Tuesday, 2016-08-30

openstackgerritMerged openstack/puppet-tripleo: Add ML2/OVN support for neutron profile  https://review.openstack.org/31487501:23
openstackgerritzhongshengping proposed openstack/puppet-nova: Deprecate old auth parameters of ironic  https://review.openstack.org/36190601:30
*** saneax is now known as saneax-_-|AFK01:32
*** chem has quit IRC01:37
openstackgerritMerged openstack/puppet-tacker: Fix authtoken  https://review.openstack.org/36155801:40
*** ducttape_ has joined #puppet-openstack02:18
openstackgerritMerged openstack/puppet-cinder: Add auth_strategy for cinder authtoken  https://review.openstack.org/36147002:32
openstackgerritMarcus Furlong proposed openstack/puppet-heat: add parameter to configure the name of the node  https://review.openstack.org/36257802:51
*** ducttape_ has quit IRC03:02
*** tdb has quit IRC03:10
*** tdb has joined #puppet-openstack03:15
*** jperry has joined #puppet-openstack03:25
*** ducttape_ has joined #puppet-openstack04:02
*** ducttape_ has quit IRC04:09
*** ducttape_ has joined #puppet-openstack04:13
*** ducttape_ has quit IRC04:15
*** ntpttr- has quit IRC04:36
*** ntpttr- has joined #puppet-openstack04:40
*** ntpttr has quit IRC04:41
*** ntpttr- is now known as ntpttr04:41
*** ntpttr__ has joined #puppet-openstack04:41
*** ntpttr has quit IRC04:44
*** ntpttr has joined #puppet-openstack04:45
*** ayoung has quit IRC04:58
*** jaosorior has joined #puppet-openstack05:10
*** ducttape_ has joined #puppet-openstack05:16
*** ducttape_ has quit IRC05:21
*** skramaja has joined #puppet-openstack05:26
*** agrebennikov has joined #puppet-openstack05:32
*** richm has quit IRC05:38
*** agrebennikov has quit IRC05:53
*** ebalduf has quit IRC06:00
*** jperry has quit IRC06:15
*** jperry has joined #puppet-openstack06:16
*** rcernin has joined #puppet-openstack06:19
*** paramite has joined #puppet-openstack06:21
*** leanderthal|afk is now known as leanderthal06:30
*** jperry has quit IRC06:39
*** saneax-_-|AFK is now known as saneax06:47
*** karimb has joined #puppet-openstack06:48
*** tesseract- has joined #puppet-openstack07:07
*** jpena|off is now known as jpena07:12
*** dtantsur|afk is now known as dtantsur07:13
*** foxhunt_away is now known as foxhunt7207:14
*** ducttape_ has joined #puppet-openstack07:18
*** rmart04 has joined #puppet-openstack07:20
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Move parameters from ironic::drivers::deploy to ironic::conductor  https://review.openstack.org/36106607:22
*** ifarkas_afk is now known as ifarkas07:22
*** ducttape_ has quit IRC07:23
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Improve management of enabled driver's manifests and dependencies  https://review.openstack.org/35913807:38
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: [WIP] Support configuration and dependencies for iLO and Drac drivers  https://review.openstack.org/35931307:40
*** shardy has joined #puppet-openstack08:03
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Support configuration and dependencies for iLO and Drac drivers  https://review.openstack.org/35931308:03
dtantsurmorning folks! when you're here, could you please check https://review.openstack.org/#/c/354125/? we need that for ironic in overcloud pretty urgently. thanks!08:06
*** derekh has joined #puppet-openstack08:07
openstackgerritJiri Stransky proposed openstack/puppet-tripleo: Defaults to ceph_mon_node_ips and ceph_mon_node_names  https://review.openstack.org/36110808:07
*** karimb has quit IRC08:11
openstackgerritOpenStack Proposal Bot proposed openstack/puppet-openstack-integration: Updated from Puppet OpenStack modules constraints  https://review.openstack.org/36269108:16
openstackgerritOpenStack Proposal Bot proposed openstack/puppet-openstack-integration: Promote RDO repository to latest consistent URL  https://review.openstack.org/36269208:17
*** cgfbee has quit IRC08:18
*** ducttape_ has joined #puppet-openstack08:19
*** ducttape_ has quit IRC08:23
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Move enabled_drivers to ironic::conductor manifest  https://review.openstack.org/36215708:24
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Improve management of enabled driver's manifests and dependencies  https://review.openstack.org/35913808:24
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Support configuration and dependencies for iLO and Drac drivers  https://review.openstack.org/35931308:25
*** gfidente has joined #puppet-openstack08:25
*** cgfbee has joined #puppet-openstack08:25
*** karimb has joined #puppet-openstack08:25
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Move enabled_drivers to ironic::conductor manifest  https://review.openstack.org/36215708:27
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Improve management of enabled driver's manifests and dependencies  https://review.openstack.org/35913808:28
