openstackgerrit | A change was merged to openstack/cinder: iscsi: Add ability to specify or autodetect block vs fileio https://review.openstack.org/26686 | 00:02 |
---|---|---|
*** sthaha has joined #openstack-dev | 00:04 | |
*** sthaha has joined #openstack-dev | 00:04 | |
*** ewindisch has quit IRC | 00:06 | |
*** lloydde has quit IRC | 00:06 | |
*** redbeard2 has joined #openstack-dev | 00:06 | |
*** tiamar has joined #openstack-dev | 00:07 | |
*** martitia_ has quit IRC | 00:07 | |
*** tiamar has quit IRC | 00:09 | |
*** tiamar has joined #openstack-dev | 00:09 | |
*** cloudchimp has quit IRC | 00:10 | |
*** fifieldt has joined #openstack-dev | 00:11 | |
*** alop has quit IRC | 00:11 | |
*** toddnni has quit IRC | 00:12 | |
*** dolphm has joined #openstack-dev | 00:12 | |
*** dolphm has quit IRC | 00:12 | |
*** martitia_ has joined #openstack-dev | 00:13 | |
*** tiamar has quit IRC | 00:13 | |
*** dolphm has joined #openstack-dev | 00:13 | |
*** baba has quit IRC | 00:15 | |
*** cod3r has joined #openstack-dev | 00:15 | |
*** gongysh has quit IRC | 00:17 | |
*** vipul|away is now known as vipul | 00:18 | |
*** yidclare has quit IRC | 00:18 | |
*** amerine has quit IRC | 00:18 | |
*** toddnni has joined #openstack-dev | 00:19 | |
*** amerine has joined #openstack-dev | 00:19 | |
*** Mandell has quit IRC | 00:20 | |
*** stevemar has joined #openstack-dev | 00:21 | |
*** novas0x2a|laptop has quit IRC | 00:23 | |
*** jakedahn has joined #openstack-dev | 00:25 | |
*** mrodden1 has joined #openstack-dev | 00:25 | |
*** mrodden has quit IRC | 00:27 | |
*** fifieldt has quit IRC | 00:27 | |
*** alop has joined #openstack-dev | 00:28 | |
*** BLZbubba has quit IRC | 00:28 | |
*** BLZbubba has joined #openstack-dev | 00:31 | |
*** salv-orlando has quit IRC | 00:32 | |
*** tiamar has joined #openstack-dev | 00:34 | |
*** martitia_ has quit IRC | 00:34 | |
*** winston-d has joined #openstack-dev | 00:35 | |
*** vipul is now known as vipul|away | 00:36 | |
*** spzala has joined #openstack-dev | 00:38 | |
*** CaptTofu has quit IRC | 00:40 | |
openstackgerrit | A change was merged to openstack/quantum: Make the 'admin' role configurable https://review.openstack.org/25035 | 00:43 |
*** portante|ltp has joined #openstack-dev | 00:45 | |
*** michchap has quit IRC | 00:47 | |
*** michchap has joined #openstack-dev | 00:47 | |
*** stevemar has quit IRC | 00:48 | |
*** ewindisch has joined #openstack-dev | 00:49 | |
*** ijw has joined #openstack-dev | 00:51 | |
*** michchap has quit IRC | 00:51 | |
*** galstrom_zzz is now known as galstrom | 00:52 | |
*** jaypipes has joined #openstack-dev | 00:52 | |
*** shri1 has left #openstack-dev | 00:54 | |
*** jbresnah has joined #openstack-dev | 01:00 | |
*** kagan has quit IRC | 01:02 | |
openstackgerrit | A change was merged to openstack/quantum: Imported Translations from Transifex https://review.openstack.org/27390 | 01:05 |
*** dsanders has quit IRC | 01:06 | |
*** bogdando has quit IRC | 01:06 | |
*** galstrom is now known as galstrom_zzz | 01:06 | |
*** mrodden1 has quit IRC | 01:09 | |
*** galstrom_zzz is now known as galstrom | 01:10 | |
*** colinmcnamara has joined #openstack-dev | 01:11 | |
*** colinmcnamara has quit IRC | 01:11 | |
*** jasdeepH has quit IRC | 01:12 | |
*** theyknow has joined #openstack-dev | 01:15 | |
*** theyknow has quit IRC | 01:15 | |
*** asalkeld has quit IRC | 01:18 | |
*** ijw has quit IRC | 01:19 | |
*** adalbas has quit IRC | 01:20 | |
*** asalkeld has joined #openstack-dev | 01:21 | |
*** sarob_ has quit IRC | 01:21 | |
*** Ryan_Lane has quit IRC | 01:25 | |
*** Ryan_Lane has joined #openstack-dev | 01:26 | |
*** ladquin has quit IRC | 01:26 | |
*** Ryan_Lane has quit IRC | 01:27 | |
*** terry7 has quit IRC | 01:27 | |
*** bing_bu has joined #openstack-dev | 01:28 | |
*** galstrom is now known as galstrom_zzz | 01:29 | |
*** burris has joined #openstack-dev | 01:31 | |
*** galstrom_zzz is now known as galstrom | 01:32 | |
*** mrodden has joined #openstack-dev | 01:33 | |
*** spzala has quit IRC | 01:37 | |
*** jakedahn has quit IRC | 01:41 | |
*** michchap has joined #openstack-dev | 01:42 | |
*** jhesketh_ has joined #openstack-dev | 01:47 | |
*** jasdeepH has joined #openstack-dev | 01:48 | |
*** johnthetubaguy has joined #openstack-dev | 01:51 | |
*** reed has quit IRC | 01:59 | |
*** noslzzp has quit IRC | 02:02 | |
*** rcleere has joined #openstack-dev | 02:02 | |
*** galstrom is now known as galstrom_zzz | 02:02 | |
*** adjohn has quit IRC | 02:02 | |
*** ewindisch has quit IRC | 02:04 | |
*** colinmcnamara has joined #openstack-dev | 02:05 | |
*** alop has quit IRC | 02:08 | |
*** cod3r has quit IRC | 02:10 | |
matiu | If I request a deleted image by ID openstack gives it to me | 02:12 |
matiu | Is that a bug ? or by design ? | 02:12 |
*** BobBall has quit IRC | 02:15 | |
*** pixelbeat has quit IRC | 02:16 | |
*** shang has quit IRC | 02:16 | |
*** hartsocks has quit IRC | 02:19 | |
*** michchap_ has joined #openstack-dev | 02:22 | |
*** michchap has quit IRC | 02:24 | |
*** shang has joined #openstack-dev | 02:27 | |
*** redbeard2 has quit IRC | 02:29 | |
*** johnthetubaguy has quit IRC | 02:30 | |
*** colinmcnamara has quit IRC | 02:31 | |
*** cod3r has joined #openstack-dev | 02:32 | |
*** johnthetubaguy has joined #openstack-dev | 02:33 | |
*** hari_ has joined #openstack-dev | 02:34 | |
*** koolhead17 has quit IRC | 02:35 | |
*** hari_ has quit IRC | 02:36 | |
dolphm | matiu: i'm guessing that's a bug | 02:40 |
matiu | yeah I think so too, but it's been there for like 6 months, so I thought maybe it was supposed to be | 02:41 |
*** dolphm has quit IRC | 02:41 | |
*** yaguang has joined #openstack-dev | 02:42 | |
*** markwash has joined #openstack-dev | 02:42 | |
*** redbeard2 has joined #openstack-dev | 02:44 | |
*** galstrom_zzz is now known as galstrom | 02:45 | |
*** woodspa has quit IRC | 02:45 | |
*** koolhead17 has joined #openstack-dev | 02:48 | |
*** gyee has quit IRC | 02:53 | |
*** sudorandom has quit IRC | 02:55 | |
*** johnthetubaguy has quit IRC | 02:58 | |
*** johnthetubaguy has joined #openstack-dev | 03:01 | |
*** johnthetubaguy has quit IRC | 03:01 | |
*** jbresnah has quit IRC | 03:04 | |
*** adjohn has joined #openstack-dev | 03:13 | |
*** networkstatic has quit IRC | 03:22 | |
*** networkstatic has joined #openstack-dev | 03:22 | |
*** jakedahn has joined #openstack-dev | 03:23 | |
*** kreddy has quit IRC | 03:25 | |
*** bdpayne has quit IRC | 03:25 | |
*** galstrom is now known as galstrom_zzz | 03:29 | |
*** sarob has joined #openstack-dev | 03:29 | |
*** sarob_ has joined #openstack-dev | 03:30 | |
*** galstrom_zzz is now known as galstrom | 03:30 | |
*** jimfehlig has joined #openstack-dev | 03:31 | |
*** sarob has quit IRC | 03:33 | |
*** bdpayne has joined #openstack-dev | 03:35 | |
*** adjohn has quit IRC | 03:41 | |
*** andrewbogott is now known as andrewbogott_afk | 03:42 | |
*** galstrom is now known as galstrom_zzz | 03:43 | |
*** topol has joined #openstack-dev | 03:48 | |
*** sarob_ has quit IRC | 03:50 | |
*** colinmcnamara has joined #openstack-dev | 03:52 | |
*** martine_ has quit IRC | 03:56 | |
*** zaneb has joined #openstack-dev | 03:58 | |
*** zb has quit IRC | 04:00 | |
*** zb has joined #openstack-dev | 04:01 | |
*** zaneb has quit IRC | 04:01 | |
*** sride has joined #openstack-dev | 04:04 | |
*** colinmcnamara has quit IRC | 04:05 | |
*** zb has quit IRC | 04:07 | |
*** jimfehlig has quit IRC | 04:08 | |
*** kagan has joined #openstack-dev | 04:08 | |
*** SergeyLukjanov has joined #openstack-dev | 04:11 | |
*** sandywalsh has quit IRC | 04:15 | |
*** zb has joined #openstack-dev | 04:20 | |
*** gongysh has joined #openstack-dev | 04:23 | |
*** otherwiseguy has quit IRC | 04:26 | |
*** zb has quit IRC | 04:28 | |
*** sandywalsh has joined #openstack-dev | 04:30 | |
*** colinmcnamara has joined #openstack-dev | 04:35 | |
*** colinmcnamara1 has joined #openstack-dev | 04:38 | |
*** colinmcnamara has quit IRC | 04:38 | |
*** koolhead17 has quit IRC | 04:40 | |
*** zb has joined #openstack-dev | 04:42 | |
*** colinmcnamara1 has quit IRC | 04:44 | |
*** bdpayne has quit IRC | 04:46 | |
*** jclift_ has quit IRC | 04:46 | |
*** rcleere has quit IRC | 04:47 | |
*** bmclaughlin has quit IRC | 04:50 | |
*** garyk has quit IRC | 04:50 | |
*** adjohn has joined #openstack-dev | 04:52 | |
*** adjohn has quit IRC | 04:56 | |
*** martitia_ has joined #openstack-dev | 04:59 | |
*** tiamar has quit IRC | 04:59 | |
*** aeperezt has quit IRC | 05:01 | |
*** jakedahn has quit IRC | 05:02 | |
*** CaptTofu has joined #openstack-dev | 05:04 | |
*** vipul|away is now known as vipul | 05:09 | |
*** vipul is now known as vipul|away | 05:10 | |
*** vipul|away is now known as vipul | 05:10 | |
*** navid_ has joined #openstack-dev | 05:15 | |
*** sacharya has quit IRC | 05:21 | |
*** topol has quit IRC | 05:22 | |
*** bdpayne has joined #openstack-dev | 05:24 | |
*** vartom117 has joined #openstack-dev | 05:30 | |
*** tiamar has joined #openstack-dev | 05:31 | |
*** jasdeepH has quit IRC | 05:31 | |
*** martitia_ has quit IRC | 05:31 | |
*** davidkranz_ has joined #openstack-dev | 05:32 | |
*** davidkranz has quit IRC | 05:33 | |
*** zaitcev has quit IRC | 05:33 | |
*** kagan has quit IRC | 05:42 | |
*** garyk has joined #openstack-dev | 05:43 | |
*** jbresnah has joined #openstack-dev | 05:44 | |
*** markwash has quit IRC | 05:46 | |
*** michchap_ has quit IRC | 05:49 | |
*** jtomasek has joined #openstack-dev | 05:51 | |
*** yaguang has quit IRC | 05:56 | |
*** yaguang has joined #openstack-dev | 05:57 | |
*** tiamar has quit IRC | 05:59 | |
*** martitia_ has joined #openstack-dev | 05:59 | |
*** shang has quit IRC | 06:00 | |
*** shang has joined #openstack-dev | 06:01 | |
*** Ryan_Lane has joined #openstack-dev | 06:01 | |
*** cod3r has quit IRC | 06:02 | |
*** almaisan-away is now known as al-maisan | 06:03 | |
*** bdpayne has quit IRC | 06:12 | |
*** michchap has joined #openstack-dev | 06:14 | |
*** michchap has quit IRC | 06:15 | |
*** michchap has joined #openstack-dev | 06:15 | |
*** martitia_ has quit IRC | 06:19 | |
*** tiamar has joined #openstack-dev | 06:19 | |
*** michchap_ has joined #openstack-dev | 06:20 | |
*** michchap has quit IRC | 06:21 | |
*** SergeyLukjanov has quit IRC | 06:21 | |
*** jcoufal has joined #openstack-dev | 06:23 | |
*** koolhead17 has joined #openstack-dev | 06:24 | |
*** michchap_ has quit IRC | 06:28 | |
*** jhesketh_ has quit IRC | 06:31 | |
*** Mandell has joined #openstack-dev | 06:35 | |
*** mrunge has joined #openstack-dev | 06:37 | |
*** SergeyLukjanov has joined #openstack-dev | 06:38 | |
*** rmohan has quit IRC | 06:38 | |
*** rmohan has joined #openstack-dev | 06:39 | |
*** mindpixel has joined #openstack-dev | 06:39 | |
*** salv-orlando has joined #openstack-dev | 06:40 | |
*** eglynn has joined #openstack-dev | 06:40 | |
*** SergeyLukjanov has quit IRC | 06:46 | |
*** jprovazn_afk is now known as jprovazn | 06:47 | |
*** flaper87 has joined #openstack-dev | 06:47 | |
*** adjohn has joined #openstack-dev | 06:48 | |
*** adjohn has quit IRC | 06:50 | |
*** ewindisch has joined #openstack-dev | 06:50 | |
al-maisan | Hello there! Running devstack and seeing "Failed to update the root certificate" followed by other errors: http://pastebin.ubuntu.com/5597634/ | 06:51 |
*** xga has joined #openstack-dev | 06:51 | |
al-maisan | is this some kind of know issue? any ideas how to fix it? | 06:53 |
koolhead17 | did you try running the devstack twice | 06:56 |
*** ondergetekende has joined #openstack-dev | 06:56 | |
al-maisan | I ran it a number of times | 06:56 |
koolhead17 | al-maisan: it appears to me that its more to do with the certs part than devstack | 06:57 |
al-maisan | hmm .. yeah .. just blasted away everything and trying a "clean run" | 06:58 |
koolhead17 | :P | 06:59 |
*** flask11 has joined #openstack-dev | 07:00 | |
flask11 | Hello everybody! Can some one help with this error: CRITICAL nova [-]cannot import name BigInteger | 07:01 |
flask11 | I checked python and this module exists | 07:01 |
*** galstrom_zzz has quit IRC | 07:02 | |
*** pvo has quit IRC | 07:02 | |
*** VeggieMeat has quit IRC | 07:03 | |
*** VeggieMeat has joined #openstack-dev | 07:03 | |
*** oubiwann has quit IRC | 07:03 | |
*** rgoodwin has quit IRC | 07:03 | |
*** trapni has joined #openstack-dev | 07:04 | |
*** trapni has joined #openstack-dev | 07:04 | |
*** fungi has quit IRC | 07:04 | |
*** dcmorton has quit IRC | 07:04 | |
*** troytoman-away has quit IRC | 07:04 | |
*** bkero has quit IRC | 07:04 | |
*** pvo has joined #openstack-dev | 07:05 | |
*** dcmorton has joined #openstack-dev | 07:05 | |
*** troytoman-away has joined #openstack-dev | 07:05 | |
*** rgoodwin has joined #openstack-dev | 07:05 | |
*** galstrom_zzz has joined #openstack-dev | 07:05 | |
*** galstrom_zzz is now known as galstrom | 07:05 | |
*** oubiwann has joined #openstack-dev | 07:05 | |
*** reidrac has joined #openstack-dev | 07:05 | |
*** fungi has joined #openstack-dev | 07:06 | |
*** bkero has joined #openstack-dev | 07:06 | |
*** psedlak has joined #openstack-dev | 07:07 | |
*** samos123xx has joined #openstack-dev | 07:08 | |
*** trapnii has joined #openstack-dev | 07:11 | |
*** jgallard has joined #openstack-dev | 07:11 | |
*** trapni has quit IRC | 07:13 | |
*** thouveng has joined #openstack-dev | 07:14 | |
*** Yada has joined #openstack-dev | 07:14 | |
*** mmagr has joined #openstack-dev | 07:15 | |
*** zoresvit has joined #openstack-dev | 07:16 | |
*** egallen has joined #openstack-dev | 07:20 | |
*** giulivo has joined #openstack-dev | 07:21 | |
*** henrynash has joined #openstack-dev | 07:25 | |
*** jamielennox is now known as jamielennox|away | 07:30 | |
al-maisan | hmm .. "nova x509-get-root-cert /opt/stack/devstack/accrc/cacert.pem" is the failing command | 07:31 |
