Friday, 2016-02-12

*** mewald has joined #puppet-openstack00:08
*** mewald has quit IRC00:13
openstackgerritSam Morrison proposed openstack/puppet-neutron: Support midonet type driver for ML2  https://review.openstack.org/27820700:14
*** duritong has quit IRC00:15
*** duritong has joined #puppet-openstack00:15
*** ducttape_ has joined #puppet-openstack00:17
*** baker has joined #puppet-openstack00:18
*** mewald has joined #puppet-openstack00:24
*** cdelatte has quit IRC00:28
openstackgerritBrandon Weeks proposed openstack/puppet-ceph: Bump allowed version of puppetlabs-concat  https://review.openstack.org/27696900:28
*** mewald has quit IRC00:29
*** mdorman has quit IRC00:30
*** johnmilton has joined #puppet-openstack00:31
*** baker has quit IRC00:32
*** nlahouti has quit IRC00:32
*** rahulait has quit IRC00:33
*** nlahouti has joined #puppet-openstack00:36
*** sid14726 has joined #puppet-openstack00:38
*** mewald has joined #puppet-openstack00:40
*** mewald has quit IRC00:44
*** baker has joined #puppet-openstack00:47
*** v1k0d3n has quit IRC00:52
*** v1k0d3n has joined #puppet-openstack00:53
*** baker has quit IRC00:54
*** brandon has joined #puppet-openstack00:54
*** mewald has joined #puppet-openstack00:55
*** v1k0d3n has quit IRC00:56
*** v1k0d3n has joined #puppet-openstack00:57
*** baker has joined #puppet-openstack00:59
*** saneax is now known as saneax_AFK00:59
*** mewald has quit IRC00:59
*** johnmilton has quit IRC01:01
*** v1k0d3n has quit IRC01:09
openstackgerritDan Prince proposed openstack/puppet-zaqar: Updated defaults for zaqar::keystone::auth  https://review.openstack.org/27934401:11
openstackgerritDan Prince proposed openstack/puppet-zaqar: Reflect provider change in puppet-openstacklib  https://review.openstack.org/27934501:11
openstackgerritDan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/27934601:11
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/27934701:11
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/27934801:11
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/27934901:11
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/27935001:11
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/27935101:11
*** mewald has joined #puppet-openstack01:11
*** johnmilton has joined #puppet-openstack01:15
*** mewald has quit IRC01:15
*** sid14726 has quit IRC01:18
*** gildub has quit IRC01:18
*** gildub has joined #puppet-openstack01:18
*** gildub has quit IRC01:19
*** nlahouti has quit IRC01:20
*** ducttape_ has quit IRC01:21
*** mewald has joined #puppet-openstack01:26
*** mewald has quit IRC01:31
*** baker has quit IRC01:33
*** baker has joined #puppet-openstack01:34
*** brandon has quit IRC01:35
*** mewald has joined #puppet-openstack01:42
*** baker has quit IRC01:45
*** mewald has quit IRC01:46
*** baker has joined #puppet-openstack01:50
*** baker has quit IRC01:53
*** mewald has joined #puppet-openstack01:57
*** ducttape_ has joined #puppet-openstack02:00
*** mewald has quit IRC02:01
*** v1k0d3n has joined #puppet-openstack02:03
*** sid14726 has joined #puppet-openstack02:11
*** mewald has joined #puppet-openstack02:13
*** mewald has quit IRC02:17
*** baker has joined #puppet-openstack02:19
*** ducttape_ has quit IRC02:23
*** rahulait has joined #puppet-openstack02:32
*** brandon_ has joined #puppet-openstack02:49
*** rahulait has quit IRC02:50
*** brandon_ has quit IRC03:07
*** ducttape_ has joined #puppet-openstack03:14
*** sid14726 has quit IRC03:19
*** brandon has joined #puppet-openstack03:20
*** ducttape_ has quit IRC03:22
*** brandon has quit IRC03:23
*** brandon has joined #puppet-openstack03:24
*** brandon has quit IRC03:26
*** brandon has joined #puppet-openstack03:28
*** priteau has joined #puppet-openstack03:35
*** brandon has quit IRC03:35
*** priteau has quit IRC03:39
*** gildub has joined #puppet-openstack03:40
*** cwolferh has quit IRC03:45
*** ducttape_ has joined #puppet-openstack03:45
*** rahulait has joined #puppet-openstack04:15
*** vinsh_ has quit IRC04:16
*** vinsh has joined #puppet-openstack04:16
*** nlahouti has joined #puppet-openstack04:22
*** johnmilton has quit IRC04:26
*** brandon has joined #puppet-openstack04:29
*** sid14726 has joined #puppet-openstack04:29
*** rahulait has quit IRC04:30
*** nlahouti has quit IRC04:31
*** nlahouti has joined #puppet-openstack04:32
*** rahulait has joined #puppet-openstack04:32
*** nlahouti1 has joined #puppet-openstack04:34
*** nlahouti has quit IRC04:37
*** mewald has joined #puppet-openstack04:38
*** brandon has quit IRC04:39
*** fedexo has joined #puppet-openstack04:40
*** mewald has quit IRC04:42
*** cwolferh has joined #puppet-openstack04:49
*** mewald has joined #puppet-openstack04:53
*** mewald has quit IRC04:57
*** ducttape_ has quit IRC04:58
*** ducttape_ has joined #puppet-openstack05:00
*** saneax_AFK is now known as saneax05:03
*** ducttape_ has quit IRC05:05
*** mewald has joined #puppet-openstack05:09
*** mgagne has quit IRC05:10
*** nlahouti1 has quit IRC05:10
*** sid14726 has quit IRC05:10
*** mgagne has joined #puppet-openstack05:12
*** mgagne is now known as Guest368705:12
*** mewald has quit IRC05:13
*** baker has quit IRC05:17
*** nlahouti has joined #puppet-openstack05:18
*** baker has joined #puppet-openstack05:19
*** jaosorior has joined #puppet-openstack05:20
*** nlahouti1 has joined #puppet-openstack05:20
*** cwolferh has quit IRC05:20
*** nlahouti has quit IRC05:23
*** mewald has joined #puppet-openstack05:25
*** mewald has quit IRC05:29
*** mewald has joined #puppet-openstack05:40
*** mewald has quit IRC05:44
*** mewald has joined #puppet-openstack05:56
*** sid14726 has joined #puppet-openstack05:58
*** mewald has quit IRC06:00
*** rahulait has quit IRC06:00
*** ducttape_ has joined #puppet-openstack06:01
*** baker has quit IRC06:02
*** rahulait has joined #puppet-openstack06:03
*** xingchao has joined #puppet-openstack06:05
*** jaosorior has quit IRC06:06
*** jaosorior has joined #puppet-openstack06:06
*** ducttape_ has quit IRC06:06
*** jaosorior has quit IRC06:06
*** rahulait has quit IRC06:07
*** jaosorior has joined #puppet-openstack06:11
*** mewald has joined #puppet-openstack06:11
*** rahulait has joined #puppet-openstack06:14
*** mewald has quit IRC06:16
*** mewald has joined #puppet-openstack06:27
*** sid14726 has quit IRC06:27
*** cwolferh has joined #puppet-openstack06:30
*** mewald has quit IRC06:32
openstackgerritnarasimha18sv proposed openstack/puppet-nova: virsh commands fail for ceph due to libvirt service not running  https://review.openstack.org/27939006:35
*** xingchao has quit IRC06:35
*** sid14726 has joined #puppet-openstack06:39
*** mewald has joined #puppet-openstack06:42
*** mewald has quit IRC06:47
*** gildub has quit IRC06:55
*** mewald has joined #puppet-openstack06:58
*** ducttape_ has joined #puppet-openstack07:03
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614107:04
openstackgerritnarasimha18sv proposed openstack/puppet-glance: Clearing openrc env values to avoid glance providers failing  https://review.openstack.org/27939407:05
