| *** markvoelker has quit IRC | 00:00 | |
| *** real56 has quit IRC | 00:03 | |
| *** real56 has joined #openstack-keystone | 00:03 | |
| *** dims_ has joined #openstack-keystone | 00:27 | |
| *** dims has quit IRC | 00:28 | |
| *** dims has joined #openstack-keystone | 00:33 | |
| *** dims_ has quit IRC | 00:33 | |
| *** EinstCrazy has quit IRC | 00:40 | |
| *** henrynash has joined #openstack-keystone | 00:41 | |
| *** ChanServ sets mode: +v henrynash | 00:41 | |
| *** chlong has quit IRC | 00:51 | |
| *** real56 has quit IRC | 00:52 | |
| *** david-lyle has quit IRC | 00:54 | |
| *** david-lyle has joined #openstack-keystone | 00:54 | |
| *** dave-mccowan has quit IRC | 01:01 | |
| *** chlong has joined #openstack-keystone | 01:06 | |
| *** sheel has joined #openstack-keystone | 01:26 | |
| *** mylu has quit IRC | 01:28 | |
| *** real56 has joined #openstack-keystone | 01:32 | |
| *** henrynash has quit IRC | 01:34 | |
| *** sdake has joined #openstack-keystone | 01:41 | |
| *** markvoelker has joined #openstack-keystone | 01:56 | |
| *** mylu has joined #openstack-keystone | 01:58 | |
| *** markvoelker has quit IRC | 02:00 | |
| *** chlong has quit IRC | 02:07 | |
| *** dims has quit IRC | 02:07 | |
| *** chlong has joined #openstack-keystone | 02:20 | |
| *** dims has joined #openstack-keystone | 02:21 | |
| *** dims has quit IRC | 02:41 | |
| *** pgreg has joined #openstack-keystone | 02:45 | |
| *** sdake has quit IRC | 03:01 | |
| *** pgreg has quit IRC | 03:02 | |
| *** pgreg has joined #openstack-keystone | 03:02 | |
| *** dave-mccowan has joined #openstack-keystone | 03:06 | |
| *** mylu has quit IRC | 03:10 | |
| *** chlong has quit IRC | 03:22 | |
| *** dan_nguyen has joined #openstack-keystone | 03:24 | |
| *** dave-mccowan has quit IRC | 03:26 | |
| *** chlong has joined #openstack-keystone | 03:41 | |
| *** mylu has joined #openstack-keystone | 03:45 | |
| *** dan_nguyen has quit IRC | 03:46 | |
| *** links has joined #openstack-keystone | 03:50 | |
| *** mylu has quit IRC | 03:50 | |
| *** mylu has joined #openstack-keystone | 03:52 | |
| *** markvoelker has joined #openstack-keystone | 03:57 | |
| *** suo has joined #openstack-keystone | 04:00 | |
| *** ekarlso- has quit IRC | 04:00 | |
| *** markvoelker has quit IRC | 04:01 | |
| *** roxanagh_ has joined #openstack-keystone | 04:13 | |
| *** ekarlso- has joined #openstack-keystone | 04:13 | |
| *** roxanagh_ has quit IRC | 04:20 | |
| *** spzala has joined #openstack-keystone | 04:22 | |
| *** chlong has quit IRC | 04:35 | |
| *** spzala has quit IRC | 04:36 | |
| *** chlong has joined #openstack-keystone | 04:48 | |
| *** mylu has quit IRC | 05:02 | |
| *** real56 has quit IRC | 05:03 | |
| *** chlong has quit IRC | 05:03 | |
| *** boris-42 has joined #openstack-keystone | 05:06 | |
| *** mylu has joined #openstack-keystone | 05:11 | |
| *** chlong has joined #openstack-keystone | 05:16 | |
| *** wxy has quit IRC | 05:19 | |
| *** chlong has quit IRC | 05:22 | |
| *** EinstCrazy has joined #openstack-keystone | 05:31 | |
| *** mylu has quit IRC | 05:31 | |
| *** chlong has joined #openstack-keystone | 05:34 | |
| *** kiran-r has joined #openstack-keystone | 05:37 | |
| *** EinstCrazy has quit IRC | 05:38 | |
| *** fawadkhaliq has joined #openstack-keystone | 05:46 | |
| *** markvoelker has joined #openstack-keystone | 05:58 | |
| *** ChanServ sets mode: +o stevemar | 06:02 | |
| *** markvoelker has quit IRC | 06:02 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Zanata https://review.openstack.org/292215 | 06:04 |
|---|---|---|
| *** wxy has joined #openstack-keystone | 06:10 | |
| *** Nirupama has joined #openstack-keystone | 06:11 | |
| *** GB21 has joined #openstack-keystone | 06:12 | |
| *** pgreg has quit IRC | 06:31 | |
| *** jasonsb has joined #openstack-keystone | 06:32 | |
| *** daemontool has quit IRC | 06:34 | |
| *** pgreg has joined #openstack-keystone | 06:35 | |
| *** pcaruana has quit IRC | 06:39 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: create a new `advanced topics` section in the docs https://review.openstack.org/292227 | 06:44 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: group federated identity docs together https://review.openstack.org/292228 | 06:44 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: WIP: allow federated mappings that do not result in groups https://review.openstack.org/291093 | 06:45 |
| *** LZ has joined #openstack-keystone | 06:46 | |
| *** chlong has quit IRC | 06:48 | |
| *** patchbot` has joined #openstack-keystone | 07:04 | |
| *** patchbot has quit IRC | 07:04 | |
| *** patchbot` is now known as patchbot | 07:05 | |
| *** ngupta- has joined #openstack-keystone | 07:05 | |
| *** timburke_ has joined #openstack-keystone | 07:06 | |
| *** sdake has joined #openstack-keystone | 07:06 | |
| *** fawadkhaliq has quit IRC | 07:08 | |
| *** sileht has quit IRC | 07:15 | |
| *** bigjools has quit IRC | 07:15 | |
| *** timburke has quit IRC | 07:15 | |
| *** ngupta has quit IRC | 07:15 | |
| *** dstanek has quit IRC | 07:15 | |
| *** bigjools has joined #openstack-keystone | 07:16 | |
| *** jaosorior has joined #openstack-keystone | 07:16 | |
| *** dstanek has joined #openstack-keystone | 07:16 | |
| *** sileht has joined #openstack-keystone | 07:16 | |
| *** ChanServ sets mode: +v dstanek | 07:17 | |
| *** henrynash has joined #openstack-keystone | 07:23 | |
| *** ChanServ sets mode: +v henrynash | 07:23 | |
| *** mylu has joined #openstack-keystone | 07:32 | |
| *** mylu has quit IRC | 07:37 | |
| *** GB21 has quit IRC | 07:40 | |
| *** pnavarro has joined #openstack-keystone | 07:52 | |
| *** tesseract has joined #openstack-keystone | 07:52 | |
| *** tesseract is now known as Guest59187 | 07:52 | |
| *** markvoelker has joined #openstack-keystone | 07:58 | |
| *** belmoreira has joined #openstack-keystone | 07:59 | |
| *** henrynash has quit IRC | 08:02 | |
| *** markvoelker has quit IRC | 08:03 | |
| openstackgerrit | Merged openstack/keystone: Imported Translations from Zanata https://review.openstack.org/292215 | 08:04 |
| *** rcernin has joined #openstack-keystone | 08:25 | |
| *** jed56 has joined #openstack-keystone | 08:30 | |
| openstackgerrit | Dina Belova proposed openstack/keystone: Integrate OSprofiler in Keystone https://review.openstack.org/103368 | 08:33 |
| *** mylu has joined #openstack-keystone | 08:33 | |
| *** mylu has quit IRC | 08:38 | |
| *** pcaruana has joined #openstack-keystone | 08:43 | |
| *** kiran-r has quit IRC | 08:46 | |
| *** kiran-r has joined #openstack-keystone | 08:46 | |
| *** permalac has joined #openstack-keystone | 08:50 | |
| *** GB21 has joined #openstack-keystone | 08:53 | |
| *** rk4n has joined #openstack-keystone | 08:55 | |
| *** pnavarro has quit IRC | 08:59 | |
