Monday, 2014-01-06

*** dstanek_afk has quit IRC00:02
*** ozialien has joined #openstack-dev00:06
*** zzelle has quit IRC00:11
*** aeperezt has quit IRC00:12
*** beisner has quit IRC00:13
*** vartom11111117 has joined #openstack-dev00:17
*** radsy has joined #openstack-dev00:18
*** vartom11111116 has quit IRC00:19
*** yamahata has joined #openstack-dev00:19
*** dstanek_afk has joined #openstack-dev00:19
*** yamahata__ has quit IRC00:20
*** buzztroll has quit IRC00:22
*** radsy has quit IRC00:26
*** sarob has joined #openstack-dev00:26
*** sarob has quit IRC00:31
*** vartom11111118 has joined #openstack-dev00:41
*** yamahata_ has joined #openstack-dev00:42
*** vartom11111117 has quit IRC00:44
*** rongze has joined #openstack-dev00:44
*** ozialien_ has joined #openstack-dev00:49
*** rongze has quit IRC00:49
*** buzztroll has joined #openstack-dev00:50
*** yamahata has quit IRC00:54
*** Guest90126 has joined #openstack-dev01:00
*** sarob has joined #openstack-dev01:00
*** sarob has quit IRC01:05
*** nosnos has joined #openstack-dev01:06
*** pdevine has quit IRC01:08
*** buzztroll has quit IRC01:10
*** dkranz has quit IRC01:13
*** dstufft__ is now known as dstufft01:14
*** epopt37 has quit IRC01:14
*** yaguang has joined #openstack-dev01:25
*** epopt37 has joined #openstack-dev01:28
*** yaguang has quit IRC01:28
*** sthaha has joined #openstack-dev01:32
*** sthaha has quit IRC01:32
*** sthaha has joined #openstack-dev01:32
*** kbrierly has joined #openstack-dev01:32
*** sthaha has quit IRC01:32
*** sthaha has joined #openstack-dev01:32
*** sthaha has quit IRC01:32
*** sthaha has joined #openstack-dev01:32
*** fifieldt has joined #openstack-dev01:32
*** jingwang has joined #openstack-dev01:35
*** erkrnt has quit IRC01:40
*** yaguang has joined #openstack-dev01:46
*** herndon has joined #openstack-dev01:48
*** dstanek_afk has quit IRC01:49
*** sushils has quit IRC01:50
*** herndon has quit IRC01:51
*** xingchao_ has joined #openstack-dev01:57
*** tdruiva has joined #openstack-dev02:00
*** rongze has joined #openstack-dev02:00
*** ozialien has left #openstack-dev02:03
*** dstanek_afk has joined #openstack-dev02:09
*** vartom11111119 has joined #openstack-dev02:14
*** aeperezt has joined #openstack-dev02:14
*** tdruiva has quit IRC02:14
*** aeperezt has quit IRC02:15
*** haomaiwang has quit IRC02:15
*** vartom11111118 has quit IRC02:16
*** haomaiwang has joined #openstack-dev02:16
*** erkrnt has joined #openstack-dev02:17
*** erkules_ has joined #openstack-dev02:19
*** buzztroll has joined #openstack-dev02:20
*** zhikunliu has joined #openstack-dev02:22
*** erkules has quit IRC02:22
*** buzztroll has quit IRC02:25
*** sarob has joined #openstack-dev02:26
*** sarob has quit IRC02:31
*** xuhanp has joined #openstack-dev02:32
*** yamahata has joined #openstack-dev02:36
*** xuhanp has quit IRC02:36
*** xuhanp has joined #openstack-dev02:37
*** sdake_ has quit IRC02:39
*** sdake has joined #openstack-dev02:39
*** sdake has quit IRC02:39
*** sdake has joined #openstack-dev02:39
*** _ruhe is now known as ruhe02:40
*** neoXsys has quit IRC02:44
*** erkules_ has quit IRC02:47
*** erkules_ has joined #openstack-dev02:49
*** e0ne has quit IRC02:49
*** Edward-Zhang has joined #openstack-dev02:56
*** ruhe is now known as ruhe_away03:01
*** pdevine has joined #openstack-dev03:01
*** vartom111111110 has joined #openstack-dev03:06
*** paragan has joined #openstack-dev03:07
*** paragan has quit IRC03:07
*** paragan has joined #openstack-dev03:07
*** vartom11111119 has quit IRC03:10
*** ruhe_away is now known as _ruhe03:20
*** CaptTofu has quit IRC03:24
*** CaptTofu has joined #openstack-dev03:24
*** loq_mac has joined #openstack-dev03:26
*** sarob has joined #openstack-dev03:26
*** doug_shelley66 has quit IRC03:29
*** sarob has quit IRC03:31
*** alex_xu has joined #openstack-dev03:34
*** noslzzp has quit IRC03:34
*** rcleere has joined #openstack-dev03:37
*** mriedem1 has quit IRC03:42
*** matiu has joined #openstack-dev03:47
*** matiu has quit IRC03:47
*** matiu has joined #openstack-dev03:47
*** e0ne has joined #openstack-dev03:50
*** e0ne has quit IRC03:54
*** CaptTofu has quit IRC03:55
*** CaptTofu has joined #openstack-dev03:56
*** vartom111111111 has joined #openstack-dev03:59
*** Edward-Zhang has quit IRC04:00
*** vartom111111110 has quit IRC04:02
*** mohits has joined #openstack-dev04:05
*** lbragstad has joined #openstack-dev04:12
*** Edward-Zhang has joined #openstack-dev04:25
*** sarob has joined #openstack-dev04:26
*** loq_mac has quit IRC04:26
*** sarob has quit IRC04:31
*** mohits has quit IRC04:33
*** Guest90126 has quit IRC04:39
*** rongze has quit IRC04:40
*** kushal has joined #openstack-dev04:41
*** medberry has joined #openstack-dev04:47
*** medberry has quit IRC04:47
*** medberry has joined #openstack-dev04:47
*** chandankumar has joined #openstack-dev04:48
*** e0ne has joined #openstack-dev04:51
*** e0ne has quit IRC04:54
*** claxton has joined #openstack-dev04:55
*** jecarey has quit IRC04:57
*** mohits has joined #openstack-dev05:01
*** dstanek_afk has quit IRC05:12
*** chandankumar has quit IRC05:16
*** stevemar has joined #openstack-dev05:16
*** sarob has joined #openstack-dev05:18
*** dstanek_afk has joined #openstack-dev05:18
*** irenab has joined #openstack-dev05:19
*** moted has quit IRC05:20
*** urulama has joined #openstack-dev05:22
*** chandankumar has joined #openstack-dev05:23
*** sarob has quit IRC05:23
*** rdas has joined #openstack-dev05:24
*** Edward-Zhang has quit IRC05:28
*** sarob has joined #openstack-dev05:30
*** rushiagr has joined #openstack-dev05:31
*** sarob has quit IRC05:33
*** alex_xu has quit IRC05:33
*** sarob has joined #openstack-dev05:33
*** nosnos_ has joined #openstack-dev05:34
*** rraja has joined #openstack-dev05:34
*** tzumainn has joined #openstack-dev05:35
*** trevorj has quit IRC05:35
*** trevorj has joined #openstack-dev05:36
*** nosnos__ has joined #openstack-dev05:36
*** sarob has quit IRC05:37
*** nosnos_ has quit IRC05:37
*** sarob has joined #openstack-dev05:37
*** nosnos has quit IRC05:38
*** sarob has quit IRC05:39
*** sarob has joined #openstack-dev05:42
*** loq_mac has joined #openstack-dev05:42
*** mikeoutland has joined #openstack-dev05:42
*** sthaha has quit IRC05:42
*** mikeoutland has quit IRC05:43
*** mikeoutl_ has joined #openstack-dev05:43
*** vartom111111112 has joined #openstack-dev05:45
*** Edward-Zhang has joined #openstack-dev05:47
*** vartom111111111 has quit IRC05:48
*** garyk has quit IRC05:48
*** bashok has joined #openstack-dev05:48
*** neoXsys has joined #openstack-dev05:50
*** mikeoutl_ has quit IRC05:50
*** dstanek_afk has quit IRC05:50
*** tzumainn has quit IRC05:51
*** nshaikh has joined #openstack-dev05:53
*** sthaha has joined #openstack-dev05:55
*** neeti has joined #openstack-dev05:58
*** boris-42 has joined #openstack-dev06:03
*** e0ne has joined #openstack-dev06:04
*** nati_ueno has joined #openstack-dev06:05
*** markwash has quit IRC06:08
*** e0ne has quit IRC06:09
*** markwash has joined #openstack-dev06:11
*** sthaha has quit IRC06:13
*** rongze has joined #openstack-dev06:18
*** kpavel has joined #openstack-dev06:19
*** rongze_ has joined #openstack-dev06:21
*** haomaiwang has quit IRC06:21
*** haomaiwang has joined #openstack-dev06:22
*** rongze has quit IRC06:25
*** vartom111111113 has joined #openstack-dev06:26
*** haomaiwa_ has joined #openstack-dev06:29
*** xingchao_ has quit IRC06:29
*** vartom111111112 has quit IRC06:29
*** xingchao has joined #openstack-dev06:29
*** haomaiw__ has joined #openstack-dev06:30
*** haomaiwang has quit IRC06:33
*** ngoracke has quit IRC06:34
*** haomaiwa_ has quit IRC06:34
*** markwash has quit IRC06:35
*** tkammer has joined #openstack-dev06:35
*** sthaha has joined #openstack-dev06:39
*** jcoufal has joined #openstack-dev06:39
*** fandikurnia01 has joined #openstack-dev06:42
*** haomaiw__ has quit IRC06:42
*** haomaiwang has joined #openstack-dev06:43
*** sthaha has quit IRC06:43
*** zzelle has joined #openstack-dev06:44
*** alex_xu has joined #openstack-dev06:44
*** mrunge has joined #openstack-dev06:45
*** Rissmann has joined #openstack-dev06:50
*** tshefi has joined #openstack-dev06:52
*** obondarev_ has joined #openstack-dev06:53
*** comay has quit IRC06:54
*** factor_ has joined #openstack-dev06:54
*** zhikunliu has quit IRC06:56
*** mkoderer_ is now known as mkoderer06:57
*** erkrnt has quit IRC07:01
*** xingchao_ has joined #openstack-dev07:04
*** nosnos__ has quit IRC07:06
*** nosnos has joined #openstack-dev07:06
*** kdas_ has joined #openstack-dev07:06
*** xingchao has quit IRC07:08
*** nmagnezi has joined #openstack-dev07:08
*** kushal has quit IRC07:09
*** vartom111111114 has joined #openstack-dev07:12
*** sthaha has joined #openstack-dev07:14
*** garyk has joined #openstack-dev07:14
*** sthaha has quit IRC07:14
*** sthaha has joined #openstack-dev07:14
*** vartom111111113 has quit IRC07:15
*** loq_mac has quit IRC07:15
*** sarob has quit IRC07:16
*** persia has joined #openstack-dev07:17
*** sarob has joined #openstack-dev07:18
*** rcleere has quit IRC07:21
*** doron_afk has joined #openstack-dev07:21
*** sarob has quit IRC07:22
*** rha has joined #openstack-dev07:29
*** rha has quit IRC07:30
*** rha has joined #openstack-dev07:30
*** evgenyf has joined #openstack-dev07:30
*** sarob has joined #openstack-dev07:32
*** mjbright has quit IRC07:34
*** sarob has quit IRC07:35
*** jprovazn has joined #openstack-dev07:35
*** loq_mac has joined #openstack-dev07:35
*** stevemar has quit IRC07:35
*** kashyap` is now known as kashyap07:36
*** rha has quit IRC07:38
*** evgenyf has quit IRC07:38
*** rha has joined #openstack-dev07:38
*** amuller has joined #openstack-dev07:38
*** yolanda_ has joined #openstack-dev07:39
*** rmk has quit IRC07:40
*** afazekas has joined #openstack-dev07:42
*** rmk has joined #openstack-dev07:42
*** Drankis has joined #openstack-dev07:43
*** pdevine has quit IRC07:44
*** Edward-Zhang has quit IRC07:44
*** jtomasek has joined #openstack-dev07:45
*** NikitaKonovalov has joined #openstack-dev07:45
*** ifarkas has joined #openstack-dev07:46
*** afazekas has quit IRC07:47
*** persia_ has joined #openstack-dev07:48
*** radix has joined #openstack-dev07:48
*** aspiers_ has joined #openstack-dev07:48
*** sc68cal has joined #openstack-dev07:48
*** jyhc has joined #openstack-dev07:48
*** cyeoh has joined #openstack-dev07:48
*** sudorandom has joined #openstack-dev07:48
*** briancline has joined #openstack-dev07:48
*** sebasmagri has joined #openstack-dev07:48
*** zigo has joined #openstack-dev07:48
*** edleafe has joined #openstack-dev07:48
*** morganfainberg has joined #openstack-dev07:48
*** rm_work|away has joined #openstack-dev07:48
*** Samos123 has joined #openstack-dev07:48
*** CrackerJackMack has joined #openstack-dev07:48
*** buzztroll has joined #openstack-dev07:48
*** sc68cal is now known as Guest6884207:49
*** persia_ is now known as Guest6066507:49
*** ifarkas has quit IRC07:49
*** doug_shelley66 has joined #openstack-dev07:50
*** Edward-Zhang has joined #openstack-dev07:52
*** rushiagr is now known as rushiagr_away07:52
*** mindpixel has joined #openstack-dev07:56
*** claxton has quit IRC07:58
*** ifarkas has joined #openstack-dev07:58
*** flaper87|afk is now known as flaper8708:00
*** xga has joined #openstack-dev08:01
*** afazekas has joined #openstack-dev08:01
*** amuller_ has joined #openstack-dev08:02
*** yolanda_ has quit IRC08:02
*** yolanda_ has joined #openstack-dev08:02
*** Guest60665 has quit IRC08:02
*** Guest60665 has joined #openstack-dev08:02
*** persia is now known as Guest2649908:03
*** Guest60665 is now known as persia08:03
*** persia__ has joined #openstack-dev08:03
*** persia__ is now known as persia_08:03
*** persia_ has quit IRC08:04
*** persia_ has joined #openstack-dev08:04
*** amuller has quit IRC08:04
*** claxton has joined #openstack-dev08:05
*** persia_ has left #openstack-dev08:07
*** bauzas has joined #openstack-dev08:09
*** rushiagr_away is now known as rushiagr08:10
*** vartom111111114 has quit IRC08:10
*** doron_afk is now known as doron08:10
*** pasquier-s has joined #openstack-dev08:12
*** fbo is now known as fbo_away08:12
*** urulama_ has joined #openstack-dev08:12
*** urulama has quit IRC08:12
*** doron is now known as doron_afk08:14
*** yolanda_ has quit IRC08:15
*** yolanda_ has joined #openstack-dev08:16
*** Adri2000 has joined #openstack-dev08:17
*** Adri2000 has quit IRC08:17
*** Adri2000 has joined #openstack-dev08:17
*** xgsa has joined #openstack-dev08:17
*** yolanda has joined #openstack-dev08:17
*** yolanda has quit IRC08:18
*** ewarszaw has joined #openstack-dev08:19
*** yolanda has joined #openstack-dev08:19
ttxsdague: yeah, apparently it's not really oslo.rootwrap related08:20
