Re: [openstack-dev] [nova][keystone] keystoneauth1 and keystonemiddle setting

On Mon, Aug 14, 2017 at 2:48 AM, Chen CH Ji wrote: > In fixing bug 1704798, there's a proposed patch > https://review.openstack.org/#/c/485121/7 > but we stuck at http_connection_timeout and timeout value in keystoneauth1 > and keystonemiddle repo > > basically we want to

Re: [openstack-dev] [api] [tc] Nominatimg Eric Fried for service-types-authority core

gt; > > If you don't like this idea but would like to say so privately, > > please contact me. Otherwise I'll give a few days and make it so. > > +1 for adding Eric. > > > > > The [tc] tag is on here because the repo is considered "owned by the > > tech

Re: [openstack-dev] [keystone][nova] Persistent application credentials

On Thu, Jul 20, 2017 at 8:02 PM, Zane Bitter wrote: > > * If Keystone supported either a public-key or a Kerberos-style > authentication mechanism to get a token Keystone (via support for accepting authentication from the web server hosting it) can be configured to accept

Re: [openstack-dev] [Keystone][Mistral][Devstack] Confusion between auth_url and auth_uri in keystone middleware

On Thu, Jun 15, 2017 at 1:12 PM, Harry Rybacki <hryba...@redhat.com> wrote: > On Thu, Jun 15, 2017 at 1:57 PM, Brant Knudson <b...@acm.org> wrote: > > > > > > On Thu, Jun 15, 2017 at 5:14 AM, Mikhail Fedosin <mfedo...@gmail.com> > wrote: > &g

Re: [openstack-dev] [Keystone][Mistral][Devstack] Confusion between auth_url and auth_uri in keystone middleware

On Thu, Jun 15, 2017 at 5:14 AM, Mikhail Fedosin wrote: > Recently I decided to remove deprecated parameters from keystone_authtoken > mistral config and replace them with recommended function of devstack [1]. > In doing so, I discovered a strange behavior of configuration

Re: [openstack-dev] [oslo][barbican][castellan] Proposal to rename Castellan to oslo.keymanager

On Wed, Mar 15, 2017 at 5:18 AM, Thierry Carrez wrote: > Julien Danjou wrote: > > On Tue, Mar 14 2017, Clint Byrum wrote: > > > >> +1 for just pulling it under the oslo umbrella but not renaming it. As > >> much as I like the uniformity oslo.keymanager would bring, I think

Re: [openstack-dev] [requirements] pycrypto is dead, long live pycryptodome... or cryptography...

On Wed, Mar 8, 2017 at 1:03 PM, Matthew Thode wrote: > So, pycrypto upstream is dead and has been for a while, we should look > at moving off of it for both bugfix and security reasons. > > Currently it's used by the following. > > barbican, cinder, trove, glance,

Re: [openstack-dev] [keystone][api] Changing devstack to not set up keystone on :5000 and :35357

en some discussion at an API WG meeting that I didn't know about until later. - Brant > On Fri, Feb 24, 2017 at 9:24 AM, Brant Knudson <b...@acm.org> wrote: > >> >> At the PTG there was some discussion about changing services to not >> listen on ports[0]. I'

[openstack-dev] [keystone][api] Changing devstack to not set up keystone on :5000 and :35357

At the PTG there was some discussion about changing services to not listen on ports[0]. I'd been working on this for devstack keystone off and on for some time[1], so I thought I'd dust off that work again to see what the problems were. Turns out things must have been fixed since, after rebasing

Re: [openstack-dev] [keystone] Do we really need two listening ports ?

On Wed, Feb 1, 2017 at 3:54 AM, Attila Fazekas wrote: > Hi all, > > Typically we have two keystone service listening on two separate ports > 35357 and 5000. > > Historically one of the port had limited functionality, but today I do not > see why we want > to have two

Re: [openstack-dev] [all] [barbican] [security] Why are projects trying to avoid Barbican, still?

On Wed, Jan 18, 2017 at 9:58 AM, Dave McCowan (dmccowan) wrote: > > On Mon, Jan 16, 2017 at 7:35 AM, Ian Cordasco > wrote: > >> Hi everyone, >> >> I've seen a few nascent projects wanting to implement their own secret >> storage to either replace

Re: [openstack-dev] [all] [barbican] [security] Why are projects trying to avoid Barbican, still?

On Mon, Jan 16, 2017 at 7:35 AM, Ian Cordasco wrote: > Hi everyone, > > I've seen a few nascent projects wanting to implement their own secret > storage to either replace Barbican or avoid adding a dependency on it. > When I've pressed the developers on this point, the

Re: [openstack-dev] [congress][oslo.config][keystone] NoSuchOptError: no such option project_domain_name in group [keystone_authtoken]

On Thu, Jan 12, 2017 at 4:31 PM, Eric K wrote: > On a freshly stacked devstack (Jan 12), attempting to access > `cfg.CONF.keystone_authtoken.project_domain_name` gave the > error: NoSuchOptError: no such option project_domain_name in group > [keystone_authtoken] > > I’m

Re: [openstack-dev] [all][i18n] how to indicate non-translatable identifiers in translatable strings?

On Wed, Nov 2, 2016 at 11:34 AM, Brian Rosmaita < brian.rosma...@rackspace.com> wrote: > This issue came up during a code review; I've asked around a bit but > haven't been able to find an answer. > > Some of the help output for utility scripts associated with Glance aren't > being translated, so

Re: [openstack-dev] Endpoint structure: a free-for-all

On Wed, Oct 19, 2016 at 2:27 PM, Brian Curtin wrote: ... > > This started back in August when it came up that we didn't know where > that Keystone v3 endpoint was. After talking with a few people, Steve > Martinelli mentioned that at least as of then, hitting the unversioned >

Re: [openstack-dev] [oslo] Adding gdavoian to oslo-core

On Mon, Oct 3, 2016 at 12:40 PM, Joshua Harlow wrote: > Greetings all stackers, > > I propose that we add Gevorg Davoian[1] to the oslo-core[2] team. > > Gevorg has been actively contributing to oslo for a while now, both in > helping make oslo better via code

Re: [openstack-dev] [oslo] Adding ozamiatin to oslo-core

On Mon, Oct 3, 2016 at 12:42 PM, Joshua Harlow wrote: > Greetings all stackers, > > I propose that we add Oleksii Zamiatin[1] to the oslo-core[2] team. > > Oleksii has been actively contributing to oslo for a while now, both in > helping make oslo better via code

Re: [openstack-dev] [keystone] gate-keystoneclient-dsvm-functional-ubuntu-xenial is broken

On Wed, Sep 21, 2016 at 8:59 AM, Rodrigo Duarte wrote: > After some investigation I've found the possible issue: the functional > tests run in parallel, some of them create and delete roles and others use > tokens to perform the creation/update/delete of other types of

Re: [openstack-dev] [keystone] new core reviewer (rderose)

On Thu, Sep 1, 2016 at 9:44 AM, Steve Martinelli wrote: > I want to welcome Ron De Rose (rderose) to the Keystone core team. In a > short time Ron has shown a very positive impact. Ron has contributed > feature work for shadowing LDAP and federated users, as well as

Re: [openstack-dev] [all][infra] Binary Package Dependencies - not only for Python

On Fri, Aug 12, 2016 at 2:53 PM, Jeremy Stanley wrote: > On 2016-08-12 21:20:34 +0200 (+0200), Julien Danjou wrote: > [...] > > If bindep.txt is present, are the "standard" packages still installed? > > If yes, this is going to be more challenging to get bindep.txt right, as >

Re: [openstack-dev] [devstack] How to enable SSL in devStack?

On Wed, Jul 20, 2016 at 12:29 PM, Rob Crittenden wrote: > Rob Crittenden wrote: > >> Andrey Pavlov wrote: >> >>> Hi, >>> >>> When I ran devstack with SSL I found a bug and tried to fix it - >>> https://review.openstack.org/#/c/242812/ >>> But no one agree with me. >>> Try to

Re: [openstack-dev] [keystone][all] Incorporating performance feedback into the review process

On Fri, Jun 3, 2016 at 2:35 PM, Lance Bragstad wrote: > Hey all, > > I have been curious about impact of providing performance feedback as part > of the review process. From what I understand, keystone used to have a > performance job that would run against proposed patches

Re: [openstack-dev] [horizon] Horizon in devstack is broken, rechecks are futile

On Fri, May 27, 2016 at 8:39 AM, Timur Sufiev wrote: > The root cause of Horizon issue has been identified and fixed at > https://review.openstack.org/#/c/321639/ > The next steps are to release new version of django-openstack-auth library > (which the above fix belongs

Re: [openstack-dev] disabling deprecated APIs by config?

On Wed, May 18, 2016 at 10:20 AM, Sean Dague wrote: > nova-net is now deprecated - https://review.openstack.org/#/c/310539/ > > And we're in the process in Nova of doing some spring cleaning and > deprecating the proxies to other services - >

Re: [openstack-dev] [tc] supporting Go

I'd be worried about bringing in a language that doesn't integrate well with Python, since I'd expect the normal route would be to take advantage of as much of the existing code as we have and only replace those parts that need replacing. From these web pages it looks like Go integrates with

Re: [openstack-dev] [requirements] Cruft entries found in global-requirements.txt

On Fri, May 6, 2016 at 1:20 PM, Davanum Srinivas wrote: > Folks, > > Thanks to Jeremy for pointing to [1]. Please see list below with > things that are considered cruft as they don't seem to appear in > requirements/test-requirements in projects. Some of them are clearly >

