| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-sdks - 2020-04-30 | |||
| 16:19:23 | dtantsur | I may try to carefully go to the woods. Impossible to stay in this flat any more.. | |
| 16:19:39 | elmiko | ++, good luck! | |
| 16:27:05 | dtantsur | thanks :) | |
| 17:00:07 | elmiko | have a good weekend all, stay safe out there! o/ | |
| 17:29:38 | mordred | zbr: https://review.opendev.org/#/c/724659/ has a sad | |
| 17:38:59 | zbr | mordred: i already proposed a fix to them at https://github.com/sqlalchemy/dogpile.cache/pull/179 but somehow it seems to be hard to teach on old dog new tricks. | |
| 17:39:16 | zbr | if they merge it, a new release would fix it. | |
| 17:59:11 | mordred | cool | |
| 23:00:33 | openstackgerrit | guang-yee proposed openstack/keystoneauth stable/pike: Make tests pass in 2020 https://review.opendev.org/724774 | |
| #openstack-sdks - 2020-05-01 | |||
| 01:07:59 | openstackgerrit | Lance Bragstad proposed openstack/keystoneauth master: WIP: Inject /v3 in token path for v3 plugins https://review.opendev.org/724785 | |
| 02:32:47 | openstackgerrit | Noah Mickus proposed openstack/openstacksdk master: Add TLS protocol support for Octavia https://review.opendev.org/724789 | |
| 05:13:20 | openstackgerrit | Merged openstack/keystoneauth stable/pike: Make tests pass in 2020 https://review.opendev.org/724774 | |
| 14:37:28 | openstackgerrit | Lance Bragstad proposed openstack/keystoneauth master: Inject /v3 in token path for v3 plugins https://review.opendev.org/724785 | |
| 18:28:04 | openstackgerrit | Riccardo Pittau proposed openstack/osc-lib master: Use mock from unittest https://review.opendev.org/724904 | |
| 20:19:58 | openstackgerrit | cvstealth proposed openstack/openstacksdk master: Added support for domains when groups are passed to grant_revoke function. https://review.opendev.org/724922 | |
| 21:15:19 | openstackgerrit | Riccardo Pittau proposed openstack/osc-lib master: Add pep8 import order check https://review.opendev.org/724932 | |
| 21:56:58 | openstackgerrit | cvstealth proposed openstack/openstacksdk master: Added support for domains when groups are passed to grant_revoke function. https://review.opendev.org/724922 | |
| #openstack-sdks - 2020-05-02 | |||
| 02:27:45 | openstackgerrit | cvstealth proposed openstack/openstacksdk master: Added support for domains when groups are passed to grant_revoke function. https://review.opendev.org/724922 | |
| 09:58:19 | openstackgerrit | Riccardo Pittau proposed openstack/osc-lib master: Remove six library from dependencies https://review.opendev.org/724968 | |
| 11:39:07 | openstackgerrit | cvstealth proposed openstack/openstacksdk master: Added support for domains when groups are passed to grant_revoke function. https://review.opendev.org/724922 | |
| #openstack-sdks - 2020-05-04 | |||
| 12:19:42 | nightmare_unreal | can someone review this : https://review.opendev.org/#/c/713881/ . Thanks | |
| 14:36:57 | openstackgerrit | subham rai proposed openstack/openstacksdk master: baremetal: support for volume connectors API https://review.opendev.org/718746 | |
| 18:36:40 | openstackgerrit | Merged openstack/ansible-collections-openstack master: os_server_action: pass imageRef to rebuild https://review.opendev.org/724420 | |
| 19:45:24 | dtroyer | mordred: Do you know of anyone using multi-factor auth with SDK or OSC? | |
| 19:46:15 | mordred | dtroyer: I wanna say yes | |
| 19:46:20 | mordred | dtroyer: I know adriant was working on it | |
| 19:46:29 | mordred | and I feel like it was important to someone else | |
| 19:46:41 | mordred | dtroyer: (with osc - not so much with sdk) | |
| 19:47:01 | mordred | cmurphy, dtantsur|afk : ^^ do you know? | |
