Friday, 2016-03-04

*** shoutm has joined #openstack-keystone00:01
*** pushkaru has quit IRC00:07
*** pushkaru has joined #openstack-keystone00:07
*** ayoung has quit IRC00:07
*** pushkaru has quit IRC00:08
*** pushkaru has joined #openstack-keystone00:08
*** sdake has quit IRC00:09
*** pushkaru has quit IRC00:11
*** fpatwa_ has joined #openstack-keystone00:14
*** pushkaru has joined #openstack-keystone00:14
*** sigmavirus24 is now known as sigmavirus24_awa00:15
*** slberger1 has left #openstack-keystone00:25
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749900:26
*** pushkaru has quit IRC00:27
*** lighshadow has joined #openstack-keystone00:33
*** shoutm_ has joined #openstack-keystone00:35
*** shoutm has quit IRC00:38
*** tqtran is now known as tqtran-afk00:40
*** henrynash has quit IRC00:49
*** fpatwa_ has quit IRC00:56
*** shaleh has quit IRC01:03
*** ayoung has joined #openstack-keystone01:05
*** ChanServ sets mode: +v ayoung01:05
*** spandhe has quit IRC01:11
*** blogan is now known as blogan-bot01:14
*** blogan-bot is now known as blogan01:14
*** lhcheng has quit IRC01:16
*** jorge_munoz has quit IRC01:18
morganlbragstad: ^ see my response re what in 0 is meant to be in deprecated01:24
*** EinstCrazy has joined #openstack-keystone01:27
*** sdake has joined #openstack-keystone01:27
*** dan_nguyen has quit IRC01:32
*** sdake has quit IRC01:35
*** shoutm has joined #openstack-keystone01:35
*** shoutm_ has quit IRC01:37
openstackgerritCristian Sava proposed openstack/keystone: Able to customize config file location when keystone runs as wsgi application.  https://review.openstack.org/28821601:41
*** jorge_munoz has joined #openstack-keystone01:48
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749901:52
*** jorge_munoz has quit IRC01:54
*** tqtran-afk has quit IRC01:54
*** bjornar has quit IRC01:55
*** lighshadow has quit IRC02:02
*** GB21 has quit IRC02:04
*** gyee has quit IRC02:15
*** fawadkhaliq has quit IRC02:20
*** shoutm has quit IRC02:37
*** shoutm has joined #openstack-keystone02:38
*** sdake has joined #openstack-keystone02:39
*** woodster_ has quit IRC02:47
*** sdake has quit IRC02:51
*** sdake has joined #openstack-keystone02:52
*** sdake has quit IRC02:52
*** links has joined #openstack-keystone03:01
*** fpatwa_ has joined #openstack-keystone03:01
*** GB21 has joined #openstack-keystone03:13
*** GB21 has quit IRC03:18
*** fangxu has quit IRC03:30
*** fawadkhaliq has joined #openstack-keystone03:38
*** dims has quit IRC03:40
*** Ephur has quit IRC03:41
*** dims has joined #openstack-keystone03:43
*** dims has quit IRC03:44
*** links has quit IRC03:44
*** shoutm has quit IRC03:46
*** shoutm has joined #openstack-keystone03:55
*** __zouyee has joined #openstack-keystone04:15
*** __zouyee has quit IRC04:20
*** agireud has quit IRC04:27
*** david_cu has quit IRC04:27
*** links has joined #openstack-keystone04:27
*** shoutm has quit IRC04:27
*** openstack has joined #openstack-keystone04:28
*** shoutm has joined #openstack-keystone04:29
*** richm has quit IRC04:29
*** alex_xu has joined #openstack-keystone04:29
*** openstack has quit IRC04:30
*** openstack has joined #openstack-keystone04:31
*** openstack has quit IRC04:34
*** openstack has joined #openstack-keystone04:34
*** agireud has joined #openstack-keystone04:34
*** openstack has quit IRC04:36
*** openstack has joined #openstack-keystone04:36
*** openstack has quit IRC04:39
*** openstack has joined #openstack-keystone14:06
*** mhu has quit IRC14:14
*** mhu has joined #openstack-keystone14:14
*** anush has joined #openstack-keystone14:16
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/28846814:17
*** knikolla has joined #openstack-keystone14:21
*** fpatwa_ has joined #openstack-keystone14:26
*** dansmith is now known as superdan14:29
*** fpatwa_ has quit IRC14:31
*** twm2016 has joined #openstack-keystone14:32
*** rodrigods has quit IRC14:34
*** rodrigods has joined #openstack-keystone14:34
openstackgerritTrevor McCasland proposed openstack/keystone: Change max size validation parameters  https://review.openstack.org/28539314:34
*** twm2016 has quit IRC14:36
*** openstackgerrit_ has quit IRC14:36
*** dave-mccowan has joined #openstack-keystone14:37
*** openstackgerrit_ has joined #openstack-keystone14:37
*** links has quit IRC14:41
*** petertr7 is now known as petertr7_away14:44
dstanekhappy bug day!14:50
*** spzala has joined #openstack-keystone14:50
*** petertr7_away is now known as petertr714:51
bknudsondstanek: not a bug as reported, but https://review.openstack.org/#/c/285808/14:53
patchbotbknudson: patch 285808 - python-keystoneclient - Update Client examples to use sessions14:53
*** phalmos has joined #openstack-keystone14:59
*** jrist has joined #openstack-keystone15:02
*** rderose has joined #openstack-keystone15:02
ayoungmorgan, they are calling via Puppet, so it should record the original values.  Just easier for puppet if they can blindly recall as oppose to query and diff15:02
*** woodster_ has joined #openstack-keystone15:03
lbragstadbug day!!15:04
morganEh, pass. I did my part earlier this week :P15:04
raildolbragstad: \o/15:08
