| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-sdks - 2022-05-09 | |||
| 18:31:11 | dtantsur | I was able to reproduce it locally by inserting a redirect in front of ironic: https://paste.opendev.org/show/b7NUZbgk2HNMinwqOTik/ | |
| 18:32:02 | TheJulia | dtantsur: any chance you can see what the actual http response body is on the redirect? | |
| 18:32:09 | dtantsur | let me hack it | |
| 18:32:38 | TheJulia | k, because the redirect takes the new location and all the prior args | |
| 18:33:08 | TheJulia | and possibly cats... and whiskey | |
| 18:34:06 | dtantsur | we silence keystoneauth logging, don't we... | |
| 18:35:24 | TheJulia | I think the default is things >= warning are suppressed | |
| 18:35:29 | TheJulia | err <= warning | |
| 18:35:41 | dtantsur | hmmmmmm, I definitely use a warning | |
| 18:36:00 | dtantsur | hold on, I'm stupid | |
| 18:36:33 | dtantsur | moral: don't debug stuff with cold | |
| 18:37:43 | TheJulia | ++ | |
| 18:37:50 | TheJulia | I was doing that last week... it was not fun | |
| 18:37:58 | TheJulia | still am a little bit | |
| 18:39:09 | dtantsur | Redirecting to http://127.0.0.1:6385/ | |
| 18:39:11 | dtantsur | Redirecting to http://127.0.0.1:6385/v1/ | |
| 18:39:13 | dtantsur | Redirecting to http://127.0.0.1:6385/v1/nodes?provision_state=active | |
| 18:39:22 | dtantsur | the last one is probably relevant | |
| 18:40:31 | TheJulia | so the server, as it should, responds with the full location | |
| 18:41:22 | dtantsur | ending GET to http://127.0.0.1:6385/v1/nodes?provision_state=active with {'headers': {...}, 'params': {'provision_state': 'active'}, 'verify': True, 'allow_redirects': False} | |
| 18:41:28 | dtantsur | yep yep | |
| 18:41:39 | dtantsur | we have params both in the URL (from the redirect) and in kwargs | |
| 18:41:52 | TheJulia | and yeah, the code is just not *really* redirect safe if there are parameters | |
| 18:41:58 | dtantsur | the bug is somewhere around Session._send_request | |
| 18:42:14 | TheJulia | yup | |
| 18:42:47 | TheJulia | maybe strip params out if they are already in the url? | |
| 18:43:01 | dtantsur | is it safe to just drop params on redirect? | |
| 18:43:21 | dtantsur | I feel like it is, but maybe my brain is missing anything? | |
| 18:43:23 | TheJulia | I think it is going to depend on the server response | |
| 18:43:36 | dtantsur | well, the server knows nothing about our split between the URL and params | |
| 18:43:43 | dtantsur | it receives http://server?foo=bar | |
| 18:43:51 | dtantsur | if it drops foo=bar from the redirect, I guess it means that? | |
| 18:47:44 | TheJulia | the RFC suggests a final end location for the request | |
| 18:47:54 | dtantsur | I don't see the same problem in pure requests | |
| 18:47:54 | TheJulia | but that may of course be dynamic | |
| 18:48:12 | dtantsur | I wonder if it gets rid of params pretty early | |
| 18:49:17 | dtantsur | yeah, it merges params into the URL: https://github.com/psf/requests/blob/40956723f27daf5e0d9759208ca69cef236ab339/requests/models.py#L474-L481 | |
| 18:49:26 | dtantsur | and thus it does not have issues like this | |
| 18:49:28 | TheJulia | It that seems like an okay-ish thing to do on redirect since the response body is supposed to have the uri | |
| 18:50:28 | dtantsur | yep. and it effectively drops the params on redirect since it takes the new URL | |
| 18:51:03 | dtantsur | TheJulia: I don't think we haver HTTP->HTTPS redirects | |
| 18:51:12 | TheJulia | at least in our jobs/config | |
| 18:51:13 | dtantsur | that would involve having two ports for API? | |
| 18:51:17 | TheJulia | well | |
| 18:51:27 | dtantsur | it's purely a browser case where there is a default port (80) | |
| 18:51:30 | TheJulia | if you were doing a "connect to this with http" and redirect it to https, then I could see it | |
| 18:51:44 | dtantsur | that's not how things work, unfortunately | |
| 18:51:45 | TheJulia | but I also thing that would happen with the version detection, and then it might continue talking to the same server | |
| 18:51:55 | dtantsur | the best thing you get is HTTP 400 from nginx with an HTML | |
| 18:52:02 | TheJulia | well, how we work, but ops wise, it could be configured that way | |
| 18:52:21 | dtantsur | TheJulia: https://paste.opendev.org/show/bykSBnlqUoJsfVV9iRf5/ | |
| 18:52:35 | dtantsur | yeah, probably. dunno if anyone ever bothers | |
| 18:52:35 | TheJulia | dtantsur: two separate servers | |
| 18:52:46 | TheJulia | in this day and age... unlikely I guess | |
| 18:53:35 | dtantsur | it's nearly 9pm, I'll have to drop soon. if you have anything by tomorrow, I can test it in the morning. | |
| 18:53:46 | TheJulia | dtantsur: ack, have a wonderful evening | |
| 18:54:07 | dtantsur | you too! | |
| 19:09:09 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Moves image_info from cloud to proxy object https://review.opendev.org/c/openstack/ansible-collections-openstack/+/828158 | |
| 19:18:29 | opendevreview | Rafael Castillo proposed openstack/ansible-collections-openstack master: Add module to test return values based off of doc string https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840713 | |
| 19:19:26 | opendevreview | Rafael Castillo proposed openstack/ansible-collections-openstack master: Add module to test return values based off of doc string https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840713 | |
| 21:09:01 | opendevreview | Merged openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_role_info from master branch https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841091 | |
| 21:09:19 | opendevreview | Julia Kreger proposed openstack/keystoneauth master: WIP: Only include parameters not present upon redirect https://review.opendev.org/c/openstack/keystoneauth/+/841169 | |
| 21:10:04 | TheJulia | dtantsur: ^^ I'm having python resolver issues, so if your able to \o/, if not I can retry tomorrow. | |
| #openstack-sdks - 2022-05-10 | |||
| 07:45:22 | opendevreview | Merged openstack/ansible-collections-openstack master: Moves image_info from cloud to proxy object https://review.opendev.org/c/openstack/ansible-collections-openstack/+/828158 | |
| 08:02:50 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Backported changes to image_info from master branch https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841224 | |
| 08:04:18 | opendevreview | Arx Cruz proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk https://review.opendev.org/c/openstack/ansible-collections-openstack/+/839365 | |
| 08:19:00 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk https://review.opendev.org/c/openstack/ansible-collections-openstack/+/839365 | |
| 09:27:42 | opendevreview | Arx Cruz proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk https://review.opendev.org/c/openstack/ansible-collections-openstack/+/839365 | |
| 10:14:01 | opendevreview | Merged openstack/ansible-collections-openstack stable/1.0.0: Backported changes to image_info from master branch https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841224 | |
| 10:40:16 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Set owner in image module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840297 | |
| 11:47:40 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Set owner in image module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840297 | |
| 13:09:20 | opendevreview | Arx Cruz proposed openstack/ansible-collections-openstack master: Update port info https://review.opendev.org/c/openstack/ansible-collections-openstack/+/833083 | |
| 13:23:06 | opendevreview | Ananya proposed openstack/ansible-collections-openstack master: Moves keypair_info from cloud to proxy object https://review.opendev.org/c/openstack/ansible-collections-openstack/+/827274 | |
| 14:13:38 | opendevreview | Julia Kreger proposed openstack/keystoneauth master: WIP: Only include parameters not present upon redirect https://review.opendev.org/c/openstack/keystoneauth/+/841169 | |
| 14:32:54 | opendevreview | Merged openstack/ansible-collections-openstack stable/1.0.0: Set owner in image module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840297 | |
| 16:29:43 | opendevreview | David Hill proposed openstack/osc-lib master: Do not output log on bash autocomplete generation https://review.opendev.org/c/openstack/osc-lib/+/841307 | |
| 16:54:07 | opendevreview | David Hill proposed openstack/osc-lib master: Do not output log on bash autocomplete generation https://review.opendev.org/c/openstack/osc-lib/+/841307 | |
| 18:17:06 | opendevreview | Rafael Castillo proposed openstack/ansible-collections-openstack master: Add module to test return values based off of doc string https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840713 | |
