*** mvk has joined #openstack-swift | 00:46 | |
*** zhurong has joined #openstack-swift | 00:57 | |
*** Renich has joined #openstack-swift | 01:01 | |
*** Renich has quit IRC | 01:16 | |
*** JimCheung has quit IRC | 01:17 | |
*** JimCheung has joined #openstack-swift | 01:17 | |
*** JimCheung has quit IRC | 01:22 | |
*** sams-gleb has joined #openstack-swift | 01:25 | |
*** vinsh has joined #openstack-swift | 01:28 | |
*** sams-gleb has quit IRC | 01:29 | |
*** gyee has quit IRC | 01:37 | |
*** vinsh has quit IRC | 01:40 | |
*** vinsh has joined #openstack-swift | 01:41 | |
*** vinsh has quit IRC | 01:41 | |
*** vinsh has joined #openstack-swift | 01:42 | |
*** vinsh has quit IRC | 01:42 | |
*** vinsh has joined #openstack-swift | 01:42 | |
*** vinsh has quit IRC | 01:43 | |
*** vinsh has joined #openstack-swift | 01:43 | |
*** vinsh has quit IRC | 01:43 | |
*** vinsh has joined #openstack-swift | 01:44 | |
*** vinsh has quit IRC | 01:44 | |
*** vinsh has joined #openstack-swift | 01:45 | |
*** vinsh has quit IRC | 01:45 | |
*** vinsh has joined #openstack-swift | 01:46 | |
*** vinsh has quit IRC | 01:46 | |
*** vinsh has joined #openstack-swift | 01:46 | |
*** vinsh has quit IRC | 01:47 | |
*** vinsh has joined #openstack-swift | 01:47 | |
*** vinsh has quit IRC | 01:47 | |
*** vinsh has joined #openstack-swift | 01:48 | |
*** vinsh has quit IRC | 01:48 | |
*** vinsh has joined #openstack-swift | 01:49 | |
*** vinsh has quit IRC | 01:49 | |
*** vinsh has joined #openstack-swift | 01:50 | |
*** vinsh has quit IRC | 01:50 | |
*** vinsh has joined #openstack-swift | 01:50 | |
*** vinsh has quit IRC | 01:51 | |
*** vinsh has joined #openstack-swift | 01:51 | |
*** vinsh has quit IRC | 01:51 | |
*** Guest77695 has joined #openstack-swift | 02:11 | |
*** Guest77695 has quit IRC | 02:20 | |
*** klrmn has quit IRC | 02:43 | |
zaitcev | Woa | 02:50 |
---|---|---|
zaitcev | Followed notmyname's link to reviews from (former) PriorityReviews page, got "line 1:282 mismatched input '<EOF>' expecting ')'" | 02:51 |
zaitcev | http://not.mn/reviews.html | 02:51 |
zaitcev | hmm, it worked after reload. n/m | 02:52 |
*** xiaoruiguo has joined #openstack-swift | 03:05 | |
*** xiaoruiguo has quit IRC | 03:08 | |
*** xiaoruiguo has joined #openstack-swift | 03:11 | |
*** sams-gleb has joined #openstack-swift | 03:27 | |
*** sams-gleb has quit IRC | 03:31 | |
*** klrmn has joined #openstack-swift | 03:39 | |
*** zhurong has quit IRC | 03:45 | |
*** jojden has joined #openstack-swift | 03:57 | |
*** sams-gleb has joined #openstack-swift | 03:59 | |
*** klrmn has quit IRC | 04:01 | |
*** zhurong has joined #openstack-swift | 04:07 | |
jojden | good morning | 04:09 |
*** chsc has joined #openstack-swift | 04:17 | |
*** chsc has quit IRC | 04:22 | |
*** zhurong has quit IRC | 04:51 | |
*** sams-gleb has quit IRC | 04:55 | |
*** zhurong has joined #openstack-swift | 05:04 | |
*** sams-gleb has joined #openstack-swift | 05:06 | |
*** sams-gleb has quit IRC | 05:11 | |
*** tonanhngo has joined #openstack-swift | 05:22 | |
*** psachin has joined #openstack-swift | 05:26 | |
jojden | which is the best to way to implement ACL in swift | 05:56 |
psachin | jojden: Can you elaborate? You can refer this page for ACLs -- https://docs.openstack.org/developer/swift/overview_acl.html | 05:58 |
jojden | sure | 05:59 |
jojden | for other components like neutron, glance we have policy.json file | 05:59 |
jojden | psachin | 05:59 |
jojden | But for the swift to give access for the roles we don't have policy.json file | 06:00 |
jidar | jojden: you set the ACLs on the bucket/object | 06:00 |
jojden | jidar, how | 06:01 |
jidar | with the X-Container-Read/X-Container-Write options | 06:01 |
jidar | either via the REST API, or having heat do it | 06:01 |
jidar | which also depends on if you're using keystone backed users for it or tempURLs or not | 06:02 |
jojden | ok | 06:02 |
jidar | it's a function of the endpoint here, not the service (so to speak) | 06:02 |
jidar | ie: not a policy.json | 06:03 |
psachin | jojden: You are write. You have ACL at container level. but Account level ACL are not currently supported by Keystone | 06:03 |
jojden | ok I will be creating a user named "test" and will assign that test to a new role named "myreadonly" | 06:04 |
psachin | jojden: Few examples here: https://github.com/psachin/bootcamp/blob/moved-to-bootcamp-dir/swift-notes.org | 06:04 |
jojden | So if i assing any user to this new role "myreadonly" i want to restrict the user to create the container objects etc in swift | 06:04 |
jojden | psachin how it is possible | 06:04 |
mattoliverau | jojden: there is a patch out there to start adding policy.json support, but the person working on it has been reassigned. So isn't getting any love and may be abandoned. But it would be great to have. In the mean time what psachin says :) | 06:04 |
jojden | ok psachin, I am in that github now | 06:09 |
jojden | There is no account level ACL is not possible right | 06:09 |
jojden | ? | 06:09 |
psachin | jojden: There is an example where you can apply ACL at tenant level(per user) | 06:10 |
psachin | jojden: Yes. No currently supported | 06:10 |
psachin | jojden: s/No/Not/g | 06:11 |
jojden | swift post -r ".r:*" photos | 06:25 |
jojden | this is the one yopu talking about psachin | 06:25 |
jojden | right | 06:25 |
psachin | jojden: The last one actually: swift post --read-acl "<project1-id>:<user1-id>" container1 | 06:25 |
jojden | it is psecifically for that user "user1-i" | 06:35 |
jojden | Is there any possibility to make it with role | 06:36 |
jojden | like | 06:36 |
jojden | swift post --read-acl "<project1-id>:<myrole>" container2 | 06:36 |
jojden | psachin | 06:36 |
psachin | jojden: That is not supported right now. | 06:45 |
jojden | ok | 06:45 |
jojden | :) | 06:45 |
*** cshastri has joined #openstack-swift | 06:49 | |
psachin | jojden: :) | 06:51 |
psachin | jojden: Make sure you use 'id' and not 'name' | 06:52 |
jojden | i think we can use the name too | 06:52 |
jojden | psachin | 06:52 |
jojden | it worked for me | 06:52 |
psachin | jojden: Great! 'name' is discouraged in favor of id as ids are unique | 06:54 |
jojden | psachin got it | 06:54 |
jojden | :) | 06:54 |
*** cschwede has quit IRC | 07:06 | |
*** tonanhngo has quit IRC | 07:07 | |
*** tonanhngo has joined #openstack-swift | 07:07 | |
*** tonanhngo has quit IRC | 07:08 | |
*** ouchkernel has quit IRC | 07:24 | |
*** tonanhngo has joined #openstack-swift | 07:48 | |
*** tonanhngo has quit IRC | 07:53 | |
*** Raymii has joined #openstack-swift | 08:00 | |
*** sputnik13 has quit IRC | 08:15 | |
*** sputnik13 has joined #openstack-swift | 08:17 | |
*** sputnik13 has quit IRC | 08:18 | |
*** sputnik13 has joined #openstack-swift | 08:20 | |
*** tanee is now known as tanee_away | 08:41 | |
*** psachin has quit IRC | 08:46 | |
*** psachin has joined #openstack-swift | 08:47 | |
*** xiaoruiguo has quit IRC | 09:05 | |
*** jojden has quit IRC | 09:32 | |
*** tonanhngo has joined #openstack-swift | 09:37 | |
*** tone_z has quit IRC | 09:37 | |
*** silor has joined #openstack-swift | 09:38 | |
*** tonanhngo has quit IRC | 09:41 | |
*** tanee_away is now known as tanee | 09:43 | |
*** tanee is now known as tanee_away | 09:43 | |
*** silor1 has joined #openstack-swift | 09:44 | |
*** silor has quit IRC | 09:44 | |
*** silor1 is now known as silor | 09:44 | |
*** zhurong has quit IRC | 09:54 | |
*** silor has quit IRC | 09:57 | |
*** geaaru has joined #openstack-swift | 10:24 | |
*** sputnik13 has quit IRC | 10:26 | |
*** sputnik13 has joined #openstack-swift | 10:29 | |
*** tonanhngo has joined #openstack-swift | 10:51 | |
*** tonanhngo has quit IRC | 10:56 | |
*** hseipp has joined #openstack-swift | 11:01 | |
*** hseipp has quit IRC | 11:10 | |
*** tanee_away is now known as tanee | 11:15 | |
*** tanee is now known as tanee_away | 11:15 | |
*** tanee_away is now known as tanee | 12:00 | |
*** tanee is now known as tanee_away | 12:00 | |
*** tanee_away is now known as tanee | 12:18 | |
*** tanee is now known as tanee_away | 12:18 | |
*** stradling has joined #openstack-swift | 12:31 | |
*** cshastri has quit IRC | 12:38 | |
*** oshritf has joined #openstack-swift | 12:38 | |
*** psachin has quit IRC | 12:50 | |
*** stradling has quit IRC | 12:54 | |
*** Raymii has quit IRC | 13:04 | |
*** Raymii has joined #openstack-swift | 13:04 | |
*** Raymii has quit IRC | 13:12 | |
*** Raymii has joined #openstack-swift | 13:12 | |
*** Raymii has quit IRC | 13:18 | |
*** Raymii has joined #openstack-swift | 13:18 | |
*** Raymii has quit IRC | 13:19 | |
*** Raymii has joined #openstack-swift | 13:19 | |
*** ChanServ changes topic to "Let's talk, we're nice. | Logs: http://eavesdrop.openstack.org/irclogs/%23openstack-swift/ | Meetings: https://wiki.openstack.org/wiki/Meetings/Swift" | 13:28 | |
-openstackstatus- NOTICE: The http://logs.openstack.org/ site is back in operation; previous logs as well as any uploaded during the outage should be available again; jobs which failed with POST_FAILURE can also be safely rechecked. | 13:28 | |
*** oshritf has quit IRC | 13:50 | |
*** gpocentek has left #openstack-swift | 13:50 | |
*** oshritf has joined #openstack-swift | 14:14 | |
*** oshritf has quit IRC | 14:16 | |
*** stradling has joined #openstack-swift | 14:23 | |
*** vint_bra has joined #openstack-swift | 14:24 | |
*** stradling has quit IRC | 14:34 | |
*** vint_bra has quit IRC | 15:06 | |
*** vint_bra has joined #openstack-swift | 15:20 | |
*** tonanhngo has joined #openstack-swift | 15:42 | |
*** chosafine has joined #openstack-swift | 15:45 | |
*** tonanhngo has quit IRC | 15:47 | |
*** vint_bra has quit IRC | 16:00 | |
*** oshritf has joined #openstack-swift | 16:50 | |
*** oshritf has quit IRC | 16:52 | |
*** vinsh has joined #openstack-swift | 16:55 | |
*** mtreinish has quit IRC | 17:35 | |
*** mtreinish has joined #openstack-swift | 17:38 | |
*** karenc has quit IRC | 17:54 | |
*** karenc has joined #openstack-swift | 17:54 | |
*** vinsh has quit IRC | 18:27 | |
*** vinsh has joined #openstack-swift | 18:28 | |
*** tonanhngo has joined #openstack-swift | 19:00 | |
*** tonanhngo has quit IRC | 19:07 | |
*** silor has joined #openstack-swift | 19:17 | |
*** klrmn has joined #openstack-swift | 19:21 | |
*** silor1 has joined #openstack-swift | 19:27 | |
*** silor has quit IRC | 19:28 | |
*** silor1 is now known as silor | 19:28 | |
*** chromatin has joined #openstack-swift | 19:40 | |
*** zaitcev has quit IRC | 19:40 | |
*** zaitcev has joined #openstack-swift | 19:42 | |
*** ChanServ sets mode: +v zaitcev | 19:42 | |
*** silor has quit IRC | 20:00 | |
*** tonanhngo has joined #openstack-swift | 20:54 | |
*** tonanhngo has quit IRC | 20:59 | |
*** chromatin has left #openstack-swift | 21:11 | |
*** oshritf has joined #openstack-swift | 21:49 | |
*** oshritf has quit IRC | 22:07 | |
*** klrmn has quit IRC | 22:26 | |
*** zaitcev has quit IRC | 22:28 | |
*** zaitcev has joined #openstack-swift | 22:29 | |
*** ChanServ sets mode: +v zaitcev | 22:29 | |
*** biyiklioglu has joined #openstack-swift | 22:37 | |
*** klrmn has joined #openstack-swift | 22:48 | |
*** tonanhngo has joined #openstack-swift | 23:00 | |
*** tonanhngo has quit IRC | 23:04 | |
*** biyiklioglu has quit IRC | 23:24 | |
*** zaitcev has quit IRC | 23:35 | |
*** zaitcev has joined #openstack-swift | 23:49 | |
*** ChanServ sets mode: +v zaitcev | 23:49 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!