Wednesday, 2015-07-15

dims__amakarov: nice! i live south of boston around 45 mins with zero traffic, but usually at least an hour drive away00:09
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20160100:10
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/19725400:11
amakarovdims__: do you know, what shall I have to get to the Physics Research Building?00:11
amakarovs/shall/should/00:11
amakarovdims__: must I have some paper or my honest word will be enough?00:12
dims__amakarov: you mean for identification? we should just be able to walk in :)00:13
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/20182700:14
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/20183500:14
amakarovdims__: ok, if they'll take me to the ground, I'll yell you told me to do it! :)00:15
dims__amakarov: i will try to arrive early (see coffeehouse https://etherpad.openstack.org/p/keystone-liberty-midcycle-meetup)00:15
dims__haha amakarov00:15
amakarovdims__: they've finally updated the etherpad!00:17
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20160100:18
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth-saml2: Updated from global requirements  https://review.openstack.org/20185600:18
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/19725400:18
amakarovdims__: thanks for the point - I'll be there00:20
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/20182700:21
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf: Updated from global requirements  https://review.openstack.org/20186400:21
*** woodster_ has quit IRC00:21
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/20183500:21
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient-kerberos: Updated from global requirements  https://review.openstack.org/19231900:21
*** topol has joined #openstack-keystone00:22
*** ChanServ sets mode: +v topol00:22
*** david-lyle has quit IRC00:25
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20160100:25
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth-saml2: Updated from global requirements  https://review.openstack.org/20185600:25
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/19725400:25
*** topol has quit IRC00:26
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/20182700:28
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf: Updated from global requirements  https://review.openstack.org/20186400:29
*** Kennan2 is now known as Kennan00:29
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/20183500:29
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient-kerberos: Updated from global requirements  https://review.openstack.org/19231900:29
*** ankita_wagh has quit IRC00:32
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20160100:32
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth-saml2: Updated from global requirements  https://review.openstack.org/20185600:32
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/19725400:33
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/20182700:36
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf: Updated from global requirements  https://review.openstack.org/20186400:36
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/20183500:36
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient-kerberos: Updated from global requirements  https://review.openstack.org/19231900:36
*** bitblt has quit IRC00:44
*** mhu has quit IRC00:46
openstackgerritEric Brown proposed openstack/keystone: Deprecate LDAP assignment driver options  https://review.openstack.org/20100800:48
*** amakarov has quit IRC00:52
*** mhu has joined #openstack-keystone00:52
*** _hrou_ has joined #openstack-keystone00:52
*** dims__ has quit IRC00:54
*** hrou has quit IRC00:55
*** browne has quit IRC00:58
*** tqtran has quit IRC01:09
*** ankita_wagh has joined #openstack-keystone01:10
*** lhcheng has quit IRC01:10
*** lhcheng has joined #openstack-keystone01:12
*** ChanServ sets mode: +v lhcheng01:12
*** davechen has joined #openstack-keystone01:18
*** lhcheng_ has joined #openstack-keystone01:25
*** bradjones has quit IRC01:26
*** dims_ has joined #openstack-keystone01:28
*** lhcheng has quit IRC01:28
*** bradjones has joined #openstack-keystone01:30
*** bradjones has quit IRC01:30
*** bradjones has joined #openstack-keystone01:30
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20160101:33
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth-saml2: Updated from global requirements  https://review.openstack.org/20185601:33
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/19725401:33
*** darrenc is now known as darrenc_afk01:36
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/20182701:36
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf: Updated from global requirements  https://review.openstack.org/20186401:37
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/20183501:37
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient-kerberos: Updated from global requirements  https://review.openstack.org/19231901:37
*** topol has joined #openstack-keystone01:38
*** ChanServ sets mode: +v topol01:38
*** topol has quit IRC01:43
*** spandhe has quit IRC01:48
Kennanhi any keystone cores here?  I want to know if openstackclient http://docs.openstack.org/developer/python-openstackclient/man/openstack.html01:48
Kennanis fully support V3 ?01:48
*** geoffarnold has quit IRC01:50
*** boris-42 has quit IRC01:52
*** markvoelker has quit IRC01:54
*** geoffarnold has joined #openstack-keystone01:54
lhcheng_Kennan: openstackclient supports v301:54
*** mylu has quit IRC01:55
*** fangzhou has quit IRC01:55
*** mhu has quit IRC01:55
lhcheng_note to set env variable "export OS_IDENTITY_API_VERSION=3" to make it work01:56
*** darrenc_afk is now known as darrenc01:57
*** mhu has joined #openstack-keystone01:57
*** ankita_wagh has quit IRC01:58
Kennanhi lucheng:01:58
Kennansorry typo01:58
Kennanlhcheng:01:58
Kennando you know what environment variable should set for v3 cli ?01:59
Kennanlike os-url01:59
*** markvoelker has joined #openstack-keystone02:00
lhcheng_https://github.com/openstack/python-openstackclient/blob/master/doc/source/authentication.rst02:02
lhcheng_see bottom for the minimum env variable to set02:02
*** Kennan2 has joined #openstack-keystone02:02
lhcheng_Kennan: ^02:02
*** Kennan has quit IRC02:03
*** david-lyle has joined #openstack-keystone02:12
*** topol has joined #openstack-keystone02:13
*** ChanServ sets mode: +v topol02:13
*** dims_ has quit IRC02:17
*** topol has quit IRC02:17
*** markvoelker has quit IRC02:18
*** mylu has joined #openstack-keystone02:23
*** amakarov has joined #openstack-keystone02:26
openstackgerritNing Sun proposed openstack/keystone: Fixes grammar in setup.rst in doc source  https://review.openstack.org/20141702:28
*** geoffarnold has quit IRC02:34
*** david-lyle has quit IRC02:35
*** davechen has quit IRC02:43
*** davechen has joined #openstack-keystone02:46
*** lhcheng_ has quit IRC02:52
*** hakimo has joined #openstack-keystone02:52
*** hakimo_ has quit IRC02:54
*** richm has quit IRC02:57
*** jecarey has joined #openstack-keystone03:01
*** mylu has quit IRC03:01
*** davechen1 has joined #openstack-keystone03:07
*** amakarov has quit IRC03:08
*** davechen has quit IRC03:10
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystonemiddleware: Dynamic Policies Fetch and Cache  https://review.openstack.org/18856103:14
*** dims_ has joined #openstack-keystone03:19
*** dims_ has quit IRC03:23
*** ankita_wagh has joined #openstack-keystone03:29
openstackgerritjiaxi proposed openstack/keystone: when creating a group without specifying a domain should return 400  https://review.openstack.org/20151103:30
*** markvoelker has joined #openstack-keystone03:35
*** david-lyle has joined #openstack-keystone03:38
*** markvoelker_ has joined #openstack-keystone03:38
*** markvoelker has quit IRC03:40
*** _cjones_ has joined #openstack-keystone03:41
*** _cjones_ has quit IRC03:41
openstackgerritDave Chen proposed openstack/keystone: Show helpful message when request body is not provided  https://review.openstack.org/19590303:44
openstackgerritDave Chen proposed openstack/keystone: Region creation with id given also need schema validation  https://review.openstack.org/20100703:44
openstackgerritFernando Diaz proposed openstack/keystone: Move oauth1 into keystone core  https://review.openstack.org/20168403:54
*** topol has joined #openstack-keystone03:58
*** ChanServ sets mode: +v topol03:58
*** markvoelker has joined #openstack-keystone04:04
*** topol has quit IRC04:05
*** crc32 has quit IRC04:06
*** _hrou_ has quit IRC04:07
*** markvoelker_ has quit IRC04:07
*** markvoelker_ has joined #openstack-keystone04:08
*** markvoelker has quit IRC04:09
*** topol has joined #openstack-keystone04:12
*** ChanServ sets mode: +v topol04:12
*** topol has quit IRC04:17
*** mylu has joined #openstack-keystone04:27
*** csoukup has joined #openstack-keystone04:27
*** fifieldt has joined #openstack-keystone04:28
*** jecarey has quit IRC04:29
openstackgerritMerged openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/20183504:32
*** mylu has quit IRC04:37
*** mylu has joined #openstack-keystone04:41
*** boris-42 has joined #openstack-keystone04:43
*** mylu has quit IRC04:43
openstackgerritMerged openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/20182704:44
*** topol has joined #openstack-keystone04:47
*** ChanServ sets mode: +v topol04:47
*** topol has quit IRC04:52
openstackgerritMerged openstack/pycadf: Updated from global requirements  https://review.openstack.org/20186404:53
openstackgerritMerged openstack/keystone: Fixes grammar in setup.rst in doc source  https://review.openstack.org/20141704:54
*** markvoelker has joined #openstack-keystone05:06
*** markvoelker_ has quit IRC05:06
openstackgerritFernando Diaz proposed openstack/keystone: Move oauth1 into keystone core  https://review.openstack.org/20168405:06
*** markvoelker_ has joined #openstack-keystone05:08
*** markvoelker has quit IRC05:11
*** davechen1 is now known as davechen05:18
*** jungler has joined #openstack-keystone05:20
*** ankita_wagh has quit IRC05:26
*** ankita_wagh has joined #openstack-keystone05:27
*** ankita_wagh has quit IRC05:31
*** browne has joined #openstack-keystone05:34
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/20160105:38
*** kiran-r has joined #openstack-keystone05:39
*** amirosh has joined #openstack-keystone05:52
*** browne has quit IRC06:14
*** belmoreira has joined #openstack-keystone06:21
*** tobe has joined #openstack-keystone06:28
*** afazekas has joined #openstack-keystone06:30
*** ankita_wagh has joined #openstack-keystone06:33
*** amirosh has quit IRC06:51
*** fhubik has joined #openstack-keystone06:59
*** josecastroleon has quit IRC07:07
openstackgerritjiaxi proposed openstack/keystone: Invalid URLs are not suppressed when creating endpoint  https://review.openstack.org/20051207:16
*** dims_ has joined #openstack-keystone07:20
*** zigo has quit IRC07:24
*** zigo has joined #openstack-keystone07:25
*** fhubik_afk has joined #openstack-keystone07:25
*** ankita_wagh has quit IRC07:25
*** fhubik has quit IRC07:25
*** fhubik_afk is now known as fhubik07:25
*** dims_ has quit IRC07:26
*** Kiall has quit IRC07:26
*** Kiall has joined #openstack-keystone07:28
*** aix has joined #openstack-keystone07:31
*** e0ne has joined #openstack-keystone07:39
*** odyssey4me has quit IRC07:51
*** odyssey4me has joined #openstack-keystone07:52
*** fhubik is now known as fhubik_afk07:55
*** fhubik_afk is now known as fhubik07:55
*** fhubik is now known as fhubik_afk08:04
*** pnavarro has joined #openstack-keystone08:08
*** ccard has quit IRC08:11
*** jistr has joined #openstack-keystone08:12
*** boris-42 has quit IRC08:12
*** ParsectiX has joined #openstack-keystone08:13
ParsectiXHello guys08:13
ParsectiXI'm using the keystone python client. How can I match a role name to a UUID ?08:14
ParsectiXI can to the reverse lakis = kokos.roles.get("79365981119c49edb12d09ed165c565b")08:14
ParsectiX<Role {u'id': u'79365981119c49edb12d09ed165c565b', u'name': u'heat_stack_owner'}>08:15
*** e0ne is now known as e0ne_08:16
*** jbonjean has quit IRC08:18
*** fhubik_afk is now known as fhubik08:19
*** markvoelker_ has quit IRC08:21
*** e0ne_ is now known as e0ne08:22
*** jdandrea has quit IRC08:32
*** markvoelker has joined #openstack-keystone08:36
*** markvoelker has quit IRC08:45
*** topol has joined #openstack-keystone08:50
*** ChanServ sets mode: +v topol08:50
*** markvoelker has joined #openstack-keystone08:51
*** topol has quit IRC08:54
*** ParsectiX has quit IRC08:55
*** davechen has left #openstack-keystone08:55
openstackgerritjiaxi proposed openstack/keystone: Invalid URLs are not suppressed when creating endpoint  https://review.openstack.org/20051208:56
*** markvoelker has quit IRC08:56
*** markvoelker has joined #openstack-keystone09:06
*** btully has quit IRC09:08
*** markvoelker has quit IRC09:10
*** e0ne is now known as e0ne_09:15
*** e0ne_ is now known as e0ne09:16
*** ParsectiX has joined #openstack-keystone09:17
*** markvoelker has joined #openstack-keystone09:20
*** kiran-r has quit IRC09:21
*** e0ne has quit IRC09:22
*** ccard has joined #openstack-keystone09:23
zigohttps://bugs.launchpad.net/keystone/+bug/1474760 <--- Does anyone know what's happening with Keystone with SQLA 1.0.6?09:23
openstackLaunchpad bug 1474760 in Keystone "Unit test failures with sqlalchemy 1.0.6" [Undecided,Confirmed]09:23
zigoI'd appreciate a lot some help here.09:23
*** markvoelker has quit IRC09:25
*** ParsectiX has quit IRC09:34
*** bdossant has joined #openstack-keystone09:34
*** markvoelker has joined #openstack-keystone09:35
*** markvoelker has quit IRC09:40
*** markvoelker has joined #openstack-keystone09:49
*** tobe has quit IRC09:54
*** markvoelker has quit IRC09:54
*** jaosorior has joined #openstack-keystone09:54
*** Kennan has joined #openstack-keystone10:03
*** Kennan2 has quit IRC10:03
*** dims_ has joined #openstack-keystone10:03
*** markvoelker has joined #openstack-keystone10:04
*** dims_ has quit IRC10:05
*** markvoelker has quit IRC10:08
*** e0ne has joined #openstack-keystone10:12
*** tobe has joined #openstack-keystone10:17
*** jbonjean has joined #openstack-keystone10:17
*** markvoelker has joined #openstack-keystone10:19
*** markvoelker has quit IRC10:23
*** ajayaa has joined #openstack-keystone10:23
*** fhubik is now known as fhubik_afk10:25
marekdrodrigods: what's up with https://review.openstack.org/#/c/188534/ ?10:28
*** e0ne is now known as e0ne_10:32
*** markvoelker has joined #openstack-keystone10:33
*** markvoelker has quit IRC10:38
*** e0ne_ is now known as e0ne10:39
*** jamielennox is now known as jamielennox|away10:41
*** e0ne has quit IRC10:46
*** markvoelker has joined #openstack-keystone10:48
openstackgerritLiyankun proposed openstack/keystone: dfsdf  https://review.openstack.org/20204110:48
*** tobe has quit IRC10:48
*** e0ne has joined #openstack-keystone10:50
bretonI like that patch ^10:52
bretonzigo: I'll try now10:53
*** markvoelker has quit IRC10:54
bretonzigo: nope, I can't confirm it10:57
*** e0ne has quit IRC11:00
*** amakarov has joined #openstack-keystone11:02
*** markvoelker has joined #openstack-keystone11:02
*** e0ne has joined #openstack-keystone11:04
*** afazekas has quit IRC11:05
*** markvoelker has quit IRC11:07
*** e0ne has quit IRC11:13
*** markvoelker has joined #openstack-keystone11:17
*** e0ne has joined #openstack-keystone11:18
*** markvoelker has quit IRC11:21
*** markvoelker has joined #openstack-keystone11:24
*** openstack has joined #openstack-keystone11:36
*** markvoelker has quit IRC11:37
*** chmouel_ has joined #openstack-keystone11:37
*** topol has joined #openstack-keystone11:37
*** ChanServ sets mode: +v topol11:37
*** samuel-dmq has joined #openstack-keystone11:37
*** htruta_ has joined #openstack-keystone11:37
*** cburgess_ has joined #openstack-keystone11:37
*** e0ne is now known as e0ne_11:37
*** bradjones_ has joined #openstack-keystone11:37
*** bradjones_ has quit IRC11:37
*** bradjones_ has joined #openstack-keystone11:37
*** alex_xu_ has joined #openstack-keystone11:37
*** bradjones_ is now known as bradjones11:37
*** alex_xu_ has quit IRC11:37
*** alex_xu_ has joined #openstack-keystone11:37
*** openstackstatus has joined #openstack-keystone11:38
*** ChanServ sets mode: +v openstackstatus11:38
*** markvoelker has joined #openstack-keystone11:39
*** e0ne_ is now known as e0ne11:39
*** markvoelker has quit IRC11:44
*** dims_ has joined #openstack-keystone11:47
*** amakarov has quit IRC11:54
*** markvoelker has joined #openstack-keystone11:54
*** markvoelker has quit IRC11:58
*** radez_g0n3 is now known as radez12:02
*** gordc has joined #openstack-keystone12:08
*** markvoelker has joined #openstack-keystone12:08
*** markvoelker has quit IRC12:13
*** tobe has joined #openstack-keystone12:15
*** tobe has quit IRC12:18
*** tobe has joined #openstack-keystone12:19
*** lhcheng has joined #openstack-keystone12:20
*** ChanServ sets mode: +v lhcheng12:20
*** markvoelker has joined #openstack-keystone12:23
*** tobe has quit IRC12:24
*** jecarey has joined #openstack-keystone12:25
*** raildo has joined #openstack-keystone12:26
*** ays has joined #openstack-keystone12:27
*** markvoelker has quit IRC12:28
*** topol has quit IRC12:28
*** woodster_ has joined #openstack-keystone12:30
*** edmondsw has joined #openstack-keystone12:35
*** topol has joined #openstack-keystone12:35
*** ChanServ sets mode: +v topol12:35
*** hrou has joined #openstack-keystone12:35
*** markvoelker has joined #openstack-keystone12:37
*** topol_ has joined #openstack-keystone12:38
*** ChanServ sets mode: +v topol_12:38
*** topol has quit IRC12:40
*** dims_ has quit IRC12:41
*** markvoelker has quit IRC12:42
*** topol_ has quit IRC12:42
*** afazekas has joined #openstack-keystone12:44
openstackgerritRodrigo Duarte proposed openstack/keystone-specs: Project tree deletion  https://review.openstack.org/14873012:46
*** lhcheng has quit IRC12:46
*** markvoelker has joined #openstack-keystone12:52
*** hrou has quit IRC12:52
*** hrou has joined #openstack-keystone12:52
*** gordc has quit IRC12:54
*** gordc has joined #openstack-keystone12:54
*** markvoelker has quit IRC12:56
*** amakarov has joined #openstack-keystone12:59
*** markvoelker has joined #openstack-keystone13:01
*** radez is now known as radez_g0n313:04
*** dims_ has joined #openstack-keystone13:06
*** ays has quit IRC13:08
*** markvoelker has quit IRC13:09
*** markvoelker has joined #openstack-keystone13:09
*** markvoelker_ has joined #openstack-keystone13:10
*** kiran-r has joined #openstack-keystone13:10
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Unified delegation spec  https://review.openstack.org/18981613:10
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Unified delegation spec  https://review.openstack.org/18981613:11
*** ParsectiX has joined #openstack-keystone13:11
ParsectiXguys how can I delete a tenant using keystone python API ?13:12
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystonemiddleware: Dynamic Policies Fetch and Cache  https://review.openstack.org/18856113:13
*** markvoelker has quit IRC13:14
*** richm has joined #openstack-keystone13:15
*** roxanaghe has joined #openstack-keystone13:16
*** kiran-r has quit IRC13:18
samuel-dmqParsectiX: morning, yes you can13:19
samuel-dmqParsectiX: (channel should be a bit quiet today .. people are in the Keystone midcycle meetup)13:19
*** petertr7_away is now known as petertr713:20
ParsectiXsamuel-dmq: Good Morning.13:20
ParsectiXsamuel-dmq: To delete a user I use user.delete()13:20
ParsectiXHow can I delete a tenant. that's my question.13:21
ParsectiXI tried this13:21
ParsectiXksclient.tenants.Tenant.delete(tenant_id)13:21
ParsectiXTypeError: unbound method delete() must be called with Tenant instance as first argument (got unicode instance instead)13:21
ParsectiXksclient =  keystoneclient.v2_0.client13:22
larsksParsectiX: That seems like a very clear error.  You're passing a string containing the tenant_id, but it wants a tenant object.13:24
samuel-dmqlarsks: ++13:24
larsksParsectiX: Consider looking at the python-keystoneclient code: https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/v2_0/shell.py#L24513:24
larsksThat is always the best place to find examples of the API :)13:25
ParsectiXlarks: That's what I'm trying to do :) when I hit the cli command to delete tenant with --debug. I see that the HTTP query is sending the tenant_id13:26
ParsectiXthanks larsks & samuel-dmq13:27
ParsectiXI will look the example from cli13:27
samuel-dmqlarsks: you can use v3 client as well, would be better13:27
samuel-dmqlarsks: sorry, was to ParsectiX  ^13:28
*** amakarov has quit IRC13:28
samuel-dmqParsectiX: we have some examples here http://docs.openstack.org/developer/python-keystoneclient/using-api-v3.html13:28
*** amakarov has joined #openstack-keystone13:29
ParsectiXsamuel-dmq: I started with V2_0 and trying th make a MVP within 1 week. After that I have it in my todo to switch13:29
samuel-dmqParsectiX: and you should do something like : client.projects.delete(tenant_id) (yes I think it will accept the id)13:29
samuel-dmqParsectiX: great!13:29
*** lhcheng has joined #openstack-keystone13:29
*** ChanServ sets mode: +v lhcheng13:29
samuel-dmqlhcheng: hi, you at the midcycle ?13:31
lhchengsamuel-dmq: yes!13:31
*** samuel-dmq has quit IRC13:31
*** samueldmq has joined #openstack-keystone13:32
*** zzzeek has joined #openstack-keystone13:32
*** jdandrea has joined #openstack-keystone13:37
*** browne has joined #openstack-keystone13:38
*** roxanaghe_ has joined #openstack-keystone13:41
*** roxanaghe has quit IRC13:42
marekdlhcheng: re: https://review.openstack.org/#/c/191680/3/keystoneclient/fixture/v2.py so maybe you can fix those nits and we can +2/A immediately.13:42
*** csoukup has quit IRC13:42
lhchengmarekd: sure, on it13:42
*** jecarey has quit IRC13:43
*** gyee has joined #openstack-keystone13:43
*** ChanServ sets mode: +v gyee13:43
*** btully has joined #openstack-keystone13:44
*** bknudson has joined #openstack-keystone13:44
*** ChanServ sets mode: +v bknudson13:44
lhchengmarekd: it's ready13:46
*** topol has joined #openstack-keystone13:46
*** ChanServ sets mode: +v topol13:46
rharwoodhttps://etherpad.openstack.org/p/keystone-liberty-midcycle-meetup etherpad13:47
topolhttps://etherpad.openstack.org/p/keystone-liberty-midcycle-meetup13:48
*** jistr is now known as jistr|mtg13:49
*** ChanServ changes topic to "MidCycle Etherpad: https://etherpad.openstack.org/p/keystone-liberty-midcycle-meetup"13:49
samueldmqrharwood: topol thanks13:52
openstackgerritjiaxi proposed openstack/keystone: Invalid URLs are not suppressed when creating endpoint  https://review.openstack.org/20051213:53
odyssey4memarekd FYI, thanks to your help we've finally got to the point of entirely automating a shibboleth-based SP configuration for openstack-ansible: https://review.openstack.org/19439513:56
*** radez_g0n3 is now known as radez13:56
odyssey4meI have it working with testshib, so it's looking good. :) Your review of the config and any comments/recommendations would be great.13:57
*** LukeHinds has joined #openstack-keystone13:57
*** fhubik_afk is now known as fhubik13:58
marekdodyssey4me: great!14:00
marekdi am looking at it!14:00
marekdodyssey4me: did you just swich to uuid tokens for the time being ?14:01
odyssey4memarekd yep, I'm busy putting a rough doc together on how to implement and test this with a simple all-in-one setup and with testshib as an IdP - that'll add that as detail14:02
*** TheIntern has joined #openstack-keystone14:03
*** lhcheng_ has joined #openstack-keystone14:04
marekdodyssey4me: we will try to fix fernet + fed this week.14:04
odyssey4memarekd ah, at the mid-cycle meetup? excellent :)14:04
marekdodyssey4me: yep, started 1h ago!14:04
*** lhcheng__ has joined #openstack-keystone14:05
*** lhcheng__ has quit IRC14:06
*** lhchen___ has joined #openstack-keystone14:06
samueldmqdstanek: you around ?14:06
*** lhcheng has quit IRC14:06
*** lhchen___ has quit IRC14:06
*** lhcheng has joined #openstack-keystone14:07
*** ChanServ sets mode: +v lhcheng14:07
dstaneksamueldmq: kinda sorta, what's up?14:07
samueldmqdstanek: you at the midcycle ?14:07
marekdodyssey4me: i am not ansible master - how does it setup shiboleth2.xml for instance?14:08
marekdodyssey4me: does it hardcode the structure, somehow?14:08
*** lhcheng_ has quit IRC14:08
samueldmqdstanek: I've a screencast video to adam's dynamic policy presentation .. it's about the dynamic policy fetch at middleware14:08
*** ParsectiX has quit IRC14:08
samueldmqdstanek: https://drive.google.com/file/d/0B2vU1iAv61nDSEVaZGw3M0xlNXc/view14:08
samueldmqdstanek: I'd like to get this link connected to adam if possible ^14:08
odyssey4memarekd so this is the template: https://review.openstack.org/#/c/194395/29/playbooks/roles/os_keystone/templates/shibboleth2.xml.j2,cm14:09
dstaneksamueldmq: sure14:09
odyssey4memarekd you'll see macros like '{{ keystone_service_publicuri }}' which are replaced by values ansible knows about - that is the public URL for the keystone service14:09
samueldmqdstanek: that's for the case we don't get to a live demo (I am going to be afk for a bit very soon)14:09
openstackgerritguang-yee proposed openstack/keystonemiddleware: Enforce endpoint constraint  https://review.openstack.org/17766114:09
samueldmqdstanek: thanks14:09
*** lhcheng has quit IRC14:10
dstaneksamueldmq: he's up there talking now14:10
odyssey4memarekd as you know the SSO entityID needs to be hard coded to one IdP unless you have a discovery service - so we've hard coded it to the first one in your variables one for now14:11
lbragstadodyssey4me: have you gotten k2k successfully working with OSAD?!14:11
*** lhcheng_ has joined #openstack-keystone14:12
odyssey4melbragstad we have a Keystone SP working with TEstShib and are just finalising the Keystone IdP, and will follow this with additional tweaks for an ADFS IdP14:12
lbragstadmarekd: osad == https://github.com/stackforge/os-ansible-deployment14:12
marekdlbragstad: ty14:12
odyssey4menote we've only done saml2/Shibboleth config at this point14:12
*** sigmavirus24_awa is now known as sigmavirus2414:12
lbragstadodyssey4me: awesome, I've been spending the last few days trying to get keystone-deploy working as k2k14:12
*** lhcheng_ has quit IRC14:12
*** lhcheng_ has joined #openstack-keystone14:13
samueldmqdstanek: nice, please remember him about the demo (and that link) at the end of his presentaiton :)14:13
lbragstadodyssey4me: (that way we could leverage it to setup keystone federation deployments from source to hack against/test with/possibly gate on?)14:13
odyssey4melbragstad then we've gone a long way to figuring out your work :)14:13
odyssey4mekeystone-deploy is?14:13
*** jsavak has joined #openstack-keystone14:13
lbragstadodyssey4me: and I thank you for it :)14:13
*** mylu has joined #openstack-keystone14:14
zigobreton: I've added the output of dpkg -l14:14
lbragstadodyssey4me: I'm limping my branch along here https://github.com/lbragstad/keystone-deploy/tree/federation14:14
lbragstadodyssey4me: dolphm and i were talking about trying to get this tested somehow once it is all figured out.14:15
odyssey4melbragstad ah yes, I've seen that work from dolph - it's certainly a simopler deployment tool compared to devstack :)14:15
lbragstadodyssey4me: yep, it's perfect for deploying patches from review too, that we can test14:15
dolphmand far inferior to openstack-ansible :) but i think it predates it by a few months lol14:16
lbragstadodyssey4me: dolphm from source osad would be glorious14:16
odyssey4melbragstad yeah, we haven't figured out gate testing at this point - it's perhaps possible via openstack-ci multi-node, but we'll see14:16
odyssey4melbragstad yeah, osad as it stands now might be a bit heavy for source patch testing... it's a little more production focused, but it can be tweaked14:17
lbragstadodyssey4me: right, when I get a couple free cycles, I'll take a look at the review, it will probably help me out quite a bit14:17
odyssey4meas it stands right now it can deploy from git or gerrit14:17
lbragstadodyssey4me: ahh, that's good!14:17
*** jecarey has joined #openstack-keystone14:17
*** fangzhou has joined #openstack-keystone14:21
*** csoukup has joined #openstack-keystone14:23
bretonzigo: I've set up a vm with sid, will test now14:27
*** diazjf has joined #openstack-keystone14:27
marekdodyssey4me: i left some comments on your ansible review.14:27
*** mylu has quit IRC14:28
odyssey4memarekd thanks!14:28
*** mylu has joined #openstack-keystone14:28
*** markvoelker has joined #openstack-keystone14:28
zigobreton: You probably will need to take some packages from Experimental too.14:28
zigobreton: The package is in Git at: git clone git://git.debian.org/git/openstack/keystone.git14:29
zigoYou should use the debian/liberty branch for that.14:29
zigoTHen just do:14:29
zigo./debian/rules gen-orig-xz14:29
zigogit-buildpackage14:29
*** markvoel_ has joined #openstack-keystone14:31
*** markvoelker has quit IRC14:31
*** markvoelker_ has quit IRC14:32
*** pgbridge has joined #openstack-keystone14:32
*** jistr|mtg is now known as jistr14:33
*** markvoel_ has quit IRC14:33
bretonzigo: http://paste.openstack.org/show/377738/14:37
bretonzigo: any gint?14:37
bretons/gint/hint/14:37
zigobreton: apt-get install openstack-pkg-tools14:37
zigoapt-get install python-sphinx14:37
*** jorge_munoz has joined #openstack-keystone14:38
marekdjamielennox|away: https://review.openstack.org/#/c/186854/ added some more work on it.14:38
*** fangzhou has quit IRC14:38
*** jsavak has quit IRC14:43
openstackgerritMarek Denis proposed openstack/keystoneauth-saml2: Standardize federated auth token scoping  https://review.openstack.org/17722714:44
*** stevemar has joined #openstack-keystone14:48
*** ChanServ sets mode: +v stevemar14:48
*** jsavak has joined #openstack-keystone14:50
*** gyee has quit IRC14:50
marekdstevemar: ^^ at last! Here's something for ya: https://review.openstack.org/#/c/186854/14:51
stevemarmarekd: my bad, i was in several other channels, just accidentally left keystone14:51
marekdno worries.14:52
stevemarmarekd: this thing! still?!14:52
stevemaroh its passing!14:52
marekd..........................................................................14:52
marekdwhat can i say...14:53
*** markvoelker has joined #openstack-keystone14:53
*** rletrocquer has joined #openstack-keystone14:53
*** gyee has joined #openstack-keystone14:54
*** ChanServ sets mode: +v gyee14:54
*** markvoelker_ has joined #openstack-keystone14:54
stevemari meant from requirements pov14:56
marekdstevemar: it's a very long and painful transition :/14:57
stevemaryup14:57
*** markvoelker has quit IRC14:58
*** fhubik is now known as fhubik_afk15:01
*** fhubik_afk is now known as fhubik15:07
openstackgerritFernando Diaz proposed openstack/keystone: Move oauth1 into keystone core  https://review.openstack.org/20168415:09
openstackgerritjanonymous proposed openstack/keystone: Python 3: Replace assertRaisesRegexp to its six implementation  https://review.openstack.org/19386615:10
morganfainbergdstanek: can we get a slow-motion beard video this midcycle?15:11
dstanekmorganfainberg: sorry no can do15:11
lbragstadmorganfainberg: ++15:11
stevemardstanek: give the people what they want15:13
*** lsmola has quit IRC15:13
*** rm_work|away is now known as rm_work15:16
diazjfMidcycle interview http://media.giphy.com/media/mIXiSGOUoYLxC/giphy.gif15:16
*** crc32 has joined #openstack-keystone15:17
dstanekstevemar: i think they want been and pizza15:18
*** ParsectiX has joined #openstack-keystone15:18
lbragstadmm bean pizza15:20
*** pnavarro has quit IRC15:22
*** aix has quit IRC15:23
dims_bknudson: seen this stable/kilo keystonemiddleware failure? https://review.openstack.org/#/c/201173/15:24
bknudsondims_: I think we've seen something exactly like that before... not sure what the fix was.15:25
bknudsonI think one option was to make it so the test didn't check...15:26
bknudsondims_: https://review.openstack.org/#/c/184864/15:27
dims_hmm15:27
dims_let me check python-keystoneclient15:27
*** wrale has quit IRC15:30
*** ajayaa has quit IRC15:32
*** e0ne is now known as e0ne_15:36
amakarovHere is my trusts internal presentation for Glance guys: https://docs.google.com/drawings/d/1hO64TN7qf1qXARF4zn7UbCxqfykIQnhQqDvN_azEXx4/edit?usp=sharing15:37
dims_bknudson: trying this now - https://review.openstack.org/20215815:37
dolphmlbragstad: you mentioned the other day that fernet needs to support *scoped* federated tokens in addition to *unscoped* federated tokens. you don't have a patch in that direction, do you? cc- marekd stevemar15:38
*** crc32 is now known as crc32_soda_break15:39
stevemardolphm: AFAIK, its not in flight15:39
dims_amakarov: nice slide!15:39
*** ig0r__ has quit IRC15:39
dolphmstevemar: are there any more details required other than what's already in unscoped federated fernet tokens? (plus a scope)15:39
*** ig0r_ has joined #openstack-keystone15:40
marekddolphm: i am now lookint at it.15:40
lbragstaddolphm: I don't have anything, marekd and I were going to attempt it here at the midcycle (we can also mumble about it!)15:41
dolphmmarekd: lbragstad: stevemar: i'd be happy to help, but i'm sure you can knock out an impl faster than i if you're sitting next to each other lol15:41
j_kinghas there been any progress on https://etherpad.openstack.org/p/implied-trusts ?15:41
dolphmlbragstad: marekd: stevemar: it's a painful oversight on our part, considering we were very much intending to use fernet with federation in kilo... and it's broken :(15:42
albertombknudson: hi, could you provide feedback on https://review.openstack.org/#/c/185464/ ? when you have time of course :)15:42
marekddolphm: looks like for scoped tokens, the only difference is OS-FEDERATION section present in user: {}15:42
openstackgerritjanonymous proposed openstack/keystone: Python 3: Replace assertRaisesRegexp to its six implementation  https://review.openstack.org/19386615:42
marekddolphm: https://gist.github.com/zaccone/29c39946ac40c5b04900 and https://gist.github.com/zaccone/8af7b595999caa3a498c15:43
marekddolphm: and i we should cover projects and domains.15:43
lbragstadmarekd: dolphm, stevemar so the token length will grow slightly in comparison to the federated unscoped tokens15:43
stevemarlbragstad: yreah15:43
marekdlbragstad: we don't put groups so it will be constant growth - which i think is better15:43
dolphmlbragstad: how close are federated tokens to 255 chars?15:44
lbragstadmarekd: oh, nice15:44
dolphmlbragstad: (currently?)15:44
lbragstaddolphm: with one group?15:44
dolphmmarekd: ++15:44
lbragstaddolphm: i have a test for that15:44
stevemardolphm: "we're missing dolph"15:44
*** rm_work is now known as rm_work|away15:45
lbragstaddolphm: https://github.com/openstack/keystone/blob/e517baf5f094570853056223627e62834325b10b/keystone/tests/unit/test_v3_federation.py#L2922-L292915:45
*** e0ne_ is now known as e0ne15:45
lbragstadaround 200 characters15:45
dolphmlbragstad: sweet, plenty of room to add a scope15:45
lbragstaddolphm: with one group, yes I believe so15:46
marekddolphm: lbragstad fwiw the change we need to do is: change the way we decide whether token is federated or not, and somehow extend DomainScopedPayload and ProjectScopedPayload so we squeeze OS-FEDERATION in the user instead of passing user_id only.15:46
lbragstadmarekd: so instead of adding another ScopedFederatedPayload format, we'll be adding that logic to the existing ProjectScopedPayload and DomainScopedPayload formats/15:47
lbragstad?15:47
*** belmoreira has quit IRC15:48
marekdlbragstad: pretty much, as long as it doesn't break anything.15:48
dolphmmarekd: lbragstad: it seems cleaner to have new formats15:51
marekddolphm: let us propose something and we can iterate/discuss over code15:52
dolphmmarekd: ++15:52
dolphmadding token format versions are cheap though :)15:52
dolphmis* cheap15:52
marekddolphm: lbragstad: BTW how many 'fields' do we have for versions ?15:52
marekddolphm: i would like to avoid nested if clauses wherever possible - that's all15:53
dolphmmarekd: there's one version field that's an integer... not sure what you're asking for beyond that15:54
*** kiran-r has joined #openstack-keystone15:54
dolphmhttps://github.com/openstack/keystone/blob/master/keystone/token/providers/fernet/token_formatters.py#L184-L20315:54
dolphmthere's one version number per payload signature15:54
dolphmnew payload signature === new version number15:55
marekddolphm: ++15:55
lbragstaddolphm: so, new formats including FederatedDomainScopedPayload, etc... ?15:55
lbragstadI kinda like that ide a15:55
lbragstadbecause it keeps case logic out of the payload classes15:56
*** kiran-r has quit IRC15:56
*** petertr7 is now known as petertr7_away15:56
morganfainbergdolphm: oh hai15:57
dolphmmorganfainberg: o/15:57
morganfainbergdolphm: welcome back15:57
dolphmlbragstad: ++15:58
dolphmmorganfainberg: danke15:58
*** rm_work|away is now known as rm_work16:00
*** bdossant_ has joined #openstack-keystone16:01
*** jsavak has quit IRC16:03
*** christx2 has joined #openstack-keystone16:03
*** jsavak has joined #openstack-keystone16:04
*** bdossant has quit IRC16:04
bknudsondolphm: where are you?16:04
miguelgrinbergmarekd: I remember a couple of weeks ago you and rodrigods pointed at a keystone-to-keystone plugin that was being worked on. Was that work completed? Can't find the review for it.16:04
rodrigodsmiguelgrinberg, yes: https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/auth/identity/v3/k2k.py16:05
miguelgrinbergrodrigods: awesome, thanks!16:06
*** christx2 has quit IRC16:08
*** kiran-r has joined #openstack-keystone16:09
*** rm_work is now known as rm_work|away16:11
marekdmorganfainberg: it's merged, actually i wanted to discuss it during the meetup16:12
morganfainbergmarekd: ?16:12
morganfainbergoh16:13
morganfainbergyeah16:13
lbragstadmarekd: http://cdn.pasteraw.com/29odyccrxb9eph296tpdm2p9m2ub0r716:13
*** fhubik has quit IRC16:13
lbragstadmarekd: fresh keystone-deploy generated fernet project scoped token16:13
*** rm_work|away is now known as rm_work16:13
marekdmorganfainberg: oh, sorrry, i read miguelgrinberg as morganfainberg  (similar structure, similar nick length :P)16:13
morganfainbergLOL16:13
morganfainberghehe16:13
morganfainbergyeah16:13
*** _cjones_ has joined #openstack-keystone16:14
odyssey4melbragstad oh? nice! is that from a review? cc marekd16:14
odyssey4me(or is it from merged code?)16:14
dolphmodyssey4me: ? that's just a regular token produced by keystone16:15
lbragstadodyssey4me: I pulled the from master16:15
lbragstadyep it is16:15
lbragstadodyssey4me: marekd wanted one to have to compare the federation stuff against16:15
odyssey4meah, silly me - I thought it was federated, but I should have known better :p16:16
odyssey4meI thought it looked a little odd16:16
lbragstadodyssey4me: you're jumping the gun ;)16:16
*** jsavak has quit IRC16:16
lbragstadodyssey4me: I think we're going to try and tackle an implementation for the scoped federation token a little later today16:16
lbragstadodyssey4me: want me to drop a link to the review in -ansible when it's up?16:17
odyssey4mesweet - looking forward to it, and will test as soon as you think it's ready16:17
lbragstadodyssey4me: perfect16:17
*** jsavak has joined #openstack-keystone16:17
odyssey4melbragstad sure, that'd be great :)16:17
*** christx2 has joined #openstack-keystone16:17
*** christx2 has quit IRC16:18
*** gyee has quit IRC16:19
*** christx2 has joined #openstack-keystone16:19
*** bradjones has quit IRC16:20
*** akscram has quit IRC16:20
*** crc32_soda_break is now known as crc3216:20
openstackgerritMarek Denis proposed openstack/keystone: Fernet payloads for federated scoped tokens.  https://review.openstack.org/20217616:20
*** bradjones has joined #openstack-keystone16:20
*** bradjones has quit IRC16:20
*** bradjones has joined #openstack-keystone16:20
marekdlbragstad: dolphm: first pass on fedfer tokens ^^16:20
*** akscram has joined #openstack-keystone16:20
dolphmha, awesome16:21
*** topol has quit IRC16:21
lbragstaddolphm: marekd is all about the typey typey right now ;)16:21
*** stevemar has quit IRC16:22
openstackgerritMarek Denis proposed openstack/keystone: Fernet payloads for federated scoped tokens.  https://review.openstack.org/20217616:22
*** bdossant_ has quit IRC16:22
*** topol has joined #openstack-keystone16:22
*** ChanServ sets mode: +v topol16:22
dolphmmarekd: dammit i was still reviewing patchset 116:23
marekddolphm: sorry, just one typo fixed.16:23
dolphmmarekd: jk16:23
*** topol has quit IRC16:23
*** topol has joined #openstack-keystone16:23
*** ChanServ sets mode: +v topol16:23
*** topol has quit IRC16:23
marekddolphm: we are off to lunch so you've got some time without suprises like that one :P16:24
openstackgerritBoris Bobrov proposed openstack/keystone: alembic initial support  https://review.openstack.org/15005716:24
dolphmmarekd: k, this patch is broken anyway ;)16:24
dolphmmarekd: will have a review up when you get back16:25
*** lhcheng_ has quit IRC16:26
*** roxanaghe_ has quit IRC16:26
*** amakarov has quit IRC16:27
*** jsavak has quit IRC16:27
*** jsavak has joined #openstack-keystone16:27
*** afazekas has quit IRC16:27
openstackgerritDolph Mathews proposed openstack/keystone: Spelling correction  https://review.openstack.org/20217816:29
*** hrou has quit IRC16:31
*** crc32 has quit IRC16:32
*** crc32 has joined #openstack-keystone16:36
*** markvoelker_ has quit IRC16:40
*** markvoelker has joined #openstack-keystone16:42
*** TheIntern has quit IRC16:42
*** shaleh has joined #openstack-keystone16:44
*** ajayaa has joined #openstack-keystone16:44
*** hrou has joined #openstack-keystone16:47
*** hrou has quit IRC16:48
openstackgerritDolph Mathews proposed openstack/keystone: Fernet payloads for federated scoped tokens.  https://review.openstack.org/20217616:48
*** hrou has joined #openstack-keystone16:48
*** jistr has quit IRC16:50
*** petertr7_away is now known as petertr716:51
*** ptoohill is now known as pothole16:57
*** _hrou_ has joined #openstack-keystone16:58
*** TheIntern has joined #openstack-keystone16:58
*** hrou has quit IRC16:59
*** ankita_wagh has joined #openstack-keystone17:00
openstackgerritDolph Mathews proposed openstack/keystone: Refactor: rename Fernet's unscoped federated payload  https://review.openstack.org/20219017:01
*** _hrou_ has quit IRC17:02
*** _hrou_ has joined #openstack-keystone17:02
*** petertr7 is now known as petertr7_away17:02
*** kiran-r has quit IRC17:02
*** jsavak has quit IRC17:02
*** jsavak has joined #openstack-keystone17:03
*** sigmavirus24 is now known as sigmavirus24_awa17:10
*** browne has quit IRC17:16
*** fangzhou has joined #openstack-keystone17:16
*** topol has joined #openstack-keystone17:21
*** ChanServ sets mode: +v topol17:21
*** jsavak has quit IRC17:21
*** jsavak has joined #openstack-keystone17:21
*** topol has quit IRC17:25
*** slberger has joined #openstack-keystone17:31
*** mgarza_ has joined #openstack-keystone17:32
*** christx2 has quit IRC17:32
*** christx2 has joined #openstack-keystone17:33
slbergerIs anyone using an LDAP backend and managing it with Keystone? i.e. not a read only configuration17:33
*** amakarov has joined #openstack-keystone17:39
openstackgerritDavid Stanek proposed openstack/keystone: Python 3: Replace assertRaisesRegexp to its six implementation  https://review.openstack.org/19386617:40
*** topol has joined #openstack-keystone17:41
*** ChanServ sets mode: +v topol17:41
*** ajayaa has quit IRC17:44
*** jsavak has quit IRC17:44
*** jsavak has joined #openstack-keystone17:45
*** topol has quit IRC17:49
*** christx2 has quit IRC17:50
*** christx2 has joined #openstack-keystone17:50
*** TheIntern has quit IRC17:54
*** tsymanczyk has quit IRC17:55
*** topol has joined #openstack-keystone17:57
*** ChanServ sets mode: +v topol17:57
*** gyee has joined #openstack-keystone17:57
*** ChanServ sets mode: +v gyee17:57
*** topol has quit IRC17:58
*** TheIntern has joined #openstack-keystone17:59
*** ankita_w_ has joined #openstack-keystone18:00
*** stevemar has joined #openstack-keystone18:00
*** ChanServ sets mode: +v stevemar18:00
*** lhcheng has joined #openstack-keystone18:00
*** ChanServ sets mode: +v lhcheng18:00
stevemarhttps://review.openstack.org/#/q/status:open+project:openstack/keystone-specs,n,z18:00
*** mylu has quit IRC18:01
*** mylu has joined #openstack-keystone18:01
*** ayoung has joined #openstack-keystone18:02
*** ChanServ sets mode: +v ayoung18:02
*** browne has joined #openstack-keystone18:02
*** topol has joined #openstack-keystone18:02
*** ChanServ sets mode: +v topol18:02
*** tsymanczyk has joined #openstack-keystone18:02
*** Kennan has quit IRC18:02
*** ankita_wagh has quit IRC18:03
*** piyanai has joined #openstack-keystone18:03
*** Kennan has joined #openstack-keystone18:03
*** sigmavirus24_awa is now known as sigmavirus2418:06
*** iamjarvo has joined #openstack-keystone18:14
*** tqtran has joined #openstack-keystone18:18
*** boris-42 has joined #openstack-keystone18:23
*** petertr7_away is now known as petertr718:27
*** belmoreira has joined #openstack-keystone18:28
*** jsavak has quit IRC18:34
*** jsavak has joined #openstack-keystone18:37
*** petertr7 is now known as petertr7_away18:40
*** belmoreira has quit IRC18:41
*** roxanaghe has joined #openstack-keystone18:44
*** petertr7_away is now known as petertr718:44
*** radez is now known as radez_g0n318:44
*** ParsectiX has quit IRC18:50
dims_morganfainberg: i added this - https://blueprints.launchpad.net/oslo.db/+spec/read-write-separation18:51
dims_zzzeek: ^^^ i was not sure about the title18:52
morganfainbergthanks18:52
morganfainbergzzzeek: this is the context manager thing we talked about for oslo.db: with db_connection.reader()18:52
morganfainbergetc18:52
morganfainbergand preventing the mixing18:52
zzzeekmorganfainberg: OK. so this would basically be the “put keystone on new enginefacade” blueprint :)18:53
morganfainbergzzzeek: yeaaaah18:53
zzzeekmorganfainberg: oslo.db has all that now18:53
morganfainbergzzzeek: exactly18:53
morganfainbergzzzeek: is this the use_slave=True thing?18:53
morganfainbergbecause that wasn't clear to me18:53
morganfainbergsomeone is proposing the use_slave=True18:54
zzzeekmorganfainberg: in old timey enginefacade its use_slave=True18:54
morganfainbergahhh18:54
morganfainbergok18:54
morganfainbergcool18:54
morganfainbergthen my -2 was about using the new way not the old way18:54
morganfainbergthnx18:54
zzzeekmorganfainberg: so id prefer if you can look at doing the new thing and let me know what it needs18:54
morganfainberghttps://review.openstack.org/#/c/197455/18:54
zzzeekmorganfainberg: we accommodated a crapload of wacky nova use cases so id be surprised if there are more in keystone18:54
morganfainbergso yes, we want the new thing18:54
morganfainbergnot the old thing18:54
morganfainbergthat ^^ is the old thing afaict18:54
morganfainbergwhich is what my -2 is about18:55
morganfainbergif you wouldn't mind commenting saying oslo.db has it and we should use new engine_facade, I'd appreciate it18:55
zzzeekok18:55
zzzeekdoing it18:55
dims_thanks zzzeek18:55
morganfainbergzzzeek: TYVM! I might owe you a beer.. ;)18:55
zzzeekmorganfainberg: someday :)18:55
*** jecarey has quit IRC18:56
*** rletrocquer has quit IRC18:57
*** jsavak has quit IRC18:57
*** markvoelker has quit IRC18:58
*** annasort has quit IRC18:58
*** mylu has quit IRC18:58
*** mylu has joined #openstack-keystone18:59
larsksShould I be able to use keystoneclient.auth.identity.v3.Password with only project_name?  When I use project_id I can authenticate successfully, but when only specifying project_name I get: Expecting to find domain in project - the server could not comply with the request since it is either malformed or otherwise incorrect.18:59
larsks(In both cases I am passing a 'domain' parameter as well)18:59
*** jsavak has joined #openstack-keystone19:00
larsksOh, look, project_domain_name...19:01
larsksThat was totally it.  Thanks for listening.19:01
*** e0ne has quit IRC19:05
*** radez_g0n3 is now known as radez19:05
samueldmqayoung: hey19:07
samueldmqayoung: how was the presentation, did you reproduce the demo on the fetch?19:07
samueldmqayoung: I am looking forward to hearing some feedback on the presentation19:08
*** fifieldt_ has joined #openstack-keystone19:09
*** mgarza_ has quit IRC19:11
*** christx2 has quit IRC19:11
*** mgarza has joined #openstack-keystone19:11
*** tsymanczyk has quit IRC19:12
*** christx2 has joined #openstack-keystone19:12
*** spandhe has joined #openstack-keystone19:12
*** fifieldt has quit IRC19:13
bretonregarding alembic. I ran into some issues in oslo_db's migration_cli. Not a show stopper, but I don't think it will be ready for discussion during midcycle. It will be ready by Friday evening though.19:13
*** belmoreira has joined #openstack-keystone19:13
*** hakimo has quit IRC19:13
*** diazjf has quit IRC19:14
*** hakimo has joined #openstack-keystone19:14
*** mylu has quit IRC19:16
openstackgerritLance Bragstad proposed openstack/keystone: Fernet payloads for federated scoped tokens.  https://review.openstack.org/20217619:19
openstackgerritLance Bragstad proposed openstack/keystone: Refactor: rename Fernet's unscoped federated payload  https://review.openstack.org/20219019:19
*** mylu has joined #openstack-keystone19:20
marekdodyssey4me: hi19:23
marekdodyssey4me: you can try applyin this patch and checking fernet federated tokens :-)19:23
marekdodyssey4me: https://review.openstack.org/#/c/202176/419:23
openstackgerritayoung proposed openstack/keystone-specs: validating/indexing extra attributes  https://review.openstack.org/19053219:23
*** gyee has quit IRC19:25
*** jsavak has quit IRC19:27
*** mylu has quit IRC19:29
*** christx2 has quit IRC19:30
*** christx2 has joined #openstack-keystone19:30
*** mylu has joined #openstack-keystone19:30
*** jsavak has joined #openstack-keystone19:31
*** tsymanczyk has joined #openstack-keystone19:32
*** piyanai has quit IRC19:33
*** gyee has joined #openstack-keystone19:34
*** ChanServ sets mode: +v gyee19:34
*** jecarey has joined #openstack-keystone19:37
*** jsavak has quit IRC19:37
*** jsavak has joined #openstack-keystone19:37
*** belmoreira has quit IRC19:43
*** markvoelker has joined #openstack-keystone19:43
samueldmqmorganfainberg: ping - want to make an official decision on the sfe for dynamic policies ?19:43
samueldmqmorganfainberg: 5 cores already responded to that thread https://www.mail-archive.com/openstack-dev@lists.openstack.org/msg57416.html19:44
samueldmqmorganfainberg: and as ttx said: spec freeze only requires PTL approval19:44
samueldmq:)19:44
openstackgerritguang-yee proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate  https://review.openstack.org/15687019:45
*** markvoelker has quit IRC19:45
*** markvoelker has joined #openstack-keystone19:46
openstackgerritMarek Denis proposed openstack/keystone: Fix test method examinig scoped federation tokens.  https://review.openstack.org/20225119:48
marekddolphm: lbragstad ^^19:48
dolphmmarekd: ack19:49
*** christx2 has quit IRC19:49
*** mgarza has quit IRC19:50
*** mgarza has joined #openstack-keystone19:50
*** ParsectiX has joined #openstack-keystone19:51
*** christx2 has joined #openstack-keystone19:52
bretonmorganfainberg: I see in the etherpad a note about icehouse migration squash19:56
*** ankita_w_ has quit IRC19:56
bretonI thought we decided to do that after icehouse eol19:56
*** ankita_wagh has joined #openstack-keystone19:56
ayoungsamueldmq, it went well.  People are digesting the vast quantities of information, and we will take the discussion back up tomorrow.19:56
bretonmorganfainberg: and for some unknown reason it is set as "implemented"19:57
ayoungbreton, we noticed that in review today. Took a todo to look in to it19:57
bretonyeah, it's not implemented.19:57
dstanekgyee: i had a bunch of comments of your previous incarnation of https://review.openstack.org/#/c/156870/19:58
bretonfixed that.19:58
*** jsavak has quit IRC19:59
*** tsymanczyk has quit IRC19:59
*** jsavak has joined #openstack-keystone19:59
samueldmqayoung: excelent, please keep me updated :)19:59
ayoungsamueldmq, you ready to present>20:00
ayoungI can bring up bluejean20:00
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Unified delegation spec  https://review.openstack.org/18981620:01
*** mgarza has quit IRC20:01
*** mgarza has joined #openstack-keystone20:02
*** tsymanczyk has joined #openstack-keystone20:02
gyeedstanek, next patch20:03
gyeecoming up :)20:03
*** diazjf has joined #openstack-keystone20:04
*** jsavak has quit IRC20:06
*** jsavak has joined #openstack-keystone20:06
*** fangzhou has quit IRC20:08
*** mgarza has quit IRC20:10
*** mgarza has joined #openstack-keystone20:10
*** bdossant has joined #openstack-keystone20:11
*** bdossant has quit IRC20:11
*** piyanai has joined #openstack-keystone20:12
samueldmqayoung: yes I can present20:13
samueldmqayoung: althought I have recorded a video as well, if you want it..20:13
samueldmqayoung:20:14
samueldmqhttps://drive.google.com/file/d/0B2vU1iAv61nDSEVaZGw3M0xlNXc/view?usp=sharing20:14
*** piyanai has quit IRC20:20
*** piyanai has joined #openstack-keystone20:20
*** piyanai has quit IRC20:21
morganfainbergbreton: yeah20:22
morganfainbergbreton: easy to fix20:22
*** ankita_wagh has quit IRC20:23
*** iamjarvo has quit IRC20:26
*** gordc has quit IRC20:27
*** gordc has joined #openstack-keystone20:28
openstackgerritMerged openstack/keystonemiddleware: py34 not py33 is tested and supported  https://review.openstack.org/20108420:29
marekdsamueldmq: can we see the code that you just demonstrted (openstack, not demo.sh)20:30
marekd?20:30
openstackgerritMerged openstack/python-keystoneclient: py34 not py33 is tested and supported  https://review.openstack.org/20109220:31
*** htruta_ has quit IRC20:32
*** htruta has joined #openstack-keystone20:32
openstackgerritDavid J Hu proposed openstack/keystone: Version independent token issuance pipeline  https://review.openstack.org/15062920:34
*** jsavak has quit IRC20:34
*** jsavak has joined #openstack-keystone20:35
samueldmqDynamic Policies Fetch and Cache : https://review.openstack.org/#/c/134655/20:36
samueldmqDynamic Policies Delivering Mechanism : https://review.openstack.org/#/c/197980/20:36
samueldmqayoung: marekd ^20:36
anteayasamueldmq: fantastic demonstration!20:36
samueldmqanteaya: thanks :)20:37
anteaya:)20:37
*** radez has left #openstack-keystone20:37
*** ankita_wagh has joined #openstack-keystone20:38
*** christx2 has quit IRC20:39
*** ankita_wagh has quit IRC20:39
openstackgerritMarek Denis proposed openstack/keystone: Fix test method examining scoped federation tokens.  https://review.openstack.org/20225120:39
*** ankita_wagh has joined #openstack-keystone20:39
marekdlbragstad: ^^20:39
marekdsamueldmq: thanks!20:39
samueldmqmarekd: np20:39
*** christx2 has joined #openstack-keystone20:40
marekdsamueldmq: but these are specs, right?20:40
marekdsamueldmq: how about actual code? :-)20:40
samueldmqmarekd: oslo https://review.openstack.org/#/c/200257/20:40
samueldmqmiddleware https://review.openstack.org/#/c/188561/20:41
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20228220:41
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/19725420:41
*** henrynash has joined #openstack-keystone20:42
*** ChanServ sets mode: +v henrynash20:42
morganfainbergraildo: henry is hopping on irc20:42
morganfainbergraildo: ^ henrynash20:42
henrynashhi20:42
stevemarhi henrynash20:42
henrynashstevemar: hi20:42
raildohenrynash: can you confirm your email that you will use in the session proposal?20:43
raildomorganfainberg: thanks :)20:43
henrynashraildo: henryn@linux.vnet.ibm.com20:43
raildohenrynash: thanks :)20:44
henrynashraildo: do we need to write the 450 word part now as well?20:44
*** jsavak has quit IRC20:44
stevemardtroyer_zz: saw this in the keystone logs http://paste.openstack.org/show/378459/20:44
raildohenrynash: I don't think so... we can use the same text20:45
*** jsavak has joined #openstack-keystone20:45
raildohenrynash: we me a few changes here and choose a title, if you want to take a look20:45
henrynashraildo: I like it…looks good…ship it dano20:48
*** mgarza has quit IRC20:48
*** mgarza has joined #openstack-keystone20:49
*** pnavarro has joined #openstack-keystone20:50
raildohenrynash: great :)20:51
*** slberger has left #openstack-keystone20:52
samueldmqthanks guys :-)20:54
ayoungsamueldmq, well done20:57
samueldmqayoung: :)20:58
*** ParsectiX has quit IRC20:59
*** henrynash has quit IRC21:00
*** topol has quit IRC21:01
*** mgarza has quit IRC21:01
*** mgarza has joined #openstack-keystone21:02
*** christx2 has quit IRC21:03
*** christx2 has joined #openstack-keystone21:04
openstackgerritguang-yee proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate  https://review.openstack.org/15687021:05
*** bknudson has quit IRC21:06
*** lhcheng has quit IRC21:07
*** dims_ has quit IRC21:07
*** pnavarro has quit IRC21:08
*** christx2 has quit IRC21:09
*** gyee has quit IRC21:09
*** christx2 has joined #openstack-keystone21:09
*** stevemar has quit IRC21:10
*** amakarov has quit IRC21:10
openstackgerritMerged openstack/keystone: Standardize documentation at Service Managers  https://review.openstack.org/15809421:11
*** petertr7 is now known as petertr7_away21:11
*** mgarza has quit IRC21:13
*** mgarza_ has joined #openstack-keystone21:13
*** roxanaghe has quit IRC21:13
openstackgerritMerged openstack/keystone: Use oslo.utils instead of home brewed tempfile  https://review.openstack.org/20134121:13
*** rm_work is now known as rm_work|away21:14
*** ayoung has quit IRC21:15
*** mylu has quit IRC21:17
*** rm_work|away is now known as rm_work21:20
*** _hrou_ has quit IRC21:20
*** _hrou_ has joined #openstack-keystone21:20
*** pnavarro has joined #openstack-keystone21:20
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20228221:22
*** topol has joined #openstack-keystone21:22
*** ChanServ sets mode: +v topol21:22
*** topol has quit IRC21:23
*** htruta_ has joined #openstack-keystone21:30
*** topol_ has joined #openstack-keystone21:31
*** ChanServ sets mode: +v topol_21:31
*** LukeHinds has quit IRC21:32
mfischis there a way to disable revoke support? perhaps a noop revoke driver?21:33
mfischI'd like to see what impact the bad idea jeans revoke cleanup algorithm is having on my validation perf21:33
*** topol_ has quit IRC21:35
*** piyanai has joined #openstack-keystone21:38
*** gordc has quit IRC21:43
*** mgarza_ has quit IRC21:43
*** mgarza has joined #openstack-keystone21:44
*** crc32 has quit IRC21:44
*** crc32 has joined #openstack-keystone21:44
*** topol has joined #openstack-keystone21:44
*** ChanServ sets mode: +v topol21:44
*** henrynash has joined #openstack-keystone21:44
*** ChanServ sets mode: +v henrynash21:44
*** christx2 has quit IRC21:47
*** jsavak has quit IRC21:48
*** christx2 has joined #openstack-keystone21:49
*** piyanai has quit IRC21:49
*** jamielennox|away is now known as jamielennox21:49
*** rm_work is now known as rm_work|away21:50
*** pnavarro has quit IRC21:51
*** rm_work|away is now known as rm_work21:52
*** crc32 has quit IRC21:57
*** _hrou_ has quit IRC21:59
*** browne has quit IRC22:00
*** crc32 has joined #openstack-keystone22:00
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Add get_token_data to token CRUD  https://review.openstack.org/19448422:01
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Add get_token_data to token CRUD  https://review.openstack.org/19448422:01
*** mylu has joined #openstack-keystone22:01
*** piyanai has joined #openstack-keystone22:02
*** htruta_ has quit IRC22:05
*** edmondsw has quit IRC22:05
openstackgerritFernando Diaz proposed openstack/keystone: Adding Documentation for Mapping Combinations  https://review.openstack.org/19285022:06
*** hakimo has quit IRC22:07
*** hakimo has joined #openstack-keystone22:07
*** crc32 has quit IRC22:09
jamielennoxmfisch: i don't think there is a way to completely disable revocation checking22:11
*** amakarov has joined #openstack-keystone22:11
*** mgarza has quit IRC22:11
*** mgarza has joined #openstack-keystone22:12
*** csoukup has quit IRC22:19
*** mylu has quit IRC22:22
*** EmilienM is now known as EmilienM|off22:22
*** mylu has joined #openstack-keystone22:23
*** crc32 has joined #openstack-keystone22:23
*** jaosorior has quit IRC22:26
*** amakarov has quit IRC22:28
*** crc32 has quit IRC22:29
*** amakarov has joined #openstack-keystone22:30
*** crc32 has joined #openstack-keystone22:31
*** jsavak has joined #openstack-keystone22:31
*** crc32 has quit IRC22:31
*** topol has quit IRC22:33
*** crc32 has joined #openstack-keystone22:33
*** EmilienM|off is now known as EmilienM22:37
*** rdo_ has quit IRC22:39
*** diazjf has quit IRC22:40
*** christx2 has quit IRC22:40
*** christx2 has joined #openstack-keystone22:41
*** rdo has joined #openstack-keystone22:41
*** amakarov has quit IRC22:44
*** htruta_ has joined #openstack-keystone22:50
*** dims_ has joined #openstack-keystone22:51
*** sigmavirus24 is now known as sigmavirus24_awa22:51
dolphmif OS-REVOKE was properly implemented as an extension...22:52
*** browne has joined #openstack-keystone22:57
*** mestery_ has joined #openstack-keystone23:00
*** EmilienM is now known as EmilienM|off23:03
*** mestery has quit IRC23:03
*** christx2 has quit IRC23:03
*** mgarza has quit IRC23:04
*** christx2 has joined #openstack-keystone23:04
*** topol has joined #openstack-keystone23:04
*** ChanServ sets mode: +v topol23:04
*** devlaps has joined #openstack-keystone23:08
*** devlaps has quit IRC23:08
*** topol has quit IRC23:09
*** christx2 has quit IRC23:10
*** christx2 has joined #openstack-keystone23:11
*** zzzeek has quit IRC23:13
*** htruta_ has quit IRC23:13
*** ankita_w_ has joined #openstack-keystone23:19
*** ankita_wagh has quit IRC23:22
*** christx2 has quit IRC23:25
*** christx2 has joined #openstack-keystone23:25
*** mylu has quit IRC23:29
*** TheIntern has quit IRC23:50
*** piyanai has quit IRC23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!