| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-sdks - 2019-08-24 | |||
| 14:39:51 | efried | mordred: your ack here would be lovely https://review.opendev.org/#/c/678237/ | |
| 14:41:29 | efried | thankyousir | |
| #openstack-sdks - 2019-08-26 | |||
| 10:17:18 | gtema | dtantsur: any chance for you to give another review on https://review.opendev.org/#/c/659841/ ? I need it | |
| 11:23:48 | vishakha | Can anybody help to merge https://review.opendev.org/#/c/677585/. | |
| 11:24:32 | vishakha | sorry wrong url its https://review.opendev.org/#/c/669331/ | |
| 11:50:57 | dtantsur | gtema: looking soon | |
| 13:15:41 | openstackgerrit | Artem Goncharov proposed openstack/openstacksdk master: Rework statistics reporting https://review.opendev.org/659841 | |
| 13:16:13 | gtema | dtantsur: thanks - here is the new PS with all items addressed | |
| 13:22:23 | dtantsur | cool, will try to have another pass today | |
| 13:22:30 | gtema | thanks a lot | |
| 14:12:31 | openstackgerrit | Alex Schultz proposed openstack/keystoneauth master: Cleanup session on delete https://review.opendev.org/674139 | |
| 14:24:16 | openstackgerrit | Lance Bragstad proposed openstack/keystoneauth master: Expose irreversible override with Session connect_retries https://review.opendev.org/678576 | |
| 14:58:59 | openstackgerrit | Bo Tran proposed openstack/openstacksdk master: Add a fields meta_data to result of Senlin API https://review.opendev.org/678585 | |
| 16:55:25 | openstackgerrit | Bo Tran proposed openstack/openstacksdk master: Add a fields meta_data to result of Senlin API https://review.opendev.org/678585 | |
| 16:57:29 | enriquetaso | Hi o/ I've submitted this backport to fix Rocky cinder: https://review.opendev.org/#/c/660746/ Would you mind to reviews it? I need some opinions about it | |
| 16:57:36 | openstackgerrit | Bo Tran proposed openstack/openstacksdk master: Add a fields meta_data to result of Senlin API https://review.opendev.org/678585 | |
| 19:18:29 | dtroyer | enriquetaso: that seems like a good backport candidate… my apologies for not looking at it before now, I have limited time and have been focused on the osc4 bits | |
| 19:19:30 | enriquetaso | thank you so much dtroyer! hope the patch merge soon | |
| 21:32:48 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Format aggregate command fields and de-race functional tests https://review.opendev.org/678689 | |
| 22:51:00 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Format aggregate command fields and de-race functional tests https://review.opendev.org/678689 | |
| #openstack-sdks - 2019-08-27 | |||
| 00:59:46 | openstackgerrit | Merged openstack/python-openstackclient master: Add CLI argument tests before making changes https://review.opendev.org/678145 | |
| 02:52:23 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Remove token_endpoint auth type https://review.opendev.org/677795 | |
| 10:08:52 | openstackgerrit | Merged openstack/service-types-authority master: Move proposal job into project-config https://review.opendev.org/678134 | |
| 16:09:05 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Remove token_endpoint auth type https://review.opendev.org/677795 | |
| 18:04:58 | openstackgerrit | Merged openstack/python-openstackclient master: Format aggregate command fields and de-race functional tests https://review.opendev.org/678689 | |
| 21:51:56 | dtroyer | Just for old-times sake I want to shout out to stevemar and jamielennox that https://review.opendev.org/#/c/677795/ is at long-last the final removal of one of Jamie's more loathed bits of OSC, the token_endpoint auth plugin. —os-url is dead, long live —os-url! | |
| 22:12:25 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Bump hacking version https://review.opendev.org/665358 | |
| 22:24:41 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Microversion 2.77: Support Specifying AZ to unshelve https://review.opendev.org/665336 | |
| #openstack-sdks - 2019-08-28 | |||
| 02:42:07 | openstackgerrit | Merged openstack/python-openstackclient master: Bump hacking version https://review.opendev.org/665358 | |
| 07:28:02 | mordred | dtroyer: zomg | |
