Re: [openstack-dev] [nova][oslo] oslo.config and import chains

2014-08-07 Thread Brant Knudson
On Thu, Aug 7, 2014 at 12:54 PM, Kevin L. Mitchell kevin.mitch...@rackspace.com wrote: On Thu, 2014-08-07 at 17:46 +0100, Matthew Booth wrote: In any case, the operative point is that CONF.attribute must always be evaluated inside run-time code, never at module load time. ...unless

Re: [openstack-dev] [oslo] usage patterns for oslo.config

2014-08-27 Thread Brant Knudson
Mark - I don't think I've seen code (except for obscure cases) which uses the CONF global directly (as opposed to being passed CONF as a parameter) but doesn't register the options at import time. Mark. Keystone uses the CONF global directly and doesn't register the options at import

Re: [openstack-dev] [release] client release deadline - Sept 18th

2014-09-10 Thread Brant Knudson
On Tue, Sep 9, 2014 at 4:19 PM, Sean Dague s...@dague.net wrote: As we try to stabilize OpenStack Juno, many server projects need to get out final client releases that expose new features of their servers. While this seems like not a big deal, each of these clients releases ends up having

Re: [openstack-dev] global-reqs on tooz pulls in worrisome transitive dep

2014-09-12 Thread Brant Knudson
On Thu, Sep 11, 2014 at 2:17 AM, Thomas Goirand z...@debian.org wrote: On my side (as the Debian package maintainer of OpenStack), I was more than happy to see that Ceilometer made the choice to use a Python module for memcache which supports Python 3. Currently python-memcache does *not*

Re: [openstack-dev] masking X-Auth-Token in debug output - proposed consistency

2014-09-12 Thread Brant Knudson
On Fri, Sep 12, 2014 at 12:02 PM, Tripp, Travis S travis.tr...@hp.com wrote: From Jamie Lennox: We handle this in the keystoneclient Session object by just printing REDACTED or something similar. The problem with using a SHA1 is that for backwards compatability we often use the SHA1 of a

Re: [openstack-dev] [all] [clients] [keystone] lack of retrying tokens leads to overall OpenStack fragility

2014-09-15 Thread Brant Knudson
On Wed, Sep 10, 2014 at 9:14 AM, Sean Dague s...@dague.net wrote: Going through the untriaged Nova bugs, and there are a few on a similar pattern: Nova operation in progress takes a while Crosses keystone token expiration time Timeout thrown Operation fails Terrible 500 error sent

Re: [openstack-dev] [all] PYTHONDONTWRITEBYTECODE=true in tox.ini

2014-09-15 Thread Brant Knudson
On Mon, Sep 15, 2014 at 1:25 PM, Eric Blake ebl...@redhat.com wrote: On 09/15/2014 09:29 AM, Radomir Dopieralski wrote: On 12/09/14 17:11, Doug Hellmann wrote: I also use git-hooks with a post-checkout script to remove pyc files any time I change between branches, which is especially

Re: [openstack-dev] [Nova] What's holding nova development back?

2014-09-15 Thread Brant Knudson
On Mon, Sep 15, 2014 at 4:30 PM, Michael Still mi...@stillhq.com wrote: On Tue, Sep 16, 2014 at 12:30 AM, Russell Bryant rbry...@redhat.com wrote: On 09/15/2014 05:42 AM, Daniel P. Berrange wrote: On Sun, Sep 14, 2014 at 07:07:13AM +1000, Michael Still wrote: Just an observation from the

Re: [openstack-dev] Please do *NOT* use vendorized versions of anything (here: glanceclient using requests.packages.urllib3)

2014-09-19 Thread Brant Knudson
I don't think anyone would be complaining if glanceclient didn't have the need to reach into and monkeypatch requests's connection pool manager[1]. Is there a way to tell requests to build the https connections differently without monkeypatching urllib3.poolmanager? glanceclient's monkeypatching

Re: [openstack-dev] [Nova] Some ideas for micro-version implementation

2014-09-22 Thread Brant Knudson
On Fri, Sep 19, 2014 at 1:39 AM, Alex Xu x...@linux.vnet.ibm.com wrote: Close to Kilo, it is time to think about what's next for nova API. In Kilo, we will continue develop the important feature micro-version. In previous v2 on v3 propose, it's include some implementations can be used for

Re: [openstack-dev] [Nova] Some ideas for micro-version implementation

2014-09-24 Thread Brant Knudson
vNext seems an interesting idea, I thought the implementation way for Nova a little. API Route Discoverability is a nice design, but a root / URL will conflict on current list versions API. Maybe there would be a workaround. Completely agreed, Ken'ichi. The root URL that returns the

Re: [openstack-dev] [qa][keystone] Keystoneclient tests to tempest

2013-12-09 Thread Brant Knudson
Responses inline. On Mon, Dec 9, 2013 at 10:07 AM, Sean Dague s...@dague.net wrote: On 12/09/2013 10:12 AM, Brant Knudson wrote: Monty - Thanks for doing the work already to get the infrastructure set up. Looks like I've got the easy part here. I posted an initial patch that has one

