Perl 6 - the future is here, just unevenly distributed

IRC log for #puppet-openstack, 2014-05-20

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:00 meylor joined #puppet-openstack
00:02 openstackgerrit A change was merged to stackforge/puppet-ceph: ceph::mon : tag cephx spec test  https://review.openstack.org/89477
00:02 openstackgerrit A change was merged to stackforge/puppet-ceph: ceph::mon : control client.admin key generation  https://review.openstack.org/89351
00:03 openstackgerrit A change was merged to stackforge/puppet-ceph: ceph::osd : do not hardcode the cluster name  https://review.openstack.org/90555
00:05 aldavud_ joined #puppet-openstack
00:08 xarses David Gurtner, are you in the Channel?
00:13 aimon joined #puppet-openstack
00:13 dvorak xarses: about the ceph patch?
00:13 dvorak <-- not david
00:13 dvorak oh, I meant his roles/profiles one
00:14 xarses dvorak: either, but yes
00:17 thumpba joined #puppet-openstack
00:24 thumpba joined #puppet-openstack
00:33 aldavud_ joined #puppet-openstack
00:38 thumpba joined #puppet-openstack
00:44 rmoe joined #puppet-openstack
00:47 hipster joined #puppet-openstack
00:47 browne left #puppet-openstack
00:54 thumpba joined #puppet-openstack
00:58 kitp joined #puppet-openstack
01:01 openstackgerrit David Gurtner proposed a change to stackforge/puppet-ceph: Added support for RedHat in ceph::mon  https://review.openstack.org/94287
01:34 ryanycoleman joined #puppet-openstack
01:36 xarses joined #puppet-openstack
01:39 kkirkpatrick joined #puppet-openstack
01:45 openstackgerrit Loic Dachary proposed a change to stackforge/puppet-ceph: ceph::osd : add tests for osd data on an existing partition  https://review.openstack.org/90558
01:47 hipster joined #puppet-openstack
01:57 xingchao joined #puppet-openstack
01:59 kitp joined #puppet-openstack
02:01 xavpaice michchap: you around?  looking for the link for your puppet-lint+documentation addition
02:06 aldavud_ joined #puppet-openstack
02:12 michchap xavpaice: yes am around. Haven't pushed it yet
02:13 michchap xavpaice: I'm also a bit worried I need someone to convert it to idiomatic ruby, since it's messy and hacky right now
02:15 kitp joined #puppet-openstack
02:16 xavpaice michchap: maybe I could ask a buddy at work for advice?  She's a ruby hero.
02:17 michchap xavpaice: I'll slap it up on github this arvo and send you a link.
02:17 xavpaice :)
02:39 hipster joined #puppet-openstack
02:46 hipster_ joined #puppet-openstack
02:54 xingchao joined #puppet-openstack
03:01 xavpaice I'm attempting to use the master version of puppet-keystone, but with havana - there's a few config differences I'm hitting.  I seem to recall discussions on a compat layer
03:02 xavpaice how about if we use a setting such as openstack_release => 'havana' or something similar
03:02 xavpaice then some if's in the manifest for those parameters which move around?
03:23 daneyon joined #puppet-openstack
03:27 michchap xavpaice: bind_host has changed
03:28 michchap xavpaice: https://github.com/michaeltchapman/puppet-ope​nstacklib/blob/master/manifests/compat.pp#L16
03:29 markvoelker michcap: o/
03:29 markvoelker michchap: so this is....well, a bit of a bummer. http://lists.openstack.org/pipermail​/openstack-dev/2014-May/035264.html
03:31 markvoelker michchap: see also http://eavesdrop.openstack.org/irclogs/%23openst​ack-meeting/%23openstack-meeting.2014-05-19.log starting around 2014-05-19T21:06:15
03:31 markvoelker michchap: pretty much shoots Galera in the head for Icehouse. =/
03:31 xavpaice michchap: thanks for that
03:32 cbaesema joined #puppet-openstack
03:32 hipster joined #puppet-openstack
03:33 aldavud_ joined #puppet-openstack
03:37 xavpaice michchap: I recall we discussed the merits of this in openstacklib::compat or in the individual project modules.  Having see the approach you've taken, I'm sold on openstacklib
03:38 michchap xavpaice: might end up becoming 2 modules - mgagne has some other ideas for what he wants in a lib (the aviator stuff)
03:38 michchap xavpaice: but I will push it to stackforge soon
03:38 michchap xavpaice: that irc log is rather disturbing
03:38 xavpaice ta.  One suggestion - openstacklib::compat::projectname - that way I can have icehouse keystone and havana something else (if that works)
03:39 xavpaice compat.pp will get huge otherwise
03:40 michchap xavpaice: good idea. I might make a compat folder then. Also note it's coupled to hiera
03:41 * xavpaice loves hiera and thinks everyone should use it
03:41 michchap xavpaice: yeah but it's not included in puppet 27 which is default on 12.04 and blah blah
03:41 xavpaice I note for keystone the database connection string has moved as well - want a pull request?