*** ducttape_ has quit IRC07:08
*** sid14726 has quit IRC07:14
*** sid14726 has joined #puppet-openstack07:24
*** nlahouti1 has quit IRC07:37
*** nlahouti has joined #puppet-openstack07:38
*** mewald has quit IRC07:47
*** mewald has joined #puppet-openstack07:52
*** nlahouti has quit IRC07:54
mewaldI am trying to set up Ceph using puppet-ceph. The usecases give good examples, but I am trying to have MON and OSD on the same node. Using the example manifests I, of course, get a duplicate declaration error of Ceph::Key[client.bootstrap-osd]. What's the proper way to give the OSD access to the bootstrap key?07:54
*** sid14726 has quit IRC07:58
*** fedexo has quit IRC08:02
*** foxhunt_away is now known as foxhunt7208:10
*** yottatsa has joined #puppet-openstack08:12
*** mewald has quit IRC08:17
*** dgurtner has joined #puppet-openstack08:17
*** dgurtner has joined #puppet-openstack08:17
*** rahulait has quit IRC08:18
*** sid14726 has joined #puppet-openstack08:21
*** gfidente has joined #puppet-openstack08:33
*** gfidente has quit IRC08:33
*** gfidente has joined #puppet-openstack08:33
*** priteau has joined #puppet-openstack08:38
*** jpena has joined #puppet-openstack08:41
*** sid14726 has quit IRC08:48
*** chem has joined #puppet-openstack09:02
*** ducttape_ has joined #puppet-openstack09:04
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614109:06
openstackgerritnarasimha18sv proposed openstack/puppet-nova: virsh commands fail for ceph due to libvirt service not running  https://review.openstack.org/27939009:08
*** ducttape_ has quit IRC09:09
*** jtomasek has joined #puppet-openstack09:13
*** sid14726 has joined #puppet-openstack09:19
*** yottatsa has quit IRC09:23
*** paramite has joined #puppet-openstack09:34
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614109:37
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614109:39
*** yottatsa has joined #puppet-openstack09:49
openstackgerritNikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/27944409:56
*** sid14726 has quit IRC09:58
*** IvanBerezovskiy has joined #puppet-openstack10:00
*** sid14726 has joined #puppet-openstack10:03
*** ducttape_ has joined #puppet-openstack10:05
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614110:06
*** dtantsur has joined #puppet-openstack10:07
dtantsurmorning folks! is there some known problem with stable/liberty gate? my patch https://review.openstack.org/#/c/278916/ is hitting something weird, even though it did pass a couple of times10:08
*** ducttape_ has quit IRC10:09
*** yottatsa has quit IRC10:18
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614110:30
*** openstackgerrit has quit IRC10:32
*** openstackgerrit has joined #puppet-openstack10:32
openstackgerritnarasimha18sv proposed openstack/puppet-nova: virsh commands fail for ceph due to libvirt service not running  https://review.openstack.org/27939010:37
*** sid14726 has quit IRC10:52
*** mewald has joined #puppet-openstack11:03
*** _degorenko|afk is now known as degorenko11:03
degorenkodtantsur, hi, i guess it's repo random problem11:04
mewaldI want to use puppet-ceph to install my ceph cluster. Some hosts are mons and osd at the same time. With the code provided in the use cases document, I get a duplicate resource entry for client.bootstrap-osd' - of course. What's the best way to do this?11:04
dtantsurdegorenko, I see, thanks. I'll keep rechecking then :)11:04
degorenkomewald, hi, can you put full trace here or to some paste?11:05
*** sid14726 has joined #puppet-openstack11:06
*** ducttape_ has joined #puppet-openstack11:06
openstackgerritNikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/27944411:06
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614111:06
*** sid14726 has quit IRC11:07
mewalddegorenko: https://gist.github.com/mewald1/74f10a8ec6d1d7d85af5 https://gist.github.com/mewald1/77090af6ae67849c495311:09
mewalddegorenko: Its actually quite simple: ceph::key with name "client.bootstrap-osd" is declared in mon.pp and osd.pp. But each time it is put into a different path11:10
*** yottatsa has joined #puppet-openstack11:10
mewaldI dont see how I can have the key have the same name but different parameters, as ceph::key does not provide a way to set the "name" variable as a parameter11:10
*** ducttape_ has quit IRC11:11
* degorenko looking11:11
degorenkomewald, if you're running these manifests in one run - you will have duplication error for class ceph too11:12
mewaldyeah right, I've been playing around with the code a bit. The current state is probably not the best to show for this question :)11:13
degorenkomewald, also you can use different resource name11:14
mewaldBefore I moved this to a common.pp but the problem with the ceph::key persists11:14
degorenkofor ceph::key11:14
degorenkobut then you need specify proper keyring_path parameter11:14
mewaldbut will the key in the keyring file not have that name? I though ceph relies on the specific name of that key11:14
degorenkolet me check manifest11:14
mewalddegorenko: I think link 118 shows this11:15
degorenkomewald, i'm not a ceph specialist. so, for osd and for mon ceph::key {'client.bootstrap-osd':} is doing different actions or same?11:16
degorenkoif same, you can use it in one catalog actually11:17
degorenkojust need to mix  both files to one11:17
degorenkoor they are running with different parameters in wrapper class?11:17
mewalddegorenko: its doing different things. For the mon it uses the default path somewhere in /etc/ceph/. For an OSD the use cases code puts in somewhere into /var/lib/ceph11:17
degorenkooh, i see now11:18
*** leanderthal|afk is now known as leanderthal11:18
yolandahi degorenko, i  am trying to test your patch , but i'm hitting a blocker before that. We are using rabbit under 5671 port, and https. Config works fine for neutron-server but seems is not picked by neutron-metadata-agent11:19
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614111:19
yolandathat is causing connection to https://controller00.hpuseast.ic.openstack.org:9696/v2.0/networks.json to just hang, because rabbit not working on that port11:20
*** bogdando has quit IRC11:20
*** dtantsur has left #puppet-openstack11:20
degorenkomewald, the faster way to avoid this - is two different puppet calls11:21
degorenkoyolanda, looks like another problem11:22
degorenkonot related to my patch11:22
yolandaah yes, just explaining the reason why i cannot test yet11:22
*** yottatsa has quit IRC11:22
yolandai see that puppet-neutron sets rpc_backend to 'rabbit' as default, but in my neutron.conf the setting is rpc_backend=neutron.openstack.common.rpc.impl_kombu11:22
mewalddegorenko: what do you mean?11:23
degorenkoyolanda, may be it is by default from package?11:23
*** yottatsa has joined #puppet-openstack11:23
yolandadegorenko, but puppet-neutron should handle that, set the config on the file?11:23
degorenkomewald, like  puppet apply mon.pp && puppet apply osd.pp11:23
degorenkoyolanda, are you using current master of puppet-neutron?11:24
yolandapuppet-neutron, liberty branch11:24
mewalddegorenko: I run this through puppetmaster and the node says "include mon" and "include osd"11:24
degorenkomewald, ah :)11:24
yolandai'm debugging that, goint to try set the value explicitly11:24
degorenkoyolanda, may be you have some override in puppet side?11:24
degorenkomewald, then it will be a little bit tricky11:25