*** sahid has joined #openstack-dev08:21
*** loq_mac has quit IRC08:21
*** jamielennox is now known as jamielennox|away08:21
*** claxton has quit IRC08:21
*** loq_mac has joined #openstack-dev08:23
*** yeylon_ has joined #openstack-dev08:23
*** lsmola_ has joined #openstack-dev08:26
*** amuller_ has quit IRC08:26
*** bvandenh has joined #openstack-dev08:29
*** yolanda has quit IRC08:29
*** yolanda has joined #openstack-dev08:29
*** doron_afk is now known as doron08:30
*** abk has joined #openstack-dev08:30
*** sthaha has quit IRC08:32
*** comay has joined #openstack-dev08:37
*** nshaikh has left #openstack-dev08:38
*** UKn0Me has quit IRC08:38
*** neeti has quit IRC08:46
*** jistr has joined #openstack-dev08:49
*** mtreinish has quit IRC08:52
*** doron is now known as doron_afk08:53
*** neeti has joined #openstack-dev08:53
*** mtreinish has joined #openstack-dev08:55
*** doron_afk is now known as doron08:55
*** yassine has joined #openstack-dev08:56
*** safchain has joined #openstack-dev08:56
*** UKn0Me has joined #openstack-dev08:57
*** pixelb has joined #openstack-dev08:58
*** UKn0Me has quit IRC08:58
*** UKn0Me has joined #openstack-dev08:58
*** yolanda has quit IRC08:58
*** yolanda has joined #openstack-dev08:59
*** MaxV has joined #openstack-dev08:59
*** loq_mac has quit IRC09:02
*** loq_mac has joined #openstack-dev09:03
*** jpich has joined #openstack-dev09:04
*** loq_mac has quit IRC09:04
*** loq_mac has joined #openstack-dev09:05
*** doron is now known as doron_afk09:08
*** doron_afk is now known as doron09:08
*** ygbo has joined #openstack-dev09:09
*** reidrac has joined #openstack-dev09:09
*** jroovers has joined #openstack-dev09:10
*** derekh has joined #openstack-dev09:10
*** JordanP has joined #openstack-dev09:11
*** claxton has joined #openstack-dev09:12
*** l_a_m has joined #openstack-dev09:13
*** zzelle_ has joined #openstack-dev09:13
*** zzelle_ has quit IRC09:14
*** zzelle_ has joined #openstack-dev09:14
*** jroovers has quit IRC09:15
*** yolanda has quit IRC09:15
*** amuller_ has joined #openstack-dev09:16
*** yolanda has joined #openstack-dev09:18
* SpamapS makes sure inbox is 0 before going to sleep .. post-holiday ML blitz is imminent09:19
*** WhiteAnthrax has quit IRC09:19
*** zz_WhiteAnthrax has joined #openstack-dev09:19
*** zz_WhiteAnthrax is now known as WhiteAnthrax09:19
*** andreaf has joined #openstack-dev09:20
*** matrohon has joined #openstack-dev09:20
*** WhiteAnthrax has quit IRC09:20
*** jroovers has joined #openstack-dev09:21
*** mmagr has joined #openstack-dev09:21
*** WhiteAnthrax has joined #openstack-dev09:21
*** rongze_ has quit IRC09:23
*** avishayb has joined #openstack-dev09:24
*** sumanthns has joined #openstack-dev09:27
*** eglynn has joined #openstack-dev09:27
*** yolanda has quit IRC09:29
*** yolanda has joined #openstack-dev09:29
*** amuller_ is now known as amuller09:32
*** yolanda has quit IRC09:32
*** johnthetubaguy has joined #openstack-dev09:32
*** KeithSha_ is now known as KeithSharp09:33
*** yolanda has joined #openstack-dev09:33
*** xga has quit IRC09:34
*** Mandell has quit IRC09:34
*** Edward-Zhang has quit IRC09:35
*** xga has joined #openstack-dev09:36
*** fbo_away is now known as fbo09:40
*** loq_mac has quit IRC09:43
*** rongze has joined #openstack-dev09:43
*** ndipanov has joined #openstack-dev09:43
*** yolanda has quit IRC09:43
*** ndipanov has quit IRC09:44
*** UKn0Me has quit IRC09:44
*** UKn0Me has joined #openstack-dev09:44
*** ndipanov has joined #openstack-dev09:47
*** johnthetubaguy1 has joined #openstack-dev09:48
*** jp_at_hp has joined #openstack-dev09:48
*** KeithSharp has quit IRC09:49
*** johnthetubaguy has quit IRC09:51
*** KeithSharp has joined #openstack-dev09:52
*** nati_ueno has quit IRC09:54
*** giulivo has joined #openstack-dev09:55
*** athomas has joined #openstack-dev09:56
*** flor3n has joined #openstack-dev09:58
*** enikanorov has joined #openstack-dev09:58
*** tris has quit IRC09:58
*** flor3n is now known as florentflament09:58
*** loq_mac has joined #openstack-dev09:59
*** tris has joined #openstack-dev09:59
*** corXi has joined #openstack-dev10:00
*** yolanda has joined #openstack-dev10:01
*** nati_ueno has joined #openstack-dev10:01
*** yolanda has quit IRC10:02
*** Guest34292 is now known as cloud_in_dublin10:02
*** cloud_in_dublin is now known as surya10:02
*** yolanda has joined #openstack-dev10:03
*** surya is now known as nsp10:03
*** nsp is now known as nnnnn10:03
*** nnnnn is now known as nsp10:03
*** loq_mac has quit IRC10:04
*** loq_mac has joined #openstack-dev10:04
*** iartarisi has joined #openstack-dev10:06
*** nsp has quit IRC10:06
*** nsp has joined #openstack-dev10:06
*** neeti has quit IRC10:06
*** UKn0Me has quit IRC10:06
*** nshaikh has joined #openstack-dev10:07
*** neeti has joined #openstack-dev10:07
*** martyntaylor has joined #openstack-dev10:07
*** mohits has quit IRC10:07
*** fandikurnia01 has quit IRC10:08
*** mkerrin has joined #openstack-dev10:09
*** akrivoka has joined #openstack-dev10:10
*** aditirav has joined #openstack-dev10:10
*** xga_ has joined #openstack-dev10:10
*** xga has quit IRC10:10
*** martyntaylor has quit IRC10:11
*** UKn0Me has joined #openstack-dev10:11
*** xuhanp has quit IRC10:12
*** che-arne has joined #openstack-dev10:13
*** doron is now known as doron_afk10:13
*** yassine has quit IRC10:13
*** yassine has joined #openstack-dev10:14
*** avishayb has quit IRC10:14
*** alex_xu has quit IRC10:15
*** urulama_ has quit IRC10:15
*** kpavel has quit IRC10:16
*** mancdaz_away is now known as mancdaz10:18
*** factor_ has quit IRC10:18
*** urulama has joined #openstack-dev10:18
*** yolanda has quit IRC10:18
*** yolanda has joined #openstack-dev10:19
*** KeithSharp has quit IRC10:19
*** doron_afk is now known as doron10:20
*** yolanda has joined #openstack-dev10:20
*** KeithSharp has joined #openstack-dev10:21
*** urulama has quit IRC10:24
*** doron is now known as doron_afk10:24
*** urulama has joined #openstack-dev10:25
*** urulama has quit IRC10:27
*** obondarev_ has quit IRC10:27
*** doron_afk is now known as doron10:28
*** sushil_ has joined #openstack-dev10:28
*** paragan has quit IRC10:30
*** martyntaylor has joined #openstack-dev10:32
*** yolanda has quit IRC10:35
*** yolanda has joined #openstack-dev10:36
*** omachace has joined #openstack-dev10:37
*** loq_mac has quit IRC10:38
*** johnthetubaguy has joined #openstack-dev10:40
*** yassine has quit IRC10:40
*** johnthetubaguy1 has quit IRC10:42
*** akrivoka has quit IRC10:43
*** athomas has quit IRC10:45
*** akrivoka has joined #openstack-dev10:45
*** bashok has quit IRC10:50
*** Andre221 has joined #openstack-dev10:50
Andre221Anyone online?10:51
*** yolanda has quit IRC10:51
*** yassine has joined #openstack-dev10:52
rushiagrAndre221: many :)10:53
Andre221Guys....someone help me pls... I've deployed openstack havana with devstack... I can't ping an instance...it says destination host unreachable...10:54
*** doron is now known as doron_afk10:54
Andre221I don't know what to do :(10:55
*** rushiagr2 has joined #openstack-dev10:57
*** factor_ has joined #openstack-dev10:57
*** nati_ueno has quit IRC10:58
*** rfolco has joined #openstack-dev10:59
*** rushiagr has quit IRC11:00
*** doron_afk is now known as doron11:03
*** lucasagomes has joined #openstack-dev11:03
*** rongze has quit IRC11:04
*** rongze has joined #openstack-dev11:05
*** jroovers has quit IRC11:05
*** kdas_ has quit IRC11:06
*** lucasagomes has quit IRC11:07
*** yolanda has joined #openstack-dev11:07
*** yolanda has quit IRC11:07
*** yamahata has quit IRC11:08
*** yolanda has joined #openstack-dev11:09
*** rongze has quit IRC11:09
*** avishayb has joined #openstack-dev11:11
*** ihrachys has quit IRC11:12
*** kdas_ has joined #openstack-dev11:15
*** pcm_ has joined #openstack-dev11:15
*** lucasagomes has joined #openstack-dev11:16
*** yaguang has quit IRC11:16
*** pcm_ has quit IRC11:18
*** pcm_ has joined #openstack-dev11:19
*** doron is now known as doron_afk11:21
*** Sumeniac has joined #openstack-dev11:23
jang1jay-lau-513: is that you? I've no desire to accidentally sound patronising on a gerrit review ( https://review.openstack.org/#/c/64939/ ) - my objection's that this is potentially inviting surprise (and may need reverting) in the future, but if those API controllers are actually "final" I've no problem with that.11:23
jay-lau-513jang1: v2 might be final, as we are going to frozen it in ice-house211:25
*** lucasagomes has quit IRC11:25
*** lucasagomes has joined #openstack-dev11:26
jay-lau-513jang1, but for v3, might not be final...11:26
jang1my objection's a general one - I'm not accusing you of not understanding the MRO :-)11:26
jang1but if anyone ever takes it into their head to mix in something with these controllers, that change'll be a pain. That's all.11:27
*** lucasagomes has quit IRC11:27
jang1(well, there's that, plus a smidgen of general worry about setting precedents and pedagogy, but I have no desire o be dogmatic about it)11:28
jang1(stand-up here, back in 10-15)11:29
*** yolanda has quit IRC11:29
*** yolanda has joined #openstack-dev11:30
jay-lau-513ok, let me check more for this11:31
*** Rissmann1 has joined #openstack-dev11:34
*** rongze has joined #openstack-dev11:35
*** Rissmann has quit IRC11:36
*** factor_ has quit IRC11:36
*** ArxCruz has joined #openstack-dev11:37
*** sthaha has joined #openstack-dev11:38
*** sthaha has joined #openstack-dev11:38
*** rongze has quit IRC11:40
*** avishayb has quit IRC11:41
jay-lau-513jang1, please check my answer on gerrit review. thx11:42
*** rushiagr2 is now known as rushiagr_away11:43
*** e0ne has joined #openstack-dev11:43
*** rkukura has left #openstack-dev11:44
*** athomas has joined #openstack-dev11:46
*** yassine has quit IRC11:46
*** obondarev_ has joined #openstack-dev11:47
*** jroovers has joined #openstack-dev11:47
*** rushiagr_away is now known as rushiagr211:47
*** MaxV has quit IRC11:49
*** factor_ has joined #openstack-dev11:49
jang1roger.11:50
*** CaptTofu has quit IRC11:52
*** CaptTofu has joined #openstack-dev11:52
*** athomas has quit IRC11:57
*** avishayb has joined #openstack-dev11:59
*** dims_ is now known as dims11:59
*** obondarev_ has quit IRC12:01
*** tshefi has quit IRC12:03
*** obondarev_ has joined #openstack-dev12:04
*** doron_afk is now known as doron12:06
*** erkules_ is now known as erkules12:07
*** mosulica has joined #openstack-dev12:07
*** mosulica_ has joined #openstack-dev12:08
*** mnaser has quit IRC12:08
*** mnaser has joined #openstack-dev12:11
*** yamahata has joined #openstack-dev12:11
*** athomas has joined #openstack-dev12:11
*** alex_xu has joined #openstack-dev12:16
*** claxton has left #openstack-dev12:17
*** urulama has joined #openstack-dev12:20
*** KeithSharp has quit IRC12:20
*** nshaikh has left #openstack-dev12:23
*** KeithSharp has joined #openstack-dev12:23
*** READ10 has quit IRC12:24
*** e0ne has quit IRC12:24
sdaguettx: what isn't oslo related? sorry, apparently the question was asked so long ago it's lost in the mist of time12:26
ttxsdague: ignore me -- was that weird review about f20 deps that oslo.rootwrap would have triggered, now abandoned12:27
*** rtheis has joined #openstack-dev12:28
sdagueoh right12:28
sdagueyeh, hopefully the author on the correct fix will address the couple of issues I posted12:29
*** jruzicka has joined #openstack-dev12:30
*** mosulica_ has quit IRC12:30
*** sumanthns has quit IRC12:31
sdagueflaper87: as alvaro hasn't come back with fixes yet on - https://review.openstack.org/#/c/63647/, feel free to take over the patch. I'd like to get that in.12:32
flaper87sdague: kk, I will12:33
*** danielbruno has joined #openstack-dev12:33
flaper87sdague: also, I just ran a recheck on this one. Could you take another look? https://review.openstack.org/#/c/63754/12:33
sdagueso we need to take that to the list. Because this all wraps in how we handle dependecies and what we test when.12:34
*** rongze has joined #openstack-dev12:35
*** nosnos has quit IRC12:36
flaper87sdague: kk, are you planning to do that or should I?12:36
flaper87sdague: unfortunately, there's a bug I need to fix in glance that depends on this. I'd like to sort it out asap12:37
sdagueso why doesn't oslo just release?12:38
sdagueI feel like we went around all this with the taskflow thread, and dhellmann's pov is version numbers are cheap12:38
*** rongze has quit IRC12:39
*** erlon has joined #openstack-dev12:39
*** alex_xu has quit IRC12:40
*** aditirav has quit IRC12:40
*** alex_xu has joined #openstack-dev12:40
*** doron is now known as doron_afk12:40
flaper87sdague: I admit I still have to catch up on that thread.12:42
*** tdruiva has joined #openstack-dev12:42
flaper87sdague: I'll read it now12:42
sdagueyeh, so maybe go through that, and let's see if dhellmann gets on in a bit12:43
flaper87sdague: https://review.openstack.org/#/c/63647/ done!12:43
sdagueespecially now that pip 1.5 refuses to install from external urls by default now12:43
*** dsirrine has joined #openstack-dev12:44
sdagueflaper87: you didn't remove the old fedora versions :)12:44
sdaguewhich was the bulk of my -112:44
*** slagle_ has quit IRC12:44
sdaguef16 and f17 definitely need to go :)12:44
flaper87sdague: which I obvously didn't read! Dough! :D12:44
flaper87lemme do that12:45
*** doron_afk is now known as doron12:45
*** dsirrine is now known as dsirrine|catchup12:45
*** slagle has joined #openstack-dev12:45
*** e0ne has joined #openstack-dev12:46
*** tmclaugh[work] has joined #openstack-dev12:46
*** jdob has joined #openstack-dev12:49
*** MaxV has joined #openstack-dev12:49
*** tdruiva has quit IRC12:50
*** tdruiva has joined #openstack-dev12:50
*** tmclaugh[work] has quit IRC12:51
*** tmclaugh[work] has joined #openstack-dev12:53
*** MaxV has quit IRC12:54
*** ihrachys has joined #openstack-dev12:57
*** yassine has joined #openstack-dev12:57
*** eglynn is now known as eglynn-lunch12:59
*** FunnyLookinHat has joined #openstack-dev12:59
*** Rissmann has joined #openstack-dev13:00
*** Rissmann has quit IRC13:00
*** Rissmann has joined #openstack-dev13:01
*** marekd|away is now known as marekd13:02
*** Rissmann1 has quit IRC13:02
dolphm\o/13:02
marekddolphm: o/13:02
*** kdas_ has quit IRC13:06
*** neeti has quit IRC13:08
*** rushiagr2 has quit IRC13:08
*** xga_ has quit IRC13:08
*** urulama has quit IRC13:09
*** xga has joined #openstack-dev13:09
*** alex_xu has quit IRC13:09
*** simo_ is now known as simo13:09
*** simo has quit IRC13:09
*** simo has joined #openstack-dev13:09
*** mkollaro has joined #openstack-dev13:11
*** mugsie_ is now known as mugsie13:13
*** mugsie has joined #openstack-dev13:13
*** MaxV has joined #openstack-dev13:15
*** bswartz has quit IRC13:16
*** zul has quit IRC13:16
*** juice has quit IRC13:17
*** feleouet has joined #openstack-dev13:17
*** sandywalsh has joined #openstack-dev13:18
*** juice has joined #openstack-dev13:19
*** zul has joined #openstack-dev13:20
*** rdas has quit IRC13:21
*** markvoelker has joined #openstack-dev13:24
*** jtomasek has quit IRC13:24
*** rongze has joined #openstack-dev13:25
*** jtomasek has joined #openstack-dev13:25
*** gordc has joined #openstack-dev13:26
*** CaptTofu has quit IRC13:29
*** CaptTofu has joined #openstack-dev13:29
*** Rissmann has quit IRC13:29
*** jtomasek has quit IRC13:29
*** jtomasek has joined #openstack-dev13:30
*** Rissmann has joined #openstack-dev13:30
*** neelashah has joined #openstack-dev13:34
*** bauzas has quit IRC13:40
Andre221I don't know what to do :(13:40
Andre221Guys....someone help me pls... I've deployed openstack havana with devstack... I can't ping an instance...it says destination host unreachable...13:40
*** morazi has joined #openstack-dev13:42
*** huats_ has quit IRC13:43
*** mburned` is now known as mburned13:44
*** huats has joined #openstack-dev13:44
*** huats has joined #openstack-dev13:44
*** doron is now known as doron_afk13:45
*** jdob has quit IRC13:45
*** doug_shelley66 has quit IRC13:46
*** jtomasek has quit IRC13:47
*** chandankumar has quit IRC13:47
*** jdob has joined #openstack-dev13:48
*** CaptTofu has quit IRC13:49
*** CaptTofu has joined #openstack-dev13:50
*** sgordon has joined #openstack-dev13:50
*** sgordon has joined #openstack-dev13:50
*** yamahata has quit IRC13:50
*** jtomasek has joined #openstack-dev13:51
*** herndon has joined #openstack-dev13:51
*** joesavak has joined #openstack-dev13:51
*** JordanP has quit IRC13:52
*** Rissmann has quit IRC13:57
*** Rissmann has joined #openstack-dev13:58
*** morazi has quit IRC13:58
*** ngoracke has joined #openstack-dev14:02
*** tzumainn has joined #openstack-dev14:03
*** paragan has joined #openstack-dev14:04
*** paragan has quit IRC14:04
*** paragan has joined #openstack-dev14:04
*** antigluk has quit IRC14:04
*** dkranz has joined #openstack-dev14:04
*** Drankis has quit IRC14:05
*** jasondotstar has joined #openstack-dev14:06
*** JordanP has joined #openstack-dev14:06
*** eharney has quit IRC14:07
*** antigluk has joined #openstack-dev14:08
*** jecarey has joined #openstack-dev14:08
*** dvarga has joined #openstack-dev14:08
*** Drankis has joined #openstack-dev14:09
*** dstanek_afk has joined #openstack-dev14:10
*** JordanP has quit IRC14:10
*** pschaef has joined #openstack-dev14:11
*** dstanek_afk is now known as dstaek14:12
*** dstaek is now known as dstanek14:12
*** evgenyf has joined #openstack-dev14:14
*** zzelle_ has quit IRC14:16
*** morazi has joined #openstack-dev14:16
*** mriedem has joined #openstack-dev14:17
*** Mandell has joined #openstack-dev14:18
*** dprince has joined #openstack-dev14:18
*** riskable has joined #openstack-dev14:19
*** herndon has quit IRC14:19
*** JordanP has joined #openstack-dev14:23
Guest6884214:24
Guest6884214:24
*** Guest68842 has quit IRC14:24
*** sc68cal has joined #openstack-dev14:24
*** sc68cal has quit IRC14:24
*** sc68cal has joined #openstack-dev14:24
*** otherwiseguy has joined #openstack-dev14:27
*** rushiagr2 has joined #openstack-dev14:27
*** teju has joined #openstack-dev14:28
*** radix_ has joined #openstack-dev14:28
*** radez_g0n3 is now known as radez14:31
*** annegentle_ has joined #openstack-dev14:31
*** mrodden has joined #openstack-dev14:32
*** blamar has joined #openstack-dev14:33
*** openstack has joined #openstack-dev14:33
*** prad has joined #openstack-dev14:34
*** xga has quit IRC14:34
*** xga_ has joined #openstack-dev14:35
*** martyntaylor has quit IRC14:35
*** vladikr has joined #openstack-dev14:36
*** otherwiseguy has quit IRC14:37
*** peristeri has joined #openstack-dev14:38
*** rraja has quit IRC14:38
*** jaypipes has joined #openstack-dev14:39
*** jaypipes has quit IRC14:39
*** FunnyLookinHat has quit IRC14:39
*** jaypipes has joined #openstack-dev14:39
*** jgrimm has quit IRC14:39
*** aeperezt has joined #openstack-dev14:41
*** jay-lau-513 has quit IRC14:41
*** jay-lau-513 has joined #openstack-dev14:42
*** mfer has joined #openstack-dev14:44
*** READ10 has joined #openstack-dev14:44
*** dbalog has joined #openstack-dev14:46
*** bknudson has joined #openstack-dev14:46
*** irenab has quit IRC14:46
*** rkukura has joined #openstack-dev14:46
*** jobewan has joined #openstack-dev14:47
*** eharney has joined #openstack-dev14:47
*** glenng has joined #openstack-dev14:48
*** dstufft has quit IRC14:49
*** dstufft has joined #openstack-dev14:50
*** lukego has joined #openstack-dev14:50
*** fire has joined #openstack-dev14:50
*** armax has joined #openstack-dev14:50
*** yamahata has joined #openstack-dev14:51
*** jnoller has joined #openstack-dev14:52
*** stevemar has joined #openstack-dev14:52
*** martyntaylor has joined #openstack-dev14:53
*** mrunge has quit IRC14:53
*** beekneemech is now known as bnemec14:54
*** dkuffner has joined #openstack-dev14:57
*** UKn0Me has quit IRC14:57
*** UKn0Me has joined #openstack-dev14:57
*** Andre221 has quit IRC14:57
*** rongze has quit IRC14:58
*** nkinder has joined #openstack-dev14:58
*** rongze has joined #openstack-dev14:59
*** doug_shelley66 has joined #openstack-dev14:59
*** avishayb has quit IRC14:59
*** UKn0Me has quit IRC14:59
*** UKn0Me has joined #openstack-dev14:59
*** CaptTofu has quit IRC15:00
*** Drankis has quit IRC15:00
*** Drankis has joined #openstack-dev15:01
*** evgenyf has quit IRC15:02
*** morazi has quit IRC15:03
*** aditirav has joined #openstack-dev15:03
*** rongze has quit IRC15:03
*** xingchao_ has quit IRC15:03
*** mgagne has joined #openstack-dev15:03
*** byeager has joined #openstack-dev15:05
*** aditirav has quit IRC15:05
*** ayoung has joined #openstack-dev15:05
*** aditirav has joined #openstack-dev15:06
*** utlemming has joined #openstack-dev15:06
*** mgagne1 has joined #openstack-dev15:06
*** luisg has quit IRC15:07
*** luisg has joined #openstack-dev15:07
*** mgagne has quit IRC15:08
*** _ruhe has quit IRC15:09
*** blentz has quit IRC15:09
*** byeager_ has joined #openstack-dev15:09
*** salv-orlando_ has joined #openstack-dev15:09
*** blentz has joined #openstack-dev15:10
*** creiht has quit IRC15:10
*** _ruhe has joined #openstack-dev15:10
*** creiht has joined #openstack-dev15:11
*** nkinder has quit IRC15:11
*** Guest97522 has quit IRC15:11
*** tr3buchet has quit IRC15:11
*** krotscheck has joined #openstack-dev15:11
*** notmyname has quit IRC15:12
*** jog0 has joined #openstack-dev15:12
*** dkranz has quit IRC15:12
*** byeager has quit IRC15:12
*** rwsu has joined #openstack-dev15:12
*** paragan has quit IRC15:13
*** jmckind has joined #openstack-dev15:13
*** salv-orlando has quit IRC15:13
*** salv-orlando_ is now known as salv-orlando15:13
*** 64MAA4HHT has quit IRC15:13
*** notmyname has joined #openstack-dev15:13
*** belliott has quit IRC15:14
*** bswartz has joined #openstack-dev15:14
*** che-arne has quit IRC15:14
*** xarg_ has joined #openstack-dev15:15
*** vijendar has joined #openstack-dev15:16
*** belliott has joined #openstack-dev15:16
*** morazi has joined #openstack-dev15:17
*** zz_ewindisch is now known as ewindisch15:17
*** fifieldt has quit IRC15:17
*** avishayb has joined #openstack-dev15:17
*** CaptTofu has joined #openstack-dev15:20
*** herndon has joined #openstack-dev15:20
*** rongze has joined #openstack-dev15:20
*** rushiagr2 is now known as rushiagr_away15:21
*** nkinder has joined #openstack-dev15:23
*** UKn0Me has quit IRC15:23
*** jay-lau-513 has quit IRC15:24
*** FunnyLookinHat has joined #openstack-dev15:24
*** UKn0Me has joined #openstack-dev15:24
*** doron_afk is now known as doron15:25
*** che-arne has joined #openstack-dev15:26
*** lukego has quit IRC15:27
*** kevinconway has joined #openstack-dev15:29
*** krotscheck has quit IRC15:30
*** tdruiva has quit IRC15:31
*** PaulMurray has joined #openstack-dev15:32
*** otherwiseguy has joined #openstack-dev15:33
*** PaulMurray has quit IRC15:33
*** glucas has left #openstack-dev15:35
*** sthaha has quit IRC15:35
*** spzala has joined #openstack-dev15:36
*** rushiagr_away is now known as rushiagr215:38
*** glucas has joined #openstack-dev15:38
*** saschpe has quit IRC15:38
*** saschpe has joined #openstack-dev15:38
*** jgrimm has joined #openstack-dev15:39
*** ifarkas has quit IRC15:39
*** martyntaylor has quit IRC15:42
*** martyntaylor has joined #openstack-dev15:42
*** b3nt_pin has joined #openstack-dev15:43
radixis there a gerrit search term that I can use to find changes that haven't been approved?15:46
*** thedodd has joined #openstack-dev15:47
sdakeradix you can add projects to your watched list15:47
sdakethen it will show all unapproved project patches15:47
radixI see approved changes in that list.15:47
*** metral_ has joined #openstack-dev15:47
*** teju has quit IRC15:48
*** metral_ has quit IRC15:48
sdagueradix: https://dague.net/2013/09/27/gerrit-queries-to-avoid-openstack-review-overload/15:49
sdaguethat should give you the patterns you are looking for15:50
radixhmm, I don't think it does.15:51
*** burt has joined #openstack-dev15:51
*** tanisdl has joined #openstack-dev15:51
sdague-Approved+115:51
sdagueyou just need to use the column names15:51
radixI thought "CodeReview+2" (or the negation of that), but if you search for "project:openstack/heat is:watched status:open CodeReview+2"    -----15:51
*** xga_ has quit IRC15:52
*** xga has joined #openstack-dev15:52
radixoh. "Approved".15:52
radixsdague: that's not a column name ;-)15:52
radixokay, that's great. thanks :)15:52
*** devoid has joined #openstack-dev15:52
sdaguewell it's a gerrit column name :)15:53
*** devoid has left #openstack-dev15:53
*** yeylon_ has quit IRC15:55
*** buzztroll has quit IRC15:56
*** tdruiva has joined #openstack-dev15:56
therveradix: http://ci.openstack.org/gerrit.html shows the label configured for openstack15:56
thervelabels15:57
*** buzztroll has joined #openstack-dev15:57
*** angdraug has joined #openstack-dev15:57
*** sthaha has joined #openstack-dev15:57
*** sthaha has quit IRC15:57
*** sthaha has joined #openstack-dev15:57
radixman I hope I don't come up with any other reasons to refer to that page15:57
therve:)15:58
