openstackgerrit | Zane Bitter proposed openstack/heat master: Replace pbr autodoc with sphinxcontrib-apidoc https://review.openstack.org/558262 | 00:00 |
---|---|---|
openstackgerrit | Zane Bitter proposed openstack/heat master: Docs: include all useful module docs https://review.openstack.org/552059 | 00:00 |
*** yangyapeng has joined #heat | 00:05 | |
*** yangyapeng has quit IRC | 00:09 | |
*** d0ugal has quit IRC | 00:13 | |
*** d0ugal has joined #heat | 00:17 | |
openstackgerrit | Seyeong Kim proposed openstack/heat master: Fixing unicode issue when to_dict is called on py2.7 env https://review.openstack.org/559195 | 00:21 |
*** yangyapeng has joined #heat | 00:24 | |
*** yangyapeng has quit IRC | 00:28 | |
*** dprince has joined #heat | 00:37 | |
*** yangyapeng has joined #heat | 00:45 | |
*** yangyapeng has quit IRC | 00:49 | |
*** kiennt26 has joined #heat | 01:10 | |
*** hongbin has joined #heat | 01:16 | |
*** yangyapeng has joined #heat | 01:18 | |
*** yangyapeng has quit IRC | 01:18 | |
*** harlowja has quit IRC | 01:21 | |
*** yangyapeng has joined #heat | 01:52 | |
*** yangyapeng has quit IRC | 01:52 | |
*** dprince has quit IRC | 01:57 | |
*** fragatina has quit IRC | 01:59 | |
openstackgerrit | Seyeong Kim proposed openstack/heat master: Fixing unicode issue when to_dict is called on py2.7 env https://review.openstack.org/559195 | 02:13 |
*** kiennt26 has quit IRC | 02:46 | |
*** ramishra has joined #heat | 02:59 | |
*** ramishra has quit IRC | 03:17 | |
*** ramishra has joined #heat | 03:19 | |
*** fragatina has joined #heat | 03:25 | |
*** fragatin_ has joined #heat | 03:26 | |
*** fragatina has quit IRC | 03:30 | |
*** nicolasbock has quit IRC | 03:39 | |
*** hongbin has quit IRC | 03:41 | |
*** armaan has quit IRC | 03:45 | |
*** armaan has joined #heat | 03:46 | |
*** links has joined #heat | 03:48 | |
*** harlowja has joined #heat | 03:53 | |
*** rcernin has quit IRC | 04:04 | |
*** rcernin has joined #heat | 04:19 | |
*** armaan has quit IRC | 04:43 | |
*** armaan has joined #heat | 04:52 | |
*** flwang has quit IRC | 04:56 | |
*** harlowja has quit IRC | 05:13 | |
*** mikal_ has joined #heat | 05:23 | |
*** mikal has quit IRC | 05:27 | |
openstackgerrit | Rabi Mishra proposed openstack/heat master: Option for retrieving child templates and env files from swift https://review.openstack.org/551871 | 05:33 |
*** skramaja has joined #heat | 05:46 | |
*** gkadam_ has joined #heat | 05:48 | |
openstackgerrit | Merged openstack/python-heatclient master: Follow the new PTI for document build https://review.openstack.org/528979 | 06:06 |
*** jistr has quit IRC | 06:30 | |
*** jistr has joined #heat | 06:32 | |
*** kiennt26 has joined #heat | 06:34 | |
*** gkadam_ has quit IRC | 06:42 | |
*** gkadam has joined #heat | 06:42 | |
openstackgerrit | Seyeong Kim proposed openstack/heat master: Fixing unicode issue when to_dict is called on py2.7 env https://review.openstack.org/559195 | 06:53 |
*** ramishra has quit IRC | 06:59 | |
*** ivve has joined #heat | 07:05 | |
*** ivve has quit IRC | 07:10 | |
*** gfidente has joined #heat | 07:15 | |
*** gfidente has quit IRC | 07:15 | |
*** gfidente has joined #heat | 07:15 | |
*** ysandeep has joined #heat | 07:26 | |
*** armaan has quit IRC | 07:33 | |
*** armaan has joined #heat | 07:33 | |
*** rcernin has quit IRC | 07:37 | |
*** ramishra has joined #heat | 07:41 | |
*** AlexeyAbashkin has joined #heat | 07:41 | |
*** ysandeep has quit IRC | 08:05 | |
*** armaan has quit IRC | 08:08 | |
*** armaan has joined #heat | 08:08 | |
*** derekh has joined #heat | 08:15 | |
*** shardy has joined #heat | 08:16 | |
openstackgerrit | Seyeong Kim proposed openstack/heat master: Fixing unicode issue when to_dict is called on py2.7 env https://review.openstack.org/559195 | 08:24 |
