| *** topol has quit IRC | 00:01 | |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Proper deprecation for httpclient.USER_AGENT https://review.openstack.org/205833 | 00:02 |
|---|---|---|
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Proper deprecation for Session.get_token() https://review.openstack.org/205817 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Deprecate create HTTPClient without session https://review.openstack.org/205832 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Update deprecation text for Session properties https://review.openstack.org/191511 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Deprecate create v2_0 Client without session https://review.openstack.org/205820 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Deprecate create v3 Client without session https://review.openstack.org/205822 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Proper deprecation for CredentialManager data argument https://review.openstack.org/205825 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Deprecate ServiceCatalog(region_name) https://review.openstack.org/205809 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Proper deprecation for UserManager project argument https://review.openstack.org/205826 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Deprecate ServiceCatalog.get_urls() with no attr https://review.openstack.org/205810 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Deprecate create Discover without session https://review.openstack.org/205829 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Deprecate use of cert and key https://review.openstack.org/205813 | 00:02 |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Proper deprecation for Session.construct() https://review.openstack.org/205812 | 00:02 |
| *** stevemar has joined #openstack-keystone | 00:02 | |
| *** ChanServ sets mode: +v stevemar | 00:02 | |
| *** jamielennox is now known as jamielennox|away | 00:05 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Remove deprecated methods from assignment.Manager https://review.openstack.org/210174 | 00:06 |
| *** jamielennox|away is now known as jamielennox | 00:07 | |
| *** geoffarnold has quit IRC | 00:08 | |
| *** arunkant_ has left #openstack-keystone | 00:09 | |
| *** jamielennox is now known as jamielennox|away | 00:10 | |
| *** spandhe has quit IRC | 00:10 | |
| *** geoffarnold has joined #openstack-keystone | 00:17 | |
| *** mylu has joined #openstack-keystone | 00:21 | |
| *** shadower has quit IRC | 00:23 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| *** jamiec has quit IRC | 00:23 | |
| *** charz has quit IRC | 00:28 | |
| *** ankita_w_ has joined #openstack-keystone | 00:28 | |
| *** jamiec has joined #openstack-keystone | 00:30 | |
| *** _cjones_ has quit IRC | 00:31 | |
| *** charz has joined #openstack-keystone | 00:32 | |
| *** ankita_wagh has quit IRC | 00:32 | |
| *** ankita_w_ has quit IRC | 00:32 | |
| openstackgerrit | Merged openstack/keystoneauth-saml2: Updated from global requirements https://review.openstack.org/210893 | 00:37 |
| *** geoffarnold has quit IRC | 00:38 | |
| openstackgerrit | Merged openstack/keystoneauth-saml2: Activate pep8 check that _ is imported https://review.openstack.org/209227 | 00:38 |
| *** mylu has quit IRC | 00:39 | |
| *** gildub has quit IRC | 00:50 | |
| *** markvoelker has joined #openstack-keystone | 00:51 | |
| *** markvoelker has quit IRC | 00:56 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/212744 | 00:56 |
| *** fangzhou has joined #openstack-keystone | 01:02 | |
| *** davechen has joined #openstack-keystone | 01:18 | |
| *** ankita_wagh has joined #openstack-keystone | 01:27 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Improve a few random docstrings https://review.openstack.org/211023 | 01:43 |
| *** markvoelker has joined #openstack-keystone | 01:43 | |
| *** browne has quit IRC | 01:48 | |
| *** markvoelker has quit IRC | 01:48 | |
| *** raildo-afk is now known as raildo | 01:52 | |
| *** narengan has joined #openstack-keystone | 02:01 | |
| *** fangzhou has quit IRC | 02:04 | |
| *** jamielennox|away is now known as jamielennox | 02:08 | |
| *** ankita_w_ has joined #openstack-keystone | 02:09 | |
| *** Ephur has quit IRC | 02:11 | |
| *** ankita_wagh has quit IRC | 02:13 | |
| *** ngupta has joined #openstack-keystone | 02:17 | |
| *** boris-42 has quit IRC | 02:20 | |
| *** topol has joined #openstack-keystone | 02:22 | |
| *** ChanServ sets mode: +v topol | 02:22 | |
| *** jasonsb has joined #openstack-keystone | 02:23 | |
| *** claudiub has quit IRC | 02:25 | |
| *** lhcheng has quit IRC | 02:27 | |
| *** gyee_500 has quit IRC | 02:29 | |
| *** samleon has quit IRC | 02:31 | |
| openstackgerrit | Merged openstack/keystone: Fix typo in doc-string https://review.openstack.org/211881 | 02:37 |
| *** topol_ has joined #openstack-keystone | 02:37 | |
| *** ChanServ sets mode: +v topol_ | 02:37 | |
| openstackgerrit | Merged openstack/keystone: Fix the misspelling https://review.openstack.org/211876 | 02:39 |
| *** topol has quit IRC | 02:41 | |
| *** zzzeek has joined #openstack-keystone | 02:41 | |
| *** mylu has joined #openstack-keystone | 02:42 | |
| *** roxanaghe has quit IRC | 02:44 | |
| *** zzzeek has quit IRC | 02:48 | |
| *** hakimo has joined #openstack-keystone | 02:53 | |
| *** hakimo_ has quit IRC | 02:55 | |
| *** markvoelker has joined #openstack-keystone | 02:55 | |
| *** stevemar has quit IRC | 02:58 | |
| *** stevemar has joined #openstack-keystone | 02:59 | |
| *** ChanServ sets mode: +v stevemar | 02:59 | |
| *** piyanai has joined #openstack-keystone | 03:02 | |
| *** browne has joined #openstack-keystone | 03:09 | |
| *** topol_ has quit IRC | 03:14 | |
| *** mylu has quit IRC | 03:31 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for the policy backend https://review.openstack.org/212957 | 03:33 |
| *** raildo is now known as raildo-afk | 03:33 | |
| *** ngupta has quit IRC | 03:36 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Model: Create policy cache table https://review.openstack.org/211679 | 03:39 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Driver: Provide function to cache policies https://review.openstack.org/212959 | 03:39 |
| morgan_404 | jamielennox: we need keystoneauth-saml2 to get sanitised for oslo deps too :( | 03:40 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Manager: Calculate validity and control caching https://review.openstack.org/212960 | 03:40 |
| morgan_404 | Just saw the merge of _ | 03:40 |
| morgan_404 | All the i18n stuff needs to be dropped too | 03:40 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Controller: Calculate freshness in seconds https://review.openstack.org/209695 | 03:40 |
| jamielennox | from saml2? i haven't looked | 03:41 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Application: Insert Cache-Control into response https://review.openstack.org/211271 | 03:41 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Controller: Calculate freshness in seconds https://review.openstack.org/209695 | 03:44 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Application: Insert Cache-Control into response https://review.openstack.org/211271 | 03:44 |
| *** piyanai has quit IRC | 03:46 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth-saml2: Remove translation https://review.openstack.org/212964 | 03:51 |
| *** richm has quit IRC | 03:51 | |
| *** lhcheng has joined #openstack-keystone | 03:55 | |
| *** ChanServ sets mode: +v lhcheng | 03:55 | |
| *** ankita_w_ has quit IRC | 03:57 | |
| *** ankita_wagh has joined #openstack-keystone | 03:58 | |
| *** jamielennox is now known as jamielennox|away | 04:02 | |
| *** ankita_wagh has quit IRC | 04:02 | |
| *** samueldmq has quit IRC | 04:08 | |
| *** ankita_wagh has joined #openstack-keystone | 04:09 | |
| *** Nirupama has joined #openstack-keystone | 04:18 | |
| *** markvoelker has quit IRC | 04:26 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Utilize min and max of oslo.config https://review.openstack.org/212373 | 04:39 |
| *** dobson has quit IRC | 04:42 | |
| *** morgan_404 is now known as morgan_204 | 04:42 | |
| *** morgan_204 is now known as morgan_206 | 04:44 | |
| *** morgan_206 is now known as morgan_503 | 04:45 | |
| *** shadower has quit IRC | 04:45 | |
| *** jamielennox|away is now known as jamielennox | 04:46 | |
| *** dobson has joined #openstack-keystone | 04:48 | |
| *** vivekd has joined #openstack-keystone | 04:49 | |
| *** ankita_wagh has quit IRC | 05:02 | |
| *** ankita_wagh has joined #openstack-keystone | 05:02 | |
| *** lhcheng has quit IRC | 05:03 | |
| *** ankita_w_ has joined #openstack-keystone | 05:04 | |
