Wednesday, 2013-12-04

*** dstanek has quit IRC00:00
*** mlavalle has quit IRC00:01
*** f13o has quit IRC00:01
*** loq_mac has quit IRC00:01
*** ayoung has joined #openstack-dev00:02
*** pixelb has joined #openstack-dev00:04
sandywalsh_ekarlso, no, ceilometer isn't near it yet ... but we're trying. Here's the plan http://www.youtube.com/watch?v=c8zZtSL0t0000:04
*** rongze has quit IRC00:04
*** buzztroll has joined #openstack-dev00:06
ekarlsosandywalsh_: you think during icehouse will do ? ^00:06
*** datsun180b has quit IRC00:07
*** bvandenh has quit IRC00:09
*** flaper87 is now known as flaper87|afk00:09
*** pmcg_ is now known as pmcg00:09
*** pmathews1 has quit IRC00:10
*** reaper has quit IRC00:10
*** glenng has quit IRC00:13
*** buzztroll has quit IRC00:13
*** rcleere has quit IRC00:13
*** boris-42 has quit IRC00:14
sandywalsh_ekarlso, that's the plan, but getting branches accepted has been quite slow00:15
*** nelsnelson has quit IRC00:15
sandywalsh_ekarlso, but yes, we're shooting for icehouse00:15
*** melwitt has quit IRC00:16
*** buzztrol_ has joined #openstack-dev00:16
*** SumitNaiksatam has quit IRC00:17
*** nati_ueno has joined #openstack-dev00:18
*** nelsnelson has joined #openstack-dev00:19
*** danwent has quit IRC00:20
*** nati_uen_ has quit IRC00:21
*** danwent has joined #openstack-dev00:24
*** cdub has quit IRC00:26
*** vipul is now known as vipul-away00:27
*** tonix has quit IRC00:28
*** hemna has quit IRC00:30
*** matsuhashi has joined #openstack-dev00:31
*** rods1 has joined #openstack-dev00:32
*** sarob has quit IRC00:32
*** LetoH_ has joined #openstack-dev00:33
*** nati_ueno has quit IRC00:33
*** sarob has joined #openstack-dev00:33
*** Leto2 has quit IRC00:33
*** rods has quit IRC00:33
*** sthaha has joined #openstack-dev00:34
*** sthaha has quit IRC00:34
*** sthaha has joined #openstack-dev00:34
*** danwent has quit IRC00:35
*** ngoracke has joined #openstack-dev00:35
*** carl_baldwin has quit IRC00:35
ekarlsosandywalsh_: how do I run the stacktach workers ?00:36
*** sarob has quit IRC00:37
*** dstanek has joined #openstack-dev00:38
*** gordc has quit IRC00:38
*** danwent has joined #openstack-dev00:39
*** vipul-away is now known as vipul00:40
*** balar has joined #openstack-dev00:41
*** zbitter has joined #openstack-dev00:42
balarIs there an IP address manipulation module used by Openstack? python 3 has it in its core library, but I do not see one for python 2.700:42
balarI would like to compute netmask address given the netmask as an integer.00:42
*** zaneb has quit IRC00:43
*** jasdeepH has joined #openstack-dev00:44
*** lucas-dinner has quit IRC00:45
*** openstack has joined #openstack-dev00:46
russell_hwhen using oslo.config, is there a pattern if I want to have some class register options when instantiated, but I might want to instantiate more than one of them?00:48
dstanekmorganfainberg: just out of curiosity, is all of that global locking required?00:51
Abhishekbalar: you can use netaddr, something like t = netaddr.IPAddress(1234567) and then t.__str__()00:51
jamielennoxbknudson: do you think: https://review.openstack.org/#/c/59687/2/keystoneclient/v2_0/shell.py constitutes breaking compatability? or do we just not care in the shell?00:51
morganfainbergdstanek, i'm concerned about keystone running in multiple locations and/or under httpd00:51
lifelessmorganfainberg: oh?00:52
lifelessmorganfainberg: we were planning on that00:52
morganfainberglifeless, yes with the new KVS store refactor00:52
lifelessmorganfainberg: for TripleO (multiple locations)00:52
lifelessmorganfainberg: is KVS a production backend?00:52
*** buzztrol_ has quit IRC00:53
morganfainberglifeless, when i'm done with the refactor, it will be possible to use it as such00:53
lifelessmorganfainberg: I thought it was in-memory only and really only test suitable00:53
*** salv-orlando has quit IRC00:53
morganfainbergit's working towards being dogpile backed, so memcache, in-memory, redis, etc anything that you can represent in a Key-value-store format (get/set/deletE) will be possible00:53
*** cdub has joined #openstack-dev00:53
lifelessok, interesting00:53
lifelessthis is for tokens?00:54
lifelessor everything?00:54
morganfainberglifeless, this is mostly to solve token backend issues and open the door for other things.  i wouldn't use it as an identity backned outside of testing00:54
morganfainberglifeless, but all testing will go through this new keyvaluestore since i want to remove the old one.00:54
lifelessmorganfainberg: the keystone->backend links will be encrypted, right?00:54
dstanekmorganfainberg: do the cache backends not deal with that?00:54
morganfainberglifeless, that is optional, but supported00:55
morganfainberglifeless, i plan on submitting this to oslo00:55
dstanekmorganfainberg: for instance in memcache the last op will win - no need to lock for each key00:55
*** sarob has joined #openstack-dev00:55
morganfainberglifeless, keystone -> backend encrypted (if the lib supports it) also supporitng the memcache_crypt stuff in auth_token middleware00:55
morganfainberglifeless, base implementation review: https://review.openstack.org/#/c/59126/00:56
morganfainbergdstanek, sure.  like i said i can remove the set/delete locking00:56
morganfainbergdstanek, we still need to be able to lock in some cases, so the locking context manager can't be fully removed.00:57
morganfainbergdstanek, i erred on the side of caution, i'm happy to remove the lcoking on set/delete if that makes more sense.00:57
morganfainbergdstanek, s/locking/passive-lock-for-all-actions00:57
*** teran has joined #openstack-dev00:57
dstanekmorganfainberg: i don't know if you should or not - i was just curious for now00:58
morganfainbergdstanek, yeah thats where I am.  I am looking for some input ;)00:58
*** nkinder has joined #openstack-dev00:58
*** danwent has quit IRC00:59
*** mrodden1 has joined #openstack-dev01:02
lifelessmorganfainberg: wow, big patch?01:02
morganfainberglifeless, there is a lot of functionality there.  it's pretty much just the core implementation. and one minor change to an option in the config to meet my needs (and be more correct)01:03
*** mrodden has quit IRC01:03
morganfainberglifeless, and about as comprehensive testing as I could think of to start.01:03
lifelessmorganfainberg: sure, just will be hard for whomever reviews it :)01:03
*** macjack has joined #openstack-dev01:03
morganfainberglifeless, i know. unfortunately, it's hard to distill it down much.01:03
*** schwicht has quit IRC01:04
*** dims has quit IRC01:04
morganfainberglifeless, it's why this is stand-alone not making any changes to the core of keystone to use it01:04
morganfainberglifeless, might be able to split the locking and memcache_crypt out, but that is likely only a couple hundred lines01:05
*** danwent has joined #openstack-dev01:05
morganfainberglifeless, I try and keep my patchsets to ~400-600 lines at most.01:05
ayoungmorganfainberg, yeo01:06
ayoungjamielennox, with you in a minute01:06
jamielennoxayoung: hmm?01:08
dstanekmorganfainberg: i'll probably need to go over it again :-)  lots to digest01:08
ayoungjamielennox, it is 20:00 localtime01:08
jamielennoxi have a pep8 error where it (wrongly) complains about only importing modules not objects: http://logs.openstack.org/02/59602/3/check/gate-keystone-pep8/77e5686/console.html01:09
jamielennoxis there a way i can tell it that i'm doing the right thing or do i have to resort to # noqa01:09
*** Sumeniac has quit IRC01:09
morganfainbergayoung, so.. https://github.com/openstack/keystone/blob/master/keystone/common/controller.py#L225 are we deleting tokens for the trustor?01:09
morganfainbergayoung, is that intended?01:09
*** Sumeniac has joined #openstack-dev01:09
ayoungmorganfainberg, I think so...I remember being convinced by someone that we needed to do that01:10
*** Abhishek has quit IRC01:10
morganfainbergayoung, well if thats the case, way easier to fix things.  just need to put the token in the right list and voila, it works01:11
morganfainbergayoung, no trust-specific-list required01:11
ayoungmorganfainberg, yes, if I delete all tokens for a user, that includes all tokens where they are the trustor...hmmmbut why?01:11
ekarlsosandywalsh_: how can I get stacktach going with devstack ?01:11
lifelessjamielennox: how did you go with/scenarios?01:11
*** sarob has quit IRC01:11
morganfainbergayoung, that is my question, it seems... odd to delete the tokens for trusts they are the trustor for01:11
lifelessjamielennox: you can whitelist imports in tox.ini01:11
*** unicell has joined #openstack-dev01:12
*** unicell has quit IRC01:12
*** unicell has joined #openstack-dev01:12
ayoungmorganfainberg, assuming it is for the case where you are shutting down a users accounts, and you would want to remove all outstanding tokens that have access to their stuff01:12
*** sarob has joined #openstack-dev01:12
ayoungIt makes sense if you sortof squint01:12
*** reed has quit IRC01:12
morganfainbergayoung, let me squint really hard here....01:12
jamielennoxlifeless: yep, they appear to be picking up and working fine, i think i could have found a better way to employ them that linking to fixtures with config options but it does work - thanks for that01:13
morganfainbergayoung, it means we have one less code-path ot maintain i guess.  it feels like a round-about way of getting there though01:13
jamielennoxlifeless: just means i can't run nosetests in that folder or it will fail on missing attributes01:13
morganfainbergayoung, whatever, it makes it easier to fix the issue in memcache token backend.  i can just stuff the token in the right place01:14
morganfainbergeasy fix.... 2 lines i think01:14
ayoungsounds good01:14
morganfainbergon-topic, since this relates to KVS. do you see a benefit to doing in-line locking on all sets/deletes in new-kvs?01:14
morganfainbergayoung, not the explicit locking, for example updating a user-token-list01:15
nkinderjamielennox: I updated the KDS api review.  There are a few areas that seem unclear or wrong.01:15
jamielennoxnkinder: ah hi, i looked for you earlier but disappeared01:15
nkinderjamielennox: yeah, was driving home from the office01:15
morganfainbergbut i built in an implicit lock on each set, and each delete (delete = get, then delete to raise NotFound like current impl does)01:15
*** mikeoutl_ has quit IRC01:16
morganfainbergand after talking to dstanek, i'm just not sure it makes sense to keep.01:16
jamielennoxnkinder: so much of it i picked up from trying to understand simo's initial implementation so i wouldn't be surprised that some of the wording is wrong01:16
ayoungmorganfainberg, probably.  I assume the alternative is that we might have multiple greenthreads accessing the same page?01:16
dstanekmorganfainberg: ah that's why there's a lock around the delete...for the NotFound01:16
*** sarob has quit IRC01:16
ayoungmorganfainberg, just make sure the locking does not tie up the greenthreads.01:17
jamielennoxnkinder: are those questions things you need me to answer or things that you want to fix up in the next version01:17
nkinderjamielennox: questions at this point01:18
morganfainbergdstanek, yes, but it's not _really_ needed.01:18
*** mfer has joined #openstack-dev01:18
nkinderjamielennox: the main thing that seems incorrect in the API is that we don't include the signing key in the encrypted bundle for the destination01:18
*** mfer has quit IRC01:18
*** dims has joined #openstack-dev01:19
morganfainbergayoung, i think the memcache lock would tie up the thread actually =/01:19
dstanekmorganfainberg: does the set() lock replace the cas behavior?01:19
*** mikeoutland has joined #openstack-dev01:19
jamielennoxnkinder: so much of this i picked up as i went along. my understanding of ekey and skey isn't signing key and i'm not sure why it was ever described that way - ekey is the encrypted key and signature is the sig of the key to validate the decryption01:19
morganfainbergdstanek, no, the .get_lock(<key>) does01:19
morganfainbergdstanek, with kvs.get_lock(key): <do stuff>01:19
ayoungmorganfainberg, maybe, but we want to make sure that reading, adding a value, and then writing are done atomically, at least until we get rid of the index pages .01:19
*** krotscheck has quit IRC01:19
jamielennoxnkinder: ah, hang on, i think i'm mixing up areas01:20
nkinderjamielennox: well, there is "signature" too.01:20
morganfainbergthe set lock just guarantees that once you start the operation, no other sets can change the value01:20
nkinderI'm talking about skey01:20
morganfainbergdstanek, ah, there we go.  that was why... so in the case of needing get/dosomething/set the value can't change at any-point during the operation01:20
morganfainbergayoung, correct.01:20
dstanekmorganfainberg: i'll have to look back, but i thought that as implemented the set would basically "queue" up and be executed in order01:20
morganfainbergdstanek, they would be, hrm01:21
nkinderjamielennox: "signature" is used to HMAC the response from KDS to the requestor01:21
jamielennoxnkinder: yep01:21
morganfainbergdstanek, i'm feeling like i'm being crazy somewhere in here01:21
jamielennoxnkinder: ok sorry - was thinking db and i'm looking at my impl and i think i say signature in a few places i mean skey01:21
morganfainbergdstanek, i think this can all be accomplished removing the implicit locking.01:22
morganfainbergdstanek, and only handle explicit lock scenarios01:22
*** singhs has quit IRC01:22
morganfainbergdstanek, and the delete scenario is ... limited race that doesn't have a huge impact.01:22
jamielennoxnkinder: so ekey and skey are extract from the "base" key (not sure of a better term) which is random01:22
nkinderjamielennox: so skey is in the ticket (encrypted for the source).  It's not encrypted in the payload for the destination though.01:23
jamielennoxwe take base key + "sender,destination,timestamp" to generate the ekey, skey01:23
jamielennoxthe idea was to be that by including only the base key in the destination the destination can recreate the ekey, skey for itself01:24
ekarlsosandywalsh_: I get a 500 when trying to browse my stacktach01:24
jamielennoxwhich has the side effect of validating that the same sender,destination,timestamp are sent to the destination01:24
jamielennoxso we don't transmit ekey, skey to the destination - just the information it needs to derive it for itself01:25
ekarlsosandywalsh_: http://pastebin.com/xPCcKGaK01:25
*** bswartz has joined #openstack-dev01:25
nkinderjamielennox: ok, so explain what "base key" is01:25
nkinderjamielennox: is it something that we expect the destination to know?01:26
jamielennoxso we're establishing "session" keys here a skey, ekey that can be used only between the two endpoints01:26
jamielennoxthe base key is essentially the seed01:26
morganfainbergdstanek, i'll pull out the implcit locking in the next review... it doesn't seem needed.01:26
*** nati_ueno has joined #openstack-dev01:26
morganfainbergs/review/changeset01:27
jamielennoxi've been calling it base key because in the impl we generate a new key for it01:27
nkinderjamielennox: is that the long term key from one of the services, or something else?01:27
*** tdruiva_ has quit IRC01:27
jamielennoxnkinder: no, it's new and random01:27
jamielennoxbut if you know the base key/seed you can predictably generate the ekey/skey01:28
nkinderjamielennox: generated by KDS?01:28
jamielennoxyes01:28
*** tdruiva has joined #openstack-dev01:28
*** teran_ has joined #openstack-dev01:28
nkinderjamielennox: so how does the destination service get knowledge of it?01:28
jamielennoxdata['esek']['key']01:29
*** teran has quit IRC01:29
*** rods1 has quit IRC01:30
jamielennoxso when the destination receives a message it will take generate the two keys from esek['key'] + "source,destination,timestamp" in the same way the KDS did to generate the keys originally01:30
nkinderjamielennox: ah, esek contains the base key, not ekey.01:31
jamielennoxso if you mess with the source, destination or timestamp the key will be invalid01:31
jamielennoxnkinder: right01:31
*** nati_ueno has quit IRC01:32
nkinderjamielennox: ok, so "key" in esek is the seed, and the destination needs to derive the other keys.01:32
*** praneshp_ has joined #openstack-dev01:32
nkinderjamielennox: all of the stuff the source and destination are responsible for is missing from the API doc01:32
*** nati_ueno has joined #openstack-dev01:32
*** noslzzp has joined #openstack-dev01:32
jamielennoxyes, i mentioned seed earlier but it's specified as key all over the place01:32
nkinderjamielennox: I'm filling that stuff in01:32
*** tdruiva has quit IRC01:32
nkinderjamielennox: A user of the API will need to know that they need to derive the keys, and they need to know how to do it.01:33
jamielennoxnkinder: so i tried not to re-write it too much from simo's original - i think i probably just should have01:33
*** nati_ueno has quit IRC01:33
*** nati_ueno has joined #openstack-dev01:33
nkinderjamielennox: so it's up to the source to send it's identity to the destination as well (in the exact form needed to perform the derive)01:34
jamielennoxnkinder: yes, and i still need to talk to simo a little to figure out what he expected to happen there01:34
nkinderjamielennox: KDS doesn't really define how that is done, but it needs to be handled for the derive to work.01:34
jamielennoxin my impl everything has a keyname:generation format and i'm not sure how that works with the messaging side of things yet01:35
nkinderjamielennox: the destination also needs to be supplied (at least in the group message case), as it's a group name.01:35