*** kgriffs_afk is now known as kgriffs15:58
*** sthaha has quit IRC15:58
*** jpomero has joined #openstack-dev16:00
*** giroro_ has quit IRC16:01
*** aspiers_ is now known as aspiers16:01
*** hartsocks has joined #openstack-dev16:01
*** rushiagr2 is now known as rushiagr16:01
*** Drankis has quit IRC16:01
*** doron is now known as doron_afk16:02
*** omachace has left #openstack-dev16:02
*** Ruetobas has joined #openstack-dev16:03
*** reidrac has quit IRC16:03
*** david-lyle_ has joined #openstack-dev16:04
*** jprovazn has quit IRC16:05
*** tmclaugh[work] has quit IRC16:05
*** matrohon has quit IRC16:05
*** mlavalle has joined #openstack-dev16:07
*** galstrom_zzz is now known as galstrom16:07
*** SumitNaiksatam has quit IRC16:07
*** xga has quit IRC16:08
*** Ruetobas has quit IRC16:08
*** rnirmal has joined #openstack-dev16:09
*** JordanP has quit IRC16:09
*** xga has joined #openstack-dev16:10
*** omachace has joined #openstack-dev16:12
*** amuller has quit IRC16:13
*** omachace has left #openstack-dev16:13
*** Ruetobas has joined #openstack-dev16:13
*** mosulica has quit IRC16:14
*** gyee_ has joined #openstack-dev16:14
*** xga has quit IRC16:15
*** aditirav_ has joined #openstack-dev16:15
*** doron_afk is now known as doron16:16
*** tanisdl has quit IRC16:16
*** rongze has quit IRC16:16
*** rongze has joined #openstack-dev16:17
*** rongze has quit IRC16:17
*** claxton has joined #openstack-dev16:17
*** corXi has quit IRC16:18
*** aditirav has quit IRC16:18
*** aditirav_ is now known as aditirav16:18
*** rongze has joined #openstack-dev16:19
*** rongze has quit IRC16:19
*** rongze has joined #openstack-dev16:20
*** tkammer has quit IRC16:20
*** rongze has quit IRC16:20
*** doron is now known as doron_afk16:20
*** rongze has joined #openstack-dev16:20
*** thedodd has quit IRC16:21
*** rongze has quit IRC16:21
*** noslzzp has joined #openstack-dev16:21
*** rongze has joined #openstack-dev16:21
*** rongze has quit IRC16:22
*** dkranz has joined #openstack-dev16:22
*** rongze has joined #openstack-dev16:22
*** rongze has quit IRC16:23
*** rongze has joined #openstack-dev16:23
*** xga has joined #openstack-dev16:23
*** JordanP has joined #openstack-dev16:23
*** thedodd has joined #openstack-dev16:23
*** pmathews has joined #openstack-dev16:24
*** rongze has quit IRC16:24
*** rongze has joined #openstack-dev16:24
*** rongze has quit IRC16:25
*** nplanel has joined #openstack-dev16:26
*** rongze has joined #openstack-dev16:26
*** tmclaugh[work] has joined #openstack-dev16:26
*** rongze has quit IRC16:26
*** Mandell has quit IRC16:27
*** rongze has joined #openstack-dev16:27
*** rongze has quit IRC16:27
*** nmagnezi has quit IRC16:27
*** rongze has joined #openstack-dev16:27
*** rongze has quit IRC16:28
*** rongze has joined #openstack-dev16:28
*** jnoller has quit IRC16:28
*** rongze has quit IRC16:29
*** colinmcnamara has joined #openstack-dev16:29
*** rongze has joined #openstack-dev16:29
*** SumitNaiksatam has joined #openstack-dev16:29
*** rongze has quit IRC16:29
*** rongze has joined #openstack-dev16:30
*** rongze has quit IRC16:30
*** rongze has joined #openstack-dev16:30
*** rongze has quit IRC16:30
*** b3nt_pin is now known as beagles16:31
*** rongze has joined #openstack-dev16:31
*** jnoller has joined #openstack-dev16:31
hughsaundersHey, whats the policy on devstack and stackforge projects? For example would rally additions for devstack be accepted?16:31
*** tanisdl has joined #openstack-dev16:33
*** e0ne has quit IRC16:34
*** afazekas has quit IRC16:35
*** mohits has joined #openstack-dev16:36
dtroyerFor DevStack not until incubation. Until the you should be able to use with the existing plugin mechanism to start Rally from stack.sh.  Look at the marconi and Savanna scripts in extras.d for examples.16:36
*** ifarkas has joined #openstack-dev16:37
*** yolanda has quit IRC16:38
*** KeithSharp has quit IRC16:38
*** aditirav_ has joined #openstack-dev16:39
*** aditirav has quit IRC16:39
*** aditirav_ is now known as aditirav16:39
*** mohits has quit IRC16:40
*** cdub has joined #openstack-dev16:40
*** KeithSharp has joined #openstack-dev16:41
*** ifarkas has quit IRC16:41
*** ifarkas has joined #openstack-dev16:41
*** colinmcnamara has quit IRC16:42
*** mrunge has joined #openstack-dev16:42
*** mikeoutland has joined #openstack-dev16:43
*** colinmcnamara has joined #openstack-dev16:43
hughsaundersthanks dtroyer16:45
*** lukego has joined #openstack-dev16:47
*** Sumeniac has quit IRC16:49
*** xga has quit IRC16:50
*** armax has quit IRC16:52
*** luis_ has joined #openstack-dev16:52
*** luisg has quit IRC16:53
*** Sumeniac has joined #openstack-dev16:53
*** dstanek has quit IRC16:54
*** byeager_ has quit IRC16:55
*** marekd is now known as marekd|away16:55
*** byeager has joined #openstack-dev16:55
*** armax has joined #openstack-dev16:56
*** alexpilotti has joined #openstack-dev16:56
*** rcleere has joined #openstack-dev16:56
*** iartarisi has quit IRC16:58
*** pschaef has quit IRC17:00
*** byeager has quit IRC17:00
ayoung"diff all side by side" should not autocheck the "reviewed" box  IMNSHO17:00
*** galstrom is now known as galstrom_zzz17:01
*** jsavak has joined #openstack-dev17:01
*** sarob has joined #openstack-dev17:03
*** otherwiseguy has quit IRC17:03
*** xarses has quit IRC17:03
*** dhellmann is now known as dhellmann_17:03
*** abk has quit IRC17:03
*** garyk has quit IRC17:03
*** joesavak has quit IRC17:03
*** rods1 has joined #openstack-dev17:05
*** jsavak has quit IRC17:06
*** joesavak has joined #openstack-dev17:06
*** jsavak has joined #openstack-dev17:06
*** toddnni has quit IRC17:07
*** e0ne_ has joined #openstack-dev17:07
*** xmltok has joined #openstack-dev17:07
*** mikeoutland has quit IRC17:09
*** byeager has joined #openstack-dev17:09
*** byeager has quit IRC17:09
*** jmontemayor has joined #openstack-dev17:10
*** vahidh has joined #openstack-dev17:10
*** byeager has joined #openstack-dev17:10
*** alop has joined #openstack-dev17:10
*** pdevine has joined #openstack-dev17:10
*** joesavak has quit IRC17:10
*** jmeridth has joined #openstack-dev17:11
*** tr3buchet has joined #openstack-dev17:11
*** e0ne_ has quit IRC17:12
*** toddnni has joined #openstack-dev17:12
*** byeager has quit IRC17:14
*** otherwiseguy has joined #openstack-dev17:16
*** READ10 has quit IRC17:17
*** MaxV has quit IRC17:17
*** galstrom_zzz is now known as galstrom17:17
*** byeager has joined #openstack-dev17:17
*** yassine has quit IRC17:19
*** armax has quit IRC17:20
*** reed has joined #openstack-dev17:20
*** xarses has joined #openstack-dev17:21
*** herndon has quit IRC17:21
*** jistr has quit IRC17:21
*** antigluk has quit IRC17:21
*** e0ne has joined #openstack-dev17:22
*** MIDENN_ has quit IRC17:23
*** MIDENN_ has joined #openstack-dev17:23
*** branen__ has joined #openstack-dev17:23
*** armax has joined #openstack-dev17:24
*** e0ne has quit IRC17:24
*** e0ne has joined #openstack-dev17:24
*** ygbo has quit IRC17:24
*** herndon has joined #openstack-dev17:25
*** jpich has quit IRC17:25
*** bvandenh has quit IRC17:25
*** dsirrine|catchup is now known as dsirrine17:26
*** herndon has quit IRC17:26
*** asselin has joined #openstack-dev17:26
*** mmagr has quit IRC17:26
*** rdas has joined #openstack-dev17:27
*** branen_ has quit IRC17:27
*** otherwiseguy has quit IRC17:28
*** mrunge has quit IRC17:29
*** e0ne has quit IRC17:29
*** angdraug has quit IRC17:30
*** gmoro has quit IRC17:30
*** jroovers has quit IRC17:31
*** gmoro has joined #openstack-dev17:31
roaetis is expected that I should be able to run pip install nova ?17:31
roaetas it is on pypi and is showing up on the search17:31
*** JordanP has quit IRC17:32
*** fbo is now known as fbo_away17:32
*** eglynn-lunch is now known as eglynn17:32
*** READ10 has joined #openstack-dev17:33
*** antigluk has joined #openstack-dev17:36
*** colinmcnamara has quit IRC17:36
*** doron_afk has quit IRC17:36
*** READ10 has quit IRC17:37
*** READ10 has joined #openstack-dev17:37
*** rushiagr is now known as rushiagr_away17:37
*** rushiagr_away is now known as rushiagr17:38
*** mancdaz is now known as mancdaz_away17:39
*** thedodd has quit IRC17:40
*** byeager has quit IRC17:43
*** byeager has joined #openstack-dev17:43
*** alexpilotti has quit IRC17:44
*** thedodd has joined #openstack-dev17:44
*** angdraug has joined #openstack-dev17:46
*** bdpayne has joined #openstack-dev17:47
*** avishayb has quit IRC17:47
*** byeager has quit IRC17:48
*** rongze has quit IRC17:48
*** harlowja has joined #openstack-dev17:49
*** mikeoutland has joined #openstack-dev17:49
*** factor_ has quit IRC17:49
*** mindpixel has quit IRC17:50
*** dhellmann_ is now known as dhellmann17:50
*** READ10 has quit IRC17:50
*** dkuffner has quit IRC17:50
*** rongze has joined #openstack-dev17:50
*** dbalog has left #openstack-dev17:51
*** rongze has quit IRC17:51
*** rongze has joined #openstack-dev17:51
*** dkuffner has joined #openstack-dev17:52
*** rongze has quit IRC17:52
*** rongze has joined #openstack-dev17:52
*** rongze has quit IRC17:53
*** salv-orlando_ has joined #openstack-dev17:53
*** mgagne1 is now known as mgagne17:53
*** rongze has joined #openstack-dev17:53
*** nmagnezi has joined #openstack-dev17:53
*** derekh has quit IRC17:53
*** rongze has quit IRC17:54
*** rongze has joined #openstack-dev17:54
*** csd has joined #openstack-dev17:54
*** rongze has quit IRC17:54
*** rongze has joined #openstack-dev17:55
*** otherwiseguy has joined #openstack-dev17:55
*** rongze has quit IRC17:55
*** rongze has joined #openstack-dev17:56
*** Sumeniac has quit IRC17:56
*** aditirav has quit IRC17:56
*** rongze has quit IRC17:56
*** markwash has joined #openstack-dev17:56
*** rongze has joined #openstack-dev17:56
*** dkuffner has quit IRC17:56
*** Underbyte has joined #openstack-dev17:57
*** salv-orlando has quit IRC17:57
*** salv-orlando_ is now known as salv-orlando17:57
*** rongze has quit IRC17:57
*** e0ne has joined #openstack-dev17:57
*** rongze has joined #openstack-dev17:57
*** rongze has quit IRC17:58
*** rongze has joined #openstack-dev17:58
*** MaxV has joined #openstack-dev17:58
*** rongze has quit IRC17:58
*** nati_ueno has joined #openstack-dev17:59
*** rongze has joined #openstack-dev17:59
*** rongze has quit IRC17:59
*** xga has joined #openstack-dev17:59
*** florentflament has quit IRC18:00
*** Sumeniac has joined #openstack-dev18:00
*** rongze has joined #openstack-dev18:01
*** MaxV has quit IRC18:01
*** rongze has quit IRC18:01
*** rongze has joined #openstack-dev18:02
*** e0ne has quit IRC18:02
*** rongze has quit IRC18:02
*** MaxV has joined #openstack-dev18:03
*** e0ne has joined #openstack-dev18:04
*** byeager has joined #openstack-dev18:04
*** Farooque has joined #openstack-dev18:04
*** herndon has joined #openstack-dev18:04
*** che-arne has quit IRC18:04
*** rongze_ has joined #openstack-dev18:05
*** rongze_ has quit IRC18:05
*** rongze has joined #openstack-dev18:05
*** rongze has quit IRC18:06
*** rongze has joined #openstack-dev18:06
*** rongze has quit IRC18:06
*** sarob has quit IRC18:07
*** sarob has joined #openstack-dev18:07
*** colinmcnamara has joined #openstack-dev18:08
*** e0ne has quit IRC18:09
*** rongze has joined #openstack-dev18:09
*** rongze_ has joined #openstack-dev18:10
*** rongze_ has quit IRC18:10
*** lsmola_ has quit IRC18:11
*** rongze_ has joined #openstack-dev18:11
*** sarob has quit IRC18:11
*** rongze_ has quit IRC18:11
*** marun has joined #openstack-dev18:13
*** rongze has quit IRC18:14
*** lukego has quit IRC18:14
*** rongze has joined #openstack-dev18:14
*** xga has quit IRC18:15
*** MaxV has quit IRC18:16
*** ssurana has left #openstack-dev18:18
*** zzelle_ has joined #openstack-dev18:19
*** buzztroll has quit IRC18:19
*** rongze has quit IRC18:19
*** buzztroll has joined #openstack-dev18:19
*** zzelle has quit IRC18:19
*** zzelle_ is now known as ZZelle18:20
*** byeager has quit IRC18:20
*** byeager has joined #openstack-dev18:21
*** colinmcnamara has quit IRC18:21
*** sarob has joined #openstack-dev18:21
*** xgsa has quit IRC18:21
*** ArxCruz has quit IRC18:22
*** vartom111111114 has joined #openstack-dev18:22
*** Mandell has joined #openstack-dev18:23
*** fbo_away is now known as fbo18:23
*** mriedem has quit IRC18:24
*** amcrn has joined #openstack-dev18:25
*** sarob has quit IRC18:25
*** eglynn has quit IRC18:25
*** byeager has quit IRC18:26
*** rfolco has quit IRC18:27
*** lukego has joined #openstack-dev18:27
*** mriedem has joined #openstack-dev18:30
*** lukego has quit IRC18:31
*** newell has joined #openstack-dev18:31
*** colinmcnamara has joined #openstack-dev18:33
*** safchain has quit IRC18:33
*** jasondotstar has quit IRC18:34
*** galstrom is now known as galstrom_zzz18:35
*** ekhugen has joined #openstack-dev18:36
*** zaitcev has joined #openstack-dev18:36
*** factor_ has joined #openstack-dev18:41
*** athomas has quit IRC18:42
gyee_jaypipes?18:42
*** Farooque has left #openstack-dev18:43
jaypipesgyee: gyee? :)18:43
*** rfolco has joined #openstack-dev18:43
*** vartom111111114 has quit IRC18:44
*** claxton has quit IRC18:44
*** rongze has joined #openstack-dev18:45
*** claxton has joined #openstack-dev18:45
*** rushiagr has quit IRC18:45
*** rongze has quit IRC18:45
gyee_jaypipes, region or region_id are optional attributes right now18:45
*** rongze has joined #openstack-dev18:46
gyee_with your change, should they be mandatory when creating an endpoint?18:46
*** rongze has quit IRC18:46
*** rongze has joined #openstack-dev18:47
gyee_otherwise, you'll end up with a "null" region18:47
*** rongze has quit IRC18:47
*** READ10 has joined #openstack-dev18:47
*** rongze has joined #openstack-dev18:47
*** rongze has quit IRC18:48
*** rongze has joined #openstack-dev18:48
*** rongze has quit IRC18:49
*** willingc has joined #openstack-dev18:49
*** rongze has joined #openstack-dev18:49
*** rongze has quit IRC18:50
*** rongze has joined #openstack-dev18:50
*** byeager has joined #openstack-dev18:51
*** rongze has quit IRC18:51
*** rongze_ has joined #openstack-dev18:51
*** rongze_ has quit IRC18:52
*** rongze has joined #openstack-dev18:52
*** bcrochet has joined #openstack-dev18:52
*** rongze has quit IRC18:52
*** byeager_ has joined #openstack-dev18:53
*** byeager has quit IRC18:53
*** rongze has joined #openstack-dev18:53
*** sahid has quit IRC18:53
*** rongze has quit IRC18:53
*** rongze has joined #openstack-dev18:54
*** AlanClark has joined #openstack-dev18:54
*** sushil_ has quit IRC18:54
*** rongze has quit IRC18:54
*** rongze has joined #openstack-dev18:55
*** rongze has quit IRC18:56
*** rongze has joined #openstack-dev18:56
*** herndon has quit IRC18:56
*** sandywalsh has quit IRC18:57
*** rongze has quit IRC18:57
*** rongze has joined #openstack-dev18:57
*** rongze has quit IRC18:57
*** rongze has joined #openstack-dev18:58
*** johnthetubaguy has quit IRC18:58
*** rongze has quit IRC18:58
*** buzztroll has quit IRC18:58
*** buzztroll has joined #openstack-dev18:58
*** rongze has joined #openstack-dev18:59
*** rongze has quit IRC18:59
*** rongze has joined #openstack-dev19:00
*** rongze has quit IRC19:00
*** nmagnezi has quit IRC19:00
*** rongze has joined #openstack-dev19:00
*** rongze has quit IRC19:01
*** rongze has joined #openstack-dev19:01
*** saschpe has quit IRC19:02
*** rongze has quit IRC19:02
*** saschpe has joined #openstack-dev19:02
*** joesavak has joined #openstack-dev19:02
*** rongze has joined #openstack-dev19:02
*** rongze has quit IRC19:03
*** amandap_ is now known as amandap19:03
*** rongze has joined #openstack-dev19:03
*** mikeoutland has quit IRC19:04
*** rongze has quit IRC19:04
*** rongze has joined #openstack-dev19:04
*** rdas has quit IRC19:04
*** jsavak has quit IRC19:04
*** rongze has quit IRC19:05
*** rongze has joined #openstack-dev19:06
*** rongze has quit IRC19:06
*** rongze has joined #openstack-dev19:07
*** rongze has quit IRC19:07
*** rongze has joined #openstack-dev19:08
*** rongze has quit IRC19:08
jog0jaypipes: ping19:08
jgriffithjog0: sdague I dropped 1250696 to wishlist because It's a functionality/feature enhancement for the fake driver, as opposed to a bug19:08
jgriffithIMO19:09
*** rongze has joined #openstack-dev19:09
jgriffithjog0: sdague I'll make sure it's worked on, but I don't see it as a med bug IMO19:09
*** rongze has quit IRC19:09
*** Mandell has quit IRC19:10
jog0jgriffith: cool, long as it gets worked on thanks. different people say wishlist means different things19:10
jgriffithjog0: understood19:10
*** byeager_ has quit IRC19:10
*** rongze has joined #openstack-dev19:10
jgriffithjog0: I'll make sure I free up some cycles to work on it19:10
jog0jgriffith: thnx19:10
*** byeager has joined #openstack-dev19:10
*** rongze has quit IRC19:10
*** rongze has joined #openstack-dev19:11
*** rongze has quit IRC19:11
*** rongze has joined #openstack-dev19:11
*** mikeoutland has joined #openstack-dev19:12
*** rongze has quit IRC19:12
*** aeperezt has quit IRC19:12
*** rongze has joined #openstack-dev19:12
*** rongze has quit IRC19:13
*** giulivo has quit IRC19:13
*** rongze has joined #openstack-dev19:13
*** sandywalsh has joined #openstack-dev19:14
*** rongze has quit IRC19:14
*** byeager has quit IRC19:15
*** lukego has joined #openstack-dev19:16
jaypipesjog0: pong!19:16
*** Mandell has joined #openstack-dev19:17
jaypipesgyee: the regions/ resource that was added are entirely optional. if no region specified, then there is no region to the endpoint...19:17
*** rongze has joined #openstack-dev19:17
*** rongze has quit IRC19:17
jog0jaypipes: woops a second to late, I just finished replying in ML19:17
*** djinni_ has quit IRC19:17
*** rongze has joined #openstack-dev19:18
*** mlavalle has quit IRC19:18
*** rongze has quit IRC19:18
*** dstanek has joined #openstack-dev19:18
*** sandywalsh has quit IRC19:18
*** rongze has joined #openstack-dev19:18
*** rongze has quit IRC19:18
jaypipesjog0: no worries :)19:20
*** djinni has joined #openstack-dev19:20
*** rongze has joined #openstack-dev19:20
*** rongze has quit IRC19:20
*** dripton__ has quit IRC19:22
*** rongze_ has joined #openstack-dev19:23
*** rongze_ has quit IRC19:23
*** neelashah has quit IRC19:24
*** rongze_ has joined #openstack-dev19:25
*** aeperezt has joined #openstack-dev19:25
*** rongze_ has quit IRC19:25
*** dripton__ has joined #openstack-dev19:25
*** rongze has joined #openstack-dev19:26
*** rongze has quit IRC19:26
*** dave_tucker_zzz is now known as dave_tucker19:27
*** rongze has joined #openstack-dev19:27
*** rongze has quit IRC19:27
*** rongze has joined #openstack-dev19:27
*** rongze has quit IRC19:28
*** rongze has joined #openstack-dev19:28
*** rongze has quit IRC19:28
*** yolanda has joined #openstack-dev19:29
*** rongze has joined #openstack-dev19:29
*** rongze has quit IRC19:30
*** rongze_ has joined #openstack-dev19:31
*** rongze_ has quit IRC19:31
*** sandywalsh has joined #openstack-dev19:32
*** rongze has joined #openstack-dev19:33
*** rongze has quit IRC19:33
*** Sumeniac2 has joined #openstack-dev19:33
*** Sumeniac has quit IRC19:33
*** rongze_ has joined #openstack-dev19:34
*** sballe has joined #openstack-dev19:35
*** rongze_ has quit IRC19:35
*** rongze_ has joined #openstack-dev19:35
jaypipesif there's anybody out there in sunny southern CA, please please send some warmth my way. -28 degree Fahrenheit wind chill in Columbus today :(19:35
*** rongze_ has quit IRC19:35
openstackstatusNOTICE: gating is operating at reduced capacity while we work through a systems problem (ETA 21:00 UTC)19:36
*** Sumeniac2 has quit IRC19:38
*** Drankis has joined #openstack-dev19:38
*** rongze has joined #openstack-dev19:38
*** rongze has quit IRC19:39
ayoungjaypipes, I thought we were going to get that snap in Mass, but looks like it is only going down to 18 or so here.19:39
*** rongze has joined #openstack-dev19:39
ayoungIts a balmy 50 right now19:39
*** factor_ has quit IRC19:39
*** jruzicka has quit IRC19:39
*** rongze has quit IRC19:39
ayoungwhich, considering how much I spent on seasonal ski rentals for the kids is making me cry19:39
*** flaper87 is now known as flaper87|afk19:40
*** rongze has joined #openstack-dev19:40
*** rongze has quit IRC19:40
jog0jaypipes: so I think we are talking past eachother here19:40
*** rongze has joined #openstack-dev19:40
*** factor_ has joined #openstack-dev19:40
*** rongze has quit IRC19:41
*** rongze has joined #openstack-dev19:41
*** rongze has quit IRC19:41
jog0jaypipes: I know rootwrap has significant overhead (although) we have made it better. the question, is in the ovs case what is the impact to neutron perf under load19:41
*** byeager has joined #openstack-dev19:41
*** rongze has joined #openstack-dev19:42
jog0or os the issue ovs itself19:42
jog0or how we use it rather19:42
*** rongze has quit IRC19:42
*** rongze has joined #openstack-dev19:42
*** rongze has quit IRC19:42
*** rongze has joined #openstack-dev19:45
*** neelashah has joined #openstack-dev19:45
*** ArxCruz has joined #openstack-dev19:46
*** rongze has quit IRC19:46
*** rongze has joined #openstack-dev19:46
*** afazekas has joined #openstack-dev19:46
*** rongze has quit IRC19:46
*** rongze has joined #openstack-dev19:48
*** rongze has quit IRC19:48
*** rongze has joined #openstack-dev19:49
*** rongze has quit IRC19:50
*** galstrom_zzz is now known as galstrom19:50
*** ChanServ sets mode: +o fungi19:52
*** rongze_ has joined #openstack-dev19:52
*** jmontemayor has quit IRC19:52
*** fungi sets mode: +b *!~rongze@*19:52
*** rongze_ has quit IRC19:52
*** dkuffner has joined #openstack-dev19:52
*** fungi sets mode: -o fungi19:53
*** jmontemayor has joined #openstack-dev19:53
*** novas0x2a|laptop has joined #openstack-dev19:54
*** ndipanov has quit IRC19:54
*** evgenyf has joined #openstack-dev19:54
*** ifarkas has quit IRC19:55
*** afazekas has quit IRC19:55
*** dbalog has joined #openstack-dev19:56
*** dkuffner has quit IRC19:57
*** jasondotstar has joined #openstack-dev20:02
*** nati_uen_ has joined #openstack-dev20:02
*** Sumeniac has joined #openstack-dev20:02
*** djinni has quit IRC20:03
*** bvandenh has joined #openstack-dev20:03
*** sushils has joined #openstack-dev20:04
*** nati_uen_ has quit IRC20:04
*** nati_uen_ has joined #openstack-dev20:05
*** djinni has joined #openstack-dev20:05
*** nplanel has quit IRC20:05
*** nati_ueno has quit IRC20:05
*** yeylon_ has joined #openstack-dev20:06
*** factor_ has quit IRC20:10
*** nplanel has joined #openstack-dev20:10
*** ykhodork has joined #openstack-dev20:11
*** rkukura has quit IRC20:11
*** herndon has joined #openstack-dev20:12
*** rfolco has quit IRC20:13
*** yolanda has quit IRC20:14
*** willingc has quit IRC20:14
*** nmagnezi has joined #openstack-dev20:14
*** factor_ has joined #openstack-dev20:15
*** Sumeniac has quit IRC20:15
*** mlavalle has joined #openstack-dev20:16
*** Chaser__ has quit IRC20:16
*** Chaser has joined #openstack-dev20:17
morganfainbergayoung, so... the cold decided to up and skip you guys?20:18
ayoungnah, just decided to level down to its usually level of nastiness20:18
*** nmagnezi has quit IRC20:18
ayoungfreeze everything, and then another thaw20:18
morganfainbergjaypipes, please take some of our ~73 degrees in pasadena.  I would love ... sub 50 degree weather for more than a day or so here in SoCal (yeah yeah I know, I live in the wrong place for that )20:19
*** shinylasers has joined #openstack-dev20:20
jaypipesmorganfainberg: :)20:20
*** byeager has quit IRC20:20
*** byeager has joined #openstack-dev20:21
*** mkollaro has quit IRC20:21
*** byeager has quit IRC20:21
*** byeager has joined #openstack-dev20:22
*** Sumeniac has joined #openstack-dev20:22
jgriffithdhellmann: ping20:22
*** burt has quit IRC20:23
*** sarob has joined #openstack-dev20:23
jaypipesjog0: ah, so the issue with the __init__ of the OVS agent in Neutron is that it goes through a for loop for each compute node (with VMs on it) in the entire deployment, calling out to ovs-vsctl for each compute node, setting up the bridges and stuff. each of those loops is calling out to utils.execute() (thus incurring a call to rootwrap). But ovs-vsctl has a "batch mode", which is done in a single transaction with th20:23
jaypipese ovswitchdb, where you can specifiy dozens of ports to create all in one command line call20:23
*** Sumeniac has quit IRC20:25
*** arosen has joined #openstack-dev20:25
jog0jaypipes: so if the batch mode is faster because less rootwrap -- disabling rootwrap can give a quick estimate of how much faster and if thats enough20:25
jaypipesjog0: so what I have experienced, in our small zones (80-90 compute workers with VMs on them), is that if you restart the quantum-plugin-openvswitch-agent, it can literally take *hours* to come up, with the process constantly spawning processes calling out to ovs-vsctl...20:25
*** kfox1111 has joined #openstack-dev20:25
*** Sumeniac has joined #openstack-dev20:26
*** mkollaro has joined #openstack-dev20:26
*** byeager has quit IRC20:26
kfox1111Any keystone devs awake?20:26
morganfainbergkfox1111, awake is a relative term20:26
jaypipesjog0: I would do that test, but I'm no longer at AT&T employee as of today ;)20:26
kfox1111hehe. ture.20:26
morganfainbergkfox1111, point being, i am significantly low on my caffeine intake.. what's up?20:27
kfox1111is there any effort around standardizing some more featureful policy.json files? For example, I want to use nagios to monitor my tenant. I don't want it to be able to create/delete vms though.20:27
kfox1111I'm guessing lots of other folks would like such a role.20:28
jog0jaypipes: congrats! where to?20:28
*** beagles has quit IRC20:28
morganfainbergkfox1111, I'm not 100% sure, but there is the http://git.openstack.org/cgit/openstack/keystone/tree/etc/policy.v3cloudsample.json file.  the main reason it's not the default is because it makes some assumptions the previous ones did not.20:28
jaypipesjog0: first day at mirantis today...20:29
*** jasondotstar has quit IRC20:29
jaypipesjog0: and ty!20:29
kfox1111morganfainberg: I noticed that. Would that apply to nova,glance,cinder,... etc?20:29
morganfainbergkfox1111, i _hope_ we move towards something like that as we progress, but it's a delicate balance to not break people.20:29
*** jpeeler1 has quit IRC20:29
morganfainbergunlikely.20:29
morganfainbergit's usually project specific20:30
morganfainberg(the policy that is)20:30
kfox1111yeah. Looking at the nova one at least, it looks like it will have to break. The default is to allow everyone to do everything.20:30
*** jasondotstar has joined #openstack-dev20:30
kfox1111well, almost everything.20:30
jog0jaypipes: enjoy20:30
jaypipescheers20:31
kfox1111I could create a read-only role and a read-write rule, but then the read-write user will have to be added to every current user.20:31
*** epim has joined #openstack-dev20:31
morganfainbergkfox1111, or you could (in theory) add a read-only role and remove the read-write role from your monitoring user(s)?20:32
morganfainbergmight be easier to take that approach20:32
morganfainbergoh.20:32
morganfainbergnova20:32
kfox1111oh. another question for you. A lot of the rules are "", which the docs say is "@" which is allow it. But it still seems to be tenant scoped. Whats the difference between "@" and the "owner" thing referenced?20:32
kfox1111I'm afraid I'm going to have to edit the policy files for all services to be able to make a safe read only'able user.20:33