*** fbo has joined #openstack-dev | 07:35 | |
*** Gman has quit IRC | 07:35 | |
al-maisan | hmm .. apparently I need the nova-cert daemon, https://lists.launchpad.net/openstack/msg09111.html | 07:35 |
*** trapnii has quit IRC | 07:35 | |
*** xga has quit IRC | 07:36 | |
koolhead17 | al-maisan: if its a known issue better fix it with a patch upstream | 07:37 |
*** fbo has quit IRC | 07:37 | |
al-maisan | sure .. just trying to figure why this is happening :-P | 07:38 |
*** xga has joined #openstack-dev | 07:38 | |
*** JordanP has joined #openstack-dev | 07:41 | |
*** belmoreira has joined #openstack-dev | 07:41 | |
al-maisan | koolhead17: apparently /opt/stack/nova/bin/nova-cert fails to start | 07:42 |
al-maisan | not sure why that is | 07:42 |
*** iartarisi has joined #openstack-dev | 07:52 | |
*** fbo has joined #openstack-dev | 07:53 | |
*** Yada has quit IRC | 07:53 | |
*** corXi has joined #openstack-dev | 07:54 | |
*** jgallard has quit IRC | 07:56 | |
*** jgallard has joined #openstack-dev | 07:56 | |
*** dansmith has quit IRC | 07:57 | |
*** harlowja has quit IRC | 07:57 | |
*** dhubbard_ has quit IRC | 07:58 | |
*** dhubbard has quit IRC | 07:58 | |
*** harlowja has joined #openstack-dev | 07:58 | |
*** dansmith has joined #openstack-dev | 07:58 | |
*** dhubbard has joined #openstack-dev | 08:00 | |
*** dhubbard_ has joined #openstack-dev | 08:00 | |
*** mrunge has quit IRC | 08:00 | |
*** jtomasek has quit IRC | 08:01 | |
*** trapnii has joined #openstack-dev | 08:02 | |
*** dhubbard has quit IRC | 08:03 | |
*** lucasagomes has joined #openstack-dev | 08:03 | |
*** danpb has joined #openstack-dev | 08:05 | |
*** mrunge has joined #openstack-dev | 08:06 | |
*** dhubbard has joined #openstack-dev | 08:07 | |
*** bogdando has joined #openstack-dev | 08:07 | |
*** athomas has quit IRC | 08:07 | |
*** mrodden has quit IRC | 08:10 | |
*** davidkranz has joined #openstack-dev | 08:15 | |
*** Ryan_Lane has quit IRC | 08:16 | |
*** davidkranz_ has quit IRC | 08:16 | |
*** athomas has joined #openstack-dev | 08:18 | |
*** zb is now known as zaneb | 08:21 | |
*** jtomasek has joined #openstack-dev | 08:24 | |
*** locke105 has quit IRC | 08:25 | |
*** pixelbeat has joined #openstack-dev | 08:27 | |
*** dhubbard has quit IRC | 08:28 | |
*** dhubbard has joined #openstack-dev | 08:28 | |
*** zb has joined #openstack-dev | 08:29 | |
*** SergeyLukjanov has joined #openstack-dev | 08:29 | |
*** marun has quit IRC | 08:30 | |
*** jgallard has quit IRC | 08:30 | |
*** jgallard has joined #openstack-dev | 08:31 | |
*** zaneb has quit IRC | 08:32 | |
*** zbitter has joined #openstack-dev | 08:32 | |
*** henrynash has quit IRC | 08:35 | |
*** salv-orlando_ has joined #openstack-dev | 08:35 | |
*** salv-orlando has quit IRC | 08:35 | |
*** zb has quit IRC | 08:35 | |
*** salv-orlando_ is now known as salv-orlando | 08:35 | |
*** salv-orlando_ has joined #openstack-dev | 08:36 | |
*** salv-orlando has quit IRC | 08:36 | |
*** salv-orlando_ is now known as salv-orlando | 08:36 | |
*** zbitter has quit IRC | 08:36 | |
*** al-maisan is now known as almaisan-away | 08:38 | |
*** derekh has joined #openstack-dev | 08:38 | |
*** zaneb has joined #openstack-dev | 08:40 | |
*** darraghb has joined #openstack-dev | 08:41 | |
*** zb has joined #openstack-dev | 08:42 | |
*** zaneb has quit IRC | 08:44 | |
*** zb has quit IRC | 08:47 | |
*** zbitter has joined #openstack-dev | 08:47 | |
*** egallen has quit IRC | 08:50 | |
*** egallen has joined #openstack-dev | 08:51 | |
*** zbitter has quit IRC | 08:53 | |
*** romcheg has joined #openstack-dev | 08:53 | |
*** winston-d has quit IRC | 08:55 | |
*** zaneb has joined #openstack-dev | 09:01 | |
*** thouveng has quit IRC | 09:03 | |
*** flask11 has quit IRC | 09:03 | |
*** anuj has joined #openstack-dev | 09:13 | |
anuj | hi | 09:13 |
anuj | can anyone explain the concept of middleware in Openstack | 09:14 |
anuj | what are they meant for, how do they get inserted into the wsgi pipeline, etc | 09:14 |
anuj | if someone can point me to the right documentation, it'd be great | 09:14 |
*** salv-orlando has quit IRC | 09:15 | |
*** zb has joined #openstack-dev | 09:15 | |
*** zaneb has quit IRC | 09:16 | |
*** riskable has quit IRC | 09:17 | |
chmouel | http://en.wikipedia.org/wiki/Python_Paste#WSGI_middleware | 09:20 |
jd__ | anuj: I wrote an article about middleware with Swift, if that can help http://julien.danjou.info/blog/2013/extending-swift-with-a-middleware-clamav | 09:20 |
*** zbitter has joined #openstack-dev | 09:21 | |
*** zaneb has joined #openstack-dev | 09:24 | |
*** zb has quit IRC | 09:24 | |
*** henrynash has joined #openstack-dev | 09:24 | |
*** zbitter has quit IRC | 09:26 | |
*** romcheg has quit IRC | 09:29 | |
*** romcheg has joined #openstack-dev | 09:32 | |
koolhead17 | jd__: are you up for grab/hire ? :P | 09:36 |
*** tryggvil_ has quit IRC | 09:36 | |
*** davidha has joined #openstack-dev | 09:40 | |
*** romcheg has quit IRC | 09:42 | |
*** jbresnah has quit IRC | 09:45 | |
openstackgerrit | A change was merged to openstack/glance: Call monkey_patch before other modules are loaded https://review.openstack.org/26074 | 09:48 |
*** anuj has quit IRC | 09:48 | |
*** cod3r has joined #openstack-dev | 09:50 | |
*** andrea_ has joined #openstack-dev | 09:58 | |
*** henrynash has quit IRC | 10:00 | |
*** mindpixel has quit IRC | 10:03 | |
GheRivero | morning all | 10:06 |
chmouel | hello | 10:07 |
*** romcheg has joined #openstack-dev | 10:08 | |
koolhead17 | GheRivero: o/ | 10:09 |
koolhead17 | chmouel: hey | 10:09 |
chmouel | koolhead17: hello | 10:10 |
koolhead17 | chmouel: how are things? :) | 10:10 |
chmouel | koolhead17: not bad and you? | 10:10 |
koolhead17 | okey. kinda catching up with mails and meetings | 10:11 |
*** egallen has quit IRC | 10:11 | |
*** rmohan has quit IRC | 10:12 | |
*** samos123xx has quit IRC | 10:13 | |
ekarlso | yo :) | 10:14 |
*** anuj has joined #openstack-dev | 10:14 | |
*** rmohan has joined #openstack-dev | 10:14 | |
*** JordanP has quit IRC | 10:14 | |
koolhead17 | sir ekarlso | 10:14 |
*** networkstatic has quit IRC | 10:15 | |
*** bswartz has quit IRC | 10:15 | |
anuj | thanks jd__ and chmouel. I'll take a look at them. | 10:15 |
*** samos123xx has joined #openstack-dev | 10:16 | |
GheRivero | koolhead17: o/ | 10:16 |
koolhead17 | GheRivero: howdy? | 10:16 |
*** kmartin has quit IRC | 10:16 | |
*** samos123xx has left #openstack-dev | 10:17 | |
*** cod3r is now known as baba | 10:21 | |
*** romcheg has quit IRC | 10:21 | |
*** romcheg has joined #openstack-dev | 10:22 | |
*** drewlander has joined #openstack-dev | 10:23 | |
*** henrynash has joined #openstack-dev | 10:29 | |
*** garyk has quit IRC | 10:31 | |
*** davidha has quit IRC | 10:32 | |
*** xga has quit IRC | 10:33 | |
*** topol has joined #openstack-dev | 10:33 | |
*** jprovazn has quit IRC | 10:35 | |
*** romcheg has left #openstack-dev | 10:46 | |
*** bing_bu has quit IRC | 10:48 | |
*** Gman has joined #openstack-dev | 10:52 | |
*** fbo has quit IRC | 10:54 | |
*** rkukura has quit IRC | 10:57 | |
*** martine has joined #openstack-dev | 10:59 | |
*** salv-orlando has joined #openstack-dev | 10:59 | |
*** harlowja has quit IRC | 11:00 | |
*** harlowja has joined #openstack-dev | 11:00 | |
*** dhubbard has quit IRC | 11:01 | |
*** dhubbard_ has quit IRC | 11:02 | |
*** dhubbard has joined #openstack-dev | 11:02 | |
*** dolphm has joined #openstack-dev | 11:02 | |
*** dhubbard_ has joined #openstack-dev | 11:02 | |
*** henrynash has quit IRC | 11:03 | |
*** dolphm has quit IRC | 11:07 | |
*** dolphm has joined #openstack-dev | 11:08 | |
*** pcm__ has joined #openstack-dev | 11:09 | |
*** pcm__ has quit IRC | 11:10 | |
*** dolphm has quit IRC | 11:10 | |
*** pcm__ has joined #openstack-dev | 11:10 | |
*** cmagina_away has joined #openstack-dev | 11:11 | |
*** giulivo has quit IRC | 11:12 | |
*** cmagina has quit IRC | 11:12 | |
*** adalbas has joined #openstack-dev | 11:12 | |
*** matiu has quit IRC | 11:13 | |
*** giulivo has joined #openstack-dev | 11:14 | |
*** yaguang has quit IRC | 11:23 | |
*** martine has quit IRC | 11:30 | |
*** martine has joined #openstack-dev | 11:30 | |
*** vkmc has joined #openstack-dev | 11:30 | |
*** baba has quit IRC | 11:31 | |
*** matiu has joined #openstack-dev | 11:31 | |
*** matiu has quit IRC | 11:31 | |
*** matiu has joined #openstack-dev | 11:31 | |
*** sride has quit IRC | 11:32 | |
*** fbo has joined #openstack-dev | 11:35 | |
*** tzumainn has joined #openstack-dev | 11:37 | |
*** jgallard has quit IRC | 11:45 | |
*** jgallard has joined #openstack-dev | 11:45 | |
*** egallen has joined #openstack-dev | 11:45 | |
*** rnirmal has joined #openstack-dev | 11:46 | |
*** pmyers has joined #openstack-dev | 11:49 | |
*** jruzicka has joined #openstack-dev | 11:54 | |
*** kreddy has joined #openstack-dev | 11:56 | |
*** vkmc has quit IRC | 11:56 | |
*** mkollaro has joined #openstack-dev | 11:58 | |
*** erfanian has joined #openstack-dev | 11:58 | |
*** dprince has joined #openstack-dev | 11:59 | |
*** erfanian has quit IRC | 11:59 | |
*** JordanP has joined #openstack-dev | 11:59 | |
*** erfanian has joined #openstack-dev | 12:00 | |
*** erfanian has quit IRC | 12:00 | |
*** rahmu has joined #openstack-dev | 12:03 | |
*** sandywalsh has quit IRC | 12:03 | |
*** Yada has joined #openstack-dev | 12:04 | |
*** ondergetekende has quit IRC | 12:06 | |
*** Gman has quit IRC | 12:06 | |
*** anuj has quit IRC | 12:10 | |
*** e1mer has quit IRC | 12:11 | |
*** dolphm has joined #openstack-dev | 12:11 | |
*** mrunge has quit IRC | 12:15 | |
*** dolphm has quit IRC | 12:15 | |
*** anuj has joined #openstack-dev | 12:15 | |
*** sandywalsh has joined #openstack-dev | 12:16 | |
*** martine_ has joined #openstack-dev | 12:16 | |
*** martine has quit IRC | 12:20 | |
*** aloga_ has joined #openstack-dev | 12:24 | |
openstackgerrit | A change was merged to openstack/horizon: Fix regression on running manage command. https://review.openstack.org/27163 | 12:24 |
*** xga has joined #openstack-dev | 12:24 | |
*** vartom117 has quit IRC | 12:25 | |
openstackgerrit | A change was merged to openstack/horizon: Enhancement on prompts to list selected objects. https://review.openstack.org/24935 | 12:25 |
*** maurosr_ has joined #openstack-dev | 12:27 | |
*** litong01 has joined #openstack-dev | 12:29 | |
*** anuj has quit IRC | 12:32 | |
*** dims has quit IRC | 12:32 | |
*** dims has joined #openstack-dev | 12:33 | |
*** markmc has joined #openstack-dev | 12:40 | |
*** codekobe has joined #openstack-dev | 12:43 | |
*** bing_bu has joined #openstack-dev | 12:48 | |
*** arbrandes has joined #openstack-dev | 12:49 | |
jd__ | ttx: do you happen to know if we can close the answers.launchpad.net page of a project? we'd really like to do that | 12:50 |
*** xga has quit IRC | 12:50 | |
ttx | jd__: double check with reed, but I think you now can | 12:51 |
*** jclift has joined #openstack-dev | 12:51 | |
jd__ | thanks, I just can't find where it is :) | 12:54 |
*** xga has joined #openstack-dev | 12:56 | |
*** radez_g0n3 is now known as radez | 12:56 | |
ttx | jd__: https://launchpad.net/ceilometer/+configure-answers | 12:57 |
jd__ | ttx: thank you so much | 12:57 |
*** bswartz has joined #openstack-dev | 12:57 | |
*** martine_ has quit IRC | 12:57 | |
*** martine has joined #openstack-dev | 12:58 | |
*** alunduil has quit IRC | 12:59 | |
*** woodspa has joined #openstack-dev | 12:59 | |
*** jzigmund has joined #openstack-dev | 13:00 | |
*** kreddy has quit IRC | 13:03 | |
*** salv-orlando has quit IRC | 13:03 | |
*** zb has joined #openstack-dev | 13:03 | |
*** salv-orlando has joined #openstack-dev | 13:03 | |
*** kreddy has joined #openstack-dev | 13:03 | |
*** afazekas has joined #openstack-dev | 13:05 | |
*** zaneb has quit IRC | 13:05 | |
*** topol has quit IRC | 13:05 | |
*** jayg|g0n3 is now known as jayg | 13:07 | |
*** zb is now known as zaneb | 13:09 | |
*** jtomasek_ has joined #openstack-dev | 13:10 | |
*** jtomasek has quit IRC | 13:10 | |
*** redbeard2 has quit IRC | 13:10 | |
*** sthaha has quit IRC | 13:10 | |
*** anuj has joined #openstack-dev | 13:10 | |
openstackgerrit | A change was merged to openstack/horizon: Add Filter Action to Instance Views https://review.openstack.org/26938 | 13:13 |
*** dhellmann is now known as dhellmann-away | 13:13 | |
openstackgerrit | A change was merged to openstack/horizon: Fixes sorting on IP Address columns in tables. https://review.openstack.org/27144 | 13:13 |
*** bknudson has joined #openstack-dev | 13:13 | |
*** kbringard has joined #openstack-dev | 13:13 | |
*** kreddy has quit IRC | 13:16 | |
*** SergeyLukjanov has quit IRC | 13:22 | |
*** gongysh has quit IRC | 13:23 | |
ekarlso | notmyname: yo | 13:24 |
ekarlso | time for some questions ? | 13:24 |
jgallard | giulivo, once again, thanks a lot for your help and your reactivity :) | 13:28 |
*** noslzzp has joined #openstack-dev | 13:29 | |
*** jtomasek_ has quit IRC | 13:30 | |
giulivo | I think it is a good job | 13:30 |
giulivo | and a difficult case to test | 13:30 |
giulivo | so , fingers crossed | 13:30 |
giulivo | let's see if someone else can approve it | 13:31 |
jgallard | giulivo, :-) | 13:34 |
*** pfreund has joined #openstack-dev | 13:34 | |
jgallard | giulivo, do you have an idea of people (and approvers) who can be added to the list of gerrit reviewers? | 13:36 |
giulivo | maybe afazekas can help | 13:36 |
*** fsargent has joined #openstack-dev | 13:37 | |
*** bmclaughlin has joined #openstack-dev | 13:38 | |
*** spzala has joined #openstack-dev | 13:38 | |
*** rkukura has joined #openstack-dev | 13:39 | |
afazekas | giulivo: Looks like I missed the beginning of the conversation | 13:39 |
