)]}'
{"specs/pike/approved/convert-consoles-to-objects.rst":[{"author":{"_account_id":6873,"name":"Matt Riedemann","email":"mriedem.os@gmail.com","username":"mriedem"},"change_message_id":"0edd5711b9a72d485c5663fb603bb950a4ff202c","unresolved":false,"context_lines":[{"line_number":50,"context_line":"in a deprecated status, supported for one release. After the"},{"line_number":51,"context_line":"period the consoleauth service can be removed."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Because the new tokens will go in the database we need to consider"},{"line_number":54,"context_line":"cells v2. The child cell database is the appropriate place for console"},{"line_number":55,"context_line":"connection info because it relates directly to instances. Currently"},{"line_number":56,"context_line":"the console connection URLs returned to the user only contain a token."},{"line_number":57,"context_line":"This is not sufficient to determine which cell holds the console"},{"line_number":58,"context_line":"connection. This can be resolved by adding the instance uuid to"},{"line_number":59,"context_line":"the query string in the URL. This approach is backward compatible"},{"line_number":60,"context_line":"with the existing console proxies. Ultimately it is still the"},{"line_number":61,"context_line":"token that determines authority to connect to the console, but"},{"line_number":62,"context_line":"we will add verification that the instance uuid in the URL matches the"},{"line_number":63,"context_line":"instance uuid in the connection info retrieved for the token."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"Use Cases"},{"line_number":66,"context_line":"----------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"dfeb2761_84237bbd","line":63,"range":{"start_line":53,"start_character":0,"end_line":63,"end_character":61},"updated":"2017-04-04 17:32:02.000000000","message":"I guess this is the cells v2 part. Isn\u0027t the idea that if we encode the instance uuid in the connection URL, then we can use that in the API to lookup which cell the token is in via the instance_mappings table in the API database?\n\nDo we have to worry about upgrades for older connection URLs that don\u0027t have the instance uuid?","commit_id":"0bf0812b8333c951ace1f81bdc352bd7daeb0b54"},{"author":{"_account_id":8864,"name":"Artom Lifshitz","email":"notartom@gmail.com","username":"artom"},"change_message_id":"dbd3176ccc89b358d85708a73a0132d41a41d996","unresolved":false,"context_lines":[{"line_number":50,"context_line":"in a deprecated status, supported for one release. After the"},{"line_number":51,"context_line":"period the consoleauth service can be removed."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Because the new tokens will go in the database we need to consider"},{"line_number":54,"context_line":"cells v2. The child cell database is the appropriate place for console"},{"line_number":55,"context_line":"connection info because it relates directly to instances. Currently"},{"line_number":56,"context_line":"the console connection URLs returned to the user only contain a token."},{"line_number":57,"context_line":"This is not sufficient to determine which cell holds the console"},{"line_number":58,"context_line":"connection. This can be resolved by adding the instance uuid to"},{"line_number":59,"context_line":"the query string in the URL. This approach is backward compatible"},{"line_number":60,"context_line":"with the existing console proxies. Ultimately it is still the"},{"line_number":61,"context_line":"token that determines authority to connect to the console, but"},{"line_number":62,"context_line":"we will add verification that the instance uuid in the URL matches the"},{"line_number":63,"context_line":"instance uuid in the connection info retrieved for the token."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"Use Cases"},{"line_number":66,"context_line":"----------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"dfeb2761_ff25315d","line":63,"range":{"start_line":53,"start_character":0,"end_line":63,"end_character":61},"in_reply_to":"dfeb2761_5fa9be21","updated":"2017-04-04 18:09:10.000000000","message":"If we end up doing the work for native client support, we\u0027ll need to return the instance uuid to the client [1], probably hacked in as a token.instance_uuid \"domain name.\" That\u0027s not against this spec, more of a note for myself :)\n\n[1] https://review.openstack.org/#/c/442040/5/specs/pike/approved/spice-native-client-support.rst@47","commit_id":"0bf0812b8333c951ace1f81bdc352bd7daeb0b54"},{"author":{"_account_id":4690,"name":"melanie witt","display_name":"melwitt","email":"melwittt@gmail.com","username":"melwitt"},"change_message_id":"bfac3e62164b0ab4e40f3fd7d5cc9c8287fdc407","unresolved":false,"context_lines":[{"line_number":50,"context_line":"in a deprecated status, supported for one release. After the"},{"line_number":51,"context_line":"period the consoleauth service can be removed."},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"Because the new tokens will go in the database we need to consider"},{"line_number":54,"context_line":"cells v2. The child cell database is the appropriate place for console"},{"line_number":55,"context_line":"connection info because it relates directly to instances. Currently"},{"line_number":56,"context_line":"the console connection URLs returned to the user only contain a token."},{"line_number":57,"context_line":"This is not sufficient to determine which cell holds the console"},{"line_number":58,"context_line":"connection. This can be resolved by adding the instance uuid to"},{"line_number":59,"context_line":"the query string in the URL. This approach is backward compatible"},{"line_number":60,"context_line":"with the existing console proxies. Ultimately it is still the"},{"line_number":61,"context_line":"token that determines authority to connect to the console, but"},{"line_number":62,"context_line":"we will add verification that the instance uuid in the URL matches the"},{"line_number":63,"context_line":"instance uuid in the connection info retrieved for the token."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"Use Cases"},{"line_number":66,"context_line":"----------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"dfeb2761_5fa9be21","line":63,"range":{"start_line":53,"start_character":0,"end_line":63,"end_character":61},"in_reply_to":"dfeb2761_84237bbd","updated":"2017-04-04 17:56:08.000000000","message":"Yes, the idea is to look up the cell based on the instance uuid from the URL.\n\nOlder connection URLs without instance uuid will continue to be served by the consoleauth service (see paragraph at L46). The option will turn on the database backend but the consoleauth service (and memcached) should continue to run for compat. So older URLs will get their tokens from memcached and new URLs will use cell databases based on instance uuid. Through normal periodic token expiration, eventually no memcached tokens will be valid and at that time, the consoleauth service can be stopped and the only outstanding URLs will be new ones with the instance uuid in them.","commit_id":"0bf0812b8333c951ace1f81bdc352bd7daeb0b54"}]}