yolandadegorenko, i don't think so but i'll check again11:25
*** bogdando has joined #puppet-openstack11:25
mewalddegorenko: not the answer I wanted to hear ;)11:25
degorenkoyolanda, well,https://github.com/openstack/puppet-neutron/blob/stable/liberty/manifests/init.pp#L44011:25
degorenkoyolanda, kombu is the same for rabbit :)11:25
mewalddegorenko: I have no idea right now how to solve it11:25
degorenkomewald, i have one solution for you11:26
yolandadegorenko i see. Then i need to check why metadata is not listening to my settings for ssl and port11:26
degorenkoyolanda, probably yes, some problem with settings11:27
degorenkomewald, how you are getting puppets to your node? Via git or only from puppetmaster?11:27
mewaldonly puppetmaster11:27
degorenkomewald, then we can hack puppets on master side11:28
degorenkoopen this file: https://github.com/openstack/puppet-ceph/blob/master/manifests/key.pp11:28
degorenkoin your local directory11:28
degorenkothen we can add a new parameter, like: key_name = ${name}11:28
degorenkoand for all this file, you should replace ${name} -> ${key_name}11:29
mewaldyeah ok, I will do this in a fork and see if people want to pull it11:29
degorenkothen just use different names in your wrappers, but pass client.boostrap.osd for key_name11:29
degorenkomewald, ceph is under gerrit now11:29
degorenkoyou should use git review11:30
degorenkoif you want upload a new patch11:30
yolandadegorenko if rabbit=kombu, then my settings are ok. But neutron-metadata not hearing that, maybe i'm hitting some bug on the neutron code11:30
mewaldahh well, ok no idea how that works but I'll find out :)11:30
mewaldthanks man!11:30
degorenkomewald, no problem11:30
degorenkoyolanda, what's difference between code yeasterday and today? or when you filed a bug? :)11:31
yolandadegorenko, that i cheated rabbit, and enabled port 567211:31
yolandai wanted to debug the issue today without cheating11:31
degorenko5672 is by default11:31
yolandadegorenko yes, but we use ssl under 5671 port11:31
degorenkooh11:31
degorenkogot it now11:31
yolandaso 5672 is disabled11:32
degorenkothen you need pass 5671 to neutron11:32
yolandadegorenko we do11:32
yolandarabbit-server, dhcp-agent etc work fine11:32
degorenkoany errors from metadata?11:32
yolandametadata-agent is the one that fails, i wonder where does it pick the settings from11:32
yolanda2016-02-12 11:29:32.161 38882 ERROR oslo.messaging._drivers.impl_rabbit [-] AMQP server 127.0.0.1:5672 closed the connection. Check login credentials: Socket closed11:33
degorenkoyolanda, hmm11:34
degorenkoyolanda, you can inspect metadata log file on running stage, if you have debug => it will show all config options11:35
yolandadegorenko cool, i'll try that11:35
degorenkochem, hey! :)11:40
chemdegorenko: hey11:41
degorenkochem, way with array for properties for my patch will not work probable11:41
*** mewald has quit IRC11:41
degorenkomunge not supports array11:41
degorenkohttps://docs.omniref.com/ruby/gems/puppet/3.3.1/symbols/Puppet::Type::RelationshipMetaparam/munge11:41
degorenkoit's old version of puppet11:41
degorenkobut i guess here is nothing change11:41
*** astupnikov has joined #puppet-openstack11:41
degorenkoit works only for first item of arary11:42
degorenkoi don't know why11:42
chemdegorenko: I don't see the problem ?11:43
degorenkomunge do |value| takes only first item of array in my env11:43
degorenkoor i need move creating hash out of munge11:44
degorenkohmmm11:44
chemdegorenko: give me 5min, I'm going to look into it11:45
degorenkoyou have so many time as you need :)11:45
yolanda<yolanda> degorenko so that was not the issue, when running from command line is discovered real one11:48
yolanda<yolanda> SSLError: [Errno 336265225] _ssl.c:355: error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib11:48
yolanda<yolanda> more issues with certs11:48
degorenkoah, nice11:49
degorenkothen you probably need to switch without ssl :) and try it again11:49
yolandai need ssl :)11:50
degorenkoaonther services are good with it? only metadata is not working?11:50
yolandaneutron fails silently11:51
yolandaneutron-server11:51
degorenkowhat's about another componetns?11:51
*** rcarrillocruz has joined #puppet-openstack11:51
yolandai think metadata agent was hit by some race, when i manually touched config file and restarted manually, it showed it was connected to 567111:52
degorenkobut now you have ssl error, right?11:53
yolandadegorenko yes, but i discovered the issue, was my fault11:55
yolandaretrying11:55
degorenkonice11:55
openstackgerritMaciej Relewicz proposed openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/27949911:58
yolandadegorenko, we are still hitting the bug12:00
yolandaUnable to find network with name 'InsecurePlatformWarning'". Retrying for 1 sec.12:00
degorenkohm12:00
degorenkoon latest patch set/12:00
degorenko?12:00
yolandagoing to double check, but i'd say i applied correctly12:00
openstackgerritMerged openstack/puppet-ironic: [inspector] allow changing list of processing hooks  https://review.openstack.org/27891612:01
yolandadegorenko yes, i have applied https://review.openstack.org/27911112:02
degorenkoyolanda, i will check my patch, after my testing env will be ready12:03
*** mewald has joined #puppet-openstack12:04
*** jpena is now known as jpena|lunch12:06
*** ducttape_ has joined #puppet-openstack12:07
openstackgerritNikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/27944412:08
*** cdelatte has joined #puppet-openstack12:11
*** ducttape_ has quit IRC12:12
*** yottatsa has quit IRC12:15
*** saneax is now known as saneax_AFK12:16
*** cdelatte has quit IRC12:20
*** paramite is now known as paramite|afk12:34
chemdegorenko: I have to go to lunch, but at first glance it seems unrelated to what you told me.  I need a closer look.12:42
chemdegorenko: humm .. I think I got it12:42
chemdegorenko: no12:42
*** cdelatte has joined #puppet-openstack12:46
yolandadegorenko, thanks for looking into that12:46
openstackgerritNikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/27944412:51
*** johnmilton has joined #puppet-openstack12:53
chemdegorenko: oki, I got it :)12:57
chemdegorenko: letting the comment in the review12:58
degorenkochem, thanks :)12:58
chemdegorenko: done13:02
degorenkochem, ah, so, validate and munge is applying to every item in separate, not to all items in one time. i got it now13:04
*** dprince has joined #puppet-openstack13:04
chemchem: yeap, that's it :)13:04
*** xingchao has joined #puppet-openstack13:06
*** ducttape_ has joined #puppet-openstack13:07
yolandamm, degorenko, so seems to me that neutron-metadata-agent is missing some notify to restat on neutron.conf changes. The changes we do for rabbit, are not applied until i manually restart the service. Other services such as neutron-server are picking the config change just with puppet actions13:08
*** _ducttape_ has joined #puppet-openstack13:11
*** ducttape_ has quit IRC13:12
*** jayg|g0n3 is now known as jayg13:13
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614113:14
*** mewald has quit IRC13:14
degorenkoyolanda, but we have this https://github.com/openstack/puppet-neutron/blob/master/manifests/agents/metadata.pp#L9613:15
