| stevemar | samueldmq: oh yeah? | 00:00 |
|---|---|---|
| *** dstanek has joined #openstack-keystone | 00:00 | |
| *** ChanServ sets mode: +v dstanek | 00:00 | |
| stevemar | good, put them out there :P | 00:00 |
| gyee | samueldmq, stevemar, yeah, SSL auth | 00:01 |
| samueldmq | stevemar: Sam Leong will also be speaking :) | 00:01 |
| dstanek | gyee: nice | 00:01 |
| samueldmq | gyee: good stuff | 00:01 |
| *** timcline has quit IRC | 00:01 | |
| *** sdake has quit IRC | 00:01 | |
| gyee | it was supposed to be a dry run for our Austin session, but that only got accepted as alternate | 00:01 |
| gyee | so dry run anyway :-) | 00:02 |
| morgan | gyee: Lisa has been trying to get me to fly down for that. But since I won't be employed at HPE by then... | 00:02 |
| gyee | morgan, free beer and pizza | 00:03 |
| morgan | Right, but still no one to foot the bill for the flight/sleeping arrangements. | 00:03 |
| morgan | gyee: problems with finding oneself unemployed at the end of the month. | 00:04 |
| gyee | man that's unfortunate, we really need your service | 00:05 |
| morgan | Getting ready to cancel my hotel for Austin summit too. | 00:05 |
| stevemar | morgan: you can crash with me | 00:05 |
| stevemar | :P | 00:05 |
| gyee | stevemar, you in Bay Area? | 00:06 |
| stevemar | gyee: no, i meant in austin :) | 00:06 |
| morgan | gyee: eh, the things I'm working on are far enough out that it doesn't impact anything important in this cycle and possibly next. | 00:06 |
| morgan | stevemar: still no one paying for my flight. | 00:06 |
| morgan | stevemar: so.. *shrug* | 00:07 |
| stevemar | morgan: crowd fund that | 00:07 |
| morgan | Lol | 00:07 |
| stevemar | :P | 00:07 |
| morgan | On the plus side, overpaid taxes, getting a refund this year. | 00:07 |
| morgan | :P | 00:07 |
| gyee | don't the foundation have this travel assistant program? | 00:07 |
| morgan | gyee: a bit late to request for it now. | 00:07 |
| *** dims has joined #openstack-keystone | 00:08 | |
| morgan | gyee: it's all in the timing. | 00:08 |
| *** sdake_ has quit IRC | 00:08 | |
| *** mylu has quit IRC | 00:08 | |
| gyee | art of war, you need timing, you need luck, the rest is skill | 00:08 |
| morgan | gyee: and in this case, bad luck, bad timing. | 00:09 |
| morgan | Sooooooo | 00:09 |
| *** mylu has joined #openstack-keystone | 00:10 | |
| morgan | On the plus side, having a nice hoppy stout with early dinner/late.lunch | 00:10 |
| *** ianw has quit IRC | 00:10 | |
| * morgan wonders if space x is hiring OpenStack talent. | 00:10 | |
| *** shaleh has quit IRC | 00:11 | |
| gyee | they may, consider amount of data | 00:11 |
| *** sdake has joined #openstack-keystone | 00:11 | |
| dstanek | morgan: yes, crowd fund it! | 00:12 |
| * morgan tries to figure out who to bug that has contacts with space x | 00:13 | |
| morgan | Also I remember JPL asking if I wanted to join them. | 00:13 |
| *** spzala has joined #openstack-keystone | 00:17 | |
| *** TravT has joined #openstack-keystone | 00:20 | |
| *** stingaci has quit IRC | 00:21 | |
| *** spzala has quit IRC | 00:22 | |
| *** openstack has joined #openstack-keystone | 00:23 | |
| *** timcline has joined #openstack-keystone | 00:24 | |
| *** mylu has quit IRC | 00:27 | |
| *** mylu has joined #openstack-keystone | 00:27 | |
| *** timcline has quit IRC | 00:28 | |
| *** stingaci has joined #openstack-keystone | 00:28 | |
| *** fawadkhaliq has quit IRC | 00:30 | |
| *** fawadkhaliq has joined #openstack-keystone | 00:33 | |
| *** hurgleburgler has joined #openstack-keystone | 00:33 | |
| *** mylu has quit IRC | 00:35 | |
| *** real56 has quit IRC | 00:38 | |
| *** mylu has joined #openstack-keystone | 00:39 | |
| *** mylu has quit IRC | 00:40 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Mapping which yield no identities should result in ValidationError https://review.openstack.org/293184 | 00:41 |
| *** mylu has joined #openstack-keystone | 00:45 | |
| *** dims has joined #openstack-keystone | 00:45 | |
| *** mylu has quit IRC | 00:46 | |
| *** mylu has joined #openstack-keystone | 00:48 | |
| *** mylu has quit IRC | 00:50 | |
| *** stingaci has quit IRC | 00:51 | |
| *** afazekas has quit IRC | 00:53 | |
| *** gyee has quit IRC | 00:54 | |
| *** dave-mccowan has joined #openstack-keystone | 00:57 | |
| *** fawadkhaliq has quit IRC | 00:58 | |
| *** afazekas has joined #openstack-keystone | 00:59 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:02 | |
| *** fawadkhaliq has quit IRC | 01:02 | |
| *** david-lyle has joined #openstack-keystone | 01:04 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:06 | |
| *** fawadkhaliq has quit IRC | 01:06 | |
| *** dims has quit IRC | 01:07 | |
| *** dims has joined #openstack-keystone | 01:12 | |
| *** mylu has joined #openstack-keystone | 01:14 | |
| *** mylu has quit IRC | 01:15 | |
| *** spzala has joined #openstack-keystone | 01:18 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:18 | |
| *** fawadkhaliq has quit IRC | 01:19 | |
| *** EinstCrazy has joined #openstack-keystone | 01:21 | |
| *** spzala has quit IRC | 01:23 | |
| *** hurgleburgler has left #openstack-keystone | 01:23 | |
| *** boris-42 has quit IRC | 01:24 | |
| *** timcline has joined #openstack-keystone | 01:24 | |
| *** afazekas has quit IRC | 01:25 | |
| *** afazekas has joined #openstack-keystone | 01:28 | |
| *** dims has quit IRC | 01:29 | |
| *** timcline has quit IRC | 01:29 | |
| *** dims has joined #openstack-keystone | 01:29 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:30 | |
| *** fawadkhaliq has quit IRC | 01:31 | |
| *** LZ has joined #openstack-keystone | 01:36 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:42 | |
| *** mylu has joined #openstack-keystone | 01:42 | |
| *** mylu has quit IRC | 01:44 | |
| *** dan_nguyen has quit IRC | 01:49 | |
| *** fawadkhaliq has quit IRC | 01:51 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:51 | |
| *** dims has quit IRC | 01:52 | |
| *** dims has joined #openstack-keystone | 01:56 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Update dev docs and sample script for v3/bootstrap https://review.openstack.org/290897 | 01:56 |
| *** stingaci has joined #openstack-keystone | 02:01 | |
| *** dims has quit IRC | 02:03 | |
| *** dims has joined #openstack-keystone | 02:05 | |
| *** fawadkhaliq has quit IRC | 02:06 | |
| *** woodster_ has quit IRC | 02:07 | |
| *** mylu has joined #openstack-keystone | 02:08 | |
| *** richm has quit IRC | 02:08 | |
| *** mylu has quit IRC | 02:09 | |
| *** stingaci has quit IRC | 02:11 | |
| openstackgerrit | fengzhr proposed openstack/keystone: The name can be just white character except project and user https://review.openstack.org/272358 | 02:17 |
| *** lhcheng has quit IRC | 02:19 | |
| *** spzala has joined #openstack-keystone | 02:19 | |
| *** mylu has joined #openstack-keystone | 02:20 | |
| *** mylu has quit IRC | 02:21 | |
| *** spzala has quit IRC | 02:22 | |
| *** spzala has joined #openstack-keystone | 02:22 | |
| *** mylu has joined #openstack-keystone | 02:25 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove reference to keystoneclient CLI https://review.openstack.org/291889 | 02:25 |
| *** timcline has joined #openstack-keystone | 02:25 | |
| *** fawadkhaliq has joined #openstack-keystone | 02:25 | |
| *** mylu has quit IRC | 02:27 | |
| *** mylu has joined #openstack-keystone | 02:27 | |
| *** mylu has quit IRC | 02:29 | |
| *** timcline has quit IRC | 02:30 | |
| *** fawadkhaliq has quit IRC | 02:32 | |
| *** tqtran-afk has quit IRC | 02:32 | |
| *** mylu has joined #openstack-keystone | 02:34 | |
| *** mylu has quit IRC | 02:35 | |
| *** mylu has joined #openstack-keystone | 02:35 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 02:38 |
| *** GB21 has quit IRC | 02:40 | |
| *** mylu has quit IRC | 02:40 | |
| *** mylu has joined #openstack-keystone | 02:49 | |
| *** lhcheng has joined #openstack-keystone | 02:54 | |
| *** ChanServ sets mode: +v lhcheng | 02:54 | |
| *** mylu has quit IRC | 02:59 | |
| *** mylu has joined #openstack-keystone | 03:03 | |
| *** spandhe_ has joined #openstack-keystone | 03:04 | |
| *** spandhe has quit IRC | 03:05 | |
| *** spandhe_ is now known as spandhe | 03:05 | |
| *** mylu has quit IRC | 03:13 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 03:14 |
| *** mylu has joined #openstack-keystone | 03:16 | |
| *** dave-mccowan has quit IRC | 03:17 | |
| *** mylu has quit IRC | 03:18 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Enhance functional class to provide default info https://review.openstack.org/291202 | 03:24 |
| *** timcline has joined #openstack-keystone | 03:26 | |
| *** mylu has joined #openstack-keystone | 03:27 | |
| *** mylu has quit IRC | 03:29 | |
| *** timcline has quit IRC | 03:30 | |
| *** dims has quit IRC | 03:37 | |
| *** spzala has quit IRC | 03:39 | |
| *** aswadr_ has joined #openstack-keystone | 03:47 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Check for duplicates without inserting in keystone-manage bootstrap https://review.openstack.org/292492 | 03:58 |
| *** ayoung is now known as ayoung_Zzz__ | 04:01 | |
| *** knikolla has quit IRC | 04:06 | |
| *** josecastroleon1 has joined #openstack-keystone | 04:06 | |
| *** josecastroleon has quit IRC | 04:06 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Update dev docs and sample script for v3/bootstrap https://review.openstack.org/290897 | 04:07 |
| *** links has joined #openstack-keystone | 04:10 | |
| *** ayoung_Zzz__ has quit IRC | 04:12 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:14 | |
| *** timcline has joined #openstack-keystone | 04:27 | |
| *** tqtran-afk has joined #openstack-keystone | 04:29 | |
| *** timcline has quit IRC | 04:31 | |
| *** tqtran-afk has quit IRC | 04:33 | |
| *** lhcheng has quit IRC | 04:38 | |
| *** roxanagh_ has joined #openstack-keystone | 04:38 | |
| *** mylu has joined #openstack-keystone | 04:44 | |
| *** mylu has quit IRC | 04:45 | |
| *** furface has quit IRC | 04:48 | |
| *** sdake has quit IRC | 04:50 | |
| *** furface has joined #openstack-keystone | 04:56 | |
| *** roxanagh_ has quit IRC | 04:58 | |
| *** mylu has joined #openstack-keystone | 05:06 | |
| *** zqfan has joined #openstack-keystone | 05:10 | |
| *** lhcheng has joined #openstack-keystone | 05:10 | |
| *** ChanServ sets mode: +v lhcheng | 05:10 | |
| *** boris-42 has joined #openstack-keystone | 05:14 | |
| *** GB21 has joined #openstack-keystone | 05:18 | |
| *** GB21 has quit IRC | 05:20 | |
| *** alex_xu has quit IRC | 05:25 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 05:27 |
| *** timcline has joined #openstack-keystone | 05:27 | |
| *** tqtran-afk has joined #openstack-keystone | 05:30 | |
| *** alex_xu has joined #openstack-keystone | 05:31 | |
| *** timcline has quit IRC | 05:32 | |
| *** GB21 has joined #openstack-keystone | 05:33 | |
| *** tqtran-afk has quit IRC | 05:35 | |
| *** Nirupama has joined #openstack-keystone | 05:38 | |
| *** fawadkhaliq has quit IRC | 05:42 | |
| *** fawadkhaliq has joined #openstack-keystone | 05:43 | |
| *** david-lyle has quit IRC | 05:45 | |
| *** david-lyle has joined #openstack-keystone | 05:45 | |
| *** mylu has quit IRC | 05:46 | |
| *** mylu has joined #openstack-keystone | 05:52 | |
| *** fawadkhaliq has quit IRC | 05:52 | |
| *** fawadkhaliq has joined #openstack-keystone | 05:53 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 05:53 |
| *** mylu has quit IRC | 05:57 | |
| *** lhcheng has quit IRC | 06:10 | |
| *** timcline has joined #openstack-keystone | 06:23 | |
| *** gangadhar has joined #openstack-keystone | 06:25 | |
| *** furface has quit IRC | 06:26 | |
| *** timcline has quit IRC | 06:27 | |
| *** furface has joined #openstack-keystone | 06:38 | |
| *** bjornar has quit IRC | 07:00 | |
| *** tqtran-afk has joined #openstack-keystone | 07:01 | |
| *** fawadkhaliq has quit IRC | 07:03 | |
| *** fawadkhaliq has joined #openstack-keystone | 07:04 | |
| *** tqtran-afk has quit IRC | 07:05 | |
| *** lhcheng has joined #openstack-keystone | 07:06 | |
| *** ChanServ sets mode: +v lhcheng | 07:06 | |
| *** tesseract has joined #openstack-keystone | 07:16 | |
| *** tesseract is now known as Guest64967 | 07:17 | |
| *** jaosorior has joined #openstack-keystone | 07:18 | |
| *** Guest64967 has quit IRC | 07:21 | |
| *** timcline has joined #openstack-keystone | 07:24 | |
| *** spandhe has quit IRC | 07:24 | |
| *** fawadkhaliq has quit IRC | 07:25 | |
| *** fawadkhaliq has joined #openstack-keystone | 07:26 | |
| *** AJaeger has joined #openstack-keystone | 07:26 | |
| *** fawadkhaliq has quit IRC | 07:26 | |
| AJaeger | keystone cores, https://review.openstack.org/#/c/292714/ is the translation import. It has an +A by stevemar already but did not merge to the CI problems we had yesterday. Could somebody add another +A (or stevemar toggle his +A), please? | 07:27 |
| patchbot | AJaeger: patch 292714 - keystone - Imported Translations from Zanata | 07:27 |
| *** fawadkhaliq has joined #openstack-keystone | 07:27 | |
| *** browne has quit IRC | 07:27 | |
| *** timcline has quit IRC | 07:28 | |
| *** wanghua has joined #openstack-keystone | 07:29 | |
| *** tesseract- has joined #openstack-keystone | 07:36 | |
| *** chlong has quit IRC | 07:42 | |
| *** mariusv has quit IRC | 07:44 | |
| *** lunarlamp has joined #openstack-keystone | 07:48 | |
| wanghua | Hi all, i met a problem, can anyone help? When a trustor or a trustee is deleted, is the trust deleted automatically? | 07:53 |
| *** lhcheng has quit IRC | 07:55 | |
| *** GB21 has quit IRC | 07:57 | |
| *** belmoreira has joined #openstack-keystone | 07:58 | |
| *** mhickey has joined #openstack-keystone | 08:08 | |
| *** permalac has joined #openstack-keystone | 08:20 | |
| *** EinstCrazy has quit IRC | 08:23 | |
| *** timcline has joined #openstack-keystone | 08:24 | |
| *** timcline has quit IRC | 08:29 | |
| *** EinstCrazy has joined #openstack-keystone | 08:30 | |
| *** ig0r_ has quit IRC | 08:39 | |
| *** GB21 has joined #openstack-keystone | 08:41 | |
| *** AJaeger has left #openstack-keystone | 08:49 | |
| *** GB21 has quit IRC | 09:07 | |
| *** kaliya has joined #openstack-keystone | 09:12 | |
| *** bjornar has joined #openstack-keystone | 09:22 | |
| *** jistr has joined #openstack-keystone | 09:24 | |
| *** timcline has joined #openstack-keystone | 09:25 | |
| *** timcline has quit IRC | 09:30 | |
| *** rk4n has joined #openstack-keystone | 09:35 | |
| *** trown has joined #openstack-keystone | 09:38 | |
| *** rk4n has quit IRC | 09:39 | |
| *** rk4n has joined #openstack-keystone | 09:39 | |
| *** dims has joined #openstack-keystone | 09:51 | |
| *** openstackgerrit has quit IRC | 09:53 | |
| *** openstackgerrit_ is now known as openstackgerrit | 09:53 | |
| *** openstackgerrit has quit IRC | 09:53 | |
| *** openstackgerrit_ has joined #openstack-keystone | 09:53 | |
| *** openstackgerrit has joined #openstack-keystone | 09:54 | |
| *** openstackgerrit has quit IRC | 09:54 | |
| *** openstackgerrit_ is now known as openstackgerrit | 09:54 | |
| *** openstackgerrit_ has joined #openstack-keystone | 09:54 | |
| *** openstackgerrit has quit IRC | 09:55 | |
| *** openstackgerrit has joined #openstack-keystone | 09:55 | |
| *** tqtran-afk has joined #openstack-keystone | 10:01 | |
| *** TravT has quit IRC | 10:06 | |
| *** tqtran-afk has quit IRC | 10:06 | |
| *** mylu has joined #openstack-keystone | 10:08 | |
| *** mylu has quit IRC | 10:13 | |
| *** timcline has joined #openstack-keystone | 10:26 | |
| *** ankur has joined #openstack-keystone | 10:27 | |
| *** daemontool has joined #openstack-keystone | 10:28 | |
| *** timcline has quit IRC | 10:30 | |
| *** EinstCrazy has quit IRC | 10:34 | |
| *** mkrcmari__ has quit IRC | 10:42 | |
| *** kaliya has quit IRC | 10:43 | |
| openstackgerrit | Dina Belova proposed openstack/keystone: Integrate OSprofiler in Keystone https://review.openstack.org/103368 | 10:50 |
| openstackgerrit | Merged openstack/keystone: Imported Translations from Zanata https://review.openstack.org/292714 | 10:52 |
| openstackgerrit | Dina Belova proposed openstack/keystone: Integrate OSprofiler in Keystone https://review.openstack.org/103368 | 10:53 |
| *** dims has quit IRC | 10:53 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Change xrange to range for python3 compatibility https://review.openstack.org/293369 | 10:54 |
| *** pece has joined #openstack-keystone | 10:59 | |
| *** dims has joined #openstack-keystone | 10:59 | |
| *** mkrcmari__ has joined #openstack-keystone | 11:11 | |
| *** trown is now known as trown|relocate | 11:12 | |
| *** openstackgerrit has quit IRC | 11:18 | |
| *** openstackgerrit has joined #openstack-keystone | 11:18 | |
| *** kaliya has joined #openstack-keystone | 11:19 | |
| *** timcline has joined #openstack-keystone | 11:27 | |
| *** timcline has quit IRC | 11:31 | |
| *** gordc has joined #openstack-keystone | 11:44 | |
| *** rk4n_ has joined #openstack-keystone | 11:51 | |
| *** dave-mccowan has joined #openstack-keystone | 11:52 | |
| *** rk4n has quit IRC | 11:54 | |
| *** mylu has joined #openstack-keystone | 11:56 | |
| *** raildo-afk is now known as raildo | 12:00 | |
| *** pece has quit IRC | 12:01 | |
| *** mylu has quit IRC | 12:03 | |
| *** jaosorior has quit IRC | 12:08 | |
| *** jaosorior has joined #openstack-keystone | 12:09 | |
| *** pece has joined #openstack-keystone | 12:09 | |
| *** jaosorior has quit IRC | 12:09 | |
| *** pece has quit IRC | 12:10 | |
| *** jaosorior has joined #openstack-keystone | 12:11 | |
| samueldmq | crinkle: hi | 12:12 |
| samueldmq | crinkle: glad to see you contributing here :) | 12:12 |
| *** pece has joined #openstack-keystone | 12:13 | |
| samueldmq | crinkle: do you mind if I update patch 293159 to revert the changes of assertThat -> assertEqual ? | 12:13 |
| patchbot | samueldmq: https://review.openstack.org/#/c/293159/ - keystone - Make backend filter testing more comprehensive | 12:13 |
| samueldmq | crinkle: see stevemar's comment there | 12:13 |
| *** kaliya has quit IRC | 12:16 | |
| *** clenimar has joined #openstack-keystone | 12:17 | |
| *** EinstCrazy has joined #openstack-keystone | 12:24 | |
| *** rodrigods has quit IRC | 12:26 | |
| *** rodrigods has joined #openstack-keystone | 12:26 | |
| *** timcline has joined #openstack-keystone | 12:28 | |
| *** pcaruana has quit IRC | 12:28 | |
| *** rk4n has joined #openstack-keystone | 12:30 | |
| *** fawadkhaliq has quit IRC | 12:31 | |
| *** timcline has quit IRC | 12:32 | |
| *** rk4n_ has quit IRC | 12:32 | |
| *** mylu has joined #openstack-keystone | 12:32 | |
| *** boris-42 has quit IRC | 12:34 | |
| *** mylu_ has joined #openstack-keystone | 12:35 | |
| *** trown|relocate is now known as trown | 12:35 | |
| *** mylu has quit IRC | 12:38 | |
| *** mylu_ has quit IRC | 12:40 | |
| *** gpaz has joined #openstack-keystone | 12:41 | |
| *** kaliya has joined #openstack-keystone | 12:46 | |
| gpaz | Hello everyone , I m trying to find a good example to use environment for Workflow if someone can point me to exhaustive example … | 12:50 |
| gpaz | It will be great | 12:50 |
| *** jlvillal has quit IRC | 12:52 | |
| *** jlvillal has joined #openstack-keystone | 12:52 | |
| *** ninag has joined #openstack-keystone | 12:57 | |
| *** rk4n has quit IRC | 13:01 | |
| *** rk4n has joined #openstack-keystone | 13:02 | |
| *** rcernin has joined #openstack-keystone | 13:03 | |
| *** dancn has quit IRC | 13:08 | |
| *** e0ne has joined #openstack-keystone | 13:10 | |
| *** dancn has joined #openstack-keystone | 13:11 | |
| *** pauloewerton has joined #openstack-keystone | 13:14 | |
| *** kro_sinus_hell is now known as krot_sinus_purga | 13:15 | |
| *** krot_sinus_purga is now known as kro_sniffles | 13:15 | |
| dstanek | gpaz: you're looking for an environment to do keystone development? | 13:15 |
| *** rk4n_ has joined #openstack-keystone | 13:18 | |
| *** rk4n has quit IRC | 13:20 | |
| *** ig0r_ has joined #openstack-keystone | 13:24 | |
| *** e0ne has quit IRC | 13:27 | |
| *** timcline has joined #openstack-keystone | 13:28 | |
| *** rk4n has joined #openstack-keystone | 13:28 | |
| *** GB21 has joined #openstack-keystone | 13:28 | |
| *** fawadkhaliq has joined #openstack-keystone | 13:29 | |
| *** rk4n_ has quit IRC | 13:32 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient-kerberos: Updated from global requirements https://review.openstack.org/293429 | 13:32 |
| *** timcline has quit IRC | 13:33 | |
| *** sdake has joined #openstack-keystone | 13:33 | |
| *** ninag has quit IRC | 13:34 | |
| *** ninag has joined #openstack-keystone | 13:34 | |
| *** d0ugal has quit IRC | 13:35 | |
| *** d0ugal has joined #openstack-keystone | 13:35 | |
| *** ninag_ has joined #openstack-keystone | 13:36 | |
| *** ninag has quit IRC | 13:39 | |
| *** doug-fish has quit IRC | 13:39 | |
| *** edmondsw has joined #openstack-keystone | 13:41 | |
| *** doug-fish has joined #openstack-keystone | 13:42 | |
| *** spandhe has joined #openstack-keystone | 13:46 | |
| *** doug-fish has quit IRC | 13:46 | |
| *** Nirupama has quit IRC | 13:47 | |
| edmondsw | so what do we do about https://review.openstack.org/#/c/292492/ ? Sounds like none of us can figure why devstack is failing | 13:52 |
| patchbot | edmondsw: patch 292492 - keystone - Check for duplicates without inserting in keystone... | 13:52 |
| *** zqfan has quit IRC | 13:52 | |
| edmondsw | bknudson, any ideas? | 13:52 |
| stevemar | edmondsw: bknudson i tried it locally and it passed | 13:54 |
| stevemar | i'm confused | 13:54 |
| *** richm has joined #openstack-keystone | 13:54 | |
| bknudson | shows we need better logging. | 13:55 |
| dstanek | bknudson: ++ | 13:57 |
| dstanek | edmondsw: those don't look like keystone specific failures | 13:58 |
| edmondsw | dstanek said auth was failing | 13:58 |
| *** pushkaru has joined #openstack-keystone | 13:58 | |
| edmondsw | dstanek, but yeah, I can't figure what would be in this change that would cause that | 13:58 |
| bknudson | User c48e5fa348e44f93bef116f262b75185 has no access to project ebc150249eec4c44bb7901705519b721 | 13:59 |
| bknudson | so I guess the logs aren't that bad | 13:59 |
| edmondsw | bknudson well, the logs also said that the role was granted, too | 13:59 |
| *** doug-fish has joined #openstack-keystone | 14:00 | |
| bknudson | http://logs.openstack.org/92/292492/2/check/gate-tempest-dsvm-full/79bc106/logs/devstacklog.txt.gz#_2016-03-16_04_08_41_539 | 14:00 |
| *** doug-fish has quit IRC | 14:01 | |
| bknudson | runs fine for me locally, too. | 14:01 |
| *** doug-fish has joined #openstack-keystone | 14:01 | |
| *** rk4n_ has joined #openstack-keystone | 14:01 | |
| *** tqtran-afk has joined #openstack-keystone | 14:03 | |
| stevemar | its only when the bootstrapping finishes that the issues happen | 14:03 |
| *** rk4n has quit IRC | 14:04 | |
| *** lhinds_ has joined #openstack-keystone | 14:06 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:06 | |
| *** mgagne has quit IRC | 14:07 | |
| *** hughsaunders has quit IRC | 14:07 | |
| *** mgagne has joined #openstack-keystone | 14:07 | |
| *** tqtran-afk has quit IRC | 14:08 | |
| *** hughsaunders has joined #openstack-keystone | 14:08 | |
| openstackgerrit | Merged openstack/keystone: Change xrange to range for python3 compatibility https://review.openstack.org/293369 | 14:12 |
| *** knikolla has joined #openstack-keystone | 14:13 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Move region configuration to a critical section https://review.openstack.org/222173 | 14:17 |
| *** dan_nguyen has joined #openstack-keystone | 14:21 | |
| edmondsw | stevemar bknudon, so that discussion sure petered out :) | 14:24 |
| edmondsw | ideas on next steps? | 14:24 |
| *** sdake has quit IRC | 14:27 | |
| stevemar | edmondsw: i'm not sure :) | 14:28 |
| *** timcline has joined #openstack-keystone | 14:29 | |
| *** fawadkhaliq has quit IRC | 14:30 | |
| *** aswadr_ has quit IRC | 14:30 | |
| *** fawadkhaliq has joined #openstack-keystone | 14:30 | |
| *** rk4n has joined #openstack-keystone | 14:30 | |
| edmondsw | looks like keystone was restarted twice between running keystone-manage bootstrap and the auth failure... I wonder why... | 14:33 |
| *** ayoung has joined #openstack-keystone | 14:33 | |
| edmondsw | and apparently admin_token_auth wasn't removed from the pipeline because it's still warning about that | 14:33 |
| *** ChanServ sets mode: +v ayoung | 14:33 | |
| *** rk4n_ has quit IRC | 14:33 | |
| *** timcline has quit IRC | 14:34 | |
| edmondsw | stevemar what could be different in the gate from your local env? | 14:34 |
| edmondsw | you just ran keystone-manage yourself, or you ran it in devstack? | 14:34 |
| navidp | stevemar, ok sure thanks | 14:35 |
| dstanek | edmondsw: i'm trying to reproduce, but i can't | 14:36 |
| dstanek | very strange | 14:36 |
| edmondsw | definitely | 14:36 |
| *** roxanagh_ has joined #openstack-keystone | 14:42 | |
| *** jbell8 has joined #openstack-keystone | 14:47 | |
| *** roxanagh_ has quit IRC | 14:50 | |
| *** GB21 has quit IRC | 14:53 | |
| stevemar | edmondsw: wow this is so annoying | 14:54 |
| stevemar | been looking at the patch and logs for 30 minutes, i've come up with nothing | 14:54 |
| edmondsw | yeah | 14:54 |
| *** ninag_ has quit IRC | 14:55 | |
| stevemar | it's failing here: http://logs.openstack.org/92/292492/2/check/gate-tempest-dsvm-full/79bc106/logs/devstacklog.txt.gz#_2016-03-16_04_08_41_727 | 14:55 |
| *** ninag has joined #openstack-keystone | 14:55 | |
| stevemar | but that's after all the bootstrap has been done... | 14:57 |
| stevemar | https://github.com/openstack-dev/devstack/blob/master/stack.sh#L1004-L1033 | 14:57 |
| stevemar | so logically, the bootstrap didn't so something it should have done | 14:58 |
| openstackgerrit | Boris Bobrov proposed openstack/python-keystoneclient: Support `truncated` flag returned by identity service https://review.openstack.org/293048 | 14:58 |
| *** LZ has quit IRC | 14:58 | |
| crinkle | samueldmq: sure, go for it | 14:59 |
| edmondsw | stevemar keystone was restarted twice between bootstrapping and the auth failure... could devstack have done something to mess things up somewhere in there? But how to find what... | 14:59 |
| knikolla | stevemar, edmondsw: should i just reduce the patch to just the user instead of including the project/domain/roles/etc? | 14:59 |
| *** ninag has quit IRC | 14:59 | |
| stevemar | knikolla: you could put up a different patch that just does user, sure | 14:59 |
| edmondsw | knikolla maybe through up a separate patch that does that | 15:00 |
| edmondsw | throw* | 15:00 |
| stevemar | knikolla: i think user is probably the case we most want to solve anyway | 15:00 |
| edmondsw | ye | 15:00 |
| edmondsw | wow, I can't type today | 15:00 |
| knikolla | stevemar, edmondsw: will do that now | 15:00 |
| raildo | ayoung: ping, cinder quota code are working with project as domains | 15:00 |
| raildo | project acting* | 15:01 |
| stevemar | knikolla: edmondsw: http://paste.openstack.org/show/490726/ | 15:01 |
| stevemar | compared to http://logs.openstack.org/92/292492/2/check/gate-tempest-dsvm-full/79bc106/logs/devstacklog.txt.gz#_2016-03-16_04_08_41_727 | 15:02 |
| dstanek | stevemar: i just added a comment to that review. seems like the code may be incorrect, but i don't know if it would cause this | 15:02 |
| edmondsw | dstanek, you can have multiple roles with the same name? | 15:03 |
| *** jorge_munoz has joined #openstack-keystone | 15:03 | |
| stevemar | edmondsw: no | 15:03 |
| edmondsw | oh, I guess now with domain-specific roles? | 15:03 |
| dstanek | edmondsw: yes, the unique in (role_name, domain) | 15:03 |
| edmondsw | yeah | 15:03 |
| dstanek | so a query on role_name can return multple results | 15:04 |
| edmondsw | dstanek don't think that's happening here, but it's a good point | 15:04 |
| stevemar | edmondsw: let's wait and see what happend with knikolla's new patch | 15:04 |
| edmondsw | dstanek, best way to correct that check? | 15:04 |
| dstanek | edmondsw: yeah, i don't think so either. but it is odd that when devstack goes to use the newly minted roles it doesn't have access | 15:04 |
| dstanek | edmondsw: check for role_name and domain_id | 15:05 |
| edmondsw | dstanek if you add a filter for the domain_id, is it going to match roles that are not tied to a specific domain? | 15:05 |
| bknudson | wow, role names aren't unique anymore | 15:05 |
| stevemar | dstanek: want to push https://review.openstack.org/#/c/291889/ through? | 15:06 |
| patchbot | stevemar: patch 291889 - keystone - Remove reference to keystoneclient CLI | 15:06 |
| dstanek | edmondsw: not if you use the default domain that we create when bootstrapping | 15:06 |
| stevemar | or bknudson ^ | 15:06 |
| edmondsw | dstanek and do we allow someone to have a domain-specific role name that is identical to the name of a role that is not domain-specific? | 15:06 |
| dstanek | stevemar: let me take a look | 15:06 |
| dstanek | edmondsw: by the looks of the schema, yes, but i don't know if we prevent that in code somewhere | 15:07 |
| *** vivekdhayaal has joined #openstack-keystone | 15:09 | |
| edmondsw | so I could create a domain-specific admin role and then to nova,etc. it will say "oh, this is admin" but keystone will distinguish between role assignments for that vs. role assignments for the normal not-domain-specific admin role | 15:09 |
| edmondsw | ayoung ^ | 15:09 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Add redelegation columns to Trust SQL model https://review.openstack.org/172090 | 15:10 |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: Check for already present user without inserting in Bootstrap https://review.openstack.org/293488 | 15:10 |
| knikolla | stevemar, edmondsw: new patch up | 15:11 |
| dstanek | knikolla: why is it a new patch instead of an update? | 15:11 |
| edmondsw | dstanek, stevemar and I told her to do that :) | 15:12 |
| dstanek | edmondsw: why? | 15:12 |
| edmondsw | I can't speak to stevemar's reasoning, but in my mind it's a reduced change, just to see if it helps. We can continue working on this after that goes in if it does help, or abandon as we see fit | 15:12 |
| stevemar | i had similar reasoning.. | 15:13 |
| stevemar | dstanek: poke for https://review.openstack.org/#/c/291497/5 << closes out an rc bug | 15:13 |
| patchbot | stevemar: patch 291497 - keystone - Fixed user in group participance | 15:13 |
| dstanek | edmondsw: ah, i see. it's a test. the commit message should say that or we should abandon the original - otherwise we may waste someone's time | 15:13 |
| *** david-lyle has quit IRC | 15:15 | |
| *** david-lyle has joined #openstack-keystone | 15:15 | |
| ayoung | edmondsw, domain specific role does not go in token | 15:15 |
| ayoung | edmondsw, Nova will never see it | 15:15 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Mapping which yield no identities should result in ValidationError https://review.openstack.org/293184 | 15:15 |
| *** roxanagh_ has joined #openstack-keystone | 15:16 | |
| ayoung | edmondsw, so, if you made domain_admin as a dsr, and it implied admin, then a regular admin role would show up in the project | 15:16 |
| ayoung | er token | 15:16 |
| stevemar | dstanek: another RC closer: https://review.openstack.org/#/c/293184/ | 15:16 |
| patchbot | stevemar: patch 293184 - keystone - Mapping which yield no identities should result in... | 15:16 |
| dstanek | stevemar: testing the first one you mentioned now | 15:16 |
| bknudson | ayoung: we're wondering how bootstrap should work -- as in, how should it check that the admin user already has the role on the project | 15:16 |
| stevemar | dstanek: okay, sorry for bombarding you, just eager to cut RC1 :) | 15:16 |
| ayoung | bknudson, there is a call to list effective roles | 15:17 |
| *** knikolla has quit IRC | 15:17 | |
| bknudson | it does get_roles_for_user_and_project so that should do it? | 15:17 |
| stevemar | dstanek: thoughts on bumping duplicate endpoints from rc1? that patch doesn't seem to have much momentum | 15:18 |
| ayoung | bknudson, I'd have to look. I think so, but remember: I lie. I make schtuff up | 15:18 |
| dstanek | stevemar: np | 15:18 |
| edmondsw | ayoung, yeah, of course... that's not what I was saying | 15:18 |
| dstanek | stevemar: how close is it? | 15:18 |
| *** henrynash has joined #openstack-keystone | 15:18 | |
| *** ChanServ sets mode: +v henrynash | 15:18 | |
| bknudson | ayoung: looks like it does from the code | 15:19 |
| ayoung | edmondsw, I thik I rasied that issue | 15:19 |
| stevemar | dstanek: you WIP'ing it was the last time it moved | 15:19 |
| edmondsw | ayoung, what issue? | 15:19 |
| edmondsw | if admin is a special role in every other OpenStack project, it should be special in keystone too | 15:19 |
| ayoung | edmondsw, DSR name the same as a public name | 15:19 |
| henrynash | hi..can anyone give me tehe steps needs to run one of our unit test with oslo_db in debug mode? | 15:19 |
| edmondsw | ah, good | 15:19 |
| stevemar | welcome back from vacation henrynash | 15:20 |
| henrynash | stevemar: thanks! | 15:20 |
| ayoung | edmondsw, I discussed with henrynash and we do want it such that two domains can create the same DSR | 15:20 |
| ayoung | but I think, as a side effect, masking IS currently allowed | 15:20 |
| ayoung | henrynash, ^^ is that true | 15:20 |
| henrynash | ayoung: context? | 15:20 |
| ayoung | henrynash, can I have a DSR 'admin' today? | 15:20 |
| ayoung | separate from the real Admin role? | 15:20 |
| henrynash | ayounf: you mean, only domain admin for domain X can crud domain roles for that domain? | 15:21 |
| ayoung | henrynash, no | 15:21 |
| ayoung | henrynash, I mean can I creat a DSR with the same name as a Global role | 15:21 |
| ayoung | I know we discussed this | 15:21 |
| henrynash | ayoung: ahh, you mean can someone careate a DSR with name ‘admin’? | 15:21 |
| ayoung | henrynash, yep | 15:21 |
| henrynash | ayoung: yes, I think you can | 15:21 |
| henrynash | ayoung: I’d have to check, but I tihnk so | 15:22 |
| ayoung | henrynash, and...we decided that was OK, right? | 15:22 |
| ayoung | henrynash, I know we said that 2 different domains can have the same DSR | 15:22 |
| *** knikolla has joined #openstack-keystone | 15:22 | |
| henrynash | ayoung: however, I think you prevent ‘admn’ form being an implied role? | 15:22 |
| ayoung | and, as a side effect, the constraint on the DB table was across both name and domain_id on the role table | 15:22 |
| *** jorge_munoz_ has joined #openstack-keystone | 15:22 | |
| ayoung | henrynash, oh, I hadn't thought of that | 15:22 |
| ayoung | yeah, that is kindof accidental | 15:22 |
| ayoung | ugh | 15:23 |
| henrynash | ayoung: yes, different domains can have the same named DSR (e.g. “Dev_resoruce_manager”) | 15:23 |
| ayoung | so no DSR can imply "admin" | 15:23 |
| dstanek | stevemar: i gave the group a +2, but didn't +A since I know next to nothing about LDAP. if you're comfortable with that we can +A :-) | 15:23 |
| ayoung | dstanek, link? | 15:23 |
| henrynash | ayoung: I think that’s correct | 15:23 |
| ayoung | dstanek, I know a little about LDAP | 15:23 |
| dstanek | ayoung: https://review.openstack.org/#/c/291497/5 | 15:23 |
| patchbot | dstanek: patch 291497 - keystone - Fixed user in group participance | 15:23 |
| *** jorge_munoz has quit IRC | 15:24 | |
| *** jorge_munoz_ is now known as jorge_munoz | 15:24 | |
| ayoung | dstanek, ah, uyep, I had my eye on that one. +2a | 15:24 |
| dstanek | stevemar: i'll look at the endpoints one in a few | 15:24 |
| stevemar | dstanek: ayoung it uses the same logic as in list_users_in_group | 15:24 |
| stevemar | ayoung: thanks | 15:24 |
| dstanek | stevemar: yeah, i went back and looked at the original patch | 15:25 |
| ayoung | stevemar, I've had two people contact me interested in doing the outreachy LDAP cleanup project | 15:25 |
| stevemar | dstanek: yeah, looks like the original fixed most of the openLDAP issues but that one | 15:25 |
| ayoung | both were PMs, both logged off before I could answer, but, hey | 15:25 |
| *** sdake has joined #openstack-keystone | 15:25 | |
| stevemar | ayoung: elaborate on the clean up? | 15:26 |
| henrynash | …so back to my original quetsion…can anyone give me the steps needs to run one of our unit test with oslo_db in debug mode? I’ve tried tox -edebug, tried setting the oslo_db log level to DEBUG in our unit/core.py etc….but no debug output so far.... | 15:26 |
| ayoung | stevemar, they asked for outreachy internhip ideas, and I floated LDAP cleanup... | 15:26 |
| ayoung | https://etherpad.openstack.org/p/Keystone-LDAP-Cleanup | 15:26 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Make backend filter testing more comprehensive https://review.openstack.org/293159 | 15:26 |
| stevemar | dstanek: another: https://review.openstack.org/#/c/293184/ :P hehe sorry for all the bugging | 15:26 |
| patchbot | stevemar: patch 293184 - keystone - Mapping which yield no identities should result in... | 15:26 |
| samueldmq | crinkle: ^ | 15:26 |
| stevemar | ayoung: noice | 15:27 |
| stevemar | thanks samueldmq, crinkle is on the west coast, probably just waking up | 15:27 |
| dstanek | stevemar: i just read the commit summary line 5 time before i realized is sounded terrible because there is an 's' missing https://review.openstack.org/#/c/293184 | 15:27 |
| ayoung | stevemar, I'd love to finally Address Termies comments on the LDAP entities in there.... | 15:27 |
| samueldmq | stevemar: np :) | 15:27 |
| stevemar | dstanek: lol | 15:27 |
| stevemar | dstanek: -1!! | 15:28 |
| stevemar | henrynash: let me see if i can fix your problem | 15:28 |
| stevemar | henrynash: also use the oslo-signal, dims ^ | 15:29 |
| *** browne has joined #openstack-keystone | 15:29 | |
| henrynash | stevemar: such a helpful PTL, anyone would think he’s running for re-election :-) | 15:29 |
| *** vivekdhayaal has quit IRC | 15:30 | |
| *** vivekd2 has joined #openstack-keystone | 15:30 | |
| *** timcline has joined #openstack-keystone | 15:30 | |
| *** slberger has joined #openstack-keystone | 15:30 | |
| dstanek | stevemar: so, the user never sees a validation error right? just an unauthorized? | 15:30 |
| *** ninag has joined #openstack-keystone | 15:31 | |
| dstanek | stevemar: this seems like a strange message to pass back to the user: https://review.openstack.org/#/c/293184/2/keystone/federation/utils.py | 15:31 |
| patchbot | dstanek: patch 293184 - keystone - Mapping which yield no identities should result in... | 15:31 |
| *** fawadkhaliq has quit IRC | 15:33 | |
| *** fawadkhaliq has joined #openstack-keystone | 15:34 | |
| *** timcline has quit IRC | 15:34 | |
| *** david-lyle_ has joined #openstack-keystone | 15:34 | |
| dstanek | stevemar: ah, yes the dup endpoints. i think htruta was going to pick that back up. i just did the rebase to resolve the merge conflict | 15:34 |
| *** david-lyle has quit IRC | 15:34 | |
| *** vivekd2 has quit IRC | 15:35 | |
| *** jaosorior has quit IRC | 15:36 | |
| *** timcline has joined #openstack-keystone | 15:36 | |
| samueldmq | stevemar: dstanek: ayoung: I think we need a release note to patch 291497 | 15:37 |
| patchbot | samueldmq: https://review.openstack.org/#/c/291497/ - keystone - Fixed user in group participance | 15:37 |
| *** jasonsb has joined #openstack-keystone | 15:37 | |
| ayoung | are we going to RN every bug? Can't we automate that? | 15:37 |
| *** fawadkhaliq has quit IRC | 15:38 | |
| samueldmq | that bug affect end users/deployers, so yes we do need that | 15:38 |
| samueldmq | ayoung: maybe we could automate if all the bug reports were small and well-written | 15:39 |
| dstanek | samueldmq: no, there was already a release note for it | 15:39 |
| dstanek | samueldmq: https://review.openstack.org/#/c/258528/13/releasenotes/notes/bug_1526462-df9a3f3974d9040f.yaml | 15:40 |
| patchbot | dstanek: patch 258528 - keystone - Enable support for posixGroups in LDAP (MERGED) | 15:40 |
| stevemar | samueldmq: yeah, there was already a RN for it | 15:40 |
| stevemar | dstanek: right, the user only sees unauthorized, AFAICT | 15:40 |
| bknudson | we already have guidance for when a release note is needed -- http://docs.openstack.org/developer/keystone/developing.html#release-notes | 15:40 |
| dstanek | stevemar: makes sense, but the error message is odd. users won't have access to debug logs or the mapping used | 15:41 |
| samueldmq | stevemar: dstanek: kk | 15:41 |
| *** vivekdhayaal has joined #openstack-keystone | 15:41 | |
| stevemar | dstanek: oh no, is that debug? | 15:42 |
| stevemar | dstanek: i think it bubbles up no? | 15:42 |
| dstanek | stevemar: it's the message for the validation error. does it bubble up to the user? | 15:43 |
| stevemar | dstanek: it's being caught here https://review.openstack.org/#/c/293184/2/keystone/auth/plugins/mapped.py | 15:43 |
| patchbot | stevemar: patch 293184 - keystone - Mapping which yield no identities should result in... | 15:43 |
| stevemar | knikolla: edmondsw haha the single user fix seems to be passing.. | 15:44 |
| edmondsw | :) | 15:44 |
| dstanek | stevemar: yeah, so i just checked. since it's a security exception it will only bubble up to the user if they are in insecure_debug mode. | 15:45 |
| dstanek | stevemar: that also means that the message is completely lost otherwise | 15:45 |
| crinkle | thanks samueldmq | 15:46 |
| stevemar | dstanek: d'oh | 15:46 |
| stevemar | dstanek: we can wait for gyee to come online | 15:46 |
| stevemar | dstanek: unless you're feeling extra handy | 15:47 |
| *** bjornar has quit IRC | 15:47 | |
| dstanek | stevemar: i'm thinking we log it | 15:47 |
| *** mylu has joined #openstack-keystone | 15:47 | |
| stevemar | dstanek: doesn't really help the end user | 15:47 |
| stevemar | or you mean log it in addition to | 15:48 |
| dstanek | stevemar: yes. | 15:48 |
| dstanek | stevemar: all the end user can do is call their cloud admin or whatever and complain - since it's a security exception | 15:49 |
| stevemar | dstanek: true | 15:49 |
| *** browne has quit IRC | 15:51 | |
| mkoderer___ | jamielennox: hi, could you have a review on https://review.openstack.org/#/c/290511/? I tried to fix keystone v3 issues in Manila and would like to get your opinion | 15:55 |
| patchbot | mkoderer___: patch 290511 - manila - Fix keystone v3 issues for all clients | 15:55 |
| morgan | stevemar, edmondsw: https://review.openstack.org/#/c/293488/1 commented - +1, but have a suggestion and happy to move to +2 at that point | 15:55 |
| patchbot | morgan: patch 293488 - keystone - Check for already present user without inserting i... | 15:55 |
| *** gyee has joined #openstack-keystone | 15:55 | |
| *** ChanServ sets mode: +v gyee | 15:55 | |
| edmondsw | morgan, good comment | 15:56 |
| samueldmq | crinkle: np | 15:56 |
| edmondsw | morgan, knikolla's first patch tried to make this change for all things that are currently catching Conflict, not just users, but it's failing in devstack and nobody can figure out why | 15:57 |
| dstanek | morgan: i think that review isn't ready yet. | 15:57 |
| edmondsw | nobody = stevemar, dstanek, bknudson, knikolla, and myself | 15:57 |
| edmondsw | that original patch was https://review.openstack.org/#/c/292492 | 15:58 |
| edmondsw | morgan ^ | 15:58 |
| edmondsw | dstanek, I don't think we'd hold up this second patch... it just changes things for user and not for domain, project, etc., but that's actually what the bug was about... users | 15:58 |
| edmondsw | so we'd be fixing the bug, and could take more time to cleanup other things that aren't actually causing a bug | 15:59 |
| dstanek | edmondsw: ah, ok. i was going to suggest a partial-bug instead of closes, but if the bug is only about uses... | 15:59 |
| morgan | the try/except for friendlier issue is the reason for +1 vs +2 | 15:59 |
| morgan | the other part of the comment was just a "oh if you wanted to fix it all at once, i'd support it" | 16:00 |
| edmondsw | morgan, understood, just providing more info | 16:00 |
| edmondsw | and I agree | 16:01 |
| morgan | edmondsw: clarified the position in another comment | 16:01 |
| *** henrynash has quit IRC | 16:01 | |
| edmondsw | knikolla, did you see that? | 16:01 |
| *** e0ne has joined #openstack-keystone | 16:01 | |
| edmondsw | btw guys, knikolla said this would be her first patch :) | 16:02 |
| knikolla | edmondsw, yeah. once I see it passing CI I will resolve morgan's comment | 16:02 |
| knikolla | his* :P | 16:02 |
| edmondsw | :P sorry | 16:02 |
| knikolla | i get that a lot though haha | 16:02 |
| edmondsw | knikolla welcome to keystone | 16:03 |
| knikolla | edmondsw, thank you. hoping it will be the first of many contributions. | 16:03 |
| morgan | knikolla: cool | 16:03 |
| edmondsw | ++ | 16:03 |
| morgan | knikolla: def welcome to keystone | 16:04 |
| *** fawadkhaliq has joined #openstack-keystone | 16:04 | |
| dstanek | ++ | 16:05 |
| morgan | oh ugh. | 16:05 |
| morgan | i can't test keystone on my local machine atm... | 16:05 |
| * morgan kicks os x for being bad. | 16:06 | |
| knikolla | morgan, what exception should i catch in the case of a failing insert? | 16:06 |
| *** henrynash has joined #openstack-keystone | 16:06 | |
| *** ChanServ sets mode: +v henrynash | 16:06 | |
| *** kaliya has quit IRC | 16:06 | |
| morgan | knikolla: hm. i would be pretty broad - something like: | 16:07 |
| morgan | knikolla: except Exception and then respin the message in the friendly error printed | 16:07 |
| morgan | make sure if you do except Exception to add " # nosec" after the line | 16:08 |
| morgan | edmondsw: ^ thoughts? | 16:08 |
| morgan | knikolla: example of the use of " # nosec" | 16:09 |
| morgan | knikolla: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/backends/sql.py#n65 | 16:09 |
| edmondsw | morgan hmm... wouldn't keystone-manage bootstrap already have to handle general exceptions? | 16:10 |
| edmondsw | it is just a bootstrap utility... probably spits a trace if it hits something unexpected, and that's probably fine | 16:11 |
| *** EinstCrazy has quit IRC | 16:11 | |
| morgan | edmondsw: eh. | 16:11 |
| morgan | edmondsw: *shrug* | 16:11 |
| *** belmoreira has quit IRC | 16:11 | |
| edmondsw | but if there's a specific error something like LDAP would raise when it can't create a user, I think that's what we'd check for | 16:12 |
| *** GB21 has joined #openstack-keystone | 16:12 | |
| edmondsw | morgan, if you want to cleanup general exception handling, I think that should be done more generally not in this one place :) | 16:12 |
| bknudson | what we've learned is that openstack use is mostly just installing | 16:13 |
| edmondsw | knikolla, looks like it raises exception.ForbiddenAction if you can't create a user | 16:14 |
| morgan | edmondsw: sounds good. | 16:15 |
| edmondsw | bknudson lol | 16:15 |
| dstanek | bknudson: what else would you do with it? | 16:16 |
| edmondsw | I wager most of those on the ML and IRC install it more than use it, true enough | 16:16 |
| morgan | dstanek: lol | 16:17 |
| edmondsw | it's certainly not secure enough to use in production, right? ;) | 16:17 |
| knikolla | edmondsw, morgan: In the case that the user doesn't exist and it can't be created, the following bootstrap commands don't make much sense. Since they are adding the user to the project, and the role. Wouldn't an uncaught exception make more sense? | 16:18 |
| edmondsw | knikolla I was expecting we would have keystone-manage exit at the point that you get a ForbiddenAction exception, but with a nice message instead of a trace | 16:19 |
| edmondsw | but maybe it would already do that, I don't know | 16:19 |
| morgan | edmondsw: ++ | 16:19 |
| *** david-lyle_ is now known as david-lyle | 16:20 | |
| amakarov | ayoung, hi! Do we actually need oauth1? As long as I see it has to be split: request and access tokens should use different backends. | 16:20 |
| *** ebalduf has joined #openstack-keystone | 16:22 | |
| stevemar | gyee: i think dstanek wants the message also loggd | 16:24 |
| knikolla | edmondsw, morgan: Would this be ok? http://paste.openstack.org/show/490747/ | 16:26 |
| morgan | looks good to me . | 16:27 |
| morgan | if it passes check/gate | 16:27 |
| morgan | :) | 16:27 |
| knikolla | morgan, i would also need to make bootstrap exit gracefully at that point. Since the caught exception will just make it fail when assigning the nonexistent user to the project and role. | 16:27 |
| knikolla | in the next few lines. | 16:28 |
| morgan | knikolla: right. | 16:28 |
| knikolla | morgan, edmondsw, sys.exit(0)? | 16:29 |
| mfisch | henrynash: quick question can you confirm that the endpoint_policy_extension was removed in liberty? | 16:30 |
| edmondsw | knikolla I think you'd want to print the error to the screen, rather than to the logs | 16:30 |
| edmondsw | or both | 16:30 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 16:30 |
| mfisch | we have some old refs to it in a config file but it seems to have gone away | 16:30 |
| *** lhcheng has joined #openstack-keystone | 16:31 | |
| *** ChanServ sets mode: +v lhcheng | 16:31 | |
| raildo | lbragstad: ping, do you know how to handle with cache problems on fernet tokens? | 16:31 |
| knikolla | Isn't LOG.error also streamed to the screen? | 16:31 |
| lbragstad | raildo cache problems? | 16:31 |
| raildo | lbragstad: some tests are breaking after a rebase... | 16:31 |
| lbragstad | like with keystonemiddleware? | 16:31 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Support `id` and `enabled` attributes when listing service providers https://review.openstack.org/291584 | 16:32 |
| raildo | lbragstad: http://logs.openstack.org/50/258650/27/check/gate-keystone-python27/bf1bd81/console.html.gz | 16:32 |
| stevemar | dstanek: morgan ^ | 16:32 |
| morgan | knikolla: it should be | 16:32 |
| morgan | for bootstrap | 16:32 |
| *** fawadkhaliq has quit IRC | 16:32 | |
| henrynash | mfisdh: do you mean when was it made core? | 16:32 |
| raildo | lbragstad: this test keystone.tests.unit.test_backend_sql.SqlTokenCacheInvalidation.test_delete_scoped_token_by_user_and_tenant, for example... | 16:32 |
| gyee | stevemar, the msg is logged by default no matter what | 16:33 |
| *** fawadkhaliq has joined #openstack-keystone | 16:33 | |
| *** fawadkhaliq has quit IRC | 16:33 | |
| stevemar | gyee: don't tell me, tell dstanek :P | 16:34 |
| henrynash | mfisch: it was move to core in Liberty, yes | 16:35 |
| mfisch | thanks henrynash | 16:35 |
| *** trown is now known as trown|lunch | 16:36 | |
| dstanek | gyee: what message is logged? | 16:37 |
| lbragstad | raildo that's test calls the persistence driver - which will break https://github.com/openstack/keystone/blob/master/keystone/tests/unit/token/test_backends.py#L547-L549 | 16:37 |
| lbragstad | with fernet | 16:37 |
| raildo | lbragstad: hum... got it, probably will be the same thing for the other tests | 16:37 |
| lbragstad | raildo that test could be rewritten to not be dependent on the persistence backend | 16:38 |
| *** browne has joined #openstack-keystone | 16:38 | |
| raildo | lbragstad: I'll do that :) thanks sir | 16:38 |
| lbragstad | raildo no problem - thank you | 16:38 |
| *** links has quit IRC | 16:38 | |
| gyee | dstanek, sorry, you are right, I was shooting bull, it does not logged | 16:39 |
| gyee | lemme roll a patch | 16:39 |
| dstanek | rolling, rolling, rolling. gyee get his patch a rolling... | 16:40 |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: Check for already present user without inserting in Bootstrap https://review.openstack.org/293488 | 16:41 |
| knikolla | edmondsw, morgan ^^ | 16:42 |
| *** henrynash has quit IRC | 16:43 | |
| *** spzala has joined #openstack-keystone | 16:45 | |
| edmondsw | knikolla, eh... I'm not sure that's really helping | 16:45 |
| edmondsw | morgan, the more I think of it, the more I think we just don't catch the ForbiddenAction exception, at least not under this patch | 16:46 |
| edmondsw | some later patch could add nicer error handling for this and other things that bootstrap is doing, if need be | 16:46 |
| edmondsw | today I assume it already logs and prints the error, this would just be about making it prettier | 16:47 |
| *** e0ne has quit IRC | 16:47 | |
| *** e0ne_ has joined #openstack-keystone | 16:47 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Mapping which yield no identities should result in ValidationError https://review.openstack.org/293184 | 16:48 |
| morgan | edmondsw: honestly, we could punt on bootstrap getting this fix until post RC | 16:48 |
| gyee | dstanek, there ^^^, your satisfaction is guaranteed | 16:48 |
| morgan | edmondsw: and get it wrapped up more cleanly | 16:48 |
| edmondsw | morgan, NO, I want this in RC | 16:48 |
| edmondsw | I want to use bootstrap for LDAP cases | 16:49 |
| morgan | edmondsw: ideally we should spend the time to clean this up properly for RC or punt it. | 16:49 |
| knikolla | edmondsw, morgan, if the user can't be created and doesn't exist it doesn't make sense to continue with bootstrap. | 16:49 |
| edmondsw | morgan, I agree... but I think what we're talking about cleaning up properly here has gone beyond the scope of the defect | 16:49 |
| dstanek | gyee: ! | 16:49 |
| morgan | edmondsw: sortof. | 16:49 |
| edmondsw | knikolla, yes, but if you don't catch the exception that will already happen | 16:50 |
| *** e0ne has joined #openstack-keystone | 16:50 | |
| knikolla | edmondsw, yes, that's why I didn't catch it in the first patch set. | 16:50 |
| *** fawadkhaliq has joined #openstack-keystone | 16:50 | |
| dstanek | gyee: is there anything we can log to make it specific about the request? | 16:50 |
| *** e0ne_ has quit IRC | 16:50 | |
| knikolla | edmondsw, I assume the bug is when you already have the user in LDAP and you want to bootstrap projects and roles. | 16:50 |
| morgan | edmondsw: i just don't care. so either go back to the original one or not, its all the same. | 16:51 |
| stevemar | dstanek: gyee with satisfaction guaranteed, we can't lose! | 16:51 |
| *** fawadkhaliq has quit IRC | 16:51 | |
| gyee | lol | 16:51 |
| morgan | edmondsw: i'll support whatever. | 16:51 |
| morgan | knikolla: ^ +2 on either thing. | 16:51 |
| morgan | knikolla: :) | 16:51 |
| *** fawadkhaliq has joined #openstack-keystone | 16:51 | |
| stevemar | edmondsw: would only supporting the user case solve your issue? | 16:52 |
| edmondsw | stevemar yes | 16:53 |
| stevemar | edmondsw: even better | 16:53 |
| *** mylu has quit IRC | 16:53 | |
| *** e0ne has quit IRC | 16:53 | |
| *** GB21 has quit IRC | 16:54 | |
| edmondsw | I like the original patch better than the current one. Or replace raise with something like raise SystemExit(_("Unable to create user %s") % self.username) | 16:55 |
| *** GB21 has joined #openstack-keystone | 16:55 | |
| edmondsw | I think that would address morgan's concern | 16:55 |
| *** spzala has quit IRC | 16:55 | |
| edmondsw | you like that, morgan? | 16:55 |
| gyee | dstanek, for mapping processing, that are two more logs we can aggregate. i.e. https://github.com/openstack/keystone/blob/master/keystone/federation/utils.py#L535 | 16:56 |
| morgan | edmondsw: either way. | 16:56 |
| *** spzala has joined #openstack-keystone | 16:56 | |
| gyee | dstanek, I think we are OK for now | 16:56 |
| edmondsw | morgan, then the original patch is simpler :) | 16:56 |
| edmondsw | knikolla ^ | 16:56 |
| *** spzala has quit IRC | 16:57 | |
| knikolla | edmondsw, ok :) | 16:57 |
| knikolla | would i need to make a third patch set or the first one can be used, haha. | 16:58 |
| *** vivekd2 has joined #openstack-keystone | 16:59 | |
| *** vivekdhayaal has quit IRC | 16:59 | |
| *** pushkaru has quit IRC | 16:59 | |
| *** pushkaru has joined #openstack-keystone | 16:59 | |
| *** raildo is now known as raildo-afk | 17:00 | |
| *** e0ne has joined #openstack-keystone | 17:00 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 17:02 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add an option to retrieve X-Forwarded-For as remote address https://review.openstack.org/293575 | 17:03 |
| *** spzala has joined #openstack-keystone | 17:03 | |
| ayoung | amakarov, I never thought we did. Ask stevemar as he was the one that wrote it, and it was an IBM request. I'd be surprised if we did | 17:03 |
| ayoung | amakarov, I'd be happy to deprecate it | 17:03 |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: Check for already present user without inserting in Bootstrap https://review.openstack.org/293488 | 17:04 |
| stevemar | ayoung: i'd need to ask and see if it's still being used here, but i suspect we could deprecate it, i'd be curious to see if other folks out are using it | 17:04 |
| stevemar | it doesn't cause too many bugs and the code base is pretty small | 17:05 |
| ayoung | stevemar, agreed. | 17:05 |
| knikolla | edmondsw, morgan: reverted to first patch set | 17:05 |
| ayoung | stevemar, I just thought it would be a nice first step for amakarov 's work to merge the two, but if it is easier for him to just toss it, let's plan on doing that | 17:05 |
| *** spzala has quit IRC | 17:07 | |
| stevemar | dolphm: morgan poke for https://review.openstack.org/#/c/293575/ | 17:09 |
| patchbot | stevemar: patch 293575 - keystone - Add an option to retrieve X-Forwarded-For as remot... | 17:09 |
| stevemar | bknudson: if you have time, you too ^ | 17:10 |
| amakarov | ayoung, stevemar, I have no problem writing a bunch of additional backends :) Though current implementation is definitely not perfect: it stores access token in sql backend and vulnerable to man-in-the middle attacks. Ok, I'll ack around if somebody uses it here. | 17:10 |
| amakarov | ayoung, btw I have assignment and trust drivers unified | 17:12 |
| *** dan_nguyen has quit IRC | 17:12 | |
| ayoung | amakarov, I am weeping tears of joy | 17:12 |
| ayoung | well, I would be if I weren't such a tough guy | 17:12 |
| *** jistr has quit IRC | 17:12 | |
| amakarov | ayoung, oh, that isn't worth tears of a tough guy: applause and a bronze monument maybe... | 17:16 |
| ayoung | have you seen the price of bronze these days? | 17:16 |
| ayoung | amakarov, with out without materialized strings? | 17:16 |
| amakarov | ayoung, I think right now we need a walking skeleton and optimisations are premature | 17:19 |
| amakarov | besides, materialized path requires an index that slows inserts down | 17:19 |
| dstanek | stevemar: i think dolphm is out for the week | 17:19 |
| dstanek | edmondsw: if that test actually tested it then we wouldn't need this commit :-) | 17:23 |
| openstackgerrit | Merged openstack/keystone: Fixed user in group participance https://review.openstack.org/291497 | 17:23 |
| *** spandhe_ has joined #openstack-keystone | 17:24 | |
| edmondsw | dstanek, no, we still do... the old code caught Conflict, which would happen the second time you called bootstrap IF you were using sql backend | 17:24 |
| stevemar | dstanek: good to know! | 17:24 |
| *** trown|lunch is now known as trown | 17:25 | |
| *** spandhe has quit IRC | 17:25 | |
| *** spandhe_ is now known as spandhe | 17:25 | |
| edmondsw | dstanek, so that test did run, it just didn't fail for a different reason than why it wouldn't fail with knikolla's change | 17:25 |
| knikolla | the patch is for the LDAP backed, where you can't insert users | 17:25 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Support `id` and `enabled` attributes when listing service providers https://review.openstack.org/291584 | 17:27 |
| stevemar | dstanek: made the changes ^ | 17:27 |
| edmondsw | I guess we could add a test that mocks the user already existing and raises ForbiddenAction if you attempt to create a user, and proves that bootstrap didn't attempt to create the user because it already existed | 17:27 |
| dstanek | edmondsw: ah, hmmm... | 17:27 |
| bknudson | you can add users with the fake ldap backend | 17:28 |
| dstanek | edmondsw: in theory that second bootstrap run would fail for that reason, right? | 17:28 |
| bknudson | and you can mock all of it anyways | 17:28 |
| edmondsw | dstanek, with the current code or knikolla's change? | 17:29 |
| *** jasonsb has quit IRC | 17:29 | |
| edmondsw | dstanek, not sure I followed the question | 17:29 |
| dstanek | edmondsw: either way. first run will create the user and the second run should gracefully skip | 17:30 |
| dstanek | stevemar: nice | 17:30 |
| *** e0ne has quit IRC | 17:30 | |
| dstanek | stevemar: oh, you added the bug too. was going to comment on that and forgot | 17:30 |
| stevemar | dstanek: i think i had it before and accidentally removed it | 17:31 |
| stevemar | dstanek: i noticed it :) | 17:31 |
| knikolla | dstanek, from what I understand, in a scenario where you can't create users in the DB (however you need to bootstrap an already existing user into a project/role) bootstrap would fail with forbidden action on the first create even if the user existed already. | 17:31 |
| stevemar | dstanek: thanks for all your help today | 17:31 |
| edmondsw | dstanek, yes, that idempotent test proves that the second run will gracefully skip with or without knikolla's change if the backend supports user creation. It doesn't check the case where the backend doesn't support user creation, and would fail today if it did | 17:32 |
| dstanek | edmondsw: actually i think i agree with your comment. the way the code is written it won't matter. there will be a crazy failure if the user doesn't exist | 17:33 |
| dstanek | stevemar: my pleasure. am i done for today? | 17:33 |
| stevemar | dstanek: you are done whenever you want to be done! | 17:33 |
| *** dan_nguyen has joined #openstack-keystone | 17:33 | |
| stevemar | dstanek: or whenever claco says go | 17:34 |
| stevemar | so | 17:34 |
| knikolla | dstanek, in that case it is expected to fail if the user doesn't exist and keystone can't create it. | 17:34 |
| *** GB21 has quit IRC | 17:36 | |
| *** johnthetubaguy_ has joined #openstack-keystone | 17:39 | |
| *** mylu has joined #openstack-keystone | 17:41 | |
| *** johnthetubaguy has quit IRC | 17:41 | |
| *** johnthetubaguy_ is now known as johnthetubaguy | 17:41 | |
| *** ninag has quit IRC | 17:42 | |
| *** ninag has joined #openstack-keystone | 17:43 | |
| *** roxanagh_ has quit IRC | 17:43 | |
| dstanek | stevemar: claco is no longer my boss. i work on the same team as lbragstad | 17:46 |
| dstanek | knikolla: me too, but that's no different now then before your change | 17:47 |
| openstackgerrit | Merged openstack/keystone: Make backend filter testing more comprehensive https://review.openstack.org/293159 | 17:47 |
| *** ninag has quit IRC | 17:47 | |
| knikolla | dstanek, yeah, but there is nothing keystone can do about it if it can't write to the DB. It's left to the LDAP admin to add the user in the backend. | 17:47 |
| *** vivekd2 has quit IRC | 17:49 | |
| *** fawadkhaliq has quit IRC | 17:49 | |
| dstanek | knikolla: yep, i think that's what morgan wanted to make nicer when he suggested the try-except | 17:50 |
| *** fawadkhaliq has joined #openstack-keystone | 17:50 | |
| knikolla | dstanek, even if I catch the exception, I'd have to stop there as all the following bootstrap steps will fail. | 17:51 |
| dstanek | knikolla: exactly | 17:52 |
| knikolla | dstanek, in the other hand, i think the uncaught ForbiddenAction exception is still pretty self-explanatory. | 17:53 |
| *** rcernin has quit IRC | 17:53 | |
| dstanek | knikolla: maybe, but i agree with the reasoning behind the try-except. if we can provide a message instead of a traceback, it's a win | 17:54 |
| knikolla | dstanek, should I reraise the exception or do a SystemExit in that case? | 17:55 |
| stevemar | dstanek: claco is everyones boss | 17:56 |
| *** lhinds_ has quit IRC | 17:57 | |
| *** browne has quit IRC | 17:59 | |
| dstanek | knikolla: i don't think you want to do anything for this patch. i think it is good as is | 17:59 |
| knikolla | dstanek, thank you | 18:00 |
| *** browne has joined #openstack-keystone | 18:02 | |
| stevemar | morgan: if you have time: https://review.openstack.org/#/c/291584/ | 18:03 |
| patchbot | stevemar: patch 291584 - keystone - Support `id` and `enabled` attributes when listing... | 18:03 |
| *** ninag has joined #openstack-keystone | 18:03 | |
| *** GB21 has joined #openstack-keystone | 18:04 | |
| *** ninag has quit IRC | 18:04 | |
| *** spzala has joined #openstack-keystone | 18:04 | |
| *** ninag has joined #openstack-keystone | 18:05 | |
| *** tqtran-afk has joined #openstack-keystone | 18:05 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:07 | |
| *** ninag has quit IRC | 18:09 | |
| *** tqtran-afk has quit IRC | 18:10 | |
| *** mhickey has quit IRC | 18:10 | |
| *** berserk has joined #openstack-keystone | 18:11 | |
| *** tesseract- has quit IRC | 18:19 | |
| *** tqtran-afk has joined #openstack-keystone | 18:22 | |
| *** ninag has joined #openstack-keystone | 18:25 | |
| stevemar | anyone else around? :] | 18:27 |
| knikolla | o/ | 18:29 |
| rodrigods | o/ | 18:29 |
| *** spandhe_ has joined #openstack-keystone | 18:29 | |
| rodrigods | stevemar, +1 that patch ^ | 18:29 |
| *** berserk has quit IRC | 18:29 | |
| stevemar | i need eyes on https://review.openstack.org/#/c/291584/ and https://review.openstack.org/#/c/293488/ << they are the last 2 before we kick off RC :) | 18:29 |
| patchbot | stevemar: patch 291584 - keystone - Support `id` and `enabled` attributes when listing... | 18:29 |
| patchbot | stevemar: patch 293488 - keystone - Check for already present user without inserting i... | 18:29 |
| rodrigods | stevemar, and i'm working on similar stuff at tempest :) | 18:30 |
| stevemar | rodrigods: nice, let me know if i can help | 18:31 |
| stevemar | samueldmq: o/ | 18:31 |
| rodrigods | stevemar, sure, will include you as reviewer | 18:31 |
| *** spandhe has quit IRC | 18:31 | |
| rodrigods | i will also include in some changes that are already there | 18:31 |
| *** spandhe has joined #openstack-keystone | 18:32 | |
| *** ninag has quit IRC | 18:33 | |
| *** ninag has joined #openstack-keystone | 18:33 | |
| *** ninag has quit IRC | 18:34 | |
| *** spandhe_ has quit IRC | 18:34 | |
| stevemar | ayoung: o/ | 18:34 |
| ayoung | stevemar, which one? | 18:34 |
| *** ninag has joined #openstack-keystone | 18:34 | |
| stevemar | ayoung: https://review.openstack.org/#/c/291584/ | 18:34 |
| patchbot | stevemar: patch 291584 - keystone - Support `id` and `enabled` attributes when listing... | 18:34 |
| ayoung | looking | 18:34 |
| samueldmq | stevemar: hi | 18:34 |
| stevemar | ayoung: last piece of the puzzle before i kick off an rc1 request | 18:34 |
| dstanek | stevemar: you're not wasting any time | 18:35 |
| stevemar | dstanek: no sir! | 18:35 |
| samueldmq | stevemar: looking at the remaining one, the other's got approved | 18:35 |
| ayoung | stevemar, no test that both enabled and id are set? | 18:35 |
| ayoung | I guess that would be pretty rare | 18:35 |
| openstackgerrit | David Stanek proposed openstack/keystone: Enables the notification tests in py3 https://review.openstack.org/280671 | 18:36 |
| stevemar | ayoung: i went with what was done in the idp patch: Ib672ba759d26bdd0eecd48451994b3451fb8648a -- but yeah, it wouldn't be too common | 18:36 |
| ayoung | OK | 18:36 |
| ayoung | stevemar, looks sane | 18:37 |
| ayoung | +2a | 18:37 |
| stevemar | ayoung: should be sane, it's what we did for idp, we just never got around to doing it for sps | 18:38 |
| stevemar | yay | 18:38 |
| stevemar | i'll have a release request soon | 18:38 |
| ayoung | we done? Molson time? | 18:38 |
| stevemar | ayoung: pretty much! | 18:38 |
| ayoung | or whatever you drink in Toronto | 18:38 |
| stevemar | ayoung: barring anything catastrophic | 18:38 |
| *** rk4n_ has joined #openstack-keystone | 18:38 | |
| stevemar | mill st. organic! | 18:38 |
| rodrigods | stevemar, https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-federation-ext.rst | 18:40 |
| *** ninag has quit IRC | 18:40 | |
| rodrigods | should remove the "Extension" there? | 18:40 |
| samueldmq | stevemar: lgtm, but ayoung's approved anyways :) | 18:40 |
| stevemar | rodrigods: meh | 18:41 |
| stevemar | rodrigods: i mean, you could, i'd approve it, but it's not critical | 18:41 |
| *** mylu has quit IRC | 18:41 | |
| rodrigods | stevemar, otherwise tempest guys would not approve tests related to it :P | 18:41 |
| stevemar | rodrigods: really? | 18:41 |
| rodrigods | yeah, it needs to be stable | 18:41 |
| *** rk4n has quit IRC | 18:42 | |
| stevemar | rodrigods: link ? | 18:42 |
| stevemar | link to someone saying that... | 18:42 |
| rodrigods | stevemar, http://docs.openstack.org/developer/tempest/HACKING.html#api-stability | 18:43 |
| stevemar | rodrigods: i don't see a problem there. The APIs are stable, so is the function. It doesn't say whether it's an "extension" or not matters | 18:45 |
| rodrigods | stevemar, extension vs experimental vs .... is always "cloudy" to me | 18:45 |
| stevemar | ha | 18:46 |
| bknudson | we're creating confusion by referring to things as extensions | 18:46 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: Remove "extension" mensions about federation API https://review.openstack.org/293646 | 18:46 |
| rodrigods | stevemar, ^ submitted anyway | 18:46 |
| stevemar | rodrigods: do it for the others too :) | 18:47 |
| rodrigods | stevemar, other examples? | 18:47 |
| stevemar | oauth, trust, inherit | 18:47 |
| rodrigods | ok | 18:47 |
| rodrigods | was doing for federation because was writing the tests in tempest heh | 18:47 |
| rodrigods | will do, just a sec | 18:47 |
| *** fawadkhaliq has quit IRC | 18:49 | |
| *** mylu has joined #openstack-keystone | 18:53 | |
| *** ebalduf has quit IRC | 18:53 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: Remove extension from already core features https://review.openstack.org/293646 | 18:54 |
| rodrigods | stevemar, inherit was documented in the root API already :) | 18:54 |
| *** amit2131 has quit IRC | 18:55 | |
| *** amit213 has joined #openstack-keystone | 18:55 | |
| *** pece has quit IRC | 18:56 | |
| *** pumarani__ has joined #openstack-keystone | 19:03 | |
| *** harlowja has joined #openstack-keystone | 19:04 | |
| *** mkrcmari__ has quit IRC | 19:05 | |
| *** pushkaru has quit IRC | 19:07 | |
| *** ayoung has quit IRC | 19:10 | |
| *** ninag has joined #openstack-keystone | 19:15 | |
| openstackgerrit | Merged openstack/keystone: Mapping which yield no identities should result in ValidationError https://review.openstack.org/293184 | 19:17 |
| *** browne has quit IRC | 19:19 | |
| *** dan_nguyen has quit IRC | 19:19 | |
| *** ninag has quit IRC | 19:19 | |
| *** browne has joined #openstack-keystone | 19:22 | |
| *** pece has joined #openstack-keystone | 19:25 | |
| *** roxanagh_ has joined #openstack-keystone | 19:25 | |
| *** kro_sniffles is now known as kro_mnckn_doc | 19:27 | |
| *** daemontool has quit IRC | 19:28 | |
| *** mylu has quit IRC | 19:36 | |
| *** ninag has joined #openstack-keystone | 19:36 | |
| *** dan_nguyen has joined #openstack-keystone | 19:37 | |
| openstackgerrit | Merged openstack/keystone: Check for already present user without inserting in Bootstrap https://review.openstack.org/293488 | 19:39 |
| *** mylu has joined #openstack-keystone | 19:41 | |
| knikolla | hurray to my first merged commit! | 19:41 |
| *** browne has quit IRC | 19:42 | |
| openstackgerrit | Merged openstack/keystone: Document running in uwsgi proxied by apache https://review.openstack.org/293114 | 19:43 |
| dims | knikolla : congrats! | 19:43 |
| knikolla | dims, thanks! | 19:46 |
| *** e0ne has joined #openstack-keystone | 19:46 | |
| *** harlowja has quit IRC | 19:46 | |
| *** GB21 has quit IRC | 19:52 | |
| *** jbell8 has quit IRC | 19:54 | |
| *** jbell8 has joined #openstack-keystone | 19:55 | |
| *** ig0r_ has quit IRC | 19:55 | |
| *** dan_nguyen has quit IRC | 19:57 | |
| *** ericksonsantos has joined #openstack-keystone | 19:58 | |
| stevemar | knikolla: you gotta use the #success feature :) | 19:59 |
| stevemar | knikolla: also, congrats :) | 19:59 |
| stevemar | knikolla: write out "#success my first merged commit" -- someone special happens | 20:00 |
| knikolla | #success my first merged commit | 20:01 |
| openstackstatus | knikolla: Added success to Success page | 20:01 |
| dhellmann | knikolla : congratulations! | 20:01 |
| *** slberger1 has joined #openstack-keystone | 20:01 | |
| openstackgerrit | Merged openstack/keystone: Support `id` and `enabled` attributes when listing service providers https://review.openstack.org/291584 | 20:01 |
| openstackgerrit | Sean Perry proposed openstack/keystone: IdP deletion triggers token invalidation https://review.openstack.org/213104 | 20:02 |
| knikolla | haha didn't know there was a success page! that's cool! | 20:02 |
| knikolla | thanks :) | 20:02 |
| stevemar | knikolla: https://wiki.openstack.org/wiki/Successes :) | 20:03 |
| *** slberger has quit IRC | 20:03 | |
| knikolla | stevemar, i'm there now. lol at the "we got rid of the keystone cli" | 20:04 |
| stevemar | knikolla: hehe | 20:04 |
| *** rk4n_ has quit IRC | 20:06 | |
| stevemar | dolphm: morgan dstanek marekd lhcheng gyee jamielennox samueldmq topol bknudson RC1 release request: https://review.openstack.org/#/c/293689/ | 20:06 |
| patchbot | stevemar: patch 293689 - releases - release keystone rc1 for mitaka | 20:06 |
| lbragstad | stevemar woo! | 20:06 |
| bknudson | stevemar: -1 for trailing whitespace | 20:06 |
| topol | stevemar AWESOME! | 20:06 |
| stevemar | bknudson: fixed now :) | 20:07 |
| bknudson | stevemar: woo! | 20:07 |
| lbragstad | stevemar nice turn around | 20:07 |
| stevemar | lbragstad: i can turn with the best of em! | 20:07 |
| lbragstad | stevemar bknudson still caught you though. | 20:08 |
| dstanek | nice | 20:08 |
| bknudson | now what? | 20:08 |
| stevemar | lbragstad: he catches everyone, so that's not new | 20:08 |
| morgan | 9.0.0.0? | 20:08 |
| topol | bknudson Its miller time | 20:08 |
| bknudson | the banquet beer | 20:08 |
| lbragstad | topol's living the high life | 20:08 |
| stevemar | morgan: i hope so | 20:09 |
| morgan | lbragstad: stahp :P | 20:09 |
| topol | lbragstad your invited too! | 20:09 |
| lbragstad | we should all kick back and enjoy a Keystone Light | 20:09 |
| topol | lbragstad definitely! | 20:09 |
| stevemar | eww :P | 20:10 |
| topol | lbragstad bottled beer taste in a can! | 20:11 |
| *** ayoung has joined #openstack-keystone | 20:11 | |
| *** ChanServ sets mode: +v ayoung | 20:11 | |
| lbragstad | I'll even spring for the first round - since a case runs about $10 | 20:12 |
| topol | hope they still put expiration dates on the can | 20:12 |
| lbragstad | topol no need - it never expires | 20:12 |
| lbragstad | it's always just tasted *that* good | 20:12 |
| topol | Ha Ha | 20:12 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 20:16 |
| *** mylu has quit IRC | 20:19 | |
| *** mylu has joined #openstack-keystone | 20:20 | |
| stevemar | hehe | 20:23 |
| stevemar | lbragstad with a good one | 20:23 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 20:24 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 20:25 |
| *** spzala has quit IRC | 20:25 | |
| *** dan_nguyen has joined #openstack-keystone | 20:36 | |
| openstackgerrit | Doug Hellmann proposed openstack/keystone: Update reno for stable/mitaka https://review.openstack.org/293702 | 20:42 |
| openstackgerrit | Doug Hellmann proposed openstack/keystone: Update reno for stable/mitaka https://review.openstack.org/293702 | 20:43 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 20:45 |
| bknudson | stevemar: so do we get stable branches? | 20:45 |
| bknudson | i.e., master is open for N? | 20:45 |
| stevemar | bknudson: yep -- https://review.openstack.org/#/c/293701/ | 20:46 |
| patchbot | stevemar: patch 293701 - keystone (stable/mitaka) - Update .gitreview for stable/mitaka | 20:46 |
| stevemar | bknudson: once that dude merges, it's N time! | 20:46 |
| *** ianw has joined #openstack-keystone | 20:48 | |
| bknudson | then we need some specs for N | 20:50 |
| *** mylu has quit IRC | 20:53 | |
| stevemar | bknudson: true day | 20:55 |
| stevemar | dat | 20:55 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Define identity interface https://review.openstack.org/291950 | 20:55 |
| bknudson | I'm wondering if there's any point to working on ^ | 20:55 |
| bknudson | it's going to take a lot of work. | 20:56 |
| bknudson | I'll put it on the meeting agenda | 20:57 |
| *** e0ne has quit IRC | 20:58 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: Remove extension from already core features https://review.openstack.org/293646 | 20:59 |
| *** pumarani__ has quit IRC | 21:00 | |
| *** woodster_ has joined #openstack-keystone | 21:00 | |
| *** ninag has quit IRC | 21:00 | |
| *** pushkaru has joined #openstack-keystone | 21:04 | |
| *** timcline has quit IRC | 21:08 | |
| *** timcline has joined #openstack-keystone | 21:09 | |
| *** doug-fish has quit IRC | 21:11 | |
| *** doug-fish has joined #openstack-keystone | 21:12 | |
| *** lhcheng has quit IRC | 21:12 | |
| *** timcline has quit IRC | 21:13 | |
| *** shaleh has joined #openstack-keystone | 21:15 | |
| *** browne has joined #openstack-keystone | 21:16 | |
| shaleh | re: shadow users, where is the code that makes it so I am the same user whether I auth via an external IdP, LDAP, or local Keystone password? | 21:17 |
| *** kro_mnckn_doc has quit IRC | 21:19 | |
| *** anteaya has quit IRC | 21:19 | |
| *** samueldmq has quit IRC | 21:19 | |
| breton | nowhere yet i guess | 21:24 |
| *** timcline has joined #openstack-keystone | 21:24 | |
| *** rderose has joined #openstack-keystone | 21:24 | |
| breton | the are still things to do afaik | 21:24 |
| breton | shaleh: ^ | 21:24 |
| *** rderose has quit IRC | 21:24 | |
| shaleh | breton: yeah, that was my impression. But the spec said they were supposed to be united. So I wanted to be sure I was not missing something. | 21:25 |
| *** mhickey has joined #openstack-keystone | 21:29 | |
| *** timcline has quit IRC | 21:29 | |
| *** darrenc is now known as darren_afk | 21:31 | |
| *** lhcheng has joined #openstack-keystone | 21:33 | |
| *** ChanServ sets mode: +v lhcheng | 21:33 | |
| *** knikolla has quit IRC | 21:34 | |
| *** e0ne has joined #openstack-keystone | 21:37 | |
| *** timcline has joined #openstack-keystone | 21:39 | |
| *** trown is now known as trown|outtypewww | 21:39 | |
| *** e0ne has quit IRC | 21:40 | |
| *** arunkant has quit IRC | 21:44 | |
| *** darren_afk is now known as darrenc | 21:46 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:48 | |
| *** permalac has quit IRC | 21:50 | |
| *** timcline has quit IRC | 21:50 | |
| *** timcline has joined #openstack-keystone | 21:50 | |
| *** alex_xu has quit IRC | 21:56 | |
| *** alex_xu has joined #openstack-keystone | 21:58 | |
| *** alex_xu has quit IRC | 22:06 | |
| *** odyssey4me has quit IRC | 22:09 | |
| *** alex_xu has joined #openstack-keystone | 22:09 | |
| *** odyssey4me has joined #openstack-keystone | 22:09 | |
| *** roxanagh_ has quit IRC | 22:12 | |
| *** pushkaru has quit IRC | 22:12 | |
| *** pauloewerton has quit IRC | 22:14 | |
| jamielennox | mkoderer___: i reviewed, let me know if you're here and i will walk you through what i mean | 22:15 |
| *** roxanagh_ has joined #openstack-keystone | 22:15 | |
| *** mhickey has quit IRC | 22:16 | |
| *** dims_ has joined #openstack-keystone | 22:16 | |
| *** gordc has quit IRC | 22:18 | |
| *** dims has quit IRC | 22:18 | |
| *** slberger1 has left #openstack-keystone | 22:19 | |
| jamielennox | stevemar, bknudson: this could get noisy: https://review.openstack.org/#/c/292440/2 | 22:22 |
| patchbot | jamielennox: patch 292440 - keystoneauth - Allow seeing full token response when debug enabled (MERGED) | 22:22 |
| jamielennox | we've had destack/infra ask us to turn that off before | 22:22 |
| *** timcline has quit IRC | 22:25 | |
| bknudson | jamielennox: ok, so we've got people that want it and others that don't want it | 22:25 |
| *** timcline has joined #openstack-keystone | 22:25 | |
| *** timcline has quit IRC | 22:29 | |
| shaleh | can we not provide a --complete-debug? | 22:32 |
| *** chlong has joined #openstack-keystone | 22:32 | |
| *** pushkaru has joined #openstack-keystone | 22:35 | |
| *** edmondsw has quit IRC | 22:43 | |
| *** pumarani__ has joined #openstack-keystone | 22:45 | |
| *** doug-fis_ has joined #openstack-keystone | 22:47 | |
| jamielennox | shaleh: it's not something that's controlled via cli | 22:47 |
| jamielennox | because it's keystoneauth | 22:47 |
| *** pushkaru has quit IRC | 22:47 | |
| jamielennox | it's triggered via python logging levels and so what is displayed is configured by the caller | 22:48 |
| shaleh | jamielennox: ah, I saw the --debug sorry | 22:48 |
| *** doug-fish has quit IRC | 22:50 | |
| shaleh | jamielennox: yeah, you almost need a library level config option for how much data to log. | 22:50 |
| *** jbell8 has quit IRC | 22:51 | |
| shaleh | jamielennox: BTW, good point about the double decode. That should probably be fixed up. | 22:51 |
| *** doug-fis_ has quit IRC | 22:51 | |
| jamielennox | shaleh: in theory python logging is good for that, in practice everyone just logs to debug | 22:52 |
| shaleh | jamielennox: yeah, but in this case you have two groups that think "debug" should output different things. This is clearly not "info". | 22:53 |
| openstackgerrit | Merged openstack/keystone: Update reno for stable/mitaka https://review.openstack.org/293702 | 22:53 |
| *** timcline has joined #openstack-keystone | 22:56 | |
| *** jbell8 has joined #openstack-keystone | 22:57 | |
| *** pushkaru has joined #openstack-keystone | 22:59 | |
| *** timcline has quit IRC | 23:00 | |
| *** jbell8 has quit IRC | 23:02 | |
| *** pumarani__ has quit IRC | 23:02 | |
| *** pushkaru has quit IRC | 23:04 | |
| *** pushkaru has joined #openstack-keystone | 23:04 | |
| *** richm has quit IRC | 23:07 | |
| *** krotscheck has joined #openstack-keystone | 23:11 | |
| *** shaleh has quit IRC | 23:18 | |
| *** fawadkhaliq has joined #openstack-keystone | 23:19 | |
| *** samueldmq has joined #openstack-keystone | 23:20 | |
| *** anteaya has joined #openstack-keystone | 23:21 | |
| *** pushkaru has quit IRC | 23:40 | |
| *** chlong has quit IRC | 23:41 | |
| *** doug-fish has joined #openstack-keystone | 23:43 | |
| *** pece has quit IRC | 23:44 | |
| *** mylu has joined #openstack-keystone | 23:44 | |
| *** mylu has quit IRC | 23:53 | |
| *** gyee has quit IRC | 23:53 | |
| *** timcline has joined #openstack-keystone | 23:57 | |
| *** roxanagh_ has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!