Tuesday, 2013-02-26

*** rpedde is now known as rpedde_away00:00
*** cloudchimp has quit IRC00:01
*** pcm_ has quit IRC00:02
*** dontalton has quit IRC00:02
*** davidha has quit IRC00:02
*** davidha has joined #openstack-dev00:04
*** eglynn has quit IRC00:11
*** winston-d_ has joined #openstack-dev00:13
*** Nachi has joined #openstack-dev00:14
*** Nachi is now known as nati_ueno_00:14
ayoungjaypipes, If I use the sql alchemy test for Is Null  (blah.field == none) , I get a Pep 8 error.  Is there away around this?00:15
*** henrynash has quit IRC00:15
*** nati_ueno has quit IRC00:15
jaypipesayoung: lol, no idea! :(00:16
ayoungjaypipes, I want to suppress just that warning on just one file00:16
ayoung E71100:16
*** AlanClark has quit IRC00:17
*** AlanClark has joined #openstack-dev00:17
*** sacharya has joined #openstack-dev00:19
jog0ayoung: in nova we just ignore all E711s00:21
*** olaph has quit IRC00:22
*** reed has quit IRC00:23
*** olaph has joined #openstack-dev00:23
*** vipul|away is now known as vipul00:24
*** zodiak has quit IRC00:25
*** sandywalsh has quit IRC00:27
*** bswartz has joined #openstack-dev00:28
*** markwash has quit IRC00:33
openstackgerritA change was merged to openstack/quantum: Imported Translations from Transifex  https://review.openstack.org/2292100:37
clarkbayoung: I think you are supposed to say if blah.field is None?00:37
clarkbyou use identity against None not equality00:37
ayoungclarkb, but sqlalchemy doesn;t like that00:37
ayoungclarkb, I think they overload an operator or something00:38
clarkb:(00:38
*** digitalsanctum has quit IRC00:38
*** Mandell has quit IRC00:40
*** CaptTofu has quit IRC00:41
*** ilblackdragon has quit IRC00:41
matiuSo I made this small change on top of that xml parsing security bug00:41
matiuhttps://review.openstack.org/#/c/22926/00:41
matiuit's supposed to change http 500 errs to 400 errs00:41
*** sandywalsh has joined #openstack-dev00:41
*** zodiak has joined #openstack-dev00:42
*** jsindy has joined #openstack-dev00:42
*** Tross has joined #openstack-dev00:42
matiuif anyone has any insight into that, a quick comment would be most apreciated00:42
*** dolphm has joined #openstack-dev00:44
*** dhellmann has quit IRC00:46
*** anniec_ has quit IRC00:47
*** anniec has joined #openstack-dev00:48
*** pabelanger has joined #openstack-dev00:49
*** epim has quit IRC00:50
*** jkyle has joined #openstack-dev00:51
jkylereading the "setting up a development environment" is devstack what most do their work against? (as suggested in the doc)00:51
matiujkyle, yeah, devstack is easiest00:52
clarkbjkyle: its what is used to do integration testing. The unittests for all projects can be run in isolation in their own virtualenvs00:52
matiuthere's a vagrant devstack somewhere, that's apparently good for macs00:52
*** Mandell has joined #openstack-dev00:53
jkyleI have hardware and vms, if devstack is what's tested against. I'll roll with that.00:53
jkylelooks like learning the gerrit workflow will be more work than installing the dev environment hehe00:55
clarkbjkyle: if you pick a random change, eg https://review.openstack.org/#/c/22886/, you can see the tests that are run against it by jenkins in the comments00:55
clarkbjkyle: its not too bad, especially with git review00:56
jkyleclarkb: was more of a comment on how easy setting up a dev environment is ;)00:56
clarkbah :)00:56
*** mestery has quit IRC00:59
*** garyTh has quit IRC01:00
*** alexxu has joined #openstack-dev01:03
*** Tross has quit IRC01:04
*** spzala has quit IRC01:05
*** jkyle has quit IRC01:08
*** anteaya has left #openstack-dev01:10
*** bing_bu has joined #openstack-dev01:12
*** jsindy has quit IRC01:12
*** esp1 has quit IRC01:14
*** ilblackdragon has joined #openstack-dev01:17
dolphmayoung: i think we got out of sync on the impersonation attribute -- i saw it somewhere as "impersonation", so i ran with that, but you have "impersonate" in the impl?01:21
dolphmayoung: i'd prefer something that has an antonym (e.g. enable/disable) -- but we at least need to straighten out impersonation / impersonate01:22
*** sthaha has joined #openstack-dev01:24
openstackgerritA change was merged to openstack/nova: Fix incorrect zookeeper group name  https://review.openstack.org/2291701:25
openstackgerritA change was merged to openstack-infra/devstack-gate: Add a missing space inside test brackets.  https://review.openstack.org/2290101:26
openstackgerritA change was merged to openstack/nova: Change nova-dhcpbridge FLAGFILE to a list of files  https://review.openstack.org/2274601:26
openstackgerritA change was merged to openstack/nova: Enable VM DHCP request to reach DHCP agent  https://review.openstack.org/2254601:26
*** yidclare has quit IRC01:31
*** pabelanger has quit IRC01:31
*** mrodden has quit IRC01:36
*** cp16net is now known as cp16net|away01:37
*** cp16net|away is now known as cp16net01:37
*** dims has quit IRC01:40
*** jkyle has joined #openstack-dev01:44
*** Tross has joined #openstack-dev01:45
*** pabelanger has joined #openstack-dev01:46
*** sacharya has quit IRC01:46
openstackgerritA change was merged to openstack/quantum: Add default state_path to quantum.conf  https://review.openstack.org/2284901:47
ayoungdolphm, I just went through and made it all impersonation01:47
dolphmayoung: oh okay01:48
ayoungdolphm, do_impersonation/don't_do_impersonation?\01:48
*** bdpayne has quit IRC01:48
ayoungimpersonate/don't_impersonate01:48
dolphmayoung: i'm getting an unspecified validationerror in my test -- not sure why, see comment on 2601:48
ayoungits awkward no matter what01:48
ayoungdolphm, 26?01:49
dolphmayoung: patchset 2601:49
dolphmayoung: cloaked/uncloaked01:49
*** mestery has joined #openstack-dev01:49
ayoungdolphm, My guess is that it is the roles.  What are you passing in for roles?01:50
dolphmayoung: a list of objects with just id's01:50
ayoungI haven't changed to role {id} yet.  THat is coming next01:50
*** jkyle has quit IRC01:50
*** zeriouz has joined #openstack-dev01:50
ayoungdolphm, OK...I'll tackle that next.  I was just working through "expires" to "expires_at"  and need to do a pep8 cleanup01:51
dolphmayoung: cool01:52
*** sacharya has joined #openstack-dev01:53
dolphmayoung: ping me when you have updates ... i'm fleshing out a test01:53
dolphmayoung: autopersonate :P01:53
*** bing_bu has quit IRC01:55
*** markmcclain has quit IRC01:56
*** amerine has quit IRC01:57
*** nati_ueno_ has quit IRC02:00
*** vkmc has quit IRC02:01
*** bing_bu has joined #openstack-dev02:01
ayoungdolphm, what should I be using for time.  I keep getting offsets02:02
*** yaguang has joined #openstack-dev02:03
dolphmayoung: what does token expires use?02:03
dolphmayoung: that should be utc02:03
*** bknudson has quit IRC02:03
ayoungtimeutils.parse_isotime("1999-02-18T10:10:00Z")02:03
ayoungGives me02:03
ayoungdatetime: 1999-02-18 10:10:00+00:0002:04
*** otherwiseguy has quit IRC02:04
*** READ10 has quit IRC02:04
dolphmayoung: http://paste.openstack.org/raw/32493/02:05
ayoungdolphm, the difference is that token does utc + time delta02:05
dolphmayoung: i don't understand, utcnow() returns a naive utc object02:06
ayoungso it is all internally consistant, I think02:06
*** salv-orlando has quit IRC02:06
ayoungMaybe I should leave off the Z... lets see.02:06
*** pixelbeat has quit IRC02:06
ayoungNope...no difference02:07
ayoungdolphm, there is something wonky even with the token code.02:07
*** andrewbogott is now known as andrewbogott_afk02:07
*** zeriouz has quit IRC02:08
ayoungdolphm, in the patch note what I did: https://review.openstack.org/#/c/20289/26/keystone/token/backends/kvs.py02:08
ayoungthat was just getting a token and passing it back in, no trusts involved02:08
*** andrewbogott_afk is now known as andrewbogott02:08
*** mrodden has joined #openstack-dev02:12
openstackgerritA change was merged to openstack/python-keystoneclient: Improve error message for missing endpoint  https://review.openstack.org/2274402:15
dolphmayoung: why would ref['expires'] ever be None?02:16
*** andrewbogott is now known as andrewbogott_afk02:16
ayoungdolphm, I'm not sure02:16
*** ladquin has quit IRC02:16
ayoungdolphm, that was from the original.02:17
dolphmayoung: can you fix the todo instead of that patch? can test with something like assertNotIn('Z', expires)02:17
ayoungdolphm, maybe tokens didn't expire at one point and they left that in02:18
*** pabelanger has quit IRC02:18
dolphmayoung: tokens have always expired :( that looks like a hack to get around a bug ... and makes me nervous02:18
ayoungdolphm, at a minimum, we can treat a token with no Expiry as expired.02:19
*** kagan has quit IRC02:19
dolphmayoung: +102:21
*** kgriffs has joined #openstack-dev02:21
*** Ryan_Lane has quit IRC02:22
*** enikanorov has quit IRC02:25
*** zeriouz has joined #openstack-dev02:29
*** cloudchimp has joined #openstack-dev02:31
*** AlanClark has quit IRC02:32
*** dolphm has quit IRC02:33
*** AlanClark has joined #openstack-dev02:33
*** arbrandes has quit IRC02:33
*** esp1 has joined #openstack-dev02:40
*** stevemar has joined #openstack-dev02:42
*** spzala has joined #openstack-dev02:43
fungii need to link https://bugs.launchpad.net/nova/+bug/1073569 to nova stable/essex... can't figure out the right dance in lp to make that happen (maybe i'm just not holding my teeth right?)02:47
uvirtbotLaunchpad bug 1073569 in nova "Jenkins jobs fail because of incompatibility between sqlalchemy-migrate and the newest sqlalchemy-0.8.0b1" [Undecided,Fix committed]02:47
*** adjohn has quit IRC02:48
*** esp1 has left #openstack-dev02:48
*** pabelanger has joined #openstack-dev02:49
*** jcmartin has quit IRC02:49
*** zeriouz has quit IRC02:52
*** koolhead17 has joined #openstack-dev02:52
*** markwash has joined #openstack-dev02:54
*** zeriouz has joined #openstack-dev02:55
*** anniec has quit IRC03:00
*** yaguang has quit IRC03:03
*** dims has joined #openstack-dev03:03
*** kgriffs has quit IRC03:04
*** kgriffs has joined #openstack-dev03:05
*** cp16net is now known as cp16net|away03:05
*** jamespage has quit IRC03:05
*** jamespage has joined #openstack-dev03:06
*** danwent has quit IRC03:06
*** koolhead17 has quit IRC03:06
*** novas0x2a|laptop has quit IRC03:07
*** dims has quit IRC03:08
*** cp16net|away is now known as cp16net03:08
*** kgriffs has quit IRC03:08
*** kgriffs has joined #openstack-dev03:09
*** dims has joined #openstack-dev03:10
*** sacharya1 has joined #openstack-dev03:10
*** kgriffs has quit IRC03:12
*** sacharya has quit IRC03:12
*** kgriffs has joined #openstack-dev03:13
*** roampune has quit IRC03:13
*** melwitt has quit IRC03:14
*** annegentle has joined #openstack-dev03:19
*** annegentle has quit IRC03:26
*** annegentle has joined #openstack-dev03:27
*** CaptTofu has joined #openstack-dev03:30
*** Tross has quit IRC03:30
*** tomoe_ has quit IRC03:31
*** tomoe_ has joined #openstack-dev03:31
*** tomoe_ has quit IRC03:36
*** annegentle has quit IRC03:37
*** esp has joined #openstack-dev03:40
*** AlanClark has quit IRC03:41
*** AlanClark has joined #openstack-dev03:41
*** CaptTofu has quit IRC03:43
*** kgriffs has quit IRC03:43
*** martine has joined #openstack-dev03:45
*** jcmartin has joined #openstack-dev03:48
*** esp has left #openstack-dev03:53
*** amerine has joined #openstack-dev03:55
*** adjohn has joined #openstack-dev03:58
*** jog0 has quit IRC04:01
*** koolhead17 has joined #openstack-dev04:02
mordredgongysh: hey! I can't see your comment on the delete file on https://review.openstack.org/#/c/21350/2104:03
*** adjohn has quit IRC04:04
*** yaguang has joined #openstack-dev04:10
*** jsindy has joined #openstack-dev04:10
*** zzs has left #openstack-dev04:14
*** jsindy has quit IRC04:21
*** bdpayne has joined #openstack-dev04:22
*** topol has joined #openstack-dev04:23
*** networkstatic has joined #openstack-dev04:24
*** jimfehlig has quit IRC04:25
*** harlowja has quit IRC04:26
*** bdpayne has quit IRC04:28
*** Tross has joined #openstack-dev04:29
*** bdpayne has joined #openstack-dev04:30
*** Mandell has quit IRC04:30
*** esp has joined #openstack-dev04:32
*** esp has left #openstack-dev04:32
openstackgerritA change was merged to openstack-dev/devstack: Devstack support for nicira plugin  https://review.openstack.org/2127904:32
*** zeriouz has quit IRC04:33
*** anniec has joined #openstack-dev04:35
*** jkyle has joined #openstack-dev04:36
*** osphy has quit IRC04:38
*** soody has quit IRC04:39
*** nunosantos has quit IRC04:42
*** zeriouz has joined #openstack-dev04:46
*** pabelanger has quit IRC04:49
*** markmcclain has joined #openstack-dev04:50
*** anniec has quit IRC04:51
*** vipul is now known as vipul|away04:54
*** danwent has joined #openstack-dev04:54
*** jkyle has quit IRC05:02
*** navid has joined #openstack-dev05:05
*** tomoe_ has joined #openstack-dev05:12
*** rushiagr has joined #openstack-dev05:12
*** stevemar has quit IRC05:13
rushiagrhi folks05:13
rushiagrI currently see that in devstack you only can see info level logging05:13
*** armaan has joined #openstack-dev05:13
rushiagrany way to enable debug level messages? or maybe can someone give me the link to the log file (assuming that debug messages atleast goes into the log file)?05:14
openstackgerritA change was merged to openstack/swift: Fix descriptions in sample configs.  https://review.openstack.org/2290605:14
openstackgerritA change was merged to openstack/quantum: Fixes import reorder nits  https://review.openstack.org/2282905:14
*** Ryan_Lane has joined #openstack-dev05:14
*** markwash has quit IRC05:16
*** nati_ueno has joined #openstack-dev05:17
*** nati_ueno has quit IRC05:18
*** nati_ueno has joined #openstack-dev05:18
*** aeperezt has quit IRC05:19
*** martine has quit IRC05:19
openstackgerritA change was merged to openstack/glance: Fix migration 016 for sqlite.  https://review.openstack.org/2273105:20
openstackgerritA change was merged to openstack/glance: Refactor data migration tests  https://review.openstack.org/2136205:20
*** burris has quit IRC05:23
*** Tross has quit IRC05:24
*** burris has joined #openstack-dev05:24
*** koolhead17 has quit IRC05:25
*** bdpayne has quit IRC05:26
*** Nachi has joined #openstack-dev05:31
*** buzztroll_ has quit IRC05:34
*** nati_ueno has quit IRC05:35
*** amerine has quit IRC05:35
*** crandquist has joined #openstack-dev05:41
*** amotoki has joined #openstack-dev05:42
*** enikanorov has joined #openstack-dev05:43
*** Mandell has joined #openstack-dev05:47
*** Tross has joined #openstack-dev05:47
*** Nachi has quit IRC05:50
*** nati_ueno has joined #openstack-dev05:51
*** Nachi has joined #openstack-dev05:54
*** AlanClark has quit IRC05:57
*** AlanClark has joined #openstack-dev05:58
*** nati_ueno has quit IRC05:58
*** sacharya1 has quit IRC06:00
*** almaisan-away is now known as al-maisan06:00
*** al-maisan is now known as almaisan-away06:02
*** garyk has quit IRC06:03
*** vipul|away is now known as vipul06:06
openstackgerritA change was merged to openstack/nova: Fix hacking.py to handle 'cannot import x'  https://review.openstack.org/2294706:07
*** jcmartin has quit IRC06:09
*** hattwick has quit IRC06:19
*** Ryan_Lane has quit IRC06:20
*** vipul is now known as vipul|away06:21
openstackgerritA change was merged to openstack/swift: Adding speed limit options for DB auditor  https://review.openstack.org/2228606:22
*** markwash has joined #openstack-dev06:23
*** adjohn has joined #openstack-dev06:25
*** topol has quit IRC06:25
*** markwash has quit IRC06:27
*** spzala has quit IRC06:30
*** vipul|away is now known as vipul06:37
*** garyk has joined #openstack-dev06:45
*** zaitcev has quit IRC06:45
*** mrodden1 has joined #openstack-dev06:46
*** mrodden has quit IRC06:48
*** dev_sa has joined #openstack-dev06:56
*** vipul is now known as vipul|away06:57
*** ritzcarltn has joined #openstack-dev07:01
*** ritzcarltn has quit IRC07:02
*** ritzcarltn has joined #openstack-dev07:03
*** gargya has joined #openstack-dev07:03
*** AlanClark has quit IRC07:05
*** AlanClark has joined #openstack-dev07:05
*** ritzcarltn has joined #openstack-dev07:08
*** techlife has quit IRC07:10
*** techlife has joined #openstack-dev07:11
*** gargya has quit IRC07:12
*** ritzcarltn has quit IRC07:13
*** ritzcarlt has joined #openstack-dev07:13
*** ritzcarltn has joined #openstack-dev07:14
*** morganfainberg has quit IRC07:15
*** amerine has joined #openstack-dev07:15
*** ritzcarltn has joined #openstack-dev07:17
*** ritzcarltn has joined #openstack-dev07:17
*** davidha has quit IRC07:18
*** zyluo has joined #openstack-dev07:18
zyluoDoes anybody know the link to the new CLA form?07:19
*** yaguang has quit IRC07:20
*** avishay has joined #openstack-dev07:21
openstackgerritA change was merged to openstack/quantum: Enables packetfilter ext in NEC plugin based on its driver config  https://review.openstack.org/2295007:25
openstackgerritA change was merged to openstack/quantum: Set default api_extensions_path for NEC plugin  https://review.openstack.org/2294907:27
*** mindpixel has joined #openstack-dev07:29
*** ritzcarltn has quit IRC07:33
*** ritzcarltn has joined #openstack-dev07:37
*** adalbas has quit IRC07:39
*** mdomsch has quit IRC07:39
*** romcheg has quit IRC07:39
*** yuanz has quit IRC07:39
*** dubsquared has quit IRC07:39
*** ayoung has quit IRC07:39
*** sulrich has quit IRC07:39
*** locke105 has quit IRC07:39
*** dwilson has quit IRC07:39
*** maurosr has quit IRC07:39
*** adam_g has quit IRC07:39
*** ahale has quit IRC07:39
*** mrodden1 has quit IRC07:40
*** ritzcarltn has quit IRC07:40
*** yuanz has joined #openstack-dev07:40
*** ritzcarltn has joined #openstack-dev07:40
*** ahale has joined #openstack-dev07:41
*** dubsquared has joined #openstack-dev07:41
*** yaguang has joined #openstack-dev07:42
*** mrodden has joined #openstack-dev07:42
*** ayoung has joined #openstack-dev07:42
*** mdomsch has joined #openstack-dev07:43
*** dwilson has joined #openstack-dev07:43
*** blamar_ has joined #openstack-dev07:44
*** mrunge has joined #openstack-dev07:44
*** blamar has quit IRC07:45
*** blamar_ is now known as blamar07:45
*** henrynash has joined #openstack-dev07:47
*** flaper87 has joined #openstack-dev07:48
*** adalbas has joined #openstack-dev07:48
*** romcheg has joined #openstack-dev07:51
*** sulrich has joined #openstack-dev07:51
*** locke105 has joined #openstack-dev07:51
*** maurosr has joined #openstack-dev07:51
*** adam_g has joined #openstack-dev07:51
gongyshmordred: pong07:52
*** gargya has joined #openstack-dev07:55
*** reidrac has joined #openstack-dev07:55
*** thouveng has joined #openstack-dev07:55
*** markmcclain has quit IRC07:56
mordredgongysh: I couldn't see your comment on the deleted file07:56
mordredgongysh: gerrit is not showing it to me07:57
gongyshI have replied in the review msg.07:57
mordredoh, great!07:57
*** buzztroll_ has joined #openstack-dev07:57
gongyshmordred: I cannot see it myself.  I just see there is one comment. :)07:58
*** rafaduran has joined #openstack-dev07:58
mordredgongysh: k. replied myself- tl;dr - it was a test of code copied from oslo07:58
mordredwhich is tested in oslo07:58
*** yolanda has joined #openstack-dev08:01
gongyshmordred: ok, +2 from me.08:01
mordredgongysh: yippee!! (this set of patches is killing me) :)08:01
gongyshmordred: but you are alive, right? :)08:01
mordredgongysh: barely :)08:02
gongyshmordred: that is a good patch we need, hope with testr, we will reduce case running time a lot.08:02
mordredgongysh: me too. I still have a few more patches before we can do parallel -but they're getting closer08:03
*** eglynn has joined #openstack-dev08:05
*** zyluo has quit IRC08:07
*** jbr_zzz has left #openstack-dev08:10
*** zoresvit has joined #openstack-dev08:11
*** zoresvit has quit IRC08:15
*** davidha has joined #openstack-dev08:16
*** ondergetekende has joined #openstack-dev08:21
*** mmagr has joined #openstack-dev08:23
*** flepied has joined #openstack-dev08:26
*** Mandell has quit IRC08:28
*** yaguang has quit IRC08:29
*** BobBall has quit IRC08:30
*** BobBall has joined #openstack-dev08:30
*** BobBall has quit IRC08:32
*** zoresvit has joined #openstack-dev08:32
*** BobBall has joined #openstack-dev08:32
*** afazekas has joined #openstack-dev08:36
*** jgallard has joined #openstack-dev08:39
*** networkstatic has quit IRC08:40
*** almaisan-away is now known as al-maisan08:41
*** BobBall has quit IRC08:42
*** BobBall_ has joined #openstack-dev08:42
*** pixelbeat has joined #openstack-dev08:42
*** adjohn has quit IRC08:46
*** zing has joined #openstack-dev08:46
openstackgerritA change was merged to openstack/nova: if reset fails, display the command that failed  https://review.openstack.org/2288808:47
*** yaguang has joined #openstack-dev08:52
*** henrynash has quit IRC08:54
*** winston-d_ has quit IRC08:55
*** salv-orlando has joined #openstack-dev08:56
*** zoresvit has quit IRC08:58
*** gael has joined #openstack-dev08:59
*** wwallnrr__ has quit IRC08:59
*** jpich has joined #openstack-dev09:00
*** zoresvit has joined #openstack-dev09:01
*** zoresvit has quit IRC09:05
*** corXi has joined #openstack-dev09:06
*** boris-42 has joined #openstack-dev09:06
*** trapni has joined #openstack-dev09:09
*** trapni has joined #openstack-dev09:09
*** zeriouz has quit IRC09:11
*** derekh has joined #openstack-dev09:14
*** trapnii has joined #openstack-dev09:15
*** trapni has quit IRC09:16
*** adjohn has joined #openstack-dev09:17
*** markmc has joined #openstack-dev09:17
*** zoresvit has joined #openstack-dev09:19
*** AlanClark has quit IRC09:22
*** AlanClark has joined #openstack-dev09:23
*** johnthetubaguy1 has joined #openstack-dev09:23
*** darraghb has joined #openstack-dev09:24
*** adjohn has quit IRC09:26
*** psedlak has joined #openstack-dev09:31
*** yaguang has quit IRC09:31
*** maroh has joined #openstack-dev09:35
*** trapniii has joined #openstack-dev09:41
*** johnthetubaguy has quit IRC09:42
*** bing_bu has quit IRC09:43
*** bing_bu has joined #openstack-dev09:44
*** trapnii has quit IRC09:45
*** bing_bu has quit IRC09:45
*** henrynash has joined #openstack-dev09:46
*** danpb has joined #openstack-dev09:48
*** Nachi has quit IRC09:52
*** adjohn has joined #openstack-dev09:52
*** yaguang has joined #openstack-dev09:53
*** iartarisi has joined #openstack-dev09:56
*** adjohn has quit IRC09:58
openstackgerritA change was merged to openstack/ceilometer: Add glossary definitions for additional terms  https://review.openstack.org/2265110:00
marohgaryk : hi10:01
garykmaroh: hi10:01
marohgary, i'd like to test multi-agent patch10:02
openstackgerritA change was merged to openstack/ceilometer: Remove nose wrapper script  https://review.openstack.org/2289110:02
marohgaryk, do you already filled the wiki page you spoked about yesterday?10:02
*** trapniii has quit IRC10:02
garykmaroh: not yet. on my to do list10:03
garykmaroh: you having problems with ovs and devstack?10:03
marohi didn't try yet10:03
marohgaryk, so let's try first ;-)10:05
*** jbr_ has joined #openstack-dev10:09
*** trapniii has joined #openstack-dev10:16
*** aloga is now known as ojete10:16
*** arosen has quit IRC10:16
*** ojete is now known as aloga10:17
*** arosen has joined #openstack-dev10:20
*** yaguang has quit IRC10:20
*** mindpixel has quit IRC10:21
*** zoresvit has quit IRC10:26
*** armaan has quit IRC10:29
*** zoresvit has joined #openstack-dev10:32
*** AlanClark has quit IRC10:34
*** hattwick has joined #openstack-dev10:35
*** masumotok has joined #openstack-dev10:37
*** johnthetubaguy1 has quit IRC10:41
*** armaan has joined #openstack-dev10:45
*** johnthetubaguy has joined #openstack-dev10:47
*** yamahata has joined #openstack-dev10:48
*** vkmc has joined #openstack-dev10:53
*** amerine has quit IRC10:57
*** danwent has quit IRC10:58
*** ritzcarltn has quit IRC10:59
*** Ritz has joined #openstack-dev11:00
*** mkollaro has joined #openstack-dev11:02
*** jgallard has quit IRC11:03
*** jgallard has joined #openstack-dev11:05
*** pcm_ has joined #openstack-dev11:10
openstackgerritA change was merged to openstack/quantum: Use testtools instead of unittest or unittest2.  https://review.openstack.org/2135011:31
*** larsbutler has joined #openstack-dev11:32
*** yaguang has joined #openstack-dev11:33
*** larsbutler has quit IRC11:34
*** larsbutler_ has joined #openstack-dev11:34
*** tomoe_ has quit IRC11:36
*** larsbutler_ is now known as larsbutler11:37
*** davidh_ has joined #openstack-dev12:04
*** mohits has joined #openstack-dev12:05
*** davidha has quit IRC12:06
*** rkukura has quit IRC12:08
*** mkollaro has quit IRC12:11
*** trapniii has quit IRC12:14
*** trapni has joined #openstack-dev12:16
*** trapni has joined #openstack-dev12:16
*** adjohn has joined #openstack-dev12:24
*** mohits has quit IRC12:25
*** ilblackd_ has joined #openstack-dev12:27
*** adjohn has quit IRC12:29
*** ilblackdragon has quit IRC12:30
*** gongysh has quit IRC12:36
*** zoresvit has quit IRC12:38
*** gongysh has joined #openstack-dev12:39
*** jbresnah has joined #openstack-dev12:39
*** buzztroll_ has quit IRC12:40
*** krtaylor has quit IRC12:41
*** yaguang has quit IRC12:42
*** espen__ has quit IRC12:49
*** navid has left #openstack-dev12:52
*** mohits has joined #openstack-dev12:54
*** jgallard has quit IRC12:54
*** zoresvit has joined #openstack-dev12:56
*** kashyap has quit IRC12:56
*** sandywalsh has quit IRC12:56
*** krtaylor has joined #openstack-dev12:57
*** navid has joined #openstack-dev12:57
*** martine has joined #openstack-dev13:00
*** zoresvit has quit IRC13:01
*** tomoe_ has joined #openstack-dev13:01
*** wowdd1 has joined #openstack-dev13:01
*** soody has joined #openstack-dev13:03
*** amotoki has quit IRC13:04
*** mindpixel has joined #openstack-dev13:06
*** olaph has quit IRC13:08
*** sandywalsh has joined #openstack-dev13:09
*** olaph has joined #openstack-dev13:10
*** soody has quit IRC13:11
*** alexxu has quit IRC13:12
*** jbresnah_ has joined #openstack-dev13:12
*** jbresnah has quit IRC13:13
*** Yada has joined #openstack-dev13:13
*** markvoelker has joined #openstack-dev13:14
*** zoresvit has joined #openstack-dev13:15
*** Saurabh has joined #openstack-dev13:17
Saurabhneed help with debugging dhcp-agent. Could anyone help me out with using pdb for dhcp agent?13:18
Saurabhwhen I try strace I get this error                         AttributeError: 'NoneType' object has no attribute 'rpartition'13:21
*** adjohn has joined #openstack-dev13:24
*** alunduil has quit IRC13:27
*** adjohn has quit IRC13:29
*** digitalsanctum has joined #openstack-dev13:29
*** arbrandes has joined #openstack-dev13:34
*** dolphm has joined #openstack-dev13:36
*** imsplitbit has joined #openstack-dev13:37
*** anteaya has joined #openstack-dev13:39
*** armaan has quit IRC13:40
ayounghenrynash, can you take a look at https://review.openstack.org/#/c/22889/?  It is a prereq for Trusts.13:43
*** gongysh has quit IRC13:43
*** anniec has joined #openstack-dev13:52
*** doude has joined #openstack-dev13:52
alogamikal: ping13:52
*** edmund has joined #openstack-dev13:55
*** gongysh has joined #openstack-dev13:56
henrynashayoung: made one commend - minor…but probably worth correcting…then will +213:57
ayoungyou are correct.13:57
ayoungWill fix.13:57
henrynashayoung: ok13:57
*** mohits has quit IRC14:00
*** dprince has joined #openstack-dev14:00
dolphmayoung: docstr is wrong too14:00
dolphmayoung: or at least, it's not at all indicative of what's actually being asserted14:01
ayoungdolphm, ok14:01
henrynashdolphm: made comments to your concerns on https://review.openstack.org/#/c/22789/ - let me know what you think14:02
*** kbringard has joined #openstack-dev14:03
*** johnthetubaguy has quit IRC14:03
ayoungdolphm, are we close?14:04
*** johnthetubaguy has joined #openstack-dev14:04
dolphmayoung: see comments on trusts14:04
ayoungdolphm, yeah, those are both easy fixes (I think) .  So nothing major?14:05
dolphmayoung: don't know yet -- haven't finished writing the test i have in my head because of those failures14:06
dolphmayoung: +2 when my test passes :) will simply be exercising every new call in the spec, with and without impersonation14:07
*** yaguang has joined #openstack-dev14:10
ayoungdolphm, so, On the roles, right now I have it implemented with role_id only.  In order to do anything more, I would have to do additional sql from the controller, and I was too tired/stupid to do that last night without messing it up.14:10
*** annegentle has joined #openstack-dev14:10
dolphmayoung: we'll get it today14:11
*** topol has joined #openstack-dev14:12
*** ladquin has joined #openstack-dev14:15
*** anniec has quit IRC14:16
*** anniec has joined #openstack-dev14:17
ayoungdolphm, so if I get a list with role names in them, to translate them to role Ids, I need to query the roles.  Do you think it is a safer assumption that the list of roles will be short and we should query the whole list once and then hold it in memory, or do a look up for each individual role?  I think the whole list.14:18
dolphmayoung: not sure what you mean? cache the list of all roles in memory?14:19
ayoungdolphm, yeah.14:19
ayoungdolphm, not across calls14:19
ayoungjust for a single create_trust call14:19
dolphmayoung: ah, i bet it would be short14:19
openstackgerritA change was merged to openstack/nova: Minor code optimization in _compute_topic  https://review.openstack.org/2268814:19
ayoungdolphm, that's my take as well..14:19
dolphmayoung: call list_roles rather than get_role_by_name several times?14:20
ayoungcorrect14:20
dolphmthat works14:20
*** ondergetekende has quit IRC14:20
*** ondergetekende has joined #openstack-dev14:20
*** jergerber has joined #openstack-dev14:20
ayounghenrynash, you are referring to : TODO(henry-nash) do we need to put the whole object14:22
ayoungI can take that out now, right?14:22
henrynashayoung: yep…you solved that issue by flattening the object!14:22
*** doude has quit IRC14:22
*** jaypipes has quit IRC14:23
*** zoresvit has quit IRC14:24
*** kgriffs has joined #openstack-dev14:24
*** rkukura has joined #openstack-dev14:29
*** bknudson has joined #openstack-dev14:29
*** mindpixel has quit IRC14:30
dolphmayoung: do i have to request the same project scope as defined in the trust, or does the trust imply the scope automatically?14:31
*** stevemar has joined #openstack-dev14:32
ayoungdolphm, when asking for the token?  Everything is defined by the trust14:34
ayoungyou should not have to specify scoped other than the trust14:34
dolphmayoung: k14:35
topoldolphm, what is the invisible_to_admin project used for? Is this documented somewhere?14:35
ayoungdolphm, can I push https://review.openstack.org/#/c/22889/1014:35
dolphmtopol: i've always wondered what that was, i have no idea14:35
ayoungtopol, I think it is just a demonstration of the capability done by devstack.  It isn't something meant to be there in a live deploy14:36
dolphmayoung: done14:36
ayoungwhew14:36
*** READ10 has joined #openstack-dev14:37
devanandaannegentle: ping14:38
annegentledevananda: heyo14:38
*** YorikSar has quit IRC14:38
*** mohits has joined #openstack-dev14:39
devanandaannegentle: hi! have a few minutes for nova doc questions?14:39
*** Q310 has joined #openstack-dev14:40
*** Qten has quit IRC14:40
annegentledevananda: sure14:40
devanandaannegentle: more specifically, i need to write all the docs for baremetal driver. can you point me to resources/examples/etc of where to put them, formatting, etc?14:41
*** zoresvit has joined #openstack-dev14:41
*** jgallard has joined #openstack-dev14:42
annegentledevananda: the audience you're writing for is operators who want to do this, right?14:42
devanandaannegentle: yep14:43
annegentledevananda: You'll want to add it to the Compute Admin manual14:43
annegentledevananda: this page has a ton of info https://wiki.openstack.org/wiki/Documentation/HowTo14:43
annegentledevananda: this week I'm otherwise occupied with the book sprint, but you can ask any questions in #openstack-doc14:43
*** CaptTofu has joined #openstack-dev14:43
annegentledevananda: I'd say, put it in a new section in this chapter http://docs.openstack.org/folsom/openstack-compute/admin/content/ch_openstack-compute-automated-installations.html14:44
annegentledevananda: the source file is https://github.com/openstack/openstack-manuals/blob/master/doc/src/docbkx/openstack-compute-admin/computeautomation.xml14:45
annegentledevananda: editor options are described here: https://wiki.openstack.org/wiki/Documentation/HowTo#Editor_Options14:46
*** primeministerp has joined #openstack-dev14:46
devanandaannegentle: hm, so there's the general "how to do a baremetal deploy" -- what' the environment, what should/shouldn't be runnig, etc -- and then there's "how to deploy openstack using openstack"14:47
annegentledevananda: that's probably all you can intake for now. Another option is to write it all in asciidoc or markdown or RST and we'll get it into docbook14:47
devanandaannegentle: automation is more the second. right now, i'm aiming to document the former first ;)14:47
annegentledevananda: ah, okay14:47
annegentledevananda: so perhaps you're better off with a new standalone book14:48
devanandait's a bit of a different beast than just using nova-compute, since there are specific network bits for pxe booting, etc, that need to be explained14:48
annegentledevananda: the compute admin guide is getting bloated anyway14:48
*** nunosantos has joined #openstack-dev14:49
devanandaannegentle: new book seems fine.14:49
devanandaannegentle: i'll dig into those links and see how far i get. thanks!14:49
*** nunosantos has quit IRC14:50
*** nunosantos has joined #openstack-dev14:51
*** davidh_ has quit IRC14:51
*** davidha has joined #openstack-dev14:52
*** mtreinish has joined #openstack-dev14:52
annegentledevananda: you might like the HA guide, https://github.com/openstack/openstack-manuals/tree/master/doc/src/docbkx/openstack-ha14:52
annegentledevananda: as a model14:52
ayoungdolphm, I might just be getting the hang of this python thing.  http://www.fpaste.org/fcxp/14:55
*** adjohn has joined #openstack-dev14:55
dolphmayoung: pep8 line 214:55
ayoungdolphm, heh14:55
dolphmayoung: raise exception.ValidationError(attribute='id or name', target='roles')14:56
dolphmayoung: couple more pep8 violations14:56
ayoungdolphm, I'll get them before posting14:57
*** radez_g0n3 is now known as radez14:57
ayoungdolphm, so on validating the trust dictionary on create,  would it be14:57
ayoungexcept KeyError as e:14:58
ayoung            raise exception.ValidationError(attribute=e.args[0],14:58
ayoung                                            target='trust')14:58
*** zykes- has quit IRC14:58
dolphmayoung: i have no idea what KeyError args look like?14:59
ayoungdolphm, it is a tuple14:59
dolphmayoung: of?14:59
ayoungdolphm, the key names.14:59
dolphmayoung: how would there be more than one key name?14:59
ayoungdolphm, I think it gets args from the base class.  That is just where it stores them15:00
*** adjohn has quit IRC15:00
ayoungdolphm, but I've confirmed that is where they go.  I've a test for it now.15:00
dolphmayoung: cool15:00
dolphmthe signature looks fine otherwise15:00
*** YorikSar has joined #openstack-dev15:01
*** nunosantos has quit IRC15:02
*** ijw1 has joined #openstack-dev15:04
*** aeperezt has joined #openstack-dev15:04
*** zykes- has joined #openstack-dev15:04
*** dolphm has quit IRC15:04
*** jimfehlig has joined #openstack-dev15:05
*** ndipanov has quit IRC15:05
*** ijw has quit IRC15:06
*** YorikSar has quit IRC15:06
*** ndipanov has joined #openstack-dev15:06
*** YorikSar has joined #openstack-dev15:07
*** CaptTofu has quit IRC15:08
*** CaptTofu has joined #openstack-dev15:09
*** al-maisan is now known as almaisan-away15:11
*** primeministerp has quit IRC15:11
*** sthaha has quit IRC15:11
*** rnirmal has joined #openstack-dev15:12
*** zing has quit IRC15:13
*** blamar has quit IRC15:13
*** zing has joined #openstack-dev15:13
*** blamar has joined #openstack-dev15:15
*** john5223 has joined #openstack-dev15:15
*** dolphm has joined #openstack-dev15:16
*** psedlak has quit IRC15:16
*** pabelanger has joined #openstack-dev15:16
*** riskable has joined #openstack-dev15:16
*** mindpixel has joined #openstack-dev15:18
*** cloudchimp has joined #openstack-dev15:18
openstackgerritA change was merged to openstack/keystone: flatten payload for policy  https://review.openstack.org/2288915:20
*** CaptTofu has quit IRC15:21
*** afazekas has quit IRC15:21
*** CaptTofu has joined #openstack-dev15:23
*** AlanClark has joined #openstack-dev15:23
*** eharney has joined #openstack-dev15:24
*** adjohn has joined #openstack-dev15:26
*** annegentle has quit IRC15:26
*** adjohn has quit IRC15:27
*** adjohn has joined #openstack-dev15:27
*** gordc has joined #openstack-dev15:29
*** NobodyCam has quit IRC15:31
*** jsindy has joined #openstack-dev15:31
openstackgerritA change was merged to openstack/quantum: Make sure all db accesses use subtransaction  https://review.openstack.org/2297915:32
*** CaptTofu_ has joined #openstack-dev15:32
*** garyTh has joined #openstack-dev15:32
*** CaptTofu has quit IRC15:32
*** alunduil has joined #openstack-dev15:32
ayoungdolphm, just updated the trusts patch with a cleaned up version of that change.  It had a few side effects, I think maybe flushing out some bugs.  Let me know now if you can't get your test working and I'll work through it with you.15:33
dolphmayoung: cool15:33
*** alunduil has quit IRC15:33
*** alunduil has joined #openstack-dev15:34
*** epim has joined #openstack-dev15:35
*** blamar has quit IRC15:38
*** sacharya has joined #openstack-dev15:38
*** opilotte has quit IRC15:38
dolphmayoung: I got Expecting to find id in trust while trying to POST /trusts15:38
*** otherwiseguy has joined #openstack-dev15:38
*** blamar has joined #openstack-dev15:38
*** digitalsanctum has quit IRC15:38
*** Gordonz has joined #openstack-dev15:39
*** Gordonz has quit IRC15:39
topoldolphm,  do we provide more documentation on the role migration beyond what is found in keystone.conf.sample?15:39
topol# Role for migrating membership relationships15:39
topol# During a SQL upgrade, the following values will be used to create a new role15:39
topol# that will replace records in the user_tenant_membership table with explicit15:39
topol# role grants.  After migration, the member_role_id will be used in the API15:39
topol# add_user_to_project, and member_role_name will be ignored.15:39
*** digitalsanctum has joined #openstack-dev15:40
*** Gordonz has joined #openstack-dev15:40
dolphmayoung: ^15:40
dolphmtopol: i'm not aware of any other docs atm15:40
*** jkordish_ has joined #openstack-dev15:41
*** jkordish has quit IRC15:42
topoldolphm, are we planning to cover this in more detail ?15:42
*** gongysh has quit IRC15:42
dolphmtopol: i think we need a full folsom->grizzly migration guide15:42
topoldolphm, +1000 :-)15:43
*** john5223 has quit IRC15:43
dolphmtopol: are you familiar with grenade?15:44
topoldolphm, the ones people throw at me when Im at work?15:44
dolphmtopol: yep :) https://github.com/nebula/grenade15:44
*** navid has left #openstack-dev15:45
dolphmtopol: there's already a workaround for a migration bug we have15:45
*** zeriouz has joined #openstack-dev15:45
*** jimfehlig has quit IRC15:46
bknudsonanybody else seen this, from run_tests.sh --update: No distributions at all found for oslo-config from http://tarballs.openstack.org/oslo-config/oslo-config-2013.1b4.tar.gz ...15:46
*** zaneb has joined #openstack-dev15:46
*** gargya has quit IRC15:46
topoldolphm, so no Im not familiar with grenade.  Whats its purpose?15:46
dolphmtopol: primary goal is to test the upgrade process, but at the same time it happens to produce a decent starting point for human-readable upgrade docs :)15:47
dolphmdtroyer: /salute15:47
topoldolphm, OK. good to know15:48
*** jsindy has quit IRC15:48
*** jimfehlig has joined #openstack-dev15:49
*** zbitter has quit IRC15:49
*** CaptTofu_ has quit IRC15:50
alogadolphm: awesome15:50
aloga(the grenade stuff)15:50
dolphmbknudson: i'm pretty sure there's a fix floating around for that -- i got around it by pip installing it and passing -N to run_tests.sh15:53
*** bswartz has quit IRC15:53
dolphmbknudson: (i.e. setting up my own venv)15:53
bknudsondolphm: I'll give it a shot.15:53
*** mrodden has quit IRC15:54
*** gargya has joined #openstack-dev15:55
*** dhellmann has joined #openstack-dev15:55
*** john5223 has joined #openstack-dev15:55
*** dhellmann has quit IRC15:56
*** dhellmann has joined #openstack-dev15:57
*** edmund has quit IRC15:57
*** koolhead17 has joined #openstack-dev15:57
*** sacharya has quit IRC15:57
ayoungdolphm, hmmm...15:57
*** rushiagr has quit IRC15:58
ayoungdolphm, which backend?15:58
dolphmayoung: sql i guess, but i'm assuming that error is at the controller layer?15:59
dolphmayoung: do you raise ValidationError anywhere else?15:59
ayoungdolphm, no.  But I also don't check for 'id'15:59
dolphmayoung: i'm guessing your e.args[0] is actually referring to some other 'id', but you're catch all is hardcoded to mention 'trusts'16:00
dolphmyour*16:00
ayoungdolphm, the only collection inside there is the roles, and that also does a validation error16:00
dolphmayoung: run the request i pasted16:01
*** reidrac has quit IRC16:01
ayoungdolphm, I realize I had a start of the role code here as well:16:01
ayoung_fill_in_roles16:02
openstackgerritA change was merged to openstack/nova: Allow zk driver be imported without zookeeper  https://review.openstack.org/2291816:04
*** pnavarro has joined #openstack-dev16:04
*** datsun180b has joined #openstack-dev16:04
*** ijw1 is now known as ijw16:08
*** burris has quit IRC16:08
*** burris has joined #openstack-dev16:08
*** yaguang has quit IRC16:08
*** devoid has joined #openstack-dev16:09
*** mrodden has joined #openstack-dev16:09
*** CaptTofu has joined #openstack-dev16:10
*** markmcclain has joined #openstack-dev16:11
*** mrodden1 has joined #openstack-dev16:12
*** sstent_ has joined #openstack-dev16:12
*** networkstatic has joined #openstack-dev16:12
*** markmcclain has quit IRC16:13
*** sstent_ has joined #openstack-dev16:13
*** mrodden has quit IRC16:13
zulmordred:  ping16:13
*** sstent_ has quit IRC16:14
*** sstent_ has joined #openstack-dev16:14
*** jsindy has joined #openstack-dev16:14
*** john5223 has quit IRC16:15
*** anniec has quit IRC16:15
ayoungdolphm, OK, reproduced16:16