| *** mhickey has joined #openstack-keystone | 09:06 | |
| *** rmstar has quit IRC | 09:18 | |
| *** jistr has joined #openstack-keystone | 09:28 | |
| *** rmstar has joined #openstack-keystone | 09:46 | |
| *** e0ne has joined #openstack-keystone | 09:52 | |
| *** GB21 has quit IRC | 09:58 | |
| *** markvoelker has joined #openstack-keystone | 09:59 | |
| *** markvoelker has quit IRC | 10:03 | |
| *** dims has joined #openstack-keystone | 10:09 | |
| breton | o/ | 10:12 |
| *** pgreg has quit IRC | 10:15 | |
| *** dims has quit IRC | 10:21 | |
| *** mvk has joined #openstack-keystone | 10:24 | |
| *** GB21 has joined #openstack-keystone | 10:30 | |
| *** dims has joined #openstack-keystone | 10:30 | |
| *** mylu has joined #openstack-keystone | 10:34 | |
| *** sdake has quit IRC | 10:38 | |
| *** dims has quit IRC | 10:39 | |
| *** dims has joined #openstack-keystone | 10:40 | |
| *** mylu has quit IRC | 10:41 | |
| *** e0ne has quit IRC | 10:45 | |
| *** dave-mccowan has joined #openstack-keystone | 10:45 | |
| *** e0ne has joined #openstack-keystone | 10:56 | |
| *** tellesnobrega_af is now known as tellesnobrega | 11:03 | |
| *** rodrigods has quit IRC | 11:04 | |
| *** rodrigods has joined #openstack-keystone | 11:04 | |
| *** kiran-r has quit IRC | 11:06 | |
| *** fawadkhaliq has joined #openstack-keystone | 11:09 | |
| *** GB21 has quit IRC | 11:10 | |
| *** e0ne has quit IRC | 11:21 | |
| *** e0ne has joined #openstack-keystone | 11:26 | |
| *** gordc has joined #openstack-keystone | 11:35 | |
| *** dims_ has joined #openstack-keystone | 11:45 | |
| *** dims has quit IRC | 11:47 | |
| *** tellesnobrega is now known as tellesnobrega_af | 11:47 | |
| *** markvoelker has joined #openstack-keystone | 12:00 | |
| *** chlong has joined #openstack-keystone | 12:01 | |
| *** markvoelker has quit IRC | 12:04 | |
| *** jaosorior has quit IRC | 12:08 | |
| *** jaosorior has joined #openstack-keystone | 12:08 | |
| *** real56 has joined #openstack-keystone | 12:10 | |
| *** iurygregory has joined #openstack-keystone | 12:17 | |
| *** real56 has quit IRC | 12:27 | |
| *** real56 has joined #openstack-keystone | 12:28 | |
| *** suo has quit IRC | 12:30 | |
| *** edmondsw has joined #openstack-keystone | 12:31 | |
| *** boris-42 has quit IRC | 12:34 | |
| *** trown|outtypewww is now known as trown | 12:34 | |
| *** ninag has joined #openstack-keystone | 12:41 | |
| *** clenimar has quit IRC | 12:45 | |
| *** links has quit IRC | 12:46 | |
| *** ninag has quit IRC | 12:46 | |
| *** links has joined #openstack-keystone | 12:46 | |
| *** real56 has quit IRC | 12:48 | |
| *** real56 has joined #openstack-keystone | 12:48 | |
| *** tellesnobrega_af is now known as tellesnobrega | 12:49 | |
| *** ninag has joined #openstack-keystone | 12:51 | |
| *** markvoelker has joined #openstack-keystone | 12:51 | |
| *** Nirupama has quit IRC | 12:56 | |
| *** kaliya has joined #openstack-keystone | 13:02 | |
| *** EinstCrazy has joined #openstack-keystone | 13:04 | |
| *** yarkot_ has joined #openstack-keystone | 13:19 | |
| *** BigWillie has joined #openstack-keystone | 13:24 | |
| *** yarkot_ has quit IRC | 13:27 | |
| *** pauloewerton has joined #openstack-keystone | 13:29 | |
| *** krotscheck has joined #openstack-keystone | 13:31 | |
| *** mylu has joined #openstack-keystone | 13:38 | |
| *** mvk has quit IRC | 13:41 | |
| *** mylu has quit IRC | 13:42 | |
| *** real56 has quit IRC | 13:45 | |
| *** real56 has joined #openstack-keystone | 13:46 | |
| *** richm has joined #openstack-keystone | 13:59 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:00 | |
| *** slberger has joined #openstack-keystone | 14:02 | |
| *** ig0r_ has joined #openstack-keystone | 14:02 | |
| *** spzala has joined #openstack-keystone | 14:05 | |
| *** boris-42 has joined #openstack-keystone | 14:05 | |
| *** pushkaru has joined #openstack-keystone | 14:10 | |
| *** daemontool has joined #openstack-keystone | 14:10 | |
| *** mvk has joined #openstack-keystone | 14:12 | |
| *** Guest12587 is now known as mfisch | 14:13 | |
| *** mfisch is now known as Guest62254 | 14:13 | |
| *** fawadkhaliq has quit IRC | 14:15 | |
| *** Guest62254 is now known as mfisch | 14:15 | |
| *** mfisch has quit IRC | 14:15 | |
| *** mfisch has joined #openstack-keystone | 14:15 | |
| *** fawadkhaliq has joined #openstack-keystone | 14:15 | |
| *** david-lyle has quit IRC | 14:16 | |
| *** knikolla has joined #openstack-keystone | 14:19 | |
| *** david-lyle has joined #openstack-keystone | 14:19 | |
| *** pcaruana has quit IRC | 14:28 | |
| *** pushkaru has quit IRC | 14:28 | |
| *** pushkaru has joined #openstack-keystone | 14:28 | |
| *** roxanagh_ has joined #openstack-keystone | 14:31 | |
| openstackgerrit | Stuart McLaren proposed openstack/python-keystoneclient: Allow seeing full token response when debug enabled https://review.openstack.org/292414 | 14:32 |
| *** spzala has quit IRC | 14:35 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Consolidate @notifications.internal into Audit https://review.openstack.org/288798 | 14:35 |
| *** spzala has joined #openstack-keystone | 14:36 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Remove unused notification method and class https://review.openstack.org/288799 | 14:36 |
| *** spzala has quit IRC | 14:40 | |
| *** spzala has joined #openstack-keystone | 14:48 | |
| *** fawadkhaliq has quit IRC | 14:51 | |
| *** fawadkhaliq has joined #openstack-keystone | 14:51 | |
| openstackgerrit | Stuart McLaren proposed openstack/keystoneauth: Allow seeing full token response when debug enabled https://review.openstack.org/292440 | 15:06 |
| *** mylu has joined #openstack-keystone | 15:09 | |
| *** jorge_munoz has joined #openstack-keystone | 15:09 | |
| *** mylu has quit IRC | 15:10 | |
| *** nkinder has joined #openstack-keystone | 15:17 | |
| *** daemontool has quit IRC | 15:22 | |
| *** arunkant has quit IRC | 15:22 | |
| *** daemontool has joined #openstack-keystone | 15:22 | |
| *** links has quit IRC | 15:23 | |
| anteaya | hey keystone, I'm not sure if you have third party operators interacting with you or not but should you care that gerrit's ip is changing next month, well it is: http://lists.openstack.org/pipermail/openstack-dev/2016-March/088985.html | 15:23 |
| *** ig0r__ has joined #openstack-keystone | 15:23 | |
| stevemar | anteaya: we have 0 3rd party ops :O | 15:24 |
| morgan | anteaya: yeah never got any 3rd party CI working with keystone - or the one we had disappeared | 15:25 |
| morgan | anteaya: thnx for the heads up | 15:26 |
| *** doug-fis_ has joined #openstack-keystone | 15:26 | |
| *** ig0r_ has quit IRC | 15:26 | |
| anteaya | stevemar: luck you | 15:27 |
| anteaya | morgan: welcome | 15:27 |
| *** doug-fish has quit IRC | 15:27 | |
