*** felipemonteiro has quit IRC | 00:24 | |
*** r-daneel has quit IRC | 00:40 | |
*** Dinesh_Bhor has joined #openstack-keystone | 00:58 | |
*** zxy has joined #openstack-keystone | 01:05 | |
*** lifeless has quit IRC | 01:06 | |
*** lifeless has joined #openstack-keystone | 01:11 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Unified limit update APIs Refactor https://review.openstack.org/559552 | 01:31 |
---|---|---|
*** felipemonteiro has joined #openstack-keystone | 01:39 | |
*** felipemonteiro_ has joined #openstack-keystone | 01:40 | |
*** felipemonteiro has quit IRC | 01:43 | |
*** felipemonteiro has joined #openstack-keystone | 01:47 | |
*** edmondsw has quit IRC | 01:47 | |
*** lifeless has quit IRC | 01:47 | |
*** lifeless has joined #openstack-keystone | 01:49 | |
*** felipemonteiro_ has quit IRC | 01:50 | |
*** r-daneel has joined #openstack-keystone | 02:01 | |
*** annp has joined #openstack-keystone | 02:03 | |
*** felipemonteiro has quit IRC | 02:16 | |
*** lifeless has quit IRC | 02:19 | |
*** lifeless has joined #openstack-keystone | 02:20 | |
*** germs has quit IRC | 02:28 | |
*** germs has joined #openstack-keystone | 02:29 | |
*** felipemonteiro has joined #openstack-keystone | 02:41 | |
*** edmondsw has joined #openstack-keystone | 02:54 | |
*** edmondsw has quit IRC | 02:59 | |
*** Dinesh_Bhor has quit IRC | 03:05 | |
*** zxy has quit IRC | 03:28 | |
*** zxy has joined #openstack-keystone | 03:37 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Unified limit update APIs Refactor https://review.openstack.org/559552 | 03:45 |
*** lifeless_ has joined #openstack-keystone | 03:46 | |
*** lifeless has quit IRC | 03:46 | |
*** Dinesh_Bhor has joined #openstack-keystone | 03:47 | |
*** lifeless has joined #openstack-keystone | 03:52 | |
*** lifeless_ has quit IRC | 03:52 | |
*** annp has quit IRC | 04:13 | |
*** links has joined #openstack-keystone | 04:14 | |
*** annp has joined #openstack-keystone | 04:14 | |
*** gagehugo has quit IRC | 04:24 | |
*** dklyle has joined #openstack-keystone | 04:25 | |
*** dklyle has quit IRC | 04:31 | |
*** gagehugo has joined #openstack-keystone | 04:37 | |
*** germs has quit IRC | 04:46 | |
*** felipemonteiro has quit IRC | 04:52 | |
*** Dinesh_Bhor has quit IRC | 05:00 | |
*** itlinux has joined #openstack-keystone | 05:00 | |
*** Dinesh_Bhor has joined #openstack-keystone | 05:23 | |
*** mvk has joined #openstack-keystone | 05:39 | |
*** AlexeyAbashkin has joined #openstack-keystone | 06:04 | |
*** sheel has joined #openstack-keystone | 06:19 | |
*** itlinux has quit IRC | 06:24 | |
*** pcaruana has joined #openstack-keystone | 06:26 | |
*** belmoreira has joined #openstack-keystone | 06:27 | |
*** martinus__ has joined #openstack-keystone | 06:35 | |
*** Dinesh_Bhor has quit IRC | 06:51 | |
*** Dinesh__Bhor has joined #openstack-keystone | 06:51 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 06:58 |
*** jaosorior has joined #openstack-keystone | 07:10 | |
*** rcernin has quit IRC | 07:10 | |
*** pooja_jadhav has joined #openstack-keystone | 07:25 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/keystone master: Ensure default roles created during bootstrap https://review.openstack.org/572243 | 07:30 |
*** belmoreira has quit IRC | 07:36 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/keystone master: Ensure default roles created during bootstrap https://review.openstack.org/572243 | 07:37 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 07:48 |
*** belmoreira has joined #openstack-keystone | 07:48 | |
*** links has quit IRC | 07:50 | |
*** belmoreira has quit IRC | 07:53 | |
*** lifeless_ has joined #openstack-keystone | 08:06 | |
*** lifeless has quit IRC | 08:07 | |
*** namnh has joined #openstack-keystone | 08:08 | |
*** jmlowe has quit IRC | 08:10 | |
*** ispp has joined #openstack-keystone | 08:17 | |
*** d0ugal has joined #openstack-keystone | 08:28 | |
*** belmoreira has joined #openstack-keystone | 08:33 | |
openstackgerrit | SunYanbin proposed openstack/keystone master: a bug for test by my own Bug1776161 https://review.openstack.org/574169 | 08:37 |
