| opendevreview | Takashi Kajinami proposed openstack/puppet-aodh master: Add support for the system_scope parameter https://review.opendev.org/c/openstack/puppet-aodh/+/804350 | 02:57 |
|---|---|---|
| opendevreview | Takashi Kajinami proposed openstack/puppet-glance master: Swift backend: Use Keystone v3 API by default https://review.opendev.org/c/openstack/puppet-glance/+/814691 | 03:10 |
| opendevreview | Merged openstack/puppet-aodh master: Allow customizing separator for api-paste.ini https://review.opendev.org/c/openstack/puppet-aodh/+/813316 | 03:15 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-glance master: Swift backend: Use Keystone v3 API by default https://review.opendev.org/c/openstack/puppet-glance/+/814691 | 03:16 |
| *** ykarel_ is now known as ykarel | 04:40 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-glance master: Swift backend: the key parameter should be secret https://review.opendev.org/c/openstack/puppet-glance/+/814700 | 05:00 |
| *** ysandeep|out is now known as ysandeep | 05:08 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-aodh master: Add support for the system_scope parameter https://review.opendev.org/c/openstack/puppet-aodh/+/804350 | 06:13 |
| *** ysandeep is now known as ysandeep|afk | 06:34 | |
| *** ysandeep|afk is now known as ysandeep|trng | 07:03 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-glance master: Swift backend: the key parameter should be secret https://review.opendev.org/c/openstack/puppet-glance/+/814700 | 07:24 |
| *** jpena|off is now known as jpena | 07:29 | |
| zigo | tkajinam: Hi. With the latest puppet-openstack, I'm now getting: | 07:40 |
| zigo | Error: Failed to apply catalog: Parameter path failed on File[policy.yaml]: File paths must be fully qualified, not 'policy.yaml' (file: /usr/share/puppet/modules/openstacklib/manifests/policy/default.pp, line: 60) | 07:40 |
| zigo | however, I haven't made any explicit call to openstacklib::policy::default, would you maybe know who's calling it indirectly ? | 07:40 |
| tkajinam | it's called from openstacklib::policy | 07:42 |
| tkajinam | which is called by <service>::policy | 07:42 |
| tkajinam | I guess you are passing not full path but only file name for the <service>::policy::policy_path parameters | 07:42 |
| tkajinam | we made some change to allow purging policy.yaml before inserting rules and I guess that's why you see the problem now | 07:44 |
| tkajinam | zigo, ^^^ | 07:45 |
| zigo | tkajinam: I'm not calling anything for policy at all ... :/ | 07:48 |
| zigo | Oh, I do, in Glance ... | 07:49 |
| tkajinam | maybe we can implement a better validation but historically the policy_path parameter requires a full path | 07:51 |
| zigo | tkajinam: I saw what you did, that's great. | 07:51 |
| zigo | This will integrate nicely with the policy.d folder stuff that I have in Debian. | 07:51 |
| tkajinam | using a file name would break puppt if you want to customize policy rules | 07:51 |
| zigo | Works now that I've fixed my glance::policy stuff. :) | 07:52 |
| tkajinam | yeah I think it makes more sense to purge files if you are using a separate file | 07:52 |
| tkajinam | which you fully manage | 07:53 |
| zigo | In Debian, I have all the default policy file commented out. | 07:53 |
| tkajinam | I see | 07:54 |
| zigo | So typically, one would just add a new file in /etc/<service>/policy.d/something-for-customizing.yaml | 07:54 |
| zigo | The file /etc/<service>/policy.d/00_default-policy.yaml is used, but has nothing in it... it's just an example to show what's avaialbe. | 07:55 |
| tkajinam | yeah I understand that intention. in recent releases most of services doesn't require any default rules so having the default file might be just empty or a kind of readme | 07:55 |
| tkajinam | ... as you mentioned | 07:55 |
| tkajinam | though some services like Octavia, Gnocchi still requires the default rule iirc | 07:56 |
| tkajinam | Gnocchi might have got rid of default rules in recent stable releases... if the patch I proposed has been shipped | 07:56 |
| zigo | It's worse than this: with the default policy file as generated by oslo-config-generator, things are completely broken with all deprecated policies activated. | 07:56 |
| tkajinam | ah, yeah. I remember there were some discussions about that | 07:57 |
| tkajinam | and that was the reason yaml is taking over json | 07:57 |
| *** ykarel is now known as ykarel|lunch | 08:00 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-openstacklib master: policy: Make sure policy_path is an absolute path https://review.opendev.org/c/openstack/puppet-openstacklib/+/814728 | 08:40 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-openstacklib master: policy: Make sure policy_path is an absolute path https://review.opendev.org/c/openstack/puppet-openstacklib/+/814728 | 08:41 |
| *** ykarel|lunch is now known as ykarel | 10:15 | |
| *** ysandeep|trng is now known as ysandeep|afk | 10:19 | |
| *** jpena is now known as jpena|lunch | 11:25 | |
| *** amoralej is now known as amoralej|off | 12:21 | |
| *** ysandeep|afk is now known as ysandeep | 12:21 | |
| *** amoralej|off is now known as amoralej|lunch | 12:21 | |
| *** jpena|lunch is now known as jpena | 12:24 | |
| *** amoralej|lunch is now known as amoralej | 13:30 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-neutron master: WIP: Use openstack cli to manage neutron networks https://review.opendev.org/c/openstack/puppet-neutron/+/814785 | 13:54 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-neutron master: WIP: Use openstack cli to manage neutron networks https://review.opendev.org/c/openstack/puppet-neutron/+/814785 | 13:56 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-neutron master: WIP: Use openstack cli to manage neutron networks https://review.opendev.org/c/openstack/puppet-neutron/+/814785 | 14:33 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-neutron master: WIP: Use openstack cli to manage neutron networks https://review.opendev.org/c/openstack/puppet-neutron/+/814785 | 14:57 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-neutron master: WIP: Use openstack cli to manage neutron networks https://review.opendev.org/c/openstack/puppet-neutron/+/814785 | 15:30 |
| *** ykarel is now known as ykarel|away | 15:31 | |
| *** jpena is now known as jpena|off | 16:31 | |
| *** ysandeep is now known as ysandeep|away | 16:41 | |
| *** amoralej is now known as amoralej|off | 17:42 | |
| *** amoralej|off is now known as amoralej | 18:01 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!