Monday, 2015-11-23

*** jasonsb has joined #openstack-keystone00:02
*** jasonsb has quit IRC00:07
*** jasonsb_ has joined #openstack-keystone00:08
jamielennoxnotmorgan: no, my outstanding question is how it integrates with the clients, because you construct an adapter within the Client.__init__ so there's no argparse ns there00:10
notmorganjamielennox: hm.00:11
jamielennoxsee last comment, not inline00:11
notmorgandamn that comment didn't load before00:11
notmorganreading now00:11
jamielennoxso we can do a client.register which calls out to adapter.register00:12
notmorganthat is probably the cleanest way00:12
jamielennoxand then have adapter.get_kwargs which will get passed through to client.__init__00:12
notmorganyeah00:12
jamielennoxnotmorgan: i had https://review.openstack.org/#/c/222013/ a while ago, but it's not an easy one00:13
notmorganjamielennox: i don't think you're going to get around the adapter needing to know service_type stuff00:13
notmorganjamielennox: the more I think about it00:13
notmorganoooh that is kindof a painful one (the one you just linked)00:14
jamielennoxsame concept i was just doing it with the loading.Opts00:15
notmorganright.00:16
jamielennoxbut doing it that way means you don't get difference between argparse and conf00:16
notmorganeh. i prefer to lean more heavily on argparse where we can00:16
notmorganrather than leaning on oslo_config00:16
notmorganif that makes sense?00:16
*** EinstCrazy has quit IRC00:17
jamielennoxoh yea, that's fine, i'm pretty sure we'll need to do an oslo_config one as well00:17
notmorgansure.00:17
jamielennoxso, i think it's fine to do with argparse and oslo_config seperately, that's what session does00:18
jamielennoxbut the only way we can handle adapter.load_from_argparse is to essentially do00:19
jamielennoxsess = session.load_from_argparse()00:19
jamielennoxsess.adapter = adapter.load_from_argparse00:19
jamielennoxand it looses stuff00:19
notmorganhow is it losing stuff in that case?00:38
jamielennoxanything passed into Client(**kwargs) will be lost because you wholesale replace adapter00:38
notmorganoh right00:38
jamielennoxahh, sess.adapter doesn't make sense00:39
jamielennoxclient.adapter = adapter.laod_from00:39
notmorganyea00:39
notmorganthere we go00:39
*** muralia1 has left #openstack-keystone00:42
jamielennoxnotmorgan: you want to have a look at https://review.openstack.org/#/c/243869/00:43
notmorganlooking now00:43
notmorganugh we have to do _exc.00:44
notmorganbut yeah makes sense00:44
jamielennoxit was a comment00:45
notmorganjamielennox: +2/+A00:45
notmorganthat wasn't too hard to review00:45
jamielennoxwant harder? :)00:45
notmorganuh... i should be doing laundry and packing for travel tomorrow00:45
jamielennoxactually if you have a minute i was about to +A my own requests-mock review00:45
notmorganoh i can do that00:45
jamielennoxi don't expect you to know it well, but you can at least tell me if i'm doing something stupid00:46
jamielennoxhttps://review.openstack.org/#/c/246700/00:46
notmorgannothing crazy there00:48
jamielennoxi didn't think so, was going to merge that and i think tag a release00:49
notmorganyah00:49
jamielennoxit's the only outstanding bug00:49
jamielennoxwell one other, but it's a weird use case00:49
jamielennoxwhat are you supposed to be packing for?00:50
jamielennoxi thought you moved already00:51
jamielennoxor another trip?00:51
*** EinstCrazy has joined #openstack-keystone00:56
notmorgangoing to NYC for the holiday00:57
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Use keystoneauth  https://review.openstack.org/23509001:03
jamielennoxah, i always forget about thanksgiving01:13
*** fangxu has quit IRC01:17
notmorganjamielennox: hah01:25
*** _zouyee has joined #openstack-keystone01:31
ayoungnotmorgan, hey, isn't heckj in Portland now, or is he in Seatlle?01:38
ayoungSeattattle01:39
notmorganNo idea01:39
notmorganLooks like Seattle.01:40
*** btully has quit IRC01:43
*** jerrygb has joined #openstack-keystone01:44
*** aginwala has joined #openstack-keystone01:51
openstackgerritMerged openstack/python-keystoneclient: Map keystoneclient exceptions to keystoneauth  https://review.openstack.org/24386901:55
*** aginwala has quit IRC01:58
*** mylu has quit IRC01:59
*** mylu has joined #openstack-keystone02:00
*** mylu has quit IRC02:00
*** mylu has joined #openstack-keystone02:00
*** jerrygb has quit IRC02:05
*** jerrygb has joined #openstack-keystone02:05
*** jerrygb has quit IRC02:10
*** ninag has joined #openstack-keystone02:14
*** ninag has quit IRC02:14
*** ninag has joined #openstack-keystone02:14
*** davechen1 has left #openstack-keystone02:18
*** ninag has quit IRC02:19
*** mylu has quit IRC02:26
*** mylu has joined #openstack-keystone02:26
*** mylu has quit IRC02:31
*** ninag has joined #openstack-keystone02:36
*** ninag has quit IRC02:36
*** ninag has joined #openstack-keystone02:36
*** ninag has quit IRC02:41
*** yangyap__ has joined #openstack-keystone03:02
*** jerrygb has joined #openstack-keystone03:06
*** jerrygb has quit IRC03:11
*** ninag has joined #openstack-keystone03:35
*** chrisshattuck has joined #openstack-keystone03:36
*** ninag has quit IRC03:40
*** chrisshattuck has quit IRC03:51
*** wuhg has joined #openstack-keystone03:55
openstackgerritJamie Lennox proposed openstack/keystoneauth: Add load_from_options_getter to plugin loading  https://review.openstack.org/22202904:02
openstackgerritJamie Lennox proposed openstack/keystoneauth: Add documentation to Opt  https://review.openstack.org/24852204:02
openstackgerritJamie Lennox proposed openstack/keystoneauth: Tweak the way plugin attributes are loaded  https://review.openstack.org/24852304:02
openstackgerritJamie Lennox proposed openstack/keystoneauth: Allow prompting for password when CLI loading  https://review.openstack.org/24852404:02
stevemarjamielennox: more patches eh04:07
stevemarjamielennox: if we wanted to support a project id/name for federated work flows, how ugly would that be?04:07
jamielennoxstevemar: you mean that you got back a scoped token straight away?04:13
stevemarjamielennox: yeah, so things like `openstack image list` just works04:15
jamielennoxstevemar: it just works now, this would be an optimization04:15
stevemarjamielennox: it just works now?04:15
jamielennoxunless you are tlaking k2k04:16
jamielennoxI'm pretty sure i can fix the k2k flow as well i'm jsut waiting to get somewhere i can actually host VMs to test it all04:17
jamielennoxgrr softlayer04:17
jamielennoxso you want for example SAML auth to do local image list?04:17
stevemarjamielennox: i think i can get you two VMs?04:18
stevemarjamielennox: yes, i didn't think that work now04:18
jamielennoxstevemar: i'm going to whinge at someone tomorrow04:18
stevemarjamielennox: i think all IBMers get access to bluemix, you can sign up there and get 2 VMs04:18
jamielennoxah - so it wouldn't have worked - but it should now04:18
*** agireud has quit IRC04:18
stevemarhttps://console.ng.bluemix.net04:18
jamielennoxso keystoneclient SAML didn't support it04:19
jamielennoxbut OSC does ksa now right?04:19
jamielennoxbut we haven't made the SAML plugin public04:19
jamielennoxok - it works just fine we just have to publish it all04:19
stevemarjamielennox: OSC is doing weird stuff now, it's using OCC which uses KSA04:19
jamielennoxstevemar: yea, i commented on the OSC review for ksa.Session - you shouldn't need to wait for the exceptions merge patch from KSC04:20
stevemarjamielennox: nice04:20