*** markvoelker has quit IRC15:10
*** markvoelker has joined #openstack-keystone15:10
*** jasonsb has joined #openstack-keystone15:16
*** rderose has quit IRC15:17
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749915:19
*** nkinder has joined #openstack-keystone15:20
*** slberger has joined #openstack-keystone15:21
*** mvk has joined #openstack-keystone15:22
*** jed56 has quit IRC15:23
*** slberger has quit IRC15:26
*** slberger has joined #openstack-keystone15:26
*** jorge_munoz has joined #openstack-keystone15:31
*** jsavak has quit IRC15:34
*** david_lyle__ has joined #openstack-keystone15:34
*** david-lyle has quit IRC15:37
*** __zouyee has quit IRC15:44
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split assignment backend tests  https://review.openstack.org/26830715:46
*** kiran-r has quit IRC15:51
*** shangxdy has joined #openstack-keystone15:53
*** dims is now known as dimsum_15:53
*** kiran-r has joined #openstack-keystone15:53
lbragstadhere are a couple patches that close a bug - https://review.openstack.org/#/q/topic:bug/155263915:54
lbragstadstevemar thoughts - https://bugs.launchpad.net/keystone/+bug/1552795 ?15:56
openstackLaunchpad bug 1552795 in OpenStack Identity (keystone) "enhance notification for user events with user name" [Undecided,New]15:56
stevemarlbragstad: it'll have to have domain name too, since names are not unique across domains15:58
*** jorge_munoz_ has joined #openstack-keystone15:59
*** henrynash has joined #openstack-keystone15:59
*** ChanServ sets mode: +v henrynash15:59
lbragstadstevemar but that would only ever be the case with users16:00
*** jorge_munoz has quit IRC16:00
*** jorge_munoz_ is now known as jorge_munoz16:00
lbragstadstevemar right?16:00
lbragstadso - the notification framework would have to be smart enough to put that information into events that pertain to users.16:01
stevemarlbragstad: we've had requests to add names to all notification bits16:02
stevemarlbragstad: cause for project delete, they can't look it up again to find the name :(16:02
*** jsavak has joined #openstack-keystone16:03
lbragstadstevemar oh - so that would include domain name, project name, group name etc...16:05
lbragstadnot *just* usernames.16:06
stevemarlbragstad: yeah, but you could start with user name first :P16:06
*** belmoreira has quit IRC16:07
lbragstadstevemar would you be fine with the approach that the notification framework just pull the name our of a given entity reference and attempts to send it if it's there?16:07
lbragstadout*16:07
stevemarlbragstad: sure, don't see why not16:08
lbragstadobviously it wouldn't make sense to try and send name for endpoints16:08
lbragstadok16:08
stevemaryou think getting the entitiy reference will slow things down?16:08
* lbragstad stevemar at this point we usually already have the reference - https://github.com/openstack/keystone/blob/master/keystone/identity/core.py#L86416:09
lbragstadstevemar so instead of passing just user['id'] to the notification module - we could pass the whole reference and make the notification module pull out what it needs.16:10
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split assignment backend tests  https://review.openstack.org/26830716:10
*** jsavak has quit IRC16:12
*** e0ne has quit IRC16:12
*** jsavak has joined #openstack-keystone16:12
*** david_lyle__ is now known as david_lyle16:17
*** pushkaru has joined #openstack-keystone16:19
*** rderose has joined #openstack-keystone16:22
*** jaosorior has quit IRC16:24
stevemarlbragstad: ++16:25
stevemarsamueldmq: yay!16:25
stevemarsamueldmq: you finally rebased that beast huh?16:26
*** anush has quit IRC16:27
*** fpatwa_ has joined #openstack-keystone16:27
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749916:29
*** daemontool__ has joined #openstack-keystone16:30
*** mhickey has quit IRC16:31
*** fpatwa_ has quit IRC16:32
samueldmqstevemar: hey, still in the middle, posting second patch in a bit :)16:33
samueldmqstevemar: should be quicker now that I finished assignment and resource o/16:33
*** anush has joined #openstack-keystone16:33
*** daemontool_ has quit IRC16:34
*** daemontool__ is now known as daemontool16:34
samueldmqstevemar: actually it's been easier to do the work again than trying to rebase what we had16:36
*** anush has quit IRC16:36
*** petertr7 is now known as petertr7_away16:37
*** Ephur has joined #openstack-keystone16:38
*** roxanaghe has joined #openstack-keystone16:40
*** jsavak has quit IRC16:40
*** jsavak has joined #openstack-keystone16:41
*** fhubik has quit IRC16:42
*** spzala has quit IRC16:44
*** spzala has joined #openstack-keystone16:44
*** anush has joined #openstack-keystone16:45
*** pece has quit IRC16:50
*** rcernin has quit IRC16:51
*** timcline has joined #openstack-keystone16:52
*** pece has joined #openstack-keystone16:54
kfox1111I'm curious, why aren't the public clouds pushing the k2k dashboard patch?16:55
kfox1111without it, its not really feasable to federate your private cloud out to public ones...16:56
