| *** yuanying_ has quit IRC | 00:06 | |
| *** yuanying has joined #tripleo | 00:07 | |
| *** david-lyle is now known as david-lyle_afk | 00:11 | |
| *** vinsh has joined #tripleo | 00:12 | |
| *** vinsh has quit IRC | 00:14 | |
| *** vinsh has joined #tripleo | 00:15 | |
| *** vinsh has quit IRC | 00:16 | |
| *** vinsh has joined #tripleo | 00:18 | |
| *** jerryz has joined #tripleo | 00:20 | |
| *** yuanying has quit IRC | 00:23 | |
| *** yuanying has joined #tripleo | 00:23 | |
| *** spzala has quit IRC | 00:26 | |
| *** pradeep1 has joined #tripleo | 00:30 | |
| *** yuanying has quit IRC | 00:36 | |
| *** vinsh has quit IRC | 00:40 | |
| *** vinsh has joined #tripleo | 00:48 | |
| *** vinsh has quit IRC | 00:50 | |
| *** gfidente has quit IRC | 00:51 | |
| *** yuanying has joined #tripleo | 00:52 | |
| *** avozza is now known as zz_avozza | 00:56 | |
| *** yuanying has quit IRC | 01:03 | |
| *** StevenK has joined #tripleo | 01:04 | |
| *** yuanying has joined #tripleo | 01:04 | |
| *** yuanying has quit IRC | 01:05 | |
| *** rwsu has quit IRC | 01:08 | |
| *** yuanying has joined #tripleo | 01:10 | |
| *** marun has quit IRC | 01:11 | |
| *** marun has joined #tripleo | 01:14 | |
| *** vinsh has joined #tripleo | 01:24 | |
| *** vinsh has quit IRC | 01:28 | |
| *** yuanying has quit IRC | 01:29 | |
| *** vinsh has joined #tripleo | 01:33 | |
| *** Marga_ has quit IRC | 01:35 | |
| *** vinsh has quit IRC | 01:38 | |
| *** marun has quit IRC | 01:38 | |
| *** wuhg has joined #tripleo | 01:43 | |
| *** Marga_ has joined #tripleo | 01:44 | |
| *** pradeep2 has joined #tripleo | 01:46 | |
| *** noslzzp has joined #tripleo | 01:47 | |
| *** pradeep1 has quit IRC | 01:47 | |
| *** Marga_ has quit IRC | 01:48 | |
| *** pradeep1 has joined #tripleo | 01:52 | |
| *** pradeep2 has quit IRC | 01:53 | |
| *** Yanyanhu has joined #tripleo | 01:54 | |
| *** pradeep1 has quit IRC | 01:55 | |
| *** yuanying has joined #tripleo | 02:01 | |
| *** weshay has quit IRC | 02:02 | |
| *** yuanying has quit IRC | 02:10 | |
| *** yuanying has joined #tripleo | 02:10 | |
| *** vinsh has joined #tripleo | 02:11 | |
| *** vinsh has quit IRC | 02:18 | |
| *** ChuckC has quit IRC | 02:18 | |
| *** vinsh has joined #tripleo | 02:20 | |
| *** vinsh has quit IRC | 02:24 | |
| *** yuanying has quit IRC | 02:24 | |
| *** yuanying has joined #tripleo | 02:44 | |
| *** yuanying has quit IRC | 02:46 | |
| *** yuanying has joined #tripleo | 02:47 | |
| *** yuanying has quit IRC | 02:51 | |
| *** ChuckC has joined #tripleo | 02:53 | |
| *** vinsh has joined #tripleo | 02:54 | |
| *** jiangfei has quit IRC | 03:07 | |
| *** jiangfei has joined #tripleo | 03:07 | |
| *** vinsh has quit IRC | 03:07 | |
| *** jiangfei has left #tripleo | 03:14 | |
| *** yuanying has joined #tripleo | 03:16 | |
| *** vinsh has joined #tripleo | 03:16 | |
| *** pradeep1 has joined #tripleo | 03:22 | |
| *** marun has joined #tripleo | 03:26 | |
| *** regebro has quit IRC | 03:44 | |
| *** kurtrao has quit IRC | 03:50 | |
| *** sseago has joined #tripleo | 03:50 | |
| *** kurtrao has joined #tripleo | 03:50 | |
| *** vinsh has quit IRC | 03:56 | |
| *** untriaged-bot has joined #tripleo | 04:00 | |
| untriaged-bot | Untriaged bugs so far: | 04:00 |
|---|---|---|
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396904 | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1387061 | 04:00 |
| uvirtbot | Launchpad bug 1396904 in tripleo "keepalived logs are not rotated properly" [Undecided,New] | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1398591 | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/os-collect-config/+bug/1398254 | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/tuskar/+bug/1387487 | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/diskimage-builder/+bug/1400405 | 04:00 |
| uvirtbot | Launchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New] | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396730 | 04:00 |
| uvirtbot | Launchpad bug 1398591 in tripleo "metadata-proxy process is not killed when running in a virtual environment" [Undecided,Fix committed] | 04:00 |
| uvirtbot | Launchpad bug 1398254 in os-collect-config "os-collect-config can't get correct keystone v3 auth_url using keystoneclient discover" [Undecided,In progress] | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399793 | 04:00 |
| uvirtbot | Launchpad bug 1387487 in tuskar "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui needs authentication from Keystone" [Undecided,New] | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399512 | 04:00 |
| uvirtbot | Launchpad bug 1400405 in diskimage-builder "ironic.agent element fails to write kernel and ramdisk to specified location" [Undecided,New] | 04:00 |
| uvirtbot | Launchpad bug 1396730 in tripleo "br-ex doesn't activate when overcloud controller is rebooted" [Undecided,New] | 04:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1400809 | 04:00 |
| uvirtbot | Launchpad bug 1399793 in tripleo "Service shared secrets in heat templates should be hidden" [Undecided,New] | 04:00 |
| *** untriaged-bot has quit IRC | 04:00 | |
| uvirtbot | Launchpad bug 1399512 in tripleo "Cinder failed to complete volume attachment due to missing lock_path" [Undecided,Fix committed] | 04:00 |
| uvirtbot | Launchpad bug 1400809 in tripleo "openSUSE deploy-ironic ramdisk fails to deploy" [Undecided,New] | 04:00 |
| *** wanghua has joined #tripleo | 04:01 | |
| *** kes has joined #tripleo | 04:02 | |
| *** kes has quit IRC | 04:03 | |
| *** kurtrao has quit IRC | 04:13 | |
| *** kurtrao has joined #tripleo | 04:14 | |
| openstackgerrit | Steve Kowalik proposed openstack/tripleo-incubator: Switch to new setup-flavors https://review.openstack.org/131635 | 04:33 |
| *** noslzzp has quit IRC | 04:40 | |
| *** tzumainn has quit IRC | 04:44 | |
| openstackgerrit | Steve Kowalik proposed openstack/os-cloud-config: Add support for creating Keystone v3 clients https://review.openstack.org/133885 | 04:46 |
| *** killer_prince is now known as lazy_prince | 05:06 | |
| *** Marga_ has joined #tripleo | 05:09 | |
| openstackgerrit | Steve Kowalik proposed openstack/os-cloud-config: Add support to create a Keystone domain for Heat https://review.openstack.org/134858 | 05:09 |
| *** marun has quit IRC | 05:12 | |
| *** marun has joined #tripleo | 05:13 | |
| *** Marga_ has quit IRC | 05:13 | |
| *** Marga_ has joined #tripleo | 05:14 | |
| *** radez is now known as radez_g0n3 | 05:15 | |
| *** pensu has joined #tripleo | 05:16 | |
| *** pensu has quit IRC | 05:17 | |
| *** pensu has joined #tripleo | 05:18 | |
| *** vinsh has joined #tripleo | 05:28 | |
| *** vinsh has quit IRC | 05:29 | |
| *** jrist has quit IRC | 05:30 | |
| *** kurtrao has quit IRC | 05:33 | |
| *** kurtrao has joined #tripleo | 05:33 | |
| *** Marga_ has quit IRC | 05:36 | |
| *** kurtrao has quit IRC | 05:38 | |
| *** Marga_ has joined #tripleo | 05:38 | |
| *** rushiagr_away is now known as rushiagr | 05:40 | |
| *** jrist has joined #tripleo | 05:41 | |
| openstackgerrit | Merged openstack/diskimage-builder: Migrate to new package-installs https://review.openstack.org/137478 | 05:44 |
| openstackgerrit | Merged openstack/diskimage-builder: Improve --ramdisk-element docs https://review.openstack.org/138114 | 05:45 |
| SpamapS | StevenK: hi. Did we ever land that code in os-cloud-config to setup heat's domains? | 05:56 |
| *** Marga_ has quit IRC | 05:56 | |
| *** Marga_ has joined #tripleo | 05:56 | |
| *** jiangfei has joined #tripleo | 05:59 | |
| StevenK | SpamapS: Nope, still up for review | 06:02 |
| *** jrist has quit IRC | 06:09 | |
| *** jrist has joined #tripleo | 06:22 | |
| *** kes has joined #tripleo | 06:24 | |
| *** kes has joined #tripleo | 06:24 | |
| *** yuanying_ has joined #tripleo | 06:24 | |
| *** kesmellon has joined #tripleo | 06:24 | |
| *** kes has quit IRC | 06:24 | |
| *** kesmellon has quit IRC | 06:24 | |
| *** kes has joined #tripleo | 06:25 | |
| *** yuanying_ has quit IRC | 06:25 | |
| *** yuanying has quit IRC | 06:28 | |
| *** yuanying has joined #tripleo | 06:28 | |
| *** rlandy has joined #tripleo | 06:31 | |
| *** marun has quit IRC | 06:32 | |
| *** ccrouch has quit IRC | 06:36 | |
| *** ccrouch has joined #tripleo | 06:36 | |
| *** kes has quit IRC | 06:46 | |
| *** kes has joined #tripleo | 06:49 | |
| *** ukalifon has joined #tripleo | 06:50 | |
| *** mrunge has joined #tripleo | 06:51 | |
| tchaypo | meeting time in 45 minutes if I’m reading correctly | 07:18 |
| *** zz_avozza is now known as avozza | 07:24 | |
| *** k4n0 has joined #tripleo | 07:25 | |
| *** dshulyak has joined #tripleo | 07:27 | |
| tchaypo | Ng seems to have found his thumbs | 07:31 |
