openstackgerrit | Ghanshyam Mann proposed openstack/keystoneauth master: DNM: testing gate on ubuntu focal https://review.opendev.org/743118 | 00:03 |
---|---|---|
*** ricolin has joined #openstack-sdks | 03:41 | |
*** dave-mccowan has quit IRC | 04:37 | |
*** tosky has joined #openstack-sdks | 06:42 | |
*** vishakha has joined #openstack-sdks | 07:11 | |
*** jpena|off is now known as jpena | 07:21 | |
*** holser has joined #openstack-sdks | 07:23 | |
*** holser_ has joined #openstack-sdks | 07:39 | |
*** holser__ has joined #openstack-sdks | 07:40 | |
*** holser has quit IRC | 07:41 | |
*** ricolin has quit IRC | 07:43 | |
*** holser has joined #openstack-sdks | 07:44 | |
*** holser_ has quit IRC | 07:44 | |
*** holser__ has quit IRC | 07:45 | |
*** nightmare_unreal has joined #openstack-sdks | 07:52 | |
*** ralonsoh has joined #openstack-sdks | 07:53 | |
*** jpich has joined #openstack-sdks | 07:55 | |
*** tosky has quit IRC | 08:03 | |
*** dtantsur|afk is now known as dtantsur | 08:05 | |
*** gtema has joined #openstack-sdks | 08:24 | |
*** gtema has quit IRC | 08:32 | |
*** rpittau has joined #openstack-sdks | 08:34 | |
*** holser_ has joined #openstack-sdks | 08:39 | |
*** holser has quit IRC | 08:40 | |
*** holser_ has quit IRC | 08:40 | |
*** holser has joined #openstack-sdks | 08:42 | |
*** holser_ has joined #openstack-sdks | 08:47 | |
*** holser has quit IRC | 08:50 | |
*** holser_ has quit IRC | 08:52 | |
*** holser has joined #openstack-sdks | 08:57 | |
*** holser has quit IRC | 09:01 | |
*** holser has joined #openstack-sdks | 09:02 | |
*** holser has quit IRC | 09:09 | |
*** holser has joined #openstack-sdks | 09:09 | |
*** tosky has joined #openstack-sdks | 09:33 | |
openstackgerrit | Dmitry Tantsur proposed openstack/ansible-collections-openstack master: Add non-voting bifrost jobs https://review.opendev.org/743176 | 09:37 |
openstackgerrit | Dmitry Tantsur proposed openstack/ansible-collections-openstack master: DNM try breaking ironic https://review.opendev.org/743177 | 09:40 |
*** also_stingrayza is now known as stingrayza | 09:56 | |
openstackgerrit | Dmitry Tantsur proposed openstack/openstacksdk master: DNM nothing to see here https://review.opendev.org/742870 | 10:05 |
*** tkajinam has quit IRC | 10:10 | |
dtantsur | hey folks, config.get_endpoint seems to misbehave in the SDK :( | 10:42 |
dtantsur | see the patch above, it fails on bifrost on the assertion error | 10:42 |
openstackgerrit | Dmitry Tantsur proposed openstack/openstacksdk master: DNM nothing to see here https://review.opendev.org/742870 | 10:45 |
openstackgerrit | Dmitry Tantsur proposed openstack/ansible-collections-openstack master: Add non-voting bifrost jobs https://review.opendev.org/743176 | 10:47 |
*** jpich has quit IRC | 10:48 | |
*** jpich has joined #openstack-sdks | 10:49 | |
*** iurygregory has quit IRC | 10:59 | |
*** iurygregory has joined #openstack-sdks | 11:01 | |
*** mgariepy has quit IRC | 11:02 | |
dtantsur | 'auth': {'username': '********', 'password': '********', 'endpoint': '********'} | 11:06 |
dtantsur | for god's sake, what on earth is replacing endpoint with stars? Oo | 11:06 |
openstackgerrit | Dmitry Tantsur proposed openstack/openstacksdk master: DNM nothing to see here https://review.opendev.org/742870 | 11:08 |
*** jpena is now known as jpena|lunch | 11:38 | |
*** mgariepy has joined #openstack-sdks | 12:14 | |
*** mordred has joined #openstack-sdks | 12:20 | |
dtantsur | mordred: hey! so, we use get_api_major_version in our service discovery, which does not work without endpoint_override, right?\ | 12:23 |
dtantsur | which sounds.. wrong to me | 12:24 |
*** enriquetaso has joined #openstack-sdks | 12:28 | |
mordred | that sounds wrong to me too | 12:29 |
mordred | oh - I think it's possible that we set endpoint_override as part of proxy creation | 12:30 |
mordred | like - iirc, we do a round of discovery to find the endpoint and then create an adapter with that endpoint set via endpoint_override | 12:30 |
mordred | maybe | 12:30 |
