Tuesday, 2013-09-03

*** michchap has quit IRC00:01
*** michchap has joined #openstack-dev00:01
*** stevemar has joined #openstack-dev00:07
*** colinmcnamara has quit IRC00:08
*** briancurtin has quit IRC00:12
*** epim has joined #openstack-dev00:13
*** michchap has quit IRC00:13
*** jhesketh__ has joined #openstack-dev00:14
*** primeministerp has joined #openstack-dev00:14
*** michchap has joined #openstack-dev00:14
*** danwent has joined #openstack-dev00:16
*** epim has quit IRC00:17
*** mars has quit IRC00:17
*** sungju has joined #openstack-dev00:22
*** sungju has quit IRC00:22
*** rkukura has quit IRC00:23
*** rkukura has joined #openstack-dev00:24
*** rkukura has joined #openstack-dev00:24
*** danwent has quit IRC00:25
*** sushils has quit IRC00:26
*** CaptTofu has quit IRC00:27
*** CaptTofu has joined #openstack-dev00:27
*** epim has joined #openstack-dev00:34
*** danwent has joined #openstack-dev00:36
*** derekh has quit IRC00:39
*** pcm__ has quit IRC00:42
*** dina_belova has joined #openstack-dev00:44
*** otherwiseguy has joined #openstack-dev00:45
*** qwang10_ is now known as shanewang_away00:48
*** dina_belova has quit IRC00:49
*** flaper87 is now known as flaper87|afk00:50
*** faramir has joined #openstack-dev00:50
*** danwent has quit IRC00:51
*** salv-orlando has quit IRC00:51
*** briancurtin has joined #openstack-dev00:51
*** dolphm has joined #openstack-dev00:52
anteayahey dolphm http://anteaya.info/blog/2013/09/01/installing-devstack-with-vagrant/00:53
*** danwent has joined #openstack-dev00:54
*** zul has quit IRC00:57
*** zul has joined #openstack-dev00:57
*** markmcclain has quit IRC01:01
*** CaptTofu has quit IRC01:11
*** CaptTofu has joined #openstack-dev01:11
*** insanidade has joined #openstack-dev01:12
*** CaptTofu has quit IRC01:13
*** kevinconway has quit IRC01:13
*** mikal has quit IRC01:13
*** CaptTofu has joined #openstack-dev01:14
*** mikal has joined #openstack-dev01:14
*** Mandell has joined #openstack-dev01:15
*** erkules_ has joined #openstack-dev01:15
*** erkules has quit IRC01:18
*** danwent has quit IRC01:19
*** yjiang5 has joined #openstack-dev01:21
insanidadehi all. I have a low memory machine in which I have vagrant + virtualbox with a  devstack setup. Due to that low memory limitation, keystone takes too long trying to start up and then fails due to timeout. I'd like to increase that timeout (that would be ok for the time being). Would anyone let me know where that should be set ?01:23
*** yaguang has joined #openstack-dev01:26
*** Ruetobas has quit IRC01:27
*** kui has joined #openstack-dev01:27
*** Ruetobas has joined #openstack-dev01:28
*** kushi_ has joined #openstack-dev01:31
*** kui has quit IRC01:32
anteayathe timeout won't save you insanidade01:33
anteayadevstack needs 1.2G memory minimum or other things will fail01:33
insanidadeanteaya: yeah...I'm searching and getting to that conclusion as well.01:33
anteayaI bashed my head against that wall for a week01:34
anteayado you have any option of giving the vm 1.2G minimum?01:34
insanidadeanteaya: I have that same setup on a windows machine and it runs. The difference is that the host machine has 4G.01:35
anteayamy latest blog post shows how to increase the RAM to the vagrant vm by editing the Vagrantfile01:35
anteayathat would be the reason01:35
insanidadehere, I have a linux machine with 2G. 1 for the host and the remaining one for virtualbox.01:35
anteayayeah01:35
anteayacan you increase the ram to the linux machine?01:35
*** yjiang5 has quit IRC01:36
insanidadeanteaya: yes, I've set my memory size in the vagrant file in the other setup (windows)01:36
anteayagreat01:36
insanidadeanteaya: I can try it here(linux env with 2G total) but things will probably go really slow.01:37
anteayathere are somethings that will run on devstack with 1G ram to the vm, but not neutron and keystone01:37
anteayatry to give the vm at least 1.2G01:37
insanidadeanteaya: I'll try it. I'm not able to encrease the amount of memory for the physical host now. This is an old box and I'm thinking about setiing up something totally new for my lab.01:41
anteayafair enough01:41
anteayahow is your flight?01:41
*** dina_belova has joined #openstack-dev01:45
*** mars has joined #openstack-dev01:45
*** mars has joined #openstack-dev01:45
insanidadeold machine. core 2 quad, 2G ram, 200G hard disk. Gentoo for the host, vagrant + virtualbox (CentOs 6 as guest)01:49
insanidadejust increased vm ram to 1.2G01:49
*** dina_belova has quit IRC01:49
insanidadeanteaya: do you know any training/boot camps for developers? Most of the classes I see are fundamentals.01:50
anteayahave you considered ubuntu precise as the guest?01:51
insanidadeanteaya: I haven't.01:51
anteayadevstack runs better on it, I do believe01:51
anteayaa training/boot camp for new openstack contributors you mean?01:51
insanidadeanteaya: yes. or for individuals. independent developers too.01:52
anteayahmmm, there are some companies running various training programs, I think mirantis has something and rackspace might have something too01:52
anteayaI don't know the curriculum or the instructors so I can't make a recommendation01:53
insanidadeI know they have some introductory classes, most of them on descriptions of each service and on how to install them.01:53
anteayayeah01:53
insanidadeThere's a lot of documentation around.01:53
anteayayes01:53
anteayaI don't know if there is one that I can say is geared toward new contributors though01:54
insanidadeBut I miss some guide on how to develop.01:54
insanidadeit's kind of an adventure :)01:55
*** marun has quit IRC01:55
insanidadeyour post about pdb was key for me.01:55
anteayaI'm so glad01:55
insanidadeso are other blogs.01:55
anteaya:D01:55
anteayaoh yes01:55
anteayathis is a feed of openstack blogs: http://planet.openstack.org/01:56
anteayayou will find many writers writing about openstack topics01:56
insanidadeI spent the whole day debugging neutron. I managed to instantiate a client but all next commands require new auth (just like the other services in Openstack) and I was not able to make it read my auth data.01:56
pleia2insanidade: do you have any openstack groups around you? the ones where I am do a lot of workshops and things targeted at all levels, users and developers01:56
morganfainbergdolphm, ping, have a question for you.01:57
insanidadepleia2: afaik, there's only one small group in the south of my country.01:57
morganfainbergdolphm, if you're not too busy/enjoying a day off.01:57
pleia2insanidade: ah, might be worth asking them too anyway, they may know of local options :)01:57
insanidadepleia2: things just started here. I believe I'm the only developer I know who's trying Openstack.01:57
*** d34dh0r53 has joined #openstack-dev01:59
*** d34dh0r53 has quit IRC02:01
*** colinmcnamara has joined #openstack-dev02:03
*** colinmcnamara has quit IRC02:07
insanidadepleia2: I'll try contacting them but I know they are a small group who represents a company in the us for some classes and lectures.02:07
insanidadepleia2: that's a good start, tough.02:07
*** dolphm has quit IRC02:08
insanidadeanteaya: thanks for the feed of blogs02:08
anteayanp02:08
anteayawelcome to the group02:08
*** nati_ueno has quit IRC02:09
morganfainberginsanidade, anteaya is awesome like that.02:09
anteaya*blush*02:09
*** nati_ueno has joined #openstack-dev02:09
*** nati_ueno has quit IRC02:09
*** nati_ueno has joined #openstack-dev02:10
insanidadeanteaya: keystone keeps refusing to start. vbox now with a bit more than 1.2G02:10
anteayainsanidade: can you post some output?02:11
morganfainberginsanidade, how is keystone refusing to start? output (paste.openstack.org for copy/paste) would be useful.02:11
*** pabelanger has joined #openstack-dev02:13
insanidadeanteaya, morganfainberg: I'm trying to gatter some output. One sec, please. (By the way, it's about a timeout)02:13
insanidade(seems to be,actually)02:13
*** stevemar has quit IRC02:15
anteayak02:15
*** kushi_ has quit IRC02:17
insanidadeanteaya, morganfainberg : I tried the command that starts up keystone and the output is:02:18
insanidadehttp://paste.openstack.org/show/45663/02:18
morganfainberginsanidade, ah, you're missing a module it looks like.  not sure how you got that far without paste installed.  is this in a devstack or just trying to start keystone right after a clone?02:19
*** egallen has quit IRC02:19
*** shang has joined #openstack-dev02:20
insanidademorganfainberg: devstack. funny. I've tried the same set up on another vm (vagrant, virtualbox, same box, same conf)02:20
*** rfolco has joined #openstack-dev02:20
*** xchu has joined #openstack-dev02:21
morganfainberginsanidade, it isn't finding the "paste" module.  That is very odd, devstack usually installs everything you need.  can you provide the output of `pip freeze` please?  i'm curious if somehow pip hasn't installed much of anything you need.02:21
*** shakayumi has quit IRC02:21
morganfainberginsanidade, the other option would be to re-stack (run stack.sh again).  should resolve any odd dependencies.02:22
morganfainbergbut i find it odd you got that far w/o paste installed.02:22
*** Ruetobas has quit IRC02:23
insanidademorganfainberg: should I yum paste ? I've been repeating stack.sh for hours :) Same issue everytinme keystone tries to start up. Anyway, I'll show you my pip freeze output.02:24
anteayamorganfainberg: updated: http://anteaya.info/blog/2013/09/01/installing-devstack-with-vagrant/02:24
morganfainberginsanidade, pip freeze first. lets not resorte to pasting yum output yet ;)02:24
morganfainberganteaya, `vagrant resume` can be used in lieu of vagrant up --no-provision02:26
morganfainberganteaya, but it looks good :)02:27
anteayamorganfainberg: all add that, I haven't had good success with vagrant resume on my system but I'll put it in02:27
anteayaand thanks02:27
insanidademorganfainberg: pip output: http://paste.openstack.org/show/45664/02:27
anteayas/all/I'll02:27
morganfainberganteaya, i rarely use resume, so i'll trust you on that front02:27
morganfainberganteaya, i usually vagrant up, do work, vagrant destroy02:27
*** CaptTofu has quit IRC02:29
*** kushal has joined #openstack-dev02:29
*** nati_ueno has quit IRC02:30
*** CaptTofu has joined #openstack-dev02:30
anteayamorganfainberg: I added it, so the reader can choose for themselves02:30
anteayaoptions rock02:30
anteayaadded02:30
morganfainberginsanidade, i don't see how devstack got this far, everything requires "paste".  and clearly it is missing from your pip-requires.02:30
*** colinmcnamara has joined #openstack-dev02:30
morganfainbergerm02:30
morganfainbergpip freeze02:30
*** nati_ueno has joined #openstack-dev02:30
insanidademorganfainberg: should I yum install it ?02:30
anteayainsanidade: when was the last time you cloned devstack?02:31
insanidadeanteaya: in this machine, one week ago.02:32
morganfainberganteaya, that should be recent enough.02:32
anteayaokay02:33
insanidadehaven't done anything different from the other vm where I run devstack.02:33
insanidadewell, only vagrant is different.02:34
*** nati_ueno has quit IRC02:35
morganfainberginsanidade, hrm.  i am baffled.  you could just `sudo pip install paste` for an immediate fix. but02:35
morganfainbergnot sure how old/new the yum version would be.02:36
*** radsy_ has joined #openstack-dev02:37
*** radsy has quit IRC02:39
anteayaI have to pack it in for the night02:42
anteayapleasure to work with you both insanidade and morganfainberg02:43
anteayatalk to you later02:43
morganfainberganteaya, take care02:43
*** dina_belova has joined #openstack-dev02:45
insanidadeanteaya: see ya. Thanks.02:46
*** radsy_ is now known as radsy02:46
*** anteaya has quit IRC02:47
*** kushal has quit IRC02:48
*** rfolco has quit IRC02:48
insanidadeI think I'll git pull this devstack folder I have here...02:48
*** dina_belova has quit IRC02:50
*** amotoki has joined #openstack-dev02:50
*** terriyu has joined #openstack-dev02:52
*** pixelbeat has quit IRC02:52
*** faramir has quit IRC02:53
*** sthaha has joined #openstack-dev02:53
*** sthaha has quit IRC02:53
*** sthaha has joined #openstack-dev02:53
*** phschwartz has quit IRC02:56
*** briancurtin has quit IRC02:58
*** VeggieMeat has quit IRC02:58
*** phschwartz has joined #openstack-dev02:59
*** VeggieMeat has joined #openstack-dev02:59
*** oubiwann has quit IRC02:59
*** garyk1 has joined #openstack-dev02:59
*** nati_ueno has joined #openstack-dev03:00
*** garyk has quit IRC03:00
*** briancurtin has joined #openstack-dev03:01
*** sthaha has quit IRC03:02
*** oubiwann has joined #openstack-dev03:02
*** oubiwann is now known as Guest6801503:02
*** sthaha has joined #openstack-dev03:02
*** epim_ has joined #openstack-dev03:05
*** epim has quit IRC03:05
*** epim_ is now known as epim03:05
*** stevemar has joined #openstack-dev03:06
*** nati_uen_ has joined #openstack-dev03:06
*** nati_uen_ has quit IRC03:06
*** colinmcnamara has quit IRC03:06
*** nati_uen_ has joined #openstack-dev03:06
*** colinmcnamara has joined #openstack-dev03:07
*** colinmcnamara1 has joined #openstack-dev03:08
*** colinmcnamara has quit IRC03:08
*** garyk1 has quit IRC03:08
*** faramir has joined #openstack-dev03:09
*** nati_ueno has quit IRC03:09
*** paragan has joined #openstack-dev03:09
*** paragan has joined #openstack-dev03:09
*** faramir has quit IRC03:09
*** faramir has joined #openstack-dev03:10
*** faramir has joined #openstack-dev03:11
*** faramir has joined #openstack-dev03:12
*** faramir has quit IRC03:15
*** faramir has joined #openstack-dev03:15
insanidademorganfainberg: are you there ?03:16
