Perl 6 - the future is here, just unevenly distributed

IRC log for #puppet-openstack, 2016-02-12

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:08 mewald joined #puppet-openstack
00:14 openstackgerrit Sam Morrison proposed openstack/puppet-neutron: Support midonet type driver for ML2  https://review.openstack.org/278207
00:15 duritong joined #puppet-openstack
00:17 ducttape_ joined #puppet-openstack
00:18 baker joined #puppet-openstack
00:24 mewald joined #puppet-openstack
00:28 openstackgerrit Brandon Weeks proposed openstack/puppet-ceph: Bump allowed version of puppetlabs-concat  https://review.openstack.org/276969
00:31 johnmilton joined #puppet-openstack
00:36 nlahouti joined #puppet-openstack
00:38 sid14726 joined #puppet-openstack
00:40 mewald joined #puppet-openstack
00:47 baker joined #puppet-openstack
00:53 v1k0d3n joined #puppet-openstack
00:54 brandon joined #puppet-openstack
00:55 mewald joined #puppet-openstack
00:57 v1k0d3n joined #puppet-openstack
00:59 baker joined #puppet-openstack
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Updated defaults for zaqar::keystone::auth  https://review.openstack.org/279344
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Reflect provider change in puppet-openstacklib  https://review.openstack.org/279345
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/279346
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/279347
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/279348
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/279349
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/279350
01:11 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/279351
01:11 mewald joined #puppet-openstack
01:15 johnmilton joined #puppet-openstack
01:18 gildub joined #puppet-openstack
01:26 mewald joined #puppet-openstack
01:34 baker joined #puppet-openstack
01:42 mewald joined #puppet-openstack
01:50 baker joined #puppet-openstack
01:57 mewald joined #puppet-openstack
02:00 ducttape_ joined #puppet-openstack
02:03 v1k0d3n joined #puppet-openstack
02:11 sid14726 joined #puppet-openstack
02:13 mewald joined #puppet-openstack
02:19 baker joined #puppet-openstack
02:32 rahulait joined #puppet-openstack
02:49 brandon_ joined #puppet-openstack
03:14 ducttape_ joined #puppet-openstack
03:20 brandon joined #puppet-openstack
03:24 brandon joined #puppet-openstack
03:28 brandon joined #puppet-openstack
03:35 priteau joined #puppet-openstack
03:40 gildub joined #puppet-openstack
03:45 ducttape_ joined #puppet-openstack
04:15 rahulait joined #puppet-openstack
04:16 vinsh joined #puppet-openstack
04:22 nlahouti joined #puppet-openstack
04:29 brandon joined #puppet-openstack
04:29 sid14726 joined #puppet-openstack
04:32 nlahouti joined #puppet-openstack
04:32 rahulait joined #puppet-openstack
04:34 nlahouti1 joined #puppet-openstack
04:38 mewald joined #puppet-openstack
04:40 fedexo joined #puppet-openstack
04:49 cwolferh joined #puppet-openstack
04:53 mewald joined #puppet-openstack
05:00 ducttape_ joined #puppet-openstack
05:09 mewald joined #puppet-openstack
05:12 mgagne joined #puppet-openstack
05:18 nlahouti joined #puppet-openstack
05:19 baker joined #puppet-openstack
05:20 jaosorior joined #puppet-openstack
05:20 nlahouti1 joined #puppet-openstack
05:25 mewald joined #puppet-openstack
05:40 mewald joined #puppet-openstack
05:56 mewald joined #puppet-openstack
05:58 sid14726 joined #puppet-openstack
06:01 ducttape_ joined #puppet-openstack
06:03 rahulait joined #puppet-openstack
06:05 xingchao joined #puppet-openstack
06:06 jaosorior joined #puppet-openstack
06:11 jaosorior joined #puppet-openstack
06:11 mewald joined #puppet-openstack
06:14 rahulait joined #puppet-openstack
06:27 mewald joined #puppet-openstack
06:30 cwolferh joined #puppet-openstack
06:35 openstackgerrit narasimha18sv proposed openstack/puppet-nova: virsh commands fail for ceph due to libvirt service not running  https://review.openstack.org/279390
06:39 sid14726 joined #puppet-openstack
06:42 mewald joined #puppet-openstack
06:58 mewald joined #puppet-openstack
07:03 ducttape_ joined #puppet-openstack
07:04 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
07:05 openstackgerrit narasimha18sv proposed openstack/puppet-glance: Clearing openrc env values to avoid glance providers failing  https://review.openstack.org/279394
07:24 sid14726 joined #puppet-openstack
07:38 nlahouti joined #puppet-openstack
07:52 mewald joined #puppet-openstack
07:54 mewald I am trying to set up Ceph using puppet-ceph. The usecases give good examples, but I am trying to have MON and OSD on the same node. Using the example manifests I, of course, get a duplicate declaration error of Ceph::Key[client.bootstrap-osd]. What's the proper way to give the OSD access to the bootstrap key?
08:12 yottatsa joined #puppet-openstack
08:17 dgurtner joined #puppet-openstack
08:17 dgurtner joined #puppet-openstack
08:21 sid14726 joined #puppet-openstack
08:33 gfidente joined #puppet-openstack
08:33 gfidente joined #puppet-openstack
08:38 priteau joined #puppet-openstack
08:41 jpena joined #puppet-openstack
09:02 chem joined #puppet-openstack
09:04 ducttape_ joined #puppet-openstack
09:06 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
09:08 openstackgerrit narasimha18sv proposed openstack/puppet-nova: virsh commands fail for ceph due to libvirt service not running  https://review.openstack.org/279390
09:13 jtomasek joined #puppet-openstack
09:19 sid14726 joined #puppet-openstack
09:34 paramite joined #puppet-openstack
09:37 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
09:39 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
09:49 yottatsa joined #puppet-openstack
09:56 openstackgerrit Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/279444
10:00 IvanBerezovskiy joined #puppet-openstack
10:03 sid14726 joined #puppet-openstack
10:05 ducttape_ joined #puppet-openstack
10:06 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
10:07 dtantsur joined #puppet-openstack
10:08 dtantsur morning folks! is there some known problem with stable/liberty gate? my patch https://review.openstack.org/#/c/278916/ is hitting something weird, even though it did pass a couple of times
10:30 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
10:32 openstackgerrit joined #puppet-openstack
10:37 openstackgerrit narasimha18sv proposed openstack/puppet-nova: virsh commands fail for ceph due to libvirt service not running  https://review.openstack.org/279390
11:03 mewald joined #puppet-openstack
11:04 degorenko dtantsur, hi, i guess it's repo random problem
11:04 mewald I want to use puppet-ceph to install my ceph cluster. Some hosts are mons and osd at the same time. With the code provided in the use cases document, I get a duplicate resource entry for client.bootstrap-osd' - of course. What's the best way to do this?
11:04 dtantsur degorenko, I see, thanks. I'll keep rechecking then :)
11:05 degorenko mewald, hi, can you put full trace here or to some paste?
11:06 sid14726 joined #puppet-openstack
11:06 ducttape_ joined #puppet-openstack
11:06 openstackgerrit Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/279444
11:06 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
11:09 mewald degorenko: https://gist.github.com/mewald1/74f10a8ec6d1d7d85af5 https://gist.github.com/mewald1/77090af6ae67849c4953
11:10 mewald degorenko: Its actually quite simple: ceph::key with name "client.bootstrap-osd" is declared in mon.pp and osd.pp. But each time it is put into a different path
11:10 yottatsa joined #puppet-openstack
11:10 mewald I dont see how I can have the key have the same name but different parameters, as ceph::key does not provide a way to set the "name" variable as a parameter
11:11 * degorenko looking
11:12 degorenko mewald, if you're running these manifests in one run - you will have duplication error for class ceph too
11:13 mewald yeah right, I've been playing around with the code a bit. The current state is probably not the best to show for this question :)
11:14 degorenko mewald, also you can use different resource name
11:14 mewald Before I moved this to a common.pp but the problem with the ceph::key persists
11:14 degorenko for ceph::key
11:14 degorenko but then you need specify proper keyring_path parameter
11:14 mewald but will the key in the keyring file not have that name? I though ceph relies on the specific name of that key
11:14 degorenko let me check manifest
11:15 mewald degorenko: I think link 118 shows this
11:16 degorenko mewald, i'm not a ceph specialist. so, for osd and for mon ceph::key {'client.bootstrap-osd':} is doing different actions or same?
11:16 degorenko if same, you can use it in one catalog actually
11:17 degorenko just need to mix  both files to one
11:17 degorenko or they are running with different parameters in wrapper class?
11:17 mewald degorenko: its doing different things. For the mon it uses the default path somewhere in /etc/ceph/. For an OSD the use cases code puts in somewhere into /var/lib/ceph
11:18 degorenko oh, i see now
11:19 yolanda hi degorenko, i  am trying to test your patch , but i'm hitting a blocker before that. We are using rabbit under 5671 port, and https. Config works fine for neutron-server but seems is not picked by neutron-metadata-agent
11:19 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
11:20 yolanda that is causing connection to https://controller00.hpuseast.ic.openstack.org:9696/v2.0/networks.json to just hang, because rabbit not working on that port
11:20 dtantsur left #puppet-openstack
11:21 degorenko mewald, the faster way to avoid this - is two different puppet calls
11:22 degorenko yolanda, looks like another problem
11:22 degorenko not related to my patch
11:22 yolanda ah yes, just explaining the reason why i cannot test yet
11:22 yolanda i see that puppet-neutron sets rpc_backend to 'rabbit' as default, but in my neutron.conf the setting is rpc_backend=neutron.openstack.common.rpc.impl_kombu
11:23 mewald degorenko: what do you mean?
11:23 degorenko yolanda, may be it is by default from package?
11:23 yottatsa joined #puppet-openstack
11:23 yolanda degorenko, but puppet-neutron should handle that, set the config on the file?
11:23 degorenko mewald, like  puppet apply mon.pp && puppet apply osd.pp
11:24 degorenko yolanda, are you using current master of puppet-neutron?
11:24 yolanda puppet-neutron, liberty branch
11:24 mewald degorenko: I run this through puppetmaster and the node says "include mon" and "include osd"
11:24 degorenko mewald, ah :)
11:24 yolanda i'm debugging that, goint to try set the value explicitly
11:24 degorenko yolanda, may be you have some override in puppet side?
11:25 degorenko mewald, then it will be a little bit tricky
11:25 yolanda degorenko, i don't think so but i'll check again
11:25 bogdando joined #puppet-openstack
11:25 mewald degorenko: not the answer I wanted to hear ;)
11:25 degorenko yolanda, well,https://github.com/openstack/puppet-neutron/blob/stable/liberty/manifests/init.pp#L440
11:25 degorenko yolanda, kombu is the same for rabbit :)
11:25 mewald degorenko: I have no idea right now how to solve it
11:26 degorenko mewald, i have one solution for you
11:26 yolanda degorenko i see. Then i need to check why metadata is not listening to my settings for ssl and port
11:27 degorenko yolanda, probably yes, some problem with settings
11:27 degorenko mewald, how you are getting puppets to your node? Via git or only from puppetmaster?
11:27 mewald only puppetmaster
11:28 degorenko mewald, then we can hack puppets on master side
11:28 degorenko open this file: https://github.com/openstack/puppet-ceph/blob/master/manifests/key.pp
11:28 degorenko in your local directory
11:28 degorenko then we can add a new parameter, like: key_name = ${name}
11:29 degorenko and for all this file, you should replace ${name} -> ${key_name}
11:29 mewald yeah ok, I will do this in a fork and see if people want to pull it
11:29 degorenko then just use different names in your wrappers, but pass client.boostrap.osd for key_name
11:29 degorenko mewald, ceph is under gerrit now
11:30 degorenko you should use git review
11:30 degorenko if you want upload a new patch
11:30 yolanda degorenko if rabbit=kombu, then my settings are ok. But neutron-metadata not hearing that, maybe i'm hitting some bug on the neutron code
11:30 mewald ahh well, ok no idea how that works but I'll find out :)
11:30 mewald thanks man!
11:30 degorenko mewald, no problem
11:31 degorenko yolanda, what's difference between code yeasterday and today? or when you filed a bug? :)
11:31 yolanda degorenko, that i cheated rabbit, and enabled port 5672
11:31 yolanda i wanted to debug the issue today without cheating
11:31 degorenko 5672 is by default
11:31 yolanda degorenko yes, but we use ssl under 5671 port
11:31 degorenko oh
11:31 degorenko got it now
11:32 yolanda so 5672 is disabled
11:32 degorenko then you need pass 5671 to neutron
11:32 yolanda degorenko we do
11:32 yolanda rabbit-server, dhcp-agent etc work fine
11:32 degorenko any errors from metadata?
