| openstackgerrit | zhongshengping proposed openstack/puppet-keystone stable/queens: Use OS_BOOTSTRAP_PASSWORD instead of passing CLI https://review.openstack.org/574114 | 01:47 |
|---|---|---|
| openstackgerrit | zhongshengping proposed openstack/puppet-keystone stable/pike: Use OS_BOOTSTRAP_PASSWORD instead of passing CLI https://review.openstack.org/574115 | 01:49 |
| openstackgerrit | zhongshengping proposed openstack/puppet-neutron master: Remove deprecated rabbit params https://review.openstack.org/570307 | 01:53 |
| *** gregoryo has joined #puppet-openstack | 01:59 | |
| openstackgerrit | zhongshengping proposed openstack/puppet-monasca master: Add tox.ini https://review.openstack.org/574117 | 02:04 |
| openstackgerrit | zhongshengping proposed openstack/puppet-monasca master: Add tox.ini https://review.openstack.org/574117 | 02:08 |
| openstackgerrit | zhongshengping proposed openstack/puppet-monasca master: Add release support https://review.openstack.org/574117 | 02:10 |
| openstackgerrit | zhongshengping proposed openstack/puppet-openstack-integration master: Add 5.5 unit test https://review.openstack.org/574118 | 02:14 |
| openstackgerrit | Yong Huang proposed openstack/puppet-cinder master: [VNX Cinder] Deprecate option storage_vnx_pool_name https://review.openstack.org/572720 | 03:33 |
| openstackgerrit | Yong Huang proposed openstack/puppet-cinder master: [VNX Cinder] Deprecate option storage_vnx_pool_name https://review.openstack.org/572720 | 03:40 |
| *** skramaja has joined #puppet-openstack | 04:08 | |
| *** alee_ has joined #puppet-openstack | 04:27 | |
| *** alee has quit IRC | 04:31 | |
| *** jaganathan has joined #puppet-openstack | 04:51 | |
| *** jaganathan has quit IRC | 04:59 | |
| *** ykarel has joined #puppet-openstack | 05:05 | |
| *** andreww has joined #puppet-openstack | 06:27 | |
| *** xarses_ has quit IRC | 06:29 | |
| *** armaan has joined #puppet-openstack | 07:01 | |
| *** cgfbee has joined #puppet-openstack | 07:03 | |
| *** jaosorior has joined #puppet-openstack | 07:10 | |
| *** rcernin has quit IRC | 07:10 | |
| *** jtomasek has joined #puppet-openstack | 07:14 | |
| *** dpawlik has joined #puppet-openstack | 07:25 | |
| *** jaganathan has joined #puppet-openstack | 07:25 | |
| *** amoralej|off is now known as amoralej | 07:28 | |
| *** chem has joined #puppet-openstack | 07:31 | |
| *** armaan has quit IRC | 07:34 | |
| *** armaan has joined #puppet-openstack | 07:34 | |
| *** tosky has joined #puppet-openstack | 07:40 | |
| *** dpawlik has quit IRC | 07:41 | |
| *** armaan has quit IRC | 07:44 | |
| *** armaan has joined #puppet-openstack | 07:45 | |
| *** ykarel is now known as ykarel|afk | 07:46 | |
| *** dpawlik has joined #puppet-openstack | 07:47 | |
| *** jpena|off is now known as jpena | 07:50 | |
| openstackgerrit | Christian Schwede proposed openstack/puppet-swift master: Add section for container-sharder service https://review.openstack.org/574156 | 08:02 |
| *** shardy has joined #puppet-openstack | 08:11 | |
| openstackgerrit | Merged openstack/puppet-cinder master: [VNX Cinder] Deprecate option storage_vnx_pool_name https://review.openstack.org/572720 | 08:22 |
| *** skramaja_ has joined #puppet-openstack | 08:22 | |
| *** skramaja has quit IRC | 08:25 | |
| *** derekh has joined #puppet-openstack | 08:31 | |
| *** gfidente has joined #puppet-openstack | 08:32 | |
| *** gfidente has quit IRC | 08:32 | |
| *** gfidente has joined #puppet-openstack | 08:32 | |
| *** dtantsur|afk is now known as dtantsur | 08:40 | |
| *** gregoryo has quit IRC | 08:59 | |
| *** salmankhan has joined #puppet-openstack | 09:28 | |
| *** ykarel|afk is now known as ykarel | 09:30 | |
| *** dtantsur is now known as dtantsur|bbl | 09:49 | |
| *** ykarel has quit IRC | 09:58 | |
| *** ykarel has joined #puppet-openstack | 10:01 | |
| openstackgerrit | Pierre Gaxatte proposed openstack/puppet-mistral master: Add provider and type to deploy workflows https://review.openstack.org/573245 | 10:02 |
| pgaxatte | hello | 10:03 |
| pgaxatte | Last week I talked about adding the possibility to manage mistral's workflows from the puppet-mistral module | 10:05 |
| pgaxatte | the patch seems good to me, could someone review it? | 10:06 |
| pgaxatte | mwhahaha ^ ? | 10:06 |
| pgaxatte | mwhahaha: patch is here https://review.openstack.org/573245 | 10:07 |
| *** ykarel_ has joined #puppet-openstack | 11:00 | |
| *** ykarel has quit IRC | 11:02 | |
| *** atoth has joined #puppet-openstack | 11:17 | |
| *** jpena is now known as jpena|lunch | 11:19 | |
| *** ykarel_ is now known as ykarel | 11:31 | |
| *** rochapor1o has quit IRC | 11:34 | |
| *** shardy is now known as shardy_lunch | 11:37 | |
| *** amoralej is now known as amoralej|lunch | 11:38 | |
| *** armaan has quit IRC | 11:57 | |
| *** armaan has joined #puppet-openstack | 11:58 | |
| *** morazi has joined #puppet-openstack | 11:59 | |
| *** armaan has quit IRC | 12:02 | |
| *** jpena|lunch is now known as jpena | 12:03 | |
| *** trown has joined #puppet-openstack | 12:12 | |
| *** shardy_lunch is now known as shardy | 12:16 | |
| *** armaan has joined #puppet-openstack | 12:18 | |
| *** armaan has quit IRC | 12:20 | |
| *** armaan has joined #puppet-openstack | 12:20 | |
| *** chem has quit IRC | 12:28 | |
| *** chem has joined #puppet-openstack | 12:28 | |
| *** chem has quit IRC | 12:33 | |
| *** jistr is now known as jistr|mtg | 12:41 | |
| *** jistr|mtg is now known as jistr | 12:57 | |
| *** vkhanna has joined #puppet-openstack | 12:58 | |
| *** amoralej|lunch is now known as amoralej | 12:58 | |
| *** armaan has quit IRC | 13:01 | |
| *** armaan has joined #puppet-openstack | 13:01 | |
| *** skramaja_ has quit IRC | 13:22 | |
| *** dtantsur|bbl is now known as dtantsur | 13:25 | |
| *** atoth has left #puppet-openstack | 13:31 | |
| *** shardy has quit IRC | 13:53 | |
| *** shardy has joined #puppet-openstack | 13:53 | |
| *** armaan has quit IRC | 14:05 | |
| *** armaan has joined #puppet-openstack | 14:06 | |
| openstackgerrit | Merged openstack/puppet-mistral master: Add provider and type to deploy workflows https://review.openstack.org/573245 | 14:25 |
| *** ykarel is now known as ykarel|away | 14:43 | |
| openstackgerrit | yatin proposed openstack/puppet-openstack-integration master: [DNM] Try scenario-py3 on ubuntu, fedora and centos https://review.openstack.org/571389 | 14:59 |
| *** beekneemech is now known as bnemec | 15:00 | |
| *** bnemec is now known as beekneemech | 15:06 | |
| *** beekneemech is now known as bnemec | 15:06 | |
| *** dpawlik has quit IRC | 15:14 | |
| *** armaan has quit IRC | 15:39 | |
| *** dpawlik has joined #puppet-openstack | 15:53 | |
| * mwhahaha throws things at tobasco re: https://review.openstack.org/#/c/569608 | 15:54 | |
| *** dpawlik has quit IRC | 15:58 | |
| *** vnogin has joined #puppet-openstack | 16:01 | |
