Friday, 2016-07-29

*** diogogmt has quit IRC00:00
*** daneyon_ has joined #openstack-kolla00:04
*** inc0_ has quit IRC00:06
*** daneyon_ has quit IRC00:08
*** v1k0d3n has quit IRC00:16
*** sdake has quit IRC00:23
*** HyperJohnGraham has joined #openstack-kolla00:25
HyperJohnGrahamHi All00:29
HyperJohnGrahamthe Kolla Kubernetes Quickstart Guide tells me i need Kubernetes1.2.4 or better00:34
HyperJohnGrahamCentos7 has kubernetes 1.2.0 in extras repo00:35
HyperJohnGrahamkubernetes releases https://github.com/kubernetes/kubernetes/releases dont have a 1.2.4 :) Current release is kubernetes 1.3.300:36
HyperJohnGrahamshould i start with 1.3.3 ?00:37
*** unicell has quit IRC00:39
*** unicell1 has joined #openstack-kolla00:39
*** godleon has joined #openstack-kolla00:55
*** asalkeld has joined #openstack-kolla01:02
*** jtriley has joined #openstack-kolla01:07
*** Liuqing has joined #openstack-kolla01:12
*** zhurong has joined #openstack-kolla01:13
*** sdake has joined #openstack-kolla01:13
*** sdake has quit IRC01:13
*** sdake has joined #openstack-kolla01:13
openstackgerritMichal Jastrzebski (inc0) proposed openstack/kolla: Testing gate  https://review.openstack.org/34855101:13
*** sdake_ has joined #openstack-kolla01:15
*** sdake has quit IRC01:18
sdake_yo folks01:20
*** zhubingbing has joined #openstack-kolla01:21
sbezverk_HyperJohnGraham your best bet is to get the latest 1.3.001:23
*** rstarmer has joined #openstack-kolla01:23
HyperJohnGraham1.3.3 :)01:23
HyperJohnGrahamjust ran [root@gateway cluster]# KUBERNETES_PROVIDER=centos ./kube-up.sh01:24
HyperJohnGrahamits thinking about it ...01:24
HyperJohnGrahamok it finished no errors01:24
sbezverk_I am using 1.3.0 on multinode cluster and it is working perfectly01:24
HyperJohnGrahamnot sure if it worked01:25
HyperJohnGrahamcool01:25
asalkeldthought i was on kubernetes-users slack for a second there;)01:25
HyperJohnGraham;)01:26
*** banix has quit IRC01:28
*** britthouser has joined #openstack-kolla01:41
*** jtriley has quit IRC01:41
*** britthouser has quit IRC01:50
*** daneyon_ has joined #openstack-kolla01:52
*** daneyon_ has quit IRC01:57
*** britthouser has joined #openstack-kolla01:58
*** sdake_ has quit IRC02:19
*** zhubingbing has quit IRC02:21
*** zhubingbing has joined #openstack-kolla02:21
*** asalkeld has quit IRC02:22
*** zhurong has quit IRC02:24
*** zhurong has joined #openstack-kolla02:25
*** unicell1 has quit IRC02:25
*** Liuqing has quit IRC02:32
*** mark-casey has joined #openstack-kolla02:32
*** Liuqing has joined #openstack-kolla02:34
*** Liuqing has quit IRC02:37
*** Liuqing has joined #openstack-kolla02:39
*** zhubingbing has quit IRC02:39
openstackgerritJeffrey Zhang proposed openstack/kolla: Make the kolla_keystone_service can update fileds  https://review.openstack.org/34838202:42
openstackgerritJeffrey Zhang proposed openstack/kolla: Enable the nova microversion api  https://review.openstack.org/34843202:42
*** banix has joined #openstack-kolla02:46
*** klint has joined #openstack-kolla02:48
*** yuanying_ has quit IRC02:57
*** rstarmer has quit IRC03:06
*** britthouser has quit IRC03:10
*** AndChat|370944 has joined #openstack-kolla03:12
*** AndChat|370944 has quit IRC03:13
*** yuanying has joined #openstack-kolla03:51
*** coolsvap_ has joined #openstack-kolla03:56
*** coolsvap_ is now known as coolsvap03:57
*** daneyon_ has joined #openstack-kolla04:35
*** daneyon_ has quit IRC04:39
*** godleon has quit IRC04:39
*** mark-casey has quit IRC04:40
*** unicell has joined #openstack-kolla04:48
*** banix has quit IRC04:54
*** bdaca has joined #openstack-kolla05:08
*** tfukushima has joined #openstack-kolla05:08
*** tfukushima has quit IRC05:15
*** mark-casey has joined #openstack-kolla05:50
*** mark-casey has left #openstack-kolla05:50
*** harlowja_at_home has joined #openstack-kolla05:59
*** david-lyle has joined #openstack-kolla06:07
*** harlowja_at_home has quit IRC06:20
*** dmueller-evoila has joined #openstack-kolla06:28
*** bdaca has quit IRC06:40
*** bdaca has joined #openstack-kolla06:40
*** david-lyle has quit IRC06:45
*** bdaca_ has joined #openstack-kolla06:46
*** bdaca has quit IRC06:50
*** matrohon has joined #openstack-kolla06:52
*** rstarmer has joined #openstack-kolla06:56
*** rstarmer has quit IRC06:56
*** bdaca_ has quit IRC07:00
*** b_bezak has joined #openstack-kolla07:08
*** gfidente has joined #openstack-kolla07:23
*** gfidente has joined #openstack-kolla07:23
*** matrohon has quit IRC07:29
*** shardy has joined #openstack-kolla07:39
*** bdaca has joined #openstack-kolla07:41
*** Serlex has joined #openstack-kolla07:43
*** bdaca_ has joined #openstack-kolla08:01
*** bdaca has quit IRC08:05
*** fragatina has quit IRC08:09
*** daneyon_ has joined #openstack-kolla08:12
*** daneyon_ has quit IRC08:16
*** bdaca__ has joined #openstack-kolla08:21
*** bdaca_ has quit IRC08:25
*** zhubingbing has joined #openstack-kolla08:37
*** bdaca_ has joined #openstack-kolla08:41
*** bdaca__ has quit IRC08:45
*** bdaca_ has quit IRC08:53
*** HyperJohnGraham has quit IRC08:56
*** matrohon has joined #openstack-kolla09:07
*** zhiwei has joined #openstack-kolla09:12
*** mbound has joined #openstack-kolla09:17
openstackgerritJeffrey Zhang proposed openstack/kolla: Make the kolla_keystone_service can update fileds  https://review.openstack.org/34838209:32