*** agireud has joined #openstack-keystone04:20
jamielennoxstevemar: add an entry point in ksa for https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/extras/_saml2/_loading.py#L1704:23
jamielennoxbut i was testing with keystoneauth-saml2 and it was working04:23
jamielennoxthe cleanup i want to do there essentially is a rewrite :(04:24
jamielennoxso if it works we might try to publish it now and i'll just make sure all the interfaces i want to change are private04:24
stevemarjamielennox: i'll try it tonight/tomorrow with OIDC04:25
*** agireud has quit IRC04:25
jamielennoxstevemar: https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/identity/v3/federation.py#L86-L96 is the logic04:25
jamielennoxso if it's inhreitting from that class it should be fine04:25
stevemarjamielennox: how does rescoping_plugin work?04:26
* stevemar goes to read04:26
jamielennoxstevemar: it's just v3.token.Token04:26
jamielennoxgiven a token get a new token with different scope04:26
stevemaractually _get_scoping_data is what i meant04:26
jamielennoxso the first token you get back from federation is always unscoped04:27
stevemarso if i set all the V3OIDC bits, then set OS_PROJECT_ID, it'll rescope to that?04:27
stevemarniiiice04:27
jamielennoxso _get_scoping_data is just a dictionary of what you can scope to04:27
jamielennoxif anything is present it will rescope for you04:27
stevemarthat info is based off of env. vars?04:28
stevemaror cli or whatever occ uses04:28
jamielennoxright, the same way as everything else04:28
stevemarthis is KSA-specific right?04:28
stevemarnot in KSC04:28
jamielennoxloading is exactly the same, it's just a more complicated auth step04:28
jamielennoxthe base class is in KSC i think, but we didn't convert saml2 to use it04:29
jamielennoxand if you didn't do OIDC then i doubt we did that either04:29
*** shunliz has joined #openstack-keystone04:36
*** jbell8 has joined #openstack-keystone04:39
*** jbell8 has quit IRC04:39
*** mylu has joined #openstack-keystone04:43
*** agireud has joined #openstack-keystone04:46
*** btully has joined #openstack-keystone05:26
*** rcernin has joined #openstack-keystone05:36
*** rcernin has quit IRC05:42
*** aginwala has joined #openstack-keystone05:51
*** yangyap__ has quit IRC05:52
*** gildub has quit IRC05:58
*** lhcheng has joined #openstack-keystone06:00
*** ChanServ sets mode: +v lhcheng06:00
*** aginwala has quit IRC06:02
*** mylu has quit IRC06:09
*** lhcheng has quit IRC06:22
*** jasonsb_ has quit IRC06:23
*** aginwala has joined #openstack-keystone06:27
*** topol has joined #openstack-keystone06:37
*** ChanServ sets mode: +v topol06:37
*** fawadkhaliq has joined #openstack-keystone06:41
*** lhcheng has joined #openstack-keystone06:43
*** ChanServ sets mode: +v lhcheng06:43
*** topol has quit IRC06:44
*** aginwala has quit IRC06:54
*** lhcheng_ has joined #openstack-keystone06:57
*** aginwala has joined #openstack-keystone07:00
*** lhcheng has quit IRC07:00
*** _zouyee has quit IRC07:03
*** jasonsb has joined #openstack-keystone07:03
*** _zouyee has joined #openstack-keystone07:03
*** _zouyee has quit IRC07:04
*** rcernin has joined #openstack-keystone07:07
*** jasonsb has quit IRC07:09
*** jaosorior has joined #openstack-keystone07:10
*** openstack has joined #openstack-keystone07:18
*** zqfan_AFK has joined #openstack-keystone07:29
*** ninag has joined #openstack-keystone07:38
*** ninag has quit IRC07:42
*** urulama has quit IRC07:48
*** urulama has joined #openstack-keystone07:48
*** jerrygb has joined #openstack-keystone07:51
openstackgerrityangweiwei proposed openstack/oslo.policy: Modified enforce method in oslo.policy to enforce user-defined policy rules  https://review.openstack.org/24797507:54
*** jerrygb has quit IRC07:57
*** aginwala has quit IRC07:58
*** aginwala has joined #openstack-keystone08:04
*** fawadkhaliq has quit IRC08:11
*** fawadkhaliq has joined #openstack-keystone08:12
*** jimbaker has quit IRC08:25
*** btully has quit IRC08:25
*** josecastroleon has joined #openstack-keystone08:29
*** zsli_ has joined #openstack-keystone08:30
*** shunliz has quit IRC08:33
*** aginwala has quit IRC08:44
*** xek has joined #openstack-keystone08:46
*** fhubik has joined #openstack-keystone08:49
*** gildub has joined #openstack-keystone08:51
*** btully has joined #openstack-keystone08:52
*** btully has quit IRC08:56
*** fhubik is now known as fhubik_brb08:58
*** fhubik_brb is now known as fhubik09:00
*** fawadkhaliq has quit IRC09:00
*** fhubik is now known as fhubik_brb09:01
*** fawadkhaliq has joined #openstack-keystone09:01
openstackgerrityangweiwei proposed openstack/oslo.policy: Modified enforce method in oslo.policy to enforce user-defined policy rules  https://review.openstack.org/24797509:03
*** fhubik_brb is now known as fhubik09:08
*** fawadkhaliq has quit IRC09:21
*** fawadkhaliq has joined #openstack-keystone09:22
*** fhubik is now known as fhubik_brb09:26
*** jistr has joined #openstack-keystone09:27
*** e0ne has joined #openstack-keystone09:28
*** aix has joined #openstack-keystone09:43
*** fhubik_brb is now known as fhubik09:45
*** zsli_ has quit IRC09:51
*** aix has quit IRC09:52
*** ekarlso- has joined #openstack-keystone09:59
*** ekarlso has quit IRC10:00
*** ekarlso- is now known as ekarlso10:00
*** josecastroleon has quit IRC10:05
*** jerrygb has joined #openstack-keystone10:08
*** jerrygb has quit IRC10:13
*** daemontool has joined #openstack-keystone10:19
*** rha has quit IRC10:24
*** aix has joined #openstack-keystone10:24
*** jimbaker has joined #openstack-keystone10:25
*** jimbaker has quit IRC10:25
*** jimbaker has joined #openstack-keystone10:25
*** fhubik has quit IRC10:27
*** fhubik has joined #openstack-keystone10:28
*** tellesnobrega_af is now known as tellesnobrega10:33
*** daemontool has quit IRC10:34
*** daemontool has joined #openstack-keystone10:35
openstackgerritDaniele Pizzolli proposed openstack/keystone: Add instuction: how to intall python-virtualenv  https://review.openstack.org/24861410:44
*** fhubik has quit IRC10:45
*** fhubik has joined #openstack-keystone10:45
*** flaper87 has quit IRC10:46
*** flaper87 has joined #openstack-keystone10:46
*** josecastroleon has joined #openstack-keystone10:46
openstackgerrityangweiwei proposed openstack/oslo.policy: Modified enforce method in oslo.policy to enforce user-defined policy rules  https://review.openstack.org/24797510:50
*** rha has joined #openstack-keystone10:54
*** rha has quit IRC10:54
*** rha has joined #openstack-keystone10:54
*** tsufiev_ is now known as tsufiev10:54
*** NM has joined #openstack-keystone11:04
*** Ephur has joined #openstack-keystone11:09
*** fhubik is now known as fhubik_brb11:17
*** urulama has quit IRC11:20
*** urulama has joined #openstack-keystone11:21
*** fhubik_brb is now known as fhubik11:22
*** Ephur has quit IRC11:26
*** fhubik is now known as fhubik_brb11:28
*** fhubik_brb is now known as fhubik11:40
*** fawadkhaliq has quit IRC11:41
*** fawadkhaliq has joined #openstack-keystone11:41
*** josecastroleon has quit IRC11:45
samueldmqmorning keystoners11:49
lhcheng_morning!11:49
xekmorning :)11:55
*** fhubik is now known as fhubik_brb12:00
*** fhubik_brb is now known as fhubik12:00
*** shunliz has joined #openstack-keystone12:07
*** EinstCrazy has quit IRC12:11
marekdlhcheng_: ?!12:11
marekdmorning?!12:11
marekdwhere are you?!12:11
*** josecastroleon has joined #openstack-keystone12:14
lhcheng_marekd: in Paris atm, going to work here remotely for the next couple of weeks12:15