degorenkoyolanda, sorry, master link, for liberty: https://github.com/openstack/puppet-neutron/blob/stable/liberty/manifests/agents/metadata.pp#L97-L9813:15
EmilienMhello13:15
degorenkohi :)13:16
EmilienMit's friday !!!!!!13:16
EmilienMdon't break CI folks13:16
degorenko:D13:16
chemEmilienM: yo.13:18
*** jpena|lunch is now known as jpena13:18
*** jpena_ has joined #puppet-openstack13:23
*** _ducttape_ has quit IRC13:25
*** jpena has quit IRC13:26
yolandadegorenko i see, but i had to restart manually in 3 consective deploys, not sure what is going on13:32
yolandagoing to update neutron.conf manually and apply puppet again to check if metadata restarts13:32
degorenkoyolanda, no13:32
degorenkoyolanda, this way will not work :)13:33
degorenkoyolanda, puppet should change config13:33
degorenkoand then will be restarted metadata13:33
yolandaah yes i mean, i update neutron.conf, so puppet overrides13:33
yolandathen it shall trigger a restart13:33
yolandabecause the file changed right?13:33
degorenkoif puppet will change file - yes, will be triggered restart for all services13:33
yolandaok i mean that, so i can monitor the restarts13:34
degorenkooh, yeah :)13:34
yolandaNotice: /Stage[main]/Neutron/Neutron_config[DEFAULT/debug]/value: value changed 'True' to 'False'13:39
yolandaNotice: /Stage[main]/Neutron::Agents::Dhcp/Service[neutron-dhcp-service]: Triggered 'refresh' from 1 events13:39
yolandaNotice: /Stage[main]/Neutron::Server/Exec[neutron-db-sync]: Triggered 'refresh' from 1 events13:39
yolandaNotice: /Stage[main]/Neutron::Server/Service[neutron-server]: Triggered 'refresh' from 1 events13:39
yolandaweird13:39
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: repos: bump RDO to a latest repo  https://review.openstack.org/27879513:42
degorenkoyolanda, hm, that's really strange13:43
yolandagoing to launch from scratch again13:44
degorenkoyolanda, can you post your manifest?13:44
yolandastable/liberty13:44
yolandafor puppet-neutron13:44
degorenkoyolanda, i mean, common manifest, which calls all another13:44
EmilienMmetadata had a bug13:44
degorenkowhich bug?13:44
EmilienMhttps://bugs.launchpad.net/bugs/154493413:44
openstackLaunchpad bug 1544934 in puppet-neutron "Metadata agent doesn't apply config after package installation" [High,In progress] - Assigned to Maciej Relewicz (rlu)13:44
EmilienMyou +2'ed the patch13:45
yolandaoh that13:45
EmilienMand I approved it, it will land in a few min13:45
EmilienMwe need to backport it I guess13:45
degorenkoit's another bug13:45
degorenkoEmilienM, we have problem with main neutron conf13:45
EmilienMwhat kind?13:45
yolandait isn't restarting my service13:45
degorenkowe've changed neutron, but metadata wasn't restarted13:46
degorenkoneutron.con *13:46
EmilienMlet me check13:46
degorenkoconf :)13:46
EmilienMhttps://github.com/openstack/puppet-neutron/blob/master/manifests/agents/metadata.pp#L9613:46
EmilienMit should13:46
yolandasaw that, i wonder what happens, but i had to restart manually. I'm trying a redeploy again to collect logs13:47
openstackgerritJason Guiditta proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614113:49
EmilienMthat's weird13:50
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/27614113:51
*** hjensas has quit IRC13:54
*** jpena_ is now known as jpena13:57
*** clayton has quit IRC14:00
*** xingchao has quit IRC14:04
openstackgerritMerged openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/27949914:04
*** jaosorior has quit IRC14:06
*** jaosorior has joined #puppet-openstack14:07
*** clayton- has joined #puppet-openstack14:12
*** xingchao has joined #puppet-openstack14:15
*** yottatsa has joined #puppet-openstack14:18
*** dmsimard has quit IRC14:25
*** ayoung has joined #puppet-openstack14:33
ayoungOK...I need the simplest of examples using the keystone-user provider.  Say I want to do puppet apply myuserstuff.pp  what do I put in there?  How can I get creds out of hiera data?14:35
EmilienMayoung: I can write that for you, a sec14:35
ayoungEmilienM, somehow I knew it would be you to the rescue yet again. Thanks.14:36
ayoungEmilienM, I was looking at https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp#L1114:37
ayoungI'm running this on the overcloud controller node, with an eye to running it from the undercloud via openstack overcloud deploy14:37
EmilienMayoung: liberty or mitaka?14:39
ayoungEmilienM, um...I guess liberty, although I am doing this with upstream Tripleo, so Mitaka first?14:39
EmilienMok14:40
EmilienMayoung: chem wrote that https://github.com/openstack/puppet-keystone/blob/master/examples/v3_basic.pp14:41
EmilienMit's a very good documentation for how to deploy users14:41
EmilienMerr not this one14:41
EmilienMhttps://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp14:41
ayoungEmilienM, class { '::mysql::server': }  doesn't that install the keystone server?  I tried doing something like that before and did damage14:41
EmilienMayoung: wait, I'm writing a manifest for you that deploy all you need14:42
*** xingchao has quit IRC14:42
ayoungOK14:42
*** pma_ has quit IRC14:42
EmilienMayoung: https://gist.github.com/EmilienM/d8f9d6cb6b87933ecac014:45
*** yottatsa has quit IRC14:45
EmilienMat the end, feel free to add stuffs from https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp14:45
ayoungEmilienM, what in gods green earth did you do there?14:46
*** paramite|afk is now known as paramite14:46
openstackgerritGael Chamoulaud proposed openstack/puppet-keystone: Add support for RabbitMQ connection heartbeat  https://review.openstack.org/27957214:46
yolandaEmilienM, degorenko, i have more detailed logs of the metadata issue14:46
yolandaNotice: /Stage[main]/Neutron/Neutron_config[DEFAULT/debug]/value: value changed 'True' to 'False'14:46
yolandaNotice: /Stage[main]/Neutron::Agents::Dhcp/Service[neutron-dhcp-service]: Triggered 'refresh' from 1 events14:46
yolandaNotice: /Stage[main]/Neutron::Db::Sync/Exec[neutron-db-sync]: Triggered 'refresh' from 1 events14:46
yolandaNotice: /Stage[main]/Neutron::Server/Service[neutron-server]: Triggered 'refresh' from 2 events14:46
yolandaNotice: Puppet::Type::Neutron_network::ProviderNeutron: Unable to complete neutron request due to non-fatal error: "Execution of '/usr/bin/neutron net-list --format=csv --column=id --quote=none' returned 1: /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:97: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more in14:46
yolandaformation, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.14:46
yolanda  InsecurePlatformWarning14:46
yolanda/usr/lib/python2.7/dist-packages/urllib3/connection.py:255: SubjectAltNameWarning: Certificate for controller00.hpuseast.ic.openstack.org has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)14:46
ayoungOK..this is a post-deploy-add-a-user simple thing.14:46
yolanda  SubjectAltNameWarning14:46
yolandaUnable to establish connection to https://controller00.hpuseast.ic.openstack.org:9696/v2.0/networks.json". Retrying for 9 sec.14:46
yolandaNotice: Finished catalog run in 45.99 seconds14:46
yolandaso maybe is related again with ssl?14:47
EmilienMyolanda: please use pastbins :-)14:47
yolandayep, sorry14:47
ayoungEmilienM, I can;t believe I need to reference Apache in order to add a user.  So, where does that go?14:47
ayoungEmilienM, to give more context:14:47
ayoungLets say a cluster has been up for a month or two14:47
*** astupnikov has quit IRC14:47
ayoungand now I need to add a new identity provider for the Federation user integration14:47
degorenkoyolanda, exactly14:48
degorenkowe have again issue with ssl14:48
EmilienMayoung: this manifest will deploy keystone for you14:48
ayoungI need to make a bunch of Keystone class, and I need to reconfigure and restart Apache14:48
EmilienMI thought you were asking for that14:48
ayoungEmilienM, I don't want to deploy Keystone14:48
EmilienMok just read https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp then14:48
ayoungIts up, it is running, I want to make calls that affect its statue14:48
EmilienMit documents how to deploy keystone-users14:48
ayoungEmilienM, OK if I run that I get errors, and where does the Hiera data come from?14:48
EmilienMayoung: it depends where you configured hieradata, are you running tripleo?14:49
openstackgerritDenis Egorenko proposed openstack/puppet-cinder: Replace defines for managing cinder types with providers  https://review.openstack.org/27351314:49
ayoungEmilienM, yes, Tripleo14:49
EmilienMayoung: undercloud or overcloud?14:49
ayoungEmilienM, lets make this super focues14:49
ayoungovercloud, I want to add a single user14:49
ayoungand I know nothing from Puppet14:49
EmilienMayoung: you'll need to patch overcloud_controller.pp I guess14:50
ayoungEmilienM, no14:50
EmilienMand the pacemaker manifest too14:50
ayoungI can't do that14:50
ayoungno14:50
ayoungthis needs to be something I apply after the fact14:50
*** aderyugin has quit IRC14:50
EmilienMok I see14:50
EmilienMdprince: what is the command to run puppet manually on overcloud again?14:52
EmilienMdprince: and also, where can you edit the .pp file to add more bits?14:52
EmilienMpost deployment14:53
*** yottatsa has joined #puppet-openstack14:53
openstackgerritDenis Egorenko proposed openstack/puppet-openstack-integration: Switch creating cinder types to providers from define classes  https://review.openstack.org/27566914:53
ayoungEmilienM, I'm guessing it is something like this14:53
dprinceEmilienM: we use heat stack-update to re-run puppet14:54
ayoungpuppet apply remove-all.pp --modulepath=modules --hiera_config=hiera/hiera.yaml --parser future14:54
ayoungdprince, I need to develope the puppet module first, though14:55
*** clayton- is now known as clayton14:55
dprinceEmilienM: if you want to manually run something you can shell into the node and find the generated manifest from Heat metadata14:55
dprinceEmilienM: and then run it w/ puppet apply manually14:55
EmilienMok14:55
EmilienMbut he'll need to load hieradata14:55
*** yottatsa has quit IRC14:55
dprinceEmilienM: I think the .pp's are in /var/run/os-collect-config14:55
ayoungI think it is all in /etc/puppet14:56
dprinceEmilienM: Yeah, we generate the hiera via os-colleect-config. So you could create a heat stack, or do a heat stack-update first which will fail. This would give you all the heira in /etc/puppet/hieradata/. Then you can manually exec a .pp via puppet apply14:56
ayoung/etc/puppet/hieradata/14:56
ayoungdprince, so, I have an overcloud deployed.  I have a bunch of stuff I want to do to it post deploy, including making Keystone calls and adding config for Apache.  I don't want to reinstall.14:57
dprinceayoung: I use heat stack-update for that.14:57
*** yottatsa has joined #puppet-openstack14:58
dprinceayoung: python-tripleoclient will drive the heat stack-update for you too. It autodetects if the stack exists or is an update14:58
*** ducttape_ has joined #puppet-openstack14:59
ayoungdprince, you do see how someone who knows none of this technology might be slightly daunted with that as a starting point?  There is a slew of assumed knowledge here. I'd like to start with just getting a puppet module to run.  If I have to craft in data from a keystonerc file to start, I can do that.15:00
ayoungthen I can learn heat15:00
ayoungand then I can learn tripleo15:00
ayoungits too much to tackle at once15:00
EmilienMdegorenko: can you look https://review.openstack.org/#/c/278795/ again please?15:00
degorenkodone :) it was in my list of review15:01
EmilienMthanks15:01
ayoungEmilienM, ok,  let's start simple15:03
ayoungI want to do puppet apply my_user.pp and at the end have a user in Keystonme15:03
ayoungIf I follow the exmaple you p[osted./.. I get15:04
EmilienMit won't work15:04
EmilienMbecause puppet will lookup in puppet catalog for keystone credentials15:04
EmilienMthat's why I wrote a manifest for you15:04
ayoungpuppet apply  /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp15:04
ayoungError: Puppet::Parser::AST::Resource failed with error ArgumentErropuppet apply  /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp15:04
ayoungError: Puppet::Parser::AST::Resource failed with error ArgumentError: Invalid resource type keystone_user at /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp:15 on node overcloud-controller-0.localdomain15:04
ayoungr: Invalid resource type keystone_user at /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp:15 on node overcloud-controller-0.localdomain15:04
ayoungright.  So I need to somehow include that manifest in my call15:05
ayoungLet's assume I have Tripleo.  Where is the manifest stored?15:05
EmilienMyou need to follow what dprince suggestion15:05
EmilienMdprince | EmilienM: I think the .pp's are in /var/run/os-collect-config15:05
ayoung/var/run/os-collect-config/15:05
ayoung/var/run/os-collect-config/ControllerDeployment.json.orig15:06
*** yottatsa has quit IRC15:06
ayoungbut that is not a pp15:06
ayoung" Then you can manually exec a .pp via puppet apply"15:06
ayoungOK so let me trye...15:07
dprince/var/lib/heat-config/heat-config-puppet15:07
dprinceayoung: there15:07
*** yottatsa has joined #puppet-openstack15:07
ayoungdprince, ok so....15:08
dprinceayoung: /var/run/os-collect-config/ is for metadata from heat. Sorry I gave the wrong directory...15:08
ayoungdprince, ok, so here is my strawman  puppet apply   --hiera_config=/var/lib/heat-config/heat-config-puppet   /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp15:09
ayoungobviously wrong.15:09
ayoungInvalid resource type keystone_user15:09
dprinceayoung: just add that hiera file into your /etc/puppet/hiera.yaml config and run puppet apply <manifest>15:09
*** jpena has quit IRC15:09
dprinceayoung: also, in case you or anyone is interested this is the actual hook we use in TripleO to run puppet15:10
*** yottatsa has quit IRC15:10
dprincehttp://git.openstack.org/cgit/openstack/heat-templates/tree/hot/software-config/elements/heat-config-puppet/install.d/hook-puppet.py15:10
ayoung" just add that hiera file into your /etc/puppet/hiera.yaml"  Ok looking in /etc/puppet/hiera.yaml  I see a data directory :yaml:15:11
ayoung  :datadir: /etc/puppet/hieradata15:11
*** yottatsa has joined #puppet-openstack15:12
dprinceayoung: hiera.yaml defines how hieradata files, etc are loaded processed. https://docs.puppetlabs.com/hiera/3.0/configuring.html15:12
ayoungdprince, this is the existing hiera.yaml.  http://fpaste.org/321816/45528996/  it looks like it knows about most of the op[enstack stuff already15:13
*** jaosorior has quit IRC15:13
dprinceayoung: yeah, so you could just append your new settings onto any file in the hieradata directory15:14
*** jaosorior has joined #puppet-openstack15:14
dprinceayoung: and then run puppet apply15:14
*** paramite is now known as paramite|afk15:14
*** yottatsa has quit IRC15:14
ayoungdprince, ah...or I could go through all the trouble to create a new dir and have it point to my file...I get it15:14
*** yottatsa has joined #puppet-openstack15:16
*** samuelBartel has joined #puppet-openstack15:16
*** yottatsa has quit IRC15:18
*** mdorman has joined #puppet-openstack15:19
ayoungEmilienM, dprince, OK, if I understand this correctly, I should not need any additional hiera data.  I should be using what was used to set up the overcloud already.  What I do need is someway to append on some configuration.15:19
ayoungand by configuration, I mean call a puppet module15:20
EmilienMayoung: no need of hieradata. Just manifest code (in .pp)15:20
ayoungSo, the example as posted in keystone/examples can't be run directly15:20
ayoungEmilienM, say I want to run /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp  just as is.  How would I do that?15:21
openstackgerritEmilien Macchi proposed openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/27959715:21
EmilienMdegorenko: backport ^15:21
EmilienMdprince: ayoung does not want to modify hieradata but just add a resource in manifest (keystone_user)15:22
ayoungto start. yeah15:22
EmilienMayoung: edit the .pp and run heat stack-update would do the job I think15:22
EmilienMayoung: the overcloud_controller.pp15:23
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/27934915:23
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/27934815:23
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/27935115:23
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/27935015:23
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/27934715:23
ayoungEmilienM, that was the example thing shardy pointed me at15:23
openstackgerritDan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/27934615:23
ayoungok.. let's start there15:23
EmilienMdprince: w00t :-) zaqar15:23
EmilienMdprince: I'll review it this morning15:23
ayoungEmilienM, http://docs.openstack.org/developer/heat/template_guide/software_deployment.html#configuring-with-puppet15:24
EmilienMdprince: runnning mistral beaker jobs: https://jenkins03.openstack.org/job/gate-puppet-mistral-puppet-beaker-rspec-dsvm-centos7/23/console15:24
ayoungso I go back to the undercloud stack node...15:24
dprinceEmilienM: nice15:25
EmilienMdprince: mistral beaker are passing!!15:25
ayoungdprince, EmilienM, what does he mean there by : "To specify configuration as puppet manifests the heat-config-puppet element is required to be on the built image, so Custom image script needs to be modified with the following:"15:25
ayoungEmilienM, I was able to get http://docs.openstack.org/developer/heat/template_guide/software_deployment.html#configuring-with-scripts  to work, so I know I'm in the right vicinint15:26
ayoungvicinity15:26
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/27935115:27
dprinceEmilienM: the last commit shows how I've been testing this15:27
dprinceEmilienM: the acceptance test...15:27
EmilienMdprince, degorenko: please review https://review.openstack.org/#/c/277209/15:27
degorenkowow :) mistral15:28
EmilienMayoung: sorry I'm not the most helpful for tripleo, it's just I'm missing clue in that15:28
ayoungEmilienM, this is close, though15:28
ayoungEmilienM, the fact that there is no clear way to run the examples is troubling, though.15:29
EmilienMayoung: the examples are here to explain the code, but there are other exemples to deploy keystone15:30
ayoungFOr example, an application on some remote system might need some keystone stuff.  how would you run puppet over there telling it to "add this user to keystone, this proejct and this role assignment"15:30
ayoungEmilienM, should this be in a different puppet module?  Like we have the openstack common CLI?15:31
dprinceEmilienM: this might help give context to zaqar https://etherpad.openstack.org/p/tripleo-zaqar15:31
*** jtomasek has quit IRC15:31
*** jtomasek_ has joined #puppet-openstack15:31
*** dprince has quit IRC15:36
*** aimon_ has quit IRC15:36
openstackgerritMerged openstack/puppet-openstack-integration: repos: bump RDO to a latest repo  https://review.openstack.org/27879515:39
*** aimon has joined #puppet-openstack15:40
*** baker has joined #puppet-openstack15:42
*** dmsimard has joined #puppet-openstack15:43
EmilienMdegorenko: can you -A and +A again please https://review.openstack.org/#/c/277209/ ?15:44
EmilienMso zuul is triggered15:44
degorenkodone15:44
*** yottatsa has joined #puppet-openstack15:47
*** rahulait has joined #puppet-openstack15:47
openstackgerritMerged openstack/puppet-zaqar: Updated defaults for zaqar::keystone::auth  https://review.openstack.org/27934415:49
*** paramite|afk is now known as paramite15:53
openstackgerritMerged openstack/puppet-zaqar: Reflect provider change in puppet-openstacklib  https://review.openstack.org/27934515:56
*** dhollinger has joined #puppet-openstack16:02
EmilienMdmsimard: our CI is running super mega trunk now16:02
EmilienMlike the most recent commit I guess16:03
EmilienMand all is fine, so far16:03
EmilienMwe also use tempest master16:03
EmilienM(no pin)16:03
*** baker_ has joined #puppet-openstack16:07
*** baker has quit IRC16:08
*** baker_ has quit IRC16:08
*** baker has joined #puppet-openstack16:08
openstackgerritEmilien Macchi proposed openstack/puppet-tempest: Allow to test zaqar  https://review.openstack.org/27963216:12
ayoungdmsimard, EmilienM, OK, forget hiera for the moment.  Say I am on an openstack controller node.  I can hard code anything I want.  I just want to run https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp  with puppet apply.  How do I do that?16:18
ayoungIgnore the "it will get overwritten" or any other issue16:18
dmsimardgit clone puppet-keystone; puppet apply puppet-keystone/examples/user_project_user_role_composite_namevar.pp16:19
dmsimardhm, actually not quite16:19
ayoungdmsimard, so that gives an error16:19
ayoungexcatly!16:20
dmsimardyeah, because it uses providers16:20
ayoungdmsimard, it is already on the system,16:20
ayoungin /etc/puppet....16:20
dmsimardso do git clone puppet-keystone in /etc/puppet/modules/keystone <-- the keystone part is important, don't use puppet-keystone16:20
dmsimardthen you can do the puppet apply, probably16:20
ayoungsudo puppet apply /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp16:20
dmsimardif it doesn't work, going to need some output/logs to see what's wrong16:21
ayounghttp://paste.openstack.org/show/486845/16:21
ayoungHmmm ight be syntax16:22
*** yottatsa has quit IRC16:22
ayounglet me try commenting pieces out16:22
dmsimardayoung: it doesn't look like keystone_project exists16:22
dmsimardhttps://github.com/openstack/puppet-keystone/tree/master/lib/puppet/provider16:22
dmsimarddo a find/replace keystone_project by keystone_tenant ?16:23
ayoungdmsimard, right...commented that out16:24
ayoungand now16:24
ayoungError: Invalid parameter user on Keystone_user[meanlinglesstitle] at /home/heat-admin/user_project_user_role_composite_namevar.pp:37 on node overcloud-controller-0.localdomain16:25
ayoungWrapped exception:16:25
degorenkoyolanda, i got env with ssl enabled. Going to debug your issue for neutron16:25
ayoungIt looks like it is trying to create a variable user_one but using the wrong syntax16:25
dmsimardayoung: so obviously that example doesn't work and needs to be looked at :p16:25
ayoungdmsimard, I need a simple one that does work16:25
yolandadegorenko thanks. On my latest runs, with self signed certs, i'm not reproducing that, maybe because i'm not getting those warnings now16:25
degorenkoyolanda, or my patch works :D16:26
ayoungError: No set of title patterns matched the title "user_one::project_one".16:26
ayoungOK...16:26
yolandadegorenko, even with the patch not applied now :(16:26
ayoungdmsimard, this feels like V2.0 versus V3 Keystone API issues16:27
degorenkoyolanda, oh :D16:27
dmsimardayoung: maybe these can point you in the right direction: https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/keystone.pp + https://github.com/openstack/puppet-keystone/blob/master/manifests/resource/service_identity.pp16:27
*** yottatsa has joined #puppet-openstack16:28
dmsimardayoung: the latter (service_identity) is what is used by the other puppet modules to create the different keystone resources for each project - i.e, https://github.com/openstack/puppet-gnocchi/blob/master/manifests/keystone/auth.pp16:28
yolandadegorenko, can you still reproduce the issue?16:29
ayoungdmsimard, OK...I added just a user with this16:29
ayoung$ cat user.pp16:30
ayoungkeystone_user { 'user_one':16:30
ayoung  ensure => present,16:30
ayoung  domain => 'Default',16:30
ayoung}16:30
degorenkoyolanda, i'm going to check that16:30
ayoungsudo puppet apply user.pp16:30
ayoungI was trying too hard.  And not reading the error messages16:30
ayoungWarning: Scope(Class[Keystone::Federation::Shibboleth]): Can not configure Shibboleth in Apache on RedHat OS.Read the Note on this federation/shibboleth.pp16:32
ayoungYAY!16:32
ayoungDestroyed my Apache server again16:32
openstackgerritMerged openstack/puppet-openstack-integration: Revert "pin tempest to keep setuping heat roles"  https://review.openstack.org/27918016:34
*** leanderthal is now known as leanderthal|afk16:35
mjblackayoung: looks like a simple fix for it is to have a defined yum repo for shibboleth and defined package for shibboleth16:36
*** samuelBartel has quit IRC16:37
*** yottatsa has quit IRC16:38
*** yottatsa has joined #puppet-openstack16:39
*** yottatsa has quit IRC16:40
*** foxhunt72 is now known as foxhunt_away16:40
*** jaosorior has quit IRC16:48
ayoungmjblack, well, except I really don't care about Shibboleth, but yes.  I suspect it is the Apache config that is the most different, though, not just the packaging16:53
*** dhollinger has quit IRC16:53
*** yottatsa has joined #puppet-openstack16:53
ayoungI'm going to leave that for now, I have what I need.  We asre going to be integrating this with a different server anyway, Keycloak, not SHib.16:53
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Deploy MongoDB on scenario002  https://review.openstack.org/27966816:57
*** dprince has joined #puppet-openstack16:57
*** xarses has quit IRC16:58
openstackgerritKeith Schincke proposed openstack/puppet-ceph: Add support for civetweb  https://review.openstack.org/25454816:58
*** nlahouti has joined #puppet-openstack17:01
*** jaosorior has joined #puppet-openstack17:04
*** dhollinger has joined #puppet-openstack17:05
*** yottatsa has quit IRC17:12
*** yottatsa has joined #puppet-openstack17:13
*** openstackgerrit has quit IRC17:17
*** openstackgerrit has joined #puppet-openstack17:17
*** xarses has joined #puppet-openstack17:20
EmilienMdmsimard, dgurtner, xarses: so re- puppet-ceph/release: did you guys decide how/when to release the module?17:26
*** haplo37 has joined #puppet-openstack17:27
*** baker has quit IRC17:30
*** dprince has quit IRC17:33
*** fedexo has joined #puppet-openstack17:34
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Create a separate database configuration for ironic-inspector  https://review.openstack.org/27969517:34
*** dprince has joined #puppet-openstack17:34
*** jaosorior has quit IRC17:44
*** paramite is now known as paramite|afk17:46
*** gfidente has quit IRC17:51
xarsesEmilienM: there appears to be a loose consensus to what, what we want to release, but no when17:54
xarsess/what, what/what17:54
*** IvanBerezovskiy has left #puppet-openstack17:54
EmilienMdprince: for zaqar testing in our integ jobs, do you want to see mongo or redis?18:12
EmilienMwe need something light and popular18:13
dprinceEmilienM: mongo is the best option18:14
dprinceEmilienM: most popular18:14
dprinceEmilienM: redis doesn't work w/ websockets18:14
openstackgerritMerged openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/27959718:14
dprinceEmilienM: due to the fact that zaqar's redis driver doesn't support it yet18:15
EmilienMdprince: cool cool18:15
EmilienMI'm adding mongo do our CI18:15
EmilienMsee https://review.openstack.org/27966818:15
EmilienMdprince: do we need replicaset though?18:15
ayoungEmilienM, I am tracking on the puppet stuff now.  Thanks to you and dmsimard .  Looking at the Keystone module, it looks like there is no support for the federation calls besides identity provider.  In order to set up Federation, we need to make the followuing calls:18:15
ayoungopenstack mapping create18:15
ayoungopenstack federation protocol create18:16
ayoungand I think that is it18:16
EmilienMayoung: do we don't do that I think18:16
*** fedexo has quit IRC18:16
ayoungEmilienM, I didn't see any code that did that under /classes18:16
EmilienMiurygregory, and chem did lot of work in federation18:16
EmilienMfeel free to ping them18:16
*** aimon_ has joined #puppet-openstack18:17
ayoungEmilienM, just trying to learn how to do it myself18:17
EmilienMayoung: you know ruby? I don't.18:18
EmilienMjoking, we have bunch of providers18:18
EmilienMyou can take them as examples18:18
EmilienMhttps://github.com/openstack/puppet-keystone/blob/master/lib/puppet/provider/keystone_identity_provider/openstack.rb18:19
EmilienMis a good example18:19
ayoungAh18:19
*** aimon has quit IRC18:19
ayoungEmilienM, I was able to get the Identity provider part to run, and saw the Idp added to keystone18:19
ayoungso I was trying to figure out how it calls the openstack CLI18:20
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/27934918:22
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/27934818:22
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/27935118:22
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/27935018:22
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/27934718:22
openstackgerritDan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/27934618:22
*** saneax_AFK is now known as saneax18:23
*** openstack has joined #puppet-openstack18:26
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/27935118:39
dprinceEmilienM: I think we should do Apache wsgi support for zaqar too. It would be better to run the wsgi side there18:44
