Tuesday, 2015-03-24

*** breton has joined #openstack-keystone00:00
*** dims has quit IRC00:00
*** markvoelker has joined #openstack-keystone00:02
*** _cjones_ has quit IRC00:07
openstackgerrithenry-nash proposed openstack/keystone: Don't add unformatted project-specific endpoints to catalog  https://review.openstack.org/16705000:15
jamielennoxmorganfainberg: if you take session, adapter and the auth folder - then you'll quickly discover the dependencies00:15
morganfainbergjamielennox, those are fairly encapsulated00:15
jamielennoxwell, it'll require access which requires service, and require exceptions00:16
jamielennoxit'll require fixture - and i don't know which way you want to break that - probaby put in keystoneauth00:16
*** _cjones_ has joined #openstack-keystone00:17
jamielennoxit'll require discovery00:17
jamielennox(but take only _discover.py)00:17
*** hogepodge has quit IRC00:20
morganfainbergjamielennox, right00:22
jamielennoxthat's most of keystoneclient that's not versioned00:23
openstackgerritMasaki Matsushita proposed openstack/keystone: Make max_header_line configurable  https://review.openstack.org/16612500:26
*** hogepodge has joined #openstack-keystone00:31
*** _cjones_ has quit IRC00:31
*** henrynash has quit IRC00:33
*** ayoung has quit IRC00:43
mfischmorganfainberg: I'm going to do a first pass swag at the doc changes then you can edit and we can iterate00:48
morganfainbergmfisch, sounds good00:48
openstackgerritMerged openstack/python-keystoneclient: Improve feedback message in SSL error  https://review.openstack.org/12976900:55
*** breton has quit IRC00:59
*** breton has joined #openstack-keystone00:59
*** breton has quit IRC01:04
dstanekbknudson: ping01:07
bknudsondstanek: what's up?01:07
dstanekthe update_domain_config entries in https://review.openstack.org/#/c/155919/10/etc/policy.json - are all three of those patches gated by update_domain_config?01:09
*** x58 has quit IRC01:09
bknudsondstanek: yes.01:09
dstanekat least one of them comes through as update_domain_config_group instead of update_domain_config01:09
dstanekand i think _only01:10
bknudsonthere is no identity:update_domain_config_group in policy.json01:10
*** x58 has joined #openstack-keystone01:10
*** breton has joined #openstack-keystone01:10
dstanekbknudson: right, but how does the route for update_domain_config_group map to update_domain_config? i though policy was just mapped to the action01:11
bknudsondstanek: it's the @protected method name, not the action.01:12
bknudsonusually the action is @protected, but not always01:12
dstanekbknudson: ugg...ok, i see now. the resource controller doesn't protect each method, but they all end up calling the same protected method. so much for being able to script this01:14
mfischmorganfainberg: The doc already doesn't reference downgrades that I can see.01:14
mfischmorganfainberg: first swag: https://review.openstack.org/16706701:14
mfischthe backup stuff is pretty solid01:14
mfischwe do it a bit differently but that way is ok01:14
bknudsondstanek: it could be part of a unit test, since there should be a test calling through all these.01:15
bknudsonprobably not worth it.01:15
dstanekbknudson: yeah, i was hoping to do something like i did for keeping the policy and cloud policy files in sync, but ya, not worth it01:16
openstackgerritBrant Knudson proposed openstack/keystone: Tests use Database fixture  https://review.openstack.org/16434001:23
*** breton has quit IRC01:24
*** lhcheng has quit IRC01:24
*** junhongl has joined #openstack-keystone01:24
*** davechen has joined #openstack-keystone01:26
davechenbknudson: hi Brant,01:27
bknudsondavechen: hi01:27
davechenbknudson: just one question,  regarding to your comment on this patch (https://review.openstack.org/#/c/164188/)01:27
davechenbkundson: the command for extension is still useful?01:28
davechenbkundson: or we can just remove them?01:28
davechenbkundson: I have tried them, these command for previous extension still work, but it will be deprecated in the future?01:29
bknudsondavechen: I can't think of a use for migrating an extension anymore... it would be some weird situation where an extension migration failed.01:29
*** junhongl has quit IRC01:30
bknudsonall of the "extension" migrations are run by default01:30
davechenbkundon: so, we can remove them from the doc, right?01:30
davechenbkundon: in order to make it more clear.01:31
bknudsonI'd have to see what the change is that you're planning to make, but if you were to remove any examples using keystone-manage db_sync --extension that would be fine with nme.01:31
bknudsonme01:31
bknudsonthe doc now says "For extension, migrations must be explicitly run for each extension individually." -- this isn't true.01:31
davechenbknudson: yeah, thanks very much, I will draft a new version for review.01:32
bknudsonthere aren't any extensions that you have to run migrations for explicitly01:32
*** junhongl has joined #openstack-keystone01:32
bknudsonunless for some reason you had some kind of migration issue that you need to recover from.01:33
davechenbknudson: something more, what's kind of failure you methioned for extension migration failed?01:33
davechenbknudson: is there any bug associated with the failure?01:34
bknudsonit would have to be something where the database contained invalid data or something... a bug in the code.01:34
bknudsona bug that we don't know about01:34
davechenbknudson: thanks, good to know. :)01:35
openstackgerritBrant Knudson proposed openstack/keystone: Fix up token provider help text  https://review.openstack.org/16706801:35
*** junhongl has quit IRC01:38
openstackgerritBrant Knudson proposed openstack/keystone: Add fernet to test_supported_token_providers  https://review.openstack.org/16706901:41
*** dims has joined #openstack-keystone01:44
openstackgerritMerged openstack/keystone: On creation default service name to empty string  https://review.openstack.org/14696201:45
*** dims_ has quit IRC01:46
openstackgerritBrant Knudson proposed openstack/keystone: Mark some strings for translation  https://review.openstack.org/16707201:47
openstackgerritMerged openstack/keystone: make credential policy check ownership of credential  https://review.openstack.org/15244401:47
openstackgerritMerged openstack/keystone: Deal with PEP-0476 certificate chaining checking  https://review.openstack.org/14498801:48
*** browne1 has quit IRC01:48
openstackgerritMerged openstack/keystone: Update ServiceProviderModel attributes  https://review.openstack.org/16693601:48
*** iamjarvo has joined #openstack-keystone01:49
*** iamjarvo has quit IRC01:49
*** iamjarvo has joined #openstack-keystone01:50
openstackgerritBrant Knudson proposed openstack/keystone: Mark some strings for translation  https://review.openstack.org/16707201:53
openstackgerritMerged openstack/keystone: Add docstrings to keystone.notifications functions  https://review.openstack.org/14731301:57
openstackgerritBrant Knudson proposed openstack/keystone: Fix sample policy to allow user to check own token  https://review.openstack.org/16484802:02
openstackgerritBrant Knudson proposed openstack/keystone: Add unit tests for sample policy token operations  https://review.openstack.org/16020402:02
openstackgerritBrant Knudson proposed openstack/keystone: Fix sample policy to allow user to revoke own token  https://review.openstack.org/15591602:02
*** r-daneel has quit IRC02:02
*** _cjones_ has joined #openstack-keystone02:04
*** _cjones_ has quit IRC02:04
*** _cjones_ has joined #openstack-keystone02:05
stevemarbknudson, doing some damage tonight eh02:08