*** nosnos has joined #openstack-dev01:35
jamielennoxit should probably be supplied regardless01:36
*** nosnos_ has joined #openstack-dev01:37
jamielennoxs particularly with groups you change keys frequently so you end up with name:generation format01:37
nkinderjamielennox: I'm wondering it source/destination needs to be in the KDS encrypted payload for the destination01:38
jamielennoxi added the same thing with hosts, it made the impl simpler and i can see people purposefully updating host keys01:38
nkinders/it/if/01:38
jamielennoxnkinder: the point was to be that if it was outside then you could use that as an integrity check01:39
*** zhikunliu has joined #openstack-dev01:39
jamielennoxso source and destination (i think) are part of the message that you will be sending01:39
jamielennoxtimestamp is inside the esek01:39
nkinderjamielennox: yeah, it will just need to be supplied in the message somehow.01:39
jamielennoxnkinder: but what i haven't figured out yet is the key generations01:40
*** colinmcnamara has quit IRC01:40
*** colinmcn_ has quit IRC01:40
*** mikeoutland has quit IRC01:40
jamielennoxso we get a key name back like scheduler:501:40
nkinderjamielennox: That was my next question :)01:40
bknudsonjamielennox: that looks like it's breaking backwards compatibility01:40
*** nosnos has quit IRC01:40
bknudsonhttps://review.openstack.org/#/c/59687/2/keystoneclient/v2_0/shell.py01:40
jamielennoxbknudson: i would have thought so but dolphm has a +1 on it01:41
nkinderjamielennox: That's supposed to generate a long term key for a service, right?01:41
jamielennoxbknudson: just thought i'd check01:41
jamielennoxnkinder: which bit?01:42
bknudsona change like that will at least need a bug and docimpact, etc.01:42
*** macjack has quit IRC01:42
nkinderjamielennox: the "Set Key" request01:43
jamielennoxnkinder: so simo had some stuff done in the oslo messaging space (before it was a seperate library) but i don't know messaging more that a glance01:43
jamielennoxset_key is a long term key yes01:43
*** lbragstad has quit IRC01:44
*** jasdeepH has quit IRC01:44
*** epim has quit IRC01:44
nkinderjamielennox: ok, but the client is responsible for generation of a key?01:44
*** nermina has quit IRC01:45
jamielennoxi've mentally been splitting it into host keys and group keys01:45
jamielennoxclients generate a host key01:45
jamielennoxgroup keys must be fetched by group members01:45
nkinderjamielennox: The fact that we say "the default is a 128 bit random key" implies that KDS will generate a key if one is not supplied.01:45
nkinderjamielennox: yeah, I'm referring to host keys only right now01:45
jamielennoxnkinder: in a number of my earlier reviews i mentioned that some of that stuff was implementation specific and got overruled01:45
nkinderjamielennox: the host generating the key and sending it to KDS makes sense (both sides know the key).01:46
nkinderjamielennox: if KDS can generate a random key, the host needs some way of fetching it.01:46
jamielennoxnkinder: there is one there about nonce being a 64bit integer - this is python, the size and style of an accepted nonce is impl specific01:46
jamielennoxnkinder: we don't support fetching a host key - i can't see a good reason for that - if you've lost it generate a new one01:47
nkinderjamielennox: the API doc implies that generation can be done by KDS, but I can reword it so it's more clear.01:47
nkinderjamielennox: I agree that just having the host generate it seems best.01:47
jamielennoxnkinder: though this is part of the reason i put generations onto host keys so that it can distinguish between old and current keys01:47
nkinderjamielennox: so generations is just an integer that is incremented each time a new key is stored?01:48
nkinder..for that host01:48
balarHi Abishek, thanks for getting back, but it looks like netaddr is a python 3 module.01:48
jamielennoxnkinder: yes - the concept came from group keys where a group key is only valid for about 15minutes so you need to know which key a client is addressing with a message01:49
*** macjack has joined #openstack-dev01:49
balarSorry, looks like netaddr works with python 2.4 or above.01:49
*** mfer has joined #openstack-dev01:50
jamielennoxnkinder: simo had decided that it a host key change was infrequent enough that you didn't need to store generations, but it would make things easier to my mind to keep the two concepts as similar as possible01:50
nkinderjamielennox: ok, I'll add a description of it to the doc.01:50
*** jasdeepH has joined #openstack-dev01:51
*** Abhishek has joined #openstack-dev01:51
*** Ryan_Lane has joined #openstack-dev01:51
jamielennoxnkinder: so looking at the top of https://review.openstack.org/#/c/37913/11/openstack/common/rpc/common.py it would appear it is expected that the metadata will simply be converted back to json and put into the message01:54
jamielennoxnkinder: i'm not sure where esek was supposed to fit into that but that's pretty simple01:55
*** dstanek_afk has joined #openstack-dev01:55
*** Ryan_Lane has quit IRC01:56
nkinderjamielennox: I think that's good enough for me to finish my pass at it.01:57
nkinderjamielennox: the biggest unknown is how the source/dest should be transmitted, but I suppose we should just call that out.01:57
jamielennoxnkinder: great, thanks for doing this - it's been on my list for ages but honestly it was writing it that made me properly understand it rather than the identity-api or wiki page so i just haven't got back there01:58
jamielennoxso that link i put in a few lines ago is to the messaging code01:58
*** renlt has joined #openstack-dev01:59
jamielennoxthere is a new entry there for a signature and it has a metadata section01:59
*** claytonc has joined #openstack-dev01:59
jamielennoxwe would just need to have the source and dest in there seperately i think01:59
*** Abhishek has quit IRC02:00
jamielennoxwhat's missing from there though is the actual esek ticket, but i guess we could just put that in the message metadata02:01
*** vuil has quit IRC02:01
*** rongze has joined #openstack-dev02:01
*** rongze has quit IRC02:01
*** rongze has joined #openstack-dev02:02
dstanekbknudson: "NameError: name '_' is not defined" strikes again!02:02
dstanekbknudson: testtools.run doesn't like the magic02:02
*** buzztroll has joined #openstack-dev02:03
dstanekbknudson: running "python -m testtools.run discover keystone/tests -p '*test_versions*'" will fail02:04
*** bingbu has joined #openstack-dev02:04
*** twoputt_ has quit IRC02:06
*** twoputt__ has quit IRC02:06
*** buzztroll has quit IRC02:07
*** xarses has quit IRC02:09
*** tanisdl has quit IRC02:14
*** danwent has quit IRC02:15
*** Abhishek has joined #openstack-dev02:17
*** ruhe has joined #openstack-dev02:18
*** dims has quit IRC02:23
*** fungi has quit IRC02:24
*** mkollaro has quit IRC02:25
*** xjiujiu has joined #openstack-dev02:26
*** fungi has joined #openstack-dev02:26
*** guohliu has joined #openstack-dev02:27
*** kbrierly has quit IRC02:28
*** alop has quit IRC02:29
*** angdraug has quit IRC02:29
*** pixelb has quit IRC02:30
*** colinmcnamara has joined #openstack-dev02:31
*** colinmcn_ has joined #openstack-dev02:31
*** rwsu has quit IRC02:35
*** stevemar has joined #openstack-dev02:38
*** rwsu has joined #openstack-dev02:39
*** Shaan7 has quit IRC02:41
*** radsy has quit IRC02:43
*** radsy has joined #openstack-dev02:45
*** marun has joined #openstack-dev02:46
*** erkules_ has joined #openstack-dev02:49
*** erkules has quit IRC02:49
*** MarkAtwood has quit IRC02:49
*** Ryan_Lane has joined #openstack-dev02:51
*** Abhishek has quit IRC02:52
*** Mandell has quit IRC02:53
*** gongysh has joined #openstack-dev02:53
stevemarayoung: thanks for the latest patch of mapping rules02:54
*** Ryan_Lane has quit IRC02:55
*** galstrom_zzz is now known as galstrom02:55
*** neelashah has joined #openstack-dev02:56
*** jaypipes has quit IRC02:57
*** ruhe has quit IRC03:01
*** basha has joined #openstack-dev03:03
*** nermina has joined #openstack-dev03:04
*** basha has quit IRC03:07
ayoungstevemar, see where I am going with it?03:14
stevemarayoung, aye, you wanted the sets in there03:14
*** teran has joined #openstack-dev03:14
stevemarso an idp can use multiple mappings?03:14
ayoungstevemar, they were in the origianal plan from CHadwick and company03:14
ayoungI think so03:15
ayoungI suspect that there are going to be reusable pieces in there.03:15
*** galstrom is now known as galstrom_zzz03:15
*** vipul has quit IRC03:15
stevemarbut what if there are conflicting rules?03:15
*** ArminderS has joined #openstack-dev03:16
*** vipul has joined #openstack-dev03:16
stevemarayoung ^03:16
*** radsy has quit IRC03:16
ayoungstevemar, then the IdP is going to be broken.  THat is going to happen from time to time anyway03:16
*** shadower_ has joined #openstack-dev03:16
*** aveiga has joined #openstack-dev03:17
ayoungWe can specify order of evaluation03:17
ayoungsomething like "stop at first match"03:17
*** soren has quit IRC03:17
ayoungand then the rule sets become ordered sets03:17
*** jvrbanac has quit IRC03:17
*** teran_ has quit IRC03:17
*** cdub has quit IRC03:17
*** negronjl has quit IRC03:17
*** shadower has quit IRC03:17
*** bgmccollum has quit IRC03:17
*** rainya has quit IRC03:17
*** AndreyGrebenniko has quit IRC03:17
*** ArminderS- has quit IRC03:17
*** adam_g has quit IRC03:17
*** rgoodwin has quit IRC03:17
*** adepti37 has quit IRC03:17
*** antonym has quit IRC03:18
stevemarayoung: specify that at the set level i guess?03:18
*** AndreyGrebenniko has joined #openstack-dev03:19
*** adepti37 has joined #openstack-dev03:19
*** harlowja has quit IRC03:19
*** rainya has joined #openstack-dev03:19
*** rgoodwin has joined #openstack-dev03:19
*** phschwartz has quit IRC03:19
*** jvrbanac has joined #openstack-dev03:19
*** Shrews has quit IRC03:19
*** VeggieMeat has quit IRC03:19
ayoungstevemar, if I am wrong and crazy here, let me know...I am just trying to understand what this is supposed to look like03:19
*** VeggieMeat has joined #openstack-dev03:19
*** bgmccollum has joined #openstack-dev03:19
*** pvo has quit IRC03:19
*** Shrews has joined #openstack-dev03:19
*** alop has joined #openstack-dev03:19
stevemarayoung: i hear ya, i think it makes sense, i'm interested to see what marekd and dolphm say (and the kent folks)03:20
ayoungstevemar, was your thought that a single mapping would contain all of the rules for a single IdP?03:20
*** antonym has joined #openstack-dev03:20
ayoungstore and change atomically?03:21
stevemarayoung: yeah, i figured one mapping would suffice per idp03:21
stevemarbut, this way is more flexible03:21
ayoungstevemar, that might be sufficient.  I can be talked out of what I wrote.03:21
*** phschwartz has joined #openstack-dev03:22
ayoungLets sleep on it....I might be going too far03:22
stevemari understand what you're getting at, and tbh i'm not sure of the right answer, yeah - good call :)03:22
*** pvo has joined #openstack-dev03:22
ayoungThere is something very right about "I have the rules all written and bug free, let me upload them all together"03:23
*** negronjl has joined #openstack-dev03:23
ayoungBut then there is the "let me tweak them to get them right"03:23
stevemarand the re-usable factor of it03:23
ayoungthe question is whether there really is any call for sharing, or for tweaking on the server in place03:23
*** soren has joined #openstack-dev03:23
*** neelashah1 has joined #openstack-dev03:23
*** neelashah has quit IRC03:23
*** cdub has joined #openstack-dev03:24
stevemarsay idp 1 and 2 both want assertion rules A, B and C, but 1 wants D and 2 wants E03:24
stevemarayoung, i could see universities doing something like that (if my example is right)03:24
*** buzztroll has joined #openstack-dev03:26
*** galstrom_zzz is now known as galstrom03:26
ayoungstevemar, yeah...but does it really make sense.  There is no real cost in duplicating the same rule in multiple mappings.  I think I am going to reverse myself on the sets thing...but tomorrow, not today03:26
stevemarhehe03:26
stevemarayoung: think it over, let others weigh in03:26
ayoungstevemar, right now I am trying to build  Qt3 app on Fedora 19...in order to play an EWI.  I should be in bed right now03:27
*** troytoman-away has quit IRC03:28
stevemarayoung - EWI (n.) - An acronym for Atomic Wind Instrument ?03:28
*** troytoman-away has joined #openstack-dev03:28
*** troytoman-away is now known as troytoman03:28
ayoungAtomic?  Not the way I play03:29
stevemarbut something music related?03:29
*** mfer has quit IRC03:29
*** praneshp_ is now known as praneshp03:31
stevemarat least it's not something work related ;)03:31
ayoungNot work.  It is an Electronic Wind Instrument, and I got it working on my Wife's windows machine, now to get something for Linux03:32
*** paragan has joined #openstack-dev03:33
*** rcleere has joined #openstack-dev03:34
*** gyee has quit IRC03:35
*** sgordon has quit IRC03:35
*** claytonc has quit IRC03:35
*** rraja has joined #openstack-dev03:39
*** pixelb has joined #openstack-dev03:40
*** matiu has joined #openstack-dev03:45
*** matiu has quit IRC03:45
*** matiu has joined #openstack-dev03:45
*** loq_mac has joined #openstack-dev03:45
ayoungstevemar, good thing I know Linux.03:47
*** galstrom is now known as galstrom_zzz03:50
*** Ryan_Lane has joined #openstack-dev03:51
*** buzztroll has quit IRC03:52
*** morazi has quit IRC03:53
*** galstrom_zzz is now known as galstrom03:54
*** amotoki has joined #openstack-dev03:55
*** aveiga has quit IRC03:55
*** Ryan_Lane has quit IRC03:56
*** JordanRinke has quit IRC03:56
*** buzztroll has joined #openstack-dev03:56
*** sumanth has joined #openstack-dev03:57
*** galstrom is now known as galstrom_zzz04:02
*** lbragstad has joined #openstack-dev04:03
*** rbrady has quit IRC04:04
*** sergmelikyan has quit IRC04:04
marunIs there an amqp expert here that can school me04:05
marun?04:05
*** herndon_ has quit IRC04:06
*** nati_ueno has quit IRC04:08
*** JordanRinke has joined #openstack-dev04:12
*** CaptTofu has quit IRC04:15
*** danwent has joined #openstack-dev04:15
*** CaptTofu has joined #openstack-dev04:16
*** aditirav has joined #openstack-dev04:16
*** rraja has quit IRC04:19
*** epopt37 has quit IRC04:21
*** basha has joined #openstack-dev04:22
*** netavenger-jr has joined #openstack-dev04:26
*** mikeoutland has joined #openstack-dev04:26
*** shinylasers has quit IRC04:26
*** xarses has joined #openstack-dev04:31
*** aditirav_ has joined #openstack-dev04:31
*** prad has quit IRC04:33
*** rbrady has joined #openstack-dev04:34
*** Mandell has joined #openstack-dev04:34
*** epopt37 has joined #openstack-dev04:34
*** aditirav has quit IRC04:34
*** gongysh has quit IRC04:35
*** mikeoutland has quit IRC04:35
*** aditirav_ has quit IRC04:35
*** chandankumar has joined #openstack-dev04:36
*** loq_mac has quit IRC04:37
*** nosnos has joined #openstack-dev04:38
*** jp_at_hp has quit IRC04:39
*** nosnos_ has quit IRC04:42
*** rongze has quit IRC04:45
*** StevenK has joined #openstack-dev04:46
*** kushal has joined #openstack-dev04:48
*** Ryan_Lane has joined #openstack-dev04:51
*** noslzzp has quit IRC04:51
*** Ryan_Lane has quit IRC04:56
*** rushiagr has joined #openstack-dev04:56
*** SergeyLukjanov has joined #openstack-dev04:56
*** SergeyLukjanov is now known as _SergeyLukjanov04:57
*** _SergeyLukjanov is now known as SergeyLukjanov04:57
*** achampion has joined #openstack-dev05:01
*** prekarat has quit IRC05:01
*** aeperezt has quit IRC05:02
*** guohliu has quit IRC05:03
*** rcleere has quit IRC05:05
*** pixelb has quit IRC05:05
*** venkatesh has joined #openstack-dev05:11
*** SumitNaiksatam has joined #openstack-dev05:12
SpamapShow can I run just one unit test in keystone?05:14
*** Q310 has joined #openstack-dev05:15
*** ngoracke1 has joined #openstack-dev05:15
*** danwent_ has joined #openstack-dev05:15
*** mrodden has joined #openstack-dev05:15
*** sumanthns has joined #openstack-dev05:15
*** rbrady has quit IRC05:15
*** Leto2 has joined #openstack-dev05:16
*** rongze has joined #openstack-dev05:16
clarkbtox -epy27 testname05:16
clarkbit is testr now iirc05:16
SpamapSit is, but that does not run any tests05:16
SpamapSn/m05:16
SpamapSwrong test name05:16
