Wednesday, 2014-08-27

*** gokrokve_ has quit IRC00:00
*** amcrn has quit IRC00:00
*** david-lyle has quit IRC00:01
*** topol has joined #openstack-keystone00:33
*** gokrokve has joined #openstack-keystone00:57
*** dims has joined #openstack-keystone01:02
*** dims_ has joined #openstack-keystone01:05
*** marcoemorais has quit IRC01:05
*** dims has quit IRC01:09
*** zzzeek has quit IRC01:11
*** renlt has joined #openstack-keystone01:12
bknudsonthe gate seems to be in some amount of trouble.01:13
*** morganfainberg is now known as morganfainberg_Z01:13
*** dims_ has quit IRC01:19
*** RicoLin has joined #openstack-keystone01:23
bknudsonI opened a bug https://bugs.launchpad.net/keystone/+bug/136192401:28
uvirtbot`Launchpad bug 1361924 in keystone "python-subunit 0.0.20 failing to install causing gate failure" [Undecided,New]01:28
bknudsonpinged lifeless but haven't gotten a response.01:28
bknudsonalso brought it up in infra01:28
*** shakamunyi has quit IRC01:29
*** ncoghlan has joined #openstack-keystone01:30
*** mitz_ has joined #openstack-keystone01:31
*** mitz has quit IRC01:33
*** morganfainberg_Z is now known as morganfainberg01:33
bknudsonI think a fix is on the way01:34
bknudsonsubunit 0.0.21 is up now which should fix it... not sure if a recheck right away will work.01:36
*** shakamunyi has joined #openstack-keystone01:36
*** yasukun has joined #openstack-keystone01:37
*** ncoghlan is now known as ncoghlan_afk01:52
*** diegows has quit IRC01:53
*** raildo has quit IRC01:55
*** gabriel-bezerra has quit IRC01:55
*** samuelmz has quit IRC01:56
*** raildo has joined #openstack-keystone01:56
*** samuelmz has joined #openstack-keystone01:56
*** rodrigods has quit IRC01:56
*** rodrigods has joined #openstack-keystone01:57
*** rodrigods has joined #openstack-keystone01:57
*** gabriel-bezerra has joined #openstack-keystone01:57
*** david-lyle has joined #openstack-keystone02:02
*** dims has joined #openstack-keystone02:02
*** david-lyle has quit IRC02:07
*** richm has quit IRC02:13
*** dims has quit IRC02:13
*** david-lyle has joined #openstack-keystone02:16
*** stevemar has joined #openstack-keystone02:18
*** david-lyle has quit IRC02:21
*** toddnni has quit IRC02:21
*** toddnni has joined #openstack-keystone02:25
dolphmbknudson: thanks :(02:25
*** renlt has quit IRC02:27
*** afaranha1 has quit IRC02:27
*** gabriel-bezerra has quit IRC02:29
*** raildo has quit IRC02:29
*** rodrigods has quit IRC02:29
*** rodrigods has joined #openstack-keystone02:29
*** rodrigods has joined #openstack-keystone02:29
*** gabriel-bezerra has joined #openstack-keystone02:30
*** raildo has joined #openstack-keystone02:30
*** afaranha has joined #openstack-keystone02:32
*** praneshp has quit IRC02:35
*** ncoghlan has joined #openstack-keystone02:35
*** ncoghlan has quit IRC02:36
*** ncoghlan has joined #openstack-keystone02:36
*** ncoghlan_ has joined #openstack-keystone02:37
*** jamielennox|away has quit IRC02:37
*** ncoghlan__ has joined #openstack-keystone02:37
*** jamielennox|away has joined #openstack-keystone02:37
*** ncoghlan__ has quit IRC02:38
*** ncoghlan__ has joined #openstack-keystone02:38
stevemarapparently bug 1361924 destroyed everything02:38
uvirtbot`Launchpad bug 1361924 in subunit "python-subunit 0.0.20 failing to install causing gate failure" [Critical,Fix released] https://launchpad.net/bugs/136192402:38
*** ncoghlan__ has quit IRC02:39
dolphmstevemar: it did02:39
*** ncoghlan__ has joined #openstack-keystone02:39
*** ncoghlan_afk has quit IRC02:39
*** ncoghlan__ has quit IRC02:39
*** ncoghlan__ has joined #openstack-keystone02:40
*** ncoghlan__ is now known as ncoghlan_afk02:40
*** ncoghlan_afk has quit IRC02:40
*** ncoghlan_afk has joined #openstack-keystone02:40
*** ncoghlan has quit IRC02:41
*** ncoghlan_afk has quit IRC02:41
*** ncoghlan_afk has joined #openstack-keystone02:41
*** ncoghlan_ has quit IRC02:42
*** ncoghlan has joined #openstack-keystone02:42
*** jamielennox|away has quit IRC02:42
*** ncoghlan_ has joined #openstack-keystone02:42
*** jamielennox|away has joined #openstack-keystone02:42
*** yasukun has quit IRC02:43
*** yasukun has joined #openstack-keystone02:43
*** inteq has quit IRC02:44
*** harlowja is now known as harlowja_away02:44
*** ncoghlan_afk has quit IRC02:46
*** ncoghlan has quit IRC02:47
*** afaranha has quit IRC02:51
*** raildo has quit IRC02:52
*** afaranha has joined #openstack-keystone02:52
*** raildo has joined #openstack-keystone02:52
*** dims has joined #openstack-keystone02:54
*** ncoghlan__ has joined #openstack-keystone02:58
*** jamielennox|away has quit IRC02:59
*** ncoghlan has joined #openstack-keystone02:59
*** jamielennox|away has joined #openstack-keystone03:00
*** ncoghlan_ has quit IRC03:02
*** ncoghlan__ has quit IRC03:03
*** KanagarajM has joined #openstack-keystone03:04
*** dims has quit IRC03:16
*** gyee has quit IRC03:17
*** david-lyle has joined #openstack-keystone03:17
*** david-lyle has quit IRC03:22
*** harlowja_away has quit IRC03:29
*** yasukun has quit IRC03:36
*** yasukun has joined #openstack-keystone03:37
*** jamielennox|away has quit IRC03:38
*** yasukun has quit IRC03:38
*** ncoghlan_ has joined #openstack-keystone03:38
*** yasukun has joined #openstack-keystone03:38
*** jamielennox|away has joined #openstack-keystone03:39
*** ncoghlan has quit IRC03:42
*** praneshp has joined #openstack-keystone03:56
*** gokrokve has quit IRC03:59
*** gokrokve has joined #openstack-keystone03:59
*** praneshp_ has joined #openstack-keystone04:00
*** oomichi has joined #openstack-keystone04:01
*** praneshp has quit IRC04:02
*** praneshp_ is now known as praneshp04:03
*** amirosh has joined #openstack-keystone04:04
stevemarjamielennox, if you're up, https://review.openstack.org/#/c/117087/104:46
stevemari'm tired of seeing those changes :P04:46
jamielennoxstevemar: done04:47
stevemarthank you jamielennox04:48
stevemarnow if only i can leave a msg for henrynash - then i'll be merged when i wake up :)04:48
stevemarit'll*04:48
stevemari hope i'm not merged with anything when i wake up04:48
jamielennoxlol04:51
jamielennox130 lines to nearly double the number of unit tests, the simple way to get test numbers up04:57