Re: [openstack-dev] [keystone] Token providers and Fernet as the default

On Tue, May 3, 2016 at 3:46 PM, Clint Byrum wrote: > Excerpts from Morgan Fainberg's message of 2016-05-03 11:13:38 -0700: > > On Tue, May 3, 2016 at 10:28 AM, Monty Taylor > wrote: > > > > > On 05/03/2016 11:47 AM, Clint Byrum wrote: > > > > > >>

Re: [openstack-dev] [keystone] Token providers and Fernet as the default

On Mon, May 2, 2016 at 6:26 PM, Clint Byrum wrote: > Hello! I enjoyed very much listening in on the default token provider > work session last week in Austin, so thanks everyone for participating > in that. I did not speak up then, because I wasn't really sure of this > idea

Re: [openstack-dev] [neutron][nova][oslo] Common backoff & timeout utils

On Wed, Apr 20, 2016 at 3:10 PM, Boden Russell wrote: > Today there are a number of places in nova, neutron and perhaps > elsewhere that employ backoff + timeout strategies (see [1] - [4]). > While we are working towards a unified approach in neutron for RPC [5], > it appears

Re: [openstack-dev] [python-keystoneclient] Return request-id to caller

On Wed, Apr 20, 2016 at 6:31 AM, Duncan Thomas wrote: > On 20 April 2016 at 08:08, koshiya maho > wrote: > > >> This design was discussed, reviewed and approved in cross-projects [1] and >> already implemented in nova, cinder and neutron. >>

Re: [openstack-dev] [keystone] Problem with WSGI on keystone

On Tue, Apr 19, 2016 at 11:57 AM, Rosensweig, Elisha (Nokia - IL) < elisha.rosensw...@nokia.com> wrote: > Hi All, > > Recently, I've been having trouble running stack.sh from scratch. With the > default configuration I've been using for a while, I get the following > error in

Re: [openstack-dev] [Keystone] State of Fernet Token deployment

On Mon, Apr 18, 2016 at 10:20 AM, Matt Fischer <m...@mattfischer.com> wrote: > On Mon, Apr 18, 2016 at 8:29 AM, Brant Knudson <b...@acm.org> wrote: > >> >> >> On Fri, Apr 15, 2016 at 9:04 PM, Adam Young <ayo...@redhat.com> wrote: >> >>>

Re: [openstack-dev] [Keystone] State of Fernet Token deployment

On Fri, Apr 15, 2016 at 9:04 PM, Adam Young wrote: > We all want Fernet to be a reality. We ain't there yet (Except for mfish > who has no patience) but we are getting closer. The goal is to get Fernet > as the default token provider as soon as possible. The review to do

Re: [openstack-dev] Which projects support wsgi / python3 in mitaka?

On Fri, Mar 25, 2016 at 9:54 AM, Matthew Thode wrote: > I'm updating the packaging for openstack in preparation for the release > and need some info to update correctly. I'm specifically looking at the > following services. > > I don't know if any of these services

Re: [openstack-dev] [all][zaqar][cloudkitty] Default ports list

On Thu, Mar 10, 2016 at 10:43 AM, Brant Knudson <b...@acm.org> wrote: > > > On Thu, Mar 10, 2016 at 8:10 AM, Thomas Herve <the...@redhat.com> wrote: > >> On Thu, Mar 10, 2016 at 2:55 PM, Sean Dague <s...@dague.net> wrote: >> > On 03/10/2016 08:40 AM, T

Re: [openstack-dev] [stable] Stable* wiki updates

Since there's no gerrit, I'll leave my comment here: +1 Thanks! On Fri, Mar 11, 2016 at 1:54 AM, Alan Pevec wrote: > Hi stable-maints, > > FYI I've updated https://wiki.openstack.org/wiki/StableBranch and > https://wiki.openstack.org/wiki/StableBranchRelease now that all >

Re: [openstack-dev] [all][zaqar][cloudkitty] Default ports list

On Thu, Mar 10, 2016 at 8:10 AM, Thomas Herve wrote: > On Thu, Mar 10, 2016 at 2:55 PM, Sean Dague wrote: > > On 03/10/2016 08:40 AM, Thomas Herve wrote: > >> On Thu, Mar 10, 2016 at 2:28 PM, Chris Dent > wrote: > >>> +many. It would

Re: [openstack-dev] [all] audience for release notes

On Fri, Feb 26, 2016 at 6:34 AM, Doug Hellmann wrote: > I've had a few conversations recently about "appropriate" content for > release notes, so I thought it was worth starting a separate thread here > to clarify. > > We have 3 potential audiences for release notes: > >

Re: [openstack-dev] [Nova] Should we signal backwards incompatible changes in microversions?

