Posted	Nick	Remark
#openstack-sdks - 2019-08-23
15:55:10	openstackgerrit	Morgan Fainberg proposed openstack/keystoneauth master: Allow initializing session with connection retries https://review.opendev.org/676648
16:04:13	openstackgerrit	Merged openstack/osc-lib master: Cleanups to prepare for OSC 4 release https://review.opendev.org/678095
19:40:14	openstackgerrit	Merged openstack/python-openstackclient master: Fix functional.base.TestCase.openstack() to optionally omit --os-auth-type https://review.opendev.org/678059
19:46:41	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Remove token_endpoint auth type https://review.opendev.org/677795
#openstack-sdks - 2019-08-24
13:57:22	mordred	efried: poo. hopefully fixture from sdk soon
14:39:51	efried	mordred: your ack here would be lovely https://review.opendev.org/#/c/678237/
14:41:29	efried	thankyousir
#openstack-sdks - 2019-08-26
10:17:18	gtema	dtantsur: any chance for you to give another review on https://review.opendev.org/#/c/659841/ ? I need it
11:23:48	vishakha	Can anybody help to merge https://review.opendev.org/#/c/677585/.
11:24:32	vishakha	sorry wrong url its https://review.opendev.org/#/c/669331/
11:50:57	dtantsur	gtema: looking soon
13:15:41	openstackgerrit	Artem Goncharov proposed openstack/openstacksdk master: Rework statistics reporting https://review.opendev.org/659841
13:16:13	gtema	dtantsur: thanks - here is the new PS with all items addressed
13:22:23	dtantsur	cool, will try to have another pass today
13:22:30	gtema	thanks a lot
14:12:31	openstackgerrit	Alex Schultz proposed openstack/keystoneauth master: Cleanup session on delete https://review.opendev.org/674139
14:24:16	openstackgerrit	Lance Bragstad proposed openstack/keystoneauth master: Expose irreversible override with Session connect_retries https://review.opendev.org/678576
14:58:59	openstackgerrit	Bo Tran proposed openstack/openstacksdk master: Add a fields meta_data to result of Senlin API https://review.opendev.org/678585
16:55:25	openstackgerrit	Bo Tran proposed openstack/openstacksdk master: Add a fields meta_data to result of Senlin API https://review.opendev.org/678585
16:57:29	enriquetaso	Hi o/ I've submitted this backport to fix Rocky cinder: https://review.opendev.org/#/c/660746/ Would you mind to reviews it? I need some opinions about it
16:57:36	openstackgerrit	Bo Tran proposed openstack/openstacksdk master: Add a fields meta_data to result of Senlin API https://review.opendev.org/678585
19:18:29	dtroyer	enriquetaso: that seems like a good backport candidate… my apologies for not looking at it before now, I have limited time and have been focused on the osc4 bits
19:19:30	enriquetaso	thank you so much dtroyer! hope the patch merge soon
21:32:48	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Format aggregate command fields and de-race functional tests https://review.opendev.org/678689
22:51:00	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Format aggregate command fields and de-race functional tests https://review.opendev.org/678689
#openstack-sdks - 2019-08-27
00:59:46	openstackgerrit	Merged openstack/python-openstackclient master: Add CLI argument tests before making changes https://review.opendev.org/678145
02:52:23	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Remove token_endpoint auth type https://review.opendev.org/677795
10:08:52	openstackgerrit	Merged openstack/service-types-authority master: Move proposal job into project-config https://review.opendev.org/678134
16:09:05	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Remove token_endpoint auth type https://review.opendev.org/677795
18:04:58	openstackgerrit	Merged openstack/python-openstackclient master: Format aggregate command fields and de-race functional tests https://review.opendev.org/678689
21:51:56	dtroyer	Just for old-times sake I want to shout out to stevemar and jamielennox that https://review.opendev.org/#/c/677795/ is at long-last the final removal of one of Jamie's more loathed bits of OSC, the token_endpoint auth plugin. —os-url is dead, long live —os-url!
22:12:25	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Bump hacking version https://review.opendev.org/665358
22:24:41	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Microversion 2.77: Support Specifying AZ to unshelve https://review.opendev.org/665336
#openstack-sdks - 2019-08-28
02:42:07	openstackgerrit	Merged openstack/python-openstackclient master: Bump hacking version https://review.opendev.org/665358
07:28:02	mordred	dtroyer: zomg
13:38:09	openstackgerrit	LIU Yulong proposed openstack/python-openstackclient master: Add floating IP Port Forwarding commands https://review.opendev.org/650062
13:55:38	openstackgerrit	LIU Yulong proposed openstack/python-openstackclient master: Add floating IP Port Forwarding commands https://review.opendev.org/650062
21:53:13	mriedem	dtroyer: i think https://review.opendev.org/#/c/665336/8 needs some work
21:55:16	dtroyer	mriedem: ok, ugh, I thought the novaclient release had happened…
23:40:03	openstackgerrit	LIU Yulong proposed openstack/python-openstackclient master: Add floating IP Port Forwarding commands https://review.opendev.org/650062
#openstack-sdks - 2019-08-29
00:02:32	openstackgerrit	Merged openstack/python-openstackclient master: Remove token_endpoint auth type https://review.opendev.org/677795
02:03:57	openstackgerrit	Brin Zhang proposed openstack/python-openstackclient master: Microversion 2.77: Support Specifying AZ to unshelve https://review.opendev.org/665336
02:31:26	openstackgerrit	Brin Zhang proposed openstack/python-openstackclient master: Microversion 2.77: Support Specifying AZ to unshelve https://review.opendev.org/665336
05:02:25	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Bump min osc-lib to 1.14.0 https://review.opendev.org/679182
05:06:03	openstackgerrit	Dean Troyer proposed openstack/python-openstackclient master: Clean up app initialization and config https://review.opendev.org/678146
07:55:05	openstackgerrit	Takashi Kajinami proposed openstack/python-openstackclient master: Add parent project filter for listing projects https://review.opendev.org/677103
07:56:17	openstackgerrit	Takashi Kajinami proposed openstack/python-openstackclient master: Add parent project filter for listing projects https://review.opendev.org/677103
07:56:57	openstackgerrit	yanpuqing proposed openstack/openstacksdk master: Modify the 'auth_type' value to correct https://review.opendev.org/677940
09:57:06	ITD27M01	gtema: Hello! Could you advise on unscoped authentication.
09:57:16	ITD27M01	I would like to get a list of the current user's projects by calling the: connection function.identity.user_projects(user=user_id) On new versions of the SDK it works okay, but on older version (0.17.2) I get the error: EmptyCatalog: The service catalog is empty. Is there some workaround for this bug in older versions?
09:58:04	ITD27M01	The clouds.yaml is https://gist.github.com/ITD27M01/1182f93cf583c682102f3c7459fe6af7
09:58:27	ITD27M01	For openstacksdk==0.35.0 it works fine: https://gist.github.com/ITD27M01/15a7bb415be8327da563c0ee4c080679
09:58:50	ITD27M01	But for older version (0.17.2): https://gist.github.com/ITD27M01/acd9a0a0f8be3a9b78094f88254a8d2a
09:59:12	gtema	interesting. Was not seeing this.
10:00:32	gtema	are you stuck with an old version?
10:01:05	gtema	can you please also show the trace itself?
10:12:44	ITD27M01	gtema: I am stuck with an older version shipped with RHEL 7 rpms, the full traceback: https://gist.github.com/ITD27M01/07632e02a736cbacbb37a63dc58f039d
10:17:22	Kl4us1912	can openstacksdk get a Connection.get_project_by_id method (similar to get_user and get_user_by_id).
10:17:51	Kl4us1912	use case is querying one's own project without having the list projects permission
10:19:01	Kl4us1912	i implemented a workaround by copying and slightly modifying get_user_by_id
10:19:54	gtema	itd27m01: actually you should use not the unscoped, but domain scoped token. Then it is expected, that service catalog is properly populated
10:20:36	ITD27M01	gtema: How I can change my clouds.yaml for this?
