Monday, 2015-06-01

*** yuanying has quit IRC00:25
*** yuanying has joined #tripleo00:30
*** yuanying has quit IRC00:38
*** yuanying has joined #tripleo00:38
*** rebrego has joined #tripleo00:48
*** regebro has quit IRC00:48
*** rebrego is now known as regebro00:48
*** AzherKhan has quit IRC00:58
*** noslzzp_ has quit IRC01:10
*** sdake_ has quit IRC01:11
*** cody-somerville has joined #tripleo01:59
openstackgerritRamakrishnan G proposed openstack/diskimage-builder: Address follow-up comments  https://review.openstack.org/18709102:15
*** untriaged-bot has joined #tripleo03:00
untriaged-botUntriaged bugs so far:03:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/145946503:00
openstackLaunchpad bug 1459465 in tripleo "devtest fails to build ramdisk on Fedora 21 due to Yum multilib error" [Undecided,New]03:00
*** untriaged-bot has quit IRC03:00
*** sdake has joined #tripleo03:01
*** sdake_ has joined #tripleo03:03
*** sdake has quit IRC03:07
*** jpeeler has joined #tripleo03:15
*** alop has joined #tripleo03:18
*** yuanying has quit IRC03:22
*** yuanying has joined #tripleo03:25
*** yuanying has quit IRC03:42
*** yuanying has joined #tripleo03:50
*** yuanying has quit IRC03:56
*** yuanying has joined #tripleo04:02
*** yuanying_ has joined #tripleo04:04
*** yuanying has quit IRC04:06
*** sdake_ has quit IRC04:11
*** sdake has joined #tripleo04:14
*** tzumainn has joined #tripleo05:10
*** lazy_prince has joined #tripleo05:11
*** jrist has quit IRC05:12
*** tzumainn has quit IRC05:16
*** sdake_ has joined #tripleo05:30
*** sdake_ has quit IRC05:33
*** sdake_ has joined #tripleo05:33
*** sdake has quit IRC05:34
*** jtomasek has joined #tripleo05:37
*** sdake_ is now known as sdake05:43
*** yamahata has joined #tripleo05:56
*** ishant has joined #tripleo06:00
*** hewbrocca has joined #tripleo06:07
*** yuanying_ has quit IRC06:09
*** yuanying has joined #tripleo06:09
*** sdake_ has joined #tripleo06:10
*** dasm|afk is now known as dasm06:12
*** sdake has quit IRC06:14
dasmgood morning TripleO!06:14
hewbroccaHi folks06:21
*** sdake has joined #tripleo06:21
marioso/06:24
*** jprovazn has joined #tripleo06:24
*** ukalifon1 has joined #tripleo06:25
*** sdake_ has quit IRC06:25
*** masco has joined #tripleo06:26
*** rhefner has quit IRC06:43
*** cody-somerville has quit IRC06:45
*** daneyon has joined #tripleo06:50
*** al has quit IRC06:51
*** al has joined #tripleo06:52
*** yuanying_ has joined #tripleo06:55
*** yuanying has quit IRC06:57
*** ifarkas has joined #tripleo06:59
*** daneyon has quit IRC07:00
*** daneyon has joined #tripleo07:01
*** daneyon has quit IRC07:06
*** sdake_ has joined #tripleo07:07
spredzy|afkhello07:07
*** spredzy|afk is now known as spredzy07:07
hewbroccaMorning07:10
*** sdake has quit IRC07:10
*** radek_ has joined #tripleo07:11
*** sdake_ is now known as sdake07:16
*** panda has quit IRC07:21
*** panda has joined #tripleo07:21
*** AzherKhan has joined #tripleo07:22
*** gfidente has joined #tripleo07:26
*** gfidente has quit IRC07:26
*** gfidente has joined #tripleo07:26
gfidentemorning07:29
spredzygfidente, o/07:31
*** pblaho has joined #tripleo07:33
*** hewbrocca has quit IRC07:35
*** Goneri has joined #tripleo07:38
*** jistr has joined #tripleo07:39
*** paramite has joined #tripleo07:40
*** akrivoka has quit IRC07:41
shardymorning all07:42
openstackgerritMerged openstack/tripleo-heat-templates: Add Ceilometer as a Pacemaker resource  https://review.openstack.org/18591607:43
*** akrivoka has joined #tripleo07:44
jistrmorning07:44
*** chlong has quit IRC07:45
openstackgerritMerged openstack/tripleo-heat-templates: Add Heat as a Pacemaker resource  https://review.openstack.org/18597507:45
spredzyjistr, shardy hey guys07:45
spredzyI had an issue on current master without that patch https://review.openstack.org/#/c/187077/07:46
gfidentespredzy, ack we can't remove it though due to https://review.openstack.org/#/c/187077/107:46
gfidentesorry, I meant https://bugs.launchpad.net/tripleo/+bug/146005807:46
openstackLaunchpad bug 1460058 in tripleo "tripleo-heat-templates hiera neutron::agents::ml2::ovs::local_ip defined and passed but not consumed" [Medium,Confirmed]07:46
spredzywith dprince reviews controller_host has been removed so the lookup fais07:46
spredzygfidente, thanks for the link07:47
spredzygfidente, based on the stack the deployment use to fail 'Error: Local ip for ovs agent must be set when tunneling is enabled'07:49
spredzybut if you look at the review jenkins feedbacks they are all green07:49
gfidentespredzy, yes we need to fix that in the puppet module07:49
jistrbut interesting thing is that the CI passed without the IP being assigned there from controller_host...07:52
gfidentespredzy, jistr yep07:52
jistrmaybe marios' failed deployment was caused by something else (missing some dprince's patch maybe)07:52
gfidentejistr, I think spredzy seeing same error no?07:52
spredzygfidente, nop07:52
spredzymy error was a hiera lookup issue07:52
spredzycontroller_host couldn't be found07:53
gfidentespredzy, so I might miss something, where does this come from: 'Error: Local ip for ovs agent must be set when tunneling is enabled' ?07:53
spredzysince it does not exist anymore07:53
spredzygfidente, from puppet-neutron07:53
spredzybut as jistr just said it probably happens when some dprince patch about network isolation were missing07:54
spredzys/happens/happened07:54
gfidenteah so you don't get it anymore?07:54
*** akrivoka has quit IRC07:54
spredzygfidente, nop I didn' have it07:54
jistrneither CI gets that error07:54
jistrbut i think CI is now red due to the missing hiera key07:55
gfidenteso the bug is invalid as well07:55
jistri think we should merge spredzy's patch sooner rather than later07:55
jistryeah probably07:55
gfidentemerge then07:55
jistrack07:56
spredzythx guys07:56
openstackgerritMerged openstack/tripleo-heat-templates: Neutron: Remove hiera lookup to controller_host  https://review.openstack.org/18707707:57
openstackgerritYanis Guenane proposed openstack/tripleo-heat-templates: Add Redis as a Pacemaker resource  https://review.openstack.org/18261707:58
*** akrivoka has joined #tripleo08:00
*** yamahata has quit IRC08:03
*** yuanying_ has quit IRC08:06
*** yuanying has joined #tripleo08:09
*** mcornea has joined #tripleo08:09
openstackgerritYanis Guenane proposed openstack/tripleo-heat-templates: Add Redis as a Pacemaker resource  https://review.openstack.org/18261708:11
openstackgerritYanis Guenane proposed openstack/tripleo-heat-templates: Enable use of coordination_url in ceilometer  https://review.openstack.org/17199608:11
*** aufi has joined #tripleo08:11
openstackgerritYanis Guenane proposed openstack/tripleo-heat-templates: Enable use of coordination_url in ceilometer  https://review.openstack.org/17199608:13
*** hewbrocca has joined #tripleo08:15
*** sdake has quit IRC08:16
*** sdake has joined #tripleo08:18
*** hewbrocca has quit IRC08:24
jprovaznmorning, when you have a minute, could you please review https://review.openstack.org/#/c/179974/ ?08:28
*** athomas has joined #tripleo08:35
*** paramite is now known as paramite|afk08:35
*** yuanying has quit IRC08:39
*** mcornea_ has joined #tripleo08:40
*** hewbrocca has joined #tripleo08:40
*** paramite|afk is now known as paramite08:41
*** mcornea has quit IRC08:43
*** regebro_ has joined #tripleo08:45
hewbroccagfidente: So -- what's left, between Pacemaker stuff and network isolation?08:47
hewbrocca(oh, and neutron vlan mode?)08:47
hewbroccajistr: I'll be in soon, I'm trying to wrangle the internets here in the apartment08:48
gfidentehewbrocca, actually the two (isolation and Pacemaker) seem to go nicely together because services config is not tied to Pacemaker08:50
jistranybody got the network isolation going in an actual deployment?08:51
hewbroccathat is excellent08:52
hewbroccaonce in a while we get lucky08:52
gfidentejistr, I changed one default (the glance/api thing) to see how that would have worked and because they all point to noop I got just an address on controlplane anyway08:53
*** mcornea has joined #tripleo08:54
*** regebro_ has quit IRC08:55
*** bvandenh has joined #tripleo08:55
*** mcornea_ has quit IRC08:57
gfidentehewbrocca, I will try to get to bottom of ha/isolation as soon as the vlan thing is sorted09:00
hewbroccagfidente: very very good09:00
hewbroccathanks09:00
*** untriaged-bot has joined #tripleo09:00
untriaged-botUntriaged bugs so far:09:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/145946509:00
openstackLaunchpad bug 1459465 in tripleo "devtest fails to build ramdisk on Fedora 21 due to Yum multilib error" [Undecided,New]09:00
*** untriaged-bot has quit IRC09:00
*** dtantsur|afk is now known as dtantsur09:02
*** sdake_ has joined #tripleo09:16
*** sdake_ has quit IRC09:17
*** sdake_ has joined #tripleo09:18
*** sdake has quit IRC09:20
*** sdake_ is now known as sdake09:20
*** hewbrocca has quit IRC09:27
*** paramite is now known as paramite|afk09:32
openstackgerritAna Krivokapic proposed openstack/python-tuskarclient: Handle creation of plan with existing name  https://review.openstack.org/18714909:36
*** pdb has quit IRC09:41
*** pdb has joined #tripleo09:41
openstackgerritYanis Guenane proposed openstack/tripleo-heat-templates: Add Redis as a Pacemaker resource  https://review.openstack.org/18261710:10
spredzyjistr, gfidente my last bits for Pacemaker story redis ^ and the use of celoimeter+redis with tooz (https://review.openstack.org/#/c/171996/)10:11
spredzyI am however uncertain about the RedisVirtualIP vip and how should it be managed if not in the offered way. Please let me know your feedbacks10:11
*** zz_naotok has quit IRC10:15
*** openstackstatus has quit IRC10:20
*** openstack has quit IRC10:20
*** openstack has joined #tripleo10:27
*** hewbrocca has quit IRC10:27
*** hewbrocca has joined #tripleo10:33
*** paramite|afk is now known as paramite10:43
*** mcornea_ has joined #tripleo10:43
*** mcornea has quit IRC10:43
*** mordred has quit IRC10:43
*** mordred has joined #tripleo10:44
*** mcornea_ is now known as mcornea10:59
*** AzherKhan has quit IRC11:09
*** panda has quit IRC11:21
*** panda has joined #tripleo11:22
*** masco has quit IRC11:25
*** rhefner has joined #tripleo11:28
jprovaznHi, when you have a minute, could you please review https://review.openstack.org/#/c/179974/ ?11:56
openstackgerritMerged openstack/tripleo-heat-templates: post-deploy hook for rhel registration  https://review.openstack.org/17206511:57
*** dprince has joined #tripleo11:58
*** rhallisey has joined #tripleo11:58
*** jdob has joined #tripleo11:59
*** paramite is now known as paramite|afk12:06
*** paramite|afk is now known as paramite12:11
*** jayg|g0n3 is now known as jayg12:13
*** trown|outttypeww is now known as trown12:15
*** weshay has joined #tripleo12:19
*** morazi has quit IRC12:20
*** morazi has joined #tripleo12:20
openstackgerritDan Prince proposed stackforge/puppet-tripleo: Use node IP lists for HA Proxy ipaddresses  https://review.openstack.org/18677512:22
openstackgerritDan Prince proposed stackforge/puppet-tripleo: Configure virtual IPs for split out networks  https://review.openstack.org/18624012:22
openstackgerritDan Prince proposed stackforge/puppet-tripleo: Add interface_for_ip function  https://review.openstack.org/18677612:22
dasmi'm trying to check why ironic doesn't provide me valid image by tftp.12:23
dasmand looking for description of workflow, or similar, to check where this is happening.12:23
*** tzumainn has joined #tripleo12:23
dasmdoes anyone know about good source of it? everything in terms of tripleo12:23
dasmit fails, when i'm building overcloud.12:24
dasmso, i'm assuming there are some problems with built image12:24
*** paramite is now known as paramite|afk12:38
*** paramite|afk is now known as paramite12:45
*** chlong has joined #tripleo12:49
*** ukalifon1 has quit IRC12:58
*** ukalifon1 has joined #tripleo13:05
*** ukalifon1 has quit IRC13:12
*** radez_g0n3 is now known as radez13:18
*** dasm is now known as dasm|afk13:22
*** akrivoka has quit IRC13:28
gfidentedprince, playing with vlan for tenant networks, I think I need to add to bridge_mappings some physical_network:bridge13:29
gfidentedprince, so that I can paste physical_network:vmin:vmax as network_vlan_ranges13:30
gfidentedprince, but I am unsure how to get the bridge name to use for tenant networks13:30
gfidentedprince, can you help me there?13:30
*** weshay has quit IRC13:30
*** weshay has joined #tripleo13:31
gfidentedprince, we have datacentre:br-ex mapping for overcloud by default and the overcloud default-net is plugged on datacentre13:33
* hewbrocca wonders if we intentionally misspelled datacentre13:33
dprincegfidente: I need a few minutes... but then I'll have a look13:34
* dprince is brushing up patches from this weekend13:34
gfidentedprince, ack, I think datacentre would make deployment pass at this point by setting same vlan range for both tenant AND provider networks13:36
gfidentehewbrocca, on a good note, there is no occurrence of 'datacenter' in the repo, only13:38
gfidente'datacentre'13:38
* hewbrocca facepalm13:39
hewbroccawhatevs13:39
*** akrivoka has joined #tripleo13:40
*** dhellmann has left #tripleo13:44
*** ishant has quit IRC13:46
*** cody-somerville has joined #tripleo13:47
*** noslzzp has joined #tripleo13:53
*** ukalifon1 has joined #tripleo13:53
*** jrist has joined #tripleo13:54
*** jrist has joined #tripleo13:54
*** jprovazn has quit IRC13:56
*** lblanchard has joined #tripleo14:02
*** mcornea has quit IRC14:04
*** paramite is now known as paramite|afk14:04
*** mcornea has joined #tripleo14:05
*** paramite|afk is now known as paramite14:06
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates: Set VXLAN tunnels range to match GRE range  https://review.openstack.org/18720514:16
*** bnemec changes topic to "Deploying OpenStack Using OpenStack | https://wiki.openstack.org/wiki/TripleO"14:27
*** jprovazn has joined #tripleo14:28
*** prad has joined #tripleo14:30
*** radez is now known as radez_g0n314:47
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Add PortName to ports stacks  https://review.openstack.org/18681814:50
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Make all-nodes Ip networks configurable  https://review.openstack.org/18558114:50
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Add virtual IPs for split out networks  https://review.openstack.org/18623814:50
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Combine Heat API networks into single net  https://review.openstack.org/18662514:50
