| *** felipemonteiro has quit IRC | 00:24 | |
| *** r-daneel has quit IRC | 00:40 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 00:58 | |
| *** zxy has joined #openstack-keystone | 01:05 | |
| *** lifeless has quit IRC | 01:06 | |
| *** lifeless has joined #openstack-keystone | 01:11 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Unified limit update APIs Refactor https://review.openstack.org/559552 | 01:31 |
|---|---|---|
| *** felipemonteiro has joined #openstack-keystone | 01:39 | |
| *** felipemonteiro_ has joined #openstack-keystone | 01:40 | |
| *** felipemonteiro has quit IRC | 01:43 | |
| *** felipemonteiro has joined #openstack-keystone | 01:47 | |
| *** edmondsw has quit IRC | 01:47 | |
| *** lifeless has quit IRC | 01:47 | |
| *** lifeless has joined #openstack-keystone | 01:49 | |
| *** felipemonteiro_ has quit IRC | 01:50 | |
| *** r-daneel has joined #openstack-keystone | 02:01 | |
| *** annp has joined #openstack-keystone | 02:03 | |
| *** felipemonteiro has quit IRC | 02:16 | |
| *** lifeless has quit IRC | 02:19 | |
| *** lifeless has joined #openstack-keystone | 02:20 | |
| *** germs has quit IRC | 02:28 | |
| *** germs has joined #openstack-keystone | 02:29 | |
| *** felipemonteiro has joined #openstack-keystone | 02:41 | |
| *** edmondsw has joined #openstack-keystone | 02:54 | |
| *** edmondsw has quit IRC | 02:59 | |
| *** Dinesh_Bhor has quit IRC | 03:05 | |
| *** zxy has quit IRC | 03:28 | |
| *** zxy has joined #openstack-keystone | 03:37 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Unified limit update APIs Refactor https://review.openstack.org/559552 | 03:45 |
| *** lifeless_ has joined #openstack-keystone | 03:46 | |
| *** lifeless has quit IRC | 03:46 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 03:47 | |
| *** lifeless has joined #openstack-keystone | 03:52 | |
| *** lifeless_ has quit IRC | 03:52 | |
| *** annp has quit IRC | 04:13 | |
| *** links has joined #openstack-keystone | 04:14 | |
| *** annp has joined #openstack-keystone | 04:14 | |
| *** gagehugo has quit IRC | 04:24 | |
| *** dklyle has joined #openstack-keystone | 04:25 | |
| *** dklyle has quit IRC | 04:31 | |
| *** gagehugo has joined #openstack-keystone | 04:37 | |
| *** germs has quit IRC | 04:46 | |
| *** felipemonteiro has quit IRC | 04:52 | |
| *** Dinesh_Bhor has quit IRC | 05:00 | |
| *** itlinux has joined #openstack-keystone | 05:00 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:23 | |
| *** mvk has joined #openstack-keystone | 05:39 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 06:04 | |
| *** sheel has joined #openstack-keystone | 06:19 | |
| *** itlinux has quit IRC | 06:24 | |
| *** pcaruana has joined #openstack-keystone | 06:26 | |
| *** belmoreira has joined #openstack-keystone | 06:27 | |
| *** martinus__ has joined #openstack-keystone | 06:35 | |
| *** Dinesh_Bhor has quit IRC | 06:51 | |
| *** Dinesh__Bhor has joined #openstack-keystone | 06:51 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 06:58 |
| *** jaosorior has joined #openstack-keystone | 07:10 | |
| *** rcernin has quit IRC | 07:10 | |
| *** pooja_jadhav has joined #openstack-keystone | 07:25 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/keystone master: Ensure default roles created during bootstrap https://review.openstack.org/572243 | 07:30 |
| *** belmoreira has quit IRC | 07:36 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/keystone master: Ensure default roles created during bootstrap https://review.openstack.org/572243 | 07:37 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 07:48 |
| *** belmoreira has joined #openstack-keystone | 07:48 | |
| *** links has quit IRC | 07:50 | |
| *** belmoreira has quit IRC | 07:53 | |
| *** lifeless_ has joined #openstack-keystone | 08:06 | |
| *** lifeless has quit IRC | 08:07 | |
| *** namnh has joined #openstack-keystone | 08:08 | |
| *** jmlowe has quit IRC | 08:10 | |
| *** ispp has joined #openstack-keystone | 08:17 | |
| *** d0ugal has joined #openstack-keystone | 08:28 | |
| *** belmoreira has joined #openstack-keystone | 08:33 | |
| openstackgerrit | SunYanbin proposed openstack/keystone master: a bug for test by my own Bug1776161 https://review.openstack.org/574169 | 08:37 |
| *** lifeless has joined #openstack-keystone | 08:46 | |
| *** lifeless_ has quit IRC | 08:47 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 09:58 |
| *** Dinesh__Bhor has quit IRC | 09:58 | |
| openstackgerrit | Alessandro Nesta proposed openstack/oslo.limit master: fix tox python3 overrides https://review.openstack.org/573954 | 10:29 |
| *** namnh has quit IRC | 10:34 | |
| *** nicolasbock has joined #openstack-keystone | 10:38 | |
| *** jrollen is now known as jroll | 10:44 | |
| *** zzzeek_ has quit IRC | 11:01 | |
| *** zzzeek has joined #openstack-keystone | 11:03 | |
| *** jroll has quit IRC | 11:18 | |
| *** jroll has joined #openstack-keystone | 11:18 | |
| *** annp has quit IRC | 11:19 | |
| *** lifeless has quit IRC | 11:45 | |
| *** lifeless_ has joined #openstack-keystone | 11:45 | |
| *** edmondsw has joined #openstack-keystone | 12:12 | |
| *** raildo has joined #openstack-keystone | 12:34 | |
| *** pcaruana has quit IRC | 12:39 | |
| *** odyssey4me has quit IRC | 12:39 | |
| *** odyssey4me has joined #openstack-keystone | 12:39 | |
| *** jistr is now known as jistr|mtg | 12:41 | |
| *** AlexeyAbashkin has quit IRC | 12:42 | |
| *** jistr|mtg is now known as jistr | 12:57 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/keystone master: Ensure default roles created during bootstrap https://review.openstack.org/572243 | 13:02 |
| jaosorior | hrybacki: did a tempest patch to get the implied roles tests to work with the default roles addition https://review.openstack.org/#/c/574149/ | 13:03 |
| jaosorior | Federico Ressi, are you around? | 13:05 |
| hrybacki | jaosorior: what happens if someone wants to use tempest to test outside of the default roles? | 13:08 |
| jaosorior | hrybacki: huh? | 13:09 |
| hrybacki | lemme finish reviewing before I start asking questions :P /me shuts up | 13:09 |
| jaosorior | hrybacki: so we have the deafult roles, and those are left untouched. Who knows, the deployer might even change them at some point, and that's cool | 13:10 |
| jaosorior | hrybacki: the tempest test creates some test roles, with random names | 13:10 |
| jaosorior | what my tempest patch does is filter out any other implied roles that might exist in the system, and only use the roles relevant to that test | 13:10 |
| hrybacki | ah yes I see | 13:11 |
| jaosorior | hrybacki: if it's not very understandable I can try to simplify it. Maybe I tried to be too clever :D readability is better | 13:12 |
| *** jdennis has quit IRC | 13:27 | |
| *** jdennis has joined #openstack-keystone | 13:27 | |
| *** ispp has quit IRC | 13:29 | |
| *** ispp has joined #openstack-keystone | 13:31 | |
| *** pcaruana has joined #openstack-keystone | 13:32 | |
| *** belmorei_ has joined #openstack-keystone | 13:32 | |
| *** belmoreira has quit IRC | 13:34 | |
| *** sheel has quit IRC | 13:49 | |
| openstackgerrit | David Rabel proposed openstack/keystone master: Fix typo in docs https://review.openstack.org/574266 | 13:56 |
| *** xinran__ has joined #openstack-keystone | 13:58 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 14:04 | |
| *** Alexey_Abashkin has joined #openstack-keystone | 14:11 | |
| *** AlexeyAbashkin has quit IRC | 14:13 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 14:13 | |
| *** mchlumsky has joined #openstack-keystone | 14:28 | |
| *** jmlowe has joined #openstack-keystone | 14:31 | |