*** timcline has quit IRC16:57
*** _pece has joined #openstack-keystone16:58
*** timcline has joined #openstack-keystone16:58
*** clenimar has quit IRC17:00
*** pece has quit IRC17:01
*** jsavak has quit IRC17:02
*** sdake_ has joined #openstack-keystone17:02
*** timcline has quit IRC17:02
*** sdake has quit IRC17:03
*** jed56 has joined #openstack-keystone17:07
*** sdake_ is now known as sdake17:07
*** kiran-r has quit IRC17:08
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split resource backend tests  https://review.openstack.org/26870217:08
*** breton has quit IRC17:08
*** dan_nguyen has joined #openstack-keystone17:09
*** breton has joined #openstack-keystone17:09
*** bjornar has joined #openstack-keystone17:13
*** shaleh has joined #openstack-keystone17:13
*** breton has quit IRC17:14
shalehsamueldmq: I see new rounds of your unit test refactoring. Keep it up!17:14
*** breton has joined #openstack-keystone17:15
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split token backend tests  https://review.openstack.org/26911117:17
samueldmqshaleh: yes ^ there we go!17:17
shalehsamueldmq: why are you marking them WIP?17:17
*** mhickey has joined #openstack-keystone17:18
shalehyet another thing I dislike with the new gerrit. It is hard to understand patch depends.17:19
shalehDo I read that list from top to bottom?17:19
*** trown is now known as trown|lunch17:20
samueldmqshaleh: from bottom to top, starting at assignment17:21
samueldmqshaleh: I made the first worfkflow-1 because I made a bad rebase17:22
shalehsamueldmq: ah17:22
shalehsamueldmq: easy to do17:22
samueldmqshaleh: but it isn't -1ed anymore17:22
shalehsamueldmq: do you feel this is ready to +2/+2?17:22
samueldmqshaleh: maybe you're not looking at the right patch set - which can easily happen with the new interface too17:22
samueldmqshaleh: yes I do; this is all about moving code around17:23
shalehsamueldmq: agreed. It being a bug day, maybe we can get momentum on this.17:23
samueldmqshaleh: ++ I hope so :)17:24
samueldmqshaleh: I am basically re-doing the work with these patches17:25
shalehsamueldmq: how much longer until you have the whole chain updated?17:25
samueldmqshaleh: rebasing would cost more effort17:25
samueldmqshaleh: 30 mins I think; I am already going through the rest17:25
shalehsamueldmq: excellent17:26
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split trust backend tests  https://review.openstack.org/26911517:26
samueldmqshaleh: ^17:26
samueldmq:)17:26
*** jasonsb has quit IRC17:26
shalehIf we can get this pushed we can then focus on updating the merge conflicts that will result.17:26
samueldmqshaleh: yep, however there won't be that much (as it'd have been if we had merged during midcycle)17:27
shalehI updated a patch this week that will likely be in conflict and need to be rebased.17:28
shalehagreed, probably a small, manageable number17:28
*** phalmos has quit IRC17:28
shalehsamueldmq: as soon as the gates verify it I will +117:29
*** rudolfvriend has quit IRC17:31
*** jdennis has quit IRC17:31
*** phalmos has joined #openstack-keystone17:33
samueldmqshaleh: perfect, thanks!17:33
*** lunarlamp has joined #openstack-keystone17:33
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split catalog backend tests  https://review.openstack.org/26912517:35
*** spandhe has joined #openstack-keystone17:36
*** browne has joined #openstack-keystone17:37
*** daemontool_ has joined #openstack-keystone17:37
*** anush has quit IRC17:38
*** rderose has quit IRC17:38
*** spandhe_ has joined #openstack-keystone17:40
*** spandhe has quit IRC17:40
*** spandhe_ is now known as spandhe17:40
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split policy backend tests  https://review.openstack.org/26913317:40
*** daemontool has quit IRC17:41
*** jistr has quit IRC17:46
openstackgerritMerged openstack/python-keystoneclient: Update Client examples to use sessions  https://review.openstack.org/28580817:49
*** mhickey has quit IRC17:49
shalehsamueldmq: first +2, you just need to campaign for one more :-)17:50
samueldmqshaleh: there we go!17:51
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split identity backend tests  https://review.openstack.org/26914817:52
samueldmqshaleh: ^last one! just need one more cleaning 2 things up (I added TODO for things that were not just about moving code around)17:52
*** trown|lunch is now known as trown17:53
shalehsamueldmq: https://review.openstack.org/#/c/218610/ <-- Brant abandoned this due to lack of time. Might be something you could pick up.17:54
patchbotshaleh: patch 218610 - keystone - Change notifications tests to not start servers (ABANDONED)17:54
*** gyee has joined #openstack-keystone17:55
*** ChanServ sets mode: +v gyee17:55
*** wxy has quit IRC17:59
samueldmqshaleh: I will put on TODO list; still have to implement functional tests on ksc (I committed to it)18:00
samueldmqshaleh: but sure something to look at, thanks18:00
shalehsamueldmq: welcome18:01
samueldmqshaleh: gotta update last 5 patches, I thoguht we had get ride of test_backend_kvs :(18:05
*** petertr7_away is now known as petertr718:05
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split token backend tests  https://review.openstack.org/26911118:06
