** s0mik has joined #openstack-dev01:43
*** maurosr has joined #openstack-dev01:44
*** s0mik has quit IRC01:45
*** mnewby_ has joined #openstack-dev01:45
*** maxiz has joined #openstack-dev01:46
*** anniec has quit IRC01:47
*** mnewby has quit IRC01:48
*** mnewby_ is now known as mnewby01:48
*** anniec has joined #openstack-dev01:48
*** maurosr has quit IRC01:50
openstackgerritA change was merged to openstack/nova: Fix to include error message in instance faults  https://review.openstack.org/1520001:50
openstackgerritA change was merged to openstack/nova: Imported Translations from Transifex  https://review.openstack.org/1553301:51
Q310shhh01:52
*** thingee_zz has quit IRC01:54
*** SlickNik has quit IRC01:54
openstackgerritA change was merged to openstack/nova: Read deleted flavors when using to_xml()  https://review.openstack.org/1515501:55
*** SlickNik has joined #openstack-dev01:55
openstackgerritA change was merged to openstack/keystone: Merge remote-tracking branch 'origin/feature/keystone-v3' into HEAD  https://review.openstack.org/1529701:55
openstackgerritA change was merged to openstack/cinder: Remove dm_setup(remove) call in volume_delete.  https://review.openstack.org/1551801:56
*** mnewby has quit IRC01:56
*** dolphm has joined #openstack-dev01:57
*** zaitcev has joined #openstack-dev02:00
*** vipul has quit IRC02:00
*** jog0 has quit IRC02:02
openstackgerritA change was merged to openstack/nova: Make ComputeDrivers send hypervisor_hostname  https://review.openstack.org/1548702:04
*** sniperd has quit IRC02:06
*** jtran has quit IRC02:08
*** littleidea has joined #openstack-dev02:09
*** Gordonz has joined #openstack-dev02:12
*** derekh has quit IRC02:13
*** larsks has quit IRC02:14
openstackgerritA change was merged to openstack/nova: Fixed instance deletion issue from Nova API.  https://review.openstack.org/1527502:15
vishyjgriffith: ping02:15
openstackgerritA change was merged to openstack/cinder: Add 'create_volume' to scheduler RPC API.  https://review.openstack.org/1411902:15
jgriffithvishy: yo02:16
vishyjgriffith: so you are still seeing the 401 even without the dd?02:16
jgriffithvishy: yeah, it's looking like it's keystone02:16
*** asalkeld has quit IRC02:16
jgriffithvishy: heckj and dolph had some patches they had hoped would fix02:16
jgriffithvishy: but doesn't seem to have done the trick02:17
*** asalkeld has joined #openstack-dev02:17
vishyjgriffith: do you have a recent failure without the dd02:17
vishyjgriffith: i want to look at logs02:17
jgriffithvishy: Yeah... let me find a fresh one for ya02:17
jgriffithvishy: http://logs.openstack.org/15363/1/gate/gate-tempest-devstack-vm/17401/02:19
jgriffithvishy: also, the kernel io errors were actually from the dev_mapper(remove) call02:19
jgriffithvishy: I removed that and it just landed a few minutes ago02:20
Q310jgriffith: would i best be using stringIO to get the output of a command then phasing the output that way?02:21
vishyjgriffith: well wtf02:21
vishyjgriffith: syslog died on that one as well02:21
jgriffithvishy: yep02:21
vishyjgriffith: so maybe your dev_mapper fix will fix it.02:22
jgriffithvishy: I'm hoping, but it's a long shot02:22
jgriffithvishy: Just bizarre that these started triggering last week-end02:22
vishyjgriffith: the fact that syslog is not getting any data seems highly suspicious02:22
jgriffithvishy: Unless it was in the latest updates02:22
jgriffithvishy: yeah, that would pretty well mean that everything is suspect as being hosed02:23
jgriffithvishy: somebody repro'd on their own devstack and logged a bug02:23
jgriffithvishy: haven't caught up with them to find the diff in their setup from mine (localrc settings??)02:23
jgriffithvishy: I've got two systems up over 500 iterations of exercise.sh w/o issue.  Obviously that's just wasting cpu cycles at this oint02:24
jgriffithpoint02:24
vishyjgriffith: the weird error makes me wonder if the switch to pki was what triggered it02:25
vishymaybe it is a bad version of openssl?02:25
vishyjgriffith: are you running on metal?02:25
jgriffithvishy: both02:25
*** roge has quit IRC02:25
jgriffithvishy: interesting...02:25
jgriffithvishy: ahhh... interesting02:26
jgriffithvagrant@precise64:~$ nova list02:26
jgriffithERROR: An unexpected error prevented the server from fulfilling your request. Command 'openssl' returned non-zero exit status 3 (HTTP 500)02:26
*** adjohn has quit IRC02:27
jgriffithSo this was one of my lopped systems02:27
jgriffithvishy: I killed it, did an apt-get update02:27
jgriffithvishy: rekicked and this is what I get....02:27
jgriffithvishy: sadly it's yet another message.... but02:27
vishyjgriffith: dtroyer says he has gotten the error reliably on one of our installs02:28
vishygoing to try and get him to set one up so I can debug02:28
jgriffithvishy: interesting... metal or VM's?02:29
vishyvms02:29
lifelesswhy is rootwrap nova specific ?02:40
lifelessOr put another way, what stops us eliminating it in favour of sudoers rules ?02:42
*** cp16net is now known as cp16net|away02:44
*** anniec has quit IRC02:45
clarkblifeless ttx knows the history. there is a reason it isnt just sudo though02:45
clarkbforget what that is02:45
*** anniec has joined #openstack-dev02:45
*** jeffrey4l has joined #openstack-dev02:46
lifelessttx: ^ yo02:46
lifelessclarkb: thanks02:46
*** yaguang has joined #openstack-dev02:47
*** zbitter has joined #openstack-dev02:48
*** mnewby has joined #openstack-dev02:48
jgriffithvishy: Just noticed some differences between the failing jenkins vm's and my working systems02:49
jgriffithvishy: one interesting thing is lack of an openssl.conf file02:49
*** zaneb has quit IRC02:49
*** cp16net|away is now known as cp16net02:58
*** mrodden has quit IRC03:01
*** mnewby has quit IRC03:05
*** vipul has joined #openstack-dev03:10
*** melwitt has quit IRC03:14
*** pixelbeat has quit IRC03:17
*** s0mik has joined #openstack-dev03:18
*** alunduil has joined #openstack-dev03:19
*** jrodom has joined #openstack-dev03:19
*** zyluo has joined #openstack-dev03:22
*** anniec has quit IRC03:26
openstackgerritA change was merged to openstack/swift: updated for 1.7.5 release  https://review.openstack.org/1553603:33
*** gongysh has quit IRC03:37
vishyjgriffith: ok found the cause of the issue03:37
vishyjgriffith: still not sure why though03:37
*** matiu has quit IRC03:38
jgriffithvishy: oh yeah?03:39
vishyyes the openssl call in cinder is not returning error code 203:39
vishyfor some reason03:39
jgriffithinteresting...03:40
*** winston-d has quit IRC03:40
*** sunilthaha has quit IRC03:43
*** crandquist has joined #openstack-dev03:45
*** kobier has quit IRC03:46
*** nati_ueno has quit IRC03:46
*** winston-d has joined #openstack-dev03:46
vishyjgriffith: it returns a 003:48
vishywe just managed to get it to return a 203:48
*** ndipanov has quit IRC03:48
*** gongysh has joined #openstack-dev03:49
jgriffithvishy: which method is it?03:49
jgriffithvishy: Should be using common for that I would've thought...03:51
openstackgerritA change was merged to openstack/swift: 1.7.6 version bump  https://review.openstack.org/1553803:53
*** spiffxp has quit IRC03:53
*** maurosr has joined #openstack-dev03:57
*** markmcclain has joined #openstack-dev03:58
*** littleidea has quit IRC03:59
*** ndipanov has joined #openstack-dev04:01
*** maurosr has quit IRC04:02
notmynamettx: swift 1.7.5 commit sha for milestone-proposed is d09bcdef73e54ffe9f9c1cd10ae3a0b939adc72404:06
*** rushiagr has joined #openstack-dev04:06
vishyjgriffith: fixed it04:06
jgriffithvishy: you da man!04:06
jgriffithvishy: so what did I screw up?04:07
vishyjgriffith: you're going to love this fix04:08
*** darjeeli_ has quit IRC04:08
jgriffithvishy: oh boy, this should be good04:08
clarkbso the gate should be healthy now?04:08
clarkbor soon?04:09
jgriffithclarkb: not yet, although I haven't seen a failure tonight04:09
vishywell 46c1b6eaee4ca00c256c5c403c6d6bfeaf3b63f8 from nova will fix it plus other things but I will give you a very easy fix04:09
jgriffithbahhhh04:10
jgriffiththat's a big ass patch!04:10
*** zodiak has quit IRC04:10
*** thingee has joined #openstack-dev04:10
vishyjgriffith: do you have a bug report i can link to?04:11
jgriffithvishy: yeah... stand by04:12
*** yaguang has quit IRC04:13
jgriffithvishy: https://bugs.launchpad.net/cinder/+bug/107356904:13
uvirtbot`Launchpad bug 1073569 in nova/folsom "Jenkins jobs fail because of incompatibility between sqlalchemy-migrate and the newest sqlalchemy-0.8.0b1" [Critical,Fix committed]04:13
jgriffithvishy: guess I need to change the status...04:13
vishyare you sure that is right?04:14
jgriffithnope04:14
jgriffiththat's wrong...04:14
vishy:)04:14
*** maurosr has joined #openstack-dev04:15
jgriffithvishy: https://bugs.launchpad.net/cinder/+bug/107583804:16
uvirtbot`Launchpad bug 1075838 in cinder "devstack gate tests fail intermittently with 401 error" [Undecided,New]04:16
*** andrewbogott is now known as andrewbogott_afk04:16
*** rushiagr has quit IRC04:16
*** rushiagr has joined #openstack-dev04:17
vishyjgriffith: https://review.openstack.org/1554104:17
vishywe were lucky in that dean had a vm that was hitting the race every single time04:17
jgriffithvishy: The F'ing monkey patch?04:17
*** maurosr has quit IRC04:18
jgriffithvishy: So....04:18
Q310hey guys any chance you can give me some pointers on how i get the volume_id out of the cinderclient api call, http://dpaste.com/826171/04:18
Q310http://dpaste.com/826172/ rather04:19
vishyshould be result.id i think04:19
vishyi believe you get back a volume object04:20
vishyQ310: I have a similar patch that does that in nova04:20
Q310nice04:20
Q310any chance i could have a look?04:21
jgriffithvishy: so when you have time I'd sure like to get some info from you on how you tracked that down04:21
jgriffithvishy: I wasn't even in the ball-park04:21
Q310sorry i'm no django / programmer just trying to get this darn volume to image :)04:22
*** littleidea has joined #openstack-dev04:22
vishyjgriffith: mostly luck04:23
vishyQ310: looking for it04:24
Q310vishy: thanks, rather volume to map to instance04:24
jgriffithvishy: Well nice job to you and dtroyer_zzz either way04:24
vishyjgriffith: mostly just logged stuff to find out what was going wrong04:24
vishyand the only thing i could think of that was different in cinder vs nova (using the exact same api calls)04:24
jgriffithvishy: the advantage of being able to repro04:25
vishyis eventlet monkeypatching04:25
jgriffithvishy: Man that's wild04:25
vishyjgriffith: you still get success on a brand new devstack install?04:25
jgriffithvishy: yep!04:25
jgriffithvishy: Just spun up another one about 30 minutes ago04:25
vishyQ310: https://github.com/vishvananda/nova/commit/8587e8728ee141e417837c4564d61232b2f9b1a904:26
*** rushiagr has quit IRC04:26
jgriffithvishy: and I have one system still looping exercise.sh since yesterday morning04:26
vishyi actually modified that slightly but i can't find it04:26
Q310vishy: thanks i'll take a look04:26
vishyjgriffith: you have to delete /var/cache/cinder/* between runs04:27
*** matiu has joined #openstack-dev04:27
*** matiu has quit IRC04:27
*** matiu has joined #openstack-dev04:27
vishythe reason it just started happening is it used to use the same pem files for all services04:27
jgriffithvishy: DOH!04:27
vishyand so the other services created it fine04:27
*** aeperezt has quit IRC04:27
jgriffithvishy: that explains it perfectly04:27
jgriffithvishy: once setup kicked off and if it worked it always works04:28
jgriffithvishy: Well you guys are going to make a lot of people very happy!04:29
jgriffithvishy: go figure...04:30
jgriffithvishy: server didn't become active04:31
*** aeperezt has joined #openstack-dev04:31
jgriffithvishy: So I've seen a couple of those the past 24 hours04:32
vishyQ310: here is the newer version https://github.com/vishvananda/nova/commit/51838612b392702a981de4ddbfc75e5b39f93e1604:33
Q310vishy: thanks04:33
Q310vishy: so if i was to implement that basically all of the instances would be provisioned with volumes?04:34
Q310vishy: looks much better then mine :)04:34
vishyQ310: correct if you turn that flag on04:36