*** KurtMartin has joined #openstack-dev05:16
*** negronjl_ has joined #openstack-dev05:17
*** yjiang5_1 has joined #openstack-dev05:17
*** guitarza1 has joined #openstack-dev05:17
*** SumitNaiksatam_ has joined #openstack-dev05:17
*** amir1 has joined #openstack-dev05:17
*** VeggieMeat_ has joined #openstack-dev05:17
*** dcahill1 has joined #openstack-dev05:17
*** Mandell_ has joined #openstack-dev05:18
*** neoXsys has quit IRC05:18
*** neoXsys has joined #openstack-dev05:18
*** heavystorm_ has joined #openstack-dev05:19
*** tristanC_ has joined #openstack-dev05:19
*** termie_ has joined #openstack-dev05:19
*** paulprot1us has joined #openstack-dev05:19
*** rainya has quit IRC05:20
*** danwent has quit IRC05:20
*** negronjl has quit IRC05:20
*** danwent_ is now known as danwent05:20
*** jvrbanac has quit IRC05:20
*** ngoracke has quit IRC05:20
*** mnaser has quit IRC05:20
*** LinuxJedi_ has joined #openstack-dev05:20
*** praneshp__ has joined #openstack-dev05:21
*** WhiteAnt- has joined #openstack-dev05:21
*** michchap_ has joined #openstack-dev05:21
*** marun has quit IRC05:22
*** mrodden1 has quit IRC05:22
*** Qu310 has quit IRC05:22
*** heavystorm has quit IRC05:22
*** dcahill has quit IRC05:22
*** guitarzan has quit IRC05:22
*** asadoughi has quit IRC05:22
*** VeggieMeat has quit IRC05:22
*** LetoH_ has quit IRC05:22
*** kmartin has quit IRC05:22
*** rch has quit IRC05:22
*** venkatesh_ has joined #openstack-dev05:22
*** jayg|g0n3 has quit IRC05:22
*** stevebaker has quit IRC05:22
*** sandywalsh_ has quit IRC05:22
*** matrohon has quit IRC05:22
*** termie has quit IRC05:22
*** tristanC has quit IRC05:22
*** paulproteus|mobi has quit IRC05:22
*** bigmstone has quit IRC05:22
*** yjiang5 has quit IRC05:22
*** venkatesh has quit IRC05:22
*** rch1 has joined #openstack-dev05:22
*** troytoman has quit IRC05:22
*** WhiteAnthrax has quit IRC05:22
*** decede has quit IRC05:22
*** WhiteAnt- is now known as WhiteAnthrax05:22
*** SumitNaiksatam has quit IRC05:22
*** Mandell has quit IRC05:22
*** bgmccollum has quit IRC05:22
*** rgoodwin has quit IRC05:22
*** praneshp has quit IRC05:22
*** SumitNaiksatam_ is now known as SumitNaiksatam05:22
*** michchap has quit IRC05:22
*** mikemar10_ has quit IRC05:22
*** LinuxJedi has quit IRC05:22
*** phschwartz has quit IRC05:22
*** kpepple has quit IRC05:22
*** ttx has quit IRC05:22
*** pvo has quit IRC05:22
*** dcmorton has quit IRC05:22
*** bgmccollum has joined #openstack-dev05:22
*** kpepple has joined #openstack-dev05:22
*** phschwartz has joined #openstack-dev05:22
*** troytoman has joined #openstack-dev05:22
*** antonym has quit IRC05:22
*** ttx has joined #openstack-dev05:22
*** mikemar10 has joined #openstack-dev05:22
*** jvrbanac has joined #openstack-dev05:22
*** rainya has joined #openstack-dev05:22
*** bigmstone has joined #openstack-dev05:22
*** dcmorton has joined #openstack-dev05:22
*** stevebaker has joined #openstack-dev05:22
*** marun has joined #openstack-dev05:22
*** pvo has joined #openstack-dev05:22
*** ttx has quit IRC05:22
*** ttx has joined #openstack-dev05:22
*** rgoodwin has joined #openstack-dev05:22
*** jasdeepH has quit IRC05:23
*** jayg|g0n3 has joined #openstack-dev05:23
*** matrohon has joined #openstack-dev05:23
*** decede has joined #openstack-dev05:23
*** tris has quit IRC05:26
*** mnaser has joined #openstack-dev05:26
*** mikeoutland has joined #openstack-dev05:27
*** rongze has quit IRC05:28
*** amotoki has quit IRC05:30
*** kushal has quit IRC05:30
*** aditirav has joined #openstack-dev05:30
*** kushal has joined #openstack-dev05:30
*** sandywalsh_ has joined #openstack-dev05:30
*** vartom11119 has joined #openstack-dev05:33
*** macjack has quit IRC05:35
*** alex_klimov has joined #openstack-dev05:36
*** macjack has joined #openstack-dev05:36
*** buzztroll has quit IRC05:37
*** buzztroll has joined #openstack-dev05:37
*** vartom11119 has quit IRC05:40
*** sthaha has quit IRC05:45
*** sthaha has joined #openstack-dev05:45
*** sthaha has joined #openstack-dev05:45
*** simo has joined #openstack-dev05:46
*** simo has joined #openstack-dev05:46
*** lbragstad has quit IRC05:47
*** Chicago has joined #openstack-dev05:47
*** basha has quit IRC05:48
*** nshaikh has joined #openstack-dev05:49
*** colinmcnamara has quit IRC05:49
*** colinmcn_ has quit IRC05:49
*** rraja has joined #openstack-dev05:50
*** aditirav_ has joined #openstack-dev05:52
*** aditirav has quit IRC05:52
*** aditirav_ is now known as aditirav05:52
*** aditirav has quit IRC05:54
*** basha has joined #openstack-dev05:55
*** aditirav has joined #openstack-dev05:55
*** rdas has joined #openstack-dev05:55
*** neelashah1 has quit IRC05:57
*** dstanek has quit IRC05:57
*** rongze has joined #openstack-dev05:58
*** alop has quit IRC05:59
*** dstanek has joined #openstack-dev06:00
*** danwent has quit IRC06:02
*** neeti has joined #openstack-dev06:04
*** SergeyLukjanov has quit IRC06:04
*** gongysh has joined #openstack-dev06:05
*** SergeyLukjanov has joined #openstack-dev06:05
*** vuil has joined #openstack-dev06:05
*** shinylasers has joined #openstack-dev06:05
*** SergeyLukjanov has quit IRC06:07
*** buzztroll has quit IRC06:14
*** buzztroll has joined #openstack-dev06:16
*** alex_klimov has quit IRC06:18
*** alex_klimov has joined #openstack-dev06:18
*** alex_klimov1 has joined #openstack-dev06:19
*** buzztroll has quit IRC06:20
*** dstanek has quit IRC06:20
*** amcrn has quit IRC06:21
*** ngoracke1 has quit IRC06:22
*** alex_klimov has quit IRC06:23
*** xqueralt has joined #openstack-dev06:23
*** JordanRinke has quit IRC06:23
*** fbo_away is now known as fbo06:26
*** fifieldt_ has quit IRC06:27
*** rongze has quit IRC06:30
*** rongze has joined #openstack-dev06:30
*** xqueralt has quit IRC06:34
*** nosnos has quit IRC06:34
*** nosnos has joined #openstack-dev06:35
*** YorikSar has joined #openstack-dev06:36
*** rraja has quit IRC06:36
*** aditirav_ has joined #openstack-dev06:36
*** prekarat has joined #openstack-dev06:37
*** aditirav has quit IRC06:39
*** aditirav_ is now known as aditirav06:39
*** rohitk has joined #openstack-dev06:39
*** aditirav has joined #openstack-dev06:40
*** aditirav_ has joined #openstack-dev06:41
*** jcooley_ has joined #openstack-dev06:41
*** sarob has joined #openstack-dev06:42
*** aditirav_ has quit IRC06:44
*** aditirav has quit IRC06:44
*** benonsoftware has quit IRC06:45
*** aditirav has joined #openstack-dev06:45
*** sushils has quit IRC06:46
*** mrunge has joined #openstack-dev06:47
*** ArcTanSusan has joined #openstack-dev06:48
*** rraja has joined #openstack-dev06:49
*** gmurphy_ has quit IRC06:49
*** ArcTanSusan has quit IRC06:49
*** fbo is now known as fbo_away06:50
*** che-arne_ has quit IRC06:51
*** jcooley_ has quit IRC06:51
*** boris-42 has joined #openstack-dev06:51
*** Ryan_Lane has joined #openstack-dev06:51
*** nati_ueno has joined #openstack-dev06:52
*** SergeyLukjanov has joined #openstack-dev06:56
*** Ryan_Lane has quit IRC06:56
*** ArcTanSusan has joined #openstack-dev06:56
*** bashok has joined #openstack-dev06:56
*** marun has quit IRC06:57
*** DinaBelova has joined #openstack-dev06:57
*** denis_makogon has joined #openstack-dev06:58
*** yolanda has joined #openstack-dev06:58
*** YorikSar has quit IRC07:01
*** YorikSar has joined #openstack-dev07:03
*** novas0x2a|laptop has quit IRC07:04
*** nosnos_ has joined #openstack-dev07:05
*** eglynn-on-a-call has joined #openstack-dev07:05
*** guohliu has joined #openstack-dev07:06
*** nosnos has quit IRC07:08
*** nati_ueno has quit IRC07:10
*** eglynn-on-a-call has quit IRC07:11
*** lbragstad has joined #openstack-dev07:14
*** belmoreira has joined #openstack-dev07:15
*** antonym has joined #openstack-dev07:17
*** lbragstad has quit IRC07:18
*** rraja has quit IRC07:21
*** avishay has joined #openstack-dev07:24
*** rwsu has quit IRC07:24
*** kushal has quit IRC07:24
*** sarob has quit IRC07:25
*** sarob has joined #openstack-dev07:25
*** lsmola has joined #openstack-dev07:26
*** vartom11119 has joined #openstack-dev07:26
*** buzztroll has joined #openstack-dev07:27
*** venkatesh_ has quit IRC07:27
*** evgenyf has joined #openstack-dev07:28
*** eglynn-on-a-call has joined #openstack-dev07:28
*** yongli has quit IRC07:28
*** urulama has joined #openstack-dev07:28
*** kushal has joined #openstack-dev07:29
*** sarob has quit IRC07:30
*** jtomasek has joined #openstack-dev07:30
*** buzztroll has quit IRC07:31
*** stevemar has quit IRC07:32
*** kdas__ has joined #openstack-dev07:32
*** amotoki has joined #openstack-dev07:33
*** jtomasek has quit IRC07:34
*** dsantos_ has quit IRC07:35
*** kushal has quit IRC07:35
*** BLZbubba has quit IRC07:36
*** BLZbubba has joined #openstack-dev07:37
*** urulama_ has joined #openstack-dev07:37
*** vuil has quit IRC07:37
*** jtomasek has joined #openstack-dev07:37
*** xqueralt has joined #openstack-dev07:38
*** urulama has quit IRC07:40
*** dsantos_ has joined #openstack-dev07:42
*** sushils has joined #openstack-dev07:47
*** SergeyLukjanov has quit IRC07:48
*** rwsu has joined #openstack-dev07:48
*** Mandell_ has quit IRC07:51
*** marekd|away is now known as marekd07:51
*** Ryan_Lane has joined #openstack-dev07:51
*** cederb02 has joined #openstack-dev07:52
*** basha has quit IRC07:54
*** neoXsys has quit IRC07:55
*** jprovazn has joined #openstack-dev07:55
*** afazekas has quit IRC07:55
*** Ryan_Lane has quit IRC07:55
*** sarob has joined #openstack-dev07:56
*** gmurphy_ has joined #openstack-dev07:58
*** arborism has joined #openstack-dev07:58
*** flaper87|afk is now known as flaper8707:59
*** arborism is now known as amcrn08:00
*** cederb02 has quit IRC08:01
*** erkules_ is now known as erkules08:02
*** reidrac has joined #openstack-dev08:03
*** dsantos_ has quit IRC08:04
*** amuller has joined #openstack-dev08:04
*** YorikSar has quit IRC08:05
*** YorikSar has joined #openstack-dev08:05
*** gargya has joined #openstack-dev08:06
*** bknudson has quit IRC08:07
*** avishayb has joined #openstack-dev08:08
*** mmagr has joined #openstack-dev08:08
*** bauzas has joined #openstack-dev08:08
*** marun has joined #openstack-dev08:09
*** neoXsys has joined #openstack-dev08:10
*** dsantos_ has joined #openstack-dev08:12
*** yeylon__ has joined #openstack-dev08:12
*** cederb02 has joined #openstack-dev08:12
*** bknudson has joined #openstack-dev08:14
*** ndipanov has joined #openstack-dev08:15
*** zbitter has quit IRC08:15
*** cederb02 has quit IRC08:16
*** dsantos_ has quit IRC08:16
*** Nikolay_St has quit IRC08:17
*** mirrorbox has quit IRC08:17
*** Nikolay_St has joined #openstack-dev08:17
*** mirrorbox has joined #openstack-dev08:17
*** guohliu has quit IRC08:17
*** sarob has quit IRC08:18
*** jistr has joined #openstack-dev08:18
*** nosnos_ has quit IRC08:19
*** nosnos has joined #openstack-dev08:19
*** mindpixel has joined #openstack-dev08:19
*** tkammer has joined #openstack-dev08:20
*** metabro has quit IRC08:20
*** devvesa has joined #openstack-dev08:21
*** GheRivero has quit IRC08:22
*** metabro has joined #openstack-dev08:22
*** tkammer has quit IRC08:25
*** tkammer has joined #openstack-dev08:25
*** martyntaylor has joined #openstack-dev08:28
*** Ryan_Lane has joined #openstack-dev08:29
*** nshaikh has left #openstack-dev08:29
*** markwash has quit IRC08:29
*** dsantos_ has joined #openstack-dev08:33
*** e0ne has joined #openstack-dev08:33
*** markmcclain has joined #openstack-dev08:33
*** rdas has quit IRC08:34
*** YorikSar has quit IRC08:35
*** matsuhashi has quit IRC08:35
*** rgerganov has joined #openstack-dev08:35
*** ygbo has joined #openstack-dev08:36
*** matsuhashi has joined #openstack-dev08:36
*** rdas has joined #openstack-dev08:37
*** neeti_ has joined #openstack-dev08:37
*** YorikSar has joined #openstack-dev08:37
*** SergeyLukjanov has joined #openstack-dev08:38
*** neeti has quit IRC08:38
*** amcrn has quit IRC08:39
*** venkatesh has joined #openstack-dev08:39
*** netavenger-jr has quit IRC08:39
*** arborism has joined #openstack-dev08:40
*** boris-42 has quit IRC08:40
*** omachace has joined #openstack-dev08:40
*** denis_makogon has quit IRC08:41
*** moted has quit IRC08:41
*** Alexei_987 has joined #openstack-dev08:41
*** moted has joined #openstack-dev08:42
*** SumitNaiksatam has quit IRC08:42
*** SumitNaiksatam has joined #openstack-dev08:42
*** sileht has quit IRC08:43
*** krypto has joined #openstack-dev08:43
*** e0ne has quit IRC08:43
*** dsantos_ has quit IRC08:43
*** sandywalsh_ has quit IRC08:44
*** READ10 has quit IRC08:44
*** JordanP has joined #openstack-dev08:44
*** BLZbubba has quit IRC08:44
*** BLZbubba has joined #openstack-dev08:45
*** martyntaylor has quit IRC08:46
*** ArcTanSusan has quit IRC08:47
*** READ10 has joined #openstack-dev08:47
*** sileht has joined #openstack-dev08:47
*** SergeyLukjanov has quit IRC08:49
*** mindpixel has quit IRC08:49
*** nshaikh has joined #openstack-dev08:49
rgerganovI am using devstack and I want to clean my database08:49
rgerganovI tried clean.sh but it also remove packages from the system08:50
rgerganovhow can I clean the DB without uninstalling anything?08:50
*** claxton has joined #openstack-dev08:55
*** kdas__ has quit IRC08:56
*** sandywalsh_ has joined #openstack-dev08:57
*** e0ne has joined #openstack-dev08:58
*** rraja has joined #openstack-dev08:58
*** jcoufal has joined #openstack-dev08:58
*** mindpixel has joined #openstack-dev09:00
*** martyntaylor has joined #openstack-dev09:00
*** sthaha has quit IRC09:01
*** sthaha has joined #openstack-dev09:01
*** boden has joined #openstack-dev09:02
*** athomas has joined #openstack-dev09:02
*** kushal has joined #openstack-dev09:02
*** hashfail has joined #openstack-dev09:04
*** hemna_ has joined #openstack-dev09:05
*** mehdi_ has joined #openstack-dev09:05
*** mehdi has quit IRC09:05
*** mehdi_ is now known as mehdi09:05
*** mkoderer_ has joined #openstack-dev09:05
*** zigo has joined #openstack-dev09:05
*** venkatesh has quit IRC09:05
*** branen__ has joined #openstack-dev09:05
*** mindpixel has quit IRC09:06
*** llu_linux has joined #openstack-dev09:06
*** jruzz has joined #openstack-dev09:07
*** gsilvis_ has joined #openstack-dev09:07
*** primemin1sterp has joined #openstack-dev09:07
*** retr0h_ has joined #openstack-dev09:07
*** comstud_ has joined #openstack-dev09:07
*** lon_T2 has joined #openstack-dev09:08
*** amotoki has quit IRC09:08
*** Thor^^ has joined #openstack-dev09:08
*** Anticime1 has joined #openstack-dev09:08
*** jpich has joined #openstack-dev09:08
*** fesp has joined #openstack-dev09:09
*** swaT30_ has joined #openstack-dev09:09
*** metral_ has joined #openstack-dev09:10
*** sgordon`` has joined #openstack-dev09:10
*** sahid has joined #openstack-dev09:10
*** corXi has joined #openstack-dev09:10
*** CJM has joined #openstack-dev09:11
*** anderstj_ has joined #openstack-dev09:11
*** belliott_ has joined #openstack-dev09:11
*** edleafe has joined #openstack-dev09:11
*** CJM is now known as Guest8742709:11
*** SlickN1k has joined #openstack-dev09:11
*** gongysh has quit IRC09:12
*** sgordon` has quit IRC09:12
*** lon has quit IRC09:12
*** retr0h has quit IRC09:12
*** hemnafk has quit IRC09:12
*** branen_ has quit IRC09:12
*** CrackerJackMack has quit IRC09:12
*** zigo_ has quit IRC09:12
*** edleafe- has quit IRC09:12
*** swaT30 has quit IRC09:12
*** anderstj has quit IRC09:12
*** primeministerp has quit IRC09:12
*** jruzz_ has quit IRC09:12
*** Thor has quit IRC09:12
*** llu has quit IRC09:12
*** gimps has quit IRC09:12
*** mattymo has quit IRC09:12
*** mkoderer has quit IRC09:12
*** gsilvis has quit IRC09:12
*** Artpicre has quit IRC09:12
*** flaper87 has quit IRC09:12
*** clarkb has quit IRC09:12
*** Anticimex has quit IRC09:12
*** belliott has quit IRC09:12
*** comstud has quit IRC09:12
*** metral has quit IRC09:12
*** SlickNik has quit IRC09:12
*** che-arne has joined #openstack-dev09:12
*** fesp is now known as flaper8709:12
*** belliott_ is now known as belliott09:12
*** SlickN1k is now known as SlickNik09:12
*** anderstj_ is now known as anderstj09:12
*** metral_ is now known as metral09:12
devvesaregerganov: never tried before... but according to what i see in the code, if you delete de database and execute 'source lib/database' it might work09:12
*** mkoderer_ is now known as mkoderer09:12
*** markmcclain has quit IRC09:13
*** Artpicre has joined #openstack-dev09:13
*** flaper87 has quit IRC09:13
*** flaper87 has joined #openstack-dev09:13
*** teran has quit IRC09:14
*** giulivo has joined #openstack-dev09:15
*** derekh has joined #openstack-dev09:15
*** stannie has joined #openstack-dev09:15
*** basha has joined #openstack-dev09:15
*** yongli has joined #openstack-dev09:17
*** sarob has joined #openstack-dev09:17
*** READ10 has quit IRC09:17
rgerganovdevvesa, thanks, I guess I need to get better understanding of what these script do09:18
*** gargya has quit IRC09:18
*** kushal has quit IRC09:18
*** clarkb has joined #openstack-dev09:19
*** READ10 has joined #openstack-dev09:20
*** SergeyLukjanov has joined #openstack-dev09:22
*** dsantos_ has joined #openstack-dev09:23
*** max_lobur_afk is now known as max_lobur09:24
*** kushal has joined #openstack-dev09:25
devvesargerganov: sure, and take into account that maybe the unstack script it also clean more stuff like network namespaces or rabbit queues... i dunno09:27
devvesargerganov: and next ./stack execution can give you problems because of that09:27
*** dsantos_ has quit IRC09:28
*** k4n0 has joined #openstack-dev09:29
*** nshaikh has left #openstack-dev09:29
*** neeti_ has quit IRC09:29
*** nshaikh has joined #openstack-dev09:29
*** rossella_s has joined #openstack-dev09:29
*** neeti has joined #openstack-dev09:30
*** yassine has joined #openstack-dev09:30
*** zaneb has joined #openstack-dev09:31
*** rdas has quit IRC09:31
*** lucasagomes has joined #openstack-dev09:31
*** sarob has quit IRC09:31
k4n0hey, anyone know whats wrong jenkins? python gates failing09:31
*** romcheg has quit IRC09:32
*** dsantos_ has joined #openstack-dev09:32
ttxjd__: ping09:32
jd__ttx: pong09:32
ttxjd__: should I defer the last bp/bugs and cut the branch for i1 ?09:33
ttxor you could use a couple more hours there ?09:33
*** salv-orlando has joined #openstack-dev09:33
jd__ttx: I'd take a couple of hours to be able to see what's remaining09:34
jd__I didn't yet this morning09:34
*** corXi has quit IRC09:34
ttxok, will ping you back when I arrive near Paris09:34
jd__ack, have a nice trip09:34
toabctlhow can I run the tests for keystone locally? I tried "tox -epep8" and got no pep8 error but on jenkins, there's a pep8 error09:35
*** renlt has quit IRC09:35
*** afazekas has joined #openstack-dev09:36
*** rraja has quit IRC09:38
*** bingbu has quit IRC09:40
k4n0toabctl: tried "run_tests.sh -p "?09:40
k4n0toabctl: actually this "run_tests.sh -V -u -p"09:41
*** JordanRinke has joined #openstack-dev09:41
k4n0uses venv, updates venv09:41
toabctlk4n0: the script tells me that it's deprecated and I should use tox...09:41
*** markmc has joined #openstack-dev09:42
*** jtomasek has quit IRC09:43
*** jtomasek has joined #openstack-dev09:43
*** mdbooth has joined #openstack-dev09:44
k4n0toabctl: what version of tox are you using?09:44