openstackgerritJeffrey Zhang proposed openstack/kolla: Enable the nova microversion api  https://review.openstack.org/34843209:32
openstackgerritJeffrey Zhang proposed openstack/kolla: Use /etc file to overwrite the docker.service file  https://review.openstack.org/34880209:32
*** fragatina has joined #openstack-kolla09:38
*** daneyon_ has joined #openstack-kolla10:00
*** zhurong has quit IRC10:03
*** Liuqing has quit IRC10:03
*** daneyon_ has quit IRC10:04
*** zhiwei has quit IRC10:07
*** zhiwei has joined #openstack-kolla10:08
*** zhiwei has quit IRC10:18
*** zhiwei has joined #openstack-kolla10:20
*** zhiwei has quit IRC10:25
*** sdake has joined #openstack-kolla10:25
*** mewald has joined #openstack-kolla10:26
openstackgerritMarga Millet proposed openstack/kolla: Customizations for memcached  https://review.openstack.org/34857610:28
*** mbound has quit IRC10:31
openstackgerritMathias proposed openstack/kolla: Added telegraf role  https://review.openstack.org/34644810:42
mewaldWe just discovered a bug in https://review.openstack.org/#/c/346448/ I uploaded another patch set to solve it10:47
patchbotmewald: patch 346448 - kolla - Added telegraf role10:47
openstackgerritMathias proposed openstack/kolla: Added telegraf role  https://review.openstack.org/34644810:51
openstackgerritMathias proposed openstack/kolla: Added telegraf container  https://review.openstack.org/34644510:51
openstackgerritMathias proposed openstack/kolla: Added influxdb container  https://review.openstack.org/34644610:53
openstackgerritMathias proposed openstack/kolla: Added influxdb role  https://review.openstack.org/34644910:54
openstackgerritMathias proposed openstack/kolla: Added grafana container  https://review.openstack.org/34644710:54
openstackgerritMathias proposed openstack/kolla: Added grafana role  https://review.openstack.org/34645010:54
*** fragatina has quit IRC11:00
*** britthouser has joined #openstack-kolla11:12
*** britthou_ has joined #openstack-kolla11:18
*** britthouser has quit IRC11:19
*** mliima has joined #openstack-kolla11:22
*** sdake has quit IRC11:27
*** mbound has joined #openstack-kolla11:32
*** britthou_ has quit IRC11:35
*** mliima has quit IRC11:36
*** mbound has quit IRC11:36
*** britthouser has joined #openstack-kolla11:37
*** ppowell has joined #openstack-kolla11:39
*** rhallisey has joined #openstack-kolla11:42
*** britthouser has quit IRC11:42
*** mliima has joined #openstack-kolla11:43
*** britthouser has joined #openstack-kolla11:43
rhalliseyJeffrey4l, you mind giving https://review.openstack.org/#/c/327925/ +A11:43
patchbotrhallisey: patch 327925 - kolla - Enable kolla k8s to override bind api bind address...11:43
rhallisey:)11:43
*** britthouser has quit IRC11:46
*** britthouser has joined #openstack-kolla11:47
*** dwalsh has joined #openstack-kolla11:47
*** dwalsh_ has joined #openstack-kolla11:48
*** daneyon_ has joined #openstack-kolla11:48
*** daneyon_ has quit IRC11:53
Jeffrey4ldone :D11:53
openstackgerritMerged openstack/kolla: Enable kolla k8s to override bind api bind address in genconfig  https://review.openstack.org/32792511:59
mliimaJeffrey4l, ping12:04
openstackgerritMathias proposed openstack/kolla: Added telegraf role  https://review.openstack.org/34644812:05
*** ppowell has quit IRC12:05
*** britthouser has quit IRC12:06
*** britthouser has joined #openstack-kolla12:07
openstackgerritMathias proposed openstack/kolla: Added influxdb container  https://review.openstack.org/34644612:07
openstackgerritMerged openstack/kolla: Use /etc file to overwrite the docker.service file  https://review.openstack.org/34880212:07
openstackgerritMathias proposed openstack/kolla: Added grafana role  https://review.openstack.org/34645012:08
rhalliseyJeffrey4l, thank you12:09
Jeffrey4lmliima, pong12:11
mliimathanks Jeffrey4l, rhallisey has solved my doubt12:12
mliima:)12:12
Jeffrey4lgreat.12:13
mliimaI saw in some PS in sudoers files with the word NOPASSWOD, just wanted to confirm that now would be that way12:13
mliima:)12:13
openstackgerritMerged openstack/kolla: Clean up Glance image after sanity check  https://review.openstack.org/34740912:17
