Wednesday, 2015-09-09

openstackgerritJamie Lennox proposed openstack/keystoneauth: Identity plugin thread safety  https://review.openstack.org/22155100:06
*** fangzhou has joined #openstack-keystone00:06
openstackgerritJamie Lennox proposed openstack/keystone: Reject rule if assertion type unset  https://review.openstack.org/21608800:09
*** markvoelker has quit IRC00:10
*** shoutm has quit IRC00:18
*** shoutm has joined #openstack-keystone00:21
*** shadower has quit IRC00:23
*** shadower has joined #openstack-keystone00:23
*** btully has quit IRC00:25
*** dsirrine has quit IRC00:28
*** tiny-hands has joined #openstack-keystone00:30
*** markvoelker has joined #openstack-keystone00:31
*** gyee has quit IRC00:33
*** topol has joined #openstack-keystone00:35
*** ChanServ sets mode: +v topol00:35
*** shoutm_ has joined #openstack-keystone00:38
*** topol has quit IRC00:40
*** shoutm has quit IRC00:40
*** jasonsb has joined #openstack-keystone00:41
*** geoffarnold has quit IRC00:41
*** dsirrine has joined #openstack-keystone00:42
*** dims__ has quit IRC00:46
*** dims__ has joined #openstack-keystone00:47
*** jacorob has quit IRC00:47
*** mhu has quit IRC00:48
*** hockeynut_afk has quit IRC00:48
*** lbragstad has quit IRC00:48
*** erhudy has quit IRC00:48
*** eglute_s has quit IRC00:48
*** gus has quit IRC00:48
*** Nakato has quit IRC00:48
*** darrenc has quit IRC00:48
*** sudorandom has quit IRC00:48
*** Guest75828 has quit IRC00:48
*** erhudy has joined #openstack-keystone00:48
*** darrenc has joined #openstack-keystone00:49
*** ayoung_ has quit IRC00:49
*** ayoung has quit IRC00:49
*** jamielennox has quit IRC00:49
*** flwang has quit IRC00:49
*** sigmavirus24_awa has quit IRC00:49
*** dolphm has quit IRC00:49
*** shoutm_ has quit IRC00:50
*** shoutm has joined #openstack-keystone00:50
*** rm_work has quit IRC00:50
*** d34dh0r53 has quit IRC00:50
*** comstud has quit IRC00:50
*** Nakato has joined #openstack-keystone00:50
*** mgagne has quit IRC00:50
*** gus has joined #openstack-keystone00:51
*** dtroyer has quit IRC00:51
*** blewis has joined #openstack-keystone00:53
*** d34dh0r53 has joined #openstack-keystone00:53
*** comstud has joined #openstack-keystone00:53
*** eglute has joined #openstack-keystone00:53
*** rm_work has joined #openstack-keystone00:53
*** rm_work has quit IRC00:53
*** rm_work has joined #openstack-keystone00:53
*** blewis is now known as Guest1849900:53
*** hockeynut has joined #openstack-keystone00:53
*** mgagne has joined #openstack-keystone00:54
*** jamielennox has joined #openstack-keystone00:54
*** ChanServ sets mode: +v jamielennox00:54
*** sigmavirus24_awa has joined #openstack-keystone00:54
*** lbragstad has joined #openstack-keystone00:54
*** sudorandom has joined #openstack-keystone00:54
*** dtroyer has joined #openstack-keystone00:54
*** ayoung_ has joined #openstack-keystone00:54
*** dolphm has joined #openstack-keystone00:54
*** ChanServ sets mode: +o dolphm00:54
*** jacorob has joined #openstack-keystone00:54
*** ayoung has joined #openstack-keystone00:54
*** ChanServ sets mode: +v ayoung00:54
*** flwang has joined #openstack-keystone00:56
*** mhu has joined #openstack-keystone00:56
*** stevemar has quit IRC00:58
*** stevemar has joined #openstack-keystone00:59
*** ChanServ sets mode: +v stevemar00:59
*** zzzeek has quit IRC01:01
openstackgerritMerged openstack/keystone: Remove padding from Fernet tokens  https://review.openstack.org/22024201:05
*** ankita___ has quit IRC01:06
*** tsymanczyk has quit IRC01:15
*** diazjf has quit IRC01:15
*** diazjf has joined #openstack-keystone01:16
*** lhcheng has quit IRC01:21
*** madhu_ak has quit IRC01:23
*** darrenc is now known as darrenc_afk01:42
*** ankita_wagh has joined #openstack-keystone01:43
*** tiny-hands has quit IRC01:45
*** nakamura has joined #openstack-keystone01:54
*** geoffarnold has joined #openstack-keystone01:59
*** diazjf has left #openstack-keystone02:00
*** tsymanczyk has joined #openstack-keystone02:00
*** tsymanczyk is now known as Guest2651402:00
*** geoffarnold has quit IRC02:03
*** geoffarnold has joined #openstack-keystone02:05
*** sdake_ is now known as sdake02:06
*** davechen has joined #openstack-keystone02:08
*** darrenc_afk is now known as darrenc02:17
*** davechen has quit IRC02:18
*** ankita_wagh has quit IRC02:19
*** davechen has joined #openstack-keystone02:21
*** ayoung has quit IRC02:22
*** ayoung_ is now known as ayoung02:23
openstackgerritDave Chen proposed openstack/keystonemiddleware: update middlewarearchitecture.rst  https://review.openstack.org/21916202:24
*** topol has joined #openstack-keystone02:25
*** ChanServ sets mode: +v topol02:25
*** sdake_ has joined #openstack-keystone02:26
davechenTry to test the patch in the KSM again with the patch from lhcheng02:26
*** sdake has quit IRC02:29
*** topol has quit IRC02:30
*** fangzhou has quit IRC02:31
*** markvoelker has quit IRC02:31
*** sdake has joined #openstack-keystone02:32
*** sdake_ has quit IRC02:35
*** woodster_ has quit IRC02:39
*** richm has quit IRC02:42
*** Nirupama has joined #openstack-keystone02:44
*** lhcheng has joined #openstack-keystone02:50
*** ChanServ sets mode: +v lhcheng02:50
davechenlhcheng: ping?02:52
davechenlhcheng: good to see you are online again.02:53
*** shoutm has quit IRC02:55
*** albertom has quit IRC02:56
*** dims_ has joined #openstack-keystone02:56
*** dims__ has quit IRC02:58
*** albertom has joined #openstack-keystone02:58
lhchengdavechen: hello! how is it going?03:04
lhchengdavechen: hope you didn't mind that I submitted a patch for KSC, since it is marked as critical, wanted to go ahead submit the patch.03:05
*** shoutm has joined #openstack-keystone03:06
davechenlhcheng: I saw you patch, nice!03:06
davechenlhcheng: I tried one patch in KSM which depends on that patch but still failed03:06
davechenlhcheng: of course, I need thanks you for digging it out.03:06
davechenlhcheng: I am also take some time to work on that bug but quite not understand the root cause.03:06
lhchengdavechen: I saw your note about keystonemiddleware test still failing.. I don't think using Depends-On on the middleware patch will work, because the test will run against a released version of KSC not from master.03:06
davechenhttps://review.openstack.org/21916203:06
davechensee this patch pls03:06
stevemarlhcheng: i didn't forget about your DOA patch :)03:07
davechenhas a cross-dependencies on your patch.03:07
davechenbut still failed, I tried to test with my fixing in this way and also failed at last.03:07
* lhcheng thinks stevemar has psychic power to predict :P03:07
stevemarmaybe i do, maybe i don't03:08
lhchengdavechen: so yeah, the middleware tests runs against a release version of KSC03:09
lhchengdavechen: if you look at the log, you can see it will install: keystoneclient==1.7.003:09
davechenlhcheng: I think so, but it work if this is in one project, right?03:09
lhchengdavechen: this doesn't work because of the way the test is setup.  since it will install from requirements.txt, and install only released version.03:11
*** mylu_ has quit IRC03:12
lhchengdavechen: I think it could still work on cross-projects, provided that the tests pull the  code of dependent project from master.03:12
davechenlhcheng: yeah, 1.7.0 is the current tag of KSC.03:13
davechenlhcheng: I see, thanks.03:13
davechenbut it's not, right?03:13
lhchengdavechen: for this case, it's not :)03:13
davechenAnd do you have idea why "self.session.request" raise exceptions.ConnectionError instead of request.exceptions.ConnectionError03:14
davechenI am stuck in this point.03:14
lhchengsame reason why the problem only show up after KSC was released03:14
lhchengbecause middleware tests only runs against released package03:14
*** mylu has joined #openstack-keystone03:15
davechenhttps://review.openstack.org/#/c/220736/2/keystoneclient/session.py, I know this is not the correct way to fix it, but it really raise exceptions.ConnectionError here.03:16
lhchengyeah, likely because of: https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/tests/unit/auth_token/test_auth_token_middleware.py#L1522-L152303:18
davechenI will look it further, let's get your patch in first.03:18
lhchengConnectionError is the same as ConnectionRefused before in KSC, so it was raising ConnectionRefused before03:19
davechenit raises ConnectionRefused before since the exception is not catched in KSC properly.03:22
davechenI think the logic want to catch ConnectionError exception and then re-raise ConnectionRefused03:22
davechenthen everyting is okay.03:22
davechenbut ConnectionError exception didn't catched in KSC, so it raise ConnectionError and KSM broken here.03:23
