| *** ayoung-out has quit IRC | 00:00 | |
| *** dimsum__ has joined #openstack-keystone | 00:15 | |
| *** arunkant has quit IRC | 00:24 | |
| *** samueldmq has joined #openstack-keystone | 01:15 | |
| *** tqtran_afk has joined #openstack-keystone | 01:40 | |
| *** spandhe has joined #openstack-keystone | 01:51 | |
| *** samueldmq has quit IRC | 01:51 | |
| *** nkinder has quit IRC | 01:52 | |
| *** erkules has joined #openstack-keystone | 02:14 | |
| *** erkules_ has quit IRC | 02:17 | |
| *** henrynash has quit IRC | 02:18 | |
| *** henrynash has joined #openstack-keystone | 02:20 | |
| *** ChanServ sets mode: +v henrynash | 02:20 | |
| *** henrynash has quit IRC | 02:24 | |
| *** henrynash has joined #openstack-keystone | 02:24 | |
| *** ChanServ sets mode: +v henrynash | 02:24 | |
| *** panbalag has quit IRC | 02:58 | |
| *** spandhe has quit IRC | 03:11 | |
| *** nkinder has joined #openstack-keystone | 03:19 | |
| *** abhirc has quit IRC | 03:54 | |
| *** dimsum__ has quit IRC | 04:03 | |
| *** tqtran_afk has quit IRC | 04:26 | |
| *** tqtran_afk has joined #openstack-keystone | 04:30 | |
| *** tqtran_afk has quit IRC | 04:49 | |
| *** spandhe has joined #openstack-keystone | 04:55 | |
| *** dimsum__ has joined #openstack-keystone | 05:04 | |
| *** dimsum__ has quit IRC | 05:09 | |
| *** himangi has joined #openstack-keystone | 05:13 | |
| *** davechen has joined #openstack-keystone | 05:41 | |
| *** stevemar has joined #openstack-keystone | 05:44 | |
| *** ChanServ sets mode: +v stevemar | 05:44 | |
| *** haneef_ has quit IRC | 05:52 | |
| *** spandhe has quit IRC | 05:53 | |
| *** davechen has quit IRC | 06:10 | |
| *** richm has quit IRC | 07:07 | |
| *** himangi has quit IRC | 07:21 | |
| *** nkinder has quit IRC | 07:30 | |
| *** stevemar has quit IRC | 08:38 | |
| *** dimsum__ has joined #openstack-keystone | 08:42 | |
| *** dimsum__ has quit IRC | 08:46 | |
| *** himangi has joined #openstack-keystone | 11:43 | |
| *** henrynash has quit IRC | 11:46 | |
| *** henrynash has joined #openstack-keystone | 11:48 | |
| *** ChanServ sets mode: +v henrynash | 11:48 | |
| *** samueldmq has joined #openstack-keystone | 12:03 | |
| *** samueldmq has quit IRC | 12:09 | |
| *** dimsum__ has joined #openstack-keystone | 12:16 | |
| *** dimsum__ has quit IRC | 12:21 | |
| *** henrynash has quit IRC | 12:36 | |
| *** henrynash has joined #openstack-keystone | 12:36 | |
| *** ChanServ sets mode: +v henrynash | 12:36 | |
| *** flaviof has joined #openstack-keystone | 13:03 | |
| *** richm has joined #openstack-keystone | 13:14 | |
| *** jaosorior has joined #openstack-keystone | 13:22 | |
| *** henrynash has quit IRC | 13:35 | |
| *** henrynash has joined #openstack-keystone | 13:36 | |
| *** ChanServ sets mode: +v henrynash | 13:36 | |
| *** henrynash has quit IRC | 13:46 | |
| *** henrynash has joined #openstack-keystone | 13:47 | |
| *** ChanServ sets mode: +v henrynash | 13:47 | |
| *** dimsum__ has joined #openstack-keystone | 13:51 | |
| *** Akshik has joined #openstack-keystone | 14:54 | |
| *** tellesnobrega_ has joined #openstack-keystone | 15:01 | |
| *** lbragstad has quit IRC | 15:06 | |
| *** jacorob has quit IRC | 15:07 | |
| *** lbragstad has joined #openstack-keystone | 15:12 | |
| *** jacorob has joined #openstack-keystone | 15:13 | |
| *** tellesnobrega_ has quit IRC | 15:14 | |
| *** jbonjean has quit IRC | 15:14 | |
| *** Akshik has quit IRC | 15:15 | |
| *** Akshik has joined #openstack-keystone | 15:19 | |
| *** samueldmq has joined #openstack-keystone | 15:31 | |
| *** Akshik has quit IRC | 15:34 | |
| *** jbonjean has joined #openstack-keystone | 15:57 | |
| mordred | jamielennox|away: I have responded to your review on that shade patch (thanks for the review, btw!!!) when you get online, I'd love to take a second and figure out the "right" way to get a Client given only a Session | 15:59 |
|---|---|---|
| *** Akshik has joined #openstack-keystone | 16:20 | |
| *** nkinder has joined #openstack-keystone | 16:28 | |
| *** Akshik has quit IRC | 16:29 | |
| *** samueldmq has quit IRC | 16:31 | |
| *** samueldmq has joined #openstack-keystone | 16:34 | |
| *** Akshik has joined #openstack-keystone | 16:36 | |
| *** lbragstad has quit IRC | 16:41 | |
| *** jaosorior has quit IRC | 16:42 | |
| *** lbragstad has joined #openstack-keystone | 16:47 | |
| *** nkinder has quit IRC | 16:50 | |
| *** _cjones_ has joined #openstack-keystone | 17:01 | |
| *** _cjones_ has quit IRC | 17:03 | |
| *** _cjones_ has joined #openstack-keystone | 17:05 | |
| *** _cjones_ has quit IRC | 17:08 | |
| *** _cjones_ has joined #openstack-keystone | 17:08 | |
| *** pnavarro_ has joined #openstack-keystone | 17:23 | |
| *** _cjones_ has quit IRC | 17:29 | |
| *** himangi has quit IRC | 17:29 | |
| *** tellesnobrega_ has joined #openstack-keystone | 17:45 | |
| *** Ctina_ has joined #openstack-keystone | 17:49 | |
| *** Ctina_ has quit IRC | 17:50 | |
| *** lbragstad has quit IRC | 17:55 | |
| *** jacorob has quit IRC | 17:55 | |
| *** jacorob has joined #openstack-keystone | 17:56 | |
| *** lbragstad has joined #openstack-keystone | 17:57 | |
| *** samueldmq has quit IRC | 17:58 | |
| *** samueldmq has joined #openstack-keystone | 18:03 | |
| *** jacorob has quit IRC | 18:16 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:17 | |
| *** lbragstad has quit IRC | 18:18 | |
| *** jacorob has joined #openstack-keystone | 18:22 | |
| *** lbragstad has joined #openstack-keystone | 18:27 | |
| *** tellesnobrega_ has quit IRC | 18:30 | |
| *** jacorob has quit IRC | 18:31 | |
| *** jacorob has joined #openstack-keystone | 18:32 | |
| *** tellesnobrega_ has joined #openstack-keystone | 18:34 | |
| *** jorge_munoz has joined #openstack-keystone | 18:35 | |
| *** david-lyle has joined #openstack-keystone | 18:39 | |
| *** david-lyle_afk has quit IRC | 18:39 | |
| *** samueldmq has quit IRC | 18:41 | |
| *** david-lyle is now known as david-lyle_afk | 18:44 | |
| *** tellesnobrega_ has quit IRC | 18:51 | |
| *** amerine has quit IRC | 19:06 | |
| *** amerine has joined #openstack-keystone | 19:06 | |
| *** afazekas has joined #openstack-keystone | 19:14 | |
| *** lhcheng has joined #openstack-keystone | 19:14 | |
| *** lhcheng has quit IRC | 19:16 | |
| *** samueldmq has joined #openstack-keystone | 19:23 | |
| *** Akshik has quit IRC | 19:47 | |
| *** amerine has quit IRC | 19:51 | |
| *** afazekas has quit IRC | 20:00 | |
| *** samueldmq has quit IRC | 20:04 | |
| *** jorge_munoz has quit IRC | 20:04 | |
| *** samueldmq has joined #openstack-keystone | 20:07 | |
| *** spandhe has joined #openstack-keystone | 20:08 | |
| *** samueldmq has quit IRC | 20:16 | |
| *** rwsu-afk has quit IRC | 20:46 | |
| *** spandhe has quit IRC | 21:03 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:04 | |
| *** dobson has quit IRC | 21:08 | |
| *** samueldmq has joined #openstack-keystone | 21:10 | |
| *** lnr has joined #openstack-keystone | 21:19 | |
| *** dobson has joined #openstack-keystone | 21:20 | |
| *** Sanky has joined #openstack-keystone | 21:22 | |
| *** lnr has left #openstack-keystone | 21:24 | |
| *** samueldmq has quit IRC | 21:24 | |
| *** jamielennox|away is now known as jamielennox | 21:48 | |
| jamielennox | mordred: i'm here | 21:49 |
| jamielennox | (i have no idea how old that last message is) | 21:50 |
| *** pnavarro_ has quit IRC | 21:52 | |
| mordred | jamielennox: yay! | 21:57 |
| mordred | only 6 hours :) | 21:57 |
| mordred | jamielennox: so - if I have a Session, what's the right way to get a Client? | 21:57 |
| jamielennox | If you have a session with an auth plugin you should just be able to pass it in, Client(session=session) | 21:57 |
| jamielennox | that would work for every client i've had anything to do with the conversion | 21:58 |
| jamielennox | there are other options there, auth=, service_type= etc - but they should default correctly | 21:58 |
| mordred | jamielennox: I thought I'd tried that - let me try again real quick | 21:59 |
| mordred | jamielennox: DiscoveryFailure: Not enough information to determine URL. Provide either auth_url or endpoint | 22:00 |
| mordred | jamielennox: when I don't pass endpoint to Client | 22:00 |
| jamielennox | mordred: that's weird | 22:01 |
| jamielennox | what client? | 22:01 |
| mordred | jamielennox: keystoneclient.client.Client | 22:01 |
| jamielennox | great.. | 22:01 |
| mordred | jamielennox: getting the identity endpoint from the session is working as a workaround for now | 22:02 |
| mordred | jamielennox: should I put in a note to check back beause the endpoint part shouldn't be needed? | 22:02 |
| jamielennox | mordred: i don't think endpoint= should even be picked up by the client | 22:03 |
| jamielennox | mordred: oh - i see.. ergh | 22:04 |
| jamielennox | it's something happening in the generic client, the discovery one | 22:04 |
| jamielennox | mordred: so if you use either v2.Client or v3.Client it will work | 22:05 |
| jamielennox | that's fairly old code and assumes the old arguments - i should fix that up | 22:05 |
| jamielennox | i guess the workaround would be | 22:06 |
| jamielennox | auth_url = session.get_endpoint(interface=auth.AUTH_INTERFACE) | 22:06 |
| jamielennox | then pass that | 22:06 |
| mordred | oh - interesting. k - let me try real quick | 22:07 |
| mordred | jamielennox: awesome, that works | 22:09 |
| mordred | self._keystone_client = keystone_client.Client( | 22:09 |
| mordred | session=self.keystone_session, | 22:09 |
| mordred | auth_url=self.keystone_session.get_endpoint( | 22:09 |
| mordred | interface=ksc_auth.AUTH_INTERFACE)) | 22:09 |
| mordred | that's what I'm doing now | 22:09 |
| jamielennox | cool | 22:09 |
| mordred | jamielennox: thanks! | 22:10 |
| jamielennox | it's uglier than it should be, need to mess with that | 22:10 |
| jamielennox | the problem with keystone_client.Client is that it might return v2 or v3 and the interfaces are wildly different | 22:10 |
| mordred | oh yeah. of this I'm quite aware :) | 22:15 |
| jamielennox | if you want a somewhat more obvious way you can do: | 22:15 |
| jamielennox | session.get_endpoint(service_type='identity', version=(3, 0), interface='public') | 22:15 |
| jamielennox | and same for (2,0) | 22:15 |
| jamielennox | if the answer != None then you can create a client with that version | 22:16 |
| jamielennox | so when i say 'obvious' way i mean you'll know what you get not that it's more intuitive ... | 22:16 |
| *** dimsum__ has quit IRC | 22:22 | |
| *** Sanky has quit IRC | 22:25 | |
| openstackgerrit | ayoung proposed openstack/python-keystoneclient: Test updates to prep for unified access info https://review.openstack.org/160133 | 22:49 |
| *** ayoung has joined #openstack-keystone | 22:49 | |
| *** ChanServ sets mode: +v ayoung | 22:49 | |
| *** spandhe has joined #openstack-keystone | 22:49 | |
| openstackgerrit | ayoung proposed openstack/python-keystoneclient: Use Model for access_info https://review.openstack.org/160134 | 22:49 |
| ayoung | (ノಠ益ಠ)ノ彡┻━┻ Python 34 AttributeError: 'dict' object has no attribute 'iteritems' | 22:52 |
| *** diegows has joined #openstack-keystone | 23:18 | |
| *** dimsum__ has joined #openstack-keystone | 23:23 | |
| *** henrynash has quit IRC | 23:26 | |
| *** dimsum__ has quit IRC | 23:28 | |
| breton | use six, Luke | 23:30 |
| mordred | jamielennox: :) | 23:32 |
| mordred | ayoung, breton actually, just use iter(foo.items()) - no need for six for that | 23:33 |
