From dev-return-2376-archive-asf-public=cust-asf.ponee.io@openwhisk.apache.org Tue Aug 7 10:25:15 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id DB6E8180676 for ; Tue, 7 Aug 2018 10:25:14 +0200 (CEST) Received: (qmail 68574 invoked by uid 500); 7 Aug 2018 08:25:13 -0000 Mailing-List: contact dev-help@openwhisk.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@openwhisk.apache.org Delivered-To: mailing list dev@openwhisk.apache.org Received: (qmail 68503 invoked by uid 99); 7 Aug 2018 08:25:13 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 Aug 2018 08:25:13 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id BBE60C7057 for ; Tue, 7 Aug 2018 08:25:12 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.869 X-Spam-Level: * X-Spam-Status: No, score=1.869 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id D8-9qdGb8qL0 for ; Tue, 7 Aug 2018 08:25:11 +0000 (UTC) Received: from mail-wm0-f53.google.com (mail-wm0-f53.google.com [74.125.82.53]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id A13D65F490 for ; Tue, 7 Aug 2018 08:25:11 +0000 (UTC) Received: by mail-wm0-f53.google.com with SMTP id t25-v6so17038565wmi.3 for ; Tue, 07 Aug 2018 01:25:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=AvT7c2d5j41azW5rbsZUkzD8Upj4/VC0sCbUJaHGQ9Q=; b=hfj9+YeCpWTMamAWP/qnHDR5zDpOefDz2S6HcitBfJrDpfFQD2AIpoCCdOqRtaR4G9 ID/+qLMT5mT4a02z2R76VFWv+y5xwJJ8ucYUiRjPryaWV1BadENLvBr1ig9NiHxNuf5O F0AyZTtAPA6ioy+h1z/gnMFhrDykOhIaBwNbp1PJX0whsLw9PaxtkEHKRhSOtW7WMXR0 clpuBtyEjyBg1+TeKJ7iplsT/CgLa3s1UwtPMz/5oNX327NT5LGi4aTFvHYguXKqWqO7 UCYJ6eW11pY5PiRS9TtmTi2115uDznkyyv1iIheiQdQ0yEmFS70VsnIrE/VHF1f8DUQ4 Y5EQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=AvT7c2d5j41azW5rbsZUkzD8Upj4/VC0sCbUJaHGQ9Q=; b=AJTjNEdZKV/T9jsWZOW06Q0j6a9BhE4nO+FzXW0c6/dB7XjOUTyVlq0mlPPkp8gRMO 6k1XY8XScJqMotOl5QcxHycW9Ufa6IiAAqfeDoI0RL1c0arsBAKprXqnwtWJSowGBj8d bq+gFw0lBvXUY/3P7S+laEQkyb+R5v7qIohyOkj+w7BRJRDvcGA4+mXct4351pr3D5wA suQhk9MySd3oyHD0L633o93g8WbZbHU5uKipVvqmVwBFpfkyRQQ7yeS+u9QDVtV60bvt gZwnQ24nIV8VcqBoMYH9aemtnb2G/ZZZBbkxtmRdQI0BS2bqYaa1OH4LYhHyT+bcm2wE QiLw== X-Gm-Message-State: AOUpUlG8qd3UA+RRfosgmjMwNv0IF/CxNOvs3+c3FucUSO9Sie20qKS3 MbnZWV7pxYI2wCSLilQi05cZyv6GG0c8fcJiSzvmfm3O X-Google-Smtp-Source: AA+uWPxidRNu7nEGYTvv+LgJgi+oRPCvGQ13NRpxQF5FSsxxVE2aKGVM/R2pEZ8uvWNAMlVeX0u3ESP0HiMj6AT4jZk= X-Received: by 2002:a1c:e595:: with SMTP id c143-v6mr1015030wmh.85.1533630311072; Tue, 07 Aug 2018 01:25:11 -0700 (PDT) MIME-Version: 1.0 References: <3BE05C8B-11C0-4DE3-B0E4-57946C21FBAF@gmail.com> <8007E09C-4A1D-4639-BE01-408523979E5C@adobe.com> <92B3FA9B-E57F-43E7-984B-30E58DE399AD@gmail.com> In-Reply-To: From: Vadim Raskin Date: Tue, 7 Aug 2018 09:24:59 +0100 Message-ID: Subject: Re: System env vars in user containers To: dev@openwhisk.apache.org Content-Type: multipart/alternative; boundary="000000000000e886340572d421a4" --000000000000e886340572d421a4 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Right, invoker already has the changes provided by the Entitlement spi. Additional variables are provided via `authEnvironment`val in the ContainerProxy.scala. Just want to point out that the new variables will be only available for the downstream implementations of the Entitlement SPI, e.g. IBM Functions. regards, Vadim. On Mon, Aug 6, 2018 at 10:14 PM Carlos Santana wrote= : > There are no changes required to the invoker code to enable this, this is > already supported via SPI from what I understand, but Vadim can clarify > > -- Carlos > > On Mon, Aug 6, 2018 at 4:11 PM Carlos Santana > wrote: > > > The runtime changes will allow a downstream like IBM Functions to > > implement the authentication and entitlement SPI already discussed in t= he > > mailing list by Martin, the controller will pass IAM (Identity and Acce= ss > > Management) data about the namespace to the invoker, and the invoker wi= ll > > pass this data to the runtimes as extra environment variables. > > > > -- Carlos > > > > > > On Mon, Aug 6, 2018 at 2:22 PM Rodric Rabbah wrote: > > > >> > >> > So what are the invoker changes that will leverage these runtime > >> changes? I=E2=80=99m not sure that context was part of the thread yet,= sorry if > it > >> was. > >> > >> It wasn=E2=80=99t but without invoker changes this in itself isn=E2=80= =99t very useful. > >> You are right. > >> > >> -r > > > > > --000000000000e886340572d421a4--