Re: [openstack-dev] [murano] Proposing Nikolai Starodubtsev for core

2015-09-09 Thread Filip Blaha

+1

On 09/08/2015 02:28 PM, Stan Lagun wrote:

+1

Sincerely yours,
Stan Lagun
Principal Software Engineer @ Mirantis


On Tue, Sep 1, 2015 at 3:03 PM, Alexander Tivelkov 
> wrote:


+1. Well deserved.

--
Regards,
Alexander Tivelkov

On Tue, Sep 1, 2015 at 2:47 PM, Victor Ryzhenkin
> wrote:

+1 from me ;)

-- 
Victor Ryzhenkin

Junior QA Engeneer
freerunner on #freenode

Включено 1 сентября 2015 г. в 12:18:19, Ekaterina Chernova
(efedor...@mirantis.com ) написал:


+1

On Tue, Sep 1, 2015 at 10:03 AM, Dmitro Dovbii
> wrote:

+1

2015-09-01 2:24 GMT+03:00 Serg Melikyan
>:

+1

On Mon, Aug 31, 2015 at 3:45 PM, Kirill Zaitsev
> wrote:

I’m pleased to nominate Nikolai for Murano core.

He’s been actively participating in development
of murano during liberty and is among top5
contributors during last 90 days. He’s also
leading the CloudFoundry integration initiative.

Here are some useful links:

Overall contribution:
http://stackalytics.com/?user_id=starodubcevna
List of reviews:

https://review.openstack.org/#/q/reviewer:%22Nikolay+Starodubtsev%22,n,z
Murano contribution during latest 90 days
http://stackalytics.com/report/contribution/murano/90

Please vote with +1/-1 for approval/objections

-- 
Kirill Zaitsev

Murano team
Software Engineer
Mirantis, Inc


__
OpenStack Development Mailing List (not for usage
questions)
Unsubscribe:

openstack-dev-requ...@lists.openstack.org?subject:unsubscribe



http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Serg Melikyan, Senior Software Engineer at Mirantis, Inc.
http://mirantis.com  |
smelik...@mirantis.com 

+7 (495) 640-4904
, 0261
+7 (903) 156-0836 


__
OpenStack Development Mailing List (not for usage
questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe



http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe


http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__

OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe


http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe

Re: [openstack-dev] [Congress] [Murano] multiple numbers of arguments for table

2015-08-19 Thread Filip Blaha

Hi Tim

We use fixed count of columns. So I believe there should not be any bad 
impact of this change.


Regards
Filip

On 08/18/2015 11:22 PM, Tim Hinrichs wrote:

Hi all,

We're contemplating a small syntax change in the Congress policy 
language and wanted to see if it would cause anyone problems.


Currently you can write rules that give a single table differing 
numbers of columns.  In the following example, the 'error' table has 
both 1 column and 2 columns.


error(vm) :- blah blah
error(vm, net) :- blah blah

We're contemplating removing this flexibility and making every table 
have a fixed number of columns.  (We only support differing numbers of 
columns in very special cases anyway.)


Would this cause any problems?  Murano team?

Thanks,
Tim



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [congress] [murano] Congress jenkins job is failing

2015-08-19 Thread Filip Blaha

Hi Tim

I will try it once  it merges. Thanks

Filio

On 08/18/2015 05:46 PM, Tim Hinrichs wrote:

Hi Filip,

I just submitted a revert of the problematic change.  Once it merges, 
all should be well again.  Sorry for the trouble.


Tim

On Tue, Aug 18, 2015 at 7:57 AM Tim Hinrichs t...@styra.com 
mailto:t...@styra.com wrote:


Looks like we merged a database schema change without the
migration script.  I'm on it.  (We'll get our tempest tests
running in gate again ASAP.)

Tim

On Tue, Aug 18, 2015 at 7:36 AM Filip Blaha filip.bl...@hp.com
mailto:filip.bl...@hp.com wrote:

Hi Congress team.

Our jenkins job testing integration congress and murano is
failing.
Congress fails to start on some DB error [1] . Does anyone
know what
could be the problem?

[1]

http://logs.openstack.org/08/211608/3/check/gate-murano-congress-devstack-dsvm/db1b682/logs/screen-congress.txt.gz#_2015-08-18_10_17_05_033

Thanks
Filip


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [congress] [murano] Congress jenkins job is failing

2015-08-18 Thread Filip Blaha

Hi Congress team.

Our jenkins job testing integration congress and murano is failing. 
Congress fails to start on some DB error [1] . Does anyone know what 
could be the problem?


[1] 
http://logs.openstack.org/08/211608/3/check/gate-murano-congress-devstack-dsvm/db1b682/logs/screen-congress.txt.gz#_2015-08-18_10_17_05_033


Thanks
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [murano] [congress] murano congress integration test - trusts

2015-07-15 Thread Filip Blaha

Hi all

our congress integration tests were  broken by the change [1] (trusts 
enabled by default).  However I suspect problem could be with 
initialization congress client [2] or in python-congressclient. Any 
ideas about that? Thanks


[1] https://review.openstack.org/#/c/194615/
[2] 
https://github.com/openstack/murano/blob/6ac473fabbc2d2e1f3ed4c3d36be6439c1d6c2cd/murano/engine/client_manager.py#L102


Regards
Filip



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [murano] [congress] Congress needs to fetch environments from all tenants.

2015-07-13 Thread Filip Blaha

Hi Dolph

Thanks for idea. Is this approach used somewhere for similar use-case I 
described? If so please point it out. Thanks


Filip

On 07/10/2015 04:57 PM, Dolph Mathews wrote:
How about using domain-based role assignments in keystone and 
requiring domain-level authorization in policy, and then only 
returning data about the collection of tenants that belong to the 
authorized domain? That way you don't have an API that violates 
multi-tenant isolation, consumable only by cloud operators.


On Wed, Jul 8, 2015 at 6:27 AM, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hi all,

I started implement bp [1]. Problem is that congress needs data
about environments from all tenants but murano API lists only
environments of user's current tenant. We decided to ipmplement it
similarly like listing servers in nova where is query parameter
all_tenants=true for that (user must be admin) I have 2 questions
about that:

1) Are there any security concerns about this approach?
2) Has someone better idea how to implement this?