03:42 xavpaice puppet 2.7 - how still uses that? (oh, yeah, 90% of the servers I come across...)
03:42 michchap xavpaice: I haven't updated the module for about a month - it needs some attention
03:42 michchap xavpaice: I will look at any PRs
03:43 xavpaice :)
04:23 kitp joined #puppet-openstack
04:27 hipster joined #puppet-openstack
04:29 hipster_ joined #puppet-openstack
04:30 thumpba joined #puppet-openstack
04:34 mkoderer joined #puppet-openstack
04:37 fandi joined #puppet-openstack
05:07 hipster joined #puppet-openstack
05:19 tfz joined #puppet-openstack
05:24 kitp joined #puppet-openstack
05:32 xavpaice michchap: did you have any issues with parameter overrides for the compat.pp manifest?  e.g. value changes etc?
05:33 michchap xavpaice: parameter overrides? You mean for classes?
05:33 xavpaice resources actually - probably how I'm reading it
05:33 michchap xavpaice: you can only override attributes for resources using collectors
05:34 michchap xavpaice: and it's parse order dependent so it's dangerous.
05:35 badiane_ka joined #puppet-openstack
05:35 xavpaice ah.  got it.  I had some odd stuff in the collectot
05:35 xavpaice s/collectot/collector/
05:42 EmilienM good morning
05:42 EmilienM markvoelker: yeah it's a mess
05:42 beddari xavpaice: +100 for hiera
05:42 beddari morning :)
05:43 EmilienM michchap: hey
05:43 michchap EmilienM: morning
05:43 EmilienM michchap: gosh, that stuff with galera
05:44 michchap EmilienM: yeah...not good
05:44 EmilienM michchap: i'm going to spend my day to understand the impact, maybe it affects only some services (I know Nova quotas)
05:45 michchap EmilienM: can just change the loadbalancer to only use one host to do updates and that fixes things afaik
05:47 hipster joined #puppet-openstack
05:48 xavpaice +1 if you can handle the load on one db server
05:48 beddari a good day to be using PostgreSQL, I wasn't the single one there, but I've certainly felt like him before
05:59 thumpba joined #puppet-openstack
06:24 kitp joined #puppet-openstack
06:26 fandi joined #puppet-openstack
06:40 EmilienM michchap: i'll make some tests
06:46 xingchao joined #puppet-openstack
06:47 hipster joined #puppet-openstack
06:58 aldavud_ joined #puppet-openstack
07:02 fandi joined #puppet-openstack
07:05 artem_panchenko joined #puppet-openstack
07:08 openstackgerrit Gilles Dubreuil proposed a change to stackforge/puppet-vswitch: Fixed ovs provider  https://review.openstack.org/94312
07:12 openstackgerrit Gilles Dubreuil proposed a change to stackforge/puppet-vswitch: Fixed ovs provider  https://review.openstack.org/94312
07:19 lsamoila joined #puppet-openstack
07:20 dgollub joined #puppet-openstack
07:23 openstackgerrit Gilles Dubreuil proposed a change to stackforge/puppet-vswitch: Fixed ovs provider  https://review.openstack.org/94312
07:24 openstackgerrit Gilles Dubreuil proposed a change to stackforge/puppet-vswitch: Fixed ovs provider  https://review.openstack.org/94312
07:25 kitp joined #puppet-openstack
07:25 gcha joined #puppet-openstack
07:28 ryanycol_ joined #puppet-openstack
07:30 thumpba__ joined #puppet-openstack
07:31 rmoe_ joined #puppet-openstack
07:54 berendt joined #puppet-openstack
07:56 aldavud joined #puppet-openstack
07:59 aldavud <-- david
08:00 derekh_ joined #puppet-openstack
08:08 aldavud joined #puppet-openstack
08:21 uberj_ joined #puppet-openstack
08:26 kitp joined #puppet-openstack
08:33 dgollub joined #puppet-openstack
09:27 kitp joined #puppet-openstack
09:45 mmagr joined #puppet-openstack
09:47 hipster joined #puppet-openstack
09:55 thumpba joined #puppet-openstack
10:28 kitp joined #puppet-openstack
10:47 hipster joined #puppet-openstack
11:16 gcha joined #puppet-openstack
11:28 kitp joined #puppet-openstack
11:43 morazi joined #puppet-openstack
11:46 sanjayu joined #puppet-openstack
12:03 markvoelker joined #puppet-openstack
12:06 gcha joined #puppet-openstack
12:18 rcrit joined #puppet-openstack
12:19 rcrit left #puppet-openstack
12:23 dprince joined #puppet-openstack