On Tue, Feb 16, 2016 at 1:04 PM, Dean Troyer wrote: > > > On Tue, Feb 16, 2016 at 12:17 PM, Sean Dague wrote: > >> Honestly, doing per API call version switching is probably going to end >> in tears. HTTP is stateless, so it's allowed, but it will end in tears

Re: [openstack-dev] [all] tenant vs. project

On Fri, Feb 12, 2016 at 7:42 AM, Sean Dague wrote: > On 02/12/2016 08:30 AM, Dean Troyer wrote: > > On Fri, Feb 12, 2016 at 6:01 AM, Sean Dague > > wrote: > > > > OpenStack is wildly inconsistent in it's use of tenant vs. project. > As

Re: [openstack-dev] [keystone][ec2-api] Moving EC2 Auth and S3Token to Externally supported

On Fri, Feb 5, 2016 at 1:03 PM, Dolph Mathews wrote: > > On Fri, Feb 5, 2016 at 12:37 PM, Andrey Pavlov > wrote: > >> swift3(s3) works like ec2-api. >> >> 1. swift3/ec2-api recieves AWS request >> 2. it parses signature and access_key (and other

Re: [openstack-dev] [api] service type vs. project name for use in headers

On Wed, Jan 27, 2016 at 1:47 PM, michael mccune wrote: > hi all, > > there have been a few reviews recently where the issue of service type > versus project name have come up for use in the headers. as usual this > conversation can get quite murky as there are several good

Re: [openstack-dev] [oslo] nominating Ronald Bradford for oslo-core

On Fri, Jan 29, 2016 at 3:15 PM, Rochelle Grober wrote: > I'm not a voting member of the Oslo team, but a BIG > > +1 > > From me. > > --Rocky > > -Original Message- > From: Joshua Harlow [mailto:harlo...@fastmail.com] > Sent: Thursday, January 28, 2016 11:38

Re: [openstack-dev] [oslo] nominating Alexis Lee for oslo-core

On Thu, Jan 28, 2016 at 4:05 PM, Doug Hellmann wrote: > I am nominating Alexis Lee (lxsli) for oslo-core. > > Alexis has been working on adding configuration file reloading to > oslo.config this cycle. The work isn't complete, but at this point > he probably knows as much

Re: [openstack-dev] [oslo] Sachi King for oslo core

On Sun, Jan 24, 2016 at 8:51 PM, Robert Collins wrote: > Hey, so I'd like to propose Sachi - one of my HPE colleages who has > been helping out with pbr for a while now, for oslo core. pbr is > pretty quiet as you know, so its a bit hard to assess her work based > on

Re: [openstack-dev] [python-keystoneclient] return-request-id-to-caller

On Tue, Dec 22, 2015 at 2:02 AM, koshiya maho wrote: > Hi, > > I want to add support for returning 'x-openstack-request-id' in > python-keystoneclient as per the design proposed in cross-project specs. > > Cross-project spec has been already approved. : > >

Re: [openstack-dev] [oslo][keystone] Move oslo.policy from oslo to keystone

; >> > project itself (oslo.policy) just because there might be a shift in > >> the > >>> group of maintainers! Either way, let's definitely not do that. > >>> > >>>> > >>>> -- Dims > >>>>

[openstack-dev] [oslo][keystone] Move oslo.policy from oslo to keystone

I'd like to propose moving oslo.policy from the oslo program to the keystone program. Keystone developers know what's going on with oslo.policy and I think are more interested in what's going on with it so that reviews will get proper vetting, and it's not like oslo doesn't have enough going on

Re: [openstack-dev] [oslo][keystone] Move oslo.policy from oslo to keystone

On Wed, Dec 16, 2015 at 11:13 AM, Brant Knudson <b...@acm.org> wrote: > > I'd like to propose moving oslo.policy from the oslo program to the > keystone program. Keystone developers know what's going on with oslo.policy > and I think are more interested in what's going on with

Re: [openstack-dev] [glance][keystone][artifacts] Service Catalog name for Glance Artifact Repository API

On Mon, Dec 14, 2015 at 9:28 AM, Ian Cordasco wrote: > > > On 12/14/15, 02:18, "Kuvaja, Erno" wrote: > > >> -Original Message- > >> From: McLellan, Steven > >> Sent: Friday, December 11, 2015 6:37 PM > >> To: OpenStack Development Mailing List

Re: [openstack-dev] [oslo][glance][all] Removing deprecated functions from oslo_utils.timeutils

On Thu, Dec 10, 2015 at 11:10 AM, Flavio Percoco <fla...@redhat.com> wrote: > On 10/12/15 08:21 -0600, Brant Knudson wrote: > >> >> >> On Thu, Dec 10, 2015 at 7:26 AM, Sean Dague <s...@dague.net> wrote: >> >>On 12/10/2015 01:56 AM, Joshua Harl

Re: [openstack-dev] [oslo][glance][all] Removing deprecated functions from oslo_utils.timeutils