| *** ankita_wagh has quit IRC | 05:05 | |
| *** hrou has joined #openstack-keystone | 05:05 | |
| *** narengan has quit IRC | 05:05 | |
| *** boris-42 has joined #openstack-keystone | 05:06 | |
| *** ankita_w_ has quit IRC | 05:07 | |
| *** ankita_wagh has joined #openstack-keystone | 05:08 | |
| *** ankita_wagh has quit IRC | 05:12 | |
| *** topol has joined #openstack-keystone | 05:14 | |
| *** ChanServ sets mode: +v topol | 05:14 | |
| *** topol has quit IRC | 05:18 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Hardens the validated decorator's implementation https://review.openstack.org/209114 | 05:32 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Show helpful message when request body is not provided https://review.openstack.org/195903 | 05:32 |
| *** chlong has quit IRC | 05:41 | |
| *** spandhe has joined #openstack-keystone | 05:43 | |
| *** chlong has joined #openstack-keystone | 05:44 | |
| *** ankita_wagh has joined #openstack-keystone | 05:45 | |
| *** fifieldt_ has quit IRC | 06:00 | |
| *** e0ne has joined #openstack-keystone | 06:08 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/212359 | 06:08 |
| *** yottatsa has joined #openstack-keystone | 06:18 | |
| *** hrou has quit IRC | 06:24 | |
| *** e0ne has quit IRC | 06:27 | |
| *** hrou has joined #openstack-keystone | 06:28 | |
| therve | jamielennox, Regarding the devstack v3 changes, one thing I noticed which is bit surprising is that "openstack endpoint list" doesn't return anything anymore | 06:35 |
| therve | That's somewhat annoying | 06:35 |
| jamielennox | therve: yea, it's annoying that the syntax changes between v2 and v3 | 06:41 |
| therve | jamielennox, What's the syntax change? | 06:41 |
| jamielennox | and that's kind of the issue i'm worried about, if anyone is performing raw openstack X commands that expect it to hit a v2 endpoint and we change that flag it will break them | 06:41 |
| jamielennox | depends on the command, there are a number that change between v2 and v3 | 06:42 |
| jamielennox | beyond the need to add domain arguments to everything | 06:42 |
| therve | I guess in this case it would work if the command just used v3 by default | 06:42 |
| therve | Which somewhat makes sense, I think | 06:42 |
| jamielennox | in v2 an endpoint is a combination of a public/internal/admin url | 06:42 |
| jamielennox | in v3 each of those is it's own endpoint | 06:42 |
| jamielennox | so i'd need to check exactly what the difference is but there's a reason it displays them differently | 06:43 |
| therve | Looking at the code, it's missing a "legacy_endpoint_id" | 06:43 |
| jamielennox | so that's a v2/v3 transition thing | 06:44 |
| jamielennox | if you made the endpoint in v2 then all 3 would have the same id, in v3 it's 3 seperate ids | 06:44 |
| jamielennox | the legacy_endpoint_id is the id that is displayed in v2 | 06:45 |
| therve | Right, but devstack creates the endpoint for me, so I can't "make them in v2" | 06:46 |
| *** vivekd has quit IRC | 06:46 | |
| jamielennox | in devstack we've moved it to v3, but puppet and plenty of other installers still do it with v2 | 06:48 |
| jamielennox | and you can always use the openstack CLI to make more endpoints using the v2 api | 06:48 |
| *** e0ne has joined #openstack-keystone | 06:51 | |
| *** hrou has quit IRC | 06:51 | |
| therve | I guess what I'm saying is that the changes that already happened have been disruptive, so setting the default version to 3 may fix more issues than introducing new ones. | 06:53 |
| jamielennox | therve: right, this wouldn't be the first time i've broken everything with a change to devstack - and most of those were way smaller | 06:54 |
| jamielennox | in the long term we need to do it | 06:54 |
| jamielennox | not so long term | 06:54 |
| jamielennox | i just figure if i know it's going to be disruptive i want to make sure it's advertised well | 06:54 |
| therve | Right | 06:54 |
| therve | Well we've been dealing with v2/v3 crazyness in Heat for 3 years, so I'm happy v3 is pushed forward :) | 06:55 |
| jamielennox | it's ridiculous that it's still an ongoing issue | 06:55 |
| jamielennox | and the way new services are popping up it's like whack-a-mole trying to get everyone updated | 06:56 |
| *** e0ne has quit IRC | 07:04 | |
| *** Navid_ has quit IRC | 07:11 | |
| openstackgerrit | Roman Bogorodskiy proposed openstack/python-keystoneclient: Avoid message concatenation in error path https://review.openstack.org/155758 | 07:14 |
| *** jamielennox is now known as jamielennox|away | 07:17 | |
| openstackgerrit | Roman Bogorodskiy proposed openstack/python-keystoneclient: Avoid message concatenation in error path https://review.openstack.org/155758 | 07:23 |
| *** afazekas_ has joined #openstack-keystone | 07:24 | |
| *** chlong has quit IRC | 07:36 | |
| *** chlong has joined #openstack-keystone | 07:39 | |
| *** ankita_wagh has quit IRC | 07:42 | |
| *** ankita_wagh has joined #openstack-keystone | 07:43 | |
| *** spandhe has quit IRC | 07:46 | |
| *** ankita_wagh has quit IRC | 07:47 | |
| *** yottatsa has quit IRC | 07:47 | |
| *** henrynash has quit IRC | 07:49 | |
| *** fhubik has joined #openstack-keystone | 07:53 | |
| *** stevemar has quit IRC | 07:58 | |
| openstackgerrit | Merged openstack/keystone: Remove "tenants" from user_attribute_ignore default https://review.openstack.org/189029 | 08:01 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/213021 | 08:08 |
| *** jistr has joined #openstack-keystone | 08:13 | |
| *** topol has joined #openstack-keystone | 08:16 | |
| *** ChanServ sets mode: +v topol | 08:16 | |
| *** topol has quit IRC | 08:21 | |
| *** davechen has left #openstack-keystone | 08:31 | |
| *** browne has quit IRC | 08:34 | |
| *** wanghua has joined #openstack-keystone | 08:37 | |
| wanghua | hi all, is there a way to get a token that will not expire | 08:38 |
| wanghua | anyone can help? | 08:38 |
| *** claudiub has joined #openstack-keystone | 08:41 | |
| breton | why would you want that? | 08:59 |
| *** katkapilatova has joined #openstack-keystone | 09:09 | |
| *** fhubik is now known as fhubik_afk | 09:11 | |
| *** fhubik_afk is now known as fhubik | 09:12 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/213050 | 09:15 |
| *** wanghua has quit IRC | 09:40 | |
| *** yottatsa has joined #openstack-keystone | 09:42 | |
| *** yottatsa has quit IRC | 10:00 | |
| *** fhubik is now known as fhubik_afk | 10:10 | |
| *** arif-ali has quit IRC | 10:19 | |
| *** fhubik_afk is now known as fhubik | 10:29 | |
| *** piyanai has joined #openstack-keystone | 10:29 | |
| *** rdo has quit IRC | 10:36 | |
| *** rdo has joined #openstack-keystone | 10:38 | |
| *** fhubik is now known as fhubik_afk | 10:38 | |
| *** arif-ali has joined #openstack-keystone | 10:40 | |
| *** rdo has quit IRC | 10:43 | |
| *** rdo has joined #openstack-keystone | 10:50 | |
| *** gabriel-bezerra has quit IRC | 10:54 | |
| *** rdo has quit IRC | 10:57 | |
| *** yottatsa has joined #openstack-keystone | 10:58 | |
| *** rdo has joined #openstack-keystone | 10:59 | |
| *** gabriel-bezerra has joined #openstack-keystone | 10:59 | |
| breton | does keystone support pagination in `* list` operations? | 11:03 |
| *** topol has joined #openstack-keystone | 11:08 | |
| *** ChanServ sets mode: +v topol | 11:08 | |
| *** fhubik_afk is now known as fhubik | 11:12 | |
| *** topol has quit IRC | 11:13 | |
| *** fhubik is now known as fhubik_afk | 11:13 | |
| openstackgerrit | Paweł Pamuła proposed openstack/keystone: IdP deletion triggers token invalidation https://review.openstack.org/213104 | 11:35 |
| *** Kennan2 has joined #openstack-keystone | 11:36 | |
| *** Kennan has quit IRC | 11:37 | |
| *** afazekas_ has quit IRC | 11:47 | |
| *** henrynash has joined #openstack-keystone | 11:50 | |
| *** ChanServ sets mode: +v henrynash | 11:50 | |
| *** fhubik_afk is now known as fhubik | 11:51 | |
| *** shadower has joined #openstack-keystone | 11:56 | |
| *** shadower has quit IRC | 11:58 | |
| *** shadower has joined #openstack-keystone | 11:59 | |
| *** gordc has joined #openstack-keystone | 12:01 | |
| *** yottatsa has quit IRC | 12:05 | |
| *** katkapilatova has left #openstack-keystone | 12:11 | |
| *** henrynash has quit IRC | 12:13 | |
| *** raildo-afk is now known as raildo | 12:13 | |
| *** henrynash has joined #openstack-keystone | 12:14 | |
| *** ChanServ sets mode: +v henrynash | 12:14 | |
| *** markvoelker has joined #openstack-keystone | 12:21 | |
| htruta | henrynash: do you have a few minutes to talk about the is_domain patch? | 12:24 |
| henrynash | htruta: suew | 12:24 |
| henrynash | sure | 12:24 |
| htruta | as in here: https://review.openstack.org/#/c/212045/1/keystone/tests/unit/test_backend.py | 12:25 |
