| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-sdks - 2017-04-06 | |||
| 11:50:01 | openstackgerrit | Rui Chen proposed openstack/python-openstackclient master: Make block-device-mapping more stable and clear https://review.openstack.org/438141 | |
| 11:50:06 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add support for epilogs https://review.openstack.org/454132 | |
| 12:11:46 | openstackgerrit | Rui Chen proposed openstack/python-openstackclient master: Make block-device-mapping more stable and clear https://review.openstack.org/438141 | |
| 12:35:37 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:35:54 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add 'autoprogram-cliff' Sphinx directive https://review.openstack.org/450322 | |
| 12:35:55 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add support for epilogs https://review.openstack.org/454132 | |
| 12:36:11 | openstackgerrit | Stephen Finucane proposed openstack/python-openstackclient master: WIP! Start using 'cliff.sphinxext' https://review.openstack.org/452861 | |
| 12:39:03 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:42:07 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:57:31 | rabel_webclient | osc meeting in 3min? | |
| 12:59:44 | RuiChen | meeting-3， I think so | |
| 13:00:41 | rabel | dtroyer? | |
| 13:03:17 | rabel | hm | |
| 13:03:27 | rabel | what to do now? | |
| 13:04:55 | RuiChen | let us waiting few minute :-) | |
| 13:05:00 | rabel | ok | |
| 13:16:21 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 13:20:14 | RuiChen | rabel: I think dtroyer miss the meeting time :( | |
| 13:20:49 | rabel | RuiChen: yes, i think so, too. so no meeting. :( | |
| 13:23:56 | RuiChen | I have a bug, want to discuss, if others have time, please take a look it, the patch is ready to review https://review.openstack.org/#/c/438141/ thanks | |
| 13:33:20 | rabel | RuiChen: i'm trying to understand the bug report first. at 2) i think you would have to use the id of the volume, not the snapshot. i still recieve an error, but a different one: "Block Device Mapping is Invalid: failed to get snapshot..." | |
| 13:35:39 | RuiChen | rabel: if you want to create a bdm from snapshot, the type should be 'snapshot' and the uuid should be snapshot uuid | |
| 13:36:23 | rabel | ah, sorry. you are right | |
| 13:36:27 | RuiChen | rabel: nova will create a volume from snapshot that you specified, then attach the volume to server as bdm | |
| 13:42:21 | malloc83 | Hi guys, using the openstack sdk, if i have a scoped token, how can I use it? without having the connection handler creating another new token? | |
| 13:42:54 | malloc83 | so when you setup the connection it has "token/password" auth_plugin... but i dont want either.. i already have a token. | |
| 13:42:56 | malloc83 | is this possible? | |
| 13:44:37 | reedip | no meeting? | |
| 13:46:00 | RuiChen | reedip: seems that | |
| 13:47:12 | dtroyer | yeah, I didn't get here until a few minutes ago | |
| 13:47:29 | dtroyer | 13 minutes left, anything that needs to be in meeting minutes? | |
| 13:48:29 | RuiChen | no from me, I just have a patch need to review https://review.openstack.org/#/c/438141/ | |
| 13:49:37 | dtroyer | ok, FWIW I'm working to prepare the next release of OSC and osc-lib…need to get the -tips jobs passing first | |
| 13:51:11 | briancurtin | malloc83: didn't i show you how to do that yesterday? | |
| 13:51:25 | malloc83 | briancurtin: that doesnt re-use the token... | |
| 13:51:35 | malloc83 | it actually uses the token to create another token :-( | |
| 13:52:09 | malloc83 | so if i provide tenant and old token, it actually goes and scopes the token again and uses a new one temporary | |
| 13:52:14 | malloc83 | but the temporary tokens could build up. | |
| 13:52:22 | dtroyer | malloc83: what is the concern about re-using tokens? | |
| 13:52:25 | malloc83 | you could end up with thousands of tokens :) | |
| 13:52:51 | malloc83 | dtroyer: so we have a portal we use with our OSS system and BSS and we use the same dashboard for openstack, not using horizon | |
| 13:52:58 | malloc83 | and the issue is every time a user switches a project | |
| 13:53:05 | malloc83 | we need to scope a token which is fine and works as expected | |
| 13:53:19 | malloc83 | so we store the token in a session for the projects | |
| 13:53:27 | malloc83 | but now the SDK keeps creating new tokens when we provide the old working token | |
| 13:53:29 | briancurtin | maybe this is more of a keystoneauth question then. sdk doesn't really do anything with auth, it offloads it all to that lib | |
| 13:53:51 | briancurtin | or maybe we're using KSA wrong? | |
| 13:53:55 | dtroyer | that lib is keystoneauth, which handles all of the token work for you | |
| 13:54:09 | dtroyer | briancurtin: are you re-using the ksa session in Connection? | |
| 13:54:14 | malloc83 | dtroyer: so via the SDK how do i get keystoneauth not to use a new token? :) and use the one provided. | |
| 13:54:27 | briancurtin | malloc83: fix it? i don't know | |
| 13:54:40 | dtroyer | I don't know much about actually using the SDK at that level…let me find how we set it up in openstackclient | |
| 13:54:48 | malloc83 | i could fix it... but hoping i was just being silly... and there was an obvious solution. | |
| 13:54:52 | briancurtin | dtroyer: we subclass ksa session | |
| 13:55:11 | malloc83 | one sec one of our guys has a solution ... just checking code. | |
| 13:55:12 | rabel | RuiChen: left you a comment in the change | |
| 13:55:32 | dtroyer | ok, so as long as that is persisted the token should hang around, only being re-issued after it expires | |
| 13:55:35 | briancurtin | maybe we're not passing the right stuff into it while init'ing. i'm on my phone right now, will be back at a real computer shortly | |
| 13:56:37 | dtroyer | briancurtin: all we do in OSC is create Connection with authentication=<the session.auth from our KSA session> | |
| 13:57:41 | dtroyer | I haven't sniffed that for long-running operations, but I don't think it re-auths for every call with that. We're managing the Session in OSC directly, but I understood that Connection would do that too as long as the Connection object was around | |
| 13:58:48 | RuiChen | rabel: got it | |
| 13:58:53 | briancurtin | yep, it only reauths at expiration | |
| 13:59:22 | malloc83 | guys so there is a fix for doing this, using keystoneauth1 directly... | |
| 13:59:28 | malloc83 | but i would like to use the sdk... | |
| 13:59:35 | malloc83 | can i pastebin it? | |
| 13:59:43 | malloc83 | and perhaps you will understand what i am trying todo with the sdk | |
| 13:59:43 | dtroyer | malloc83: so part of what I understand you are doing is calling the N different library clients in your app | |
| 13:59:45 | briancurtin | sure, can make it work | |
| 13:59:54 | briancurtin | probably | |
| 14:00:02 | malloc83 | lemme paste bin, and you guys tell me how to do the same with the sdk.. | |
| 14:00:49 | malloc83 | https://pastebin.com/KmGqeM9s | |
| 14:01:01 | malloc83 | how do i achieve that using SDK? :) and not python clients directly. | |
| 14:01:43 | malloc83 | cause when providing token to SDK it actually throws a new token... i am not sure if we checking it correctly, but i saw this when we tried the get_token method on the session.. there is different token from the one we provided to it on the connection | |
| 14:02:21 | malloc83 | if it keeps generating new tokens.. :) it could cause a scaling issue.. or perhaps i am not looking at the right place. to see what token it is using currently. | |
| 14:02:38 | rabel | dtroyer: could you have another look at https://review.openstack.org/#/c/444924/ ? i think we are nearly done there, but there are some smaller questions. | |
| 14:03:01 | dtroyer | malloc83: in openstackclient (OSC) here is how we set up the SDK Connection object: | |
| 14:03:04 | dtroyer | https://github.com/openstack/python-openstackclient/blob/master/openstackclient/network/client.py#L40 | |
| 14:03:06 | malloc83 | guys gotta go.. ill be back later or tomorrow... | |
| 14:03:10 | malloc83 | i am savint the link dtroyer | |
| 14:03:25 | dtroyer | that is using an externally created KSA Session | |
| 14:03:26 | dtroyer | kk | |
| 14:03:29 | briancurtin | i know nothing about other clients FYI | |
| 14:03:33 | dtroyer | save this too: | |
| 14:03:42 | dtroyer | https://github.com/openstack/osc-lib/blob/master/osc_lib/clientmanager.py | |
| 14:03:52 | dtroyer | a lot of what I think you are trying to do has been already done | |
| 14:04:02 | malloc83 | got it.. ill be back. sorry really late for meeting :) | |
| 14:04:12 | dtroyer | it may not fit your case exactly but you may find it interesting to see how we did it | |
| 14:20:11 | mordred | malloc83: you also may enjoy https://docs.openstack.org/developer/os-client-config/#constructing-openstack-sdk-object and https://docs.openstack.org/developer/os-client-config/#constructing-legacy-client-objects | |
| 14:20:27 | mordred | depending on which thing you want to accomplish | |
| 14:22:16 | dtroyer | rabel: 444924 looking good | |
| 14:29:56 | openstackgerrit | David Rabel proposed openstack/python-openstackclient master: Add --network and --port to server create https://review.openstack.org/444924 | |
| 14:30:07 | rabel | dtroyer: thanks for reviewing. | |
| 14:37:42 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Allow override of distributed router flag https://review.openstack.org/433442 | |
| 14:51:59 | reedip | rabel ...all done with 444294 ? | |
| 14:53:02 | rabel | reedip: not quite, but i think i am close. :) | |
| 14:54:12 | openstackgerrit | Nakul Dahiwade proposed openstack/python-openstacksdk master: Introduce L7Policy for Octavia (load balancing) https://review.openstack.org/451980 | |
| 14:58:00 | openstackgerrit | David Rabel proposed openstack/python-openstackclient master: Add --network and --port to server create https://review.openstack.org/444924 | |
| 15:13:43 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 15:15:43 | sdague | cdent: in your thinking about capabilities, had you thought about hypermedia for it? There was a blog post about swagger limitations the other day which mentioned that, and I wondered why I didn't think I'd seen that on the table anywhere | |
| 15:17:51 | openstackgerrit | Nakul Dahiwade proposed openstack/python-openstacksdk master: Introduce L7Rule for Octavia (load balancing) https://review.openstack.org/452832 | |