| *** jorgem has quit IRC | 00:00 | |
| *** jmcbride has joined #openstack-dns | 00:05 | |
| *** nosnos has joined #openstack-dns | 00:54 | |
| *** jmcbride has quit IRC | 01:03 | |
| *** nosnos has quit IRC | 01:06 | |
| *** nosnos has joined #openstack-dns | 01:06 | |
| *** shakayumi has joined #openstack-dns | 01:51 | |
| *** jmcbride has joined #openstack-dns | 02:22 | |
| *** jmcbride has quit IRC | 02:33 | |
| *** ctracey is now known as ctracey|away | 03:01 | |
| *** hyperlowerlayer has joined #openstack-dns | 03:18 | |
| *** jmcbride has joined #openstack-dns | 03:24 | |
| *** shakayumi has quit IRC | 03:24 | |
| *** jmcbride has quit IRC | 03:43 | |
| *** hyperlowerlayer has quit IRC | 05:24 | |
| *** HenryG has quit IRC | 06:43 | |
| *** HenryG has joined #openstack-dns | 07:10 | |
| *** HenryG has quit IRC | 08:43 | |
| *** HenryG has joined #openstack-dns | 08:44 | |
| *** nosnos has quit IRC | 09:07 | |
| *** nosnos has joined #openstack-dns | 09:07 | |
| *** jmcbride has joined #openstack-dns | 10:55 | |
| *** jmcbride has quit IRC | 11:24 | |
| *** HenryG has quit IRC | 11:50 | |
| *** jmcbride has joined #openstack-dns | 11:57 | |
| *** CaptTofu has quit IRC | 12:02 | |
| *** CaptTofu has joined #openstack-dns | 12:03 | |
| *** shakayumi has joined #openstack-dns | 12:06 | |
| *** jmcbride1 has joined #openstack-dns | 12:07 | |
| *** jmcbride has quit IRC | 12:08 | |
| *** CaptTofu has quit IRC | 12:14 | |
| *** CaptTofu has joined #openstack-dns | 12:14 | |
| *** jmcbride1 has quit IRC | 12:23 | |
| *** jmcbride has joined #openstack-dns | 12:23 | |
| openstackgerrit | A change was merged to stackforge/python-designateclient: Fix and enable gating on H306 https://review.openstack.org/62379 | 12:26 |
|---|---|---|
| *** nosnos has quit IRC | 12:51 | |
| *** shakayumi has quit IRC | 13:10 | |
| *** shakayumi has joined #openstack-dns | 13:11 | |
| *** shakayumi has quit IRC | 13:15 | |
| openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Provide support for "All Tenants" access https://review.openstack.org/59785 | 13:47 |
| openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: WIP: RRSets https://review.openstack.org/59409 | 13:47 |
| kiall | No idea how I ended up adding plies of new code onto a old revision of that PS :( Hopefully sorted -_- | 13:47 |
| *** shakayumi has joined #openstack-dns | 13:54 | |
| *** HenryG has joined #openstack-dns | 14:00 | |
| *** eankutse has joined #openstack-dns | 14:22 | |
| *** eankutse1 has joined #openstack-dns | 14:22 | |
| *** eankutse has quit IRC | 14:22 | |
| *** shakayumi has quit IRC | 14:31 | |
| openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: WIP: RRSets https://review.openstack.org/59409 | 14:48 |
| openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Introduce RecordSets concept to core, and add initial RRSet API to v2 https://review.openstack.org/59409 | 14:51 |
| openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Introduce RecordSets concept to core, and add initial RRSet API to v2 https://review.openstack.org/59409 | 15:14 |
| openstackgerrit | Kiall Mac Innes proposed a change to stackforge/designate: Introduce RecordSets concept to core, and add initial RRSet API to v2 https://review.openstack.org/59409 | 15:17 |
| *** jmcbride has quit IRC | 15:21 | |
| *** jmcbride1 has joined #openstack-dns | 15:21 | |
| *** msisk has joined #openstack-dns | 15:26 | |
| openstackgerrit | Endre Karlson proposed a change to stackforge/designate: Part 1 of FloatingIP PTR record functionality https://review.openstack.org/58316 | 15:27 |
| *** betsy has quit IRC | 15:35 | |
| *** CaptTofu has quit IRC | 15:44 | |
| *** HenryG has quit IRC | 16:14 | |
| *** HenryG has joined #openstack-dns | 16:14 | |
| *** jmcbride1 has quit IRC | 16:15 | |
| *** betsy has joined #openstack-dns | 16:15 | |
| *** jmcbride has joined #openstack-dns | 16:17 | |
| *** jmcbride has quit IRC | 16:30 | |
| *** CaptTofu has joined #openstack-dns | 16:35 | |
| *** CaptTofu has quit IRC | 16:37 | |
| *** CaptTofu has joined #openstack-dns | 16:37 | |
| *** CaptTofu has quit IRC | 16:38 | |
| *** CaptTofu has joined #openstack-dns | 16:38 | |
| *** jmcbride has joined #openstack-dns | 16:49 | |
| *** jmcbride has quit IRC | 16:56 | |
| *** eankutse1 has quit IRC | 17:06 | |
| *** eankutse has joined #openstack-dns | 17:07 | |
| *** rjrjr has joined #openstack-dns | 17:15 | |
| *** jorgem has joined #openstack-dns | 17:22 | |
| *** jmcbride has joined #openstack-dns | 17:27 | |
| *** jmcbride has quit IRC | 17:32 | |
| *** simonmcc has quit IRC | 17:51 | |
| *** simonmcc has joined #openstack-dns | 17:57 | |
| *** simonmcc has quit IRC | 17:57 | |
| *** simonmcc has joined #openstack-dns | 17:58 | |
| *** simonmcc has quit IRC | 17:58 | |
| *** simonmcc has joined #openstack-dns | 17:58 | |
| *** jmcbride has joined #openstack-dns | 18:00 | |
| eankutse | Kiall: Heya | 18:04 |
| kiall | eankutse: heya | 18:05 |
| eankutse | regarding Filtering API, what do you think about the ff highlevel logic?: | 18:06 |
| eankutse | 1. User uses the regular search request with appropriate filters specified and indication of whether to do exact match or substring match. Also sets, a header X-ALL-TENANTS to true or false to indicate intent to search all tenants | 18:07 |
| eankutse | For example: | 18:07 |
| eankutse | GET /v2/zones?name=example.com&match-type=exact HTTP/1.1 | 18:07 |
| eankutse | Host: http://dns.provider.com | 18:07 |
| eankutse | Accept: application/json | 18:07 |
| eankutse | X-Auth-Token: KeyStoneAuth_***** | 18:07 |
| eankutse | X-All-Tenants: true | 18:07 |
| eankutse | 2. In middleware.py:KeystoneMiddleware::process_request(), during the construction of DesignateContext | 18:07 |
| *** jmcbride has quit IRC | 18:07 | |
| kiall | So, re setting all-tenants, I think mugsie made a good point to me the other day .. all_tenants is only ever used on a GET request, so placing it in the query string as ?all_tenants=true actually makes sense | 18:08 |
| eankutse | - we determined that X-ALL-TENANTS is set to True signaling intent to perform this operation on all tenants | 18:08 |
| eankutse | - we perform policy check (in the API before we pass on to Central) | 18:08 |
| eankutse | - if we confirm the user has this right to perform the operation across all tenants, | 18:08 |
| eankutse | - we set context.all_tenants=True | 18:08 |
| eankutse | - we let the request proceed to Central | 18:08 |
| eankutse | - if we cannot confirm the user has this right to perform the operation across all tenants, we reject the request with appropriate message | 18:08 |
| eankutse | 3. In Central: | 18:08 |
| eankutse | - issue the correct SQL query against the storage database using the request query parameter as WHERE clause value | 18:08 |
| kiall | Freenode is moments away from kicking you for flooding BTW - they rate limit all users :) | 18:09 |
| kiall | But, yes, that looks like it makes sense and is along the lines I was thinking of. | 18:10 |
| eankutse | ok. So make it query param rather than header? | 18:10 |
| eankutse | ;-) | 18:10 |
| eankutse | :-( | 18:10 |
| eankutse | so do you see everything so far? | 18:10 |
| eankutse | maybe I'll use pastie | 18:10 |
| eankutse | k. | 18:11 |
| eankutse | Also | 18:11 |
| kiall | Yea - I got it all I think.. | 18:12 |
| eankutse | What changes would be necessary, if any, in policy files to allow for a user to have this privilege but not be and admin? | 18:12 |
| eankutse | I.e, be able to use all-tenants but not be admin | 18:12 |
| kiall | no changes to the core policy code, we'd just need a new entry in the policy file | 18:12 |
| kiall | Out of the box, that should restrict to admins.. But the policy file is a configuration file, so it can be customized to allow, say, both admin and support access to the ferature | 18:13 |
| kiall | feature* | 18:13 |
| eankutse | k | 18:13 |
| eankutse | So what next steps would you like me to help with? | 18:13 |
| eankutse | Do we need updates to blueprints etc? | 18:13 |
| eankutse | k | 18:14 |
| *** jmcbride has joined #openstack-dns | 18:14 | |
| kiall | I think the all-tenants piece can just be doc'd in the V2 spec, rather than a blueprint on it's own (it's a TODO in spec as is..) | 18:15 |
| kiall | Filtering probably needs a bp/wiki page with examples of how the various types of filtering would work.. | 18:16 |
| eankutse | I have description of about 18 use cases/test cases specified that would help test this. | 18:18 |
| eankutse | So let me know what I can help with so we don't duplicate efforts. I'd be glad to work on this if you have other stuff going right now :-) | 18:18 |
| eankutse | infact, i have time allocated for this in our current development sprint | 18:18 |
| kiall | Great :) I'm at the point where I think https://review.openstack.org/59409 needs to be merged, The V1 API parts of it should be pretty stable.. and V2 is still marked as "experimental".. So, bigfixes can come over the next while. | 18:19 |
| eankutse | ok. I'll tackle Filtering bp/wiki page with examples of how the various types of filtering would work.. | 18:19 |
| kiall | That then leaves the door for getting all_tenants, filtering and pagination started ;) | 18:20 |
| kiall | We also have a possible (but somewhat radical) proposal to fix some of the issues brought up during the BP planning meet last week :) | 18:21 |
| *** eankutse has quit IRC | 18:23 | |
| *** eankutse has joined #openstack-dns | 18:24 | |
| eankutse | got disconnected for a sec | 18:24 |
| kiall | 18:09 <eankutse> ok. I'll tackle Filtering bp/wiki page with examples of how the various types of filtering would work.. | 18:25 |
| kiall | 18:09 <kiall> That then leaves the door for getting all_tenants, filtering and pagination started ;) | 18:25 |
| kiall | 18:11 <kiall> We also have a possible (but somewhat radical) proposal to fix some of the issues brought up during the BP planning meet last week :) | 18:25 |
| kiall | last few messages.. | 18:25 |
| *** vipul is now known as vipul-away | 18:26 | |
| eankutse | yes. I got those two | 18:26 |
| eankutse | Which specific issues are these? | 18:26 |
| eankutse | maybe details in meeting IRC tomorrow? | 18:27 |
| kiall | BIND9 support, RFC Dynamic DNS, Transnational Zone Updates, simplification of DNSSEC (I think) etc | 18:27 |
| eankutse | ok. The whole 9 yards! | 18:28 |
| kiall | Yea - It has *lots of implications* but .. tis pretty radical ;) | 18:28 |
| *** jorgem has quit IRC | 18:28 | |
| *** jorgem has joined #openstack-dns | 18:29 | |
| eankutse | Cool. Looking forward to details when available :-) | 18:29 |
| kiall | Still trying to understand the whole thing myself ;) | 18:30 |
| eankutse | :-) | 18:30 |
| eankutse | Maybe you introduce the "radical" ideas and we chime in to make it clearer | 18:30 |
| eankutse | In the mean time | 18:31 |
| kiall | That's the plan :) | 18:31 |
| eankutse | I'll get to work on the Filtering bp | 18:31 |
| kiall | Cool :) | 18:32 |
| *** jmcbride has quit IRC | 18:38 | |
| *** vipul-away is now known as vipul | 18:46 | |
| *** vipul is now known as vipul-away | 19:01 | |
| *** jmcbride has joined #openstack-dns | 19:05 | |
| *** eankutse has quit IRC | 19:10 | |
| *** msisk has quit IRC | 19:10 | |
