Tuesday, 2015-01-20

ayoungjamielennox, and now we are at quitting time00:00
*** lhcheng has quit IRC00:00
*** ljfisher has quit IRC00:00
jamielennoxmuch progress?00:00
ayounglots00:00
ayoungjamielennox, I'll sned etherpad link00:00
jamielennoxayoung: please mention that client reviews are welcome - that i have access to the blocking reviews page now so prioritize the ones in channel title00:01
*** henrynash has quit IRC00:01
jamielennoxwe're aiming for a release every start of month and we're not even part way there00:01
dstanekayoung: sned it over here too00:01
ayounghttp://etherpad.openstack.org/p/keystone-kilo-hackathon00:01
*** bknudson has quit IRC00:01
marekdjamielennox: https://review.openstack.org/#/c/130564 -> want to look ?00:02
*** atiwari has quit IRC00:02
*** atiwari has joined #openstack-keystone00:02
ayoungdstanek, go sned yourself00:02
jamielennoxmarekd: ah - wil ldo00:02
jamielennoxmarekd: just quick glance that looks good00:04
jamielennoxmorganfainberg: have you ever released python-keystoneclient-kerberos>00:04
jamielennox?00:04
morganfainbergNo. I can as long as we have testing coverage.00:05
morganfainbergHappy to do so.00:05
jamielennoxmorganfainberg: it's been unchanged for a while - i *think* it's tested, even if you mark it 0.1 or something i think we should release00:05
jamielennoxone of my jobs for this week is to setup a kerberized horizon that will use it00:05
morganfainbergSure.00:06
morganfainbergI'll release tomorrow or tonight or something.00:06
*** nkinder has joined #openstack-keystone00:06
jamielennoxmorganfainberg: no rush, something that i've noticed and we need to do start pushing this federation stuff to keystoneclient-kerberos00:07
*** dims__ has quit IRC00:07
*** diegows has joined #openstack-keystone00:07
*** atiwari has quit IRC00:07
*** stevemar has quit IRC00:11
jamielennoxmarekd: are you at the hackathon?00:13
*** jaosorior has quit IRC00:13
*** ayoung has quit IRC00:13
*** henrynash has joined #openstack-keystone00:17
*** ChanServ sets mode: +v henrynash00:17
*** topol has quit IRC00:27
*** dims__ has joined #openstack-keystone00:43
*** thedodd has joined #openstack-keystone00:44
*** thedodd has quit IRC00:44
*** rwsu has joined #openstack-keystone00:48
*** afazekas has joined #openstack-keystone01:05
openstackgerrithenry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL.  https://review.openstack.org/12323801:11
openstackgerrithenry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL.  https://review.openstack.org/12323801:12
*** afazekas has quit IRC01:12
*** abhirc has quit IRC01:15
*** junhongl has quit IRC01:32
*** packet has quit IRC01:32
*** harlowja_away is now known as harlowja01:32
*** ncoghlan has joined #openstack-keystone01:45
*** abhirc has joined #openstack-keystone01:47
*** samueldmq has joined #openstack-keystone01:52
*** rwsu has quit IRC02:01
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Adds inherited column to RoleAssignment PK  https://review.openstack.org/14247202:01
samueldmqhenrynash, ^ comments addressed, thx02:01
*** dims__ has quit IRC02:15
*** junhongl has joined #openstack-keystone02:16
*** _cjones_ has quit IRC02:21
*** erkules_ has joined #openstack-keystone02:33
*** erkules has quit IRC02:35
*** KanagarajM has joined #openstack-keystone02:52
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Adds inherited column to RoleAssignment PK  https://review.openstack.org/14247202:55
*** lhcheng has joined #openstack-keystone03:34
*** radez is now known as radez_g0n303:40
*** diegows has quit IRC03:40
*** harlowja is now known as harlowja_away03:49
*** samueldmq has quit IRC04:05
*** lhcheng has quit IRC04:18
*** chlong has quit IRC04:19
*** henrynash_ has joined #openstack-keystone04:19
*** ChanServ sets mode: +v henrynash_04:19
*** henrynash has quit IRC04:21
*** henrynash_ is now known as henrynash04:21
*** avozza is now known as zz_avozza04:24
*** chlong has joined #openstack-keystone04:28
*** chrisshattuck has joined #openstack-keystone04:29
*** rushiagr_away is now known as rushiagr04:34
*** chrisshattuck has quit IRC04:43
*** david-lyle has joined #openstack-keystone05:15
*** henrynash has quit IRC05:25
*** jaosorior has joined #openstack-keystone06:05
*** MasterPiece has joined #openstack-keystone06:23
*** nkinder has quit IRC06:32
*** zz_avozza is now known as avozza06:53
*** ajayaa has joined #openstack-keystone06:56
*** david-lyle has quit IRC06:57
*** avozza is now known as zz_avozza07:24
*** ajayaa has quit IRC07:28
*** david-lyle has joined #openstack-keystone07:31
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Enable hacking rule F821  https://review.openstack.org/13409607:32
*** david-lyle has quit IRC07:35
*** chlong has quit IRC07:41
*** david-lyle has joined #openstack-keystone07:42
*** erkules_ is now known as erkules07:44
*** ajayaa has joined #openstack-keystone07:45
*** david-lyle has quit IRC07:47
*** stevemar has joined #openstack-keystone07:49
*** ChanServ sets mode: +v stevemar07:49
*** david-lyle has joined #openstack-keystone08:01
*** david-lyle has quit IRC08:05
*** zz_avozza is now known as avozza08:17
*** krykowski has joined #openstack-keystone08:21
*** krykowski has quit IRC08:25
*** jamielennox is now known as jamielennox|away08:28
*** krykowski has joined #openstack-keystone08:30
*** oomichi has quit IRC08:42
*** avozza is now known as zz_avozza08:50
*** zz_avozza is now known as avozza08:50
*** nellysmitt has joined #openstack-keystone09:00
*** ajayaa has quit IRC09:04
openstackgerritwanghong proposed openstack/keystone: move region and service exist checks into manager layer  https://review.openstack.org/14197709:09
*** stevemar has quit IRC09:11
*** david-lyle has joined #openstack-keystone09:19
*** ajayaa has joined #openstack-keystone09:22
*** nellysmitt has quit IRC09:25
*** chlong has joined #openstack-keystone09:28
*** jistr has joined #openstack-keystone09:35
*** avozza is now known as zz_avozza09:37
*** ncoghlan has quit IRC09:38
*** zz_avozza is now known as avozza09:40
*** krykowski has quit IRC09:48
*** afazekas has joined #openstack-keystone10:02
*** krykowski has joined #openstack-keystone10:05
*** nellysmitt has joined #openstack-keystone10:15
QlawyIs there any way to check efective roles on trusted token?10:24
*** andreaf has quit IRC10:27
QlawyWe are using redelegation, and trying to create stack using token generated from trust10:31
Qlawyhowever heat responses with 403: Access was denied to this resource.10:31
*** andreaf has joined #openstack-keystone10:32
Qlawyuh... it does not even work with admin token10:32
Qlawyok It might be my bad (as always ;) )10:33
openstackgerritwanghong proposed openstack/python-keystoneclient: fix enabled parameter of update doesn't default to None  https://review.openstack.org/14442210:38
QlawyWARNING keystone.common.wsgi [-] Remaining redelegation depth of %(redelegation_depth)d out of allowed range of [0..%(max_count)d] (Disable debug mode to suppress these details.)10:41
Qlawyis this OK?10:41
Qlawybeacuse heat got Error 500 "due to this"10:42
Qlawy2015-01-20 11:40:22.175 3427 ERROR root [req-af34d3d4-7924-46b9-84ee-4916bcacd033 ] Unexpected error occurred serving API: Remote error: Remote error: Forbidden Remaining redelegation depth of %(redelegation10:42
Qlawy_depth)d out of allowed range of [0..%(max_count)d] (Disable debug mode to suppress these details.) (HTTP 403)10:42
*** ajayaa has quit IRC10:48
*** ajayaa has joined #openstack-keystone11:04
openstackgerritBogun Dmitriy proposed openstack/keystone: FIX multiple SQL backend usage validation  https://review.openstack.org/13811311:09
*** dims__ has joined #openstack-keystone11:09
*** krykowski has quit IRC11:10
*** dims__ has quit IRC11:11
openstackgerritwanghong proposed openstack/python-keystoneclient: make req_ref doesn't require id  https://review.openstack.org/14849911:11
*** dims__ has joined #openstack-keystone11:11
*** krykowski has joined #openstack-keystone11:25
*** dims__ has quit IRC11:28
*** aix has joined #openstack-keystone11:33
*** tellesnobrega_ has quit IRC11:42
openstackgerritDavid Chadwick proposed openstack/keystone-specs: Self Management of Roles and Domain Scoped Roles  https://review.openstack.org/14207211:43
*** atiwari has joined #openstack-keystone11:46
*** atiwari has quit IRC11:51
*** atiwari has joined #openstack-keystone11:53
*** lsmola_ has quit IRC11:57
*** krykowski has quit IRC12:00
*** lsmola has joined #openstack-keystone12:01
*** atiwari has quit IRC12:07
*** tellesnobrega_ has joined #openstack-keystone12:08
*** KanagarajM has quit IRC12:12
*** Tahmina has joined #openstack-keystone12:13
*** pcaruana has joined #openstack-keystone12:17
openstackgerritBogun Dmitriy proposed openstack/keystone: FIX multiple SQL backend usage validation  https://review.openstack.org/13811312:18
openstackgerritAjaya Agrawal proposed openstack/keystone-specs: Spec for distributed database driver  https://review.openstack.org/14852112:24
marekdjamielennox|away: yes, i am at the hackathon.12:25
*** krykowski has joined #openstack-keystone12:30
openstackgerritAjaya Agrawal proposed openstack/keystone-specs: Spec for distributed database driver  https://review.openstack.org/14852112:31
*** dims__ has joined #openstack-keystone12:32
*** diegows has joined #openstack-keystone12:32
*** afazekas_ has joined #openstack-keystone12:36
*** tellesnobrega has quit IRC12:46
*** tellesnobrega has joined #openstack-keystone12:52
*** raildo has quit IRC12:52
*** raildo has joined #openstack-keystone12:55
*** afazekas_ has quit IRC12:56
*** markvoelker has joined #openstack-keystone13:06
*** bjornar has quit IRC13:09
*** gabriel-bezerra has quit IRC13:11
*** gabriel-bezerra has joined #openstack-keystone13:11
*** bjornar has joined #openstack-keystone13:13
*** henrynash has joined #openstack-keystone13:13
*** ChanServ sets mode: +v henrynash13:13
*** MasterPiece has quit IRC13:16
*** rushiagr is now known as rushiagr_away13:19
*** raildo has quit IRC13:19
*** EmilienM|afk is now known as EmilienM13:21
*** krykowski has quit IRC13:22
*** ajayaa has quit IRC13:24
*** krykowski has joined #openstack-keystone13:28
*** atiwari has joined #openstack-keystone13:29
*** raildo has joined #openstack-keystone13:35
*** atiwari has quit IRC13:37
openstackgerrithenry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL.  https://review.openstack.org/12323813:45
*** ljfisher has joined #openstack-keystone13:49
*** samueldmq-away is now known as samueldmq13:54
openstackgerritRodrigo Duarte proposed openstack/keystone: Implements parents_ids query param  https://review.openstack.org/14856713:54
rodrigodssamueldmq, raildo ^13:54
samueldmqrodrigods, will take a look, thx13:54
raildorodrigods, :D13:56
*** zzzeek has joined #openstack-keystone13:56
rodrigodsmorganfainberg, added some topics about HMT in the hackathon etherpad13:57
*** krykowski has quit IRC13:58
rodrigodsmorganfainberg, me, samueldmq and raildo are in remote hackathon mode as well :)13:58
*** abhirc_ has joined #openstack-keystone13:58
morganfainbergYeah. We will be discussing the reseller spec today. Unfortunately the room and setup here is far from ideal to get a Google hangout together.13:59
morganfainbergAnd hmt enhancements13:59
marekdmorganfainberg: need your opinon on https://review.openstack.org/#/c/148229/4/specs/kilo/idp-id-registration.rst line 11714:00
rodrigodsmorganfainberg, :( np, you can ping us here14:00
rodrigodsand discuss stuff14:00
*** abhirc has quit IRC14:00
raildomorganfainberg, sure, any time, you can ping us.14:01
*** krykowski has joined #openstack-keystone14:01
*** radez_g0n3 is now known as radez14:02
*** sriram has joined #openstack-keystone14:11
QlawyI think last comment in https://review.openstack.org/#/c/126897/ might be important14:12
openstackgerrithenry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL.  https://review.openstack.org/12323814:12
QlawyWhen trying to deploy stack using trust (stack creator is already trustee) heat returns: Remote error: InternalServerError An unexpected error prevented the server from fulfilling your request: 'id' (Disable debug mode to suppress these details.) (HTTP 500)14:13
Qlawytrust is impersonated and allow_redelegation is true14:13
Qlawyand redelegation_count > 014:14
*** abhirc_ has quit IRC14:20
*** abhirc has joined #openstack-keystone14:21
*** mattfarina has joined #openstack-keystone14:28
*** MasterPiece has joined #openstack-keystone14:31
*** abhirc has quit IRC14:36
*** ajayaa has joined #openstack-keystone14:38
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone-specs: Reseller  https://review.openstack.org/13982414:45
*** henrynash has quit IRC14:46
*** abhirc has joined #openstack-keystone14:55
*** rushiagr_away is now known as rushiagr14:57
*** krykowski_ has joined #openstack-keystone14:58
*** krykowski has quit IRC14:59
*** abhirc has quit IRC14:59
openstackgerritMerged openstack/python-keystoneclient: Enable hacking rule F821  https://review.openstack.org/13409614:59
*** tellesnobrega_ has quit IRC15:00
*** abhirc has joined #openstack-keystone15:00
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone-specs: Reseller  https://review.openstack.org/13982415:01
*** timcline has joined #openstack-keystone15:02
*** abhirc has quit IRC15:02
*** afazekas_ has joined #openstack-keystone15:02
*** timcline has quit IRC15:02
*** timcline has joined #openstack-keystone15:02
*** lhcheng has joined #openstack-keystone15:02
*** josecastroleon_ has joined #openstack-keystone15:03
*** atiwari has joined #openstack-keystone15:03
*** josecastroleon__ has joined #openstack-keystone15:04
*** josecastroleon has quit IRC15:07
*** josecastroleon has joined #openstack-keystone15:07
*** josecastroleon_ has quit IRC15:08
*** josecastroleon__ has quit IRC15:09
*** atiwari has quit IRC15:10
*** atiwari has joined #openstack-keystone15:10
*** afazekas_ has quit IRC15:11
*** lhcheng_ has joined #openstack-keystone15:13
*** lhcheng has quit IRC15:16
*** Ctina has joined #openstack-keystone15:16
*** diegows has quit IRC15:17
amakarovQlawy, hi! Can you please file a bug for it? It would be good to have heat and keystone logs there as I cant guess what happened: InternalServerError is an unexpected behavior and needs a way to reproduce and/or debug data15:27
*** atiwari has quit IRC15:29
amakarovQlawy, as I see in traceback, incorrect role structure is used with the trust, it seems a validation bug for me. Looking further in the code...15:33
*** atiwari has joined #openstack-keystone15:33
*** bjornar has quit IRC15:34
*** MasterPiece has quit IRC15:34
*** lhcheng_ is now known as lhcheng15:35
*** topol has joined #openstack-keystone15:36
*** ayoung has joined #openstack-keystone15:36
*** ChanServ sets mode: +v ayoung15:36
*** ChanServ sets mode: +v topol15:36
*** stevemar has joined #openstack-keystone15:36
*** ChanServ sets mode: +v stevemar15:36
*** gyee has joined #openstack-keystone15:38
*** atiwari has quit IRC15:38
*** ChanServ sets mode: +v gyee15:38
*** henrynash has joined #openstack-keystone15:38
*** ChanServ sets mode: +v henrynash15:38
*** stevemar has quit IRC15:40
*** stevemar has joined #openstack-keystone15:41
*** ChanServ sets mode: +v stevemar15:41
*** topol has quit IRC15:42
*** topol has joined #openstack-keystone15:45
*** stevemar has quit IRC15:45
*** ChanServ sets mode: +v topol15:45
*** stevemar2 has joined #openstack-keystone15:46
*** ChanServ sets mode: +v stevemar215:46
*** jorge_munoz has joined #openstack-keystone15:47
marekdstevemar2: https://review.openstack.org/#/c/148229/4/specs/kilo/idp-id-registration.rst -> need you opinoin around comments around line 117.15:47
stevemar2o/15:47
marekdstevemar2: \o15:48
*** stevemar2 is now known as stevemar15:48
bretonhow do we write it -- IdP, IDP or we don't care?15:48
marekdbreton: i think we sticked to IdP as it's "Identity Provider"15:49
marekdbreton: but i wouldnt take it as a major concern.15:50
*** marg7175 has quit IRC15:50
morganfainbergmarekd, i'm trying to read the comments around the line 11715:51
marekdmorganfainberg: sure, i understand you are bombed with such requests. Whenever you have time. I can wait.15:53
*** atiwari has joined #openstack-keystone15:56
raildohenrynash, ping, sorry, but I don't know if i understand your comment here https://review.openstack.org/#/c/139824/16/specs/kilo/reseller.rst, you think that I need to put which cloud martha are reselling?16:02
henrynashwe are currently reviewing the spec at the meetup…expect more comments16:02
raildohenrynash, ok, thanks16:02
henrynashpeopel where just confused as to who owns the cloud (which was my earlay concern)16:03
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Change oslo.config to oslo_config  https://review.openstack.org/14525216:04
raildohenrynash, in the example, martha owns the ProductionIT and resells to Joe (that own the WidgetMaster) and to Sam (that owns to  SuperDevShop) and they can resells for other users16:05
henrynashi know that….but just like me, everyone’s first question was “who owns the cloud”…and if we don’t list the lcoud owner, it is not obvious that MArtha is reselling…16:08
*** andreaf is now known as andreaf_16:09
raildohenrynash, ok, i get it, I don't explain who is the cloud owner that resell the cloud for martha..16:09
henrynashwell , that martha is reselling the cloud owner’s cloud (I think)16:10
raildohenrynash, yes16:10
*** thedodd has joined #openstack-keystone16:12
openstackgerritHenrique Truta proposed openstack/python-keystoneclient: Creating parameter to list inherited role assignments  https://review.openstack.org/11730016:12
*** krykowski_ has quit IRC16:16
*** dolphm changes topic to "http://opensax.com/"16:17
*** chrisshattuck has joined #openstack-keystone16:20
stevemarmarekd, ugh that is ugly16:21
marekdstevemar: what?16:22
dolphmmarekd: channel topic16:23
stevemarmarekd, the remote_entity_id problem16:24
marekddolphm: ++16:24
marekdstevemar: i know.16:24
marekdstevemar: i'd start being more picky about the protocol names.16:25
stevemarmarekd, hmm, i'd hate to do that though16:25
marekdstevemar: why?16:26
openstackgerritRodrigo Duarte proposed openstack/keystone: Implements parents_ids query param  https://review.openstack.org/14856716:26
openstackgerritRodrigo Duarte proposed openstack/keystone: Implements subtree_ids query param  https://review.openstack.org/14861816:26
marekdstevemar: i see no advantage in a fact that you can call your protocol "whathehellisthat" just because you want to.16:26
marekdand in fact use SAML216:26
stevemardont like being restrictive16:26
marekdstevemar: inmho in fact we are slowly going to actually support 2 protocols (saml2, oidc) and build code base around that directly in keystone.16:27
marekdstevemar: anyway, i just proposed 'something' and wanted to hear your opinion on that /cc morganfainberg16:28
marekd /cc dolphm: ^^16:28
raildotopol, I have a doubt regarding what do you comment in the reseller spec. what is the best solution if I find a  namespace clashing and Id clashing?16:29
*** tellesnobrega_ has joined #openstack-keystone16:29
raildotopol, I change the name or id and migrate?16:29
marekddolphm: https://review.openstack.org/#/c/148229/4/specs/kilo/idp-id-registration.rst line 117ish16:29
raildoI don't migrate and notify the user?16:29
topolraildo, ayoung says he will rewrite this section16:31
*** jorge_munoz has quit IRC16:31
topolwe agreed this at the hackathon16:31
raildotopol, ok, thank you.16:31
morganfainbergraildo, yeah that spec is mostly good, some minor verbiage changes and a little change in target16:33
morganfainbergraildo, but it wasn't a hard sell16:33
*** jorge_munoz has joined #openstack-keystone16:33
raildomorganfainberg, great :) I see some comments, I'll fix the spec and send a new patch16:34
*** richm has joined #openstack-keystone16:34
morganfainbergraildo, :) figured you'd like it16:34
raildomorganfainberg, I'm relieved, knowing that the guys liked the spec :) thanks16:35
morganfainbergyeah. it was mostly what we discussed at the sumit16:36
*** jorge_munoz has quit IRC16:36
morganfainbergwas an easy sell16:37
*** jorge_munoz has joined #openstack-keystone16:38
*** marg7175 has joined #openstack-keystone16:38
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Switch from oslo.utils to oslo_utils  https://review.openstack.org/14596816:38
*** bknudson has joined #openstack-keystone16:39
*** ChanServ sets mode: +v bknudson16:39
openstackgerritSteve Martinelli proposed openstack/keystone: Use oslo.policy and delete the sync'ed version  https://review.openstack.org/14862416:39
*** tellesnobrega_ has quit IRC16:39
*** abhirc has joined #openstack-keystone16:40
dstanektopol: sshhh - no questions please16:40
stevemardolphm, ^16:41
topolface palm16:43
*** afaranha has quit IRC16:43
openstackgerritguang-yee proposed openstack/keystone-specs: Tokenless authorization with X.509 SSL client certificate  https://review.openstack.org/10591316:48
*** joesavak has joined #openstack-keystone16:48
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Change oslo.serialization to oslo_serialization  https://review.openstack.org/14863216:49
*** dims__ has quit IRC16:51
*** andreaf has joined #openstack-keystone16:53
*** gordc has joined #openstack-keystone16:54
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Change oslo.config to oslo_config  https://review.openstack.org/14525216:56
*** atiwari has quit IRC16:56
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/14863816:57
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/14863916:58
*** jorge_munoz has quit IRC16:58
*** _cjones_ has joined #openstack-keystone17:00
openstackgerritAlexander Makarov proposed openstack/keystone: Chain a trust with a role specified by name  https://review.openstack.org/14864217:02
*** sriram has quit IRC17:03
dstaneki was originally thinking that we'd have different tox targets for each major functional test configurations (ldap, federation, etc.), but now i'm thinking that's probably too much17:06
*** dims__ has joined #openstack-keystone17:06
*** rwsu has joined #openstack-keystone17:08
openstackgerritDavid Stanek proposed openstack/keystone-specs: functional testing support  https://review.openstack.org/14760817:08
*** Tahmina has quit IRC17:09
openstackgerritAlexander Makarov proposed openstack/keystone: Chain a trust with a role specified by name  https://review.openstack.org/14864217:10
*** thedodd has quit IRC17:10
*** marg7175 has quit IRC17:10
*** marg7175 has joined #openstack-keystone17:11
openstackgerritAlexander Makarov proposed openstack/keystone: Chain a trust with a role specified by name  https://review.openstack.org/14864217:11
*** jorge_munoz has joined #openstack-keystone17:12
Qlawyamakarov: I will post more information tommorow, ok?17:15
Qlawyamakarov: I dont have access to that env now17:15
ajayaamorganfainberg, ayoung, dstanek, Can you please review https://review.openstack.org/#/c/148521/?17:16
amakarovQlawy, actually, I've just fixed it :)17:16
Qlawyamakarov: great :D17:16
Qlawyamakarov: so I will check if it works tommorow ;)17:16
amakarovQlawy, https://review.openstack.org/14864217:16
amakarovQlawy, it still needs to be merged17:17
*** rushiagr is now known as rushiagr_away17:17
Qlawyamakarov: I can always set patch manually ;)17:17
amakarovQlawy, and all our cores are in the mid-cycle :)17:18
amakarovnp, feel free to test ;)17:18
Qlawy:)17:18
QlawyI will inform you about it17:18
amakarovQlawy, appreciate that!17:19
dstanekajayaa: sure...i've added it to my queue17:20
ajayaadstanek, thanks!17:20
dstanekajayaa: it may take a little bit since we are in the mid-cycle meeting today17:20
ajayaadstanek, okay. np.17:21
*** avozza is now known as zz_avozza17:23
openstackgerritBrant Knudson proposed openstack/oslo.policy: Fix tests  https://review.openstack.org/14866417:24
openstackgerritBrant Knudson proposed openstack/oslo.policy: Fix tests  https://review.openstack.org/14866417:28
*** thedodd has joined #openstack-keystone17:35
openstackgerritBrant Knudson proposed openstack/oslo.policy: Update .gitignore  https://review.openstack.org/14867117:37
*** sriram has joined #openstack-keystone17:39
*** _cjones_ has quit IRC17:41
*** _cjones_ has joined #openstack-keystone17:41
*** ajayaa has quit IRC17:43
samueldmqhenrynash, should we update release notes to expose the performance improvement on list role assig?17:44
henrynashsamueldmq: i don’t think so….17:45
samueldmqhenrynash, ok17:45
openstackgerritArun Kant proposed openstack/keystone-specs: Spec for adding Barbican service as Keystone credential backend.  https://review.openstack.org/14867217:53
openstackgerritDavid Stanek proposed openstack/keystone-specs: functional testing support  https://review.openstack.org/14760817:53
*** aix has quit IRC17:55
*** pcaruana has quit IRC18:00
*** zz_avozza is now known as avozza18:01
dstanekanteaya: i took a look at the neutron stuff last night and found that they are doing hooks almost the same way that i was18:02
dstanekanteaya: their job http://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/jobs/neutron-functional.yaml calls out to a reusable shell script http://git.openstack.org/cgit/openstack/neutron/tree/neutron/tests/contrib/gate_hook.sh18:03
* anteaya looks18:05
*** marg7175 has quit IRC18:07
* anteaya notes this script executes within a venv and won't execute if no venv is available18:08
*** chlong has quit IRC18:08
dstanekanteaya: this on too http://git.openstack.org/cgit/openstack/neutron/tree/neutron/tests/contrib/post_test_hook.sh18:08
*** marg7175 has joined #openstack-keystone18:10
anteayadstanek: so precident, yay!18:11
anteayathe script execution within a venv is very important here I think18:11
anteayaare you able to run the neutron functional tests locally, do you know?18:11
dstaneki'm still glad that i split up the reviews because if will allow for better infra conversations18:11
dstaneki have not tried...yet18:12
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone-specs: Reseller  https://review.openstack.org/13982418:12
anteayadstanek: agreed18:12
anteayadstanek: fair enough18:13
anteayamight I suggest asking marun in -neutron?18:13
anteayahe wrote this18:13
*** zzzeek has quit IRC18:13
*** jistr has quit IRC18:14
dstanekanteaya: they do run locally!18:16
anteayadstanek: awesome18:16
anteayadstanek: good research18:16
dstanekanteaya: when i deep dive into this i'll ping marun18:16
anteayadstanek: fair enough18:16
*** avozza is now known as zz_avozza18:20
*** harlowja_away is now known as harlowja18:24
*** timcline has quit IRC18:26
openstackgerritMerged openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/14863918:28
*** gyee has quit IRC18:30
*** henrynash has quit IRC18:30
*** marg7175_ has joined #openstack-keystone18:32
*** bknudson has quit IRC18:32
*** tellesnobrega_ has joined #openstack-keystone18:33
*** jorge_munoz has quit IRC18:33
*** _cjones_ has quit IRC18:33
*** lhcheng has quit IRC18:34
*** _cjones_ has joined #openstack-keystone18:34
*** marg7175 has quit IRC18:35
*** thedodd has quit IRC18:37
*** joesavak has quit IRC18:41
*** amakarov is now known as amakarov_away18:44
*** marg7175 has joined #openstack-keystone18:53
*** dims__ has quit IRC18:54
*** marg7175 has quit IRC18:56
*** marg7175 has joined #openstack-keystone18:56
*** marg7175_ has quit IRC18:57
*** marg7175 has quit IRC19:03
*** marg7175 has joined #openstack-keystone19:06
*** xxj has quit IRC19:08
*** xxj has joined #openstack-keystone19:09
*** lsmola has quit IRC19:09
*** packet has joined #openstack-keystone19:16
*** marg7175 has quit IRC19:16
*** lsmola has joined #openstack-keystone19:23
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone-specs: Improve list role assignments filters performance  https://review.openstack.org/14870019:26
samueldmqayoung, morganfainberg as decided yesterday on midcycle, I created the spec to improve list role assignments performance ^19:26
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone-specs: Improve list role assignments filters performance  https://review.openstack.org/14870019:28
*** tellesnobrega_ has quit IRC19:30
*** marg7175 has joined #openstack-keystone19:30
*** _cjones_ has quit IRC19:31
*** marg7175 has quit IRC19:35
*** david-lyle has quit IRC19:37
*** thedodd has joined #openstack-keystone19:40
*** _cjones_ has joined #openstack-keystone19:41
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/14863819:41
*** openstackstatus has joined #openstack-keystone19:45
*** ChanServ sets mode: +v openstackstatus19:45
*** zzzeek has joined #openstack-keystone19:46
*** ljfisher has quit IRC19:52
*** marg7175 has joined #openstack-keystone19:52
*** ljfisher has joined #openstack-keystone19:52
-openstackstatus- NOTICE: Gerrit restarted to address likely memory leak leading to server slowness. Sorry if you were caught in the restart19:53
*** dims__ has joined #openstack-keystone19:55
*** marg7175 has quit IRC19:59
*** lhcheng has joined #openstack-keystone19:59
*** dims__ has quit IRC19:59
*** marg7175 has joined #openstack-keystone20:00
*** atiwari has joined #openstack-keystone20:00
*** shakamunyi has joined #openstack-keystone20:00
*** marg7175 has quit IRC20:00
*** lhcheng_ has joined #openstack-keystone20:01
*** nellysmitt has quit IRC20:02
*** nellysmitt has joined #openstack-keystone20:02
*** marg7175 has joined #openstack-keystone20:02
*** lhcheng has quit IRC20:04
*** gyee has joined #openstack-keystone20:10
*** ChanServ sets mode: +v gyee20:10
*** tellesnobrega_ has joined #openstack-keystone20:11
*** lhcheng_ is now known as lhcheng20:12
*** _cjones_ has quit IRC20:13
*** shakamunyi has quit IRC20:17
*** _cjones_ has joined #openstack-keystone20:17
openstackgerritayoung proposed openstack/oslo.policy: imports in alphabetaical order  https://review.openstack.org/14870920:18
*** dims__ has joined #openstack-keystone20:19
*** shakamunyi has joined #openstack-keystone20:19
*** shakamunyi has quit IRC20:20
openstackgerritRodrigo Duarte proposed openstack/keystone: Implements subtree_ids query param  https://review.openstack.org/14861820:20
*** nellysmitt has quit IRC20:20
*** shakamunyi has joined #openstack-keystone20:21
*** timcline has joined #openstack-keystone20:24
*** joesavak has joined #openstack-keystone20:24
*** henrynash has joined #openstack-keystone20:24
*** ChanServ sets mode: +v henrynash20:24
*** gsilvis has joined #openstack-keystone20:25
samueldmqhenrynash, ping - I submitted the spec for list assignments20:26
samueldmqhenrynash, https://review.openstack.org/14870020:26
henrynashjust reading it!20:26
samueldmq++20:26
*** timcline has quit IRC20:27
*** tellesnobrega_ has quit IRC20:27
openstackgerritIan Cordasco proposed openstack/oslo.policy: Fix import error in oslo_policy.policy  https://review.openstack.org/14871320:28
*** bknudson has joined #openstack-keystone20:29
*** ChanServ sets mode: +v bknudson20:29
*** radez is now known as radez_g0n320:30
openstackgerritBrant Knudson proposed openstack/oslo.policy: Fix tests  https://review.openstack.org/14866420:33
openstackgerritguang-yee proposed openstack/keystone-specs: Tokenless authorization with X.509 SSL client certificate  https://review.openstack.org/10591320:33
*** ljfisher has quit IRC20:41
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone-specs: Improve list role assignments filters performance  https://review.openstack.org/14870020:46
*** shakamunyi has quit IRC20:46
*** dims_ has joined #openstack-keystone20:46
*** dims__ has quit IRC20:49
*** shakamunyi has joined #openstack-keystone20:57
*** raildo has quit IRC20:57
samueldmqhenrynash, have a min to talk about the split of assignment/resource tests?20:58
*** marg7175 has quit IRC21:07
*** thedodd has quit IRC21:08
*** Tahmina has joined #openstack-keystone21:10
*** marg7175 has joined #openstack-keystone21:12
*** radez_g0n3 is now known as radez21:13
*** marg7175 has quit IRC21:17
henrynashsamueldmq: ok…will do…21:17
*** marg7175 has joined #openstack-keystone21:18
openstackgerritMerged openstack/keystone-specs: Remove old-style role metadata structures from assignment.  https://review.openstack.org/14654621:22
*** tellesnobrega_ has joined #openstack-keystone21:22
*** thedodd has joined #openstack-keystone21:26
openstackgerritMarek Denis proposed openstack/keystone-specs: Visual Page for WebSSO  https://review.openstack.org/13352921:28
openstackgerritBrant Knudson proposed openstack/keystone: Use RequestBodySizeLimiter from oslo.middleware  https://review.openstack.org/14469721:32
*** tellesnobrega_ has quit IRC21:32
openstackgerritMerged openstack/keystone-specs: functional testing support  https://review.openstack.org/14760821:33
lbragstadbknudson: I'll fix the merge conflict https://review.openstack.org/#/c/133556/21:33
lbragstadcc dstanek  ^21:33
samueldmqhenrynash, so there is no big advantage on splitting role tests on test_v3_assignment, since role and assignment have the same controller and this test is for it21:34
henrynashok21:35
samueldmqhenrynash, in addition, role tests would be just the crud21:35
samueldmqhenrynash, but the backend... ah, that one deserves a big split21:35
henrynashi’m ok with that21:35
henrynashabsolutely!!!!21:35
samueldmqhenrynash, I'm planning to create test_backend_[role, assignment, resource, identity]21:35
larsks121:35
* larsks oopses.21:36
henrynashsounds good21:36
samueldmqhenrynash, and then  test_backend_[role, assignment, resource, identity]_[sql, ldap], that will inherit them ^21:36
samueldmqhenrynash, cool, just a last point :)21:37
samueldmqhenrynash, as we've pointed out on the spec, some methods duplicates the logic of inheritance/group expansion21:37
henrynashi wonder if there will be some itmes that might be hard to decide where they go? Iike FilterTests for instance21:37
samueldmqhenrynash, I'm planning to address this in a followon patch on my chain21:38
henrynashyes, follow on patch for those21:38
henrynashthey *might* even need a spec in their own right (or at least a blueprint)21:38
samueldmqhenrynash, great.. I've started that (just a bit) and I see we'll be able to completely remove _get_metadata from backends after that21:39
henrynashyep…I’ll to that removeal once you have list_assignments inthere21:39
openstackgerritguang-yee proposed openstack/keystone-specs: Tokenless authorization with X.509 SSL client certificate  https://review.openstack.org/10591321:40
samueldmqhenrynash, ok, I'll take care of the methods with duplicated logic, you grab the _metadata thing21:40
samueldmqhenrynash, sounds good to me :-)21:40
openstackgerritSteve Martinelli proposed openstack/keystone-specs: Visual Page for WebSSO  https://review.openstack.org/13352921:40
samueldmqhenrynash, thanks21:41
henrynashnp21:42
*** Tahmina has quit IRC21:42
openstackgerritRodrigo Duarte proposed openstack/keystone-specs: Recursive deletion and project disabling  https://review.openstack.org/14873021:44
samueldmqhenrynash, just saw remove-role-metadata bp, :-)21:44
henrynashyep, apprved!21:44
openstackgerritRodrigo Duarte proposed openstack/keystone-specs: Recursive deletion and project disabling  https://review.openstack.org/14873021:45
samueldmqhenrynash, will create a bp for those redundant methods21:45
henrynashyep21:45
*** tellesnobrega_ has joined #openstack-keystone21:45
samueldmqhenrynash, nice. need to go now, thanks21:46
*** samueldmq is now known as samueldmq-away21:46
henrynashok, thx21:46
*** stevemar has quit IRC21:46
*** ayoung has quit IRC21:47
rodrigodsdoes anyone know how can I draw a nice hierarchy representation without failing gate-docs tests? (see: https://review.openstack.org/#/c/148618/2/keystone/tests/test_v3_assignment.py)21:48
*** zz_avozza is now known as avozza21:51
openstackgerrithenry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL.  https://review.openstack.org/12323821:53
*** ayoung has joined #openstack-keystone21:53
*** ChanServ sets mode: +v ayoung21:53
morganfainbergrodrigods, there is a way to do it, but i don't know how.21:55
*** stevemar has joined #openstack-keystone21:55
*** ChanServ sets mode: +v stevemar21:55
morganfainbergstevemar, oh hai. welcome back21:55
rodrigodsmorganfainberg, :(21:55
stevemarmorganfainberg, howdy21:55
morganfainbergstevemar, *might* be able to give you ideas on how to do that, he's done all sorts of wacky docs stuff21:55
morganfainberg(voluntold stevemar there!)21:56
morganfainbergstevemar, https://review.openstack.org/#/c/148618/2/keystone/tests/test_v3_assignment.py docs21:56
rodrigodsstevemar, plz help me :(21:57
morganfainberghelp me stevemar, you're rodrigods' only hope21:57
stevemarrodrigods, lookin now21:57
dstanekgyee: stop writing bugs21:59
morganfainbergdstanek, ++21:59
rodrigodsayoung, I want to give +2 once in my life22:00
rodrigodsfor the first time22:00
rodrigodsmy +2 debut22:00
*** _cjones_ has quit IRC22:06
*** dims_ has quit IRC22:10
*** dims__ has joined #openstack-keystone22:11
dstanekbknudson: challenge accepted22:12
*** samueldmq has joined #openstack-keystone22:12
*** stevemar has quit IRC22:15
rodrigodsmorganfainberg, oh noo ^22:15
*** stevemar has joined #openstack-keystone22:15
*** ChanServ sets mode: +v stevemar22:15
rodrigodsstevemar, \o/ any idea? heh22:16
stevemarrodrigods, still playing around, not really sure22:16
morganfainbergmaybe make it a blockquote?22:16
rodrigodsstevemar, is there a command that I can run here to do my tentatives?22:17
stevemarrodrigods, yep, `tox -e docs`22:17
openstackgerritguang-yee proposed openstack/keystone-specs: Tokenless authorization with X.509 SSL client certificate  https://review.openstack.org/10591322:17
rodrigodsstevemar, thx! :)22:18
*** andreaf has quit IRC22:19
stevemarrodrigods, i think i'm on to something...22:24
rodrigodsstevemar, yay22:25
stevemarrodrigods, seems to work, one last run to make sure22:26
*** mattfarina has quit IRC22:27
openstackgerritSteve Martinelli proposed openstack/keystone: Implements subtree_ids query param  https://review.openstack.org/14861822:29
stevemarrodrigods, ^22:29
stevemarrodrigods, a few things... use the double colons ::22:29
stevemarsecond was... leave a space between the pipe '|' and the leaf project22:30
stevemarand last was you need to escape the backslash \22:30
stevemar(and move the last pipe over by 1, so it lines up again when it is rendered)22:31
rodrigodsstevemar, \o/ thx!!!22:31
stevemarnp, that was fun22:31
rodrigodsstevemar, btw, saw your review in the API spec change, didn't addressed yet because I thought other people was going to review22:31
rodrigodsplan to do it tomorrow :)22:31
stevemarrodrigods, cool cool22:31
gyeedstanek, congrats on the promotion22:35
*** _cjones_ has joined #openstack-keystone22:36
*** Ctina_ has joined #openstack-keystone22:36
dstanekgyee: :-P22:38
dstanekgyee: you're just jealous that i got promoted and you are writing bugs22:38
*** Ctina has quit IRC22:40
marekddstanek: his karma is constantly increasing.22:41
*** Ctina_ has quit IRC22:41
openstackgerritSteve Martinelli proposed openstack/keystone-specs: Visual Page for WebSSO  https://review.openstack.org/13352922:41
openstackgerritMerged openstack/oslo.policy: Fix tests  https://review.openstack.org/14866422:44
marekdstevemar: we still need to resolve one issue with websso, so can we put WIP state on it?22:47
marekd(i cannot since you did last commit)22:47
stevemarwhats the last issue?22:48
marekdstevemar: how is keystone going to know where to redirect user with new fresh token.22:48
*** sriram has quit IRC22:51
*** gyee has quit IRC22:53
*** gyee has joined #openstack-keystone22:54
*** ChanServ sets mode: +v gyee22:54
openstackgerritIan Cordasco proposed openstack/oslo.policy: Move project imports after 3rd party imports  https://review.openstack.org/14874322:58
openstackgerritayoung proposed openstack/keystone: Unscoped to Scoped only  https://review.openstack.org/14259122:59
openstackgerritayoung proposed openstack/keystone: Explicit Unscoped  https://review.openstack.org/14252122:59
*** joesavak has quit IRC22:59
*** gyee has quit IRC23:06
openstackgerritSteve Martinelli proposed openstack/oslo.policy: Move project imports after 3rd party imports  https://review.openstack.org/14874323:08
*** _cjones_ has quit IRC23:12
*** _cjones_ has joined #openstack-keystone23:13
marekdayoung: do you somewhere have pdf file with mapping engine made by jdennis?23:13
marekdcannot find it right now :(23:14
jdennismarekd: I think I can dig it up ;-)23:14
*** atiwari has quit IRC23:14
marekdjdennis: oh hai!23:14
*** lhcheng has quit IRC23:15
marekdjdennis: that would be cool (didn't know you are here)23:15
jdennismarekd: took me a while to find where I stashed it :-) Here is a link to it: https://jdennis.fedorapeople.org/doc/mapping.pdf23:19
marekdjdennis: thank you!23:21
jdennisnp23:21
*** dims__ has quit IRC23:25
*** bknudson has quit IRC23:26
*** chrisshattuck has quit IRC23:28
*** abhirc has quit IRC23:30
*** oomichi has joined #openstack-keystone23:30
*** abhirc has joined #openstack-keystone23:30
*** abhirc has quit IRC23:35
*** jamielennox|away is now known as jamielennox23:36
*** shakamunyi has quit IRC23:38
*** chlong has joined #openstack-keystone23:40
*** gordc has quit IRC23:41
*** chlong has quit IRC23:45
*** chlong has joined #openstack-keystone23:46
*** thedodd has quit IRC23:52
*** dims__ has joined #openstack-keystone23:57
*** dims__ has quit IRC23:57
*** dims__ has joined #openstack-keystone23:58
*** ayoung has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!