| *** xinliang has quit IRC | 02:58 | |
| *** xinliang has joined #refstack | 03:11 | |
| *** markvoelker has joined #refstack | 06:13 | |
| *** lifeless has quit IRC | 06:47 | |
| *** tosky has joined #refstack | 06:50 | |
| *** kopecmartin has joined #refstack | 06:53 | |
| *** lifeless has joined #refstack | 07:15 | |
| chandankumar | tosky: https://review.openstack.org/#/c/569783/1 | 10:35 |
|---|---|---|
| chandankumar | please have a look on this | 10:35 |
| chandankumar | tosky: arxcruz kopecmartin step1: towards making the tool backward compatible https://review.rdoproject.org/r/#/c/13851/ | 10:57 |
| *** xinliang has quit IRC | 11:00 | |
| tosky | chandankumar: I know that it's needed, but aren't we going to kill RDO infra resources? | 11:26 |
| chandankumar | tosky: https://github.com/openstack/tripleo-quickstart/blob/master/config/general_config/featureset001.yml#L130 | 11:30 |
| chandankumar | it will run this fs set and only one scenario test | 11:31 |
| tosky | 4 jobs more, I mean | 11:31 |
| tosky | but no other way | 11:32 |
| tosky | well, 3 jobs | 11:32 |
| chandankumar | fs021 will be removed | 11:33 |
| chandankumar | tosky: arxcruz kopecmartin regarding desigining os-cloud account.yaml generation cli | 13:05 |
| chandankumar | tosky: arxcruz kopecmartin i have added some points here : https://review.rdoproject.org/etherpad/p/tempest-sprint-14 @line ni: 28 please have a look and add your comments please | 13:05 |
| tosky | chandankumar: I'm still not sure why it is used only if you use --os-cloud; does it really matter? | 13:07 |
| openstackgerrit | Merged openstack/python-tempestconf master: Fix identity v3 ext discovery https://review.openstack.org/569783 | 13:57 |
| chandankumar | tosky: so here is the thing os-cloud and account.yaml both contains credentials | 13:58 |
| chandankumar | the main goal was to keep credentials outside from the tempest.conf file | 13:59 |
| chandankumar | when user is using os-cloud that time crdentials is aleady seperate there we donot need to do anything, just we need to make sure the crdentials are not getting exposed in tempest.conf | 14:00 |
| chandankumar | and the same goes with accounts.yaml | 14:00 |
| chandankumar | tosky: am i correct till this? | 14:00 |
| tosky | chandankumar: and when are credentials not separate? | 14:02 |
| tosky | (separate from what? How else do you pass credentials to refstack-client?) | 14:03 |
| chandankumar | tosky: when we use os-cloud the credentails are in /etc/openstack/accounts.yaml | 14:04 |
| chandankumar | tosky: when we just source keystone/overcloud/stackrc file that time tempestconf will store the crdentials in tempest.conf | 14:04 |
| chandankumar | tosky: in refstack-client side we pass the credentail using account-file or os-cloud side | 14:05 |
| chandankumar | the main goal was to not expose credentials in tempest.conf | 14:06 |
| tosky | chandankumar: ok, so it's not "when using os-cloud", but it's "when the tempest account-file is not passed" | 14:06 |
| chandankumar | and keep secrets seperate | 14:06 |
| tosky | that's the part I understand | 14:06 |
| chandankumar | tosky: yes, the when tempest account-file is not passed | 14:06 |
| tosky | the part I did not understand is "why only when using os-cloud", and the answer seems to be "because in the other case the credentials are already in a tempest account-file". | 14:07 |
| tosky | this is what I did not know | 14:07 |
| * chandankumar rechecks the meeting notes | 14:09 | |
| tosky | thanks for the explanation! | 14:11 |
| tosky | (or that I did not remember) | 14:11 |
| chandankumar | tosky: http://eavesdrop.openstack.org/meetings/refstack/2018/refstack.2018-05-15-17.00.log.html#l-83 | 14:12 |
| chandankumar | when there is a need of accounts.yaml file then we can create either the crdentails are sourced from os-cloud or keystonerc file | 14:12 |
| tosky | chandankumar: what I meant is "or any other way the credentials are passed to refstack-client"; of course if accounts.yaml is already passed, no need to recreate it | 14:14 |
| tosky | about lightweight, well, it's not lightweight, it's a normal accounts.yaml file | 14:14 |
| chandankumar | tosky: yup the normal account.yaml file i need to remove the lightweight part | 14:14 |
| chandankumar | tosky: so the next question is when there is need of accounts.yaml file? | 14:17 |
| chandankumar | tosky: only while running tests with refstack tests and no accounts.yaml file is passed | 14:17 |
| tosky | chandankumar: are you talking about refstack-client or tempestconf? | 14:19 |
| chandankumar | tosky: refstack-client | 14:20 |
| chandankumar | tosky: but the implementation will stay in tempestconf | 14:20 |
| tosky | yes, yes | 14:20 |
| tosky | so, if I understand the issue: if you pass a tempest account file to refstack-client, you don't need to rewrite it | 14:20 |
| chandankumar | correct | 14:21 |
| tosky | if you don't pass it, whetever is the way you pass the credentials to refstack-client, you need one, so you need to write it | 14:21 |
| chandankumar | yes totally correct | 14:21 |
| chandankumar | tosky: coming to implementation part we need a flag in tempestconf which will generate accounts.yaml | 14:23 |
| tosky | yes, that's needed | 14:24 |
| tosky | in the "public interface" | 14:24 |
| tosky | (config_tempest) | 14:24 |
| chandankumar | which will be consumed in refstack-client to use it only when there is no tempest accoutn file is passed with refstack-client | 14:24 |
| chandankumar | tosky: the utility should be something like this: discover-tempest-config --create-account-file <path where to dump the account .file> | 14:25 |
| chandankumar | ? | 14:25 |
| tosky | that's the parameter as exposed in discover-tempest-config; no strong opinion on the name | 14:29 |
| chandankumar | arxcruz: kopecmartin tosky: please check the line 36 to 42 https://review.rdoproject.org/etherpad/p/tempest-sprint-14 | 14:34 |
| tosky | chandankumar: fixed | 14:45 |
| tosky | the interface in discover-tempest-config is not relevant | 14:45 |
| tosky | refstack-client does not use it | 14:45 |
| chandankumar | tosky: yup | 14:45 |
| chandankumar | tosky: thanks for the help :-) | 14:46 |
| tosky | refstack-client only cares for config_tempest() ; of course we may want to expose that parameter on the CLI of discover-tempest-config, but that's not strictly needed to have this working for refstack-client | 14:47 |
| *** markvoelker has quit IRC | 15:38 | |
| *** markvoelker has joined #refstack | 15:39 | |
| *** markvoelker has quit IRC | 15:43 | |
| tosky | kopecmartin, arxcruz, chandankumar: for the record, I will be out on vacation for few days (back next Tuesday) | 16:30 |
| arxcruz | tosky: play with iron man suit ? :P | 16:31 |
| tosky | arxcruz: I wouldn't ever leave you without your toy :P | 16:32 |
| arxcruz | hahaha | 16:32 |
| *** kopecmartin has quit IRC | 16:48 | |
| *** rmart04 has joined #refstack | 17:26 | |
| *** rmart04 has quit IRC | 17:31 | |
| chandankumar | tosky: ack sir :-) | 17:59 |
| *** ekhugen_alt has joined #refstack | 18:05 | |
| *** ekhugen has quit IRC | 18:05 | |
| *** tosky has quit IRC | 21:49 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!