[1]
https://blueprints.launchpad.net/murano/+spec/murano-api-all-tenants-search

Regards
Filip



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [murano] [congress] Congress needs to fetch environments from all tenants.

2015-07-13 Thread Filip Blaha

Hi Tim,

The change was already merged to master. Withe next release of 
python-muranoclient it can be used in Congress.


Regards
Filip

On 07/08/2015 03:57 PM, Tim Hinrichs wrote:

There are two things to remember here.

1) When you configure the Congress datasource driver to talk to 
Murano, you choose which user rights Congress should use.  If you need 
to get all of the tenants data, you want to choose an admin user for 
the Murano driver.  Personally I always use admin users so that I can 
write policy over everything.  Typically we think of Congress as an 
admin tool.


2) As you point out, if the Murano driver doesn't provide 
all_tenants=true argument when it makes the API call into Murano, it 
won't get all the data for all the tenants; it'll only get the data 
for the user you provided in (1).  Ideally whether all_tenants=true 
would be a datasource configuration option, but it's not today.  The 
datasource drivers I've looked at all use all_tenants=true.


Tim




On Wed, Jul 8, 2015 at 5:16 AM Kirill Zaitsev kzait...@mirantis.com 
mailto:kzait...@mirantis.com wrote:


1) This does raise a security concern. We can however cover it
with a separate policy-based permission, that would check if a
user can view all tenants. nova seem to do so, see:

https://github.com/openstack/nova/blob/4209d0140774adf3e162b7bde3cbd6b417065dd5/etc/nova/policy.json#L13

2) Will give it some thought, but it does seem like an ok practice.

-- 
Kirill Zaitsev

Murano team
Software Engineer
Mirantis, Inc

On 8 Jul 2015 at 14:44:51, Filip Blaha (filip.bl...@hp.com
mailto:filip.bl...@hp.com) wrote:


Hi all,

I started implement bp [1]. Problem is that congress needs data
about
environments from all tenants but murano API lists only
environments of
user's current tenant. We decided to ipmplement it similarly like
listing servers in nova where is query parameter all_tenants=true
for
that (user must be admin) I have 2 questions about that:

1) Are there any security concerns about this approach?
2) Has someone better idea how to implement this?

[1]
https://blueprints.launchpad.net/murano/+spec/murano-api-all-tenants-search


Regards
Filip



__

OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [murano] shellcheck all .sh scripts in murano-deployment

2015-06-10 Thread Filip Blaha
+1, nice idea. Shell script are not easy to review - large files, not 
covered by unit tests. Any automatic tool could be beneficial.


Regards
Filip

On 06/09/2015 09:58 PM, Kirill Zaitsev wrote:
Folks, I’ve got another proposal, mainly to the guys, who deal with CI 
and test jobs daily.


What would you say about adding a job to murano-deployment, that would 
launch shellcheck http://www.shellcheck.net/about.html against all .sh 
files?


I use it, when reviewing .sh scripts (well, actually my vim does it 
for me =P) and although It has some excessive checks I find it quite 
useful.


We could also add a similar job to murano-apps, since they use shell 
scripts quite often.


Any objections to this idea?


--
Kirill Zaitsev
Murano team
Software Engineer
Mirantis, Inc


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [murano] shellcheck all .sh scripts in murano-deployment

2015-06-10 Thread Filip Blaha

Thanks for comment and suggestion!

there is also shutil2 framework for unit testing over shell scripts. We 
shall consider it whether it could bring us value for the effort. I 
personally have no strong opinion about that. Little contradiction to my 
previous mail:-)


Regards
Filip



On 06/10/2015 03:34 PM, Jeremy Stanley wrote:

On 2015-06-10 13:48:26 +0200 (+0200), Filip Blaha wrote:

+1, nice idea. Shell script are not easy to review - large files, not
covered by unit tests. Any automatic tool could be beneficial.

It's worth noting that just because your shell scripts don't have
their own validation tests doesn't mean they can't. For example see
the test-features.sh and test-functions.sh scripts in the
https://git.openstack.org/cgit/openstack-infra/devstack-gate/ repo,
making sure we maintain a contract on things like branch fallback
logic which is easy to subtly break if not tested.



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] Nominating Filip Blaha for murano-core

2015-06-03 Thread Filip Blaha
Great thanks for your votes! Thanks for trust in this challenging role. 
I don't know what to say more :-)


Regards
Filip

On 06/02/2015 05:17 PM, Serg Melikyan wrote:

Filip, my congratulations! Welcome!

On Tue, Jun 2, 2015 at 5:34 PM, Stan Lagun sla...@mirantis.com 
mailto:sla...@mirantis.com wrote:


+1

Sincerely yours,
Stan Lagun
Principal Software Engineer @ Mirantis


On Tue, Jun 2, 2015 at 9:25 AM, Serg Melikyan
smelik...@mirantis.com mailto:smelik...@mirantis.com wrote:

Folks, I'd like to propose Filip Blaha to core members of
Murano team.

Filip is active member of our community and he maintains a
good score
as contributor:
http://stackalytics.com/report/users/filip-blaha

Existing Murano cores, please vote +1/-1 for the addition of
Filip to
the murano-core.
--
Serg Melikyan, Senior Software Engineer at Mirantis, Inc.
http://mirantis.com | smelik...@mirantis.com
mailto:smelik...@mirantis.com


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Serg Melikyan, Senior Software Engineer at Mirantis, Inc.
http://mirantis.com http://mirantis.com/ | smelik...@mirantis.com 
mailto:smelik...@mirantis.com


+7 (495) 640-4904, 0261
+7 (903) 156-0836


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] [Mistral] SSH workflow action

2015-05-11 Thread Filip Blaha

Hi Stan

we wanted interact with murano applications from mistral. Currently 
there is no support in mistral how to execute scripts on VM via murano 
agent (maybe I miss something). We noticed std.ssh mistral action so we 
consider SSH as one of the options. I think that it is not good idea due 
to networking obstacles I just wanted to confirm that. Thanks for 
pointing out Zaquar I didn't know about it.


Filip


On 05/10/2015 04:21 AM, Stan Lagun wrote:

Filip,

If I got you right the plan is to have Murano application execute 
Mistral workflow that SSH to VM and executes particular command? And 
alternative is Murano-Mistral-Zaquar-Zaquar agent?
Why can't you just send this command directly from Murano (to Murano 
agent on VM)? This is the most common use case that is found in nearly 
all Murano applications and it is battle-proven. If you need SSH you 
can contribute SSH plugin to Murano (Mistral will require similar 
plugin anyway). The more moving parts you involve the more chances you 
have for everything to fail



Sincerely yours,
Stan Lagun
Principal Software Engineer @ Mirantis


On Fri, May 8, 2015 at 11:22 AM, Renat Akhmerov 
rakhme...@mirantis.com mailto:rakhme...@mirantis.com wrote:


Generally yes, std.ssh action works as long as network
infrastructure allows access to a host using specified IP, it
doesn’t provide anything on top of that.


 On 06 May 2015, at 22:26, Fox, Kevin M kevin@pnnl.gov
mailto:kevin@pnnl.gov wrote:

 This would also probably be a good use case for Zaqar I think.
Have a generic run shell commands from Zaqar queue agent, that
pulls commands from a Zaqar queue, and executes it.
 The vm's don't have to be directly reachable from the network
then. You just have to push messages into Zaqar.

Yes, in Mistral it would be another action that puts a command
into Zaqar queue. This type of action doesn’t exist yet but it can
be plugged in easily.

 Should Mistral abstract away how to execute the action, leaving
it up to Mistral how to get the action to the vm?

Like I mentioned previously it should be just a different type of
action: “zaqar.something” instead of “std.ssh”. Mistral engine
itself works with all actions equally, they are just basically
functions that we can plug in and use in Mistral workflow
language. From this standpoint Mistral is already abstract enough.

 If that's the case, then ssh vs queue/agent is just a Mistral
implementation detail?

More precisely: implementation detail of Mistral action which may
not be even hardcoded part of Mistral, we can rather plug them in
(using stevedore underneath).


Renat Akhmerov
@ Mirantis Inc.


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] [Mistral] SSH workflow action

2015-05-11 Thread Filip Blaha

Hi

there is VPN mechanism in neutron we could consider for future how to 
get around these networking obstacles if we would like to use direct SSH.


1) every private created by murano would create VPN gateway on public 
interface of the router [1]


neutron vpn-service-create --name myvpn --description My vpn service 
router1 mysubnet


2) any service like mistral which needs directly access VM via SSH (or 
other protocols) would connect to that VPN and then it could directly 
access VM on its fixed IP


This mechanism would probably resolve network obstacles. But it requires 
more effort to analyse it.


[1] https://wiki.openstack.org/wiki/Neutron/VPNaaS/HowToInstall

Filip

On 05/08/2015 10:22 AM, Renat Akhmerov wrote:

Generally yes, std.ssh action works as long as network infrastructure allows 
access to a host using specified IP, it doesn’t provide anything on top of that.



On 06 May 2015, at 22:26, Fox, Kevin M kevin@pnnl.gov wrote:

This would also probably be a good use case for Zaqar I think. Have a generic run 
shell commands from Zaqar queue agent, that pulls commands from a Zaqar queue, and 
executes it.
The vm's don't have to be directly reachable from the network then. You just 
have to push messages into Zaqar.

Yes, in Mistral it would be another action that puts a command into Zaqar 
queue. This type of action doesn’t exist yet but it can be plugged in easily.


Should Mistral abstract away how to execute the action, leaving it up to 
Mistral how to get the action to the vm?

Like I mentioned previously it should be just a different type of action: 
“zaqar.something” instead of “std.ssh”. Mistral engine itself works with all 
actions equally, they are just basically functions that we can plug in and use 
in Mistral workflow language. From this standpoint Mistral is already abstract 
enough.


If that's the case, then ssh vs queue/agent is just a Mistral implementation 
detail?

More precisely: implementation detail of Mistral action which may not be even 
hardcoded part of Mistral, we can rather plug them in (using stevedore 
underneath).


Renat Akhmerov
@ Mirantis Inc.


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] [Mistral] SSH workflow action

2015-05-11 Thread Filip Blaha

Stan,

At the beginning we considered whether we could implement action on a 
murano application via mistral workflow. We thought that it could be 
beneficial to use workflow engine to implement some non-trivial action 
e.g. reconfiguration of some complex application within murano 
environment. Of course there would be disadvantages like dependency on 
mistral. I would recommend to discuss it later on some meeting (IRC, 
hangouts or summit) with Radek to explain use-cases better.


Filip

On 05/11/2015 10:44 AM, Stan Lagun wrote:

Filip,

 Currently there is no support in mistral how to execute scripts on 
VM via murano agent


Mistral can call Murano application action that will do the job via 
agent. Actions are intended to be called by 3rd party systems with 
single HTTP request


Sincerely yours,
Stan Lagun
Principal Software Engineer @ Mirantis


On Mon, May 11, 2015 at 11:27 AM, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hi

there is VPN mechanism in neutron we could consider for future how
to get around these networking obstacles if we would like to use
direct SSH.

1) every private created by murano would create VPN gateway on
public interface of the router [1]

neutron vpn-service-create --name myvpn --description My vpn
service router1 mysubnet

2) any service like mistral which needs directly access VM via SSH
(or other protocols) would connect to that VPN and then it could
directly access VM on its fixed IP

This mechanism would probably resolve network obstacles. But it
requires more effort to analyse it.

[1] https://wiki.openstack.org/wiki/Neutron/VPNaaS/HowToInstall

Filip


On 05/08/2015 10:22 AM, Renat Akhmerov wrote:

Generally yes, std.ssh action works as long as network infrastructure 
allows access to a host using specified IP, it doesn’t provide anything on top 
of that.



