Tuesday, 2013-11-26

*** jhesketh has quit IRC00:02
*** jhesketh has joined #openstack-dev00:02
*** jhesketh has quit IRC00:03
*** MarkAtwood has quit IRC00:05
*** hemna is now known as hemnafk00:09
*** yjiang51 has quit IRC00:09
*** MaxV has joined #openstack-dev00:12
*** utlemming has quit IRC00:12
*** utlemming has joined #openstack-dev00:13
*** negronjl has quit IRC00:13
*** otherwiseguy has quit IRC00:14
*** sdake_ has joined #openstack-dev00:14
*** sdake_ has quit IRC00:14
*** sdake_ has joined #openstack-dev00:14
*** negronjl has joined #openstack-dev00:15
*** ngoracke has joined #openstack-dev00:16
*** kbrierly has quit IRC00:18
*** vahidh has quit IRC00:18
*** branen_ has quit IRC00:21
*** nati_uen_ has joined #openstack-dev00:23
*** markwash has quit IRC00:25
*** nati_uen_ has quit IRC00:25
*** nati_uen_ has joined #openstack-dev00:26
*** READ10 has joined #openstack-dev00:26
*** achampion has quit IRC00:26
*** nati_ueno has quit IRC00:27
*** vkmc has quit IRC00:28
*** mkollaro1 has quit IRC00:29
*** tomoe_ has joined #openstack-dev00:30
*** ndipanov_gone has quit IRC00:31
*** matsuhashi has joined #openstack-dev00:32
*** ngoracke has quit IRC00:35
*** willingc has joined #openstack-dev00:36
*** carl_baldwin has joined #openstack-dev00:36
*** ngoracke has joined #openstack-dev00:36
*** armax has joined #openstack-dev00:37
*** faramir1 has joined #openstack-dev00:38
*** sumanth has quit IRC00:39
*** achampion has joined #openstack-dev00:41
*** sthaha has joined #openstack-dev00:42
*** MaxV has quit IRC00:42
*** pete5 has quit IRC00:44
*** ykhodork has quit IRC00:45
*** gyee_ has joined #openstack-dev00:45
gyee_jamielennox, there?00:46
*** sushils has quit IRC00:47
*** yamahata_ has joined #openstack-dev00:48
jamielennoxgyee_: yep, just finished a massive reply to the keystoneclient email thread00:48
*** willingc has quit IRC00:48
*** dubsquared has quit IRC00:48
gyee_jamielennox, about the reorganizing catalog patch00:49
gyee_my understanding is that service catalog helper class is really there to facilitate endpoint lookup00:49
jamielennoxyep00:50
gyee_which means it is there to help users easily narrow down the endpoints they are interested in00:50
gyee_which means we really need a generic filtering/lookup mechanism to aide endpoint lookups00:50
gyee_something like lookup_endpoints(**filters)00:51
gyee_an endpoints is basically url and a bunch of attributes00:52
jamielennoxso two points to that: 1st - the patch is a reorganization so that i can fix some region stuff that we need for heat00:52
*** tanisdl has quit IRC00:52
jamielennoxthere aren't any new ideas in there00:52
bknudsonplease don't mix new features with a cleanup.00:52
gyee_but what are we fixing really?00:53
jamielennoxyou can find the region fixes as a dependency of that review00:53
gyee_region is part of the lookup isn't it?00:53
jamielennoxgyee_: that every function used to do it's own filtering and when i tried to fix the region part of it i ended up having to fix it all over the place00:53
gyee_that's my point, you can't fix service catalog till you have a generic filtering mechanism00:54
jamielennoxthey all used to individually process the raw service catalog - what i'm trying to do with this patch is make each function call down to a previous one00:54
jamielennoxok and the 2nd point is what is there to filter that we don't allow explicitly?00:54
jamielennoxthere shouldn't be any freeform data in the service catalog (/me thinks)00:55
jamielennoxthe only things you can filter on are region, endpoint_type, service_type00:55
gyee_jamielennox, we'll end up fixing this forever if we don't have a generic filtering mechanism00:55
jamielennoxbut take for example the endpoint, region and service - the way they are specified changes between v2 and v3 of the catalog00:56
jamielennoxhow are we supposed to generically handle filtering for that sort of thing?00:56
gyee_jamielennox, think LDAP filters00:57
gyee_(&(attribute=value)(attribute=value))00:57
gyee_with this, we are done with lookups, forever :)00:57
jamielennoxno way should we be putting that sort of complexity into the service catalog00:57
jamielennoxi can't think of any example that isn't available with region/endpoint/service (because they are the only choices)00:58
jamielennoxand i don't see what else we expect to add to the service catalog any time soon00:58
gyee_endpoint version? if we decide to go with that route, who knows, subregions?00:58
jamielennoxwe are already resisting version information00:59
gyee_endpoint availability?01:00
gyee_who knows, are we going to change this code everytime we add a new attribute?01:00
jamielennoxok, if we add new data to the service catalog then we should look at generic filtering - however as all of what i'm doing are already named kwargs and we will need them for backwards compatability anyway i don't see this being the time to add it01:00
bknudsonxpath01:01
*** atiwari has quit IRC01:01
gyee_sure xpath01:01
jamielennoxand when that time comes gyee_ and bknudson are volunteering as i'm already shuddering at the concept01:01
*** otherwiseguy has joined #openstack-dev01:02
gyee_jamielennox, actually I am really thinking about adding generic filter myself01:02
jamielennoxxpath does not solve the differences between v2 and v3 service catalog01:02
jamielennoxgyee_: i'm still stuck on what you will want to filter?01:02
*** carl_baldwin has quit IRC01:02
*** guohliu has quit IRC01:03
gyee_jamielennox, we can get your patch merge first01:03
gyee_I'll add the generic filter later01:03
gyee_does that sound like a plan01:03
gyee_?01:03
jamielennoxsounds good to me01:03
gyee_jamielennox, we normalize the endpoints before the lookup01:03
gyee_I mean we should01:04
jamielennoxgyee_: you mean for the generic filtering or for my review?01:04
gyee_jamielennox, I think you did some normalization already right?01:05
jamielennoxyep, so get_endpoints normalizes it01:05
gyee_converting everything to v3 first01:05
jamielennoxwhich simplifies the other functions01:05
gyee_jamielennox, excellent!01:05
jamielennoxactually it converts it to a dict of service_type: data01:06
jamielennoxwhich i guess is fairly close to v301:06
*** tonix has quit IRC01:06
gyee_conceptually, an endpoint is just a collection of attributes, just like an identity01:07
*** clayb has quit IRC01:08
*** mrodden has quit IRC01:09
jamielennoxyes01:09
*** nosnos has joined #openstack-dev01:09
jamielennoxi'm not sure if you can provide 'extra' to an endpoint - i assume you probably could01:09
jamielennoxbut the SC as it currently stands would filter it out01:10
*** avishay has joined #openstack-dev01:10
gyee_jamielennox, just flatten it, the same way we do policy matches01:12
jamielennoxbknudson: +1 on discovery !01:13
*** achampio1 has joined #openstack-dev01:14
*** jorisroovers has quit IRC01:14
*** nati_ueno has joined #openstack-dev01:14
jamielennoxgyee_: yea, i assume it would for storing to the db - but i'm not sure the service catalog would handle it01:14
bknudsonjamielennox: +2 at least.01:14
jamielennoxthough again, not changing behaviour01:14
jamielennoxbknudson: well a +ve response - i'm pretty sure everyone else was just waiting for you and me to figure it out so let's hope smooth sailing from here01:15
*** bcrochet has quit IRC01:15
jamielennoxthe first commit of that one was july 2401:15
*** achampion has quit IRC01:15
*** xarses has quit IRC01:16
gyee_jamielennox, service catalog can have extensions too, just like the other resources01:17
bknudsonjamielennox: and it barely changed since then.01:17
*** jorisroovers has joined #openstack-dev01:17
*** nati_uen_ has quit IRC01:17
gyee_bknudson, we really need to fix service catalog, right now its directionless01:17
jamielennoxgyee_: interesting - hadn't considered that, but it should still work with the patching way i suggested01:17
bknudsongyee_: seems like this is too important to be directionless.01:18
gyee_multiple version service ended up with multiple service types01:18
bknudsonlet's have some docs and tests!01:18
*** mriedem has joined #openstack-dev01:18
jamielennoxbknudson: yea, i've been meaning to get the current service catalog format into the identity-api docs01:18
jamielennoxthere are some tests there but they aren't extensive (though they do provide good coverage)01:19
*** achampion has joined #openstack-dev01:19
gyee_bknudson, what doc? we haven't gotten an agreement what it should look like :)01:19
*** achampio1 has quit IRC01:19
jamielennoxgyee_: i've been on this fight for a while now, we don't want versioned endpoints in the service catalog, we want them to point to one location that allows them to discover versions from there01:19
gyee_version or no version? how to handle multiple versions for a given service? etc01:19
jamielennoxunfortunately that's dificult to do with the current setup01:20
bknudsonwe're just trying to figure out now what the service catalog should look like? I thought you guys had figured this out long before I started working on OS.01:20
bknudsonseems like everyone's using it at least.01:20
bknudsonactually, they don't use it for a lot of things.01:20
gyee_bknudson, we haven't, its like a hot potato01:20
bknudsone.g., nova connecting to glance.01:20
jamielennoxbknudson: the service catalog seems like a de facto standard - as far as i'm aware it was never actually documented01:20
jamielennoxi'm hoping that in the fixup to auth_token i'm going to provide the AccessInfo object directly to services and they can use the service catalog directly from there01:21
*** rongze has joined #openstack-dev01:21
jamielennoxget rid of everyone having to parse it themselves01:21
gyee_jamielennox, bknudson, I gotta run, talk to u guys tomorrow01:23
bknudsonjamielennox: I thought that tokens weren't going to include the service catalog?01:23
*** gyee_ has quit IRC01:23
jamielennoxwhat i'm more excited about though is if i can get everyone to use a session object in clients then i can make auth_token provide a Session object that is already authenticated with your token and then you just pass that to the various clients and you never have to think about service catalog and endpoints again01:23
*** bcrochet has joined #openstack-dev01:23
jamielennoxbknudson: that's gyee's push and i think he is thinking in terms of service users01:23
jamielennoxbknudson: i think filtering is going to be useful but no_catalog is going to be limited01:24
bknudsonI guess if there isn't a catalog then can just request it from keystone.01:24
*** herndon has quit IRC01:24
bknudsonand cache it01:24
jamielennoxfor regular users you really need the catalog so that the services know who to talk to01:25
bknudsonthen we'd have tokens small enough to fit in an http header.01:25
*** mrodden has joined #openstack-dev01:25
jamielennoxwhat is the limit on a http header? i didn't think there was one01:26
bknudsonjamielennox: but it doesn't have to be in the token does it?01:26
*** rongze has quit IRC01:26
bknudsonjamielennox: there has to be a limit on http headers otherwise that would be a huge DoS01:26
*** thomasem has joined #openstack-dev01:27
bknudsonjamielennox: looks like httpd defaults to 8190.01:27
*** mikeoutland has quit IRC01:27
*** mrodden1 has joined #openstack-dev01:27
jamielennoxbknudson: i'm not sure where else to put it if it's not in the token - it's possible that SC's differ between users so you can't cache it globally01:27
*** mikeoutland has joined #openstack-dev01:28
bknudsonjamielennox: the client doesn't get the value out of the PKI token, does it?01:28
jamielennoxwhy is it a DOS problem in a header? i know you can't put them in a URI - but why is the header different? caching?01:28
jamielennoxbknudson: yes, it does01:28
jamielennoxor from the request to the server in the case of UUID01:29
bknudsonjamielennox: where's the code to parse the PKI token? I'd like to see it.01:29
jamielennoxthis is auth_token rather than keystoneclient - but i want to move it to client if possible01:29
bknudsonright, but normal users aren't auth_token... how do they get the service catalog?01:29
*** jeffrey4l has joined #openstack-dev01:30
*** mrodden has quit IRC01:30
jamielennoxclient.auth_ref is an AccessInfo object01:30
*** jorisroovers has quit IRC01:31
jamielennoxso client.auth_ref.service_catalog01:31
jamielennoxin this case we don't decode the PKI token because when you POST to /auth/tokens you get back the JSON data of the token in the body01:31
bknudsonright, that's what I was wondering.01:32
jamielennoxonly auth_token does PKI decoding01:32
bknudsonso the PKI token doesn't need to have the service catalog in that case.01:32
*** mikeoutland has quit IRC01:32
jamielennoxso it does for when you pass it to other servcies01:32
bknudsonauth_token doesn't really care what the user's service catalog was?01:32
jamielennoxfor example you mentioned nova and glance01:33
jamielennoxto find the URL for glance nova is supposed to query the service catalog from the token01:33
bknudsonthe other services should know how to contact their favorite glance server... or do they have to use the same one the user used?01:33
bknudson(this is how it works today... nova is configured with host and port to glance)01:33
jamielennoxyes, but i'm pretty sure there was a thread very recently about them changing this01:34
bknudsonright, but does that come from the client's token or should nova know that already?01:34
jamielennoxso auth_token will decrypt the token an pass that through to nova01:34
jamielennoxwhen contacting glace nova will look at that information and extract the glance server for the correct region from the token data01:35
bknudsontoday, the glance server isn't on a per-request basis ... does that change?01:35
jamielennoxif i understand you question correctly yes01:35
jamielennoxthe URL for glance will be dictated by the information in the token01:35
bknudsonok, seems weird but maybe that's how it has to work... nova hasn't worked that way up until now.01:36
jamielennoxhonestly, i'm not sure what the original point was01:36
bknudsondoes the PKI token need to include the service catalog?01:36
jamielennoxi think it allows for some interesting things with regions or doing project based endpoints01:36
jamielennoxbut we don't implement it01:37
jamielennoxyes, it does - so that services know how to contact each other01:37
bknudsonthe original point of what is? using the service catalog rather than config options?01:37
jamielennoxessentially yes, why did we do a per token service catalog rather than have config file options01:38
jamielennoxit gives some extra flexibility but i don't think we use it01:38
bknudsonI think nova wants to get away from config options just because shouldn't have the same info in 2 places.01:38
jamielennoxbut essentially nova is in the wrong - it should be getting the glance information from the token01:38
*** rongze has joined #openstack-dev01:39
bknudsonhere's the config: http://git.openstack.org/cgit/openstack/nova/tree/etc/nova/nova.conf.sample#n90701:39
bknudsonand then they have glance_api_servers , too.01:39
jamielennoxi'm guessing that was initially so they could maintain compatability when it was split out01:40
*** colinmcnamara has quit IRC01:40
bknudsonneutron_url=http://127.0.0.1:969601:40
*** thomasem has quit IRC01:41
jamielennoxyep, they would need these until the neutron endpoint was available in the SC01:42
bknudsoncinder_endpoint_template=<None>01:42
*** datsun180b has quit IRC01:42
bknudsonyou can do nova image-list and it talks to glance... it must talk to whatever glance it's configured with rather than the one in your token.01:43
*** mrodden has joined #openstack-dev01:45
*** rongze has quit IRC01:46
*** jhesketh has joined #openstack-dev01:47
*** mrodden1 has quit IRC01:47
*** andrewbogott has joined #openstack-dev01:48
*** sandywalsh has quit IRC01:49
*** andrewbogott has quit IRC01:51
*** amcrn has quit IRC01:52
*** xingchao has joined #openstack-dev01:53
*** SumitNaiksatam has quit IRC01:54
*** rnirmal has quit IRC01:55
*** yaguang has joined #openstack-dev01:56
*** sarob has joined #openstack-dev01:56
*** rongze has joined #openstack-dev02:01
*** nosnos_ has joined #openstack-dev02:02
*** yamahata_ has quit IRC02:03
*** ljjjustin has joined #openstack-dev02:03
*** netredem-jr has joined #openstack-dev02:03
*** nati_uen_ has joined #openstack-dev02:03
*** carl_baldwin has joined #openstack-dev02:04
*** melwitt has quit IRC02:05
*** rods has quit IRC02:05
*** nosnos has quit IRC02:05
*** nati_ueno has quit IRC02:06
*** martines has quit IRC02:07
*** netredem-jr has quit IRC02:08
*** carl_baldwin has quit IRC02:08
*** nati_uen_ has quit IRC02:09
*** mriedem has quit IRC02:09
*** nati_ueno has joined #openstack-dev02:10
*** kbringard has quit IRC02:10
*** xarses has joined #openstack-dev02:11
*** martines has joined #openstack-dev02:11
*** erkules has quit IRC02:12
*** glenng has joined #openstack-dev02:12
*** glenng has quit IRC02:15
*** netredem-jr has joined #openstack-dev02:15
*** arata has joined #openstack-dev02:16
*** bingbu has joined #openstack-dev02:18
*** zhikunliu has joined #openstack-dev02:19
*** nati_ueno has quit IRC02:21
*** epim has joined #openstack-dev02:22
*** ykhodork has joined #openstack-dev02:24
*** cpallares has left #openstack-dev02:25
*** erkules has joined #openstack-dev02:26
*** reed has quit IRC02:29
*** xingchao has quit IRC02:29
*** briancurtin has joined #openstack-dev02:29
*** guohliu has joined #openstack-dev02:30
*** xingchao has joined #openstack-dev02:30
*** armax has left #openstack-dev02:31
*** markwash has joined #openstack-dev02:32
*** Mandell has quit IRC02:34
*** dims has quit IRC02:38
*** sarob has quit IRC02:40
*** sarob has joined #openstack-dev02:40
*** fifieldt has quit IRC02:41
*** sarob has quit IRC02:45
*** arosen has quit IRC02:45
*** sarob has joined #openstack-dev02:45
*** arosen has joined #openstack-dev02:47
*** ondergetekende has quit IRC02:47
*** dolphm has joined #openstack-dev02:48
*** danwent has quit IRC02:48
*** ndipanov has joined #openstack-dev02:50
*** ondergetekende has joined #openstack-dev02:51
*** d34dh0r53 has joined #openstack-dev02:59
*** noslzzp has quit IRC03:00
*** sarob has quit IRC03:01
*** sarob has joined #openstack-dev03:02
*** noslzzp has joined #openstack-dev03:05
*** sarob has quit IRC03:07
*** neelashah has joined #openstack-dev03:08
*** kbringard has joined #openstack-dev03:09
*** matsuhashi has quit IRC03:11
*** gyee has quit IRC03:12
*** carl_baldwin has joined #openstack-dev03:16
*** kbringard has quit IRC03:20
*** carl_baldwin has quit IRC03:20
*** paragan has joined #openstack-dev03:21
*** novas0x2a|laptop has quit IRC03:22
*** colinmcnamara has joined #openstack-dev03:22
*** dolphm has quit IRC03:25
*** epim has quit IRC03:25
*** epim has joined #openstack-dev03:26
*** lbragstad has joined #openstack-dev03:26
*** nati_ueno has joined #openstack-dev03:28
*** arosen has quit IRC03:28
*** pixelb has quit IRC03:32
*** dolphm has joined #openstack-dev03:33
*** nati_ueno has quit IRC03:35
*** nati_ueno has joined #openstack-dev03:35
*** sarob has joined #openstack-dev03:37
*** dolphm has quit IRC03:40
*** otherwiseguy has quit IRC03:45
*** twoputt_ has quit IRC03:46
*** twoputt has quit IRC03:46
*** ngoracke has quit IRC03:46
dstaneklbragstad: hi03:53
*** nermina has joined #openstack-dev03:55
*** jorisroovers has joined #openstack-dev03:59
*** jroovers has joined #openstack-dev04:01
*** jorisroovers has quit IRC04:03
*** Mandell has joined #openstack-dev04:04
*** chandankumar has joined #openstack-dev04:05
*** sumanth has joined #openstack-dev04:09
*** aditirav has joined #openstack-dev04:12
*** tdruiva has quit IRC04:12
*** tdruiva has joined #openstack-dev04:13
*** yamahata_ has joined #openstack-dev04:14
*** kbringard has joined #openstack-dev04:15
*** carl_baldwin has joined #openstack-dev04:16
*** tdruiva has quit IRC04:17
*** matsuhashi has joined #openstack-dev04:19
*** kbringard has quit IRC04:19
*** carl_baldwin has quit IRC04:20
*** kbringard has joined #openstack-dev04:20
*** giulivo has quit IRC04:22
*** urulama has joined #openstack-dev04:24
*** kbringard has quit IRC04:25
*** vipul-away is now known as vipul04:29
*** nati_uen_ has joined #openstack-dev04:29
*** nosnos_ has quit IRC04:32
*** nosnos has joined #openstack-dev04:32
*** nati_ueno has quit IRC04:33
*** radsy has joined #openstack-dev04:39
*** aeperezt has quit IRC04:46
*** yamahata_ has quit IRC04:47
*** Mandell has quit IRC04:47
*** buzztroll has quit IRC04:47
*** buzztroll has joined #openstack-dev04:48
*** rongze has quit IRC04:48
*** ArxCruz has quit IRC04:50
*** aditirav has quit IRC04:54
*** aditirav has joined #openstack-dev04:54
*** CaptTofu has quit IRC05:00
*** CaptTofu has joined #openstack-dev05:00
*** rdas has joined #openstack-dev05:01
lbragstaddstanek: hey, sorry just saw your ping05:02
lbragstadwhat's up?05:02
