Re: [openstack-dev] [ironic] using keystone right - catalog, endpoints, tokens and noauth

2017-06-01 Thread Pavlo Shchelokovskyy
Hi all, thanks Monty for the feedback. I've started this set of patches in ironic [0] (very WiP currently), and would really like some eyes on them (not right now, as I plan to rewrite those basing on this conversation :) but soon I hope). Also I have some questions/comments inline: On Thu, May

Re: [openstack-dev] [ironic] using keystone right - catalog, endpoints, tokens and noauth

2017-05-25 Thread Dmitry Tantsur
On 05/24/2017 11:46 AM, Pavlo Shchelokovskyy wrote: Hi all, There are several problems or inefficiencies in how we are dealing with auth to other services. Although it became much better in Newton, some things are still to be improved and I like to discuss how to tackle those and my ideas for

Re: [openstack-dev] [ironic] using keystone right - catalog, endpoints, tokens and noauth

2017-05-24 Thread Monty Taylor
On 05/24/2017 12:51 PM, Eric Fried wrote: Pavlo- There's a blueprint [1] whereby we're trying to address a bunch of these same concerns in nova. You can see the first part in action here [2]. However, it has become clear that nova is just one of the many services that would benefit

Re: [openstack-dev] [ironic] using keystone right - catalog, endpoints, tokens and noauth

2017-05-24 Thread Eric Fried
Pavlo- There's a blueprint [1] whereby we're trying to address a bunch of these same concerns in nova. You can see the first part in action here [2]. However, it has become clear that nova is just one of the many services that would benefit from get_service_url(). With the full support