| *** chandan_kumar has joined #openstack-climate | 04:31 | |
| *** saju_m has joined #openstack-climate | 06:44 | |
| *** saju_m has quit IRC | 06:45 | |
| *** saju_m has joined #openstack-climate | 06:46 | |
| *** ppetit has quit IRC | 08:04 | |
| *** ppetit has joined #openstack-climate | 08:06 | |
| openstackgerrit | A change was merged to stackforge/climate: Fix work with new keystoneclient master https://review.openstack.org/78965 | 08:28 |
|---|---|---|
| *** bauzas has joined #openstack-climate | 08:37 | |
| *** saju_m has quit IRC | 08:50 | |
| *** saju_m has joined #openstack-climate | 08:56 | |
| *** Nikolay_1t has quit IRC | 12:09 | |
| *** Nikolay_St has joined #openstack-climate | 12:10 | |
| *** dpamio has joined #openstack-climate | 12:18 | |
| *** dpamio has quit IRC | 13:02 | |
| *** dpamio has joined #openstack-climate | 13:03 | |
| *** f_rossigneux_ has joined #openstack-climate | 13:17 | |
| *** ppetit has quit IRC | 13:23 | |
| *** f_rossigneux_ has quit IRC | 13:30 | |
| *** bauzas has quit IRC | 13:30 | |
| *** bauzas has joined #openstack-climate | 13:39 | |
| *** f_rossigneux_ has joined #openstack-climate | 13:52 | |
| *** cmart_ has joined #openstack-climate | 13:56 | |
| cmart_ | Hello all | 13:59 |
| *** pafuent has joined #openstack-climate | 14:05 | |
| pafuent | Hi, Can someone check this review? https://review.openstack.org/#/c/75181/ | 14:15 |
| pafuent | Is related to the DB migration using alembic | 14:15 |
| DinaBelova | o/ | 14:21 |
| DinaBelova | pafuent, I love what you've done with migrtions :) | 14:22 |
| pafuent | DinaBelova: Thanks | 14:22 |
| DinaBelova | bauzas, may you take a look on https://review.openstack.org/#/c/75181/ | 14:22 |
| bauzas | will do it | 14:25 |
| pafuent | DinaBelova: I'm fighting with the trusts thing and I'm not getting the whole picture. There is some kind of docs that I can read? | 14:40 |
| DinaBelova | well, about trusts? | 14:41 |
| DinaBelova | I may try to google it, I have no links now | 14:41 |
| pafuent | DinaBelova: I'm asking because a saw a comment from swann that said that novaclient doesn't support trusts | 14:41 |
| pafuent | DinaBelova: I read this https://wiki.openstack.org/wiki/Keystone/Trusts | 14:42 |
| DinaBelova | pafuent, well, it's because trusts are used by keystone | 14:42 |
| DinaBelova | trusts allow you to get create pythonkeystoneclietn | 14:42 |
| DinaBelova | without token | 14:42 |
| DinaBelova | and you'll get it in client after its creation | 14:42 |
| DinaBelova | this token is given to someone who's creating client in behalf of user who trusts him | 14:43 |
| DinaBelova | like real user trusts climate user to run his VMs later | 14:43 |
| DinaBelova | so you're creating ctx from trust really here | 14:43 |
| DinaBelova | and then use context to run what you need | 14:44 |
| DinaBelova | the problem with Swann's wrapper is that its long running | 14:44 |
| pafuent | DinaBelova: So, I use the a token generated by keystone v3 and use with nova, which uses keystone v2 | 14:44 |
| DinaBelova | yes | 14:44 |
| pafuent | DinaBelova: I got it the issue with the Swann's wrapper | 14:44 |
| DinaBelova | cool | 14:44 |
| DinaBelova | so the thing is that token might be checked via any API | 14:44 |
| pafuent | DinaBelova: I didn't get the part of create a token with v3 and use against something that uses v2 | 14:45 |
| DinaBelova | identity api | 14:45 |
| DinaBelova | v2 or v3 - it does not matter | 14:45 |
| pafuent | DinaBelova: So, the tokens are interchangeable | 14:45 |
| DinaBelova | yes | 14:45 |
