*** david-lyle has quit IRC | 00:09 | |
*** david-lyle has joined #openstack-zaqar | 00:22 | |
*** david-lyle has quit IRC | 00:29 | |
*** david-lyle has joined #openstack-zaqar | 00:31 | |
*** david-lyle has quit IRC | 00:34 | |
*** david-lyle has joined #openstack-zaqar | 00:36 | |
*** david-lyle has quit IRC | 00:47 | |
*** david-lyle has joined #openstack-zaqar | 00:48 | |
*** david-lyle has quit IRC | 00:51 | |
*** david-lyle has joined #openstack-zaqar | 00:52 | |
*** david-lyle has quit IRC | 00:59 | |
*** david-lyle has joined #openstack-zaqar | 01:01 | |
*** david-lyle has quit IRC | 01:05 | |
*** tqtran has quit IRC | 01:05 | |
*** david-lyle has joined #openstack-zaqar | 01:06 | |
*** david-lyle has quit IRC | 01:07 | |
*** david-lyle has joined #openstack-zaqar | 01:13 | |
*** david-lyle has quit IRC | 01:14 | |
*** david-lyle has joined #openstack-zaqar | 01:15 | |
*** shu-mutou-AWAY is now known as shu-mutou | 01:18 | |
*** david-lyle has quit IRC | 01:19 | |
*** david-lyle has joined #openstack-zaqar | 01:20 | |
*** david-lyle has quit IRC | 01:21 | |
*** david-lyle has joined #openstack-zaqar | 01:23 | |
*** yanyanhu has joined #openstack-zaqar | 01:23 | |
*** david-lyle has quit IRC | 01:24 | |
*** david-lyle has joined #openstack-zaqar | 01:26 | |
*** david-lyle has quit IRC | 01:32 | |
*** david-lyle has joined #openstack-zaqar | 01:34 | |
*** david-lyle has quit IRC | 01:37 | |
*** david-lyle has joined #openstack-zaqar | 01:38 | |
*** david-lyle has quit IRC | 01:38 | |
*** david-lyle has joined #openstack-zaqar | 01:44 | |
*** david-lyle has quit IRC | 01:44 | |
*** david-lyle has joined #openstack-zaqar | 01:45 | |
*** david-lyle has quit IRC | 01:46 | |
*** david-lyle has joined #openstack-zaqar | 01:57 | |
*** david-lyle has quit IRC | 01:57 | |
*** david-lyle has joined #openstack-zaqar | 01:59 | |
*** david-lyle has quit IRC | 02:00 | |
*** david-lyle has joined #openstack-zaqar | 02:01 | |
*** david-lyle has quit IRC | 02:02 | |
*** david-lyle has joined #openstack-zaqar | 02:03 | |
*** david-lyle has quit IRC | 02:03 | |
*** david-lyle has joined #openstack-zaqar | 02:07 | |
*** david-lyle has quit IRC | 02:08 | |
*** david-lyle has joined #openstack-zaqar | 02:10 | |
*** david-lyle has quit IRC | 02:11 | |
*** david-lyle has joined #openstack-zaqar | 02:12 | |
*** david-lyle has quit IRC | 02:14 | |
*** david-lyle has joined #openstack-zaqar | 02:17 | |
*** david-lyle has quit IRC | 02:18 | |
*** david-lyle has joined #openstack-zaqar | 02:19 | |
*** david-lyle has quit IRC | 02:19 | |
*** david-lyle has joined #openstack-zaqar | 02:21 | |
*** david-lyle has quit IRC | 02:21 | |
*** david-lyle has joined #openstack-zaqar | 02:26 | |
openstackgerrit | wanghao proposed openstack/zaqar: Reword description of grace https://review.openstack.org/385362 | 02:47 |
---|---|---|
flwang1 | therve: need your help for the zaqar's trust notification driver | 03:12 |
*** david-lyle has quit IRC | 03:23 | |
*** david-lyle has joined #openstack-zaqar | 03:24 | |
*** david-lyle has quit IRC | 03:25 | |
*** david-lyle has joined #openstack-zaqar | 03:26 | |
*** david-lyle has quit IRC | 03:27 | |
*** david-lyle has joined #openstack-zaqar | 03:28 | |
*** david-lyle has quit IRC | 03:29 | |
*** david-lyle has joined #openstack-zaqar | 03:30 | |
*** david-lyle has quit IRC | 03:33 | |
*** david-lyle has joined #openstack-zaqar | 03:34 | |
*** rbrady is now known as rbrady-afk | 03:35 | |
*** david-lyle has quit IRC | 03:36 | |
*** david-lyle has joined #openstack-zaqar | 03:50 | |
*** david-lyle has quit IRC | 03:51 | |
*** david-lyle has joined #openstack-zaqar | 03:53 | |
*** david-lyle has quit IRC | 03:54 | |
*** tqtran has joined #openstack-zaqar | 03:57 | |
*** david-lyle has joined #openstack-zaqar | 03:57 | |
*** david-lyle has quit IRC | 03:57 | |
*** david-lyle has joined #openstack-zaqar | 04:00 | |
*** david-lyle