Perl 6 - the future is here, just unevenly distributed

IRC log for #puppet-openstack, 2015-07-24

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:23 sergmelikyan joined #puppet-openstack
00:35 xingchao joined #puppet-openstack
00:35 rcallawa joined #puppet-openstack
00:40 rcallawa_ joined #puppet-openstack
00:40 rcallawa_ joined #puppet-openstack
00:59 xingchao joined #puppet-openstack
01:10 xarses joined #puppet-openstack
01:25 markvoelker joined #puppet-openstack
02:19 mattymo_ joined #puppet-openstack
02:24 richm imcsk8: dc=my-domain, dc=com
02:35 xingchao joined #puppet-openstack
02:50 mdorman joined #puppet-openstack
04:03 markvoelker joined #puppet-openstack
04:30 xingchao joined #puppet-openstack
05:04 markvoelker joined #puppet-openstack
05:08 bklei joined #puppet-openstack
06:01 sergmelikyan joined #puppet-openstack
06:02 dgurtner joined #puppet-openstack
06:34 Hunner I agree with crinkle; if you don't need provisioning, then you don't need beaker for integration testing. But if you plan on allowing people to run the integration tests on a laptop with virtualbox, then maybe beaker WOULD be helpful to have. It would only be a <10 line spec file (plus manifests) anyway
06:35 Hunner If you only care about running integration against nodepool (as is most likely) then don't bother with it
06:45 paramite joined #puppet-openstack
06:54 mkoderer_cloud joined #puppet-openstack
06:55 bogdando folks, what is the current status of Fernet tokens support in keystone module?
06:55 bogdando Could someone please point me the spec, if any?..
06:57 bogdando I see only https://review.openstack.org/#/c/185441/
07:05 markvoelker joined #puppet-openstack
07:10 pcaruana joined #puppet-openstack
07:13 michchap_ joined #puppet-openstack
07:28 michchap_ joined #puppet-openstack
08:02 sergmelikyan joined #puppet-openstack
08:03 gfidente joined #puppet-openstack
08:04 jistr joined #puppet-openstack
08:11 arnaud_orange joined #puppet-openstack
08:13 derekh joined #puppet-openstack
08:43 Guest89121 joined #puppet-openstack
08:51 markvoelker joined #puppet-openstack
09:00 gchamoul imcsk8: ack no worries
09:03 sergmelikyan joined #puppet-openstack
09:58 openstackgerrit Martin Mágr proposed openstack/puppet-heat: Use resource for domain  https://review.openstack.org/204541
10:04 openstackgerrit Athlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/202689
10:07 leanderthal joined #puppet-openstack
10:22 rcallawa joined #puppet-openstack
10:48 openstackgerrit Athlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/202689
10:50 logan2 joined #puppet-openstack
10:50 openstackgerrit Athlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/202689
10:52 markvoelker joined #puppet-openstack
10:55 gfidente joined #puppet-openstack
10:55 gfidente joined #puppet-openstack
11:00 rcallawa_ joined #puppet-openstack
11:02 xarses_ joined #puppet-openstack
11:02 openstackgerrit joined #puppet-openstack
11:03 andreww joined #puppet-openstack
11:03 sergmelikyan joined #puppet-openstack
11:04 andreww joined #puppet-openstack
11:06 clayton bogdando: We're using fernet tokens w/puppet-keystone, check with mfisch
11:46 rcallawa joined #puppet-openstack
11:47 EmilienM good morning!
11:47 EmilienM Hunner: good point. We might need to clarify if not done already
12:00 ducttape_ joined #puppet-openstack
12:03 saneax joined #puppet-openstack
12:21 iurygregory good morning
12:25 markvoelker joined #puppet-openstack
12:26 openstackgerrit Iury Gregory Melo Ferreira proposed openstack/puppet-swift: Update Swift README  https://review.openstack.org/205285
12:34 sergmelikyan joined #puppet-openstack
12:34 rhefner joined #puppet-openstack
12:37 prad joined #puppet-openstack
12:39 dprince joined #puppet-openstack
12:41 sergmelikyan joined #puppet-openstack
12:54 clayton is there an easy way to run acceptance tests against all nodesets in a single run?
