| *** markvoelker has quit IRC | 00:01 | |
| *** yogesh-pc has joined #puppet-openstack | 00:28 | |
| *** yogesh-pc_ has joined #puppet-openstack | 00:30 | |
| *** yogesh-pc has quit IRC | 00:33 | |
| *** gildub has joined #puppet-openstack | 00:38 | |
| *** linkedinyou has quit IRC | 00:39 | |
| *** xarses has quit IRC | 00:46 | |
| openstackgerrit | Ivan Chavero proposed openstack/puppet-neutron: Split SR-IOV configuration file into driver and agent pieces https://review.openstack.org/221991 | 00:51 |
|---|---|---|
| *** ducttape_ has joined #puppet-openstack | 00:55 | |
| *** markvoelker has joined #puppet-openstack | 00:58 | |
| *** linkedinyou has joined #puppet-openstack | 00:58 | |
| *** ducttape_ has quit IRC | 01:01 | |
| *** markvoelker has quit IRC | 01:02 | |
| *** ducttape_ has joined #puppet-openstack | 01:02 | |
| *** tiswanso has joined #puppet-openstack | 01:04 | |
| *** xarses has joined #puppet-openstack | 01:05 | |
| *** tiswanso has quit IRC | 01:06 | |
| *** tiswanso has joined #puppet-openstack | 01:07 | |
| *** yogesh-pc_ has quit IRC | 01:14 | |
| *** ducttape_ has quit IRC | 01:16 | |
| *** ducttape_ has joined #puppet-openstack | 01:21 | |
| *** ducttape_ has quit IRC | 01:23 | |
| *** xingchao has joined #puppet-openstack | 01:24 | |
| gildub | michchap, would you mind reviewing the following ones? https://review.openstack.org/221119 https://review.openstack.org/221120 and https://review.openstack.org/221120 | 01:30 |
| michchap | gildub: sure. | 01:30 |
| michchap | gildub: last two are the same link | 01:31 |
| gildub | michchap, sorry https://review.openstack.org/221121 | 01:31 |
| *** linkedinyou has quit IRC | 01:31 | |
| gildub | michchap, hi - thanks! | 01:31 |
| gildub | michchap, those are to address flaws with managing domains in keystone V3 | 01:32 |
| gildub | michchap, and they might land in stable/kilo too, ultimately | 01:33 |
| EmilienM | gildub: why? | 01:33 |
| EmilienM | gildub: which bug are we fixing? | 01:33 |
| gildub | EmilienM, the domains | 01:33 |
| EmilienM | regarding https://review.openstack.org/221567 | 01:33 |
| EmilienM | I don't see what is solving https://review.openstack.org/221567 in stable/kilo | 01:33 |
| EmilienM | michchap: o/ | 01:34 |
| gildub | EmilienM, I didn't mention 221567 | 01:34 |
| EmilienM | but I do :) | 01:34 |
| EmilienM | michchap: I'm not conservative in backports, I just want to make sure we're backward compatible | 01:35 |
| EmilienM | just saying | 01:35 |
| gildub | EmilienM, ah sorry I thought you're asking about the other ones | 01:35 |
| EmilienM | everything that fix bugs needs to be backported | 01:35 |
| gildub | EmilienM, if 221567 is not backported then we won't be able to backport anything else | 01:35 |
| EmilienM | only if it's backward compat | 01:35 |
| richm | we will be able to backport without 221567, but it will be much harder | 01:36 |
| richm | == error/bug prone | 01:36 |
| gildub | EmilienM, yeah ^ | 01:36 |
| richm | so there is risk either way | 01:37 |
| EmilienM | richm: if it's harder, let's backport what we need | 01:37 |
| EmilienM | to make it easier (ie error prone) | 01:37 |
| gildub | EmilienM, understood the theory, but I think we're in a grey area here, the domain was still experimental when we moved from kilo to liberty, now unless we don't want to have better domain stuff in kilo then... | 01:37 |
| gildub | EmilienM, well and it's still experimental. | 01:38 |
| EmilienM | we added domains support in stable/kilo. If there are some critical bugs, let's fix them | 01:38 |
| EmilienM | like "not able to change the default domain id" is to me critical | 01:38 |
| *** linkedinyou has joined #puppet-openstack | 01:38 | |
| EmilienM | so I vote for backporting the domain bugfix to stable/kilo | 01:38 |
| EmilienM | but not the new features | 01:39 |
| gildub | EmilienM, ok, btw the initial idea of 221567 was to help with v2 issues too | 01:39 |
| EmilienM | gildub: good, I'll +2 it | 01:40 |
| EmilienM | gildub: once chem will update his -1 | 01:40 |
| richm | gildub: The issue that chem found - do we need to fix that in master too? | 01:40 |
| richm | or was that some artifact of the cherry-pick? | 01:41 |
| EmilienM | a backport is a cherry pic | 01:41 |
| EmilienM | so do not modify it | 01:41 |
| EmilienM | except if code conflict | 01:42 |
| EmilienM | if something's wrong in master, let's fix master | 01:42 |
| gildub | richm, we can definitely add two more cases for testing #ssl? but that can be done later, not blocker | 01:44 |
| *** ilbot3 has quit IRC | 01:44 | |
| gildub | richm, same for using get_section instead of legacy code | 01:44 |
| michchap | EmilienM: yeah that's our policy since last year I think,right? | 01:45 |
| *** mmoo2 has joined #puppet-openstack | 01:46 | |
| richm | gildub: sure, that's stuff is just nice-to-have | 01:46 |
| EmilienM | michchap: yeah | 01:46 |
| richm | gildub: but what about https://review.openstack.org/#/c/221567/2/lib/puppet/provider/keystone.rb - line 89 ? | 01:46 |
| *** ilbot3 has joined #puppet-openstack | 01:47 | |
| *** mesamoo has quit IRC | 01:48 | |
| gildub | richm, yes I missed that one but same thing, not a blocker, in master later | 01:49 |
| richm | It is ok because the only places where get_section is actually used, it always uses 'DEFAULT' as the group/section name. | 01:50 |
| richm | but if someone tries to use get_section with a different group/section name, they will have to fix get_section first | 01:51 |
| *** xingchao has quit IRC | 01:51 | |
| gildub | richm, oh! When I said I missed that one, I meant line 40 | 01:52 |
| gildub | richm, no I'm looking at line 89... | 01:53 |
| gildub | richm, yes that's a bug but we're not hitting it because all the calls to get_section are made using 'DEFAULT' for group. | 01:55 |
| richm | right - so I'm ok with it | 01:55 |
| *** mesamoo has joined #puppet-openstack | 01:55 | |
| gildub | richm, ok. It needs a fix for future use, I'll make a fix in master | 01:56 |
| richm | so you just need to get chem to +1 | 01:57 |
| *** mmoo2 has quit IRC | 01:58 | |
| gildub | richm, yes thanks | 01:59 |
| *** mesamoo has quit IRC | 02:02 | |
| gildub | richm, Do you think we've to keep both --domain and '<name>::<domain>' approaches since they are redundant? | 02:12 |
| gildub | richm, would-it make sense to keep --domain only? | 02:13 |
| gildub | richm, I'm thinking about future providers too, well besides the trust since we don't have a choice with this one | 02:14 |
| richm | gildub: having a domain parameter to keystone resources will only make it confusing | 02:15 |
| richm | gildub: we will not allow specifying a name without a domain in the future | 02:16 |
| richm | gildub: so the domain parameter will be useless | 02:16 |
| gildub | richm, I know that, what I'm talking about is between using --domain or :: | 02:16 |
| richm | using --domain how? | 02:16 |
| richm | we have to use --domain in openstack command lines? | 02:17 |
| richm | OSC doesn't understand "user::domain" | 02:17 |
| gildub | richm, I mean as a resource parameter (forget the --) | 02:17 |
| richm | gildub: Right, that's what I mean - we should get rid of the domain resource parameter | 02:17 |
| richm | as soon as possible | 02:18 |
| gildub | richm, yes, that's what I thought | 02:18 |
| gildub | richm, but when possible (unlike trust) if a domain parameter can be used why not use it, it makes things more natural | 02:19 |
| gildub | richm, for instance keystone_tenant { 'service': domain => 'domain', ... } | 02:20 |
| gildub | richm, the domain being mandatory | 02:20 |
| richm | gildub: What will Keystone_tenant.self.instances name that resource? | 02:21 |
| gildub | richm, ah yeah, forgot about that one. | 02:22 |
| gildub | richm, ok, never mind then | 02:23 |
