Thursday, 2014-12-18

*** chrisshattuck has quit IRC00:00
*** packet has quit IRC00:00
*** marcoemorais has quit IRC00:00
*** samueldmq has joined #openstack-keystone00:03
*** marcoemorais has joined #openstack-keystone00:03
*** marcoemorais has quit IRC00:09
jamielennoxugh, zuul00:12
*** stevemar has quit IRC00:12
*** stevemar has joined #openstack-keystone00:13
*** ChanServ sets mode: +v stevemar00:13
stevemarjamielennox, it has not been fixed yet AFAIK00:22
stevemardstanek, i like dsvm00:22
openstackgerritRodrigo Duarte proposed openstack/keystonemiddleware: Adds Memcached dependencies doc  https://review.openstack.org/13499300:32
*** hdd has joined #openstack-keystone00:34
*** zzzeek has quit IRC00:40
openstackgerritJorge Munoz proposed openstack/keystone-specs: Read/Write LDAP drivers  https://review.openstack.org/14017500:40
*** jdennis1 has quit IRC00:44
*** r-daneel has quit IRC00:46
*** hdd has quit IRC00:47
*** radez is now known as radez_g0n300:54
*** lhcheng_ has joined #openstack-keystone00:59
*** lhcheng has quit IRC01:02
*** zz_avozza is now known as avozza01:10
*** jdennis has joined #openstack-keystone01:11
*** nellysmitt has joined #openstack-keystone01:12
openstackgerritwanghong proposed openstack/keystone: invalidate cache when updating catalog objects  https://review.openstack.org/14207901:16
*** jdennis has quit IRC01:16
*** rm_work is now known as rm_work|away01:17
*** nellysmitt has quit IRC01:17
*** avozza is now known as zz_avozza01:20
*** timcline has joined #openstack-keystone01:28
*** timcline has quit IRC01:29
*** timcline has joined #openstack-keystone01:29
*** jdennis has joined #openstack-keystone01:34
*** gyee has quit IRC01:37
*** wpf has joined #openstack-keystone01:43
*** jungleboyj has joined #openstack-keystone01:46
*** _cjones_ has quit IRC01:47
*** mitz has joined #openstack-keystone01:54
*** lhcheng_ has quit IRC02:00
*** erkules_ has joined #openstack-keystone02:03
*** mitz_ has joined #openstack-keystone02:04
stevemarbump, also asking for a review of https://review.openstack.org/#/c/138253/02:05
*** erkules has quit IRC02:05
*** timcline has quit IRC02:10
*** david-lyle is now known as david-lyle_afk02:10
*** jasondotstar has joined #openstack-keystone02:11
*** richm1 has quit IRC02:15
*** zz_avozza is now known as avozza02:18
*** timcline has joined #openstack-keystone02:21
openstackgerritwanghong proposed openstack/keystone: Can't update catalog objects when using kvs driver  https://review.openstack.org/13018002:21
*** timcline_ has joined #openstack-keystone02:22
*** timcline has quit IRC02:26
*** timcline_ has quit IRC02:26
*** timcline has joined #openstack-keystone02:27
*** gordc has quit IRC02:27
*** gordc has joined #openstack-keystone02:30
openstackgerritwanghong proposed openstack/keystone: Can't update catalog objects when using kvs driver  https://review.openstack.org/13018002:30
*** avozza is now known as zz_avozza02:33
*** gordc has quit IRC02:35
openstackgerritwanghong proposed openstack/keystone: set endpoint enabled default to True if not specified(kvs)  https://review.openstack.org/14231602:38
openstackgerritwanghong proposed openstack/keystone: add circular check when updating region  https://review.openstack.org/13047402:41
openstackgerritSteve Martinelli proposed openstack/keystone: sync to oslo commit 1cf2c6  https://review.openstack.org/13825302:43
openstackgerritSteve Martinelli proposed openstack/keystone: switch from sample_config.sh to oslo-config-generator  https://review.openstack.org/11390502:44
openstackgerritSteve Martinelli proposed openstack/keystone: update sample conf using oslo-config-generator  https://review.openstack.org/13850802:46
*** jaosorior has quit IRC02:53
openstackgerritSteve Martinelli proposed openstack/keystone: Remove oslo incubator's config generator  https://review.openstack.org/14265202:53
stevemarlet's use oslo-config-generator!!02:54
stevemarfollow that patch chain!02:54
openstackgerritMerged openstack/keystone: Update docs to no longer show XML support  https://review.openstack.org/12575302:56
*** erkules has joined #openstack-keystone03:01
*** lhcheng has joined #openstack-keystone03:01
*** timcline has quit IRC03:02
*** erkules_ has quit IRC03:03
*** lhcheng has quit IRC03:06
*** nellysmitt has joined #openstack-keystone03:13
*** nellysmitt has quit IRC03:18
*** zz_avozza is now known as avozza03:26
openstackgerritayoung proposed openstack/identity-api: request unscoped token  https://review.openstack.org/14265803:38
*** davechen_ has quit IRC03:40
*** LinstatSDR has joined #openstack-keystone03:43
*** avozza is now known as zz_avozza03:44
*** LinstatSDR has quit IRC03:48
*** LinstatSDR has joined #openstack-keystone03:52
*** dims__ has quit IRC03:53
*** chrisshattuck has joined #openstack-keystone03:53
*** dims__ has joined #openstack-keystone03:54
*** timcline has joined #openstack-keystone04:00
*** dims__ has quit IRC04:01
*** dims__ has joined #openstack-keystone04:02
*** timcline has quit IRC04:04
*** timcline has joined #openstack-keystone04:06
*** dims__ has quit IRC04:07
*** harlowja is now known as harlowja_away04:19
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Make tests run against original client and session  https://review.openstack.org/11708904:25