*** Liuqing has joined #openstack-kolla12:20
*** klint has quit IRC12:32
*** v1k0d3n has joined #openstack-kolla12:33
*** zhiwei has joined #openstack-kolla12:34
*** britthouser has quit IRC12:38
*** zhiwei has quit IRC12:38
openstackgerritAbe Music proposed openstack/kolla: enhancements to install_packages macro  https://review.openstack.org/34856712:44
*** lulei has quit IRC12:46
*** britthouser has joined #openstack-kolla12:54
*** sean-k-mooney has quit IRC12:59
*** britthouser has quit IRC13:02
mewaldmliima: has to be NOPASSWD!13:07
mliimayes mewald :)13:08
mliimathank you13:08
mliimaI saw NOPASSWOD so often in some PS i was in doubt hehe13:09
openstackgerritMathias proposed openstack/kolla: Added telegraf container  https://review.openstack.org/34644513:09
*** zhiwei has joined #openstack-kolla13:15
openstackgerritMathias proposed openstack/kolla: Added grafana role  https://review.openstack.org/34645013:16
openstackgerritRyan Hallisey proposed openstack/kolla: Horizon interface address and memcached override  https://review.openstack.org/33082813:16
openstackgerritRyan Hallisey proposed openstack/kolla: Fix interface address for Neutron-server  https://review.openstack.org/34311713:16
openstackgerritRyan Hallisey proposed openstack/kolla: Fix interface address for memcached atop kubernetes  https://review.openstack.org/32798713:16
openstackgerritRyan Hallisey proposed openstack/kolla: Fix interface address for RabbitMQ and disable cluster for Kubernetes  https://review.openstack.org/33675113:16
openstackgerritRyan Hallisey proposed openstack/kolla: Glance interface address, memcached override, and glance override.  https://review.openstack.org/33248113:16
openstackgerritRyan Hallisey proposed openstack/kolla: Keystone interface address and memcached override  https://review.openstack.org/32856913:16
openstackgerritMathias proposed openstack/kolla: Added grafana container  https://review.openstack.org/34644713:17
*** zhiwei has quit IRC13:19
openstackgerritMathias proposed openstack/kolla: Added grafana role  https://review.openstack.org/34645013:23
openstackgerritMathias proposed openstack/kolla: Added telegraf role  https://review.openstack.org/34644813:23
openstackgerritMathias proposed openstack/kolla: Added influxdb role  https://review.openstack.org/34644913:23
openstackgerritMathias proposed openstack/kolla: Added grafana container  https://review.openstack.org/34644713:23
openstackgerritMathias proposed openstack/kolla: Added influxdb container  https://review.openstack.org/34644613:23
openstackgerritMathias proposed openstack/kolla: Added telegraf container  https://review.openstack.org/34644513:23
*** mbound has joined #openstack-kolla13:36
*** lyncos has quit IRC13:41
*** lyncos has joined #openstack-kolla13:41
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Glance bootstrap to create service/project/role  https://review.openstack.org/34621513:45
*** mgoddard__ has joined #openstack-kolla13:45
*** mgoddard_ has quit IRC13:49
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Adds ansible support to deploy skydns service  https://review.openstack.org/33567713:51
*** severion has joined #openstack-kolla13:57
*** v1k0d3n_ has joined #openstack-kolla14:02
*** v1k0d3n_ has quit IRC14:02
*** v1k0d3n_ has joined #openstack-kolla14:02
*** severion has quit IRC14:04
*** ppowell has joined #openstack-kolla14:07
*** dmueller-evoila has quit IRC14:09
*** dmueller-evoila has joined #openstack-kolla14:11
openstackgerritzhubingbing proposed openstack/kolla: Add the missing packages in the gnocchi image  https://review.openstack.org/34838814:14
*** dmueller-evoila has quit IRC14:19
*** dmueller-evoila has joined #openstack-kolla14:20
*** daneyon_ has joined #openstack-kolla14:30
*** banix has joined #openstack-kolla14:31
*** mgoddard__ has quit IRC14:31
*** mgoddard has joined #openstack-kolla14:31
*** daneyon_ has quit IRC14:35
*** HyperJohnGraham has joined #openstack-kolla14:36
*** mewald has quit IRC14:38
*** zhurong has joined #openstack-kolla14:40
*** david-lyle has joined #openstack-kolla14:42
openstackgerritJeffrey Zhang proposed openstack/kolla: Optimize horizon cache and compress for http response  https://review.openstack.org/34644414:45
*** banix has quit IRC14:45
*** zhurong has quit IRC14:46
*** david-lyle_ has joined #openstack-kolla14:46
*** zhurong_ has joined #openstack-kolla14:47
*** david-lyle has quit IRC14:47
*** david-lyle__ has joined #openstack-kolla14:48
*** banix has joined #openstack-kolla14:49
*** david-lyle_ has quit IRC14:52
wirehead_Well, I guess I've got a bunch of testin' and reviewin' to do.14:53