davechenhttps://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/session.py#L428-L43003:24
lhchengthat is from requests.exceptions not from KSC03:25
lhcheng there is some opportunity for cleanup, however we can't do it without breaking backward compatibility03:26
*** csoukup has joined #openstack-keystone03:28
davechenyeah, that's what make me confused and depressed, since it really raise the exception defined in KSC (exceptions.ConnectionError).03:28
davechenConnectionError=ConnectionRefused is properly the workaround for this.03:29
davechenalthough it03:29
davechenalthough it is what we did for backward compatibility03:29
davechenanyway, I need take some time to dig into this.03:30
*** ayoung has quit IRC03:30
lhchengdavechen: yup, have to dig further to figure out if we can clean this up. But for now, we should revert back that line.03:30
*** geoffarnold is now known as geoffarnoldX03:31
davechensure, let'd do it ASAP, it break us for several days.03:31
*** markvoelker has joined #openstack-keystone03:31
*** dolphm has quit IRC03:33
*** ankita_wagh has joined #openstack-keystone03:33
*** geoffarnoldX is now known as geoffarnold03:33
*** sdake_ has joined #openstack-keystone03:34
*** sdake has quit IRC03:35
*** sdake has joined #openstack-keystone03:35
*** markvoelker has quit IRC03:36
jamielennoxlhcheng, davechen: you might find (hopefully) that some of this is cleaned up with kestoneauth03:37
*** dolphm has joined #openstack-keystone03:38
*** ChanServ sets mode: +o dolphm03:38
*** sdake_ has quit IRC03:39
davechenjamielennox: copy that, will look into keystoneauth as well, thanks.03:39
lhcheng\o/03:39
morganYeah need to fix and release keystoneclient03:40
morganIf we want to unbreak these things due to the way cross gating works03:40
jamielennoxmorgan: yep, i haven't seen lhcheng's patch yet03:40
davechenhttps://review.openstack.org/#/c/221543/03:41
jamielennoxapproved03:41
morganThough keystoneauth should make this easier as we can more easily cross gate on master changes. Ksc has a wider audience03:41
jamielennoxwell in ksa i removed all the weird rename hacks03:41
morganYesh03:41
jamielennoxso i'm not sure it's better but at least that shouldn't be a thing anymore03:41
lhchengyeah, I wonder if there is a smarter way to gate the client packages.  we only hit the issue after a client is released.03:42
jamielennoxjust people will need to update to catch keystoneauth errors instead of keystoneclient errors03:42
morganjamielennox: once that merges propose a new 1.7.1 to releases repo03:42
morganPlz03:42
morganOr i will tomorrow03:42
morganSo we can release/unbreak03:42
lhchengmorgan: are we still on for KSA release in L?03:43
morganlhcheng: 1.0 is out03:43
lhchengoh...03:43
morganAnd it should be in g-r03:43
lhchengyay03:43
morgan:)03:43
lhchengawesome03:44
*** ayoung has joined #openstack-keystone03:44
*** ChanServ sets mode: +v ayoung03:44
morganWe should get django_openstack_auth using it03:44
morganIf we got django_openstack_auth and keystonemiddleware on keystoneauth i'd be stoked03:45
lhchengPaulo already started working on it: https://review.openstack.org/#/c/205251/03:45
morganWoot03:45
stevemarnixe03:45
stevemarnice03:45
* stevemar wonders if osc should use ksa03:46
morganstevemar: yes.03:46
stevemarwe still need ksc anyway03:46
stevemarbut i'm assuming the auth bits will be removed there03:46
morganKsc wont have session in it03:47
morganYeah03:47
stevemaryep03:47
morganKeystoneauth will be the only place for that stuff03:47
morganjamielennox: can we move cms to keystonemiddleware?03:47
morganjamielennox: it doesnt really belong in keystoneclient. And keystone uses both.03:47
jamielennoxlhcheng: don't do anything that relies on ksa for L03:48
jamielennoxi think it should be out but not depended on03:48
jamielennoxmorgan: that'd probably be ok, we want keystone to depend on middleware in future anyway03:48
morganIf we use ksa for anything in L, i'd vote keystonemiddleware03:48
morganjamielennox: that was my thought and wr could drop keystoneclient dep03:49
morganExcept for tests03:49
morganAnd that is strictly v2-isms03:49
lhchengjamielennox: got it.03:49
morganlhcheng: sdk will start using keystoneauth soon as will shade03:50
jamielennoxmorgan: yea, it'd be good to approve all that auth_token changes to progress that03:50
* lhcheng stamps a -2 on DOA patch to prevent it from merging in L03:50
jamielennoxmorgan: i had an item on the agenda for today but i missed the meeting03:50
morganjamielennox: i missed the meeting too03:50
morganMostly03:50
jamielennoxmorgan: i think we should simply delete the keystoneauth_integration branch of ksc and create a new ksc2 one03:50
jamielennoxthe stuff that was committed to that branch was under the assumption of ksc1 depending on ksa03:51
morganSure? Or is it worth salvaging anything?03:51
jamielennoxif we're not going to do that then the drift is more pain that its worth03:51
*** dave-mccowan has quit IRC03:51
lhchengmorgan: sweet! let's get it rolling :)03:51
morganOk i'll ask dhellmann to do that and we'll drop in a v2.0 feature branch instead03:51
morganBased on current master03:52
*** davechen is now known as davechen_afk03:52
jamielennoxmorgan: cool, i was going to check with bknudson as well but missed him today03:52
jamielennoxbut most of what he has done to that branch is trying to keep it up to date with master03:52
morganYeah check tomrrow and we'll plan for it03:52
jamielennoxso i don't expect he'll mind03:52
morganAnd we can remove the exclusion of the integration / requirements test03:53
jamielennoxright, we won't need that any more because it's released03:53
*** davechen_afk has quit IRC03:57
*** davechen has joined #openstack-keystone03:58
*** alex_xu has quit IRC04:04
*** alex_xu has joined #openstack-keystone04:05
*** spandhe has quit IRC04:06
*** Guest26514 has quit IRC04:12
*** dims_ has quit IRC04:13
*** tsymanczyk has joined #openstack-keystone04:16
*** tsymanczyk is now known as Guest9476104:16
*** hrou has quit IRC04:18
stevemarjamielennox: help with keystoneauth :P04:20
jamielennoxstevemar: oh o, what's up04:20
stevemarfrom keystoneclient.v2_0 import client -> wheres the client-y bits?04:20
jamielennox?04:20
stevemari'm trying to replace this import: https://github.com/openstack/python-openstackclient/blob/master/openstackclient/identity/client.py#L1804:21
stevemarwith something in keystoneauth04:21
*** ankita_wagh has quit IRC04:21
stevemari'm doing it very mechanically right now :P04:21
jamielennoxok04:22
jamielennoxshould be fine04:22
jamielennoxstevemar: the client bits all still live in ksc, keystoneauth is just like the session and auth plugins04:22
stevemarksc will still have the client setup bits going forward?04:22
stevemargotcha04:22
stevemarthats the answer i was looking for04:22
stevemar!04:22
*** lhcheng_ has joined #openstack-keystone04:24
stevemarjamielennox: another q04:26
stevemarthe token_endpoint class that was in ksc, is that now known as 'token'?04:26
jamielennoxthe setuptools got renamed to admin_token, but please remove OSC adding anything to setuptools04:26
*** lhcheng has quit IRC04:27
jamielennoxif OSC knows what class to load then use the class not an entrypoint04:27
openstackgerritMerged openstack/python-keystoneclient: Adding back exception mapping for ConnectionError  https://review.openstack.org/22154304:34
stevemarjamielennox: i'll toss something up soon04:36
stevemarand add you as a reviewer04:36
stevemarlhcheng_: review for websso stuff is coming up after a short commercial break!04:36
jamielennoxstevemar: always a good idea to ping me, too many in the queue otherwise04:36
stevemarfair enough04:36
lhcheng_stevemar: no rush to do it tonight :)04:37
jamielennoxlhcheng_: i do prefer the tuple format, i think the dictionaries aren't intuitive in what is essentially a config file04:39
jamielennoxthe other comment was about your example config and i don't think it matters so long as you say the actual name doesn't matter it's just the keys have to match04:39
lhcheng_jamielennox: I am fine either way on the formatting, I think steve like the dict format04:40
lhcheng_jamielennox: I need a tie-breaker :)04:40
jamielennoxstevemar: ^?04:40
stevemaryessum04:40
stevemari said i like dict :(04:40
*** geoffarnold is now known as geoffarnoldX04:41
*** mylu has quit IRC04:43
openstackgerritMerged openstack/keystone: Fixed typos in 'developing_drivers' doc  https://review.openstack.org/22014404:47
*** btully has joined #openstack-keystone04:47
*** shoutm has quit IRC05:01
lhcheng_jamielennox: I am getting some random test failure on keystonemiddleware05:01