11:32 yolanda metadata-agent is the one that fails, i wonder where does it pick the settings from
11:33 yolanda 2016-02-12 11:29:32.161 38882 ERROR oslo.messaging._drivers.impl_rabbit [-] AMQP server 127.0.0.1:5672 closed the connection. Check login credentials: Socket closed
11:34 degorenko yolanda, hmm
11:35 degorenko yolanda, you can inspect metadata log file on running stage, if you have debug => it will show all config options
11:35 yolanda degorenko cool, i'll try that
11:40 degorenko chem, hey! :)
11:41 chem degorenko: hey
11:41 degorenko chem, way with array for properties for my patch will not work probable
11:41 degorenko munge not supports array
11:41 degorenko https://docs.omniref.com/ruby/gems/puppet/3.3.1/symbols/Puppet::Type::RelationshipMetaparam/munge
11:41 degorenko it's old version of puppet
11:41 degorenko but i guess here is nothing change
11:41 astupnikov joined #puppet-openstack
11:42 degorenko it works only for first item of arary
11:42 degorenko i don't know why
11:43 chem degorenko: I don't see the problem ?
11:43 degorenko munge do |value| takes only first item of array in my env
11:44 degorenko or i need move creating hash out of munge
11:44 degorenko hmmm
11:45 chem degorenko: give me 5min, I'm going to look into it
11:45 degorenko you have so many time as you need :)
11:48 yolanda <yolanda> degorenko so that was not the issue, when running from command line is discovered real one
11:48 yolanda <yolanda> SSLError: [Errno 336265225] _ssl.c:355: error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib
11:48 yolanda <yolanda> more issues with certs
11:49 degorenko ah, nice
11:49 degorenko then you probably need to switch without ssl :) and try it again
11:50 yolanda i need ssl :)
11:50 degorenko aonther services are good with it? only metadata is not working?
11:51 yolanda neutron fails silently
11:51 yolanda neutron-server
11:51 degorenko what's about another componetns?
11:51 rcarrillocruz joined #puppet-openstack
11:52 yolanda i think metadata agent was hit by some race, when i manually touched config file and restarted manually, it showed it was connected to 5671
11:53 degorenko but now you have ssl error, right?
11:55 yolanda degorenko yes, but i discovered the issue, was my fault
11:55 yolanda retrying
11:55 degorenko nice
11:58 openstackgerrit Maciej Relewicz proposed openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/279499
12:00 yolanda degorenko, we are still hitting the bug
12:00 yolanda Unable to find network with name 'InsecurePlatformWarning'". Retrying for 1 sec.
12:00 degorenko hm
12:00 degorenko on latest patch set/
12:00 degorenko ?
12:00 yolanda going to double check, but i'd say i applied correctly
12:01 openstackgerrit Merged openstack/puppet-ironic: [inspector] allow changing list of processing hooks  https://review.openstack.org/278916
12:02 yolanda degorenko yes, i have applied https://review.openstack.org/279111
12:03 degorenko yolanda, i will check my patch, after my testing env will be ready
12:04 mewald joined #puppet-openstack
12:07 ducttape_ joined #puppet-openstack
12:08 openstackgerrit Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/279444
12:11 cdelatte joined #puppet-openstack
12:42 chem degorenko: I have to go to lunch, but at first glance it seems unrelated to what you told me.  I need a closer look.
12:42 chem degorenko: humm .. I think I got it
12:42 chem degorenko: no
12:46 cdelatte joined #puppet-openstack
12:46 yolanda degorenko, thanks for looking into that
12:51 openstackgerrit Nikolay Starodubtsev proposed openstack/puppet-murano: Switch murano to use keystone API v3 by default  https://review.openstack.org/279444
12:53 johnmilton joined #puppet-openstack
12:57 chem degorenko: oki, I got it :)
12:58 chem degorenko: letting the comment in the review
12:58 degorenko chem, thanks :)
13:02 chem degorenko: done
13:04 degorenko chem, ah, so, validate and munge is applying to every item in separate, not to all items in one time. i got it now
13:04 dprince joined #puppet-openstack
13:04 chem chem: yeap, that's it :)
13:06 xingchao joined #puppet-openstack
13:07 ducttape_ joined #puppet-openstack
13:08 yolanda mm, degorenko, so seems to me that neutron-metadata-agent is missing some notify to restat on neutron.conf changes. The changes we do for rabbit, are not applied until i manually restart the service. Other services such as neutron-server are picking the config change just with puppet actions
13:11 _ducttape_ joined #puppet-openstack
13:14 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
13:15 degorenko yolanda, but we have this https://github.com/openstack/puppet-neutron/blob/master/manifests/agents/metadata.pp#L96
13:15 degorenko yolanda, sorry, master link, for liberty: https://github.com/openstack/puppet-neutron/blob/stable/liberty/manifests/agents/metadata.pp#L97-L98
13:15 EmilienM hello
13:16 degorenko hi :)
13:16 EmilienM it's friday !!!!!!
13:16 EmilienM don't break CI folks
13:16 degorenko :D
13:18 chem EmilienM: yo.
13:23 jpena_ joined #puppet-openstack
13:32 yolanda degorenko i see, but i had to restart manually in 3 consective deploys, not sure what is going on
13:32 yolanda going to update neutron.conf manually and apply puppet again to check if metadata restarts
13:32 degorenko yolanda, no
13:33 degorenko yolanda, this way will not work :)
13:33 degorenko yolanda, puppet should change config
13:33 degorenko and then will be restarted metadata
13:33 yolanda ah yes i mean, i update neutron.conf, so puppet overrides
13:33 yolanda then it shall trigger a restart
13:33 yolanda because the file changed right?
13:33 degorenko if puppet will change file - yes, will be triggered restart for all services
13:34 yolanda ok i mean that, so i can monitor the restarts
13:34 degorenko oh, yeah :)
13:39 yolanda Notice: /Stage[main]/Neutron/Neutron_config[DEFAULT/debug]/value: value changed 'True' to 'False'
13:39 yolanda Notice: /Stage[main]/Neutron::Agents::Dhcp/Service[neutron-dhcp-service]: Triggered 'refresh' from 1 events
13:39 yolanda Notice: /Stage[main]/Neutron::Server/Exec[neutron-db-sync]: Triggered 'refresh' from 1 events
13:39 yolanda Notice: /Stage[main]/Neutron::Server/Service[neutron-server]: Triggered 'refresh' from 1 events
13:39 yolanda weird
13:42 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: repos: bump RDO to a latest repo  https://review.openstack.org/278795
13:43 degorenko yolanda, hm, that's really strange
13:44 yolanda going to launch from scratch again
13:44 degorenko yolanda, can you post your manifest?
13:44 yolanda stable/liberty
13:44 yolanda for puppet-neutron
13:44 degorenko yolanda, i mean, common manifest, which calls all another
13:44 EmilienM metadata had a bug
13:44 degorenko which bug?
13:44 EmilienM https://bugs.launchpad.net/bugs/1544934
13:44 openstack Launchpad bug 1544934 in puppet-neutron "Metadata agent doesn't apply config after package installation" [High,In progress] - Assigned to Maciej Relewicz (rlu)
13:45 EmilienM you +2'ed the patch
13:45 yolanda oh that
13:45 EmilienM and I approved it, it will land in a few min
13:45 EmilienM we need to backport it I guess
13:45 degorenko it's another bug
13:45 degorenko EmilienM, we have problem with main neutron conf
13:45 EmilienM what kind?
13:45 yolanda it isn't restarting my service
13:46 degorenko we've changed neutron, but metadata wasn't restarted
13:46 degorenko neutron.con *
13:46 degorenko conf :)
13:46 EmilienM let me check
13:46 EmilienM https://github.com/openstack/puppet-neutron/blob/master/manifests/agents/metadata.pp#L96
13:46 EmilienM it should
13:47 yolanda saw that, i wonder what happens, but i had to restart manually. I'm trying a redeploy again to collect logs
13:49 openstackgerrit Jason Guiditta proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
13:50 EmilienM that's weird
13:51 openstackgerrit Giulio Fidente proposed openstack/puppet-ceph: Disable udev rules in ::osd for releases <= Hammer  https://review.openstack.org/276141
14:04 openstackgerrit Merged openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/279499
14:07 jaosorior joined #puppet-openstack
14:12 clayton- joined #puppet-openstack
14:15 xingchao joined #puppet-openstack
14:18 yottatsa joined #puppet-openstack
14:33 ayoung joined #puppet-openstack
14:35 ayoung OK...I need the simplest of examples using the keystone-user provider.  Say I want to do puppet apply myuserstuff.pp  what do I put in there?  How can I get creds out of hiera data?
14:35 EmilienM ayoung: I can write that for you, a sec
14:36 ayoung EmilienM, somehow I knew it would be you to the rescue yet again. Thanks.
14:37 ayoung EmilienM, I was looking at https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp#L11
14:37 ayoung I'm running this on the overcloud controller node, with an eye to running it from the undercloud via openstack overcloud deploy
14:39 EmilienM ayoung: liberty or mitaka?
14:39 ayoung EmilienM, um...I guess liberty, although I am doing this with upstream Tripleo, so Mitaka first?
14:40 EmilienM ok
14:41 EmilienM ayoung: chem wrote that https://github.com/openstack/puppet-keystone/blob/master/examples/v3_basic.pp
14:41 EmilienM it's a very good documentation for how to deploy users
14:41 EmilienM err not this one
14:41 EmilienM https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp
14:41 ayoung EmilienM, class { '::mysql::server': }  doesn't that install the keystone server?  I tried doing something like that before and did damage
14:42 EmilienM ayoung: wait, I'm writing a manifest for you that deploy all you need
14:42 ayoung OK
14:45 EmilienM ayoung: https://gist.github.com/EmilienM/d8f9d6cb6b87933ecac0
14:45 EmilienM at the end, feel free to add stuffs from https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp
14:46 ayoung EmilienM, what in gods green earth did you do there?
14:46 openstackgerrit Gael Chamoulaud proposed openstack/puppet-keystone: Add support for RabbitMQ connection heartbeat  https://review.openstack.org/279572
14:46 yolanda EmilienM, degorenko, i have more detailed logs of the metadata issue
14:46 yolanda Notice: /Stage[main]/Neutron/Neutron_config[DEFAULT/debug]/value: value changed 'True' to 'False'
14:46 yolanda Notice: /Stage[main]/Neutron::Agents::Dhcp/Service[neutron-dhcp-service]: Triggered 'refresh' from 1 events
14:46 yolanda Notice: /Stage[main]/Neutron::Db::Sync/Exec[neutron-db-sync]: Triggered 'refresh' from 1 events
14:46 yolanda Notice: /Stage[main]/Neutron::Server/Service[neutron-server]: Triggered 'refresh' from 2 events
14:46 yolanda Notice: Puppet::Type::Neutron_network::ProviderNeutron: Unable to complete neutron request due to non-fatal error: "Execution of '/usr/bin/neutron net-list --format=csv --column=id --quote=none' returned 1: /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:97: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more in
14:46 yolanda formation, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
14:46 yolanda InsecurePlatformWarning
14:46 yolanda /usr/lib/python2.7/dist-packages/urllib3/connection.py:255: SubjectAltNameWarning: Certificate for controller00.hpuseast.ic.openstack.org has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)
14:46 ayoung OK..this is a post-deploy-add-a-user simple thing.
14:46 yolanda SubjectAltNameWarning
14:46 yolanda Unable to establish connection to https://controller00.hpuseast.ic.openstack.org:9696/v2.0/networks.json". Retrying for 9 sec.
14:46 yolanda Notice: Finished catalog run in 45.99 seconds
14:46 yolanda so maybe is related again with ssl?
14:47 EmilienM yolanda: please use pastbins :-)
14:47 yolanda yep, sorry
14:47 ayoung EmilienM, I can;t believe I need to reference Apache in order to add a user.  So, where does that go?
14:47 ayoung EmilienM, to give more context:
14:47 ayoung Lets say a cluster has been up for a month or two
14:47 ayoung and now I need to add a new identity provider for the Federation user integration
14:48 degorenko yolanda, exactly
14:48 degorenko we have again issue with ssl
14:48 EmilienM ayoung: this manifest will deploy keystone for you
14:48 ayoung I need to make a bunch of Keystone class, and I need to reconfigure and restart Apache
14:48 EmilienM I thought you were asking for that
14:48 ayoung EmilienM, I don't want to deploy Keystone
14:48 EmilienM ok just read https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp then
14:48 ayoung Its up, it is running, I want to make calls that affect its statue
14:48 EmilienM it documents how to deploy keystone-users
14:48 ayoung EmilienM, OK if I run that I get errors, and where does the Hiera data come from?
14:49 EmilienM ayoung: it depends where you configured hieradata, are you running tripleo?
14:49 openstackgerrit Denis Egorenko proposed openstack/puppet-cinder: Replace defines for managing cinder types with providers  https://review.openstack.org/273513
14:49 ayoung EmilienM, yes, Tripleo
14:49 EmilienM ayoung: undercloud or overcloud?
14:49 ayoung EmilienM, lets make this super focues
14:49 ayoung overcloud, I want to add a single user
14:49 ayoung and I know nothing from Puppet
14:50 EmilienM ayoung: you'll need to patch overcloud_controller.pp I guess
14:50 ayoung EmilienM, no
14:50 EmilienM and the pacemaker manifest too
14:50 ayoung I can't do that
14:50 ayoung no
14:50 ayoung this needs to be something I apply after the fact
14:50 EmilienM ok I see
14:52 EmilienM dprince: what is the command to run puppet manually on overcloud again?
14:52 EmilienM dprince: and also, where can you edit the .pp file to add more bits?
14:53 EmilienM post deployment
14:53 yottatsa joined #puppet-openstack
14:53 openstackgerrit Denis Egorenko proposed openstack/puppet-openstack-integration: Switch creating cinder types to providers from define classes  https://review.openstack.org/275669
14:53 ayoung EmilienM, I'm guessing it is something like this
14:54 dprince EmilienM: we use heat stack-update to re-run puppet
14:54 ayoung puppet apply remove-all.pp --modulepath=modules --hiera_config=hiera/hiera.yaml --parser future
14:55 ayoung dprince, I need to develope the puppet module first, though
14:55 dprince EmilienM: if you want to manually run something you can shell into the node and find the generated manifest from Heat metadata
14:55 dprince EmilienM: and then run it w/ puppet apply manually
14:55 EmilienM ok
14:55 EmilienM but he'll need to load hieradata
14:55 dprince EmilienM: I think the .pp's are in /var/run/os-collect-config
14:56 ayoung I think it is all in /etc/puppet
14:56 dprince EmilienM: Yeah, we generate the hiera via os-colleect-config. So you could create a heat stack, or do a heat stack-update first which will fail. This would give you all the heira in /etc/puppet/hieradata/. Then you can manually exec a .pp via puppet apply
14:56 ayoung /etc/puppet/hieradata/
14:57 ayoung dprince, so, I have an overcloud deployed.  I have a bunch of stuff I want to do to it post deploy, including making Keystone calls and adding config for Apache.  I don't want to reinstall.
14:57 dprince ayoung: I use heat stack-update for that.
14:58 yottatsa joined #puppet-openstack
14:58 dprince ayoung: python-tripleoclient will drive the heat stack-update for you too. It autodetects if the stack exists or is an update
14:59 ducttape_ joined #puppet-openstack
15:00 ayoung dprince, you do see how someone who knows none of this technology might be slightly daunted with that as a starting point?  There is a slew of assumed knowledge here. I'd like to start with just getting a puppet module to run.  If I have to craft in data from a keystonerc file to start, I can do that.
15:00 ayoung then I can learn heat
15:00 ayoung and then I can learn tripleo
15:00 ayoung its too much to tackle at once
15:00 EmilienM degorenko: can you look https://review.openstack.org/#/c/278795/ again please?
15:01 degorenko done :) it was in my list of review
15:01 EmilienM thanks
15:03 ayoung EmilienM, ok,  let's start simple
15:03 ayoung I want to do puppet apply my_user.pp and at the end have a user in Keystonme
15:04 ayoung If I follow the exmaple you p[osted./.. I get
15:04 EmilienM it won't work
15:04 EmilienM because puppet will lookup in puppet catalog for keystone credentials
15:04 EmilienM that's why I wrote a manifest for you
15:04 ayoung puppet apply  /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp
15:04 ayoung Error: Puppet::Parser::AST::Resource failed with error ArgumentErropuppet apply  /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp
15:04 ayoung Error: Puppet::Parser::AST::Resource failed with error ArgumentError: Invalid resource type keystone_user at /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp:15 on node overcloud-controller-0.localdomain
15:04 ayoung r: Invalid resource type keystone_user at /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp:15 on node overcloud-controller-0.localdomain
15:05 ayoung right.  So I need to somehow include that manifest in my call
15:05 ayoung Let's assume I have Tripleo.  Where is the manifest stored?
15:05 EmilienM you need to follow what dprince suggestion
15:05 EmilienM dprince | EmilienM: I think the .pp's are in /var/run/os-collect-config
15:05 ayoung /var/run/os-collect-config/
15:06 ayoung /var/run/os-collect-config/ControllerDeployment.json.orig
15:06 ayoung but that is not a pp
15:06 ayoung " Then you can manually exec a .pp via puppet apply"
15:07 ayoung OK so let me trye...
15:07 dprince /var/lib/heat-config/heat-config-puppet
15:07 dprince ayoung: there
15:07 yottatsa joined #puppet-openstack
15:08 ayoung dprince, ok so....
15:08 dprince ayoung: /var/run/os-collect-config/ is for metadata from heat. Sorry I gave the wrong directory...
15:09 ayoung dprince, ok, so here is my strawman  puppet apply   --hiera_config=/var/lib/heat-config/heat-config-puppet   /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp
15:09 ayoung obviously wrong.
15:09 ayoung Invalid resource type keystone_user
15:09 dprince ayoung: just add that hiera file into your /etc/puppet/hiera.yaml config and run puppet apply <manifest>
15:10 dprince ayoung: also, in case you or anyone is interested this is the actual hook we use in TripleO to run puppet
15:10 dprince http://git.openstack.org/cgit/openstack/heat-templates/tree/hot/software-config/elements/heat-config-puppet/install.d/hook-puppet.py
15:11 ayoung " just add that hiera file into your /etc/puppet/hiera.yaml"  Ok looking in /etc/puppet/hiera.yaml  I see a data directory :yaml:
15:11 ayoung :datadir: /etc/puppet/hieradata
15:12 yottatsa joined #puppet-openstack
15:12 dprince ayoung: hiera.yaml defines how hieradata files, etc are loaded processed. https://docs.puppetlabs.com/hiera/3.0/configuring.html
15:13 ayoung dprince, this is the existing hiera.yaml.  http://fpaste.org/321816/45528996/  it looks like it knows about most of the op[enstack stuff already
15:14 dprince ayoung: yeah, so you could just append your new settings onto any file in the hieradata directory
15:14 jaosorior joined #puppet-openstack
15:14 dprince ayoung: and then run puppet apply
15:14 ayoung dprince, ah...or I could go through all the trouble to create a new dir and have it point to my file...I get it
15:16 yottatsa joined #puppet-openstack
15:16 samuelBartel joined #puppet-openstack
15:19 mdorman joined #puppet-openstack
15:19 ayoung EmilienM, dprince, OK, if I understand this correctly, I should not need any additional hiera data.  I should be using what was used to set up the overcloud already.  What I do need is someway to append on some configuration.
15:20 ayoung and by configuration, I mean call a puppet module
15:20 EmilienM ayoung: no need of hieradata. Just manifest code (in .pp)
15:20 ayoung So, the example as posted in keystone/examples can't be run directly
15:21 ayoung EmilienM, say I want to run /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp  just as is.  How would I do that?
15:21 openstackgerrit Emilien Macchi proposed openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/279597
15:21 EmilienM degorenko: backport ^
15:22 EmilienM dprince: ayoung does not want to modify hieradata but just add a resource in manifest (keystone_user)
15:22 ayoung to start. yeah
15:22 EmilienM ayoung: edit the .pp and run heat stack-update would do the job I think
15:23 EmilienM ayoung: the overcloud_controller.pp
15:23 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/279349
15:23 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/279348
15:23 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/279351
15:23 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/279350
15:23 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/279347
15:23 ayoung EmilienM, that was the example thing shardy pointed me at
15:23 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/279346
15:23 ayoung ok.. let's start there
15:23 EmilienM dprince: w00t :-) zaqar
15:23 EmilienM dprince: I'll review it this morning
15:24 ayoung EmilienM, http://docs.openstack.org/developer/heat/template_guide/software_deployment.html#configuring-with-puppet
15:24 EmilienM dprince: runnning mistral beaker jobs: https://jenkins03.openstack.org/job/gate-puppet-mistral-puppet-beaker-rspec-dsvm-centos7/23/console
15:24 ayoung so I go back to the undercloud stack node...
15:25 dprince EmilienM: nice
15:25 EmilienM dprince: mistral beaker are passing!!
15:25 ayoung dprince, EmilienM, what does he mean there by : "To specify configuration as puppet manifests the heat-config-puppet element is required to be on the built image, so Custom image script needs to be modified with the following:"
15:26 ayoung EmilienM, I was able to get http://docs.openstack.org/developer/heat/template_guide/software_deployment.html#configuring-with-scripts  to work, so I know I'm in the right vicinint
15:26 ayoung vicinity
15:27 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/279351
15:27 dprince EmilienM: the last commit shows how I've been testing this
15:27 dprince EmilienM: the acceptance test...
15:27 EmilienM dprince, degorenko: please review https://review.openstack.org/#/c/277209/
15:28 degorenko wow :) mistral
15:28 EmilienM ayoung: sorry I'm not the most helpful for tripleo, it's just I'm missing clue in that
15:28 ayoung EmilienM, this is close, though
15:29 ayoung EmilienM, the fact that there is no clear way to run the examples is troubling, though.
15:30 EmilienM ayoung: the examples are here to explain the code, but there are other exemples to deploy keystone
15:30 ayoung FOr example, an application on some remote system might need some keystone stuff.  how would you run puppet over there telling it to "add this user to keystone, this proejct and this role assignment"
15:31 ayoung EmilienM, should this be in a different puppet module?  Like we have the openstack common CLI?
15:31 dprince EmilienM: this might help give context to zaqar https://etherpad.openstack.org/p/tripleo-zaqar
15:31 jtomasek_ joined #puppet-openstack
15:39 openstackgerrit Merged openstack/puppet-openstack-integration: repos: bump RDO to a latest repo  https://review.openstack.org/278795
15:40 aimon joined #puppet-openstack
15:42 baker joined #puppet-openstack
15:43 dmsimard joined #puppet-openstack
15:44 EmilienM degorenko: can you -A and +A again please https://review.openstack.org/#/c/277209/ ?
15:44 EmilienM so zuul is triggered
15:44 degorenko done
15:47 yottatsa joined #puppet-openstack
15:47 rahulait joined #puppet-openstack
15:49 openstackgerrit Merged openstack/puppet-zaqar: Updated defaults for zaqar::keystone::auth  https://review.openstack.org/279344
15:56 openstackgerrit Merged openstack/puppet-zaqar: Reflect provider change in puppet-openstacklib  https://review.openstack.org/279345
16:02 dhollinger joined #puppet-openstack
16:02 EmilienM dmsimard: our CI is running super mega trunk now
16:03 EmilienM like the most recent commit I guess
16:03 EmilienM and all is fine, so far
16:03 EmilienM we also use tempest master
16:03 EmilienM (no pin)
16:07 baker_ joined #puppet-openstack
16:08 baker joined #puppet-openstack
16:12 openstackgerrit Emilien Macchi proposed openstack/puppet-tempest: Allow to test zaqar  https://review.openstack.org/279632
16:18 ayoung dmsimard, EmilienM, OK, forget hiera for the moment.  Say I am on an openstack controller node.  I can hard code anything I want.  I just want to run https://github.com/openstack/puppet-keystone/blob/master/examples/user_project_user_role_composite_namevar.pp  with puppet apply.  How do I do that?
16:18 ayoung Ignore the "it will get overwritten" or any other issue
16:19 dmsimard git clone puppet-keystone; puppet apply puppet-keystone/examples/user_project_user_role_composite_namevar.pp
16:19 dmsimard hm, actually not quite
16:19 ayoung dmsimard, so that gives an error
16:20 ayoung excatly!
16:20 dmsimard yeah, because it uses providers
16:20 ayoung dmsimard, it is already on the system,
16:20 ayoung in /etc/puppet....
16:20 dmsimard so do git clone puppet-keystone in /etc/puppet/modules/keystone <-- the keystone part is important, don't use puppet-keystone
16:20 dmsimard then you can do the puppet apply, probably
16:20 ayoung sudo puppet apply /etc/puppet/modules/keystone/examples/user_project_user_role_composite_namevar.pp
16:21 dmsimard if it doesn't work, going to need some output/logs to see what's wrong
16:21 ayoung http://paste.openstack.org/show/486845/
16:22 ayoung Hmmm ight be syntax
16:22 ayoung let me try commenting pieces out
16:22 dmsimard ayoung: it doesn't look like keystone_project exists
16:22 dmsimard https://github.com/openstack/puppet-keystone/tree/master/lib/puppet/provider
16:23 dmsimard do a find/replace keystone_project by keystone_tenant ?
16:24 ayoung dmsimard, right...commented that out
16:24 ayoung and now
16:25 ayoung Error: Invalid parameter user on Keystone_user[meanlinglesstitle] at /home/heat-admin/user_project_user_role_composite_namevar.pp:37 on node overcloud-controller-0.localdomain
16:25 ayoung Wrapped exception:
16:25 degorenko yolanda, i got env with ssl enabled. Going to debug your issue for neutron
16:25 ayoung It looks like it is trying to create a variable user_one but using the wrong syntax
16:25 dmsimard ayoung: so obviously that example doesn't work and needs to be looked at :p
16:25 ayoung dmsimard, I need a simple one that does work
16:25 yolanda degorenko thanks. On my latest runs, with self signed certs, i'm not reproducing that, maybe because i'm not getting those warnings now
16:26 degorenko yolanda, or my patch works :D
16:26 ayoung Error: No set of title patterns matched the title "user_one::project_one".
16:26 ayoung OK...
16:26 yolanda degorenko, even with the patch not applied now :(
16:27 ayoung dmsimard, this feels like V2.0 versus V3 Keystone API issues
16:27 degorenko yolanda, oh :D
16:27 dmsimard ayoung: maybe these can point you in the right direction: https://github.com/openstack/puppet-openstack-integration/blob/master/manifests/keystone.pp + https://github.com/openstack/puppet-keystone/blob/master/manifests/resource/service_identity.pp
16:28 yottatsa joined #puppet-openstack
16:28 dmsimard ayoung: the latter (service_identity) is what is used by the other puppet modules to create the different keystone resources for each project - i.e, https://github.com/openstack/puppet-gnocchi/blob/master/manifests/keystone/auth.pp
16:29 yolanda degorenko, can you still reproduce the issue?
16:29 ayoung dmsimard, OK...I added just a user with this
16:30 ayoung $ cat user.pp
16:30 ayoung keystone_user { 'user_one':
16:30 ayoung ensure => present,
16:30 ayoung domain => 'Default',
16:30 ayoung }
16:30 degorenko yolanda, i'm going to check that
16:30 ayoung sudo puppet apply user.pp
16:30 ayoung I was trying too hard.  And not reading the error messages
16:32 ayoung Warning: Scope(Class[Keystone::Federation::Shibboleth]): Can not configure Shibboleth in Apache on RedHat OS.Read the Note on this federation/shibboleth.pp
16:32 ayoung YAY!
16:32 ayoung Destroyed my Apache server again
16:34 openstackgerrit Merged openstack/puppet-openstack-integration: Revert "pin tempest to keep setuping heat roles"  https://review.openstack.org/279180
16:36 mjblack ayoung: looks like a simple fix for it is to have a defined yum repo for shibboleth and defined package for shibboleth
16:39 yottatsa joined #puppet-openstack
16:53 ayoung mjblack, well, except I really don't care about Shibboleth, but yes.  I suspect it is the Apache config that is the most different, though, not just the packaging
16:53 yottatsa joined #puppet-openstack
16:53 ayoung I'm going to leave that for now, I have what I need.  We asre going to be integrating this with a different server anyway, Keycloak, not SHib.
16:57 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Deploy MongoDB on scenario002  https://review.openstack.org/279668
16:57 dprince joined #puppet-openstack
16:58 openstackgerrit Keith Schincke proposed openstack/puppet-ceph: Add support for civetweb  https://review.openstack.org/254548
17:01 nlahouti joined #puppet-openstack
17:04 jaosorior joined #puppet-openstack
17:05 dhollinger joined #puppet-openstack
17:13 yottatsa joined #puppet-openstack
17:17 openstackgerrit joined #puppet-openstack
17:20 xarses joined #puppet-openstack
17:26 EmilienM dmsimard, dgurtner, xarses: so re- puppet-ceph/release: did you guys decide how/when to release the module?
17:27 haplo37 joined #puppet-openstack
17:34 fedexo joined #puppet-openstack
17:34 openstackgerrit Dmitry Tantsur proposed openstack/puppet-ironic: Create a separate database configuration for ironic-inspector  https://review.openstack.org/279695
17:34 dprince joined #puppet-openstack
17:54 xarses EmilienM: there appears to be a loose consensus to what, what we want to release, but no when
17:54 xarses s/what, what/what
17:54 IvanBerezovskiy left #puppet-openstack
18:12 EmilienM dprince: for zaqar testing in our integ jobs, do you want to see mongo or redis?
18:13 EmilienM we need something light and popular
18:14 dprince EmilienM: mongo is the best option
18:14 dprince EmilienM: most popular
18:14 dprince EmilienM: redis doesn't work w/ websockets
18:14 openstackgerrit Merged openstack/puppet-neutron: Metadata agent config should be applied after package installation  https://review.openstack.org/279597
18:15 dprince EmilienM: due to the fact that zaqar's redis driver doesn't support it yet
18:15 EmilienM dprince: cool cool
18:15 EmilienM I'm adding mongo do our CI
18:15 EmilienM see https://review.openstack.org/279668
18:15 EmilienM dprince: do we need replicaset though?
18:15 ayoung EmilienM, I am tracking on the puppet stuff now.  Thanks to you and dmsimard .  Looking at the Keystone module, it looks like there is no support for the federation calls besides identity provider.  In order to set up Federation, we need to make the followuing calls:
18:15 ayoung openstack mapping create
18:16 ayoung openstack federation protocol create
18:16 ayoung and I think that is it
18:16 EmilienM ayoung: do we don't do that I think
18:16 ayoung EmilienM, I didn't see any code that did that under /classes
18:16 EmilienM iurygregory, and chem did lot of work in federation
18:16 EmilienM feel free to ping them
18:17 aimon_ joined #puppet-openstack
18:17 ayoung EmilienM, just trying to learn how to do it myself
18:18 EmilienM ayoung: you know ruby? I don't.