*** dmueller-evoila has quit IRC15:00
*** b_bezak has quit IRC15:02
*** dmueller-evoila has joined #openstack-kolla15:03
*** v1k0d3n has quit IRC15:03
openstackgerritRyan Hallisey proposed openstack/kolla: Horizon interface address and memcached override  https://review.openstack.org/33082815:04
openstackgerritRyan Hallisey proposed openstack/kolla: Fix interface address for Neutron-server  https://review.openstack.org/34311715:04
openstackgerritRyan Hallisey proposed openstack/kolla: Fix interface address for RabbitMQ and disable cluster for Kubernetes  https://review.openstack.org/33675115:04
openstackgerritRyan Hallisey proposed openstack/kolla: Glance interface address, memcached override, and glance override.  https://review.openstack.org/33248115:04
openstackgerritRyan Hallisey proposed openstack/kolla: Keystone interface address and memcached override  https://review.openstack.org/32856915:04
*** v1k0d3n has joined #openstack-kolla15:05
*** banix has quit IRC15:07
*** dmueller-evoila has quit IRC15:07
*** mliima has quit IRC15:09
*** dasTor has quit IRC15:10
*** diogogmt has joined #openstack-kolla15:11
*** ayoung has joined #openstack-kolla15:22
*** david-lyle has joined #openstack-kolla15:23
*** david-lyle__ has quit IRC15:23
*** mliima has joined #openstack-kolla15:26
*** inc0 has joined #openstack-kolla15:27
inc0good morning15:27
*** zhurong_ has quit IRC15:28
*** mgoddard_ has joined #openstack-kolla15:30
*** Liuqing has quit IRC15:33
*** mgoddard has quit IRC15:34
rhalliseysbezverk_, I think it is user facing15:34
rhalliseyhow else would you add a pv15:34
rhalliseywe need each param in services-resources to be configurable and exposed through ansible15:35
rhalliseyvia all.yml15:35
rhalliseyas defaults15:35
sbezverk_rhallisey all required services will have alredy all required resources15:35
sbezverk_so no need to edit service-resource.yml at all15:36
sbezverk_they just need to edit templates15:36
rhalliseysbezverk_, ok, but there needs to be exposure through ansible15:36
rhalliseyfor some of those vars15:36
rhalliseysbezverk_, that file would be great to serve as a 'mapping of your cluster'15:37
rhalliseydo a bunch of status calls15:37
rhalliseyreturn an ascii map :D15:37
rhalliseybe cool as hell15:37
sbezverk_sure it is a positive collateral :-)15:38
sbezverk_rhallisey since all services will get pv and pvc even if they just use host mounts15:39
sbezverk_I do not see any need for a user to edit that file15:39
sbezverk_adding variables sounds ok15:39
*** sdake has joined #openstack-kolla15:39
wirehead_rhallisey: https://github.com/kelseyhightower/kube-cert-manager15:45
sdakemorning15:45
rhalliseywirehead_, neat15:46
rhalliseysdake, https://review.openstack.org/#/c/327987/6 and all it's deps15:46
patchbotrhallisey: patch 327987 - kolla - Fix interface address for memcached atop kubernetes15:46
rhallisey:)15:46
wirehead_It would be nice, although requiring of much reconfiguration and redesign and so on, for Kolla-Kubernetes to work more like that.15:46
wirehead_Thus, the config lives as a third party resource.15:47
sdakeheads up - after 3 hours of sleep its not wise to ask soemone to review a patch and all its deps :)15:47
rhalliseysdake, take your time :)15:47
wirehead_It's OK, it's not like there's a +PinkElephant option in the UI.15:47
sdakewe need a gui for kolla as well15:48
sdakesham we don't have any gui cats in the team that i know of15:48
wirehead_*shrug* I'm not a GUI cat, but I play with it for fun.15:49
wirehead_My desire to have the config live as a ThirdPartyResource for Kolla-Kubernetes is mostly due to my mental picture of how I'd build it.15:50
rhalliseywirehead_, well not kolla generates it.  Would that be considered a third party resource?15:51
rhalliseymaybe I'm not understanding your point15:51
sdakehttp://www.jmbullion.com/2016-1-4-oz-proof-australian-gold-koala-coin/?utm_source=remarketing&utm_medium=banner&utm_campaign=Criteo15:51
sbezverk_sdake how many of these you collected? ;-)15:52
*** mummer has joined #openstack-kolla15:52
wirehead_Hm.  So, thought experiment.  Setup process takes the various yaml files, uploads them as ThirdPartyResources to a Kubernetes cluster.  Execs a workflow job that's just a container with kolla-kubernetes installed on it to actually do the work.15:52
wirehead_Said workflow job doesn't contain the config files, it pulls them down as the ThirdPartyResource.15:53
wirehead_Machine used to run setup process disappears.  Person who does setup moves on to greener pa$sture$.15:54
wirehead_New operator says "Hey, I need to reconfigure things," enters password into tiny web app running on the kube cluster.  Web app edits the ThirdPartyResource, triggers workflow, does reconfiguration.15:55
rhalliseywirehead_, config maps willl do that15:55