vishyall instances will back to volume unless someone specifically sends in block_device mapping04:36
vishyQ310: It is experimental though so I can't promise there won't be failure scenarios :)04:37
Q310heh04:37
Q310vishy: silly question but how would i turn that flag on? modifying the instances workflow.py?04:38
vishyQ310: no you have to set it in /etc/nova/nova.conf on your api nodes04:38
vishydefault_volume_boot=True04:38
Q310ah04:38
Q310vishy: thanks i'll give it a whirl04:38
*** Gordonz_ has joined #openstack-dev04:44
*** Gordonz_ has quit IRC04:44
*** Gordonz has quit IRC04:47
Q310vishy: do you mind if i pass this around on the ceph mailing list?04:47
*** darjeeling has joined #openstack-dev04:49
*** koolhead17 has joined #openstack-dev04:49
vishyQ310: nope04:52
vishyi made it when i was playing with ceph :)04:52
*** matiu_ has joined #openstack-dev04:53
*** matiu_ has quit IRC04:53
*** matiu_ has joined #openstack-dev04:53
*** matiu has quit IRC04:53
*** darjeeling has quit IRC04:57
*** wenjianhn has quit IRC04:57
*** aeperezt has quit IRC05:00
*** wenjianhn has joined #openstack-dev05:00
*** rkukura has quit IRC05:02
Q310vishy: thanks, umm dosn't seem to be working,i've added both parts to both files on both machines and the option to the nova.conf on both machines and still dosn't create a volume05:04
*** zodiak has joined #openstack-dev05:05
winston-dinteresting, Nova used to monkey patch everything.05:08
winston-dos=False was added during the multiprocess API patch05:09
*** markwash has quit IRC05:09
*** otherwiseguy has quit IRC05:12
openstackgerritA change was merged to openstack/cinder: Fix 401 from auth_token middleware  https://review.openstack.org/1554105:12
jgriffithsweet!05:13
jgriffithnow back to work05:13
*** stinkypeterson has joined #openstack-dev05:14
stinkypetersonis there any way thorough the quantum cli that we can get the list of available extension api's?05:15
*** littleidea has quit IRC05:18
*** dhubbard has quit IRC05:18
*** dhubbard has joined #openstack-dev05:18
Q310vishy: scrub that it seems to work but just erroring it looks liek its trying to start the vm before the volume has been finished downloading05:20
*** littleidea has joined #openstack-dev05:21
*** rkukura has joined #openstack-dev05:21
*** Mandell has quit IRC05:22
*** garyk has quit IRC05:23
*** crandquist has quit IRC05:26
*** markwash has joined #openstack-dev05:26
*** crandquist has joined #openstack-dev05:30
*** dolphm has quit IRC05:31
*** koolhead17 has quit IRC05:32
*** sniperd has joined #openstack-dev05:35
*** samkottler is now known as samkottler|out05:37
*** enikanorov_ has joined #openstack-dev05:38
*** enikanorov has quit IRC05:39
openstackgerritA change was merged to openstack/nova: Switch from FLAGS to CONF in nova.network  https://review.openstack.org/1536305:41
openstackgerritA change was merged to openstack/nova: Switch from FLAGS to CONF in misc modules  https://review.openstack.org/1535905:41
vishyQ310: are all your other settings correct for volumes?05:43
vishyQ310: it creates the volume sync so it should work05:44
*** metral has joined #openstack-dev05:54
*** lianhao has joined #openstack-dev05:58
*** markmcclain has quit IRC05:58
*** hattwick has quit IRC05:59
*** sniperd has quit IRC06:05
*** darjeeling has joined #openstack-dev06:13
*** jrodom has quit IRC06:19
*** nati_ueno has joined #openstack-dev06:23
*** stinkypeterson has quit IRC06:24
*** saurabh has joined #openstack-dev06:24
saurabhhas anyone tried to use the cisco quantum plugin for folsom?06:25
*** thovden has joined #openstack-dev06:29
*** brucer has quit IRC06:32
*** brucer has joined #openstack-dev06:35
*** thingee has quit IRC06:35
*** thingee has joined #openstack-dev06:36
*** roadTripper has quit IRC06:41
*** roadTripper has joined #openstack-dev06:41
*** hattwick has joined #openstack-dev06:42
*** thovden has quit IRC06:51
*** markwash has quit IRC07:00
*** mrunge has joined #openstack-dev07:01
*** novas0x2a|laptop has quit IRC07:04
*** winston-d has quit IRC07:04
*** garyk has joined #openstack-dev07:05
*** zaitcev has quit IRC07:06
*** adjohn has joined #openstack-dev07:08
*** eglynn has joined #openstack-dev07:09
*** ogelbukh has quit IRC07:10
*** ogelbukh has joined #openstack-dev07:10
*** eglynn__ has quit IRC07:11
*** rushiagr has joined #openstack-dev07:16
*** winston-d has joined #openstack-dev07:20
*** adjohn has quit IRC07:27
*** mindpixel has joined #openstack-dev07:30
*** DIGANTA has joined #openstack-dev07:31
Q310vishy: i'll have a further tinker tonight, cheers07:34
*** Q310 has quit IRC07:34
*** ondergetekende has joined #openstack-dev07:35
*** hvolkmer has joined #openstack-dev07:36
*** nati_ueno has quit IRC07:37
*** vipul has quit IRC07:37
*** hemna_ has quit IRC07:39
*** jeffrey4l has quit IRC07:39
*** davidha has quit IRC07:40
*** rafaduran has joined #openstack-dev07:42
openstackgerritA change was merged to openstack/nova: Fix quota updating during soft delete and restore  https://review.openstack.org/1552407:43
*** mmagr has quit IRC07:44
*** ilyashakhat has joined #openstack-dev07:51
*** hemna_ has joined #openstack-dev07:51
*** DIGANTA has quit IRC07:58
*** winston-d has quit IRC07:59
*** ilyashakhat has quit IRC07:59
*** dstufft|laptop has joined #openstack-dev08:03
*** gabriel has joined #openstack-dev08:08
*** salv-orlando has joined #openstack-dev08:09
*** gabriel is now known as durian08:09
*** brucer has quit IRC08:10
*** somik has joined #openstack-dev08:11
*** afazekas has joined #openstack-dev08:11
*** brucer has joined #openstack-dev08:11
*** s0mik has quit IRC08:12
*** somik is now known as s0mik08:12
*** winston-d has joined #openstack-dev08:13
*** torandu has quit IRC08:13
openstackgerritA change was merged to openstack/nova: Forbid resizing instance to deleted instance types  https://review.openstack.org/1534408:14
*** torandu has joined #openstack-dev08:14
*** reidrac has joined #openstack-dev08:14
openstackgerritA change was merged to openstack/nova: Map NotAuthorized to 403 in floating ips extension  https://review.openstack.org/1531808:15
*** brucer is now known as brucer_out08:18
*** apevec has joined #openstack-dev08:20
*** apevec has joined #openstack-dev08:21
*** diganta has joined #openstack-dev08:26
digantais there anyone can help me regarding Pyramid ?08:27
*** brucer_out has quit IRC08:28
*** brucer_out has joined #openstack-dev08:28
*** brucer_out has quit IRC08:34
*** metral has quit IRC08:35
*** metral has joined #openstack-dev08:35
*** littleidea has quit IRC08:37
*** hvolkmer has quit IRC08:37
*** davidha has joined #openstack-dev08:38
*** jpich has joined #openstack-dev08:38
*** diganta has quit IRC08:41
*** metral has quit IRC08:43
*** e1mer has joined #openstack-dev08:43
*** e1mer has joined #openstack-dev08:43
*** metral has joined #openstack-dev08:45
*** ondergetekende has quit IRC08:46
*** davidlenwell has quit IRC08:49
*** dstufft|laptop has quit IRC08:50
*** winston-d has quit IRC08:55
ttxlifeless: it used to be sudoers files. There were all sorts of limitations and problems. For example, sudoers files were distro-specific and in packaging, and always trailed08:59
ttxlifeless: but the main issue is the inability of sudoers to do any kind of good filtering08:59
*** Tross has joined #openstack-dev09:00
lifelessttx: what sort of filtering was needed and unable to do? Did we consider fixing sudo ?09:00
ttxI documented all thoughts in http://fnords.wordpress.com/2011/11/23/improving-nova-privilege-escalation-model-part-1/09:00
ttxand the two subsequent parts09:00
lifelessadded to reading list, thanks.09:00
ttxbecause I knew someone would question it two years ahead09:00
ttxsudo cannot do argument filtering at all.09:01
lifelesshuh? It definitely does09:01
ttxlifeless: it's quite limited09:02
ttxas in, not useful at all for any kind of security09:02
*** roge has joined #openstack-dev09:02
ttxyou are allowed only one wildcard in regexp, and that's a single *09:02
lifelessttx: thats also false; I was writing one today with multiple wildcards09:03
*** arata has joined #openstack-dev09:03
ttxthe whole thing was discussed with kees and jdstrand, who agreed on the need to switch09:03
lifelessttx: I'm not claiming its perfect, far from it - trying to really understand the actual gap09:03
ttxand that sudo was notoriously not powerful enough for that use09:03
ttxso it's not just me.09:04
lifelesssure, never claimed it was :)09:04
lifelessttx: my actual question was, why is it nova specific09:04
ttxit's not. It's moving to openstack-common in this cycle09:05
ttxused in cinder and quantum too09:05
lifelessttx: would it make sense as a totally independent project?09:05
openstackgerritA change was merged to openstack/nova: libvirt: Regenerates xml instead of using on-disk  https://review.openstack.org/1515309:05
lifelessopenstack governed and managed, but installable and upgradable separately09:05
*** derekh has joined #openstack-dev09:06
ttxlifeless: yes, that was (and still is) an option. The reason why we preferred to do it openstack-specific is that some filters are reaaallly openstack-specific09:06
ttxit will end up in its own package though09:06
ttxlike oslo.rootwrap09:06
*** e1mer has quit IRC09:07
ttxso it will end up being one of those openstack libraries that could be used somewhere else09:07
lifelessttx: thats good. I don't really understand why it would be in the same source tree as other code. Or do you mean it will be its own repo ?09:07
ttxstuff in openstack-common will end up in their own repos09:08
ttxi.e. we have a config module that will live in a oslo.cfg repo and library09:08
*** maxiz has quit IRC09:08
*** e1mer has joined #openstack-dev09:09
ttxso rootwrap will (once stable enough to be reused by all consuming projects) be its own package09:09
ttxand potentially usable by others09:10
*** metral has quit IRC09:11
ttxthe rootwrap will also grow the ability to execute python code snippets as root09:12
ttxrather than shelling out on very basic commands like cp or chown09:12
ttxlifeless: but to answer your original question, theer is no reason why it would live in the same code repo as nova, since it's a completely separate set of code09:15
lifelessttx: interesting09:15
ttx(by design, since the code that rnus as root is separate from the rest)09:15
lifelessttx: thanks. The stuff I'm working on atm, building images of openstack ready to run, needs extensive root, but I'm hesitant to depend on things we need to provision to do the thing itself; we already have one inception step in the process. having two seems excessive :)09:16
ttxsure, sudo is perfectly fine for most uses, frankly09:16
ttxrootwrap is just more powerful and customizable. At some point people will get up and build very specific command filters though, not just regexp matches or command matches09:18
ttxthe KillFilter is one of those09:18
ttxit tris to check that the pid you ask to kill is a dnsmasq process09:19
ttxtries*09:19
ttxquite difficult to do in a regexp, and even more difficult to do in glob like sudo uses09:20
*** darjeeli_ has joined #openstack-dev09:21
ttxthe alternative design was to have a number of scripts that sudo would call -- the scripts would do the argument checks themselves09:21
lifelessI can imagine building a more capable dsl for sudo09:21
*** darraghb has joined #openstack-dev09:21
lifelesswhich in a way is what rootwrap is, just past a process barrier09:21
ttxlifeless: sudo is... quite conservative in what it accepts in its codebase. But you would have a better chance at it than I have :)09:22
lifelessheh :)09:22
ttxas in I'm unable to code securely in C.09:22
lifelessI have other fish to fry atm09:22
*** ondergetekende has joined #openstack-dev09:24
*** darjeeling has quit IRC09:25
ttxlifeless: as an ending remark... our current usage of rootwrap is not really more secure than what we could do with plain sudo... since most commands do not use a very advanced filter (just does basic regexp or first argument match)09:28
ttxit's when you start doing smarter things (like the KillFilter) that rootwrap starts to shine09:28