kfox1111Then maintaining all those policy files will be a pain. I'm hoping that if I do the work, that someone will be interested in it going upstream.20:33
morganfainbergkfox1111,20:33
morganfainberg"sane" defaults are hard to define20:34
kfox1111true.20:34
jaypipesrussellb: ping20:34
morganfainbergkfox1111, i think the idea is that policy is very much a deployer choice.20:34
kfox1111the problem is, its also a tenant choice.20:34
kfox1111If I'm a user of a tenant, I want to scope permissions my way, not in the limited set the cloud provider decided, right?20:34
morganfainbergkfox1111, and if we gave a crazy restrictive default policy, it might make it very hard to use openstack20:34
morganfainbergkfox1111, eh, not really.20:35
kfox1111thats not what I'm suggesting. I'm saying, maybe provide some extra default roles to make it easier to do some common tasks that work on every openstack cloud.20:35
morganfainbergkfox1111, the policy is a deployer choice, if you have a rich policy that provides many roles/fine-grained control, then something like trusts is the tenant user's choice.20:35
*** jasdeepH has joined #openstack-dev20:35
russellbjaypipes: pong20:36
morganfainbergkfox1111, but we could definitiely provide a richer (though not nessiciarily more restrictive by default) policy20:36
morganfainbergwow.  i suddenly feel like i need to go back to typing class with the typos in that last sentence.20:36
kfox1111yeah, I was looking at that too. But like you said, unless the provider gives me all the roles I need, I can't use trusts.20:36
morganfainbergkfox1111, and that might be a differentiator for a given provider.  some providers may want a flat rule set that is very permissive (private cloud, internal only, etc)20:37
kfox1111Could a trust be extended to contain a white list of only allowed api calls?20:37
kfox1111that would acomplish what I'd need to do.20:37
morganfainbergkfox1111, trusts are delegation of a role20:37
morganfainbergif you can assign a role to an API call via the policy file (i.e. that call has policy enforcement supported) yes.20:38
bknudson'tox -e py27' is failing for me in python-keystoneclient -- Could not find a version that satisfies the requirement netaddr>=0.7.620:38
kfox1111so, trusts are defined to be a way for a user to give access to could provider predefined roles to another.20:38
kfox1111s/could/cloud/20:38
morganfainbergkfox1111, trusts are a delegation of role from one user to another.20:39
kfox1111yeah, I'm just running up against who's defining the role's.20:40
*** thomasem has joined #openstack-dev20:40
jaypipesrussellb: hi. happy new year :) I'm wondering if the nova scheduler code is really a good thing to try to make into the "common scheduler" for OpenStack... notably, I'm concerned that it is too compute-db-model centric and seems to have the logic of scheduling as well as the management of the scheduling data (compute host updates, etc) all mixed together.20:40
morganfainbergyep.20:40
kfox1111If I can create a "read-only" role for my private cloud, so I can monitor it,20:40
morganfainbergkfox1111, since it's your cloud and you're the deployer, you totally could do that20:40
kfox1111then try and launch in say, rackspace's cloud, its going to work differently, if at all.20:40
morganfainbergkfox1111, and in HPs cloud it likely would also be different20:41
russellbjaypipes: i don't think it's ready to be the common scheduler yet, but it's something we can split out, work on decoupling from nova, and then evolve into that20:41
russellbbaby steps20:41
kfox1111I can see role's working likt this very well if you are both the cloud provider and user. if you are just a user, its going to hurt. :/20:41
*** safchain has joined #openstack-dev20:41
russellbi'm fairly convinced that starting from scratch is going to resulting in boiling the ocean for a perfect scheduler and it will never get done20:41
*** safchain has quit IRC20:42
*** _ruhe is now known as ruhe20:42
jaypipesrussellb: wouldn't the baby steps be easier if, say, there was something like oslo.scheduler library that could be used as a common base for things?20:42
morganfainbergkfox1111, true, but in the case of rackspace cloud [i haven't looked], i am going to guess if they don't have a "read-only20:42
russellba library only seems useful if the expectation is that we will have multiple schedulers sharing code20:42
kfox1111maybe the policy mechanism could be extended so that there is a cloud policy/roles and a tenant policy/roles? Both sets have to pass before an api call can go through?20:42
russellbotherwise i'm not sure what the point of the library is20:42
morganfainberg" type role, it might be a legitimate/useful feature for them to provide20:42
boris-42russellb we should share business logic20:43
morganfainbergkfox1111, well, in theory, policy could become more flexible with work done of the oslo-policy logic20:43
russellbthe drive toward a single scheduler is based on the assumption that scheduling concerns of multiple projects wiill want access to the same data20:43
kfox1111ah...20:43
boris-42russellb yep20:43
russellbboris-42: ^^^20:43
boris-42russellb so our approach with no-db allows that20:43
kfox1111out of curiosity, I just looked at what amazon does. They do seem to have a per tenant policy thing too.20:44
morganfainbergkfox1111, i think the policy code isn't rich enough to support the concept of extending a current policy20:44
jaypipesrussellb: so is the goal of gantt to be the single scheduler for openstack, or just a separate service scheduler for compute?20:44
boris-42russellb but why this concept is ignored I don't know20:44
kfox1111http://aws.amazon.com/iam/20:44
russellbit's not ignored20:44
russellbencouraged even20:44
boris-42russellb ok20:44
russellbjaypipes: today, separate scheduler for compute20:44
*** melwitt has joined #openstack-dev20:44
russellblonger term, it could evolve into the single scheduler though20:44
kfox1111morganfainberg: Not sure it would need to extend, just do two passes, one with the cloud policy, and one with the tenants policy. both have to pass before the api call ois allowed.20:44
russellbseems as good of a place as any to start20:44
morganfainbergkfox1111, i think it _could_ be done.  but there is also the need for a base-line policy and isolation of projects/domains/whatever that doesn't let a user affect something they shouldn't20:44
boris-42russellb but it is actually very simple task20:45
russellbmake a separate thing, then start integrating other services once we're ready20:45
kfox1111yeah.20:45
russellbboris-42: what is?20:45
boris-42russellb to make one aaS20:45
morganfainbergkfox1111, i think the issue is the policy code doesn't have that kind of isolation support, to support making a secondary policy decision20:45
boris-42russellb without any big arch changes and tons and millions of patches20:45
russellbthen go for it20:45
morganfainbergkfox1111, not that it couldn't in it's current form.20:45
morganfainbergkfox1111, just no examples/usesaves showing that20:45
boris-42russellb but it is a bit different approach then in gantt20:46
russellbi'm not sure i agree with you, but you're welcome to try20:46
*** csd has quit IRC20:46
*** hemna__ has quit IRC20:46
boris-42russellb what is the right way to make such effort?20:46
boris-42russellb desing docs?20:46
boris-42russellb or real demo?20:46
kfox1111k. I'll poke around a little and see if I can easly do something like that.20:46
kfox1111I'm guessing not, but it doens't hurt to look.20:47
*** samuelbercovici has joined #openstack-dev20:47
morganfainbergkfox1111, my guess is that you'll need to extend the policy oslo code.20:47
kfox1111someone also mentioned a policy api in keystone. what are the plans for that?20:47
morganfainbergkfox1111, there is plans to make that more real20:47
russellbboris-42: design docs are always good.20:47
morganfainbergkfox1111, it exists, but has some limitations that need ot be addresed before it becomes a primary source of policy20:47
*** martyntaylor has quit IRC20:48
morganfainbergkfox1111, it could be used, but it's sub-optimal (and i don't think anyone leverages it yet).  but the concept has been to support service (e.g. nova) policy not per-tenant policy.20:48
boris-42russellb okay we will try to make design docs and live demo with common Nova+CInder scheduler20:48
*** jobewan has quit IRC20:48
morganfainbergkfox1111, depending on the number of tenants, and if round-trips to keystone are needed ot fetch/enforce the policy, it could become a serious bottleneck20:49
kfox1111has anything happened with it in icehouse or is it unchanged since havana?20:49
*** bvandenh has quit IRC20:49
kfox1111yeah.20:49
morganfainbergkfox1111, i don't think that code has changed in Icehouse as of yet20:49
kfox1111ok. Then I can play with my havana system.20:49
ayoungdifferent policy per tenant is probably not going to happen20:50
*** hemna_ has joined #openstack-dev20:50
morganfainbergayoung, kfox1111, not in the current implementation20:50
morganfainbergand i don't see it being possible in icehouse.20:50
kfox1111ayoung: why?20:50
kfox1111yeah, probably a bit late for it.20:50
morganfainbergshort of a good chunck of custom code20:50
*** hemna_ has quit IRC20:51
* jaypipes wishes it wasn't called "scheduler" :) it really isn't scheduling anything...20:51
jaypipescloser to "reserving" than "scheduling"20:51
*** sarob has quit IRC20:52
ayoungdoesn't make sense20:52
kfox1111to be really useful, there would have to be a tenant role UI in addition to the Cloud Provider role ui, which would be a lot of work.20:52
*** nati_ueno has joined #openstack-dev20:52
*** sarob has joined #openstack-dev20:52
jgriffithboris-42: I'd love to be kept in the loop, I haven't seen an "easy" solution to that problem either20:52
kfox1111ayoung: why would you say that?20:52
ayoungpolicy is not designed to be that reactive.20:52
russellbjaypipes: yep, but fairly ingrained in openstack terminology at this point ...20:52
ayoungKneejerk reaction.  I fear change20:52
jgriffithboris-42: and there are plans to have things like "coordinated" schedulers, but I hadn't seen anybody doing a single commong scheduler yet20:53
boris-42jgriffith We will show..20:53
kfox1111hehe.20:53
morganfainbergayoung, kfox1111, it htink it is worth considering.  discuss, etc.20:53
ayoungseriosuly, though...I'm still reading upo20:53
boris-42jgriffith we are doing20:53
kfox1111Its an organizational one.20:53
morganfainbergi don't think it's guarenteed to make sense,.20:53
boris-42jgriffith but as base we would like to use Nova20:53
kfox1111a cloud provider is one entity usually.20:53
jgriffithboris-42: great, looking forward to it20:53
boris-42jgriffith if you would like I could introduce you20:53
morganfainbergi also am not convinced there is enough demand to make per-tenant, per-domain, per-whatever policy (we might have bigger fish to fry on the policy front first)20:53
kfox1111another organization may have a tenant on multplile clouds.20:53
*** Sumeniac has quit IRC20:54
boris-42jgriffith the idea is actually simple20:54
kfox1111as that sort of organization, it would be nice if I could manage the tenants the same way, they are all openstack after all.20:54
jgriffithboris-42: sure20:54
morganfainbergayoung, this might be an argument for ABAC instead of RBAC.20:54
ayoungOK...so right now, we don't even really cleanly enforce policy on end objects...but that is changing20:54
ayoungmorganfainberg, hold on....think that is jumping way ahead20:54
kfox1111morganfainberg: True. If the default set of roles were featureful enough, I might just use those.20:54
morganfainbergkfox1111, but that is neither here nor there20:55
boris-42jgriffith here ?20:55
ayoungkfox1111, yeah...that is more the idea20:55
morganfainbergayoung, ^20:55
boris-42jgriffith or in openstack-cinder?20:55
ayoungand I think making it easier to develop more roles....20:55
jgriffithboris-42: either is fine I'm in both :)20:55
*** nati_uen_ has quit IRC20:55
*** rudrarugge has joined #openstack-dev20:55
jgriffithcinder is good, there's less conversation there currently20:55
ayoungsomething along the lines of "what is the least privilidge needed"20:55
morganfainbergkfox1111, if policy was very clean now, i think it would be easier to progress down this path and move beyond deployer-choices20:56
morganfainbergkfox1111, but like i said, bigger fish to fry (clean policy enforcement and consistency)20:56
*** Drankis has quit IRC20:56
ayoungRBAC needs to be easier to manage20:56
*** troytoman-away is now known as troytoman20:56
morganfainbergayoung, ++20:56
ayoungspecifically...I want to delegate just X20:56
ayoungwhere X is something I can doi20:57
kfox1111sure.20:57
ayoungI can't even delegate roles to myself right now20:57
ayoungI mean, only with trusts20:57
*** sarob has quit IRC20:57
ayoungbut I can't create a token that doens't have my complete role set20:57
kfox1111ayoung: Yeah. But without every cloud provider creating lots of useful roles, and better yet being consistant, trusts are not very useful.20:57
ayoungits like the jailor in a bad western walking around with keys to all the cells20:57
*** otherwiseguy has quit IRC20:58
morganfainbergkfox1111, this might be a broader argument that "RBAC" is insufficient for consistency between clouds.20:58
morganfainbergkfox1111, but thats a big step to make (e.g. ABAC or similar alternatives)20:58
*** markmcclain1 has quit IRC20:58
*** markmcclain has joined #openstack-dev20:58
*** ruhe is now known as ruhe_away20:58
morganfainbergayoung, heh20:58
kfox1111I think rbac can be consistant, so long as everyone's using the same roles.20:58
*** jpeeler has joined #openstack-dev20:59
*** jpeeler has quit IRC20:59
*** jpeeler has joined #openstack-dev20:59
*** rkukura has joined #openstack-dev20:59
*** ruhe_away is now known as ruhe20:59
*** sarob has joined #openstack-dev20:59
*** hemna_ has joined #openstack-dev20:59
kfox1111its open source philosophy. Right now, people are expected to fork the code in policy.json20:59
kfox1111forks are hard to keep compatible.20:59
morganfainbergkfox1111, well.. policy.json is more configuration than code.21:00
kfox1111since authorization is at the heart of all the cloud api,21:00
kfox1111then the cloud api behaves differently. :/21:00
ayoungkfox1111, you are right.  It is all really code, not config21:00
*** amir1 is now known as asadoughi21:00
morganfainbergkfox1111, in the sense of where it lives... and who's responsible for it21:01
morganfainbergkfox1111, which is the heart of your complaint21:01
kfox1111yeah. Not entirely sure what to do about it. just brainstorming.21:01
*** amotoki has joined #openstack-dev21:02
kfox1111the problem is, its kind of both. Its config for those who want to write custom authorization rules. Its code to those who need to consume it. :/21:02
*** saschpe has quit IRC21:02
kfox1111So, RDO did something interesting. They broke their config files up into two...21:04
*** saschpe has joined #openstack-dev21:05
kfox1111/usr/share/nova/nova-defaults.conf is where the distro provides all of their default config options, and /etc/nova/nova.conf is for the cloud provider to override things.21:05
ayoungkfox1111, I think what we need is an analysis of how people need to use Keystone, and what the right default set of roles would be.  Same for the other services.  Its been my suspicion that the main distinction is going to be "I can read but not write"  versues "I can write" for a particular kind of resource, with the boundaries for that read/write/no access  decision being the porject/tenant boundary   with21:05
ayoungheh21:05
bknudsonbtw - if anybody else runs into a problem running tox in python-keystoneclient : https://review.openstack.org/#/c/65149/21:05
*** csd has joined #openstack-dev21:05
ayoungproject/tenant boundary21:05
kfox1111maybe a start would be a openstack provided set of roles, and then the cloud provider can add some custom ones on top.21:05
ayoungbknudson, does that give me back the ability to stop at first failure?21:06
morganfainbergbknudson, oh fun.21:06
bknudsonayoung: no, it just makes tox work again.21:06
* ayoung can dream21:06
bknudsonayoung: I don't know how to tell testr how to stop at first failure?21:06
kfox1111ayoung: yeah. some use cases would be great. I can give you too off the bat. nagios monitoring my tenant, and a second one:21:06
bknudsonseems like it would be difficult if running in parallel.21:07
kfox1111I have a continuous integration system building currently up to date distro's for me. I'd like it to be able to upload images and delete images that have not had a running instance running for the past 30 days.21:07
ayoungbknudson, I don't think it is supported21:07
kfox1111the second one would only need nova instance list and full glance access.21:07
ayoungbknudson, --until-failure means something very different21:07
ayoungkfox1111, so...lets start with those21:08
*** radez is now known as radez_g0n321:08
ayoungimages....big differnece between an image used by all projects and one used exclusivly within a single project21:08
kfox1111sure.21:09
*** saschpe has quit IRC21:09
kfox1111I'm ok it managing images only for the tenant it is managing it for.21:10
ZZelleor an image used by multiples projects21:10
*** saschpe has joined #openstack-dev21:11
*** Sumeniac has joined #openstack-dev21:11
*** obondarev_ has quit IRC21:12
kenperkinsok, am I missing something? how does one add a comment to a code review?21:15
*** krtaylor has quit IRC21:15
russellbkenperkins: log in first :-)21:17
kenperkinsI am logged in21:17
russellbkenperkins: then you can comment inline with patches, or if you just want to leave a general comment, click "Review"21:17
*** evgenyf has quit IRC21:17
*** troytoman is now known as troytoman-away21:17
kenperkinstalk about the least discoverable method21:17
kenperkinsthanks tho russellb that was it21:18
russellbkenperkins: np21:18
kfox1111since we21:19
*** irenab has joined #openstack-dev21:19
kfox1111ve been talking, I've been looking at amazon's IAM stuff further.21:19
*** thomasem has quit IRC21:20
kfox1111They do seem to support per tenant policy:21:20
kfox1111http://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingPolicies.html21:20
kfox1111Though it looks like its managed at the tenant level, but assigned to a user like a role.21:20
*** armax_ has joined #openstack-dev21:22
*** dims has quit IRC21:22
*** Sumeniac has quit IRC21:22
*** READ10 has quit IRC21:24
*** armax has quit IRC21:24
*** armax_ is now known as armax21:24
ayoungkfox1111, since role assignment is per project (please stop calling it tenant)  we need to be able to define finer grained roles...what if...21:25
ayoungwe create role nesting?21:25
ayoungrole  "admin"  means "all roles on the project"21:26
*** fire has quit IRC21:26
ayoungrole "user-reader"  "user-writer"  and so forth could be composed into larger roles, etc21:26
*** jcoufal has quit IRC21:26
kfox1111ayoung: Sorry, I came around when tenant was the thing to call it, and its been hard to change. I'll try.21:27
*** gongysh has joined #openstack-dev21:27
ayoungkfox1111, yeah,  I know.  Programming is like sex.  Make one mistake and support it for the rest of your life.21:27
kfox1111:)21:27
kfox1111Well, you could do the nesting with groups I think?21:28
kfox1111define the fine grained roles, andd roles to groups, and users to groups.21:28
ayoungkfox1111, anyway, we need a way to be able to specify granular permissions.  ABAC, as morganfainberg suggested is probably the most granular approach to that.  RBAC is an attempt to insulate people from the actual details.  But someone needs to know and manage the details21:29
*** jsavak has joined #openstack-dev21:29
kfox1111At that point, to be most flexable, each api target would just have a corisponding role, and everything gets pushed out into groups. Very flexable, but maybe a pain.21:29
*** Guest796 is now known as jeblair21:29
morganfainbergpersonally i'm a fan of ABAC21:30
morganfainbergbut i can see the reasons not to go down that path (pain for the end user)21:30
kfox1111not sure I know the term ABAC.21:30
*** jeblair is now known as Guest4513221:30
kfox1111whats the A?21:30
morganfainbergattribute based vs role based21:30
*** jamielennox|away is now known as jamielennox21:30
kfox1111ah. ok.21:31
*** vipul is now known as vipul-away21:31
*** vipul-away is now known as vipul21:31
dhellmannjgriffith: pong21:31
*** Guest45132 is now known as corvus21:32
*** sgordon has quit IRC21:32
jgriffithdhellmann: I wanted to get your thoughts on some things for oslo-incubator if you have a moment?21:33
dhellmannjgriffith: sure21:33
*** joesavak has quit IRC21:33
jgriffithdhellmann: so I think we chatted briefly on the train in HK :)  but I don't know where we got to or left off21:33
*** Sumeniac has joined #openstack-dev21:34
jgriffithdhellmann: it's pertaining to the iscsi and lvm code in multiple projects21:34
jgriffithdhellmann: what's known as brick components in Cinder today21:34
dhellmannthat seems vaguely familiar21:34
jgriffithhttps://github.com/openstack/cinder/tree/master/cinder/brick21:34
jgriffithdhellmann: so I had an initial plan of creating a "brick" library21:34
jgriffithbut to be honest it seems like that's really what OSLO is for21:35
jgriffithand for example we have taskflow which is a lib and hit some unexpected problems from not putting it in OSLO first21:35
dhellmannthe idea with the incubator is to collect code that needs time to mature, but we still want to share21:35
jgriffithdhellmann: right... so I'm not sure on the mature piece yet21:35
jgriffith:)21:35
dhellmannwell, the issues there are actually because we're not syncing our requirements to taskflow, not that it is a library already21:35
kfox1111hmm... what about a trust policy instead of tenant? The trustor privides a policy stating what api accesses will be allowed/denied? If no policy, its simply role based?21:36
jgriffithdhellmann: a few weeks ago I was certain it was "mature" however in the past few weeks there's been a lot of churning and updating21:36
jgriffithdhellmann: oh.. right, I didn't mean that... I meant in terms of process, gating tests etc21:36
*** dprince has quit IRC21:36
dhellmannyeah, with brick I think it's clear that the resulting library will be owned by openstack (no one else is likely to be using it, right?)21:36
jgriffithdhellmann: so I started with this: https://blueprints.launchpad.net/openstack-common/+spec/add-lvm-module21:37
kfox1111for a given user then, the simplies policy is something like "default: !" and a few @'s to white list things.21:37
jgriffithdhellmann: correct21:37
jgriffithdhellmann: it's def geared towards openstack21:37
dhellmannok, in that case we won't have the requirements issue we have with taskflow21:37
*** dims has joined #openstack-dev21:37
jgriffithdhellmann: I suppose anybody could use it externally but I have no design plans aroudn that21:37
*** [1]evgenyf has joined #openstack-dev21:37
jgriffithdhellmann: ahhh... good point21:37
dhellmannwe can put it in the incubator, and then graduate it to either an "oslo" library or just a cinder library -- it depends on who is going to manage the code21:38
*** dims is now known as Guest4682221:38
kfox1111heh. I can't type today either. s/simplies/simple/'21:38
*** aeperezt has quit IRC21:38
jgriffithdhellmann: so TBH I'd be great with creating a cinder lib and keeping management under Cinder21:38
*** otherwiseguy has joined #openstack-dev21:38
jgriffithdhellmann: I just want to make sure the rest of the projects are good with that approach21:38
dhellmannsure, it works for me21:38
*** jobewan has joined #openstack-dev21:39
jgriffithdhellmann: Ok.. that might be better in the long run21:39
*** willingc has joined #openstack-dev21:39
jgriffithdhellmann: plus it would all be a single contained lib which would be convenient for a number of reasons21:39
dhellmannwe'll need to figure out things like the name and how to set up a repo for you, but that's not a big deal21:39
jgriffithdhellmann: yeah, those would be my next questions/steps :)21:39
jgriffithdhellmann: I'll abandon that patch for now and close the bp21:39
jgriffithdhellmann: I'll go back to starting a new lib21:40
dhellmannif you want to call it cinder.brick you'd have to make cinder a namespace package21:40
jgriffithdhellmann: I was thinking "openstack/brick"21:40
dhellmannI'm not sure about calling it oslo.brick if it's not part of oslo (I just haven't considered that case)21:40
jgriffithjust to alleviate that sort of thing21:40
*** Sumeniac has quit IRC21:40
kfox1111that would allow the type of policies I'd like to restrict a trust down to, to be very small and usable.21:40
dhellmannyeah, we haven't used the openstack package namespace yet, ironically21:40
dhellmannmaybe that is the right approach in this case, though21:40
jgriffithOh... ha21:40
*** flaper87|afk is now known as flaper8721:41
jgriffithI guess we haven't...I never noticed that21:41
jaypipesannegentle_: is there a havana equiv for http://docs.openstack.org/grizzly/openstack-network/admin/content/?21:41
*** ubuntu1 is now known as anteaya21:41
*** READ10 has joined #openstack-dev21:41
jgriffithdhellmann: alright, well I'll start looking at some of tthe details here21:42
jgriffithdhellmann: I'll likely be asking you for some advice/help on the structure21:42
dhellmannjgriffith: yeah, loop in ttx, markmc, and jeblair -- I'm sure they'll have good insights21:42
annegentle_jaypipes: no, that guide has been deprecated, moved into the Cloud Admin Guide at http://docs.openstack.org/admin-guide-cloud/content/ BUT there is a current discussion on the docs ML to write a new networking only guide21:42
dhellmannjgriffith: just let me know how I can help :-)21:42
jgriffithdhellmann: sounds good.. thanks a lot for walking through it with me21:42
dhellmannno trouble at alL!21:42
