| *** arch-nemesis has quit IRC | 00:05 | |
| *** nadeem has quit IRC | 00:06 | |
| *** tqtran has quit IRC | 00:07 | |
| *** chsc has quit IRC | 00:22 | |
| openstackgerrit | Merged openstack/swift: Revises 'url' to 'URL' and 'json' to 'JSON' https://review.openstack.org/379390 | 00:23 |
|---|---|---|
| *** Vinsh has joined #openstack-swift | 00:33 | |
| openstackgerrit | Merged openstack/swift: Add functional test for access control (container ACL) with Keystone https://review.openstack.org/213608 | 00:43 |
| openstackgerrit | Merged openstack/swift: Add functional test for access control (RBAC INFO) with Keystone https://review.openstack.org/212810 | 00:43 |
| *** zul has joined #openstack-swift | 00:55 | |
| *** nadeem has joined #openstack-swift | 00:56 | |
| *** m_kazuhiro_ has joined #openstack-swift | 01:01 | |
| m_kazuhiro_ | good morning | 01:02 |
| *** zul has quit IRC | 01:08 | |
| *** klrmn has quit IRC | 01:09 | |
| *** takashi has joined #openstack-swift | 01:11 | |
| *** zul has joined #openstack-swift | 01:12 | |
| *** m_kazuhiro_ has quit IRC | 01:23 | |
| *** m_kazuhiro has joined #openstack-swift | 01:24 | |
| *** nadeem has quit IRC | 02:00 | |
| mattoliverau | m_kazuhiro: morning (sorry for late response. Been in a meeting). | 02:11 |
| m_kazuhiro | mattoliverau: morning! | 02:23 |
| *** geaaru has quit IRC | 02:29 | |
| *** natarej_ has quit IRC | 02:30 | |
| *** natarej_ has joined #openstack-swift | 02:31 | |
| *** dmorita_ has quit IRC | 02:33 | |
| *** dmorita has joined #openstack-swift | 02:37 | |
| *** dmorita has quit IRC | 02:37 | |
| *** dmorita has joined #openstack-swift | 02:39 | |
| *** tongli has quit IRC | 02:43 | |
| *** Trixboxer has quit IRC | 02:43 | |
| *** dmorita has quit IRC | 02:44 | |
| *** dmorita has joined #openstack-swift | 03:16 | |
| charz | m_kazuhiro: mattoliverau morning | 03:17 |
| mattoliverau | charz: o/ | 03:18 |
| *** dmorita has quit IRC | 03:22 | |
| m_kazuhiro | charz: morning! | 03:29 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/swift: Updated from global requirements https://review.openstack.org/88736 | 03:33 |
| *** Trixboxer has joined #openstack-swift | 03:34 | |
| *** links has joined #openstack-swift | 03:47 | |
| charz | mattoliverau: Do you know the `flags meta` in output of ring is stand for? | 03:51 |
| mattoliverau | charz: they are 2 columns. flags will mark things that are to be removed on next rebalance (Puts a DEL) and meta is metadata you can attach to a node. | 03:57 |
| mattoliverau | maybe there are more flags but I'd need to look at the code.. that what I remember seeing in there tho | 03:57 |
| charz | mattoliverau: thx for explain that. | 03:58 |
| mattoliverau | nps | 03:59 |
| *** dmorita has joined #openstack-swift | 04:09 | |
| *** dmorita has quit IRC | 04:12 | |
| *** dmorita has joined #openstack-swift | 04:12 | |
| *** m_kazuhiro has quit IRC | 04:17 | |
| *** m_kazuhiro has joined #openstack-swift | 04:18 | |
| *** dmorita has quit IRC | 04:29 | |
| *** nadeem has joined #openstack-swift | 04:33 | |
| *** psachin has joined #openstack-swift | 04:50 | |
| *** dmorita has joined #openstack-swift | 04:53 | |
| *** bjolo_ has joined #openstack-swift | 05:06 | |
| *** thebloggu has quit IRC | 05:10 | |
| *** zaitcev has quit IRC | 05:24 | |
| *** SkyRocknRoll has joined #openstack-swift | 05:28 | |
| charz | mattoliverau: it seems like community don't use swift-spec to purpose new features, is it correct? | 05:57 |
| charz | mattoliverau: if so, where I can find the discussion or status of new feature? | 05:59 |
| mattoliverau | charz: that's correct, add an item to the Swift Ideas page, and link to your idea/spec which can be in any format. I used shared googledocs (see container sharding) but you can use anything, a blog, a site, an etherpad. I suspect we'll talk about specs (replacement or how ideas is going) in barcelona | 05:59 |