*** maploin has joined #openstack-dev09:29
*** maploin has quit IRC09:29
*** maploin has joined #openstack-dev09:29
ttxso at some point we'll have to get off our collective lazy asses and write specific filters for most dangerous commands09:29
*** Tross has quit IRC09:30
ttx(though Python snippets when available would probably be even better)09:30
*** zing has joined #openstack-dev09:32
*** ondergetekende has quit IRC09:32
*** afazekas has quit IRC09:33
*** ondergetekende has joined #openstack-dev09:33
*** pixelbeat has joined #openstack-dev09:34
*** simonmcc has joined #openstack-dev09:35
*** zbitter has quit IRC09:35
ttxnotmyname: will cut today, after traveling back home09:35
*** zaneb has joined #openstack-dev09:35
*** Tross has joined #openstack-dev09:38
*** simonmcc has left #openstack-dev09:41
*** Tross has quit IRC09:41
*** roge has quit IRC09:44
*** xchu has quit IRC09:45
*** roge has joined #openstack-dev09:46
*** mmagr has joined #openstack-dev09:48
*** ndipanov has quit IRC09:54
zykes-mordred: ping10:00
*** davidhadas has joined #openstack-dev10:05
*** ndipanov has joined #openstack-dev10:07
*** davidha has quit IRC10:09
*** uvg has joined #openstack-dev10:10
*** almaisan-away has quit IRC10:14
*** almaisan-away has joined #openstack-dev10:15
*** almaisan-away is now known as al-maisan10:16
*** afazekas has joined #openstack-dev10:16
*** al-maisan is now known as almaisan-away10:16
*** zyluo has quit IRC10:16
*** adalbas has joined #openstack-dev10:22
*** reed has joined #openstack-dev10:22
garykamotoki: ping10:25
amotokigaryk: hi10:26
garykamotoki: how are you?10:26
amotokigaryk: good :)10:26
garykamotoki: would it be possible that you look at https://review.openstack.org/#/c/15551/. An additional core review can help10:26
amotokigaryk: sure. look soon.10:27
garykamotoki: thanks!10:27
*** sunilthaha has joined #openstack-dev10:29
amotokigaryk: It looks ok. +2'ed.10:29
garykamotoki: thanks10:29
*** jpich has quit IRC10:30
garyksalv-orlando: hi, you there?10:37
openstackgerritA change was merged to openstack/quantum: Added service from openstack-common  https://review.openstack.org/1555110:39
salv-orlandogsryk: here10:39
salv-orlandogaryk: ^ ^10:39
garyksalv-orlando: no, just wanted to know if you have a few minutes to discuss an api issue (i forgot you were in the same timezone as us :))10:40
salv-orlandoAlmost10:41
salv-orlandowhat API issue?10:41
garykafter a number of discussion following what we spoke about yesterday. there is a leaning to go with a sub resource on a port.10:42
*** roge has quit IRC10:42
garyksay for example GET /port/<id>/binding and PUT /port/<id>/binding/<some value>10:42
garykwhat do you think about this?10:42
*** AnilV4 has quit IRC10:42
zykes-salv-orlando: go to bed :)10:43
salv-orlandoI don't love sub resources, but  I can live with it. I am not sure about the PUT because I have no idea what you want to put there. Probably we should flesh out how a binding is structured, or do you reckon it should be free form?10:45
salv-orlandozykes-: its' 11:45 here10:45
salv-orlandoAM10:45
zykes-salv-orlando: I thought you where in the .US ;p10:46
salv-orlandoI am everywhere :)10:46
zykes-;p10:46
garyksalv-orlando: ok. maybe it should be a POST. there are some cases when Nova needs to pass information to Quantum - for example a node ID.10:47
zykes-hmm, will G1 be backwards compatible with folsom ?10:47
*** davidlenwell has joined #openstack-dev10:47
zykes-#Quantum that is10:47
*** jpich has joined #openstack-dev10:48
*** AnilV4 has joined #openstack-dev10:48
*** roadTripper has quit IRC10:49
salv-orlandogaryk: so you do have a plan of what a binding should contain?10:49
*** maurosr has joined #openstack-dev10:49
garyksalv-orlando: at the moment it should contain the networking implementation and maybe other information that is relevant to specific plugins.10:50
salv-orlandothe second part of your sentence if what will probably need to change the shape of the VIF plugging API10:50
salv-orlandofor the former part only there's no need for any POST/PUT10:50
*** sagar_nikam has joined #openstack-dev10:51
salv-orlandoAnyway - we can add the PUT behavior whenever we want10:51
garyksalv-orlando: are you referring to mail i sent yesterday?10:51
salv-orlandoNo, yo your sentence on IRC "maybe other information that is relevant to specific plugins@10:51
salv-orlando"10:51
salv-orlandoShall we say that a binding is constituted by a VIF driver specification and a bucket of key-value pairs that have meaning only for the specific VIF driver?10:53
garykgood point. i was planning on having a new generic vif plugin for quantum (leaving the existing ones to ensure backward compatability)10:53
salv-orlandoand the VIF driver can read/write into that bucket10:53
*** adalbas has quit IRC10:53
*** andrea_ has quit IRC10:54
garykthe new vif driver would receive the network implementation and act accordingly. there may be cases where a specific type requires an update on quantum - for example if a plugin uses an external controller and they need to learn about the changes10:54
salv-orlandoI'd love to have a generic VIF driver, but would that be achievable?10:54
garyksalv-orlando: yes - your description is correct10:54
garyksalv-orlando: i plan to start with a generic on for the libvirt implementations. then we'll go from there.10:55
*** alexpilotti has joined #openstack-dev10:56
garyksalv-orlando: if there are vendor specific things then hopefully we can piggy back these on the binding dictionary10:56
salv-orlandoA single VIF driver that could do both UCS and OVS plugins, for instance?10:56
garyksalv-orlando: this is the end goal.10:56
salv-orlandozykes-: all G  milestones will be backward compatible will folsom10:57
garyksalv-orlando: i am confident with my understanding of the ovs and lb implementations. i have a lot to learn about the ucs implementation but hopefully the cisco guys will help out here10:57
zykes-salv-orlando: hmm k10:57
salv-orlandogaryk: could there be an argument for stating then that the VIF plugging component should be part of Quantum, just like the auth middleware that quantum uses is part of Keystone?10:58
*** diganta has joined #openstack-dev10:59
garyksalv-orlando: yes, most certainly10:59
salv-orlandoSo Nova devs would just forward the call to the driver, which is in quantum source tree (could be local library call), IPC, or some more sophisticated stuff10:59
garyksalv-orlando: i think that in the long run that would be the best situation.11:00
garyksalv-orlando: but at the moment I'd like to start to do it small.11:01
salv-orlandook, back on the URI structures. Sub URIs are fine as long as you don't need to do things such as "give me all the ports which use a specific network implementation" or "find the port for which binding_param=x"11:01
salv-orlandoAlso, with the sub URI structure, we would need more work on the policy engine for ensuring regular users can fetch ports but not bindings11:02
salv-orlandohence, in that case I would probably consider extending the port structure with bindings...11:02
garykfor the first point - i agree and we should limit the funcionality11:02
*** bourke has quit IRC11:02
zykes-what BP is it your working on ?11:03
*** bourke has joined #openstack-dev11:03
garyknow you have sent me a curve ball.11:04
*** egallen has joined #openstack-dev11:04
garykthe simplest approach would be to extend the port with the bindings.11:04
garykthe bindings should only be retrieved if the user is an admin user11:04
salv-orlandogaryk: just like provider networks info11:05
garyksalv-orlando: correct.11:06
salv-orlandothis way you could query and so all the sort of stuff on binding parameters without worrying about anythign11:06
garyksalv-orlando: there are 2 options then - sub resource or extending the port info11:06
garyksalv-orlando: by using filters?11:06
salv-orlandoThe point is that probably, as I wrote in my email, there is an argument for distinguishing between a service and the admin role11:06
salv-orlandoyes filters11:07
garykyes, only an admin user will be able to get/set the bindings11:07
salv-orlandoI am not sure wheter we want to limit this kind of detail just to the "service" (e.g.: nova) or just allow each admin to see them. Anyway, this a distinct discussion11:07
*** AnilV4 has quit IRC11:08
garyknova may not be the only user of quantum - for example ovirt or vmware in the future11:08
*** davidha has joined #openstack-dev11:09
salv-orlandoIdeally, I would have avoided at all having to define an extension that puts implementations details in the API. But unfortunately this seems unavoidable.11:09
garykyup. it is starting to sink in. you have been very helpful. i hope that i have not taken up too much time \11:09
*** adalbas has joined #openstack-dev11:09
salv-orlandonot at all… I will sen you an invoice anyway :p11:10
*** davidhadas has quit IRC11:11
garyksalv-orlando: :)11:11
salv-orlandoIt might be good we define the details of the binding data structure before moving on. Just to make sure everybody is on the same page11:11
garyksalv-orlando: i'll update the blueprint, add in some use cases and send a mail to the list. hopefully this could be a starting point to let others in and get their opinions11:12
garykdoes that make sense11:12
salv-orlandosure11:12
garykthanks11:13
*** vinilios has quit IRC11:16
*** bourke has quit IRC11:19
*** bourke has joined #openstack-dev11:19
digantaHi all  i want to fix some bug in openstack nova , can anyone tell me the procedure , i have requested for membership in openstack-cla , till now they have not approved me ,11:20
Davieydiganta: Have you created a patch already?11:21
zykes-diganta: have you done the http://wiki.openstack.org/CLA stuff ?11:21
*** simonmcc has joined #openstack-dev11:22
*** simonmcc has joined #openstack-dev11:23
*** afazekas has quit IRC11:23
digantai am following this link http://wiki.openstack.org/HowToContribute#If_you.27re_a_developer.2C_start_here:11:24
digantaand i have done Corporate Contributor License Agreement11:24
digantaActually i have requested for membership in openstack-cla , till now they have not approved me ,11:26
zykes-salv-orlando: what does a port create notification event send in it's payload?11:31
salv-orlandozykes-: frankly, I don't know, but I believe it's just the port id. The agents then use RPC to fetch details11:32
*** mindpixel has quit IRC11:32
salv-orlandosee DHCP agent for more info11:32
*** Tross has joined #openstack-dev11:32
zykes-salv-orlando: so for example DNSaaS would need to do a API call in order to get the info needed ?11:32
*** rushiagr has quit IRC11:33
*** rushiagr1 has joined #openstack-dev11:33
*** rushiagr1 is now known as rushiagr11:34
salv-orlandoI don't know… DNSaaS does not even integrate with Quantum, and I haven't looked at its code. So I cannot express an opinion. My previous comment was on internal use of notifications. You should look at ceilometer for how external services use Quantum notifications.11:34
*** sagar_nikam has quit IRC11:35
*** AnilV4 has joined #openstack-dev11:35
zykes-salv-orlando: does Qauntum send live notifications or ?11:36
*** rafaduran has quit IRC11:37
salv-orlandowhat do you mean by 'live'? Surely it's not sending dead notifications :p11:37
salv-orlandoI am going AFK now - see you in a bit...11:39
zykes-salv-orlando: ok:)11:39
*** rafaduran has joined #openstack-dev11:40
*** wenjianhn has quit IRC11:42
*** afazekas has joined #openstack-dev11:42
*** jaypipes has quit IRC11:50
digantazykes-:   i am following this link http://wiki.openstack.org/HowToContribute#If_you.27re_a_developer.2C_start_here:   and i have done Corporate Contributor License Agreement    Actually i have requested for membership in openstack-cla , till now they have not approved me11:51
*** milner has joined #openstack-dev11:53
*** simonmcc has quit IRC11:54
digantahow to add myself in contributors wiki , no option is there to put sign details in contributors page , can anyone help me ?11:56
zykes-diganta: sure11:56
zykes-Click on the "Edit" link I think it is11:56