*** boris-42 has joined #openstack-dev09:46
*** akrivoka has joined #openstack-dev09:47
*** gszasz has joined #openstack-dev09:49
*** colinmcnamara has joined #openstack-dev09:50
*** colinmcn_ has joined #openstack-dev09:50
*** danpb has joined #openstack-dev09:50
*** exed has joined #openstack-dev09:51
*** eglynn-on-a-call is now known as eglynn09:51
*** mattymo has joined #openstack-dev09:52
*** nermina has quit IRC09:54
*** colinmcn_ has quit IRC09:54
*** colinmcnamara has quit IRC09:54
*** rraja has joined #openstack-dev09:55
*** yaguang has joined #openstack-dev09:56
*** sarob has joined #openstack-dev09:56
toabctlk4n0: tox-1.6.009:57
k4n0keystone pep8 gate uses tox 1.6.109:58
k4n0toabctl: try tox 1.6.1 , also see if this helps http://logs.openstack.org/26/59826/1/check/gate-keystone-pep8/85e6776/console.html , logs for latest review that passed keystone pep8 gate09:59
*** salv-orlando_ has joined #openstack-dev10:01
*** iartarisi has joined #openstack-dev10:02
*** YorikSar has quit IRC10:02
*** YorikSar has joined #openstack-dev10:02
*** nosnos_ has joined #openstack-dev10:03
*** salv-orlando has quit IRC10:03
*** salv-orlando_ is now known as salv-orlando10:03
*** jorisroovers has joined #openstack-dev10:03
*** paragan has quit IRC10:04
*** steven-weston has joined #openstack-dev10:06
*** aditirav_ has joined #openstack-dev10:06
*** nosnos has quit IRC10:06
*** aditirav_ has quit IRC10:07
*** aditirav_ has joined #openstack-dev10:07
*** Ryan_Lane has quit IRC10:09
*** teran has joined #openstack-dev10:09
*** aditirav has quit IRC10:09
*** aditirav_ is now known as aditirav10:09
*** BobBallAway is now known as BobBall10:10
*** DinaBelova has quit IRC10:10
*** mkerrin has joined #openstack-dev10:13
*** faramir1 has quit IRC10:14
toabctlshardy: about your comment in https://review.openstack.org/#/c/59786/ : I talked yesterday to dolphm and said that a change like this is acceptable.10:17
*** avishayb has quit IRC10:18
shardytoabctl: Ok, no worries, I'm just interested in what the justification actually is, considering the same thing can be achieved with one line in a cron job10:19
shardytoabctl: As I mentioned, we face the same requirement in Heat, so I'm keen to discuss what solution makes sense for all of openstack10:20
toabctlshardy: sure. but if it's included in keystone, you don't have to think about a cronjob. it should just work10:20
shardytoabctl: IMO it doesn't really make sense for every project to do this differently, with their own implementation10:20
shardytoabctl: Ok, fair enough - how does this work if you're running a scaled-out keystone with multiple processes?10:21
toabctlshardy: I'm new to openstack so I don't have an overview about this. I just recognized that there is this common threadgroup class which is used by different projects.10:21
*** matsuhashi has quit IRC10:22
shardytoabctl: That is the pain point we've experienced in Heat with periodic tasks, where you have to effectively shard responsibility for data over multiple processes running periodic tasks asynchronously10:22
*** markmcclain has joined #openstack-dev10:22
*** claxton has quit IRC10:26
toabctlshardy: for the sql backend it shouldn't be a problem if multiple processes flush the expired tokens. but I have no idea about the other backends.10:27
shardytoabctl: Well those are the sort of issues which, IMHO, need to be discussed, considered and tested10:28
shardy"shouldn't be a problem" != tested10:29
toabctlshardy: but I guess a central service responsible for periodic tasks from different services is a better solution10:29
toabctlshardy: sure10:29
*** evgenyf has quit IRC10:29
*** sarob has quit IRC10:30
shardytoabctl: AIUI that is one of the use cases the Mistral project aims to solve10:31
shardytoabctl: So you could have a service register periodic tasks on startup with Mistral, rather than managing them internally10:32
shardyhttps://wiki.openstack.org/wiki/Mistral10:32
ttxmarkmcclain: cutting Mp for neutron now10:32
markmcclainttx: ack10:32
k4n0Can someone suggest a way to go about this, I have a change in nova which is causing tempest gate to fail, https://review.openstack.org/#/c/59860/, the nova change will stop showing deleted flavors, and the tempest test that is failing is specifically trying to get deleted flavors10:33
k4n0Ideally i should be fixing/skipping the tempest tests first right?10:33
*** rdas has joined #openstack-dev10:33
k4n0And then get the nova change reviewed?10:34
*** yaguang has quit IRC10:34
*** markmcclain has quit IRC10:35
*** johnthetubaguy has joined #openstack-dev10:35
*** markmcclain has joined #openstack-dev10:35
toabctlshardy: thanks for the mistral link. that's interessting!10:37
*** nati_ueno has joined #openstack-dev10:37
*** athomas has quit IRC10:37
*** radsy has joined #openstack-dev10:38
*** armax has joined #openstack-dev10:38
*** utlemming has quit IRC10:41
*** aditirav has quit IRC10:41
*** aditirav has joined #openstack-dev10:42
*** athomas has joined #openstack-dev10:44
shardytoabctl: np, hopefully you can see now why I'm arguing some discussion is warranted :)10:45
*** matsuhashi has joined #openstack-dev10:45
toabctlshardy: yes. I fully agree with your arguments10:45
*** utlemming has joined #openstack-dev10:46
*** rraja has quit IRC10:46
*** jistr has quit IRC10:46
*** radsy has quit IRC10:48
*** proffalken has quit IRC10:52
*** rongze has quit IRC10:53
*** evgenyf has joined #openstack-dev10:55
*** DinaBelova has joined #openstack-dev10:55
*** kushal has quit IRC10:56
*** sarob has joined #openstack-dev10:56
*** stannie has left #openstack-dev10:57
*** dsantos_ has quit IRC11:00
*** ygbo has quit IRC11:04
*** prekarat has quit IRC11:04
*** evgenyf has quit IRC11:06
*** ygbo has joined #openstack-dev11:07
*** zbitter has joined #openstack-dev11:08
*** jistr has joined #openstack-dev11:09
*** zaneb has quit IRC11:10
*** rongze has joined #openstack-dev11:11
*** SergeyLukjanov has quit IRC11:12
*** bvandenh has joined #openstack-dev11:12
*** zbitter is now known as zaneb11:12
*** jorisroovers has quit IRC11:12
*** pixelb has joined #openstack-dev11:13
ttxjd__: around?11:14
*** DinaBelova has quit IRC11:15
ttxjd__: shall I just defer the last 3 things in https://launchpad.net/ceilometer/+milestone/icehouse-1 and cut ?11:15
*** rfolco_ has joined #openstack-dev11:15
jd__ttx: yep11:16
ttxok will do as soon as damn data is reliable11:17
*** avishay has quit IRC11:19
*** basha has quit IRC11:23
*** gmurphy_ has quit IRC11:23
*** avishayb has joined #openstack-dev11:24
*** yassine has quit IRC11:25
*** pcm_ has joined #openstack-dev11:26
*** reidrac has quit IRC11:26
*** f13o has joined #openstack-dev11:27
*** pcm_ has quit IRC11:28
*** reidrac has joined #openstack-dev11:28
*** sarob has quit IRC11:28
*** pcm_ has joined #openstack-dev11:28
*** jp_at_hp has joined #openstack-dev11:31
*** avishay has joined #openstack-dev11:34
*** jruzicka has joined #openstack-dev11:36
*** jamielennox is now known as jamielennox|away11:36
*** tonix has joined #openstack-dev11:38
*** KA has quit IRC11:38
*** armax has quit IRC11:40
*** DinaBelova has joined #openstack-dev11:41
*** aa_ has joined #openstack-dev11:41
*** SergeyLukjanov has joined #openstack-dev11:43
*** jergerber has quit IRC11:43
aa_Hello11:44
aa_i have an issue regarding the keystone cli, and the rest api11:45
*** rongze has quit IRC11:45
aa_when a user that has an admin role in a tenant11:45
aa_types: keystone user-list, all users are displayed11:46
aa_instead when I make a curl request to /users11:46
aa_none are displayed11:47
*** queaker has quit IRC11:48
*** SnowDust has joined #openstack-dev11:48
*** bvandenh has quit IRC11:49
aa_the only thing i need to add is  when a make a request to 5000, none are displayed, when I make a request to 35357 all of them are displayed11:50
*** e0ne has quit IRC11:50
*** AnilV4 has quit IRC11:50
aa_how can i make  a user that has an admin role on a tenant to not show all users11:51
*** rongze has joined #openstack-dev11:51
aa_when i query keystone user-list11:51
*** sarob has joined #openstack-dev11:56
*** max_lobur is now known as max_lobur_afk11:57
*** Thor^^ is now known as Thor12:01
*** jorisroovers has joined #openstack-dev12:03
*** tellesnobrega has joined #openstack-dev12:04
tellesnobregahi, anyone here can help me with ldap?12:04
*** e0ne has joined #openstack-dev12:05
*** devvesa has quit IRC12:07
*** tdruiva has joined #openstack-dev12:12
*** xingchao has joined #openstack-dev12:15
*** prad has joined #openstack-dev12:17
*** aa_ has quit IRC12:18
*** bvandenh has joined #openstack-dev12:18
*** tdruiva has quit IRC12:18
*** dims has joined #openstack-dev12:18
*** tdruiva has joined #openstack-dev12:18
*** dsantos_ has joined #openstack-dev12:19
*** e0ne_ has joined #openstack-dev12:19
*** le089 has joined #openstack-dev12:19
*** leo_ has joined #openstack-dev12:19
*** AnilV4 has joined #openstack-dev12:20
*** exed has quit IRC12:20
*** exed has joined #openstack-dev12:21
*** le089 has quit IRC12:22
*** le089 has joined #openstack-dev12:22
*** e0ne has quit IRC12:22
*** tdruiva has quit IRC12:23
*** tdruiva has joined #openstack-dev12:24
*** irimi has joined #openstack-dev12:26
*** nshaikh has left #openstack-dev12:28
*** nshaikh has joined #openstack-dev12:28
*** sarob has quit IRC12:28
*** FunnyLookinHat has joined #openstack-dev12:30
*** CaptTofu has quit IRC12:30
*** CaptTofu has joined #openstack-dev12:31
*** salv-orlando_ has joined #openstack-dev12:33
*** enikanorov_ has joined #openstack-dev12:35
*** salv-orlando has quit IRC12:36
*** salv-orlando_ is now known as salv-orlando12:36
*** Alexei_9871 has joined #openstack-dev12:36
*** jprovazn has quit IRC12:37
*** enikanorov has quit IRC12:38
*** AnilV4 has quit IRC12:39
*** rbrady has joined #openstack-dev12:39
*** AnilV4 has joined #openstack-dev12:39
*** SergeyLukjanov is now known as _SergeyLukjanov12:42
*** achampion has quit IRC12:42
*** tdruiva has quit IRC12:42
*** _SergeyLukjanov has quit IRC12:42
*** tdruiva has joined #openstack-dev12:42
*** shadower_ is now known as shadower12:43
*** zaneb has quit IRC12:43
kryptohi does openstack ovs filtering use this script https://github.com/openstack/nova/blob/master/plugins/xenserver/networking/etc/xensource/scripts/ovs_configure_vif_flows.py12:44
*** dolphm has joined #openstack-dev12:46
*** eglynn is now known as eglynn-afk12:47
*** zaneb has joined #openstack-dev12:48
*** YorikSar has quit IRC12:48
*** dstanek has joined #openstack-dev12:48
*** f13o has quit IRC12:49
*** sandywalsh_ has quit IRC12:49
*** aditirav has quit IRC12:50
*** YorikSar has joined #openstack-dev12:50
*** neoXsys has quit IRC12:50
BobBallonly if you're using Xen and have it configured to use that in dom012:51
*** safchain has joined #openstack-dev12:51
*** max_lobur_afk is now known as max_lobur12:52
*** jcoufal has quit IRC12:52
*** rraja has joined #openstack-dev12:53
*** urulama_ has quit IRC12:53
*** avishay has quit IRC12:53
*** arborism has quit IRC12:54
*** avishay has joined #openstack-dev12:54
*** JonnyNomad has quit IRC12:55
*** JonnyNomad has joined #openstack-dev12:55
*** sarob has joined #openstack-dev12:56
*** jcoufal has joined #openstack-dev12:57
*** galstrom_zzz is now known as galstrom12:57
*** sumanthns has quit IRC12:57
*** morazi has joined #openstack-dev12:57
*** zhikunliu has quit IRC12:58
*** jprovazn has joined #openstack-dev12:58
*** lucasagomes is now known as lucas-hungry12:59
kryptoBobBall: any idea why we need this rule ovs.add("priority=4,arp,in_port=%(OF_PORT)s,dl_src=%(MAC)s,"12:59
krypto            "nw_src=0.0.0.0,arp_sha=%(MAC)s,actions=resubmit:9999")12:59
*** amuller_ has joined #openstack-dev12:59
*** JonnyNomad has quit IRC12:59
kryptonw_src 0.0.0.0 and nw_src=instance ip12:59
*** JonnyNomad has joined #openstack-dev13:00
*** lon_T2 is now known as lon13:01
*** amuller has quit IRC13:02
*** matsuhashi has quit IRC13:03
*** sandywalsh_ has joined #openstack-dev13:03
BobBallthat's allowing incoming ARP responses13:03
*** dprince has joined #openstack-dev13:03
*** rods has joined #openstack-dev13:05
*** sgordon has joined #openstack-dev13:05
BobBallIs there a problem with the rule?13:05
*** mrunge has quit IRC13:05
BobBallIf you don't have ARP you can't talk to anything because you can't get the hardware address from the IP address.13:05
*** bvandenh has quit IRC13:05
*** SergeyLukjanov has joined #openstack-dev13:05
BobBallI guess without that rule two VMs in the same network and on the same host wouldn't be able to find each other13:06
*** bashok has quit IRC13:07
kryptothere is a rule above that "priority=4,arp,in_port=%(OF_PORT)s,dl_src=%(MAC)s,"13:07
krypto            "nw_src=%(IPV4_ADDR)s,arp_sha=%(MAC)s,actions=resubmit:9999")"13:07
BobBallThat's outbound rather than inbound13:07
*** nosnos_ has quit IRC13:07
BobBallit's arp request and responses13:07
*** nosnos has joined #openstack-dev13:08
*** yamahata_ has joined #openstack-dev13:09
BobBallI'm not an arp expert though13:09
kryptome neither but trying to understand  that, BobBall : i still understand nw_src= 0.0.0.0 as below rule validates arp from that mac and ip13:11
kryptousing arp_sha=mac-of-instance13:12
kryptoisnt this for outgoing?13:12
kryptoi still dont*13:12
BobBallAh - yes - it's all outgoing.  I guess different ARP implementations use nw_src=<my_IP> vs nw_src=0.0.0.013:13
BobBallthat makes sense13:13
BobBallbecause the arp respose doesn't care about the src IP13:13
BobBalljust that the IP and mac match in the payload13:14
BobBall(I mean to prevent spoofing)13:14
*** jdob has joined #openstack-dev13:14
kryptoso my doubt is if we had only this nw_src= 0.0.0.0 ,then can't i still spoof ip with same mac?13:15
*** ruhe has joined #openstack-dev13:15
*** CaptTofu has quit IRC13:15
BobBallI'm not sure where the payload is verified - but I thought it was somewhere13:16
*** CaptTofu has joined #openstack-dev13:16
*** dims has quit IRC13:17
*** dims has joined #openstack-dev13:18
*** stannie has joined #openstack-dev13:19
*** the_real_kp has joined #openstack-dev13:19
*** sandywalsh_ has quit IRC13:20
*** nermina has joined #openstack-dev13:21
*** gordc has joined #openstack-dev13:23
*** thomasem has joined #openstack-dev13:23
*** kushal has joined #openstack-dev13:24
*** DinaBelova has quit IRC13:24
*** SnowDust has quit IRC13:25
*** RuediR1 has quit IRC13:28
*** sarob has quit IRC13:29
tellesnobregaayoung: ping13:29
*** nermina has quit IRC13:29
*** xchu has joined #openstack-dev13:29
*** yaguang has joined #openstack-dev13:30
*** fbo_away is now known as fbo13:31
*** rushiagr has quit IRC13:31
*** matsuhashi has joined #openstack-dev13:32
*** herndon_ has joined #openstack-dev13:34
*** bswartz has quit IRC13:34
*** achampion has joined #openstack-dev13:34
*** DinaBelova has joined #openstack-dev13:35
*** mriedem has joined #openstack-dev13:35
*** sandywalsh_ has joined #openstack-dev13:36
*** venkatesh has joined #openstack-dev13:37
*** ig has joined #openstack-dev13:38
kryptothanks BobBall13:38
*** nshaikh has left #openstack-dev13:38
*** vartom11119 has quit IRC13:38
*** noslzzp has joined #openstack-dev13:38
*** venkatesh has quit IRC13:38
*** markmcclain has quit IRC13:38
*** noslzzp has quit IRC13:39
*** noslzzp has joined #openstack-dev13:39
*** nosnos has quit IRC13:39
*** CaptTofu has quit IRC13:39
ayoungtellesnobrega, I don't ping.  I'm not a plebe any more.  I bebop!13:40
*** vladikr has joined #openstack-dev13:40
*** ruhe is now known as ruhe_13:41
*** irenab has joined #openstack-dev13:41
*** troytoman is now known as troytoman-away13:41
*** eharney has joined #openstack-dev13:41
*** stannie has quit IRC13:43
*** ruhe_ is now known as ruhe13:44
*** corXi has joined #openstack-dev13:45
*** irenab has quit IRC13:47
*** armax has joined #openstack-dev13:47
*** jorisroovers has quit IRC13:48
*** jorisroovers has joined #openstack-dev13:48
*** lbragstad has joined #openstack-dev13:49
*** galstrom is now known as galstrom_zzz13:49
*** achampion has quit IRC13:50
*** jorisroovers has quit IRC13:50
*** steven-weston has quit IRC13:51
*** paragan has joined #openstack-dev13:52
*** f13o has joined #openstack-dev13:52
*** jorisroovers has joined #openstack-dev13:52
*** eglynn-afk is now known as eglynn13:53
*** ig has quit IRC13:54
*** safchain has quit IRC13:56
*** dkranz has joined #openstack-dev13:56
*** sarob has joined #openstack-dev13:56
*** tristanC_ is now known as tristanC13:57
*** f13o has quit IRC13:58
Alexei_9871jd__ ping13:59
jd__Alexei_9871: pong14:00
Alexei_9871jd__: wanted to ask about this review: https://review.openstack.org/#/c/59489/14:00
*** mengxd has joined #openstack-dev14:00
*** sumanth has quit IRC14:00
Alexei_9871jd__: why don't you use separate db for each test?14:00
jd__Alexei_9871: because there's only one DB available :(14:00
Alexei_9871jd__: can't we get a right to create temp db?14:01
Alexei_9871cause db locks will cause us a lot of troubles14:01
jd__Alexei_9871: maybe, we need to discuss with infra14:01
*** mohits has joined #openstack-dev14:02
*** markmcclain has joined #openstack-dev14:02
*** mengxd has quit IRC14:02
jd__I make things work first, then I'll see how to make it faster if it's needed :)14:02
Alexei_9871jd__: ok :)14:02
*** lucas-hungry is now known as lucasagomes14:03
jd__though for now this patch works locally and not on infra, for a reason I ignore14:03
*** ngoracke has joined #openstack-dev14:04
jd__looks like the locking doesn't work or something14:04
*** amuller__ has joined #openstack-dev14:04
*** amuller_ has quit IRC14:05
*** rraja has quit IRC14:05
*** bpokorny1 has joined #openstack-dev14:06
*** mfer has joined #openstack-dev14:06
jd__ah right, that's it, now I remember I just read the thread on -dev about that, damn14:06
*** yamahata_ has quit IRC14:07
*** glenng has joined #openstack-dev14:07
*** yamahata_ has joined #openstack-dev14:08
*** claytonc has joined #openstack-dev14:09
*** safchain has joined #openstack-dev14:10
*** achampion has joined #openstack-dev14:10
*** f13o has joined #openstack-dev14:11
*** heyongli has joined #openstack-dev14:11
*** markmcclain has quit IRC14:12
*** pberis has joined #openstack-dev14:12
*** jayg|g0n3 is now known as jayg14:13
*** MaxV has joined #openstack-dev14:13
*** amuller__ is now known as amuller14:13
*** jasondotstar has joined #openstack-dev14:13
*** stannie has joined #openstack-dev14:14
*** rongze has quit IRC14:14
*** morazi has quit IRC14:15
*** armax has quit IRC14:15
*** armax has joined #openstack-dev14:15
*** skraynev has quit IRC14:16
*** mfer has quit IRC14:17
*** mfer has joined #openstack-dev14:18
*** rongze has joined #openstack-dev14:18
*** dstanek has quit IRC14:19
*** pberis has quit IRC14:19
*** bvandenh has joined #openstack-dev14:20
*** pberis has joined #openstack-dev14:20
*** Gwyxx has joined #openstack-dev14:23
tellesnobregaayoung: kkk, can i ask you some questions about domain specific ldap?14:23
ayoungsure14:23
*** loq_mac has joined #openstack-dev14:23
*** Gwyxx is now known as SL-RHanson14:24
*** raildo has joined #openstack-dev14:24
tellesnobregaayoung: im doing some studying about how i can manage domains using ldap14:24
*** jlabocki1 has quit IRC14:25
tellesnobregaayoung: im a little lost how does it work, i started a devstack with ldap, but i think that it only works for the default domain, do you have some guide on how to configure domain specific ldap:14:25
tellesnobrega?14:25
*** corXi has quit IRC14:25
*** jlabocki has joined #openstack-dev14:26
*** radez_g0n3 is now known as radez14:26
*** nermina has joined #openstack-dev14:26
*** blues-man has joined #openstack-dev14:26
*** morazi has joined #openstack-dev14:26
ayoungtellesnobrega, well, there is good news and bad news14:26
*** a7ndrew has left #openstack-dev14:26
ayoungthe bad news is that it is not 100% working yet14:27
*** f13o has quit IRC14:27
ayoungthe good news is that we are working on it14:27
ayoungHenrynash (who is not here right now)  got the ball rolling.14:27
*** dvarga has joined #openstack-dev14:27
*** stackKid has joined #openstack-dev14:27
ayoungSo you can set up a domain specific ldap config in a subdir under /etc/keystone.  There are instructions how to do it in the configuration.rst file14:27
ayoungtellesnobrega, there are some issues that are still to be resolved,  such as....14:28
*** kbringard has joined #openstack-dev14:28
*** loquacities has joined #openstack-dev14:29
*** xjiujiu has quit IRC14:29
ayoungtellesnobrega, it might be working now.  We did one of the important things, which was to remove the calls from assignment into identity...but I think the patch for that has not yet merged14:30
*** skraynev has joined #openstack-dev14:30
*** loq_mac has quit IRC14:30
*** sarob has quit IRC14:30
*** drewlander has joined #openstack-dev14:30
*** vijendar has joined #openstack-dev14:31
tellesnobregaayoung: i see, i got an email that this bug is fix-released14:31
*** neeti has quit IRC14:31
*** aeperezt has joined #openstack-dev14:31
ayoungtellesnobrega, yeah, looking for the commit, though14:32
tellesnobregaayoung: the part that i did was merged a while back14:32
ayoungtellesnobrega, is that removing the call from assignments to identity ?14:33
tellesnobregaayoung: removing calls from identity to assignment14:33
ayoungtellesnobrega, OK, to set up domain specific LDAP, leave the SQL driver as the main identity and assignments driver. Make sure that works14:34
ayoungtellesnobrega, then read this https://github.com/openstack/keystone/blob/master/doc/source/configuration.rst#domain-specific-drivers14:35
*** loquacities has quit IRC14:35
*** neelashah has joined #openstack-dev14:35
ayoungtellesnobrega, you should be able to copy the LDAP config out of the keystone.conf file into the domain conf file14:35
ayoungtellesnobrega, is that enough for you to move on?14:36
*** nkinder has quit IRC14:36
tellesnobregaayoung: ok, just to make sure i understood right, i should use SQL as identity driver? and config ldap following this tutorial?14:36
ayoungtellesnobrega, correct14:36
*** exed has quit IRC14:36
ayoungand SQL as the assignments driver.  It is the default, but make it explicit just to be sure.  THen, only Identity will come out of LDAP14:37
tellesnobregaayoung: ok, i will start on it. when i need more help i will be back14:37
*** f13o has joined #openstack-dev14:39
*** giulivo has quit IRC14:39
*** avishay has quit IRC14:40
*** joesavak has joined #openstack-dev14:41
*** miqui has joined #openstack-dev14:41
*** guitarza1 is now known as guitarzan14:43
*** peristeri has joined #openstack-dev14:43
ekarlsosandywalsh_: ?14:43
bogdandohello. I have a question regarding log_config deprecation since https://github.com/openstack/cinder/commit/1b3e4358715bad3c2309ac40785bd7c3b371284f14:44
bogdandowhat loggers *might* and what *should not* be configured in log configs now? what is bug or blueprint or docs related?14:44
bogdandoshould I use deprecated log_config in case I want override ALL loggers?14:44
*** aditirav has joined #openstack-dev14:44
sandywalsh_ekarlso, hey! which repo did you pull from?14:45
*** sthaha has quit IRC14:45
*** alunduil has quit IRC14:45
*** pmyers has quit IRC14:46
Alexei_9871jd__: We start our own mongo process for tests. Why can't we start mysql process with --data-dir in /tmp ? we could start it without privileges and create any database we want14:47
jd__Alexei_9871: if we can do that it'd be great I think14:47
jd__Alexei_9871: I'm happy to receive help on this patch (hint hint)14:47
Alexei_9871jd__: Ok I'll look on it tomorrow morning since I have other stuff to finish today14:48
jd__Alexei_9871: \o/14:48
*** colinmcnamara has joined #openstack-dev14:48
*** colinmcn_ has joined #openstack-dev14:48
*** pabelanger_ has joined #openstack-dev14:48
*** pabelanger_ has quit IRC14:49
*** pabelanger_ has joined #openstack-dev14:49
*** pabelanger has quit IRC14:50
*** pabelanger_ is now known as pabelanger14:50
*** pabelanger_ has joined #openstack-dev14:50
*** terrylhowe has quit IRC14:50
*** pabelanger has quit IRC14:51
*** YorikSar has quit IRC14:51
*** YorikSar has joined #openstack-dev14:52
*** pabelanger has joined #openstack-dev14:53
*** byeager has joined #openstack-dev14:53
*** giulivo has joined #openstack-dev14:53
*** bauzas has quit IRC14:56
*** sarob has joined #openstack-dev14:56
*** jtomasek has quit IRC14:57
*** DinaBelova has quit IRC14:58
*** ngoracke has quit IRC14:58
*** DennyZhang has joined #openstack-dev15:01
*** giulivo has quit IRC15:01
*** jtomasek has joined #openstack-dev15:02
*** jistr has quit IRC15:02
*** rods has quit IRC15:03
*** reaper has joined #openstack-dev15:03
*** jistr has joined #openstack-dev15:04
*** jistr is now known as jistr|mtg15:04
*** bswartz has joined #openstack-dev15:04
*** herndon_ has quit IRC15:05
*** k4n0 has quit IRC15:05
*** kbrierly has joined #openstack-dev15:05
ekarlsosandywalsh_: rackerlabs15:06
*** armax_ has joined #openstack-dev15:06
*** jtomasek has quit IRC15:07
*** thedodd has joined #openstack-dev15:07
*** burt has joined #openstack-dev15:08
sandywalsh_ekarlso, so, you're getting events in the database? That is, the worker seems happy?15:08
*** rohitk has quit IRC15:08
*** armax has quit IRC15:08
*** armax_ is now known as armax15:08
*** rods has joined #openstack-dev15:09
*** rraja has joined #openstack-dev15:09
*** markwash has joined #openstack-dev15:09
apmelton1ekarlso: what commit of stacktach are you running?15:10
ekarlsoapmelton1: trunk15:10
ekarlsotrying to use it with devstack ^15:10
*** colinmcnamara has quit IRC15:11
*** colinmcn_ has quit IRC15:11
*** markmcclain has joined #openstack-dev15:11
*** buzztroll has joined #openstack-dev15:12
*** yaguang has quit IRC15:12
*** jtomasek has joined #openstack-dev15:12
*** giulivo has joined #openstack-dev15:13
*** mkollaro has joined #openstack-dev15:14
apmelton1ekarlso: do you have a full stacktrace?15:14
*** bauzas has joined #openstack-dev15:14
*** stevemar has joined #openstack-dev15:15
*** jecarey has joined #openstack-dev15:15
*** dstanek has joined #openstack-dev15:16
*** SergeyLukjanov is now known as _SergeyLukjanov15:16
*** _SergeyLukjanov has quit IRC15:16
*** raildo has quit IRC15:16
*** miqui has quit IRC15:16
*** moory has quit IRC15:16
*** ywu has quit IRC15:16
*** FunnyLookinHat has quit IRC15:17
ekarlsoapmelton1: to secs15:19
*** denis_makogon has joined #openstack-dev15:19
*** benonsoftware has joined #openstack-dev15:19
*** heyongli has quit IRC15:19
*** nkinder has joined #openstack-dev15:20
*** rdas has quit IRC15:20
*** omachace has left #openstack-dev15:21
*** venkatesh has joined #openstack-dev15:21
*** venkatesh has quit IRC15:21
*** ngoracke has joined #openstack-dev15:21
dstanekbknudson: you around?15:21
bknudsondstanek: yes15:22
*** aditirav has quit IRC15:22
*** terrylhowe has joined #openstack-dev15:22
*** lucasagomes_ has joined #openstack-dev15:22
*** matsuhashi has quit IRC15:23
dstanekbknudson: i'm lookin at your review for adding debug into tox again - i have an alternate impl that i'd like you to take a look at15:23
bknudsondstanek: I'm happy with whatever works.15:23
*** lucasagomes has quit IRC15:24
apmelton1actually akarlso, I see you're using Django 1.6, stacktach doesn't work with 1.6 currently15:24
apmelton1could you use 1.5.5?15:24
dstanekbknudson: i've put it in a paste for now, but i can amend your patch if you like the approach http://paste.openstack.org/show/54425/15:24
ekarlsosandywalsh_: / apmelton1 http://pastebin.com/aqUerA2k < does that worker config seem ok +15:25
ekarlsoI don't get the whole config :/15:25
dstanekbknudson: i actually took the command out of my patch to run_tests.sh instead of using raw bash commands in the tox.ini15:25
bknudsondstanek: as long as it works to use set_trace, I'm fine with it, so just pt it on mine and I'll try it out.15:25
*** lucasagomes_ is now known as lucasagomes15:26
*** galstrom_zzz is now known as galstrom15:26
*** mikeoutland has quit IRC15:26
dstanekbknudson: will do, thanks15:26
*** mikeoutland has joined #openstack-dev15:27
apmelton1ekarlso: which services are you trying to get notifications for?15:27
*** xchu has quit IRC15:27
ekarlsoapmelton1: nova / neutron15:28
ekarlsoand designate15:28
*** radix_ has quit IRC15:28
*** sarob has quit IRC15:28
apmelton1ekarlso: what do you have set for notification_topics in each of the service's configs?15:29
*** jcooley_ has joined #openstack-dev15:30
*** bauzas_ has joined #openstack-dev15:31
*** rohitk has joined #openstack-dev15:31
ekarlsonotifications15:31
ekarlsoit's configured by devstack15:31
ekarlso: P15:31
*** swaT30 has joined #openstack-dev15:31
*** xingchao has quit IRC15:32
apmelton1so, for stacktach, we're going to need each services notifications to go to different topics15:32
*** rfolco has quit IRC15:32
*** paulprot1us is now known as paulproteus|mobi15:32
*** swaT30 has quit IRC15:32
apmelton1could you set them to notifications_nova, notifications_neutron and notifications_designate?15:33
*** datsun180b has joined #openstack-dev15:34
apmelton1ekarlso: ^^ once you've got that set up this worker config should work for you: https://gist.github.com/ramielrowe/dc527d68fa1a320121d715:34
ekarlsohow the crap do you do that in devstack ?15:34
marekdstevemar: ping.15:35
*** markwash has quit IRC15:35
apmelton1ekarlso: you'll need to set notifications_topics=notifications_nova in /etc/nova/nova.conf, like-wise for the other services15:35
apmelton1notification_topics=notifications_nova15:36
marekdstevemar: Two things: I no longer see domain_id when you list IdPs - is it on purpose? I think there was no clear conclusin about having it (or not) in the request.15:37
*** amuller has quit IRC15:37
*** markwash has joined #openstack-dev15:38
*** swaT30_ has quit IRC15:38
*** swaT30 has joined #openstack-dev15:38
*** tanisdl has joined #openstack-dev15:39
*** safchain has quit IRC15:39
marekdstevemar: 2) When I add new protocol tied to the IdP there is no PATCH method (I might want to change mapping i will be using). Should we separate PUT and PATCH or assume than I will just use PUT with new values and it will effecitively be stored in the database, erasing old values?15:39
*** tanisdl has quit IRC15:39
*** DennyZhang has quit IRC15:40
stevemarmarekd: 1) was not concluded15:40
*** mikeoutland has quit IRC15:40
marekdstevemar: 1) so i will leave domain_id for now because i already keep some trash values there.15:41
stevemarmarekd: that's fine with me15:41
*** ruhe is now known as ruhe_15:41
*** stackKid is now known as dingye15:41
stevemardolphm: around?15:41
*** dubsquared has joined #openstack-dev15:41
*** otherwiseguy has joined #openstack-dev15:41
*** ruhe_ is now known as ruhe15:42
ekarlsoapmelton1: how do you set that in local.conf in desvstack ?15:42
ekarlsoor sandywalsh_15:42
apmelton1ekarlso: taking a look at the docs, never used local.conf15:43
marekdstevemar: ok, and no.2? I thnink so far we have only one param we may want to update, namely mapping_id. I would go into PATCH -> it's easier to implement :-) + user will not by mistake remove his config, but PUTting twice.15:43
sandywalsh_ekarlso, apmelton1 hmm, not sure if you can set it on a per-service basis in devstack.15:44
marekdstevemar: he wants to update a value -> he must explicitely use PATCH.15:44
sandywalsh_<checking>15:44
*** safchain has joined #openstack-dev15:44
kryptohi any idea why two rules are used instead of using single rule line number 137,147 https://github.com/openstack/nova/blob/master/plugins/xenserver/networking/etc/xensource/scripts/ovs_configure_vif_flows.py15:44
ekarlsosandywalsh_: you can with local.conf15:44
*** safchain has quit IRC15:44
*** SergeyLukjanov has joined #openstack-dev15:44
*** jmontemayor has joined #openstack-dev15:44
*** Mandell has joined #openstack-dev15:45
stevemarmarekd: i think it'll be worth having full CRUD then?15:46
marekdstevemar: cool.15:46
*** rongze has quit IRC15:46
marekdstevemar: so i am adding this U operation. Thanks!15:47
apmelton1ekarlso: I believe this is what you'd want: https://gist.github.com/ramielrowe/778982015:47
apmelton1i'm not 100% certain about the neutron and designate parts, but that's basically the config I'd use for nova15:47
apmelton1ekarlso: slight correct, please refresh that gist15:48
apmelton1correction*15:48
*** mhu has quit IRC15:49
*** carl_baldwin has joined #openstack-dev15:49
*** mhu1 has joined #openstack-dev15:49
*** mhu1 is now known as mhu15:49
*** kenperkins has joined #openstack-dev15:50
*** amir1 is now known as asadoughi15:50
*** evgenyfedoruk has joined #openstack-dev15:51
*** achampion has quit IRC15:51
*** max_lobur is now known as max_lobur_afk15:51
*** achampion has joined #openstack-dev15:52
*** kenperkins has quit IRC15:53
*** jistr|mtg has quit IRC15:53
*** kenperkins_ has joined #openstack-dev15:53
*** kenperkins_ has quit IRC15:53
*** dolphm has quit IRC15:54
*** rcleere has joined #openstack-dev15:54
*** rgerganov has quit IRC15:54
BobBallkrypto: I may have an answer now - someone suggested there was a bug in the OVS where it wasn't properly replicating the ARPs between VMs on the same host and was stripping the nw_src15:55
*** vijendar has quit IRC15:56
*** vijendar has joined #openstack-dev15:56
*** sarob has joined #openstack-dev15:56
*** avishay has joined #openstack-dev15:57
*** jroovers has joined #openstack-dev15:58
*** jorisroovers has quit IRC15:58
*** KurtMartin is now known as kmartin15:59
*** jistr has joined #openstack-dev15:59
*** xqueralt has quit IRC15:59
*** jistr is now known as jistr|mtg16:00
*** avishay has quit IRC16:00
*** Ruetobas has quit IRC16:01
*** rongze has joined #openstack-dev16:02
*** jroovers has quit IRC16:02
*** Abhishek_ has joined #openstack-dev16:02
*** dingye has quit IRC16:03
*** reidrac has quit IRC16:03
*** Ruetobas has joined #openstack-dev16:03
*** aditirav has joined #openstack-dev16:04
*** Abhishe__ has joined #openstack-dev16:05
*** corXi has joined #openstack-dev16:05
*** dstanek has quit IRC16:07
*** safchain has joined #openstack-dev16:07
*** dstanek has joined #openstack-dev16:07
*** Ruetobas has quit IRC16:08
*** Abhishek_ has quit IRC16:08
*** FunnyLookinHat has joined #openstack-dev16:09
*** otherwiseguy has quit IRC16:11
Alexei_9871jd__ ping16:11
*** Abhishe__ has quit IRC16:11
*** tdruiva has quit IRC16:11
*** avishayb has quit IRC16:11
*** neelashah has quit IRC16:12
jd__Alexei_9871: pong16:13
*** dubsquared has quit IRC16:13
*** yeylon__ has quit IRC16:13
*** dubsquared has joined #openstack-dev16:14
Alexei_9871jd__: I've found time to work on your patch16:14
*** dubsquared has quit IRC16:14
Alexei_9871jd__: now it seems to work16:14
*** Ruetobas has joined #openstack-dev16:14
jd__Alexei_9871: awesome16:14
Alexei_9871jd__: but I get multiple errors DBError: (IntegrityError) (1452, 'Cannot add or update a child row: a foreign key constraint fails16:14
*** tdruiva has joined #openstack-dev16:14
jd__Alexei_9871: that's actually a good sign16:14
jd__we know we have this bug in real life16:14
jd__my plan was to try to trigger it in the unit tests16:14
Alexei_9871jd__: cool16:15
Alexei_9871jd__: so what should I do with it?16:15
jd__Alexei_9871: can you push it to replace my review?16:15
Alexei_9871jd__: yes 5 mins16:15
jd__or send me the diff, as you prefer16:15
Alexei_9871jd__: and I also think that we should only this tests on gate16:15
*** byeager has quit IRC16:15
Alexei_9871jd__: cause it makes tests a lot slower16:15
*** byeager has joined #openstack-dev16:16
SpamapSwhy exactly do keystone's unit tests create an on-disk sqlite?16:16
jd__Alexei_9871: that won't be enough16:16
*** jcoufal has quit IRC16:16
*** rbrady has quit IRC16:16
*** armax has quit IRC16:17
*** aditirav has left #openstack-dev16:17
*** Mandell has quit IRC16:17
*** paragan has quit IRC16:17
*** aditirav has joined #openstack-dev16:17
Alexei_9871jd__: here you go :)16:17
Alexei_9871I've got 73 test failures16:18
Alexei_9871cause of FK errors16:18
*** cpallares has joined #openstack-dev16:18
*** markmcclain has quit IRC16:19
*** aditirav_ has joined #openstack-dev16:19
*** bdpayne has quit IRC16:19
*** pmyers has joined #openstack-dev16:20
*** rudrarugge has joined #openstack-dev16:20
*** sarob has quit IRC16:21
ekarlsoapmelton1: that produces http://paste.ubuntu.com/6520510/16:21
ekarlsowhich is broken :/16:21
*** aditirav has quit IRC16:22
*** aditirav_ is now known as aditirav16:22
apmelton1ekarlso: looks like it's the "=" right below [DEFAULT]16:23
*** f13o has quit IRC16:24
*** aditirav has quit IRC16:24
*** f13o has joined #openstack-dev16:24
*** alex_klimov1 has quit IRC16:25
sandywalsh_markmc, is oslo.messaging on gerrit or just github pull releases?16:26
apmelton1ekarlso: I'm not sure how that equals is getting in there, all of the other values seem to have been inserted properly16:26
markmcsandywalsh_, https://review.openstack.org/#/q/project:openstack/oslo.messaging,n,z16:28
markmcsandywalsh_, seeing a stale reference to github.com/markmc/oslo.messaging somewhere?16:28
*** iartarisi has quit IRC16:28
jd__Alexei_9871: that looks awesome, thanks!16:28
sandywalsh_markmc, no, but gerrit is giving me grief trying to issue a review.16:29
markmcsandywalsh_, pastebin ?16:29
sandywalsh_markmc, just an ssh problem. Going to dig around a little. Works fine with the other repos, which is odd.16:30
*** reaper has quit IRC16:30
markmcsandywalsh_, ok16:31
*** markwash_ has joined #openstack-dev16:31
*** mkollaro has quit IRC16:31
*** hazinhell has joined #openstack-dev16:32
*** markwash has quit IRC16:32
*** matiu has quit IRC16:32
*** markwash_ is now known as markwash16:32
*** rushiagr has joined #openstack-dev16:32
*** macjack has quit IRC16:33
*** bauzas_ has quit IRC16:33
sandywalsh_markmc, got it. thanks16:34
markmcsandywalsh_, np16:34
*** rudrarugge has quit IRC16:36
*** e0ne has joined #openstack-dev16:38
*** stevemar has quit IRC16:38
*** CaptTofu has joined #openstack-dev16:39
*** e0ne_ has quit IRC16:40
*** jgrimm has joined #openstack-dev16:41
*** adam_g has joined #openstack-dev16:42
*** adam_g has quit IRC16:42
*** adam_g has joined #openstack-dev16:42
*** moory has joined #openstack-dev16:43
*** xqueralt has joined #openstack-dev16:43
*** jcooley_ has quit IRC16:43
mooryhi - if I attach a patch to a security bug  - how does the status get updated from 'In Progress'?16:45
*** pmathews has joined #openstack-dev16:45
*** zaneb has quit IRC16:45
russellbmoory: manually16:45
*** mlavalle has joined #openstack-dev16:45
*** Ryan_Lane has joined #openstack-dev16:46
mooryrussellb: so I change it ? only options I have are Fix Committed and Fix Released16:46
russellbmoory: you may not have permissions ... you'll have to check with someone who has access to the bug16:48
*** SumitNaiksatam has quit IRC16:48
*** shakayumi has joined #openstack-dev16:48
*** michchap_ has quit IRC16:48
moory@russellb - okay I'll ask the guy who raised the bug to see if he can do anything with it to get the review porcess started16:49
*** alop has joined #openstack-dev16:49
russellbk16:49
*** dstanek has quit IRC16:49
*** Shaan7 has joined #openstack-dev16:49
moory@russellb - Thank you16:49
*** marun has quit IRC16:50
*** armax has joined #openstack-dev16:50
*** bdpayne has joined #openstack-dev16:50
ayoungSomeone is being far too literal....  WARNING keystone.common.wsgi [-] Authorization failed. Could not find token, $ADMIN_TOKEN. from 127.0.0.116:52
*** otherwiseguy has joined #openstack-dev16:52
*** eglynn has quit IRC16:53
*** ArxCruz has quit IRC16:53
*** ArxCruz has joined #openstack-dev16:54
*** colinmcnamara has joined #openstack-dev16:54
*** dubsquared has joined #openstack-dev16:54
*** colinmcn_ has joined #openstack-dev16:54
*** jistr|mtg is now known as jistr16:54
*** armax has quit IRC16:55
*** evgenyfedoruk has quit IRC16:55
*** jpomero has joined #openstack-dev16:55
*** armax has joined #openstack-dev16:55
*** sarob has joined #openstack-dev16:56
*** le089 has quit IRC16:57
*** corXi has quit IRC16:58
*** jpomero has quit IRC16:58
*** jpomero has joined #openstack-dev16:58
*** LinuxJedi_ is now known as LinuxJedi16:59
*** colinmcn_ has quit IRC16:59
*** colinmcnamara has quit IRC16:59
*** jsavak has joined #openstack-dev17:00
*** sarob has quit IRC17:00
*** neelashah has joined #openstack-dev17:00
*** colinmcnamara has joined #openstack-dev17:01
*** colinmcn_ has joined #openstack-dev17:02
*** joesavak has quit IRC17:02
*** e0ne has quit IRC17:03
*** devoid has joined #openstack-dev17:03
*** fbo is now known as fbo_away17:03
*** devoid has quit IRC17:03
*** devoid has joined #openstack-dev17:04
*** devoid has left #openstack-dev17:04
*** buzztroll has quit IRC17:05
*** buzztrol_ has joined #openstack-dev17:05
*** achampion has quit IRC17:05
*** rongze has quit IRC17:05
*** rongze has joined #openstack-dev17:07
*** yamahata_ has quit IRC17:08
*** jcooley_ has joined #openstack-dev17:08
*** SergeyLukjanov is now known as _SergeyLukjanov17:09
*** jpich has quit IRC17:10
*** stevemar has joined #openstack-dev17:11
*** loq_mac has joined #openstack-dev17:11
*** tkammer has quit IRC17:12
*** SumitNaiksatam has joined #openstack-dev17:12
*** arezmerita has quit IRC17:13
*** radix_ has joined #openstack-dev17:14
*** vuil has joined #openstack-dev17:14
*** AZBob has joined #openstack-dev17:14
*** jcooley_ has quit IRC17:15
*** xarses has quit IRC17:17
*** dolphm has joined #openstack-dev17:17
*** dstanek has joined #openstack-dev17:17
*** armax has quit IRC17:17
*** teran has quit IRC17:17
*** kushal has quit IRC17:18
*** sahid has quit IRC17:18
*** nermina has quit IRC17:19
*** pcm_ has quit IRC17:19
*** rch1 is now known as rch17:19
*** rch has quit IRC17:19
*** rch has joined #openstack-dev17:19
*** pcm_ has joined #openstack-dev17:19
*** jistr has quit IRC17:19
*** loq_mac has quit IRC17:21
*** ruhe is now known as ruhe_17:21
*** loq_mac has joined #openstack-dev17:21
*** ruhe_ is now known as ruhe17:21
*** rushiagr has quit IRC17:22
*** mrodden has quit IRC17:22
*** eglynn has joined #openstack-dev17:22
*** rushiagr has joined #openstack-dev17:22
*** pcm_ has quit IRC17:24
*** Anticime1 is now known as Anticimex17:24
tellesnobregaayoung: i didnt understand what should be in the keystone.domain.conf17:25
*** safchain has quit IRC17:25
dolphmtellesnobrega: mutli-domain conf is broken17:26
tellesnobregadolphm: its not possible to use it right now?17:26
dolphmtellesnobrega: not at all17:26
dolphmtellesnobrega: it's more so unfinished than broken, i suppose17:26
dolphmtellesnobrega: with federation on the horizon, i suspect we may rip what we have there back out17:27
*** jdob has quit IRC17:27
tellesnobregadolphm: i was planning a study on how to use, configure, change configuration and figure out how ldap works with domains, but i think i will have to postpone this research17:28
dolphmtellesnobrega: ldap doesn't work with domains17:28
dolphmtellesnobrega: so, done! :)17:28
*** hemna_ is now known as hemna17:29
*** irimi has quit IRC17:29
tellesnobregadolphm: thanks, you saved me a couple weeks of work. but with a very bad news i was following this https://github.com/openstack/keystone/blob/master/doc/source/configuration.rst#domain-specific-drivers to try it as ayoung suggested17:29
dolphmtellesnobrega: there's an open bug and an abandoned patch to finish things if you're interested -- poke at morganfainberg17:29
dolphmtellesnobrega: yes, and there's a big warning at the top of that section17:30
tellesnobregadolphm: yes, i will take a look at the bug17:30
tellesnobregadolphm: thanks17:30
*** armax has joined #openstack-dev17:30
dolphmtellesnobrega: same docs are published here btw, and are a little bit easier to read http://docs.openstack.org/developer/keystone/configuration.html#domain-specific-drivers17:30
*** mikeoutland has joined #openstack-dev17:30
dolphmtellesnobrega: at least the warning becomes a big red box!17:30
tellesnobregadolphm: i saw the warning, but i thought it had some progress and it would be able to test using devstack, just to see it working. But i guess it wont do17:31
*** dubsquared has quit IRC17:31
*** krypto has quit IRC17:31
*** datsun180b is now known as datsun_F40PH17:31
*** mlavalle has quit IRC17:32
*** dubsquared has joined #openstack-dev17:32
*** chandankumar has quit IRC17:33
*** mrodden has joined #openstack-dev17:34
*** loq_mac has quit IRC17:36
*** martyntaylor has quit IRC17:36
*** loq_mac has joined #openstack-dev17:36
*** dubsquared has quit IRC17:36
*** f13o has quit IRC17:37
*** jdob has joined #openstack-dev17:38
dolphmtellesnobrega: it's had discussion and that proposed patch, but nothing has landed as it's not a priority relative to federation, which should solve the same problem in a more generic way17:39
*** loq_mac has quit IRC17:41
tellesnobregadolphm: thanks, i will talk to morganfainberg and check that bug to see how the implementation is going, if its going at all17:42
ayoungdolphm, which is the abandonded patch?17:43
dolphmayoung: i don't have a link, but i know it's one of morgan's... owner:m@metacloud.com status:abandoned17:44
*** rohitk has quit IRC17:44
ayoungdolphm, argh gerrit naming of users if gaaarrhhh!17:45
*** mdbooth has quit IRC17:45
ayoungits not m@metacloud, its not morgainfainberg, and it won't tell me what it is17:45
ayounghttps://review.openstack.org/#/c/45649/17:46
ayoungtellesnobrega, ^^17:46
*** jsavak has quit IRC17:47
*** joesavak has joined #openstack-dev17:47
*** mmagr has quit IRC17:49
tellesnobregaayoung: thanks17:49
*** teran has joined #openstack-dev17:49
*** belmoreira has quit IRC17:50
*** derekh has quit IRC17:50
ayoungtellesnobrega, OK, let me look at that, and we can figure out a plan..17:51
ayoungtellesnobrega, but my comment was "on the right track, no major issues"17:51
ayoungmorganfainberg, please bring https://review.openstack.org/#/c/45649/ back from the dead17:51
*** rossella_s has quit IRC17:52
ayoungtellesnobrega, argh, the merge on that one is going to be non-trivial17:53
tellesnobregaayoung: i see, my main objective was to figure out if this feature was working and if not, why not17:53
*** eglynn is now known as eglynn-afk17:53
ayoungtellesnobrega, this was the patch I was looking for before.17:54
*** dubsquared has joined #openstack-dev17:54
*** SergeyLukjanov has joined #openstack-dev17:55
*** gyee has joined #openstack-dev17:55
*** michchap has joined #openstack-dev17:56
ayoungtellesnobrega, I think that many of those changes are now obsolete.  We should not be doing stuff in assignments that talks to identity, but it means that things like "get_group_project_roles" has to be content with the data it has solely in the assignments backend17:56
*** mikeoutland has quit IRC17:56
*** xarses has joined #openstack-dev17:57
*** amcrn has joined #openstack-dev17:57
*** dubsquared has quit IRC17:58
*** SergeyLukjanov has quit IRC17:58
*** dubsquared has joined #openstack-dev17:58
*** mikeoutland has joined #openstack-dev17:58
*** blues-man has quit IRC17:58
*** che-arne has quit IRC17:59
*** ygbo has quit IRC17:59
*** angdraug has joined #openstack-dev18:00
*** JordanP has quit IRC18:01
*** JordanRinke has quit IRC18:02
tellesnobregaayoung: i didnt really understand. Fixing this patch, can we get domain-specific-ldap workging?18:02
ayoungtellesnobrega, I have no idea!18:02
ayoungtellesnobrega, heh, actually, I mean that this is necessary.18:02
ayoungNot sure if it is sufficient18:02
*** martyntaylor has joined #openstack-dev18:03
ayoungwe'll know once we get it done18:03
*** michchap has quit IRC18:03
*** dubsquared has quit IRC18:03
*** JordanRinke has joined #openstack-dev18:04
*** reed has joined #openstack-dev18:05
ayoungtellesnobrega, morganfainberg is well underway on redoing the KVS and Memcached backends to use dogpile. With that, lots of the KVS impls will be able to be simplified, and many of the changes that are necessary in the above patch will be merged into a single change.  We want this for icehouse, but I can't tell you when it will be working18:05
*** moory has quit IRC18:07
tellesnobregaayoung: i see, thanks. I would like to get working on this, it would bring me a good knowledge of the backend of openstack, but im not sure if i will be able to do it now and also if i have enough knowledge on openstack to do so18:08
*** dubsquared has joined #openstack-dev18:08
ayoungtellesnobrega, look through this review to start:  https://review.openstack.org/#/c/59126/18:09
tellesnobregaayoung: i will18:10
*** ruhe has quit IRC18:11
*** crobertsrh has joined #openstack-dev18:12
*** armax has quit IRC18:14
*** twoputt__ has joined #openstack-dev18:15
*** twoputt_ has joined #openstack-dev18:15
*** akrivoka has quit IRC18:19
*** dolphm has quit IRC18:19
*** nermina has joined #openstack-dev18:20
*** ywu has joined #openstack-dev18:20
*** dolphm has joined #openstack-dev18:21
*** Mandell has joined #openstack-dev18:22
*** armax has joined #openstack-dev18:23
*** JordanRi1ke has joined #openstack-dev18:23
*** byeager has quit IRC18:23
*** JordanRinke has quit IRC18:24
*** JordanRi1ke is now known as JordanRinke18:24
*** armax has quit IRC18:24
*** dstanek has quit IRC18:24
*** cederb02 has joined #openstack-dev18:25
*** lucasagomes has quit IRC18:25
*** dolphm has quit IRC18:26
*** cederb02 has quit IRC18:26
*** cederb02 has joined #openstack-dev18:27
*** athomas has quit IRC18:31
*** danielbruno has joined #openstack-dev18:32
*** DennyZhang has joined #openstack-dev18:33
*** markmc has quit IRC18:34
*** DennyZhang has quit IRC18:34
*** loq_mac has joined #openstack-dev18:34
*** DennyZhang has joined #openstack-dev18:34
openstackstatusNOTICE: gate failures due to django incompatibility, pip bugs, and node performance problems18:34
*** Abhishek_ has joined #openstack-dev18:34
*** ChanServ changes topic to "gate failures due to django incompatibility, pip bugs, and node performance problems"18:34
*** fbo_away is now known as fbo18:35
*** Abhishek_ has quit IRC18:36
*** loquacities has joined #openstack-dev18:36
sdaguebnemec: so... on the lockfile, what if we openned with 'a' instead of 'w', so we didn't truncate the file18:37
*** harlowja has joined #openstack-dev18:37
sdaguestill requires write access, but doesn't damage the underlying file18:37
*** Abhishek_ has joined #openstack-dev18:37
danpbsdague lockfile for what ?18:38
clarkbis this for oslo db?18:38
clarkbbecause I really think we should just get rid of the lock file all together if so18:38
sdaguedanpb: this is the oslo lockutils follow up18:38
*** aeperezt has quit IRC18:38
sdaguedanpb: from the list18:38
*** loq_mac has quit IRC18:38
bnemecclarkb: I agree, but this is used other places too.18:38
sdagueclarkb: yeh, lock utils is used all over the place18:39
sdaguethis is a more generic question18:39
clarkbI see18:39
danpbsdague  hmm, so from your comment, is the file that is being locked used for storing data too ?18:40
sdaguedanpb: no18:40
sdagueit's just used to get an fd to do fctnl lock on18:40
clarkbit doesn't write a pid to the file too?18:40
sdagueno18:40
bnemecsdague: I would think that could work, but I don't know a lot about the low level locking behavior.18:40
bnemecI'll have to look at it some more.18:40
danpbsdague why would append vs truncate matter then when opening ?18:41
*** cederb02 has quit IRC18:41
sdaguedanpb: to eliminate the security attack of someone linking from "well known lock location" to another file on yuor computer they want to destroy18:41
*** mancdaz is now known as mancdaz_away18:41
*** jprovazn has quit IRC18:42
danpbsdague surely the right fix for that is to not use the lockfile in a path where anyone can access (ie don't ever use /tmp or /var/tmp)18:42
sdaguedanpb: http://lists.openstack.org/pipermail/openstack-dev/2013-December/021055.html full thread18:42
sdaguedanpb: so the problem is upgrade18:42
sdagueI'm trying to figure out if we have a not dangerous, even if unwise way through this where we can have a default18:43
*** pcm_ has joined #openstack-dev18:43
*** Ryan_Lane has quit IRC18:43
*** irimi has joined #openstack-dev18:44
*** zz_ewindisch is now known as ewindisch18:44
*** jprovazn has joined #openstack-dev18:44
*** pcm_ has quit IRC18:44
*** ewindisch_ has joined #openstack-dev18:44
*** ewindisch_ has quit IRC18:44
*** pcm_ has joined #openstack-dev18:45
*** nati_ueno has quit IRC18:45
*** fbo is now known as fbo_away18:45
*** rushiagr has quit IRC18:45
*** loquacities has quit IRC18:46
bnemecsdague: "On at least some systems, LOCK_EX can only be used if the file descriptor refers to a file opened for writing." :-(18:46
bnemecFrom http://docs.python.org/2/library/fcntl.html#fcntl.lockf18:46
sdaguebnemec: I wonder if they mean to the exclusion of append18:47
danpbbnemec: 'a' is a write mode18:47
*** aeperezt has joined #openstack-dev18:47
danpbstdio's   'a' mode maps to POSIX  O_WRONLY   while 'w' maps to O_WRONLY | O_TRUNC18:48
bnemecOkay, guess I was reading it too literally. :-)18:48
danpbopps, i mean 'a' maps to O_WRONLY | O_APPEND18:49
*** gszasz has quit IRC18:50
sdagueyeh, locally this works with append, I'm blocking on the second exclusive lock18:50
*** danpb has quit IRC18:50
*** drewlander has quit IRC18:50
*** dolphm has joined #openstack-dev18:50
*** avishay has joined #openstack-dev18:51
*** drewlander has joined #openstack-dev18:51
bnemecsdague: Cool.  I'm open to giving it a shot, and maybe logging a big warning that it isn't recommended to use the default.18:51
sdagueyep, I put another response out there18:51
sdaguelet's see who else bites18:51
*** prekarat has joined #openstack-dev18:52
*** dolphm has quit IRC18:52
*** dolphm has joined #openstack-dev18:52
* bnemec watches the bobber with bated breath18:52
sdaguebobber?18:52
*** aeperezt has quit IRC18:52
*** dubsquared has quit IRC18:53
bnemec<sdague> let's see who else bites18:53
bnemecWe're fishing right? :-)18:53
sdague:)18:53
sdaguenice18:53
*** mrodden has quit IRC18:53
*** dubsquared has joined #openstack-dev18:53
*** byeager has joined #openstack-dev18:54
*** comay has quit IRC18:54
*** krotscheck has joined #openstack-dev18:55
*** otherwiseguy has quit IRC18:55
*** comay has joined #openstack-dev18:55
*** yeylon__ has joined #openstack-dev18:55
skraynevbnemec, sdague. As I understand you come to solution. And soon we will see  desired patch , right?18:56
*** michchap has joined #openstack-dev18:56
sdagueskraynev: well, I still want folks to vet the idea18:56
*** dolphm has quit IRC18:57
sdaguebut yes, I'm proposing an oslo patch that would do what I'm proposing18:57
sdagueworking on creating one that is18:57
*** Mandell has quit IRC18:57
*** Mandell has joined #openstack-dev18:58
*** dubsquared has quit IRC18:58
skraynevgreat))) I will be wait this patch.18:58
*** mrodden has joined #openstack-dev18:59
*** abramley has joined #openstack-dev18:59
*** carlp has quit IRC18:59
*** jsavak has joined #openstack-dev19:00
bnemecsdague: I guess the only other issue that leaves is the possibility of a DoS if someone locks a file on us and doesn't ever release it.19:01
*** ewindisch is now known as zz_ewindisch19:01
bnemecWhich is much less serious than overwriting files.19:01
*** michchap has quit IRC19:01
*** pete5 has quit IRC19:02
*** pete5 has joined #openstack-dev19:02
*** Mandell has quit IRC19:02
*** byeager has quit IRC19:02
sdaguebnemec: sure19:02
*** pete5 has quit IRC19:02
*** jruzicka has quit IRC19:02
sdagueright, this isn't what you'd actually want to run with19:02
*** pete5 has joined #openstack-dev19:02
sdaguebut it would provide a bridge towards working19:02
*** joesavak has quit IRC19:03
*** joesavak has joined #openstack-dev19:03
bnemecsdague: Yeah, I think I'm okay with that, especially as a bridge to deprecating the default for J.19:03
*** galstrom is now known as galstrom_zzz19:03
bnemecJust trying to come up with possible objections.19:03
sdagueyep19:03
sdagueright, that's why I put it back on the list, as I want to see all the rocks about why this can't work19:03
sdagueI think we sometimes get to cavalier with "upgrade is hard, let's do the easy thing instead"19:04
crobertsrhAnyone else have a problem with glance uploading images (latest devstack master)?  I'm seeing...ProgrammingError: (ProgrammingError) (1146, "Table 'glance.images' doesn't exist")19:04
*** e0ne has joined #openstack-dev19:05
*** byeager has joined #openstack-dev19:05
*** vijendar has quit IRC19:05
*** jsavak has quit IRC19:05
*** Mandell has joined #openstack-dev19:06
*** troytoman-away is now known as troytoman19:08
sdaguebnemec: good call on ccing the sec list19:09
*** mohits has quit IRC19:10
bnemecYeah, I figured they should be involved in the discussion.19:11
*** MaxV has quit IRC19:13
*** MaxV has joined #openstack-dev19:13
*** jasdeepH has joined #openstack-dev19:14
*** jruzicka has joined #openstack-dev19:14
*** dubsquared has joined #openstack-dev19:14
*** johnthetubaguy has quit IRC19:14
*** jasdeepH has quit IRC19:14
*** Alexei_9871 has quit IRC19:15
*** Chicago has quit IRC19:15
bnemec"Your message to Openstack-security awaits moderator approval"19:17
bnemecApparently I should have actually joined the list first. :-)19:17
*** thomasem has quit IRC19:17
*** MaxV has quit IRC19:17
*** markwash has quit IRC19:19
sdagueheh19:20
*** fbo_away is now known as fbo19:21
dsantos_hi I'm trying to run glance with ssl but I'm getting an error. I found this bug https://bugs.launchpad.net/python-glanceclient/+bug/1160520 but it doesn't seems to be fixed. The error that I got is "not all arguments converted during string formatting". Does someone know how can I fix this?19:22
uvirtbotLaunchpad bug 1160520 in python-glanceclient "Miss leading error message when OS_CACERT is set incorrectly" [Undecided,In progress]19:22
*** vuil has quit IRC19:22
*** marekd is now known as marekd|away19:23
*** SergeyLukjanov has joined #openstack-dev19:24
*** SergeyLukjanov has joined #openstack-dev19:25
*** sarob has joined #openstack-dev19:27
*** pixelb has quit IRC19:28
*** copeland has joined #openstack-dev19:28
*** Shaan7 has quit IRC19:28
*** Shaan7 has joined #openstack-dev19:28
copelandWould it be at all possible to speak with someone to validate my keystone configuration? I'm encountering an apparent Keystone error when attempting to validate my Swift installation (running 'stat'), specifically: "Endpoint for object-store not found - have you specified a region?" Thanks!19:30
*** jobewan has joined #openstack-dev19:31
*** asselin has joined #openstack-dev19:31
*** alex_klimov has joined #openstack-dev19:31
*** jruzicka has quit IRC19:35
*** avishay has quit IRC19:38
*** mrodden has quit IRC19:39
*** fbo is now known as fbo_away19:39
*** mrodden has joined #openstack-dev19:42
zaitcevcopeland: well, what does keystone endpoints-list say?19:44
*** hemna has quit IRC19:45
zaitcev| dd16f2d2d3b14838b8214504abfca26a | RegionOne | http://kvm-rei.zaitcev.lan:808019:46
zaitcev http://kvm-rei.zaitcev.lan:8080/v1.0/ | c863814814a24b60b72467fc089f8f0a |19:46
zaitcevhmm19:47
zaitcev| dd16f2d2d3b14838b8214504abfca26a | RegionOne | http://kvm-rei.zaitcev.lan:8080/v1/AUTH_$(tenant_id)s | http://kvm-rei.zaitcev.lan:8080/v1/AUTH_$(tenant_id)s | http://kvm-rei.zaitcev.lan:8080/v1.0/ | c863814814a24b60b72467fc089f8f0a |19:47
zaitcevcopeland: there ya go19:47
*** MaxV has joined #openstack-dev19:47
*** bauzas has quit IRC19:48
*** hemna has joined #openstack-dev19:48
*** claytonc has quit IRC19:48
*** spzala has joined #openstack-dev19:49
*** hemna has quit IRC19:49
copelandzaitcev - Is that ran from your Keystone node? Also assuming you're using the FQDN instead of localhost?19:50
zaitcevWell, what good is localhost for someone who wants to talk to your Swift?19:51
zaitcevHow small is your OpenStack? Just one node, and Glance together with Swift on the same VM?19:51
*** pablosan has joined #openstack-dev19:52
*** dolphm has joined #openstack-dev19:53
*** prekarat has quit IRC19:53
*** hemna has joined #openstack-dev19:54
*** irimi has quit IRC19:54
copelandI was under the impression that 'endpoint' meant just that-- the endpoint, i.e. the Keystone server itself, specified with a port.. So far, the deployment is tiny. Two blade servers. Compute, Keystone, Glance, Horizon on one, and Swift on the other.19:54
zaitcevI thought an endpoint was where you find the service.19:55
*** buzztrol_ has quit IRC19:55
*** rudrarugge has joined #openstack-dev19:55
copelandyour knowledge is clearly far superior to mine, judging by your tone, so please instruct me.19:55
copeland:)19:55
*** xqueralt has quit IRC19:55
zaitcevSo, an app or middleware talks to Keystone server, asks "where do I find our Swift" and Keystone replies "publicURL is at https://rhev-a24c-01.lab.bos.redhat.com/v1", so the app goes there19:56
ayoungcopeland, service is something like "keystone, switch, glance"  and an endpoint is a specific instance of that service19:57
*** irimi has joined #openstack-dev19:57
*** michchap has joined #openstack-dev19:57
*** dolphm has quit IRC19:57
*** novas0x2a|laptop has joined #openstack-dev19:58
copelandah, gotcha. I was viewing 'endpoint' in a very different context.. I was under the impression that the endpoint specified was a point at which authentication takes place for each service.19:59
copelandnot specifically where the service exists19:59
*** sushils has quit IRC19:59
zaitcevThere was some kind of trick though... Uncommon in normal OpenStack installs, but occurs in Swift-only places: you must have Keystone endpoint (describing itself), or else swift won't authenticate.19:59
ayoungzaitcev, yesh, buyt his error said "Endpoint for object-store" which means the endpoint for swift in this case20:00
zaitcevoh, right20:00
*** jdob has quit IRC20:00
*** buzztroll has joined #openstack-dev20:01
copelandok, so that being said, this is completely and utterly wrong, and I should probably be embarassed to even be copying this, but for the sake of understanding:20:01
copeland| 8ed452d4997b4b00a77367fd15e45bfa | regionOne | http://localhost:8888/v1/AUTH_%(tenant_id)s | http://localhost:8888/v1/AUTH_%(tenant_id)s |        http://localhost:8888/v1        | 7563877905e840e0aec39089aeb557df |20:01
*** buzztroll has quit IRC20:01
copelandis the result I get from running 'keystone endpoint-list' on the keystone server itself.20:01
*** dperaza1 has joined #openstack-dev20:01
ayoungcopeland, so one of those fields is the service id20:02
ayoungand do keystone service list to see those20:02
zaitcevThe last one20:02
ayoung keystone service-list20:02
copelandyep, I see it20:02
*** michchap has quit IRC20:02
*** topol has joined #openstack-dev20:02
*** dubsquared has quit IRC20:02
copelandright, and it does match the last field pasted above, as zaitcev pointed out20:03
dperaza1any one else having issues with oslo jenkins on py26: https://review.openstack.org/#/c/48733/20:03
*** freyes has joined #openstack-dev20:03
*** buzztroll has joined #openstack-dev20:03
zaitcevmine is     | c863814814a24b60b72467fc089f8f0a |  swift   | object-store |       Swift Service       |20:03
zaitcevwith c863814814a24b60b72467fc089f8f0a being the ID20:03
*** jdob has joined #openstack-dev20:03
zaitcevBTW, my RegionOne differs from your regionOne and I cannot remember if it matters20:04
dperaza1looks like a dependency issue: http://logs.openstack.org/33/48733/15/check/gate-oslo-incubator-python26/b0d0122/console.html20:04
*** boris-42 has quit IRC20:04
copelandI did notice that as well. FWIW, all of my regions are set to 'regionOne', so I'd hope that consistency is all that matters20:04
*** sarob has quit IRC20:06
*** bauzas has joined #openstack-dev20:06
*** herndon_ has joined #openstack-dev20:06
copelandso, the error itself: "Endpoint for object-store not found - have you specified a region?" doesn't necessarily imply that region isn't set, it's just stating that there's an issue with the endpoint and merely suggesting that region may not be set?20:06
zaitcevhmm.... I'm trying to find this ServiceCatalog class for you real quick20:06
copelandbecause I can clearly see that region is set for all services..20:06
*** sarob has joined #openstack-dev20:06
copelandso I'm assuming it must be an issue with using 'localhost' as the endpoint?20:06
copelandok, thank you20:07
zaitcevNo, I'm sure it's not the issue here.20:07
*** dolphm has joined #openstack-dev20:08
*** freyes has left #openstack-dev20:08
zaitcevand BTW regionOne is the correct default, according to /usr/lib/python2.7/site-packages/keystoneclient/v2_0/shell.py20:10
*** derekh has joined #openstack-dev20:10
copelandhm, interesting.20:10
*** dstanek has joined #openstack-dev20:10
*** sarob has quit IRC20:10
zaitcevDid you try to specify it in swift arguments? I typically omit it.20:11
zaitcev--os_region_name=regionOne20:11
*** armax has joined #openstack-dev20:12
*** aeperezt has joined #openstack-dev20:12
*** sarob has joined #openstack-dev20:12
*** Abhishek_ has quit IRC20:12
zaitcevI'll be darned, it's case-sensitive. I just checked20:12
*** buzztroll has quit IRC20:12
copelandyou're asking if I included "--os_region_name=regionOne" when running swift stat?20:12
zaitcevYes20:12
copelandI just treid it, same result.20:12
*** irimi has quit IRC20:12
*** buzztroll has joined #openstack-dev20:13
*** tanisdl has joined #openstack-dev20:13
copelandwould you like to see the line to make sure I'm not making a mistake?20:14
*** dstanek has quit IRC20:15
*** armax has quit IRC20:15
zaitcevoh... so it does                 if self.region_name and endpoint.get('region') != self.region_name:,  meaning if parameter is NOT supplied, then just grab first entry regardless of the region.20:15
*** Shaan7 has quit IRC20:16
copelandah, so shouldn't matter if specified or not, if I only have one region?20:16
zaitcevcopeland: would you pastebin the console session somewhere, as raw as possible (minding any passwords), with keystone service-list, keystone endpoint-list, and swift stat?20:17
*** sarob has quit IRC20:17
*** dstanek has joined #openstack-dev20:17
copelandsure, one minute.20:18
zaitcevcopeland: Not quite. If not specified in --os_region_name, then it does not matter what region is in Keystone: the lookup matches all. If it is specified, then it must match.20:18
*** dubsquared has joined #openstack-dev20:18
*** e0ne has quit IRC20:19
*** e0ne has joined #openstack-dev20:19
*** e0ne has quit IRC20:19
*** e0ne has joined #openstack-dev20:19
*** e0ne has quit IRC20:20
copelandsent.20:20
*** e0ne has joined #openstack-dev20:21
*** dubsquared has quit IRC20:21
zaitcevwait a moment, why is it calle "object" and not "object-store"?20:21
*** dubsquared has joined #openstack-dev20:21
zaitcev| 7563877905e840e0aec39089aeb557df |  swift   |  object  |    Swift Object Storage   |20:22
*** boris-42 has joined #openstack-dev20:22
*** buzztrol_ has joined #openstack-dev20:23
*** dstanek has quit IRC20:23
*** Abhishek_ has joined #openstack-dev20:24
*** che-arne has joined #openstack-dev20:24
*** buzztroll has quit IRC20:24
*** e0ne has quit IRC20:25
*** e0ne has joined #openstack-dev20:25
*** claytonc has joined #openstack-dev20:27
*** e0ne has quit IRC20:27
*** buzztroll has joined #openstack-dev20:27
*** buzztrol_ has quit IRC20:28
*** melwitt has joined #openstack-dev20:28
*** jtomasek has quit IRC20:28
*** loq_mac has joined #openstack-dev20:29
*** dstanek has joined #openstack-dev20:29
*** byeager has quit IRC20:29
*** loquacities has joined #openstack-dev20:31
*** loq_mac has quit IRC20:33
*** buzztrol_ has joined #openstack-dev20:35
*** buzztroll has quit IRC20:37
*** sarob has joined #openstack-dev20:37
*** sarob_ has joined #openstack-dev20:38
*** sarob has quit IRC20:39
*** sarob_ has quit IRC20:40
*** Abhishek_ has quit IRC20:40
*** sarob has joined #openstack-dev20:40
*** loquacities has quit IRC20:42
*** shinylasers has joined #openstack-dev20:42
*** radez is now known as radez_g0n320:44
*** sarob has quit IRC20:45
*** sarob_ has joined #openstack-dev20:45
*** derekh has quit IRC20:46
*** otherwiseguy has joined #openstack-dev20:47
*** sarob has joined #openstack-dev20:47
*** sarob_ has quit IRC20:48
*** buzztrol_ has quit IRC20:48
ayoungnkinder, rcrit stevemar, https://review.openstack.org/#/c/59848/ now with regex goodness20:49
*** buzztroll has joined #openstack-dev20:50
*** dprince has quit IRC20:50
*** vipul is now known as vipul-away20:51
*** nelsnelson is now known as nelsnelson_away20:52
*** litong has joined #openstack-dev20:53
*** mrunge` is now known as mrunge20:54
*** asselin has quit IRC20:55
*** tdruiva has quit IRC20:57
*** nelsnelson_away has quit IRC20:57
*** tdruiva has joined #openstack-dev20:57
*** buzztrol_ has joined #openstack-dev20:57
*** markwash has joined #openstack-dev20:58
*** buzztroll has quit IRC20:59
*** willingc has joined #openstack-dev20:59
*** n7165n has joined #openstack-dev20:59
*** tanisdl has quit IRC20:59
*** bdpayne has quit IRC21:00
*** Alexei_987 has left #openstack-dev21:01
*** buzztroll has joined #openstack-dev21:01
*** e0ne has joined #openstack-dev21:01
*** eglynn-afk is now known as eglynn21:01
*** tdruiva has quit IRC21:01
*** singhs has joined #openstack-dev21:02
*** apmelton1 is now known as apmelton21:02
*** buzztrol_ has quit IRC21:02
stevemarayoung: cool, will look @ it soon21:02
*** bdpayne has joined #openstack-dev21:02
ayoungstevemar, its only a start21:02
stevemarayoung: rgr that21:03
*** litong has quit IRC21:03
ayoungheh, you know why we say Roger?21:03
*** Alexei_987 has joined #openstack-dev21:03
ayoungCuz it used to be the Phonetic alphabet.  Back in WWII time21:03
ayoungnow the Phonetic alphabet has been NATOized and it i Romeo for R21:03
ayoungwhy R?  Stands for Received21:04
ayoungR is what a morse code operator would send to indicate the message had been recieved21:04
ayoungso the ARmy just blindly copied over 'R' from morse, and says "Roger" instead of "Received" even though it is the same amount of syllables.21:05
*** bdpayne_ has joined #openstack-dev21:05
*** SergeyLukjanov has quit IRC21:05
ayoungWe called it "200 years of tradition, untroubled by progress."21:05
*** buzztrol_ has joined #openstack-dev21:05
*** tanisdl has joined #openstack-dev21:05
*** morazi has quit IRC21:06
stevemarayoung, TIL the meaning behind roger.21:06
*** singhs has quit IRC21:06
*** singhs has joined #openstack-dev21:07
ayoungand knowing is half the battle.  THe other half is having sufficent ammunition21:07
*** buzztroll has quit IRC21:07
*** bdpayne has quit IRC21:07
stevemarI knew R is Romeo (for the natoized version), didn't know it was Roger back in the day, cool cool21:08