rhalliseywell eventually15:55
rhalliseyif you change data in config map is triggers kube to restart the container15:55
rhalliseythat's our reconfigure15:56
wirehead_Yeah.  I suppose either way, Kubernetes doesn't really try to enforce a strict layout.15:58
rhalliseyneat idea though15:58
wirehead_Big thing is that you can alter a single key as an atomic operation with a ThirdPartyResource15:58
rhalliseythat is cool15:59
wirehead_So, ConfigMap preserves the comments but provides opportunities for config file corruption.15:59
rhalliseywe'll that's the ops fault :)15:59
wirehead_ThirdPartyResource kills the comments.15:59
wirehead_But you can't corrupt it, just misconfigure.15:59
rhalliseyhow can the comments corrupt the config file16:00
wirehead_Honestly, I really want a ConfigMap that allows me to insert environment variables with string substitution, so as to force a non-12-factor-app to work more like a well-behaved 12-factor-app.16:00
wirehead_Picture a faulty process that uploads a ConfigMap with an accidental colon removal or other YAML corruption16:01
*** mgoddard has joined #openstack-kolla16:01
*** mgoddard_ has quit IRC16:01
rhalliseybut the configs themselves won't be yaml. They get converted a bunch by kube, but that corruption would be a kube bug16:02
wirehead_kolla-kuberentes.yml and globals.yml had better be yaml. :)16:03
rhalliseybut those are ansible and cli consumed16:04
rhalliseywe don't put kolla-kubernetes.yml in a configmap? do we?16:04
wirehead_No, but we could.16:04
wirehead_Or a ThirdPartyResource16:04
rhalliseyI think ansible should be the front facing config mechanism16:05
wirehead_Anyway, gotta run.  Car thing for wife's car.16:05
rhalliseywirehead_, good luck :)16:05
rhalliseysee ya later!16:05
*** mewald has joined #openstack-kolla16:15
*** Liuqing has joined #openstack-kolla16:21
kfox1111wirehead_: interesting.16:27
kfox1111along the same lines...16:28
kfox1111could you upload /etc/kolla stuff as configmaps,16:28
*** mark-casey has joined #openstack-kolla16:28
sdakeneed to go back to bed16:29
kfox1111and then have a kolla container pull them do the templating, and then push them back in as processed configmaps.16:29
kfox1111snapshotting the system then really is just redownloading the base kolla configmaps. as the rest can always be regenerated.16:30
sdakeJeffrey4l around?16:32
openstackgerritPrithiv proposed openstack/kolla: Networking-SFC is a neutron big-tent project Kolla does not have Networking-SFC agent support for now. This is essential for Service Function Chaining use case. Add networking-sfc roles for ansible.  https://review.openstack.org/34684216:34
openstackgerritPrithiv proposed openstack/kolla: Dockerfiles for Networking-SFC Container  https://review.openstack.org/34493016:34
Jeffrey4lsdake, yup16:34
openstackgerritPrithiv proposed openstack/kolla: Add Networking-SFC roles in ansible  https://review.openstack.org/34684216:39
*** gfidente has quit IRC16:39
lyncosping Inc016:41
*** Liuqing has quit IRC16:44
*** unicell has quit IRC16:46
*** Liuqing has joined #openstack-kolla16:47
*** rhallisey has quit IRC16:52
*** Liuqing has quit IRC16:54
sdakeJeffrey4l could you answer this question for me16:55
sdakeif you create user by command line, use can exist without any role.16:55
sdakein review https://review.openstack.org/#/c/346008/216:55
patchbotsdake: patch 346008 - kolla - Keystone "user" role added by default.16:55
sdakewhat do you mean by that?16:55
sdakeare you saying that is a bad thing?16:55
sdakeor a possibility16:55
*** Liuqing has joined #openstack-kolla16:56
Jeffrey4lsdake, it is possible. only in the horizon, a role must exist when create user.16:58
Jeffrey4lthis should be a logical in horizon.16:58
sdakeand that role should have admin assignment is what you mean?16:58
sdakeso horizon can create users?16:59
mewaldyes it can16:59
Jeffrey4lmy typo. i mean i can assignment the admin role to the user by using cli.17:00
sdakelet me restate, that role should have admin assignment so horizon can create users?17:00
Jeffrey4lhmm. let's me show your the code.17:00
* Jeffrey4l is search the code in horizon17:00
sdakethe code isn't helpful17:00
sdakei just woke up17:00
sdakewith 3 hours of sleep17:01
Jeffrey4lOK.17:01
Jeffrey4l1. the horizon need the _member_ role ( in default ) when create the user.17:01
sdakei got that17:01
sdakedoes the _member_ role need to be in the admin group or whatever?17:02
Jeffrey4l2. but in the keystone, this is not neccesary.17:02
Jeffrey4lno. just a simple role without any special.17:02
sdakeok so the review overloads user with horizon and other users17:02
Jeffrey4lso the _member_ role is only needed by horizon, and should be create in horizon.17:02