* mordred is still coffeeing | 12:30 | |
*** evrardjp has quit IRC | 12:32 | |
*** evrardjp has joined #openstack-sdks | 12:32 | |
*** evrardjp has quit IRC | 12:32 | |
*** evrardjp has joined #openstack-sdks | 12:33 | |
*** jpena|lunch is now known as jpena | 12:34 | |
dtantsur | well, I'm trying to use http_basic auth and get_api_major_version is broken in two palces | 12:42 |
dtantsur | first, get_endpoint_data always returns None if endpoint_override is None (ignoring self.endpoint) | 12:42 |
dtantsur | I have no clue how it works for no-auth now, it should not | 12:42 |
mordred | hrm | 12:43 |
dtantsur | seconds, this condition is hit for ironic https://opendev.org/openstack/keystoneauth/src/branch/master/keystoneauth1/discover.py#L1115-L1119 | 12:43 |
dtantsur | again, no clue why it works for no-auth, but here it ends up with EndpointData populated with None | 12:43 |
dtantsur | because we don't run any discovery whatsoever | 12:44 |
mordred | well - you need to run some discovery to get microversion info - even with an endpoint_override | 12:44 |
dtantsur | even to get major version info | 12:45 |
dtantsur | killing the code in the 2nd link with fire and fixing http_basic.py to implement get_endpoint_data allows me to progress | 12:45 |
mordred | yeah. because otherwise how would it know | 12:45 |
dtantsur | but I wonder what I'm missing since it works for no-auth.. | 12:45 |
mordred | it's a good question | 12:46 |
*** KeithMnemonic has joined #openstack-sdks | 12:46 | |
dtantsur | it HAS to hit all the same problems. I don't understand why it does not. | 12:47 |
* dtantsur has been fighting with this for nearly a week already | 12:47 | |
*** lbragstad has joined #openstack-sdks | 12:53 | |
mordred | dtantsur: I agree with you - I cannot see any difference between the two | 13:16 |
KeithMnemonic | is there anyone here he wolud be kind enough to do a few review on openstackclient that passed a while back but are stuck waiting on reviews? thank you https://review.opendev.org/#/q/project:openstack/python-openstackclient+owner:%22Keith+Berger+%253Ckeith.berger%2540suse.com%253E%22+status:open | 13:19 |
dtantsur | :( | 13:19 |
dtantsur | I'm close to giving up on this, honestly.. but that would be a big loss if we cannot use authentication in bifrost without keystone | 13:19 |
mordred | dtantsur: there's a couple of unit tests we have for noauth but not for httpbasic - let me see what adding similar ones for basic doe | 13:21 |
dtantsur | +++ | 13:21 |
* dtantsur -> short walk to reduce frustration | 13:21 | |
mordred | dtantsur: oh - when you get back ... | 13:22 |
mordred | no, nevermind | 13:22 |
*** dtantsur is now known as dtantsur|brb | 13:22 | |
*** stingrayza has quit IRC | 13:25 | |
*** stingrayza has joined #openstack-sdks | 13:26 | |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add unit test for httpbasicauth and discovery https://review.opendev.org/743227 | 13:26 |
mordred | dtantsur: when you get back, can you point me to an example anywhere of this not working? unit test for the auth plugin calls get_api_major_version just fine on an http basic auth plugin | 13:27 |
mordred | dtantsur: remote: https://review.opendev.org/743227 Add unit test for httpbasicauth and discovery | 13:27 |
*** stingrayza has quit IRC | 13:30 | |
*** stingrayza has joined #openstack-sdks | 13:33 | |
openstackgerrit | jayaditya gupta proposed openstack/python-openstackclient master: openstack CLI migration list support https://review.opendev.org/742210 | 13:35 |
nightmare_unreal | hello can someone review this patch and also leave a response to my comment regarding it. https://review.opendev.org/#/c/742210/ | 13:36 |
*** ricolin has joined #openstack-sdks | 14:31 | |
*** dtantsur|brb is now known as dtantsur | 15:06 | |
dtantsur | mordred: if you have a spare VM, I can show you how to reproduce the bifrost failure | 15:07 |
dtantsur | I don't have a simple reproducer (which is another reason why I'm so frustrated) | 15:07 |
dtantsur | mordred: may I take over https://review.opendev.org/#/c/743227 and add a fix things there that might be a partial fix for my situation? | 15:12 |
openstackgerrit | Dmitry Tantsur proposed openstack/keystoneauth master: Fix get_endpoint_data for non-keystone plugins https://review.opendev.org/743227 | 15:21 |
dtantsur | mordred: ^^^ | 15:21 |
mordred | dtantsur: neat | 15:26 |
mordred | dtantsur: oh - that looks good | 15:27 |
mordred | dtantsur: still no clue why it works for one and not the other :) | 15:27 |
mordred | dtantsur: I had a thought - is it possible that ironic is http-auth protecting the discovery endpoit and ksa is just not sending auth when it talks to it? | 15:28 |
mordred | so ksa is trying to do discovery on the endpoint and failing? | 15:28 |
mordred | (which would explain why noauth works) | 15:28 |
dtantsur | mordred: checked that already | 15:28 |
mordred | nod | 15:29 |
dtantsur | curl works correctly | 15:29 |
dtantsur | (we had this problem with ironic-inspector, but we seem to be past it ) | 15:29 |
*** mgariepy has quit IRC | 15:36 | |
*** jpich has quit IRC | 16:01 | |
dtantsur | AttributeError: 'EntryPoint' object has no attribute 'module_name' | 16:04 |
dtantsur | hasn't it been fixed? I see it in keystoneauth on `tox -edocs` | 16:04 |
mordred | I thougth so? | 16:06 |
* mordred trying locally | 16:06 | |
mordred | I thought it was a version something something | 16:07 |
mordred | dtantsur: I agree - I see that same issue | 16:07 |
dtantsur | yep :( | 16:08 |
mordred | dtantsur: maybe we fixed it in sdk but not ksa | 16:08 |
mordred | dtantsur: fix coming | 16:12 |
dtantsur | nice! if you also guess why this bloody discovery does not work, you'll be my saviour today :) | 16:12 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Fix docs builds for modern stevedors https://review.opendev.org/743274 | 16:13 |
mordred | dtantsur: ^^ that | 16:13 |
mordred | dtantsur: I like being saviors :) | 16:13 |
*** ricolin has quit IRC | 16:16 | |
*** mgariepy has joined #openstack-sdks | 16:17 | |
dtantsur | but I think that get_endpoint_data patch is a part of the puzzle | 16:17 |
dtantsur | mordred: mmm, look. the adapter calls get_endpoint_data with service_type:baremetal, version:1 and so on, but it all goes to /dev/null | 16:21 |
dtantsur | because **kwargs are ignored in BaseAuthPlugin.get_endpoint_data | 16:21 |
dtantsur | is it intended? | 16:21 |
dtantsur | okay, I guess ignoring service_type is fine, but ignoring version seems to inhibit the discovery? | 16:22 |
mordred | not to my knowlege - probably just oversight. does passing the **kwargs on help? | 16:22 |
mordred | yeah | 16:22 |
mordred | (still confused why noauth works) | 16:22 |
dtantsur | which brings me back to the question why we inhibit discovery when a version is not requested.. | 16:22 |
dtantsur | yep. me too | 16:22 |
dtantsur | quite a few tests break if I remove the no_version handling from discover.py | 16:26 |
dtantsur | maybe I should go the other way and set max_version=min_version=kwargs.get('version')? | 16:26 |
dtantsur | wait, it's much easier! | 16:27 |
mordred | dtantsur: I think we inhibit discovery when a version isn't provided because we just assume that whatever is the default in the catalog is fine | 16:28 |
mordred | oh? | 16:28 |
mordred | cool! | 16:28 |
dtantsur | mordred: do you have a clue why inside get_api_major_version we call get_endpoint_data with discover_version=False? | 16:28 |
dtantsur | it seems like a version is what we need to discover | 16:28 |
dtantsur | if I change that to true, things start to work for me | 16:28 |
mordred | hrm. I think it's because we're trying to avoid a full discovery call if we don't need one | 16:29 |
mordred | but honestly - I kind of feel like perhaps that's effort we should stop caring about | 16:29 |
dtantsur | yeah, but then we short-circuit discovery if no versions are requested | 16:29 |
dtantsur | resulting in api_version being None | 16:30 |
* dtantsur still has no clue why the same thing work for no-auth | 16:30 | |
mordred | does is break things to set it to true? :) | 16:30 |
dtantsur | lemme try! | 16:30 |
mordred | is there any chance that noauth vs httpauth we're using versioned vs unversioned endpoints as input? | 16:30 |
mordred | like - because we'll infer major api version from the /v1 in the endpoint if its there | 16:31 |
mordred | so maybe we've just accidentally worked with noauth based on input data? | 16:31 |
dtantsur | mordred: in case of bifrost the endpoints should be the same (unversioned) | 16:31 |
mordred | nod | 16:31 |
mordred | so yeah - no clue here | 16:31 |
dtantsur | if I change it, the no-auth/http_basic tests fail with: No mock address: GET http://keystone.example.com:5000/v3 | 16:32 |
dtantsur | which is pretty expected | 16:32 |
dtantsur | I guess what we need is "please do discover the major version but don't discovery microversions" | 16:32 |
mordred | or just add in mocks for mv discovery to those tests | 16:33 |
dtantsur | yeah, I'm still trying to avoid discovering microversions.. but it seems non-trivial with the code we have | 16:35 |
dtantsur | mordred: and this is why it works for keystone ;) https://opendev.org/openstack/keystoneauth/src/branch/master/keystoneauth1/identity/base.py#L501-L506 | 16:37 |
mordred | dtantsur: hahahahah | 16:38 |
dtantsur | okay, I'll update the same patch and hope I don't break anything else :D | 16:38 |
* dtantsur will probably throw a testing patch on bifrost to make sure it works | 16:39 | |
mordred | ++ | 16:39 |
dtantsur | and I think I see why the unit tests don't catch: we're using a versioned endpoint there | 16:41 |
*** jpena is now known as jpena|off | 16:41 | |
dtantsur | and if I change it, everything breaks | 16:48 |
dtantsur | mordred: actually, discover_versions is also responsible for populating EndpointData.url | 16:58 |
openstackgerrit | Dmitry Tantsur proposed openstack/keystoneauth master: [WIP] Correct endpoint discovery for non-keystone plugins https://review.opendev.org/743282 | 16:59 |
dtantsur | this is a rabbit hole ^^^ | 16:59 |
dtantsur | I'll continue tomorrow | 16:59 |
*** dtantsur is now known as dtantsur|afk | 16:59 | |
*** nightmare_unreal has quit IRC | 17:20 | |
*** ralonsoh has quit IRC | 17:23 | |
*** ralonsoh has joined #openstack-sdks | 17:23 | |
*** ralonsoh has quit IRC | 18:08 | |
*** evrardjp has quit IRC | 18:21 | |
*** evrardjp has joined #openstack-sdks | 18:24 | |
*** tosky has quit IRC | 18:33 | |
openstackgerrit | Merged openstack/ansible-collections-openstack master: Add non-voting bifrost jobs https://review.opendev.org/743176 | 18:34 |
*** vishakha has quit IRC | 18:50 | |
*** enriquetaso has quit IRC | 19:25 | |
*** slaweq has quit IRC | 20:36 | |
*** slaweq has joined #openstack-sdks | 20:47 | |
*** slaweq has quit IRC | 20:52 | |
*** manasareddybethi has joined #openstack-sdks | 21:21 | |
manasareddybethi | Looking for +2 reviews please: https://review.opendev.org/#/c/741320/ Delete the testcase that is not needed anymore | 21:23 |
*** tosky has joined #openstack-sdks | 21:25 | |
openstackgerrit | melanie witt proposed openstack/python-openstackclient master: WIP Show words indicating booted from volume for server image https://review.opendev.org/743429 | 22:14 |
openstackgerrit | Merged openstack/keystoneauth master: Fix docs builds for modern stevedors https://review.opendev.org/743274 | 22:20 |
*** enriquetaso has joined #openstack-sdks | 22:45 | |
*** senrique_ has joined #openstack-sdks | 22:48 | |
*** enriquetaso has quit IRC | 22:50 | |
*** tkajinam has joined #openstack-sdks | 22:52 | |
*** dtroyer has quit IRC | 23:03 | |
openstackgerrit | Merged openstack/python-openstackclient master: Delete the testcases that arent needed anymore https://review.opendev.org/741320 | 23:11 |
*** tosky has quit IRC | 23:25 | |
*** senrique_ has quit IRC | 23:28 | |
*** holser has quit IRC | 23:30 | |
*** holser has joined #openstack-sdks | 23:34 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!