12:29 kitp joined #puppet-openstack
12:30 dgollub joined #puppet-openstack
12:58 jehb joined #puppet-openstack
13:00 openstackgerrit A change was merged to stackforge/puppet-nova: Fail when ssl parameters are missing and rabbit_use_ssl is set to true  https://review.openstack.org/93808
13:26 evilstephen joined #puppet-openstack
13:29 hipster joined #puppet-openstack
13:30 kitp joined #puppet-openstack
13:48 sanjayu joined #puppet-openstack
13:49 kitp joined #puppet-openstack
13:58 ryanycoleman joined #puppet-openstack
14:13 ianw joined #puppet-openstack
14:14 ianw joined #puppet-openstack
14:15 ianw joined #puppet-openstack
14:15 ianw joined #puppet-openstack
14:21 ianw joined #puppet-openstack
14:39 cbaesema joined #puppet-openstack
14:39 hipster joined #puppet-openstack
14:50 kkirkpatrick joined #puppet-openstack
15:05 mdorman joined #puppet-openstack
15:10 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-cinder: Enable cinder server to be run in SSL mode  https://review.openstack.org/94395
15:11 marun joined #puppet-openstack
15:17 mfisch Does anyone here install neutron-plugin-openvswicth (not agent) on their compute nodes? It's not needed, but without it, the /etc/neutron/plugins/openvsw​itch/ovs_neutron_plugin.ini is missing
15:17 mfisch I saw that EmilienM modified some code in this area
15:17 EmilienM o/
15:17 EmilienM i have a patch in WIP
15:18 EmilienM wow, sounds like I have to make it soon, I got a lot of feedback about that
15:18 mfisch EmilienM: would be happy to test
15:19 EmilienM mfisch: WIP
15:22 mfisch EmilienM: whats the solution you are trying?
15:22 med_ joined #puppet-openstack
15:22 med_ mfisch, joined
15:23 EmilienM mfisch: ovs agent refacto to support ml2
15:23 med_ EmilienM, howdy!
15:23 med_ yes, ovs ==> m;2
15:23 EmilienM med_: heh
15:24 med_ yes, ovs ==> ml2 more or less
15:24 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-nova: Enable nova server to be run in SSL mode  https://review.openstack.org/94399
15:26 daneyon joined #puppet-openstack
15:38 hogepodge joined #puppet-openstack
15:41 dprince joined #puppet-openstack
15:57 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-heat: nable heat server to be run in SSL mode  https://review.openstack.org/94412
15:58 EmilienM spredzy: typo ^
15:58 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-heat: Enable heat server to be run in SSL mode  https://review.openstack.org/94412
15:58 spredzy EmilienM thanks fixed
16:07 hipster_ joined #puppet-openstack
16:08 aldavud joined #puppet-openstack
16:09 dtalton joined #puppet-openstack
16:13 rmoe joined #puppet-openstack
16:27 openstackgerrit A change was merged to stackforge/puppet-neutron: SSL for communication between neutron and rabbitmq  https://review.openstack.org/93513
16:29 kitp joined #puppet-openstack
16:30 rwsu joined #puppet-openstack
16:30 hogepodge_ joined #puppet-openstack
16:36 openstackgerrit joined #puppet-openstack
16:38 mgagne hogepodge: ping
16:38 hogepodge pong mgagne
16:39 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-heat: Enable heat server to be run in SSL mode  https://review.openstack.org/94412
16:39 mgagne hogepodge: I think we should come up with a better way to manage our configs where they are unset.
16:39 mgagne hogepodge: the use case I think of is
16:40 mgagne hogepodge:  if $config { whatever_config { 'DEFAULT/config': value => $config } else { whatever_config { 'DEFAULT/config': ensure => absent }
16:40 mgagne hogepodge: looks like a lot of work/lines for what it does
16:40 hogepodge to ensure we’re not leaking in unwanted defaults?
16:40 mgagne hogepodge: well, that's an other story (defaults)
16:41 hogepodge So a better provider?
16:41 hogepodge That uses less code.
16:41 mgagne hogepodge: we have no way to know what the default was before puppet did its thing
16:41 mgagne hogepodge: yes
16:41 mgagne hogepodge: and we assume that removing the config will revert to the default one
16:41 hogepodge Yeah, and that’s not true.
