Friday, 2015-08-07

openstackgerritRoxana Gherle proposed openstack/keystone: Fernet 'expires' value loses 'ms' after validation  https://review.openstack.org/21003700:02
*** piyanai has quit IRC00:04
jamielennoxdolphm, lbragstad: how do we pass idp id from django_openstack_auth to keystone?00:12
jamielennoxi'm replying to the thread and at this point i'm concerned i'm missing something obvious00:13
*** sigmavirus24 is now known as sigmavirus24_awa00:14
lbragstadjamielennox: i'm not real sure00:16
lbragstadjamielennox: wouldn't that be something the user would have to know?00:16
jamielennoxlbragstad: it would be something the user can select00:16
lbragstadpull it out of a header?00:16
dolphmjamielennox: it's part of the request URI00:18
dolphmjamielennox: .../identity_providers/{idp_id}/protocol/{protocol_id}00:18
jamielennoxdolphm: that path is completely unused for websso00:18
dolphmjamielennox: ah, i don't have any clue on websso00:19
jamielennoxi know this because i did a talk on it last weekend, and i wrote the spec https://review.openstack.org/#/c/199339/ because it's ridiculous that it's not used00:19
jamielennoxtalk: https://youtu.be/YYzJdxI_g6g00:21
dolphmjamielennox: oh, fun.00:21
*** geoffarnold has quit IRC00:23
lbragstadjamielennox: but if the user has to select it, doesn't that violate the public cloud case described on the ML?00:24
*** stevemar has joined #openstack-keystone00:25
*** ChanServ sets mode: +v stevemar00:25
jamielennoxlbragstad: currently the user selects a protocol like saml2, that redirects to keystone00:26
jamielennoxthen there is this fuzzy out of keystone's control discovery process that lets the user actually select which real idp they want to use00:26
jamielennoxyou could trim and show what you like there, but i've no idea how you know where that user came from to know what to show00:26
jamielennoxand Referrer is not an answer00:26
dolphmjamielennox: ++00:27
*** markvoelker has quit IRC00:27
*** chlong has joined #openstack-keystone00:27
*** markvoelker has joined #openstack-keystone00:28
lbragstadjamielennox: yeah, but selecting the protocol means the you direct to one IdP per protocol, right? what happens when you have two IdPs that speak saml2?00:28
* lbragstad starts busting out the rookie questions 00:28
jamielennoxlbragstad: no - i feel that's the lightbulb question00:29
*** stevemar has quit IRC00:29
jamielennoxlike... wait, what?00:29
lbragstad:)00:29
lbragstadumm... guys?00:29
jamielennoxok, somewhat heated reply sent to list00:30
dolphmjamielennox: which thread?00:30
jamielennoxthe federated login one00:30
jamielennoxi don't know which arm, zimbra doesn't show that00:30
dolphmjamielennox: got it00:31
*** iamjarvo has joined #openstack-keystone00:33
jamielennoxlbragstad: to somewhat answer the question IdPs now have a remote_ids parameter so you can tell where you received a login saml assertion from to map it back into keystone, but you have to manage what gets shown out of band00:33
lbragstadah, gotcha00:34
*** narengan has joined #openstack-keystone00:35
lbragstadjamielennox: nice talk, i'm saving that00:37
*** iamjarvo has quit IRC00:37
jamielennoxi feel like ~3 people in the audience actually understood it00:38
jamielennoxbut i was told not to do another high level federation talk00:38
dolphmif i had any means of sound, i'd be doing more than watching your lips move around00:38
lbragstadjamielennox: as long as you record it, others can come back when they're ready to figure it out00:38
dolphmlbragstad: ++00:39
jamielennoxyep00:39
jamielennoxi mean in that case i only set up one idp which doesn't really show this problem because you've no need to figure out which IdP you want00:40
*** ankita_w_ has joined #openstack-keystone00:44
*** ankita_wagh has quit IRC00:44
*** jasondotstar has quit IRC00:50
*** jasondotstar has joined #openstack-keystone00:52
*** dims_ has quit IRC00:53
*** jasondotstar has quit IRC00:56
*** dims_ has joined #openstack-keystone01:09
*** dims__ has joined #openstack-keystone01:15
*** dims__ has quit IRC01:16
*** dims_ has quit IRC01:17
*** dims_ has joined #openstack-keystone01:18
*** ankita_w_ has quit IRC01:18
*** jasonsb has joined #openstack-keystone01:24
*** stevemar has joined #openstack-keystone01:26
*** ChanServ sets mode: +v stevemar01:26
*** jasondotstar has joined #openstack-keystone01:27
*** stevemar has quit IRC01:30
*** dims__ has joined #openstack-keystone01:42
*** dims_ has quit IRC01:44
*** btully has quit IRC01:45
*** hrou has joined #openstack-keystone01:50
*** dims_ has joined #openstack-keystone01:54
*** elmiko has quit IRC01:55
openstackgerritBrant Knudson proposed openstack/keystone: Remove deprecated methods from assignment.Manager  https://review.openstack.org/21017401:56
*** dims__ has quit IRC01:56
*** stevemar has joined #openstack-keystone01:57
*** ChanServ sets mode: +v stevemar01:57
*** elmiko_ has joined #openstack-keystone01:58
stevemarlhcheng: dude, thanks so much for looking at the osc stuff :)02:21
lhchengstevemar: no problem, ship it :)02:23
stevemarlhcheng: yeah, gonna start trying it out now, all the volume commands, and then probably approve it02:24
lhchengstevemar: took me awhile to figure out the volume v2 setting.. OS_VOLUME_API_VERSION=202:26
lhchengjust in case you might need it too ^ :)02:27
lhchengstevemar: I'm going to grab dinner02:28
stevemarlhcheng: small tweaks on the set/unset commands02:28
lhchengttyl02:28
stevemaroops02:28
stevemari'll make the change02:28
stevemargo eat!02:28
lhchengokay :)02:28
lhchengthanks02:28
lhchenglater!02:28
*** lhcheng has quit IRC02:29
*** markvoelker has quit IRC02:30
*** davechen has joined #openstack-keystone02:32
*** _cjones_ has joined #openstack-keystone02:36
*** _cjones_ has quit IRC02:37
*** _cjones_ has joined #openstack-keystone02:37
*** davechen1 has joined #openstack-keystone02:45
*** davechen has quit IRC02:45
*** davechen1 is now known as davechen02:46
openstackgerritSteve Martinelli proposed openstack/oslo.policy: Have the enforcer have its own file cache  https://review.openstack.org/20965602:48
*** davechen1 has joined #openstack-keystone02:49
*** topol has joined #openstack-keystone02:51
*** ChanServ sets mode: +v topol02:51
*** hakimo_ has joined #openstack-keystone02:52
*** davechen has quit IRC02:52
*** hakimo has quit IRC02:55
*** narengan has quit IRC02:56
*** piyanai has joined #openstack-keystone02:56
*** narengan has joined #openstack-keystone02:57
*** davechen has joined #openstack-keystone02:58
*** davechen1 has quit IRC03:00
*** narengan has quit IRC03:01
*** topol has quit IRC03:06
openstackgerritJamie Lennox proposed openstack/python-keystoneclient-kerberos: Disable optional authentication for plugin  https://review.openstack.org/18832903:29
*** kun_huang has joined #openstack-keystone03:29
openstackgerritJamie Lennox proposed openstack/python-keystoneclient-kerberos: Federated Kerberos plugin  https://review.openstack.org/17355803:29
kun_huangguys, will keystoneclient support v3 on command line?03:29
jamielennoxkun_huang: no03:30
*** markvoelker has joined #openstack-keystone03:30
jamielennoxyou should use openstackclient03:30
*** lhcheng has joined #openstack-keystone03:30
*** ChanServ sets mode: +v lhcheng03:30
*** roxanaghe has quit IRC03:32
kun_huangjamielennox: keystoneclient provide python api only, and openstackclient focus on command line support now?03:32
stevemarkun_huang: yes sir!03:32
kun_huangstevemar: got it :)03:32
stevemarkun_huang: openstackclient has full support for keystone v2 and v3, and some v3 extensions too!03:32
stevemarits also got support for cinder and nova commands :)03:33
jamielennoxstevemar pulls out the elevator pitch03:34
stevemarjamielennox: it's oh-so-wonderful!03:35
*** markvoelker has quit IRC03:35
kun_huangstevemar: thank you :)03:36
*** zzzeek has quit IRC03:38
*** kun_huang has left #openstack-keystone03:39
*** _cjones_ has quit IRC03:40
*** vivekd has joined #openstack-keystone03:48
*** boris-42 has quit IRC03:50
*** ankita_wagh has joined #openstack-keystone03:53
*** dims_ has quit IRC04:04
*** ankita_wagh has quit IRC04:09
*** ankita_wagh has joined #openstack-keystone04:09
*** jasondotstar has quit IRC04:09
*** gyee has quit IRC04:13
openstackgerritJamie Lennox proposed openstack/keystoneauth: Move AccessInfo objects into own module  https://review.openstack.org/20931104:18
openstackgerritJamie Lennox proposed openstack/keystoneauth: Make missingproperty private  https://review.openstack.org/20931704:18
*** kiran-r has joined #openstack-keystone04:34
*** darrenc is now known as darrenc_afk04:35
*** _hrou_ has joined #openstack-keystone04:38
*** jdandrea has quit IRC04:39
*** hrou has quit IRC04:40
*** piyanai has quit IRC04:43
stevemarhey jamielennox, interested in taking a high level look at an osc patch04:44
stevemar?04:44
jamielennoxstevemar: sure04:44
stevemarjamielennox: https://review.openstack.org/18672004:44
stevemarits for logging all commands to a file04:44
jamielennoxstevemar: interesting idea04:44
stevemarjamielennox: yeah, it has merit, dtroyer got them to change it from optional CLI args to "please just use OCC"04:45
jamielennoxstevemar: i kind of think cmd might be more approrpriate04:48
jamielennox:)04:48
stevemarjamielennox why must you and dtroyer be on polar opposites on so many issues :)04:48
jamielennoxnot likely you are going to want to log everything all the time in like an OCC kind of way04:48
stevemarthe --log-file option still works04:48
*** Nirupama has joined #openstack-keystone04:51
jamielennoxi can see a reason for it to be in occ04:51
jamielennoxgenerally it seems ok04:53
jamielennoxcould be simpler04:54
jamielennoxyou don't need to do a bunch of checking, you only need to check log_file etc when you add handlers04:54
