Friday, 2013-03-01

openstackgerritA change was merged to openstack/glance: Fix response code for successful image upload.  https://review.openstack.org/2321900:00
*** mrodden has quit IRC00:00
*** bswartz has joined #openstack-dev00:00
*** danwent has quit IRC00:02
*** mrodden has joined #openstack-dev00:03
*** mrodden1 has quit IRC00:04
*** pabelanger has quit IRC00:06
*** hemna_ has quit IRC00:06
*** hemna has joined #openstack-dev00:07
*** jcmartin_ has joined #openstack-dev00:08
*** shardy has quit IRC00:09
*** jcmartin has quit IRC00:09
*** jcmartin_ has joined #openstack-dev00:09
*** otherwiseguy has quit IRC00:10
*** jcmartin_ has quit IRC00:10
*** jcmartin has joined #openstack-dev00:10
*** kagan has quit IRC00:11
*** alobbs has quit IRC00:11
*** vipul is now known as vipul|away00:12
*** pholland has joined #openstack-dev00:12
*** tomoe_ has joined #openstack-dev00:13
*** jcmartin_ has joined #openstack-dev00:15
*** jcmartin has quit IRC00:15
*** jcmartin_ is now known as jcmartin00:15
gongyshamotoki: ping00:18
*** metral has joined #openstack-dev00:18
*** pabelanger has joined #openstack-dev00:23
*** vkmc has joined #openstack-dev00:25
*** alunduil has joined #openstack-dev00:27
*** hemna has quit IRC00:27
*** jcmartin_ has joined #openstack-dev00:28
*** jcmartin has quit IRC00:28
*** jcmartin_ is now known as jcmartin00:28
*** jcmartin_ has joined #openstack-dev00:29
*** jcmartin has quit IRC00:29
*** jcmartin_ is now known as jcmartin00:29
*** sacharya1 has quit IRC00:30
*** markwash has quit IRC00:31
*** danwent has joined #openstack-dev00:33
amotokigongysh: pong00:37
*** winston-d_ has joined #openstack-dev00:39
*** danwent has quit IRC00:39
*** cdub_ has joined #openstack-dev00:45
*** sthaha has joined #openstack-dev00:46
*** jcmartin has quit IRC00:49
*** jcmartin has joined #openstack-dev00:49
*** jcmartin_ has joined #openstack-dev00:50
*** jcmartin has quit IRC00:50
*** jcmartin_ is now known as jcmartin00:50
winston-d_any citrix folks around?00:50
*** pholland has quit IRC00:53
*** markmcclain has quit IRC00:55
*** digitalsanctum has joined #openstack-dev00:57
termieayoung: responded to your message on https://review.openstack.org/#/c/23143/ inline, i forget whether it emails you about that00:57
*** dsanders has joined #openstack-dev00:58
ayoungtermie, at the Python level, is there something that can say  "use this version of the openssl binaries?"  I realize that at the library level there are ways to enforce this.00:59
ayoungI assume that what you are seeing is people running the tests and not using a venv?00:59
termieayoung: it would literally run a subprocess and do the same thing00:59
termieayoung: the point is that jenkins is going to have the correct version, random users might not00:59
*** markmcclain has joined #openstack-dev01:00
ayoungtermie, I don't have that much faith in Jenkins.01:00
termieayoung: so we don't care whether jenkins does the check, we just want to notify users so that they don't just fail a few hundred tests and not know why01:00
termieayoung: it doesn't really matter, the tests will all fail without it there01:00
termieayoung: re jenkins, it will fail anyway, this is just a helper for real humans01:01
ayoungtermie, so, I tend to run the tests from nose directly....but also from run_tests.01:01
jog0creiht: ping01:01
termieayoung: then you are a power user and we don't care about you01:01
ayoungtermie, does it hurt anything to put it in the python tests?01:01
ayoungtermie, I'm also responsible for the openssl mess...01:01
termieayoung: it is a whole bunch of random extra work, requires doing some module-level setup in an __init__.py to make it start a subprocess and check the version of openssl before running the tests01:02
termieayoung: or 1 line in a bash script that is the canonical entry point into running the tests01:02
clarkbit you want jenkins to also run the check you can add it to the tox.ini too01:04
clarkbthe problem with that is now you have to maintain a thing in two different places01:04
termiethis was not considered a problem by anybody before, i added a helpful message for people who might be getting weird errors01:05
ayoungclarkb, I think I want it in the setup for the ssl tests01:05
ayoungclarkb, but it can be a separate test, no need to run it for each test...too much overkill01:05
termieayoung, clarkb: let's say you put it as teh setup to whatever the ssl tests subclass from, it only runs once01:06
termieyou will run a bunch of tests, and see a bunch of failures or skips01:06
termieabout 300 of them01:06
termiehappiness level of a new developer after that?01:07
ayoungtermie, its a good idea,  It just doesn't belong in the bash script, it belongs in with the tests.  Jenkins, tempest, all the automation will benefit from the same thing01:07
ayoungtermie, depends on the quality of the error message01:07
*** jcmartin has quit IRC01:07
*** jcmartin has joined #openstack-dev01:08
termieayoung: have you seen what error messages look like?01:08
termieayoung: there is a dump of the entire setup of the db in every one01:08
ayoungtermie, yes https://bugs.launchpad.net/keystone/+bug/113472801:08
uvirtbotLaunchpad bug 1134728 in keystone "run_test.sh puts all output into stderr." [Undecided,New]01:08
*** riskable has quit IRC01:09
termieayoung: where is the entrypoint into all ssl tests?01:09
ayoungtermie, I am aware.  There DB setup issue is due to the fact that we are testing against a toy DB, but we need to test against the real DBs.  Tht is still WIP01:09
*** riskable has joined #openstack-dev01:09
ayoungtests/test_ssl.py01:09
ayounggotta go make a food run.01:10
dstufftWhy does checking openssl version require subprocess, python exposes what version of openssl it's using? Or is openstack shelling out to use openssl01:10
termieayoung: and those will be run before the tests trying to use ssl?01:10
termieayoung: because literally hundreds of tests fail if you don't ahve this01:10
termieayoung: and i see 5 in here01:10
*** networkstatic has quit IRC01:10
*** sacharya has joined #openstack-dev01:13
*** Tross has quit IRC01:22
*** dims has joined #openstack-dev01:22
*** networkstatic has joined #openstack-dev01:23
*** anniec has quit IRC01:25
*** jcmartin has quit IRC01:26
*** jcmartin has joined #openstack-dev01:26
*** READ10 has quit IRC01:27
*** READ10 has joined #openstack-dev01:27
*** metral has quit IRC01:27
*** alop has quit IRC01:28
termiedstufft: it shells out01:30
termieayoung: moved to package level setup: https://review.openstack.org/#/c/23143/01:32
*** jog0 has quit IRC01:32
termieayoung: should run before anything else unless you do any nosetests magic01:32
*** jcmartin has quit IRC01:33
*** jcmartin_ has joined #openstack-dev01:33
*** jcmartin_ is now known as jcmartin01:33
*** jcmartin_ has joined #openstack-dev01:35
*** jcmartin has quit IRC01:35
*** jcmartin_ is now known as jcmartin01:35
*** digitalsanctum has quit IRC01:35
openstackgerritA change was merged to openstack/nova: Imported Translations from Transifex  https://review.openstack.org/2322901:35
*** Tross has joined #openstack-dev01:36
*** terryh has quit IRC01:38
*** danwent has joined #openstack-dev01:38
*** novas0x2a|laptop has quit IRC01:40
*** alobbs has joined #openstack-dev01:40
*** alexxu has joined #openstack-dev01:46
*** metral has joined #openstack-dev01:49
*** soody has joined #openstack-dev01:51
*** bing_bu has joined #openstack-dev01:52
*** epim_ has joined #openstack-dev01:53
*** epim has quit IRC01:55
*** epim_ is now known as epim01:55
*** jimfehlig has quit IRC01:56
*** vipul|away is now known as vipul01:57
*** vkmc has quit IRC02:00
*** yaguang has joined #openstack-dev02:01
*** nati_ueno has quit IRC02:05
*** blamar has quit IRC02:06
*** andrewbogott is now known as andrewbogott_afk02:09
*** beagles has quit IRC02:10
*** danwent has quit IRC02:11
*** jcmartin_ has joined #openstack-dev02:12
*** jcmartin has quit IRC02:12
*** jcmartin_ is now known as jcmartin02:12
*** nijaba_ has joined #openstack-dev02:13
*** alexxu has quit IRC02:13
*** dsanders has quit IRC02:14
*** nijaba has quit IRC02:14
*** beagles has joined #openstack-dev02:15
*** jcmartin has quit IRC02:18
*** jcmartin_ has joined #openstack-dev02:18
*** soody has quit IRC02:19
*** jcmartin_ has quit IRC02:21
openstackgerritA change was merged to openstack/cinder: Improved fail_reason for cinder-backup swift connection errors  https://review.openstack.org/2316602:25
*** PaulM has joined #openstack-dev02:26
*** burris has joined #openstack-dev02:26
*** sandywalsh has quit IRC02:29
*** cdub_ has quit IRC02:29
*** cdub_ has joined #openstack-dev02:31
*** alexxu has joined #openstack-dev02:36
*** terry7 has quit IRC02:41
*** markmcclain has quit IRC02:43
*** markmcclain has joined #openstack-dev02:46
*** markmcclain has quit IRC02:46
ayoungtermie, so.. does it make sense to check the openssl version when running the server as well?02:47
*** soody has joined #openstack-dev02:48
*** ladquin has quit IRC02:51
*** READ10 has quit IRC02:51
*** Ryan_Lane has quit IRC02:53
*** adjohn has quit IRC02:54
*** jcmartin has joined #openstack-dev02:58
*** sandywalsh has joined #openstack-dev02:59
creihtjog0: pong03:04
creihtwell I guess you left already03:04
*** soody_ has joined #openstack-dev03:07
termieayoung: ... every good deed...03:07
termieayoung: i suppose so yes, i guess i will write a dependency checking framework03:08
*** soody has quit IRC03:08
*** soody_ is now known as soody03:08
ayoungtermie, No, I already approved the patch.  Just wondering if this is something that will mess up people deploying.03:08
ayoungMost will deploy via packages and get the dep that way03:08
*** soody has quit IRC03:08
*** PaulM has quit IRC03:08
openstackgerritA change was merged to openstack/cinder: Elevate context for delete volume with no host.  https://review.openstack.org/2319603:08
ayoungwell, I +1ed it, but we'll see it through.  heckj +1ed it earlier, but I'd like him to see the new version, too.03:09
termieayoung: how do you think it would mess up somebody deploying?03:09
termieayoung: i don't know where teh package building is happening, but they'd have to make sure it has the right version of openssl listed03:10
ayoungtermie, well, devstack would check the dependecy, but it looks like you are helping out users that are coding direcly out of the repos.03:10
ayoungSo, yeah, if they run the unit tests, they'll know, but not if the y just blindly run the server03:10
*** blamar has joined #openstack-dev03:11
ayoungtermie, packes are Ubuntu/Fedora based, and both state the minimum OpenSSL version.  Devstack, too, says minimal SSL  I think03:12
winston-d_lifeless: ping03:12
*** zodiak has quit IRC03:12
*** maurosr- has joined #openstack-dev03:13
*** maurosr has quit IRC03:14
*** rkukura has quit IRC03:14
termieayoung: i am working on some keystone related stuff at the moment, so you can expect more of this...03:14