16:41 mgagne hogepodge: which is probably true 99.9% of the time though
16:42 openstackgerrit A change was merged to stackforge/puppet-cinder: SSL for communication between cinder and rabbitmq  https://review.openstack.org/93514
16:42 mgagne hogepodge: except for configs involving paths where the packager could have messed with the default value
16:43 hogepodge The package managers assume a pre-existing file is truth and backs it up. Use a similar approach? Back up the file if one doesn’t exist, then fall back to those defaults if the resource isn’t managed?
16:43 mgagne hogepodge: you want to backup a config file?
16:43 mgagne hogepodge: with puppet?
16:44 hogepodge I’m trying to think of ways to capture defaults that are expressed by a config file, which you might want to go back if deciding to not manage with puppet.
16:47 openstackgerrit A change was merged to stackforge/puppet-keystone: Add ignore_default_tenant parameter to keystone::role::admin class  https://review.openstack.org/93612
16:48 mgagne hogepodge: there is no way
16:49 mgagne hogepodge: you could bring puppet into the equation after the config file has already been messed up by someone and Puppet won't know those aren't the real default values.
16:50 hogepodge The assumption would be truth is whatever Puppet sees before it manages the file.
16:51 hogepodge (not that I’m married to this idea, I’m just chucking out ideas)
16:51 hogepodge But back to the original question, the provider should distinguish between undef and a value, and implcitly ensure absent when it sees undef?
16:52 dvorak our plan has been to eventually move to purging non-managed entries in the config files, but that's not a great default
16:53 kitp joined #puppet-openstack
16:53 arnaud_orange left #puppet-openstack
16:53 dvorak of course, I've been assuming the *_config resources even support purging
16:53 mgagne hogepodge: we will have to figure out the correct logic for that one
16:53 mgagne hogepodge: we could introduce an other parameter to enable the logic
16:54 mgagne dvorak: it does
16:54 kitp joined #puppet-openstack
16:54 mgagne dvorak: nova_config does, not sure about the other ones
16:56 dvorak it seems like you'd need to know what all the default values were to purge appropriately
16:56 mgagne dvorak: you don't
16:57 mgagne dvorak: if there is no nova_config resources managing a specific value, it's purged from the config file.
16:57 mgagne dvorak: so you end up with a config file of ~30 lines without comment, only the values managed by puppet
16:57 dvorak right, I understand that part, I was talking about hoge's bigger question
16:57 mgagne dvorak: if you enable global purging of unmanaged nova_config
16:57 xarses joined #puppet-openstack
16:58 dvorak could I get some feedback on these reviews?  https://review.openstack.org/#/c/94120/ and https://review.openstack.org/#/c/94170/
16:59 dvorak we've had them as internal forks for a while, and I'd like to get them into master and the icehouse branch, since we're trying to move to icehouse now
17:00 mgagne dvorak: why is an empty string not enough?
17:00 dvorak for the absent patch?
17:00 mgagne dvorak: yes
17:01 dvorak you mean why doesn't that work without the patch, or are you suggesting I make it take "" instead of "absent"?
17:01 mgagne dvorak: the later
17:01 mgagne dvorak: introducing a magic string isn't the best idea IMO if empty string can do the job
17:02 dvorak I'm kind of ambivalent about the syntax.  I'm willing to move it to ""
17:02 dvorak I wasn't sure if a magic value on gateway-ip would be better, or if a new attribute would be better.  this implementation was somewhat easier
17:02 mgagne dvorak: what happens if you subnet-update with --gateway-ip=None ?
17:03 dvorak I think the neutron cli syntax is fairly gross
17:03 dvorak I believe I tried that and it didn't work, but I'm not 100% sure
17:04 mgagne hogepodge: https://review.openstack.org/#/c/93917/4
17:04 mgagne hogepodge: about cron jobs
17:05 mgagne hogepodge: shouldn't we move everything cron related under *::cron::the_job ?
17:05 mgagne hogepodge: in that case: keystone::cron::token_flush
17:06 mgagne hogepodge: eventually, the same with the cron jobs in glance
17:09 hogepodge another aspect to refactor?
17:09 EmilienM hogepodge: when is our first meeting by the way?
17:10 hogepodge I’m still working that out. Monday next week is a US holiday, so I’m thinking a week from Monday. That feels like a long ways away, though.
17:10 mgagne hogepodge: getting ideas out of my head =)
17:11 EmilienM hogepodge: cool!
17:11 hogepodge I’m writing up the summary of the operators session right now.
