Friday, 2014-08-01

*** marcoemorais has quit IRC00:01
*** marcoemorais has joined #openstack-keystone00:02
*** gokrokve has quit IRC00:14
*** gokrokve has joined #openstack-keystone00:14
*** openstackgerrit has quit IRC00:16
*** gabriel-bezerra has quit IRC00:16
*** openstackgerrit has joined #openstack-keystone00:17
*** gabriel-bezerra has joined #openstack-keystone00:17
morganfainbergstevemar, np00:18
morganfainbergbknudson, failing because of keystone?00:18
morganfainbergbknudson, we did convert postgres back to eventlet keystone for full coverage00:19
*** gokrokve has quit IRC00:19
*** gabriel-bezerra has quit IRC00:23
*** gabriel-bezerra has joined #openstack-keystone00:23
*** xianghui has joined #openstack-keystone00:32
*** markwash_ has joined #openstack-keystone00:47
*** markwash has quit IRC00:50
bknudsonmorganfainberg: we'll see if https://review.openstack.org/#/c/111116/ passes jenkins, because everything else is failing00:54
bknudsonI don't see how eventlet / httpd would make a difference00:54
*** morganfainberg is now known as morganfainberg_Z00:55
*** thedodd has quit IRC01:03
*** ayoung has joined #openstack-keystone01:04
*** marcoemorais has quit IRC01:06
*** gokrokve has joined #openstack-keystone01:06
openstackgerritBob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests  https://review.openstack.org/11113001:25
*** gokrokve has quit IRC01:27
*** gokrokve has joined #openstack-keystone01:28
*** gokrokve has quit IRC01:33
*** mitz_ has joined #openstack-keystone01:34
openstackgerritBob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests  https://review.openstack.org/11113001:36
*** mitz has quit IRC01:36
*** gokrokve has joined #openstack-keystone01:41
*** thedodd has joined #openstack-keystone01:43
*** markwash_ has quit IRC02:01
*** diegows has quit IRC02:06
jamielennoxhave we seen this coming up in tempest?02:07
jamielennox2014-08-01 01:22:27.396 |     IdentityError: Got identity error02:07
jamielennox2014-08-01 01:22:27.396 |     Details: Unexpected status code 40402:07
*** gokrokve_ has joined #openstack-keystone02:09
*** gokrokve has quit IRC02:13
openstackgerritBob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests  https://review.openstack.org/11113002:21
*** topol has joined #openstack-keystone02:23
*** jamielennox is now known as jamielennox|away02:24
*** yasukun has joined #openstack-keystone02:25
yasukunHello forks, could you tell me how change length of keystone token?02:27
*** thedodd has quit IRC02:30
openstackgerritMarek Denis proposed a change to openstack/keystone-specs: Hierarchical Multitenacy  https://review.openstack.org/10101702:39
openstackgerritBob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests  https://review.openstack.org/11113002:44
*** hrybacki has quit IRC02:45
*** rwsu has quit IRC02:55
*** gabriel-bezerra has quit IRC03:00
*** jgriffith has quit IRC03:00
*** gabriel-bezerra has joined #openstack-keystone03:00
*** jgriffith has joined #openstack-keystone03:02
*** markwash has joined #openstack-keystone03:09
openstackgerritwanghong proposed a change to openstack/keystone: add --rebuild option for ssl/pki_setup  https://review.openstack.org/8820703:35
*** gabriel-bezerra has quit IRC03:35
*** gabriel-bezerra has joined #openstack-keystone03:35
openstackgerritwanghong proposed a change to openstack/keystone: add --rebuild option for ssl/pki_setup  https://review.openstack.org/8820703:38
stevemaris control_exchange controlled  by oslo https://github.com/openstack/keystone/blob/master/etc/keystone.conf.sample#L32303:44
stevemar?03:44
stevemarif so, do other projects override it?03:45
*** ukalifon has joined #openstack-keystone04:00
*** ukalifon has quit IRC04:04
*** amcrn has quit IRC04:15
*** jogo has joined #openstack-keystone04:27
jogoso https://bugs.launchpad.net/tempest/+bug/135102604:27
uvirtbotLaunchpad bug 1351026 in tempest "IdentityError in TokensV3TestJSON.test_rescope_token" [Undecided,In progress]04:27
*** gokrokve_ has quit IRC04:32
*** gokrokve has joined #openstack-keystone04:33
*** topol has quit IRC04:34
*** jamielennox|away is now known as jamielennox04:36
*** gokrokve has quit IRC04:37
*** bobt has quit IRC04:41
*** bobt_ is now known as bobt04:41
stevemarjogo, it's destroying everything04:56
jogostevemar: sure is!04:57
jogoany progress on it?04:57
stevemarjogo, bknudson has been looking at it since it showed up, haven't bugged him in a few hours though04:58
jogostevemar: worse case is we can disable the test test so that at least it doesn't block04:58
stevemarjogo, yeah, hes got that going: https://review.openstack.org/#/c/111131/04:59
*** chandankumar has joined #openstack-keystone04:59
jogowell that patch was wrong and https://review.openstack.org/#/c/111133/04:59
jogo'reverts' it05:00
jogoohh its postgres only05:02
stevemarjogo, i'm confused, why is the first one wrong?05:02
stevemaryesh05:02
stevemarthe revert patch is to just re-add the test, bknudson is nice that way05:02
stevemarit looks like we'll have a test similar to the tempest one too: https://review.openstack.org/#/c/109125/05:02
jogostevemar: it should be @test.skip_because(bug="1351026")05:04
stevemari guess the thinking is... disable the tempest test, add a test to keystone similar to tempest, re-add the tempest test05:04
stevemarjogo, i'll patch it05:04
jogostevemar: cool thanks05:04
stevemarnp, happy to help, it's crushing the gate atm :(05:04
jogostevemar: let me know when the revision is up05:10
jogoand we can get it landed05:10
stevemarjogo, up05:12
*** ajayaa has joined #openstack-keystone05:12
stevemaroh, looks like cyeoh was doing it at the exact same time05:12
stevemard'oh05:12
stevemaryep, he snuck his in just before - error: failed to push some refs to 'ssh://stevemar@review.openstack.org:29418/openstack/tempest.git05:13
stevemarbeat me by 3 minutes05:13
jogostevemar: hehe05:14
stevemarjogo, oh well, sanity is restored - if only temporarily05:16
jogostevemar: random question:05:19
jogodoes keystone use oslo log formatting now?05:19
jogore: http://logs.openstack.org/06/109106/2/gate/gate-tempest-dsvm-postgres-full/e779ab6/logs/screen-key.txt.gz05:19
jogostevemar: as previously we had a special grok filter for keystone logs05:19
jogoand now that isn't working so there are no keystone logs in logstash05:20
*** k4n0 has joined #openstack-keystone05:28
stevemarjogo, so, we were using it, but since we changed over to running keystone under httpd, it's had some issues there05:35
stevemarbut since devstack runs keystone under httpd by default now..., you won't see oslo style logs there05:36
stevemarjogo, now a random question for you,05:43
stevemarthe only thing thats needed to set "control_exchange" in nova.conf to 'nova', is this here: https://github.com/openstack/nova/blob/master/nova/config.py#L3305:43
*** ukalifon has joined #openstack-keystone05:49
*** bvandenh_ has quit IRC05:58
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Update the config file  https://review.openstack.org/11116206:02
openstackgerritOpenStack Proposal Bot proposed a change to openstack/keystone: Imported Translations from Transifex  https://review.openstack.org/10693906:05
*** tomoiaga has joined #openstack-keystone06:06
*** morganfainberg_Z is now known as morganfainberg06:11
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Update control_exchange value in keystone.conf  https://review.openstack.org/11117006:19
*** ajayaa has quit IRC06:24
*** jaosorior has joined #openstack-keystone06:30
morganfainbergjogo, keystone needs https://review.openstack.org/#/c/102425/ to use oslo fmt under mod_wsgi, i should be able to solve the nits/RHELvsUbuntu differences in the next day or two06:32
morganfainbergjogo, the postgres job is using eventlet and should be using olsofmt06:32
*** stevemar has quit IRC06:32
*** ajayaa has joined #openstack-keystone06:40
*** ajayaa has quit IRC06:56
*** morganfainberg is now known as morganfainberg_Z07:03
*** gabriel-bezerra has quit IRC07:03
*** gabriel-bezerra has joined #openstack-keystone07:04
*** jamielennox is now known as jamielennox|away07:04
*** afazekas has joined #openstack-keystone07:18
*** ajayaa has joined #openstack-keystone07:18
openstackgerritJuan Antonio Osorio Robles proposed a change to openstack/identity-api: Add user email to the documentation  https://review.openstack.org/11118607:24
*** bvandenh_ has joined #openstack-keystone07:46
*** andreaf has joined #openstack-keystone07:46
*** llu has joined #openstack-keystone07:56
*** llu has left #openstack-keystone07:56
*** andreaf_ has joined #openstack-keystone07:59
*** andreaf_ is now known as andrea08:00
*** andrea is now known as Guest9188308:00
*** andreaf has quit IRC08:01
*** Guest91883 is now known as andreaf08:01
*** henrynash has joined #openstack-keystone08:05
jaosoriorhenrynash: I made a CR for identity-api as you requested, ( https://review.openstack.org/111186 ) is that alright?08:07
henrynashjaosorior: just looking now08:08
henrynashjaosorior: one minor additional update….see my comemnt08:12
henrynashjaosoiror: it is possible that you need to provide a spec in specs/juno for this change - I hope not given it is so small….we’ll check with dolph when he gets on08:13
henrynashjaosoiror: here’s one I did recently - which has more impact than you change, however: https://review.openstack.org/#/c/110674/08:14
openstackgerritJuan Antonio Osorio Robles proposed a change to openstack/identity-api: Add user email to the documentation  https://review.openstack.org/11118608:15
jaosoriorI hope not O_O08:17
jaosoriorbut thanks for the input!08:17
henrynashjaosoiror: ok, +2 added, let’s see if we need a spec as well….which would be minimal anyway08:20
jaosoriorhenrynash, thanks, I do hope a spec is not needed, as this addresses a bug, even though it kind of introduces a new feature (which was kind of expected to work anyway)08:23
henrynashjaosorior: if we need a spec, we’ll pushit through asap…we are changing our API contract however (it’s the REST API that is the contract, not the client)08:24
openstackgerritAlexey Miroshkin proposed a change to openstack/keystone: Filter List Regions by 'parent_region_id'  https://review.openstack.org/11120008:42
openstackgerritAbhishek Kekane proposed a change to openstack/keystone: Keystone service throws error on SIGHUP signal  https://review.openstack.org/10748208:57
*** ajayaa has quit IRC09:07
*** ajayaa has joined #openstack-keystone09:08
*** ajayaa has quit IRC09:13
*** ajayaa has joined #openstack-keystone09:15
jaosoriorAlexey Miroshkin, are you around?09:29
*** ajayaa has quit IRC09:33
*** ajayaa has joined #openstack-keystone09:34
*** gabriel-bezerra has quit IRC09:38
*** gabriel-bezerra has joined #openstack-keystone09:38
*** ajayaa has quit IRC09:44
*** fmarco76 has joined #openstack-keystone09:57
*** fmarco76 has left #openstack-keystone09:58
*** yasukun has quit IRC09:58
*** yasukun has joined #openstack-keystone09:58
*** tomoiaga has quit IRC10:19
*** gabriel-bezerra has quit IRC10:19
*** gabriel-bezerra has joined #openstack-keystone10:20
*** ajayaa has joined #openstack-keystone10:27
*** ukalifon has quit IRC10:28
*** diegows has joined #openstack-keystone10:58
*** yasukun has quit IRC11:08
openstackgerritAjaya Agrawal proposed a change to openstack/keystone: Implemented caching in identity layer.  https://review.openstack.org/11057511:09
henrynashdolphm: ping11:49
*** cjellick has joined #openstack-keystone11:59
*** cjellick has quit IRC11:59
*** cjellick has joined #openstack-keystone12:00
*** cjellick has quit IRC12:00
*** cjellick has joined #openstack-keystone12:01
*** jasondotstar has quit IRC12:10
*** xianghui has quit IRC12:18
*** xianghui has joined #openstack-keystone12:33
*** gordc has joined #openstack-keystone12:48
*** markwash has quit IRC12:48
*** gabriel-bezerra has quit IRC13:00
*** hrybacki has joined #openstack-keystone13:01
*** gabriel-bezerra has joined #openstack-keystone13:01
jaosoriorhenrynash13:02
jaosoriorare you around_13:02
jaosorior?13:02
*** joesavak has joined #openstack-keystone13:08
*** ukalifon1 has joined #openstack-keystone13:08
*** gokrokve has joined #openstack-keystone13:09
*** nkinder_away has quit IRC13:11
*** jasondotstar has joined #openstack-keystone13:19
*** chandankumar has quit IRC13:21
*** cjellick_ has joined #openstack-keystone13:24
*** cjellick_ has joined #openstack-keystone13:25
*** k4n0 has quit IRC13:26
*** cjellick has quit IRC13:26
*** gokrokve has quit IRC13:26
*** bknudson has quit IRC13:27
*** gokrokve has joined #openstack-keystone13:29
openstackgerritHarry Rybacki proposed a change to openstack/keystonemiddleware: Convert auth_token middleware to use sessions  https://review.openstack.org/10503113:31
*** topol has joined #openstack-keystone13:37
*** jasondotstar has quit IRC13:40
*** jasondotstar has joined #openstack-keystone13:41
*** ukalifon1 has quit IRC13:43
*** bknudson has joined #openstack-keystone13:44
*** mriedem has joined #openstack-keystone13:48
mriedemlooking at http://logs.openstack.org/31/111131/2/gate/gate-tempest-dsvm-full/58b9b4d/logs/screen-key.txt.gz13:48
mriedemif i search for 'error'13:48
mriedemi get 48431 hits13:48
mriedemwhat is the "[:error]" from?13:49
bknudsonmriedem: keystone is running in apache httpd, so it must be sticking that on there13:51
mriedemoh right13:52
bknudsonmaybe it's reading from stderr?13:52
mriedemyuck13:52
mriedemthat's kind of terrible for debugging13:52
bknudsony, it's pretty gross13:52
ajayaahttp://logs.openstack.org/75/110575/2/check/check-tempest-dsvm-postgres-full/b13a5ca/console.html13:54
bknudsonajayaa: https://bugs.launchpad.net/keystone/+bug/135102613:55
uvirtbotLaunchpad bug 1351026 in tempest "IdentityError in TokensV3TestJSON.test_rescope_token" [Undecided,In progress]13:55
ajayaaWhy does this fail? I have tested locally the same commands with my changes13:55
*** nkinder_away has joined #openstack-keystone14:00
dstanekbknudson: wasn't that you that had issues the hostnames in the generated config?14:00
bknudsondstanek: y14:00
dstanekbknudson: what was the issue?14:00
henrynashjaosorior: hi14:01
bknudsondstanek: in my /etc/hosts I had "127.0.0.1       localhost f1-ds" "127.0.0.1       f1-ds localhost"14:01
bknudsonoops, I had "127.0.0.1      localhost f1-ds " and then I changed it to "127.0.0.1       f1-ds localhost"14:01
bknudsondstanek: it was something like that14:01
bknudsondstanek: morganfainberg_Z actually figured out where in the oslo.config code it was messing up14:02
dstanekthat's very odd14:03
dstanekshould the value in the config file be localhost or keystone?14:03
henrynashdolphm: do we need a “spec” for any API change?  E.g. https://review.openstack.org/#/c/111186/14:03
dolphmhenrynash: all API changes are effectively user-facing, so i'd say yes14:04
henrynashdolphm: ok, I have to agree…any change to our contract needs a spec change14:04
dolphmhenrynash: although i've *never* noticed that we include email in several API examples!14:06
henrynashdolphm: !!14:06
henrynashdolphm: and it is indeed handled explicitly by keystoneclient14:06
*** YorikSar has quit IRC14:07
jaosoriordolphm, henrynash: yup, that's why I didn't think it needed a spec, but anyway, it's almost finished :P14:11
dolphmjaosorior: v2 recognized 'email' address, and we never had a need to query on it or anything - we just quietly supported it as an unindexed attribute14:12
dolphmjaosorior: i'd be curious to know why you want to query on it and such14:12
jaosoriordolphm: some dudes doing a custom client complaigned, and I saw that bug report, and took the chanse :P14:13
*** stevemar has joined #openstack-keystone14:15
*** vhoward has joined #openstack-keystone14:16
*** bvandenh_ has quit IRC14:17
openstackgerritJuan Antonio Osorio Robles proposed a change to openstack/keystone: Enable filtering of services by name  https://review.openstack.org/11090414:18
openstackgerritJuan Antonio Osorio Robles proposed a change to openstack/keystone: Filter users by email  https://review.openstack.org/11097014:18
*** xianghui has quit IRC14:19
*** xianghui has joined #openstack-keystone14:21
jaosoriorhenrynash, dolphm: so should email then be an actual attribute? meaning I should write the migration scripts and such, or should I just leave it as extra in the backend?14:24
dolphmjaosorior: if you're going to query on it, it'd be nice for the sql backend to be able to do the filtering14:24
bknudsondstanek: the values in the sample config as they are now should be correct14:25
jaosoriordolphm: well, before doing that, I would like to know if this is something anyone else is interested in having O_o14:25
dolphmjaosorior: you're the first to suggest it in keystone's lifetime AFAIK! although it's certainly an odd discrepency between what the client appears to support and what the server/API considers first class14:27
openstackgerritAlexey Miroshkin proposed a change to openstack/keystone: Filter List Regions by 'parent_region_id'  https://review.openstack.org/11120014:28
jaosoriordolphm: indeed it's an discrepancy. But that's why I ask14:30
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Update control_exchange value in keystone.conf  https://review.openstack.org/11117014:30
*** nkinder_away is now known as nkinder14:31
*** jsavak has joined #openstack-keystone14:35
*** comstud is now known as bearhands14:36
stevemarbknudson, dolphm do either of you know why i run tox -e sample_config, it always slots in 'keystone' instead of 'localhost' in some spots?14:37
*** joesavak has quit IRC14:38
*** joesavak has joined #openstack-keystone14:38
lbragstadstevemar: I noticed that the last time I generate the docs too14:40
*** jsavak has quit IRC14:40
stevemarlbragstad, i'm wondering if we're not doing something we should be in oslo14:41
stevemarbut then it happens with the ldap code too14:41
openstackgerritDiane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details.  https://review.openstack.org/11077714:42
bknudsonstevemar: dstanek was just talking about this14:42
bknudsonmaybe ask on -oslo?14:42
bknudsonthey might have changed it14:42
stevemarbut the ldap generated value isn't from oslo14:42
stevemari could go in and change it manually after it's generated, but that seems silly14:43
bknudsonI just did tox -e sample_config and the hostnames didn't change14:43
stevemarweird14:44
bknudsonoslo.config==1.4.0.0a314:44
stevemarmorgan's didn't either: https://review.openstack.org/#/c/109657/114:44
stevemarmaybe that's it, i'll nuke my sample_config tox env14:44
bknudsonyou need to do that every once in a while14:44
*** joesavak has quit IRC14:47
*** YorikSar has joined #openstack-keystone14:47
*** joesavak has joined #openstack-keystone14:48
bknudsonwhen I `tox -r -e sample_config` I get a few differences14:49
bknudsonbut it's not the hostnames14:49
stevemarbknudson, the ec2 ones?14:52
stevemarif so, i tossed up something already: https://review.openstack.org/#/c/111162/114:52
stevemarjust getting rid of the hostname diffs14:53
bknudsonthat doesn't even pass jenkins14:53
stevemaryes, because of 135046614:53
stevemarnot much is passing jenkins!14:53
bknudsonwhen I regen sample_config with 111162 there are still differences14:54
stevemaryeah, i'm noticing a few more now14:54
bknudsonthe hostname ones obviously14:54
bknudson-#allowed_rpc_exception_modules=oslo.messaging.exceptions,nova.exception,cinder.exception,exceptions14:54
*** ajayaa has quit IRC14:54
bknudson-# Host to locate redis. (string value)14:54
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Update the config file  https://review.openstack.org/11116214:55
stevemarbknudson, ^14:55
bknudsonstevemar: with that one it's just the hostnames changed14:55
bknudsonstevemar: what do you get when you run `hostname` ?14:56
stevemarubuntuvm, my hostname14:56
dolphmbknudson: stevemar: it definitely seems to be newer version of oslo.config has newer behavior14:56
bknudsonI was having this problem earlier but I fixed it somehow when morganfainberg_Z pointed out the code... let me see if I can find it again14:57
stevemarit's weird because of the change to [ldap] url14:58
stevemarin config.py its defaulted to localhost - https://github.com/openstack/keystone/blob/master/keystone/common/config.py#L463-L46414:59
bknudsonhttp://git.openstack.org/cgit/openstack/keystone/tree/keystone/openstack/common/config/generator.py#n22414:59
bknudsonwhat does socket.gethostname() and socket.getfqdn() give you?15:00
bknudson>>> (socket.gethostname(), socket.getfqdn()) -> ('f1-ds', 'f1-ds')15:00
stevemarbknudson, ('ubuntuvm', 'localhost')15:01
bknudsonthere you go. localhost15:02
stevemarbknudson, but i'm changing it *from* localhost *to* keystone15:02
bknudsonstevemar: y, that happens at 23915:02
bknudsonhttp://git.openstack.org/cgit/openstack/keystone/tree/keystone/openstack/common/config/generator.py#n23915:02
stevemarbknudson, i thought you pointed out the wrong code, but if you resize the browser to >100% the line numbers don't scale correctly15:05
bknudsonstevemar: firefox?15:05
stevemarchrome15:06
*** stevemar has quit IRC15:11
*** stevemar has joined #openstack-keystone15:11
stevemarbknudson, oh, it matches the first one out of /etc/hosts15:13
bknudsonmaybe it's an ubuntu thing to stick localhost first?15:14
*** thedodd has joined #openstack-keystone15:15
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Update the config file  https://review.openstack.org/11116215:16
stevemarbknudson, nah, i probably did that, but weird that it just picks the first one15:17
stevemari dunno, either way, it worked, i have to write that down somewhere15:17
*** mriedem has left #openstack-keystone15:18
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Update control_exchange value in keystone.conf  https://review.openstack.org/11117015:18
openstackgerritThiago da Silva proposed a change to openstack/keystone: Adding python-setuptools to list of dependencies  https://review.openstack.org/11131215:24
*** arunkant has quit IRC15:31
*** arunkant has joined #openstack-keystone15:31
*** david-lyle has joined #openstack-keystone15:36
*** gyee has joined #openstack-keystone15:36
*** hrybacki has quit IRC15:43
*** YorikSar has quit IRC15:58
lbragstadtox failing for anyone else because of https://github.com/openstack/keystone/commit/4afa111743626edb3dad4c15e5028c887d0fdfde15:58
lbragstador pep8 specifically?15:58
*** Farhan has quit IRC15:59
openstackgerritLance Bragstad proposed a change to openstack/keystone: Ignore import issue in keystone/tests/core.py  https://review.openstack.org/11132316:03
openstackgerritLance Bragstad proposed a change to openstack/keystone: Check if lxml is installed before import  https://review.openstack.org/11110816:05
stevemarlbragstad, ^16:11
stevemarcommented on one of those16:11
openstackgerritLance Bragstad proposed a change to openstack/keystone: Check if lxml is installed before import  https://review.openstack.org/11110816:11
lbragstadstevemar: thanks!16:13
nkinderwas there a recent change to the oslo.config version that keystone requires?16:15
nkinderpip isn't able to satisfy the dependency16:15
nkinderhttp://paste.openstack.org/show/89625/16:16
lbragstadnkinder: try .tox/venv/bin/pip install oslo.config==1.4.0.0a3 --upgrade ?16:17
openstackgerritDiane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details.  https://review.openstack.org/11077716:17
nkinderlbragstad: no dice16:18
nkinderlbragstad: do I need to configure pip to look somewhere special for 1.4.0.0a3?16:18
*** gokrokve_ has joined #openstack-keystone16:19
lbragstadnkinder: I don't *think* so... http://paste.openstack.org/show/89626/16:19
nkinderlbragstad: interesting... http://paste.openstack.org/show/89631/16:22
lbragstadnkinder: strange16:23
*** gokrokve has quit IRC16:23
lbragstadnkinder: what version of setuptools are you running?16:23
lbragstadand/or virtualenv16:23
nkindersetuptools in my .venv is 0.9.816:24
lbragstad$ .tox/venv/bin/pip list | grep setup16:24
lbragstadsetuptools (5.4.1)16:24
nkinderpython-virtualenv-1.10.1-1.fc20.noarch16:25
lbragstadnkinder: can you update?16:25
lbragstadsetuptools16:25
*** nkinder has quit IRC16:29
*** morganfainberg_Z is now known as morganfainberg16:33
morganfainbergmornin.16:37
dstanekmorganfainberg: morning16:37
morganfainbergdstanek, how goes?16:37
dstanekright now i'm struggling with devstack icehouse :-) so it could be better16:37
dstanekyou?16:37
morganfainbergdstanek, hehe, i'll take that over my morning. but really since i woke up (20 mins ago) things aren't bad at all16:39
morganfainbergdstanek, anything i can specifically help with?16:39
dstanekmorganfainberg: not yet. i keep running into walls, ripping them down and running into the next16:40
morganfainbergdstanek i see16:41
*** nkinder has joined #openstack-keystone16:42
dstanekwhat's the feeling on squashing for backports? i have a patchset of maybe 5 patches that we may need in icehouse - should i squash into a single commit?16:42
morganfainbergdstanek, well i'm about to try and figure out the policy rule engine so we can do a 'exists' check in policy, so... :P fun16:42
morganfainbergdstanek, backports should be the same as the master patch iirc16:42
morganfainbergdstanek, or as close as possible16:42
morganfainbergso if it's 5 patches to master... it should be 5 patches to stable16:43
nkinderlbragstad: got it working.  I upgraded setuptools and had to enable wheel in ~/.pip/pip.conf16:44
lbragstadnkinder: nice!16:44
dstanekmorganfainberg: that's easier for me anyway16:44
nkinderlbragstad: never had to do that before, so this must be the first tie that there is only a .whl available for a requirement16:44
lbragstadyeah, that was interesting16:45
dstanekmorganfainberg: ok, so now if i run openstack client it does nothing but print 'six>=1.6.0'16:46
morganfainbergdstanek, that seems... sub-useful16:47
*** markwash_ has joined #openstack-keystone16:47
*** markwash_ is now known as markwash16:48
morganfainbergoh.. wow policy engine uses ast16:48
* morganfainberg gets to learn ast now.16:48
dstanekmorganfainberg: does it use more than just a safe eval?16:48
morganfainbergliteral_eval16:49
morganfainbergso, probably a bit less crazy than the stuff you were doing16:49
morganfainberga little = a lot16:49
dstanekmorganfainberg: you should learn ast anyway - you can do some fun stuff16:50
morganfainbergdstanek, ++16:50
morganfainbergevil stuff16:50
morganfainbergbut fun16:50
nkinderyeah, ast is pretty cool16:51
*** hemna_ is now known as hemna17:07
*** marcoemorais has joined #openstack-keystone17:11
*** david-ly_ has joined #openstack-keystone17:11
morganfainberghm..17:14
morganfainbergok in a policy check what *should* a does value X exist look like?17:14
*** david-lyle has quit IRC17:15
morganfainbergoh wow, i think i see a big performance optimisation we can do in keystone...17:17
*** david-ly_ is now known as david-lyle17:18
dstanekmorganfainberg: related to policy?17:21
morganfainbergdstanek, yeah17:21
morganfainbergdstanek, looks like auth context middleware is doing a lot of the same work the @protected decorator is17:22
morganfainbergwe can *probably* avoid doing token bind checks 2x, and load tokens form the backend 4x on each v3 request17:23
*** gokrokve_ has quit IRC17:24
morganfainbergthat being said, i guess some call could *indavertently* muck with the context directly17:25
*** gokrokve has joined #openstack-keystone17:25
*** gokrokve_ has joined #openstack-keystone17:27
openstackgerritNathan Kinder proposed a change to openstack/keystone: Trust unit tests should target additional threat scenarios  https://review.openstack.org/10912017:31
*** gokrokve has quit IRC17:31
*** chandankumar has joined #openstack-keystone17:44
stevemarlbragstad, commented on the xml middleware thing17:45
*** gabriel-bezerra has quit IRC17:48
*** gabriel-bezerra has joined #openstack-keystone17:49
lbragstadstevemar: sweet, thanks17:49
stevemarlbragstad, you might want to check with one of the pythonistas if my thinking is correct17:53
*** marcoemorais has quit IRC18:02
*** marcoemorais has joined #openstack-keystone18:02
*** marcoemorais has quit IRC18:03
*** marcoemorais has joined #openstack-keystone18:03
*** ukalifon has joined #openstack-keystone18:06
openstackgerritRaildo Mascena de Sousa Filho proposed a change to openstack/identity-api: API documentation for Hierarchical Multitenancy  https://review.openstack.org/11135518:08
openstackgerritDiane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details.  https://review.openstack.org/11077718:13
openstackgerritDiane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details.  https://review.openstack.org/11077718:18
*** ukalifon has quit IRC18:21
*** markwash has quit IRC18:22
dolphmis infra emptying the gate queue?18:24
morganfainbergdolphm, why do you ask?18:25
dolphmmorganfainberg: the gate depth has been plummeting for the past hour or two18:25
dolphmcould be a side effect of everything failing check queue :(18:26
morganfainbergthe skip for the bug in postgress landed18:26
morganfainbergkeystone bug + tempest in rescope18:26
morganfainbergmaybe things just started catching up?18:27
*** hemna has quit IRC18:33
*** markwash has joined #openstack-keystone18:35
bknudsonsomething must have changed in postgres that caused it to start failing.18:36
dolphmbknudson: was a new version released?18:37
*** gabriel-bezerra has quit IRC18:37
*** gabriel-bezerra has joined #openstack-keystone18:38
*** marcoemorais has quit IRC18:38
*** marcoemorais has joined #openstack-keystone18:39
morganfainbergdolphm, bknudson we moved back to eventlet for postgres18:46
morganfainbergdolphm, bknudson, keystone uses postgres as the eventlet run so we have full coverage18:46
morganfainbergperhaps eventlet issue?18:46
bknudsonI can't imagine how that would cause this issue at all.18:46
bknudsonand I can recreate it on my local system18:46
morganfainbergneither can i18:46
morganfainbergit's kinda weird18:47
*** afazekas has quit IRC18:48
openstackgerritAlexey Miroshkin proposed a change to openstack/keystone: Filter List Regions by 'parent_region_id'  https://review.openstack.org/11120018:53
*** nkinder has quit IRC18:55
dolphmuhh, our keystone-coverage job has a bug18:59
morganfainbergit does?18:59
dolphmmorganfainberg: bknudson's patch just ran into a weird failure here: http://logs.openstack.org/20/109820/3/check/gate-keystone-pep8/7317358/console.html18:59
openstackgerritMorgan Fainberg proposed a change to openstack/keystonemiddleware: Convert auth_token middleware to use sessions  https://review.openstack.org/10503119:00
dolphmjust look at the very end of the log19:00
morganfainbergpip missing?19:00
morganfainbergthat is really weird19:00
dolphmsame failure appears in all of these jobs: http://pasteraw.com/948dni9io4c0xqh1cr7jqsebpsuwkx19:01
morganfainbergvery strange.19:01
dolphmbug- https://bugs.launchpad.net/openstack-ci/+bug/133708919:01
uvirtbotLaunchpad bug 1337089 in openstack-ci "Pip temporarily diseappeared?" [Undecided,Incomplete]19:01
dolphmit happens in different tox environments, but almost every failure is in the keystone-coverage job ?!19:02
morganfainbergwhen did it start?19:02
dolphmmorganfainberg: last 14 days of hits-- http://pasteraw.com/cf2nrpekz8lqzu7dfc1chk2jldp757n19:04
morganfainbergcrazy19:04
dolphmso definietly the 24ths19:04
dolphms/s//19:04
morganfainbergwait... without pip how... did all the pep8 stuff get installed?!19:06
dstanekthat's really wierd19:08
dstanekdolphm: that same type of error happens on the coverage jobs too?19:11
*** cjellick has joined #openstack-keystone19:30
*** andreaf has quit IRC19:33
*** cjellick_ has quit IRC19:33
*** cjellick has quit IRC19:35
*** rwsu has joined #openstack-keystone19:37
*** cjellick has joined #openstack-keystone19:38
*** cjellick has quit IRC19:39
*** cjellick has joined #openstack-keystone19:39
*** bknudson has quit IRC19:44
*** topol has quit IRC19:46
*** gabriel-bezerra has quit IRC19:46
*** gabriel-bezerra has joined #openstack-keystone19:46
openstackgerritChristian Berendt proposed a change to openstack/keystone: Bump hacking to 0.9.x series  https://review.openstack.org/9899619:51
dolphmdstanek: yeah19:51
dolphmit just happened again too19:52
dstanekdolphm: i wonder if the boxes have a newer virtualenv or setuptools package that doesn't install pip19:53
dolphmdstanek: that would be a drastic change - is there a new package that's missing pip somewhere?19:53
dolphmdstanek: actually, it's happening on both precise and centos619:54
dolphmdstanek: morganfainberg: would be nice to get this one in https://review.openstack.org/#/c/98996/19:58
openstackgerritRaildo Mascena de Sousa Filho proposed a change to openstack/identity-api: API documentation for Hierarchical Multitenancy  https://review.openstack.org/11135520:00
*** asmacdo has left #openstack-keystone20:00
*** chandankumar has quit IRC20:01
dstanekdolphm: i can take a look in a few20:08
dolphmdstanek: awesome20:08
*** afazekas has joined #openstack-keystone20:08
dstanekdolphm: this https://bugs.launchpad.net/keystone/+bug/1347862 is actually https://bugs.launchpad.net/keystone/+bug/123027920:11
uvirtbotLaunchpad bug 1347862 in keystone "keystone will not auth users if there is a bad endpoint " [Undecided,Confirmed]20:11
openstackgerritChristian Berendt proposed a change to openstack/keystone: Bump hacking to 0.9.x series  https://review.openstack.org/9899620:35
*** jaosorior has quit IRC20:42
lbragstaddstanek: ping, Mock unit testing question for you20:42
dstaneklbragstad: fire away20:42
lbragstaddstanek: so, I'm mocking out a module level function, and the first time I call it I want it to return None and the second time I call it I want it to return something that isn't None20:43
lbragstadso... if keystone.openstack.common.importutils.try_import('something') it returns None20:43
lbragstadand if keystone.openstack.common.importutils.try_import('os') for example, it returns some object()20:44
lbragstadis there a way to specify that behavior with a decorator - @mock.patch wrapping the unit test?20:44
dstaneklbragstad: it sounds a little wierd that you would have to do that - what are you working on?20:46
lbragstaddstanek: helping out here: https://review.openstack.org/#/c/111108/20:47
dstaneklbragstad: assuming that you have to do that you can create your own class to patch instead of patching a mock - jas i'll hack out a quick example20:47
lbragstadI know you can create a mock and then call an assert on that mock that says "hey, was this mock called with these parameters", but I'm looking for, "if this is called with this parameter, return something specific"20:48
*** gabriel-bezerra has quit IRC20:48
*** gabriel-bezerra has joined #openstack-keystone20:49
dstaneklbragstad: quick hack - http://paste.openstack.org/show/89673/ - *not guaranteed to be working :-)20:52
lbragstaddstanek: gotcha, that makes sense20:53
lbragstaddstanek: so FakeImporter would take place of try_import()?20:53
lbragstaddstanek: the importutils.py module doesn't have a class or anything. It's just a module that holds a collection of utilities20:54
dstanekyeah, you would use an instance of that to mock (in this case fake) try_import20:54
lbragstadok, cool20:54
dstaneklbragstad: the reason it works is that it would fake with an instance that can remember if it was called or not - the __call__ allows a Python object instance to be called like a function20:55
openstackgerritBob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests  https://review.openstack.org/11113020:55
lbragstaddstanek: cool, that helps20:56
openstackgerritBob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests  https://review.openstack.org/11113020:56
dstaneklbragstad: i know it's not openstacky, but in this situation i would probably just put the import in the __init__ and call it a day21:00
dstanekdoes try_import log the real reason for the import error?21:00
lbragstaddstanek: no21:01
lbragstadif try_import can't import the module or whatever, it returns None:21:02
lbragstadhttps://github.com/openstack/oslo-incubator/blob/master/openstack/common/importutils.py#L68-L7321:02
*** marzif_ has joined #openstack-keystone21:02
lbragstadso, you either get the object that you wanted, or nothing21:02
lbragstador whatever the default value is21:02
dstaneklbragstad: well that sucks - if you can't import the module you'll never know why21:02
lbragstadright21:02
lbragstadall you know is that you can't do it21:02
lbragstadso, relaying that to the user is about all we can do21:03
dstaneklbragstad:  that's why i like doing the import in the __init__; you'll get the real exception from Python21:03
*** cjellick_ has joined #openstack-keystone21:09
*** cjellick has quit IRC21:13
*** cjellick_ has quit IRC21:14
openstackgerritLance Bragstad proposed a change to openstack/keystone: Check if lxml is installed before import  https://review.openstack.org/11110821:19
*** joesavak has quit IRC21:21
shufflebothey - anyone familair with the openstack hybrid identity driver?21:23
shufflebotso we were looking at using ldap for user backend but we want service accounts to run in sql21:23
shufflebotthe way the hybrid driver functions is if you fail to authenticate againast sql it passes the query to ldap21:23
shufflebotWould that be an appropriate appraoch?21:24
dolphmshufflebot: are you using master or a stable/ release?21:27
*** stevemar has quit IRC21:28
dolphmshufflebot: master has a feature where you can have you service accounts in a separate domain than other users, and you can keep that entire identity domain in sql, while the rest of your users are in ldap. ping henrynash if you have questions :)21:29
dstanekdolphm: did you seem my message about about the two bugs21:30
dstanek?21:30
shufflebotdolphm: interesting, we're currently running havana but we will eventually be moving to icehouse21:33
shufflebothttp://www.mattfischer.com/blog/?p=576 stacked auth seemed interesting because then if LDAP failed we could still get back in21:33
*** ukalifon has joined #openstack-keystone21:33
*** jasondotstar has quit IRC21:34
*** cjellick has joined #openstack-keystone21:40
*** bknudson has joined #openstack-keystone21:41
*** nonameentername has left #openstack-keystone21:44
*** nonameentername has joined #openstack-keystone21:44
*** gabriel-bezerra has quit IRC21:44
*** gabriel-bezerra has joined #openstack-keystone21:45
*** bknudson has quit IRC21:45
*** bknudson has joined #openstack-keystone21:46
*** fifieldt has quit IRC21:47
*** cjellick has quit IRC21:48
*** nkinder has joined #openstack-keystone21:48
*** fifieldt has joined #openstack-keystone22:00
*** ukalifon has quit IRC22:04
*** hrybacki has joined #openstack-keystone22:07
*** gokrokve has joined #openstack-keystone22:07
*** gokrokve has quit IRC22:11
*** gokrokve_ has quit IRC22:11
*** gordc has quit IRC22:15
*** markwash has quit IRC22:40
*** thedodd has quit IRC22:45
*** morganfainberg is now known as morganfainberg_Z22:55
*** slogan has joined #openstack-keystone22:58
*** arunkant has left #openstack-keystone23:05
*** arunkant has joined #openstack-keystone23:07
*** slogan has quit IRC23:11
*** david-lyle has quit IRC23:11
*** slogan has joined #openstack-keystone23:28
openstackgerritA change was merged to openstack/keystone: Check that region ID is not an empty string  https://review.openstack.org/9521223:37
*** slogan has quit IRC23:42

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!