*** milner has quit IRC11:58
*** milner has joined #openstack-dev11:59
*** Tross has quit IRC11:59
*** simonmcc1 has joined #openstack-dev12:03
*** koolhead17 has joined #openstack-dev12:03
*** milner has quit IRC12:03
*** milner has joined #openstack-dev12:04
*** boden has joined #openstack-dev12:07
*** uvg has quit IRC12:08
*** milner has quit IRC12:08
*** simonmcc has joined #openstack-dev12:08
*** jaypipes has joined #openstack-dev12:09
*** milner has joined #openstack-dev12:09
*** mjfork has joined #openstack-dev12:10
*** adalbas has quit IRC12:12
*** milner has quit IRC12:14
*** roge has joined #openstack-dev12:14
*** milner has joined #openstack-dev12:14
*** darjeeli_ has quit IRC12:16
*** davidhadas has joined #openstack-dev12:18
*** milner has quit IRC12:19
*** milner has joined #openstack-dev12:19
*** arbrandes has joined #openstack-dev12:20
*** davidha has quit IRC12:21
*** milner has quit IRC12:24
*** milner has joined #openstack-dev12:24
digantazykes-:  i have added myself in contributors wiki and after  that can u tell me the proceed further ?12:28
*** timello has joined #openstack-dev12:28
zykes-there's a team or so on launchpad.net also diganta12:29
*** milner has quit IRC12:29
*** milner has joined #openstack-dev12:29
*** adalbas has joined #openstack-dev12:33
*** simonmcc1 has quit IRC12:34
*** milner has quit IRC12:34
*** milner has joined #openstack-dev12:34
*** rdo has joined #openstack-dev12:37
rdohi guys, any ideas? http://paste.openstack.org/show/24763/    thanks12:37
zykes-looks rdo as it's having a import error ?12:37
*** vds` is now known as vds12:37
rdozykes-: yeah indeed, but I can't figure it out12:38
zykes-using devstack rdo ?12:38
rdoyeah, absolute latest master12:38
zykes-hmm, not sure then :)12:38
zykes-never used devstack ;p12:38
rdoah ;-)12:38
*** milner has quit IRC12:39
*** milner has joined #openstack-dev12:40
*** milner has quit IRC12:44
*** milner has joined #openstack-dev12:45
*** roadTripper has joined #openstack-dev12:46
*** sunilthaha has quit IRC12:47
*** sandywalsh has joined #openstack-dev12:48
zykes-sandywalsh: plans on supporting quantum / other then nova notifications ?12:49
sandywalshzykes-: absolutely ... plan is to get great high-level metrics from Nova first, then move out into other services12:49
*** milner has quit IRC12:49
*** winston-d has joined #openstack-dev12:50
*** rushiagr has quit IRC12:50
*** milner has joined #openstack-dev12:50
sandywalshzykes-: and, as always, patches welcome ;)12:50
zykes-sandywalsh: sadly i'm overwhelmed with other stuffs to do that :(12:50
zykes-my little billing stuff and networking stuff is killing me ;p12:50
*** rushiagr has joined #openstack-dev12:51
sandywalshzykes-: heh, I know, same boat for everyone12:51
zykes-:p12:51
sandywalshwe made some really great bug fixes yesterday for performance and long term stability of the worker last night. Looking forward to getting those committed shortly12:52
sandywalshbut first, caffeine12:52
garyksalv-orlando: can you please check https://review.openstack.org/#/c/15556/. it is an import from common.12:52
*** tgall_foo has joined #openstack-dev12:52
*** rushiagr has quit IRC12:52
*** dolphm has joined #openstack-dev12:54
*** milner has quit IRC12:55
*** milner has joined #openstack-dev12:55
*** sunilthaha has joined #openstack-dev12:57
*** egallen has left #openstack-dev12:59
*** simonmcc has quit IRC12:59
*** mrodden has joined #openstack-dev13:00
*** milner has quit IRC13:00
*** milner has joined #openstack-dev13:00
*** simonmcc has joined #openstack-dev13:02
*** sunilthaha has quit IRC13:03
*** milner has quit IRC13:05
*** milner has joined #openstack-dev13:05
*** tgall_foo has quit IRC13:07
*** simonmcc1 has joined #openstack-dev13:07
*** afazekas has quit IRC13:09
*** sagar_nikam has joined #openstack-dev13:09
*** milner has quit IRC13:10
*** milner has joined #openstack-dev13:10
*** dave_mcn has joined #openstack-dev13:12
*** ondergetekende has quit IRC13:14
*** milner has quit IRC13:15
*** ondergetekende has joined #openstack-dev13:15
*** milner has joined #openstack-dev13:16
*** annegentle__ has joined #openstack-dev13:16
*** alunduil has quit IRC13:17
*** littleidea has joined #openstack-dev13:17
*** johngarbutt has joined #openstack-dev13:18
*** AnilV4 has quit IRC13:18
*** littleidea has quit IRC13:19
*** annegentle__ has quit IRC13:20
*** dhellmann has quit IRC13:20
*** roz has joined #openstack-dev13:20
*** milner has quit IRC13:20
*** AnilV4 has joined #openstack-dev13:20
*** diganta has quit IRC13:20
*** milner has joined #openstack-dev13:21
*** sunilthaha has joined #openstack-dev13:21
*** rafaduran1 has joined #openstack-dev13:21
*** rafaduran1 has left #openstack-dev13:22
*** dprince has joined #openstack-dev13:22
*** dims has quit IRC13:22
*** rafaduran has quit IRC13:22
*** afazekas has joined #openstack-dev13:24
*** simonmcc1 has quit IRC13:24
*** mjfork has quit IRC13:25
*** milner has quit IRC13:25
*** milner has joined #openstack-dev13:26
*** jaypipes has quit IRC13:28
*** kgriffs1 has joined #openstack-dev13:30
garykamotoki: hi13:30
amotokigaryk: hi13:30
*** milner has quit IRC13:31
garykamotoki: can we get https://review.openstack.org/#/c/15556/ through and then i'll do as you suggested with the ordering for https://review.openstack.org/#/c/15557/13:31
*** mmagr has quit IRC13:31
garykamotoki: does this make sense?13:31
*** milner has joined #openstack-dev13:31
*** samkottler|out is now known as samkottler13:31
amotokigaryk: It makes sense. You can do it anytime you want.13:32
amotokigaryk: I'll +2 for the first one.13:32
garykamotoki: i'll do it now as yong is using this13:32
*** simonmcc1 has joined #openstack-dev13:34
amotokigaryk: I approved https://review.openstack.org/#/c/15556/13:35
*** milner has quit IRC13:36
*** milner has joined #openstack-dev13:36
*** simonmcc has quit IRC13:36
*** imsplitbit has joined #openstack-dev13:37
*** nunosantos has joined #openstack-dev13:39
*** milner has quit IRC13:41
*** milner has joined #openstack-dev13:41
*** ishakhat has joined #openstack-dev13:41
*** jrodom has joined #openstack-dev13:42
*** sniperd has joined #openstack-dev13:43
*** darjeeling has joined #openstack-dev13:43
openstackgerritA change was merged to openstack/quantum: Add loopingcall from openstack-common  https://review.openstack.org/1555613:43
*** Tross has joined #openstack-dev13:45
*** milner has quit IRC13:46
*** milner has joined #openstack-dev13:46
EmilienMzykes-: https://review.openstack.org/1555913:49
*** nati_ueno has joined #openstack-dev13:50
*** milner has quit IRC13:51
*** milner has joined #openstack-dev13:51
*** simonmcc has joined #openstack-dev13:53
*** dims has joined #openstack-dev13:53
*** Gordonz has joined #openstack-dev13:53
garykamotoki: done. thanks.13:54
*** egallen has joined #openstack-dev13:55
*** milner has quit IRC13:56
*** milner has joined #openstack-dev13:56
*** radez_g0n3 is now known as radez13:57
*** arbrandes has quit IRC13:57
*** arbrandes has joined #openstack-dev13:58
*** Gordonz has quit IRC14:00
*** nati_ueno has quit IRC14:00
*** Gordonz has joined #openstack-dev14:00
amotokigaryk: one question about review process.14:00
garykamotoki: yes, how can i help14:01
amotokiI checked https://review.openstack.org/#/c/15557/, but accidentally I add +2 and approved14:01
*** milner has quit IRC14:01
amotokisince yong already +2 for the patch set.14:01
*** milner has joined #openstack-dev14:01
*** eglynn is now known as hungry-eglynn14:01
amotokigaryk: how should I do in such case?14:01
garykamotoki: to be honest i am not exactly sure. accidents happen (i have also done this by mistake in the past).14:02
*** nati_ueno has joined #openstack-dev14:02
amotokigaryk: thnx, I will do more carefully from now on.14:03
garykamotoki: just keep on doing what you are doing - which is great work!14:03
*** pabelanger has joined #openstack-dev14:04
*** networkstatic has quit IRC14:04
*** jrodom has quit IRC14:04
*** tmishler has joined #openstack-dev14:06
openstackgerritA change was merged to openstack/quantum: Add eventlet_backdoor and threadgroup from openstack-common  https://review.openstack.org/1555714:06
*** milner has quit IRC14:06
*** milner has joined #openstack-dev14:06
*** anniec has joined #openstack-dev14:07
*** nati_ueno has quit IRC14:07
*** nati_ueno has joined #openstack-dev14:08
*** koolhead17 has quit IRC14:09
*** arata has quit IRC14:10
*** kbringard has joined #openstack-dev14:10
*** milner has quit IRC14:11
*** anniec has quit IRC14:11
*** anniec has joined #openstack-dev14:11
*** milner has joined #openstack-dev14:12
*** tgall_foo has joined #openstack-dev14:13
*** tgall_foo has quit IRC14:13
*** tgall_foo has joined #openstack-dev14:13
*** milner has quit IRC14:16
*** milner has joined #openstack-dev14:16
*** e1mer has quit IRC14:17
zykes-nice EmilienM14:20
EmilienMzykes-: :)14:21
zykes-a bit busy14:21
zykes-some forgotten wedding plan stuff :(14:21
*** milner has quit IRC14:21
*** milner has joined #openstack-dev14:21
*** koolhead17 has joined #openstack-dev14:22
*** aeperezt has joined #openstack-dev14:22
*** jcru has joined #openstack-dev14:22
*** alunduil has joined #openstack-dev14:24
*** milner has quit IRC14:26
*** milner has joined #openstack-dev14:26
*** japage has joined #openstack-dev14:27
*** alunduil has quit IRC14:27
*** alunduil has joined #openstack-dev14:28
*** zing has quit IRC14:28
*** tgall_foo has quit IRC14:29
*** m4xmr has joined #openstack-dev14:30
*** milner has quit IRC14:31
*** m4xmr has left #openstack-dev14:31
*** milner has joined #openstack-dev14:31
*** mmagr has joined #openstack-dev14:32
*** simonmcc1 has quit IRC14:35
*** milner has quit IRC14:35
*** milner has joined #openstack-dev14:36
*** hungry-eglynn is now known as eglynn14:38
*** dolphm has quit IRC14:39
*** rpedde_away is now known as rpedde14:40
*** milner has quit IRC14:40
*** networkstatic has joined #openstack-dev14:40
*** milner has joined #openstack-dev14:40
*** dspano has joined #openstack-dev14:42
*** davidhadas has quit IRC14:44
*** milner has quit IRC14:45
*** milner has joined #openstack-dev14:46
sdagueso if I'm poking around with the API with curl to do the nova v2 audit, is there a way to get keystone to use tokens that are slightly less huge?  (more or less latest devstack)14:49
*** milner has quit IRC14:50
*** jaypipes has joined #openstack-dev14:50
*** milner has joined #openstack-dev14:51
*** markvoelker has joined #openstack-dev14:51
*** TerryH has joined #openstack-dev14:52
*** utlemming has joined #openstack-dev14:52
*** milner has quit IRC14:55
*** nati_uen_ has joined #openstack-dev14:56
*** markmcclain has joined #openstack-dev14:56
*** milner has joined #openstack-dev14:56
*** simonmcc has quit IRC14:58
*** Tross has quit IRC14:59
*** nati_ueno has quit IRC14:59
*** anniec has quit IRC15:00
nati_uen_ping amotoki15:00
*** john5223 has joined #openstack-dev15:01
*** milner has quit IRC15:01
*** milner has joined #openstack-dev15:01
*** cbaeseman has quit IRC15:02
dimssdague, you mean less number of chars?15:03
*** simonmcc has joined #openstack-dev15:03
sdaguedims: yeh, the new pki stuff means about half a screen for the token15:03
*** tgall_foo has joined #openstack-dev15:04
*** tgall_foo has quit IRC15:04
*** tgall_foo has joined #openstack-dev15:04
sdaguewhich is kind of a pain to use in bash :)15:04
*** andrewbogott_afk is now known as andrewbogott15:04
*** mtreinish has joined #openstack-dev15:05
*** milner has quit IRC15:06
*** jimfehlig has joined #openstack-dev15:06
*** milner has joined #openstack-dev15:06
*** aloga has quit IRC15:08
*** aloga has joined #openstack-dev15:09
*** simonmcc has left #openstack-dev15:09
*** milner has quit IRC15:10
*** milner has joined #openstack-dev15:11
*** sniperd has quit IRC15:13
*** rnirmal has joined #openstack-dev15:15
*** milner has quit IRC15:16
*** milner has joined #openstack-dev15:16
*** maurosr has quit IRC15:16
*** markwash has joined #openstack-dev15:16
*** nati_uen_ has quit IRC15:18
*** arata has joined #openstack-dev15:19
*** milner has quit IRC15:20
*** milner has joined #openstack-dev15:21
*** dolphm has joined #openstack-dev15:22
*** jimp has joined #openstack-dev15:22
*** milner has quit IRC15:25
jaypipesnotmyname: hey, did you need to chat about tempest? saw a mention from yesterday. hit me up if you need to chat.15:26
