Re: [Openstack] Entities in OpenStack Auth

2011-03-04 Thread Eric Day
On Fri, Mar 04, 2011 at 09:46:16AM -0500, Jay Pipes wrote: > Are you proposing that an entity always be the owner of something? I'm proposing every resources has an owner. > If so, I dislike using the term "entity", since entity does not imply > ownership. I'd prefer "owner" or "account", since t

Re: [Openstack] Entities in OpenStack Auth

2011-03-04 Thread Jay Pipes
Hi Eric, interesting proposal. Comments inline. On Tue, Mar 1, 2011 at 9:14 PM, Eric Day wrote: > For that query you would, but not all. If you want to create a new > instance for project1 you would: > > nova.openstack.org/v1.1/project1/servers > > Or if you wanted to reboot instance X in project

Re: [Openstack] Entities in OpenStack Auth

2011-03-03 Thread Jay Pipes
On Tue, Mar 1, 2011 at 7:46 PM, Monsyne Dragon wrote: > On 3/1/11 6:32 PM, Justin Santa Barbara wrote: > 2) Preclude us from having e.g. multi-project queries (show me all my > servers in projects A and B)? > > It doesn't really preclude multi-account queries, if they are needed.  You > would be '

Re: [Openstack] Entities in OpenStack Auth

2011-03-02 Thread Eric Day
On Wed, Mar 02, 2011 at 07:43:08PM +, Glen Campbell wrote: > According to the proposed API 1.1 spec, it *does* use an extra element in > the path to indicate the account; this is (presumably) returned by the > auth system: > > http://servers.api.openstack.org/v1.1/1234/servers/12 > > Where "1

Re: [Openstack] Entities in OpenStack Auth

2011-03-02 Thread Glen Campbell
According to the proposed API 1.1 spec, it *does* use an extra element in the path to indicate the account; this is (presumably) returned by the auth system: http://servers.api.openstack.org/v1.1/1234/servers/12 Where "1234" is the account ID (actually a token, I believe) and "12" is the server I

Re: [Openstack] Entities in OpenStack Auth

2011-03-02 Thread Eric Day
e more difficult. Also, some people > like URLs to be readable and/or memorable. > > > -----Original Message- > From: "Eric Day" > Sent: Tuesday, March 1, 2011 9:14pm > To: "Justin Santa Barbara" > Cc: openstack@lists.launchpad.net > Subject:

Re: [Openstack] Entities in OpenStack Auth

2011-03-02 Thread Brian Lamar
quot;Justin Santa Barbara" Cc: openstack@lists.launchpad.net Subject: Re: [Openstack] Entities in OpenStack Auth For that query you would, but not all. If you want to create a new instance for project1 you would: nova.openstack.org/v1.1/project1/servers Or if you wanted to reboot instance X in

Re: [Openstack] Entities in OpenStack Auth

2011-03-02 Thread Eric Day
On Wed, Mar 02, 2011 at 05:07:04AM -0600, Michael Barton wrote: > > Swift > > > > Swift has the concept of accounts, users, and groups. An account > > contains users, and a user can belong to groups. Accounts names have an > > abstraction layer, so while you may login with account "example.com", >

Re: [Openstack] Entities in OpenStack Auth

2011-03-02 Thread Michael Barton
> Swift > > Swift has the concept of accounts, users, and groups. An account > contains users, and a user can belong to groups. Accounts names have an > abstraction layer, so while you may login with account "example.com", > the account name used within swift is a UUID with a prefix. > > By default

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Paul Voccio
Eric, I think that¹s an interesting proposal. I think I'll try to put something together to visual this. pvo On 3/1/11 8:14 PM, "Eric Day" wrote: >For that query you would, but not all. If you want to create a new >instance for project1 you would: > >nova.openstack.org/v1.1/project1/servers >

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Justin Santa Barbara
Thanks Eric. That actually makes a lot of sense to me, and seems to tally with my understanding of the auth sequence for v1.0 and v1.1 and compatibility behavior for v1.0 as I described it. I think my personal preference would be not to pass the project this way, because it's another "special-cas

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Eric Day
For that query you would, but not all. If you want to create a new instance for project1 you would: nova.openstack.org/v1.1/project1/servers Or if you wanted to reboot instance X in project1: nova.openstack.org/v1.1/project1/servers/X Note that the following resource is not the same as the last

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Justin Santa Barbara
If we're always going to pass the same user-id token (for a particular user), what's the value in passing it at all? Why not get it from the authentication token? e.g. my X-Auth-Token could look like: "justinsb project1,project2,project3 5OPr9UR2xk32K9ArAjO562e" (i.e. my username, projects and a

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Eric Day
Hi Justin, On Tue, Mar 01, 2011 at 05:14:42PM -0800, Justin Santa Barbara wrote: >However, what I don't understand is how I can query my servers in project1 >and project2 (but not those in project3). *The only way I could see is >doing something like this: >*nova.openstack.org/v1.1

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Justin Santa Barbara
Here's how I understand it. Suppose my username is justin and I'm a member of 3 projects: project1, project2 and project3 1. If I log in using the v1.0 API, I hit auth.openstack.org/v1.0 and I get X-Server-Management-Url: nova.openstack.org/v1.0/justin. 2. Presumably that does a 'join ac

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Eric Day
On Tue, Mar 01, 2011 at 06:46:21PM -0600, Monsyne Dragon wrote: > 1) Break CloudServers API compatibility (a total no-no)? > and > >No. The value is added to the server management url that is reported when >you login. This is how the current Rackspace cloudservers API handles >

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Monsyne Dragon
On 3/1/11 6:32 PM, Justin Santa Barbara wrote: Won't putting this in the URL both: 1) Break CloudServers API compatibility (a total no-no)? and No. The value is added to the server management url that is reported when you login. This is how the current Rackspace cloudservers API handles this.

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Justin Santa Barbara
Won't putting this in the URL both: 1) Break CloudServers API compatibility (a total no-no)? and 2) Preclude us from having e.g. multi-project queries (show me all my servers in projects A and B)? The options I see open to us are: a) A cookie / header b) A query parameter c) Something in the requ

Re: [Openstack] Entities in OpenStack Auth

2011-03-01 Thread Monsyne Dragon
On 3/1/11 6:11 PM, Eric Day wrote: [ ... trimmed ... ] For the OpenStack API, we need something a bit different from what we have today. We currently have no way of passing in a project name, so I propose we add an "entity" element to the path name (just like Swift does). For example, instead of

[Openstack] Entities in OpenStack Auth

2011-03-01 Thread Eric Day
Hi everyone, I'd like to build off the last auth thread about where the various auth components are today and now look at what types of entities they manage. Right now only Swift and Nova have entities, so only those will be mentioned. Swift Swift has the concept of accounts, users, and groups.