| htruta | henrynash: do you agree with prohibiting the creation on controller layer and keeping the logic on manager | 12:26 |
| htruta | ? | 12:26 |
| henrynash | htruta: so preventing creation in controller while we build up the base underpinnings seems a good idea | 12:26 |
| henrynash | htruta: but I really don’t want to see a test like this one….it is just so wroung | 12:27 |
| htruta | henrynash: I see. I could change to the expected behavior at the final of the reseller chain and just remove the WIP after the honor operations one | 12:28 |
| henrynash | htruta: yes, but this test will fail in the end since the data it is providing is conflicting | 12:28 |
| *** petertr7_away is now known as petertr7 | 12:29 | |
| *** edmondsw has joined #openstack-keystone | 12:29 | |
| henrynash | htruta: the “add is_domain” patch isn’t a good enough “chunk” of functionaity if it reuires us to write tests that make no sense | 12:29 |
| htruta | henrynash: I don't think so... putting the expected behaviour, with the parent_id = domain_id case as you pointed, it would be ok after the honor one | 12:30 |
| *** yottatsa has joined #openstack-keystone | 12:30 | |
| henrynash | htruta: ah..fine, if you change the test, sure….but then if it isn’t going to pass in this patch, why is it here and not after the is_domain one | 12:31 |
| htruta | henrynash: I get your point... another possibility is making the 'add is_domain' as small as ONLY adding the is_domain field, prohibiting the creation and and setting it to False | 12:31 |
| henrynash | htruta: why isn’t it as simple as simply setting the right domain_id in the test? | 12:32 |
| *** Nirupama has quit IRC | 12:32 | |
| htruta | henrynash: I could do that correct setting. and only remove the WIP decorator in the honor one | 12:32 |
| henrynash | htruta: forgive me for bing dumb, but why won’t it pass in the is_domain patch? | 12:34 |
| htruta | henrynash: because at that point, projects with is_domain=True don't act as domains yet | 12:34 |
| htruta | domain_id is still pointing to domain table | 12:34 |
| henrynash | htruta: right, got it | 12:35 |
| *** yottatsa has quit IRC | 12:35 | |
| *** tjcocozz has joined #openstack-keystone | 12:35 | |
| henrynash | htruta: (thinking) | 12:36 |
| *** yottatsa has joined #openstack-keystone | 12:36 | |
| htruta | that's why we've made a 'temporary behavior', setting the domain_id as it is | 12:36 |
| htruta | henrynash: ^ | 12:36 |
| morgan_503 | Ooh i see a henrynash :) | 12:45 |
| henrynash | morgan_503: hi | 12:45 |
| henrynash | htruta: (still thinking!) | 12:45 |
| morgan_503 | breton: not really. In some cases we did but it is problematic with ldap among other things. Filtering is recommended over pagination | 12:46 |
| henrynash | htruta: it seems to me that we should be doing something like this: | 12:46 |
| henrynash | htruta: a) first patch adds Is_domain to project but it has no special meaning…and in the same patch we stop it being set at the controller level | 12:47 |
| *** yottatsa has quit IRC | 12:47 | |
| henrynash | htruta: b) we then slowly roll in the manger/backend fucntionality for is_domain | 12:47 |
| henrynash | htruta: c) finally we unblock the controller | 12:48 |
| *** yottatsa has joined #openstack-keystone | 12:49 | |
| *** doug-fish has joined #openstack-keystone | 12:49 | |
| henrynash | htruta: what seem odd in the current set up is that the sequence we do things doesn’t jive with how things will look eventually, so it’s very hard for a reviewer to udnerstand if (why?) things are being done the wya they are | 12:49 |
| htruta | henrynash: I see | 12:51 |
| htruta | this slow roll in functionality would be keeping it as nothing until the honor operations one. | 12:52 |
| henrynash | htruta: I’m just checking we don’t call create_project from anywhere other than the standard controller | 12:52 |
| *** yottatsa_ has joined #openstack-keystone | 12:53 | |
| henrynash | htruta: no, we’re good there | 12:53 |
| *** yottatsa has quit IRC | 12:54 | |
| htruta | henrynash: nice | 12:55 |
| henrynash | htruta: well, you could for instance, add all the logic on setting and checking domain id, project_id without the honors…it would only be checking against other projects (and ignoring existing domains, but that would be ok) | 12:55 |
| htruta | henrynash: not sure if it is possible... the domain_id would point (in some cases) to an entity that's not really a domain | 12:56 |
| htruta | it would be really inconsistent | 12:57 |
| htruta | henrynash: can't we agree that reseller is not valid without the honor one and, if the cut happens before it lands, we'd rollback the ones which were merged | 12:58 |
| henrynash | htruta: maybe….but lots of other stuff is landing…..and I’d hate to roll back bits | 12:59 |
| htruta | yes.. but that would be necessary anyway... if we don't have the 'honor' one, the is_domain field would be useless | 12:59 |
| henrynash | htruta: you may be right on the checks…I’d have thought it could be done, but I could easily be wrond! | 13:00 |
| henrynash | htruta: but if is benign, then whu woudln’t we leave in there? | 13:00 |
| henrynash | htruuta: no reason why some feature developments can’t span multiple release cycles | 13:00 |
| *** fhubik is now known as fhubik_afk | 13:01 | |
| htruta | henrynash: hm. ok, then | 13:01 |
| henrynash | htrutua: let;’s see how this goes…I’m as keen to get this in as you are…but we need others to be able to understnd and review without having to get as deep in the weeds as I have done | 13:02 |
| htruta | henrynash: ok, then. so what are our next steps? | 13:03 |
| htruta | putting the tests as wip, blocking creation in controller and keeping logic on manager is ok? | 13:03 |
| henrynash | htruta: so let’s have a patch that just adds is_domain to the backend but it is not interpreded anywhere…and is block by the controller (in the was is_domain is block by for v2 calls anyway) | 13:04 |
| henrynash | htruta: let’s get that in and then build on it | 13:05 |
| *** fhubik_afk is now known as fhubik | 13:06 | |
| htruta | henrynash: ok. that would be the first patch of the chain, right? | 13:06 |
| henrynash | htruta: yep | 13:07 |
| henrynash | htruta: simple tests, just making sure you set it True/False via the manager | 13:07 |
| henrynash | htruta: and a test that shows it’s not settable via teh controller (we have some of those already for v2 I asuspect) | 13:07 |
| henrynash | htruta: v2 should fail as is, for v3 maybe we throw a not Implemented exception | 13:08 |
| htruta | henrynash: ok, sir. seems right to me | 13:08 |
| *** rodrigods has quit IRC | 13:13 | |
| henrynash | htruta: on idea…haven’t quite thought it through is you then add support for is_domain projects just as root projects, then honor domain operations on them…..and only then do you allow hierarchies of is_domain projects….it might be a simpler set of transitions | 13:14 |
| henrynash | htruta: (one idea….) | 13:14 |
| *** richm has joined #openstack-keystone | 13:16 | |
| morgan_503 | henrynash: pagination requests make me sad :( | 13:16 |
| henrynash | morgan_503: yep, just saw that….I’m not sure how we do a better job at socializing this as you say…(other than getting rid of teh v2 api!!!) | 13:17 |
| htruta | henrynash: hm... seems like a good way to go. That might got us smaller patches, but a bigger rework | 13:18 |
| morgan_503 | Fix the api-ref site #1 | 13:18 |
| *** jsavak has joined #openstack-keystone | 13:18 | |
| henrynash | morgan_503: yep | 13:18 |
| morgan_503 | But i am *not* going to try and do docbook changes | 13:18 |
| henrynash | morgan_503: yeah, we have a bit of gap here created by tool choices | 13:18 |
| morgan_503 | Asking for that is afaiac unreasonable | 13:18 |
| morgan_503 | Docbook makes me sad | 13:19 |
| morgan_503 | And kill v2 | 13:19 |
| morgan_503 | Honestly getting devstack to 100% v3 and putting everything useful in not the default domain should help ;) | 13:20 |
| morgan_503 | *evil* | 13:20 |
| henrynash | morgan_503: yep…kill v2 ! Eeek, need to find power source….5% power left on laptop….I’ll be back in a while | 13:20 |
| *** henrynash has quit IRC | 13:20 | |
| *** rodrigods has joined #openstack-keystone | 13:20 | |
| openstackgerrit | Merged openstack/keystone: Improve a few random docstrings https://review.openstack.org/211023 | 13:21 |
| *** browne has joined #openstack-keystone | 13:24 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/213021 | 13:26 |
| *** piyanai has quit IRC | 13:26 | |
| *** fifieldt has joined #openstack-keystone | 13:30 | |
| *** gordc has quit IRC | 13:32 | |
| dstanek | morgan_503: docbook is evil | 13:33 |
| morgan_503 | dstanek: ++ | 13:33 |