| anteaya | ah keystone | 15:27 |
| anteaya | so lovely | 15:27 |
| anteaya | :) | 15:27 |
| stevemar | anteaya: we are the coolest project | 15:28 |
| stevemar | and most humble | 15:28 |
| anteaya | stevemar: that was supposed to be lucky you, but I missed the y | 15:28 |
| anteaya | stevemar: yes, coolest and most humble is how I tell it to my friends | 15:28 |
| stevemar | :] | 15:32 |
| *** jaugustine has joined #openstack-keystone | 15:36 | |
| stevemar | morgan: ksa option bug here: https://bugs.launchpad.net/keystoneauth/+bug/1556426 | 15:40 |
| openstack | Launchpad bug 1556426 in keystoneauth "Warnings when generating config files" [Undecided,New] | 15:40 |
| morgan | stevemar: duplicate of another bug we already have | 15:41 |
| *** henrynash has joined #openstack-keystone | 15:41 | |
| *** ChanServ sets mode: +v henrynash | 15:41 | |
| morgan | orwe had? | 15:42 |
| morgan | there was one from dhellmann | 15:42 |
| morgan | stevemar: dupe of https://bugs.launchpad.net/keystoneauth/+bug/1548433 | 15:43 |
| openstack | Launchpad bug 1548433 in keystoneauth "neutron returns objects other than oslo_config.cfg.Opt instances from list_opts" [Undecided,Incomplete] | 15:43 |
| morgan | stevemar: marked as a dupe | 15:44 |
| morgan | stevemar: needs some direction on how to solve it | 15:44 |
| stevemar | morgan: yar | 15:47 |
| morgan | stevemar: marked the "new" bug as a dup | 15:50 |
| *** arunkant has joined #openstack-keystone | 15:54 | |
| *** timcline has joined #openstack-keystone | 15:58 | |
| *** timcline has quit IRC | 16:01 | |
| *** daemontool has quit IRC | 16:01 | |
| *** timcline has joined #openstack-keystone | 16:02 | |
| *** pcaruana has joined #openstack-keystone | 16:09 | |
| *** fawadkhaliq has quit IRC | 16:11 | |
| *** EinstCrazy has quit IRC | 16:14 | |
| *** iurygregory has quit IRC | 16:16 | |
| *** gyee has joined #openstack-keystone | 16:17 | |
| *** ChanServ sets mode: +v gyee | 16:17 | |
| *** kaliya has quit IRC | 16:24 | |
| *** tqtran has joined #openstack-keystone | 16:25 | |
| *** iurygregory has joined #openstack-keystone | 16:28 | |
| *** fawadkhaliq has joined #openstack-keystone | 16:29 | |
| *** kaliya has joined #openstack-keystone | 16:30 | |
| *** sdake has joined #openstack-keystone | 16:31 | |
| *** Guest59187 has quit IRC | 16:31 | |
| *** ccard__ has quit IRC | 16:35 | |
| *** chem has quit IRC | 16:37 | |
| *** chem has joined #openstack-keystone | 16:38 | |
| *** real56 has quit IRC | 16:40 | |
| *** real56 has joined #openstack-keystone | 16:41 | |
| *** doug-fis_ has quit IRC | 16:41 | |
| *** doug-fish has joined #openstack-keystone | 16:41 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 16:46 | |
| *** doug-fish has quit IRC | 16:47 | |
| *** lhcheng has joined #openstack-keystone | 16:48 | |
| *** ChanServ sets mode: +v lhcheng | 16:48 | |
| *** real56 has quit IRC | 16:52 | |
| *** real56 has joined #openstack-keystone | 16:52 | |
| dhellmann | stevemar, morgan : commented on the bug | 16:53 |
| morgan | dhellmann: thnx. | 16:53 |
| stevemar | dhellmann: thx | 16:53 |
| *** rcernin has quit IRC | 16:56 | |
| *** chlong has quit IRC | 16:56 | |
| *** woodster_ has joined #openstack-keystone | 17:00 | |
| *** doug-fish has joined #openstack-keystone | 17:01 | |
| *** belmoreira has quit IRC | 17:07 | |
| *** dims has joined #openstack-keystone | 17:08 | |
| *** dims_ has quit IRC | 17:09 | |
| *** jasonsb has quit IRC | 17:12 | |
| *** real56 has quit IRC | 17:12 | |
| *** real56 has joined #openstack-keystone | 17:13 | |
| samueldmq | stevemar: hi, about patch 291202 | 17:13 |
| patchbot | samueldmq: https://review.openstack.org/#/c/291202/ - python-keystoneclient - Enhance base functional class to default info | 17:13 |
| *** dan_nguyen has joined #openstack-keystone | 17:15 | |
| *** sdake_ has joined #openstack-keystone | 17:15 | |
| *** e0ne has quit IRC | 17:17 | |
| *** sdake has quit IRC | 17:17 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 17:18 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: WIP/DNM Unified delegation trust driver https://review.openstack.org/291871 | 17:18 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 17:18 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 17:19 |
| *** trown has quit IRC | 17:24 | |
| samueldmq | stevemar: actually that's a good question | 17:24 |
| samueldmq | stevemar: I think it's called get_legacy_client because it was designed to work with shade, which is a client library for the whole cloud | 17:25 |
| samueldmq | stevemar: so getting an individual client is treated as legacy in os-client-config | 17:25 |
| *** trown has joined #openstack-keystone | 17:25 | |
| samueldmq | mordred: hi, could you please check if my rationale above is correct? | 17:26 |
| stevemar | samueldmq: ah i think you are right | 17:26 |
| samueldmq | stevemar: nice, just left a comment inline, I will update it now to pass jenkins | 17:27 |
| knikolla | I'm not sure how to interpret the CI fails on https://review.openstack.org/#/c/292492/ | 17:28 |
| patchbot | knikolla: patch 292492 - keystone - Check for duplicates without inserting in keystone... | 17:28 |
| morgan | ooh. 4th gen x1carbon available | 17:28 |
| *** jistr has quit IRC | 17:28 | |
| mordred | samueldmq: not just shade - openstacksdk is also a thing people should use insteaed of python-*client | 17:29 |
| mordred | samueldmq: in theory, python-*client should be considered deprecated-ish | 17:29 |
| mordred | except that their replacements have not really taken hold yet :) | 17:29 |
| samueldmq | mordred: hehe | 17:30 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add docs for additional bootstrap endpoint parameters https://review.openstack.org/290226 | 17:30 |
| samueldmq | mordred: that makes sense (or at least will soon once the replacements have taken hold) | 17:30 |
| samueldmq | mordred: thx | 17:30 |
| stevemar | samueldmq: morgan https://review.openstack.org/#/c/290226/2 | 17:31 |
| patchbot | stevemar: patch 290226 - keystone - Add docs for additional bootstrap endpoint parameters | 17:31 |
| *** mylu has joined #openstack-keystone | 17:31 | |
| *** adelia has joined #openstack-keystone | 17:31 | |
| *** jaosorior has quit IRC | 17:37 | |
| mordred | samueldmq: \o/ | 17:38 |
| samueldmq | stevemar: "By not creating an endpoint in the catalog users will need to provide endpoint overrides to perform additional identity operations." | 17:39 |
| samueldmq | stevemar: what does that mean in practice ? | 17:39 |
| samueldmq | stevemar: e.g when calling an osclient command the user will need to provide an endpoint url ? (besides OS_AUTH_URL) | 17:41 |
| mordred | yah | 17:44 |
| *** mylu has quit IRC | 17:44 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Enhance functional class to provide default info https://review.openstack.org/291202 | 17:45 |
| samueldmq | mordred: kk thx | 17:46 |
| *** mylu has joined #openstack-keystone | 17:47 | |
| *** jorge_munoz has quit IRC | 17:48 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Add users functional tests https://review.openstack.org/289306 | 17:49 |
| *** alejandrito has joined #openstack-keystone | 17:51 | |
| *** real56 has quit IRC | 17:56 | |
| *** real56 has joined #openstack-keystone | 17:57 | |
| *** browne has joined #openstack-keystone | 17:58 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add docs for additional bootstrap endpoint parameters https://review.openstack.org/290226 | 18:00 |
| *** rderose has joined #openstack-keystone | 18:00 | |
| *** real56 has quit IRC | 18:02 | |
| *** real56 has joined #openstack-keystone | 18:02 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Release note cleanup https://review.openstack.org/292540 | 18:08 |
| *** mvk has quit IRC | 18:09 | |
| *** e0ne has joined #openstack-keystone | 18:11 | |
| *** mmarin has joined #openstack-keystone | 18:12 | |
| *** rmstar has quit IRC | 18:13 | |
| mmarin | Hi, for the translation of file keystone.po I have some questions regarding variables, can you help? | 18:13 |
| mmarin | Can you explain by what are the variables resolved in the following strings by giving an example? %(prior_role_id)s does not imply %(implied_role_id)s %(role_id)s cannot be an implied roles ? | 18:14 |
| *** mhickey has quit IRC | 18:15 | |
| mmarin | Can you give an example with %(prior_role_id)s and %(implied_role_id)s resolved? | 18:15 |
| *** doug-fish has quit IRC | 18:15 | |
| *** kaliya has quit IRC | 18:15 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update reported version for Mitaka https://review.openstack.org/292542 | 18:16 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:16 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:17 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:17 |
| bknudson | mmarin: they're IDs, so it's just a random uuid string | 18:18 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:18 |
| *** permalac has quit IRC | 18:19 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:19 |
| *** timcline has quit IRC | 18:19 | |
| *** rmstar has joined #openstack-keystone | 18:19 | |
| *** timcline has joined #openstack-keystone | 18:20 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:20 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:21 |
| mmarin | any answer for me? | 18:21 |
| stevemar | mmarin: like bknudson said, they are just UUIDs | 18:23 |
| stevemar | mmarin: so X does not imply Y. So X cannot be an implied role | 18:23 |
| *** timcline has quit IRC | 18:24 | |
| stevemar | bknudson: thanks for the release note clean up, was just going to start looking at that | 18:24 |
| bknudson | stevemar: no problem | 18:24 |
| mmarin | ok thanks | 18:25 |
| *** doug-fish has joined #openstack-keystone | 18:27 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update reported version for Mitaka https://review.openstack.org/292542 | 18:28 |
| *** mmarin has quit IRC | 18:29 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:29 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users - Concrete role assignments for federated users https://review.openstack.org/284943 | 18:37 |
| *** belmoreira has joined #openstack-keystone | 18:38 | |
| bknudson | might have been a waste of time to add cors middleware to keystone if we're just going to run in apache | 18:39 |
| bknudson | or any wsgi container can add cors headers | 18:39 |
| *** real56 has quit IRC | 18:39 | |
| *** eglute_s is now known as eglute | 18:39 | |
| stevemar | bknudson: ready to merge: https://review.openstack.org/#/c/291712/2 | 18:40 |
| patchbot | stevemar: patch 291712 - python-keystoneclient - Remove keystone bash completion scripts for Keystone | 18:40 |
| morgan | bknudson: *shrug* possibly | 18:40 |
| *** real56 has joined #openstack-keystone | 18:40 | |
| *** bjornar has joined #openstack-keystone | 18:44 | |
| stevemar | rderose: no need to put it in WIP every time :) just change the commit message to say "WIP - shadow users... " | 18:45 |
| rderose | stevemar: ah, okay. thx | 18:46 |
| *** gyee has quit IRC | 18:46 | |
| *** belmoreira has quit IRC | 18:48 | |
| *** maxabidi has joined #openstack-keystone | 18:49 | |
| *** ayoung has quit IRC | 18:54 | |
| samueldmq | stevemar: I think wip should be something only manually added-removed | 18:55 |
| samueldmq | stevemar: so it'd be kept through patchsets | 18:55 |
| bknudson | samueldmq: I think that's a setting in infra. Just like sticky -2 | 18:56 |
| samueldmq | bknudson: hmm, I will ask/suggest there | 18:56 |
| stevemar | The V8 BLAH driver interface is deprecated. Support for the V8 BLAH driver interface is planned to be removed in the 'O' release of OpenStack. | 18:57 |
| stevemar | bknudson: thanks for standardizing the wording :] | 18:57 |
| bknudson | there used to be text that said that it would continue to work. The release notes don't need to say that things that worked before continue to work. | 18:58 |
| stevemar | bknudson: left a comment about adding a link to https://blueprints.launchpad.net/keystone/+spec/bootstrap | 18:59 |
| *** timcline has joined #openstack-keystone | 18:59 | |
| bknudson | stevemar: make any changes you want to I'm not working on it now | 18:59 |
| stevemar | bknudson: roger doger | 19:00 |
| bknudson | I'm not sure how useful it is to have links to all the blueprints and bugs, but doesn't hurt I guess | 19:00 |
| bknudson | I should propose something to reno so that we can move those out and render them nicer | 19:01 |
| *** timcline has quit IRC | 19:04 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Release note cleanup https://review.openstack.org/292540 | 19:05 |
| stevemar | they render decently | 19:05 |
| stevemar | bknudson: ^ | 19:05 |
| samueldmq | stevemar: V8 BLAH is funny :) | 19:07 |
| samueldmq | stevemar: the terminology, not the drivers themselves | 19:07 |
| *** timcline has joined #openstack-keystone | 19:08 | |
| *** timcline has quit IRC | 19:08 | |
| stevemar | samueldmq: the drivers are funny too | 19:08 |
| samueldmq | hehe | 19:09 |
| *** timcline has joined #openstack-keystone | 19:09 | |
| *** mvk has joined #openstack-keystone | 19:12 | |
| *** jaosorior has joined #openstack-keystone | 19:13 | |
| *** clenimar has joined #openstack-keystone | 19:15 | |
| *** doug-fish has quit IRC | 19:17 | |
| *** doug-fish has joined #openstack-keystone | 19:17 | |
| *** doug-fis_ has joined #openstack-keystone | 19:20 | |
| *** ayoung has joined #openstack-keystone | 19:21 | |
| *** ChanServ sets mode: +v ayoung | 19:21 | |
