| *** lifeless has quit IRC | 00:38 | |
| openstackgerrit | Samuel Merritt proposed openstack/swift master: Be more explicit about WSGI/non-WSGI environment keys https://review.openstack.org/578239 | 00:43 |
|---|---|---|
| *** lifeless has joined #openstack-swift | 00:45 | |
| *** zaitcev_ has joined #openstack-swift | 00:50 | |
| *** ChanServ sets mode: +v zaitcev_ | 00:50 | |
| *** zaitcev has quit IRC | 00:54 | |
| *** zaitcev_ has quit IRC | 01:16 | |
| kota_ | good morning | 01:42 |
| notmyname | hello kota_ | 01:44 |
| *** gyee has quit IRC | 01:51 | |
| mattoliverau | kota_: morning | 01:54 |
| kota_ | o/ | 01:54 |
| *** bkopilov has quit IRC | 02:30 | |
| *** psachin has joined #openstack-swift | 02:38 | |
| *** itlinux has joined #openstack-swift | 02:44 | |
| *** SkyRocknRoll has joined #openstack-swift | 03:21 | |
| *** bkopilov has joined #openstack-swift | 04:02 | |
| *** viks_ has joined #openstack-swift | 04:27 | |
| *** SkyRocknRoll has quit IRC | 04:38 | |
| *** psachin has quit IRC | 04:41 | |
| *** vpc has joined #openstack-swift | 05:10 | |
| vpc | hi | 05:10 |
| vpc | how to use tempauth rather than keystoneauth? | 05:11 |
| vpc | +mattoliverau | 05:11 |
| vpc | +kota_ | 05:11 |
| vpc | is there a way to use tempauth + keystoneauth | 05:11 |
| *** tdasilva has quit IRC | 05:21 | |
| vpc | hi | 05:27 |
| *** silor has joined #openstack-swift | 05:31 | |
| mattoliverau | vpc: why do you want to do that? tempauth should only be used for dev/testing and not for production. As all users passords are stored in plan text in the proxy config. | 05:33 |
| vpc | here +mattoliverau | 05:33 |
| vpc | https://github.com/stmuraka/OpenStackSwift-OpenWhisk/tree/master/OpenStackSwift/Webhook | 05:33 |
| *** tdasilva has joined #openstack-swift | 05:33 | |
| mattoliverau | but if you do. you just need to replace authtoken and keystoneauth and in thier place put tempauth. | 05:34 |
| mattoliverau | and yes you can use both. | 05:34 |
| vpc | like this http://paste.openstack.org/show/724355/? | 05:34 |
| mattoliverau | you'd need to define a different reseller prefix for tempauth if you want both. | 05:35 |
| vpc | i want to integrate openwhisk in swift | 05:35 |
| vpc | when i putting new image it creating a thumbnail | 05:35 |
| mattoliverau | vpc: if your getting rid of keystone auth, then like I said you need to remove both authtoken and keystone auth, you still have authtoken in that pipeline | 05:36 |
| vpc | okay wait | 05:36 |
| vpc | here http://paste.openstack.org/show/724361/ | 05:38 |
| vpc | may i know if you have example of a proxy server conf if i use both keystone and tempauth | 05:38 |
| vpc | swift -A http://107.105.135.163:8080/v1/AUTH_04eabf5e839a4476a4d312e7941a1e4f -U test:tester -K testing stat | 05:40 |
| vpc | Unauthorized. Check username/id, password, tenant name/id and user/tenant domain name/id. | 05:40 |
| mattoliverau | having both would look something like: http://paste.openstack.org/show/724364/ (I think based on your first paste) | 05:43 |
| vpc | okay i'll use that thank you :) | 05:43 |
| mattoliverau | vpc: I haven't tested it, mind you :) | 05:44 |
| vpc | Unauthorized. Check username/id, password, tenant name/id and user/tenant domain name/id. | 05:44 |
| vpc | when using tempauth | 05:44 |
| mattoliverau | what does the proxy log say? | 05:44 |
| vpc | swift -A http://107.105.135.163:8080/v1/ -U test:tester -K testing stat | 05:44 |
| vpc | is my url okay? | 05:44 |
| vpc | http://paste.openstack.org/show/724365/ | 05:45 |
| mattoliverau | vpc: the tempauth auth url (the -A) should be: auth/v1.0 so something like: http://107.105.135.163:8080/auth/v1.0 | 05:47 |
| vpc | so it doesnt based on my endpoint list | 05:47 |
| mattoliverau | no, endpoint list is _only_ for keystone, so something knows where to go once keystone gives a token. | 05:48 |
| vpc | yehey you're so good | 05:48 |
| vpc | its works | 05:48 |
| mattoliverau | tempauth, is just for testing so have it's own endpoint you hit (on the proxy) to get the token | 05:48 |
| vpc | here http://paste.openstack.org/show/724366/ | 05:48 |
| vpc | the next one is to try both keystone and tempatuh | 05:50 |
| *** cbartz has joined #openstack-swift | 05:59 | |
| *** bharath1234 has joined #openstack-swift | 06:07 | |
| mattoliverau | vpc: I still don't know why you need tempauth, as far as I can see, in the url you've given, tempauth is used. all you need is your token and endpoint. Which you were getting from keystone last we talked. So in the curl examples you can just swap the token and endpoint/storage url with your one you got from keystone rather then the one they get from tempauth. | 06:08 |
| vpc | but the probleme is | 06:09 |
| vpc | no trigger is happening :( | 06:09 |
| vpc | because on this setup | 06:09 |
| vpc | he only have one server | 06:09 |
| vpc | one server with openwhisk plus openstack swift | 06:09 |
| mattoliverau | if the container or object being creating in swift? | 06:10 |
| bharath1234 | But i feel temp auth is useful as it is installed by default and is very light weight(if i m right?). For keystone we need to set up on a seperate server? | 06:10 |
| vpc | +mattoliverau here is the expected output http://paste.openstack.org/show/724368/ | 06:10 |
| vpc | the second is my openwhisk | 06:10 |
| vpc | wheniver i put image on my container | 06:10 |
| vpc | the webhook trigger to create a thumbnail of it | 06:10 |
| vpc | on it* | 06:11 |
| mattoliverau | bharath1234: sure.. but tempauth is great _but_ only for testing, don't use it in prod. And keystone was already set up and working | 06:11 |
| vpc | So if ever i put openstack logo the webhook action will trigger then create a thumbnail of that image and create a container | 06:11 |
| vpc | openwhisk will be the one to create container and thumbnail the image i upload on the container that have my openwhisk webhook | 06:12 |
| mattoliverau | I haven't used openwhisk. But have you seen a the webhook fire from the swift proxy? ie watching netstat or tcpdump. | 06:18 |
| mattoliverau | looking at the webhook middleware, it should be writing info logs to the log. what does your proxy log say? | 06:18 |
| *** threestrands has quit IRC | 06:19 | |
| mattoliverau | the webhook doesn't seem to check the reponse code from the POST request. If it's timing out, it would say so. Otherwise it might just say successfully called webhook or something. | 06:20 |
| mattoliverau | they really should look for a success so you know. ie if the response is in the 200 series etc. | 06:21 |
| mattoliverau | but in either case there should be some logging. and so long as your at least on info level logging in syslog you should be seeing something when it's a hook is triggered. | 06:22 |
| *** ccamacho has joined #openstack-swift | 06:22 | |
| *** bharath1234 has quit IRC | 06:31 | |
| *** hseipp has joined #openstack-swift | 06:41 | |
| *** pcaruana has joined #openstack-swift | 06:44 | |
| vpc | here +mattoliverau http://paste.openstack.org/show/724372/ | 06:50 |
| vpc | SSl error? | 06:50 |
| mattoliverau | yup looks that way. For whatever reason the connection from the webhook middleware doesn't like your ssl cert. I assume on your openswhisk server. | 06:52 |
| mattoliverau | So webhook request doen't make it so you can't see it on the whisk side. | 06:53 |
| *** mikecmpbll has joined #openstack-swift | 06:53 | |
| vpc | he uses https | 06:54 |
| vpc | https://github.com/stmuraka/OpenStackSwift-OpenWhisk/blob/master/OpenWhisk/deployOpenWhisk.sh | 06:55 |
| mattoliverau | sure, are you, and if so is it a valid ssl cert your using? | 06:56 |
| mattoliverau | python 2 urllib2 doesn't think it is, what ever you've got. | 06:57 |
| vpc | i think he generate a self signed cert | 06:57 |
| mattoliverau | for testing you could turn off ssl on the whisk server. OR look into how to tell the middleware to make a request where it doesn't verify. | 06:58 |
| vpc | As here https://github.com/stmuraka/OpenStackSwift-OpenWhisk/blob/master/OpenWhisk/deployOpenWhisk.sh#L216 | 06:58 |
| mattoliverau | or maybe theres a global option to tell python to ignore. | 06:58 |
| vpc | this is the webhook.py | 06:59 |
| vpc | https://github.com/stmuraka/OpenStackSwift-OpenWhisk/blob/master/OpenStackSwift/Webhook/swift/common/middleware/webhook.py | 06:59 |
| mattoliverau | I guess, make the cert you used trusted. Maybe the proxy server needs to know about the "new" CA that was created. | 07:00 |
| vpc | i added the cert to the controller | 07:01 |
| vpc | curl: (51) Unable to communicate securely with peer: requested domain name does not match the server's certificate. | 07:01 |
| vpc | ang curl it | 07:01 |
| *** pcaruana has quit IRC | 07:02 | |
| vpc | can i edit this +mattoliverau https://github.com/stmuraka/OpenStackSwift-OpenWhisk/blob/master/OpenStackSwift/Webhook/swift/common/middleware/webhook.py#L138 | 07:03 |
| mattoliverau | can you just turn off ssl on the openwhisk server as this is a test system to see if it works. Looking online apparently you might be able to add PYTHONHTTPSVERIFY=0 to your evironment when the swift proxy maybe. Will skip verification. | 07:05 |
| mattoliverau | *when running the swift proxy maybe | 07:05 |
| vpc | on the openwhiskserver | 07:06 |
| vpc | or on the swift swide | 07:06 |
| mattoliverau | on the side that is making the reqeust to the server with the bad SSL cert. | 07:06 |
| mattoliverau | so the swift proxy side. | 07:06 |
| *** tesseract has joined #openstack-swift | 07:07 | |
| *** bharath1234 has joined #openstack-swift | 07:09 | |
| *** bharath1234 has quit IRC | 07:10 | |
| vpc | correction my proxy server is in container | 07:11 |
| *** geaaru has joined #openstack-swift | 07:17 | |
| mattoliverau | vpc: well, the ssl cert seems to be your problem. So you need to make the cert or cert authority that was used to create it trusted on the requester side, use a trusted cert, don't use SSL, or somehow make pythons urllib2 not do ssl verify. Damn security :P | 07:18 |
| mattoliverau | I gotta step into a meeting, and then finally end for the day and go eat dinner and spend time with the family. Good luck. | 07:19 |
| vpc | same error when i run all export PYTHONHTTPSVERIFY=0 in both sides | 07:19 |
| vpc | noted thank you for your time | 07:19 |
| mattoliverau | it has to be exported in the env of the running process | 07:20 |
| mattoliverau | but yeah, not sure if that'll work, I was it online somewhere :) | 07:20 |
| *** rcernin has quit IRC | 07:51 | |
| *** rcernin has joined #openstack-swift | 07:53 | |
| *** pcaruana has joined #openstack-swift | 07:57 | |
| acoles | good morning | 08:12 |
| *** ccamacho has quit IRC | 08:27 | |
| *** ccamacho has joined #openstack-swift | 08:27 | |
| *** rcernin has quit IRC | 08:47 | |
| *** hseipp has quit IRC | 08:48 | |
| *** hseipp has joined #openstack-swift | 08:51 | |
| *** d0ugal has quit IRC | 08:54 | |
| openstackgerrit | Merged openstack/swift master: py3: port healthcheck https://review.openstack.org/577574 | 09:06 |
| openstackgerrit | Merged openstack/swift master: Log unexpected errors when trying to clean up empty dirs https://review.openstack.org/578224 | 09:06 |
| vpc | hi guys | 09:12 |
| *** ianychoi has quit IRC | 09:14 | |
| *** ianychoi has joined #openstack-swift | 09:15 | |
| openstackgerrit | Alistair Coles proposed openstack/swift master: Add keymaster to fetch root secret from KMIP service https://review.openstack.org/578075 | 09:37 |
| *** threestrands has joined #openstack-swift | 09:45 | |
| *** threestrands has quit IRC | 09:45 | |
| *** threestrands has joined #openstack-swift | 09:45 | |
| *** threestrands has quit IRC | 09:46 | |
| *** threestrands has joined #openstack-swift | 09:47 | |
| *** threestrands has quit IRC | 09:47 | |
| *** threestrands has joined #openstack-swift | 09:47 | |
| *** silor1 has joined #openstack-swift | 10:02 | |
| *** silor has quit IRC | 10:03 | |
| *** silor1 is now known as silor | 10:03 | |
| *** bkopilov has quit IRC | 10:09 | |
| *** gkadam__ has quit IRC | 10:16 | |
| *** gkadam__ has joined #openstack-swift | 10:16 | |
| vpc | hi | 10:23 |
| *** pcaruana has quit IRC | 10:31 | |
| vpc | gi +mattoliverau | 10:52 |
| vpc | hi +mattoliverau | 10:52 |
| vpc | hi +kota_ | 10:52 |
| *** cbartz has quit IRC | 11:45 | |
| *** ^andrea^ has joined #openstack-swift | 12:07 | |
| *** mvk has quit IRC | 12:07 | |
| *** mvk has joined #openstack-swift | 12:37 | |
| *** cbartz has joined #openstack-swift | 12:48 | |
| *** hseipp has quit IRC | 12:56 | |
| *** hseipp has joined #openstack-swift | 13:22 | |
| *** hseipp has quit IRC | 13:31 | |
| *** bkopilov has joined #openstack-swift | 13:34 | |
| *** itlinux has quit IRC | 13:35 | |
| *** drewn3ss has joined #openstack-swift | 13:46 | |
| *** hseipp has joined #openstack-swift | 13:46 | |
| *** hseipp has quit IRC | 13:47 | |
| *** hseipp has joined #openstack-swift | 13:48 | |
| *** silor has quit IRC | 13:52 | |
| *** cbartz has quit IRC | 14:17 | |
| *** cbartz has joined #openstack-swift | 14:18 | |
| *** itlinux has joined #openstack-swift | 14:22 | |
| *** SkyRocknRoll has joined #openstack-swift | 14:25 | |
| *** threestrands has quit IRC | 14:30 | |
| *** mvk has quit IRC | 15:23 | |
| *** gkadam__ has quit IRC | 15:26 | |
| *** gkadam__ has joined #openstack-swift | 15:26 | |
| *** cbartz has quit IRC | 15:42 | |
| *** gyee has joined #openstack-swift | 15:42 | |
| notmyname | good morning | 15:57 |
| *** mvenesio has joined #openstack-swift | 16:01 | |
| *** tesseract has quit IRC | 16:34 | |
| *** gkadam__ has quit IRC | 16:37 | |
| openstackgerrit | Alistair Coles proposed openstack/swift master: WIP: Add support multiple root encryption secrets https://review.openstack.org/577874 | 17:43 |
| *** SkyRocknRoll has quit IRC | 18:29 | |
| *** geaaru has quit IRC | 18:29 | |