termieayoung: but, why is there a "methods" directory in here? https://github.com/openstack/keystone/tree/master/keystone/auth03:15
ayoungtermie, glad to have it. Am I correct in understanding that you/your people are doing Dev without using devstack?03:15
ayoungtermie, ah03:15
termieayoung: or to rephrase, it should not be called method03:15
termieayoung: i don't know what other people use, i like my projects to work like normal projects03:15
ayoungtermie, it is the authentication methods that apply to the token03:15
termieayoung: and that generally involves being able to work from a checkout03:16
ayoungtermie, I am old enough to know that there is no such thing as normal03:16
termieayoung: methods is not a word that is allowed to be used ot describe things that are not methods on classes03:16
termieayoung: it is just needlessly and confusingly overloading a term that already exists and has a concrete definition03:16
ayoungtermie, in this case, we are using it from the domain model.  auth/methods makes sense.03:16
ayoungtermie, in Auth every term has multiple meanings03:17
ayoungit is really hard to come up with the "right" term03:17
ayoungbut we are willing to listen to suggestions03:17
termiewell, method isn't it :)03:17
ayoungtermie, its like democracy.  The worst option, except for all the others03:17
termiehow's about, strategy03:17
ayoungWOrse03:18
termiethat is what it is by pattern defs03:18
termieyou are choosing an auth strategy, either password or token03:18
termieit has an easy well defined meaning to everybody03:18
ayoungI will agree that it is an application of the strategy pattern, but also it is chain of responsibility03:18
*** yaguang has quit IRC03:18
ayoungmultipkleauth methods can be applied to a single token03:18
ayoungPerhaps Factors?03:19
ayoungAs in Multi Facotr Authentication.03:19
termiewhat? no, those are all way more CS-y and confuisng03:19
termieit isn't weird to say that multiple strategies get used to auth somebody03:19
ayoungtermie, no, that is more from the auth community03:19
termieit is weird to call something a "factor"03:19
ayoungMFA is not Museum of Fine Art to that world03:19
*** yaguang has joined #openstack-dev03:19
termiewhat is wrong with strategy?03:20
termieyou just said that it is a strategy03:20
termieit is not like "method" encompasses any of hte ideas you just described03:20
termieexcept in its extreme vagueness when not applied to a function on a clas03:20
*** maurosr has joined #openstack-dev03:21
ayoungtermie, it is as much a chain of responsibility as a straegy.  Also, they could be fly wieghts.  Strategy is a computer science term, but we need an Authentication term.  Method is what people call them03:21
ayoungBut I kinds of like Factor.  It is more precise.03:22
ayounghttp://en.wikipedia.org/wiki/Multi-factor_authentication03:22
termiejesus christ03:22
ayoungtermie, what?  That there is a whole field of study devoted to this?03:23
*** maurosr- has quit IRC03:24
termiethis is exactly how we got the ridiculous directory structure that the original keystone had03:24
termiemaybe before your time, but do you remember the "logic" directory?03:24
ayoungtermie, This is Identity Management.  There are very real systems built on top of the things that people deploying Keystone Need to tie in with.03:25
ayoungThe number of short cominings in the Keystone approach is legion03:25
ayoungshall we start with using Eventlet?03:25
termie_you named a module "methods"_03:25
ayoungbecause in the field of Identity Management, that is what they are called.03:26
*** martine has joined #openstack-dev03:26
*** zodiak has joined #openstack-dev03:26
termieperhaps an aside, but do you know anybody who _likes_ that?03:26
*** nati_ueno has joined #openstack-dev03:27
ayoungtermie, I'm tempted to lock you in a room with David Chadwick for a day at the summit....03:27
termieayoung: link to his info?03:27
termiepopular name03:27
*** markwash has joined #openstack-dev03:28
ayoungUniversity of Kent...03:28
ayoungDavid Chadwick, University of Kent.03:28
ayoungd.w.chadwick AT kent.ac.uk03:28
termieis this somebody who is coming to the summit?03:28
termieor is this just a joke i was supposed to get because this guy is some outspoken figure on something?03:29
ayoungtermie, no, he is very involved03:29
termieayoung: i don't think he'll like me03:30
ayoungI am trying to pull up his blueprints, but network slowness03:30
termiemore asides, i assume you've worked with some enterprise identity systems, what would you say were the worst things about working with them?03:30
ayoungtermie, he's an academic, but he also has seen a lot of these systems, and can talk to the commonalities and shortcomings.03:31
ayoungtermie, I would say the worst thing is the realization of how crappily insecure systems I built prior to learning the realities of  Identity Management03:31
termieayoung: and he thinks overlaying one region of study's terminology on top of another's is a decent practice?03:31
*** alexpilotti has quit IRC03:32
ayoungtermie, actually, he is very precise with language, to a degree that catches me off guard03:32
termieayoung: what would you say the realities of _I_dentity _M_anagement are?03:32
ayoungwell, first of all, most SSO systems don't adequetly protect the user against many of the most common attacks03:33
ayoungprobably the worst  is03:33
ayoungnot securly verifying the Identity Provider se03:33
ayoungsorry, getting late here...03:34
*** PaulM has joined #openstack-dev03:34
termiewell, we don't have to continue this conversaion03:34
ayoungthere are two secure ways of doing IdM over the web03:34
termieyou're not particularly making me agree with you any more03:34
ayoungnah, just apologizing for sloppy typing03:34
ayoungone is Kerberos and the other uses X50903:34
ayoungAnd Kerberos is out03:34
ayoungfor the simple reason that all firewalls block the ports it needs.03:35
ayoungSo that leaves X50903:35
ayoungKeystone was built, as I understand it, to avoid having to copy the userid/password around the whole body of systems in a deploy03:36
ayoungbut it was built without doing any research into the types of attacks as system like that needs to defend against03:36
*** enjoy_ has quit IRC03:36
*** melwitt has joined #openstack-dev03:36
*** enjoy_ has joined #openstack-dev03:37
termieas far as i can tell it was built to duplicate rackspace's auth + random changes03:37
ayoungtermie, so you just rewrote it?  You weren't there when it was origianlly implemented?03:37
termieayoung: i was there in the respect that i was disagreeing with the implementors in meetings quite frequently03:38
ayoungHeh03:38
*** bing_bu has quit IRC03:38
termieayoung: but i did not code any of the original03:38
termieayoung: or pay attention after a certain point until it became glaringly obvious that it was batshit03:39
*** Gordonz has joined #openstack-dev03:39
ayoungSo...as far as the term "methods" you will have to convince Dolph and Guang Yee that you have a better term.  I think I could get behind Factor, but not Strategy.  There may well be a better term than that as well.03:39
termieayoung: but i assure you, it was built by people who took a very academic approach to software design03:40
ayoungI can see your objection03:40
ayoungMaybe to software design, but not to security.03:40
termiesecurity as well, but we have not been discussing security here03:40
termiethe "security" design of keystone was bearer token03:41
termieand i fought against it every step of the way03:41
ayoungtermie, I see Identity Management as a fundamental security concept.  So, on my side, I sure have been talking security03:41
ayoungwish I was involved then.  Iwould have backed you up03:42
termiedidn't matter who backed me up03:42
ayoungSo the next step is embedding a public key in the token and signing the message.03:42
ayoungAnd now we have 2/3rds of X50903:42
ayoungSo last step is to encrypt the tunnel, for which you need X509.03:43
ayoungSo I am thinkin that tokens need to go away and we move to the technolgy that we already have to depend on anyway.03:43
termiemethods is a bad name for a module in python03:43
ayoungBut bearer token bad...and putting them into the URLs is worse.03:43
ayoungtermie, I agree with you.03:43
termiean unacceptably bad name03:44
termieit is a sign of significant rot and academic wandering, to me03:44
ayoungSo lets come up with the "right" name.  Methods may be bad from an object oriented aspect, but not from the domain language of IdM.03:44
termieyou can use the domain language of idm in the docs03:45
termieas many BPMs as you want03:45
ayoungtermie, you are complaining.  Offer a solution, and a correct one, and you will have my full support.03:45
termiestrategy is a better solution03:45
termiedone03:45
*** ilblackdragon has quit IRC03:46
openstackgerritA change was merged to openstack/nova: Fixes a Hyper-V live migration issue  https://review.openstack.org/2322803:47
ayoungNo.  Strategy is not. As I said, it is as much Chain of Responsiblity as Straegy, so if you are going Gang of Four on me, I;d suggest Links.  But Factor might be.  I'll see if I can come up with something better as well.03:47
termiei'm not gang of fouring03:47
termiestrategy is significantly better than "methods"03:47
termiein reality there isn't much of a point of even putting them in a subdir if there are two03:48
termiebut i'll let that premature optimization go03:48
ayoungtermie,  we know of others that are coming in, but we need to cut scope somewhere03:48
*** sacharya has quit IRC03:50
*** PaulM has quit IRC03:50
ayoungtermie, Authenticators03:50
ayounghttp://www.fismapedia.org/index.php?title=Authenticator03:50
termiethat'll be great03:51
termiekeystone.auth.authenticators03:51
openstackgerritA change was merged to openstack/nova: Fixes the Hyper-V driver's method signature  https://review.openstack.org/2323903:52
*** PaulM has joined #openstack-dev03:52
ayoungtermie  I realize you got disgusted with the Keystone development process in the past, but I assure you it is a different set of people and values these days.  We have people deploying in the field saying they need certain things, and desperately.  LDAP tie in, multi factor auth, and tight security.  That is what we are tryingto do.  We welcome your input, and you've been instrumental to the project in the past.03:56
*** fire has joined #openstack-dev03:57
termiemethods03:57
*** morganfainberg has left #openstack-dev03:57
termiei'm going to go take a shower and wash this filth off03:59
ayoungtermie, are you goingto be at the summit?03:59
*** slewsys has joined #openstack-dev03:59
termieyeah, i can tell it is going to be great already ;)03:59
termiei am currently disabled so i may have enough extra time on my hands to fork a few more projects04:00
ayoungDepends on what you bring to the table.04:00