| 19:47:47 | dtroyer | Ok, thanks. I am about to find out the hard way just how badly OSC is broken here with a cloud that does not have app creds enabled… | |
| 19:48:59 | mordred | dtroyer: hahaha. "yay" | |
| 19:49:12 | mordred | dtroyer: I *think* it "works" for some value of "it" and "works | |
| 19:49:18 | cmurphy | mordred: dtroyer afaik adriant hasn't gotten around to adding support for MFA receipts (https://specs.openstack.org/openstack/keystone-specs/specs/keystone/stein/mfa-auth-receipt.html) to osc so it is still pretty broken | |
| 19:49:54 | mordred | cmurphy: ah - ok . so I'm probably remembering "someone *wants* to use it" more than "someone is using it" | |
| 19:52:44 | cmurphy | it's possible that osc could use the v3multifactor auth plugin from ksa and it could just work | |
| 19:53:03 | cmurphy | that wouldn't require the receipts workflow | |
| 19:53:31 | dtroyer | cmurphy: Reading through that, is it only the OSC bit that is still undone? Horizon is working on the cloud I am testing on, OSC is not (no well anyway) | |
| 19:53:44 | dtroyer | hmmm… I need to learn about v3multifactor | |
| 19:54:07 | cmurphy | dtroyer: afaik horizon doesn't have it yet either but i could be out of date | |
| 19:54:14 | cmurphy | dtroyer: https://docs.openstack.org/keystoneauth/latest/authentication-plugins.html#multi-factor-with-v3-identity-plugins | |
| 19:55:24 | dtroyer | I do not know exactly how this cloud is configured, they are using Duo if that means anything specific | |
| 19:58:17 | mordred | dtroyer: if only you knew someone who could add multifactor support to osc | |
| 20:00:53 | dtroyer | i know, right? | |
| 20:03:32 | dtroyer | actually, some of what I am seeing so far may be around the session/token not getting re-used properly. and if we only had some insecure method of caching that between commands | |
| 20:19:15 | mordred | dtroyer: if only | |
| 20:19:26 | mordred | dtroyer: I feel like someone should have thought about this before | |
| 20:28:18 | openstackgerrit | Noah Mickus proposed openstack/openstacksdk master: Add TLS protocol support for Octavia https://review.opendev.org/724789 | |
| 22:02:22 | adriant | cmurphy, mordred: I was working on Horizon and got side tracked/stuck with that, but never touched OSC | |
| 22:02:57 | adriant | the support is in KSA, just doesn't exist in the cli tools properly unless you get/set a token somehow yourself and then use the tools | |
| 22:03:34 | adriant | I don't have the time for it, but will gladly review/comment on the design of the support in OSC etc | |
| 22:19:21 | rm_work | ah mordred: https://review.opendev.org/#/c/650374/22/openstackclient/compute/v2/server.py this changed the behavior of the image lookup in the server commands :( | |
| 22:19:31 | rm_work | just caught it internally today | |
| 22:19:46 | rm_work | now lookups by image *name* fail, where they worked before | |
| 22:20:14 | rm_work | because it seems the switch to the SDK used the id lookup function directly, rather than emulating that "id, then name" lookup feature the old code had | |
| 22:20:27 | rm_work | (I believe) | |
| 23:05:53 | rm_work | yeah, patch incoming | |
| 23:11:53 | openstackgerrit | Adam Harwell proposed openstack/python-openstackclient master: Correct image lookup during server rebuild https://review.opendev.org/725427 | |
| 23:12:00 | rm_work | mordred: ^^ should resolve it | |
| 23:12:07 | rm_work | will be testing locally today/tomorrow | |
| 23:20:01 | rm_work | oh right, this is client, tested locally just now and it resolved the issue :) | |
| #openstack-sdks - 2020-05-05 | |||
| 02:10:03 | mordred | rm_work: thanks for the patch - +2 from me | |
| 14:11:31 | mordred | slaweq: comment on https://review.opendev.org/#/c/717881 | |
| 14:13:34 | slaweq | mordred: thx | |
| 14:13:45 | slaweq | I will take a look later today | |