| *** eankutse has joined #openstack-dns | 19:11 | |
| *** betsy has quit IRC | 19:38 | |
| *** jmcbride has quit IRC | 19:42 | |
| *** CaptTofu has quit IRC | 19:45 | |
| *** CaptTofu has joined #openstack-dns | 19:46 | |
| *** vipul-away is now known as vipul | 19:51 | |
| *** vipul-away has joined #openstack-dns | 19:52 | |
| *** jmcbride has joined #openstack-dns | 20:00 | |
| *** jmcbride has quit IRC | 20:06 | |
| *** jmcbride has joined #openstack-dns | 20:11 | |
| *** jmcbride has quit IRC | 20:13 | |
| *** jmcbride has joined #openstack-dns | 20:15 | |
| *** vipul-away is now known as vipul | 20:19 | |
| eankutse | Kiall/Mugsie: In Designate v1, is there a way to retrieve NS records for a domain? | 20:19 |
| eankutse | GET /domains/89acac79-38e7-497d-807c-a011e1310438/records does not seem to return them? | 20:20 |
| eankutse | Unless it is an NS that you created explicitly. The "default" ones don't seem to be returned | 20:22 |
| kiall | GET /domains/89acac79-38e7-497d-807c-a011e1310438/servers returns the list of nameservers to delegate the domain to | 20:24 |
| eankutse | yes | 20:24 |
| eankutse | but the NS records seems to be hidden then? | 20:24 |
| eankutse | Not displayed to user on request for records on the domain? | 20:25 |
| kiall | Yea, they don't get shown as part of the record list to the user.. | 20:26 |
| *** zane has joined #openstack-dns | 20:26 | |
| kiall | (There was a reason for that originally, but, I'm not convinced myself anymore, and can't remember exactly what the reason was.. ) | 20:26 |
| eankutse | k :-) | 20:27 |
| rjrjr | the NS record is not in the records table maybe? | 20:28 |
| eankutse | rjrjr: The NS records exist in Central/Storage in this case tho | 20:29 |
| eankutse | so like Kiall mentioned above | 20:29 |
| eankutse | there was a design decision made at some point to justify not displaying then on list records | 20:29 |
| eankutse | but maybe that needs to be revisited. | 20:30 |
| rjrjr | Central/Storage = Designate database, correct? | 20:31 |
| *** vipul is now known as vipul-away | 20:31 | |
| eankutse | yes | 20:32 |
| kiall | Yea, the NS records don't exist in the designate DB, but do exist in the backend .. e.g. bind/powerdns.. | 20:34 |
| kiall | I frankly don't remember the exact reasoning, something to do with A) there immutable by the end user, and B) there "generated" records rather than user-created | 20:34 |
| kiall | But .. That doesn't really hold up anymore, and should probably be revisited | 20:35 |
| rjrjr | from what i'm seeing in the database, the first NS record is not stored in the records table, but instead is in the servers table. that record is not shown when you list the records for a zone. | 20:37 |
| rjrjr | if you add another NS record, it is listed with the other records. | 20:37 |
| kiall | rjrjr: exactly.. | 20:37 |
| kiall | brb | 20:39 |
| eankutse | ohh :-) | 20:39 |
| rjrjr | and now that i'm reading what eankutse wrote, i'm just repeating what was already said. :) | 20:40 |
| *** vipul-away is now known as vipul | 20:43 | |
| *** msisk has joined #openstack-dns | 20:49 | |
| *** vipul is now known as vipul-away | 20:52 | |
| *** msisk has quit IRC | 21:01 | |
| *** vipul-away is now known as vipul | 21:12 | |
| *** jmcbride has quit IRC | 21:17 | |
| *** uggenstroy has joined #openstack-dns | 21:30 | |
| *** briancline has quit IRC | 21:39 | |
| *** uggenstroy has quit IRC | 21:42 | |
| *** briancline has joined #openstack-dns | 21:52 | |
| *** betsy has joined #openstack-dns | 22:08 | |
| *** jmcbride has joined #openstack-dns | 22:16 | |
| *** eankutse has quit IRC | 22:18 | |
| *** jmcbride has quit IRC | 22:19 | |
| *** zane has quit IRC | 23:37 | |
| *** jorgem has quit IRC | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!