| openstackgerrit | James Polley proposed openstack/tripleo-image-elements: System dnsmasq daemon should only listen on lo https://review.openstack.org/139865 | 07:35 |
| tchaypo | I plan to raise https://bugs.launchpad.net/tripleo/+bug/1188067 in the meeting - I’d like to get feedback about my idea of closing it, at least until we find other services that need to be handled carefully | 07:39 |
| uvirtbot | Launchpad bug 1188067 in tripleo "* listening services available on all addresses" [High,In progress] | 07:39 |
| tchaypo | if SpamapS is around I’ll raise https://review.openstack.org/#/c/138005/ with him | 07:40 |
| *** Marga_ has quit IRC | 07:41 | |
| * tchaypo cues the peaceful hold music prior to meeting starting | 07:50 | |
| *** jtomasek has joined #tripleo | 07:51 | |
| openstackgerrit | James Polley proposed openstack/tripleo-image-elements: Fix placement of the vlan type https://review.openstack.org/135727 | 07:53 |
| GheRivero | morning all | 07:54 |
| *** dtantsur|afk is now known as dtantsur | 07:55 | |
| *** jprovazn has joined #tripleo | 07:56 | |
| *** jerryz has quit IRC | 07:58 | |
| *** gfidente has joined #tripleo | 08:00 | |
| *** chlong is now known as chlong_home | 08:01 | |
| *** jerryz has joined #tripleo | 08:07 | |
| *** bvandenh has joined #tripleo | 08:07 | |
| *** dividehex has quit IRC | 08:09 | |
| *** dividehex has joined #tripleo | 08:10 | |
| *** avozza is now known as zz_avozza | 08:16 | |
| *** jistr has joined #tripleo | 08:17 | |
| *** jerryz_ has joined #tripleo | 08:24 | |
| marios | jprovazn: ping https://review.openstack.org/127988 <-- quick look when you have a sec pls | 08:29 |
| jprovazn | ok | 08:30 |
| *** jcoufal has joined #tripleo | 08:32 | |
| *** daneyon_ has quit IRC | 08:39 | |
| *** zz_avozza is now known as avozza | 08:39 | |
| *** pblaho has joined #tripleo | 08:40 | |
| *** andreaf has quit IRC | 08:47 | |
| *** andreaf has joined #tripleo | 08:48 | |
| *** akrivoka has joined #tripleo | 08:57 | |
| openstackgerrit | Merged openstack/tripleo-image-elements: Add Neutron DVR configuration variables https://review.openstack.org/127988 | 09:01 |
| tchaypo | wooo | 09:02 |
| *** dshulyak has quit IRC | 09:03 | |
| *** athomas has joined #tripleo | 09:13 | |
| *** derekh has joined #tripleo | 09:17 | |
| *** lsmola has quit IRC | 09:18 | |
| *** dshulyak has joined #tripleo | 09:20 | |
| *** daneyon has joined #tripleo | 09:21 | |
| *** lsmola has joined #tripleo | 09:22 | |
| *** mrunge has quit IRC | 09:24 | |
| *** mrunge has joined #tripleo | 09:28 | |
| *** kes has quit IRC | 09:41 | |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-specs: Introduce support for Cinder HA via Ceph https://review.openstack.org/101237 | 09:43 |
| tchaypo | gfidente: thanks | 09:47 |
| gfidente | ? | 09:48 |
| gfidente | the spec? | 09:48 |
| tchaypo | Yeah | 09:48 |
| gfidente | oh c'mon | 09:48 |
| tchaypo | I was going to ask you if there was anything we could do to move it forward | 09:48 |
| gfidente | there is a lot to do | 09:48 |
| tchaypo | but you responded to clint while I was having breakfast | 09:49 |
| gfidente | but I can stay on it for a while | 09:49 |
| tchaypo | on related notes - what’s the weather like down there today? | 09:49 |
| gfidente | ahahha | 09:49 |
| gfidente | it's still pretty sunny | 09:49 |
| gfidente | colder | 09:49 |
| tchaypo | and also, what else remains to move this forward? is it complete now and just looking for positive reviews? | 09:49 |
| gfidente | but still enjoyable during the warmer hours | 09:49 |
| gfidente | tchaypo, it is not complete as it misses some stuff | 09:50 |
| gfidente | like configuring cinder for pre-existing ceph | 09:50 |
| gfidente | but the other stuff is already there, I'd like to update it a little more | 09:50 |
| gfidente | but I am eager to hear feedback to finalise | 09:50 |
| *** mrunge has quit IRC | 09:50 | |
| *** jerryz__ has joined #tripleo | 09:54 | |
| *** jerryz__ has quit IRC | 09:54 | |
| *** jerryz_ has quit IRC | 09:54 | |
| *** mrunge has joined #tripleo | 09:56 | |
| *** subscope has joined #tripleo | 09:56 | |
| *** untriaged-bot has joined #tripleo | 10:00 | |
| untriaged-bot | Untriaged bugs so far: | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396904 | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1387061 | 10:00 |
| uvirtbot | Launchpad bug 1396904 in tripleo "keepalived logs are not rotated properly" [Undecided,New] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1398591 | 10:00 |
| uvirtbot | Launchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/os-collect-config/+bug/1398254 | 10:00 |
| uvirtbot | Launchpad bug 1398591 in tripleo "metadata-proxy process is not killed when running in a virtual environment" [Undecided,Fix committed] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tuskar/+bug/1387487 | 10:00 |
| uvirtbot | Launchpad bug 1398254 in os-collect-config "os-collect-config can't get correct keystone v3 auth_url using keystoneclient discover" [Undecided,In progress] | 10:00 |
| uvirtbot | Launchpad bug 1387487 in tuskar "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui needs authentication from Keystone" [Undecided,New] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/diskimage-builder/+bug/1400405 | 10:00 |
| uvirtbot | Launchpad bug 1400405 in diskimage-builder "ironic.agent element fails to write kernel and ramdisk to specified location" [Undecided,New] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396730 | 10:00 |
| uvirtbot | Launchpad bug 1396730 in tripleo "br-ex doesn't activate when overcloud controller is rebooted" [Undecided,New] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399793 | 10:00 |
| uvirtbot | Launchpad bug 1399793 in tripleo "Service shared secrets in heat templates should be hidden" [Undecided,New] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399512 | 10:00 |
| uvirtbot | Launchpad bug 1399512 in tripleo "Cinder failed to complete volume attachment due to missing lock_path" [Undecided,Fix committed] | 10:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1400809 | 10:00 |
| uvirtbot | Launchpad bug 1400809 in tripleo "openSUSE deploy-ironic ramdisk fails to deploy" [Undecided,New] | 10:00 |
| *** untriaged-bot has quit IRC | 10:00 | |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-heat-templates: Fix nfs-server-source.yaml template and remove hidden make target https://review.openstack.org/136303 | 10:00 |
| *** pradeep1 has quit IRC | 10:04 | |
| *** pelix has joined #tripleo | 10:07 | |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-incubator: Add support for building Ceph nodes and configure Cinder to use it https://review.openstack.org/137031 | 10:07 |
| *** Yanyanhu has quit IRC | 10:08 | |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-incubator: Add support for building Ceph nodes and configure Cinder to use it https://review.openstack.org/137031 | 10:09 |
| *** pradeep1 has joined #tripleo | 10:14 | |
| *** yuanying_ has joined #tripleo | 10:15 | |
| *** jcoufal has quit IRC | 10:18 | |
| *** yuanying has quit IRC | 10:19 | |
| tchaypo | Gah. I’m so easily distracted sometimes. | 10:20 |
| *** athomas has quit IRC | 10:32 | |
| *** humble__ has joined #tripleo | 10:34 | |
| *** wanghua has quit IRC | 10:36 | |
| *** andrearosa has quit IRC | 10:37 | |
| openstackgerrit | James Polley proposed openstack/tripleo-specs: Tuskar role components spec https://review.openstack.org/133755 | 10:38 |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-heat-templates: Default BlockStorageCount to 0 for without-mergepy jobs https://review.openstack.org/140639 | 10:38 |
| *** athomas has joined #tripleo | 10:39 | |
| derekh | shadower: my change in infra merged if you want to take the WIP off that merge.py change | 10:40 |
| *** jp_at_hp has joined #tripleo | 10:40 | |
| openstackgerrit | James Polley proposed openstack/tripleo-specs: Custom names https://review.openstack.org/133762 | 10:40 |
| openstackgerrit | Kanagaraj Manickam proposed openstack/tripleo-image-elements: Make heat max_stacks_per_tenant parameter as configurable https://review.openstack.org/140641 | 10:43 |
| *** pblaho has quit IRC | 10:48 | |
| shadower | derekh: will do, thanks | 10:48 |
| shadower | derekh: does that mean I can abandon this now? https://review.openstack.org/#/c/139102/ | 10:50 |
| derekh | shadower: yes, it should do the same thing as the change to tripleo-ci, but we can now test it in ci before it lands | 10:52 |
| shadower | yeah | 10:53 |
| openstackgerrit | James Polley proposed openstack/tripleo-specs: Add Overview subsection to Proposed Change section https://review.openstack.org/133554 | 10:59 |