morganfainberginsanidade, i am.03:16
*** faramir has quit IRC03:16
*** faramir has joined #openstack-dev03:16
insanidademorganfainberg: please let me show you something03:17
morganfainberginsanidade, sure03:17
insanidademorganfainberg: http://paste.openstack.org/show/45665/03:17
insanidademorganfainberg: last lines03:17
morganfainberginsanidade, i think you have an unhappy VM.03:18
morganfainberginsanidade, this CentOS, Fedora, Scientific?03:18
insanidademorganfainberg: centOs03:18
*** garyk has joined #openstack-dev03:18
*** amerine has quit IRC03:19
*** amerine has joined #openstack-dev03:19
morganfainberginsanidade, yeah something very odd in that VM.  your shared library there is having issues.03:20
morganfainberginsanidade, i'm not sure what to tell you, you could try and re-install greenlet.03:21
insanidademorganfainberg: that's annoying. I'll create another machine if that last attempt does not succeed.03:24
morganfainberginsanidade, yeah, something seems off with this VM, the kinds of issues you're running into are things i've not seen in any of my VMs over the last ~1.5 years.  but I haven't worked with CentOS in this regard.  mostly Fedora and Ubuntu.03:25
*** rfolco has joined #openstack-dev03:26
*** nati_ueno has joined #openstack-dev03:29
*** kushal has joined #openstack-dev03:32
insanidademorganfainberg: the weird thing is that I've set a very similar environment on another host machine. vagrant + virtualbox, using the same .box file (CentOs) and just clonned devstack repo.03:32
morganfainberginsanidade, it's an odd problem.03:36
*** dims has quit IRC03:36
*** edmund has quit IRC03:36
insanidademorganfainberg: anyway. thanks for the support.03:39
*** SergeyLukjanov has joined #openstack-dev03:40
*** pabelanger has quit IRC03:43
*** dosaboy has joined #openstack-dev03:44
*** dina_belova has joined #openstack-dev03:46
*** dosaboy_ has quit IRC03:47
*** marun has joined #openstack-dev03:50
*** dina_belova has quit IRC03:50
*** aditirav has joined #openstack-dev03:53
*** danwent has joined #openstack-dev03:54
*** aditirav has joined #openstack-dev03:54
*** nati_ue__ has joined #openstack-dev03:54
*** colinmcnamara1 has quit IRC03:57
*** nati_uen_ has quit IRC03:58
*** colinmcnamara has joined #openstack-dev03:58
*** pabelanger has joined #openstack-dev04:00
insanidademorganfainberg: what about precise64 (ubuntu)? would you recommend it ?04:01
morganfainberginsanidade, i've had no issues using 12.04 (precise)04:01
morganfainberginsanidade, it's usually pretty good.04:02
*** yaguang has quit IRC04:03
morganfainberginsanidade, i develop on a combination of fedora 18 and ubuntu (12.04 and 13.04)04:03
insanidademorganfainberg: I'm installing it.04:03
*** yjiang5 has joined #openstack-dev04:09
*** colinmcnamara has quit IRC04:09
*** aeperezt has quit IRC04:13
*** insanidade has quit IRC04:13
*** insanidade has joined #openstack-dev04:13
*** Ryan_Lane has quit IRC04:14
*** Ryan_Lane has joined #openstack-dev04:14
*** danwent has quit IRC04:15
*** colinmcnamara has joined #openstack-dev04:15
*** yaguang has joined #openstack-dev04:16
*** kaushikc has joined #openstack-dev04:17
*** neoXsys has quit IRC04:24
*** jhesketh__ has quit IRC04:27
*** kms__ has joined #openstack-dev04:29
*** kms has quit IRC04:30
*** kms__ is now known as kms04:30
*** basha has joined #openstack-dev04:31
*** vartom7 has joined #openstack-dev04:34
*** sumanthns has joined #openstack-dev04:36
*** sumanthns has joined #openstack-dev04:37
*** sridevi has joined #openstack-dev04:37
*** garyk has quit IRC04:38
*** neoXsys has joined #openstack-dev04:41
*** dina_belova has joined #openstack-dev04:47
*** dina_belova has quit IRC04:51
*** pabelanger has quit IRC04:53
*** boris-42 has joined #openstack-dev04:54
*** radsy has quit IRC04:54
*** jhesketh__ has joined #openstack-dev04:57
*** AnilV4 has quit IRC05:01
*** SkyRocknRoll has joined #openstack-dev05:02
*** SkyRocknRoll has joined #openstack-dev05:02
*** goodes has joined #openstack-dev05:03
*** goodes has joined #openstack-dev05:03
*** AnilV4 has joined #openstack-dev05:03
*** colinmcnamara has quit IRC05:05
*** alexxu has joined #openstack-dev05:07
*** Shaan7 has quit IRC05:12
*** obondarev_ has joined #openstack-dev05:12
*** vartom7 has quit IRC05:13
*** SergeyLukjanov has quit IRC05:19
*** wfoster_away is now known as wfoster05:19
*** Mandell has quit IRC05:23
*** obondarev_ has quit IRC05:28
*** MaxV has joined #openstack-dev05:29
*** MaxV has quit IRC05:33
*** prekarat has joined #openstack-dev05:38
*** egallen has joined #openstack-dev05:43
*** hub_cap has joined #openstack-dev05:45
*** briancurtin has quit IRC05:47
*** hub_cap is now known as hubcap05:52
*** hubcap is now known as hub_cap05:53
*** hub_cap is now known as hubcap05:54
*** Mandell has joined #openstack-dev05:54
*** marios has joined #openstack-dev05:54
*** hubcap is now known as hub_cap05:54
*** nati_ue__ has quit IRC05:56
*** nshaikh has joined #openstack-dev05:57
*** romcheg has joined #openstack-dev06:04
*** aditirav has quit IRC06:07
*** romcheg has quit IRC06:07
*** aditirav has joined #openstack-dev06:08
*** garyk has joined #openstack-dev06:08
*** kushal has quit IRC06:12
*** corXi has joined #openstack-dev06:14
*** romcheg has joined #openstack-dev06:16
*** romcheg has quit IRC06:16
*** egallen has quit IRC06:18
*** eglynn has joined #openstack-dev06:19
*** erkules_ is now known as erkules06:26
*** networkstatic has quit IRC06:26
*** MaxV has joined #openstack-dev06:28
*** yjiang5 has quit IRC06:28
*** tmbailey123 has joined #openstack-dev06:28
*** Max_ has joined #openstack-dev06:29
*** MaxV has quit IRC06:29
*** doron_afk has joined #openstack-dev06:31
*** corXi has quit IRC06:33
*** martyntaylor has joined #openstack-dev06:35
*** Max_ has quit IRC06:39
*** yolanda has joined #openstack-dev06:40
*** vartom7 has joined #openstack-dev06:40
*** goodes has quit IRC06:43
*** romcheg has joined #openstack-dev06:43
*** kaushikc has quit IRC06:45
*** kaushikc has joined #openstack-dev06:45
*** otherwiseguy has quit IRC06:45
*** kushal has joined #openstack-dev06:45
*** flaper87|afk is now known as flaper8706:51
*** xga has joined #openstack-dev06:51
*** nati_ueno has quit IRC06:53
*** nati_ueno has joined #openstack-dev06:53
*** marios has quit IRC06:54
*** eglynn has quit IRC06:54
*** mrunge has joined #openstack-dev06:57
*** nati_ueno has quit IRC06:57
*** reidrac has joined #openstack-dev06:59
*** marios has joined #openstack-dev06:59
*** eglynn has joined #openstack-dev07:06
*** romcheg has left #openstack-dev07:06
*** jprovazn has joined #openstack-dev07:07
*** jcoufal has joined #openstack-dev07:09
*** prekarat has quit IRC07:12
*** ndipanov has joined #openstack-dev07:13
*** goodes has joined #openstack-dev07:14
*** nati_ueno has joined #openstack-dev07:17
*** fbo_away is now known as fbo07:17
*** xqueralt-afk is now known as xqueralt07:17
*** boris-42 has quit IRC07:23
*** jaimegil has joined #openstack-dev07:24
*** odyssey4me has joined #openstack-dev07:25
*** prekarat has joined #openstack-dev07:26
*** jistr has joined #openstack-dev07:29
*** shardy_afk is now known as shardy07:30
*** corXi has joined #openstack-dev07:30
*** salv-orlando has joined #openstack-dev07:30
*** corXi has quit IRC07:31
*** corXi has joined #openstack-dev07:31
*** mmagr has joined #openstack-dev07:31
*** MaxV has joined #openstack-dev07:32
*** dina_belova has joined #openstack-dev07:33
*** SergeyLukjanov has joined #openstack-dev07:33
*** aditirav_ has joined #openstack-dev07:35
*** basha has quit IRC07:35
*** aditirav_ has quit IRC07:35
*** JordanP has joined #openstack-dev07:36
*** aditirav_ has joined #openstack-dev07:36
*** aditirav has quit IRC07:38
*** aditirav_ is now known as aditirav07:38
*** comay has quit IRC07:39
*** jtomasek has joined #openstack-dev07:41
*** jpich has joined #openstack-dev07:42
*** basha has joined #openstack-dev07:43
*** pixelbeat has joined #openstack-dev07:48
*** goodes has quit IRC07:53
*** aditirav has quit IRC07:56
*** aditirav has joined #openstack-dev07:56
*** sushils has joined #openstack-dev07:57
*** ifarkas has joined #openstack-dev07:58
*** nati_ueno has quit IRC08:05
*** nati_ueno has joined #openstack-dev08:05
*** jamielennox is now known as jamielennox|away08:08
*** xga_ has joined #openstack-dev08:09
EmilienMsalv-orlando: ping08:09
*** nati_ueno has quit IRC08:09
salv-orlandohi there08:09
*** yassine has joined #openstack-dev08:10
EmilienMsalv-orlando: hey, I would like to take 2 min of your time to discuss about L3 in Neutron, can you ?08:10
*** xga has quit IRC08:10
*** lucasagomes has joined #openstack-dev08:10
salv-orlandosure08:10
salv-orlandois that something for havana or next release?08:10
EmilienMnot havana, maybe icehouse08:10
salv-orlandook08:10
EmilienMsalv-orlando: I'm working here on bring Neutron L3 agent highly available with OVS or Linux bridge plugin.08:11
*** kushal has quit IRC08:11
*** nsaje has quit IRC08:11
EmilienMsalv-orlando: I have two ideas now and one of them that I've implemented for testing purpose.08:11
EmilienMsalv-orlando: the first one is a neutron-l3-healthcheck service which checks if a l3 agent is alive every X seconds. If not, it reschedule virtual routers somewhere else.08:12
EmilienMI have a basic prototype, it's working and only for testing purpose now. I'm wondering if it deserves a blueprint / ML thread.08:13
salv-orlandoyes definitely. Multi-host is probably the one thing we seem to not be sure re:approach.08:13
EmilienMsalv-orlando: the second idea is to implement VRRP like some SDN controllers already manage (Ryu, etc)08:13
salv-orlandoI think you're aware we also have another patch for it:https://review.openstack.org/#/c/24771/08:13
EmilienMi.e. salv-orlando: I'm working here on bringh08:13
salv-orlandowhich pretty much is a nova porting. And this was deemed not really what we're looking for back in Portland08:13
EmilienMops wrong copy paste08:13
EmilienMi.e. https://github.com/osrg/ryu/wiki/Test-VRRP08:14
* EmilienM looking at the patch08:14
EmilienMsalv-orlando: yeah but it's *only* for DHCP08:14
EmilienMsalv-orlando: afik08:14
salv-orlandoI seem to recall that patch is based on having a l3 agent on each compute node (I think there's another one for dhcp). In my opinion however we should follow a different approach wrt nova08:15
EmilienMsalv-orlando: sure. I'm not for the old multi host approach. Since we have network virtualization, we should be able to do better08:15
salv-orlandoa monitor service which checks for agent status and ensures a maximum failover time by polling is a viable idea. However, the monitor itself would become the spof.08:15
salv-orlandoWhat about leveraging vrrp? It seems this is your second idea?08:15
EmilienMsalv-orlando: yep08:15
*** jhesketh__ has quit IRC08:15
EmilienMsalv-orlando: we have here some discussions about that, and they are the 2 options for deployments.08:16
EmilienMsalv-orlando: about https://review.openstack.org/#/c/24771/ -> do you think that will be merged ?08:17
*** yuan has joined #openstack-dev08:17
*** jtomasek has quit IRC08:18
*** safchain has joined #openstack-dev08:18
salv-orlandoI am not sure at this stage.08:18
*** ruhe has joined #openstack-dev08:19
EmilienMsalv-orlando: I understand.08:19
EmilienMsalv-orlando: thx for your thoughts08:19
salv-orlandoI reckon VRRP, if properly handled, would allow a very fast failover08:19
*** jtomasek has joined #openstack-dev08:19
pasquier-sEmilienM: do you know this script? https://github.com/stackforge/cookbook-openstack-network/blob/master/files/default/quantum-ha-tool.py08:19
*** Alexei_987 has joined #openstack-dev08:20
salv-orlandoEmilienM: also, it might be useful at it would require less management burden.08:20
EmilienMpasquier-s: no, what is it doing ?08:20
EmilienMpasquier-s: I'm not for scripts, but for upstream patches. Thanks anyway08:21
pasquier-sEmilienM: reschedule dead L3/DHCP agents to live nodes08:21
*** derekh has joined #openstack-dev08:21
EmilienMpasquier-s: yeah exactly like I did in my prototype, but not what I prefer08:21
*** johnthetubaguy has joined #openstack-dev08:21
EmilienMsalv-orlando: sure, do you think I could start a discussion on the openstack-dev ML or is there a current thread you would prefer I continue ?08:22