*** armaan has quit IRC | 08:49 | |
*** armaan has joined #heat | 08:50 | |
*** gkadam has quit IRC | 08:52 | |
*** gkadam has joined #heat | 08:53 | |
*** flwang has joined #heat | 09:06 | |
*** fragatin_ has quit IRC | 09:20 | |
*** Sandy619 has joined #heat | 09:20 | |
*** fragatina has joined #heat | 09:20 | |
*** ygl has joined #heat | 09:25 | |
*** jillr has quit IRC | 09:40 | |
ygl | hi all | 09:41 |
ygl | as an admin user I am unable to view and delete other user stacks | 09:41 |
ygl | what changes do I have to make to the plicy.json file for heat ? | 09:42 |
ygl | can anyone help me please | 09:42 |
*** jillr has joined #heat | 09:42 | |
ygl | *policy.json file | 09:42 |
*** armaan has quit IRC | 09:42 | |
*** armaan has joined #heat | 09:43 | |
*** flwang has quit IRC | 09:45 | |
*** flwang has joined #heat | 09:46 | |
*** armaan has quit IRC | 10:23 | |
*** armaan has joined #heat | 10:24 | |
*** nicolasbock has joined #heat | 10:27 | |
*** jistr has quit IRC | 10:27 | |
*** armaan has quit IRC | 10:28 | |
*** armaan has joined #heat | 10:28 | |
*** jistr has joined #heat | 10:36 | |
*** dbecker has joined #heat | 10:39 | |
*** dbecker has quit IRC | 10:39 | |
*** kiennt26 has quit IRC | 10:43 | |
*** gkadam has quit IRC | 10:47 | |
*** pbourke has quit IRC | 10:47 | |
*** pbourke has joined #heat | 10:48 | |
*** dprince has joined #heat | 11:19 | |
*** serlex has joined #heat | 11:20 | |
*** serlex has left #heat | 11:20 | |
*** Sandy619 has quit IRC | 11:26 | |
openstackgerrit | Seyeong Kim proposed openstack/heat master: Fixing unicode issue when to_dict is called on py2.7 env https://review.openstack.org/559195 | 11:42 |
*** armaan has quit IRC | 11:54 | |
*** jistr is now known as jistr|mtg | 12:02 | |
*** armaan has joined #heat | 12:05 | |
*** ygl has quit IRC | 12:10 | |
*** Sharmistha has quit IRC | 12:14 | |
*** ramishra has quit IRC | 12:30 | |
*** jistr|mtg is now known as jistr | 12:31 | |
*** jcoufal has joined #heat | 12:34 | |
*** ygl has joined #heat | 12:37 | |
ygl | hi all | 12:37 |
ygl | can anyone help me how to modify heat policy.json file to allow admin user to delete other users' stacks | 12:38 |
*** armaan has quit IRC | 12:39 | |
*** armaan has joined #heat | 12:39 | |
*** armaan_ has joined #heat | 12:42 | |
*** armaan_ has quit IRC | 12:44 | |
*** armaan_ has joined #heat | 12:45 | |
ygl | can anyone help me please | 12:45 |
*** armaan has quit IRC | 12:45 | |
*** jmlowe has quit IRC | 12:48 | |
ygl | anyone ? any idea ? | 12:54 |
*** derekh has quit IRC | 13:10 | |
*** skramaja has quit IRC | 13:12 | |
*** derekh has joined #heat | 13:13 | |
*** jmlowe has joined #heat | 13:18 | |
*** fragatina has quit IRC | 13:18 | |
*** felipemonteiro_ has joined #heat | 13:19 | |
*** armaan_ has quit IRC | 13:20 | |
*** fragatina has joined #heat | 13:20 | |
*** learnmore has joined #heat | 13:22 | |
*** felipemonteiro__ has joined #heat | 13:23 | |
*** felipemonteiro_ has quit IRC | 13:26 | |
*** links has quit IRC | 13:28 | |
*** gkadam has joined #heat | 13:30 | |
zaneb | ygl: I kind of expected that to be allowed already | 13:41 |
ygl | zaneb: it is not happening | 13:42 |
ygl | zaneb: i am only able to list the stacks but unable to delete them as admin user | 13:42 |
ygl | does anyone here know how to enable admin user to delete other users' stacks | 13:44 |
zaneb | ygl: stacks:index and stacks:delete have the exact same default policy rule | 13:46 |
zaneb | ygl: have you modified policy.json at all to get listing working? | 13:47 |
zaneb | e.g. enabled stacks:global_index? | 13:47 |
*** learnmore has quit IRC | 13:48 | |
ygl | zaneb: right now it has this rule ""stacks:delete": "rule:deny_stack_user"" | 13:52 |
ygl | zaneb: how to change that to allow admin user to delete the users' stacks | 13:52 |
zaneb | yeah, that's the default | 13:52 |
zaneb | I'm asking what the settings for stacks:index and stacks:global_index are | 13:52 |
zaneb | since one of those sounds like it's working for you | 13:53 |
ygl | zaneb: "resource:index": "rule:deny_stack_user" and stacks:global_index": "rule:context_is_admin", | 13:53 |
zaneb | resource:index and stacks:index are different things, but it looks like you've modified stacks:global_index so that's probably why that is working | 13:54 |
ygl | zaneb: right as an admin user I am not able to delete other users' stacks | 13:55 |
ygl | zaneb: thats my problem | 13:55 |
zaneb | I understand the problem | 13:55 |
therve | ygl, Add the admin to the project | 13:55 |
ygl | therve: i have 100 user projects. how can I do it for all projects ? | 13:56 |
zaneb | looking at the code, the only thing that rule:deny_stack_user disallows is the stack user. so anybody else with a role on the project should be able to delete | 13:56 |
therve | ygl, for i in list: add user admin project | 13:56 |
zaneb | and admins should be able to delete without a role on the project, because the targeted project (in the URL) and the project in the token don't have to match if you are an admin | 13:57 |
ygl | therve: is there any other way to allow admin user to delete users' stacks | 13:57 |
zaneb | *however* I'm guessing that heatclient has no way of generating a request with different projects in the URL vs. token | 13:57 |
therve | ygl, I don't think so no | 13:58 |
ygl | zaneb: it is saying no such stack exists for admin user | 13:58 |
*** bnemec has joined #heat | 13:59 | |
zaneb | ygl: using the CLI client? | 13:59 |
ygl | zaneb: yes " openstack stack delete " | 13:59 |
*** bnemec is now known as beekneemech | 13:59 | |
zaneb | ygl: yeah. I suspect that if you got an admin:admin token and used curl to do the delete it would probably work. but the client assumes that the stack is in the same project that the token is for (which is not the case for what you're trying to do) | 14:00 |
*** hongbin has joined #heat | 14:12 | |
ygl | therve: if I add admin user to that project , still I am unable to delete their stacks | 14:19 |
ygl | therve: just a sec | 14:20 |
*** armaan has joined #heat | 14:26 | |
*** ygl has quit IRC | 14:26 | |
*** armaan has quit IRC | 14:30 | |
*** armaan has joined #heat | 14:49 | |
*** gkadam_ has joined #heat | 14:51 | |
*** gkadam has quit IRC | 14:53 | |
*** felipemonteiro__ has quit IRC | 14:55 | |
*** felipemonteiro__ has joined #heat | 14:56 | |
*** blues-man has joined #heat | 15:04 | |
*** blues-man has quit IRC | 15:09 | |
*** gkadam_ has quit IRC | 15:10 | |
*** felipemonteiro_ has joined #heat | 15:10 | |
*** armaan has quit IRC | 15:11 | |