jamielennoxlhcheng_: and not the one from earlier...05:01
lhcheng_I just keep on running tox on my local, got P/P/F/F/P/P/F/F05:01
lhcheng_http://paste.openstack.org/show/451341/05:01
lhcheng_davechen tried it on his machine, it seems passing consistently for him05:02
davechenupdate your oslo log lib.05:02
davechenI remember I meet some problem sometime ago05:03
davechenand update the oslo config fix them.05:03
davechens/oslo.log/oslo.config05:03
jamielennoxand depending on how you're running things do a pip install again so the setuptools entrypoints get refreshed05:04
*** shoutm has joined #openstack-keystone05:05
lhcheng_pip install on my .tox ? or on my dev machine?05:06
jamielennoxif it's tox do a -r for rebuid05:06
jamielennoxthough it seems unlikely that would be it i think05:07
*** Chandan_p has joined #openstack-keystone05:12
*** urulama_ has joined #openstack-keystone05:13
*** urulama_ is now known as urulama05:13
*** geoffarnoldX is now known as geoffarnold05:15
lhcheng_no luck, still failing on me now consistently on oslo.config05:17
*** geoffarnold is now known as geoffarnoldX05:18
davechenlhcheng_: anyting changes in your local repo?05:20
lhcheng_no code changes, just running directly middleware and KSC from master05:21
*** clayton has quit IRC05:21
davechenlhcheng_:  maybe this issue is caused by the user-name is configured twice, one is in KSC and the other is from KSM?05:22
*** shoutm has quit IRC05:22
davechenKSM don't have such a configuration options, so it really weird.05:23
lhcheng_davechen: I can't seem to find where user-name is set05:23
davechenlhcheng_ In KSC.05:23
*** clayton has joined #openstack-keystone05:26
davechenhttps://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/auth/identity/v2.py#L189-L19505:26
*** vivekd has joined #openstack-keystone05:26
*** raildo-afk has quit IRC05:30
*** Chandan_p has quit IRC05:32
*** markvoelker has joined #openstack-keystone05:32
*** spandhe has joined #openstack-keystone05:32
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: [WIP] keystoneclient v2  https://review.openstack.org/22159605:33
*** raildo-afk has joined #openstack-keystone05:34
stevemarjamielennox: so much deleted code05:34
jamielennoxstevemar: it mostly all went to ksa rather than just disappeared, but it's still nice05:35
stevemarjamielennox: yep05:35
*** markvoelker has quit IRC05:37
*** ekarlso- has joined #openstack-keystone05:37
stevemarjamielennox: is the s3_token middleware stuff in ksm?05:37
jamielennoxstevemar: should be05:37
jamielennoxi think - i've never used it myself05:37
stevemaroh right it is - i just remembered that its organized a bit differently05:37
stevemarkeystoneclient/openstack/common/apiclient -- good riddance05:38
jamielennoxstevemar: :)05:39
davechenstevemar, jamielennox, lhcheng_: pretty easy review, https://review.openstack.org/#/c/217565/, does this make sense?05:39
stevemardavechen: looks good to me05:40
stevemarunless someone says otherwise, i'm +A05:40
davechenstevemar: owesome.05:40
jamielennoxdavechen: small nits05:40
jamielennoxthough would prefer to fix the05:40
stevemarjamielennox: weird that memcache_crypt became private, but that's fine05:40
stevemardavechen: address jamie's nits and we'll 2x +2 :P05:41
davechenwill do.05:41
lhcheng_davechen: not sure if this makes a difference, can you try "export TEST_RUN_CONCURRENCY=1" then run the test on your local KSM05:43
davechensure.05:43
*** mylu has joined #openstack-keystone05:44
openstackgerritDave Chen proposed openstack/keystone: Update apache-httpd.rst  https://review.openstack.org/21756505:44
*** clayton has quit IRC05:45
*** clayton has joined #openstack-keystone05:45
lhcheng_after I set the concurrency to a higher value, the chances of the test failing seem to went down..05:45
davechenlhcheng_: still pass in my side.05:45
davechenI will try more05:45
davechenstevemar, jamielennox: done :)05:46
*** ankita_wagh has joined #openstack-keystone05:47
davechenlhcheng_ persistent success.05:48
stevemardavechen: one tiny tiny nit :)05:48
jamielennoxstevemar: ouch05:48
jamielennoxi was going to ignore that05:48
stevemarwell, i blame jamielennox05:48
stevemarit's Red Hat in some places and red hat in others. The proper spelling is Red Hat05:48
stevemarsince it's a company it gets special capitalization05:49
openstackgerritDave Chen proposed openstack/keystone: Update apache-httpd.rst  https://review.openstack.org/21756505:49
davechenstevemar: done this time05:49
*** mylu has quit IRC05:49
*** ekarlso- has quit IRC05:50
*** geoffarnoldX is now known as geoffarnold05:51
davechenbetter for consistence.05:53
lhcheng_davechen: thanks for trying it out05:53
lhcheng_davechen: I wonder if there's a problem with the Config fixture.. still digging into it05:54
davechenlhcheng_ have a good dream, then you will find everyting is fine after you wake up. :)05:54
lhcheng_davechen: that might be a good idea...05:54
lhcheng_davechen: will try again tomorrow05:54
lhcheng_davechen: thanks again for the help05:54
davechenlhcheng_ np, my pleasure.05:55
*** clayton has quit IRC05:55
*** dsirrine has quit IRC05:57
*** rm_work has quit IRC05:59
*** rm_work has joined #openstack-keystone05:59
*** rm_work has quit IRC06:00
*** rm_work has joined #openstack-keystone06:00
*** geoffarnold is now known as geoffarnoldX06:00
*** clayton has joined #openstack-keystone06:01
davechenstevemar, jamielennox: thanks both!06:02
stevemarjamielennox: you have a whopping 2 pep8 errors06:02
*** rm_work has quit IRC06:02
jamielennoxthat's pretty good actually06:02
*** rm_work has joined #openstack-keystone06:03
jamielennoxstill gotta see everything that failed subtly06:03
jamielennoxstevemar: left some initial comments on https://review.openstack.org/#/c/221593/06:03
stevemarty!06:03
stevemarhttp://paste.openstack.org/show/451454/06:03
stevemarjamielennox: ^06:03
jamielennoxagain i don't think i'd depend  on ksa until M but it's good to test06:03
*** rm_work has quit IRC06:04
*** rm_work has joined #openstack-keystone06:04
jamielennoxlooks like DOA first candidate :http://logs.openstack.org/96/221596/1/check/gate-tempest-dsvm-neutron-src-python-keystoneclient/ee909ad/logs/devstacklog.txt.gz#_2015-09-09_05_53_11_53306:05
*** rm_work has quit IRC06:06
*** rm_work has joined #openstack-keystone06:06
stevemarjamielennox: yeah, i know - but wanted to get something WIPish06:07
openstackgerritSteve Martinelli proposed openstack/python-keystoneclient: trim requirements for ksc  https://review.openstack.org/22160106:10
stevemarjamielennox: piggy backing off of you... ^06:10
jamielennoxstevemar: i'm wondering if it's worth attempting an oslo.client based off of keystoneauth06:11
jamielennoxit'd look very similar to the end result of keystoneclient 206:12
jamielennoxi just don't know if anyone would use it at this point06:12
*** shoutm has joined #openstack-keystone06:13
openstackgerritSteve Martinelli proposed openstack/python-keystoneclient: trim requirements for ksc  https://review.openstack.org/22160106:14
* stevemar shrugs06:15
stevemarsounds like you got something in mind06:15
*** Guest94761 has quit IRC06:21
*** tsymanczyk has joined #openstack-keystone06:23
*** tsymanczyk is now known as Guest9240406:24
*** EinstCrazy has joined #openstack-keystone06:26
openstackgerritSteve Martinelli proposed openstack/python-keystoneclient: trim requirements for ksc  https://review.openstack.org/22160106:32
*** henrynash has joined #openstack-keystone06:57
*** ChanServ sets mode: +v henrynash06:57
*** martinus__ has joined #openstack-keystone07:01
*** spandhe has quit IRC07:03
*** lsmola has joined #openstack-keystone07:04
*** vivekd has quit IRC07:14
*** btully has quit IRC07:21
*** ankita_wagh has quit IRC07:21
*** lhcheng_ has quit IRC07:23
*** sdake_ has joined #openstack-keystone07:23
*** ParsectiX has joined #openstack-keystone07:27
*** sdake has quit IRC07:27
*** shoutm has quit IRC07:28
*** shoutm has joined #openstack-keystone07:29
*** shoutm_ has joined #openstack-keystone07:31
*** shoutm has quit IRC07:33
*** markvoelker has joined #openstack-keystone07:33
*** pnavarro has joined #openstack-keystone07:35
*** browne has quit IRC07:36
*** sdake has joined #openstack-keystone07:36
*** markvoelker has quit IRC07:38
*** sdake_ has quit IRC07:39
*** stevemar has quit IRC07:48
*** fhubik has joined #openstack-keystone08:02
openstackgerritMerged openstack/keystone: Update apache-httpd.rst  https://review.openstack.org/21756508:15