*** sarob has quit IRC05:02
*** shinylasers has quit IRC05:05
*** jasondotstar has quit IRC05:10
*** zigo_ has quit IRC05:10
*** zigo has joined #openstack-dev05:11
*** alex_xu has joined #openstack-dev05:13
*** epim has quit IRC05:14
*** neeti has joined #openstack-dev05:15
*** renlt has joined #openstack-dev05:15
*** carl_baldwin has joined #openstack-dev05:16
*** pablosan has quit IRC05:16
*** rongze has joined #openstack-dev05:19
*** buzztroll has quit IRC05:19
*** buzztroll has joined #openstack-dev05:20
*** carl_baldwin has quit IRC05:21
*** kbringard has joined #openstack-dev05:21
*** buzztroll has quit IRC05:24
*** buzztroll has joined #openstack-dev05:25
*** kbringard has quit IRC05:26
*** rushiagr has joined #openstack-dev05:27
*** rongze has quit IRC05:27
*** sarob has joined #openstack-dev05:28
*** mkollaro has joined #openstack-dev05:30
*** rohitk has joined #openstack-dev05:30
*** Mandell has joined #openstack-dev05:30
*** zaitcev has quit IRC05:30
*** zhikunliu has quit IRC05:31
*** sumanth has quit IRC05:32
*** bashok has joined #openstack-dev05:38
*** sarob has quit IRC05:39
*** netredem-jr has quit IRC05:41
*** lbragstad has quit IRC05:42
*** kushal has joined #openstack-dev05:43
*** buzztroll has quit IRC05:45
*** richardboswell has quit IRC05:47
*** steven-weston has joined #openstack-dev05:48
*** matsuhashi has quit IRC05:50
*** richardboswell has joined #openstack-dev05:50
*** sumanth has joined #openstack-dev05:51
*** matsuhashi has joined #openstack-dev05:51
*** renlt has quit IRC05:51
*** ArcTanSusan has joined #openstack-dev05:51
*** matsuhas_ has joined #openstack-dev05:53
*** aditirav_ has joined #openstack-dev05:53
*** matsuhashi has quit IRC05:53
*** buzztroll has joined #openstack-dev05:54
*** Akrog has joined #openstack-dev05:54
*** pmathews has joined #openstack-dev05:54
*** dcmorton has quit IRC05:54
*** aditirav__ has joined #openstack-dev05:56
*** aditirav_ has quit IRC05:56
*** aditirav has quit IRC05:56
*** aditirav has joined #openstack-dev05:57
*** dcmorton has joined #openstack-dev05:57
*** briancurtin has quit IRC05:58
*** d34dh0r53 has quit IRC05:59
*** radix_ has joined #openstack-dev05:59
*** steven-weston_ has joined #openstack-dev05:59
*** nermina has quit IRC06:02
*** vartom11112 has joined #openstack-dev06:03
*** renlt has joined #openstack-dev06:04
*** comay has quit IRC06:06
*** shinylasers has joined #openstack-dev06:06
*** radsy has quit IRC06:07
*** sarob has joined #openstack-dev06:07
*** renlt has quit IRC06:07
*** renlt has joined #openstack-dev06:08
*** nshaikh has joined #openstack-dev06:11
*** comay has joined #openstack-dev06:11
*** TumDev has joined #openstack-dev06:16
*** carl_baldwin has joined #openstack-dev06:16
*** michchap has quit IRC06:16
*** buzztroll has quit IRC06:16
*** cloudstack has joined #openstack-dev06:16
*** michchap has joined #openstack-dev06:16
*** sumanth has quit IRC06:16
*** buzztroll has joined #openstack-dev06:16
*** yonglihe_ has joined #openstack-dev06:17
*** WhiteAnthrax has quit IRC06:17
*** WhiteAnthrax has joined #openstack-dev06:18
*** matsuhas_ has quit IRC06:20
*** carl_baldwin has quit IRC06:20
*** yonglihe_ has quit IRC06:20
*** buzztroll has quit IRC06:21
*** kbringard has joined #openstack-dev06:22
*** denis_makogon has joined #openstack-dev06:23
*** rongze has joined #openstack-dev06:24
*** kbringard has quit IRC06:26
*** neelashah has quit IRC06:28
*** rongze has quit IRC06:28
*** noslzzp has quit IRC06:28
*** sumanth has joined #openstack-dev06:28
*** matsuhashi has joined #openstack-dev06:29
*** boris-42 has joined #openstack-dev06:29
*** terriyu has joined #openstack-dev06:31
*** yongli has quit IRC06:34
*** yongli has joined #openstack-dev06:35
*** vartom11112 has quit IRC06:35
*** rongze has joined #openstack-dev06:38
*** achampion has quit IRC06:39
*** yeylon has joined #openstack-dev06:41
*** xingchao has quit IRC06:42
*** xingchao has joined #openstack-dev06:43
*** kdas__ has joined #openstack-dev06:44
*** kushal has quit IRC06:46
*** kdas__ is now known as kushal06:46
*** kushal has joined #openstack-dev06:46
*** mihgen has joined #openstack-dev06:47
*** buzztroll has joined #openstack-dev06:47
*** willingc has joined #openstack-dev06:47
*** k4n0 has joined #openstack-dev06:48
*** yongli has quit IRC06:48
*** willingc has quit IRC06:48
*** yongli has joined #openstack-dev06:48
*** tkammer has joined #openstack-dev06:49
*** colinmcnamara has quit IRC06:49
*** sumanthns has joined #openstack-dev06:50
*** yongli has quit IRC06:50
*** pmathews has quit IRC06:50
*** yongli has joined #openstack-dev06:50
*** buzztroll has quit IRC06:51
*** buzztroll has joined #openstack-dev06:51
*** sergmelikyan has quit IRC06:52
*** haomaiwa_ has quit IRC06:52
*** skraynev has quit IRC06:52
*** haomaiwang has joined #openstack-dev06:52
*** haomaiwang has quit IRC06:53
*** skraynev has joined #openstack-dev06:53
*** matsuhashi has quit IRC06:53
*** haomaiwang has joined #openstack-dev06:53
*** sarob has quit IRC06:54
*** matsuhashi has joined #openstack-dev06:54
*** TumDev has quit IRC06:54
*** urulama has quit IRC06:55
*** nati_uen_ has quit IRC06:56
*** tkammer has quit IRC06:56
*** tkammer has joined #openstack-dev06:56
*** matsuhashi has quit IRC06:58
*** reidrac has joined #openstack-dev06:59
*** matsuhashi has joined #openstack-dev06:59
*** xqueralt has joined #openstack-dev07:00
*** Ryan_Lane has joined #openstack-dev07:02
*** mindpixel has joined #openstack-dev07:02
*** achampion has joined #openstack-dev07:04
*** ifarkas has joined #openstack-dev07:05
*** mengxd has joined #openstack-dev07:06
*** yongli has quit IRC07:06
*** mengxd has quit IRC07:07
*** Ryan_Lane has quit IRC07:07
*** yongli has joined #openstack-dev07:07
*** vartom11112 has joined #openstack-dev07:07
*** dstanek has quit IRC07:09
*** reidrac has quit IRC07:09
*** Shaan7 has quit IRC07:11
*** nati_ueno has joined #openstack-dev07:12
*** afazekas has joined #openstack-dev07:13
*** steven-weston_ has quit IRC07:16
*** MaxV has joined #openstack-dev07:18
*** vartom11113 has joined #openstack-dev07:18
*** vartom11112 has quit IRC07:19
*** steven-weston has quit IRC07:20
*** evgenyf has joined #openstack-dev07:20
*** buzztroll has quit IRC07:21
*** buzztroll has joined #openstack-dev07:22
*** kbringard has joined #openstack-dev07:22
*** steven-weston has joined #openstack-dev07:23
*** matsuhashi has quit IRC07:26
*** matsuhashi has joined #openstack-dev07:27
*** kbringard has quit IRC07:27
*** MaxV has quit IRC07:29
*** MaxV has joined #openstack-dev07:30
*** gmurphy has quit IRC07:30
*** urulama has joined #openstack-dev07:32
*** MaxV has quit IRC07:34
*** yongli has quit IRC07:35
*** yongli has joined #openstack-dev07:35
*** nouser1 has joined #openstack-dev07:37
*** nouser has quit IRC07:37
*** SergeyLukjanov has joined #openstack-dev07:38
*** jtomasek has quit IRC07:38
*** jtomasek has joined #openstack-dev07:38
*** matsuhas_ has joined #openstack-dev07:39
*** sushils has joined #openstack-dev07:40
*** matsuhashi has quit IRC07:42
*** boris-42 has quit IRC07:42
*** xqueralt has quit IRC07:43
*** SumitNaiksatam has joined #openstack-dev07:43
*** terriyu has quit IRC07:44
*** jtomasek has quit IRC07:45
*** che-arne has quit IRC07:45
*** boris-42 has joined #openstack-dev07:45
*** yolanda has joined #openstack-dev07:49
*** e0ne has joined #openstack-dev07:49
*** jtomasek has joined #openstack-dev07:49
*** xga has joined #openstack-dev07:52
*** xga_ has joined #openstack-dev07:52
*** DinaBelova has joined #openstack-dev07:53
*** mrunge has joined #openstack-dev08:01
*** amuller has joined #openstack-dev08:01
*** tomoe_ has quit IRC08:04
*** matsuhas_ has quit IRC08:05
*** matsuhashi has joined #openstack-dev08:05
*** faramir1 has quit IRC08:05
*** jprovazn has joined #openstack-dev08:05
*** belmoreira has joined #openstack-dev08:06
*** avishayb has joined #openstack-dev08:06
*** SergeyLukjanov has quit IRC08:06
*** jcoufal has joined #openstack-dev08:07
*** JordanP has joined #openstack-dev08:07
*** ykhodork has quit IRC08:09
*** DinaBelova has quit IRC08:09
*** steven-w1 has joined #openstack-dev08:10
*** flaper87|afk is now known as flaper8708:10
*** mihgen has quit IRC08:11
*** JordanP has quit IRC08:11
*** JordanP has joined #openstack-dev08:12
*** xqueralt has joined #openstack-dev08:14
*** omachace has joined #openstack-dev08:15
*** steven-weston is now known as sw208:16
*** yuan has joined #openstack-dev08:16
*** steven-weston has joined #openstack-dev08:17
*** sahid has joined #openstack-dev08:17
*** nshaikh has left #openstack-dev08:17
*** romcheg has joined #openstack-dev08:18
*** mohits has joined #openstack-dev08:19
*** romcheg1 has joined #openstack-dev08:20
*** romcheg has quit IRC08:20
*** sarob has joined #openstack-dev08:20
*** kbringard has joined #openstack-dev08:23
*** sarob has quit IRC08:24
*** romcheg1 has quit IRC08:26
*** kbringard has quit IRC08:27
*** steven-weston has quit IRC08:28
*** rdas has quit IRC08:28
*** jprovazn has quit IRC08:29
*** reidrac has joined #openstack-dev08:29
*** nati_ueno has quit IRC08:29
*** ndipanov has quit IRC08:29
*** ndipanov has joined #openstack-dev08:30
*** buzztroll has quit IRC08:31
*** e0ne_ has joined #openstack-dev08:31
*** mohits has quit IRC08:32
*** rdas has joined #openstack-dev08:32
*** mohits has joined #openstack-dev08:32
*** neeti has quit IRC08:33
*** neeti has joined #openstack-dev08:34
*** e0ne has quit IRC08:35
*** steven-weston has joined #openstack-dev08:36
*** jprovazn has joined #openstack-dev08:36
*** denis_makogon has quit IRC08:39
*** thelorax123 has quit IRC08:42
*** faramir1 has joined #openstack-dev08:42
*** thelorax123 has joined #openstack-dev08:43
*** corXi has joined #openstack-dev08:44
*** steven-weston_ has joined #openstack-dev08:45
*** buzztroll has joined #openstack-dev08:45
*** yongli has quit IRC08:46
*** yongli has joined #openstack-dev08:47
*** steven-weston_ has quit IRC08:50
*** steven-weston has quit IRC08:50
*** sarob has joined #openstack-dev08:50
*** sarob has quit IRC08:52
*** uaberme has joined #openstack-dev08:52
*** sarob has joined #openstack-dev08:52
*** thelorax123 has quit IRC08:53
*** omachace has quit IRC08:53
*** derekh has joined #openstack-dev08:54
*** thelorax123 has joined #openstack-dev08:54
*** romcheg has joined #openstack-dev08:54
*** boden has joined #openstack-dev08:55
*** mihgen has joined #openstack-dev08:55
*** omachace has joined #openstack-dev08:55
*** buzztroll has quit IRC08:56
*** buzztroll has joined #openstack-dev08:56
*** sarob has quit IRC08:57
*** willingc has joined #openstack-dev08:57
*** danpb has joined #openstack-dev09:00
*** mihgen has quit IRC09:00
*** mihgen has joined #openstack-dev09:00
*** steven-weston has joined #openstack-dev09:00
*** MaxV has joined #openstack-dev09:00
*** buzztroll has quit IRC09:00
*** samuelbercovici has joined #openstack-dev09:01
*** teran has quit IRC09:01
*** jeffrey4l has quit IRC09:01
*** teran has joined #openstack-dev09:02
*** arezmerita has quit IRC09:03
*** Ryan_Lane has joined #openstack-dev09:03
*** xga_ has quit IRC09:03
*** xga has quit IRC09:03
*** xga has joined #openstack-dev09:03
*** xga_ has joined #openstack-dev09:04
*** JordanP has quit IRC09:04
*** sahid has quit IRC09:04
*** athomas has joined #openstack-dev09:04
*** omachace1 has joined #openstack-dev09:05
*** yonglihe_ has joined #openstack-dev09:05
*** jistr has joined #openstack-dev09:06
*** safchain has joined #openstack-dev09:06
*** _coolsvap_ has joined #openstack-dev09:06
*** fbo_away is now known as fbo09:06
*** yonglihe_ has quit IRC09:06
*** teran has quit IRC09:06
*** yonglihe_ has joined #openstack-dev09:07
*** yonglihe_ has quit IRC09:07
*** yongli has quit IRC09:07
*** yongli has joined #openstack-dev09:07
*** omachace has quit IRC09:08
*** alex_xu has quit IRC09:08
*** Ryan_Lane has quit IRC09:08
*** nati_ueno has joined #openstack-dev09:09
*** yassine has joined #openstack-dev09:10
*** sw2 has quit IRC09:10
*** jpich has joined #openstack-dev09:11
*** yongli has quit IRC09:13
*** yongli has joined #openstack-dev09:13
*** jeffrey4l has joined #openstack-dev09:14
*** pschaef has joined #openstack-dev09:15
*** giulivo has joined #openstack-dev09:16
*** bingbu has quit IRC09:16
*** richardboswell has quit IRC09:17
*** eglynn has joined #openstack-dev09:17
*** arezmerita has joined #openstack-dev09:18
*** willingc has quit IRC09:18
*** nouser1 has quit IRC09:18
*** lintan has joined #openstack-dev09:20
*** cloudstack has quit IRC09:20
*** sahid has joined #openstack-dev09:21
*** lucasagomes has joined #openstack-dev09:24
*** kbringard has joined #openstack-dev09:24
*** ruhe has joined #openstack-dev09:25
*** shinylasers has quit IRC09:25
*** max_lobur_afk is now known as max_lobur09:27
*** kbringard has quit IRC09:28
*** achampion has quit IRC09:29
*** neoXsys has quit IRC09:29
*** yamahata_ has joined #openstack-dev09:30
*** pfreund has joined #openstack-dev09:32
*** neoXsys has joined #openstack-dev09:32
*** ljjjustin has quit IRC09:33
*** _coolsvap_ has quit IRC09:37
*** buzztroll has joined #openstack-dev09:39
*** jhesketh has quit IRC09:40
*** nati_ueno has quit IRC09:40
*** rdas has quit IRC09:41
*** neeti has quit IRC09:43
*** neeti has joined #openstack-dev09:46
*** jamespage has joined #openstack-dev09:46
*** jamespage has joined #openstack-dev09:46
*** teran has joined #openstack-dev09:50
*** sarob has joined #openstack-dev09:50
*** omachace has joined #openstack-dev09:51
*** faramir1 has quit IRC09:51
*** steven-w1 has quit IRC09:51
*** yeylon has quit IRC09:52
*** DinaBelova has joined #openstack-dev09:53
*** omachace1 has quit IRC09:54
*** athomas has quit IRC09:55
*** Akrog has quit IRC09:57
*** matsuhas_ has joined #openstack-dev09:58
*** matsuhas_ has quit IRC09:58
*** iartarisi has joined #openstack-dev10:01
*** matsuhashi has quit IRC10:02
*** SergeyLukjanov has joined #openstack-dev10:02
*** Ryan_Lane has joined #openstack-dev10:03
*** gszasz has joined #openstack-dev10:03
*** mpavlase has joined #openstack-dev10:03
*** mpavlase has left #openstack-dev10:03
*** athomas has joined #openstack-dev10:04
*** vartom11113 has quit IRC10:06
*** achampion has joined #openstack-dev10:07
*** Ryan_Lane has quit IRC10:08
*** renlt has quit IRC10:08
*** buzztroll has quit IRC10:10
*** buzztroll has joined #openstack-dev10:10
*** achampion has quit IRC10:12
*** lintan has quit IRC10:13
*** jcoufal has quit IRC10:13
*** buzztroll has quit IRC10:15
*** avishayb has quit IRC10:16
*** DinaBelova has quit IRC10:18
*** bauzas1 is now known as bauzas10:20
*** sarob has quit IRC10:22
*** AndyMoore has left #openstack-dev10:22
*** evgenyf has quit IRC10:23
*** YorikSar has quit IRC10:24
*** kbringard has joined #openstack-dev10:25
*** ArcTanSusan has quit IRC10:25
*** DinaBelova has joined #openstack-dev10:25
*** YorikSar has joined #openstack-dev10:25
*** akrivoka has joined #openstack-dev10:26
*** che-arne has joined #openstack-dev10:27
*** bauzas has quit IRC10:27
*** bauzas has joined #openstack-dev10:28
*** rongze has quit IRC10:29
*** kbringard has quit IRC10:30
*** paragan has quit IRC10:35
*** yamahata_ has quit IRC10:36
*** sahid has quit IRC10:37
*** buzztroll has joined #openstack-dev10:41
*** xga_ has quit IRC10:41
*** xga has quit IRC10:41
*** arezmerita has quit IRC10:42
*** yeylon has joined #openstack-dev10:43
*** buzztroll has quit IRC10:45
*** markmc has joined #openstack-dev10:46
*** colinmcnamara has joined #openstack-dev10:50
*** sarob has joined #openstack-dev10:50
*** martyntaylor has joined #openstack-dev10:50
*** xga_ has joined #openstack-dev10:51
*** xga has joined #openstack-dev10:51
*** jroovers has quit IRC10:54
*** sarob has quit IRC10:54
*** evgenyf has joined #openstack-dev10:55
*** colinmcnamara has quit IRC10:55
*** rdas has joined #openstack-dev11:02
*** rossella_s has joined #openstack-dev11:03
*** Ryan_Lane has joined #openstack-dev11:03
*** aditirav has quit IRC11:05
*** yaguang has quit IRC11:05
*** aditirav has joined #openstack-dev11:05
*** guohliu has quit IRC11:07
*** ruhe has quit IRC11:07
*** Ryan_Lane has quit IRC11:08
*** rfolco has joined #openstack-dev11:11
*** sumansn_ has joined #openstack-dev11:12
*** jamespage has quit IRC11:12
*** jamespage has joined #openstack-dev11:12
*** sumanthns has quit IRC11:14
*** avishayb has joined #openstack-dev11:22
*** arata has left #openstack-dev11:23
*** jorisroovers has joined #openstack-dev11:26
*** jorisroovers has quit IRC11:27
*** jorisroovers has joined #openstack-dev11:27
*** pixelb has joined #openstack-dev11:28
openstackstatusNOTICE: Gate wedged - Most Py26 jobs fail currently (https://bugs.launchpad.net/openstack-ci/+bug/1255041)11:29
uvirtbotLaunchpad bug 1255041 in openstack-ci "Python 2.6 gate broken due to no workspace found" [Undecided,New]11:29
*** ArxCruz has joined #openstack-dev11:30
*** Akrog has joined #openstack-dev11:31
*** mkerrin has quit IRC11:35
*** Alexei_987 has joined #openstack-dev11:36
*** vartom11113 has joined #openstack-dev11:38
*** pcm_ has joined #openstack-dev11:41
*** buzztroll has joined #openstack-dev11:42
*** tdruiva has joined #openstack-dev11:44
*** n0ano has quit IRC11:44
*** jroovers has joined #openstack-dev11:44
*** francois_eleouet has joined #openstack-dev11:44
*** tdruiva has quit IRC11:45
*** tdruiva has joined #openstack-dev11:46
*** michchap has quit IRC11:46
*** jorisroovers has quit IRC11:46
*** feleouet has quit IRC11:46
*** CaptTofu has quit IRC11:47
*** CaptTofu has joined #openstack-dev11:47
*** michchap has joined #openstack-dev11:48
*** saschpe_ has joined #openstack-dev11:49
*** tdruiva_ has joined #openstack-dev11:49
*** martyntaylor1 has joined #openstack-dev11:49
*** tdruiva has quit IRC11:50
*** saschpe has quit IRC11:50
*** sarob has joined #openstack-dev11:50
*** zoresvit has quit IRC11:50
*** martyntaylor has quit IRC11:51
*** DinaBelova has quit IRC11:51
*** Alexei_987 has quit IRC11:51
*** romcheg has quit IRC11:53
*** e0ne_ has quit IRC11:53
*** jcoufal has joined #openstack-dev11:53
*** pcm_ has quit IRC11:55
*** pcm_ has joined #openstack-dev11:56
*** arezmerita has joined #openstack-dev11:56
*** gszasz has quit IRC11:58
*** tonix has joined #openstack-dev11:59
*** gszasz has joined #openstack-dev12:00
*** Ryan_Lane has joined #openstack-dev12:03
*** mkerrin has joined #openstack-dev12:04
*** bogdando has quit IRC12:04
*** DinaBelova has joined #openstack-dev12:05
*** Ryan_Lane has quit IRC12:08
*** aditirav_ has joined #openstack-dev12:11
*** flaper87 is now known as flaper87|afk12:11
*** nosnos has quit IRC12:11
*** eglynn is now known as eglynn-lunch12:11
*** sarob has quit IRC12:12
*** michchap has quit IRC12:13
*** max_lobur has quit IRC12:13
*** aditirav has quit IRC12:14
*** aditirav_ is now known as aditirav12:14
*** yolanda has quit IRC12:14
*** yolanda has joined #openstack-dev12:14
*** rongze has joined #openstack-dev12:15
*** Guest46324 is now known as med_12:15
*** med_ is now known as medberry12:15
*** buzztroll has quit IRC12:16
*** flaper87|afk is now known as flaper8712:16
*** yongli has quit IRC12:17
*** sahid has joined #openstack-dev12:18
*** CrackerJackMack has quit IRC12:23
*** mihgen has quit IRC12:26
*** CaptTofu has quit IRC12:26
*** CaptTofu has joined #openstack-dev12:27
*** insanidade has joined #openstack-dev12:29
*** MaxV has quit IRC12:30
*** MaxV has joined #openstack-dev12:30
insanidadehi all. I'm trying to list all neutron agents but it keeps returning an error message pointing to a wrong endpoint configured in keystone (it appends a '/v2' to the endpoint, which is not there). Any help ?12:30
*** CaptTofu has quit IRC12:31
*** CrackerJackMack has joined #openstack-dev12:32
*** sarob has joined #openstack-dev12:32
*** vkmc has joined #openstack-dev12:32
*** mihgen has joined #openstack-dev12:33
*** MaxV_ has joined #openstack-dev12:34
*** MaxV has quit IRC12:34
*** arezmerita has quit IRC12:35
*** CrackerJackMack has quit IRC12:35
*** CrackerJackMack has joined #openstack-dev12:35
*** Alexei_987 has joined #openstack-dev12:35
*** max_lobur has joined #openstack-dev12:36
*** sarob has quit IRC12:37
*** arezmerita has joined #openstack-dev12:37
*** xga__ has joined #openstack-dev12:37
*** xga has quit IRC12:38
*** xga_ has quit IRC12:39
*** sumansn_ has quit IRC12:39
*** xga has joined #openstack-dev12:39
*** CaptTofu has joined #openstack-dev12:39
*** sumansn_ has joined #openstack-dev12:39
*** boris-42 has quit IRC12:41
*** lucasagomes is now known as lucas-hungry12:41
*** rdopieralski has joined #openstack-dev12:42
*** michchap has joined #openstack-dev12:43
*** Sumeniac has quit IRC12:46
*** Sumeniac has joined #openstack-dev12:46
*** yamahata_ has joined #openstack-dev12:47
*** e0ne has joined #openstack-dev12:48
*** Sumeniac has quit IRC12:49
*** Sumeniac has joined #openstack-dev12:49
*** sarob has joined #openstack-dev12:50
*** romcheg has joined #openstack-dev12:50
*** michchap has quit IRC12:51
*** mohits has quit IRC12:53
*** xingchao has quit IRC12:53
*** xingchao has joined #openstack-dev12:53
*** sarob has quit IRC12:54
*** wwallnrr__ has joined #openstack-dev12:55
*** dims has joined #openstack-dev12:55
rdopieralskihello good people, I'm working on a kind of a pluggable dashboards system for horizon, and I would like some feedback from people who make packages, I would like to know how to make their lives easier12:55
rdopieralskiI have a sketch of my solution here, and I would love to hear any comments from you: https://review.openstack.org/#/c/56367/12:55
*** paragan has joined #openstack-dev12:56
*** markmcclain has joined #openstack-dev12:56
*** jruzicka has joined #openstack-dev12:56
*** michchap has joined #openstack-dev12:57
markmcclainttx: ready?13:00
*** arosen has joined #openstack-dev13:00
ttxmarkmcclain: yep13:00
markmcclaink13:00
ttxmarkmcclain: looking at https://launchpad.net/neutron/+milestone/icehouse-113:01
*** dkranz has joined #openstack-dev13:01
ttxmidonet-admin-state looks completed to me ?13:01
*** aditirav has quit IRC13:01
*** rods has joined #openstack-dev13:01
*** sgordon has joined #openstack-dev13:01
*** michchap has quit IRC13:01
markmcclainit is13:02
ttxmarkmcclain: OK, will update. is neutron-tempest-parallel still likely to be completed ?13:02
markmcclainI wonder why it wasn't auto updated13:02
*** rushiagr has quit IRC13:02
ttxmarkmcclain: because BPs aren't auto-updated :)13:02
* markmcclain needs more coffee :)13:03
*** xga has quit IRC13:03
markmcclainI hope we'll have something for parallel testing by tuesday13:03
*** xga__ has quit IRC13:03
*** Ryan_Lane has joined #openstack-dev13:03
ttxOK, maybe update to Good progress or Slow progress based on the outcome of that13:03
ttxlessrouter-scheduler (icehouse-2) is apparently under review, is it likely to hit icehouse-1 as well ?13:04
markmcclainI wasn't sure if we'd get the review attention by Tuesday13:04
ttxwe can keep it here in the mean time13:04
*** sthaha has quit IRC13:04
markmcclainsince man people are focused on tempest or parity work13:05
markmcclainif it merges, I'll move it in13:05
*** sthaha has joined #openstack-dev13:05
*** sthaha has joined #openstack-dev13:05
ttxoverall icehouse-1 looks good. Did you retroactively add any feature that slipped in since icehouse opened ?13:05
markmcclainno.. the reviews either had an associated bug or existing bp13:05
ttxok13:06
ttxlooking at i-1 bugs now13:06
ttxyou have two critical bugs not targeted to i-1... should I add them there ?13:06
ttx* https://bugs.launchpad.net/bugs/121048313:06
ttx* https://bugs.launchpad.net/bugs/123040713:06
uvirtbotLaunchpad bug 1210483 in neutron "ServerAddressesTestXML.test_list_server_addresses FAIL" [Critical,Confirmed]13:06
uvirtbotLaunchpad bug 1230407 in neutron "VMs can't progress through state changes because Neutron is deadlocking on it's database queries, and thus leaving networks in inconsistent states" [Critical,Confirmed]13:06
*** sandywalsh has joined #openstack-dev13:07
*** bingbu has joined #openstack-dev13:07
*** sthaha has quit IRC13:07
*** Ryan_Lane has quit IRC13:08
*** aditirav has joined #openstack-dev13:08
markmcclainI need to get an assignee for 48313:08
*** xga has joined #openstack-dev13:09
*** xga__ has joined #openstack-dev13:09
ttxthere are two other critical bugs on the i-1 list without an assignee, while you're at it ;)13:09
* ttx will add them all13:09
markmcclainhttps://bugs.launchpad.net/neutron/+bug/124372613:10
uvirtbotLaunchpad bug 1243726 in neutron "tempest failure: No more IP addresses available on network" [Critical,Confirmed]13:10
markmcclainhas someone who's be working on it13:10
*** viktors has joined #openstack-dev13:10
markmcclainbut he didn't update the assignee.. I'll correct it13:10
ttxmarkmcclain: great. now looking at the general icehouse plan at https://blueprints.launchpad.net/neutron/icehouse13:10
markmcclainthat plan is a still not where I want it13:11
ttxLots of untriaged blueprints too13:11
*** yaguang has joined #openstack-dev13:11
markmcclainwe had key person on pto last week, so we're about week behind13:11
*** xga_ has joined #openstack-dev13:11
ttxmarkmcclain: is it missing a lot of stuff ? Or just missing prioritization ?13:11
*** JordanP has joined #openstack-dev13:11
markmcclainI've held off fully triaging the blueprints because the nova parity plan needed to be finalized13:12
*** buzztroll has joined #openstack-dev13:12
markmcclainand thats going to create more blueprints13:12
ttxmarkmcclain: would be great to complete it before the extended weekend, but might be too short13:12
*** ygbo has joined #openstack-dev13:12
ttxI suspect next week meeting you might be traveling ?13:12
*** aditirav has quit IRC13:13
markmcclainI am traveling… Im hoping to get everything cleaned up before then13:13
*** akrivoka has quit IRC13:13
ttxmarkmcclain: ok, that's all I had. Any specific issue you want to raise at the meeting today ?13:14
markmcclainno… I think we covered everything13:14
ttxmarkmcclain: ok, thanks, see you at meeting later13:15
*** xga has quit IRC13:15
*** xga__ has quit IRC13:15
markmcclainsee you then13:15
ttxdhellmann-afk: afk?13:15
*** dhellmann-afk is now known as dhellmann13:15
dhellmannhere13:15
*** xga has joined #openstack-dev13:15
ttxheh13:15
ttxHope I didn't wake you up13:15
*** akrivoka has joined #openstack-dev13:15
dhellmannnah, I just forgot to change my nick13:15
ttxlooking at https://launchpad.net/oslo/+milestone/icehouse-113:16
*** buzztroll has quit IRC13:16
*** jruzz has quit IRC13:16
ttxdhellmann: looks slightly behind13:16
ttxdhellmann: I'll try to move infra people to get the standalone repo for rootwrap done today13:17
ttxand should be on time for tagging a 1.0 later this week (no holiday for me)13:17
*** rongze has quit IRC13:17
dhellmannyeah, it does look like we're a little behind on some of these13:17
dhellmannok, good13:17
ttxBut the oter two "started" might be a bit behind13:17
dhellmannI asked to have a new repo created yesterday and it was blocked on a zuul bug so...13:18
ttxshould be near code proposed by now13:18
*** mkollaro has quit IRC13:18
*** mkollaro1 has joined #openstack-dev13:18
dhellmannyes, I'm going to chat with the owners today13:18
*** marios has quit IRC13:18
ttxdhellmann: ISTR you didn't have anything to retroactively add to icehouse-1 ?13:18
*** marios has joined #openstack-dev13:19
dhellmannI did not find anything13:19
*** READ10 has quit IRC13:19
dhellmannI'm not quite sure how to handle that, though13:19
ttxok, looking at the general oslo plan now https://blueprints.launchpad.net/oslo/icehouse13:19
dhellmannit seems like we would only want to add something when it is in its own library? otherwise, don't we want to track adoption of the incubated code?13:20
ttxdhellmann: we used to track the landing of code in incubator as an oslo blueprint, and adoption as a $PROJECT blueprint13:20
ttxbut I agree it's one case screaming for multi-project blueprints13:21
dhellmannor more libraries graduating13:21
dhellmann :-)13:21
ttxyeah13:21
ttxdhellmann: icehouse plan looks good, is it a complete reflection of what you know of ?13:21
dhellmannok, jd__ sent me a link to the change for his blueprint, it just wasn't updated automatically13:21
insanidadeHi all. How do I find out my neutron client's version? I'm trying to figure out the reason why 'neutron agent-list' is trying to point to a wrong endpoint (it appends '/v2' to the endpoint registered in keystone). any suggestions ?13:22
dhellmannI see a lot of work going on in the database stuff that may not be reflected here, but those are all going to land late in the cycle13:22
dhellmannI need to touch bases with boris again13:22
ttxdhellmann: should I set all of those "Unknown" status to "Not started" as a conservative guess ? https://blueprints.launchpad.net/oslo/icehouse13:22
ttxdhellmann: https://blueprints.launchpad.net/oslo/+spec/oslo-db-lib needs a priority13:23
ttxtat may be part of the db stuff you were mentioning13:23
dhellmannsure13:23
ttxok, will do13:23
*** k4n0 has left #openstack-dev13:23
dsantos_dhellmann: I addressed your suggestions in my code and submitted another patch https://review.openstack.org/#/c/5593813:23
dhellmanndsantos_: thanks, I'll take a look after I'm done catching up with ttx13:24
ttxdhellmann: log-messages-translation-domain could use an assignee, too13:24
dsantos_dhellmann: sure... thanks13:24
dhellmannttx: oops, that one should be me :-)13:24
dhellmannfixed13:24
ttxhaha13:25
ttxok, so once oslo-db-lib is given a prio, the current plan will look good, if not a bit incomplete13:25
dhellmannyeah, I expected more individual db blueprints than we ended up with, so I'll see what boris says13:26
ttxdhellmann: shoudl I set jd__'s BP to needs code review ?13:26
dhellmanndone13:26
*** dstanek has joined #openstack-dev13:26
*** rahmu has quit IRC13:26
ttxdhellmann: fwiw the plan doesn't have to be final or complete. It just needs to reflect what we currently know of :)13:26
dhellmannsame for dsantos_'s bp13:27
ttx(and then be kept up to date)13:27
*** sandywalsh has quit IRC13:27
dhellmannok, well, then I think this is closer to correct than I feared :-)13:27
ttxdhellmann: ok, that's all I had. Solo sync will be discussed at the meeting today. Did you have a topic you wanted to raise ?13:27
*** rahmu has joined #openstack-dev13:28
ttxs!Solo!Oslo13:28
*** michchap has joined #openstack-dev13:28
dhellmannI have 2 questions13:28
dhellmannis there some way for me to subscribe to new blueprints in launchpad?13:28
dhellmannand I am going to be traveling on the next 2 Tuesdays, so would you like to move our sync to monday instead?13:29
ttxhmm, looking but I don't think so (at least not automatically13:29
dhellmannok, I didn't find one either13:29
dhellmannI had one bp sneak into the release13:29
ttxdhellmann: yeah, that would make sense... same time ? Later ?13:29
*** iartarisi has quit IRC13:29
*** rongze has joined #openstack-dev13:29
dhellmannI'll just have to check every day13:29
dhellmannsame time works fine13:29
ttxok, same time on Monday for next two weeks. Don't hesitate to ping me if I appear to not remember it13:30
dhellmannoh, actually, the second week I'm going to be on vacation so not monday13:30
ttxthe second week we can skip13:30
ttx(post i-1)13:30
dhellmannok13:30
ttxdhellmann: ok thx, see you later13:31
dhellmannok, thanks!13:31
ttxjd__: around?13:31
jd__ttx: o/13:31
*** arosen has quit IRC13:31
ttxjd__: looking at https://launchpad.net/ceilometer/+milestone/icehouse-113:31
*** dhellmann is now known as dhellmann-afk13:31
ttxplan looks good, although really late13:32
ttxare those two "not started" really not started ?13:32
jd__yep13:32
ttx support-resources-pipeline-item definietly looks started to me13:32
jd__at least we don't have any patch13:32
*** gongysh has joined #openstack-dev13:32
ttxhttps://review.openstack.org/#/c/58488/ https://review.openstack.org/#/c/58489/13:32
jd__ah13:32
jd__ok, I missed that since it's from this morning13:33
ttxshould I switch it to Needs code review ?13:33
jd__ttx: go ahead13:33
ttxhttp://status.openstack.org/release/ has sortable columns and can help spotting out-of-sync status13:33
jd__split-collector is almost ready to be merged13:33
ttx(that's what I use)13:33
*** mrunge has quit IRC13:33
*** bashok has quit IRC13:34
ttxeverything else (but that Low one) still likely to make it next week ?13:34
jd__yup13:34
ttxjd__: did you add any blueprint for stuff that would have slipped in since Icehouse development opened ?13:35
*** neelashah has joined #openstack-dev13:35
jd__sqlalchemy-metadata-query was one of them I think, but that's it otherwise13:35
ttxok Looking at i-1 bugs now13:35
*** iartarisi has joined #openstack-dev13:36
ttxhttps://bugs.launchpad.net/bugs/1243251 is critical and not targeted13:36
uvirtbotLaunchpad bug 1243251 in ceilometer "QueuePool ERROR in ceilometer-collector  log after successful tempest run" [Critical,In progress]13:36
*** vladikr has joined #openstack-dev13:36
ttxshould I add it to the mix ?13:36
*** zoresvit has joined #openstack-dev13:36
ttxalso, proposed patch was abandoned there so not sure it's still in progress13:37
*** michchap has quit IRC13:37
*** amotoki has joined #openstack-dev13:37
jd__we probably need to set a milestone, but not sure we'll have it fixed for i113:37
jd__but we can try13:37
ttxack, will do. Should I reset it to triaged ? Apparently Mehdi is no longer working on it ?13:38
jd__yes there's another patch for devstack-gate, but we're going to have to write a 3rd one for devstack13:38
jd__ttx: let me write a note in it13:38
ttxok13:38
*** vartom11113 has quit IRC13:38
ttxLooking at the general icehouse plan at https://blueprints.launchpad.net/ceilometer/icehouse13:38
ttxYou have two "undefined" blueprints to set priority for... and I suspect it's not a complete plan yet ?13:39
ttx(or does it reflect all you know about ?)13:39
jd__I think eglynn-lunch said he had some blueprints, not sure he had time yet to write them, but now it looks like he's really late :)13:40
*** thomasem has joined #openstack-dev13:40
jd__I didn't notice the paas-* ones yet, I'll probably set them to low13:40
*** reidrac has quit IRC13:40
*** eglynn-lunch is now known as eglynn13:40
eglynnjd__: I filed a bunch of blueprints last week13:41
ttxjd__: would be nice to complete the basic roadmap before end of week13:41
eglynnjd__: ... targetted them to icehouse, but they seem to have been unlinked from the target series somehow13:41
jd__eglynn: did you target them?13:41
jd__eglynn: you need to set milestones13:41
ttxlike I said earlier, doesn't have to be complete, just have to reflect what you know about13:41
*** sumansn_ has quit IRC13:41
*** markvoelker1 has joined #openstack-dev13:42
ttxno milestone, no chocolate13:42
jd__:-)13:42
*** sandywalsh has joined #openstack-dev13:42
eglynnjd__: here are the BPs: http://fpaste.org/56850/1385473313:42
*** iartarisi has quit IRC13:42
*** tdruiva_ has quit IRC13:42
jd__eglynn: cool, can you set milestone to them? I don't think I should do this for you if you work on them13:43
*** tdruiva has joined #openstack-dev13:43
eglynnjd__: (nadya filed one for sample aggregation/roll-up also ... https://blueprints.launchpad.net/ceilometer/+spec/aggregation-and-rolling-up )13:43
ttxjd__: ok, that's all I had, see you at meeting later. Anything you want to see discussed there?13:43
jd__or I put everything to icehouse-2 and whip until it's done13:43
eglynnjd__: yep, will do13:43
jd__ttx: all good13:43
eglynnjd__: /me puzzled as to why the series targetting for my BPs was dropped though13:44
ttxjd__: ok, thx for your time13:44
jd__eglynn: good to know, though no assignee and no milestone so… :)13:44
jd__eglynn: there's a script setting the series automatically based on the milestone set13:44
ttxeglynn: series targeting should not be manually set13:44
*** lucas-hungry is now known as lucasagomes13:44
ttxotherwise it can get out of sync with milestone13:44
eglynnjd__, ttx: a-ha, I see, got it13:44
ttxso I have a script that runs every two hours and aligns it*13:44
ttxeglynn: https://wiki.openstack.org/wiki/Blueprints#Series_goal13:45
*** arata has joined #openstack-dev13:46
*** marios has quit IRC13:46
*** omachace has left #openstack-dev13:46
eglynnjd__: ... then the marking of the BP as "Approved", that's something you'd do manually once milestone is targeted, developer assigned etc.?13:46
jd__eglynn: yes13:47
*** marios has joined #openstack-dev13:47
jd__and I've a clue on what it is about13:47
*** rahmu has quit IRC13:47
*** iartarisi has joined #openstack-dev13:47
*** arosen has joined #openstack-dev13:47
eglynnjd__: cool, got it ... I'll go through that list of BPs now so, do the targetting and assign to myself13:47
jd__eglynn: ack, ping me if you need something :)13:48
*** rahmu has joined #openstack-dev13:49
*** sarob has joined #openstack-dev13:50
*** markmcclain has quit IRC13:50
*** sandywalsh has quit IRC13:51
*** bpokorny has joined #openstack-dev13:51
*** dprince has joined #openstack-dev13:51
*** dguitarbite has joined #openstack-dev13:52
*** sarob has quit IRC13:54
*** reidrac has joined #openstack-dev13:54
*** reidrac has quit IRC13:54
*** dbalog has joined #openstack-dev13:55
*** arezmerita has quit IRC13:56
*** sarob has joined #openstack-dev13:56
*** gongysh has quit IRC13:57
*** michchap has joined #openstack-dev13:58
*** ruhe has joined #openstack-dev13:58
*** colinmcnamara has joined #openstack-dev13:59
ttxjgriffith: o/14:00
*** rcleere has joined #openstack-dev14:00
jgriffithttx: o/14:00
*** rdas has quit IRC14:00
ttxjgriffith: Looking at https://launchpad.net/cinder/+milestone/icehouse-1, still looks pretty unfinished14:00
*** kbringard has joined #openstack-dev14:01
ttxjgriffith: and also completekly unrealistic14:01
ttxgiven that there is only one week left to merge stuff in i-114:01
jgriffithttx: yeah, I'll pull the not started items out today14:02
ttxjgriffith: also set a priority for everything  you keep in i-114:02
jgriffithk14:02
*** michchap has quit IRC14:03
ttx(anything you keep in i-1 should have an assignee, a priority and a non-unknown status)14:03
*** mkollaro has joined #openstack-dev14:03
jgriffithYep, I'll be sure it's clean by lunch14:03
*** rods has quit IRC14:03
ttxif you don't have that, it's a safe bet to move it to i-2 anyway14:03
jgriffithagreed14:03
*** sandywalsh has joined #openstack-dev14:04
ttxjgriffith: Looking at i-1 targeted bugs14:04
*** steven-w1 has joined #openstack-dev14:04
ttxa few of those are not assigned to anyone, so unlikely to get fixed in the coming week14:04
jgriffithttx: yes which makes me sad14:05
jgriffithI plan to cover the ones that I can this week-end14:05
jgriffithThe VMware guys are on their own obviously14:05
ttxok, you can keep them in then14:05
jgriffithI'll comb them14:05
dsantos_bnemec: ping14:06
jgriffithfrankly I'm more concerned about bugs I1 than I am BP's at this point14:06
ttxjgriffith: one you're done with the cleaning of the i-1 plan, you can start looking at the general icehouse roadmap at https://blueprints.launchpad.net/cinder/icehouse14:06
*** mkollaro1 has quit IRC14:06
ttxsetting a priority to blueprints there, then file blueprints for stuff missing that you know will be worked on14:07
jgriffithack14:07
*** lbragstad has joined #openstack-dev14:07
ttx(and start splitting the remaining BPs between i-2 and i-3)14:07
ttxbut that's prio 2, prio1 is to get a clean i-1 plan by meeting time today14:07
jgriffithttx: understood14:07
ttxhttps://bugs.launchpad.net/bugs/124018914:08
uvirtbotLaunchpad bug 1240189 in cinder "16 to 17 upgrade" [Critical,Confirmed]14:08
*** bingbu has quit IRC14:08
ttxwhat's the status of this ? Should it be targeted to i1 as well ?14:08
jgriffithttx: no14:08
jgriffithttx: I left it open hoping Kevin would verify my fix14:09
jgriffithttx: he had his shot, I'm closing it14:09
ttxjgriffith: ack14:09
jgriffithor marking it as dup of the one that's closed14:09
*** jd__` has joined #openstack-dev14:09
*** arezmerita has joined #openstack-dev14:09
*** tzumainn has joined #openstack-dev14:10
ttxjgriffith: ok that's all I had. Anything blocking you that you want to raise at the meeting today ?14:10
jgriffithttx: nope14:10
*** jd__ has quit IRC14:10
*** jd__` is now known as jd__14:10
jgriffithttx: project versus tenant :)14:10
jgriffithbut that's not a Cinder thing14:10
jgriffithnow that the gates are stabilized a bit we're getting through the reviews again14:11
ttxjgriffith: doesn't have to be cinder-specific :)14:11
*** mriedem has joined #openstack-dev14:11
ttxgate was pretty broken this morning though14:11
jgriffithbooo... I haven't looked lately14:11
jgriffitherr.. this morning yet14:11
*** dhellmann-afk is now known as dhellmann14:11
ttxhttps://wiki.openstack.org/wiki/Infrastructure_Status14:12
*** mkerrin has quit IRC14:12
jgriffithyeah....14:12
jgriffiththis is really getting problematic14:12
ttxprobably an easy fix once you get the power to kill slaves14:12
*** tkammer has quit IRC14:12
*** buzztroll has joined #openstack-dev14:12
*** glenng has joined #openstack-dev14:12
*** tkammer has joined #openstack-dev14:13
ttxfungi shoul dbe up any monute now14:13
ttxor minute14:13
jgriffithYeah, the good news is these are not the intermittent Stack failures we were seeing14:13
ttxjgriffith: ok, see you at meeting today. You can ping me when you have a clean i-1 plan so that I check it out14:13
jgriffithttx: sounds good, I'll get on that in another hour or so14:14
jgriffithttx: thanks!14:14
jgriffithcya in a while14:14
*** salv-orlando has quit IRC14:15
*** achampion has joined #openstack-dev14:15
*** arosen has quit IRC14:17
*** salv-orlando has joined #openstack-dev14:21
*** bingbu has joined #openstack-dev14:21
*** prekarat has joined #openstack-dev14:22
*** omachace has joined #openstack-dev14:22
*** gordc has joined #openstack-dev14:23
*** kushal has quit IRC14:23
openstackstatusNOTICE: Gate should be unwedged now, thanks for your patience14:25
*** bswartz has quit IRC14:26
*** Loquacity has quit IRC14:26
*** dkranz has quit IRC14:26
*** Loquacity has joined #openstack-dev14:27
viktorsdhellmann: hello!14:28
*** bingbu has quit IRC14:28
*** sarob_ has joined #openstack-dev14:29
*** akrivoka has quit IRC14:29
*** sarob__ has joined #openstack-dev14:30
*** vills_ has joined #openstack-dev14:30
fungittx: yes, what?14:30
ttxfungi: we needed a slave restarted. mordred did it. ignore me14:31
fungik, no worries14:32
fungiglad it's sorted14:32
*** sumanth has quit IRC14:32
*** sarob_ has quit IRC14:33
*** akrivoka has joined #openstack-dev14:35
*** radez_g0n3 is now known as radez14:36
*** Shaan7 has joined #openstack-dev14:38
*** aveiga has joined #openstack-dev14:39
*** omachace has quit IRC14:40
*** RajM has joined #openstack-dev14:40
*** omachace1 has joined #openstack-dev14:41
*** omachace has joined #openstack-dev14:41
*** jayg|g0n3 is now known as jayg14:41
*** omachace1 has left #openstack-dev14:42
*** rods has joined #openstack-dev14:43
*** insanida1e has joined #openstack-dev14:43
*** iartarisi has quit IRC14:44
*** READ10 has joined #openstack-dev14:44
*** aeperezt has joined #openstack-dev14:45
*** joesavak has joined #openstack-dev14:45
*** colinmcn_ has joined #openstack-dev14:46
*** insanidade has quit IRC14:46
*** buzztroll has quit IRC14:46
*** mfer has joined #openstack-dev14:47
*** vijendar has joined #openstack-dev14:47
*** insanida1e is now known as insanidade14:48
*** byeager has joined #openstack-dev14:48
*** danielbruno has joined #openstack-dev14:48
*** thedodd has joined #openstack-dev14:50
*** iartarisi has joined #openstack-dev14:51
*** claytonc has joined #openstack-dev14:51
*** sarob__ is now known as sarob_14:53
*** sarob has quit IRC14:54
*** colinmcn_ has quit IRC14:55
*** colinmcn_ has joined #openstack-dev14:55
*** sahid has quit IRC14:55
*** danielbruno has quit IRC14:56
*** n0ano has joined #openstack-dev14:56
*** jroovers has quit IRC14:56
*** rcleere has quit IRC14:57
*** peristeri has joined #openstack-dev14:58
*** jgallard has joined #openstack-dev14:58
*** sahid has joined #openstack-dev14:58
*** michchap has joined #openstack-dev14:59
*** ngoracke has joined #openstack-dev14:59
*** danielbruno has joined #openstack-dev15:01
*** briancurtin has joined #openstack-dev15:01
*** mohits has joined #openstack-dev15:01
*** dolphm has joined #openstack-dev15:01
*** armax has joined #openstack-dev15:01
dolphmttx: o/15:01
ttxdolphm: o/15:02
*** openstackstatus has quit IRC15:02
ttxLooking at https://launchpad.net/keystone/+milestone/icehouse-115:02
ttxLooks under control to me15:02
dolphmi bumped one bp to m2 since last week15:02
dolphmdomain-based and project-based centralized quotas are now both in m215:02
dolphmwhich makes sense anyway :)15:02
ttxDid you file any retroactive blueprrint for stuff that got merged in the month before the summit ?15:03
*** dvarga has joined #openstack-dev15:03
dolphmi did not15:03
dolphmi probably could!15:03
ttxis there anythng worth it ?15:03
*** michchap has quit IRC15:03
*** sumanthns has joined #openstack-dev15:03
*** jecarey has joined #openstack-dev15:04
dolphmnot off the top of my head, but i'd be happy to go back and look15:04
ttxdolphm: ok, please do that before end of week, so that it appears on the list next week15:04
dolphmsure15:04
ttxNow looking into the general icehouse plan @ https://blueprints.launchpad.net/keystone/icehouse15:05
