Wednesday, 2018-03-28

*** salv-orlando has joined #openstack-sdks00:05
*** salv-orlando has quit IRC00:10
*** mrhillsman is now known as mrhillsman_in_mm00:11
*** mrhillsman_in_mm is now known as mrhillsman00:13
*** openstack has joined #openstack-sdks00:17
*** ChanServ sets mode: +o openstack00:17
*** sdague has quit IRC00:17
*** dave-mccowan has joined #openstack-sdks00:21
*** chenyb4 has joined #openstack-sdks00:49
*** bobh has joined #openstack-sdks01:05
*** bobh has quit IRC01:17
*** Matias has quit IRC01:20
*** bobh has joined #openstack-sdks01:45
*** bobh has quit IRC01:53
*** chenyb4 has quit IRC02:06
*** salv-orlando has joined #openstack-sdks02:07
*** chenyb4 has joined #openstack-sdks02:09
*** salv-orlando has quit IRC02:12
*** gildub has joined #openstack-sdks03:37
openstackgerritLogan V proposed openstack/os-client-config master: Add Limestone Networks vendor info  https://review.openstack.org/55713903:44
*** dave-mccowan has quit IRC03:55
*** salv-orlando has joined #openstack-sdks04:08
*** salv-orlando has quit IRC04:13
mrhillsmanadriant see - https://github.com/gophercloud/utils/pull/2604:17
mrhillsmangenerally quick response :)04:17
mrhillsmanyou may be able to help push it through by reviewing/trying it even though jtopjian may not merge it until after jrperritt review04:18
adriantmrhillsman: looks good, code (despite not entirely understanding go) makes sense.04:25
mrhillsman++04:26
adriantmrhillsman: and did you file a bug to terraform for the OS_TOKEN value?04:28
mrhillsmani did not04:28
adriantit might also be worth asking terraform/gophercloud peeps why gophercloud and terraform both differently handle environment variables.04:28
mrhillsmanjtopjian maintains that as well04:28
mrhillsmanunfortunately i do not know go well enough to know04:29
adriantmrhillsman: want me to submit that bug and potentially ask at the same time?04:29
mrhillsmani just started working on learning it about a month ago04:30
mrhillsmanyeah, i think you should and reference the issue and pr04:30
adriantkk04:30
mrhillsmanthx adriant04:30
*** gkadam has joined #openstack-sdks04:44
*** gkadam has quit IRC05:07
*** salv-orlando has joined #openstack-sdks05:09
*** salv-orlando has quit IRC05:09
*** salv-orlando has joined #openstack-sdks05:09
*** e0ne has joined #openstack-sdks05:26
adriantmrhillsman: https://github.com/terraform-providers/terraform-provider-openstack/issues/27105:31
*** e0ne has quit IRC05:33
adriantmordred, dtroyer: what exactly is the precedence between:  domain_id vs user_domain_id, and project_domain_id ? And the same with domain_name vs user_domain_name, and project_domain_name ?05:35
adriantI'd assume (and probably incorrectly) that domain_id comes first in our tools and then if one of the other two is set, they take precedence?05:36
adriantmordred: does os-client-config even use OS_DOMAIN_ID and OS_DOMAIN_NAME or the user/project specific ones? I may take a gander at the code05:38
mrhillsmancool, thanks for leading the charge on this adriant05:38
adriantmrhillsman: np05:38
adriantmrhillsman: with MFA slowly becoming a thing in openstack token auth in these tools will be VERY important05:38
adriantso it needs to work05:39
adriantbecause screw entering your password + MFA things for every commands05:39
adriantthat way madness lies05:39
adriantI want a nice easy way to auth in the CLI, save me auth'd token somewhere, and then use that, and ideally have that experience consistent.05:40
mrhillsmanwilling to bet quite a few folks are going to be happy as a result05:40