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Support configuration and dependencies for iLO and Drac drivers  https://review.openstack.org/35931308:28
openstackgerritDmitry Tantsur proposed openstack/puppet-ironic: Add ironic::drivers::agent manifest  https://review.openstack.org/36202608:29
dtantsurrebase party ^^^ :(08:29
*** _degorenko|afk is now known as degorenko08:32
*** chem has joined #puppet-openstack08:40
*** markd_ has joined #puppet-openstack08:40
*** karimb has quit IRC08:43
*** karimb has joined #puppet-openstack08:52
*** karimb has quit IRC09:03
*** jaosorior is now known as jaosorior_lunch09:08
*** karimb has joined #puppet-openstack09:09
*** ducttape_ has joined #puppet-openstack09:19
*** ducttape_ has quit IRC09:24
*** chem has quit IRC09:34
*** chem has joined #puppet-openstack09:35
*** jaosorior_lunch is now known as jaosorior09:42
*** davideagle__ has joined #puppet-openstack09:47
*** r2bit__ is now known as r2bit10:03
*** r2bit has quit IRC10:04
*** r2bit has joined #puppet-openstack10:04
*** cgfbee has quit IRC10:10
socialchem: https://review.openstack.org/#/c/354125/ puppy eyes10:12
*** richm has joined #puppet-openstack10:12
* dtantsur adds his pair of puppy eyes to the same request10:16
*** cgfbee has joined #puppet-openstack10:18
*** ducttape_ has joined #puppet-openstack10:20
*** sanjay_ has joined #puppet-openstack10:22
sanjay_Hello all, I am trying to setup keystone using puppet manifest. Can anyone guide me how to do that from the scratch? I have already installed keystone using r10k10:23
*** mjblack has quit IRC10:23
*** mjblack has joined #puppet-openstack10:25
*** ducttape_ has quit IRC10:25
*** ntpttr has quit IRC10:30
*** paramite has quit IRC10:31
*** ntpttr has joined #puppet-openstack10:35
degorenkosanjay_, you can find example here https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/keystone.pp10:42
sanjay_@degorenko: Thanks for the reply. I am using standalone mode, so can i run this manifest file directly?10:43
degorenkosanjay_, yes, you can10:44
*** karimb has quit IRC10:46
sanjay_Hello degorenko: I ran this manifest, it ran successfully but no installation is done, keystone config files are not present, also ports 35357 and 5000 are not in listening mode,10:47
sanjay_can you suggest something, please?10:47
degorenkosanjay_, this manifest is only class declaration, you need to call this class or make include10:48
sanjay_okay, any example how can I do that? I am pretty new to puppet, sorry if asking stupid queries. But really need an example to proceed further..can you please guide me10:49
degorenkosanjay_, take a look on fixtures folder10:49
sanjay_ok, thanks for this degorenko, i will check this out10:51
sanjay_@degorenko: I tried these, but finding this error:10:53
sanjay_Error: Could not find class ::openstack_integration for controller on node controller10:53
sanjay_i have tried copying scenario-aio.pp inside manifest directory, and run again but same result10:55
degorenkosanjay_, because you need fully prepare openstack-integration module10:58
sanjay_Hello degorenko, can you please elaborate a bit more? i am trying to understand how i can deploy single-single module and later on built a manifest that creates controller node services for 1 machine and compute node services on other node to achieve 2 node automated setup11:01
sanjay_So i need to setup keystone initially, if I am able to do this, i can simulate others , that will help my cause11:02
degorenkosanjay_, as you said, you prepared already keystone puppet module - you need to do same for openstack-integration module, as you did it for keystone11:02
sanjay_i am trying this from last few days now11:02
iberezovskiy_sanjay_, hi, could you please try example from acceptance tests https://github.com/openstack/puppet-keystone/blob/master/spec/acceptance/keystone_wsgi_apache_spec.rb#L8-L69 ?11:05
iberezovskiy_please make sure you have newton repos enabled11:05
sanjay_hello iberezovskiy: I am trying this, how can i enable repos for newton?11:06
iberezovskiy_e.g. include openstack_integration::repos https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/repos.pp11:07
sanjay_@degorenko: I tried installing module named openstack-integration but it says bad request: am i doing something else than expected?11:15
sanjay_@iberezovskiy: okay, so as i understand I need to run the manifest "keystone_wsgi_apache_spec.rb" and before that i need to run repos.pp with 'newton' as release name?11:17
degorenkosanjay_, just prepare openstack-integration module in the same way, as you did it for keystone11:17
degorenkokeystone_wsgi_apache_spec.rb is not a puppet manifest11:17
degorenkoyou need run only selected lines11:18
*** ducttape_ has joined #puppet-openstack11:21
*** ducttape_ has quit IRC11:26
*** jperry has joined #puppet-openstack11:26
openstackgerritMerged openstack/puppet-openstack-integration: Updated from Puppet OpenStack modules constraints  https://review.openstack.org/36269111:33
*** morazi has joined #puppet-openstack11:47
openstackgerritGiulio Fidente proposed openstack/puppet-tripleo: Default haproxy listeners activation on hiera service _enabled  https://review.openstack.org/36279811:52
*** jayg|g0n3 is now known as jayg11:56
*** ilbot3 has quit IRC11:57
*** jpena is now known as jpena|lunch12:00
*** ansmith has joined #puppet-openstack12:02
*** trown|outtypewww is now known as trown12:02
*** pradk has joined #puppet-openstack12:02
*** ilbot3 has joined #puppet-openstack12:03
*** jaosorior has quit IRC12:04
*** jaosorior has joined #puppet-openstack12:05
*** ducttape_ has joined #puppet-openstack12:06
*** fultonj has joined #puppet-openstack12:06
EmilienMhello12:09
*** jaosorior has quit IRC12:11
*** jaosorior has joined #puppet-openstack12:12
dtantsurmorning EmilienM12:12
openstackgerritGiulio Fidente proposed openstack/puppet-tripleo: Default haproxy listeners activation on hiera service _enabled  https://review.openstack.org/36279812:13
dtantsurEmilienM, is it possible you get to that huge PXE patch https://review.openstack.org/#/c/354125/ today please?12:13
EmilienMdtantsur: it has -112:14
dtantsurheh, it got -1 while I was asking :)12:14
dtantsurprecise timing! ok, sorry for the noise then12:14
chemdtantsur: EmilienM I've just put it ... just a small typo in a warning12:14
*** iurygregory has quit IRC12:15
chemsocial: I've reviewed https://review.openstack.org/#/c/354125/ and it has a typo in a warning and some other question12:15
* social looks12:16
dtantsurand the other question is pretty serious, good find12:16
dtantsurI've just become aware that we configure TFTP twice: in xinet.d and in inspector dnsmasq12:16
dtantsurwe should only leave dnsmasq12:16
dtantsuroops12:17
socialchem: yeah /o\ I think I git grep tftpboot so many times12:17
dtantsurxinetd of course12:17
chemsocial: I feel your pain, we can still make it happen today though.12:17
openstackgerritGiulio Fidente proposed openstack/puppet-tripleo: Add Ceph RGW listener to HAProxy  https://review.openstack.org/36281612:18
socialyeah so drop enable-tftp ant tftp-root from the dnsmasq?12:18
* social goes to read dnsmasq man12:18
dtantsursocial, yes, drop both. xinetd alone should be enough12:19
* dtantsur has no idea how we ended up with both and how the hell all this even works12:19
socialdtantsur: I should test this manually to see if it won't break ;.;12:20
dtantsur:(12:20
*** karimb has joined #puppet-openstack12:21
socialdtantsur: manifests/pxe.pp:    content => 'r ^([^/]) /tftpboot/\1',12:21
socialdtantsur: so content => ".... ${tftp_root}/\1?12:21
dtantsuroh yeah, one more place12:21
dtantsurcorrect12:21
socialchem: the warning and space in other manifests are for standalone patches not related to pxe refactor12:24
*** danpawlik has joined #puppet-openstack12:25
*** dprince has joined #puppet-openstack12:26
*** ducttape_ has quit IRC12:32
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Promote RDO to latest trunk  https://review.openstack.org/36283612:38
EmilienMok12:40
EmilienMwrong window12:40
*** cdelatte has joined #puppet-openstack12:49
*** markvoelker has joined #puppet-openstack12:52
*** watanabe_isao has joined #puppet-openstack12:54
openstackgerritLukas Bezdicka proposed openstack/puppet-ironic: Introduce ironic::pxe class  https://review.openstack.org/35412512:58
*** jpena|lunch is now known as jpena12:59
*** iurygregory has joined #puppet-openstack13:00
iurygregorymorning13:00
EmilienMiberezovskiy_: can you look https://review.openstack.org/#/c/362487/ please?13:02
EmilienMand https://review.openstack.org/#/c/362423/13:02
*** agrebennikov has joined #puppet-openstack13:05
*** agrebennikov has quit IRC13:06
iurygregorydegorenko, the reason to have auth_strategy in watcher https://review.openstack.org/#/c/356792/4/manifests/api.pp13:07
iberezovskiy_sure, looking13:09
iberezovskiy_both +A13:11
EmilienMdtantsur: your changes at the end of cycle scare me to be honnest13:12
EmilienMim ok to +213:12
EmilienMbut it still scare me to do that so late13:12
degorenkoiurygregory, such approach a little bit confusing me13:12
*** ducttape_ has joined #puppet-openstack13:12
dtantsuryeah, I get it...13:12
iurygregorydegorenko, do you know if Alex is around?13:13
dtantsurEmilienM, well, feel free to stop approving at any point :) only the PXE thing is pretty important13:13
degorenkoiurygregory, probably PTO13:13
EmilienMdtantsur: as long as all CI is green its fine by me13:13
dtantsurthanks!13:13
*** jperry has quit IRC13:14
iurygregorydegorenko, for new modules i think we should not have the condition to include since anyone use yet (I think)13:14