On 06 May 2015, at 22:26, Fox, Kevin Mkevin@pnnl.gov  
mailto:kevin@pnnl.gov  wrote:

This would also probably be a good use case for Zaqar I think. Have a generic 
run shell commands from Zaqar queue agent, that pulls commands from a Zaqar 
queue, and executes it.
The vm's don't have to be directly reachable from the network then. You 
just have to push messages into Zaqar.

Yes, in Mistral it would be another action that puts a command into Zaqar 
queue. This type of action doesn’t exist yet but it can be plugged in easily.


Should Mistral abstract away how to execute the action, leaving it up to 
Mistral how to get the action to the vm?

Like I mentioned previously it should be just a different type of action: 
“zaqar.something” instead of “std.ssh”. Mistral engine itself works with all 
actions equally, they are just basically functions that we can plug in and use 
in Mistral workflow language. From this standpoint Mistral is already abstract 
enough.


If that's the case, then ssh vs queue/agent is just a Mistral 
implementation detail?

More precisely: implementation detail of Mistral action which may not be 
even hardcoded part of Mistral, we can rather plug them in (using stevedore 
underneath).


Renat Akhmerov
@ Mirantis Inc.


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:openstack-dev-requ...@lists.openstack.org?subject:unsubscribe  
mailto:openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] [Mistral] SSH workflow action

2015-05-07 Thread Filip Blaha
Thanks for confirmation, that trying direct from mistral ssh to VM via 
fixed IP is not good idea.


Btw. It would probably not work even if mistral run on the same network 
node hosting the router for the tenant because neutron creates separate 
network namespace (ip netns qrouter-x) for each router and VMs are 
accessible only from that namespace not from default.


Filip


On 05/06/2015 06:31 PM, Georgy Okrokvertskhov wrote:



On Wed, May 6, 2015 at 9:26 AM, Fox, Kevin M kevin@pnnl.gov 
mailto:kevin@pnnl.gov wrote:


If your Mistral engine is on the same host as the network node
hosting the router for the tenant, then it would probably work
there are a lot of conditions in that statement though... Too many
for my tastes. :/

While I dislike agents running in the vm's, this still might be a
good use case for one...

This would also probably be a good use case for Zaqar I think.
Have a generic run shell commands from Zaqar queue agent, that
pulls commands from a Zaqar queue, and executes it.

The vm's don't have to be directly reachable from the network
then. You just have to push messages into Zaqar.

From Murano's perspective though, maybe it shouldn't care. Should
Mistral abstract away how to execute the action, leaving it up to
Mistral how to get the action to the vm? If that's the case, then
ssh vs queue/agent is just a Mistral implementation detail? Maybe
the OpenStack Deployer chooses what's the best route for their cloud?

Thanks,
Kevins


+1 for MQ.

That is the path which proved itself to be working in most of the cases.

-1 for ssh as this is a big headache.

Thanks,
Gosha


From: Filip Blaha [filip.bl...@hp.com mailto:filip.bl...@hp.com]
Sent: Wednesday, May 06, 2015 8:42 AM
To: openstack-dev@lists.openstack.org
mailto:openstack-dev@lists.openstack.org
Subject: [openstack-dev]  [Murano] [Mistral] SSH workflow action

Hello

We are considering implementing  actions on services of a murano
environment via mistral workflows. We are considering whether mistral
std.ssh action could be used to run some command on an instance.
Example
of such action in murano could be restart action on Mysql DB service.
Mistral workflow would ssh to that instance running Mysql and run
service mysql restart. From my point of view trying to use SSH to
access instances from mistral workflow is not good
idea but I would like to confirm it.

The biggest problem I see there is openstack networking. Mistral
service
running on some openstack node would not be able to access
instance via
its fixed IP (e.g. 10.0.0.5) via SSH. Instance could accessed via ssh
from namespace of its gateway router e.g. ip netns exec
qrouter-... ssh
cirros@10.0.0.5 mailto:cirros@10.0.0.5 but I think it is not
good to rely on implementation
detail of  neutron and use it. In multinode openstack deployment it
could be even more complicated.

In other words I am asking whether we can use std.ssh mistral
action to
access instances via ssh on theirs fixed IPs? I think no but I would
like to confirm it.

Thanks
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Georgy Okrokvertskhov
Architect,
OpenStack Platform Products,
Mirantis
http://www.mirantis.com http://www.mirantis.com/
Tel. +1 650 963 9828
Mob. +1 650 996 3284


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] [Mistral] SSH workflow action

2015-05-07 Thread Filip Blaha
yes. I agree that direction is important from only networking piont of 
view. Usually is more probable that VM on neutron network will be able 
to access O~S service ( VM -- rabbit) then opposite direction from O~S 
service to VM running on neutron network (mistral -- VM).


Filip


On 05/06/2015 06:39 PM, Georgy Okrokvertskhov wrote:
Connection direction here is important only in the frame of networking 
connectivity problem solving. The networking in OpenStack in general 
works in such a way so that connections from VM are allowed to almost 
anywhere. In Murano production deployment we use separate MQ instance 
so that VMs have no access to OpenStack MQ.


In the sense who initiates task execution it always a Murano service 
which publishes tasks (shell script + necessary files) in the MQ so 
that agent can pull them and execute.


Thanks
Gosha



On Wed, May 6, 2015 at 9:31 AM, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hello

one more note on that. There is difference in direction who
initiates connection. In case of murano agent -- rabbit MQ is
connection initiated from VM to openstack service(rabbit). In case
of std.ssh mistral action is direction opposite from openstack
service (mistral) to ssh server on VM.

Filip


On 05/06/2015 06:00 PM, Pospisil, Radek wrote:

Hello,

I think that the generic question is - can be O~S services
also accessible on Neutron networks, so VM (created by Nova)
can access it? We (I and Filip) were discussing this today and
we were not make a final decision.
Another example is Murano agent running on VMs - it connects
to RabbitMQ which is also accessed by Murano engine

   Regards,

Radek

-Original Message-
From: Blaha, Filip
Sent: Wednesday, May 06, 2015 5:43 PM
To: openstack-dev@lists.openstack.org
mailto:openstack-dev@lists.openstack.org
Subject: [openstack-dev] [Murano] [Mistral] SSH workflow action

Hello

We are considering implementing  actions on services of a
murano environment via mistral workflows. We are considering
whether mistral std.ssh action could be used to run some
command on an instance. Example of such action in murano could
be restart action on Mysql DB service.
Mistral workflow would ssh to that instance running Mysql and
run service mysql restart. From my point of view trying to
use SSH to access instances from mistral workflow is not good
idea but I would like to confirm it.