termiei bring frustration and a sense that the world is delusional04:00
ayoung" many of the truths we cling to depend greatly on our own point of view."04:01
termiewell, thanks goodness somebody (me) has my point of view04:01
termieotherwise i'd have nobody i could trust04:01
termie;)04:02
ayoungtermie, what brings you back to looking at Keystone?04:02
termiei mistakenly offered to write a backend04:02
ayoungfor identity?04:02
termiebut apparently my burden in this world is to fix tests every time i check out a project nowadays04:03
termieand i'm probably going to get way-layed building a "performance" evaluation tool04:03
termiefor all the stuff in keystone, yes04:03
ayoungtermie, actually, on that I can help04:03
ayoungwe have a performance team that is just gearing up04:04
termiei put performance in quotes because i am apparently delusional in what i mean by that as well04:04
termiei mostly intend to count db lookups and cache misses04:04
ayoungOK,  I'm out. Good to have you back contributing.  Keep the reviews coming.  I might not always agree with you, but I promise I can be persuaded by a solid argument.  G'Night04:07
*** Mandell has quit IRC04:07
*** ayoung is now known as ayoung-zzzz04:07
*** bdpayne has quit IRC04:08
ayoung-zzzztermie, https://bugs.launchpad.net/keystone/+bug/113696704:09
uvirtbotLaunchpad bug 1136967 in keystone "The "methods" modules conflicts with common usage in python" [Undecided,New]04:09
*** olaph has quit IRC04:10
*** olaph has joined #openstack-dev04:11
*** zodiak has quit IRC04:14
*** stevemar has joined #openstack-dev04:17
*** zodiak has joined #openstack-dev04:17
*** nati_ueno has quit IRC04:19
*** Gordonz has quit IRC04:22
*** jcmartin has quit IRC04:23
*** lloydde has quit IRC04:23
*** amotoki has quit IRC04:25
*** devananda has quit IRC04:27
*** ilblackdragon has joined #openstack-dev04:28
*** PaulM has left #openstack-dev04:30
*** koolhead17 has joined #openstack-dev04:35
*** pabelanger has quit IRC04:36
*** devananda has joined #openstack-dev04:36
*** martine has quit IRC04:42
*** CaptTofu has joined #openstack-dev04:47
*** nunosantos has quit IRC04:51
*** blamar has quit IRC05:02
*** mohits has joined #openstack-dev05:06
*** dsanders has joined #openstack-dev05:19
*** riskable has quit IRC05:23
*** echohead_ has joined #openstack-dev05:25
*** dripton_ has joined #openstack-dev05:26
*** navid has joined #openstack-dev05:27
*** Ritz has quit IRC05:27
*** stevemar has quit IRC05:27
*** koolhead17 has quit IRC05:28
*** Mandell has joined #openstack-dev05:29
*** mrodden1 has joined #openstack-dev05:30
*** echohead has quit IRC05:32
*** burris has quit IRC05:32
*** dripton has quit IRC05:32
*** alunduil has quit IRC05:32
*** n0ano has quit IRC05:32
*** mrodden has quit IRC05:32
*** echohead_ is now known as echohead05:32
*** burris has joined #openstack-dev05:32
*** swaT30 has quit IRC05:33
*** alunduil has joined #openstack-dev05:33
*** aeperezt has quit IRC05:34
*** swaT30 has joined #openstack-dev05:35
*** riskable has joined #openstack-dev05:38
*** sthaha has quit IRC05:38
*** avishay has joined #openstack-dev05:40
*** koolhead17 has joined #openstack-dev05:40
*** gasbakid has quit IRC05:43
*** markwash has quit IRC05:44
*** avishay has quit IRC05:54
*** amotoki has joined #openstack-dev05:54
*** markmcclain has joined #openstack-dev05:54
*** amotoki_ has joined #openstack-dev05:58
*** amotoki has quit IRC06:00
*** adjohn has joined #openstack-dev06:06
*** manas has joined #openstack-dev06:14
*** amotoki_ has quit IRC06:15
*** CaptTofu has quit IRC06:16
*** CaptTofu has joined #openstack-dev06:17
*** winston-d_ has quit IRC06:17
*** koolhead17 has quit IRC06:20
*** armaan has joined #openstack-dev06:29
openstackgerritA change was merged to openstack/quantum: Imported Translations from Transifex  https://review.openstack.org/2323406:29
*** fire has quit IRC06:32
*** crandquist has quit IRC06:33
*** gasbakid has joined #openstack-dev06:36
*** dsanders has quit IRC06:39
*** zaitcev has quit IRC06:40
*** fire has joined #openstack-dev06:43
*** almaisan-away is now known as al-maisan06:48
*** tomoe_ has quit IRC06:49
*** tomoe_ has joined #openstack-dev06:49
*** markwash has joined #openstack-dev06:50
*** adjohn has quit IRC06:54
*** tomoe_ has quit IRC06:54
*** adjohn has joined #openstack-dev06:55
openstackgerritA change was merged to openstack/quantum: Use db model hook to filter external network  https://review.openstack.org/2286606:55
*** markwash has quit IRC06:55
*** Ritz has joined #openstack-dev06:55
*** adjohn_ has joined #openstack-dev06:56
*** adjohn has quit IRC07:00
*** mrunge has joined #openstack-dev07:00
*** armaan has left #openstack-dev07:01
*** al-maisan is now known as almaisan-away07:01
*** haleyb has quit IRC07:02
*** haleyb has joined #openstack-dev07:03
*** armaan has joined #openstack-dev07:11
*** armaan has left #openstack-dev07:11
*** markmcclain1 has joined #openstack-dev07:11
*** markmcclain has quit IRC07:12
*** dev_sa has joined #openstack-dev07:13
*** Ryan_Lane has joined #openstack-dev07:14
*** burris has quit IRC07:16
*** fire has quit IRC07:26
*** CaptTofu has quit IRC07:27
*** yolanda has joined #openstack-dev07:29
*** gargya has joined #openstack-dev07:29
*** mindpixel has joined #openstack-dev07:35
*** dsanders has joined #openstack-dev07:42
*** Ritz has quit IRC07:43
*** Ritz has joined #openstack-dev07:45
*** gasbakid_ has joined #openstack-dev07:47
*** gasbakid has quit IRC07:50
*** yolanda has quit IRC07:51
*** yolanda has joined #openstack-dev07:52
*** networkstatic has quit IRC07:53
*** networkstatic has joined #openstack-dev07:59
*** rafaduran has joined #openstack-dev08:01
*** xga has joined #openstack-dev08:02
*** reidrac has joined #openstack-dev08:05
openstackgerritA change was merged to openstack/cinder: Only use iscsi_helper config option if using LVMISCSIDriver  https://review.openstack.org/2270608:10
lifelesswinston-d: pong08:12
*** markmcclain1 has quit IRC08:13
*** Mandell has quit IRC08:16
*** melwitt has quit IRC08:21
*** ethan_ has joined #openstack-dev08:25
*** jgallard has joined #openstack-dev08:28
*** Oneiroi has joined #openstack-dev08:29
*** dsanders has quit IRC08:31
*** Akendo has joined #openstack-dev08:31
*** boris-42 has joined #openstack-dev08:34
*** Oneiroi has quit IRC08:35
*** flepied has joined #openstack-dev08:35
*** Oneiroi has joined #openstack-dev08:36
*** reidrac has quit IRC08:38
*** reidrac has joined #openstack-dev08:38
*** psedlak has joined #openstack-dev08:40
*** johnthetubaguy has joined #openstack-dev08:44
*** gasbakid__ has joined #openstack-dev08:44
*** dsanders has joined #openstack-dev08:44
*** gasbakid_ has quit IRC08:45
*** corXi has joined #openstack-dev08:51
openstackgerritA change was merged to openstack/horizon: Ensure "Add Interface" form in Admin Panel works  https://review.openstack.org/2254708:55
*** gasbakid__ has quit IRC08:55
*** johnthetubaguy1 has joined #openstack-dev08:56
*** trapni has joined #openstack-dev08:57
*** trapni has joined #openstack-dev08:57
*** aloga has quit IRC08:57
*** johnthetubaguy has quit IRC08:57
*** aloga has joined #openstack-dev08:58
*** johnthetubaguy1 has quit IRC09:00
*** trapnii has joined #openstack-dev09:07
*** trapni has quit IRC09:09
*** xga has quit IRC09:10
*** donaldh has joined #openstack-dev09:15
*** derekh has joined #openstack-dev09:16
*** zing has joined #openstack-dev09:18
*** jpich has joined #openstack-dev09:20
*** dosaboy has joined #openstack-dev09:21
*** trapnii has quit IRC09:25
*** dsanders has quit IRC09:25
*** melwitt has joined #openstack-dev09:28
*** danpb has joined #openstack-dev09:31
*** eglynn has joined #openstack-dev09:33
*** mmagr has joined #openstack-dev09:35
*** kbringard has joined #openstack-dev09:37
*** zoresvit has joined #openstack-dev09:37
*** trapni has joined #openstack-dev09:37
*** trapni has joined #openstack-dev09:37
*** donaldh has quit IRC09:38
*** afazekas has joined #openstack-dev09:40
*** markmc has joined #openstack-dev09:41
*** networkstatic has quit IRC09:42
*** pixelbeat has joined #openstack-dev09:48
sgranhi there09:50
sgranI've just uploaded https://review.openstack.org/#/c/23256/ for review09:50
sgranI know it's late in the release cycle, but I'm really hoping to get that and one more into nova/grizzly09:50
sgranis this going to be possible?09:50
lifelessa09:50
sgranhmm.  I think I made lifeless explode.  I'll take that as a negative reaction :)09:51
lifelesstypo ;)09:51
lifelessI'd ping ttx09:52
lifelesslate release changes tend to make him explode ;)09:52
*** ogelbukh has quit IRC09:53
*** ogelbukh has joined #openstack-dev09:54
sgranok, thanks :)09:55
openstackgerritA change was merged to openstack/oslo-incubator: Zmq notifier topic manip fix.  https://review.openstack.org/2319109:56
*** AnilV4 has joined #openstack-dev09:56
openstackgerritA change was merged to openstack/oslo-incubator: Zmq correct envelope param for notify()  https://review.openstack.org/2319209:57
sgranttx: ^^^09:58
*** gargya has quit IRC10:00
*** johnthetubaguy has joined #openstack-dev10:03
*** adjohn_ has quit IRC10:09
*** vkmc has joined #openstack-dev10:09
*** adjohn has joined #openstack-dev10:11
*** Ryan_Lane has quit IRC10:11
*** adjohn has quit IRC10:11
*** vkmc has quit IRC10:11
*** adjohn has joined #openstack-dev10:11
*** xga has joined #openstack-dev10:12
*** vkmc has joined #openstack-dev10:12
*** adjohn has quit IRC10:13
*** adjohn has joined #openstack-dev10:13
*** mkollaro has joined #openstack-dev10:14
*** adjohn has quit IRC10:15
sgransad-face.  I got a no10:15
*** adjohn has joined #openstack-dev10:15
*** adjohn has quit IRC10:17
*** adjohn has joined #openstack-dev10:17
*** adjohn has quit IRC10:19
*** corXi has quit IRC10:21
*** adjohn has joined #openstack-dev10:24
*** adjohn has quit IRC10:24
*** jgallard has quit IRC10:25
*** zbitter is now known as zaneb10:25
*** adjohn_ has joined #openstack-dev10:26
*** adjohn__ has joined #openstack-dev10:28
*** adjohn__ has quit IRC10:28
*** aagaard has joined #openstack-dev10:29
*** adjohn_ has quit IRC10:30
*** adjohn_ has joined #openstack-dev10:34
*** adjohn_ has quit IRC10:34
*** fire has joined #openstack-dev10:38
*** martine has joined #openstack-dev10:38
*** zoresvit has quit IRC10:39
danpbmarkmc: pixelbeat if either of you have chance to review this it'd be a great help https://review.openstack.org/#/c/23081/10:41
pixelbeatlooking10:43
*** martine has quit IRC10:43
*** alexxu has quit IRC10:44
vkmcHey everyone! Does anybody know who manages OpenStack forums?10:44
vkmcIt appears to be having some sort of issue, because it's blacklisting all the IPs who tries to register or login10:45
pixelbeatdanpb, I would have assumed a separate char than the standard variable name _ to denote a namespace. I.E. hw:disk_bus I suppose this was discussed somewhere?10:48