marekdlhcheng_: wow, super!12:15
marekdlhcheng_: work or holiday?12:15
lhcheng_marekd: holiday, traveling just on the weekends12:16
marekdyy, i don't get it12:16
marekdso holiday full time, or working remotely mon-fri and holiday on the weekends?12:16
lhcheng_the latter :)12:17
marekdok :-)12:17
marekdwelcome to the old continent then :-)12:17
lhcheng_thank you12:17
lhcheng_you have more company in this tz for the next couple of weeks12:18
lhcheng_:D12:18
marekdlhcheng_: yep!12:18
marekdhappy!12:18
lhcheng_marekd: got the basic CRUD for mapping in horizon: https://review.openstack.org/#/c/248551/12:20
*** gildub has quit IRC12:21
lhcheng_I haven't added the code from Univ. of Kent yet,  I want to have a simple CRUD for the first pass so that I can continue with the federation protocol panel too.12:21
marekdhow can i search keystone bps and filter them by author?12:21
marekdlhcheng_: cool!12:23
lhcheng_ the BP search capability in launchpad is not great  :(12:25
marekdlhcheng_: yeah, but i found what i was looking for.12:25
marekdlhcheng_: so you are wokring from some paris based yahoo office or from your hotel?12:28
marekdlhcheng_: i commented12:29
*** gordc has joined #openstack-keystone12:31
lhcheng_cool, thanks for looking at the patch12:32
*** pauloewerton has joined #openstack-keystone12:34
*** EinstCrazy has joined #openstack-keystone12:34
*** pnavarro has joined #openstack-keystone12:41
*** aix has quit IRC12:47
*** aix has joined #openstack-keystone12:48
*** jerrygb has joined #openstack-keystone12:59
*** jerrygb has quit IRC12:59
*** jerrygb has joined #openstack-keystone12:59
*** jdennis has joined #openstack-keystone12:59
*** jerrygb_ has joined #openstack-keystone13:00
*** jerrygb has quit IRC13:03
*** fhubik is now known as fhubik_brb13:06
*** ninag has joined #openstack-keystone13:10
*** ayoung has quit IRC13:10
*** topol has joined #openstack-keystone13:14
*** ChanServ sets mode: +v topol13:14
samueldmqdstanek: you around ?13:16
dstaneksamueldmq: somewhat13:16
samueldmqdstanek: about https://review.openstack.org/#/c/15844213:16
samueldmqdstanek: k, you're quick!13:17
dstaneksamueldmq: looks like i need to fix that up13:18
samueldmqdstanek: just wanted to understand a bit better, for me it seems weird because the templated backend won't support write ops anymore13:18
dstaneksamueldmq: it already doesn't13:18
*** topol has quit IRC13:18
dstaneksamueldmq: if you do a write operation to add an endpoint it won't fail, but the data won't show up either13:20
samueldmqdstanek: why ? when I do create an endpoint, won't it appear in the catalog ?13:21
dstaneksamueldmq: i don't believe so no. and it shouldn't because it's templated13:22
samueldmqdstanek: hmm, templated means there is a sample catalog in a file, and that will be used for read ops13:22
samueldmqdstanek: and then write ops will have no effect13:22
dstaneksamueldmq: yes, and it gets parsed and put in self.templates which is how it generated the catalog13:23
samueldmqdstanek: cool, I will take a better look13:23
samueldmqdstanek: thanks for clarifying13:23
dstaneksamueldmq: being a subclass of kvs gives it "write", but it's really just a joke13:24
*** daemontool has quit IRC13:25
*** doug-fish has joined #openstack-keystone13:25
openstackgerritHenrique Truta proposed openstack/keystone: API support for project cascade delete  https://review.openstack.org/24424813:25
openstackgerritHenrique Truta proposed openstack/keystone: Manager support for project delete cascade  https://review.openstack.org/24414913:25
openstackgerritHenrique Truta proposed openstack/keystone: Add backend support for deleting a projects list  https://review.openstack.org/24591613:25
samueldmqdstanek: haha, yes :)13:25
*** urulama has quit IRC13:25
*** urulama has joined #openstack-keystone13:26
htrutahey stevemar, just saw your review in here https://review.openstack.org/#/c/248310/ that you suggest using the common code13:31
htrutastevemar: I have only one concern... seems like if we pass the attribute with the same value as it is, it raises an exception13:32
*** daemontool has joined #openstack-keystone13:38
*** fhubik_brb is now known as fhubik13:39
*** rdo_ has quit IRC13:42
*** rdo has joined #openstack-keystone13:43
*** jistr has quit IRC13:46
*** jdennis has quit IRC13:50
iurygregorymarekd, are you around?13:51
marekdyep13:51
marekdhi13:51
iurygregoryfor K2K in Liberty, i can't use anymore  WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /var/www/keystone/main/$1 ?13:52
iurygregorySP configuration13:52
iurygregoryin your link you point WSGIScriptAlias but not WSGIScriptAliasMatch..13:53
marekdwhat i mean is this:  /var/www/keystone/main/$113:54
marekdfirst of all i think the path depends on the distro13:54
marekdsecondly, there was some change recently13:54
*** fawadkhaliq has quit IRC13:55
*** fawadkhaliq has joined #openstack-keystone13:55
iurygregorydo you have some link about the changes in K2K for SP in Liberty?13:55
marekdiurygregory: also devstack /stable/liberty has this https://github.com/openstack-dev/devstack/blob/stable/liberty/files/apache-keystone.template#L813:55
marekdit's not change related to SP13:55
marekdit's a change related to wsgi starting script.13:55
iurygregoryoh ok13:56
*** jdennis has joined #openstack-keystone14:00
*** richm has joined #openstack-keystone14:02
iurygregorymarekd,  i'll let the template to match the path keystone in other distros when i figure out how to make work on redhat, because need other repo and in puppet we will not manage other repositories that are not related to keystone ^^14:10
marekdiurygregory: i don't follow. I just saw some switches if os == debian then, else if redhat then {}14:10
samueldmqdstanek: left a couple of comments there, hope it helps when doing a new patchset14:12
iurygregoryfor now only works on debian and do everything... on redhat we don't configure the virtualhost , just the keystone.conf for now, in the next patch i'll let configure on redhat14:12
*** daemontool has quit IRC14:12
*** daemontool has joined #openstack-keystone14:13
lbragstadjamielennox around?14:15
lbragstadjamielennox at least for a minute or two?14:15
lbragstadjamielennox it looks like we've gotten some feedback on our policy changes etherpad - https://etherpad.openstack.org/p/mitaka-ops-policy-modifications14:15
*** tellesnobrega is now known as tellesnobrega_af14:17
lbragstadjamielennox how do you think we should proceed with next steps? parse it individually and bring it to the next keystone meeting?14:17
*** tellesnobrega_af is now known as tellesnobrega14:17
lbragstadand come up with patterns?14:17
*** raildo is now known as raildo-afk14:20
*** raildo-afk is now known as raildo14:20
marekdiurygregory: aha14:24
marekdiurygregory: so make sur it works with newest openstack code on debian14:24
marekdiurygregory: cause i am not sure the path didn't change there either.14:24
marekdi just gave you headsup :-)14:25
*** ayoung has joined #openstack-keystone14:26
*** ChanServ sets mode: +v ayoung14:26
iurygregoryok marekd, i'll let the template get the value from the virtualhost tag in WSGIScriptAlias =)14:26
marekdwhatever works finr on a system is a good solution :-)14:26
iurygregory^^ tks for your review, about apache 2.4 i'll verify ^^14:27
marekdsure14:30