The biggest problem I see there is openstack networking.
Mistral service running on some openstack node would not be
able to access instance via its fixed IP (e.g. 10.0.0.5) via
SSH. Instance could accessed via ssh from namespace of its
gateway router e.g. ip netns exec qrouter-... ssh
cirros@10.0.0.5 mailto:cirros@10.0.0.5 but I think it is
not good to rely on implementation detail of neutron and use
it. In multinode openstack deployment it could be even more
complicated.

In other words I am asking whether we can use std.ssh mistral
action to access instances via ssh on theirs fixed IPs? I
think no but I would like to confirm it.

Thanks
Filip


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Georgy Okrokvertskhov
Architect,
OpenStack Platform Products,
Mirantis
http://www.mirantis.com http://www.mirantis.com/
Tel. +1 650 963 9828
Mob. +1 650 996 3284


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi

Re: [openstack-dev] [Murano] Murano projects pylint job

2015-05-07 Thread Filip Blaha

Hello

pylint job was merged. At first we focused on refactor class code 
issues. Test patch set with code duplication [1]. If you have any 
suggestions about the job and code checks feel free to contact me.


[1] https://review.openstack.org/#/c/181033/

Regards
Filip




On 04/02/2015 10:56 AM, Ekaterina Chernova wrote:

Hi Filip and Serg!

I support the idea!

Let's discuss more details in IRC and summarize everything on the next 
community meeting on Tuesday.


Regards,
Kate.

On Thu, Apr 2, 2015 at 11:31 AM, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hi Serg

we can inspire in other projects like sahara. Important is that
pylint job should produce reasonable size meaningful output.
Pylint without any configuration produces huge output. So we
should point out which code checks are interesting for us and
configure pylint accordingly. I will do some research on that.

Regards
Filip


On 04/01/2015 05:57 PM, Serg Melikyan wrote:

Hi Filip,

I think adding pylint job to Murano gates is an awesome idea,
have you checked out how to do this?

On Wed, Apr 1, 2015 at 4:03 PM, Filip Blaha filip.bl...@hp.com
mailto:filip.bl...@hp.com wrote:

Hello

I have noticed that some openstack projects [1] use pylint
gate job. From my point of view it could simplify code
reviews even as non-voing job and generally it could improve
code quality. Some code issues like code duplication are not
easy to discover during code review so automatic job would be
helpful. Please let me know your opinion about that. Thanks

[1] https://review.openstack.org/#/c/164772/

Regards
Filip


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Serg Melikyan, Senior Software Engineer at Mirantis, Inc.

http://mirantis.com http://mirantis.com/ |
smelik...@mirantis.com mailto:smelik...@mirantis.com

+7 (495) 640-4904, 0261
+7 (903) 156-0836


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:openstack-dev-requ...@lists.openstack.org?subject:unsubscribe  
mailto:openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] [Mistral] SSH workflow action

2015-05-06 Thread Filip Blaha

Hello

one more note on that. There is difference in direction who initiates 
connection. In case of murano agent -- rabbit MQ is connection 
initiated from VM to openstack service(rabbit). In case of std.ssh 
mistral action is direction opposite from openstack service (mistral) to 
ssh server on VM.


Filip

On 05/06/2015 06:00 PM, Pospisil, Radek wrote:

Hello,

I think that the generic question is - can be O~S services also accessible on 
Neutron networks, so VM (created by Nova) can access it? We (I and Filip) were 
discussing this today and we were not make a final decision.
Another example is Murano agent running on VMs - it connects to RabbitMQ which 
is also accessed by Murano engine

   Regards,

Radek

-Original Message-
From: Blaha, Filip
Sent: Wednesday, May 06, 2015 5:43 PM
To: openstack-dev@lists.openstack.org
Subject: [openstack-dev] [Murano] [Mistral] SSH workflow action

Hello

We are considering implementing  actions on services of a murano environment 
via mistral workflows. We are considering whether mistral std.ssh action could 
be used to run some command on an instance. Example of such action in murano 
could be restart action on Mysql DB service.
Mistral workflow would ssh to that instance running Mysql and run service mysql 
restart. From my point of view trying to use SSH to access instances from mistral 
workflow is not good idea but I would like to confirm it.

The biggest problem I see there is openstack networking. Mistral service running on some 
openstack node would not be able to access instance via its fixed IP (e.g. 10.0.0.5) via 
SSH. Instance could accessed via ssh from namespace of its gateway router e.g. ip 
netns exec qrouter-... ssh cirros@10.0.0.5 but I think it is not good to rely on 
implementation detail of  neutron and use it. In multinode openstack deployment it could 
be even more complicated.

In other words I am asking whether we can use std.ssh mistral action to access 
instances via ssh on theirs fixed IPs? I think no but I would like to confirm 
it.

Thanks
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev





__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Murano] [Mistral] SSH workflow action

2015-05-06 Thread Filip Blaha

Hello

We are considering implementing  actions on services of a murano 
environment via mistral workflows. We are considering whether mistral 
std.ssh action could be used to run some command on an instance. Example 
of such action in murano could be restart action on Mysql DB service. 
Mistral workflow would ssh to that instance running Mysql and run 
service mysql restart. From my point of view trying to use SSH to 
access instances from mistral workflow is not good

idea but I would like to confirm it.

The biggest problem I see there is openstack networking. Mistral service 
running on some openstack node would not be able to access instance via 
its fixed IP (e.g. 10.0.0.5) via SSH. Instance could accessed via ssh 
from namespace of its gateway router e.g. ip netns exec qrouter-... ssh 
cirros@10.0.0.5 but I think it is not good to rely on implementation 
detail of  neutron and use it. In multinode openstack deployment it 
could be even more complicated.


In other words I am asking whether we can use std.ssh mistral action to 
access instances via ssh on theirs fixed IPs? I think no but I would 
like to confirm it.


Thanks
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Congress] [Murano] Congress devstack installation is failing in murano gate job

2015-04-29 Thread Filip Blaha

Hello

We are facing an issue with Congress devstack installation in our gate 
job testing murano-congress integration (policy enforcement) [1] .  
Congress devstack scripts install stevedore==1.4.0 as a dependency of 
python-muranoclient without specified version [2]. However heat 
requirement in stable/kilo is stevedore=1.3.0,1.4.0 so heat engine is 
unable to start.


Is possible to fix by specifying  murano client version not to be in 
confilct with heat requirements?


[1] 
https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/murano.yaml#L42 

[2] 
https://github.com/openstack/congress/blob/stable/kilo/thirdparty-requirements.txt#L4

[3] https://github.com/openstack/heat/blob/stable/kilo/requirements.txt#L47

Filip
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Congress] [Murano] Congress devstack installation is failing in murano gate job

2015-04-29 Thread Filip Blaha
Yes. Installed version is 1.4.0 and from that log it seems that it was 
caused by congress scripts


sudo pip install -U -r /opt/stack/new/congress/thirdparty-requirements.txt


Filip

On 04/29/2015 03:56 PM, Serg Melikyan wrote:

Sean, Filip,

Exact versions of installed libraries may be found here:
http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/pip-freeze.txt.gz


stevedore==1.4.0

On Wed, Apr 29, 2015 at 4:38 PM, Filip Blaha filip.bl...@hp.com wrote:

sorry I sent wrong link

http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz

In this log is :

Successfully installed PyYAML-3.11 argparse-1.3.0 jsonpatch-1.9
jsonpointer-1.7 oslo.config-1.11.0 pyOpenSSL-0.15.1
python-cloudfoundryclient-1.0.2 requests-2.6.2 stevedore-1.4.0

Filip



On 04/29/2015 03:21 PM, Sean Dague wrote:

I just looked at this run (linked in this message) -
http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz


stevedore==1.3.0 is installed, never 1.4

The failure is completely unrelated to anything there -
http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz#_2015-04-12_14_06_25_237



On 04/29/2015 09:12 AM, Serg Melikyan wrote:

Hi Filip,

In thirdparty-requirements for stable/kilo python-muranoclient should
have following version: python-muranoclient=0.5.6,0.6.0. But I am
not sure that this will fix the issue, since we don't clearly know why
stevedore==1.4.0 is installed.

I see that python-keystoneclient does not have cap for stevedore in
stable/kilo, but still not 100% that it is a reason why 1.4.0 is installed.

[1]
https://github.com/openstack/congress/blob/stable/kilo/thirdparty-requirements.txt#L4

On Wed, Apr 29, 2015 at 3:46 PM, Filip Blaha filip.bl...@hp.com
mailto:filip.bl...@hp.com wrote:

 Hello

 We are facing an issue with Congress devstack installation in our
 gate job testing murano-congress integration (policy enforcement)
 [1] .  Congress devstack scripts install stevedore==1.4.0 as a
 dependency of python-muranoclient without specified version [2].
 However heat requirement in stable/kilo is stevedore=1.3.0,1.4.0
 so heat engine is unable to start.

 Is possible to fix by specifying  murano client version not to be in
 confilct with heat requirements?

 [1]

https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/murano.yaml#L42

 [2]

https://github.com/openstack/congress/blob/stable/kilo/thirdparty-requirements.txt#L4

http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz
 [3]
 https://github.com/openstack/heat/blob/stable/kilo/requirements.txt#L47

 Filip


__
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Congress] [Murano] Congress devstack installation is failing in murano gate job

2015-04-29 Thread Filip Blaha

Hi Serg

I checked devstack log [1] and it seems that stevedore==1.4.0 was 
installed due to congress


2015-04-29 11:12:16.120 
http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz#_2015-04-29_11_12_16_120| 
Successfully installed PyYAML-3.11 argparse-1.3.0 jsonpatch-1.9 
jsonpointer-1.7 oslo.config-1.11.0 pyOpenSSL-0.15.1 
python-cloudfoundryclient-1.0.2 requests-2.6.2 stevedore-1.4.0


It is last entry in log mentioning installation stevedore

[1] 
http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz


Filip

On 04/29/2015 03:12 PM, Serg Melikyan wrote:

Hi Filip,

In thirdparty-requirements for stable/kilo python-muranoclient should 
have following version: python-muranoclient=0.5.6,0.6.0. But I am 
not sure that this will fix the issue, since we don't clearly know why 
stevedore==1.4.0 is installed.


I see that python-keystoneclient does not have cap for stevedore in 
stable/kilo, but still not 100% that it is a reason why 1.4.0 is 
installed.


[1] 
https://github.com/openstack/congress/blob/stable/kilo/thirdparty-requirements.txt#L4


On Wed, Apr 29, 2015 at 3:46 PM, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hello

We are facing an issue with Congress devstack installation in our
gate job testing murano-congress integration (policy enforcement)
[1] .  Congress devstack scripts install stevedore==1.4.0 as a
dependency of python-muranoclient without specified version [2].
However heat requirement in stable/kilo is stevedore=1.3.0,1.4.0
so heat engine is unable to start.

Is possible to fix by specifying  murano client version not to be
in confilct with heat requirements?

[1]

https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/murano.yaml#L42

[2]

https://github.com/openstack/congress/blob/stable/kilo/thirdparty-requirements.txt#L4

http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz
[3]
https://github.com/openstack/heat/blob/stable/kilo/requirements.txt#L47

Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Congress] [Murano] Congress devstack installation is failing in murano gate job

2015-04-29 Thread Filip Blaha

sorry I sent wrong link

http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz

In this log is :

Successfully installed PyYAML-3.11 argparse-1.3.0 jsonpatch-1.9 
jsonpointer-1.7 oslo.config-1.11.0 pyOpenSSL-0.15.1 
python-cloudfoundryclient-1.0.2 requests-2.6.2 stevedore-1.4.0


Filip


On 04/29/2015 03:21 PM, Sean Dague wrote:

I just looked at this run (linked in this message) -
http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz


stevedore==1.3.0 is installed, never 1.4

The failure is completely unrelated to anything there -
http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz#_2015-04-12_14_06_25_237



On 04/29/2015 09:12 AM, Serg Melikyan wrote:

Hi Filip,

In thirdparty-requirements for stable/kilo python-muranoclient should
have following version: python-muranoclient=0.5.6,0.6.0. But I am
not sure that this will fix the issue, since we don't clearly know why
stevedore==1.4.0 is installed.

I see that python-keystoneclient does not have cap for stevedore in
stable/kilo, but still not 100% that it is a reason why 1.4.0 is installed.

[1] 
https://github.com/openstack/congress/blob/stable/kilo/thirdparty-requirements.txt#L4

On Wed, Apr 29, 2015 at 3:46 PM, Filip Blaha filip.bl...@hp.com
mailto:filip.bl...@hp.com wrote:

 Hello

 We are facing an issue with Congress devstack installation in our
 gate job testing murano-congress integration (policy enforcement)
 [1] .  Congress devstack scripts install stevedore==1.4.0 as a
 dependency of python-muranoclient without specified version [2].
 However heat requirement in stable/kilo is stevedore=1.3.0,1.4.0
 so heat engine is unable to start.

 Is possible to fix by specifying  murano client version not to be in
 confilct with heat requirements?

 [1]
 
https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/murano.yaml#L42

 [2]
 
https://github.com/openstack/congress/blob/stable/kilo/thirdparty-requirements.txt#L4
 
http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz
 [3]
 https://github.com/openstack/heat/blob/stable/kilo/requirements.txt#L47

 Filip

 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe:
 openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev





__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Congress] [Murano] Congress devstack installation is failing in murano gate job

2015-04-29 Thread Filip Blaha

Sean,

yes. It is installed multiple times but the last is congress which 
installs 1.4.0. When devstack installed without congress there is no 
such issue and heat works


Filip


On 04/29/2015 04:11 PM, Sean Dague wrote:

On 04/29/2015 10:05 AM, Sean Dague wrote:

On 04/29/2015 09:29 AM, Filip Blaha wrote:

Hi Serg

I checked devstack log [1] and it seems that stevedore==1.4.0 was
installed due to congress

2015-04-29 11:12:16.120
http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz#_2015-04-29_11_12_16_120|
Successfully installed PyYAML-3.11 argparse-1.3.0 jsonpatch-1.9
jsonpointer-1.7 oslo.config-1.11.0 pyOpenSSL-0.15.1
python-cloudfoundryclient-1.0.2 requests-2.6.2 stevedore-1.4.0

It is last entry in log mentioning installation stevedore

[1]
http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz

Not, it was installed due to keystonemiddleware -
http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz#_2015-04-29_11_02_13_727

Actually, it's more insideous than this. It's installed at 1.4.0 there,
then it's downgraded to 1.3.0 when glance is installed, and then it's
pushed back to 1.4.0 because of:

http://logs.openstack.org/61/178461/1/check/gate-murano-congress-devstack-dsvm/fa01b8f/logs/devstacklog.txt.gz#_2015-04-29_11_12_08_418

pip install -U should not be used in the general case, only in *very*
specific cases.

Whatever is hardcoding -U is the source of your problem.

-Sean




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Mistral] [Murano] Mistral devstack installation is failing in murano gate job

2015-04-13 Thread Filip Blaha

Hello

We are facing an issue with Mistral devstack installation in our gate 
job testing murano-congress-mistral integration (policy enforcement) [1] 
. Mistral devstack scripts are failing with following import error [2]


2015-04-12 14:06:25.236 | Traceback (most recent call last):
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/tools/sync_db.py, line 20, in module

2015-04-12 14:06:25.236 | from mistral.services import action_manager
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/mistral/services/action_manager.py, line 25, in 
module

2015-04-12 14:06:25.236 | from mistral.services import actions
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/mistral/services/actions.py, line 17, in module
2015-04-12 14:06:25.236 | from mistral.workbook import parser as 
spec_parser
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/mistral/workbook/parser.py, line 20, in module
2015-04-12 14:06:25.236 | from mistral.workbook.v2 import actions as 
actions_v2
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/mistral/workbook/v2/actions.py, line 18, in 
module

2015-04-12 14:06:25.236 | from mistral.workbook.v2 import base
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/mistral/workbook/v2/base.py, line 15, in module

2015-04-12 14:06:25.236 | from mistral.workbook import base
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/mistral/workbook/base.py, line 23, in module

2015-04-12 14:06:25.236 | from mistral import expressions as expr
2015-04-12 14:06:25.236 |   File 
/opt/stack/new/mistral/mistral/expressions.py, line 22, in module
2015-04-12 14:06:25.237 | from yaql.language import exceptions as 
yaql_exc

2015-04-12 14:06:25.237 | ImportError: No module named language


Does anyone know what could be the cause?

[1] 
https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/murano.yaml#L42
[2] 
http://logs.openstack.org/04/171504/6/check/gate-murano-congress-devstack-dsvm/3b2d7e1/logs/devstacklog.txt.gz


Regards
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] Murano projects pylint job

2015-04-03 Thread Filip Blaha

Hi Kate and Serg

Thanks for your feedback. I look forward to IRC discussion on that.

Regards
Filip


On 04/02/2015 10:56 AM, Ekaterina Chernova wrote:

Hi Filip and Serg!

I support the idea!

Let's discuss more details in IRC and summarize everything on the next 
community meeting on Tuesday.


Regards,
Kate.

On Thu, Apr 2, 2015 at 11:31 AM, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hi Serg

we can inspire in other projects like sahara. Important is that
pylint job should produce reasonable size meaningful output.
Pylint without any configuration produces huge output. So we
should point out which code checks are interesting for us and
configure pylint accordingly. I will do some research on that.

Regards
Filip


On 04/01/2015 05:57 PM, Serg Melikyan wrote:

Hi Filip,

I think adding pylint job to Murano gates is an awesome idea,
have you checked out how to do this?

On Wed, Apr 1, 2015 at 4:03 PM, Filip Blaha filip.bl...@hp.com
mailto:filip.bl...@hp.com wrote:

Hello

I have noticed that some openstack projects [1] use pylint
gate job. From my point of view it could simplify code
reviews even as non-voing job and generally it could improve
code quality. Some code issues like code duplication are not
easy to discover during code review so automatic job would be
helpful. Please let me know your opinion about that. Thanks

[1] https://review.openstack.org/#/c/164772/

Regards
Filip


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




-- 
Serg Melikyan, Senior Software Engineer at Mirantis, Inc.

http://mirantis.com http://mirantis.com/ |
smelik...@mirantis.com mailto:smelik...@mirantis.com

+7 (495) 640-4904, 0261
+7 (903) 156-0836


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:openstack-dev-requ...@lists.openstack.org?subject:unsubscribe  
mailto:openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Murano] Murano projects pylint job

2015-04-02 Thread Filip Blaha

Hi Serg

we can inspire in other projects like sahara. Important is that pylint 
job should produce reasonable size meaningful output. Pylint without any 
configuration produces huge output. So we should point out which code 
checks are interesting for us and configure pylint accordingly. I will 
do some research on that.


Regards
Filip

On 04/01/2015 05:57 PM, Serg Melikyan wrote:

Hi Filip,

I think adding pylint job to Murano gates is an awesome idea, have you 
checked out how to do this?


On Wed, Apr 1, 2015 at 4:03 PM, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hello

I have noticed that some openstack projects [1] use pylint gate
job. From my point of view it could simplify code reviews even as
non-voing job and generally it could improve code quality. Some
code issues like code duplication are not easy to discover during
code review so automatic job would be helpful. Please let me know
your opinion about that. Thanks

[1] https://review.openstack.org/#/c/164772/

Regards
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe:
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Serg Melikyan, Senior Software Engineer at Mirantis, Inc.
http://mirantis.com http://mirantis.com/ | smelik...@mirantis.com 
mailto:smelik...@mirantis.com


+7 (495) 640-4904, 0261
+7 (903) 156-0836


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Murano] Murano projects pylint job

2015-04-01 Thread Filip Blaha

Hello

I have noticed that some openstack projects [1] use pylint gate job. 
From my point of view it could simplify code reviews even as non-voing 
job and generally it could improve code quality. Some code issues like 
code duplication are not easy to discover during code review so 
automatic job would be helpful. Please let me know your opinion about 
that.  Thanks


[1] https://review.openstack.org/#/c/164772/

Regards
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Murano] Murano agent development

2015-03-24 Thread Filip Blaha

Hello

I would like to test and debug some new features of murano agent like 
chef recipes.


I would like to know how to develop murano agent? How to test and debug 
new changes in agent code? Creating new image with every change and and 
test deployment on devstack is time-consuming and not very comfortable. 
Is there any shortcut for this development cycle?


Thanks
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [mistral] mistral actions plugin architecture

2015-02-18 Thread Filip Blaha

Thanks for answer!

A custom action inherits from base.Action. So if I need to write custom 
action in different project and register it via entry points then I need 
dependency on mistral sources. Is that correct? Or is there way how to 
create custom action without that dependency?


Regards
Filip

On 02/09/2015 04:58 PM, Renat Akhmerov wrote:

Hi,

It’s pretty simple and described in 
http://mistral.readthedocs.org/en/master/developer/writing_a_plugin_action.html.


Renat Akhmerov
@ Mirantis Inc.



On 09 Feb 2015, at 21:43, Filip Blaha filip.bl...@hp.com 
mailto:filip.bl...@hp.com wrote:


Hi all,

regarding to [1] there should be some plugin mechanism for custom 
actions in Mistral. I went through code and I found some 
introspection mechanism [2] generating mistral actions from methods 
on client classes for openstack core projects. E.g. it takes nova 
client class (python-novaclient) and introspects its methods and 
theirs parameters and creates corresponding actions with 
corresponding parameters. The same for other core projects like 
neutron, cinder, ... However the list of  these client classes seems 
to be hardcoded [3].  So I am not sure whether this mechanism can be 
used for other projects like murano client to create murano related 
actions in mistral? Or is there any other pluggable mechanism to get 
murano actions into mistral without hardcoding in mistral project?


[1] 
https://wiki.openstack.org/wiki/Mistral/Blueprints/ActionsDesign#Plugin_Architecture 

[2] 
https://github.com/stackforge/mistral/blob/master/mistral/actions/openstack/action_generator/base.py#L91 

[3] 
https://github.com/stackforge/mistral/blob/master/mistral/actions/generator_factory.py 




Regards
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org 
mailto:openstack-dev-requ...@lists.openstack.org?subject:unsubscribe

http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [mistral] mistral actions plugin architecture

2015-02-09 Thread Filip Blaha

Hi all,

regarding to [1] there should be some plugin mechanism for custom 
actions in Mistral. I went through code and I found some introspection 
mechanism [2] generating mistral actions from methods on client classes 
for openstack core projects. E.g. it takes nova client class 
(python-novaclient) and introspects its methods and theirs parameters 
and creates corresponding actions with corresponding parameters. The 
same for other core projects like neutron, cinder, ... However the list 
of  these client classes seems to be hardcoded [3].  So I am not sure 
whether this mechanism can be used for other projects like murano client 
to create murano related actions in mistral? Or is there any other 
pluggable mechanism to get murano actions into mistral without 
hardcoding in mistral project?


[1] 
https://wiki.openstack.org/wiki/Mistral/Blueprints/ActionsDesign#Plugin_Architecture 

[2] 
https://github.com/stackforge/mistral/blob/master/mistral/actions/openstack/action_generator/base.py#L91 

[3] 
https://github.com/stackforge/mistral/blob/master/mistral/actions/generator_factory.py 




Regards
Filip

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev