| *** davechen1 has joined #openstack-keystone | 00:05 | |
| *** davechen has quit IRC | 00:07 | |
| *** mylu has quit IRC | 00:07 | |
| *** mylu has joined #openstack-keystone | 00:08 | |
| *** mylu has quit IRC | 00:10 | |
| *** mylu has joined #openstack-keystone | 00:10 | |
| *** btully has quit IRC | 00:12 | |
| *** jdennis has quit IRC | 00:13 | |
| *** jdennis has joined #openstack-keystone | 00:14 | |
| *** btully has joined #openstack-keystone | 00:14 | |
| *** markvoelker has joined #openstack-keystone | 00:17 | |
| *** markvoelker has quit IRC | 00:21 | |
| *** diegows has joined #openstack-keystone | 00:22 | |
| *** diegows has quit IRC | 00:39 | |
| *** jimbaker has quit IRC | 00:56 | |
| *** lhcheng_ has quit IRC | 01:02 | |
| *** jimbaker has joined #openstack-keystone | 01:02 | |
| *** jimbaker has quit IRC | 01:02 | |
| *** jimbaker has joined #openstack-keystone | 01:02 | |
| notmorgan | stevemar: you should approve this: https://review.openstack.org/#/c/250476/ with the sigmavirus24_awa +1 | 01:12 |
|---|---|---|
| notmorgan | who here wants to help me finish configuring neutron? | 01:16 |
| notmorgan | cause... | 01:16 |
| notmorgan | neutron :( | 01:16 |
| *** mylu has quit IRC | 01:38 | |
| *** dims has joined #openstack-keystone | 01:38 | |
| *** mylu has joined #openstack-keystone | 01:39 | |
| *** markvoelker has joined #openstack-keystone | 01:45 | |
| *** dims has quit IRC | 01:52 | |
| *** mylu has quit IRC | 01:56 | |
| *** mylu has joined #openstack-keystone | 01:56 | |
| *** mylu_ has joined #openstack-keystone | 01:57 | |
| *** henrynash has quit IRC | 02:00 | |
| *** mylu_ has quit IRC | 02:00 | |
| *** mylu has quit IRC | 02:01 | |
| *** jimbaker has quit IRC | 02:06 | |
| *** henrynash has joined #openstack-keystone | 02:09 | |
| *** ChanServ sets mode: +v henrynash | 02:09 | |
| *** henrynash has quit IRC | 02:10 | |
| *** jimbaker has joined #openstack-keystone | 02:12 | |
| *** jimbaker has quit IRC | 02:12 | |
| *** jimbaker has joined #openstack-keystone | 02:12 | |
| *** EinstCrazy has joined #openstack-keystone | 02:13 | |
| *** mylu has joined #openstack-keystone | 02:28 | |
| *** mylu has quit IRC | 02:35 | |
| *** mylu has joined #openstack-keystone | 02:35 | |
| *** mylu_ has joined #openstack-keystone | 02:38 | |
| *** mylu has quit IRC | 02:40 | |
| *** lhcheng has joined #openstack-keystone | 02:48 | |
| *** ChanServ sets mode: +v lhcheng | 02:48 | |
| *** lhcheng has quit IRC | 02:52 | |
| *** dims has joined #openstack-keystone | 02:55 | |
| *** jimbaker has quit IRC | 03:01 | |
| *** jimbaker has joined #openstack-keystone | 03:02 | |
| *** jimbaker has quit IRC | 03:03 | |
| *** jimbaker has joined #openstack-keystone | 03:03 | |
| *** davechen1 has quit IRC | 03:18 | |
| *** davechen has joined #openstack-keystone | 03:19 | |
| *** btully has quit IRC | 03:24 | |
| *** btully has joined #openstack-keystone | 03:25 | |
| *** dims has quit IRC | 03:34 | |
| *** dims has joined #openstack-keystone | 03:38 | |
| *** mylu_ has quit IRC | 04:08 | |
| *** mylu has joined #openstack-keystone | 04:09 | |
| *** dims has quit IRC | 04:10 | |
| *** mylu has quit IRC | 04:13 | |
| *** btully has quit IRC | 04:21 | |
| *** sileht has quit IRC | 04:31 | |
| *** navid_ has joined #openstack-keystone | 04:45 | |
| *** navid_ is now known as navidp | 04:51 | |
| *** navidp has quit IRC | 04:58 | |
| *** navidp has joined #openstack-keystone | 04:58 | |
| *** lhcheng has joined #openstack-keystone | 05:01 | |
| *** ChanServ sets mode: +v lhcheng | 05:01 | |
| *** lhcheng has quit IRC | 05:05 | |
| *** navid_ has joined #openstack-keystone | 05:12 | |
| *** jimbaker has quit IRC | 05:17 | |
| *** navidp has quit IRC | 05:19 | |
| *** jimbaker has joined #openstack-keystone | 05:30 | |
| *** navidp has joined #openstack-keystone | 05:30 | |
| *** jimbaker has quit IRC | 05:30 | |
| *** jimbaker has joined #openstack-keystone | 05:30 | |
| *** navidp has quit IRC | 05:30 | |
| *** navidp has joined #openstack-keystone | 05:31 | |
| *** navidp has quit IRC | 05:31 | |
| *** spandhe has joined #openstack-keystone | 05:47 | |
| *** btully has joined #openstack-keystone | 06:38 | |
| *** david_cu has joined #openstack-keystone | 07:04 | |
| *** boris-42_ has joined #openstack-keystone | 07:07 | |
| *** opilotte_ has quit IRC | 07:08 | |
| *** jimbaker has quit IRC | 07:18 | |
| *** jimbaker has joined #openstack-keystone | 07:29 | |
| *** jimbaker has quit IRC | 07:29 | |
| *** jimbaker has joined #openstack-keystone | 07:29 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Deprecate LDAP Role backend https://review.openstack.org/252669 | 07:29 |
| *** spandhe has quit IRC | 07:30 | |
| *** topol has joined #openstack-keystone | 07:33 | |
| *** ChanServ sets mode: +v topol | 07:33 | |
| *** davechen has left #openstack-keystone | 07:33 | |
| *** topol has quit IRC | 07:38 | |
| *** josecastroleon has joined #openstack-keystone | 08:01 | |
| *** dims has joined #openstack-keystone | 08:12 | |
| *** opilotte_ has joined #openstack-keystone | 08:14 | |
| *** sileht has joined #openstack-keystone | 08:30 | |
| *** josecastroleon has quit IRC | 08:41 | |
| *** chlong has quit IRC | 08:48 | |
| *** dims has quit IRC | 08:51 | |
| *** jimbaker has quit IRC | 08:56 | |
| *** jimbaker has joined #openstack-keystone | 09:02 | |
| *** jimbaker has quit IRC | 09:02 | |
| *** jimbaker has joined #openstack-keystone | 09:02 | |
| *** dims has joined #openstack-keystone | 09:07 | |
| *** dims has quit IRC | 09:22 | |
| *** dims has joined #openstack-keystone | 09:31 | |
| *** btully has quit IRC | 09:33 | |
| *** henrynash has joined #openstack-keystone | 09:48 | |
| *** ChanServ sets mode: +v henrynash | 09:48 | |
| *** dims has quit IRC | 10:00 | |
| *** dims has joined #openstack-keystone | 10:02 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Use list_role_assignments to get projects/domains for user https://review.openstack.org/242513 | 10:02 |
| *** dims has quit IRC | 10:03 | |
| *** henrynash has quit IRC | 10:30 | |
| *** e0ne has joined #openstack-keystone | 10:38 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/253894 | 10:40 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements https://review.openstack.org/253895 | 10:40 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/251640 | 10:43 |
| *** henrynash has joined #openstack-keystone | 10:52 | |
| *** ChanServ sets mode: +v henrynash | 10:52 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Create new version of assignment driver interface https://review.openstack.org/242853 | 10:55 |
| openstackgerrit | henry-nash proposed openstack/keystone: Create V9 Role Driver https://review.openstack.org/247805 | 11:01 |
| *** henrynash has quit IRC | 11:01 | |
| *** e0ne has quit IRC | 11:26 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Remove invalid TODO in extensions https://review.openstack.org/253552 | 11:37 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Update extensions links https://review.openstack.org/253587 | 11:40 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create neutron service in sample_data.sh https://review.openstack.org/208215 | 11:54 |
| *** topol has joined #openstack-keystone | 13:05 | |
| *** ChanServ sets mode: +v topol | 13:05 | |
| *** topol has quit IRC | 13:10 | |
| *** toddnni_ has joined #openstack-keystone | 13:38 | |
| *** boltR_ has joined #openstack-keystone | 13:41 | |
| *** noqa_v_q1ovnie has joined #openstack-keystone | 13:42 | |
| *** andreaf has quit IRC | 13:43 | |
| *** bigjools has quit IRC | 13:43 | |
| *** boltR has quit IRC | 13:43 | |
| *** ekarlso has quit IRC | 13:43 | |
| *** andreaf_ has quit IRC | 13:43 | |
| *** mhu has quit IRC | 13:43 | |
| *** toddnni has quit IRC | 13:43 | |
| *** noqa_v_qoovnie has quit IRC | 13:43 | |
| *** toddnni_ is now known as toddnni | 13:43 | |
| *** bigjools has joined #openstack-keystone | 13:43 | |
| *** bigjools has quit IRC | 13:43 | |
| *** bigjools has joined #openstack-keystone | 13:43 | |
| *** mylu has joined #openstack-keystone | 13:50 | |
| *** andreaf has joined #openstack-keystone | 13:51 | |
| *** andreaf_ has joined #openstack-keystone | 13:52 | |
| *** diegows has joined #openstack-keystone | 14:05 | |
| *** ramishra has quit IRC | 14:10 | |