has quit IRC | 04:01 | |
*** david-lyle has joined #openstack-zaqar | 04:02 | |
*** david-lyle has quit IRC | 04:04 | |
*** david-lyle has joined #openstack-zaqar | 04:05 | |
*** david-lyle has quit IRC | 04:05 | |
*** david-lyle has joined #openstack-zaqar | 04:06 | |
*** david-lyle has quit IRC | 04:08 | |
*** david-lyle has joined #openstack-zaqar | 04:10 | |
*** david-lyle has quit IRC | 04:11 | |
*** david-lyle has joined #openstack-zaqar | 04:12 | |
*** david-lyle has quit IRC | 04:13 | |
*** david-lyle has joined #openstack-zaqar | 04:14 | |
*** david-lyle has quit IRC | 04:15 | |
*** david-lyle has joined #openstack-zaqar | 04:17 | |
*** david-lyle has quit IRC | 04:18 | |
*** david-lyle has joined #openstack-zaqar | 04:19 | |
*** david-lyle has quit IRC | 04:20 | |
*** flwang1 has quit IRC | 04:20 | |
*** david-lyle has joined #openstack-zaqar | 04:21 | |
*** GB21 has joined #openstack-zaqar | 04:34 | |
*** flwang1 has joined #openstack-zaqar | 04:56 | |
*** tqtran has quit IRC | 05:32 | |
*** eliqiao has joined #openstack-zaqar | 05:43 | |
*** rcernin has joined #openstack-zaqar | 06:01 | |
*** pcaruana has joined #openstack-zaqar | 06:18 | |
*** tesseract has joined #openstack-zaqar | 07:03 | |
*** tesseract is now known as Guest85855 | 07:03 | |
*** odyssey4me has quit IRC | 07:16 | |
*** odyssey4me has joined #openstack-zaqar | 07:18 | |
therve | flwang1, Around now | 07:21 |
flwang1 | therve: i'm not really sure if it's a mistral bug or the trust issue | 07:30 |
therve | flwang1, What is? :) | 07:31 |
therve | Hello? | 07:35 |
flwang1 | therve: sorry, back | 07:37 |
flwang1 | when i test zaqar+ mistral + heat | 07:37 |
flwang1 | i found the token passed to mistral can't initialize keystone client | 07:37 |
flwang1 | therve: here is the bug i opened https://bugs.launchpad.net/mistral/+bug/1634090 | 07:38 |
openstack | Launchpad bug 1634090 in Mistral "Failed to create keystone client" [Undecided,New] - Assigned to Fei Long Wang (flwang) | 07:38 |
flwang1 | personally i think it's a bug of mistral | 07:38 |
flwang1 | but i just wanna get your opinion on this | 07:38 |
flwang1 | you're an expert of trust | 07:38 |
flwang1 | based on my understanding, the token trustee got based trust id should have the same permission like the trustor, right? | 07:39 |
therve | Yep | 07:40 |
therve | So you can create the trust, but then you can auth with it? | 07:41 |
therve | I'd try to use the trust without mistral | 07:41 |
flwang1 | yep, the auth works i think, since i can see the request in mistral | 07:42 |
flwang1 | but mistral will use the token to built a keystone client to get service endpoint, e.g. heat's endpoint | 07:42 |
flwang1 | when building the client, mistral balmed | 07:42 |
therve | Ah ok | 07:43 |
flwang1 | mistral throws exception at here https://github.com/openstack/mistral/blob/master/mistral/utils/openstack/keystone.py#L33 | 07:44 |
therve | It's possible that mistral needs to be aware of the fact that's it's a trust token | 07:49 |
therve | flwang1, We should probably enter https://github.com/openstack/mistral/blob/master/mistral/utils/openstack/keystone.py#L125 but we don't | 07:52 |
flwang1 | therve: what's the real difference between a normal token and a trust token? | 07:59 |
flwang1 | technically, i assume they should be same | 08:00 |
flwang1 | at least, 'same' means they can do same things | 08:00 |
therve | Well, yes, but there are some limitations | 08:00 |
flwang1 | any doc/link about the limitations? | 08:01 |
flwang1 | btw, how should i understand the 'is_trust_scoped'? | 08:01 |
flwang1 | this is the context of mistral when it handles the request from zaqar | 08:02 |
flwang1 | MistralContext {u'project_name': None, u'user_id': u'af6f84aaf58442cb85fc34e9ba6d58a4', u'roles': [u''], u'auth_uri': u'http://127.0.0.1:5000/v3', u'auth_cacert': None, u'auth_token': u'e86a0754f9e04fc79ca58b6d833a6f8a', u'expires_at': u'2016-10-18T08:11:25.000000Z', u'is_trust_scoped': False, u'project_id': None, u'user_name': u'admin', u'target_service_catalog': None} | 08:02 |