*** tqtran has quit IRC02:14
*** erkules_ has joined #openstack-keystone02:14
*** erkules has quit IRC02:16
*** junhongl has joined #openstack-keystone02:21
*** browne has joined #openstack-keystone02:21
*** lhcheng has joined #openstack-keystone02:25
*** richm has quit IRC02:26
*** junhongl has quit IRC02:29
*** lhcheng has quit IRC02:29
*** spandhe has quit IRC02:32
*** dims has quit IRC02:51
*** gyee has quit IRC03:06
*** junhongl has joined #openstack-keystone03:07
*** junhongl has quit IRC03:11
*** davechen1 has joined #openstack-keystone03:12
*** alex_xu has quit IRC03:12
*** davechen has quit IRC03:13
dstanekbknudson:03:14
stevemardstanek, better luck next time03:26
*** _cjones_ has quit IRC03:26
dstaneki need to little luck!03:27
*** lhcheng has joined #openstack-keystone03:30
*** _cjones_ has joined #openstack-keystone03:30
*** ccard_ has quit IRC03:34
*** ccard_ has joined #openstack-keystone03:35
*** _cjones_ has quit IRC03:44
*** _cjones_ has joined #openstack-keystone03:45
*** _cjones_ has quit IRC03:45
*** omkarjoshi has quit IRC03:51
*** spandhe has joined #openstack-keystone03:52
*** _cjones_ has joined #openstack-keystone03:58
*** samueldmq has quit IRC04:07
*** spandhe_ has joined #openstack-keystone04:12
*** dims has joined #openstack-keystone04:12
*** spandhe has quit IRC04:14
*** spandhe_ is now known as spandhe04:14
*** dims has quit IRC04:19
*** omkarjoshi has joined #openstack-keystone04:22
openstackgerritDavid Stanek proposed openstack/keystone: Refactor: extract and rename unique_id method  https://review.openstack.org/16276604:27
*** lhcheng has quit IRC04:27
*** omkarjoshi has quit IRC04:31
*** hogepodge has quit IRC04:32
*** lhcheng has joined #openstack-keystone04:34
*** junhongl has joined #openstack-keystone04:39
*** junhongl has quit IRC04:44
*** ishant has joined #openstack-keystone04:48
*** iamjarvo has quit IRC04:50
*** lhcheng_ has joined #openstack-keystone04:54
*** lhcheng has quit IRC04:57
*** omkarjoshi has joined #openstack-keystone04:58
*** hogepodge has joined #openstack-keystone05:01
*** lhcheng_ has quit IRC05:14
*** junhongl has joined #openstack-keystone05:18
openstackgerritMerged openstack/keystone: Fix up token provider help text  https://review.openstack.org/16706805:22
*** harlowja is now known as harlowja_away05:22
openstackgerritMerged openstack/keystone: Remove stevedore from test-requirements  https://review.openstack.org/16654105:23
*** junhongl has quit IRC05:23
*** boris-42 has quit IRC05:28
*** ajayaa has joined #openstack-keystone05:36
*** junhongl has joined #openstack-keystone05:36
*** junhongl has quit IRC05:41
*** dims has joined #openstack-keystone06:04
*** dims has quit IRC06:10
*** _cjones_ has quit IRC06:20
openstackgerritDave Chen proposed openstack/keystone: More content in the guide for core components' migration  https://review.openstack.org/16418806:20
*** junhongl has joined #openstack-keystone06:33
*** pcaruana has quit IRC06:41
*** chlong has quit IRC06:42
*** _cjones_ has joined #openstack-keystone06:47
*** Bsony has joined #openstack-keystone06:57
*** chlong has joined #openstack-keystone07:03
*** browne has quit IRC07:07
*** _cjones_ has quit IRC07:13
*** _cjones_ has joined #openstack-keystone07:18
*** henrynash has joined #openstack-keystone07:18
*** ChanServ sets mode: +v henrynash07:18
*** browne has joined #openstack-keystone07:45
openstackgerrithenry-nash proposed openstack/keystone: Use correct LOG translation indicator for warnings  https://review.openstack.org/16712407:47
*** breton has joined #openstack-keystone07:51
*** dims has joined #openstack-keystone07:55
*** stevemar has quit IRC07:58
*** browne has quit IRC08:01
*** dims has quit IRC08:02
*** chlong has quit IRC08:12
*** ccard__ has quit IRC08:13
*** _cjones_ has quit IRC08:15
*** erkules_ is now known as erkules08:21
*** erkules has quit IRC08:21
*** erkules has joined #openstack-keystone08:21
*** tellesnobrega has quit IRC08:28
*** ericksonfgds has quit IRC08:29
*** pnavarro|off has joined #openstack-keystone08:29
*** ParsectiX has joined #openstack-keystone08:36
*** tellesnobrega has joined #openstack-keystone08:40
*** Bsony has quit IRC08:41
*** omkarjoshi has quit IRC08:42
*** omkarjoshi has joined #openstack-keystone08:42
*** omkarjoshi has quit IRC08:47
*** pnavarro|off is now known as pnavarro08:48
openstackgerrithenry-nash proposed openstack/keystone: Use correct LOG translation indicator for errors  https://review.openstack.org/16714108:59
*** jistr has joined #openstack-keystone09:04
*** krykowski has joined #openstack-keystone09:09
*** ParsectiX has quit IRC09:12
*** ParsectiX has joined #openstack-keystone09:14
*** dims has joined #openstack-keystone09:15
*** _cjones_ has joined #openstack-keystone09:16
*** dims has quit IRC09:20
*** _cjones_ has quit IRC09:20
*** Bsony has joined #openstack-keystone09:38
openstackgerritDave Chen proposed openstack/keystone: Don't add unformatted project-specific endpoints to catalog  https://review.openstack.org/14486009:40
*** krykowski has quit IRC09:43
*** lhcheng has joined #openstack-keystone09:44
*** davechen1 has left #openstack-keystone09:50
openstackgerritMatthieu Huin proposed openstack/keystone: Get method's class name in a python3-compatible way  https://review.openstack.org/15877709:57
*** amakarov_away is now known as amakarov10:01
*** alex_xu has joined #openstack-keystone10:07
*** _cjones_ has joined #openstack-keystone10:17
*** dims has joined #openstack-keystone10:19
*** henrynash has quit IRC10:21
*** _cjones_ has quit IRC10:22
*** markvoelker has quit IRC10:26
*** spandhe has quit IRC10:26
*** samueldmq-away is now known as samueldmq10:26
*** ajayaa has quit IRC10:31
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Return None for missing trust_id in fixture  https://review.openstack.org/16716210:31
*** lhcheng has quit IRC10:32
*** Bsony_ has joined #openstack-keystone10:34
*** Bsony has quit IRC10:35
openstackgerritMerged openstack/keystone: Add unit tests for sample policy token operations  https://review.openstack.org/16020410:36
*** Bsony has joined #openstack-keystone10:46
*** jaosorior has joined #openstack-keystone10:46
*** Bsony has quit IRC10:47
*** Bsony_ has quit IRC10:48
samueldmqmorning10:50
*** Bsony has joined #openstack-keystone10:52
*** Bsony_ has joined #openstack-keystone10:57
*** Bsony has quit IRC10:59
*** Bsony_ has quit IRC11:02
*** Bsony has joined #openstack-keystone11:05
*** Bsony_ has joined #openstack-keystone11:13
*** iamjarvo has joined #openstack-keystone11:14
*** Bsony has quit IRC11:16
*** ajayaa has joined #openstack-keystone11:17
*** Bsony_ has quit IRC11:18
*** _cjones_ has joined #openstack-keystone11:18
*** _cjones_ has quit IRC11:23
*** iamjarvo has quit IRC11:24
*** markvoelker has joined #openstack-keystone11:26
*** Bsony has joined #openstack-keystone11:31
*** markvoelker has quit IRC11:31
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Simplify request making in auth_token tests  https://review.openstack.org/16717911:33
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Create new user plugin tests  https://review.openstack.org/16718011:33
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Serialize user auth plugin  https://review.openstack.org/16718111:33
*** Bsony has quit IRC11:36
*** jdennis has quit IRC11:39
*** jamielennox is now known as jamielennox|away11:45
*** iamjarvo has joined #openstack-keystone11:47
*** markvoelker has joined #openstack-keystone11:58
*** boris-42 has joined #openstack-keystone12:07
*** Bsony has joined #openstack-keystone12:09
*** chlong has joined #openstack-keystone12:12
*** chlong has quit IRC12:15
*** dims has quit IRC12:15
*** dims has joined #openstack-keystone12:16
openstackgerritKamil Rykowski proposed openstack/keystone-specs: Use oslo-versioned-objects to deal with upgrades  https://review.openstack.org/16719512:18
*** _cjones_ has joined #openstack-keystone12:19
*** Bsony has quit IRC12:20
*** henrynash_ has joined #openstack-keystone12:22
*** ChanServ sets mode: +v henrynash_12:22
*** _cjones_ has quit IRC12:23
*** henrynash_ has quit IRC12:28
openstackgerritRodrigo Duarte proposed openstack/keystone: Add domain_id checking in create_project  https://review.openstack.org/15994412:30
*** jistr is now known as jistr|class12:30
*** gordc has joined #openstack-keystone12:32
*** chlong has joined #openstack-keystone12:32
*** chlong has quit IRC12:35
*** ishant has quit IRC12:36
*** chlong has joined #openstack-keystone12:36
*** rushiagr_away is now known as rushiagr12:37
*** ericksonfgds has joined #openstack-keystone12:39
*** chlong has quit IRC12:39
*** iamjarvo has quit IRC12:48
openstackgerritLance Bragstad proposed openstack/keystone: create _member_ role as specified in CONF  https://review.openstack.org/14289712:49
*** bknudson has quit IRC12:51
*** chlong has joined #openstack-keystone12:56
*** henrynash has joined #openstack-keystone12:59
*** ChanServ sets mode: +v henrynash12:59
*** rushiagr is now known as rushiagr_away13:00
*** richm has joined #openstack-keystone13:08
*** diegows has joined #openstack-keystone13:13
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/15742713:13
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Change project name constraint  https://review.openstack.org/15837213:14
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: List projects filtering by is_domain flag  https://review.openstack.org/15839813:14
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Honor domain operations in project table  https://review.openstack.org/14376313:14
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Creating domain and filtering by parent_id  https://review.openstack.org/16137813:14
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Restrict inherited role assignments to subdomains  https://review.openstack.org/16418013:14
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Stop calling domain drivers  https://review.openstack.org/16593613:14
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Change domain_id FK in project table  https://review.openstack.org/16635413:15
*** bknudson has joined #openstack-keystone13:15
*** ChanServ sets mode: +v bknudson13:15
openstackgerritLance Bragstad proposed openstack/keystone: Allow for periods in id_strings on validation  https://review.openstack.org/14502413:17
*** iamjarvo has joined #openstack-keystone13:17
*** iamjarvo has quit IRC13:17
*** iamjarvo has joined #openstack-keystone13:18
*** iamjarvo has quit IRC13:18
*** iamjarvo has joined #openstack-keystone13:19
*** _cjones_ has joined #openstack-keystone13:20
*** zzzeek has joined #openstack-keystone13:21
*** _cjones_ has quit IRC13:25
*** iamjarvo has quit IRC13:30
*** rushiagr_away is now known as rushiagr13:33
*** Bsony has joined #openstack-keystone13:35
*** henrynash has quit IRC13:35
*** henrynash has joined #openstack-keystone13:35
*** ChanServ sets mode: +v henrynash13:35
*** ayoung has joined #openstack-keystone13:38
*** ChanServ sets mode: +v ayoung13:38
*** mattfarina has joined #openstack-keystone13:43
*** r-daneel has joined #openstack-keystone13:44
openstackgerritMerged openstack/keystone: Remove unused metadata parameter from get_catalog methods  https://review.openstack.org/16683713:51
*** jistr|class is now known as jistr13:53
*** samueldmq is now known as samueldmq-away13:55
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Exposes bug when getting hierarchy on Project API  https://review.openstack.org/16723013:57
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Fixes bug when getting hierarchy on Project API  https://review.openstack.org/16723113:58
samueldmq-awayraildo ^13:58
*** obutenko has quit IRC13:59
raildo|awaysamueldmq-away, :) thanks14:00
*** obutenko has joined #openstack-keystone14:02
*** obutenko has quit IRC14:05
*** carlosmarin has joined #openstack-keystone14:11
*** sigmavirus24_awa is now known as sigmavirus2414:15
*** iamjarvo has joined #openstack-keystone14:16
*** _cjones_ has joined #openstack-keystone14:21
*** timcline has joined #openstack-keystone14:21
*** _cjones_ has quit IRC14:25
*** timcline has quit IRC14:29
*** timcline has joined #openstack-keystone14:30
*** browne has joined #openstack-keystone14:30
*** ajayaa has quit IRC14:34
*** ajayaa has joined #openstack-keystone14:35
openstackgerritDavid Stanek proposed openstack/keystone: Refactor: extract and rename unique_id method  https://review.openstack.org/16276614:39
*** timcline_ has joined #openstack-keystone14:47
*** stevemar has joined #openstack-keystone14:48
*** ChanServ sets mode: +v stevemar14:48
dstanekbknudson: did you still have questions on ^14:49
*** browne has quit IRC14:49
openstackgerritDavid Stanek proposed openstack/keystone: Simplify injection testcase setup  https://review.openstack.org/16276714:50
*** thedodd has joined #openstack-keystone14:50
openstackgerritDavid Stanek proposed openstack/keystone: Isolate injection tests  https://review.openstack.org/16276814:50
*** timcline has quit IRC14:50
openstackgerritDavid Stanek proposed openstack/keystone: Decouple notifications from DI  https://review.openstack.org/16276914:50
stevemardstanek, yes please, decouple those guys14:51
*** EmilienM|PTO is now known as EmilienM14:51
dstanekstevemar: done!14:51
openstackgerritDave Chen proposed openstack/keystone: Don't add unformatted project-specific endpoints to catalog  https://review.openstack.org/14486014:56
raildo|awaydstanek, do you have some time to talk about my problem in drop domain table?15:00
ayoungrodrigods, it makes sense to merge https://review.openstack.org/#/c/167230  and https://review.openstack.org/#/c/167231 as the broken test will never pass, right?15:00
dstanekraildo|away: i will in a little bit15:01
*** raildo|away is now known as raildo15:01
raildodstanek, ok :)15:01
openstackgerritDave Chen proposed openstack/keystone: Don't add unformatted project-specific endpoints to catalog  https://review.openstack.org/14486015:04
openstackgerritBrant Knudson proposed openstack/keystone: Tox env for Bandit  https://review.openstack.org/15793015:08
*** Tahmina has joined #openstack-keystone15:10
*** ParsectiX has quit IRC15:10
rodrigodsayoung, I thought the test that should be failing in the first patch would be fixed in the second... you can refer to raildo :) thanks for reviewing this15:10
*** Tahmina_ has joined #openstack-keystone15:19
*** browne has joined #openstack-keystone15:21
openstackgerritBrant Knudson proposed openstack/keystone: Tox env for Bandit  https://review.openstack.org/15793015:22
*** HenryG has joined #openstack-keystone15:27
openstackgerritBrant Knudson proposed openstack/keystone: Tox env for Bandit  https://review.openstack.org/15793015:30
*** bernardo-silva has joined #openstack-keystone15:31
*** bernardo-silva has quit IRC15:32
bknudson^ seems to work now.15:32
bretonbknudson: what's Bandit?15:32
marekdbreton: https://wiki.openstack.org/wiki/Security/Projects/Bandit15:33
bretongoogle says it's something about C++1115:33
bknudsonbreton: https://pypi.python.org/pypi/bandit/15:33
bknudsonbreton: we stole the name on pypi15:33
bknudsongoogle needs to update.15:33
