| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-sdks - 2018-05-15 | |||
| 13:30:46 | mordred | mnaser: I added an ability for horizon to serve clouds.yaml files ... I'd prefer to spend more effort on just handing those out ... I've been meaning to write an osc command for "add this clouds.yaml file to my existing file" | |
| 13:31:11 | mnaser | yeah that is a nicer alterantive | |
| 13:52:07 | Vishal_ | As an admin tenant I want to create a vm on some other tenant...but when I am doing this using openstack sdk I am getting this error http://paste.openstack.org/show/721003/ | |
| 13:52:26 | Vishal_ | Any pointers?? thanks | |
| 14:10:42 | openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Fix logging of encoded headers https://review.openstack.org/568365 | |
| 14:11:01 | dasp | Vishal_: per https://developer.openstack.org/api-ref/compute/#create-server tenant_id is not an allowed field, you should get a token for that project and use that to make the request | |
| 14:13:15 | mordred | Vishal_: what dasp said. you may want to try the 'connect_as' method on connection which will return you a new connection object ... | |
| 14:13:56 | mordred | so like "new_conn = conn.connect_as(project_id='19f5c2522fbd4cf8b37a89d0758bdd68')" | |
| 14:19:34 | openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Fix logging of encoded headers https://review.openstack.org/568365 | |
| 14:29:56 | openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Fix logging of encoded headers https://review.openstack.org/568365 | |
| 15:25:42 | slaweq | hi OSC cores, can You add to Your review list: https://review.openstack.org/#/c/567828/ and https://review.openstack.org/#/c/567620/ ? | |
| 15:25:45 | slaweq | thx in advance | |
| 16:43:49 | openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Expose version_between as a real function https://review.openstack.org/568640 | |
| 17:01:10 | openstackgerrit | Slawek Kaplonski proposed openstack/python-openstackclient master: Make max_burst_kbps option as optional for bw limit QoS rule https://review.openstack.org/567828 | |
| 17:44:10 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Honor service-type aliases in config https://review.openstack.org/566929 | |
| 17:44:10 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Pass default_microversion to adapter constructor https://review.openstack.org/557935 | |
| 17:44:11 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Throw an error on missing support for default microversion https://review.openstack.org/557938 | |
| 17:44:11 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Rename service_key to service_type https://review.openstack.org/558049 | |
| 17:44:55 | mordred | kmalloc: we should release a ksa with the new function before https://review.openstack.org/557938 gets landed/released (the current version of the patch uses the private function, which is obviously not great) | |
| 18:10:05 | kmalloc | mordred: ++ | |
| 18:10:32 | kmalloc | mordred: working on the sphinx issue shortly for the header fix, then we can do the next round of things. | |
| 18:10:37 | kmalloc | and get that out the door | |
| 18:49:11 | openstackgerrit | Merged openstack/openstacksdk master: Fixing bug where original and new dicts would always be the same https://review.openstack.org/566683 | |
| 20:09:04 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Pass default_microversion to adapter constructor https://review.openstack.org/557935 | |
| 20:09:05 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Throw an error on missing support for default microversion https://review.openstack.org/557938 | |
| 20:09:05 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Rename service_key to service_type https://review.openstack.org/558049 | |
| 20:11:18 | openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Expose version_between as a real function https://review.openstack.org/568640 | |
| 20:44:29 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Pass default_microversion to adapter constructor https://review.openstack.org/557935 | |
| 20:44:29 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Throw an error on missing support for default microversion https://review.openstack.org/557938 | |
| 20:44:30 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Rename service_key to service_type https://review.openstack.org/558049 | |
| 21:41:16 | openstackgerrit | Monty Taylor proposed openstack/openstacksdk master: Avoid globally modifying yaml library https://review.openstack.org/568705 | |
| #openstack-sdks - 2018-05-16 | |||
| 07:11:39 | openstackgerrit | Slawek Kaplonski proposed openstack/python-openstackclient master: Make max_burst_kbps option as optional for bw limit QoS rule https://review.openstack.org/567828 | |
| 09:23:31 | frickler | OSC cores: in addition to slaweq's request, another reminder for these patches waiting in queue for a long time already: https://review.openstack.org/516701 https://review.openstack.org/558824 https://review.openstack.org/540633 https://review.openstack.org/559742 | |
| 09:26:12 | frickler | dtroyer: amotoki: dhellmann: ^^ | |
| 09:48:58 | openstackgerrit | Slawek Kaplonski proposed openstack/python-openstackclient master: Make max_burst_kbps option as optional for bw limit QoS rule https://review.openstack.org/567828 | |
| 12:42:57 | dtantsur | folks, who knows what magic to add to keystoneauth Session to make it work with custom SSL certificates that are installed in the system? | |
| 12:43:17 | mordred | dtantsur: morning! | |
| 12:43:22 | dtantsur | I know that openstackclient, ironicclient, etc work correctly, but a naively written application does not.. | |
| 12:43:30 | dtantsur | hey mordred | |
| 12:44:08 | dtantsur | (it's not impossible that tripleo sets up certificates in a weird way, but everything seems okay with it...) | |
| 12:44:26 | mordred | dtantsur: verify and cert are the arguments you want | |