| *** ramishra_ has joined #openstack-keystone | 14:10 | |
| *** johnthetubaguy has quit IRC | 14:13 | |
| *** johnthetubaguy has joined #openstack-keystone | 14:15 | |
| *** EinstCrazy has quit IRC | 14:15 | |
| *** EinstCrazy has joined #openstack-keystone | 14:16 | |
| *** ramishra_ has quit IRC | 14:25 | |
| *** ramishra_ has joined #openstack-keystone | 14:25 | |
| *** mhu has joined #openstack-keystone | 14:30 | |
| *** ekarlso has joined #openstack-keystone | 14:53 | |
| *** mylu has quit IRC | 14:54 | |
| *** mylu has joined #openstack-keystone | 14:55 | |
| *** hockeynut has quit IRC | 14:56 | |
| *** mylu has quit IRC | 14:57 | |
| *** hockeynut has joined #openstack-keystone | 14:58 | |
| *** mylu has joined #openstack-keystone | 14:58 | |
| *** mylu has quit IRC | 14:59 | |
| *** mylu has joined #openstack-keystone | 15:06 | |
| *** mylu has quit IRC | 15:08 | |
| *** mylu has joined #openstack-keystone | 15:14 | |
| *** lbragstad has quit IRC | 15:25 | |
| *** lbragstad has joined #openstack-keystone | 15:31 | |
| openstackgerrit | Akira YOSHIYAMA proposed openstack/oslo.policy: Fixes combined and and or rule handling https://review.openstack.org/253763 | 15:38 |
| openstackgerrit | Morgan Fainberg proposed openstack/oslo.policy: Fixes combined "and" and "or" rule handling https://review.openstack.org/253763 | 15:43 |
| *** dims has joined #openstack-keystone | 15:51 | |
| *** diegows has quit IRC | 15:55 | |
| *** e0ne has joined #openstack-keystone | 16:10 | |
| *** e0ne has quit IRC | 16:16 | |
| *** e0ne has joined #openstack-keystone | 16:20 | |
| *** e0ne has quit IRC | 16:29 | |
| *** e0ne has joined #openstack-keystone | 16:33 | |
| *** johnthetubaguy has quit IRC | 16:38 | |
| *** johnthetubaguy has joined #openstack-keystone | 16:40 | |
| *** e0ne has quit IRC | 16:42 | |
| *** e0ne has joined #openstack-keystone | 16:45 | |
| *** e0ne has quit IRC | 16:50 | |
| *** e0ne has joined #openstack-keystone | 16:54 | |
| *** e0ne has quit IRC | 16:57 | |
| *** e0ne has joined #openstack-keystone | 17:02 | |
| *** mylu has quit IRC | 17:02 | |
| *** e0ne has quit IRC | 17:06 | |
| *** mylu has joined #openstack-keystone | 17:09 | |
| *** mylu has quit IRC | 17:10 | |
| *** mylu has joined #openstack-keystone | 17:10 | |
| *** e0ne has joined #openstack-keystone | 17:11 | |
| *** mylu has quit IRC | 17:14 | |
| *** e0ne has quit IRC | 17:17 | |
| *** e0ne has joined #openstack-keystone | 17:21 | |
| *** topol has joined #openstack-keystone | 17:22 | |
| *** ChanServ sets mode: +v topol | 17:23 | |
| *** e0ne has quit IRC | 17:24 | |
| *** topol has quit IRC | 17:27 | |
| *** e0ne has joined #openstack-keystone | 17:28 | |
| *** e0ne has quit IRC | 17:31 | |
| *** e0ne has joined #openstack-keystone | 17:35 | |
| *** e0ne has quit IRC | 17:40 | |
| *** raginbajin has quit IRC | 17:43 | |
| *** e0ne has joined #openstack-keystone | 17:43 | |
| *** raginbajin has joined #openstack-keystone | 17:44 | |
| *** henrynash has joined #openstack-keystone | 17:46 | |
| *** ChanServ sets mode: +v henrynash | 17:46 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Use list_role_assignments to get projects/domains for user https://review.openstack.org/242513 | 17:47 |
| *** EinstCrazy has quit IRC | 17:48 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Show defect in list_user_ids that only lists direct user assignments https://review.openstack.org/242564 | 17:49 |
| *** e0ne has quit IRC | 17:52 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Fix defect in list_user_ids that only lists direct user assignments https://review.openstack.org/242574 | 17:56 |
| *** e0ne has joined #openstack-keystone | 17:56 | |
| *** mylu has joined #openstack-keystone | 17:56 | |
| *** mylu has quit IRC | 17:58 | |
| *** mylu has joined #openstack-keystone | 17:59 | |
| *** mylu_ has joined #openstack-keystone | 18:01 | |
| *** mylu has quit IRC | 18:02 | |
| *** mylu_ has quit IRC | 18:03 | |
| *** mylu has joined #openstack-keystone | 18:03 | |
| *** mylu has quit IRC | 18:08 | |
| *** e0ne has quit IRC | 18:11 | |
| *** mylu has joined #openstack-keystone | 18:12 | |