bretonoh cool15:33
ayoungrodrigods, if the test fails, it will never pass the checks.  Merge the two patches into one, and keep the commit ID of whichever has more reviews15:34
bretonI like ast-related stuff15:34
*** krykowski has joined #openstack-keystone15:38
*** browne has quit IRC15:39
*** gyee has joined #openstack-keystone15:39
*** ChanServ sets mode: +v gyee15:39
*** jdennis has joined #openstack-keystone15:40
*** _cjones_ has joined #openstack-keystone15:42
HenryGHi there. While trying to run Neutron functional tests on ubuntu desktop I hit an error which someone suggested may be keystone related.15:43
HenryGhttp://paste.openstack.org/show/196017/15:43
*** _cjones_ has quit IRC15:44
*** _cjones_ has joined #openstack-keystone15:44
openstackgerritRodrigo Duarte proposed openstack/keystone: Add API to create ecp wrapped saml assertion  https://review.openstack.org/16286615:54
openstackgerritRodrigo Duarte proposed openstack/keystone: Add relay_state_prefix to Service Provider  https://review.openstack.org/16607815:54
rodrigodsmarekd, stevemar ^ rebased with master changes, they lost the reviews :(15:55
stevemarrebased!15:55
stevemarrodrigods, i wanted to schedule a google hangout for our presentation, what times work for you next week15:56
stevemarmarekd, ^ morganfainberg same q?15:56
morganfainbergMonday is best for me.15:57
morganfainbergTuesday would have to be really late for marekd due to meetings all day.15:57
*** rushiagr is now known as rushiagr_away15:58
rodrigodsstevemar, marekd, morganfainberg any day, usually from 12 AM UTC to 9 PM UTC is best for me15:59
stevemarmorganfainberg, you on east coast time now?15:59
morganfainbergNo.15:59
rodrigods12 PM UTC*15:59
morganfainbergStill pacific15:59
stevemargah, with the diff between you and marekd, it's going to be hard to find a time16:00
* morganfainberg looks out at 80 degree weather today16:00
htrutaayoung, bknudson, lhcheng: could you please take a look at https://review.openstack.org/#/c/116081/ ?16:01
morganfainberg26c16:01
*** EmilienM is now known as EmilienM|PTO16:02
*** jistr has quit IRC16:05
*** timcline_ has quit IRC16:08
*** timcline has joined #openstack-keystone16:09
ayounghtruta, looking16:10
htrutaayoung: cool16:13
*** iamjarvo has quit IRC16:13
*** htruta has left #openstack-keystone16:13
*** htruta has joined #openstack-keystone16:14
ayounghtruta, I see a check mark on the first file in the patch, so I had already started looking at it somewhen....16:14
ayounghtruta, and now reading the comments...I remember this patch16:15
*** atiwari has quit IRC16:15
* ayoung doesen't scale very well16:15
htrutayou had +2'd it16:15
htrutalol16:15
htrutathought you would remember at first16:16
*** chlong has quit IRC16:16
ayounghtruta, look at the commit message.  THe first two urls are identical16:17
ayoungGET /OS-INHERIT/domains/{domain_id}/users/{user_id}/roles/inherited_to_projects16:17
ayoungGET /OS-INHERIT/domains/{domain_id}/users/{user_id}/roles/inherited_to_projects16:17
ayoungShould that first one be a PUT?16:18
*** thedodd has quit IRC16:19
ayounghtruta, looks like you mean the put done on line 141 of roles.py?16:19
*** junhongl has quit IRC16:20
*** wpf has quit IRC16:21
*** samueldmq-away is now known as samueldmq16:25
*** browne has joined #openstack-keystone16:25
*** mestery has quit IRC16:26
*** mestery has joined #openstack-keystone16:26
*** Bsony has quit IRC16:30
openstackgerritVictor Sergeyev proposed openstack/keystone: Minor tune DB query in Assignment._get_metadata()  https://review.openstack.org/16730516:31
*** thedodd has joined #openstack-keystone16:32
stevemarmarekd, you developed your SP code for OSC on a suuuuper old branch16:37
*** wpf has joined #openstack-keystone16:42
*** junhongl has joined #openstack-keystone16:42
openstackgerritayoung proposed openstack/python-keystoneclient: Inherited role domain calls on keystoneclient v3  https://review.openstack.org/11608116:42
*** tqtran has joined #openstack-keystone16:43
samueldmqayoung, regarding https://review.openstack.org/#/c/16723016:43
samueldmqayoung, yes, failing tests cannot pass, but when they fail, they're skipped with the annotation @test_utils.wip16:44
samueldmqayoung, something created by dstanek16:44
ayoungsamueldmq, ah,  true....I guess it would show up in the skips, too, but really not that useful.  If the test changes betwee nversions of the path (other than removing WIP)  it is also not useful.16:45
samueldmqayoung, see https://github.com/openstack/keystone/blob/master/keystone/tests/unit/utils.py#L55-L8916:46
samueldmqayoung, yes :)16:46
samueldmqayoung, if any change fixes the bug, the wip test fails16:46
samueldmqayoung, wip skips if fail, and fail if passes16:47
ayoungsamueldmq, Heh16:47
samueldmqayoung, I think it's useful, have used many times ... :p16:48
ayoungsamueldmq, so...what I would like to see is that if we are going to use that, all of the tests are changed in the earlier patch, and the later patch only removes the WIP  annotation.  If we are using this, then it would be OK to add WIP to an existing test that we are modifying.  Make sense? It means that the tests don't change when the feature is implemented\16:49
samueldmqayoung, we cannot fix the bug and mark as wip16:49
ayoungI know16:49
samueldmqayoung, if you fix the bug, the test passes, and wip fails :/16:49
*** spandhe has joined #openstack-keystone16:49
ayoungfirst patch has all of the test changes16:49
ayoungsecond one actually fixes the bug16:49
ayoungyou can put some soert of comment in the git message that it partially addresses a bug16:50
samueldmqayoung, got it16:50
samueldmqayoung, got it16:50
samueldmqayoung, gonna fix16:50
ayoungsamueldmq, I actually really like that approach.  It what dolphm and I were shooting for back when he wrote the tests for trusts.16:50
samueldmqayoung, I fixed other tests in the second patch, that should be in the first16:50
dstanekayoung: samueldmq: tests in one patch and code in next (+ remove wip) is my preferred flow as a reviewer16:51
samueldmqdstanek, yes, that's what ayoung is arguing for :)16:51
dstanekone of the first things i do is run the tests against the old code anyway. this just makes it easier16:51
ayoungdstanek, that one has earned you a beer.  Or better16:51
samueldmqand I wasnt undertanding ;/16:51
dstanekayoung: what is better than a beer?16:52
raildodstanek, two beers :)16:52
dstanekraildo: ++16:52
dstanekraildo: are you still having that issue?16:52
raildodstanek, yes :(16:53
*** krykowski has quit IRC16:54
raildodstanek, I put my code in a devstack and make a sql select, to see if the domain table are FK for other table, and I got this:  http://paste.openstack.org/raw/196064/16:54
htrutaayoung: yes, the first one should be a PUT16:55
raildoso, the Fk migration works good and we don't have anything pointed for the domain table16:55
htrutathat's it16:55
dstaneki think the problem is that sqlalchemy remembers the schema to that when we rebuild the database it think the FK still needs to be created16:55
htrutaayoung: any other concerns beside the commit message?16:56
dstanekraildo: maybe morganfainberg or zzzeek would know more16:57
* morganfainberg is in meeting.16:57
raildomorganfainberg, np16:58
raildodstanek, we remove the domain driver here: https://review.openstack.org/#/c/165936/, maybe we forgot some call...16:58
raildodstanek, i'll investigate more but thanks for the help :)16:59
dstanekraildo: i don't think that is it - i think that since we start with a database that has the foreign keys it still thinks we need them at reflection time17:00
raildodstanek, hum.. i got it17:01
*** bdossant has joined #openstack-keystone17:01
*** timcline_ has joined #openstack-keystone17:03
*** lhcheng has joined #openstack-keystone17:04
*** timcline has quit IRC17:07
openstackgerritBrant Knudson proposed openstack/keystone: Tox env for Bandit  https://review.openstack.org/15793017:09
morganfainbergso i have good news and bad news...17:14
morganfainbergand i'll re-iterate this in the meeting17:14
morganfainbergstevemar, https://blueprints.launchpad.net/keystone/+spec/ecp-wrapped-saml-assertions please update your commits to reference that BP as well. FFE has been accepted17:14
morganfainberghenrynash, domain-SQL FFE is accepted.17:15
henrynashmorganfainberg: excellent!17:15
morganfainbergmarekd, stevemar, ECP wrap FFE is accepted17:15
stevemar\o/17:15
morganfainbergraildo, rodrigods, samueldmq, henrynash, unfortunately, reseller - due to scope and associated risk [changing how domains work] will need to land in Liberty17:15
rodrigodsmorganfainberg, ok, fair enough17:16
raildo:'(17:16
morganfainbergIDP registreation also accepted17:16
raildomorganfainberg, ok.. I understand17:16
morganfainbergIDP registration, and domain-SQL need to land by EOW17:16
morganfainbergECP can land by tuesday17:17
morganfainbergfwiw, we have more FFEs than neutron, cinder, and nova combined17:17
morganfainberglets not do that again :P17:18
*** harlowja_away is now known as harlowja17:18
morganfainbergraildo, rodrigods, i think we can revisit jogo's idea for the topic branch and topic core for reseller now, if you want.17:18
morganfainbergwill discuss that later on.17:19
raildomorganfainberg, sure.. I agree17:19
rodrigodsmorganfainberg, ++ I support this idea17:19
rodrigodsmorganfainberg, thanks for the help btw17:19
morganfainberglbragstad, henrynash, stevemar, dstanek, gyee, jamielennox|away, ayoung, bknudson, dolphm, marekd, when triaging bugs for RC unless you *know* [e.g. security bug] it needs to be RC, please use the 'kilo-rc-potential' tag, do not assign them to RC milestone17:20
morganfainberg^^ this goes for everyone doing bug triage17:20
henrynashmorganfainberg: ok17:21
dstanekmorganfainberg: k17:21
stevemargotcha17:23
* morganfainberg is going to be evicting most bugs off the rc1 milestone17:24
gyeemorganfainberg, ack17:24
morganfainbergfull meeting today17:25
morganfainberganyway i'm going to go grab coffee.17:25
*** Tahmina_ has quit IRC17:27
ayoungin order to avoid FFEs, we need to start earlier.  We need to be working *NOW* on stuff for Liberty.  What was clear to me aabout in the Grizzly time frame has now been made clear to you guys:  there is not enough time beween summit and Code freeze to get critizl features done.17:33
morganfainbergayoung, spec proposals are open for L17:34
morganfainbergayoung, now. with the end goal of having what we normally do at the mid cycle available for us to do at the summit17:34
ayoungmorganfainberg, that is why I was pushing to get everything in to backlog17:34
gyeeGive me Liberty or give me FFE!17:34
ayoungwe should not have to wait for "L" specs to be open to work on them17:34
ayoungthat should be an administrative call.17:35
morganfainbergayoung, no we shouldn't, but we were quite backlogged.17:35
ayoungI'm trying to make it easier for you to do the PTL stuff, and let coders code and spec-ers spec17:35
ayoungmorganfainberg, yep17:35
ayoungnot being critical17:35
ayoungand I think you really knew this already17:35
morganfainbergso, now we can make the calls now :) or backlog it17:35
morganfainberg:)17:35
morganfainbergyep17:35
rodrigodsayoung, our experience with HMT and Reseller proves that17:35
ayoungI was talking more to our Brazil team...henrynash has the time on the project to know this as well17:35
ayoungrodrigods, its why I take the Long view17:36
morganfainbergi'd like official FF to be L2 next cycle, leaving L3 for any features that are a priority like reseller to slip17:36
*** Bsony has joined #openstack-keystone17:36
morganfainberg(though reseller itself should land in l1)17:36
ayoungHIghest priority are knocking out things that are going to get in the way.  For me, that is access info, and other client/common type things17:36
rodrigodsmorganfainberg, ++ L217:37
morganfainbergayoung, i have most of the steps done to split out keystoneauth [which is where session, adapter, _discovery, service_catalog, plugins] will move to.17:37
dstanekwhat caused reseller to slip? the fact that they started late because of spec dates or that it took more time than expected?17:38
morganfainbergdstanek, both17:38
ayoungmorganfainberg, separate repo?17:38
morganfainbergayoung, yep17:38
morganfainbergayoung, that clients can use w/o needing to fork-lift in keystoneclient17:38
ayoungmorganfainberg, so that is "common"17:38
raildomorganfainberg, and Feature Proposal Freeze L1?17:38
morganfainbergunless you're interacting with keystone apis, ksc shouldn't be needed17:38
morganfainbergraildo, that is my hope17:38
morganfainbergayoung, it's specific to auth-things, but that is "common" parts of ksc17:39
ayoungmorganfainberg, where does access_info go?17:39
morganfainbergayoung, accessinfo is auth-related17:39
dstanekmorganfainberg: i'm not against changing dates, but would that have helped?17:39
raildodstanek, both... we start implement after K2, and we find some difficult points.17:39
morganfainbergdstanek, if we had the midcycle talks at the summit, with an extra few weeks for spec discussion prior ot summit, yes17:39
*** bdossant has quit IRC17:40
ayoungsession and auth info are two different domains. Do they really belong in the same repo?17:40
morganfainbergayoung, session is what the clients use for auth17:40
dstanekit seems to me that the FFEs are not because they waited too late for a date, but that the work was more than what could be done in a cycle17:40
morganfainbergayoung, keystoneclient session *is* an auth thing (this isn't httpclient)17:40
ayoungaccess_info is ....different...17:40
morganfainbergoh FFS17:41
ayoungmorganfainberg, session assumes a remote keystone.  access_info does not17:41
morganfainbergi'm going to miss my breakfast and coffee now17:41
*** Bsony has quit IRC17:41
ayoungheh17:41
morganfainberg15 min is not enough time.17:41
morganfainbergi tried.17:41
morganfainbergi really did17:41
* morganfainberg is grumpy now.17:42
ayoungmorganfainberg, I explicitly did not ping you on my original message to let you go eat.  It was you who responded17:42
ayoungGo get food.17:42
morganfainbergi need to go to a coffee shop17:42
morganfainbergthey are testing firealarms here17:42
ayoungYou need a chemex17:42
morganfainberghence why 15 mins isn't enough time17:42
ayoungah...go to coffee shop anyway17:43
david8huLarge McCoffee is still $0.9917:43
ayoungdavid8hu, it fails the "Coffee" test17:44
david8huThey call it the premium coffee.  It got to mean something :)17:44
ayoungdavid8hu, if it were real coffee, they would be raising the price, not lowering it17:45
david8huLOL17:45
dstanekpremium sludge17:48
openstackgerritMerged openstack/keystone: Fix sample policy to allow user to revoke own token  https://review.openstack.org/15591617:54
*** timcline_ has quit IRC17:56
morganfainbergMeeting will start a minute or two late.17:57
*** timcline has joined #openstack-keystone17:57
samueldmqmorganfainberg, ack (reseller)17:58
samueldmqmorganfainberg, how much time do we have till kilo (final release) ?17:59
*** Tahmina has quit IRC17:59
samueldmqmorganfainberg, 1 month?17:59
dstaneksamueldmq: until it ships?18:01
samueldmqdstanek, yep18:01
dstaneksamueldmq: https://wiki.openstack.org/wiki/Kilo_Release_Schedule18:01
samueldmqdstanek, 1 month then18:02
dstaneksamueldmq: if you are talking about code then i would guess much less18:02
samueldmqdstanek, makes sense, then 2 or 3 weeks ..18:03
samueldmqdstanek, so yeah, that maybe risky to land reseller, you guys have more xp on this :)18:03
samueldmqdstanek, then I just agree18:03
samueldmqdstanek, I was just tring to figure out how we were in time, thanks18:03
dstanekwell, you have to get the code completed and then through review18:03
*** jamielennox|away is now known as jamielennox18:04
marekdmorganfainberg: rodrigods stevemar: Actually I wanted to say this during the meeting: I will be unavailable for next two weeks (starting from Friday), so maybe we could organize some hangout this Thursday?18:05
stevemarmarekd, sure, topol is away this week so it looks like we might have 2 then18:05
stevemarbut we can do thursday18:05
rodrigodsstevemar, marekd works for me too18:06
stevemarmarekd, does around this time work for you?18:07
marekdyeah18:07
stevemark18:07
marekdlater is fine too.18:07
*** Akshik has joined #openstack-keystone18:10
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Exposes bug when getting hierarchy on Project API  https://review.openstack.org/16723018:20
*** omkarjoshi has joined #openstack-keystone18:21
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Fixes bug when getting hierarchy on Project API  https://review.openstack.org/16723118:23
samueldmqayoung, raildo ^18:23
marekdstevemar: speaking osc - let me then fix what I had broken.18:27
marekd(re super old branch)18:27
stevemarmarekd, just hit the rebase button18:27
marekdnow you know my secret.18:28
*** bdossant has joined #openstack-keystone18:34
*** bdossant has quit IRC18:35
morganfainbergok ayoung have coffee18:58
ayoungmorganfainberg, yay18:58
morganfainbergayoung, so my thought is FreeIPA should be setup in the local node w/ explicit data18:58
amakarovmorganfainberg, tbh I'd like to do some changes to revocation engine itself18:58
morganfainbergthat way if we have a *ton* of requests/gate jobs we can't overload a limited resource18:58
ayoungok,  so Is the issue with FreeIPA sepcifically, or just having a shared host for LDAP testing18:58
morganfainbergayoung, any "shared" resource18:59
morganfainbergit should be something that is setup in devstack / local node so that i can download it and work locally18:59
morganfainbergw/o needing access to infra resources18:59
ayoungmorganfainberg, OK,  so we have the Devstack work to setup an OpenLDAP instance18:59
morganfainbergayoung, yep. that was my only concern with what you want to do18:59
ayoungbut...freeipa needs Horizon set up, and will conflict on SSL...it really is a bad set up to put them on the same host19:00
morganfainbergayoung, and this should be in the functional testing wheelhouse19:00
morganfainbergayoung, there is some work to do multi-node gate checks19:00
gyeeayoung, morganfainberg, where are we with the out-of-tree work for LDAP driver rewrite?19:01
ayoungWhy no shared resource?  Its not like we are going to oveload the IPA server with queries19:01
ayounggyee, SSSD.19:01
ayoungWas testing it recently, works fine19:01
jamielennoxmorganfainberg, bknudson: things i would want for next KSC release are: https://review.openstack.org/162529 https://review.openstack.org/16327119:01
morganfainbergayoung, alternatively, can FreeIPA live behind a proxy? so /FreeIPA and i know horizon is working on using non-root as well so it could be /dashboard19:01
*** jistr has joined #openstack-keystone19:02
morganfainbergayoung, because a single server on the internet for testing is a risk factor. and if *everyone* wants to test it they don't have a clear means to run their tests locally19:02
ayoungmorganfainberg, we could, in theory put them on the same instance, but...yuck19:02
henrynashjamielennox, morganfainberg, bknudson: …and I’ll be posting the client libs for domain config soon too19:02
ayounggyee, coming in a moment....19:02
morganfainbergayoung, just keep in mind we want to run this *anywhere*. Not just from RAX19:03
morganfainbergor HP19:03
morganfainbergor Infra cloud19:03
ayoungmorganfainberg, OK, I was talking explicitly "check"  though19:03
jamielennoxhenrynash: i think morganfainberg's planning it for tomorrow, but we're getting fairly frequent now19:03
morganfainbergsaying all gating relies on a node [ignore the zuul, nodepool things atm], in a cloud is kind of bad19:03
ayoungwe can always make it so that you can run against a pre-setup server19:03
henrynashjamielennox: as long as there is another before rc, i can wait for that19:03
ayounggyee, http://adam.younglogic.com/2015/03/key-fed-lookup-redux/19:03
bknudsonthere's always something we want in the next ksc release... no need to hold up since we can release every couple minutes if we want.19:03
gyeeayoung, but sssd is not per-domain right?19:03
morganfainbergayoung, i also think -infra will not be happy about having to run a special snowflake node19:04
morganfainbergayoung, ignoring again zuul and nodepool19:04
morganfainbergi know they want to eventually HA those things.19:04
ayounggyee, sssd can handle multi-domain itself19:04
ayoungmorganfainberg, I'm just worried that devstack will mess up the IPA install.  IPA is very locked down19:04
morganfainbergayoung, does it handle things sanely when the DN is identical, just different actual servers?19:04
morganfainbergayoung, talk w/ clarkb about a multi-node job19:05
morganfainbergayoung, i think this is also where we could do k2k testing19:05
morganfainbergif we do it right19:05
ayoungmorganfainberg, ok...let's punt on the full IPA until I can get somethign working with devtack.  LDAP...19:05
ayoungLet's do this:19:05
ayounguse the devstack ldap work to bring up an OpenLDAP instance, and then after the run,  mount the domain there.19:05
morganfainbergLDAP is much easier as we already have some of the work done for us [just needs some updates] and being placed into a functional setup scenario19:05
morganfainbergayoung, yep. that sounds about right to me19:06
ayoungmorganfainberg, did you see the testing spec review I posted?19:06
gyeeayoung, do I need to setup a different auth url per domain?19:06
morganfainbergyah i saw it.19:06
morganfainberghaven't read it in depth19:06
ayounggyee, hmmm....no clue.19:06
gyeeok I need to give it a try19:07
ayounggyee, do we have a way to map to domain in the mapping layer?19:07
ayounggyee, ...if you can replicate what I did with your LDAP...that wouldbe fantsinominal!19:07
gyeeyes if domain is a separatte attribute19:07
ayoungmorganfainberg, https://review.openstack.org/#/c/163882/19:08
*** edmondsw has joined #openstack-keystone19:10
* morganfainberg goes to unblock reviews now19:10
morganfainbergstevemar, make sure to update the ECP reviews to also point at the BP19:11
*** ajayaa has quit IRC19:12
openstackgerritBrant Knudson proposed openstack/keystone: Tox env for Bandit  https://review.openstack.org/15793019:12
morganfainbergstevemar, marekd, there is an API change for https://review.openstack.org/#/c/152156/ or did it already land?19:14
*** sigmavirus24 is now known as sigmavirus24_awa19:17
*** sigmavirus24_awa is now known as sigmavirus2419:17
*** ChanServ changes topic to "High Priority Reviews: https://gist.github.com/dolph/651c6a1748f69637abd0 | Review RC Blocking Reviews. | RC Milestone: https://launchpad.net/keystone/+milestone/kilo-rc1"19:18
morganfainberghenrynash, marekd, stevemar, FFE BPs should be all unblocked19:18
morganfainberghenrynash, marekd, stevemar, i'll send the i18n email later today for string freeze exception notifications19:19
stevemarmorganfainberg, thx19:19
morganfainbergamakarov, i'm open to seeing enhncements to the revocation engine19:29
*** Akshik has quit IRC19:29
*** tellesnobrega has quit IRC19:29
*** gyee has quit IRC19:30
amakarovmorganfainberg, the idea is to move that fancy tree-logic to backend driver level so we can use advantages of SQL to search events for token: now we extract entire revocation tree, build it and then and only then - match the token against it19:31
*** jistr has quit IRC19:31
morganfainbergamakarov, so realize the same search logic needs to be ported into middleware19:32
morganfainbergsince ksm needs to be able to handle the revocations as well19:32
morganfainbergi'd rather not have 2 different ways that can diverge to check revocations19:32
amakarovmorganfainberg, oh, thanks for pointing19:32
morganfainbergstrictly from a maintainability standpoint19:32
*** tellesnobrega has joined #openstack-keystone19:33
morganfainbergamakarov, but i'm sure we can improve the logic / make it more readable19:33
morganfainbergprobably with some recursion.19:33
morganfainberginstead of the very terse looping we have now19:33
amakarovmorganfainberg, ok, I'll work on algorithm modification19:34
morganfainbergamakarov, only if you want to ;)19:34
morganfainbergamakarov, getting support in KSM is more important19:35
amakarov1 more thing: what about Redis backend? I realize it leads to a dead-end of sorts? )19:35
morganfainbergamakarov, we can add it in liberty. unless we deprecate PKI and UUID tokens, we can't eliminate these persistence backends19:36
morganfainbergamakarov, it doesn't hurt us to have it as a first-order backend.19:36
morganfainbergbut we should make a functional testing scenario that will actually test redis19:36
morganfainbergnot just some mocked thing that might/mightnot be redis19:36
morganfainbergzzzeek, i'm planning on circling up on the lock thing for dogpile19:36
morganfainbergzzzeek, i forgot to ask you directly for feedback on it. i just wanted to check to see if it was something you'd like in memcache to bring it up to par with redis before writing tests19:37
amakarovmorganfainberg, understood: postponed to liberty, add functional tests, think about the lock (default is just the polling)19:37
zzzeekmorganfainberg: no hurry here :)  my only issue is forgetting about old PRs19:37
morganfainbergzzzeek, well i know where you lurk !19:37
zzzeekmorganfainberg: i might have commented on memcache API compat ?19:37
morganfainbergi can poke you ;)19:37
morganfainbergzzzeek, i think it was just "hey tests"19:38
morganfainbergzzzeek, but i'm under rc-things19:38
morganfainberg:P19:38
morganfainbergzzzeek, heck i promised that PR...uhhh.. 6 months ago to you19:38
morganfainberg:P19:38
*** spandhe has quit IRC19:38
morganfainbergbut if that lands i can rip out all the custom log logic from keystone's kvs/cache stuff19:38
morganfainbergs/log/lock19:38
morganfainbergin liberty19:39
morganfainbergwill simplify a lot of things.19:39
morganfainbergayoung, soooooo i never thought i'd say this but...19:39
*** morganfainberg is now known as needslesscoffee19:39
needslesscoffeeayoung, ...19:39
ayoungI have what that gentleman was having....19:40
ayoungI'll...19:40
needslesscoffeei think i'm up to 7 shots of espresso...19:40
needslesscoffee>.<19:40
*** spandhe has joined #openstack-keystone19:40
dstanekneedslesscoffee: rough day?19:41
needslesscoffeedstanek, yeah19:42
needslesscoffeedstanek, day 2 of 3 of fire alarm testing in my apt. complex19:42
dstanekneedslesscoffee: haha, they either work or they don't - they may just be trying to torture you19:43
*** henrynash has quit IRC19:43
needslesscoffeedstanek, need to test every apartment individually19:43
ayoungneedslesscoffee, More like   (O‿O)19:43
needslesscoffeedstanek, unfortunately, it's by zone.19:43
*** henrynash has joined #openstack-keystone19:43
*** ChanServ sets mode: +v henrynash19:43
needslesscoffeedstanek, i'm just in the middle so i hear *all* the zones19:43
needslesscoffeeactually it's 4 days of testing19:43
ayoungキタ━━━(゜∀゜)━━━!!!!!19:43
*** ccard_ has quit IRC19:43
needslesscoffee(ノಠ益ಠ)ノ ┻━┻19:44
ayoung(屮゚Д゚)屮 ┻━┻19:45
stevemarneedslesscoffee, KSC being released tomorrow? or soon?19:45
needslesscoffee┬─┬ ︵ /(.□. \)19:45
needslesscoffeestevemar, today or tomorrow19:45
needslesscoffeestevemar, have not decided19:45
needslesscoffeestevemar, a reason i should pick one over the other?19:45
stevemarokay, i have an OSC patch that depends on a new KSC release, just double checking19:45
ayoungI wonder what we are actually saying in Japanese when we write that.19:45
*** _cjones_ has quit IRC19:45
needslesscoffeestevemar, you can't rely on the KSC stuff unless g-r updates19:46
*** _cjones_ has joined #openstack-keystone19:46
needslesscoffeestevemar, wont happen in kilo19:46
needslesscoffeeiirc g-r is frozen19:46
stevemarneedslesscoffee, that's unfortunate19:46
stevemari guess g-r won't be updated until after rc1?19:47
needslesscoffeestevemar, yes. but don't do a "what keystone did with cryptography"19:47
needslesscoffeeand make choices about code paths that are 0.7+ and the minimum is 0.419:47
stevemarneedslesscoffee, yeah, trying to avoid that19:47
*** ccard_ has joined #openstack-keystone19:48
*** needslesscoffee is now known as morganfainberg19:50
*** omkarjoshi has quit IRC19:50
*** _cjones_ has quit IRC19:50
*** _cjones_ has joined #openstack-keystone19:52
dstanekmorganfainberg: how did the tests not catch the cryptography version issues?19:59
morganfainbergdstanek, because nothing tests minimum versions installed19:59
morganfainbergdstanek, cryptography>=0.419:59
morganfainbergwell that installs 0.8 right now20:00
*** ccard__ has joined #openstack-keystone20:00
morganfainbergnothing says "we should try this with 0.4"20:00
dstanekmorganfainberg: i thought the code was using something that only appeared in 0.720:00
morganfainbergyep20:00
morganfainbergso if all our tests install 0.820:00
morganfainberghow did we miss that this doesn't work with the minimum in requirements? pretty easy20:01
bknudsonmorganfainberg: didn't you know that MultiFernet was only added in cryptography 0.7?20:01
morganfainbergbknudson, not until someone pointed it out to me.20:02
*** ccard_ has quit IRC20:02
morganfainbergi think it was zigo20:02
dstanekmorganfainberg: the check tests would have installed the version from requirements right? or did we have a newer version in our requirements that what was in g-r?20:02
morganfainbergdstanek, the check installs the maximum available that is in compliance with requirements20:03
morganfainbergdstanek, what happens when you tell pip to install package>=1.020:03
morganfainbergand 2.0 is available20:03
dstanekmorganfainberg: that's all kinds of mess20:04
morganfainbergwelcome to pip20:04
dstanekit's not a pip thing, it's that we don't pin to a version20:04
morganfainbergdstanek, well the issue is tracking every change, including transient changes20:05
morganfainbergdstanek, pip is a very poor packaging system20:05
morganfainbergwith bad dep resolution20:05
morganfainbergso pinning = breaking things often20:05
morganfainbergwow... my battery life has crashed on this laptop20:05
morganfainbergback down to ~3h20:05
morganfainbergfrom full charge20:06
morganfainberg:(20:06
morganfainbergless20:06
morganfainberg2.5h20:06
dstaneksame thing happened to my air20:06
morganfainbergwas like within 1 week20:06
morganfainbergmaybe a yosemite update broke things20:06
morganfainbergit went from 2hr -> 5-6hr when going mavericks -> yosemite20:06
morganfainbergnow it just got real bad again20:07
*** amakarov is now known as amakarov_away20:07
marekdmorganfainberg: https://review.openstack.org/#/c/152156/ does change API20:12
morganfainbergmarekd, did we reflect that change in the -specs repo for the API doc?20:12
morganfainbergmarekd, was my question20:12
marekdmorganfainberg: ah, sorry20:13
marekdmorganfainberg: yes, we did: https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-federation-ext.rst#api-resources20:13
*** omkarjoshi has joined #openstack-keystone20:17
*** timcline_ has joined #openstack-keystone20:19
*** timcline has quit IRC20:19
morganfainbergmarekd, great20:21
*** _cjones_ has quit IRC20:23
*** _cjones_ has joined #openstack-keystone20:23
openstackgerritMorgan Fainberg proposed openstack/keystone: Add relay_state_prefix to Service Provider  https://review.openstack.org/16607820:23
openstackgerritMorgan Fainberg proposed openstack/keystone: Add API to create ecp wrapped saml assertion  https://review.openstack.org/16286620:23
openstackgerritMorgan Fainberg proposed openstack/keystone: Add API to create ecp wrapped saml assertion  https://review.openstack.org/16286620:23
openstackgerritMorgan Fainberg proposed openstack/keystone-specs: Add a relay_state_prefix to the service provider resource  https://review.openstack.org/16608620:24
henrynashayoung, stevemar: would one of you like to do the honors on https://review.openstack.org/#/c/166010/2 now that the FFE has been granted?20:29
ayounghenrynash,  "FIRE IN THE HOLE!"20:31
* morganfainberg glares at the laptop...20:32
morganfainbergwhy does your battery life suck so suddenly20:32
bknudsonmorganfainberg: ever see those ads about your computer slowing down?20:32
morganfainbergbknudson, ads?20:32
morganfainbergbknudson, what are these things you speak of?20:33
bknudsonmorganfainberg: for the virus checkers20:33
bknudsonthey're everywhere20:33
morganfainbergbknudson, /me looks at adblock and ghostery20:33
morganfainbergbknudson, yep don't see them20:33
stevemarayoung, i was literally going to say that when i approved it20:33
stevemarmorganfainberg, bknudson is referring to this kinda junk: https://www.youtube.com/watch?v=PujDMHFBgXU20:35
henrynashayoung. stevemar: ah, captains!20:36
morganfainbergstevemar, woooooosh ^^ adblock, ghostery reference above20:36
bknudsonmorganfainberg: all you have to do is give them your password.20:36
bknudsonor install an application for them.20:37
morganfainbergbknudson, all good. totally sending my password now: 1234520:37
henrynashstevemar: you didn’t signed up right away?20:38
stevemarhenrynash, i bought 3 licences just to be sure20:39
henrynashstevemar: Im sure it will fix everything and, after all, they said you PC would be “100% faster” (what the hell does that mean!)20:40
*** nellysmitt has joined #openstack-keystone20:47
*** nellysmitt has quit IRC20:47
*** __TheDodd__ has joined #openstack-keystone20:50
marekdhey, in that adv, there were real people for whom it worked...! :-)20:50
*** jaosorior has quit IRC20:52
*** thedodd has quit IRC20:53
*** timcline_ has quit IRC20:55
*** samueldmq is now known as samueldmq-away20:55
stevemarmarekd, sound like youre gonna buy it20:58
stevemarhenrynash, would you hate me if i scheduled something for friday at 1800 UTC?20:58
stevemari shouldn't do that, i would hate it if someone did that to me20:59
* morganfainberg watches 0% battery left.20:59
morganfainbergthis ought to be interesting to see how far it actually goes.20:59
marekdstevemar: i will buy for my every VM, current and the future one.21:02
stevemarthat'll make the news, CERN just purchased 100,000 licenses of mycleanpc21:03
marekd:D21:03
stevemarto make their *VMs* faster21:03
stevemarthey will make a special server edition21:03
*** spandhe has quit IRC21:04
marekdstevemar: imagine saying noggin143 saying in the adv: "mycleanpc really helped discover Higgs boson" :D21:04
stevemarlol21:04
stevemarwell the vms would be 100% faster21:04
stevemar"it'll be 100% faster, guaranteed*!" -- * not a guarantee21:05
*** lhcheng has quit IRC21:05
*** lhcheng has joined #openstack-keystone21:05
*** spandhe has joined #openstack-keystone21:06
marekdi wonder what happens it I buy 2 licences, run it once (100% faster) and once again (100% faster again). Will it actually speed up 4x ?21:06
*** openstackgerrit has quit IRC21:07
*** openstackgerrit has joined #openstack-keystone21:07
* marekd magic21:07
*** gokrokve has joined #openstack-keystone21:13
*** omkarjoshi has quit IRC21:25
openstackgerritMerged openstack/keystone: Remove unused domain config method paramters  https://review.openstack.org/16601021:27
*** harlowja is now known as harlowja_away21:32
stevemarmarekd, you cool with waiting for a while for SPs in OSC?21:33
stevemari dont want to depend on a version of KSC that we don't pre-req21:34
*** edmondsw has quit IRC21:39
*** redrobot has quit IRC21:42
openstackgerritMerged openstack/python-keystoneclient: Add a FederatedBase v3 plugin  https://review.openstack.org/16327121:46
*** redrobot has joined #openstack-keystone21:47
*** redrobot is now known as Guest938521:47
*** wolsen has quit IRC21:48
*** tristanC has quit IRC21:48
*** wolsen has joined #openstack-keystone21:49
*** tristanC has joined #openstack-keystone21:49
morganfainberg.21:50
*** mattfarina has quit IRC21:53
*** Guest9385 is now known as redrobot22:00
morganfainbergstevemar: this sounds like a case of "should be able to check if ksc has support and enable feature if it does" esp for osc22:00
morganfainbergSo your capabilities become more dynamic. *shrug* might not be worth the effort22:00
*** dstanek has quit IRC22:01
*** nonameentername has quit IRC22:01
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Add get_communication_params interface to plugins  https://review.openstack.org/14126722:03
*** bknudson has quit IRC22:04
*** lhcheng has quit IRC22:04
*** spandhe has quit IRC22:05
*** nonameentername has joined #openstack-keystone22:05
*** harlowja_away is now known as harlowja22:05
*** lhcheng has joined #openstack-keystone22:06
*** spandhe has joined #openstack-keystone22:08
*** carlosmarin has quit IRC22:13
*** dstanek has joined #openstack-keystone22:14
*** ChanServ sets mode: +v dstanek22:14
*** carlosmarin has joined #openstack-keystone22:14
*** pnavarro has quit IRC22:17
*** gordc has quit IRC22:18
*** henrynash has quit IRC22:20
*** __TheDodd__ has quit IRC22:35
*** lhcheng_ has joined #openstack-keystone22:39
*** lhcheng has quit IRC22:39
*** joesavak has joined #openstack-keystone22:40
*** carlosmarin has quit IRC22:50
*** mattfarina has joined #openstack-keystone22:54
*** ayoung has quit IRC23:01
*** markvoelker has quit IRC23:06
*** dims has quit IRC23:14
*** dims has joined #openstack-keystone23:16
*** dims has quit IRC23:17
*** dstanek has quit IRC23:17
*** dims has joined #openstack-keystone23:17
*** dstanek has joined #openstack-keystone23:18
*** ChanServ sets mode: +v dstanek23:18
*** chlong has joined #openstack-keystone23:20
*** joesavak has quit IRC23:24
*** stevemar has quit IRC23:34
*** chlong has quit IRC23:35
*** stevemar has joined #openstack-keystone23:35
*** ChanServ sets mode: +v stevemar23:35
*** chlong has joined #openstack-keystone23:35
*** markvoelker has joined #openstack-keystone23:47
*** markvoelker has quit IRC23:52
*** gyee has joined #openstack-keystone23:54
*** ChanServ sets mode: +v gyee23:54
*** lhcheng_ is now known as lhcheng23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!