Re: [openstack-dev] [qa][keystone] Keystoneclient tests to tempest

2013-12-09 Thread Brant Knudson
On Mon, Dec 9, 2013 at 11:18 AM, Jeremy Stanley fu...@yuggoth.org wrote: On 2013-12-09 11:07:50 -0600 (-0600), Brant Knudson wrote: [...] Is testing multiple versions of keystoneclient actually worth it? If the other projects don't feel the need for this then why does Keystone? It's

Re: [openstack-dev] Adding DB migration items to the common review checklist

2013-12-18 Thread Brant Knudson
Matt - Could a test be added that goes through the models and checks these things? Other projects could use this too. Here's an example of a test that checks if the tables are all InnoDB:

[openstack-dev] [keystone] External authentication plugins

2013-12-19 Thread Brant Knudson
We've got to figure out what external authentication plugins we're going to provide in Keystone. This is something that you'd think wouldn't be complicated, but somehow it's gotten that way. Since we've made mistakes in the past, let's try to be careful this time and come up with what plugins

Re: [openstack-dev] [openstack][keystone] Is the user password too simple?

2013-12-30 Thread Brant Knudson
On Mon, Dec 30, 2013 at 12:55 AM, li-zheming li-zhem...@163.com wrote: hi all: when create user, you can set user password. You can set password as a simple word 'a'. the password is too simple but not limit. if someone want to steal your password, it is so easily(such as exhaustion).

Re: [openstack-dev] [nova][documentation][devstack] Confused about how to set up a Nova development environment

2014-01-09 Thread Brant Knudson
Mike - When I was starting out, I ran devstack ( http://devstack.org/ ) on an Ubuntu VM. You wind up with a system where you've got a basic running OpenStack so you can try things out with the command-line utilities, and also do development because it checks out all the repos. I learned a lot,

Re: [openstack-dev] [nova][documentation][devstack] Confused about how to set up a Nova development environment

2014-01-09 Thread Brant Knudson
On Thu, Jan 9, 2014 at 12:21 PM, Mike Spreitzer mspre...@us.ibm.com wrote: Brant Knudson b...@acm.org wrote on 01/09/2014 10:07:27 AM: When I was starting out, I ran devstack ( http://devstack.org/ ) on an Ubuntu VM. You wind up with a system where you've got a basic running OpenStack

Re: [openstack-dev] [oslo] need input on new config option for logging translations

2014-01-15 Thread Brant Knudson
It might help if we knew from operators whether they tended to use the service config file or logging.conf to configure logging for their installations. Maybe the service config file logging options are limited enough that installations all use logging.conf. It might make it a lot easier for

Re: [openstack-dev] [Oslo] Improving oslo-incubator update.py

2014-01-15 Thread Brant Knudson
Here's the process I use to review a oslo-incubator merge... since I'm mostly reviewing keystone I'm going to use that as the project. 1) Make sure keystone master is at the latest, and that oslo-incubator is at the right level (the commit hash if they mentioned it or latest) 2) run update.py in

[openstack-dev] Reviewday data download problem

2014-01-27 Thread Brant Knudson
A few days ago, a change I submitted to reviewday to generate JSON results for easy consumption by an application merged. I was hoping that this could be used with next-review to help me prioritize reviews. So I was expecting to now be able to go to the URL and get the .json file, like this:

Re: [openstack-dev] Live migration, auth token lifetimes.

2014-02-28 Thread Brant Knudson
On Fri, Feb 28, 2014 at 8:13 AM, j...@ioctl.org wrote: The second would be to have a way for the nova process to extend proxy credentials until such point as they are required by the post- stages. I'll elide the potential security concerns over putting such an API call into keystone, but it

Re: [openstack-dev] [Oslo] Improving oslo-incubator update.py

2014-03-14 Thread Brant Knudson
On Wed, Mar 12, 2014 at 11:03 AM, Duncan Thomas duncan.tho...@gmail.comwrote: On 15 January 2014 18:53, Brant Knudson b...@acm.org wrote: At no point do I care what are the different commits that are being brought in from oslo-incubator. If the commits are listed in the commit message

Re: [openstack-dev] OpenStack vs. SQLA 0.9

2014-03-24 Thread Brant Knudson
There's a proposed change to Keystone to update SQLAlchemy to 0.9[0] which is failing in the doc build. I'm not sure exactly what it's doing that's causing it to fail. I proposed changes to work around the issues[1] based on the error messages. Part of the fix requires a change in oslo-incubator

Re: [openstack-dev] Jenkins test logs and their retention period

2014-03-25 Thread Brant Knudson
On Mon, Mar 24, 2014 at 5:49 AM, Sean Dague s...@dague.net wrote: ... Part of the challenge is turning off DEBUG is currently embedded in code in oslo log, which makes it kind of awkward to set sane log levels for included libraries because it requires an oslo round trip with code to all the

Re: [openstack-dev] setting up cross-project unit test jobs for oslo libs

2014-04-07 Thread Brant Knudson
Doug - Are the projects going to be responsible for keeping this up to date, or is the oslo team going to take care of it? We could reject a change to add a new oslo library dependency if the test isn't there. If there was a process that you followed to generate the dependencies, maybe this could

Re: [openstack-dev] [qa][keystone] Adding client library related tests to tempest

2013-10-18 Thread Brant Knudson
To provide a bit more background... Keystone has a bunch of keystoneclient tests for the v2 API. These tests actually git clone a version of keystoneclient (master, essex-3, and 0.1.1)[0], to use for testing. Maybe at some point the tests were just for client-server compatibility, but now they're

Re: [openstack-dev] RFC - Icehouse logging harmonization

2013-10-24 Thread Brant Knudson
On a previous project, I wrote a library that provided a command-line option to set the logging levels for different loggers. This was handy for developers and for support. An example translated to Keystone would be like keystone-all --logging=keystone.identity=DEBUG Now the keystone.identity

Re: [openstack-dev] Keystone Concurrency Races in SQL Assignment Backend

2013-10-31 Thread Brant Knudson
Peter - We discussed better use of transactions in irc, but I don't think anyone has had a chance to look at it. This would be a very useful thing to have someone look at. I'm fine with holding off on the oslo.db sessions work until we're sure the code is correct w/r/t multi-processing so that

Re: [openstack-dev] [Tempest] Which is the best way for skipping tests?

2013-12-04 Thread Brant Knudson
In Keystone, we've got some tests that raise self.skipTest('...') in the test class setUp() method (not setUpClass). My testing shows that if there's several tests in the class then it shows all of those tests as skipped (not just 1 skip). Does this do what you want? Here's an example:

Re: [openstack-dev] [Tempest] [qa] Which is the best way for skipping tests?

2013-12-05 Thread Brant Knudson
On Thu, Dec 5, 2013 at 6:52 AM, Sean Dague s...@dague.net wrote: On 12/04/2013 06:59 PM, Brant Knudson wrote: In Keystone, we've got some tests that raise self.skipTest('...') in the test class setUp() method (not setUpClass). My testing shows that if there's several tests in the class

[openstack-dev] [openstack][tempest] keystoneclient API tests

2013-12-05 Thread Brant Knudson
I thought I'd get started looking at how we could get some python-keystoneclient testing into tempest. Unfortunately I missed the summit meeting about this so maybe this was discussed, but I don't see any details mentioned on the etherpad:

[openstack-dev] [qa][keystone] Keystoneclient tests to tempest

2013-12-08 Thread Brant Knudson
We'd like to get the keystoneclient tests out of keystone. They're serving a useful purpose of catching problems with non-backwards compatible changes in keystoneclient so we still want them run. Problem is they're running at the wrong time -- only on changes to keystone and not changes to

Re: [openstack-dev] [qa][keystone] Keystoneclient tests to tempest

2013-12-09 Thread Brant Knudson
...@inaugust.com wrote: Hi! Thanks - I've been wanting to kill this for a long time. Thanks for starting the discussion... On 12/08/2013 07:26 PM, Brant Knudson wrote: We'd like to get the keystoneclient tests out of keystone. They're serving a useful purpose of catching problems

Re: [openstack-dev] [OSSG] Best tool for simple security gate checks

2014-06-19 Thread Brant Knudson
On Thu, Jun 19, 2014 at 1:37 PM, Clint Byrum cl...@fewbar.com wrote: A large majority of the failures I've seen OSSG report have been privilege escalation in each service.. Trusts not scoping down properly, quotas not being applied, or cross-project/tenant boundaries not being honored. I

Re: [openstack-dev] [Keystone] Announcing Keystone Middleware Project

2014-06-25 Thread Brant Knudson
On Wed, Jun 25, 2014 at 6:56 AM, Sergey Lukjanov slukja...@mirantis.com wrote: Are there any API changes that will make projects need to fix? There aren't any API changes. The code was just copy-pasted to the new package. The changes to the projects are just 1) update the requirements and 2)

Re: [openstack-dev] [keystone][qa] Returning 203 in keystone v2 list apis?

2014-07-03 Thread Brant Knudson
On Thu, Jul 3, 2014 at 3:48 PM, David Kranz dkr...@redhat.com wrote: While moving success response code checking in tempest to the client, I noticed that exactly one of the calls to list users for a tenant checked for 200 or 203. Looking at http://docs.openstack.org/api/

Re: [openstack-dev] [keystone] Size of Log files

2014-07-07 Thread Brant Knudson
Henry - On Mon, Jul 7, 2014 at 7:17 AM, Henry Nash hen...@linux.vnet.ibm.com wrote: Hi Our debug log file size is getting pretty hugea typical py26 jenkins run produces a whisker under 50Mb of log - which is problematic for at least the reason that our current jenkins setup consider

Re: [openstack-dev] [keystone] No templated service catalog for V3?

2014-05-23 Thread Brant Knudson
On Thu, May 22, 2014 at 7:32 PM, Kieran Spear kisp...@gmail.com wrote: Hi, I notice that the templated catalog doesn't support the V3 API*. This is a blocker for us, particularly for Heat since it uses V3 internally. We could switch to the SQL backend, but I'm sure others are affected by

Re: [openstack-dev] [Keystone] [Blazar] [Ironic] Py26/27 gates failing because of keystoneclient-0.9.0

2014-05-30 Thread Brant Knudson
The auth_token middleware changed recently[1] to check if tokens retrieved from the cache are expired based on the expiration time in the token. The unit tests for Blazar, Ceilometer, and Ironic are all using a copy-pasted fake memcache implementation that's supposed to simulate what auth_token

Re: [openstack-dev] [Nova] Some ideas for micro-version implementation

2014-10-02 Thread Brant Knudson
On Thu, Oct 2, 2014 at 6:04 AM, Ken'ichi Ohmichi ken1ohmi...@gmail.com wrote: Thanks for your advice, that is very useful input for me. I read both keystone-specs and ietf draft-spec for JSON-Home. I have a question. JSON-Home is useful for advertising API URL paths to clients, I guess

Re: [openstack-dev] Solving the client libs stable support dilemma

2014-11-19 Thread Brant Knudson
On Mon, Nov 17, 2014 at 8:51 AM, Doug Hellmann d...@doughellmann.com wrote: On Nov 17, 2014, at 6:16 AM, Sean Dague s...@dague.net wrote: On 11/16/2014 11:23 AM, Doug Hellmann wrote: On Nov 16, 2014, at 9:54 AM, Jeremy Stanley fu...@yuggoth.org wrote: On 2014-11-16 09:06:02 -0500

Re: [openstack-dev] No PROTOCOL_SSLv3 in Python 2.7 in Sid since 3 days

2014-11-25 Thread Brant Knudson
Could someone take over my patch? :) I'm quite busy doing other things, and it isn't my role to work on such things directly. I often send a patch here and there when I see fit, but here, I don't think I'm the best person to do so. I updated the patch based on the comments so far:

[openstack-dev] [Keystone] unittests on devstack hosts

2013-06-19 Thread Brant Knudson
I was looking into this with Anita Kuno today. Keystone unit tests would fail when she was running on her vm set up for testing. We found that the system was running out of memory. When I run it myself, watching memory usage with top, the nosetester process uses over 800MB. Anita's vm has 1GB

[openstack-dev] [Keystone][Nova] Why migrate_version not InnoDB?

2013-07-01 Thread Brant Knudson
'Stackers - I've got a review up in Keystone that converts tables from MyISAM to InnoDB [0], which I patterned after a change in Nova. One of the comments in the review is suggesting that the migrate_version table should also be changed. The reason I didn't include migrate_version is because

Re: [openstack-dev] [Review] Use of exception for non-exceptional cases

2013-07-12 Thread Brant Knudson
Somewhat offtopic, but others might find it interesting. On another project I used a different technique for exceptions, where the original exception is enhanced with new fields as it propagates up the stack to where it's handled. In this way all the information needed to handle the exception is

Re: [openstack-dev] Proposing Morgan Fainberg for keystone-core

2013-08-06 Thread Brant Knudson
+1 from me. -- Brant On Tue, Aug 6, 2013 at 3:10 PM, Brad Topol bto...@us.ibm.com wrote: +1 on Morgan. He is an outstanding contributor! --Brad Brad Topol, Ph.D. IBM Distinguished Engineer OpenStack (919) 543-0646 Internet: bto...@us.ibm.com Assistant: Cindy Willman (919) 268-5296

[openstack-dev] [keystone] PEP8 public and internal interfaces for keystoneclient

2013-08-20 Thread Brant Knudson
We've been too lax about delineating public and internal interfaces in python-keystoneclient. This makes changes and reviews difficult because we don't know what we can change without breaking applications. For example, we thought we could rename a part, but then it broke somebody (Horizon?)[0].

Re: [openstack-dev] [Openstack][keystone][ldap] Bug unsupported operand type(s) for : 'str' and 'int'

2013-08-23 Thread Brant Knudson
This might be the same as this bug: https://bugs.launchpad.net/keystone/+bug/1210175 which was only fixed in master. - Brant On Thu, Aug 22, 2013 at 1:55 AM, Qinglong.Meng mengql112...@gmail.comwrote: Hi All, Os: Ubuntu 12.04 LTS keystone version: stable/grizzly After I

Re: [openstack-dev] [Nova] Spring cleaning nova-core

2014-12-05 Thread Brant Knudson
On Fri, Dec 5, 2014 at 7:56 AM, Daniel P. Berrange berra...@redhat.com wrote: FWIW, markmc is already off the list [1]. Ah yes, must be that russell needs to update the config file for his script to stop marking markmc as core. Regards, Daniel -- Anyone can do it:

[openstack-dev] [keystone][all] Max Complexity Check Considered Harmful

2014-12-08 Thread Brant Knudson
Not too long ago projects added a maximum complexity check to tox.ini, for example keystone has max-complexity=24. Seemed like a good idea at the time, but in a recent attempt to lower the maximum complexity check in keystone[1][2], I found that the maximum complexity check can actually lead to

Re: [openstack-dev] [all] Proper use of 'git review -R'

2014-12-30 Thread Brant Knudson
On Tue, Dec 30, 2014 at 8:46 AM, David Kranz dkr...@redhat.com wrote: Many times when I review a revision of an existing patch, I can't see just the change from the previous version due to other rebases. I've gotten used to this. Typically when I review a new patch set I look for my comments

Re: [openstack-dev] [api][nova] Openstack HTTP error codes

2015-01-30 Thread Brant Knudson
On Thu, Jan 29, 2015 at 5:01 PM, Jay Faulkner j...@jvf.cc wrote: On Jan 29, 2015, at 2:52 PM, Kevin Benton blak...@gmail.com wrote: Oh, I understood it a little differently. I took parsing of error messages here is not the way we’d like to solve this problem as meaning that parsing them

Re: [openstack-dev] [Heat][Keystone] Native keystone resources in Heat

2015-01-30 Thread Brant Knudson
On Fri, Jan 30, 2015 at 4:20 AM, Steven Hardy sha...@redhat.com wrote: On Thu, Jan 29, 2015 at 12:31:17PM -0500, Zane Bitter wrote: On 29/01/15 12:03, Steven Hardy wrote: On Thu, Jan 29, 2015 at 11:41:36AM -0500, Zane Bitter wrote: IIUC keystone now allows you to add users to a domain that

Re: [openstack-dev] [api][nova] Openstack HTTP error codes

2015-02-02 Thread Brant Knudson
On Mon, Feb 2, 2015 at 4:35 PM, Jay Pipes jaypi...@gmail.com wrote: On 01/29/2015 12:41 PM, Sean Dague wrote: Correct. This actually came up at the Nova mid cycle in a side conversation with Ironic and Neutron folks. HTTP error codes are not sufficiently granular to describe what happens

Re: [openstack-dev] [Keystone] Nominating Brad Topol for Keystone-Spec core

2015-01-19 Thread Brant Knudson
+1 - Brant On Sun, Jan 18, 2015 at 1:11 PM, Morgan Fainberg morgan.fainb...@gmail.com wrote: Hello all, I would like to nominate Brad Topol for Keystone Spec core (core reviewer for Keystone specifications and API-Specification only: https://git.openstack.org/cgit/openstack/keystone-specs

Re: [openstack-dev] [api][nova] Openstack HTTP error codes

2015-01-29 Thread Brant Knudson
On Thu, Jan 29, 2015 at 11:41 AM, Sean Dague s...@dague.net wrote: Correct. This actually came up at the Nova mid cycle in a side conversation with Ironic and Neutron folks. HTTP error codes are not sufficiently granular to describe what happens when a REST service goes wrong, especially if

Re: [openstack-dev] pip 6.0.6 breaking py2* jobs - bug 1407736

2015-01-05 Thread Brant Knudson
I think this started happening with setuptools 10.2. We had a similar problem in Keystone -- a change was merged that caused any use of deprecated function to fail[1]. This caused all keystone-python27 jobs to fail when 10.2 was used because of the now deprecated function used by paste. I thought

Re: [openstack-dev] [Keystone] Proposing Marek Denis for the Keystone Core Team

2015-02-10 Thread Brant Knudson
+1 On Tue, Feb 10, 2015 at 11:51 AM, Morgan Fainberg morgan.fainb...@gmail.com wrote: Hi everyone! I wanted to propose Marek Denis (marekd on IRC) as a new member of the Keystone Core team. Marek has been instrumental in the implementation of Federated Identity. His work on Keystone and

Re: [openstack-dev] [keystone] SPFE: Authenticated Encryption (AE) Tokens

2015-02-13 Thread Brant Knudson
We get a lot of complaints about problems caused by persistent tokens, so this would be great to see in K. Given the amount of work required to get it done, which includes taking care of some other issues, like getting revocation events working and refactoring the token code (things which could

Re: [openstack-dev] [TripleO][keystone] default region name

2015-01-08 Thread Brant Knudson
On Thu, Jan 8, 2015 at 7:28 AM, Steven Dake sd...@redhat.com wrote: On 01/07/2015 10:21 PM, Zhou, Zhenzan wrote: Hi, Does anyone know why TripleO uses regionOne as default region name? A comment in the code says it's the default keystone uses. Zhenzan, I was going to point you here:

Re: [openstack-dev] [oslo] oslo.concurrency runtime dependency on fixtures/testtools

2015-03-12 Thread Brant Knudson
On Thu, Mar 12, 2015 at 7:20 AM, Davanum Srinivas dava...@gmail.com wrote: Alan, We are debating this on: https://review.openstack.org/#/c/157135/ Please hop on :) -- dims On Thu, Mar 12, 2015 at 5:28 AM, Alan Pevec ape...@gmail.com wrote: Hi, hijacking this thread to point out

Re: [openstack-dev] [Openstack-operators][keystone] Security around enterprise credentials and OpenStack API

2015-04-01 Thread Brant Knudson
On Wed, Apr 1, 2015 at 1:17 AM, Daniel Comnea comnea.d...@gmail.com wrote: + developers mailing list, hopefully a developer might be able to chime in. On Wed, Apr 1, 2015 at 3:58 AM, Marc Heckmann marc.heckm...@ubisoft.com wrote: Hi all, I was going to post a similar question this

Re: [openstack-dev] [keystone] What's Up Doc? March 26, 2015 [all]

2015-03-27 Thread Brant Knudson
On Thu, Mar 26, 2015 at 7:37 PM, Anne Gentle annegen...@justwriteclick.com wrote: Here's the latest news installment from docsland. Install Guides updates - We've got a spec ready for the changes to the Install Guides now published at:

Re: [openstack-dev] [oslo.db] PyMySQL review

2015-01-29 Thread Brant Knudson
On Thu, Jan 29, 2015 at 11:05 AM, Roman Podoliaka rpodoly...@mirantis.com wrote: Mike, I can't agree more: as far as we are concerned, every service is yet another WSGI app. And it should be left up to operator, how to deploy it. So 'green thread awareness' (i.e. patching of the world)

Re: [openstack-dev] [all][oslo][clients] Let's speed up start of OpenStack libs and clients by optimizing imports with profimp

2015-04-02 Thread Brant Knudson
On Thu, Apr 2, 2015 at 4:52 PM, Boris Pavlovic bo...@pavlovic.me wrote: Hi stackers, Recently, I started working on speeding up Rally cli. What I understand immediately is that I don't understand why it takes 700-800ms to just run rally version command and it is impossible hard task to

Re: [openstack-dev] [keystone] keystonemiddleware stable/juno broken

2015-04-21 Thread Brant Knudson
, Apr 19, 2015 at 2:21 PM, Brant Knudson b...@acm.orgmailto:b...@acm.org wrote: Ever since the stable/juno branch was created for keystonemiddleware it's been broken and there are several changes piling up there. The fix for bug 1408838 Tests fail with new oslo.utils 1.2.1 allows the tests

Re: [openstack-dev] [oslo] eventlet 0.17.3 is now fully Python 3 compatible

2015-04-23 Thread Brant Knudson
On Thu, Apr 23, 2015 at 4:41 AM, Thomas Goirand z...@debian.org wrote: On 04/10/2015 09:41 AM, Thierry Carrez wrote: Victor Stinner wrote: I fixed 4 issues with monkey-patching in Python 3 (importlib, os.open(), threading.RLock, threading.Thread). Good news: the just released eventlet

Re: [openstack-dev] Please stop reviewing code while asking questions

2015-04-24 Thread Brant Knudson
On Fri, Apr 24, 2015 at 3:14 AM, Julien Danjou jul...@danjou.info wrote: Hi there, This is now happening weekly to me now, probably because I write too many patches touching almost all OpenStack projects once a cycle, and I'm really tired of that behavior, so PLEASE: *Stop sending

Re: [openstack-dev] [Neutron][Keystone] [Nova] How to validate teanant-id for admin operation

2015-04-24 Thread Brant Knudson
On Fri, Apr 24, 2015 at 11:53 AM, Eichberger, German german.eichber...@hp.com wrote: All, Following up from the last Neutron meeting: If Neutron is performing an operation as an admin on behalf of a user that user's tenant-id (or project-id) isn't validated - in particular an admin can

Re: [openstack-dev] Please stop reviewing code while asking questions

2015-04-24 Thread Brant Knudson
On Fri, Apr 24, 2015 at 10:06 AM, Salvatore Orlando sorla...@nicira.com wrote: On 24 April 2015 at 16:50, Chris Friesen chris.frie...@windriver.com wrote: On 04/24/2015 07:26 AM, Salvatore Orlando wrote: If you think it might be beneficial to adjust tooling to that these contributions

Re: [openstack-dev] [keystone] keystoneclient stable/icehouse broken

2015-04-19 Thread Brant Knudson
On Sun, Apr 19, 2015 at 3:07 PM, Brant Knudson b...@acm.org wrote: Ever since the stable/icehouse branch was created for python-keystoneclient it's been broken. There are a couple of issues: 1) The gate-python-keystoneclient-python34 job is failing with the error ERROR: InterpreterNotFound

[openstack-dev] [keystone] keystoneclient stable/icehouse broken

2015-04-19 Thread Brant Knudson
Ever since the stable/icehouse branch was created for python-keystoneclient it's been broken. There are a couple of issues: 1) The gate-python-keystoneclient-python34 job is failing with the error ERROR: InterpreterNotFound: python3.4. I don't know why it's not available. Maybe python3 needs to

[openstack-dev] [keystone] keystonemiddleware stable/juno broken

2015-04-19 Thread Brant Knudson
Ever since the stable/juno branch was created for keystonemiddleware it's been broken and there are several changes piling up there. The fix for bug 1408838 Tests fail with new oslo.utils 1.2.1 allows the tests to pass. I cherry-picked the fix here[1]. Based on the title of the bug, you'd think

Re: [openstack-dev] [keystone] keystonemiddleware stable/juno broken

2015-04-21 Thread Brant Knudson
On Sun, Apr 19, 2015 at 2:21 PM, Brant Knudson b...@acm.org wrote: Ever since the stable/juno branch was created for keystonemiddleware it's been broken and there are several changes piling up there. The fix for bug 1408838 Tests fail with new oslo.utils 1.2.1 allows the tests to pass. I

Re: [openstack-dev] [oslo] Deprecation path?

2015-04-24 Thread Brant Knudson
On Fri, Apr 24, 2015 at 2:21 PM, Robert Collins robe...@robertcollins.net wrote: I think it needs a three-step dance. 1) Commit the intent to deprecate but don't signal it programmatically. Python's warnings package has a PendingDeprecationWarning for this --

Re: [openstack-dev] [Congress] [Murano] Congress devstack installation is failing in murano gate job

2015-04-29 Thread Brant Knudson
On Wed, Apr 29, 2015 at 9:11 AM, Sean Dague s...@dague.net wrote: On 04/29/2015 10:05 AM, Sean Dague wrote: On 04/29/2015 09:29 AM, Filip Blaha wrote: Hi Serg I checked devstack log [1] and it seems that stevedore==1.4.0 was installed due to congress 2015-04-29 11:12:16.120

Re: [openstack-dev] [CI] gate wedged by tox = 2.0

2015-05-14 Thread Brant Knudson
On Thu, May 14, 2015 at 9:41 AM, Matt Riedemann mrie...@linux.vnet.ibm.com wrote: On 5/14/2015 5:46 AM, Sean Dague wrote: On 05/14/2015 04:16 AM, Robert Collins wrote: Tox 2.0 just came out, and it isolates environment variables - which is good, except if you use them (which we do). So

Re: [openstack-dev] [nova][cinder][neutron][security] Rootwrap discussions at OSSG mid-cycle

2015-05-14 Thread Brant Knudson
On Thu, May 14, 2015 at 2:48 AM, Angus Lees g...@inodes.org wrote: On Wed, 13 May 2015 at 02:16 Thierry Carrez thie...@openstack.org wrote: Lucas Fisher wrote: We spent some time at the OSSG mid-cycle meet-up this week discussing root wrap, looking at the existing code, and considering some

[openstack-dev] [all] Problems with keystoneclient stable branch (and maybe yours too)

2015-04-12 Thread Brant Knudson
There were several problems with the keystoneclient stable/juno branch that have been or are in the process of being fixed since its creation. Hopefully this note will be useful to other projects that create stable branches for their libraries. 1) Unit tests didn't pass with earlier packages

Re: [openstack-dev] [all] Problems with keystoneclient stable branch (and maybe yours too)

2015-04-14 Thread Brant Knudson
On Mon, Apr 13, 2015 at 9:33 PM, gordon chung g...@live.ca wrote: 2) Incorrect cap in requirements.txt python-keystoneclient in stable/juno was capped at =1.1.0, and 1.1.0 is the version tagged for the stable branch. When you create a review in stable/juno it installs

Re: [openstack-dev] [all][oslo][clients] Let's speed up start of OpenStack libs and clients by optimizing imports with profimp

2015-04-06 Thread Brant Knudson
On Sun, Apr 5, 2015 at 5:41 PM, Boris Pavlovic bo...@pavlovic.me wrote: Brant, I run profimp with and without patch https://review.openstack.org/#/c/164066/: And it really works well: before 170ms: http://boris-42.github.io/keystone/before.html after 76ms:

Re: [openstack-dev] [docs] [End User Guide] [Keystone] keyring support for python-keystoneclient and python-openstackclient

2015-04-07 Thread Brant Knudson
On Tue, Apr 7, 2015 at 3:52 AM, Olena Logvinova ologvin...@mirantis.com wrote: Good day to everyone! My name is Olena, I am new in OpenStack (working as a tech writer). And I'm stuck on a bug https://launchpad.net/bugs/1419990 (patch https://review.openstack.org/#/c/163503/). I have 2

Re: [openstack-dev] [all][oslo][clients] Let's speed up start of OpenStack libs and clients by optimizing imports with profimp

2015-04-08 Thread Brant Knudson
On Wed, Apr 8, 2015 at 7:59 AM, Doug Hellmann d...@doughellmann.com wrote: Excerpts from Robert Collins's message of 2015-04-07 10:43:30 +1200: On 7 April 2015 at 05:11, Joe Gordon joe.gord...@gmail.com wrote: On Mon, Apr 6, 2015 at 8:39 AM, Dolph Mathews dolph.math...@gmail.com

Re: [openstack-dev] [keystone]Why not common definition about normal HTTP status code like 2xx and 3xx?

2015-06-03 Thread Brant Knudson
On Tue, Jun 2, 2015 at 4:32 AM, Chenhong Liu liuchenh...@unitedstack.com wrote: There is keystone/exception.py which contains Exceptions defined and used inside keystone provide 4xx and 5xx status code. And we can use it like: exception.Forbidden.code, exception.forbiddent.title

Re: [openstack-dev] [nova][security] Enable user password complexity verification

2015-06-05 Thread Brant Knudson
On Wed, Jun 3, 2015 at 6:49 AM, David Stanek dsta...@dstanek.com wrote: On Wed, Jun 3, 2015 at 6:04 AM liusheng liusheng1...@126.com wrote: Thanks for this topic, also, I think it is similar situation when talking about keystone users, not only the instances's password. In the past we've

Re: [openstack-dev] [ceilometer] can we get ceilometermiddleware to use a config file instead of transport_url?

2015-06-22 Thread Brant Knudson
On Mon, Jun 22, 2015 at 2:43 PM, Doug Hellmann d...@doughellmann.com wrote: Excerpts from Sean Dague's message of 2015-06-22 13:30:44 -0400: On 06/22/2015 01:15 PM, Michael Krotscheck wrote: Having _just_ done this, a couple of suggestions. - If the middleware is NOT optional - that

Re: [openstack-dev] [devstack] apache wsgi application support

2015-06-23 Thread Brant Knudson
On Wed, Jun 17, 2015 at 1:21 PM, Sean Dague s...@dague.net wrote: On 06/16/2015 05:25 PM, Chris Dent wrote: On Tue, 16 Jun 2015, Sean Dague wrote: I was just looking at the patches that put Nova under apache wsgi for the API, and there are a few things that I think are going in the wrong

