Wednesday, 2015-12-23

*** markvoelker has joined #openstack-keystone00:00
*** darrenc is now known as darrenc_afk00:04
*** markvoelker has quit IRC00:05
*** daemontool has quit IRC00:08
*** daemontool has joined #openstack-keystone00:08
*** gordc has quit IRC00:16
*** darrenc_afk is now known as darrenc00:18
*** gildub has joined #openstack-keystone00:26
*** EinstCrazy has quit IRC00:26
*** roxanaghe has joined #openstack-keystone00:28
openstackgerritMerged openstack/keystone: Add `keystone-manage bootstrap` command  https://review.openstack.org/25559900:30
*** roxanaghe has quit IRC00:32
openstackgerritHaneef Ali proposed openstack/keystone: Fix 500 error when no fernet token is passed  https://review.openstack.org/25956300:41
*** zqfan has joined #openstack-keystone00:59
*** EinstCrazy has joined #openstack-keystone01:00
*** dancn has quit IRC01:00
*** dancn has joined #openstack-keystone01:10
*** gyee has quit IRC01:28
*** roxanaghe has joined #openstack-keystone01:29
*** roxanaghe has quit IRC01:33
*** davechen has joined #openstack-keystone01:37
*** davechen1 has joined #openstack-keystone01:41
*** davechen has quit IRC01:44
*** fawadkhaliq has joined #openstack-keystone01:47
*** davechen2 has joined #openstack-keystone01:47
*** davechen1 has quit IRC01:49
*** DuncanT has quit IRC02:01
*** markvoelker has joined #openstack-keystone02:01
*** fangxu_ has joined #openstack-keystone02:01
*** fangxu has quit IRC02:03
*** fangxu_ is now known as fangxu02:03
*** DuncanT has joined #openstack-keystone02:04
*** markvoelker has quit IRC02:06
*** davechen2 is now known as davechen02:08
*** fawadkhaliq has quit IRC02:08
*** dims has quit IRC02:17
*** fangxu has quit IRC02:25
*** dims has joined #openstack-keystone02:28
*** roxanaghe has joined #openstack-keystone02:31
*** roxanaghe has quit IRC02:35
*** dims has quit IRC02:37
*** dims has joined #openstack-keystone02:40
*** dims has quit IRC02:46
*** dims has joined #openstack-keystone02:52
*** markvoelker has joined #openstack-keystone03:02
*** dims has quit IRC03:05
*** markvoelker has quit IRC03:07
*** links has joined #openstack-keystone03:09
*** dims has joined #openstack-keystone03:11
*** GB21 has quit IRC03:14
*** dims has quit IRC03:16
*** jamielennox is now known as jamielennox|away03:22
*** Guest13696 is now known as mfisch03:23
*** mfisch is now known as Guest30303:24
*** fangxu has joined #openstack-keystone03:34
*** roxanaghe has joined #openstack-keystone04:32
*** dave-mccowan has quit IRC04:36
*** roxanaghe has quit IRC04:36
*** markvoelker has joined #openstack-keystone04:48
*** markvoelker has quit IRC04:52
*** GB21 has joined #openstack-keystone04:59
openstackgerritHaneef Ali proposed openstack/keystone: Fix 500 error when no fernet token is passed  https://review.openstack.org/25956305:06
*** GB21 has quit IRC05:06
*** GB21 has joined #openstack-keystone05:25
openstackgerritIrina proposed openstack/keystone: Fix some inconsistency in docstrings  https://review.openstack.org/25021905:27
*** gildub has quit IRC05:42
*** fangxu has quit IRC05:49
*** markvoelker has joined #openstack-keystone05:49
*** markvoelker has quit IRC05:54
*** vgridnev has joined #openstack-keystone06:22
*** GB21 has quit IRC06:28
*** roxanaghe has joined #openstack-keystone06:33
*** roxanaghe has quit IRC06:38
openstackgerritIrina proposed openstack/keystone: Fix some inconsistency in docstrings  https://review.openstack.org/25021906:46
*** mfedosin has joined #openstack-keystone06:57
*** markvoelker has joined #openstack-keystone07:05
*** markvoelker has quit IRC07:09
*** fangxu has joined #openstack-keystone07:24
*** notmorgan has quit IRC07:31
*** mordred has quit IRC07:32
*** gwei31 has joined #openstack-keystone07:46
*** dancn has quit IRC07:46
*** gwei31 has quit IRC07:47
*** gwei31 has joined #openstack-keystone07:48
*** gwei31 has quit IRC07:48
*** e0ne has joined #openstack-keystone07:50
*** e0ne has quit IRC07:52
*** gwei31 has joined #openstack-keystone07:56
*** dancn has joined #openstack-keystone08:15
*** pnavarro has joined #openstack-keystone08:30
*** roxanaghe has joined #openstack-keystone08:35
*** roxanaghe has quit IRC08:39
*** gwei32 has joined #openstack-keystone08:40
*** vgridnev has quit IRC08:40
*** gwei31 has quit IRC08:41
*** openstackgerrit has quit IRC08:47
*** openstackgerrit has joined #openstack-keystone08:47
*** roxanaghe has joined #openstack-keystone08:47
*** e0ne has joined #openstack-keystone08:52
*** gwei32 has quit IRC08:59
*** e0ne has quit IRC09:01
*** markvoelker has joined #openstack-keystone09:06
*** markvoelker has quit IRC09:10
*** rcernin has joined #openstack-keystone09:16
*** davechen has left #openstack-keystone09:39
*** andreykurilin__ has joined #openstack-keystone09:54
*** rcernin has quit IRC09:56
*** e0ne has joined #openstack-keystone10:05
*** aix has joined #openstack-keystone10:10
*** daemontool has quit IRC10:16
*** roxanaghe has quit IRC10:20
*** dancn has quit IRC10:24
*** dancn has joined #openstack-keystone10:25
*** daemontool has joined #openstack-keystone10:26
*** EmilienM has quit IRC10:27
*** EmilienM has joined #openstack-keystone10:27
*** dims_ has joined #openstack-keystone10:50
*** markvoelker has joined #openstack-keystone10:51
*** markvoelker has quit IRC10:57
*** EinstCrazy has quit IRC10:58
*** ajayaa has joined #openstack-keystone11:38
*** tomoiaga has joined #openstack-keystone11:56
*** EinstCrazy has joined #openstack-keystone11:59
*** EinstCrazy has quit IRC11:59
*** EinstCrazy has joined #openstack-keystone11:59
tomoiagaI'm curious if it's possible in keystone to generate a scoped token for another project, from a parent project (an admin generating a token for a user for example) ?12:00
*** notmorgan has joined #openstack-keystone12:06
*** ChanServ sets mode: +v notmorgan12:06
*** mordred has joined #openstack-keystone12:06
*** vgridnev has joined #openstack-keystone12:09
*** openstackgerrit has quit IRC12:17
*** openstackgerrit has joined #openstack-keystone12:17
*** davechen has joined #openstack-keystone12:38
*** markvoelker has joined #openstack-keystone12:52
*** markvoelker has quit IRC12:57
*** urulama has quit IRC13:05
*** urulama has joined #openstack-keystone13:06
*** notmorgan has quit IRC13:09
*** mordred has quit IRC13:10
*** med_ has quit IRC13:21
*** dancn has quit IRC13:24
*** dancn has joined #openstack-keystone13:29
*** gordc has joined #openstack-keystone13:29
*** links has quit IRC13:44
openstackgerritBoris Bobrov proposed openstack/keystone: Replace DateTime with BigInteger for Revocation Events  https://review.openstack.org/24374213:46
*** markvoelker has joined #openstack-keystone13:53
*** markvoelker has quit IRC13:58
*** davechen has left #openstack-keystone14:11
*** bradjones has quit IRC14:16
*** roxanaghe has joined #openstack-keystone14:23
*** jasondotstar_ is now known as jasondotstar14:25
*** markvoelker has joined #openstack-keystone14:54
*** ajayaa has quit IRC14:55
*** markvoelker has quit IRC14:58
*** breitz has quit IRC14:58
*** breitz has joined #openstack-keystone14:59
*** tomoiaga has quit IRC15:08
*** med_ has joined #openstack-keystone15:17
*** med_ is now known as Guest772615:17
*** daemontool has quit IRC15:29
*** links has joined #openstack-keystone15:33
*** daemontool has joined #openstack-keystone15:42
*** jsavak has joined #openstack-keystone15:44
*** links has quit IRC15:50
*** jsavak has quit IRC15:51
*** jsavak has joined #openstack-keystone15:53
openstackgerritKonstantin Maximov proposed openstack/keystone: Add test for domains list filtering and limiting  https://review.openstack.org/20745615:53
*** EinstCrazy has quit IRC16:09
*** pnavarro has quit IRC16:09
*** roxanaghe has quit IRC16:10
*** notmorgan has joined #openstack-keystone16:26
*** ChanServ sets mode: +v notmorgan16:26
openstackgerritMerged openstack/keystone: eventlet: handle system that misses TCP_KEEPIDLE  https://review.openstack.org/22677316:30
*** zqfan has quit IRC16:31
*** vgridnev has quit IRC16:33
*** vgridnev has joined #openstack-keystone16:34
openstackgerritBoris Bobrov proposed openstack/python-keystoneclient: Change default endpoint for Keystone v3 to public  https://review.openstack.org/25066416:37
