Re: [openstack-dev] distibuted caching system in front of mysql server for openstack transactions

2013-10-28 Thread Dolph Mathews
It's not specific to mysql (or sql at all), but keystone is using dogpile.cache around driver calls to a similar effect. http://dogpilecache.readthedocs.org/en/latest/ It can persist to memcache, redis, etc. https://github.com/openstack/keystone/blob/master/keystone/common/cache/core.py On

Re: [openstack-dev] Remove vim modelines?

2013-10-25 Thread Dolph Mathews
On Thu, Oct 24, 2013 at 1:48 PM, Robert Collins robe...@robertcollins.netwrote: *) They help casual contributors *more* than long time core contributors : and those are the folk that are most likely to give up and walk away. Keeping barriers to entry low is an important part of making

Re: [openstack-dev] Remove vim modelines?

2013-10-25 Thread Dolph Mathews
On Fri, Oct 25, 2013 at 2:43 PM, Robert Collins robe...@robertcollins.netwrote: On 26 October 2013 08:40, Dolph Mathews dolph.math...@gmail.com wrote: On Thu, Oct 24, 2013 at 1:48 PM, Robert Collins robe...@robertcollins.net wrote: *) They help casual contributors *more* than long

Re: [openstack-dev] [keystone] updating password user_crud vs credentials

2013-10-23 Thread Dolph Mathews
On Wed, Oct 23, 2013 at 8:14 AM, Chmouel Boudjnah chmo...@enovance.comwrote: Hello, If i understand correctly (and I may be wrong) we are moving away from user_crud to use /credentials for updating password including ec2. The credentials facility was implemented in this blueprint :

Re: [openstack-dev] RFC - Icehouse logging harmonization

2013-10-23 Thread Dolph Mathews
On Wed, Oct 23, 2013 at 1:20 PM, Sean Dague s...@dague.net wrote: One of the efforts that we're working on from the QA team is tooling that ensures we aren't stack tracing into our test logs during normal tempest runs. Random stack traces are scary to cloud admins consuming OpenStack logs,

Re: [openstack-dev] excessively difficult to support both iso8601 0.1.4 and 0.1.8 as deps

2013-10-23 Thread Dolph Mathews
On Wed, Oct 23, 2013 at 2:30 PM, Robert Collins robe...@robertcollins.netwrote: On 24 October 2013 07:34, Mark Washenberger mark.washenber...@markwash.net wrote: Hi folks! 1) Adopt 0.1.8 as the minimum version in openstack-requirements. 2) Do nothing (i.e. let Glance behavior depend on

Re: [openstack-dev] [GIT] Reset a commit in Gerrit

2013-10-20 Thread Dolph Mathews
On Sun, Oct 20, 2013 at 1:31 PM, Edgar Magana emag...@plumgrid.com wrote: Floren, Just just need to send a patch to gerrit. From you local repo, do the necessary fixes and be sure everything is just as you want. Then simply run: #git commit -a --amend #git review The only gotcha here

Re: [openstack-dev] [qa][keystone] Adding client library related tests to tempest

2013-10-18 Thread Dolph Mathews
On Fri, Oct 18, 2013 at 10:34 AM, Steven Hardy sha...@redhat.com wrote: Hi all, Starting a thread to discuss $subject, as requested in: https://review.openstack.org/#/c/51558/ First a bit of background. I wrote a keystoneclient patch, and ayoung stated he'd like it tested via tempest

Re: [openstack-dev] [qa][keystone] Adding client library related tests to tempest

2013-10-18 Thread Dolph Mathews
On Fri, Oct 18, 2013 at 3:19 PM, David Stanek dsta...@dstanek.com wrote: On Fri, Oct 18, 2013 at 1:48 PM, Sean Dague s...@dague.net wrote: On 10/18/2013 12:04 PM, Brant Knudson wrote: 2) git cloneing the keystoneclient doesn't work well with parallel testing (we have a similar problem in

[openstack-dev] [keystone] design summit session proposal deadline

2013-10-16 Thread Dolph Mathews
I'll be finalizing the design summit schedule [1] for keystone following the weekly meeting [2] on Tuesday, October 22nd 18:00 UTC. Please have your proposals submitted before then. So far I think everyone has done a GREAT job self-organizing the proposed sessions to avoid overlap, but we

Re: [openstack-dev] [keystone] design summit session proposal deadline

2013-10-16 Thread Dolph Mathews
On Wed, Oct 16, 2013 at 11:23 AM, Dolph Mathews dolph.math...@gmail.com wrote: I'll be finalizing the design summit schedule [1] for keystone following the weekly meeting [2] on Tuesday, October 22nd 18:00 UTC. Please have your proposals submitted before then. So far I think everyone has done

Re: [openstack-dev] Keystone RC1 Bug Question 1209440

2013-10-15 Thread Dolph Mathews
On Tue, Oct 15, 2013 at 12:05 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello, I have a generic question about the logic now available for LDAP users in association with bug 1209440. How do you associate a read-only LDAP user with a domain? I suppose it

Re: [openstack-dev] [Keystone] stabilizing internal APIs

2013-10-15 Thread Dolph Mathews
On Tue, Oct 15, 2013 at 6:05 PM, Morgan Fainberg m...@metacloud.com wrote: Hi Fellow Developers (and those who interface with keystone at the code level), I wanted to reach out to the ML and see what the opinions were about starting to stabilize the internal APIs (wherever possible) for the

Re: [openstack-dev] Need suggestions and pointers to start contributing for development :

2013-10-11 Thread Dolph Mathews
On Friday, October 11, 2013, Mayank Mittal wrote: Hi Teams, Please suggest and guide for starting to contribute in development. About me - I have been working on L2/L3 protocol, SNMP, NMS development and ready to contribute as a full timer to openstack. PS : My interest lies in LB and

Re: [openstack-dev] Thanks for fixing my patch

2013-10-11 Thread Dolph Mathews
On Fri, Oct 11, 2013 at 1:34 PM, Clint Byrum cl...@fewbar.com wrote: Recently in the TripleO meeting we identified situations where we need to make it very clear that it is ok to pick up somebody else's patch and finish it. We are broadly distributed, time-zone-wise, and I know other teams

Re: [openstack-dev] Keystone OS-EP-FILTER descrepancy

2013-10-09 Thread Dolph Mathews
On Tue, Oct 8, 2013 at 3:20 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello, I am attempting to test the Havana v3 OS-EP-FILTER extension with the latest RC1 bits and I get a 404 error response. The documentation actually shows 2 different URIs for this

Re: [openstack-dev] [savanna] using keystone client

2013-10-08 Thread Dolph Mathews
On Tue, Oct 8, 2013 at 6:50 AM, Jon Maron jma...@hortonworks.com wrote: On Oct 7, 2013, at 10:02 PM, Dolph Mathews dolph.math...@gmail.com wrote: On Mon, Oct 7, 2013 at 5:57 PM, Jon Maron jma...@hortonworks.com wrote: Hi, I'm trying to use the keystone client code in savanna/utils

Re: [openstack-dev] [savanna] using keystone client

2013-10-07 Thread Dolph Mathews
On Mon, Oct 7, 2013 at 5:57 PM, Jon Maron jma...@hortonworks.com wrote: Hi, I'm trying to use the keystone client code in savanna/utils/openstack but my attempt to sue it yield: 'Api v2.0 endpoint not found in service identity' This sounds like the service catalog for keystone itself

Re: [openstack-dev] [Nova][Keystone][glance] Keystone V3 Domains and Nova

2013-10-01 Thread Dolph Mathews
on a domain-basis: - availability zones and/or host aggregates - quotas /me facepalm I can't believe I forgot about these. I take back the yet to hear! - IP ranges (ok, maybe a quantum discussion) Henry On 1 Oct 2013, at 06:45, Dolph Mathews dolph.math...@gmail.com wrote: On Mon, Sep 30

Re: [openstack-dev] [keyston] Failed with Table 'keystone.project' doesn't exist, keystone tenant-create --name=admin won't create table if not exist?

2013-09-30 Thread Dolph Mathews
On Monday, September 30, 2013, Neil Zhao wrote: Hi, All, I'm running the following cmd yet got errors: $ keystone tenant-create --name=admin WARNING: Bypassing authentication using a token endpoint (authentication credentials are being ignored). An unexpected error prevented the

Re: [openstack-dev] [Nova][Keystone] Keystone V3 Domains and Nova

2013-09-30 Thread Dolph Mathews
On Mon, Sep 30, 2013 at 11:42 PM, Christopher Yeoh cbky...@gmail.comwrote: Hi, I've been looking into how Nova might support Keystone V3 domains and I'm having a bit of trouble getting my head around exactly how we'd use domain scoped tokens. With the V3 Nova API we no longer specify the

Re: [openstack-dev] [keystone] Case sensitivity backend databases

2013-09-26 Thread Dolph Mathews
On Thu, Sep 26, 2013 at 11:02 AM, Brant Knudson b...@acm.org wrote: On Thu, Sep 26, 2013 at 4:44 AM, Ralf Haferkamp rha...@suse.de wrote: As Dolph already suggested we should not allow usernames that just differ in capitalization (JDoe vs. jdoe) to co-exist. (Which could be an argument