*** matrohon has quit IRC17:02
sdakeJeffrey4l and that is the reason for the -1?17:04
Jeffrey4ltwo reason: 1. use the default _member_ role    2. create the _member_ role in horizon.17:05
Jeffrey4ltwo reason: 1. use the default _member_ role rather than a new role named *user*   2. create the _member_ role in horizon.17:05
sdakei see, so dissastitfied with the renaming of the default role from _member_ to user17:05
sdakeis the second reason17:06
Jeffrey4lyes. _member_ is well known but user is not.17:06
sdakeok - let me have a think17:06
Jeffrey4lOK. :D17:06
sdakefwiw I think asking to overload the role creation with the ansible module is a bit much for the same patch17:07
sdakeyour right it should be done17:07
sdakei thinkn in a separate patch - we have that code all over the code base17:07
Jeffrey4lthat's fine17:08
sdakeJeffrey4l can skim through http://docs.openstack.org/mitaka/install-guide-ubuntu/keystone-users.html17:10
david-lyledon't know if this helps, but _member_ is just a placeholder that happens to work with devstack, any role can be used as the default role see: https://github.com/openstack/horizon/blob/master/openstack_dashboard/settings.py#L22617:10
david-lyleHorizon just requires a default role to be specified17:10
sdakei want this horiozn bug settled once and for all17:11
Jeffrey4lsdake, you mean the default role is bug?17:11
sdakedavid-lyle - thanks17:12
sdakeJeffrey4l depends on how important of a reference ou think that link is17:12
sdakeit says mitaka - intall-guide-ubuntu - keystone users17:12
sdakein the title of the url17:12
sdakeseems authentic17:12
*** severion has joined #openstack-kolla17:12
sdakei never got the deal with creating a demo user17:12
Jeffrey4lit has been there for a long time. iirc, a use without any role will not have any permission in a project.17:12
sdakei thought that personally was bad practice17:12
sdakeJeffrey4l yes i understand that part of things17:13
sdakeso i think we dont want to create demo role, but i dont understand problem with creating a user role called "user"17:14
sdakewould you expand17:15
Jeffrey4lhmm in the doc, it want verify a normal user works. http://docs.openstack.org/mitaka/install-guide-ubuntu/keystone-verify.html17:15
Jeffrey4lso it create a normal role and user.17:15
sdakesorry not demo role above - demo user17:15
sdakeis this a security thing - that we give extra permissions to horizon if we use that patch?17:16
Jeffrey4lhorizon use the _member_ in default all the time. why we need change it. even though it is not a big deal.17:16
*** v1k0d3n_ has quit IRC17:16
Jeffrey4lmy point is: _member_ is well known and used all the time, why we want to change it to `user`. ( i admit using `user` works)17:17
sdakeJeffrey4l got it - but does using user grant extra credentials to horizon?17:17
sdakeI want to understand if we need a user specifically for horizon17:18
sdakesorry role17:18
sdakedamn17:18
Jeffrey4lsdake, no. `user` and `_member_` is the same.17:18
sdakeactually yes user17:18
sdakethey have same credentials?17:18
Jeffrey4lthe role is only affect by the policy file. and neither `user` nor `_member_` are defined/filtered in any policy files.17:19
*** unicell has joined #openstack-kolla17:19
sdakethanks17:19
Jeffrey4lyes. they have the same credentials.17:19
sdakeso because not filtered in policy files, they have full credentials or no credentials?17:20
Jeffrey4lsdake, they have part of permissions.17:21
Jeffrey4ladmin role has the full credentials.17:21
sdakewhat about _member_ and user?17:22
Jeffrey4l_member_ role and the user role is the same.17:22
Jeffrey4la user with that role create user the project panel in the horizon.17:22
sdakeand that same is th eadmin role?17:22
sdakeand that same is the admin role?17:22
Jeffrey4lno. admin role is special. it have full permission( at least in the keystone v2 api, v3 is a little special )17:23
Jeffrey4lsdake, check this17:24
Jeffrey4lhttps://github.com/openstack/keystone/blob/master/etc/policy.json#L1517:24
Jeffrey4lonly a user with admin role can create region.17:24
Jeffrey4lin some of usecase, we can change the policy file to something like: a user with role _member_ can create region.17:25
Jeffrey4lthis is how it works.17:25
sdakecool17:25
sdakeJeffrey4l ++17:26
Jeffrey4l:p17:26
sdakelet me go look at review - my thinking is _member_ or user doesn't matter17:26
*** rstarmer has joined #openstack-kolla17:27
Jeffrey4lfor the final usage, it doesn't matter. My only point is: _member_ is default value and well known. change it to others may cause operators a little confused.17:27
sdakecool well i'm glad whtever occurs is not a security issue :)17:28
Jeffrey4land another thing: kolla can not handle the policy file change now. it have no chance to change the file.17:28
