Perl 6 - the future is here, just unevenly distributed

IRC log for #puppet-openstack, 2016-04-14

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:03 openstackgerrit Merged openstack/puppet-openstack-integration: Generate Self-Signed Cert with SubjectAltNames  https://review.openstack.org/305154
00:13 fawadkhaliq joined #puppet-openstack
00:51 openstackgerrit Emilien Macchi proposed openstack/puppet-cinder: Implement Cinder API WSGI support  https://review.openstack.org/287964
01:03 openstackgerrit Merged openstack/puppet-nova: Return database connection string validation  https://review.openstack.org/304740
01:03 openstackgerrit Merged openstack/puppet-nova: Start libvirt after installing it  https://review.openstack.org/304943
01:03 openstackgerrit Merged openstack/puppet-openstack-integration: run_tests: install selinux tools  https://review.openstack.org/304614
01:04 EmilienM mwhahaha: logs now <3
01:04 EmilienM I have so much pleasure to open them ahah
01:07 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: fernet: run exec with keystone_user  https://review.openstack.org/305545
01:08 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: scenario003: deploy keystone with fernet tokens  https://review.openstack.org/305451
01:15 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Puppetfile: add puppet-ovn module  https://review.openstack.org/305548
01:18 mwhahaha I know right? Not having to wait forever while the browser churns is awesone
01:18 EmilienM my firefox is so happy now
01:18 EmilienM it asks me to open logs all the time
01:18 EmilienM I'm going to read logs all night
01:19 openstackgerrit Merged openstack/puppet-ovn: Revise OVN package names  https://review.openstack.org/301442
01:34 openstackgerrit Xiaohua Yuan proposed openstack/puppet-trove: Add swift_service_type option to trove-guestagent.conf  https://review.openstack.org/304937
01:35 dmburmistrov joined #puppet-openstack
01:35 igajsin joined #puppet-openstack
02:04 fedexo joined #puppet-openstack
02:10 EmilienM ayoung: you around? I have issues with fernet
02:10 ayoung EmilienM, so do I
02:10 EmilienM ok so let me explain
02:10 ayoung no...is too much...let me sum up
02:11 EmilienM puppet-keystone is running keystone-manage fernet_setup
02:11 ayoung go on
02:11 ayoung ok
02:11 EmilienM we run the exec with 'keystone' user, it works fine on ubuntu, but on centos with RDO packaging I'm stuck with create_key_directory in keystone/token/providers/fernet/utils.py
02:11 EmilienM http://logs.openstack.org/51/305451/4/check/gate-puppet-openstack-integration-3-scenario003-tempest-centos-7/db4f899/logs/keystone/keystone.txt.gz#_2016-04-14_01_24_05_966
02:11 EmilienM maybe a bad permission in /etc/keystone in package?
02:11 ayoung SELinux?
02:11 EmilienM ah maybe, let me check if we have an aleter
02:12 EmilienM alert*
02:12 ayoung I don't know what context  puppet runs in
02:12 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: scenario003: deploy keystone with fernet tokens  https://review.openstack.org/305451
02:13 EmilienM ayoung: we'll see in a few ^ I rebased on top of a patch that will help in our CI to detect SElinux alerts, see https://review.openstack.org/#/c/304345/
02:13 ayoung EmilienM, cool
02:13 ayoung EmilienM, if I want to run a puppet module from git, what do I do?
02:13 EmilienM ayoung: where do you suggest to store fernet keys? in /etc?
02:13 ayoung I have the repo cloned
02:13 ayoung it seems to me fernet keys belong under var somewhere...
02:14 EmilienM ayoung: what do you want to do? run puppet?
02:14 ayoung EmilienM, I want to run this:
02:14 EmilienM I think mfisch did it in puppert-keystone in /etc/keystone
02:14 ayoung sudo puppet  resource keystone_federation_protocol --modulepath /home/heat-admin
02:14 ayoung yeah, he would
02:14 ducttape_ joined #puppet-openstack
02:14 mfisch what did I do?
02:14 ayoung that would have been my first take on it too
02:14 EmilienM mfisch: I have issue when running fernets on centos
02:14 ayoung mfisch, where to put fernet keys
02:14 EmilienM mfisch: http://logs.openstack.org/51/305451/4/check/gate-puppet-openstack-integration-3-scenario003-tempest-centos-7/db4f899/logs/keystone/keystone.txt.gz#_2016-04-14_01_24_05_966
02:15 ayoung In the past, things like that belonged in etc, but since they are updated on a regular basis...it might be more appropriate to treat them as data and put them in /var/
02:15 mfisch let me look at something
02:15 ayoung EmilienM, raise it on the mailing list.  I think I'd like some of the other crypto-savvy people to chime in
02:16 EmilienM why me?
02:16 ayoung Or I can it you want
02:16 EmilienM :P
02:16 mfisch ok
02:16 mfisch so
02:16 ayoung EmilienM, because I am still beating Fernet into submission code wise!
02:16 mfisch I do this in our own module
02:16 ayoung mfisch, what platform are you running on
02:16 mfisch http://paste.openstack.org/show/494013/
02:16 EmilienM mfisch: FYI I try to test fernet in scenario003 of our CI
02:17 mfisch EmilienM: stuff like that pastebin is what we're missing which is why I filed that bug
02:17 EmilienM mfisch: that snippet sucks
02:17 EmilienM why do you manage this dir?
02:17 EmilienM keystone/token/providers/fernet/utils.py does it for you
02:17 mfisch create_resources(::cirrus::profile::fernet::key, $fernet_keys)
02:17 mfisch thats how I drop my keys
02:17 EmilienM look create_key_directory L73
02:17 mfisch I dont use keystone to drop keys
02:17 EmilienM mhh ok
02:17 mfisch I'm on Ubuntu
02:17 EmilienM all works fine on Ubuntu
02:17 mfisch we store the keys in eyaml in hiera
02:18 mfisch rotated with a tool that posts them to gerrit
02:18 EmilienM mfisch: see https://review.openstack.org/#/c/305451/3
02:18 mfisch a weird workflow but it works
02:18 EmilienM mfisch: see CI results at patchset 3
02:18 mfisch EmilienM: good start
02:18 EmilienM we need to figure out if it's SElinux
02:18 EmilienM or if it's because we use /etc/keystone
02:18 mfisch I dont see CI
02:19 EmilienM or if because keystone/token/providers/fernet/utils.py does it wrong
02:19 EmilienM mfisch: yes, I had to rebase but look Jenkins results on PS 3
02:19 EmilienM mfisch: Patch Set 3: Verified-1
02:19 EmilienM mfisch: https://review.openstack.org/#/c/305451/3/manifests/keystone.pp
02:19 EmilienM the goal is to make it work out of the box
02:19 EmilienM without hacks
02:20 EmilienM mfisch: FYI http://paste.openstack.org/show/494013/ is useless
02:20 EmilienM mfisch: keystone/token/providers/fernet/utils.py does it for you
02:21 EmilienM mfisch: https://github.com/openstack/keystone/blob/master/keystone/token/providers/fernet/utils.py#L81
02:22 mfisch dirty secret here
02:22 mfisch we dont run keystone-manage fernet <anything>
02:22 EmilienM ayoung: I'll let you know if it's SElinux or packaging issue or /etc/keystone permissions
02:22 mfisch we could probably switch to doing so
02:22 EmilienM mfisch: oh ok
02:22 EmilienM like I said, I try to run it out of the box
02:22 EmilienM and right now it does not work on centos
02:23 EmilienM mfisch: can you +A https://review.openstack.org/#/c/304345/ please? it will really help
02:23 mfisch EmilienM: yes, I think thats why I filed that bug "fernet doesnt work out of the box" or similar
02:23 mfisch and yep
02:24 EmilienM mfisch: I'm fixing it
02:24 EmilienM mfisch: https://review.openstack.org/305545
02:24 EmilienM it's WIP but you can already review
02:26 mfisch k will look in a bit
02:26 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Revert "run_tests: stop mistral testing"  https://review.openstack.org/305561
02:28 openstackgerrit Matt Fischer proposed openstack/puppet-nova: Remove deprecated qpid config/classes  https://review.openstack.org/303877
02:29 openstackgerrit Matt Fischer proposed openstack/puppet-nova: Remove deprecated qpid config/classes  https://review.openstack.org/303877
02:31 ayoung mfisch, how do i run a local puppet module, not out of /etc/puppet but a users git repo?
02:33 EmilienM ayoung: with modulepath
02:33 ayoung EmilienM, what should it be?
02:33 EmilienM a sec
02:33 ayoung my git repo is
02:33 ayoung /home/heat-admin/puppet-keystone
02:34 EmilienM for example:
02:34 EmilienM puppet apply --modulepath=/root/dev/modules -e "include ntpd::server"
02:34 EmilienM you need to give the root of your modules
02:34 EmilienM but your module has to be without "puppet-"
02:34 EmilienM like ~/puppet/modules/keystone for example
02:34 EmilienM more doc here: https://docs.puppet.com/puppet/latest/reference/man/apply.html
02:35 ayoung OK so I can symlink that,
02:36 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Generate Self-Signed Cert with SubjectAltNames  https://review.openstack.org/305572
02:38 fawadkhaliq joined #puppet-openstack
02:39 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: run puppet with trace & tests options  https://review.openstack.org/305577
02:39 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: rabbitmq: use $::package_provider fact  https://review.openstack.org/305578
02:39 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: run_tests: uninstall epel-release  https://review.openstack.org/305581
02:42 EmilienM ayoung: it's not SElinux
02:42 EmilienM "found 0 alerts in /var/log/audit/audit.log"
02:42 ayoung ok
02:42 EmilienM let's try with /var/lib/keystone
02:43 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: scenario003: deploy keystone with fernet tokens  https://review.openstack.org/305451
02:46 fawadkhaliq joined #puppet-openstack
02:48 ayoung IOError: [Errno 13] Permission denied: '/var/log/keystone/keystone.log'
02:48 ayoung [heat-admin@overcloud-controller-0 ~]$
02:48 ayoung EmilienM, ^^
02:48 ayoung I just ran
02:48 ayoung keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
02:49 ayoung EmilienM, what user does Puppet run as?
02:53 EmilienM ayoung: root by default
02:53 EmilienM ayoung: https://review.openstack.org/305545
02:53 EmilienM I'm fixing that ^
02:53 EmilienM brb
02:55 EmilienM back
02:56 ayoung EmilienM, so running that as root succeeded. But its still my best guess
02:57 EmilienM ayoung: have you looked my patch?
02:57 EmilienM we don't want to run root
02:58 EmilienM if yes, that's a problem
02:58 ayoung EmilienM, I was looking at the error log
02:58 EmilienM because keystone-manage write logs in /var/log/keystone in root
02:58 EmilienM and because of that, db_sync will fail since we run it as keystone user and it won't be able to write in logs
02:58 EmilienM so if we run keystone-managerfernet in root, it breaks dbsync
02:58 EmilienM ayoung: ^
02:59 EmilienM IMHO running things in root is a big mistake.
02:59 EmilienM we have a keystone user, we have to use it
02:59 EmilienM otherwise it's a bug.
02:59 openstackgerrit Xiaohua Yuan proposed openstack/puppet-trove: Add datastore_registry_ext option to trove-guestagent.conf  https://review.openstack.org/305591
02:59 ayoung OK, so if you run  keystone-manager fernet  as keystone it should work?
02:59 ayoung then it really should not go in /etc
02:59 EmilienM that's the problem I have
03:00 EmilienM when I use keystone-manager fernet as keystone user with /etc it does not work
03:00 EmilienM now I'm trying with /var/lib
03:00 EmilienM I think it's permissions issue with /etc in packaging
03:00 EmilienM if /var/lib works, i'll propose to change the default
03:00 ayoung let's see...
03:00 ayoung that value is set in the config, right?
03:00 EmilienM ayoung: https://jenkins01.openstack.org/job/gate-puppet-openstack-integration-3-scenario003-tempest-centos-7/62/consoleFull
03:00 EmilienM it's running
03:01 EmilienM yes
03:01 EmilienM in keystone/init.pp
03:01 EmilienM you can find it.
03:01 ayoung key_repository = /var/lib/keystone/fernet-keys
03:02 EmilienM ayoung: that's not the default in puppet-keystone...
03:02 ayoung $ sudo su
03:02 ayoung [root@overcloud-controller-0 puppet-keystone]# su - keystone ls
03:02 ayoung This account is currently not available.
03:02 EmilienM I'm hacking it in our integration manifests for now.
03:02 ayoung yeah, jsut checking to see if it even works
03:03 ayoung puppet has no problem running as keystone?
03:03 EmilienM no...
03:04 EmilienM ayoung: have you looked https://review.openstack.org/305545 ?
03:04 EmilienM I'm asking puppet to run the exec with keystone user
03:04 ayoung nope
03:04 ayoung cool;
03:04 ayoung but I'm just trying from the CLI first
03:04 EmilienM but it does not work when using /etc
03:04 EmilienM so now, I'm testing with /var/lib
03:05 ayoung su - keystone -c "keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone"
03:05 ayoung lets see if I got something
03:05 ayoung # ls -la /var/lib/keystone/
03:05 ayoung total 12
03:05 ayoung drwxr-xr-x.  3 keystone keystone 4096 Apr 14 03:04 .
03:05 ayoung drwxr-xr-x. 70 root     root     4096 Apr 13 03:37 ..
03:05 ayoung drwx------.  2 keystone keystone 4096 Apr 14 03:04 fernet-keys
03:05 ayoung so, yeah, I think we want tha
03:06 openstackgerrit Merged openstack/puppet-openstack-integration: catch SElinux alerts in permissive mode  https://review.openstack.org/304345
03:07 ayoung sudo puppet resource keystone_config fernet_tokens/key_repository ensure=present value=/var/lib/keystone/fernet-keys
03:07 ayoung keystone_config { 'fernet_tokens/key_repository':
03:07 ayoung ensure => 'present',
03:07 ayoung value  => '/var/lib/keystone/fernet-keys',
03:07 ayoung }
03:07 * ayoung is getting dangerous
03:08 EmilienM excellent if it works
03:08 EmilienM https://jenkins01.openstack.org/job/gate-puppet-openstack-integration-3-scenario003-tempest-centos-7/62/consoleFull
03:08 EmilienM it works in our CI too
03:09 EmilienM let's see if it works for Ubuntu and I'll propose to change the default
03:11 ayoung EmilienM, you mean the default in upstream keystone?
03:11 EmilienM no
03:11 ayoung probably can't  That will break people
03:11 EmilienM in puppet-keystone
03:11 ayoung AH, just for Puppet..Ok.  Put me on the review if you do
03:11 EmilienM ayoung: I gave you link already.
03:12 ayoung EmilienM, we might need SELinux to say that directory is readable, too.
03:12 ayoung But I suspect we have it disabled right now
03:12 EmilienM our CI does not disable SElinux
03:12 ayoung Yeah, I have it permissive
03:12 EmilienM we are setting it in permissive and fail our jobs if there are alerts
03:13 EmilienM we don't ignore Selinux, we take it very seriously man
03:13 EmilienM I read the color book 10 times
03:13 openstackgerrit Babu Shanmugam proposed openstack/puppet-neutron: Add support for OVN plugin  https://review.openstack.org/301613
03:13 EmilienM jenkins is still rolling, let's see if there is an AVC about fernet
03:14 ayoung I think it is ok
03:14 ayoung just ran it with setenforce 1
03:20 EmilienM tempest is running
03:20 EmilienM we know in a few sec if selinux has issues
03:24 ayoung EmilienM, will we?
03:24 EmilienM yea
03:25 EmilienM tempest is running
03:25 ayoung Only if the Keystone server is set with Fernet as the token provider
03:25 EmilienM https://jenkins01.openstack.org/job/gate-puppet-openstack-integration-3-scenario003-tempest-centos-7/62/consoleFull
03:25 ayoung otherwise, it won't try to read the repo
03:25 EmilienM almost done
03:26 ayoung going to bed
03:26 EmilienM sealert is runnning
03:26 EmilienM you'll miss that
03:26 EmilienM it's hanging
03:26 EmilienM boom AVC
03:27 EmilienM damn
03:27 EmilienM type=AVC msg=audit(1460604324.871:3235): avc:  denied  { read } for  pid=12902 comm="httpd" name="keystone" dev="xvda1" ino=3670322 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:keystone_var_lib_t:s0 tclass=dir
03:27 ayoung So, we can probably put this in etc and relabel?
03:28 ayoung its not right, but to get this running...
03:28 EmilienM let's figure tomorrow
03:28 ayoung make the /etc/keystone/fernet director, change it so the keystone user can write to it
03:28 EmilienM it's late
03:28 ayoung yes it is
03:28 ayoung and Fernet is still broken anyway
03:28 EmilienM ahah
03:28 EmilienM ok, see you tomorrow
03:28 EmilienM and thanks for your support
03:28 EmilienM you rocks!
03:29 ayoung EmilienM, https://review.openstack.org/#/c/258650/
03:29 ayoung until that runs, we can't trust the we've shaken out all of the Fernet issues
03:29 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: fernet: make it working out of the box  https://review.openstack.org/305545
03:29 ayoung right now, it runs OK for Python 27, but there are fixes in that patch that probably should be pulled out into their own reviews
03:30 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: scenario003: deploy keystone with fernet tokens  https://review.openstack.org/305451
03:30 ayoung and I think it is killing all the caching of tokens, which will make people sad
03:30 ayoung so...yeah, another day
03:30 EmilienM wow
03:30 EmilienM ayoung: good night
03:34 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: stable/mitaka: bump mitaka  https://review.openstack.org/305597
03:34 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Generate Self-Signed Cert with SubjectAltNames  https://review.openstack.org/305572
03:35 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: run puppet with trace & tests options  https://review.openstack.org/305577
03:35 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: rabbitmq: use $::package_provider fact  https://review.openstack.org/305578
03:35 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: run_tests: uninstall epel-release  https://review.openstack.org/305581
03:43 openstackgerrit Babu Shanmugam proposed openstack/puppet-neutron: Add support for OVN plugin  https://review.openstack.org/301613
03:44 severion joined #puppet-openstack
03:55 ducttape_ joined #puppet-openstack
04:30 m3ntat joined #puppet-openstack
04:30 jayg|g0n` joined #puppet-openstack
04:32 bogdando joined #puppet-openstack
04:32 timfreund joined #puppet-openstack
04:39 blkperl joined #puppet-openstack
04:42 fawadkhaliq joined #puppet-openstack
04:49 rcernin joined #puppet-openstack
04:49 cgfbee joined #puppet-openstack
05:06 mjblack joined #puppet-openstack
05:20 jaosorior joined #puppet-openstack
05:37 openstackgerrit Marcus Furlong proposed openstack/puppet-heat: add missing num_engine_workers parameter  https://review.openstack.org/305614
05:37 openstackgerrit Merged openstack/puppet-tripleo: Refactor HAproxy and VIP creation.  https://review.openstack.org/305480
05:43 openstackgerrit Marcus Furlong proposed openstack/puppet-magnum: fix incorrect rabbit_userid parameter  https://review.openstack.org/295652
05:55 chandankumar joined #puppet-openstack
05:56 ducttape_ joined #puppet-openstack
06:00 markvoelker joined #puppet-openstack
06:00 v1k0d3n_ joined #puppet-openstack
06:04 tristanC_ joined #puppet-openstack
06:04 khappone joined #puppet-openstack
06:07 zeus- joined #puppet-openstack
06:10 mattymo joined #puppet-openstack
06:14 jmikolajczak joined #puppet-openstack
06:14 tenaglia joined #puppet-openstack
06:15 mdavidson joined #puppet-openstack
06:19 openstackgerrit Marcus Furlong proposed openstack/puppet-magnum: fix broken db sync  https://review.openstack.org/303903
06:23 cwolferh joined #puppet-openstack
06:24 openstackgerrit Marcus Furlong proposed openstack/puppet-magnum: fix broken db sync  https://review.openstack.org/303903
06:37 yottatsa joined #puppet-openstack
06:45 tesseract- joined #puppet-openstack
06:49 fawadkhaliq joined #puppet-openstack
06:50 jaosorior joined #puppet-openstack
06:52 davidmichaelkarr joined #puppet-openstack
07:01 dgurtner joined #puppet-openstack
07:04 simonmcc joined #puppet-openstack
07:06 bastelfreak joined #puppet-openstack
07:19 karimb joined #puppet-openstack
07:23 openstackgerrit Marcus Furlong proposed openstack/puppet-magnum: fix broken db sync  https://review.openstack.org/303903
07:23 dgurtner joined #puppet-openstack
07:27 mgould joined #puppet-openstack
07:34 jaosorior joined #puppet-openstack
07:46 openstackgerrit Merged openstack/puppet-tripleo: Add generic manifest for loadbalancer endpoints  https://review.openstack.org/302574
07:47 karimb joined #puppet-openstack
07:48 jaosorior joined #puppet-openstack
07:49 jaosorior joined #puppet-openstack
08:02 markvoelker joined #puppet-openstack
08:08 paramite joined #puppet-openstack
08:18 jistr joined #puppet-openstack
08:26 rmart04 joined #puppet-openstack
08:27 openstackstatus joined #puppet-openstack
08:29 openstackgerrit Merged openstack/puppet-tripleo: Add support for internal/admin endpoint TLS in HAProxy  https://review.openstack.org/303342
08:52 gfidente joined #puppet-openstack
08:52 v1k0d3n joined #puppet-openstack
08:53 permalac joined #puppet-openstack
09:09 mgould joined #puppet-openstack
09:11 hjensas joined #puppet-openstack
09:35 francois joined #puppet-openstack
09:37 openstackgerrit Athlan-Guyot sofer proposed openstack/puppet-keystone: Remove user/role prefetch to support multi-domain.  https://review.openstack.org/299301
09:40 rlaurika joined #puppet-openstack
09:40 _stowa joined #puppet-openstack
09:41 openstackgerrit Denis Egorenko proposed openstack/puppet-sahara: Enable Sahara testing on Ubuntu  https://review.openstack.org/305387
09:42 xiaohua joined #puppet-openstack
09:45 iberezovskiy iurygregory, as I saw, you've found a solution for cookiecutter. I had the same suspicions
09:45 holser_ joined #puppet-openstack
09:45 degorenko EmilienM, mwhahaha what am i did wrong?
09:45 degorenko mwhahaha, we fixed noop tests here: https://review.openstack.org/#/c/304036/
09:46 degorenko mwhahaha, and btw, why you +2 me with broken noop tests?
09:46 * degorenko slaps mwhahaha
09:47 paramite joined #puppet-openstack
09:50 tesseract- joined #puppet-openstack
09:51 mdavidson joined #puppet-openstack
09:53 iberezovskiy EmilienM, https://review.openstack.org/#/c/298893/ - Fuel CI is green :)
09:56 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-glance: Configure oslo related parameters using puppet-oslo module  https://review.openstack.org/304220
09:59 ducttape_ joined #puppet-openstack
09:59 igajsin left #puppet-openstack
10:01 jtomasek_ joined #puppet-openstack
10:04 markvoelker joined #puppet-openstack
10:13 openstackgerrit Marcos Fermín Lobo proposed openstack/puppet-ec2api: puppet-ec2api: Initial commit  https://review.openstack.org/305279
10:15 openstackgerrit Xiaohua Yuan proposed openstack/puppet-trove: Add Users/DBs related parameters to guestagent class  https://review.openstack.org/305717
10:22 jistr joined #puppet-openstack
10:29 kylo joined #puppet-openstack
11:01 openstackgerrit Merged openstack/puppet-ceph: repo: add support for CentOS SIG  https://review.openstack.org/304808
11:03 openstackgerrit Merged openstack/puppet-openstack-integration: repos/centos: deploy Ceph with SIG and get rid of EPEL  https://review.openstack.org/304809
11:05 rain joined #puppet-openstack
11:17 openstackgerrit Denis Egorenko proposed openstack/puppet-sahara: Enable Sahara testing on Ubuntu  https://review.openstack.org/305387
11:17 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-glance: Configure oslo related parameters using puppet-oslo module  https://review.openstack.org/304220
11:18 openstackgerrit Marcus Furlong proposed openstack/puppet-magnum: fix broken db sync  https://review.openstack.org/303903
11:19 openstackgerrit Denis Egorenko proposed openstack/puppet-openstack-integration: Enable Sahara integration job on Ubuntu  https://review.openstack.org/305764
11:19 openstackgerrit Marcus Furlong proposed openstack/puppet-magnum: fix broken db sync  https://review.openstack.org/303903
11:20 openstackgerrit Denis Egorenko proposed openstack/puppet-openstack-integration: Enable Sahara integration job on Ubuntu  https://review.openstack.org/305764
11:20 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-glance: Configure oslo related parameters using puppet-oslo module  https://review.openstack.org/304220
11:21 mnaser joined #puppet-openstack
11:25 derekh joined #puppet-openstack
11:27 johnmilton joined #puppet-openstack
11:30 openstackgerrit Marcus Furlong proposed openstack/puppet-magnum: fix broken db sync  https://review.openstack.org/303903
11:37 openstackgerrit Giulio Fidente proposed openstack/puppet-tripleo: Add ceph profiles  https://review.openstack.org/304675
11:49 jtomasek_ joined #puppet-openstack
11:52 openstackgerrit Matthew J Black proposed openstack/puppet-neutron: Added deprecation warning for lbaas agent.  https://review.openstack.org/305781
12:00 ducttape_ joined #puppet-openstack
12:01 delattec joined #puppet-openstack
12:05 markvoelker joined #puppet-openstack
12:05 mattymo Is anyone aware of horizon CSS/staticfiles issues with ubuntu packages?
12:05 iurygregory morning
12:05 mattymo if I don't collect/compress, it doesn't work.. if I do, it errors :(
12:10 Vinsh_ joined #puppet-openstack
12:13 mdavidson joined #puppet-openstack
12:14 markvoelker joined #puppet-openstack
12:16 tesseract- joined #puppet-openstack
12:21 mjblack mattymo: which release? mitaka?
12:23 iurygregory _ody EmilienM if you guys have time https://review.openstack.org/#/c/305279/
12:27 markvoelker joined #puppet-openstack
12:31 dprince joined #puppet-openstack
12:31 richm joined #puppet-openstack
12:32 mwhahaha degorenko: we rebroke noop with you policy change that you put into the aodh release notes change
12:32 degorenko mwhahaha, already got it and +2'ed your patches and +1 for library
12:32 mwhahaha And yea it was my bad on that one cause I thought the noop was still broken from the previous thing
12:33 mwhahaha So  we reverted and I fixed up the stuff :)
12:33 degorenko mwhahaha, nope :D noop tests were failed exactly with a new stuff
12:34 mwhahaha Yea I saw that later when maksim messaged me about it. So the fastest fix was to back out the aodh change since EmilienM was around.  It's all good now
12:37 openstackgerrit Denis Egorenko proposed openstack/puppet-openstack-integration: scenario003: enable application catalog service  https://review.openstack.org/250436
12:43 EmilienM hello
12:43 iberezovskiy hi
12:43 degorenko hi :)
12:43 chem yo
12:46 zeus joined #puppet-openstack
12:46 social joined #puppet-openstack
12:54 mflobo I raised this question http://lists.openstack.org/pipermail/openstack-dev/2016-April/092351.html Any immediate thought?
12:55 mflobo the topic is puppet-horizon and UI plugins
12:56 EmilienM that's a good question
12:57 EmilienM initially, we put everything in puppet-horizon (tuskar, murano ui)
12:57 EmilienM creating a module is really overkill I think
12:57 EmilienM maybe we can have horizon::plugin::murano
12:58 EmilienM maybe we can have horizon::plugin::tuskar
12:58 EmilienM maybe we can have horizon::plugin::foobar
12:58 mflobo EmilienM, you are right
12:58 EmilienM it would help to move our from init.pp a little
12:58 EmilienM move out*
12:58 degorenko EmilienM, +1 for this
12:58 EmilienM cool
12:59 mflobo EmilienM, but for other hand, if a lot of UI plugins need local_settings config parameter, we could overload puppet-horizon... no?
12:59 mflobo that's why this question came to me
13:00 EmilienM we can find a mechanism that allow to override the file easily
13:01 mflobo EmilienM, I like that option
13:03 morazi joined #puppet-openstack
13:03 EmilienM iurygregory: I think iberezovskiy reviewed it perfectly
13:04 EmilienM mattymo: https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1424042
13:04 openstack Launchpad bug 1424042 in horizon (Ubuntu) "openstack-dashboard-ubuntu-theme fails to install" [High,Fix released]
13:05 mjblack EmilienM: on the topic of horizon
13:06 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: stable/mitaka: bump mitaka  https://review.openstack.org/305597
13:06 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Generate Self-Signed Cert with SubjectAltNames  https://review.openstack.org/305572
13:06 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: run_tests: uninstall epel-release  https://review.openstack.org/305581
13:06 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: rabbitmq: use $::package_provider fact  https://review.openstack.org/305578
13:06 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: run puppet with trace & tests options  https://review.openstack.org/305577
13:06 mjblack horizon allows additional dashboards to be installed
13:10 ducttape_ joined #puppet-openstack
13:13 kbyrne joined #puppet-openstack
13:14 permalac_ joined #puppet-openstack
13:15 markvoelker_ joined #puppet-openstack
13:17 richm1 joined #puppet-openstack
13:17 duritong joined #puppet-openstack
13:18 pleia2 joined #puppet-openstack
13:18 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: repos/centos: deploy Ceph with SIG and get rid of EPEL  https://review.openstack.org/305847
13:18 finchd joined #puppet-openstack
13:19 timfreund joined #puppet-openstack
13:20 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: rdo: bump RDO to stable repository  https://review.openstack.org/304273
13:21 EmilienM degorenko: this is the crazy chain to have RDO GA repo working on stable/mitaka :-P
13:21 EmilienM see https://review.openstack.org/#/c/304273/ and all other patches
13:21 EmilienM I think it should work after that
13:22 EmilienM once we have GA repos in place, we can bump our master to Newton, RDO is ready and I contacted canonical and they have a Newton repo after the Summit
13:22 degorenko ack
13:22 EmilienM dmsimard: ^ fyi
13:23 degorenko EmilienM, i've tried to enable sahara https://review.openstack.org/305764 and https://review.openstack.org/305387
13:23 degorenko it is still unstable :(
13:23 degorenko already told to canonical guys
13:23 degorenko here is a new error
13:23 EmilienM yeah, we need to bump to stable repos
13:23 degorenko missed api paste file
13:23 EmilienM a new error??
13:23 degorenko :D yep
13:23 EmilienM will they fix it in Mitaka packaging?
13:25 degorenko EmilienM, yes, they will :D
13:26 tdb joined #puppet-openstack
13:26 tlbr joined #puppet-openstack
13:27 EmilienM degorenko: good news!!
13:28 degorenko possibly zigo should fix this too
13:29 mflobo iurygregory, I'll address iberezovskiy comments about puppet-ec2api today
13:30 EmilienM degorenko: iirc sahara is taken from debian, ubuntu does not touch it
13:30 EmilienM it's un multiverse iirc
13:30 degorenko EmilienM, canonical guys told me that they will fix it exactly in ubuntu
13:32 EmilienM cool
13:36 dmsimard EmilienM: yeah ok, newton is still very very broken
13:37 EmilienM yeah but we'll help
13:37 EmilienM once we get this RDO GA thing in stable/mitaka, I'll work on master/newton
13:37 dmsimard EmilienM: the review to track is https://review.openstack.org/#/c/304802/
13:37 dmsimard once that merges, we can move on to the next breaking point
13:38 EmilienM ah yeah, this one... sigh
13:39 openstackgerrit Valery Tschopp proposed openstack/puppet-neutron: add ipv6 options to neutron_subnet type  https://review.openstack.org/305859
13:40 dfisher joined #puppet-openstack
13:40 openstackgerrit Valery Tschopp proposed openstack/puppet-neutron: add ipv6 options to neutron_subnet type  https://review.openstack.org/305860
13:41 tdb joined #puppet-openstack
13:42 ducttape_ joined #puppet-openstack
13:45 openstackgerrit Marcos Fermín Lobo proposed openstack/puppet-ec2api: puppet-ec2api: Initial commit  https://review.openstack.org/305279
13:45 Vinsh joined #puppet-openstack
13:46 v1k0d3n_ joined #puppet-openstack
13:47 rmart04_ joined #puppet-openstack
13:50 dprince joined #puppet-openstack
13:51 dfisher joined #puppet-openstack
13:53 jayg joined #puppet-openstack
13:56 mattymo joined #puppet-openstack
13:56 iberezovskiy EmilienM, small question: since we are dropping https://review.openstack.org/#/c/302839/3/manifests/params.pp do we need to have them in cookiecutter?
