Earlier  
Later
New Search
Posted Nick Remark
#openstack-sdks - 2020-05-04
19:46:15 mordred dtroyer: I wanna say yes
19:46:20 mordred dtroyer: I know adriant was working on it
19:46:29 mordred and I feel like it was important to someone else
19:46:41 mordred dtroyer: (with osc - not so much with sdk)
19:47:01 mordred cmurphy, dtantsur|afk : ^^ do you know?
19:47:47 dtroyer Ok, thanks. I am about to find out the hard way just how badly OSC is broken here with a cloud that does not have app creds enabled…
19:48:59 mordred dtroyer: hahaha. "yay"
19:49:12 mordred dtroyer: I *think* it "works" for some value of "it" and "works
19:49:18 cmurphy mordred: dtroyer afaik adriant hasn't gotten around to adding support for MFA receipts (https://specs.openstack.org/openstack/keystone-specs/specs/keystone/stein/mfa-auth-receipt.html) to osc so it is still pretty broken
19:49:54 mordred cmurphy: ah - ok . so I'm probably remembering "someone *wants* to use it" more than "someone is using it"
19:52:44 cmurphy it's possible that osc could use the v3multifactor auth plugin from ksa and it could just work
19:53:03 cmurphy that wouldn't require the receipts workflow
19:53:31 dtroyer cmurphy: Reading through that, is it only the OSC bit that is still undone? Horizon is working on the cloud I am testing on, OSC is not (no well anyway)
19:53:44 dtroyer hmmm… I need to learn about v3multifactor
19:54:07 cmurphy dtroyer: afaik horizon doesn't have it yet either but i could be out of date
19:54:14 cmurphy dtroyer: https://docs.openstack.org/keystoneauth/latest/authentication-plugins.html#multi-factor-with-v3-identity-plugins
19:55:24 dtroyer I do not know exactly how this cloud is configured, they are using Duo if that means anything specific
19:58:17 mordred dtroyer: if only you knew someone who could add multifactor support to osc
20:00:53 dtroyer i know, right?
20:03:32 dtroyer actually, some of what I am seeing so far may be around the session/token not getting re-used properly. and if we only had some insecure method of caching that between commands
20:19:15 mordred dtroyer: if only
20:19:26 mordred dtroyer: I feel like someone should have thought about this before
20:28:18 openstackgerrit Noah Mickus proposed openstack/openstacksdk master: Add TLS protocol support for Octavia https://review.opendev.org/724789
22:02:22 adriant cmurphy, mordred: I was working on Horizon and got side tracked/stuck with that, but never touched OSC
22:02:57 adriant the support is in KSA, just doesn't exist in the cli tools properly unless you get/set a token somehow yourself and then use the tools
22:03:34 adriant I don't have the time for it, but will gladly review/comment on the design of the support in OSC etc
22:19:21 rm_work ah mordred: https://review.opendev.org/#/c/650374/22/openstackclient/compute/v2/server.py this changed the behavior of the image lookup in the server commands :(
22:19:31 rm_work just caught it internally today
22:19:46 rm_work now lookups by image *name* fail, where they worked before
22:20:14 rm_work because it seems the switch to the SDK used the id lookup function directly, rather than emulating that "id, then name" lookup feature the old code had
22:20:27 rm_work (I believe)
23:05:53 rm_work yeah, patch incoming
23:11:53 openstackgerrit Adam Harwell proposed openstack/python-openstackclient master: Correct image lookup during server rebuild https://review.opendev.org/725427
23:12:00 rm_work mordred: ^^ should resolve it
23:12:07 rm_work will be testing locally today/tomorrow
23:20:01 rm_work oh right, this is client, tested locally just now and it resolved the issue :)
#openstack-sdks - 2020-05-05
02:10:03 mordred rm_work: thanks for the patch - +2 from me
14:11:31 mordred slaweq: comment on https://review.opendev.org/#/c/717881
14:13:34 slaweq mordred: thx
14:13:45 slaweq I will take a look later today
#openstack-sdks - 2020-05-06
15:13:36 rpittau hi all, if anyone got a minute, those should be fairly quick to review https://review.opendev.org/724904 https://review.opendev.org/724932 https://review.opendev.org/724968 thanks!
15:39:50 dtantsur dunno if I should +2 stuff on osc-lib, but I just did
15:55:16 mordred dtantsur: you totally should :)
16:06:25 rpittau thanks! :)
16:10:16 dtantsur :)
17:43:44 openstackgerrit Merged openstack/osc-lib master: Use mock from unittest https://review.opendev.org/724904
17:43:45 openstackgerrit Merged openstack/osc-lib master: Add pep8 import order check https://review.opendev.org/724932
18:00:03 openstackgerrit Dean Troyer proposed openstack/osc-lib master: Save the results from the early authentication https://review.opendev.org/725953
18:03:23 dtroyer I have no idea how long ago that ^^^^ changed but at a minimum keystoneclient was affected…and no I'm not doing a git blame as I'm probably the one who did it…
19:22:15 mordred dtroyer: you angered the gods of pep8
19:24:46 openstackgerrit Monty Taylor proposed openstack/osc-lib master: Save the results from the early authentication https://review.opendev.org/725953
19:26:52 dtroyer mordred: hrm… why did it pass locally????
