*** tkajinam is now known as Guest3966 | 00:09 | |
*** tkajinam is now known as Guest3972 | 01:47 | |
opendevreview | Daniel Wilson proposed openstack/python-openstackclient master: Use the compute SDK in server list https://review.opendev.org/c/openstack/python-openstackclient/+/861546 | 01:52 |
---|---|---|
opendevreview | Daniel Wilson proposed openstack/openstacksdk master: Accept queries when listing migrations https://review.opendev.org/c/openstack/openstacksdk/+/862664 | 02:07 |
opendevreview | Daniel Wilson proposed openstack/python-openstackclient master: Use the compute SDK in usage commands https://review.opendev.org/c/openstack/python-openstackclient/+/861801 | 02:53 |
*** tkajinam is now known as Guest3986 | 05:43 | |
opendevreview | Rafael Castillo proposed openstack/ansible-collections-openstack master: Updates volume for 2.0.0 https://review.opendev.org/c/openstack/ansible-collections-openstack/+/853749 | 05:50 |
*** tkajinam is now known as Guest3988 | 06:53 | |
opendevreview | Merged openstack/ansible-collections-openstack master: Updates volume for 2.0.0 https://review.opendev.org/c/openstack/ansible-collections-openstack/+/853749 | 07:51 |
opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Change subnets_info module to work with new SDK https://review.opendev.org/c/openstack/ansible-collections-openstack/+/857041 | 08:03 |
opendevreview | Stephen Finucane proposed openstack/python-openstackclient master: Added "openstack image metadefs namespace list" command https://review.opendev.org/c/openstack/python-openstackclient/+/854557 | 09:26 |
opendevreview | Merged openstack/openstacksdk master: Improve swift headers handling https://review.opendev.org/c/openstack/openstacksdk/+/860007 | 09:56 |
opendevreview | Merged openstack/python-openstackclient master: volume: Volume names are optional https://review.opendev.org/c/openstack/python-openstackclient/+/857670 | 10:11 |
opendevreview | Merged openstack/ansible-collections-openstack master: Change subnets_info module to work with new SDK https://review.opendev.org/c/openstack/ansible-collections-openstack/+/857041 | 10:27 |
opendevreview | Stephen Finucane proposed openstack/python-openstackclient master: compute: Add '--no-network', '--auto-network' flags https://review.opendev.org/c/openstack/python-openstackclient/+/862680 | 10:32 |
opendevreview | Merged openstack/python-openstackclient master: Added "openstack image metadefs namespace list" command https://review.opendev.org/c/openstack/python-openstackclient/+/854557 | 11:31 |
opendevreview | Stephen Finucane proposed openstack/openstacksdk master: compute: Add functional tests for volume attachments https://review.opendev.org/c/openstack/openstacksdk/+/822314 | 12:10 |
opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Refactored ci script with shellcheck suggestions and install collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/861955 | 13:05 |
opendevreview | Jiri Podivin proposed openstack/cliff master: Removing helper functions providing Python < 3.3 compatibility https://review.opendev.org/c/openstack/cliff/+/862689 | 13:14 |
opendevreview | Jiri Podivin proposed openstack/cliff master: Clarification of the algorithm used https://review.opendev.org/c/openstack/cliff/+/862690 | 13:15 |
frickler | not sure if everyone is subscribed, discussion about the storyboard issue is now happening here https://lists.opendev.org/pipermail/service-discuss/2022-October/000370.html | 13:45 |
fungi | it looks like a lot of folks who were in here via the matrix-oftc bridge dropped around 08:05 utc and haven't rejoined yet | 13:47 |
frickler | ah, that explains why gtema dropped from the publiccloud meeting | 13:48 |
gtema | hmm, I was even posting during the meeting | 13:49 |
frickler | I only can recommend not to use that bridge, some colleagues of mine do and see regular disconnects | 13:49 |
fungi | gtema: now we see you | 13:49 |
fungi | looks like it must have fixed itself and the bridge auto-joins you again as soon as you say something new | 13:50 |
gtema | cool, I was permanently here and seeing everything posted here | 13:50 |
frickler | gtema: "full house today" at 08:02 was the last thing we read from you | 13:50 |
opendevreview | Artom Lifshitz proposed openstack/python-openstackclient master: Improve `server dump create` helptext https://review.opendev.org/c/openstack/python-openstackclient/+/862696 | 13:50 |
gtema | funny, but this half-sync is really confusing | 13:51 |
fungi | gtema: while you're here, just to get some additional clarification on the rackspace api_key extension... are you saying you were trying with the configuration documented here and it wasn't able to authenticate arbitrary api calls with the resulting session? https://docs.openstack.org/openstacksdk/latest/user/config/vendor-support.html#rackspace | 13:51 |
gtema | this is also not the first time - jm1 was already telling similar to me - being in element he could see everything what I post, but it was never reaching IRC | 13:51 |
gtema | fungi - interesting. I was not trying auth_type cause I was sure it is something only present in the rax hacks | 13:52 |
fungi | yeah, the matrix bridges can end up in strange half-connected states where you see things inbound from irc but nothing you say gets back to irc (but other users of the bridge still see what you say because that doesn't have to round-trip through itc | 13:53 |
fungi | er, round-trip through irc | 13:53 |
gtema | fungi - rackspace_apikey is not implemented part of the keystoneauth lib | 13:54 |
fungi | gtema: as noted in the openstacksdk docs, to use auth_type: rackspace_apikey you do need to install the rackspaceauth plugin for ksa | 13:54 |
gtema | https://github.com/rackerlabs/rackspace-auth-openstack | 13:54 |
gtema | so honestly I have no clue how that supposed to work without this lib being installed | 13:54 |
* fungi is just parroting the sdk docs tell rackspace users to do | 13:55 | |
gtema | and it has entry_points - trying now to install it | 13:55 |
fungi | gtema: you're installing https://pypi.org/project/rackspaceauth right? | 13:55 |
gtema | ha, https://pypi.org/search/?q=rackspaceauth - try to guess which one to install | 13:57 |
fungi | just making sure, since it doesn't look like the package on pypi is the same as the repo you linked in github | 13:57 |
gtema | exactly, with that one I passed one step further | 13:57 |
fungi | specifically, the package the openstacksdk docs say to pip install | 13:58 |
gtema | right - I never seen this part, so was not sure | 13:58 |
gtema | but now I am through the auth and get: Policy doesn't allow compute:get_all to be performed. (HTTP 403) | 13:59 |
gtema | pretty much nothing is allowed, either api key didn't receive right permissions or I use wrong project | 14:00 |
fungi | oh, is there still some question as to whether the tenant/project id is correct? | 14:01 |
gtema | at least this tenant/project is reported as the only one in the auth response | 14:01 |
gtema | so it should be right | 14:01 |
opendevreview | Denys Mishchenko proposed openstack/ansible-collections-openstack master: Existing images update name, visibility etc https://review.opendev.org/c/openstack/ansible-collections-openstack/+/862565 | 14:02 |
fungi | what would compute:get_all normally return? is that the list of server instances? | 14:02 |
gtema | yes | 14:02 |
fungi | so essentially `openstack server list` | 14:02 |
gtema | correct | 14:02 |
fungi | thanks | 14:03 |
opendevreview | Jiri Podivin proposed openstack/cliff master: Removing helper functions providing Python < 3.3 compatibility https://review.opendev.org/c/openstack/cliff/+/862689 | 14:03 |
gtema | thank you fungi | 14:03 |
gtema | I learned something new about sdk today | 14:03 |
fungi | i'll see what more we can get from my contact there, i just wanted to make sure i had a more complete picture of what/where the problem is before reaching out | 14:04 |
gtema | sure. This rackspaceauth is a thing that we would also need to install into sdk jobs, but it should be not an issue | 14:05 |
fungi | well, since it's been an advertised option (going back at least 5 years in the published sdk docs), double-checking that it can be made to work would be good anyway | 14:06 |
fungi | and if it can't, then a docs update is in order | 14:06 |
gtema | at least now I eventually see where clarkb's problem with cinder may lay - in this type of auth project_id is not being set and we try to concat None | 14:07 |
fungi | but i'll see if he's willing to give us a password for the account too, so that both paths can be tried | 14:07 |
gtema | awesome, thanks | 14:07 |
fungi | gtema: fwiw, with opendev's tenants we don't use api_key, we set password and project_id in our clouds.yaml files | 14:09 |
gtema | yes, I have seen that, but clark mentioned he was trying in venv so I assumed he may be making few tweaks | 14:09 |
fungi | nah, the venvs we've been talking about still rely on the same /etc/openstack/clouds.yaml file we install on the server where we're running the client | 14:10 |
fungi | though we do end up needing to use an old version of the sdk and we pass --os-volume-api=1 on the client command line in order to make it work | 14:11 |
gtema | ok, then if "cinderclient.exceptions.UnsupportedVersion: Invalid client version '2.0'. Major part should be '3'" is the broken thing it is due to cinderclient having dropped support | 14:11 |
gtema | same is for v1 - it was dropped in cinderclient | 14:12 |
fungi | i have python-cinderclient==4.0.1 in both a working and broken venv | 14:12 |
gtema | we can try to implement here raw API requests (or hope SDK v1 is still working) | 14:13 |
gtema | but is that the exception you get? | 14:13 |
fungi | the problem i'm seeing with the non-working (newer sdk) venv is a "Not Found (HTTP 404)" response from the cloud | 14:13 |
opendevreview | Stephen Finucane proposed openstack/python-openstackclient master: compute: Add '--no-network', '--auto-network' flags https://review.opendev.org/c/openstack/python-openstackclient/+/862680 | 14:13 |
gtema | for something like volume list? | 14:14 |
fungi | yes | 14:14 |
fungi | if i downgrade openstacksdk from 0.48.0 to 0.41.0 then volume list works with the same command-line options and configuration | 14:15 |
fungi | i haven't finished bisecting between those yet | 14:15 |
gtema | wow, but that is very very old | 14:15 |
fungi | yes, we had to go back that far to make it work | 14:15 |
gtema | anyway, in order to reproduce I need to pass through "Policy doesn't allow volume:get_all to be performed" which I get now | 14:15 |
fungi | rather, we started pinning when it broke and haven't been able to upgrade | 14:15 |
fungi | and yes, trying to use cinderclient as a workaround is problematic in the way you noted | 14:16 |
fungi | (newer cinderclient dropped old api versions) | 14:16 |
gtema | that sucks quite heavily - supporting such old things is terribly complex | 14:17 |
fungi | thankfully most of the problem impact is to volume management, which we only do manually. it hasn't adversely impacted stuff like nodepool since it doesn't need to care about the volume api | 14:19 |
fungi | so we've been able to get by with custom venvs containing really old libs for the times when we need to add/remove/replace volumes for our persistent control plane servers | 14:20 |
fungi | it's not ideal though, of course | 14:20 |
gtema | which osc-lib and osc ver are installed? I can't get matching combo | 14:20 |
fungi | i'm going to make fresh venvs first just to make sure i have a consistent reproducer | 14:21 |
gtema | I mean the one which is working | 14:22 |
gtema | with older versions, cause sdk==0.41.0 is not working with "any" OSC | 14:22 |
gtema | and older OSC falls on osc-lib | 14:22 |
gtema | and finally falling on "module 'collections' has no attribute 'MutableMapping'" | 14:23 |
fungi | yeah, that's why i'm trying to reproduce with clean venvs first, because i'd like to know how to create an equivalent of the working reference venv i have from scratch | 14:25 |
gtema | ok, thks | 14:25 |
fungi | also note that the venvs in question are built for python 3.6 because they're on an ubuntu 18.04 lts (bionic) server | 14:26 |
fungi | looks like i need to force downgrade cryptography because of that | 14:26 |
fungi | python3.6 -m venv foo | 14:34 |
fungi | foo/bin/pip install -U pip setuptools wheel | 14:34 |
fungi | foo/bin/pip install openstackclient python-openstackclient==3.17.0 openstacksdk==0.41.0 python-cinderclient==4.0.1 | 14:34 |
fungi | sudo foo/bin/openstack --os-cloud=openstackci-rax --os-region-name=DFW --os-volume-api=1 volume list | 14:34 |
fungi | gtema: that ^ reproduces a working one for me | 14:34 |
gtema | ugh, now I need to find somewhere py36 for me ;-) | 14:35 |
gtema | thanks | 14:35 |
fungi | i'm winding forward with openstacksdk versions to find the one where the first breakage occurs | 14:36 |
fungi | huh, so i was able to wind forward to openstacksdk==0.48.0 and it continues working | 14:37 |
fungi | also it may be reproducible on newer python interpreters, i haven't tried yet | 14:37 |
gtema | okay, in any way now I nearly always fall on policies | 14:38 |
gtema | I mean either some other py exception of policy | 14:39 |
fungi | i'm able to make i work with 0.102.0 in fact | 14:40 |
gtema | lol - so something different in playing a role | 14:40 |
gtema | welcome in the dependency hell | 14:41 |
fungi | yes, i'm trying to play with other dependency variables now | 14:42 |
gtema | what is the issue with v2 itself? | 14:43 |
gtema | maybe fixing this will cost less then making v1 work | 14:43 |
fungi | not completely implemented in rackspace | 14:43 |
gtema | ah, ok | 14:43 |
fungi | at least that's my understanding, but i can get a more specific error | 14:43 |
fungi | what was the cinderclient version where v2 api support was dropped? | 14:45 |
gtema | roughly a year ago | 14:45 |
gtema | https://opendev.org/openstack/python-cinderclient/commit/6ebee33bf219d42fcd0d4bf2a8c0819bddb24f3c | 14:46 |
fungi | yeah, if i pin python-cinderclient<8 i only get the deprecation warning for v2 | 14:47 |
fungi | adding --debug, it looks like it's trying to get /v2/610275/610275/volum | 14:48 |
fungi | er, it's trying to get /v2/$id/$id/volume/detail | 14:48 |
fungi | from the block storage api endpoint | 14:48 |
gtema | ok, seems like a bug | 14:48 |
fungi | and that returns a 404 not found | 14:48 |
fungi | server list uses /v2/$id/servers/detail so i guess the doubled project id in the url is a problem | 14:50 |
gtema | yeah, on the other side v2 cinder is not present in the "service_catalog" - explicitly in the quotes since this is a thing on its own | 14:51 |
gtema | and using normal OSC it fails to find volumev2 endpoint for region | 14:51 |
fungi | right, i got that as well once i pinned back a bit | 14:54 |
frickler | fungi: checking on bridge we set block_storage_endpoint_override to .../v2/610275. maybe drop the last part of that | 14:56 |
fungi | ooh, good eye | 14:56 |
opendevreview | Dmitriy Rabotyagov proposed openstack/python-openstackclient master: Implement server and host evacuate commands https://review.opendev.org/c/openstack/python-openstackclient/+/828708 | 14:56 |
frickler | I haven't found a cli option to override that override | 14:57 |
gtema | in cli no way | 14:58 |
gtema | the problem is that this override is only influencing SDK, but not cinderclient itself | 14:58 |
fungi | frickler: good call. with that edit i'm able to get it work with latest sdk and cli installable on python 3.6, as long as i pin python-cinderclient<5 | 14:59 |
fungi | i'll push up a change to our clouds.yaml since that simplifies what we need to do to make the cli work | 14:59 |
gtema | that all sounds like a very dirty hack ;-) | 14:59 |
frickler | with the same cap it also works on the new bridge with py3.10 | 15:03 |
opendevreview | HaeIYoon proposed openstack/openstacksdk master: Add image metadef object operations https://review.opendev.org/c/openstack/openstacksdk/+/858350 | 15:04 |
frickler | hack for maybe-a-non-openstack cloud, but progress anyway | 15:04 |
gtema | this is exactly what I always want to say - this doesn't feel like openstack cloud | 15:04 |
frickler | though admittedly there may be an old private cloud running icehouse or similar that might alse need the capped cinderclient | 15:05 |
frickler | *also | 15:06 |
gtema | sooner or later we will drop cinderclient from osc, but we can't really test all of those things | 15:06 |
frickler | so possibly still worth fixing that dependency | 15:06 |
frickler | and I agree about testing and all that | 15:06 |
frickler | just dreaming about an ideal world, that still should be possible to work | 15:07 |
fungi | https://review.opendev.org/c/opendev/system-config/+/862706 Correct block_storage_endpoint_override for rax | 15:07 |
gtema | the bigger question for me is that such clouds most likely run on py2, how should we be able to make this running if admin want to use newer OSC | 15:07 |
frickler | fungi: I think that comment about v1 is wrong. this is about the v2 api and at least "volume list" works fine for me with v2 | 15:09 |
frickler | gtema: for the use case I'm thinking about, the client would be running a modern system, just talking to the API of an old cloud | 15:10 |
gtema | I know, it just so frustrating and funny at the same time | 15:11 |
fungi | frickler: oh, you're right! | 15:11 |
fungi | amending | 15:11 |
frickler | also capping cinderclient\<8 seems to be enough | 15:11 |
fungi | yep, i was about to test that | 15:11 |
fungi | okay, amended | 15:14 |
fungi | also confirmed that <8 works if i drop the v1 override from the command | 15:14 |
fungi | remains to be seen if i'll be able to do things like server attach/detach now, but at least volume list is working | 15:15 |
fungi | i'll play around with it a bit more | 15:15 |
opendevreview | Stephen Finucane proposed openstack/python-openstackclient master: compute: Fix '--network none/auto' handling https://review.opendev.org/c/openstack/python-openstackclient/+/862730 | 15:34 |
opendevreview | Stephen Finucane proposed openstack/python-openstackclient master: compute: Add missing microversion check for networks https://review.opendev.org/c/openstack/python-openstackclient/+/862731 | 15:35 |
opendevreview | Merged openstack/ansible-collections-openstack master: Refactored ci script with shellcheck suggestions and install collections https://review.opendev.org/c/openstack/ansible-collections-openstack/+/861955 | 17:38 |
opendevreview | Denys Mishchenko proposed openstack/ansible-collections-openstack master: Existing images update name, visibility etc https://review.opendev.org/c/openstack/ansible-collections-openstack/+/862565 | 17:49 |
opendevreview | Jakob Meng proposed openstack/ansible-collections-openstack master: Always remove temporary files in volume's integration test https://review.opendev.org/c/openstack/ansible-collections-openstack/+/862741 | 18:20 |
opendevreview | Denys Mishchenko proposed openstack/ansible-collections-openstack master: Existing images update name, visibility etc https://review.opendev.org/c/openstack/ansible-collections-openstack/+/862565 | 20:06 |
opendevreview | Denys Mishchenko proposed openstack/ansible-collections-openstack master: Existing images update name, visibility etc https://review.opendev.org/c/openstack/ansible-collections-openstack/+/862565 | 20:22 |
opendevreview | Denys Mishchenko proposed openstack/ansible-collections-openstack master: Existing images update name, visibility etc https://review.opendev.org/c/openstack/ansible-collections-openstack/+/862565 | 21:04 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!