| *** dmorita_ has joined #openstack-swift | 06:00 | |
| *** dmorita has quit IRC | 06:00 | |
| charz | mattoliverau: cool! It more easy to purpose an idea from end user or someone isn't very familiar with git/review things. | 06:02 |
| charz | mattoliverau: good to know that, thx | 06:02 |
| *** dmorita_ has quit IRC | 06:05 | |
| *** dmorita has joined #openstack-swift | 06:05 | |
| mattoliverau | charz: nps | 06:07 |
| *** rcernin has joined #openstack-swift | 06:15 | |
| *** nadeem has quit IRC | 06:25 | |
| *** SkyRocknRoll has quit IRC | 06:29 | |
| *** SkyRocknRoll has joined #openstack-swift | 06:45 | |
| *** admin6_ has joined #openstack-swift | 06:52 | |
| *** dmorita_ has joined #openstack-swift | 07:00 | |
| *** dmorita has quit IRC | 07:03 | |
| *** dmorita_ has quit IRC | 07:09 | |
| *** amoralej|off is now known as amoralej | 07:10 | |
| *** tesseract- has joined #openstack-swift | 07:11 | |
| *** psachin has quit IRC | 07:12 | |
| *** rledisez has joined #openstack-swift | 07:17 | |
| *** psachin has joined #openstack-swift | 07:17 | |
| *** pcaruana has joined #openstack-swift | 07:26 | |
| *** acoles_ is now known as acoles | 07:36 | |
| acoles | good morning | 07:39 |
| *** bjolo_ has quit IRC | 07:42 | |
| *** geaaru has joined #openstack-swift | 07:44 | |
| *** m_kazuhiro has quit IRC | 07:48 | |
| mattoliverau | acoles: morning | 07:49 |
| *** mvk has quit IRC | 07:51 | |
| acoles | mathiasb: thanks for replies on patch 364878. At summit we could discuss best practice for how root secrets are stored in Barbican, password rotation etc, and then document recommended practice. | 07:53 |
| patchbot | https://review.openstack.org/#/c/364878/ - swift - WIP: Storing encryption root secret in Barbican | 07:53 |
| acoles | mattoliverau: howdy | 07:53 |
| charz | acoles: morning | 07:56 |
| acoles | mattoliverau: charz I think DEL is the only flag, someone patched the usage recently to document the flags | 07:58 |
| charz | acoles: yeah, I saw the comment in https://github.com/openstack/swift/blob/master/swift/cli/ringbuilder.py#L465-L467 | 07:59 |
| acoles | patch 350625 | 08:00 |
| patchbot | https://review.openstack.org/#/c/350625/ - swift - Add regions in ring-builder.py (MERGED) | 08:00 |
| acoles | charz: right, you found it :) | 08:00 |
| *** jordanP has joined #openstack-swift | 08:00 | |
| *** hseipp has joined #openstack-swift | 08:01 | |
| openstackgerrit | Kota Tsuyuzaki proposed openstack/swift: Support Read/Write Affinity Per Policy https://review.openstack.org/382766 | 08:13 |
| kota_ | acoles: morning | 08:13 |
| kota_ | tdasilva: yey, that one is for a draft for affnity per policy | 08:14 |
| *** qwertyco_ has joined #openstack-swift | 08:15 | |
| kota_ | it conflicts with my global EC work thought :'( | 08:16 |
| kota_ | probably, it's because I touched test/unit/proxy/test_server.py | 08:16 |
| kota_ | :( | 08:16 |
| acoles | kota_: I told you, you gotta stop writing tests! :D | 08:18 |
| acoles | JK | 08:18 |
| kota_ | acoles: I cannot write test to me :'( | 08:19 |
| kota_ | acoles: I am used to forget my concept on the patch unless I didn't make tests :/ | 08:19 |
| acoles | kota_: that's true, tests are documentation | 08:20 |
| *** qwertyco_ has quit IRC | 08:21 | |
| *** qwertyco has joined #openstack-swift | 08:21 | |
| *** mvk has joined #openstack-swift | 08:23 | |
| *** qwertyco is now known as qwertyco_ | 08:24 | |
| *** qwertyco_ has quit IRC | 08:26 | |
| *** qwertyco has joined #openstack-swift | 08:26 | |
| cnf | morning | 08:32 |
| kota_ | cnf: morning | 08:32 |
| cnf | so, more openstack today :P | 08:35 |
| *** SkyRocknRoll has quit IRC | 08:44 | |
| *** nikivi has joined #openstack-swift | 08:48 | |
| *** nikivi has quit IRC | 08:50 | |
| *** cbartz has joined #openstack-swift | 08:57 | |
| *** SkyRocknRoll has joined #openstack-swift | 08:58 | |
| *** qwertyco has quit IRC | 08:58 | |
| *** qwertyco has joined #openstack-swift | 08:58 | |