13:02 ferest joined #puppet-openstack
13:13 jasondotstar joined #puppet-openstack
13:24 richm joined #puppet-openstack
13:30 xarses_ joined #puppet-openstack
13:31 ducttape_ joined #puppet-openstack
13:32 tristanC joined #puppet-openstack
13:35 morazi joined #puppet-openstack
13:44 openstackgerrit Guilherme Balzana proposed openstack/puppet-swift: Config resources applied after config template  https://review.openstack.org/205243
13:56 openstackgerrit Guilherme Balzana proposed openstack/puppet-swift: Add a blank line to the beginning of each filter  https://review.openstack.org/205284
14:03 ducttape_ joined #puppet-openstack
14:04 tchaypo joined #puppet-openstack
14:35 Fin1te joined #puppet-openstack
15:01 richm EmilienM: https://bugs.launchpad.net/puppet-keystone/+bug/1478037
15:01 openstack Launchpad bug 1478037 in puppet-keystone "default domain must be set first" [Undecided,New]
15:01 EmilienM richm: perfect, thanks
15:03 richm EmilienM: related - https://bugs.launchpad.net/bugs/1472285
15:03 openstack Launchpad bug 1472285 in Keystone "set default domain dynamically" [Wishlist,Opinion]
15:03 richm EmilienM: There may be a solution 1) untested 2) have to use JSON API directly
15:05 openstackgerrit Athlan-Guyot sofer proposed openstack/puppet-keystone: Resource keystone_identity_provider for Keystone.  https://review.openstack.org/202689
15:11 mdorman joined #puppet-openstack
15:16 angdraug joined #puppet-openstack
15:47 sergmelikyan joined #puppet-openstack
15:56 bitblt joined #puppet-openstack
16:09 saneax joined #puppet-openstack
16:22 aimon joined #puppet-openstack
16:27 dprince joined #puppet-openstack
16:42 pabelanger EmilienM: going to get a coffee, ready when you are
16:42 pabelanger PM if you want
16:58 rcallawa joined #puppet-openstack
17:00 rcallawa joined #puppet-openstack
17:09 openstackgerrit Iury Gregory Melo Ferreira proposed openstack/puppet-openstack-specs: Enabling-federation  https://review.openstack.org/190361
17:14 iurygregory richm, i've updated the mode mellon reference, since your patch (https://review.openstack.org/#/c/198083/) is merged ^^
17:38 sergmelikyan joined #puppet-openstack
17:40 EmilienM pabelanger: ready! we can chat here
17:42 EmilienM pabelanger: readying Colleen's comment, maybe you can reconsider your -1
17:42 EmilienM reading*
17:46 iurygregory hey richm can use you site.pp example in https://github.com/richm/puppet-apache-auth-mods to put in the spec? bruce-benjamin is asking to mention an example
17:49 aimon_ joined #puppet-openstack
17:50 aimon joined #puppet-openstack
17:51 pabelanger EmilienM: ack'ed
17:51 pabelanger EmilienM: but left new comment
17:51 pabelanger there is a typo
17:52 EmilienM pabelanger: I was looking at it and you found it thanks
17:52 EmilienM pabelanger: done
17:53 pabelanger Cool, I think we can +1 that now
17:53 pabelanger and even get merged today
17:57 EmilienM pabelanger: w00t
18:12 xarses joined #puppet-openstack
18:14 openstackgerrit Iury Gregory Melo Ferreira proposed openstack/puppet-openstack-specs: Enabling-federation  https://review.openstack.org/190361
18:17 iurygregory EmilienM,  if you have time please take a look. I think I have covered the two comments. ^
18:18 EmilienM iurygregory: it was crinkle's comments
18:18 EmilienM but I'll look too
18:18 iurygregory yeah i've forgoten =X sorry
18:18 iurygregory forgotten*
18:26 mfisch bogdando: yes we're using it but none of the keystone tools to generate tokens or rotate them
18:31 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/205648
18:32 EmilienM richm: trying something ^
18:35 jistr joined #puppet-openstack
18:35 EmilienM crinkle: Hunner's comment is good. So we agree we are not supposed to run integration testing on our laptop. It's run_tests.sh will only run on OS infra, right?
18:53 linkedinyou joined #puppet-openstack
18:54 richm iurygregory: what do you need?
18:56 iurygregory richm, i have modify  your class  'apache_auth::keystone_ipsilon' (site.pp) to use as example in the spec
18:56 richm iurygregory: ok
18:57 richm the real code will probably end up being different - that was just a poc of keystone using mellon/ipsilon/freeipa
18:59 EmilienM crinkle: I'm still hitting https://launchpad.net/bugs/1474049 so to unblock I'll take the code that fix it from https://review.openstack.org/#/c/199676/ and do another patch, ok?
18:59 openstack Launchpad bug 1474049 in puppet-keystone "if admin_project_domain == admin_user_domain, admin_domain is never created" [High,In progress] - Assigned to Emilien Macchi (emilienm)
19:04 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/205648
19:40 openstackgerrit Guilherme Balzana proposed openstack/puppet-swift: Config resources applied after config template  https://review.openstack.org/205243
19:45 sergmelikyan joined #puppet-openstack
19:49 openstackgerrit Guilherme Balzana proposed openstack/puppet-swift: Config resources applied after config template  https://review.openstack.org/205243
19:53 crinkle EmilienM|brb: re integration testing I imagine it would look like devstack testing, where it's up to the developer to find something to run it on
19:53 crinkle EmilienM|brb: re keystone bug yes it makes sense to fix the bug in one patch and do the refactor in a different patch
20:05 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/205648
20:05 EmilienM crinkle: ack
20:09 iurygregory hey crinkle ,the parameters are optional so i'll set them to undef ok?
20:09 crinkle iurygregory: I don't care what they're set to i just want it documented in the spec, saying None doesn't make sense from a puppet perspective
20:11 iurygregory ok i'll change ^^
20:13 richm iurygregory: crinkle: see my latest comment in the review
20:13 richm perhaps it makes sense to just omit them altogether
20:13 richm and have a link to the keystone docs table instead
20:13 iurygregory ok richm i'll see in a few minutes
20:15 richm mtreinish: ping - re: https://review.openstack.org/#/c/198561/ - is it possible to get tempest to dump the JSON data being sent to/from Keystone?
20:23 crinkle richm: ok
20:26 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: admin_user_domain and admin_project_domain can now be equal  https://review.openstack.org/205697
20:27 EmilienM richm: for the tempest patch, if you want, you can rebase it on top of https://review.openstack.org/205648
20:27 EmilienM crinkle, richm: I did the split: https://review.openstack.org/205697 - thanks for review
20:47 richm EmilienM: I'm having a problem with tempest - looks like it is trying to do v2 auth with a v3 user
20:47 richm EmilienM: I can't figure out how/where to change it
20:47 EmilienM richm: check with mtreinish maybe
20:48 richm EmilienM: yeah - (02:15:37 PM) richm: mtreinish: ping - re: https://review.openstack.org/#/c/198561/
20:50 EmilienM richm: oops, haven't seen :)
21:06 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: v3: make sure default domain is created before any other resource  https://review.openstack.org/205648
21:08 openstackgerrit Ben Kero proposed openstack/puppet-swift: Warn that object storage parameter mount_check changes next release  https://review.openstack.org/201755
21:10 openstackgerrit Ben Kero proposed openstack/puppet-swift: Warn that object storage parameter mount_check changes next release  https://review.openstack.org/201755
21:13 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: admin_user_domain and admin_project_domain can now be equal  https://review.openstack.org/205697
21:25 openstackgerrit Iury Gregory Melo Ferreira proposed openstack/puppet-openstack-specs: Enabling-federation  https://review.openstack.org/190361
21:35 EmilienM if anyone around could have a look at 2 outstanding bug fix in puppet-keystone: https://review.openstack.org/#/c/205648/ and https://review.openstack.org/#/c/205697 - thanks a lot!
21:56 * mwhahaha throws a defined() at richm
21:56 mwhahaha :)
21:59 richm missed me - or did you?  you can never be sure with defined()
22:03 EmilienM we are in the middle of a private joke
22:36 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: admin_user_domain and admin_project_domain can now be equal  https://review.openstack.org/205697
22:51 saneax joined #puppet-openstack
23:12 bodepd I'm trying to debug something related to setting credentials with the new keystone code
23:13 bodepd operations fail if I call from cron, but pass if I execute directly, looking at the code, it looks like this causes different sets of credentials to be used
23:15 bodepd uggh, I need to do more digging before I can intelligently ask a question.
23:20 bodepd it has something to do with the special tokens that are required to manage password
23:20 bodepd s
23:22 bodepd I think I figured it out ,there is a conflict between teh admin url pointing to 2.0 and the version being set to 3.0
23:23 bodepd so I guess I just need to figure out how auth_url is being set...
23:29 zino_ joined #puppet-openstack
23:31 zino_ puppet-openstack and puppetlabs-havanna are both untouched for a year and both say they support Ubuntu 12.04, not 14.04 I'm going for. Is there a newer collection somewhere?
23:33 bodepd uggh, I figured it out. basically, it looks for credentials in $USER/openrc, so if you happen to be using that file for things using the v2 endpoint, the provider will happily write a version that conflicts with the version endpoint and then the calls to tokens (related to password updates) fail
23:34 bodepd that just took me about 4 hours to figure out :(
23:37 bodepd I still have tons of operations that depend on v2, while I migrate to v3, how can I ensure that the v3 endpoint is used? (ie: where can I override /root/openrc)?
23:50 rhefner_ joined #puppet-openstack
23:51 tchaypo_ joined #puppet-openstack
23:55 bodepd I can override as an env var for now, but I guess the truth is that since the keystone types use /root/openrc, people playing with openstack should not be using this file

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary