| *** rcernin_ has quit IRC | 00:41 | |
| *** rcernin has joined #openstack-swift | 00:41 | |
| *** threestrands_ has joined #openstack-swift | 01:11 | |
| hugokuo | good morning! | 01:13 |
|---|---|---|
| hugokuo | I got a question. Is s3API list-buckets-v2 supported in Swift 2.21 or not? | 01:14 |
| *** threestrands has quit IRC | 01:14 | |
| *** threestrands_ has quit IRC | 01:21 | |
| *** gkadam_ has quit IRC | 01:22 | |
| *** gkadam_ has joined #openstack-swift | 01:22 | |
| *** gyee has quit IRC | 01:34 | |
| *** gkadam_ has quit IRC | 01:38 | |
| *** gkadam_ has joined #openstack-swift | 01:38 | |
| *** gkadam_ has quit IRC | 02:11 | |
| *** itlinux has joined #openstack-swift | 02:18 | |
| *** sorrison has joined #openstack-swift | 03:06 | |
| *** psachin has joined #openstack-swift | 03:39 | |
| *** gkadam has joined #openstack-swift | 03:41 | |
| *** gkadam has quit IRC | 04:11 | |
| kota_ | hugokuo: morning | 04:25 |
| kota_ | hugokuo: https://github.com/openstack/swift/commit/a2fb335e4b it looks like you're right | 04:25 |
| kota_ | the commit appears since 2.21.0 | 04:25 |
| *** gkadam has joined #openstack-swift | 04:28 | |
| openstackgerrit | Kota Tsuyuzaki proposed openstack/swift master: Update mailmap for Kota Tsuyuzaki https://review.opendev.org/664200 | 04:28 |
| hugokuo | kota_: got it. Let me run some test. It might have potential bug | 04:30 |
| kota_ | hugokuo: ok. let me know if you find something | 04:31 |
| hugokuo | sure. | 04:31 |
| *** gkadam has quit IRC | 04:35 | |
| *** m75abrams has joined #openstack-swift | 04:52 | |
| *** e0ne has joined #openstack-swift | 05:15 | |
| *** e0ne has quit IRC | 05:42 | |
| *** threestrands has joined #openstack-swift | 05:52 | |
| *** threestrands has quit IRC | 05:53 | |
| kota_ | hmmm, I'm looking at the patch 664459, that is interesting because that says as "ERROR: Package 'cryptography' is constrained to 2.0 which is incompatible with the settings Requirement(package='cryptography', location='', specifiers='>=2.0.2', markers='', comment='# BSD/Apache-2.0', extras=frozenset()) from requirements.txt." | 06:15 |
| patchbot | https://review.opendev.org/#/c/664459/ - swift - Bump up minimum cryptography version - 1 patch set | 06:15 |
| kota_ | so it sounds like 2.0 is exactly not >=2.0.2 so we may need >=2.0.0? | 06:16 |
| *** [diablo]8 has quit IRC | 06:30 | |
| *** [diablo] has joined #openstack-swift | 06:35 | |
| *** ccamacho has joined #openstack-swift | 06:36 | |
| *** pcaruana has joined #openstack-swift | 06:55 | |
| *** rdejoux has joined #openstack-swift | 07:07 | |
| *** rcernin has quit IRC | 07:08 | |
| *** tesseract has joined #openstack-swift | 07:08 | |
| *** e0ne has joined #openstack-swift | 07:20 | |
| *** tkajinam has quit IRC | 08:05 | |
| *** mikecmpbll has joined #openstack-swift | 08:12 | |
| zigo | There doesn't seem to be a way to tell swiftproxy to use a CA file for the S3 tokens, is there? | 09:03 |
| *** rcernin has joined #openstack-swift | 09:03 | |
| zigo | timburke: notmyname: ^ | 09:04 |
| kota_ | zigo: FWIW, it looks like s3token middleware has the option for certfile, https://opendev.org/openstack/requirements | 09:53 |
| kota_ | no, the URL is wrong | 09:54 |
| kota_ | wait | 09:54 |
| kota_ | https://github.com/openstack/swift/blob/master/etc/proxy-server.conf-sample#L599-L602 | 09:54 |
| zigo | kota_: Cert file, probably, but what I need is ca_file ! | 09:54 |
| kota_ | zigo, i see, sorry | 09:54 |
| zigo | kota_: In my PoC, I've disabled lots of SSL stuff because of that, then I get: | 09:55 |
| zigo | # s3cmd ls | 09:55 |
| zigo | ERROR: S3 error: 403 (SignatureDoesNotMatch): The request signature we calculated does not match the signature you provided. Check your key and signing method. | 09:55 |
| zigo | Where can I go to look from there? | 09:55 |
| zigo | There's only a 403 in the swiftproxy, nothing more that's helping ... | 09:55 |
| kota_ | What auth are you using? keystone? or tempauth? | 09:56 |
| kota_ | w/o ssl, s3cmd should work with swift s3api. | 09:57 |