| *** qwertyco has quit IRC | 08:58 | |
| *** qwertyco has joined #openstack-swift | 08:59 | |
| *** bjolo_ has joined #openstack-swift | 09:02 | |
| *** qwertyco has quit IRC | 09:14 | |
| *** qwertyco has joined #openstack-swift | 09:14 | |
| *** qwertyco has quit IRC | 09:21 | |
| *** qwertyco has joined #openstack-swift | 09:21 | |
| *** mvk has quit IRC | 09:29 | |
| *** qwertyco has quit IRC | 09:37 | |
| *** qwertyco has joined #openstack-swift | 09:37 | |
| *** mvk has joined #openstack-swift | 09:41 | |
| openstackgerrit | Nguyen Phuong An proposed openstack/swift: [api-ref] Remove temporary block in conf.py https://review.openstack.org/366538 | 09:51 |
| cnf | anyone here experience with swift3? | 09:59 |
| cnf | http://paste.openstack.org/show/584636/ is all I get from it | 10:00 |
| openstackgerrit | Kazuhiro MIYAHARA proposed openstack/swift: WIP: Swift Automated Tiering https://review.openstack.org/287057 | 10:40 |
| mahatic_ | acoles: morning (guess I'm late) | 11:01 |
| *** kei_yama has quit IRC | 11:02 | |
| *** d0ugal has quit IRC | 11:05 | |
| *** d0ugal has joined #openstack-swift | 11:06 | |
| *** SkyRocknRoll has quit IRC | 11:08 | |
| *** tries_ has quit IRC | 11:15 | |
| *** tries_ has joined #openstack-swift | 11:26 | |
| *** Jeffrey4l_ has quit IRC | 12:20 | |
| *** Jeffrey4l_ has joined #openstack-swift | 12:21 | |
| *** qwertyco has quit IRC | 12:24 | |
| *** qwertyco has joined #openstack-swift | 12:24 | |
| cnf | hmm | 12:31 |
| cnf | I really am in the wrong timezone ^^; | 12:31 |
| cnf | i'd almost thing noone in europe uses openstack :P | 12:31 |
| *** McMurlock1 has joined #openstack-swift | 12:37 | |
| mahatic_ | cnf: for swift3, yes you gotta wait until US timezone. I think you just missed kota_ | 12:40 |
| cnf | hmm, ok | 12:44 |
| *** links has quit IRC | 12:50 | |
| *** silor has joined #openstack-swift | 12:55 | |
| *** hseipp has quit IRC | 13:03 | |
| *** links has joined #openstack-swift | 13:05 | |
| *** tongli has joined #openstack-swift | 13:11 | |
| pdardeau | cnf: i'm not familiar with swift3, so this is basically guesswork | 13:18 |
| pdardeau | do you have memcached running? | 13:18 |
| cnf | yes | 13:21 |
| *** klamath has joined #openstack-swift | 13:22 | |
| pdardeau | cnf: configured to use it? memcached_servers | 13:23 |
| *** klamath has joined #openstack-swift | 13:23 | |
| cnf | yep | 13:26 |
| cnf | I don't have that line about memcache anymore | 13:26 |
| cnf | just the 3 other ones | 13:27 |
| pdardeau | i don't know if it's relevant here, but did you check that your pipeline | 13:27 |
| pdardeau | ordering is consistent with docs? (assuming its in docs) | 13:28 |
| cnf | yep, it is | 13:28 |
| pdardeau | out of ideas atm | 13:28 |
| cnf | how about ServiceCatalogException: Invalid service catalog service: object-store ? | 13:30 |
| cnf | in horizon | 13:30 |
| *** zul has quit IRC | 13:30 | |
| pdardeau | that sounds like a keystone config thing | 13:31 |
| cnf | hmz | 13:32 |
| pdardeau | is a service named object-store configured in your keystone? | 13:33 |
| *** zul has joined #openstack-swift | 13:33 | |
| pdardeau | http://docs.openstack.org/developer/keystone/configuringservices.html | 13:33 |
| cnf | yes | 13:34 |
| pdardeau | hmm... maybe i should be quiet now. not being helpful for you :( | 13:35 |
| cnf | haha, I do appreciate the intention | 13:36 |
| cnf | i'm a bit short because i'm also trying stuff myself | 13:37 |
| cnf | ok, so _removing_ memcached_servers fixed that | 13:37 |
| cnf | o,O | 13:37 |
| cnf | ok, at least my swift install works | 13:39 |
| pdardeau | \o/ | 13:40 |
| cnf | now I need to figure out how to make that work externally | 13:41 |
| cnf | ie, having both swift and keystone behind a single reverse proxy / hostname | 13:41 |
| *** ukaynar has joined #openstack-swift | 13:50 | |
| *** admin6__ has joined #openstack-swift | 13:51 | |
