Tuesday, 2015-01-06

*** lhcheng has quit IRC00:01
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Add Proxy plugins  https://review.openstack.org/13786400:02
*** jaosorior has quit IRC00:03
*** lhcheng_ has joined #openstack-keystone00:03
samueldmqbknudson, regarding 'Correct version tests for result ordering'00:06
samueldmqbknudson, just to confirm...00:06
samueldmqbknudson, so the matcher would be able to assert the versions replacing the unittest functions (assertThat, assertItemsEqual) by its own functions to make comparisons, right?00:07
bknudsonsamueldmq: I'm going to try it out and see what it looks like.00:07
bknudsonThere should be a way to compose existing matchers.00:07
bknudsonthis isn't something I've done before... although keystone does have some matchers already00:08
samueldmqbknudson, nice! I will take a look at it tomorrow morning00:08
samueldmqbknudson, also havent used matchers before, will be nice to learn about this00:08
samueldmqbknudson, I will take a look at once you submit it, thanks00:09
bknudsonsamueldmq: here's all the existing matchers: https://github.com/testing-cabal/testtools/blob/master/testtools/matchers/__init__.py#L1500:09
samueldmqbknudson, wow, there are a lot of them :-)00:10
samueldmqbknudson, sorry, need to go offline for a bit00:11
*** samueldmq has left #openstack-keystone00:12
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Add Proxy plugins  https://review.openstack.org/13786400:13
*** dims__ has joined #openstack-keystone00:15
*** dims_ has joined #openstack-keystone00:19
stevemarsomething screwy going on with the builds?00:19
stevemardocs/py27/py33 are randomly failing with errors when installing libraries00:20
stevemarat least, 3/4 at the top are here: https://review.openstack.org/#/q/status:open+project:openstack/keystone,n,z00:20
openstackgerritMerged openstack/python-keystoneclient-kerberos: Workflow documentation is now in infra-manual  https://review.openstack.org/13937700:21
*** dims__ has quit IRC00:23
*** dims_ has quit IRC00:24
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Don't assume everyone uses `CONF`  https://review.openstack.org/14306300:30
*** david-lyle has joined #openstack-keystone00:33
*** david-ly_ has joined #openstack-keystone00:36
*** hdd has quit IRC00:38
*** david-ly_ has quit IRC00:41
*** amerine has joined #openstack-keystone00:51
openstackgerritMerged openstack/keystonemiddleware: Correct incorrect rst in docstrings  https://review.openstack.org/14192400:52
*** jungleboyj has joined #openstack-keystone00:55
*** zzzeek has quit IRC00:56
*** _cjones_ has quit IRC01:05
*** dims__ has joined #openstack-keystone01:24
openstackgerritBrant Knudson proposed openstack/keystone: Remove test PYTHONHASHSEED setting  https://review.openstack.org/13659301:25
openstackgerritBrant Knudson proposed openstack/keystone: Correct XMLEquals matcher for ordering  https://review.openstack.org/13891801:25
openstackgerritBrant Knudson proposed openstack/keystone: Correct test_auth_unscoped_token_project for result ordering  https://review.openstack.org/13891901:25
openstackgerritBrant Knudson proposed openstack/keystone: Correct test_get_v3_catalog test for result ordering  https://review.openstack.org/13892001:25
openstackgerritBrant Knudson proposed openstack/keystone: Correct catalog response checker for result ordering  https://review.openstack.org/13892101:25
openstackgerritBrant Knudson proposed openstack/keystone: Correct a v3 auth test for result ordering  https://review.openstack.org/13892201:25
openstackgerritBrant Knudson proposed openstack/keystone: Correct version tests for result ordering  https://review.openstack.org/13892301:25
stevemarbknudson, if you're free https://review.openstack.org/#/c/142652/ just needs a +A, you already +2'ed01:27
bknudsonstevemar: passing jenkins is a feat in itself.01:27
stevemarbknudson, the past month has been really flakey01:28
bknudsonpeople have started calling it "neutroning"01:28
bknudsonas in, "I got neutroned"01:28
stevemarsurprised there isn't another for "I got setuptooled"01:29
stevemarnot going to +A this guy? https://review.openstack.org/#/c/138508/01:29
bknudsonstevemar: I uploaded the latest version01:29
stevemarbknudson, yeah, but you just re-ran tox -e sample_config :P01:30
stevemardon't want to upset our fearless PTL01:30
stevemarlbragstad will do it, right? RIGHT? https://review.openstack.org/#/c/138508/01:30
bknudsonit would be nice to get that in quickly since we get a lot of merge conflicts01:31
stevemaryeah01:32
*** nellysmitt has joined #openstack-keystone01:37
*** nellysmitt has quit IRC01:42
openstackgerritBrant Knudson proposed openstack/keystone: Remove unused requirements  https://review.openstack.org/14511001:43
*** rwsu has quit IRC02:03
*** zzzeek has joined #openstack-keystone02:10
*** dims__ has quit IRC02:16
*** gyee has quit IRC02:25
openstackgerritMerged openstack/keystone: Remove unnecessary oslo incubator bits  https://review.openstack.org/14265202:26
*** gordc has joined #openstack-keystone02:35
*** dims__ has joined #openstack-keystone02:38
*** atiwari has quit IRC02:45
*** erkules_ has joined #openstack-keystone02:53
*** erkules has quit IRC02:55
*** erkules_ is now known as erkules02:59
*** zzzeek has quit IRC03:00
*** lhcheng_ has quit IRC03:04
*** lhcheng has joined #openstack-keystone03:04
*** lhcheng has quit IRC03:09
*** gordc has quit IRC03:13
*** dims__ has quit IRC03:14
morganfainbergbknudson, stevemar, +3 on the sample config one03:26
stevemaryay03:26
*** nellysmitt has joined #openstack-keystone03:38
*** david-lyle has quit IRC03:39
*** nellysmitt has quit IRC03:42
*** richm has quit IRC03:44
*** david-lyle has joined #openstack-keystone03:45
*** david-lyle has quit IRC03:46
*** david-lyle has joined #openstack-keystone03:48
*** radez is now known as radez_g0n304:02
*** dims__ has joined #openstack-keystone04:15
*** gordc has joined #openstack-keystone04:15
*** dims__ has quit IRC04:20
*** david-lyle is now known as david-lyle_afk04:25
*** mogami has joined #openstack-keystone04:38
openstackgerritMerged openstack/keystone: update sample conf using latest oslo.conf  https://review.openstack.org/13850804:39
openstackgerritMerged openstack/keystone: update sample conf using latest oslo.conf  https://review.openstack.org/13850804:39
*** lsmola has quit IRC04:45
*** lsmola has joined #openstack-keystone05:00
*** lhcheng has joined #openstack-keystone05:03
DaveChenmorganfainberg: hi,05:07
morganfainbergDaveChen, hey05:07
DaveChenmorganfainberg: May I ask you a question, regarding to your spec specs.openstack.org/openstack/keystone-specs/specs/kilo/removed-as-of-kilo.html05:08
morganfainbergsure.05:08
DaveChenmorganfainberg: I see you have list something will be cleaned, the first item, Remove non-token KVS Backends and KVS-specific Testing (Identity, Assignment, Trust, and Revoke). My question is whether kvs in catalog is also belonged to this category?05:09
morganfainbergcatalog doesn't05:09
morganfainbergwe use kvs catalog for helping to cache the templated catalog05:10
DaveChenmorganfainberg: got you, so it's still useful while others are useless?05:11
morganfainbergyeah05:11
DaveChenmorganfainberg: I see, thanks a lot!05:12
morganfainbergthe others weren't the defaults, were not production grade, and didn't really help us - so we deprecated and then removed05:12
morganfainberg:)05:12
*** gordc has quit IRC05:17
*** k4n0 has joined #openstack-keystone05:24
*** henrynash has joined #openstack-keystone05:25
*** ChanServ sets mode: +v henrynash05:25
*** k4n0 has quit IRC05:25
openstackgerrithenry-nash proposed openstack/keystone: Make unit tests call the new reource manager.  https://review.openstack.org/13095405:29
*** mogami has quit IRC05:29
*** nellysmitt has joined #openstack-keystone05:38
*** nellysmitt has quit IRC05:43
stevemarhenrynash, sorry about the changes to the sample_config05:52
stevemarwith https://review.openstack.org/#/c/138508/ merged the mangling of sample_config should be over and done with05:53
*** dims__ has joined #openstack-keystone06:04
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex  https://review.openstack.org/14513506:05
*** lhcheng has quit IRC06:09
*** lhcheng has joined #openstack-keystone06:09
*** henrynash has quit IRC06:11
*** lhcheng has quit IRC06:13
*** ajayaa has joined #openstack-keystone06:16
openstackgerritwanghong proposed openstack/keystone: make tests of endpoint_filter check endpoints num  https://review.openstack.org/14514006:23
openstackgerritChangBo Guo(gcb) proposed openstack/keystone: Add library oslo.concurrency in config-generator config file  https://review.openstack.org/13727006:25
*** avozza is now known as zz_avozza06:27
*** stevemar2 has joined #openstack-keystone06:31
*** ChanServ sets mode: +v stevemar206:31
openstackgerritAbhishek Kekane proposed openstack/keystone: Eventlet green threads not released back to pool  https://review.openstack.org/13082406:33
*** zz_avozza is now known as avozza06:33
*** stevemar has quit IRC06:34
*** abhirc has quit IRC06:37
*** dims__ has quit IRC06:38
*** avozza is now known as zz_avozza06:46
*** zz_avozza is now known as avozza06:50
openstackgerritwanghong proposed openstack/keystone: remove the Conf.signing.token_format option support  https://review.openstack.org/14425006:52
*** avozza is now known as zz_avozza06:57
*** jamielennox is now known as jamielennox|away07:03
*** nellysmitt has joined #openstack-keystone07:39
*** nellysmitt has quit IRC07:43
*** stevemar2 has quit IRC07:44
*** chlong has quit IRC07:49
*** chlong has joined #openstack-keystone07:49
openstackgerritMarcos Fermín Lobo proposed openstack/keystone: Templated catalog backend not implemented  https://review.openstack.org/12001107:50
*** chlong has quit IRC07:51
*** chlong has joined #openstack-keystone07:53
openstackgerritguang-yee proposed openstack/keystone: make sure the namespace prefixes are explicit for the signed SAML2 assertion  https://review.openstack.org/14515907:55
*** zz_avozza is now known as avozza08:00
*** afazekas has joined #openstack-keystone08:14
openstackgerritMarcos Fermín Lobo proposed openstack/python-keystoneclient: Attributes required using token for auth  https://review.openstack.org/11522808:16
*** nellysmitt has joined #openstack-keystone08:33
*** f13o has joined #openstack-keystone08:54
*** f13o has quit IRC08:55
*** f13o has joined #openstack-keystone08:55
*** jistr has joined #openstack-keystone08:58
*** mogami has joined #openstack-keystone09:06
*** nellysmitt has quit IRC09:08
*** mogami has quit IRC09:11
*** nellysmitt has joined #openstack-keystone09:12
*** lhcheng has joined #openstack-keystone09:15
*** f13o has quit IRC09:23
*** andreaf has joined #openstack-keystone09:25
*** avozza is now known as zz_avozza09:35
openstackgerritMarcos Fermín Lobo proposed openstack/python-keystoneclient: Attributes required using token for auth  https://review.openstack.org/11522809:40
*** zz_avozza is now known as avozza10:00
openstackgerritMarcos Fermín Lobo proposed openstack/keystone: Templated catalog backend not implemented  https://review.openstack.org/12001110:01
*** dgonzale_ has joined #openstack-keystone10:02
*** dgonzale_ is now known as dgonzalez10:02
*** dims__ has joined #openstack-keystone10:11
*** dims__ has quit IRC10:17
*** dgonzalez has quit IRC10:19
*** avozza is now known as zz_avozza10:22
*** zz_avozza is now known as avozza10:23
*** lhcheng has quit IRC10:29
*** dgonzalez has joined #openstack-keystone11:05
*** avozza is now known as zz_avozza11:21
*** dgonzalez has quit IRC11:26
*** dgonzalez has joined #openstack-keystone11:27
*** lhcheng has joined #openstack-keystone11:29
*** dgonzalez has quit IRC11:31
openstackgerritMarek Denis proposed openstack/keystone-specs: Standardize federated scoping process.  https://review.openstack.org/14520411:34
*** lhcheng has quit IRC11:34
*** abhirc has joined #openstack-keystone11:44
*** dims__ has joined #openstack-keystone11:44
*** dims__ has quit IRC11:49
*** nellysmitt has quit IRC11:50
*** dgonzale_ has joined #openstack-keystone11:55
*** dims__ has joined #openstack-keystone11:59
openstackgerritJames Page proposed openstack/keystone: Deal with PEP-0476 certificate chaining checking  https://review.openstack.org/14498812:00
*** zz_avozza is now known as avozza12:04
*** nellysmitt has joined #openstack-keystone12:16
*** dgonzalez has joined #openstack-keystone12:23
*** dgonzale_ has quit IRC12:23
*** dims__ has quit IRC12:25
*** lhcheng has joined #openstack-keystone12:31
*** lhcheng has quit IRC12:35
*** toddnni has quit IRC12:36
*** avozza is now known as zz_avozza12:43
*** gordc has joined #openstack-keystone12:55
*** dims__ has joined #openstack-keystone12:57
*** gordc has quit IRC13:03
*** ayoung has quit IRC13:17
*** samueldmq has joined #openstack-keystone13:34
*** gordc has joined #openstack-keystone13:49
*** richm has joined #openstack-keystone14:10
*** sriram has joined #openstack-keystone14:14
*** kragniz has quit IRC14:22
*** kragniz has joined #openstack-keystone14:22
*** ayoung has joined #openstack-keystone14:31
*** ChanServ sets mode: +v ayoung14:31
*** vsilva has quit IRC14:33
*** jungleboyj has quit IRC14:37
*** joesavak has joined #openstack-keystone14:41
*** zzzeek has joined #openstack-keystone14:42
marekdmorganfainberg: so the hackathon will be in Geekdom, as in July, right?14:45
*** dgonzale_ has joined #openstack-keystone14:49
*** dgonzalez has quit IRC14:51
*** zzzeek has quit IRC14:52
*** radez_g0n3 is now known as radez14:52
*** zzzeek has joined #openstack-keystone14:53
*** nellysmitt has quit IRC14:54
*** jistr has quit IRC14:56
*** jistr has joined #openstack-keystone14:57
*** dgonzalez has joined #openstack-keystone15:01
*** dgonzale_ has quit IRC15:02
*** zz_avozza is now known as avozza15:05
*** zzzeek has quit IRC15:06
*** zzzeek has joined #openstack-keystone15:06
*** dgonzalez has quit IRC15:12
*** nkinder has joined #openstack-keystone15:12
*** dgonzalez has joined #openstack-keystone15:12
*** chrisshattuck has joined #openstack-keystone15:12
*** dgonzalez has quit IRC15:16
openstackgerritBrant Knudson proposed openstack/keystone: Move eventlet server options to a config section  https://review.openstack.org/13096215:17
*** timcline has joined #openstack-keystone15:20
*** stevemar has joined #openstack-keystone15:22
*** ChanServ sets mode: +v stevemar15:22
*** atiwari has joined #openstack-keystone15:24
*** avozza is now known as zz_avozza15:28
lbragstadstevemar: are you signing me up for work?15:35
stevemarlbragstad, maybe....?15:35
stevemarlbragstad, whats up15:35
openstackgerritSteve Martinelli proposed openstack/keystone: Add library oslo.concurrency in config-generator config file  https://review.openstack.org/13727015:36
lbragstadstevemar: oh, nevermind, just read back and you were looking for an A+15:36
* lbragstad is now on the same page as stevemar15:36
openstackgerritBrant Knudson proposed openstack/keystone: Change oslo.config to oslo_config  https://review.openstack.org/14525015:37
stevemarlbragstad, :D15:37
*** david-lyle has joined #openstack-keystone15:38
*** ajayaa has quit IRC15:40
*** rm_work is now known as rm_work|away15:41
morganfainbergmarekd: yes15:42
*** jungleboyj has joined #openstack-keystone15:45
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Change oslo.config to oslo_config  https://review.openstack.org/14525215:47
*** rwsu has joined #openstack-keystone15:48
openstackgerritLance Bragstad proposed openstack/keystone-specs: Remove XML references from API documentation  https://review.openstack.org/14225015:52
marekdayoung: by saying 'dropping LDAP assignments' you mean removing LDAP backend from Keystone, or leave and for some time support whatever currenly is in Keystone,  and simply not develop any new features for ldap?15:54
*** samueldmq has quit IRC15:54
morganfainbergmarekd: I think I hit reply all on my response to ayoung. It would be deprecated with 2 cycles until removal. It also would require some legwork on ml topics etc n15:56
marekdmorganfainberg: yes, but in general you want to remove LDAP backend in the end, right?15:57
morganfainbergayoung: is proposing that. I would like to see ldap assignment go away. But I'm not convinced we can do that. I think CERN is not the only one using it.15:58
openstackgerritBrant Knudson proposed openstack/keystonemiddleware: Change oslo.config to oslo_config  https://review.openstack.org/14525515:58
marekdmorganfainberg: so, we are planning to move as much as we can to SQL backend, but at least for now  it's super unlikely we will be able to migrate users/domains/roles from LDAP to SQL, as this CERN wide LDAP with all the users and user for many services.16:00
marekdmorganfainberg: i think rackspace was also using ldap16:00
*** andreaf is now known as andreaf_16:00
morganfainbergLdap identity would not go away.16:00
marekdmorganfainberg: ah, sorry, misread you16:00
morganfainbergI also think Rackspace is using it.16:00
joesavaki think so too16:01
marekdjoesavak: :-)16:01
joesavak(hi!)16:01
marekdhi!16:01
marekdHappy New Year!16:01
joesavaky'all too!16:01
morganfainbergSo like I said. I don't think it can go away. I don't like the current ldap assignment.16:01
marekdmorganfainberg: ok16:01
joesavakmarekd, did you hear we're flying you to SA for midcycle?16:01
marekdjoesavak: yes16:01
joesavakwoot.16:01
morganfainbergAnd that should eventually go away. But that is a bigger topic.16:02
*** chrisshattuck has quit IRC16:02
marekdthanks, appreciate it!16:02
marekdjoesavak: Ken has contacted me yesterday16:02
joesavakgreaty16:02
joesavak: )16:02
marekdjoesavak: and Liana is working on flights now.16:02
marekdjoesavak: are you going to attend session in the Geekdom ?16:02
morganfainbergAnnnnd I need coffee.16:02
morganfainbergjoesavak: here's to a good 201516:03
joesavakdefinatley on the 3rd day. First day is a school-day-off so probably can't without bringing a lot of distraction16:03
joesavaksecond day is meeting - but i may be able to move them16:03
joesavakMorgan - you too!16:03
marekdjoesavak: cool!16:03
morganfainbergHm. joesavak I think day three is going to be mostly hackathon-y. Like previous midcycle16:04
morganfainbergI'd recommend being there for as much of the other two days as possible.16:04
joesavakGotcha - I'll see if I can switch things around then and come 1st day16:04
morganfainbergmarekd: saw the info from gyee, super happy to see that fix.16:05
joesavakAt the very least, Ken, Lance, Werner, and Jorge will be there16:05
morganfainbergjoesavak: ack16:05
marekdmorganfainberg: oh yes. I was playing with tha before Christmas and thought i would get back to debuggin after the break - luckily gyee managed to solve the issue. I will then proceed to working on client side.16:06
morganfainbergYep!16:06
marekdmorganfainberg: hopefully they will post the fix soon.16:06
morganfainbergI think they did.16:06
morganfainbergmarekd: https://review.openstack.org/#/c/145159/16:07
*** henrynash has joined #openstack-keystone16:08
*** ChanServ sets mode: +v henrynash16:08
*** chrisshattuck has joined #openstack-keystone16:08
marekdmorganfainberg: thanks.16:08
*** lhcheng has joined #openstack-keystone16:08
*** vhoward- has left #openstack-keystone16:12
*** lhcheng has quit IRC16:12
*** david-lyle has quit IRC16:13
*** mikedillion has joined #openstack-keystone16:13
openstackgerritBrant Knudson proposed openstack/keystonemiddleware: Change oslo.config to oslo_config  https://review.openstack.org/14525516:14
*** mikedillion has quit IRC16:14
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Change oslo.config to oslo_config  https://review.openstack.org/14525216:15
openstackgerritBrant Knudson proposed openstack/keystone: Change oslo.config to oslo_config  https://review.openstack.org/14525016:15
*** jistr has quit IRC16:15
*** jistr has joined #openstack-keystone16:16
*** jistr has quit IRC16:17
*** jistr has joined #openstack-keystone16:17
openstackgerritMerged openstack/keystone-specs: Remove XML references from API documentation  https://review.openstack.org/14225016:19
*** dgonzalez has joined #openstack-keystone16:22
*** thedodd has joined #openstack-keystone16:24
henrynashmorganfainbeg: ping16:28
*** dgonzalez has quit IRC16:29
openstackgerritMarek Denis proposed openstack/python-keystoneclient: Create a framework for federation plugins  https://review.openstack.org/13056416:30
henrynashstevemar: ping16:33
stevemarhenrynash, pong16:35
henrynashstevemar: hi…if you’re attending the irc meeting later, could you let morgan know that I won’t be there…on vacation for most of this week….16:36
stevemarhenrynash, yessir16:36
henrynashstevemar; thanks a lot...16:37
morganfainberghenrynash, pong16:40
morganfainberghenrynash, ack.16:40
*** gyee has joined #openstack-keystone16:40
*** ChanServ sets mode: +v gyee16:40
*** lhcheng has joined #openstack-keystone16:45
*** packet has joined #openstack-keystone16:46
*** nellysmitt has joined #openstack-keystone16:50
*** _cjones_ has joined #openstack-keystone16:50
*** packet has quit IRC16:57
*** thedodd has quit IRC17:02
*** timcline has quit IRC17:02
*** thedodd has joined #openstack-keystone17:04
*** henrynash has quit IRC17:06
*** mattfarina has joined #openstack-keystone17:10
*** packet has joined #openstack-keystone17:11
*** mikedillion has joined #openstack-keystone17:13
*** timcline has joined #openstack-keystone17:15
*** timcline_ has joined #openstack-keystone17:18
lbragstaddstanek: did you happen to see this? http://lists.openstack.org/pipermail/openstack-dev/2015-January/053846.html17:20
*** timcline has quit IRC17:21
*** bknudson has quit IRC17:21
*** jistr has quit IRC17:22
*** dgonzalez has joined #openstack-keystone17:25
*** mikedillion has quit IRC17:29
*** dgonzalez has quit IRC17:30
*** jungleboyj has quit IRC17:42
*** bknudson has joined #openstack-keystone17:48
*** ChanServ sets mode: +v bknudson17:48
dstanekmorganfainberg: i won't be at the meeting today. this is my last week off for vacation and I'm right in the middle of Python tutorials at a conference17:58
morganfainbergdstanek, np17:58
dstaneklbragstad: i did not, but i can take a look17:58
lbragstaddstanek:  no worries, it was py3 stuff17:59
dstaneklbragstad: yeah, i just skimmed the post17:59
dstanekstevemar: i feel like you are spying on me18:00
*** topol has joined #openstack-keystone18:00
*** ChanServ sets mode: +v topol18:00
*** jamielennox|away is now known as jamielennox18:01
stevemardstanek, you're not wrong18:01
*** afazekas has quit IRC18:01
*** _cjones_ has quit IRC18:06
*** thedodd has quit IRC18:15
*** _cjones_ has joined #openstack-keystone18:15
*** davidHu has joined #openstack-keystone18:18
*** afazekas has joined #openstack-keystone18:18
*** dgonzalez has joined #openstack-keystone18:26
*** zz_avozza is now known as avozza18:28
*** jistr has joined #openstack-keystone18:30
*** dgonzalez has quit IRC18:30
*** jistr has quit IRC18:31
*** nellysmitt has quit IRC18:31
*** jistr has joined #openstack-keystone18:32
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Add Proxy plugins  https://review.openstack.org/13786418:34
*** bernardo-silva has joined #openstack-keystone18:37
*** avozza is now known as zz_avozza18:38
*** jungleboyj has joined #openstack-keystone18:40
*** nellysmitt has joined #openstack-keystone18:42
*** rm_work|away is now known as rm_work18:44
*** ksavich has joined #openstack-keystone18:45
*** nellysmitt has quit IRC18:46
*** chrisshattuck has quit IRC18:47
*** chrisshattuck has joined #openstack-keystone18:48
*** packet has quit IRC18:49
rodrigodsmarekd, can you take a look in https://review.openstack.org/#/c/142573/ ? You didn't leave the comment for the -1 :)18:55
morganfainbergbknudson, if some of those reviews are related can they be merged into a single bp?19:01
bknudsonmorganfainberg: they're not related. just random changes19:02
morganfainbergbknudson, ok19:02
morganfainbergbknudson, i removed the two we voted on off the top of the list19:02
jamielennoxi have some fairly simple client reviews with a bknudson +2 already if someone wants to clean some up:19:03
jamielennoxhttps://review.openstack.org/#/c/141693/19:03
jamielennoxhttps://review.openstack.org/#/c/140871/19:03
jamielennoxhttps://review.openstack.org/#/c/131380/19:03
*** bknudson has quit IRC19:06
jamielennoxin terms of things that are actually useful can i get some people to look at:19:06
jamielennoxhttps://review.openstack.org/#/c/118520/19:06
jamielennoxhttps://review.openstack.org/#/c/140894/19:06
morganfainbergdolphm, http://goo.gl/forms/xz6xJQOQf5 that look good to you? (cc ayoung)19:08
ayoungmorganfainberg, yep\19:09
jamielennoxno question about whether write is enabled? is that just assumed?19:09
marekdrodrigods: thanks, good catch - so there was some kind of race condition :-) I commented on Patch Set 1 and scord Patch Set 2. So the comment was drafted until now.19:10
*** dkingshott has joined #openstack-keystone19:11
ayoungmorganfainberg, I think jamielennox  is right.  Let's explicitly ask about writable19:13
morganfainbergok i'll add a question about read/write19:13
morganfainbergthis is specific to assignment19:13
morganfainbergi'll be sending a separate survey about users/groups/etc19:13
*** rm_work is now known as rm_work|away19:14
morganfainbergayoung, updated19:14
morganfainbergthat look better?19:14
marekdrodrigods: sorry for that. I obviously don't -1 without justification.19:15
ayoungmorganfainberg, yeah19:17
ayoungmorganfainberg, I was thinking we were  asking about writable identity too19:17
morganfainbergjamielennox, ayoung, https://etherpad.openstack.org/p/ldap-deprecation-poll-email19:18
morganfainbergi know i duplicated some verbiage19:18
morganfainbergit's trying to reinforce what we're looking to gain19:18
morganfainbergok going to send that19:21
jamielennoxmorganfainberg: i know you repeat it a lot, but it might be worth putting at the top of the form. Please note: this refers to the use of LDAP for projects and groups, we are not discussing the identity or user store19:21
jamielennoxi read the form before the email19:22
morganfainbergi did put that in the help on the first item19:22
morganfainberg:)19:22
*** topol has quit IRC19:22
jamielennoxyep - so you did19:22
morganfainbergok there we go19:23
morganfainbergsent to the three mailing lists19:23
morganfainbergi'll do the same for read/write identity in a short bit19:23
nkindermorganfainberg: I think explicitly saying "not users/groups" would be good19:23
jamielennoxmorganfainberg: regarding the blocking reviews list, is there a permission to edit that?19:23
nkinderotherwise, +119:23
morganfainbergjamielennox, it's a star-list in gerrit19:23
morganfainbergnkinder, i added that to the poll in the help for the first question19:24
nkinderah, ok19:24
morganfainbergit does specifically say not users/groups19:24
morganfainbergjamielennox, dolphm owns the script that populates that iirc19:24
morganfainbergjamielennox, it's based on a few of us and what reviews we star19:24
*** dgonzalez has joined #openstack-keystone19:27
*** topol has joined #openstack-keystone19:27
*** ChanServ sets mode: +v topol19:27
*** packet has joined #openstack-keystone19:30
*** dgonzalez has quit IRC19:31
dolphmjamielennox: if you're willing to make your starred reviews in gerrit a non-personal thing, i'd be happy to add you19:31
jamielennoxdolphm: sure, i don't have much starred anyway19:32
dolphmjamielennox: clear what you have unless you consider it to be release blocking. the only projects my thing cares about are those on the gist19:33
dolphmjamielennox: (so you can freely use stars elsewhere)19:33
jamielennoxdone19:34
jamielennoxdolphm: yea - i considered that for a minute, then figured they weren't going to show up anyway19:34
dolphmjamielennox: you're added. the list is updated every minute, iirc19:35
jamielennoxdolphm: thanks19:37
*** thedodd has joined #openstack-keystone19:37
*** david-lyle_afk is now known as david-lyle19:39
dolphmjamielennox: look good?19:42
jamielennoxdolphm: yep, they're adding19:43
openstackgerritLance Bragstad proposed openstack/keystone: Implement base AE token provider  https://review.openstack.org/14531519:43
openstackgerritLance Bragstad proposed openstack/keystone: Add config options for ae_tokens  https://review.openstack.org/14531619:43
openstackgerritLance Bragstad proposed openstack/keystone: Authenticate for AE Tokens  https://review.openstack.org/14531719:43
*** dims__ has quit IRC19:45
*** bernardo-silva has quit IRC19:45
*** dims__ has joined #openstack-keystone19:46
*** bernardo-silva has joined #openstack-keystone19:46
*** dims__ has quit IRC19:49
*** dims__ has joined #openstack-keystone19:49
dolphmmorganfainberg: on your survey, can you make the 'which release of openstack do you run' question be checkmarks instead of radio, or is it too late for that?19:56
morganfainbergeasy change19:56
morganfainbergfixing now19:56
morganfainbergdolphm, fixed19:57
dolphmmorganfainberg: cool, thanks!19:57
dolphmmorganfainberg: what about optionally asking for contact information if they specify read/write ldap?19:57
morganfainberghm.19:58
morganfainbergsure. i can add that19:58
dolphmi imagine we'll have follow up questions19:58
dolphmmorganfainberg: you could also put the "if yes," question on the same second page19:58
morganfainbergdolphm, eh, i could.19:59
morganfainbergdolphm, i feel lazy19:59
morganfainbergdolphm, :P19:59
morganfainbergfor 4 quick questions i feel like multiple pages is over-kill19:59
morganfainbergadded contact info bock19:59
*** toddnni has joined #openstack-keystone20:00
morganfainbergdolphm, added you as a collaborator to the fom20:00
morganfainbergform*20:00
morganfainbergfeel free to change it if you want.20:01
dolphmmorganfainberg: cool, thanks! i'm more interested in seeing the results though :P20:01
morganfainbergyou can also see the results from that link i sent20:01
morganfainbergor should be able to20:01
morganfainberg(the collaborator one)20:01
dolphmmorganfainberg: after you fill it out?20:01
dolphmah20:02
dolphmmorganfainberg: i'm having someone else fill it out on behalf of rax private cloud20:04
morganfainbergcool20:04
*** ayoung has quit IRC20:04
*** davidHu has quit IRC20:05
* morganfainberg is off for lunch20:05
*** davidHu has joined #openstack-keystone20:05
*** ayoung has joined #openstack-keystone20:06
*** ChanServ sets mode: +v ayoung20:06
*** samueldmq has joined #openstack-keystone20:07
*** davidHu_ has joined #openstack-keystone20:08
*** bknudson has joined #openstack-keystone20:10
*** ChanServ sets mode: +v bknudson20:10
*** davidHu has quit IRC20:12
jamielennoxbknudson: regarding the comment i just put on https://review.openstack.org/#/c/130916/ - i'm not sure if it's something i should push for now or just go with the theory that it's better than it was20:18
bknudsonjamielennox: which comment?20:19
bknudsonoh, at the end20:19
bknudsonjamielennox: you're correct, that is weirc20:19
bknudsonweird20:19
jamielennoxright, so if you put v3.1 in the config file i would expect it to fail to match a straight v3.0 endpoint20:19
bknudsonjamielennox: but why would you put v3.1?20:19
bknudsonbecause you thought it would be better than v3?20:20
jamielennoxi guess if you are relying on something that wasn't present in 3.020:20
jamielennoxmaybe revocation events?20:20
bknudsonjamielennox: the bug was reported by ayoung so should check with him if this fixes it.20:20
jamielennoxreally it shouldn't matter - i'm just not sure what the point is20:21
ayoungwhich bug?20:21
bknudsonayoung: https://bugs.launchpad.net/keystonemiddleware/+bug/138385320:21
uvirtbotLaunchpad bug 1383853 in keystonemiddleware "auth_token middleware hard coded to check for version 3.0" [Medium,In progress]20:21
bknudsonayoung: here's the tests that pass now: https://review.openstack.org/#/c/130916/9/keystonemiddleware/tests/test_auth_token_middleware.py20:22
*** henrynash has joined #openstack-keystone20:22
*** ChanServ sets mode: +v henrynash20:22
bknudsonit seems weird but it doesn't seem totally wrong either, and sets us up for future.20:23
ayoungI forget why I filed that.  Vacaction has wiped my memory20:23
ayoungI really need to go back to evesdrop to find the context20:23
bknudsonI can't get to the hackathon page using firefox -- https://www.morganfainberg.com/blog/2014/11/18/keystone-hackathon-kilo/20:24
bknudson(Error code: ssl_error_inappropriate_fallback_alert)20:24
jamielennoxwe had talked about it previously, i think you filed it as a placeholder as something to be fixed20:24
morganfainbergThat is an issue with cloud flare.20:25
*** jistr has quit IRC20:25
morganfainbergbknudson: I can't actually fix it.20:25
*** _cjones_ has quit IRC20:25
bknudsonI'll try it on a different system later20:25
morganfainbergFirefox is being picky about an ssl certificate with a deprecated cn or something.20:26
adam_ganyone have any hints as to why icehouse jobs are failing on a keyring dependency? http://logs.openstack.org/periodic-stableperiodic-keystone-python27-icehouse/527351e/console.html#_2015-01-06_06_08_08_61720:26
jamielennoxbknudson: works for me20:27
bknudsonadam_g: https://review.openstack.org/#/c/144182/20:27
*** dgonzalez has joined #openstack-keystone20:27
adam_gbknudson, didnt see that, great. thanks20:27
jamielennoxmorganfainberg: ah - that cert is a little weird20:28
*** tellesnobrega has quit IRC20:28
jamielennoxhave you looked through it?20:28
morganfainbergjamielennox: it is. It is provided by cloudflare. I don't pay for it :P20:29
morganfainbergI can fix it, but it requires a lot of updating stuff.20:29
morganfainbergAnd will likely break some redirects I have.20:29
jamielennoxi don't see it'll be a problem - it's obviously a SNI cert however it's alt names are:20:29
jamielennoxNot Critical20:29
jamielennoxDNS Name: sni11394.cloudflaressl.com20:29
jamielennoxDNS Name: *.cupcake4you.de20:29
jamielennoxDNS Name: *.dailylike.it20:29
jamielennoxDNS Name: *.dailylikeit.com20:29
jamielennoxDNS Name: *.morganfainberg.com20:29
jamielennoxDNS Name: *.superbeting.com20:29
jamielennoxDNS Name: *.theafricaneconomie.com20:29
jamielennoxDNS Name: *.ugurcaki.com20:29
jamielennoxDNS Name: cupcake4you.de20:29
jamielennoxDNS Name: dailylike.it20:29
jamielennoxDNS Name: dailylikeit.com20:29
jamielennoxDNS Name: morganfainberg.com20:29
jamielennoxDNS Name: superbeting.com20:29
jamielennoxDNS Name: theafricaneconomie.com20:29
jamielennoxDNS Name: ugurcaki.com20:29
morganfainbergYep.20:29
jamielennoxi just don't see why they'd bother rather than just issue one per site20:30
morganfainberg*shrug*20:30
morganfainbergLazy?20:31
jamielennoxnot sure, seems like they've had to batch requests.. whatever doesn't matter20:31
*** dgonzalez has quit IRC20:32
ayoungjamielennox, I just looked through the logs on the on 20-21st of October (when I filed the bug) and while we discussed something along those lines, I don't see the bug explicitly mentioned in the discussion20:32
jamielennoxmorganfainberg, bknudson: so i added a bunch of reviews to the blocking list. doable by the end of Jan? anything you know missing?20:32
bknudsonChanges merged in the last 90 days: 302 (3.4/day) -- the current rate is 3 changes merged per day20:34
bknudsonthat's from http://russellbryant.net/openstack-stats/keystone-reviewers-90.txt20:34
jamielennoxdolphm: i don't have anything reviews yet but it'd be good to add python-keystoneclient-kerberos and -federation to that list20:34
jamielennoxor just python-keystoneclient* if that's something that can be done20:34
ayoungbknudson, you might have some insight:  I'm trying to automatically create a project entry upon created_domain with a project_id that == domain id.  This works fine for SQL.  LDAP...no create_domain supported.  Which means all our tests are wonky, as they check for number of projects and the LDAP numbers are different from SQL.  For LDAP, should I create a magic project in driver?20:36
jamielennoxbknudson: that seems high for client, i think that list includes keystone20:37
bknudsonayoung: domains aren't supported in keystone (only default domain)20:37
ayoungbknudson, I know20:37
ayoungbknudson, the issue is that list_projects20:38
ayoungfor SQL it will be +1 vs LDAP20:38
ayoung default domain is still a project in SQL, not in LDAP20:38
bknudsonayoung: a magic default domain / project?20:39
ayoungit would probably be easier to deprecate LDAP assignments than get these tests to pass for LDAP20:39
ayoungbknudson, yep20:39
bknudsonayoung: that makes sense.20:39
bknudson(both your statements)20:39
mfischjamielennox: thanks for your blog post on auth_uri fragments, but if I use identity_uri do I still need auth_uri defined?20:39
bknudsonthis is where I was saying we should either support it or not, not some half-way supported mes.20:39
bknudsonmess20:39
jamielennoxmfisch: yes - identity_uri is generally the admin url so :35357, auth_uri is returned in the headers of 401 responses and so should be the public :5000 url20:40
mfischaha yes, I see that now20:40
mfischthanks20:40
mfischtrying to fix puppet here20:40
jamielennoxheat and a few others rely on auth_uri being set correctly20:41
ayoungwith Identity, we cerate a domain in the SQL backend, and then load a config file for the user data.   For assignments, there is no such clean separation.  There is only one Domain, and projects are in the subtree20:41
*** tellesnobrega has joined #openstack-keystone20:41
*** _cjones_ has joined #openstack-keystone20:42
*** nellysmitt has joined #openstack-keystone20:43
*** pcaruana is now known as pcaruana|afk|20:45
*** nellysmitt has quit IRC20:48
openstackgerritMerged openstack/pycadf: deprecate audit middleware  https://review.openstack.org/13838620:55
*** zz_avozza is now known as avozza21:00
*** gyee has quit IRC21:00
*** _cjones_ has quit IRC21:05
*** thedodd has quit IRC21:06
*** thedodd has joined #openstack-keystone21:07
*** _cjones_ has joined #openstack-keystone21:18
*** henrynash has quit IRC21:18
*** htruta has joined #openstack-keystone21:19
*** thedodd has quit IRC21:22
*** thedodd has joined #openstack-keystone21:23
*** _cjones_ has quit IRC21:25
mfischjamielennox: I cannot figure how to add people in the new UI, but wrt the identity_uri discussion: https://review.openstack.org/#/c/145333/21:26
*** russellb has joined #openstack-keystone21:27
jamielennoxmfisch: that looks fine to me21:27
jamielennoxat least in regards to the identity_uri bit21:27
jamielennoxmfisch: you shouldn't be configuring auth_token middleware via paste.ini though, you should do it via the CONF file21:28
*** dgonzalez has joined #openstack-keystone21:28
mfischyeah there's a few other issues that need to be resolved, I'll look at that one21:29
mfischjamielennox: when did that stuff get moved?21:30
mfischthere's no deprecation for it being in api-paste (which is what triggered this)21:30
jamielennoxmfisch: which stuff?21:30
*** _cjones_ has joined #openstack-keystone21:31
jamielennoxoh - yea, it still works and there isn't a deprecation notice because it would trigger with how some of the newer service like marconi specify there CONF21:31
jamielennoxit's always been available in the CONF file under the keystone_authtoken group, it's been that way in devstack for a long time21:32
jamielennoxi don't know if there was an official move21:32
mfischno deprecation notice honestly means back of the line for me ;)21:32
jamielennoxmfisch: sure21:32
mfischI mean I have more issues to fix but I'll bring this up since it affects presumably all services21:32
jamielennoxactually and now that i think about it i might have a way to put a deprecation notice in there21:32
*** dgonzalez has quit IRC21:33
*** _cjones_ has quit IRC21:35
*** bernardo-silva has quit IRC21:51
morganfainbergnkinder: ping - going to want to get your eyes on a spec will follow up with you a bit later on.21:51
nkindermorganfainberg: sounds good21:52
morganfainbergnkinder: more security focused eyes to be specific.21:52
morganfainbergAnyways back to the meeting I'm in.21:52
*** _cjones_ has joined #openstack-keystone21:52
*** russellb has left #openstack-keystone21:53
*** samueldmq has quit IRC21:53
morganfainbergnkinder, need to get some eyes on https://review.openstack.org/#/c/134839/ and make sure we've covered the comments that are still applicable from the keystone spec proposed a while ago22:09
*** gyee has joined #openstack-keystone22:14
*** ChanServ sets mode: +v gyee22:14
*** sriram has quit IRC22:16
*** topol has quit IRC22:22
*** joesavak has quit IRC22:22
*** dims_ has joined #openstack-keystone22:28
*** dgonzalez has joined #openstack-keystone22:29
*** gordc has quit IRC22:29
openstackgerritBrant Knudson proposed openstack/keystone: Refactor keystone-all and http/keystone  https://review.openstack.org/6227522:30
*** dims__ has quit IRC22:32
*** dgonzalez has quit IRC22:33
*** arunkant has joined #openstack-keystone22:41
openstackgerritBrant Knudson proposed openstack/keystonemiddleware: Refactor extract class for signing directory  https://review.openstack.org/12228122:44
openstackgerritBrant Knudson proposed openstack/keystonemiddleware: Refactor auth_token revocation list members to new class  https://review.openstack.org/10240322:45
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf: Updated from global requirements  https://review.openstack.org/14271422:51
*** timcline_ has quit IRC22:56
*** bknudson has quit IRC23:02
openstackgerritMorgan Fainberg proposed openstack/keystone-specs: Replace the concept of extensions in Keystone.  https://review.openstack.org/13380923:05
*** nkinder has quit IRC23:14
*** packet has quit IRC23:17
*** chrisshattuck has quit IRC23:20
*** stevemar has quit IRC23:20
*** erkules has quit IRC23:20
*** amerine has quit IRC23:20
*** rharwood has quit IRC23:21
*** radez has quit IRC23:21
*** notmyname has quit IRC23:21
*** esmute has quit IRC23:21
*** tsufiev has quit IRC23:21
*** jell has quit IRC23:21
*** csd has quit IRC23:21
*** wolsen has quit IRC23:21
*** dstanek has quit IRC23:21
*** mkoderer has quit IRC23:21
*** achudnovets has quit IRC23:21
*** afazekas has quit IRC23:21
*** jdennis has quit IRC23:21
*** swartulv has quit IRC23:21
*** redrobot has quit IRC23:21
*** therve has quit IRC23:21
*** ekarlso- has quit IRC23:21
*** grantbow has quit IRC23:21
*** telemonster has quit IRC23:21
*** jell has joined #openstack-keystone23:21
*** esmute has joined #openstack-keystone23:21
*** csd has joined #openstack-keystone23:21
*** jell is now known as Guest3874223:21
*** chrisshattuck has joined #openstack-keystone23:21
*** mkoderer has joined #openstack-keystone23:21
*** wolsen has joined #openstack-keystone23:21
*** stevemar has joined #openstack-keystone23:21
*** ChanServ sets mode: +v stevemar23:21
*** rharwood has joined #openstack-keystone23:21
*** tsufiev has joined #openstack-keystone23:21
*** achudnovets has joined #openstack-keystone23:22
*** radez has joined #openstack-keystone23:22
*** notmyname has joined #openstack-keystone23:22
*** afazekas has joined #openstack-keystone23:22
*** jdennis has joined #openstack-keystone23:22
*** swartulv has joined #openstack-keystone23:22
*** redrobot has joined #openstack-keystone23:22
*** therve has joined #openstack-keystone23:22
*** ekarlso- has joined #openstack-keystone23:22
*** telemonster has joined #openstack-keystone23:22
*** grantbow has joined #openstack-keystone23:22
*** amerine has joined #openstack-keystone23:23
*** boris-42 has quit IRC23:24
*** lufix2 has quit IRC23:24
*** swartulv has quit IRC23:24
*** amerine has quit IRC23:24
*** amerine has joined #openstack-keystone23:25
*** boris-42 has joined #openstack-keystone23:26
*** ayoung has quit IRC23:27
*** swartulv has joined #openstack-keystone23:27
*** dgonzalez has joined #openstack-keystone23:29
*** lufix has joined #openstack-keystone23:32
*** chrisshattuck has quit IRC23:32
*** dgonzalez has quit IRC23:34
*** thedodd has quit IRC23:42
*** dims_ has quit IRC23:48
*** dims__ has joined #openstack-keystone23:53
openstackgerritMerged openstack/keystone: Ensure manager grant methods throw exception if role_id is invalid.  https://review.openstack.org/14465823:54
*** dstanek has joined #openstack-keystone23:55
*** ChanServ sets mode: +v dstanek23:55
*** erkules has joined #openstack-keystone23:56
*** mattfarina has quit IRC23:57
*** dkingshott has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!