| tchaypo | derekh: speaking of changes in infra, https://review.openstack.org/#/c/136811/ would love some more attention | 11:01 |
| tchaypo | derekh: and on a different note - it’s about time for a CI update, and I’d like to earn how you’ve been doing them. I think you mentioned that you run a script to gather the data (the one that generates http://goodsquishy.com/downloads/s_tripleo-jobs.html maybe?) and then look for the reasons behind the outages? | 11:04 |
| *** humble__ has quit IRC | 11:06 | |
| *** humble__ has joined #tripleo | 11:06 | |
| *** jkraj has joined #tripleo | 11:07 | |
| openstackgerrit | James Polley proposed openstack/tripleo-specs: Clarify when the blueprint should be created https://review.openstack.org/101825 | 11:12 |
| *** jkraj has quit IRC | 11:17 | |
| *** jp_at_hp has quit IRC | 11:17 | |
| *** jp_at_hp1 has joined #tripleo | 11:17 | |
| *** jkraj has joined #tripleo | 11:17 | |
| *** pradeep1 has quit IRC | 11:18 | |
| *** jp_at_hp1 has quit IRC | 11:21 | |
| *** lazy_prince is now known as killer_prince | 11:30 | |
| *** pradeep1 has joined #tripleo | 11:30 | |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-heat-templates: Add Ceph related templates needed to configure Cinder with Ceph https://review.openstack.org/137028 | 11:32 |
| *** blinky_ghost has joined #tripleo | 11:32 | |
| tchaypo | i was going to ask if shardy is still around, but autocomplete gives the answer | 11:35 |
| tchaypo | but shadower... | 11:36 |
| tchaypo | shadower: the instance_user deprecation came up in the meeting | 11:36 |
| tchaypo | I’m looking at https://bugs.launchpad.net/tripleo/+bug/1229849 and trying to figure out what we need to do | 11:36 |
| uvirtbot | Launchpad bug 1229849 in heat "In future native Heat templates, we should leave the image users alone on servers" [Wishlist,In progress] | 11:36 |
| *** pradeep1 has quit IRC | 11:36 | |
| tchaypo | if I’m reading it correctly, the heat-admin user we’ve been using is going away, and the current plan is to replace it with a bistro-specific username | 11:36 |
| *** pradeep1 has joined #tripleo | 11:38 | |
| gfidente | bistro-specific | 11:41 |
| gfidente | is a tendency coming from paris summit? | 11:41 |
| gfidente | I like it though | 11:42 |
| *** jcoufal has joined #tripleo | 11:46 | |
| *** ifarkas has joined #tripleo | 11:48 | |
| *** bvandenh has quit IRC | 11:57 | |
| *** pensu has quit IRC | 11:59 | |
| tchaypo | speaking of bistros, it’s time for me to get lunch | 12:06 |
| derekh | tchaypo: sorry, I was on a call, I added a +1 to that review | 12:06 |
| derekh | tchaypo: I sent a ci report last thursday to the list, is that the kind of thing you mean or was their more you had in mind ? | 12:07 |
| derekh | tcammann: go for lunch, we can talk when your back | 12:07 |
| derekh | tchaypo: ^ , tcammann sorry | 12:07 |
| *** david-lyle_afk is now known as david-lyle | 12:09 | |
| *** andrearosa has joined #tripleo | 12:09 | |
| *** ifarkas has quit IRC | 12:14 | |
| *** david-lyle is now known as david-lyle_afk | 12:17 | |
| *** david-lyle_afk is now known as david-lyle | 12:17 | |
| *** ifarkas has joined #tripleo | 12:19 | |
| *** jistr has quit IRC | 12:20 | |
| *** david-lyle is now known as david-lyle_afk | 12:23 | |
| *** david-lyle_afk is now known as david-lyle | 12:23 | |
| openstackgerrit | Gerry Drudy proposed openstack/tripleo-image-elements: Don't rebuild swift rings if already exist https://review.openstack.org/140659 | 12:24 |
| tchaypo | derekh: yeah, that | 12:25 |
| tchaypo | It seems like a good useful replacement for the weekly meeting update | 12:26 |
| *** jp_at_hp has joined #tripleo | 12:27 | |
| derekh | tchaypo: works for me, I hoped to do it weekly but have failed to keep the that schedule so far | 12:27 |
| * derekh will try better | 12:28 | |
| *** mrunge is now known as mrunge_brb | 12:31 | |
| *** david-lyle is now known as david-lyle_afk | 12:31 | |
| *** david-lyle_afk is now known as david-lyle | 12:31 | |
| shadower | tchaypo: yeah, sorry I couldn't make the meeting | 12:32 |
| shadower | I'll try to look into that later, but I didn't realise this would affect our SSH access stuff | 12:32 |
| shadower | thought we'd just use the right username for a given distro and be done with it | 12:34 |
| *** pradeep1 has quit IRC | 12:37 | |
| *** dshulyak has quit IRC | 12:38 | |
| *** jistr has joined #tripleo | 12:40 | |
| *** rhallisey has joined #tripleo | 12:43 | |
| *** athomas has quit IRC | 12:50 | |
| *** dprince has joined #tripleo | 12:54 | |
| *** athomas has joined #tripleo | 12:59 | |
| *** david-lyle is now known as david-lyle_afk | 13:00 | |
| *** bvandenh has joined #tripleo | 13:01 | |
| *** jprovazn has quit IRC | 13:02 | |
| *** wuhg has quit IRC | 13:03 | |
| *** pblaho has joined #tripleo | 13:11 | |
| *** andrearosa has quit IRC | 13:15 | |
| *** andrearosa has joined #tripleo | 13:15 | |
| Ng | morning | 13:16 |
| Ng | tchaypo: my thumbs? | 13:16 |
| tchaypo | Derekh: if two of us start working on the reports it should be easier. If you'll be around this afternoon I'll ping you in about an hour | 13:24 |
| tchaypo | Shadower: I'm thinking it's not that big a deal as long as we have same way to grab the right username | 13:26 |
| tchaypo | I'm thinking it would be preferable to be able to ask heat, but I haven't thought it through fully | 13:27 |
| tchaypo | Ng: the ones they cut off when you became a manager | 13:27 |
| tchaypo | Ng: I notice you suddenly found some time to get reviews done | 13:27 |
| Ng | aha :) | 13:27 |
| *** weshay has joined #tripleo | 13:37 | |
| *** morazi has joined #tripleo | 13:40 | |
| shadower | tchaypo: so the thing is, every cloud image already has a user they create. With everything necessary (like sudoers, selinux, etc.) set up | 13:41 |
| shadower | when Heat does it explicitly, we need to make sure we do all that correctly, too | 13:41 |
| shadower | which is what I'd like to avoid and just use the correct name | 13:41 |
| tchaypo | I think that makes sense | 13:42 |
| *** Marga_ has joined #tripleo | 13:42 | |
| shadower | but that does mean we need a way to figure that name out since it's different everywhere | 13:42 |
| tchaypo | I'd prefer that we did that logic once | 13:42 |
| shadower | yea | 13:42 |
| tchaypo | And since it sounds like heat has already figured it out I'd like to cheat and just use its answer :) | 13:43 |
| *** mrunge_brb has quit IRC | 13:43 | |
| shadower | well heat didn't. Right now it just creates a new user | 13:43 |
| tchaypo | Well. When heat *does* figure it out ;) | 13:44 |
| shadower | oh | 13:44 |
| *** pradeep1 has joined #tripleo | 13:45 | |
| shadower | they kind of won't (at least that's the current plan). Other than say documment the common ones. But in theory, any image can have its own name | 13:45 |
| shadower | heat just won't care | 13:45 |
| shadower | the image user has to know that | 13:45 |
| *** jerryz has quit IRC | 13:45 | |
| shadower | if you're using the ubuntu images directly, you have to know that you ssh in as ubuntu@... | 13:46 |
| shadower | so heat will just let you keep doing that and won't get in the way | 13:46 |
| *** dshulyak has joined #tripleo | 13:46 | |
| tchaypo | Does heat know (or let us discover) anything about the OS? | 13:47 |
| shadower | not as far as I know | 13:48 |
| shadower | shardy: ^ | 13:48 |
| tchaypo | It's sounding to me like we'll need to do something like look at the image and figure out a distro from that | 13:48 |
| tchaypo | With a distro->username map | 13:49 |
| shadower | I think we're already aware of the distro anyway | 13:49 |
| tchaypo | Oh yeah | 13:49 |
| shadower | and for the record, we could easily create a new user in an element | 13:49 |
| tchaypo | Inside DIB we have the distro base elements | 13:49 |
| shadower | yea | 13:49 |
| tchaypo | We can export the username there... | 13:49 |
| shardy | tchaypo: heat doesn't really know anything about the OS, other then the image the user specifies | 13:50 |
| *** tzumainn has joined #tripleo | 13:51 | |
| tchaypo | Hrm. Actually, the DIB element won't suffice | 13:52 |
| shardy | shadower, tchaypo: can't the name be specified as a property of the image in glance? | 13:52 |
| tchaypo | The time we really need it is when sshing in to a running instance | 13:52 |
| shardy | as when you create the image, presumably you know what the OS is? | 13:52 |
| tchaypo | I was about to say we need it available later. Storing in glance is probably sufficient if we can know what image each instance used | 13:53 |
| shardy | glance image-create foo --property default_user=fedora | 13:53 |