*** armaan has joined #heat | 15:11 | |
*** felipemonteiro__ has quit IRC | 15:14 | |
*** dprince has quit IRC | 15:15 | |
*** armaan has quit IRC | 15:18 | |
*** blues-man has joined #heat | 15:22 | |
*** jmlowe has quit IRC | 15:23 | |
*** jmlowe_ has joined #heat | 15:24 | |
*** armaan has joined #heat | 15:33 | |
*** openstackgerrit has quit IRC | 15:33 | |
*** jcoufal_ has joined #heat | 15:34 | |
*** jcoufal has quit IRC | 15:35 | |
*** jcoufal_ has quit IRC | 15:37 | |
*** blues-man has quit IRC | 15:43 | |
*** dprince has joined #heat | 15:44 | |
*** livelace-link has joined #heat | 15:45 | |
*** kiennt26 has joined #heat | 15:50 | |
*** armaan has quit IRC | 15:53 | |
*** blues-man has joined #heat | 15:58 | |
*** kiennt26 has quit IRC | 16:02 | |
*** blues-man has quit IRC | 16:08 | |
*** AlexeyAbashkin has quit IRC | 16:12 | |
*** derekh has quit IRC | 16:20 | |
*** openstackgerrit has joined #heat | 16:39 | |
openstackgerrit | David Rabel proposed openstack/heat master: Fix indentation in hot_spec.rst https://review.openstack.org/559369 | 16:39 |
*** armaan has joined #heat | 16:44 | |
*** fragatina has quit IRC | 16:56 | |
*** links has joined #heat | 16:58 | |
*** links has quit IRC | 17:06 | |
*** links has joined #heat | 17:09 | |
*** armaan has quit IRC | 17:20 | |
*** yassine_ has quit IRC | 17:27 | |
*** yassine_ has joined #heat | 17:28 | |
*** fragatina has joined #heat | 17:40 | |
*** fragatina has quit IRC | 17:41 | |
*** fragatina has joined #heat | 17:41 | |
*** fragatina has quit IRC | 17:41 | |
*** fragatina has joined #heat | 17:42 | |
*** fragatina has quit IRC | 17:43 | |
*** jcoufal has joined #heat | 17:43 | |
*** fragatina has joined #heat | 17:43 | |
*** fragatina has quit IRC | 17:43 | |
*** fragatina has joined #heat | 17:44 | |
*** AlexeyAbashkin has joined #heat | 17:46 | |
*** AlexeyAbashkin has quit IRC | 17:50 | |
*** armaan has joined #heat | 18:02 | |
*** shardy has quit IRC | 18:03 | |
*** armaan has quit IRC | 18:11 | |
*** shardy has joined #heat | 18:21 | |
*** felipemonteiro_ has quit IRC | 18:31 | |
*** felipemonteiro_ has joined #heat | 18:32 | |
*** logan- has quit IRC | 18:56 | |
*** logan- has joined #heat | 18:56 | |
*** felipemonteiro__ has joined #heat | 19:00 | |
*** felipemonteiro_ has quit IRC | 19:03 | |
openstackgerrit | Zane Bitter proposed openstack/python-heatclient master: Improve titles of generated API documentation https://review.openstack.org/559402 | 19:11 |
*** shardy has quit IRC | 19:20 | |
*** mchlumsky has quit IRC | 20:10 | |
*** mchlumsky has joined #heat | 20:12 | |
*** mikal_ is now known as mikal | 20:14 | |
*** gfidente has quit IRC | 20:20 | |
*** links has quit IRC | 20:28 | |
*** beekneemech has quit IRC | 20:48 | |
*** AlexeyAbashkin has joined #heat | 20:53 | |
*** AlexeyAbashkin has quit IRC | 20:57 | |
*** jtomasek has quit IRC | 21:04 | |
*** dprince has quit IRC | 21:25 | |
*** felipemonteiro__ has quit IRC | 21:25 | |
*** jcoufal has quit IRC | 21:39 | |
*** hongbin has quit IRC | 21:42 | |
*** yassine_ has quit IRC | 21:53 | |
*** yassine_ has joined #heat | 21:56 | |
*** dprince has joined #heat | 23:15 | |
*** hongbin has joined #heat | 23:28 | |
*** dprince has quit IRC | 23:45 | |
*** liyi has joined #heat | 23:47 | |
*** liyi has quit IRC | 23:52 | |
*** AlexeyAbashkin has joined #heat | 23:53 | |
*** AlexeyAbashkin has quit IRC | 23:58 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!