*** milner has joined #openstack-dev15:26
*** gongysh has quit IRC15:26
*** samkottler is now known as samkottler|bbl15:27
*** maurosr has joined #openstack-dev15:28
*** simonmcc has joined #openstack-dev15:28
*** milner has quit IRC15:30
*** afazekas has quit IRC15:31
*** dolphm has quit IRC15:33
*** otherwiseguy has joined #openstack-dev15:34
*** cp16net is now known as cp16net|away15:35
*** cp16net|away is now known as cp16net15:35
*** bpiatt has quit IRC15:36
*** markwash has quit IRC15:36
*** dachary has quit IRC15:41
*** gyee has joined #openstack-dev15:43
*** armaan has joined #openstack-dev15:44
*** ishakhat has quit IRC15:46
*** jcru is now known as jcru|away15:47
*** mrodden has quit IRC15:50
bodenayoung -- hi, quick question... should a GET /tokens/{tokenId} work for a PKI based token?15:51
ayoungboden, yes15:52
ayoungboden, but you should be passing in the hash15:52
ayoungfull token is too long for some HTTP impls.15:52
garykayoung: pong15:52
ayounggaryk, can you provide more info about what you were seeing?15:53
ttxnotmyname: 1.7.5 milestone-proposed branch & tarball up15:53
garykayoung: sure. basically when running devstack with quantum the quantum service does not start. the problem is  keystone.middleware.auth_token [-] Invalid user token - rejecting request15:53
ayounggaryk, do you see the request in keystone?15:54
*** durian has quit IRC15:54
garykayoung: i did not investigate. sorry15:54
ayounggaryk, tokens are marked invalid for several reasons, and we don't report the variations to the end user15:54
ayounggaryk, who reported it?15:55
garykayoung: https://bugs.launchpad.net/quantum/+bug/107554115:55
uvirtbot`Launchpad bug 1075541 in quantum "quantum command fails with Unauthorized 401 when keystone token_format is PKI" [Medium,Confirmed]15:55
garykayoung: it happened to me with a clean devstack installation.15:56
notmynamettx: thanks15:56
ayounggaryk, once you reproduce, let me know and I'll help you debug.  Start by making sure you can talk to keystone and get a token from the command line, and take if from there. My guess is the PKI validation is breaking down due to a permission issue, perhaps for the directory that stores the cert files15:58
garykayoung: ok. i'll reproduce and then try and provide access to the machine for you15:59
*** armaan has left #openstack-dev15:59
ayounggaryk, Oh no, you are not getting off that easily.  Reproduce, and then I'll teach you to fish.15:59
ayounghttp://www.brainyquote.com/quotes/quotes/t/terrypratc128130.html16:00
garykayoung: i was planning on putting my feet on the desk and breaking out a nice cold beer :)16:00
garykayoung: oy vey. please let me know what commands i should invoke16:01
*** mrunge has quit IRC16:01
*** reidrac has quit IRC16:03
*** lloydde has joined #openstack-dev16:03
ayounggaryk, ./unstack.sh ; ./stack.sh  to start.  ×¦×—קוק16:03
garykayoung: :)16:04
ayounggaryk, OK,  so assuming you are seeing the problem again, start by getting a token from keystone16:04
ayoungI'm going to assume that works, though.16:04
garykayoung: ok.16:04
*** jrodom has joined #openstack-dev16:04
*** dolphm has joined #openstack-dev16:05
*** dolphm has quit IRC16:05
ayounggaryk, paste the keystone log  from screen (usually 3)16:05
*** dolphm has joined #openstack-dev16:05
*** dolphm has quit IRC16:05
ayoungthere should be lines in there where the token was requested, and where the certs etc were fetched16:05
*** jdurgin1 has joined #openstack-dev16:05
*** dolphm has joined #openstack-dev16:05
*** iccha has quit IRC16:06
garykayoung: http://paste.openstack.org/show/24802/16:06
*** iccha has joined #openstack-dev16:06
ayounggaryk, "GET /v2.0/tokens/revoked HTTP/1.1"   so it is attempting to fetch the revocation list16:07
garykayoung: i did keystone token-get - got a whole lot of data printed to the screen16:07
ayounggaryk, garyk yeah that is later in the log16:07
*** s0mik has quit IRC16:07
*** iccha has quit IRC16:07
*** iccha has joined #openstack-dev16:07
ayounglast line  "POST /v2.0/tokens HTTP/1.1"16:07
*** hemna_ has quit IRC16:07
garykayoung: ok. please forgive my silly questions16:07
*** dhellmann has joined #openstack-dev16:08
ayounggaryk, no problem at all16:08
*** iccha has quit IRC16:08
ayoungthis is important for people to understand.16:08
garykayoung: this is what was returned - http://paste.openstack.org/show/24803/16:08
ayounggaryk, what does the stack.sh output look like above where the verify of the token failed?16:09
garykayoung: i'll have to run it again. basically it gets to running quantum which fails .16:10
*** dolphm has quit IRC16:10
*** dolphm has joined #openstack-dev16:10
ayounggaryk, so the files get cached, probably in ~/quantum-signing16:10
*** yamahata has quit IRC16:11
ayounggaryk, does that directory exist, and is there anything in it?16:11
*** iccha has joined #openstack-dev16:11
*** yamahata has joined #openstack-dev16:12
garykayoung: i do not see a directory of that name. where is the name decided?16:12
garykayoung: more specifically the path?16:12
garykayoung: vasbyt!16:13
ayounggaryk, when you start up auth_token middleware,  it is in the constructor, I'll get you the line16:13
openstackgerritA change was merged to openstack/glance: Delete from store after registry delete.  https://review.openstack.org/1556416:14
*** rushiagr has joined #openstack-dev16:14
*** timello has quit IRC16:14
*** timello has joined #openstack-dev16:14
ayounggaryk, ah, line 208 of auth_token middleware:          self.signing_dirname = self._conf_get('signing_dir')16:14
ayoung        if self.signing_dirname is None:16:14
ayoung            self.signing_dirname = '%s/keystone-signing' % os.environ['HOME']16:14
ayounggaryk, so probably it is headed to ~/keystone-signing,  which, if it exists and is owned by a different user, might not be writable or something.  SHould work for devstack, though16:15
garykayoung: ah yes, that dir exists - empty16:16
*** jrodom has quit IRC16:16
*** jrodom has joined #openstack-dev16:16
garykayoung: http://paste.openstack.org/show/24804/ is the devstack output16:17
*** sniperd has joined #openstack-dev16:18
ayounggaryk, What are the permissions on that directory?  I'd try deleting that directory and restarting devstack.  I'd be interested to see if it gets created.16:19
*** sacharya has joined #openstack-dev16:19
*** colinmcnamara has joined #openstack-dev16:20
garykdrwx------  2 openstack openstack      4096 Aug  8 10:20 keystone-signing/16:20
garykayoung: ill delete16:20
*** simonmcc has quit IRC16:20
*** samkottler|bbl is now known as samkottler16:22
*** timello has quit IRC16:22
*** gatuus has joined #openstack-dev16:23
garykayoung: no - still fails after directory is deleted16:24
*** davidhadas has joined #openstack-dev16:24
*** simonmcc has joined #openstack-dev16:24
garykayoung: should it be empty16:24
ayounggaryk, so the directory is recreated, but not populated?16:25
garykayoung: correct16:26
garykayoung: i can see the fish swimming around the hook but they are not biting16:26
ayounggaryk, what user is quantum running as?  It looks like the directory was created by the openstack user16:26
*** danwent has joined #openstack-dev16:26
garykayoung: it is running as an openstack user (not root)16:27
*** sunilthaha has quit IRC16:27
*** aeperezt has quit IRC16:29
*** mrodden has joined #openstack-dev16:29
ayounggaryk, you cn enable more logging.16:29
*** utlemming has quit IRC16:29
*** jcru|away is now known as jcru16:29
ayoungthe question is how.16:29
garykayoung: my fisrt question would be "why?".16:30
garykayoung: stam16:30
*** dolphm has quit IRC16:30
ayounggaryk, somewhere, the cert fetch is failing16:31
*** rushiagr1 has joined #openstack-dev16:31
ayounggaryk, and we don;t have enough information to figure out why16:31
garykayoung: ok.16:31
ayoungin the keystone server,  we have seen that it is fetching the revocation list,  but I have not seen a fetch of the CA or signing cert16:31
*** rushiagr2 has joined #openstack-dev16:32
*** rushiagr1 has quit IRC16:32
*** aeperezt has joined #openstack-dev16:32
*** datsun180b has joined #openstack-dev16:32
ayoungI assumed they happend prior to the top of your paste, but since they are not in the directory, perhaps it is worth looking at why16:32
*** rushiagr has quit IRC16:33
*** rushiagr2 has left #openstack-dev16:33
*** sacharya has quit IRC16:33
*** utlemming has joined #openstack-dev16:33
garykayoung: i did the following. updated keytsone conf to have debugging and logging. restarted.16:33
garykrestarted quantum. quantum hang on waiting for keystone - 2012-11-07 11:12:52 31425 INFO keystone.middleware.auth_token [-] Starting keystone auth_token middleware16:34
garyk2012-11-07 11:12:52 31425 INFO keystone.middleware.auth_token [-] Using /home/openstack/keystone-signing as cache directory for signing certificate16:34
ayounggaryk, problem is, the logging we need is in auth_token middleware, which is running in quantum16:34
*** sniperd has quit IRC16:34
garykayoung: silly me.16:34
ayounggaryk, that looks good.16:35
garykayoung: set the relevant flags and restarted the service - nuddah16:35
garykayoung: when i do a quantum cli command i get the auth problem. i am sorry but i have to leave. i'll be on line a little later16:36
ayounggaryk, OK , we'll take it up from there.  I'll try it here, too16:37
garykayoung: thanks chief16:37
* garyk wonders if ayoung is cursing16:38
*** SlickNik has joined #openstack-dev16:38
*** dolphm has joined #openstack-dev16:39
*** alexpilotti has quit IRC16:39
openstackgerritA change was merged to openstack/cinder: Changes bit mode of zadara.py to 644  https://review.openstack.org/1554916:43
openstackgerritA change was merged to openstack/cinder: Port openstack-common/uuidutils to Cinder  https://review.openstack.org/1546216:43
*** andrewbogott is now known as andrewbogott_afk16:44
*** garyk has quit IRC16:49
jgriffithdhellmann: ping16:50
*** ndipanov has quit IRC16:50
jgriffithdhellmann: aren't you supposed to be at lunch with preston?16:50
*** lloydde has quit IRC16:52
dtroyerayoung, garyk:  the problem with the signing_dir cert cache was exposed when I split them up a while back and gave each service its own directory in devstack (/var/cache/<service>).  cinder and now possibly quantum broke because they don't get the cached cert files properly.  before, nova or glance did it first and everyone was happy because they shared a signing dir16:55
*** briancline has quit IRC16:55
*** sacharya has joined #openstack-dev16:56
*** ndipanov has joined #openstack-dev16:58
*** simonmcc has quit IRC16:58
dtroyervishy found the difference between nova and cinder last night was in bin/cinder-api to add os=False as an arg to eventlet.monkey_patch().  We think this is really masking the problem as the return code from the popen for openssl isn't always being picked up correctly.  It feels like a race somewhere in the exec bits16:59
ayoungdtroyer, his code clearly logged that it is trying to use ~/keystone-signing16:59
*** simonmcc has joined #openstack-dev16:59
dtroyerthat's just the signing_dir in the paste.ini file16:59
dtroyerI probably didn't set that in quantum for devstack16:59
ayoungdtroyer, so it doesn't explain why there is not even an attempt to fetch the certs16:59
dtroyerit fails there because ~keystone_signing is empty17:00
ayoungdtroyer, I'm trying to get my repos back into a stable state to test out.  I'll let you know once Ican reproduce17:00
*** aeperezt has quit IRC17:00
dtroyerone cheap work-around would be to set signing_dir to /var/cache/nova in the paste.ini file17:01
ayoungdolphm, running unit tests fails for me against master:  http://fpaste.org/QOeS/17:01
ayoungthis is now17:01
ayoungnew17:01
*** jtran has joined #openstack-dev17:01
ayoungKeystone client test.17:02
*** heckj has joined #openstack-dev17:02
*** vipul has joined #openstack-dev17:02
dolphmayoung: looking17:02
*** mrodden has quit IRC17:02
* heckj waves17:02
ayoungheckj,  running unit tests fails for me against master:  http://fpaste.org/QOeS/17:03
*** amotoki has quit IRC17:03
ayoungheckj, errors=3 when running test_keystoneclient17:03
*** littleidea has joined #openstack-dev17:03
ayoungheckj, that is master17:03