| *** yottatsa_ has quit IRC | 13:39 | |
| *** ngupta has joined #openstack-keystone | 13:42 | |
| dstanek | uggg.... i have so may reviews thats need tending to. may garden look awful | 13:46 |
| dstanek | and patches | 13:46 |
| *** tellesnobrega is now known as tellesnobrega_af | 13:47 | |
| *** ayoung has joined #openstack-keystone | 13:50 | |
| *** ChanServ sets mode: +v ayoung | 13:50 | |
| *** petertr7 is now known as petertr7_away | 13:58 | |
| *** petertr7_away is now known as petertr7 | 14:00 | |
| *** jecarey has joined #openstack-keystone | 14:02 | |
| raildo | n | 14:04 |
| raildo | wrong window =S | 14:05 |
| *** gordc has joined #openstack-keystone | 14:05 | |
| *** jsavak has quit IRC | 14:05 | |
| *** jsavak has joined #openstack-keystone | 14:06 | |
| *** hrou has joined #openstack-keystone | 14:13 | |
| *** topol has joined #openstack-keystone | 14:15 | |
| *** ChanServ sets mode: +v topol | 14:15 | |
| *** chlong has quit IRC | 14:19 | |
| ayoung | dstanek, new machine. Now when I run tox I get : | 14:23 |
| ayoung | $ . .tox/py27/bin/activate | 14:23 |
| ayoung | (py27)[ayoung@ayoung541 keystone]$ pip install ldap | 14:23 |
| ayoung | You are using pip version 6.0.8, however version 7.1.0 is available. | 14:23 |
| ayoung | You should consider upgrading via the 'pip install --upgrade pip' command. | 14:23 |
| ayoung | Collecting ldap | 14:23 |
| ayoung | Could not find any downloads that satisfy the requirement ldap | 14:23 |
| ayoung | No distributions at all found for ldap | 14:23 |
| ayoung | I did run that command, to upgrade pip.... | 14:23 |
| dstanek | ayoung: i don't think it's ldap | 14:23 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:23 | |
| dstanek | ayoung: try python-ldap | 14:24 |
| ayoung | dstanek, what specifies that? | 14:24 |
| ayoung | Ah...why is it in setup.cfg instead of requirements? | 14:25 |
| *** fhubik has quit IRC | 14:26 | |
| dstanek | ayoung: it's now setup as an optiona dep | 14:27 |
| *** browne has quit IRC | 14:27 | |
| dstanek | ayoung: if you look in the tox.ini is specifies that it wan't to use it | 14:27 |
| dstanek | ayoung: doing it this way allows people to specify in the pip command to install keystone with the ldap dependencies | 14:28 |
| *** vivekd has joined #openstack-keystone | 14:30 | |
| ayoung | dstanek, I was trying to run tox -r. That should work out of the box and it doesn't. | 14:30 |
| dstanek | ayoung: it didn't get the ldap deps? | 14:31 |
| dstanek | ayoung: you may need to update pbr then | 14:31 |
| ayoung | at this point, I don't care about LDAP, but if we need it for the tests to run, it should be installed by defulat. | 14:31 |
| dstanek | outside of the venv | 14:31 |
| ayoung | ok, I've upgrade pip directly, which is also something we really should not ask people to do, is it against the basics of platform management...but ignoring that | 14:32 |
| ayoung | dstanek, isn't pbr only needed inside the venv? | 14:32 |
| dstanek | ayoung: no, it handles all of the build stuff around creating the venv | 14:33 |
| dstanek | the extras support was a recent change in pbr to catch up with the standard Python tooling | 14:33 |
| ayoung | python-pbr-0.10.8-1.fc22.noarch | 14:33 |
| dstanek | i'm running 1.1.1 | 14:34 |
| ayoung | dstanek, OK, so to do this right, we probably should run a copr with upgraded pbr and pip. Let me see if someone built them already | 14:35 |
| dstanek | ayoung: what's a copr? | 14:35 |
| *** geoffarnold has joined #openstack-keystone | 14:35 | |
| ayoung | https://copr.fedoraproject.org/ | 14:35 |
| ayoung | dstanek, and apevec built a 1.3 version of pbr...let me grab that | 14:36 |
| dstanek | ayoung: oh, neat. i've only recently transitioned to fedora so i'm still finding lots of new toys | 14:37 |
| ayoung | dstanek, yeah...coprs have filled a big vacancy in development process | 14:37 |
| ayoung | dstanek, http://koji.fedoraproject.org/koji/buildinfo?buildID=669085 | 14:37 |
| ayoung | and | 14:39 |
| ayoung | http://koji.fedoraproject.org/koji/buildinfo?buildID=666288 dstanek for pip | 14:39 |
| *** geoffarnold has quit IRC | 14:39 | |
| vivekd | ayoung: dstanek: hi, i'm new to keystone development and openstack. the topic in this channel says 'feature freeze is rapidly approaching'. what is the feature freeze date? are these important dates documented somewhere for keystone? | 14:39 |
| ayoung | vivekd, we make them up at random | 14:40 |
| ayoung | vivekd, seriosly, though, we are in a 3 milestone process, and we just passed milestone 2. Liberty 3 is coming up at the end of the month-ish | 14:40 |
| ayoung | I'll see if I can find an offical sched | 14:41 |
| *** geoffarnold has joined #openstack-keystone | 14:41 | |
| vivekd | ayoung: that will help...thank u! | 14:41 |
| dstanek | liberty schedule: https://wiki.openstack.org/wiki/Liberty_Release_Schedule | 14:42 |
| ayoung | https://wiki.openstack.org/wiki/Liberty_Release_Schedule | 14:42 |
| ayoung | damn | 14:42 |
| vivekd | dstanek: thank u! | 14:43 |
| *** alejandrito has joined #openstack-keystone | 14:44 | |
| ayoung | dstanek, http://paste.openstack.org/show/414370/ | 14:44 |
| ayoung | $ pip --version | 14:44 |
| ayoung | pip 7.1.0 from /usr/lib/python2.7/site-packages (python 2.7) | 14:44 |
| ayoung | rebasing... | 14:45 |
| dstanek | ayoung: hmm and that's after installing the new pbr at the system level? | 14:45 |
| ayoung | dstanek, I think I rsynced my old repo, not afresh clone of keystone.. trying again | 14:46 |
| ayoung | nope, same thing | 14:46 |
| ayoung | dstanek, so the line py27 installdeps: -r/opt/stack/keystone/requirements.txt, -r/opt/stack/keystone/test-requirements.txt, .[ldap] | 14:47 |
| ayoung | that is done inside the venv,right? | 14:47 |
| dstanek | yes | 14:47 |
| *** ngupta has quit IRC | 14:47 | |
| ayoung | dstanek, gonna comment out the ldap part of setup.cfg and see where if goes | 14:48 |
| ayoung | same thing... | 14:48 |
| ayoung | weeeeird | 14:48 |
| *** phalmos has joined #openstack-keystone | 14:48 | |
| dstanek | ayoung: hmmm...this is what i get http://paste.openstack.org/show/414410/ | 14:48 |
| ayoung | dstanek, and in tox.ini..... | 14:49 |
| dstanek | i'm also using tox version 2.1.1 | 14:49 |
| ayoung | dstanek, no RPM built for that yet.... | 14:50 |
| dstanek | your output is strange because it looks like pbr still doesn't understand the extras syntax | 14:50 |
| lbragstad | dstanek: have you ever used yaprt? | 14:52 |
| vivekd | ayoung: dstanek: lbragstad: gate-keystone-python34 had failed on my first keystone patch. when i tried to reproduce it locally by running 'tox -e py34', test didn't run due to a dependency problem. it was fixed when i did 'sudo apt-get install python3-dev'. is there a place where i can document this so that it could be useful for other developers? | 14:53 |
| *** zzzeek has joined #openstack-keystone | 14:54 | |
| ayoung | vivekd, same kind of issues I am running in to. We don't do decent distro specific docs for developers | 14:54 |
| *** r-daneel has joined #openstack-keystone | 14:55 | |
| *** piyanai has joined #openstack-keystone | 14:55 | |
| dstanek | lbragstad: never heard of it | 14:59 |
| vivekd | ayoung: oh ok. i see that tox already does some requirement installations internally. isn't it possible to handle this as part of that? | 14:59 |
| lbragstad | dstanek: ok, just curious | 14:59 |
| ayoung | vivekd, so, devstack does this, but the upstream projects themselves don't | 15:00 |
| ayoung | dstanek, we proabaly need something like that for the functional testing | 15:00 |
| dstanek | lbragstad: interesting...that's Kevin's thing | 15:00 |
| ayoung | grab the files/packages from devstack.... | 15:00 |
| dstanek | ayoung: and do what with them? | 15:00 |
| lbragstad | dstanek: yeah, i'm tinkering with it a bit | 15:00 |
| ayoung | dstanek, install them. Like I'm doing with the tox, pip etc | 15:00 |
| dstanek | ayoung: instead of using devstack? | 15:01 |
| *** jsavak has quit IRC | 15:01 | |
| *** jsavak has joined #openstack-keystone | 15:01 | |
| ayoung | dstanek, this is just...cool: https://fedoraproject.org/wiki/Package_maintenance_guide?rd=Using_Fedora_GIT | 15:01 |
| *** yottatsa has joined #openstack-keystone | 15:02 | |
| *** petertr7 is now known as petertr7_away | 15:06 | |
| *** ngupta has joined #openstack-keystone | 15:08 | |
| *** narengan has joined #openstack-keystone | 15:09 | |
| *** jsavak has quit IRC | 15:11 | |
| *** jsavak has joined #openstack-keystone | 15:12 | |
| *** lsmola has quit IRC | 15:13 | |
| *** tjcocozz_ has joined #openstack-keystone | 15:14 | |
| *** henrynash has joined #openstack-keystone | 15:14 | |
| *** ChanServ sets mode: +v henrynash | 15:14 | |
| henrynash | bknudson: ping | 15:15 |
| *** HT_sergio has joined #openstack-keystone | 15:16 | |
| dstanek | ayoung: are you any closer to having a work env? | 15:16 |
| ayoung | dstanek, nah...looks like I need ldap to build ...so I'm working on getting tox 2.1.1 as an RPM | 15:16 |
| henrynash | ayoung: you having problems with the ldap chanegs to tox, setup etc.? | 15:16 |
| ayoung | henrynash, yep | 15:17 |
| henrynash | ayoung: me too, struggling most of the day to make it work | 15:17 |
| ayoung | henrynash, what platform you building on ? | 15:17 |
| henrynash | ayoung: ubuntu | 15:17 |
| henrynash | ayoung: there must be something (lots probaby) that I don’t understand about how this all hangs together…. | 15:18 |
| ayoung | henrynash, I just update to tox 2.1.1...let's see if that makes a differnece | 15:18 |
| ayoung | henrynash, it seems to be happier...still waiting, though | 15:20 |
| henrynash | dstanek: here’s what I don’t understadn.. I upgrade pbr and pip,,,,but when it builds a new py27 virtual env it complains my pbr/pip are out of date and not the ones I have installed….. | 15:20 |
| ayoung | henrynash, I'm seeing similar things. I think something is getting cached inthe keystone dir. I'm run git clean -xdf and rerunning... | 15:21 |
| ayoung | henrynash, tox --version ? | 15:22 |
| henrynash | ayoung: was on 1.9.1…just upgrading it now | 15:22 |
| ayoung | henrynash, that seems to be the secret. I need to build a 2.1.1 RPM | 15:22 |
| henrynash | ayoung: ah, ok..fingers crossed | 15:22 |
| *** henrynash has quit IRC | 15:25 | |
| dstanek | ayoung: so you're good now? i just use 'sudo pip install ...' instead of using system packages | 15:28 |
| *** esp has left #openstack-keystone | 15:28 | |
| dstanek | i'm actually surprised that tox would need to be updated | 15:28 |
| ayoung | dstanek, so, yeah, I did a pip install --upgrade for tox and it worked, so I'm finidhing up on getting an upgraded tox package built for fedora | 15:28 |
| ayoung | trying to be a good citizen, but also keep from polluting this laptop too badly with non-packaged executables | 15:29 |
| *** jistr is now known as jistr|mtg | 15:29 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 15:30 | |
| *** openstackgerrit has quit IRC | 15:31 | |
| *** openstackgerrit has joined #openstack-keystone | 15:32 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 15:33 | |
| *** esp has joined #openstack-keystone | 15:36 | |
| dstanek | ayoung: not in a VM? | 15:37 |
| *** vivekd has quit IRC | 15:44 | |
| *** ayoung has quit IRC | 15:48 | |
| *** piyanai has quit IRC | 15:49 | |
| *** browne has joined #openstack-keystone | 15:53 | |
| *** piyanai has joined #openstack-keystone | 15:56 | |
| *** jistr|mtg is now known as jistr | 16:03 | |
| *** woodster_ has joined #openstack-keystone | 16:04 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Hardens the validated decorator's implementation https://review.openstack.org/209114 | 16:10 |
| *** ankita_wagh has joined #openstack-keystone | 16:10 | |
| *** jasonsb has quit IRC | 16:15 | |
| *** yottatsa has quit IRC | 16:23 | |
| *** piyanai has quit IRC | 16:31 | |
| *** spandhe has joined #openstack-keystone | 16:31 | |
| *** jistr has quit IRC | 16:32 | |
| *** yottatsa has joined #openstack-keystone | 16:35 | |
| *** spandhe has quit IRC | 16:35 | |
| *** spandhe_ has joined #openstack-keystone | 16:35 | |
| *** petertr7_away is now known as petertr7 | 16:36 | |
| *** gyee has joined #openstack-keystone | 16:37 | |
| *** ChanServ sets mode: +v gyee | 16:37 | |
| *** adrian_otto has joined #openstack-keystone | 16:40 | |
| *** jecarey has quit IRC | 16:42 | |
| dolphm | is tox suddenly smart enough to know that you're testing a different branch? i swear it just rebuilt my environment correctly without me doing anything | 16:45 |
| *** ankita_wagh has quit IRC | 16:45 | |
| *** ankita_wagh has joined #openstack-keystone | 16:46 | |
| *** stevemar has joined #openstack-keystone | 16:46 | |
| *** ChanServ sets mode: +v stevemar | 16:46 | |
| *** piyanai has joined #openstack-keystone | 16:48 | |
| *** stevemar has quit IRC | 16:49 | |
| *** ankita_wagh has quit IRC | 16:50 | |
| *** narengan_ has joined #openstack-keystone | 16:51 | |
| dstanek | dolphm: with no -r flag? | 16:51 |
| dstanek | dolphm: i do think it checks installed deps against requests deps now - which is annoying because it takes much longer just to start the tests now | 16:52 |
| *** vivekd has joined #openstack-keystone | 16:54 | |
| *** narengan has quit IRC | 16:54 | |
| *** atiwari has joined #openstack-keystone | 16:56 | |
| *** afaranha has joined #openstack-keystone | 16:56 | |
| *** afaranha has left #openstack-keystone | 16:56 | |
| *** lhcheng has joined #openstack-keystone | 17:00 | |
| *** ChanServ sets mode: +v lhcheng | 17:00 | |
| *** _cjones_ has joined #openstack-keystone | 17:00 | |
| *** ayoung has joined #openstack-keystone | 17:00 | |
| *** ChanServ sets mode: +v ayoung | 17:00 | |
| dolphm | dstanek: that would explain the slowdown... | 17:01 |
| dolphm | dstanek: there's got to be a way to make that faster ... pip freeze is quite fast | 17:02 |
| dolphm | dstanek: (but yes, with no -r) | 17:02 |
| dstanek | dolphm: pip freeze is just listing - i think tox is now resolving the dep tree to make sure the venv matches | 17:02 |
| dstanek | maybe there is a switch to turn it off | 17:03 |
| dstanek | i just run tests by hand now and only use tox to create the venv | 17:03 |
| dolphm | dstanek: ah | 17:03 |
| dolphm | dstanek: yeah, i should do the same. do you use nose? | 17:03 |
| *** Kennan2 has quit IRC | 17:05 | |
| *** tjcocozz has quit IRC | 17:05 | |
| *** tjcocozz_ has quit IRC | 17:06 | |
| dolphm | dstanek: or, i guess testr | 17:06 |
| dstanek | no i just use testr :-( actually i use our tools/pretty_tox.sh script | 17:06 |
| *** samleon has joined #openstack-keystone | 17:06 | |
| *** Navid_ has joined #openstack-keystone | 17:07 | |
| *** lhcheng_ has joined #openstack-keystone | 17:07 | |
| *** lhcheng has quit IRC | 17:09 | |
| *** jasonsb has joined #openstack-keystone | 17:11 | |
| *** phalmos has quit IRC | 17:12 | |
| *** jasonsb has quit IRC | 17:12 | |
| *** jasonsb has joined #openstack-keystone | 17:13 | |
| *** ankita_wagh has joined #openstack-keystone | 17:14 | |
| dolphm | dstanek: any idea why would this fail with "IOError: [Errno 11] Resource temporarily unavailable" from multiprocessing? $ n .tox/py27/bin/nosetests --processes=2 | 17:16 |
| *** david-lyle is now known as cbrown | 17:17 | |
| *** hrou has quit IRC | 17:17 | |
| *** stevemar has joined #openstack-keystone | 17:19 | |
| *** ChanServ sets mode: +v stevemar | 17:19 | |
| *** Kennan has joined #openstack-keystone | 17:21 | |
| *** hrou has joined #openstack-keystone | 17:23 | |
| *** roxanaghe has joined #openstack-keystone | 17:28 | |
| *** piyanai has quit IRC | 17:29 | |
| *** piyanai has joined #openstack-keystone | 17:33 | |
| *** hrou has quit IRC | 17:41 | |
| *** lhcheng_ has quit IRC | 17:45 | |
| *** lhcheng has joined #openstack-keystone | 17:45 | |
| *** ChanServ sets mode: +v lhcheng | 17:45 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain field in Project Table https://review.openstack.org/213273 | 17:49 |
| *** boris-42 has quit IRC | 17:50 | |
| *** Ephur has joined #openstack-keystone | 17:51 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain field in Project Table https://review.openstack.org/213273 | 17:54 |
| htruta | dstanek: ^ look how cool. the "add is_domain field" patch that only adds the is_domain field | 17:54 |
| htruta | who could ever think about that? | 17:55 |
| *** henrynash has joined #openstack-keystone | 17:55 | |
| *** ChanServ sets mode: +v henrynash | 17:55 | |
| *** tjcocozz_ has joined #openstack-keystone | 17:56 | |
| *** tjcocozz has joined #openstack-keystone | 17:56 | |
| *** samueldmq has joined #openstack-keystone | 17:58 | |
| raildo | htruta: you're a genius | 17:58 |
| lhcheng | htruta: how is that different from the other patch? :) https://review.openstack.org/#/c/157427/ | 17:59 |
| lhcheng | is this is_domain-lite ? | 17:59 |
| htruta | raildo: I appreciate that | 18:00 |
| htruta | lhcheng: this one only adds the field. it does not touch some other stuff like domain_id and parent_id | 18:00 |
| htruta | we are spliting this one | 18:01 |
| *** yottatsa has quit IRC | 18:01 | |
| lhcheng | htruta: I see | 18:01 |
| lhcheng | htruta: cool, that will make it easier to review | 18:02 |
| htruta | henrynash: https://review.openstack.org/#/c/213273/ | 18:02 |
| henrynash | hruta: great…will look in a bit | 18:03 |
| openstackgerrit | Arun Kant proposed openstack/pycadf: Adding barbican specific base resources. https://review.openstack.org/210023 | 18:05 |
| *** browne has quit IRC | 18:05 | |
| *** yottatsa has joined #openstack-keystone | 18:07 | |
| *** jecarey has joined #openstack-keystone | 18:10 | |
| *** woodster_ has quit IRC | 18:10 | |
| *** ankita_w_ has joined #openstack-keystone | 18:17 | |
| *** stevemar has quit IRC | 18:19 | |
| *** ankita_wagh has quit IRC | 18:21 | |
| *** samueldmq has quit IRC | 18:24 | |
| *** roxanaghe_ has joined #openstack-keystone | 18:29 | |
| ayoung | henrynash, did updating tox work for you, too? | 18:30 |
| henrynash | ayoung: I think it might…then I ran out of disk space on my VM!!! just trying to fix that | 18:31 |
| henrynash | ayoung: did it work for you? | 18:31 |
| dstanek | dolphm: i've not seen that before, but i had other issues with nose and our tests so i just stopped using it | 18:31 |
| *** roxanaghe has quit IRC | 18:31 | |
| ayoung | henrynash, yes | 18:31 |
| henrynash | ayoung: great…I’m pretty sure mine will work too once I give it the breathing room | 18:31 |
| ayoung | henrynash, it fails pretty quickly without: tox < 2 does not understand the directive to install ldap | 18:32 |
| *** yottatsa has quit IRC | 18:32 | |
| henrynash | ayoung: yep | 18:33 |
| *** ayoung has quit IRC | 18:41 | |
| *** stevemar has joined #openstack-keystone | 18:42 | |
| *** ChanServ sets mode: +v stevemar | 18:42 | |
| dstanek | hmmm....i just switched to the new gerrit UI and i can't figure out how to leave a comments anymore | 18:43 |
| dstanek | i should have looked for just one more minute! it's now at the top of the page | 18:44 |
| *** browne has joined #openstack-keystone | 18:48 | |
| *** phalmos has joined #openstack-keystone | 18:55 | |
| *** browne has quit IRC | 18:57 | |
| *** ankita_wagh has joined #openstack-keystone | 18:57 | |
| *** browne has joined #openstack-keystone | 18:58 | |
| *** ankita_w_ has quit IRC | 19:01 | |
| *** jsavak has quit IRC | 19:02 | |
| *** jsavak has joined #openstack-keystone | 19:05 | |
| dstanek | lbragstad: i see you also started reviewing https://review.openstack.org/#/c/155758/5 . are you seeing what i am seeing? | 19:12 |
| lbragstad | dstanek: I just reviewed it to get eyes on it, I haven't recreated it locally at all | 19:14 |
| dstanek | lbragstad: ok, i'm not going to waste much time on it and just let the submitter prove it works :-) | 19:14 |
| lbragstad | dstanek: yeah, i didn't try doing anything locally with it, it was just the next victim in my next-review list :) | 19:15 |
| *** jsavak has quit IRC | 19:17 | |
| *** jsavak has joined #openstack-keystone | 19:17 | |
| *** HT_sergio has quit IRC | 19:17 | |
| morgan_503 | "Doesnt ldap just work like sql?!" | 19:21 |
| morgan_503 | ... No ... | 19:22 |
| * morgan_503 wants to kill keystone user management APIs so badly. | 19:22 | |
| *** stevemar has quit IRC | 19:22 | |
| *** stevemar has joined #openstack-keystone | 19:23 | |
| *** ChanServ sets mode: +v stevemar | 19:23 | |
| morgan_503 | henrynash: could i trouble you to respond to that thread as well. I dont see how we can solve their needs without supplying implementation specific differences / awfulness. I'm happy to take the fall here but I am completely against pagination in identity v3 | 19:24 |
| henrynash | morgan_503: will do | 19:24 |
| morgan_503 | I just think people assume it is easy to paginate ldap like you paginate sql | 19:24 |
| *** boris-42 has joined #openstack-keystone | 19:24 | |
| morgan_503 | Which js absolutely not the case. | 19:24 |
| morgan_503 | Needing to know every user who has access via keystone's APIs is silly (who could have a role) but asking about role assignments isnt. | 19:27 |
| *** stevemar has quit IRC | 19:28 | |
| *** ayoung has joined #openstack-keystone | 19:28 | |
| *** ChanServ sets mode: +v ayoung | 19:28 | |
| vivekd | morgan_503: hi morgan fainberg | 19:30 |
| vivekd | morgan_503: i couldn't find a blueprint corresponding to the spec @ http://specs.openstack.org/openstack/keystone-specs/specs/liberty/stable-driver-interfaces.html so i created one @ https://blueprints.launchpad.net/keystone/+spec/stable-driver-interfaces | 19:30 |
| vivekd | morgan_503: could u please review it? | 19:30 |
| morgan_503 | Nod. I aksed gyee to look at that | 19:30 |
| morgan_503 | As well. | 19:30 |
| *** tjcocozz_ has quit IRC | 19:31 | |
| *** tjcocozz has quit IRC | 19:31 | |
| gyee | morgan_503, vivekd, yeah, will review patch 4 later today | 19:31 |
| gyee | on my todo list | 19:31 |
| *** stevemar has joined #openstack-keystone | 19:32 | |
| *** ChanServ sets mode: +v stevemar | 19:32 | |
| vivekd | morgan_503: oh ok. gyee reviewed my gerrit patch. but the blueprint is still not approved hence asked u | 19:32 |
| vivekd | ok gyee | 19:33 |
| stevemar | morgan_503: we all want to kill it | 19:33 |
| gyee | bp should be there | 19:33 |
| gyee | stevemar, kill what? stable driver interface? | 19:33 |
| *** ankita_wagh has quit IRC | 19:34 | |
| stevemar | gyee: no, user managment api | 19:34 |
| dstanek | stevemar: oh, damn. i thought docker | 19:34 |
| gyee | stevemar, replace it with what? ask devstack/jenkins | 19:34 |
| *** ankita_wagh has joined #openstack-keystone | 19:34 | |
| stevemar | dstanek: docker too | 19:34 |
| stevemar | gyee: x509 tokenless auth and federated identity? | 19:35 |
| gyee | yay! | 19:35 |
| stevemar | just rip out all /users calls | 19:35 |
| * gyee in euphoria | 19:35 | |
| stevemar | one day, one day | 19:36 |
| stevemar | speaking of which, i should go back to that patch | 19:36 |
| morgan_503 | stevemar: feel free to jump into that thread too. | 19:38 |
| *** ankita_wagh has quit IRC | 19:38 | |
| stevemar | morgan_503: i spoke with gyee and cbrown on irc #openstack-horizon | 19:39 |
| stevemar | the thing is, i'm actually not opposed to pagination, they just haven't convinced me it won't break | 19:39 |
| stevemar | paging through 400K results (ibm ldap) is nuts | 19:40 |
| *** ngupta has quit IRC | 19:42 | |
| gyee | stevemar, nah, you never going to see 400k returned | 19:44 |
| gyee | network socket would timed out long before | 19:44 |
| gyee | looking at the LDAP spec, it doesn't not require to hold the connection, just the session cookie in order to paginate | 19:46 |
| *** yottatsa has joined #openstack-keystone | 19:47 | |
| *** browne has quit IRC | 19:47 | |
| gyee | I am guess we can convey it as a 'marker'? | 19:47 |
| gyee | will need to cook up some code to test it out | 19:47 |
| *** piyanai has quit IRC | 19:54 | |
| *** piyanai has joined #openstack-keystone | 19:55 | |
| *** yottatsa has quit IRC | 19:57 | |
| *** stevemar_ has joined #openstack-keystone | 19:58 | |
| *** ChanServ sets mode: +v stevemar_ | 19:58 | |
| vivekd | gyee: didn't get you. you meant you will approve the bp as well? | 19:58 |
| gyee | vivekd, the spec has been approved, that's all we need to move forward | 19:59 |
| gyee | your code implements the bp | 19:59 |
| vivekd | gyee: ok | 20:00 |
| *** stevemar has quit IRC | 20:00 | |
| *** doug-fis_ has joined #openstack-keystone | 20:02 | |
| *** jsavak has quit IRC | 20:03 | |
| gyee | spec is linked to the bp, and bp is used for release tracking | 20:04 |
| gyee | at least that's how I understood it | 20:04 |
| *** alejandrito has quit IRC | 20:04 | |
| *** jsavak has joined #openstack-keystone | 20:04 | |
| *** doug-fish has left #openstack-keystone | 20:05 | |
| *** petertr7 is now known as petertr7_away | 20:05 | |
| vivekd | gyee: ok. i read here(http://docs.openstack.org/infra/manual/developers.html#automated-testing) that the bp should be in approved state. | 20:12 |
| vivekd | gyee: point #7 at the above URL reads "If the change implements a feature, it should reference a blueprint. The blueprint should be approved before the change is merged." | 20:12 |
| stevemar_ | gyee: right, but ibm's ldap has 400K entries (probably more), you really want to paginate through ALL of them? to create an index? | 20:12 |
| *** woodster_ has joined #openstack-keystone | 20:13 | |
| *** ayoung has quit IRC | 20:15 | |
| *** doug-fis_ is now known as doug-fish | 20:16 | |
| *** esp has left #openstack-keystone | 20:19 | |
| *** esp has joined #openstack-keystone | 20:21 | |
| *** geaaru has joined #openstack-keystone | 20:21 | |
| *** jecarey has quit IRC | 20:25 | |
| *** ankita_wagh has joined #openstack-keystone | 20:26 | |
| *** bknudson has quit IRC | 20:27 | |
| *** gordc has quit IRC | 20:28 | |
| openstackgerrit | Doug Fish proposed openstack/python-keystoneclient: Add Keystone2Keystone auth plugin for K2K https://review.openstack.org/207585 | 20:31 |
| *** browne has joined #openstack-keystone | 20:34 | |
| morgan_503 | gyee: spec != ldap awful python library | 20:34 |
| dolphm | sigmavirus24: should building a wheel instead of an egg affect entry points somehow? | 20:41 |
| sigmavirus24 | entry-points no | 20:41 |
| dolphm | lbragstad: ^ | 20:41 |
| sigmavirus24 | well maybe | 20:41 |
| sigmavirus24 | eggs are weird | 20:41 |
| sigmavirus24 | and old | 20:41 |
| sigmavirus24 | and crufty | 20:41 |
| sigmavirus24 | but probably not | 20:41 |
| sigmavirus24 | at least I think tarballs used to create eggs when installed by pip | 20:42 |
| sigmavirus24 | and they never broke for flake8 between eggs and wheels | 20:42 |
| morgan_503 | I was wrong on the connection needing to be kept... But if there is ever an error you have to start the whole pagination again | 20:42 |
| morgan_503 | Ldap sucks at pagination | 20:42 |
| morgan_503 | And again, order is not guaranteed | 20:42 |
| morgan_503 | gyee: ^ | 20:42 |
| morgan_503 | And going backwards doesnt seem possible | 20:43 |
| dolphm | vivekd: that might be outdated since the introduction of specs? we approve and merge specs... i'm not aware of anyone ever using the "Approved" flag on blueprints for anything | 20:43 |
| morgan_503 | Its only forward paging | 20:43 |
| lbragstad | sigmavirus24: if I have a setup.cfg that lists dependency_links on a git repository (versioned at a specific git sha), and I build the wheel, shouldn't the git repo (project's) dependencies be installed? | 20:43 |
| morgan_503 | What a trainwreck | 20:43 |
| vivekd | oh ok dolphm | 20:44 |
| lbragstad | sigmavirus24: s/setup.cfg/setup.py/ sorry | 20:44 |
| vivekd | dolphm: thanks for the clarification | 20:45 |
| dolphm | lbragstad: can you import the project in dependency_links? (is that keystone?) | 20:45 |
| gyee | morgan_503, stevemar, I am not saying LDAP pagination not suck :) | 20:45 |
| gyee | just trying to figure out if that's even possible | 20:45 |
| sigmavirus24 | lbragstad: hm | 20:46 |
| lbragstad | dolphm: it is keystone | 20:46 |
| sigmavirus24 | dependency_links I'm not entirely certain about | 20:46 |
| morgan_503 | gyee: so forward paging only, each connection has a maximum number of xookies allowed. Cookies seem tied to the connection itself | 20:46 |
| morgan_503 | As per rfc. | 20:46 |
| morgan_503 | A deleted cookie or error means start the whole thing from page 1 | 20:46 |
| *** phalmos has quit IRC | 20:46 | |
| lbragstad | sigmavirus24: doing something like https://github.com/dstanek/typist/blob/master/setup.py#L29-L30 with a git+ line in the requirements.txt file blows up on processing | 20:46 |
| * morgan_503 is reading the rfc | 20:46 | |
| sigmavirus24 | lbragstad: http://stackoverflow.com/a/13587734/1953283 looks relevant | 20:47 |
| morgan_503 | I dont want to support this ever | 20:47 |
| sigmavirus24 | oh lbragstad that's not dependency_links | 20:47 |
| sigmavirus24 | heh | 20:47 |
| sigmavirus24 | that's interesting | 20:47 |
| dolphm | morgan_503: keystone-manage cookie_flush | 20:47 |
| morgan_503 | It isnt "ldap paging sucks" it is "this is not meant to be used for pagination in a web app, it is strictly meant to be used to get larger data sets than server max" | 20:47 |
| lbragstad | sigmavirus24: I need to build wheels better | 20:47 |
| morgan_503 | dolphm: lol. | 20:48 |
| lbragstad | sigmavirus24: I'm pretty new to the whole thing, so I'm very open to suggestions | 20:48 |
| gyee | morgan_503, yeah, if its tied to connection, then that would truly suck | 20:48 |
| morgan_503 | I think it is based on the rfc. | 20:48 |
| morgan_503 | This is not rest-api friendly at all | 20:48 |
| gyee | you looking at RFC 2696? | 20:48 |
| morgan_503 | Yeah. And the AD inplementation docs | 20:49 |
| morgan_503 | Which give a lot of detail | 20:49 |
| morgan_503 | Since microsoft wrote that rfc... | 20:49 |
| morgan_503 | The tl;dr is: pagination logic like you would do in SQL is just not doable in ldap | 20:50 |
| *** yottatsa has joined #openstack-keystone | 20:50 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Unit tests for is_domain field in project's table https://review.openstack.org/212045 | 20:50 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain field in Project Table https://review.openstack.org/213273 | 20:50 |
| dolphm | morgan_503: ++ | 20:51 |
| openstackgerrit | Timothy Symanczyk proposed openstack/keystone: Remove redundant rule:cloud_admin from list_role_assignment rule in sample v3 policy file. https://review.openstack.org/213338 | 20:51 |
| morgan_503 | And if you do write the code for it... Youll be very unhappy once the results get beyond a couple pages | 20:51 |
| dolphm | morgan_503: you mean in 6 months when someone else realizes there's still no pagination and asks this same question again..? | 20:52 |
| *** yottatsa has quit IRC | 20:52 | |
| morgan_503 | When in 6 months they raise the wuestion why keystone locks up when someone uses pagination to list users (if this were implemented) or why there are tons of connections to their ldap server... | 20:53 |
| morgan_503 | Or why going to page 50 from 51 causes socket timeouts | 20:53 |
| *** raildo is now known as raildo-afk | 20:53 | |
| morgan_503 | Or takes forever | 20:53 |
| gyee | so how does ldappool support this then? obviously it will have to implement session affinity | 20:53 |
| morgan_503 | Dont release the connection back to the pool if you are using it | 20:54 |
| morgan_503 | That is how b | 20:54 |
| morgan_503 | :P | 20:54 |
| gyee | that doesn't sound right | 20:54 |
| morgan_503 | If you are paging through a series, you are typically not dropping the connection back to the pool | 20:54 |
| gyee | anyway, argument is mood if we don't support ldap back for identity anymore | 20:55 |
| morgan_503 | Remember paging in ldap is meant for getting more results than server max. Not meant to be a sql-style offset paging | 20:55 |
| morgan_503 | Uh. I never said we would get rid of ldap backends. I just said keystone should t manage the users ;) | 20:56 |
| morgan_503 | Long term moving to purely federated users would be awesome | 20:56 |
| morgan_503 | But that is a loooooong way out | 20:56 |
| morgan_503 | Ldap assignment is dead next cycle | 20:56 |
| gyee | so we should still support listing ldap users, just that they are immutable from Keystone API | 20:57 |
| morgan_503 | I would say no | 20:57 |
| morgan_503 | List active assignments (and associated users) | 20:57 |
| morgan_503 | Or search for a user | 20:57 |
| morgan_503 | But not a pure "list" | 20:58 |
| morgan_503 | Of all potential users | 20:58 |
| gyee | wow | 20:58 |
| gyee | what if we have 500 active assignments? | 20:58 |
| gyee | return them all in one shot | 20:58 |
| morgan_503 | Assignments are managed not in ldap | 20:58 |
| morgan_503 | Assignments can be paginated in a sane way | 20:58 |
| morgan_503 | We no longer have ldap assignment after liberty | 20:59 |
| morgan_503 | And user ids are sortable in that wuery | 20:59 |
| morgan_503 | Just dont ask me for every user that keystone could allow an assignment to. It might be 300k objects even though only 20 have active assignments | 21:00 |
| morgan_503 | The other 299980 users cant access the opensrack cloud anyway | 21:00 |
| morgan_503 | Assuming a unique user per assignment | 21:00 |
| morgan_503 | So we can require pagination support in assignment. Just not identity | 21:01 |
| morgan_503 | It is a difference of what you are using to lookup the data. And what data you want | 21:01 |
| *** stevemar_ has quit IRC | 21:01 | |
| gyee | sure, if we don't *manage* identity, then I don't see a case for listing them | 21:02 |
| morgan_503 | And we dont want to manage identity | 21:02 |
| *** stevemar has joined #openstack-keystone | 21:02 | |
| *** ChanServ sets mode: +v stevemar | 21:02 | |
| morgan_503 | Its why identity api is not defcore designated | 21:02 |
| gyee | hear ya | 21:02 |
| morgan_503 | Most deployments only use sql for service accounta | 21:02 |
| morgan_503 | And with x509 that can go away too | 21:02 |
| morgan_503 | In theory | 21:03 |
| gyee | we need a default IdP in devstack/jenkins to test stuff still | 21:03 |
| morgan_503 | In most cases (both public and private) users will be managed by an external system | 21:03 |
| gyee | make sense | 21:04 |
| morgan_503 | That is fine. That is devstack's concern to setup. It could be an ldap server with an ldif loaded | 21:04 |
| morgan_503 | And each service that needs a user could easily do that. Or it's just a wrapper to ldapadd ;) | 21:04 |
| morgan_503 | devstack is the easy case | 21:04 |
| gyee | yeah, standing up with some users is pretty trivial | 21:05 |
| gyee | standing up ldap | 21:05 |
| openstackgerrit | Vivek Dhayaal proposed openstack/keystone: EndpointFilter driver doesnt inherit its interface https://review.openstack.org/213342 | 21:05 |
| morgan_503 | Even providing a simple shell script to add users if someone is playing with devstack as a "test openstack" thing | 21:05 |
| *** jasonsb has quit IRC | 21:05 | |
| morgan_503 | In fact i'd probably say freeipa would be a good choice by default | 21:06 |
| morgan_503 | It has a ui to add users and an api for it | 21:06 |
| *** jasonsb has joined #openstack-keystone | 21:06 | |
| gyee | sure | 21:06 |
| morgan_503 | And it does a better job of managing it all. | 21:06 |
| *** stevemar has quit IRC | 21:06 | |
| morgan_503 | And has password complexity support etc | 21:07 |
| morgan_503 | And *it* can list the users / paginate | 21:08 |
| gyee | morgan_503, sounds like Horizon folks owe you beer, for removing identity management :) | 21:08 |
| morgan_503 | :P | 21:08 |
| morgan_503 | That is where i want things to go tbh | 21:08 |
| * morgan_503 shrugs | 21:08 | |
| gyee | k man, I need to head for the woods with the kids | 21:09 |
| morgan_503 | jamielennox|away: do you want me to take a crack at fixing caching in ksm? | 21:09 |
| *** zzzeek has quit IRC | 21:09 | |
| gyee | y'all have a good weekend | 21:09 |
| morgan_503 | gyee: see ya on... Monday? Or tuesday. | 21:09 |
| *** gyee has quit IRC | 21:09 | |
| vivekd | gyee: happy weekend | 21:09 |
| *** ayoung has joined #openstack-keystone | 21:10 | |
| *** ChanServ sets mode: +v ayoung | 21:10 | |
| *** jsavak has quit IRC | 21:10 | |
| *** jsavak has joined #openstack-keystone | 21:11 | |
| *** vivekd has quit IRC | 21:16 | |
| *** cbrown is now known as david-lyle | 21:20 | |
| *** jerrygb has joined #openstack-keystone | 21:23 | |
| *** adrian_otto has quit IRC | 21:29 | |
| *** jerrygb has quit IRC | 21:30 | |
| *** geaaru has quit IRC | 21:32 | |
| *** jsavak has quit IRC | 21:32 | |
| *** jsavak has joined #openstack-keystone | 21:33 | |
| openstackgerrit | Doug Fish proposed openstack/keystoneauth: Update k2k plugin with related code comments https://review.openstack.org/209671 | 21:34 |
| *** doug-fish has quit IRC | 21:35 | |
| *** narengan_ has quit IRC | 21:36 | |
| *** bknudson has joined #openstack-keystone | 21:37 | |
| *** ChanServ sets mode: +v bknudson | 21:37 | |
| *** piyanai has quit IRC | 21:37 | |
| *** piyanai has joined #openstack-keystone | 21:39 | |
| *** lhinds has joined #openstack-keystone | 21:43 | |
| *** lhinds has left #openstack-keystone | 21:45 | |
| *** lhinds has joined #openstack-keystone | 21:45 | |
| *** ankita_w_ has joined #openstack-keystone | 21:46 | |
| *** lhinds has left #openstack-keystone | 21:47 | |
| *** jsavak has quit IRC | 21:49 | |
| *** ankita_wagh has quit IRC | 21:49 | |
| *** mylu has joined #openstack-keystone | 21:57 | |
| *** piyanai has quit IRC | 21:57 | |
| *** adrian_otto has joined #openstack-keystone | 21:59 | |
| *** mylu has quit IRC | 22:02 | |
| *** mylu has joined #openstack-keystone | 22:09 | |
| *** markvoelker has quit IRC | 22:15 | |
| openstackgerrit | Lin Hua Cheng proposed openstack/keystone-specs: Add region_id filter in List Endpoints API https://review.openstack.org/213356 | 22:17 |
| *** ankita_wagh has joined #openstack-keystone | 22:27 | |
| *** mylu has quit IRC | 22:28 | |
| *** stevemar has joined #openstack-keystone | 22:29 | |
| *** ChanServ sets mode: +v stevemar | 22:29 | |
| *** ankita_w_ has quit IRC | 22:30 | |
| *** stevemar has quit IRC | 22:33 | |
| *** lhcheng has quit IRC | 22:33 | |
| *** lhcheng has joined #openstack-keystone | 22:33 | |
| *** ChanServ sets mode: +v lhcheng | 22:33 | |
| openstackgerrit | Timothy Symanczyk proposed openstack/keystone: Simplify rule in sample v3 policy file https://review.openstack.org/213338 | 22:34 |
| *** ankita_w_ has joined #openstack-keystone | 22:42 | |
| *** ankita_wagh has quit IRC | 22:42 | |
| *** ankita_wagh has joined #openstack-keystone | 22:44 | |
| *** ankita_w_ has quit IRC | 22:44 | |
| *** ngupta has joined #openstack-keystone | 22:46 | |
| *** edmondsw has quit IRC | 22:51 | |
| *** stevemar has joined #openstack-keystone | 22:51 | |
| *** ChanServ sets mode: +v stevemar | 22:51 | |
| *** ngupta has quit IRC | 22:52 | |
| * morgan_503 | 22:53 | |
| * morgan_503 goes back to lurk mode | 22:53 | |
| * morgan_503 might need | 22:53 | |
| morgan_503 | Taco or burritos for dinner ;) | 22:54 |
| *** topol has quit IRC | 22:54 | |
| *** jasonsb has quit IRC | 22:56 | |
| *** pgbridge has quit IRC | 22:59 | |
| *** r-daneel has quit IRC | 23:01 | |
| *** atiwari1 has joined #openstack-keystone | 23:04 | |
| *** mylu has joined #openstack-keystone | 23:06 | |
| *** atiwari has quit IRC | 23:06 | |
| *** pgbridge has joined #openstack-keystone | 23:08 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Remove deprecated methods from assignment.Manager https://review.openstack.org/210174 | 23:08 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Stop using deprecated assignment manager methods https://review.openstack.org/213371 | 23:08 |
| *** topol has joined #openstack-keystone | 23:10 | |
| *** ChanServ sets mode: +v topol | 23:10 | |
| mordred | jamielennox|away: so - auth plugins and osc | 23:12 |
| mordred | I'm trying to figure out the right thing to do interface-wise | 23:12 |
| mordred | because people are starting to write playbooks with this code | 23:13 |
| mordred | I'm not thrilled about aligning to the OSC interface as a temporary measure to pass the gate | 23:13 |
| mordred | because that means we'll be encoding the OSC interface as what people should use in their shade core or ansible playbooks | 23:13 |
| mordred | and that's weird | 23:14 |
| *** topol has quit IRC | 23:15 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 23:20 | |
| *** lhcheng has quit IRC | 23:22 | |
| *** ankita_wagh has quit IRC | 23:22 | |
| *** jasonsb has joined #openstack-keystone | 23:22 | |
| *** ankita_wagh has joined #openstack-keystone | 23:23 | |
| *** gordc has joined #openstack-keystone | 23:24 | |
| *** gordc has quit IRC | 23:24 | |
| *** ankita_wagh has quit IRC | 23:27 | |
| *** jasonsb has quit IRC | 23:28 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Fix logging in federation/idp.py https://review.openstack.org/203047 | 23:28 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enhance tests for saml2 signing exception logging https://review.openstack.org/212845 | 23:28 |
| *** lhcheng has joined #openstack-keystone | 23:29 | |
| *** ChanServ sets mode: +v lhcheng | 23:29 | |
| mordred | jamielennox|away: what if we called the currently-unexposed Token(base.BaseAuthPlugin) plugin "admin_token" instead of "token_endpoint" ? | 23:30 |
| mordred | jamielennox|away: it seems the primary use case for its existence is for admin token | 23:30 |
| mordred | and for other token re-use v2/token and v3/token are the more appropriate plugins to use | 23:30 |
| mordred | perhaps that woudl be a way out of the current confusion? | 23:31 |
| mordred | (and also should make it clear that you're really unlikely to be wanting to use this auth plugin for other things) | 23:31 |
| mordred | morgan_503: ^^ thoughts? | 23:31 |
| *** markvoelker has joined #openstack-keystone | 23:31 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Fix logging in federation/idp.py https://review.openstack.org/203047 | 23:31 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enhance tests for saml2 signing exception logging https://review.openstack.org/212845 | 23:31 |
| morgan_503 | mordred: that seems reasonable | 23:32 |
| mordred | jamielennox|away: if we do that, then I think supporting token_endpoint in the way you did in your OCC patch is a fine choice | 23:32 |
| *** spandhe_ has quit IRC | 23:32 | |
| mordred | because then we're essentially ceeding that name to OSC | 23:32 |
| mordred | morgan_503: yay! | 23:33 |
| openstackgerrit | Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/213021 | 23:33 |
| *** samleon has quit IRC | 23:33 | |
| *** roxanaghe_ has quit IRC | 23:33 | |
| *** mylu has quit IRC | 23:34 | |
| *** mylu has joined #openstack-keystone | 23:35 | |
| *** markvoelker has quit IRC | 23:35 | |
| openstackgerrit | Monty Taylor proposed openstack/python-keystoneclient: Expose token_endpoint.Token as admin_token https://review.openstack.org/213376 | 23:38 |
| mordred | morgan_503, jamielennox|away: ^^ | 23:38 |
| *** adrian_otto has quit IRC | 23:42 | |
| mordred | also https://review.openstack.org/#/c/212428/ | 23:42 |
| *** adrian_otto has joined #openstack-keystone | 23:42 | |
| openstackgerrit | Haneef Ali proposed openstack/keystone: Return correct URL in /v3 version response https://review.openstack.org/213379 | 23:52 |
| *** stevemar has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!