| cmurphy | lbragstad: thanks for the assist with the update, sorry I didn't get it out last week | 14:31 |
| lbragstad | cmurphy: no worries - i should have caught it last week too, but i was wrapped up in the enforcement model stuff :) | 14:32 |
| *** dklyle has joined #openstack-keystone | 14:40 | |
| *** dklyle has quit IRC | 14:47 | |
| *** r-daneel has quit IRC | 14:50 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Address follow-on comments in strict-two-level spec https://review.openstack.org/573292 | 14:50 |
| *** ispp has quit IRC | 14:51 | |
| *** ispp has joined #openstack-keystone | 14:54 | |
| jaosorior | hrybacki: for some reason we're still getting for implied roles even if I tried to filter them out :/ | 15:05 |
| *** jmlowe has quit IRC | 15:08 | |
| knikolla | o/ | 15:09 |
| *** r-daneel has joined #openstack-keystone | 15:25 | |
| *** fiddletwix has joined #openstack-keystone | 15:25 | |
| *** felipemonteiro has joined #openstack-keystone | 15:25 | |
| *** r-daneel_ has joined #openstack-keystone | 15:28 | |
| *** r-daneel has quit IRC | 15:29 | |
| *** r-daneel_ is now known as r-daneel | 15:29 | |
| *** jmlowe has joined #openstack-keystone | 15:32 | |
| hrybacki | jaosorior: in meeting, 1 sec | 15:32 |
| *** felipemonteiro has quit IRC | 15:34 | |
| *** itlinux has joined #openstack-keystone | 15:36 | |
| *** ispp has quit IRC | 15:40 | |
| *** r-daneel_ has joined #openstack-keystone | 15:42 | |
| *** belmorei_ has quit IRC | 15:42 | |
| *** r-daneel has quit IRC | 15:44 | |
| *** r-daneel_ is now known as r-daneel | 15:44 | |
| hrybacki | jaosorior: I saw that and was also confused. No obvious answer | 15:53 |
| jaosorior | Well, in an hour I'm gonna end my day, do you have a chance to check that out? | 15:53 |
| hrybacki | jaosorior: I've a few more meetings on my books today but will certainly try :) | 15:54 |
| hrybacki | monday/tuesday are always meeting slammed for me =/ | 15:54 |
| *** lifeless_ has quit IRC | 15:59 | |
| *** lifeless has joined #openstack-keystone | 16:00 | |
| *** dtruong_ has quit IRC | 16:05 | |
| *** AlexeyAbashkin has quit IRC | 16:11 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 16:13 | |
| *** r-daneel has quit IRC | 16:13 | |
| *** felipemonteiro has joined #openstack-keystone | 16:19 | |
| *** agrebennikov has joined #openstack-keystone | 16:24 | |
| *** r-daneel has joined #openstack-keystone | 16:25 | |
| *** r-daneel has quit IRC | 16:29 | |
| kmalloc | o/ | 16:30 |
| *** r-daneel has joined #openstack-keystone | 16:30 | |
| *** felipemonteiro_ has joined #openstack-keystone | 16:33 | |
| *** felipemonteiro__ has joined #openstack-keystone | 16:34 | |
| *** Alexey_Abashkin has joined #openstack-keystone | 16:35 | |
| *** Kumar has joined #openstack-keystone | 16:36 | |
| *** AlexeyAbashkin has quit IRC | 16:36 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 16:36 | |
| *** felipemonteiro has quit IRC | 16:37 | |
| *** felipemonteiro_ has quit IRC | 16:37 | |
| *** Alexey_Abashkin has joined #openstack-keystone | 16:42 | |
| *** AlexeyAbashkin has quit IRC | 16:44 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 16:44 | |
| *** xinran__ has quit IRC | 16:58 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Fix python3 test compat https://review.openstack.org/573773 | 16:59 |
| openstackgerrit | Merged openstack/python-keystoneclient master: fix tox python3 overrides https://review.openstack.org/573339 | 16:59 |
| *** felipemonteiro__ is now known as felipemonteiro | 17:02 | |
| *** gyee has joined #openstack-keystone | 17:03 | |
| felipemonteiro | hrybacki lbragstad: is there anything else i need to do to https://review.openstack.org/#/c/464678/ or implement patrole-side prior to approval? | 17:03 |
| *** germs has joined #openstack-keystone | 17:07 | |