Re: [openstack-dev] Specify a domain in mapping rules

2015-06-19 Thread Brant Knudson
You might need these changes, which are proposed but not merged: https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:stable/kilo+topic:bug/1442787,n,z Salut, Brant On Thu, Jun 18, 2015 at 6:04 AM, J. Pablo Martín Cobos goi...@gmail.com wrote: Hi all, I'm a

Re: [openstack-dev] [api] [all] To changes-since or not to changes-since

2015-06-22 Thread Brant Knudson
Keystone also has a resource that provides changes since[1], the query parameter used is since. [1] http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-revoke-ext.html#list-revocation-events Ciao, Brant On Fri, Jun 19, 2015 at 3:25 PM, Sean Dague s...@dague.net

Re: [openstack-dev] [devstack] apache wsgi application support

2015-06-24 Thread Brant Knudson
On Wed, Jun 24, 2015 at 7:27 AM, Chris Dent chd...@redhat.com wrote: On Wed, 24 Jun 2015, Sean Dague wrote: On 06/24/2015 07:57 AM, Chris Dent wrote: If the primary reason is so that we can rely on the console_scripts entry point to handle getting the application somewhere useful then that

Re: [openstack-dev] [Ironic] [TC] Discussion: changing Ironic's release model

2015-05-29 Thread Brant Knudson
On Fri, May 29, 2015 at 8:11 AM, Thomas Goirand z...@debian.org wrote: On 05/28/2015 06:41 PM, Devananda van der Veen wrote: Hi all, tl;dr; At the summit, the Ironic team discussed the challenges we've had with the current release model and came up with some ideas to address them.

Re: [openstack-dev] [pbr] 1.0.1 released

2015-05-21 Thread Brant Knudson
On Thu, May 21, 2015 at 10:17 AM, Robert Collins robe...@robertcollins.net wrote: On 22 May 2015 at 05:14, Brant Knudson b...@acm.org wrote: On Thu, May 21, 2015 at 2:22 AM, YAMAMOTO Takashi yamam...@valinux.co.jp wrote: hi, can you explain why you want to use pbr 1.0.1

Re: [openstack-dev] [pbr] 1.0.1 released

2015-05-21 Thread Brant Knudson
On Thu, May 21, 2015 at 2:22 AM, YAMAMOTO Takashi yamam...@valinux.co.jp wrote: hi, can you explain why you want to use pbr 1.0.1 in the first place? what's wrong with requiring pbr1.0 ? Global requirements currently has pbr=0.11,2.0[1], and keystonemiddleware has the updated requirement

Re: [openstack-dev] [all] Need volunteers to test coverage 4.0 alpha release

2015-08-03 Thread Brant Knudson
On Mon, Aug 3, 2015 at 6:32 AM, Doug Hellmann d...@doughellmann.com wrote: Do we have anyone willing to spend some time looking at the incompatibilities Ned mentions below to ensure that we have a smooth transition when 4.0 moves out of alpha? Doug Seems to work ok with keystone. There

Re: [openstack-dev] [keystone] the status of ec2 api

2015-07-29 Thread Brant Knudson
On Wed, Jul 29, 2015 at 1:49 PM, Brant Knudson b...@acm.org wrote: On Mon, Jul 13, 2015 at 9:50 PM, Ken'ichi Ohmichi ken1ohmi...@gmail.com wrote: Hi Keystone team, Now the test of ec2 credentials[1] is been proposed to Tempest, and I'd like to know current situation of ec2 api

Re: [openstack-dev] [keystone] the status of ec2 api

2015-07-29 Thread Brant Knudson
On Mon, Jul 13, 2015 at 9:50 PM, Ken'ichi Ohmichi ken1ohmi...@gmail.com wrote: Hi Keystone team, Now the test of ec2 credentials[1] is been proposed to Tempest, and I'd like to know current situation of ec2 api on Keystone as a Tempest reviewer. On Nova instead, ec2 api is deprecated in

Re: [openstack-dev] Python 3: 5 more projects with a py34 voting gate, only 4 remaing

2015-07-20 Thread Brant Knudson
On Fri, Jul 17, 2015 at 7:32 AM, Victor Stinner vstin...@redhat.com wrote: Hi, ... (3) keystonemiddleware: blocked by python-memcached, I sent a pull request 3 months ago and I'm still waiting... https://github.com/linsomniac/python-memcached/pull/67 I may fork the project if the

Re: [openstack-dev] Python 3: 5 more projects with a py34 voting gate, only 4 remaing

2015-07-20 Thread Brant Knudson
On Fri, Jul 17, 2015 at 7:32 AM, Victor Stinner vstin...@redhat.com wrote: Hi, We are close to having a voting py34 gate on all OpenStack libraries and applications. I just made the py34 gate voting for the 5 following projects: * keystone ... Victor While there's a py34 gate for

Re: [openstack-dev] [Oslo][TaskFlow] Proposal for new core reviewer (greg hill)

2015-11-11 Thread Brant Knudson
Looks like he's doing good reviews so +1. - Brant On Wed, Nov 11, 2015 at 2:02 PM, Joshua Harlow wrote: > Greetings all stackers, > > I propose that we add Greg Hill[1] to the taskflow-core[2] team. > > Greg (aka jimbo) has been actively contributing to taskflow for a >

  1   2   >