On Thu, Dec 10, 2015 at 7:26 AM, Sean Dague wrote: > On 12/10/2015 01:56 AM, Joshua Harlow wrote: > > Shouldn't be to hard (although it's probably not on each oslo project, > > but on the consumers projects). > > > > The warnings module can turn warnings into raised exceptions

Re: [openstack-dev] [glance] Auth_version from 'old style' URLs in the database

On Thu, Dec 3, 2015 at 10:24 AM, Bunting, Niall wrote: > Hi, > > Currently glance will use an auth_url if in the database. Eg. > 10.0.0.8:5000/v2.0 > > However glance currently takes the auth_version from the config > files. Therefore this can lead to a mismatch of

Re: [openstack-dev] [Openstack-operators] [keystone] Removing functionality that was deprecated in Kilo and upcoming deprecated functionality in Mitaka

On Tue, Dec 1, 2015 at 12:57 AM, Steve Martinelli wrote: > Trying to summarize here... > > - There isn't much interest in keeping eventlet around. > - Folks are OK with running keystone in a WSGI server, but feel they are > constrained by Apache. > - uWSGI could help to

Re: [openstack-dev] [keystone][stable] nominating lin hua cheng for keystone-stable-maint

On Tue, Nov 17, 2015 at 5:24 PM, Steve Martinelli wrote: > I'd like to nominate Lin Hua Cheng for keystone-stable-maint. He has been > doing reviews on keystone's liberty and kilo stable branches since mitaka > development has opened, and being a member of

Re: [openstack-dev] [Oslo][TaskFlow] Proposal for new core reviewer (greg hill)

Looks like he's doing good reviews so +1. - Brant On Wed, Nov 11, 2015 at 2:02 PM, Joshua Harlow wrote: > Greetings all stackers, > > I propose that we add Greg Hill[1] to the taskflow-core[2] team. > > Greg (aka jimbo) has been actively contributing to taskflow for a >

Re: [openstack-dev] [requirements] [infra] speeding up gate runs?

On Wed, Nov 4, 2015 at 6:47 AM, Sean Dague wrote: > I was spot checking the grenade multinode job to make sure it looks like > it was doing the correct thing. In doing so I found that ~15minutes of > it's hour long build time is compiling lxml and numpy 3 times each. > > I've

Re: [openstack-dev] [oslo][bandit] Handling bandit configuration files in Oslo.

On Tue, Nov 3, 2015 at 9:41 AM, Cyril Roelandt <cy...@redhat.com> wrote: > On 11/02/2015 07:40 PM, Brant Knudson wrote: > >> >> We could use something like this in keystone since we've got a few >> repositories. There should be a way to document why the test was sk

Re: [openstack-dev] [oslo][bandit] Handling bandit configuration files in Oslo.

On Mon, Nov 2, 2015 at 12:22 PM, Cyril Roelandt wrote: > Hello, > > The libraries from the Oslo project are used everywhere in OpenStack, > which means that a security issue in Olso code might have an impact on a > lot of other projects. This is why I am currently trying to add

Re: [openstack-dev] [oslo] Require documenting changes with versionadded and versionchanged

On Thu, Oct 15, 2015 at 5:52 AM, Victor Stinner wrote: > Hi, > > I propose that changes must now be documented in Oslo libraries. If a > change is not documented, it must *not* be approved. > > IMHO it's very important to document all changes. Otherwise, it becomes > really

Re: [openstack-dev] Optional Dependencies

On Tue, Sep 29, 2015 at 9:38 AM, Douglas Mendizábal < douglas.mendiza...@rackspace.com> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi openstack-dev, > > I was wondering what the correct way of handling optional dependencies > is? I'm specifically talking about libraries that

Re: [openstack-dev] [cinder] How to make a mock effactive for all method of a testclass

On Wed, Sep 23, 2015 at 3:06 AM, liuxinguo wrote: > Hi, > > > > In a.py we have a function: > > def *_change_file_mode*(filepath): > > utils.execute(*'chmod'*, *'600'*, filepath, run_as_root=True) > > > > In test_xxx.py, there is a testclass: > > clas*s

Re: [openstack-dev] [all] New Gerrit translations change proposals from Zanata

On Tue, Sep 15, 2015 at 4:30 PM, Elizabeth K. Joseph wrote: > Hi everyone, > > ... > > The Gerrit topic for these change proposals for all projects with > translations has been changed from "transifex/translations" to > "zanata/translations". After a test with

Re: [openstack-dev] [keystone] creating new users with invalid mail addresses possible

On Fri, Sep 11, 2015 at 7:26 AM, Christian Berendt wrote: > At the moment it is possible to create new users with invalid mail > addresses. I pasted the output of my test at > http://paste.openstack.org/show/456642/. (the listing of invalid mail > addresses is available at