| tchaypo | Nova knows what image each instance uses, right? | 13:54 |
| *** pradeep2 has joined #tripleo | 13:54 | |
| shadower | sticking it to glance sounds great | 13:55 |
| *** pradeep1 has quit IRC | 13:55 | |
| shadower | tchaypo: yea it sholud | 13:55 |
| shardy | tchaypo: The image is available via nova, and is also exposed via heat's OS::Nova::Server attributes | 13:55 |
| *** pblaho has quit IRC | 13:56 | |
| shadower | shardy: looks like I'll spend more time writing tests for the ASG resource deletion than writing the actual code... | 13:57 |
| tchaypo | So maybe for TripleO purposes a little script that takes an instance id, looks up the image details, and returns a username, would suffice? | 13:57 |
| *** jp_at_hp has quit IRC | 13:57 | |
| shadower | sounds like it sholud | 13:58 |
| *** jcoufal_ has joined #tripleo | 13:59 | |
| *** pradeep1 has joined #tripleo | 14:00 | |
| shardy | shadower: Sorry about the tests, I had a similar experience with ResourceGroup.. | 14:00 |
| shardy | shadower: perhaps you can reuse some of those tests? | 14:00 |
| *** jp_at_hp has joined #tripleo | 14:01 | |
| *** pradeep2 has quit IRC | 14:01 | |
| derekh | tchaypo: ok, cool, I'm back when ever you want to chat | 14:01 |
| *** jcoufal has quit IRC | 14:01 | |
| tchaypo | Derekh: how much longer will you be around? | 14:02 |
| derekh | tchaypo: 4 hours | 14:02 |
| tchaypo | Cool. Will ping you as soon as I get back home | 14:02 |
| shadower | shardy: heh I tried, but I'm getting some really weird behaviour. For example the mere presence of a _create_dummy_stack method in my ASG test class causes all the tests in that class not to run | 14:02 |
| shadower | so now I'm trying to inline that code into the test case to at least move forward | 14:03 |
| shadower | got to run, biab | 14:03 |
| openstackgerrit | Dan Prince proposed openstack/tripleo-puppet-elements: Add a Hiera element https://review.openstack.org/138536 | 14:04 |
| *** subscope has quit IRC | 14:08 | |
| *** rushiagr is now known as rushiagr_away | 14:11 | |
| derekh | dprince: I'm going looking add adding those rh1 hosts today, you haven't started anything on them have you ? | 14:12 |
| *** noslzzp has joined #tripleo | 14:13 | |
| dprince | derekh: no, I'm deep in overcloud puppet stuff man | 14:13 |
| derekh | dprince: ok, cool, just wanted to make sure I didn't start redoing anything thats already done | 14:13 |
| *** julim has joined #tripleo | 14:14 | |
| openstackgerrit | Dan Prince proposed openstack/tripleo-heat-templates: Puppet: overcloud compute config https://review.openstack.org/130304 | 14:15 |
| openstackgerrit | Dan Prince proposed openstack/tripleo-heat-templates: Drive network configuration via software config https://review.openstack.org/130624 | 14:15 |
| *** regebro has joined #tripleo | 14:18 | |
| *** subscope has joined #tripleo | 14:21 | |
| *** noslzzp has quit IRC | 14:23 | |
| *** noslzzp has joined #tripleo | 14:26 | |
| *** pradeep2 has joined #tripleo | 14:26 | |
| *** pradeep1 has quit IRC | 14:27 | |
| *** pradeep2 has quit IRC | 14:31 | |
| mordred | tchaypo, shadower: fwiw, in infra, I'm moving us towards building our own base OS images so that we _don't_ have to deal with the "cloud user name is different" nonsense | 14:41 |
| *** jprovazn has joined #tripleo | 14:42 | |
| *** radez_g0n3 is now known as radez | 14:44 | |
| mordred | btw - if anybody feels like landing https://review.openstack.org/#/c/136660/ and cutting a new dib release, I can stop carrying a bunch of patches in infra and I'll buy you all beer | 14:47 |
| *** rushiagr_away is now known as rushiagr | 14:48 | |
| *** jehb_ has joined #tripleo | 14:50 | |
| GheRivero | mordred: I would, but it failed some tests :/ | 14:50 |
| mordred | GheRivero: oh no! | 14:51 |
| derekh | 2014-12-08 22:41:24.863 | rm: cannot remove `/tmp/image.c03Mll1K/mnt/etc/apt/apt.conf.d/no-cache': No such file or directory | 14:51 |
| derekh | mordred: ^ | 14:51 |
| mordred | ah - I see this now | 14:51 |
| * mordred didn't notice the tripleo-ironic jobs | 14:51 | |
| *** gfidente has quit IRC | 14:52 | |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Add some speedups to dpkg https://review.openstack.org/136660 | 14:53 |
| *** gfidente has joined #tripleo | 14:53 | |
| *** pblaho has joined #tripleo | 14:54 | |
| *** elextro_ has joined #tripleo | 14:55 | |
| *** elextro_ is now known as alextricity_r | 14:55 | |
| *** Marga_ has quit IRC | 15:00 | |
| *** Marga_ has joined #tripleo | 15:06 | |
| shadower | mordred: ah, that's cool | 15:09 |
| gfidente | derekh, isn't this closed: https://bugs.launchpad.net/tripleo/+bug/1368795 ? | 15:18 |
| uvirtbot | Launchpad bug 1368795 in tripleo "neutron-l3-agent crashes on boot without a running neutron-server" [High,Triaged] | 15:18 |
| *** sseago has left #tripleo | 15:19 | |
| *** Marga_ has quit IRC | 15:21 | |
| derekh | gfidente: hmm, yes, I'll find the relevant review add a comment and close it now | 15:22 |
| tchaypo | mordred: our own base image for every supported distort? | 15:22 |
| mordred | tchaypo: for the ones that we run infra services on - so that's centos7 and trusty | 15:23 |
| mordred | tchaypo: if I want to add a new distro-aware package mapping - where does that go? | 15:23 |
| mordred | tchaypo: like, I want to put an entry into a package-installs.yaml, but it has a different name on ubuntu and centos - I believe that's a patch to dib somewhere, right? | 15:24 |
| tchaypo | in the thing that does distort-aware package mappings *nods* | 15:24 |
| tchaypo | one second | 15:24 |
| tchaypo | http://git.openstack.org/cgit/openstack/tripleo-image-elements/tree/elements/ironic/pkg-map | 15:25 |
| tchaypo | so no, afaik it’s not a patch to dib, it’s a patch to the element | 15:25 |
| tchaypo | http://git.openstack.org/cgit/openstack/tripleo-image-elements/tree/elements/keystone/pkg-map is a much more interesting one | 15:26 |
| mordred | ah. so, if I want to install lsb_release in both the centos-minimal and ubuntu-minimal elements, but it's called lsb_release in ubuntu and redhat-lsb in centos, the thing I shoudl do is create an lsb-release element that contains a pkg-map file and have both ubuntu-minimal and centos-minimal depend on it, yeah? | 15:26 |
| mordred | btw - I love that pkg-map is json but package-installs is yaml ... | 15:30 |
| mordred | :) | 15:30 |
| *** ccrouch has quit IRC | 15:32 | |
| *** julim has quit IRC | 15:34 | |
| tchaypo | json is (roughly) a subset of yaml | 15:34 |
| tchaypo | (only because yam saw json getting popular and promptly defined an “alternative syntax” that’s basically json) | 15:35 |
| *** julim has joined #tripleo | 15:36 | |
| *** jrist has quit IRC | 15:36 | |
| *** ccrouch has joined #tripleo | 15:36 | |
| tchaypo | mordred: I kinda don’t see the point of that. the centos-minimal element only really needs to know about the centos name and the ubuntu-minimal only needs to know about minimal | 15:36 |
| tchaypo | s/minimal$/the ubuntu package name/ | 15:36 |
| *** alextricity_r has left #tripleo | 15:38 | |
| tchaypo | letting the name used in the scripts be consistent does make it a bit clearer for someone who is comparing elements I guess; but to do that, you could just supply a mapping to each element that only has the names for that distro | 15:39 |
| mordred | tchaypo: oh - so if I put redhat-lsb in package-installs.yaml on the centos element, it'll do the right thing? | 15:39 |
| tchaypo | ie, the ubuntu-minimal only has the ubuntu mappings and the centos-minimal has the centos mappings | 15:39 |
| mordred | oh neat. I didn't realize I coudl do that | 15:39 |
| mordred | and if I leave out a mapping, the name passes through, right? | 15:39 |
| tchaypo | that way you can have an identical script in both elements, and have it call “lsb_release” in both places, but the mapping does the translation | 15:39 |
| tchaypo | yeah - I was going to say - you can probably get away with not even listing the ubuntu one | 15:40 |
| mordred | yah | 15:40 |
| tchaypo | lots of elements (e.g., the ceilometer-agent-* elements) only define a default | 15:40 |
| tchaypo | so perhaps you do need to define a default + at least one distro-specific variation | 15:42 |
| tchaypo | another way to do it might be to have identical scripts + identical pkg-map files between the elements | 15:43 |
| tchaypo | the only reason i can think that would be a problem is if someone tried to use ubuntu-minimal and cantos-minimal at the same time - but if they do that they have bigger problems | 15:43 |
| *** marun has joined #tripleo | 15:46 | |
| *** vinsh has joined #tripleo | 15:49 | |
| *** cwolferh_ has joined #tripleo | 15:53 | |