| openstackgerrit | Adam Vinsh proposed openstack/puppet-swift: WIP Manage swift with swiftinit service provider https://review.openstack.org/203220 | 02:31 |
| *** xingchao has joined #puppet-openstack | 02:33 | |
| *** yogesh-pc_ has joined #puppet-openstack | 02:35 | |
| openstackgerrit | Gilles Dubreuil proposed openstack/puppet-keystone: Providers tenant/user/user_role: domain check/name https://review.openstack.org/218059 | 02:40 |
| *** llua has quit IRC | 02:54 | |
| openstackgerrit | Gilles Dubreuil proposed openstack/puppet-keystone: Fixes get_section for future use https://review.openstack.org/222017 | 02:54 |
| *** markvoelker has joined #puppet-openstack | 02:55 | |
| *** llua^_^AznSmile- has joined #puppet-openstack | 02:57 | |
| openstackgerrit | Adam Vinsh proposed openstack/puppet-swift: WIP Manage swift with swiftinit service provider https://review.openstack.org/203220 | 02:58 |
| Vinsh | gates broken again on centos | 03:09 |
| Vinsh | 2015-09-10 03:08:37.965 | Error: Execution of '/usr/bin/yum -d 0 -e 0 -y list xinetd' returned 1: One of the configured repositories failed (RDO trunk), | 03:09 |
| EmilienM | Vinsh: ok | 03:09 |
| EmilienM | I'm working on it | 03:09 |
| Vinsh | You rock :) | 03:09 |
| EmilienM | Vinsh: logs? | 03:10 |
| Vinsh | https://jenkins06.openstack.org/job/gate-puppet-swift-puppet-beaker-rspec-dsvm-centos7/46/console | 03:10 |
| EmilienM | ok | 03:10 |
| Vinsh | maybe it works through it this time... | 03:11 |
| EmilienM | Vinsh: it's random issue | 03:11 |
| Vinsh | fail before it was: http://logs.openstack.org/20/203220/32/check/gate-puppet-swift-puppet-beaker-rspec-upgrade-dsvm-centos7/ccf1963/console.html | 03:11 |
| EmilienM | sometimes rdo repo are down | 03:11 |
| EmilienM | I was about to change the repo | 03:11 |
| EmilienM | we are going to to stop using delorean | 03:11 |
| EmilienM | I got an email from RDO guys, told me we should switch | 03:12 |
| Vinsh | what is it you add to a review to re-trigger? is it "recheck nobug" ? | 03:12 |
| Vinsh | ah good to do then | 03:12 |
| EmilienM | recheck is enough | 03:12 |
| EmilienM | Vinsh: see https://etherpad.openstack.org/p/puppet-liberty-blocker | 03:12 |
| EmilienM | I have to update repos | 03:13 |
| EmilienM | I do it now | 03:13 |
| Vinsh | I had added a "recheck" to this https://review.openstack.org/#/c/203220/ but didn't notice the old results drop off and trigger a new check | 03:14 |
| Vinsh | maybe it does so without dropping existing results first | 03:14 |
| EmilienM | Vinsh: zuul has not finished | 03:14 |
| Vinsh | ah that one tripleo job that takes forever. :) | 03:14 |
| EmilienM | no | 03:14 |
| EmilienM | it's experimental | 03:14 |
| EmilienM | so they don't count like others | 03:14 |
| Vinsh | Ok, well I'll try the "recheck" comment again some time and see if it triggers. | 03:15 |
| EmilienM | yeah | 03:16 |
| gildub | EmilienM, were are going to get the RPMs if not from delorean? | 03:16 |
| EmilienM | SECRET | 03:16 |
| EmilienM | sorry I'm tired | 03:16 |
| EmilienM | http://cbs.centos.org/repos/cloud7-openstack-liberty-testing/x86_64/os/ | 03:16 |
| EmilienM | http://cbs.centos.org/repos/cloud7-openstack-common-testing/x86_64/os/ | 03:16 |
| gildub | EmilienM, no worries mate! | 03:17 |
| EmilienM | the "new repos" lol | 03:17 |
| Vinsh | Yeah, sleep time. TTYL. | 03:17 |
| EmilienM | Vinsh: o/ | 03:17 |
| gildub | EmilienM, cool | 03:17 |
| EmilienM | I might have missed something | 03:26 |
| EmilienM | http://trunk.rdoproject.org/centos7/current/ | 03:26 |
| EmilienM | it's empty | 03:26 |
| gildub | Interesting... | 03:27 |
| EmilienM | oh I got it | 03:30 |
| EmilienM | so we still need delorean | 03:30 |
| EmilienM | but we can drop epel & rdo kilo | 03:30 |
| gildub | EmilienM, looks like something went wrong during the build in http://trunk.rdoproject.org/centos7/current/ | 03:31 |
| gildub | EmilienM, not following you, what about all the epel dependent packages then. And what's the point of cbs.centos.org...liberty-testing if we need delorean which contains the lastest builds anyway? | 03:33 |
| EmilienM | I don't know | 03:33 |
| EmilienM | I get an emal from alan | 03:34 |
| EmilienM | apevec | 03:34 |
| gildub | Ah | 03:34 |
| gildub | EmilienM, Would it be possible to forward it to the list? | 03:35 |
| EmilienM | gildub: yeah | 03:35 |
| gildub | EmilienM, great, thanks. | 03:35 |
| EmilienM | gildub: done | 03:36 |
| *** tiswanso has quit IRC | 03:36 | |
| *** yogesh-pc_ has quit IRC | 03:37 | |
| *** richm has quit IRC | 03:40 | |
| gildub | EmilienM, I can see it, merci! | 03:40 |
| EmilienM | :) | 03:41 |
| gildub | This one should actually be in RDO list too | 03:42 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 03:43 |
| EmilienM | let' see if it works | 03:43 |
| EmilienM | http://lists.openstack.org/pipermail/openstack-dev/2015-September/074040.html | 03:48 |
| EmilienM | it's the most hilarious mail I've never read. | 03:48 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 03:53 |
| EmilienM | gildub: look http://trunk.rdoproject.org/centos7/current/rpmbuild.log | 04:03 |
| EmilienM | it seems like python-oslo-policy can't be installed | 04:04 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-keystone: DNM - CI test https://review.openstack.org/222028 | 04:05 |
| EmilienM | I'm afraid our CI is broken | 04:05 |
| EmilienM | good night | 04:11 |
| gildub | EmilienM, yeah I saw that :( - Bonne nuit | 04:16 |
| *** mflobo has quit IRC | 04:20 | |
| *** mflobo has joined #puppet-openstack | 04:32 | |
| *** xingchao has quit IRC | 04:35 | |
| *** markvoelker has quit IRC | 04:55 | |
| *** stamak has joined #puppet-openstack | 05:31 | |
| *** chem has quit IRC | 05:44 | |
| *** zhangjn has joined #puppet-openstack | 05:51 | |
| *** zhangjn has quit IRC | 05:51 | |
| *** zhangjn has joined #puppet-openstack | 05:52 | |
| *** stamak has quit IRC | 05:53 | |
| *** jerrygb has joined #puppet-openstack | 05:53 | |
| *** markvoelker has joined #puppet-openstack | 05:56 | |
| *** markvoelker has quit IRC | 06:01 | |
| *** jerrygb has quit IRC | 06:19 | |
| *** cgfbee has quit IRC | 06:27 | |
| *** cgfbee has joined #puppet-openstack | 06:29 | |
| *** arnaud_orange has joined #puppet-openstack | 06:40 | |
| *** jtomasek has joined #puppet-openstack | 06:50 | |
| *** Oszkar has joined #puppet-openstack | 07:01 | |
| openstackgerrit | Gilles Dubreuil proposed openstack/puppet-openstack-specs: Adds deprecation for using a name without a domain https://review.openstack.org/219127 | 07:11 |
| *** gildub has quit IRC | 07:11 | |
| *** Oszkar has quit IRC | 07:18 | |
| *** chandankumar has joined #puppet-openstack | 07:23 | |
| *** jpena has joined #puppet-openstack | 07:32 | |
| *** stamak has joined #puppet-openstack | 07:35 | |
| *** arnaud_orange has quit IRC | 07:37 | |
| *** sac has quit IRC | 07:47 | |
| *** arnaud_orange has joined #puppet-openstack | 07:48 | |
| *** markvoelker has joined #puppet-openstack | 07:57 | |
| *** bapalm has quit IRC | 07:58 | |
| *** bapalm has joined #puppet-openstack | 08:00 | |
| *** jistr has joined #puppet-openstack | 08:01 | |
| *** markvoelker has quit IRC | 08:02 | |
| *** gfidente is now known as gfidente|afk | 08:11 | |
| *** jerrygb has joined #puppet-openstack | 08:19 | |
| *** Oszkar has joined #puppet-openstack | 08:23 | |
| *** jerrygb has quit IRC | 08:24 | |
| *** IBerezovskiy has joined #puppet-openstack | 08:27 | |
| *** xingchao has joined #puppet-openstack | 08:40 | |
| *** Oszkar has quit IRC | 08:41 | |
| *** karume has joined #puppet-openstack | 08:45 | |
| openstackgerrit | Lukas Bezdicka proposed openstack/puppet-trove: Remove trove ubuntu package hack https://review.openstack.org/221273 | 08:47 |
| *** derekh has joined #puppet-openstack | 08:51 | |
