| *** timcline has joined #openstack-keystone | 00:01 | |
| *** lhcheng has quit IRC | 00:01 | |
| *** atiwari has quit IRC | 00:03 | |
| *** lhcheng has joined #openstack-keystone | 00:03 | |
| gyee | morganfainberg, dhellmann, oslo.config question for ya | 00:03 |
|---|---|---|
| gyee | how to escape special chars in a list | 00:03 |
| gyee | ? | 00:03 |
| *** dkingshott has quit IRC | 00:04 | |
| morganfainberg | uh. | 00:04 |
| morganfainberg | like ',' | 00:04 |
| morganfainberg | ? | 00:04 |
| morganfainberg | no idea | 00:04 |
| gyee | foo = a,b,c,d\,dd | 00:04 |
| gyee | so I want ['a', 'b', 'c', 'd,dd'] | 00:04 |
| *** markvoelker has quit IRC | 00:07 | |
| *** tqtran_afk has quit IRC | 00:10 | |
| *** abhirc has joined #openstack-keystone | 00:15 | |
| *** jasondotstar has joined #openstack-keystone | 00:16 | |
| *** ncoghlan has joined #openstack-keystone | 00:19 | |
| *** dims has quit IRC | 00:22 | |
| *** dims has joined #openstack-keystone | 00:23 | |
| *** alex_xu_ has quit IRC | 00:23 | |
| *** oomichi has joined #openstack-keystone | 00:26 | |
| gyee | doesn't look like there's a way to escape comma | 00:28 |
| gyee | https://github.com/openstack/oslo.config/blob/master/oslo_config/types.py#L232 | 00:28 |
| gyee | unless I misread the code | 00:28 |
| *** timcline has quit IRC | 00:31 | |
| *** timcline has joined #openstack-keystone | 00:31 | |
| *** abhirc has quit IRC | 00:34 | |
| *** timcline has quit IRC | 00:36 | |
| *** timcline has joined #openstack-keystone | 00:37 | |
| *** jasondotstar has quit IRC | 00:41 | |
| *** timcline has quit IRC | 00:41 | |
| *** abhirc has joined #openstack-keystone | 00:50 | |
| *** markvoelker has joined #openstack-keystone | 00:52 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/python-keystoneclient: Implements subtree_as_ids and parents_as_ids https://review.openstack.org/150078 | 00:53 |
| *** david-lyle is now known as david-lyle_afk | 00:57 | |
| *** markvoelker has quit IRC | 01:00 | |
| *** zzzeek has quit IRC | 01:00 | |
| *** timcline has joined #openstack-keystone | 01:02 | |
| *** timcline has quit IRC | 01:06 | |
| *** abhirc has quit IRC | 01:08 | |
| *** abhirc has joined #openstack-keystone | 01:10 | |
| *** nellysmitt has joined #openstack-keystone | 01:11 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo_log instead of incubator https://review.openstack.org/152699 | 01:11 |
| *** DaveChen has joined #openstack-keystone | 01:12 | |
| *** abhirc has quit IRC | 01:15 | |
| *** nellysmitt has quit IRC | 01:16 | |
| *** markvoelker has joined #openstack-keystone | 01:19 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Set initiators ID to user_id https://review.openstack.org/152758 | 01:19 |
| *** jasondotstar has joined #openstack-keystone | 01:24 | |
| *** gyee has quit IRC | 01:27 | |
| *** _cjones_ has quit IRC | 01:29 | |
| *** _cjones_ has joined #openstack-keystone | 01:29 | |
| *** lhcheng has quit IRC | 01:31 | |
| *** jamielennox is now known as jamielennox|away | 01:33 | |
| *** dims has quit IRC | 01:33 | |
| *** _cjones_ has quit IRC | 01:34 | |
| *** samueldmq_ has joined #openstack-keystone | 01:35 | |
| *** dims has joined #openstack-keystone | 01:38 | |
| *** dims has quit IRC | 01:42 | |
| *** dims has joined #openstack-keystone | 01:42 | |
| *** gabriel-bezerra has quit IRC | 01:42 | |
| *** gabriel-bezerra has joined #openstack-keystone | 01:43 | |
| *** timcline has joined #openstack-keystone | 01:44 | |
| *** timcline has quit IRC | 01:44 | |
| *** timcline has joined #openstack-keystone | 01:44 | |
| *** abhirc has joined #openstack-keystone | 01:45 | |
| *** jasondotstar has quit IRC | 01:50 | |
| *** timcline has quit IRC | 02:01 | |
| *** timcline has joined #openstack-keystone | 02:02 | |
| *** topol has joined #openstack-keystone | 02:02 | |
| *** ChanServ sets mode: +v topol | 02:02 | |
| *** timcline has quit IRC | 02:02 | |
| *** timcline has joined #openstack-keystone | 02:03 | |
| *** timcline has quit IRC | 02:07 | |
| *** rwsu is now known as rwsu-afk | 02:11 | |
| *** samueldmq_ has quit IRC | 02:11 | |
| *** erkules_ has joined #openstack-keystone | 02:13 | |
| *** erkules has quit IRC | 02:16 | |
| *** diegows has quit IRC | 02:33 | |
| *** timcline has joined #openstack-keystone | 02:33 | |
| *** kfox1111 has joined #openstack-keystone | 02:35 | |
| *** dims has quit IRC | 02:35 | |
| *** dims has joined #openstack-keystone | 02:36 | |
| *** abhirc has quit IRC | 02:36 | |
| *** timcline has quit IRC | 02:37 | |
| *** rushiagr_away is now known as rushiagr | 02:48 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add CADF notifications for most resources https://review.openstack.org/151137 | 02:49 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Refactor _send_audit_notification https://review.openstack.org/151551 | 02:49 |
| *** timcline has joined #openstack-keystone | 02:49 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add CADF notifications for most resources https://review.openstack.org/151137 | 02:49 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Publicize region/endpoint/policy/service events https://review.openstack.org/151774 | 02:49 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add CADF notification handling for policy/region/service/endpoint https://review.openstack.org/151786 | 02:49 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add a test for create_domain in notifications https://review.openstack.org/151791 | 02:50 |
| *** spandhe has quit IRC | 02:50 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add a test for create_domain in notifications https://review.openstack.org/151791 | 02:51 |
| *** dims has quit IRC | 02:51 | |
| *** kfox1111 has quit IRC | 02:52 | |
| *** timcline has quit IRC | 02:53 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add CADF notifications for most resources https://review.openstack.org/151137 | 02:56 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Publicize region/endpoint/policy/service events https://review.openstack.org/151774 | 02:57 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add CADF notification handling for policy/region/service/endpoint https://review.openstack.org/151786 | 02:57 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add a test for create_domain in notifications https://review.openstack.org/151791 | 02:57 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Revamp the documentation surrounding notifications https://review.openstack.org/126180 | 02:57 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add context to manager classes that send notifications https://review.openstack.org/151866 | 03:01 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: WIP - Add CADF notifications for trusts https://review.openstack.org/151867 | 03:01 |
| *** tellesnobrega_ has joined #openstack-keystone | 03:03 | |
| *** nellysmitt has joined #openstack-keystone | 03:12 | |
| *** nellysmitt has quit IRC | 03:16 | |
| *** rushiagr is now known as rushiagr_away | 03:19 | |
| *** stevemar has quit IRC | 03:23 | |
| *** stevemar has joined #openstack-keystone | 03:24 | |
| *** ChanServ sets mode: +v stevemar | 03:24 | |
| *** harlowja is now known as harlowja_away | 03:28 | |
| *** Ephur has quit IRC | 03:30 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add WebSSO support for federation https://review.openstack.org/136177 | 03:44 |
| *** rushiagr_away is now known as rushiagr | 03:45 | |
| *** timcline has joined #openstack-keystone | 03:50 | |
| *** timcline has quit IRC | 03:54 | |
| *** ajayaa has joined #openstack-keystone | 03:54 | |
| *** timcline has joined #openstack-keystone | 03:54 | |
| *** mitz_ has quit IRC | 03:56 | |
| *** mitz has joined #openstack-keystone | 03:56 | |
| *** richm has quit IRC | 04:15 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add minimum release support notes for federation https://review.openstack.org/146758 | 04:19 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add links to extensions that point to api specs https://review.openstack.org/147311 | 04:19 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Classifying extensions and defining process https://review.openstack.org/146793 | 04:20 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add links to extensions that point to api specs https://review.openstack.org/147311 | 04:20 |
| *** _cjones_ has joined #openstack-keystone | 04:30 | |
| *** _cjones_ has quit IRC | 04:32 | |
| *** _cjones_ has joined #openstack-keystone | 04:33 | |
| *** timcline has quit IRC | 04:36 | |
| *** timcline has joined #openstack-keystone | 04:36 | |
| *** _cjones_ has quit IRC | 04:37 | |
| *** timcline has quit IRC | 04:41 | |
| *** ajayaa has quit IRC | 04:44 | |
| *** lhcheng has joined #openstack-keystone | 04:56 | |
| *** oomichi has quit IRC | 05:04 | |
| *** david-lyle_afk has quit IRC | 05:11 | |
| *** david-lyle_afk has joined #openstack-keystone | 05:11 | |
| *** nellysmitt has joined #openstack-keystone | 05:13 | |
| *** nellysmitt has quit IRC | 05:17 | |
| *** harlowja_away has quit IRC | 05:19 | |
| *** wanghong has quit IRC | 05:20 | |
| *** wanghong has joined #openstack-keystone | 05:21 | |
| *** alex_xu has joined #openstack-keystone | 05:24 | |
| *** lhcheng_ has joined #openstack-keystone | 05:24 | |
| *** ajayaa has joined #openstack-keystone | 05:25 | |
| *** lhcheng has quit IRC | 05:27 | |
| *** timcline has joined #openstack-keystone | 05:37 | |
| *** timcline has quit IRC | 05:41 | |
| *** dims has joined #openstack-keystone | 05:52 | |
| *** topol has quit IRC | 05:55 | |
| *** dims has quit IRC | 05:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/152795 | 06:04 |
| *** markvoelker has quit IRC | 06:08 | |
| *** timcline has joined #openstack-keystone | 06:18 | |
| *** timcline has quit IRC | 06:23 | |
| *** tellesnobrega_ has quit IRC | 06:32 | |
| *** tellesnobrega__ has joined #openstack-keystone | 06:32 | |
| *** markvoelker has joined #openstack-keystone | 06:39 | |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Use oslo namespaces https://review.openstack.org/152802 | 06:42 |
| *** markvoelker has quit IRC | 06:43 | |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Use oslo_context https://review.openstack.org/152803 | 06:45 |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: Remove openstack.common.local https://review.openstack.org/152805 | 06:49 |
| *** zz_avozza is now known as avozza | 06:52 | |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: Use oslo_i18n https://review.openstack.org/152806 | 06:55 |
| *** avozza is now known as zz_avozza | 06:56 | |
| *** erkules_ is now known as erkules | 06:58 | |
| *** josecastroleon has joined #openstack-keystone | 06:59 | |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: Use oslo namespaces for oslo libraries https://review.openstack.org/152808 | 06:59 |
| *** stevemar has quit IRC | 07:06 | |
| *** chlong has joined #openstack-keystone | 07:06 | |
| *** nellysmitt has joined #openstack-keystone | 07:13 | |
| *** wanghong has quit IRC | 07:17 | |
| *** nellysmitt has quit IRC | 07:18 | |
| *** timcline has joined #openstack-keystone | 07:19 | |
| *** wanghong has joined #openstack-keystone | 07:22 | |
| *** timcline has quit IRC | 07:23 | |
| marekd | morganfainberg: i will take a look at this bug. | 07:24 |
| *** MasterPiece has joined #openstack-keystone | 07:27 | |
| *** chlong has quit IRC | 07:28 | |
| *** markvoelker has joined #openstack-keystone | 07:39 | |
| *** nellysmitt has joined #openstack-keystone | 07:42 | |
| *** markvoelker has quit IRC | 07:44 | |
| *** zz_avozza is now known as avozza | 07:55 | |
| *** ncoghlan has quit IRC | 08:04 | |
| *** nkinder has joined #openstack-keystone | 08:08 | |
| *** henrynash has joined #openstack-keystone | 08:14 | |
| *** ChanServ sets mode: +v henrynash | 08:14 | |
| openstackgerrit | Lin Hua Cheng proposed openstack/keystone: On creation default service name to empty string https://review.openstack.org/146962 | 08:18 |
| *** timcline has joined #openstack-keystone | 08:20 | |
| *** timcline has quit IRC | 08:24 | |
| *** avozza is now known as zz_avozza | 08:26 | |
| *** lhcheng_ has quit IRC | 08:27 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Remove local conf information from paste-ini https://review.openstack.org/134124 | 08:28 |
| *** jistr has joined #openstack-keystone | 08:29 | |
| *** jaosorior has joined #openstack-keystone | 08:29 | |
| *** MasterPiece has quit IRC | 08:30 | |
| *** markvoelker has joined #openstack-keystone | 08:40 | |
| *** MasterPiece has joined #openstack-keystone | 08:42 | |
| *** markvoelker has quit IRC | 08:45 | |
| *** henrynash has quit IRC | 08:57 | |
| openstackgerrit | wanghong proposed openstack/python-keystoneclient: use right resource_class to create resource instance https://review.openstack.org/152831 | 09:06 |
| *** timcline has joined #openstack-keystone | 09:20 | |
| *** timcline has quit IRC | 09:25 | |
| *** afazekas has joined #openstack-keystone | 09:25 | |
| *** boris-42 has joined #openstack-keystone | 09:39 | |
| *** markvoelker has joined #openstack-keystone | 09:41 | |
| *** henrynash has joined #openstack-keystone | 09:42 | |
| *** ChanServ sets mode: +v henrynash | 09:42 | |
| *** markvoelker has quit IRC | 09:47 | |
| *** henrynash has quit IRC | 09:56 | |
| *** timcline has joined #openstack-keystone | 10:21 | |
| *** timcline has quit IRC | 10:26 | |
| *** markvoelker has joined #openstack-keystone | 10:43 | |
| *** MasterPiece has quit IRC | 10:43 | |
| *** jasondotstar has joined #openstack-keystone | 10:46 | |
| *** jaosorior has quit IRC | 10:46 | |
| *** markvoelker has quit IRC | 10:48 | |
| *** rushiagr has quit IRC | 10:52 | |
| *** MasterPiece has joined #openstack-keystone | 10:56 | |
| *** dims has joined #openstack-keystone | 10:57 | |
| *** dims has quit IRC | 11:01 | |
| *** rushiagr has joined #openstack-keystone | 11:02 | |
| *** dims has joined #openstack-keystone | 11:02 | |
| openstackgerrit | Marek Denis proposed openstack/keystone: Add ``service_providers`` in Service Catalog https://review.openstack.org/152659 | 11:05 |
| *** topol has joined #openstack-keystone | 11:10 | |
| *** ChanServ sets mode: +v topol | 11:10 | |
| *** timcline has joined #openstack-keystone | 11:22 | |
| *** YorikSar has joined #openstack-keystone | 11:23 | |
| *** timcline has quit IRC | 11:27 | |
| *** tellesnobrega__ has quit IRC | 11:43 | |
| *** markvoelker has joined #openstack-keystone | 11:44 | |
| *** mattfarina has joined #openstack-keystone | 11:44 | |
| *** markvoelker has quit IRC | 11:49 | |
| *** diegows has joined #openstack-keystone | 11:57 | |
| *** david-lyle_afk is now known as david-lyle | 12:01 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/python-keystoneclient: Implements subtree_as_ids and parents_as_ids https://review.openstack.org/150078 | 12:06 |
| *** TempLPBugBot has joined #openstack-keystone | 12:13 | |
| *** MasterPiece has quit IRC | 12:18 | |
| *** rodrigod` has joined #openstack-keystone | 12:18 | |
| *** jasondotstar has quit IRC | 12:20 | |
| *** afazekas has quit IRC | 12:20 | |
| *** TempLPBugBot` has quit IRC | 12:20 | |
| *** rodrigods has quit IRC | 12:20 | |
| *** svasheka has quit IRC | 12:20 | |
| *** rodrigod` is now known as rodrigods | 12:22 | |
| *** rodrigods has quit IRC | 12:22 | |
| *** rodrigods has joined #openstack-keystone | 12:22 | |
| *** timcline has joined #openstack-keystone | 12:23 | |
| *** svasheka has joined #openstack-keystone | 12:24 | |
| *** afazekas has joined #openstack-keystone | 12:27 | |
| *** timcline has quit IRC | 12:27 | |
| *** EmilienM|afk is now known as EmilienM | 12:27 | |
| breton | we have spec freeze tomorrow, right? | 12:29 |
| raildo_away | breton, yes | 12:31 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Improve List Role Assignments Filters Performance https://review.openstack.org/137202 | 12:32 |
| *** david-lyle is now known as david-lyle_afk | 12:36 | |
| *** david-lyle_afk is now known as david-lyle | 12:36 | |
| *** zz_avozza is now known as avozza | 12:43 | |
| *** david-lyle is now known as david-lyle_afk | 12:44 | |
| *** david-lyle_afk is now known as david-lyle | 12:45 | |
| *** markvoelker has joined #openstack-keystone | 12:45 | |
| *** jaosorior has joined #openstack-keystone | 12:45 | |
| *** markvoelker has quit IRC | 12:49 | |
| *** esmute has quit IRC | 12:59 | |
| *** esp has quit IRC | 13:00 | |
| *** aix has joined #openstack-keystone | 13:01 | |
| *** esmute has joined #openstack-keystone | 13:03 | |
| *** esp has joined #openstack-keystone | 13:03 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: LDAP additional attribute mappings description https://review.openstack.org/118590 | 13:09 |
| breton | I wonder, what do we do with say https://review.openstack.org/#/c/129736/5 | 13:10 |
| *** dims has quit IRC | 13:10 | |
| *** nkinder has quit IRC | 13:10 | |
| breton | also, is there a list of most-wanted specs? I'd review a couple from there and add mine | 13:11 |
| *** bknudson has joined #openstack-keystone | 13:11 | |
| *** ChanServ sets mode: +v bknudson | 13:11 | |
| *** toddnni has quit IRC | 13:14 | |
| *** dims has joined #openstack-keystone | 13:19 | |
| *** markvoelker has joined #openstack-keystone | 13:20 | |
| *** gabriel-bezerra has quit IRC | 13:23 | |
| *** timcline has joined #openstack-keystone | 13:23 | |
| *** andreaf_ is now known as andreaf | 13:25 | |
| *** dims has quit IRC | 13:28 | |
| *** timcline has quit IRC | 13:28 | |
| *** Ephur has joined #openstack-keystone | 13:28 | |
| *** htruta has quit IRC | 13:29 | |
| *** topol has quit IRC | 13:33 | |
| *** htruta has joined #openstack-keystone | 13:37 | |
| openstackgerrit | Marek Denis proposed openstack/keystone: IdP ID registration and validation https://review.openstack.org/152156 | 13:41 |
| *** raildo_away is now known as raildo | 13:41 | |
| *** rushiagr is now known as rushiagr_away | 13:45 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Remove local conf information from paste-ini https://review.openstack.org/134124 | 13:46 |
| *** krykowski has joined #openstack-keystone | 13:59 | |
| marekd | bknudson: re: https://review.openstack.org/#/c/152659/ i am not sure what you meant with adding __init__ catalog.Manager already has __init__. | 14:00 |
| bknudson | marekd: I didn't check if it already has an __init__... this was just a problem had been seen in other classes. | 14:01 |
| marekd | bknudson: oh, ok. well, I somehow workedaround the problem (py27 tests are passing), but almost everything else fails. I am wondering if that's just jenkins failing or not. | 14:02 |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/152715 | 14:08 |
| *** richm has joined #openstack-keystone | 14:13 | |
| *** rushiagr_away is now known as rushiagr | 14:18 | |
| *** samueldmq_ has joined #openstack-keystone | 14:23 | |
| *** timcline has joined #openstack-keystone | 14:24 | |
| marekd | lbragstad: yes. | 14:25 |
| marekd | (re twitter) | 14:25 |
| *** timcline has quit IRC | 14:28 | |
| *** dims has joined #openstack-keystone | 14:29 | |
| *** gordc has joined #openstack-keystone | 14:29 | |
| *** nkinder has joined #openstack-keystone | 14:31 | |
| lbragstad | marekd: so, the keystone that you're authenticating at will have those? | 14:32 |
| lbragstad | marekd: and by those, I mean "will have those group id stored there". | 14:33 |
| *** dims_ has joined #openstack-keystone | 14:33 | |
| *** timcline has joined #openstack-keystone | 14:34 | |
| *** timcline has quit IRC | 14:34 | |
| *** mflobo has quit IRC | 14:35 | |
| *** mflobo has joined #openstack-keystone | 14:36 | |
| *** dims has quit IRC | 14:37 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/152714 | 14:41 |
| *** joesavak has joined #openstack-keystone | 14:42 | |
| *** andreaf_ has joined #openstack-keystone | 14:44 | |
| *** samueldmq__ has joined #openstack-keystone | 14:45 | |
| *** andreaf has quit IRC | 14:45 | |
| *** andreaf_ is now known as andreaf | 14:45 | |
| *** packet has joined #openstack-keystone | 14:47 | |
| *** Ctina has joined #openstack-keystone | 14:47 | |
| *** samueldmq_ has quit IRC | 14:47 | |
| Ctina | Quick question..are PKIZ tokens available in icehouse? | 14:48 |
| raildo | Ctina, no, PKIZ was included in Juno (some core correct me if i'm wrong) | 14:51 |
| marekd | lbragstad: in claim that in this particular case AE tokens would behave pretty much like uuids | 14:53 |
| Ctina | raildo: thanks | 14:53 |
| marekd | so, you would store some id, and lookup for groups | 14:53 |
| raildo | Ctina, :) | 14:53 |
| ekarlso | any of you good at policy ? | 14:55 |
| lbragstad | marekd: so, this could be done with a migration on the federation extension to store it? | 14:58 |
| * lbragstad is looking at the schema for federation | 14:58 | |
| *** nkinder has quit IRC | 15:04 | |
| *** ajayaa has quit IRC | 15:04 | |
| *** nkinder has joined #openstack-keystone | 15:06 | |
| ekarlso | if I pass a "foo" in the target of a policy check | 15:09 |
| ekarlso | how do I write the policy thing in the json that uses that ? | 15:09 |
| Ctina | i thought there was an option to not include the catalog in a keystone token? Or am I confusing it with a horizon session option? | 15:11 |
| *** carlosmarin has joined #openstack-keystone | 15:13 | |
| *** EmilienM has quit IRC | 15:14 | |
| *** rm_work|away is now known as rm_work | 15:14 | |
| *** EmilienM has joined #openstack-keystone | 15:16 | |
| *** topol has joined #openstack-keystone | 15:17 | |
| *** ChanServ sets mode: +v topol | 15:17 | |
| *** timcline has joined #openstack-keystone | 15:22 | |
| *** avozza is now known as zz_avozza | 15:23 | |
| ekarlso | any assistance on policieS ? ;) | 15:25 |
| *** mattfarina has quit IRC | 15:27 | |
| *** timcline has quit IRC | 15:28 | |
| *** timcline has joined #openstack-keystone | 15:29 | |
| bknudson | Ctina: http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3.html#catalog-opt-out | 15:33 |
| *** krykowski has quit IRC | 15:34 | |
| bknudson | ekarlso: there were some doc improvements for policy committed recently which might be useful -- https://review.openstack.org/#/c/150953/ | 15:34 |
| *** EmilienM is now known as EmilienM|afk | 15:35 | |
| *** Ctina has quit IRC | 15:38 | |
| *** Ctina has joined #openstack-keystone | 15:39 | |
| *** diegows has quit IRC | 15:44 | |
| Ctina | thanks bknudson | 15:45 |
| marekd | lbragstad: hm, where exactly do you think it should be stored? I think you will need some new tables/relations either way. | 15:48 |
| lbragstad | marekd: well, where do you think it'd make most sense to store that relationship. | 15:49 |
| lbragstad | ? | 15:49 |
| marekd | lbragstad: tokens. | 15:49 |
| marekd | token table and the satellites. | 15:49 |
| lbragstad | marekd: our token table doesn't have anything in it | 15:50 |
| lbragstad | when using AE tokens | 15:50 |
| marekd | I know, but we can create .... ae_tokens table, and use it in some justified cases. | 15:51 |
| marekd | lbragstad: you were talking about some versions of tokens, so now we can add this 'federation' version, and some subclass of the main AE-auth-plugin that will be able to use ths table. | 15:52 |
| lbragstad | marekd: so that token reference table will only ever be created when running federation migrations | 15:53 |
| marekd | robably. | 15:53 |
| marekd | probably. | 15:53 |
| *** ajayaa has joined #openstack-keystone | 15:55 | |
| marekd | lbragstad: i would not focus where to put script that does CREATE TABLE (...), but how to make it small, fast and generic enough at the same time, so we all don't choke in the future "oh, not it's cool, but AE tokens will not handle this as we would need to put too much in the token body" | 15:56 |
| marekd | s/oh, not it's cool|oh,no,it's cool/ :-) | 15:57 |
| marekd | or merge it as-is with a not "will not work with federation and maybe something else" | 15:59 |
| bknudson | let's not accept something that doesn't work with federation. | 16:00 |
| lbragstad | yeah, that's the plan | 16:00 |
| lbragstad | is to get this working with federation before we merge it | 16:00 |
| marekd | lbragstad: great. | 16:00 |
| *** nkinder has quit IRC | 16:02 | |
| marekd | lbragstad: so, my proposal is to support 'versions' of AE tokens, and always keep a backup plan, where some portion of the data will be stored in the DB. Then, AE token will become slightly like uuid token, but in the end it will speed up in some other cases. We win in the end and don't lock ourselves. | 16:02 |
| lbragstad | marekd: when you say "some portion of the data" you're referencing the group ids that need to be available on POST /tokens | 16:03 |
| marekd | or, if not storing in the db let's rely on some sort of cache. If the cache is gone, then sorry, recreate your token. | 16:03 |
| marekd | lbragstad: in federation token, yes. | 16:03 |
| lbragstad | ok | 16:03 |
| marekd | identity_provider and protocol maybe too ? | 16:04 |
| bknudson | we have a memcache backend for tokens already | 16:04 |
| marekd | bknudson: so we could make it default for AE tokens backend? | 16:04 |
| lbragstad | marekd: only in federation | 16:04 |
| marekd | yes | 16:05 |
| lbragstad | ae tokens shouldn't need memcache | 16:05 |
| bknudson | sure | 16:05 |
| *** diegows has joined #openstack-keystone | 16:05 | |
| marekd | i am guesing 'fragility' of memcache is nothing bad in this case | 16:05 |
| bknudson | it is bad but I think some deployers have figured out how to live with it. | 16:06 |
| marekd | aha | 16:06 |
| marekd | ok | 16:06 |
| bknudson | there's still issues with memcache and revocation lists. | 16:06 |
| *** nkinder has joined #openstack-keystone | 16:06 | |
| marekd | because we cannot filter easily? | 16:07 |
| bknudson | the revocation list was saved as a list of token IDs... memcache has a limit for line lenght | 16:07 |
| bknudson | length | 16:07 |
| *** samueldmq__ has quit IRC | 16:07 | |
| bknudson | I think the revocations problem is handled by revocation events. | 16:08 |
| bknudson | which AE tokens requires already | 16:08 |
| marekd | ++ | 16:08 |
| bknudson | somebody has to work on revocation events to get them working. | 16:09 |
| marekd | true :( | 16:09 |
| *** mattfarina has joined #openstack-keystone | 16:12 | |
| openstackgerrit | Yuriy Taraday proposed openstack/keystone: Add a module to work with LDAP filters and DNs https://review.openstack.org/117484 | 16:13 |
| openstackgerrit | Merged openstack/pycadf: Updated from global requirements https://review.openstack.org/152722 | 16:13 |
| YorikSar | bknudson: Hi. Can you please take another look? ^ | 16:13 |
| *** stevemar has joined #openstack-keystone | 16:14 | |
| *** ChanServ sets mode: +v stevemar | 16:14 | |
| YorikSar | bknudson: You had a concern about '*' handling, I've answered that. | 16:15 |
| *** EmilienM|afk is now known as EmilienM | 16:18 | |
| larsks | In icehouse, do keystone pki tokens work? I just spent some time helping someone debug problems in two environments, and in both cases switching back to uuid tokens Just Worked. | 16:19 |
| larsks | In one case, it looked like something was trying to stuff a pki token into a 64-char wide db field, and in another, we were getting 502 bad gateway errors from haproxy. | 16:19 |
| larsks | Do these sound like keystone bugs? Or known config issues? Or something else? | 16:19 |
| bknudson | larsks: is keystone trying to stuff a pki token into a 64-char wide db field? | 16:20 |
| larsks | bknudson: Looks like it. | 16:22 |
| bknudson | I think everyone runs into issues with the size of PKI tokens and they either work around it through config or switch back to uuid tokens. | 16:22 |
| Ctina | larsks: we use pki tokens with icehouse | 16:22 |
| larsks | bknudson: The error was, "String length exceeded.The length of string '...pki token...' exceeded the limit of column id(CHAR(64)). | 16:22 |
| bknudson | larsks: that's not an issue I've seen. | 16:23 |
| larsks | This was triggered only via requests from heat. | 16:23 |
| larsks | So maybe heat was passing the wrong data in the wrong field? | 16:23 |
| Ctina | we did write a our own compression code since we're lagging behind upstream trunk | 16:24 |
| larsks | Ctina: Are you using heat? | 16:24 |
| bknudson | A PKI token is never going to fit in a char(64). | 16:25 |
| larsks | bknudson: Well, yeah :) | 16:25 |
| Ctina | larsks: no not yet | 16:25 |
| Ctina | we also use a memcache backend | 16:26 |
| *** henrynash has joined #openstack-keystone | 16:26 | |
| *** ChanServ sets mode: +v henrynash | 16:26 | |
| larsks | Ctina: Okay. Everything else seemed to work fine in this environment; only heat was encountering this problem. Since switching back to uuid tokens fixed it I suspect they are not going to investigate further. | 16:26 |
| Ctina | larsks: good to know, we were getting ready to implement Heat but it sounds like we should hold off until we upgrade to kilo this spring | 16:27 |
| *** andreaf is now known as andreaf_ | 16:31 | |
| *** Ephur has quit IRC | 16:35 | |
| *** rwsu-afk is now known as rwsu | 16:40 | |
| *** diegows has quit IRC | 16:41 | |
| *** thedodd has joined #openstack-keystone | 16:47 | |
| *** gyee has joined #openstack-keystone | 16:47 | |
| *** ChanServ sets mode: +v gyee | 16:47 | |
| *** nkinder has quit IRC | 16:57 | |
| *** diegows has joined #openstack-keystone | 16:57 | |
| *** joesavak has quit IRC | 17:01 | |
| *** joesavak has joined #openstack-keystone | 17:02 | |
| *** nkinder has joined #openstack-keystone | 17:07 | |
| *** atiwari has joined #openstack-keystone | 17:07 | |
| morganfainberg | stevemar, is https://bugs.launchpad.net/keystone/+bug/1417835 really a release/milestone blocker? | 17:11 |
| TempLPBugBot | Launchpad bug 1417835 in Keystone "for CADF notifications, the initiator's ID (not name) should be user_id" (affected: 1, heat: 6) [Undecided,In progress] - Assigned to Steve Martinelli (stevemar) | 17:11 |
| *** henrynash has quit IRC | 17:11 | |
| *** gyee has quit IRC | 17:15 | |
| *** spandhe has joined #openstack-keystone | 17:20 | |
| morganfainberg | lbragstad, dolphm, dstanek, bknudson, ayoung, jamielennox|away, https://review.openstack.org/#/c/152758/ | 17:23 |
| ayoung | Did you rub my lamp? Did you wake me up?! | 17:23 |
| ayoung | morganfainberg, does this now break everyone using the existing code? | 17:24 |
| *** jistr has quit IRC | 17:25 | |
| morganfainberg | only if they expect user_id to be name in the cadf notification | 17:25 |
| *** gtt116__ has joined #openstack-keystone | 17:25 | |
| morganfainberg | which i might add is very incorrect | 17:26 |
| morganfainberg | and not "name" of the user | 17:26 |
| morganfainberg | erm. wait yeah | 17:26 |
| morganfainberg | and it shouldnt break people [in theory this shows a gap in the taxonomy requires) | 17:27 |
| morganfainberg | we should always require an id. | 17:27 |
| morganfainberg | this is in-fact very incorrect. | 17:27 |
| *** gtt116_ has quit IRC | 17:28 | |
| *** xxj has quit IRC | 17:29 | |
| *** xxj has joined #openstack-keystone | 17:29 | |
| morganfainberg | ayoung, it should not actuallty break any code based on how pycadf works. | 17:29 |
| ayoung | morganfainberg, do we need both? | 17:30 |
| ayoung | or do we just not care if people are coding to what we did instead of what we intended? | 17:30 |
| * ayoung likes that attitude! | 17:30 | |
| *** gyee has joined #openstack-keystone | 17:30 | |
| *** ChanServ sets mode: +v gyee | 17:30 | |
| *** nkinder has quit IRC | 17:30 | |
| * ayoung going to hurry up and +2 before anyone can change their mind | 17:31 | |
| *** nicodemos has joined #openstack-keystone | 17:34 | |
| morganfainberg | ayoung, also: https://review.openstack.org/#/c/152337/4/specs/no-downward-sql-migration.rst | 17:37 |
| morganfainberg | ayoung, x-project spec | 17:37 |
| morganfainberg | any feedback is ofcourse welcome :) | 17:37 |
| ayoung | can I just +2A that now? | 17:38 |
| *** spandhe has quit IRC | 17:38 | |
| morganfainberg | the cadf one? or the migraiton one? | 17:38 |
| morganfainberg | the migration one you don't have +2 capability on, but a +1 is welcome! | 17:38 |
| morganfainberg | the cadf one, sure! | 17:38 |
| ayoung | Ah...its an overall openstack one...very nice | 17:41 |
| morganfainberg | yeah | 17:41 |
| morganfainberg | lets kill downgrades *everywhere* | 17:42 |
| morganfainberg | cause. ... uh... no really who'd use that besides our tests? :P | 17:42 |
| morganfainberg | marekd, lets keep focusing on the new service provider work in the catalog so it can land really soon here in k3 | 17:43 |
| ayoung | its like the story told by Colin Powell about the early days in Viet Nam. The firebase was there to protect the airfield. The airfield was there to resupply the firebase. | 17:44 |
| morganfainberg | marekd, :) let me know if you need any specific support from me to make it happen | 17:44 |
| morganfainberg | ayoung, haah | 17:44 |
| *** tqtran_afk has joined #openstack-keystone | 17:44 | |
| *** tqtran_afk is now known as tqtran | 17:44 | |
| ayoung | morganfainberg, the unified accessinfo code is eating me alive. We do so much in the exisiting accessinfo that is based on the underlying JSON...Gah. | 17:45 |
| morganfainberg | i know :( | 17:45 |
| morganfainberg | thats why i started the work over in keystone to make a model that wasn't... JSON based | 17:45 |
| morganfainberg | [except it is right now] | 17:45 |
| morganfainberg | figuring we could migrate to the new system once it was there rather than trying to do a whole drop-in replacement | 17:46 |
| *** kallebe has joined #openstack-keystone | 17:46 | |
| stevemar | morganfainberg, sorry was away... you analyzed it correctly, it was giving incorrect info, but wasn't breaking anyone | 17:49 |
| ayoung | morganfainberg, I'll get it...its just annoying | 17:51 |
| *** zzzeek has joined #openstack-keystone | 17:51 | |
| ayoung | I just realized I need to redo all of the service catalog stuff, and I need to figure out just what we mean by auth_token... | 17:51 |
| *** _cjones_ has joined #openstack-keystone | 17:51 | |
| kallebe | Good afternoon. I have a question which I could not find an answer for anywhere. I have installed a Devstack all-in-one and Keystone apparently has a different timezone set, because in its database it has dates which are 3 hours ahead of my local time. Anybody knows how to fix that? | 17:51 |
| ayoung | I'm assuming it means "the actual token string and not the data it represents" | 17:52 |
| morganfainberg | kallebe, keystone always works in UTC. | 17:52 |
| morganfainberg | kallebe, this is to avoid daylight savings/etc shifts on token expirations | 17:52 |
| morganfainberg | kallebe, so you don't change from daylight savings to standard time and have a bunch of tokens become re-valid again [for example] | 17:52 |
| kallebe | oh, I see now. | 17:52 |
| morganfainberg | so i assume you're UTC/GMT-3 [timezone]? | 17:53 |
| morganfainberg | or at least the local system is | 17:53 |
| morganfainberg | or +3? my brain can't do timezone math right now. | 17:54 |
| *** kallebe_ has joined #openstack-keystone | 17:55 | |
| kallebe_ | Sorry. internet stopped working here | 17:56 |
| morganfainberg | kallebe_, no worries | 17:56 |
| kallebe_ | so, I am testing some token expirations | 17:56 |
| morganfainberg | welcome back | 17:56 |
| kallebe_ | for example: a cinder long backup with a time longer than the token expiration | 17:56 |
| kallebe_ | as fas as I know, there is not yet a fix to this bug | 17:56 |
| kallebe_ | https://bugs.launchpad.net/cinder/+bug/1298135 | 17:56 |
| TempLPBugBot | Launchpad bug 1298135 in Cinder "Cinder should handle token expiration for long ops" (affected: 2, heat: 12) [Medium,Confirmed] | 17:56 |
| *** toddnni has joined #openstack-keystone | 17:56 | |
| *** spandhe has joined #openstack-keystone | 17:57 | |
| *** kallebe has quit IRC | 17:57 | |
| ayoung | this is frightening http://git.openstack.org/cgit/openstack/python-keystoneclient/tree/keystoneclient/service_catalog.py#n87 | 17:57 |
| kallebe_ | I was trying to reproduce this bug, but apparently the token does not expire because of this situation with UTC | 17:57 |
| morganfainberg | kallebe_, right now the only real answer is either to make cinder request a new token (a lot of work), or make the token expiration longer than maximum length of operation you want to support | 17:57 |
| kallebe_ | +morganfainberg yes, my colleagues and I were thinking about this as well. That's really a serious bug we would like to help | 17:58 |
| kallebe_ | but surely it is a lot of work | 17:58 |
| kallebe_ | besides, every new cinder operation would have to ask for a new token | 17:58 |
| kallebe_ | I mean, the new operations in future APIs | 17:59 |
| *** ajayaa has quit IRC | 18:01 | |
| *** aix has quit IRC | 18:05 | |
| kallebe_ | +morganfainberg, I have seen in that bug page that we could use Keystone trusts for that case, but this would be outside of Keystone Trusts use-case. What do you think? | 18:09 |
| *** harlowja has joined #openstack-keystone | 18:11 | |
| *** jasondotstar has joined #openstack-keystone | 18:11 | |
| *** dkingshott has joined #openstack-keystone | 18:11 | |
| stevemar | marekd, around? | 18:13 |
| stevemar | morganfainberg, what do you think of putting a default websso protocol in keystone.conf, instead of in the horizon settings? | 18:14 |
| *** jasondotstar has quit IRC | 18:14 | |
| stevemar | tqtran, ^ | 18:14 |
| *** thedodd has quit IRC | 18:14 | |
| *** joesavak has quit IRC | 18:15 | |
| stevemar | the agreed upon approach was to put it in horizon's settings, but they won't know much about keystone, we could have the equivalent setting in keystone.conf, and just give the horizon folks a specific URL to hit | 18:15 |
| *** joesavak has joined #openstack-keystone | 18:17 | |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone-specs: API changes for Reseller https://review.openstack.org/153007 | 18:24 |
| *** jaosorior has quit IRC | 18:26 | |
| *** rushiagr is now known as rushiagr_away | 18:38 | |
| openstackgerrit | Merged openstack/pycadf: add helper module https://review.openstack.org/149706 | 18:45 |
| morganfainberg | kallebe_, there are a lot of ways to solve it | 18:50 |
| morganfainberg | kallebe_, trusts would be one of them. | 18:50 |
| morganfainberg | stevemar, uhmmm | 18:50 |
| morganfainberg | stevemar, in keystone.conf? what part? | 18:50 |
| morganfainberg | ayoung, yes | 18:50 |
| morganfainberg | ayoung, that is scaaaaary | 18:50 |
| stevemar | morganfainberg, maybe under [federation] have a default_sso_protocol_id | 18:51 |
| *** afazekas has quit IRC | 18:51 | |
| morganfainberg | no i meant what was going in the config | 18:51 |
| openstackgerrit | Doug Hellmann proposed openstack/keystone: Use oslo_log instead of incubator https://review.openstack.org/152699 | 18:58 |
| *** ndonegan has joined #openstack-keystone | 19:03 | |
| *** thedodd has joined #openstack-keystone | 19:05 | |
| *** lhcheng has joined #openstack-keystone | 19:18 | |
| *** pnavarro has joined #openstack-keystone | 19:30 | |
| ndonegan | When keystone stops responding, is there any way to see what eventlet is upto? strace is not being a help. | 19:38 |
| *** diegows has quit IRC | 19:41 | |
| *** joesavak has quit IRC | 19:41 | |
| *** joesavak has joined #openstack-keystone | 19:42 | |
| *** harlowja is now known as harlowja_away | 19:50 | |
| *** DaveChen has quit IRC | 19:52 | |
| *** EmilienM is now known as EmilienM|afk | 19:53 | |
| openstackgerrit | Doug Hellmann proposed openstack/keystone: Use oslo_log instead of incubator https://review.openstack.org/152699 | 19:54 |
| openstackgerrit | Doug Hellmann proposed openstack/keystone: Log exceptions safely https://review.openstack.org/153029 | 19:54 |
| dhellmann | bknudson, stevemar : ^^ should address the unicode issues; there are still some tests that look for an exception class we're not using any more, so those will need to be rewritten | 19:54 |
| *** kallebe_ has quit IRC | 19:55 | |
| *** dkingshott has quit IRC | 19:58 | |
| *** diegows has joined #openstack-keystone | 19:59 | |
| *** tsufiev_ is now known as tsufiev | 20:02 | |
| *** dflye1 has joined #openstack-keystone | 20:02 | |
| *** dflye1 has left #openstack-keystone | 20:04 | |
| *** dflye has joined #openstack-keystone | 20:04 | |
| *** dkingshott has joined #openstack-keystone | 20:06 | |
| *** thedodd has quit IRC | 20:07 | |
| *** thedodd has joined #openstack-keystone | 20:21 | |
| *** mattfarina has quit IRC | 20:24 | |
| *** arunkant has quit IRC | 20:33 | |
| raildo | Someone want review the reseller spec? :) ps.: I paid a beer at the next summit hahaha https://review.openstack.org/#/c/139824/ | 20:33 |
| *** harlowja_away is now known as harlowja | 20:33 | |
| morganfainberg | raildo, i expect that to merge today | 20:35 |
| morganfainberg | raildo, i'm just finishing up meetings and lunch before i try and do that - | 20:35 |
| morganfainberg | raildo, but i *think* it's good. | 20:35 |
| morganfainberg | beer is not needed for my vote btw :P | 20:36 |
| raildo | morganfainberg, \o/ | 20:37 |
| morganfainberg | +2, will approve tonight barring blocking comments | 20:37 |
| raildo | morganfainberg, thanks :) | 20:37 |
| morganfainberg | unless someone else approves first. | 20:37 |
| htruta | raildo: you should've mentioned beer before | 20:37 |
| raildo | morganfainberg, thank you :D | 20:37 |
| *** raildo has quit IRC | 20:39 | |
| *** raildo has joined #openstack-keystone | 20:41 | |
| *** topol has quit IRC | 20:44 | |
| *** nicodemos has quit IRC | 20:45 | |
| samueldmq | morganfainberg, ping - inherited role assignments will be base functionality (in-tree) in kilo, right? | 20:55 |
| samueldmq | morganfainberg, (need this info for inherited projects and role assignments spec for horizon) | 20:56 |
| *** nellysmitt has quit IRC | 20:56 | |
| *** Ctina has quit IRC | 21:03 | |
| *** samueldmq__ has joined #openstack-keystone | 21:18 | |
| *** thedodd has quit IRC | 21:18 | |
| stevemar | marekd, morganfainberg heads up - tqtran just sent an email with PoC UIs to the mailing list, feedback is appreciated | 21:19 |
| stevemar | i think it follows what was discussed at the meetup pretty closely | 21:19 |
| openstackgerrit | Merged openstack/keystone: Set initiators ID to user_id https://review.openstack.org/152758 | 21:25 |
| *** samueldmq__ has quit IRC | 21:29 | |
| *** timcline has quit IRC | 21:29 | |
| *** packet has quit IRC | 21:30 | |
| *** toddnni_ has joined #openstack-keystone | 21:31 | |
| *** toddnni has quit IRC | 21:33 | |
| *** toddnni_ is now known as toddnni | 21:33 | |
| *** timcline has joined #openstack-keystone | 21:35 | |
| *** thedodd has joined #openstack-keystone | 21:36 | |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: Update .gitignore https://review.openstack.org/148671 | 21:37 |
| gyee | stevemar, what's the difference between "Default Protocol" and "Discovery Service"? | 21:38 |
| *** andreaf has joined #openstack-keystone | 21:40 | |
| stevemar | gyee, default protocol is an option you can set in horizon (protocol id), so when you select 'redirect me' it'll always go to: keystone-host/v3/OS-FEDERATION/websso/{protocol_id} | 21:40 |
| stevemar | discovery service will be the full url of some third party tool, like how CERN has | 21:41 |
| stevemar | cause they get redirected to https://openstack.cern.ch/dashboard | 21:41 |
| stevemar | from https://openstack.cern.ch/dashboard to https://login.cern.ch/adfs | 21:41 |
| *** toddnni has quit IRC | 21:42 | |
| *** toddnni has joined #openstack-keystone | 21:43 | |
| stevemar | gyee, this was how i interpreted the stuff at the midcycle | 21:43 |
| stevemar | maybe i'm way off base | 21:43 |
| gyee | I see | 21:43 |
| gyee | I am not a UX dude, but usually I don't have to pick a protocol to login, its part of my profile | 21:44 |
| gyee | average user usually can't tell the difference | 21:45 |
| gyee | between different protocols | 21:45 |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: Use oslo namespaces for oslo libraries https://review.openstack.org/152808 | 21:45 |
| *** EmilienM|afk is now known as EmilienM | 21:45 | |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: Use oslo namespaces for oslo libraries https://review.openstack.org/152808 | 21:46 |
| openstackgerrit | Doug Hellmann proposed openstack/oslo.policy: Drop use of oslo namespace for oslo libraries https://review.openstack.org/152808 | 21:47 |
| *** d34dh0r53 is now known as blarnath | 21:48 | |
| *** toddnni has quit IRC | 21:48 | |
| *** toddnni has joined #openstack-keystone | 21:49 | |
| *** andreaf has quit IRC | 21:52 | |
| *** pnavarro has quit IRC | 21:52 | |
| openstackgerrit | Steve Martinelli proposed openstack/oslo.policy: Use oslo_i18n https://review.openstack.org/152806 | 21:52 |
| *** andreaf has joined #openstack-keystone | 21:54 | |
| ayoung | stevemar, gyee usually the distinction is done by a big button up front "login in with openid" versus "login with SAML" | 21:57 |
| ayoung | So default would be, probably, handled if you do :login with userid and password, or click here to login in with SAML...no need for an explicit default, just a set of supported protocols | 21:58 |
| gyee | ayoung, yeah, most user can't comprehend "default protocol" | 22:00 |
| gyee | as it could mean anything | 22:01 |
| *** blarnath is now known as d34dh0r53 | 22:05 | |
| *** joesavak has quit IRC | 22:05 | |
| *** Ctina has joined #openstack-keystone | 22:14 | |
| stevemar | gyee, ayoung reply to the ML too please | 22:17 |
| stevemar | tqtran, in case you missed all this ^ | 22:17 |
| *** raildo_ has joined #openstack-keystone | 22:17 | |
| ayoung | stevemar, can't...I'm drownding in Service Catalog parsing code in the keystone client. Yuck, I think I got some in my mouth | 22:18 |
| stevemar | ayoung, eww, have fun | 22:19 |
| *** Ctina has quit IRC | 22:19 | |
| ayoung | stevemar, as I pointed out before: http://git.openstack.org/cgit/openstack/python-keystoneclient/tree/keystoneclient/service_catalog.py#n87 | 22:19 |
| stevemar | our catalog stinks | 22:20 |
| darrenc | hey guys, if you have a moment, I'd appreciate a review of my docs patch https://review.openstack.org/#/c/151980/ | 22:20 |
| morganfainberg | stevemar: has the cadf fix merged? | 22:20 |
| morganfainberg | stevemar: that's the last thing sneaking into k2 | 22:20 |
| *** thedodd has quit IRC | 22:21 | |
| morganfainberg | Can you make sure that bug has a priority as well plz. | 22:21 |
| morganfainberg | In LP. | 22:21 |
| stevemar | morganfainberg, it merged | 22:21 |
| ayoung | darrenc, then why didn't you add keystone core to the review | 22:21 |
| stevemar | morganfainberg, marked as medium | 22:21 |
| darrenc | ayoung thanks, will do, still finding my way around here | 22:25 |
| ayoung | darrenc, sure. and thanks for tackling that particular pile | 22:26 |
| darrenc | np | 22:26 |
| *** tellesnobrega_ has joined #openstack-keystone | 22:27 | |
| gyee | morganfainberg, gotta love those L naming choices | 22:27 |
| gyee | can't wait to tell my wife, Honey, I need to attend the "Love" summit | 22:27 |
| *** wanghong has quit IRC | 22:28 | |
| morganfainberg | London or lizard are my choices. | 22:28 |
| gyee | not me, its all LOVE here | 22:28 |
| *** thedodd has joined #openstack-keystone | 22:29 | |
| morganfainberg | stevemar: great using that sha as k2 | 22:31 |
| morganfainberg | Thnx | 22:31 |
| ayoung | Missed the good options. | 22:32 |
| morganfainberg | ayoung: well being that it is supposed to be location/landmark around the summit venue. | 22:32 |
| ayoung | morganfainberg, Ladysmith | 22:33 |
| ayoung | right across the channel. | 22:33 |
| morganfainberg | Sure. | 22:33 |
| ayoung | Langley...right next door | 22:33 |
| morganfainberg | Might have been trademark issues :( | 22:33 |
| ayoung | Its like the TC can | 22:33 |
| morganfainberg | On either. | 22:33 |
| ayoung | 't even use googlemaps | 22:33 |
| ayoung | Lasqueti | 22:34 |
| ayoung | Lynden | 22:34 |
| *** wanghong has joined #openstack-keystone | 22:34 | |
| *** wanghong has quit IRC | 22:34 | |
| morganfainberg | It's not just the tc | 22:35 |
| ayoung | meh | 22:35 |
| morganfainberg | Anyway there is a proposal to "fix" naming releases. | 22:35 |
| ayoung | yeah. | 22:35 |
| *** wanghong has joined #openstack-keystone | 22:35 | |
| ayoung | I propose we secede anyway | 22:35 |
| ayoung | Keystone kicks openstack to the Curb. Goes its own way. Joins the FSF. OK, maybe not that | 22:36 |
| *** raildo_ has quit IRC | 22:36 | |
| ayoung | I liked Monty's proposal | 22:36 |
| stevemar | gyee, the LOVE summit! | 22:37 |
| bknudson | I like Lougheed | 22:37 |
| bknudson | apparently there's standing rocks of lougheed | 22:37 |
| bknudson | so we'd have a mascot | 22:37 |
| bknudson | I assume it's like stonehenge or something. | 22:37 |
| bknudson | stevemar must know since he's canadian. | 22:38 |
| ayoung | Heh...not too much else there... | 22:38 |
| ayoung | 4 streets one way, and four that cross them | 22:39 |
| ayoung | 5 | 22:39 |
| stevemar | bknudson, i have no idea what these lougheed rocks are | 22:39 |
| bknudson | My vote's for London, though ... similar to havana where it doesn't refer to the havana you think of first. | 22:39 |
| *** raildo_ has joined #openstack-keystone | 22:39 | |
| bknudson | http://wikimapia.org/18864488/Standing-Stones-of-Lougheed | 22:39 |
| bknudson | it's right there by the sears outlet. | 22:40 |
| stevemar | bknudson, what the heck is the point of that | 22:40 |
| gyee | heh | 22:40 |
| gyee | Love FTW | 22:40 |
| ayoung | Um... yeah | 22:41 |
| stevemar | can someone with oslo policy powers look at: https://review.openstack.org/#/q/status:open+project:openstack/oslo.policy,n,z | 22:41 |
| stevemar | there are a bunch of easy +2s / +As | 22:41 |
| ayoung | http://en.wikipedia.org/wiki/Standing_Stones_of_Lougheed looks like they were removed as a Hoax by Wikipedia | 22:43 |
| stevemar | you mean someone would lie on the internet | 22:44 |
| ayoung | I climbed a bigger rock than that today. In my snowshoes | 22:44 |
| bknudson | pretty elaborate hoax, but if stevemar hasn't heard of it then maybe it is. | 22:48 |
| bknudson | he's our resident expert on the great white north. | 22:48 |
| stevemar | bknudson, my knowledge is pretty much restricted to toronto and the GTA | 22:53 |
| morganfainberg | dhellmann: ping | 22:56 |
| morganfainberg | dhellmann: re oslo.policy cores | 22:56 |
| *** nellysmitt has joined #openstack-keystone | 22:57 | |
| morganfainberg | stevemar: so. You know like everyone in Canada eh? | 22:57 |
| *** dims_ has quit IRC | 22:57 | |
| morganfainberg | >.> | 22:57 |
| stevemar | theres a population density joke somewhere in there | 23:00 |
| *** Haneef has joined #openstack-keystone | 23:01 | |
| *** nellysmitt has quit IRC | 23:01 | |
| bknudson | can get some ketchup flavored potato chips when in canada. | 23:03 |
| rodrigods | lol | 23:07 |
| rodrigods | want a summit in Brazil | 23:07 |
| bknudson | I wonder what flavors of potato chips they have in brazil that could be better than ketchup. | 23:09 |
| raildo_ | rodrigods: \o/ lets go organize! | 23:09 |
| raildo_ | in the version S, so we can put the release Samba :P | 23:10 |
| *** darrenc is now known as darrenc_afk | 23:10 | |
| rodrigods | bknudson, barbecue (the meat, not the sauce) for example | 23:10 |
| rodrigods | raildo_, heh Samba!!! | 23:10 |
| bknudson | we never got to the brazilian steakhouse in san antonio. | 23:11 |
| *** abhirc has joined #openstack-keystone | 23:12 | |
| raildo_ | bknudson: if the barbecue is done likeit is here in Brazil, i recommend :) | 23:14 |
| *** timcline has quit IRC | 23:15 | |
| *** henrynash has joined #openstack-keystone | 23:15 | |
| *** ChanServ sets mode: +v henrynash | 23:15 | |
| rodrigods | bknudson, they serve in rodizio style? | 23:16 |
| bknudson | rodrigods: I don't know... we didn't go. :( | 23:18 |
| rodrigods | :( | 23:18 |
| *** g4rg4m3|_ has quit IRC | 23:18 | |
| *** jasondotstar has joined #openstack-keystone | 23:19 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Provide option to disable storing of extra attributes in SQL https://review.openstack.org/151939 | 23:22 |
| *** darrenc_afk is now known as darrenc | 23:25 | |
| *** gordc has quit IRC | 23:26 | |
| *** thedodd has quit IRC | 23:28 | |
| *** carlosmarin has quit IRC | 23:29 | |
| morganfainberg | rodrigods, i'm trying to figure out the way to justify a trip down to brazil to hang out w/ you guys ;) | 23:37 |
| morganfainberg | i mean... real business purpose but if i'm around where you are - even better >.> | 23:37 |
| morganfainberg | :P | 23:37 |
| morganfainberg | so... color me impressed by the OnePlus | 23:38 |
| morganfainberg | wow | 23:38 |
| rodrigods | morganfainberg, heh devananda (from ironic) is coming | 23:38 |
| morganfainberg | oh right!? | 23:38 |
| morganfainberg | when is that? | 23:38 |
| morganfainberg | i need to apply for visa i was supposed to join him on that trip | 23:38 |
| *** andreaf has quit IRC | 23:38 | |
| rodrigods | morganfainberg, the last week of Feb, I guess (not sure if it is still the plan) | 23:38 |
| morganfainberg | rodrigods, yeah it's hectic to get visas iirc | 23:39 |
| rodrigods | morganfainberg, yeah :( | 23:39 |
| morganfainberg | i *think* i was trying to join him on that trip | 23:40 |
| morganfainberg | which case i need to do visa stuff asap | 23:40 |
| rodrigods | morganfainberg, heh that would be more than awesome | 23:40 |
| *** dims__ has joined #openstack-keystone | 23:40 | |
| *** dims_ has joined #openstack-keystone | 23:41 | |
| rodrigods | morganfainberg, ++ tomorrow will ask my bosses about his trip (if he is still coming) | 23:42 |
| morganfainberg | please do, i'll chase deva down | 23:42 |
| raildo_ | morganfainberg rodrigods ++ awesome | 23:43 |
| morganfainberg | Devananda's awesome to hangout with. | 23:44 |
| morganfainberg | s/'s/ is | 23:44 |
| *** dims__ has quit IRC | 23:46 | |
| rodrigods | morganfainberg, two OpenStack PTLs here would be almost a tiny summit ;) | 23:47 |
| raildo_ | and a great event for OpenStack in Brazil :D | 23:49 |
| henrynash | morganfainberg: are you ok with: https://review.openstack.org/#/c/151939/ ? | 23:49 |
| morganfainberg | stevemar, got my oneplus today | 23:49 |
| morganfainberg | stevemar, soooooo impressed | 23:49 |
| morganfainberg | henrynash, with the concept yes. have not reviewed the spec | 23:50 |
| stevemar | morganfainberg, oh nice, that was fast | 23:50 |
| henrynash | morganfainberg: when’s the deadline…tomorrow? | 23:50 |
| morganfainberg | stevemar, lets just say it feels like someone there has looked at apple's design and packaging... and one-upped apple | 23:50 |
| morganfainberg | stevemar, blown away at the quality so far [haven't migrated everything over *yet*] | 23:50 |
| stevemar | morganfainberg, nice, very nice, my friend really likes his | 23:51 |
| raildo_ | henrynash: yes | 23:52 |
| morganfainberg | henrynash, 23:59 pm tomorrow | 23:52 |
| morganfainberg | pacific | 23:52 |
| morganfainberg | it needs to have 2x+2 and no blocking comments | 23:53 |
| morganfainberg | approval is just a formality then. | 23:53 |
| morganfainberg | henrynash, OR an email to ML asking for a freeze exception | 23:53 |
| morganfainberg | henrynash, which this would could be easily granted (my guess) | 23:53 |
| *** markvoelker has quit IRC | 23:56 | |
| *** rm_work is now known as rm_work|away | 23:56 | |
| dolphm | morganfainberg: yesterday's AE vs UUID benchmark results http://dolphm.com/benchmarking-openstack-keystone-token-formats cc- lbragstad | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!