19:27:19 mordred dtroyer: maybe stale venv?
19:27:23 dtroyer ah, I see, my local bit-rotted dev environment...
19:27:38 mordred yeah - the python3 push caused a bump in several of the linters
19:27:57 mordred in other news though - no more python2.7!
19:28:13 mordred (and, in fact, for osc, no more 3.5 - so you can use f-strings if you want to!)
19:28:26 dtroyer \o/ except everything in my workspace was still set for that…
19:29:00 dtroyer a good reason to start over and ignore about 27 stale branches that had at least one good idea in them
19:29:24 mordred ignoring things is the best
19:30:33 dtroyer except I am likely to resurrect the devstack technique I tried for running osc in the background and piping comamnds to it… we have a rather annoying auth situation here, which is why cutting the /auth/token round trips in half is worthwhile
19:31:07 dtroyer and for my next trick, learning to do the same for fog…
19:32:01 mordred dtroyer: I don't suppose getting the cloud to update and add appcred support is likely then
19:32:41 dtroyer It's lucky to be on queens (vmware-backed) and they don't even know what that is.
19:33:59 mordred dtroyer: well - I guess our insistence on supporting old openstacks has paid off
19:35:05 dtroyer absofrickinlutely…. never give up that fight :)
19:36:05 dtroyer mordred: while I've got you, what did you guys switch to rather than cloud-init?
19:36:21 mordred we use glean
19:36:30 mordred https://opendev.org/opendev/glean
19:36:44 mordred if you build images with dib, there is a "simple-init" element that sets it up
19:37:20 mordred https://opendev.org/openstack/diskimage-builder/src/branch/master/diskimage_builder/elements/simple-init
19:37:24 dtroyer ah, right. thanks. this is an existing chef/packer/rhel stack that can't configure networking properly without help
19:37:41 mordred nod. you should be able to install it with packer
19:37:53 mordred (but you might want to go crib systemd units from that element)
19:38:12 mordred it's limited in scope - it can do networking and ssh keys and only reads data from config-drive
19:38:51 mordred but - it can handle static network config in config-drive
19:39:30 dtroyer apparently cloud-init on rhel doesn't do that well at all
19:48:26 mordred yeah - static networking from cloud-init is why we wrote glean
19:49:29 mordred rax only does static networking (no dhcp) and only does config-drive - and for quite a long time cloud-init dev was frozen because they were working on a v2 so we coudlnt' get the support for it added
19:49:29 dtroyer and I love that dependency list!
19:49:37 mordred (there was a rax-specific fork of cloud-init - but we didn't really feel like that was the right life decision)
19:50:26 mordred and yeah - also - cloud-init pulls in a bunch of python, and we happen to, you know, be in the business of testing a lot of python
#openstack-sdks - 2020-05-07
07:27:00 openstackgerrit Johannes Kulik proposed openstack/openstacksdk master: Add "id" to Port's query parameters https://review.opendev.org/726050
07:29:11 openstackgerrit Johannes Kulik proposed openstack/openstacksdk master: Add "id" to Port's query parameters https://review.opendev.org/726050
09:11:17 openstackgerrit Riccardo Pittau proposed openstack/osc-lib master: Remove six library from dependencies https://review.opendev.org/724968
13:10:58 openstackgerrit Monty Taylor proposed openstack/openstacksdk master: Use floating ip for interface ip if it exists https://review.opendev.org/726115
13:11:30 openstackgerrit Monty Taylor proposed openstack/openstacksdk master: Use floating ip for interface ip if it exists https://review.opendev.org/726115
13:41:06 nightmare_unreal how does OSC CLI determine which api version to use ?
13:41:28 nightmare_unreal for e.g. use 2.15 or something or 2.60 etc etc.
14:17:02 openstackgerrit Merged openstack/shade stable/ussuri: Break out py27 job templates https://review.opendev.org/723353
14:23:02 openstackgerrit Merged openstack/shade stable/ussuri: Update .gitreview for stable/ussuri https://review.opendev.org/719019
14:23:03 openstackgerrit Merged openstack/shade stable/ussuri: Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri https://review.opendev.org/719020
14:40:06 openstackgerrit Merged openstack/osc-lib master: Remove six library from dependencies https://review.opendev.org/724968
14:47:03 openstackgerrit Artem Goncharov proposed openstack/openstacksdk master: Fix metric names in the object_store https://review.opendev.org/726167
14:54:55 openstackgerrit Artem Goncharov proposed openstack/openstacksdk master: Fix metric names in the object_store https://review.opendev.org/726167
16:01:12 elmiko API SIG office hour open
16:10:46 brtknr hmm why doesnt pip2 understand not to install openstacksdk version greater than 0.40.0 by default
16:40:44 mordred brtknr: 0.45 is the last py2 version
16:42:02 mordred brtknr: we dropped 2.7 from the gate in 0.40 but didn't get the python-requires line in. we accidentally broke 2.7 in 0.44, reverted the patch and released 0.45, then added the metadata in 0.45 to tell pip2 to do the right thing
16:42:37 mordred brtknr: are you have having issues with 0.45 and python 2.7? if so, we should figure them out and see if we can't figure out how to release an 0.45.1 point release

Earlier   Later