| #openstack-sdks - 2020-05-06 | |||
| 15:13:36 | rpittau | hi all, if anyone got a minute, those should be fairly quick to review https://review.opendev.org/724904 https://review.opendev.org/724932 https://review.opendev.org/724968 thanks! | |
| 15:39:50 | dtantsur | dunno if I should +2 stuff on osc-lib, but I just did | |
| 15:55:16 | mordred | dtantsur: you totally should :) | |
| 16:06:25 | rpittau | thanks! :) | |
| 16:10:16 | dtantsur | :) | |
| 17:43:44 | openstackgerrit | Merged openstack/osc-lib master: Use mock from unittest https://review.opendev.org/724904 | |
| 17:43:45 | openstackgerrit | Merged openstack/osc-lib master: Add pep8 import order check https://review.opendev.org/724932 | |
| 18:00:03 | openstackgerrit | Dean Troyer proposed openstack/osc-lib master: Save the results from the early authentication https://review.opendev.org/725953 | |
| 18:03:23 | dtroyer | I have no idea how long ago that ^^^^ changed but at a minimum keystoneclient was affected…and no I'm not doing a git blame as I'm probably the one who did it… | |
| 19:22:15 | mordred | dtroyer: you angered the gods of pep8 | |
| 19:24:46 | openstackgerrit | Monty Taylor proposed openstack/osc-lib master: Save the results from the early authentication https://review.opendev.org/725953 | |
| 19:26:52 | dtroyer | mordred: hrm… why did it pass locally???? | |
| 19:27:19 | mordred | dtroyer: maybe stale venv? | |
| 19:27:23 | dtroyer | ah, I see, my local bit-rotted dev environment... | |
| 19:27:38 | mordred | yeah - the python3 push caused a bump in several of the linters | |
| 19:27:57 | mordred | in other news though - no more python2.7! | |
| 19:28:13 | mordred | (and, in fact, for osc, no more 3.5 - so you can use f-strings if you want to!) | |
| 19:28:26 | dtroyer | \o/ except everything in my workspace was still set for that… | |
| 19:29:00 | dtroyer | a good reason to start over and ignore about 27 stale branches that had at least one good idea in them | |
| 19:29:24 | mordred | ignoring things is the best | |
| 19:30:33 | dtroyer | except I am likely to resurrect the devstack technique I tried for running osc in the background and piping comamnds to it… we have a rather annoying auth situation here, which is why cutting the /auth/token round trips in half is worthwhile | |
| 19:31:07 | dtroyer | and for my next trick, learning to do the same for fog… | |
| 19:32:01 | mordred | dtroyer: I don't suppose getting the cloud to update and add appcred support is likely then | |
| 19:32:41 | dtroyer | It's lucky to be on queens (vmware-backed) and they don't even know what that is. | |
| 19:33:59 | mordred | dtroyer: well - I guess our insistence on supporting old openstacks has paid off | |
| 19:35:05 | dtroyer | absofrickinlutely…. never give up that fight :) | |
| 19:36:05 | dtroyer | mordred: while I've got you, what did you guys switch to rather than cloud-init? | |
| 19:36:21 | mordred | we use glean | |
| 19:36:30 | mordred | https://opendev.org/opendev/glean | |
| 19:36:44 | mordred | if you build images with dib, there is a "simple-init" element that sets it up | |
| 19:37:20 | mordred | https://opendev.org/openstack/diskimage-builder/src/branch/master/diskimage_builder/elements/simple-init | |
| 19:37:24 | dtroyer | ah, right. thanks. this is an existing chef/packer/rhel stack that can't configure networking properly without help | |
| 19:37:41 | mordred | nod. you should be able to install it with packer | |
| 19:37:53 | mordred | (but you might want to go crib systemd units from that element) | |
| 19:38:12 | mordred | it's limited in scope - it can do networking and ssh keys and only reads data from config-drive | |
| 19:38:51 | mordred | but - it can handle static network config in config-drive | |