*** ajayaa has joined #openstack-keystone05:02
*** toddnni has quit IRC05:11
*** bdossant has quit IRC05:13
*** bdossant has joined #openstack-keystone05:13
*** yasukun has quit IRC05:30
*** yasukun has joined #openstack-keystone05:31
*** k4n0 has joined #openstack-keystone05:59
*** ajayaa has quit IRC06:05
*** ncoghlan has joined #openstack-keystone06:08
*** jamielennox|away has quit IRC06:10
*** jamielennox|away has joined #openstack-keystone06:11
*** ncoghlan_ has quit IRC06:11
*** chandankumar has joined #openstack-keystone06:14
*** topol has quit IRC06:22
*** ajayaa has joined #openstack-keystone06:26
*** ukalifon1 has joined #openstack-keystone06:35
*** afazekas has joined #openstack-keystone06:59
ByteSorehi people, got a question.. i've been testing alot today with glance authentication.. i can't get it to work. when i run a glance index i'm getting an error in the api.log: NotAuthenticated: Authentication required i have the OS_USERNAME and all set to the right info. if i check it with swift the credentials do work.07:01
*** praneshp_ has joined #openstack-keystone07:09
*** praneshp has quit IRC07:10
*** praneshp_ is now known as praneshp07:10
*** bvandenh has joined #openstack-keystone07:28
*** jamielennox|away has quit IRC07:38
*** ncoghlan_ has joined #openstack-keystone07:38
*** jamielennox|away has joined #openstack-keystone07:39
*** gokrokve_ has joined #openstack-keystone07:40
*** ncoghlan has quit IRC07:42
*** gokrokve has quit IRC07:43
*** f13o has quit IRC07:52
*** bdossant_ has joined #openstack-keystone08:00
*** shakayumi has joined #openstack-keystone08:01
*** amerine has joined #openstack-keystone08:01
*** electrichead has joined #openstack-keystone08:02
*** jamielennox_ has joined #openstack-keystone08:03
*** praneshp has quit IRC08:03
*** jdennis1 has joined #openstack-keystone08:04
*** henrynash has joined #openstack-keystone08:04
*** portante_ has joined #openstack-keystone08:08
*** dhellmann_ has joined #openstack-keystone08:08
*** Daviey_ has joined #openstack-keystone08:09
*** bdossant has quit IRC08:10
*** shakamunyi has quit IRC08:10
*** amerine_ has quit IRC08:10
*** Daviey has quit IRC08:10
*** redrobot has quit IRC08:10
*** RicoLin has quit IRC08:10
*** jamielennox has quit IRC08:10
*** jdennis has quit IRC08:10
*** dhellmann has quit IRC08:10
*** portante has quit IRC08:10
*** Daviey_ is now known as Daviey08:10
*** dhellmann_ has quit IRC08:12
*** dhellmann has joined #openstack-keystone08:12
*** ncoghlan_ has quit IRC08:12
*** stevemar has quit IRC08:14
*** RicoLin has joined #openstack-keystone08:15
*** RicoLin has joined #openstack-keystone08:16
*** aix has joined #openstack-keystone08:20
*** f13o has joined #openstack-keystone08:22
*** shakayumi has quit IRC08:40
*** KanagarajM has quit IRC08:41
*** KanagarajM has joined #openstack-keystone08:43
*** alex_xu has quit IRC08:57
*** alex_xu has joined #openstack-keystone08:58
*** gokrokve has joined #openstack-keystone09:09
*** oomichi has quit IRC09:09
*** gokrokve_ has quit IRC09:13
*** gokrokve has quit IRC09:13
*** bvandenh has quit IRC09:27
*** bvandenh has joined #openstack-keystone09:27
*** rharwood has quit IRC09:29
*** aix has quit IRC09:29
*** portante_ has quit IRC09:29
*** rharwood has joined #openstack-keystone09:29
*** chandankumar has quit IRC09:32
*** jamielenz has joined #openstack-keystone09:33
*** rharwood has quit IRC09:34
*** jaosorior has joined #openstack-keystone09:35
*** jamielennox|away has quit IRC09:36
*** gokrokve has joined #openstack-keystone09:39
*** gokrokve has quit IRC09:40
*** chandankumar has joined #openstack-keystone09:40
*** gokrokve has joined #openstack-keystone09:41
*** portante has joined #openstack-keystone09:43
*** KanagarajM2 has joined #openstack-keystone09:44
*** KanagarajM has quit IRC09:45
*** gokrokve has quit IRC09:45
*** henrynash has quit IRC09:49
*** rharwood has joined #openstack-keystone09:49
*** rushiagr_away is now known as rushiagr09:58
*** xianghuihui has joined #openstack-keystone10:01
*** aix has joined #openstack-keystone10:04
*** jamielennox|away has joined #openstack-keystone10:07
*** gokrokve has joined #openstack-keystone10:09
*** jamielenz has quit IRC10:09
*** gokrokve has quit IRC10:14
*** chandankumar has quit IRC10:26
*** chandankumar has joined #openstack-keystone10:27
*** rushiagr is now known as rushiagr_away10:30
*** yasukun has quit IRC10:34
*** yasukun has joined #openstack-keystone10:34
*** jamielennox_ has quit IRC11:03
*** gokrokve has joined #openstack-keystone11:09
*** dhellmann has quit IRC11:10
*** dhellmann has joined #openstack-keystone11:14
*** gokrokve has quit IRC11:14
*** KanagarajM2 has quit IRC11:22
*** jasondotstar has quit IRC11:29
*** amerine_ has joined #openstack-keystone11:31
*** amerine has quit IRC11:33
*** dims has joined #openstack-keystone11:36
*** dims has quit IRC11:40
*** dims has joined #openstack-keystone11:41
*** dims has quit IRC11:41
*** dims has joined #openstack-keystone11:42
*** jasondotstar has joined #openstack-keystone11:44
*** dims_ has joined #openstack-keystone11:44
*** dims has quit IRC11:47
*** amirosh has quit IRC11:47
*** amirosh has joined #openstack-keystone11:49
*** yasukun has quit IRC12:00
*** dims_ has quit IRC12:02
*** yasukun has joined #openstack-keystone12:03
*** diegows has joined #openstack-keystone12:03
*** jasondotstar has quit IRC12:06
*** yasukun has quit IRC12:08
*** ajayaa has quit IRC12:08
*** gokrokve has joined #openstack-keystone12:09
*** gokrokve has quit IRC12:11
*** gokrokve has joined #openstack-keystone12:11
*** zzzeek has joined #openstack-keystone12:15
*** gokrokve has quit IRC12:16
*** chandankumar has quit IRC12:21
*** ajayaa has joined #openstack-keystone12:29
*** zzzeek has quit IRC12:36
*** gordc has joined #openstack-keystone12:38
*** jasondotstar has joined #openstack-keystone13:02
*** gokrokve has joined #openstack-keystone13:03
*** nkinder has quit IRC13:03
*** richm has joined #openstack-keystone13:04
*** saipandi has joined #openstack-keystone13:06
*** ajayaa has quit IRC13:13
*** bknudson has quit IRC13:22
*** ajayaa has joined #openstack-keystone13:32
*** bknudson has joined #openstack-keystone13:41
*** shakamunyi has joined #openstack-keystone13:41
*** chandankumar has joined #openstack-keystone13:51
*** nkinder has joined #openstack-keystone13:53
*** Dafna is now known as Dafna_away13:57
*** shakamunyi has quit IRC13:58
*** ajayaa has quit IRC14:03
*** ajayaa has joined #openstack-keystone14:04
*** topol has joined #openstack-keystone14:10
*** joesavak has joined #openstack-keystone14:11
*** shakamunyi has joined #openstack-keystone14:12
*** ajayaa has quit IRC14:16
lbragstaddstanek: around?14:17
