<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">2014-04-03 7:12 GMT+08:00 Jamie Lennox <span dir="ltr"><<a href="mailto:jamielennox@redhat.com" target="_blank">jamielennox@redhat.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class=""><br>
<br>
----- Original Message -----<br>
> From: "Adam Young" <<a href="mailto:ayoung@redhat.com">ayoung@redhat.com</a>><br>
> To: <a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a><br>
> Sent: Wednesday, 2 April, 2014 11:13:22 PM<br>
> Subject: Re: [openstack-dev] [Keystone] python-keystoneclient v3 functionality<br>
><br>
> On 04/01/2014 07:36 AM, Yaguang Tang wrote:<br>
><br>
><br>
><br>
> Thanks Jamie,<br>
><br>
> then the following question is do we intend to move other services client<br>
> library V3 identity support to python-openstackclient?<br>
> AFAIK it's poorly supported for Nova Cinder Neutron client library, and I am<br>
> working on add v3 support for those libraries[1], just<br>
> want to make sure that is the correct direction.<br>
><br>
> [1] <a href="https://review.openstack.org/#/c/81749/" target="_blank">https://review.openstack.org/#/c/81749/</a><br>
> <a href="https://review.openstack.org/#/c/81767/" target="_blank">https://review.openstack.org/#/c/81767/</a><br>
><br>
><br>
> Sort of. The Keystone client should be responsible for all fo the service<br>
> catalog manipulations throughout openstack. So the Cinder client should use<br>
> the Keystone client.<br>
><br>
> To see the idea, read Jamie's blog post:<br>
><br>
> <a href="http://www.jamielennox.net/blog/2014/02/24/client-session-objects/" target="_blank">http://www.jamielennox.net/blog/2014/02/24/client-session-objects/</a><br>
><br>
> The main idea is that Keystone will handle the HTTP session setup, so that we<br>
> have a single place to focus attention on for HTTP network security issues.<br>
> And you should not need to parse the service catalog at all.<br>
><br>
><br>
<br>
</div>So Adam is right in that the general idea to transition people to using the V3 API will be to use the keystoneclient.session.Session object and that will do everything for you. This is not going to be an easy transition for everyone and i've got a summit session proposed: <a href="http://summit.openstack.org/cfp/details/205" target="_blank">http://summit.openstack.org/cfp/details/205</a> in which i want to deal with precisely this problem.<br>
<br>
Regarding your notion of openstackclient though, you need to seperate the concept of a CLI and the library.<br>
<br>
Take for example Heat or Horizon, they communicate with keystone through the python-keystoneclient and nova via the python-novaclient etc. They do not use the keystone or nova cli utility. The primary job of the python-*client libraries is NOT to provide a cli. The cli is just an application that makes use of the library.<br>
</blockquote><div><br></div><div> Yeah, but when we talking about the support of v3 for Nova Cinder and Neutron. I think it's mostly about the auth token middleware and CLI support of the client library. </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
So yes, i think it has generally been accepted that the clients will move (at there own pace) to using openstackclient for there CLI, but openstackclient will still rely on the various libraries to do the actual communication with services<br>
</blockquote><div> </div><div> I wonder is it worth to enable v3 for CLI when we moving to openstackclient so that OpenStack users and operators can test and evaluate v3 API , and we may probably add a v3 test gate to CI. what we face is that user can use v3 API with novaclient CLI, this has been asked many times in the OpenStack user mailing list.</div>
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span class="HOEnZb"><font color="#888888"><br>
<br>
Jamie<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
><br>
><br>
> 2014-04-01 12:08 GMT+08:00 Jamie Lennox < <a href="mailto:jamielennox@redhat.com">jamielennox@redhat.com</a> > :<br>
><br>
><br>
><br>
> On Tue, 2014-04-01 at 11:53 +0800, Yaguang Tang wrote:<br>
> > Hi all,<br>
> ><br>
> ><br>
> > I am sorry if this has been discussed before, the question is will we<br>
> > support keystone v3 operation<br>
> > in python-keystoneclient? I know most of the v3 functionality have<br>
> > been implemented in python-openstackclient, but from the<br>
> > python-openstackclient wiki says, it's primarily a wrapper of<br>
> > python-*client, and provides unified interface to user. The end user<br>
> > uses python-keystoneclient to manage<br>
> > user, tenant, service before, if we don't intend to support v3<br>
> > functionality in keystoneclient, then<br>
> > it means we force end user to change from keystoneclient to<br>
> > openstackclient, is this what we want to<br>
> > do?<br>
> ><br>
><br>
> It depends what you mean by python-keystoneclient.<br>
><br>
> If you mean the python library then yes it supports the V3 API already.<br>
><br>
> If you mean the keystone CLI that is currently bundled as part of the<br>
> python-keystoneclient then yes that is deprecated in favour of<br>
> python-openstackclient.<br>
><br>
> We will maintain the CLI application in keystoneclient however even for<br>
> V2 API calls I recommend that you use the openstack CLI tool.<br>
><br>
> Jamie<br>
><br>
> ><br>
> > --<br>
> > Tang Yaguang<br>
> ><br>
> ><br>
> > Canonical Ltd. | <a href="http://www.ubuntu.com" target="_blank">www.ubuntu.com</a> | <a href="http://www.canonical.com" target="_blank">www.canonical.com</a><br>
> > Mobile: <a href="tel:%2B86%20152%201094%206968" value="+8615210946968">+86 152 1094 6968</a><br>
> > gpg key: 0x187F664F<br>
> ><br>
> > _______________________________________________<br>
> > OpenStack-dev mailing list<br>
> > <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
> > <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> OpenStack-dev mailing list<br>
> <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
><br>
><br>
> --<br>
> Tang Yaguang<br>
><br>
> Canonical Ltd. | <a href="http://www.ubuntu.com" target="_blank">www.ubuntu.com</a> | <a href="http://www.canonical.com" target="_blank">www.canonical.com</a><br>
> Mobile: <a href="tel:%2B86%20152%201094%206968" value="+8615210946968">+86 152 1094 6968</a><br>
> gpg key: 0x187F664F<br>
><br>
><br>
> _______________________________________________<br>
> OpenStack-dev mailing list <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
><br>
> _______________________________________________<br>
> OpenStack-dev mailing list<br>
> <a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
><br>
<br>
_______________________________________________<br>
OpenStack-dev mailing list<br>
<a href="mailto:OpenStack-dev@lists.openstack.org">OpenStack-dev@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div style="color:rgb(0,0,0);font-family:arial;font-size:small">Tang Yaguang</div><div style="color:rgb(0,0,0);font-family:arial;font-size:small">
<br></div><div style="color:rgb(0,0,0);font-family:arial;font-size:small">Canonical Ltd. | <a href="http://www.ubuntu.com/" target="_blank">www.ubuntu.com</a> | <a href="http://www.canonical.com/" target="_blank">www.canonical.com</a></div>
<div style="color:rgb(0,0,0);font-family:arial;font-size:small">Mobile: +86 152 1094 6968</div><div style="color:rgb(0,0,0);font-family:arial;font-size:small">gpg key: 0x187F664F</div><div style="color:rgb(0,0,0);font-family:arial;font-size:small">
</div></div>
</div></div>