Re: [openstack-dev] [nova] contextlib.nested and Python3 failing

On Wed, Aug 19, 2015 at 6:51 PM, Sylvain Bauza sba...@redhat.com wrote: Hi, I was writing some tests so I added a contextlib.nested to a checked TestCase [1]. Unfortunately, contextlib.nested is no longer available in Python3 and there is no clear solution on how to provide a compatible

Re: [openstack-dev] [all] Need volunteers to test coverage 4.0 alpha release

On Mon, Aug 3, 2015 at 6:32 AM, Doug Hellmann d...@doughellmann.com wrote: Do we have anyone willing to spend some time looking at the incompatibilities Ned mentions below to ensure that we have a smooth transition when 4.0 moves out of alpha? Doug Seems to work ok with keystone. There

Re: [openstack-dev] [keystone] the status of ec2 api

On Wed, Jul 29, 2015 at 1:49 PM, Brant Knudson b...@acm.org wrote: On Mon, Jul 13, 2015 at 9:50 PM, Ken'ichi Ohmichi ken1ohmi...@gmail.com wrote: Hi Keystone team, Now the test of ec2 credentials[1] is been proposed to Tempest, and I'd like to know current situation of ec2 api

Re: [openstack-dev] [keystone] the status of ec2 api

On Mon, Jul 13, 2015 at 9:50 PM, Ken'ichi Ohmichi ken1ohmi...@gmail.com wrote: Hi Keystone team, Now the test of ec2 credentials[1] is been proposed to Tempest, and I'd like to know current situation of ec2 api on Keystone as a Tempest reviewer. On Nova instead, ec2 api is deprecated in

Re: [openstack-dev] Python 3: 5 more projects with a py34 voting gate, only 4 remaing

On Fri, Jul 17, 2015 at 7:32 AM, Victor Stinner vstin...@redhat.com wrote: Hi, ... (3) keystonemiddleware: blocked by python-memcached, I sent a pull request 3 months ago and I'm still waiting... https://github.com/linsomniac/python-memcached/pull/67 I may fork the project if the

Re: [openstack-dev] Python 3: 5 more projects with a py34 voting gate, only 4 remaing

On Fri, Jul 17, 2015 at 7:32 AM, Victor Stinner vstin...@redhat.com wrote: Hi, We are close to having a voting py34 gate on all OpenStack libraries and applications. I just made the py34 gate voting for the 5 following projects: * keystone ... Victor While there's a py34 gate for

Re: [openstack-dev] [devstack] apache wsgi application support

On Wed, Jun 24, 2015 at 7:27 AM, Chris Dent chd...@redhat.com wrote: On Wed, 24 Jun 2015, Sean Dague wrote: On 06/24/2015 07:57 AM, Chris Dent wrote: If the primary reason is so that we can rely on the console_scripts entry point to handle getting the application somewhere useful then that

Re: [openstack-dev] [devstack] apache wsgi application support

On Wed, Jun 17, 2015 at 1:21 PM, Sean Dague s...@dague.net wrote: On 06/16/2015 05:25 PM, Chris Dent wrote: On Tue, 16 Jun 2015, Sean Dague wrote: I was just looking at the patches that put Nova under apache wsgi for the API, and there are a few things that I think are going in the wrong

Re: [openstack-dev] [ceilometer] can we get ceilometermiddleware to use a config file instead of transport_url?

On Mon, Jun 22, 2015 at 2:43 PM, Doug Hellmann d...@doughellmann.com wrote: Excerpts from Sean Dague's message of 2015-06-22 13:30:44 -0400: On 06/22/2015 01:15 PM, Michael Krotscheck wrote: Having _just_ done this, a couple of suggestions. - If the middleware is NOT optional - that

Re: [openstack-dev] [api] [all] To changes-since or not to changes-since

Keystone also has a resource that provides changes since[1], the query parameter used is since. [1] http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-revoke-ext.html#list-revocation-events Ciao, Brant On Fri, Jun 19, 2015 at 3:25 PM, Sean Dague s...@dague.net

Re: [openstack-dev] Specify a domain in mapping rules

You might need these changes, which are proposed but not merged: https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:stable/kilo+topic:bug/1442787,n,z Salut, Brant On Thu, Jun 18, 2015 at 6:04 AM, J. Pablo Martín Cobos goi...@gmail.com wrote: Hi all, I'm a

Re: [openstack-dev] [nova][security] Enable user password complexity verification

On Wed, Jun 3, 2015 at 6:49 AM, David Stanek dsta...@dstanek.com wrote: On Wed, Jun 3, 2015 at 6:04 AM liusheng liusheng1...@126.com wrote: Thanks for this topic, also, I think it is similar situation when talking about keystone users, not only the instances's password. In the past we've

Re: [openstack-dev] [keystone]Why not common definition about normal HTTP status code like 2xx and 3xx?

On Tue, Jun 2, 2015 at 4:32 AM, Chenhong Liu liuchenh...@unitedstack.com wrote: There is keystone/exception.py which contains Exceptions defined and used inside keystone provide 4xx and 5xx status code. And we can use it like: exception.Forbidden.code, exception.forbiddent.title

Re: [openstack-dev] [Ironic] [TC] Discussion: changing Ironic's release model

On Fri, May 29, 2015 at 8:11 AM, Thomas Goirand z...@debian.org wrote: On 05/28/2015 06:41 PM, Devananda van der Veen wrote: Hi all, tl;dr; At the summit, the Ironic team discussed the challenges we've had with the current release model and came up with some ideas to address them.

Re: [openstack-dev] [pbr] 1.0.1 released

On Thu, May 21, 2015 at 10:17 AM, Robert Collins robe...@robertcollins.net wrote: On 22 May 2015 at 05:14, Brant Knudson b...@acm.org wrote: On Thu, May 21, 2015 at 2:22 AM, YAMAMOTO Takashi yamam...@valinux.co.jp wrote: hi, can you explain why you want to use pbr 1.0.1

Re: [openstack-dev] [pbr] 1.0.1 released

On Thu, May 21, 2015 at 2:22 AM, YAMAMOTO Takashi yamam...@valinux.co.jp wrote: hi, can you explain why you want to use pbr 1.0.1 in the first place? what's wrong with requiring pbr1.0 ? Global requirements currently has pbr=0.11,2.0[1], and keystonemiddleware has the updated requirement

Re: [openstack-dev] [CI] gate wedged by tox = 2.0

On Thu, May 14, 2015 at 9:41 AM, Matt Riedemann mrie...@linux.vnet.ibm.com wrote: On 5/14/2015 5:46 AM, Sean Dague wrote: On 05/14/2015 04:16 AM, Robert Collins wrote: Tox 2.0 just came out, and it isolates environment variables - which is good, except if you use them (which we do). So

Re: [openstack-dev] [nova][cinder][neutron][security] Rootwrap discussions at OSSG mid-cycle

On Thu, May 14, 2015 at 2:48 AM, Angus Lees g...@inodes.org wrote: On Wed, 13 May 2015 at 02:16 Thierry Carrez thie...@openstack.org wrote: Lucas Fisher wrote: We spent some time at the OSSG mid-cycle meet-up this week discussing root wrap, looking at the existing code, and considering some

Re: [openstack-dev] [Congress] [Murano] Congress devstack installation is failing in murano gate job

On Wed, Apr 29, 2015 at 9:11 AM, Sean Dague s...@dague.net wrote: On 04/29/2015 10:05 AM, Sean Dague wrote: On 04/29/2015 09:29 AM, Filip Blaha wrote: Hi Serg I checked devstack log [1] and it seems that stevedore==1.4.0 was installed due to congress 2015-04-29 11:12:16.120

Re: [openstack-dev] Please stop reviewing code while asking questions

On Fri, Apr 24, 2015 at 3:14 AM, Julien Danjou jul...@danjou.info wrote: Hi there, This is now happening weekly to me now, probably because I write too many patches touching almost all OpenStack projects once a cycle, and I'm really tired of that behavior, so PLEASE: *Stop sending

Re: [openstack-dev] [Neutron][Keystone] [Nova] How to validate teanant-id for admin operation

On Fri, Apr 24, 2015 at 11:53 AM, Eichberger, German german.eichber...@hp.com wrote: All, Following up from the last Neutron meeting: If Neutron is performing an operation as an admin on behalf of a user that user's tenant-id (or project-id) isn't validated - in particular an admin can

Re: [openstack-dev] Please stop reviewing code while asking questions

On Fri, Apr 24, 2015 at 10:06 AM, Salvatore Orlando sorla...@nicira.com wrote: On 24 April 2015 at 16:50, Chris Friesen chris.frie...@windriver.com wrote: On 04/24/2015 07:26 AM, Salvatore Orlando wrote: If you think it might be beneficial to adjust tooling to that these contributions

Re: [openstack-dev] [oslo] Deprecation path?

On Fri, Apr 24, 2015 at 2:21 PM, Robert Collins robe...@robertcollins.net wrote: I think it needs a three-step dance. 1) Commit the intent to deprecate but don't signal it programmatically. Python's warnings package has a PendingDeprecationWarning for this --

Re: [openstack-dev] [oslo] eventlet 0.17.3 is now fully Python 3 compatible

On Thu, Apr 23, 2015 at 4:41 AM, Thomas Goirand z...@debian.org wrote: On 04/10/2015 09:41 AM, Thierry Carrez wrote: Victor Stinner wrote: I fixed 4 issues with monkey-patching in Python 3 (importlib, os.open(), threading.RLock, threading.Thread). Good news: the just released eventlet

Re: [openstack-dev] [keystone] keystonemiddleware stable/juno broken

, Apr 19, 2015 at 2:21 PM, Brant Knudson b...@acm.orgmailto:b...@acm.org wrote: Ever since the stable/juno branch was created for keystonemiddleware it's been broken and there are several changes piling up there. The fix for bug 1408838 Tests fail with new oslo.utils 1.2.1 allows the tests

Re: [openstack-dev] [keystone] keystonemiddleware stable/juno broken

On Sun, Apr 19, 2015 at 2:21 PM, Brant Knudson b...@acm.org wrote: Ever since the stable/juno branch was created for keystonemiddleware it's been broken and there are several changes piling up there. The fix for bug 1408838 Tests fail with new oslo.utils 1.2.1 allows the tests to pass. I

Re: [openstack-dev] [keystone] keystoneclient stable/icehouse broken

On Sun, Apr 19, 2015 at 3:07 PM, Brant Knudson b...@acm.org wrote: Ever since the stable/icehouse branch was created for python-keystoneclient it's been broken. There are a couple of issues: 1) The gate-python-keystoneclient-python34 job is failing with the error ERROR: InterpreterNotFound

[openstack-dev] [keystone] keystoneclient stable/icehouse broken

Ever since the stable/icehouse branch was created for python-keystoneclient it's been broken. There are a couple of issues: 1) The gate-python-keystoneclient-python34 job is failing with the error ERROR: InterpreterNotFound: python3.4. I don't know why it's not available. Maybe python3 needs to

[openstack-dev] [keystone] keystonemiddleware stable/juno broken

Ever since the stable/juno branch was created for keystonemiddleware it's been broken and there are several changes piling up there. The fix for bug 1408838 Tests fail with new oslo.utils 1.2.1 allows the tests to pass. I cherry-picked the fix here[1]. Based on the title of the bug, you'd think

Re: [openstack-dev] [all] Problems with keystoneclient stable branch (and maybe yours too)

On Mon, Apr 13, 2015 at 9:33 PM, gordon chung g...@live.ca wrote: 2) Incorrect cap in requirements.txt python-keystoneclient in stable/juno was capped at =1.1.0, and 1.1.0 is the version tagged for the stable branch. When you create a review in stable/juno it installs

[openstack-dev] [all] Problems with keystoneclient stable branch (and maybe yours too)

There were several problems with the keystoneclient stable/juno branch that have been or are in the process of being fixed since its creation. Hopefully this note will be useful to other projects that create stable branches for their libraries. 1) Unit tests didn't pass with earlier packages

Re: [openstack-dev] [all][oslo][clients] Let's speed up start of OpenStack libs and clients by optimizing imports with profimp

On Wed, Apr 8, 2015 at 7:59 AM, Doug Hellmann d...@doughellmann.com wrote: Excerpts from Robert Collins's message of 2015-04-07 10:43:30 +1200: On 7 April 2015 at 05:11, Joe Gordon joe.gord...@gmail.com wrote: On Mon, Apr 6, 2015 at 8:39 AM, Dolph Mathews dolph.math...@gmail.com

Re: [openstack-dev] [docs] [End User Guide] [Keystone] keyring support for python-keystoneclient and python-openstackclient

On Tue, Apr 7, 2015 at 3:52 AM, Olena Logvinova ologvin...@mirantis.com wrote: Good day to everyone! My name is Olena, I am new in OpenStack (working as a tech writer). And I'm stuck on a bug https://launchpad.net/bugs/1419990 (patch https://review.openstack.org/#/c/163503/). I have 2

Re: [openstack-dev] [all][oslo][clients] Let's speed up start of OpenStack libs and clients by optimizing imports with profimp

On Sun, Apr 5, 2015 at 5:41 PM, Boris Pavlovic bo...@pavlovic.me wrote: Brant, I run profimp with and without patch https://review.openstack.org/#/c/164066/: And it really works well: before 170ms: http://boris-42.github.io/keystone/before.html after 76ms:

Re: [openstack-dev] [all][oslo][clients] Let's speed up start of OpenStack libs and clients by optimizing imports with profimp

On Thu, Apr 2, 2015 at 4:52 PM, Boris Pavlovic bo...@pavlovic.me wrote: Hi stackers, Recently, I started working on speeding up Rally cli. What I understand immediately is that I don't understand why it takes 700-800ms to just run rally version command and it is impossible hard task to

Re: [openstack-dev] [Openstack-operators][keystone] Security around enterprise credentials and OpenStack API

On Wed, Apr 1, 2015 at 1:17 AM, Daniel Comnea comnea.d...@gmail.com wrote: + developers mailing list, hopefully a developer might be able to chime in. On Wed, Apr 1, 2015 at 3:58 AM, Marc Heckmann marc.heckm...@ubisoft.com wrote: Hi all, I was going to post a similar question this

  1   2   >