| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-sdks - 2017-04-05 | |||
| 19:15:54 | malloc83 | having a look quick | |
| 19:16:22 | briancurtin | malloc83: yeah, we use keystoneauth for all of the auth handling, so we need to do a better job either explaining some of what can be done, or link out to keystoneauth’s docs on it | |
| 19:16:28 | malloc83 | i guessed it exactly like that, didnt work.. :) but that would be worth putting in the docs. | |
| 19:16:50 | malloc83 | ill have a look now why, perhaps i broke it :) | |
| 19:16:59 | briancurtin | malloc83: what version are you using? | |
| 19:17:16 | malloc83 | v2 auth api ? or what you asking for? the sdk? | |
| 19:17:22 | briancurtin | SDK version | |
| 19:17:30 | malloc83 | checking quick... | |
| 19:17:51 | malloc83 | openstacksdk==0.9.14 | |
| 19:18:16 | malloc83 | its the well defaulto version via pip install. | |
| 19:19:19 | briancurtin | ok cool, yeah from the SDK side of things that should all work (it maybe wouldn’t work on something way old, though i can’t remember how old). if you have more info on what failed and how i can maybe help figure it out. if it’s something with keystone itself though, that i don’t really know about | |
| 19:20:14 | malloc83 | briancurtin: no problem, just checking my understanding.. if i have a unscoped token on v2, i should be able to scope a new one using that against a project/tenant right? getting a 401 | |
| 19:20:44 | briancurtin | i know even less about keystone than what you just asked about | |
| 19:20:55 | malloc83 | briancurtin: haha cool :) understood. | |
| 19:21:05 | malloc83 | thanks for your help so far :) | |
| 19:21:35 | sindhu | stevemar: hi, https://review.openstack.org/#/c/383025/ is ready for your review :) | |
| 19:22:15 | openstackgerrit | Brian Haley proposed openstack/python-openstackclient master: Allow override of distributed router flag https://review.openstack.org/433442 | |
| 19:34:11 | openstackgerrit | Merged openstack/api-wg master: Clarify the meaning of BODY https://review.openstack.org/451568 | |
| 19:52:41 | openstackgerrit | Nakul Dahiwade proposed openstack/python-openstacksdk master: Introduce L7Rule for Octavia (load balancing) https://review.openstack.org/452832 | |
| 20:06:43 | openstackgerrit | Chris Dent proposed openstack/api-wg master: Create a set of api interoperability guidelines https://review.openstack.org/421846 | |
| 20:51:42 | openstackgerrit | Shashank Kumar Shankar proposed openstack/python-openstacksdk master: Introduce Pool for Octavia (load balancing) https://review.openstack.org/449264 | |
| #openstack-sdks - 2017-04-06 | |||
| 00:49:41 | openstackgerrit | Merged openstack/python-openstacksdk master: Clean up some errant doc warnings/errors https://review.openstack.org/453661 | |
| 01:43:44 | openstackgerrit | Merged openstack/python-openstackclient master: Add "qos-policy" option to "port create" & "port set" https://review.openstack.org/419236 | |
| 01:55:24 | openstackgerrit | Merged openstack/python-openstackclient master: "floating ip set/unset port" for OSC https://review.openstack.org/383025 | |
| 05:04:10 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 05:10:03 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 05:39:03 | openstackgerrit | yangweiwei proposed openstack/python-openstackclient master: Update endpoint-delete, endpoint-show, endpoint-set method https://review.openstack.org/453429 | |
| 07:15:46 | openstackgerrit | David Rabel proposed openstack/python-openstackclient master: Add --network and --port to server create https://review.openstack.org/444924 | |
| 08:55:44 | openstackgerrit | Reedip proposed openstack/python-openstackclient master: Introduce quota unset command https://review.openstack.org/376311 | |
| 11:37:43 | openstackgerrit | Stephen Finucane proposed openstack/python-openstackclient master: WIP! Start using 'cliff.sphinxext' https://review.openstack.org/452861 | |
| 11:50:01 | openstackgerrit | Rui Chen proposed openstack/python-openstackclient master: Make block-device-mapping more stable and clear https://review.openstack.org/438141 | |
| 11:50:06 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add support for epilogs https://review.openstack.org/454132 | |
| 12:11:46 | openstackgerrit | Rui Chen proposed openstack/python-openstackclient master: Make block-device-mapping more stable and clear https://review.openstack.org/438141 | |
| 12:35:37 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:35:54 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add 'autoprogram-cliff' Sphinx directive https://review.openstack.org/450322 | |
| 12:35:55 | openstackgerrit | Stephen Finucane proposed openstack/cliff master: Add support for epilogs https://review.openstack.org/454132 | |
| 12:36:11 | openstackgerrit | Stephen Finucane proposed openstack/python-openstackclient master: WIP! Start using 'cliff.sphinxext' https://review.openstack.org/452861 | |
| 12:39:03 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:42:07 | openstackgerrit | Takashi NATSUME proposed openstack/python-openstackclient master: List/show all server migration types https://review.openstack.org/450119 | |
| 12:57:31 | rabel_webclient | osc meeting in 3min? | |
| 12:59:44 | RuiChen | meeting-3， I think so | |
| 13:00:41 | rabel | dtroyer? | |
| 13:03:17 | rabel | hm | |
| 13:03:27 | rabel | what to do now? | |
| 13:04:55 | RuiChen | let us waiting few minute :-) | |
| 13:05:00 | rabel | ok | |
| 13:16:21 | openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | |
| 13:20:14 | RuiChen | rabel: I think dtroyer miss the meeting time :( | |
| 13:20:49 | rabel | RuiChen: yes, i think so, too. so no meeting. :( | |
| 13:23:56 | RuiChen | I have a bug, want to discuss, if others have time, please take a look it, the patch is ready to review https://review.openstack.org/#/c/438141/ thanks | |
| 13:33:20 | rabel | RuiChen: i'm trying to understand the bug report first. at 2) i think you would have to use the id of the volume, not the snapshot. i still recieve an error, but a different one: "Block Device Mapping is Invalid: failed to get snapshot..." | |
| 13:35:39 | RuiChen | rabel: if you want to create a bdm from snapshot, the type should be 'snapshot' and the uuid should be snapshot uuid | |
| 13:36:23 | rabel | ah, sorry. you are right | |
| 13:36:27 | RuiChen | rabel: nova will create a volume from snapshot that you specified, then attach the volume to server as bdm | |
| 13:42:21 | malloc83 | Hi guys, using the openstack sdk, if i have a scoped token, how can I use it? without having the connection handler creating another new token? | |
| 13:42:54 | malloc83 | so when you setup the connection it has "token/password" auth_plugin... but i dont want either.. i already have a token. | |
| 13:42:56 | malloc83 | is this possible? | |
| 13:44:37 | reedip | no meeting? | |
| 13:46:00 | RuiChen | reedip: seems that | |
| 13:47:12 | dtroyer | yeah, I didn't get here until a few minutes ago | |
| 13:47:29 | dtroyer | 13 minutes left, anything that needs to be in meeting minutes? | |
| 13:48:29 | RuiChen | no from me, I just have a patch need to review https://review.openstack.org/#/c/438141/ | |
| 13:49:37 | dtroyer | ok, FWIW I'm working to prepare the next release of OSC and osc-lib…need to get the -tips jobs passing first | |
| 13:51:11 | briancurtin | malloc83: didn't i show you how to do that yesterday? | |
| 13:51:25 | malloc83 | briancurtin: that doesnt re-use the token... | |
| 13:51:35 | malloc83 | it actually uses the token to create another token :-( | |
| 13:52:09 | malloc83 | so if i provide tenant and old token, it actually goes and scopes the token again and uses a new one temporary | |
| 13:52:14 | malloc83 | but the temporary tokens could build up. | |
| 13:52:22 | dtroyer | malloc83: what is the concern about re-using tokens? | |
| 13:52:25 | malloc83 | you could end up with thousands of tokens :) | |
| 13:52:51 | malloc83 | dtroyer: so we have a portal we use with our OSS system and BSS and we use the same dashboard for openstack, not using horizon | |
| 13:52:58 | malloc83 | and the issue is every time a user switches a project | |
| 13:53:05 | malloc83 | we need to scope a token which is fine and works as expected | |
| 13:53:19 | malloc83 | so we store the token in a session for the projects | |
| 13:53:27 | malloc83 | but now the SDK keeps creating new tokens when we provide the old working token | |
| 13:53:29 | briancurtin | maybe this is more of a keystoneauth question then. sdk doesn't really do anything with auth, it offloads it all to that lib | |
| 13:53:51 | briancurtin | or maybe we're using KSA wrong? | |
| 13:53:55 | dtroyer | that lib is keystoneauth, which handles all of the token work for you | |
| 13:54:09 | dtroyer | briancurtin: are you re-using the ksa session in Connection? | |
| 13:54:14 | malloc83 | dtroyer: so via the SDK how do i get keystoneauth not to use a new token? :) and use the one provided. | |
| 13:54:27 | briancurtin | malloc83: fix it? i don't know | |
| 13:54:40 | dtroyer | I don't know much about actually using the SDK at that level…let me find how we set it up in openstackclient | |
| 13:54:48 | malloc83 | i could fix it... but hoping i was just being silly... and there was an obvious solution. | |
| 13:54:52 | briancurtin | dtroyer: we subclass ksa session | |
| 13:55:11 | malloc83 | one sec one of our guys has a solution ... just checking code. | |
| 13:55:12 | rabel | RuiChen: left you a comment in the change | |
| 13:55:32 | dtroyer | ok, so as long as that is persisted the token should hang around, only being re-issued after it expires | |
| 13:55:35 | briancurtin | maybe we're not passing the right stuff into it while init'ing. i'm on my phone right now, will be back at a real computer shortly | |
| 13:56:37 | dtroyer | briancurtin: all we do in OSC is create Connection with authentication=<the session.auth from our KSA session> | |
| 13:57:41 | dtroyer | I haven't sniffed that for long-running operations, but I don't think it re-auths for every call with that. We're managing the Session in OSC directly, but I understood that Connection would do that too as long as the Connection object was around | |
| 13:58:48 | RuiChen | rabel: got it | |
| 13:58:53 | briancurtin | yep, it only reauths at expiration | |
| 13:59:22 | malloc83 | guys so there is a fix for doing this, using keystoneauth1 directly... | |
| 13:59:28 | malloc83 | but i would like to use the sdk... | |
| 13:59:35 | malloc83 | can i pastebin it? | |
| 13:59:43 | dtroyer | malloc83: so part of what I understand you are doing is calling the N different library clients in your app | |
| 13:59:43 | malloc83 | and perhaps you will understand what i am trying todo with the sdk | |
| 13:59:45 | briancurtin | sure, can make it work | |
| 13:59:54 | briancurtin | probably | |
| 14:00:02 | malloc83 | lemme paste bin, and you guys tell me how to do the same with the sdk.. | |