*** shoutm has joined #openstack-keystone08:21
*** shoutm_ has quit IRC08:24
*** jistr has joined #openstack-keystone08:32
*** itlinux has joined #openstack-keystone08:44
itlinuxhi all08:44
itlinuxI notice that the RDO kilo, has changed the way the project is behaving, now when I login as admin it goes default to the new project and I cannot switch to the admin project from the UI, what needs to be changed? I tried to remove the admin privileges on the project but it says I am logged in so I cannot change it from the UI. Thanks08:46
*** mylu has joined #openstack-keystone08:47
*** mylu has quit IRC08:52
*** e0ne has joined #openstack-keystone08:54
*** markvoelker has joined #openstack-keystone09:04
*** e0ne has quit IRC09:04
*** e0ne has joined #openstack-keystone09:07
*** markvoelker has quit IRC09:08
*** Kennan_Vacation2 has quit IRC09:17
*** fhubik is now known as fhubik_brb09:21
*** Kennan_Vacation has joined #openstack-keystone09:25
*** tsymanczyk has joined #openstack-keystone09:38
*** tsymanczyk is now known as Guest3335109:39
*** Chandan_p has joined #openstack-keystone09:39
Chandan_phi... i am new in openstack.... i am trying to install openstack kilo09:40
Chandan_pi am getting error below mentioned error09:41
Chandan_proot@openstack:~# openstack service create --name keystone --description "OpenStack Identity" identity09:41
Chandan_pERROR: openstack Unable to establish connection to http://localhost:35357/v2.0/OS-KSADM/services09:41
Chandan_pcan anyone plz help me out09:41
*** Guest92404 has quit IRC09:41
*** f13o has joined #openstack-keystone09:50
*** fhubik_brb is now known as fhubik09:51
*** davechen has left #openstack-keystone09:54
*** Guest33351 has quit IRC09:59
*** dims__ has joined #openstack-keystone10:02
*** f13o has quit IRC10:02
*** tsymancz1k has joined #openstack-keystone10:06
*** itlinux has quit IRC10:24
*** btully has joined #openstack-keystone10:28
*** fhubik is now known as fhubik_brb10:30
dims__jamielennox: ping10:31
dims__jamielennox: can you please look at this Nova review? https://review.openstack.org/#/c/220767/10:31
*** mylu has joined #openstack-keystone10:32
*** Chandan_p has quit IRC10:34
*** mylu has quit IRC10:36
*** btully has quit IRC10:39
*** btully has joined #openstack-keystone10:42
jamielennoxdims__: it feels like there should be an easier way...10:44
jamielennoxdims__: also thinking about this problem i proposed https://review.openstack.org/#/c/221551/1/keystoneauth1/identity/base.py but it won't be useful until at least next cycle10:45
*** EinstCrazy has quit IRC10:45
*** btully has quit IRC10:47
*** itlinux has joined #openstack-keystone10:47
*** bradjones has quit IRC10:55
*** topol has joined #openstack-keystone11:00
*** ChanServ sets mode: +v topol11:00
*** martinus__ has quit IRC11:01
*** topol has quit IRC11:03
*** markvoelker has joined #openstack-keystone11:04
dims__jamielennox: we need something to go back to kilo, not just liberty11:06
*** aix has quit IRC11:06
dims__jamielennox: ack will look11:07
*** fhubik_brb is now known as fhubik11:08
*** EinstCrazy has joined #openstack-keystone11:09
*** markvoelker has quit IRC11:09
*** e0ne has quit IRC11:16
jamielennoxdims__: i have an idea..11:16
*** pnavarro is now known as pnavarro|lunch11:21
*** amakarov_away is now known as amakarov11:21
*** gordc has joined #openstack-keystone11:33
*** dave-mccowan has joined #openstack-keystone11:44
dims__jamielennox: listening :)11:47
*** EinstCrazy has quit IRC11:51
*** ParsectiX has quit IRC11:53
*** pnavarro|lunch is now known as pnavarro11:58
*** nicodemos has joined #openstack-keystone11:59
jamielennoxdims__: https://review.openstack.org/#/c/221717/11:59
*** Nirupama has quit IRC12:00
*** e0ne has joined #openstack-keystone12:00
*** henrynash has quit IRC12:01
*** markvoelker has joined #openstack-keystone12:02
*** Protux has quit IRC12:03
*** doug-fish has joined #openstack-keystone12:04
*** woodster_ has joined #openstack-keystone12:06
*** henrynash has joined #openstack-keystone12:08
*** ChanServ sets mode: +v henrynash12:08
*** pc_m has joined #openstack-keystone12:11
*** henrynash has quit IRC12:12
pc_mhi! I have a pair of bare metal machines that I haven't used in about 2 months.  I updated devstack repo and stacked with reclone. It's failing with an error saying that init_poolmanager() in keystoneclient hit a TypeError with socket_options, during g-api startup.12:14
pc_mHas anyone seen this (and resolved the issue)?12:14
*** ParsectiX has joined #openstack-keystone12:14
jamielennoxpc_m yes we've seen that12:15
*** e0ne has quit IRC12:15
pc_mI checked the client and on one machine it is using 1.7.0 and on the other commit 28138b512:15
*** dsirrine has joined #openstack-keystone12:15
jamielennoxpc_m: is this on windows or OSX?12:16
pc_mjamielennox: It looks like there is a commit f630894 that fixes it, but I still see the problem.12:16
pc_mjamielennox: Neither. Running on a system with Ubuntu 14.0412:16
pc_mblade server12:16
jamielennoxreally12:17
jamielennoxpc_m: https://review.openstack.org/#/c/211686/12:17
jamielennoxwhich attribute is missing?12:17
pc_mjamielennox: socket_options12:18
pc_mTypeError with unexpected keyword argument12:19
pc_mGlance API calls into keystoneclient session.py init_poolmanager() which complains about the kwarg.12:21
pc_mOn one machine, I have commit 28138b5, which is after the commit with the fix (33b24a6), so it should have that fix.12:22
*** raildo-afk is now known as raildo12:23
pc_mjamielennox: HEre's the T/B http://paste.openstack.org/show/45217712:24
*** marzif has quit IRC12:25
*** tiny-hands has joined #openstack-keystone12:25
*** marzif has joined #openstack-keystone12:25
jamielennoxpc_m: interesting, that looks like an old version of requests12:27
pc_mjamielennox: possible. These  machines haven't been used for a while so may be old cruft on them.12:28
jamielennoxdo you know what version?12:28
pc_mpip show requests gives 2.7.012:29
*** e0ne has joined #openstack-keystone12:30
pc_mjamielennox: There is a copy of requests in /usr/lib. Wonder if it is hitting that, instead of the one in /usr/local/lib/?12:30
*** btully has joined #openstack-keystone12:30
pc_mjamielennox: removing on one system and trying stacking.12:32
*** edmondsw has joined #openstack-keystone12:33
*** btully has quit IRC12:35
*** topol has joined #openstack-keystone12:38
*** ChanServ sets mode: +v topol12:38
*** ParsectiX has quit IRC12:39
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Identity plugin thread safety  https://review.openstack.org/22173812:39
*** ParsectiX has joined #openstack-keystone12:39
*** csoukup has quit IRC12:44
*** ParsectiX has quit IRC12:50
*** aix has joined #openstack-keystone12:51
openstackgerritJamie Lennox proposed openstack/keystoneauth: Identity plugin thread safety  https://review.openstack.org/22155112:52
*** Mzoorikh has joined #openstack-keystone12:52
*** dims__ is now known as dims12:52
*** Mzoorikh has quit IRC12:53
*** topol has quit IRC12:54
*** bknudson has joined #openstack-keystone12:59
*** ChanServ sets mode: +v bknudson12:59
*** jsavak has joined #openstack-keystone12:59
*** geoffarnoldX is now known as geoffarnold13:02
*** geoffarnold is now known as geoffarnoldX13:04
*** ParsectiX has joined #openstack-keystone13:05
*** hrou has joined #openstack-keystone13:08
pc_mjamielennox: After removing the requests dir from /usr/lib/ and relying on the one in /usrlocal/lib, it stacked fine on both systems. Thanks for the lead!13:10
*** jecarey has joined #openstack-keystone13:13
*** richm has joined #openstack-keystone13:16
*** raildo is now known as raildo-afk13:19
*** zzzeek has joined #openstack-keystone13:21
*** urulama has quit IRC13:24
*** urulama has joined #openstack-keystone13:24
*** raildo-afk is now known as raildo13:26
*** pc_m has left #openstack-keystone13:26
*** dsirrine has quit IRC13:36
*** dsirrine has joined #openstack-keystone13:37
*** tsymancz1k has quit IRC13:47
*** topol has joined #openstack-keystone13:47
*** ChanServ sets mode: +v topol13:47
*** tsymanczyk has joined #openstack-keystone13:49
*** tsymanczyk is now known as Guest2271913:50
*** r-daneel has joined #openstack-keystone13:51
*** bknudson has quit IRC13:57
*** shoutm has quit IRC13:58
*** btully has joined #openstack-keystone14:00
*** ParsectiX has quit IRC14:05
*** browne has joined #openstack-keystone14:05
*** devanand1 is now known as devananda14:10
*** slberger has joined #openstack-keystone14:17
*** fhubik is now known as fhubik_brb14:17
*** fhubik_brb is now known as fhubik14:19
openstackgerritLance Bragstad proposed openstack/keystone: Unsure validation of percent encoded fernet tokens  https://review.openstack.org/22178614:20