| *** germs has quit IRC | 17:07 | |
| *** germs has joined #openstack-keystone | 17:07 | |
| *** felipemonteiro has quit IRC | 17:31 | |
| *** dklyle has joined #openstack-keystone | 17:32 | |
| *** felipemonteiro has joined #openstack-keystone | 17:35 | |
| *** AlexeyAbashkin has quit IRC | 17:35 | |
| *** felipemonteiro has quit IRC | 17:37 | |
| openstackgerrit | Lance Bragstad proposed openstack/python-keystoneclient master: Add support for registered limits https://review.openstack.org/537668 | 17:39 |
| *** felipemonteiro has joined #openstack-keystone | 17:39 | |
| lbragstad | curious what people think of ^ | 17:39 |
| lbragstad | i based it on wxy's work for fixing up the unified limits api | 17:39 |
| lbragstad | but the testing bits are a little strange just because the unified limits API it different from other API we support in keystone | 17:39 |
| lbragstad | and the assumptions some of the base CrudTests in python-keystoneclient make | 17:40 |
| lbragstad | it's clearly monday today, since my grammar in those last two sentences was way worse than it usually is | 17:42 |
| *** felipemonteiro has quit IRC | 17:49 | |
| *** felipemonteiro has joined #openstack-keystone | 17:50 | |
| *** felipemonteiro_ has joined #openstack-keystone | 17:51 | |
| lbragstad | kmalloc: should we update this? https://blueprints.launchpad.net/keystone/+spec/keystone-pecan | 17:53 |
| *** felipemonteiro has quit IRC | 17:54 | |
| *** r-daneel has quit IRC | 18:02 | |
| *** ckonstanski has quit IRC | 18:06 | |
| *** r-daneel has joined #openstack-keystone | 18:09 | |
| *** Kumar has quit IRC | 18:09 | |
| *** dklyle has quit IRC | 18:17 | |
| *** dave-mcc_ has quit IRC | 18:25 | |
| *** dave-mccowan has joined #openstack-keystone | 18:27 | |
| *** dtruong has joined #openstack-keystone | 18:31 | |
| *** oikiki has joined #openstack-keystone | 18:34 | |
| *** felipemonteiro_ has quit IRC | 18:36 | |
| *** dklyle has joined #openstack-keystone | 18:48 | |
| *** r-daneel has quit IRC | 18:52 | |
| *** r-daneel has joined #openstack-keystone | 18:56 | |
| kmalloc | lbragstad: heh. probably | 18:58 |
| *** felipemonteiro has joined #openstack-keystone | 18:59 | |
| lbragstad | do you know what the outcome was of pecan support in openstack? | 18:59 |
| kmalloc | some projects adopted it | 18:59 |
| kmalloc | some didn't | 18:59 |
| lbragstad | jamie's summary in that blueprint made it sound like it was a forsure thing | 18:59 |
| kmalloc | some did something else | 18:59 |
| kmalloc | that was back when wsme and pecan was a very large effort in openstack. | 18:59 |
| kmalloc | i don't know the state of pecan and wsme, but it didn't work for us for some reasons | 19:00 |
| kmalloc | and i don't remember why | 19:00 |
| lbragstad | hmm | 19:00 |
| lbragstad | intersting | 19:00 |
| kmalloc | tbh it could probably be used now. but we had some very wonky things in the past | 19:02 |
| *** jmlowe has quit IRC | 19:04 | |
| *** Neptu has joined #openstack-keystone | 19:04 | |
| jaosorior | hrybacki: so... The keystone tempest job ran referencing the wrong patchset (probably an error on my side), rechecked the job. | 19:16 |
| hrybacki | jaosorior: ahhhh. I should have seen that | 19:18 |
| hrybacki | glad you did, I'm failing to get a instance to test against today w/ RDO Cloud | 19:18 |
| jaosorior | hrybacki: I actually didn't see that :D had to ask in the infra channel and clarkb was kind enough to point that out | 19:19 |
| hrybacki | thanks clarkb :) | 19:19 |
| openstackgerrit | Lance Bragstad proposed openstack/python-keystoneclient master: Add support for registered limits https://review.openstack.org/537668 | 19:25 |
| openstackgerrit | Lance Bragstad proposed openstack/python-keystoneclient master: Add support for project-specific limits https://review.openstack.org/574391 | 19:25 |