degorenkoiurygregory, well watcher is new module :)13:15
iurygregorydegorenko, yeah i know =)13:15
iurygregorylike cookiecutter when creating a new module we can forget in the review to use auth_strategy...13:15
*** markvoelker has quit IRC13:17
*** ducttape_ has quit IRC13:17
*** karimb has left #puppet-openstack13:23
iurygregoryEmilienM, authtoken is finished https://bugs.launchpad.net/puppet-aodh/+bug/1604463/  \o/ sorry about the problems13:23
openstackLaunchpad bug 1604463 in puppet-swift "Modules should use keystone::resource::authtoken to configure keystone_authtoken settings" [Medium,Fix committed] - Assigned to Iury Gregory Melo Ferreira (iurygregory)13:23
EmilienMiurygregory: don't be sorry13:24
EmilienMi'll switch all our ci to use it and also all tripleo13:24
EmilienMto make sure everything works fine13:24
iurygregoryEmilienM,  if you need help o/13:24
iberezovskiy_we are on the way to switch the fuel as well13:25
EmilienMi would highly suggest to send an email over the ml about this change13:25
EmilienMto explain what people should do in their manifests13:25
EmilienMiberezovskiy_: excellent13:25
EmilienMiurygregory: why not mistral?13:25
iurygregorymistral still use old options and not new ones (username, etc) https://github.com/openstack/mistral/blob/c2424d6ccedc6d8a4448d78612a82521472443e1/mistral/utils/openstack/keystone.py13:26
EmilienMlet me poke people13:26
iurygregoryEmilienM, ack13:26
iurygregoryis the same case for sahara and murano i think13:27
*** dgurtner has joined #puppet-openstack13:36
*** dgurtner has quit IRC13:36
*** dgurtner has joined #puppet-openstack13:36
*** markvoelker has joined #puppet-openstack13:40
*** jperry has joined #puppet-openstack13:43
*** Vinsh has quit IRC13:43
*** fultonj has quit IRC13:44
*** markvoelker has quit IRC13:45
*** fultonj has joined #puppet-openstack13:46
*** dfisher has joined #puppet-openstack13:46
*** ayoung has joined #puppet-openstack13:52
*** ducttape_ has joined #puppet-openstack13:52
*** jperry has quit IRC13:55
*** jperry has joined #puppet-openstack14:02
openstackgerritGiulio Fidente proposed openstack/puppet-ceph: Add rgw::keystone::auth class  https://review.openstack.org/36289314:04
*** chem has quit IRC14:13
*** chem has joined #puppet-openstack14:13
*** ebalduf has joined #puppet-openstack14:14
chemsocial: he, you have some kind of weird character there Unrecognized escape sequence '\1' at /home/jenkins/workspace/gate-puppet-ironic-puppet-syntax-3-centos-7/manifests/pxe.pp:105:4814:17
socialchem: I'm looking into that, I think I just have to escape it for older puppet versions14:18
chemsocial:ack14:18
*** Vinsh has joined #puppet-openstack14:25
*** dtantsur is now known as dtantsur|mtg14:28
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Promote RDO to latest trunk  https://review.openstack.org/36283614:31
openstackgerritMerged openstack/puppet-heat: Configure clients_keystone with admin URL  https://review.openstack.org/36248714:32
openstackgerritMerged openstack/puppet-neutron: Deprecate allow_sorting and allow_pagination options  https://review.openstack.org/36188514:32
jaosoriorHey guys, where is the keystone URL set for the provider that creates the endpoints and such?14:38
*** jaosorior is now known as jaosorior_away14:45
degorenkojaosorior_away, it tries to get openrc file first, then OS ENV and then takes from keystone.conf14:45
jaosorior_awaydegorenko: what's the default place for the openrc file?14:46
degorenkojaosorior_away, https://github.com/openstack/puppet-openstacklib/blob/master/lib/puppet/provider/openstack/auth.rb14:48
xarses /root/openrc14:48
degorenkoah, place on system :) right, /root/openrc14:49
jaosorior_awayxarses, degorenko: thanks... unfortunately it seems we're not using openrc O_o so gotta figure out what are we using in tripleo (hadn't had to dig this before)14:49
*** xarses has quit IRC14:51
*** xarses has joined #puppet-openstack14:52
*** dgurtner has quit IRC14:53
jaosorior_awaynow I see14:56
jaosorior_awaybut it seems that if I want to enable SSL for keystone14:56
jaosorior_awayand it's running under apache14:56
jaosorior_awayI have to do it BOTH for the keystone manifest and the keystone::wsgi::apache14:57
*** AnarchyAo has joined #puppet-openstack14:57
jaosorior_awayis that the case?14:57
EmilienMhttps://etherpad.openstack.org/p/puppet-openstack-weekly-meeting-2016083014:59
EmilienMif anyone has topics for today14:59
EmilienMotherwise well skip it14:59
*** davideagle__ has quit IRC15:01
EmilienMmeeting cancelled!15:02
degorenkoiurygregory, you wanted discuss something?15:02
xarsesjaosorior_away: we don't do anything but configure the api endpoints, with http|s and enable ssl in the LB15:06
*** jperry has quit IRC15:06
*** jperry has joined #puppet-openstack15:07
jaosorior_awayxarses: if you're talking about tripleo, I'm working on enabling TLS from the LB to the service itself15:07