| 12:44:42 | dtantsur | mordred: okay, but what do I set them to? | |
| 12:44:54 | mordred | dtantsur: they take weird argugments - one sec | |
| 12:45:44 | mordred | dtantsur: https://docs.openstack.org/keystoneauth/latest/api/keystoneauth1.html#keystoneauth1.session.Session | |
| 12:45:58 | mordred | dtantsur: verify takes either True or False of the path to a CA bundle | |
| 12:46:26 | mordred | dtantsur: cert is either a path to a single bundle with cert and key, or a tuple of (cert_path, key_path) | |
| 12:46:26 | dtantsur | here's a funny thing: just using plain requests works, various CLI work, my application trying to pass a Session to ironicclient does not... | |
| 12:47:21 | dtantsur | so yeah, I know this one, but I don't know where to get these parameters.. should they come from CLI args? | |
| 12:47:29 | dtantsur | like where in https://review.openstack.org/#/c/568688/8/metalsmith/_cmd.py do I wire them in? | |
| 12:47:53 | mordred | dtantsur: oh - you're using openstack.config (good) - one sec | |
| 12:48:09 | dtantsur | mordred: I tried before that patch (with directly using Session) and with it | |
| 12:48:22 | dtantsur | maybe ditching ironicclient will help, dunno :) | |
| 12:48:33 | mordred | it will - but let's get this one working :) | |
| 12:49:44 | dtantsur | another fun fact: it Works On DevStack (tm) | |
| 12:50:10 | mordred | :) | |
| 12:51:44 | mordred | dtantsur: it should be --os-cacert --os-cert and --os-key | |
| 12:52:23 | dtantsur | okay, but what I don't understand is *why* I have to provide it | |
| 12:52:46 | dtantsur | the certificate is (apparently) in the system store, and devstack is fine with what I'm doing | |
| 12:52:58 | mordred | I would say that it's not actually in the system store | |
| 12:53:42 | mordred | by default with no parameters everything should be set up to look for CAs in the system store | |
| 12:53:54 | dtantsur | right, so I wonder what magic tripleo uses | |
| 12:55:01 | mordred | it's possible this is related to the weirdness with requests bundling certs | |
| 12:55:33 | dtantsur | mmm, possibly. because I try metalsmith from a venv | |
| 12:55:42 | mordred | I can't remember all the details, but in some combos the 'system' ca bundles requests looks for are not the system ca bundles but are instead the built-in vendored ca bundles in requests | |
| 12:56:01 | mordred | because *bong* | |
| 12:56:08 | dtantsur | AHA! | |
| 12:56:17 | dtantsur | I tried 'ironic' command from venv and it failed as well | |
| 12:56:26 | mordred | yah. it'll be the vendored bundles thing | |
| 12:56:44 | mordred | I always just put a path to the ca into my clouds.yaml just to be sure | |
| 12:56:44 | dtantsur | so I guess no one is to blame, I'm just unlucky? | |
| 12:56:57 | mordred | well - I think someone is to blame ... but blaming them won't fix anything :) | |
| 12:57:03 | dtantsur | fair | |
| 12:57:17 | mordred | apparently "finding system installed ca bundles on all platforms is too hard" | |
| 12:57:31 | dtantsur | okay, I guess my patch is ready to land (unless you want to review it) | |
| 12:57:41 | mordred | neat - lemme look just for fun | |
| 12:58:01 | mordred | your commit message makes me happy | |
| 12:58:36 | dtantsur | follow-up patches will make you even happier :) | |
| 13:02:11 | dtantsur | mordred: something in openstacksdk confuses me. we have connection.update_machine (for example) and connection.baremetal.update_node | |
| 13:02:22 | mordred | dtantsur: those all look great! there's a stack of sdk patches that should put us in a good position to support what you need from microversions for ironic | |
| 13:02:24 | dtantsur | which one is supposed to be used? connection.baremetal does not have many eatures | |
| 13:02:29 | dtantsur | cool! | |
| 13:02:52 | mordred | dtantsur: yah - so - connection.update_machine is the shade method that TheJulia wrote | |
| 13:03:26 | mordred | connection.baremetal is the support for ironic that was in the sdk before the merge - we still have work to do to merge the two of them into a single piece of sanity | |
| 13:04:14 | dtantsur | mordred: and which one will be the final? | |
| 13:04:19 | mordred | but if there is a method directly on connection, I'd use it - it'll be the same code that backs up the ansible modules/bifrost | |
| 13:04:59 | dtantsur | sure, it's just confusing. and I don't want to start relying on something that is pending deprecation | |
| 13:05:31 | mordred | yah - you should be safe with the connection methods- they're not going to get deprecated | |
| 13:06:18 | mordred | it'll either remain different or might become just a convenience wrapper around connection.baremetal - but it won't go away | |
| 13:07:34 | dtantsur | neat! while we're here: are you open to adding things like "deploy_machine", "provide_machine", etc? essentially, convenience wrappers around node_set_provision_state, similar to inspect_machine? | |
| 13:07:43 | mordred | absolutely! | |
| 13:09:41 | dtantsur | okay, I may be able to carve some time for these | |
| 13:10:03 | dtantsur | actually, I'd rename node_set_provision_state to something, because consistency | |
| 13:10:08 | mordred | woot! | |
| 13:10:51 | mordred | machine_set_provision_state perhaps? | |
| 13:12:12 | mordred | or, honestly, I think set_machine_provision_state is more in keeping with the verb_noun pattern | |
| 13:17:51 | dtantsur | yeah, I like the latter more | |
| 13:30:32 | frickler | dtantsur: mordred: this might be related to the ca issue, but also doesn't have a solution yet https://storyboard.openstack.org/#!/story/1756723 | |
| 13:31:12 | dtantsur | not wow | |
| 13:34:01 | mordred | frickler: that's awesome | |
| 13:35:13 | mordred | frickler: so - I think that's going to be an issue with parameter exchange between osc and sdk ... and should be a thing we can fix as part of the rework of how the config is processed and objects get created in osc 4 | |