*** litong has joined #openstack-dev21:08
*** sandy__ has joined #openstack-dev21:08
*** sandywalsh_ has quit IRC21:08
*** luisbg has quit IRC21:09
*** luisbg has joined #openstack-dev21:09
*** luisbg has joined #openstack-dev21:09
*** harlowja has quit IRC21:09
*** mattymo has quit IRC21:09
*** mattymo has joined #openstack-dev21:09
*** harlowja has joined #openstack-dev21:09
*** DennyZhang has quit IRC21:10
*** buzztroll has joined #openstack-dev21:12
*** teran has quit IRC21:13
*** buzztrol_ has quit IRC21:13
*** willingc has quit IRC21:15
*** sballe has joined #openstack-dev21:15
*** noslzzp has quit IRC21:15
*** denis_makogon has quit IRC21:17
*** jprovazn has quit IRC21:17
*** teran has joined #openstack-dev21:17
*** loq_mac has joined #openstack-dev21:17
*** dperaza1 has left #openstack-dev21:18
*** buzztroll has quit IRC21:19
*** retr0h_ is now known as retr0h21:19
*** colinmcnamara has quit IRC21:19
*** colinmcn_ has quit IRC21:19
*** mikeoutland has quit IRC21:19
*** loquacities has joined #openstack-dev21:20
*** epim has joined #openstack-dev21:20
*** radix_ has quit IRC21:20
*** buzztroll has joined #openstack-dev21:22
*** loq_mac has quit IRC21:22
*** mikeoutland has joined #openstack-dev21:23
*** morazi has joined #openstack-dev21:24
*** loquacities has quit IRC21:25
*** vipul-away is now known as vipul21:25
*** nelsnelson has joined #openstack-dev21:25
*** Abhishek_ has joined #openstack-dev21:27
*** sushils has joined #openstack-dev21:27
*** jsavak has joined #openstack-dev21:28
*** dstanek has quit IRC21:28
*** byeager has joined #openstack-dev21:29
*** dstanek has joined #openstack-dev21:29
*** buzztrol_ has joined #openstack-dev21:30
*** dstanek_afk has quit IRC21:30
*** dkranz has quit IRC21:30
*** buzztroll has quit IRC21:30
*** dstanek has quit IRC21:30
nerminahi sarob21:30
ayoungbknudson, dolphm we good with https://review.openstack.org/#/c/59834/1  ?  I want to make sure we keep the momentum on the KVS reworking, as it is going to be in the critical path for the multiple Domains thing.21:31
ayoungand KVS depends on ^^21:32
*** joesavak has quit IRC21:32
*** tonix has quit IRC21:32
*** dstanek has joined #openstack-dev21:32
dstanekquit21:33
*** dstanek has quit IRC21:33
*** Chicago has joined #openstack-dev21:33
*** thomasem has joined #openstack-dev21:33
*** dvarga has quit IRC21:33
*** byeager has quit IRC21:34
*** thomasem has quit IRC21:34
*** thomasem has joined #openstack-dev21:34
*** buzztrol_ has quit IRC21:34
*** byeager has joined #openstack-dev21:34
*** buzztroll has joined #openstack-dev21:36
*** boden has quit IRC21:36
*** dstanek has joined #openstack-dev21:36
*** loq_mac has joined #openstack-dev21:37
*** willingc has joined #openstack-dev21:37
*** shinylasers has quit IRC21:38
*** sarob has quit IRC21:39
*** sarob has joined #openstack-dev21:39
*** crobertsrh is now known as _crobertsrh21:41
*** jasondotstar has quit IRC21:41
*** spzala has quit IRC21:43
*** sarob has quit IRC21:43
*** eglynn is now known as eglynn-afk21:45
*** dolphm has quit IRC21:45
*** e0ne has quit IRC21:47
*** lsmola has quit IRC21:47
*** e0ne has joined #openstack-dev21:47
*** colinmcnamara has joined #openstack-dev21:48
*** colinmcn_ has joined #openstack-dev21:48
*** bswartz has quit IRC21:48
*** noorul has quit IRC21:48
*** buzztroll has quit IRC21:49
*** rongze has quit IRC21:49
*** rudrarugge has quit IRC21:50
*** n7165n has quit IRC21:50
*** e0ne has quit IRC21:51
*** Abhishek_ has quit IRC21:51
*** Abhishek_ has joined #openstack-dev21:51
*** kyleh_ has joined #openstack-dev21:53
*** dubsquar_ has joined #openstack-dev21:53
*** CaptTofu has quit IRC21:53
*** eglynn-afk has quit IRC21:54
*** Abhishe__ has joined #openstack-dev21:54
*** Abhishek_ has quit IRC21:55
*** loq_mac has quit IRC21:55
*** loq_mac has joined #openstack-dev21:55
*** bdpayne_ has quit IRC21:56
*** dubsquared has quit IRC21:56
*** alunduil has joined #openstack-dev21:57
*** dubsquar_ has quit IRC21:58
*** yeylon__ has quit IRC21:59
flaper87sdague: ping21:59
*** drewlander has quit IRC22:00
*** buzztroll has joined #openstack-dev22:00
*** drewlander has joined #openstack-dev22:00
*** byeager has quit IRC22:01
*** loq_mac has quit IRC22:01
*** loq_mac has joined #openstack-dev22:01
*** harlowja has quit IRC22:02
*** mfer has quit IRC22:03
*** byeager has joined #openstack-dev22:05
*** ChanServ changes topic to "OpenStack development || Support is in #openstack"22:05
ekarlsodtroyer_zz: you around for some devstackness ?22:07
ekarlsohttp://paste.ubuntu.com/6522113/ produces a funny " = " under [DEFAULT] in my nova.conf22:08
ekarlsoor anyone else for that matter22:08
*** mfer has joined #openstack-dev22:08
dtroyer_zzekarlso: looking...22:08
*** noslzzp has joined #openstack-dev22:10
dtroyer_zzekarlso: is the '=' in addition to or instead of the config you specified22:10
*** dims has quit IRC22:10
ekarlsodtroyer_zz: let me paste that22:10
ekarlsoconfig22:10
*** otherwiseguy has quit IRC22:11
bknudsonreview 60000: https://review.openstack.org/#/c/60000/22:11
*** shakayumi has quit IRC22:12
*** vladikr has quit IRC22:12
*** mlavalle has joined #openstack-dev22:12
ekarlsodtroyer_zz: http://paste.ubuntu.com/6522149/22:12
*** bswartz has joined #openstack-dev22:14
*** zaitcev has quit IRC22:15
*** pabelanger has quit IRC22:15
*** bvandenh has quit IRC22:16
*** jdob has quit IRC22:16
dtroyer_zzekarlso: any change line 77 in your config has spaces in it?22:17
dtroyer_zzs/change/chance/22:17
ekarlsodoesn't dtroyer_zz22:18
*** jobewan has quit IRC22:18
*** sgordon has quit IRC22:18
*** rongze has joined #openstack-dev22:19
*** nkinder has quit IRC22:20
ekarlsodtroyer_zz: try it yourself and you'll see22:21
dtroyer_zzekarlso: I just did…it looks fine22:21
ekarlsohmmmms22:21
ekarlsolet me try to spin it in a vm22:21
ekarlsodiff one22:22
dtroyer_zzI'm looking through the log to give you something to search for...22:22
*** topol has quit IRC22:23
*** loq_mac has quit IRC22:23
*** drewlander has quit IRC22:24
*** peristeri has quit IRC22:24
dtroyer_zzekarlso: in stack.sh.log, skip to this line:22:24
dtroyer_zzget_meta_section /home/dtroyer/devstack/local.conf post-config '$NOVA_CONF'22:24
dtroyer_zzthen search for the iniset commands…I'm thinking there is one that will be badly-formed.  probably the last one in the nova group22:25
*** harlowja has joined #openstack-dev22:27
*** jpomero has quit IRC22:27
*** otherwiseguy has joined #openstack-dev22:27
*** rongze has quit IRC22:28
*** loq_mac has joined #openstack-dev22:28
ekarlsodtroyer_zz: indeed22:28
ekarlsohttp://paste.ubuntu.com/6522207/22:30
ekarlsoit's setting a empty thing :(22:31
*** morazi has quit IRC22:32
*** gyee has quit IRC22:33
*** glenng has quit IRC22:40
*** loquacities has joined #openstack-dev22:42
*** loq_mac has quit IRC22:42
*** gmurphy_ has joined #openstack-dev22:43
*** gmurphy_ has quit IRC22:44
dtroyer_zzThe awk code in merge_config_file() only looks for non-empty lines to emit the iniset command.  I'm re-trying with a space on the 'blank' line at the end of my NOVA_CONF section...22:44
*** willingc has quit IRC22:44
*** gmurphy has joined #openstack-dev22:45
dtroyer_zza) iniset() should exit early with empty attribute names; b) merge_config_file() shouldn't produce an empty iniset command...22:46
*** morazi has joined #openstack-dev22:47
*** Ryan_Lane has joined #openstack-dev22:49
*** rossella_s has joined #openstack-dev22:49
*** nermina has quit IRC22:50
*** sarob has joined #openstack-dev22:50
*** loquacities has quit IRC22:51
*** loq_mac has joined #openstack-dev22:51
dtroyer_zzekarlso: ok, I duplicated it by putting a single space on the blank line...22:52
ekarlsodtroyer_zz: so a bug ?22:52
ekarlso;p22:52
*** yjiang5_1 has quit IRC22:53
*** sarob has quit IRC22:54
*** bauzas has quit IRC22:55
*** rongze has joined #openstack-dev22:55
ekarlsodtroyer_zz: able to fix ?22:55
*** dkranz has joined #openstack-dev22:55
*** alex_klimov has quit IRC22:55
dtroyer_zztwo bugs and for an unexpected config line…I think you can work around it by making sure the blank lines in local.conf really are empty22:56
*** loq_mac has quit IRC22:56
ekarlsothey are dtroyer_zz ...'22:57
dtroyer_zzekarlso: ok…putting whitespace there was the only way I could duplicate it22:57
ekarlsooh, actually it had a empty line :/22:58
ekarlsojust didn't see it with vi22:58
*** rfolco_ has quit IRC22:58
*** Ryan_Lane has quit IRC22:58
*** bpokorny1 has quit IRC22:59
*** rongze has quit IRC23:00
*** burt has quit IRC23:00
*** sarob has joined #openstack-dev23:00
*** bauzas has joined #openstack-dev23:00
*** nati_ueno has joined #openstack-dev23:01
*** thomasem has quit IRC23:01
*** noslzzp has quit IRC23:02
*** kbringard has quit IRC23:03
*** neelashah has quit IRC23:03
*** noslzzp has joined #openstack-dev23:04
*** nelsnelson is now known as nelsnelson_away23:04
*** jecarey_ has joined #openstack-dev23:06
*** jecarey has quit IRC23:07
*** noslzzp has quit IRC23:08
*** nelsnelson_away is now known as nelsnelson23:09
*** rfolco_ has joined #openstack-dev23:10
*** lbragstad has quit IRC23:11
*** claytonc has quit IRC23:11
*** lbragstad has joined #openstack-dev23:11
*** noslzzp has joined #openstack-dev23:12
*** SumitNaiksatam has quit IRC23:13
*** eglynn-afk has joined #openstack-dev23:14
*** SumitNaiksatam has joined #openstack-dev23:14
*** jecarey_ has quit IRC23:15
*** nkinder has joined #openstack-dev23:15
*** SumitNaiksatam has quit IRC23:15
*** pcm_ has quit IRC23:16
*** tmclaugh[work] has joined #openstack-dev23:16
*** datsun_F40PH has quit IRC23:16
*** mfer has quit IRC23:16
*** nelsnelson is now known as nelsnelson_away23:16
*** ArxCruz has quit IRC23:17
ekarlsoapmelton: or sandy__ http://pastebin.com/FWc06bTF23:17
*** nelsnelson_away is now known as nelsnelson23:17
*** rfolco_ has quit IRC23:18
*** nelsnelson is now known as nelsnelson_away23:18
*** jamielennox|away is now known as jamielennox23:18
*** nelsnelson_away is now known as nelsnelson23:19
*** rfolco_ has joined #openstack-dev23:20
*** vipul is now known as vipul-away23:21
*** lbragstad has quit IRC23:22
*** FunnyLookinHat has quit IRC23:23
*** dubsquared has joined #openstack-dev23:23
*** gyee has joined #openstack-dev23:23
*** michchap has joined #openstack-dev23:24
*** nelsnelson is now known as nelsnelson_away23:25
*** gordc has quit IRC23:25
*** pabelanger_ has quit IRC23:26
*** pabelanger has joined #openstack-dev23:26
*** lbragstad has joined #openstack-dev23:26
*** rfolco_ has quit IRC23:27
lifelessmordred: is ./jenkins_jobs/openstack/common/setup.py pre-pbr ?23:28
clarkblifeless: yes23:28
*** nelsnelson_away is now known as nelsnelson23:29
*** ngoracke has quit IRC23:29
*** rossella_s has quit IRC23:29
*** rfolco_ has joined #openstack-dev23:32
lifelessclarkb: so, russellb has a glitching solum job23:33
*** lbragstad has quit IRC23:33
lifelessclarkb: it looks like it isn't substittuting {{ to { properly in the template23:33
clarkblifeless: which job?23:34
lifelessclarkb: and I was looking into the jjb code to see where param extraction and that sort of transform happens, but I'm utterly failing to find it.23:34
lifelessclarkb: https://git.openstack.org/cgit/openstack-infra/config/tree/modules/openstack_project/files/jenkins_job_builder/config/solum.yaml23:34
lifelessclarkb: http://logs.openstack.org/56/59256/2/check/gate-solum-devstack-dsvm/bfe2201/console.html23:34
clarkboh that is beacuse it isn't a job template, I should've caught that in review...23:34
lifelessclarkb: I've suggested putting cat $0 in before line 5 to see what is rendered into the sh script23:34
clarkbnot a JJB bug, just human error23:35
clarkbonly job-template get run through string formatting23:35
lifelessclarkb: so, two questions: a) how does the {{ -> { stuff happen in JJB (point me at the code please)23:35
russellboh.  and since it's not a template ...23:35
lifelessclarkb: and b) as a reviewer what should I look for to tell job-template vs not-template apart23:35
clarkblifeless: http://git.openstack.org/cgit/openstack-infra/jenkins-job-builder/tree/jenkins_jobs/builder.py#n37 does the formatting, so wherever that function is called23:36
*** faramir1 has joined #openstack-dev23:36
russellb- job:  vs - job-template:23:36
clarkblifeless: ^23:36
lifelessrussellb: ack, thanks23:36
russellbi didn't know either, just was looking at other examples ..23:36
russellbok, so now the failure makes perfect sense  yay :)23:36
lifelessso the swift job russellb found must have been a template too23:36
clarkbya the swift job is a template23:37
*** lbragstad has joined #openstack-dev23:37
*** jsavak has quit IRC23:37
lifelessoh, so the {{}} is dealt with by str.format(args) in CPython guts?23:37
*** Alexei_987 has quit IRC23:37
*** tmclaugh[work] has quit IRC23:37
lifelessexplains why I couldn't find a parser implementation in jjb23:37
clarkbyup23:38
clarkbI occasionally think jinja2 or some template language would be better23:38
clarkbbut mostly so that I can put logic into the templates which is probably not a good thing23:38
*** rfolco_ has quit IRC23:38
russellbwhere you at bot23:39
nkinderjamielennox: good morning23:39
russellbhttps://review.openstack.org/#/c/60110/23:39
jamielennoxnkinder: morning, i'm just having a look through your doc now23:39
nkinderjamielennox: looking into addressing the comments by bknudson now as well.23:39
nkinderjamielennox: I'm not sure about his question around the need to base64 encode the metadata objects.23:40
jamielennoxnkinder: that's what i've mostly responded to so far23:40
nkinderjamielennox: do you know if there was a particular reason simo did that?23:40
*** cpallares has quit IRC23:40
russellboh wrong channel.23:40
jamielennoxnkinder: It has to be treated specially because there is no guarantee of order with json -> python dictionaries. To make this stable then we would need to nest a JSON encoded dictionary string within a JSON document which is less that ideal.23:41
jamielennoxI'm not a fan of the base64 myself - do you have something else?23:41
jamielennoxI guess we could say that the metadata dictionary is alphabetically ordered then jsoned then the signature is computed - but that still is more trouble than simply transmitting the base64.23:41
nkinderjamielennox: ah, ok.  Does it make the HMAC easier?23:41
*** vipul-away is now known as vipul23:41
nkinderjamielennox: I don't have anything particular in mind yet.  I was curious to know the reason first.23:42
*** Ryan_Lane has joined #openstack-dev23:42
*** rfolco_ has joined #openstack-dev23:42
jamielennoxyea, i asked him about that one as well - it's not a great solution because it's just base64 encoded JSON but everything else seems like a lot of fiddly work23:42
*** eglynn-afk has quit IRC23:43
*** lbragstad has quit IRC23:43
*** lbragstad has joined #openstack-dev23:44
nkinderjamielennox: as long as there's a reason, that's fine.  I need to clarify the JSON in the API doc though.23:45
*** MaxV has quit IRC23:46
nkinderjamielennox: the metadata objects should be described, then we should show that the request/response just has "metadata" as a base64 string.23:46
*** Ryan_Lane has quit IRC23:46
*** MaxV has joined #openstack-dev23:46
jamielennoxhmm, bknudson is correct in that there shouldn't be Base64.encode(  in the json strings but it does a really good job of showing the expected format23:47
nkinderjamielennox: I suppose I should also replace "serialized" with "based64 encoded" in the doc to be more clear.23:47
dtroyer_zzekarlso: ok, try this out: https://review.openstack.org/#/c/60112/   I'm off to dinner now…23:47
bknudsonjamielennox: nkinder: Could define a canonical JSON formatting. (order of keys, whitespace)23:47
bknudson"normalized"23:47
*** eglynn-afk has joined #openstack-dev23:47
*** salv-orlando has quit IRC23:49
*** yamahata_ has joined #openstack-dev23:50
*** mrodden has quit IRC23:50
jamielennoxbknudson: maybe - but with all the crypto that is happening it is a really easy thing to break leading to a really difficult thing to figure out23:50
*** MaxV has quit IRC23:51
*** bdpayne has joined #openstack-dev23:51
bknudsonjamielennox: ok, I agree with the reason to go with JSON.23:51
bknudsonbut don't need to base-64 encode it.23:51
bknudsoncould just be JSON in a JSON string.23:52
*** thedodd has quit IRC23:52
*** mriedem has quit IRC23:52
jamielennoxbknudson: doesn't that lead to JSON doing a whole bunch of escaping?23:52
bknudsonjamielennox: JSON handles escaping just fine.23:52
*** eglynn-afk has quit IRC23:52
*** jasdeepH has joined #openstack-dev23:54
*** loq_mac has joined #openstack-dev23:54
ekarlsoBobBall: around ?23:54
*** lbragstad1 has joined #openstack-dev23:55
*** lbragstad has quit IRC23:55
*** byeager has quit IRC23:55
jamielennoxbknudson, nkinder: ok i can't immediately think of anything that that will break23:56
nkinderbknudson: I have addressed most of your other comments, so I should be able to get another update out once we get the base64 thing worked out.23:56
*** giulivo has quit IRC23:56
*** rongze has joined #openstack-dev23:56
nkinderjamielennox: did the 201 response code make sense to you for the 2 POST requests (get a ticket, create a group)?23:57
*** rraja has quit IRC23:57
jamielennoxnkinder: i'm ok with 201 for create a group, not sure about get a ticket23:58
nkinderjamielennox: the ticket one seems a bit odd.  I think of it as getting a ticket, not creating a resource.23:59
jamielennoxas bknudson said we may need a resource URL in the group create - because the group is something that will exist23:59
jamielennoxthe ticket is not something that you can ever reference, it is just something that you get23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!