| *** aeline has joined #openstack-keystone | 19:27 | |
| aeline | Hey, trying to modify keystone so that there is some more tables in the DB. Where does the the DB initialization actually happen? | 19:28 |
| aeline | Sorry if this is the wrong place to ask | 19:29 |
| lbragstad | aeline: keystone provides a command line tool call `keystone-manage` | 19:34 |
| lbragstad | which offers a subcommand that is used to bootstrap keystone with information | 19:34 |
| lbragstad | https://docs.openstack.org/keystone/latest/cli/index.html#keystone-manage | 19:34 |
| lbragstad | hrybacki: i'm going through the trello board | 19:34 |
| aeline | Is adding classes under sql_model.py not the right way to go about this? | 19:35 |
| * hrybacki listnes | 19:35 | |
| hrybacki | listens* | 19:35 |
| lbragstad | hrybacki: a bunch of stuff had due dates of april 20th, what should we do with those, re-target them? | 19:35 |
| lbragstad | aeline: oh - i'm sorry, i misunderstood your question | 19:35 |
| hrybacki | lbragstad: aye, likely. I'm running out the door here in a min to some appts. Have time for a review session together tomorrow morning? | 19:35 |
| lbragstad | aeline: keystone uses database migrations with sqlalchemy to make changes to the database | 19:36 |
| hrybacki | good time to catch you up on our policy work too | 19:36 |
| lbragstad | aeline: https://docs.openstack.org/keystone/latest/contributor/database-migrations.html | 19:36 |
| lbragstad | ^ that has some information on the process | 19:36 |
| lbragstad | hrybacki: sure | 19:36 |
| lbragstad | just ping me whenever | 19:36 |
| aeline | Thanks! Appreciate the help. | 19:36 |
| lbragstad | aeline: yep | 19:37 |
| lbragstad | hrybacki: i don't have anything prior to the meeting | 19:37 |
| *** mvk has quit IRC | 19:39 | |
| hrybacki | lbragstad: invite enroute | 19:40 |
| kmalloc | hrybacki: toss me an invite as well if you don't mind me sitting in on it | 19:41 |
| kmalloc | lbragstad: ^ | 19:41 |
| lbragstad | sure thing | 19:41 |
| kmalloc | lbragstad: almost ready to post the initial "convert to flask" review(s) | 19:42 |
| hrybacki | kmalloc: personal or rh email? | 19:42 |
| kmalloc | hrybacki: pref. @gmail, but honestly, it works either way | 19:42 |
| hrybacki | your wish :) | 19:42 |
| kmalloc | lbragstad: hmm. i am not liking the way this is shaping up. i think i need to re-work it. let me post what i'm up to and show you what i don't like. | 19:44 |
| kmalloc | hm. or. wonder if i can do the @url_for | 19:44 |
| * kmalloc checks | 19:44 | |
| lbragstad | ok | 19:45 |
| kmalloc | nop url_for wont fix it. | 19:45 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Add Flask-RESTful as a requirement https://review.openstack.org/574414 | 19:46 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement scaffolding for Flask-RESTful use https://review.openstack.org/574415 | 19:46 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: [WIP] Convert Discovery (Version) subsystem to Flask https://review.openstack.org/574416 | 19:46 |
| kmalloc | lbragstad: ok so that last one [WIP] one. | 19:46 |
| kmalloc | if you look in keystone.subsystem.discovery.api | 19:47 |
| kmalloc | you'll see how each path gets a resource implemented for it | 19:47 |
| kmalloc | and how it's added to the API object | 19:47 |
| kmalloc | in api_obj.resource_mapping | 19:48 |
| kmalloc | maybe i should make the API object more of a soft-import time registry? i am trying to avoid cross-subsystem imports and/or where resources don't need to be explicitly added to the Resource_mapping attr | 19:48 |
| lbragstad | hmm | 19:49 |
| kmalloc | so in the case of something that extends /USERs | 19:49 |
| kmalloc | you'd need the /USERS api object | 19:49 |