danpbpixelbeat: i asked about this on the mailing list to minimal response10:49
pixelbeatok I'll check there10:50
danpbpixelbeat: what tipped me in favour of  '_' is that the glance docs have been using 'os_' as a standard prefix for several operating system properties10:50
*** darraghb has joined #openstack-dev10:51
*** egallen has joined #openstack-dev10:53
*** zoresvit has joined #openstack-dev10:53
*** jgallard has joined #openstack-dev10:55
jpichvkmc: I would assume reed does? Not sure though. Last time I looked in there were many, many, many, many more spam messages than real ones so maybe the antispam controls have gone too far the other way now10:57
vkmcjpich, Oh good to know, maybe I should ask him later :)10:57
vkmcjpich, Some guy contacted me with that doubt10:57
*** tomoe_ has joined #openstack-dev10:58
*** egallen has quit IRC10:59
*** zoresvit has quit IRC11:00
*** boris-42 has quit IRC11:00
*** enjoy_ has quit IRC11:00
*** pcm_ has joined #openstack-dev11:00
*** ladquin has joined #openstack-dev11:03
*** egallen has joined #openstack-dev11:06
*** adjohn has joined #openstack-dev11:10
*** yaguang has quit IRC11:11
*** egallen has quit IRC11:11
*** xga has quit IRC11:14
*** xga has joined #openstack-dev11:15
*** zoresvit has joined #openstack-dev11:18
*** adjohn has quit IRC11:19
*** koolhead17 has joined #openstack-dev11:25
*** pcm_ has quit IRC11:28
*** mkollaro has quit IRC11:29
*** slewsys has quit IRC11:30
*** ijw has quit IRC11:30
*** slewsys has joined #openstack-dev11:31
*** slewsys has quit IRC11:32
*** vkmc has quit IRC11:32
openstackgerritA change was merged to openstack/nova: Add a 'hw_' namespace to glance hardware config properties  https://review.openstack.org/2308111:35
*** vkmc has joined #openstack-dev11:36
*** manas has quit IRC11:38
zykes-&win 4311:39
zykes-&win 4311:39
*** fire has quit IRC11:39
*** zoresvit has quit IRC11:42
*** kbringard has quit IRC11:46
*** arbrandes has joined #openstack-dev11:46
*** mohits has quit IRC11:49
*** chuckieb has joined #openstack-dev11:55
*** fire has joined #openstack-dev11:56
*** zoresvit has joined #openstack-dev11:56
*** gargya has joined #openstack-dev11:59
*** pcm__ has joined #openstack-dev11:59
*** alobbs has quit IRC12:01
*** sandywalsh has quit IRC12:05
*** chuckieb has quit IRC12:11
*** chuckieb has joined #openstack-dev12:12
*** alobbs has joined #openstack-dev12:13
*** pcm__ has quit IRC12:13
*** pcm_ has joined #openstack-dev12:13
*** adjohn has joined #openstack-dev12:15
*** chuckieb has quit IRC12:16
*** sandywalsh has joined #openstack-dev12:18
markmczigo_, hey12:20
zigo_Hi.12:20
*** adjohn has quit IRC12:20
markmczigo_, I think I got confused on that oslo-config/debian packaging thread12:20
zigo_Yeah, me too ! :)12:20
markmczigo_, you're saying oslo-config as the python package name is fine for debian, right?12:20
markmczigo_, it doesn't require every package that requires oslo-config to override defaults?12:21
zigo_I'm saying that basically, I don't really care, and if there's oslo.config vs oslo-config, I can use the debian/pydist-override file.12:21
zigo_But that best would be if it was directly oslo-config12:21
markmczigo_, since those packages would list 'oslo-config' in their install_requires in setup.py?12:21
markmczigo_, if we switched to oslo.config and all projects which needed had oslo.config in install_requires, that would be equally fine?12:22
zigo_As much as I saw with g3, there was no problem, probably because it was not in the tools/pip-requires.12:22
markmcwell, the full tarball URL is in pip-requires12:22
openstackgerritA change was merged to openstack-dev/devstack: Ignore autogenerated .prereqs.  https://review.openstack.org/2325412:22
zigo_I'd prefer if it was oslo-config rather than oslo.config, because the Debian package name is already oslo-config.12:22
markmcoslo-config ends up in the egg's requirements.txt12:22
markmcwell, it's python-oslo-config right?12:22
zigo_In g3?12:23
markmcah, if it was oslo.config upstream you'd call it python-oslo.config ?12:23
zigo_It's the traball, as you said.12:23
zigo_No.12:23
zigo_Well...12:23
markmcin Fedora, we'd call it python-oslo-config even if it was oslo.config upstream12:23
zigo_Guys in Ubuntu said they would like to switch to python-oslo.config.12:23
markmcwho cares about them12:23
* markmc jokes12:23
markmcok, whatever12:24
markmcyou're saying it's fine as it is12:24
markmcthat's enough for me :)12:24
* markmc just wants to use this opportunity to fix stuff if it makes sense12:24
zigo_Ok, let me say it more clearly.12:24
markmcif we wouldn't be able to fix it later, once it goes up on pypi12:24
zigo_I'd prefer if tools/pip-requires was using oslo-config rather than oslo.config, because that's how my package is already called.12:25
zigo_I'd prefer to use python-oslo-config because switching would mean more work.12:25
zigo_But if Ubuntu guys are switching to oslo.config instead, I'll folow, in order to make it consistent.12:25
zigo_Does this make more sense now? :)12:25
markmcwhy would they switch to oslo.config ?12:25
markmcif it's oslo-config upstream?12:25
zigo_That's what I read...12:26
zigo_Let me re-read the thread.12:26
markmcheh12:26
markmcok, I see it12:26
markmcwill poke a bit more12:26
zigo_Hum...12:27
zigo_Was it on IRC that I read ubuntu guys would switch?12:27
zigo_Let me check the log...12:27
zigo_jamespage: Are you around?12:27
zigo_zul: ?12:28
jamespagezigo_, I am12:28
markmcit's on the mailing list12:28
markmcfrom Daviey12:28
* markmc is replying12:28
zigo_jamespage: So, will you guys rename python-oslo-config into python-oslo.config?12:28
zigo_It doesn't make sense to me and mark.12:28
jamespagezigo_, lemme read the history12:33
zigo_I currently use "python-oslo-config" it would be some effort to switch back.12:34
zigo_Seems that all G3 packages have: "http://tarballs.openstack.org/oslo-config/oslo-config-2013.1b4.tar.gz#egg=oslo-config" in the tools/pip-requires12:35
jamespagezigo_, so is Ubuntu - the steer to move to oslo.config came from the Debian python modules team12:35
zigo_Ah???12:35
zigo_Who from the team?12:35
markmcI just replied12:35
markmcpython-$namespace.$submodule makes sense where the upstream package name is $namespace.$submodule12:36
markmclike zope.interface12:36
zigo_Ah.12:36
markmcin this case, we're using $namespace-$submodule upstream12:36
markmcso debian/ubuntu should be python-$namespace-$submodule12:36
markmci.e. oslo-config and python-oslo-config12:36
markmc*unless*12:36
markmcsomeone persuades me to change the upstream name to oslo.config12:37
markmcand I'm totally open to good arguments for that change12:37
jamespagezigo_, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=70119212:37
uvirtbotDebian bug 701192 in python-defaults "python-defaults: Debian Python Policy clarification of binary package naming for submodules" [Normal,Open]12:37
jamespageapparently discussed on IRC12:37
zigo_If *everyone* decides to change it *now*, I don't mind doing the change.12:38
markmcjamespage, what you really need is a reference that upstream python packages use the $namespace.$submodule format consistently12:38
markmcjamespage, for downstream to not follow the upstream name would be dumb12:38
zigo_Though it has to change quick, because it current takes a lot of time for packages to go in the ftp-masters NEW queue.12:38
jamespagemarkmc, I don't disagree12:38
jamespagesomewhat on the perimeter of this conversation :-)12:39
markmcsure, np12:39
zigo_markmc: Are you working on oslo-config yourself?12:40
zulso yeah as i understand it the binary package name python-oslo-config is against debian python policy12:40
markmczigo_, not sure I understand the question?12:40
zulas jamespage already mentioned the bug report12:40
* markmc sighs12:40
markmcthe bug report is proposing a change/clarification to the debian policy AFAIR12:41
zulright12:41
markmcif the policy becomes "debian should ignore the upstream package names" then that's farcically dumb12:41
markmcpython-zope.interface makes sense12:41
markmcpython-oslo-config makes sense12:41
markmcif we change upstream to oslo.config12:41
markmcthen python-oslo.config makes sense12:41
*** corXi has joined #openstack-dev12:41
zulmarkmc:  i was in total agreement12:43
markmczul, cool12:43
zulmarkmc:  but i was overruled12:44
jamespagezul, markmc: I think we should leave as -is12:44
sgranmarkmc: that bug is about how to handle the name transition to python312:44
sgranmy advice is: don't poke the bear12:44
*** Samos123 has joined #openstack-dev12:44
jamespageotherwise we have stupid stuff in packaging to deal with the version mis-naming which is wasted effort IMHO12:44
zigo_I'm for sticking to oslo-config too.12:45
* markmc clicks "toggle useless messages" in the hope it will make the whole thing go away :)12:45
zigo_Not only you'll have to rename the package, but you will have to add some Replaces, Breaks, Provides: ...12:45
zigo_At worse, if we want, we could add a "Provides: python-oslo.config" in the *current* python-oslo-config debian package.12:46
zigo_I think that's easier than to do a full rename.12:46
*** alexpilotti has joined #openstack-dev12:50
*** alexpilotti has quit IRC12:50
*** alexpilotti_ has joined #openstack-dev12:51
markmczigo_, what's the debian package for PasteDeploy ?12:54
zigo_markmc: python-pastedeploy12:55
markmczigo_, ok, thanks12:55
zigo_I know all the names by heart, though I'm not sure I would be able to tell for all what they are for.12:56
zigo_:P12:56
markmcpoint is, it's not python-paste.deploy12:57
zigo_Right.12:57
zigo_But wrong prior art isn't a proof that we can continue to do something wrong. :P12:58
markmcsure12:58
markmcbug again, this is about getting the upstream name right12:59
markmcnot downstream packaging policy12:59
zigo_I agree.12:59
zykes-hey zigo_ :)12:59
zigo_As a downstream, and a lazy man, I vote for "do not touch it, it's not broken"13:00
zigo_:)13:00
*** markvoelker has joined #openstack-dev13:01
danpbmarkmc: i see plenty of Debian python packages using '-' in their name http://pastebin.com/gk62j8FZ13:04
*** timello has quit IRC13:04
markmcdanpb, yeah, but are the all installing into namespace packages13:04
markmcdanpb, i.e. namespace_packages=['oslo'] in setup.py is the key here13:05
danpbmarkmc: i'd think the django ones probably would be, but haven't check13:05
markmcdanpb, checked django, and it appears not13:05
*** mkollaro has joined #openstack-dev13:05
*** flepied has quit IRC13:09
openstackgerritA change was merged to openstack-dev/devstack: Change the openvz driver compute_driver entry to match all other compute drivers in nova.  https://review.openstack.org/2298513:11