| *** karume has quit IRC | 08:54 | |
| *** karume has joined #puppet-openstack | 08:54 | |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-designate: Fix rspec 3.x syntax https://review.openstack.org/222077 | 08:56 |
| *** markvoelker has joined #puppet-openstack | 08:58 | |
| *** markvoelker has quit IRC | 09:02 | |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-glance: Fix rspec 3.x syntax https://review.openstack.org/222081 | 09:03 |
| *** chem has joined #puppet-openstack | 09:08 | |
| *** Oszkar has joined #puppet-openstack | 09:09 | |
| *** jerrygb has joined #puppet-openstack | 09:20 | |
| *** paramite has joined #puppet-openstack | 09:23 | |
| *** jerrygb has quit IRC | 09:26 | |
| *** zhangjn has quit IRC | 09:56 | |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-horizon: Remove duplicate key for ':servername' https://review.openstack.org/222100 | 10:01 |
| *** Oszkar has quit IRC | 10:04 | |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-ironic: Fix rspec 3.x syntax https://review.openstack.org/222103 | 10:06 |
| *** Oszkar has joined #puppet-openstack | 10:10 | |
| *** Oszkar1 has joined #puppet-openstack | 10:13 | |
| openstackgerrit | Lukas Bezdicka proposed openstack/puppet-neutron: Install service packages on api nodes https://review.openstack.org/200877 | 10:13 |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-manila: Fix rspec 3.x syntax https://review.openstack.org/222109 | 10:15 |
| *** Oszkar has quit IRC | 10:15 | |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-monasca: Fix rspec 3.x syntax https://review.openstack.org/222112 | 10:19 |
| openstackgerrit | Martin Mágr proposed openstack/puppet-nova: Rename default endpoint names https://review.openstack.org/222120 | 10:27 |
| *** cgfbee has quit IRC | 10:29 | |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-neutron: Fix rspec3 syntax https://review.openstack.org/222123 | 10:33 |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-neutron: Fix rspec 3.x syntax https://review.openstack.org/222123 | 10:34 |
| *** arnaud_orange has quit IRC | 10:41 | |
| *** cgfbee has joined #puppet-openstack | 10:42 | |
| openstackgerrit | Gael Chamoulaud proposed openstack/puppet-swift: Fix rspec 3.x syntax https://review.openstack.org/222128 | 10:44 |
| *** markvoelker has joined #puppet-openstack | 10:59 | |
| *** karume has quit IRC | 11:02 | |
| *** markvoelker has quit IRC | 11:04 | |
| openstackgerrit | Lukas Bezdicka proposed openstack/puppet-nova: Remove installation of pm-utils https://review.openstack.org/222141 | 11:12 |
| openstackgerrit | Lukas Bezdicka proposed openstack/puppet-neutron: Install service packages on api nodes https://review.openstack.org/200877 | 11:15 |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Revert "Fixed /etc/sahara handling" https://review.openstack.org/222142 | 11:20 |
| *** jerrygb has joined #puppet-openstack | 11:21 | |
| *** jerrygb has quit IRC | 11:26 | |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Revert "Fix Sahara installation for Ubuntu" https://review.openstack.org/222144 | 11:26 |
| *** TC01 has quit IRC | 11:26 | |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Revert "Fix Sahara installation for Ubuntu" https://review.openstack.org/222144 | 11:27 |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Revert "Fix Sahara installation for Ubuntu" https://review.openstack.org/222144 | 11:28 |
| *** Oszkar1 has quit IRC | 11:29 | |
| *** TC01 has joined #puppet-openstack | 11:31 | |
| *** yogesh-pc_ has joined #puppet-openstack | 11:32 | |
| *** morazi has joined #puppet-openstack | 11:32 | |
| EmilienM | good morning folks | 11:35 |
| degorenko | o/ hi | 11:35 |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Remove POSIX users, groups, and file modes. https://review.openstack.org/222146 | 11:36 |
| *** arnaud_orange has joined #puppet-openstack | 11:39 | |
| *** yogesh-pc_ has quit IRC | 11:40 | |
| *** jpena is now known as jpena|lunch | 11:41 | |
| *** xingchao has quit IRC | 11:43 | |
| *** tiswanso has joined #puppet-openstack | 11:50 | |
| *** xingchao has joined #puppet-openstack | 11:50 | |
| openstackgerrit | Merged openstack/puppet-keystone: domain name from id lookups return empty https://review.openstack.org/221119 | 11:51 |
| *** markvoelker has joined #puppet-openstack | 11:55 | |
| *** xingchao has quit IRC | 11:56 | |
| *** jayg|g0n3 is now known as jayg | 11:57 | |
| *** karume has joined #puppet-openstack | 11:59 | |
| *** xingchao has joined #puppet-openstack | 12:02 | |
| *** delattec has joined #puppet-openstack | 12:02 | |
| *** jistr is now known as jistr|mtg | 12:03 | |
| *** leanderthal has joined #puppet-openstack | 12:03 | |
| *** karume has quit IRC | 12:04 | |
| *** Oszkar has joined #puppet-openstack | 12:08 | |
| *** Oszkar1 has joined #puppet-openstack | 12:09 | |
| *** krain_ has joined #puppet-openstack | 12:10 | |
| *** Oszkar has quit IRC | 12:12 | |
| *** zhangjn has joined #puppet-openstack | 12:12 | |
| *** zhangjn has quit IRC | 12:13 | |
| *** zhangjn has joined #puppet-openstack | 12:13 | |
| *** tiswanso has quit IRC | 12:14 | |
| *** zhangjn has quit IRC | 12:16 | |
| *** dprince has joined #puppet-openstack | 12:19 | |
| *** dprince has quit IRC | 12:20 | |
| *** dprince has joined #puppet-openstack | 12:20 | |
| *** ducttape_ has joined #puppet-openstack | 12:23 | |
| *** xingchao has quit IRC | 12:30 | |
| *** bklei has joined #puppet-openstack | 12:31 | |
| *** karume has joined #puppet-openstack | 12:32 | |
| *** bklei has quit IRC | 12:35 | |
| *** gfidente has joined #puppet-openstack | 12:37 | |
| *** ducttape_ has quit IRC | 12:40 | |
| *** bklei has joined #puppet-openstack | 12:40 | |
| *** jerrygb has joined #puppet-openstack | 12:40 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 12:40 |
| *** bklei_ has joined #puppet-openstack | 12:43 | |
| *** bklei_ has quit IRC | 12:45 | |
| *** jerrygb has quit IRC | 12:45 | |
| *** bklei_ has joined #puppet-openstack | 12:45 | |
| *** bklei has quit IRC | 12:46 | |
| *** jpena|lunch is now known as jpena | 12:47 | |
| *** jistr|mtg is now known as jistr | 12:52 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 12:57 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 12:58 |
| openstackgerrit | Merged openstack/puppet-keystone: able to use wrong value for default_domain_id https://review.openstack.org/221120 | 12:59 |
| *** richm has joined #puppet-openstack | 13:00 | |
| openstackgerrit | Merged openstack/puppet-keystone: able to use wrong resource name https://review.openstack.org/221121 | 13:02 |
| *** karume has quit IRC | 13:04 | |
| *** karume has joined #puppet-openstack | 13:05 | |
| *** bklei has joined #puppet-openstack | 13:06 | |
| *** bklei has quit IRC | 13:07 | |
| *** bklei_ has quit IRC | 13:10 | |
| Vinsh | Starting CI... like an old lawnmower ;) | 13:10 |
| *** leanderthal has quit IRC | 13:15 | |
| *** krain_ has quit IRC | 13:18 | |
| *** pradk has joined #puppet-openstack | 13:19 | |
| *** tiswanso has joined #puppet-openstack | 13:19 | |
| *** chandankumar has quit IRC | 13:26 | |
| EmilienM | Vinsh: today I'm working on new repos | 13:36 |
| EmilienM | see https://etherpad.openstack.org/p/puppet-liberty-blocker | 13:36 |
| Vinsh | cbs +1 | 13:37 |
| *** jerrygb has joined #puppet-openstack | 13:41 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 13:41 |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Revert "Fixed /etc/sahara handling" https://review.openstack.org/222142 | 13:42 |
| *** zhangjn has joined #puppet-openstack | 13:43 | |
| *** zhangjn has quit IRC | 13:43 | |
| *** jerrygb has quit IRC | 13:45 | |
| openstackgerrit | Javier Peña proposed openstack/puppet-swift: Add support for swift-object-expirer service https://review.openstack.org/211549 | 13:52 |