*** sandywalsh has quit IRC | 13:39 | |
*** salv-orlando has quit IRC | 13:39 | |
giulivo | afazekas, jerome is looking for an approver | 13:40 |
afazekas | giulivo: for what ? | 13:40 |
jgallard | hi afazekas! | 13:40 |
giulivo | reviewer, I should say, for his commit | 13:40 |
giulivo | on tempest | 13:40 |
jgallard | https://review.openstack.org/#/c/23923/ | 13:40 |
*** salv-orlando has joined #openstack-dev | 13:41 | |
afazekas | jgallard: normally you should have +2 vote before some else approve it | 13:41 |
jgallard | afazekas, ok! do you know if I can add someone with that power in the review list? | 13:42 |
jgallard | or perhaps, people with that power will see by theirself the patch and they will add them to the reviewer list? | 13:43 |
*** jtomasek_ has joined #openstack-dev | 13:43 | |
*** gongysh has joined #openstack-dev | 13:44 | |
afazekas | jgallard: https://launchpad.net/~openstack-qa-core/+members these persons have permission | 13:44 |
*** matiu has quit IRC | 13:45 | |
afazekas | jgallard: I will review it soon as well | 13:45 |
jgallard | afazekas, ok, thanks a lot! :-) | 13:46 |
jgallard | (and thanks for the link too) | 13:46 |
afazekas | jgallard: FYI: there is an #openstack-qa channel for QA (tempest) discussions | 13:46 |
jgallard | afazekas, ok, thanks! | 13:47 |
afazekas | and we have a meeting https://wiki.openstack.org/wiki/Meetings#QA_team_meeting in every week | 13:47 |
*** garyk has joined #openstack-dev | 13:47 | |
* jgallard puts it in its calendar :) | 13:49 | |
*** pfreund has quit IRC | 13:49 | |
*** pfreund has joined #openstack-dev | 13:49 | |
*** pmyers has quit IRC | 13:51 | |
*** anuj has quit IRC | 13:51 | |
*** topol has joined #openstack-dev | 13:51 | |
*** drewland_ has joined #openstack-dev | 13:51 | |
*** jcoufal has quit IRC | 13:52 | |
*** pmyers has joined #openstack-dev | 13:52 | |
*** sandywalsh has joined #openstack-dev | 13:54 | |
*** jcoufal has joined #openstack-dev | 13:54 | |
*** drewlander has quit IRC | 13:55 | |
*** kreddy has joined #openstack-dev | 13:55 | |
openstackgerrit | A change was merged to openstack/nova: Imported Translations from Transifex https://review.openstack.org/27211 | 13:57 |
*** jimfehlig has joined #openstack-dev | 13:59 | |
*** AlanClark has joined #openstack-dev | 14:00 | |
openstackgerrit | A change was merged to openstack/nova: Make os.services.update work with cells https://review.openstack.org/24035 | 14:00 |
*** pmcg has quit IRC | 14:00 | |
*** kreddy has quit IRC | 14:01 | |
*** READ10 has joined #openstack-dev | 14:01 | |
*** pmcg has joined #openstack-dev | 14:02 | |
spzala | ayoung: good morning! I know no reminder is needed :) but just in case, in yesterday's IRC meeting you mentioned about some work on "membership issue, IIRC" for ldap that you will let me of how it was done. | 14:03 |
*** garyk has quit IRC | 14:03 | |
*** aeperezt has joined #openstack-dev | 14:03 | |
*** drewland_ is now known as drewlander | 14:03 | |
spzala | ayoung: something that i should refer as a better fix for ldap domain defect related to creating default domain | 14:03 |
spzala | ayoung: https://bugs.launchpad.net/keystone/+bug/1168726 | 14:04 |
uvirtbot | Launchpad bug 1168726 in keystone "default_domain_id breaks the ability to map keystone to ldap" [Undecided,In progress] | 14:04 |
*** eharney has joined #openstack-dev | 14:04 | |
*** sandywalsh has quit IRC | 14:04 | |
*** sudorandom has joined #openstack-dev | 14:04 | |
notmyname | ekarlso: I'm here | 14:05 |
*** koolhead17 has quit IRC | 14:06 | |
*** cloudchimp has joined #openstack-dev | 14:06 | |
*** johnthetubaguy has joined #openstack-dev | 14:06 | |
*** kreddy has joined #openstack-dev | 14:08 | |
*** redbeard2 has joined #openstack-dev | 14:11 | |
*** markmcclain has joined #openstack-dev | 14:11 | |
*** stevemar has joined #openstack-dev | 14:12 | |
*** sacharya has joined #openstack-dev | 14:13 | |
*** egallen has quit IRC | 14:16 | |
*** jtomasek_ has quit IRC | 14:17 | |
*** sandywalsh has joined #openstack-dev | 14:18 | |
*** bing_bu has quit IRC | 14:18 | |
*** jgallard has quit IRC | 14:18 | |
*** jgallard has joined #openstack-dev | 14:18 | |
*** garyk has joined #openstack-dev | 14:19 | |
*** navid_ has quit IRC | 14:19 | |
mkollaro | something weird is happening in Swift and I'm wondering if I didn't configure it right (or packstack didn't)...when I umount a disk, then the /srv/node/device1 dir is empty as expected, but the partitions get replicated back there, onto the system disk | 14:21 |
mkollaro | so I can imagine a scenario where a server has a small system disk and huge data disks...an operator umounts a data disk for whatever reason and swift will try to replicate the data onto the system disk, which will get full | 14:22 |
*** portante|ltp has quit IRC | 14:22 | |
*** egallen has joined #openstack-dev | 14:22 | |
mkollaro | so this definitely doesn't seem right... | 14:22 |
derekh | mkollaro: I think there is a config param that can be set to tell it only to replicate if partition is mounted | 14:22 |
garyk | dims: ping | 14:23 |
derekh | mkollaro: yup, mount_check = true | 14:23 |
mkollaro | derekh: thanks, I'll check it | 14:23 |
mkollaro | derekh: in swift.config file? | 14:23 |
ahale | we tend to make sure our underlying mount points have ownership so swift user can't write to them as well | 14:24 |
derekh | mkollaro: in object-server.conf - [DEFAULT] | 14:24 |
derekh | actually probably *-server.conf | 14:25 |
*** maurosr_ has quit IRC | 14:25 | |
mkollaro | yup | 14:25 |
mkollaro | derekh: thanks :) | 14:25 |
mkollaro | shouldn't that be defaultly set to true? at least in packstack? | 14:26 |
*** dosaboy has joined #openstack-dev | 14:26 | |
mkollaro | this can cause some weird behavior | 14:26 |
derekh | np, setting owership of the mount point is a good idea too | 14:26 |
derekh | mkollaro: yup, will put it in | 14:26 |
*** n0ano has quit IRC | 14:28 | |
*** yidclare has joined #openstack-dev | 14:28 | |
*** timello has quit IRC | 14:28 | |
*** jsindy has joined #openstack-dev | 14:29 | |
*** timello has joined #openstack-dev | 14:29 | |
*** FunnyLookinHat has joined #openstack-dev | 14:29 | |
*** sacharya has quit IRC | 14:30 | |
*** anteaya has joined #openstack-dev | 14:31 | |
*** jtomasek_ has joined #openstack-dev | 14:32 | |
*** sride has joined #openstack-dev | 14:34 | |
*** jsindy has quit IRC | 14:35 | |
*** jsindy has joined #openstack-dev | 14:35 | |
*** jtomasek__ has joined #openstack-dev | 14:37 | |
notmyname | mkollaro: one other way around that (eg for scheduled maintenance) is to use the weight to gradually drain the node until it has no more data. | 14:37 |
*** jtomasek__ is now known as jtomasek | 14:38 | |
*** jcoufal has quit IRC | 14:38 | |
*** jcoufal_ has joined #openstack-dev | 14:38 | |
*** jtomasek_ has quit IRC | 14:39 | |
mkollaro | notmyname: it would be nice if all that knowledge how to operate openstack would be somewhere online... | 14:39 |
mkollaro | some bits & pieces are out there, but not enough :/ | 14:40 |
*** gongysh has quit IRC | 14:40 | |
*** toddnni has quit IRC | 14:41 | |
notmyname | mkollaro: indeed. I'd like there to be more. for now, you've got the docs site, swift.openstack.org, http://swiftstack.com/openstack-swift/, and other various personal blogs with different info | 14:41 |
*** romcheg1 has joined #openstack-dev | 14:42 | |
*** jvrbanac has joined #openstack-dev | 14:42 | |
mkollaro | the swiftstack page is the one that helped me the most so far :) | 14:42 |
notmyname | glad to hear (/me works at swiftstack) | 14:43 |
*** cloudchimp has quit IRC | 14:43 | |
mkollaro | I know, thanks for all that :) | 14:47 |
*** romcheg1 has quit IRC | 14:47 | |
*** datsun180b has joined #openstack-dev | 14:48 | |
*** belmoreira has quit IRC | 14:48 | |
*** dolphm has joined #openstack-dev | 14:49 | |
*** nunosantos has joined #openstack-dev | 14:51 | |
*** winston-d has joined #openstack-dev | 14:51 | |
ayoung | spzala, I never found it. I think, now, that the review was written but never approved. Look through the abandoned reviews, I think topol wrote it. Is that right? | 14:52 |
*** aeperezt has quit IRC | 14:52 | |
*** romcheg has joined #openstack-dev | 14:52 | |
ayoung | termie, when you get a chance, can you review https://review.openstack.org/#/c/26985/1 as it is a prereq for https://review.openstack.org/#/c/27026/3 which you +1ed. | 14:53 |
topol | ayoung, I wrote what? | 14:54 |
*** burris has quit IRC | 14:54 | |
*** romcheg has left #openstack-dev | 14:54 | |
*** cp16net is now known as cp16net|away | 14:55 | |
*** ek6 has joined #openstack-dev | 14:56 | |
*** sride has quit IRC | 14:59 | |
spzala | ayoung: ah.. hmmm...I am not if it was topol but let me try look through abandoned review. | 15:00 |
spzala | ayoung: this is the only I see that abandoned and topol was working on it https://review.openstack.org/#/c/22815/ | 15:00 |
*** henrynash has joined #openstack-dev | 15:01 | |
*** reidrac has quit IRC | 15:02 | |
*** egallen has quit IRC | 15:02 | |
*** mkollaro has quit IRC | 15:02 | |
*** sacharya has joined #openstack-dev | 15:02 | |
*** otherwiseguy has joined #openstack-dev | 15:03 | |
*** aeperezt has joined #openstack-dev | 15:03 | |
*** jcoufal_ is now known as jcoufal | 15:04 | |
*** rcleere has joined #openstack-dev | 15:04 | |
*** egallen has joined #openstack-dev | 15:05 | |
*** xga has quit IRC | 15:05 | |
*** xga has joined #openstack-dev | 15:05 | |
*** tserong has quit IRC | 15:05 | |
*** maurosr_ has joined #openstack-dev | 15:07 | |
*** aloga_ has quit IRC | 15:07 | |
topol | ayoung, I don't how to fix the bug Sahdev found except by how he proposed fixing it | 15:10 |
*** drewlander has quit IRC | 15:10 | |
*** garyk has quit IRC | 15:10 | |
*** drewlander has joined #openstack-dev | 15:10 | |
*** johnthetubaguy has quit IRC | 15:11 | |
topol | my devstack fix only fixes it for the devstack case. | 15:12 |
HenryG | I notice that python-quantumclient has some functions in quantumclient/common/utils.py that are in oslo jsonutils.py | 15:13 |
HenryG | Should I file a bug to have python-quantumclient use the oslo functions? | 15:14 |
*** henrynash has quit IRC | 15:14 | |
*** hemna has quit IRC | 15:16 | |
*** digitalsanctum has joined #openstack-dev | 15:16 | |
*** pabelanger has quit IRC | 15:16 | |
*** rmohan has quit IRC | 15:20 | |
*** rmohan has joined #openstack-dev | 15:21 | |
*** zoresvit has quit IRC | 15:22 | |
*** andrew_plunk has joined #openstack-dev | 15:25 | |
*** ek6_ has joined #openstack-dev | 15:27 | |
markmcclain | HenryG: The python-quantumclient is being rewritten | 15:27 |
markmcclain | one of the tasks is removing duplicate code | 15:28 |
*** iartarisi has quit IRC | 15:28 | |
HenryG | cool | 15:28 |
HenryG | is there a BP? | 15:28 |
*** ek6 has quit IRC | 15:29 | |
*** mrodden has joined #openstack-dev | 15:30 | |
markmcclain | https://blueprints.launchpad.net/python-quantumclient/+spec/pythonic-client | 15:30 |
markmcclain | we need to copy in more details into the spec | 15:31 |
*** branen has joined #openstack-dev | 15:31 | |
*** gyee has joined #openstack-dev | 15:32 | |
*** locke105 has joined #openstack-dev | 15:32 | |
*** egallen_ has joined #openstack-dev | 15:33 | |
*** devoid has joined #openstack-dev | 15:33 | |
*** cp16net|away is now known as cp16net | 15:33 | |
*** bdpayne has joined #openstack-dev | 15:34 | |
*** tserong has joined #openstack-dev | 15:35 | |
*** tserong has joined #openstack-dev | 15:35 | |
*** egallen has quit IRC | 15:35 | |
*** egallen_ is now known as egallen | 15:35 | |
HenryG | markmcclain: Thanks. The bp points to a google doc that does not have public read access. | 15:35 |
*** mmagr has quit IRC | 15:36 | |
*** devoid1 has joined #openstack-dev | 15:36 | |
*** devoid has quit IRC | 15:38 | |
*** devoid1 has quit IRC | 15:39 | |
*** devoid has joined #openstack-dev | 15:39 | |
*** digitalsanctum has quit IRC | 15:42 | |
*** mrodden has quit IRC | 15:43 | |
openstackgerrit | A change was merged to openstack/glance: Fixes for mis-use of various exceptions https://review.openstack.org/27413 | 15:43 |
*** markmcclain has quit IRC | 15:44 | |
*** jtomasek has quit IRC | 15:44 | |
*** henrynash has joined #openstack-dev | 15:45 | |
*** martitia_ has joined #openstack-dev | 15:45 | |
*** kmartin has joined #openstack-dev | 15:45 | |
*** tiamar has quit IRC | 15:46 | |
*** hartsocks has joined #openstack-dev | 15:46 | |
*** anniec has joined #openstack-dev | 15:46 | |
*** cdub_ has joined #openstack-dev | 15:47 | |
*** katylava has joined #openstack-dev | 15:48 | |
*** adepti37 has quit IRC | 15:48 | |
*** mrodden has joined #openstack-dev | 15:49 | |
*** READ10 has quit IRC | 15:51 | |
*** michchap has joined #openstack-dev | 15:51 | |
*** michchap has quit IRC | 15:52 | |
*** koolhead17 has joined #openstack-dev | 15:52 | |
*** michchap has joined #openstack-dev | 15:53 | |
*** adepti37 has joined #openstack-dev | 15:53 | |
*** aelkikhia has joined #openstack-dev | 15:53 | |
*** armax has joined #openstack-dev | 15:55 | |
*** Mandell has quit IRC | 15:55 | |
*** adjohn has joined #openstack-dev | 15:57 | |
*** datsun180b_ has joined #openstack-dev | 15:57 | |
*** mjfork has quit IRC | 15:58 | |
*** xga_ has joined #openstack-dev | 15:59 | |
*** jgallard has quit IRC | 15:59 | |
ayoung | spzala, topol, this was the one I was thinking about https://review.openstack.org/#/c/22558/ | 16:00 |
ayoung | note that in core it has: def db_sync(self): | 16:00 |