| 13:38:09 | openstackgerrit | LIU Yulong proposed openstack/python-openstackclient master: Add floating IP Port Forwarding commands https://review.opendev.org/650062 | |
| 13:55:38 | openstackgerrit | LIU Yulong proposed openstack/python-openstackclient master: Add floating IP Port Forwarding commands https://review.opendev.org/650062 | |
| 21:53:13 | mriedem | dtroyer: i think https://review.opendev.org/#/c/665336/8 needs some work | |
| 21:55:16 | dtroyer | mriedem: ok, ugh, I thought the novaclient release had happened… | |
| 23:40:03 | openstackgerrit | LIU Yulong proposed openstack/python-openstackclient master: Add floating IP Port Forwarding commands https://review.opendev.org/650062 | |
| #openstack-sdks - 2019-08-29 | |||
| 00:02:32 | openstackgerrit | Merged openstack/python-openstackclient master: Remove token_endpoint auth type https://review.opendev.org/677795 | |
| 02:03:57 | openstackgerrit | Brin Zhang proposed openstack/python-openstackclient master: Microversion 2.77: Support Specifying AZ to unshelve https://review.opendev.org/665336 | |
| 02:31:26 | openstackgerrit | Brin Zhang proposed openstack/python-openstackclient master: Microversion 2.77: Support Specifying AZ to unshelve https://review.opendev.org/665336 | |
| 05:02:25 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Bump min osc-lib to 1.14.0 https://review.opendev.org/679182 | |
| 05:06:03 | openstackgerrit | Dean Troyer proposed openstack/python-openstackclient master: Clean up app initialization and config https://review.opendev.org/678146 | |
| 07:55:05 | openstackgerrit | Takashi Kajinami proposed openstack/python-openstackclient master: Add parent project filter for listing projects https://review.opendev.org/677103 | |
| 07:56:17 | openstackgerrit | Takashi Kajinami proposed openstack/python-openstackclient master: Add parent project filter for listing projects https://review.opendev.org/677103 | |
| 07:56:57 | openstackgerrit | yanpuqing proposed openstack/openstacksdk master: Modify the 'auth_type' value to correct https://review.opendev.org/677940 | |
| 09:57:06 | ITD27M01 | gtema: Hello! Could you advise on unscoped authentication. | |
| 09:57:16 | ITD27M01 | I would like to get a list of the current user's projects by calling the: connection function.identity.user_projects(user=user_id) On new versions of the SDK it works okay, but on older version (0.17.2) I get the error: EmptyCatalog: The service catalog is empty. Is there some workaround for this bug in older versions? | |
| 09:58:04 | ITD27M01 | The clouds.yaml is https://gist.github.com/ITD27M01/1182f93cf583c682102f3c7459fe6af7 | |
| 09:58:27 | ITD27M01 | For openstacksdk==0.35.0 it works fine: https://gist.github.com/ITD27M01/15a7bb415be8327da563c0ee4c080679 | |
| 09:58:50 | ITD27M01 | But for older version (0.17.2): https://gist.github.com/ITD27M01/acd9a0a0f8be3a9b78094f88254a8d2a | |
| 09:59:12 | gtema | interesting. Was not seeing this. | |
| 10:00:32 | gtema | are you stuck with an old version? | |
| 10:01:05 | gtema | can you please also show the trace itself? | |
| 10:12:44 | ITD27M01 | gtema: I am stuck with an older version shipped with RHEL 7 rpms, the full traceback: https://gist.github.com/ITD27M01/07632e02a736cbacbb37a63dc58f039d | |
| 10:17:22 | Kl4us1912 | can openstacksdk get a Connection.get_project_by_id method (similar to get_user and get_user_by_id). | |
| 10:17:51 | Kl4us1912 | use case is querying one's own project without having the list projects permission | |
| 10:19:01 | Kl4us1912 | i implemented a workaround by copying and slightly modifying get_user_by_id | |
| 10:19:54 | gtema | itd27m01: actually you should use not the unscoped, but domain scoped token. Then it is expected, that service catalog is properly populated | |
| 10:20:36 | ITD27M01 | gtema: How I can change my clouds.yaml for this? | |
| 10:21:08 | gtema | you remove project_name/id and set domain_id/name=user_domain_id/name (so really both) | |
| 10:21:57 | gtema | for me it is defining user_domain_name AND domain_name with same values | |
| 10:25:23 | ITD27M01 | gtema: With domain_name + user_domain_name I get the 401 Error. But only user_domain_name works. Is it policy caveat? | |
| 10:25:41 | gtema | probably yes | |
| 10:26:35 | gtema | it's a funny case how you configure, so that libs get domain scoped token. And normally it is absence of project and presence of domain data | |
| 10:27:02 | gtema | user_domain_name is used kind of for authorization agains cloud at all, but domain - to get a domain token | |
| 10:27:45 | gtema | if you get 401 maybe you are missing privs. But then the question why it works with newer SDK | |
| 10:28:12 | gtema | there were tons of changes, so figuring out what is different will be a challenge | |
| 10:30:19 | gtema | can you trace newer SDK to understand which token is retrieved? I do not believe you can get list of projects with unscoped token | |
| 10:31:28 | ITD27M01 | gtema: The purpose of my code is to provide to users the list of their projects. If I understand this correctly the domain scoped token only available for admins but unscoped token available for everyone authenticated. | |
| 10:31:43 | gtema | yes | |
| 10:32:33 | ITD27M01 | gtema: I see that service_catalog is empty for newer SDK too. But the method connection.identity.user_projects(user=user_id) works | |
| 10:33:12 | gtema | can you compare the endpoints for requests? | |
| 10:33:34 | gtema | or maybe the problem is not the SDK, but keysoneauth1? | |
| 10:33:47 | gtema | if you stuck with older versions it might be a problem | |
| 10:34:55 | gtema | in this case you might try hardcoding endpoint (for single region cloud should be normally not a problem) | |
| 10:34:56 | ITD27M01 | gtema: In virtualenv the keystoneauth1 is the same | |
| 10:35:32 | ITD27M01 | gtema: In the long term I want to build rpm for new releases of openstacksdk. Perhaps there is already such a repository? | |
| 10:36:25 | gtema | eeh, this is a problem for everyone. I myself build RPMs for our cloud in OpensuseBuild | |
| 10:36:44 | gtema | but you can look for RDO packages | |
| 10:39:36 | ITD27M01 | gtema: For stein the 0.27.0 is available I will check it | |
| 10:40:18 | ITD27M01 | gtema: BTW by tracing the call I need to find the source of the identity url? | |
| 10:40:29 | gtema | if nothing works you can try doing conn.identity.get('YOUR_KEYSTONE_URL/v3/user_id/projects') | |
| 10:40:49 | gtema | you can see this in the project_scoped token response | |
| 10:41:24 | gtema | it's only that this https://docs.openstack.org/api-ref/identity/v3/?expanded=list-projects-for-user-detail#list-projects-for-user API need to be allowed for the user | |
| 10:42:25 | gtema | alternatively /v3/auth/projects | |
| 10:43:21 | gtema | this last might be available with unscoped token | |
| 10:45:15 | ITD27M01 | gtema: conn.identity.get('{}/v3/user_id/projects'.format(conn.auth['auth_url'])) ? | |
| 10:46:20 | gtema | almost - {}/v3/users/REQUESTED_USER_ID/projects | |
| 10:48:35 | gtema | or really conn.identity.get('users/{}/projects') | |
| 10:52:03 | gtema | res = conn.identity.get('users/%s/projects' % conn.current_user_id) | |
| 10:55:05 | ITD27M01 | gtema: projects = connection.identity.get('{auth_url}/v3/users/{user_id}/projects'.format(auth_url=str(connection.auth['auth_url']), user_id=str(user_id))) - this works for me. But without auth_url this return the same catalog is empty | |
| 10:55:32 | ITD27M01 | gtema: Thank you | |
| 10:55:39 | gtema | and if you connect as default project? | |
| 10:56:49 | ITD27M01 | gtema: Hm, what is default project? The project defined in clouds? | |
| 10:57:13 | gtema | yeah, in your domain there is root project | |
| 10:57:37 | gtema | i will try something in 10 minutes | |
| 11:14:00 | ITD27M01 | gtema: I am checking now and found that simple call (connection.identity.user_projects(user=user_id)) works in at least 0.28.0. In 0.27.0 it does not work yet | |
| 11:14:28 | gtema_ | well, if this works - cool. I can't actually connect to the my cloud without specifying project or domain | |
| 11:18:19 | ITD27M01 | gtema: Ok, thank you | |
| 11:18:25 | gtema_ | welcome | |
| 11:21:08 | gtema_ | btw: conn.session.get('{auth_url}/auth/projects'.format(auth_url=str(conn.auth['auth_url']))) might be a 'cleaner' solution | |
| 11:22:29 | gtema_ | or including /v3 - depending what is your case | |