10:21:08	gtema	you remove project_name/id and set domain_id/name=user_domain_id/name (so really both)
10:21:57	gtema	for me it is defining user_domain_name AND domain_name with same values
10:25:23	ITD27M01	gtema: With domain_name + user_domain_name I get the 401 Error. But only user_domain_name works. Is it policy caveat?
10:25:41	gtema	probably yes
10:26:35	gtema	it's a funny case how you configure, so that libs get domain scoped token. And normally it is absence of project and presence of domain data
10:27:02	gtema	user_domain_name is used kind of for authorization agains cloud at all, but domain - to get a domain token
10:27:45	gtema	if you get 401 maybe you are missing privs. But then the question why it works with newer SDK
10:28:12	gtema	there were tons of changes, so figuring out what is different will be a challenge
10:30:19	gtema	can you trace newer SDK to understand which token is retrieved? I do not believe you can get list of projects with unscoped token
10:31:28	ITD27M01	gtema: The purpose of my code is to provide to users the list of their projects. If I understand this correctly the domain scoped token only available for admins but unscoped token available for everyone authenticated.
10:31:43	gtema	yes
10:32:33	ITD27M01	gtema: I see that service_catalog is empty for newer SDK too. But the method connection.identity.user_projects(user=user_id) works
10:33:12	gtema	can you compare the endpoints for requests?
10:33:34	gtema	or maybe the problem is not the SDK, but keysoneauth1?
10:33:47	gtema	if you stuck with older versions it might be a problem
10:34:55	gtema	in this case you might try hardcoding endpoint (for single region cloud should be normally not a problem)
10:34:56	ITD27M01	gtema: In virtualenv the keystoneauth1 is the same
10:35:32	ITD27M01	gtema: In the long term I want to build rpm for new releases of openstacksdk. Perhaps there is already such a repository?
10:36:25	gtema	eeh, this is a problem for everyone. I myself build RPMs for our cloud in OpensuseBuild
10:36:44	gtema	but you can look for RDO packages
10:39:36	ITD27M01	gtema: For stein the 0.27.0 is available I will check it
10:40:18	ITD27M01	gtema: BTW by tracing the call I need to find the source of the identity url?
10:40:29	gtema	if nothing works you can try doing conn.identity.get('YOUR_KEYSTONE_URL/v3/user_id/projects')
10:40:49	gtema	you can see this in the project_scoped token response
10:41:24	gtema	it's only that this https://docs.openstack.org/api-ref/identity/v3/?expanded=list-projects-for-user-detail#list-projects-for-user API need to be allowed for the user
10:42:25	gtema	alternatively /v3/auth/projects
10:43:21	gtema	this last might be available with unscoped token
10:45:15	ITD27M01	gtema: conn.identity.get('{}/v3/user_id/projects'.format(conn.auth['auth_url'])) ?
10:46:20	gtema	almost - {}/v3/users/REQUESTED_USER_ID/projects
10:48:35	gtema	or really conn.identity.get('users/{}/projects')
10:52:03	gtema	res = conn.identity.get('users/%s/projects' % conn.current_user_id)
10:55:05	ITD27M01	gtema: projects = connection.identity.get('{auth_url}/v3/users/{user_id}/projects'.format(auth_url=str(connection.auth['auth_url']), user_id=str(user_id))) - this works for me. But without auth_url this return the same catalog is empty
10:55:32	ITD27M01	gtema: Thank you
10:55:39	gtema	and if you connect as default project?
10:56:49	ITD27M01	gtema: Hm, what is default project? The project defined in clouds?
10:57:13	gtema	yeah, in your domain there is root project
10:57:37	gtema	i will try something in 10 minutes
11:14:00	ITD27M01	gtema: I am checking now and found that simple call (connection.identity.user_projects(user=user_id)) works in at least 0.28.0. In 0.27.0 it does not work yet

Earlier   Later