*** lifeless has joined #openstack-keystone | 08:46 | |
*** lifeless_ has quit IRC | 08:47 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 09:58 |
*** Dinesh__Bhor has quit IRC | 09:58 | |
openstackgerrit | Alessandro Nesta proposed openstack/oslo.limit master: fix tox python3 overrides https://review.openstack.org/573954 | 10:29 |
*** namnh has quit IRC | 10:34 | |
*** nicolasbock has joined #openstack-keystone | 10:38 | |
*** jrollen is now known as jroll | 10:44 | |
*** zzzeek_ has quit IRC | 11:01 | |
*** zzzeek has joined #openstack-keystone | 11:03 | |
*** jroll has quit IRC | 11:18 | |
*** jroll has joined #openstack-keystone | 11:18 | |
*** annp has quit IRC | 11:19 | |
*** lifeless has quit IRC | 11:45 | |
*** lifeless_ has joined #openstack-keystone | 11:45 | |
*** edmondsw has joined #openstack-keystone | 12:12 | |
*** raildo has joined #openstack-keystone | 12:34 | |
*** pcaruana has quit IRC | 12:39 | |
*** odyssey4me has quit IRC | 12:39 | |
*** odyssey4me has joined #openstack-keystone | 12:39 | |
*** jistr is now known as jistr|mtg | 12:41 | |
*** AlexeyAbashkin has quit IRC | 12:42 | |
*** jistr|mtg is now known as jistr | 12:57 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/keystone master: Ensure default roles created during bootstrap https://review.openstack.org/572243 | 13:02 |
jaosorior | hrybacki: did a tempest patch to get the implied roles tests to work with the default roles addition https://review.openstack.org/#/c/574149/ | 13:03 |
jaosorior | Federico Ressi, are you around? | 13:05 |
hrybacki | jaosorior: what happens if someone wants to use tempest to test outside of the default roles? | 13:08 |
jaosorior | hrybacki: huh? | 13:09 |
hrybacki | lemme finish reviewing before I start asking questions :P /me shuts up | 13:09 |
jaosorior | hrybacki: so we have the deafult roles, and those are left untouched. Who knows, the deployer might even change them at some point, and that's cool | 13:10 |
jaosorior | hrybacki: the tempest test creates some test roles, with random names | 13:10 |
jaosorior | what my tempest patch does is filter out any other implied roles that might exist in the system, and only use the roles relevant to that test | 13:10 |
hrybacki | ah yes I see | 13:11 |
jaosorior | hrybacki: if it's not very understandable I can try to simplify it. Maybe I tried to be too clever :D readability is better | 13:12 |
*** jdennis has quit IRC | 13:27 | |
*** jdennis has joined #openstack-keystone | 13:27 | |
*** ispp has quit IRC | 13:29 | |
*** ispp has joined #openstack-keystone | 13:31 | |
*** pcaruana has joined #openstack-keystone | 13:32 | |
*** belmorei_ has joined #openstack-keystone | 13:32 | |
*** belmoreira has quit IRC | 13:34 | |
*** sheel has quit IRC | 13:49 | |
openstackgerrit | David Rabel proposed openstack/keystone master: Fix typo in docs https://review.openstack.org/574266 | 13:56 |
*** xinran__ has joined #openstack-keystone | 13:58 | |
*** AlexeyAbashkin has joined #openstack-keystone | 14:04 | |
*** Alexey_Abashkin has joined #openstack-keystone | 14:11 | |
*** AlexeyAbashkin has quit IRC | 14:13 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 14:13 | |
*** mchlumsky has joined #openstack-keystone | 14:28 | |
*** jmlowe has joined #openstack-keystone | 14:31 | |
cmurphy | lbragstad: thanks for the assist with the update, sorry I didn't get it out last week | 14:31 |