*** xga has quit IRC13:13
*** anniec has joined #openstack-dev13:14
*** anniec_ has joined #openstack-dev13:15
*** xga_ has joined #openstack-dev13:15
*** adjohn has joined #openstack-dev13:17
*** flepied has joined #openstack-dev13:18
*** anniec has quit IRC13:18
*** anniec_ is now known as anniec13:18
*** melwitt has quit IRC13:21
*** iartarisi has joined #openstack-dev13:21
*** adjohn has quit IRC13:21
openstackgerritA change was merged to openstack/tempest: Update live migration test to use new syntax for create_server  https://review.openstack.org/2326013:21
*** yamahata has joined #openstack-dev13:21
openstackgerritA change was merged to openstack/tempest: Fix endpoint usage for glance_http in image client.  https://review.openstack.org/2320513:21
*** eglynn has quit IRC13:28
*** timello has joined #openstack-dev13:28
*** cdub_ has quit IRC13:32
*** anteaya has joined #openstack-dev13:37
*** alunduil has quit IRC13:37
*** eglynn has joined #openstack-dev13:39
*** zoresvit has quit IRC13:40
*** ethan_ has quit IRC13:41
*** navid has quit IRC13:41
*** zoresvit has joined #openstack-dev13:42
*** radez_g0n3 is now known as radez13:46
*** zoresvit has quit IRC13:46
*** adjohn has joined #openstack-dev13:48
*** pcm_ has quit IRC13:49
*** bknudson has joined #openstack-dev13:49
*** bknudson has quit IRC13:49
openstackgerritA change was merged to openstack/ceilometer: Decouple the nova notifier from ceilometer code  https://review.openstack.org/2275913:51
*** adjohn has quit IRC13:52
*** pcm__ has joined #openstack-dev13:59
*** pcm_ has joined #openstack-dev13:59
*** zoresvit has joined #openstack-dev14:01
*** zykes- has quit IRC14:01
*** soody has joined #openstack-dev14:03
*** corXi has quit IRC14:04
*** dprince has joined #openstack-dev14:04
*** digitalsanctum has joined #openstack-dev14:05
*** rkukura has joined #openstack-dev14:05
openstackgerritA change was merged to openstack/tempest: Update defaults for s3 materials paths/names  https://review.openstack.org/2306714:08
*** ijw has joined #openstack-dev14:08
*** rnirmal has joined #openstack-dev14:08
*** zykes- has joined #openstack-dev14:10
*** rnirmal has quit IRC14:11
*** sthaha has joined #openstack-dev14:15
*** nijaba_ is now known as nijaba14:16
*** dolphm has joined #openstack-dev14:16
*** kbrierly has quit IRC14:16
*** jaypipes has quit IRC14:18
*** adjohn has joined #openstack-dev14:18
*** adjohn has quit IRC14:23
*** stevemar has joined #openstack-dev14:24
*** woodspa has joined #openstack-dev14:24
*** russellb is now known as rustlebee14:26
*** anteaya is now known as anteaya-yo14:26
*** bknudson has joined #openstack-dev14:28
*** manas has joined #openstack-dev14:28
*** martine has joined #openstack-dev14:32
*** dripton_ is now known as dripton14:33
*** eharney has joined #openstack-dev14:34
*** READ10 has joined #openstack-dev14:36
*** soody has quit IRC14:37
*** fedgoat has joined #openstack-dev14:40
*** ayoung-zzzz is now known as ayoung14:44
*** koert has joined #openstack-dev14:46
*** alunduil has joined #openstack-dev14:47
*** imsplitbit has joined #openstack-dev14:48
*** zeriouz has joined #openstack-dev14:48
*** alunduil has quit IRC14:48
*** alunduil has joined #openstack-dev14:49
*** adjohn has joined #openstack-dev14:49
*** jaypipes has joined #openstack-dev14:49
*** topol has joined #openstack-dev14:50
*** adjohn has quit IRC14:53
*** terryh has joined #openstack-dev14:53
*** mrunge has quit IRC14:54
*** jbresnah_ has quit IRC14:54
*** jbresnah_ has joined #openstack-dev14:54
*** spzala has joined #openstack-dev14:56
*** aeperezt has joined #openstack-dev14:58
*** mtreinish has joined #openstack-dev14:58
*** dansmith is now known as SteelyDan15:00
*** jaypipes has quit IRC15:00
*** jimfehlig has joined #openstack-dev15:02
*** soody has joined #openstack-dev15:02
*** john5223 has joined #openstack-dev15:03
*** jaypipes has joined #openstack-dev15:03
*** cloudchimp has joined #openstack-dev15:03
*** soody has quit IRC15:04
*** ijw has quit IRC15:04
*** xga_ has quit IRC15:05
ayoungdolphm, do you havea fix that makes all of the non-trusts tests in https://review.openstack.org/#/c/23057/ work?15:10
dolphmayoung: gyee's should, but haven't tested15:11
dolphmayoung: fixing the bad expires_at check btw15:12
ayoungOK,   I'm going to try.   I have trusts working with an older version of your tests.  Can we agree that this is the last set of tests, modulo uncovering a more significant poroblem?15:12
ayoungdolphm, you are doing that now?15:12
dolphmayoung: yes15:13
ayoungdolphm, OK, I just posted an updated trusts patch with some better exception reporting and the fixes that YorikSar reported last night.15:14
dolphmayoung: saw that, thanks15:14
ayoungdolphm, how do you abort a cherry-pick gone bad?15:15
dolphmayoung: depends on where you're at -- did it not apply and wants you to resolve?15:16
ayoungdolphm, I just commited and then reset head.  I'm good, but there has to be a cleaner way15:16
*** rpedde_away is now known as rpedde15:16
*** flepied has quit IRC15:16
*** flepied has joined #openstack-dev15:17
dolphmayoung: "git checkout -- . && git reset --soft HEAD" or something?15:17
ayoungshould be git cherry-pick --abort or something like that15:17
sgrangit reset --heard HEAD15:18
sgrangit reset --hard HEAD15:18
sgraneven15:18
sgran"please make my working tree like HEAD, no matter what"15:18
dolphmayoung: git cherry-pick --abort "Cancel the operation and return to the pre-sequence state."15:19
dolphmayoung: git cherry-pick --quit "Forget about the current operation in progress. Can be used to clear the sequencer state after a failed cherry-pick or revert."15:19
*** annegentle has joined #openstack-dev15:20
ayoungI thought I looked for that.  Oh well..I need to RTFM15:20
*** adjohn has joined #openstack-dev15:20
dolphmthere's always 10 ways to get from point A to point B with git15:20
ayoungdolphm, when you say "Guang's Fix" which one do you mean?15:22
*** gongysh has quit IRC15:22
ayoungThe one in our tree or the one in olso?15:22
*** CaptTofu has joined #openstack-dev15:23
*** dolphm has quit IRC15:23
*** xga has joined #openstack-dev15:23
*** adjohn has quit IRC15:24
*** garyTh has joined #openstack-dev15:25
Davieyvishy: Hey, are you around?15:25
Davieymarkmc: Hey.. do you have a moment?15:26
markmcsure?15:26
*** dolphm has joined #openstack-dev15:26
Davieymarkmc: I was looking at bug 1078808, and wondered your views on re-considering it for folsom potential.15:26
uvirtbotLaunchpad bug 1078808 in nova "Multi host DHCP networking and local DNS resolving" [High,Fix released] https://launchpad.net/bugs/107880815:26
dolphmayoung: gyee's fix in keystone should pass tests, but the one in oslo needs to be merged and badckported or we need to work with what we have in oslo15:27
Davieymarkmc: It doesn't seem to be a feature IMO, but is a little more intrusive than i am immediately comfortable with.15:27
ayoungdolphm, gyee's fix does not make the test pass.15:27
ayoungdolphm, I'll paste the first one15:27
*** blamar has joined #openstack-dev15:27
ayoungI'm guessin there is a path forward from there15:27
ayoungdolphm,  http://fpaste.org/ZwdG/15:28
ayoungthat is applying:  guangs fix, then trusts, then your latest tests/15:28
markmcDaviey, well, vishy's the one saying it's a feature, so I'm curious first what he thinks15:28
dolphmayoung: hmm... maybe he also renamed expires -> expires_at?15:28
dolphmayoung: there's another fix out there for that too15:29
markmcDaviey, new config options and rpcapi changes point to it being more intrusive than we'd like on the stable branch15:29
dolphmayoung: by malini15:29
markmcDaviey, other data which would be useful is why you think it's ultra important15:29
markmcDaviey, maybe summarize in the bug?15:29
Davieymarkmc: right.. but with a no-change default behaviour, and a no-change required for config.. it seemed a little safer.15:30
dolphmayoung: updated my tests -- try again15:30
Davieymarkmc: Instances on seperate compute nodes can't resolve each others hostnames using multihost15:30
markmcDaviey, add some verbiage to the bug, I just targeted it to the series15:31
Davieywith the default behaviour to not enable it.. i hoped we could revist it (nautrual binding on vishy's view)15:31
markmcDaviey, rpcapi changes are troublesome because we'd need to document in release notes that people must update their network services first15:32
Davieymarkmc: do people need to make changes, if they don't wish to make use of this behaviour ?15:32
Davieyie, it seems to be 'opt in' right?15:33
ayoungdolphm, is that with guang's patch or without?15:33
* ayoung realizes I can just checkout as opposed to cherry picking15:35
*** markmcclain has joined #openstack-dev15:36
*** koolhead17 has quit IRC15:37
*** burris has joined #openstack-dev15:38
ayoungdolphm, OK,  got it to work.  Can we take guang's patch as an interim, and do a bug fix after wards?15:39
*** sthaha has quit IRC15:39
*** alop has joined #openstack-dev15:39
dolphmayoung: ask markmc, i'd consider it bad form to step on oslo's toes https://review.openstack.org/#/c/23218/15:40
*** mrodden1 has quit IRC15:42
*** dontalton has joined #openstack-dev15:42
ayoungdolphm, I don't think it would be stepping on their toes.  I think this is the general pattern all along:  a specific project makes a fix, and then proposes it to common.  If the fix accepted to common is different than the one in the project, the project adapts when it merges down from Oslo.  It is a blocker fo me.15:44
*** lglenden has joined #openstack-dev15:44
*** blamar has quit IRC15:44
*** dstufft has quit IRC15:44
*** jamespage has quit IRC15:44
*** openstackjenkins has quit IRC15:44
*** dmarkey has quit IRC15:44
*** hemnafk has quit IRC15:44
*** annegentle has quit IRC15:44
*** jaypipes has quit IRC15:44
*** sulrich has quit IRC15:44
*** adam_g has quit IRC15:44
ayoungmeanwhile, we pursue getting the right fix into oslo.15:45
*** annegentle has joined #openstack-dev15:45
*** jaypipes has joined #openstack-dev15:45
*** sulrich has joined #openstack-dev15:45
*** adam_g has joined #openstack-dev15:45
dolphmayoung: the keystone.openstack namespace is owned by oslo, not us; it's not a blocker as we can work around it... i'm happy to propose an alternate patch15:45
*** blamar has joined #openstack-dev15:45
*** dstufft has joined #openstack-dev15:45
*** jamespage has joined #openstack-dev15:45
*** openstackjenkins has joined #openstack-dev15:45
*** dmarkey has joined #openstack-dev15:45
*** hemnafk has joined #openstack-dev15:45
*** gael has joined #openstack-dev15:45
*** DuncanT has quit IRC15:46
ayoungdolphm, is it?  I thought we intentionally named it keystone.openstack to give us an insulation layer?15:46
dolphmayoung: insulation?15:46
ayoungdolphm, insulates us from oslo changes and oslo from us, until we chose to integrate a fix15:47
*** zoresvit has quit IRC15:47
ayoungkeystone.,openstack.common instead of calling it openstack.common.15:47
ayoungwe can put a comment into gyee's patch that states it will be overwritten if merged down from oslo.15:48
dolphmayoung: that's just an incubation hack until we get oslo as a real dependency15:48
*** jmp has joined #openstack-dev15:48
*** Gordonz has joined #openstack-dev15:48
sstentcould someone take a quick look at this bug? https://bugs.launchpad.net/nova/+bug/113797715:49
uvirtbotLaunchpad bug 1137977 in nova ""nova-manage db archive_deleted_rows" returns error re foreign key constraints" [Undecided,New]15:49
*** zoresvit has joined #openstack-dev15:49
*** jmp is now known as Guest8969715:49
*** Guest89697 is now known as _jmp_15:49
ayoungdolphm, ...so, do we really need microseconf precision, or is it just a case of allowing people to post times in microsecond format.15:49
*** Gordonz has quit IRC15:49
ayoungSeems anything more granular than seconds is excessive15:49
*** Gordonz has joined #openstack-dev15:50
*** rnirmal has joined #openstack-dev15:50
ayoungor is this a workaround for JSON dumps?15:51
*** annegentle has left #openstack-dev15:51
dolphmayoung: you added microsecond precision as an undocumented change into the v2 token, so you tell me? all we're doing is revising v3 timestamps to match15:52
*** edmund has joined #openstack-dev15:52
ayoungdolphm, ah....right...the whole, quick token reissue sillyness.15:53
*** rkukura has quit IRC15:53
ayoungdolphm, I suspect I was just working around a super aggressive unit test.  Hmmm.15:53
*** rkukura has joined #openstack-dev15:54
*** danwent has joined #openstack-dev15:56
*** fire has quit IRC15:58
*** gael has quit IRC15:59
openstackgerritA change was merged to openstack/oslo-incubator: update.py: DRY up using functools.partial()  https://review.openstack.org/2326316:00
ayoungdolphm, OK, wait.16:02
ayoungI think that bug is spurious.  They are supposed to have different formats.16:02
*** dolphm has quit IRC16:03
*** dolphm has joined #openstack-dev16:03
*** aeperezt has quit IRC16:03
dolphmayoung: which bug?16:04
ayounghttps://bugs.launchpad.net/keystone/+bug/113480216:05
uvirtbotLaunchpad bug 1134802 in keystone "expires_at and issues_at have inconsistent time stamp format" [Undecided,In progress]16:05
dolphmayoung: they all have the same format in the spec16:05
*** AnilV4 has quit IRC16:05
ayoungdolphm, understood.  It didn't occur to me the difference until just now.16:06
dolphmayoung: at gyee's suggestion, i also proposed a consistent change to that format in https://review.openstack.org/#/c/23170/ and am testing for it in my patch16:06
*** tomoe_ has quit IRC16:07
*** bswartz has quit IRC16:07
*** aeperezt has joined #openstack-dev16:07
ayoungI like the XKCD reference, especailly the alt-text16:07
*** anniec has quit IRC16:07
*** tomoe_ has joined #openstack-dev16:07
*** manas has quit IRC16:07
*** markmcclain1 has joined #openstack-dev16:08
*** Akendo has quit IRC16:08
*** koert has quit IRC16:08
*** markmcclain has quit IRC16:08
dolphmayoung: :)16:08
*** aloga has quit IRC16:08
ayoungdolphm, so, the ISO standard allows you to specify a subset of the number of fields, right?  For expires_at, we should probably accept a granularity of minutes.16:08
ayoungNo reason to make someone specify down to the second/millifemtopico16:09
ayoungnot sure if there is an elegant way to parse. I like your suggestion about defaulting to the expected format16:10
*** mrodden has joined #openstack-dev16:10
*** hugokuo has left #openstack-dev16:11
dolphmayoung: there's no reason to expect granularity at the api level -- if someone only wants to specify minutes, their datetime library will hopefully let them do that and generate a timestamp in the format that we expect16:12
dolphmayoung: i wouldn't want to disallow users from creating trusts that are valid for just a few seconds without reason16:13
ayoungdolphm, I think that if we say ISO8601, we should accept what that standard states.  Let me do a little research, I think someone has solved this problem for us16:13
*** maoy has joined #openstack-dev16:13
*** lglenden has quit IRC16:13
ayoungdolphm, agreed.  I am stating that we accept any valid ISO8601 sting, I just am confirming that means with any reasonable subset of the fields.  But there is this16:13
dolphmayoung: it's a double edged issue -- we need to both generate timestamps AND parse them16:13
ayounghttps://pypi.python.org/pypi/python-dateutil16:14
ayoungdolphm, yes, but we can generate in granularity appropriate to the field.  Only issued_at needs sub second16:14
ayounghttp://labix.org/python-dateutil16:14
ayoungnot suggesting we use it, just researching16:15
ayounghttps://pypi.python.org/pypi/iso8601/16:17
*** sacharya has joined #openstack-dev16:18
*** blamar has quit IRC16:18
*** blamar has joined #openstack-dev16:19
*** Mandell has joined #openstack-dev16:19
*** Ryan_Lane has joined #openstack-dev16:19
*** dolphm has quit IRC16:20
*** markmcclain1 has quit IRC16:20
*** markmcclain has joined #openstack-dev16:21
*** danwent has quit IRC16:22
*** cp16net|away is now known as cp16net16:24
*** dosaboy has quit IRC16:25
*** reed has joined #openstack-dev16:26
*** dosaboy has joined #openstack-dev16:27
*** reidrac has quit IRC16:27
*** gargya has quit IRC16:27
*** koolhead17 has joined #openstack-dev16:28
*** doude has joined #openstack-dev16:30
*** ilblackdragon has quit IRC16:30
*** danwent has joined #openstack-dev16:31
*** danwent has quit IRC16:34
*** otherwiseguy has joined #openstack-dev16:35
*** networkstatic has joined #openstack-dev16:37
*** trapni has quit IRC16:37
*** dontalton has quit IRC16:37
*** aagaard has quit IRC16:37
*** cdub_ has joined #openstack-dev16:40
*** jgallard has quit IRC16:41
*** dolphm has joined #openstack-dev16:42
zykes-yo, any of you rackers here that sit close to Kurt Griffiths?16:46
*** derekh has quit IRC16:47
*** pabelanger has joined #openstack-dev16:47
*** manas has joined #openstack-dev16:49
*** cdub_ has quit IRC16:50
*** Ryan_Lane has quit IRC16:51
*** arbrandes has quit IRC16:51
*** gugl has joined #openstack-dev16:52
*** jcmartin has joined #openstack-dev16:52
*** cp16net is now known as cp16net|away16:53
*** kbrierly has joined #openstack-dev16:53
*** yidclare has quit IRC16:55
*** anniec has joined #openstack-dev16:57
*** romcheg has left #openstack-dev16:57
*** mindpixel has quit IRC16:58
*** Ryan_Lane has joined #openstack-dev16:59
*** Kharec has joined #openstack-dev17:00
*** john5223 has quit IRC17:00
*** giulivo has quit IRC17:01
*** ilblackdragon has joined #openstack-dev17:01
*** gasbakid has joined #openstack-dev17:02
*** adjohn has joined #openstack-dev17:02
*** mlavalle has joined #openstack-dev17:03
*** ryant_ has joined #openstack-dev17:05
*** mrodden1 has joined #openstack-dev17:06
ryant_Anyone know enough about nova-network to understand why I'm not seeing SNAT rules for floating IP's get configured right?17:06
*** mrodden has quit IRC17:08
*** yamahata has quit IRC17:08
*** hemnafk is now known as hemna17:08
*** romcheg has joined #openstack-dev17:08
*** romcheg has left #openstack-dev17:09
*** blamar has quit IRC17:09
*** gasbakid has quit IRC17:09
*** dsanders has joined #openstack-dev17:11
*** CaptTofu_ has joined #openstack-dev17:11
*** CaptTofu has quit IRC17:11
*** pasquier-s has quit IRC17:12
*** giulivo has joined #openstack-dev17:12
*** dontalton has joined #openstack-dev17:13
*** Ritz-Mobile has joined #openstack-dev17:13
*** Ryan_Lane has quit IRC17:19
*** john5223 has joined #openstack-dev17:22
*** hugokuo has joined #openstack-dev17:22
*** rafaduran has left #openstack-dev17:24
*** manas has quit IRC17:25
*** DuncanT has joined #openstack-dev17:26
*** DuncanT has quit IRC17:26
*** DuncanT has joined #openstack-dev17:27
*** donaldh has joined #openstack-dev17:27
*** anniec has quit IRC17:27
*** john5223 has quit IRC17:28
*** ndipanov has quit IRC17:30
*** ndipanov has joined #openstack-dev17:30
*** zeriouz_ has joined #openstack-dev17:32
*** devoid has joined #openstack-dev17:33
*** zoresvit has quit IRC17:33
*** zeriouz has quit IRC17:33
bcwaldoneglynn: let's get https://review.openstack.org/#/c/23008/ in today to fix stable/folsom testing17:34
eglynnbcwaldon: looking ...17:35
*** Mandell has quit IRC17:35
ayoungdolphm, should I be storing datetime with offset or without?17:37
dolphmayoung: you mean either naive or +0?17:38
ayoungyes17:38
dolphmayoung: what does the token driver do?17:38
ayoungI'm kindof assuming naive since we have UTC now, but no corresponding non naive now17:38
*** boris-42 has joined #openstack-dev17:39
ayoungdolphm, I think naive.  It does utcnow + delta17:39
*** cdub_ has joined #openstack-dev17:39
ayounglet me confirm17:39
ayoungtoken.default_expire_time()17:39
ayoungexpire_delta = datetime.timedelta(seconds=CONF.token.expiration)17:39
ayoung    return timeutils.utcnow() + expire_delta17:39
*** YorikSar has quit IRC17:40
*** PaulM has joined #openstack-dev17:40
*** zing has quit IRC17:40
*** john5223 has joined #openstack-dev17:41
eglynnbcwaldon: do you have a second stable-maint reviewer lined up for 23008? (I've +2'd, could +1 also at a stretch if v. urgent ...)17:45
*** yuanz has quit IRC17:45
*** gyee has joined #openstack-dev17:45
*** yuanz has joined #openstack-dev17:45
*** mkollaro has quit IRC17:45
*** yidclare has joined #openstack-dev17:47
bcwaldoneglynn: no idea who else is on the team17:47
bcwaldoncan you ping someone you know has these powers?17:47
eglynnyep, I'll see I can scare another reviewer up ...17:47
bcwaldonthank you, sir17:48
*** pabelanger is now known as nubbie17:49
*** zoresvit has joined #openstack-dev17:50
*** imsplitbit has quit IRC17:50
*** darraghb has quit IRC17:50
*** johnthetubaguy has quit IRC17:50
*** _jmp_ has quit IRC17:51
*** tomoe_ has quit IRC17:52
*** olaph has quit IRC17:52
sstenthey guys- is there any way to determine the host a vm is on from inside the guest vm? I checked metadata but couldnt see anything17:52
eglynnbcwaldon: done17:52
*** olaph has joined #openstack-dev17:53
*** jcmartin has quit IRC17:55
*** markwash has joined #openstack-dev17:56
*** jcmartin has joined #openstack-dev17:56
*** iartarisi has quit IRC17:57
*** tomoe_ has joined #openstack-dev17:57
*** Kharec has quit IRC17:58
*** vkmc has quit IRC18:00
*** mkollaro has joined #openstack-dev18:00
*** flepied has quit IRC18:00
*** dosaboy has quit IRC18:01
*** martine has quit IRC18:01
*** tomoe_ has quit IRC18:02
*** vkmc has joined #openstack-dev18:02
*** torandu has quit IRC18:03
*** anniec has joined #openstack-dev18:04
*** donaldh has quit IRC18:07
*** fedgoat has quit IRC18:08
openstackgerritA change was merged to openstack/python-openstackclient: Added compute flavor support.  https://review.openstack.org/2222618:08
*** markmc has quit IRC18:08
*** zoresvit has quit IRC18:09
zykes-anyone here at raxx that work close to kurt griffiths ?18:09
zykes-westmaas: maybe ? :O18:09
zykes-or dolphm18:09
*** Ritz has quit IRC18:10
*** ritzcarltn has joined #openstack-dev18:10
westmaaszykes-: I talk to them some18:10
westmaaswhats up18:10