| 18:29:47 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Set owner in image module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/837855 | |
| 18:32:03 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Set owner in image module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/837855 | |
| 18:57:02 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: [DNM] Backported changes to identity_group_info from master branch https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841316 | |
| 20:22:10 | opendevreview | Merged openstack/ansible-collections-openstack master: Set owner in image module https://review.opendev.org/c/openstack/ansible-collections-openstack/+/837855 | |
| #openstack-sdks - 2022-05-11 | |||
| 06:50:35 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk https://review.opendev.org/c/openstack/ansible-collections-openstack/+/839365 | |
| 06:53:05 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Removed Zuul CI job for OpenStack Queens https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840585 | |
| 07:15:50 | opendevreview | Merged openstack/ansible-collections-openstack stable/1.0.0: Removed Zuul CI job for OpenStack Queens https://review.opendev.org/c/openstack/ansible-collections-openstack/+/840585 | |
| 08:38:56 | opendevreview | Merged openstack/ansible-collections-openstack master: Update identity_group_info to new sdk https://review.opendev.org/c/openstack/ansible-collections-openstack/+/839365 | |
| 08:43:33 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_group_info from master branch https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841316 | |
| 09:03:50 | opendevreview | chandan kumar proposed openstack/ansible-collections-openstack master: [DNM] tripleo Jobs https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841384 | |
| 09:05:45 | opendevreview | chandan kumar proposed openstack/ansible-collections-openstack stable/1.0.0: [DNM] tripleo Jobs https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841283 | |
| 09:38:09 | opendevreview | likui proposed openstack/python-openstackclient master: Stop testing lower-constraints https://review.opendev.org/c/openstack/python-openstackclient/+/841389 | |
| 10:17:58 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Changed TripleO jobs to use correct release files https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841400 | |
| 11:18:32 | opendevreview | Merged openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_group_info from master branch https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841316 | |
| 12:44:24 | opendevreview | Merged openstack/ansible-collections-openstack master: Changed TripleO jobs to use correct release files https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841400 | |
| 13:24:31 | opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Changed TripleO jobs to use correct release files https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841285 | |
| 14:53:59 | opendevreview | Ananya proposed openstack/ansible-collections-openstack master: Moves keypair_info from cloud to proxy object https://review.opendev.org/c/openstack/ansible-collections-openstack/+/827274 | |
| 16:24:36 | fungi | was there a particular reason documentation like https://docs.openstack.org/os-client-config/latest/user/configuration.html#config-files wasn't copied over when oscc was absorbed? | |
| 18:29:28 | opendevreview | Merged openstack/ansible-collections-openstack stable/1.0.0: Changed TripleO jobs to use correct release files https://review.opendev.org/c/openstack/ansible-collections-openstack/+/841285 | |
| 21:17:49 | opendevreview | Julia Kreger proposed openstack/keystoneauth master: Drop parameters when connecting to a redirected endpoint https://review.opendev.org/c/openstack/keystoneauth/+/841169 | |
| 21:18:26 | TheJulia | dtantsur: ^^ I'll revise it based on CI, but I think that should work. unfortunately for some reason I end up in python dependency land of unhappiness when trying to run tests with it | |
| #openstack-sdks - 2022-05-12 | |||
| 01:31:16 | opendevreview | Julia Kreger proposed openstack/keystoneauth master: Drop parameters when connecting to a redirected endpoint https://review.opendev.org/c/openstack/keystoneauth/+/841169 | |