<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Oct 25, 2017 at 3:07 PM, Dmitry Tantsur <span dir="ltr"><<a href="mailto:dtantsur@redhat.com" target="_blank">dtantsur@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi!<br>
<br>
Thanks for raising this.<span class=""><br>
<br>
On 10/19/2017 01:11 PM, Vladyslav Drok wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi!<br>
<br>
I'd like to discuss the usage of the new noauth plugin to keystoneauth, which was introduced in [1]. The docstring of the loader says it is intended to be used during adapter initialization along with endpoint_override. But what about the CLI usage in the OpenStack client? I was trying to make the none loader work with baremetal plugin, as part of testing [2], and encountered some problems, which are hacked around in [3].<br>
<br>
So, here are some questions:<br>
<br>
1. Was it intended to be used in CLI at all, or should we still use the token_endpoint?<br>
2. If it was intended, should we:<br>
     2.1. do the hacks as in [3]?<br>
</blockquote>
<br></span>
I don't particularly like hardcoding an entrypoint name in the code here, to be honest.<span class=""><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
     2.2. introduce endpoint as an option for the none loader, making it a bit similar to token_endpoint, with token hardcoded (and also get_endpoint method to the auth plugin I think)?<br>
</blockquote>
<br></span>
I think that's the way to go, we should fix the none loader in keystoneauth.<span class=""><br></span></blockquote><div><br></div><div>I'll go with this option, Dean also suggested this in his review of [3]<br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
     2.3. leave it as-is, allowing the usage of none loader only by specifying the parameters in the clouds.yaml, as in [4] for example?<br>
</blockquote>
<br></span>
That's not great. We're getting rid of the "ironic" command in favour of "openstack baremetal", but inability to properly use a no-auth mode hurts quite a few of our use cases (like Bifrost).<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
[1] <a href="https://review.openstack.org/469863" rel="noreferrer" target="_blank">https://review.openstack.org/4<wbr>69863</a> <<a href="https://review.openstack.org/469863" rel="noreferrer" target="_blank">https://review.openstack.org/<wbr>469863</a>><span class=""><br>
[2] <a href="https://review.openstack.org/359061" rel="noreferrer" target="_blank">https://review.openstack.org/3<wbr>59061</a><br>
[3] <a href="https://review.openstack.org/512699" rel="noreferrer" target="_blank">https://review.openstack.org/5<wbr>12699</a><br>
[4] <a href="https://github.com/openstack/bifrost/blob/21ca45937a9cb36c6f04073182bf2edea8acbd5d/playbooks/roles/bifrost-keystone-client-config/templates/clouds.yaml.j2#L17-L19" rel="noreferrer" target="_blank">https://github.com/openstack/b<wbr>ifrost/blob/21ca45937a9cb36c6f<wbr>04073182bf2edea8acbd5d/<wbr>playbooks/roles/bifrost-<wbr>keystone-client-config/<wbr>templates/clouds.yaml.j2#L17-<wbr>L19</a><br>
<br>
Thanks,<br>
Vlad<br>
<br>
<br></span>
______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
<br>
</blockquote>
<br>
<br>
______________________________<wbr>______________________________<wbr>______________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.op<wbr>enstack.org?subject:unsubscrib<wbr>e</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k-dev</a><br>
</blockquote></div><br></div></div>