shalehsamueldmq: grumble18:06
shalehsamueldmq: if we can get at least one +2/+2 that is less hassle for you18:06
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split trust backend tests  https://review.openstack.org/26911518:07
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split catalog backend tests  https://review.openstack.org/26912518:08
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split policy backend tests  https://review.openstack.org/26913318:09
*** shangxdy has quit IRC18:09
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split identity backend tests  https://review.openstack.org/26914818:10
*** permalac has quit IRC18:12
*** yarkot_ has joined #openstack-keystone18:13
raildodstanek: ping, what is the best option to handle with backward compatibility following your suggestion? https://review.openstack.org/#/c/134095/ update all endpoints with region_id==None?18:18
patchbotraildo: patch 134095 - keystone - Constraint to prevent duplicate endpoints18:18
*** lhcheng has joined #openstack-keystone18:19
*** ChanServ sets mode: +v lhcheng18:19
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Cleanup from from split of token backend tests  https://review.openstack.org/28862218:20
*** yarkot_ has quit IRC18:21
*** _pece has quit IRC18:23
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split assignment backend tests  https://review.openstack.org/26830718:24
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split resource backend tests  https://review.openstack.org/26870218:26
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split token backend tests  https://review.openstack.org/26911118:27
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split trust backend tests  https://review.openstack.org/26911518:28
*** fpatwa_ has joined #openstack-keystone18:28
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split catalog backend tests  https://review.openstack.org/26912518:28
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split policy backend tests  https://review.openstack.org/26913318:29
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split token backend tests  https://review.openstack.org/26911118:31
samueldmqsooo cool to rebase18:32
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split trust backend tests  https://review.openstack.org/26911518:32
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split catalog backend tests  https://review.openstack.org/26912518:32
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split policy backend tests  https://review.openstack.org/26913318:32
*** fpatwa_ has quit IRC18:33
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Split identity backend tests  https://review.openstack.org/26914818:36
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Cleanup from from split of token backend tests  https://review.openstack.org/28862218:37
*** henrynash has quit IRC18:41
*** pcaruana has quit IRC18:41
*** spzala has quit IRC18:48
*** spzala has joined #openstack-keystone18:48
lbragstadstevemar I'm going to push a wip fix for https://bugs.launchpad.net/keystone/+bug/155279518:49
openstackLaunchpad bug 1552795 in OpenStack Identity (keystone) "enhance notification for user events with user name" [Undecided,New]18:49
lbragstadstevemar I think there are only a few tests not passing - but I have to step away... the nested domain logic is breaking a bunch of stuff18:49
*** doug-fis_ is now known as doug-fish18:50
*** henrynash has joined #openstack-keystone18:52
*** ChanServ sets mode: +v henrynash18:52
*** henrynash has quit IRC18:53
*** jdennis has joined #openstack-keystone18:54
openstackgerritLance Bragstad proposed openstack/keystone: Send notifications with entity name in payload  https://review.openstack.org/28864318:54
*** anush has joined #openstack-keystone18:59
*** jorge_munoz has quit IRC19:01
*** pece has joined #openstack-keystone19:01
shalehsamueldmq: one down!19:06
*** rk4n_ has joined #openstack-keystone19:07
*** pece has quit IRC19:10
*** rk4n has quit IRC19:10
*** rk4n_ has quit IRC19:12
*** pece has joined #openstack-keystone19:17
dstanekraildo: it's possible that the only way to do that is to enforce it in the driver19:21
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/28846819:22
openstackgerritAlexander Makarov proposed openstack/keystoneauth: Examples for kerberos and saml2 plugins  https://review.openstack.org/28866919:22
*** jed56 has quit IRC19:23
*** gyee has quit IRC19:23
*** gyee has joined #openstack-keystone19:31
*** ChanServ sets mode: +v gyee19:31
samueldmqshaleh: :D19:32
*** tqtran-afk has joined #openstack-keystone19:34
*** sdake has quit IRC19:36
*** fangxu has joined #openstack-keystone19:37
*** sdake has joined #openstack-keystone19:37
*** pushkaru has quit IRC19:40
openstackgerritSean Perry proposed openstack/keystone: Migrate_repo init version helper  https://review.openstack.org/13764019:42