xarses(fuel)15:07
*** chem has quit IRC15:08
jaosorior_awayah15:08
jaosorior_awayalright15:08
*** chem has joined #puppet-openstack15:08
*** rmart04 has quit IRC15:10
*** saneax is now known as saneax-_-|AFK15:16
*** dtantsur|mtg is now known as dtantsur15:25
*** leanderthal is now known as leanderthal|afk15:26
*** nibalizer has quit IRC15:29
*** xarses has quit IRC15:34
*** foxhunt72 is now known as foxhunt_away15:35
*** dtantsur is now known as dtantsur|afk15:42
*** derekh has quit IRC15:46
*** trown is now known as trown|lunch15:52
*** ntpttr__ has quit IRC15:54
*** ducttape_ has quit IRC15:55
*** ducttape_ has joined #puppet-openstack15:56
*** dprince has quit IRC15:59
*** xarses has joined #puppet-openstack16:00
*** dprince has joined #puppet-openstack16:00
*** ifarkas is now known as ifarkas_afk16:01
*** fvollero has joined #puppet-openstack16:07
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Revert "Revert "run_tests: disable TestEncryptedCinderVolumes tests""  https://review.openstack.org/36300016:10
EmilienMjpena: in the meantime ^16:10
jpenaEmilienM: checking the patch, there's no release notes :D16:11
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Promote RDO to latest trunk  https://review.openstack.org/36283616:11
EmilienMjpena: sign16:11
EmilienMsigh16:11
jpenalooking at the updated cinder package, I see now a key_manager and barbican sections (it was keymgr before)16:12
openstackgerritKeith Schincke proposed openstack/puppet-openstack-integration: Introduce scenario004  https://review.openstack.org/33910616:12
EmilienMi'll look into it after lunch16:12
EmilienMin the meantime we want to promote16:12
EmilienMjpena: thx!16:12
EmilienM#fixed_key = <None>16:13
EmilienMWTF16:13
EmilienMjpena: we need to hardcode the key? lol.16:13
* jpena hopes not16:14
openstackgerritChristian Schwede proposed openstack/puppet-swift: Fix middleware order of proxy pipeline and add missing modules  https://review.openstack.org/36300316:18
*** watanabe_isao has quit IRC16:18
EmilienMdtantsur|afk: boom16:21
*** davideagle_ has joined #puppet-openstack16:33
iurygregorydegorenko, well the problem in auth_strategy for ironic::api.pp i think it's bad add the include for ironic...16:40
*** foxhunt_away is now known as foxhunt7216:45
degorenkoiurygregory, yes, that's why i dropped -1 on review :)16:47
iurygregorydegorenko, yeah I think need more feedback the auth_strategy we use doesn't set any value in configuration file..16:48
degorenkoyeah16:49
iurygregoryEmilienM, can you give feedback in https://review.openstack.org/#/c/361553/? ^^16:49
openstackgerritJavier Peña proposed openstack/puppet-cinder: Update Cinder encryption parameters  https://review.openstack.org/36303116:50
jpenaEmilienM: I think ^^ should fix the Cinder issue.16:51
*** jaosorior_away has quit IRC16:51
*** trown|lunch is now known as trown16:52
iurygregorydegorenko, can you +A https://review.openstack.org/#/c/361555/?16:52
*** pradk has quit IRC16:53
*** pradk- has joined #puppet-openstack16:53
*** gfidente has quit IRC16:54
degorenkoiurygregory, done16:56
iurygregorydegorenko, tks16:57
*** jpena is now known as jpena|off16:58
*** jperry has quit IRC17:00
*** iberezovskiy_ is now known as iberezovskiy_off17:02
openstackgerritMerged openstack/puppet-ironic: Move enabled_drivers to ironic::conductor manifest  https://review.openstack.org/36215717:02
*** degorenko is now known as _degorenko|afk17:02
*** pradk- is now known as pradk17:03
openstackgerritMerged openstack/puppet-octavia: Fix authtoken  https://review.openstack.org/36155517:11
*** rcernin has quit IRC17:12
EmilienMiurygregory: ok I will17:14
EmilienMjpena|off: thx!!17:14
iurygregoryEmilienM, tks =)17:14
*** tesseract- has quit IRC17:14
*** dgurtner has joined #puppet-openstack17:15
EmilienMiurygregory: really I have no thought on this patch17:22
EmilienMi wonder which case we don't need keystone17:22
iurygregoryEmilienM, do you think is valid include ironic in api.pp just to make usage of auth_strategyfrom init? the inspector have auth_strategy too17:24
EmilienMall of this is really complex17:24
EmilienMi dont know anyone deploying ironic without keystone17:24
*** tesseract- has joined #puppet-openstack17:24
EmilienMdo we really need this thing?17:24
iurygregoryif we want the include authtoken in the same pattern of other modules, yes17:25
openstackgerritBradley Klein proposed openstack/puppet-monasca: Include ovs metrics when pruning non-infra projects  https://review.openstack.org/36305317:25
EmilienMbecause we have it in other modules does not mean it's good17:26
openstackgerritIury Gregory Melo Ferreira proposed openstack/puppet-openstack-guide: Move Meeting #91 to September  https://review.openstack.org/36305617:26
iurygregoryEmilienM, so i'll let ironic the way it is =) can be?17:27