*** nati_ueno has joined #openstack-dev08:22
salv-orlandoI don't remember of any thread on which there have been recent posts. It won't harm starting a new one.08:22
EmilienMsalv-orlando: far enough, thx a lot :) let's start the work now08:23
salv-orlandoIf you have code, it would be really helpful if you can point us to it. A single line of code is worth more than 1,000 words.08:23
salv-orlandoUnless it's a docstring08:23
EmilienMsalv-orlando: all the code we produce is open-source. For the prototype, let me clean it before :) we did it in a few time08:24
salv-orlandook08:24
*** danpb has joined #openstack-dev08:25
EmilienMsalv-orlando: I'll let you know asap08:26
*** sahid has joined #openstack-dev08:29
*** Mandell has quit IRC08:29
*** feleouet has joined #openstack-dev08:31
*** johnthetubaguy1 has joined #openstack-dev08:33
*** johnthetubaguy has quit IRC08:35
*** fifieldt has quit IRC08:35
*** SergeyLukjanov has quit IRC08:36
*** vuntz has quit IRC08:37
*** bashok has joined #openstack-dev08:37
*** SergeyLukjanov has joined #openstack-dev08:41
*** doron_afk is now known as doron08:49
*** vuntz has joined #openstack-dev08:49
*** boris-42 has joined #openstack-dev08:50
*** mkerrin has joined #openstack-dev08:51
*** doron is now known as doron_afk08:54
*** xga_ has quit IRC08:55
*** xga has joined #openstack-dev08:55
*** wfoster is now known as wfoster_away08:58
*** romcheg has joined #openstack-dev09:00
*** alexpilotti has joined #openstack-dev09:01
*** doron_afk is now known as doron09:03
*** wfoster_away is now known as wfoster09:05
*** dina_belova has quit IRC09:06
*** doron is now known as doron_afk09:07
*** nati_ueno has quit IRC09:07
*** nati_ueno has joined #openstack-dev09:08
EmilienMpasquier-s: can we talk in PM about https://github.com/stackforge/cookbook-openstack-network/blob/master/files/default/quantum-ha-tool.py ?09:10
pasquier-sEmilienM: of course but I've not used it yet09:11
*** alexpilotti has quit IRC09:11
*** nati_ueno has quit IRC09:12
*** nati_ueno has joined #openstack-dev09:19
*** lucasagomes has quit IRC09:23
*** lucasagomes has joined #openstack-dev09:23
*** doron_afk is now known as doron09:23
*** johnpur has quit IRC09:27
*** alexxu has quit IRC09:28
*** romcheg has left #openstack-dev09:28
ttxflaper87: hi! Was wondering how far away you were with Oslo's cache-backend-abstraction09:28
*** garyk has left #openstack-dev09:28
ttxflaper87: it's a bit unclear looking at the linked reviews09:28
*** xga has quit IRC09:29
flaper87ttx: it's done, it needs review. I got some reviews from Ben lately and addressed its comments: https://review.openstack.org/#/c/32544/09:29
ttxok, that's the final review for it ?09:29
*** xga has joined #openstack-dev09:30
*** doron is now known as doron_afk09:30
flaper87The blueprint has 3 Work Items and there are patches for 2 of them, TBH, I think it'd be worth pulling redis work item out of the cache blueprint09:30
EmilienMsalv-orlando: i've started to document neutron highly available, I would love to have some review from neutron core devs. Again if you have some time :) > https://review.openstack.org/#/c/44631/09:30
flaper87ttx: re final review: I hope so :)09:30
flaper87s/its comments/his comments/ * (spleepy)09:31
ttxflaper87: ok thx for the update !09:32
flaper87ttx: np, anytime09:32
*** nati_ueno has quit IRC09:34
salv-orlandoEmilienM: This might be dumb, but why is the format plain text and not docbook?09:35
*** nati_ueno has joined #openstack-dev09:35
*** nati_ueno has quit IRC09:35
ttxhenrynash: around ? Was wondering if https://review.openstack.org/#/c/43257/ was all that was missing from filtering-backend-support... you mention "Partially Implements" in the commit message...09:36
EmilienMsalv-orlando: the first commiter of this guide started the work like this, and it never changed. Doc team was agree afik09:36
salv-orlandosound cool to me.09:36
*** ndipanov_ has joined #openstack-dev09:37
*** doron_afk is now known as doron09:38
*** ndipanov has quit IRC09:38
ttxflaper87: just another question... you say "patches for 2 out of 3 work items"... where is the patch for the 2nd one ? Already merged ?09:39
henrynashttx: it fully implements filtering, but Dolph asked me to split out the list liming into a separate [atch…which I will post shortly09:39
henrynashmaybe I should split the bp as well09:39
henrynashttx: maybe I should split the bp as well09:39
*** alexpilotti has joined #openstack-dev09:39
henrynashttx: just thought it was late to do that :-)09:40
ttxhenrynash: if it's a separate "feature", probably09:40
*** al-maisan_ is now known as al-maisan09:40
ttxhenrynash: if it's the result of a review code split, I think it's alright09:40
ttx(i.e. not brand-new code to review)09:41
henrynashttx: it was the result of code review...09:41
henrynashttx: previous version of code had filtering and list limiting combined]09:41
ttxhenrynash: probably makes sense to split, yes09:41
*** sridevi_ has joined #openstack-dev09:42
henrynashttx: split the bp?09:43
ttxhenrynash: yes09:44
henrynashttx: ok, will do09:44
ttxwill triage it up since it's just a split09:44
ttxhenrynash: ping me with link when done :)09:44
*** sridevi has quit IRC09:44
*** sridevi_ is now known as sridevi09:44
*** blamar has quit IRC09:45
henrynashttx: ok09:45
*** dina_belova has joined #openstack-dev09:45
*** mancdaz_ has quit IRC09:46
*** mancdaz has joined #openstack-dev09:47
*** goodes has joined #openstack-dev09:47
*** dosaboy has quit IRC09:49
ttxjd__: hi! Is api-group-by fully implemented with the merging of https://review.openstack.org/#/c/43043/ ?09:49
jd__ttx: no we need the API part which is WIP at https://review.openstack.org/#/c/44130/09:50
henrynashttx: https://blueprints.launchpad.net/keystone/+spec/list-limiting09:50
ttxjd__: ack09:50
henrynashttx: code is ready, just need to rebase, then will post and mark for review (it was already reviews of course as part of the previous combined patch)09:50
flaper87ttx: nope, the second patch depends on the one implementing the cache API. The second patch implements a backend for memcached09:51
ttxhenrynash: looks good, thx09:51
*** dosaboy has joined #openstack-dev09:51
ttxflaper87: ok, thx09:53
*** faramir has quit IRC09:53
*** doron is now known as doron_afk09:58
*** ruhe has quit IRC09:58
*** sahid has quit IRC09:58
*** ndipanov_ has quit IRC10:01
*** ndipanov has joined #openstack-dev10:02
*** aditirav has quit IRC10:03
*** aditirav has joined #openstack-dev10:03
*** abdul_ has joined #openstack-dev10:05
henrynashttx: ok, split complete, both sets of code now in review again, commit messaged updated10:05
abdul_Hey, I am an undergrad student working on openstack. we are planning to develop a hybrid cloud framework for Openstack. We have registered a blueprint with nova. (https://blueprints.launchpad.net/nova/+spec/hybrid-cloud-framework). I wanted to know if we are going about the right way. And also how to go about the code workflow. Thank you.10:06
*** ruhe has joined #openstack-dev10:06
ttxhenrynash: cool10:06
*** kaushikc has quit IRC10:06
*** matiu_ has quit IRC10:09
*** abdul_ has quit IRC10:13
*** xchu has quit IRC10:13
*** sahid has joined #openstack-dev10:13
*** pcm_ has joined #openstack-dev10:18
*** ruhe has quit IRC10:18
*** pcm_ has quit IRC10:18
*** pcm_ has joined #openstack-dev10:19
*** SergeyLukjanov has quit IRC10:21
*** prekarat has quit IRC10:25
*** michchap has quit IRC10:27
*** mjfork has joined #openstack-dev10:29
*** sdague has joined #openstack-dev10:32
*** yaguang has quit IRC10:33
*** paragan has quit IRC10:33
*** mjfork has quit IRC10:34
*** SergeyLukjanov has joined #openstack-dev10:34
*** prekarat has joined #openstack-dev10:38
*** SergeyLukjanov has quit IRC10:54
*** ruhe has joined #openstack-dev10:54
*** radez_g0n3 is now known as radez10:57
*** michchap has joined #openstack-dev10:58
*** SergeyLukjanov has joined #openstack-dev11:02
*** goodes has quit IRC11:03
*** boris-42 has quit IRC11:04
*** matiu has quit IRC11:05
*** michchap has quit IRC11:06
*** ccorrigan has quit IRC11:07
*** ccorrigan has joined #openstack-dev11:08
*** gargya has joined #openstack-dev11:09
*** mkollaro has joined #openstack-dev11:12
*** noorul has joined #openstack-dev11:12
*** prekarat has quit IRC11:12
*** flaper87 is now known as flaper87|afk11:16
*** o_petit has joined #openstack-dev11:16
*** CaptTofu has quit IRC11:16
*** CaptTofu has joined #openstack-dev11:17
*** ruhe has quit IRC11:18
*** gargya has quit IRC11:18
*** bashok has quit IRC11:21
*** dolphm has joined #openstack-dev11:22
*** o_petit has quit IRC11:24
*** shang has quit IRC11:27
*** flaper87|afk is now known as flaper8711:28
*** seagulls has quit IRC11:28
*** beagles has joined #openstack-dev11:28
*** msdubov has joined #openstack-dev11:28
*** aditirav_ has joined #openstack-dev11:28
*** xqueralt is now known as xqueralt-afk11:29
*** aditirav_ has joined #openstack-dev11:29
*** tmclaugh[work] has joined #openstack-dev11:31
*** aditirav has quit IRC11:31
*** aditirav_ is now known as aditirav11:31
*** ruhe has joined #openstack-dev11:32
*** AnilV4 has quit IRC11:33
*** goodes has joined #openstack-dev11:35
*** dolphm has quit IRC11:35
*** o_petit has joined #openstack-dev11:35
*** dims has joined #openstack-dev11:38
*** eglynn has quit IRC11:39
*** o_petit has quit IRC11:40
*** flaper87 is now known as flaper87|afk11:41
*** paragan has joined #openstack-dev11:43
*** paragan has joined #openstack-dev11:43
*** o_petit has joined #openstack-dev11:45
*** jhesketh_ has joined #openstack-dev11:46
*** o_petit has quit IRC11:46
*** FunnyLookinHat has joined #openstack-dev11:47
*** o_petit has joined #openstack-dev11:47
*** shakayumi has joined #openstack-dev11:48
*** dims has quit IRC11:49
*** lucasagomes is now known as lucas-hungry11:49
*** anteaya has joined #openstack-dev11:53
*** yaguang has joined #openstack-dev11:54
*** basha has quit IRC11:55
*** HenryG has quit IRC11:57
*** waa has joined #openstack-dev11:58
*** flaper87|afk is now known as flaper8711:58
*** dims has joined #openstack-dev12:02
*** xqueralt-afk is now known as xqueralt12:03
*** noslzzp has joined #openstack-dev12:05
*** yassine has quit IRC12:05
*** sahid has quit IRC12:05
*** safchain has quit IRC12:07
*** sahid has joined #openstack-dev12:07
*** topol has joined #openstack-dev12:08
*** lxsli0 has joined #openstack-dev12:09
*** SergeyLukjanov has quit IRC12:09
*** SergeyLukjanov has joined #openstack-dev12:09
*** dolphm has joined #openstack-dev12:09
*** dkranz has quit IRC12:10
*** flaper87 is now known as flaper87|afk12:10
*** SkyRocknRoll has quit IRC12:10
*** dina_belova has quit IRC12:17
*** Mikhail has quit IRC12:18
*** yassine has joined #openstack-dev12:19
*** shakayumi has quit IRC12:20
*** jistr has quit IRC12:21
*** eglynn has joined #openstack-dev12:21
*** jistr has joined #openstack-dev12:22
*** dprince has joined #openstack-dev12:22
*** markmcclain has joined #openstack-dev12:23
*** markmcclain has quit IRC12:24
*** sahid has quit IRC12:28
*** morazi has joined #openstack-dev12:29
*** jcoufal_ has joined #openstack-dev12:30
*** dina_belova has joined #openstack-dev12:31
*** jcoufal has quit IRC12:31
*** kbringard has joined #openstack-dev12:32
*** doron_afk is now known as doron12:32
eglynnrussellb: there?12:33
*** sridevi has quit IRC12:34
*** yaguang has quit IRC12:35
*** sahid has joined #openstack-dev12:42
*** jasondotstar has joined #openstack-dev12:43
*** dvarga has joined #openstack-dev12:43
*** eharney has joined #openstack-dev12:46
*** annegentle_away is now known as annegentle12:46
*** sheepdog80 has left #openstack-dev12:46
*** jaimegil has quit IRC12:48
*** gargya has joined #openstack-dev12:51
*** blamar has joined #openstack-dev12:52
*** eharney has quit IRC12:54
*** sgordon has joined #openstack-dev12:54
*** edmund has joined #openstack-dev12:55
*** alexxu has joined #openstack-dev12:57
*** sahid has quit IRC13:01
henrynashdolphm: ping13:02
*** lucas-hungry is now known as lucasagomes13:03
*** dstanek has joined #openstack-dev13:04
*** maheshp1 has joined #openstack-dev13:06
*** ayoung has joined #openstack-dev13:06
*** flaper87|afk is now known as flaper8713:08
*** dkehn_away is now known as dkehn13:10
*** lbragstad has quit IRC13:11
*** aditirav has quit IRC13:12
*** xga_ has joined #openstack-dev13:13
*** neelashah has joined #openstack-dev13:13
*** vartom7 has quit IRC13:14
*** safchain has joined #openstack-dev13:14
*** topol has quit IRC13:15
*** sthaha has quit IRC13:15
*** HenryG has joined #openstack-dev13:16
*** jayg|g0n3 is now known as jayg13:16
*** xga has quit IRC13:17
*** o_petit has quit IRC13:17
*** adalbas has quit IRC13:17
*** kevinconway has joined #openstack-dev13:18
*** adalbas has joined #openstack-dev13:18
russellbeglynn: am now13:18
eglynnrussellb: np13:19
*** yassine has quit IRC13:19
*** michchap has joined #openstack-dev13:20
dolphmhenrynash: pong13:20