*** datsun180b has quit IRC | 16:01 | |
*** datsun180b_ is now known as datsun180b | 16:01 | |
*** melwitt has joined #openstack-dev | 16:01 | |
*** garyTh has joined #openstack-dev | 16:01 | |
*** xga has quit IRC | 16:01 | |
*** alop has joined #openstack-dev | 16:01 | |
ayoung | I'm not 100% certain this is the right approach, but this would allow a CLI call to upgrade the "database" which, in this case is the LDAP server....probably want to split this from the actual SQL backend call, so it should be triggered by something other than DbSync in the keystone/cli.py code | 16:02 |
EmilienM | markmc: I would like to merge https://review.openstack.org/#/c/27360/ but it seems some people disagree. What do you think ? | 16:04 |
ayoung | gyee, henrynash can I get an approval on https://review.openstack.org/#/c/26985/1 and https://review.openstack.org/#/c/27026/ | 16:05 |
*** jgallard has joined #openstack-dev | 16:05 | |
markmc | EmilienM, AFAIR, there are cases where it's hugely dangerous to do this during a folsom upgrade - e.g. it'll delete all your VM images on shared storage | 16:06 |
*** lloydde has joined #openstack-dev | 16:06 | |
markmc | EmilienM, we carefully considered it at the time and decided to default to zero and document it in the release notes | 16:06 |
gyee | ayoung, looking .. | 16:06 |
markmc | EmilienM, https://wiki.openstack.org/wiki/ReleaseNotes/2012.2.3#Upgrade_Notes | 16:07 |
EmilienM | markmc: I see now | 16:07 |
EmilienM | markmc: so I abandon my patch | 16:07 |
EmilienM | markmc: and push documentation for productions guys like me :). Thank's ;-) | 16:08 |
markmc | EmilienM, np | 16:08 |
spzala | ayoung: thanks. I am on call but looking at it in few. | 16:09 |
*** networkstatic has joined #openstack-dev | 16:09 | |
henrynash | ayoung: just about to, gyee beat me to it :-) | 16:13 |
*** armax has quit IRC | 16:15 | |
*** rnirmal has quit IRC | 16:16 | |
*** jcoufal has quit IRC | 16:18 | |
ayoung | gyee, henrynash thanks. Lets try to keep the mysql/postgres tests current. If they start breaking, we have no confidence in the correctness of our database migrations. Next up is the ability to run our backend tests against MySQL and Postgresl. | 16:21 |
gyee | ayoung, but we will be running them in devstack gate right? | 16:22 |
*** jog0 has joined #openstack-dev | 16:24 | |
*** hemnafk is now known as hemna | 16:24 | |
gyee | henrynash, I am trying to read up on your cascade domain roles bp | 16:26 |
henrynash | gyee: ok | 16:26 |
gyee | why not also allow domain admin to define its own domain-specific roles | 16:26 |
gyee | ? | 16:26 |
*** trapnii has quit IRC | 16:26 | |
gyee | right now all role definitions are global | 16:26 |
gyee | what's missing is domain-own role definitions, which are only visible within the domain | 16:27 |
ayoung | gyee, we do not run them in the devstack gate yet | 16:28 |
ayoung | gyee, no domain specific roles, please | 16:28 |
*** markmc has quit IRC | 16:28 | |
ayoung | roles are consumed by services outside of Keystone | 16:28 |
ayoung | they are used to enforce policy | 16:28 |
ayoung | it would be more correct to use the Kent Mapping approach to convert domain specific info into and OPenstack deployment specific set of roles. | 16:29 |
henrynash | gyee: that's a much larger issue…maybe we get there one day, but don't think we need that to solve this problem | 16:29 |
gyee | but isn't the goal of "cloud admin" is to give them full autonomy over their own domain? | 16:30 |
*** cp16net is now known as cp16net|away | 16:30 | |
henrynash | gyeeL so first of all I think you mean "customer admin" | 16:30 |
gyee | that should include the ability to create their own roles | 16:30 |
gyee | henrynash, right, or domain admin | 16:30 |
ayoung | gyee, well, actually, with joe savak's request for resource groups, we might be pusing out per domain or per project policy files. | 16:31 |
henrynash | gyee: agreed | 16:31 |
ayoung | so if we had that, then domain or project specific roles might make sense | 16:31 |
gyee | right, couple that with domain-specific drivers, we should have full autonomy | 16:31 |
topol | ayoung, so the concern I have with your proposed approach to use a db_sync function is that it will pull in more code and will not address the read-only case unless we write additional code that involves new functions and that would probably be enough to prevent dolphm from being willing to backport. I think spzala's approach for faking the domain will be much more amenable for being able... | 16:31 |
topol | ...to be backported | 16:31 |
openstackgerrit | A change was merged to openstack-dev/devstack: Add rhel6 as an allowed distro https://review.openstack.org/26714 | 16:32 |
openstackgerrit | A change was merged to openstack-dev/devstack: Add a generic post-prereq phase https://review.openstack.org/25460 | 16:32 |
*** alunduil has joined #openstack-dev | 16:32 | |
henrynash | ayoung: agreed….once we get to domain specific policy files that we can consider that, but of course has some of the other service resource might be shared we'll need some interesting ways of deciding what a domain can and can't "own" | 16:32 |
ayoung | topol, yep..agreed. I was just completing my offer to show how we had talked about doing it before | 16:32 |
openstackgerrit | A change was merged to openstack/nova: Remove unnecessary full resource audits at the end of resizes https://review.openstack.org/27065 | 16:33 |
*** zb has joined #openstack-dev | 16:33 | |
*** zaneb has quit IRC | 16:33 | |
*** fbo has quit IRC | 16:34 | |
*** thingee is now known as that_guy | 16:35 | |
*** devoid has quit IRC | 16:35 | |
*** rahmu has quit IRC | 16:36 | |
topol | ayoung, OK, thanks | 16:36 |
spzala | ayoung: thanks.. yup it will a good reference in future for sure.. I did followed some code on how sql specific codes are there for db-sync | 16:36 |
*** jasdeepH has joined #openstack-dev | 16:36 | |
*** zb has quit IRC | 16:37 | |
openstackgerrit | A change was merged to openstack/python-glanceclient: Improve Python 3.x compatibility https://review.openstack.org/27264 | 16:38 |
*** READ10 has joined #openstack-dev | 16:39 | |
*** that_guy is now known as thingee | 16:41 | |
*** athomas has quit IRC | 16:43 | |
*** gordc has joined #openstack-dev | 16:43 | |
*** kreddy has quit IRC | 16:43 | |
*** jcoufal has joined #openstack-dev | 16:44 | |
*** terry7 has joined #openstack-dev | 16:44 | |
ayoung | topol, spzala do we have a blueprint or doc for "faking the domain?" | 16:45 |
*** xga_ has quit IRC | 16:46 | |
*** dolphm has quit IRC | 16:47 | |
*** dolphm has joined #openstack-dev | 16:48 | |
*** JordanP has quit IRC | 16:49 | |
*** athomas has joined #openstack-dev | 16:50 | |
*** nunosantos_ has joined #openstack-dev | 16:51 | |
*** alunduil has quit IRC | 16:51 | |
*** zaneb has joined #openstack-dev | 16:51 | |
*** danpb has quit IRC | 16:52 | |
*** jsindy has quit IRC | 16:52 | |
*** digitalsanctum has joined #openstack-dev | 16:53 | |
openstackgerrit | A change was merged to openstack/keystone: Remove new constraint from migration downgrade. https://review.openstack.org/26985 | 16:53 |
*** simo has quit IRC | 16:54 | |
*** mrodden has quit IRC | 16:54 | |
*** jsindy has joined #openstack-dev | 16:56 | |
*** jgallard has quit IRC | 16:58 | |
*** lucasagomes has quit IRC | 17:00 | |
*** simo has joined #openstack-dev | 17:01 | |
*** simo has joined #openstack-dev | 17:01 | |
openstackgerrit | A change was merged to openstack/keystone: Make migration tests postgres & mysql friendly. https://review.openstack.org/27026 | 17:01 |
*** HenryG has quit IRC | 17:02 | |
*** jbresnah has joined #openstack-dev | 17:02 | |
*** derekh has quit IRC | 17:03 | |
*** garyk has joined #openstack-dev | 17:05 | |
termie | ayoung: looks like gyee already approved it :| | 17:05 |
*** kagan has joined #openstack-dev | 17:06 | |
*** rmohan has quit IRC | 17:06 | |
termie | ayoung: also, why did we make those strings into unicode? | 17:07 |
termie | ayoung: oh, it says in the commit | 17:07 |
*** rmohan has joined #openstack-dev | 17:07 | |
*** zaitcev has joined #openstack-dev | 17:07 | |
*** mrodden has joined #openstack-dev | 17:09 | |
*** terryh has joined #openstack-dev | 17:09 | |
*** shri has joined #openstack-dev | 17:10 | |
*** datsun180b has quit IRC | 17:11 | |
*** datsun180b has joined #openstack-dev | 17:11 | |
*** markwash has joined #openstack-dev | 17:11 | |
*** CaptTofu has quit IRC | 17:12 | |
garyk | dims: ping | 17:20 |
*** arbrandes has quit IRC | 17:20 | |
harlowja | russellb: yt | 17:20 |
*** arbrandes has joined #openstack-dev | 17:20 | |
*** egallen has quit IRC | 17:22 | |
termie | the mailing lists make me sad | 17:22 |
termie | i'm like, okay, i'm working on this thing again, let's go look at the big pile of emails again | 17:23 |
harlowja | lol | 17:23 |
harlowja | totally | 17:24 |
termie | i don't see why anybody proposes things there, it just makes more work for everybody | 17:24 |
termie | i'm for all valid communication happening on irc + gists or code reviews | 17:25 |
termie | mailing lists are just ways to involve people who aren't stakeholders | 17:25 |
harlowja | yup yup | 17:25 |
harlowja | but openstack-dev is a dumping ground of sorts, lol | 17:26 |
termie | i'm okay with it being a dumping ground if i am not required to read it | 17:26 |
harlowja | :-p | 17:26 |
termie | which i suppose i can just decide that | 17:26 |
*** egallen has joined #openstack-dev | 17:26 | |
harlowja | co-workers i know just do that, haha | 17:26 |
harlowja | to much time spent catching up | 17:27 |
*** simo has quit IRC | 17:28 | |
*** simo has joined #openstack-dev | 17:28 | |
ayoung | termie, we use the sqlalchmey declartive way of creating table for the unit tests, and it works for sqlite. I would assume it would work for mysql and postgresql as well. But I just ran through the code in a debugger and the tables are not created. Would you expect that to work? | 17:28 |
ayoung | I am running against mysql | 17:29 |
termie | ayoung: well, did you see commands being executed? | 17:29 |
termie | ayoung: like, is it trying to talk to mysql | 17:29 |
*** markmcclain has joined #openstack-dev | 17:29 | |
termie | ayoung: if not there might be something that needs to be done at engine creation time or whatnot | 17:30 |
termie | ayoung: i thought you recently ran the tests against mysql? | 17:30 |
ayoung | termie, the upgrade test, yes, now I am trying for the unit tests themselves: test_backend_sql | 17:30 |
*** sarob has joined #openstack-dev | 17:30 | |
*** alop has quit IRC | 17:31 | |
ayoung | THat was why we were doing all those migrates before, but I don't think I ever got a 100% test run that way anyway | 17:31 |
termie | ayoung: well, there is the "setup test database" stuff | 17:31 |
*** alop has joined #openstack-dev | 17:31 | |
*** bdpayne has quit IRC | 17:32 | |
termie | ayoung: are we going to drop the table at the end everyt ime? | 17:32 |
termie | or, i suppose, whole db | 17:32 |
ayoung | termie, I don't rally want to do that if we can avoid it | 17:32 |
ayoung | I'd rather delete all rows from the table, and have each unit test be responsible for its own fixtures | 17:32 |
*** sarob has quit IRC | 17:33 | |
*** ondergetekende has joined #openstack-dev | 17:33 | |
termie | ayoung: we can make it go through and trunc every table then | 17:33 |
*** darraghb has quit IRC | 17:33 | |
ayoung | Yep | 17:33 |
termie | ayoung: that requires some weird stuff though, i don't think we're keeping track of which tables exist anywhere programmatically | 17:33 |
ayoung | no, we don't we could eiather do a database specific "show tables" or keep a ahradcoded list | 17:33 |
ayoung | hard coded | 17:34 |
termie | ayoung: my proposal would be to make a test_backend_sql_mysql.py that subclasses the stuff in test_backend_sql | 17:34 |
termie | ayoung: then do custom setup and teardown | 17:34 |
termie | if you run the migrate code on a db that already has been set up it shouldn't do anything | 17:34 |
termie | and then just trunc all our data tables | 17:35 |
*** ondergetekende has quit IRC | 17:35 | |
ayoung | that would work, or we could do a conditional based on the driver string that does the same thing | 17:35 |
ayoung | that is what the proposal up for review from the nova migration test does | 17:35 |
*** marun has joined #openstack-dev | 17:35 | |
termie | i'd rather leave the default conf string correct as is and just make the mysql test an optional one | 17:36 |
termie | it'll be skipped if something doesn't exist | 17:36 |
termie | and use the backend_sql_mysql.conf or whatever | 17:36 |
termie | to overwrite whichever conf values it needs to set up access to your db | 17:37 |
termie | you could also have it try to import some non-versioned file instead | 17:37 |
termie | make it look for ../local_mysql.conf | 17:37 |
*** colinmcnamara has joined #openstack-dev | 17:37 | |
termie | or something of that nature | 17:37 |
ayoung | yes, that is still going to be the case no matter what. I don't want to run the unit tests against every db for each developer, just as part of the gate | 17:37 |
termie | if it doesn't exist, skip the tests | 17:37 |
termie | that seems pretty reasonable, actually, i think we should do that | 17:37 |
termie | check for a custom mysql conf, if it isn't there skip the tests | 17:38 |
*** kreddy has joined #openstack-dev | 17:38 | |
*** egallen_ has joined #openstack-dev | 17:38 | |
*** reed has joined #openstack-dev | 17:38 | |
termie | good to not modify a versioned file so nobody accidentally checks in creds | 17:38 |
termie | make the conf file have a little note that says "don't modify this file to add user/pass, do that in local_test_mysql.conf" | 17:39 |
ayoung | I like the concept of https://review.openstack.org/#/c/23660/ but it doesn't work for me. And it has that same failing: modifying the conf file that should be versioned control. | 17:39 |