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/26104816:39
*** jsavak has quit IRC16:39
*** e0ne has quit IRC16:40
*** mordred has joined #openstack-keystone16:42
stevemarbreton and bknudson_ thanks for reviewing all the things :)16:44
notmorganstevemar: really we merged eventlet things :(16:48
* notmorgan is sad16:48
*** markvoelker has joined #openstack-keystone16:55
*** markvoelker has quit IRC16:59
*** daemontool has quit IRC17:02
*** urulama has quit IRC17:04
*** urulama has joined #openstack-keystone17:04
*** vgridnev has quit IRC17:05
bknudson_tox -e pep8 is being a jerk.17:08
*** EinstCrazy has joined #openstack-keystone17:09
*** EinstCrazy has quit IRC17:14
bknudson_I wonder if we picked up a library that breaks pep817:14
openstackgerritMerged openstack/keystone: Fix multiline strings with missing spaces  https://review.openstack.org/25400017:20
notmorganbknudson_: that shouldn't be the case17:21
openstackgerritBrant Knudson proposed openstack/keystone: Fix pep8 job  https://review.openstack.org/26105717:21
notmorganbknudson_: libraries should not be run through pep8 since they're in the .tox/.../... path17:21
notmorganunless we vendored something17:21
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/26104817:21
bknudson_maybe python changed?17:22
notmorganbknudson_: what is your thought on making keystoneauth use system CAs when the CA location is known instead of the requests bundled CA file?17:22
bknudson_notmorgan: isn't that some weird thing the requests does?17:22
bknudson_and the distros fix it?17:23
notmorganbknudson_: sometimes17:23
notmorganit makes working with requests really awful when not using a distro package though.17:23
bknudson_if there was a way to detect that requests is incorrect and only do it then?17:24
notmorgani think i can do something like that17:24
* notmorgan has an idea on how to.17:24
notmorgani was also thinking of just overriding the environment variable requests uses when the system ca path is known17:26
openstackgerritMerged openstack/keystone: Fix 500 error when no fernet token is passed  https://review.openstack.org/25956317:26
notmorganand if the file exists17:26
notmorganso if system = ubuntu and <system ca path file exists> os.environ['<requests special environ>'] = system ca path if environ not set17:26
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/26104817:28
EmilienMstevemar: hey, is it a new thing "keystone-manage bootstrap --bootstrap-password" ?17:30
*** dprince has joined #openstack-keystone17:31
*** e0ne has joined #openstack-keystone17:33
notmorganEmilienM: yes just landed. you can also use OS_BOOTSTRAP_PASSWORD env var17:33
EmilienMnotmorgan: it seems like it's breaking our puppet CI17:33
notmorganEmilienM: specifically so it doesn't show in the CLI and/or for CMS17:33
notmorganEmilienM: how so?17:34
EmilienMnotmorgan: any doc on that I can see?17:34
EmilienMdprince: ^17:34
notmorganshouldn't affect anything if you're not using it.17:34
EmilienMoh17:34
EmilienMdprince told me he ran some issues with puppet-keystone + keystone/master17:34
dprinceEmilienM: yeah, I found that w/ our keystone installation running the new bootstrap command fixed the issue17:35
notmorgandprince: ? so bootstrap fixed soemthing?17:35
EmilienMwe never ran that command before17:35
notmorgani mean, it's super new landed yesterday?17:35
dprinceEmilienM: I'm wondering now if perhaps this is a puppet-keystone issue and some implicit relationship has gotten changed thus causing the 'admin' keystone_user not to get created early enough17:36
EmilienMdprince: I'm going to run our CI job with latest delorean to try this out17:37
EmilienMand see if it's tripleo or all puppet-keystone deployments17:37
dprinceEmilienM: cool. lets see how it goes then17:38
notmorganso in short the bootstrap command for keystone-manage is meant to replace the need for admin_token17:40
notmorganbut we're just starting on that path. bootstrap is merged, we're improving it. and devstack change is started but still needs work17:40
notmorgansince admin_token is a terrible idea.17:40