*** csoukup has joined #openstack-keystone14:22
*** sigmavirus24_awa is now known as sigmavirus2414:23
*** topol has quit IRC14:30
lbragstaddolphm: ^ legacy padding fix and back port14:30
lbragstaddolphm: er... here is the backport - https://review.openstack.org/#/c/221799/14:36
*** phalmos has joined #openstack-keystone14:38
*** bknudson has joined #openstack-keystone14:39
*** ChanServ sets mode: +v bknudson14:39
*** geoffarnoldX is now known as geoffarnold14:45
*** roxanaghe has joined #openstack-keystone14:45
openstackgerritLance Bragstad proposed openstack/keystone: Unsure validation of percent encoded fernet tokens  https://review.openstack.org/22178614:46
*** ebalduf has joined #openstack-keystone14:47
*** bradjones has joined #openstack-keystone14:52
*** bradjones has quit IRC14:52
*** bradjones has joined #openstack-keystone14:52
*** stevemar has joined #openstack-keystone14:53
*** ChanServ sets mode: +v stevemar14:53
openstackgerritHenrique Truta proposed openstack/keystone: Some fixes in the is_domain field creation  https://review.openstack.org/21516714:53
*** ebalduf has quit IRC14:54
*** thedodd has joined #openstack-keystone14:56
*** ebalduf has joined #openstack-keystone14:56
*** stevemar has quit IRC14:56
*** henrynash has joined #openstack-keystone15:00
*** ChanServ sets mode: +v henrynash15:00
dolphmlbragstad: i know it means that we're landing Closes-Bug vs Partial-Bug out of order, but would you upgrade https://review.openstack.org/#/c/221786/ to be Partial-Bug since it's improving on an edge case of the bug? (not just showing tests or something for it)15:00
openstackgerritLance Bragstad proposed openstack/keystone: Unsure validation of percent encoded fernet tokens  https://review.openstack.org/22178615:02
lbragstaddolphm: done15:02
*** dave-mccowan has quit IRC15:02
*** jistr is now known as jistr|call15:02
dolphmlbragstad: i reverted the bug status to In Progress too, so we'll have to manually mark it as Fix Committed now15:03
lbragstaddolphm: sounds good15:03
*** ebalduf has quit IRC15:04
*** topol has joined #openstack-keystone15:06
*** ChanServ sets mode: +v topol15:06
*** marzif has quit IRC15:10
*** jsavak has quit IRC15:11
openstackgerritMatthew Edmonds proposed openstack/keystonemiddleware: only make token invalid when it really is  https://review.openstack.org/21737315:12
*** stevemar has joined #openstack-keystone15:12
*** ChanServ sets mode: +v stevemar15:12
*** jsavak has joined #openstack-keystone15:15
*** dave-mccowan has joined #openstack-keystone15:16
*** jsavak has quit IRC15:18
*** jsavak has joined #openstack-keystone15:18
openstackgerritTom Cocozzello proposed openstack/python-keystoneclient: Move .pot file for translation  https://review.openstack.org/22147315:18
*** Guest22719 has quit IRC15:30
*** diazjf has joined #openstack-keystone15:30
*** topol_ has joined #openstack-keystone15:31
*** ChanServ sets mode: +v topol_15:31
*** phalmos has quit IRC15:32
*** topol__ has joined #openstack-keystone15:33
*** topol has quit IRC15:33
*** tsymanczyk has joined #openstack-keystone15:35
*** tsymanczyk is now known as Guest4968415:35
*** topol_ has quit IRC15:36
*** sdake_ has joined #openstack-keystone15:36
*** KarthikB has joined #openstack-keystone15:36
*** sdake__ has joined #openstack-keystone15:39
*** sdake has quit IRC15:40
morganlbragstad, jamielennox, https://review.openstack.org/221847 planned release of 1.7.1 of keystoneclient (hopefully today)15:42
morganto address middleware issue and windows sock opts15:42
morganoh erm15:42
morgansorry15:42
morgannot windows thing15:42
*** sdake_ has quit IRC15:43
bknudsondon't forget solaris15:43
bknudsonI don't think https://review.openstack.org/#/c/221543/ was the right fix.15:43
morganbknudson yah different thing15:44
morganat least the ksm thing was in there15:44
*** phalmos has joined #openstack-keystone15:45
*** shoutm has joined #openstack-keystone15:46
*** stevemar has quit IRC15:47
bknudsonlooking into the ksm problem, looks like it was ksm was mocking the ksc incorrectly15:47
*** sdake has joined #openstack-keystone15:47
*** stevemar has joined #openstack-keystone15:48
*** ChanServ sets mode: +v stevemar15:48
bknudsonthe mock was raising ConnectionError where ksc would waris ConenctionRefused15:48
bknudsonwould raise15:48
*** sdake__ has quit IRC15:49
*** gyee has joined #openstack-keystone15:49
*** ChanServ sets mode: +v gyee15:49
*** stevemar has quit IRC15:50
*** Guest49684 has quit IRC15:53
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Revert "Adding back exception mapping for ConnectionError"  https://review.openstack.org/22185515:54
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Revert "oslo-incubator apiclient.exceptions to keystoneclient.exceptions"  https://review.openstack.org/22185615:54
*** jistr|call is now known as jistr15:55
*** tsymancz1k has joined #openstack-keystone15:58
*** sdake has quit IRC15:58
*** med_ has quit IRC15:58
*** KarthikB has quit IRC16:00
*** itlinux has quit IRC16:01
*** jsavak has quit IRC16:07
*** jsavak has joined #openstack-keystone16:08
*** phalmos has quit IRC16:08
*** fhubik has quit IRC16:10
*** dims has quit IRC16:10
*** dims has joined #openstack-keystone16:10
*** KarthikB has joined #openstack-keystone16:18
openstackgerritLance Bragstad proposed openstack/keystone: Ensure token validation works irrespective of padding  https://review.openstack.org/22178616:19
*** pnavarro has quit IRC16:21
edmondswlbragstad, I think I've addressed your comments on https://review.openstack.org/#/c/217373/ Can you take another look?16:23
lbragstadedmondsw: sure16:23
edmondswbknudson, in some ways that change I've proposed relates to your https://review.openstack.org/#/c/221855/16:24
*** urulama has quit IRC16:24
edmondswhad to switch some things from ConnectionError to ConnectionRefused to get UT passing16:25
*** urulama has joined #openstack-keystone16:25
morganbknudson: however, this is a change that is likely wider reaching than just ksm16:25
morganbknudson: if we change the exceptions... we break people16:25
morganreally? revert the API exceptions thing16:25
* morgan sigh16:25
morganugh.16:26
gyeemorgan, yeah, we can't break people16:26
bknudsonI'll re-propose it and see if I can do it without breaking ksm.16:26
edmondswkeystonemiddleware UT was already broken without bknudson's change16:26
edmondswmy change should fix that16:26
morganbefore we approve the revert, lets see if we can fix it with reproposal16:27
edmondswmaybe should have split it into a separate commit...16:27
morganor if it's just worth making the incremental changes needed16:27
bknudsonI don't want to keep digging into a hole.16:27
bknudsonfill in the hole and start over.16:27
morganbknudson: at some point you can't just revert and re-propose.16:28
morganbknudson: i don't agree this is a hole at the moment. it looks like it might be relatively minor overlook16:29
morgans/overlook/oversight16:29
morganbknudson: or is this another "eff it, we can do it with 2.0"16:29
*** sdake has joined #openstack-keystone16:30
morganbknudson: I'm also thinking we're as likely to break people reverting it now fwiw.16:30
morgansince there was a release with this in there16:30
*** lhcheng has joined #openstack-keystone16:30
*** ChanServ sets mode: +v lhcheng16:30
*** lhcheng_ has joined #openstack-keystone16:32
*** lhcheng has quit IRC16:35
*** jistr has quit IRC16:42
*** hurgleburgler has joined #openstack-keystone16:46
*** belmoreira has joined #openstack-keystone16:46
*** lsmola has quit IRC16:48
*** spandhe has joined #openstack-keystone16:51
*** KarthikB has quit IRC16:55
*** jistr has joined #openstack-keystone16:55
*** ebalduf has joined #openstack-keystone16:57
*** e0ne has quit IRC17:08
*** KarthikB has joined #openstack-keystone17:13
*** csoukup has quit IRC17:18
*** madhu_ak has joined #openstack-keystone17:20
*** mflobo1 has joined #openstack-keystone17:21
*** ankita_wagh has joined #openstack-keystone17:22
*** mflobo1 has left #openstack-keystone17:22
hogepodgeproposed capability updates for keystone in defcore https://review.openstack.org/#/c/213330/317:23
hogepodgemorgan: ^^17:23
*** mflobo1 has joined #openstack-keystone17:26
*** exploreshaifali has joined #openstack-keystone17:26
*** mflobo1 has left #openstack-keystone17:27
*** jistr has quit IRC17:28
openstackgerritLance Bragstad proposed openstack/keystone: Ensure token validation works irrespective of padding  https://review.openstack.org/22178617:28
*** jsavak has quit IRC17:30
openstackgerritLance Bragstad proposed openstack/keystone: Ensure token validation works irrespective of padding  https://review.openstack.org/22178617:30
*** jsavak has joined #openstack-keystone17:31
*** devlaps has joined #openstack-keystone17:32
*** sdake_ has joined #openstack-keystone17:37
openstackgerritMatthew Edmonds proposed openstack/keystonemiddleware: only make token invalid when it really is  https://review.openstack.org/21737317:40
*** sdake has quit IRC17:41
bknudsonedmondsw: I don't think anyone would complain if the commit was split up.17:42
bknudsonthen it's easier to understand.17:42
edmondswlbragstad, I don't think https://review.openstack.org/#/c/221855/ commit is going to affect https://review.openstack.org/21737317:42
edmondswbknudson, you agree?17:43
edmondswbknudson, as for splitting it up... most of it has to stay together, I think. I could split out the ConnectionRefused change, but it kind of makes sense to fix it here, since this change exposed the problem17:43
bknudsonedmondsw: we wouldn't have caught the backwards-incompatible change if the auth_token tests were corrected as in https://review.openstack.org/21737317:43
bknudson(I meant https://review.openstack.org/#/c/221855/ )17:44
bknudsonedmondsw: you can't just propose a change to fix the faked return value?17:44
edmondswbknudson ?17:44
bknudsonedmondsw: we wouldn't have caught the backwards-incompatible change if the auth_token tests were corrected as in https://review.openstack.org/#/c/217373/ ... I guess I was correct the first time.17:45
*** sdake_ is now known as sdake17:45
bknudsonedmondsw: I have no idea why most of the changes in https://review.openstack.org/#/c/217373/5/keystonemiddleware/tests/unit/auth_token/test_auth_token_middleware.py are being made.... commit message doesn't say what was wrong.17:48
edmondswwe wouldn't have caught them without https://review.openstack.org/217373 ... it is the changes in __init__.py there that caused things to break, and then for me to fix them17:48
edmondswthe changes in patch set 5 are to fix py34 UT failures17:48
bknudsonedmondsw: the auth_token middlware tests were failing before https://review.openstack.org/217373 was proposed.17:49
edmondswhmm... ok17:49
edmondswthere a bug for that?17:49
bknudsonedmondsw: https://bugs.launchpad.net/python-keystoneclient/+bug/149260017:50
openstackLaunchpad bug 1492600 in python-keystoneclient "ConnectionError exception mapped incorrectly" [Critical,Fix committed] - Assigned to Lin Hua Cheng (lin-hua-cheng)17:50
edmondswahh... it failed with InvalidToken... yeah, that makes sense... it would fail differently with my changes17:51
edmondswbut fail either way17:51
edmondswso bknudson, you'd like me to make the switch to using ConnectionRefused in keystonemiddleware under that bug, and keep the rest under my current commit?17:51
bknudsonedmondsw: yes, I'd consider that a fix for the bug.17:52
edmondswok, will do17:53
*** shoutm has quit IRC17:55
*** jsavak has quit IRC17:56
*** belmoreira has quit IRC17:56
*** jsavak has joined #openstack-keystone17:56
*** jsavak has quit IRC17:58
*** mylu has joined #openstack-keystone17:58
*** diazjf has quit IRC17:58
*** jsavak has joined #openstack-keystone17:59
*** diazjf has joined #openstack-keystone18:01
openstackgerritMatthew Edmonds proposed openstack/keystonemiddleware: use ConnectionError for auth_token tests  https://review.openstack.org/22189718:05
openstackgerritMatthew Edmonds proposed openstack/keystonemiddleware: only make token invalid when it really is  https://review.openstack.org/21737318:10
*** med_ has joined #openstack-keystone18:12
*** stevemar has joined #openstack-keystone18:13
*** ChanServ sets mode: +v stevemar18:13
*** thedodd has quit IRC18:15
*** stevemar has quit IRC18:16
*** e0ne has joined #openstack-keystone18:23
*** diazjf has quit IRC18:25
*** diazjf has joined #openstack-keystone18:28
*** mylu has quit IRC18:29
*** aix has quit IRC18:29
*** mylu has joined #openstack-keystone18:30
*** stevemar has joined #openstack-keystone18:30
*** ChanServ sets mode: +v stevemar18:30
*** mylu has quit IRC18:31
*** csoukup has joined #openstack-keystone18:31
*** mylu has joined #openstack-keystone18:31
*** stevemar has quit IRC18:33
*** stevemar has joined #openstack-keystone18:34
*** ChanServ sets mode: +v stevemar18:34
*** josecastroleon has quit IRC18:36
*** urulama_ has joined #openstack-keystone18:38
*** urulama has quit IRC18:40
*** josecastroleon has joined #openstack-keystone18:41
*** stevemar has quit IRC18:43
*** phalmos has joined #openstack-keystone18:45
openstackgerritRoman Bogorodskiy proposed openstack/python-keystoneclient: Avoid message concatenation in error path  https://review.openstack.org/15575818:47
*** e0ne has quit IRC18:47
openstackgerritMatthew Edmonds proposed openstack/keystonemiddleware: Use ConnectionRefused for auth_token tests  https://review.openstack.org/22189718:49
morganbknudson: are you good with dumping the ksa_integration branch on keystoneclient since we arent doing the same level of compat hacks. Instead we will just spin up a new 2.0 branch and we will start over with 2.0 and not compat in mind18:55
morganbknudson: this was jamielennox's request18:55
bknudsonmorgan: I don't agree that we can make 2.0 with no compat in mind. otherwise how is anyone going to upgrade? New version should only remove code not change behavior18:56
*** tsymancz1k is now known as tsymanczyk18:56
morganbknudson: i really dislike that we must maintain compat forever. Major version changes imply (and rightfully so) no compat guaranteed18:57
bknudsonmorgan: I'm fine with dumping ksa_integration branch if it was just for testing.18:57
bknudsonit's not forever, it's n+2.18:57
bknudsonhelps to deprecate correctly18:57
morganThen we should stop pretending to do semver18:57
openstackgerritMatthew Edmonds proposed openstack/keystonemiddleware: Use ConnectionRefused for auth_token tests  https://review.openstack.org/22189718:58
lbragstadbknudson: just a heads up, I'm going to drop by the qa meeting tomorrow for - https://review.openstack.org/#/c/220272/ since https://review.openstack.org/#/c/220242/ merged. then we should be able to retrigger https://review.openstack.org/#/c/195780/18:58
openstackgerritRoman Bogorodskiy proposed openstack/python-keystoneclient: Avoid message concatenation in error path  https://review.openstack.org/15575818:58
morganSo we are going to maintain these horrible compat hacks until 4.x of keystoneclient?18:58
bknudsonmorgan: that is semver... when you remove function you up the major version #.18:59
morganRight. We are talking moving to 2.018:59
bknudsonmorgan: 4.x or whatever... by then we'll probably have openstack sdk.18:59
morganNot 1.xx without the compat18:59
morganThen we might as well not have split keystoneauth18:59
bknudsonI thought sdk was going to use keystoneauth.18:59
morganIt is.19:00
*** diazjf has quit IRC19:00
*** thedodd has joined #openstack-keystone19:00
morganabd we cant remove the cli then19:00
morganEither19:00
bknudsonthat makes it worth it to split out auth19:00
bknudsonwe can remove the cli for 2.0 if it's deprecated in 1.x19:00
openstackgerritLance Bragstad proposed openstack/keystone: Additional documentation for services  https://review.openstack.org/21118419:00
morganSo we deprecate session in the next release cause ksa is out19:00
morganRemoce it in 2.019:01
morganNo compat19:01
bknudsonyes.19:01
morganGreat deprecated in 1.819:01
*** amakarov is now known as amakarov_away19:01
bknudsonif we want to build session on ksa then it will be a compat layer... otherwise it just sits on whatever it was using before.19:01
morganI was not advocating removal in the liberty branch (last of the 1.x series) but no compat in the next series (mitaka)19:01
morganNo19:02
morganThe point is keystoneclient shouldnt need in 2.0 to carry the namespace for everyone else19:02
morganThe compat hacks are truely awful19:02
bknudsonwe already have compat hacks so adding more on top will be doubly bad19:03
morganOtherwise we are wedged in a cycle still19:03
morganSo my point is lets drop those in the 2.0 release19:03
morganTo move to ksc 2.0 you need to be on ksa19:03
morganKsc just losing what goes in ksa19:03
morganBut absolutly a major version bump19:03
bknudsonwhat we need to ensure is that there's a path from 1.x to 2.x19:04
morganConvert to using ksa19:04
morganThat is the path19:04
bknudsonso that might be, use ksc 1.x with ksa.19:04
bknudsonthen switch ksc 1.x to 2.x19:04
bknudsonafter you stop using deprecated function in ksc 1.x19:04
*** jasonsb has quit IRC19:04
bknudsonthen you stuff should just keep working.19:05
*** jasonsb has joined #openstack-keystone19:05
morganSure. But my goal is ksc 2 wont have the ksa stuff in it19:05
bknudsonthen you'll need to make it so ksc1 works with ksa.19:05
*** jasonsb has quit IRC19:05
morganSure.19:05
bknudsonwe can't require a big bang19:05
morganThat is fine. Ksc can do some support code in 1.x19:06
*** jasonsb has joined #openstack-keystone19:06
morganBut 2.x is a no support for ksc versions19:06
bknudsonksc sessions19:06
morganRight19:06
morganKsc 1.x sessions will not work with ksc 2.019:06
openstackgerritLance Bragstad proposed openstack/keystone: Ensure token validation works irrespective of padding  https://review.openstack.org/22178619:07
morganKsc 1 can do what is needed to support either.19:07
bknudsonso we'd deprecate ksc sessions in 1.x saying to switch to ksa sessions19:07
morganYes19:07
*** diazjf has joined #openstack-keystone19:07
morganOk we are in agreement.19:07
bknudsonyep19:07
*** e0ne has joined #openstack-keystone19:07
morganCool19:08
morganThat should be an easy code block (since it is purely internal to ksc)19:08
*** urulama_ has quit IRC19:08
*** urulama has joined #openstack-keystone19:09
*** boris-42 has quit IRC19:10
*** jasonsb has quit IRC19:10
*** kiran-r has joined #openstack-keystone19:17
*** ankita_w_ has joined #openstack-keystone19:19
*** ankita_wagh has quit IRC19:19
*** edmondsw has quit IRC19:25
*** exploreshaifali has quit IRC19:28
*** kiran-r has quit IRC19:29
*** ankita_w_ has quit IRC19:29
*** ankita_wagh has joined #openstack-keystone19:30
*** e0ne has quit IRC19:32
*** aix has joined #openstack-keystone19:33
*** phalmos has quit IRC19:40
*** phalmos has joined #openstack-keystone19:42
*** devlaps has quit IRC19:43
*** hurgleburgler has left #openstack-keystone19:45
*** mylu has quit IRC19:45
*** mylu has joined #openstack-keystone19:46
*** stevemar has joined #openstack-keystone19:46
*** ChanServ sets mode: +v stevemar19:46
*** KarthikB has quit IRC19:48
*** phalmos has quit IRC19:49
*** mylu has quit IRC19:50
*** roxanaghe has quit IRC19:59
*** boris-42 has joined #openstack-keystone20:00
*** lhcheng_ is now known as lhcheng20:00
*** ChanServ sets mode: +v lhcheng20:00
*** urulama has quit IRC20:01
*** nicodemos has quit IRC20:05
*** KarthikB has joined #openstack-keystone20:05
*** jasonsb has joined #openstack-keystone20:05
*** e0ne has joined #openstack-keystone20:11
*** pnavarro has joined #openstack-keystone20:26
*** KarthikB has quit IRC20:27
*** roxanaghe has joined #openstack-keystone20:28
*** jsavak has quit IRC20:34
*** ankita_w_ has joined #openstack-keystone20:36
*** stevemar has quit IRC20:37
*** ankita_wagh has quit IRC20:39
*** topol__ has quit IRC20:41
*** thedodd has quit IRC20:51
*** dave-mccowan has quit IRC20:51
*** jasonsb has quit IRC20:51
*** KarthikB has joined #openstack-keystone20:51
*** jasonsb has joined #openstack-keystone20:52
*** pnavarro has quit IRC20:56
*** ebalduf has quit IRC20:57
*** darrenc_ has joined #openstack-keystone21:02
*** darrenc has quit IRC21:03
*** tiny-hands has quit IRC21:03
*** bknudson has quit IRC21:04
*** tiny-hands has joined #openstack-keystone21:05
*** tiny-hands has quit IRC21:05
*** sdake has quit IRC21:08
*** ankita_wagh has joined #openstack-keystone21:09
*** ankita_w_ has quit IRC21:09
*** edmondsw has joined #openstack-keystone21:10
*** roxanaghe has quit IRC21:14
*** ankita_w_ has joined #openstack-keystone21:15
*** ankita_wagh has quit IRC21:15
*** ankita_wagh has joined #openstack-keystone21:20
*** ankita_w_ has quit IRC21:20
*** roxanaghe has joined #openstack-keystone21:21
openstackgerritNina Goradia proposed openstack/keystone: Use oslo.log fixture  https://review.openstack.org/21736221:28
*** jasonsb has quit IRC21:31
*** dave-mccowan has joined #openstack-keystone21:32
*** jasonsb has joined #openstack-keystone21:32
*** stevemar has joined #openstack-keystone21:38
*** ChanServ sets mode: +v stevemar21:38
*** e0ne has quit IRC21:39
*** bknudson has joined #openstack-keystone21:40
*** ChanServ sets mode: +v bknudson21:40
*** stevemar has quit IRC21:41
*** mestery has quit IRC21:41
*** doug-fish has quit IRC21:42
*** dave-mccowan has quit IRC21:42
*** mestery has joined #openstack-keystone21:42
*** doug-fish has joined #openstack-keystone21:42
*** diazjf has left #openstack-keystone21:45
openstackgerritTom Cocozzello proposed openstack/keystone: Deprecate httpd/keystone.py  https://review.openstack.org/22197521:47
lhchengbknudson: curious why you changed your mind on https://review.openstack.org/#/c/221855/21:49
bknudsonlhcheng: I can't think of a way to get rid of the apiclient.exceptions in a non-breaking way other that what your fix is doing.21:50
bknudsonI'll propose a change to clean it up a little.21:50
bknudsonsince it's useless to define a class and then rename it so you can't reference it.21:50
lhchengyeah, the cleanup makes sense. less confusion in the future21:51
lhchengbknudson: thanks for reviewing that patch21:52
*** hrou has quit IRC21:52
bknudsonlhcheng: I made the change that broke it and remembered there was something fishy with those classes21:53
bknudsonI should have looked into it some more21:53
lhchengbknudson: I guess anything that have backward compatibility we should stay away from :)21:54
lhchengit wasn't clear why it is required21:54
bknudsonwe have to be able to deprecate and remove old broken garbage.21:54
bknudsonsomebody wanted to get the client libs using the same exceptions for a while but then they gave up on it.21:55
lhcheng++21:55
bknudsonthey tried to make a breaking change to keystoneclient when they did that but I talked them out of it.21:55
bknudsonbut then that created this issue when I tried to deprecate the apiclient stuff.21:56
*** gordc has quit IRC21:56
lhchengugh21:57
lhchengso this type of issue only show up after the python-client is release21:58
lhchengwonder if we can have a smarter gate21:58
bknudsonwe could catch this if we ran the ksm unit tests for ksc changes.21:58
jamielennoxbknudson: ksa should allow us to use the same exceptions for at least HTTP21:58
lhchenginstead of pulling just from release package, use the code in master21:58
lhchengbknudson: yeah, something like that21:58
jamielennoxbknudson: the problem with the oslo incubator apiclient standard exceptions is they were c&p-ed to every project so they weren't the same object, just the same name21:59
bknudsonjamielennox: that was in the feature branch?21:59
bknudsonjamielennox: we still have apiclient exceptions but now they're referencing keystoneclient exceptions rather than the other way around.22:00
jamielennoxbknudson: no, keystoneauth has a lot of standard exceptions, i'm not sure if in keystoneclient we do from keystoneauth1.exceptions.http import * or we just use them from ksa direclty22:00
*** slberger has left #openstack-keystone22:00
jamielennoxbknudson: really?22:00
jamielennoxapiclient made such a mess, good intentions but ergh22:00
bknudsonjamielennox: yes, so now apiclient exceptions is deprecated in favor of keystoneclient exceptions22:00
bknudsonremove apiclient exceptions in 2.022:01
jamielennoxbknudson: i've started a 2.0 branch and it removes a lot of stuff22:01
jamielennox-26k LOC22:01
jamielennoxbut yes, they're in for sure22:01
bknudsonhow does keystoneclient have 26k loc to begin with22:02
jamielennoxyuo22:02
jamielennoxexactly22:02
jamielennoxhttps://review.openstack.org/#/c/221596/ is the review, i have a github branch where they aren't squashed so i can put them up for review later22:03
jamielennoxi just wanted to see where zuul broke22:03
jamielennoxwe can't do anything about fixing it until next cycle anyway so  not too worried for now22:03
*** geoffarnold has quit IRC22:03
*** geoffarnold has joined #openstack-keystone22:04
*** sdake has joined #openstack-keystone22:05
*** stevemar has joined #openstack-keystone22:08
*** ChanServ sets mode: +v stevemar22:08
jamielennoxmorgan, bknudson: my intent for a v2.0 is to really not change the CRUD interfaces at all (small cleanups), just move everything over to using the KSA features and i wasn't thinking we'd provide references to new objects in KSA, just make people move completely over22:08
*** bradjones is now known as bradjones|away22:09
morganjamielennox: so I think the very simple ksc->ksa session method is needed in ksc22:09
morganor vice-versa (pick one way)22:10
morganfor the 1.x series22:10
jamielennoxwhy?22:10
bknudsonjamielennox: I don't think we can require a big break22:10
bknudsonotherwise there's no migration path22:10
morganto avoid the big break22:10
jamielennoxbknudson: there's a migration path22:10
morgansimple, you give a simple way to extract a session and move it, it is added to 1.x series of ksc22:10
jamielennoxs/from keystoneclient import session/from keystoneauth1 import session22:10
bknudsonjamielennox: what is it?22:10
morganwe have an upgrade path22:10
morganjamielennox: if session will "just work" no changes needed22:11
morganthen fine22:11
morganbut if code needs changing we just need to cover our bases22:11
jamielennoxi purposefully didn't change any interfaces on session/auth plugins22:11
morganok cool22:11
*** stevemar has quit IRC22:11
morganthen the path is simple22:11
morgani hadn't tried that yet22:11
jamielennoxso except for loading it should just be create the object from ksa instead22:11
bknudsondoes "from keystoneauth1 import session" work with ksc v1?22:11
jamielennoxthe place where it gets slightly tricky is exception handling because now exceptions are being raised from a different place22:12
morganjamielennox: and loading is (for all intents and purposes) optional at this point22:12
*** shoutm has joined #openstack-keystone22:12
*** shoutm has quit IRC22:12
bknudsonnobody handles exceptions anyways22:12
morganeh. that is an acceptible level of break and a known22:12
morganexcept Exception <--- 99% of the cases which means no impact22:13
jamielennoxfor other clients though (which is generally the problem) i think we'll have to do a compatibility file with their current exceptions22:13
bknudsoncan we have ksc.exception use ksa.exception?22:13
morganbknudson: eh, not really a need for it22:13
morganbknudsonand you'd need to subclass22:13
bknudsonyou're right, probably a bad idea.22:13
morganotherwise you're still raising ksa.exception (or you'd need to re-raise)22:13
jamielennoxbknudson: so when you request() you can raise_exc=False, most other clients do this so that they can raise there library's exceptions and not keystoneclient anyway22:13
bknudsonthere's probably a bunch of ksa exceptions that go away.22:14
bknudsonoops, ksc exceptions22:14
morganbknudson: yep22:14
morganall the session handling stuff22:14
jamielennoxi would like to make these the same object but i think we can figure that out22:14
morganoh... i forgot to do something.. maybe the joke has already been spent though =/22:14
* morgan goes to do thing22:14
jamielennoxbknudson: anyway it'll purposefully break anyone doing Client(username=XXX, ...) etc but i don't want to change the CRUD behaviour on people22:15
bknudsonjamielennox: I think that's deprecated now so shouldn't be a problem to remove it.22:21
*** ebalduf_ has joined #openstack-keystone22:24
jamielennoxbknudson: so i've got a review i'd like you to look at https://review.openstack.org/#/c/221738/22:24
jamielennoxbknudson: it's small in code, but a bit of a change22:25
bknudsonjamielennox: how do you unit test it?22:26
jamielennoxbknudson: i've no idea :)22:26
jamielennoxi was thinking i could mock() the request() and have it sleep22:26
jamielennoxbut either way involves bringing threads into the ksc unit tests22:27
bknudsonjamielennox: does eventlet override locks so they don't block everything?22:27
* bknudson wishes we had real async since it's easier to think about22:28
morganok so we can nuke the old integration branch and make a 2.x branch?22:29
morganthat was the root of all this22:29
bknudsonwe should look at what the diff in commits are.22:29
* jamielennox misses compilers and actually being able to just think about threads normally22:29
bknudsonmake sure we're not losing anything22:29
jamielennoxhttps://review.openstack.org/#/q/status:merged+project:openstack/python-keystoneclient+branch:feature/keystoneauth_integration,n,z22:30
bknudsonso is that what's going to be in the 2.x branch?22:30
jamielennoxso they've all been me trying to make ksc use ksa features directly and not breaking compatibility22:30
bknudsonif so, why do we need a different branch?22:30
bknudson"Remove keystoneclient.middleware" isn't22:31
jamielennoxbknudson: yep, but that ones fairly easy22:31
bknudsonit's a change that someone tried to make in master and I said put it to this other branch instead.22:31
jamielennoxthere are a few patches that are open against it22:32
jamielennoxdoc updates etc22:32
jamielennoxif we want to make the v2 branch and cherry-pick across first then that's fine as well22:32
bknudsonI figured we'd make a keystoneclient 1.x branch off master and then merge keystoneauth_integration into master22:33
morganbknudson, i think we're ditching some of the compat stuff in the ksc integration branch22:33
morganthat we really don't need22:33
*** roxanaghe has quit IRC22:34
bknudsonwe could go through and remove the deprecated functionality first so that it's easier22:34
bknudsonto see what we don't need22:34
*** roxanaghe has joined #openstack-keystone22:34
jamielennoxbknudson: i think based on how long it took us to do ksa a new branch will be useful until it's ready22:34
bknudsonok, either way works for me.22:35
bknudsonI just didn't want to lose work that I asked someone to do.22:35
*** jecarey has quit IRC22:36
jamielennoxmorgan: i don't know what happens to open reviews if we delete the branch, maybe ask for the 2.0 and then we'll delete the integration branch after we've cherry-picked everything22:36
*** csoukup has quit IRC22:36
morganthe open reviews will disappear afaik22:36
morgangerrit is smart22:36
morgansometimes too smart22:36
morganomg gerrit is skynet (cc mordred )22:36
jamielennoxbut there are 2 reviews for ksa_integration from non-core22:37
morganso i can ask for the new branch and then kill the old one easily later22:37
jamielennoxhttps://review.openstack.org/#/c/215261/ will happen automatically in 2 because the adapter default is public endpoints22:37
bknudsonI like seeing V-1 on everything22:37
jamielennoxand i think https://review.openstack.org/#/c/192438/ is a cherry-pick from master? doug-fish ?22:38
bknudsonthere shouldn't be any cherry-picking from master to the feature branch22:38
bknudsonsince we can merge changes from master the old fashioned way22:39
*** henrynash has quit IRC22:41
*** henrynash has joined #openstack-keystone22:42
*** ChanServ sets mode: +v henrynash22:42
jamielennoxmorgan: it's a bit against the rules but i was wondering about trying to merge https://review.openstack.org/#/c/221738/ before release of 0.7.122:43
jamielennoxbecause we're going to have to bump L reqs for 0.7.1 then i can fix the problem in nova properly22:43
morganwe could make it 1.822:43
morganbut 1.7.1 shouldn't include that i don't think22:43
morganor it could22:44
jamielennoxthat's fair22:44
morganwe could just update the 1.7.1 tag hash22:44
morganhappy to do so if dhellmann hasn't tagged 1.7.1 yet22:44
jamielennoxis that a manual process?22:45
*** roxanaghe has quit IRC22:48
*** KarthikB has quit IRC22:49
*** darrenc_ is now known as darrenc22:51
*** erhudy1 has joined #openstack-keystone22:53
*** roxanaghe has joined #openstack-keystone22:54
*** markvoelker has quit IRC22:56
*** ebalduf_ has quit IRC22:56
*** roxanaghe has quit IRC22:58
*** roxanaghe has joined #openstack-keystone22:59
*** hrou has joined #openstack-keystone23:04
*** bknudson has quit IRC23:06
morganjamielennox: it is handled by the rel team and via a repo now23:07
morganjamielennox so i think somewhat manual23:07
*** spandhe has quit IRC23:07
jamielennoxmorgan: yea, i just assumed a large part of that would be so that on post-commit there was a script to make sure all releases were pushed23:07
*** david-lyle has quit IRC23:11
*** henrynash has quit IRC23:12
*** spandhe has joined #openstack-keystone23:12
*** david-lyle has joined #openstack-keystone23:12
*** henrynash has joined #openstack-keystone23:13
*** ChanServ sets mode: +v henrynash23:13
*** rdo has quit IRC23:17
*** zzzeek has quit IRC23:17
*** darrenc is now known as darrenc_afk23:20
*** amit213 has quit IRC23:22
*** amit213 has joined #openstack-keystone23:22
*** david-lyle has quit IRC23:22
*** edmondsw has quit IRC23:23
*** david-lyle has joined #openstack-keystone23:23
*** rdo has joined #openstack-keystone23:25
*** bknudson has joined #openstack-keystone23:37
*** ChanServ sets mode: +v bknudson23:37
*** dsirrine has quit IRC23:37
*** jasonsb has quit IRC23:40
*** shoutm has joined #openstack-keystone23:44
*** henrynash has quit IRC23:45
*** jasonsb has joined #openstack-keystone23:48
*** jasonsb has quit IRC23:49
*** dsirrine has joined #openstack-keystone23:52
*** bknudson has quit IRC23:56
*** markvoelker has joined #openstack-keystone23:57
*** fangzhou has joined #openstack-keystone23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!