*** alexpilotti_ has quit IRC18:11
*** yidclare has quit IRC18:12
*** xga has quit IRC18:13
*** markmcclain has quit IRC18:14
*** networkstatic has quit IRC18:14
*** yidclare has joined #openstack-dev18:15
*** romcheg has joined #openstack-dev18:15
*** esp1 has joined #openstack-dev18:15
*** esp1 has quit IRC18:18
*** esp1 has joined #openstack-dev18:20
*** lloydde has joined #openstack-dev18:21
zykes-westmaas: think you could get him on irc?18:22
*** romcheg has quit IRC18:23
*** nunosantos has joined #openstack-dev18:23
*** PaulM has quit IRC18:23
westmaaszykes-: just asked him, but he looks away18:23
westmaasbut I let him know you were looking for him18:24
*** tomoe_ has joined #openstack-dev18:24
zykes-:P18:24
zykes-westmaas: what's the diff on the peeps working on the "rackspace" vs "racker" vs "rackspace-titan" repos ?18:24
westmaasracker is the more control panel and monitoring groups, I think most of their repos are private - could be wrong though18:25
*** kagan has joined #openstack-dev18:25
westmaasrackspace are the official-ish rackspace projects18:25
zykes-westmaas: then why are they "open" ? hah ;p18:26
vishydolphm, ayoung: see my email regarding caching in keystoneclient18:26
westmaasrackspace-titan is just one that a sub team is doing that does some projects here so that it's done in the open, but we just haven't gotten a lot of feedback yet on whether its desired by the community18:26
vishymarkmc: ^^18:26
zykes-westmaas: you mean the Qonos stuff ?18:27
zykes-it looks cool18:27
westmaaszykes-: could be the opened it up18:27
ayoungvishy, I'm for #318:27
*** torandu has joined #openstack-dev18:27
westmaaszykes-: yeah exactly18:27
zykes-westmaas: yeah that seems cool18:27
zykes-others ? ;)18:27
westmaasiccha: nikhil: esheffield: ameade: ^^18:27
westmaasbrianr-gone: ^^18:28
*** dsanders has quit IRC18:28
westmaasnot that team atm, most of their work is just done in openstack trunk18:28
ayoungvishy, I think that is the right approach, at least for Keystone.  We are trying to sync up a time issue with oslo right now as well.18:28
*** mmagr has quit IRC18:28
zykes-zykes-: you mean the titan guys ?18:29
*** dsanders has joined #openstack-dev18:30
westmaaszykes-: yeah those are the titan guys18:30
*** cdub_ has quit IRC18:30
*** danpb has quit IRC18:30
westmaas(and girls)18:30
*** doude has left #openstack-dev18:30
*** jpich has left #openstack-dev18:31
*** zaitcev has joined #openstack-dev18:31
tiamarhi! I'm developing an extension for keystone. When I add it's filter into  the pipeline in keystone.conf, the keystone service do not start. Is there a log I can look to see what is going on?18:32
vishyayoung: thanks, so it just means getting it approved by oslo core then :)18:33
ayoungyep18:33
icchazykes-: yeah our repo on qonos is public https://github.com/rackspace-titan/qonos if you ever wanna check it out18:33
zykes-westmaas: you do trunk work as well or ?18:33
*** arbrandes has joined #openstack-dev18:33
*** jog0 has joined #openstack-dev18:34
*** jog0 is now known as flashgordon18:34
jk0zykes-: you writing a book?18:36
*** romcheg has joined #openstack-dev18:36
*** andrewbogott_afk is now known as andrewbogott18:36
*** danwent has joined #openstack-dev18:37
zykes-jk0: no ?18:37
*** PaulM has joined #openstack-dev18:38
zykes-jk0: just curious :)18:38
westmaaszykes-: me personally? once a year to pretend I still write code :)18:39
westmaasthe teams definitely work on trunk though18:39
zykes-westmaas: mostly internals stuff or ?18:39
westmaasnah, I just manage teams18:39
zykes-ah ok ;p18:40
zykes-jk0: why do you ask ?18:41
*** tomoe_ has quit IRC18:41
*** tomoe_ has joined #openstack-dev18:42
zykes-westmaas: the reason for me wanting to talk to kgriffs is Falcon18:43
westmaascool, yeah he'll be happy to chat I'm sure18:45
*** tomoe_ has quit IRC18:46
*** romcheg has quit IRC18:47
*** danwent has quit IRC18:50
ayoungdolphm, can you please fix the uuid in the trustee_404 test?18:50
*** Ryan_Lane has joined #openstack-dev18:50
dolphmayoung: haha, will do -- sorry18:51
ayoungNP...I'm pretty close to getting everything passing with Guang's change in place.18:52
ayoungdolphm, couple other small changes...I'll send to you shortyl18:55
dolphmayoung: cool18:57
*** Kharec has joined #openstack-dev18:57
dolphmayoung: updated that18:57
ayoungdolphm,         self.assertEqual(self.user['id'], token['user']['id'])18:57
ayoung  needsto be impoersonation aware18:57
ayoungline 35118:57
*** eglynn has quit IRC18:58
*** terry7 has joined #openstack-dev19:00
dolphmayoung: fixed19:02
*** olaph_ has joined #openstack-dev19:03
*** nati_ueno has joined #openstack-dev19:03
*** topol_ has joined #openstack-dev19:04
*** topol has quit IRC19:05
*** topol_ is now known as topol19:05
*** olaph has quit IRC19:05
*** imsplitbit has joined #openstack-dev19:06
*** romcheg has joined #openstack-dev19:07
*** zeriouz_ has quit IRC19:08
*** aeperezt_ has joined #openstack-dev19:10
*** aeperezt_ has quit IRC19:10
*** bswartz has joined #openstack-dev19:14
*** tmishler has joined #openstack-dev19:17
*** cp16net|away is now known as cp16net19:17
gyeedolphm, adam, if we have micro second precision for expires_at, we won't need issued_at right?19:18
*** comstud is now known as bearhands19:19
gyeeonly reason for issued_at is to ensure uniqueness for the PKI tokens19:19
*** melwitt has joined #openstack-dev19:20
*** nati_ueno has quit IRC19:21
*** sandeepr has joined #openstack-dev19:22
*** zodiak has quit IRC19:22
sandeepron grizzly, keystone user-list resulted in Authorization Failed: Unable to communicate with identity service19:23
sandeeprafter adding service token and service endpoint, it works with a message WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).19:23
sandeepri guess its ok?19:23
dolphmgyee: we do, i guess -- token expiration is maintained on token-exchange so there'd be no way to tell the difference19:24
*** anniec has quit IRC19:25
*** anniec_ has joined #openstack-dev19:25
*** epim has quit IRC19:25
gyeedolphm, but the expires_at is the actual expiration right19:26
dolphmgyee: yes19:27
*** PaulM has left #openstack-dev19:27
dolphmissued_at should be revised for every new token19:27
dolphmgyee: expires_at should be maintained19:28
*** cloudchimp has quit IRC19:28
*** koolhead17 has quit IRC19:29
gyeedolphm, correct, but I don't see any effectiveness of issued_at19:30
gyeeI mean we don't use it for token validation19:30
*** zbitter has joined #openstack-dev19:31
*** zaneb has quit IRC19:34
*** esp1 has quit IRC19:34
*** psedlak has quit IRC19:35
*** vishy is now known as vishious19:35
*** spzala has quit IRC19:35
*** esp1 has joined #openstack-dev19:36
*** aeperezt_ has joined #openstack-dev19:38
*** ritzcarltn has quit IRC19:38
*** afazekas has quit IRC19:39
*** cp16net is now known as cp16net|away19:39
*** sandywalsh has quit IRC19:41
*** kagan has quit IRC19:42
openstackgerritA change was merged to openstack/tempest: skip ec2 test until it can be debugged  https://review.openstack.org/2330019:42
*** xxiao has quit IRC19:43
imsplitbitI'm doing some refactoring of a custom openvz driver I have for nova and it uses instance_metadata to store some items.  That seems to be blocked off from access through the db and conductor.  anyone know how to get and set stuff in there?19:44
*** morganfainberg has joined #openstack-dev19:44
*** esp1 has quit IRC19:45
dolphmgyee: you should ask ayoung, but my understanding is that it might as well be a UUID to differentiate between two otherwise identical tokens such that their PKI values will be different19:45
*** xxiao has joined #openstack-dev19:46
ayoungdolphm, your last one is not quite right:  need to check for self.trustee, not self.user  http://fpaste.org/LgKh/19:46
ayoungdolphm, that is correct19:46
ayounggyee, if you request tokens in a tight loop, as some of the tests do, you get into a situation where you've just generated two identical tokens,  which causes the DB to barf.19:47
*** crandquist has joined #openstack-dev19:49
gyeeayoung, but if we change the precision to micro seconds for expires_at, in theory, there's not a chance for collision right?19:49
*** jcmartin has quit IRC19:50
dolphmayoung: more importantly, two simultaneous requests issued to two different keystone servers will result in a race condition for which tries to persist first19:50
ayounggyee, in theory19:50
dolphmgyee: ^ there will still be collisions19:50
*** dev_sa has quit IRC19:51
gyeeon multi instance situation, we would have the same problem even with issued_at19:51
*** novas0x2a|laptop has joined #openstack-dev19:52
ayoungdolphm, the chance of that happening at exactly the same time at the sub second level is so small that I am willing to ignore it.  If we rate limit token requests , the problem goes away, to.19:52
ayounggyee, easy to test out your theory.  Do the micro precision on expires, drop the issued_at field (set to blank if that is easier) and then request tokens in a tight loop using devstack19:53
dolphmayoung: rate limiting doesn't fix the issue either19:53
gyeeayoung, I did19:54
ayoungdolphm, it should19:54
*** danwent has joined #openstack-dev19:54
ayounggyee, you rock19:54
gyeethat's why I was questioning whether issued_at is still needed19:54
ayoungdolphm, it should.  THe only case where we should be issuing out tokens that fast is load testing.  Any script that requests multiple identical tokens that close together has a problem.19:55
ayoungTHis was really just an artifact of how fast the tests run19:55
*** aeperezt_ has quit IRC19:55
ayoungSomeone asking for identical tokens on multiple machines at the same time is up to no good,19:56
ayoungand should be denied a token.19:56
*** vkmc has quit IRC19:56
gyeeonly way to ensuring uniqueness is like issuing an x.509 cert, just have a serial number19:56
*** sandywalsh has joined #openstack-dev19:56
*** ndipanov has quit IRC19:57
ayounggyee, I think we can drop "issued_at"19:57
dolphmgyee: +19:57
dolphm+19:57
gyeew00t!19:57
ayoungdolphm, I typoed that last diff. There is no trustor_user.20:00
ayounghttp://fpaste.org/dexA/20:00
ayoungBut I think I can get it a little cleaner20:00
*** aeperezt_ has joined #openstack-dev20:01
*** aeperezt_ has quit IRC20:02
*** Ryan_Lane has quit IRC20:02
dolphmayoung: why did you remove " or not token['trust']['impersonation']" ?20:04
ayoungdolphm, I'll show you how it looks now....20:04
ayoungdolphm, I had moved that to a trust specific function, but it is back there now....1 sec20:05
*** woodspa has quit IRC20:05
ayoungugh, browserlock20:06