ttxSome of the icehouse-2 stuff could use assignees, but otherwise looks good15:05
ttxdolphm: how complete is that ? Does it reflect everything you know will be worked on ?15:05
dolphmttx: it is missing a bp for a significant backend refactor15:07
ttxdolphm: ok, please add it before end of week if you can15:07
dolphmttx: which could land in m2 or m3, but i think we want to see that sooner15:07
ttxOn the i-1 bugs side... bug 1208940 is targeted but not assigned15:08
*** byeager has quit IRC15:08
uvirtbotLaunchpad bug 1208940 in keystone "V3 Identity API: Can project tokens be used as domain tokens?" [High,Confirmed] https://launchpad.net/bugs/120894015:08
*** byeager has joined #openstack-dev15:08
ttxdo you have anyone working on it ?15:08
*** che-arne has quit IRC15:08
dolphmttx: assigned to myself15:08
dolphmttx: justinb opened a couple similar bugs i'd like to tackle all at once15:08
*** tmclaugh[work] has joined #openstack-dev15:08
ttxok, that's all I had. Anything you want to see discussed at the meeting today ?15:09
ttxdolphm: user-locale-api is still marked Blocked15:09
dolphmttx: that's true -- but last week we didn't have a bp to block it against15:09
dolphmttx: as a result of the cross-project meeting, we figured out where to keep an eye out for i18n progress, and linked the bp's accordingly15:10
*** sumanthns has quit IRC15:10
dolphmttx: they're both targeting m2 now -- it'll only require trivial patches on the keystone side15:11
ttxdolphm: now that the dependency is established I think we can set it back to "Not started" or whatever15:11
*** xga has quit IRC15:11
*** xga_ has quit IRC15:11
dolphmttx: even though several patches have merged to keystone for this bp during havana?15:11
ttxif the oslo one goes too slow and starts jeopardizing delivery of this one for i-2, then we can set it back to Blocked and get it discussed again15:12
ttxStarted" or "Good progress" then15:12
*** colinmcnamara has quit IRC15:12
dolphmchanged to "good progress"15:13
ttxwant to keep "Blocked" for stuff we need to solve by discussing in-meeting15:13
ttxdolphm: +115:13
dolphmmakes sense15:13
ttxOK, then see you at meeting today!15:13
dolphm\o/15:13
*** tmclaugh[work] has quit IRC15:13
*** xga has joined #openstack-dev15:13
*** xga_ has joined #openstack-dev15:13
ttxrussellb: if you're around already, we can start early.15:14
russellbi am around yes15:14
ttxrussellb: looking at https://launchpad.net/nova/+milestone/icehouse-115:14
ttxLooks pretty good. Expecting a few of those Low to miss the target but taht's not really an issue15:14
*** dkranz has joined #openstack-dev15:15
russellbyep, been pushing things off that are the most likely to miss15:15
russellball the Lows not up for review will probably miss too15:15
*** nelsnelson has joined #openstack-dev15:15
ttxrussellb: periodic-tasks-to-db-slave got one change merged... is it fully implemented now ?15:15
ttxhmm partially-implements, so probably not15:15
russellbyeah, more to do15:16
*** tmclaugh[work] has joined #openstack-dev15:16
*** xingchao has quit IRC15:16
ttxAlthough https://review.openstack.org/#/c/38872/15:16
*** colinmcn_ has quit IRC15:16
russellbi feel like there's a good chance it won't all make i-115:16
russellbsee work items15:16
ttxhah15:16
*** arata has left #openstack-dev15:17
russellbi'm just going to move it15:17
ttxrussellb: "Good progress" is probably more accurate for this one then15:17
russellbagreed15:17
ttxI'll let you adjust15:17
russellbupdated15:17
*** amuller has quit IRC15:17
ttxrussellb: Looking at the i-1 bugs15:17
*** herndon has joined #openstack-dev15:18
ttxA number of them (including 2 critical ones) don't have assignees15:18
*** byeager_ has joined #openstack-dev15:18
russellbgood point15:18
russellbi guess the new critical ones are from gate failures15:18
ttxlook like it15:19
*** byeager has quit IRC15:19
ttxIf you can't get people assigned to those Medium/High maybe move them to i-215:19
russellback15:19
*** sarob_ has quit IRC15:19
ttxalso https://bugs.launchpad.net/bugs/1254714 is not atrgeted to i-1 at all15:19
uvirtbotLaunchpad bug 1254714 in nova "XenAPI: Cached images are never re-used" [Critical,New]15:19
*** sarob has joined #openstack-dev15:20
ayoungrussellb, dolphm, I don't think they have a good grasp of the API for quotas.  There needs to be some thought to filtering.  Either they are going to be grabbing individual quotas for each user (chatty) or trying to get them all at once (won't scale)  and I think there needs to be something in betweenish.    Withough help, they won't have that by Ice215:20
*** schwicht has joined #openstack-dev15:20
ttxrussellb: hrm, that one should probably be High / OSSAified15:20
*** mpavlase has joined #openstack-dev15:20
russellbyeah hadn't seen that one yet15:20
*** mpavlase has left #openstack-dev15:20
*** ngoracke has quit IRC15:21
russellbi'll ping john g on that one too15:21
*** epopt37 has quit IRC15:21
BobBallThat one was me15:21
BobBallSorry if I got the setting wrong - I thought it was critical because of the security implications15:22
ttxBobBall: it's certainly critical that we evaluate the security implications :)15:22
*** jruzz has joined #openstack-dev15:22
russellbif it has security implications, it should be filed as a private security bug15:22
russellbbut cat out of the bag already on this one15:22
BobBallSorry - could have been my bad again...15:23
ttxcan't really be triggered afaict15:23
BobBallI raised a security issue for a different case before and I thought the result there was that we should only raise security issues for things that have been released15:23
BobBallthis bug is new in Icehouse15:23
russellbsome people do continuous deployment of master15:24
ttxrussellb: so... critical / i-1 ?15:24
BobBallAgreed it can't be exploited directly15:24
viktorsdhellmann: ping15:24
*** carl_baldwin has joined #openstack-dev15:24
russellbttx: for now, want to get john's input too15:24
ttxaccidental leak that needs ot be plugged15:24
*** sarob has quit IRC15:24
dhellmannviktors: pong15:24
ttxBobBall: please add a comment explaining why it's Icehouse-onnly, will be useful for security15:25
BobBallI'd like to understand what the outcome is russellb - if I should have handled it differently, please let me know :)15:25
russellband point to specific commits that introduced it15:25
ttxDependency issue: options-in-groups <- powervm-opts-group15:25
BobBallsorry - had done that in one of the places (bug/commit) but not the other.15:25
russellbBobBall: in general, if you suspect that there is a chance of a security impact, please file it privately and let the VMT decide.  better safe15:25
BobBallWill comment now.15:25
*** urulama has quit IRC15:25
ttxrussellb: probably needs to be unlinked ?15:25
russellbttx: yeah just need to break that dep, since the powervm bit is being dropped (probably)15:26
russellbyes15:26
ttxdone15:26
russellbthanks15:26
BobBallbtw - fix has already landed for this15:26
BobBallnot sure why the bug wasn't updated to say it had landed...15:26
russellborly15:26
russellbwell that's convenient!15:26
BobBalloh no15:26
BobBallapproved - but not landed due to gate bug15:26
BobBallhttps://review.openstack.org/#/c/58281/15:26
*** nkinder has joined #openstack-dev15:26
russellbah, so close ...15:26
russellbseems lots of people are having trouble with bug linking15:27
dstanekdolphm: is this really a high priority? https://bugs.launchpad.net/keystone/+bug/119755415:27
uvirtbotLaunchpad bug 1197554 in keystone "V2 tokens now  returns meta data as part of response which is not part of v2 identity spec" [High,Confirmed]15:27
*** venkatesh has joined #openstack-dev15:27
ttxrussellb: ok assigned to Bob and linked to fix15:27
russellbcool15:28
dolphmdstanek: that's probably Won't Fix now :(15:28
ttxrussellb: so try to see if you can get the remaining unassigned to someone15:28
russellbk15:28
ttxrussellb: now looking at the general plan @ https://blueprints.launchpad.net/nova/icehouse15:28
ttxmaking any progress there ?15:28
*** joesavak has quit IRC15:28
russellbyeah, slowly but surely15:28
russellbonly the ones in New haven't been reviewed yet15:29
ttxa few left to triage, no idea how complete it is though15:29
russellball the others not prioritized are in process15:29
*** alunduil_ has joined #openstack-dev15:29
russellbso, 12 out of 98 in New15:29
*** tkammer has quit IRC15:29
ttxrussellb: is it missing anything you know will be worked on ?15:29
*** datsun180b has joined #openstack-dev15:29
dstanekdolphm: i was going to mark it at Won't Fix, but I don't have the magic powers15:30
russellbnothing blatant15:30
dolphmdstanek: i'm on it -- there's also a bp that morganfainberg filed to start testing against accidentally leaking attributes into the api like that15:30
ttxrussellb: OK, so it would be nice if you could get them all reviewed/prioritized by next week15:30
ttxrussellb: then just handle the incoming flow15:30
russellbby sometime next week, sure ... holiday this week may hurt progress15:31
ttxrussellb: ok, we'll see where you get by next week meeting15:31
russellbcan definitely clear out the New queue15:31
ttxrussellb: anything you wanted to raise in-meeting today ?15:31
russellbthe rest that are in progress may be blocked out of my control15:31
russellbnope15:31
russellbwell powervm thing15:31
ttxright15:31
russellbthough i think we may have that on the cross-project schedule?15:31
russellbnot sure it's a cross project issue really15:32
ttxyes we have15:32
ttxit's a relmgt/nova cross-issue :)15:32
russellbbut it doesn't hurt to talk about deprecation processes15:32
russellbheh true15:32
ttxsee you there then15:32
russellbk15:32
russellbthanks!15:32
ttxdavid-lyle: around ?15:32
*** DennyZhang has joined #openstack-dev15:32
david-lyleo/15:32
ttxdavid-lyle: being after nova means always a bit late, sorry for that :)15:32
*** byeager_ has quit IRC15:32
*** alunduil has quit IRC15:32
david-lylettx: no worries15:32
ttxdavid-lyle: looking at https://launchpad.net/horizon/+milestone/icehouse-115:33
*** byeager has joined #openstack-dev15:33
david-lylettx: lots up for review little has landed15:33
ttxhorizon-reusable-charts might be completed by https://review.openstack.org/#/c/56042/15:33
ttxI can set it to "Implemented" if you confirm15:33
david-lylettx: I think that is a two parter15:34
*** epopt37 has joined #openstack-dev15:34
*** DennyZhang has quit IRC15:34
david-lyleone more review needs to merge15:34
ttxOK15:34
david-lylehttps://review.openstack.org/5699715:34
david-lyleshould land though today or tomorrow15:34
ttxgot fooled by the "implements-blueprint" assertion15:34
david-lyleyes, overstated things a bit15:35
ttxdavid-lyle: looking at the bugs list now, a lot of them have no assignee and no code proposed15:35
ttxgiven that this week is a US holiday week, do you still think thyey can be fixed by next week ?15:35
*** DennyZhang has joined #openstack-dev15:36
david-lylemost of those need to move, I didn't put those in the i-1 bucket.  I will clean that up15:36
ttxdavid-lyle: you can wait for your meeting today to clean it up if nobody steps up to fix them15:36
*** pberis has quit IRC15:36
david-lylettx: ok15:37
*** pberis has joined #openstack-dev15:37
ttxdavid-lyle: now looking at the general icehouse plan @ https://blueprints.launchpad.net/horizon/icehouse15:37
*** byeager has quit IRC15:38
ttxShould I conservatively set all "Unknown" status to "Not started" ?15:38
*** neeti has quit IRC15:38
david-lyleyes, that's fair15:38
*** alexpilotti has joined #openstack-dev15:38
ttxOK, will do. Also you have a number of unassigned blueprints there15:38
*** ngoracke has joined #openstack-dev15:38
ttxdoes that mean some group signed up to do it but nobody in particular ?15:39
ttx(in which case, assigning a group is fine)15:39
*** eharney has joined #openstack-dev15:39
ttx(until you know who actually does it)15:39
david-lyleI think there are tentative owners for those, just wasn't certain, I'll get those assigned15:39
ttxit's fine to put a name and then change it.15:40
ttxat least you have a go-to person to ask about it15:40
ttxdavid-lyle: How complete would you say that plan is ?15:40
ttxis there a lot of blueprints left to file ?15:40
david-lyleok, we have an ambitious ceilometer integration plan, and I'm hoping someone else will step up otherwise lsmola will be entirely overloaded15:40
david-lylettx: I think most blueprints are filed.  There are several that I still need to review and prioritize15:41
ttxindeed15:41
*** noslzzp has joined #openstack-dev15:41
ttxdavid-lyle: feel free to leave it empty until your meeting today too15:41
*** dhellmann is now known as dhellmann-afk15:41
ttxthat way you're sure I'll keep asking about it if left empty :)15:42
david-lyle:)15:42
david-lyleI'll bring it up in our meeting today15:42
lsmoladavid-lyle, well at least I have intern form OPW for sparklines :-)15:42
david-lylethat's right15:42
ttxdavid-lyle: ideally all the icehouse proposed blueprints should have a milestone set so that you can see them in that https://blueprints.launchpad.net/horizon/icehouse URL15:42
lsmoladavid-lyle, s/form/for/15:42
*** buzztroll has joined #openstack-dev15:43
ttxdavid-lyle: because the way I see it, you set a priority for all of them15:43
david-lylettx: ok, I will go through the rest of those this week and make sure something is set even if it's future15:43
*** peristeri has quit IRC15:43
ttxsounds good15:44
bnemecdsantos_: I'm available now.15:44
ttxdavid-lyle: that's all I had -- anything you want to raise at the meeting today ?15:44
david-lylettx: still trying to clear out the backlog of things built up :)15:44
*** dguitarbite has quit IRC15:44
*** rnirmal has joined #openstack-dev15:45
ttxdavid-lyle: ack, see you at the meeting then.15:45
david-lylettx: not really.  We've been deciding on a direction re: javascript, but that's been on the mailing list and doesn't directly effect other projects15:45
ttxagreed15:45
david-lylettx: sounds good15:45
david-lylethanks!15:45
*** jnoller has joined #openstack-dev15:46
*** herndon has quit IRC15:46
ttxthx!15:47
*** buzztroll has quit IRC15:47
*** aditirav has joined #openstack-dev15:47
*** achampio1 has joined #openstack-dev15:47
*** briancline has joined #openstack-dev15:50
*** achampion has quit IRC15:50
*** jtomasek has quit IRC15:53
*** jmontemayor has joined #openstack-dev15:55
*** vills_ has quit IRC15:56
*** jgrimm has joined #openstack-dev15:56
*** jtomasek has joined #openstack-dev15:56
*** aditirav_ has joined #openstack-dev15:57
*** carl_baldwin has quit IRC15:57
*** marekd|away is now known as marekd15:58
*** dhellmann-afk is now known as dhellmann15:58
*** reed has joined #openstack-dev15:59
*** Sumeniac has quit IRC15:59
*** aditirav has quit IRC15:59
*** aditirav_ is now known as aditirav15:59
*** michchap has joined #openstack-dev15:59
*** larsbutler_ has joined #openstack-dev16:00
*** Ruetobas has quit IRC16:01
*** larsbutler_ has quit IRC16:01
*** mgagne has joined #openstack-dev16:01
*** carl_baldwin has joined #openstack-dev16:01
*** afazekas has quit IRC16:02
portanteayoung: any review love left for https://review.openstack.org/5754116:02
*** jgrimm has quit IRC16:02
portante:)16:02
ayoungportante, for you..I always have a -2 ready. :)16:02
portanteow16:02
*** Ruetobas has joined #openstack-dev16:03
portanteokay, I'll take that at least. :)16:03
*** SumitNaiksatam has quit IRC16:03
portante-2 is better than -3 I suppose16:03
ayoungportante, needs a bug or a better explanation of the problem in the commit message.  WHat is going on?16:03
*** larsbutler has quit IRC16:04
*** achampion has joined #openstack-dev16:04
*** michchap has quit IRC16:04
portantelogging.debug("this %s that %s", this, that) vs. logging.debug("this %s that %s" % (this, that))16:05
*** pberis has quit IRC16:05
portantethe first only formats the message if the debug level is set16:05
*** Sumeniac has joined #openstack-dev16:05
*** tmclaugh[work] has quit IRC16:05
portantethe second always formats the message16:05
*** byeager has joined #openstack-dev16:05
*** achampio1 has quit IRC16:05
dstanekportante, ayoung: i wish hacking caught those issues16:05
*** Sumeniac has quit IRC16:05
*** Sumeniac has joined #openstack-dev16:05
portanteso you avoid the string-ification of the target objects and the final string formatting16:05
bknudsonis this causing a performance problem?16:06
portantethis since happens on every request, it impacts small objects16:06
ayoungdstanek, there will always be more wisdom in coders than in code....wait, maybe not always....but until we immanatize the eschaton.16:06
*** bswartz has joined #openstack-dev16:06
ayoungportante, also,  "signed off by?"16:06
*** DinaBelova has quit IRC16:06
portantesorry, some other projects require that, and it is a default in my .gitconfig thingy16:07
*** max_lobur is now known as max_lobur_afk16:07
ayoungI guessed that16:07
portantevdsm and qemu required that16:07
*** Ruetobas has quit IRC16:07
ayoungportante, technically, it should be the reviewer that approves the commit in that field, but Gerrit does not update it.  That would be an interesting change to gerrit, though.16:08
*** kbrierly has joined #openstack-dev16:08
*** mindpixel has quit IRC16:08
*** SergeyLukjanov has quit IRC16:08
portanteayoung: are you referring to signed-off-by?16:09
*** sergmelikyan has joined #openstack-dev16:09
ayoungyeah16:09
portanteIn other project it does not mean that the code has been reviewed, but that the coder has signed-off releasing his changes for review16:09
*** aditirav_ has joined #openstack-dev16:09
*** yamahata_ has quit IRC16:10
portanteI can yank that out if that is confusing16:10
*** mindpixel has joined #openstack-dev16:10
*** yjiang51 has joined #openstack-dev16:10
*** mrodden has quit IRC16:11
*** markwash has quit IRC16:11
*** clayb has joined #openstack-dev16:11
*** aditirav has quit IRC16:11
*** pberis has joined #openstack-dev16:12
*** jgrimm has joined #openstack-dev16:13
*** Ruetobas has joined #openstack-dev16:13
*** aditirav has joined #openstack-dev16:14
*** tmclaugh[work] has joined #openstack-dev16:14
*** pberis has quit IRC16:15
*** aditirav_ has quit IRC16:15
*** ifarkas has quit IRC16:16
*** yaguang has quit IRC16:16
dsantos_bnemec: sorry for the delay... I would just tell you that dhellmann accepted my bp and ask you for a code review... but we discussed some things and I'll send another patch soon16:16
*** kbrierly has quit IRC16:17
portanteayoung, thanks16:17
*** terriyu has joined #openstack-dev16:17
*** dhellmann is now known as dhellmann-afk16:17
mgagnealexpilotti: ping16:18
*** joesavak has joined #openstack-dev16:18
bnemecdsantos_: Okay, I saw that he left some comments.  I'll take a look when you push a new patch set.16:18
dsantos_bnemec: thanks16:18
ayoungportante, happy to +2 that once it is updated16:19
*** kbrierly has joined #openstack-dev16:20
*** ifarkas has joined #openstack-dev16:20
*** byeager_ has joined #openstack-dev16:20
*** pberis has joined #openstack-dev16:20
Adri2000I'm looking for devstack.org's git, any idea? (website's git repo, to be clear)16:21
*** jtomasek has quit IRC16:21
*** mrodden has joined #openstack-dev16:21
portanteayoung: rebasing and updating with a better commit message16:22
*** mihgen has quit IRC16:22
*** Sumeniac has quit IRC16:22
*** jprovazn has quit IRC16:23
notmynamettx around? Stays update early? I'm on the bus16:23
*** Sumeniac has joined #openstack-dev16:23
*** venkatesh has quit IRC16:24
*** byeager has quit IRC16:24
*** branen has joined #openstack-dev16:24
*** rcleere has joined #openstack-dev16:24
*** litong has joined #openstack-dev16:24
*** mindpixel has quit IRC16:25
*** sarob has joined #openstack-dev16:25
*** xqueralt has quit IRC16:25
portanteayoung: do you develop python-keystoneclient on Fedora at all?16:26
portanteF18 perhaps?16:26
ttxnotmyname: o/16:26
*** jnoller has quit IRC16:26
ttxnotmyname: I can do now if you have data16:28
*** aditirav_ has joined #openstack-dev16:29
notmynamettx. My update is pretty much the email I sent late last week16:29
*** yjiang51 has quit IRC16:30
notmynamettx. Two things additional16:30
*** teran has quit IRC16:30
*** aditirav has quit IRC16:30
*** aditirav_ is now known as aditirav16:30
*** Sumeniac has quit IRC16:30
ttxnotmyname: agreed. May I set "Meidum" priorities to everything on https://blueprints.launchpad.net/swift/icehouse ? That way they will show up on http://status.openstack.org/release/16:30
*** alop has joined #openstack-dev16:30
ttx(everything currently "Undefined")16:30
morganfainbergmornin.16:30
notmynameYa ok. Thanks16:30
*** jnoller has joined #openstack-dev16:30
*** teran_ has joined #openstack-dev16:30
*** belmoreira has quit IRC16:31
*** danwent has joined #openstack-dev16:31
*** venkatesh has joined #openstack-dev16:31
ttxalso "not started" unless proven otherwise16:31
notmynamettx. First note is that next release should be next week16:31
notmynameRc cut16:31
notmynameBrevity. I'm on my phone16:31
ttxnotmyname: ok16:31
*** paragan has quit IRC16:32
notmynameSecond is maybe larger issue about flake816:32
ttxnotmyname: with swift-bench separation and that critical bugfix16:32
ttxnotmyname: want to raise that flake8 issue at meeting today ?16:32
notmynameYes. And several nice features like early quorum and ssync16:32
*** mohits has quit IRC16:33
notmynameFlake8 issue may be a cross project issue. Getting pushback that forces us to ignore a check16:33
ttxnotmyname: ok, let's just discuss that one at meeting then16:33
notmynameCan address later today with links when I'm in the office16:34
notmynameOk16:34
*** achampio1 has joined #openstack-dev16:34
notmynameAnything else?16:35
ttxnotmyname: ok, didn't have anything you didn't already cover16:35
*** SumitNaiksatam has joined #openstack-dev16:35
*** Sumeniac has joined #openstack-dev16:35
ttxnotmyname: see you at meeting later16:35
notmynameOk. Thanks. Fun irc meeting on muni on my phone :)16:35
*** devoid has joined #openstack-dev16:36
*** xarses has quit IRC16:36
portanteayoung: updated, thanks16:36
*** rohitk has quit IRC16:36
*** achampion has quit IRC16:36
*** avishayb has quit IRC16:36
*** xga has quit IRC16:37
*** xga_ has quit IRC16:37
*** teran has joined #openstack-dev16:38
*** Gwyxx has joined #openstack-dev16:39
*** briancurtin has quit IRC16:39
*** xga_ has joined #openstack-dev16:39
*** iartarisi has quit IRC16:39
*** devoid has left #openstack-dev16:39
*** Gwyxx is now known as SL-RHanson16:39
*** xga has joined #openstack-dev16:40
*** sahid has quit IRC16:40
*** alop has quit IRC16:40
*** alop has joined #openstack-dev16:40
*** zbitter has joined #openstack-dev16:40
*** teran_ has quit IRC16:41
*** markwash has joined #openstack-dev16:42
*** ywu has joined #openstack-dev16:42
*** buzztroll has joined #openstack-dev16:43
*** e0ne has quit IRC16:44
*** zaneb has quit IRC16:44
*** buzztroll has quit IRC16:44
*** buzztroll has joined #openstack-dev16:45
ttxmarkwash: around?16:45
*** beagles has quit IRC16:45
markwashttx: hi, just got in16:45
ttxmarkwash: hi! looking at https://launchpad.net/glance/+milestone/icehouse-116:45
markwashttx: I see I have two bp-issues I didn't catch16:46
ttxprobably those two undefined16:46
markwashyeah16:46
*** viktors has left #openstack-dev16:47
*** beagles has joined #openstack-dev16:47
*** SergeyLukjanov has joined #openstack-dev16:47
markwashcaught them now16:47
ttxmarkwash: those 3 mediums are still likely to hit next week ?16:47
jgriffithttx: Cinder I-1 items are cleaned up, need to get updates from VMWare before deciding to punt those16:48
markwashselection strategy and oslo messaging are up for review, so yes on those16:48
ttxjgriffith: ok, will check in a few16:48
jgriffithspeaking of which... any VMware folks about??16:48
ttxmarkwash: looking into i-1 bugs now16:48
ttxmarkwash: should https://bugs.launchpad.net/glance/+bug/1252459 be targeted to i-1 ?16:49
uvirtbotLaunchpad bug 1252459 in glance "Glance needs a config option to limit the number of image members" [Critical,In progress]16:49
tellesnobregaayoung: ping16:49
markwashttx: yes, it is now, there might be one or two others just like that that should be I-1 targeted16:49
ttxmarkwash: any work left on https://bugs.launchpad.net/glance/+bug/1246968 ?16:49
uvirtbotLaunchpad bug 1246968 in glance "Glance doesn't log all errors" [Low,Triaged]16:49
markwashttx: I don't believe so16:50
*** singhs has joined #openstack-dev16:50
ttxmarkwash: (the release scripts will catch any FixCommitted leftover)16:50
*** DinaBelova has joined #openstack-dev16:50
ttxmarkwash: ok, will mark it FixCommitted unless proven otherwise16:51
*** steven-w1 has quit IRC16:51
markwashttx: yeah, I think the original reporter was a bit skeptical but I'm sure it only needs fixing in one place16:51
*** aditirav_ has joined #openstack-dev16:51
markwashso we should be good16:51
ttxmarkwash: OK, wil let you close it with a comment then16:51
*** sahid has joined #openstack-dev16:51
ttxmarkwash: now looking at the general Icehouse plan @ https://blueprints.launchpad.net/glance/icehouse16:52
markwashactually16:52
markwashdarn I think I have to revert that :-(16:52
*** kenperkins has quit IRC16:52
ttxmarkwash: icehouse roadmap looks good, is that a complete view of what you know is being worked on ? Or is it still missing a few BPs ?16:53
*** rkukura has left #openstack-dev16:53
*** aditirav has quit IRC16:53
*** aditirav_ is now known as aditirav16:53
markwashttx: I think there are a few things still being negotiated that are small and could land16:53
ttx(doesn't have to be final, just has to be a fair representation of the current state)16:53
markwashbut its relatively complete for the stuff I know and care about most16:53
ttxok, good enough then16:53
ttxjust keep it updated as you learn new things16:54
*** Adri2000 has quit IRC16:54
ttxmarkwash: was theer anything added in October / early November that you need to account for in icehouse-1 ?16:54
markwashttx: I still need to review the list of patches for that :-(16:55
*** dubsquared has joined #openstack-dev16:55
ttxmarkwash: ah, ok. Would be good to have it done early this week, so that we can present a complete picture of what is new in icehouse-1 start of next week16:55
*** zbitter is now known as zaneb16:55
markwashttx: nod16:55
ttxmarkwash: that's all I had. Anythign you want to raise at the meeting ?16:56
ttxMaybe more questions around the client lib / branches ? Or is that thread getting clearer ?16:56
markwashttx: I'm not sure exactly where we landed on the client lib stuff16:56
*** cpallares has joined #openstack-dev16:56
*** Sumeniac has quit IRC16:56
ttxmarkwash: yes, my head hurts reading that thread16:56
*** mrodden has quit IRC16:56
markwashit seems like a separate feature branch is probably the right way to go16:56
markwashconsidering I'm just staging something that should then look like an atomic merge in master16:57
ttxmarkwash: I guess we can mention it if we have time left at the meeting today16:57
*** Sumeniac has joined #openstack-dev16:57
ttxmarkwash: if only to motivate people to be clearer in the thread16:57
markwashttx: yeah, that sounds good16:57
ttxmarkwash: ok then, see you at the meeting later16:57
markwashlaters16:58
*** boris-42 has joined #openstack-dev16:58
*** flaper87 is now known as flaper87|afk16:59
*** Sumeniac has quit IRC16:59
*** rdopieralski has quit IRC16:59
*** Sumeniac has joined #openstack-dev16:59
ttxnext up is hub_cap17:00
hub_caphai17:00
ttxhub_cap: hi! looking @ https://launchpad.net/trove/+milestone/icehouse-117:00
*** xarses has joined #openstack-dev17:00
*** michchap has joined #openstack-dev17:00
* hub_cap goes to look too17:00
*** aditirav_ has joined #openstack-dev17:00
ttxA few things out of sync there17:00
*** Adri2000 has joined #openstack-dev17:00
*** sergmelikyan has quit IRC17:00
mgagnealexpilotti: ping17:00
*** nouser has joined #openstack-dev17:01
alexpilottimgagne: hi17:01
ttxhub_cap: you have 6 "undefined" prio blueprints there17:01
*** aditirav has quit IRC17:01
*** aditirav_ is now known as aditirav17:01
ttxhub_cap: I suspect the 3 "implemented" ones can safely be set to some priority17:01
mgagnealexpilotti: I implemented multi-nics support for cloudbase, a pull request has been sent.17:02
hub_capyes i was doing that right now ttx :)17:02
alexpilottimgagne: tx, I'm going to review it!17:02
mgagnealexpilotti: I'm however still facing issues with the installer itself17:02
hub_capttx: do i need to set direction to approved as well as definition?17:02
ttxhub_cap: if you could also set one prio for the last 3 that would be cool. Alternatievly you can bump them to i-217:02
ttxhub_cap: you can ignore direction/definition17:02
ttxhub_cap: unless you want to use them for some trove-internal purpose17:03
mgagnealexpilotti: my understanding is that the installer isn't open sourced. right?17:03
hub_capttx: sweet. i had to bump some of those to i-2 cuz they were bogus for i-117:03
hub_capi told people to start putting milestones and well, i got some goofiness :)17:03
ttxhub_cap: next, separate-guestagent-related-code has "unknown" status... does that mean, not started, or really unknown ?17:04
ttxin both cases that makes them unlikely icehouse-1 targets17:04
*** pete5 has joined #openstack-dev17:04
hub_caphmm ttx im not seeing that17:04
hub_capcan u link it to me?17:05
ttxhub_cap: https://blueprints.launchpad.net/trove/+spec/separate-guestagent-related-code17:05
*** michchap has quit IRC17:05
ttxImplementation:   Unknown17:05
*** rushiagr has joined #openstack-dev17:05
ttxhub_cap: it has some review, so it's at least started17:05
*** sergmelikyan has joined #openstack-dev17:05
ttxdunno how close it is from completion though17:05
ttxhttps://review.openstack.org/#/c/46090/ tends to mean it's completed17:06
hub_capya thats more of a ongoing things17:06
*** martyntaylor1 has quit IRC17:06
hub_capya but thats such a small bit of the overall blueprint17:06
hub_capand the 2nd thing got abandoned17:06
ttxalthough that "Implements:" may be abusive :)17:06
hub_caphehe17:06
ttxok, maybe Good progress and target to i-2 then17:06
*** rkukura has joined #openstack-dev17:06
hub_capyes i targeted i217:06
*** mrunge has joined #openstack-dev17:07
ttx"Support Designate in trove" looks completed to me17:07
hub_capso i still dont have a good roadmap, ive asked all teams to enter some icehouse blueprints but i havent seen any big new ones17:07
ttxwith https://review.openstack.org/#/c/54412/17:07
hub_capoh yes it is, dan just merged the code17:07
*** lsmola has quit IRC17:07
ttxok, will update it17:07
hub_capk17:07
*** mrodden has joined #openstack-dev17:07
*** romcheg has quit IRC17:08
ttxhub_cap: so icehouse-1 now looks good and potentially achievable17:08
hub_capas for icehouse, the "biggest" thing really is clustering/replication17:08
hub_capttx: yes it is achieveable17:08
ttxon the i-1 bugs side, i was wondering about https://bugs.launchpad.net/bugs/125289717:08
uvirtbotLaunchpad bug 1252897 in trove "Instances can be stuck in BACKUP status" [Critical,New]17:08
*** aditirav_ has joined #openstack-dev17:08
ttxshould that be put on the i-1 list ? Or is it too late to fix that ?17:08
*** akrivoka has quit IRC17:08
*** jgrimm has quit IRC17:08
hub_capwe can put it but it might be too late for it17:09
hub_capi also saw a crit bug not started17:09
*** markmcclain has joined #openstack-dev17:09
hub_capso maybe we wait on that sucker17:10
ttxhub_cap: no point in adding it if nobody is signed up to fix it17:10
hub_capill clean up the importance on the rest of the i1 bugs17:10
ttxok17:10
*** aditirav has quit IRC17:10
*** aditirav_ is now known as aditirav17:10
*** morazi has quit IRC17:10
*** MaxV_ has quit IRC17:10
ttxok, so looking at the general icehouse map17:11
*** Sumeniac has quit IRC17:11
*** Sumeniac has joined #openstack-dev17:11
hub_capand im going to try to get more blueprints out of rax, i know they have a meeting to talk roadmap + trove soon17:11
ttxhttps://blueprints.launchpad.net/trove/icehouse17:11
*** marekd is now known as marekd|away17:12
ttxA couple undefined priorities and unknwon status there, but as you said the main issue is probably that it doesn't reflect everythign you know will be worked on17:12
*** jgallard has quit IRC17:12
*** MaxV has joined #openstack-dev17:12
*** markmc has quit IRC17:12
hub_capcorrect. ill try to get hp to push out some more BPs, and i know rax will be soon (this wk)17:12
* ttx will fix the unknown statuses17:12
hub_capbut for me, the biggest things are 1) replication-ish-api in beta, 2) tempest tests17:13
ttxok, let's target next week to get a ~current plan17:13
ttxhub_cap: maybe make sure those two are covered by BPs soon17:13
alexpilottimgagne: correct17:13
ttxhub_cap: that's all I had. Anything you want to raise for the cross-project discussion at meeting today ?17:15
*** aditirav has quit IRC17:15
*** Sumeniac has quit IRC17:15
hub_capttx: well ive been asking sone people here and there about pointers wrt getting better at this17:15
*** sumanth has joined #openstack-dev17:15
hub_capblueprints, bugs triage and such like that17:15
*** Sumeniac has joined #openstack-dev17:15
hub_capso maybe i wont bring anythign up this wk but i might have a random Q here or there17:15
hub_capim good thx ttx17:15
ttxhub_cap: you know ttx.py ?17:15
hub_capno17:16
hub_capare u hubot ttx?17:16
ttxhttps://github.com/ttx/bp-issues17:16
*** aditirav has joined #openstack-dev17:16
ttxhub_cap: that's a ttx emulator17:16
ttxyou can predict my questions using it17:16
*** mrunge has quit IRC17:17
hub_capsweet ttx! itll be in my workflow this time next wk17:17
hub_capand i wont make u 2 min late for your next meeting on ttx tuesday17:17
*** mikeoutland has joined #openstack-dev17:17
ttxhub_cap: not perfect though, but another step twoards automating myself out of a job17:17
ttxwell, you're the last one. Next is in 2 hours :)17:18
*** gyee has joined #openstack-dev17:18
ttxhub_cap: see you at meeting later17:18
mgagnealexpilotti: The installer bundles Python 2.7, cloudbase-init itself and its dependencies, adds an unattend.xml for sysprep / creates a windows service and offers a UI to preconfigure cloudbase-init. right? The issue I have is that I can't recreate the installer to test my changes.17:18
hub_capttx oh hehe, break time!17:18
*** carl_baldwin has quit IRC17:18
*** xqueralt has joined #openstack-dev17:18
alexpilottimgagne: you can install using the installer17:19
alexpilottimgagne: and then apply your changes17:19
alexpilottimgagne: e.g. with a python setup.py install17:19
alexpilottimgagne: and then reboot17:19
alexpilottimgagne: at the end of the setup check sysprep but not shutdown17:20
mgagnealexpilotti: it's kind of hard when you don't have network in your vm at boot time, it involves a lot of manual work ;)17:20
ttxjgriffith: your i-1 looks good now, a few bugs missing assignees but that's fine, just raise them at your next meeting17:20
*** samuelbercovici has quit IRC17:20
*** larsbutler has joined #openstack-dev17:20
*** sarob has quit IRC17:21
*** sarob has joined #openstack-dev17:21
*** kushal has joined #openstack-dev17:22
*** david-lyle is now known as david-lyle_afk17:22
alexpilottimgagne: in that stage you can setup networking manually17:22
*** SergeyLukjanov has quit IRC17:23
*** SergeyLukjanov has joined #openstack-dev17:23
*** sarob_ has joined #openstack-dev17:23
alexpilottimgagne: to ease up development I use Fusion / Workstation taking snapshots before the reboot17:23
*** jgrimm has joined #openstack-dev17:23
alexpilottimgagne: and putting metadata on a configdrive iso17:24
alexpilottimgagne: when that works, I test on OpenStack17:24
mgagnealexpilotti: I was hoping for a way to rebuild the installer myself17:24
*** MaxV has quit IRC17:24
alexpilottimgagne: the installer gets built automatically every night with the content of the master branch17:25
alexpilottimgagne: but for development you really don't need it17:25
mgagnealexpilotti: I understand that part. Main point is that it has been broken for a week and I had no way to fix it myself and/or rebuild a new installer to test my changes.17:25
*** sarob has quit IRC17:26
*** urulama has joined #openstack-dev17:26
*** larsbutler has quit IRC17:26
alexpilottimgagne: you can use the installer to deploy the various pieces17:26
*** ygbo has quit IRC17:27
alexpilottimgagne: and then you can just manipulate the Python environment as you prefer17:27
*** jcoufal has quit IRC17:27
*** reaper has joined #openstack-dev17:27
alexpilottimgagne: once done, you just shut down the VM17:27
alexpilottimgagne:  if you look at how the unattended setup works:17:27
*** jgrimm has quit IRC17:27
*** larsbutler has joined #openstack-dev17:28
*** sarob_ has quit IRC17:28
mgagnealexpilotti: our dev infra is automated. any manual work is discouraged.17:28
alexpilottimgagne: for development is manual :-)17:28
*** urulama has quit IRC17:28
alexpilottimgagne: production wise: https://github.com/cloudbase/windows-openstack-imaging-tools/blob/master/Logon.ps1#L5617:28
*** reed has quit IRC17:28
*** corXi has quit IRC17:29
alexpilottimgagne: just add a line before that one to do a pip install, python setup.py install or anything else17:29
mgagnealexpilotti: ok, I'll find a way to automate it.17:29
mgagnealexpilotti: but still, the installer is broken atm17:29
alexpilottimgagne: what do you mean with "the installer is broken"? :-)17:29
mgagnealexpilotti: I can't use it to install cloudbase-init17:29
mgagnealexpilotti: see issue on github17:30
mgagnealexpilotti: and logs I sent you a week ago17:30
mgagnealexpilotti: https://github.com/cloudbase/cloudbase-init/issues/2817:30
alexpilottimgagne: ah, ok. The interesting thing is that in none of our tests is happening17:30
mgagnealexpilotti: happening -> failing ?17:30
alexpilottimgagne: yep17:31
*** JordanP has quit IRC17:31
alexpilottimgagne: actually we also have a CI setup that runs automated installations17:31
*** pmathews has joined #openstack-dev17:31
alexpilottimgagne: and it wouldn't pass17:31
*** safchain has quit IRC17:31
mgagnealexpilotti: ok, what about my failure?17:31
*** nermina has joined #openstack-dev17:31
*** pschaef has quit IRC17:32
*** MarkAtwood has joined #openstack-dev17:32
alexpilottimgagne: so, my 2c so far is that WMI is not properly initialized in that moment17:32
alexpilottimgagne: that's why that WMI query fails17:32
alexpilottimgagne: I need to know a bit more on how you run this17:32
*** venkatesh has quit IRC17:32
alexpilottimgagne: are you running theinstaller during sysprep?17:33
mgagnealexpilotti: I'm running the installer in specialize17:33
alexpilottimgagne: I really want to track this issue down, but since I cannot reproduce it, I'll need your help17:33
alexpilottimgagne: ok, found the issue :-)17:34
mgagnealexpilotti: the "fun" part is that it used to work17:34
alexpilottimgagne: you cannot run it there, WMI is not yet available in specialize17:34
alexpilottimgagne: the awful part17:34
alexpilottimgagne: is that specialize is subject to those type of race conditions17:34
mgagnealexpilotti: jesus...17:35
alexpilottimgagne: if you're lucky, WMI setup is complete and the installer works17:35
alexpilottimgagne: if not, you get errors like that one17:35
*** evgenyf has quit IRC17:35
mgagnealexpilotti: I guess the moon phase changed and triggered this error then ^^'17:35
alexpilottimgagne: this is the reason why, when we move the host remaming in the specialize, we replaced WMI queries with Win32 API calls17:36
alexpilottimgagne: s/move/moved/17:36
alexpilottimgagne: moon phase changed = race conditions :-)17:36
*** sumanthns has joined #openstack-dev17:36
*** reidrac has joined #openstack-dev17:36
alexpilottimgagne: if you look at how we do it: https://github.com/cloudbase/windows-openstack-imaging-tools/blob/master/17:37
mgagnealexpilotti: ok, so I have to move cloudbase-init installation from specialize to FirstLogon or Logon right?17:37
mgagnealexpilotti: I took this example: https://github.com/cloudbase/unattended-setup-scripts/blob/master/Autounattend.xml#L16717:37
alexpilottimgagne: we move the cloudbase-init setup to AutoLogon or Logon17:37
*** pmathews has quit IRC17:37
*** marekd|away is now known as marekd17:38
alexpilottimgagne: if you notice there, we download cloudbase-init, but we execute it later!17:38
mgagnealexpilotti: I should have paid a closer attention to changes in the repo17:38
mgagnealexpilotti: fun: https://github.com/cloudbase/unattended-setup-scripts/commit/d82a560073e5e121583a952af8d72a55c3f7c2a717:38
*** sahid has quit IRC17:38
alexpilottimgagne: sorry about that, we fought also a lot against sysprep before finding the proper way17:39
*** markmcclain has quit IRC17:39
*** jistr has quit IRC17:39
mgagnealexpilotti: alright, this explains the failure. I'll update my setup. it was one of those mysteries of life.17:39
alexpilottimgagne: I reallu suggest to use as a reference: https://github.com/cloudbase/windows-openstack-imaging-tools/blob/master/17:40
*** anniec has joined #openstack-dev17:40
*** sumansn_ has joined #openstack-dev17:40
mgagnealexpilotti: yep, I took a lot at it but didn't fully understand why some changes have been made17:40
*** aditirav_ has joined #openstack-dev17:40
alexpilottimgagne: now you know ;-)17:40
*** pmathews has joined #openstack-dev17:40
mgagnealexpilotti: tyvm for your time!17:41
*** achampion has joined #openstack-dev17:41
alexpilottimgagne: as a general rule, the  "unattended-setup-scripts" contains the "cutting edge" deployment scripts that we are experimenting with17:41
alexpilottimgagne: while the "windows-openstack-imaging-tools" is the "production" one17:42
mgagnealexpilotti: I'll keep that in mind17:42
*** aditirav has quit IRC17:43
*** aditirav_ is now known as aditirav17:43
alexpilottimgagne: let me know if you have other issues. We'll add a clear error on the WMI queries to advise people not to run it during specialize17:43
*** sumanthns has quit IRC17:43
*** dolphm has quit IRC17:43
*** dolphm has joined #openstack-dev17:43
*** achampio1 has quit IRC17:44
*** rongze has quit IRC17:44
mgagnealexpilotti: cool, thanks!17:44
*** sumansn__ has joined #openstack-dev17:44
*** omachace has joined #openstack-dev17:44
*** omachace has left #openstack-dev17:45
*** eglynn has quit IRC17:46
*** mrodden has quit IRC17:47
*** sumansn_ has quit IRC17:47
*** romcheg has joined #openstack-dev17:48
*** sumansn__ has quit IRC17:48
*** rossella_s has quit IRC17:49
*** Ryan_Lane has joined #openstack-dev17:50
*** RajM has quit IRC17:51
*** anniec has quit IRC17:51
*** sarob has joined #openstack-dev17:52
*** joesavak has quit IRC17:53
raildo_Hello, I'm working on a blueprint in keystoneclient and when trying to install devstack with my code, I got the following error: http://paste.openstack.org/show/54013/, anyone have idea what it is?17:53
*** derekh has quit IRC17:54
*** vipul is now known as vipul-away17:54
dolphmdstanek: poke me when you're ready for review on either https://review.openstack.org/#/c/50491/ https://review.openstack.org/#/c/52456/ ?17:55
dolphmraildo_: the CRITICAL on "API extensions are missing" must be a joke...17:55
dolphmraildo_: the first bit looks like you have conflicting requirements specifications somewhere? perhaps two projects checked out from different points in time?17:55
*** athomas has quit IRC17:56
*** hemnafk is now known as hemna17:56
*** jobewan has joined #openstack-dev17:56
dolphmraildo_: perhaps from novaclient?17:56
*** aditirav has quit IRC17:56
*** anniec has joined #openstack-dev17:56
*** aditirav has joined #openstack-dev17:57
dstanekdolphm: a full test run is just finishing for 52546 so it'll be ready in a few minutes17:58
*** twoputt has joined #openstack-dev17:58
*** twoputt_ has joined #openstack-dev17:58
*** nati_ueno has joined #openstack-dev17:58
dolphmdstanek: great!17:58
*** ykhodork has joined #openstack-dev17:58
*** nati_ueno has quit IRC17:59
*** nati_ueno has joined #openstack-dev18:00
raildo_dolphm: I just removed the keystoneclient of devstack installation, and inside the file localrc, I've set to point to my repository.18:00