*** ruhe has quit IRC13:20
*** bknudson has joined #openstack-dev13:21
henrynashdolphm: just to let you know I reposted the filter patch with changes that hopefully help with the issue you had13:21
dolphmhenrynash: i'll check it out13:21
henrynashdolphm: https://review.openstack.org/#/c/43257/13:22
*** alunduil has quit IRC13:22
henrynashdolphm: I split out the list limiting into a separate path and provide structure to the handling if filtering (and in the future pagination) parameters between controller and driver13:22
*** gordc has joined #openstack-dev13:24
*** eharney has joined #openstack-dev13:25
*** sballe has joined #openstack-dev13:26
*** maheshp has joined #openstack-dev13:27
*** gargya_ has joined #openstack-dev13:27
*** gargya has quit IRC13:28
*** gargya_ is now known as gargya13:28
*** jruzicka has joined #openstack-dev13:30
*** o_petit has joined #openstack-dev13:30
*** MaxV has quit IRC13:30
*** ruhe has joined #openstack-dev13:31
*** MaxV has joined #openstack-dev13:31
*** maheshp1 has quit IRC13:31
*** ruhe has quit IRC13:32
*** sandywalsh has joined #openstack-dev13:32
*** gimps_ has joined #openstack-dev13:32
*** vkmc has joined #openstack-dev13:33
*** yassine has joined #openstack-dev13:35
*** mrunge is now known as mrunge_afk13:37
*** o_petit has quit IRC13:42
*** changbl has quit IRC13:43
*** ruhe has joined #openstack-dev13:43
*** dina_belova has quit IRC13:44
*** dina_belova has joined #openstack-dev13:46
*** dina_belova has quit IRC13:46
*** lbragstad has joined #openstack-dev13:47
*** briancurtin has joined #openstack-dev13:48
*** Shaan7 has joined #openstack-dev13:48
*** markmcclain has joined #openstack-dev13:48
*** boris-42 has joined #openstack-dev13:49
*** aeperezt has joined #openstack-dev13:49
*** rackerjoe has left #openstack-dev13:50
*** prad has joined #openstack-dev13:52
*** jprovazn has quit IRC13:52
*** sumanthns has quit IRC13:53
*** burt has joined #openstack-dev13:53
*** rwsu has joined #openstack-dev13:53
*** wfoster is now known as wfoster_away13:54
*** ruhe has quit IRC13:54
*** zaitcev has joined #openstack-dev13:54
*** ifarkas has quit IRC13:56
*** ifarkas has joined #openstack-dev13:56
alexpilottidansmith Hi Dan, added the bug: https://review.openstack.org/#/c/39195/13:59
alexpilottidansmith: ops, meant: https://bugs.launchpad.net/nova/+bug/122025614:00
uvirtbotLaunchpad bug 1220256 in nova "Hyper-V driver needs tests for WMI WQL instructions" [Undecided,New]14:00
ayounghenrynash, I'm sory to be so harsh about the filtering thing.  I'm just not convinced that we are implementing the SQL binding the right way14:00
*** jruzicka has quit IRC14:00
*** jruzicka has joined #openstack-dev14:01
ayounghenrynash, If I had my druthers, we would not let this code path go through the compiler.  If we could do prepared statments, and then apply the filters, I would be fine with it.14:01
*** o_petit has joined #openstack-dev14:02
*** yaguang has joined #openstack-dev14:02
dansmithalexpilotti: thank14:03
dansmiths14:03
*** alunduil has joined #openstack-dev14:03
*** FunnyLookinHat has quit IRC14:04
*** mrodden has joined #openstack-dev14:07
*** gargya has quit IRC14:08
*** johnpur has joined #openstack-dev14:10
*** xga has joined #openstack-dev14:10
ayoungmorganfainberg, are you done with https://blueprints.launchpad.net/keystone/+spec/caching-layer-for-driver-calls  ?14:11
*** dina_belova has joined #openstack-dev14:12
henrynashayoung: I understand that point of view, it's just that I haven't found anyway of breaking it yet…I can break it by typing raw SQL at, say, MySQL…but not via SQLAlchemy & filters14:13
ayounghenrynash, you willing to Bet the Farm on that?14:13
*** xga_ has quit IRC14:13
ayounghenrynash, I don't trust SQL Alchemy14:14
ayoungIt has to make too many compromises to account for too many different drivers to be 100% secure against these attacks.  We need a comprehensive reason to say "this is good"14:14
*** gargya has joined #openstack-dev14:15
*** drewland_ has joined #openstack-dev14:16
*** jprovazn has joined #openstack-dev14:16
ayoungIf the review from Joel Coffman had been more in depth, I'd feel a bit more confident14:16
*** bfschott has joined #openstack-dev14:16
dstanek /win 314:17
*** drewland_ has quit IRC14:17
*** drewland_ has joined #openstack-dev14:17
*** jistr_ has joined #openstack-dev14:18
henrynashayoung: so if we're really going to say…."we don't trust SQLAlchemy" and have to compile filters ourselves, then that's obviously an extreme point of view, and would have radical impact on how this is done.14:18
*** alexxu has quit IRC14:18
henrynashayoung: not saying that isn't a viable approach….jsut extreme :-)14:18
ayounghenrynash, not, it is not extrame.  in that we are not tnecessarily using SQL A in the approved manner this way14:19
ayoungSQL A is fine, but it does not exp[licitly guard against SQL injection attacks when doing appl:14:19
ayoungIt can't14:19
ayoungTHe best it can do is escape certain characters and hope for the bnest14:20
henrynashayoung: well it appears to be doing something14:20
*** briancurtin has left #openstack-dev14:20
ayounghenrynash, "Damned by faint praise?"14:20
*** gargya has quit IRC14:21
henrynasha filter of, say, name=henry14:21
bknudsonsqlalchemy doesn't use bound parameters?14:21
ayoungI'd hate to have that written on my evaluation review:  Adam appears to be doing something....14:21
henrynashturns into……SELECT……WHERE name=:name114:21
insanidadehi. would anyone please help me with the following issue? http://paste.openstack.org/show/45675/14:21
henrynashwhere I assume :name1 is some kind of late bound parameter (does anyone know?)14:21
insanidadeI'm not sure about what auth is missing.14:22
*** jimfehlig has joined #openstack-dev14:22
bknudsonhenrynash: is this mysql?14:22
ayoungbknudson, I'm not sure if waht SQL A calls bound parameters are applied to a prepared statement or not in this case14:22
ayoungbknudson, it needs to work with MySQL and with Postgresql14:22
henrynashbknudson: that's the query that gets built by doing a filter by() or filter() in sqlalchmeny14:23
ayoungbknudson, I'll linke14:23
henrynashbknudson: I think it's the same in all DBs14:23
ayoungbknudson, https://review.openstack.org/#/c/43257/30/keystone/common/sql/core.py14:23
*** johnpur has quit IRC14:25
*** alunduil has quit IRC14:26
anteayainsanidade: you are unauthorized14:26
anteayainsanidade: are you the admin user?14:26
*** alunduil has joined #openstack-dev14:26
anteayaand good morning14:27
*** msdubov has quit IRC14:27
*** topol has joined #openstack-dev14:28
bknudsonayoung henrynash: is the concern more the complexity? supporting inexact filters? (if only exact match was supported then wouldn't be a concern)14:28
*** dkranz has joined #openstack-dev14:28
henrynashbknudson: so in exacts are disabled anyway for havana14:28
*** doron is now known as doron_afk14:29
insanidadeanteaya: yes. I'd like to know that info is missing. it works with 'neutron net-create' but does'n work within the python client.14:29
*** ruhe has joined #openstack-dev14:29
henrynashbknudson: INEXACT_FILTERS_SUPPORTED = [] in listdirectives.py14:30
*** galstrom_zzz is now known as galstrom14:30
bknudsonhenrynash: if there's a problem in inexact filters then would be a security exposure even if it was disabled by default.14:30
anteayainsanidade: hmmm, well if you are the admin user and you are still unauthorized then I have to say I don't know what information is missing14:30
anteayainsanidade: can you paste the output when it works with neutron net-create?14:31
*** o_petit has quit IRC14:31
bknudsonthis was the same discussion had on the mailing list about postponing key distribution14:31
insanidadeanteaya: sure. just a sec.14:32
*** yjiang5 has joined #openstack-dev14:32
anteayak14:32
henrynashbknudson: it's disabled in code, not by config file.  The code is there so a) people cash see how we wold use ListDirectives for this sort of thing (which was one of Dolphm's issues, and b) so we can quickly enable for IceHouse14:32
bknudsonhenrynash ayoung: so the question is really about line 364 -- query = query.filter_by(**filter_dict)14:34
bknudsondoes this allow for an injection attack?14:34
bknudson(values are not properly escaped or parameter markers are not use)14:34
ayoungbknudson, Yeah14:35
ayoungbknudson, I don't think exact or inexact really will make a difference14:35
*** edmund has quit IRC14:35
ayoungIt is the fact that we are taking what comes from the URL and passing it to the SQL compiler that scares me14:35
henrynashbknudson: you could also write this as (something like) query.filter(column(value)…but I think the sql it generates is the same14:36
*** jistr has quit IRC14:36
ayoungbknudson, what I would like is a reasoned explanation why that is not the case.14:36
bknudsonis this the first time we've ever done this? don't we take values from url all the time? (e.g., user IDs and stuff)14:36
henrynashayoung: so let;s be clear...14:36
ayoungbknudson, yes, but one word at a time.14:36
*** datsun180b has joined #openstack-dev14:37
henrynashayoungL we are taking part of a url and placing it in the value of a WHERE clause14:37
insanidadeanteaya: take a look: http://paste.openstack.org/show/45676/14:37
*** nshaikh has left #openstack-dev14:37
henrynashbknudson: so other projects do it exactly this what (nova, glance), I guess the question is - should we hold ourselves to a higher standard14:38
henrynashbknduson: (…do it exactly this way...)14:38
*** o_petit has joined #openstack-dev14:38
* anteaya looks14:39
bknudsonwould it be good enough to add testcases that attempt the SQL injection?14:39
henrynashbknudson: I have indeed added some of those...14:40
ayounghenrynash, I think I found your car.  http://www.abluestar.com/blog/wp-content/uploads/2011/10/for_traffic_cameras.jpg14:40
anteayainsanidade: try it will the actual auth token, you have "X-Auth-Token: qwe123" in the paste and that is not the actual auth token14:40
henrynashayoung: nice!!14:41
henrynashbknudson: https://review.openstack.org/#/c/43257/30/keystone/tests/test_v3_filters.py see end of file14:41
henrynashbknudson: also some in test_backend.py14:41
anteayas/will/with14:41
insanidadeanteaya: but that's teh value I've set in the OS_TOKEN variable. shuldn't that work ?14:42
*** changbl has joined #openstack-dev14:42
henrynashbknudson: but I guess neither ayoung or I are "SQL injection experts"…which is ayoung's point14:42
bknudsonhenrynash: did you try it with mysql and postgresql?14:42
henrynashbknudson: yes14:42
*** AGiardini-away has joined #openstack-dev14:42
*** otherwiseguy has joined #openstack-dev14:42
anteayainsanidade: this is part of the token used to authenticate to create the oraf network: "X-Auth-Token: MIIRdAYJKoZIhvcNAQcCoIIRZTCCEWECAQExCTAHBgUrDgMCGjCCD8oGCSqGSIb3DQEHAaCCD7sEgg+14:43
anteayai would give that a try and see what happens14:43
anteayause the entire auth token though14:43
henrynashbknudson: I also type the same injection test code in a raw mysql prompt and it did then have bad effects…(i.e. to show the sql injection text was valid attack code)14:43
*** sdake has joined #openstack-dev14:43
*** sdake has quit IRC14:43
*** sdake has joined #openstack-dev14:43
bknudsonhenrynash: not sure what more you can do.14:43
*** doron_afk is now known as doron14:44
bknudsonif there's a bug it's in sqlalchemy14:44
AGiardini-awayHey guys. in https://github.com/openstack/requirements/blob/stable/grizzly/tools/pip-requires why the required django version is django>=1.4,<1.6 ? I think it should be django>=1.4,<1.5 ? Am i missing something? For the grizzly version django shoud be <1.514:44
AGiardini-away\nick AGiardini14:44
*** AGiardini-away is now known as AGiardini14:44
AGiardiniops :)14:44
*** flashgordon is now known as jog014:44
insanidadeanteaya: that I understand. But shouldn't that token come from the auth process from keystone ?14:45
anteayaah, let's ask the keystone guys14:45
anteayakeystone guys? ^14:46
henrynashbknudson: would value any general input you have on latest filter patch…to respond to concerns from others, the parameters passed from controller to drive have changed pretty radically.14:46
insanidadeanteaya: similar to your blog about using nova's client, you used some values for auth, right? they first authenticate against keystone, and then the nova tasks shall be executed once authorized, right?14:46
henrynashbknduson: (and the _in_out name wasn't popular, I'm afraid!)14:46
henrynashbknudson: https://review.openstack.org/#/c/43257/14:47
bknudsonhenrynash: I'll look at it this afternoon14:47
henrynashbknudson: much appreciated14:47
anteayainsanidade: the first curl request returns the auth token, the second request uses the auth token to talk to nova14:47
insanidadeby "for auth", I mean: for instantiating a nova client. for that purpose, you used admin, admin's password, a tenant and so forth.14:47
anteayainsanidade: yes if I remember correctly, I was admin14:48
dolphmbknudson: henrynash: can one of ya'll also check out the last two caching patches? https://review.openstack.org/#/c/43609/ https://review.openstack.org/#/c/44408/14:48
insanidadeanteaya: yes. your blog is opened right now in front of my eyes :P14:48
anteayaI just sourced openrc as admin `source ~/devstack/openrc admin`14:48
anteaya:D14:48
*** carl_baldwin has joined #openstack-dev14:49
*** epim has quit IRC14:49
insanidadeanteaya: one more thing:the client constructor you used takes 4 args for auth. The one I use for neutron takes only one, which is the API version. whenever I try to pass more args, it fails to return a valid instance.14:50
anteayainsanidade: yes, I remember from yesterday, the only thing I could suggest if you could track down any neutron devs who might be able to shed some light on why this is14:50
*** jbresnah has joined #openstack-dev14:50
anteayaunfortunately I don't know anyone who works on neutron14:51
*** o_petit_ has joined #openstack-dev14:52
*** FunnyLookinHat has joined #openstack-dev14:52
*** doron is now known as doron_afk14:53
*** o_petit has quit IRC14:54
anteayainsanidade: I don't feel like I am being very helpful but unfortunately, right now I am out of ideas14:54
*** n0ano has joined #openstack-dev14:56
*** MaxV has quit IRC14:57
*** SergeyLukjanov has quit IRC14:57
*** tstevenson has joined #openstack-dev14:58
*** danwent has joined #openstack-dev14:59
*** briancline has joined #openstack-dev14:59
*** schwicht has joined #openstack-dev14:59
*** mrunge_afk has quit IRC14:59
*** reidrac has quit IRC15:00
*** MaxV has joined #openstack-dev15:00
henrynashmorganfainberg, ayoung, gyee: and other comments on https://review.openstack.org/#/c/43257/ and https://review.openstack.org/#/c/44836/ would be much appreciated15:00
*** jcoufal_ is now known as jcoufal15:00
*** yjiang5 has quit IRC15:01
*** mrodden has quit IRC15:01
*** SergeyLukjanov has joined #openstack-dev15:04
jaypipeswhat the heck is firestack?15:04
*** donaldh has joined #openstack-dev15:05
BobBallfirestack is used by smokestack15:05
BobBall*grin*15:06
BobBallcreates the packages and puppet configs I think15:06
BobBalldprince would be able to give a cleaner definition15:06
*** dina_belova has quit IRC15:07
dprincejaypipes: firestack is just what I renamed the old openstack-vpc from long ago.15:07
*** pschaef has joined #openstack-dev15:07
dprincejaypipes: just seemed to fit /w SmokeStack better15:07
*** doron_afk is now known as doron15:08
*** dina_belova has joined #openstack-dev15:12
roaetI'm scared to restart my devstack machine.. but is it as simple as rebooting it and then ./rejoin-stack?15:12
*** wwallnrr__ has quit IRC15:12
*** imsurit has joined #openstack-dev15:12
vkmcroaet, Yeah, just reboot and run ./stack again15:13
roaetvkmc: run ./stack? Wouldn't that pull down all the masters again? I don't want to lose my changed.15:13
roaetchanges*15:13
anteayaroaet: set RECLONE=no in ~devstack/localrc15:14
anteayabefore you ./stack.sh15:14
anteayaturning off a vm shuts down devstack services so you have to restart them15:15
anteayaif you are on kvm or similar you can suspend the vm so devstack will be running when you bring it up again15:15
*** litong has joined #openstack-dev15:15
*** dina_belova has quit IRC15:16
*** o_petit_ has quit IRC15:16
*** ruhe has quit IRC15:16
insanidadeanteaya: no worries. I'll probably find a solution and will let everyone know :)15:16
*** ndipanov has quit IRC15:16
anteayainsanidade: looking forward to it15:16
anteaya:D15:16
*** ndipanov has joined #openstack-dev15:17
*** jtomasek has quit IRC15:18
jaypipesdprince: ah! :) ok then!15:19
enikanorov-wamotoki: salv-orlando: looks like I've resolved your comments folks15:19
roaetanteaya: thanks for the info, always so helpful!15:20
jaypipesdprince: and agreed, goes well with SmokeStack :)15:20
anteayaroaet: I try15:20
roaetAlright, here we go. Hoping it doesn't lose changes. *crosses fingers*15:21
roaetls15:21
roaeterr ignore that :P15:21
anteayavkmc knows a lot too, roaet, I just beat her to the localrc man page this time: http://devstack.org/localrc.html15:21
anteayaroaet: go you15:21
roaetI'll keep that up.15:22
*** mrodden has joined #openstack-dev15:22
*** yaguang has quit IRC15:23
*** rcrit has quit IRC15:23
*** rcrit has joined #openstack-dev15:25
*** ruhe has joined #openstack-dev15:27
*** dina_belova has joined #openstack-dev15:27
*** michchap has quit IRC15:28
*** michchap has joined #openstack-dev15:28
*** colinmcnamara has joined #openstack-dev15:29
*** edmund has joined #openstack-dev15:29
*** jtomasek has joined #openstack-dev15:31
*** pmathews has joined #openstack-dev15:32
*** xmltok has joined #openstack-dev15:33
*** mindpixel has joined #openstack-dev15:33
*** wolfdreamer has joined #openstack-dev15:36
roaetanteaya: it worked. Thank you. Had to give the thing more memory. Devstack is hungry.15:36
anteayayay!15:36
anteayadevstack likes the memory yes15:36
anteayaminimum of 1.2G RAM and more if you can afford it15:36
*** paragan has quit IRC15:37
*** doron is now known as doron_afk15:37
*** gyee has joined #openstack-dev15:37
*** SumitNaiksatam has quit IRC15:38
*** markmcclain has quit IRC15:38
alexpilottirussellb hi15:38
*** zz_Guest44086 is now known as leif15:39
*** leif is now known as Guest7181315:39
roaetanteaya: I was getting "cannot allocate memory" errors during unit tests (unless that is what they were supposed to do) with 2GB15:39
*** mlavalle has joined #openstack-dev15:40
*** basha has joined #openstack-dev15:40
*** topol has quit IRC15:41
*** freedomhui has joined #openstack-dev15:41
*** xga_ has joined #openstack-dev15:42
*** goodes has left #openstack-dev15:43
*** rnirmal has joined #openstack-dev15:44
*** xga__ has joined #openstack-dev15:44
anteayaroaet: really?15:44
anteayawith 2G?15:45
anteayado you remember what tests?15:45
anteayado you have any output you could put in a paste?15:45
*** xga has quit IRC15:45
roaetNo. I restarted and now my laptop is dying pretty bad (running unit tests with 4GB.. apparently too much for this laptop).15:45
*** gimps_ has quit IRC15:45
*** rcrit has quit IRC15:45
anteayahow much RAM does the whole laptop have?15:46
roaet8GB.15:46
roaetAh. Spotlight was indexing. +1 spotlight.15:46
*** xga_ has quit IRC15:46
anteayaso the laptop has 8G you have 4G on the devstack vm and you are having performance issues?15:46
*** gimps_ has joined #openstack-dev15:47
anteayawhat is spotlight?15:47
roaetIt is OS X's system index service that allows you to search for stuff quickly.15:47
*** briancurtin has joined #openstack-dev15:47
anteayaah15:47
roaetIt is a pretty hefty service that tends to run at the most inopportune times.15:47
anteayasounds like fun15:48
AGiardiniroaet: Which virtualization software are you usign?15:48
anteayaso if we account for spotlight15:48
AGiardiniusing15:48
*** corXi has quit IRC15:48
*** topol has joined #openstack-dev15:48
*** imsurit has quit IRC15:48
anteayado you still feel the can't allocate memory issues with 2G RAM for the vm was still related to devstack?15:48
roaetAGiardini: VMWare. anteaya I cannot be certain anymore. Might have been spotlight all along.15:49
anteayaokay15:49
anteayawell if you feel like doing another vm with 2G and see memory issues when running tests, I would be interested in viewing the output15:50
anteayaif spotlight isn't indexing concurrently15:50
*** doron_afk is now known as doron15:51
*** jbresnah_ has joined #openstack-dev15:53
*** jbresnah has quit IRC15:54
*** reed has joined #openstack-dev15:54
*** yjiang5 has joined #openstack-dev15:56
*** shang has joined #openstack-dev15:56
*** hartsocks has joined #openstack-dev15:56
*** jistr_ is now known as jistr15:56
*** hartsocks has left #openstack-dev15:56
*** schwicht has quit IRC15:57
*** colinmcnamara has quit IRC15:58
*** ondergetekende_ has joined #openstack-dev15:59
*** colinmcnamara has joined #openstack-dev15:59
*** jcoufal has quit IRC15:59
*** yjiang5 has quit IRC15:59
*** hemna_ has joined #openstack-dev16:00
*** ndipanov is now known as ndipanov_afk16:00
*** jistr has quit IRC16:03
*** portante is now known as portante|afk16:03
*** basha has quit IRC16:03
*** xga__ has quit IRC16:04
dolphmhenrynash: i presume this is still an issue? it's targeted at havana https://bugs.launchpad.net/keystone/+bug/120148716:04
uvirtbotLaunchpad bug 1201487 in keystone "listing projects for a user omits those that only have group related roles" [High,Triaged]16:04
*** michchap has quit IRC16:05
*** xga has joined #openstack-dev16:05
*** freedomhui has quit IRC16:05
*** imsurit has joined #openstack-dev16:07
*** xmltok has quit IRC16:07
*** markwash has quit IRC16:08
*** marios has quit IRC16:08
anteayadolphm: in response to your request last week: http://anteaya.info/blog/2013/09/01/installing-devstack-with-vagrant/16:08
*** schwicht has joined #openstack-dev16:09
*** xmltok has joined #openstack-dev16:09
*** MaxV has quit IRC16:10
*** rcrit has joined #openstack-dev16:10
dolphmanteaya: hrm, it's not really the installation process i was specifically looking for docs on... although this seems to do a great job of explaining 'why' in a lot of cases, which is invaluable16:11
anteayaokay16:11
anteayawhat details of devstack installation where you looking for?16:11
dolphmanteaya: i was looking for a doc that explained how developers should actually use devstack once it's installed16:11
anteayaah okay16:11
anteayahow to edit localrc16:11
dolphmanteaya: i.e. how to go from stack.rc to git-review16:12
anteayahow to use screen to view the service logs16:12
anteayaokay16:12
*** danpb has quit IRC16:12
anteayaI was thinking I needed to do a follow up post to this one16:12
anteayaso let me work on the bridge part16:12
*** jergerber has joined #openstack-dev16:12
*** dosaboy has quit IRC16:12
anteayathis might end up being a 3 part series16:12
*** beagles has quit IRC16:13
*** dosaboy has joined #openstack-dev16:13
*** zaneb has quit IRC16:13
anteayaso from this we can assume the majority of folks will have a running devstack on a vm16:13
anteayathen we have to get them into a project and running tests, can I use keystone as an example?16:13
*** boris-42 has quit IRC16:14
anteayaand then get them creating a topic branch and submitting a patch, I think that will be the third post16:14
dolphmanteaya: cool16:14
dolphmanteaya: and sure!16:14
anteayaokay, let me work on post 216:14
anteayaokay thanks16:14
dolphmhenrynash: the cache change you approved is dependent on this one- https://review.openstack.org/#/c/43609/16:15
anteayait takes me a few days to pull pieces together, I am not the fastest blog post composer16:15
dolphmanteaya: that's a good thing :)16:16
anteayaoh okay, great16:16
*** jbresnah_ has quit IRC16:17
*** beagles has joined #openstack-dev16:17
*** rcrit has quit IRC16:18
*** angdraug has joined #openstack-dev16:19
*** doron is now known as doron_afk16:20
*** martine has joined #openstack-dev16:21
*** dkehn_ has joined #openstack-dev16:21
*** martine is now known as martine_16:21
*** yassine has quit IRC16:22
*** xga has quit IRC16:22
*** doron_afk has quit IRC16:22
*** dkehn has quit IRC16:22
*** xga has joined #openstack-dev16:23
*** rcrit has joined #openstack-dev16:24
*** johnthetubaguy1 is now known as johnthetubaguy16:25
*** zaneb has joined #openstack-dev16:26
*** diogogmt has joined #openstack-dev16:26
*** obondarev has quit IRC16:26
henrynashdolphm: will look shortly16:28
*** ilyashakhat has quit IRC16:28
*** ilyashakhat has joined #openstack-dev16:30
*** obondarev has joined #openstack-dev16:30
*** mkollaro has quit IRC16:31
*** bswartz has quit IRC16:31
*** nati_ueno has joined #openstack-dev16:35
*** networkstatic has joined #openstack-dev16:35
*** nati_ueno has quit IRC16:35
*** nati_ueno has joined #openstack-dev16:35
*** markmcclain has joined #openstack-dev16:36
*** dkehn has joined #openstack-dev16:36
*** dkehn_ has quit IRC16:37
*** nati_ueno_2 has joined #openstack-dev16:38
*** Ryan_Lane has quit IRC16:39
*** goodes has joined #openstack-dev16:40
*** nati_ueno has quit IRC16:40
*** goodes has quit IRC16:40
*** ilyashakhat has quit IRC16:41
*** xga has quit IRC16:41
*** ilyashakhat has joined #openstack-dev16:42
*** nati_ueno_2 has quit IRC16:43
*** moted has joined #openstack-dev16:43
*** JordanP has quit IRC16:44
*** dina_belova has quit IRC16:45
*** nati_ueno has joined #openstack-dev16:46
*** dperaza has joined #openstack-dev16:47
*** ociuhandu has joined #openstack-dev16:47
dperazaneed some help understanding how stable/havana will be cut?16:47
dperazais it just comming out of master on 9/4?16:48
brianclinetotally just blue-skying this, realizing it's out of left field and probably Not Advisable even if possible, but is it feasible at this point to run individual openstack services within their own LXC containers?16:48
dperazadoes anyone know what is the timeframe of the cut?16:48
clarkbdperaza: ttx should know16:48