*** sagar_nikam has quit IRC17:04
*** simonmcc1 has joined #openstack-dev17:04
*** jrodom has quit IRC17:04
heckjjust kicking in my tests on keystone master right now17:04
dolphmayoung: just pulled and UTR17:05
ayoungheckj, just for grins, blowing away my venv and trying 100% from scratch17:05
*** jrodom has joined #openstack-dev17:05
ayoungdolphm, UTR?17:05
*** simonmcc has quit IRC17:05
*** gatuus has quit IRC17:05
dolphmayoung: unable to reproduce17:06
heckjayoung: still churning on mine...17:06
dolphmayoung: wiping away pyc's and trying again, just in case17:06
dolphmayoung: maybe clear your vendor/ folder and let it rebuild that?17:06
ayoungdolphm, did that, too17:07
heckjayoung: Unable to repro - totally clean setup, new dev, fresh checkout17:07
*** andrewbogott_afk is now known as andrewbogott17:07
*** dhellmann has quit IRC17:07
ayoungOK,  something about my setup.  Good to know17:07
heckjRan 717 tests in 239.262s17:08
heckjayoung: I heard dtroyer locked down the issue with periodic cinder failings in devstack last night17:08
heckjayoung: turned out to be eventlet monkeypatching didn't cover os17:08
dolphmdtroyer: yay17:08
ayoungheckj, dolphm yeah, I'm clear now that I nuked the venv.17:09
jgriffithheckj: Yup, he and vishy nailed it17:09
ayoungUgh.  Eventlet is causing way too much churn17:09
heckjjgriffith: that's a real bitch of a bug to nail down17:09
jgriffithheckj: https://review.openstack.org/#/c/15541/17:09
jgriffithheckj: haha, no kidding.  I messed with that stupid thing all Monday night17:10
*** mrodden has joined #openstack-dev17:10
dolphmayoung: heckj: uhoh ... i nuked vendor/ and am now getting 3 test failures as well ...17:10
*** mrodden1 has joined #openstack-dev17:10
*** markmcclain has quit IRC17:10
*** lloydde has joined #openstack-dev17:10
*** sacharya has quit IRC17:10
ayoungdolphm, heckj there is something fragile in the magic linking our unit tests with the keystoneclient17:11
dolphmayoung: yeah i think that's all it is, it doesn't even look like it downloaded keystoneclient17:12
ayoungdolphm, BTW if you look at the sql-upgrade test,  I think it points the way to completeing the sqlite in memory transition for the rest of the tests17:12
*** Mandell has joined #openstack-dev17:13
dolphmayoung: link?17:13
ayoungdolphm, where did that work bog down again?  Was it the client tests, and needing a way to keep the migrate engine alive?17:13
ayoungdolphm, 1 sec17:13
ayounghttps://review.openstack.org/#/c/15543/17:14
ayoungdolphm, heckj new version of that ^^ will come in a moment. I wanted to make sure I was testing all of the identity tables.17:14
*** mrodden has quit IRC17:14
*** alexpilotti has joined #openstack-dev17:15
heckjayoung, dolphm: worked out a way to fake out sequences of HTTP responses for the auth_token middleware testing the cached admin_token bug17:16
*** hemna has joined #openstack-dev17:16
heckjworking on finishing that up this AM if I can17:16
dolphmayoung: honestly can't remember where i left off... i think i put a hack in keystone.common.sql to automatically build the db if you provided an in-memory connection string, and then ran into another issue17:16
*** gatuus has joined #openstack-dev17:18
openstackgerritA change was merged to openstack/cinder: Splitting out volume drivers in driver.py  https://review.openstack.org/1503817:20
*** markwash has joined #openstack-dev17:21
*** simonmcc1 has left #openstack-dev17:21
*** apevec has quit IRC17:23
*** spiffxp has joined #openstack-dev17:27
*** sniperd has joined #openstack-dev17:28
dolphmayoung: left some comments on the migration tests17:28
ayoungdolphm, good suggestings.17:29
*** mmagr has quit IRC17:29
*** sacharya has joined #openstack-dev17:31
*** anniec has joined #openstack-dev17:32
*** gatuus has quit IRC17:32
*** garyk has joined #openstack-dev17:33
*** gatuus has joined #openstack-dev17:33
*** sacharya has quit IRC17:34
*** maploin has quit IRC17:34
*** sacharya has joined #openstack-dev17:35
heckjayoung: dolphm: ready for review: https://review.openstack.org/#/c/15242/17:36
*** otherwiseguy has quit IRC17:37
ayoungheckj, you know someone is going to want to make the 'soon' value configurable17:37
*** mnewby has joined #openstack-dev17:37
heckjayoung: yeah - it'll be a reasonable thing to add at some point17:38
*** PaulM has quit IRC17:38
heckjayoung: mostly wanted to fix this core issue and deal with tweaking once henry has moved it to keystoneclient17:38
ayoungheckj, ooh, I like that Fake Response stack17:38
heckjayoung: bcwaldon suggested it - it's something gabrielhurley did in glance testing17:39
heckjtotally stole their code for it :-)17:39
*** pabelanger has quit IRC17:39
ayoungheckj, OK,  gonna make sure the tests pass on it, and let it sink in for a few minutes, but LGTM17:41
*** epim has joined #openstack-dev17:43
openstackgerritA change was merged to openstack/nova: Fix bandwidth polling exception.  https://review.openstack.org/1542617:44
*** metral has joined #openstack-dev17:45
eglynnmarkwash: there?17:45
*** jcmartin has joined #openstack-dev17:47
markwasheglynn: hey17:47
markwashyeah, the test I think has to be different for stable17:47
*** zing has joined #openstack-dev17:48
markwashsince the behavior is a bit different based on some db api fixes I put into master17:48
eglynnyep, as you see I messed around initally with making the iumage protected to trigger the DELETE failure17:48
eglynnbefore realizing that a protected image won't even expose the bug17:48
eglynnmarkwash: so what's the best way to trigger the DELETE failure on stable/folsom?17:49
*** jcmartin has quit IRC17:50
eglynnmarkwash: if this can't be addressed quickly, we should consider merging initially to stable/folsom without the unit test17:50
*** jcmartin has joined #openstack-dev17:50
*** Tross has joined #openstack-dev17:51
eglynnmarkwash: seeing as it's already landed on stable/essex and master17:51
*** s0mik has joined #openstack-dev17:51
markwasheglynn: actually, I was mistaken, the requirement is to get auth working in the tests17:52
markwasheglynn: I'll see if I can figure out a quick way to trigger the bug17:52
eglynnmarkwash: cool, thanks!17:52
markwasheglynn: but if not feel free to just skip the test. I think the existing coverage is enough to make sure its not doing something drastically wrong17:53
*** winston-d has quit IRC17:53
eglynnmarkwash: so how about we go ahead now without the unit test, and then you follow up with another patch on stable/folsom with a modified unit?17:54
vishyayoung: ping17:54
*** Tross has quit IRC17:55
*** sniperd has quit IRC17:56
ayoungvishy, yes?17:56
*** zodiak has quit IRC17:56
vishyayoung: couple of questions: a) why is the cache_timeout for the revocation list 0 ?17:56
*** networkstatic has quit IRC17:58
*** jrodom has quit IRC17:58
ayoungvishy, hmm, that looks wrong.  Let me see if I can pull up some discussion why we went with that.  Comment indicates we were going for 5 minutes,17:58
*** dprince has quit IRC17:59
vishyayoung: next question: https://bugs.launchpad.net/nova/+bug/106491417:59
uvirtbot`Launchpad bug 1064914 in nova "Able to access ec2 resources with out a user-role" [Undecided,New]17:59
*** riskable has joined #openstack-dev17:59
*** epim has quit IRC18:00
*** adjohn has joined #openstack-dev18:00
*** derekh has quit IRC18:00
ayoungvishy, on 1064914  is there a token revocation happening?  Is this with the SQL back end?18:00
*** zodiak has joined #openstack-dev18:00
*** jrodom has joined #openstack-dev18:00
vishyit seems like there isn't a role check going on in the ec2 endpoint18:01
*** jrodom has quit IRC18:01
vishyit looks like a current devstack so i assume yes18:01
vishyayoung: haven't had a chance to replicate yet18:01
*** jrodom has joined #openstack-dev18:01
*** cp16net is now known as cp16net|away18:02
ayoungheckj, on ec2,  would that be going through the contrib code?  \18:02
ayoungkeystone/contrib/ec2?18:03
heckjayoung: sec, lookin18:03
vishyayoung: i think i see the issue18:03
*** jdurgin1 has quit IRC18:03
vishyayoung: in contrib/ec2/core.py18:04
vishywe get the the tenant and user from the creds obect18:04
*** timello has joined #openstack-dev18:04
vishythen we get metadata to construct the roles18:05
ayoungvishy, yeah, that was what I was thinking, that we need to have a single code source for authenticate, and right now there are duplicates18:05
ayoungthe main one is in service.py,  but ec2 bypasses that18:05
vishybut there is no check to see if there are any roles before creating the token18:05
heckjayoung: yep, duplicated18:05
heckjayoung: or at least significantly different paths that should be consolidated a bit18:05
*** winston-d has joined #openstack-dev18:05
*** timello has quit IRC18:06
*** cp16net|away is now known as cp16net18:06
vishyayoung: so essentially you get a valid token with no roles18:06
*** timello has joined #openstack-dev18:06
ayoungvishy, legitimate bug.18:06
*** littleidea has quit IRC18:07
vishyayoung: ok i will retarget to keystone18:12
*** EmilienM has left #openstack-dev18:12
vishyayoung: also did you see my comment on green subprocess?18:13
vishyon the ml18:13
*** ndipanov has quit IRC18:13
*** dolphm has quit IRC18:15
*** mnewby_ has joined #openstack-dev18:15
*** mnewby__ has joined #openstack-dev18:16
*** syst3mw0rm has quit IRC18:17
*** winston-d has quit IRC18:18
*** mnewby has quit IRC18:18
*** mnewby__ is now known as mnewby18:18
*** syst3mw0rm has joined #openstack-dev18:18
doudedansmith: ping18:19
ayoungvishy, yes haven't replied yet18:19
ayoungvishy, the answer is that the logic for that is wrong18:19
ayoungthat logic is "if eventlet is available, use it"18:20
*** mnewby_ has quit IRC18:20
ayoungbut if you are trying to run Keystone in HTTPD, but eventlet happens to be installed because you are running say, nova on the same server, it will pick up eventlet from the site-libs18:20
*** markmcclain has joined #openstack-dev18:21
ayoungmnewby, do you remember why we set the cachetimeout to 0 seconds when doing the revocation  work?18:21
vishyayoung: ah gotcha, so it needs to be set via config18:22
*** dhellmann has joined #openstack-dev18:22
mnewbyayoung: I'm not sure why it would need to be so low.18:22
mnewbyayoung: Wouldn't that effectively prevent caching?18:23
ayoungmnewby, yeah, it seems like a mistake, but I remember setting that up18:23
ayoungand can't remember the justification18:23
ayoungcache_timeout = datetime.timedelta(seconds=0)18:23
ayoungseems like it should be18:23
*** darraghb has quit IRC18:23
ayoungcache_timeout = datetime.timedelta(minutes=2)18:23
mnewbyayoung: Is it not configurable?18:23
mnewbyayoung: what file is that in?18:24
markwasheglynn: I think you should find a fixed version18:24
ayoungmnewby, keystone/middleware/auth_token.py18:24
markwasheglynn: all I did was add my other FakeAuthMiddleware patch as a dependency18:24
ayoungline 24518:24
* eglynn looking ...18:24
markwasheglynn: that patch only modifies testing infrastructure so I'm hoping you'll find it okay to add to stable/folsom18:24
markwasheglynn: let me know if anything is amiss! thanks!18:25
*** dprince has joined #openstack-dev18:25
mnewbyayoung: The world's longest init function...18:25
mnewbyayoung: I would suggest adding a configuration option 'revocation_cache_time' or something like that, in seconds.18:26
*** littleidea has joined #openstack-dev18:26
eglynnmarkwash: looks reasonable, approving18:26
mnewbyayoung: It strikes me as a value that should be set as low as possible, and it will depend on the deployment as to what that would be.18:26
*** zing has quit IRC18:27
ayoungmnewby, I think the idea was that people were screaming for immediate revocation, we were giving that to them by default.18:27
garykdanwent: ping18:27
*** networkstatic has joined #openstack-dev18:27
danwentgaryk: hey18:28
garykdanwent: you want me to address the comments in should i leave them for a later stage?18:28
danwenti'm fine if we just copy them into a bug and merge as is.18:28
mnewbyayoung: Well, the intent is good.  But not caching the revocation list would end up negating most of the benefit of pki, since every call would have to hit keystone anyway.18:28