| *** xingchao has joined #puppet-openstack | 13:53 | |
| openstackgerrit | Adam Vinsh proposed openstack/puppet-swift: WIP Manage swift with swiftinit service provider https://review.openstack.org/203220 | 13:55 |
| *** paramite has quit IRC | 13:55 | |
| *** dfisher has joined #puppet-openstack | 13:56 | |
| *** zhangjn has joined #puppet-openstack | 13:58 | |
| *** paramite has joined #puppet-openstack | 14:00 | |
| *** tiswanso has quit IRC | 14:00 | |
| *** ducttape_ has joined #puppet-openstack | 14:01 | |
| *** tiswanso has joined #puppet-openstack | 14:02 | |
| openstackgerrit | Merged openstack/puppet-designate: Fix rspec 3.x syntax https://review.openstack.org/222077 | 14:07 |
| degorenko | spredzy, hey o/ i want ask you about https://review.openstack.org/#/c/219275/ and https://review.openstack.org/#/c/221005/ Should i rebase on your patch? Or until we didn't receive any positive feedback for your patch, i can use old style? :) | 14:13 |
| openstackgerrit | Merged openstack/puppet-glance: Fix rspec 3.x syntax https://review.openstack.org/222081 | 14:14 |
| *** jerrygb has joined #puppet-openstack | 14:15 | |
| spredzy | degorenko, I'd say yes if you don't mind :) it already got a +2 hopefully it won't last before getting merged | 14:15 |
| openstackgerrit | Merged openstack/puppet-monasca: Fix rspec 3.x syntax https://review.openstack.org/222112 | 14:16 |
| degorenko | spredzy, i must upset you - your patch has merge conflict | 14:18 |
| openstackgerrit | Merged openstack/puppet-ironic: Fix rspec 3.x syntax https://review.openstack.org/222103 | 14:18 |
| *** chandankumar has joined #puppet-openstack | 14:18 | |
| EmilienM | degorenko: I never saw spredzy upset :P | 14:18 |
| EmilienM | I tried... :) | 14:18 |
| spredzy | degorenko, hahah no worries, it happens quite often lately across projects :) | 14:18 |
| spredzy | EmilienM, ahaha :D | 14:18 |
| degorenko | EmilienM, spredzy :D | 14:19 |
| spredzy | degorenko, will rebase later today :) | 14:19 |
| openstackgerrit | Merged openstack/puppet-manila: Fix rspec 3.x syntax https://review.openstack.org/222109 | 14:19 |
| degorenko | spredzy, so, i will wait until your patch will be merged, and then i'll update mine :) | 14:19 |
| spredzy | degorenko, deal ;) | 14:20 |
| openstackgerrit | Merged openstack/puppet-neutron: Fix rspec 3.x syntax https://review.openstack.org/222123 | 14:25 |
| *** IBerezovskiy has quit IRC | 14:25 | |
| *** degorenko has quit IRC | 14:26 | |
| openstackgerrit | Merged openstack/puppet-swift: Fix rspec 3.x syntax https://review.openstack.org/222128 | 14:27 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 14:34 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 14:39 |
| *** guimaluf has joined #puppet-openstack | 14:44 | |
| *** zhangjn has quit IRC | 14:52 | |
| *** IBerezovskiy has joined #puppet-openstack | 14:53 | |
| *** degorenko has joined #puppet-openstack | 14:53 | |
| openstackgerrit | Ivan Chavero proposed openstack/puppet-neutron: Split SR-IOV configuration file into driver and agent pieces https://review.openstack.org/221991 | 14:58 |
| *** paramite has quit IRC | 15:00 | |
| *** paramite has joined #puppet-openstack | 15:12 | |
| *** yogesh-pc has joined #puppet-openstack | 15:14 | |
| *** jistr is now known as jistr|mtg | 15:14 | |
| *** xarses has quit IRC | 15:16 | |
| yogesh-pc | I would like to replicate the an openstack environment using 2 VM: 1 Compute and 1 Controller Node. If I am successful I will be implementing the same on actual HW nodes. Could someone let me know how I can go about it. | 15:19 |
| *** jistr|mtg is now known as jistr | 15:26 | |
| *** IBerezovskiy has quit IRC | 15:46 | |
| *** degorenko has quit IRC | 15:46 | |
| *** tiswanso has quit IRC | 15:48 | |
| *** yogesh-pc_ has joined #puppet-openstack | 15:48 | |
| *** tiswanso has joined #puppet-openstack | 15:49 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-nova: acceptance: switch RDO to CBS repositories https://review.openstack.org/222025 | 15:49 |
| *** yogesh-pc has quit IRC | 15:51 | |
| *** IBerezovskiy has joined #puppet-openstack | 15:52 | |
| *** stamak has quit IRC | 15:54 | |
| *** Fin1te has joined #puppet-openstack | 15:55 | |
| *** xarses has joined #puppet-openstack | 15:56 | |
| *** angdraug has joined #puppet-openstack | 15:58 | |
| *** degorenko has joined #puppet-openstack | 16:09 | |
| *** paramite is now known as paramite|afk | 16:13 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-ceilometer: acceptance: bump to Liberty https://review.openstack.org/222265 | 16:15 |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Add new parameters for Sahara https://review.openstack.org/220090 | 16:15 |
| *** paramite|afk is now known as paramite | 16:15 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-cinder: acceptance: switch RDO to CBS repositories https://review.openstack.org/222266 | 16:15 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-designate: acceptance: switch RDO to CBS repositories https://review.openstack.org/222269 | 16:16 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-glance: acceptance: switch RDO to CBS repositories https://review.openstack.org/222270 | 16:16 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-heat: acceptance: switch RDO to CBS repositories https://review.openstack.org/222271 | 16:16 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-horizon: acceptance: bump to Liberty https://review.openstack.org/222272 | 16:16 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-ironic: acceptance: bump to Liberty https://review.openstack.org/222273 | 16:16 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-keystone: acceptance: switch RDO to CBS repositories https://review.openstack.org/222274 | 16:16 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-manila: acceptance: switch RDO to CBS repositories https://review.openstack.org/222275 | 16:17 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-neutron: acceptance: switch RDO to CBS repositories https://review.openstack.org/222276 | 16:17 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-sahara: acceptance: switch RDO to CBS repositories https://review.openstack.org/222277 | 16:17 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-swift: acceptance: switch RDO to CBS repositories https://review.openstack.org/222278 | 16:17 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-trove: acceptance: switch RDO to CBS repositories https://review.openstack.org/222279 | 16:18 |
| *** chem has quit IRC | 16:28 | |
| *** chem has joined #puppet-openstack | 16:30 | |
| openstackgerrit | Denis Egorenko proposed openstack/puppet-sahara: Remove POSIX file modes. https://review.openstack.org/222146 | 16:31 |
| *** chandankumar has quit IRC | 16:38 | |
| *** jistr has quit IRC | 16:40 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-keystone: wsgi/ubuntu: do not manage keystone.py file https://review.openstack.org/222286 | 16:41 |
| *** Fin1te has quit IRC | 16:45 | |
| *** LimorStotland has quit IRC | 16:48 | |
| *** jpena has quit IRC | 16:56 | |
| *** karume has quit IRC | 16:56 | |
| *** Oszkar1 has quit IRC | 16:57 | |
| openstackgerrit | Adam Vinsh proposed openstack/puppet-swift: WIP Manage swift with swiftinit service provider https://review.openstack.org/203220 | 16:57 |
| mwhahaha | EmilienM: https://review.openstack.org/#/c/219793/ i had already done that keystone fix :D | 16:58 |
| EmilienM | oh nice | 16:59 |
| EmilienM | but it fails | 16:59 |
| EmilienM | no | 16:59 |
| EmilienM | it fails in integ err | 16:59 |
| EmilienM | mwhahaha: sorry, for dup, abandoning mine right now | 16:59 |
| mwhahaha | it's all good | 16:59 |
| EmilienM | nice catch :P | 17:00 |
| *** paramite has quit IRC | 17:05 | |