termie | looks heavyweight | 17:40 |
termie | looking at it | 17:40 |
termie | either way, these aren't migration tests | 17:40 |
termie | these are unit tests | 17:40 |
ayoung | But that is for the migrations, and we already have that somwhat covered. With LDAP we do just what you suggested. THere is a test with a non standard name that doesn't get picked up by the nose/tox enumeration | 17:40 |
*** colinmcnamara has quit IRC | 17:41 | |
termie | ayoung: we don't need non-standard name, just a conditional skip | 17:41 |
ayoung | so it has to be explicitly run...yeah, that pattern makes sense for the live DBs | 17:41 |
*** egallen has quit IRC | 17:41 | |
*** egallen_ is now known as egallen | 17:41 | |
termie | ayoung: but the non-standard name thing could work too | 17:41 |
termie | ayoung: but since we need to make this conf file anyway | 17:41 |
*** CaptTofu has joined #openstack-dev | 17:41 | |
termie | ayoung: seems like we could leverage that | 17:41 |
ayoung | so _live_ldaptest.py pulls in backend_liveldap.conf. We would do something similar with _live_mysql or something more intelligently named. | 17:42 |
termie | ayoung: i don't see why it has to be fancy-named at all | 17:43 |
*** eharney has quit IRC | 17:43 | |
*** sarob has joined #openstack-dev | 17:43 | |
ayoung | probably should fix the naming convention to be _test or do the conditional skip. | 17:43 |
ayoung | What keeps tes_backend from being executed directly? | 17:44 |
termie | ayoung: i guess if we fancyname it we don't have to do a test for import errors | 17:44 |
termie | ayoung: it doesn't have test cases | 17:44 |
termie | ayoung: just mixins | 17:44 |
termie | ayoung: although it looks like something got added | 17:44 |
ayoung | Ah, so the class has to extend (tests.TestCase) | 17:44 |
termie | "commonhelpertests" | 17:44 |
termie | ya | 17:44 |
ayoung | So that pattern wouldn't work for htis, as we want to be able to run the live SQL tests, just not pick them up automatically | 17:45 |
termie | ayoung: we pick them up automatically, we just skip them | 17:45 |
*** eharney has joined #openstack-dev | 17:45 | |
ayoung | termie, _test_backend_mysql.py and _test_backend_postgres.py acceptable? | 17:46 |
termie | no | 17:46 |
ayoung | so test_backend_mysql.py with a conditional skip...how is that implemented? | 17:46 |
termie | i am writign it now | 17:46 |
*** egallen_ has joined #openstack-dev | 17:47 | |
ayoung | Hah! There is something like it in the review I linked to above | 17:47 |
termie | yes | 17:47 |
spzala | ayoung: no we don't have blueprint but I am writing one..it will be out today. | 17:47 |
termie | ayoung: i would do it int he setup though since we're going to skip them all | 17:47 |
ayoung | @test.skip_unless( | 17:48 |
ayoung | termie, OK, so the URLs that we have been working with for postgresql and mysql are commented out in backend_sql.conf | 17:48 |
termie | https://gist.github.com/termie/5454071 | 17:49 |
ayoung | Although, the more I think about it, the more convinced I am that the tests should be run as $USER, to include using that as the database user | 17:49 |
*** egallen has quit IRC | 17:49 | |
*** egallen_ is now known as egallen | 17:49 | |
termie | ayoung: what? | 17:49 |
*** darjeeling has joined #openstack-dev | 17:49 | |
termie | ayoung: just let somebody configure it | 17:49 |
*** esp has joined #openstack-dev | 17:49 | |
ayoung | termie, what about for gate? | 17:50 |
*** esp has left #openstack-dev | 17:50 | |
termie | ayoung: whatever conf gate uses | 17:50 |
*** afazekas has quit IRC | 17:50 | |
ayoung | termie, my thinking has been to match what devstack uses. | 17:50 |
ayoung | termie, And then to make the devstack choices intelligent ones | 17:50 |
termie | ayoung: so devstack has a MYSQL_PASSWORD env variable? | 17:50 |
ayoung | termie, yeah...it is... | 17:51 |
termie | devstack tempaltes a bunch of files, right? | 17:51 |
ayoung | MYSQL_USER=keystone in my localrc file | 17:51 |
ayoung | but by defualt it is root | 17:51 |
ayoung | default | 17:51 |
termie | just make it template out the file for the conf also? | 17:51 |
ayoung | which is wrong wrong wrong | 17:51 |
termie | devstack is supposed to be run on a throwaway vm, right? | 17:51 |
ayoung | So we do a .gitigrone file for users overloaded env vars? | 17:52 |
*** egallen_ has joined #openstack-dev | 17:52 | |
*** jvrbanac has quit IRC | 17:52 | |
ayoung | termie, I actually don't run it that way. I use it on my dev box, but I am probably in a state of sin | 17:52 |
*** racedo has quit IRC | 17:52 | |
ayoung | however, it assumes that it is not running as root | 17:52 |
ayoung | and instead does a bunch of sudo stuff | 17:52 |
termie | ayoung: your dev box isn't a throwaway vm? :p | 17:52 |
*** colinmcnamara has joined #openstack-dev | 17:52 | |
termie | ayoung: anyway, does devstack already make config files for the project? | 17:53 |
ayoung | termie, I write this with a heavy heart, knowing it will lower me in your eyes, but... | 17:53 |
*** racedo has joined #openstack-dev | 17:53 | |
ayoung | I use eclipse. | 17:53 |
ayoung | I like integrated debugging | 17:53 |
* termie dies | 17:53 | |
ayoung | I also, at one point, though it had decvent python code browsing | 17:53 |
ayoung | but that is a lie | 17:53 |
termie | pdb is integrated into nose | 17:53 |
termie | :D | 17:53 |
termie | anyway, not a biggie | 17:54 |
*** alunduil has joined #openstack-dev | 17:54 | |
ayoung | I could probably get by with vi/emacs/ddd now, too, but I'm a little fixed in my way | 17:54 |
termie | i don't actually run devstack anywhere any more | 17:54 |
*** egallen has quit IRC | 17:54 | |
*** egallen_ is now known as egallen | 17:54 | |
termie | every time i have to it is because we failed in writing good unit tests | 17:54 |
ayoung | I run it infrequently, mostly when I need to test auth_token middleware stuff in a "real" service | 17:54 |
termie | so i just write the unit test instead | 17:54 |
termie | sure | 17:55 |
termie | anyway, it makes conf files | 17:55 |
termie | why not have it make these conf files too? | 17:55 |
termie | from its env vars | 17:55 |
ayoung | I think that makes sense...allows the developer to customize the URLs for their particular system | 17:56 |
ayoung | Buty devstack does that by file modification. I don't know if our config approach allows for env var overrides. | 17:56 |
termie | ayoung: our config is a file | 17:56 |
termie | ayoung: it will modify that file | 17:57 |
termie | ? | 17:57 |
ayoung | thinking.... | 17:58 |
*** adjohn has quit IRC | 17:58 | |
ayoung | Maybe we could do a developer specific file for each datasource, and make it in the same config file format as the /etc/keystone/keystone.conf file. | 17:59 |
ayoung | Most of them would have two lines | 17:59 |
ayoung | [sql] | 17:59 |
ayoung | url=mysql.... | 17:59 |
ayoung | so for the mysql test it would do pretty much what you specified.... | 17:59 |
termie | isn't that what i just suggested? | 17:59 |
termie | you mean just _always_ import it? | 18:00 |
ayoung | Yep, and I just convinced myself you are right. Time to go see if that tea I brewed is ready as I obviously need caffeine | 18:00 |
*** alop has quit IRC | 18:00 | |
termie | or still split on backend | 18:00 |
termie | anyway, great | 18:00 |
termie | ONWARD INTO THE FUTURE | 18:00 |
termie | i will review :) | 18:00 |
*** yidclare has quit IRC | 18:00 | |
*** HenryG has joined #openstack-dev | 18:00 | |
*** jsindy has quit IRC | 18:01 | |
*** alop has joined #openstack-dev | 18:01 | |
*** wiliam_ has joined #openstack-dev | 18:03 | |
garyk | devananda: ping | 18:04 |
*** rnirmal has joined #openstack-dev | 18:05 | |
*** cmagina_away is now known as cmagina | 18:06 | |
*** kreddy has quit IRC | 18:07 | |
*** Ryan_Lane has joined #openstack-dev | 18:08 | |
*** kreddy has joined #openstack-dev | 18:11 | |
*** jog0 has quit IRC | 18:12 | |
*** Mandell has joined #openstack-dev | 18:12 | |
*** colinmcnamara has quit IRC | 18:12 | |
*** salv-orlando has quit IRC | 18:12 | |
*** colinmcnamara has joined #openstack-dev | 18:13 | |
*** salv-orlando has joined #openstack-dev | 18:15 | |
*** bdpayne has joined #openstack-dev | 18:16 | |
*** egallen has quit IRC | 18:17 | |
*** colinmcnamara has quit IRC | 18:18 | |
*** Mandell has quit IRC | 18:24 | |
*** Mandell has joined #openstack-dev | 18:24 | |
*** cp16net|away is now known as cp16net | 18:26 | |
*** devoid has joined #openstack-dev | 18:26 | |
termie | dolphm: this needs a +2, it's trivial: https://review.openstack.org/#/c/27164/ | 18:28 |
termie | dolphm: also: wtf? | 18:28 |
*** bdpayne has quit IRC | 18:29 | |
*** datsun180b_ has joined #openstack-dev | 18:30 | |
dolphm | termie: i didn't originally write it, and i've never tracked down the impact of removing it | 18:30 |
*** pfreund has quit IRC | 18:30 | |
*** bdpayne has joined #openstack-dev | 18:31 | |
*** winston-d has quit IRC | 18:31 | |
*** winston-d has joined #openstack-dev | 18:31 | |
*** datsun180b__ has joined #openstack-dev | 18:31 | |
*** datsun180b_ has quit IRC | 18:32 | |
*** jsindy has joined #openstack-dev | 18:32 | |
termie | dolphm: not wtf why did you do it, more like, how did that even get written | 18:32 |
termie | dolphm: a dict can take another dict as an arg, it just instatiatest eh dict with that dict | 18:32 |
termie | dolphm: literally no effect | 18:32 |
termie | instantiates | 18:32 |
dolphm | oh duh | 18:32 |
dolphm | sigh | 18:32 |
*** datsun180b has quit IRC | 18:33 | |
*** datsun180b__ is now known as datsun180b | 18:33 | |
dolphm | +2/approved | 18:33 |
*** wiliam_ has quit IRC | 18:34 | |
termie | dolphm: thoughts on this transaction thing? | 18:34 |
termie | dolphm: seems somewhat dubious to me still | 18:34 |
dolphm | the sql one? | 18:34 |
termie | dolphm: https://review.openstack.org/#/c/25517/ | 18:34 |
*** alunduil has quit IRC | 18:34 | |
*** jsindy has quit IRC | 18:35 | |
dolphm | i think i'm fine with everything except the impact to non-transactable drivers | 18:35 |
*** jsindy has joined #openstack-dev | 18:35 | |
termie | dolphm: i guess i sort of just don't think it will work | 18:36 |
dolphm | is it testable? | 18:36 |
termie | somebody who doesn't format their doc strings properly can't possibly be trusted to write transaction code | 18:36 |
termie | type='object' ? | 18:37 |
termie | i don't think type is even used | 18:37 |
termie | (in https://review.openstack.org/#/c/25517/4/keystone/common/controller.py) | 18:37 |
*** yidclare has joined #openstack-dev | 18:37 | |
termie | do we know this guy? | 18:37 |
termie | i don't believe in transactions that aren't being done in the database | 18:38 |
dolphm | termie: not at all | 18:38 |
termie | false sense of security | 18:38 |
termie | oh shit, i should eat something | 18:38 |
mordred | shardy: ping | 18:42 |
*** dhellmann-away has quit IRC | 18:43 | |
*** novas0x2a|laptop has joined #openstack-dev | 18:43 | |
*** colinmcnamara has joined #openstack-dev | 18:45 | |
*** SergeyLukjanov has joined #openstack-dev | 18:45 | |
*** jcoufal has quit IRC | 18:45 | |
*** bswartz has quit IRC | 18:45 | |
*** corXi has quit IRC | 18:45 | |
*** wiliam_ has joined #openstack-dev | 18:46 | |
*** anteaya has quit IRC | 18:47 | |
*** vartom117 has joined #openstack-dev | 18:49 | |
*** devoid1 has joined #openstack-dev | 18:49 | |
*** dhellmann has joined #openstack-dev | 18:50 | |
vishy | adam_g: just noticed that the python-novaclient bash completion is broken in uca | 18:52 |
adam_g | vishy, for which pocket? grizzly? | 18:52 |
vishy | adam_g: grizzly | 18:53 |
vishy | ubuntu@test-instance:~$ ls -la /etc/bash_completion.d/nova.bash_completion | 18:53 |
vishy | lrwxrwxrwx 1 root root 53 Apr 9 07:02 /etc/bash_completion.d/nova.bash_completion -> /usr/share/doc/python-novaclient/nova.bash_completion | 18:53 |
*** devoid has quit IRC | 18:53 | |
vishy | This doesn't exist -> /usr/share/doc/python-novaclient/nova.bash_completion | 18:53 |
vishy | adam_g: ^^ | 18:53 |
*** devoid1 has quit IRC | 18:54 | |
*** maurosr_ has quit IRC | 18:54 | |
openstackgerrit | A change was merged to openstack-infra/devstack-gate: add database run check https://review.openstack.org/27370 | 18:56 |
adam_g | vishy, thanks, filing a bug. wonder if we can squeeze this in today before 13.04 goes out | 18:56 |
adam_g | zul, ^ | 18:57 |
*** devoid has joined #openstack-dev | 18:57 | |
*** zb has joined #openstack-dev | 18:58 | |
*** arbrandes has quit IRC | 18:58 | |
*** arbrandes has joined #openstack-dev | 18:58 | |
*** wiliam_ has quit IRC | 18:59 | |
*** zaneb has quit IRC | 19:00 | |
adam_g | vishy, https://bugs.launchpad.net/ubuntu/+source/python-novaclient/+bug/1172420 if you're interested | 19:01 |
uvirtbot | Launchpad bug 1172420 in python-novaclient "python-novaclient installs broken symlink /etc/bash_completion.d " [Undecided,New] | 19:01 |
vishy | adam_g: cool thanks :) | 19:02 |
*** medberry is now known as med_ | 19:03 | |
*** sarob has quit IRC | 19:03 | |
*** anniec has quit IRC | 19:03 | |
*** maurosr_ has joined #openstack-dev | 19:03 | |
devananda | garyk: pong | 19:05 |
zul | adam_g: grrr | 19:05 |
openstackgerrit | A change was merged to openstack/python-glanceclient: Prevent WantReadError when using https https://review.openstack.org/24916 | 19:07 |
*** dprince has quit IRC | 19:07 | |
*** dontalton has joined #openstack-dev | 19:09 | |
*** terry7 has quit IRC | 19:10 | |
*** wiliam_ has joined #openstack-dev | 19:11 | |
*** noslzzp has quit IRC | 19:14 | |
*** zackf has joined #openstack-dev | 19:16 | |
*** wiliam_ has quit IRC | 19:16 | |
*** dontalton is now known as dwt | 19:17 | |
openstackgerrit | A change was merged to openstack/keystone: Delete extra dict in token controller. https://review.openstack.org/27164 | 19:17 |
*** dwt is now known as dt | 19:18 | |
*** dt is now known as dontalton | 19:18 | |
*** epopt37 has quit IRC | 19:18 | |
*** noslzzp has joined #openstack-dev | 19:19 | |
*** kagan has quit IRC | 19:20 | |
*** colinmcnamara has quit IRC | 19:21 | |
*** colinmcnamara1 has joined #openstack-dev | 19:21 | |
topol | dolphm, termie, how does horizon decide that a user is an admin and thus when that user logs in they get the admin tab? | 19:22 |
*** zzs has joined #openstack-dev | 19:22 | |
*** bswartz has joined #openstack-dev | 19:23 | |
*** CaptTofu has quit IRC | 19:23 | |
*** epopt37 has joined #openstack-dev | 19:26 | |
*** alop has quit IRC | 19:28 | |
*** alop has joined #openstack-dev | 19:28 | |
*** wiliam_ has joined #openstack-dev | 19:29 | |
*** radez is now known as radez_g0n3 | 19:30 | |
termie | topol: in some crazy horizon way i would assume (actually probably a role?) | 19:30 |
topol | you just have to have a role called admin all lowercase, correct | 19:30 |
*** colinmcnamara1 has left #openstack-dev | 19:30 | |
termie | question or statement | 19:31 |
topol | just wanted to confirm, testing an active directory integration and name for the role is being set to some awful number | 19:31 |
topol | and horizon is saying no admin tab, pal | 19:31 |
termie | tell horizon to look for that number? does it have a policy.json type thing? | 19:32 |
topol | termie, asking for confirmation but highly confident | 19:32 |
termie | looking at the horizon code | 19:33 |
topol | termie, save you some time: https://bugs.launchpad.net/horizon/+bug/1161144 | 19:33 |
uvirtbot | Launchpad bug 1161144 in horizon "admin role must be called "admin"" [Wishlist,Confirmed] | 19:33 |
termie | topol: that doesn't really tell me where i would go to fix it | 19:34 |
termie | topol: so i'll find that real quicklike | 19:34 |
topol | termie, agreed, just wanted to make u aware | 19:34 |
*** kagan has joined #openstack-dev | 19:35 | |
topol | we should be able to fix using the role_name attribute mapping capability | 19:35 |
*** wiliam_ has quit IRC | 19:35 | |
topol | in keystone ldap configuration I would think. Will debug soon but wanted to ask first | 19:35 |
*** wiliam_ has joined #openstack-dev | 19:37 | |
termie | hmm, having trouble figuring out where the data is being turned into permissions | 19:39 |
*** davidlenwell has joined #openstack-dev | 19:40 | |
mordred | davidlenwell: meet dhellmann | 19:41 |
mordred | dhellmann: meet davidlenwell | 19:41 |
davidlenwell | hi dhellmann | 19:41 |
mordred | dhellmann: davidlenwell is working on some pecan/wsme-based api stuff | 19:41 |
*** afazekas has joined #openstack-dev | 19:41 | |
*** SergeyLukjanov has quit IRC | 19:41 | |
*** wiliam_ has quit IRC | 19:42 | |
davidlenwell | dhellmann: I'm finding that I'm spending a lot of time fighting with url mapping and the RestController.. would be fun to pick your brain before I go hack a bunch of my own decorators to make url maping not suck. | 19:44 |
*** datsun180b_ has joined #openstack-dev | 19:44 | |
*** networkstatic has quit IRC | 19:44 | |
*** SergeyLukjanov has joined #openstack-dev | 19:45 | |
*** rkukura has quit IRC | 19:45 | |
*** n0ano has joined #openstack-dev | 19:45 | |
*** andrew_plunk has quit IRC | 19:46 | |
*** datsun180b has quit IRC | 19:46 | |
*** datsun180b_ is now known as datsun180b | 19:46 | |
termie | hrmph | 19:47 |
termie | (ocl)termie@landlord:~/p/horizon % ack get_all_per [master] 12:46:28 | 19:47 |
termie | horizon/test/tests/base.py | 19:47 |
termie | 245: self.assertQuerysetEqual(self.user.get_all_permissions(), []) | 19:47 |
termie | that is the only place in the code base usingt hat? | 19:47 |
termie | did permissions get wrapped into django | 19:47 |
*** afazekas has quit IRC | 19:48 | |
*** psedlak has quit IRC | 19:48 | |
*** sandywalsh has quit IRC | 19:49 | |
termie | ohhhh | 19:50 |
termie | this shit is all in a separate project | 19:50 |
mordred | termie: funny - we were _just_ talking about openstack_django_auth earlier today and how it's all in a separate project | 19:53 |
mordred | (in a different channel) | 19:53 |
*** psedlak has joined #openstack-dev | 19:53 | |
termie | yeah, i guess unexpected | 19:53 |
*** wiliam_ has joined #openstack-dev | 19:53 | |
shardy | mordred: pong, sorry for slow response | 19:54 |
termie | the django permission system is a bit less featureful than the policy stuff | 19:54 |
*** bknudson has quit IRC | 19:54 | |
mordred | shardy: I've now forgotten what I was pinging you about ... | 19:54 |
*** adalbas has quit IRC | 19:54 | |
mordred | shardy: oh! join us in #openstack-infra | 19:54 |
termie | topol: i think your best bet for now is to make the ldap mapper look for that number and name it admin | 19:54 |
*** zb is now known as zaneb | 19:55 | |
termie | topol: because the horizon stuff is hardcoded to check for specific roles rather than specific permissions, it could probably be hacked to rely on an openstack policy thing so that i can be configured via typical methods | 19:55 |
termie | (they just equate roles with permissions, rather than having a list of roles that is required for a given permission) | 19:56 |
*** zb has joined #openstack-dev | 20:00 | |
ayoung | spzala why do you have a boolean: createdomain = False in https://review.openstack.org/#/c/27364/4/keystone/identity/backends/ldap/core.py | 20:00 |
topol | termie, I will look into that. Thanks | 20:00 |
*** drewlander has quit IRC | 20:00 | |
termie | topol: i'm not sure if there _is_ a mapping layer | 20:00 |
*** sarob has joined #openstack-dev | 20:00 | |
termie | topol: but at the very least you'll probably want to wrap one up | 20:00 |
*** afazekas has joined #openstack-dev | 20:01 | |
termie | topol: i posted on those bugs to propose using the openstack policy stuff | 20:01 |
termie | topol: and pinged gabriel on the work channels | 20:01 |
*** zaneb has quit IRC | 20:02 | |
*** jruzicka has quit IRC | 20:02 | |
*** zb is now known as zaneb | 20:02 | |
*** wiliam_ has quit IRC | 20:03 | |
*** wiliam_ has joined #openstack-dev | 20:04 | |
*** winston-d has quit IRC | 20:04 | |
*** afazekas has quit IRC | 20:05 | |
*** janisg has quit IRC | 20:05 | |
*** fsargent has left #openstack-dev | 20:06 | |
*** afazekas has joined #openstack-dev | 20:06 | |
*** sandywalsh has joined #openstack-dev | 20:07 | |
*** sarob_ has joined #openstack-dev | 20:07 | |
*** fsargent has joined #openstack-dev | 20:08 | |
*** fsargent has left #openstack-dev | 20:08 | |
*** woodspa has quit IRC | 20:08 | |
*** bknudson has joined #openstack-dev | 20:10 | |
*** sarob has quit IRC | 20:11 | |
*** aloga_ has joined #openstack-dev | 20:11 | |
topol | termie, well I have role _name_attribute and Im hoping I can set that to ou because my ou attribute does have the value of "admin". That should work but isnt. I will debug it soon | 20:12 |
*** janisg has joined #openstack-dev | 20:12 | |
*** CaptTofu has joined #openstack-dev | 20:13 | |
*** anniec has joined #openstack-dev | 20:13 | |
termie | topol: ldap is voodoo | 20:13 |
*** andrew_plunk has joined #openstack-dev | 20:14 | |
spzala | ayoung: the create domain method first checks if the values already exist via get() so without domain it won't let create default_domain | 20:14 |
*** dhellmann is now known as dhellmann-away | 20:14 | |
spzala | ayoung: affirm_unique check before we create | 20:15 |
ayoung | spzala, so you are trying to do an end run aroung calling get() | 20:15 |
BLZbubba | does grizzly have the ability to have per-tenant key pairs, instead of making each user manage their own set | 20:15 |
spzala | ayoung: yes i found that's the place I found good to return fake domain if one doesn't exist for default_domain | 20:16 |
ayoung | spzala, OK, lets assume there is no default domain. When you call create, it calls affirm_unqioe which calls get(). And, if you don't put special logic in there, the get will silently succeeed, short circuiting the create call? | 20:17 |
*** esmute has quit IRC | 20:17 | |
*** esmute has joined #openstack-dev | 20:18 | |
topol | hey folks, im trying devstack for the 1st time in a while and seeing the following error: "Failed to update the root certificate: /opt/stack/devstack/accrc/cacert.pem" Any idea what is happening? | 20:19 |
spzala | ayoung: no, it will let create the default domain because default_domain wasn't not there (if we don't think of new code added under get()) | 20:19 |
*** esmute has quit IRC | 20:20 | |
*** dolphm has quit IRC | 20:20 | |
termie | topol: not much of one, but i had lots of issues when i was using openstack 0.9.8 instead of 1.0+ | 20:20 |
termie | erm | 20:20 |
termie | openssl | 20:20 |
*** zb has joined #openstack-dev | 20:21 | |
spzala | ayoung: with our live ldap test, we do create default domain.. but in my logic if boolen is not there then it will not let it create default domain | 20:22 |
*** networkstatic has joined #openstack-dev | 20:22 | |
ayoung | spzala, let me reask the question: without the boolean "createdomain" the check affirm_unique(values) returns false because of the logic that says "return a fake domain"? | 20:22 |
*** zaneb has quit IRC | 20:22 | |
spzala | ayoung: yes, that's correct | 20:23 |
*** afazekas has quit IRC | 20:23 | |
topol | termie, what's the easiest way to update openssl on ubuntu to that version? | 20:23 |
ayoung | spzala, instead, put that logic in the create code, then...like this | 20:24 |
*** zb is now known as zaneb | 20:25 | |
termie | ... apt-get update; apt-get install openssl? | 20:25 |
termie | topol: you can do apt-cache show openssl to get your current version | 20:26 |
*** boris-42 has quit IRC | 20:27 | |
*** CaptTofu has quit IRC | 20:27 | |
*** boris-42 has joined #openstack-dev | 20:27 | |
topol | termie looks like version 1.0.1 so maybe I have a different issue | 20:27 |
termie | topol: sounds like it, sorry | 20:28 |
*** cp16net is now known as cp16net|away | 20:28 | |
*** CaptTofu has joined #openstack-dev | 20:28 | |
*** colinmcnamara has joined #openstack-dev | 20:29 | |
*** ladquin has joined #openstack-dev | 20:30 | |
ayoung | spzala, ok, it looks ugly most ways that I try it | 20:31 |
ayoung | spzala, perhaps just a clearer variable name is called for then | 20:31 |
*** colinmcnamara has quit IRC | 20:32 | |
*** colinmcnamara has joined #openstack-dev | 20:32 | |
*** fbo has joined #openstack-dev | 20:32 | |
spzala | ayoung: :) ok, but thanks for helping with it. Hmmm... you mean change the name of 'createdomain' variable to something better? | 20:32 |
ayoung | spzala, also, I think you might need to pass along the filter | 20:33 |
ayoung | self._ldap_get(id) does that know about the filter? | 20:34 |
*** oubiwann has quit IRC | 20:34 | |
ayoung | I think the fake_default case should be in the exception handling | 20:34 |
ayoung | spzala, and, yeah, make it something like creating_default_domain | 20:35 |
ayoung | I still think it is ugly...has to be something clearer | 20:35 |
spzala | ayoung: ah, true... yes it knows about filter | 20:35 |
*** cp16net|away is now known as cp16net | 20:35 | |
spzala | ayoung: so you mean move the "if id == DEFAULT_DOMAIN_ID: if not self.createdomain and self._ldap_get(id) is None: return self.get_fake_domain(id)" under exception handling? | 20:37 |
*** oubiwann has joined #openstack-dev | 20:39 | |
*** oubiwann is now known as Guest8933 | 20:39 | |
*** sarob_ has quit IRC | 20:41 | |
ayoung | spzala, yeah, it is a fallback mode. | 20:41 |
Ryan_Lane | topol: I owe you some input on read/write ldap, right? | 20:41 |
*** Guest8933 is now known as oubiwann_ | 20:41 | |
Ryan_Lane | spzala: feelings on the DIT I proposed? | 20:42 |
topol | Ryan_Lane, as long as you are sharing with spzala we are good. | 20:42 |
*** sarob has joined #openstack-dev | 20:42 | |
Ryan_Lane | ok | 20:42 |
ayoung | spzala, the variable should certaily have an leading underscore, as it is not to be used outside of internal member functions | 20:42 |
spzala | ayoung: OK, cool. Let me make that change and test it out. | 20:42 |
topol | we just want you happy | 20:42 |
Ryan_Lane | :D | 20:42 |
*** rnirmal has quit IRC | 20:42 | |
Ryan_Lane | I'm never happy with technology :) | 20:42 |
Ryan_Lane | I'm occasionally less annoyed by it | 20:42 |
topol | squeekiest wheel gets the grease... | 20:43 |
*** CaptTofu has quit IRC | 20:43 | |
spzala | Ryan_Lane: sorry but I didn't get chance to look at design you proposing.. trying to get done a high priority bug for backporting in grizzly | 20:44 |
* Ryan_Lane nods | 20:44 | |
Ryan_Lane | no worries | 20:44 |
spzala | Ryan_Lane: but I will do as soon as I can | 20:44 |
spzala | Ryan_Lane: :) thanks | 20:44 |
Ryan_Lane | let me know when you want to discuss read/write ldap as well | 20:44 |
Ryan_Lane | I'm managing LDAP entries via my web interface right now, but I wouldn't be opposed to letting keystone do it, if it did it sanely | 20:44 |
*** salv-orlando_ has joined #openstack-dev | 20:46 | |
*** salv-orlando has quit IRC | 20:46 | |
*** salv-orlando_ is now known as salv-orlando | 20:46 | |
*** READ10 has quit IRC | 20:46 | |
*** esmute has joined #openstack-dev | 20:48 | |
*** topol has quit IRC | 20:50 | |
*** sarob has quit IRC | 20:50 | |
*** colinmcnamara has quit IRC | 20:50 | |
spzala | Ryab_Lane: OK, yep that sounds great. I will be getting back to you on that soon. | 20:51 |
*** colinmcnamara has joined #openstack-dev | 20:51 | |
*** pcm__ has quit IRC | 20:52 | |
*** sarob has joined #openstack-dev | 20:55 | |
*** tzumainn has quit IRC | 20:56 | |
ayoung | Ryan_Lane, so you are planning on using multiple domains in LDAP, right? | 20:57 |
Ryan_Lane | nope | 20:57 |
Ryan_Lane | single domain | 20:57 |
ayoung | OPK, I think we should yank domains from LDAP | 20:57 |
Ryan_Lane | I don't think so | 20:57 |
ayoung | instead, each LDAP server is one domain | 20:57 |
Ryan_Lane | at all | 20:57 |
Ryan_Lane | o.O | 20:57 |
ayoung | and allow multiple LDAP servers | 20:57 |
Ryan_Lane | that makes no sense at all | 20:57 |
Ryan_Lane | that's a *rare* situation | 20:57 |
ayoung | People are not going to use it...except for Joe Savak | 20:57 |
ayoung | Ryan_Lane, actually, I am thinking a little bit more complex than that | 20:58 |
ayoung | I think that we should allow multiple backends, but a single backend could potentially hold multiple domains. | 20:58 |
ayoung | the thing is we need a central place to find domain info | 20:59 |
* Ryan_Lane shrugs | 20:59 | |
ayoung | take the M&A situation where one company has two really different LDAPs | 20:59 |
ayoung | or...more interesting | 20:59 |
*** gordc has quit IRC | 20:59 | |
Ryan_Lane | I'm fine with that. it's less work for me | 20:59 |
ayoung | take the case where you want to have most of your domain/users in your local (SQL) store | 20:59 |
*** zul has quit IRC | 20:59 | |
ayoung | but then you want to run a separate Keystone server for your extra special customer that insists on it | 21:00 |
*** gordc has joined #openstack-dev | 21:00 | |
ayoung | that custmoemr not only gets their own server, they get their own domain... | 21:00 |
Ryan_Lane | that't not domains, though | 21:00 |
Ryan_Lane | that's a separate keystone | 21:00 |
*** dhellmann-away is now known as dhellmann | 21:00 | |
Ryan_Lane | and can be configured completely seperately | 21:00 |
ayoung | 'twas in the blueprint i wrote origianlly called Federation, then Delegation and now https://blueprints.launchpad.net/keystone/+spec/distributed-signing | 21:00 |
Ryan_Lane | oh man. what a clusterfuck | 21:00 |
ayoung | Ryan_Lane, that is correct, but the dividing line is upon a domain boundary | 21:01 |
ayoung | yes, cluster is only half the word. | 21:01 |
Ryan_Lane | so, active directory went down this path ages ago | 21:01 |
Ryan_Lane | remember that? | 21:01 |
Ryan_Lane | with domains and forests? | 21:01 |
ayoung | No. I do nothing with AD | 21:01 |
*** cloudchimp has joined #openstack-dev | 21:01 | |
ayoung | But that does ring abell | 21:01 |
Ryan_Lane | "Those who cannot remember the past are condemned to repeat it" | 21:02 |
termie | forests? | 21:02 |
Ryan_Lane | we're walking right into the clusterfuck of active directory | 21:02 |
*** colinmcnamara has quit IRC | 21:02 | |
ayoung | Ryan_Lane, I think you misquoted "Those who cannot remember the past had a good bartender" | 21:02 |
Ryan_Lane | :D | 21:02 |
Ryan_Lane | active directory started by having single domains. those domains were used for a single organization | 21:03 |
Ryan_Lane | then they needed federation | 21:03 |
termie | i just reviewed the fuck out of keystone's pull requests | 21:03 |
Ryan_Lane | so that added forests (cross realm kerberos trusts) | 21:03 |
Ryan_Lane | err | 21:03 |
Ryan_Lane | so then they added forests* | 21:03 |
termie | once i have core i will unilaterally -2 anything with the word federation or forest in it | 21:04 |
*** litong01 has quit IRC | 21:04 | |
termie | just fyi | 21:04 |
Ryan_Lane | then they realized that organizations merge and that having completely separate data that needs to be merged together and it really, really sucked | 21:04 |
ayoung | termie, we are aware | 21:04 |
termie | like, that's going into a commit hook | 21:04 |
Ryan_Lane | their current recommendation is a single domain | 21:04 |
Ryan_Lane | where organizations are split by OU | 21:04 |
*** bswartz has quit IRC | 21:05 | |
Ryan_Lane | you're making domains into very separate things | 21:05 |
Ryan_Lane | maybe they are, maybe they aren't | 21:05 |
Ryan_Lane | but either way, I don't see good things coming from this | 21:06 |
ayoung | Ryan_Lane, I want a clean way to integrate two different backends for consumption by a single Open Stack deployment | 21:06 |
* Ryan_Lane nods | 21:06 | |
termie | which kinds of backends | 21:06 |
ayoung | We have a term, domains, that is the ownership grouping for users and tenant | 21:06 |
ayoung | s | 21:06 |
*** zb has joined #openstack-dev | 21:06 | |
*** CaptTofu has joined #openstack-dev | 21:06 | |
Ryan_Lane | note: http://www.mediawiki.org/wiki/Extension:LDAP_Authentication#Features | 21:06 |
termie | didn't we switch back to project? | 21:06 |
Ryan_Lane | I did this and I've regretted it ever since | 21:07 |
ayoung | yes, yes we did...sorry...users and projects | 21:07 |
stevemar | termie: yo | 21:08 |
termie | stevemar: i'm not here | 21:08 |
stevemar | termie: :) | 21:08 |
*** maurosr_ has quit IRC | 21:09 | |
Ryan_Lane | ayoung: I don't understand why people can't just run multiple keystone servers for separate LDAP infrastructures | 21:09 |
Ryan_Lane | you're already planning federation | 21:09 |
*** romcheg has joined #openstack-dev | 21:09 | |
*** zaneb has quit IRC | 21:09 | |
ayoung | Ryan_Lane, so...if they do, how do figure out where to validate the tokens? | 21:09 |
Ryan_Lane | it's going to be a nightmare to have both this and federation | 21:09 |
stevemar | termie: i wanted to know what the delegated auth blueprint says 'beta available' now? i was surprised anything happened to it since you hate launchpad | 21:09 |
ayoung | Ryan_Lane, that is really what I want...multiple LDAP servers == multiple Keystones. And that would be split on a domain boundary | 21:10 |
termie | stevemar: it was the hunk of code i linked to... lemme find it https://github.com/termie/keystone/tree/oauth | 21:10 |
termie | stevemar: i do hate launchpad though | 21:10 |
termie | stevemar: the blueprint crap was so to give people a false sense that i was going to play by the rules | 21:11 |
termie | stevemar: keep them docile | 21:11 |
ayoung | But, for example, Racksapce makes a new domain for each customer. But they don't want to run a Keystone server for each customer. THus, I'd be OK if domains were a SQL backend only entity | 21:11 |
ayoung | Ryan_Lane, and for multiple LDAP servers, which implies mutliple organizations, each gets their own, and each is implicitly a domain | 21:11 |
stevemar | termie: hmm, i remember seeing this in your github account about a month back | 21:12 |
ayoung | then Keystone is just a contract between them | 21:12 |
stevemar | termie: you just linked it up right? nothing new added? | 21:12 |
*** Guest99115 has joined #openstack-dev | 21:12 | |
termie | stevemar: correct, planning on working on it again Any Day now | 21:12 |
*** esp has joined #openstack-dev | 21:12 | |
termie | stevemar: spent all day so far code reviewing | 21:12 |
stevemar | termie: ah cool | 21:12 |
termie | to get up to speed on where this train is going | 21:12 |
Ryan_Lane | ayoung: I'm fine if domain doesn't exist in LDAP | 21:12 |
*** wiliam_ has quit IRC | 21:12 | |
Ryan_Lane | it makes life easier for me | 21:12 |
stevemar | termie: i hear ya, perks of being core :) | 21:12 |
*** terryh has quit IRC | 21:13 | |
termie | stevemar: i'm not core | 21:13 |
Ryan_Lane | and realistically, the use case is small enough that sticking that into the database is also fine | 21:13 |
*** terryh has joined #openstack-dev | 21:13 | |
stevemar | termie: perks of being almost-core? | 21:13 |
termie | stevemar: just reminding people they are going to have to start cleaning their clothes before coming to work | 21:13 |
termie | stevemar: or some sort of military analoguy | 21:13 |
Ryan_Lane | the structure will still be in ldap for folks using it | 21:13 |
*** martine has quit IRC | 21:13 | |
Ryan_Lane | the only thing I'm pushing back against is supporting multiple LDAP servers | 21:14 |
Ryan_Lane | it's a nightmare | 21:14 |
stevemar | termie: i'm getting the feeling that you will review tougher than bknudson | 21:14 |
Ryan_Lane | trust me. I've already gone down that road | 21:14 |
*** dolphm_ has joined #openstack-dev | 21:14 | |
*** wiliam_ has joined #openstack-dev | 21:14 | |
bknudson | I could learn some things in nitpicking from termie. | 21:14 |
termie | also in asking people to re-write their implementation | 21:15 |
Ryan_Lane | to be honest, it's going to be painful having the domain stuff in keystone's database as well, but less painful over all | 21:15 |
bknudson | actually, I've been holding back a bit... with termie here I won't feel bad about it. | 21:15 |
ayoung | Ryan_Lane, OK, so I can support that...it was my approach when the multiple backend thing was first suggested. | 21:15 |
Ryan_Lane | ayoung: if you do that, you need to have the LDAP config in the database | 21:15 |
Ryan_Lane | now you have config in two spots | 21:15 |
*** dontalton2 has joined #openstack-dev | 21:16 | |
*** bp__ has joined #openstack-dev | 21:16 | |
Ryan_Lane | or you need to configure the domains completely in the config file | 21:16 |
*** colinmcnamara has joined #openstack-dev | 21:16 | |
ayoung | So I would say yank domains from LDAP, multiple domains is a sql only construct. Fake out the domain in LDAP, and make it a way to get one Keystone to accept a token signed by another keystone in a way that is definitely not Federation | 21:16 |
bknudson | I thought LDAP config was in a format that allows more structure (JSON) | 21:16 |
Ryan_Lane | ayoung: you're going to need to change the API to do this | 21:17 |
ayoung | bknudson, that is just a blueprint. A pipedream. A will-o-the-wisp | 21:17 |
*** Guest99115 has quit IRC | 21:17 | |
*** bp__ has quit IRC | 21:17 | |
Ryan_Lane | and you're still going to need to include configuration in the database for this | 21:17 |
bknudson | the other alternative proposed was separate config file per domain. | 21:17 |
stevemar | termie: so, kind of a loaded question, what else need to be done for delegated_auth? the backends need to get done right? ldap and sql? | 21:18 |
*** dontalton has quit IRC | 21:18 | |
ayoung | bknudson, So, theproblem with domains is that they mess up basically every authentication mechanism out there | 21:18 |
Ryan_Lane | if it's going to be a config file, it can't be done through the api | 21:18 |
ayoung | most assume that if there is a domain, it is part of the user name, but nooo we are not allowed to do that | 21:18 |
Ryan_Lane | I'd say stick it in the policy, but that's a chicken and egg problem | 21:18 |
stevemar | termie: did you do any of the ec2 stuff in contrib? | 21:18 |
termie | stevemar: well there isn't going to be an ldap backend | 21:18 |
termie | stevemar: but yes, a backend of some sort to store things | 21:19 |
Ryan_Lane | why does everyone assume that people only want ldap for auth? | 21:19 |
Ryan_Lane | err | 21:19 |
ayoung | Ryan_Lane, the cloud providers need true multi-tenancy. And they need to be able to do that from the Web UI. Hence, give them the SQL backend | 21:19 |
Ryan_Lane | authentication | 21:19 |
Ryan_Lane | I don't even want keystone to do ldap auth | 21:19 |
termie | stevemar: it just needs to fill out the rest of the controller calls | 21:19 |
Ryan_Lane | I want it to pull information from ldap and for the authentication to be external | 21:20 |
ayoung | Ryan_Lane, becasue using it for authorizaton is the easy part | 21:20 |
termie | Ryan_Lane: you are welcome to write a backend to store some arbitrary tokens if you want | 21:20 |
jd__ | dolphm_: I can haz reviews on my 3 months old patches https://review.openstack.org/#/c/20404/ and https://review.openstack.org/#/c/20231/ ? :) | 21:20 |
Ryan_Lane | oh. this is about tokens? | 21:20 |
termie | Ryan_Lane: this is about delegated auth via oauth, so it is about storeing consumer key/secret and access key/secret stuff | 21:20 |
Ryan_Lane | ah. right. right. | 21:20 |
Ryan_Lane | nevermind then | 21:21 |
*** jakedahn has joined #openstack-dev | 21:21 | |
*** colinmcnamara has quit IRC | 21:21 | |
stevemar | Ryan_Lane: yeah, i was completely wrong when i mentioned ldap :) | 21:21 |
Ryan_Lane | that part shouldn't be in ldap | 21:21 |
termie | stevemar: anyway, i list the various urls that need to exist in that file | 21:21 |
ayoung | jd__, put me as a reviewer on anything you want me to review.... | 21:21 |
termie | stevemar: not all of them exist yet, the "hard" one is the one that creates the actual token | 21:21 |
Ryan_Lane | ayoung: anyway, there's no simple way to do this. the proposal I made is the most straightforward | 21:21 |
termie | stevemar: but that is mostly just because it will have the most code | 21:22 |
*** dolphm_ has quit IRC | 21:22 | |
jd__ | ayoung: you shouldn't have say that! thanks :-) | 21:22 |
*** romcheg has left #openstack-dev | 21:22 | |
Ryan_Lane | all of the information is in LDAP, it configures itself | 21:22 |
Ryan_Lane | when you start pulling some of that out, you need to add API extensions to configure the domains | 21:23 |
Ryan_Lane | or you need to have the configuration in files | 21:23 |
stevemar | termie: isn't that the part in OauthFlowMania? create_request_token? | 21:23 |
Ryan_Lane | maybe in the policy, but I think that would be difficult | 21:23 |
termie | stevemar: request token is an oauth thing | 21:23 |
termie | stevemar: creating the keystone token is more involved | 21:23 |
stevemar | termie: ohh | 21:23 |
termie | stevemar: flip through the gist i wrote again if you want to get used to the oauth terminology | 21:24 |
Ryan_Lane | ayoung: if you put the config into files, then you can't create domains through the api | 21:24 |
Ryan_Lane | ayoung: if you add api methods just for LDAP, then it adds implementation specific stuff to the api | 21:24 |
Ryan_Lane | which sucks | 21:24 |