*** markmcclain has joined #openstack-dev16:16
*** ociuhandu has joined #openstack-dev16:17
*** lorin11 has joined #openstack-dev16:17
dolphmayoung: awesome16:17
*** ociuhandu has quit IRC16:18
*** ociuhandu has joined #openstack-dev16:18
ayoungdolphm, it is from the clean role list function.16:18
*** esheffield has joined #openstack-dev16:19
*** networkstatic has quit IRC16:19
*** edmund has joined #openstack-dev16:20
openstackgerritA change was merged to openstack/oslo-incubator: Fixes import order nits  https://review.openstack.org/2295616:21
ayoungdolphm, so the problem is with the sql backend, when getting called from the controller.  I'll post afix shortly16:21
dolphmayoung: thanks16:21
*** boris-42 has quit IRC16:22
*** gasbakid has joined #openstack-dev16:23
*** gasbakid_ has joined #openstack-dev16:23
*** jaypipes has joined #openstack-dev16:23
dolphmayoung: POST /trusts {"trust": {}} returns a 403 instead of a 40016:23
*** gasbakid has quit IRC16:24
ayoungdolphm, ah, probably because of Policy denying it.16:24
dolphmayoung: that's what i was thinking16:24
dolphmayoung: lower priority, but captured in a test for later16:24
dolphmayoung: Expecting to find roles in trust. <-- roles shouldn't be required (ability to delegate nothing)16:25
ayoungdolphm, intersting conundrum, which takes priority, validation or policy.  I'm almosted tempted to fix that in the policy layer16:25
*** cp16net is now known as cp16net|away16:26
ayoungdolphm, meh.  Trust with no roles is probably a mistake16:26
dolphmayoung: i think it makes sense to raise 400 from policy if the user is expecting an attribute that wasn't provided16:26
dolphmayoung: might be weird for users to debug, but it'd be their own fault16:26
dolphmayoung: i like the idea, because it makes sense to set impersonation=True but without roles16:26
ayoungdolphm, agreed.  I'll open a ticket for that16:26
dolphmayoung: so, you can get an unscoped token as me16:27
*** rushiagr has joined #openstack-dev16:27
ayoungdolphm, OK,  I can remove the check that roles must have something in them.16:27
dolphmayoung: don't expect the attribute at all, either16:27
*** digitalsanctum has quit IRC16:27
lorin11When is the  "AUDIT" level of logging used?16:28
ayoungdolphm, the token code raises an exception if there are no roles,16:28
*** bswartz has joined #openstack-dev16:28
dolphmayoung: empty should be cool too though16:28
ayoungfeature add?16:28
*** jsindy has quit IRC16:28
*** gargya has quit IRC16:28
dolphmayoung: why would the token code fail without roles? that's what an unscoped token is16:28
dolphmayoung: oh, if a project_id was provided, then roles should be provided16:28
dolphmayoung: they go hand-in-hand16:28
dolphmayoung: i'll amend the spec on that16:28
*** digitalsanctum has joined #openstack-dev16:29
ayoungdolphm,  https://bugs.launchpad.net/keystone/+bug/113343516:29
uvirtbotLaunchpad bug 1133435 in keystone "policy should return a 400 if a required filed is missing" [Undecided,New]16:29
*** ondergetekende has quit IRC16:29
*** john5223 has joined #openstack-dev16:30
*** danwent has joined #openstack-dev16:30
dolphmayoung: filed -> field16:30
*** wowdd1 has quit IRC16:30
ayoungdolphm, which file?16:30
dolphmayoung: your bug title16:30
ayounggot it16:33
mordredzul: pong16:33
*** mrodden has joined #openstack-dev16:33
zulmordred/jamespage: just opened https://bugs.launchpad.net/oslo/+bug/1133433 we wanted to talk to you about it first16:34
uvirtbotLaunchpad bug 1133433 in oslo "Running python setup.py sdist for quantum creates the wrong version." [Undecided,New]16:34
zuljamespage: ^^^16:34
mordredzul: oh gosh16:35
mordredzul: not more version code16:35
*** bdpayne has joined #openstack-dev16:35
mordredis quantum using it differently than glance and nova and friends?16:35
zulmordred:  yoru favorite!16:35
*** trapni has quit IRC16:35
*** mrodden1 has quit IRC16:35
mordredzul: lemme look real quick...16:36
zulmordred:  i think so it seems to be stripping off the g3-38 bits16:36
zulmordred: k16:36
*** gyee has joined #openstack-dev16:36
mordredzul: oh - nope. that's right16:37
zulerm?16:37
*** sacharya has joined #openstack-dev16:37
mordredzul: it's mildly weird because we used g-based tags for consistency since we'd used ~g1 and ~g2 before16:37
zulso where is the a38 coming from?16:37
mordredzul: per-commit non-tagged versions are still indicating pre-release16:38
mordredso16:38
*** dontalton has joined #openstack-dev16:38
mordredwe take the version that we are working towards from setup.py - which is 2013.116:38
zulright16:38
mordredwe append an alpha tag (a26)16:38
mordredand then the git sha16:38
*** radez is now known as radez_g0n316:38
zulok16:38
mordredif we kept the g3 in there, it would look like we were working towards g316:39
mordred(this is baesd on python version sorting)16:39
*** gargya has joined #openstack-dev16:39
mordredNOW - there is a bug in that16:39
mordredbecause I'm pretty sure the a count is off, given that there was a g3-based tag16:40
*** gargya has quit IRC16:40
*** rushiagr has quit IRC16:40
*** sacharya has quit IRC16:40
*** devoid has quit IRC16:41
*** sacharya has joined #openstack-dev16:41
*** trapni has joined #openstack-dev16:42
*** devoid has joined #openstack-dev16:42
*** sstent_ has quit IRC16:42
*** sstent_ has joined #openstack-dev16:42
zulmordred: well ill leave it with you then16:42
zuljamespage:  unless if you have somethign to add16:42
dolphmayoung: are you working on not requiring roles? still getting a 400 on that in patchset 3416:42
*** zeriouz has quit IRC16:42
ayoungdolphm, no, I posted that before we talked16:43
*** thouveng has quit IRC16:43
*** mdomsch has quit IRC16:43
*** mohits has quit IRC16:43
dolphmayoung: err, you're not working on it?16:43
dolphmayoung: or are working on it, and i shouldn't expect it in 34 :P16:43
ayoungI was not working on it16:44
jamespagemordred, but the alpha tag is not sequential which is what is causing us a bit of a headache16:44
jamespagemordred, its rev's since last tag16:44
ayoungdolphm,  I was cleaning up the fact that I query the global role list twice16:44
mordredjamespage: yes, you are right. we don't have any context to know revs since last tag-we-care-about16:44
ayoungdolphm, I'll remove the check, though.16:44
mordredjamespage: I suppose we could go back to revs-since-beginning-of-time16:45
openstackgerritA change was merged to openstack/tempest: Implements test_update_all_metadata_field_error.  https://review.openstack.org/2266316:45
mordredbut it's still going to cause you problems16:45
dolphmayoung: cool16:45
jamespagemordred, so long as revs continually increments I'm good :-)16:45
mordredjamespage: well, they're not going to from a debian perspective regardless16:45
mordredwithout modification from you16:46
jamespagemordred, well for the 'released' versions of the packages we can handle that16:46
garykarosen: ping16:46
jamespagemordred, this is more for the CI stuff16:46
mordredjamespage: indeed. so, the problem is that the tags will be things like 2013.2.b1 and 2013.2.b216:46
mordredjamespage: but per-commit versions will be things like 2013.2.aXXX.gXXX16:47
mordredjamespage: regardless of whether they came before or after a particular milesotne16:47
jamespagemordred, I can handle that in the lab versioning16:47
jamespagethe output from the lab never gets to the archive - only to a PPA16:47
mordredcool. so what am I breaking?16:47
jamespagemordred, lemme give you an example16:47
mordredossum16:48
openstackgerritA change was merged to openstack/tempest: Simplify xml-json inheritance in identity  https://review.openstack.org/2278816:48
jamespagemordred, context cinder16:49
jamespage 2013.1.a12.gb3aa798+git201302260941~raring-0ubuntu1 <= 2013.1.a201.g66532ca+git201302202031~raring-0ubuntu116:49
jamespage2013.1.a201.g66532ca was uploaded pre g316:49
jamespagerev counter resets since the 2013.1.g3 tag16:49
jamespageso 2013.1.a12.gb3aa798 < 2013.1.a20116:50
jamespage.g66532ca16:50
mordredyes16:50
dolphmayoung: extra data on the entity seems to be ignored?16:51
mordredjamespage: only thing I can think of there is to replace the revcount portion with one calculated by doing git log --online | wc -l16:51
dolphmayoung: if i add a description it's being discarded16:51
mordreds/online/oneline/16:51
ayoungdolphm, there is no description field.  There is no extra.16:51
mordredjamespage: biggest problem with that is that for nova it takes 0.3 seconds to run that16:52
ayoungdolphm, It is in the db, but Ignored it elsewhere.16:52
mordredbut - perhaps that isn't a terrible problem16:52
dolphmayoung: ... use it16:52
*** zaitcev has joined #openstack-dev16:52
*** hemna has joined #openstack-dev16:53
dolphmayoung: every other entity supports extra attributes16:53
vishyzul: care to approve the chain ending here: https://review.openstack.org/#/c/22945/ ?16:53
openstackgerritA change was merged to openstack/glance: Fix broken JSON schemas in v2 tests  https://review.openstack.org/2291416:53
jamespagemordred, or you keep context to the rev count by including the full tag16:54
zulvishy:  done16:54
jamespage2013.1.g3.aXX.YYYYY16:54
*** jsindy has joined #openstack-dev16:54
jamespagemordred, I see you said 'if we kept the g3 in there, it would look like we were working towards g3'16:55
*** mindpixel has quit IRC16:55
mordredyes16:55
jamespageI guess that is one way of looking at it16:55
*** zeriouz has joined #openstack-dev16:56
mordredbecause 2013.1.g3.aXXX in python will sort like an alpha of g316:56
ayoungdolphm, OK.  I'll get that, too.16:56
jamespagegah16:56
mordredwhich is itself a pre-release of 2013.116:56
gyeedolphm, ayoung, henrynash, https://review.openstack.org/#/c/22893/16:56
mordredyeah16:56
mordredjamespage: I promise, ever gah you feel here I'm right there with you on16:56
mordredjamespage: it turns out there is NO versioning model which works for pre-release versioning in a vendor-neutral manner16:57
henrynashgyee: ok, looking at it16:57
ayounggyee, after I get done with trusts16:57
mordredthe only version schemes which sort properly with everyones tools are post-release versioning16:57
ayounggyee, It counts as a bug fix, and can go in tonight. I need trusts in by the meeting this evening16:57
gyeeayoung, I had a bunch of comments for trusts impl, did you have a chance to look at them?16:57
mordredjamespage: it makes me want to die16:57
jamespagemordred, OK - I think I will rework the versioning on the CI lab to override the generated version number16:57
ayounggyee, which review #?  I might have16:58
*** markmcclain has quit IRC16:58
mordredjamespage: probably the safest thing to do - esesntially, assume the version I give you on a per-commit basis is meaningless16:58
*** nunosantos has joined #openstack-dev16:58
*** trapni has quit IRC16:58
dolphmgyee: ayoung is busy ;)16:58
ayoungand tired16:58
jamespagemordred, I note that OSLO_PACKAGE_VERSION looks like it will allow us to override+ still use sdist16:58
*** rpedde_away is now known as rpedde16:58
mordredjamespage: yes. we put that there just for you16:59
mordredwell, actually I believe for SuSE ... but you know :)16:59
jamespagemordred, right-oh!16:59
jamespagemordred, you almost made me feel loved for a minute then ;-)16:59
mordredjamespage: you are loved ... I promise ...16:59
jamespagemordred, lol16:59
mordredjamespage: everytime it feels like I'm screwing you over, I probably could have made things much worse but held back because I like you :)17:00
*** markmcclain has joined #openstack-dev17:00
gyeeayoung, sorry, do your thing17:01
ayounggyee, on trust impl, what review numbers?17:01
*** jcmartin has joined #openstack-dev17:01
gyeeayoung, 2817:01
ayounglooking17:02
dolphmgyee: +2 other than nit17:02
gyeeayoung, I can review it one more time17:02
dolphmgyee: tests are awesome17:02
openstackgerritA change was merged to openstack/nova: Additional tests for safe parsing with minidom  https://review.openstack.org/2244217:02
ayounggyee, I saw that you -1 it, but I didn;t see the line comments.  Did you post them?17:03
gyeedolphm, thanks, I'll correct the comment msg17:03
dolphmayoung: commit msg17:03
ayounggyee, I see your patch 16 messages17:04
*** yidclare has joined #openstack-dev17:04
dolphmgyee: np, bug will remain Confirmed forever otherwise, because we'll never notice :P17:04
ayounggyee, and I agree, but can I do that on a future commit?17:05
dolphmayoung: gyee: what's the issue on trusts?17:05
ayoungdolphm, sorry, test cleanup17:05
*** sandywalsh has quit IRC17:06
gyeedolphm, trust have expires_at while the spec have expires17:06
gyeejust some minor inconsistencies17:06
dolphmayoung: on the /trusts/{trust_id}/roles stuff, write it in the RoleV3 controller so you get the wrappers for free, and then call back to self.trust_api to get the list of roles for the trust, etc17:06
dolphmgyee: i'd rather fix the spec on that, i prefer _at17:07
*** jsindy has quit IRC17:07
dolphmgyee: heckj blocked my similar patch for tokens17:07
ayoungdolphm, can I call that from the Trust Controlle17:07
*** jsindy has joined #openstack-dev17:07
dolphmayoung: ? you shouldn't need to -- have the role controller call the trust driver17:08
dolphmayoung: setup routing in identity_api as well17:08
ayoungdolphm, on create trust?17:08
*** ijw1 has joined #openstack-dev17:08
dolphmayoung: err, not identity_api... identity.routers17:08
ayoungdolphm, ah...can I punt on that for now?  It really is not needed for base functionality17:08
dolphmayoung: create_trust can call self.identity_api.get_role()17:08
ayoungdolphm, yeah, doing that17:09
dolphmayoung: i'd disagree, and it's pretty simple to impl17:09
*** jgallard has quit IRC17:09
*** sandywalsh has joined #openstack-dev17:09
dolphmayoung: not having basic crud isn't a bug, it's a missing feature17:09
ayoungdolphm, what is needed is the ability to create trusts, and to execute them.  There is a way to query them, and the roles17:09
gyeeayoung, also, in auth/method/tokens.py, you can just raise Unauthorized if user attempt to authenticate with a trust token17:10