*** factor_ has quit IRC21:44
*** thedodd has quit IRC21:44
*** jdob has quit IRC21:45
ayoungmorganfainberg, so...I see ABAC as the implementation side, and RBAC as the management side.  I don't want to have to determine policy a-priori on every last attribute, but  I do want to be able to delegate down to the attribute21:45
*** jnoller has quit IRC21:46
jaypipesannegentle_: ok, ty!21:48
*** Guest46822 has quit IRC21:48
*** CaptTofu has quit IRC21:48
*** CaptTofu has joined #openstack-dev21:49
*** CaptTofu has quit IRC21:51
*** carl_baldwin has joined #openstack-dev21:51
*** CaptTofu has joined #openstack-dev21:51
ayoungkfox1111, I think that is sortof what I've been leaning toward,  but I would state it like this:  a user can only delegate things that they have RBAC access to already.  Beyond that, they can state "this token can do only X,Y,Z"21:51
morganfainbergayoung, i think that it would be awesome to use RBAC to assign the available attributes to the user(s) and you can let delegation be either attribute or role21:52
morganfainbergayoung, but i wouldn't ever argue against the role abstraction21:52
morganfainbergdelegation = something like trusts21:52
ayoungmorganfainberg, thing is, we don't havea clean way to  map role to attribute.  Its all at the API level right now.21:52
*** dkuffner has joined #openstack-dev21:53
*** jaypipes has quit IRC21:53
morganfainbergayoung, yep, future looking ABAC could be awesome.. now... not really that useful/other things need love before really making ABAC mapped like that21:53
*** jroovers has joined #openstack-dev21:53
ayoungso if you could look at role R and see "ah, it allows access to atrributes X,Y,Z on objects of type T"  you can then figure out that a user with Role R assigned in a Project can delegate access to those attributes21:53
ayoungmorganfainberg, I'm alomost wondering if each API should be a role.21:54
morganfainbergayoung, possible.21:54
ayoungAnd then have mega roles that collect up API level roles21:54
morganfainbergayoung, though i would argue that the underlying roles likely should be hard-coded21:54
morganfainbergif each api is a role21:54
morganfainbergmaking them... more of an attribute21:54
morganfainbergbut, i'd need to think more on that21:55
morganfainbergto commit to that design being "correct"21:55
*** jaypipes has joined #openstack-dev21:55
ayoungmorganfainberg, what if instead we allowed a token to specify what API calls it was allowed to call on?21:56
ayoungmorganfainberg, for example, say nova uploads a policy file21:57
ayounga user has Role R on project P, which gives them access to "reboot_vm"21:57
ayoungI can create a token that has the "reboot_vm" API call stamped in it21:57
ayoungand only that API21:57
*** dkuffner has quit IRC21:57
*** rods2 has joined #openstack-dev22:01
*** rods1 has quit IRC22:01
*** sarob has quit IRC22:01
*** ArxCruz has quit IRC22:02
*** mikeoutland has quit IRC22:03
*** ArxCruz has joined #openstack-dev22:03
morganfainbergayoung, sure?22:03
*** mikeoutland has joined #openstack-dev22:04
*** terriyu has joined #openstack-dev22:04
ayoungmorganfainberg, we'd need a way a use can say "what can I do with the roles that I have"  and that might scare some people22:04
morganfainbergayoung, yeah.22:04
morganfainbergayoung, personally, i like that design.22:05
ayoungJuno22:05
*** armax has left #openstack-dev22:05
morganfainbergayoung, aye22:05
ayoungmorganfainberg, which means I should start working on it once I2 is cut22:06
morganfainbergayoung, ++ let me know if you need any help22:06
*** mfer has quit IRC22:06
morganfainbergayoung, also, i think that could make things like "can i do blah" in horizon even better22:06
ayoungmorganfainberg, that was where the idea came from22:06
morganfainberggrey out things you _can't_ do. or just not render22:06
ayoungGabe Hurley and I discussed it back at the Havana Summit22:07
morganfainbergayoung, i think delegation should be able to be either an attribute (erm... "reboot vm" example) or a whole role.22:07
morganfainberge.g. "do lots of stuff"22:07
morganfainbergor more than one thing.22:07
morganfainbergyou know?22:07
ayoungso, the question is...what roles make sense?22:07
ayoungI wish we had a way to deduce that from data.22:08
morganfainbergayoung, yeah. you mean from a default role sense?22:08
morganfainberge.g. the aggregation concepts (i.e. i can do <items> if i am <role>)?22:08
morganfainbergwow, i.e. e.g. i.e.22:08
* morganfainberg hangs head in shame22:09
ayoungEIEIO22:09
morganfainberglol22:09
*** irenab has quit IRC22:10
morganfainbergthis might need some modifications to the policy.py stuff22:10
morganfainbergnot sure though22:10
*** dims has joined #openstack-dev22:12
*** dims is now known as Guest1513922:12
ayoungnah, just enforcement22:14
ayoungwhich is, I think, all over the place22:14
ayoungpolicy.py is for role matches and the like, but we wouldn't do explicit rules for each API22:15
ayoungit would have to be "in addition to" the Role being in the token22:15
ayoungso the current policy stuff would pass, and then, if there is an explicit API level delegation,  layer that on, too22:16
morganfainbergayoung, hm. ok22:17
ayoungmorganfainberg, I've planted the seed of the idea.  We have enough other tasks to keep us busy as it germinates22:17
*** mikeoutland has quit IRC22:18
morganfainbergayoung, hehe22:18
morganfainbergayoung, aye.22:18
*** lukego has quit IRC22:18
*** mikeoutland has joined #openstack-dev22:18
*** vartom111111114 has joined #openstack-dev22:19
*** doug_shelley66 has quit IRC22:19
*** bswartz has quit IRC22:19
*** pcm_ has quit IRC22:21
*** BillStokes has joined #openstack-dev22:21
*** ekhugen has quit IRC22:23
*** Guest15139 has quit IRC22:23
*** glenng has quit IRC22:26
*** jmckind has quit IRC22:28
*** ruhe is now known as _ruhe22:28
*** AlanClark has quit IRC22:29
*** jsavak has quit IRC22:30
*** dkranz has quit IRC22:30
*** Artpicre has quit IRC22:30
*** Artpicre has joined #openstack-dev22:30
*** rtheis has quit IRC22:33
*** krtaylor has joined #openstack-dev22:33
*** vladikr has quit IRC22:33
*** pablosan has joined #openstack-dev22:36
*** tmclaugh[work] has quit IRC22:38
*** peristeri has quit IRC22:38
*** jkyle_ is now known as jkyle22:38
*** jkyle is now known as Guest1535022:39
*** troytoman-away is now known as troytoman22:40
*** Guest15350 is now known as jkkyle22:40
jamielennoxayoung: the email about MD5 - is that regarding PKI tokens?22:41
*** dims_ has joined #openstack-dev22:41
*** yeylon_ has quit IRC22:43
*** asalkeld_ has quit IRC22:43
*** asalkeld has joined #openstack-dev22:43
*** salv-orlando_ has joined #openstack-dev22:43
*** jobewan has quit IRC22:44
*** amotoki has quit IRC22:45
*** dvarga has quit IRC22:45
*** kgriffs is now known as kgriffs_afk22:45
*** nkinder has quit IRC22:45
*** david-lyle_ has quit IRC22:46
*** jgrimm has quit IRC22:46
*** buzztroll has quit IRC22:46
*** rch has quit IRC22:46
*** rch has joined #openstack-dev22:46
*** akrivoka has quit IRC22:46
*** sushils has quit IRC22:47
*** salv-orlando has quit IRC22:47
*** salv-orlando_ is now known as salv-orlando22:47
*** jamielennox is now known as jamielennox|away22:49
*** sushils has joined #openstack-dev22:50
ayoungjamielennox|away, yes22:53
*** alop has quit IRC22:53
*** samuelbercovici has quit IRC22:54
*** nkinder has joined #openstack-dev22:55
*** rnirmal_ has joined #openstack-dev22:57
*** kevinconway has quit IRC22:57
*** rnirmal_ has quit IRC22:57
*** rm_work|away has quit IRC22:58
*** dims_ has quit IRC22:58
*** buzztroll has joined #openstack-dev22:58
*** [1]evgenyf has quit IRC22:58
*** rob____ has joined #openstack-dev22:59
*** rnirmal has quit IRC22:59
*** rob____ is now known as rhino22:59
*** rhino is now known as rhinoceros22:59
*** rhinoceros is now known as rythm22:59
*** jamielennox|away is now known as jamielennox23:01
*** vijendar has quit IRC23:01
*** doug_shelley66 has joined #openstack-dev23:02
*** rm_work|away has joined #openstack-dev23:02
*** rm_work|away is now known as rm_work23:02
*** rm_work has joined #openstack-dev23:02
jamielennoxayoung: wouldn't that be handled by the attributes in the CMS if we allow the creation algorithm to be specified23:02
*** xmltok has quit IRC23:03
*** rythm has quit IRC23:03
*** dstanek has quit IRC23:04
ZZellemikal, ping23:05
*** jroovers has quit IRC23:05
*** nkinder has quit IRC23:07
*** rnirmal has joined #openstack-dev23:07
*** marios has quit IRC23:08
*** ykhodork has quit IRC23:10
*** dims_ has joined #openstack-dev23:10
*** CaptTofu has quit IRC23:13
*** willingc has quit IRC23:13
*** CaptTofu has joined #openstack-dev23:13
*** colinmcnamara has quit IRC23:13
*** nam_nguyen has joined #openstack-dev23:16
*** tdruiva has quit IRC23:18
*** nam_nguyen has left #openstack-dev23:18
*** willingc has joined #openstack-dev23:20
*** mrodden has quit IRC23:21
*** dstanek has joined #openstack-dev23:26
*** david-lyle_ has joined #openstack-dev23:26
*** mlavalle has quit IRC23:26
*** tanisdl has quit IRC23:27
*** dims_ has quit IRC23:31
*** willingc has quit IRC23:32
*** evgenyf has joined #openstack-dev23:32
*** colinmcnamara has joined #openstack-dev23:33
*** willingc has joined #openstack-dev23:33
*** FunnyLookinHat has quit IRC23:33
*** neelashah has quit IRC23:34
*** david-lyle_ has quit IRC23:35
gyee_morganfainberg?23:35
*** rwsu has quit IRC23:35
ZZellejog0, hi23:37
*** tanisdl has joined #openstack-dev23:37
*** jmontemayor has quit IRC23:38
*** evgenyf has quit IRC23:40
*** pmcg_ is now known as pmcg23:42
*** gordc has quit IRC23:43
*** flaper87 is now known as flaper87|afk23:44
*** xmltok has joined #openstack-dev23:45
*** gordc has joined #openstack-dev23:46
*** galstrom is now known as galstrom_zzz23:47
*** vartom111111114 has quit IRC23:47
*** vipul is now known as vipul-away23:47
*** dims_ has joined #openstack-dev23:48
*** kgriffs_afk is now known as kgriffs23:49
*** krotscheck has joined #openstack-dev23:50
*** rwsu has joined #openstack-dev23:50
morganfainberggyee_, pongh23:50
*** vipul-away is now known as vipul23:50
gyee_morganfainberg, fabio's on a month-long vacation and asked me to finish this one up for him. https://review.openstack.org/#/c/57811/2023:51
*** jroovers has joined #openstack-dev23:51
morganfainberggyee, ah np23:51
gyee_I am trying to figure-out what's needed23:51
*** jasondotstar has quit IRC23:51
gyee_first, how do I restore the review on behalf of fabio?23:51
gyee_is that even possible23:51
jamielennoxgyee_: i think the core infrastructure team has permissions to restore on behalf of others but that's all23:52
gyee_k23:52
*** rudrarugge has quit IRC23:53
gyee_jamielennox, it won't automatically restore if I push a patch on top of it right?23:53
morganfainberggyee_, you can ask infra to resurrect it23:54
jamielennoxgyee_: no it will fail23:54
morganfainbergor.. just make a new review23:54
gyee_k23:54
morganfainberginfra usually can quickly pull things back.. but they might be busy today23:54
*** jpomero has quit IRC23:54
gyee_morganfainberg, I like the provider hook you suggested btw23:54
morganfainberg:)23:54
morganfainbergthat was the original thought i had, but it was hard to communicate it w/o code23:54
*** sushils has quit IRC23:54
*** aeperezt has joined #openstack-dev23:55
gyee_I am going to make a slight changes. Registering actions via decoration seem a bit overkill as we only have three actions23:55
morganfainbergi just wish i had been able to do the demo code earlier (so it would have helped fabio earlier on)23:55
gyee_I don't want to register every they are invoked23:55
morganfainberggyee_, sec.23:56
gyee_but other than that, I agree with everything there23:56
*** jroovers has quit IRC23:56
morganfainberggyee_, the registration only occurs at import time23:56
morganfainbergnot on invocation23:56
morganfainberghttps://github.com/morganfainberg/keystone/blob/ext_notify_impl/keystone/notifications.py#L2923:56
morganfainbergit's the magic of decorators23:57
morganfainbergat import it runs the @_register_notification_action code, which returns the "wrapper" as the last line23:57
*** jecarey_ has joined #openstack-dev23:57
*** david-lyle_ has joined #openstack-dev23:57
morganfainbergbut replacing it is fine.23:57
morganfainbergthere really is no reason to do something quite as heavy23:57
*** tanisdl_ has joined #openstack-dev23:57
*** fifieldt has joined #openstack-dev23:58
morganfainberg(it was just a thought if we would have a ton of different actions in the future)23:58
*** rcleere_ has joined #openstack-dev23:58
gyee_k, I'll hardcode the actions for now23:58
gyee_I don't think we are going to have that many actions to notify23:58
morganfainbergyeah, it was trying to limit the places to change for adding new acitons, but it is a silly pre-optimisation23:58
*** nati_uen_ has joined #openstack-dev23:58
*** kgriffs is now known as kgriffs_afk23:58
*** salv-orlando_ has joined #openstack-dev23:59
gyee_morganfainberg, cool, lemme work on it23:59
morganfainbergsounds good :)23:59
*** gordc1 has joined #openstack-dev23:59
*** hemna__ has joined #openstack-dev23:59
*** branen_ has joined #openstack-dev23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!