| *** admin6_ has quit IRC | 13:52 | |
| timburke | cnf: the first two lines are coming from s3_token, the rest sound like auth_token | 13:54 |
| timburke | the second one in particular is the problem; s3_token basically no-ops early on: https://github.com/openstack/swift3/blob/1.11/swift3/s3_token_middleware.py#L131-L137 | 13:55 |
| cnf | hmm, but why? | 13:55 |
| timburke | how is the request being signed? assuming you're using an sdk of some sort, which one? | 13:57 |
| cnf | i'm using cyberduck atm | 13:57 |
| cnf | but meh, it won't even connect to swift properly | 13:58 |
| timburke | hrm. unfortunately, i still have to eat breakfast and get my daughter to daycare, so it might be a few hours before i can look real deeply | 14:00 |
| cnf | sure | 14:00 |
| cnf | any suggestions for an S3 client for testing? | 14:00 |
| *** admin6__ has left #openstack-swift | 14:08 | |
| *** nikivi has joined #openstack-swift | 14:11 | |
| cnf | hmm, so I have swift working with the openstack client | 14:11 |
| cnf | but with _nothing else_ | 14:11 |
| *** nikivi has quit IRC | 14:15 | |
| *** bjolo_ has quit IRC | 14:18 | |
| *** nikivi has joined #openstack-swift | 14:21 | |
| *** nikivi has quit IRC | 14:21 | |
| cnf | hmz, I guess I still don't understand how this is supposed to work | 14:25 |
| *** _JZ_ has joined #openstack-swift | 14:28 | |
| *** hseipp has joined #openstack-swift | 14:30 | |
| *** vint_bra has joined #openstack-swift | 14:36 | |
| *** qwertyco has quit IRC | 14:41 | |
| cnf | ugh, why won't any client work :( | 14:42 |
| cnf | hmm, because projects and domains etc are really confusing, is why | 14:44 |
| cnf | christ, this stuff is confusing | 14:46 |
| *** sgundur has joined #openstack-swift | 14:49 | |
| openstackgerrit | Merged openstack/swift: Add a configurable URL base to staticweb https://review.openstack.org/372809 | 14:53 |
| *** kong has quit IRC | 14:53 | |
| *** DuncanT has quit IRC | 14:55 | |
| *** cargonza has quit IRC | 14:55 | |
| *** ediardo has quit IRC | 14:55 | |
| *** AndyWojo has quit IRC | 14:55 | |
| *** chsc has joined #openstack-swift | 14:56 | |
| *** sgundur has quit IRC | 15:00 | |
| *** sgundur has joined #openstack-swift | 15:00 | |
| *** chsc has quit IRC | 15:01 | |
| *** geaaru has quit IRC | 15:03 | |
| *** diogogmt has joined #openstack-swift | 15:06 | |
| *** sgundur has quit IRC | 15:12 | |
| *** sgundur has joined #openstack-swift | 15:17 | |
| *** chsc has joined #openstack-swift | 15:33 | |
| *** kong has joined #openstack-swift | 15:34 | |
| *** DuncanT has joined #openstack-swift | 15:36 | |
| *** Matti_ has joined #openstack-swift | 15:36 | |
| *** chsc has quit IRC | 15:39 | |
| *** cargonza has joined #openstack-swift | 15:41 | |
| *** ediardo has joined #openstack-swift | 15:43 | |
| *** AndyWojo has joined #openstack-swift | 15:43 | |
| *** diogogmt_ has joined #openstack-swift | 15:53 | |
| *** diogogmt has quit IRC | 15:53 | |
| *** diogogmt_ is now known as diogogmt | 15:53 | |
| *** rcernin has quit IRC | 16:01 | |
| *** ukaynar has quit IRC | 16:05 | |
| *** jordanP has quit IRC | 16:13 | |
| *** jistr is now known as jistr|afk | 16:14 | |
| *** cbartz has quit IRC | 16:15 | |
| *** sgundur has quit IRC | 16:19 | |
| *** sgundur has joined #openstack-swift | 16:24 | |
| *** rledisez has quit IRC | 16:24 | |
| *** hseipp has quit IRC | 16:25 | |
| *** mvk has quit IRC | 16:27 | |
| *** chsc has joined #openstack-swift | 16:28 | |
| *** tesseract- has quit IRC | 16:31 | |
| *** silor has quit IRC | 16:33 | |
| notmyname | good morning, world | 16:35 |
| *** chsc has quit IRC | 16:35 | |
| notmyname | looks like all the bits have been twiddled and newton is in the books | 16:39 |
| *** McMurlock1 has quit IRC | 16:39 | |
| *** sgundur has quit IRC | 16:41 | |
| *** sgundur has joined #openstack-swift | 16:43 | |
| *** Renich has joined #openstack-swift | 16:44 | |
| *** sgundur has quit IRC | 16:54 | |
| *** klrmn has joined #openstack-swift | 16:55 | |
| *** ukaynar has joined #openstack-swift | 16:55 | |
| *** jistr|afk is now known as jistr | 16:57 | |
| *** jamielennox|away has quit IRC | 17:02 | |
| *** dmorita has joined #openstack-swift | 17:04 | |
| *** sgundur has joined #openstack-swift | 17:10 | |
| *** mvk has joined #openstack-swift | 17:10 | |
| *** zaitcev has joined #openstack-swift | 17:11 | |
| *** ChanServ sets mode: +v zaitcev | 17:11 | |
| zaitcev | Guys, I have a silly question: is a container DB on 20 MB large or not? | 17:12 |
| *** sgundur has quit IRC | 17:12 | |
| zaitcev | -rw-------. 1 swift swift 21201920 Oct 6 17:11 73fb8d3bffe1e5e81dc11f5d19c04156.db | 17:12 |
| *** sgundur has joined #openstack-swift | 17:12 | |
| zaitcev | this is on a rotating disk | 17:13 |
| notmyname | I'd think not | 17:13 |
| zaitcev | Yeah, weird. Thanks | 17:14 |
| notmyname | I mean it's not tiny, but certainly still a few orders of magnitude smaller than the extreme end of big that i've seen | 17:14 |
| zaitcev | gnocchi client seems driving a load in a cluster here and it appears that it's hammering this container | 17:14 |
| zaitcev | maybe just a side effect | 17:15 |
| *** jamielennox|away has joined #openstack-swift | 17:16 | |
| *** jamielennox|away is now known as jamielennox | 17:16 | |
| notmyname | that sounds familiar | 17:20 |
| notmyname | I think donagh mentioned somethng about that once upon a time | 17:21 |
| notmyname | like it's trying to use a container as a work queue or it's storing time-series data in swift or some other pathologically bad-for-swift use case | 17:21 |
| *** sgundur has quit IRC | 17:21 | |
| *** acoles is now known as acoles_ | 17:27 | |
| notmyname | it seems the news for swift in the newton release is "Swift object/blob store ... [has] now become more scalable" | 17:27 |
| notmyname | trying to figure out why there's no mention on crypto work | 17:27 |
| *** tqtran has joined #openstack-swift | 17:27 | |
| timburke | cnf: fwiw, i typically use boto in an interactive python session. but i'm probably not normal | 17:32 |
| timburke | i also hear good things about s3cmd and s3curl | 17:32 |
| timburke | i'll try to get everything to a point that i can test out cyberduck | 17:32 |
| cnf | timburke: i'll look at those, s3cmd has been a pain to me so far | 17:36 |
| cnf | makes too many amazon assumptions | 17:37 |
| *** psachin has quit IRC | 17:39 | |
| clayg | we are missing out not having a json/post/action api - there's so much cool xml looking json you get to write | 17:39 |
| notmyname | wouldn't say I'm missing it, bob | 17:40 |
| clayg | cschwede: ping | 17:40 |
| *** Vinsh has quit IRC | 17:41 | |
| *** Vinsh has joined #openstack-swift | 17:41 | |
| timburke | cnf: i thought it just needed a ~/.s3cfg file like https://gist.github.com/tipabu/16ef00a0f293fffbcc5228408699b3dc but it's been a while since i tried it | 17:55 |
| cnf | uhm, the one I have has way more entries in it | 17:56 |
| cnf | maybe I didn't read the docs very well | 17:56 |
| *** Matti_ has quit IRC | 17:57 | |
| *** sgundur has joined #openstack-swift | 17:57 | |
| *** chsc has joined #openstack-swift | 18:00 | |
| *** ChanServ sets mode: +v tdasilva | 18:07 | |
| pdardeau | notmyname: thanks a lot. now i can't get the movie out of my head | 18:12 |
| openstackgerrit | Nicolas Helgeson proposed openstack/swift: Update pyeclib dependency to = 1.3.1 https://review.openstack.org/383185 | 18:12 |
| *** nadeem has joined #openstack-swift | 18:15 | |
| timburke | cnf: bah, my example was off; updated. with that, i've got client <-> swift via s3cmd, now working on swift <-> keystone (so it doesn't just 403 all the time) | 18:16 |
| cnf | so you use https://gist.github.com/tipabu/16ef00a0f293fffbcc5228408699b3dc ? | 18:17 |
| timburke | cnf: yep; my host is "saio:8080", and use_https is turned off | 18:19 |
| cnf | hmm, it doesn't like the ssl | 18:19 |