| *** johnthetubaguy has quit IRC | 18:12 | |
| *** johnthetubaguy has joined #openstack-keystone | 18:14 | |
| *** e0ne has joined #openstack-keystone | 18:15 | |
| *** mylu has quit IRC | 18:20 | |
| *** e0ne has quit IRC | 18:21 | |
| *** e0ne has joined #openstack-keystone | 18:25 | |
| *** mylu has joined #openstack-keystone | 18:28 | |
| *** e0ne has quit IRC | 18:28 | |
| *** e0ne has joined #openstack-keystone | 18:32 | |
| *** ramishra__ has joined #openstack-keystone | 18:35 | |
| *** ramishra_ has quit IRC | 18:36 | |
| *** ramishra__ is now known as ramishra_ | 18:36 | |
| *** mylu has quit IRC | 18:36 | |
| *** mylu has joined #openstack-keystone | 18:37 | |
| *** e0ne has quit IRC | 18:39 | |
| *** mylu has quit IRC | 18:41 | |
| *** mylu has joined #openstack-keystone | 18:43 | |
| *** mylu has quit IRC | 18:45 | |
| *** johnthetubaguy has quit IRC | 18:50 | |
| *** mylu has joined #openstack-keystone | 18:51 | |
| *** johnthetubaguy has joined #openstack-keystone | 18:55 | |
| *** jimbaker has quit IRC | 18:55 | |
| *** jimbaker has joined #openstack-keystone | 18:57 | |
| *** jimbaker has quit IRC | 18:57 | |
| *** jimbaker has joined #openstack-keystone | 18:57 | |
| *** jerrygb has joined #openstack-keystone | 18:57 | |
| *** btully has joined #openstack-keystone | 19:33 | |
| *** btully has quit IRC | 19:38 | |
| *** flwang1 has joined #openstack-keystone | 19:44 | |
| *** johnthetubaguy has quit IRC | 19:48 | |
| *** johnthetubaguy has joined #openstack-keystone | 19:50 | |
| *** EinstCrazy has joined #openstack-keystone | 20:14 | |
| samueldmq | henrynash: hi | 20:14 |
| *** EinstCrazy has quit IRC | 20:18 | |
| *** openstackgerrit has quit IRC | 20:32 | |
| *** openstackgerrit has joined #openstack-keystone | 20:32 | |
| henrynash | samueldmq: hi | 20:33 |
| *** mylu has quit IRC | 20:36 | |
| *** mylu has joined #openstack-keystone | 20:36 | |
| *** flaper87 has quit IRC | 20:40 | |
| *** briancurtin has quit IRC | 20:40 | |
| *** briancurtin has joined #openstack-keystone | 20:40 | |
| *** mylu has quit IRC | 20:41 | |
| *** flaper87 has joined #openstack-keystone | 20:41 | |
| samueldmq | henrynash: oh, you still around ? | 20:42 |
| henrynash | samuedlmq: indeed | 20:42 |
| samueldmq | henrynash: sorry for the delay | 20:42 |
| samueldmq | henrynash: I'd like your view on https://review.openstack.org/#/c/248892 | 20:42 |
| samueldmq | henrynash: see my last comment, I think the bug is invalid | 20:43 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth-saml2: Updated from global requirements https://review.openstack.org/247604 | 20:43 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/251639 | 20:43 |
| *** btully has joined #openstack-keystone | 20:44 | |
| henrynash | samueldmq: so my is that there is a bug, and that bug is that you can’t do GEt /project on your own project as project admin | 20:45 |
| henrynash | samueldmq: that fact that you can’t list role assignments is a knock-on effect of that bug | 20:45 |
| samueldmq | henrynash: but actually you can | 20:46 |
| henrynash | samueldmq: a point I did add to an earlier review of this | 20:46 |
| samueldmq | henrynash: her new tests for the fix are passing on master | 20:46 |
| henrynash | samueldmq: using which policy file? | 20:46 |
| samueldmq | henrynash: the v3 one which is the one she's touching ? | 20:47 |
| *** mylu has joined #openstack-keystone | 20:47 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/251640 | 20:47 |
| samueldmq | henrynash: I downloaded her code, then undo the policy change, then run 'tox -e py27 test_v3_protection' | 20:47 |
| samueldmq | henrynash: all the list role assingment tests pass | 20:47 |
| samueldmq | henrynash: see https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json#L94 | 20:48 |
| samueldmq | henrynash: rule:admin_on_project_filter | 20:48 |
| samueldmq | henrynash: I don't see how get_project relates to list_role_assignments | 20:49 |
| henrynash | samueldmq: and I think I agree with you…it might if bound up in Horizon, but not as far as the API is concerned, since we don’t check multiple policy rules for one API | 20:50 |