jamielennoxbut meh04:54
*** navid__ has quit IRC04:59
stevemarjamielennox: just the attitude i was looking for! 'meh'04:59
jamielennoxstevemar: :)05:00
*** darrenc_afk is now known as darrenc05:01
*** lhcheng_ has joined #openstack-keystone05:03
*** _kiran_ has joined #openstack-keystone05:06
*** lhcheng has quit IRC05:06
*** kiran-r has quit IRC05:07
*** ankita_w_ has joined #openstack-keystone05:10
*** ankita_wagh has quit IRC05:13
*** _kiran_ has quit IRC05:16
*** jasondotstar has joined #openstack-keystone05:16
*** stevemar has quit IRC05:18
*** stevemar has joined #openstack-keystone05:18
*** ChanServ sets mode: +v stevemar05:18
*** jasondotstar has quit IRC05:21
*** dikonoor has joined #openstack-keystone05:24
dikonoorstevemar:Hi Steve05:24
stevemardikonoor: hey hey05:25
dikonoorstevemar:I keep seeing the following deprecation warning in the keystone log >> Deprecated: keystone.contrib.endpoint_policy.routers.EndpointPolicyExtension is deprecated as of Liberty in favor of keystone.endpoint_policy.routers.Routers and may be removed in M.05:25
*** urulama has quit IRC05:25
dikonoorstevemar: https://review.openstack.org/#/c/171448/ seems to have added the deprecation05:25
*** urulama has joined #openstack-keystone05:25
stevemardikonoor: yep, we're just moving it from keystone.contrib.endpoint_policy to keystone.endpoint_policy05:26
dikonoorstevemar: but I believe the keystone paste file should have been updated accordingly so that this warning doesn't popup05:26
stevemarah05:26
stevemarit does that always eh?05:26
dikonoorstevemar:https://github.com/openstack/keystone/blob/master/etc/keystone-paste.ini#L4605:26
stevemarlet me change that05:26
dikonoorstevemar: do you want me to open a LP bug ?05:27
stevemardikonoor: blame jamielennox for that one :)05:27
stevemardikonoor: sure05:27
jamielennoxwhat05:27
dikonoorstevemar:ok..Let me open a bug and ping you the number here05:27
jamielennoxnow what have i done05:27
stevemarjamielennox: broke everything05:27
dikonoorstevemar: there might be other entries in the paste file that points to the old stuff05:27
stevemardikonoor: irc will automagically tell us the number05:28
dikonoorstevemar:ok cool..hold on then05:28
stevemardikonoor: we plan on moving a few things around, so let me know if you see any other warnings05:28
jamielennoxdid i get that wrong? that was ages ago05:29
stevemarjamielennox: was in L1 i think05:30
jamielennoxyea, i was hoping if i showed how someone else would pick up the others05:31
*** markvoelker has joined #openstack-keystone05:31
stevemarjamielennox: i plan on it05:32
stevemarjust been busy with other stuff-n-things05:32
jamielennoxi saw someone else do one05:32
stevemarbut my schedule is finally opening up a bit,05:32
jamielennoxstevemar: right, always more things to od05:32
stevemaryeah, fernando, picked it up05:32
stevemari'm helping to train him, but he's on another team05:33
stevemardikonoor: trouble opening the bug? i've got the fix ready to go :)05:33
*** yottatsa has joined #openstack-keystone05:34
dikonoorstevemar:https://bugs.launchpad.net/keystone/+bug/148250005:34
openstackLaunchpad bug 1482500 in Keystone "Deprecation warning in keystone log for keystone.contrib.endpoint_policy.routers.EndpointPolicyExtension" [Undecided,New]05:34
stevemardikonoor: thanks :)05:34
openstackgerritSteve Martinelli proposed openstack/keystone: Reference new endpoint_policy in paste file  https://review.openstack.org/21020405:34
dikonoor:)05:34
stevemarjamielennox: ^ i changed up a little something there, take a look?05:35
stevemarjamielennox: changed the filter from endpoint_policy_extension to endpoint_policy, those should be OK to change right?05:35
davechenAh, this change is necessary, I need update another patch as well.05:36
jamielennoxstevemar: fine on the change05:36
jamielennoxstevemar: i'm not sure about the changing _extension05:36
*** markvoelker has quit IRC05:36
jamielennoxit probably doesn't matter because people will have to update paste anyway05:36
stevemarjamielennox: yeah, i figured it shouldn't be that much of an issue05:37
davechenstevemar, jamielennox, Is there any need to move other extension from the contrib to core?05:38
stevemardavechen: probably oauth1, federation and endpoint_filter05:38
stevemarfernando started one of those05:38
stevemari think the oauth1 one.05:38
jamielennoxdavechen: all of them hopefully05:38
davechenstevemar, jamielennox: yeah, I also have the patch for the endpoint_filter.05:39
davechenstevemar, jamielennox: pending for an while, stevemar commented that patch before.05:39
davechenstevemar, jamielennox: will update them to fix the merge conflict.05:40
*** belmoreira has quit IRC05:47
*** stevemar has quit IRC05:47
dstanekhey davechen!05:48
*** stevemar has joined #openstack-keystone05:49
*** ChanServ sets mode: +v stevemar05:49
dstanekdavechen: did my explanation about the region thing make sense?05:50
davechendstanek: hi David,05:51
davechendstanek: yeah, make sense indeed.05:51
davechendstanek: I am okay with that change,  it much better that the original review.05:51
dstanekdavechen: i wouldn't say much better. they both fix the issue, i just took a different approach05:52
davechendstanek: it fix the issue from the source, but the original review is just make fix the issue.05:52
davechendstanek: yeah, this is why i mark the TODO in the testcase.05:53
davechendstanek: must be in deep night in your region? my boss.05:53
*** josecastroleon has joined #openstack-keystone05:54
dstanek02:0005:54
davechendstanek: impressive!!!05:54
davechendstanek: why work so hard.05:54
davechendstanek: when your patch got merged, I will abandon the original review.05:55
dstaneki meant to ask dolphm about it earlier; i'll do that tomorrow05:55
dstaneki got bored and decided to jump on an finish up some misc stuff. i haven't been working all day05:56
dstanekand stevemar is in the same timezone and should be sleeping05:56
davechendstanek: Just talked a little bit with him :)05:57
davechendstanek: How many children do you have?05:57
dstanekdavechen: 405:57
davechendstanek: wow!05:58
davechendstanek: I just have one daughter.05:58
dstanekdavechen: going to have any more?05:58
*** _hrou_ has quit IRC05:59
davechendstanek: no, I cannot afford to have another.05:59
davechendstanek: although I hope.05:59
dstanekdavechen: hopefully you will then05:59
davechendstanek: traditionally, it's mean happiness if there are  more childre.06:00
dstanek... and some stress06:00
stevemardstanek needs more children06:00
davechendstanek: In China, big family means happiness.06:00
davechenmore stress... I agree.06:01
dstanekstevemar: only 1 more so i can gave a prime number!06:01
stevemarshould have stuck with 3!06:01
davechenstevemar: only two is allowed by government.06:02
davechenin my country.06:02
dstanekdavechen: really?06:02
davechenI hate this rule.06:02
stevemari'm enjoying life with 0 :D06:03
davechenyup, too  many people here.06:03
*** urulama has quit IRC06:03
davechenenjoy it, enjoy your free life. stevemar.06:03
stevemari do all the time!06:04
*** urulama has joined #openstack-keystone06:04
stevemardstanek: btw https://review.openstack.org/#/c/210204/06:05
*** Guest58084 has quit IRC06:06
stevemarahh shoot... i forgot to do a patch i wanted to do... should I boot up my vm and do it?06:06
dstanekstevemar: that doesn't exist, does it?06:08
dstanekstevemar: i don't have an EndpointPolicyExtension in my routers module06:09
stevemardstanek: huh?06:10
stevemarhttps://github.com/openstack/keystone/blob/master/keystone/contrib/endpoint_policy/routers.py#L2506:11
davechendstanek: someone has fixed it for you when are you hanging around. :)06:11
dstanekstevemar: but your patch changes that to look at keystone.endpoint_policy.routers right?06:11
dstanekmaybe it's too late and i'm too tire...06:12
dstanekerr...tired06:12
davechenThis extension has been deprecated.06:12
davechengo to sleep, two super man.06:13
stevemardstanek: i think you need sleep06:14
stevemari regret asking you to look at it :P06:14
dstanekdavechen: right, but the patch points to a class that doesn't exist06:14
dstaneklol06:14
stevemarohhh i see what you mean :)06:14
stevemardstanek: keystone.endpoint_policy.routers:Routers.factory ?06:15
davechenthe path seems wrong.06:16
davechenkeystone.endpoint_policy.routers.Routers06:17
dstanekstevemar: the RoutersBase classes don't have a factory method. i think we may be missing a class here06:17
openstackgerritMarek Denis proposed openstack/keystone: Refactor: rename Fernet's unscoped federated payload  https://review.openstack.org/20219006:17
dstanekstevemar: actually this isn't middleware anymore06:18
stevemardstanek: i think we can just remove it...06:19
dstanekstevemar: yes, http://git.openstack.org/cgit/openstack/keystone/tree/keystone/service.py#n12106:19
dstanekwe already wire in the routes if configured to do so06:19
davechen+1 to remove it.06:20
openstackgerritSteve Martinelli proposed openstack/keystone: Reference new endpoint_policy in paste file  https://review.openstack.org/21020406:20
openstackgerritSteve Martinelli proposed openstack/keystone: Remove reference of old endpoint_policy in paste file  https://review.openstack.org/21020406:21
stevemarthanks dstanek, you're the best!06:24
stevemarnow i sleep06:24
stevemarso long my two daves, dstanek and davechen06:24
dstanekstevemar: night, i have a review for you to look at in the morning06:25
stevemarpile it on!06:25
*** stevemar has quit IRC06:25
davechengood dream. :)06:27
*** belmoreira has joined #openstack-keystone06:38
*** vincep has joined #openstack-keystone06:53
*** vincep has quit IRC07:04
*** jasondotstar has joined #openstack-keystone07:05
*** vincep has joined #openstack-keystone07:06
*** jasondotstar has quit IRC07:09
*** yottatsa has quit IRC07:11
*** henrynash has joined #openstack-keystone07:12
*** ChanServ sets mode: +v henrynash07:12
*** kiran-r has joined #openstack-keystone07:17
bretongood morning!07:18
*** ParsectiX has joined #openstack-keystone07:25
*** lhcheng has joined #openstack-keystone07:29
*** ChanServ sets mode: +v lhcheng07:29
*** lhcheng_ has quit IRC07:32
*** markvoelker has joined #openstack-keystone07:32
*** markvoelker has quit IRC07:37
*** btully has joined #openstack-keystone07:38
*** ankita_w_ has quit IRC07:41
*** btully has quit IRC07:42
*** browne has quit IRC07:44
*** fhubik has joined #openstack-keystone07:46
*** vivekd has quit IRC07:47
*** e0ne has joined #openstack-keystone07:55
*** henrynash has quit IRC07:56
*** stevemar has joined #openstack-keystone07:56
*** ChanServ sets mode: +v stevemar07:56
*** stevemar has quit IRC07:58
*** fhubik is now known as fhubik_afk07:59
*** fhubik_afk is now known as fhubik08:01
*** henrynash has joined #openstack-keystone08:03
*** ChanServ sets mode: +v henrynash08:03
*** chlong has quit IRC08:04
*** jistr has joined #openstack-keystone08:06
*** e0ne has quit IRC08:06
*** fhubik is now known as fhubik_afk08:13
*** afazekas_ has joined #openstack-keystone08:17
*** topol has joined #openstack-keystone08:18
*** ChanServ sets mode: +v topol08:18
*** topol has quit IRC08:23
*** lhcheng has quit IRC08:26
*** fhubik_afk is now known as fhubik08:28
*** henrynash has quit IRC08:42
*** vivekd has joined #openstack-keystone08:44
*** dikonoor has quit IRC08:58
*** jasondotstar has joined #openstack-keystone09:00
*** vivekd has quit IRC09:00
*** vivekd has joined #openstack-keystone09:02
*** vivekd_ has joined #openstack-keystone09:02
*** vivekd has quit IRC09:06
*** vivekd_ is now known as vivekd09:06
*** eandersson has joined #openstack-keystone09:07
*** dikonoo has joined #openstack-keystone09:07
*** lhcheng has joined #openstack-keystone09:12
*** ChanServ sets mode: +v lhcheng09:12
*** e0ne has joined #openstack-keystone09:12
*** vivekd_ has joined #openstack-keystone09:17
openstackgerritJamie Lennox proposed openstack/keystoneauth: Import service catalog tests from keystoneclient  https://review.openstack.org/21026609:18
openstackgerritJamie Lennox proposed openstack/keystoneauth: Allow searching a catalog on service or endpoint id  https://review.openstack.org/21026709:18
openstackgerritJamie Lennox proposed openstack/keystoneauth: Remove service_type requirement from catalog searching  https://review.openstack.org/21026809:19
openstackgerritJamie Lennox proposed openstack/keystoneauth: Replace endpoint_type with interface in catalog  https://review.openstack.org/21026909:19
*** vivekd has quit IRC09:21
*** vivekd_ is now known as vivekd09:21
*** olmy0414 has joined #openstack-keystone09:22
*** btully has joined #openstack-keystone09:25
olmy0414Hello, could someboby tell me pls, with version of python-openstackclient supports this command : openstack project set --domain ......?  With version python-openstackclient-1.0.3 it doen`t work - "openstack project set: error: unrecognized arguments: --domain e8c3b047083d400d90eddae5917d47f2"09:25
olmy0414python-openstackclient-1.0.3-2.el7.noarch.rpm - from Kilo09:29
*** jasondotstar has quit IRC09:29
*** btully has quit IRC09:30
*** markvoelker has joined #openstack-keystone09:33
*** markvoelker has quit IRC09:37
*** vivekd has quit IRC09:40
*** vivekd has joined #openstack-keystone09:41
*** jasondotstar has joined #openstack-keystone09:42
*** vivekd_ has joined #openstack-keystone09:46
*** vivekd has quit IRC09:48
*** vivekd_ is now known as vivekd09:48
*** vivekd_ has joined #openstack-keystone09:49
marekdolmy0414: try help $ openstack help project set09:49
marekdand you will see options for your version09:49
*** vivekd__ has joined #openstack-keystone09:53
*** vivekd has quit IRC09:53
*** vivekd__ is now known as vivekd09:53
*** dims_ has joined #openstack-keystone09:54
*** davechen has left #openstack-keystone09:54
*** stevemar has joined #openstack-keystone09:57
*** ChanServ sets mode: +v stevemar09:57
*** vivekd_ has quit IRC09:57
*** stevemar has quit IRC09:58
*** marzif has joined #openstack-keystone09:59
olmy0414found it, i need version python-openstackclient-1.5, thanks09:59
*** olmy0414 has quit IRC10:00
*** mestery_ has joined #openstack-keystone10:11
*** jasondotstar has quit IRC10:13
*** mestery has quit IRC10:15
*** e0ne has quit IRC10:16
*** lhcheng has quit IRC10:17
*** e0ne has joined #openstack-keystone10:17
openstackgerritRajesh Tailor proposed openstack/keystone: Fix duplicate-key pylint issue  https://review.openstack.org/21030010:17
*** divya__ has joined #openstack-keystone10:19
*** jistr has quit IRC10:20
*** bradjones has quit IRC10:20
*** jistr has joined #openstack-keystone10:20
*** dikonoo has quit IRC10:22
*** nigelb has quit IRC10:28
*** nigelb has joined #openstack-keystone10:28
*** bradjones_ has joined #openstack-keystone10:30
*** bradjones_ is now known as bradjones10:30
*** nonameentername has quit IRC10:33
*** josecastroleon has quit IRC10:38
*** nonameentername has joined #openstack-keystone10:39
*** vivekd_ has joined #openstack-keystone10:39
*** vivekd__ has joined #openstack-keystone10:43
*** bradjones has quit IRC10:45
*** vivekd has quit IRC10:45
*** kiran-r has quit IRC10:45
*** harlowja has quit IRC10:45
*** mtreinish has quit IRC10:45
*** tsymanczyk has quit IRC10:45
*** openstackgerrit has quit IRC10:45
*** HenryG has quit IRC10:45
*** tobasco has quit IRC10:45
*** kfjohnson has quit IRC10:45
*** navid_ has quit IRC10:45
*** pgbridge has quit IRC10:45
*** odyssey4me has quit IRC10:45
*** miguelgrinberg has quit IRC10:45
*** raginbajin has quit IRC10:45
*** dhellmann has quit IRC10:45
*** vmbrasseur has quit IRC10:45
*** trey has quit IRC10:45
*** d0ugal has quit IRC10:45
*** pothole has quit IRC10:45
*** vivekd__ is now known as vivekd10:45
*** fhubik is now known as fhubik_afk10:46
*** vivekd_ has quit IRC10:47
bretonyeah! I've successfully authenticated with certificate10:48
bretonhttps://review.openstack.org/#/c/156870/4810:48
*** bradjones has joined #openstack-keystone10:49
*** kiran-r has joined #openstack-keystone10:49
*** vmbrasseur has joined #openstack-keystone10:49
*** harlowja has joined #openstack-keystone10:49
*** mtreinish has joined #openstack-keystone10:49
*** tsymanczyk has joined #openstack-keystone10:49
*** openstackgerrit has joined #openstack-keystone10:49
*** HenryG has joined #openstack-keystone10:49
*** tobasco has joined #openstack-keystone10:49
*** kfjohnson has joined #openstack-keystone10:49
*** navid_ has joined #openstack-keystone10:49
*** pgbridge has joined #openstack-keystone10:49
*** odyssey4me has joined #openstack-keystone10:49
*** miguelgrinberg has joined #openstack-keystone10:49
*** raginbajin has joined #openstack-keystone10:49
*** dhellmann has joined #openstack-keystone10:49
*** trey has joined #openstack-keystone10:49
*** d0ugal has joined #openstack-keystone10:49
*** pothole has joined #openstack-keystone10:49
*** bradjones has quit IRC10:49
*** bradjones has joined #openstack-keystone10:49
*** bradjones has quit IRC10:49
*** bradjones has joined #openstack-keystone10:49
marekd++10:54
*** vmbrasseur has quit IRC10:58
*** atiwari has quit IRC10:58
*** dan has quit IRC11:00
*** amakarov_away is now known as amakarov11:00
*** dan has joined #openstack-keystone11:03
*** vmbrasseur has joined #openstack-keystone11:03
*** fhubik_afk is now known as fhubik11:04
*** atiwari has joined #openstack-keystone11:04
*** vivekd has quit IRC11:04
*** piyanai has joined #openstack-keystone11:10
*** yottatsa has joined #openstack-keystone11:29
*** davidckennedy has joined #openstack-keystone11:30
*** markvoelker has joined #openstack-keystone11:34
*** yottatsa has quit IRC11:34
*** gordc has joined #openstack-keystone11:35
*** e0ne has quit IRC11:36
*** e0ne has joined #openstack-keystone11:37
*** markvoelker has quit IRC11:39
*** yottatsa has joined #openstack-keystone11:40
*** josecastroleon has joined #openstack-keystone11:44
*** yottatsa has quit IRC11:52
*** yottatsa has joined #openstack-keystone11:53
marekdlbragstad: ping11:53
*** yottatsa has quit IRC11:54
*** stevemar has joined #openstack-keystone11:57
*** ChanServ sets mode: +v stevemar11:57
*** stevemar has quit IRC12:01
*** raildo has joined #openstack-keystone12:08
*** Nirupama has quit IRC12:09
*** yottatsa has joined #openstack-keystone12:09
*** piyanai has quit IRC12:16
*** piyanai has joined #openstack-keystone12:16
*** tellesnobrega has quit IRC12:17
*** chlong has joined #openstack-keystone12:17
*** piyanai has quit IRC12:20
*** piyanai has joined #openstack-keystone12:20
openstackgerritRajesh Tailor proposed openstack/keystone: Fix unreachable code in test_v3 module  https://review.openstack.org/21036512:21
*** piyanai has quit IRC12:23
*** markvoelker has joined #openstack-keystone12:29
*** dims_ has quit IRC12:33
*** dims_ has joined #openstack-keystone12:34
*** afazekas_ has quit IRC12:36
*** bapalm has joined #openstack-keystone12:39
*** tellesnobrega has joined #openstack-keystone12:42
*** shadower has joined #openstack-keystone12:42
*** vincep has quit IRC12:47
*** vincep has joined #openstack-keystone12:48
*** katkapilatova has joined #openstack-keystone12:52
*** e0ne has quit IRC12:52
*** ccard has joined #openstack-keystone12:55
*** e0ne has joined #openstack-keystone12:59
*** zzzeek has joined #openstack-keystone12:59
*** kiran-r has quit IRC13:04
*** dsirrine has joined #openstack-keystone13:13
*** ayoung has joined #openstack-keystone13:13
*** ChanServ sets mode: +v ayoung13:13
*** hrou has joined #openstack-keystone13:20
*** jdandrea has joined #openstack-keystone13:21
*** browne has joined #openstack-keystone13:25
*** petertr7_away is now known as petertr713:26
*** TheIntern has joined #openstack-keystone13:28
*** browne has quit IRC13:31
*** henrynash has joined #openstack-keystone13:38
*** ChanServ sets mode: +v henrynash13:38
*** henrynash has quit IRC13:39
*** mestery_ is now known as mestery13:40
*** piyanai has joined #openstack-keystone13:43
*** afaranha has joined #openstack-keystone13:48
*** afaranha has left #openstack-keystone13:48
*** edmondsw has joined #openstack-keystone13:49
bretonI wonder13:53
bretonhow do I make an auth plugin which does not involve tokens?13:54
breton*that doesn't13:54
*** rvba has joined #openstack-keystone13:57
*** rvba has quit IRC13:57
*** rvba has joined #openstack-keystone13:57
bretonjamielennox:13:58
*** stevemar has joined #openstack-keystone13:58
*** ChanServ sets mode: +v stevemar13:58
*** ParsectiX has quit IRC13:59
*** topol has joined #openstack-keystone13:59
*** ChanServ sets mode: +v topol13:59
*** narengan has joined #openstack-keystone14:00
dstanekbreton: i am going to resubmit your notifications review (unchanged) on top of some new tests14:00
dstanekbreton: isn't gyee doing that with certificates?14:01
*** stevemar has quit IRC14:02
bretondstanek: he is. There is server-side implementation, but no auth plugin for clients.14:02
breton(or I don't know where it is)14:02
dstaneki have to imagine that he is. otherwise how would be use it?14:04
marekdbreton: how would it look like?14:04
marekdbreton: how would you then transport identity between client and server?14:04
*** mylu has joined #openstack-keystone14:06
bretonlike this: http://paste.openstack.org/show/412191/14:06
bretonuser attributes are retrieved from the certificate14:07
bretonand mapped how it's done for federation14:07
*** mylu has quit IRC14:08
*** mylu has joined #openstack-keystone14:08
marekdaha x509 everywhere.14:10
marekdso the certificate is kind of your token.14:10
dstanekyeah, there is not way to do it without some sort of "token"14:11
*** richm has joined #openstack-keystone14:12
openstackgerritBrant Knudson proposed openstack/keystone: Remove deprecated methods from assignment.Manager  https://review.openstack.org/21017414:13
openstackgerritBrant Knudson proposed openstack/keystone: Stop calling deprecated assignment manager methods  https://review.openstack.org/21045514:13
bretonyeah. And I don't quite understand now how to tie it to plugin interface.14:13
openstackgerritPaweł Pamuła proposed openstack/keystone: IdP deletion triggers token revocation  https://review.openstack.org/21045614:14
*** piyanai has quit IRC14:16
*** narengan_ has joined #openstack-keystone14:16
*** mylu has quit IRC14:16
*** mylu has joined #openstack-keystone14:18
*** narengan_ has quit IRC14:19
*** narengan has quit IRC14:19
*** narengan has joined #openstack-keystone14:19
*** btully has joined #openstack-keystone14:20
* breton is looking at how oauth is done is ksc14:20
*** piyanai has joined #openstack-keystone14:21
*** narengan has quit IRC14:24
*** geoffarnold has joined #openstack-keystone14:25
rodrigodsbknudson, ping... regarding your review in https://review.openstack.org/#/c/157427/14:25
*** mylu has quit IRC14:26
bknudsonrodrigods: what's up?14:26
rodrigodsbknudson, do you believe it is a blocker we changing that method? I agree with you and htruta14:26
*** geoffarnold has quit IRC14:26
*** geoffarnold has joined #openstack-keystone14:27
bknudsonrodrigods: at this point it is a blocker that you're changing the method since supposedly the api is stable.14:28
bknudsonso we need cores to decide on it.14:28
bknudsonrodrigods: probably best to bring it up at the weekly meeting14:28
rodrigodsbknudson, I see...14:28
bknudsonand post to the -dev mailing ist.14:28
bknudsonlist14:29
rodrigodsbknudson, will do that14:29
rodrigodsthx14:29
bknudsonrodrigods: if you think we'll decide the api is unstable then rebase on https://review.openstack.org/#/c/21017414:29
bknudsonor, if you think we'll decide the api is stable then you can change your code to not require the new parameter or something.14:30
rodrigodsbknudson, that's my understanding14:30
rodrigodsthe api is unstable14:30
bknudsony, but if it's unstable then why have the deprecation warning?14:31
*** mylu has joined #openstack-keystone14:31
rodrigodsbknudson, I mean, we'll rebase using your patch that removes the deprecation warning14:31
bknudsonrodrigods: ok, then you won't have to change keystone/assignment/core.py14:32
bknudsonbecause that method is gone14:32
rodrigodsbknudson, ++14:32
htrutabknudson: that might work for us14:33
openstackgerritDavid Stanek proposed openstack/keystone: Remove excessive transformation to list  https://review.openstack.org/20164814:36
openstackgerritDavid Stanek proposed openstack/keystone: Adds/updates notifications test cases  https://review.openstack.org/21047614:36
openstackgerritDavid Stanek proposed openstack/keystone: Fixes an incorrect docstring in notifications  https://review.openstack.org/21047714:36
openstackgerritDavid Stanek proposed openstack/keystone: Adds a notification testcase for unbound methods  https://review.openstack.org/21047814:36
htrutabknudson: we're kind of running out of time to reseller... do you think that this patch of yours is going to take long to be approved?14:36
bknudsonhtruta: I don't know... patches often take several months to be approved.14:37
petertr7Hi! I'm experiencing something weird with adding roles to users with python-keystone client v2.14:38
bknudsonIf there's any feedback on the patch I'll try to be responsive and update it quickly.14:38
petertr7I seem to be succcesful in executing add_user_role https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/v2_0/roles.py#L58.14:38
htrutabknudson: I see... this case would mean that reseller won't be available in L14:38
petertr7However when I attempted to use keystone user-role-list --user username it only has the default "_member_" role. If I delete the user and recreate it and add the role again, it says "User pete already has role X in tenant Y". Still, keystone user-role-list does not list any other role.14:38
bknudsonhtruta: keystone has too much technical debt and we need to get rid of it at some point.14:39
bknudsonrather than continue adding more14:39
htrutabknudson: agreed. but I don't think that this bug should've been blocking such a big functionality14:40
htrutaI mean... we could keep on doing reseller stuff and then rebase to your bug once it is approved14:41
htrutanot blocking the whole 10+ patches chain right now14:41
bknudsonhtruta: it won't be blocking if you decide that the assignment manager is a stable API and change the implementation so that the interface isn't changed14:42
*** stevemar has joined #openstack-keystone14:42
*** ChanServ sets mode: +v stevemar14:42
bknudsonI've spent this whole release trying to clean up technical debt and I'm tired of it.14:43
htrutabknudson: seems ok. but what if cores decide that it is unstable? we'd have the block14:45
htrutaI've spent this whole release trying to make reseller land, and I'm also tired of it :14:45
htruta:/14:46
bknudsonaccording to http://stackalytics.com/report/contribution/keystone-group/90 you've done 3 reviews. If you want keystone to move faster then we need more reviews.14:48
htrutabknudson: yes, I do. my bad. but rodrigods has also spent a lot of time with me one this and he's made lots of reviews14:49
dstanekbknudson: snap14:52
dstanekbknudson: you have to stop beating me at reviews!14:52
*** narengan has joined #openstack-keystone14:52
bknudsondstanek: it's not easy to stay ahead of you.14:53
*** dims_ is now known as dimsum__14:53
dstanekbknudson: i would say the reverse. you've just about always on top :-)14:53
bknudsondstanek: I'll review some of your patches... that will really show you.14:53
dstaneki bet you can't review all of my patches today14:54
bknudsonI14:54
*** fhubik has quit IRC14:55
bknudsonI've got some more technical debt to try to clean up... I'll try to get to some.14:55
dstanekalas...me too. while reviewing and writing some new code i keep running into things that need to be fixed14:56
bknudsondstanek: thanks for cleaning it up and not just adding more to the pile.14:56
bknudsonit'll help us move faster going forward and then we can add new features.14:58
openstackgerritDavid Stanek proposed openstack/keystone: NotificationsTestCase running in isolation  https://review.openstack.org/20473915:00
dstanek^ that should be a real easy one....i just had to update the commit message15:04
*** e0ne has quit IRC15:05
*** vivekdhayaal has joined #openstack-keystone15:05
*** TheIntern is now known as TheIntern_away15:06
bknudsonwe can't even keep our tests running15:06
*** narengan has quit IRC15:07
*** browne has joined #openstack-keystone15:07
dstanekbknudson: haha, fair point15:08
*** narengan has joined #openstack-keystone15:08
bknudsondstanek: so no configuration is needed for the tests?15:08
bknudsonlooks like it mocks everything anyways.15:08
*** narengan_ has joined #openstack-keystone15:09
dstanekyeah, those tests are not the greatest - removing the method now15:09
bknudsonthanks!15:09
openstackgerritDavid Stanek proposed openstack/keystone: NotificationsTestCase running in isolation  https://review.openstack.org/20473915:10
*** TheIntern_away is now known as TheIntern15:10
*** narengan_ has quit IRC15:11
*** vivekd2 has joined #openstack-keystone15:12
bknudsonas far as unit tests go test_send_notification looks pretty good... it's simple and shows the behavior.15:12
dstanekthere are so many reviews that we can get through with minimal effort (like that one)15:12
*** narengan_ has joined #openstack-keystone15:12
*** vivekdhayaal has quit IRC15:12
*** narengan has quit IRC15:13
bknudsonhere's an easy one already has +2 : https://review.openstack.org/#/c/179259/15:13
bknudsonanother easy one (no +2): https://review.openstack.org/#/c/187065/15:13
bknudsoneasy one has +2: https://review.openstack.org/#/c/189029/15:13
bknudsonthis one is easy for dstanek and has +2: https://review.openstack.org/#/c/194894/15:14
*** narengan has joined #openstack-keystone15:14
bknudsonthis one's easy and fixes another test bug: https://review.openstack.org/#/c/201352/15:14
*** lucas___ has joined #openstack-keystone15:15
bknudsonthis one's pretty easy: https://review.openstack.org/#/c/210455/115:15
bretonhttps://review.openstack.org/#/c/201352/2 -- this one is not really easy15:16
bretonhttps://review.openstack.org/#/c/201352/2 -- it works, but weird.15:16
*** narengan_ has quit IRC15:16
bknudsonbreton: it's strange that the option is registered only when the function is called.15:16
bknudsonbreton: I could propose a change to oslo so there's a separate function to register the option?15:17
*** vivekd2 has quit IRC15:19
openstackgerritBrant Knudson proposed openstack/keystone: Correct enabled emulation query to request no attributes  https://review.openstack.org/18706515:21
bretonbknudson: maybe. Or just register that option in the bottom of the module15:21
*** phalmos has joined #openstack-keystone15:21
*** r-daneel has joined #openstack-keystone15:22
*** mylu has quit IRC15:22
*** mylu has joined #openstack-keystone15:23
bretonI also hate python for saying "explicit is better than implicit" and making iteration over dict as iteration over its keys.15:24
bknudsonall sorts of things are implicit in python... for example just adding 2 things together... you don't know if it's 2s-complement modulo or floating point or what.15:27
bknudsonyou'd go crazy if everything was explicit15:27
bknudsonbut you'd probably have a more secure system15:27
dstanekbreton: :-)15:32
dstanekthose are design guidelines. doesn't mean everything should/will follow them15:32
*** browne has quit IRC15:32
*** _cjones_ has joined #openstack-keystone15:33
*** _cjones_ has quit IRC15:33
*** _cjones_ has joined #openstack-keystone15:33
*** vincep has quit IRC15:34
*** e0ne has joined #openstack-keystone15:40
*** e0ne has quit IRC15:42
*** gyee has joined #openstack-keystone15:42
*** ChanServ sets mode: +v gyee15:42
stevemardstanek: can you check this: https://review.openstack.org/#/c/207456/ ?15:47
stevemarthe author gives reason for adding an extra () at the end of a line, but it still seems weird to me15:47
stevemardstanek: in exchange, i'll review your notification patches :)15:47
dstanekstevemar: yay....15:48
*** phalmos has joined #openstack-keystone15:48
*** narengan_ has joined #openstack-keystone15:50
*** belmoreira has quit IRC15:51
*** Ephur has joined #openstack-keystone15:51
*** belmoreira has joined #openstack-keystone15:52
*** belmoreira has quit IRC15:52
bknudsonbreton: here's the proposed change to oslo.log : https://review.openstack.org/#/c/210504/15:52
*** yottatsa has quit IRC15:52
*** narengan has quit IRC15:53
*** phalmos has left #openstack-keystone16:03
marekdstevemar: FYI: https://bugs.launchpad.net/keystone/+bug/148270116:03
openstackLaunchpad bug 1482701 in Keystone "Federation: user's name in rules not respected" [Medium,New] - Assigned to Marek Denis (marek-denis)16:03
*** _cjones_ has quit IRC16:04
*** _cjones_ has joined #openstack-keystone16:04
dstanekstevemar: i wonder if we can get that test to work without that funky mixin16:04
openstackgerritBrant Knudson proposed openstack/keystone: Remove deprecated methods from assignment.Manager  https://review.openstack.org/21017416:06
openstackgerritBrant Knudson proposed openstack/keystone: Stop calling deprecated assignment manager methods  https://review.openstack.org/21045516:06
geoffarnoldis there an HMT mtg today in #openstack-meeting?16:07
* geoffarnold juggles odd weeks/even weeks16:08
*** josecastroleon has quit IRC16:09
stevemarmarekd: ah, it always takes id16:10
*** katkapilatova has left #openstack-keystone16:15
dstanekstevemar: i want this really bad :-) or for someone to tell me why my data is pulled from the DB in a different order https://review.openstack.org/#/c/210086/16:15
ericksonfgdsgeoffarnold, not today16:16
stevemardstanek: who knows16:16
dstaneknot me. i decided it wasn't worth the effort in looking16:17
*** tsymanczyk has quit IRC16:18
*** tsymanczyk has joined #openstack-keystone16:18
*** tsymanczyk is now known as Guest4627516:19
dolphmanyone know how to change the number of lines of context gerrit shows you in a diff?16:19
bknudsonI always click on the "skipped ... lines"16:19
dolphmi swear it used to be in Settings -> Preferences, but now it's definitely not and i'm pretty sure i'm stuck with a setting i don't like anymore16:20
bknudsonor go to preferences and context "while file"16:20
bknudsonwhole file16:20
bknudsonalso you can pick the # lines in preferences context16:20
*** jasonsb has quit IRC16:20
dolphmbknudson: where do you have an option about Context?16:20
bknudsonpreferences16:21
bknudsonat the top of the page16:21
dolphmbknudson: i.. don't have that16:21
bknudsonwhen looking at a file16:21
*** jasonsb has joined #openstack-keystone16:21
bknudsonmight have to click "Differences"16:21
bknudsonalso, I'm using the original coke16:21
dolphmbknudson: http://i.imgur.com/YdQG3p6.png16:21
*** petertr7 is now known as petertr7_away16:21
bknudsondolphm: it's on the individual files16:21
bknudsonalso there's a save button so maybe you can make it the default16:22
dolphmbknudson: where do you have a preferences button on the diff screen?16:23
bknudsonIt's right under "Differences"16:23
*** TheIntern has quit IRC16:23
dolphmoh damn i never noticed the top most menu changed...16:23
*** henrynash has joined #openstack-keystone16:24
*** ChanServ sets mode: +v henrynash16:24
dolphmbknudson: YAY thank you16:24
bknudsonno problem16:24
bknudsonI thought you switched to gertty16:24
*** atiwari has quit IRC16:25
*** jasonsb has quit IRC16:26
dolphmbknudson: i tried. the lack of vim keybindings drove me nuts16:27
dolphmbknudson: i even hacked on it a bit, but couldn't get it where i wanted it16:27
*** davidckennedy has quit IRC16:28
*** piyanai has quit IRC16:28
*** jistr has quit IRC16:28
*** ericksonfgds is now known as ericksonsantos16:28
*** piyanai has joined #openstack-keystone16:29
*** piyanai has quit IRC16:29
*** bapalm has quit IRC16:31
openstackgerritMerged openstack/keystone: Remove unused setUp for RevokeTests  https://review.openstack.org/17925916:32
*** lucas___ has quit IRC16:32
dolphmbknudson: did you see my second comment on https://review.openstack.org/#/c/210455/2/keystone/tests/unit/filtering.py,unified ?16:34
*** lucas___ has joined #openstack-keystone16:35
bknudsondolphm: I did... wasn't sure if you wanted me to add docstrings as part of this patch?16:35
bknudsonI guess it's easy enough.16:35
dolphmbknudson: it wasn't the diff that confused me, it was whole structure of the method. i didn't realize it was *intended* to try three different attributes16:35
bknudsondolphm: it's a goofy thing to do, especially in a test.16:36
dolphmbknudson: a final "if f is None: panic()" would have made it clear too.16:36
dolphmbknudson: yeah... i hate conditionals in a test like that :(16:36
esphello dolphm and bknudson, could you please take a look at this again at your convenience? https://review.openstack.org/#/c/208082/16:39
espthx in advanced!16:39
*** lucas___ has quit IRC16:39
*** stevemar has quit IRC16:39
*** piyanai has joined #openstack-keystone16:40
dolphmesp: why didn't gyee approve it?16:40
dstaneki am not a fan of the filtering module16:41
*** stevemar has joined #openstack-keystone16:41
*** ChanServ sets mode: +v stevemar16:41
* esp shrugs 16:41
gyeedolphm, esp also works for HP16:41
espdolphm: maybe he wanted to make sure bknudson and all are cool with it16:41
gyeeI thought we can't directly patches from the same company16:41
gyeeapprove I mean16:41
espah, sorry.  yeah.  I work for hp as well.16:41
bknudson"Other than the test name this looks fine." -- so I'm fine with it.16:42
dolphmgyee: ah, does lcheng work for HP too?16:42
bknudsonassuming the test name was changed16:42
gyeedolphm, used to be, he's with yahoo now16:42
dolphmgyee: ah, well the only thing we like to avoid is 2 reviewers and an author from a single company16:42
espthx bknudson16:42
gyeedolphm, k, good to know :)16:43
espdef, will be careful who I put on reviews in the future16:43
gyeeesp, just have your in-law push the patch next time :)16:44
morgan_503esp: don't worry too much, us core reviewers are good about self-policing that same16:44
morgan_503Company thing16:44
* morgan_503 is still not here.16:44
espgotcha.16:44
* esp is a noob16:45
*** marzif has quit IRC16:45
morgan_503We all started as noobs16:45
morgan_503;)16:45
gyeemorgan_503 is boxing with the kangaroos16:45
morgan_503I am not. Keep up with teh twitterz16:45
*** TheIntern has joined #openstack-keystone16:46
dolphmgyee: he lost the fight and got sent home16:46
*** iamjarvo has joined #openstack-keystone16:47
*** lhcheng has joined #openstack-keystone16:47
*** ChanServ sets mode: +v lhcheng16:47
gyeelol16:48
*** TheIntern has quit IRC16:49
*** kiran-r has joined #openstack-keystone16:51
dolphmbknudson: this affects stable/kilo as well, right? https://bugs.launchpad.net/keystone/+bug/148266016:52
openstackLaunchpad bug 1482660 in Keystone "Stop using deprecated methods in assignment manager" [Medium,In progress] - Assigned to Brant Knudson (blk-u)16:52
dstanekbknudson: what is the . syntax in https://review.openstack.org/#/c/207602/4/tox.ini ?16:54
*** mylu has quit IRC16:57
*** iamjarvo has quit IRC16:57
*** roxanaghe has joined #openstack-keystone16:59
*** lucas___ has joined #openstack-keystone16:59
*** mylu has joined #openstack-keystone16:59
*** roxanaghe has quit IRC17:03
*** lucas___ has quit IRC17:03
lbragstadbknudson: I think https://review.openstack.org/#/c/208025/1 looks good, if you don't have the time I can address breton's comments17:05
lbragstadand push a new revision17:05
*** annasort has joined #openstack-keystone17:05
*** lucas___ has joined #openstack-keystone17:05
openstackgerrithenry-nash proposed openstack/keystone: Enable listing of role assignments in a project hierarchy  https://review.openstack.org/20815217:06
openstackgerrithenry-nash proposed openstack/keystone: Enable listing of role assignments in a project hierarchy  https://review.openstack.org/20815217:07
*** Guest46275 has quit IRC17:07
*** kiran-r has quit IRC17:07
*** browne has joined #openstack-keystone17:10
*** jasonsb has joined #openstack-keystone17:12
*** ankita_wagh has joined #openstack-keystone17:17
*** geoffarnold has quit IRC17:19
*** piyanai has quit IRC17:20
openstackgerritLance Bragstad proposed openstack/keystone: Fix minor comments in apache-httpd.rst docs  https://review.openstack.org/21054317:23
*** narengan_ has quit IRC17:24
*** narengan has joined #openstack-keystone17:24
*** atiwari has joined #openstack-keystone17:25
*** geoffarnold has joined #openstack-keystone17:25
*** narengan_ has joined #openstack-keystone17:27
openstackgerritMerged openstack/keystone: Fixes an issue with data ordering in the tests  https://review.openstack.org/21008617:28
*** geoffarnold has quit IRC17:28
*** narengan_ has quit IRC17:29
*** narengan has quit IRC17:29
*** narengan has joined #openstack-keystone17:29
*** geoffarnold has joined #openstack-keystone17:30
*** narengan has quit IRC17:34
openstackgerritDolph Mathews proposed openstack/keystone: Validate domain ownership for v2 tokens  https://review.openstack.org/20806917:34
*** geoffarnold has quit IRC17:36
*** geoffarnold has joined #openstack-keystone17:37
*** phalmos has joined #openstack-keystone17:38
*** elmiko_ is now known as elmiko17:38
*** petertr7_away is now known as petertr717:39
openstackgerritRoxana Gherle proposed openstack/keystone: Fernet 'expires' value loses 'ms' after validation  https://review.openstack.org/21003717:41
*** piyanai has joined #openstack-keystone17:46
stevemarlhcheng: https://review.openstack.org/#/c/210202/117:49
*** urulama has quit IRC17:51
*** phalmos has quit IRC17:53
*** lucas___ has quit IRC17:56
*** iamjarvo has joined #openstack-keystone17:57
lhchengstevemar: terry already pushed the button :P looks good17:59
*** gyee has quit IRC18:05
*** jdandrea has left #openstack-keystone18:10
openstackgerritMerged openstack/keystoneauth: Update .gitignore  https://review.openstack.org/20999618:15
bknudsonlbragstad: sure, thanks18:15
lbragstadbknudson: no problem, I pushed a follow on patch that addresses the comments breton had18:16
bknudsondolphm: that bug would also affect stable/kilo.18:16
bknudsonlbragstad: squash it18:16
lbragstadbknudson: ok18:16
openstackgerritSteve Martinelli proposed openstack/keystone: Remove reference of old endpoint_policy in paste file  https://review.openstack.org/21020418:18
*** drjones has joined #openstack-keystone18:18
openstackgerritRodrigo Duarte proposed openstack/keystone: Limit subtree and parents queries  https://review.openstack.org/20913218:19
openstackgerritRodrigo Duarte proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/15742718:19
openstackgerritRodrigo Duarte proposed openstack/keystone: Honor domain operations in project table  https://review.openstack.org/14376318:19
openstackgerritRodrigo Duarte proposed openstack/keystone: Restrict inherited role assignments to subdomains  https://review.openstack.org/16418018:19
openstackgerritRodrigo Duarte proposed openstack/keystone: Change project name constraints  https://review.openstack.org/15837218:19
rodrigodsbknudson, henrynash ^18:19
rodrigodsthe change in the get_project_by_name signature was unnecessary18:19
openstackgerritLance Bragstad proposed openstack/keystone: Update Httpd configuration docs for sites-available/enabled  https://review.openstack.org/20802518:19
dstanekrodrigods: uggg...i was just leaving comments on one of those18:20
rodrigodsdstanek, sorry =(18:20
rodrigodsbut please leave them in the prev patchset18:21
rodrigodswe will pay attention18:21
*** tsymanczyk has joined #openstack-keystone18:21
lbragstadbknudson: fixed and abandon my patch set18:21
*** josecastroleon has joined #openstack-keystone18:21
*** tsymanczyk is now known as Guest3548918:21
lbragstadcc breton ^18:21
*** tsufiev has quit IRC18:22
*** tsufiev has joined #openstack-keystone18:22
dstaneklbragstad: if you were going to abandon it then why waste time fixing :-P18:22
lbragstaddstanek: I rolled my changes in to bknudson's patch and abandon the one I had18:22
*** _cjones_ has quit IRC18:22
dstanekrodrigods: we have to figure out how to make some of these changes in even smaller chunks18:23
dstanekrodrigods: it would be much easier for you guys to get things merged that way18:23
openstackgerritDolph Mathews proposed openstack/keystone: Validate domain ownership for v2 tokens  https://review.openstack.org/20806918:24
*** eandersson has quit IRC18:24
bknudsonlbragstad: btw - "ln -s ../sites-available/keystone.conf /etc/$APACHE_DIR/sites-enabled/" works fine18:25
*** jorge_munoz has quit IRC18:25
*** phalmos has joined #openstack-keystone18:25
bknudsonthat line didn't have to change.18:25
bknudsonit works the way it is, too.18:25
lbragstadbknudson: ok18:25
*** bapalm has joined #openstack-keystone18:26
lbragstaddolphm: did you happen to see bknudson's comment on this one? https://review.openstack.org/#/c/186376/18:26
rodrigodsdstanek, I agree, the first one can definitely be split - but since it had a +2 from henrynash we decided to keep it like that. The huge one is the third, and the most difficult to split because there are too many side effects18:27
lbragstadI can respin that pending what you guys think18:27
htrutarodrigods: the huge is now the 4th18:27
htrutaonce we've already split it18:27
rodrigodshtruta, true, the 4th dstanek18:27
dstanekrodrigods: that should be a warning flag :-(18:27
openstackgerritMerged openstack/keystone: Allow Domain Admin to get domain details  https://review.openstack.org/20808218:28
rodrigodsdstanek, replicating all domain operations in the project table is not trivial =(18:28
dolphmbknudson: there's a single, clear theme to that patch... i thought we agreed to squash tightly related changes when backporting to stable/*? https://review.openstack.org/#/c/186376/18:28
dstanekrodrigods: i agree, but there has got to be a way to make it more digestible. it might take a few weeks extra, but that's way better than waiting a few months for reviews18:29
*** amakarov is now known as amakarov_vacatio18:29
rodrigodsdstanek, will sit with htruta today and try to figure it out18:30
rodrigodsat least for the 4th patch18:30
bknudsondolphm: you can merge it... it takes more work for me to review it.18:30
*** divya__ has quit IRC18:30
*** amakarov_vacatio has quit IRC18:30
dstanekrodrigods: one easy thing you can do it to take any of the test changes that work without the new code and commit them first in a separate patch18:30
dolphmbknudson: in general i might agree, but on that specific review?18:31
dolphmbknudson: am i breaking tooling or something?18:31
htrutadstanek: the comments you were writing are on the first 2 patche?18:31
bknudsondolphm: it's always going to take me more time to review when multiple changes are squashed.18:31
bknudsondolphm: y, I just re-cherry-pick and see if it says there's no changes.18:31
dstanekhtruta: just published to patchset 85 or 15742718:32
*** narengan has joined #openstack-keystone18:32
bknudsondolphm: I don't have a tool, I just cherry-pick to see if it complains and then look through the changes in gerrit.18:32
htrutadstanek: cool. will look at it with rodrigods18:32
dolphmbknudson: that won't catch people slipping in additional changes!18:33
dstanekrodrigods: htruta: yeah, "+968, -331" is pretty big18:33
bknudsondolphm: I compare both changes in gerrit to see if they slipped in something.18:33
htrutadstanek: that should be the honor operations one18:33
htrutathis is the toughest18:34
dstanekdolphm: this one was for you https://review.openstack.org/#/c/210476/18:34
dstanekdolphm: that was to show that breton's change doesn't break the single callback usecase18:34
dolphmbknudson: well if you go through that trouble... you might be interested in diffing diffs: git diffdiff <review-number-A> <review-number-B> https://github.com/dolph/dotfiles/blob/master/bin/git-diffdiff18:34
dolphmdstanek: ah, looking18:35
bknudsondolphm: fancy!18:35
*** hrou has quit IRC18:36
dolphmbknudson: i always use the original master review as A, then the backport as B18:36
dolphmbknudson: lines with only a single + or - are changes in context. lines with a double ++ or -- are differences between the two reviews18:37
*** bapalm has quit IRC18:38
*** opilotte has joined #openstack-keystone18:38
bknudsondolphm: does git-diffdiff handle squashes?18:39
dolphmbknudson: nope!18:39
*** htruta_ has joined #openstack-keystone18:39
*** phalmos has quit IRC18:40
dstanekbknudson: if you don't think we need to care about removing manager methods, then i'm fine giving that a +218:41
bknudsondstanek: I don't think it's a stable interface so we can remove manager methods... although for some reason it was being handled as a stable interface.18:41
rodrigodsdstanek, just addressed your review. We had an idea on how to split the first patch18:41
*** narengan has quit IRC18:41
rodrigodsdo you think it is worthed?18:42
*** narengan has joined #openstack-keystone18:42
*** roxanaghe has joined #openstack-keystone18:43
*** bapalm has joined #openstack-keystone18:48
*** bapalm has quit IRC18:48
*** roxanaghe has quit IRC18:49
*** Guest35489 has quit IRC18:51
*** josecastroleon has quit IRC18:51
openstackgerritOlivier Pilotte proposed openstack/keystone: Keystone accepts Group IDs from the IdP without any Domain reference  https://review.openstack.org/21058118:51
dstanekrodrigods: i'm all for it. patches that take <day to review are great18:52
*** gyee has joined #openstack-keystone18:52
*** ChanServ sets mode: +v gyee18:52
*** hrou has joined #openstack-keystone18:54
*** roxanaghe has joined #openstack-keystone18:55
*** jecarey has joined #openstack-keystone18:58
*** ankita_w_ has joined #openstack-keystone19:00
dstanekit looks like stuff is really getting done today!19:01
*** jorge_munoz has joined #openstack-keystone19:01
*** tsymancz1k has joined #openstack-keystone19:02
*** roxanaghe has quit IRC19:02
*** jbonjean has quit IRC19:03
*** ankita_wagh has quit IRC19:03
*** jbonjean has joined #openstack-keystone19:04
htruta_dstanek, what we saw that could be removed won't make such a difference19:04
dstanekhtruta_: but that patch may get merged quickly :-)19:04
htruta_it's just some get_project_by_name calls that can be be moved forward19:04
dstanekhtruta_: i'm not trying to make you do more work for this one. i think it's important to consider for future patches though19:05
htruta_dstanek, we hope so :)19:05
dstanekhtruta_: if reviews can look at a patch in a few mins then it's much faster to approve. some of the HMT stuff has taken much longer than that19:06
htruta_dstanek, totally agreed19:06
*** tsymancz1k has quit IRC19:07
dstanekhtruta_: some of your patches don't get past my next-review filters. i've been playing with a new one that won't show me reviews with >1000 lines of change19:07
htruta_dstanek, that's only one of our patches :(19:08
htruta_dstanek, so, are we okay with this one you've just reviewed? considering your comments were addressed19:09
htruta_I'll move to the next ones and try to make them pass your filter19:09
*** jecarey has quit IRC19:11
*** jecarey has joined #openstack-keystone19:15
openstackgerritBrant Knudson proposed openstack/keystone: Remove deprecated methods from assignment.Manager  https://review.openstack.org/21017419:16
openstackgerritBrant Knudson proposed openstack/keystone: Stop calling deprecated assignment manager methods  https://review.openstack.org/21045519:16
*** e0ne has joined #openstack-keystone19:17
bknudsonhere's another easy one: https://review.openstack.org/#/c/189027/19:19
bknudsonhere's another easy one: https://review.openstack.org/#/c/189028/19:20
*** piyanai has quit IRC19:20
openstackgerritMerged openstack/keystone: Remove unnecessary check from notifications.py  https://review.openstack.org/20306919:22
opilottehere's another easy one: https://review.openstack.org/#/c/210581/19:22
openstackgerritOlivier Pilotte proposed openstack/keystone: Keystone accepts Group IDs from the IdP without any Domain reference  https://review.openstack.org/21058119:26
openstackgerritBrant Knudson proposed openstack/keystone: Update apache config doc for stevedore drivers  https://review.openstack.org/21059019:26
*** ayoung has quit IRC19:27
dstanekbknudson: for https://review.openstack.org/#/c/189027/ where are those options actually used? i wanted to verify the default values19:30
bknudsonit'll be in common.ldap somewhere...19:30
bknudsondstanek: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/ldap/core.py#n116319:31
*** narengan has quit IRC19:32
openstackgerritMerged openstack/keystone: Test to ensure fernet key rotation results in new key sets  https://review.openstack.org/19281719:32
openstackgerritMerged openstack/keystone: Cleanup tearDown in unit tests  https://review.openstack.org/20775319:32
openstackgerritMerged openstack/keystone: Register fatal_deprecations before use  https://review.openstack.org/20135219:32
*** narengan has joined #openstack-keystone19:33
dstanekbknudson: thx, i guess that's why a grep didn't find it19:33
openstackgerritMerged openstack/keystone: NotificationsTestCase running in isolation  https://review.openstack.org/20473919:34
openstackgerritMerged openstack/keystone: Use extras for ldap dependencies  https://review.openstack.org/20760219:34
*** narengan_ has joined #openstack-keystone19:34
dstanekopilotte: your commit message summary is a bit long19:35
*** piyanai has joined #openstack-keystone19:37
*** narengan has quit IRC19:37
*** ankita_wagh has joined #openstack-keystone19:39
*** ayoung has joined #openstack-keystone19:40
*** ChanServ sets mode: +v ayoung19:40
*** boris-42 has joined #openstack-keystone19:40
*** ankita_w_ has quit IRC19:41
openstackgerritHenrique Truta proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/15742719:46
*** ParsectiX has joined #openstack-keystone19:49
openstackgerritMerged openstack/keystone: Adds/updates notifications test cases  https://review.openstack.org/21047619:49
openstackgerritMerged openstack/keystone: Assignment driver cleaning  https://review.openstack.org/20962419:50
*** topol has quit IRC19:51
*** tsymanczyk has joined #openstack-keystone19:53
*** tsymanczyk is now known as Guest1249119:53
*** ayoung has quit IRC19:56
openstackgerritDavid Stanek proposed openstack/keystone: Adds a notification testcase for unbound methods  https://review.openstack.org/21047819:56
openstackgerritDavid Stanek proposed openstack/keystone: Fixes an incorrect docstring in notifications  https://review.openstack.org/21047719:56
openstackgerritDavid Stanek proposed openstack/keystone: Remove excessive transformation to list  https://review.openstack.org/20164819:56
*** rm_work|away is now known as rm_work19:57
*** iamjarvo has quit IRC19:57
*** piyanai has quit IRC19:57
openstackgerritDavid Stanek proposed openstack/keystone: Adds a notification testcase for unbound methods  https://review.openstack.org/21047820:00
openstackgerritDavid Stanek proposed openstack/keystone: Fixes an incorrect docstring in notifications  https://review.openstack.org/21047720:00
openstackgerritDavid Stanek proposed openstack/keystone: Remove excessive transformation to list  https://review.openstack.org/20164820:00
*** petertr7 is now known as petertr7_away20:02
*** Guest12491 has quit IRC20:04
*** piyanai has joined #openstack-keystone20:05
*** chlong has quit IRC20:06
*** petertr7_away is now known as petertr720:07
*** ayoung has joined #openstack-keystone20:08
*** ChanServ sets mode: +v ayoung20:08
*** lhcheng has quit IRC20:09
*** gordc has quit IRC20:09
dolphmstevemar: it took most of the day, but i finally got through all those tabs. down to 5!20:10
*** ayoung has quit IRC20:13
*** tsymancz1k has joined #openstack-keystone20:15
*** narengan_ has quit IRC20:16
*** narengan has joined #openstack-keystone20:17
dstanekdolphm: nice. i have 10 alone that are for vim plugins that i want to look at tonight20:18
*** narengan has quit IRC20:21
openstackgerritDan Nguyen proposed openstack/python-keystoneclient: Add include_subtree to role_list_assignments call  https://review.openstack.org/18818420:22
openstackgerritDan Nguyen proposed openstack/python-keystoneclient: Add include_subtree to role_list_assignments call  https://review.openstack.org/18818420:23
raildostevemar: ping, can you approve this bp? https://blueprints.launchpad.net/keystone/+spec/list-credentials-by-type20:27
*** lhcheng has joined #openstack-keystone20:28
*** ChanServ sets mode: +v lhcheng20:28
*** lhcheng has quit IRC20:28
*** lhcheng has joined #openstack-keystone20:28
*** ChanServ sets mode: +v lhcheng20:28
dolphmraildo: the spec is already merged20:28
raildodolphm: yes, but bknudson give us a -1 in the implementation, since the bp was not approved for liberty, and this makes sense.20:29
*** jorge_munoz has quit IRC20:30
*** narengan has joined #openstack-keystone20:30
dolphmraildo: milestone targeting is something you can do yourself. if you think you can land it in a specific milestone, you should use the milestone targeting to communicate that.20:30
dolphmraildo: bknudson: the "Direction" "Needs approval" / "Approved" has absolutely zero consequence. traditionally, we've used that field to indicate whether the blueprint title contains a pun or not20:31
raildodolphm: hum... I tought that some keystone-core have to do this.20:31
raildothought*20:32
dolphmraildo: cores / PTL end up doing it because no one updates their own blueprints statuses until they're harassed about it20:32
dolphmraildo: use those fields to realistically communicate your progress20:33
raildodolphm: ok, thanks for the tips :)20:33
*** topol has joined #openstack-keystone20:34
*** ChanServ sets mode: +v topol20:34
stevemardolphm: congrats!20:35
*** iurygregory has left #openstack-keystone20:39
dgonzalezHi all, i think i may have encountered a bug with the region filtering in endpoint list in keystone.20:42
dgonzalezWhen i run “openstack endpoint list --os-url http://192.168.33.10:5000/v3 --os-identity-api-version=3 --service identity --interface public --region RegionTwo --debug” i would expect that it only lists endpoints from RegionTwo. But i get the identity endpoint from RegionOne. I get the following in the debug output: http://paste.openstack.org/show/412228/.20:42
dgonzalezAny ideas what might cause this?20:42
dolphmdgonzalez: endpoint list is an administrative command designed to allow you to operate on keystone's configuration -- it's not showing you a service catalog tailored to your auth context20:43
dolphmdgonzalez: err, i read that as --os-region ... i think you're correct and that's just a lack of filtering implemented somewhere20:44
dolphmdgonzalez: https://bugs.launchpad.net/python-openstackclient/+filebug !20:45
dgonzalezdolphm: Yes i agree. This causes problems with devstack in a multi-region setup, because the second region will not register any services, because it thinks all endpoints do already exist for its region20:45
*** jbonjean has left #openstack-keystone20:45
dgonzalezOk will do that20:45
dolphmstevemar: ^20:45
dgonzalezdolphm: But i don't think this is a problem with python-openstackclient. As you can see in my snippet from the debug output, the region parameter is passed to keystone20:47
dgonzalezI would suspect that keystone does the filtering20:47
openstackgerritRodrigo Duarte proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/15742720:47
openstackgerritRodrigo Duarte proposed openstack/keystone: Change project name constraints  https://review.openstack.org/15837220:48
openstackgerritRodrigo Duarte proposed openstack/keystone: Add is_domain parameter to get_project_by_name  https://review.openstack.org/21060020:48
rodrigodsdstanek, almost 50 lines smaller ^20:48
dstanekrodrigods: lol, getting there!20:49
*** e0ne has quit IRC20:49
openstackgerritDolph Mathews proposed openstack/keystone: Changing UnexpectedError exception to Unauthorized exception  https://review.openstack.org/20086820:49
*** piyanai has quit IRC20:52
*** piyanai has joined #openstack-keystone20:52
openstackgerritRodrigo Duarte proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/15742720:55
openstackgerritRodrigo Duarte proposed openstack/keystone: Change project name constraints  https://review.openstack.org/15837220:55
openstackgerritRodrigo Duarte proposed openstack/keystone: Add is_domain parameter to get_project_by_name  https://review.openstack.org/21060020:55
lbragstaddolphm: dstanek re the manager api not being stable? what was discussed in IRC, I think I missed it20:56
lbragstadhttps://review.openstack.org/#/c/210174/420:56
lbragstadwhatever was discussed in IRC, i'll post in the review so the reason is persisted there.20:57
dstaneklbragstad: that the manager interface really isn't stable20:57
*** raildo has quit IRC20:57
lbragstaddstanek: was it changed without deprecations previously?20:58
*** piyanai has quit IRC20:58
dstaneklbragstad: yeah, we have done that in the past20:59
lbragstadgotcha20:59
*** htruta_ has quit IRC20:59
*** topol has quit IRC20:59
*** ankita_w_ has joined #openstack-keystone21:00
*** topol has joined #openstack-keystone21:00
*** ChanServ sets mode: +v topol21:00
*** htruta has quit IRC21:02
*** ankita_wagh has quit IRC21:03
*** topol has quit IRC21:04
*** ayoung has joined #openstack-keystone21:04
*** ChanServ sets mode: +v ayoung21:04
*** topol has joined #openstack-keystone21:05
*** ChanServ sets mode: +v topol21:05
*** phalmos has joined #openstack-keystone21:06
*** piyanai has joined #openstack-keystone21:08
*** ayoung has quit IRC21:10
*** roxanaghe has joined #openstack-keystone21:11
*** mylu has quit IRC21:13
*** ayoung has joined #openstack-keystone21:13
*** ChanServ sets mode: +v ayoung21:13
*** roxanaghe has quit IRC21:13
*** roxanaghe has joined #openstack-keystone21:14
*** phalmos has quit IRC21:16
*** topol has quit IRC21:17
*** ParsectiX has quit IRC21:17
*** topol has joined #openstack-keystone21:17
*** ChanServ sets mode: +v topol21:17
*** gyee has quit IRC21:18
*** ParsectiX has joined #openstack-keystone21:19
*** _hrou_ has joined #openstack-keystone21:19
*** petertr7 is now known as petertr7_away21:20
*** hrou has quit IRC21:20
stevemardolphm: re: https://review.openstack.org/#/c/210204/ - do you still have issues with it?21:21
stevemardid you want to keep the filter definition in paste?21:21
*** ayoung has quit IRC21:21
*** topol has quit IRC21:22
dolphmstevemar: only if it's not redundant21:24
*** _hrou_ has quit IRC21:24
dstanekwe certainly love cyclic dependencies!21:24
stevemardolphm: i think it would be, since it's loaded by default now21:25
dstanekdolphm: since that was moved from middleware to a real router, why keep the middleware in paste?21:25
openstackgerritDolph Mathews proposed openstack/keystone: Improve a few random docstrings (H405)  https://review.openstack.org/21060721:25
*** phalmos has joined #openstack-keystone21:26
stevemardolphm: any change of you being in austin between aug24 and sept4 ?21:26
dolphmstevemar: uhh, am i supposed to be in austin then?21:26
stevemardolphm: nope, i'll be there for ibm stuff21:26
dolphmstevemar: that's a long time21:27
stevemardolphm: you should come and hang out in there :)21:27
stevemaryes :\21:27
dstanekstevemar: cool, i'll be in SAT for some of that time21:27
dolphmstevemar: why yes, i'd be happy to go to salt lick21:27
dolphmdstanek: oooh21:27
stevemartopol will be missing out :P21:27
openstackgerritHenrique Truta proposed openstack/keystone: Limit subtree and parents queries  https://review.openstack.org/20913221:27
stevemardolphm dstanek and stevemar go to salt lick, it's been decided!21:27
*** markvoelker has quit IRC21:28
dstaneki'm in SAT from Aug 30 - Sep 421:28
dolphmlbragstad: ^21:28
dstanekwhat is salt lick?21:28
dolphmdstanek: https://www.saltlickbbq.com/21:28
dolphmstevemar: dstanek: lbragstad: let's sync up closer to august 30 and pick a day that we can all meet somewhere up there21:28
dolphm(if not salt lick)21:28
openstackgerritMerged openstack/keystone: Document default value for tree_dn options  https://review.openstack.org/18902721:29
openstackgerritMerged openstack/keystone: Remove unnecessary code for default suffix  https://review.openstack.org/18902821:30
dolphmhappy friday all - i'm going to go outside now21:30
*** mylu has joined #openstack-keystone21:30
dstanekdolphm: stevemar lbragstad: sounds like a plan to me21:31
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060921:31
stevemardolphm: see ya!21:32
stevemardstanek: its the place where topol ate 2 lbs of brisket21:32
*** phalmos has quit IRC21:32
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060921:32
*** htruta_ has joined #openstack-keystone21:37
dstanekstevemar: i wonder if that's why he can't run...21:37
stevemardstanek: lol21:37
stevemardstanek: eating 2 lbs of anything will make it hard to run21:41
*** tsymancz1k has quit IRC21:42
openstackgerritMerged openstack/keystone: Remove oslo import hacking check  https://review.openstack.org/20821621:42
openstackgerritMerged openstack/keystone: Fix explicit line joining with backslash  https://review.openstack.org/20976821:43
*** narengan has quit IRC21:44
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060921:44
*** narengan has joined #openstack-keystone21:45
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060921:46
*** annasort has quit IRC21:47
*** narengan has quit IRC21:49
lbragstaddstanek: dolphm stevemar works for me!21:49
openstackgerritSteve Martinelli proposed openstack/keystone: Improve a few random docstrings (H405)  https://review.openstack.org/21060721:50
openstackgerritDavid Stanek proposed openstack/keystone: Adds backend check to setup of LDAP tests  https://review.openstack.org/21008721:57
openstackgerritMerged openstack/keystone: Fix duplicate-key pylint issue  https://review.openstack.org/21030021:58
openstackgerritMerged openstack/keystone: Stop calling deprecated assignment manager methods  https://review.openstack.org/21045522:02
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060922:03
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060922:04
henrynashstevemar: hey…and chance you could look  at https://review.openstack.org/#/c/137202/ - looking like it’s ready to go22:04
*** woodster_ has joined #openstack-keystone22:08
jamielennoxbreton: i'm not here, but if you look at the plugins you want to use get_connection_parameteres and get_headers instead of get_token22:09
*** henrynash has quit IRC22:14
*** piyanai has quit IRC22:14
*** tsymanczyk has joined #openstack-keystone22:17
*** tsymanczyk is now known as Guest6543222:17
*** dims_ has joined #openstack-keystone22:18
*** edmondsw has quit IRC22:21
openstackgerritOlivier Pilotte proposed openstack/keystone: Keystone accepts Group IDs from the IdP without any Domain reference  https://review.openstack.org/21058122:22
*** dimsum__ has quit IRC22:22
*** stevemar has quit IRC22:24
bretonjamielennox: thank you!22:25
openstackgerritMerged openstack/keystone: Fernet 'expires' value loses 'ms' after validation  https://review.openstack.org/21003722:28
*** markvoelker has joined #openstack-keystone22:28
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060922:29
*** r-daneel has quit IRC22:31
*** rharwood has quit IRC22:33
*** markvoelker has quit IRC22:33
*** rharwood has joined #openstack-keystone22:36
openstackgerritDavid Stanek proposed openstack/keystone: Adds a notification testcase for unbound methods  https://review.openstack.org/21047822:42
*** bradjones has quit IRC22:49
openstackgerritMerged openstack/keystone: Remove excessive transformation to list  https://review.openstack.org/20164822:50
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/21060922:51
*** bradjones has joined #openstack-keystone22:55
*** bradjones has quit IRC22:55
*** bradjones has joined #openstack-keystone22:55
*** Guest65432 has quit IRC23:00
*** mylu has quit IRC23:01
opilottedstanek: updated code with tests: https://review.openstack.org/#/c/210581/23:04
*** zzzeek has quit IRC23:12
*** topol has joined #openstack-keystone23:22
*** ChanServ sets mode: +v topol23:22
*** tsymanczyk has joined #openstack-keystone23:40
*** tsymanczyk is now known as Guest3075323:40
*** jasonsb has quit IRC23:45
*** ankita_w_ has quit IRC23:47
*** ParsectiX has quit IRC23:58
*** markvoelker has joined #openstack-keystone23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!