| *** doug-fish has quit IRC | 19:21 | |
| *** doug-fis_ has quit IRC | 19:25 | |
| *** sdake has joined #openstack-keystone | 19:35 | |
| *** sdake_ has quit IRC | 19:36 | |
| *** belmoreira has joined #openstack-keystone | 19:36 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Remove keystone bash completion scripts for Keystone https://review.openstack.org/291712 | 19:38 |
| *** sdake_ has joined #openstack-keystone | 19:43 | |
| *** sdake has quit IRC | 19:45 | |
| *** mylu has quit IRC | 19:45 | |
| *** mylu has joined #openstack-keystone | 19:47 | |
| *** fawadkhaliq has quit IRC | 19:52 | |
| *** maxabidi has quit IRC | 19:52 | |
| *** real56 has quit IRC | 19:52 | |
| *** ayoung has quit IRC | 19:53 | |
| *** mylu has quit IRC | 19:53 | |
| *** mylu has joined #openstack-keystone | 19:54 | |
| stevemar | bknudson: poke https://review.openstack.org/#/c/290226/ | 19:56 |
| patchbot | stevemar: patch 290226 - keystone - Add docs for additional bootstrap endpoint parameters | 19:56 |
| *** mylu has quit IRC | 19:56 | |
| *** mylu has joined #openstack-keystone | 19:58 | |
| *** shaleh has joined #openstack-keystone | 19:58 | |
| shaleh | dstanek: you around? | 19:59 |
| dstanek | shaleh: mostly | 19:59 |
| *** mylu has quit IRC | 20:00 | |
| shaleh | dstanek: while hacking on something else I noticed that the test classes in test_v3_federation derive from a class with its own tests. So these tests run 3 times. When you have time would you look at WebSSOTests and the other bits to see if maybe we can save some time and execution? | 20:00 |
| *** sdake_ has quit IRC | 20:01 | |
| dstanek | shaleh: sure, np | 20:02 |
| samueldmq | stevemar: patch 291202 is now passing jenkins | 20:02 |
| patchbot | samueldmq: https://review.openstack.org/#/c/291202/ - python-keystoneclient - Enhance functional class to provide default info | 20:02 |
| samueldmq | dstanek: bknudson: this may sound interesting for you too ^ | 20:02 |
| shaleh | dstanek: thanks. I have a bunch of spinning plates to track at the moment. | 20:03 |
| *** ig0r_ has joined #openstack-keystone | 20:03 | |
| *** maxabidi has joined #openstack-keystone | 20:03 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Add groups functional tests https://review.openstack.org/292576 | 20:04 |
| samueldmq | let's get a couple of functional tests in our client! :) | 20:04 |
| rodrigods | samueldmq, ++ | 20:05 |
| shaleh | samueldmq: you heretic! | 20:05 |
| samueldmq | rodrigods: shaleh :) | 20:05 |
| samueldmq | for now just adding basic testing, like testing all operations | 20:05 |
| samueldmq | but not trying to get exhasutive on corner cases (like creating users with long names, etc) | 20:06 |
| *** mylu has joined #openstack-keystone | 20:06 | |
| rodrigods | samueldmq, yeah... makes sense, that kind of tests can be done later | 20:06 |
| samueldmq | the goal now is to get a good basic coverage, so writting couple of tests for each subsystem | 20:06 |
| *** ig0r__ has quit IRC | 20:07 | |
| *** rk4n_ has joined #openstack-keystone | 20:07 | |
| *** rk4n_ has quit IRC | 20:08 | |
| *** jaosorior has quit IRC | 20:08 | |
| *** jaosorior has joined #openstack-keystone | 20:08 | |
| *** rk4n has quit IRC | 20:10 | |
| *** mylu has quit IRC | 20:17 | |
| *** mylu has joined #openstack-keystone | 20:17 | |
| *** jaosorior has quit IRC | 20:21 | |
| *** mylu has quit IRC | 20:25 | |
| *** ayoung has joined #openstack-keystone | 20:26 | |
| *** ChanServ sets mode: +v ayoung | 20:26 | |
| *** mriedem has joined #openstack-keystone | 20:29 | |
| mriedem | dolphm: hey, re: stable CPL https://wiki.openstack.org/wiki/CrossProjectLiaisons#Stable_Branch | 20:29 |
| mriedem | dolphm: i'm making my rounds reminding teams to apply for the stable:follows-policy tag http://governance.openstack.org/reference/tags/stable_follows-policy.html | 20:29 |
| *** trown is now known as trown|outtypewww | 20:31 | |
| lbragstad | mriedem dolphm is out this week, do you have a hard deadline for it? | 20:31 |
| *** mylu has joined #openstack-keystone | 20:32 | |
| *** jaosorior has joined #openstack-keystone | 20:32 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Add domains functional tests https://review.openstack.org/292598 | 20:32 |
| mriedem | lbragstad: not really, but we're building automation around it so would be nice to get obvious projects applying for the tag now | 20:32 |
| mriedem | lbragstad: doesn't need to be dolphm | 20:32 |
| mriedem | lbragstad: could be you, or stevemar, or bknudson, or wooly willy | 20:32 |
| lbragstad | mriedem ok - one of us could probably do that | 20:33 |
| bknudson | don't wait for wooly willy to do it | 20:33 |
| lbragstad | yeah - that guy is *lazy* | 20:33 |
| mriedem | well, he's busy shaving | 20:34 |
| *** jaosorior has quit IRC | 20:34 | |
| *** edmondsw has quit IRC | 20:35 | |
| *** mylu has quit IRC | 20:35 | |
| *** dims_ has joined #openstack-keystone | 20:36 | |
| stevemar | mriedem: lbragstad wooly willy is *the WORST* | 20:38 |
| *** dims has quit IRC | 20:38 | |
| stevemar | mriedem: i'll toss up a patch, pretty sure we follow the policy :) | 20:39 |
| *** mylu has joined #openstack-keystone | 20:39 | |
| *** maxabidi has quit IRC | 20:39 | |
| mriedem | well, except for that last thing i was asking about as an API change | 20:39 |
| mriedem | but it was a CVE | 20:40 |
| stevemar | mriedem: yeah, that was an awkward one | 20:40 |
| mriedem | and i believe was more or less backward compatible | 20:40 |
| stevemar | mriedem: yeah, just additional info | 20:40 |
| mriedem | it didn't help that bknudson said, 'of course it's an API change!' | 20:40 |
| stevemar | mriedem: nice to see you running for nova ptl | 20:40 |
| mriedem | thanks | 20:41 |
| mriedem | i took the high road and left the trump quotes out of that email | 20:41 |
| bknudson | hand size | 20:41 |
| shaleh | what, you ARENT going to make OpenStack great again? | 20:41 |
| *** mylu has quit IRC | 20:42 | |
| bknudson | build a wall and make keystone pay for it | 20:42 |
| mriedem | bknudson: no, cinder | 20:42 |
| mriedem | b/c, cinder block | 20:42 |
| mriedem | duh! | 20:42 |
| openstackgerrit | Merged openstack/keystone: Update reported version for Mitaka https://review.openstack.org/292542 | 20:42 |
| mriedem | shaleh: believe me, i'm going to make some great deals | 20:42 |
| shaleh | mriedem: do you know lots of good words? | 20:43 |
| stevemar | he knows big words | 20:43 |
| shaleh | mriedem: do all of the other services love you? | 20:43 |
| mriedem | heh, i haven't seen that one yet | 20:43 |
| shaleh | I fear my my country that we have fallen to this level of stupid. | 20:44 |
| bknudson | stevemar: get ready for an influx of usians. | 20:45 |