dstaneklbragstad: yep14:17
lbragstaddstanek: so, with domain validation14:18
lbragstadthe identity spec says that 'description' is an option parameter14:18
lbragstadbut in the case of the sql backend, there is no column for it14:18
lbragstadin that case, it would be thrown in the extras column14:19
lbragstaddo we update the identity api spec?14:19
lbragstador migrate the db such that the domain table has a description column?14:19
dstaneklbragstad: i wouldn't. does the spec define a size at all or does it just say it's a string?14:19
lbragstaddstanek: it just lists `description` as an optional attribute that is a of type `string`14:20
lbragstadhttps://github.com/openstack/identity-api/blob/master/v3/src/markdown/identity-api-v3.md#domains-v3domains14:20
lbragstadso, if that's the case, I'll fix the schema so that it matches what the implementation does14:20
dstaneklbragstad: for the purposes of this milestone we should probably just validate it as a string14:21
lbragstadok, so keep it as is14:21
lbragstadkeep validating `description` in the assignment.domain schema14:21
dstaneklbragstad: for now at least14:21
*** shakamunyi has quit IRC14:22
lbragstaddstanek: ok, i'll wrap it with the nullable method then14:23
lbragstadbecause this will fail https://github.com/openstack/tempest/blob/master/tempest/services/identity/v3/json/identity_client.py#L23014:23
*** shakamunyi has joined #openstack-keystone14:23
*** stevemar has joined #openstack-keystone14:24
*** KanagarajM has joined #openstack-keystone14:24
*** chandankumar has quit IRC14:24
*** david-lyle has joined #openstack-keystone14:26
*** Dafna_away is now known as Dafna14:27
KanagarajMstevemar: one help, for the review endpoint-region association, https://review.openstack.org/#/c/113183, i see your comments on the size of the endpoint.region column size, should it be 64?14:27
stevemarKanagarajM, i think it should be 255, keep it the same i  think14:27
mflobostevemar, One question about Hierachical Projects https://github.com/openstack/keystone-specs/blob/master/specs/juno/hierarchical_multitenancy.rst, We will have nested groups as well or this is only for Projects?14:29
KanagarajMstevemar: to keep the endpoint.region_id size to be 255, now this column is foreign key to region.id which is of size 64, so should i change the region.id to 25514:29
*** amirosh has quit IRC14:31
stevemarmflobo, pretty sure it's just projects14:31
mflobostevemar, ok, thanks14:32
stevemarKanagarajM, let me look @ the code again, one minute please14:33
KanagarajMstevemar: sure please14:33
*** cjellick has joined #openstack-keystone14:34
*** cjellick has quit IRC14:34
*** cjellick has joined #openstack-keystone14:35
*** shakamunyi has quit IRC14:40
dstanekKanagarajM: are you going to allow users to specify region_id when creating/updating an endpoint?14:41
*** chandankumar has joined #openstack-keystone14:42
dstanekthe 255 vs. 64 question may be a good thing to bring up to the larger group14:42
stevemarKanagarajM, i don't think forgein keys have a size limit?14:42
stevemardstanek, do you know if they do?14:42
KanagarajMdstanesk: in v2 api, only region will be allowed to use as existing today, where as v3 api, region_id will be used by user, and region also allowed to be backward compatible14:42
dstanekstevemar: not that i know of14:43
stevemardstanek, we declare all FKs to be string(64), but couldn't they be whatever we want, like string(255) or int()14:43
dstanekstevemar: yes14:43
stevemarKanagarajM, I would keep that column to size 255, no loss of data, and I don't believe that FKs have to be 6414:43
*** afazekas has quit IRC14:43
dstanekKanagarajM: do you have tests that show v3 usage like that? the code looks like it will alway overwrite the region_id14:43
KanagarajMdstanek: yes, i have added test cases in v3_catalog14:44
*** diegows has quit IRC14:45
dstanekKanagarajM: which one uses the region_id?14:45
KanagarajMstevemar: ok, i will keep the size for endpoint.region_id as 255 and i don't change the region.id size and leave it to 64 as its14:45
stevemaryay14:45
dstanekwait...what? i don't think you can have a foreign key that has a different data size14:46
KanagarajMdstanek: in v3 all the test cases are made to use region_id and added additional test cases to validate the backward compatibility with region in test_v3_catalog.py14:46
dstanekKanagarajM: i don't get why using a region_id that doesn't exist would give you a 404 when creating an endpoint - seems confusing14:51
*** HenryG has joined #openstack-keystone14:51
stevemardstanek, can i bug you for https://review.openstack.org/#/c/117087/ regenerate sample_config14:51
stevemarI'm tired of seeing diffs in the sample config when doing reviews14:52
*** jaosorior has quit IRC14:52
KanagarajMdstanek: actually now, the endpoint.region_id is foreign key to region, so if endpoint.region_id region does not exist, then RegionNotFound will be thrown.14:52
dstanekKanagarajM: but is that the right behavior?14:52
dstanekstevemar: sure14:53
KanagarajMdstanek: i believe so, to be in similar page, kestone throws ServiceNotFound when endpont.service_id doesnot exist.14:53
*** openstackgerrit has joined #openstack-keystone14:54
*** xianghuihui has quit IRC14:55
KanagarajMstevemar, dstanek: i just tested behavior of having endpoint.region_id (255) foreign key to region.id(64) it works14:57
dstanekKanagarajM: what happens if endpoint.region_id have a value that is 100 characters?14:58
KanagarajMstevemar, dstanek: tried with upgrade and downgrade *14:59
dstanekKanagarajM: with what database?14:59
*** jdennis1 has quit IRC14:59
KanagarajMdstanek: mysql14:59
dstanekKanagarajM: what what the value in the primary key column when the value or the foreign key was too large to fit?15:01
KanagarajMdstanek: yes, it will lead to confusion when region_id is > 64 in len. so shall will keep 64 as real world regions are usually in lesser length and tempest aslo passes?15:03
*** amirosh has joined #openstack-keystone15:06
dstanekKanagarajM: i don't think tempest matters is cases like this - they play to the know as opposed to what's possible15:07
*** f13o has quit IRC15:07
dstanekKanagarajM: i think that having input from dolphm, morganfainberg and others would be wise. i suspect that truncating to 64 would be OK, but i had to call it out15:09
*** ukalifon1 has quit IRC15:09
*** joesavak has quit IRC15:10
*** joesavak has joined #openstack-keystone15:11
*** KanagarajM has quit IRC15:17
*** KanagarajM has joined #openstack-keystone15:18
KanagarajMdstanek: i got disconnected15:18
KanagarajMdstanek, stevemar: could you suggest me to finalize the size for the endpoint.region_id and region.id.15:18
*** Daviey has quit IRC15:18
*** cjellick has quit IRC15:19
*** Daviey_ has joined #openstack-keystone15:19
*** cjellick_ has joined #openstack-keystone15:19
*** Daviey_ is now known as Daviey15:19
morganfainbergmornin15:19
*** erecio has joined #openstack-keystone15:22
*** erecio has quit IRC15:22
*** nkinder has quit IRC15:22
*** bambam1 has quit IRC15:22
*** vhoward- has quit IRC15:22
*** Jean-Daniel1 has quit IRC15:22
*** gmurphy has quit IRC15:22
*** mfisch has quit IRC15:22
*** erecio has joined #openstack-keystone15:22
*** nkinder has joined #openstack-keystone15:22
*** bambam1 has joined #openstack-keystone15:22
*** vhoward- has joined #openstack-keystone15:22
*** Jean-Daniel1 has joined #openstack-keystone15:22
*** gmurphy has joined #openstack-keystone15:22
*** mfisch has joined #openstack-keystone15:22
*** erecio has quit IRC15:23
*** erecio has joined #openstack-keystone15:23
*** cjellick_ has quit IRC15:24
*** topol has quit IRC15:24
*** electrichead is now known as redrobot15:26
dstanekKanagarajM: not really...i'd like to get some other opinions15:27
KanagarajMdstanek: sure15:27
stevemarg'mornin morganfainberg15:30
stevemardstanek, whats the deal with api validation?15:30
stevemarshould i be reviewing that or not?15:31
stevemarmorganfainberg, also, when you have time, can you walk me through "Remove assignment_api dependency on token_api"15:32
*** openstack has joined #openstack-keystone16:18
morganfainbergstevemar, which one?16:19
*** amerine has joined #openstack-keystone16:21
openstackgerritOpenStack Proposal Bot proposed a change to openstack/keystone: Updated from global requirements  https://review.openstack.org/11162016:22
*** bdossant_ has quit IRC16:22
*** wwriverrat has left #openstack-keystone16:22
*** amerine_ has quit IRC16:24
*** marcoemorais has joined #openstack-keystone16:25
*** bknudson has quit IRC16:26
*** amerine_ has joined #openstack-keystone16:27
*** amerine has quit IRC16:30
*** dims has joined #openstack-keystone16:30
*** amerine_ is now known as amerine16:34
*** nkinder has quit IRC16:37
*** nkinder has joined #openstack-keystone16:39
openstackgerritStuart McLaren proposed a change to openstack/keystonemiddleware: Add composite authentication support  https://review.openstack.org/10838416:41
openstackgerritLance Bragstad proposed a change to openstack/keystone: Add string id type validation  https://review.openstack.org/10886216:42
*** marcoemorais has quit IRC16:42
*** marcoemorais has joined #openstack-keystone16:42
*** marcoemorais has quit IRC16:43
*** marcoemorais has joined #openstack-keystone16:43
*** rushiagr_away is now known as rushiagr16:43
*** marcoemorais has quit IRC16:43
*** marcoemorais has joined #openstack-keystone16:44
openstackgerritHenrique Truta proposed a change to openstack/python-keystoneclient: Creating parameter to list inherited role assignments  https://review.openstack.org/11730016:45
openstackgerritStuart McLaren proposed a change to openstack/keystonemiddleware: Add composite authentication support  https://review.openstack.org/10838416:49
*** zzzeek has joined #openstack-keystone16:52
openstackgerritLance Bragstad proposed a change to openstack/keystone: Add string id type validation  https://review.openstack.org/10886216:52
*** jimhoagland has joined #openstack-keystone16:58
openstackgerritKanagaraj Manickam proposed a change to openstack/keystone: Endpoint table is missing reference to region table  https://review.openstack.org/11318316:58
*** gokrokve_ has joined #openstack-keystone17:00
*** gyee has joined #openstack-keystone17:00
stevemarmorganfainberg, i forgot my question, but can you look @ https://review.openstack.org/#/c/113183/ specifically the sql FK size portion17:04
*** gokrokve has quit IRC17:04
*** harlowja has joined #openstack-keystone17:04
gabriel-bezerraHi all. In case of using LDAP as identity backend, are the service's users supposed to be stored in the ldap server along with the user's users?17:04
gabriel-bezerraBy this doc page, it seems not, but it is not clear: http://docs.openstack.org/grizzly/openstack-compute/admin/content/keystone-concepts.html#keystone-service-mgmt17:05
morganfainbergstevemar, in the migration or in the model or both?17:07
stevemarmorganfainberg, both17:07
morganfainbergstevemar, what about FK size?17:09
morganfainbergstevemar, i'm... confused what you;re asking for17:09
*** praneshp has joined #openstack-keystone17:10
gabriel-bezerraThis is newer: http://docs.openstack.org/admin-guide-cloud/content/keystone-service-mgmt.html17:10
*** KanagarajM has quit IRC17:11
stevemarmorganfainberg, there was a bunch of discussion earlier, the author changed endpoints (region_id) from 255 to 64 and made it a FK17:12
morganfainbergoh17:12
stevemarmorganfainberg, dstanek is worried that might cause some loss of data17:12
morganfainbergoooooooh17:12
morganfainbergyeah we can't do that17:12
stevemari said to keep it at 25517:12
morganfainbergoh ick17:12
morganfainbergnot pretty17:12
stevemarwe deferred to your judgement :)17:13
stevemari think 255 -> 64 is definitely not right17:13