therve | It seems is_trust_scoped is only informed internally | 08:02 |
flwang1 | is_trust_scoped = Flase | 08:02 |
therve | flwang1, You have only one empty role, that's strange | 08:02 |
flwang1 | since i'm using admin user under admin project | 08:03 |
flwang1 | it's a devstack env | 08:03 |
*** openstackgerrit has quit IRC | 08:04 | |
*** openstackgerrit has joined #openstack-zaqar | 08:04 | |
flwang1 | i think mistral is using the is_trust_scoped in a very limited way, see https://github.com/openstack/mistral/blob/master/mistral/services/security.py#L51 | 08:06 |
flwang1 | it's the only place that is_trust_scoped can be set as 'True' | 08:07 |
flwang1 | which is for mistral webhook | 08:07 |
flwang1 | so for a token like what we're using, it's a trust token, but mistral 'hardcode'(believe) it as False | 08:08 |
*** mdnadeem has quit IRC | 08:09 | |
therve | I think it's an internal flag that they use, it shouldn't really matter | 08:21 |
*** GB21 has quit IRC | 09:03 | |
*** openstackgerrit has quit IRC | 09:04 | |
*** openstackgerrit has joined #openstack-zaqar | 09:04 | |
*** GB21 has joined #openstack-zaqar | 09:14 | |
flwang1 | therve: many thanks | 09:47 |
therve | No pb! | 09:47 |
flwang1 | all good now | 09:47 |
*** dynarro has joined #openstack-zaqar | 09:55 | |
*** yanyanhu has quit IRC | 10:22 | |
*** jtomasek is now known as jtomasek|biab | 10:40 | |
*** dynarro has quit IRC | 10:42 | |
*** dynarro has joined #openstack-zaqar | 11:25 | |
*** rbrady-afk is now known as rbrady | 11:51 | |
*** jtomasek|biab is now known as jtomasek | 11:54 | |
*** GB21 has quit IRC | 12:41 | |
*** nadya has joined #openstack-zaqar | 12:41 | |
nadya | hi folks! Could anyone please talk to me about kafka support in zaqar? | 12:42 |
therve | nadya, Hi | 12:55 |
nadya | hi therve! Could you please tell me what is the status of kafka support? | 12:55 |
therve | nadya, Non existent | 12:56 |
nadya | hehe :) | 12:56 |
nadya | ok, so is that technically possible to introduce it? | 12:57 |
therve | I think there may be a spike somewhere, so yeah I suppose | 12:57 |
nadya | therve: I mean, for example in oslo.messaging there is a pluggable structure. To support a new driver (e.g. kafka) we need to create a new implementation. Is that the same in zaqar? | 13:00 |
therve | nadya, Yes. Zaqar already supports several drivers (mongo and redis) | 13:00 |
nadya | therve: ok. I think I should investigate code a little bit and will come back to you later. Thank you very much for your help! | 13:03 |
therve | No problem | 13:03 |
therve | flaper87, Do we have traces somewhere of a kafka driver? | 13:04 |
flaper87 | therve: I do not :( | 13:04 |
*** nadya has quit IRC | 13:20 | |
*** mpanetta has joined #openstack-zaqar | 13:31 | |
*** jtomasek is now known as jtomasek|afk | 13:33 | |
*** mpanetta has quit IRC | 13:35 | |
*** mpanetta has joined #openstack-zaqar | 13:36 | |
-openstackstatus- NOTICE: We are away of pycparser failures in the gate and working to address the issue. | 14:06 | |
*** nadya has joined #openstack-zaqar | 14:17 | |
*** nadya has quit IRC | 15:33 | |
*** nadya has joined #openstack-zaqar | 15:39 | |
-openstackstatus- NOTICE: pycparser 2.16 released to fix assertion error from today. | 16:12 | |
