| joelm21 | Thanks M0weng[m] and stephenfin, appreciate the responses. POC of the method I'm using for the client, if you are interested. | 01:02 |
|---|---|---|
| joelm21 | https://github.com/micron21/totp-capable-openstack-client-for-mcloud/ | 01:02 |
| joelm21 | I do note that keystone supports an "Expires at", according to the source. | 01:11 |
| joelm21 | https://docs.openstack.org/keystone/latest/_modules/keystone/token/provider.html#Manager.issue_token | 01:11 |
| joelm21 | I just can't see anything in the openstackclient source that might parse that parameter, i.e. openstack token issue --expires-at YYYY-MM-DD:HH:MM:SS | 01:13 |
| joelm21 | (that would be because it doesn't) | 01:20 |
| joelm21 | usage: openstack token issue [-h] [-f {json,shell,table,value,yaml}] [-c COLUMN] [--noindent] [--prefix PREFIX] [--max-width <integer>] [--fit-width] [--print-empty]openstack token issue: error: unrecognized arguments: --expires-at 2026-01-08:00:00:00 | 01:20 |
| joelm21 | as far as I can tell, expires_at is supported by the model: https://opendev.org/openstack/keystone/src/commit/a903b505429410435aab4c96db6e89413929fcf3/keystone/token/provider.py#L272 | 01:22 |
| joelm21 | it looks like there is no supported mechanism to specify an expiry time for a token generated by the openstack client; https://github.com/openstack/python-openstackclient/blob/0a937332932b2a0263b12d307026fee43d125418/openstackclient/identity/v3/token.py#L196 looks like it generates one that is used, and cannot be modified. | 01:29 |
| -opendevstatus- NOTICE: Zuul will be shutdown for maintenance work. See https://lists.opendev.org/archives/list/service-announce@lists.opendev.org/thread/WBBLBI6ZS6FA6Q5ZMH4C2MWPL3WG3H24/ for more details. | 23:43 | |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!