*** eandersson8 has joined #openstack-oslo | 01:00 | |
*** eandersson has quit IRC | 01:01 | |
*** eandersson8 is now known as eandersson | 01:01 | |
*** ralonsoh has joined #openstack-oslo | 07:08 | |
*** tkajinam has quit IRC | 08:18 | |
*** rpittau|afk is now known as rpittau | 08:23 | |
*** tosky has joined #openstack-oslo | 09:29 | |
*** takamatsu has joined #openstack-oslo | 09:38 | |
*** zzzeek has quit IRC | 10:04 | |
*** zzzeek has joined #openstack-oslo | 10:05 | |
*** tkajinam has joined #openstack-oslo | 11:04 | |
*** rpittau is now known as rpittau|bbl | 11:32 | |
*** takamatsu has quit IRC | 11:56 | |
*** raildo has joined #openstack-oslo | 12:25 | |
*** Andreas681 has joined #openstack-oslo | 12:56 | |
Andreas681 | I'm trying this: | 12:57 |
---|---|---|
Andreas681 | from oslo_policy import generator | 12:57 |
Andreas681 | And i'm trying to get it formated to this | 12:57 |
Andreas681 | # DEPRECATED "identity:get_user":"rule:admin_or_owner" has been | 12:57 |
Andreas681 | HEAD /v3/users | 12:57 |
Andreas681 | How do I go about to format and sort it to this? | 12:58 |
*** openstackstatus has quit IRC | 13:01 | |
*** openstack has joined #openstack-oslo | 13:05 | |
*** ChanServ sets mode: +o openstack | 13:05 | |
*** rpittau|bbl is now known as rpittau | 13:10 | |
*** jberg-dev has joined #openstack-oslo | 13:16 | |
*** zzzeek has quit IRC | 13:18 | |
*** zzzeek has joined #openstack-oslo | 13:20 | |
*** rcernin has quit IRC | 13:23 | |
*** tkajinam has quit IRC | 13:25 | |
Andreas681 | {'keystone': <itertools.chain object at 0x7f9b9e3b7c50>} | 13:30 |
Andreas681 | Need to interate and format it somehow | 13:30 |
openstackgerrit | Daniel Bengtsson proposed openstack/oslo.serialization master: Remove the yamlutils module. https://review.opendev.org/707366 | 13:33 |
*** Andreas681 has quit IRC | 13:41 | |
*** Andreas681 has joined #openstack-oslo | 13:51 | |
Andreas681 | oslo_policy.generator.get_policies_dict(namespaces) | 13:52 |
Andreas681 | Returns | 13:52 |
*** bnemec is now known as beekneemech | 14:37 | |
beekneemech | Andreas681: I think some of your messages are missing or got delayed. Can you maybe paste the incorrect output you're seeing in http://paste.openstack.org/ ? | 14:40 |
beekneemech | andrewbogott: There's no policy channel specifically, but the Keystone folks are the ones who drove the scope work so you might want to try pinging them in #openstack-keystone. | 14:41 |
andrewbogott | beekneemech: thanks! | 14:41 |
Andreas681 | beekneemech http://paste.openstack.org/show/791230/ | 14:47 |
Andreas681 | I guess `generator.get_policies_dict(["keystone"])` doesn't give Documented policies with descriptions etc | 14:49 |
*** Andreas681 has quit IRC | 15:05 | |
*** Andreas681 has joined #openstack-oslo | 15:06 | |
beekneemech | Andreas681: I think what you're seeing there is just the output you get from __str__: https://github.com/openstack/oslo.policy/blob/master/oslo_policy/policy.py#L1134 | 15:17 |
beekneemech | If you log i.description I think you'll find that the description is there, it's just not in the default str cast. | 15:17 |
*** Andreas681 has quit IRC | 15:19 | |
*** Andreas681 has joined #openstack-oslo | 15:38 | |
Andreas681 | beekneemech Hmmmm.. Let me try | 15:42 |
Andreas681 | beekneemech intresting, yes.. this gives: | 15:46 |
Andreas681 | 2020-03-27 15:42:48.397736 WARNING:policies_plugin.api.rest.policy_client:Show access rule details. | 15:46 |
Andreas681 | That's for these 3 policies | 15:47 |
Andreas681 | WARNING:policies_plugin.api.rest.policy_client:"identity:get_access_rule": "(role:reader and system_scope:all) or user_id:%(target.user.id)s" | 15:47 |
Andreas681 | user_id:%(targetWARNING:policies_plugin.api.rest.policy_client:"identity:delete_access_rule": "(role:admin and system_scope:all) or user_id:%(target.user.id)s" | 15:47 |
Andreas681 | Are there more details for each policy, or is that it? | 15:47 |
beekneemech | Andreas681: Yeah, that's the only description for that rule: https://github.com/openstack/keystone/blob/master/keystone/common/policies/access_rule.py#L37 | 15:58 |
beekneemech | If you want to see what the descriptions are without digging into the code, keystone has docs for all of their rules already: https://docs.openstack.org/keystone/train/configuration/policy.html | 15:58 |
beekneemech | Also, any of the fields from the rule object should be available when you're iterating: https://github.com/openstack/oslo.policy/blob/master/oslo_policy/policy.py#L1098 | 16:00 |
*** sean-k-mooney has quit IRC | 16:02 | |
*** sean-k-mooney has joined #openstack-oslo | 16:03 | |
Andreas681 | I'm building a policy horizon-panel, to get a better visualization of all the policies, so I want as much information of each policy as possible. Thanks for feedback :) | 16:03 |
beekneemech | Cool, sounds interesting. Let us know if you have any more questions. | 16:07 |
*** melwitt is now known as jgwentworth | 16:12 | |
openstackgerrit | melanie witt proposed openstack/oslo.db master: DNM: investigating bug 1844929 https://review.opendev.org/714802 | 16:12 |
openstack | bug 1844929 in OpenStack Compute (nova) "grenade jobs failing due to "Timed out waiting for response from cell" in scheduler" [High,Confirmed] https://launchpad.net/bugs/1844929 | 16:12 |
openstackgerrit | melanie witt proposed openstack/oslo.db stable/train: DNM: investigating bug 1844929 https://review.opendev.org/714833 | 16:13 |
openstack | bug 1844929 in OpenStack Compute (nova) "grenade jobs failing due to "Timed out waiting for response from cell" in scheduler" [High,Confirmed] https://launchpad.net/bugs/1844929 | 16:13 |
Andreas681 | beekneemech Are there any function or method in the `oslo_policy`-module to make it easier iterate all of the fields in the object? | 16:18 |
Andreas681 | like the one you sent: https://github.com/openstack/keystone/blob/master/keystone/common/policies/access_rule.py#L37 | 16:18 |
Andreas681 | I want name, check_str, scope_types, description, operations | 16:19 |
Andreas681 | or do I have to come up with a nestled loops '=D | 16:20 |
beekneemech | Andreas681: I don't think there's any way to iterate, but all of those things should be available from the rule objects. | 16:22 |
beekneemech | You can see how we're processing a rule in this function: https://github.com/openstack/oslo.policy/blob/master/oslo_policy/generator.py#L142 | 16:22 |
Andreas681 | Thanks! | 16:26 |
*** hemna is now known as pewp | 16:27 | |
*** pewp is now known as _pewp_ | 16:30 | |
*** _pewp_ is now known as hemna | 16:34 | |
*** hemna is now known as _pewp_ | 16:35 | |
*** _pewp_ is now known as hemna | 16:37 | |
*** smcginnis has quit IRC | 16:50 | |
openstackgerrit | Monty Taylor proposed openstack/pbr master: Map requires-python to python-requires https://review.opendev.org/715484 | 17:00 |
*** Andreas681 has quit IRC | 17:40 | |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.i18n master: Update hacking for Python3 https://review.opendev.org/715497 | 18:03 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.concurrency master: Update hacking for Python3 https://review.opendev.org/715499 | 18:07 |
*** smcginnis has joined #openstack-oslo | 18:08 | |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.context master: Update hacking for Python3 https://review.opendev.org/715502 | 18:10 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.cache master: Update hacking for Python3 https://review.opendev.org/715503 | 18:11 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.db master: Update hacking for Python3 https://review.opendev.org/715504 | 18:12 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.limit master: Update hacking for Python3 https://review.opendev.org/715507 | 18:15 |
openstackgerrit | Ghanshyam Mann proposed openstack/pbr master: Replace old requires-python with python-requires https://review.opendev.org/715509 | 18:22 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.messaging master: Update hacking for Python3 https://review.opendev.org/715510 | 18:28 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.cache master: Update hacking for Python3 https://review.opendev.org/715503 | 18:34 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.policy master: Update hacking for Python3 https://review.opendev.org/715515 | 18:44 |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.vmware master: Update hacking for Python3 https://review.opendev.org/715520 | 18:51 |
*** rpittau is now known as rpittau|afk | 18:57 | |
*** gmann is now known as gmann_lunch | 18:59 | |
*** ralonsoh has quit IRC | 19:16 | |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.i18n master: Update hacking for Python3 https://review.opendev.org/715497 | 19:24 |
*** gmann_lunch is now known as gmann | 19:29 | |
openstackgerrit | Andreas Jaeger proposed openstack/oslo.db master: Update hacking for Python3 https://review.opendev.org/715504 | 19:35 |
*** whoami-rajat has quit IRC | 19:44 | |
*** whoami-rajat has joined #openstack-oslo | 19:44 | |
*** iurygregory has quit IRC | 19:46 | |
openstackgerrit | John Eckersberg proposed openstack/tooz master: Add TLS support in etcd3 and etcd3gw drivers https://review.opendev.org/710539 | 19:57 |
openstackgerrit | John Eckersberg proposed openstack/tooz master: Add TLS support in etcd3 and etcd3gw drivers https://review.opendev.org/710539 | 20:02 |
openstackgerrit | Andreas Jaeger proposed openstack/futurist master: Update hacking for Python3 https://review.opendev.org/715534 | 20:05 |
openstackgerrit | Andreas Jaeger proposed openstack/debtcollector master: Update hacking for Python3 https://review.opendev.org/715536 | 20:06 |
openstackgerrit | Andreas Jaeger proposed openstack/pycadf master: Update hacking for Python3 https://review.opendev.org/715539 | 20:07 |
openstackgerrit | Andreas Jaeger proposed openstack/automaton master: Update hacking for Python3 https://review.opendev.org/715540 | 20:11 |
*** raildo has quit IRC | 22:02 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!