Re: [openstack-dev] [keystone] Case sensitivity backend databases

2013-09-25 Thread Dolph Mathews
On Wed, Sep 25, 2013 at 3:45 AM, Henry Nash hen...@linux.vnet.ibm.comwrote: Hi Do we specify somewhere whether text field matching in the API is case sensitive or in-sensitive? I'm thinking about filters, as well as user and domain names in authentication. I think our current

Re: [openstack-dev] On the usage of pip vs. setup.py install

2013-09-23 Thread Dolph Mathews
On Mon, Sep 23, 2013 at 8:44 PM, Monty Taylor mord...@inaugust.com wrote: tl;dr - easy_install sucks, so use pip It is common practice in python to run: python setup.py install or python setup.py develop So much so that we spend a giant amount of effort to make sure that those always

Re: [openstack-dev] Is Project ID always a number?

2013-09-20 Thread Dolph Mathews
On Fri, Sep 20, 2013 at 12:43 PM, Steve Martinelli steve...@ca.ibm.comwrote: Unless I'm mistaken, the project ID should be a UUID. In our current implementation, it happens to be a UUID4 expressed in hex: $ python -c import uuid; print uuid.uuid4().hex I believe it was an auto-incrementing

[openstack-dev] [keystone] PTL Candidacy

2013-09-20 Thread Dolph Mathews
Hello! I'd like to nominate myself once more as PTL for Keystone. Since becoming PTL for Keystone last release, I've gained a new perspective on the community which has changed my understanding of the PTL's role rather dramatically from what I thought I was getting myself into (by which I mean, I

Re: [openstack-dev] Client and Policy

2013-09-19 Thread Dolph Mathews
projects. If a CVS is found in the po From: Adam Young ayo...@redhat.com ayo...@redhat.com To: Dolph Mathews dolph.math...@gmail.com dolph.math...@gmail.com, Yee, Guang guang@hp.com guang@hp.com, Henry Nash hen...@linux.vnet.ibm.com hen...@linux.vnet.ibm.com, Morgan Fainberg m

Re: [openstack-dev] OpenStack Identity API Documentation Kudos

2013-09-17 Thread Dolph Mathews
On Tue, Sep 17, 2013 at 6:00 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello to all you documenters, ** ** I have spent the day reviewing the latest OpenStack Identity API documents and want to say that you have done a truly TERRIFIC job. The

Re: [openstack-dev] Backwards incompatible migration changes - Discussion

2013-09-16 Thread Dolph Mathews
On Mon, Sep 16, 2013 at 5:31 AM, Michael Still mi...@stillhq.com wrote: On Fri, Sep 13, 2013 at 7:51 AM, Dolph Mathews dolph.math...@gmail.com wrote: ++ Data backups are a solved problem, and no DB admin should trust an application to perform its own backups. I'm not completely sure I

Re: [openstack-dev] WebUI and user roles

2013-09-16 Thread Dolph Mathews
On Mon, Sep 16, 2013 at 11:01 AM, Adam Young ayo...@redhat.com wrote: Looks like this has grown into a full discussion. Opening up to the dev mailing list. On 09/16/2013 10:43 AM, Lyle, David (Cloud Services) wrote: I did run into a couple of fundamental limitations with the policy API as

Re: [openstack-dev] [requirements] Review request for adding ordereddict

2013-09-16 Thread Dolph Mathews
On Mon, Sep 16, 2013 at 11:34 AM, Paul Bourke pauldbou...@gmail.com wrote: Hi all, I've submitted https://review.openstack.org/#/c/46474/ to add ordereddict to openstack/requirements. Related thread: http://lists.openstack.org/pipermail/openstack-dev/2013-September/015121.html The

Re: [openstack-dev] WebUI and user roles

2013-09-16 Thread Dolph Mathews
some algorithm on its name. The SQL policy driver supports names (and any other arbitrary attribute), although it's not part of the spec. We just need some agreement on the some algorithm bit (and an implementation!). ** ** Mark ** ** *From:* Dolph Mathews [mailto:dolph.math

Re: [openstack-dev] WebUI and user roles

2013-09-16 Thread Dolph Mathews
On Mon, Sep 16, 2013 at 6:18 PM, Lyle, David (Cloud Services) david.l...@hp.com wrote: Adam Young ayo...@redhat.com wrote: Looks like this has grown into a full discussion. Opening up to the dev mailing list. On 09/16/2013 10:43 AM, Lyle, David (Cloud Services) wrote: I did run into a

Re: [openstack-dev] Keystone and Multiple Identity Sources

2013-09-12 Thread Dolph Mathews
On Thu, Sep 12, 2013 at 3:15 AM, David Chadwick d.w.chadw...@kent.ac.ukwrote: On 11/09/2013 22:05, Adam Young wrote: What's the use case for including providers in the service catalog? i.e. why do Identity API clients need to be aware of the Identity Providers? In the federation

Re: [openstack-dev] Backwards incompatible migration changes - Discussion

2013-09-12 Thread Dolph Mathews
On Thu, Sep 12, 2013 at 2:34 AM, Roman Podolyaka rpodoly...@mirantis.comwrote: I can't agree more with Robert. Even if it was possible to downgrade all migrations without data loss, it would be required to make backups before DB schema upgrade/downgrade. E.g. MySQL doesn't support

Re: [openstack-dev] Keystone and Multiple Identity Sources

2013-09-11 Thread Dolph Mathews
On Wed, Sep 11, 2013 at 10:25 AM, Adam Young ayo...@redhat.com wrote: David Chadwick wrote up an in depth API extension for Federation: https://review.openstack.org/#**/c/39499https://review.openstack.org/#/c/39499 There is an abfab API proposal as well: https://review.openstack.org/#**

Re: [openstack-dev] Keystone and Multiple Identity Sources

2013-09-11 Thread Dolph Mathews
On Wed, Sep 11, 2013 at 12:31 PM, David Chadwick d.w.chadw...@kent.ac.ukwrote: Further supplementary information to Adam's email below, is that there are already one further federation protocol profiles that has been published: for an external Keystone acting as an IdP at

Re: [openstack-dev] [Keystone] Enforcing cert validation in auth_token middleware

2013-09-11 Thread Dolph Mathews
On Wed, Sep 11, 2013 at 10:25 PM, Jamie Lennox jlen...@redhat.com wrote: With the aim of replacing httplib and cert validation with requests[1] I've put forward the following review to use the requests library for auth_token middleware. https://review.openstack.org/#/c/34161/ This adds 2

Re: [openstack-dev] OpenStack + PyPy: Status and goals

2013-09-10 Thread Dolph Mathews
On Tue, Sep 10, 2013 at 11:01 AM, Thierry Carrez thie...@openstack.orgwrote: Alex Gaynor wrote: Many of you have probably seen me send review requests in the last few weeks about adding PyPy support to various OpenStack projects. A few people were confused by these, so I wanted to fill

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

2013-09-04 Thread Dolph Mathews
On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando sorla...@nicira.comwrote: whenever I run devstack keystone falies to start because dogpile.cache is not installed; this is easily solved by installing it, but I wonder if it should be in requirements.txt Also, since the cache appears to be

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

2013-09-04 Thread Dolph Mathews
On Wed, Sep 4, 2013 at 9:58 AM, David Stanek dsta...@dstanek.com wrote: On Wed, Sep 4, 2013 at 10:23 AM, Dolph Mathews dolph.math...@gmail.comwrote: On Wed, Sep 4, 2013 at 9:14 AM, Salvatore Orlando sorla...@nicira.comwrote: whenever I run devstack keystone falies to start because

Re: [openstack-dev] [Keystone][Devstack] is dogpile.cache a requirement?

2013-09-04 Thread Dolph Mathews
you *should* have it installed, even though it won't be used :-/ https://github.com/openstack/keystone/blob/6979ae010d1fa20caeda13c8f88cdf6dbfa259c6/requirements.txt#L22 Salvatore On 4 September 2013 15:23, Dolph Mathews dolph.math...@gmail.com wrote: On Wed, Sep 4, 2013 at 9:14 AM

Re: [openstack-dev] [keystone][heat] Question re deleting trusts via trust token

2013-09-03 Thread Dolph Mathews
On Tue, Sep 3, 2013 at 5:52 PM, Steven Hardy sha...@redhat.com wrote: Hi, I have a question for the keystone folks re the expected behavior when deleting a trust. Is it expected that you can only ever delete a trust as the user who created it, and that you can *not* delete the trust when

Re: [openstack-dev] [neutron] Why does nova.network.neutronv2.get_client(context, admin=True) drop auth_token?

2013-08-28 Thread Dolph Mathews
On Wed, Aug 28, 2013 at 7:22 PM, Yongsheng Gong gong...@unitedstack.comwrote: For admin, we must use admin token. In general, the token from API context is not of role admin. So... because the authenticated user making the API request *may not* have admin access, you're dropping that

Re: [openstack-dev] [keystone] Two BPs for managing the tokens

2013-08-23 Thread Dolph Mathews
On Fri, Aug 23, 2013 at 10:51 AM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello, ** ** I would think you would want to reuse the same token but update the expiration time as if it were the first time the token had been generated. That wouldn't work

Re: [openstack-dev] [keystone] Two BPs for managing the tokens

2013-08-23 Thread Dolph Mathews
, 2013 12:24 PM, Dolph Mathews dolph.math...@gmail.com wrote: On Fri, Aug 23, 2013 at 10:51 AM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello, I would think you would want to reuse the same token but update the expiration time as if it were

Re: [openstack-dev] [keystone] driver/pluggable base classes and ABCMeta

2013-08-22 Thread Dolph Mathews
On Thu, Aug 22, 2013 at 12:22 AM, Morgan Fainberg m...@metacloud.com wrote: I've been doing some pondering on how Keystone handles the various pluggable systems with it's Manager / Driver architecture. Currently we implement the base driver class as follows: There is a driver object that

Re: [openstack-dev] [IMPORTANT] The Gate around Feature Freeze

2013-08-22 Thread Dolph Mathews
On Thu, Aug 22, 2013 at 7:48 PM, James E. Blair jebl...@openstack.orgwrote: Monty Taylor mord...@inaugust.com writes: The infra team has done a lot of work in prep for our favorite time of year, and we've actually landed several upgrades to the gate without which we'd be in particularly

[Openstack] python-keystoneclient v0.3.2 released

2013-08-22 Thread Dolph Mathews
python-keystoneclient v0.3.2 is now available on pypi [1]. This release notably includes Python lib support for managing consuming delegated authorization impersonation via the Identity API v3 trusts extension [2], along with numerous small improvements and bug fixes [3]. [1]:

Re: [openstack-dev] [keystone] [oslo] postpone key distribution bp until icehouse?

2013-08-21 Thread Dolph Mathews
On Wed, Aug 21, 2013 at 10:44 AM, Jarret Raim jarret.r...@rackspace.comwrote: Dolph Mathews wrote: With regard to: https://blueprints.launchpad.net/keystone/+spec/key-distribution-server [...] Dolph: you don't mention Barbican at all, does that mean that the issue is settled

Re: [openstack-dev] [keystone] Help consuming trusts

2013-08-19 Thread Dolph Mathews
On Mon, Aug 19, 2013 at 6:06 AM, Steven Hardy sha...@redhat.com wrote: On Sun, Aug 18, 2013 at 07:02:04PM +0200, Matthieu Huin wrote: Hi Steve, It might be a bit late for this, but here's a script I wrote when experimenting with trusts:

Re: [openstack-dev] Code review study

2013-08-15 Thread Dolph Mathews
On Thu, Aug 15, 2013 at 7:57 AM, Christopher Yeoh cbky...@gmail.com wrote: On Thu, Aug 15, 2013 at 9:54 PM, Daniel P. Berrange berra...@redhat.comwrote:Commit message quality has improved somewhat since I first wrote published that page, but there's definitely still scope to improve

Re: [openstack-dev] Code review study

2013-08-15 Thread Dolph Mathews
On Thu, Aug 15, 2013 at 9:56 AM, Daniel P. Berrange berra...@redhat.comwrote: On Thu, Aug 15, 2013 at 09:46:07AM -0500, Dolph Mathews wrote: On Thu, Aug 15, 2013 at 7:57 AM, Christopher Yeoh cbky...@gmail.com wrote: On Thu, Aug 15, 2013 at 9:54 PM, Daniel P. Berrange berra

Re: [openstack-dev] Code review study

2013-08-15 Thread Dolph Mathews
On Thu, Aug 15, 2013 at 12:00 PM, Mark Washenberger mark.washenber...@markwash.net wrote: On Thu, Aug 15, 2013 at 5:12 AM, Christopher Yeoh cbky...@gmail.comwrote: On Thu, Aug 15, 2013 at 11:42 AM, Robert Collins robe...@robertcollins.net wrote: This may interest data-driven types

Re: [openstack-dev] [keystone] [oslo] postpone key distribution bp until icehouse?

2013-08-14 Thread Dolph Mathews
On Tue, Aug 13, 2013 at 5:54 PM, Simo Sorce s...@redhat.com wrote: On Tue, 2013-08-13 at 17:20 -0500, Dolph Mathews wrote: With regard to: https://blueprints.launchpad.net/keystone/+spec/key-distribution-server Well I am of course biased so take my comments with a grain of salt

Re: [openstack-dev] [keystone] Pagination

2013-08-13 Thread Dolph Mathews
On Tue, Aug 13, 2013 at 3:10 AM, Henry Nash hen...@linux.vnet.ibm.comwrote: Hi So few comebacks to the various comments: 1) While I understand the idea that a client would follow the next/prev links returned in collections, I wasn't aware that we considered 'page'/'per-page' as not

[openstack-dev] [keystone] [oslo] postpone key distribution bp until icehouse?

2013-08-13 Thread Dolph Mathews
With regard to: https://blueprints.launchpad.net/keystone/+spec/key-distribution-server During today's project status meeting [1], the state of KDS was discussed [2]. To quote ttx directly: we've been bitten in the past with late security-sensitive stuff and I'm a bit worried to ship late code

Re: [openstack-dev] Keystone Apache2 Installation Question

2013-08-12 Thread Dolph Mathews
What problem(s) are you running into when following the above documentation / examples? On Mon, Aug 12, 2013 at 3:32 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello, I am looking for documentation on how to install/configure Apache2 as the Keystone front

Re: [openstack-dev] [keystone] Pagination

2013-08-12 Thread Dolph Mathews
The way paginated links are defined by the v3 API (via `next` and `previous` links), it can be completely up to the driver as to what the query parameters look like. So, the client shouldn't have (nor require) any knowledge of how to build query parameters for pagination. It just needs to follow

Re: [openstack-dev] [keystone] Pagination

2013-08-12 Thread Dolph Mathews
arbitrary and can vary by driver. On Mon, 2013-08-12 at 19:05 -0500, Dolph Mathews wrote: The way paginated links are defined by the v3 API (via `next` and `previous` links), it can be completely up to the driver as to what the query parameters look like. So, the client shouldn't have (nor

Re: [openstack-dev] Motion to start using Gerrit for TC votes

2013-08-07 Thread Dolph Mathews
On Wed, Aug 7, 2013 at 3:58 AM, Thierry Carrez thie...@openstack.orgwrote: Monty Taylor wrote: What if instead we had a repo with a bunch of ReStructureText in it - perhaps a copy of the TC charter and then a dir for additional things the TC has decided. That repo would be autopublished to

Re: [openstack-dev] [Keystone] V3 Extensions Discoverability

2013-08-07 Thread Dolph Mathews
On Wed, Aug 7, 2013 at 7:58 AM, Sam Harwell sam.harw...@rackspace.comwrote: Please excuse me for being vague with many parts of this reply. Since I'm still learning the terminology used throughout this project, I chose to be non-specific rather than risk using the wrong name and distract from

Re: [openstack-dev] [Keystone] V3 Extensions Discoverability

2013-08-06 Thread Dolph Mathews
On Tue, Aug 6, 2013 at 9:28 AM, Jorge Williams jorge.willi...@rackspace.com wrote: On Aug 6, 2013, at 8:36 AM, Adam Young wrote: On 08/06/2013 01:19 AM, Jamie Lennox wrote: Hi all, Partially in response to the trusts API review in keystoneclient

Re: [openstack-dev] [Keystone] V3 Extensions Discoverability

2013-08-06 Thread Dolph Mathews
On Tue, Aug 6, 2013 at 10:53 AM, Jay Pipes jaypi...@gmail.com wrote: On 08/06/2013 10:45 AM, David Chadwick wrote: On 06/08/2013 14:46, Jay Pipes wrote: API extensions are more hassle than anything else. Let us promote standards, not endless extensibility at the expense of usability.

[openstack-dev] Proposing Morgan Fainberg for keystone-core

2013-08-06 Thread Dolph Mathews
Through feedback on code reviews and blueprints, Morgan clearly has the best interests of the project itself in mind. I'd love for his votes to carry a bit more weight! https://review.openstack.org/#/dashboard/2903 Respond with +1/-1's before Friday, thanks! -Dolph

Re: [openstack-dev] Motion to start using Gerrit for TC votes

2013-08-06 Thread Dolph Mathews
On Tue, Aug 6, 2013 at 3:32 PM, Monty Taylor mord...@inaugust.com wrote: Hi! Currently, we make motions by email, then we discuss them by mailing list, then we discuss them more in IRC, then we vote on them - at which point the actual thing voted on may or may not get recorded somewhere

Re: [openstack-dev] Separate Migration Repos

2013-08-01 Thread Dolph Mathews
On Wed, Jul 31, 2013 at 5:00 AM, Henry Nash hen...@linux.vnet.ibm.comwrote: Hi Adam, Wanted to just give you more detail on the issue I keep pressing on for your change (https://review.openstack.org/#/c/36731/). For extensions which create their own private tables, I totally get it. I'd

Re: [openstack-dev] Separate Migration Repos

2013-08-01 Thread Dolph Mathews
On Thu, Aug 1, 2013 at 12:28 PM, Adam Young ayo...@redhat.com wrote: On 08/01/2013 11:40 AM, Dolph Mathews wrote: On Wed, Jul 31, 2013 at 5:00 AM, Henry Nash hen...@linux.vnet.ibm.comwrote: Hi Adam, Wanted to just give you more detail on the issue I keep pressing on for your change

Re: [openstack-dev] [keystone] Extending policy checking to include target entities

2013-07-23 Thread Dolph Mathews
On Tue, Jul 23, 2013 at 10:40 AM, Henry Nash hen...@linux.vnet.ibm.comwrote: Hi As part of bp https://blueprints.launchpad.net/keystone/+spec/policy-on-api-target I have uploaded some example WIP code showing a proposed approach for just a few API calls (one easy, one more complex). I'd

Re: [openstack-dev] [keystone] long term fate of UUID token?

2013-07-18 Thread Dolph Mathews
There's still appears to be considerable demand for UUID tokens, considering their simplicity relative to PKI tokens (no additional setup required, convenient length for copy/pasting around). There are also trade-offs when deciding between UUID and PKI tokens (e.g. network chatter vs CPU time,

[openstack-dev] [keystone] Split the Identity Backend blueprint

2013-07-18 Thread Dolph Mathews
On Thu, Jul 18, 2013 at 3:05 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello Dolph, I am writing to find out why the “Split the Identity Backend” blueprint (*

Re: [openstack-dev] [keystone] Split the Identity Backend blueprint

2013-07-18 Thread Dolph Mathews
** ** *From:* Dolph Mathews [mailto:dolph.math...@gmail.com] *Sent:* Thursday, July 18, 2013 2:38 PM *To:* OpenStack Development Mailing List *Cc:* Miller, Mark M (EB SW Cloud - RD - Corvallis) *Subject:* [keystone] Split the Identity Backend blueprint ** ** ** ** On Thu, Jul 18

Re: [openstack-dev] [DB][Migrations] Switching to using of Alembic

2013-07-16 Thread Dolph Mathews
On Tue, Jul 16, 2013 at 11:53 AM, Doug Hellmann doug.hellm...@dreamhost.com wrote: On Tue, Jul 16, 2013 at 11:51 AM, Roman Podolyaka rpodoly...@mirantis.com wrote: Hello, stackers! Most of you who is interested in work around DB in OpenStack must have read this thread [1] started by

Re: [openstack-dev] [keystone] sqlite doesn't support migrations

2013-07-15 Thread Dolph Mathews
/2013 01:12 PM, Dolph Mathews wrote: Just as a general statement, outside the scope of openstack, I don't think sqlite is intended to support schema evolution. From the sqlite docs [1]: SQLite supports a limited subset of ALTER TABLE. [...] It is not possible to rename a column, remove

Re: [openstack-dev] [keystone] sqlite doesn't support migrations

2013-07-15 Thread Dolph Mathews
On Fri, Jul 12, 2013 at 3:19 PM, Monty Taylor mord...@inaugust.com wrote: On 07/11/2013 01:12 PM, Dolph Mathews wrote: Just as a general statement, outside the scope of openstack, I don't think sqlite is intended to support schema evolution. From the sqlite docs [1]: SQLite supports

Re: [openstack-dev] [keystone] sqlite doesn't support migrations

2013-07-15 Thread Dolph Mathews
On Mon, Jul 15, 2013 at 10:44 PM, Thomas Goirand z...@debian.org wrote: On 07/15/2013 11:07 PM, Adam Young wrote: On 07/15/2013 05:46 AM, Thomas Goirand wrote: On 07/15/2013 04:32 PM, Stephen Gran wrote: On 15/07/13 09:26, Thomas Goirand wrote: Dolph, If you do that, then you will be

Re: [openstack-dev] [Review] Use of exception for non-exceptional cases

2013-07-12 Thread Dolph Mathews
On Fri, Jul 12, 2013 at 10:09 AM, Monty Taylor mord...@inaugust.com wrote: On 07/11/2013 05:20 AM, Mark McLoughlin wrote: On Wed, 2013-07-10 at 19:49 -0400, Monty Taylor wrote: I'd like top-post and hijack this thread for another exception related thing: a) Anyone writing code such

Re: [openstack-dev] [Review] Use of exception for non-exceptional cases

2013-07-10 Thread Dolph Mathews
On Wed, Jul 10, 2013 at 1:01 PM, Nachi Ueno na...@ntti3.com wrote: HI folks I would like to ask the review criteria in the community. Should we use exception for non-exceptional cases when we can use parameter checking? Example1: Default value for array index try: value = list[5]