| openstackgerrit | Chason Chan proposed openstack/puppet-sahara master: Stop abusing [keystone_authtoken] https://review.openstack.org/574320 | 16:05 |
| *** rnoriega has quit IRC | 16:13 | |
| *** rnoriega has joined #puppet-openstack | 16:20 | |
| *** vnogin has quit IRC | 16:22 | |
| *** agrebennikov has joined #puppet-openstack | 16:24 | |
| *** rajinir has joined #puppet-openstack | 16:32 | |
| *** shardy has quit IRC | 16:33 | |
| *** trown is now known as trown|lunch | 16:45 | |
| *** armaan has joined #puppet-openstack | 16:57 | |
| *** derekh has quit IRC | 17:00 | |
| *** dpawlik has joined #puppet-openstack | 17:00 | |
| *** dpawlik has quit IRC | 17:04 | |
| *** jpena is now known as jpena|off | 17:13 | |
| *** armaan has quit IRC | 17:13 | |
| *** armaan has joined #puppet-openstack | 17:14 | |
| *** armaan has quit IRC | 17:22 | |
| *** armaan has joined #puppet-openstack | 17:23 | |
| *** armaan has quit IRC | 17:27 | |
| *** armaan has joined #puppet-openstack | 17:27 | |
| *** trown|lunch has quit IRC | 17:35 | |
| *** dtantsur is now known as dtantsur|afk | 17:37 | |
| *** armaan has quit IRC | 17:52 | |
| *** ykarel|away has quit IRC | 18:00 | |
| *** gfidente is now known as gfidente|afk | 18:06 | |
| *** salmankhan has quit IRC | 18:12 | |
| *** amoralej is now known as amoralej|off | 18:23 | |
| *** armaan has joined #puppet-openstack | 18:24 | |
| *** armaan has quit IRC | 18:27 | |
| openstackgerrit | Merged openstack/puppet-cinder stable/pike: Dell EMC PS: Fix the driver path https://review.openstack.org/557726 | 18:35 |
| *** trown has joined #puppet-openstack | 18:38 | |
| zigo | mnaser: Around? | 18:40 |
| zigo | mwhahaha: You, maybe? | 18:40 |
| zigo | I need to discuss something. | 18:40 |
| mnaser | a little bit | 18:40 |
| zigo | Ok, let me try to sum up. | 18:41 |
| zigo | mnaser: neutron-server doesn't work on Py3 + SSL, so i tried to run with neutron-api + neutron-rpc-server, but that's *very* buggy, and then I still have some tempest errors. | 18:41 |
| zigo | Today, I found out that with the exact same config, neutron-server with Apache to do the SSL with mod_proxy just works. | 18:42 |
| mnaser | thats frustrating | 18:42 |
| zigo | mnaser: So I wonder, would it be acceptable to do SSL with mod_proxy for Apache ? | 18:42 |
| zigo | There's no other ways. | 18:42 |
| zigo | Otherwise, maybe haproxy. | 18:42 |
| mnaser | i think we want the roles to be as 'abstract' as possible and not enforcing certain ways of deploying things | 18:42 |
| mnaser | that is very frustrating | 18:43 |
| zigo | mnaser: But then, what's the way? | 18:43 |
| mnaser | whats stopping py3+ssl? | 18:43 |
| zigo | SSL is needed, for sure. | 18:43 |
| zigo | mnaser: Eventlet + Py3 + SSL = SSL handshake crash | 18:43 |
| zigo | That's known since 2015 ... | 18:43 |
| mnaser | ugh | 18:43 |
| zigo | mnaser: So, neutron-server will *NOT* work on Py3 + SSL. | 18:43 |
| zigo | Never, end of the story. | 18:43 |
| *** morazi has quit IRC | 18:43 | |
| mnaser | fantastic | 18:43 |
| zigo | So, the only way forward, is mod_wsgi or uwsgi. | 18:44 |
| zigo | I'm fine with both, except that ... | 18:44 |
| mnaser | but neutron is broken with those | 18:44 |
| zigo | neutron-api + neutron-rpc-server is super buggy. | 18:44 |
| zigo | Yeah, exactly, you got the point. | 18:44 |
| mnaser | ok so | 18:45 |