| *** jrist has joined #tripleo | 15:53 | |
| mordred | GAH stab stab stab | 15:56 |
| mordred | the new package-installs thing isn't in the released version :( | 15:56 |
| *** cwolferh has quit IRC | 15:56 | |
| tchaypo | hahahaha | 15:57 |
| tchaypo | i think greghaynes wanted to do a release... | 15:57 |
| mordred | good | 15:59 |
| mordred | greghaynes: if my dpkg patch could go in before you release, I would find it a kindness | 15:59 |
| *** untriaged-bot has joined #tripleo | 16:00 | |
| untriaged-bot | Untriaged bugs so far: | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396904 | 16:00 |
| uvirtbot | Launchpad bug 1396904 in tripleo "keepalived logs are not rotated properly" [Undecided,New] | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1387061 | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1398591 | 16:00 |
| uvirtbot | Launchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New] | 16:00 |
| uvirtbot | Launchpad bug 1398591 in tripleo "metadata-proxy process is not killed when running in a virtual environment" [Undecided,Fix committed] | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/os-collect-config/+bug/1398254 | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tuskar/+bug/1387487 | 16:00 |
| uvirtbot | Launchpad bug 1398254 in os-collect-config "os-collect-config can't get correct keystone v3 auth_url using keystoneclient discover" [Undecided,In progress] | 16:00 |
| uvirtbot | Launchpad bug 1387487 in tuskar "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui needs authentication from Keystone" [Undecided,New] | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/diskimage-builder/+bug/1400405 | 16:00 |
| uvirtbot | Launchpad bug 1400405 in diskimage-builder "ironic.agent element fails to write kernel and ramdisk to specified location" [Undecided,New] | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396730 | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1401059 | 16:00 |
| uvirtbot | Launchpad bug 1396730 in tripleo "br-ex doesn't activate when overcloud controller is rebooted" [Undecided,New] | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399793 | 16:00 |
| uvirtbot | Launchpad bug 1401059 in tripleo "Make heat max_stacks_per_tenant parameter as configurable" [Undecided,In progress] | 16:00 |
| uvirtbot | Launchpad bug 1399793 in tripleo "Service shared secrets in heat templates should be hidden" [Undecided,New] | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399512 | 16:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1400809 | 16:00 |
| *** untriaged-bot has quit IRC | 16:00 | |
| uvirtbot | Launchpad bug 1399512 in tripleo "Cinder failed to complete volume attachment due to missing lock_path" [Undecided,Fix committed] | 16:00 |
| uvirtbot | Launchpad bug 1400809 in tripleo "openSUSE deploy-ironic ramdisk fails to deploy" [Undecided,New] | 16:00 |
| *** dshulyak has quit IRC | 16:01 | |
| tchaypo | greghaynes: and i don’t mean to nag, but about that bugsquash email... | 16:02 |
| mordred | tchaypo: I could not for the life of me figure out why a package wasn't being installed ... | 16:03 |
| *** dtantsur is now known as dtantsur|brb | 16:10 | |
| *** jistr has quit IRC | 16:10 | |
| *** vinsh has quit IRC | 16:12 | |
| *** jkraj has quit IRC | 16:13 | |
| *** vinsh has joined #tripleo | 16:13 | |
| mordred | greghaynes: + package-installs-v2 --phase pre-install.d | 16:15 |
| mordred | Traceback (most recent call last): | 16:15 |
| mordred | File "/usr/local/bin/package-installs-v2", line 23, in <module> | 16:15 |
| mordred | from yaml import load as yaml_load | 16:15 |
| *** rlandy has quit IRC | 16:18 | |
| *** morazi has quit IRC | 16:18 | |
| mordred | greghaynes: also, the tool using yaml means on a minimal centos I have to install 80 additional packages into my image just to be able to use dib to build the images | 16:18 |
| *** spzala has joined #tripleo | 16:19 | |
| tchaypo | bahahahahahah | 16:19 |
| *** Marga_ has joined #tripleo | 16:20 | |
| tchaypo | mordred: is there any way you could get away with “pip install pyyaml” instead? | 16:20 |
| mordred | still too much | 16:20 |
| mordred | easier way - only use yaml if the yaml form of the file is used | 16:20 |
| mordred | that way the element writer can choose | 16:20 |
| mordred | and we should be careful to only use the json form in dib itself | 16:21 |
| *** dshulyak has joined #tripleo | 16:21 | |
| *** ukalifon has quit IRC | 16:26 | |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Don't make YAML required https://review.openstack.org/140760 | 16:27 |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Rename yaml_path to installs_path https://review.openstack.org/140761 | 16:27 |
| *** vinsh has quit IRC | 16:29 | |
| *** vinsh has joined #tripleo | 16:30 | |
| *** subscope has quit IRC | 16:35 | |
| *** Marga_ has quit IRC | 16:37 | |
| *** Marga_ has joined #tripleo | 16:37 | |
| *** dshulyak has quit IRC | 16:39 | |
| *** bvandenh has quit IRC | 16:41 | |
| *** athomas has quit IRC | 16:42 | |
| *** akrivoka has quit IRC | 16:44 | |
| *** julim has quit IRC | 16:45 | |
| *** victor_lowther has quit IRC | 16:45 | |
| *** julim has joined #tripleo | 16:50 | |
| *** rhallisey has quit IRC | 16:50 | |
| mordred | greghaynes: how does this work? it looks like package-install-v2 is looking in /usr/share/package-installs for files, but that doesn't have anything in it | 16:50 |
| *** subscope has joined #tripleo | 16:51 | |
| mordred | on the other hand, my /tmp/in-target.d has a single package-installs.json file in it | 16:51 |
| *** jehb_ has quit IRC | 16:51 | |
| mordred | AH | 16:52 |
| mordred | it doesn't copy the json files | 16:52 |
| SpamapS | mordred: re using json over yaml.. perhaps I should turn flamel's method of determining that into a library that doesn't import yaml until it has to. | 16:53 |
| SpamapS | Like, try json.load... except import yaml; yaml.load | 16:54 |
| mordred | yah | 16:54 |
| SpamapS | mordred: 80 packages? wtf? | 16:54 |
| mordred | you learn fun things when working from minimal bases | 16:54 |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Don't make YAML required https://review.openstack.org/140760 | 16:55 |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Rename yaml_path to installs_path https://review.openstack.org/140761 | 16:56 |
| mordred | SpamapS: I think I may have it now ... ^^ | 16:56 |
| mordred | SpamapS: alternately, you could have the package-install program read all the yaml and json files in the extra-data.d script, and rather than emitting a set of element files, emit one single install-packages.json that is the json.dump of the internal merged datastructure produced on the build host | 16:58 |
| mordred | I mean, I don't want to armchair quarterback here or anything | 16:58 |
| SpamapS | mordred: you are bringing new concerns, not rewriting old ones. I like it. | 17:01 |
| *** julim has quit IRC | 17:03 | |
| *** jtomasek has quit IRC | 17:03 | |
| *** rwsu has joined #tripleo | 17:05 | |
| *** david-lyle_afk is now known as david-lyle | 17:06 | |
| *** julim has joined #tripleo | 17:06 | |
| *** PaulCzar has left #tripleo | 17:07 | |
| SpamapS | StevenK: ok thanks, I'll take another look and see if we can get some traction on that. | 17:09 |
| *** Marga_ has quit IRC | 17:12 | |
| *** k4n0 has quit IRC | 17:12 | |
| *** vinsh_ has joined #tripleo | 17:14 | |
| mordred | SpamapS: what's the defined behavior supposed to be if one element specifies a package should be installed in a phase, and another indicates that it should be uninstalled? | 17:15 |
| *** vinsh_ has quit IRC | 17:16 | |
| tchaypo | mordred: sadness and tears. | 17:16 |
| *** vinsh has quit IRC | 17:17 | |
| *** vinsh_ has joined #tripleo | 17:17 | |
| *** vinsh_ has quit IRC | 17:17 | |
| *** vinsh has joined #tripleo | 17:18 | |
| SpamapS | mordred: install is 00 and uninstall is 99 ?? (guessing.. hoping) | 17:19 |
| mordred | SpamapS: gotcha | 17:19 |
| SpamapS | basically that | 17:19 |
| SpamapS | in pre-install, install is 02 | 17:19 |
| mordred | so a single merged json may not work as currently done, because of that sequencing - let me think a little more | 17:20 |
| * SpamapS wonders how long we can go on like this without insserv-ish behavior | 17:20 | |
| SpamapS | mordred: no it would work fine as long as the single merged json has install and uninstall sections. | 17:20 |
| mordred | righ | 17:20 |
| mordred | right | 17:20 |
| SpamapS | Or rather, two merged jsons. | 17:21 |
| SpamapS | one for installs, one for uninstalls. :) | 17:21 |
| * SpamapS notes 6 & 1/2 dozen reference | 17:21 | |
| *** rhallisey has joined #tripleo | 17:23 | |