| *** derekh has quit IRC | 17:06 | |
| *** IBerezovskiy has quit IRC | 17:08 | |
| *** dtalmage_ has joined #puppet-openstack | 17:20 | |
| *** chandankumar has joined #puppet-openstack | 17:45 | |
| richm | Does it matter if the output of `puppet resource` does not match what's in a manifest? | 17:50 |
| richm | I think not | 17:50 |
| richm | I would like to not have to support that they match | 17:50 |
| richm | The issue, once again, is the '::domain' in the resource name | 17:50 |
| richm | What if someone decides they don't want to do that, and just create a resource like keystone_tenant { 'projectname': domain => 'domain1' } ? | 17:51 |
| richm | because, why not? It is completely unambiguous | 17:52 |
| richm | does it matter if `puppet resource` outputs keystone_tenant { 'projectname::domain1': domain => 'domain1' } ? | 17:52 |
| richm | I have two problems 1) I don't know how people actually use this stuff 2) Whichever way we do it, it will piss off someone | 17:53 |
| *** angdraug has quit IRC | 17:53 | |
| EmilienM | richm: I guess people will start complaining or giving feedback if something's wrong | 17:54 |
| richm | For example, if we require that the name is always "name::domain", do we even need a domain property for resources? Is that even useful anymore? | 17:56 |
| richm | If I always have to say keystone_tenant { 'projectname::domain1': ...} | 17:56 |
| richm | What is the domain property useful for? | 17:57 |
| richm | When I did the initial design, I was thinking that Puppet has facilities to easily change or provide default values for properties specified as parameters to resource or class declarations | 17:58 |
| richm | For example, node based defaults, hiera integration, etc. | 17:58 |
| richm | But based on the limited feedback I have had, it seems that people who deploy this stuff don't really care, because the names are parameterized too, so it is just as easy to generate a name with a domain or without | 17:59 |
| richm | so if we are going to require 'name::domain' everywhere, it is just as easy for deployers to do that as provide domain parameters | 18:00 |
| richm | which means we don't need the domain properties | 18:00 |
| richm | which means we should get rid of them asap | 18:00 |
| richm | which means officially deprecating them from a lot of places | 18:01 |
| richm | at the same time as we begin the deprecation process for names without '::domain' | 18:01 |
| richm | and just wait until you see how ugly this is going to make keystone_trust resource naming . . . | 18:02 |
| richm | or specifying a keystone_group with a lot of users . . . | 18:03 |
| imcsk8 | richm: from my point of view the domain should be explicitly set | 18:05 |
| EmilienM | richm: I suggest to ask operators mailing list | 18:05 |
| EmilienM | and openstack-dev/puppet | 18:05 |
| EmilienM | so we get attention from people on the field | 18:05 |
| richm | imcsk8: explicitly set in the name? | 18:06 |
| *** kindjal has joined #puppet-openstack | 18:07 | |
| richm | imcsk8: for example, how would this affect packstack, if you have to change everywhere a keystone resource is passed in, to make sure it is passed in with "::domain" added? | 18:07 |
| kindjal | Setting up keystone with puppet-keystone (kilo) yeilds this error, “openstack service list: error: unrecognized arguments: --long”... | 18:07 |
| imcsk8 | richm: as parameter: domain => 'domain1' | 18:07 |
| kindjal | appears that —long is hard coded, and I think only supported by openstackclient with API version 2… and not version 3… but I can’t figure out how to specify which API version to use. | 18:08 |
| kindjal | My environment is empty (bootstrapping) | 18:08 |
| kindjal | anyone else see this? | 18:08 |
| *** admin0 has joined #puppet-openstack | 18:08 | |
| imcsk8 | richm: if we have to do that in packstack we could concatenate the name in the python code | 18:09 |
| richm | imcsk8: packstack relies on using the default names for users and tenants in many places - there isn't even a way in packstack to specify a name for some users and tenants | 18:10 |
| imcsk8 | richm: exactly we would have to change that. we are actually going to make packstack use keystone v3 | 18:11 |
| imcsk8 | richm: so we'll have to make a lot of changes | 18:11 |
| *** yogesh-pc_ has quit IRC | 18:13 | |
| *** aimon__ has quit IRC | 18:13 | |
| richm | imcsk8: many changes either way - add 'domain', 'user_domain', 'project_domain', etc. parameters in many, many places, or change the way names are created | 18:15 |
| *** severion has quit IRC | 18:15 | |
| imcsk8 | richm: yes it's gonna be fun and we'll be asking you a lot of questions ;) | 18:15 |
| richm | If you just have to change the names, then you don't have to add domain parameters to many, many classes and resources | 18:15 |
| *** severion has joined #puppet-openstack | 18:15 | |
| richm | however, you have to make sure that every class understands what 'name::domain' means | 18:16 |
| richm | all of the puppet-keystone code will | 18:16 |
| richm | but who knows where that name will be used throughout all of the puppet modules? | 18:16 |
| richm | for example - lets say I have an admin user - let's say this user exists in corp LDAP server, so I create a domain 'admin_domain' for this user | 18:18 |
| richm | so I pass in 'admin::admin_domain' as the user name in all of my puppet classes/resources | 18:19 |
| richm | including nagios, let's say | 18:19 |
| richm | now, nagios isn't technically an openstack project and technically doesn't have to know about Keystone v3 auth and domain scoped tokens | 18:20 |
| richm | nagios only knows about the corp LDAP and can use 'admin' without a domain. Who is going to be responsible for stripping off the '::admin_domain' part in order to pass to the puppet nagios classes/resources? | 18:20 |
| richm | Another question: In puppet, is it the 'name' property that must be unique, or is it the 'title'? | 18:22 |
| richm | for example, is it legal to have both keystone_tenant { 'one tenant': name => 'tenant', domain => 'domain1'} and keystone_tenant { 'another tenant': name => 'tenant', domain => 'domain2'} | 18:23 |
| *** Fin1te has joined #puppet-openstack | 18:25 | |
| *** xingchao has quit IRC | 18:28 | |
| Vinsh | Dang, zuul sure is backed up today. | 18:30 |
| *** iurygregory has quit IRC | 18:30 | |
| *** mflobo has quit IRC | 18:31 | |
| *** linkedinyou has quit IRC | 18:31 | |
| *** linkedinyou has joined #puppet-openstack | 18:32 | |
| kindjal | Anyone have a sec to help me run puppet-keystone? I get one error if I use API v2.0 and another error if I try API v3… not sure what it wants. | 18:34 |
| kindjal | v3 doesn’t like —long, and v2 doesn’t like —format | 18:34 |
| *** iurygregory has joined #puppet-openstack | 18:34 | |
| *** mflobo has joined #puppet-openstack | 18:35 | |
| openstackgerrit | Merged openstack/puppet-keystone: Use Ubuntu provided wsgi.py for keystone.wsgi https://review.openstack.org/219793 | 18:41 |
| *** chandankumar has quit IRC | 18:41 | |
| imcsk8 | richm: title has to be unique https://docs.puppetlabs.com/puppet/latest/reference/lang_defined_types.html#resource-uniqueness | 18:42 |
| openstackgerrit | Iury Gregory Melo Ferreira proposed openstack/puppet-keystone: Support for Keystone as Identity Provider https://review.openstack.org/208054 | 18:43 |
| *** EmilienM sets mode: +o spredzy | 18:45 | |
| *** EmilienM sets mode: +o mfisch | 18:45 | |
| *** EmilienM sets mode: +o clayton | 18:45 | |
| *** EmilienM sets mode: +o crinkle | 18:46 | |
| *** EmilienM sets mode: +o dprince | 18:46 | |
| *** EmilienM sets mode: +o mgagne | 18:46 | |
| *** EmilienM sets mode: +o bodepd | 18:46 | |
| *** aimon has joined #puppet-openstack | 18:52 | |