Jeffrey4lyep. it is not related to security.17:28
Jeffrey4lwe may need add that feature.17:29
sdakeif we create _member_ role it hsould go in horizon i think - i already said that once i'm prety sure :)17:29
Jeffrey4lagreed.17:29
*** mark-casey has quit IRC17:29
sdakealso there is not backward compatibility issue for backports17:31
Jeffrey4lsdake, actually, it has. in the ansible>2, there is no method os_keystone_role module. :(17:31
Jeffrey4lsorry, i mean ansible<217:32
*** severion has quit IRC17:33
*** shardy has quit IRC17:33
sdakedo we need that?17:34
sdakecould just use the cli17:34
Jeffrey4lsdake, we can write our own module like kolla_user kolla_keystone_service does.17:35
Jeffrey4lit is easy to implement.17:35
*** Liuqing has quit IRC17:36
Jeffrey4lit is hard to keep idempotent when use cli.17:36
sdakeyup17:36
sdakethought we agreed to do that as a separate patch17:37
Jeffrey4lsdake, for mitaka? or for all branches?17:37
sdakethis work needs to be backported17:37
Jeffrey4lgot.17:38
Jeffrey4lso lets write our own edition.17:38
sdakelet me have another look at patch17:41
*** HyperJohnGraham has quit IRC17:41
*** mark-casey has joined #openstack-kolla17:41
*** blahrus has joined #openstack-kolla17:43
*** blahrus has left #openstack-kolla17:43
*** rstarmer has quit IRC17:44
*** rstarmer has joined #openstack-kolla17:46
sdakeJeffrey4l i think the patch is good to go if we decide to use user instead of -member_17:46
Jeffrey4lcool17:46
sdakeit provides immediate relif to this bug which is sort of high profile17:46
sdakealot of folks complain about it17:47
Jeffrey4lyes. it is..17:47
sdakei dont know if we should use user or _member_17:47
Jeffrey4li prefer to use _member_ . :D17:47
sdakedavid-lyle seemed to indicate the name was picked at random17:47
Jeffrey4li think so. I never saw the `user` role.17:48
Jeffrey4l_member_ and Member is more common.17:48
*** rhallisey_ has joined #openstack-kolla17:48
sdakeseems to make sense that work should be separated17:48
Jeffrey4la user with `user` role is a little wired. :)17:48
david-lyledevstack has waffled between _member_ and Member several times, Horizon is just reflecting that value in the default17:49
sdakedavid-lyle cool thanks for the help :)17:49
sdakedevstack isn't our reference17:50
sdakewe pretty much our own reference17:50
*** rstarmer has quit IRC17:50
Jeffrey4lso the final decision is?17:51
sdakei think what is needed is three things17:51
*** rstarmer has joined #openstack-kolla17:51
sdake_member_ based patch in horizon to do what operators expect17:52
sdakeuser based patch - i'll ping operators list on their thoughts on creating a user as defined in those docs - that will decide if that goes in17:52
sdakeand some work on backporting a from cli->os_* patch17:53
sdakewhich is a whole lotta work17:53
*** zhiwei has joined #openstack-kolla17:54
Jeffrey4lcool17:54
sdakewe could take shortcuts by just merging that patch straight up but that doesn't seem like the right thing to do17:54
Jeffrey4lyes. split it into two will be better. one for kolla_keystone_role module.   another for _member_(whatever) role create in horizon.17:55
sdake1`i was thinking split into three as well (adding user)17:56
sdakemaybe before we do work on that i ping ops list17:57
sdakeand ask them what htey want17:57
Jeffrey4lok17:57
*** rstarmer has quit IRC17:57
sdakeso as not to waste time17:57
sdakeno idea what ops want on this one :)17:57
*** rstarmer has joined #openstack-kolla17:57
*** zhiwei has quit IRC17:58
Jeffrey4llol17:59
sdakeJeffrey4l mind pasting a link to thi log in the review and keep vote at -117:59
Jeffrey4lneed to go bed. bye :)17:59
sdakeoh sorry17:59
sdakeforgot its late17:59
Jeffrey4lsdake, i will add that.17:59
sdakecool you rock thanks ;)18:00
Jeffrey4lbut which link should i add?18:00
sdakeirc log18:00
sdakesince this is where we sorted it out18:00
Jeffrey4lno problem18:00
sdakei dont like doing irc reviews18:00
sdakebut sometimes it has to be done18:00
Jeffrey4lOK18:00
*** HyperJohnGraham has joined #openstack-kolla18:03
Jeffrey4lall done.18:06
*** dmueller-evoila has joined #openstack-kolla18:06
Jeffrey4lbye guys.18:06
* Jeffrey4l is head to the bed.18:06
*** dmueller-evoila has quit IRC18:10
*** inc0 has quit IRC18:15
*** inc0 has joined #openstack-kolla18:15
*** mummer has quit IRC18:16
*** rstarmer has quit IRC18:17
*** inc0_ has joined #openstack-kolla18:22
openstackgerritChristian Berendt proposed openstack/kolla: Enable CADF events in Keystone  https://review.openstack.org/34900618:23