dprinceEmilienM: the zaqar-server process is useful too, but we seem to be moving the Apache for everything18:45
*** openstackgerrit has quit IRC18:47
*** openstackgerrit has joined #puppet-openstack18:47
*** degorenko is now known as _degorenko|afk18:50
*** dgurtner has quit IRC18:51
ayoungdprince, so one thing that is tricky with Federation is the need for a mapping file. Typically we manage this as a separate file and use the command ex: openstack mapping create --rules /mapping_ipsilon_saml2.json ipsilon_mapping18:58
ayoungHow would this be expected to work with Puppet and Heat?18:59
openstackgerritMerged openstack/puppet-designate: Added parameters api_base_uri and enable_api_admin  https://review.openstack.org/27345419:00
dprinceayoung: run that once per cluster? or once per machine?19:01
ayoungdprince, well, once per backend datatbase for Keystone.  Is the Galera instance shared between them, or do they have their own?19:02
dprinceayoung: it is shared19:02
ayoungdprince, then once per cluster is sufficient19:02
dprinceayoung: you can Exec a command with puppet19:02
ayoungdprince, I meant how do we manage the mapping file.  It is json.19:03
dprinceayoung: pass it in via a parameter?19:04
ayoungdprince, so, I can figure out the puppet how to make the call (I think).  The questions is, since on additional puppet applies, there should be a check if something changes, how do you do that with an external resopurce like this.  I know you can do it for a flat file, but this is the data that is fed in to a command19:05
dprinceayoung: we can create a file with puppet too19:06
openstackgerritKeith Schincke proposed openstack/puppet-ceph: Add support for civetweb  https://review.openstack.org/25454819:07
dprinceayoung: so it goes like this. Heat parameter ==> hieradata ==> puppet writes the file ==> puppet runs the command19:07
ayoungOK...19:07
ayoungdprince, OK.  I've still got a lot to learn here, but that makes sense19:08
*** baker has joined #puppet-openstack19:09
*** omartsyniuk has quit IRC19:10
*** dmsimard has quit IRC19:10
*** saneax is now known as saneax_AFK19:13
*** paramite|afk is now known as paramite19:17
*** dmsimard has joined #puppet-openstack19:26
*** yottatsa has quit IRC19:30
*** baker has quit IRC19:36
*** dmsimard has quit IRC19:36
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/27935119:39
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::websocket class  https://review.openstack.org/27974619:39
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::wsgi class  https://review.openstack.org/27974719:39
*** baker has joined #puppet-openstack19:41
*** baker has quit IRC19:46
*** baker has joined #puppet-openstack19:46
*** paramite has quit IRC19:48
openstackgerritJason Guiditta proposed openstack/puppet-neutron: Add ensure_*aas_package booleans for ::neutron::server  https://review.openstack.org/27220219:54
*** jtomasek_ has quit IRC20:06
*** nlahouti has quit IRC20:29
*** dhollinger has quit IRC20:31
*** Guest3687 is now known as mgagne20:34
*** mgagne has quit IRC20:35
*** mgagne has joined #puppet-openstack20:35
*** dhollinger has joined #puppet-openstack20:35
*** johnmilton has quit IRC20:47
*** dhollinger has quit IRC20:52
*** brandon has joined #puppet-openstack20:53
openstackgerritMerged openstack/puppet-openstack-integration: Puppetfile: bump apache to 1.8.x  https://review.openstack.org/27781520:57
openstackgerritMerged openstack/puppet-cinder: Add support for RabbitMQ connection heartbeat  https://review.openstack.org/27910020:58
*** ericksonsantos has quit IRC21:01
EmilienMdprince: I'll work on it21:05
EmilienMfor wsgi21:05
dprinceEmilienM: cool, I think flavio said the required python stub was already done21:08
EmilienMgood.21:08
EmilienMI did that for mistral21:08
EmilienMhttps://review.openstack.org/27722321:08
openstackgerritColleen Murphy proposed openstack/puppet-keystone: Add keystone::disable_admin_token_auth class  https://review.openstack.org/25624821:08
EmilienMdprince: can you review it please?21:08
dprinceEmilienM: oh nice21:09
dprinceEmilienM: sure21:09
*** haplo37 has quit IRC21:18
*** jayg is now known as jayg|g0n321:25
*** nlahouti has joined #puppet-openstack21:26
openstackgerritAlex Schultz proposed openstack/puppet-trove: Add kombu_reconnect_delay option  https://review.openstack.org/27980921:32
*** cwolferh has quit IRC21:35
*** brandon_ has joined #puppet-openstack21:37
*** brandon has quit IRC21:38
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/27934921:45
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/27934821:45
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/27935121:45
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/27935021:45
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::wsgi class  https://review.openstack.org/27974721:45
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/27934721:45
openstackgerritDan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::websocket class  https://review.openstack.org/27974621:45
openstackgerritDan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/27934621:45
*** yolanda has quit IRC21:45
*** yolanda has joined #puppet-openstack21:46
-openstackstatus- NOTICE: The infrastructure team is taking gerrit offline for maintenance this afternoon, beginning at 22:00 utc. We should have it back online around 23:00 utc. http://lists.openstack.org/pipermail/openstack-dev/2016-February/086195.html21:47
*** cwolferh has joined #puppet-openstack21:56
openstackgerritMerged openstack/puppet-neutron: Change of PLUMgrid plugin package and addition of new parameters.  https://review.openstack.org/27852221:58
openstackgerritMerged openstack/puppet-neutron: Add support for RabbitMQ connection heartbeat  https://review.openstack.org/27896221:59
*** dprince has quit IRC22:01
-openstackstatus- NOTICE: Gerrit is offline for maintenacne until 23:00 utc22:07
*** ChanServ changes topic to "Gerrit is offline for maintenacne until 23:00 utc"22:07
*** cwolferh_ has joined #puppet-openstack22:08
*** cwolferh has quit IRC22:09
*** bkero has quit IRC22:11
*** angdraug has joined #puppet-openstack22:20
*** haplo37 has joined #puppet-openstack22:24
*** RichardRaseley has joined #puppet-openstack22:32
*** richm has joined #puppet-openstack22:58
*** RichardRaseley has quit IRC23:04
-openstackstatus- NOTICE: Gerrit is offline for maintenance, ETA updated to 23:30 utc23:08
*** ChanServ changes topic to "Gerrit is offline for maintenance, ETA updated to 23:30 utc"23:08
*** johnmilton has joined #puppet-openstack23:11
*** ducttape_ has quit IRC23:16
*** saneax_AFK is now known as saneax23:21
*** priteau has quit IRC23:29
*** baker has quit IRC23:33
*** baker has joined #puppet-openstack23:35
*** xarses_ has joined #puppet-openstack23:36
*** xarses has quit IRC23:39
*** markvoelker has quit IRC23:41
-openstackstatus- NOTICE: Gerrit is offline for maintenance, ETA updated to 23:59 utc23:43
*** ChanServ changes topic to "Gerrit is offline for maintenance, ETA updated to 23:59 utc"23:43
*** baker has quit IRC23:43
*** richm has quit IRC23:46
*** richm has joined #puppet-openstack23:49

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!