lbragstad | cmurphy: no worries - i should have caught it last week too, but i was wrapped up in the enforcement model stuff :) | 14:32 |
*** dklyle has joined #openstack-keystone | 14:40 | |
*** dklyle has quit IRC | 14:47 | |
*** r-daneel has quit IRC | 14:50 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Address follow-on comments in strict-two-level spec https://review.openstack.org/573292 | 14:50 |
*** ispp has quit IRC | 14:51 | |
*** ispp has joined #openstack-keystone | 14:54 | |
jaosorior | hrybacki: for some reason we're still getting for implied roles even if I tried to filter them out :/ | 15:05 |
*** jmlowe has quit IRC | 15:08 | |
knikolla | o/ | 15:09 |
*** r-daneel has joined #openstack-keystone | 15:25 | |
*** fiddletwix has joined #openstack-keystone | 15:25 | |
*** felipemonteiro has joined #openstack-keystone | 15:25 | |
*** r-daneel_ has joined #openstack-keystone | 15:28 | |
*** r-daneel has quit IRC | 15:29 | |
*** r-daneel_ is now known as r-daneel | 15:29 | |
*** jmlowe has joined #openstack-keystone | 15:32 | |
hrybacki | jaosorior: in meeting, 1 sec | 15:32 |
*** felipemonteiro has quit IRC | 15:34 | |
*** itlinux has joined #openstack-keystone | 15:36 | |
*** ispp has quit IRC | 15:40 | |
*** r-daneel_ has joined #openstack-keystone | 15:42 | |
*** belmorei_ has quit IRC | 15:42 | |
*** r-daneel has quit IRC | 15:44 | |
*** r-daneel_ is now known as r-daneel | 15:44 | |
hrybacki | jaosorior: I saw that and was also confused. No obvious answer | 15:53 |
jaosorior | Well, in an hour I'm gonna end my day, do you have a chance to check that out? | 15:53 |
hrybacki | jaosorior: I've a few more meetings on my books today but will certainly try :) | 15:54 |
hrybacki | monday/tuesday are always meeting slammed for me =/ | 15:54 |
*** lifeless_ has quit IRC | 15:59 | |
*** lifeless has joined #openstack-keystone | 16:00 | |
*** dtruong_ has quit IRC | 16:05 | |
*** AlexeyAbashkin has quit IRC | 16:11 | |
*** AlexeyAbashkin has joined #openstack-keystone | 16:13 | |
*** r-daneel has quit IRC | 16:13 | |
*** felipemonteiro has joined #openstack-keystone | 16:19 | |
*** agrebennikov has joined #openstack-keystone | 16:24 | |
*** r-daneel has joined #openstack-keystone | 16:25 | |
*** r-daneel has quit IRC | 16:29 | |
kmalloc | o/ | 16:30 |
*** r-daneel has joined #openstack-keystone | 16:30 | |
*** felipemonteiro_ has joined #openstack-keystone | 16:33 | |
*** felipemonteiro__ has joined #openstack-keystone | 16:34 | |
*** Alexey_Abashkin has joined #openstack-keystone | 16:35 | |
*** Kumar has joined #openstack-keystone | 16:36 | |
*** AlexeyAbashkin has quit IRC | 16:36 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 16:36 | |
*** felipemonteiro has quit IRC | 16:37 | |
*** felipemonteiro_ has quit IRC | 16:37 | |
*** Alexey_Abashkin has joined #openstack-keystone | 16:42 | |
*** AlexeyAbashkin has quit IRC | 16:44 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 16:44 | |
*** xinran__ has quit IRC | 16:58 | |
openstackgerrit | Merged openstack/python-keystoneclient master: Fix python3 test compat https://review.openstack.org/573773 | 16:59 |
openstackgerrit | Merged openstack/python-keystoneclient master: fix tox python3 overrides https://review.openstack.org/573339 | 16:59 |
*** felipemonteiro__ is now known as felipemonteiro | 17:02 | |
*** gyee has joined #openstack-keystone | 17:03 | |
felipemonteiro | hrybacki lbragstad: is there anything else i need to do to https://review.openstack.org/#/c/464678/ or implement patrole-side prior to approval? | 17:03 |