*** severion has joined #openstack-kolla18:24
*** v1k0d3n_ has joined #openstack-kolla18:25
*** inc0 has quit IRC18:26
*** mummer has joined #openstack-kolla18:27
*** rstarmer has joined #openstack-kolla18:28
*** severion has quit IRC18:28
*** v1k0d3n_ has quit IRC18:30
openstackgerritMerged openstack/kolla-kubernetes: Add resource status command for Workflow Engine  https://review.openstack.org/34510218:35
*** sdake has quit IRC18:47
*** mummer has quit IRC18:48
*** achanda has joined #openstack-kolla18:55
*** daneyon_ has joined #openstack-kolla19:01
openstackgerritMichal Jastrzebski (inc0) proposed openstack/kolla: Testing gate  https://review.openstack.org/34855119:04
*** daneyon_ has quit IRC19:06
*** lyncos has quit IRC19:08
*** HyperJohnGraham has quit IRC19:23
*** HyperJohnGraham has joined #openstack-kolla19:24
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Kolla Kubernetes Service Exposure BP  https://review.openstack.org/34904419:25
*** HyperJohnGraham has quit IRC19:28
*** ppowell has quit IRC19:33
*** rstarmer has quit IRC19:33
*** sdake has joined #openstack-kolla19:35
openstackgerritMichal Jastrzebski (inc0) proposed openstack/kolla: Ansible role to deploy kubernetes  https://review.openstack.org/34904919:36
openstackgerritSerguei Bezverkhi proposed openstack/kolla-kubernetes: Kolla Kubernetes Service Exposure BP  https://review.openstack.org/34904419:37
mewaldWhat's that pep error here? https://review.openstack.org/#/c/346450/ I can figure out what causes it19:40
patchbotmewald: patch 346450 - kolla - Added grafana role19:40
*** rhallisey_ is now known as rhallisey19:42
rhalliseymewald, did you try removing the blank line after main()19:43
rhalliseyline 6419:43
*** banix has joined #openstack-kolla19:43
rhalliseyhttp://logs.openstack.org/50/346450/15/check/gate-kolla-pep8-ubuntu-xenial/1b172f2/console.html#_2016-07-29_15_22_21_28921119:43
mewaldrhallisey: ah nice, I didnt even see that line ....19:44
openstackgerritMathias proposed openstack/kolla: Added grafana role  https://review.openstack.org/34645019:46
mewaldfixed - I think19:46
rhalliseyya we'll see19:46
rhallisey:)19:46
mewaldI summary together with all that logging info would be awesome :D19:47
mewalds/I/A/19:51
*** rstarmer has joined #openstack-kolla19:51
*** rahuls has joined #openstack-kolla19:59
*** sdake has quit IRC19:59
mewaldhow is https://github.com/openstack/openstack-ansible considered compared to Kolla? I am trying to find pros and cons …20:00
*** mliima has quit IRC20:04
*** rstarmer has quit IRC20:06
*** rstarmer has joined #openstack-kolla20:15
openstackgerritChristian Berendt proposed openstack/kolla: Enable CADF events in Keystone  https://review.openstack.org/34900620:18
*** rstarmer has quit IRC20:20
*** coolsvap has quit IRC20:21
openstackgerritMathias proposed openstack/kolla: Added grafana container  https://review.openstack.org/34644720:23
openstackgerritMathias proposed openstack/kolla: Added grafana role  https://review.openstack.org/34645020:24
*** achanda has quit IRC20:34
*** daneyon_ has joined #openstack-kolla20:50
*** rstarmer has joined #openstack-kolla20:54
*** daneyon_ has quit IRC20:54
*** dwalsh_ has quit IRC20:54
*** dwalsh has quit IRC20:55
*** Serlex has quit IRC20:59
*** inc0_ has quit IRC21:07
*** banix has quit IRC21:10
*** zhiwei has joined #openstack-kolla21:27
*** zhiwei has quit IRC21:31
*** banix has joined #openstack-kolla21:34
*** rhallisey has quit IRC21:40
*** dims_ has quit IRC21:44
*** ayoung has quit IRC21:44
*** dims has joined #openstack-kolla21:46
*** mewald has quit IRC22:00
*** achanda has joined #openstack-kolla22:13
*** daneyon has quit IRC22:15
*** bmace has quit IRC22:18
*** dave-mccowan has quit IRC22:38
*** rstarmer has quit IRC22:42
*** britthouser has joined #openstack-kolla22:51
*** mark-casey has quit IRC22:53
*** rstarmer has joined #openstack-kolla22:56
*** britthouser has quit IRC22:56
*** britthouser has joined #openstack-kolla23:02
*** rstarmer has quit IRC23:08
*** britthouser has quit IRC23:12
*** HyperJohnGraham has joined #openstack-kolla23:12
*** britthouser has joined #openstack-kolla23:15
*** achanda has quit IRC23:17
*** britthou_ has joined #openstack-kolla23:20
*** britthouser has quit IRC23:20
*** britthou_ has quit IRC23:25
*** britthouser has joined #openstack-kolla23:27
*** rstarmer has joined #openstack-kolla23:28
*** jtriley has joined #openstack-kolla23:28
*** jtriley has quit IRC23:35
*** banix has quit IRC23:35
*** britthou_ has joined #openstack-kolla23:36
*** britthouser has quit IRC23:40
*** jtriley has joined #openstack-kolla23:42
*** rstarmer has quit IRC23:44
*** rstarmer has joined #openstack-kolla23:45
*** ssurana has joined #openstack-kolla23:47
*** jtriley has quit IRC23:50
*** rstarmer has quit IRC23:51
*** achanda has joined #openstack-kolla23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!