| samueldmq | stevemar: patch 286910 is an easy approval, it just removes the old class (TestFernetTokenProvider) which tests have been moved up to TokenAPITests | 20:46 |
| patchbot | samueldmq: https://review.openstack.org/#/c/286910/ - keystone - Remove TestFernetTokenProvider | 20:46 |
| stevemar | bknudson: whatcha mean? | 20:46 |
| bknudson | stevemar: we'll have to move to canada | 20:46 |
| stevemar | ohhh USians | 20:46 |
| *** BigWillie has quit IRC | 20:46 | |
| bknudson | isn't that what we're called? | 20:46 |
| shaleh | bknudson: I don't know. We have not had an assassination in like 50 years. Might be getting close to another one..... | 20:47 |
| stevemar | bknudson: with the CAD doing so poorly, you can all come over and live like kings | 20:47 |
| shaleh | one winter and most of them will run back home. | 20:47 |
| samueldmq | hehe | 20:48 |
| stevemar | its not THAT cold :) | 20:48 |
| shaleh | stevemar: BS. If it was more hospitable we would have invaded by now. | 20:48 |
| stevemar | :] | 20:52 |
| *** rk4n has joined #openstack-keystone | 20:54 | |
| *** henrynash has quit IRC | 20:55 | |
| *** bapalm has quit IRC | 20:55 | |
| *** mriedem has left #openstack-keystone | 20:58 | |
| *** bapalm has joined #openstack-keystone | 20:58 | |
| *** e0ne has quit IRC | 21:00 | |
| openstackgerrit | Merged openstack/keystone: Add docs for additional bootstrap endpoint parameters https://review.openstack.org/290226 | 21:03 |
| shaleh | that is lame. pep8 check calls out '_ = foo()' since '_' is never used. So it is ok to call 'foo()' without assigning it but if I assign it to the standard "ignore the result" value it complains. | 21:03 |
| *** clenimar has quit IRC | 21:07 | |
| *** chlong has joined #openstack-keystone | 21:14 | |
| *** mylu has joined #openstack-keystone | 21:15 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move identity.backends.sql model code to model.py https://review.openstack.org/292611 | 21:15 |
| *** fawadkhaliq has joined #openstack-keystone | 21:17 | |
| *** spzala has quit IRC | 21:21 | |
| *** rderose has quit IRC | 21:21 | |
| *** rk4n has quit IRC | 21:22 | |
| *** rk4n has joined #openstack-keystone | 21:23 | |
| *** jaugustine has quit IRC | 21:24 | |
| *** trown|outtypewww has quit IRC | 21:30 | |
| *** pauloewerton has quit IRC | 21:30 | |
| *** timburke_ is now known as timburke | 21:31 | |
| *** tellesnobrega is now known as tellesnobrega_af | 21:31 | |
| *** rk4n has quit IRC | 21:34 | |
| *** rk4n has joined #openstack-keystone | 21:34 | |
| openstackgerrit | Sean Perry proposed openstack/keystone: IdP deletion triggers token invalidation https://review.openstack.org/213104 | 21:37 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Add groups functional tests https://review.openstack.org/292576 | 21:38 |
| samueldmq | jamielennox: thanks for your update on the base patch, I liked it | 21:38 |
| samueldmq | jamielennox: couple of tests are up to review under https://review.openstack.org/#/q/topic:client-functional-tests | 21:38 |
| *** mylu has quit IRC | 21:43 | |
| *** belmoreira has quit IRC | 21:44 | |
| *** rderose has joined #openstack-keystone | 21:51 | |
| rderose | bknudson when you get a chance, take a look at my comment and let me know if it makes sense: https://review.openstack.org/#/c/292611/1/keystone/identity/backends/model.py | 21:53 |
| patchbot | rderose: patch 292611 - keystone - Move identity.backends.sql model code to model.py | 21:53 |
| *** dims_ has quit IRC | 21:53 | |
| *** adelia_ has joined #openstack-keystone | 21:53 | |
| bknudson | rderose: it doesn't make sense. The model can't depend on what backend is used. | 21:53 |
| bknudson | even the code as is doesn't make sense, since I couldn't replace the shadow backend driver and have it work | 21:54 |
| rderose | bknudson: the model is implemented in sql, regardless if you are using sql or ldap | 21:54 |
| rderose | bknudson: correct, you can't. But I didn't know how else to implement it. I did know that it didn't belong as a identity driver. | 21:56 |
| rderose | bknudson but I needed a way to implement the new shadow user functionality and that seemed like the best option | 21:56 |
| *** adelia has quit IRC | 21:57 | |
| *** adelia_ has quit IRC | 21:57 | |
| rderose | bknudson: regarding the model, so if you are configured to use LDAP, the model (User class for example) will still be used | 21:58 |
| jamielennox | morgan, stevemar: the Opt bugs, you know what's happening there? | 21:59 |
| *** bjornar has quit IRC | 21:59 | |
| bknudson | rderose: how is the user model going to work? you can get local_user and stuff? | 21:59 |
| rderose | if the user is an ldap user, than we will shadow ldap user and return an User object | 22:00 |
| rderose | bknudson ^ | 22:00 |
| rderose | bknudson: User > Federated User | 22:00 |
| rderose | bknudson: User > LDAP User | 22:01 |
| rderose | bknudson: "One User to rule them all" :) | 22:01 |
| bknudson | keystone doesn't use User objects anywhere outside the sql backend. It gets converted to a dict when returned | 22:01 |
| *** mylu has joined #openstack-keystone | 22:03 | |
| rderose | bknudson: but the user id will be a user.id in sql | 22:03 |
| *** ninag has quit IRC | 22:03 | |
| rderose | bknudson for all users | 22:03 |
| bknudson | list_users returns a dict for all backends, so if the manager wants the id it does user['id'] | 22:04 |
| jamielennox | stevemar, morgan: added comment on bug 1548433 | 22:05 |
| openstack | bug 1548433 in keystoneauth "neutron returns objects other than oslo_config.cfg.Opt instances from list_opts" [Undecided,Incomplete] https://launchpad.net/bugs/1548433 | 22:05 |
| *** timcline has quit IRC | 22:05 | |
| *** mylu has quit IRC | 22:05 | |
| openstackgerrit | Merged openstack/keystone: Remove TestFernetTokenProvider https://review.openstack.org/286910 | 22:06 |
| *** timcline has joined #openstack-keystone | 22:06 | |
| rderose | bknudson: right, and the user['id'] is specific to ldap. but with shadow users, that id will be an id in sql. | 22:08 |
| rderose | bknudson: so that when an ldap user is created, that user is mapped to the user table in sql. | 22:10 |
| *** slberger has left #openstack-keystone | 22:10 | |
| *** timcline has quit IRC | 22:10 | |
| bknudson | we're not even going to allow creating users in ldap. | 22:10 |
| bknudson | that function is already deprecated | 22:11 |
| rderose | bknudson: okay, but when they authenticate in keystone, we'll map them to a user in sql | 22:12 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Add projects functional tests https://review.openstack.org/292624 | 22:12 |
| bknudson | that sounds pretty easy, the identity manager should call a function on the shadow_backends or mapping_backends or whatever to map the user. | 22:13 |
| bknudson | ldap doesn't need to know about the sql models don't have to be involved. | 22:13 |
| bknudson | ldap doesn't need to know about the sql models -- just return dicts like it always did | 22:14 |
| rderose | bknudson: yeah, ldap doesn't need to know, but the model is being used even though we're not using the sql driver. that's why I feel it should be separated. | 22:14 |
| bknudson | what's the model being used by? | 22:14 |
| *** fawadkhaliq has quit IRC | 22:15 | |
| rderose | bknudson: when the user authenticates, shadows_users will call a method to retrieve the local identity (user table) for that ldap user | 22:16 |
| *** fawadkhaliq has joined #openstack-keystone | 22:16 | |
| rderose | bknudson: in that method call, it will eventually query a User object and return a user dict for the ldap user | 22:16 |
| bknudson | shadow_users manager or driver? | 22:17 |
| *** knikolla has quit IRC | 22:17 | |
| rderose | driver | 22:17 |
| bknudson | ok, so the driver needs the model, and stuff outside the driver doesn't need the model | 22:17 |
| rderose | bknudson: correct | 22:17 |
| bknudson | so why move the model out of sql? | 22:18 |
| bknudson | we can't have sql stuff leaking out of the drivers. the whole point of the drivers is we can replace them with non-sql if we want to | 22:20 |
| bknudson | otherwise there's no point and we could simplify keystone code significantly | 22:20 |
| rderose | bknudson: to me the sql backend should only apply to the sql driver implementation. however, the model is being used for both ldap and sql, which is why I think it makes sense to take it out. | 22:21 |
| bknudson | maybe there's some follow-on code I haven't seen yet because https://review.openstack.org/#/c/292611/ doesn't have ldap. | 22:23 |
| patchbot | bknudson: patch 292611 - keystone - Move identity.backends.sql model code to model.py | 22:23 |
| *** fawadkhaliq has quit IRC | 22:23 | |
| *** fawadkhaliq has joined #openstack-keystone | 22:24 | |
| rderose | bknudson: yeah, at this point is doesn't, only references federated users | 22:24 |
| rderose | bknudson: ldap is coming in newton | 22:24 |
| bknudson | this is all nuts because it assumes that shadow users are always in sql, when they're not | 22:26 |
| *** dims has joined #openstack-keystone | 22:26 | |
| bknudson | if shadow users are always in sql then we should get rid of the backends and driver interface and make the code simpler | 22:26 |
| *** mylu has joined #openstack-keystone | 22:27 | |
| *** gyee has joined #openstack-keystone | 22:27 | |
| *** ChanServ sets mode: +v gyee | 22:27 | |
| bknudson | so the plan is to have the ldap driver create sql User objects and then be able to look up the user id in the shadow tables? | 22:27 |
| bknudson | what if the deployer isn't using the shadow_users sql driver but has their own driver? | 22:28 |
| rderose | bknudson: yeah agree, I think shadow users will always be in sql and therefore, we should simplify. I'll work on this. | 22:28 |
| bknudson | that's too bad because it's probably handy to be able to have your own implementation of shadow users. nosql might make more sense. | 22:29 |
| rderose | bknudson: well, shadow users will do the mapping, not the driver. once mapped, you can look up the user id in the user table | 22:30 |
| *** pushkaru has quit IRC | 22:30 | |
| bknudson | then I'm totally not understanding why ldap or other drivers need the user model. | 22:31 |
| rderose | bknudson: hmm... but part of the reason why I think we want it in sql is to have more referential integrity in the db | 22:31 |
| bknudson | sadly since the other parts of keystone may not be in sql we aren't able to take advantage of RI. | 22:31 |
| bknudson | for example you'd think we'd have a foreign key for assignments but since assignments might not be in sql there's no FK | 22:32 |
| rderose | bknudson: yeah, good point :) | 22:32 |
| bknudson | so for weak RI we have internal notifications that tell assignments to clean up when a user is removed | 22:33 |
| *** e0ne has joined #openstack-keystone | 22:34 | |
| rderose | bknudson: just curious, what other implementations of assignments do we support? | 22:34 |
| bknudson | we support deployers writing their own assignment drivers | 22:34 |
| bknudson | keystone team only supports the sql driver | 22:34 |
| bknudson | but if somebody writes their own assignment driver and it supports the interface it's supposed to work | 22:35 |
| zigo | morgan: jamielennox: Could we discuss what solution should be done for https://bugs.launchpad.net/neutron/+bug/1548433 ? | 22:35 |
| openstack | Launchpad bug 1548433 in keystoneauth "neutron returns objects other than oslo_config.cfg.Opt instances from list_opts" [Undecided,Incomplete] | 22:35 |
| rderose | bknudson: I see | 22:35 |
| zigo | (if you have time...) | 22:35 |
| jamielennox | zigo: of course, i think it's a fairly simple one on the neutron side but i don't know what code is using it | 22:36 |
| zigo | morgan: jamielennox: FYI, both Nova and Neutron are affected (it's located where they auth each other in their config files). | 22:36 |
| *** timcline has joined #openstack-keystone | 22:37 | |
| zigo | jamielennox: I don't even understand how neutron & nova can generate config files for keystoneauth params, if keystoneauth itself doesn't have the oslo.config bits. How does it work? | 22:37 |
| jamielennox | zigo: so it's almost definetly coming from https://github.com/openstack/neutron/blob/master/neutron/opts.py#L291 | 22:38 |
| zigo | Oh ok. Directly there then. | 22:39 |
| jamielennox | it looks like neutron is just picking a couple of plugins and registering them | 22:39 |
| rderose | bknudson: regarding why the ldap or other drivers needs the user model, it's because the shadow users sql implementation depends on the user model | 22:39 |
| zigo | jamielennox: So the bug shall be re-assigned to nova and neutron ? | 22:39 |
| jamielennox | zigo: yea, i think so | 22:39 |
| *** markvoelker has quit IRC | 22:39 | |
| jamielennox | zigo: i'm not exactly sure what that check is doing though | 22:40 |
| rderose | bknudson: shadow users shadows ldap users, and that is when the user model will be used | 22:40 |
| zigo | jamielennox: You mean, the check that produces the warning? | 22:40 |
| jamielennox | zigo: no, i can see what's producing the warning, it's if all(option.name != plugin_option.name for option in opt_list): | 22:41 |
| jamielennox | why are they doing that | 22:41 |
| rderose | bknudson: anyway, you make some good points. I've fix the pep8 issue and think on this some more. thanks. | 22:41 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move identity.backends.sql model code to model.py https://review.openstack.org/292611 | 22:41 |
| *** timcline has quit IRC | 22:41 | |
| *** alejandrito has quit IRC | 22:42 | |
| zigo | jamielennox: And in Nova? there's no such code in nova/opts.py ... | 22:43 |
| zigo | Though there's the same warning. | 22:43 |
| bknudson | jamielennox: zigo: similar to https://review.openstack.org/#/c/288513/ ? | 22:44 |
| patchbot | bknudson: patch 288513 - nova - Fix config generation for Neutron auth options (MERGED) | 22:44 |
| zigo | oh ! | 22:44 |
| zigo | bknudson: Thanks ! | 22:44 |
| jamielennox | bknudson: yep, that's the same for nova | 22:44 |
| bknudson | zigo: no problem | 22:44 |
| *** rderose has quit IRC | 22:45 | |
| jamielennox | bknudson: for reference you can pass name directly to get_auth_plugin_conf_options() | 22:45 |
| zigo | jamielennox: bknudson: I'm not clear with the consequences. Without this patch, does this break something or?!? | 22:45 |
| bknudson | y, I wonder what they were doing. | 22:45 |
| jamielennox | yea, so it's just making sure that you don't register two conf options with the same name because there are lots of rules about that | 22:46 |
| bknudson | zigo: nova was having the same problem, returning keystoneauth's Opts rather than oslo.config Opts | 22:46 |
| zigo | bknudson: Does it actually breaks Nova without this patch? | 22:47 |
| jamielennox | zigo: they are similar objects because the keystoneauth opt was based on the oslo_config opt - but they aren't the same and when oslo_config adds new things we aren't going to try and keep up with everything | 22:47 |
| bknudson | zigo: no, just the config generator | 22:47 |
| zigo | I'm just trying to figure out if my Mitaka b3 release is trashed or not ... :P | 22:47 |
| zigo | Ok. | 22:47 |
| *** mvk_ has joined #openstack-keystone | 22:48 | |
| jamielennox | i'm not actually getting a warning running this on neutron | 22:49 |
| *** e0ne has quit IRC | 22:49 | |
| *** dims has quit IRC | 22:50 | |
| zigo | jamielennox: https://mitaka-jessie.pkgs.mirantis.com/job/neutron/28/consoleFull | 22:51 |
| zigo | jamielennox: Maybe it was fixed AFTER Mitaka b3. | 22:51 |
| zigo | jamielennox: I haven't tried the latest commit (yet). | 22:51 |
| zigo | I'm currently finishing to validate b3 debian packages. | 22:52 |
| zigo | Sorry that I'm a bit lagging behind... | 22:52 |
| *** mvk has quit IRC | 22:52 | |
| zigo | I'll try to do packaging from trunk for Newton ! :) | 22:52 |
| jamielennox | zigo: trying to find the error in all that | 22:56 |
| zigo | In my build log for neutron? | 22:56 |
| jamielennox | ah, got it | 22:57 |
| zigo | Just search for "Incompatible option class for auth_url" for example. | 22:57 |
| jamielennox | zigo: so i don't know why because it still seems wrong, but i'm not getting an error running from master | 22:58 |
| *** furface has joined #openstack-keystone | 22:58 | |
| *** rk4n has quit IRC | 23:01 | |
| zigo | jamielennox: Then it's probably fixed already? | 23:03 |
| zigo | jamielennox: I can try to build Neutron from the latest commit tomorrow, to see how it goes. | 23:04 |
| zigo | (it's already very late today, so I will go sleep...) | 23:04 |
| jamielennox | zigo: ah, no it's just putting bad output into the generated file and not throwing warnings | 23:07 |
| jamielennox | 12 # Warning: Failed to format sample for tenant_name | 23:07 |
| *** furface has quit IRC | 23:07 | |
| jamielennox | 11 # isinstance() arg 2 must be a class, type, or tuple of classes and types | 23:07 |
| jamielennox | which might actually be an oslo_config bug as well | 23:07 |
| jamielennox | zigo: for tomorrow: https://review.openstack.org/292640 | 23:09 |
| zigo | jamielennox: You did see that one, right? https://review.openstack.org/#/c/292428/ | 23:11 |
| patchbot | zigo: patch 292428 - networking-mlnx - deleted non working tests (MERGED) | 23:11 |
| zigo | No, sorry. | 23:11 |
| zigo | I meant this one: https://review.openstack.org/#/c/291857/ | 23:11 |
| patchbot | zigo: patch 291857 - oslo.config - Fix isinstance call (MERGED) | 23:11 |
| *** gordc has quit IRC | 23:11 | |
| zigo | jamielennox: So yes, there's definitively a bug in oslo.config as released, but I already integrated the fix in Debian. | 23:12 |
| zigo | I was the one who reported the issue to dims. | 23:12 |
| jamielennox | zigo: ah, ok - i don't know if that will fix it, but either way this is wrong behaviour from neutron | 23:12 |
| jamielennox | i wasn't meaning to make oslo_config ever have to deal with ksa opts | 23:13 |
| zigo | jamielennox: Well the explosive coktail was this issue AND the one we're seeing. | 23:13 |
| zigo | jamielennox: The generated config files were just missing the options like auth_type and such. | 23:13 |
| zigo | jamielennox: Now, it's better, as in the config files are looking good, but there's still these warnings... | 23:13 |
| jamielennox | so neutron will be fixed by my review, and maybe we should make oslo_config explode if they are doing something wrong | 23:14 |
| jamielennox | dhellmann: ^ | 23:14 |
| zigo | Thanks. | 23:14 |
| *** furface has joined #openstack-keystone | 23:15 | |
| zigo | On each and every release, some config file stuff are broken, and I believe that I'm the *only* one in the whole OpenStack community who actually test with them! :P | 23:15 |
| zigo | :) | 23:15 |
| jamielennox | zigo: that's probably right :) | 23:15 |
| jamielennox | hmm, we still end up with # Domain ID to scope to (unknown value) | 23:16 |
| zigo | jamielennox: Thanks so much. | 23:16 |
| jamielennox | because we are using str and not oslo_config.StrOp | 23:16 |
| zigo | You and morgan have been very helpful. | 23:16 |
| jamielennox | but at least it's not failing completely | 23:16 |
| jamielennox | zigo: any time | 23:16 |
| *** dims has joined #openstack-keystone | 23:21 | |
| *** dims has quit IRC | 23:27 | |
| *** mylu has quit IRC | 23:31 | |
| *** mylu has joined #openstack-keystone | 23:32 | |
| *** timcline has joined #openstack-keystone | 23:37 | |
| *** gyee has quit IRC | 23:39 | |
| *** timcline has quit IRC | 23:42 | |
| *** sdake has joined #openstack-keystone | 23:43 | |
| morgan | zigo: glad... i was of help... uhm. /me shrugs | 23:47 |
| morgan | zigo: :) | 23:47 |
| zigo | morgan: Not *this* time, as jam<not-highlighting-him>nnox was there and helped, but in general, you're very helpful indeed. | 23:48 |
| *** mkrcmari__ has joined #openstack-keystone | 23:48 | |
| morgan | hehe | 23:48 |
| *** mvk_ has quit IRC | 23:52 | |
| *** sdake has quit IRC | 23:52 | |
| *** mylu has quit IRC | 23:52 | |
| jamielennox | morgan, zigo, bknudson: added https://review.openstack.org/#/c/292647 as well, which will hopefully make the output a bit nicer as well | 23:54 |
| *** mylu has joined #openstack-keystone | 23:55 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!