Thursday, 2017-07-27

*** Turingtoast has joined #swift300:08
*** Turingtoast has quit IRC07:29
*** Turingtoast has joined #swift308:12
*** Turingtoast has quit IRC11:02
*** _CrustY has joined #swift312:58
*** CrustY_ has quit IRC12:58
*** _CrustY has quit IRC13:12
*** _CrustY has joined #swift313:13
*** Turingtoast has joined #swift313:32
*** Turingtoast has quit IRC14:21
*** Turingtoast has joined #swift315:30
*** Turingtoast has quit IRC15:31
*** Turingtoast has joined #swift316:26
*** Turingtoast has quit IRC16:33
*** iGeni has quit IRC17:25
*** cfarquhar has joined #swift317:35
*** notmyname has quit IRC17:43
*** notmyname has joined #swift317:44
*** chsc has joined #swift319:14
*** chsc has quit IRC19:14
*** chsc has joined #swift319:14
cfarquharhello.  Does anyone here have swift3 working with ocata or pike?  I have things working perfectly in Mitaka, but have not successfully moved past the issue described at https://ask.openstack.org/en/question/106557/swift3s3-api-errors-when-authenticating-with-ec2-keys/.19:28
timburkecfarquhar: how are you getting swift3? would you be comfortable running an untagged sha from master, or should i be bugging kota_ to do a release?19:37
timburkepike keystone *should* be able to work, but you'd need a recent-enough version of swift319:38
timburke(really, i should be bugging kota_ to do a release *anyway*... but there's enough other stuff going on that it hasn't been a high priority for me)19:39
cfarquhartimburke: I'm using the tip of master in both my ocata and pike attempts19:42
cfarquharI get to the point that S3Token sends EC2 credentials to keystone, and gets a token back (I think) from keystone, but something is going wrong after that.19:43
timburkegot proxy logs i could see?19:44
timburkealso, sorry for not sorting out the gate on https://review.openstack.org/#/c/473939/ -- i really need to fix that!19:44
cfarquharno worries! it's been on my to-do list to investigate but I've had more pressing things :\19:46
cfarquharhttp://paste.openstack.org/show/616785/19:46
timburkeit's a stupid version conflict, fairly certain it's resulting from our keystone gate not using upper-constraints and trying to run mitaka keystone19:51
timburkebut back to your current problem -- looks like swift could contact keystone just fine, and knew enough to get the project it should use... is s3_acl enabled?19:52
cfarquharno it's set to False19:54
timburkecool, just wanted to check since it uses a different access model19:55
cfarquharIf it helps, I'm getting user_token = None and user_token_valid = False here: https://github.com/openstack/keystonemiddleware/blob/4.16.0/keystonemiddleware/auth_token/__init__.py#L635, which is giving me that "Deferred reject downstream"19:55
cfarquhar(I'm assuming line #7 in my paste is where things begin to go wrong)19:56
timburkeoh! right! i think it's to do with the pipeline ordering change following https://github.com/openstack/swift3/commit/6ffcc2920:00
cfarquharnice! testing now.20:02
cfarquharthank you!20:04
cfarquharthat works!20:04
timburkeperfect! i'm glad it works :-)20:04
timburkefwiw, the trouble was that authtoken strips out the headers that commit populates, which is reasonable behavior on their part. the bit in the commit message about old pipelines continuing to work assumed v2 responses, where we'd also populate the auth token -- when handling v3 responses, s3token never even sees a token id, so it *can't* populate it20:05
cfarquharmakes sense.  thanks for the details.  I briefly considered pipeline issues, but mostly in the context of unrelated modules we add.  I'll submit a PR to reorder it in the README.20:12
timburke...and i'll work on getting the gate untuck so we can actually land it :-)20:16
*** openstackgerrit has joined #swift320:38
openstackgerritCharles Farquhar proposed openstack/swift3 master: Update pipeline ordering in README.md  https://review.openstack.org/48819720:38
openstackgerritTim Burke proposed openstack/swift3 master: Add support for upper-constraints.txt  https://review.openstack.org/48820020:49
*** ChadTaljaardt has joined #swift321:00
*** cfarquhar has quit IRC21:47
*** Turingtoast has joined #swift321:50
*** openstack has joined #swift322:46
*** chsc_ has quit IRC23:27

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!