*** sarob has quit IRC18:00
*** otherwiseguy has joined #openstack-dev18:00
*** michchap has joined #openstack-dev18:01
raildo_So I should remove all devstack after I point to my repository and then install stack.sh?18:01
jamielennoxraildo_: what blueprint are you working on - there is work happening in the keystoneclient extensions space already18:02
*** mrunge has joined #openstack-dev18:02
*** reed has joined #openstack-dev18:03
raildo_jamielennox: I'm including a get for quotas at domain to retrieve information from Keystone.18:04
*** colinmcnamara has joined #openstack-dev18:04
raildo_I've tested the code part and it worked, but when I went test into the devstack, i had this problem.18:05
*** michchap has quit IRC18:05
*** uaberme has quit IRC18:06
*** pmathews has quit IRC18:06
*** anniec has quit IRC18:06
*** pmathews has joined #openstack-dev18:07
*** lucasagomes has quit IRC18:08
*** Alexei_987 has quit IRC18:09
*** briancurtin has joined #openstack-dev18:09
*** vartom11113 has joined #openstack-dev18:10
*** aeperezt has quit IRC18:11
*** sushils has quit IRC18:13
*** gszasz has quit IRC18:14
*** teran has quit IRC18:15
*** anniec has joined #openstack-dev18:16
*** atiwari has joined #openstack-dev18:16
*** shinylasers has joined #openstack-dev18:16
*** DennyZhang has quit IRC18:17
*** aditirav has quit IRC18:17
*** pixelb has quit IRC18:18
*** aditirav has joined #openstack-dev18:19
*** pfreund has quit IRC18:21
*** mrunge has quit IRC18:22
*** boris-42 has quit IRC18:23
*** Akrog has quit IRC18:23
mgagnealexpilotti: still working on fixing my stuff. What's the purpose of GPO.zip?18:24
*** herndon has joined #openstack-dev18:24
alexpilottimgagne: puttiong our gorgeus desktop background ;-)18:25
mgagnealexpilotti: :D18:25
alexpilottimgagne: not strcly mandatory of course :-)18:25
mgagnealexpilotti: ;)18:25
*** dubsquared has quit IRC18:25
*** vipul-away is now known as vipul18:29
pete5general openstack dev question: is there any kind of statistics library in oslo or other parts of nova? I want to gather simple stats, like how many times an auth token middleware request is satisfied by the cache, and report them. It'd be easy to roll my own, but I'd prefer to use something that already exists.18:31
*** xga__ has joined #openstack-dev18:31
*** ruhe has quit IRC18:32
*** xga has quit IRC18:33
*** xga_ has quit IRC18:34
*** xga has joined #openstack-dev18:34
*** prekarat has quit IRC18:34
pete5i.e., simple statistical counters18:35
*** ruhe has joined #openstack-dev18:35
*** DinaBelova has quit IRC18:36
*** SergeyLukjanov_ has joined #openstack-dev18:37
*** SergeyLukjanov has quit IRC18:37
*** mkollaro has quit IRC18:37
*** jprovazn has joined #openstack-dev18:38
*** rushiagr has quit IRC18:41
*** SergeyLukjanov has joined #openstack-dev18:41
*** david-lyle_afk is now known as david-lyle18:42
*** fbo is now known as fbo_away18:42
*** SergeyLukjanov_ has quit IRC18:42
*** danpb has quit IRC18:43
*** kushal has left #openstack-dev18:44
*** rongze has joined #openstack-dev18:44
*** eglynn has joined #openstack-dev18:46
*** jcoufal has joined #openstack-dev18:51
jamielennoxayoung: please recheck the -1 on https://review.openstack.org/#/c/57803/18:51
*** xga has quit IRC18:52
*** xga__ has quit IRC18:52
pete5jamielennox: please recheck your -1 on https://review.openstack.org/#/c/56430/18:52
*** rongze has quit IRC18:53
jamielennoxpete5: ok18:54
pete5thanks :-)18:54
*** sarob has joined #openstack-dev18:55
*** RajM has joined #openstack-dev18:56
*** jistr has joined #openstack-dev18:57
*** chuck__ has joined #openstack-dev18:57
*** chuck__ has quit IRC18:57
*** joesavak has joined #openstack-dev18:58
*** xqueralt has quit IRC18:59
*** steven-weston1 has joined #openstack-dev19:00
ayoungatiwari, lets talk!@19:01
ayoungatiwari, I am with you, more than you are with yourself.  You know that, right?19:01
dolphmgyee: a bridge from what to what?19:01
*** arunkant has quit IRC19:01
atiwariayoung, yes19:01
gyeedolphm, stop-gap solution19:01
*** fabio__ has joined #openstack-dev19:01
*** fabio__ is now known as fabiog19:01
atiwarinow the question is the implementation19:01
*** nachi has joined #openstack-dev19:01
atiwariayoung correct?19:01
*** marekd-mobile has joined #openstack-dev19:02
*** michchap has joined #openstack-dev19:02
ayoungatiwari, ok, so first off19:02
*** jtomasek has joined #openstack-dev19:02
*** jtomasek has quit IRC19:02
ayoungMake role defintions nestable19:02
dolphmgyee: that doesn't address the question19:02
*** sarob has quit IRC19:02
*** pberis has quit IRC19:02
ayoung2:  make someone (a project) own each role definition19:02
ayoung3:  use policy to enforce who can make a new role defintion under an existing defintion.19:03
*** jtomasek has joined #openstack-dev19:03
atiwariayoung, when you say nesting is that mean nesting in name like "keystone:manager"?19:03
ayoungatiwari, yes19:03
*** sarob has joined #openstack-dev19:03
ayoungor even better19:03
atiwarithis approach has some issue19:03
ayounghp:sercices:keystone:manager19:03
atiwari1. service name change will trigger role name change19:04
ayoungatiwari, you want issues.  Issue means it has a child19:04
atiwaricome on19:04
ayoungheh19:04
ayoungI have Issue.  Two boys!19:04
morganfainberggyee, dolphm, in my mind, deployment wise, we pretty much already have everything we need to make this happen.  not sure an extension is even warranted.19:04
dolphmmorganfainberg: referring to password rotation?19:05
morganfainberggyee, dolphm, short of a single optional auth plugin.19:05
dstanekgyee: the blueprint linked from that review seems to be missing a lot of detail19:05
morganfainbergdolphm, yes.19:05
atiwari2. it is hard to define policy to protect roles for keystone from nova deployer s19:05
gyeedstanek, ignore the bp for now19:05
morganfainbergdolphm, gyee, well... the multiple password use-case vs. rotation19:05
gyeedstanek, use case is rotation only19:05
dstanekgyee: i was hoping to find a list of use cases :-(19:05
atiwariayoung , what do you say ?19:05
morganfainberggyee, oh, only rotation not mutiple passwords beyond rotation?19:05
ayoungatiwari, OK, so after that, It might be OK to link a service to a role definition.  But I would suspect that it could be a separate extension that does it.  I don't know that you would *always* want to trigger the update, but that doesn't mean it should not be *possible* to trigger an update19:06
morganfainberggyee, *lost that bit*19:06
gyeemorganfainberg, I am trying to make it generic, not if-then-else19:06
dolphmmorganfainberg: like, if the sql backend always stored the last known password and allowed it for a configurable duration?19:06
*** michchap has quit IRC19:06
*** colinmcnamara has quit IRC19:06
ayoungatiwari, so,  if you get 1-3 working above, linking a service to a role can be a follow on step.19:06
morganfainbergdolphm, yep19:06
dolphmmorganfainberg: works for me19:06
nkinderdolphm: that's my preference19:07
dolphmmorganfainberg: definitely wouldn't require any api changes19:07
morganfainbergdolphm, actually, i'd probably offer for the SQL backend a little more like password history (X passwords)19:07
morganfainbergdolphm, still no api change.19:07
morganfainbergand the non-SQL.. well thats up to ldap/idp to figure out how to handle that19:07
dstanekmorganfainberg: how much history would you store?19:07
nkinderif rotation is the only real use-case, I'd prefer that we only solve that and not add something that can be overloaded.19:07
morganfainbergdstanek, configurable19:07
ayoungatiwari, you protect the "change role defition" API with "owner" typ semantics.  We have that policy written in the cloud sample..19:07
fabiogmorganfainberg and dolphm: please look at this blueprint that should address the issue: https://blueprints.launchpad.net/keystone/+spec/password-rotation19:08
*** Artpicre has quit IRC19:08
dolphmmorganfainberg: and if we default to 0 seconds of overlap, the system doesn't change at all (barring inevitable bugs)19:08
gyeedstanek, https://blueprints.launchpad.net/keystone/+spec/password-rotation19:08
fabiogalso I have a work in progress on this: https://review.openstack.org/#/c/55906/19:08
morganfainbergnkinder, i think it would be trivial to track last-known-pasword and a timestamp. with a configurable (default 0) overlap period19:08
atiwariayoung, I ma not getting "make someone (a project) own each role definition"19:08
morganfainbergdolphm, ^ and yes19:08
nkindermorganfainberg: I agree, and no API change is a big plus.19:08
ayoungatiwari, like https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json#L3219:08
atiwarihow can project own role definitions19:08
dolphmmorganfainberg: store in extra, or what?19:08
ayoungatiwari, OK,19:09
*** steven-weston1 has quit IRC19:09
gyeemorganfainberg, I like the "expired_at" option19:09
ayounga role definintion, right now, is a global entity.  Only admin can add/change19:09
morganfainbergdolphm, easiest way, yes in extra19:09
ayoungI am suggesting to make role-defintion have an owner19:09
*** colinmcnamara has joined #openstack-dev19:09
ayoungspecifically a project,19:09
dolphmmorganfainberg: or move passwords into their own table?19:09
*** aditirav has quit IRC19:10
dolphmmorganfainberg: where expires_at is just a backend detail?19:10
nkindermorganfainberg, dolphm: implementation wise, you need to have a way to clean out old password after they expire.19:10
fabiogmorganfainberg and dolphm we can move password to the credential blob19:10
ayoungthen to maodify a role-defintion, you need the "changer" role on the project that owns the role defintion19:10
morganfainbergfabiog, no. that is not a good approach. since it's seprate from identity19:10
morganfainbergfabiog, that would be fine if you want to simply make a new auth plugin and adjust policy.json to allow that as a pure auth mechanism19:10
gyeemorganfainberg, no, user_id is in cred19:10
nkindermorganfainberg, dolphm: perhaps when someone authenticates, we check if there are any expired passwords and remove them.19:10
gyeethey are linked19:10
dolphmnkinder: ++, like "change_password" results in a new password record being created with no expiration, and existing passwords with no expiration suddenly have a configurable remaining lifetime set19:11
atiwariayoung, something like that I am proposing but in my proposal policy wd have the service_id in it19:11
morganfainbergnkinder, that is a fine approach19:11
morganfainbergnkinder, i like that.19:11
morganfainbergdolphm, ++19:11
atiwariso something like "role:deployer and service_id=NovaId"19:11
dolphmnkinder: i'd rather minimize the amount of work done during auth19:11
ayoungfabiog, how about "add an "old_password" field and "old_password_valid_until" field on the user object"19:11
nkinderdolphm: sure, understandable19:11
morganfainbergnkinder, dolphm, that would warrant a separate table imo.19:11
nkinderdolphm: during a password change is fine too.  The expired password will be kept longer, but it's not usable, so not a big deal.19:12
dolphmmorganfainberg: otherwise you *always* have to fetch the user record, even for failed auth19:12
*** tdruiva_ has joined #openstack-dev19:12
fabiogayoung: that does not allow to have the history of passwords19:12
morganfainbergdolphm, yes19:12
atiwarifor role update19:12
fabioglet's say I don't want to re-use the last 5 passwords19:12
*** epim has joined #openstack-dev19:12
gyeemorganfainberg, what's won't with storing them into credential table?19:12
dolphmgyee: so there you go -- password rotation for service users with zero api impact. any concerns?19:12
gyees/won't/wrong/19:12
morganfainberggyee, it's not tied to the IdP19:12
*** ifarkas has quit IRC19:12
ayoungfabiog, you mean for tracking changed passwords?  If you need that, put that in a separate table.19:13
morganfainberggyee, e.g. LDAP or (future looking) federated auth with non-sync'd passwords19:13
fabiogmorganfainberg: adding a table to store the passwords would be fine?19:13
dolphmwe treat passwords as "special" because they're owned by the idp -- i don't see a strong use case to change that, other than for unnecessary normalization19:13
ayoungfabiog, those are two different use cases.19:13
morganfainbergdolphm, ++19:13
morganfainbergfabiog, we can tie the password to the IdP that way, credential is not strongly linked.19:14
morganfainbergcredential is a far different store of data19:14
ayoungmorganfainberg, that was one of my concerns, too.19:14
*** tdruiva has quit IRC19:14
morganfainbergthere is nothing saying we shouldn't have a credential based auth plugin (optional)19:14
morganfainbergbut that is a separate topic19:14
morganfainbergwith other concerns to be discussed around it19:14
gyeewhat is credential API for anyway?19:15
morganfainberggyee, heat is making use of it w/ trusts19:15
*** mlavalle has joined #openstack-dev19:15
morganfainberggyee, and that is fine.  but i don't see a need to make default password handling go through credential in this case.  and we are talking more default password handling.19:15
ayoungatiwari, Service is only *one* type of namespace for a role.  I am ok with making an optional link from one to the other, but we can't assume that it is the only, or even the most likely to be used.  Don't try to make service the direct owner for a role-definition.  It doesn't fit.19:15
morganfainberggyee, this whole issue could be solved with a custom auth plugin and deployment choice to allow credentials to be made by a user.19:16
mgagnealexpilotti: sorry to bother again, you are the only windows guy I know on IRC ;)19:16
mgagnealexpilotti: Is HKLM\SYSTEM\MountedDevices cleared after a sysprep?19:16
morganfainberggyee, or use of external auth mechanism passed down in env to keystone19:17
morganfainberggyee, the credential table + auth plugin seems to encompass everything in the BP.19:17
morganfainberggyee, but, rotating passwords, and time-based expiration on new password (as nkinder and dolphm just discussed) is a good feature we should add as well.19:18
morganfainbergeven in the base auth mechanism.  so by default you get some of the BP, but the rest falls a bit more out of scope of the default password auth mechanism.19:19
dolphmmorganfainberg: that sounds like a second step after implementing this, no?19:19
morganfainbergdolphm, yes19:19
dolphmmorganfainberg: default password validaty duration?19:19
dolphmvalidity*19:19
nkindermorganfainberg, dolphm: It also sets the groundwork for password history checking if it's ever desired in the default IdP.19:19
morganfainbergnkinder, dolphm, exactly19:19
gyeemorganfainberg, dolphm, so the summarize, we are advocating moving password into a different table (not credential table); keep a history of password changes there; the newest one have no expiration; the older one will be assigned a configurable expiration date19:19
gyeedid I understand you guys correctly?19:20
dolphmnkinder: hey, it's less work to not delete old passwords at that point :)19:20
atiwariayoung, don't see the future but right now service drives these artifacts (Service, Endpoints, Roles)19:20
morganfainbergdolphm, we could do "cleanup" on new password issuance.19:20
ayoungatiwari, projects are generic containers.  Resources are owned by projects.  Services do not.  Not in Keystone.  Services may manage one type or a subset of resources, but they  explicitly crosscut project boundaries.  So, in order to link a role-defintion to a service, we either need to break that abstraction, or we need to put them both inside a project.19:20
dolphmgyee: ++19:20
morganfainbergthat is a good time to cleanup old passwords forthe user19:20
nkinderdolphm: you just trim them at the configured number of past passwords you want to check against. :)19:20
fabiognkinder +119:20
ayoungatiwari, no,  right now, a Role definition is expected to be used across multiple services19:20
dolphmgyee: not a configurable expiration date, but a configurable delta of overlap, resulting an expiration date19:20
atiwariayoung, that is correct19:21
ayoungatiwari, the idea of scoping a role to a service is your idea19:21
fabiogdolphm: why?19:21
atiwariand only the name19:21
ayoungbut it is only one approach19:21
nkinderexactly.  Internally, it would be an expiration date (that is created from the time of change + delta)19:21
atiwariyou can have 2 or more role definition with same name19:21
morganfainbergfabiog, because "time based" access would fall into the second step i outlined, a more custom auth mechanism (cred table based) that doesn't change default password handling.19:22
dolphmgyee: fabiog: i have no idea what an appropriate config var would be called, but something like old_password_validity_duration = 300 # number of seconds old passwords remain valid19:22
atiwari1 for nove and another for swift .....19:22
ayoungI am OK with making that happen, but the impl will need to support the existing approach along side it.  I don't want a separate set of rules for the existing code than what handles your code.19:22
*** pberis has joined #openstack-dev19:22
gyeeand the auth_plugin will be interating through that table19:22
nkinderfabiog: I think that policies will say "the old password must still be valid for N hours".  The configuration should match the definition of policy.19:22
morganfainberggyee, yes.19:22
gyeek, that might work19:22
dolphmgyee: fabiog: # ... after a new password is set19:22
nkinderfabiog: the implementation would use a timestamp for the expiration date19:22
morganfainberggyee, an optional plugin imo. but that covers the other use cases.19:22
atiwariayoung, that is I said it will be backward compatible19:22
ayoungatiwari, nova:admin and swift:admin  are nested roles.  With nova as a top level role.19:22
atiwariservice_id will be an optional19:23
*** marekd-mobile has quit IRC19:23
ayoungNo, service_id will be no where in there19:23
gyeemorganfainberg, you mean a different plugin than password auth?19:23
atiwarinova is not a role19:23
nkinderdolphm: the term "grace period" might work.19:23
atiwaribut a service in cloud infrastructure19:23
dolphmnkinder: there you go, thanks19:23
ayoungatiwari, it is a role-definition.19:23
morganfainberggyee, or something that replaces the password auth one that can be optionally enabled.19:23
ayoungatiwari, roles are just names19:23
morganfainbergdolphm, nkinder, password_grace_period19:23
morganfainberg?19:23
ayoungscopes for names19:23
nkinderdolphm: I'm used to "grace period" meaning how long you can still use a password after it expires (for the purpose of changing your password before you get locked out).19:23
*** tdruiva_ has quit IRC19:23
ayoungso, yeah, a role named "nova" seems wierd.19:24
*** galstrom_zzz is now known as galstrom19:24
morganfainbergnkinder, that is kind of a standard imo19:24
nkinderdolphm, morganfainberg: That's standard terminology from the LDAP password policy draft19:24
ayoungBut the alternative is to create another abstraction called namespace19:24
atiwariayoung, roles are just a name but same name has different meaning for two service19:24
*** tdruiva has joined #openstack-dev19:24
ayoungit is a tree problem.19:24
*** melwitt has joined #openstack-dev19:24
ayoungatiwari, or for two different projects19:24
nkindermorganfainberg, dolphm: this is slightly different though (we have a new password already).19:24
nkinder...but I think it's close enough.19:25
ayoungatiwari, service is not the only thing that is going to distinguish between two roles of the same name19:25
morganfainbergnkinder, if it's documented, i think it makes sense19:25
atiwarisome practically, Nova sees Admin differently than how swift user sees19:25
*** nati_uen_ has joined #openstack-dev19:26
atiwariayoung, what wd be other things in your mind?19:26
ayoungatiwari, what if two services want to share a role defintion?19:26
ayoungWhich one owns it?19:26
morganfainberggyee, and with the alternative plugin you could (in theory) still be basic_auth compat if you wanted (if it's implemented correctly)19:26
*** thelorax123 has quit IRC19:26
ayoungNeither!19:26
*** dubsquared has joined #openstack-dev19:26
ayoungIt goes into a project and both services can access it19:26
atiwariayoung, why they want to do so, each can have role definition with same name19:27
atiwarieventually role name matters for service19:27
gyeemorganfainberg, the new auth plugin will be protocol agnostic I would think19:27
ayoungatiwari, no.  That expands the load on the administrator19:27
dolphmnkinder: morganfainberg: gyee: fabiog: https://gist.github.com/dolph/7366031/#password-rotation19:27
gyeejust comparing password against the passwords table for the given user19:27
ayoungatiwari, but management of role names is not one to one linked with a service.,19:27
morganfainberggyee, correct19:27
ayoungatiwari, please meditate on this19:27
*** thelorax123 has joined #openstack-dev19:27
atiwariayoung, that is on problem we want to off hook from keystone admin19:27
morganfainbergdolphm, looks correct tome19:28
*** nati_ueno has quit IRC19:28
gyeedolphm, ++19:28
ayoungWe've covered this too many times.  No service ID in the role-definition.  It doesn't fit.19:29
dolphmmorganfainberg: so, do new passwords result in revocation events? :)19:29
morganfainbergdolphm, they would still have to.19:29
ayoungAccept that and you've got a really, really solid blueprint19:29
gyeedolphm, no, why?19:29
fabiogdolphm: ok, I think we have a solution to move forward then19:29
dolphmgyee: they do today19:29
morganfainbergdolphm, tokens should still be more ephemeral19:29
atiwariayoung, what I want to achieve is service artifacts (Service, Endpoints, including Roles) for Nova can be updated.created by only Nova deployer or keystone admin19:29
*** nouser has left #openstack-dev19:29
*** danwent has quit IRC19:29
morganfainbergre-issue a token is low cost.19:29
gyeemorganfainberg, make sense19:29
ayoungatiwari, you can do that19:29
*** nati_uen_ has quit IRC19:30
gyeewe shouldn't revoke token on password changes19:30
ayoungatiwari, one, create a project called Nova19:30
atiwaribut not the swift deployer19:30
morganfainberggyee, we have to at the moment, since tokens are long lived by default19:30
ayoung2 create a role called Nova19:30
*** nati_ueno has joined #openstack-dev19:30
ayoung3 assign the role-def Nova to the "Nova" project"19:30
atiwariok19:30
ttxstevebaker: around?19:30
gyeemorganfainberg, password change != password compromise19:30
gyeecompromised19:31
ayoungNow only user with the role "rolemanager" can create or delete roles under the "nova" "role-def"19:31
morganfainberggyee, how do you identify the difference?19:31
atiwariayoung, that mean you want to have on-off policy for each service19:31
morganfainbergcompromise = changed password19:31
atiwariis that correct?19:31
morganfainbergso.19:31
gyeemorganfainberg, we can't19:31
ayoungatiwari, no.  Policy is owner-or-admin rule I linked to before19:31
*** dubsquared has quit IRC19:31
dolphmmorganfainberg: with revocation events, you could register a revocation event in the future (when the password will actually expire)19:31
gyeewe suspend user19:31
morganfainberggyee, then the answer for now is revoke19:31
gyeethat will revoked all the user's tokens19:31
dolphm(old password)19:31
morganfainbergdolphm, oh good idea19:31
ayoungatiwari, ah...there is some majik there you might not be familiar with19:31
morganfainbergdolphm, derp, was thinking in current revocation mechanism19:32
dolphmmorganfainberg: but that also means tokens with the new password must be recreated19:32
ayoungatiwari, henrynash did some sleight of hand.19:32
morganfainberghrm.19:32
dolphm*shrug*19:32
atiwariin https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json#L3219:32
atiwariowner is derived by user_id19:32
ayoungatiwari, basically, we fetch the object from the DB and check ownership in policy enforcement.  It is ugleeeee but it works19:32
morganfainbergdolphm, salt tokens with something from the password? new revocation matcher?19:32
atiwariis that correct?19:32
ayoungatiwari, yeah19:32
ayoungatiwari, specifically, we would need something that says19:32
ayounguser has role X on project Y which owns object Z19:33
ayoungso, yeahm a little more complex19:33
dolphmmorganfainberg: maybe you could use trusts for this19:33
* dolphm runs away19:33
stevebakerttx: here19:33
ayoungatiwari, but people are asking for that kind of policy elsewhere already19:33
morganfainbergdolphm, LOL thats what trusts are for, so i hear!19:33
gyeehaha19:33
ttxstevebaker: hi!19:33
stevebakerttx: https://launchpad.net/heat/+milestone/icehouse-119:33
stevebakerhi19:33
morganfainbergdolphm, trusts are the answer for everything19:33
ttxstevebaker: 3 undefined priorities on this one19:34
ayoungdifferent APIs for change password versus rotate password.  Rotate does not invalide tokens19:34
*** fbo_away is now known as fbo19:34
morganfainbergayoung, and just let old tokens live on on a rotation until natural expiration?19:34
ttxstevebaker: also was wondering if anything in there shoudln't already be postponed to i-219:34
ayoungyes19:34
ayoungmorganfainberg, yes19:34
ttxstevebaker: like stuff which is only started and hasn't code proposed yet (one week left)19:35
*** danwent has joined #openstack-dev19:35
stevebakerttx: priorities fixed19:35
morganfainbergayoung, or.. in post data "revoke=True" ?19:35
atiwariayoung, did you see plan B in link: https://etherpad.openstack.org/p/service-scoped-role-definition?19:35
morganfainbergsame mechanism, just alternate data19:35
ttxstevebaker: or is everything still likely to make it ?19:36
atiwariwhich is something like you are mentioning here19:36
morganfainbergand revoke=true would mean no grace on password overalp?19:36
morganfainbergdolphm, nkinder ^19:36
dolphm:(19:36
morganfainberggyee, ^19:36
stevebakerttx: I think everything has some code proposed. I've pinged every blueprint for updates but some have not responded so I can do another sweep now19:36
stevebakerttx: maybe after the heat meeting in 24 hours19:36
ttxstevebaker: clients-ssl-options might be completed by https://review.openstack.org/#/c/54686/ (merged)19:36
stevebakerah, yes19:36
atiwarieach service will own a project and mapped to that project with "service-deployer" role19:36
ttxstevebaker: filter-stacks might be completed by https://review.openstack.org/#/c/57313/ (merged)19:36
dolphmmorganfainberg: if non-zero grace period, don't revoke anything (opt out of current behavior). if zero grace period, revoke immediately (maintain current behavior)19:37
gyeedolphm, sounds good19:37
gyeeI rather have just one configurable option19:37
ttxstevebaker: if you confirm they all have the code proposed already, you can set them to "Needs code review" to match19:37
morganfainbergdolphm, right.  and if gace period is configured and revocation is desired, revoke=True in the data, forces current behavior?19:37
morganfainbergor am i crossing things.19:38
morganfainberg(don't cross the streams!)19:38
stevebakerttx: what if the code available is only partial implementation?19:38
ttxstevebaker: "good progress" is probably the best bet in that case19:38
* morganfainberg is confused now.19:38
gyeemorganfainberg, no, the grace period configure dictates both19:38
stevebakerttx: ok19:38
dolphmmorganfainberg: i'm trying to avoid api impact19:39
fabiogmorganfainberg: grace_per=0 -> Revoke19:39
morganfainbergdolphm, password change is a new mechanism, not impl right?19:39
morganfainbergor did that make it's way in19:39
ttxstevebaker: should I set  filter-stacks to 'implemented' due to https://review.openstack.org/#/c/57313/ (merged) ?19:39
dolphmmorganfainberg: it's in review, i'd like to merge it today actually19:39
dolphmdstanek: ^19:39
morganfainbergdolphm, ok then fair enough19:39
dolphmmorganfainberg: https://review.openstack.org/#/c/52456/19:39
stevebakerttx: yes, do that please19:39
morganfainbergdisable user if you want to revoke all tokens right now.19:39
ttxon it19:40
morganfainberge.g. compromised user?19:40
gyeemorganfainberg, ++19:40
ttxstevebaker: looking at your I1-targeted bug list now19:40
morganfainbergthat is the last "case" we would need to deal with on password rotation19:40
stevebakerttx: ahem19:40
ttxstevebaker: pretty massive list :)19:40
morganfainbergwhich i'm fine with the "disable this user" approach, just want it to be clearly documented that is the right way to handle it19:41
stevebakerttx: but lots fixed!19:41
*** novas0x2a|laptop has joined #openstack-dev19:41
ttxstevebaker: would be good to refine it with stuff that's likely to get fixed, and/or stuff you really want to get fixed by I119:41
stevebakerttx: yes, I may just kick any Triaged below High19:41
ttxstevebaker: if you end up fixing more, my release script will catch them and add the milestone for them :)19:42
ttxstevebaker: please refine the list by the heat meeting19:42
stevebakerttx: handy, even if they've got milestone i-2?19:42
ttxstevebaker: yes19:42
stevebakerttx: nice19:42
nkindermorganfainberg, dolphm: What about the case where grace_period>0 and I change a password because it was compromised.19:42
ttxrelease script takes all FixCommitted and sets them FixReleased / i119:42
morganfainbergnkinder, that is what i was getting at.19:43
gyeenkinder, you suspend the user19:43
nkindermorganfainberg, dolphm: the old pasword would still be valid for the grace period19:43
nkindergyee: then what?  Give them a new account?19:43
gyeenkinder, suspending the user will effectively revoke all his tokens19:43
morganfainbergnkinder, ^ gyee is advocating suspending user.19:43
ttxstevebaker: looking at the more general icehouse plan now @ https://blueprints.launchpad.net/heat/icehouse19:43
morganfainbergthat is an admin action though19:43
nkinderI'm not even thinking about token revocation at this point.19:43
gyeeninkder, 1) suspend the user, 2) change password, 3) re-enable to user19:43
ttxstevebaker: you have 3 "obsolete" in there, may I remove them from the series ?19:44
dolphmmorganfainberg: nkinder: i was just thinking about that problem, and considering exposing write operation to revocation events to the API?19:44
*** avishay has quit IRC19:44
nkindergyee: is step 2.5 to wait for the grace period to expire?19:44
stevebakerttx: I went through every blueprint, obsoleted or approved a bunch19:44
ttxstevebaker: also should I set all the "unknown" which don't have any review attached to "Not started" ?19:44
*** jecarey has quit IRC19:44
dolphmmorganfainberg: POST /v3//auth/token/revocation_events {"revocation_event": {"user_id": "abc123"}}19:44
nkindergyee: change the password N+1 times, where N is the number of passwords that we retain in history?  It's not very pretty.19:45
*** mrodden has joined #openstack-dev19:45
dolphmi don't know how generally useful that would be19:45
morganfainbergdolphm, that seems like the wrong approach.19:45
stevebakerttx: yes, ok19:45
dolphmmorganfainberg: how so?19:45
ttxstevebaker: will do in a few19:45
dolphmgyee: that works too19:46
morganfainbergdolphm, i'd rather very strictly control how events are generated.  that opens the doors to a lot of odd issues occuring (and another secuiryt/ddos vector if we are not careful)19:46
dolphmnkinder: how is that any uglier than what's currently proposed?19:46
dolphmmorganfainberg: fair enough19:46
ttxstevebaker: plan looks mostly good, is it a fair portrait of what you know might happen ? Or are you still waiting for a few more BPs to be filed ?19:46
morganfainbergdolphm, nkinder, if user.suspended, grace = 0 (by default)19:46
*** sarob has quit IRC19:46
morganfainbergerm s/by default/always19:46
nkindermorganfainberg: yes, that would do it.19:46
*** SL-RHanson has quit IRC19:47
morganfainbergthere is no reason to support a grace period for a suspended user.19:47
dolphmgyee: although you can't change the password for a disabled user using dstanek's code19:47
*** sarob has joined #openstack-dev19:47
dolphmgyee: that would be the existing password reset approach19:47
dolphmgyee: so it'd be one operation19:47
gyeedolphm, admin should be able to update user right?19:47
morganfainberggyee, might need to add support for that19:47
stevebakerttx: once I've finished some hot-software-config POC work, a bunch of blueprints will be created to share out the work items19:47
gyeeI mean update user's password field19:47
dolphmgyee: yeah, we're about to have two different password change mechanisms though19:47
dolphmgyee: PATCH /users/{user_id} '{{}}'19:48
stevebakerttx: the same might happen for autoscaling-api19:48
ttxstevebaker: it's fine to add more as you go19:48
morganfainberghopefully we can deprecate the broken mechanism sooooon.19:48
dolphmgyee: whoops, hold on19:48
stevebakerttx: and there will probably be more rats-and-mice bps19:48
ttxstevebaker: just want the roadmap to represent the current knowledge19:48
morganfainbergs/soon/sometime please/19:48
ttxstevebaker: if you can put names (assignees) on every blueprint in there, the better (if you know a group signed up but nobody in particular yet, assigning to a group is fine too)19:48
gyeedolphm, PATCH /users is admin-protected today19:48
stevebakerttx: ok19:48
*** rongze has joined #openstack-dev19:49
nkindergyee: yes, for good reason - https://bugs.launchpad.net/ossn/+bug/123798919:49
uvirtbotLaunchpad bug 1237989 in ossn "user can update his password without knowing the old password" [Critical,Fix released]19:49
ttxstevebaker: ok, that's all I had... anything you want to raise at the meeting later today ?19:49
ayoungatiwari, that is pretty much correct, although I still don't see the benefit of explicitly stating the serviceid in there.  But, yeah, plan b is about right19:49
gyeenkinder, your questions make me think about a complete password management solution today19:49
stevebakerttx: I can't think of anything right now19:49
ttxstevebaker: ok, then see you there !19:50
stevebakerwill do! thanks19:50
gyeelike suspend user after N failed attempts, enforce password length, composition, etc19:50
*** sgordon has quit IRC19:50
morganfainberggyee, that, i think is the direction we're going.19:50
*** sgordon has joined #openstack-dev19:50
*** sgordon has joined #openstack-dev19:50
gyeepassword expiration19:50
*** tzumainn_ has joined #openstack-dev19:50
gyeeforce password reset on the next login19:51
gyeeself-service password recovery19:51
*** tzumainn has quit IRC19:51
*** sarob_ has joined #openstack-dev19:51
nkinderthat's why an external IdP is nice if it already solves much of this19:51
*** sarob has quit IRC19:51
*** tzumainn_ is now known as tzumainn19:52
morganfainberggyee, i think we will nedd to get there for the keystone internal idp, but i want to make that thing handled the same as any federated idp in the long run (just something keystone provides as an option)19:52
nkindermorganfainberg: +119:52
gyeemorganfainberg, which one has higher priority? :)19:52
morganfainberggyee, support of federation.  imo.  otherwise we likley have a lot of work just for the sake of work, since we haven't decided what the federation would look like.  hopefully within the next cycle we are there.19:53
*** rongze has quit IRC19:54
morganfainberggyee, unless we _really_ need to add all that support in this cycle. (might be a tall order)19:54
morganfainberggyee, if it's next cycle, i say probably done in J timeframe for both.19:54
gyeemorgainfainberg, hard to disagree with you on this one :)19:54
*** dubsquared has joined #openstack-dev19:55
*** sarob_ has quit IRC19:55
dolphmmorganfainberg: gyee: nkinder: i'm thinking through existing API consequences here https://gist.github.com/dolph/766501119:56
morganfainbergdolphm, you could combine the suspend and password change (use case) or we need to outline what the effect would be.19:56
morganfainberg(administrative reset)19:57
morganfainberg400 bad request? :P19:57
dolphmmorganfainberg: disable and assign a new password in a single call?19:58
morganfainbergthats a fine result.  just make sure we handle that case.19:58
*** markmc has joined #openstack-dev19:58
nkinderdolphm: is token revocation configurable for the first and third cases?19:58
atiwariayoung, so you are cool with plan B?19:58
morganfainbergactually... you know.  maybe we just make administrative password change no-grace?19:58
*** twoputt_ has quit IRC19:58
*** twoputt has quit IRC19:58
morganfainbergand issues revocation19:58
dolphmnkinder: that's part of what i'm thinking about here; ideas?19:59
morganfainbergsuspension is optional at any point.19:59
morganfainbergnkinder, gyee, ^?19:59
atiwarinow the question is, why we need serviceid in role-defs?19:59
atiwaricorrect?19:59
dolphmmorganfainberg: in the service user password rotation use case, do you always expect service users to rotate their own passwords? (i think that's fair)19:59
*** dubsquared has quit IRC19:59
morganfainbergdolphm, personally, i think that is a fair expectation for any user of the keystone internal idp20:00
morganfainbergservice or otherwise20:00
nkinderdolphm: so that means changes with rotation need knowledge of the old password20:00
morganfainbergnkinder, correct.20:00
*** gordc has quit IRC20:00
gyeeon compromised password reset, we need to mention that grace period for old passwords are set to 020:01
*** steven-w1 has joined #openstack-dev20:01
dolphmmorganfainberg: in the first example, does that not result in password rotation then? (grace period is not applied)20:01
nkinderdolphm: yes.  Any PATCH request means no rotation and token revocation.20:01
morganfainbergdolphm, that would be the case, any patch user: password would be no-grace + revocation20:01
*** colinmcnamara has quit IRC20:01
nkinderonly the new self-service API would do rotation.20:02
morganfainbergnkinder, i think that is actually a good approach.20:02
nkinderand token revocation would only happen if grace_period=020:02
*** michchap has joined #openstack-dev20:03
morganfainbergnkinder, +20:03
morganfainbergnkinder, in the case of self-service20:03
*** colinmcnamara has joined #openstack-dev20:03
nkindermorganfainberg: yes, correct.20:04
dolphmmorganfainberg: nkinder: gyee: updated gist20:04
*** willingc has joined #openstack-dev20:04
morganfainbergdolphm, sure. lgtm20:04
nkinderdolphm: aren't the first and second case the same really?20:05
ayoungatiwari, I think the following lines are misguided     Keystone should have a policy "role:service-deployer and service_id:%(target.service.id)s)" policy.20:05
ayoung     _build_policy_check_credentials code has to populate service_id in credentials. (This needs an enhancement which is depending on this BP )20:05
morganfainbergnkinder, yes, but suspension is recommended until things are cleaned up.20:05
nkinderdolphm: We have an admin reset (using PATCH), and a self-service reset using the new API.20:05
ayounginstead20:05
*** derekh has joined #openstack-dev20:05
ayoungit should be something like20:05
nkindermorganfainberg: Sure, it's good practice, but it doesn't change anything other than locking the user out between requests.20:05
dolphmnkinder: yeah, you're right!20:06
*** pberis has quit IRC20:06
morganfainbergnod20:06
dolphmnkinder: revised20:06
ayounguser has role:service-deployer on project (target.service-name)20:06
ayoungatiwari, but even then it should not mention the service20:07
nkinderdolphm: add a consequence for the self-service reset that mentions how token revocation is handled20:07
*** michchap has quit IRC20:07
*** rfolco has quit IRC20:07
nkinderdolphm: if grace_period>0, tokens aren't revoked.20:07
dsantos_dhellmann-afk: I sent another patch... please take a look when you return to see whether I did right or not20:08
nkinderif grace_period=0, tokens ARE revoked20:08
ayoungatiwari, instead, the link should be implicit.  Remember, the change role api needs to be called when there is no service id present.20:08
dolphmnkinder: working on it20:08
ayoungSo your check won't keep someone from modifying the service id *Unless* the permissions are managed completely by the project that owns the service.  So linking the project that owns the role to the service is really a documentation and expectations issue.20:09
ayoungnkinder, +120:09
*** danielbruno has quit IRC20:10
dolphmnkinder: i think i captured that20:10
nkinderdolphm: cool, checking20:10
nkinderdolphm: looks good!20:10
dolphmmorganfainberg: gyee: fabiog: ++?20:11
* ayoung is going to try and get something done on revocations before being called into Thanksgiving day prep.20:11
nkinderdolphm: I like that it doesn't change the API and the default behavior is the same20:11
dstanekso for self service tokens won't be revoked if there is a grace period?20:11
dolphmayoung: are you volunteering to have the bp assigned to you? i meant to look for a volunteer during the meeting20:11
*** willingc has quit IRC20:11
dolphmnkinder: ++20:11
dolphmdstanek: correct20:12
morganfainbergdolphm, ++20:12
gyeedolphm, looks good20:12
dstanekdolphm: why wouldn't the tokens be revoked after the grace period?20:12
ayoungdolphm, which BP?20:12
nkinderdstanek: token lifetime is different than grace period20:12
*** datsun180b is now known as datsun_F40PH20:12
dolphmdstanek: because it would also revoke token generated using the new passwrod as well20:12
ayoungI'm working on the new Revocation list api20:12
*** radez is now known as radez_g0n320:13
dolphmdstanek: it basically puts the burden on the deployer to balance basic token duration and the password grace period as they see fit20:13
dolphmayoung: API or impl?20:13
dstanekdolphm: ah i see20:13
ayounghttps://blueprints.launchpad.net/keystone/+spec/revocation-events  yeah I'll take both20:13
dolphmayoung: both? what's the other one?20:13
*** CaptTofu has quit IRC20:13
*** omachace has joined #openstack-dev20:13
ayoungdolphm, plan is "get WIP, reverse engineer API, post both together"20:13
dolphmayoung: (just assigned you that one ^)20:13
*** omachace has left #openstack-dev20:14
*** vipul is now known as vipul-away20:14
*** vipul-away is now known as vipul20:14
*** CaptTofu has joined #openstack-dev20:14
ayoungdolphm, so we have another related one for splitting the revoation backend.  I think I'll close this, as it will supercede that20:14
ayounghttps://blueprints.launchpad.net/keystone/+spec/revocation-backend20:14
dolphmayoung: ah, ++20:15
ayoungdolphm, BTW: tried to make it understandable, outside of blueprinting it.  http://adam.younglogic.com/2013/11/token-revocations-in-keystone/20:16
ayoungNeeded to explain why I consider it one of the highest priorities for me to be focusing on it.20:17
ayoungShould be nothing new in there, but maybe a little bit of the analysis about trusts20:17
*** sarob has joined #openstack-dev20:18
*** nati_uen_ has joined #openstack-dev20:18
dolphmayoung: cool20:21
*** galstrom is now known as galstrom_zzz20:21
*** nati_ueno has quit IRC20:21
*** danielbruno has joined #openstack-dev20:21
*** sushils has joined #openstack-dev20:22
*** hub_cap is now known as pub_tap20:25
*** anniec has quit IRC20:25
*** Artpicre has joined #openstack-dev20:25
*** buzztroll has quit IRC20:27
ayounggyee, ever see something like this?    except environment.subprocess.CalledProcessError:20:28
ayoungAttributeError: 'NoneType' object has no attribute 'CalledProcessError'20:28
gyeeayoung, no, sounds like you have the won't package version?20:28
*** anniec has joined #openstack-dev20:28
gyeelemme check my env20:28
*** buzztroll has joined #openstack-dev20:29
*** jnoller has quit IRC20:30
*** novas0x2a|laptop has quit IRC20:31
*** novas0x2a|laptop has joined #openstack-dev20:31
*** mikeoutland has quit IRC20:31
*** mikeoutland has joined #openstack-dev20:32
*** jecarey has joined #openstack-dev20:33
*** denis_makogon_ has joined #openstack-dev20:34
bknudsonjamielennox: what's this about: "I'm not sure what the policy on the link in comments are."20:35
ayounggyee, CalledProcessError is from Keystone common20:35
ayoungenvironment.subprocess...20:35
ayoungI wonder if it is Eventlet?20:36
*** ykhodork has quit IRC20:36
*** gordc has joined #openstack-dev20:36
*** ykhodork has joined #openstack-dev20:36
bknudsonayoung: did you call configure_once? http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/environment/__init__.py#n3620:37