*** e0ne has joined #openstack-sdks05:50
*** e0ne has quit IRC06:10
*** gildub has quit IRC06:16
*** gildub has joined #openstack-sdks06:27
*** pooja_jadhav has quit IRC07:21
*** salv-orlando has quit IRC07:22
*** pooja_jadhav has joined #openstack-sdks07:22
*** salv-orlando has joined #openstack-sdks07:22
*** salv-orlando has quit IRC07:27
*** salv-orlando has joined #openstack-sdks07:45
*** salv-orlando has quit IRC07:54
*** ralonsoh has joined #openstack-sdks07:54
*** salv-orlando has joined #openstack-sdks07:54
*** gildub has quit IRC07:58
*** salv-orlando has quit IRC07:59
*** jpich has joined #openstack-sdks08:04
openstackgerritChen Hanxiao proposed openstack/python-openstackclient master: Add --image-property parameter in 'server create'  https://review.openstack.org/53566408:10
*** gkadam has joined #openstack-sdks08:19
*** e0ne has joined #openstack-sdks08:27
*** sdague has joined #openstack-sdks08:55
*** cdent has joined #openstack-sdks09:11
openstackgerritChris Dent proposed openstack/api-wg master: Add guidance on needing cache-control headers  https://review.openstack.org/55046809:12
openstackgerritOpenStack Proposal Bot proposed openstack/python-openstackclient master: Updated from global requirements  https://review.openstack.org/55325709:22
*** dtantsur|afk is now known as dtantsur09:46
*** salv-orlando has joined #openstack-sdks09:58
openstackgerritOpenStack Proposal Bot proposed openstack/python-openstackclient master: Updated from global requirements  https://review.openstack.org/55325710:02
*** cdent has quit IRC10:12
*** chenyb4 has quit IRC10:29
openstackgerritOpenStack Proposal Bot proposed openstack/python-openstackclient master: Updated from global requirements  https://review.openstack.org/55325710:37
*** salv-orl_ has joined #openstack-sdks10:53
*** salv-orlando has quit IRC10:56
*** salv-orlando has joined #openstack-sdks10:58
*** salv-orl_ has quit IRC10:58
*** cdent has joined #openstack-sdks11:01
*** gkadam_ has joined #openstack-sdks11:03
*** gkadam__ has joined #openstack-sdks11:04
*** salv-orlando has quit IRC11:05
*** salv-orlando has joined #openstack-sdks11:06
*** gkadam has quit IRC11:07
*** gkadam_ has quit IRC11:08
*** dave-mccowan has joined #openstack-sdks11:09
*** thrash|g0ne is now known as thrash11:19
*** dtantsur is now known as dtantsur|brb11:31
*** salv-orl_ has joined #openstack-sdks11:36
*** salv-orlando has quit IRC11:41
*** gkadam__ has quit IRC11:44
*** cdent has quit IRC12:05
*** bobh has joined #openstack-sdks12:06
*** edmondsw has joined #openstack-sdks12:06
*** gkadam has joined #openstack-sdks12:19
*** bobh has quit IRC12:34
*** cdent has joined #openstack-sdks12:40
*** chenyb4 has joined #openstack-sdks12:40
*** olaph has joined #openstack-sdks12:52
*** thrash is now known as thrash|biab12:53
*** chenyb4 has quit IRC12:53
*** salv-orlando has joined #openstack-sdks12:56
*** salv-or__ has joined #openstack-sdks12:57
*** fabian_ has joined #openstack-sdks12:58
*** salv-orl_ has quit IRC12:58
*** fabian_ is now known as chenyb412:58
*** salv-orlando has quit IRC13:02
*** salv-or__ has quit IRC13:02
*** salv-orlando has joined #openstack-sdks13:03
*** lbragstad has joined #openstack-sdks13:04
*** salv-orlando has quit IRC13:08
*** dtantsur|brb is now known as dtantsur13:15
*** thrash|biab is now known as thrash13:34
*** cdent has quit IRC13:47
*** cdent has joined #openstack-sdks13:48
*** cdent has quit IRC13:53
*** salv-orlando has joined #openstack-sdks13:53
*** cdent has joined #openstack-sdks13:55
mordredadriant: the user and project versions13:55
mordredadriant: OS_DOMAIN_ID and OS_DOMAIN_NAME _can_ be used, but they actually commuicate different information than OS_PROJECT_DOMAIN_NAME and OS_USER_DOMAIN_NAME13:56