*** tesseract- has quit IRC17:28
EmilienMiurygregory: probably17:28
iurygregoryEmilienM, tks for your time :D17:28
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Promote RDO to latest trunk  https://review.openstack.org/36306417:36
*** foxhunt72 is now known as foxhunt_away17:38
openstackgerritMerged openstack/puppet-openstack-guide: Move Meeting #91 to September  https://review.openstack.org/36305617:46
*** markvoelker has joined #puppet-openstack17:54
*** davideagle_ has quit IRC17:54
openstackgerritKeith Schincke proposed openstack/puppet-openstack-integration: Introduce scenario004  https://review.openstack.org/33910617:59
*** alee has joined #puppet-openstack18:01
aleeEmilienM, whats up?18:01
EmilienMalee: hey18:01
EmilienMalee: can you check https://review.openstack.org/363031 please?18:01
EmilienMcinder broke again barbican things18:01
aleeEmilienM, ok - looking18:02
EmilienMthx18:02
colonwqEmilienM, Once 339106 is in. I will start on a gnoochi test if you want.18:02
EmilienMalee: our ci failed to promote with latest cinder because of this18:03
EmilienMcolonwq: cool18:03
EmilienMcolonwq: once your patch is merged i'll enable voting on it18:03
aleeEmilienM, excellent -- its doing what its supposed to do ..18:03
EmilienMand move it to gate18:03
EmilienMalee: are we also supposed to configure fixed_key param?18:03
aleeEmilienM, back in a few mins.. need to grab a quick bite ..18:04
*** davideagle has joined #puppet-openstack18:05
*** tesseract- has joined #puppet-openstack18:05
*** tesseract- has quit IRC18:05
*** tesseract- has joined #puppet-openstack18:06
*** tesseract- has quit IRC18:08
*** tesseract- has joined #puppet-openstack18:10
*** ducttape_ has quit IRC18:18
*** markvoelker has quit IRC18:22
iurygregoryrandom question, anyone received answer from TSP? =(18:24
*** tesseract- has quit IRC18:30
*** tesseract- has joined #puppet-openstack18:30
*** tesseract- has quit IRC18:30
*** tesseract- has joined #puppet-openstack18:31
colonwqEmilienM, does p-o-i register a Cinder endpoint for Openstack M? I was running into issues doing an "openstack volume create" but it could have been me.18:36
*** tesseract- has quit IRC18:37
iurygregorymaster p-o-i is for Newton, but it will create the endpoint18:38
*** davideagle has quit IRC18:38
*** davideagle has joined #puppet-openstack18:40
*** ducttape_ has joined #puppet-openstack18:41
aleeEmilienM, I think the issue is simply that the wrong key manager class is being written in the puppet tests18:47
*** danpawlik_ has joined #puppet-openstack18:48
*** delattec has joined #puppet-openstack18:48
colonwqiurygregory, thanks. I will look for the issue between the keyboard and chair.18:48
aleeEmilienM, that is -- https://review.openstack.org/#/c/363031 changes the way that the key manager parameters are written in the config file to conform with the castellan way of doing things18:49
aleebut it does so in a non-backwards compatible way18:49
*** saneax-_-|AFK is now known as saneax18:51
*** cdelatte has quit IRC18:51
*** jtomasek has quit IRC18:51
EmilienMcolonwq: yes18:51
*** basilAB has quit IRC18:52
*** _degorenko|afk has quit IRC18:52
*** LarsErikP has quit IRC18:52
*** hecliunyx has quit IRC18:52
colonwqEmilienM, Thanks. I'll look at what I did wrong.18:52
EmilienMalee: this thins is a mess to be honnest18:52
EmilienMalee: volume encryption is a mess18:52
*** LarsErikP has joined #puppet-openstack18:53
openstackgerritIvan Chavero proposed openstack/puppet-swift: Fix doc typho.  https://review.openstack.org/36312218:53
EmilienMalee: what is we change the default api_class?18:53
*** davideagle has quit IRC18:54
aleeEmilienM, so here is what happened ..  in cinder, the way we used to define  the keystore is using [keymgr] api_class="....."18:54
EmilienMI'm going to disable this feature in our CI18:54
EmilienMit's too unstable atm18:54
aleeEmilienM, no -- its easily fixed18:54
aleeEmilienM, we expected a change that needed to happen at some point to go to castellan18:55
aleeEmilienM, but its supposed to be backwards compatible.  I suspect that without https://review.openstack.org/#/c/363031, it would have continued to work ..18:56
aleeEmilienM, though we'd be using the deprecated config18:57
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Finish to configure authtoken with modern parameters  https://review.openstack.org/36312918:57
EmilienMalee: it doesn't work18:57
EmilienMwithout18:57
aleeEmilienM, so if we keep https://review.openstack.org/#/c/363031, we simply need to change the barbican class18:57
*** davideagle has joined #puppet-openstack18:58
*** hecliunyx has joined #puppet-openstack18:58
aleeEmilienM, which would be here ..18:58
EmilienMalee: see https://review.openstack.org/#/c/362836/218:58
EmilienMalee: see logs at PS218:58
EmilienMalee: tests are failing18:58