*** rk4n has joined #openstack-keystone19:45
*** rk4n has quit IRC19:50
*** fawadkhaliq has joined #openstack-keystone19:52
*** tqtran-afk is now known as tqtran19:54
*** slberger has quit IRC20:01
*** slberger has joined #openstack-keystone20:02
*** anush has quit IRC20:02
*** jorge_munoz has joined #openstack-keystone20:06
*** sheel has quit IRC20:07
raildodstanek: I was think of doing this in the script migration20:12
*** jorge_munoz has quit IRC20:12
dstanekraildo: you'd have to do that for old data, but you'd still have to modify the driver for new data20:12
raildodstanek: ok, got it. I was think in do this in a different patch20:14
*** jbell8 has joined #openstack-keystone20:16
*** roxanaghe has quit IRC20:16
dstanekraildo: i would put a patch right before the existing one that "Makes region_id not null in the SQL driver" or something like that20:18
raildodstanek: yes, this is the idea :)20:19
raildodstanek: great, thanks20:19
dstanekraildo: i think doing this in the manager, like the other patch, isn't correct since it forces all drivers to be dumb just because SQL is dumb20:19
*** slberger has quit IRC20:20
raildodstanek: makes sense, I think doing this in the manager could be a good solution when we want to do this independent of the driver, or any similar situation.20:21
dstanekraildo: since it breaks expectations i think it should only be done if necessary20:22
htrutadstanek, raildo: I'd rather make it not nullable at driver and decode/encode in the manager, as we do for domain_id20:23
*** slberger has joined #openstack-keystone20:23
dstanekhtruta: i actually don't think the manager should know about the "fake" null20:24
dstanekhtruta: it's a super leaky abstraction20:24
*** rcarrillocruz has joined #openstack-keystone20:24
rcarrillocruzhey folks20:24
htrutadstanek: right! this is done in the driver now, right?20:24
rcarrillocruzquick question:20:24
rcarrillocruzis 'member' role a predefined role on all openstack keystone installations?20:24
dstanekhtruta: tbh, i'm not sure20:24
rcarrillocruzor is it something devstack creates?20:24
htrutadstanek: let me check20:24
htrutadstanek: it's in the driver: https://github.com/openstack/keystone/blob/master/keystone/resource/backends/sql.py#L3120:25
samueldmqrcarrillocruz: I believe member is created by devstack, however there is an internal _member_ role20:25
samueldmqrcarrillocruz: see https://github.com/openstack/keystone/blob/b2b75412f15ad635273096b147999050fb0ac79b/keystone/common/config.py#L92-L10220:26
htrutadstanek: manager just sends it "none" and the driver deals with the encoding and decoding20:26
samueldmqrcarrillocruz: there is an explanation there in the help text20:26
rcarrillocruzcrinkle: ^20:26
rcarrillocruzthx samueldmq20:27
samueldmqrcarrillocruz: the one devstack creates is "Member" https://github.com/openstack-dev/devstack/blob/7de80c56e5db1f283a71c0ef9fa2304e7d8e2090/tools/create_userrc.sh#L7420:27
samueldmqrcarrillocruz: np20:27
rcarrillocruznow onto reading how they differ :D20:27
crinklercarrillocruz: samueldmq in my install I don't see _member_ in either `openstack role list` or in the database20:28
dstanekhtruta: nice, although this is uncool https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L95020:28
*** fangxu has quit IRC20:28
htrutadstanek: the weird thing is that this is only declared in manager, but never used20:29
*** fpatwa_ has joined #openstack-keystone20:29
samueldmqcrinkle: devstack?20:29
crinklesamueldmq: no, installed with puppet from uca packages20:30
crinklei don't see anything in the puppet that would have deleted the role20:30
*** pushkaru has joined #openstack-keystone20:30
dstanekhtruta: yeah, it should be moved into the driver20:31
dstanekhtruta: i'd immediately +2 that!20:31
samueldmqdstanek: bknudson: any clue on how default role (member_role_name) gets created?20:31
bknudsonsamueldmq: maybe on demand?20:32
htrutadstanek: isn't this in manager because we need it for backward compatibility?20:32
samueldmqbknudson: yes https://github.com/openstack/keystone/blob/10c7a00a64a6f0162cb18d52ead54f8fe7de94b0/keystone/assignment/core.py#L18720:32
samueldmqbknudson: thanks20:32
dstanekcrinkle: do you have a different role configured for member_role_name?20:32
rcarrillocruzcrinkle: https://ask.openstack.org/en/question/4759/member-vs-_member_/20:32
samueldmqcrinkle: it's created on demand, see https://github.com/openstack/keystone/blob/10c7a00a64a6f0162cb18d52ead54f8fe7de94b0/keystone/assignment/core.py#L18720:33
rcarrillocruzso no really defaults, just a recommendation and/or cargo-cult20:33
samueldmqbrb20:33
samueldmqrcarrillocruz: cc20:33
samueldmq^20:33
dstanekhtruta: what would need it? only our driver implementation should use it20:33
*** fpatwa_ has quit IRC20:33
bknudsonwe needed a role for when you assign a user to a project using the v2 API20:33
htrutadstanek: the legacy and the new driver. Either declare it there, or in each driver20:33
crinkledtroyer: no20:33
crinkleer dstanek sorry20:33
bknudsonlegacy stuff20:34
dstanekhtruta: but only the new driver version should use it so nothing else can be depending on it20:34
*** jorge_munoz has joined #openstack-keystone20:35
crinklesamueldmq: oh, so we need to give the user a default project before _member_ will be created?20:35
htrutadstanek: I'll see what happens when we move it20:35