dperazattx: ^^^^16:49
dperazacan you help?16:49
*** mkollaro has joined #openstack-dev16:50
*** gimps_ has quit IRC16:50
*** vartom7 has joined #openstack-dev16:50
*** o_petit has joined #openstack-dev16:50
*** enikanorov-w has quit IRC16:51
*** markwash has joined #openstack-dev16:51
clarkbdperaza: I beleive that there is some flexibility on the actual time of the stable branch being cut and happens when individual projects have fixed known bugs and are ready to release16:52
*** enikanorov-w has joined #openstack-dev16:52
clarkbhowever stable/havana won't be cut until october iirc. H3 occurs on 9/416:53
dperazaso 9/4 may or may not be the date16:53
dperazaor for sure it won't16:53
clarkbfor feature freeze and havana3 I think 9/4 is a fairly solid date16:53
*** safchain has quit IRC16:53
dperazaok but that means not new feature16:53
clarkbbut when exactly on that day it happens I am not sure. Of course now that I have said this ttx will say I have it all wrong :)16:54
dperazais there a new branch16:54
*** carl_baldwin has quit IRC16:54
dperazaor things still going to master?16:54
clarkbthere is a milestone proposed branch but msot things (bug fixes, etc) will continue to be made against master16:54
*** maheshp has quit IRC16:54
dperazaI'm told ttx is in France and might be delayed to get to this question16:54
dperazaanyone else clarkb16:55
clarkbdperaza: ttx would be the definitive answer16:55
clarkbhe should be around today as today is the big day of meetings16:55
dperazaok16:55
clarkbdperaza: is there something in particular you need to know for?16:55
dperazaclarkb: do you know if stable/grizzly is cut from master whenever it happens?16:55
dperazaor some intermadiate milestone branch16:56
dperazaI need to know to be able to rebase both with minimun impact to continues integration16:56
jpichdperaza: This may provide additional information https://wiki.openstack.org/wiki/Havana_Release_Schedule16:56
brianclinemoreover, is the aforementioned something anyone has seen/heard of being attempted?16:56
*** schwicht has quit IRC16:56
dperazamake sure we don't need to much manual steps16:56
*** rcrit has quit IRC16:57
*** schwicht has joined #openstack-dev16:57
*** alop has joined #openstack-dev16:57
*** Alexei_987 has quit IRC16:58
*** goodes has joined #openstack-dev16:58
dperazajpich: thanks but was not sure when the stable/havana branch is cut from this site16:58
dperazahttps://wiki.openstack.org/wiki/Havana_Release_Schedule16:58
*** goodes has quit IRC16:58
dperazado you think stable/havana will be cut on October?16:59
brianclineseems like it'd be on "Havana Release" (~17 Oct)16:59
russellbat some point during the RC time period16:59
jpichdperaza: It will be closer to the release date. People will keep fixing bugs on master during the RC phase16:59
russellbyep17:00
*** dachary has quit IRC17:00
*** dachary has joined #openstack-dev17:01
dperazajpich: thanks for info17:01
*** insanidade has quit IRC17:01
*** morazi has quit IRC17:01
*** alop_ has joined #openstack-dev17:02
*** alop has quit IRC17:02
*** alop_ is now known as alop17:02
*** derekh has quit IRC17:02
*** toddnni has joined #openstack-dev17:03
*** odyssey4me has quit IRC17:05
*** sarob has joined #openstack-dev17:05
*** mmagr has quit IRC17:07
*** imsurit has quit IRC17:08
*** anteaya has quit IRC17:08
*** dina_belova has joined #openstack-dev17:09
*** rcrit has joined #openstack-dev17:09
*** esheffield has joined #openstack-dev17:10
*** nati_uen_ has joined #openstack-dev17:10
*** nati_ueno has quit IRC17:10
*** dstanek has quit IRC17:11
*** nati_ueno has joined #openstack-dev17:11
*** jbresnah_ has joined #openstack-dev17:11
*** SergeyLukjanov has quit IRC17:12
*** jcoufal has joined #openstack-dev17:12
*** dina_belova has quit IRC17:13
*** nati_ueno has quit IRC17:16
*** angdraug has quit IRC17:16
*** angdraug has joined #openstack-dev17:19
*** MaxV has joined #openstack-dev17:21
*** Mandell has joined #openstack-dev17:21
*** insanidade has joined #openstack-dev17:23
insanidadequestion: why does a request to http://192.168.200.112:35357/v2.0/tokens17:23
insanidadereturn 404 ?17:23
insanidadethat ip is my single node devstack address.17:23
insanidadeshouldn't that be keystone internal address ?17:24
*** eglynn has quit IRC17:24
*** o_petit has quit IRC17:24
insanidadeI mean, until the 'v2.0' part. the '/tokens' is added by keystone.17:24
*** MaxV has quit IRC17:25
*** HenryG has quit IRC17:25
*** portante|afk is now known as portante17:25
*** alop has quit IRC17:28
*** sarob has quit IRC17:28
*** gsilvis has quit IRC17:28
*** sarob has joined #openstack-dev17:28
*** Ryan_Lane has joined #openstack-dev17:30
*** alop has joined #openstack-dev17:30
*** dstanek_ has joined #openstack-dev17:31
*** sarob has quit IRC17:33
morganfainbergayoung, there is only one thing left to do on that BP, and that is an optional 1 line-change.17:34
*** alop has quit IRC17:35
morganfainbergayoung, i did load testing this weekend and an explicit refresh of the revocation list is a less-than-optimal choice.17:35
*** alop has joined #openstack-dev17:35
*** johnpur has joined #openstack-dev17:35
morganfainbergayoung, it still performs better than no-cache if someone is doing mass create/revocations, but still not great.17:35
*** jmontemayor has joined #openstack-dev17:36
*** dstanek_ is now known as dstanek17:36
ayoungmorganfainberg, I am totally OK with that17:36
*** colinmcnamara has quit IRC17:37
ayoungI suspect your "Less than optimal" is still orders of Magnitude greater than what we have now17:37
*** sarob has joined #openstack-dev17:37
ayoungmorganfainberg, and, I assume, you tested against MySQL, which has issues with large deletes,  so I suspect that it is just trading one performance hit for another17:37
*** lucasagomes has quit IRC17:38
morganfainbergayoung, well.  sortof.17:38
*** vartom7 has quit IRC17:38
morganfainbergayoung, at a certain point you can saturate the lock contention17:38
morganfainbergayoung, since a revocation then also has to rebuild the list.  it's a lot better to just invalidate.17:39
*** mjfork has joined #openstack-dev17:39
morganfainbergayoung, but it is MUCH better when you have SQL actions going on.17:39
morganfainbergayoung, in icehouse i'm thinking we move the cache beyond the crypto signing section17:40
morganfainbergayoung so we don't need to re-sign the same data everytime.17:41
*** HenryG has joined #openstack-dev17:42
*** SergeyLukjanov has joined #openstack-dev17:45
*** mjfork has quit IRC17:45
ayoungyes.17:46
morganfainbergayoung, i'll open a couple low-prio bugs on this so we can track it.17:47
ayoungmorganfainberg, we should not be signing the same data every time.  If a new revocation comes in, we should be generating a new list and signing it.  No?17:47
*** kushal has joined #openstack-dev17:48
ayoungOr you mean,  each revoation event gets signed separately?17:48
morganfainbergayoung, correct.  signing happens at the controller for the revocation list17:48
ayoungmorganfainberg, that ^^ is a good idea17:48
morganfainbergayoung, i am currently caching at the manager/driver17:48
morganfainbergthis is one case where pulling that down a layer would help.17:48
*** mlavalle has quit IRC17:49
ayoungmorganfainberg, so...next release, when we publish revocation events, we can sign each one....that puts the onus on the consumer to individually unwrap those signatures...but maybe we can make the signature optional17:49
*** maheshp has joined #openstack-dev17:49
*** maheshp1 has joined #openstack-dev17:50
morganfainbergayoung, yes.17:50
ayoungI would suspect that signing the revocation events for an online lookup is just overhead17:50
*** johnpur has quit IRC17:50
ayoungthe only reason to sign them is to be able to publish them between Keystone servers17:50
morganfainbergayoung, well if we're putting it on a notification bus, signing (same reason KDS is a good idea) is likely a good idea17:51
ayoungmorganfainberg, true17:51
ayoungbut then that would be on an individual event17:51
ayoungnot on the overall list17:51
*** shakayumi has joined #openstack-dev17:52
ayoungbut...we can regenerate the list on demand...and if most consumers are getting revocation events via the message bus, the signed versions will be relatively rare17:52
morganfainbergayoung, it might make sense to still sign the whole list, prevents mitm attacks. (not super likely, but still prob. a good idea)17:52
*** johnpur has joined #openstack-dev17:52
ayoungbut could still lead to churn with a malicious user :create,delete, fetch17:52
morganfainbergyes.17:53
morganfainbergi think that gets solved with API limits17:53
morganfainbergrequest limits*17:53
*** basha has joined #openstack-dev17:54
*** MaxV has joined #openstack-dev17:55
*** xmltok has quit IRC17:55
*** xmltok has joined #openstack-dev17:56
*** morazi has joined #openstack-dev17:57
*** yjiang5_away is now known as yjiang517:57
*** boris-42 has joined #openstack-dev17:58
*** donaldh has quit IRC17:59
*** dstanek has quit IRC17:59
*** nachi has joined #openstack-dev18:00
*** senk has quit IRC18:00
dolphminsanidade: depends on the request method, at least18:00
*** jtomasek has quit IRC18:01
*** gaelL has quit IRC18:03
*** shang has quit IRC18:03
*** rcrit has quit IRC18:04
*** gaelL has joined #openstack-dev18:04
*** jamielennox|away is now known as jamielennox18:05
*** SumitNaiksatam has joined #openstack-dev18:06
*** ruhe has quit IRC18:06
*** eglynn has joined #openstack-dev18:06
*** vartom7 has joined #openstack-dev18:07
*** networkstatic has quit IRC18:07
*** garyk1 has joined #openstack-dev18:08
*** colinmcnamara has joined #openstack-dev18:10
*** donaldh has joined #openstack-dev18:11
*** dina_belova has joined #openstack-dev18:13
*** tgall_foo has joined #openstack-dev18:14
*** Guest42167 has joined #openstack-dev18:16
*** mlavalle has joined #openstack-dev18:17
*** rcrit has joined #openstack-dev18:17
*** greenmoss has joined #openstack-dev18:17
*** dina_belova has quit IRC18:18
*** garyk1 has quit IRC18:19
*** garyk has joined #openstack-dev18:20
*** Mandell has quit IRC18:20
*** Guest42167 has quit IRC18:21
*** alop has quit IRC18:22
*** dina_belova has joined #openstack-dev18:23
*** novas0x2a|laptop has quit IRC18:24
*** melwitt has joined #openstack-dev18:27
*** jjahns has joined #openstack-dev18:27
*** donaldh has quit IRC18:27
*** jjahns has quit IRC18:27
*** johnthetubaguy has quit IRC18:27
*** alop has joined #openstack-dev18:28
*** dina_belova has quit IRC18:28
*** Mandell has joined #openstack-dev18:29
insanidadedolphm: sorry. my bad.18:31
*** waa has quit IRC18:31
*** aelkikhia has joined #openstack-dev18:32
dolphmayoung: do you have the kds api / impl review links handy?18:32
ayoungsure18:33
dolphmayoung: i'd like to get them on the agenda for the next meeting18:33
*** pschaef has quit IRC18:33
ayoungdolphm, https://review.openstack.org/#/c/40692/18:33
ayounghttps://review.openstack.org/#/c/37118/18:33
*** dstanek_ has joined #openstack-dev18:34
*** ruhe has joined #openstack-dev18:35
*** kushal has quit IRC18:36
*** greenmoss has quit IRC18:37
*** xga has joined #openstack-dev18:37
*** ruhe has quit IRC18:38
*** xqueralt is now known as xqueralt-afk18:39
*** aelkikhia has left #openstack-dev18:41
*** basha_ has joined #openstack-dev18:42
*** briancurtin has quit IRC18:42
*** xga has quit IRC18:42
*** dprince has quit IRC18:43
*** basha_ has quit IRC18:43
*** dkehn is now known as dkehn_away18:44
*** basha has quit IRC18:45
*** amohn9 has joined #openstack-dev18:46
*** jasdeepH has joined #openstack-dev18:46
*** waa has joined #openstack-dev18:48
*** dperaza1 has joined #openstack-dev18:49
*** MaxV has quit IRC18:50
*** dperaza has quit IRC18:50
*** novas0x2a|laptop has joined #openstack-dev18:52
*** ociuhandu has quit IRC18:52
*** jmontemayor has quit IRC18:52
*** jpeeler has quit IRC18:59
*** jpeeler has joined #openstack-dev18:59
*** HenryG has quit IRC19:00
*** nati_ueno has joined #openstack-dev19:01
ayoungdolphm, maybe we should have general buckets  for the sessions.  tokens.  Identity and, authentication, new extensions19:02
ttxdperaza: we cut the havana release branch a few days before the RC1 publication, which varies between projects ("when ready")19:03
ttxdperaza1: that branch becomes stable/havana at release time (Oct 14)19:03
henrynashgyee: so how about a compromise….what if I placed any non-filtering, non paginates into a separate iterable store, that you could then enumerate….19:04
*** mmagr has joined #openstack-dev19:04
*** sballe has quit IRC19:04
henrynashgyee: that way, we don't pass around the url, and actually allow to build extensions in a structured way19:04
gyeehenrynash, that's would be fine19:04
gyeeI need a way to reconstruct the entire query string19:04
henrynashgyee: ok19:05
henrynashI'll propose something later19:05
henrynash(today)19:05
gyeehenrynash, thanks19:05
dolphmttx: ack, thank you sir19:05