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: horizon/keystone api should use internal_api NW  https://review.openstack.org/18721814:50
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: puppet controller role: per service VIP settings  https://review.openstack.org/18721914:50
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: Set glance_api_servers for cinder  https://review.openstack.org/18722014:50
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: configure pacemaker VIPs for isolated networks  https://review.openstack.org/18722114:50
*** radez_g0n3 is now known as radez14:51
*** julim has joined #tripleo14:52
*** untriaged-bot has joined #tripleo15:00
untriaged-botUntriaged bugs so far:15:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/145946515:00
openstackLaunchpad bug 1459465 in tripleo "devtest fails to build ramdisk on Fedora 21 due to Yum multilib error" [Undecided,New]15:00
*** untriaged-bot has quit IRC15:00
*** weshay has quit IRC15:06
*** weshay has joined #tripleo15:09
*** penick has joined #tripleo15:11
*** rameshg87 has joined #tripleo15:11
*** dprince has quit IRC15:13
rameshg87bnemec: hi15:13
*** penick has quit IRC15:13
rameshg87bnemec: can you please have a look at https://review.openstack.org/#/c/179992/ (waiting for your review and has 2x+2s)15:13
*** noslzzp has quit IRC15:17
*** noslzzp has joined #tripleo15:17
*** rlandy has joined #tripleo15:19
*** david-ly_ is now known as david-lyle15:21
*** panda has quit IRC15:21
*** ChuckC_ has quit IRC15:21
*** ChuckC_ has joined #tripleo15:22
*** panda has joined #tripleo15:22
rameshg87bnemec: SpamapS: can you please have a look at https://review.openstack.org/#/c/167929/ (i will correct the grammar in commit message if i happen to put a new patch if it's fine) :)15:29
*** daneyon has joined #tripleo15:36
*** subscope has joined #tripleo15:37
openstackgerritRamakrishnan G proposed openstack/diskimage-builder: Support custom kernel cmdline args for deploy iso  https://review.openstack.org/17999215:39
*** weshay has quit IRC15:47
*** weshay has joined #tripleo15:50
openstackgerritBen Nemec proposed openstack/diskimage-builder: Don't log tmpfs message during cleanup  https://review.openstack.org/18601215:51
*** ifarkas has quit IRC15:55
*** stendulker has joined #tripleo15:56
*** aufi_ has quit IRC15:57
*** cwolferh has joined #tripleo16:07
*** subscope has quit IRC16:07
*** ukalifon1 has quit IRC16:09
*** jistr has quit IRC16:11
*** dasm|afk is now known as dasm16:12
openstackgerritJiri Tomasek proposed openstack/tuskar-ui: Suggested Flavors displaying tweaks  https://review.openstack.org/18724616:16
*** paramite has quit IRC16:17
*** rameshg87 has left #tripleo16:21
*** Goneri has quit IRC16:27
*** julim has quit IRC16:32
*** mcornea has quit IRC16:34
*** dasm is now known as dasm|afk16:37
*** dprince has joined #tripleo16:38
*** mcornea has joined #tripleo16:38
*** akrivoka has quit IRC16:40
*** trown is now known as trown|lunch16:44
*** dsneddon has joined #tripleo16:44
*** gfidente has quit IRC16:48
*** gfidente has joined #tripleo16:48
*** gfidente has quit IRC16:48
*** gfidente has joined #tripleo16:48
*** yamahata has joined #tripleo17:04
*** mcornea has quit IRC17:05
*** isq_ has quit IRC17:06
*** isq_ has joined #tripleo17:07
*** radez is now known as radez_g0n317:16
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates: Pass Neutron VLAN ranges as an array  https://review.openstack.org/18726217:23
gfidentedprince, ^^ this seems to do what is needed for now17:24
gfidentecan't be tested in CI easily though17:24
dprincegfidente: seems reasonable17:24
gfidentewell, unless we push some temporary change to tripleo-ci which sets the param type to vlan17:25
*** lazy_prince has quit IRC17:25
gfidenteI'm testing it locally though, will add a comment17:25
dprincegfidente: yeah, documenting how you tested it locally should be sufficient for now17:26
*** julim has joined #tripleo17:27
*** julim has quit IRC17:27
*** julim has joined #tripleo17:28
*** julim has quit IRC17:28
*** julim has joined #tripleo17:28
*** julim has quit IRC17:29
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates: Pass Neutron VLAN ranges as an array  https://review.openstack.org/18726217:29
gfidenteforgot compute ^^17:29
gfidentedprince, will add tty tomorrow17:29
*** julim has joined #tripleo17:29
*** julim has quit IRC17:30
gfidentedprince, I wanted to ask more about the bridging17:30
gfidentebut it's probably not strictly related to make it working17:30
*** julim has joined #tripleo17:31
*** hewbrocca has quit IRC17:31
dprincegfidente: okay, what you've got in the patch looks fine to me17:31
*** sdake_ has joined #tripleo17:34
*** julim has quit IRC17:35
*** julim has joined #tripleo17:36
*** julim has quit IRC17:36
*** julim has joined #tripleo17:37
*** julim has quit IRC17:37
*** julim has joined #tripleo17:38
*** sdake has quit IRC17:38
*** julim has quit IRC17:38
*** julim has joined #tripleo17:38
*** julim has quit IRC17:39
*** julim has joined #tripleo17:39
*** stendulker has quit IRC17:39
*** julim has quit IRC17:40
*** julim has joined #tripleo17:41
*** julim has quit IRC17:41
*** julim has joined #tripleo17:41
*** julim has quit IRC17:42
*** julim has joined #tripleo17:42
*** julim has quit IRC17:42
*** noslzzp_ has joined #tripleo17:42
*** julim has joined #tripleo17:43
*** julim has quit IRC17:43
*** julim has joined #tripleo17:43
*** julim has quit IRC17:44
*** julim has joined #tripleo17:44
*** julim has quit IRC17:44
*** julim has joined #tripleo17:45
*** julim has quit IRC17:45
*** julim has joined #tripleo17:46
*** julim has quit IRC17:46
*** noslzzp has quit IRC17:46
*** julim has joined #tripleo17:47
*** julim has quit IRC17:47
*** julim has joined #tripleo17:47
*** julim has quit IRC17:48
*** trown|lunch is now known as trown17:49
*** julim has joined #tripleo17:49
*** julim has quit IRC17:49
*** julim has joined #tripleo17:50
*** rhallisey has quit IRC17:50
*** julim has quit IRC17:50
*** julim has joined #tripleo17:51
*** rhallisey has joined #tripleo17:55
*** julim has quit IRC17:56
*** julim has joined #tripleo18:05
*** dtantsur is now known as dtantsur|afk18:15
*** radez_g0n3 is now known as radez18:24
*** athomas_ has quit IRC18:26
*** julim has quit IRC18:30
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates: Pass Neutron VLAN ranges as an array  https://review.openstack.org/18726218:34
openstackgerritGiulio Fidente proposed openstack/tripleo-heat-templates: Pass Neutron VLAN ranges as an array  https://review.openstack.org/18726218:36
*** jpeeler has quit IRC18:39
*** penick has joined #tripleo18:41
*** dsneddon has quit IRC18:43
*** jprovazn has quit IRC18:43
*** dsneddon has joined #tripleo18:45
*** julim has joined #tripleo18:50
*** penick has quit IRC19:08
*** penick has joined #tripleo19:12
openstackgerritDan Prince proposed openstack/tripleo-heat-templates: os-net-config templates to configure vlans  https://review.openstack.org/18728719:15
*** ChuckC_ has quit IRC19:19
*** rlandy has quit IRC19:19
*** panda has quit IRC19:21
*** rlandy has joined #tripleo19:21
*** panda has joined #tripleo19:22
*** daneyon_ has joined #tripleo19:39
*** daneyon has quit IRC19:42
*** radez is now known as radez_g0n319:47
slaglehmm, what happened to all the CI jobs on the network patches?19:49
*** panda is now known as panda|ko19:52
*** sdake_ has quit IRC19:55
*** matbu_ has joined #tripleo19:57
*** matbu has quit IRC19:57
*** penick has quit IRC20:02
bnemecdprince: So https://review.openstack.org/#/c/186240 and https://review.openstack.org/#/c/175958/ are going to conflict.20:09
bnemecI believe we need both of them ASAP.20:09
bnemecI'm probably in trouble for not getting the ssl one in last week (or a month ago...)20:10
bnemecHow do you want to handle them?20:10
dprincebnemec: let me review your patch and then I can rebase20:11
bnemecdprince: Awesome, thanks20:12
*** Goneri has joined #tripleo20:22
*** radek_ has quit IRC20:23
*** jayg is now known as jayg|g0n320:25
jdobis something up with CI? I dont see it running at all on a bunch of these reviews20:28
slaglejdob: yea, you looking at the networks branch for tht?20:34
*** julim has quit IRC20:34
slaglei've rechecked a few and they seem to be running now20:35
slaglethey all failed earlier in the day if you look at: http://goodsquishy.com/downloads/tripleo-jobs.html20:35
*** radez_g0n3 is now known as radez20:35
dprincebnemec: commented, https://review.openstack.org/#/c/175958/620:36
*** bvandenh has quit IRC20:37
dprincebnemec: just a question about 4 of the services which I think we need to consider for SSL20:37
dprincebnemec: the most important of which being keystone_admin perhaps...20:37
*** otoolee has quit IRC20:38
bnemecdprince: Yeah, the problem is the other tripleo things don't know how to register everything as ssl.  Only the public endpoints for certain services.20:41
bnemechttps://github.com/openstack/os-cloud-config/blob/master/os_cloud_config/keystone.py#L3020:41
bnemecBasically the things with an ssl_port set there.20:42
bnemecAlthough I do see that ec2 has ssl so I could do that.20:42
*** otoolee has joined #tripleo20:43
dprincebnemec: so os-cloud-config should probably be updated too then20:43
dprincebnemec: but regardless of os-cloud-config... in the scope of puppet-triple and the tripleo-heat-templates it seems reasonable to me to support SSL for all of these20:43
dprincebnemec: use of os-cloud-config is nice, but it certainly isn't the only tool to configure a cloud20:44
dprincebnemec: not that I'm suggesting it isn't related. Only that it shouldn't hold this up20:44
dprincebnemec: do this first, then fix os-cloud-config second20:44
bnemecdprince: I guess my thing was that this is puppet-tripleo, and the tripleo way to register endpoints is os-cloud-config.  My thought was to add the things we support today, and then add the others as followups.20:50
openstackgerritOpenStack Proposal Bot proposed openstack/python-tuskarclient: Updated from global requirements  https://review.openstack.org/18733320:51
dprincebnemec: then perhaps we should unbind these services from the public IP just to be clear they aren't secured?20:51
*** rhallisey has quit IRC20:51
jdobslagle: ya, those are the ones I was looking at too20:52
bnemecdprince: I guess we could, but it would make those services essentially unusable.20:54
dprincebnemec: I'd rather see us just SSL all the things20:54
dprincebnemec: SSL terminate rather20:54
*** penick has joined #tripleo20:55
dprincebnemec: so why exactly are we reluctant to add SSL for Horizon, keystone admin, Nova EC2, and the extra Heat APIs now?20:55
dprincebnemec: using SSL for Nova traffic, and then not using it for EC2/Horizon is just going to expose the same creds20:56
*** untriaged-bot has joined #tripleo21:00
untriaged-botUntriaged bugs so far:21:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/145946521:00
openstackLaunchpad bug 1459465 in tripleo "devtest fails to build ramdisk on Fedora 21 due to Yum multilib error" [Undecided,Triaged]21:00
*** untriaged-bot has quit IRC21:00
bnemecdprince: I guess mostly just that this feature is already late, and there are already a bunch of other features being given high priority exceptions.21:01
bnemecI suppose I can just go ahead and do it, and if people care enough about it they'll take it late. :-)21:01
openstackgerritMerged openstack/diskimage-builder: Support custom kernel cmdline args for deploy iso  https://review.openstack.org/17999221:05
dsneddonbnemec, dprince: One potential thing about Keystone API via SSL. I'm not sure we want the Keystone Admin API reachable from the public interface, my thinking was that operators would create users and tenants either on the controllers or using Horizon, not connecting directly to the Keystone API to do so.21:06
dsneddonbnemec, dprince: That's the only difference between the internal/public and admin endpoints.21:07
dprincedsneddon: if we want to go that route then we should unbind it from the public VIP21:08
*** wfoster has quit IRC21:08
dsneddonbnemec, dprince: Yes, we would instead have it bound only to the internal VIP21:09
bnemecSeems reasonable to me.21:09
*** lblanchard has quit IRC21:10
*** wfoster has joined #tripleo21:14
*** sdake has joined #tripleo21:15
*** wfoster has quit IRC21:18
*** wfoster has joined #tripleo21:22
*** trown is now known as trown|outttypeww21:31
*** penick has quit IRC21:32
*** daneyon_ has quit IRC21:47
*** dprince has quit IRC21:53
*** sdake_ has joined #tripleo21:58
*** Goneri has quit IRC22:02
*** sdake has quit IRC22:02
*** openstackgerrit has quit IRC22:07
*** openstackgerrit has joined #tripleo22:07
*** rlandy has quit IRC22:09
*** mcornea has joined #tripleo22:11
*** chlong has quit IRC22:18
lifelessdsneddon: FWIW I know that HP operators use the nova admin API directly22:20
lifelessdsneddon: but they have it on a separate network not reachable by anyone except admins22:21
lifelessdsneddon: I *think* this aligns with the thing you discussed with dprince above22:21
dsneddonlifeless, That's good info. I just don't want the Admin API reachable from outside the cloud, it would be too easy to hit with password attempts.22:21
dsneddonlifeless, I do expect operators to use the Admin API directly, just not from outside the cloud to a public IP.22:22
*** trown has joined #tripleo22:23
*** trown|outttypeww has quit IRC22:23
openstackgerritBen Nemec proposed stackforge/puppet-tripleo: Allow use of ssl for public api endpoints  https://review.openstack.org/17595822:46
openstackgerritBen Nemec proposed stackforge/puppet-tripleo: Stop keystone admin from listening on public interface  https://review.openstack.org/18737122:46
*** rebrego has joined #tripleo22:48
*** openstackgerrit has quit IRC22:51
*** openstackgerrit has joined #tripleo22:51
*** mcornea has quit IRC22:52
*** regebro has quit IRC22:53
*** alop has quit IRC23:06
*** alop has joined #tripleo23:07
dsneddondevtest seems to be completely broken for me recently. I can't build images with "devtest_ramdisk.sh": https://bugs.launchpad.net/tripleo/+bug/145946523:16
openstackLaunchpad bug 1459465 in tripleo "devtest fails to build ramdisk on Fedora due to Yum multilib error" [Undecided,Triaged]23:16
dsneddonHas anyone else installed devtest successfully recently? Or even built Fedora i386 images?23:17
*** zaneb has quit IRC23:19
*** panda|ko has quit IRC23:21
*** panda|ko has joined #tripleo23:22
*** sdake has joined #tripleo23:24
*** sdake_ has quit IRC23:28
*** yuanying has joined #tripleo23:31
*** zaneb has joined #tripleo23:32
*** chlong has joined #tripleo23:41

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!