18:18 EmilienM joking, we have bunch of providers
18:18 EmilienM you can take them as examples
18:19 EmilienM https://github.com/openstack/puppet-keystone/blob/master/lib/puppet/provider/keystone_identity_provider/openstack.rb
18:19 EmilienM is a good example
18:19 ayoung Ah
18:19 ayoung EmilienM, I was able to get the Identity provider part to run, and saw the Idp added to keystone
18:20 ayoung so I was trying to figure out how it calls the openstack CLI
18:22 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/279349
18:22 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/279348
18:22 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/279351
18:22 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/279350
18:22 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/279347
18:22 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/279346
18:26 openstack joined #puppet-openstack
18:39 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/279351
18:44 dprince EmilienM: I think we should do Apache wsgi support for zaqar too. It would be better to run the wsgi side there
18:45 dprince EmilienM: the zaqar-server process is useful too, but we seem to be moving the Apache for everything
18:47 openstackgerrit joined #puppet-openstack
18:58 ayoung dprince, so one thing that is tricky with Federation is the need for a mapping file. Typically we manage this as a separate file and use the command ex: openstack mapping create --rules /mapping_ipsilon_saml2.json ipsilon_mapping
18:59 ayoung How would this be expected to work with Puppet and Heat?
19:00 openstackgerrit Merged openstack/puppet-designate: Added parameters api_base_uri and enable_api_admin  https://review.openstack.org/273454
19:01 dprince ayoung: run that once per cluster? or once per machine?
19:02 ayoung dprince, well, once per backend datatbase for Keystone.  Is the Galera instance shared between them, or do they have their own?
19:02 dprince ayoung: it is shared
19:02 ayoung dprince, then once per cluster is sufficient
19:02 dprince ayoung: you can Exec a command with puppet
19:03 ayoung dprince, I meant how do we manage the mapping file.  It is json.
19:04 dprince ayoung: pass it in via a parameter?
19:05 ayoung dprince, so, I can figure out the puppet how to make the call (I think).  The questions is, since on additional puppet applies, there should be a check if something changes, how do you do that with an external resopurce like this.  I know you can do it for a flat file, but this is the data that is fed in to a command
19:06 dprince ayoung: we can create a file with puppet too
19:07 openstackgerrit Keith Schincke proposed openstack/puppet-ceph: Add support for civetweb  https://review.openstack.org/254548
19:07 dprince ayoung: so it goes like this. Heat parameter ==> hieradata ==> puppet writes the file ==> puppet runs the command
19:07 ayoung OK...
19:08 ayoung dprince, OK.  I've still got a lot to learn here, but that makes sense
19:09 baker joined #puppet-openstack
19:26 dmsimard joined #puppet-openstack
19:39 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/279351
19:39 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::websocket class  https://review.openstack.org/279746
19:39 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::wsgi class  https://review.openstack.org/279747
19:41 baker joined #puppet-openstack
19:46 baker joined #puppet-openstack
19:54 openstackgerrit Jason Guiditta proposed openstack/puppet-neutron: Add ensure_*aas_package booleans for ::neutron::server  https://review.openstack.org/272202
20:35 mgagne joined #puppet-openstack
20:35 dhollinger joined #puppet-openstack
20:53 brandon joined #puppet-openstack
20:57 openstackgerrit Merged openstack/puppet-openstack-integration: Puppetfile: bump apache to 1.8.x  https://review.openstack.org/277815
20:58 openstackgerrit Merged openstack/puppet-cinder: Add support for RabbitMQ connection heartbeat  https://review.openstack.org/279100
21:05 EmilienM dprince: I'll work on it
21:05 EmilienM for wsgi
21:08 dprince EmilienM: cool, I think flavio said the required python stub was already done
21:08 EmilienM good.
21:08 EmilienM I did that for mistral
21:08 EmilienM https://review.openstack.org/277223
21:08 openstackgerrit Colleen Murphy proposed openstack/puppet-keystone: Add keystone::disable_admin_token_auth class  https://review.openstack.org/256248
21:08 EmilienM dprince: can you review it please?
21:09 dprince EmilienM: oh nice
21:09 dprince EmilienM: sure
21:26 nlahouti joined #puppet-openstack
21:32 openstackgerrit Alex Schultz proposed openstack/puppet-trove: Add kombu_reconnect_delay option  https://review.openstack.org/279809
21:37 brandon_ joined #puppet-openstack
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server class  https://review.openstack.org/279349
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::messaging::mongodb  https://review.openstack.org/279348
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add acceptance spec for zaqar with mongo.  https://review.openstack.org/279351
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::server_instance class.  https://review.openstack.org/279350
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::wsgi class  https://review.openstack.org/279747
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::management::mongodb  https://review.openstack.org/279347
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Add zaqar::transport::websocket class  https://review.openstack.org/279746
21:45 openstackgerrit Dan Prince proposed openstack/puppet-zaqar: Implement zaqar::init class  https://review.openstack.org/279346
21:46 yolanda joined #puppet-openstack
21:47 openstackstatus NOTICE: The infrastructure team is taking gerrit offline for maintenance this afternoon, beginning at 22:00 utc. We should have it back online around 23:00 utc. http://lists.openstack.org/pipermail/openstack-dev/2016-February/086195.html
21:56 cwolferh joined #puppet-openstack
21:58 openstackgerrit Merged openstack/puppet-neutron: Change of PLUMgrid plugin package and addition of new parameters.  https://review.openstack.org/278522
21:59 openstackgerrit Merged openstack/puppet-neutron: Add support for RabbitMQ connection heartbeat  https://review.openstack.org/278962
22:07 openstackstatus NOTICE: Gerrit is offline for maintenacne until 23:00 utc
22:07 Topic for #puppet-openstack is now Gerrit is offline for maintenacne until 23:00 utc
22:08 cwolferh_ joined #puppet-openstack
22:20 angdraug joined #puppet-openstack
22:24 haplo37 joined #puppet-openstack
22:32 RichardRaseley joined #puppet-openstack
22:58 richm joined #puppet-openstack
23:08 openstackstatus NOTICE: Gerrit is offline for maintenance, ETA updated to 23:30 utc
23:08 Topic for #puppet-openstack is now Gerrit is offline for maintenance, ETA updated to 23:30 utc
23:11 johnmilton joined #puppet-openstack
23:35 baker joined #puppet-openstack
23:36 xarses_ joined #puppet-openstack
23:43 openstackstatus NOTICE: Gerrit is offline for maintenance, ETA updated to 23:59 utc
23:43 Topic for #puppet-openstack is now Gerrit is offline for maintenance, ETA updated to 23:59 utc
23:49 richm joined #puppet-openstack

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary