| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-sdks - 2017-04-05 | |||
| 19:09:20 | malloc83 | bradjones: spot on.. this is for wsgi app.. | |
| 19:09:46 | malloc83 | briancurtin: i am sorry spot on yes.. :) getting used to this new mac keyboard. | |
| 19:10:08 | briancurtin | malloc83: that has definitely worked in the past. let me write something up and send it to you in a min | |
| 19:10:11 | malloc83 | perhaps i missed this in the documentation, looked through all the examples too. | |
| 19:10:16 | openstackgerrit | Chris Dent proposed openstack/api-wg master: Remove reference to nova on version discovery https://review.openstack.org/453744 | |
| 19:11:52 | malloc83 | briancurtin: it works great, just no idea how to re-use the token with the connection handler.. other than that, everything seems to be as expected.. the documentation however has no mention of using token for auth, just v2,v3 keystone username and password, unscoped etc | |
| 19:15:39 | briancurtin | malloc83: is this what you’re looking for https://gist.github.com/briancurtin/a10f4ed985d51a64f9c5de4c63b685fc | |
| 19:15:54 | malloc83 | having a look quick | |
| 19:16:22 | briancurtin | malloc83: yeah, we use keystoneauth for all of the auth handling, so we need to do a better job either explaining some of what can be done, or link out to keystoneauth’s docs on it | |
| 19:16:28 | malloc83 | i guessed it exactly like that, didnt work.. :) but that would be worth putting in the docs. | |
| 19:16:50 | malloc83 | ill have a look now why, perhaps i broke it :) | |
| 19:16:59 | briancurtin | malloc83: what version are you using? | |
| 19:17:16 | malloc83 | v2 auth api ? or what you asking for? the sdk? | |
| 19:17:22 | briancurtin | SDK version | |
| 19:17:30 | malloc83 | checking quick... | |
| 19:17:51 | malloc83 | openstacksdk==0.9.14 | |
| 19:18:16 | malloc83 | its the well defaulto version via pip install. | |
| 19:19:19 | briancurtin | ok cool, yeah from the SDK side of things that should all work (it maybe wouldn’t work on something way old, though i can’t remember how old). if you have more info on what failed and how i can maybe help figure it out. if it’s something with keystone itself though, that i don’t really know about | |
| 19:20:14 | malloc83 | briancurtin: no problem, just checking my understanding.. if i have a unscoped token on v2, i should be able to scope a new one using that against a project/tenant right? getting a 401 | |
| 19:20:44 | briancurtin | i know even less about keystone than what you just asked about | |
| 19:20:55 | malloc83 | briancurtin: haha cool :) understood. | |
| 19:21:05 | malloc83 | thanks for your help so far :) | |
| 19:21:35 | sindhu | stevemar: hi, https://review.openstack.org/#/c/383025/ is ready for your review :) | |
| 19:22:15 | openstackgerrit | Brian Haley proposed openstack/python-openstackclient master: Allow override of distributed router flag https://review.openstack.org/433442 | |
| 19:34:11 | openstackgerrit | Merged openstack/api-wg master: Clarify the meaning of BODY https://review.openstack.org/451568 | |
| 19:52:41 | openstackgerrit | Nakul Dahiwade proposed openstack/python-openstacksdk master: Introduce L7Rule for Octavia (load balancing) https://review.openstack.org/452832 | |
| 20:06:43 | openstackgerrit | Chris Dent proposed openstack/api-wg master: Create a set of api interoperability guidelines https://review.openstack.org/421846 | |
| 20:51:42 | openstackgerrit | Shashank Kumar Shankar proposed openstack/python-openstacksdk master: Introduce Pool for Octavia (load balancing) https://review.openstack.org/449264 | |
| #openstack-sdks - 2017-04-06 | |||
| 00:49:41 | openstackgerrit | Merged openstack/python-openstacksdk master: Clean up some errant doc warnings/errors https://review.openstack.org/453661 | |
| 01:43:44 | openstackgerrit | Merged openstack/python-openstackclient master: Add "qos-policy" option to "port create" & "port set" https://review.openstack.org/419236 | |
| 01:55:24 | openstackgerrit | Merged openstack/python-openstackclient master: "floating ip set/unset port" for OSC https://review.openstack.org/383025 | |
| 05:04:10 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 05:10:03 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 05:39:03 | openstackgerrit | yangweiwei proposed openstack/python-openstackclient master: Update endpoint-delete, endpoint-show, endpoint-set method https://review.openstack.org/453429 | |
| 07:15:46 | openstackgerrit | David Rabel proposed openstack/python-openstackclient master: Add --network and --port to server create https://review.openstack.org/444924 | |
| 08:55:44 | openstackgerrit | Reedip proposed openstack/python-openstackclient master: Introduce quota unset command https://review.openstack.org/376311 | |
| 11:37:43 | openstackgerrit | Stephen Finucane proposed openstack/python-openstackclient master: WIP! Start using 'cliff.sphinxext' https://review.openstack.org/452861 | |
| 11:50:01 | openstackgerrit | Rui Chen proposed openstack/python-openstackclient master: Make block-device-mapping more stable and clear https://review.openstack.org/438141 | |
| 11:50:06 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add support for epilogs https://review.openstack.org/454132 | |
| 12:11:46 | openstackgerrit | Rui Chen proposed openstack/python-openstackclient master: Make block-device-mapping more stable and clear https://review.openstack.org/438141 | |
| 12:35:37 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:35:54 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add 'autoprogram-cliff' Sphinx directive https://review.openstack.org/450322 | |
| 12:35:55 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add support for epilogs https://review.openstack.org/454132 | |
| 12:36:11 | openstackgerrit | Stephen Finucane proposed openstack/python-openstackclient master: WIP! Start using 'cliff.sphinxext' https://review.openstack.org/452861 | |
| 12:39:03 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:42:07 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:57:31 | rabel_webclient | osc meeting in 3min? | |
| 12:59:44 | RuiChen | meeting-3， I think so | |
| 13:00:41 | rabel | dtroyer? | |
| 13:03:17 | rabel | hm | |
| 13:03:27 | rabel | what to do now? | |
| 13:04:55 | RuiChen | let us waiting few minute :-) | |
| 13:05:00 | rabel | ok | |
| 13:16:21 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 13:20:14 | RuiChen | rabel: I think dtroyer miss the meeting time :( | |
| 13:20:49 | rabel | RuiChen: yes, i think so, too. so no meeting. :( | |
| 13:23:56 | RuiChen | I have a bug, want to discuss, if others have time, please take a look it, the patch is ready to review https://review.openstack.org/#/c/438141/ thanks | |
| 13:33:20 | rabel | RuiChen: i'm trying to understand the bug report first. at 2) i think you would have to use the id of the volume, not the snapshot. i still recieve an error, but a different one: "Block Device Mapping is Invalid: failed to get snapshot..." | |
| 13:35:39 | RuiChen | rabel: if you want to create a bdm from snapshot, the type should be 'snapshot' and the uuid should be snapshot uuid | |
| 13:36:23 | rabel | ah, sorry. you are right | |
| 13:36:27 | RuiChen | rabel: nova will create a volume from snapshot that you specified, then attach the volume to server as bdm | |
| 13:42:21 | malloc83 | Hi guys, using the openstack sdk, if i have a scoped token, how can I use it? without having the connection handler creating another new token? | |
| 13:42:54 | malloc83 | so when you setup the connection it has "token/password" auth_plugin... but i dont want either.. i already have a token. | |
| 13:42:56 | malloc83 | is this possible? | |
| 13:44:37 | reedip | no meeting? | |
| 13:46:00 | RuiChen | reedip: seems that | |
| 13:47:12 | dtroyer | yeah, I didn't get here until a few minutes ago | |
| 13:47:29 | dtroyer | 13 minutes left, anything that needs to be in meeting minutes? | |
| 13:48:29 | RuiChen | no from me, I just have a patch need to review https://review.openstack.org/#/c/438141/ | |
| 13:49:37 | dtroyer | ok, FWIW I'm working to prepare the next release of OSC and osc-lib…need to get the -tips jobs passing first | |
| 13:51:11 | briancurtin | malloc83: didn't i show you how to do that yesterday? | |
| 13:51:25 | malloc83 | briancurtin: that doesnt re-use the token... | |
| 13:51:35 | malloc83 | it actually uses the token to create another token :-( | |
| 13:52:09 | malloc83 | so if i provide tenant and old token, it actually goes and scopes the token again and uses a new one temporary | |
| 13:52:14 | malloc83 | but the temporary tokens could build up. | |
| 13:52:22 | dtroyer | malloc83: what is the concern about re-using tokens? | |
| 13:52:25 | malloc83 | you could end up with thousands of tokens :) | |
| 13:52:51 | malloc83 | dtroyer: so we have a portal we use with our OSS system and BSS and we use the same dashboard for openstack, not using horizon | |
| 13:52:58 | malloc83 | and the issue is every time a user switches a project | |
| 13:53:05 | malloc83 | we need to scope a token which is fine and works as expected | |
| 13:53:19 | malloc83 | so we store the token in a session for the projects | |
| 13:53:27 | malloc83 | but now the SDK keeps creating new tokens when we provide the old working token | |
| 13:53:29 | briancurtin | maybe this is more of a keystoneauth question then. sdk doesn't really do anything with auth, it offloads it all to that lib | |
| 13:53:51 | briancurtin | or maybe we're using KSA wrong? | |
| 13:53:55 | dtroyer | that lib is keystoneauth, which handles all of the token work for you | |
| 13:54:09 | dtroyer | briancurtin: are you re-using the ksa session in Connection? | |
| 13:54:14 | malloc83 | dtroyer: so via the SDK how do i get keystoneauth not to use a new token? :) and use the one provided. | |
| 13:54:27 | briancurtin | malloc83: fix it? i don't know | |
| 13:54:40 | dtroyer | I don't know much about actually using the SDK at that level…let me find how we set it up in openstackclient | |
| 13:54:48 | malloc83 | i could fix it... but hoping i was just being silly... and there was an obvious solution. | |
| 13:54:52 | briancurtin | dtroyer: we subclass ksa session | |
| 13:55:11 | malloc83 | one sec one of our guys has a solution ... just checking code. | |
| 13:55:12 | rabel | RuiChen: left you a comment in the change | |
| 13:55:32 | dtroyer | ok, so as long as that is persisted the token should hang around, only being re-issued after it expires | |
| 13:55:35 | briancurtin | maybe we're not passing the right stuff into it while init'ing. i'm on my phone right now, will be back at a real computer shortly | |
| 13:56:37 | dtroyer | briancurtin: all we do in OSC is create Connection with authentication=<the session.auth from our KSA session> | |
| 13:57:41 | dtroyer | I haven't sniffed that for long-running operations, but I don't think it re-auths for every call with that. We're managing the Session in OSC directly, but I understood that Connection would do that too as long as the Connection object was around | |
| 13:58:48 | RuiChen | rabel: got it | |
| 13:58:53 | briancurtin | yep, it only reauths at expiration | |
| 13:59:22 | malloc83 | guys so there is a fix for doing this, using keystoneauth1 directly... | |