| *** odyssey4me is now known as Guest3751 | 06:18 | |
| kleini | I want to use application credentials with access rules and noticed, that OSA does not configure the service_type within the keystone_authtoken section: https://docs.openstack.org/nova/victoria/configuration/config.html#keystone_authtoken.service_type I know that I can use the config_template to overwrite this but it would be handy, if it works out of the box. Is there are reason, this is not implemented? | 06:49 |
|---|---|---|
| -opendevstatus- NOTICE: zuul needed to be restarted, queues were lost, you may need to recheck your changes | 08:46 | |
| jrosser_ | kleini: it is likley as simple as no one has contributed patches and done the testing | 09:39 |
| jrosser_ | patches are welcome, as usual :) | 09:39 |
| kleini | jrosser_: at least I know, what needs to be changed in the configuration files. and I tested the functionality on my deployment but I don't know how to write tests for OSA... | 11:19 |
| jrosser_ | i think in this case having validation in your real deployment is very valuable | 11:28 |
| jrosser_ | we would normally rely on keystone tempest tests in OSA for things like this, but i think that if we need to fix application cred config in a simple way we should not get too stuck on if tempest is/is not testing that for us | 11:29 |
| kleini | keystone tempest tests would not be sufficient. All services need to have service_type configured in their keystone_authtoken section. otherwise the service can not verify the access rule: https://paste.opendev.org/show/810164/ and the client receives HTTP 401 | 11:32 |
| jrosser_ | if you have a fix for this then its fine to just make patches | 11:33 |
| jrosser_ | the best thing to do is create a bug in launchpad and put all the details in there | 11:33 |
| jrosser_ | and reference the bug in the patches | 11:33 |
| jrosser_ | then we have a trail of what/why the changes are for the future | 11:34 |
| kleini | first I need to get it working and this one already does not work: https://paste.opendev.org/show/810165/ | 11:37 |
| *** tosky_ is now known as tosky | 12:07 | |
| kleini | jrosser_: do you have any idea, what is wrong with my nova_nova_conf_overrides? | 12:16 |
| kleini | https://bugs.launchpad.net/openstack-ansible/+bug/1948456 | 13:00 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!