| *** vinsh_ has joined #tripleo | 17:25 | |
| *** dtantsur|brb is now known as dtantsur | 17:27 | |
| *** vinsh has quit IRC | 17:29 | |
| *** dshulyak has joined #tripleo | 17:29 | |
| *** daneyon has quit IRC | 17:30 | |
| *** daneyon has joined #tripleo | 17:31 | |
| *** avozza is now known as zz_avozza | 17:36 | |
| tchaypo | SpamapS: re the "[openstack-dev] [TripleO] Do we want to remove Nova-bm support?” discussion - you’ve suggested an action, do you know if we have an open bug to track that? | 17:40 |
| *** victor_lowther has joined #tripleo | 17:41 | |
| *** dshulyak has quit IRC | 17:43 | |
| *** Marga_ has joined #tripleo | 17:43 | |
| SpamapS | tchaypo: I don't think we do have one. | 17:44 |
| SpamapS | tchaypo: that was a horrible sentence. | 17:45 |
| SpamapS | tchaypo: I don't think we have one. ;) | 17:45 |
| *** pensu has joined #tripleo | 17:46 | |
| tchaypo | Very good. Shall I make one, or shall you? | 17:48 |
| *** Marga_ has quit IRC | 17:49 | |
| *** Marga_ has joined #tripleo | 17:52 | |
| *** jtomasek has joined #tripleo | 17:53 | |
| mordred | SpamapS: I made a single merged json | 17:56 |
| SpamapS | mordred: http://cdn.meme.am/instances/500x/57008546.jpg | 17:58 |
| *** derekh has quit IRC | 18:02 | |
| *** marun has quit IRC | 18:07 | |
| openstackgerrit | James Polley proposed openstack/tripleo-heat-templates: Make keepalived virtual router IDs configurable https://review.openstack.org/137605 | 18:08 |
| tchaypo | dprince: if you’re around, my update on https://review.openstack.org/#/c/137605/ should be enough for you to lift your -2, I think. | 18:10 |
| dprince | tchaypo: done. Thanks. FWIW I -2'd a bunch of them to make sure we didn't land any more that were lacking parity across the implementations. We had 8 or so slip ups... | 18:12 |
| *** dshulyak has joined #tripleo | 18:13 | |
| *** dlfryar has joined #tripleo | 18:20 | |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Rework package-installs to collapse on build host https://review.openstack.org/140795 | 18:22 |
| mordred | SpamapS: what do you think of that ^^ | 18:22 |
| *** ifarkas has quit IRC | 18:28 | |
| *** noslzzp has quit IRC | 18:29 | |
| *** Marga_ has quit IRC | 18:30 | |
| *** Marga_ has joined #tripleo | 18:31 | |
| *** Marga_ has quit IRC | 18:32 | |
| *** Marga_ has joined #tripleo | 18:32 | |
| SpamapS | mordred: me likey | 18:33 |
| mordred | SpamapS: cool. the squash script is totally testable without running an iage build | 18:33 |
| mordred | since you pass it an elements path and a list of elements | 18:33 |
| mordred | the other is a little trickier because it expects to be able to call pkg-map | 18:33 |
| *** ukalifon has joined #tripleo | 18:34 | |
| mordred | so I added a --noop option to it that bypasses the pkg-map call just so that seeing the output is possible | 18:34 |
| *** marun has joined #tripleo | 18:35 | |
| *** pradk has joined #tripleo | 18:36 | |
| mordred | SpamapS: I'd like to suggest a generalized feature for dropping unmodified files into images | 18:37 |
| mordred | SpamapS: because the amount of cat << EOF that I have to do for things that are not modified in config mgmt is kinda crazy | 18:37 |
| *** Marga_ has quit IRC | 18:37 | |
| SpamapS | mordred: install | 18:38 |
| SpamapS | mordred: I mean, it's only 30+ years old | 18:39 |
| mordred | SpamapS: I mean generalized in the sense of "I'd like to put the file in a directory in the element" | 18:40 |
| *** rbrady has quit IRC | 18:40 | |
| *** pelix has quit IRC | 18:40 | |
| *** rbrady has joined #tripleo | 18:40 | |
| mordred | and honestly, I do not write elements enough to remember when I'd do install $TMP_HOOKS_PATH/files or $(dirname $0)../files or whatnot | 18:41 |
| mordred | just a thought | 18:41 |
| SpamapS | mordred: there's a question of owner uids, and such, that make it complicated without install, IMO. | 18:41 |
| mordred | nod | 18:41 |
| mordred | I can see that | 18:41 |
| mordred | I may just need to learn the magic paths better | 18:42 |
| mordred | is there a catalog of what they all are? | 18:42 |
| mordred | beacuse I feel like I'm touching implementation details any time I touch one | 18:42 |
| SpamapS | $(dirname $0)/../files/foo is not the prettiest thing, but it seems obvious from a shell-coder perspective. Would we wrap install with dib-install-file and figure out the path to $(dirname $0)/../files ? | 18:42 |
| mordred | well, it's obvious to read- EXCEPT - I don't know what dir I'm executing in | 18:42 |
| mordred | because of the TMP_HOOKS_PATH magic - and I don't always know when a bunch of things have been copied somewhere else | 18:43 |
| SpamapS | dirname $0 is _always_ the path to the script unless it was sourced which we never expect. | 18:43 |
| mordred | yes... but things get copied around, and I'm never confident that the intact element is surrounding me | 18:43 |
| mordred | it's possible I just need to learn that it is, in fact, always surrounding me | 18:44 |
| SpamapS | $TMP_HOOKS_PATH/files is never better than $(dirname $0) | 18:44 |
| *** ukalifon has quit IRC | 18:45 | |
| SpamapS | mordred: yeah, it's always there. The only weird thing is that other elements might have put other files in ../files | 18:45 |
| SpamapS | mordred: which is something I've never liked. :-P | 18:45 |
| *** pblaho has quit IRC | 18:45 | |
| *** Hefeweizen has joined #tripleo | 18:46 | |
| *** humble__ has quit IRC | 18:46 | |
| *** humble__ has joined #tripleo | 18:49 | |
| *** pensu has quit IRC | 18:53 | |
| *** Marga_ has joined #tripleo | 18:56 | |
| *** Marga_ has quit IRC | 18:56 | |
| *** Marga_ has joined #tripleo | 19:01 | |
| *** jiangfei has quit IRC | 19:05 | |
| *** jistr has joined #tripleo | 19:05 | |
| *** jiangfei has joined #tripleo | 19:06 | |
| mordred | SpamapS: ok - question | 19:07 |
| mordred | SpamapS: this package-installs thing iterates over the elements - shoudl it be iterating over the copied elements in TMP_HOOKS_DIR and not elements_path? | 19:08 |
| mordred | because otherwise it seems I'd have to replicate the first-found logic | 19:09 |
| *** dlfryar has quit IRC | 19:11 | |
| mordred | also, in extra-data.d, where do I write something so that it winds up in /tmp/in_target.d during the pre-install hase | 19:14 |
| mordred | phase | 19:14 |
| mordred | TMP_HOOKS_PATH shoudl be that, yeah? | 19:15 |
| *** jang1 has joined #tripleo | 19:18 | |
| *** jp_at_hp has quit IRC | 19:23 | |
| *** jistr has quit IRC | 19:30 | |
| SpamapS | mordred: yes anything that is running in extra-data.d should be iterating over TMP_HOOKS_DIR not ELEMENTS_PATH. | 19:31 |
| *** dlfryar has joined #tripleo | 19:31 | |
| SpamapS | mordred: $TMP_MOUNT_PATH is the root of the new root when you're in extra-data.d | 19:33 |
| SpamapS | root of the new image I mean :-P | 19:33 |
| mordred | SpamapS: but in extra-data.d, TMP_HOOKS_DIR is where I shoudl write things if I want them to go into /tmp/in_target.d | 19:37 |
| *** jiangfei has quit IRC | 19:40 | |
| *** dtantsur is now known as dtantsur|afk | 19:40 | |
| *** marun has quit IRC | 19:40 | |
| *** jiangfei has joined #tripleo | 19:41 | |
| *** marun has joined #tripleo | 19:42 | |
| openstackgerrit | Merged openstack/diskimage-builder: Add some speedups to dpkg https://review.openstack.org/136660 | 19:45 |
| mordred | woot! | 19:47 |
| mordred | people love me | 19:47 |
| *** jcoufal_ has quit IRC | 19:49 | |
| SpamapS | mordred: oh so you're morphing the elements after they've been copied? yeah I think you have it right. | 19:50 |
| mordred | well, no - I just need to write package-installs.json somewhere | 19:51 |
| mordred | but I'm just going to shove it in tmp for now | 19:51 |
| *** blinky_ghost has quit IRC | 19:53 | |
| *** dshulyak has quit IRC | 19:57 | |
| *** pblaho has joined #tripleo | 19:57 | |
| *** dlfryar has quit IRC | 20:02 | |
| *** dshulyak has joined #tripleo | 20:03 | |
| mordred | SpamapS: nope. iterating over TMP_HOOKS_DIR not so much with the working :) | 20:03 |
| mordred | SpamapS: because the hooks dirs are all squashed, so there are no per-element json files anymore | 20:03 |
| SpamapS | mordred: ah yeah thats why | 20:04 |
| SpamapS | mordred: such is life. :-/ | 20:04 |
| *** spzala has quit IRC | 20:08 | |
| *** marun has quit IRC | 20:12 | |
| *** marun has joined #tripleo | 20:12 | |
| *** dlfryar has joined #tripleo | 20:12 | |
| mordred | SpamapS: getting close to all of ths working | 20:13 |
| mordred | SpamapS: btw - building centos images with rinse gets old :) | 20:14 |
| *** dshulyak has quit IRC | 20:14 | |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Rework package-installs to collapse on build host https://review.openstack.org/140795 | 20:16 |