| henrynash | samueldmq: this fix should just fix and test Get project | 20:51 |
| samueldmq | henrynash: yes that's exactly the point | 20:51 |
| samueldmq | henrynash: okay, left a review there, thanks! | 20:57 |
| henrynash | samueldmq: good analysis. Nice | 20:57 |
| samueldmq | henrynash: :) | 21:00 |
| *** mylu has quit IRC | 21:03 | |
| *** mylu has joined #openstack-keystone | 21:04 | |
| *** mylu has quit IRC | 21:08 | |
| samueldmq | stevemar: dolphm: I wonder if we should have a policy for abandoning very very old reveiws that have been -1ed and didn't receive any update | 21:14 |
| samueldmq | that should catch author's attention on restoring and updating them or leaving them abandoned, so that anyone else is welcme to address the issue | 21:14 |
| samueldmq | and would help making our review lists consistent :) | 21:15 |
| *** andrewbogott has quit IRC | 21:21 | |
| *** mylu has joined #openstack-keystone | 21:21 | |
| *** andrewbogott has joined #openstack-keystone | 21:22 | |
| breton | samueldmq: just use dashboard | 21:22 |
| breton | abandoning a patch means hiding it from our view | 21:23 |
| breton | only if launchpad changed the status of bugs from "in progress" to "new" if a patch is abandoned... | 21:24 |
| *** topol has joined #openstack-keystone | 21:25 | |
| *** ChanServ sets mode: +v topol | 21:25 | |
| samueldmq | breton: if they're abandoned you can easily filter them in gerrit with 'status:open' | 21:25 |
| samueldmq | filter them out* | 21:25 |
| samueldmq | breton: and I also think it's important to keep our list of on-going things clear | 21:26 |
| *** topol has quit IRC | 21:29 | |
| *** lifeless has quit IRC | 21:36 | |
| *** andreaf has quit IRC | 21:38 | |
| *** andreaf_ is now known as andreaf | 21:38 | |
| *** mylu has quit IRC | 21:40 | |
| *** mylu has joined #openstack-keystone | 21:40 | |
| *** e0ne has joined #openstack-keystone | 21:42 | |
| *** mylu_ has joined #openstack-keystone | 21:43 | |
| *** mylu has quit IRC | 21:43 | |
| *** mylu_ has quit IRC | 21:44 | |
| *** e0ne has quit IRC | 21:45 | |
| *** freerunner has quit IRC | 21:47 | |
| *** andreaf_ has joined #openstack-keystone | 21:48 | |
| *** freerunner has joined #openstack-keystone | 21:49 | |
| *** e0ne has joined #openstack-keystone | 21:49 | |
| *** e0ne has quit IRC | 21:53 | |
| *** freerunner has quit IRC | 21:55 | |
| *** freerunner has joined #openstack-keystone | 21:57 | |
| openstackgerrit | Merged openstack/keystoneauth: Updated from global requirements https://review.openstack.org/253895 | 21:58 |
| *** freerunner has quit IRC | 21:58 | |
| *** freerunner has joined #openstack-keystone | 22:00 | |
| *** freerunner has quit IRC | 22:02 | |
| *** freerunner has joined #openstack-keystone | 22:04 | |
| *** freerunner has quit IRC | 22:06 | |
| *** freerunner has joined #openstack-keystone | 22:09 | |
| *** freerunner has quit IRC | 22:10 | |
| *** lifeless has joined #openstack-keystone | 22:12 | |
| *** freerunner has joined #openstack-keystone | 22:13 | |
| *** mylu has joined #openstack-keystone | 22:19 | |
| *** henrynash has quit IRC | 22:38 | |
| *** jamielennox|away is now known as jamielennox | 22:46 | |
| *** btully has quit IRC | 22:46 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/253894 | 22:48 |
| notmorgan | oooh look keystoneauth is starting to become a thing in server projects! | 22:48 |
| notmorgan | yay mordred! | 22:49 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/253745 | 22:49 |
| jamielennox | notmorgan: sorry nit on https://review.openstack.org/#/c/250476/ | 22:50 |
| jamielennox | notmorgan: otherwise sigmavirus24_awa gave the +1 so i'm good | 22:51 |
| notmorgan | jamielennox: yah. | 22:54 |
| notmorgan | jamielennox: i can re-spin/roll this in a few to solve your specific concern. | 22:55 |
| jamielennox | notmorgan: yep, figured it'd be quick | 22:55 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Add BetaMax Fixture https://review.openstack.org/250476 | 22:57 |
| notmorgan | oops sec | 22:57 |
| notmorgan | eh there is a typo in a #NOTE somewhere | 22:58 |
| notmorgan | but idon't care that much | 22:58 |
| notmorgan | jamielennox: ^ there is addressing your main concern. The instance method vs function we can look into benefits/detractions later and wont affect the public interfaces | 22:59 |
| notmorgan | jamielennox: the name of the file i don't want to change | 22:59 |
| jamielennox | notmorgan: oh - yea, i don't care about that, i had forgotten it was on there | 22:59 |
| jamielennox | notmorgan: oh? | 22:59 |
| notmorgan | jamielennox: because people often end up doing: from keystoneauth1.fixtures import betamax as keystoneauth_betamax | 23:00 |
| jamielennox | cause you'll import betamax | 23:00 |
| notmorgan | because colliding names in places. | 23:00 |
| notmorgan | the class name, totally with you dropping the "keystoneauth" prefix | 23:00 |
| jamielennox | yea - kind of have that problem in a few places | 23:00 |
| jamielennox | most annoying is having to call everything sess = because otherwise it conflicts with from keystoneauth import esssion | 23:00 |
| notmorgan | jamielennox: so lets leave the prefix on the filename/module | 23:01 |
| notmorgan | jamielennox: but the class name, yeah it was redundant | 23:01 |
| notmorgan | :) | 23:01 |
| jamielennox | notmorgan: sounds good to me | 23:02 |
| notmorgan | jamielennox: so if you +2, i know mordred will +2 again, and it should land w/ a +A anywhere along the lines | 23:02 |
| notmorgan | and then yay | 23:02 |
| notmorgan | improvements | 23:02 |
| notmorgan | jamielennox: also, i'm going to go circle up on the ceilometer "mocking" of our memcache interface for KSM *rolls eyes* | 23:03 |
| jamielennox | what do they do? | 23:04 |
| jamielennox | i saw a bug report come through for gnocchi - is that the same thing now? | 23:04 |
| notmorgan | jamielennox: i'm sure they do | 23:04 |
| notmorgan | it's insanity | 23:04 |
| notmorgan | but since we have the KSM fixture now | 23:04 |
| notmorgan | gonna make it use that | 23:04 |
| jamielennox | that merged? | 23:04 |
| notmorgan | merged and released | 23:04 |
| notmorgan | oh reminds me i need to bump the minimum KSM in g-r for that | 23:05 |
| jamielennox | bah - behind sorry | 23:05 |
| notmorgan | don't be sorry :) | 23:05 |
| jamielennox | be better :) | 23:05 |
| jamielennox | completely missed the blueprint window for that service authentication stuff we discussed at summit as well | 23:06 |
| jamielennox | how are you looking at passing auth contexts around? | 23:06 |
| notmorgan | hacking KSM to just accept the headers w/o talking to keystone | 23:06 |
| notmorgan | with a "validation" of some sort | 23:06 |
| jamielennox | oh, the X- | 23:06 |
| notmorgan | yah | 23:06 |
| notmorgan | i'm going to use a shared-secret for the POC | 23:07 |
| notmorgan | and the LUA in HAProxy will do the hard part of token validation already. | 23:07 |
| jamielennox | did you hack ksm or subclass the base? | 23:07 |
| notmorgan | i have to re-hack it | 23:07 |
| notmorgan | now that i almost have a fully working cloud | 23:07 |
| notmorgan | https://api.tempusfrangit.org/ [horizon is busted atm] | 23:08 |
| notmorgan | and nova <-> glance is unhappy but that is sub-url mounting issues | 23:08 |
| notmorgan | and i *think* i have neutron working. | 23:09 |
| notmorgan | think... | 23:09 |
| jamielennox | notmorgan: ah, you made the fix i suggested for the auth_token fixture anyway | 23:09 |
| notmorgan | i mean... that is kinda hard to tell | 23:09 |
| jamielennox | that was all i wanted to check on anyway | 23:09 |
| notmorgan | jamielennox: oh what fix did you suggest that i did? i remember i did something. | 23:09 |
| *** topol has joined #openstack-keystone | 23:09 | |
| *** ChanServ sets mode: +v topol | 23:09 | |
| notmorgan | the positional(1) vs (0)? | 23:10 |
| *** jamielennox is now known as jamielennox|away | 23:18 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Use keystoneauth for auth_token fixture https://review.openstack.org/253966 | 23:21 |
| *** david-lyle_ has quit IRC | 23:22 | |
| *** EinstCrazy has joined #openstack-keystone | 23:23 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/251639 | 23:23 |
| *** jamielennox|away is now known as jamielennox | 23:26 | |
| *** EinstCrazy has quit IRC | 23:28 | |
| notmorgan | jamielennox: also sorry for the -2 on the "prompt for password" bit | 23:35 |
| jamielennox | notmorgan: oh - yea | 23:35 |
| notmorgan | jamielennox: but i really feel strongly we shouldn't be doing interactive prompting in ksa | 23:35 |
| jamielennox | i want to figure something out there | 23:35 |
| notmorgan | OCC? | 23:35 |
| notmorgan | since everything *should* move to OCC | 23:35 |
| notmorgan | mordred: ^ cc | 23:35 |
| jamielennox | right - so that's the reason i put it on the opts | 23:36 |
| notmorgan | pinging him since he had some ideas on it. | 23:36 |
| jamielennox | in ksc we had it only in the load_from_argparse_arguments function | 23:36 |
| notmorgan | i just feel like KSA is too low level to encode interactive prompting | 23:36 |
| notmorgan | ever | 23:36 |
| notmorgan | it really is the job of the consumer to do that. | 23:36 |
| jamielennox | but i don't want to say that any of the keystoneauth "loaders" are more important than ones that might live outside | 23:36 |
| notmorgan | i'd be ok with a way to say "hey you *might* want to prompt for this option" | 23:37 |
| jamielennox | so that's what https://review.openstack.org/#/c/248524/3/keystoneauth1/loading/opts.py is | 23:37 |
| notmorgan | but i am strongly opposed to KSA having any prompt logic in it | 23:37 |
| jamielennox | so that'd be ok but we have a load_from_argparse register_argparse_arguments functions | 23:38 |
| jamielennox | given occ maybe we should have only had the conf functions in ksa | 23:38 |
| jamielennox | but it was kinda there | 23:38 |
| jamielennox | but neither occ or osc use that argparse loader because they want t o do their own things | 23:39 |
| notmorgan | i am just against the actual use of getpass in ksa | 23:39 |
| notmorgan | maybe we need a way to pass in a callback the parent program can use to prompt? | 23:40 |
| notmorgan | i am going to hold the line here on "no interactive prompting in the KSA codebase" | 23:40 |
| mordred | I think the _only_ think that should prompt is OSC | 23:40 |
| mordred | and I think it should prompt if the user is importing a new set of creds | 23:40 |
| mordred | using something we haven't written yet | 23:40 |
| mordred | prompting is impossible otherwise | 23:40 |
| mordred | because with auth plugins | 23:41 |
| mordred | you don't know if it should be the password plugin | 23:41 |
| mordred | unless there is a password | 23:41 |
| mordred | so if the password is missing | 23:41 |
| mordred | then it's just a thing that breaks plugin discovery | 23:41 |
| jamielennox | mordred: so this is why i didn't do it the way we did in ksc | 23:41 |
| jamielennox | but how is OSC or whoever supposed to know that you can prompt for an option? | 23:42 |
| jamielennox | is it purely special casing the v2/v3/password plugins? because there are all sorts of saml password auth i'd like this to work for | 23:42 |
| mordred | it should never prompt | 23:42 |
| mordred | ever | 23:42 |
| jamielennox | OSC? | 23:42 |
| mordred | no. only when you're adding credentials | 23:42 |
| mordred | check this: https://cloud.google.com/compute/docs/tutorials/python-guide | 23:42 |
| jamielennox | what is adding credentials in an osc sense? | 23:43 |
| mordred | you'll notice step one is "gcloud init" | 23:43 |
| jamielennox | ah - you want to go down that path | 23:43 |
| mordred | I think we should add an osc command "openstack cloud add" or "openstack cloud import" | 23:43 |
| jamielennox | gcloud init/kinit/... | 23:43 |
| mordred | that can take an openrc file or a clouds.yaml file | 23:43 |
| mordred | yah | 23:43 |
| mordred | well - it's not like kinit | 23:43 |
| mordred | it's a thing that sets up your local config file | 23:43 |
| *** mylu has quit IRC | 23:43 | |
| notmorgan | like git -config user.name|email | 23:44 |
| mordred | and creates a ~/.config/gcloud/credentials | 23:44 |
| mordred | yah | 23:44 |
| mordred | it's like that | 23:44 |
| mordred | it walks you through an interactive prompt session | 23:44 |
| mordred | and it's a _very_ pleasant experience | 23:44 |
| jamielennox | assuming you've run it, does gcloud init do that? create a local file with your password? | 23:45 |
| mordred | yup | 23:45 |
| mordred | I have | 23:45 |
| jamielennox | my first guess would be it used that password to create some form of token | 23:45 |
| mordred | well, gcloud uses oauth | 23:45 |
| mordred | so it does the oauth authorize dance | 23:45 |
| mordred | and writes the into into a json file | 23:45 |
| jamielennox | right, so that has the advantage of not putting your password in a file | 23:46 |
| mordred | everyone is always putting their password in a file | 23:46 |
| mordred | right now it's an openrc shell script file - or clouds.yaml | 23:46 |
| *** mylu has joined #openstack-keystone | 23:47 | |
| jamielennox | sure, but the plan for OSC initially at least was that you ommited the password from accrc, got prompted once and then it would cache the token | 23:47 |
| jamielennox | ... obviously that didn't work out | 23:47 |
| mordred | :) | 23:47 |
| notmorgan | hehe | 23:47 |
| jamielennox | but caching should be possible now and i was looking to see if we could | 23:47 |
| mordred | yah - gota have that password to renew the token | 23:47 |
| mordred | so - fwiw, a majority of the clouds I have accounts on give me a generated password that is long and unweildy to type | 23:48 |
| mordred | so copying in to a file is the only feasible way to use it | 23:48 |
| jamielennox | so even in the osc could init case - how do you know which fields you can prompt for? | 23:48 |
| *** mylu has quit IRC | 23:48 | |
| *** mylu has joined #openstack-keystone | 23:49 | |
| mordred | I think it depends ... if you do "osc init downloaded-clouds.yaml" we could expect that such a file should include the auth_plugin (since a deployer should always know that) | 23:49 |
| mordred | and if you know the plugin ahead of time, you should know which fields are missing and prompt for them | 23:49 |
| mordred | if you don't have a declared plugin | 23:49 |
| mordred | then you're using password | 23:49 |
| jamielennox | or... https://review.openstack.org/#/c/248524/3/keystoneauth1/loading/opts.py | 23:50 |
| mordred | and you could prompt for all of them honestly | 23:50 |
| notmorgan | mordred: ++ | 23:50 |
| mordred | I think there's two different things potentially here - depending on what we're setting up to allow | 23:50 |
| mordred | one is "what are reasonable to maybe prompt for from a CLI tool during operation" | 23:51 |
| mordred | the other is "what are values that could be prompted for in an init command" | 23:51 |
| mordred | for the second - I'd say you could honestly prompt for all of the normal ones | 23:51 |
| mordred | "what's your auth_url?" "what's your username?" "what's your domain? (leave empty if you don't have one)" | 23:51 |
| *** mylu_ has joined #openstack-keystone | 23:52 | |
| *** mylu has quit IRC | 23:53 | |
| jamielennox | yea, if you're doing it from a set up everything scenario then you can prompt for everything | 23:54 |
| jamielennox | but as you say i think if you know the answers to all those questions you probably already know openstack well enough to do the exports yourself | 23:54 |
| jamielennox | a provider would give you an accrc/clouds.yaml file | 23:54 |
| mordred | yah | 23:54 |
| mordred | or, currently, they give you an openrc file | 23:55 |
| mordred | and, amusingly, all of the openrc files are set up to prompt for password when you source them | 23:55 |
| jamielennox | yea, that's because that's what horizon generates for you | 23:56 |
| mordred | like this: http://paste.openstack.org/show/480970 | 23:56 |
| jamielennox | because obviously it doesn't know your password at that point | 23:56 |
| mordred | yup | 23:56 |
| jamielennox | mordred, notmorgan: so even if i remove it from loda_from_argparse (which i understand at this point is superseeded by OCC) you'd be anti having the param in an opt? | 23:59 |
| *** chlong has joined #openstack-keystone | 23:59 | |
| jamielennox | cause i would like to figure out the mess that is the OSC/OCC boundary | 23:59 |
| jamielennox | and OSC is doing this already - just poorly | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!