mnewbyayoung: even 2 seconds would provide relief on a large system.18:29
danwentlet's see if markmcclain is ok with that18:29
garykdanwent: ok, thanks.18:29
ayoungmnewby, vishy, regardless of the default, it cachetime needs to be configurable.  I'll open a ticket for it18:29
garykdanwent: i am going to crash soon - it has been along day18:29
mnewbyayoung: Sounds good.18:29
garykdanwent: i have a patch for the qpid issue hope it gets through common.18:29
markmcclaindanwent: ok with what?18:29
danwentgaryk: ah, cool.  i'm making a tweak to quantum to optimize the quota query that edgar pointed out.18:30
garykdanwent: great! it is certainly something that we'll need to backport (i'll add it to my never ending list)18:30
danwentmarkmcclain: latest version of API validation patch from gary.  I'm ok merging as is, though there are a few things I'd like to tweak, but i'm ok doing it as a separate bug.18:30
*** zing has joined #openstack-dev18:31
ayoungvishy https://bugs.launchpad.net/keystone/+bug/1076083  please feel free to set its priority18:31
uvirtbot`Launchpad bug 1076083 in keystone "revocation list cache times out immeditately" [Undecided,New]18:31
*** colinmcnamara has quit IRC18:31
danwentgaryk: yeah… we haven't really been looking at folsom scale yet, as most people are still using essex, so I wouldn't be surprised if we find more soon.18:32
markmcclaindanwent, garyk: I'm ok with it18:32
markmcclainand filing sep. bugs makes sense18:32
danwentmarkmcclain: ok, let's merge the puppy.  i'll file a bug for my comments.18:32
*** sniperd has joined #openstack-dev18:32
*** nati_ueno has joined #openstack-dev18:33
garykdanwent: markmcclain: thanks!18:33
garykthe back port is going to be a challenge as i had to do a number of merges due to changes upstream. oh well.18:34
*** jpich has quit IRC18:35
*** nati_uen_ has joined #openstack-dev18:35
*** littleidea has quit IRC18:35
*** zing has quit IRC18:35
*** anniec has quit IRC18:38
*** nati_ueno has quit IRC18:38
*** riskable has quit IRC18:41
*** otherwiseguy has joined #openstack-dev18:45
*** arata has quit IRC18:46
*** colinmcnamara has joined #openstack-dev18:46
*** simonmcc has joined #openstack-dev18:49
*** pixelbeat has quit IRC18:50
*** sniperd_ has joined #openstack-dev18:50
*** sniperd has quit IRC18:51
*** zaitcev has joined #openstack-dev18:59
openstackgerritA change was merged to openstack/quantum: Ensure that HTTP 400 codes are returned for invalid input  https://review.openstack.org/1421918:59
*** cp16net is now known as cp16net|away19:00
ayoungheckj, dolphm_zzz https://review.openstack.org/#/c/15403/  it is not a complete refactoring, but not a bad checkpoint for authenticate.19:01
lifelessttx: btw, you realise running arbitrary python as root is a horrible big hole you can drive /anything/ through ?19:02
lifelessttx: how do you plan to solve the sandbox problem ?19:02
*** doude has quit IRC19:04
*** doude has joined #openstack-dev19:05
doudeHOST doude19:07
*** patelna has joined #openstack-dev19:07
*** vipul has quit IRC19:07
*** jcmartin has quit IRC19:09
*** PaulM has joined #openstack-dev19:12
*** dolphm has joined #openstack-dev19:15
*** durian has joined #openstack-dev19:15
*** otherwiseguy has quit IRC19:19
*** dolphm has quit IRC19:19
*** esp2 has joined #openstack-dev19:20
*** adalbas has quit IRC19:22
*** timello has quit IRC19:24
sdaguedtroyer when you get around wanted to ping you about a philosophy question on devstack19:25
*** koolhead17 has quit IRC19:28
*** dolphm has joined #openstack-dev19:30
*** durian has quit IRC19:32
*** doude has quit IRC19:33
*** doude has joined #openstack-dev19:33
*** jog0 has joined #openstack-dev19:33
*** epim has joined #openstack-dev19:35
*** doude has quit IRC19:36
*** doude has joined #openstack-dev19:36
*** alunduil has quit IRC19:37
*** koolhead17 has joined #openstack-dev19:41
*** doude has quit IRC19:42
*** doude has joined #openstack-dev19:42
*** metral has quit IRC19:44
*** novas0x2a|laptop has joined #openstack-dev19:45
*** metral has joined #openstack-dev19:50
*** annegentle__ has joined #openstack-dev19:50
dtroyersdague: now works19:51
*** vipul has joined #openstack-dev19:52
sdaguedtroyer: so there was a question from the moniker folks about adding support to devstack. It's not yet an incubated project, so I wasn't sure if that's appropriate for devstack19:52
*** metral_ has joined #openstack-dev19:54
*** jergerber has quit IRC19:54
*** jergerber has joined #openstack-dev19:54
*** metral_ has quit IRC19:56
dtroyersdague: the precedent we've set is not necessarily consistent so far, obviously we don't say 'core only' or anything like that.19:57
*** metral has quit IRC19:57
dtroyersdague: my personal bar is closer to 'can we support/test it?'  there is already enough of devstack that I can't test that I really can't rely on that either19:58
heckjayoung: keystoneclient doesn't have any i18n yet enabled: https://blueprints.launchpad.net/python-keystoneclient/+spec/keystoneclient-i18n19:59
*** esp2 has quit IRC19:59
*** esp2 has joined #openstack-dev19:59
openstackgerritA change was merged to openstack/nova: Remove out-of-date comment  https://review.openstack.org/1557519:59
*** egallen has quit IRC20:00
*** maoy has quit IRC20:00
*** otherwiseguy has joined #openstack-dev20:01
ayoungheckj, true.  Is this in reference to my comment on the review?20:01
ayoungheckj, if you say "we should punt on that for now" I can accept20:02
*** aeperezt has joined #openstack-dev20:04
*** ewindisch has joined #openstack-dev20:05
heckjayoung: yeah - meant punt on i18n for that review, but start getting it into client20:08
heckjturns out none of the clients have i18n enabled right now20:09
ayoungheckj, OK,  I can accept that20:09
*** maurosr has quit IRC20:09
ayoungheckj, approved20:10
ayoungheckj, care to chime on  https://review.openstack.org/#/c/15429/  and https://review.openstack.org/#/c/15543/20:10
heckjayoung: approved SQL migrations testing20:12
ayoungheckj, BTW,the reason I want those version 1 tests in there is that I am going to have to change how we define the tables in version 1, just like we did back with the token table.  Since the tables are generated off the python objects, if we change the python definitions, the Version 1 tables are not what they once were...if that makes sense.20:12
heckjyep - good to verify/check against that = +120:13
davidkranzheckj: The tempest keystone tests are failing as shown in http://paste.openstack.org/show/24845/. Was there a recent change to the data being returned by the update tenant api?20:13
ayoungdavidkranz, we were battling something like that for the past couple of days20:14
ayoungdavidkranz, and I think that was caused by our "fix" if I understand correctly20:15
dolphmdavidkranz: yes-- the data that appeared in the 'extra' attribute (e.g. description) should have been at the root of the entity20:15
*** arosen has joined #openstack-dev20:15
heckjdavidkranz: there wasn't an explicit API change for the V2 API that was merged in, but there was a change in how the client is loading the data locally - we're starting to flatten out the attributes from the ['extra'] blob thing20:15
davidkranzdolphm: Doesn't this violate the API stability guidelines?20:15
ayoungdolphm, did we break backwards compatibility?  I thought we maintained it20:16
dolphmdavidkranz: yeah, we should return a copy of it in both places20:16
*** krtaylor has quit IRC20:16
heckjI think the key change was in the client code, and that we fully maintained the API compatibility20:16
arosenHas anyone been getting : ImageNotAuthorized: Not authorized for image <uuid> from glanceclient when nova calls it lately?20:16
heckjhaven't read the tempest tests to know for sure, but if we broke it, that's a bug we need to fix20:16
davidkranzheckj: I don't think so. Tempest does not use the client.20:16
aroseni just changed out folsom/stable of everything and i'm still hitting this same errror after running  unstack/stack20:16
davidkranzheckj: I'll file a bug.20:17
dolphmheckj: the tempest test is asserting that the 'extra' attribute exists when it shouldn't exist at all20:17
heckjdavidkranz: thank you20:17
davidkranzdolphm: It must have existed in folsom.20:17
dolphmdavidkranz: it did, it shouldn't have20:17
heckjdolphm: even if it shouldn't have - we've just changed the API output...20:18
davidkranzdolphm: I understand.20:18
dolphmheckj: yeah, we need to return two copies :-/20:18
davidkranzdolphm: It could be deleted in the next api version.20:18
dolphmheckj: correct + expected20:18
heckjdolphm: yeah, bummer, but the right response20:18
dolphmdavidkranz: link me the bug when you create it, i'll pick it up20:19
davidkranzdolphm: Will do.20:19
davidkranzdolphm: https://bugs.launchpad.net/keystone/+bug/107612020:21
uvirtbot`Launchpad bug 1076120 in keystone "update tenant api changed" [Undecided,New]20:21
dolphmdavidkranz: is there a similar test for update user? i expect it changed in the same manner20:23
*** metral has joined #openstack-dev20:23
*** renier_ has joined #openstack-dev20:23
*** networkstatic has quit IRC20:23
davidkranzdolphm: There is not.20:24
*** renier has quit IRC20:24
*** jcru is now known as jcru|away20:24
davidkranzdolphm: Did you change unit tests while doing this or are there not any for this particular api?20:24
dolphmdavidkranz: description technically falls outside of the identity api (but we allow arbitrary attributes), and i'm not aware of any test coverage there20:26
*** gatuus has quit IRC20:28
*** annegentle__ has quit IRC20:29
ayounggyee, I am seeing a failure in devstack  quantum verifying the revocation list http://www.fpaste.org/kEp2/  is what is returned from the CMS verify.  Wonder if that could be a certificate issue?20:30
gyeelooks like missing data20:31
*** metral has quit IRC20:31
ayounggyee, yeah, looks like it is sending over the message unsigned20:31
gyeedid you run openssl verify20:31
gyeeunsigned?!20:32
ayounggyee, that is what is running20:32
ayounggyee, disregard20:32
ayounggyee, I was looking at output not input20:32
ayoungoutput is20:32
ayoung{"revoked": []}20:32
ayoungwhich is correct20:32
davidkranzsdague: Can you look at http://paste.openstack.org/show/24846/ please?20:32
davidkranzsdague: This test has started failing.20:33
davidkranzsdague: Not sure if it is an intentional nova change or not.20:33
*** gatuus has joined #openstack-dev20:33
*** alunduil has joined #openstack-dev20:34
sdaguedavidkranz: that's the one that jaypipes was chasing right?20:34
davidkranzsdague: I don't think so but I'll check now.20:34
davidkranzsdague: You're right.20:35
*** alunduil has quit IRC20:35
gyeeayoung, where's that test come from?20:35
ayounggyee, I am running devstack with quantum20:36
ayounggyee, http://wiki.openstack.org/QuantumDevstack20:36
*** alunduil has joined #openstack-dev20:36
ayounggyee, there has to be something wonky in how quantum is calling this, as devstack without quantum works, so it isn;t just a blanket "keystone is broken."20:37
gyeeno, otherwise, I would expect the unit tests to blow up first20:38
*** jimp1 has joined #openstack-dev20:38
*** epim has quit IRC20:39
gyeeRSA_padding_check_PKCS1_type_1 usually means data corruption20:39
ayounglet me get the input20:39
*** jimp has quit IRC20:39
*** dani4571 has joined #openstack-dev20:40
gyeeif what quantum is getting matches what keystone is returning this could be real interesting20:40
sdaguedtroyer: ok, so I'll let them just propose things and we can take it on a case by case basis20:41
ayounggyee, http://fpaste.org/0ShE/20:41
dtroyersdague: that'll work20:42
sdaguedtroyer: also, if you can take a look at https://review.openstack.org/#/c/15581/ and make sure that looks good to you20:42
gyeeayoung, what's "unicode:"?20:42
sdaguetrying to get postgresql into a periodic task on ci, and that's needed for it20:42
dtroyersdague: I'll look in a bit20:43
ayoungthe data type gyee20:43
ayounggyee, let me see what datatype is passed in during the unit tests.20:44
arosenhey garyk  you arounds?20:44
*** jtran has quit IRC20:45
ayounggyee, yeah, it is passed in as str: not unicode:  interesting20:45
gyeewhy unicode as PEM is all ascii? :)20:45
