Comment 2 for bug 1298075

Revision history for this message
Matt Riedemann (mriedem) wrote :

(4:40:22 PM) arosen: mriedem: does the neutronclient actually raise something like Unauthorized when this happens?
(4:40:42 PM) mriedem: arosen: yeah http://paste.openstack.org/show/74400/
(4:41:16 PM) mriedem: arosen: yeah because of https://github.com/openstack/nova/blob/master/nova/network/neutronv2/__init__.py#L37
(4:41:36 PM) arosen: ah
(4:41:39 PM) mriedem: if the token goes bad, neutron client doesn't have any recourse
(4:42:32 PM) openstackgerrit: Robert Kukura proposed a change to openstack/nova: Use binding:vif_details to control firewall https://review.openstack.org/83190
(4:42:49 PM) arosen: mriedem: i wonder if we should have a wrapper that wraps all the neutron calls in try: neutron_call(): except exceptions.Unathorized: (get new token/recall the wrapper)
(4:42:59 PM) mriedem: arosen: yeah....
(4:43:02 PM) mriedem: was thinking retry
(4:43:04 PM) arosen: s/wrapper some method that does all this for us
(4:43:08 PM) mriedem: arosen: or could we use keystone v3 trusts?
(4:44:09 PM) arosen: It seems like going this route would help improve our error handing right now because we still have stuff like this: https://github.com/openstack/nova/blob/master/nova/network/neutronv2/api.py#L440
(4:44:40 PM) arosen: mriedem: unfortunately, I don't know much about the keystone v3 stuff (or anything at all to be honest)
(4:44:55 PM) mriedem: arosen: neither do i, but bknudson does and he sits 2 doors down :)