<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Steve,</p>
<p><br>
</p>
<p>Similar to other OpenStack services, Solum client uses the provided/configured username and password of a user to get a token, and sends it to Solum API service in a http header. On the API side, we use keystonemiddleware to validate the token. Upon successful
authentication, we store information which we get back from keystone (project-id, username, and token) and use it to instantiate other services' python clients to interact with them (glance, swift, neutron, heat).<br>
</p>
<p><br>
</p>
<p>Let us know if there is a better approach for enabling inter-service interactions.<br>
</p>
<p><br>
</p>
<p>Thanks,<br>
</p>
<p>Devdatta<br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Steve Martinelli <stevemar@ca.ibm.com><br>
<b>Sent:</b> Thursday, September 24, 2015 9:01 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Glance][Solum] Using os-auth-token and os-image-url with glance client</font>
<div> </div>
</div>
<div>
<p>I can't speak to the glance client changes, but this seems like an awkward design.<br>
<br>
If you don't know the end user's name and password, then how are you getting the token? Is it the admin token? Why not create a service account and use keystonemiddleware?<br>
<br>
Thanks,<br>
<br>
Steve Martinelli<br>
OpenStack Keystone Core<br>
<br>
<img alt="Inactive hide details for Devdatta Kulkarni ---2015/09/24 06:44:57 PM---Hi, Glance team, In Solum, we use Glance to store Docke" height="16" border="0" width="16" src="cid:1__=8FBBF458DF99F9B48f9e8a93df938690918c8FB@"><font color="#424282">Devdatta
Kulkarni ---2015/09/24 06:44:57 PM---Hi, Glance team, In Solum, we use Glance to store Docker images that we create for applications. We</font><br>
<br>
<font color="#5F5F5F" size="2">From: </font><font size="2">Devdatta Kulkarni <devdatta.kulkarni@RACKSPACE.COM></font><br>
<font color="#5F5F5F" size="2">To: </font><font size="2">"OpenStack Development Mailing List (not for usage questions)" <openstack-dev@lists.openstack.org></font><br>
<font color="#5F5F5F" size="2">Date: </font><font size="2">2015/09/24 06:44 PM</font><br>
<font color="#5F5F5F" size="2">Subject: </font><font size="2">[openstack-dev] [Glance][Solum] Using os-auth-token and os-image-url with glance client</font><br>
</p>
<hr style="color:#8091A5" align="left" noshade="" size="2" width="100%">
<br>
<br>
<br>
<font face="Calibri" size="4">Hi, Glance team,</font><br>
<br>
<font face="Calibri" size="4">In Solum, we use Glance to store Docker images that we create for applications. We use Glance client internally to upload these images. Till recently, 'glance image-create' with only token has been</font><br>
<font face="Calibri" size="4">working for us (in devstack). Today, I started noticing that glance image-create with just token is not working anymore. It is also not working when os-auth-token and os-image-url are passed in. According to documentation (</font><a href="http://docs.openstack.org/developer/python-glanceclient/"><u><font face="Calibri" color="#0000FF" size="4">http://docs.openstack.org/developer/python-glan</font></u><u><font face="Calibri" color="#0000FF" size="4">ceclient/</font></u></a><font face="Calibri" size="4">),
passing token and image-url should work. The client, which I have installed from master, is asking username (and password, if username is specified).</font><br>
<br>
<font face="Calibri" size="4">Solum does not have access to end-user's password. So we need the ability to interact with Glance without providing password, as it has been working till recently.</font><br>
<br>
<font face="Calibri" size="4">I investigated the issue a bit and have filed a bug with my findings.</font><br>
<a href="https://bugs.launchpad.net/python-glanceclient/+bug/1499540"><u><font face="Calibri" color="#0000FF" size="4">https://bugs.launchpad.net/python-glanceclient/+bug/1499540</font></u></a><br>
<br>
<font face="Calibri" size="4">Can someone help with resolving this issue.</font><br>
<br>
<font face="Calibri" size="4">Regards,</font><br>
<font face="Calibri" size="4">Devdatta</font><tt>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
</tt><tt><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a></tt><tt><br>
</tt><br>
<br>
<br>
</div>
</div>
</body>
</html>