13:57 EmilienM I don't think so
13:57 EmilienM it's in puppet-oslo now, right?
13:57 iberezovskiy yep
13:58 iberezovskiy so, should we leave params class empty (without params) or remove it totally? I'd prefer first variant
13:58 EmilienM why keeping them?
13:59 dkaigarodsev joined #puppet-openstack
14:00 openstackgerrit Denis Egorenko proposed openstack/puppet-openstack-integration: scenario003: enable application catalog service  https://review.openstack.org/250436
14:01 twm2016 joined #puppet-openstack
14:03 mdavidson joined #puppet-openstack
14:04 iberezovskiy just to have a template
14:05 mattymo EmilienM, !! thanks :) I just need openstack-dashboard-ubuntu-theme
14:05 mattymo for some reason the basic openstack-dashboard isn't enough and won't get css to work at all
14:05 GoozeyX joined #puppet-openstack
14:05 GoozeyX Emilien
14:06 GoozeyX i have a weird issue where horizon and keystones apache configs are overwriting eachother
14:06 iberezovskiy mattymo, I wish openstack-dashboard-ubuntu-theme was recommended package for openstack-dashboard
14:06 openstackgerrit Pradeep Kilambi proposed openstack/puppet-tripleo: Set defaultbranch for git-review to stable/mitaka  https://review.openstack.org/305879
14:06 mattymo iberezovskiy, fuel doesn't enable recommended packages
14:06 mattymo only deps
14:06 iberezovskiy mattymo, and according to apt config fuel installs recommended packages, do we change something?
14:06 iberezovskiy oh
14:07 mattymo APT::Install-Recommends "false";
14:07 mattymo I'll just add a trick to add this package early on
14:07 iberezovskiy can you point me to the manifests where it's configured?
14:07 mattymo setup_repositories.pp iirc
14:07 iberezovskiy thx
14:08 mwhahaha we turned it off because it installs a whole bunch of extra stuff for everything, if we need that package then we should explicitly add it
14:08 EmilienM GoozeyX: it should not. What does look like your manifest?
14:08 GoozeyX may i PM you ? ill paste manifest in there
14:09 ducttape_ joined #puppet-openstack
14:09 GoozeyX ill pastebin it
14:09 iberezovskiy heh, it explains one issue with our own horizon
14:09 EmilienM GoozeyX: no pm, all public
14:09 mwhahaha it shouldn't be a recommend if it's a required thing
14:10 GoozeyX http://pastebin.com/A2Jr3e8H
14:10 GoozeyX thats my horizon part
14:10 GoozeyX will paste keystone in a second
14:11 mattymo GoozeyX, we had an issue in Fuel where setting up apache would wipe all configs
14:11 mattymo then we would configure apache and horizon later
14:12 GoozeyX http://pastebin.com/FZuHm8cH
14:12 GoozeyX here are both pastest
14:12 GoozeyX pastes*
14:13 mattymo GoozeyX, it was fixed here: https://review.openstack.org/#/c/254647/
14:14 openstackgerrit Babu Shanmugam proposed openstack/puppet-neutron: Add support for OVN plugin  https://review.openstack.org/301613
14:15 mattymo GoozeyX, you should call ::apache with purge_configs => false
14:17 GoozeyX mattymo, i could try that thank you
14:17 openstackgerrit Emilien Macchi proposed openstack/puppet-cinder: Implement Cinder API WSGI support  https://review.openstack.org/287964
14:17 EmilienM degorenko: comment addressed ^
14:22 EmilienM mwhahaha: I have a serie of patches, if you have time
14:22 mwhahaha yea i've got a few
14:22 EmilienM so we can get both RDO & Ubuntu pin to stable repos
14:23 EmilienM https://review.openstack.org/#/c/305597/
14:23 mwhahaha i just merged that one
14:23 EmilienM basically https://review.openstack.org/#/q/status:open+project:openstack/puppet-openstack-integration+branch:stable/mitaka+owner:%22Emilien+Macchi+%253Cemilien%2540redhat.com%253E%22
14:24 EmilienM degorenko: ^
14:24 EmilienM thank you guys
14:28 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: repos: pin RDO to Newton & UCA to stable/mitaka  https://review.openstack.org/305886
14:33 EmilienM dmsimard: also trying ^
14:34 GoozeyX EmilienM, it appears that mattymo was right, its running like this now: http://pastebin.com/ju1EG1xQ and working
14:34 openstackgerrit Matt Fischer proposed openstack/puppet-trove: Remove nova_* options from guestagent  https://review.openstack.org/305890
14:34 EmilienM GoozeyX: you running puppet4?
14:34 GoozeyX not yet
14:35 GoozeyX currently finishing compiling up puppet agent 4 dependencies (cfacter) on aix
14:35 GoozeyX and then solaris package via opencsw
14:35 GoozeyX rolling out in june
14:38 EmilienM that's weird that you need those ->
14:38 EmilienM our CI does not have it
14:39 dfisher 11.2 has puppet in it already.  you don't need opencsw.
14:39 dfisher ah.  puppet 4.
14:39 dfisher ignore me.
14:44 GoozeyX it does?
14:44 GoozeyX let me check
14:45 mdorman joined #puppet-openstack
14:46 dfisher pkg search -r puppet
14:46 dfisher iirc, it's 3.6.2
14:46 dfisher it also has a bunch of solaris-specific providers and types in it
14:46 dfisher that we've tried to push back upstream
14:49 GoozeyX wait are you sure that 11.2 has puppet4 inside of it
14:49 dfisher no puppet 4 in solaris at all right now.
14:49 dfisher it's 3.6.2
14:49 GoozeyX that what i thought
14:52 openstackgerrit Emilien Macchi proposed openstack/puppet-tempest: venv: create venv & run pip in exec  https://review.openstack.org/305904
14:53 openstackgerrit Emilien Macchi proposed openstack/puppet-tempest: venv: create venv & run pip in exec  https://review.openstack.org/305904
14:53 ayoung joined #puppet-openstack
14:54 openstackgerrit Emilien Macchi proposed openstack/puppet-tempest: venv: create venv & run pip in exec  https://review.openstack.org/305904
14:58 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Revert "run_tests: stop mistral testing"  https://review.openstack.org/305561
15:00 dhollinger joined #puppet-openstack
15:00 degorenko EmilienM, ok, thanks
15:04 openstackgerrit Merged openstack/puppet-openstack-integration: Puppetfile: add puppet-ovn module  https://review.openstack.org/305548
15:04 openstackgerrit Merged openstack/puppet-openstack-integration: stable/mitaka: bump mitaka  https://review.openstack.org/305597
15:04 openstackgerrit Merged openstack/puppet-openstack-integration: run puppet with trace & tests options  https://review.openstack.org/305577
15:05 openstackgerrit Merged openstack/puppet-openstack-integration: Generate Self-Signed Cert with SubjectAltNames  https://review.openstack.org/305572
15:09 openstackgerrit Alex Schultz proposed openstack/puppet-openstack-cookiecutter: Switch tests to use rspec-puppet-facts  https://review.openstack.org/305467
15:11 openstackgerrit Marcos Fermín Lobo proposed openstack/puppet-ec2api: puppet-ec2api: Initial commit  https://review.openstack.org/305279
15:15 darkxploit joined #puppet-openstack
15:18 angdraug joined #puppet-openstack
15:24 dgurtner joined #puppet-openstack
15:29 openstackgerrit Lukas Bezdicka proposed openstack/puppet-tripleo: Fix comparison to control_virtual_ip  https://review.openstack.org/305928
15:29 openstackgerrit Lukas Bezdicka proposed openstack/puppet-tripleo: Add missing services ports to service_ports map  https://review.openstack.org/305929
15:35 mfisch EmilienM: any ideas why puppet-trove has no code to create a rabbit user? some other modules do, but not all
15:35 mfisch wondering what our policy was for that
15:37 ntaylor1781 Looks like fuel CI is having an issue: W: Failed to fetch http://mirror.yandex.ru/ubuntu/dists/trusty-updates/main/binary-amd64/Packages  Hash Sum mismatch
15:37 mfisch maybe that mirror is out of date?
15:38 EmilienM mfisch: we stopped managing rabbit resources
15:38 ntaylor1781 I'm pretty new to this, so I am reviewing the documentation for the CI tests.
15:38 openstackgerrit Lukas Bezdicka proposed openstack/puppet-tripleo: Remove individual service certificates  https://review.openstack.org/305942
15:38 mfisch EmilienM: I still see it in some modules
15:38 EmilienM mwhahaha: ^^^^about fuel CI
15:38 mfisch so I'm on my own for rabbit users?
15:38 EmilienM mfisch: which ones?
15:38 bookwar ntaylor1781: going to check
15:38 EmilienM mfisch: yes, rabbit users/permissions/vhosts: you're on your own.
15:39 mfisch sweet
15:39 mfisch thats easier
15:39 ntaylor1781 Thanks bookwar.
15:39 mfisch EmilienM: cinder does for one
15:39 mfisch mfischer@Matts-MBP:~/code/puppet/puppet-cinder (master)$ rgrep rabbitmq_ *
15:39 mfisch manifests/rabbitmq.pp:    rabbitmq_user { $userid:
15:39 mfisch manifests/rabbitmq.pp:    rabbitmq_user_permissions { "${userid}@${virtual_host}":
15:39 mfisch manifests/rabbitmq.pp:  rabbitmq_vhost { $virtual_host:
15:39 EmilienM we should drop it
15:39 EmilienM we dropped it for puppet-nova iirc
15:40 mfisch well if someone wants a low-hanging-fruit commit there is one ^
15:41 mfisch EmilienM: are we keeping the openstacklib resources for rabbit users?
15:41 mfisch or will those be dropped too
15:42 EmilienM we could drop it or at least send deprecations warnings
15:45 mfisch k
15:45 mfisch as long as thats the plan I wont use it
15:54 andreww joined #puppet-openstack
15:54 mwhahaha ntaylor1781 Needs a recheck, mirror issue. I'll do it in a bit
15:55 ntaylor1781 Thank you very much mwhahaha
15:56 mwhahaha ntaylor1781: what change was that
15:56 ntaylor1781 https://review.openstack.org/#/c/304903/2
15:57 mwhahaha i guess they are restarting jenkins so i'll do it after that
15:58 ntaylor1781 ahh ok. Thanks again.
15:58 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-cinder: Stop managing rabbit resources  https://review.openstack.org/305956
15:58 iberezovskiy mfisch ^
15:58 hjensas joined #puppet-openstack
15:58 hjensas joined #puppet-openstack
16:00 haplo37 joined #puppet-openstack
16:00 mfisch thx
16:00 iberezovskiy nova modules still has the same https://github.com/openstack/puppet-nova/blob/master/manifests/rabbitmq.pp
16:00 iberezovskiy s/modules/module
16:05 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-nova: Stop managing rabbit resources  https://review.openstack.org/305961
16:22 ayoung mfisch, Rabbit Users?
16:22 mfisch yeah I read your blog about separating them and permissions
16:22 mfisch good stuff
16:22 ayoung mfisch, we have a session on it in Austin
16:23 ayoung would love to hear the results of your pain there
16:23 ayoung mfisch, I think I might have a semi-elegant solution to X509 woes, too
16:23 mfisch yeah would love to talk rabbit permissions stuff
16:23 mfisch right now its too open
16:23 mfisch and too shared
16:24 ayoung mfisch, you doing TLS for rabbit?
16:24 mfisch not currently
16:24 mfisch also the default permissions for users are basically *.*
16:28 twm2016 mfisch: I would like to take that low-hanging-fruit commit, just do the same as here but for cinder right? https://review.openstack.org/#/c/305961/
16:29 mfisch yes that seems right
16:32 EmilienM lot of CI errors today on ubuntu
16:32 openstackgerrit Trevor McCasland proposed openstack/puppet-cinder: Stop managing rabbit resources  https://review.openstack.org/305974
16:33 EmilienM degorenko: like https://review.openstack.org/#/c/299301/
16:33 EmilienM failing because of glare
16:33 iberezovskiy twm2016, I guess you've missed https://review.openstack.org/#/c/305956/ :(
16:33 iberezovskiy twm2016, you can take manila module :)
16:33 degorenko EmilienM, w00t? :)
16:33 twm2016 ahh sorry.
16:35 twm2016 okay manila coming soon :)
16:37 EmilienM iberezovskiy, twm2016: that's sounds bad deprecated isn't?
16:38 EmilienM even if we were motivated to stop managing rabbitmq resources, we might want to deprecate it first
16:38 EmilienM what's what we did in puppet-nova iirc
16:38 iberezovskiy I saw 'drop' and did it :D
16:38 EmilienM well no
16:38 iberezovskiy np, I'll deprecate
16:38 EmilienM we did not do it in nova
16:38 EmilienM I thought we did :)
16:39 iberezovskiy let's do it!
16:39 EmilienM iberezovskiy: I suggest, we send a warning now, in every module that has a rabbitmq.pp
16:39 EmilienM warning('foobar::rabbitmq class is deprecated, it will be dropped in the next release.')
16:39 EmilienM and add a reno about it
16:40 EmilienM after Newton, in O, we'll rm the files and add a reno about it
16:40 iberezovskiy other logic should stay here?
16:40 EmilienM sounds like a plan?
16:40 EmilienM in Newton, yes, keep it, but send warning
16:40 iberezovskiy got it, ok
16:40 EmilienM we might have operators using it.
16:40 EmilienM iberezovskiy: thx a lot
16:44 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-nova: Deprecate managing rabbit resources  https://review.openstack.org/305961
16:46 openstackgerrit Merged openstack/puppet-trove: Remove nova_* options from guestagent  https://review.openstack.org/305890
16:47 kbyrne joined #puppet-openstack
16:47 openstackgerrit Jin Li proposed openstack/puppet-manila: Add Unit Tests for manila_config type  https://review.openstack.org/304955
16:47 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-nova: Deprecate managing rabbit resources  https://review.openstack.org/305961
16:49 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-nova: Deprecate managing of rabbitmq resources  https://review.openstack.org/305961
16:53 fawadkhaliq joined #puppet-openstack
16:54 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-cinder: Deprecate managing of rabbitmq resources  https://review.openstack.org/305956
16:55 EmilienM iberezovskiy: small comment ^
16:56 iberezovskiy EmilienM, everything else is ok?
16:56 EmilienM iberezovskiy: perfect
16:56 iberezovskiy great
16:57 openstackgerrit Trevor McCasland proposed openstack/puppet-manila: Deprecate managing of rabbitmq resources  https://review.openstack.org/305981
16:58 fawadkhaliq joined #puppet-openstack
17:00 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-nova: Deprecating the management of rabbitmq resources  https://review.openstack.org/305961
17:01 fawadkhaliq joined #puppet-openstack
17:01 openstackgerrit Merged openstack/puppet-oslo: Implement oslo::service define  https://review.openstack.org/305289
17:02 dprince joined #puppet-openstack
17:03 openstackgerrit Ivan Berezovskiy proposed openstack/puppet-cinder: Deprecating the management of rabbitmq resources  https://review.openstack.org/305956
17:15 openstackgerrit Merged openstack/puppet-magnum: fix broken db sync  https://review.openstack.org/303903
17:17 fawadk joined #puppet-openstack
17:17 _ducttape_ joined #puppet-openstack
17:18 markvoelker joined #puppet-openstack
17:20 GoozeyX joined #puppet-openstack
17:23 openstackgerrit Paul Belanger proposed openstack/puppet-aodh: Use properly syntax for OpenStack name  https://review.openstack.org/305989
17:23 openstackgerrit Trevor McCasland proposed openstack/puppet-nova: WIP: Add nova flavor provider  https://review.openstack.org/305463
17:24 twm2016 joined #puppet-openstack
17:25 fawadkhaliq joined #puppet-openstack
17:33 openstackgerrit Merged openstack/puppet-heat: Add Unit Tests for heat_config type  https://review.openstack.org/304881
17:33 jaosorior joined #puppet-openstack
17:34 timfreund joined #puppet-openstack
17:34 dprince joined #puppet-openstack
17:35 openstackgerrit Merged openstack/puppet-heat: Set oslo::policy in heat  https://review.openstack.org/305351
17:35 ayoung joined #puppet-openstack
17:37 mnaser joined #puppet-openstack
17:38 kbyrne joined #puppet-openstack
17:39 openstackgerrit Merged openstack/puppet-horizon: Added ensure_resource for python-memcache package.  https://review.openstack.org/305253
17:39 darkxploit joined #puppet-openstack
17:50 rlaurika joined #puppet-openstack
17:51 yolanda joined #puppet-openstack
17:51 fawadkhaliq joined #puppet-openstack
17:51 openstackgerrit Ivan Chavero proposed openstack/puppet-neutron: Add ml2 package requirement to neutron::plugins::ml2::mech_driver  https://review.openstack.org/306001
18:02 fawadkhaliq joined #puppet-openstack
18:04 openstackgerrit Merged openstack/puppet-neutron: Add Unit Tests for Neutron_config type  https://review.openstack.org/304836
18:05 openstackgerrit Merged openstack/puppet-swift: Add Unit Tests for Swift_config type  https://review.openstack.org/304804
18:06 openstackgerrit Merged openstack/puppet-openstack-integration: run_tests: uninstall epel-release  https://review.openstack.org/305581
18:06 dprince joined #puppet-openstack
18:09 fawadkhaliq joined #puppet-openstack
18:11 ducttape_ joined #puppet-openstack
18:12 ericksonsantos joined #puppet-openstack
18:16 finchd joined #puppet-openstack
18:17 kylo joined #puppet-openstack
18:22 fawadkhaliq joined #puppet-openstack
18:28 openstackgerrit Ivan Chavero proposed openstack/puppet-neutron: Add ml2 package requirement to neutron::plugins::ml2::mech_driver  https://review.openstack.org/306017
18:29 openstackgerrit Emilien Macchi proposed openstack/puppet-tempest: venv: create venv & run pip in exec  https://review.openstack.org/305904
18:35 chandankumar joined #puppet-openstack
18:48 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: repos: pin RDO to Newton & UCA to stable/mitaka  https://review.openstack.org/305886
18:56 rmart04 joined #puppet-openstack
19:08 ntaylor1781 If I have questions about fuel CI should I post them in #fuel-dev?
19:15 bookwar ntaylor1781: #fuel-dev or #fuel-infra
19:16 ntaylor1781 awesome thanks bookwar
19:16 iurygregory joined #puppet-openstack
19:18 iurygregory joined #puppet-openstack
19:21 openstackgerrit Merged openstack/puppet-openstack-integration: repos/centos: deploy Ceph with SIG and get rid of EPEL  https://review.openstack.org/305847
19:23 openstackgerrit Emilien Macchi proposed openstack/puppet-keystone: pki/fernet: write keystone-manage logs in new files  https://review.openstack.org/306044
19:23 EmilienM ayoung: ^
19:23 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: scenario003: deploy keystone with fernet tokens  https://review.openstack.org/305451
19:23 EmilienM ayoung: that's temporary while you do it in keystone
19:24 s0meone joined #puppet-openstack
19:27 s0meone Hey, i'm looking for a Puppet module which manages vm, networks, security groups, ... so basically a wrapper around heat. Is this a available? I took a look at https://wiki.openstack.org/wiki/Puppet but could find any suitable module :(
19:27 EmilienM s0meone: puppet-neutron is able to manage networks, subnets, routers
19:27 EmilienM s0meone: puppet-nova is (soon) able to manage security groups
19:28 EmilienM but we have nothing for VMs. You should consider using another tool for that
19:31 s0meone Great, thanks! :) As i like to develop Puppet modules myself. Is there a reason why there isn't a module which manages VMs?
19:32 ayoung EmilienM, thanks
19:32 EmilienM s0meone: nobody did it yet ;-) so please go ahead if you want it
19:33 s0meone ok ;) Perhaps i going to take a look at the way you already implemented networks, subnets, ... on the weekend. Lets see how much effort it would be to implement it
19:34 openstackgerrit Merged openstack/puppet-openstack-integration: rdo: bump RDO to stable repository  https://review.openstack.org/304273
19:44 openstackgerrit Merged openstack/puppet-glance: Use oslo module for messaging (rabbit) configuration  https://review.openstack.org/298893
19:47 kylo joined #puppet-openstack
19:54 openstackgerrit Emilien Macchi proposed openstack/puppet-tempest: venv: create venv & run pip in exec  https://review.openstack.org/305904
20:05 openstackgerrit Alex Schultz proposed openstack/puppet-openstack-integration: Add a function for generating action headers  https://review.openstack.org/306062
20:23 openstackgerrit Alex Schultz proposed openstack/puppet-openstack-integration: Add a function for generating action headers  https://review.openstack.org/306062
20:25 openstackgerrit Merged openstack/puppet-keystone: Remove user/role prefetch to support multi-domain.  https://review.openstack.org/299301
20:28 rmart04 joined #puppet-openstack
20:29 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Do not pre-install dependencies from OpenStack Infra  https://review.openstack.org/306068
20:30 EmilienM dmsimard: I'm sure it will fail... ^ or maybe  not?
20:30 dmsimard EmilienM: I did it for packstack and it worked fine
20:30 EmilienM nice
20:30 dmsimard however, you might need to do that for all of your projects ? beaker jobs and all ?
20:30 EmilienM we need to backport it until as far as we can lol
20:30 EmilienM yeah...
20:31 EmilienM that's why I did not want to do it until now
20:31 EmilienM dmsimard: that's a lot of patches
20:31 dmsimard hey
20:31 dmsimard it worked in devstack
20:31 EmilienM and backports
20:31 dmsimard it's okay, them stackalytics stats.
20:32 openstackgerrit Emilien Macchi proposed openstack/puppet-gnocchi: ceph: add ceph_secret option  https://review.openstack.org/305470
20:37 openstackgerrit Emilien Macchi proposed openstack/puppet-tempest: venv: create venv & run pip in exec  https://review.openstack.org/305904
20:37 openstackgerrit Pradeep Kilambi proposed openstack/puppet-tripleo: Add redis profile  https://review.openstack.org/304754
20:38 EmilienM can I have a review on https://review.openstack.org/#/c/287964/ please? (Cinder/WSGI) thanks
20:43 cdelatte joined #puppet-openstack
20:44 openstackgerrit Alex Schultz proposed openstack/puppet-openstack-integration: Add a function for generating action headers  https://review.openstack.org/306062
20:52 openstackgerrit Matthew J Black proposed openstack/puppet-keystone: Remove user/role prefetch to support multi-domain.  https://review.openstack.org/306075
20:57 openstackgerrit Alex Schultz proposed openstack/puppet-openstack-integration: Add a function for generating action headers  https://review.openstack.org/306062
21:00 openstackgerrit Trevor McCasland proposed openstack/puppet-nova: WIP: Add nova flavor provider  https://review.openstack.org/305463
21:01 nibalizer joined #puppet-openstack
21:01 nibalizer oh hello
21:01 mwhahaha hi2u
21:01 nibalizer is beaker working well for yall?
21:01 mwhahaha yea
21:02 nibalizer over in infra i'm seeing Installing google-api-client 0.9.5 -> Gem::InstallError: google-api-client requires Ruby version ~> 2.0.
21:02 nibalizer then ofc bunlder gives up and dies
21:02 mwhahaha link?
21:04 mwhahaha here's our dependencies that we use for all the modules: https://github.com/openstack/puppet-openstack_spec_helper/blob/master/puppet-openstack_spec_helper.gemspec
21:04 mwhahaha i would assume you might need to lock to a specific (older) version of something based on that error
21:04 EmilienM nibalizer: yeah, we don' thave Gemfiles anymore ^
21:05 nibalizer https://jenkins03.openstack.org/job/gate-openstackci-beaker-ubuntu-trusty/43/console
21:05 nibalizer EmilienM: nice
21:05 nibalizer okay well i guess ill look at it over in my corner
21:06 mwhahaha EmilienM: https://jenkins03.openstack.org/job/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-trusty/195/consoleFull if you ctrl+f for '----' the headers highlight nicely
21:06 EmilienM mwhahaha: nice :-D
21:06 EmilienM pimp my CI
21:08 mwhahaha nibalizer: was 0.9.5 released today?
21:08 mwhahaha i pulled up a beaker run from yesterday and we had 0.9.4
21:08 mwhahaha http://logs.openstack.org/05/305505/2/check/gate-puppet-aodh-puppet-beaker-rspec-ubuntu-trusty/5d54ee0/console.html
21:08 mwhahaha so we might need to pin that to < 0.9.4
21:08 twm2016 I just want to add I also got that error when I ran bundle install locally.
21:08 nibalizer 0.9.5 - April 14, 2016 (1.83 MB)
21:08 nibalizer mwhahaha: yep
21:09 mwhahaha that should have been a 1.0 :/
21:09 mwhahaha way to keep backwards compatibilities
21:09 * mwhahaha sighs
21:09 mwhahaha so our beaker is probably broken now
21:09 EmilienM yeah?
21:09 mwhahaha yea if google-api-client 0.9.5 requires >=ruby 2, our stuff will be broken
21:09 EmilienM not on centos
21:10 mwhahaha on trusty then
21:10 EmilienM 2016-04-14 20:38:22.267 | Gem::InstallError: google-api-client requires Ruby version ~> 2.0.
21:10 EmilienM yes it is ! ha !
21:10 mwhahaha they released it an hour ago
21:10 EmilienM https://jenkins01.openstack.org/job/gate-puppet-gnocchi-puppet-beaker-rspec-ubuntu-trusty/8/consoleFull
21:10 EmilienM the good news, is, we have one repo to patch
21:10 EmilienM mwhahaha: you want to do it?
21:11 mwhahaha i'm going and complaining to the google-api-ruby-client github
21:11 nibalizer 0.9.4 was last year and specified no ruby version
21:11 nibalizer 0.9.5 was today and specifies greater than 2
21:11 EmilienM lol
21:11 dgurtner joined #puppet-openstack
21:12 EmilienM they don't know anything about release management I guess
21:12 EmilienM mwhahaha: please complain
21:12 EmilienM I'm doing the pin
21:12 mwhahaha https://github.com/google/google-api-ruby-client/issues/397
21:12 nibalizer EmilienM: here you go https://twitter.com/nibalizer/status/720721471375601664
21:14 crinkle yay \o/
21:14 mwhahaha i swear if they yank it i'm going to punch someone
21:14 mwhahaha they better come out with a 0.9.6
21:14 crinkle probably should tell puppetlabs about this?
21:14 nibalizer yah
21:15 nibalizer im guessing we get that library through fog anyways
21:15 mwhahaha yea
21:15 crinkle there are a couple other dependencies that went to ruby >=2.0, we just make the beaker team pin them
21:15 nibalizer awesome yea
21:16 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack_spec_helper: pin google-api-client to 0.9.4  https://review.openstack.org/306085
21:16 EmilienM nibalizer, mwhahaha: nice!
21:18 kylo joined #puppet-openstack
21:20 EmilienM we have a new CI
21:20 EmilienM nibalizer as a service
21:20 mwhahaha :D
21:21 EmilienM so we have mfisch third party CI and nibalizer beaker CI
21:23 mfisch lol
21:24 nibalizer my ci is just the infra modules stuff
21:24 nibalizer i think im gonna turn off pcci any day now haha
21:24 bkero What's going to replace it?
21:25 nibalizer probably nothing?
21:25 nibalizer idunno I'm not maintaining it so it should probably be allowed to die
21:26 nibalizer sounds like dev_el_ops has beaker integration testing in docker on travis almost
21:27 twm2016 joined #puppet-openstack
21:27 dfisher _ody: somewhat daily ping for 8.0.0 tarballs :(
21:28 EmilienM 2016-04-14 21:26:00.779 | Installing google-api-client 0.9.4
21:28 EmilienM https://jenkins02.openstack.org/job/gate-puppet-openstack-spec-helper-beaker-rspec-centos-7/1/consoleFull
21:28 EmilienM the pin works
21:28 EmilienM dfisher: why are you using puppetlabs forge?
21:29 EmilienM I'm just curous
21:29 EmilienM curious*
21:29 dfisher i have to use tarballs
21:29 dfisher i can't use git
21:29 EmilienM dfisher: fyi, I'm working on tarballs in openstack infra
21:29 dfisher because lawyers.
21:29 dfisher forge/infra/launchpad, whatever
21:29 EmilienM so, soonish (tonight maybe), you'll have tarballs on tarballs.openstack.org
21:29 dfisher has to be tarballs and not git
21:29 dfisher perfect.  that works too
21:29 EmilienM built from master but also from tags
21:29 EmilienM I'm working on it
21:29 EmilienM and it will be automagic.
21:29 dfisher yay!  magic!
21:30 EmilienM dfisher: fyi, i'm only working on puppet-aodh tarball atm, once it works, i'll add all other ones
21:30 dfisher you're awesome.
21:30 EmilienM dfisher: consider it as WIP now, but working prob next week or so
21:31 EmilienM mfisch, crinkle: since you around, I'll let you +A https://review.openstack.org/#/c/306085/ once it's green thanks
21:32 EmilienM dmsimard: stop bindep things worked
21:32 EmilienM another CI patch to review please https://review.openstack.org/#/c/306068/
21:32 dmsimard EmilienM: yeah I guess the rdo-mitaka is still installed but bindep doesn't install all the stuff
21:33 EmilienM dmsimard: I think we drop it, isn't?
21:33 EmilienM dmsimard: in jjb macro
21:34 EmilienM dmsimard: https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/puppet-module-jobs.yaml#L83
21:35 EmilienM dmsimard: https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/macros.yaml#L320
21:35 dmsimard EmilienM: I know that
21:35 EmilienM cleaning rdo-release is enough?
21:35 dmsimard EmilienM: I mean it doesn't prevent rdo-release from being installed because that's done earlier
21:35 dmsimard rdo-release isn't part of bindep
21:35 dmsimard it's part of the slave bootstrap
21:35 EmilienM right
21:39 ducttape_ joined #puppet-openstack
21:39 openstackgerrit Pradeep Kilambi proposed openstack/puppet-tripleo: Add mongodb profiles  https://review.openstack.org/304780
21:44 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Do not pre-install dependencies from OpenStack Infra  https://review.openstack.org/306090
21:48 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack-integration: Do not pre-install dependencies from OpenStack Infra  https://review.openstack.org/306094
21:49 * EmilienM off 2 hours
21:54 rochaporto joined #puppet-openstack
21:55 mflobo joined #puppet-openstack
21:57 openstackgerrit Merged openstack/puppet-openstack_spec_helper: pin google-api-client to 0.9.4  https://review.openstack.org/306085
22:03 ntaylor1781 woot finally passed all tests! https://review.openstack.org/#/c/304903/
22:11 johnmilton joined #puppet-openstack
22:15 richm joined #puppet-openstack
22:20 ducttape_ joined #puppet-openstack
22:21 openstackgerrit Pradeep Kilambi proposed openstack/puppet-tripleo: Add ceilometer profiles  https://review.openstack.org/305143
22:35 mwhahaha hmm so our syntax jobs don't use ruby 1.9 they use ruby 2.0
22:35 mwhahaha how strange
22:35 * mwhahaha shrugs
22:36 mwhahaha but fuel lib lint jobs use ruby 1.9 so that broke with the google-api-client stuff
22:38 crinkle the syntax jobs are run on centos 7
22:39 ayoung joined #puppet-openstack
22:43 openstackgerrit Merged openstack/puppet-heat: add missing num_engine_workers parameter  https://review.openstack.org/305614
22:43 mwhahaha ah that would be it
22:44 mwhahaha versions are hard :(
22:58 johnmilton joined #puppet-openstack
23:08 openstackgerrit Emilien Macchi proposed openstack/puppet-openstack_spec_helper: pin google-api-client to 0.9.4  https://review.openstack.org/306180
23:09 EmilienM so this is the backport for mitaka ^
23:09 EmilienM but liberty CI us broken.. sigh
23:09 EmilienM I'll figure later . /me brb
23:26 openstackgerrit Merged openstack/puppet-aodh: Use properly syntax for OpenStack name  https://review.openstack.org/305989
23:45 openstackgerrit Merged openstack/puppet-openstack_spec_helper: pin google-api-client to 0.9.4  https://review.openstack.org/306180
23:59 kylo joined #puppet-openstack

| Channels | #puppet-openstack index | Today | | Search | Google Search | Plain-Text | summary