ayoung | Ryan_Lane, I think I am OK with not being able to create domains | 21:25 |
*** adjohn has joined #openstack-dev | 21:25 | |
Ryan_Lane | can you create domains using the api with the sql backend? | 21:25 |
ayoung | Ryan_Lane, yes | 21:25 |
Ryan_Lane | with my approach you still can in LDAP | 21:25 |
ayoung | Ryan_Lane, I mean, your approach makes sense, it just should never be done. | 21:25 |
Ryan_Lane | without modification to the API and without needing to restart the keystone server | 21:26 |
ayoung | I mean, it is the forest thing all over again, no? | 21:26 |
*** aelkikhia has left #openstack-dev | 21:26 | |
Ryan_Lane | no, my approach is the opposite of the forest approach | 21:26 |
Ryan_Lane | it's a single server with organizations separated by OU | 21:26 |
ayoung | Ryan_Lane, you were saying each domain has its own subtree? No? | 21:26 |
Ryan_Lane | the forest approach is different LDAP servers, connected through a federated trust | 21:27 |
Ryan_Lane | for a single organization | 21:27 |
ayoung | Ah...so you think we should have multiple domains in LDAP, just implemented as multiple OUs? ARe you planning on using that? | 21:27 |
stevemar | termie: so there is create_request_token, create_access_token (both oauth), then authenticate (should create keystone token)? | 21:27 |
Ryan_Lane | I'm not planning on using it, I'm just saying the approach I've designed is the simplest one on the table, currently | 21:28 |
termie | stevemar: yup | 21:28 |
Ryan_Lane | and is backwards compatible | 21:28 |
Ryan_Lane | and works with the current API as designed | 21:28 |
termie | i like Ryan_Lane usually, so i'ma guess he's on to something | 21:29 |
Ryan_Lane | if you guys decide not to implement domains in ldap that's also fine with me | 21:29 |
Ryan_Lane | because it's less work for me :) | 21:29 |
*** zbitter has joined #openstack-dev | 21:29 | |
openstackgerrit | A change was merged to openstack/nova: Add missing test for db.instance_type_destroy method https://review.openstack.org/27408 | 21:30 |
spzala | ayoung: with the changes it looks much better now, I think. I am updating the patch for review after running full test. | 21:30 |
ayoung | Ryan_Lane, OK, so I think you are a sane person. I think that what you spec'ed out is exactly how I though domains should be implemented in LDAP. I am just not sure that it makes sense to put in the effort to implement domains in ldap. But the current approach is as wrong as a football-bat. | 21:30 |
stevemar | termie: so still have to implement get_authorization_pin and, authorize_request_token, and create_access_token... plus the backend sql work for storing stuff things (read the gist for that part) | 21:30 |
openstackgerrit | A change was merged to openstack/nova: Move db.instance_type_extra_specs_* to db.instance_type_* methods https://review.openstack.org/27409 | 21:30 |
termie | stevemar: sounds about right | 21:31 |
stevemar | termie: cool - sorry about the questions, it helps to clear things up | 21:31 |
termie | stevemar: no prawwblem | 21:31 |
*** zb has quit IRC | 21:32 | |
Ryan_Lane | ayoung: I'm open to other designs, but so far I haven't seen a really sane one :) | 21:33 |
*** gordc has quit IRC | 21:36 | |
*** digitalsanctum has quit IRC | 21:39 | |
*** tzumainn has joined #openstack-dev | 21:44 | |
spzala | ayoung: I have just updated the patch! | 21:46 |
*** jbresnah has quit IRC | 21:47 | |
*** dhellmann is now known as dhellmann-away | 21:49 | |
ayoung | spzala, drop and just you the value in line DEFAULT_DOMAIN_ID = CONF.identity.default_domain_id | 21:50 |
*** colinmcnamara has joined #openstack-dev | 21:50 | |
ayoung | THis is not a constant, and no need to introduce one | 21:50 |
*** colinmcnamara has quit IRC | 21:51 | |
ayoung | spzala, It is not a Fake domain, it is a default domain from code. | 21:51 |
*** HenryG has quit IRC | 21:52 | |
*** romcheg1 has joined #openstack-dev | 21:53 | |
spzala | ayoung: sorry about that, will not use DEFAULT_DOMAIN_ID variable. | 21:53 |
ayoung | spzala, Let see if we can come up with a more accurate description of what we are doing | 21:53 |
*** jbresnah has joined #openstack-dev | 21:53 | |
*** esp has left #openstack-dev | 21:54 | |
ayoung | {'id': id, 'name': 'Default', 'enabled': True, | 21:54 |
ayoung | 995 'description': 'The default domain.'} | 21:54 |
*** kreddy has quit IRC | 21:54 | |
*** fbo has quit IRC | 21:55 | |
ayoung | spzala, I think this is going to be the norm for most people using LDAP. How would you say it then? | 21:55 |
spzala | ayoung: Yes, that looks good. | 21:55 |
spzala | ayoung: as you said, it's fake to us but it's a default | 21:56 |
*** michchap has quit IRC | 21:56 | |
spzala | ayoung: but it's a fake default | 21:56 |
*** ewindisch has quit IRC | 21:56 | |
spzala | ayoung: confusing :) | 21:56 |
*** CaptTofu has quit IRC | 21:56 | |
ayoung | spzala, no, it is not fake | 21:57 |
ayoung | the domain is real. It is just not recorded in the LDAP server | 21:57 |
*** vkmc has joined #openstack-dev | 21:57 | |
*** vkmc has quit IRC | 21:57 | |
*** vkmc has joined #openstack-dev | 21:57 | |
ayoung | implied might be a better term. Or inferred. | 21:58 |
spzala | ayoung: ah..nice.. that's better way to say | 21:58 |
*** redbeard2 has quit IRC | 21:58 | |
*** sarob has quit IRC | 22:00 | |
*** jayg is now known as jayg|g0n3 | 22:00 | |
ayoung | spzala, how about just call it "our domain" ? | 22:01 |
*** romcheg has joined #openstack-dev | 22:01 | |
spzala | ayoung: I guess it's ok to keep the method and variable name with fake in it, to keep them differentiated. ? | 22:01 |
spzala | ayoung: :) hmmm | 22:02 |
ayoung | meh | 22:02 |
*** romcheg1 has quit IRC | 22:02 | |
ayoung | spzala, so we probably should support list as well.... | 22:02 |
ayoung | spzala, something like if list is None, return [default] | 22:03 |
ayoung | spzala, otherwise, list will return nothing, but then we will have a default....then again, that logic is wrong...ugh I hate this! | 22:04 |
ayoung | cuz then if you add *any* domain you will not see the default in yourl ist. | 22:05 |
*** jakedahn has quit IRC | 22:05 | |
* ayoung goes of into the corner and sulks | 22:05 | |
ayoung | off | 22:05 |
spzala | ayoung: :) | 22:05 |
spzala | ayoung: true but I feel like since we making this changes just to overcome a specific problem, aren't we ok sticking with it? | 22:06 |
spzala | ayoung: list domains may not create a problem | 22:06 |
ayoung | spzala, I'd rather backport one fix than two | 22:06 |
ayoung | And I'd rather get it right this time, as opposed to putting a band-aid on a sucking chest wound | 22:07 |
*** SergeyLukjanov has quit IRC | 22:08 | |
spzala | ayoung: agree with it.. I said that thinking that list_domains is not giving any problem with the way it's | 22:08 |
*** stevemar has quit IRC | 22:08 | |
spzala | ayoung: but again my thinking's not that far :) | 22:09 |
ayoung | spzala, I'm almost thinking that you can't create another domain unless you have created the default domain first.... | 22:10 |
ayoung | spzala, ok, time to go play with my son...much more important than this. | 22:10 |
spzala | ayoung: :) | 22:11 |
spzala | ayoung: agree | 22:11 |
*** gordc has joined #openstack-dev | 22:11 | |
spzala | ayoung: just if its ok, how old is he? | 22:11 |
*** romcheg has quit IRC | 22:11 | |
spzala | ayoung: I have two and younger one is 5 | 22:11 |
spzala | ayoung: OK, so please let me know if you think that we definitely need to go for list_domains as well. In testing, I could create domains without creating default domain | 22:12 |
*** datsun180b has quit IRC | 22:13 | |
*** melwitt has quit IRC | 22:13 | |
spzala | ayoung: enjoy family time! Talk to you later! | 22:14 |
*** ek6_ has quit IRC | 22:16 | |
*** sacharya has quit IRC | 22:17 | |
*** kbringard has quit IRC | 22:19 | |
*** spzala has quit IRC | 22:20 | |
termie | mordred: do you know what url gerrit is redirecting you to for signing in with launchpad | 22:20 |
termie | mordred: trying to write a tiny service that consumes launchpad openid | 22:20 |
termie | mordred: but the launchpad docs want you to redirect to https://launchpad.net/~your-nick | 22:21 |
termie | mordred: and i don't think gerrit knows my nick | 22:21 |
*** bdpayne has quit IRC | 22:22 | |
termie | mordred: oh, managed to guess right and use https://login.launchpad.net | 22:22 |
*** dims has quit IRC | 22:23 | |
*** cloudchimp has quit IRC | 22:24 | |
*** erfanian has joined #openstack-dev | 22:24 | |
*** CaptTofu has joined #openstack-dev | 22:24 | |
*** aloga_ has quit IRC | 22:25 | |
*** erfanian has quit IRC | 22:25 | |
*** crank has quit IRC | 22:26 | |
*** mrodden has quit IRC | 22:27 | |
*** erfanian has joined #openstack-dev | 22:28 | |
*** bdpayne has joined #openstack-dev | 22:28 | |
*** bknudson has quit IRC | 22:30 | |
*** crank has joined #openstack-dev | 22:31 | |
*** erfanian has quit IRC | 22:33 | |
*** sarob has joined #openstack-dev | 22:34 | |
*** boris-42 has quit IRC | 22:34 | |
*** afazekas has joined #openstack-dev | 22:34 | |
*** vartom117 has quit IRC | 22:35 | |
*** chuck_ has joined #openstack-dev | 22:36 | |
*** digitalsanctum has joined #openstack-dev | 22:37 | |
*** matiu has joined #openstack-dev | 22:37 | |
*** ek6 has joined #openstack-dev | 22:37 | |
*** dontalton2 has quit IRC | 22:39 | |
*** alop has quit IRC | 22:39 | |
*** afazekas has quit IRC | 22:39 | |
*** dims has joined #openstack-dev | 22:40 | |
*** henrynash_ has joined #openstack-dev | 22:41 | |
*** jakedahn has joined #openstack-dev | 22:41 | |
*** henrynash has quit IRC | 22:42 | |
*** henrynash_ is now known as henrynash | 22:42 | |
*** alop has joined #openstack-dev | 22:42 | |
*** jakedahn has quit IRC | 22:42 | |
*** jakedahn has joined #openstack-dev | 22:42 | |
*** ladquin is now known as ladquin_brb | 22:43 | |
openstackgerrit | A change was merged to openstack/oslo-incubator: Add a MAINTAINERS file https://review.openstack.org/27379 | 22:43 |
*** terry7 has joined #openstack-dev | 22:45 | |
*** devoid has quit IRC | 22:47 | |
*** ek6 has quit IRC | 22:48 | |
*** kvad_ has quit IRC | 22:51 | |
*** jimfehlig has quit IRC | 22:51 | |
*** ewindisch has joined #openstack-dev | 22:51 | |
*** eharney has quit IRC | 22:52 | |
*** digitalsanctum has quit IRC | 22:52 | |
*** markwash_ has joined #openstack-dev | 22:54 | |
*** yidclare has quit IRC | 22:54 | |
*** reed has quit IRC | 22:55 | |
*** markwash has quit IRC | 22:56 | |
*** markwash_ is now known as markwash | 22:56 | |
*** codekobe has left #openstack-dev | 22:56 | |
*** bswartz has joined #openstack-dev | 22:57 | |
*** kreddy has joined #openstack-dev | 22:59 | |
*** ewindisch has quit IRC | 22:59 | |
*** jsindy has quit IRC | 22:59 | |
*** gordc has quit IRC | 22:59 | |
*** plemahieu has joined #openstack-dev | 23:02 | |
*** bdpayne has quit IRC | 23:03 | |
*** ewindisch has joined #openstack-dev | 23:03 | |
*** tomoe__ has quit IRC | 23:04 | |
*** erfanian has joined #openstack-dev | 23:05 | |
*** sacharya has joined #openstack-dev | 23:05 | |
*** ladquin_brb is now known as ladquin | 23:06 | |
*** sudorandom has quit IRC | 23:08 | |
*** ewindisch has quit IRC | 23:09 | |
*** markwash has quit IRC | 23:09 | |
*** jaypipes has quit IRC | 23:12 | |
*** jamielennox|away is now known as jamielennox | 23:12 | |
*** boris-42 has joined #openstack-dev | 23:13 | |
*** shardy is now known as shardy_afk | 23:13 | |
*** alunduil has joined #openstack-dev | 23:14 | |
*** FunnyLookinHat has quit IRC | 23:16 | |
*** boris-42 has quit IRC | 23:17 | |
*** rmohan has quit IRC | 23:17 | |
*** rmohan has joined #openstack-dev | 23:17 | |
*** flaper87 has quit IRC | 23:18 | |
*** garyTh has quit IRC | 23:19 | |
*** giulivo has quit IRC | 23:20 | |
*** hemna is now known as hemnafk | 23:22 | |
dims | garyk pong | 23:22 |
openstackgerrit | A change was merged to openstack/nova: Add unit tests for /db/api.py#fixed_ip_* https://review.openstack.org/27200 | 23:22 |
*** reed has joined #openstack-dev | 23:23 | |
*** lloydde has quit IRC | 23:23 | |
*** CaptTofu has quit IRC | 23:23 | |
*** yidclare has joined #openstack-dev | 23:24 | |
*** markwash has joined #openstack-dev | 23:25 | |
*** CaptTofu has joined #openstack-dev | 23:28 | |
openstackgerrit | A change was merged to openstack/nova: Import and convert to oslo loopingcall. https://review.openstack.org/26448 | 23:29 |
*** gongysh has joined #openstack-dev | 23:30 | |
*** rcleere has quit IRC | 23:30 | |
*** adjohn has quit IRC | 23:31 | |
*** terryh has quit IRC | 23:32 | |
*** mrodden has joined #openstack-dev | 23:33 | |
*** ayoung has quit IRC | 23:34 | |
*** andrew_plunk has quit IRC | 23:35 | |
*** ewindisch has joined #openstack-dev | 23:36 | |
*** markwash has quit IRC | 23:37 | |
*** erfanian has quit IRC | 23:38 | |
*** ewindisch has quit IRC | 23:38 | |
*** psedlak has quit IRC | 23:40 | |
*** erfanian has joined #openstack-dev | 23:40 | |
*** markmcclain has quit IRC | 23:47 | |
openstackgerrit | A change was merged to openstack/oslo-incubator: Add missing LICENSE file https://review.openstack.org/27377 | 23:54 |
*** bdpayne has joined #openstack-dev | 23:55 | |
openstackgerrit | A change was merged to openstack/oslo-incubator: Add enforcement for foreign key contraints with sqlite https://review.openstack.org/27320 | 23:55 |
openstackgerrit | A change was merged to openstack/oslo-incubator: Add middleware to limit size of HTTP requests. https://review.openstack.org/27285 | 23:55 |
*** markwash has joined #openstack-dev | 23:55 | |
openstackgerrit | A change was merged to openstack/oslo-incubator: Avoid calling sudo in install_venv_common.py. https://review.openstack.org/27278 | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!