| timburke | is it a self-signed cert or something? there's probably some way of plumbing in a CA bundle... | 18:20 |
| cnf | no, it's a proper letsencrypt cert | 18:21 |
| cnf | ERROR: SSL certificate verification failure: [SSL: TLSV1_ALERT_PROTOCOL_VERSION] tlsv1 alert protocol version (_ssl.c:590) | 18:21 |
| cnf | and if I set it to https = false, it just craps out | 18:22 |
| *** amoralej is now known as amoralej|off | 18:22 | |
| openstackgerrit | Nicolas Helgeson proposed openstack/swift: Update pyeclib dependency to 1.3.1 https://review.openstack.org/383185 | 18:22 |
| cnf | ok, using the right port might help | 18:23 |
| timburke | cnf: alternatively, it kinda sounds like the client is using a too-old SSL protocol? not entirely sure, though | 18:24 |
| cnf | yeah, it is | 18:25 |
| cnf | right, how do I show my ec2 creds again | 18:25 |
| cnf | openstack ec2 credentials show <access key> doesn't seem to work | 18:27 |
| cnf | ok, so now i'm at | 18:28 |
| cnf | ERROR: S3 error: 403 (SignatureDoesNotMatch): The request signature we calculated does not match the signature you provided. Check your key and signing method. | 18:28 |
| *** dmorita_ has joined #openstack-swift | 18:28 | |
| *** dmorita has quit IRC | 18:32 | |
| timburke | what's the proxy log say? we should be able to trace through swift3 seeing that it's an S3 request and s3token contacting keystone, then i think authtoken is probably where things went off the rails | 18:33 |
| clayg | pdardeau: oh, it's such a classic "pc load letter?" | 18:34 |
| cnf | hmm, it's not finding keystone, i think | 18:35 |
| cnf | maybe | 18:35 |
| cnf | http://paste.openstack.org/show/584720/ | 18:35 |
| timburke | cnf: seems likely. what's the s3token section of proxy-server.conf look like? | 18:36 |
| cnf | i don't even have 35357 defined anywhere | 18:37 |
| cnf | it all points to 5000 | 18:37 |
| timburke | hmm. "host='None'" that doesn't seem right... | 18:37 |
| cnf | http://paste.openstack.org/show/584721/ | 18:37 |
| cnf | yeah, idno where it gets that from | 18:38 |
| timburke | try auth_uri instead of auth_url. that's an "eye" instead of an "ell" | 18:40 |
| cnf | yeah, tried both | 18:41 |
| openstackgerrit | Shashirekha Gundur proposed openstack/swift: Invalidate cached tokens api https://review.openstack.org/370319 | 18:42 |
| timburke | i may have asked already, but if so i've forgotten the answer: what version of keystonemiddleware is this? i think the auth_uri option may have been a somewhat-recent addition | 18:43 |
| cnf | uhm, not the newest | 18:44 |
| cnf | timburke: Version: 4.4.1-0ubuntu1 | 18:46 |
| timburke | cnf: looks like it was introduced in 4.5.0 (back in May); before that you had to specify separate auth_host, auth_port, auth_protocol params | 18:46 |
| cnf | hmm | 18:46 |
| cnf | >,< | 18:46 |
| cnf | let me try that | 18:46 |
| cnf | protocol is http or https? | 18:47 |
| timburke | yep. it'll default to https if you don't specify it. port will default to 35357, which is where that came from | 18:48 |
| cnf | hmm, now it says proxy-server: Keystone reply error: status=404 reason=Not Found | 18:49 |
| cnf | and keystone just gives 2016-10-06 18:49:24.064 26 INFO eventlet.wsgi.server [req-6e83a763-48e2-45cc-9e60-ee8522e72d60 - - - - -] 172.17.0.1,172.17.0.1 - - [06/Oct/2016 18:49:24] "POST /v2.0/s3tokens HTTP/1.1" 404 318 0.003894 | 18:49 |
| timburke | host apparently defaulted to None which was then interpolated into the url, making it "None" :-( | 18:49 |
| cnf | do i need to tell keystone about s3tokens, or something? | 18:51 |
| timburke | i think you might need to enable the s3_extension in keystone (i think that's what they call it) | 18:52 |
| cnf | hmm | 18:52 |
| cnf | why is that not in the documentation? | 18:52 |
| timburke | keystone's or swift3's? for the former, i think they try to forget about it, and for the latter, because i'm bad at documenting | 18:54 |