*** johnpur has quit IRC19:05
stevemarayoung: not a bad idea19:06
*** garyk has quit IRC19:06
ttxdperaza, dolphm: so master keeps on being havana (and feature frozen) until we can get the RC1 buglist down to 0.19:06
stevemarayoung: the usual 1hr block might not be enough time though19:06
dperaza1ttx: so at that point stable/havana is cut19:07
dolphmdperaza1: release-proposed first19:08
dperaza1when RC1 buglist gets to 0?19:08
dolphmdperaza1: ah, yeah that's time for stable/havana19:08
*** sushils has quit IRC19:08
dolphmerr19:08
ttxdperaza1: it's called milestone-proposed, but yes, it's what will become stable/havana19:08
dperaza1so there is never an intermediate branch where folks do work19:08
dperaza1ok19:09
ttx(not calling it stable because, well, it oisn't yet)19:09
dperaza1right19:09
*** otherwiseguy has quit IRC19:09
*** ayoung has quit IRC19:09
dperaza1but people will be able to submit bug fixes to milestone-proposes?19:09
*** jmontemayor has joined #openstack-dev19:09
dolphmdperaza1: generally master first, and then they're backported to milestone-proposed19:10
ttxdperaza1: ocne milestone-proposed is cut, bugfixes land in master first and are backported19:10
dolphmdperaza1: just like would backport to stable/havana, if that existed19:10
dperaza1I'm trying to figure out when master wil diverge19:10
*** alunduil has quit IRC19:10
ttxwhich is the main reason why we don't cut it before... the road to RC1 has so many bugxies backporting all of them would just be painful19:10
dolphmdperaza1: when https://launchpad.net/keystone/+milestone/havana-rc1 is all Fix Implemented19:10
ttxmaster will diverge after RC119:11
ttxdperaza1: https://wiki.openstack.org/wiki/ReleaseCycle might help19:11
*** tgall_foo has quit IRC19:11
*** maheshp1 has quit IRC19:12
dolphmttx: i stumbled into this earlier today which should maybe go away https://wiki.openstack.org/wiki/Process19:12
ttxdolphm: indeed, moving to deprecated19:12
dolphmmorganfainberg: where was the merge conflict on https://review.openstack.org/#/c/43609/ ?19:14
dperaza1ttx: https://wiki.openstack.org/wiki/ReleaseCycle  did helped, thanks19:14
*** garyk has joined #openstack-dev19:15
ttxdperaza1: i should probaly add to https://wiki.openstack.org/wiki/BranchModel to show what happens around release time19:15
morganfainbergdolphm, someone added a super call to test_backend_ldap.LdapIdentitySqlAssignment i think. so it didn't need to delete the cach region backend explciitly19:15
dperaza1so master will start getting new features when milestone-proposed is cut19:15
*** tgall_foo has joined #openstack-dev19:15
dolphmdperaza1: yes19:15
morganfainbergdolphm, jenkins is almost done checking the new changeset19:15
ttxdperaza1: exactly, that's when icehouse opens19:15
dolphmmorganfainberg: i'm keeping an eye on it19:15
dolphmmorganfainberg: actually it's done19:15
ttxdperaza1: that should be in ~2/3 weeks19:15
*** dripton_ is now known as dripton19:15
dperaza1ok, makes sense19:16
ttxdepednign how many release-critical bugs there is and how fast we go through them19:16
dperaza1that gives me some time too19:16
morganfainbergcool.  it was just tests.19:16
morganfainbergFalling back to patching base and 3-way merge...19:16
morganfainbergAuto-merging keystone/tests/test_backend_ldap.py19:16
morganfainbergCONFLICT (content): Merge conflict in keystone/tests/test_backend_ldap.py19:16
dperaza1this is good to know to keep continous integration at a min impact19:16
*** amohn9 has quit IRC19:17
*** jasdeepH has quit IRC19:20
*** rcrit has quit IRC19:20
*** zul has quit IRC19:21
*** waa has quit IRC19:21
roaetWhat is the difference (and preferred use-of) Fixes-bug and Closes-bug?19:22
*** ayoung has joined #openstack-dev19:22
*** anteaya has joined #openstack-dev19:23
*** dina_belova has joined #openstack-dev19:24
ttxdolphm: https://blueprints.launchpad.net/keystone/+spec/notifications is marked implemented but https://review.openstack.org/#/c/44446/ is still going on19:25
ttxdolphm: could be handled as a bug, I guess19:25
*** mmagr has quit IRC19:26
stevemarttx: that patch is just the docs, the impl is checked in19:26
ttxstevemar: some would say the feature is incomplete without docs :)19:26
dolphmstevemar: and just a doc revision at that19:26
ttxstevemar: but in this precise case it could be considered a doc bug being fixed19:26
stevemar++ right, just a doc revision19:26
clarkbroaet: https://wiki.openstack.org/wiki/GitCommitMessages#Including_external_references19:27
stevemardolphm: is http://summit.openstack.org/ for design sessions?19:27
dolphmstevemar: yes19:28
stevemardolphm: cool, morganfainberg: you were looking for this too iirc ^19:28
dolphmstevemar: it just opened today19:28
morganfainbergstevemar, yep, found it earlier today.19:28
stevemari am so behind on the times19:29
*** dina_belova has quit IRC19:29
*** johnpur has joined #openstack-dev19:29
*** gyee has quit IRC19:30
dolphmdstanek_: you might be interested in reading http://ci.openstack.org/zuul/gating.html19:30
morganfainbergdolphm, https://bugs.launchpad.net/keystone/+bug/1099966 i tried to duplicate this over the weekend, i couldn't get an integrity error any way i tried, if you had any insight it would be appreciated, otherwise i'm going to mark it incomplete and ask for more info.19:30
uvirtbotLaunchpad bug 1099966 in keystone "Race condition when rapidly deleting and creating tokens" [Medium,Triaged]19:30
morganfainbergto be fair, i was testing against master not folsom or grizzly.19:31
*** nachi has left #openstack-dev19:32
dolphmmorganfainberg: that except block is still in there?19:32
dolphmmorganfainberg: i mean, it is still in there... i just came across it recently and thought it was odd19:32
morganfainbergdolphm, hrm.19:32
dolphmmorganfainberg: search for that comment19:32
morganfainbergoh that one.19:33
*** zul has joined #openstack-dev19:33
*** trey_h has joined #openstack-dev19:33
*** rcrit has joined #openstack-dev19:34
morganfainbergdolphm, you mean Auth controller _authenticate_token?19:35
morganfainberghttps://github.com/openstack/keystone/blob/master/keystone/token/controllers.py#L14319:35
dolphmmorganfainberg: http://pasteraw.com/lhervgzh6rnj0h04rv7u4e76fcenw5t19:35
morganfainbergah moved to the provider19:36
*** jprovazn has quit IRC19:36
*** eglynn has quit IRC19:36
morganfainbergdolphm, oh, that is an odd one.19:37
*** athomas has quit IRC19:37
dolphmstevemar: revised https://review.openstack.org/#/c/44446/ -- see the first paragraph19:38
*** vartom7 has quit IRC19:38
insanidadeanteaya: hey. just managed to instantiate a neutron's client and invoke commands :)19:38
anteayainsanidade: yay19:38
anteaya\o/19:38
anteayacan't wait to read how you did it19:38
anteayasuccess!19:38
stevemardolphm: cool19:39
stevemardolphm: looks good now, do you think there are any resources with 2 words?19:40
*** jbresnah_ has quit IRC19:40
stevemardolphm: nvm, just read your comment19:40
insanidadeanteaya: I just  missed some auth args in the constructor. Once I added the required ones - based on debugging (which I could only perform thanks to your blog post), I god the right object instance and further keystone authentications were also successful.19:40
anteayayahoo!19:40
anteayaonce you blog it up, post me the url and I will append to my post19:41
*** vipul is now known as vipul-away19:41
*** sheepdog80 has joined #openstack-dev19:42
morganfainbergdolphm, short of bad entropy, i don't see how uuid.uuid4().hex should be generating the same token_id. unless it isn't somehow eventlet safe and eventlet wsgi is doing something odd.19:42
insanidadeanteaya: I'll probably write something and let you append to your post. I don't have a blog where I post such things.19:42
*** aelkikhia has joined #openstack-dev19:42
anteayatime to start19:42
insanidadeanteaya: probably :)19:42
anteayago go go19:42
anteayado it, it is way better than giving your notes to me19:42
*** sarob_ has joined #openstack-dev19:43
*** sarob has quit IRC19:45
*** tgall_foo has quit IRC19:45
*** MaxV has joined #openstack-dev19:46
*** MaxV has quit IRC19:46
*** sarob_ has quit IRC19:47
*** ndipanov_afk is now known as ndipanov19:47
*** MaxV has joined #openstack-dev19:48
insanidadeWhat's the difference between the demo and admin projects in a default openstack installation? Do they mean some hierarchical difference ?19:49
*** sheepdog80 has quit IRC19:49
*** otherwiseguy has joined #openstack-dev19:49
*** aelkikhia has quit IRC19:50
*** sheepdog80 has joined #openstack-dev19:50
anteayathey aren't projects as much as permissions insanidade19:50
dolphmanteaya: well, they are projects19:50
anteayaokay, new info for me19:50
* anteaya listens19:50
dolphminsanidade: 'admin' is a bit special in that it happens to be an arbitrary project upon which the admin user is granted the admin role19:50
*** jasdeepH has joined #openstack-dev19:50
dolphminsanidade: but the 'demo' project is intended to represent the bulk of a cloud's projects... customer-owned resources, etc19:51
morganfainbergdolphm, that code looks like it can be ripped out.  before providers, the "identical" tokens was becasuse the ID was PKI hash, not a uuid.  so you could (in theory) get rapid token issuance.19:51
morganfainbergdolphm, i'll propose a review to remove that superfluous try/except. to that bug. (or i can jsut mark as invalid)19:51
insanidadehmm. makes sense. so if a user is part of the demo project, would that user be granted more permissions than a user in the demo project ?19:52
dolphminsanidade: (is one of those not supposed to say 'demo'?)19:52
morganfainbergs/get rapid token issuance/get duplicate with rapid token issuance19:52
*** danwent has quit IRC19:52
dolphminsanidade: but either way, the answer is no-- because it depends on what role is assigned... not the project they're assigned on19:52
*** tsmithgc has joined #openstack-dev19:52
dolphmmorganfainberg: attach it to the bug19:53
morganfainbergdolphm will do.19:53
dolphmmorganfainberg: sounds like reasonable clean up following the bug report19:53
*** senk has joined #openstack-dev19:53
insanidadedolphm: ops. totally messed things up :P. I meant "admin" for the first "demo" occurrence. but I got the point on your following sentence.19:54
dolphminsanidade: e.g. assigning the 'manager' role to a user on a project probably gives more permissions than assigning the 'guest' role19:54
dolphminsanidade: but the role names are just arbitrary labels, and their meaning is determined by the deployer via policy.json19:55
* insanidade paying attention19:55
* dolphm that's all i wanted to say ;)19:56
dolphmdoes all that make sense?19:56
insanidadedolphm: absolutely.19:57
*** colinmcnamara has left #openstack-dev19:57
*** garyk1 has joined #openstack-dev19:57
insanidadereminds me of other tools I've worked with. Permissions based on roles.19:57
*** garyk has quit IRC19:57
insanidadedolphm: so multiple roles (and hence multiple permissions) are possible inside the same project, right ?19:58
dolphminsanidade: definitely19:58
insanidadegot it19:58
*** senk1 has joined #openstack-dev19:59
insanidadethanks :)20:00
*** gabrielhurley has joined #openstack-dev20:00
*** senk has quit IRC20:00
*** johnpur has quit IRC20:00
*** vipul-away is now known as vipul20:01
*** johnpur has joined #openstack-dev20:02
*** sheepdog80 has quit IRC20:03
*** johnpur has quit IRC20:03
*** sheepdog80 has joined #openstack-dev20:03
*** danwent has joined #openstack-dev20:04
*** Guest71813 is now known as zz_Guest7181320:06
morganfainbergdolphm, oh, i was wrong.  we could still race here.  i'm going to just add a token salt in to ensure we don't ever have this issue actually occuring.20:11
*** martine_ has quit IRC20:12
*** tmbailey123 has quit IRC20:12
*** jbresnah_ has joined #openstack-dev20:13
*** sarob has joined #openstack-dev20:13
*** briancurtin has joined #openstack-dev20:13
*** reed has quit IRC20:19
*** yolanda has quit IRC20:19
*** Max_ has joined #openstack-dev20:20
*** sarob has quit IRC20:22
*** MaxV has quit IRC20:24
*** dina_belova has joined #openstack-dev20:24
dolphmmorganfainberg: now i'm lost20:24
*** russellb is now known as markmc_by_proxy20:25
dolphmmorganfainberg: salt fixes a race condition20:25
dolphm?20:25
*** markmc_by_proxy is now known as russellb20:25
morganfainbergdolphm, the race condition is that you'd have the same token data when you generate the ID: https://github.com/openstack/keystone/blob/master/keystone/token/providers/pki.py#L3720:25
morganfainbergdown to the expiry/issue_at time (subsecond? in v3)20:26
morganfainbergdolphm, if you add some salt or any random data into to the token_data that is unique, you can't get the same token_id.20:26
morganfainbergsorry, salt is a bad term20:26
morganfainberguhm, random data would be a better term.20:27
*** rnirmal has quit IRC20:27
*** sheepdog801 has joined #openstack-dev20:29
*** dina_belova has quit IRC20:29
morganfainbergdolphm, it's a fairly narrow race condition as is.20:32