| richm | kindjal: I'm not sure what you mean by "use API 2.0" and "use API 3" - the puppet-keystone keystone_service provider is hardcoded to use API 3 | 18:53 |
| *** angdraug has joined #puppet-openstack | 18:55 | |
| kindjal | richm: Execution of '/usr/bin/openstack service list --quiet --format csv --long' returned 2 | 18:56 |
| kindjal | openstack service list: error: unrecognized arguments: --long | 18:57 |
| kindjal | that happens with an empty environment… playing around on the command line seems to reveal that the —long option is only available in API v2 in openstackclient | 18:57 |
| richm | kindjal: /usr/bin/openstack --os-identity-api-version 3 service list --quiet --format csv --long | 18:57 |
| kindjal | ERROR: cliff.app You must provide a username via either --os-username or env[OS_USERNAME] | 18:58 |
| richm | you have to tell openstack which identity api version you are using - the arguments are different depending on the version | 18:58 |
| richm | kindjal: env|grep ^OS_ | 18:58 |
| iurygregory | EmilienM, when you have time can you take a look at the acceptance in https://review.openstack.org/#/c/208054/ ^^ | 18:58 |
| kindjal | richm: No results | 18:59 |
| kindjal | nothing with OS_ | 18:59 |
| richm | kindjal: did you expect /usr/bin/openstack service list --quiet --format csv --long to return a result with no authentication provided? | 18:59 |
| richm | kindjal: or were you just looking for it to provide a usage error message? | 18:59 |
| kindjal | well, I’ve tried with OS_TOKEN and user creds | 18:59 |
| kindjal | and it fails for different reasons... | 19:00 |
| kindjal | then I found this: https://bugs.launchpad.net/puppet-keystone/+bug/1488018 | 19:00 |
| openstack | Launchpad bug 1488018 in puppet-keystone "Does not work if v3 API variables are set in the environment" [Undecided,Incomplete] | 19:00 |
| kindjal | within there is a comment, “To be able to bootstrap Keystone installation properly, I would not recommend to have an openrc or any openstack variables preset." | 19:00 |
| kindjal | I’m expecting it to read auth_token from /etc/keystone/keystone.conf, I think. | 19:00 |
| richm | kindjal: no, it won't do that | 19:00 |
| *** derekh has joined #puppet-openstack | 19:00 | |
| richm | you have to specify OS_TOKEN= or openstack --os-token "value" | 19:01 |
| kindjal | and OS_URL too then? | 19:01 |
| richm | yes | 19:01 |
| kindjal | but not OS_IDENTITY_API_VERSION? | 19:02 |
| *** ducttape_ has quit IRC | 19:02 | |
| richm | # OS_IDENTITY_API_VERSION=3 OS_TOKEN="value" OS_URL=http://localhost:35357/v3 openstack service list --long | 19:02 |
| kindjal | with those set: | 19:02 |
| kindjal | openstack service list: error: unrecognized arguments: --long | 19:03 |
| richm | kindjal: openstack --version | 19:03 |
| kindjal | openstack 0.3.0 | 19:03 |
| kindjal | hmm | 19:03 |
| kindjal | python-openstackclient | 1.0.3-0ubuntu1~cloud0 | http://ubuntu-cloud.archive.canonical.com/ubuntu/ trusty-updates/kilo/main amd64 Packages | 19:03 |
| kindjal | not sure how I got the old version... | 19:03 |
| kindjal | apt-cache policy shows 1.0.3 available... | 19:04 |
| richm | yeah - 0.3.0 is not going to work for many reasons, this being only one of them | 19:04 |
| kindjal | python-openstackclient is already the newest version. | 19:04 |
| kindjal | despite 1.0.3 being a candidate | 19:04 |
| kindjal | hmm | 19:04 |
| kindjal | ok | 19:04 |
| kindjal | thanks! | 19:04 |
| *** imcsk8 is now known as imcsk8|afk | 19:06 | |
| *** ducttape_ has joined #puppet-openstack | 19:12 | |
| *** Fin1te has quit IRC | 19:20 | |
| *** Fin1te has joined #puppet-openstack | 19:26 | |
| *** xingchao has joined #puppet-openstack | 19:29 | |
| *** derekh has quit IRC | 19:29 | |
| *** xingchao has quit IRC | 19:33 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-ceilometer: acceptance: bump to Liberty https://review.openstack.org/222265 | 19:47 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-heat: acceptance: switch RDO to CBS repositories https://review.openstack.org/222271 | 19:49 |
| *** yogesh-pc has joined #puppet-openstack | 19:51 | |
| kindjal | richm: I got openstackclient 1.0.3 installed, and there’s still an error... | 19:54 |
| kindjal | with OS_ variables set... | 19:54 |
| kindjal | /usr/bin/openstack domain list --quiet --format csv | 19:54 |
| kindjal | ERROR: openstack Invalid command 'domain list --format' | 19:54 |
| *** jerrygb has quit IRC | 19:58 | |
| kindjal | if I set API v3 via OS_ then I get: openstack endpoint list: error: unrecognized arguments: --long | 20:00 |
| kindjal | if I unset all OS_ then I think it’s working! | 20:01 |
| *** linkedinyou|2 has joined #puppet-openstack | 20:05 | |
| *** linkedinyou|2 has quit IRC | 20:06 | |
| *** linkedinyou has quit IRC | 20:07 | |
| *** kindjal has quit IRC | 20:08 | |
| iurygregory | hey richm, when configure keystone with mellon , i need to modify another file beyond keystone.conf and keystone-apache.conf (apache directory) ? | 20:15 |
| openstackgerrit | Merged openstack/puppet-neutron: Configure Big Switch ML2 plugin https://review.openstack.org/214686 | 20:16 |
| *** yogesh-pc has quit IRC | 20:18 | |
| *** jayg is now known as jayg|g0n3 | 20:20 | |
| *** delattec has quit IRC | 20:20 | |
| richm | iurygregory: looking | 20:21 |
| iurygregory | ok | 20:22 |
| richm | iurygregory: not directly - mellon provides a script /usr/libexec/mod_auth_mellon/mellon_create_metadata.sh which creates the SP metadata file, and the cert and key files | 20:24 |
| richm | https://github.com/richm/rdo-vm-factory/blob/master/rdo-federation-setup/vm-post-cloud-init-rdo.sh#L129 | 20:24 |
| richm | then it uses those files in the keystone-apache.conf | 20:25 |
| richm | https://github.com/richm/rdo-vm-factory/blob/master/rdo-federation-setup/vm-post-cloud-init-rdo.sh#L129 | 20:25 |
| iurygregory | hummm, for shibboleth we need to update the shibolleth2.xml file and attribute-map.xml | 20:26 |
| *** gfidente has quit IRC | 20:30 | |
| *** jerrygb has joined #puppet-openstack | 20:30 | |
| *** yogesh-pc has joined #puppet-openstack | 20:33 | |
| *** aimon has quit IRC | 20:34 | |
| richm | iurygregory: ok - that's one of those things that will be different in each saml implementation | 20:36 |
| iurygregory | yeah, i'm just wondering which puppet-module can i use to modify shibboleth file, since puppet-keystone will only change keystone conf files | 20:38 |
| *** dtalmage_ has quit IRC | 20:43 | |
| *** imcsk8|afk is now known as imcsk8 | 20:46 | |
| richm | iurygregory: hmm - don't know - did web search find anything? | 20:49 |
| richm | iurygregory: you might be the first :P | 20:49 |
| iurygregory | richm, i've found this (https://github.com/aethylred/puppet-shibboleth) XD, so the user who wants keystone as SP using shibboleth will need to use keystone::federation::saml::shibboleth to configure the keystone and use shibboleth from this repo.. | 20:54 |
| iurygregory | to apply changes to shibboleth files | 20:55 |
| richm | iurygregory: ok - not sure how puppet-shibboleth should be handled - it's not really a puppet-openstack module - sounds like something that should be on puppet forge | 20:56 |
| EmilienM | clayton: where do you run containers? on a VM? | 20:57 |
| EmilienM | dprince ^ | 20:57 |
| clayton | on baremetal | 20:57 |
| clayton | for deploying openstack itself | 20:57 |
| dprince | clayton: where are your Dockerfiles? | 20:57 |
| *** tiswanso has quit IRC | 20:57 | |
| dprince | clayton: for say... openstack service containers? | 20:57 |
| clayton | right, we run heat and designate in containers right now | 20:57 |
| iurygregory | thanks richm | 20:58 |
| EmilienM | clayton: have you investigated magnum? | 20:58 |
| *** rhallisey has joined #puppet-openstack | 20:58 | |
| EmilienM | or using Puppet to manage containers is good for you? | 20:58 |
