[openstack-dev] [Glance][Solum] Using os-auth-token and os-image-url with glance client

Nikhil Komawar nik.komawar at gmail.com
Fri Sep 25 04:55:47 UTC 2015


Devdatta, Thanks for creating the bug. We should get this fixed. It was
opened in the upgrade to 1.x.x.

Steve, my guess is that the context is being used to delegate the token
to glanceclient and then glance. We have this awkwardness with other
openstack services and is cause of much issue for some operations.

I am not sure what's the best way Solum should adopt as there seem to be
tradeoffs with each approach. In this case however, we should try to fix
this for the next release of client.

On 9/24/15 10:01 PM, Steve Martinelli wrote:
>
> I can't speak to the glance client changes, but this seems like an
> awkward design.
>
> If you don't know the end user's name and password, then how are you
> getting the token? Is it the admin token? Why not create a service
> account and use keystonemiddleware?
>
> Thanks,
>
> Steve Martinelli
> OpenStack Keystone Core
>
> Inactive hide details for Devdatta Kulkarni ---2015/09/24 06:44:57
> PM---Hi, Glance team, In Solum, we use Glance to store DockeDevdatta
> Kulkarni ---2015/09/24 06:44:57 PM---Hi, Glance team, In Solum, we use
> Glance to store Docker images that we create for applications. We
>
> From: Devdatta Kulkarni <devdatta.kulkarni at RACKSPACE.COM>
> To: "OpenStack Development Mailing List (not for usage questions)"
> <openstack-dev at lists.openstack.org>
> Date: 2015/09/24 06:44 PM
> Subject: [openstack-dev] [Glance][Solum] Using os-auth-token and
> os-image-url with glance client
>
> ------------------------------------------------------------------------
>
>
>
> Hi, Glance team,
>
> In Solum, we use Glance to store Docker images that we create for
> applications. We use Glance client internally to upload these images.
> Till recently, 'glance image-create' with only token has been
> working for us (in devstack). Today, I started noticing that glance
> image-create with just token is not working anymore. It is also not
> working when os-auth-token and os-image-url are passed in. According
> to documentation
> (_http://docs.openstack.org/developer/python-glan__ceclient/_
> <http://docs.openstack.org/developer/python-glanceclient/>), passing
> token and image-url should work. The client, which I have installed
> from master, is asking username (and password, if username is specified).
>
> Solum does not have access to end-user's password. So we need the
> ability to interact with Glance without providing password, as it has
> been working till recently.
>
> I investigated the issue a bit and have filed a bug with my findings.
> _https://bugs.launchpad.net/python-glanceclient/+bug/1499540_
>
> Can someone help with resolving this issue.
>
> Regards,
> Devdatta__________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
>
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-- 

Thanks,
Nikhil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150925/64918610/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150925/64918610/attachment.gif>


More information about the OpenStack-dev mailing list