| *** mvk has joined #openstack-swift | 18:53 | |
| *** hseipp has quit IRC | 18:58 | |
| *** m_kazuhiro has joined #openstack-swift | 20:42 | |
| notmyname | swift team meeting in 10 minutes | 20:50 |
| *** zaitcev has joined #openstack-swift | 20:51 | |
| *** ChanServ sets mode: +v zaitcev | 20:51 | |
| kota_ | good morning | 20:52 |
| notmyname | kota_: m_kazuhiro: zaitcev: tdasilva: acoles: torgomatic: mattoliverau: clayg: rledisez: cschwede: courtesy meeting ping (2 minutes) | 20:57 |
| clayg | I’m not really “online” or “working” | 20:58 |
| notmyname | I know :-) | 20:59 |
| notmyname | clayg: what do you want us to do with https://review.openstack.org/#/c/337960/? I was going to bring it up in the meeting | 20:59 |
| patchbot | patch 337960 - swift - Send correct SLO ETag for container updates | 20:59 |
| mattoliverau | Morning | 20:59 |
| notmyname | ...or we can just talk about it in the meeting | 20:59 |
| clayg | 🤷♂️ | 20:59 |
| clayg | A bunch of people think it makes the world better to merge as is. I’ve advocated more work should happen to make the world better but with only additive API changes. Contention seems to be broad support for use-case and weak support for more-work/legacy-api-warts. So we’re stuck. We need a value judgment. | 21:04 |
| timburke | oh... this swiftclient release will include some rather noticeable version bumps for dependencies -- how do we feel about that? should i try to sort out https://review.openstack.org/#/c/568914/, or just abandon it? | 21:07 |
| patchbot | patch 568914 - python-swiftclient - Back out some version bumps | 21:07 |
| acoles | timburke: if you're putting together a list of swiftclient patches to land for release then there is https://review.openstack.org/#/c/574261/ which IIRC someone wanted | 21:09 |
| patchbot | patch 574261 - python-swiftclient - Add option for user to enter password | 21:09 |
| notmyname | acoles: yes! | 21:09 |
| *** mvenesio has quit IRC | 21:18 | |
| *** mvenesio has joined #openstack-swift | 21:19 | |
| *** mvenesio has quit IRC | 21:24 | |
| *** m_kazuhiro has quit IRC | 21:30 | |
| *** itlinux has quit IRC | 21:50 | |
| *** rcernin has joined #openstack-swift | 21:50 | |
| notmyname | timburke: when you get a chance, can you add those swiftclient patches you mentioned to the https://wiki.openstack.org/wiki/Swift/PriorityReviews wiki? | 22:25 |
| notmyname | timburke: I just added a section for it | 22:25 |
| openstackgerrit | Tim Burke proposed openstack/swift master: Content-Length enforcement fixups https://review.openstack.org/578575 | 22:54 |
| openstackgerrit | Tim Burke proposed openstack/swift master: swob: Fix up some WSGI string business https://review.openstack.org/578210 | 22:56 |
| openstackgerrit | Tim Burke proposed openstack/swift master: swob: Stop auto-encoding unicode bodies https://review.openstack.org/578227 | 23:00 |
| *** mrjk has quit IRC | 23:08 | |
| *** ianychoi has quit IRC | 23:16 | |
| *** kei_yama has joined #openstack-swift | 23:17 | |
| *** ianychoi has joined #openstack-swift | 23:19 | |
| mattoliverau | morning.. again | 23:22 |
| openstackgerrit | Tim Burke proposed openstack/swift master: swob: Stop auto-encoding unicode bodies https://review.openstack.org/578227 | 23:42 |
| openstackgerrit | Tim Burke proposed openstack/swift master: swob.Match: remove quotes when checking __contains__ https://review.openstack.org/556664 | 23:53 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!