| *** Slower has joined #puppet-openstack | 20:58 | |
| clayton | I'm guessing magnum wouldn't make sense unless we were doing tripleo | 20:59 |
| EmilienM | lol | 20:59 |
| clayton | but no, I haven't looked into it hardly at all | 20:59 |
| EmilienM | it's funny because I'm proposing to use Magnum in TripleO | 20:59 |
| EmilienM | but until now, we don't think it's the right approach for us | 20:59 |
| clayton | The little I've read, Magnum sounds interesting | 21:00 |
| EmilienM | clayton: how do you manage configuration files with containers? | 21:00 |
| clayton | we mount /etc/<service> and /var/log/<service> into the container for now | 21:01 |
| clayton | the former being a read only mount | 21:01 |
| EmilienM | clayton: so for you, it's not possible to run 2 heat-api containers if they have different configurations | 21:01 |
| clayton | no, I still don't really understand why anyone would want to do that | 21:02 |
| EmilienM | clayton: I'm was just wondering | 21:02 |
| *** gfidente has joined #puppet-openstack | 21:02 | |
| EmilienM | dprince, rhallisey, Slower: this approach is interested, we might consider it too | 21:02 |
| EmilienM | interesting* | 21:03 |
| clayton | the glue code we use between the openstack puppet modules and our containers is here - https://github.com/twc-openstack/puppet-os_docker | 21:03 |
| dprince | EmilienM: that is very similar to what we are doing | 21:03 |
| dprince | EmilienM: we create our config files w/ puppet (in an /etc tree) | 21:03 |
| clayton | our dockerfiles aren't public right now, but they're not anything fancy. we basically just build a venv inside the container with a frozen requirementx.txt | 21:03 |
| EmilienM | dprince: puppet-tripleo is tricking a lot of stuff though | 21:04 |
| EmilienM | we might need to get rid of this | 21:04 |
| rhallisey | sounds a lot like what we do | 21:04 |
| clayton | We've looked at kolla, but right now there are some features missing that we need (like being able to specify a frozen requirements.txt) | 21:04 |
| dprince | EmilienM: I'm open to ideas | 21:04 |
| rhallisey | clayton, if you need anything implemented make a bp | 21:04 |
| rhallisey | and I'll make it happen | 21:05 |
| EmilienM | Alleluia | 21:05 |
| rhallisey | for kolla that is | 21:05 |
| clayton | I know, I talked to sdake about it already, I just don't have time right now | 21:05 |
| rhallisey | clayton, kk | 21:05 |
| dprince | EmilienM, clayton : this rhallisey work on the external config interface (that we plan on using with the initial TripleO work) https://review.openstack.org/#/c/216874/ | 21:06 |
| EmilienM | dprince: we could investigate the 'tag' thing | 21:06 |
| dprince | EmilienM: by all means, yes :) | 21:06 |
| clayton | and honestly, I think kolla looks like a good project, but it has a lot of flexibility we don't need right now, so switching from our home grown stuff isnt' very high priority. | 21:06 |
| dprince | EmilienM: I planned on doing it to get you off my case :) | 21:06 |
| EmilienM | lol | 21:06 |
| dprince | EmilienM: but if you beat me to it I wouldn't be unhappy | 21:06 |
| EmilienM | ahah | 21:07 |
| EmilienM | oh dear | 21:07 |
| EmilienM | clayton: during the midcycle, could you push more patches for tags? | 21:07 |
| clayton | @EmilienM: that's the plan, given time | 21:08 |
| EmilienM | for now, dprince is noop'ing the resources | 21:09 |
| EmilienM | see https://review.openstack.org/#/c/209030/ | 21:09 |
| openstackgerrit | Gilles Dubreuil proposed openstack/puppet-keystone: Fixes get_section for future use https://review.openstack.org/222017 | 21:09 |
| EmilienM | dprince: how do you create DB then? | 21:10 |
| openstackgerrit | Gilles Dubreuil proposed openstack/puppet-keystone: Keystone V3 support with domain checking https://review.openstack.org/218044 | 21:10 |
| dprince | EmilienM: the nooping is fine grained | 21:10 |
| dprince | EmilienM: you could simply allow Exec resources | 21:10 |
| dprince | EmilienM: but for the compute role we don't run DB syncs | 21:10 |
| dprince | EmilienM: so we are good to go without Exec's | 21:10 |
| rhallisey | dprince, kolla as a build in flag to run db_sync | 21:11 |
| openstackgerrit | Gilles Dubreuil proposed openstack/puppet-keystone: Providers tenant/user/user_role: domain check/name https://review.openstack.org/218059 | 21:11 |
| rhallisey | I think it's bootstrap or something | 21:11 |
| dprince | rhallisey: right, and we haven't decided where/what will run the db_syncs yet | 21:11 |
| EmilienM | dprince: I'm more interested by controllers, more challenging | 21:11 |
| rhallisey | right | 21:11 |
| *** admin0 has quit IRC | 21:11 | |
| dprince | EmilienM: agree | 21:11 |
| EmilienM | and well, do roles still mean something? | 21:11 |
| EmilienM | since we are going to run containers | 21:11 |
| *** gildub has joined #puppet-openstack | 21:12 | |
| dprince | EmilienM: we want better "composability" for roles | 21:12 |
| *** kindjal has joined #puppet-openstack | 21:12 | |
| dprince | EmilienM: but for now they are still fairly rigid. And they may be meaningful because there could be different hardware underneath | 21:12 |
| dprince | EmilienM: i.e. you've got attached storage in some places, but not others | 21:12 |
| dprince | EmilienM: better nics on some nodes, etc | 21:13 |
| gildub | EmilienM, richm, now that we got that far, can we please finish cleaning the domain, the domains bugs got merged and I need to have the domain default in so we can: | 21:13 |
| EmilienM | dprince: yeah, containers would help to break roles model | 21:13 |
| gildub | EmilienM, richm, 1.backport 2.have a strong base for now (trust) and later (group) | 21:13 |
| dprince | EmilienM: moving the stateless containers around would likely be easy. The others... not so much | 21:14 |
| EmilienM | dprince: right.. pacemaker, etc :/ | 21:14 |
| *** kindjal_ has joined #puppet-openstack | 21:15 | |
| *** kindjal has quit IRC | 21:16 | |
| *** kindjal_ is now known as kindjal | 21:16 | |
| *** dprince has quit IRC | 21:18 | |
| *** chem has quit IRC | 21:23 | |
| *** Fin1te has quit IRC | 21:25 | |
| *** aimon has joined #puppet-openstack | 21:31 | |
| *** chem has joined #puppet-openstack | 21:41 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-swift: acceptance: switch RDO to CBS repositories https://review.openstack.org/222278 | 21:44 |
| EmilienM | gildub: ping https://review.openstack.org/#/c/218059/40/spec/acceptance/keystone_wsgi_apache_spec.rb,cm | 21:51 |
| EmilienM | gildub: you're dropping 'domain' parameter resource | 21:51 |
| EmilienM | I wonder why | 21:51 |
| *** derekh has joined #puppet-openstack | 21:51 | |
| *** rhallisey has quit IRC | 21:54 | |
| EmilienM | richm, gildub: see my comment on https://review.openstack.org/#/c/218059 | 21:57 |
| EmilienM | yogesh-pc: you should look puppet-nova | 21:58 |
| yogesh-pc | EmilienM: thanks. | 21:59 |
| yogesh-pc | EmilienM: can we place neutron within the controller host machine? | 22:00 |
| EmilienM | you can place whatever you like | 22:00 |
| EmilienM | our modules are flexible enough | 22:00 |
| *** ducttape_ has quit IRC | 22:07 | |
| *** morazi has quit IRC | 22:08 | |
| *** ducttape_ has joined #puppet-openstack | 22:11 | |
| yogesh-pc | So is there a manifest for the controller and compute node setups that I can use ? | 22:11 |
| yogesh-pc | I want to setup a quick openstack cloud as a proof of concept,.. pretty new to openstack | 22:13 |
| EmilienM | yogesh-pc: I can give you a single node manifest | 22:17 |
| EmilienM | yogesh-pc: we're currently working to have more documentation | 22:17 |
| EmilienM | and this is something we will provide very soon, probably next week or so | 22:17 |
| yogesh-pc | Awesome.. Can I get a single node to start with... that would be really useful | 22:18 |