ayounglet me get the  extra...in there17:10
*** ijw has quit IRC17:10
gyeeonly use case for token auth is re-scoping, trust token can't be used for re-scoping17:10
*** ijw1 has quit IRC17:10
*** ijw has joined #openstack-dev17:11
*** john5223 has quit IRC17:11
*** mmagr has quit IRC17:11
dolphmgyee: want me to revise your commit message?17:11
dolphmgyee: i'd like to +2 :)17:11
*** lglenden has joined #openstack-dev17:12
gyeedolphm, I am rebasing17:12
dolphmgyee: ah, cool17:13
gyeewill push another review with the correct comment shortly17:13
dolphmgyee: that's why i want to +2 -- i know i'm going to rebase on top of yours17:13
*** edmund has quit IRC17:13
dolphmgyee: but also have to test ayoung's17:13
*** NobodyCam has joined #openstack-dev17:13
gyeedolphm, looks like my rebasing is not happen, time for some manual merge17:14
gyees/happen/happy17:14
*** hemna has quit IRC17:15
*** romcheg1 has joined #openstack-dev17:20
*** romcheg1 has left #openstack-dev17:20
*** heckj has joined #openstack-dev17:21
gyeedolphm, new patch is ready17:22
*** heckj has quit IRC17:23
*** heckj has joined #openstack-dev17:23
*** john5223 has joined #openstack-dev17:24
*** hemna has joined #openstack-dev17:25
*** eharney has quit IRC17:27
*** eharney has joined #openstack-dev17:28
jgriffithjamespage: ping17:28
*** adjohn has quit IRC17:28
jamespagejgriffith, hey!17:28
jgriffithjamespage: hola17:28
jgriffithjamespage: So I wanted to try and recreate what you're seeing...17:29
ayoungdolphm, updated trusts patch.  Does not have the roles controller work, but should store extra.  Haven't added a test for that yet.17:29
jamespagejgriffith, please - how can I help?17:29
jgriffithjamespage: anything special I need to know?  Your config looks fine17:29
dolphmayoung: no worries, i've already got the test17:29
jgriffithjamespage: Are you doing devstack or packages or ????17:29
ayoungfigured17:29
jamespagejgriffith, well this is running on Ubuntu raring from packages17:29
jgriffithjamespage: Ok...17:29
dolphmayoung: still fleshing stuff out, but i want to get this into review on top of yours soon17:29
jamespagejgriffith, I did a bit of debugging and the code that searches for the filters does not seem to find them17:29
jamespagei.e. the array is empty17:30
jgriffithjamespage: odd17:30
jgriffithjamespage: It should just pick that up from the cinder package defaults17:30
jgriffithjamespage: wondering if we have a compat issue on raring17:30
jgriffithjamespage: I'll try the easy approach first and do devstack on Raring and see if I repro that way17:30
jamespagejgriffith, I did wonder; which deps are used for discovery of the filters?17:30
jgriffithUnless you already know that works17:30
*** markmc has quit IRC17:31
jgriffithjamespage: TBH there's been quite a bit of churn in deps lately17:31
jgriffithjamespage: But it should just be picked up by the cinder package install17:31
jgriffithjamespage: I'll have a look and shout when I get something going17:31
jamespagejgriffith, great!17:32
jgriffithjamespage: Probably be a little bit before I get ot it17:32
jamespagejgriffith, sure - I'll check back in later17:32
jgriffithjamespage: BTW, testing on Quantal or Precise?17:32
jgriffithjamespage: In other words have you done the same tests there?17:32
dolphmayoung: this fixes expires -> expires_at in the api to match your impl, and adds issued_at to tokens https://review.openstack.org/#/c/22039/17:33
*** ociuhandu has quit IRC17:33
dolphmgyee: ^17:33
jamespagejgriffith, I have reports of the same issue on precise with grizzly from the cloud archive17:33
dolphmheckj: you downvoted this earlier ^17:33
jgriffithjamespage: boooo17:33
*** esp1 has joined #openstack-dev17:33
jgriffithjamespage: that means it's packages dependent17:33
jamespagejgriffith, I think so17:33
heckjdolphm: ayoung looking17:33
jgriffithsighh, I hate installing via packages :)17:33
dolphmheckj: not sure if we answered your question out of band?17:33
ayoungdolphm, I wouldn't suggest changing expires to expires_at right now.  The amount of churn it will generate in the tokens api is not worth it.  Not sure that it should be changed17:34
ayoungI guess for V3 it is ok....17:34
dolphmheckj: issued_at is intended to avoid token collisions when PKI is encrypting two otherwise identical tokens17:34
heckjgotcha17:34
dolphmayoung: for self-consistency, i think it's worth fixing17:35
ayoungdolphm, I guess if we vary from the spec it is a bug?17:36
ayoungOK, I can get behind that17:36
gyeedolphm, +2 on expires_at17:36
gyeedolphm, hold off on https://review.openstack.org/#/c/22893/, I need to fix expires_at so I don't have to do two reviews17:37
heckjdolphm: I'm good with it - we are introducing a bit of churn with expired to expired_at, but nothing is deeply using this yet, so it's the best time to make it self consistent17:37
*** roampune has joined #openstack-dev17:37
dolphmheckj: yes, i'm happy to fix17:37
ayounggyee, no17:38
gyeedolphm, heckj, should I make the code change now or wait17:38
ayounggyee, I am afraid that if you chage 22893, It will bump the trusts.  Lets fix both of them afterwards17:38
gyeeayoung, should I wait?17:38
heckjdolphm: heh, figured if you were pushing it, you'd be ready to dive onto the code and fix it too :-)17:38
dolphmgyee: don't hold off, i'll address seperately17:38
gyeedolphm, so https://review.openstack.org/#/c/22893/ is good as is?17:38
*** andrewbogott_afk is now known as andrewbogott17:39
*** amerine has joined #openstack-dev17:39
sstent_anyone seen 'Cannot delete or update a parent row: a foreign key constraint fails' on trying the nova-manage db archive_deleted_rows command?17:39
dolphmgyee: you unblocked that test regarding domain scoping?17:39
dolphmgyee: did that get implemented?17:39
gyeedolphm, domain-scoping is implemented17:40
dolphmgyee: awesome17:40
dolphmgyee: +217:41
gyeew00t!17:41
gyeeheckj, what's the procedure to get it into rc1?17:41
*** jpich has quit IRC17:41
*** BobBall_ has quit IRC17:42
*** gael has quit IRC17:42
ayoungdolphm, I fat fingered the 'extra' thing.  Got it fixed now.  What are you suggesting I do on roles?  Add a member function toe trh roles v3 controller list_roles_for_trust?17:43
ayoungto the ...17:43
dolphmayoung: exactly17:43
ayoungOK..doing that now.17:43
dolphmlist_roles_for_trust, get_role_for_trust, and check_role_for_trust17:43
heckjgyee: sorry, not entirely understanding the question - what do you mean "get it into rc1"?17:44
*** rafaduran has left #openstack-dev17:44
gyeeheckj, are all the bug fixes from now on automatically goes into rc1?17:45
gyeeor do we need to make explicit requests?17:45
heckjgyee: ah, yeah - ttx has a script or something that takes all resolved bugs at the end of the release period17:45
gyeeawesome17:45
*** anniec has joined #openstack-dev17:46
*** ilblackd_ has quit IRC17:46
heckjyeah, it's a nice setup17:46
ayoungdolphm, that should go on the public router?17:46
heckjgyee: we can assign bugs explicitly to RC1, the meaning of which is "hold the RC1 release until this is fixed", but otherwise we leave assignment into RC1 to the close-out cycle17:47
gyeeheckj, sounds good, I just want to make sure bug 1131840 is includes17:48
uvirtbotLaunchpad bug 1131840 in keystone "v3 auth API untranslatable to XML" [High,In progress] https://launchpad.net/bugs/113184017:48
gyeeincluded17:48
heckjgyee: you should be able to tag it to RC1, which will do what you want (i.e. request that we block the release until that's fixed)17:48
heckjif you can't retarget the bug, let me know - that's just a permissions thing on Launchpad17:48
heckjNvmd, looks like it already is at rc117:49
dolphmheckj: when is rc2 being forked?17:49
gyeeheckj, looks like we are OK17:49
dolphmheckj: err rc117:49
gyeeayoung, will the trust APIs be available in v2.0?17:50
ayounggyee, no17:51
heckjdolphm: there's no set time, ttx I'm sure will be telling us in the RC meeting later today. https://wiki.openstack.org/wiki/GrizzlyReleaseSchedule is all we have for formal schedule right now17:51
*** iartarisi has quit IRC17:52
heckjttx: around?17:53
*** cp16net|away is now known as cp16net17:55
*** jog0 has joined #openstack-dev17:55
*** zeriouz has quit IRC17:55
ayoungdolphm, got it.17:56
ayoungposing new patch17:56
dolphmayoung: awesome17:56
*** ondergetekende has joined #openstack-dev17:57
*** derekh has quit IRC17:58
*** markwash has joined #openstack-dev17:58
ayoungdolphm, can you post your tests?17:59
*** ondergetekende has quit IRC17:59
*** darraghb has quit IRC17:59
*** aeperezt has quit IRC18:00
dolphmayoung: erm, you're returning 'extra' in the response now18:00
dolphmayoung: and it's empty18:01
dolphmayoung: ah, remove 'extra' from TrustModel.attributes18:01
*** kagan has joined #openstack-dev18:02
*** radez_g0n3 is now known as radez18:03
ayoungdolphm, I thought it should be there.  No?18:03
*** aeperezt has joined #openstack-dev18:03
ayoungdolphm, If I remote it from attributes, I thought it never gets returned. Isn't that what populates the dictionary?18:03
dolphmayoung: that's basically a list of contract attributes, which extra is not18:04
ayoungOK...lets see if it breaks...18:04
*** nachi has joined #openstack-dev18:05
dolphmayoung: you don't want 'extra' to be returned verbatim -- sql.DictBase.to_dict() will unpack extra for you18:06
dolphmayoung: TrustRole doesn't need an extra column, doesn't need to extend sql.DictBase, nor have a list of attributes18:06
ayoungdolphm, SO just sql.ModelBase?18:07
*** flepied1 has joined #openstack-dev18:08
dolphmayoung: yeah18:09
dolphmayoung: you don't need to call to_dict on it, do you? it's an internal model18:09
*** lorin11 has quit IRC18:10
dolphmayoung: internal to the driver18:10
ayoungdolphm, you mean just return trust_ref?18:11
*** lorin1 has joined #openstack-dev18:11
*** torandu has quit IRC18:12
*** flepied has quit IRC18:12
*** torandu has joined #openstack-dev18:12
dolphmayoung: maybe we're talking about two different issues18:12
*** bryansd has quit IRC18:12
*** mrodden1 has joined #openstack-dev18:12
ayoungdolphm, I think I'm good.18:12
dolphmayoung: TrustModel should extend DictBase because it's exposed to the controller18:12
dolphmayoung: TrustRole should not18:12
openstackgerritA change was merged to openstack/tempest: test_live_block_migration cleanup  https://review.openstack.org/2279018:12
openstackgerritA change was merged to openstack-dev/devstack: move sysstat earlier (but not too early)  https://review.openstack.org/2298418:12
ayoungI am goingto remove that field from the database.18:12
openstackgerritA change was merged to openstack/tempest: Update stress tests to properly use tempest.config  https://review.openstack.org/2290218:12
*** Ryan_Lane has joined #openstack-dev18:13
*** Yada has quit IRC18:14
*** mrodden has quit IRC18:15
*** lorin1 has quit IRC18:16
dolphmayoung: trust_roles.extra? (or whatever that table is called)18:16
ayoungdolphm, yep, its agone!18:16
*** ilblackdragon has joined #openstack-dev18:16
*** avishay has quit IRC18:17
ayoungdolphm, #37 is posted18:18
dolphmayoung: /salute18:18
*** dhellmann has quit IRC18:19
*** sacharya has quit IRC18:20
*** woodspa has joined #openstack-dev18:21
*** morganfainberg has joined #openstack-dev18:24
*** sacharya has joined #openstack-dev18:24
*** diogogmt has joined #openstack-dev18:27
*** armaan has joined #openstack-dev18:29
dolphmayoung: extra attributes still being discarded, posted a partial diff18:29
ayoungdolphm, I have a test in place that shows description getting returned18:30
ayoungdolphm, also, I am rebasing on top of gyee's recent18:30
*** nati_ueno has joined #openstack-dev18:30
dolphmayoung: cool18:30
ayoungdolphm, but I like the code in that diff.  Let me get mine working again, and then I'll merge that in18:31
*** danpb has quit IRC18:31
*** adjohn has joined #openstack-dev18:31
*** epim_ has joined #openstack-dev18:32
*** epim has quit IRC18:33
*** epim_ is now known as epim18:33
*** anniec has quit IRC18:34
*** anniec_ has joined #openstack-dev18:34
*** jbr_ is now known as jbr_afk18:36
*** vipul|away is now known as vipul18:36
YorikSarayoung: Hi. Looking at Trusts diff. Which parts are mostly done so that all my code beauty comments are appropriate already?18:39
YorikSarayoung: Found myself adding comment to almost every line of keystone/token/controllers.py18:39
ayoungYorikSar, heh, not surprising18:39
ayoungYorikSar, that is ripe for review,18:40
*** Ryan_Lane has quit IRC18:40
ayoungthe only thing changingthat I know of are the sql backend and the v3 auth code18:40
*** Ryan_Lane has joined #openstack-dev18:40
*** jbr_afk has quit IRC18:40
YorikSarayoung: So I'll post that comments altogether.18:41
ayoungYorikSar, yes, please do.18:41
*** kagan_ has joined #openstack-dev18:41
*** zzs has joined #openstack-dev18:42
*** flepied1 has quit IRC18:43
*** zoresvit has quit IRC18:44
*** kagan has quit IRC18:44
*** kagan_ is now known as kagan18:44
*** tomoe_ has quit IRC18:46
*** tomoe_ has joined #openstack-dev18:46
*** garyk has quit IRC18:48
*** rushiagr has joined #openstack-dev18:48
*** jkordish_ is now known as jkordish18:48
*** unix has joined #openstack-dev18:49
*** rushiagr1 has joined #openstack-dev18:49
*** tomoe_ has quit IRC18:51
YorikSarayoung: done18:51
*** roampune1 has joined #openstack-dev18:52
*** rushiagr has quit IRC18:53
*** rushiagr1 has quit IRC18:54
*** roampune has quit IRC18:54
*** dev_sa has quit IRC18:56
*** arbrandes has quit IRC18:56
sdaguejgriffith: so my local devstack can't run cinder volume tests, which I think I've narrowed down to this - http://paste.openstack.org/show/32536/18:57
*** rushiagr has joined #openstack-dev18:57
jgriffithsdague: yup, this just started showing up18:57
sdaguerealistically I don't understand how we pass in gate, as I don't have any local changes that should be an issue18:57
jgriffithsdague: Looks like missing egg-info in rtslib, but I'm not sure how it's impacting here18:58
sdaguejgriffith: hmmm.. ok, my volumes fails have been really long lasting :)18:58
jgriffithoh?18:58
jgriffithI did a fresh setup last night when I was working on that no-screen option and all worked fine18:58