17:11 hogepodge dvorak I think we should add a check in the unit tests for the new functionality.
17:12 hogepodge for https://review.openstack.org/#/c/94120/1
17:12 hogepodge https://review.openstack.org/#/c/94170/ lgtm
17:12 dvorak hogepodge: what are your feelings on 'absent' vs '' for the value?
17:13 hogepodge ‘’ is unambiguous.
17:13 hogepodge so is undef
17:13 hogepodge in a perverse world, ‘absent’ can refer to a gateway.
17:13 dvorak well, I believe it has to be a dotted quad
17:14 dvorak but like I said, I don't feel strongly about the syntax
17:15 dvorak what did you have in mind for the test cases?
17:16 hogepodge I feel like we should match the docs for the api, ‘to specify a subnet without a gateway, specify the value null for the gateway_ip attribute in the request body.’
17:17 dvorak works for me, so I can update it to take undef.  I'll take care of that, and look at how that fits into the test cases and submit a new patch
17:17 dvorak thanks for taking a look
17:18 hogepodge In unit/provider/neutron_subnet/neutron_spec.rb
17:19 hogepodge it 'should call subnet-update to…. etc
17:20 hogepodge ‘’ feels like it should be counted the same as undef, but it also feels wrong. Anyone else have opinions on that?
17:21 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-cinder: Enable cinder server to be run in SSL mode  https://review.openstack.org/94395
17:33 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-neutron: Enable neutron server to be run in SSL mode  https://review.openstack.org/94432
17:39 mgagne EmilienM: Is Yanis online?
17:39 spredzy mgagne, it's me ;)
17:39 EmilienM mgagne: spredzy
17:39 EmilienM \o/
17:39 mgagne spredzy: cool
17:40 mgagne spredzy: only have one comment about SSL mode: your changes aren't consistent between them. Some introduce use_ssl, some don't. Some introduce ca_file, some don't, etc.
17:41 mgagne spredzy: can you look into it?
17:41 spredzy mgagne, yep true, it's not my change though it is each component implementation
17:41 spredzy gimme a sec just showing you
17:41 mgagne spredzy: you introduced the use_ssl parameter but forgot to set it in the config file
17:41 spredzy For neutron : https://github.com/openstack/neutr​on/blob/master/neutron/wsgi.py#L64
17:42 spredzy For cinder : https://github.com/openstack/cind​er/blob/master/cinder/wsgi.py#L43
17:42 mgagne spredzy: yep, can you show me where it is set in your change?
17:42 mgagne spredzy: for neutron
17:43 mgagne spredzy: wow, fun for cinder
17:43 mgagne spredzy: implicitly enabled if cert or key is provided... :O
17:43 spredzy for neutron it's implicit. ie. if you use true for SSL there is a test to ensure you provide them
17:43 spredzy I guess it shouldn't have been this way .....
17:44 spredzy :)
17:44 spredzy Oh no, I see what you mean
17:44 spredzy no no it's missing you're right
17:44 spredzy I am missing a neutron_config { 'DEFAULT/use_ssl
17:44 spredzy mgagne, ^
17:44 mgagne spredzy: could you add a note in the commit message about it? Like: Cinder implicitly enables SSL if cert configurations are set.
17:45 spredzy mgagne, sure thing
17:45 mgagne spredzy: cool, thanks
17:46 spredzy mgagne, should I discard your -1 for cinder beyond the note ?
17:46 spredzy (ie. the note on the commit msg)
17:46 mgagne spredzy: I'll correct my comment
17:46 spredzy ok thanks
17:48 csschwe joined #puppet-openstack
17:54 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-neutron: Enable neutron server to be run in SSL mode  https://review.openstack.org/94432
17:55 spredzy mgagne, on some project this is how use_ssl is defined https://github.com/openstack/cind​er/blob/master/cinder/wsgi.py#L43
17:55 spredzy ooops wrong copy paste
17:56 spredzy use_ssl = cert_file or key_file (heat)
17:57 openstackgerrit A change was merged to stackforge/puppet-nova: Allow configuring the rbd keyring name  https://review.openstack.org/94170
17:57 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-cinder: Enable cinder server to be run in SSL mode  https://review.openstack.org/94395
17:58 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-nova: Enable nova server to be run in SSL mode  https://review.openstack.org/94399
18:02 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-heat: Enable heat server to be run in SSL mode  https://review.openstack.org/94412
18:04 ryanycoleman joined #puppet-openstack
18:07 ryanycol_ joined #puppet-openstack
18:09 mgagne spredzy: heat =)
18:10 spredzy mgagne, everything that needs to be done ;) if you notice I missed a component let me know
18:11 mgagne spredzy: -> The ca_file parameter/configuration looks to be missing.
18:12 spredzy mgagne, not my fault https://github.com/openstack/heat/b​lob/master/heat/common/wsgi.py#L65
18:12 mgagne spredzy: hmmm, looks like I didn't look at the same file as you
18:12 ryanycoleman joined #puppet-openstack
18:13 mgagne spredzy: https://github.com/openstack/heat/blob/m​aster/heat/openstack/common/sslutils.py
18:13 mgagne spredzy: I'm confused
18:13 spredzy mgagne, you have the right link
18:13 spredzy https://github.com/openstack/heat/blob/mas​ter/heat/openstack/common/sslutils.py#L78
18:13 spredzy is the key statement
18:15 spredzy ah the link I posted if for api flavors
18:15 spredzy cloudwatch, cfn
18:16 spredzy mgagne, my heat patch needs a bit of rework
18:16 spredzy going back to it
18:17 ryanycoleman joined #puppet-openstack
18:17 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-neutron: Enable neutron server to be run in SSL mode  https://review.openstack.org/94432
18:17 mgagne spredzy: well, looks like there is conflicting config definitions no?
18:17 mgagne spredzy: what's the diff between https://github.com/openstack/heat/blob/mas​ter/heat/openstack/common/sslutils.py#L28 and https://github.com/openstack/heat/b​lob/master/heat/common/wsgi.py#L65 ?
18:18 mgagne spredzy: one looks to be in the heat_api group/section
18:18 spredzy mgagne, and the other in DEFAULT
18:18 mgagne spredzy: yep...
18:19 spredzy Oh actually one is in [ssl] section
18:19 spredzy https://github.com/openstack/heat/blob/mas​ter/heat/openstack/common/sslutils.py#L40
18:19 spredzy mgagne, ^
18:20 mgagne spredzy: sorry but I think heat config is a mess. =)
18:20 spredzy #openstack-heat is the right IRC channel ? It seems pretty empty ...
18:32 spredzy my bad #heat is the proper one
18:34 Mr_D joined #puppet-openstack
18:34 ryanycoleman joined #puppet-openstack
18:58 ryanycoleman joined #puppet-openstack
19:00 ianw joined #puppet-openstack
19:00 ryanycoleman joined #puppet-openstack
19:04 ryanycol_ joined #puppet-openstack
19:15 jehb joined #puppet-openstack
19:25 kkirkpatrick joined #puppet-openstack
19:26 alugovoi joined #puppet-openstack
19:32 aldavud joined #puppet-openstack
19:33 openstackgerrit David Medberry proposed a change to stackforge/puppet-nova: Adding live migration defaults  https://review.openstack.org/94457
19:33 med_ mfisch, ^
19:33 hipster joined #puppet-openstack
19:34 hipster joined #puppet-openstack
19:35 med_ mfisch, fire away
19:41 openstackgerrit David Medberry proposed a change to stackforge/puppet-nova: Adding live migration defaults  https://review.openstack.org/94457
19:41 michchap morning all
19:43 daneyon joined #puppet-openstack
19:44 daneyon joined #puppet-openstack
19:45 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-cinder: Enable cinder server to be run in SSL mode  https://review.openstack.org/94395
19:45 xarses michchap: somwhere, morning
19:48 cbaesema joined #puppet-openstack
19:52 michchap xarses: 6am. I am most certainly jetlagged
19:52 michchap mgagne: ping
19:52 mgagne michchap: pong
19:53 michchap mgagne: do you know if anyone has started on the things you wanted in the 'openstacklib' thing?
19:53 mgagne michchap: "on the things" ?
19:53 iheartwhiskey joined #puppet-openstack
19:54 michchap mgagne: I am looking at EmilienM's puppet-openstack-cloud module and I can put what I am currently putting in 'lib' in that module if you want to reserve the 'lib' module for other things
19:54 michchap mgagne: you wanted some 'low level things' but I had to run to get my plane before we could finish the conversation
19:54 mgagne michchap: well, I would like other people to come up with their expectations too of what should be this lib.
19:55 mgagne michchap: to me, "lib" sounds like low level stuff, not helpers or wrapper around firewall resources
19:55 * EmilienM remembers michchap leaving the room by running
19:56 mgagne michchap: as I see little value in creating a thin wrapper around a firewall resource where all parameters/values could be overridden to accommodate all site specific configuration
19:57 michchap mgagne: given that Cisco/eNovance/myself have all had to invent modules to do it and maintain them, I don't think I agree it doesn't add value.
19:57 ryanycoleman joined #puppet-openstack
19:58 comptona joined #puppet-openstack
19:58 mgagne michchap: everyone will "invent" their own modules, one way or an other, even with openstacklib in place. Its their composition layer, their site specific setup/config/organization.
19:58 michchap mgagne: between us we want to be sharing code and it's problematic when we have to have our own module handling loadbalancing and firewalls and endpoints. I am fine with not calling it openstacklib - I will leave that name for other things.
19:59 mgagne michchap: in that case, I would like this module to have an other name. As a user of puppet modules for openstack, I sure don't wish to install 56 modules because openstacklib needs it: corosync, haproxy, nagios, etc.
20:00 mgagne michchap: or we can name the module I think of diffently
20:00 mgagne michchap: openstackclient ou whatever
20:00 michchap mgagne: no you can have 'lib' :)
20:00 mgagne michchap: so I can download this low level stuff without all the other helpers
20:01 michchap mgagne: I might port what's currently offered by my openstacklib into EmilienM's puppet-openstack-cloud and go from there.
20:02 EmilienM michchap: just want to highlight this module is currently in production, and one of the rules when patching is backward compat
20:02 [1]Mr_D joined #puppet-openstack
20:03 michchap EmilienM: Small changes :)
20:04 mgagne michchap: I keep hearing about "common stuff" we should move to this module but haven't see a proposition/blueprint yet
20:04 EmilienM michchap: if we move it to SF, I want spredzy, sbadia and fc__ core reviewer on this module (plus you of course)
20:05 mgagne michchap: like database related stuff. and I'm wondering what is actually this database things people talk about
20:06 michchap EmilienM: yeah sure. we can make  a new group if needed
20:06 EmilienM yep
20:06 michchap mgagne: there isn't much database stuff - you can handle all that with hiera because it's just choosing which classes to include on which node (composition)
20:07 mgagne michchap: I'm really confused then
20:08 spredzy mgagne, on the heat side, the [ssl] section is unused as of today. And for the other, each service is a distinc api (heat_api, heat_api_cfn, heat_api_cloudwatch), hence all of them needs to configured separately
20:08 michchap mgagne: class wrappers around HAproxy rules is probably the best example
20:09 michchap mgagne: because HAproxy rules in puppetlabs-haproxy are defined types, we need a wrapper to drive it from hiera, so we make one with the default ports and rules for each of the openstack components
20:09 mgagne spredzy: thanks for the follow up. I guess the patch should target all services then
20:09 mgagne michchap: right, I have those created somewhere in my module =)
20:10 spredzy mgagne, looks like it, I will need a heat_cfn_certfile, heat_api_certfile and heat_cw_certfile :/
20:11 michchap mgagne: yep. I'm saying I want a common module for them.
20:11 michchap mgagne: I can certainly see that you don't want core functionality in there because it's a module that will have a lot of deps
20:13 michchap mgagne: argh I am reading chris' email now...is that why you asked about databases?
20:19 mgagne michchap: yes, it is the only example he came up with and I'm still trying to understand what he meant
20:19 mgagne michchap: haproxy definitions could be useful
20:19 xarses joined #puppet-openstack
20:19 michchap mgagne: ok, so do you want haproxy definitions *in* the modules?
20:20 michchap mgagne: at the moment the modules handle database definitions, do we want firewall rules and haproxy rules in there as well?
20:20 mgagne michchap: not sure if it should go in THIS module but it's a good thing to make available
20:20 mgagne michchap: link to database?
20:20 michchap mgagne: like nova/manifests/db/mysql.pp
20:20 michchap mgagne: do you want nova/manifests/lb/haproxy.pp
20:21 michchap mgagne: and the same for all modules? or break it out because it's not needed to use nova
20:21 mgagne michchap: oh god, I see the slippery slope now
20:21 michchap mgagne: yeah I don't want crap in the core modules, that's why I'm putting them somewhere else
20:22 mgagne michchap: right
20:22 michchap mgagne: I think having a separate module for these things is the right way, but I can also see the appeal of having it as part of each project module.
20:23 mgagne michchap: yep, just don't know the right way to do it.
20:23 michchap mgagne: Shall I write this to the list? Is this a source of confusion?
20:23 mgagne michchap: why not in the next composition layer?
20:24 michchap mgagne: because haproxy rules are defined types - they have to be wrapped in a class at some point to be included by hiera
20:24 mgagne michchap: if done in each project module, I feel people could start partially implementing stuff instead of doing it for all our modules
20:24 mgagne michchap: sure
20:24 michchap mgagne: so maybe we should put firewall/loadbalancing rules in the modules themselves?
20:25 michchap mgagne: i mean...that makes composition really easy
20:25 mgagne michchap: no, for the reason I mentionned
20:25 mgagne michchap: people won't update all modules to have feature parity
20:25 michchap mgagne: Ah I misunderstood. Yep I agree.
20:25 michchap mgagne: although it's only a small bit of work.
20:26 mgagne michchap: same with endpoints... look at the mess we are in
20:26 openstackgerrit Benedikt Trefzer proposed a change to stackforge/puppet-nova: add rbd keyring name to secret.xml template  https://review.openstack.org/94466
20:26 michchap mgagne: I'm open to ideas on endpoints - I think it has to be driven by a hash
20:26 michchap mgagne: there's no other way to be flexible
20:26 mgagne michchap: sure, this could be done with an helper in keystone module
20:27 michchap mgagne: but it has to be very generic to support use cases as complex as yours, right?
20:27 mgagne michchap: haha =)
20:27 xarses joined #puppet-openstack
20:27 dgollub joined #puppet-openstack
20:28 michchap mgagne: I will take another look at how we do endpoints. I think the current way of having the endpoint class in each module is not flexible enough.
20:28 mgagne michchap: first, it's not consistent =)
20:28 michchap mgagne: but replacing it with something that's actually better, that isn't too verbose, might be challenging
20:29 michchap mgagne: yeah :(
20:30 mfisch anyone seen this yet on icehouse?  "Error 400 on SERVER: Invalid parameter wsgi_import_script on Apache::Vhost[horizon_vhost]"
20:30 med_ Hunner, are you the guy I keep hearing about? :^)
20:31 mfisch hey Hunner my colleague med_ has a question about a unit test failure. He is relatively new to puppet (first change).
20:32 med_ should "rake spec" work in a generic way or does it actually call libvirt/etc when run in the nova puppet module?  I'm doing devel on a mac.
20:32 med_ so no libvirt
20:33 mfisch mac or not jenkins is failing too
20:33 mgagne there should not be any call to libvirt in spec tests
20:33 michchap med_: I don't know of any requirements for libvirt in nova's rake tasks
20:33 mgagne those aren't integration tests, they are unit tests
20:34 mfisch rake is actually throwing syntax errors
20:34 mfisch nm, I see it
20:34 mfisch -1 HAMMER TIME!
20:34 med_ :)
20:34 med_ thanks mfisch
20:36 med_ I suck.
20:36 * med_ sets his width to 255
20:37 jehb joined #puppet-openstack
20:38 openstackgerrit David Medberry proposed a change to stackforge/puppet-nova: Adding live migration defaults  https://review.openstack.org/94457
20:38 mfisch thanks for the sanity check michchap and mgagne
20:38 Hunner med_: mfisch: Hey, sup?
20:38 mfisch Hunner: we figured it out I think
20:38 Hunner `rake spec` should only run rspec-puppet tests
20:39 med_ Hunner, pebcak. I set my width wide enough to see the real foul up I did.
20:39 ryanycoleman joined #puppet-openstack
20:39 Hunner I don't think puppet-nova has acceptance tests (which would fire up a VM and run libvirt for realz)
20:39 med_ roger.
20:40 med_ Mine was a simple (stupid) cut-paste-o
20:45 shakamunyi joined #puppet-openstack
20:47 ryanycoleman joined #puppet-openstack
20:54 openstackgerrit Yanis Guenane proposed a change to stackforge/puppet-heat: Enable heat server to be run in SSL mode  https://review.openstack.org/94412
20:55 openstackgerrit David Medberry proposed a change to stackforge/puppet-nova: Adding live migration defaults  https://review.openstack.org/94457
21:01 ryanycoleman joined #puppet-openstack
21:01 aldavud joined #puppet-openstack
21:01 kkirkpatrick joined #puppet-openstack
21:04 ryanycoleman joined #puppet-openstack
21:05 ryanycoleman joined #puppet-openstack
21:10 ryanycoleman joined #puppet-openstack
21:12 ryanycoleman joined #puppet-openstack
21:15 ryanycoleman joined #puppet-openstack
21:21 xavpaice joined #puppet-openstack
21:22 Mr_D joined #puppet-openstack
21:27 ryanycoleman joined #puppet-openstack
21:31 daneyon joined #puppet-openstack
21:33 marun joined #puppet-openstack
21:40 daneyon_ joined #puppet-openstack
22:12 cbaesema joined #puppet-openstack
22:39 andi- left #puppet-openstack
23:39 ricardo joined #puppet-openstack

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary