Saturday, 2017-04-01

*** mvk has joined #openstack-swift00:46
*** zhurong has joined #openstack-swift00:57
*** Renich has joined #openstack-swift01:01
*** Renich has quit IRC01:16
*** JimCheung has quit IRC01:17
*** JimCheung has joined #openstack-swift01:17
*** JimCheung has quit IRC01:22
*** sams-gleb has joined #openstack-swift01:25
*** vinsh has joined #openstack-swift01:28
*** sams-gleb has quit IRC01:29
*** gyee has quit IRC01:37
*** vinsh has quit IRC01:40
*** vinsh has joined #openstack-swift01:41
*** vinsh has quit IRC01:41
*** vinsh has joined #openstack-swift01:42
*** vinsh has quit IRC01:42
*** vinsh has joined #openstack-swift01:42
*** vinsh has quit IRC01:43
*** vinsh has joined #openstack-swift01:43
*** vinsh has quit IRC01:43
*** vinsh has joined #openstack-swift01:44
*** vinsh has quit IRC01:44
*** vinsh has joined #openstack-swift01:45
*** vinsh has quit IRC01:45
*** vinsh has joined #openstack-swift01:46
*** vinsh has quit IRC01:46
*** vinsh has joined #openstack-swift01:46
*** vinsh has quit IRC01:47
*** vinsh has joined #openstack-swift01:47
*** vinsh has quit IRC01:47
*** vinsh has joined #openstack-swift01:48
*** vinsh has quit IRC01:48
*** vinsh has joined #openstack-swift01:49
*** vinsh has quit IRC01:49
*** vinsh has joined #openstack-swift01:50
*** vinsh has quit IRC01:50
*** vinsh has joined #openstack-swift01:50
*** vinsh has quit IRC01:51
*** vinsh has joined #openstack-swift01:51
*** vinsh has quit IRC01:51
*** Guest77695 has joined #openstack-swift02:11
*** Guest77695 has quit IRC02:20
*** klrmn has quit IRC02:43
zaitcevWoa02:50
zaitcevFollowed notmyname's link to reviews from (former) PriorityReviews page, got "line 1:282 mismatched input '<EOF>' expecting ')'"02:51
zaitcevhttp://not.mn/reviews.html02:51
zaitcevhmm, it worked after reload. n/m02:52
*** xiaoruiguo has joined #openstack-swift03:05
*** xiaoruiguo has quit IRC03:08
*** xiaoruiguo has joined #openstack-swift03:11
*** sams-gleb has joined #openstack-swift03:27
*** sams-gleb has quit IRC03:31
*** klrmn has joined #openstack-swift03:39
*** zhurong has quit IRC03:45
*** jojden has joined #openstack-swift03:57
*** sams-gleb has joined #openstack-swift03:59
*** klrmn has quit IRC04:01
*** zhurong has joined #openstack-swift04:07
jojdengood morning04:09
*** chsc has joined #openstack-swift04:17
*** chsc has quit IRC04:22
*** zhurong has quit IRC04:51
*** sams-gleb has quit IRC04:55
*** zhurong has joined #openstack-swift05:04
*** sams-gleb has joined #openstack-swift05:06
*** sams-gleb has quit IRC05:11
*** tonanhngo has joined #openstack-swift05:22
*** psachin has joined #openstack-swift05:26
jojdenwhich is the best to way to implement ACL in swift05:56
psachinjojden: Can you elaborate? You can refer this page for ACLs -- https://docs.openstack.org/developer/swift/overview_acl.html05:58
jojdensure05:59
jojdenfor other components like neutron, glance we have policy.json file05:59
jojdenpsachin05:59
jojdenBut for the swift to give access for the roles we don't have policy.json file06:00
jidarjojden: you set the ACLs on the bucket/object06:00
jojdenjidar, how06:01
jidarwith the X-Container-Read/X-Container-Write options06:01
jidareither via the REST API, or having heat do it06:01
jidarwhich also depends on if you're using keystone backed users for it or tempURLs or not06:02
jojdenok06:02
jidarit's a function of the endpoint here, not the service (so to speak)06:02
jidarie: not a policy.json06:03
psachinjojden: You are write. You have ACL at container level. but Account level ACL are not currently supported by Keystone06:03
jojdenok I will be creating a user named "test" and will assign that test to a new role named "myreadonly"06:04
psachinjojden: Few examples here: https://github.com/psachin/bootcamp/blob/moved-to-bootcamp-dir/swift-notes.org06:04
jojdenSo if i assing any user to this new role "myreadonly" i want to restrict the user to create the container objects etc in swift06:04
jojdenpsachin how it is possible06:04
mattoliveraujojden: there is a patch out there to start adding policy.json support, but the person working on it has been reassigned. So isn't getting any love and may be abandoned. But it would be great to have. In the mean time what psachin says :)06:04
jojdenok psachin, I am in that github now06:09
jojdenThere is no account level ACL is not possible right06:09
jojden?06:09
psachinjojden: There is an example where you can apply ACL at tenant level(per user)06:10
psachinjojden: Yes. No currently supported06:10
psachinjojden: s/No/Not/g06:11
jojdenswift post -r ".r:*" photos06:25
jojdenthis is the one yopu talking about psachin06:25
jojdenright06:25
psachinjojden: The last one actually: swift post --read-acl "<project1-id>:<user1-id>" container106:25
jojdenit is psecifically for that user "user1-i"06:35
jojdenIs there any possibility to make it with role06:36
jojdenlike06:36
jojdenswift post --read-acl "<project1-id>:<myrole>" container206:36