| mnaser | what i would be most comfortable with is having no ssl support for debian and leaving the user do their own ssl stuff | 18:45 |
| zigo | The tempest.scenario.test_network_basic_ops.TestNetworkBasicOps.test_network_basic_ops fnctional test just fails miserably. | 18:45 |
| mnaser | i.e. most deployments will run neutron-server and have ssl termination happens infront of it | 18:45 |
| mnaser | using haproxy or whatnot | 18:45 |
| zigo | mnaser: That's not acceptable to me. I do want a full SSL deployment, with services talking to each other over SSL. | 18:46 |
| zigo | mnaser: What I do a if $os_package_type = "debian" to make it conditional ? | 18:47 |
| zigo | And also, write that it's temporary, until neutron-api / neutron-rpc-server is fixed ... | 18:47 |
| *** vnogin has joined #puppet-openstack | 18:47 | |
| zigo | mwhahaha: ^ Your thoughts on this? | 18:48 |
| mnaser | i mean we wouldn't want to change the entire behaviour of the puppet modules | 18:48 |
| mnaser | i'd be more okay with something more debian specific rather than changing all deployments to do that | 18:48 |
| mnaser | but yeah i'd like to hear what mwhahaha has to comment | 18:48 |
| zigo | tobasco: What do you think of the above? | 18:49 |
| zigo | mnaser: To me, it looks like everything else is working ... :) | 18:50 |
| mnaser | zigo: yeah just more feedback would be good but i would continue to be vocal about the neutron+py3 stuff | 18:51 |
| zigo | mnaser: Well, if one reviews https://review.openstack.org/#/c/564328/ :0 | 18:51 |
| zigo | mnaser: Someone is already working on fixing neutron-api / rpc-server, though it may take really too long. | 18:52 |
| zigo | And it's kind of not easy to debug these eventlet RPC multi-process event stuff ... | 18:52 |
| zigo | Ah, great, thanks ! :) | 18:52 |
| zigo | Ok, let's way for mwhahaha and tobasco comments on this. | 18:53 |
| *** morazi has joined #puppet-openstack | 19:34 | |
| *** armaan has joined #puppet-openstack | 19:55 | |
| mwhahaha | so that needs to be raised with the neutron tream | 19:57 |
| mwhahaha | and they need to fix that asap | 19:57 |
| mwhahaha | us working around it with mod_proxy works, but is stupid and an issue for openstack as a whole | 19:57 |
| mwhahaha | especially as we switch to py3 | 19:57 |
| -openstackstatus- NOTICE: Zuul was restarted for a software upgrade; changes uploaded or approved between 19:30 and 19:50 will need to be rechecked | 19:58 | |
| *** armaan has quit IRC | 20:00 | |
| *** vnogin has quit IRC | 20:01 | |
| *** jtomasek has quit IRC | 20:23 | |
| *** rwsu has quit IRC | 20:26 | |
| zigo | mwhahaha: The issue is known, and being worked on, though it's taking really a long amount of time. In the mean while, I'd like to have a working puppet-openstack CI, at least with a temporary solution. | 20:45 |
| mwhahaha | zigo: if you can get it working in CI (e.g. just via p-o-i) then sure i guess | 20:46 |
| zigo | mwhahaha: That's, as much as I can tell, the only remaining problem for debian to have scenario001 green ... | 20:47 |
| zigo | So I'm very much motivated to find a solution. | 20:48 |
| mwhahaha | zigo: can't you just disable ssl for debian | 20:48 |
| mwhahaha | that seems like the better solution until they fix it | 20:48 |
| zigo | mwhahaha: I do want SSL for my deployment, I'm not doing it just for fun. | 20:48 |
| mwhahaha | yea but upstream CI doesn't need ssl for debian | 20:48 |
| mwhahaha | so what you want to do with your deployment isn't what we need | 20:48 |
| zigo | What's a public cloud without SSL ... | 20:49 |
| zigo | I'm being paid for deploying a public cloud, you know. | 20:49 |
| mwhahaha | yea i know but that's not a puppet openstack problem | 20:50 |
| zigo | So, what you're proposing is that I use mod_proxy for SSL as an out-of-bound patch, and disable SSL in the mean time? | 20:50 |
| zigo | That's really a shame, as all other services are working well with SSL. | 20:50 |
| mwhahaha | disable ssl for p-o-i scenario001 on debian | 20:50 |
| zigo | Well, absolutely all scenarios are using Neutron. | 20:50 |
| zigo | So, it'd be for everything using Neutron... | 20:50 |
| mwhahaha | but not all are using ssl right? | 20:50 |
| mwhahaha | the point is, this is a neutron problem | 20:51 |
| zigo | All other services, you mean? | 20:51 |
| mwhahaha | anything we do is a workaround | 20:51 |
| zigo | Yeah. | 20:51 |
| mwhahaha | so the way i'd work around it is not configure neutron with ssl until they fix it | 20:51 |
| zigo | And I'm very much for implementing the workaround as a *clear* workaround. | 20:51 |
| zigo | As in a parameter stating $neutron_ssl_workaround = true or something... | 20:52 |
| mwhahaha | but it's a one off | 20:52 |
| * mwhahaha hates one-off's | 20:52 | |
| zigo | It's better than nothing. | 20:52 |
| zigo | In production, one will need that workaround anyway. | 20:52 |
| mwhahaha | if the solution to front it with apache isn't the worst thing in the world, i guess. it's just the wrong place to be fixing this | 20:53 |
| mwhahaha | i can't believe no one is testing that upstream (i'm lying, of course i can believe it) | 20:54 |
| zigo | There's the neutron meeting in 6 mins in #openstack-meeting, I'll ask what they think about it. | 20:54 |
| *** trown is now known as trown|outtypewww | 20:56 | |
| zigo | mwhahaha: Not a lot of people are really using things with python 3 like I do, I believe. | 20:58 |
| zigo | They have functional tests, but not with SSL, for example. | 20:59 |
| mwhahaha | well neutron itself is behind the times because they don't support wsgi either | 20:59 |
| zigo | They may be SSL tests, but not with py3... | 20:59 |
| zigo | Well, they do, but it's broken. | 20:59 |
| zigo | :/ | 20:59 |
| zigo | Unfinished work. | 20:59 |
| mwhahaha | right thats my point | 20:59 |
| zigo | :) | 20:59 |
| mwhahaha | if it's not finished, it's not working | 20:59 |
| mwhahaha | and clearly if there's a goal to move to py3 and they haven't even finished the last one to move to wgi, this is a big problem | 21:00 |
| zigo | Yeah. | 21:00 |
| *** gfidente|afk has quit IRC | 21:31 | |
| *** rwsu has joined #puppet-openstack | 21:34 | |
| openstackgerrit | Merged openstack/puppet-nova master: Fix VNC console in Debian https://review.openstack.org/564328 | 21:35 |
| *** armaan has joined #puppet-openstack | 21:59 | |
| *** armaan has quit IRC | 22:13 | |
| *** armaan has joined #puppet-openstack | 22:14 | |
| *** rcernin has joined #puppet-openstack | 22:16 | |
| *** armaan has quit IRC | 22:33 | |
| *** armaan has joined #puppet-openstack | 22:33 | |
| *** EmilienM|PTO is now known as EmilienM | 22:41 | |
| *** armaan has quit IRC | 22:50 | |
| *** armaan has joined #puppet-openstack | 22:50 | |
| *** armaan has quit IRC | 23:06 | |
| *** tosky has quit IRC | 23:32 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!