aipmodel 0.2.74__tar.gz → 0.2.76__tar.gz

{aipmodel-0.2.74 → aipmodel-0.2.76}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aipmodel
-Version: 0.2.74
+Version: 0.2.76
 Summary: SDK for model registration, versioning, and storage
 Home-page: https://github.com/AIP-MLOPS/model-registry
 Author: AIP MLOPS Team

{aipmodel-0.2.74 → aipmodel-0.2.76}/README.md

@@ -44,6 +44,19 @@ CEPH_ADMIN_SECRET_KEY="your_public_bucket_secret_key"
 ACL_ENABLED="false"
 ACL_API_HOST="http://your-acl-server:30011"
 
+# Where per-user credentials come from. Default true: resolve the user's S3 +
+# Mlops-Core keys from the user-management service using the bearer token.
+# Set false to run WITHOUT user-management (other systems / testing): the SDK
+# then reads the keys straight from the env vars below instead.
+USER_MANAGEMENT_ENABLED="true"
+# Only used when USER_MANAGEMENT_ENABLED="false":
+# CEPH_USER_ACCESS_KEY="..."      # the user's S3 access key
+# CEPH_USER_SECRET_KEY="..."      # the user's S3 secret key
+# CEPH_USER_BUCKET="..."          # the user's bucket
+# MLOPS_CORE_ACCESS_KEY="..."     # Mlops-Core basic-auth access key
+# MLOPS_CORE_SECRET_KEY="..."     # Mlops-Core basic-auth secret key
+# MLOPS_CORE_USERNAME="..."       # display/owner name
+
 # Registry<->storage integrity (zombie/orphan) checks - opt-in, default off.
 # When false, verify_model_integrity / verify_all_models / find_orphan_models
 # raise IntegrityDisabledError instead of running the (S3-listing) consistency

{aipmodel-0.2.74 → aipmodel-0.2.76}/aipmodel/CephS3Manager.py

@@ -37,6 +37,11 @@ _TRANSIENT_TRANSFER_ERRORS = tuple(
         "EndpointConnectionError",
         "ReadTimeoutError",
         "IncompleteReadError",
+        # boto3 wraps a mid-stream connection break (urllib3 ProtocolError /
+        # http IncompleteRead) into ResponseStreamingError before it reaches the
+        # caller, so the underlying transient types below never match on their
+        # own for a download that dies mid-body. Retry on the wrapper too.
+        "ResponseStreamingError",
     )
     if hasattr(_botocore_exceptions, _name)
 ) + (

{aipmodel-0.2.74 → aipmodel-0.2.76}/aipmodel/__init__.py

@@ -11,5 +11,5 @@ if _os.environ.get("AIPMODEL_UPDATE_CHECK", "").lower() in ("1", "true", "yes"):
 
 __all__ = ["MLOpsManager", "CephS3Manager"]
 
-__version__ = "0.2.74"
+__version__ = "0.2.76"
 __description__ = "SDK for model registration, versioning, and storage"

{aipmodel-0.2.74 → aipmodel-0.2.76}/aipmodel/model_registry.py

@@ -369,6 +369,7 @@ class MLOpsManager:
         ACL_API_HOST=None,
         ACL_ENABLED=None,
         INTEGRITY_ENABLED=None,
+        USER_MANAGEMENT_ENABLED=None,
         MLOPS_CORE_API_HOST=None,
         MLOPS_CORE_WEB_HOST=None
     ):
@@ -408,19 +409,52 @@ class MLOpsManager:
         
         self.USER_MANAGEMENT_API = USER_MANAGEMENT_API or os.environ.get("USER_MANAGEMENT_API")
         self.CEPH_ENDPOINT_URL = CEPH_ENDPOINT_URL or os.environ.get("CEPH_ENDPOINT_URL")
-        
+
+        # Where per-user credentials come from. Default True: resolve the user's
+        # S3 + Mlops-Core keys from the user-management service via the bearer
+        # token (production). Set USER_MANAGEMENT_ENABLED=false to run on a system
+        # WITHOUT user-management — the keys are then read straight from env:
+        # CEPH_USER_ACCESS_KEY / CEPH_USER_SECRET_KEY / CEPH_USER_BUCKET /
+        # MLOPS_CORE_ACCESS_KEY / MLOPS_CORE_SECRET_KEY / MLOPS_CORE_USERNAME.
+        self.USER_MANAGEMENT_ENABLED = self._to_bool(
+            USER_MANAGEMENT_ENABLED if USER_MANAGEMENT_ENABLED is not None else os.environ.get("USER_MANAGEMENT_ENABLED"),
+            default=True
+        )
+
         # Public Bucket Configuration
         self.CEPH_PUBLIC_BUCKET_NAME = os.environ.get("CEPH_PUBLIC_BUCKET_NAME", "aip-public")
         self.PUBLIC_ACCESS_KEY = os.environ.get("CEPH_ADMIN_ACCESS_KEY")
         self.PUBLIC_SECRET_KEY = os.environ.get("CEPH_ADMIN_SECRET_KEY")
 
-        user_info, self.MLOPS_CORE_USERNAME = get_user_metadata(bearer_token=user_token, user_management_url=self.USER_MANAGEMENT_API)
+        if self.USER_MANAGEMENT_ENABLED:
+            user_info, self.MLOPS_CORE_USERNAME = get_user_metadata(bearer_token=user_token, user_management_url=self.USER_MANAGEMENT_API)
+        else:
+            # Direct-credential mode — no user-management call; keys come from env.
+            self.MLOPS_CORE_USERNAME = os.environ.get("MLOPS_CORE_USERNAME") or os.environ.get("CLEARML_USERNAME") or "local"
+            user_info = {
+                "s3_access_key": os.environ.get("CEPH_USER_ACCESS_KEY") or os.environ.get("CEPH_ADMIN_ACCESS_KEY"),
+                "s3_secret_key": os.environ.get("CEPH_USER_SECRET_KEY") or os.environ.get("CEPH_ADMIN_SECRET_KEY"),
+                "s3_bucket": os.environ.get("CEPH_USER_BUCKET"),
+                "clearml_access_key": os.environ.get("MLOPS_CORE_ACCESS_KEY") or os.environ.get("CLEARML_ACCESS_KEY"),
+                "clearml_secret_key": os.environ.get("MLOPS_CORE_SECRET_KEY") or os.environ.get("CLEARML_SECRET_KEY"),
+            }
+            missing_creds = [k for k, v in user_info.items() if not v]
+            if missing_creds:
+                raise ValueError(
+                    "USER_MANAGEMENT_ENABLED is false but direct credentials are missing from env: "
+                    + ", ".join(missing_creds)
+                    + " (set CEPH_USER_ACCESS_KEY / CEPH_USER_SECRET_KEY / CEPH_USER_BUCKET / "
+                    "MLOPS_CORE_ACCESS_KEY / MLOPS_CORE_SECRET_KEY)."
+                )
 
-        missing_cfg = [k for k, v in {
+        # USER_MANAGEMENT_API is only required when that service is actually used.
+        required_cfg = {
             "MLOPS_CORE_API_HOST": self.MLOPS_CORE_API_HOST,
-            "USER_MANAGEMENT_API": self.USER_MANAGEMENT_API,
             "CEPH_ENDPOINT_URL": self.CEPH_ENDPOINT_URL,
-        }.items() if not v]
+        }
+        if self.USER_MANAGEMENT_ENABLED:
+            required_cfg["USER_MANAGEMENT_API"] = self.USER_MANAGEMENT_API
+        missing_cfg = [k for k, v in required_cfg.items() if not v]
         if missing_cfg:
             error_msg = f"Missing required configuration: {', '.join(missing_cfg)}"
             print(f"[SDK_FAIL] {error_msg}")
@@ -449,7 +483,7 @@ class MLOpsManager:
         if not skip_connection_check:
             if self.verbose:
                 print("[SDK_INFO] Performing health checks...")
-            if not self.check_user_management_service():
+            if self.USER_MANAGEMENT_ENABLED and not self.check_user_management_service():
                  raise ValueError("User Management API unreachable")
             if not self.check_mlops_core_service():
                 raise ValueError("Mlops-Core Server down")

{aipmodel-0.2.74 → aipmodel-0.2.76}/aipmodel.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aipmodel
-Version: 0.2.74
+Version: 0.2.76
 Summary: SDK for model registration, versioning, and storage
 Home-page: https://github.com/AIP-MLOPS/model-registry
 Author: AIP MLOPS Team

{aipmodel-0.2.74 → aipmodel-0.2.76}/setup.py

@@ -31,7 +31,7 @@ version, description = read_meta()
 
 setup(
     name="aipmodel",
-    version="0.2.74",
+    version="0.2.76",
     description=description,
     author="AIP MLOPS Team",
     author_email="mohmmadweb@gmail.com",