*** germs has joined #openstack-keystone | 17:07 | |
*** germs has quit IRC | 17:07 | |
*** germs has joined #openstack-keystone | 17:07 | |
*** felipemonteiro has quit IRC | 17:31 | |
*** dklyle has joined #openstack-keystone | 17:32 | |
*** felipemonteiro has joined #openstack-keystone | 17:35 | |
*** AlexeyAbashkin has quit IRC | 17:35 | |
*** felipemonteiro has quit IRC | 17:37 | |
openstackgerrit | Lance Bragstad proposed openstack/python-keystoneclient master: Add support for registered limits https://review.openstack.org/537668 | 17:39 |
*** felipemonteiro has joined #openstack-keystone | 17:39 | |
lbragstad | curious what people think of ^ | 17:39 |
lbragstad | i based it on wxy's work for fixing up the unified limits api | 17:39 |
lbragstad | but the testing bits are a little strange just because the unified limits API it different from other API we support in keystone | 17:39 |
lbragstad | and the assumptions some of the base CrudTests in python-keystoneclient make | 17:40 |
lbragstad | it's clearly monday today, since my grammar in those last two sentences was way worse than it usually is | 17:42 |
*** felipemonteiro has quit IRC | 17:49 | |
*** felipemonteiro has joined #openstack-keystone | 17:50 | |
*** felipemonteiro_ has joined #openstack-keystone | 17:51 | |
lbragstad | kmalloc: should we update this? https://blueprints.launchpad.net/keystone/+spec/keystone-pecan | 17:53 |
*** felipemonteiro has quit IRC | 17:54 | |
*** r-daneel has quit IRC | 18:02 | |
*** ckonstanski has quit IRC | 18:06 | |
*** r-daneel has joined #openstack-keystone | 18:09 | |
*** Kumar has quit IRC | 18:09 | |
*** dklyle has quit IRC | 18:17 | |
*** dave-mcc_ has quit IRC | 18:25 | |
*** dave-mccowan has joined #openstack-keystone | 18:27 | |
*** dtruong has joined #openstack-keystone | 18:31 | |
*** oikiki has joined #openstack-keystone | 18:34 | |
*** felipemonteiro_ has quit IRC | 18:36 | |
*** dklyle has joined #openstack-keystone | 18:48 | |
*** r-daneel has quit IRC | 18:52 | |
*** r-daneel has joined #openstack-keystone | 18:56 | |
kmalloc | lbragstad: heh. probably | 18:58 |
*** felipemonteiro has joined #openstack-keystone | 18:59 | |
lbragstad | do you know what the outcome was of pecan support in openstack? | 18:59 |
kmalloc | some projects adopted it | 18:59 |
kmalloc | some didn't | 18:59 |
lbragstad | jamie's summary in that blueprint made it sound like it was a forsure thing | 18:59 |
kmalloc | some did something else | 18:59 |
kmalloc | that was back when wsme and pecan was a very large effort in openstack. | 18:59 |
kmalloc | i don't know the state of pecan and wsme, but it didn't work for us for some reasons | 19:00 |
kmalloc | and i don't remember why | 19:00 |
lbragstad | hmm | 19:00 |
lbragstad | intersting | 19:00 |
kmalloc | tbh it could probably be used now. but we had some very wonky things in the past | 19:02 |
*** jmlowe has quit IRC | 19:04 | |
*** Neptu has joined #openstack-keystone | 19:04 | |
jaosorior | hrybacki: so... The keystone tempest job ran referencing the wrong patchset (probably an error on my side), rechecked the job. | 19:16 |
hrybacki | jaosorior: ahhhh. I should have seen that | 19:18 |
hrybacki | glad you did, I'm failing to get a instance to test against today w/ RDO Cloud | 19:18 |
jaosorior | hrybacki: I actually didn't see that :D had to ask in the infra channel and clarkb was kind enough to point that out | 19:19 |
hrybacki | thanks clarkb :) | 19:19 |
openstackgerrit | Lance Bragstad proposed openstack/python-keystoneclient master: Add support for registered limits https://review.openstack.org/537668 | 19:25 |
openstackgerrit | Lance Bragstad proposed openstack/python-keystoneclient master: Add support for project-specific limits https://review.openstack.org/574391 | 19:25 |
*** aeline has joined #openstack-keystone | 19:27 | |
aeline | Hey, trying to modify keystone so that there is some more tables in the DB. Where does the the DB initialization actually happen? | 19:28 |
aeline | Sorry if this is the wrong place to ask | 19:29 |
lbragstad | aeline: keystone provides a command line tool call `keystone-manage` | 19:34 |
lbragstad | which offers a subcommand that is used to bootstrap keystone with information | 19:34 |
lbragstad | https://docs.openstack.org/keystone/latest/cli/index.html#keystone-manage | 19:34 |
lbragstad | hrybacki: i'm going through the trello board | 19:34 |
aeline | Is adding classes under sql_model.py not the right way to go about this? | 19:35 |
* hrybacki listnes | 19:35 | |
hrybacki | listens* | 19:35 |
lbragstad | hrybacki: a bunch of stuff had due dates of april 20th, what should we do with those, re-target them? | 19:35 |
lbragstad | aeline: oh - i'm sorry, i misunderstood your question | 19:35 |
hrybacki | lbragstad: aye, likely. I'm running out the door here in a min to some appts. Have time for a review session together tomorrow morning? | 19:35 |
lbragstad | aeline: keystone uses database migrations with sqlalchemy to make changes to the database | 19:36 |
hrybacki | good time to catch you up on our policy work too | 19:36 |
lbragstad | aeline: https://docs.openstack.org/keystone/latest/contributor/database-migrations.html | 19:36 |
lbragstad | ^ that has some information on the process | 19:36 |
lbragstad | hrybacki: sure | 19:36 |
lbragstad | just ping me whenever | 19:36 |
aeline | Thanks! Appreciate the help. | 19:36 |
lbragstad | aeline: yep | 19:37 |
lbragstad | hrybacki: i don't have anything prior to the meeting | 19:37 |
*** mvk has quit IRC | 19:39 | |
hrybacki | lbragstad: invite enroute | 19:40 |
kmalloc | hrybacki: toss me an invite as well if you don't mind me sitting in on it | 19:41 |
kmalloc | lbragstad: ^ | 19:41 |
lbragstad | sure thing | 19:41 |
kmalloc | lbragstad: almost ready to post the initial "convert to flask" review(s) | 19:42 |
hrybacki | kmalloc: personal or rh email? | 19:42 |
kmalloc | hrybacki: pref. @gmail, but honestly, it works either way | 19:42 |
hrybacki | your wish :) | 19:42 |
kmalloc | lbragstad: hmm. i am not liking the way this is shaping up. i think i need to re-work it. let me post what i'm up to and show you what i don't like. | 19:44 |
kmalloc | hm. or. wonder if i can do the @url_for | 19:44 |
* kmalloc checks | 19:44 | |
lbragstad | ok | 19:45 |
kmalloc | nop url_for wont fix it. | 19:45 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Add Flask-RESTful as a requirement https://review.openstack.org/574414 | 19:46 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement scaffolding for Flask-RESTful use https://review.openstack.org/574415 | 19:46 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: [WIP] Convert Discovery (Version) subsystem to Flask https://review.openstack.org/574416 | 19:46 |
kmalloc | lbragstad: ok so that last one [WIP] one. | 19:46 |
kmalloc | if you look in keystone.subsystem.discovery.api | 19:47 |
kmalloc | you'll see how each path gets a resource implemented for it | 19:47 |
kmalloc | and how it's added to the API object | 19:47 |
kmalloc | in api_obj.resource_mapping | 19:48 |
kmalloc | maybe i should make the API object more of a soft-import time registry? i am trying to avoid cross-subsystem imports and/or where resources don't need to be explicitly added to the Resource_mapping attr | 19:48 |
lbragstad | hmm | 19:49 |
kmalloc | so in the case of something that extends /USERs | 19:49 |
kmalloc | you'd need the /USERS api object | 19:49 |
kmalloc | then somehow add the resource | 19:49 |
kmalloc | ot the resource_mapping | 19:49 |
kmalloc | *or* you'd need to support cross-subsystem controller instantiation | 19:49 |
kmalloc | unless we want an "extends" api, so for example if it addes to user, a new API object is created with the deeper prefix | 19:50 |
kmalloc | e.g. /users/{user_id}/credentials/OS-EC2 | 19:51 |
kmalloc | no that doesn't work because of the {user_id} bit. | 19:52 |
kmalloc | ugh. | 19:52 |
kmalloc | so 3 possible ways to approach this: | 19:53 |
kmalloc | 1) migrate the controller code to the resource objects | 19:53 |
kmalloc | (most flask-like) | 19:53 |
kmalloc | 2) support cross subsystem imports and | 19:53 |
kmalloc | instantiate controllers from the cross-system on the local resource | 19:54 |
kmalloc | or 3) support cross subsystem imports and allow the resources to register themselves in the API object's resource_mapping attribute | 19:54 |
kmalloc | in case #1, code would be always isolated to the prefix, so /users/{user_id}/credentials/OS-EC2 would live in identity, even though EC2 "owns" the resulting data | 19:55 |
kmalloc | thoughts? | 19:55 |
lbragstad | sorry - just wrapping up a call quick and i'll read back | 19:55 |
lbragstad | sans distractions :) | 19:56 |
kmalloc | sure | 19:56 |
-openstackstatus- NOTICE: Zuul was restarted for a software upgrade; changes uploaded or approved between 19:30 and 19:50 will need to be rechecked | 19:56 | |
kmalloc | oh, one more option: 4 - don't use flask-Restful and directly craft routes -- still has some of the pitfalls because the blueprint(s) are local to the subsystem (e.g. /users in Identity) | 20:00 |
*** hoonetorg has joined #openstack-keystone | 20:05 | |
*** oikiki has quit IRC | 20:06 | |
*** oikiki has joined #openstack-keystone | 20:07 | |
*** r-daneel has quit IRC | 20:11 | |
*** ispp has joined #openstack-keystone | 20:12 | |
*** rmascena has joined #openstack-keystone | 20:22 | |
*** r-daneel has joined #openstack-keystone | 20:22 | |
*** raildo has quit IRC | 20:23 | |
lbragstad | kmalloc: ok - reading scroll back | 20:25 |
lbragstad | hmm | 20:28 |
kmalloc | lbragstad: and the other question is, is it worth moving anything but the API/controllers to subsystem, maybe instead subsystem is the non-routed bits [aka managers/backends] and keystone.api is the routed (controllers) bit[s]? | 20:28 |
lbragstad | yeah - i can see where that would make sense | 20:28 |
kmalloc | ok, so i'll aim for keystone.api, (and worry about cleanup to keystone.subsystem later) | 20:29 |
kmalloc | but that doesn't answer the same questions re: controller import outlined above | 20:29 |
lbragstad | so option #1 | 20:29 |
lbragstad | would be reworking everything in say keystone/identity/controller.py | 20:30 |
kmalloc | yeah | 20:30 |
kmalloc | well, we're doing a chunk of the work anyway | 20:30 |
kmalloc | to move to flask_restful | 20:30 |
*** rmascena has quit IRC | 20:31 | |
kmalloc | brb dog potty | 20:31 |
*** AlexeyAbashkin has joined #openstack-keystone | 20:32 | |
*** r-daneel has quit IRC | 20:33 | |
kmalloc | lbragstad: though with keystone.api, it means we would be much more broken out: keystone.api.user keystone.api.group, etc so cross import isn't important | 20:35 |
lbragstad | sorry - dumb question | 20:36 |
lbragstad | can you define cross import for me? | 20:36 |
kmalloc | keystone.subsystem.user needs ot be imported (in the current patch-style) by keystone.subsystem.ec2 | 20:36 |
kmalloc | because ec2 extends the keystone.user API | 20:36 |
kmalloc | via: /users/{user_id}/credentials/OS-EC2 | 20:37 |
kmalloc | since ec2 *owns* that path, right now we just say "hey mapper, route that" | 20:37 |
kmalloc | in flask, we're going to use blueprints which define the prefix, e.g. "users" which is owned by identity | 20:38 |
kmalloc | so if we did keystone.subsystem.identity is where everything from keystone.identity went, ec2 would either need to add it's resource to keystone.subsystem.identity.api.UserAPI or ... some other mechanism to get it loaded under /user path-prefix | 20:39 |
lbragstad | hmm | 20:39 |
lbragstad | actually | 20:39 |
lbragstad | it would be nice to know that all router logic for a given path is in a single place | 20:40 |
kmalloc | right | 20:40 |
kmalloc | so, if we did keystone.api.user (for example) | 20:40 |
kmalloc | all router logic for "/user" would live there | 20:40 |
kmalloc | and keystone.identity.core/backends/etc stays in either keystone.identity or eventually moves to keystone.subsystem.identity <-- .subsystem = internal manager stuff | 20:41 |
kmalloc | keystone.api.* <--- Router/Controller manager | 20:41 |
kmalloc | that seems to make more sense to me. | 20:41 |
kmalloc | and should be a lot cleaner. | 20:41 |
lbragstad | yeah - i can see that | 20:42 |
lbragstad | even though it goes against the grouping we've had for *years* | 20:42 |
lbragstad | :) | 20:42 |
kmalloc | right | 20:42 |
kmalloc | now the question i have is... | 20:42 |
kmalloc | i can do: router-only type logic, where i just map the items from the BP to the route in keystone.api (raw flask) | 20:43 |
kmalloc | or i can do the resource-based style flask-restful does, e.g. User->GET/POST/DELETE/ETC is an object where /users/{user_id}/credentials/OS-EC2 would be a separate "resource" object | 20:43 |
kmalloc | that implements (in this case) "get" | 20:43 |
kmalloc | so controller logic goes into resource objects. | 20:44 |
lbragstad | and the resource object would call to managers? | 20:44 |
kmalloc | yep | 20:44 |
kmalloc | user_list.get would implement "list users" | 20:44 |
kmalloc | user.get would implement "get me user X" | 20:45 |
*** aeline has quit IRC | 20:45 | |
kmalloc | user.post would implement "create user" | 20:45 |
kmalloc | user.delete would implemnet "delete user" | 20:45 |
kmalloc | keystone.api.user.ec2Resource would implement "get ec2 cred for user" | 20:45 |
kmalloc | each "resource" can implement GEt/POST/PUT/DELETE/PATCH/etc | 20:46 |
kmalloc | and it's based upon the methods on the resource object | 20:46 |
kmalloc | GET/HEAD are explicitly the same unless defined separately | 20:46 |
*** Alexey_Abashkin has joined #openstack-keystone | 20:46 | |
lbragstad | is each resource object coupled to a specific path? | 20:46 |
kmalloc | yep, with substitutions for elements like {user_id} | 20:46 |
lbragstad | ok | 20:47 |
*** AlexeyAbashkin has quit IRC | 20:47 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 20:47 | |
lbragstad | so if we need to go deeper on the path, we need more resource objects | 20:47 |
lbragstad | ? | 20:47 |
kmalloc | yes. | 20:47 |
kmalloc | which is why i liked the user.ec2resource example | 20:47 |
lbragstad | ok - that makes sense | 20:47 |
kmalloc | ->> /users/{user_id}/credentials/OS-EC2 is on a distinct resource object from the main user CRUD | 20:47 |
lbragstad | but still relative to the base user path/resource object | 20:48 |
kmalloc | and user list is a different distinct resource because GET /v3/user is different than /v3/user/ | 20:48 |
lbragstad | ahhhh | 20:48 |
kmalloc | yes, it would still be all tied to the path, so /user would be in keystone.api.user | 20:48 |
kmalloc | you'd then implement all resources that matter for the /user path there | 20:48 |
lbragstad | so - i'm thinking about this partially as a developer new the project | 20:48 |