ayoungbknudson, this is in a unit test20:37
ayoungbut it is a new suite,20:37
bknudsonayoung: that was moved into a fixture recently...20:38
bknudsonhttp://git.openstack.org/cgit/openstack/keystone/tree/keystone/tests/fixtures/appserver.py#n2920:38
bknudsonit used to be in keystone/tests/core.py20:38
gyeeayoung, see keystone/tests/core.py20:38
gyeeenvironment.use_eventlet()20:38
bknudsonyou are way behind.20:39
gyeeyou have two choices, use_eventlet() or use_stdlib()20:39
gyeeeither would configure the subprocess20:39
ayoungbknudson, and not currently called by super setup?20:39
gyeeif you import core it should configure subprocess on import20:40
bknudsonayoung: I haven't seen your code, but my understanding is that the base TestCase doesn't pull that in anymore20:40
bknudsonso if you need to use that fixture you need to do it yourself.20:41
ayoungbknudson, know of an example test that does that?20:41
*** epim has quit IRC20:41
*** buzztroll has quit IRC20:41
bknudsonayoung: it was dstanek20:41
*** yolanda has quit IRC20:41
dstaneko/20:41
dstanekayoung: what are you trying to do?20:41
*** denis_makogon_ is now known as denis_makogon20:41
*** vipul is now known as vipul-away20:41
ayoungdstanek, I'm getting an error trying to sign a token in a unit tests20:41
ayoungAttributeError: 'NoneType' object has no attribute 'CalledProcessError'20:41
ayoungsubprocess is not initialized, apparently.20:42
dstanekayoung: that's odd - that would mean that the environment wasn't setup properly20:42
ayoungdstanek, it is quite possible20:42
ayoungthis is a new test in20:42
bknudsonayoung: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/tests/test_keystoneclient.py#n5220:42
dstanekayoung: i thought that happened just by importing keystone.tests20:42
ayoungtest_token_provider20:42
ayoungbknudson, no, I don't want this20:43
ayoungtis more like a backend_test20:43
*** dprince has quit IRC20:43
bknudsonwe need to do environment.use_eventlet() at some point.20:43
dstanekayoung: are you importing keystone.tests?20:44
ayoungdstanek, yep20:44
dstanekit setup up the enviroment to use eventlet20:44
*** dhellmann-afk is now known as dhellmann20:44
ayoungdstanek, apparently not!20:44
bknudson__core__.py does import fixtures so that should run the environment.user_eventlet()... http://git.openstack.org/cgit/openstack/keystone/tree/keystone/tests/core.py#n2820:44
*** DennyZhang has joined #openstack-dev20:45
ayoungbknudson, I am doing STANDARD_THREADS though20:45
ayoungmaybe that got borked20:45
bknudsonoh wait, no it doesn't... that's the wrong fixtures.20:45
ayounglet me see what happens if I swap it20:45
bknudsonayoung: try importing keystone.tests.fixtures20:46
bknudsonkeystone.tests.fixtures.appserver20:46
*** steven-w1 has quit IRC20:47
bknudsonmaybe should move use_eventlet() back to keystone/tests/core.py.20:47
ayoungbknudson, same problem,20:47
ayoungbknudson, nope20:47
dstanekayoung: do you have a patch i can download?20:47
ayoungmove use_eventlet to /dev/null!20:47
ayoungdstanek, not yet...let me push to github20:47
bknudsonthat's just how we run the tests.20:47
bknudsonand the server with keystone-all... but tests should work either way20:48
*** xga has joined #openstack-dev20:48
*** xga_ has joined #openstack-dev20:48
*** hartsocks has joined #openstack-dev20:49
dolphmttx: what's the policy on non-TC folk butting in on the TC meeting? :)20:49
*** jistr has quit IRC20:49
ayoungdstanek, https://github.com/admiyo/keystone/tree/revocation-borked20:49
ayoungdolphm, /kick20:49
ayoungdolphm, but you must make a "This is Sparta" reference first.20:50
*** rongze has joined #openstack-dev20:50
*** sarob has quit IRC20:50
dolphmlifeless: is there a separate "QA should have triage privs" conversation somewhere?20:51
*** byeager_ has quit IRC20:52
lifelessdolphm: it's not split out as a separate thread; would you like to do that?20:52
*** jamielennox is now known as jamielennox|away20:52
*** xga_ has quit IRC20:53
*** xga has quit IRC20:53
dstanekayoung: which test module fails?20:53
dolphmlifeless: not necessarily, i just wanted to voice my support if there's a venue for it that i wasn't aware of20:53
lifelessdolphm: oh! well, in the project meeting in 5 minutes would be a place; also on the list thread :)20:54
dolphmlifeless: is it on the cross-project meeting agenda?20:55
ayoungdstanek, test_token_provider20:55
ayoungdstanek, keystone.tests.test_token_provider:TestRevokeToken20:55
lifelessdolphm: possibly not but I think we just added it in the tc meeting20:55
dstanekayoung: :-( it passes for me20:56
*** dubsquared has joined #openstack-dev20:56
*** rongze has quit IRC20:56
*** willingc has joined #openstack-dev20:56
*** buzztroll has joined #openstack-dev20:56
*** jcoufal has quit IRC20:57
* dolphm it'd be nice if we could track "operational impact" and "work priority" separately in LP </daydreams>20:57
nkinderdolphm: severity vs. priority?20:58
*** danielbruno has quit IRC20:59
ttxdolphm: pretty lenient20:59
dolphmnkinder: sure20:59
*** larsbutler has quit IRC20:59
nkinderhadn't noticed that it didn't have separate fields.  That's too bad :(20:59
*** pberis has joined #openstack-dev21:00
*** jamielennox|away is now known as jamielennox21:00
*** dubsquared has quit IRC21:01
*** ndipanov has quit IRC21:01
jamielennoxbknudson: i meant that generally i'd say you shouldn't put a link to a review in a git comment21:01
jamielennoxbut i'm not sure if it's something we explicitly disallow and should -1 it for that21:01
bknudsonjamielennox: check https://wiki.openstack.org/wiki/GitCommitMessages21:02
*** sandywalsh has quit IRC21:02
ayoungdstanek, I wonder if it is a venv setup thing21:02
bknudsonI've been requested in the past to not put links in the commit message.21:02
*** boris-42 has joined #openstack-dev21:03
*** danielbruno has joined #openstack-dev21:03
*** danielbruno has quit IRC21:03
*** danielbruno has joined #openstack-dev21:03
*** michchap has joined #openstack-dev21:03
dstanekif you specify -r to tox it will recreate the venv21:04
*** jruzicka has quit IRC21:04
*** sarob has joined #openstack-dev21:05
*** vipul-away is now known as vipul21:05
*** eglynn has quit IRC21:06
jamielennoxbknudson: there is nothing in there i can see though that says yes or no to links21:06
jamielennoxand i wouldn't mind to an external site but i don't see the point in linking to another review21:06
jamielennoxbut it's not disallowed or written anywhere that you shouldn't do it so i just meant i was going to -1 it for that21:07
*** yeylon has quit IRC21:07
*** michchap has quit IRC21:08
bknudsonjamielennox: "Do not assume the reviewer has access to external web services/site."21:08
bknudsonI think that's what the reviewers on a patch of mine where the commit message just said "see bug xxxx".21:09
bknudsonI had a lot to learn.21:09
*** litong has quit IRC21:09
jamielennoxok, that's enough for a -1 then21:10
dsantos_hi, how can I change the port to be listened by nova-api? I tried to specify the option osapi_compute_listen_port in the nova.conf file but it didn't work21:10
*** clayb has quit IRC21:12
jamielennoxbknudson: bah, some anchors in that page would be useful21:12
ayoungdstanek, something wonky in my env. I can work around it by using UUID tokens for now, just skips the signing step.21:12
jamielennoxbknudson: done21:14
atiwarirole:service-deployer and service_id:%(target.service.id)s)21:14
atiwariayoung, "Remember, the change role api needs to be called when there is no service id present." are you pointing to role-defs which are not linked to a service? If yes then those should be modified by keystone admin and policy should be like "role:Admin or (role:service-deployer and service_id:%(target.service.id)s))"21:14
bknudsonjamielennox: thank you21:14
atiwariayoung, As I mentioned service_id will be optional21:15
*** yassine has quit IRC21:20
*** buzztroll has quit IRC21:20
*** sandywalsh has joined #openstack-dev21:20
*** buzztroll has joined #openstack-dev21:21
*** sarob has quit IRC21:22
*** marekd is now known as marekd|away21:23
ayoungatiwari, or linked to something else.21:23
ayoungatiwari, you cannot assume that only service admin or Keystone admin will change a role-def21:23
ayoungatiwari, you are being hard headed and it does not become you.21:24
ayoungNo.Service.Id21:24
*** mlavalle has quit IRC21:24
ayoungNothing about this will be explicitly linked to services21:24
ayoungthat is an implementation detail for your use case.21:24
*** buzztroll has quit IRC21:25
*** safchain has joined #openstack-dev21:25
atiwariayoung, I think we are talking about impl :)21:26
ayoungatiwari, yes21:26
*** sarob has joined #openstack-dev21:26
*** steven-weston has quit IRC21:26
ayoungyou are just going to want to make it match the service id,  but that will be a convention.21:26
atiwarican you tell me why endpoint have service_id?21:27
ayoungLinking a project and a service, while possible, is just overhead.  But that is what you would need to do21:27
ayoungatiwari, Yes I can, but I am not being pedantic with you.21:28
ayoungendpoints and services consume roles.21:28
ayoungnot the other way around.21:28
ayoungatiwari, please just stop and think about it.21:28
*** urulama has joined #openstack-dev21:28
*** jhesketh has joined #openstack-dev21:29
ayoungatiwari, here is your homework:  list a bunch of other ways that role hierarchies would be useful.  Once you've gone through that, tell me if it really would make sense to link role-def to any other of those abstractions.21:29
atiwariayoung, OK can you update the etherpad, how you see service linkage with roles ?21:30
*** pberis has quit IRC21:30
atiwariand I will do my homework21:30
*** rnirmal has quit IRC21:31
atiwaria concrete example wd be helpful21:31
*** ArxCruz has quit IRC21:32
*** urulama has quit IRC21:33
*** anniec has quit IRC21:35
*** devlaps has joined #openstack-dev21:35
*** yamahata_ has joined #openstack-dev21:36
*** rony358 has joined #openstack-dev21:36
*** ArxCruz has joined #openstack-dev21:36
*** CaptTofu has quit IRC21:36
*** ArxCruz has quit IRC21:36
*** CaptTofu has joined #openstack-dev21:36
*** atiwari has quit IRC21:39
*** dims has quit IRC21:40
*** mlavalle has joined #openstack-dev21:40
*** jprovazn has quit IRC21:42
*** mrunge has joined #openstack-dev21:42
notmynamettx: jeblair: sorry for the flake8 distraction. it seems progress was made earlier today (after ttx and I talked this morning). didn't want to distract with stuff21:43
*** RajM has quit IRC21:43
ttxnotmyname: it's fine. I prefer more issues raised than less21:44
ttxnotmyname: in the past we haven't raised enough issues at cross-project level21:45
*** ArxCruz has joined #openstack-dev21:45
ttxhence the new format for the meeting, much more chaotic but that's ok21:45
*** joesavak has quit IRC21:46
*** READ10 has quit IRC21:49
*** bswartz has quit IRC21:49
*** alexpilotti has quit IRC21:52
*** gmurphy has joined #openstack-dev21:52
*** rongze has joined #openstack-dev21:52
*** reidrac has quit IRC21:53
*** dims has joined #openstack-dev21:54
*** dubsquared has joined #openstack-dev21:57
*** rongze has quit IRC21:59
*** DennyZhang has quit IRC22:00
*** yamahata_ has quit IRC22:00
jamielennoxkeystone people: still need to get some reviews on reogranizing the service catalog: https://review.openstack.org/#/c/53038/22:00
jamielennoxthis is important for heat and has been sitting there in one form or another for a while22:01
*** markvoelker1 has quit IRC22:01
*** dubsquared has quit IRC22:01
*** pub_tap is now known as hub_cap22:01
*** gmurphy has quit IRC22:01
jamielennoxgyee, ayoung, bknudson, dolphm, morganfainberg, dstanek: ^^22:01
ayoungjamielennox, looking now22:01
jamielennoxchhers22:02
*** twoputt has joined #openstack-dev22:02
*** twoputt_ has joined #openstack-dev22:02
*** markmc has quit IRC22:02
ayoungjamielennox, +222:03
*** michchap has joined #openstack-dev22:04
*** derekh has quit IRC22:04
jamielennoxi'm loving things starting to move, finally got a +2 from bknudson on discovery after months22:04
jamielennoxayoung: if you're in the mood the dependent catalog review is easier to understand22:05
*** boden has quit IRC22:06
jamielennoxactually i just saw something on the dependant region review i want to fix22:06
ayoungjamielennox, looking now...I can adjust if you resubmit22:06
*** ruhe has quit IRC22:08
*** michchap has quit IRC22:09
ayoungjamielennox, it looks good.  Diff from the last patch is pretty straightforward.22:10
*** ArxCruz has quit IRC22:10
*** ArxCruz has joined #openstack-dev22:10
*** eglynn has joined #openstack-dev22:10
morganfainbergjamielennox. added my comment, but as stated, i wont block the patchset based upon our IRC conversation22:11
*** michchap has joined #openstack-dev22:12
morganfainbergjamielennox, but I also don't feel like I can +2 it.22:12
notmynamettx: I've got something to backport to havana22:12
jamielennoxoh, right - sorry i had another conversation with gyee about it and i had completely forgot about ABCMeta22:12
*** vladikr has quit IRC22:12
jamielennoxmorganfainberg: fix that = +2?22:13
morganfainbergjamielennox, yes.22:13
jamielennoxmorganfainberg: actually - does it makes sense to do it as part of the refactor or can i add that as a new feature22:13
morganfainbergjamielennox, (and no more @classmethod w/ @abc.abstractmethod)22:13
jamielennoxit's a somewhat confusing patch as it is22:13
*** yamahata_ has joined #openstack-dev22:14
morganfainbergjamielennox, i would make it part of the refactor.  it's a couple lines at most and it clarifies that these are meant to be overidded in all cases22:14
morganfainbergjamielennox, but in either case, i wont block it.  i just wont +/- w/ the @classmethod since it, from what i read, actually makes it more confusing.  but it's not enough to warrant blocking the patchset.22:15
morganfainbergit is a valid approach.  abcmeta is a better approach, but that's personal bias.22:15
morganfainbergit conforms better to what we are doing in other cases with expected methods on subclasses w/ abcmeta (hence the no +/- on it) than @classmethod (if that makes sense)22:16
*** mrodden has quit IRC22:17
*** gordc has quit IRC22:17
morganfainbergjamielennox, i'll be back later need to go do grocery shopping for holiday foods.  i'll take a peek at the review when i'm back.22:17
jamielennoxmorganfainberg: ok, should be ready by then22:18
morganfainbergjamielennox, cool.  everything else in there does look good though22:18
*** bswartz has joined #openstack-dev22:18
*** danielbruno has quit IRC22:18
*** tmclaugh[work] has quit IRC22:20
*** anniec has joined #openstack-dev22:21
*** eglynn has quit IRC22:21
*** vipul is now known as vipul-away22:22
*** vipul-away is now known as vipul22:22
notmynamettx: backport for havana https://review.openstack.org/#/c/58635/ (note the dependency--2 separate patches for the same thing in master)22:22
*** epim has joined #openstack-dev22:24
*** SergeyLukjanov has quit IRC22:25
*** ykhodork has quit IRC22:26
*** briancurtin has quit IRC22:27
*** SumitNaiksatam has quit IRC22:28
*** SumitNaiksatam_ has joined #openstack-dev22:28
*** kenperkins has joined #openstack-dev22:28
*** danwent has quit IRC22:28
*** anniec has quit IRC22:29
*** amcrn has joined #openstack-dev22:32
*** dvarga has quit IRC22:33
*** thedodd has quit IRC22:33
*** danwent has joined #openstack-dev22:33
jamielennoxmorganfainberg: done with abc22:34
jamielennoxayoung: can you recheck those? (or maybe when jenkins is through)22:34
ayoungjamielennox, those?22:35
jamielennoxayoung: sorry, reuploaded the service catalog and regions patch22:35
*** mriedem has quit IRC22:35
*** mikeoutland has quit IRC22:36
ayoungjamielennox, happy too.22:36
jamielennoxayoung: probably too soon to bug, but i want to get a few solid +1/2s on those so they can move easily22:36
*** eglynn has joined #openstack-dev22:37
ayoungjamielennox, is that just a rebase?22:37
ayounghttps://review.openstack.org/#/c/53038/22:37
ayoungOh...  ABC ificiation22:37
*** yamahata_ has quit IRC22:38
jamielennoxyea, morganfainberg mentioned it a while ago and i forgot about it22:38
ayoungjamielennox, I'll let morganfainberg, swipe at it first.  If he's good with it, I probably am too.22:38
jamielennoxayoung: ok22:38
jamielennoxayoung: i'm trying to clear up my plate a bit22:39
ayoungjamielennox, absolutely.  and I am sure morganfainberg is on it...22:40
*** msmedved has quit IRC22:41
*** radsy has joined #openstack-dev22:41
*** mrda has joined #openstack-dev22:43
*** sgordon has quit IRC22:43
*** jnoller has joined #openstack-dev22:43
*** kbrierly has quit IRC22:43
*** kevinconway has quit IRC22:43
*** kbrierly has joined #openstack-dev22:44
*** jnoller has quit IRC22:45
*** galstrom_zzz is now known as galstrom22:47
*** dkranz has quit IRC22:48
*** mrunge has quit IRC22:52
dstanekayoung: did you get your test issue figured out?22:52
*** hartsocks1 has joined #openstack-dev22:52
*** dbalog has left #openstack-dev22:54
*** jdurgin has quit IRC22:55
*** medberry is now known as med_22:55
*** rongze has joined #openstack-dev22:55
*** hartsocks has quit IRC22:55
*** thomasem has quit IRC22:55
*** romcheg has quit IRC22:56
*** denis_makogon has quit IRC22:56
*** vijendar has quit IRC22:56
*** galstrom is now known as galstrom_zzz22:56
*** yamahata_ has joined #openstack-dev22:57
*** danwent has quit IRC22:57
*** romcheg has joined #openstack-dev22:57
*** dubsquared has joined #openstack-dev22:57
*** jcooley_ has joined #openstack-dev22:58
*** romcheg has quit IRC22:58
dstanekdolphm, bknudson: should i do anything about the comment here? https://review.openstack.org/#/c/52456/6/keystone/identity/controllers.py22:58
*** romcheg has joined #openstack-dev22:59
dolphmdstanek: i'd say yes, only because i assume that's why bknudson -1'd it22:59
dolphmdstanek: in terms of operation, i think it's currently inconsequential22:59
*** jmontemayor has quit IRC22:59
*** romcheg has left #openstack-dev22:59
*** rongze has quit IRC22:59
*** dolphm is now known as dolphm_afk23:00
*** burt has quit IRC23:01
*** dubsquared has quit IRC23:02
*** bpokorny has quit IRC23:03
*** che-arne has joined #openstack-dev23:03
*** hartsocks1 has quit IRC23:03
*** nkinder has quit IRC23:03
*** jayg is now known as jayg|g0n323:04
*** hemna is now known as hemnafk23:04
*** jpich has quit IRC23:04
*** kbringard has quit IRC23:06
*** che-arne has quit IRC23:07
*** neelashah has quit IRC23:07
*** jtomasek has quit IRC23:08
*** hartsocks has joined #openstack-dev23:08
dstaneklbragstad: hi23:09
dstaneklbragstad: i didn't see your response until this morning23:09
*** amotoki has quit IRC23:09
lbragstaddstanek: hey, no worries. I was a little late getting back to you last night too23:09
dstaneklbragstad: where did you hear about the restriction on importing classes?23:10
lbragstadmorganfainberg: brought it up in a differnet review I was working on23:10
*** pcm_ has quit IRC23:10
*** che-arne has joined #openstack-dev23:10
*** ngoracke has quit IRC23:11
dstaneklbragstad: ah, so it's all morganfainberg's fault!23:12
lbragstaddstanek: lol yeah, he was the one that pointed it out to me. I think it will be a change that goes into effect when the hacking version is bumped23:13
lbragstadso the patch from Jenkins23:13
dstaneklbragstad: that means there are a few things in keystone that'll need to be fixed23:13
lbragstadright23:14
dstaneklbragstad: so given that i can't import the class i'm torn between using __all__ (and *) and importing the module for a more verbose api23:14
lbragstadmore than likely. I've been trying to comment on those reviews as I see them come in so that we can try and fix them before they break23:14
*** mikeoutland has joined #openstack-dev23:15
*** datsun_F40PH has quit IRC23:15
dstaneklbragstad: seems like a silly restriction - i agree with the general case, but not with completely forbidding it23:15
lbragstadyeah, I'd have to go back and do alittle more digging in the docs23:16
*** eglynn has quit IRC23:17
*** otherwiseguy has quit IRC23:18
*** eharney has quit IRC23:18
*** yamahata_ has quit IRC23:20
*** epim has quit IRC23:22
*** vartom11113 has quit IRC23:22
*** claytonc has quit IRC23:24
ayoungdstanek, nah, but I worked around it.  If it is still an issue when I need to submit I'll spend the cycles to hunt it down23:24
*** jdurgin has joined #openstack-dev23:24
*** jobewan has quit IRC23:25
dstanekayoung: alright, let me know if you need an extra pair of eyes23:25
dstanekayoung: i'm one of those sick people that like tests23:25
*** reaper has quit IRC23:26
*** epim has joined #openstack-dev23:26
*** shinylasers has quit IRC23:26
*** armax has left #openstack-dev23:28
*** faramir1 has joined #openstack-dev23:29
*** urulama has joined #openstack-dev23:30
*** otherwiseguy has joined #openstack-dev23:31
*** boris-42 has quit IRC23:32
*** mriedem has joined #openstack-dev23:32
*** urulama has quit IRC23:34
*** singhs has quit IRC23:36
*** willingc has quit IRC23:37
*** xarses has quit IRC23:37
*** rony358 has quit IRC23:41
*** rony358 has joined #openstack-dev23:41
*** vipul has quit IRC23:43
*** vipul has joined #openstack-dev23:44
*** mfer has quit IRC23:44
*** vkmc has quit IRC23:45
*** Abhishek_ has joined #openstack-dev23:45
Abhishek_Hi guys, I'm a new contributor trying to merge a patch. The gerrit workflow page says manual merge is experimental.23:47
*** epim has quit IRC23:47
Abhishek_I dont see an option to merge in the ui. How should I merge?23:47
*** danwent has joined #openstack-dev23:47
dstanekAbhishek_: what are you trying to merge with? are you trying to get it up to date with master?23:49
*** giulivo has quit IRC23:50
*** xarses has joined #openstack-dev23:52
Abhishek_yes, master23:53
Abhishek_this is the patch: https://review.openstack.org/#/c/58418/23:53
*** MarkAtwood has quit IRC23:54
*** rongze has joined #openstack-dev23:56
*** epim has joined #openstack-dev23:56
*** jcooley_ has quit IRC23:56
*** rcleere has quit IRC23:56
*** dubsquared has joined #openstack-dev23:58
*** nkinder has joined #openstack-dev23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!