notmorgandprince: so, the additon of keystone-manage bootstrap did't break anything, correct?17:48
* notmorgan is worried if that is the case.17:48
crinklethat would be surprising to me17:49
*** mfedosin has quit IRC17:49
notmorgancrinkle: exactly17:49
notmorganthat is why i want to confirm.17:50
bknudson_just look for a bootstrap command and if that exists, run it.17:50
bknudson_that's how I'd write my deployer17:50
notmorganbknudson_: ++17:50
dprincenotmorgan: no, I don't think so. At least not yet17:58
notmorgandprince: ok cool.17:59
notmorgandprince: expect that we will want to move away from admin_token in favour of bootstrap sooner vs later17:59
notmorgandprince: but - admin_token should continue to work for a number of cycles18:00
dprincenotmorgan: cool, thanks for this18:00
*** fangxu has quit IRC18:00
notmorgandprince: np. it's been on the short list of "this sucks lets fix it" and since i can just do tha tnow :)18:00
*** sdake has joined #openstack-keystone18:06
*** sdake has quit IRC18:11
*** dprince has left #openstack-keystone18:12
*** jed56 has quit IRC18:13
*** gordc has quit IRC18:17
*** fangxu has joined #openstack-keystone18:25
ayoungstevemar, soo...looking at your comments on https://review.openstack.org/#/c/242614/25/keystone/assignment/routers.py  and it makes me want to change the API signature18:25
ayoungstevemar, it should read18:25
ayoung   prior_role/{prior_role_id}/implies/{implied_role_id}  according the the approved api18:26
ayoungbut it reads better as18:26
ayounger... I mean that is how it reads better18:26
ayoungthe approved is18:26
ayoungcall like this /implied_role/{prior_role_id}/implies/{implied_role_id}18:26
ayoungstevemar, and then for the list call:18:27
ayoung path='/implied_roles/{prior_role_id}',18:27
ayoungwould it be confusing to make it18:28
ayoung path='/prior_role/{prior_role_id}',18:28
ayoungor should it be18:28
ayoung path='/prior_role/{prior_role_id}/implies',18:28
openstackgerritgordon chung proposed openstack/keystonemiddleware: use the same context across a request  https://review.openstack.org/21688918:51
*** markvoelker has joined #openstack-keystone18:55
*** simondodsley has joined #openstack-keystone18:58
*** markvoelker has quit IRC19:00
*** jbonjean has joined #openstack-keystone19:02
*** dslev has quit IRC19:10
*** jbonjean has left #openstack-keystone19:10
*** dancn has quit IRC19:12
*** jdennis has quit IRC19:18
*** dancn has joined #openstack-keystone19:18
*** dslevin_ has joined #openstack-keystone19:21
*** e0ne has quit IRC19:26
*** Ephur has joined #openstack-keystone19:36
*** sdake has joined #openstack-keystone19:40
*** urulama has quit IRC19:41
*** urulama has joined #openstack-keystone19:42
*** boltR_ is now known as boltR19:42
EmilienMnotmorgan, crinkle: running keystone from master: http://logs.openstack.org/35/255635/5/check/gate-puppet-openstack-integration-scenario001-tempest-dsvm-centos7/110c03d/console.html#_2015-12-23_17_57_50_07319:43
notmorganEmilienM: uhm.19:45
notmorganno auth_url set it looks like19:46
*** tonytan4ever has joined #openstack-keystone19:46
notmorganeither OS_AUTH_URL isn't set or --auth-url isn't passed19:46
notmorganit has no idea how to auth19:46
EmilienMnotmorgan: well, it used to work a few days ago19:46
*** jdennis has joined #openstack-keystone19:46
notmorganEmilienM: this ins't a keystone change19:47
notmorganif you don't tell openstack client how to auth it wont know what endpoint to talk to19:47
notmorganso why are we no longer setting OS_AUTH_URL or passing --auth-url ?19:47
EmilienMnotmorgan: we'll investigate further :)19:49
notmorganEmilienM: *nod* let me know what else i can do if anything.19:49
* notmorgan will be lurking around for a bit19:49
notmorganbut... holiday19:49
EmilienMnotmorgan: thx19:49
EmilienMnotmorgan: https://bugzilla.redhat.com/show_bug.cgi?id=129369319:51
openstackbugzilla.redhat.com bug 1293693 in openstack-packstack "Keystone setup fails on missing required parameter" [Unspecified,New] - Assigned to mmagr19:51
EmilienMit's already a known bug19:51
* notmorgan nods19:51
notmorganok19:51
notmorganyeah it's just missing the auth url settins19:51
EmilienMnotmorgan: https://review.openstack.org/#/c/260945/19:51
*** dmsimard has joined #openstack-keystone19:52
EmilienMmaybe we can get some reviews19:52
notmorganhold on.. let me see how that works19:52
* notmorgan is core on occ19:52
notmorganand we need a release of OCC soon anyway19:52
EmilienM:-) nice19:52
notmorganthat is an awful if-statement19:52
notmorgan:(19:52
notmorganoh.19:55
notmorganhm...19:56
notmorgani don't think the proposed fix is right.19:56
notmorgani think we need to check to see if we've specified an endpoint19:57
notmorgannot if we're guessing19:58
EmilienM:(19:58
notmorganmaybe i'm mis-reading20:00
*** sdake_ has joined #openstack-keystone20:00
* notmorgan needs to 2x check what 'url' is first20:00
*** sdake has quit IRC20:01
notmorganoh yeah20:03
notmorganEmilienM: ok this is fine. we are going to need a test though i think to ensure we don't refress20:03
notmorganregress20:03
EmilienMnotmorgan: it makes sense20:04
notmorganand yes os-url is correct.20:04
EmilienMnotmorgan: thx for your time20:04
*** andreykurilin__ has left #openstack-keystone20:06
*** e0ne has joined #openstack-keystone20:06
EmilienMnotmorgan: do you have an idea how CI could not catch it?20:08
EmilienMI guess devstack-gate did not have this bug20:09
notmorganwell, OCC doesn't have full integration tests20:14
notmorganit's on the shortlist to implement20:14
notmorganwe need to create a set of tests that will handle this.20:15
dmsimardnotmorgan: do you think it's feasible to follow up the patch with a test for it ? holidays are there and patch author will be on pto for a while I think20:17
stevemarbknudson_: how is the pep8 job failing?20:17
stevemarre: https://review.openstack.org/#/c/261057/20:17
notmorgandmsimard: i am alway open to a followup patch, i might roll the test up myself20:17
notmorgandmsimard: always*20:17
dmsimardnotmorgan: okay, I wasn't volounteering myself. I suck at tests, was just asking if you needed it in the same patchset :)20:18
dmsimardstevemar knows I suck at test.20:18
notmorgandmsimard: nah. but it is nice if we can.20:18
stevemardmsimard: it's an acquired taste20:19
dmsimardlike masochism kind of taste? :P20:19
*** fangxu has quit IRC20:21
notmorgani need to see what we've included in OCC so we can see what needs to happen for the next release20:22
*** boris-42 has quit IRC20:33
*** e0ne has quit IRC20:48
*** markvoelker has joined #openstack-keystone20:56
*** markvoelker has quit IRC21:01
*** sdake has joined #openstack-keystone21:04
*** sdake_ has quit IRC21:06
*** simondodsley has quit IRC21:18
*** roxanaghe has joined #openstack-keystone21:19
*** roxanaghe has quit IRC21:28
*** sdake has quit IRC21:30
openstackgerritayoung proposed openstack/keystone: Implied Roles  https://review.openstack.org/24261421:36
*** markvoelker has joined #openstack-keystone21:57
*** fangxu has joined #openstack-keystone22:01
*** markvoelker has quit IRC22:01
*** nodir has quit IRC22:05
*** urulama has quit IRC22:14
*** urulama has joined #openstack-keystone22:14
*** dave-mccowan has joined #openstack-keystone22:16
*** openstack has joined #openstack-keystone22:21
*** e0ne has joined #openstack-keystone22:28
*** e0ne has quit IRC22:33
*** openstackstatus has quit IRC22:35
*** openstack has joined #openstack-keystone22:36
*** openstackstatus has joined #openstack-keystone22:36
*** ChanServ sets mode: +v openstackstatus22:36
*** dave-mccowan has quit IRC22:50
*** Ephur has quit IRC23:02
*** dims_ has quit IRC23:10
*** dims has joined #openstack-keystone23:12
*** tonytan4ever has quit IRC23:18
*** tonytan4ever has joined #openstack-keystone23:19
*** tonytan4ever has quit IRC23:20
*** dims_ has joined #openstack-keystone23:27
*** dims has quit IRC23:29
*** markvoelker has joined #openstack-keystone23:43
*** boris-42 has joined #openstack-keystone23:44
*** markvoelker has quit IRC23:47
*** huats_ has joined #openstack-keystone23:58
*** huats_ has quit IRC23:58
*** huats_ has joined #openstack-keystone23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!