| timburke | i should go write that patch | 18:54 |
| cnf | ^^; | 18:55 |
| cnf | oh, silly me | 18:55 |
| cnf | wipe your keystone database, why don't you | 18:56 |
| cnf | right! | 18:59 |
| cnf | timburke: I wiped my testing keystone database | 18:59 |
| cnf | i'm gonna pick this up tomorrow | 18:59 |
| timburke | seems like a fine time to go to bed ;-) | 19:01 |
| cnf | i'll have to rebuild everything ^^; | 19:01 |
| timburke | sorry | 19:01 |
| cnf | yeah, watch some TV, and go to bed early | 19:01 |
| cnf | i'll get back to it tomorrow | 19:01 |
| cnf | maybe i'll just upgrade my keystone docker image to newton this weekend while i'm rebuilding, anyway | 19:02 |
| *** jamielennox has quit IRC | 19:03 | |
| cnf | timburke: anway, thanks for the help so far:P | 19:04 |
| cnf | are you around during the WE at all? | 19:04 |
| *** jamielennox|away has joined #openstack-swift | 19:05 | |
| *** jamielennox|away is now known as jamielennox | 19:06 | |
| timburke | cnf: not so much, sorry | 19:06 |
| *** sgundur has quit IRC | 19:06 | |
| cnf | :P | 19:06 |
| timburke | i'll definitely be around tomorrow, though | 19:06 |
| cnf | i do a lot of my breaking and ficing things during the WE :P | 19:06 |
| cnf | k, k | 19:06 |
| *** Matti_ has joined #openstack-swift | 19:07 | |
| *** sileht has quit IRC | 19:31 | |
| *** sileht has joined #openstack-swift | 19:32 | |
| *** sgundur has joined #openstack-swift | 19:34 | |
| *** sgundur has quit IRC | 19:47 | |
| *** sgundur has joined #openstack-swift | 19:47 | |
| *** Renich_ has joined #openstack-swift | 19:49 | |
| *** Renich has quit IRC | 19:53 | |
| *** dmorita has joined #openstack-swift | 19:54 | |
| *** Renich_ has quit IRC | 19:55 | |
| *** Renich has joined #openstack-swift | 19:55 | |
| openstackgerrit | John Dickinson proposed openstack/swift: adding reno sphinx tree https://review.openstack.org/381382 | 19:57 |
| notmyname | timburke: done ^ | 19:58 |
| *** dmorita_ has quit IRC | 19:58 | |
| *** Renich_ has joined #openstack-swift | 20:01 | |
| *** Renich has quit IRC | 20:01 | |
| *** nadeem has quit IRC | 20:02 | |
| *** nadeem has joined #openstack-swift | 20:03 | |
| *** Renich_ has quit IRC | 20:14 | |
| *** sgundur has quit IRC | 20:23 | |
| mattoliverau | Morning | 20:44 |
| *** dmorita has quit IRC | 21:10 | |
| *** dmorita has joined #openstack-swift | 21:10 | |
| *** dmorita_ has joined #openstack-swift | 21:17 | |
| *** tongli has quit IRC | 21:20 | |
| *** dmorita has quit IRC | 21:20 | |
| *** dmorita_ has quit IRC | 21:21 | |
| *** dmorita has joined #openstack-swift | 21:21 | |
| *** dmorita_ has joined #openstack-swift | 21:23 | |
| *** dmorita has quit IRC | 21:27 | |
| *** nadeem has quit IRC | 21:33 | |
| *** nadeem has joined #openstack-swift | 21:33 | |
| *** rcernin has joined #openstack-swift | 21:47 | |
| *** rcernin has quit IRC | 21:59 | |
| *** rcernin has joined #openstack-swift | 21:59 | |
| *** rhall has joined #openstack-swift | 22:08 | |
| rhall | Hi All, I'm kind of stuck on a python swiftclient issue and hoping someone might have some ideas | 22:08 |
| notmyname | rhall: this is a great place to ask :-) | 22:09 |
| rhall | cool! | 22:09 |
| rhall | I'm trying to use --os-storage-url in a swiftclient connection to access a container | 22:10 |
| rhall | for instance from command line, this works swift --os-storage-url https://dal05.objectstorage.softlayer.net/v1/AUTH_<removed auth> stat ca4d1a51-1406-4954-afb4-7e313105adc5 -v | 22:10 |
| rhall | my container is that uuid starting with ca4d1... | 22:11 |
| rhall | I've got ST_USER, ST_KEY, ST_AUTH setup according to standard settings | 22:11 |
| rhall | as I say swift command line is working great just as I'd expect | 22:11 |
| rhall | so I'm trying to do the same thing in python | 22:11 |
| rhall | this is what I've worked out from the doc: conn=swiftclient.Connection(user=user_data['instance_storage_username'], key=user_data['instance_apikey'],authurl='https://dal05.objectstorage.softlayer.net/auth/v1.0/',os_options={'--os-storage-url':user_data['instance_storage_url']}) | 22:12 |
| rhall | sorry, really ugly formatting | 22:12 |
| notmyname | feel free to use paste.openstack.org or any other pastebin you like | 22:13 |
| rhall | ok... doing that now | 22:13 |
| timburke | i tihnk you'll want 'os_storage_url' in your os_options dict | 22:14 |
| timburke | possibly even just storage_url; it's been a bit since i looked at that... | 22:14 |
| rhall | http://paste.openstack.org/show/584736/ | 22:14 |
| rhall | ok, tried without the "--" that didn't seem to work but will try storage_url | 22:15 |
| notmyname | os_options.get('object_storage_url') | 22:15 |
| notmyname | N.B. if the optional os_options paramater includes an non-empty | 22:15 |
| notmyname | 'object_storage_url' key it will override the the default storage url | 22:15 |
| notmyname | returned by the auth service. | 22:15 |
| notmyname | hmm...that's in client.py. timburke, should be the same in the service right? | 22:16 |
| rhall | ah, so underscores instead of the dashes | 22:16 |
| timburke | notmyname: service uses os_storage_url, similar to the cli. https://github.com/openstack/python-swiftclient/blob/3.1.0/swiftclient/service.py#L130 does the translation | 22:17 |
| timburke | ...and that explains my confusion | 22:17 |
| notmyname | yeah. so "conn=swiftclient.Connection(user=user_data['instance_storage_username'],key=user_data['instance_apikey'],authurl='https://dal05.objectstorage.softlayer.net/auth/v1.0/',os_options={'object_storage_url': <whatever>}) | 22:18 |
| patchbot | Error: No closing quotation | 22:18 |
| notmyname | " | 22:18 |
| patchbot | Error: No closing quotation | 22:18 |
| timburke | we really ought to fix patchbot :-( | 22:18 |
| notmyname | timburke: no, we should rewrite patchbot | 22:18 |
| notmyname | I want something much simpler with some of the features I can't get with supybot | 22:18 |
| rhall | Nice, that did the trick! Thanks @timburke and @notmyname! | 22:22 |
| notmyname | rhall: yay | 22:22 |
| notmyname | rhall: just curious, but what are you using swift for? (looks like you're using softlayer) | 22:22 |
| rhall | true | 22:23 |
| notmyname | what kind of data are you storing? | 22:23 |
| rhall | trying to get around the lack of granular access controls in softlayer | 22:23 |
| rhall | in this particular case it's system debugging data | 22:23 |
| notmyname | cool | 22:23 |
| rhall | but the general issue is that I need to restrict access to individual usernames such that the usernames can't see each other's data | 22:24 |
| rhall | so I set up cross account read/write acls on individual containers | 22:24 |
| rhall | SL's implementation is pretty much all or nothing | 22:25 |
| rhall | in terms of access | 22:25 |
| *** ukaynar has quit IRC | 22:34 | |
| notmyname | torgomatic: looking in to the xfs on a gate image | 22:45 |
| notmyname | initial simple things aren't likely possible. eg it currently does "sudo sed -i 's/ext3/ext4/g' /etc/fstab" | 22:46 |
| notmyname | so I don't think I can simply replace that with xfs and get away with it :-) | 22:46 |
| *** klamath has quit IRC | 22:50 | |
| *** _JZ_ has quit IRC | 22:50 | |
| *** vint_bra has quit IRC | 22:56 | |
| notmyname | so every time I talk to someone in openstack who isn't involved with contributing to or running swift and say that I want xfs as a requirement for unittests to pass, I get the response of "you're doing it wrong, and you can't require that" | 23:24 |
| *** nadeem has quit IRC | 23:26 | |
| *** kei_yama has joined #openstack-swift | 23:32 | |
| *** rcernin has quit IRC | 23:36 | |
| *** chsc has quit IRC | 23:38 | |
| *** nikivi has joined #openstack-swift | 23:46 | |
| *** nikivi has quit IRC | 23:49 | |
| *** pcaruana has quit IRC | 23:55 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!