sdagueyeh, some time in January volumes tests on nova stopped passing for me locally, though they passed in gate. Just hadn't gotten around to looking at it until now18:59
jgriffithsdague: well that disturbing19:00
*** rnirmal_ has joined #openstack-dev19:00
*** rnirmal_ has quit IRC19:00
jgriffithare you talking tempest?19:00
sdagueyes19:00
*** digitalsanctum has quit IRC19:00
jgriffithk... I haven't tried tempest in a while.  I'll have a look19:01
*** morganfainberg has quit IRC19:01
*** bdpayne has quit IRC19:01
sdagueI guess the question is, is the scheduler issue going to block any other debug19:01
*** morganfainberg has joined #openstack-dev19:02
jgriffithsdague: not sure I follow the question?19:02
*** rnirmal has quit IRC19:02
openstackgerritA change was merged to openstack/glance: Redact location from notifications  https://review.openstack.org/2229819:04
sdaguejgriffith: I guess I was wondering if the scheduler issues were causing the fail19:04
sdaguebut I actually have my answer19:04
sdagueand it's no (at least I think not)19:04
*** rushiagr1 has joined #openstack-dev19:05
jgriffithsdague: ahh... so yet another issue19:05
*** lorin1 has joined #openstack-dev19:05
*** lorin1 has left #openstack-dev19:05
jgriffithsdague: oh crud....19:05
openstackgerritA change was merged to openstack/python-glanceclient: Replace SchemaNotFound with HTTPNotFound  https://review.openstack.org/2272219:05
jgriffithsdague: another issue of the service not starting19:06
*** edmund has joined #openstack-dev19:06
gyeedolphm, come to think of it, I am fine with having the  auth plugins to return a valid user_id and do the orchestration at the controller level19:06
sdaguejgriffith: http://paste.openstack.org/show/32538/ so my issue is actually a permissions problem19:06
sdaguebut given that I'm just using default devstack + tempest I'm curious why19:06
jgriffithsdague: I ran into this19:08
sdaguejgriffith: oh, cool, that means you probably have a solution? :)19:08
*** rushiagr has quit IRC19:08
jgriffithNo...19:08
sdagueummm.... ok19:08
jgriffithBut it means now it's the next thing on my list19:09
sdagueheh, ok19:09
jgriffithI'm doing a fresh devstack now19:09
sdaguemtreinish: can you check so see if that's your tempest issue as well?19:09
*** nachi has quit IRC19:09
sdagueit's entirely possible it's actually a nova bug, as it's in the volumes extension19:09
*** johnthetubaguy has quit IRC19:10
jgriffithsdague: perhaps, or just an issue in the tenant/token's being used19:10
jgriffithsdague: ie the gates pick up a step that we miss19:11
mtreinishsdague: sure I'll check19:11
*** dhellmann has joined #openstack-dev19:11
sdaguejgriffith: yeh, that could be19:12
*** annegentle has joined #openstack-dev19:12
*** olaph has quit IRC19:13
mtreinishsdague: no mine looks like an iscsi config issue.19:14
mtreinishsdague: it throws create error iscsi errors on create19:14
sdaguehmmm ok19:14
*** rushiagr1 has quit IRC19:14
*** olaph has joined #openstack-dev19:14
*** imsplitbit has quit IRC19:15
*** zing has quit IRC19:18
jgriffithmtreinish: logs?19:21
*** rnirmal has joined #openstack-dev19:21
*** digitalsanctum has joined #openstack-dev19:22
*** afazekas has joined #openstack-dev19:22
*** turul_ has joined #openstack-dev19:22
mtreinishjgriffith: I'll pastebin them one sec, but I suspect that I just broke the config by doing manual changes to iscsi when I was debugging the tempest volume stuff.19:23
*** Mandell has joined #openstack-dev19:23
*** anniec_ has quit IRC19:24
*** anniec has joined #openstack-dev19:24
*** zbitter has joined #openstack-dev19:25
jgriffithmtreinish: Well that sounds fine to me :)19:25
jgriffithsdague: running tempest now... I'll let ya know19:25
*** anniec has quit IRC19:26
*** anniec_ has joined #openstack-dev19:26
jgriffithsdague: The problem I was seeing seems to be fixed somewhere, I've made it through ec2_volumes tests ok19:26
*** zaneb has quit IRC19:26
sdaguejgriffith: I think I fail later19:27
sdagueec2 takes a different path19:27
mtreinishjgriffith: http://paste.openstack.org/show/32540/ I can paste more, but it's really just more of the same19:29
sc68calAnyone from the nova-conductor team that is available to review a change - https://review.openstack.org/2301219:29
*** annegentle has left #openstack-dev19:31
*** digitalsanctum has quit IRC19:31
vkmcIs there anybody with some experience using Mox? I just can't see where are this tests failing -.- http://paste.openstack.org/show/32541/19:32
*** zaneb has joined #openstack-dev19:32
*** almaisan-away is now known as al-maisan19:32
*** zbitter has quit IRC19:33
jgriffithsdague: hmmm.... awful lot of failures in here19:34
*** digitalsanctum has joined #openstack-dev19:34
*** flepied has joined #openstack-dev19:37
*** markmcclain has quit IRC19:37
sc68calvkmc: Do you have a diff of your changes to horizon?19:37
*** gyee has quit IRC19:38
sc68calvkmc: looks like you added a call to a new method somewhere in there. You need to tell Mox to stub it out19:38
*** jsindy has quit IRC19:38
vkmcsc68cal, Thanks for looking at it! Here is the diff http://paste.openstack.org/show/32542/19:39
*** ondergetekende has joined #openstack-dev19:39
vkmcsc68cal, You may be right... yeah... my environment is kinda messy though19:40
*** flepied has quit IRC19:40
topolYorikSar, easy one if you have a minute.  https://review.openstack.org/#/c/22818/19:40
zykes-:) vkmc19:41
vkmczykes- o/19:41
*** olaph_ has joined #openstack-dev19:43
sc68calvkmc: I think you need to add api.nova.flavor_list(http.HttpRequest).AndReturn( <some mocked out values > ) near https://github.com/openstack/horizon/blob/master/openstack_dashboard/dashboards/admin/flavors/tests.py#L6919:43
vkmcOh thanks sc68cal, I'll give that a try!19:45
*** otherwiseguy has quit IRC19:45
sc68caleither that or try api.nova_flavor_get19:45
*** olaph_ has quit IRC19:46
*** novas0x2a|laptop has joined #openstack-dev19:46
sc68calMox is a bit tricky to learn - but essentially it gets pissed off the code you're testing calls a method that you haven't mocked out19:46
*** olaph has quit IRC19:46
sc68calwhich is usually done a few lines above a mox.ReplayAll() call19:46
jgriffithmtreinish: thanks19:47
*** olaph has joined #openstack-dev19:48
*** crandquist has quit IRC19:49
*** markmcclain has joined #openstack-dev19:50
*** brianr-gone is now known as brianr_19:51
ayoungYorikSar, all good suggestions.19:51
*** corXi has quit IRC19:51
*** monst has joined #openstack-dev19:53
monsthas anyone gotten Folsom Keystone integrated with PAM?19:53
*** lorin1 has joined #openstack-dev19:56
*** alexpilotti has joined #openstack-dev19:57
jgriffithsdague: I think I know what the issue you're seeing in the tempest tests is19:58
jbresnah_bcwaldon: wrt https://review.openstack.org/#/c/22753/, would it be better if I just submitted the test as a separate review?19:58
jgriffithsdague: are you setting secure_delete=False?19:58
sdaguejgriffith: no19:58
sdaguethat's going to change the permissions?19:59
*** lucid- has quit IRC19:59
*** markmc has joined #openstack-dev19:59
jgriffithNo, but the permission errors I *believe* are due to trying to delete error state volumes19:59
sdagueoh, interesting19:59
jgriffithand the error states come up I *think* because we blow quota20:00
bcwaldonjbresnah_: feel free20:00
jgriffithalthough I added waits for secure delete....20:00
jgriffithhmmm... lemme dig in a bit more20:00
ayoungdolphm, henrynash heckj https://review.openstack.org/#/c/23016/  trivial review that I chipped off the trusts one.20:01
jbresnah_bcwaldon: i was just looking for your preference.  I can leave it alone if that is not the better route.20:01
bcwaldonjbresnah_: go ahead and push it up for review20:01
ayoungactually, let me submit that standalone.  doesn't need gyee;s20:02
jbresnah_bcwaldon: also I am feeling guilty for holding up the other patch a bit20:02
*** gabrielhurley has joined #openstack-dev20:02
jbresnah_bcwaldon: ok thanks20:02
*** riskable has quit IRC20:02
bcwaldonjbresnah_: don't worry! We're notoriously slow in reviews20:03
*** hub_cap has joined #openstack-dev20:03
jbresnah_bcwaldon: i was writing it just to help me actually effectively review the submission and thought it might be useful20:03
jbresnah_bcwaldon: cool enough, thanks!20:03
hub_caphey, im interested in porting some of the instance-actions BP (https://wiki.openstack.org/wiki/NovaInstanceActions) into oslo so that reddwarf can consume it. anyone think of opposition or any reason _not_ to do that?20:04
ayounghttps://review.openstack.org/#/c/23017/ dolphm heckj henrynash YorikSar20:04
zykes-anyone here know when the talks will be announced ?20:05
*** melwitt has joined #openstack-dev20:06
heckjzykes-: internal or external talks?20:08
heckjfor external, I'd pester ttx later today (or maybe stephano) - for internal (dev summit topics specifically), they're still getting set up20:09
*** al-maisan is now known as almaisan-away20:09
*** olaph_ has joined #openstack-dev20:12
ayoungdolphm, how are we looking20:13
dolphmayoung: i'm not sure i've tried 38 -- are /roles implemented?20:14
ayoungdolphm, yep20:14
*** olaph_ has quit IRC20:14
*** olaph has quit IRC20:14
dolphmayoung: are roles removed from the POST /trusts response?20:14
ayoungdolphm, made the change to the test that confirms description is persisted20:14
zykes-heckj: summit20:15
ayoungdolphm, you mean GET?20:15
dolphmayoung: no, on POST -- roles are consumed and then not returned in the response20:15
dolphmayoung: i put a paragraph in the spec about that20:15
dolphmayoung: or two, maybe20:15
dolphmayoung: roles are provided by the client in the POST, but never provided in a response.. and instead are available as a read-only collection <-- or something like that20:16
ayoungdolphm, that is pretty easy to do, I didn't realize...20:16
ayoungOK...on toward 4020:16
dolphmayoung: no worries20:17
dolphmi'll need to rebase on 40 if you rebased ontop of gyee's patch20:17
*** olaph has joined #openstack-dev20:18
*** unix has quit IRC20:18
heckjzykes-: summit has just basically opened up this past week - blueprints and talks being accepted. Last cycle we coordinated and scheduled them a week or to prior to summit, so it's all still ingest right now20:18
*** Tross has quit IRC20:20
*** lglenden has quit IRC20:20
*** john5223 has quit IRC20:21
*** andreaf has quit IRC20:22
*** olaph_ has joined #openstack-dev20:24
*** dprince has quit IRC20:24
*** andreaf has joined #openstack-dev20:24
dolphmayoung: expired trust should raise a 404, right?20:26
*** olaph has quit IRC20:26
dolphmayoung: i'm getting a 403... i assume that's why20:26
ayoungdolphm, depends on the activity20:26
ayoung403 is correct for getting a token but not for listing20:26
dolphmayoung: GET /trusts/{expired_trust}20:27
dolphmayoung: i was assuming 404 like tokens or a 20020:27
*** termie_ is now known as termie20:27
ayoungdolphm, yeah, should be a 40420:27
*** termie has quit IRC20:27
*** termie has joined #openstack-dev20:27
sdagueany horizon folks around? looks like something went haywire and the gate's rejecting lots of stuff because of a django config issue20:27
dolphmayoung: maybe a bad test... if i set expires to null i still get a 403 :P20:28
ayoungdolphm, exception.TrustNotFound20:28
YorikSartopol: It looks fine, but I'm not sure if businessCategory is the right type for this.20:28
dolphmayoung: but it doesn't say why -- {"error": {"message": "You are not authorized to perform the requested action: %(action)s", "code": 403, "title": "Not Authorized"}}20:28
dolphmayoung: something is raising ForbiddenAction() without specifying an action20:28
YorikSartopol: So I can neither +1 nor -1 this20:28
ayoungdolphm, policy?20:28
zykes-heckj: I mean the talks, where the voting just closed today20:29
*** Tross has joined #openstack-dev20:29
dolphmayoung: nope- http://paste.openstack.org/raw/32546/20:29
*** olaph_ has quit IRC20:29
heckjzykes-: ah - that I don't know - that's where I was suggesting to pester ttx :-)20:29
dolphmayoung: those should all have an action='do something'20:29
ayoungdolphm, ah, that was me being paranoid, pre-policy20:31
sdaguegabrielhurley: https://review.openstack.org/2302120:31
*** olaph has joined #openstack-dev20:31
sdagueI think that will get things right again20:31
* zykes- pesters ttx 20:31
gabrielhurleysdague: thanks. the march of progress makes fools of us all. ;-)20:32
sdagueheh20:32
*** sandywalsh has quit IRC20:32
sdaguegabrielhurley: the sooner you can +A that through, the better. The merge gate is currently blocked on that - http://logs.openstack.org/22909/6/gate/gate-tempest-devstack-vm-full/5573/logs/screen-horizon.txt.gz20:33
sdagueas an example20:33
ayoungdolphm, OK, I was swallowing the 404.  I have a rebased patch...but now I am waiting on20:33
*** davidha has quit IRC20:33
*** Tross has quit IRC20:33
*** john5223 has joined #openstack-dev20:34
ayounghttps://review.openstack.org/#/c/22893/ and https://review.openstack.org/#/c/23017/120:34
gabrielhurleysdague: Given that the gate will decide whether it's good or not, I guess I might as well just approve it too.20:34
ayoungdolphm, can I push https://review.openstack.org/#/c/2301720:34
ayoungI removed the import you commented on20:34
*** sandywalsh has joined #openstack-dev20:35
*** Tross has joined #openstack-dev20:36
*** olaph_ has joined #openstack-dev20:38
*** olaph has quit IRC20:38
*** jaypipes has quit IRC20:40
*** lglenden has joined #openstack-dev20:41
*** Ryan_Lane has quit IRC20:41
dolphmayoung: approved20:42
*** jaypipes has joined #openstack-dev20:43
*** alexpilotti has quit IRC20:43
ayoungdolphm, so, I am not sure how long those gate jobs will take, but I'm guessing a while.  In order to post a new version of my patch without resubmitting those, I can hack the commit messages on those two patches to have a different change id20:45
ayoungactually, I am ok with depending on guang's patch, I just don't want to make the api-controller patch dependant on it20:45
dolphmayoung: rebase on one and duplicate the diff of the other into your patch -- after they gate, it won't be seen as a change20:45