*** sheepdog80 has quit IRC20:32
morganfainbergand can only result in access denied because a token was revoked while it was still in use since it was issued twice.20:33
dolphmmorganfainberg: that's what the token ID provides in UUID tokens, and microsecond precision issued_at was supposed to limit the impact of that20:33
*** aelkikhia has joined #openstack-dev20:33
morganfainbergdolphm, ah we could move to microsecond precision on issued_at for v2 tokens as well then?20:34
morganfainbergoh we are20:34
morganfainbergugh, missed that.20:35
morganfainbergin that case my original statement stands, we are free of the race condition (sorry for the confusion)20:35
*** vladimir3p has joined #openstack-dev20:35
morganfainbergdoubful we will issue two tokens in the same microsecond20:36
*** Max_ has quit IRC20:36
*** aelkikhia has quit IRC20:37
morganfainbergdolphm, but we should probably leave the try/except in.20:38
dolphmstevemar: there's just a few small changes to get this in line with the state of the proposed spec, correct? https://review.openstack.org/#/c/44504/20:38
*** rcrit has quit IRC20:38
dolphmmorganfainberg: is that the only scenario where the except would be hit? duplicate issues in the same microsecond?20:38
morganfainbergdolphm, looks like.20:38
morganfainbergdolphm, well.20:39
morganfainbergdolphm, sec20:39
*** donaldh has joined #openstack-dev20:40
*** gyee has joined #openstack-dev20:40
morganfainbergdolphm, correct. same microsecond, issued_at is set even if a new token is issued with the same expiry.20:41
*** ayoung has quit IRC20:45
*** tmclaugh[work] has quit IRC20:46
*** russellb is now known as markmc_by_proxy20:50
*** markmc_by_proxy is now known as russellb20:50
*** rcrit has joined #openstack-dev20:51
*** martyntaylor has quit IRC20:53
*** SumitNaiksatam has quit IRC20:54
*** sarob has joined #openstack-dev20:54
*** SumitNaiksatam has joined #openstack-dev20:54
*** Adri2000 has quit IRC20:55
*** drewland_ has quit IRC20:58
*** branen__ has quit IRC20:59
*** MaxV has joined #openstack-dev20:59
*** boris-42 has quit IRC20:59
*** danwent has quit IRC21:01
*** carl_baldwin has joined #openstack-dev21:01
*** sarob_ has joined #openstack-dev21:01
*** dvarga has quit IRC21:02
*** safchain has joined #openstack-dev21:02
*** mdenny has quit IRC21:03
SlickNikdtroyer: addressed your comments on https://review.openstack.org/#/c/38169/. Please review when you get a chance. Thanks!21:04
*** safchain has quit IRC21:05
dtroyerSlickNik: will do, thanks.  likely tomorrow morning...21:05
*** sarob has quit IRC21:05
*** sarob_ has quit IRC21:05
SlickNikdtroyer: Sounds good. Thanks much!21:06
*** senk1 has quit IRC21:08
*** jasdeepH has quit IRC21:09
*** sheepdog80 has joined #openstack-dev21:10
*** dkehn_away is now known as dkehn21:11
*** ndipanov has quit IRC21:11
*** SergeyLukjanov has quit IRC21:12
*** sandywalsh has quit IRC21:12
*** sheepdog801 has quit IRC21:12
*** jruzicka has quit IRC21:13
*** rfolco has quit IRC21:15
*** sgordon has quit IRC21:20
*** pcm_ has quit IRC21:20
*** dolphm has quit IRC21:21
*** sarob has joined #openstack-dev21:23
*** sandywalsh has joined #openstack-dev21:24
*** armax has joined #openstack-dev21:24
*** dina_belova has joined #openstack-dev21:25
*** radsy has joined #openstack-dev21:26
*** sushils has joined #openstack-dev21:29
*** senk1 has joined #openstack-dev21:29
*** jasdeepH has joined #openstack-dev21:29
*** dina_belova has quit IRC21:30
*** eglynn has joined #openstack-dev21:30
dperaza1anyone knows when oslo will be synched with other projects?21:31
*** alunduil has joined #openstack-dev21:33
*** lbragstad has quit IRC21:35
*** litong has quit IRC21:37
*** alaski is now known as alaski-vacation21:38
*** maheshp has joined #openstack-dev21:38
*** maheshp1 has joined #openstack-dev21:38
jamielennoxdperaza1, it's handled by the projects, they can submit a review to sync whenever they like21:40
dperaza1so21:41
dperaza1I should be asking nova for example?21:41
jamielennoxso if there is something you need from oslo you can sync it yourself and put the review up21:41
jamielennoxthere generally isn't a schedule for these things, just as needed21:41
dperaza1I suspect it will be done close to release?21:42
dperaza1of this is not done automatically?21:42
jamielennoxmaybe, maybe not. If there is nothing they need from a newer oslo then i would suggest they would stay with what is known to be stable21:43
dperaza1it needs to go through nova,cinder,neutron...etc review21:43
jamielennoxno it's not automatic21:43
dperaza1it sounds like a lot of reviews for the same patches?21:44
bknudsonwe don't do full review of oslo syncs. just look to see if it was done correctly21:44
jamielennoxdperaza1, yes and there is a lot of discussion about it on the mailing list for example21:44
*** zz_Guest71813 is now known as leif21:44
jamielennoxbut generally if it's an oslo sync so long as it doesn't break anything it's just accepted21:44
*** leif is now known as Guest2620721:45
jamielennoxkeystone people, auth_token takes a paremeter http_request_max_retries. if this is set to eg 3, should this be 4 requests total?21:45
bknudsonjamielennox: what do the tests do?21:46
jamielennoxcurrently the tests say that set to 0 results in 1 request and set to 10 results in 10 tests21:46
*** Mandell has quit IRC21:47
*** kenperkins has quit IRC21:47
dperaza1so lets say I want to do a nova synch with oslo-incubator21:47
*** Mandell has joined #openstack-dev21:47
*** Guest68015 is now known as oubiwann21:47
jamielennoxdperaza1, there is an update.sh in the root folder of oslo-incubator it takes a path to another project21:47
dperaza1I would need to fallow this https://wiki.openstack.org/wiki/Oslo Synch section21:47
dperaza1right21:47
jamielennoxso ./update.sh ../nova for example21:47
dperaza1right21:47
dperaza1but that will bring all the changes in not just the one I'm interested21:48
bknudsondperaza1: you can give it a module name.21:48
*** senk1 has quit IRC21:48
dperaza1Any nova folks here21:48
*** SumitNaiksatam has quit IRC21:48
jamielennoxdperaza1, it takes a --module as well, you can check #openstack-nova for nova specific21:49
dperaza1Let me check how they usually do this21:49
*** jbresnah_ has quit IRC21:50
jamielennoxbknudson, not sure if you saw the above, the problem is that the tests are inconsistent because the test of retries is after the request is made21:50
*** amotoki_ has joined #openstack-dev21:50
*** amotoki_ has quit IRC21:50
jamielennoxi was making it a pre-check so i kind of need to define it one way or the other21:50
*** amotoki_ has joined #openstack-dev21:50
bknudsonjamielennox: should we be changing the behavior?21:51
*** jayg is now known as jayg|g0n321:51
jamielennoxi'm a little nervous about if you set it to 0 then no request is attempted at all, but that would result in 11 requests for the 10 retries21:52
bknudsonjamielennox: is that what 0 does now?21:52
jamielennox0 results in 1 attempt21:52
jamielennoxmind you i think 1 results in 1 attempt as well21:52
bknudsonso maybe it's just a matter of a special case for 021:52
bknudsonsince not making any request wouldn't make sense.21:53
*** branen has joined #openstack-dev21:53
*** mdenny has joined #openstack-dev21:53
jamielennoxah ok, that's not quite the issue, the test is counting the number of sleep calls that the retries cause21:55
*** kenperkins has joined #openstack-dev21:55
jamielennoxmine will suffer from the issue that the last failed request will still cause a sleep even though there will be no follow up21:55
*** branen_ has joined #openstack-dev21:56
jamielennoxso same amount of requests but +1 sleeps, that must be why it was written in such a strange way initially21:56
*** MIDENN_ has joined #openstack-dev21:56
*** KurtMartin has joined #openstack-dev21:56
*** dkranz has quit IRC21:57
*** mdenny has quit IRC21:59
*** branen has quit IRC21:59
*** trey_h_ has joined #openstack-dev22:00
*** eharney has quit IRC22:00
*** kbringard has quit IRC22:00
*** MaxV has quit IRC22:01
*** ayoung has joined #openstack-dev22:02
*** ftcjeff has joined #openstack-dev22:02
*** trey_h has quit IRC22:03
stevemardolphm: still around?22:04
*** trey_h_ has quit IRC22:05
alexpilottijd__: ping22:06
*** burt has quit IRC22:08
*** matrohon has quit IRC22:09
*** jasondotstar has quit IRC22:09
*** armax has left #openstack-dev22:09
*** SumitNaiksatam has joined #openstack-dev22:11
*** henrynash_ has joined #openstack-dev22:11
*** senk has joined #openstack-dev22:11
*** henrynash has quit IRC22:12
*** henrynash_ is now known as henrynash22:12
*** bfschott has quit IRC22:13
*** sarob_ has joined #openstack-dev22:13
*** sarob_ has quit IRC22:14
*** sarob_ has joined #openstack-dev22:14
*** melwitt has quit IRC22:14
*** melwitt1 has joined #openstack-dev22:14
*** datsun180b has quit IRC22:15
*** sarob has quit IRC22:17
*** rcrit has quit IRC22:18
*** sarob has joined #openstack-dev22:18
*** feleouet has quit IRC22:18
*** feleouet has joined #openstack-dev22:18
*** rcrit has joined #openstack-dev22:20
*** sarob_ has quit IRC22:21
*** jmontemayor has quit IRC22:23
*** donaldh has quit IRC22:23
*** jbresnah_ has joined #openstack-dev22:24
*** jamielennox is now known as jamielennox|away22:24
*** sheepdog80 has quit IRC22:24
*** sheepdog80 has joined #openstack-dev22:24
*** noslzzp has quit IRC22:25
*** dina_belova has joined #openstack-dev22:25
*** sheepdog80 has quit IRC22:26
*** KurtMartin has quit IRC22:26
*** jmontemayor has joined #openstack-dev22:27
*** changbl has quit IRC22:28
*** dolphm has joined #openstack-dev22:28
*** fbo is now known as fbo_away22:28
*** utlemming has quit IRC22:29
*** dina_belova has quit IRC22:30
*** briancurtin has quit IRC22:31
*** dolphm has quit IRC22:33
*** eharney has joined #openstack-dev22:33
*** galstrom is now known as galstrom_zzz22:34
*** senk has quit IRC22:34
*** topol has quit IRC22:35
*** maheshp1 has quit IRC22:36
*** reed has joined #openstack-dev22:36
*** FunnyLookinHat has quit IRC22:39
*** mrodden has quit IRC22:40
*** sarob has quit IRC22:41
*** sarob has joined #openstack-dev22:41
*** kenperkins has quit IRC22:42
*** otherwiseguy has quit IRC22:43
*** kenperkins has joined #openstack-dev22:44
*** markmcclain has quit IRC22:44
*** prad has quit IRC22:46
*** sarob has quit IRC22:46
*** jergerber has quit IRC22:48
*** alexpilotti has quit IRC22:48
*** eglynn has quit IRC22:48
*** ftcjeff has quit IRC22:49
*** alop has quit IRC22:52
*** mrodden has joined #openstack-dev22:54
*** mrodden1 has joined #openstack-dev22:56
*** alop has joined #openstack-dev22:56
*** mrodden has quit IRC22:58
*** alop has quit IRC22:59
*** armax has joined #openstack-dev22:59
*** danwent has joined #openstack-dev23:01
*** mrodden1 is now known as mrodden23:01
*** tstevenson has quit IRC23:01
*** sarob has joined #openstack-dev23:03
*** jpich has quit IRC23:03
*** utlemming has joined #openstack-dev23:04
*** amotoki_ has quit IRC23:05
*** amotoki_ has joined #openstack-dev23:05
*** gabrielhurley has quit IRC23:06
*** mlavalle has left #openstack-dev23:07
*** dstanek has joined #openstack-dev23:07
*** tjones has joined #openstack-dev23:11
*** vkmc has quit IRC23:12
*** edmund has quit IRC23:13
*** jcoufal has quit IRC23:16
*** gordc has quit IRC23:17
*** morazi has quit IRC23:18
*** sarob has quit IRC23:19
*** Guest26207 is now known as zz_Guest2620723:19
*** sarob has joined #openstack-dev23:19
*** mkollaro has quit IRC23:20
*** jhesketh_ has quit IRC23:21
*** pmathews has quit IRC23:21
*** shardy is now known as shardy_afk23:21
*** dolphm has joined #openstack-dev23:22
*** markwash has quit IRC23:22
*** KurtMartin has joined #openstack-dev23:23
*** sarob has quit IRC23:24
*** KurtMartin has quit IRC23:24
*** esheffield has quit IRC23:24
*** jmontemayor has quit IRC23:24
*** rfolco has joined #openstack-dev23:26
*** alok_ has joined #openstack-dev23:27
*** SumitNaiksatam has quit IRC23:28
*** cdub has quit IRC23:29
*** networkstatic has joined #openstack-dev23:33
*** insanidade has quit IRC23:33
*** carl_baldwin has quit IRC23:35
*** vipul is now known as vipul-away23:37
*** stevemar has quit IRC23:40
*** zz_Guest26207 is now known as leif23:41
*** leif is now known as Guest1217223:41
*** changbl has joined #openstack-dev23:42
*** noorul has quit IRC23:43
*** noorul` has joined #openstack-dev23:43
*** vipul-away is now known as vipul23:44
*** SumitNaiksatam has joined #openstack-dev23:46
*** cdub has joined #openstack-dev23:47
*** safchain has joined #openstack-dev23:49
*** sarob has joined #openstack-dev23:50
*** sarob has quit IRC23:51
*** Guest12172 is now known as zz_Guest1217223:53
*** mkollaro has joined #openstack-dev23:57
*** noorul`` has joined #openstack-dev23:57
*** jimfehlig has quit IRC23:58
*** diogogmt has quit IRC23:58
*** noorul` has quit IRC23:58
*** noorul``` has joined #openstack-dev23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!