Re: [openstack-dev] [Review] Use of exception for non-exceptional cases

2013-07-10 Thread Dolph Mathews
On Wed, Jul 10, 2013 at 3:30 PM, Doug Hellmann doug.hellm...@dreamhost.comwrote: On Wed, Jul 10, 2013 at 3:57 PM, David Ripton drip...@redhat.com wrote: On 07/10/2013 02:01 PM, Nachi Ueno wrote: HI folks I would like to ask the review criteria in the community. Should we use exception

Re: [openstack-dev] The danger of capping python-*clients in core projects, and forbidding it in the future

2013-07-10 Thread Dolph Mathews
On Wednesday, July 10, 2013, Sean Dague wrote: Yesterday in the very exciting run around to figure out why the gate was broken, we realized something interesting. Because of the way the gate process pip requirements (one project at a time), on a current gate run we actually install and

Re: [openstack-dev] [Keystone] Best way to do something MySQL-specific?

2013-07-09 Thread Dolph Mathews
On Tuesday, July 9, 2013, Clint Byrum wrote: Excerpts from Adam Young's message of 2013-07-09 06:19:19 -0700: On 07/08/2013 11:06 PM, Clint Byrum wrote: Excerpts from Adam Young's message of 2013-07-08 17:32:30 -0700: On 07/08/2013 04:35 PM, Clint Byrum wrote: Excerpts from Adam

Re: [openstack-dev] [Keystone] How to write unit tests for db methods?

2013-07-09 Thread Dolph Mathews
I'm assuming you're referring to testing backend drivers as opposed to database migrations (tests/test_sql_upgrade.py). Backend agnostic tests land in tests/test_backend.py. Backend-specific tests, overrides, etc belong in tests/test_backend_sql.py, tests/test_backend_kvs.py, etc. Generally, you

Re: [openstack-dev] Program description for Oslo

2013-07-09 Thread Dolph Mathews
On Tue, Jul 9, 2013 at 3:22 PM, Monty Taylor mord...@inaugust.com wrote: On 07/09/2013 11:43 AM, Mark McLoughlin wrote: On Tue, 2013-07-09 at 11:39 -0400, Doug Hellmann wrote: On Tue, Jul 9, 2013 at 6:11 AM, Mark McLoughlin mar...@redhat.com wrote: Hey The

Re: [openstack-dev] [Keystone][Nova] Why migrate_version not InnoDB?

2013-07-05 Thread Dolph Mathews
On Mon, Jul 1, 2013 at 3:24 PM, David Ripton drip...@redhat.com wrote: On 07/01/2013 12:49 PM, Brant Knudson wrote: 'Stackers - I've got a review up in Keystone that converts tables from MyISAM to InnoDB [0], which I patterned after a change in Nova. One of the comments in the review is

Re: [openstack-dev] Move keypair management out of Nova and into Keystone?

2013-07-02 Thread Dolph Mathews
On Monday, July 1, 2013, Jamie Lennox wrote: On Mon, 2013-07-01 at 14:09 -0700, Nachi Ueno wrote: Hi folks I'm interested in it too. I'm working on VPN support for Neutron. Public key authentication is one of feature milestone in the IPsec implementation. But I believe key-pair

Re: [openstack-dev] disabling a tenant still allow user token

2013-06-21 Thread Dolph Mathews
On Fri, Jun 21, 2013 at 5:25 AM, Chmouel Boudjnah chmo...@enovance.comwrote: Hello, [moving on the public mailing list since this bug is anyway public] On 3 Jun 2013, at 17:25, Dolph Mathews dolph.math...@gmail.com wrote: Apologies for the delayed response on this. We have several related

Re: [openstack-dev] XML Support for Nova v3 API

2013-06-20 Thread Dolph Mathews
On Thu, Jun 20, 2013 at 10:51 AM, Russell Bryant rbry...@redhat.com wrote: On 06/20/2013 11:20 AM, Brian Elliott wrote: On Jun 19, 2013, at 7:34 PM, Christopher Yeoh cbky...@gmail.com wrote: Hi, Just wondering what people thought about how necessary it is to keep XML support for the

Re: [openstack-dev] Multiple API version endpoints

2013-06-20 Thread Dolph Mathews
Previously discussed: http://lists.openstack.org/pipermail/openstack-dev/2013-May/008436.html tl;dr Don't do any of that! -Dolph On Wed, Jun 19, 2013 at 7:31 PM, Frittoli, Andrea (Cloud Services) fritt...@hp.com wrote: Hi folks, ** ** While reviewing nova v3 tests, I realized that

<    1   2   3   4