*** donaldh has joined #openstack-dev20:06
*** jbr_ has quit IRC20:06
*** topol has quit IRC20:07
*** topol has joined #openstack-dev20:07
*** anteaya-yo is now known as anteaya20:07
*** martine has joined #openstack-dev20:08
*** vkmc has joined #openstack-dev20:08
*** devoid has quit IRC20:09
*** gyee has quit IRC20:10
*** gyee has joined #openstack-dev20:11
*** cp16net|away is now known as cp16net20:12
*** boris-42 has quit IRC20:14
*** jcmartin has joined #openstack-dev20:14
*** jcmartin has quit IRC20:15
*** gyee has quit IRC20:16
*** yolanda has quit IRC20:20
*** kaushikc has joined #openstack-dev20:21
ayoungdolphm, sorry lost the diff, as I squashed the commit, but It looks like this in my tree now http://fpaste.org/YPUA/20:22
*** kaushikc has left #openstack-dev20:22
ayoungdolphm, is it OK if I post both a new version of the trusts patch and a version of the tests with the above change?   They are both rebased on top of gyee's time patch20:23
*** eglynn has joined #openstack-dev20:23
sstentummm  wierd --- do we need to create aggregates for each avail zone now? and add hosts to them manaully?20:26
sstentchanging a node_availability_zone doesn't seem to change it anymore20:27
*** john5223 has quit IRC20:28
dolphmayoung: is it based on patchset 24?20:30
ayoungdolphm, I think so..it might be 2320:30
ayounglooking now20:30
dolphmayoung: go ahead -- but i'd like to know what patchset you're on before you overwrite me20:30
ayoungdolphm, I'll sync up20:30
dolphmayoung: don't bother -- i have more changes not in review20:31
*** networkstatic has joined #openstack-dev20:31
*** fire has joined #openstack-dev20:34
ayoungdolphm, OK,  I've rebased on top of 2420:35
ayoungletting the tests run, and then I will repost.20:35
openstackgerritA change was merged to openstack/python-quantumclient: Add pagination support for client  https://review.openstack.org/1992620:38
*** dolphm has quit IRC20:39
*** dolphm has joined #openstack-dev20:39
ayoungdolphm, OK,  I posted...lets see if it makes it through the gerrit gauntlet.  Mine is based on gyee's patch, but I think we can move ahead assuming that we'll keep that review in sync with the decision from Oslo20:39
*** edmund has quit IRC20:40
*** edmund has joined #openstack-dev20:40
*** john5223 has joined #openstack-dev20:40
*** cdub_ has joined #openstack-dev20:40
dolphmayoung: looking20:44
*** devoid has joined #openstack-dev20:46
*** soody has joined #openstack-dev20:48
ayoungdolphm, so aside from the rebase, the only difference between yours and mine should be the changes in test_v3.py.  The rest come from Guang's patch20:50
ayoungor they come from the update to the trusts patch itself.  Much cleanup of datatime issues there20:51
*** alunduil has quit IRC20:51
dolphmayoung: that explains why there's an entire class of unused assertions...20:51
*** markmcclain has joined #openstack-dev20:53
*** jbresnah_ has quit IRC21:00
*** jbresnah_ has joined #openstack-dev21:00
*** devoid has quit IRC21:01
*** enikanorov has quit IRC21:02
*** soody has quit IRC21:02
*** rnirmal has quit IRC21:03
*** fire has quit IRC21:04
*** Ryan_Lane has joined #openstack-dev21:05
*** enikanorov has joined #openstack-dev21:06
*** romcheg has left #openstack-dev21:06
*** soody has joined #openstack-dev21:07
*** soody has quit IRC21:09
*** alunduil has joined #openstack-dev21:10
*** esp1 has joined #openstack-dev21:12
*** epim has joined #openstack-dev21:12
*** soody has joined #openstack-dev21:13
dolphmayoung: patchset 26 is just a refactor -- all test_v3_* stuff works for me21:15
*** jimfehlig has quit IRC21:15
anteayasandywalsh, I just created a channel for the Canadian OpenStack User Group -> #canstack, all welcome21:15
*** jimfehlig has joined #openstack-dev21:15
ayoungdolphm, sounds good.  I'll take a look21:16
dolphmayoung: i just made it so that you could pass in a user from the test to compare the contents of the token against, rather than the assertion making any assumptions or having to understand trusts21:16
ayoungdolphm, what happend to all of the AuthTest stuff?21:17
ayounghttps://review.openstack.org/#/c/23057/25..26/tests/test_v3_auth.py21:17
dolphmayoung: i haven't used that class in like 20 patches21:17
dolphmayoung: it's all in test_v321:18
dolphmayoung: and has been21:18
ayoungCool21:18
ayoungI take it merging with GUang's picked it up by mistake?21:18
dolphmayoung: i was doing something really similar to gyee's test, so i merged our approaches21:18
dolphmayoung: no worries21:18
ayoungOK...test look good.21:19
ayoungdolphm, So, where are we at?  If Guang's change goes in, the other two patches should be ok to merge as well.  I can understand if you want to give the trusts patch another look.21:22
openstackgerritA change was merged to openstack/oslo-incubator: Redis-based matchmaker  https://review.openstack.org/2043421:22
*** esp1 has left #openstack-dev21:22
ayoungDo we owe the Oslo guys anything in order to move the time thing along?  Is that underway?21:22
openstackgerritA change was merged to openstack/swift: Fixed formpost QUERY_STRING bugs.  https://review.openstack.org/2234021:27
*** dprince has quit IRC21:28
*** soody has quit IRC21:34
*** radez is now known as radez_g0n321:34
*** nati_ueno has joined #openstack-dev21:35
*** esp1 has joined #openstack-dev21:36
*** Ryan_Lane has quit IRC21:38
*** arbrandes has quit IRC21:41
*** eglynn has quit IRC21:42
openstackgerritA change was merged to openstack/oslo-incubator: Add simple in-memory cache from nova.  https://review.openstack.org/2330621:43
*** Ryan_Lane has joined #openstack-dev21:43
*** soody has joined #openstack-dev21:47
*** pcm_ has quit IRC21:52
*** cp16net is now known as cp16net|away21:55
*** sacharya has quit IRC21:56
*** dolphm has quit IRC22:00
*** bryansd has left #openstack-dev22:01
*** eharney has quit IRC22:01
*** john5223 has quit IRC22:01
*** jsindy has joined #openstack-dev22:03
*** eglynn has joined #openstack-dev22:04
*** jsindy has quit IRC22:10
*** rnirmal has joined #openstack-dev22:10
*** terryh has quit IRC22:12
*** martine has quit IRC22:13
*** mkollaro has quit IRC22:13
*** danwent has quit IRC22:14
openstackgerritA change was merged to openstack/nova: Add os-volumes extension to api samples  https://review.openstack.org/2222222:14
openstackgerritA change was merged to openstack/nova: don't stack trace if long ints are passed to db  https://review.openstack.org/2319922:14
*** john5223 has joined #openstack-dev22:14
*** topol has quit IRC22:15
*** soody has quit IRC22:19
*** zing has joined #openstack-dev22:20
*** mtreinish has quit IRC22:23
*** aurous has joined #openstack-dev22:26
*** tomoe_ has joined #openstack-dev22:30
*** danwent has joined #openstack-dev22:31
*** aurous has quit IRC22:31
*** Gordonz has quit IRC22:33
*** epim has quit IRC22:35
*** danwent has quit IRC22:37
*** jsindy has joined #openstack-dev22:40
*** stevemar has quit IRC22:40
*** tomoe_ has quit IRC22:42
*** tomoe_ has joined #openstack-dev22:43
*** Brad_K has joined #openstack-dev22:43
*** jsindy has quit IRC22:44
*** jsindy has joined #openstack-dev22:45
*** Ritz-Mobile has quit IRC22:45
*** rnirmal has quit IRC22:47
*** metral has quit IRC22:47
*** tomoe_ has quit IRC22:47
*** digitalsanctum has quit IRC22:49
*** ryant_ has quit IRC22:49
*** zing has quit IRC22:54
*** imsplitbit has quit IRC22:54
*** edmund1 has joined #openstack-dev22:55
*** edmund has quit IRC22:58
*** gasbakid has joined #openstack-dev23:00
openstackgerritA change was merged to openstack/python-novaclient: Added limit to image-list in a preparatory step toward addressing bug 1001345.  https://review.openstack.org/2212923:01
uvirtbotLaunchpad bug 1001345 in python-novaclient "novaclient support for offset" [Low,In progress] https://launchpad.net/bugs/100134523:01
*** terryh has joined #openstack-dev23:02
openstackgerritA change was merged to openstack-dev/devstack: add quantum_available flag to tempest  https://review.openstack.org/2326723:02
openstackgerritA change was merged to openstack/quantum: mock quantum.agent.common.config.setup_logging  https://review.openstack.org/2325023:02
*** terryh has quit IRC23:02
zykes-7win 3923:02
*** terryh has joined #openstack-dev23:02
arosenI got a random question. When I do glance --debug image-list it does a gurl to localhost:9292 and passes an X-auth-Token though I never see it make a request to keystone to get the token first.23:02
arosenWhere is it saving this token it's passing, when i do quantum --debug net-list it will get a new token from keystone each time.23:03
zykes-Daviey: or zul around ?23:03
*** metral has joined #openstack-dev23:03
*** nunosantos has quit IRC23:04
*** alunduil has quit IRC23:06
*** johnthetubaguy has joined #openstack-dev23:08
*** sacharya has joined #openstack-dev23:08
*** ilblackdragon has quit IRC23:08
*** john5223 has quit IRC23:08
*** johnthetubaguy has quit IRC23:08
*** edmund1 has quit IRC23:09
*** yamahata has joined #openstack-dev23:10
*** nubbie has quit IRC23:10
*** eglynn has quit IRC23:12
*** metral has quit IRC23:13
vishiousayoung: this should be good to go now23:14
*** davidha has quit IRC23:15
*** gyee has joined #openstack-dev23:19
*** Ryan_Lane has quit IRC23:19
*** yuanz has quit IRC23:20
*** metral has joined #openstack-dev23:20
*** hemna is now known as hemnafk23:20
*** vipul is now known as vipul|away23:21
*** vipul|away is now known as vipul23:23
*** maoy has quit IRC23:24
*** jimfehlig has quit IRC23:25
*** garyTh has quit IRC23:30
*** markmcclain has quit IRC23:34
*** Ryan_Lane has joined #openstack-dev23:35
*** vkmc has quit IRC23:35
*** vkmc has joined #openstack-dev23:38
*** markmcclain has joined #openstack-dev23:38
*** Ryan_Lane has quit IRC23:40
*** networkstatic has quit IRC23:43
*** danwent has joined #openstack-dev23:43
*** Ryan_Lane has joined #openstack-dev23:43
*** yamahata has quit IRC23:45
*** kagan has joined #openstack-dev23:47
*** danwent has quit IRC23:47
openstackgerritA change was merged to openstack/python-novaclient: Allows admins to reset-network of an instance  https://review.openstack.org/2244023:48
*** rods` has quit IRC23:50
openstackgerritA change was merged to openstack/python-novaclient: A minimum of Python3 fixes so that installation works without errors/warnings.  https://review.openstack.org/2240723:50
openstackgerritA change was merged to openstack/python-novaclient: Fix how tests were failing due to missing attributes.  https://review.openstack.org/2272123:50
openstackgerritA change was merged to openstack/nova: Use min_ram of original image for snapshot, even with VHD  https://review.openstack.org/2301323:50
openstackgerritA change was merged to openstack/python-novaclient: Accept 201 status code on POST  https://review.openstack.org/2272523:51
*** READ10 has quit IRC23:51
*** pabelanger has joined #openstack-dev23:51
openstackgerritA change was merged to openstack/python-novaclient: Fixes the output of 'os-evacuate' command.  https://review.openstack.org/2284823:51
*** koolhead17 has joined #openstack-dev23:51
*** jsindy has quit IRC23:52
*** sandeepr has quit IRC23:53
*** sacharya has quit IRC23:58
*** markmcclain has quit IRC23:58
*** kagan has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!