*** jasondotstar_afk is now known as jasondotstar14:33
*** alextricity_h has joined #openstack-keystone14:41
*** NM has quit IRC14:42
*** roxanaghe has joined #openstack-keystone14:48
*** alextricity_h has quit IRC14:49
*** fhubik has quit IRC14:50
*** roxanaghe has quit IRC14:53
*** aix has quit IRC14:54
*** petertr7 is now known as petertr7_away14:57
stevemarlbragstad: jamielennox was headed out for the evening when we last spoke14:58
*** shunliz has quit IRC15:01
lbragstadstevemar ah, makes sense15:01
*** aix has joined #openstack-keystone15:01
*** openstackgerrit has quit IRC15:02
lbragstadstevemar if you have any opinion on the operator feedback, i'd be happy to hear it :)15:02
*** petertr7_away is now known as petertr715:02
lbragstadstevemar just trying to figure out what the next steps should be15:02
*** openstackgerrit has joined #openstack-keystone15:03
stevemarlbragstad: you around all week, or off like everyone else? :)15:03
lbragstadI'm available today, tomorrow, and wednesday15:03
lbragstadoff thursday and taking friday, too15:03
stevemarlbragstad: whatcha talking about for op feedback?15:03
stevemarlbragstad: my sametime list is dead15:04
lbragstadstevemar ++ yeah, it's a ghost town here too15:04
lbragstadstevemar the policy pattern that we wanted to get feedback on from the policy session at the summit15:04
lbragstadstevemar the action item was that we would open up an etherpad for operators to put their policy changes into,15:04
lbragstadand let that sit for a while.15:05
lbragstadnext, jamielennox and I wanted to see if it were possible to find a pattern and abstract it15:05
lbragstadand propose it upstream15:05
*** breitz has joined #openstack-keystone15:08
*** btully has joined #openstack-keystone15:09
*** davechen has joined #openstack-keystone15:10
*** jaosorior has quit IRC15:11
*** jaosorior has joined #openstack-keystone15:12
*** ninag has quit IRC15:12
stevemarlbragstad: you can +A https://review.openstack.org/#/c/248312/, it'll actually pull in both and start merging them together15:12
*** jaosorior has quit IRC15:12
lbragstadstevemar done15:13
*** jaosorior has joined #openstack-keystone15:13
openstackgerritAjaya Agrawal proposed openstack/keystone: Remove assignments when deleting a domain  https://review.openstack.org/12743315:17
*** pumaranikar has joined #openstack-keystone15:17
*** EinstCrazy has quit IRC15:17
openstackgerritGrzegorz Grasza (xek) proposed openstack/keystone-specs: Online schema migration  https://review.openstack.org/24518615:19
*** urulama has quit IRC15:21
*** urulama has joined #openstack-keystone15:22
samueldmqstevemar: lbragstad: anything special in US this week ? (hence people taking off days)15:22
*** r-daneel has joined #openstack-keystone15:22
lbragstadsamueldmq thursday is Thanksgiving15:22
samueldmqlbragstad: I was recalling it had already happened in October15:25
samueldmqlbragstad: it actually did, but in Canada :)15:25
lbragstadsamueldmq US Thanksgiving is always the last Thursday of November15:25
davechenstevemar: interesting, my colleagues recommend me this: https://developer.ibm.com/opentech/2015/03/27/checklist-performing-openstack-code-reviews/15:27
*** slberger has joined #openstack-keystone15:28
davechenlbragstad: not going to take extra leaves?15:28
lbragstaddavechen i'm taking thursday and friday off15:28
davechenlbragstad: is it the offical holiday? I saw a lot of rackers take leave the whole week.15:29
lbragstadonly thursday is Thanksgiving, but most people take friday and/or the whole week off15:30
davecheni like the black friday, going to shop this thurday. :)15:31
samueldmqlbragstad: cool, nice to know15:33
samueldmqlbragstad: so this week is supposed to be a bit quiet here (mostly from Wed)15:33
stevemardavechen: hehe, glad that was recommended!15:33
lbragstaddavechen have fun! I avoid shopping like the plague15:34
stevemardavechen: but why was it recommended to you? you already do a great job :P15:34
*** mylu has joined #openstack-keystone15:34
*** davechen1 has joined #openstack-keystone15:36
*** jorge_munoz has joined #openstack-keystone15:36
*** davechen has quit IRC15:38
*** josecastroleon has quit IRC15:39
*** NM has joined #openstack-keystone15:39
davechen1lbragstad: sure, I dont have any experience about black friday, but looks like will be a lot of people there.15:40
lbragstaddavechen1 everyone should experience it at least once ;)15:41
*** davechen1 is now known as davechen15:41
stevemardavechen1: it can get crazy, :P15:41
bknudsonsomebody always gets run over in a parking lot15:41
bknudsonor trampled or something15:41
davechenyou scare me! bknudson15:42
stevemardavechen: be safe out there15:43
*** Daviey_ is now known as Daviey15:43
bknudsonhttps://www.google.com/search?q=black+friday+run+over+walmart+grand+forks&ie=utf-8&oe=utf-815:43
bknudsonhttp://www.nytimes.com/2008/11/29/business/29walmart.html?pagewanted=all15:43
davechenstevemar: thanks you, boss.15:43
davechenI just want to save money. :)15:44
bknudsonyou have to fight for the best deals15:44
*** topol has joined #openstack-keystone15:45
*** ChanServ sets mode: +v topol15:45
davecheni can imagine it's not easy to shop that day :)15:46
*** daemontool_ has joined #openstack-keystone15:48
*** navid_ has joined #openstack-keystone15:49
*** daemontool has quit IRC15:52
stevemartopol: topolizer!15:55
*** NM has quit IRC15:57
*** fawadkhaliq has quit IRC16:04
*** urulama has quit IRC16:04
*** urulama has joined #openstack-keystone16:05
*** petertr7 is now known as petertr7_away16:06
*** rcernin has quit IRC16:08
openstackgerritMerged openstack/keystone: Use standard credential_id parameter in jsonhome  https://review.openstack.org/24831116:10
notmorgano/16:10
*** mylu_ has joined #openstack-keystone16:10
*** navid_ has quit IRC16:11
stevemarnotmorgan: o/16:11
notmorganstevemar: o/!16:11
stevemarnotmorgan: hidey ho16:12
notmorgan(>^_^)/16:12
*** jaosorior has quit IRC16:12
*** Pablo|off| has joined #openstack-keystone16:14
topolstevemar16:14
*** mylu has quit IRC16:14
stevemartopol: ahoy mr meeting canceller16:14
*** Pablo|off| is now known as pcaruana16:15
topolyes16:16
*** EinstCrazy has joined #openstack-keystone16:18
topolsounds like stevemar WANTS more meetings...16:18
topolstevemar... calling my admin now16:19
notmorgantopol: i'll just schedule stevemar for tons of meetings that no one else will go to... he has his email setup to auto-accept them doesn't he? >.>16:19
* notmorgan used to enjoy booking people for meetings at 3am when they auto accepted meeting invites16:20
openstackgerritSteve Martinelli proposed openstack/keystone-specs: clean up implied roles spec  https://review.openstack.org/24879816:20
openstackgerritSteve Martinelli proposed openstack/keystone-specs: move implied roles spec to mitaka and clean it up  https://review.openstack.org/24879816:20
*** petertr7_away is now known as petertr716:21
stevemarnotmorgan: in fact, i do not have it set to auto-accept :P16:21
stevemartopol: notmorgan clean up for you to review :P ^16:21
notmorganstevemar: you should fix that so i can book you for 3am meetings randomly16:21
notmorganstevemar:  you want me to be happy right? :P16:21
stevemarundoubtedly16:22
stevemarnotmorgan: you on east coast time?16:22
topolnotmorgan, Im just jealous how you and Deva are drinking all kinds of cool stuff yet I didnt spend much time with you in Tokyo to participate :-(16:22
notmorganstevemar: uhm... about saltlake city time.16:22
notmorganstevemar: for the moment.16:22
notmorganbut that will change in the next few minutes16:23
*** EinstCrazy has quit IRC16:23
stevemarnotmorgan: coolio16:24
*** aix has quit IRC16:24
notmorganstevemar: i was sleeping but someone was eating something that smelled so bad it woke me up... from a drug induced sleep.16:25
notmorganstevemar: /me glares at other passengers on the plane16:25
*** navid_ has joined #openstack-keystone16:26
stevemarnotmorgan: i'm surprised that food made it past TSA16:29
*** ryanpetrello has quit IRC16:30
*** jistr has joined #openstack-keystone16:33
*** navid_ has quit IRC16:37
*** navid_ has joined #openstack-keystone16:38
*** fawadkhaliq has joined #openstack-keystone16:41
openstackgerritMerged openstack/keystone: Use idp_id and protocol_id in jsonhome  https://review.openstack.org/24831216:43
notmorganstevemar: that email i told you i was going to send...16:43
notmorganstevemar: sent it.16:43
notmorganstevemar: it was food served by the airline16:44
*** petertr7 is now known as petertr7_away16:44
*** lhcheng_ has quit IRC16:46
*** lhcheng has joined #openstack-keystone16:47
*** ChanServ sets mode: +v lhcheng16:47
openstackgerritDave Chen proposed openstack/keystone: Update docs for legacy keystone extensions  https://review.openstack.org/24790016:47
*** gordc has quit IRC16:47
*** petertr7_away is now known as petertr716:49
*** gordc has joined #openstack-keystone16:51
*** ankita_wagh has joined #openstack-keystone16:53
*** thiagop has joined #openstack-keystone16:53
*** mylu_ has quit IRC16:54
*** mylu has joined #openstack-keystone16:54
mfischnotmorgan: your email is going to be a good convo16:55
mfischI happen to disagree with it, but its a dicussion we should have16:55
mfischdiscussion...16:55
*** topol has quit IRC16:57
stevemarmfisch: i think it'll have to be a project to project case16:57
mfischagree16:57
stevemarin keystone we could do it16:57
stevemarbut maybe not for the newer projects16:58
*** mylu has quit IRC16:59
notmorganstever, mfisch:it is def a project-by-project basis17:01
mfischabout to reply to that effect17:02
notmorganthat is why i phrased it as [keystone] but also tagged all17:03
*** ryanpetrello has joined #openstack-keystone17:04
mfischPTL emeritus lol17:05
dstanekstevemar: yeah, so i'm not sure how my thoughts on versioning fit into the docs yet, so i am making a gist first17:05
*** daemontool_ has quit IRC17:06
notmorganmfisch: i stole that from jeblair17:07
*** spandhe has joined #openstack-keystone17:07
*** spandhe has quit IRC17:07
*** daemontool has joined #openstack-keystone17:08
notmorganmfisch: he has it on his business cards17:08
openstackgerritSteve Martinelli proposed openstack/keystone-specs: Create an attic for APIs we don't support  https://review.openstack.org/24882817:11
notmorganmfisch: notably i kindof want to abolish the policy for keystoneauth and open the door for other highly specialized libs.17:12
stevemardstanek: i'm lacking the context, versioning and docs?17:12
dstanekstevemar: the driver versioning we were talking about on Friday17:12
stevemarahhhh17:12
stevemarright17:12
*** ir2ivps8 has joined #openstack-keystone17:13
*** jasonsb has joined #openstack-keystone17:13
notmorganstevemar: gonna want to do a KSA release if we can after the holiday17:13
notmorganstevemar: if we can land the last of these outstanding things17:13
notmorganstevemar: i'll propose it up but just an FYI17:13
*** obedmr has joined #openstack-keystone17:17
dstanekmfisch: i actually don't think you are correct in the case of keystone, but the fact that you stated it validates my point17:17
*** jasonsb has quit IRC17:18
obedmrhi there, is there any reason to keep using the "_member_" role instead of "user" role?17:18
notmorganobedmr: it is a holdover for how we migrated to the v3 things. i think we have done away with it's need now.  but ayoung can you confirm?17:19
notmorgancc bknudson  ^17:19
*** jasonsb has joined #openstack-keystone17:20
bknudsonI think if you use v2 to create a user with e default project it gets the _member_ role17:20
openstackgerritSteve Martinelli proposed openstack/keystone-specs: move implied roles spec to mitaka and clean it up  https://review.openstack.org/24879817:21
bknudsonas far as I know by default there's nothing outside of keystone that cares about _member_ role (or any other role)17:21
*** rcernin has joined #openstack-keystone17:21
notmorganbknudson: i think we can even move the v2 stuff back to "member"17:22
notmorganif we needed to17:22
obedmrbknudson: ok, got it, so, I'm working with horizon and it is using _member_ as default. Of course they have a note in their docs for changing it (http://docs.openstack.org/liberty/install-guide-ubuntu/horizon-install.html)17:22
notmorganidon't even know what the migration need was for _member_ at this point17:22
mfischdstanek: not correct about what?17:22
mfischwrt my email?17:22
dstanekmfisch: yes17:22
mfischI don't think keystone has political pressure to merge stuff no17:22
bknudsonthat's a weird config option, but maybe that makes it easier for horizon users.17:23
mfischI do know for sure that other projects do17:23
dstanekmfisch: that's probably true.17:24
mfischbut any company is a new hot-shot VP away from telling cores to merge something... and while many of us could just say "no" and quit, some people can't17:24
obedmrok, thanks folks for your help, I will send some comments to Horizon mailing list17:24
bknudsonobedmr: there's a config option in keystone to use a different role for v2 users: http://git.openstack.org/cgit/openstack/keystone/tree/etc/keystone.conf.sample#n4117:25
bknudsonso you could set that to your "user" role.17:25
dstanekmfisch: just the fact that you think that's possible is the protection i was talking about17:25
*** jerrygb_ has quit IRC17:26
mfischyep17:26
ayoungobedmr, no reason17:27
ayoungMember was in common use by Horizon, which is why we wanted to match, but not conflict with it17:27
ayoungjamielennox has a proposal for an expanded set of basic roles for openstack17:28
stevemarnotmorgan: its gonna be the first release of KSA with saml2 and kerberos in 'extras', hope no one freaks out :D17:28
stevemarayoung: poke: https://review.openstack.org/#/c/248798/17:28
*** petertr7 is now known as petertr7_away17:29
*** aginwala has joined #openstack-keystone17:29
notmorganstevemar: that is kindof why i wanted it out in december before holidays17:30
notmorganso we can smush anything crazy befoe people disappear17:30
notmorganand we don't need to wait until next year17:30
ayoungstevemar, ooh that makes me happy!17:30
notmorgan(cc mordred )^17:30
*** aginwala has quit IRC17:30
ayoungnotmorgan, the migration for _member_ was around migration 14 or so....ancient history17:32
notmorganayoung: exactly17:32
*** NM has joined #openstack-keystone17:33
*** jerrygb has joined #openstack-keystone17:33
dstaneki thought we still used _member_ in certain cases17:35
ayoungdstanek, it is configurable17:35
ayoungdstanek, for V2 add user to tenant17:35
dstanekayoung: ah, ok17:35
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Translation-friendly formatting of msg string  https://review.openstack.org/24031617:35
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/24883417:36
*** jerrygb has quit IRC17:36
*** ankita_wagh has quit IRC17:37
*** e0ne has quit IRC17:39
*** jerrygb has joined #openstack-keystone17:40
*** petertr7_away is now known as petertr717:41
*** pnavarro has quit IRC17:41
*** roxanaghe has joined #openstack-keystone17:42
*** aix has joined #openstack-keystone17:45
*** jerrygb has quit IRC17:45
openstackgerritSteve Martinelli proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/24883417:47