mordredadriant: OS_DOMAIN_ID and OS_DOMAIN_NAME (or, rather, the keystoneauth parameters domain_name and domain_id) are used to create a domain-scoped token13:56
mordredadriant: so, domain_name is not a way to set domain for both user and project - it has a whole other meaning13:57
mordredadriant: I *think* somewhere (it might be python-openstackclient) there was an addition of default_domain_name - that could be used to set domain name once for both user and project13:58
mordredadriant, mrhillsman: also - token auth is not the answer for api access for MFA clouds ... I'd actually argue that any time anyone (who is not already an openstack service) directly uses token auth something else has fundamentally broken14:00
mordredadriant: the answer for API access for MFA is the new App Credential support that landed in Queens14:01
mordredTHAT SAID - obviously token auth should work - and if it doesn't we should fix it14:01
*** ralonsoh has quit IRC14:29
openstackgerritSami Makki proposed openstack/python-openstackclient master: Fix the `role implies list` command.  https://review.openstack.org/55735914:59
*** cdent has quit IRC15:10
*** chenyb4 has quit IRC15:14
EmilienMdtroyer: do you think it would be possible to cut a tag on osc (based on latest patch that landed: https://review.openstack.org/#/c/553374/)? It's currently blocking TripleO to move forward in Rocky15:25
*** bobh has joined #openstack-sdks15:31
*** bobh has quit IRC15:36
*** bobh has joined #openstack-sdks15:43
*** bobh has quit IRC15:48
*** bobh has joined #openstack-sdks15:53
*** bobh has quit IRC15:58
*** bobh has joined #openstack-sdks16:00
*** bobh has quit IRC16:05
*** bobh has joined #openstack-sdks16:08
*** cdent has joined #openstack-sdks16:18
*** jpich has quit IRC16:29
*** olaph has quit IRC16:31
*** olaph has joined #openstack-sdks16:31
*** thrash is now known as thrash|biab16:40
*** e0ne has quit IRC17:01
*** thrash|biab is now known as thrash17:08
*** dtantsur is now known as dtantsur|afk17:10
*** gildub has joined #openstack-sdks17:54
*** gkadam has quit IRC17:54
*** gildub has quit IRC18:17
*** e0ne has joined #openstack-sdks18:19
openstackgerritMerged openstack/keystoneauth master: Be more helpful when version discovery fails  https://review.openstack.org/55404418:39
*** corvus is now known as kermitf18:42
*** kermitf is now known as corvus18:42
dtroyermordred: having your +1 on https://review.openstack.org/557479 (DevStack, one more SDK rename) might be nice18:56
dtroyerit's why osc's -tips jobs are failing18:57
mordreddtroyer: oh poo. sorry - I thought I'd gotten them all19:05
*** gkadam has joined #openstack-sdks19:06
*** olaph1 has joined #openstack-sdks19:22
*** olaph has quit IRC19:24
*** bobh has quit IRC19:37
*** olaph has joined #openstack-sdks19:55
*** olaph1 has quit IRC19:57
*** bobh has joined #openstack-sdks20:01
*** gkadam has quit IRC20:12
*** e0ne has quit IRC20:48
*** olaph1 has joined #openstack-sdks21:16
*** olaph has quit IRC21:16
adriantmordred: ty! That makes more sense, if not also being confusing...21:22
* adriant hates domains as a concept outside of projects21:22
mordredadriant: I would have liked them better if they had been called "realm" I think21:24
mordredadriant: but yeah21:24
adriantdomains are already projects, but.. the painful and confusing fact that you can scope to a domain, and a project that is a domain...21:24
adriantis evil21:24
adriantEVIL21:24
adriantand as it turns out by giving yourself a role assignment on the same domain/project with both scopes breaks keystone :P21:25
adriantyou now have a role assignment you can't remove!21:25
* adriant finds all the best bugs21:25
mordredyay!21:27
adriantand mordred: regarding tokens being the answer to MFA. I disagree that appcreds are the answer. When you're using the CLI you don't really want to use app creds. For services, yes, and then you wouldn't do MFA.21:27
adriantbut for using your own account and needing to do stuff... having to provide a password+totp every time is a nope21:27
adriantso basically with my own CLI use, I do it like horizon does. Auth first, store token, use APIs.21:28
adriantand MFA in horizon will do the same21:28
adriantyou front load the MFA, and then once you have a token, everything just works.21:28
mordredadriant: what happens when your token expires?21:29
*** e0ne has joined #openstack-sdks21:29
adriantI get a new one21:29
adrianthorizon does the same :P21:29
mordrednod21:29
adriantit logs me out21:29
mordredwell - yah - but horizon is different :)21:29
adriantbut using a command line utility is not different than using horizon really21:30
mordredit's possible that I have a warped view of cloud interactions as well21:30
adriantyou have a token based session, but in the case of the cli, it's one token per command21:30
adriantthat's a  lot of tokens21:31
mordredadriant: my typical usage locally is either an ansible playbook, or python loaded in a repl21:31
mordredso I guess I usually tend to behave more like an automated service than like an interactive user ...21:32
adriantyeah, and I use my silly interpreter thing, but off the cli21:32
mordredin any case - you make good points, so I will stop telling people they're wrong when they use token directly :)21:32
adriantbasically one of the things I'll end up doing as part of the MFA work in keystone is an eventual follow up to the openstackclient that adds support for catching and handling the auth-receipts.21:33
adrianteither into an interactive set of prompts to ask for MFA details21:33
adriantor at least just a good error output of what methods were missing21:34
adriantwith a potential extra command added to the openstack cli that authenticates you, and sets/unsets the right values needed for token auth for future commands21:34
EmilienMwould it be possible to have a release of osc once https://review.openstack.org/557479 is merged?21:34
adriantmordred: so MFA related interactions with the openstackcli consist of: "openstack authenticate" followed by an interactive MFA prompt or two, and then following commands work off token auth.21:36
adriantmaybe, we need to work out what makes sense once the auth-receipt stuff is implemented in keystone and keystoneauth21:36
*** cdent has quit IRC21:37
*** edmondsw has quit IRC21:43
-openstackstatus- NOTICE: the zuul web dashboard will experience a short downtime as we roll out some changes - no job execution should be affected21:52
*** harlowja has joined #openstack-sdks21:53
*** e0ne has quit IRC21:55
*** bobh has quit IRC22:17
dtroyerEmilienM: looks like it merged, I need to get some things going yet, will request the release tomorrow, it's queued up and ready to fire22:52
EmilienMwoot22:52
EmilienMdtroyer: thank you, i'll help a lot22:52
EmilienMit'll help a lot I mean22:52
dtroyermy apologies for this taking so long… my time for OSC is down to $FAR_TOO_LITTLE22:56
EmilienMno worries :)23:01
*** bobh has joined #openstack-sdks23:16
*** salv-orlando has quit IRC23:21
*** salv-orlando has joined #openstack-sdks23:22
*** olaph has joined #openstack-sdks23:23
*** olaph1 has quit IRC23:25
*** salv-orlando has quit IRC23:27
-openstackstatus- NOTICE: Zuul has been restarted to update to the latest code; existing changes have been re-enqueued, you may need to recheck changes uploaded in the past 10 minutes23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!