dolphmayoung: cleaner hack :)20:46
ayounglooks like mine just gated....20:46
dolphmayoung: that was fast20:46
dolphmayoung: gating or merged?20:46
ayoungah, just smokestack20:46
dolphmayoung: rebase onto gyee's patch, and include your own diff into your own change20:47
ayoungdolphm, will do20:47
dolphmayoung: thanks for pushing that stuff out faster though20:47
*** lcheng has joined #openstack-dev20:48
*** kagan has quit IRC20:49
*** vkmc has quit IRC20:49
ayoungdolphm, #39 is up20:51
*** digitalsanctum has quit IRC20:51
*** Ryan_Lane has joined #openstack-dev20:52
*** arbrandes has joined #openstack-dev20:52
*** cp16net is now known as cp16net|away20:53
dolphmayoung: thanks20:53
*** vkmc has joined #openstack-dev20:54
zykes-7win 3820:54
dolphmayoung: roles still included in the GET response20:58
dolphmayoung: GET /trust/{trust_id}20:58
ayoungdolphm, yes20:58
dolphmayoung: when i said post earlier i just meant that's where i was seeing them20:58
dolphmayoung: remove them there too :)20:58
*** ondergetekende has quit IRC20:58
ayoungdolphm, I am too tired to argue with you about that,  but I think that one is a mistake20:58
dolphmayoung: and from GET /trusts if they're in there too20:58
ayoungthey are gone from list20:59
bknudsonanyone seen this doing ./run_tests.sh in keystone: test_admin_requires_adminness (test_keystoneclient.Kc11TestCase) ... error: gnutls_handshake() failed: A TLS packet with unexpected length was received. while accessing https://review.openstack.org/p/openstack/python-keystoneclient.git/info/refs20:59
bknudsonfatal: HTTP request failed20:59
ayoungbut I think they should be there on GET20:59
dolphmayoung: it's a collection that should be returned independently20:59
ayoungdolphm, no.  They are tightly related.  They belong together at that level.  Usually, I am all for normalization, but making two web calls to get the rols separate from the body is going to mess people up21:00
ayoungyou will alwys end up doing both calls21:00
*** cp16net|away is now known as cp16net21:01
ayounglist, even create, I can understand, although I would tend to say roles should be visible post create.  THat is going to mess people up, too.21:01
dolphmayoung: i almost think there should be a one time create-collection after creating a trust, e.g. POST /trust/{trust_id}/roles21:02
zykes-is v3 support being added to horizon ?21:02
ayoungdolphm, no.  It is a single transaction.  It feels like you are overthinking this21:02
dolphm"single transaction" not "single request" :)21:02
ayoungdolphm, you don't split up transactions across multiple requests if you can help it.  It ties up the database.21:04
dolphmayoung: it's the same db load either way21:04
dolphmayoung: technically it's just a relation, right? so PUT /trusts/{trust_id}/roles/{role_id} would be the most appropriate -- but it's difficult to say when you would stop accepting PUT requests (unless you acknowledge that trusts are mutable, but that you can only add to them)21:06
ayoungdolphm, well, not if you start the transaction on one remote request and then complete it on another.  You lock the DB for a non-trivial amount of time.  But that is ireelevant.  Creating a trrust is a singe action, and looking at what roles are assocaited with the trust should also be a single action.  List is different, in that you want an abbreviated veiw21:06
dolphmayoung: i would have requested PUT instead of including roles on POST /trusts except for the immutability gotcha21:06
*** esp1 has left #openstack-dev21:07
ayoungdolphm, I wouldn't code it that way.  You want to package up everything for a single RPC that you can, and have it succeed or fail as a unit21:07
ayoungno need for a remote "builder" object21:07
*** dprince has joined #openstack-dev21:08
dolphmayoung: gate failure on https://review.openstack.org/#/c/23017/21:10
ayoungdolphm, FAILED horizon21:10
dprincedims: Thanks for the quantum XML DOS fix. Would prefer if you grabbed the ticket first next time though...21:11
*** davidh_ has joined #openstack-dev21:12
*** pvo has quit IRC21:12
ayoungdolphm, looks like there are issues with merge/gats21:13
ayounggates21:13
*** digitalsanctum has joined #openstack-dev21:14
*** pvo has joined #openstack-dev21:14
ayoungdolphm, so...are we at an impasse? I don't really think we should be removing the roles from things that show the individual trusts.21:14
*** lucid- has joined #openstack-dev21:14
dolphmayoung: well, you get the client support basically for free if you put them on /roles21:15
ayoungah...21:15
ayoungnot really a good enough reason.21:15
dolphmayoung: you get the server-side support basically for nearly free on /roles21:15
ayoungdolphm, I'm ok with roles getting their own URL as well21:15
dolphmayoung: then why implement it twice?21:16
dolphmayoung: and double the maintenance cost21:16
ayoungdolphm, if we were going to cut one, it would be the /roles.21:16
YorikSar dolphm, ayoung: as I understand, you argue about too detailed response to GET /trust/{id}. I can suggest a compromise - GET /trust/{id}/details21:17
ayoungYorikSar, nah21:18
dolphmayoung: i don't see any reason to make an exception in the API for anything but create, which provides for the immutability requirement21:18
ayoungYorikSar, the question is what should be on the good name.21:18
YorikSarIt's pretty common in REST APIs21:18
ayoungdolphm, there is a difference between listing all of the roles in a system and listing the roles assigned to a trust.  FOr a user, the role assignements are not integral, but for a trust they are.21:18
*** devoid has quit IRC21:19
YorikSarayoung: It's like list of roles in a token, right?21:19
*** terry7 has joined #openstack-dev21:19
ayoungYorikSar, yes, very much so21:19
ayoungYorikSar, in fact, it leads directly to what you would get in a token21:20
ladquinthingee, around?21:20
thingeeladquin: hello21:20
YorikSarayoung: Then I'm totally on your side. We don't split GET /token/id in pieces, here the reasons are the same.21:21
ladquinthingee, hey! (that was fast)21:21
dolphmayoung: you can apply the same argument to any other request in the API21:21
dolphmayoung: i think the correct compromise would be an additional query parameter to have the client opt-in to nesting relational resources into the parent element21:22
ayoungdolphm, no, you can't.  It is a question of referential integrity.  Tokens and trusts are single, immutable objects.  Other collections are malleable.21:22
dolphmayoung: GET /trusts/{trust_id}?roles for example21:22
ayoungdolphm, no.21:22
ayoungMake the normal path the simple path21:22
ladquinthingee, question: I'm helping review the doc patches for volume-api v2 and got a doubt regarding your pagination comment21:22
dolphmayoung: GET /users/{user_id}&projects&domains21:22
dolphmayoung: etc21:22
*** jpich has joined #openstack-dev21:23
ayoungdolphm, the good name is  GET /trusts/{trust_id}21:23
dolphmayoung: they're not a single object at all, they're a relation21:23
thingeeladquin: I believe the permissions make it so it's not viewable.21:23
YorikSardolphm: Please, don't assume that every backend is relational.21:23
thingeeladquin: it was moved over from v1 and removed from v1 since pagination never existed in that version21:24
dolphmYorikSar: it's relational from an http api perspective -- there's a relation from one api resource to a subset of another collection21:24
ayoungYorikSar, even if the backend is relational, the objects that you fetch out of them do not have to be.21:24
ayoungdolphm, REST does not mean 3rd normal form21:24
thingeeladquin: I can remove it entirely though until it's completed though and doesn't need to be hidden21:24
ladquinthingee, oh, that was my thought21:24
YorikSardolphm: If we store trusts in memcached (just for example), there will be one object that contains a list of roles among other things.21:25
dolphmayoung: what's the problem with just having the client opt-in?21:25
thingeeladquin: sounds good21:25
ayoungdolphm, OK, I think I want to revert the roles removal from the create.  I will leave the /roles URL in there.21:25
ladquinthingee, but wasn't sure since didn't see it in v1, thanks!21:25
thingeeladquin: do you want me to push that up now or are you still going through it?21:25
YorikSardolphm: Well, one resource would include a list of roles bydef.21:25
ayoungdolphm, it is how the thing is meant to be used21:25
*** topol has quit IRC21:25
dolphmayoung: then default the client-side option to true21:26
YorikSardolphm: Which is not the case for users, for example.21:26
vishydavidkranz: are you still seing this? https://bugs.launchpad.net/nova/+bug/110150421:26
ayoungdolphm, the primary consumer is not the python-keystoneclient21:26
uvirtbotLaunchpad bug 1101504 in nova "Horrible vm create performance problem with latest devstack" [Undecided,New]21:26
dolphmayoung: c.trusts.get(trust_id, roles=True)21:26
ladquinthingee, I'm going through it, just helping annegentle with reviews, but there is no rush :)21:26
davidkranzvishy: Checking...21:26
*** flaper87 has quit IRC21:27
dolphmayoung: so you're saying this shouldn't be a core api then?21:27
ayoungdolphm, this is REST.  The primary useage of GET trust should be getting a trust.21:27
ayoungdolphm, once we have endpoints, those should be in there as well.21:28
thingeeladquin: got it. if that's the case I think I'll push the completed section later today then.21:28
ayoungdolphm, the thing is, most people are not going to need to query trusts.  People are going to need to create them, and then use them to make tokens. If people are looking at trusts, it is either audit or debugging21:28
davidkranzvishy: I will try it again tomorrow morning.21:29
*** esp1 has joined #openstack-dev21:29
ayoungTHere is not need to query the set of roles....and these are really "potentila role assignemnts"  but the role entries don;'t have the project ID on them21:29
vishydavidkranz: thanks. I haven't seen the issue before on mine21:30
vishydavidkranz: keep in mind the first boot of a large image will be slow21:30
ayounghenrynash, heckj would appreciate some external input to this discussion.21:30
davidkranzvishy: I know. This was repeatable when I saw it. We'll see.21:30
dolphmayoung: i don't really follow the notion that the primary consumer of openstack api wouldn't be an openstack client21:31
*** clayg has quit IRC21:31
*** ndipanov has quit IRC21:31
ayoungdolphm, just ask davidkranz ^^21:31
ayoungWeb API is the primary consumer.  Not the Python Client21:31
dolphmayoung: that either means it's not openstack or ... ? i'm lost21:31
davidkranzayoung:  ???21:31
ayoungdavidkranz, question on an API design approach.  I am pointing out that the Python client is not the primary api into the system, it is direct web calls21:32
ladquinthingee, cool, I pointed really minor stuff so if you're pushing today you can edit that too, thanks again!21:32
davidkranzayoung: Well, it depends on what you mean.21:33
thingeeladquin: sounds good. thanks for the help21:33
ayoungthen a mix between horizon, with the Python/CLI21:33
*** koolhead17 has quit IRC21:33
davidkranzayoung: From the user perspective it could be either.21:33
ayoungdavidkranz, of course.21:33
dolphmayoung: so what's wrong with non-openstack client defaulting to the api behavior it wants, i.e., including a nested collection in the response? GET /trusts/{trust_id}&roles21:33
davidkranzayoung: Why does it matter?21:33
ayoungdavidkranz, we are discussing trusts, and whether, when you do21:34
ayoungGET /trusts/{trust_id}21:34
*** Ryan_Lane1 has joined #openstack-dev21:34
ayoungyou should get back the roles with it, or whether you should have to make an additional call for the roles collection21:34
*** mlavalle has joined #openstack-dev21:34
*** Ryan_Lane has quit IRC21:34
dolphm(or just have the client opt-in to get them in a single request..)21:34
ayoungpersonally, I am pretty set that one call should get you the whole trust.  I know that you guys are primarily consuming the web APIs as opposed to using the Python client or Horizon,21:35
davidkranzayoung: I'm not sure but I don't think it matters if the client is using a python API or coding http calls.21:35
davidkranzayoung: It is a question of how many round trips are needed.21:35
dolphmayoung: why can't that call be GET /trusts/{trust_id}&roles ?21:35
ayoungdolphm, discoverablility21:35
*** johnthetubaguy has joined #openstack-dev21:35
davidkranzayoung: vs volume of response which might or might not be needed by the client.21:35
heckjdolphm, ayoung: maybe I'm missing something - why wouldn't you want to get the entire trust at a shot?21:36
ayoungdolphm, you have to know to do that.21:36
ayoungheckj, that is my point21:36
*** Ryan_Lane1 is now known as Ryan_Lane21:36
*** Ryan_Lane has joined #openstack-dev21:36
davidkranzayoung: A lot of Openstack list calls have a "details" flavor to deal with that.21:36
heckjthat's basically what we've done with token (it encapsulates a lot of data), and the call to get a service catalog21:36
YorikSardolphm: Do we provide the same option for tokens? Since trusts are like unfinished tokens, the analogy is inevidable. The default option is to return all information that is bound to token since this information defines token. Why should we not do the same with trusts?21:36
dolphmheckj: the rest of the api returns flat api objects when you ask for a single resource, and makes the collections available seperately (hopefully through links real soon)21:36
dolphmheckj: (except for the glaring exception of authentication, which we heavily document otherwise)21:37
heckjdolphm: tokens aren't21:37
heckjyeah -21:37
heckjI think trusts rather fits into that same model for what'll be using them21:37
ayoungheckj, agreed21:38
dolphmheckj: we haven't had a use case to nest collections in the parent entity, but now that we have one -- i'm happy to introduce it as an api-wide convention somehow ... my suggestion is simply to include the name of the collection as a query string21:38