stevemarthough it is a UUID17:13
stevemarso.. it might be OK17:13
*** jsavak has joined #openstack-keystone17:14
morganfainbergexcept endpoint region could have been *anything*?17:15
*** joesavak has quit IRC17:16
morganfainbergalso..  is it ok to rename region -> region_id ?17:17
morganfainbergi'm thinking that might be bad.17:17
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Add bash code style to some portions of configuration.rst  https://review.openstack.org/11730817:18
*** amirosh has joined #openstack-keystone17:18
jimhoaglandHello all.  I'm hoping someone can help me.  Has anyone made use of the Keystone middleware in Autobahn|Python or have suggestions on how to do so?  I have an Autobahn Websocket service based on asyncio (Trollius) into which I want to add Keystone authentication.17:22
morganfainbergjimhoagland, I haven't heard of anyone using Autobahn and keystonemiddleware.17:23
morganfainbergjimhoagland, the keystonemiddleware should work if you can leverage something like a paste pipeline,  though (of course) if you're running into a specific error we can try and help resolve it / point you in the right direction / ask you to file a bug so we can fix it17:24
morganfainbergjimhoagland, but you very well might be treading on new groud :)17:25
*** arborism has joined #openstack-keystone17:26
*** arborism has quit IRC17:26
*** amerine_ has joined #openstack-keystone17:26
*** amcrn has joined #openstack-keystone17:27
*** marcoemorais has quit IRC17:27
*** marcoemorais has joined #openstack-keystone17:27
*** marcoemorais has quit IRC17:27
openstackgerritA change was merged to openstack/keystone-specs: Move trust redelegation to Kilo  https://review.openstack.org/11663917:27
*** marcoemorais has joined #openstack-keystone17:28
*** marcoemorais has quit IRC17:28
*** marcoemorais has joined #openstack-keystone17:28
jimhoaglandmorganfainberg, I figured this might be new ground but was hoping someone might have tried this before17:29
*** amerine has quit IRC17:29
morganfainbergstevemar, https://review.openstack.org/#/c/113183/ commented17:30
stevemarmorganfainberg, thank you17:31
morganfainbergstevemar, if it is a non-breaking issue / minimal breakage approval is fine (henry-nash gave a +2)17:31
morganfainbergstevemar, but in havana region was free form with no corresponding model17:31
morganfainbergit would be possible to have an endpoint without a region in the region table that was *never* updated17:31
morganfainbergand just lingering around17:31
morganfainbergand this would then break that region information (yes this is a fairly extreme edge case)17:32
stevemarmorganfainberg, whats the downside to having the FK be of size 255?17:32
morganfainbergstevemar, overhead17:33
morganfainbergstevemar, varchars are relatively efficient though17:35
morganfainbergshouldnt be the end of the world17:35
*** aix has quit IRC17:37
*** f13o has quit IRC17:39
stevemarmorganfainberg, OK, sounds like setting it back to 255 would solve our concerns...17:40
morganfainbergyeah17:40
stevemarmorganfainberg, henrynash, dstanek should we toss up a patch setting it to 255 and push it through?17:41
stevemarbah henrys not online17:41
morganfainbergstevemar, not opposed to that.17:42
stevemaras bill said, f it, lets do it live17:42
*** joesavak has joined #openstack-keystone17:44
openstackgerritSteve Martinelli proposed a change to openstack/keystone: Endpoint table is missing reference to region table  https://review.openstack.org/11318317:46
*** jsavak has quit IRC17:47
openstackgerritSteve Martinelli proposed a change to openstack/keystone: backend for policy endpoint extension  https://review.openstack.org/11536217:48
openstackgerritSteve Martinelli proposed a change to openstack/keystone: controller for the endpoint policy extension  https://review.openstack.org/11574617:49
stevemarmorganfainberg, dstanek dolphm OK, the region_id BP and henrys endpoint policy stuff is all lined up, just needs another +2 :D17:50
stevemarstart at this chain and work your way up! https://review.openstack.org/#/c/113183/2417:50
openstackgerritBob Thyne proposed a change to openstack/keystone: Implementation of Endpoint Grouping  https://review.openstack.org/11194917:50
morganfainbergstevemar, hmm.17:52
stevemaruh oh17:53
bambam1hello where exactly is located the file that has all the extensions for keystone? i'm trying to enable OS-KSADM17:53
stevemarit's never good when morganfainberg hmms17:53
morganfainbergstevemar, oh troubleshooting a series of tracebacks i don't understand why i'm getting.17:53
*** hockeynut has joined #openstack-keystone17:58
openstackgerritBob Thyne proposed a change to openstack/keystone: Implementation of Endpoint Grouping  https://review.openstack.org/11194918:04
*** toddnni has joined #openstack-keystone18:08
openstackgerritA change was merged to openstack/keystone: Notification Constant Cleanup and internal notify type  https://review.openstack.org/11533718:13
morganfainbergstevemar, crap. need to talk to ayoung about this. there is some bad assumptions :(18:16
*** rushiagr is now known as rushiagr_away18:16
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: Do not load auth plugins by class in tests  https://review.openstack.org/11706218:16
openstackgerritLance Bragstad proposed a change to openstack/keystone: Add string id type validation  https://review.openstack.org/10886218:20
*** bknudson has joined #openstack-keystone18:21
stevemarmorganfainberg, still on the stacktrace?18:21
stevemarrevocations?18:21
*** RicoLin has quit IRC18:21
*** ukalifon has joined #openstack-keystone18:24
*** dims has quit IRC18:28
morganfainbergstevemar, found it18:28
morganfainbergstevemar, yeah there was some assumption on the auth plugin method name18:28
morganfainbergfixed it finally.18:28
*** dims has joined #openstack-keystone18:28
*** gokrokve has joined #openstack-keystone18:29
*** gokrokve_ has quit IRC18:33
raildodolphm: How do I create a new branch in gerrit for the patches of hierarchical projects?18:33
raildodolphm: i have this permission?18:33
dstanekmorganfainberg: i was worried about the renaming (region -> region_id) too, but couldn't find anything that would break because of it18:35