| *** jtomasek has quit IRC | 20:21 | |
| SpamapS | rinse? | 20:22 |
| *** jcoufal has joined #tripleo | 20:23 | |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Rework package-installs to collapse on build host https://review.openstack.org/140795 | 20:24 |
| mordred | SpamapS: rinse is to centos what debootstrap is to debian | 20:24 |
| mordred | SpamapS: also, that last patch is currently working in my image builds, so is worth properly looking at | 20:25 |
| * mordred goes to fix previous comments ... | 20:25 | |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Rework package-installs to collapse on build host https://review.openstack.org/140795 | 20:27 |
| tchaypo | dprince: I think -2ing is a good idea. I don’t plan to go fix the rest of them though ;) | 20:29 |
| SpamapS | mordred: sweet | 20:30 |
| tchaypo | dprince: although I note that https://review.openstack.org/#/c/136558/ is now +2 but W-1 | 20:30 |
| tchaypo | dprince: …. wait, that’s a totally different review. Please ignore me. | 20:31 |
| mordred | SpamapS: I found one ugly on a print statement - but that built all the way through | 20:31 |
| dprince | tchaypo: okay. :) | 20:32 |
| *** spzala has joined #tripleo | 20:34 | |
| *** jprovazn has quit IRC | 20:34 | |
| *** dlfryar has quit IRC | 20:35 | |
| *** dlfryar has joined #tripleo | 20:41 | |
| *** rushiagr is now known as rushiagr_away | 20:43 | |
| openstackgerrit | Srinivas Sakhamuri proposed openstack/tripleo-heat-templates: HA proxy to limit the ceilometer-api maxconns https://review.openstack.org/112370 | 20:52 |
| *** panda has quit IRC | 20:57 | |
| *** panda has joined #tripleo | 20:58 | |
| greghaynes | mordred: package-installs is json or yaml :) | 20:58 |
| greghaynes | mordred: oh, I see, you need a release | 20:59 |
| greghaynes | funny enough, that is exactly why I wanted to do releases | 21:00 |
| greghaynes | mordred: im totally +1 on doing th collapse on the build host | 21:02 |
| greghaynes | something else id like to change about package-installs is to make the default to install in pre-install.d, not install.d. I think this should 'just work' and it would allow us to cache a base image + some installed pacakges | 21:05 |
| greghaynes | but thats an api change and totally unrelated | 21:06 |
| *** jp_at_hp has joined #tripleo | 21:10 | |
| tchaypo | dprince: whee, test failures on https://review.openstack.org/#/c/137605/ | 21:10 |
| * tchaypo done broke it | 21:10 | |
| tchaypo | perhaps | 21:10 |
| greghaynes | mordred: If you ping me once https://review.openstack.org/#/c/140795/ lands ill cut a release | 21:11 |
| *** weshay has quit IRC | 21:13 | |
| *** jp_at_hp has quit IRC | 21:16 | |
| mordred | greghaynes: cool. I've got one more minor fix to push up for that ... | 21:21 |
| greghaynes | oh? guess I missed it | 21:22 |
| openstackgerrit | Monty Taylor proposed openstack/diskimage-builder: Rework package-installs to collapse on build host https://review.openstack.org/140795 | 21:22 |
| greghaynes | I mean, tests pass, that means ship it right? | 21:22 |
| mordred | greghaynes: und, voila! (the print statements got ugly - so I fixed it) | 21:22 |
| *** julim has quit IRC | 21:29 | |
| * mordred nudges SpamapS to re-review https://review.openstack.org/#/c/140795/ | 21:33 | |
| *** rebrego has joined #tripleo | 21:41 | |
| *** regebro has quit IRC | 21:41 | |
| *** rebrego is now known as regebro | 21:41 | |
| *** jcoufal has quit IRC | 21:43 | |
| *** weshay has joined #tripleo | 21:47 | |
| sdake | daneyon around? | 21:51 |
| *** enterprisedc has quit IRC | 21:52 | |
| daneyon | sdake: just got off a con call and running to a dr appt. | 21:56 |
| daneyon | sdake: i'll ping u in 60-90 when i return | 21:57 |
| sdake | when you get a chance can you rebase https://review.openstack.org/#/c/133965/ | 21:57 |
| sdake | its last outstanding item for the release | 21:57 |
| sdake | no rush today or tomorrow is fine | 21:57 |
| *** pblaho has quit IRC | 21:58 | |
| *** untriaged-bot has joined #tripleo | 22:00 | |
| untriaged-bot | Untriaged bugs so far: | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396904 | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/diskimage-builder/+bug/1401256 | 22:00 |
| uvirtbot | Launchpad bug 1396904 in tripleo "keepalived logs are not rotated properly" [Undecided,New] | 22:00 |
| uvirtbot | Launchpad bug 1401256 in diskimage-builder "fedora element lacks repos" [Undecided,New] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/diskimage-builder/+bug/1401255 | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1387061 | 22:00 |
| uvirtbot | Launchpad bug 1401255 in diskimage-builder "fedora element lacks repos" [Undecided,New] | 22:00 |
| uvirtbot | Launchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1398591 | 22:00 |
| uvirtbot | Launchpad bug 1398591 in tripleo "metadata-proxy process is not killed when running in a virtual environment" [Undecided,Fix committed] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/os-collect-config/+bug/1398254 | 22:00 |
| uvirtbot | Launchpad bug 1398254 in os-collect-config "os-collect-config can't get correct keystone v3 auth_url using keystoneclient discover" [Undecided,In progress] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tuskar/+bug/1387487 | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/diskimage-builder/+bug/1400405 | 22:00 |
| uvirtbot | Launchpad bug 1387487 in tuskar "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui needs authentication from Keystone" [Undecided,New] | 22:00 |
| uvirtbot | Launchpad bug 1400405 in diskimage-builder "ironic.agent element fails to write kernel and ramdisk to specified location" [Undecided,New] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1396730 | 22:00 |
| uvirtbot | Launchpad bug 1396730 in tripleo "br-ex doesn't activate when overcloud controller is rebooted" [Undecided,New] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1401059 | 22:00 |
| uvirtbot | Launchpad bug 1401059 in tripleo "Make heat max_stacks_per_tenant parameter as configurable" [Undecided,In progress] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399793 | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1399512 | 22:00 |
| uvirtbot | Launchpad bug 1399793 in tripleo "Service shared secrets in heat templates should be hidden" [Undecided,New] | 22:00 |
| untriaged-bot | https://bugs.launchpad.net/tripleo/+bug/1400809 | 22:00 |
| uvirtbot | Launchpad bug 1399512 in tripleo "Cinder failed to complete volume attachment due to missing lock_path" [Undecided,Fix committed] | 22:00 |
| *** untriaged-bot has quit IRC | 22:00 | |
| uvirtbot | Launchpad bug 1400809 in tripleo "openSUSE deploy-ironic ramdisk fails to deploy" [Undecided,New] | 22:00 |
| *** marun has quit IRC | 22:01 | |
| *** dprince has quit IRC | 22:04 | |
| tchaypo | okay. macbook is nearly out of battery and my eyes are refusing to stay open. I think it’s time to knock off for the day. See you in 8 hours! | 22:07 |
| *** pweiss has quit IRC | 22:09 | |
| *** zigo has quit IRC | 22:11 | |
| *** pweiss has joined #tripleo | 22:11 | |
| *** regebro has quit IRC | 22:11 | |
| *** zigo has joined #tripleo | 22:12 | |
| tchaypo | I’m thinking more about bug #1229849 | 22:13 |
| uvirtbot | Launchpad bug 1229849 in heat "In future native Heat templates, we should leave the image users alone on servers" [Wishlist,In progress] https://launchpad.net/bugs/1229849 | 22:13 |
| greghaynes | tchaypo: so your email is that youre +1 on my proposal? | 22:13 |
| greghaynes | tchaypo: because I think youre right - meeting should be early wed at latest for anyone | 22:13 |
| tchaypo | (which i note is critical for tripleo, somehow only wishlist for heat even though it’s already been partially implemented) | 22:14 |
| tchaypo | We had a suggested solution - include the required username as a glance property when adding the image, then look it up per-instance by mapping instance -> image id -> property; but as I said on the ticket, that breaks if the image is deleted from glance but instances are still running it | 22:15 |
| tchaypo | and also I’ve realised it still means we’re writing a map of distro->username somewhere, as well as code to do that per-instance lookup. I feel like there must be a better solution I haven’t thought of. | 22:16 |
| tchaypo | SpamapS: did you have anything in mind? | 22:16 |
| tchaypo | greghaynes: yes :) sorry,s should have been more explicit | 22:16 |
| greghaynes | Is the issue that we need *a* user and its not consistent? | 22:17 |
| greghaynes | why not just... make a consistent user? | 22:17 |
| *** andreaf has quit IRC | 22:17 | |
| *** andreaf has joined #tripleo | 22:17 | |
| tchaypo | see spamaps’ most recent comment | 22:18 |
| greghaynes | hrm | 22:18 |
| tchaypo | in short, the current proposal is to remove heat’s ability to make a consistent user; but if we don’t have a good way to discover the correct user for each instance, having heat keep the ability to create a consistent user, but default to not doing so, is probably the best choice | 22:18 |
| greghaynes | So, I dont disagree if someone wants to do that work | 22:18 |
| tchaypo | heat is currently removing the ability to make a consistent user. | 22:19 |
| greghaynes | but maybe as a fix until then and so we can not get bit by deprecation we can do the simple thing for now | 22:19 |
| tchaypo | doing the simple thing involves them not removing the ability.. it seems shardy and shadower think that’s a viable path, so perhaps we should ask for it | 22:20 |
| tchaypo | if we wanted to do something that’s not simple | 22:20 |
| *** dlfryar has quit IRC | 22:20 | |
| greghaynes | Where all do we actually make use of this user? AFAICT the two big places well get bit are os-cloud-config and users knowing how to ssh into boxes | 22:20 |
| tchaypo | maybe we can grab the code that puts the “i done fixed the ssh key!” message in the ssh banner, and add in “and btw, you probably want username blah” in as well ;) | 22:21 |
| SpamapS | tchaypo: note that the current user creation that Heat does is borken and weird and should be user-controlled. It is a product of CFN's over-reach. | 22:21 |
| tchaypo | init-keystone uses the heat-admin username | 22:22 |
| tchaypo | at least - devtest_*cloud scripts pass it as a parameter to init-keystone | 22:22 |
| tchaypo | maybe it’s not used | 22:22 |
| greghaynes | that is going away in the near future | 22:22 |
| SpamapS | The simplest thing to do is to simply know that the image is consistent on all your images, and set it accordingly. Whether that is static by OS, or something we assert as always 'openstack' or 'tripleo' or 'howard' ... is a secondary problem. | 22:23 |
| tchaypo | as greghaynes points out - if we don’t actually rely on this anywhere, perhaps we don’t care | 22:23 |
| SpamapS | tchaypo: it is used to SSH in and run keystone admin things. | 22:23 |
| SpamapS | the only time we rely on SSH for install, IIRC. | 22:23 |
| greghaynes | SpamapS: I think that was only for ssl cert gen, which might actually be gone now | 22:23 |
| *** yjiang5_away has joined #tripleo | 22:24 | |
| tchaypo | in that case maybe all we need to do is update docs to tell people to use there distorts default username thingy | 22:24 |
| SpamapS | Oh right, just for pki | 22:24 |
| SpamapS | greghaynes: how is that gone? | 22:24 |
| * tchaypo leaves you to squabble | 22:25 | |
| tchaypo | night :) | 22:25 |
| greghaynes | ugh, nvm, its still there. It was first going to be removed by running our cert gen on the build box and injecting certs into heat env, I got distracted by moving us to barbican (which will also remove that) | 22:25 |
| *** dlfryar has joined #tripleo | 22:26 | |
| greghaynes | actually: https://review.openstack.org/#/c/132808/ | 22:30 |
| greghaynes | this has built up a lot of cruft over time and is not really pointlessly complicated | 22:30 |
| greghaynes | SpamapS: yea, so I dont think we ssh at all now for keystone | 22:31 |
| *** yjiang5_away is now known as yjiang5 | 22:32 | |
| SpamapS | greghaynes: what runs generate-keystone-pki tho? | 22:33 |
| greghaynes | SpamapS: We dont. We generate the certs on the host and use oac to plop them where generate-keystone-pki used to | 22:34 |
| greghaynes | er, on the build host | 22:34 |
| SpamapS | so they're injected entirely via Heat? | 22:34 |
| greghaynes | For a long time generate-keystone-pki was just printing out "certs already exist, doing nothing" | 22:34 |
| greghaynes | yep | 22:34 |
| * SpamapS is not comfortable at all with that :-/ | 22:34 | |
| greghaynes | becasuse they are known to the world? | 22:35 |
| SpamapS | Well no, they're known to root on the box, so that's fine. | 22:35 |
| greghaynes | I mean becase heat will give that data to anyone who can spoof an ip | 22:35 |
| SpamapS | But I don't like that the private key is in a database. | 22:35 |
| greghaynes | yep | 22:35 |
| SpamapS | Right the credentials are far too readily available. | 22:35 |
| greghaynes | so, ive been thinking about this. I think we actually want a barbican collector | 22:36 |
| SpamapS | yes, and Heat should also make a OTP auth exchange for those so that those creds from ec2 metadata only work one time and then never again. | 22:36 |
| greghaynes | +1, implementation left as an exercise for the reader | 22:37 |
| SpamapS | In the mean time, at least the SSH method was immune to that particular compromise. :_P | 22:38 |
| greghaynes | SpamapS: I thought heat was also doing a way to store secrets in barbican? | 22:38 |
| SpamapS | greghaynes: nobody is actively working on that. | 22:38 |
| greghaynes | :( | 22:38 |
| SpamapS | it's one of those "oh yeah yeah that would be cool" | 22:38 |
| greghaynes | I propose a better fix is we just scp the certs over | 22:39 |
| SpamapS | but we went and distracted them with making it robust and scalable.. silly us. | 22:39 |
| yjiang5 | hi, all, I'm trying to find some tools to update the nova config file like the iniset() in devstack, which only update part of the config file. I checked the os-apply-config and os-refresh-config, and seems they are not for this purpose, am I right? | 22:39 |
| greghaynes | generate-keystone-pki is not really production worthy | 22:39 |
| greghaynes | and prevents someone from providing their own certs | 22:39 |
| SpamapS | greghaynes: well if you believe morganfainberg we should just nix keystone pki anyway and go back to UUID. :) | 22:40 |
| *** marun has joined #tripleo | 22:40 | |
| SpamapS | and frankly, I'm on board with that plan. | 22:40 |
| SpamapS | It makes the token table, what, 100x smaller? | 22:40 |
| greghaynes | yea, ive also been sold on that plan | 22:40 |
| SpamapS | at the cost of 2x requests.. I say it's worth it. | 22:40 |
| SpamapS | But that's a discussion to have with openstack-dev about defaults. :) | 22:41 |
| * greghaynes files a bug so we dont forget about the security issue | 22:42 | |
| yjiang5 | it will be something like openstack-config | 22:42 |
| SpamapS | yjiang5: those config files are generated from templates + heat metadata. | 22:43 |
| SpamapS | yjiang5: what you probably want is passthrough | 22:43 |
| SpamapS | yjiang5: see the 'ExtraConfig' parameter in tripleo-heat-templates/*.yaml | 22:44 |
| SpamapS | yjiang5: note that if it is something that everybody might want to set, you might want to submit a patch to add it as a full parameter and reference in the config file. | 22:45 |
| yjiang5 | SpamapS: thanks for reply, I will have a look on the passthrough (no idea of it yet). | 22:46 |
| greghaynes | https://bugs.launchpad.net/tripleo/+bug/1401300 | 22:47 |
| uvirtbot | Launchpad bug 1401300 in tripleo "Keystone Private Key not securely sent to host" [Critical,Confirmed] | 22:47 |
| *** jang1 has quit IRC | 22:49 | |
| *** rhallisey has quit IRC | 22:51 | |
| SpamapS | greghaynes: ty | 22:58 |
| gfidente | tchaypo, around? | 22:59 |
| gfidente | regarding your comment here: https://review.openstack.org/#/c/136303/4/Makefile,cm | 22:59 |
| gfidente | you can actually have both at the same time indeed | 22:59 |
| gfidente | so that needs to be reworded :) | 22:59 |
| gfidente | ideas? | 22:59 |
| SpamapS | greghaynes: note that we could also just null-route the ec2 metadata service after fetching from it to lessen the threat of local compromise. | 22:59 |
| SpamapS | greghaynes: but not as good as just using an actual secure mechanism. :-P | 22:59 |
| *** zz_avozza is now known as avozza | 23:08 | |
| *** dlfryar has quit IRC | 23:08 | |
| greghaynes | tchaypo: haha, nice response | 23:13 |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-heat-templates: Bring back working support for Cinder/NFS https://review.openstack.org/136303 | 23:18 |
| openstackgerrit | Giulio Fidente proposed openstack/tripleo-heat-templates: Bring back (abandoned) support for Cinder/NFS https://review.openstack.org/136303 | 23:22 |
| *** marun has quit IRC | 23:23 | |
| *** ChuckC has quit IRC | 23:28 | |
| *** pradk has quit IRC | 23:29 | |
| *** vinsh_ has quit IRC | 23:33 | |
| *** gfidente has quit IRC | 23:36 | |
| openstackgerrit | Adam Gandelman proposed openstack/diskimage-builder: Fallback to a boot_server kernel param if ip= not passed https://review.openstack.org/140870 | 23:41 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