| kmalloc | then somehow add the resource | 19:49 |
| kmalloc | ot the resource_mapping | 19:49 |
| kmalloc | *or* you'd need to support cross-subsystem controller instantiation | 19:49 |
| kmalloc | unless we want an "extends" api, so for example if it addes to user, a new API object is created with the deeper prefix | 19:50 |
| kmalloc | e.g. /users/{user_id}/credentials/OS-EC2 | 19:51 |
| kmalloc | no that doesn't work because of the {user_id} bit. | 19:52 |
| kmalloc | ugh. | 19:52 |
| kmalloc | so 3 possible ways to approach this: | 19:53 |
| kmalloc | 1) migrate the controller code to the resource objects | 19:53 |
| kmalloc | (most flask-like) | 19:53 |
| kmalloc | 2) support cross subsystem imports and | 19:53 |
| kmalloc | instantiate controllers from the cross-system on the local resource | 19:54 |
| kmalloc | or 3) support cross subsystem imports and allow the resources to register themselves in the API object's resource_mapping attribute | 19:54 |
| kmalloc | in case #1, code would be always isolated to the prefix, so /users/{user_id}/credentials/OS-EC2 would live in identity, even though EC2 "owns" the resulting data | 19:55 |
| kmalloc | thoughts? | 19:55 |
| lbragstad | sorry - just wrapping up a call quick and i'll read back | 19:55 |
| lbragstad | sans distractions :) | 19:56 |
| kmalloc | sure | 19:56 |
| -openstackstatus- NOTICE: Zuul was restarted for a software upgrade; changes uploaded or approved between 19:30 and 19:50 will need to be rechecked | 19:56 | |
| kmalloc | oh, one more option: 4 - don't use flask-Restful and directly craft routes -- still has some of the pitfalls because the blueprint(s) are local to the subsystem (e.g. /users in Identity) | 20:00 |
| *** hoonetorg has joined #openstack-keystone | 20:05 | |
| *** oikiki has quit IRC | 20:06 | |
| *** oikiki has joined #openstack-keystone | 20:07 | |
| *** r-daneel has quit IRC | 20:11 | |
| *** ispp has joined #openstack-keystone | 20:12 | |
| *** rmascena has joined #openstack-keystone | 20:22 | |
| *** r-daneel has joined #openstack-keystone | 20:22 | |
| *** raildo has quit IRC | 20:23 | |
| lbragstad | kmalloc: ok - reading scroll back | 20:25 |
| lbragstad | hmm | 20:28 |
| kmalloc | lbragstad: and the other question is, is it worth moving anything but the API/controllers to subsystem, maybe instead subsystem is the non-routed bits [aka managers/backends] and keystone.api is the routed (controllers) bit[s]? | 20:28 |
| lbragstad | yeah - i can see where that would make sense | 20:28 |
| kmalloc | ok, so i'll aim for keystone.api, (and worry about cleanup to keystone.subsystem later) | 20:29 |
| kmalloc | but that doesn't answer the same questions re: controller import outlined above | 20:29 |
| lbragstad | so option #1 | 20:29 |
| lbragstad | would be reworking everything in say keystone/identity/controller.py | 20:30 |
| kmalloc | yeah | 20:30 |
| kmalloc | well, we're doing a chunk of the work anyway | 20:30 |
| kmalloc | to move to flask_restful | 20:30 |
| *** rmascena has quit IRC | 20:31 | |
| kmalloc | brb dog potty | 20:31 |
| *** AlexeyAbashkin has joined #openstack-keystone | 20:32 | |
| *** r-daneel has quit IRC | 20:33 | |
| kmalloc | lbragstad: though with keystone.api, it means we would be much more broken out: keystone.api.user keystone.api.group, etc so cross import isn't important | 20:35 |
| lbragstad | sorry - dumb question | 20:36 |
| lbragstad | can you define cross import for me? | 20:36 |
| kmalloc | keystone.subsystem.user needs ot be imported (in the current patch-style) by keystone.subsystem.ec2 | 20:36 |
| kmalloc | because ec2 extends the keystone.user API | 20:36 |
| kmalloc | via: /users/{user_id}/credentials/OS-EC2 | 20:37 |
| kmalloc | since ec2 *owns* that path, right now we just say "hey mapper, route that" | 20:37 |