| mordred | but also ignore me | 23:33 |
| mordred | jamielennox: next question - given a session (or a catalog I suppose) what's the "right" way to find out the user_domain and project_domain? | 23:34 |
| jamielennox | mordred: umm, there's not really one - i try to hide that | 23:37 |
| jamielennox | you can ask for a project_id or a user_id | 23:37 |
| jamielennox | which should give you anything you need - but why would you want user_domain or project_domain of the current auth? | 23:37 |
| mordred | well, if I search for a project_id by a project_name and I don't have a domain at hand | 23:38 |
| mordred | I'll get projects from domains that are not the one I'm scoped to | 23:39 |
| *** chlong has joined #openstack-keystone | 23:39 | |
| mordred | which is, in the case of not having asked the question, probably not what I wanted | 23:39 |
| mordred | so I'd _like_ to default domain_id to the currently scoped domain in the absence of an explicit parameter | 23:39 |
| mordred | but, becaue of auth plugins, I cannot depend on the user ever having told me the domain | 23:40 |
| jamielennox | mordred: that would seem to be that you are asking for auth though rather than querying a token you have | 23:40 |
| mordred | it's possible I've asked the wrong question ... | 23:40 |
| mordred | given a token, how can I find the user_domain and project_domain that the token is for? | 23:40 |
| jamielennox | mordred: sure - why do you care? i assume you want to know what other projects you can get access to from this token? | 23:41 |
| jamielennox | the answer to that one is GET /auth/projects but i don't know if that's implemented in keystoneclient | 23:43 |
| jamielennox | or there is a longer URI that does kind of the same thing based on user_id | 23:43 |
| mordred | jamielennox: what I actually want to do is reduce the number of times someone says "give me project foo" and gets back something that wasn't what they were asking for | 23:44 |
| mordred | "what are the projects I can see" isn't a question that's likely to be asked in the thing I'm working on | 23:45 |
| mordred | I mean, I'm largely shooting in the dark anyway since I have no access to any clouds running v3 | 23:46 |
| mordred | so I'm doing my best to make things that work with both without massive confusion | 23:46 |
| jamielennox | mordred: i think in v3 really if you ask for project by name you have to give domain_id or _name | 23:47 |
| jamielennox | so assuming it's a keysotne auth mechanism - which they almost always are | 23:47 |
| jamielennox | you can ask for plugin.get_access(session).user_domain_id | 23:48 |
| jamielennox | but if you're doing v2 then it'll pretty much always be 'default' | 23:48 |
| jamielennox | which it returns regardless of what the default domain is called on the server | 23:48 |
| mordred | awesome. that's exactly what I'm looking for! | 23:50 |
| mordred | jamielennox: thanks! | 23:50 |
| mordred | jamielennox: (I most of the time probably dont' need this) | 23:51 |
| jamielennox | mordred: yea - i really don't think you should need that | 23:51 |
| jamielennox | project_name and domain should be part of what the user provides as auth | 23:51 |
| *** henrynash has joined #openstack-keystone | 23:57 | |
| *** ChanServ sets mode: +v henrynash | 23:57 | |
| mordred | jamielennox: unless they provide a token | 23:58 |
| mordred | jamielennox: or an x509 cert | 23:58 |
| mordred | jamielennox: or oauth | 23:58 |
| jamielennox | mordred: x509 and oauth are authN, they'd probably still need to provide a project | 23:59 |
| mordred | jamielennox: but token | 23:59 |
| mordred | they don't need anything else with a token, yeah? | 23:59 |
| jamielennox | token yes, but it's default validity is 60mins | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!