jojdenpsachin06:36
psachinjojden: That is not supported right now.06:45
jojdenok06:45
jojden:)06:45
*** cshastri has joined #openstack-swift06:49
psachinjojden: :)06:51
psachinjojden: Make sure you use 'id' and not 'name'06:52
jojdeni think we can use the name too06:52
jojdenpsachin06:52
jojdenit worked for me06:52
psachinjojden: Great! 'name' is discouraged in favor of id as ids are unique06:54
jojdenpsachin got it06:54
jojden:)06:54
*** cschwede has quit IRC07:06
*** tonanhngo has quit IRC07:07
*** tonanhngo has joined #openstack-swift07:07
*** tonanhngo has quit IRC07:08
*** ouchkernel has quit IRC07:24
*** tonanhngo has joined #openstack-swift07:48
*** tonanhngo has quit IRC07:53
*** Raymii has joined #openstack-swift08:00
*** sputnik13 has quit IRC08:15
*** sputnik13 has joined #openstack-swift08:17
*** sputnik13 has quit IRC08:18
*** sputnik13 has joined #openstack-swift08:20
*** tanee is now known as tanee_away08:41
*** psachin has quit IRC08:46
*** psachin has joined #openstack-swift08:47
*** xiaoruiguo has quit IRC09:05
*** jojden has quit IRC09:32
*** tonanhngo has joined #openstack-swift09:37
*** tone_z has quit IRC09:37
*** silor has joined #openstack-swift09:38
*** tonanhngo has quit IRC09:41
*** tanee_away is now known as tanee09:43
*** tanee is now known as tanee_away09:43
*** silor1 has joined #openstack-swift09:44
*** silor has quit IRC09:44
*** silor1 is now known as silor09:44
*** zhurong has quit IRC09:54
*** silor has quit IRC09:57
*** geaaru has joined #openstack-swift10:24
*** sputnik13 has quit IRC10:26
*** sputnik13 has joined #openstack-swift10:29
*** tonanhngo has joined #openstack-swift10:51
*** tonanhngo has quit IRC10:56
*** hseipp has joined #openstack-swift11:01
*** hseipp has quit IRC11:10
*** tanee_away is now known as tanee11:15
*** tanee is now known as tanee_away11:15
*** tanee_away is now known as tanee12:00
*** tanee is now known as tanee_away12:00
*** tanee_away is now known as tanee12:18
*** tanee is now known as tanee_away12:18
*** stradling has joined #openstack-swift12:31
*** cshastri has quit IRC12:38
*** oshritf has joined #openstack-swift12:38
*** psachin has quit IRC12:50
*** stradling has quit IRC12:54
*** Raymii has quit IRC13:04
*** Raymii has joined #openstack-swift13:04
*** Raymii has quit IRC13:12
*** Raymii has joined #openstack-swift13:12
*** Raymii has quit IRC13:18
*** Raymii has joined #openstack-swift13:18
*** Raymii has quit IRC13:19
*** Raymii has joined #openstack-swift13:19
*** ChanServ changes topic to "Let's talk, we're nice. | Logs: http://eavesdrop.openstack.org/irclogs/%23openstack-swift/ | Meetings: https://wiki.openstack.org/wiki/Meetings/Swift"13:28
-openstackstatus- NOTICE: The http://logs.openstack.org/ site is back in operation; previous logs as well as any uploaded during the outage should be available again; jobs which failed with POST_FAILURE can also be safely rechecked.13:28
*** oshritf has quit IRC13:50
*** gpocentek has left #openstack-swift13:50
*** oshritf has joined #openstack-swift14:14
*** oshritf has quit IRC14:16
*** stradling has joined #openstack-swift14:23
*** vint_bra has joined #openstack-swift14:24
*** stradling has quit IRC14:34
*** vint_bra has quit IRC15:06
*** vint_bra has joined #openstack-swift15:20
*** tonanhngo has joined #openstack-swift15:42
*** chosafine has joined #openstack-swift15:45
*** tonanhngo has quit IRC15:47
*** vint_bra has quit IRC16:00
*** oshritf has joined #openstack-swift16:50
*** oshritf has quit IRC16:52
*** vinsh has joined #openstack-swift16:55
*** mtreinish has quit IRC17:35
*** mtreinish has joined #openstack-swift17:38
*** karenc has quit IRC17:54
*** karenc has joined #openstack-swift17:54
*** vinsh has quit IRC18:27
*** vinsh has joined #openstack-swift18:28
*** tonanhngo has joined #openstack-swift19:00
*** tonanhngo has quit IRC19:07
*** silor has joined #openstack-swift19:17
*** klrmn has joined #openstack-swift19:21
*** silor1 has joined #openstack-swift19:27
*** silor has quit IRC19:28
*** silor1 is now known as silor19:28
*** chromatin has joined #openstack-swift19:40
*** zaitcev has quit IRC19:40
*** zaitcev has joined #openstack-swift19:42
*** ChanServ sets mode: +v zaitcev19:42
*** silor has quit IRC20:00
*** tonanhngo has joined #openstack-swift20:54
*** tonanhngo has quit IRC20:59
*** chromatin has left #openstack-swift21:11
*** oshritf has joined #openstack-swift21:49
*** oshritf has quit IRC22:07
*** klrmn has quit IRC22:26
*** zaitcev has quit IRC22:28
*** zaitcev has joined #openstack-swift22:29
*** ChanServ sets mode: +v zaitcev22:29
*** biyiklioglu has joined #openstack-swift22:37
*** klrmn has joined #openstack-swift22:48
*** tonanhngo has joined #openstack-swift23:00
*** tonanhngo has quit IRC23:04
*** biyiklioglu has quit IRC23:24
*** zaitcev has quit IRC23:35
*** zaitcev has joined #openstack-swift23:49
*** ChanServ sets mode: +v zaitcev23:49

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!