| DinaBelova | they have the same format, etc. | 14:45 |
| DinaBelova | they are the same | 14:45 |
| pafuent | DinaBelova: I didn't know that. Thanks. | 14:45 |
| DinaBelova | trusts is a mech to have token, when you won't have it in usual way | 14:46 |
| DinaBelova | like when token will expire | 14:46 |
| DinaBelova | or other user should do some actions as other user | 14:46 |
| DinaBelova | so trusts are used to get right token from keystone | 14:46 |
| pafuent | DinaBelova: Ohh, I see | 14:47 |
| DinaBelova | like in Climate: VM should be deleted when lease ends. For OS it should look like user who reserved it does it. How can we get that user's token? We can use trusts, as user trusts Climate to do that | 14:47 |
| DinaBelova | so for OS requests it'll look like user deletes this VM - speaking about tokens and auth policies - but really Clmate will do that | 14:48 |
| pafuent | DinaBelova: It's a nice trick | 14:49 |
| DinaBelova | yes, quite nice - for example it was created mostly for heat | 14:50 |
| DinaBelova | when user asks to create stack | 14:50 |
| DinaBelova | but it should look like he went to Nova and asks VMs, to cinder for volumes, etc. | 14:50 |
| DinaBelova | so heat uses trusts to work with other OS services - so all policies in Nova, Cinder, Neutron use rules defined for the user who asked for stack | 14:51 |
| DinaBelova | that allowed to remove Heat Admin User to do all that stuff | 14:52 |
| pafuent | DinaBelova: Sorry to bother you again, but it's ok that Climate Manager crash if a plugin fails during initialization? | 14:58 |
| DinaBelova | цwell, climate manager initiates all plugins and the init stage | 14:58 |
| DinaBelova | so if plugin won't be initiated | 14:59 |
| DinaBelova | manager won't start too now | 14:59 |
| DinaBelova | so that might be normal | 14:59 |
| pafuent | DinaBelova: But, should be work in that way? | 15:00 |
| DinaBelova | manager now won't work if some of plugins won't be loaded | 15:00 |
| DinaBelova | possibly we need better behaviour here | 15:01 |
| DinaBelova | that was done at the very beginning of plugins impl and it's the same now | 15:01 |
| pafuent | DinaBelova: Ok, I'll fill a bug for that later. | 15:02 |
| *** chandan_kumar has quit IRC | 15:02 | |
| DinaBelova | thanks | 15:02 |
| DinaBelova | probably there should be some kind of warning and no support of these types of resources | 15:03 |
| DinaBelova | but manager should work for others | 15:03 |
| DinaBelova | that will be nice | 15:03 |
| pafuent | DinaBelova: Ok | 15:03 |
| *** chandan_kumar has joined #openstack-climate | 15:04 | |
| *** saju_m has quit IRC | 15:23 | |
| *** saju_m has joined #openstack-climate | 15:40 | |
| *** f_rossigneux_ has quit IRC | 15:52 | |
| *** dpamio has quit IRC | 15:54 | |
| *** saju_m has quit IRC | 15:57 | |
| *** bauzas has quit IRC | 16:08 | |
| *** ppetit has joined #openstack-climate | 16:18 | |
| *** bauzas has joined #openstack-climate | 16:20 | |
| *** bauzas has quit IRC | 16:27 | |
| *** chandankumar_ has joined #openstack-climate | 16:34 | |
| *** chandan_kumar has quit IRC | 16:37 | |
| *** dpamio has joined #openstack-climate | 17:27 | |
| *** ppetit has quit IRC | 17:41 | |
| *** dpamio has quit IRC | 18:35 | |
| *** dpamio has joined #openstack-climate | 18:53 | |
| *** saju_m has joined #openstack-climate | 19:18 | |
| *** cmart_ has quit IRC | 19:23 | |
| *** dpamio has quit IRC | 19:24 | |
| *** pafuent has left #openstack-climate | 20:58 | |
| *** saju_m has quit IRC | 21:42 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!