openstackgerritTom Cocozzello proposed openstack/keystone: Improve code and comments in test_catalog  https://review.openstack.org/24884617:48
openstackgerritMerged openstack/keystoneauth: Cleanup time patching  https://review.openstack.org/24846717:53
*** ankita_wagh has joined #openstack-keystone17:57
*** NM has quit IRC17:57
*** spandhe has joined #openstack-keystone17:57
*** tsymancz1k has quit IRC17:58
*** aginwala has joined #openstack-keystone18:01
*** shaleh has joined #openstack-keystone18:02
notmorgansoooooo since i have skipped every single IRC meeting for a bit18:03
notmorganis Keystone doing a midcycle and if so where?18:03
notmorganand when18:03
breton_notmorgan: the ptl said in texas18:07
breton_I suggested to do it in canada and he said it's too cold there :(18:07
breton_I liked Vancouver :(18:07
notmorganbreton_:so, san antonio again?18:07
notmorganstevemar: ^18:07
openstackgerritMerged openstack/keystone-specs: move implied roles spec to mitaka and clean it up  https://review.openstack.org/24879818:09
*** EinstCrazy has joined #openstack-keystone18:10
*** jasonsb has quit IRC18:11
openstackgerritayoung proposed openstack/keystone-specs: Tokens with subsets of roles or endpoints  https://review.openstack.org/18697918:15
*** EinstCrazy has quit IRC18:17
*** aix has quit IRC18:18
*** tsymanczyk has joined #openstack-keystone18:18
*** tsymanczyk is now known as Guest7058518:18
*** e0ne has joined #openstack-keystone18:22
*** fawadkhaliq has quit IRC18:24
*** fawadkhaliq has joined #openstack-keystone18:24
*** jerrygb has joined #openstack-keystone18:27
*** fawadkhaliq has quit IRC18:28
lbragstadnotmorgan i think stevemar was setting things up for Austin18:28
lbragstadsince IBM has a campus there18:29
*** fawadkhaliq has joined #openstack-keystone18:29
*** e0ne has quit IRC18:29
*** fawadkhaliq has quit IRC18:29
*** e0ne has joined #openstack-keystone18:29
samueldmqis there a policy for abandoning reviews with negative scores and without any new change in the last X days/weeks (perhaps 1 month) ?18:31
samueldmqstevemar: dstanek: ^18:33
*** NM has joined #openstack-keystone18:35
*** aginwala has quit IRC18:36
*** topol has joined #openstack-keystone18:38
*** ChanServ sets mode: +v topol18:38
bknudsonstevemar: what did you do to https://review.openstack.org/#/c/248834/ ?18:40
*** petertr7 is now known as petertr7_away18:41
*** wuhg has quit IRC18:41
*** jerrygb has quit IRC18:42
*** liemmn has joined #openstack-keystone18:42
samueldmqbknudson: I *think* it can be related to https://review.openstack.org/#/c/247304/18:43
samueldmqbknudson: because that should have merged, and the bot tried to update it again, to remove it; but actually it didn't get merge18:43
samueldmqbknudson: because that should have merged/the bot assumed that had merged18:44
bknudsonok, fix the bot18:44
*** liemmn_ has joined #openstack-keystone18:44
*** liemmn has quit IRC18:44
*** liemmn_ has left #openstack-keystone18:44
samueldmqbknudson: actually I didn't know gerrit accepted patches with no changes18:45
*** liemmn has joined #openstack-keystone18:45
*** NM has quit IRC18:46
*** jerrygb has joined #openstack-keystone18:46
*** boris-42 has quit IRC18:48
*** Guest70585 has quit IRC18:50
*** jerrygb has quit IRC18:51
*** mylu has joined #openstack-keystone18:53
*** daemontool has quit IRC18:54
openstackgerritHenrique Truta proposed openstack/keystone: Replace tenant for project in resource files  https://review.openstack.org/24829518:59
*** jerrygb has joined #openstack-keystone19:03
*** mylu has quit IRC19:05
*** mylu has joined #openstack-keystone19:06
*** mylu has quit IRC19:06
*** mylu has joined #openstack-keystone19:06
stevemarbknudson: the bot is acting weird19:09
stevemarbknudson: ps1 was in merge conflict19:09
bknudsonstevemar: ok, but now it has no change19:09
bknudsononly a commit message19:09
stevemarbknudson: yes, i noticed that19:09
*** jasonsb has joined #openstack-keystone19:10
bknudsonstevemar: I abandoned it.19:10
stevemarbknudson: thank you19:10
stevemarbknudson: theres something wrong with the way it's proposing patches, i haven't had time to poke around at it yet19:11
*** ayoung has quit IRC19:14
*** jbell8 has joined #openstack-keystone19:15
*** tsymancz1k has joined #openstack-keystone19:15
*** jasonsb_ has joined #openstack-keystone19:15
*** urulama has quit IRC19:15
*** jasonsb has quit IRC19:15
*** urulama has joined #openstack-keystone19:16
stevemartjcocozz: you hide very well on irc19:17
tjcocozzstevemar, Similar to batman :-)  I hid in the shadows19:17
tjcocozzhide19:17
stevemarhttp://36.media.tumblr.com/tumblr_lp6pvwTGgP1r02m6bo1_250.jpg19:18
*** tjcocozz_ has joined #openstack-keystone19:18
shalehthat was a really great batman show19:19
stevemarshaleh: it was fantastic19:19
*** josecastroleon has joined #openstack-keystone19:19
shalehstevemar: regarding your comment about my TODO comments, do you want me to submit a new patch with better text?19:20
tjcocozzstevemar, took me a while to dig this out of my imgur.  http://i.imgur.com/BqNNpYm.gif19:24
shalehtjcocozz: *face palm*19:24
shalehtjcocozz: was that a blooper reel piece or just an internet creation?19:25
tjcocozzshaleh, I am not 100% sure, probably an internet creation19:26
stevemartjcocozz: hehe, that was good19:33
stevemarshaleh: i don't remember what my comments were19:33
stevemarshaleh: probably new patch, i always want new patches19:34
shalehstevemar: heh. Can do.19:34
samueldmqstevemar: would you mind to take a look at my comment on bug #1410029 ?19:34
openstackbug 1410029 in OpenStack Identity (keystone) "Unnecessary conflict wrapper on assignment driver delete_project() method" [Low,In progress] https://launchpad.net/bugs/1410029 - Assigned to Ajaya Agrawal (ajayaa)19:34
samueldmqor any other core ^19:34
samueldmqI think it is invalid, and we have a patch for it already19:35
bknudsonif it's invalid how can we have a fix for it?19:35
stevemarbknudson: i'll make release notes for 21058119:35
shalehbknudson: it thwaps the submitter and deletes the bug?19:35
samueldmqbknudson: it isn't considered as invalid at the moment19:36
samueldmqbknudson: I think it is, and that's why I am asking someone else to take a look19:37
*** aginwala has joined #openstack-keystone19:39
*** simondodsley_ has joined #openstack-keystone19:41
*** Dave has quit IRC19:41
*** simondodsley_ is now known as simondodsley19:45
*** ayoung has joined #openstack-keystone19:45
*** ChanServ sets mode: +v ayoung19:45
*** aginwala has quit IRC19:45
*** petertr7_away is now known as petertr719:45
*** Dave has joined #openstack-keystone19:46
bknudsonsamueldmq: if you want to propose a new wrapper then go ahead. Keystone should already be converting any unexpected exceptions from DB to 50019:47
bknudsonso I don't think it is invalid.19:47
*** josecastroleon has quit IRC19:49
openstackgerritSteve Martinelli proposed openstack/keystone: Accepts Group IDs from the IdP without domain  https://review.openstack.org/21058119:49
openstackgerritSteve Martinelli proposed openstack/keystone: Accepts Group IDs from the IdP without domain  https://review.openstack.org/21058119:50
stevemarbknudson: added the release note to ^19:51
stevemarbknudson: also, if you could revisit my release notes for mitaka thus far: https://review.openstack.org/#/c/246749/19:51
openstackgerritSean Perry proposed openstack/keystone: Cleanup use of service refs  https://review.openstack.org/24888919:52
*** aginwala has joined #openstack-keystone19:54
*** e0ne has quit IRC19:55
*** dims has joined #openstack-keystone19:56
openstackgerritPriti Desai proposed openstack/keystone: Fix for listing role assignments by project admin  https://review.openstack.org/24889219:59
*** maxabidi has joined #openstack-keystone20:01
*** ayoung has quit IRC20:01
*** reed has joined #openstack-keystone20:06
*** mylu has quit IRC20:06
reedhello folks20:06
*** mylu has joined #openstack-keystone20:06
reedis this spec the most up-to-date info on multitenancy? https://specs.openstack.org/openstack/keystone-specs/specs/juno/hierarchical_multitenancy.html20:06
*** ankita_wagh has quit IRC20:07
reedgoogle finds what seems to be an older wiki page  https://wiki.openstack.org/wiki/HierarchicalMultitenancy20:07
reedor at least, the wiki page doesn't link back to the specs page20:09
*** mylu has quit IRC20:11
stevemarreed: the link you pasted to specs was for juno, there have been a few specs proposed to our backlog for HMT: https://specs.openstack.org/openstack/keystone-specs/#untargeted-specifications20:14
stevemarreed: such as: materialized_path and reseller20:15
reedthanks stevemar20:16
samueldmqbknudson: thanks for looking at it20:18
samueldmqbknudson: if it isn't invalid (proposing to remove the annotation on delete_project), then we don't need another wrapper ?20:19
stevemarbknudson: you think [bug 123456] and [bp xyz] for release notes format?20:19
openstackbug 123456 in xine-lib (Ubuntu) "podcast crashes amarok" [Undecided,Fix released] https://launchpad.net/bugs/12345620:19
samueldmqbknudson: those two sentences seemed a bit contradictory tome20:19
bknudsonsamueldmq: I don't think we'll need another wrapper... I'd need to do an experiment to know for sure.20:20
bknudsonstevemar: y, I like that20:20
*** mylu has joined #openstack-keystone20:20
stevemarbknudson: alright, i'll change them up, agreed we need a standard way.20:20
bknudsonI think it'll look better. Something we can always fix up at the end of the release.20:21
*** jistr has quit IRC20:23
*** ayoung has joined #openstack-keystone20:27
*** ChanServ sets mode: +v ayoung20:27
*** gordc has quit IRC20:30
bknudsonmaybe we should change reno to allow specifying the bug for the line and have it render however it wants.20:32
*** ankita_wagh has joined #openstack-keystone20:36
openstackgerritSteve Martinelli proposed openstack/keystone: Add release notes for mitaka thus far  https://review.openstack.org/24674920:41
*** e0ne has joined #openstack-keystone20:42
*** petertr7 is now known as petertr7_away20:43
*** jasonsb_ has quit IRC20:44
*** mylu has quit IRC20:44
*** mylu has joined #openstack-keystone20:46
*** petertr7_away is now known as petertr720:46
*** ankita_wagh has quit IRC20:52
*** ankita_wagh has joined #openstack-keystone20:53
stevemarbknudson: ^20:59
*** spandhe_ has joined #openstack-keystone20:59
*** spandhe has quit IRC21:01
*** spandhe_ is now known as spandhe21:01
*** jbell8 has quit IRC21:08
*** e0ne has quit IRC21:08
*** urulama is now known as urulama__21:10
*** krotscheck has quit IRC21:10
*** andreaf has quit IRC21:11
*** anteaya has quit IRC21:11
*** jasondotstar has quit IRC21:12
*** krotscheck has joined #openstack-keystone21:17
*** e0ne has joined #openstack-keystone21:17
dstanekbknudson: that's a great idea21:17
bknudsondstanek: I'll put it on my list!21:18
bknudson(it's a long list)21:18
*** jasondotstar has joined #openstack-keystone21:18
*** diegows has joined #openstack-keystone21:19
*** andreaf has joined #openstack-keystone21:19
dstaneki can only imagine21:19
*** pauloewerton has quit IRC21:21
stevemarbknudson: thanks, i'll clean it up a bit21:21
*** jerrygb has quit IRC21:22
openstackgerritOlivier Pilotte proposed openstack/keystone: Accepts Group IDs from the IdP without domain  https://review.openstack.org/21058121:23
openstackgerritDave Chen proposed openstack/keystone: Correct docstring warnings  https://review.openstack.org/24433321:24
openstackgerritDave Chen proposed openstack/keystone: Using the right format to render the docstring correctly  https://review.openstack.org/22622521:24
openstackgerritOlivier Pilotte proposed openstack/keystone: Accepts Group IDs from the IdP without domain  https://review.openstack.org/21058121:25
*** jerrygb has joined #openstack-keystone21:26
*** anteaya has joined #openstack-keystone21:26
*** bradjones has quit IRC21:27
*** bradjones has joined #openstack-keystone21:29
*** bradjones has quit IRC21:29
*** bradjones has joined #openstack-keystone21:29
openstackgerritSteve Martinelli proposed openstack/keystone: Add release notes for mitaka thus far  https://review.openstack.org/24674921:29
*** jerrygb has quit IRC21:31
*** david-lyle has quit IRC21:31
*** david-lyle has joined #openstack-keystone21:34
*** urulama__ has quit IRC21:36
*** urulama__ has joined #openstack-keystone21:36
*** navid__ has joined #openstack-keystone21:43
*** dims_ has joined #openstack-keystone21:43
*** thiagop has quit IRC21:43
*** e0ne has quit IRC21:43
*** navid__ has quit IRC21:44
*** navid__ has joined #openstack-keystone21:44
*** dims has quit IRC21:44
*** navid_ has quit IRC21:45
*** navid__ is now known as navid_21:46
mnaseris there any concept in keystone where i can store extra attributes for a specific user/tenant/project?21:46
*** EinstCrazy has joined #openstack-keystone21:46
shalehmnaser: https://bugs.launchpad.net/python-keystoneclient/+bug/118031721:47
openstackLaunchpad bug 1180317 in python-keystoneclient "keystone supports extra attributes for tenants, but keystone client does not" [Wishlist,Fix released] - Assigned to Charles V Bock (charles-v-bock)21:47
shalehmnaser: read through the linked items, you should find what you need21:47
mnasershaleh: that's perfect, thank you so much!21:47
shalehmnaser: np21:48
openstackgerritDave Chen proposed openstack/keystone: Correct docstring warnings  https://review.openstack.org/24433321:48
*** EinstCrazy has quit IRC21:51
*** mylu has quit IRC21:55
*** david-lyle has quit IRC21:55
*** mylu has joined #openstack-keystone21:55
*** maxabidi has quit IRC21:56
*** mylu_ has joined #openstack-keystone21:57
*** mylu has quit IRC21:57
jamielennoxlbragstad: you still here/21:59
*** harlowja_ has joined #openstack-keystone21:59
*** harlowja has quit IRC21:59
lbragstadjamielennox yep21:59
jamielennoxlbragstad: so i put up a basic review: https://review.openstack.org/#/c/245629/22:00
jamielennoxlbragstad: just because its going to take a lot of time to get through openstack-specs and i wanted to point some people at the idea22:01
jamielennoxand see if there are any dev opinions as well22:01
raildolhcheng, ping, are  you around?22:01
openstackgerritPriti Desai proposed openstack/keystone: Fix for listing role assignments by project admin  https://review.openstack.org/24889222:01
lbragstadjamielennox ah, good idea22:01
jamielennoxlbragstad: so far not much22:01
*** david-lyle has joined #openstack-keystone22:03
jamielennoxlbragstad: you want to have a quick read through that, and we'll go through what's on the etherpad22:03
lbragstadjamielennox yeah, I can do that22:04
shalehjamielennox: good to see this conversation continuing22:04
*** david-lyle has quit IRC22:04
*** mylu_ has quit IRC22:05
jamielennoxlbragstad: didn't mean to cut you out in any way writing that up already22:05
*** mylu has joined #openstack-keystone22:05
shalehjamielennox: it was interesting listening to the operators in the various chats. While there is this idea that they don't edit policy nearly all of them had come up with a default policy tweaked from what keystone shipped22:05
lbragstadjamielennox no not at all, I was just curious where everything stood22:05
samueldmqstevemar: left a couple of questions on #24674922:05
lbragstadjamielennox I knew we had action items and it looked like the operator feedback was getting stale, so i figured it was time to move on to the next phase of that discussion22:06
jamielennoxthere are still a few notable ops that never added their changes22:06
jamielennoxi was going to show the spec to a few keystoners (not done) and get a few other eyes on it22:06
*** navid__ has joined #openstack-keystone22:06
*** navid__ has left #openstack-keystone22:06
jamielennoxthen put a final call out to the ops list and see if they want to add more to the etherpad or have other comments22:06
*** petertr7 is now known as petertr7_away22:06
*** navid_ has quit IRC22:06
*** mylu has quit IRC22:06
*** mylu has joined #openstack-keystone22:07
*** tjcocozz_ has quit IRC22:07
lbragstadjamielennox that sounds like a good plan22:08
jamielennoxlbragstad: so i don't really know if we can/should support any of the "elevated" rules22:10
jamielennoxelevated seems somewhat arbitrary22:11
*** jerrygb has joined #openstack-keystone22:11
*** mylu has quit IRC22:11
jamielennoxi also don't think we can wait for ayoung's is_admin project22:12
*** ayoung has quit IRC22:12
mnaser2015-11-23 22:11:42.028 25060 WARNING oslo_config.cfg [req-dfd9205b-fbdb-4a49-8345-50bd7ef6abb5 - - - - -] Option "username" from group "keystoneclient" is deprecated. Use option "username" from group "keystoneclient".22:12
mnaserare my eyes tricking me?22:12
lbragstadjamielennox where do you have the "elevated" roles?22:12
*** navid_ has joined #openstack-keystone22:12
jamielennoxlbragstad: i don't, they're like line 100 in etherpad22:13
jamielennoxmnaser: wait - what22:13
mnaserim kinda working off of this - http://www.jamielennox.net/blog/2014/09/15/how-to-use-keystoneclient-sessions22:14
jamielennoxmnaser: yea, it's just the message that's weird22:15
mnaseri havent had much luck .. http://paste.openstack.org/show/479793/22:15
mnaserLOG.debug(ks_auth) gives <keystoneclient.auth.identity.v3.Password object at 0x7f0cbb3c3650> .. so im sorta confused why it says there isnt one22:16
*** aginwala_ has joined #openstack-keystone22:16
jamielennoxyea, it looks right to me22:18
jamielennoxmnaser: is the code up somewhere?22:18
jamielennoxor can you isolate it a bit that i could urn it22:19
mnaserlet me try to get it more isolated (that might help me fix it as well)22:19
*** rcernin has quit IRC22:20
*** aginwala has quit IRC22:20
*** aginwala_ has quit IRC22:21
*** david-lyle has joined #openstack-keystone22:21
*** aginwala has joined #openstack-keystone22:21
mnaserugh22:24
mnaserjamielennox: session=session22:24
mnaservs session=ks_session22:24
mnasersession = the imported module22:24
mnasero-o-p-s22:24
*** david-lyle has quit IRC22:25
mnaserjamielennox: btw, auth_url is an option that's needed which is not listed in the blog post, just an fyi22:25
jamielennoxah :)22:25
jamielennoxoh! how has that never been pointed out before22:25
jamielennoxmnaser: want to leave it in comments?22:25
mnasersure22:25
jamielennoxit's kind of weird that it made it that far if you were passing the module around22:26
mnaseri know right?22:26
*** mylu has joined #openstack-keystone22:27
jamielennoxmnaser: are you still seeing the weird deprecation msg?22:28
mnaseryup :\22:28
jamielennoxso i think it might be trying to say user_name there somewhere22:29
jamielennoxi will need to look into that one22:29
jamielennoxworking otherwise?22:30
mnaserposted a comment and yes, it seems to be working22:30
jamielennoxexcellent22:32
mnaseri am still doing some more things, right now generating a session per request so i'm going to move it to a single session/single client22:33
mnaserbut i'll report if any other weird stuff come up22:33
jamielennoxyea, i try to make the sessions fairly long running as that auth is reusable and will auto reauthenticate if it expires22:34
*** topol has quit IRC22:34
mnaserperfect, its global now and its single auth and its great that the auth reauth is taken care of... thank you jamielennox22:35
jamielennoxnp22:36
*** mylu has quit IRC22:38
*** mylu has joined #openstack-keystone22:40
*** woodster_ has joined #openstack-keystone22:43
stevemarnotmorgan: still have your old form for the mid-cycle?22:44
notmorganNope :(22:45
notmorganSorry22:45
*** mylu has quit IRC22:46
*** mylu has joined #openstack-keystone22:47
*** josecastroleon has joined #openstack-keystone22:49
*** mylu has quit IRC22:51
*** josecastroleon has quit IRC22:54
*** dims_ has quit IRC22:55
*** harshs has joined #openstack-keystone23:01
harshshi, does anybody use uwsgi instead of mod_wsgi behind apache for keystone deployment?23:02
*** david-lyle has joined #openstack-keystone23:03
*** slberger has left #openstack-keystone23:04
*** david-lyle has quit IRC23:05
shalehharshs: https://review.openstack.org/#/c/206181/23:05
*** tellesnobrega is now known as tellesnobrega_af23:08
*** ayoung has joined #openstack-keystone23:10
*** ChanServ sets mode: +v ayoung23:10
harshsshaleh: thanks for pointing me to the spec.23:10
shalehharshs: np. If you can live without the apache mods for auth it SHOULD be possible. As you can see, some of us are interested in it too.23:11
shalehharshs: voices saying it works and for which use cases are definitely helpful23:12
openstackgerritJamie Lennox proposed openstack/keystoneauth: Allow prompting for password when CLI loading  https://review.openstack.org/24852423:13
openstackgerritJamie Lennox proposed openstack/keystoneauth: Add documentation to Opt  https://review.openstack.org/24852223:13
openstackgerritJamie Lennox proposed openstack/keystoneauth: Tweak the way plugin attributes are loaded  https://review.openstack.org/24852323:13
stevemarnotmorgan: does mid-cycle related content just go to the -dev mailing list ?23:13
harshsshaleh: definitely makes sense. it would be great to know the use cases and if people are already using alternatives23:15
*** doug-fish has quit IRC23:17
*** navid_ has quit IRC23:17
*** david-lyle has joined #openstack-keystone23:23
jamielennoxstevemar: when are you thinking?23:23
stevemarjamielennox: for midcycle23:24
stevemarm2 is due 19-21,23:24
stevemarso maybe the week after, or possibly that week23:24
*** obedmr has quit IRC23:24
*** dims_ has joined #openstack-keystone23:25
*** david-lyle has quit IRC23:25
*** dims_ has quit IRC23:26
*** dgonzalez has quit IRC23:33
*** EinstCrazy has joined #openstack-keystone23:34
*** diegows has quit IRC23:35
*** david-lyle has joined #openstack-keystone23:35
*** navid_ has joined #openstack-keystone23:37
*** navid__ has joined #openstack-keystone23:37
*** jgriffith is now known as jgriffith_away23:38
*** simondodsley has quit IRC23:38
*** david-lyle has quit IRC23:41
*** david-ly_ has joined #openstack-keystone23:41
*** EinstCrazy has quit IRC23:45
*** davechen has quit IRC23:53
*** davechen has joined #openstack-keystone23:54
*** aginwala has quit IRC23:56
*** pumaranikar has quit IRC23:56
*** aginwala has joined #openstack-keystone23:58
*** navid_ has quit IRC23:59
*** diegows has joined #openstack-keystone23:59
*** navid__ has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!