htrutadstanek: but you're ok with this implementation on the endpoint conflict stuff, right?20:35
*** jdennis has quit IRC20:37
*** jdennis has joined #openstack-keystone20:38
dstanekhtruta: i'm not sure. i'd have to look and see what the mysql docs say to do20:38
*** sdake has quit IRC20:39
*** ericksonsantos has quit IRC20:45
samueldmqcrinkle: yes, using the v2 API20:49
samueldmqcrinkle: then it will be created on first use, legacy stuff, as bknudson said20:50
rcarrillocruzcrinkle: to be fair, ^ that tells me you should stick to 'user' role20:50
rcarrillocruzas, it won't matter20:50
crinklercarrillocruz: i concur, since we want to be using the v3 api anyway20:53
rcarrillocruzyup20:53
crinklety samueldmq and bknudson20:53
rcarrillocruzi +1'd your change20:53
crinkle\o/20:53
samueldmqrcarrillocruz: np20:54
*** rk4n has joined #openstack-keystone20:54
*** jdennis has quit IRC20:57
*** rk4n has quit IRC20:57
*** rk4n has joined #openstack-keystone20:58
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Cleanup from from split of token backend tests  https://review.openstack.org/28862221:01
*** rk4n has quit IRC21:02
*** sdake has joined #openstack-keystone21:05
stevemarsamueldmq: your entire chain is approved!21:08
*** rcarrillocruz has left #openstack-keystone21:08
samueldmqstevemar: \o/21:10
samueldmqbknudson: stevemar: thanks for the reviews :)21:10
samueldmqshaleh: ^21:10
lbragstadstevemar quick question for you21:12
lbragstadand anyone else with opinion on how notification should be dealt with21:13
lbragstadstevemar it seems that we leverage most of our notification framework with `notification.Audit.<operation>`21:14
lbragstadit doesn't look like the original decorator is used anymore21:14
lbragstadstevemar should just go whole hog and issue *all* notifications with `notification.Audit.created` or do we still have a strong use case for keeping two implementations around?21:15
*** __zouyee has joined #openstack-keystone21:15
shalehsamueldmq: ^521:16
*** raildo is now known as raildo-afk21:17
*** fangxu has joined #openstack-keystone21:18
lbragstador dstanek - since you're decorator savvy ^21:18
samueldmqlbragstad: so we emit 2 types of notif ?21:19
lbragstadsamueldmq we have two different ways to emit a notification21:19
lbragstad1.) we either wrap a method with a notification decorator21:19
lbragstad2.) we just use `notifications.Audit.created()` in the method.21:20
samueldmqlbragstad: do you want to use annotation for all cases?21:20
stevemarlbragstad: ohhh good point... i wonder if the decorator is used any more?21:20
lbragstadone way is this - notifications.Audit.updated(self._PROJECT, ret, initiator)21:21
stevemarlbragstad: i like the non-decorator approach21:21
lbragstadand the other is @notifications.role_assignment('created')21:21
lbragstadsamueldmq the issue that i'm hitting is the inconsistency between the two implementations21:22
samueldmqlbragstad: what kind of inconsistency?21:22
lbragstadthe decorated one only sends the resource ID that is being acted on21:22
samueldmqlbragstad: for write operations right ? (update/delete)21:22
lbragstadthe inline method (`notifications.Audit.created()`) I swapped out the resource_id to be the resource reference so that we can include resource names in the notifications instead of just resource IDs21:23
samueldmqstevemar: I like either way :)21:23
stevemarlbragstad: notifications have been in need of a refactor for a while :)21:23
samueldmqstevemar: but I don't like usign lots of annotations in a single method, so if direct method call is clear, let's make it standard21:23
lbragstadstevemar ++21:23
*** roxanaghe has joined #openstack-keystone21:24
*** pauloewerton has quit IRC21:24
lbragstadok - so if we do this, we should probably change everything to use the same implementation21:24
samueldmqlbragstad: nice, so you're proposing we use only th direct calls everywhere (rather than annotated methods)21:24
samueldmqlbragstad: and add more info (resource names)21:24
lbragstadsamueldmq yeah - unless people have a strong preference to keep the decorators21:24
lbragstadI can be convinced otherwise, but...21:24
lbragstadI'd rather have one implementation that handles all of our cases than two, where one handles all cases and one is just there because of the original implementation21:25
samueldmqlbragstad: completly agree on that21:25
samueldmqlbragstad: however if the one implementation should be decorator or not is the question21:25
samueldmqlbragstad: I am fine with direct calls, stevemar said he prefers it too21:25
lbragstadstevemar samueldmq cool - i suppose that should be broken out in a separate patch and not rolled into https://review.openstack.org/#/c/288643/21:26
patchbotlbragstad: patch 288643 - keystone - Send notifications with entity name in payload21:26
openstackgerritLance Bragstad proposed openstack/keystone: Send notifications with entity name in payload  https://review.openstack.org/28864321:28
openstackgerritSean Perry proposed openstack/keystone: Share engine between migration helpers.  https://review.openstack.org/13777821:28