| kmalloc | in flask, we're going to use blueprints which define the prefix, e.g. "users" which is owned by identity | 20:38 |
| kmalloc | so if we did keystone.subsystem.identity is where everything from keystone.identity went, ec2 would either need to add it's resource to keystone.subsystem.identity.api.UserAPI or ... some other mechanism to get it loaded under /user path-prefix | 20:39 |
| lbragstad | hmm | 20:39 |
| lbragstad | actually | 20:39 |
| lbragstad | it would be nice to know that all router logic for a given path is in a single place | 20:40 |
| kmalloc | right | 20:40 |
| kmalloc | so, if we did keystone.api.user (for example) | 20:40 |
| kmalloc | all router logic for "/user" would live there | 20:40 |
| kmalloc | and keystone.identity.core/backends/etc stays in either keystone.identity or eventually moves to keystone.subsystem.identity <-- .subsystem = internal manager stuff | 20:41 |
| kmalloc | keystone.api.* <--- Router/Controller manager | 20:41 |
| kmalloc | that seems to make more sense to me. | 20:41 |
| kmalloc | and should be a lot cleaner. | 20:41 |
| lbragstad | yeah - i can see that | 20:42 |
| lbragstad | even though it goes against the grouping we've had for *years* | 20:42 |
| lbragstad | :) | 20:42 |
| kmalloc | right | 20:42 |
| kmalloc | now the question i have is... | 20:42 |
| kmalloc | i can do: router-only type logic, where i just map the items from the BP to the route in keystone.api (raw flask) | 20:43 |
| kmalloc | or i can do the resource-based style flask-restful does, e.g. User->GET/POST/DELETE/ETC is an object where /users/{user_id}/credentials/OS-EC2 would be a separate "resource" object | 20:43 |
| kmalloc | that implements (in this case) "get" | 20:43 |
| kmalloc | so controller logic goes into resource objects. | 20:44 |
| lbragstad | and the resource object would call to managers? | 20:44 |
| kmalloc | yep | 20:44 |
| kmalloc | user_list.get would implement "list users" | 20:44 |
| kmalloc | user.get would implement "get me user X" | 20:45 |
| *** aeline has quit IRC | 20:45 | |
| kmalloc | user.post would implement "create user" | 20:45 |
| kmalloc | user.delete would implemnet "delete user" | 20:45 |
| kmalloc | keystone.api.user.ec2Resource would implement "get ec2 cred for user" | 20:45 |
| kmalloc | each "resource" can implement GEt/POST/PUT/DELETE/PATCH/etc | 20:46 |
| kmalloc | and it's based upon the methods on the resource object | 20:46 |
| kmalloc | GET/HEAD are explicitly the same unless defined separately | 20:46 |
| *** Alexey_Abashkin has joined #openstack-keystone | 20:46 | |
| lbragstad | is each resource object coupled to a specific path? | 20:46 |
| kmalloc | yep, with substitutions for elements like {user_id} | 20:46 |
| lbragstad | ok | 20:47 |
| *** AlexeyAbashkin has quit IRC | 20:47 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 20:47 | |
| lbragstad | so if we need to go deeper on the path, we need more resource objects | 20:47 |
| lbragstad | ? | 20:47 |
| kmalloc | yes. | 20:47 |
| kmalloc | which is why i liked the user.ec2resource example | 20:47 |
| lbragstad | ok - that makes sense | 20:47 |
| kmalloc | ->> /users/{user_id}/credentials/OS-EC2 is on a distinct resource object from the main user CRUD | 20:47 |
| lbragstad | but still relative to the base user path/resource object | 20:48 |
| kmalloc | and user list is a different distinct resource because GET /v3/user is different than /v3/user/ | 20:48 |
| lbragstad | ahhhh | 20:48 |
| kmalloc | yes, it would still be all tied to the path, so /user would be in keystone.api.user | 20:48 |
| kmalloc | you'd then implement all resources that matter for the /user path there | 20:48 |
| lbragstad | so - i'm thinking about this partially as a developer new the project | 20:48 |
| lbragstad | and following an incoming request | 20:49 |
| kmalloc | right, which is why i'm bouncing it :) | 20:49 |
| kmalloc | instead of just trying to implement, i *think* as a new dev, this makes a lot more sense | 20:49 |
| kmalloc | but, wanted a second brain | 20:49 |
| lbragstad | that seems reasonable to me | 20:49 |
| kmalloc | the request would hit Flask_App, be dispatched based upon the URL to the blueprint/API, e.g. /USERS | 20:50 |
| kmalloc | and from there, the resources would define the behavior | 20:50 |
| lbragstad | by calling into the business logic in various managers | 20:50 |
| kmalloc | and all resources (think of resources as a controller with the router built-in) | 20:50 |
| *** r-daneel has joined #openstack-keystone | 20:50 | |
| kmalloc | would live relative to their path-prefix | 20:50 |
| lbragstad | ok | 20:50 |
| kmalloc | and call the managers directly | 20:50 |
| lbragstad | cool | 20:51 |
| kmalloc | so routers/controllers -> keystone.api.<path> | 20:51 |
| *** Alexey_Abashkin has joined #openstack-keystone | 20:51 | |
| kmalloc | i'll need to see how i can implement the @protected bits | 20:51 |
| *** AlexeyAbashkin has quit IRC | 20:51 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 20:51 | |
| kmalloc | but that might be a more direct call of @protected underlying code (easier to break out) in the process. | 20:52 |
| kmalloc | so. let me go re-do these patches with all of this in mind. | 20:52 |
| kmalloc | i *think* this just got a lot simpler to write the base API class and the resources | 20:52 |
| lbragstad | i can get behind it if it makes removing @protected easier | 20:52 |
| kmalloc | @protected will be a headache no matter what to deal with | 20:53 |
| lbragstad | and more structured organization is a plus | 20:53 |
| kmalloc | yeah. | 20:53 |
| *** felipemonteiro_ has joined #openstack-keystone | 20:55 | |
| *** AlexeyAbashkin has quit IRC | 20:56 | |
| * knikolla is going to read back this convo tonight. | 21:01 | |
| *** felipemonteiro_ has quit IRC | 21:01 | |
| *** r-daneel has quit IRC | 21:08 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 21:08 | |
| *** r-daneel has joined #openstack-keystone | 21:09 | |
| *** oikiki has quit IRC | 21:13 | |
| *** ispp has quit IRC | 21:15 | |
| *** oikiki has joined #openstack-keystone | 21:17 | |
| *** oikiki has quit IRC | 21:20 | |
| *** lifeless_ has joined #openstack-keystone | 21:28 | |
| *** lifeless has quit IRC | 21:28 | |
| *** r-daneel has quit IRC | 21:31 | |
| *** lifeless_ has quit IRC | 21:38 | |
| *** lifeless has joined #openstack-keystone | 21:44 | |
| *** martinus__ has quit IRC | 21:48 | |
| *** r-daneel has joined #openstack-keystone | 21:50 | |
| *** AlexeyAbashkin has quit IRC | 21:54 | |
| *** itlinux has quit IRC | 21:57 | |
| lbragstad | if anyone here is client savvy and wants to give me some pointers, i'm all ears :) | 22:05 |
| lbragstad | https://review.openstack.org/#/c/574475/ | 22:05 |
| lbragstad | https://review.openstack.org/#/c/574391/ | 22:05 |
| lbragstad | https://review.openstack.org/#/c/537668/6 | 22:05 |
| *** nicolasbock has quit IRC | 22:05 | |
| *** rcernin has joined #openstack-keystone | 22:16 | |
| *** r-daneel has quit IRC | 22:26 | |
| *** r-daneel has joined #openstack-keystone | 22:38 | |
| *** EmilienM|PTO is now known as EmilienM | 22:41 | |
| *** edmondsw has quit IRC | 22:47 | |
| *** r-daneel has quit IRC | 22:54 | |
| *** hoonetorg has quit IRC | 23:24 | |
| *** hoonetorg has joined #openstack-keystone | 23:36 | |
| *** felipemonteiro has quit IRC | 23:42 | |
| *** felipemonteiro has joined #openstack-keystone | 23:45 | |
| *** felipemonteiro has quit IRC | 23:55 | |
| kmalloc | lbragstad: more dead code removal coming soon [woo] | 23:56 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!