*** jtomasek|afk is now known as jtomasek | 16:22 | |
*** Guest85855 has quit IRC | 16:25 | |
*** wxy__ has quit IRC | 16:26 | |
*** wxy__ has joined #openstack-zaqar | 16:26 | |
*** kgriffs is now known as kgriffs32 | 16:35 | |
*** kgriffs32 is now known as kgriffs___ | 16:35 | |
*** kgriffs___ is now known as kgriffs | 16:35 | |
*** kgriffs is now known as abcdefghijkgriff | 16:35 | |
*** abcdefghijkgriff is now known as kgriffs | 16:36 | |
*** wxy__ has quit IRC | 16:42 | |
*** wxy__ has joined #openstack-zaqar | 16:42 | |
*** tqtran has joined #openstack-zaqar | 16:42 | |
*** wxy__ has quit IRC | 16:45 | |
*** wxy__ has joined #openstack-zaqar | 16:45 | |
*** rcernin has quit IRC | 16:51 | |
*** exploreshaifali has joined #openstack-zaqar | 17:00 | |
*** dynarro has quit IRC | 17:05 | |
*** wxy__ has quit IRC | 17:33 | |
*** njohnston has quit IRC | 17:33 | |
*** flaper87 has quit IRC | 17:33 | |
*** Guest66666 has quit IRC | 17:33 | |
*** EmilienM has quit IRC | 17:33 | |
*** boris-42 has quit IRC | 17:33 | |
*** tonyb has quit IRC | 17:33 | |
*** Guest66666 has joined #openstack-zaqar | 17:33 | |
*** tonyb has joined #openstack-zaqar | 17:33 | |
*** wxy__ has joined #openstack-zaqar | 17:34 | |
*** EmilienM has joined #openstack-zaqar | 17:34 | |
*** EmilienM has quit IRC | 17:35 | |
*** EmilienM has joined #openstack-zaqar | 17:35 | |
*** njohnston has joined #openstack-zaqar | 17:36 | |
*** boris-42 has joined #openstack-zaqar | 17:40 | |
*** nadya has joined #openstack-zaqar | 17:59 | |
*** nadya has quit IRC | 18:03 | |
*** nadya has joined #openstack-zaqar | 18:39 | |
*** dynarro has joined #openstack-zaqar | 18:43 | |
*** nadya has quit IRC | 18:44 | |
*** exploreshaifali has quit IRC | 18:45 | |
*** flaper87 has joined #openstack-zaqar | 18:46 | |
*** flaper87 has quit IRC | 18:46 | |
*** flaper87 has joined #openstack-zaqar | 18:46 | |
*** exploreshaifali has joined #openstack-zaqar | 19:00 | |
*** nadya has joined #openstack-zaqar | 19:55 | |
*** flwang1 has quit IRC | 19:59 | |
*** nadya has quit IRC | 19:59 | |
*** jasond has joined #openstack-zaqar | 20:34 | |
*** flwang1 has joined #openstack-zaqar | 21:01 | |
*** dynarro has quit IRC | 21:05 | |
jasond | hi, is there some documentation on subscription options somewhere? | 21:10 |
flwang | jasond: hi, unfortunately, not too much, which driver you're looking for? | 21:26 |
jasond | flwang: i was just working on the heat resource for zaqar subscriptions | 21:27 |
flwang | jasond: cool, subscription's options is just a dict/json, technically, you can put anything in it | 21:27 |
jasond | flwang: ok, thanks. i will just pass the options data along to zaqar then | 21:28 |
flwang | but for email driver and trust driver, there are some specific reserved 'attributes' | 21:28 |
flwang | for email subscription, we support from and subject, see https://github.com/openstack/zaqar/blob/master/zaqar/notification/tasks/mailto.py#L45 | 21:29 |
flwang | for webhook/trust, we support 'post_data' see https://github.com/openstack/zaqar/blob/master/zaqar/notification/tasks/webhook.py#L37 | 21:31 |
flwang | i will add this in developer documents, thanks for reminding me :) | 21:32 |
jasond | flwang: i did see that post_data part in the code. made me wonder. thanks for the info | 21:32 |
flwang | post_data is a little bit confused i would say | 21:34 |
flwang | jasond: let me give a good example for that, wait a sec | 21:34 |
flwang1 | jasond: see http://paste.openstack.org/show/586283/ | 21:35 |
flwang1 | it's a subscription for mistral and using trust | 21:35 |
flwang1 | to trigger an execution of a mistral workflow | 21:35 |
jasond | flwang1: nice, that helps | 21:36 |
flwang1 | mistral need a specific post body format, for an execution, it needs 'workflow_id' and 'input' | 21:36 |
flwang1 | and, we also need to 'inject' the message body to that post body | 21:36 |
flwang1 | so i assume you got the idea now | 21:36 |
jasond | flwang1: yes. thank you. i will add you to the gerrit review when i get it up | 21:37 |
flwang1 | it's not a perfect solution, but it works as charm | 21:37 |
flwang1 | jasond: no problem, i'm happy to review it | 21:37 |
*** flwang1 has quit IRC | 21:52 | |
*** flwang1 has joined #openstack-zaqar | 21:52 | |
*** jasond has quit IRC | 21:59 | |
*** exploreshaifali has quit IRC | 23:51 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!