EmilienMalee: keymgr_api_class you mean?18:59
aleeyup18:59
EmilienMif we set the correct keymgr_api_class in puppet cinder?18:59
EmilienMdoes it work with old packaging?18:59
EmilienMthe prob is that we override it in p-o-i18:59
EmilienMlet's disable the test first18:59
aleeEmilienM, https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/cinder.pp#L6618:59
EmilienMwe'll reenable it right after18:59
aleeEmilienM, sure19:00
*** jperry has joined #puppet-openstack19:00
*** basilAB has joined #puppet-openstack19:01
EmilienMalee: and should I do this ? https://review.openstack.org/#/c/363064/1/manifests/cinder.pp19:01
aleeEmilienM, but yeah, it just needs to be set to "castellan.key_manager.barbican_key_manager.BarbicanKeyManager"19:01
aleein p-o-i19:01
aleeexactly19:02
EmilienMlet's try again19:02
*** jtomasek has joined #puppet-openstack19:03
aleeEmilienM, so you need that change + the puppet-cinder change19:03
EmilienMyes19:04
openstackgerritEmilien Macchi proposed openstack/puppet-cinder: Update Cinder encryption parameters  https://review.openstack.org/36303119:04
aleefingers crossed ..19:04
*** _degorenko|afk has joined #puppet-openstack19:06
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Promote RDO to latest trunk  https://review.openstack.org/36314119:08
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Enable Volume encryption testing again  https://review.openstack.org/36314219:08
EmilienMalee: yeah let's try ^19:08
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Enable Volume encryption testing again  https://review.openstack.org/36314219:09
*** davideagle has quit IRC19:13
iurygregorycolonwq, good luck o/ if need anything help we try to help if possible =)19:14
EmilienMcolonwq: don't forget to "check experimental" everytime you commit on this patch.19:18
EmilienMcolonwq: your poi patch doesn't work19:21
EmilienMhttp://logs.openstack.org/06/339106/34/experimental/gate-puppet-openstack-integration-4-scenario004-tempest-centos-7-nv/fe965fa/console.html19:22
EmilienMsecond puppet run is not idempotent19:22
EmilienMcolonwq: I really have no time to work on it but something is wrong in puppet ceph19:23
colonwqEmilienM, I'll take a look at the logs and see what needs to be updated19:33
EmilienMcolonwq: I'm working on a fix...19:35
*** dprince has quit IRC19:35
colonwqEmilienM, ok is the lines here? http://logs.openstack.org/06/339106/34/experimental/gate-puppet-openstack-integration-4-scenario004-tempest-centos-7-nv/fe965fa/console.html#_2016-08-30_19_16_34_85676919:37
colonwqThree SELinux lines and a reload command?19:37
EmilienMyes19:37
*** foxhunt_away is now known as foxhunt7219:39
*** rcernin has joined #puppet-openstack19:39
EmilienMcolonwq: it should do the job but not sure 100% https://review.openstack.org/36316419:41
openstackgerritMerged openstack/puppet-openstack-integration: Revert "Revert "run_tests: disable TestEncryptedCinderVolumes tests""  https://review.openstack.org/36300019:42
colonwqEmilienM, does the selinux_ignore_defaults make it not relabel the files and semanage handle it?19:42
EmilienMcolonwq: yes.19:43
colonwqEmilienM, OK. that is a good tool to know.19:43
openstackgerritMartin AndrĂ© proposed openstack/puppet-tripleo: Manage tripleo-ui configuration files with puppet  https://review.openstack.org/36316719:43
colonwqThe reload command is needed only for hammer on centos/rhel 7. Is there a time for when we do not want to support that?19:44
EmilienMcolonwq: ok please remove it then19:44
EmilienMI'll let you take over the patch19:45
EmilienMplease remove the reload thing in the same patch19:45
EmilienMrebase your rgw keystone on top of it19:45
EmilienMand recheck poi. ok?19:45
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Add puppet-panko in OpenStack modules list  https://review.openstack.org/36317019:46
colonwqOk. Ill submit 363000 for review in a couple of mins.19:46
EmilienMcolonwq: not this one19:47
EmilienMhttps://review.openstack.org/36316419:47
colonwqthat explains why I did not see it in my review list.19:47
*** dprince has joined #puppet-openstack19:50
openstackgerritKeith Schincke proposed openstack/puppet-ceph: Make RGW deployment idempotent  https://review.openstack.org/36316419:53
openstackgerritEmilien Macchi proposed openstack/puppet-tripleo: midonet: update neutron parameter  https://review.openstack.org/36317819:59
openstackgerritKeith Schincke proposed openstack/puppet-openstack-integration: Introduce scenario004  https://review.openstack.org/33910620:00
*** shardy has quit IRC20:02
*** shardy has joined #puppet-openstack20:05
*** danpawlik_ has quit IRC20:06
EmilienMcolonwq: like I said... you need to rebase https://review.openstack.org/#/c/347956/ on top of my patch20:06
EmilienMor the CI won't pass in poi scenario00420:07
colonwqok. let me do that.20:11
openstackgerritEmilien Macchi proposed openstack/puppet-ceph: Update Jewel Ceph RGW to support Keystone V3  https://review.openstack.org/34795620:11
*** pradk has quit IRC20:11
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Introduce scenario004  https://review.openstack.org/33910620:12
EmilienMcolonwq: done20:12
EmilienMcolonwq: sorry20:12
EmilienMI didn't see your message20:12
colonwqEmilienM, No problem. You are faster than I can learn. I have been rebasing to master instead of a patch.20:12
EmilienMcolonwq: use Gerrit UI20:12
EmilienMyou can rebase in one click.20:12
iurygregorybest button in the UI20:13
colonwqEmilienM, that is so much easier than by hand.20:13
*** pradk has joined #puppet-openstack20:16
*** jperry has quit IRC20:16
*** jperry has joined #puppet-openstack20:17
*** ducttape_ has quit IRC20:19
*** ducttape_ has joined #puppet-openstack20:22
*** dgurtner has quit IRC20:22
*** jayg is now known as jayg|g0n320:22
*** saneax is now known as saneax-_-|AFK20:27
aleeEmilienM, failed - but better -- looks like the barbican url can be versionless now ..20:33
*** rcernin has quit IRC20:33
EmilienMthat thing is a nightmare20:33
*** rcernin has joined #puppet-openstack20:33
aleeEmilienM, https://review.openstack.org/#/c/363064/1/manifests/cinder.pp20:34
aleeline 66 - remove the /v120:34
aleeand it should be good to go.20:34
aleeEmilienM, I see where its trying to get to /v1/v1 ..20:34
aleeEmilienM, this is actually better20:35
*** trown is now known as trown|outtypewww20:35
EmilienMsure lol20:36
EmilienMit's better :)20:36
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Enable Volume encryption testing again  https://review.openstack.org/36314220:36
*** ansmith has quit IRC20:41
*** foxhunt72 is now known as foxhunt_away20:49
*** shardy has quit IRC20:53
*** chem has quit IRC20:57
*** alee has quit IRC21:04
*** dprince has quit IRC21:08
*** ayoung has quit IRC21:19
*** morazi has quit IRC21:26
EmilienMcolonwq: http://logs.openstack.org/06/339106/36/experimental/gate-puppet-openstack-integration-3-scenario004-tempest-centos-7-nv/3d10a4a/console.html#_2016-08-30_20_42_58_35766721:26
EmilienMrgw doesn't start21:26
EmilienMcolonwq: http://logs.openstack.org/06/339106/36/experimental/gate-puppet-openstack-integration-3-scenario004-tempest-centos-7-nv/3d10a4a/logs/ceph/radosgw.txt.gz21:27
EmilienMKeystone token parse error: missing mandatory field access21:27
iurygregoryits a little strange because the ceph configuration have all parameters..21:48
iurygregoryrgw_keystone_admin_password = secret21:48
iurygregoryrgw_keystone_admin_user = rgwuser21:48
iurygregoryrgw_keystone_admin_project = services21:48
iurygregoryrgw_keystone_admin_domain = default21:48
iurygregoryrgw_keystone_url = https://127.0.0.1:3535721:48
iurygregoryrgw_keystone_api_version = 321:48
iurygregorynot sure if rgw_keystone_admin_domain want id or name information, if is name the value should be Default21:49
*** davideagle has joined #puppet-openstack21:49
xarsesiurygregory: is accepted roles present?21:55
iurygregoryxarses, yes21:55
iurygregoryrgw_keystone_accepted_roles = admin,Member21:56
iurygregoryhttp://logs.openstack.org/06/339106/36/experimental/gate-puppet-openstack-integration-3-scenario004-tempest-centos-7-nv/3d10a4a/logs/etc/ceph/ceph.conf.txt.gz21:56
iurygregoryit's correct have this in the same line: rgw_frontends = civetweb port=808021:57
iurygregoryO.o21:57
*** alee has joined #puppet-openstack21:58
xarsescan't bind to 808021:58
xarseson xenial21:59
xarsesand it complains about signing21:59
*** jperry has quit IRC22:04
*** davideagle has quit IRC22:06
xarseskeystone is supposed to be https?22:09
xarsesiurygregory: ya, it seems to read it correctly22:09
openstackgerritPradeep Kilambi proposed openstack/puppet-panko: Implement Panko Api service  https://review.openstack.org/36230522:28
*** ducttape_ has quit IRC22:34
*** ansmith has joined #puppet-openstack22:59
*** ayoung has joined #puppet-openstack22:59
*** pradk has quit IRC23:00
*** ducttape_ has joined #puppet-openstack23:03
*** johnmilton has quit IRC23:06
*** ducttape_ has quit IRC23:09
*** saneax-_-|AFK is now known as saneax23:12
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: cinder: disable barbican  https://review.openstack.org/36330923:17
*** Vinsh has quit IRC23:17
*** davideagle has joined #puppet-openstack23:17
openstackgerritEmilien Macchi proposed openstack/puppet-cinder: Update Cinder encryption parameters  https://review.openstack.org/36303123:18
*** xarses has quit IRC23:18
openstackgerritEmilien Macchi proposed openstack/puppet-openstack-integration: Enable Volume encryption testing again  https://review.openstack.org/36314223:18
EmilienMyeah it's a mess23:18
*** dfisher has quit IRC23:28
*** rcernin has quit IRC23:35
*** Vinsh has joined #puppet-openstack23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!