lbragstad | and following an incoming request | 20:49 |
kmalloc | right, which is why i'm bouncing it :) | 20:49 |
kmalloc | instead of just trying to implement, i *think* as a new dev, this makes a lot more sense | 20:49 |
kmalloc | but, wanted a second brain | 20:49 |
lbragstad | that seems reasonable to me | 20:49 |
kmalloc | the request would hit Flask_App, be dispatched based upon the URL to the blueprint/API, e.g. /USERS | 20:50 |
kmalloc | and from there, the resources would define the behavior | 20:50 |
lbragstad | by calling into the business logic in various managers | 20:50 |
kmalloc | and all resources (think of resources as a controller with the router built-in) | 20:50 |
*** r-daneel has joined #openstack-keystone | 20:50 | |
kmalloc | would live relative to their path-prefix | 20:50 |
lbragstad | ok | 20:50 |
kmalloc | and call the managers directly | 20:50 |
lbragstad | cool | 20:51 |
kmalloc | so routers/controllers -> keystone.api.<path> | 20:51 |
*** Alexey_Abashkin has joined #openstack-keystone | 20:51 | |
kmalloc | i'll need to see how i can implement the @protected bits | 20:51 |
*** AlexeyAbashkin has quit IRC | 20:51 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 20:51 | |
kmalloc | but that might be a more direct call of @protected underlying code (easier to break out) in the process. | 20:52 |
kmalloc | so. let me go re-do these patches with all of this in mind. | 20:52 |
kmalloc | i *think* this just got a lot simpler to write the base API class and the resources | 20:52 |
lbragstad | i can get behind it if it makes removing @protected easier | 20:52 |
kmalloc | @protected will be a headache no matter what to deal with | 20:53 |
lbragstad | and more structured organization is a plus | 20:53 |
kmalloc | yeah. | 20:53 |
*** felipemonteiro_ has joined #openstack-keystone | 20:55 | |
*** AlexeyAbashkin has quit IRC | 20:56 | |
* knikolla is going to read back this convo tonight. | 21:01 | |
*** felipemonteiro_ has quit IRC | 21:01 | |
*** r-daneel has quit IRC | 21:08 | |
*** AlexeyAbashkin has joined #openstack-keystone | 21:08 | |
*** r-daneel has joined #openstack-keystone | 21:09 | |
*** oikiki has quit IRC | 21:13 | |
*** ispp has quit IRC | 21:15 | |
*** oikiki has joined #openstack-keystone | 21:17 | |
*** oikiki has quit IRC | 21:20 | |
*** lifeless_ has joined #openstack-keystone | 21:28 | |
*** lifeless has quit IRC | 21:28 | |
*** r-daneel has quit IRC | 21:31 | |
*** lifeless_ has quit IRC | 21:38 | |
*** lifeless has joined #openstack-keystone | 21:44 | |
*** martinus__ has quit IRC | 21:48 | |
*** r-daneel has joined #openstack-keystone | 21:50 | |
*** AlexeyAbashkin has quit IRC | 21:54 | |
*** itlinux has quit IRC | 21:57 | |
lbragstad | if anyone here is client savvy and wants to give me some pointers, i'm all ears :) | 22:05 |
lbragstad | https://review.openstack.org/#/c/574475/ | 22:05 |
lbragstad | https://review.openstack.org/#/c/574391/ | 22:05 |
lbragstad | https://review.openstack.org/#/c/537668/6 | 22:05 |
*** nicolasbock has quit IRC | 22:05 | |
*** rcernin has joined #openstack-keystone | 22:16 | |
*** r-daneel has quit IRC | 22:26 | |
*** r-daneel has joined #openstack-keystone | 22:38 | |
*** EmilienM|PTO is now known as EmilienM | 22:41 | |
*** edmondsw has quit IRC | 22:47 | |
*** r-daneel has quit IRC | 22:54 | |
*** hoonetorg has quit IRC | 23:24 | |
*** hoonetorg has joined #openstack-keystone | 23:36 | |
*** felipemonteiro has quit IRC | 23:42 | |
*** felipemonteiro has joined #openstack-keystone | 23:45 | |
*** felipemonteiro has quit IRC | 23:55 | |
kmalloc | lbragstad: more dead code removal coming soon [woo] | 23:56 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!