heckjthey want to get a lot of detail in one shot, and not have to make 2+ requests to get it all to be able to process the usage of the trust21:38
heckjdolphm: ah - I see where you're going now21:38
dolphmheckj: GET /trusts/{trust_id}&roles would return GET /trusts/{trust_id} plus GET /trusts/{trust_id}/roles (which ayoung is asking for)21:38
ayoungdolphm, I would be more prone to put a query string in to get it to shut off the details21:38
heckjdolphm: do we have that pattern elsewhere in OpenStack?21:38
ayoungdolphm, I actually don;t want any thing more than list and get.21:39
heckjI know gabrielhurley was pushing on some of the nested objects and aggregated collections21:39
dolphmheckj: i'm not aware of one, but i'm not intimately familiar with other API's :(21:39
YorikSarayoung, dolphm: There's not a list of role ids, but a list of whole role refs in trust?21:39
dolphmheckj: yeah, i know i've seen the request21:39
ayoungSo /trusts  list all of them and /trsuts/{id} gets the indivdual21:39
*** numero8 has joined #openstack-dev21:39
dolphmheckj: i think it'd be awesome to do GET /domains/{domain_id}&projects for example21:40
gabrielhurleyyep, all of the above would be lovely21:40
ayoungdolphm, that looks wierd21:40
gabrielhurleyand no, that pattern doesn't exist in openstack and it's the bane of my existence21:40
ayoungprojects is not a filter on domains21:40
heckjgabrielhurley: more specificity there please :-)21:40
dolphmheckj: although (hrm) we don't do GET /domains/{domain_id}/projects anymore, in favor of GET /projects?domain_id={domain_id}21:40
ayoungit should be21:40
heckj"all of the above" is a bit to vague21:40
gabrielhurleymy previous suggestion for what you're discussing now is a "?fetch_related=<depth of JOINs>"21:41
ayoungdolphm, tell you what.  Let me check it in as is.  We will open a ticket on it, and we can always remove the details if they end up messing people up.  My gut says that it won't21:41
dolphmgabrielhurley: eek... what if there are 10 relations, and you only want to get one or two?21:42
gabrielhurleyso if you said /domains/?fetch_related=1 it would do a JOIn on the related foreign keys in the DB and return those projects, etc. whatever21:42
gabrielhurleydolphm: we could make it more descriptive21:42
gabrielhurleymost ORMs have this feature21:42
gabrielhurleyit's just a matter of describing it adequately in a query string21:42
gabrielhurleyit's not an easy feature, but it's sorely needed to stop doing stupid numbers of queries21:43
YorikSargabrielhurley: Not every storage is relational.21:43
heckjayoung: I'm fine with that21:43
*** esp1 has left #openstack-dev21:43
dolphmheckj: i'm not21:43
gabrielhurleyYorikSar: obviously not, but a lot of non-rel mimics JOINs and a lot of ORMs paper over that difference.21:43
heckjclearly :-)21:43
gabrielhurleyYorikSar: and if they don't, then maybe the feeature doesn't work.21:44
ayoungWe are not building for automated systems to consume. This is not an RPC. It is a REST API.  The difference is that a REST API is designed to be consumed by Humans.  THere is a lot of work we need to do to get there.21:44
gabrielhurleyayoung: so very very true21:44
YorikSargabrielhurley: I'm not talking about NoSQL stuff. I'm talking about LDAP, for example.21:44
dolphmheckj: that just introduces an undocumented api in core that we then have to go back and document because it's suddenly being consumed client-side21:44
gabrielhurleyYorikSar: ::shrug:: my point is that differing backends shouldn't stop a much-needed feature. The differences can be worked out in the abstraction layer.21:44
dolphmheckj: and then we have to support it21:44
dolphmheckj: so all that does is bypass the discussion21:45
heckjdolphm: yep, I understand your concern there21:45
*** koolhead17 has joined #openstack-dev21:45
heckjayoung: leaving the API discussion to so late in the game wasn't… the best move here21:45
ayoungdolphm, Lest not be foolishly consistent here.  Trusts and tokens are small trees of small objects that all belong and get consumed together.  The are not meant to be managed like collections, but rather as discrete units.  It is a very important pattern to support.21:45
dolphmnope21:45
ayoungheckj, it was never designed like that21:45
ayoungheckj, I wrote up the API back in October.21:45
YorikSargabrielhurley: It's not so easy to make that JOIN on backend level. And it's not so good to force backend to implement complex logic for really rare queries.21:46
ayoungIt has evolved since then, but this is all very recent stuff to this API21:46
dolphmayoung: what's the problem with hardcoding your secret api client to always request the response you want?21:46
ayoungthe word secret21:46
*** yolanda has quit IRC21:46
ayoungdolphm, its like needing to know up up down down left right left right BA Start21:46
dimsdprince, sorry. will ask/grab ticket next time21:46
gabrielhurleyYorikSar: I have no interest in arguing LDAP's particularities. As someone building human-readable interfaces this is a feature I need across every OpenStack API. We can argue this particular one some day in the future.21:47
ayounggabrielhurley, since YorikSar has bascially agreed with me, I think he is now just being technical21:47
*** annegentle has joined #openstack-dev21:48
ayoungdolphm, why do you feel the need to split up the trusts into multiple remote calls?  What does that gain you?21:48
dolphmayoung: i don't even know what that question means21:48
dolphmayoung: remote between what and what?21:49
ayoungdolphm, I am turning the discussion around.  To me it makes sense to grab a whole trust at once.  Why would I want to do otherwise?21:49
ayoungbetween the client, of whatever sort, and the web server21:49
dolphmayoung: because you're definition of "trust" defies the conventions set forth by the entire rest of the api in that relations are exposed seperately21:50
dolphmyour*21:50
ayoungdolphm, no it does not21:50
*** rkukura has quit IRC21:50
ayoungtrusts and tokens are different from users, roles, and projects21:50
dolphmayoung: if you have an example, i'm happy to file a bug and correct it21:50
ayoungdolphm, when you upload a virtual machine to glance, you upload it all at once.21:50
dolphmayoung: (side note -- i have to log in about 5 minutes, will be back on in an hour or two)21:50
ayoungdolphm, I am tired.  I am probably not going to be awake much longer.  I have to disappear as well.21:51
dolphmayoung: sleep!21:51
YorikSardolphm: In current patchset Trust.get_trust returns only a list of role_ids, not the roles themselves. So it's exactly what trust consists of. GET /trusts/{is}/roles cat return a list of roles' refs. It looks like pure REST.21:52
ayoungdolphm, A have been given a deadline of today.  I am trying to meet my obligations.  I have been postponing a lot of other work to knock this out, and I want it closed. We should be able to resolve this.21:52
dolphmayoung: you don't like my compromise and can't justify why :(21:53
ayoungdolphm, I can justfy why the normalized approach is wrong.  When you do a web get, you get adocument,  this is a tree, a hierarchy. To force web calls to be strictly single collections is limiting the power of the medium.  It is an artificial constraint, and we should not choses to do that to ourselves.21:54
ayoungdolphm, if you look at the other openstack components, I doubt that the APIs are designed that way21:54
ayoungeven the ones that are not poorly designed.21:55
ayoungdolphm, It I wanted to get a definition of a virtual machine from Nova, I would want a document that describes the whole vm21:55
ayounglibvirt does just that, actually21:55
ayoungI don;t want to get the cpus seperate from the memory from the nics etc21:56
ayoungthat way leads to madness21:56
ayounghuman sacrifice, dogs and cats, living together, mass hysteria21:56
*** esp1 has joined #openstack-dev21:56
dolphmayoung: i'd like to support things like paging on collections -- how do we do that on a nested collection?21:56
BLZbubbawhat can cause a majority of my openstack guests to go into a "paused" state?21:56
ayoungdolphm, trust will not need that21:56
ayounglisting trusts will21:56
*** esp1 has left #openstack-dev21:56
dolphmayoung: if a trust grants 10,000 roles, that might suck to get in a single response21:56
ayoungbut the individual trusts will not\21:57
ayoungdolphm, and that person deserves what they get21:57
ayounga trust like that is a blight21:57
dolphmayoung: what if all they want to know is the expiration of the trust?21:57
ayoungpremature optimization21:57
dolphmayoung: or whether impersonation is enabled?21:57
dolphmayoung: i'm not asking to implement paging -- just to have an idea about how to support it21:58
*** kagan has joined #openstack-dev21:58
ayoungdolphm, should we make separate API calls just for the individual attributes?21:58
READ10BLZbubba: you out of disk space maybe?21:58
ayoungPretty close we will havereimplemented SQL21:58
dolphmayoung: i've got to run -- will plan to be back on in < 2 hours21:58
dolphmayoung: lol21:58
dolphmayoung: that's not funny because there were a couple calls like that in diablo :P21:59
*** dolphm has quit IRC21:59
*** cloudchimp has quit IRC22:00
*** numero8 has quit IRC22:00
*** henrynash_ has joined #openstack-dev22:00
*** martine has quit IRC22:01
BLZbubbaREAD10: nope22:01
*** turul_ has quit IRC22:02
*** afazekas has quit IRC22:02
*** henrynash has quit IRC22:02
*** henrynash_ is now known as henrynash22:02
YorikSarayoung: Why are list_* like this in SQL backend?22:03
READ10BLZbubba: hmm, I'm not sure then; whenever anybody says 'lots of VMs paused' I think i/o issues, which often means out of disk space22:03
YorikSarayoung: Is it critical to call session.flush before to_dict?22:03
ayoungYorikSar, I don't think so.22:03
*** clayg has joined #openstack-dev22:03
*** lorin1 has left #openstack-dev22:03
ayoungBut it probably is more correct to do so22:03
jab416171READ10: 133 out of 298 VMs are paused22:04
jab416171spread across 9 compute nodes22:04
*** arbrandes has quit IRC22:04
*** heckj has quit IRC22:06
*** kazoo has joined #openstack-dev22:06
*** ayoung is now known as ayoung-afk22:07
READ10jab416171: I couldn't say what's happening there, I just thought I'd throw the I/O idea out there to make sure somebody mentioned it22:07
*** markmc has quit IRC22:08
READ10jab416171: actually, though, KVM VMs?22:08
jab416171yeah22:08
READ10ok, then I stand by the comment22:08
READ10I'm not sure what other HVs do22:09
BLZbubbaREAD10: so virsh will actually mark vm's paused if the disk is full?22:09
BLZbubbanot a bad way to handle it22:09
READ10generally qemu will pause the VM on io failure, although that can be overridden22:09
READ10BLZbubba: yeah, it's very good in the disk full case22:10
*** dprince has quit IRC22:10
*** kazoo has quit IRC22:10
*** lcheng has quit IRC22:10
*** pabelanger has quit IRC22:11
BLZbubbais there a way to have it clean up the instance data for deleted instances?22:11
*** dhellmann has quit IRC22:12
*** johnthetubaguy has quit IRC22:13
*** pnavarro has quit IRC22:14
READ10BLZbubba: I have to admit I've been using KVM for a few years, but I'm just getting started with openstack, so I don't know the answer to that22:14
*** zodiak has quit IRC22:14
BLZbubbasame here22:14
*** pixelbeat has quit IRC22:14
BLZbubbait won't take more than a few minutes to script it up though22:15
BLZbubbathe most painful part is having to move between uuid and hex(id) all the time22:16
*** pcm_ has quit IRC22:18
*** gasbakid_ has quit IRC22:18
*** zodiak has joined #openstack-dev22:18
*** gabrielhurley has quit IRC22:19
*** annegentle has quit IRC22:20
*** digitals_ has joined #openstack-dev22:22
*** kgriffs has left #openstack-dev22:24
*** digitalsanctum has quit IRC22:26
*** mrunge has quit IRC22:26
*** bswartz has quit IRC22:29
*** danwent has quit IRC22:29
*** annegentle has joined #openstack-dev22:29
*** edmund has quit IRC22:31
*** anniec has joined #openstack-dev22:32
*** anniec_ has quit IRC22:32
*** digitals_ has quit IRC22:37
*** alunduil has quit IRC22:37
*** mtreinish has quit IRC22:37
*** markvoelker has quit IRC22:38
*** diogogmt has quit IRC22:40
*** nunosantos has quit IRC22:41
*** mohits has joined #openstack-dev22:44
*** radez is now known as radez_g0n322:45
*** mohits has quit IRC22:48
*** digitalsanctum has joined #openstack-dev22:50
*** dosaboy has quit IRC22:54
*** sacharya has quit IRC22:55
*** armaan has left #openstack-dev22:56
*** yamahata has quit IRC22:56
icchahey anyone having problem with glance-api restart and oslo.config import error?22:56
*** dubsquared1 has joined #openstack-dev22:59
*** stevemar has quit IRC23:02
*** john5223 has quit IRC23:03
*** digitalsanctum has quit IRC23:03
*** eglynn has quit IRC23:04
*** tomoe_ has joined #openstack-dev23:05
*** alexpilotti has joined #openstack-dev23:05
*** kbringard has quit IRC23:05
*** datsun180b has quit IRC23:05
*** kbringard has joined #openstack-dev23:06
*** dolphm has joined #openstack-dev23:10
*** bknudson has quit IRC23:10
*** shardy is now known as shardy_afk23:11
*** eharney has quit IRC23:13
*** devoid has joined #openstack-dev23:13
*** dolphm has quit IRC23:14
*** jpich has quit IRC23:18
*** digitalsanctum has joined #openstack-dev23:20
*** annegentle has quit IRC23:20
*** esheffield has quit IRC23:22
*** hub_cap has left #openstack-dev23:23
*** Gordonz has quit IRC23:24
*** brianr_ is now known as brianr-away23:26
*** epim has quit IRC23:31
*** AlanClark has quit IRC23:31
*** gordc has quit IRC23:37
*** alunduil has joined #openstack-dev23:39
*** danwent has joined #openstack-dev23:39
*** gongysh has joined #openstack-dev23:42
*** soody has joined #openstack-dev23:42
*** olaph_ has quit IRC23:42
*** annegentle has joined #openstack-dev23:45
*** ritzcarltn has joined #openstack-dev23:46
*** ijw has quit IRC23:48
*** jimfehlig has quit IRC23:49
*** devoid has quit IRC23:50
*** ijw has joined #openstack-dev23:50
*** NobodyCam has quit IRC23:51
*** rpedde is now known as rpedde_away23:52
*** andrewbogott is now known as andrewbogott_afk23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!