*** timcline has quit IRC04:27
*** timcline has joined #openstack-keystone04:27
openstackgerritSteve Martinelli proposed openstack/keystone: Provide additional detail if OAuth headers are missing  https://review.openstack.org/14219104:34
openstackgerritSteve Martinelli proposed openstack/keystone: Update federation docs to point to specs.o.org  https://review.openstack.org/13459004:34
*** zz_avozza is now known as avozza04:36
*** timcline has quit IRC04:50
*** lhcheng has joined #openstack-keystone04:50
*** esp has left #openstack-keystone04:52
*** lhcheng has quit IRC04:55
*** avozza is now known as zz_avozza04:56
*** chrisshattuck has quit IRC05:09
*** nellysmitt has joined #openstack-keystone05:14
*** lhcheng has joined #openstack-keystone05:16
*** nellysmitt has quit IRC05:19
*** timcline has joined #openstack-keystone05:22
*** timcline has quit IRC05:27
*** ajayaa has joined #openstack-keystone05:32
*** rushiagr_away is now known as rushiagr05:39
openstackgerritLin Hua Cheng proposed openstack/keystone: Always return the service name in the catalog  https://review.openstack.org/13580805:40
*** jasondotstar has quit IRC05:48
*** zz_avozza is now known as avozza05:48
*** jasondotstar has joined #openstack-keystone05:49
openstackgerritChangBo Guo(gcb) proposed openstack/keystone: Add library oslo.concurrency in file oslo.config.generator.rc  https://review.openstack.org/13727006:04
*** ajayaa has quit IRC06:05
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex  https://review.openstack.org/13624306:05
openstackgerritSteve Martinelli proposed openstack/keystone-specs: Add a spec for implemeting WebSSO  https://review.openstack.org/13352906:06
*** avozza is now known as zz_avozza06:08
*** dims__ has joined #openstack-keystone06:09
*** k4n0 has joined #openstack-keystone06:10
*** dims__ has quit IRC06:13
*** hdd has joined #openstack-keystone06:16
*** timcline has joined #openstack-keystone06:23
*** timcline has quit IRC06:27
*** hdd has quit IRC06:55
*** zz_avozza is now known as avozza07:01
*** rushiagr is now known as rushiagr_away07:02
*** stevemar has quit IRC07:14
*** nellysmitt has joined #openstack-keystone07:15
*** avozza is now known as zz_avozza07:18
*** nellysmitt has quit IRC07:20
*** linstatsdr_ has joined #openstack-keystone07:24
*** timcline has joined #openstack-keystone07:24
*** LinstatSDR has quit IRC07:27
*** timcline has quit IRC07:28
openstackgerritMerged openstack/keystone: Change config option examples to v3  https://review.openstack.org/13100407:34
openstackgerritMarek Denis proposed openstack/keystone: Identify groups by name/domain in mapping rules.  https://review.openstack.org/13901307:41
*** lhcheng has quit IRC07:41
openstackgerritMarek Denis proposed openstack/keystone: Identify groups by name/domain in mapping rules.  https://review.openstack.org/13901307:44
openstackgerritMarek Denis proposed openstack/keystone: Implements whitelist and blacklist mapping rules  https://review.openstack.org/14257307:44
*** lufix has joined #openstack-keystone07:47
*** ajayaa has joined #openstack-keystone07:51
openstackgerritAbhishek Kekane proposed openstack/keystone: Eventlet green threads not released back to pool  https://review.openstack.org/13082407:55
*** pcaruana has joined #openstack-keystone07:56
*** linstatsdr_ has quit IRC07:57
*** zz_avozza is now known as avozza07:58
*** Shohei has joined #openstack-keystone08:13
*** nellysmitt has joined #openstack-keystone08:14
*** wanghong has quit IRC08:18
*** timcline has joined #openstack-keystone08:25
*** timcline has quit IRC08:29
*** wanghong has joined #openstack-keystone08:31
*** ajayaa has quit IRC08:40
openstackgerritMerged openstack/keystone: Remove unnecessary ldap import  https://review.openstack.org/14219209:11
*** wanghong has quit IRC09:16
*** timcline has joined #openstack-keystone09:25
*** timcline has quit IRC09:27
*** timcline has joined #openstack-keystone09:27
*** wanghong has joined #openstack-keystone09:28
*** timcline has quit IRC09:32
*** jamielennox is now known as jamielennox|away09:32
*** nellysmitt has quit IRC09:50
*** rushiagr_away is now known as rushiagr10:06
*** nellysmitt has joined #openstack-keystone10:09
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf: Updated from global requirements  https://review.openstack.org/14271410:20
openstackgerritMarek Denis proposed openstack/keystone: Do not map directly rules with keywords.  https://review.openstack.org/14271510:20
*** timcline has joined #openstack-keystone10:28
*** timcline has quit IRC10:32
*** ajayaa has joined #openstack-keystone10:36
openstackgerritMarek Denis proposed openstack/keystone: Map directly rules with keywords.  https://review.openstack.org/14271510:52
openstackgerritMarek Denis proposed openstack/keystone: Map directly rules with keywords.  https://review.openstack.org/14271511:09
openstackgerritMarek Denis proposed openstack/keystone: Map directly rules with keywords.  https://review.openstack.org/14271511:11
*** dims__ has joined #openstack-keystone11:17
*** samueldmq has quit IRC11:17
*** avozza is now known as zz_avozza11:20
*** wpf has quit IRC11:21
*** xxj has quit IRC11:21
*** dims__ has quit IRC11:22
*** junhongl has quit IRC11:22
*** aix has quit IRC11:23
*** timcline has joined #openstack-keystone11:29
*** timcline has quit IRC11:33
*** dims__ has joined #openstack-keystone11:53
openstackgerritMarco Fargetta proposed openstack/keystone: Multiple IdP authentication URL  https://review.openstack.org/14274312:11
*** andreaf_ is now known as andreaf12:13
openstackgerritSergey Kraynev proposed openstack/python-keystoneclient: Using correct keyword for region in v3  https://review.openstack.org/11838312:18
*** diegows has joined #openstack-keystone12:20
*** zz_avozza is now known as avozza12:24
*** timcline has joined #openstack-keystone12:30
*** aix has joined #openstack-keystone12:32
*** timcline has quit IRC12:34
*** afaranha has quit IRC12:35
*** stone_ has joined #openstack-keystone12:39
*** stone_ has quit IRC12:45
openstackgerritWill Foster proposed openstack/keystone: skip assignment rows migrate if duplicate entry exists.  https://review.openstack.org/13694612:57
*** andreaf is now known as andreaf_13:16
rushiagrayoung: ping13:20
rushiagrayoung: thanks for your views on policy rules thing13:21
rushiagrayoung: I completely agree with you that doing one-offs like what I'm doing is bad13:21
rushiagrayoung: I basically started this seeing that oslo.policy is not present yet (not graduated)13:22
rushiagrayoung: and while looking at my patch from a distance, I realize that it's not only the changes to policy.py, but the whole thing I was trying to achieve is going to be provided by the upcoming oslo policy stuff13:23
rushiagrayoung: so, can you point me to the place where I need to submit it in Olso?13:24
rushiagrayoung: I am unable to find oslo.policy repo. Should this change go to oslo-incubator?13:24
*** raildo has joined #openstack-keystone13:30
*** timcline has joined #openstack-keystone13:30
lbragstaddstanek: around? I have a quick question on jsd13:33
lbragstaddstanek: does jsd hanlde the ability to pass additional jsonschema properties to a jsd Object? Like 'minLength' and 'maxLength' here: https://github.com/openstack/keystone/blob/master/keystone/common/validation/parameter_types.py#L25-L2913:34
*** timcline has quit IRC13:35
*** richm1 has joined #openstack-keystone13:36
*** gordc has joined #openstack-keystone13:43
*** ajayaa has quit IRC13:53
*** ajayaa has joined #openstack-keystone13:53
openstackgerritMerged openstack/python-keystoneclient: get_endpoint should return the override  https://review.openstack.org/13140814:00
openstackgerritMerged openstack/python-keystoneclient: Take plugin params from ENV rather than default  https://review.openstack.org/13224014:05
*** richm1 has quit IRC14:08
*** tellesnobrega has joined #openstack-keystone14:08
*** richm has joined #openstack-keystone14:12
*** radez_g0n3 is now known as radez14:18
tellesnobregamorganfainberg, ping14:18
*** afaranha has joined #openstack-keystone14:20
openstackgerritLance Bragstad proposed openstack/keystone: Implement validation on the Identity V3 API  https://review.openstack.org/13212214:20
*** hdd has joined #openstack-keystone14:25
*** k4n0 has quit IRC14:29
*** timcline has joined #openstack-keystone14:31
*** afaranha has quit IRC14:31
openstackgerritDave Chen proposed openstack/keystone: Remove local conf information from paste-ini {WIP}  https://review.openstack.org/13412414:33
*** jungleboyj has quit IRC14:35
*** timcline has quit IRC14:36
openstackgerritMerged openstack/keystone-specs: Add requirement for APIImpact flag  https://review.openstack.org/13230314:42
*** amakarov_away is now known as amakarov14:43
ayoungrushiagr, getting it promoted is happening now-ish.  Lets see...14:43
*** packet has joined #openstack-keystone14:43
rushiagrayoung: okay14:44
rushiagrayoung: thanks!14:44
ayoungrushiagr, the review is in the infrastructure gerrit14:45
ayounglooking...14:45
ayoungmorganfainberg, samuelms where is the oslo.policy graduation stuff?14:45
rodrigodsayoung, spec or repo?14:46
ayoungrepo14:46
ayoungrodrigods, all of it really, but repo first14:47
rodrigodsayoung, https://github.com/rodrigods/oslo.policy14:47
ayoungrodrigods, rushiagr has been beting on this from the cinder side14:47
ayoungrodrigods, and the review for that to make it official?14:47
rodrigodsayoung,  thought this was morganfainberg task14:47
ayoungrodrigods, yeah...or mine14:47
* ayoung shrugs14:48
rodrigodsayoung, spec https://review.openstack.org/#/c/140161/14:48
ayoungOK...and we need a review to create the repo.  jamielennox|away did that for the client kerberos one,   let's see...14:49
*** LinstatSDR has joined #openstack-keystone14:50
ayoungOK we need something like this rushiagr rodrigods  https://review.openstack.org/#/c/120310/14:50
ayoungI can do that14:51
rodrigodsayoung, ++14:51
rodrigodsayoung, anything else from my side?14:51
ayoungrodrigods, just keeping pushing that boulder, Sisyphus.14:52
rushiagrayoung: rodrigods: thanks for all of this information..14:52
rushiagrayoung: so you saying policy should be a part of keystone rather than oslo?14:52
ayoungrushiagr, I was asked to do exactly what you are trying to do back in portland14:52
ayoungIts good to have more people pushing on the issue14:53
ayoungrushiagr, here's the split14:53
ayoungthe oslo library is a general purpose rules enging14:53
ayoungengine14:53
ayoungit should be usable by other projects, especially congress14:53
ayoungpolicy for access control is a keystone thing14:53
ayoungso anything that deals with roles, capabilities (the apis that require access control) and tokens is the  keystone domain14:54
openstackgerritDave Chen proposed openstack/keystone: Remove local conf information from paste-ini  https://review.openstack.org/13412414:54
ayoungso "what can I do with this token" is a cross cutting concern for services, based on the data from keystone14:54
*** raildo has quit IRC14:54
rushiagrayoung: got that. Very clear now..14:55
ayoungjust like Sahara should not be doing things with networks or block devices, but should instead be working through Neutron and Cinder for those things14:55
rodrigodstellesnobrega, ^ Sahara14:56
ayoungrushiagr, thanks for driving this, though.  It validates the overall effort and approach I've been proposing and promoting14:56
rushiagrayoung: but since policy files are still not all moved to keystone, does this mean we'll have to wait till we get there?14:57
ayoungrushiagr, you can help make things happen inside the keystone effort14:57
ayoungrushiagr, there are two things14:57
ayoung1 getting the policy enforcement done in a libraray14:57
ayoung2 getting a default policy file that works across nova, cinder, keystone, etc all cleaned up14:58
ayoungrushiagr, also, you can rework your patch on top of rodrigods 's work and make sure that the cinder side is ready to go once we have his14:58
ayoungit just means that your stuff can't land until all the prereqs are in, but it avoids duplicating effort14:59
openstackgerritAlexander Makarov proposed openstack/keystone: LDAP additional attribute mappings description  https://review.openstack.org/11859014:59
rushiagrayoung: understood.14:59
openstackgerritAlexander Makarov proposed openstack/keystone: Trust redelegation  https://review.openstack.org/12689714:59
rodrigodsrushiagr, ayoung ++15:00
openstackgerritAlexander Makarov proposed openstack/keystone: Memcache connection pool excess check  https://review.openstack.org/14068115:00
rodrigodslet me know if you need anything15:00
openstackgerritAlexander Makarov proposed openstack/keystone: Assignment sql backend create_grant refactoring  https://review.openstack.org/14135215:00
rushiagrayoung: I had a different idea in mind. I thought I'll first get this moving in Cinder, and as soon as other projects also want to have this, will put it in a common librarly .. somewhere in Oslo15:00
openstackgerritAlexander Makarov proposed openstack/keystone: Role revocation invalidates too many tokens  https://review.openstack.org/14139715:00
openstackgerritAlexander Makarov proposed openstack/keystone: Group role revocation invalidates all user tokens  https://review.openstack.org/14185415:00
ayoungrushiagr, and usually that is exactly the right approach15:01
ayoungyou just had the misfortune to hit it right as we were also reworking this15:01
ayoungbut the more people focused on it, the more common the implementation15:01
ayoungmore people from more projects15:01
rushiagrayoung: right. There is never one way which is right :)15:02
rushiagrayoung: agree. Let's get this part done :)15:02
rodrigodsrushiagr, ayoung, nice to have the same effort going from different projects15:03
rushiagrrodrigods: yes :)15:03
*** dims__ has quit IRC15:04
rushiagrayoung: rodrigods: I'll go through the resources I've got..15:04
rushiagrthanks15:04
*** dims__ has joined #openstack-keystone15:04
rodrigodsayoung, who can we ping in order to have some reviews going in the graduation spec?15:05
rodrigodsit there for a while15:05
ayoungrushiagr, one  goal  is to unify all of the delegation mechanism in Keystone.  In order to do that, we need to be able to break a big role down into little ones, which in turn implies being able to make roles hierarchical...if you keep pushing, it ends up with all of this15:05
rodrigodsit's*15:05
ayoungrodrigods, let me get the repo chang in , and then I'll make a pest of myself15:06
rodrigodsheh15:06
rodrigodsayoung, ++15:06
rushiagr:)15:06
*** david-lyle_afk has quit IRC15:07
ayounghttps://review.openstack.org/14281315:09
*** dims_ has joined #openstack-keystone15:10
*** esp has joined #openstack-keystone15:10
rodrigodsayoung, can't I even give a +1? :(15:10
*** dims__ has quit IRC15:10
rodrigodslunch time15:13
ayoungrodrigods, I can't either...wierd15:14
*** thedodd has joined #openstack-keystone15:18
*** timcline has joined #openstack-keystone15:19
*** jungleboyj has joined #openstack-keystone15:19
*** __TheDodd__ has joined #openstack-keystone15:22
*** thedodd has quit IRC15:23
*** stevemar has joined #openstack-keystone15:25
*** ChanServ sets mode: +v stevemar15:25
stevemarhands up if you have 0 meetings left this year! \o/15:26
marekd\o/15:27
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Add get certificates for v2.0  https://review.openstack.org/14212215:29
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Add sample certificate fixtures  https://review.openstack.org/14281715:29
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Trust redelegation documentation  https://review.openstack.org/13154115:29
*** __TheDodd__ is now known as thedodd15:31
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Add OS-SIMPLE-CERT support for v3.  https://review.openstack.org/14220015:32
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Trust redelegation documentation  https://review.openstack.org/13154115:32
*** ajayaa has quit IRC15:34
openstackgerritBrant Knudson proposed openstack/keystonemiddleware: Correct incorrect rst in docstrings  https://review.openstack.org/14192415:37
openstackgerritAlexander Makarov proposed openstack/keystone: Assignment sql backend create_grant refactoring  https://review.openstack.org/14135215:38
*** r-daneel has joined #openstack-keystone15:44
*** hdd has quit IRC15:44
*** topol has joined #openstack-keystone15:47
*** ChanServ sets mode: +v topol15:47
*** rushiagr is now known as rushiagr_away15:50
*** chrisshattuck has joined #openstack-keystone15:52
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Trust redelegation documentation  https://review.openstack.org/13154115:53
*** andreaf has joined #openstack-keystone15:55
openstackgerritSteve Martinelli proposed openstack/keystone: Update federation docs to point to specs.o.org  https://review.openstack.org/13459015:57
openstackgerritAlexander Makarov proposed openstack/keystone: Assignment sql backend create_grant refactoring  https://review.openstack.org/14135215:58
*** zzzeek has joined #openstack-keystone16:01
*** david-lyle has joined #openstack-keystone16:02
morganfainbergtellesnobrega: I'm hopping on a plane. Will be back when I get to altitude.16:04
amakarovstevemar, hello! I've noticed you've made cadf notifications for role_assignment. I think we have to change something there, can you please take a look? https://review.openstack.org/#/c/141854/16:04
marekdmorganfainberg: how do you connect while flying?16:04
*** andreaf has quit IRC16:04
marekd4g or onboard wifi?16:04
morganfainbergmarekd: in-flight wifi16:04
marekdwhoa, nice16:05
stevemaramakarov, looking now!16:06
bknudsonsounds expensive16:06
morganfainbergYeah. Costs like $10 or so a flight.16:06
morganfainbergIt's not fast but usually good enough for code review and irc.16:06
marekdtotally worth it.16:06
dstaneklbragstad: yes and no - not in a great way right now16:07
morganfainbergYeah. Oh haha. Annd my flight is now delayed.16:07
bretongive me a hint please, who is from oslo.db team here?16:08
marekdyeah, i am flying back home tomorrow. #yay16:08
morganfainbergWe might be swapping planes :(16:08
morganfainbergDoh!16:09
bknudsonwhere's marekd?16:09
marekdhere16:09
tellesnobregamorganfainberg, thanks, i already solved it16:09
bretondhellmann: zzzeek: hey! Why is migration_cli in oslo.db undocumented? Should I use it?16:11
zzzeekbreton: im not sure16:12
*** rushiagr_away is now known as rushiagr16:14
openstackgerritSteve Martinelli proposed openstack/keystone: Provide additional detail if OAuth headers are missing  https://review.openstack.org/14219116:16
*** raildo has joined #openstack-keystone16:17
*** andreaf has joined #openstack-keystone16:18
lbragstaddstanek: ok, that makes sense16:19
lbragstadI had to dig out the review you had on it16:19
lbragstaddef Name(required=False):16:19
lbragstad    return jsd.String(min_len=1, max_len=255, required=required)16:19
lbragstador something like that16:19
lbragstaddstanek: the classes that inherit from _Type would need to be able to handle extra attributes that describe the schema, right?16:21
*** chrisshattuck has quit IRC16:24
openstackgerritMarco Fargetta proposed openstack/keystone: Multiple IdP authentication URL  https://review.openstack.org/14274316:24
dstaneklbragstad: yeah, i have something somewhere - let me find it and get it public for you to see16:24
lbragstaddstanek: awesome!16:24
lbragstaddstanek: that would be nice to have to define this type of stuff https://github.com/openstack/keystone/blob/master/keystone/common/validation/parameter_types.py#L25-L2916:25
dstaneklbragstad: i don't remember where i left off because there didn't seem to be much interest. i have a lot a time over the next two weeks to work on it if it's thought to be a good idea16:25
lbragstaddstanek: if you think it would make our schemas more manageable, then I think it would be good16:26
lbragstador easier to read?16:26
*** chrisshattuck has joined #openstack-keystone16:27
openstackgerritBrant Knudson proposed openstack/keystone: Split the assignments manager/driver.  https://review.openstack.org/13095416:27
lbragstaddstanek: we also define two different schemas for each object. One for the create operation and one for the update.16:28
*** pcaruana has quit IRC16:33
morganfainbergOk I'm going to release keystoneclient as soon as we get to elevation / wifi is on.16:41
morganfainbergSame with middleware.16:41
bknudsonmorganfainberg: so, regarding the assignments split... I haven't heard any compelling argument for splitting out roles into their own backend...16:43
bknudsonhttps://review.openstack.org/#/c/130954/16:43
bknudsonso I'm leaning towards not splitting until we've got a use case.16:44
morganfainbergbknudson: ack16:44
*** chrisshattuck has quit IRC16:46
*** diegows has quit IRC16:47
dstaneklbragstad: with jsd you wouldn't have to do that16:49
*** chrisshattuck has joined #openstack-keystone16:49
lbragstaddstanek: have two schemas?16:52
lbragstaddstanek: and we could cover all these use cases with one schema http://paste.openstack.org/show/88951/ ?16:52
bknudsonalso with all the changes in https://review.openstack.org/#/c/130954/ it's impossible to review.16:52
bknudsonit's gotten a few +1s and stevemar gave it a +2, so maybe he can explain all the changes to me.16:54
*** ajayaa has joined #openstack-keystone16:54
dstaneklbragstad: yeah, that was the plan16:54
lbragstaddstanek: sweet,16:55
lbragstadthat would be cool16:55
openstackgerritayoung proposed openstack/identity-api: Registry of token formats  https://review.openstack.org/14284216:55
ayounglbragstad, ^^  that is, I think, a pre-req to AE tokens.  Take a look16:55
ayoungI know there will be some discussion over it....16:56
lbragstadayoung: ok, I'll take a look16:57
*** dims_ has quit IRC16:59
*** dims__ has joined #openstack-keystone16:59
stevemarbknudson, theres been a significant increase in LoC since i've looked at it...17:00
*** andreaf has quit IRC17:00
*** andreaf has joined #openstack-keystone17:01
bknudsonstevemar: +1873, -1322 to +2288, -1605 ... you'll have to review it all over again.17:02
bknudsonI hope you can remember how it all worked before.17:02
stevemaryep17:02
stevemarwell, IIRC, back on PS 21 it was just a straight moving around17:02
bknudsonthat's what I was expecting.17:03
stevemarrole_assignments were taken out of the assignments backend, leaving just roles/projects/domains17:03
*** rdo_ is now known as rdo17:03
*** dims__ has quit IRC17:03
stevemarbut then it was mentioned, why keep the roles and role_assignments separated, are they even useful if split apart17:04
*** _cjones_ has joined #openstack-keystone17:05
*** gyee has joined #openstack-keystone17:05
*** ChanServ sets mode: +v gyee17:05
morganfainbergstevemar: bknudson it would be a lot of code if it was just moving stuff. I do agree that it would be more reviewable that way. (Sometimes moves are a lot of code)17:07
morganfainbergayoung: don't propose to identity-api repo17:07
morganfainbergayoung: ;)17:08
*** EmilienM has quit IRC17:08
bknudsonmorganfainberg: that's easy to review but if it also includes removing a bunch of code from ProjectApi like in https://review.openstack.org/#/c/130954/35/keystone/assignment/backends/ldap.py I have no idea what's going on.17:08
morganfainbergbknudson: I absolutely agree17:08
*** thedodd has quit IRC17:09
*** chrisshattuck has quit IRC17:09
*** EmilienM has joined #openstack-keystone17:09
*** rm_work|away is now known as rm_work17:09
*** avozza is now known as zz_avozza17:11
ayoungmorganfainberg, this is API level stuff17:11
ayoungI can remove the new values...those are there more to trigger discussions17:11
morganfainbergAll api docs are in keystone-specs repo17:11
morganfainbergIt's not a judgement of the proposal, just the wrong place. That's all17:11
ayoungI thought those were just for those with corresponding spevs17:12
ayoungspecs17:12
ayoungOK...I can move it17:12
morganfainbergNope. :)17:12
bknudsonis there a way to disable push for the repo?17:12
morganfainbergI'm working to get identity-api mothballed to the attic asap. Meaning it'll disappear from gerrit in that location and off github.17:12
morganfainbergayoung: the benefit is we now have a published and rendered (official) spec location we can link to, and not worry about GitHub being silly and changing url structure or something.17:13
*** thedodd has joined #openstack-keystone17:14
openstackgerritayoung proposed openstack/keystone-specs: registry of token formats.  https://review.openstack.org/14284717:15
ayoungmorganfainberg, lbragstad ^^17:16
morganfainbergayoung: cool thnx17:16
*** ayoung is now known as ayoung-afk17:16
*** diegows has joined #openstack-keystone17:17
*** dims__ has joined #openstack-keystone17:17
*** chrisshattuck has joined #openstack-keystone17:18
*** thedodd has quit IRC17:19
*** thedodd has joined #openstack-keystone17:19
*** stevemar has quit IRC17:23
*** stevemar has joined #openstack-keystone17:23
*** ChanServ sets mode: +v stevemar17:23
*** zz_avozza is now known as avozza17:25
morganfainbergok i'm going to do the keystoneclient and middleware releases.17:29
nkindermorganfainberg: yay!17:30
raildomorganfainberg, :)17:33
*** f13o has quit IRC17:33
morganfainbergwell crap...17:34
*** f13o has joined #openstack-keystone17:34
morganfainbergi may not be able to release this till i get home17:34
*** lhcheng has joined #openstack-keystone17:39
*** lhcheng has quit IRC17:42
morganfainbergreleases have been cut, will send the email announcing it shortly17:44
morganfainbergkeystoneclient 1.0.0 and keystonemiddleware 1.3.0 are/will be available very soon on pypi17:44
*** gyee has quit IRC17:48
*** lhcheng has joined #openstack-keystone17:49
dstanekbknudson: i agree, the split patch is really too big17:52
*** hdd has joined #openstack-keystone18:00
*** thedodd has quit IRC18:03
*** thedodd has joined #openstack-keystone18:04
*** thedodd has quit IRC18:04
*** thedodd has joined #openstack-keystone18:04
*** dims__ has quit IRC18:08
*** thedodd has quit IRC18:09
*** dims__ has joined #openstack-keystone18:10
*** thedodd has joined #openstack-keystone18:12
*** dims_ has joined #openstack-keystone18:19
*** dims__ has quit IRC18:20
*** nkinder has quit IRC18:21
*** boris-42 has quit IRC18:23
*** harlowja_away is now known as harlowja18:23
*** dims_ has quit IRC18:26
*** lhcheng_ has joined #openstack-keystone18:28
*** dims__ has joined #openstack-keystone18:28
*** lhcheng has quit IRC18:31
*** aix has quit IRC18:33
*** rushiagr is now known as rushiagr_away18:37
*** boris-42 has joined #openstack-keystone18:44
*** jungleboyj has quit IRC18:46
*** afaranha has joined #openstack-keystone18:56
*** lhcheng_ is now known as lhcheng19:01
*** _cjones_ has quit IRC19:02
*** ajayaa has quit IRC19:03
*** amakarov is now known as amakarov_away19:10
*** rushiagr_away is now known as rushiagr19:14
*** ayoung-afk is now known as ayoung19:21
*** rushiagr is now known as rushiagr_away19:26
*** hdd has quit IRC19:27
stevemardstanek, it was OK at one point19:29
stevemarbut now, yeah, i'd have to agree it's too many things at once19:29
*** _cjones_ has joined #openstack-keystone19:32
*** nkinder has joined #openstack-keystone19:34
morganfainbergstevemar, i think it was ok when it was moving things.. after that it turned towards what it is now.19:39
*** nkinder has quit IRC19:42
openstackgerritMarek Denis proposed openstack/keystone: Scope federated token with 'token' identity method  https://review.openstack.org/13059319:48
stevemarmorganfainberg, yeah, shoulda put the newer stuff in a dependent PS19:51
stevemarerr patch19:52
morganfainbergstevemar, ++19:52
*** jungleboyj has joined #openstack-keystone19:52
dstanekstevemar: ++19:53
stevemarmorganfainberg, dstanek can i get eyes on https://review.openstack.org/#/c/138253/19:53
stevemarmorganfainberg, are you still on a flight?19:53
dstanekstevemar: shore19:56
stevemardstanek, i think we finally ironed out the kinks with oslo config generator19:57
stevemari think it's all ready to be used now19:57
stevemarand we can ditch that one we've been maintaining under tools/19:57
dstanekstevemar: i'm seeing a bunch of deleted files after running the update20:08
stevemardstanek, the commit msg: Note: had to undo the deletes to config.py,20:10
stevemarimportutils.py and gettextutils.py, since they are20:10
stevemarstill being used20:10
dstanekah hmm...20:12
dstanekstevemar: what's config.py?20:13
stevemardstanek, oops openstack/common/config/*20:14
*** raildo is now known as raildo_away20:15
openstackgerritDolph Mathews proposed openstack/keystone: create _member_ role as specified in CONF  https://review.openstack.org/14289720:15
*** jdennis has quit IRC20:17
openstackgerritDolph Mathews proposed openstack/keystone: create _member_ role as specified in CONF  https://review.openstack.org/14289720:18
dstanekstevemar: do you want to fix the commit message to include config directory and readme? just left a comment on the review20:22
stevemardstanek, yeah sure20:22
openstackgerritSteve Martinelli proposed openstack/keystone: sync to oslo commit 1cf2c6  https://review.openstack.org/13825320:22
stevemardstanek, better-ish?20:23
*** RichardRaseley has joined #openstack-keystone20:23
openstackgerritayoung proposed openstack/keystone: default policy  https://review.openstack.org/14011320:31
morganfainbergstevemar, my fight was delayed by ~3hrs20:32
morganfainbergstevemar, so... yeah i'm still on a flight :(20:32
stevemarmorganfainberg, hehe20:32
morganfainbergstevemar, had to change planes... something was broken20:33
morganfainbergwaited an hour to hear that20:33
morganfainbergthen 2hrs to change planes20:33
morganfainbergstevemar, so currently somewhere over ... Indiana it looks like20:33
stevemarmorganfainberg, great, so you can review https://review.openstack.org/#/c/138253/ and the dependent patches :P20:34
morganfainbergi'm looking at ti now actuallt20:34
morganfainbergy20:34
morganfainbergstevemar, there is a --online thing bknudson tends to like/do when he syncs the oslo incubator20:35
morganfainbergto put in the commit message - though i'd need to go look up the specifcs, but it gets a nice output of patches to stick in the commit msg20:35
*** _cjones_ has quit IRC20:36
stevemarmorganfainberg, but i'm not fancy like bknudson :P20:38
morganfainberglol20:39
*** harlowja has quit IRC20:45
*** harlowja_ has joined #openstack-keystone20:45
*** _cjones_ has joined #openstack-keystone20:46
*** _cjones_ has quit IRC20:52
*** _cjones_ has joined #openstack-keystone20:53
*** _cjones_ has quit IRC20:59
*** _cjones_ has joined #openstack-keystone21:00
*** erkules_ has joined #openstack-keystone21:01
*** topol has quit IRC21:02
*** erkules has quit IRC21:03
*** _cjones_ has quit IRC21:05
*** nellysmitt has quit IRC21:10
*** jasondotstar has quit IRC21:10
*** afaranha has quit IRC21:11
*** jasondotstar has joined #openstack-keystone21:12
*** RichardRaseley has quit IRC21:13
*** _cjones_ has joined #openstack-keystone21:13
*** stevemar has quit IRC21:16
*** _cjones_ has quit IRC21:22
*** _cjones_ has joined #openstack-keystone21:28
*** ayoung has quit IRC21:29
*** diegows has quit IRC21:29
*** _cjones_ has quit IRC21:33
*** ayoung has joined #openstack-keystone21:37
*** ChanServ sets mode: +v ayoung21:37
*** _cjones_ has joined #openstack-keystone21:38
morganfainbergdstanek, lbragstad, ah moving to a descriptor based schema validator?21:43
lbragstadmorganfainberg: dstanek I've been meaning to write down all the discussions we had on validation with respect to JSD but never got around to it.21:45
lbragstadthere was a bunch of stuff/reviews around that idea though21:46
morganfainbergor well descriptor-like i don't think that is *actually* a descriptor as it's missing some magic methods21:46
lbragstadyeah21:46
* morganfainberg is so ready to sit in traffic after this flight >.<21:46
lbragstadsaid no one ever!21:47
dstaneklbragstad: morganfainberg: i downloaded the reviews locally and abandoned them over the weekend - i'll update jsd and revive the reviews to see if anyone is interested21:50
lbragstadI like what can be done with JSD so far,21:51
*** gordc has quit IRC21:51
lbragstaddstanek: didn't you say some others were already using it?21:51
dstaneklbragstad: i had at least 2 people tell me that they started using it, but it can't be in a significant way21:52
dstaneklots of downloads though - not sure how those are counted21:53
* lbragstad was one of those21:53
lbragstad:)21:53
*** atiwari has joined #openstack-keystone22:08
*** thedodd has quit IRC22:12
*** hichtakk has joined #openstack-keystone22:13
*** timcline has quit IRC22:25
*** dims__ has quit IRC22:35
*** avozza is now known as zz_avozza22:37
*** zz_avozza is now known as avozza22:42
*** atiwari has quit IRC22:53
*** david-ly_ has joined #openstack-keystone22:58
*** packet has quit IRC22:58
*** david-lyle has quit IRC23:03
*** mitz has quit IRC23:03
*** jamielennox|away is now known as jamielennox23:05
*** mitz has joined #openstack-keystone23:06
jamielennoxmorganfainberg: maybe i'm more excited than i should be as inflight wifi hasn't made it here yet - however i hope that "released from the skies" was in the announcement or notes for these releases23:07
richm"handed down from on high"23:09
jamielennoxrichm: better23:10
*** nellysmitt has joined #openstack-keystone23:11
jamielennoxmorganfainberg: is there a patch for requirements to bump keystoneclient version?23:13
morganfainbergjamielennox, not yet23:14
jamielennoxmorganfainberg: ok - i can do that quickly23:14
morganfainbergjamielennox, was going to wait till i got home to do that unless someone else gets it first23:14
morganfainbergjamielennox, sure go for it! :)23:14
*** jorge_munoz has quit IRC23:15
*** nellysmitt has quit IRC23:16
*** jdennis has joined #openstack-keystone23:18
*** EmilienM is now known as EmilienM|pto23:21
*** r-daneel has quit IRC23:44
*** chrisshattuck has quit IRC23:49
*** gyee has joined #openstack-keystone23:51
*** ChanServ sets mode: +v gyee23:51
*** LinstatSDR has quit IRC23:58
openstackgerritMerged openstack/keystone: sync to oslo commit 1cf2c6  https://review.openstack.org/13825323:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!