Re: [openstack-dev] [searchlight] Add Nova Keypair Plugin

2016-03-28 Thread Sampath, Lakshmi
Hi Hiroyuki,

For this plugin what data are you indexing in Elasticsearch. I mean what do you 
expect users to search on and retrieve? Are you trying to index the public keys?
Talking directly to DB is not advisable, but before that we need to discuss 
what data is being indexed and the security implication of it (RBAC) to users 
who can/cannot access it.

I would suggest start a spec in openstack/searchlight-specs under newton for 
reviewing/feedback.
https://github.com/openstack/searchlight-specs.git


Thanks
Lakshmi.

From: Hiroyuki Eguchi [mailto:h-egu...@az.jp.nec.com]
Sent: Sunday, March 27, 2016 10:26 PM
To: OpenStack Development Mailing List (not for usage questions) 
‎[openstack-dev@lists.openstack.org]‎ 
Subject: [openstack-dev] [searchlight] Add Nova Keypair Plugin

Hi.

I am developing this plugin.
https://blueprints.launchpad.net/searchlight/+spec/nova-keypair-plugin

However I faced the problem that a admin user can not retrieve a keypair 
information created by another user.
So it is impossible to sync the keypair between OpenStack DB and Elasticsearch, 
unless connect to OpenStack DB directly.
Is there any suggestions to resolve it ?

thanks.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [swift] Account ACL with keystone auth

2016-02-19 Thread Sampath, Lakshmi

Account ACL for allowing other accounts administration access to create 
containers looks to be accepting the request but doesn't seem to be persisting 
the information with keystone auth.

For example if admin:admin user allows demo:demo "admin" access on its account, 
the following request succeeds but later when I try creating a container, using 
demo account in admin account it fails.

As admin:admin user
curl -X POST -i -H "X-Auth-Token: 57eb097f3b8e4c9e8a927a71c7f18e9c" -H 
'X-Account-Access-Control: {"admin":["AUTH_demo"]}' 
http://127.0.0.1:8080/v1/AUTH_admin
HTTP/1.1 204 No Content
Content-Length: 0
Content-Type: text/html; charset=UTF-8
X-Trans-Id: txefcd03a9b0ea4c2ab28a3-0056c75dae
Date: Fri, 19 Feb 2016 18:23:42 GMT


As demo:demo user
curl -XPUT -i -H "X-Auth-Token: 9173236daaa3470886410934c467fd7e"  
http://127.0.0.1:8080/v1/AUTH_admin/container1
HTTP/1.1 403 Forbidden
Content-Length: 73
Content-Type: text/html; charset=UTF-8
X-Trans-Id: txbd54e9b8f5c64419bf689-0056c75c25
Date: Fri, 19 Feb 2016 18:17:09 GMT


Is Account ACL supported using keystone auth?

Thanks
Lakshmi.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [searchlight] Nominating Li Yingjun to Searchlight Core

2016-01-22 Thread Sampath, Lakshmi
+1

-Original Message-
From: Tripp, Travis S 
Sent: Friday, January 22, 2016 4:10 PM
To: OpenStack List
Subject: [openstack-dev] [searchlight] Nominating Li Yingjun to Searchlight Core

I am nominating Li Yingjun (yingjun on IRC) to join the Searchlight core 
reviewers team. We are a young project and he has already made a noticeable 
impact with his contributions. You may review his Searchlight [0] and 
cross-project [1] activity reports below. He has been participating in meetings 
regularly, despite a difficult timezone. He also has a broad base of exposure 
in OpenStack in terms of commits (26 different projects /repos) and reviews (23 
different projects / repos). This cross project knowledge is important to 
Searchlight’s charter.

[0] http://stackalytics.com/report/contribution/searchlight-group/90
[1] http://stackalytics.com/report/users/liyingjun

Please vote for this change in reply to this message.

Thank you,
Travis




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [Glance] Experimental API

2015-03-12 Thread Sampath, Lakshmi
We had a discussion with API WG today about what it means to be an 
EXPERIMENTAL API and here's the takeway from that discussion.

- API's can be experimental, but mark it clearly in the docs as such
- Experimental means a breaking change may be introduced
- Use /x1/ instead of /v1/  in the endpoint.

Thoughts/Suggestions?


Thanks
Lakshmi.

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


[openstack-dev] [glance] Import service module from oslo-incubator

2015-02-18 Thread Sampath, Lakshmi
Hi,

For catalog index service we need the service module and its dependencies 
imported from oslo-incubator.
https://review.openstack.org/#/c/152872/ has the required files.   All are new 
files and shouldn't be impacting any existing functionality.

Wanted to send to a wider audience to see if there are any other oslo-incubator 
sync to glance for this release that might overlap or otherwise appreciate 
reviews.

Thanks
Lakshmi.

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


Re: [openstack-dev] [Glance] PTL Non-Candidacy

2014-09-23 Thread Sampath, Lakshmi
Thanks mark for all your support. We will really miss you as a PTL.

From: Mark Washenberger [mailto:mark.washenber...@markwash.net]
Sent: Monday, September 22, 2014 10:23 AM
To: OpenStack Development Mailing List
Subject: [openstack-dev] [Glance] PTL Non-Candidacy

Greetings,

I will not be running for PTL for Glance for the Kilo release.

I want to thank all of the nice folks I've worked with--especially the 
attendees and sponsors of the mid-cycle meetups, which I think were a major 
success and one of the highlights of the project for me.

Cheers,
markwash
___
OpenStack-dev mailing list
OpenStack-dev@lists.openstack.org
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev