*** etoews has joined #openstack-sdks | 00:38 | |
*** TravT has quit IRC | 01:14 | |
*** etoews has quit IRC | 01:15 | |
*** etoews has joined #openstack-sdks | 01:38 | |
*** sharwell_ has quit IRC | 01:47 | |
*** HenryG has quit IRC | 02:08 | |
*** samchoi has quit IRC | 02:32 | |
*** etoews has quit IRC | 03:00 | |
*** thurloat has quit IRC | 07:04 | |
*** edleafe has quit IRC | 07:08 | |
*** thurloat has joined #openstack-sdks | 07:11 | |
*** edleafe has joined #openstack-sdks | 07:11 | |
*** jamie_h has joined #openstack-sdks | 11:23 | |
*** HenryG has joined #openstack-sdks | 11:47 | |
*** krames has joined #openstack-sdks | 12:51 | |
*** etoews has joined #openstack-sdks | 13:26 | |
*** etoews has quit IRC | 14:10 | |
*** TravT has joined #openstack-sdks | 14:35 | |
*** etoews has joined #openstack-sdks | 14:46 | |
*** mfer has joined #openstack-sdks | 14:52 | |
*** krames has quit IRC | 15:07 | |
*** krames has joined #openstack-sdks | 15:08 | |
*** ycombina_ has joined #openstack-sdks | 15:21 | |
*** ycombina_ has quit IRC | 15:21 | |
*** jamie_h has quit IRC | 15:22 | |
*** jamie_h has joined #openstack-sdks | 15:25 | |
etoews | mfer: i don't know if you can comment on it but is there any progress in getting someone from HP working on jclouds? i know there was someone in the pipe but i haven't seen any activity. | 16:08 |
---|---|---|
*** samchoi has joined #openstack-sdks | 16:10 | |
mfer | etoews yes... sorta. i should have clarity in days rather than weeks | 16:15 |
etoews | mfer: nice. thx. | 16:15 |
mfer | i just came back from a conference so i'm not up to speed on most things right now | 16:16 |
etoews | fyi, i'm off to apachecon next week so i'll be out for the early part of the week. | 16:16 |
mfer | ok | 16:17 |
*** wchrisj_ has joined #openstack-sdks | 17:03 | |
*** etoews has quit IRC | 17:08 | |
*** etoews has joined #openstack-sdks | 18:10 | |
wchrisj_ | krames: yo | 18:49 |
wchrisj_ | krames: got a sec? | 18:49 |
*** jamie_h has quit IRC | 18:52 | |
krames | wchrisj I have about 5 minutes before my next meeting | 18:53 |
krames | whats up? | 18:53 |
wchrisj_ | krames: in your service_catalog class, what is the intent of the "service_net" keyword? | 18:57 |
wchrisj_ | krames: looks like you are handling two types of endpoints - public and internal | 18:58 |
krames | service net is our internal network | 18:58 |
wchrisj_ | krames: BUT - we have a third admin | 18:58 |
krames | gotcha | 18:58 |
wchrisj_ | krames: 'adminURL' | 18:58 |
wchrisj_ | I think we need to genericize this | 18:58 |
krames | let me look at the code again | 18:58 |
wchrisj_ | krames: for ex, here is the keystone endpoiints returned from the SC: | 18:59 |
wchrisj_ | - endpoints: | 18:59 |
wchrisj_ | - adminURL: http://172.16.0.2:35357/v2.0 | 18:59 |
wchrisj_ | region: RegionOne | 18:59 |
wchrisj_ | internalURL: http://172.16.0.2:5000/v2.0 | 18:59 |
wchrisj_ | id: 33acf98719aa45b09334f413458b0665 | 18:59 |
wchrisj_ | publicURL: http://172.16.0.2:5000/v2.0 | 18:59 |
wchrisj_ | endpoints_links: [] | 18:59 |
wchrisj_ | type: identity | 18:59 |
wchrisj_ | name: keystone | 18:59 |
wchrisj_ | krames: I'm a bit concerned b/c this is breaking change (likely) | 19:00 |
krames | yeah | 19:00 |
krames | something tells me we should switch that over to symbols | 19:01 |
wchrisj_ | I think we should pass in the symbol for each: :public, :internal, :admin | 19:02 |
krames | sounds good to me | 19:02 |
wchrisj_ | I'll tackle it | 19:02 |
wchrisj_ | thx! | 19:02 |
krames | k | 19:02 |
krames | thanks | 19:02 |
wchrisj_ | we can discuss in our meeting if necessary | 19:03 |
wchrisj_ | later | 19:03 |
*** TravT|2 has joined #openstack-sdks | 20:02 | |
*** TravT has quit IRC | 20:02 | |
*** HenryG has quit IRC | 20:06 | |
*** TravT|2 has quit IRC | 20:59 | |
*** mfer has quit IRC | 21:35 | |
*** HenryG has joined #openstack-sdks | 21:39 | |
wchrisj_ | terrylhowe: Do you understand the distinctions between publicURL/internalURL/adminURL in keystone? | 21:48 |
*** krames has quit IRC | 21:54 | |
*** krames has joined #openstack-sdks | 21:57 | |
*** krames has quit IRC | 22:02 | |
terrylhowe | Yeh, I definitely would *not* claim to be an expert on that wchrisj_ | 22:07 |
wchrisj_ | terrylhowe: np | 22:07 |
jamielennox | wchrisj_: what do you want to know? | 22:13 |
wchrisj_ | jamielennox: What's the purpose of each one? | 22:14 |
wchrisj_ | admin = admin, I get that jamielennox: | 22:14 |
*** HenryG_ has joined #openstack-sdks | 22:14 | |
jamielennox | public is intended to be user exposed | 22:14 |
jamielennox | internal is intended to be a local network address | 22:14 |
wchrisj_ | jamielennox: what's internal for? | 22:14 |
wchrisj_ | ok | 22:15 |
wchrisj_ | why doe it matter? jamielennox: | 22:15 |
*** HenryG has quit IRC | 22:15 | |
jamielennox | honestly i'm not sure it probably could have been done with just fixing the routing tables internally | 22:15 |
*** HenryG_ has quit IRC | 22:15 | |
jamielennox | but there are times like for service -> service communication where you want them on the internal network only | 22:16 |
*** HenryG has joined #openstack-sdks | 22:16 | |
jamielennox | or you don't have that address exposed to people at all | 22:16 |
wchrisj_ | jamielennox: OK, just trying to understand use cases for each | 22:16 |
wchrisj_ | jamielennox: so likely no permissions diff between public and internal? | 22:16 |
jamielennox | AFAIK there are only a couple of places where it's actually supprted | 22:16 |
jamielennox | no public and internal are supposed to be the exact same endpoint just different addresses | 22:16 |
wchrisj_ | jamielennox: and obviously differences between internal/public vs admin... | 22:17 |
wchrisj_ | thx jamielennox | 22:17 |
jamielennox | yes - for v2 API - for keystone v3 admin == public | 22:17 |
jamielennox | and for every other service we are saying 'please never implement a different admin service' | 22:18 |
jamielennox | i don't think that anyone does | 22:18 |
wchrisj_ | jamielennox - so only one "permssions" scoped url for v3? | 22:18 |
wchrisj_ | jamielennox - if admin = public | 22:19 |
wchrisj_ | jamielennox - right? | 22:19 |
jamielennox | well the endpoints are all the same, i can't remember if we say you should set the admin URL to internal or public | 22:19 |
wchrisj_ | ok | 22:19 |
jamielennox | but the v3 client really should use the public endpoint | 22:20 |
jamielennox | well the public or internal endpoint | 22:20 |
jamielennox | but yes, all 'permissions' are done via the roles in the token in v3 | 22:21 |
wchrisj_ | jamielennox - makes sense | 22:21 |
*** rgbkrk has joined #openstack-sdks | 22:41 | |
*** rgbkrk has quit IRC | 22:50 | |
*** rgbkrk has joined #openstack-sdks | 23:14 | |
*** HenryG_ has joined #openstack-sdks | 23:30 | |
*** HenryG has quit IRC | 23:32 | |
*** etoews has quit IRC | 23:34 | |
*** HenryG has joined #openstack-sdks | 23:38 | |
*** HenryG_ has quit IRC | 23:41 | |
*** HenryG has quit IRC | 23:42 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!