morganfainbergdstanek, yeah18:36
morganfainbergraildo, i thnk either dolphm can do it or we need infra to18:36
*** gokrokve has quit IRC18:36
raildomorganfainberg: That's what I was thinking18:36
dstanekso is the thought to resize region.id to 255 or to resize endpoint.region to 64?18:37
*** gokrokve has joined #openstack-keystone18:37
raildomorganfainberg: yesterday at the meeting, he suggested that I created a branch for hierarchical projects.18:37
morganfainbergdolphm, resize region.id18:37
morganfainbergerm dstanek ^18:37
*** gokrokve has quit IRC18:39
*** gokrokve has joined #openstack-keystone18:39
dstanekmorganfainberg: thx18:40
morganfainbergdstanek, this is becaus ehavana we didn't have a region model18:41
morganfainbergand if you didn't update the endpoing since havana you might have region = <random string>18:41
*** bobt_ has joined #openstack-keystone18:41
raildomorganfainberg: So, i have to talk with the infra team to create this branch? Or dolph can do this?18:42
morganfainbergraildo, honestly not sure18:43
*** zigo has quit IRC18:43
morganfainbergraildo, will chase that info down for you post lunch unless someone else can get to it first18:43
*** gokrokve has quit IRC18:44
*** gokrokve has joined #openstack-keystone18:45
raildomorganfainberg: ok, thanks :-D18:45
*** harlowja has quit IRC18:46
*** zigo has joined #openstack-keystone18:46
dstanekraildo: morganfainberg: not sure who can do it, but the instructions are here: https://wiki.openstack.org/wiki/GerritJenkinsGit#Create_proposed.2F.2A_Branch18:46
*** harlowja has joined #openstack-keystone18:46
dstanekstevemar: i'm still not liking the 404 on the test_create_endpoint_404 test18:47
stevemardstanek, ref?18:48
dstanekhttps://review.openstack.org/#/c/113183/24/keystone/tests/test_v3_catalog.py18:48
raildodstanek: Indeed, I do not have permission to perform this, but I believe this is the way.18:48
openstackgerritLance Bragstad proposed a change to openstack/identity-api: Domain IDs in project references are required  https://review.openstack.org/11732518:48
*** gokrokve has quit IRC18:49
stevemardstanek, this one? test_create_endpoint_404(self18:50
openstackgerritBob Thyne proposed a change to openstack/keystone: Implementation of Endpoint Grouping  https://review.openstack.org/11194918:50
dstanekstevemar: yes18:50
dstanekstevemar: to me bad data in the message body should be a 400 and not a 40418:51
*** bobt_ has quit IRC18:56
stevemardstanek, ok now i'm really confused18:59
stevemardstanek, how does that command even return a 400?18:59
dstanekstevemar: creating an endpoint?18:59
*** Shrews has joined #openstack-keystone18:59
stevemari'm looking at the controller, it creates a region entry if it can't find the region18:59
stevemarline 100 https://review.openstack.org/#/c/113183/24/keystone/catalog/controllers.py19:00
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: Notification Cleanup: Objects for actions  https://review.openstack.org/11733019:01
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: Comments to docstrings for notification emit methods  https://review.openstack.org/11733119:01
dstanekstevemar: the poster said that a RegionNotFound is raised at some point19:01
*** gokrokve has joined #openstack-keystone19:02
stevemardstanek, oh i was looking at the v2 controller19:02
stevemarv3 is at line 30919:02
*** amirosh has quit IRC19:03
stevemardstanek, it's going right into the else block at line 29619:04
*** amirosh has joined #openstack-keystone19:04
dstanekstevemar: ah, yeah. 296 is where the exception is thrown19:04
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: Notification Cleanup: Objects for actions  https://review.openstack.org/11733019:05
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: Add commas for ease of maintenance  https://review.openstack.org/11733219:05
stevemarcause region isn't None, but some bogus stuff19:05
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: Comments to docstrings for notification emit methods  https://review.openstack.org/11733119:05
lbragstaddstanek: this guy can be abandon now https://review.openstack.org/#/c/110338/19:05
*** gokrokve has quit IRC19:07
dstaneklbragstad: doing that now19:08
*** amirosh has quit IRC19:08
dstaneklbragstad: can you make sure we have a test showing that domain_id can't updated to null?19:08
morganfainbergstevemar, your fix wont work19:09
morganfainbergstevemar, for the region stuff19:09
morganfainberghttps://review.openstack.org/#/c/113183/24/keystone/catalog/backends/sql.py region.id is still 64 characters19:09
openstackgerrithenry-nash proposed a change to openstack/keystone: Mark kvs backends as deprecated, for removal in Kilo.  https://review.openstack.org/11728819:10
*** henrynash has joined #openstack-keystone19:10
openstackgerritLance Bragstad proposed a change to openstack/keystone: Add string id type validation  https://review.openstack.org/10886219:12
morganfainbergstevemar, set that review to WIP, sorry :(19:12
lbragstaddstanek: yeah, I can add a test for that19:12
morganfainbergstevemar, other than that the review looks good19:12
morganfainbergdstanek, cc ^19:13
stevemarmorganfainberg, shiettt19:13
dstanekmorganfainberg: you beat me to it :-(19:13
dstanekmorganfainberg: what do you think about the 404 vs 400?19:14
morganfainbergdstanek, hmm.19:14
morganfainbergdstanek, it's not a different class of status19:14
*** gokrokve has joined #openstack-keystone19:15
morganfainbergdstanek, yeah it should be a 40019:15
morganfainbergdstanek, it's not "not found" it's validation error.19:15
morganfainbergi dunno what happens if we create a project for a bogus domain?19:16
morganfainbergdoes that 404 or 400?19:16
*** gokrokve has quit IRC19:17
dstanekmorganfainberg: i'm writing up a bug right now for creating an endpoint with an invalid service_id19:17
*** gokrokve_ has joined #openstack-keystone19:17
*** jdennis has joined #openstack-keystone19:17
morganfainbergdstanek, ++19:17
dstanekmorganfainberg: i'll write a test for that too19:17
openstackgerritLance Bragstad proposed a change to openstack/keystone: Add string id type validation  https://review.openstack.org/10886219:20
lbragstaddstanek: ^ added a test so that domain_id can't be None in project update references19:20
*** jsavak has joined #openstack-keystone19:22
lbragstaddoes anyone have the link handy for the starred reviews?19:22
morganfainberglbragstad, dstanek, mind setting any of the "not-ready-for-consumption" reviews to WIP?19:23
morganfainberglbragstad, dstanek, i'm not sure which validate ones i should be looking at19:24
morganfainbergif any19:24
*** r-daneel has joined #openstack-keystone19:24
lbragstadmorganfainberg: start here: https://review.openstack.org/#/c/116954/19:24
morganfainberglbragstad, ok19:24
morganfainbergthanks19:24
*** joesavak has quit IRC19:24
lbragstadthat's the base one that extends some of the testing stuff we need in later patches19:24
morganfainbergah cool19:24
lbragstadfrom there, everything else is pretty much dependent on that, the policy, assignment, catalog, and credential API validation patches are passing jenkins19:25
lbragstadand finally https://review.openstack.org/#/c/108862/ which adds another parameter_type19:25
*** joesavak has joined #openstack-keystone19:25
stevemarand if i could plead to the cores, please review the keystone2keystone stuff :)19:26
morganfainbergstevemar, but... i dunt wanna :P yeah on my list but i need fooooooood19:27
stevemarthank you morganfainberg :)19:27
stevemarit's not nearly as scary as the federation code from last release19:27
stevemarif that helps19:27
stevemaralso, i give up on the region.id code, that is someone else's problem now :P19:28
*** jsavak has quit IRC19:28
morganfainbergstevemar, i've got 2-3 other things on my plate to do today, but if i have some time i'll swing through and fix the 255 column thing19:32
morganfainbergat the least19:32
stevemarmorganfainberg, sounds fair, i'll review it at night again, i'm fine with it aside from that part19:33
stevemarand im fine with henrynash's changes too19:33
morganfainbergthe 404 vs 400 is a minor other issue19:33
stevemarjust eager to get stuff in :)19:33
stevemarthe sooner we close out some specs, the sooner people are forced to look at keystone2keystone :D19:34
raildohenrynash: The folks at my team resolved this bug and had a comment yours about it. I think you'd be interested in reviewing it :) https://review.openstack.org/#/c/116682/19:36
*** stevelle has joined #openstack-keystone19:39
*** cjellick has joined #openstack-keystone19:43
openstackgerritDavid Stanek proposed a change to openstack/keystone: Fixes HTTP status code when creating/updating endpoints  https://review.openstack.org/11734119:44
*** Shrews has left #openstack-keystone19:48
*** ukalifon has quit IRC19:51
*** amerine_ is now known as amerine20:04
*** stevemar has quit IRC20:06
*** erecio has quit IRC20:07
henrynashraildo: ok…will look at it later today20:09
*** bobt_ has joined #openstack-keystone20:12
*** henrynash has quit IRC20:14
*** nkinder has quit IRC20:28
*** david-lyle has quit IRC20:37
*** david-lyle has joined #openstack-keystone20:37
*** amerine has quit IRC20:44
*** nkinder has joined #openstack-keystone20:45
*** amerine has joined #openstack-keystone20:54
*** rm_work is now known as rm_work|away21:03
*** marcoemorais has quit IRC21:07
*** marcoemorais has joined #openstack-keystone21:07
*** marcoemorais has quit IRC21:08
*** marcoemorais has joined #openstack-keystone21:08
*** jsavak has joined #openstack-keystone21:11
lbragstaddstanek: around?21:14
*** joesavak has quit IRC21:14
dstaneklbragstad:21:18
dstanekerrr....yes21:19
lbragstaddstanek: I think I found a bug with how trusts are tested... opening a bug report for it now21:19
dstaneklbragstad: send me the link once you create it21:20
morganfainbergnotmyname, i'm back from lunch now, anytime you're available is good for me re: operator meetup21:23
*** sagara has joined #openstack-keystone21:26
sagaraHi21:28
*** jasondotstar has quit IRC21:28
lbragstaddstanek: brain dump https://bugs.launchpad.net/keystone/+bug/136234421:29
uvirtbot`Launchpad bug 1362344 in keystone "Tests for Trusts don't actually test the roles provided in the trust reference" [Undecided,New]21:29
sagaraIs there anyone can triage bug importance https://bugs.launchpad.net/python-keystoneclient/+bug/1360892 , and review https://review.openstack.org/#/c/116523/ ?21:30
uvirtbot`Launchpad bug 1360892 in python-keystoneclient "EC2 v4 signature calculation is wrong, in case of request is POST" [Undecided,In progress]21:30
sagaraIt blocks Heat Instance HA feature, so I think it's importance is high or critical.21:31
*** nkinder has quit IRC21:39
openstackgerritBrad Topol proposed a change to openstack/keystone: Add audit support to keystone federation  https://review.openstack.org/11433721:42
topolgyee I was so close to being done with my patch and your cleanup of notifications caused me to have to rebase one more time!!21:43
topolThanks gyee!!!21:43
morganfainbergtopol, you sure that was gyee ?21:47
lbragstaddstanek: according to the trust spec, trust['roles'] is a list of objects, but I *think* it has to be a list of dictionaries21:48
lbragstadso, trust['roles'] = [{'id': '<some-role-id>'},{'name': '<some-role-name>'}]21:49
*** amerine has quit IRC21:49
topolmorganfainberg I stand corrected!!! et tu brutus???21:49
morganfainbergtopol, oh don't worry there is a nother change coming21:49
topolmorganfainberg it was you21:49
morganfainbergtopol, as well21:49
morganfainbergtopol, https://review.openstack.org/#/c/117330/21:50
lbragstadwhere as the new_trust_ref builds trust['roles'] = ['some-role-id', 'some-role-name']21:50
topolmorganfainberg, I HATE YOU I HATE YOU I HATE YOU :-)21:51
topolmorganfainberg, its all good. We all know I need as much practice as I can get21:51
morganfainbergtopol, i think i squeeze one more change into notifications before yours lands (as soon as you rebase) if you *really* want21:51
morganfainbergsagara, i'm looking at that bug and the code now21:52
topolmorganfainberg, no more for me thanks... Im driving21:52
sagaramorganfainberg: Thank you!21:52
morganfainbergsagara, i'll be honest, i'm not as familiar with the Ec2v4 stuff as i should be :P21:52
morganfainbergso it's taking me a bit to see what is going on21:53
bambam1hello somebody could help me to answer this question please :)? http://stackoverflow.com/questions/25537441/keystone-get-user-email21:55
morganfainbergsagara, so if i'm reading this correctly it's just that EC2 says query_string should be '' if the query is a POST?21:55
topolmorganfainberg between trying to get my code done in time and my daughter starting high school Im on 3 hours sleep. and I thought I could take tonight off...21:55
*** dims has quit IRC21:55
morganfainbergtopol, oh sorry, we need to get you down to 1hr sleep21:55
morganfainbergtopol, didn't you get the memo?21:55
topolmorganfainberg thank you for pushing me to the new normal21:56
sagaramorganfainberg: EC2 documents is not consistent.21:56
morganfainbergsagara, ugh that makes this tough :(21:56
morganfainbergsagara, i can see why this mismatch could be bad though.21:56
morganfainbergsagara, /me wants a clean spec from amazon (hahahahah wow, pot, kettle, anyone? topol  what do you think, silly of me to ask right?)21:57
*** rm_work|away is now known as rm_work21:57
sagaramorganfainberg: please wait.21:57
topolmorganfainberg you get what you deserve :-)21:58
morganfainbergsagara, sure. i see the issue i need to go take a peek at boto. but this looks like a legitimate issue.21:58
*** amerine has joined #openstack-keystone22:00
sagaramorganfainberg: In my launchpad report, cfnbootstrap/aws_client.py implements contains "if verb == 'POST' else ''".22:00
sagaramorganfainberg: and boto too. so EC2 document may be wrong.22:01
morganfainbergsagara, right22:01
morganfainbergthats why this is a hard one22:02
sagaramorganfainberg: additionaly, current keystoneclient test code also describes, this inconsistent problem.22:02
sagaramorganfainberg: it's hard..22:02
sagarahttps://review.openstack.org/#/c/116523/2/keystoneclient/tests/test_ec2utils.py L12922:03
*** jsavak has quit IRC22:04
sagaramorganfainberg: If you could not determine immediately, please turn it later. but it's important for Heat users.22:07
*** gordc has quit IRC22:08
*** harlowja_ has joined #openstack-keystone22:13
*** saipandi has quit IRC22:13
*** harlowja_ has quit IRC22:15
*** harlowja_ has joined #openstack-keystone22:15
*** harlowja has quit IRC22:16
morganfainbergsagara, yeah i'm looking at it, trying to figure it out22:16
*** topol has quit IRC22:18
openstackgerritLance Bragstad proposed a change to openstack/keystone: Add string id type validation  https://review.openstack.org/10886222:20
openstackgerritLance Bragstad proposed a change to openstack/keystone: Adds tests that show how update with validation works  https://review.openstack.org/11695422:20
openstackgerritLance Bragstad proposed a change to openstack/keystone: Implement validation on Assignment V3 API  https://review.openstack.org/8648422:20
openstackgerritLance Bragstad proposed a change to openstack/keystone: Implement validation on Trust V3 API  https://review.openstack.org/10406622:20
morganfainbergsagara, we'll definitely need to get some resolution on it22:21
sagaramorganfainberg: yes. what is need?22:22
morganfainbergsagara, it's a question of making sure we're doing it the right way. though my guess is boto would be far more broken and have louder complaints22:23
morganfainbergsagara, so i'm inclined to belive boto is doing it right22:24
sagaramorganfainberg: Is it bad to align keystoneclient to AWS original client?22:26
morganfainbergsagara, no. it isn't bad.22:28
*** Daviey has quit IRC22:31
sagaramorganfainberg: Sorry, I need to ready for work. I'm live in JST(Japan) timezone. now is at 7:30 in AM.22:35
sagaramorganfainberg: I will also see this IRC tonight.22:35
morganfainbergsagara, no worries i'll continue looking at this. i'll try and get some response on the bug/code as soon as possible22:35
sagaramorganfainberg: Yes, please. for now, please change launchpad importance status.22:35
sagaramorganfainberg: If you have any request for me to solvethis, please comment to launchpad.22:36
morganfainbergsagara, ++ will do22:37
sagaramorganfainberg: Thank you, bye.22:37
*** praneshp has quit IRC22:40
*** marcoemorais has quit IRC22:40
*** marcoemorais has joined #openstack-keystone22:40
*** marcoemorais has quit IRC22:41
*** marcoemorais has joined #openstack-keystone22:41
morganfainberglbragstad, ping22:46
openstackgerritBrant Knudson proposed a change to openstack/keystone: pki/ssl_setup configurable digest  https://review.openstack.org/11736622:46
openstackgerritBrant Knudson proposed a change to openstack/keystone: Change the default digest for pki/ssl_setup to sha256  https://review.openstack.org/11736722:46
*** Daviey has joined #openstack-keystone22:47
*** stevelle has quit IRC23:02
openstackgerritBrant Knudson proposed a change to openstack/python-keystoneclient: Change cms_sign_data to use sha256 message digest  https://review.openstack.org/11737123:07
openstackgerritBrant Knudson proposed a change to openstack/python-keystoneclient: cms_sign_data support alternative message digest  https://review.openstack.org/11737223:07
*** rm_work is now known as rm_work|away23:08
*** jamielennox|away is now known as jamielennox23:10
*** stevelle has joined #openstack-keystone23:13
jamielennoxquite a check/gate queue this morning23:28
*** richm has quit IRC23:37
*** oomichi has joined #openstack-keystone23:39
*** david-lyle has quit IRC23:42
openstackgerritBrant Knudson proposed a change to openstack/keystone: Configurable PKI token signature digest  https://review.openstack.org/11738023:42
morganfainbergjamielennox, i know right?!23:42
jamielennoxmorganfainberg: i logged on a couple of hours ago to recheck the things that had failed expecting them to be ok by now, most of them are still queued23:43
*** sagara has quit IRC23:43
morganfainbergmilestone time!23:43
*** jimhoagland has quit IRC23:47
*** RicoLin has joined #openstack-keystone23:50
jamielennoxhttps://review.openstack.org/#/c/113415/ - has a +2 and +1 already - anyone?23:52
*** gokrokve_ has quit IRC23:54
*** dims has joined #openstack-keystone23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!