ayounggyee, no idea.20:46
ayoungmaybe it is a setting in quantum that affects string handling20:46
*** markwash has quit IRC20:47
gyeetry converting it back to ascii to see if it helps20:48
ayounggyee, trying with str(formatted) passed in. Lets see if it makes a difference20:48
gyeeor string.encode('ascii')20:48
*** littleidea has joined #openstack-dev20:48
*** arbrandes has quit IRC20:49
*** trimmer has joined #openstack-dev20:49
*** saurabh has quit IRC20:50
*** slackguru has quit IRC20:50
*** simonmcc1 has joined #openstack-dev20:55
*** jtran has joined #openstack-dev20:56
*** zing has joined #openstack-dev20:56
*** simonmcc has quit IRC20:57
*** anniec has joined #openstack-dev20:59
*** anniec_ has joined #openstack-dev20:59
ayounggyee, nope, converting to str made no difference.  I guess I should try the encode.,,21:00
*** tgall_foo has quit IRC21:00
*** cp16net|away is now known as cp16net21:00
ayounggyee, nope, no difference, but I can't help but think it has something to do with that unicode encoding21:01
*** anniec has quit IRC21:03
*** anniec_ is now known as anniec21:03
*** colinmcnamara has quit IRC21:04
*** ayoung is now known as ayoung-afk21:04
*** harlowja_ has joined #openstack-dev21:04
*** Tross has joined #openstack-dev21:05
*** harlowja has quit IRC21:07
*** harlowja_ is now known as harlowja21:07
*** SlickNik has left #openstack-dev21:08
*** SlickNik has joined #openstack-dev21:08
*** japage has quit IRC21:10
andrewbogottNot for the first time, I am puzzled by the members of the nova Instance object.  There is server_name, hostname, and host.  Best I can tell, 'host' refers to the nova node (not the VM), hostname is the name of the VM, and server_name is vestigial and unused.  Can anyone confirm or refute this?21:13
*** trimmer is now known as slackguru21:13
andrewbogott(And then there is also display_name...)21:14
*** jcmartin has joined #openstack-dev21:14
zuldoes anyone actually use bin/nova-all?21:18
russellbbcwaldon: looks like there is a tempest test failure blocking https://review.openstack.org/#/c/15562/ ...21:19
dolphmdavidkranz: https://review.openstack.org/#/c/1558721:21
zuldoes anyone actually know what bin/nova-all was used for?21:22
*** esheffie1d has quit IRC21:23
*** esheffield has joined #openstack-dev21:23
*** melwitt has joined #openstack-dev21:28
*** mnewby_ has joined #openstack-dev21:29
*** melwitt has quit IRC21:29
*** melwitt has joined #openstack-dev21:30
*** krtaylor has joined #openstack-dev21:31
*** mnewby has quit IRC21:32
*** mnewby_ is now known as mnewby21:32
*** e1mer has joined #openstack-dev21:32
jgriffithany openstack common folks?21:32
*** alop has quit IRC21:32
*** jrodom has quit IRC21:34
*** radez is now known as radez_g0n321:34
*** colinmcnamara has joined #openstack-dev21:34
*** ewindisch has quit IRC21:35
*** ewindisch has joined #openstack-dev21:35
*** sandywalsh has quit IRC21:36
*** mnewby_ has joined #openstack-dev21:36
*** mnewby has quit IRC21:39
*** mnewby_ is now known as mnewby21:39
andrewbogottcomstud:  Could I get your thoughts on the latest https://review.openstack.org/#/c/14833/ when you have a moment?  (It has a -1 but I believe that has been refuted.)21:39
*** jimp1 has quit IRC21:39
*** colinmcnamara has quit IRC21:39
*** sniperd_ has quit IRC21:39
davidkranzrussellb, bcwaldon : There is something very strange with the tempest failure you linked.21:40
davidkranzThe file File "/opt/stack/tempest/tempest/tests/test_images.py", line 59, in test_create_delete_image in the error does not exist in the current head of tempest.21:40
comstudandrewbogott: sure21:40
russellbdavidkranz: it's stable/essex glance21:40
russellbis it running another branch of tempest?21:40
davidkranzrussellb: Ah. Can I help?21:41
russellbperhaps.  this is a security patch, so ideally the patch gets merged asap.21:41
russellbi can tell it to retrigger, but the failure looked legit, but it may be a change in tempest required.21:42
davidkranzrussellb: It seems there was a successful stable/essex bitrot run very recently.21:42
russellbthat's good ..21:42
davidkranzrussellb: I would try a recheck.21:42
russellband it passed on the patch that this current one depends on21:42
russellbdavidkranz: k21:42
davidkranzrussellb: It's possible there is a flaky. I will look at the bitrot history.21:43
*** roge has quit IRC21:43
russellbdavidkranz: great thanks.  i just did a "reverify" to see if it decides to behave.21:43
*** koolhead17 has quit IRC21:44
andrewbogottcomstud:  Good point, and thank you.21:46
comstudandrewbogott: sorry, thought of 1 more thing there.21:46
comstudnp21:46
*** metral has joined #openstack-dev21:47
*** markwash has joined #openstack-dev21:48
*** maurosr has joined #openstack-dev21:48
*** esheffield has quit IRC21:49
*** annegentle__ has joined #openstack-dev21:50
*** mnewby has quit IRC21:50
*** jog0 has quit IRC21:50
notmynamettx: https://launchpad.net/swift/+milestone/1.7.5 updated21:51
*** dolphm has quit IRC21:51
davidkranzrussellb: Uh oh. It looks like the periodic stable/essex is not really running stable/essex. I think a fix for that was submitted early this morning.21:52
davidkranzrussellb: It will run tonight and then we can compare.21:52
*** jcru|away is now known as jcru21:53
*** colinmcnamara has joined #openstack-dev21:56
davidkranzrussellb: BTW, the current tempest master is being blocked by https://bugs.launchpad.net/nova/+bug/107611421:56
uvirtbot`Launchpad bug 1076114 in nova "image create fails with QemuImgInfo error" [Undecided,New]21:56
andrewbogottjerdfelt:  That patch was a bit of a troll, I was hoping someone would appear and provide a good reason for why there are seemingly-redundant keys and what they're for.21:57
andrewbogottBut in the meantime I'll add a migration script :)21:57
clarkbdavidkranz: is that something that only comes up during a full tempest run? The regular tempest devstack gate is fine?21:58
*** patelna_ has joined #openstack-dev21:58
davidkranzclarkb: That's right. We *really* need to get more info the "smoke" gate.21:58
*** zing has quit IRC21:58
davidkranz ^^^into21:58
*** tgall_foo has joined #openstack-dev21:59
*** metral has quit IRC21:59
davidkranzclarkb: But I made it happen from the command line with nova client.21:59
*** jog0 has joined #openstack-dev21:59
*** metral has joined #openstack-dev21:59
clarkbdavidkranz: thanks22:00
*** patelna has quit IRC22:01
*** salv-orlando_ has joined #openstack-dev22:03
*** danwent_ has joined #openstack-dev22:03
*** Mandell_ has joined #openstack-dev22:04
*** sniperd has joined #openstack-dev22:05
*** harlowja_ has joined #openstack-dev22:05
*** boden has quit IRC22:07
*** novas0x2a|lapto1 has joined #openstack-dev22:07
comstudandrewbogott: server_name used to be used IIRC.. it looks like it just never went away22:08
*** danwent has quit IRC22:08
*** Mandell has quit IRC22:08
*** ondergetekende has quit IRC22:08
*** salv-orlando has quit IRC22:08
*** maurosr has quit IRC22:08
*** novas0x2a|laptop has quit IRC22:08
*** danwent_ is now known as danwent22:08
*** salv-orlando_ is now known as salv-orlando22:08
comstudandrewbogott: you get to be the one to clean that up!22:08
andrewbogottwoooooo!22:09
*** harlowja has quit IRC22:09
*** harlowja_ is now known as harlowja22:09
*** metral_ has joined #openstack-dev22:12
*** gatuus has quit IRC22:12
*** mtreinish has quit IRC22:13
*** andrewbogott is now known as andrewbogott_afk22:14
*** metral_ has quit IRC22:14
*** markvoelker has quit IRC22:15
*** maurosr has joined #openstack-dev22:15
*** metral has quit IRC22:15
*** dhellmann has quit IRC22:17
*** novas0x2a|lapto1 has quit IRC22:17
*** novas0x2a|laptop has joined #openstack-dev22:17
*** metral has joined #openstack-dev22:18
*** lloydde has quit IRC22:18
*** lloydde_ has joined #openstack-dev22:18
*** maurosr has quit IRC22:20
*** thovden has joined #openstack-dev22:21
*** novas0x2a|laptop has quit IRC22:22
*** epim has joined #openstack-dev22:24
*** novas0x2a|laptop has joined #openstack-dev22:24
*** s0mik has quit IRC22:29
*** kgriffs1 has quit IRC22:30
*** metral has quit IRC22:32
*** metral has joined #openstack-dev22:32
*** doude has quit IRC22:33
*** doude has joined #openstack-dev22:33
*** doude has joined #openstack-dev22:34
*** danwent has quit IRC22:36
*** s0mik has joined #openstack-dev22:36
openstackgerritA change was merged to openstack/python-novaclient: Allows deletion of multiple servers through CLI  https://review.openstack.org/1524322:38
*** doude has quit IRC22:38
*** doude has joined #openstack-dev22:39
openstackgerritA change was merged to openstack/nova: Remove unused function require_instance_exists  https://review.openstack.org/1559122:39
*** sniperd has quit IRC22:40
openstackgerritA change was merged to openstack/nova: Refactor resource tracker claims and test logic.  https://review.openstack.org/1552522:40
*** gyee has quit IRC22:40
*** doude has quit IRC22:42
*** doude has joined #openstack-dev22:42
*** thovden has quit IRC22:43
*** tgall_foo has quit IRC22:43
*** adjohn has quit IRC22:44
*** krtaylor has quit IRC22:46
*** clarkb has quit IRC22:49
*** tgall_foo has joined #openstack-dev22:50
*** tgall_foo has quit IRC22:50
*** tgall_foo has joined #openstack-dev22:50
*** epim has quit IRC22:52
*** dspano has quit IRC22:52
*** heckj has quit IRC22:52
*** annegentle__ has quit IRC22:53
*** metral_ has joined #openstack-dev22:54
*** slackguru has quit IRC22:54
openstackgerritA change was merged to openstack/python-keystoneclient: Update --os-* error messages  https://review.openstack.org/1501122:54
*** metral_ has quit IRC22:55
*** tmishler has left #openstack-dev22:55
*** jergerber has quit IRC22:55
*** brucer has joined #openstack-dev22:56
*** dolphm has joined #openstack-dev22:56
*** gongysh has joined #openstack-dev22:56
*** metral has quit IRC22:57
*** jcooley has joined #openstack-dev22:57
*** dani4571 has quit IRC23:00
*** jcooley has quit IRC23:02
*** patelna__ has joined #openstack-dev23:02
zykes-how does one handle rpc exceptions on the caller side in openstack ?23:02
*** vipul has quit IRC23:02
gongyshhelo23:02
gongyshDo anyone know why nova scheduler does not synchronize (via semaphore or lock ) the access to host_manager's service_states variable?23:03
*** sniperd has joined #openstack-dev23:04
zykes-vishy: or ttx ?23:04
*** epim has joined #openstack-dev23:04
*** patelna_ has quit IRC23:05
*** sacharya has quit IRC23:05
*** tgall_foo has quit IRC23:06
*** john5223 has quit IRC23:07
*** adjohn has joined #openstack-dev23:07
*** kbringard has quit IRC23:08
*** vipul has joined #openstack-dev23:09
*** colinmcnamara has left #openstack-dev23:10
*** clarkb has joined #openstack-dev23:10
*** nunosantos has quit IRC23:12
*** adjohn has quit IRC23:14
*** spiffxp has quit IRC23:15
*** adjohn has joined #openstack-dev23:15
zykes-noone here ? :(23:18
*** Tross has quit IRC23:19
*** imsplitbit has quit IRC23:23
*** alunduil has quit IRC23:25
*** otherwiseguy has quit IRC23:28
*** anniec has quit IRC23:28
*** markmcclain has quit IRC23:29
*** s0mik has quit IRC23:32
*** Q310 has joined #openstack-dev23:32
*** cp16net is now known as cp16net|away23:34
zykes-mordred: ?23:35
openstackgerritA change was merged to openstack/glance: Port uuidutils to Glance  https://review.openstack.org/1554423:36
openstackgerritA change was merged to openstack/glance: Use openstack common timeutils in simple db api  https://review.openstack.org/1554223:36
*** cp16net|away is now known as cp16net23:37
*** krtaylor has joined #openstack-dev23:38
Q310vishy: hey mate, i updated your code a little added support for "downloading" status and better volume naming instead of "root"23:38
*** redbo has quit IRC23:40
*** redbo has joined #openstack-dev23:41
*** ChanServ sets mode: +v redbo23:41
*** dolphm has quit IRC23:42
*** metral has joined #openstack-dev23:45
*** s0mik has joined #openstack-dev23:49
*** jimfehlig has quit IRC23:51
*** jcru has quit IRC23:53
*** metral_ has joined #openstack-dev23:55
*** metral has quit IRC23:55
*** metral_ is now known as metral23:55
*** sacharya has joined #openstack-dev23:56
*** mnewby has joined #openstack-dev23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!