| EmilienM | if you want a single node manifest, look: https://github.com/openstack/puppet-openstack-integration/blob/master/fixtures/scenario001.pp#L17-L237 | 22:18 |
| yogesh-pc | I am using vagrant to test the setup for now | 22:18 |
| EmilienM | tested on ubuntu trusty & centos | 22:18 |
| EmilienM | yogesh-pc: me too | 22:18 |
| EmilienM | the manifest works fine, out of the box with master branch of modules | 22:18 |
| yogesh-pc | for my final setup, I am thinking of deploying 2 nodes: one controller with all the services and a compute node that will host the VMs | 22:19 |
| yogesh-pc | so for one node how does it install the hypervisor? | 22:20 |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: switch RDO to CBS repositories https://review.openstack.org/222385 | 22:20 |
| EmilienM | for the compute you would only need https://github.com/openstack/puppet-openstack-integration/blob/master/fixtures/scenario001.pp#L173-L177 | 22:21 |
| EmilienM | https://github.com/openstack/puppet-openstack-integration/blob/master/fixtures/scenario001.pp#L206-L214 | 22:21 |
| EmilienM | https://github.com/openstack/puppet-openstack-integration/blob/master/fixtures/scenario001.pp#L151-L160 | 22:21 |
| EmilienM | and https://github.com/openstack/puppet-openstack-integration/blob/master/fixtures/scenario001.pp#L226-L231 | 22:21 |
| EmilienM | otherwise it's on the controller | 22:21 |
| yogesh-pc | So other than the 3 classes rest all will be on the controller? | 22:24 |
| yogesh-pc | sorry 5 total | 22:25 |
| yogesh-pc | EmilienM: thanks for that... I will start with the single node. If someone could write a manifest for a two node setup, it will be great! | 22:27 |
| *** xarses has quit IRC | 22:32 | |
| *** kindjal_ has joined #puppet-openstack | 22:42 | |
| *** kindjal has quit IRC | 22:43 | |
| *** kindjal_ is now known as kindjal | 22:43 | |
| *** aimon_ has joined #puppet-openstack | 22:43 | |
| *** cdelatte has joined #puppet-openstack | 22:44 | |
| *** aimon has quit IRC | 22:45 | |
| gildub | EmilienM, re 218059, looking | 22:48 |
| *** xarses has joined #puppet-openstack | 22:54 | |
| openstackgerrit | Merged openstack/puppet-openstack-integration: integration tests: use dstat to monitor system https://review.openstack.org/218587 | 22:58 |
| *** dfisher has quit IRC | 22:58 | |
| openstackgerrit | Gilles Dubreuil proposed openstack/puppet-keystone: Providers tenant/user/user_role: domain check/name https://review.openstack.org/218059 | 23:07 |
| gildub | EmilienM, domain parameter should go away, because they're bad, as discussed with richm. We probably want to do this sooner than later, in a new patch, while domains are still experimental, otherwise we would have to do a deprecation phase | 23:07 |
| EmilienM | we introduced it in stable/kilo | 23:07 |
| EmilienM | AFIK | 23:08 |
| gildub | EmilienM, yes but experimental | 23:08 |
| EmilienM | but if we want to drop it OK, but not before M cycle | 23:08 |
| EmilienM | gildub: we can't just drop it | 23:08 |
| EmilienM | it's not our policy | 23:08 |
| EmilienM | gildub: we need to deprecate it | 23:08 |
| *** cdelatte has quit IRC | 23:08 | |
| gildub | EmilienM, ok, that's not a blocker anyway | 23:08 |
| EmilienM | richm: ^ fyi | 23:09 |
| EmilienM | we don't drop it, we deprecate it | 23:09 |
| EmilienM | and I want to see acceptance working like before at least for some resources | 23:09 |
| EmilienM | to prove it works like in stable/kilo | 23:09 |
| gildub | EmilienM, agreed, patch 218059 doesn't remove them | 23:09 |
| EmilienM | gildub: ack | 23:10 |
| EmilienM | please continue to test it | 23:10 |
| EmilienM | at least for one resource | 23:10 |
| EmilienM | and add some comment maybe in acceptance to explain the plans | 23:10 |
| gildub | EmilienM, it's in, waiting for CI result.... | 23:10 |
| EmilienM | it's very useful | 23:10 |
| EmilienM | gildub: ok :) | 23:10 |
| gildub | EmilienM, I will add comments | 23:10 |
| *** TC01 has quit IRC | 23:13 | |
| *** TC01 has joined #puppet-openstack | 23:17 | |
| *** delattec has joined #puppet-openstack | 23:18 | |
| gildub | EmilienM, also, could you +2 https://review.openstack.org/221567 ? chem has done +1 - That would clear the path (I think for starting process to back-port the domain bugs fixes | 23:18 |
| gildub | EmilienM, please :) | 23:18 |
| EmilienM | looking | 23:18 |
| *** delattec has quit IRC | 23:19 | |
| EmilienM | gildub: can you explain that change? maybe I'm missing something | 23:20 |
| EmilienM | gildub: nevermind | 23:21 |
| gildub | EmilienM, the initial driver was to help with Keystone v2/v3 issues (fuel was the first to discover them, among others), now things have evolved, if we don't do that the backport of the domains bugs are going to be much harder | 23:21 |
| gildub | EmilienM, no worries :) | 23:21 |
| EmilienM | gildub: +2 | 23:22 |
| gildub | EmilienM, thanks | 23:22 |
| *** ducttape_ has quit IRC | 23:23 | |
| gildub | michchap, G'Day - Could you please review https://review.openstack.org/221567 ? | 23:25 |
| richm | EmilienM: gildub: The more I think about it, the more I realize that having domain parameters is a good thing | 23:26 |
| richm | 1) everywhere else Keystone is used, there are explicit domain parameters | 23:26 |
| richm | 2) we can still have unique resource titles, even if the names are not unique - so keystone_tenant { 'my tenant': name => 'project', domain => 'domain1'} and keystone_tenant { 'another tenant': name => 'project', domain => 'domain2' } are distinguished by the domain | 23:27 |
| richm | 3) who cares if puppet resource doesn't return things with the right name/title? It doesn't now anyway | 23:28 |
| michchap | gildub: ack | 23:28 |
| richm | so even having "::" in the name is not necessary | 23:28 |
| richm | That is - perhaps it is better to just get rid of the "name::domain" thing altogether, and just have people pass in domain parameters everywhere | 23:29 |
| gildub | richm, I disagree with 3) what about idempotency ? | 23:30 |
| gildub | richm, unless using description field (when available) for storing an id (or equivalent) to uniquely identify the resource, which is probably bad anyway | 23:32 |
| gildub | richm, ... as you know, there is no way to identify uniquely the resource otherwise, unless using domain parameter all times, which is not possible when doing discovery (self.instances) | 23:34 |
| gildub | richm, and if we choose that road, it means adding extra logic into the providers where they shouldn't have to do so because trying to work around things to simulate some sort of idem-potency. | 23:35 |
| gildub | richm, therefore I think this would end up in the bad design column | 23:36 |
| gildub | richm, so actually I disagree with 2 and 3. I don't understand 1, unless you mean outside of puppet (like openstackclient), well they don't have to be idempotent, they have unique IDs available | 23:38 |
| gildub | richm, also forgot to say, the recommendation from Keystone folks are to always explicitly use the domain, we should not forget that because we had to offer a compatibility bridge for PUppet v2 API | 23:41 |
| gildub | BTW, for everyone else here, the latter ^ was submitted via list, even though we didn't get lots of feedback, the recommendation, especially from Keystone side, seems pretty clear | 23:45 |
| gildub | michchap, thanks | 23:47 |
| gildub | richm, ... because we had to offer compatibilty we ended up with no mandatory domain | 23:49 |
| *** angdraug has quit IRC | 23:50 | |
| openstackgerrit | Emilien Macchi proposed openstack/puppet-openstack-integration: switch RDO to CBS repositories https://review.openstack.org/222385 | 23:52 |
| *** yogesh-pc has quit IRC | 23:53 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!