Monday, 2022-05-09

opendevreviewJakob Meng proposed openstack/ansible-collections-openstack master: Update identity_domain_info to use proxy layer  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83944507:34
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack master: Refactored identity_domain_info  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83944508:00
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack master: Reverted identity_role_info from identity.users() to search_users()  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108208:34
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack master: Reverted identity_user_info from identity.users() to search_users()  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108208:43
opendevreviewArx Cruz proposed openstack/ansible-collections-openstack master: Update catalog service for the new sdk  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83935208:53
opendevreviewArx Cruz proposed openstack/ansible-collections-openstack master: Update routers_info for the new SDK  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83848909:01
opendevreviewArx Cruz proposed openstack/ansible-collections-openstack master: Update port info  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83308309:03
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack master: Update identity_role_info for latest openstacksdk release  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83775109:07
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Synchronize updates to identity_domain_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108509:32
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: [DNM] Backported changes to identity_domain_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108509:46
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: [DNM] Backported changes to identity_role_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84109109:47
opendevreviewArx Cruz proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83936510:04
opendevreviewMerged openstack/ansible-collections-openstack master: Refactored identity_domain_info  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83944510:12
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_domain_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108510:22
opendevreviewArx Cruz proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83936510:31
opendevreviewArx Cruz proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83936510:38
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83936511:18
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_domain_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108511:25
opendevreviewMerged openstack/ansible-collections-openstack master: Reverted identity_user_info from identity.users() to search_users()  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108212:03
opendevreviewArx Cruz proposed openstack/ansible-collections-openstack master: Update identity_group_info to new sdk  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83936512:59
opendevreviewHervĂ© Beraud proposed openstack/microversion-parse master: Drop python3.6/3.7 support in testing runtime  https://review.opendev.org/c/openstack/microversion-parse/+/84062113:10
opendevreviewMerged openstack/ansible-collections-openstack master: Update identity_role_info for latest openstacksdk release  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/83775113:25
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_role_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84109115:05
opendevreviewAnanya proposed openstack/ansible-collections-openstack master: Moves image_info from cloud to proxy object  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/82815815:23
opendevreviewAnanya proposed openstack/ansible-collections-openstack master: Moves image_info from cloud to proxy object  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/82815815:52
opendevreviewMerged openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_domain_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84108516:14
opendevreviewAnanya proposed openstack/ansible-collections-openstack master: Moves image_info from cloud to proxy object  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/82815816:17
opendevreviewribaudr proposed openstack/python-openstackclient master: Microversion 2.91: Support specifying destination host to unshelve  https://review.opendev.org/c/openstack/python-openstackclient/+/83190216:54
opendevreviewribaudr proposed openstack/python-openstackclient master: Microversion 2.91: Support specifying destination host to unshelve  https://review.opendev.org/c/openstack/python-openstackclient/+/83190216:56
opendevreviewRafael Castillo proposed openstack/ansible-collections-openstack master: Add script to test return values based off of doc string  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84071317:57
opendevreviewAnanya proposed openstack/ansible-collections-openstack master: Moves image_info from cloud to proxy object  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/82815818:02
TheJuliaOh hai everybody!18:29
dtantsuro/18:29
TheJuliaI believe we've found an issue when using the sdk. Specifically when the SDK gets a 307 Redirect to a new host, it turns around and starts to duplicate the arguments18:29
dtantsurlikely even keystoneauth18:29
* dtantsur is staring out the session code18:29
TheJuliaquite possible as it seem sto have redirect handling there18:30
TheJuliahttps://storyboard.openstack.org/#!/story/201002918:30
dtantsurI was able to reproduce it locally by inserting a redirect in front of ironic: https://paste.opendev.org/show/b7NUZbgk2HNMinwqOTik/18:31
TheJuliadtantsur: any chance you can see what the actual http response body is on the redirect?18:32
dtantsurlet me hack it18:32
* dtantsur loves bifrost: no containers, no troubles, only git, vim and you18:32
TheJuliak, because the redirect takes the new location and all the prior args18:32
TheJuliaand possibly cats... and whiskey18:33
dtantsurwe silence keystoneauth logging, don't we...18:34
TheJuliaI think the default is things >= warning are suppressed18:35
TheJuliaerr <= warning18:35
dtantsurhmmmmmm, I definitely use a warning18:35
dtantsurhold on, I'm stupid18:36
* dtantsur is changing the server side.....18:36
dtantsurmoral: don't debug stuff with cold18:36
TheJulia++18:37
TheJuliaI was doing that last week... it was not fun18:37
TheJuliastill am a little bit18:37
dtantsurRedirecting to http://127.0.0.1:6385/18:39
dtantsurRedirecting to http://127.0.0.1:6385/v1/18:39
dtantsurRedirecting to http://127.0.0.1:6385/v1/nodes?provision_state=active18:39
dtantsurthe last one is probably relevant18:39
TheJuliaso the server, as it should, responds with the full location18:40
dtantsurending GET to http://127.0.0.1:6385/v1/nodes?provision_state=active with {'headers': {...}, 'params': {'provision_state': 'active'}, 'verify': True, 'allow_redirects': False}18:41
dtantsuryep yep18:41
dtantsurwe have params both in the URL (from the redirect) and in kwargs18:41
TheJuliaand yeah, the code is just not *really* redirect safe if there are parameters18:41
dtantsurthe bug is somewhere around Session._send_request18:41
TheJuliayup18:42
TheJuliamaybe strip params out if they are already in the url?18:42
dtantsuris it safe to just drop params on redirect?18:43
dtantsurI feel like it is, but maybe my brain is missing anything?18:43
TheJuliaI think it is going to depend on the server response18:43
dtantsurwell, the server knows nothing about our split between the URL and params18:43
dtantsurit receives http://server?foo=bar18:43
* TheJulia looks up the redirect RFCs18:43
dtantsurif it drops foo=bar from the redirect, I guess it means that?18:43
* dtantsur is not sure18:43
TheJuliathe RFC suggests a final end location for the request18:47
dtantsurI don't see the same problem in pure requests18:47
TheJuliabut that may of course be dynamic18:47
dtantsurI wonder if it gets rid of params pretty early18:48
dtantsuryeah, it merges params into the URL: https://github.com/psf/requests/blob/40956723f27daf5e0d9759208ca69cef236ab339/requests/models.py#L474-L48118:49
dtantsurand thus it does not have issues like this18:49
TheJuliaIt that seems like an okay-ish thing to do on redirect since the response body is supposed to have the uri18:49
* TheJulia wonders how this didn't get noticed previously... say with HTTP->HTTPS redirects18:50
dtantsuryep. and it effectively drops the params on redirect since it takes the new URL18:50
dtantsurTheJulia: I don't think we haver HTTP->HTTPS redirects18:51
TheJuliaat least in our jobs/config18:51
dtantsurthat would involve having two ports for API?18:51
TheJuliawell18:51
dtantsurit's purely a browser case where there is a default port (80)18:51
TheJuliaif you were doing a "connect to this with http" and redirect it to https, then I could see it18:51
dtantsurthat's not how things work, unfortunately18:51
TheJuliabut I also thing that would happen with the version detection, and then it might continue talking to the same server18:51
dtantsurthe best thing you get is HTTP 400 from nginx with an HTML18:51
TheJuliawell, how we work, but ops wise, it could be configured that way18:52
dtantsurTheJulia: https://paste.opendev.org/show/bykSBnlqUoJsfVV9iRf5/ 18:52
dtantsuryeah, probably. dunno if anyone ever bothers18:52
TheJuliadtantsur: two separate servers18:52
TheJuliain this day and age... unlikely I guess18:52
dtantsurit's nearly 9pm, I'll have to drop soon. if you have anything by tomorrow, I can test it in the morning.18:53
TheJuliadtantsur: ack, have a wonderful evening18:53
dtantsuryou too!18:54
opendevreviewJakob Meng proposed openstack/ansible-collections-openstack master: Moves image_info from cloud to proxy object  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/82815819:09
opendevreviewRafael Castillo proposed openstack/ansible-collections-openstack master: Add module to test return values based off of doc string  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84071319:18
opendevreviewRafael Castillo proposed openstack/ansible-collections-openstack master: Add module to test return values based off of doc string  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84071319:19
opendevreviewMerged openstack/ansible-collections-openstack stable/1.0.0: Backported changes to identity_role_info from master branch  https://review.opendev.org/c/openstack/ansible-collections-openstack/+/84109121:09
opendevreviewJulia Kreger proposed openstack/keystoneauth master: WIP: Only include parameters not present upon redirect  https://review.opendev.org/c/openstack/keystoneauth/+/84116921:09
TheJuliadtantsur: ^^ I'm having python resolver issues, so if your able to \o/, if not I can retry tomorrow.21:10

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!