| kota_ | AFAIK | 09:57 |
| kota_ | One possibility is Swift s3api is not using the Swift API token. what you need for access_key and secret_key is just "your account name" and "your password" to get the token. | 10:00 |
| kota_ | to get the token for Swift API. | 10:00 |
| zigo | kota_: So, it's note the access_key / secret that I should setup in the .s3cfg ? | 10:06 |
| kota_ | zigo: i think so | 10:06 |
| zigo | s/note/not/ | 10:06 |
| kota_ | oh, not. | 10:06 |
| zigo | kota_: I'm using keystone. | 10:10 |
| zigo | kota_: So, I did "openstack ec2 credentials create" and used that in my .s3cfg. | 10:10 |
| zigo | kota_: You're saying I should replace that by my user / pass in Keystone? | 10:11 |
| kota_ | zigo: yes, that way. IIRC. | 10:11 |
| zigo | Ok, trying then. | 10:11 |
| kota_ | does it work? | 10:17 |
| *** pcaruana has quit IRC | 10:19 | |
| kota_ | anyway, I'm being offline to get back home. as you know, timburke, notmyname (or other swift contributors) could help you later. | 10:22 |
| *** tdasilva_ has quit IRC | 10:25 | |
| zigo | Thanks. | 11:03 |
| *** pcaruana has joined #openstack-swift | 11:09 | |
| *** rcernin has quit IRC | 11:43 | |
| *** baojg has joined #openstack-swift | 11:50 | |
| *** gkadam has joined #openstack-swift | 12:03 | |
| *** gkadam has quit IRC | 12:26 | |
| *** gkadam has joined #openstack-swift | 12:27 | |
| *** baojg has quit IRC | 12:27 | |
| *** tdasilva has joined #openstack-swift | 13:17 | |
| *** ChanServ sets mode: +v tdasilva | 13:17 | |
| *** BjoernT has joined #openstack-swift | 13:34 | |
| *** gkadam has quit IRC | 13:41 | |
| *** gkadam has joined #openstack-swift | 13:42 | |
| *** BjoernT_ has joined #openstack-swift | 13:48 | |
| *** BjoernT has quit IRC | 13:48 | |
| *** tdasilva has quit IRC | 13:54 | |
| *** tdasilva has joined #openstack-swift | 13:55 | |
| *** ChanServ sets mode: +v tdasilva | 13:55 | |
| *** pcaruana has quit IRC | 14:04 | |
| *** pcaruana has joined #openstack-swift | 14:30 | |
| *** pcaruana has quit IRC | 14:31 | |
| *** pcaruana has joined #openstack-swift | 14:31 | |
| *** itlinux has quit IRC | 14:55 | |
| *** pcaruana has quit IRC | 15:17 | |
| *** gkadam has quit IRC | 15:22 | |
| *** gkadam has joined #openstack-swift | 15:22 | |
| *** tdasilva has quit IRC | 15:31 | |
| *** tdasilva has joined #openstack-swift | 15:31 | |
| *** ChanServ sets mode: +v tdasilva | 15:31 | |
| *** e0ne has quit IRC | 15:36 | |
| *** pcaruana has joined #openstack-swift | 15:43 | |
| *** gkadam has quit IRC | 15:53 | |
| *** gkadam has joined #openstack-swift | 15:53 | |
| *** pcaruana has quit IRC | 15:55 | |
| *** tdasilva_ has joined #openstack-swift | 15:58 | |
| *** ChanServ sets mode: +v tdasilva_ | 15:58 | |
| *** tdasilva has quit IRC | 16:00 | |
| *** tesseract has quit IRC | 16:18 | |
| *** tdasilva has joined #openstack-swift | 16:18 | |
| *** ChanServ sets mode: +v tdasilva | 16:18 | |
| *** tdasilva_ has quit IRC | 16:20 | |
| *** ccamacho has quit IRC | 16:36 | |
| *** mikecmpbll has quit IRC | 16:49 | |
| *** pcaruana has joined #openstack-swift | 16:49 | |
| openstackgerrit | Tim Burke proposed openstack/swift master: Bump up minimum cryptography version https://review.opendev.org/664459 | 16:54 |
| *** itlinux has joined #openstack-swift | 16:57 | |
| *** m75abrams has quit IRC | 17:05 | |
| timburke | kota_, sorry about my addition to p 664200 -- i feel as bad as if i called you by the wrong name :-( | 17:10 |
| patchbot | https://review.opendev.org/#/c/664200/ - swift - Update mailmap for Kota Tsuyuzaki - 3 patch sets | 17:10 |
| timburke | on p 664459, that was my bad -- i started by looking at which versions had wheels on pypi, updated lower-constraints, verified that it worked, then went to update requirements and saw that we already blacklisted 2.0, so i looked at the patch versions that came after | 17:12 |
| patchbot | https://review.opendev.org/#/c/664459/ - swift - Bump up minimum cryptography version - 2 patch sets | 17:12 |
| timburke | zigo, yep, looks like we support client certs but not CA certs :-/ we should definitely fix that | 17:16 |
| timburke | and using the credentials generated by keystone is absolutely the right way to go | 17:16 |
| timburke | if you add a --debug, you should get some more information | 17:20 |
| timburke | it will definitely include a line like `DEBUG: SignHeaders: u'GET\n\n\n\nx-amz-date:Tue, 11 Jun 2019 17:19:15 +0000\n/'` that tells you what the client signed | 17:21 |
| timburke | hopefully it will include a line like `DEBUG: ErrorXML: StringToSign: 'GET\n\n\n\nx-amz-date:Tue, 11 Jun 2019 17:19:15 +0000\n/'` that will tell you what the server was expecting and we can compare the two | 17:21 |
| *** rdejoux has quit IRC | 17:31 | |
| *** headinclouds has quit IRC | 18:13 | |
| *** pcaruana has quit IRC | 18:39 | |
| *** tdasilva has quit IRC | 18:45 | |
| *** psachin has quit IRC | 20:02 | |
| *** gkadam has quit IRC | 20:04 | |
| *** gkadam has joined #openstack-swift | 20:05 | |
| *** tdasilva has joined #openstack-swift | 20:08 | |
| *** ChanServ sets mode: +v tdasilva | 20:08 | |
| *** itlinux has quit IRC | 21:07 | |
| openstackgerrit | Tim Burke proposed openstack/swift master: Ensure get_*_info keys are native strings https://review.opendev.org/664710 | 21:51 |
| timburke | clayg, ^^^ seem right? | 21:52 |
| clayg | i guess... the json.dumps() is somewhere in the memcache client? Does it really make sense for it to be bytes in py2 and strings in py3 - isn't that just asking middleware code to have to be super smart about py2 vs. py3? | 21:55 |
| timburke | clayg, yeah -- dumps at https://github.com/openstack/swift/blob/2.21.0/swift/common/memcached.py#L272, loads at https://github.com/openstack/swift/blob/2.21.0/swift/common/memcached.py#L318 | 22:06 |
| timburke | maybe i'm losing some pickle coverage? but that's been deprecated a while... | 22:06 |
| timburke | middleware code already has to be smart about 2/3 issues -- the question is really, should these be native strings or wsgi strings? py2 already decodes as utf8 to dumps(), so when we loads() on py3 we're native -- seemed like less work to leave it | 22:10 |
| *** rcernin has joined #openstack-swift | 22:10 | |
| *** itlinux has joined #openstack-swift | 22:14 | |
| clayg | but if get_*_info can return unicode ("native") on py3 - why isn't is reasonable to let it do that on py2 as well? | 22:34 |
| clayg | I mean I get that it ... doesn't currently already ... but like why can't we? | 22:36 |
| clayg | Alternatively let's go all in on bytes! py2 already returns bytes - let's make py3 return bytes - strings are myth!!! | 22:36 |
| *** itlinux has quit IRC | 22:38 | |
| timburke | because when it was a cache-miss, we go back to resp.headers: https://github.com/openstack/swift/blob/2.21.0/swift/proxy/controllers/base.py#L510-L513 | 22:39 |
| timburke | (though that means a wsgi string, so there's already a bug that needs fixing :-/) | 22:40 |
| timburke | see https://review.opendev.org/#/c/662115/ | 22:40 |
| patchbot | patch 662115 - swift - Fix up how we memcache on py3 - 3 patch sets | 22:40 |
| clayg | does "native strings" mean bytes on py2 and unicode on py3? | 22:55 |
| timburke | yep | 23:00 |
| timburke | str()s | 23:02 |
| *** tkajinam has joined #openstack-swift | 23:04 | |
| *** BjoernT_ has quit IRC | 23:09 | |
| *** zaitcev has joined #openstack-swift | 23:41 | |
| *** ChanServ sets mode: +v zaitcev | 23:41 | |
| *** ianychoi has quit IRC | 23:48 | |
| *** ianychoi has joined #openstack-swift | 23:48 | |
| *** BjoernT has joined #openstack-swift | 23:50 | |
| *** BjoernT_ has joined #openstack-swift | 23:52 | |
| timburke | so, has everybody tried out storyboard? https://storyboard-dev.openstack.org/#!/project/openstack/swift | 23:54 |
| *** BjoernT has quit IRC | 23:54 | |
| *** tdasilva_ has joined #openstack-swift | 23:54 | |
| *** ChanServ sets mode: +v tdasilva_ | 23:54 | |
| timburke | please try it out ahead of the meeting tomorrow! | 23:55 |
| *** tdasilva has quit IRC | 23:57 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!