lbragstadsamueldmq stevemar updated - https://review.openstack.org/#/c/288643/221:30
patchbotlbragstad: patch 288643 - keystone - Send notifications with entity name in payload21:30
shalehstevemar: thanks for the feedback on that migration patch. I am trying to clear out the list of lingering reviews.21:31
stevemarshaleh: i appreciate that!21:32
shalehstevemar: there are plenty with mostly positive feedback but the original submitter just walked away21:32
stevemarshaleh: yes, i've noticed, makes them hard to abandon :\21:32
shalehstevemar: I made a list on the Keystone Office hours etherpad if you like21:32
stevemarshaleh: i'll take a peek21:33
shalehstevemar: I have a list of likely abandon cases and another that the existing review is moribund and needs guidance.21:34
stevemarshaleh: i'd love the list of abandon-able ones :D21:34
shalehstevemar: https://etherpad.openstack.org/p/keystone-office-hours <-- look for the abandon list. Links and all.21:35
shalehstevemar: it is a short list currently, I have been chewing on it all week.21:35
shalehstevemar: this is another Bug Friday kind of task we can assign people who understand what is happening but who lack +2 privs.21:36
*** henrynash has joined #openstack-keystone21:37
*** ChanServ sets mode: +v henrynash21:37
*** roxanaghe has quit IRC21:37
*** __zouyee has quit IRC21:41
*** nkinder has quit IRC21:42
*** jorge_munoz has quit IRC21:43
stevemarshaleh: abandoned a few, the revocation list one is still .... blah to me21:45
shalehstevemar: yeah, I get that21:46
*** knikolla has quit IRC21:48
*** roxanaghe has joined #openstack-keystone21:54
dstaneklbragstad: decorators are evil!21:55
dstaneklbragstad: what were you referring to?21:55
lbragstaddstanek we seem to have two different ways to send notifications keystone21:55
lbragstaddstanek one was is with a decorator - which is how notifications were originally implemented (like, back in Folsom)21:56
lbragstaddstanek and the other way is to us an inline state like - `notifications.Audit.created()` inside the method that is doing the operation21:56
* lbragstad dstanek this is because I'm working on fixing - https://bugs.launchpad.net/keystone/+bug/155279521:57
openstackLaunchpad bug 1552795 in OpenStack Identity (keystone) "enhance notification for user events with user name" [Undecided,In progress] - Assigned to Lance Bragstad (lbragstad)21:57
lbragstaddstanek and it seems like the decorated method of issuing notifications isn't really used much (most of the notification in keystone are issued with the inline statement)21:58
lbragstaddstanek so I propose that we either go one way or the other...21:58
*** pcaruana has joined #openstack-keystone21:58
lbragstadand make all notifications inline or decorators - because it will be easier to switch one implementation to accept/issue resource IDs and names than two21:59
dstaneklbragstad: you can't do everything via decorators because those only run before or after a function. you many need to notify based on things that happen in the function.21:59
lbragstaddstanek that's a good point21:59
lbragstaddstanek this goes without saying but the original implementation of notifications was only concerned about issuing the resource ID and that was it22:00
lbragstadas highlighted in that bug report above - people are starting to have use cases where they need more information outside of just an ID.22:00
*** spzala has quit IRC22:01
dstaneklbragstad: yeah, that makes sense. i can see why they would need that22:01
lbragstadi.e. as a consumer of keystone notifications - once you get an identity.uesr.deleted notification you can't exaclty ask keystone for more information with the ID22:01
*** spzala has joined #openstack-keystone22:01
lbragstaddecorators always confuse me so I'm not opposed to this approach22:02
*** roxanaghe has quit IRC22:04
*** roxanaghe has joined #openstack-keystone22:05
*** spzala has quit IRC22:06
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749922:07
*** jbell8 has quit IRC22:07
*** ninag has quit IRC22:07
openstackgerritLance Bragstad proposed openstack/keystone: Remove unused notification decorators  https://review.openstack.org/28876222:08
lbragstaddstanek stevemar samueldmq well - there is the start :)22:08
*** jdennis has joined #openstack-keystone22:09
*** roxanaghe has quit IRC22:10
*** roxanaghe has joined #openstack-keystone22:10
*** e0ne has joined #openstack-keystone22:11
*** roxanagh_ has joined #openstack-keystone22:11
dstaneklbragstad: nice. I'll take s look after dinner22:12
stevemarlbragstad: nice22:12
*** roxanaghe has quit IRC22:12
stevemardstanek: dinner at 5? are you 50?22:12
stevemaror 80?22:12
lbragstadstevemar early dinners are the best!22:14
stevemarlbragstad: oh jeez22:14
lbragstadearly dinner -> wheel of fortune -> bed time..22:14
stevemarlbragstad: gonna have dinner, watch the wheel and bed22:15
stevemarlol22:15
stevemarwow22:15
lbragstadreally...22:15
*** spzala has joined #openstack-keystone22:15
lbragstadstevemar that was weird22:15
stevemarlbragstad: save that for retirement!22:15
stevemargo watch the 10pm showing of deadpool22:15
lbragstadstevemar ++ awesome movie22:15
*** gordc has quit IRC22:17
*** jdennis has quit IRC22:23
*** lhcheng has quit IRC22:25
*** petertr7 is now known as petertr7_away22:26
*** trown is now known as trown|outtypewww22:26
*** jdennis has joined #openstack-keystone22:27
*** jorge_munoz has joined #openstack-keystone22:27
*** fpatwa_ has joined #openstack-keystone22:30
*** jorge_munoz has quit IRC22:32
dstanekstevemar: :p early dinner so i can beat the rush to my favorite all you can eat fish place22:32
stevemardstanek: all you can eat fish? that's very specific22:33
*** lhcheng has joined #openstack-keystone22:33
*** ChanServ sets mode: +v lhcheng22:33
*** fpatwa_ has quit IRC22:34
shalehgah, I really do not like the ones where it works in the debugger and fails in reality22:36
shalehstevemar: I am working on that INIT_VERSION in migrate_repo patch. I get test failures because a db version is not returned. But when I use pdb to trace it everything looks fine. Yay.22:38
stevemarha22:38
openstackgerritLance Bragstad proposed openstack/keystone: Remove the notification.disabled decorator  https://review.openstack.org/28877622:38
openstackgerritLance Bragstad proposed openstack/keystone: Remove _disable_project from the resource API  https://review.openstack.org/28877722:38
openstackgerritLance Bragstad proposed openstack/keystone: Remove _disable_domain from the resource API  https://review.openstack.org/28877822:38
stevemarlbragstad: oh?22:40
lbragstadstevemar oh - yes22:40
stevemarlbragstad: i think any 'disabled' are always false22:41
lbragstadstevemar nope - they default to True22:44
*** pushkaru has quit IRC22:44
*** pushkaru has joined #openstack-keystone22:44
lbragstadstevemar https://github.com/openstack/keystone/blob/9d6ab5d6a9eb4fc07714a49666537333ccb58e20/keystone/notifications.py#L15422:44
*** sheel has joined #openstack-keystone22:45
stevemarhmm, true22:48
shalehstevemar, lbragstad WTF? http://paste.openstack.org/show/489406/ that patch is enough to break that test. I now get a '0' for the db version instead of 66 like expected.22:48
shalehtest_start_version_db_init_version() I mean.22:49
*** henrynash has quit IRC22:50
*** e0ne has quit IRC22:55
*** slberger has quit IRC22:58
*** fangxu has quit IRC22:58
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749922:59
*** edmondsw has quit IRC23:05
*** fangxu has joined #openstack-keystone23:08
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749923:09
*** roxanagh_ has quit IRC23:09
*** slberger has joined #openstack-keystone23:13
*** e0ne has joined #openstack-keystone23:15
gyeestevemar, morgan, it's OK to backport this one as it is API impact? https://bugs.launchpad.net/keystone/+bug/154162123:15
openstackLaunchpad bug 1541621 in OpenStack Identity (keystone) "Invalid fernet X-Subject-Token token should result in 404 instead of 401" [Medium,Fix released] - Assigned to Lance Bragstad (lbragstad)23:15
stevemargyee: propose it and see how it goes :P23:16
gyeestevemar, k, thanks23:16
stevemargyee: i *just* released a new liberty version :P23:16
gyeeahhh23:16
*** slberger1 has joined #openstack-keystone23:16
*** slberger has quit IRC23:18
openstackgerritBrant Knudson proposed openstack/keystone: WIP - Generate swagger  https://review.openstack.org/28749923:19
stevemarbknudson: you are up to no good with your swagger23:21
bknudsonstevemar: paste http://paste.openstack.org/raw/489412/ into http://editor.swagger.io/#/23:21
bknudsonstevemar: I guess that doesn't work... maybe pastebin has a limit on the size23:23
*** spzala has quit IRC23:24
bknudsonalternatively can checkout https://review.openstack.org/#/c/287499/ and then curl  -H "Accept: application/swagger" http://localhost:35357/v323:24
patchbotbknudson: patch 287499 - keystone - WIP - Generate swagger23:24
*** spzala has joined #openstack-keystone23:24
*** sdake has quit IRC23:25
stevemarbknudson: i got most of it23:25
stevemarbknudson: that looks freaking sweet23:25
stevemari am pretty sure bknudson is magical23:25
bknudsonso what I think might work is we can merge this with the result of the docs swagger migration23:26
*** pgbridge has quit IRC23:26
bknudsonI don't know if we actually want keystone to serve up the swagger doc, although maybe that would be useful, too.23:26
*** roxanaghe has joined #openstack-keystone23:27
shalehbknudson: keystone serving it sounds like a good idea23:27
*** spzala has quit IRC23:29
*** Trident has quit IRC23:33
*** fawadkhaliq has quit IRC23:38
*** fawadkhaliq has joined #openstack-keystone23:39
shalehI love fixing too cute code.23:49
openstackgerritLance Bragstad proposed openstack/keystone: Consolidate @notifications.internal into Audit  https://review.openstack.org/28879823:49
openstackgerritLance Bragstad proposed openstack/keystone: Remove unused notification method and class  https://review.openstack.org/28879923:49
shalehproperty foo in the parent class that only subclasses make work by having a _foo variable. Code half uses property and half doesn't.23:50
*** spzala has joined #openstack-keystone23:55
*** slberger1 has left #openstack-keystone23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!