| *** stingaci has joined #openstack-keystone | 00:01 | |
| *** david-lyle has quit IRC | 00:02 | |
| *** david-lyle has joined #openstack-keystone | 00:03 | |
| *** mylu has quit IRC | 00:04 | |
| *** ayoung has joined #openstack-keystone | 00:08 | |
| *** ChanServ sets mode: +v ayoung | 00:08 | |
| *** mylu has joined #openstack-keystone | 00:09 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/300626 | 00:10 |
|---|---|---|
| *** shaleh has quit IRC | 00:13 | |
| *** mylu has quit IRC | 00:14 | |
| *** dflorea has quit IRC | 00:15 | |
| *** mylu has joined #openstack-keystone | 00:25 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/300626 | 00:27 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements https://review.openstack.org/303130 | 00:27 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/303131 | 00:27 |
| *** spandhe has quit IRC | 00:28 | |
| *** dflorea has joined #openstack-keystone | 00:29 | |
| *** furface has quit IRC | 00:30 | |
| *** furface has joined #openstack-keystone | 00:30 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf: Updated from global requirements https://review.openstack.org/303150 | 00:32 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/303156 | 00:32 |
| *** mylu has quit IRC | 00:46 | |
| *** dflorea has quit IRC | 00:49 | |
| *** diazjf1 has joined #openstack-keystone | 00:51 | |
| *** diazjf1 has quit IRC | 00:51 | |
| *** mylu has joined #openstack-keystone | 00:51 | |
| *** fpatwa has joined #openstack-keystone | 00:52 | |
| *** diazjf has quit IRC | 00:54 | |
| fpatwa | I am trying to check if we can restrict the catalog sent in a token for non-admin users to NOT contain the admin and/or internal endpoints | 00:54 |
| fpatwa | Anyone know if that is possible to do ? | 00:54 |
| *** spandhe has joined #openstack-keystone | 01:01 | |
| *** fpatwa has quit IRC | 01:01 | |
| *** sdake has joined #openstack-keystone | 01:02 | |
| *** fpatwa has joined #openstack-keystone | 01:02 | |
| *** stingaci has quit IRC | 01:05 | |
| *** fpatwa has quit IRC | 01:07 | |
| *** spandhe has quit IRC | 01:08 | |
| *** browne has quit IRC | 01:09 | |
| *** fpatwa has joined #openstack-keystone | 01:09 | |
| *** ksnihyr has joined #openstack-keystone | 01:14 | |
| *** sdake has quit IRC | 01:14 | |
| *** ksnihyr has quit IRC | 01:18 | |
| *** sdake has joined #openstack-keystone | 01:19 | |
| jamielennox | morgan: our very own TC - they grow up so fast! | 01:19 |
| jamielennox | morgan: contrats mate | 01:19 |
| jamielennox | congrats | 01:19 |
| *** EinstCrazy has joined #openstack-keystone | 01:21 | |
| *** sdake_ has joined #openstack-keystone | 01:22 | |
| *** mylu has quit IRC | 01:23 | |
| *** sdake has quit IRC | 01:25 | |
| *** fpatwa has quit IRC | 01:26 | |
| *** fpatwa has joined #openstack-keystone | 01:27 | |
| *** fpatwa has quit IRC | 01:31 | |
| morgan | ^_^ | 01:36 |
| *** mylu has joined #openstack-keystone | 01:37 | |
| *** edmondsw has quit IRC | 01:38 | |
| *** dave-mccowan has quit IRC | 01:45 | |
| *** browne has joined #openstack-keystone | 01:59 | |
| *** mylu has quit IRC | 02:04 | |
| *** mylu has joined #openstack-keystone | 02:10 | |
| *** stingaci has joined #openstack-keystone | 02:15 | |
| *** ksnihyr has joined #openstack-keystone | 02:15 | |
| *** cburgess has quit IRC | 02:16 | |
| *** cburgess has joined #openstack-keystone | 02:19 | |
| cloudnull | congrats morgan | 02:19 |
| *** openstackstatus has quit IRC | 02:19 | |
| *** aginwala has quit IRC | 02:19 | |
| *** ksnihyr has quit IRC | 02:19 | |
| *** woodster_ has quit IRC | 02:27 | |
| *** aginwala has joined #openstack-keystone | 02:29 | |
| *** richm has quit IRC | 02:33 | |
| *** richm1 has joined #openstack-keystone | 02:33 | |
| *** sdake_ is now known as sdake | 02:33 | |
| *** richm1 has quit IRC | 02:38 | |
| *** aginwala has quit IRC | 02:39 | |
| *** aginwala has joined #openstack-keystone | 02:52 | |
| *** EinstCrazy has quit IRC | 02:53 | |
| *** EinstCrazy has joined #openstack-keystone | 02:55 | |
| *** EinstCrazy has quit IRC | 02:57 | |
| *** aginwala has quit IRC | 02:59 | |
| *** EinstCrazy has joined #openstack-keystone | 02:59 | |
| *** agrebennikov has quit IRC | 03:15 | |
| *** ksnihyr has joined #openstack-keystone | 03:15 | |
| *** knikolla has joined #openstack-keystone | 03:15 | |
| *** mylu has quit IRC | 03:20 | |
| *** ksnihyr has quit IRC | 03:20 | |
| *** fpatwa has joined #openstack-keystone | 03:24 | |
| *** fpatwa has quit IRC | 03:28 | |
| *** mylu has joined #openstack-keystone | 03:40 | |
| *** anush_ has joined #openstack-keystone | 03:41 | |
| *** fpatwa has joined #openstack-keystone | 03:45 | |
| *** jasonsb has joined #openstack-keystone | 03:47 | |
| *** jasonsb has quit IRC | 03:49 | |
| *** knikolla has quit IRC | 03:50 | |
| *** jasonsb has joined #openstack-keystone | 03:51 | |
| *** browne has quit IRC | 03:53 | |
| *** links has joined #openstack-keystone | 03:53 | |
| *** knikolla has joined #openstack-keystone | 03:54 | |
| *** knikolla has quit IRC | 03:56 | |
| stevemar | morgan: congrats -- third, yay | 04:04 |
| morgan | hehe | 04:05 |
| morgan | stevemar: thnx | 04:05 |
| morgan | stevemar: also... do you ever sleep? | 04:06 |
| stevemar | morgan: it's .. oh it's midnight | 04:06 |
| morgan | stevemar: i know... cause my flight left the ground at 2300 EASTERN | 04:06 |
| stevemar | morgan: late flight | 04:07 |
| morgan | massive delays | 04:07 |
| morgan | i walked into the airport 3 minutes before boarding the plane | 04:07 |
| morgan | TSA PRE *AND* zero people in the line | 04:08 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add identity providers integration tests https://review.openstack.org/302299 | 04:10 |
| *** ksnihyr has joined #openstack-keystone | 04:16 | |
| *** sdake_ has joined #openstack-keystone | 04:19 | |
| morgan | stevemar: also -- lookin forward to the summit more and more. | 04:19 |
| *** sdake has quit IRC | 04:19 | |
| jamielennox | stevemar, morgan: it's a bit of a mind bending review, but when you get a chance: https://review.openstack.org/#/c/255686/ | 04:20 |
| patchbot | jamielennox: patch 255686 - keystone - Make AuthContext depend on auth_token middleware | 04:20 |
| *** ksnihyr has quit IRC | 04:21 | |
| stevemar | morgan: i'm totally stoked for the summit | 04:22 |
| navidp | stevemar, can you become coauthor on this patch ? | 04:22 |
| navidp | stevemar, https://review.openstack.org/#/c/276350/ | 04:22 |
| patchbot | navidp: patch 276350 - python-openstackclient - Moving authentication from keystoneclient to keyst... | 04:22 |
| stevemar | navidp: i haven't contributed enough to warrant co-authorship IMO | 04:23 |
| stevemar | i just changed one line | 04:23 |
| navidp | stevemar, ok | 04:25 |
| stevemar | navidp: i also rebased, but meh | 04:25 |
| navidp | stevemar, about osc generic password, what is the path change it or make it work the old way then change it in the future | 04:26 |
| navidp | stevemar, my concern was first make it work then fix issues like over wirting a plugin as jamie mentioned | 04:27 |
| stevemar | navidp: we could go either way on that one i guess, we could put up a follow-on patch that fixes it | 04:31 |
| morgan | jamielennox: oh. neat | 04:32 |
| morgan | jamielennox: unfortunately, i don't think i can review much on a plane.. hard to git clone the repo | 04:32 |
| morgan | (the gerrit stuff is the easy part) | 04:32 |
| morgan | i need to re-setup gertty | 04:32 |
| *** dflorea has joined #openstack-keystone | 04:32 | |
| jamielennox | morgan: no worries, it's just been there for a while untouched and i want to give it a shove now we're open again | 04:33 |
| morgan | yeah we should move that one through | 04:33 |
| *** mylu has quit IRC | 04:33 | |
| morgan | jamielennox: i think wwe have a few things to really move through soon | 04:34 |
| navidp | stevemar, ok then | 04:34 |
| *** mylu has joined #openstack-keystone | 04:37 | |
| morgan | stevemar: dude, co-author all the patches! (/sarcasm) | 04:38 |
| morgan | stevemar: New Rule: All patches must list "Steve Martinelli" as co-author :P | 04:38 |
| stevemar | morgan: i have too many commits as it is | 04:38 |
| *** aginwala has joined #openstack-keystone | 04:39 | |
| morgan | dude we should figure out what is going on here: https://review.openstack.org/#/c/300626/ | 04:50 |
| patchbot | morgan: patch 300626 - keystone - Updated from global requirements | 04:50 |
| *** dflorea has quit IRC | 04:51 | |
| *** dflorea has joined #openstack-keystone | 04:53 | |
| *** rcernin has joined #openstack-keystone | 04:55 | |
| *** fpatwa has quit IRC | 04:55 | |
| *** fpatwa has joined #openstack-keystone | 04:56 | |
| *** alex_xu has quit IRC | 04:56 | |
| *** dflorea has quit IRC | 04:59 | |
| jamielennox | morgan: that's weird, it didn't pick up the oslo.db[fixtures] extras | 04:59 |
| *** fpatwa has quit IRC | 05:01 | |
| jamielennox | oh - well that: https://review.openstack.org/#/c/300626/11/test-requirements.txt | 05:01 |
| patchbot | jamielennox: patch 300626 - keystone - Updated from global requirements | 05:01 |
| *** alex_xu has joined #openstack-keystone | 05:01 | |
| *** dflorea has joined #openstack-keystone | 05:03 | |
| *** sdake has joined #openstack-keystone | 05:03 | |
| *** GB21 has joined #openstack-keystone | 05:04 | |
| morgan | lol | 05:05 |
| *** mylu has quit IRC | 05:06 | |
| *** sdake_ has quit IRC | 05:06 | |
| *** links has quit IRC | 05:07 | |
| stevemar | jamielennox: yeah, i think the proposal bot needs an update to handle optional dependencies | 05:08 |
| *** mylu has joined #openstack-keystone | 05:10 | |
| *** anush_ has quit IRC | 05:11 | |
| *** sdake_ has joined #openstack-keystone | 05:13 | |
| *** sdake has quit IRC | 05:17 | |
| *** ksnihyr has joined #openstack-keystone | 05:17 | |
| *** ksnihyr has quit IRC | 05:22 | |
| *** prometheanfire has joined #openstack-keystone | 05:23 | |
| prometheanfire | keystoneclient 2.3.1 doesn't support v3? | 05:23 |
| prometheanfire | guess all functionality is in openstackclient then? | 05:24 |
| *** links has joined #openstack-keystone | 05:24 | |
| stevemar | prometheanfire: oh yeah - the CLI bundled in keystoneclient has been deprecated for a year and a half now | 05:24 |
| stevemar | and it totally going to be removed in 3.0.0 | 05:24 |
| stevemar | prometheanfire: keystoneclient still has all the python bindings | 05:25 |
| * prometheanfire shugs | 05:25 | |
| prometheanfire | guess I'll finally fully switch then | 05:25 |
| prometheanfire | was half and half before | 05:25 |
| prometheanfire | thanks, parting | 05:26 |
| *** prometheanfire has left #openstack-keystone | 05:26 | |
| *** stingaci has quit IRC | 05:29 | |
| *** furface has quit IRC | 05:29 | |
| *** markvoelker has quit IRC | 05:30 | |
| *** mylu has quit IRC | 05:32 | |
| *** stingaci has joined #openstack-keystone | 05:34 | |
| stevemar | that was the most nonchalant response to "we're removing keystone CLI" i've ever received | 05:35 |
| stevemar | why can't they all be like that | 05:35 |
| *** mkrcmari__ has joined #openstack-keystone | 05:37 | |
| *** mvk_ has quit IRC | 05:41 | |
| *** aginwala has quit IRC | 05:53 | |
| *** sdake has joined #openstack-keystone | 05:55 | |
| *** dflorea has quit IRC | 05:56 | |
| *** sdake_ has quit IRC | 05:57 | |
| *** links has quit IRC | 06:03 | |
| *** sdake_ has joined #openstack-keystone | 06:09 | |
| *** sdake has quit IRC | 06:11 | |
| *** ksnihyr has joined #openstack-keystone | 06:18 | |
| *** links has joined #openstack-keystone | 06:19 | |
| *** henrynash has quit IRC | 06:21 | |
| *** ksnihyr has quit IRC | 06:24 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Zanata https://review.openstack.org/303240 | 06:30 |
| *** markvoelker has joined #openstack-keystone | 06:30 | |
| *** markvoelker has quit IRC | 06:36 | |
| *** furface has joined #openstack-keystone | 06:38 | |
| jamielennox | it's friday, i'll take on one small-ish requirements problem, turns out to be a real PITA... | 06:45 |
| *** furface has quit IRC | 06:49 | |
| *** furface has joined #openstack-keystone | 06:52 | |
| *** fpatwa has joined #openstack-keystone | 06:56 | |
| *** e0ne has joined #openstack-keystone | 07:01 | |
| *** fpatwa has quit IRC | 07:01 | |
| *** jaosorior has joined #openstack-keystone | 07:04 | |
| *** jed56 has joined #openstack-keystone | 07:06 | |
| *** ksnihyr has joined #openstack-keystone | 07:12 | |
| *** stingaci has quit IRC | 07:19 | |
| *** stingaci has joined #openstack-keystone | 07:24 | |
| *** alex_xu_ has joined #openstack-keystone | 07:32 | |
| *** alex_xu has quit IRC | 07:34 | |
| *** GB21 has quit IRC | 07:35 | |
| *** real56 has joined #openstack-keystone | 07:41 | |
| *** pnavarro_ has joined #openstack-keystone | 07:42 | |
| jamielennox | stevemar, morgan: filed fix against requirements: https://review.openstack.org/303271 | 07:43 |
| *** jaosorior has quit IRC | 07:47 | |
| *** jaosorior has joined #openstack-keystone | 07:47 | |
| *** stingaci has quit IRC | 07:48 | |
| *** pcaruana has joined #openstack-keystone | 07:49 | |
| *** stingaci has joined #openstack-keystone | 07:49 | |
| *** jamielennox is now known as jamielennox|away | 07:53 | |
| *** fhubik has joined #openstack-keystone | 07:53 | |
| *** stingaci has quit IRC | 07:54 | |
| *** henrynash has joined #openstack-keystone | 07:54 | |
| *** ChanServ sets mode: +v henrynash | 07:54 | |
| *** GB21 has joined #openstack-keystone | 08:02 | |
| *** GB21 has quit IRC | 08:24 | |
| *** jistr has joined #openstack-keystone | 08:28 | |
| *** markvoelker has joined #openstack-keystone | 08:31 | |
| *** e0ne has quit IRC | 08:32 | |
| *** openstackgerrit has quit IRC | 08:33 | |
| *** openstackgerrit has joined #openstack-keystone | 08:33 | |
| *** markvoelker has quit IRC | 08:36 | |
| *** e0ne has joined #openstack-keystone | 08:40 | |
| openstackgerrit | Merged openstack/keystone: Imported Translations from Zanata https://review.openstack.org/303240 | 08:57 |
| *** fpatwa has joined #openstack-keystone | 08:57 | |
| *** fpatwa has quit IRC | 09:02 | |
| *** harlowja has quit IRC | 09:06 | |
| *** mhickey has joined #openstack-keystone | 09:14 | |
| *** sdake_ has quit IRC | 09:17 | |
| *** real56 has quit IRC | 09:17 | |
| *** stingaci has joined #openstack-keystone | 09:19 | |
| *** stingaci has quit IRC | 09:24 | |
| *** e0ne has quit IRC | 09:25 | |
| *** mhickey has quit IRC | 09:34 | |
| *** GB21 has joined #openstack-keystone | 09:35 | |
| *** subscope has joined #openstack-keystone | 09:38 | |
| *** subscope has quit IRC | 09:44 | |
| *** subscope has joined #openstack-keystone | 09:45 | |
| *** GB21 has quit IRC | 09:47 | |
| *** GB21 has joined #openstack-keystone | 09:47 | |
| *** mhickey has joined #openstack-keystone | 09:52 | |
| *** subscope has quit IRC | 10:10 | |
| *** subscope has joined #openstack-keystone | 10:15 | |
| *** e0ne has joined #openstack-keystone | 10:20 | |
| *** subscope has quit IRC | 10:20 | |
| *** fhubik has quit IRC | 10:21 | |
| *** rk4n has joined #openstack-keystone | 10:24 | |
| *** rk4n has quit IRC | 10:25 | |
| *** EinstCrazy has quit IRC | 10:30 | |
| *** stingaci has joined #openstack-keystone | 10:32 | |
| *** markvoelker has joined #openstack-keystone | 10:32 | |
| *** stingaci has quit IRC | 10:36 | |
| *** fpatwa has joined #openstack-keystone | 10:38 | |
| *** markvoelker has quit IRC | 10:39 | |
| *** rk4n has joined #openstack-keystone | 10:39 | |
| *** rk4n has quit IRC | 10:41 | |
| *** aswadr_ has joined #openstack-keystone | 10:47 | |
| *** GB21 has quit IRC | 10:58 | |
| *** GB21 has joined #openstack-keystone | 10:58 | |
| *** fpatwa has quit IRC | 10:59 | |
| *** fpatwa has joined #openstack-keystone | 11:00 | |
| *** fpatwa has quit IRC | 11:05 | |
| *** GB21 has quit IRC | 11:05 | |
| *** GB21 has joined #openstack-keystone | 11:06 | |
| *** pece has joined #openstack-keystone | 11:07 | |
| *** fpatwa has joined #openstack-keystone | 11:07 | |
| pece | WSGIScriptAlias / /usr/bin/keystone-wsgi-public is it possible to pass different keystone.conf file here? Or maybe different root /etc/keystone directory? | 11:08 |
| *** rk4n has joined #openstack-keystone | 11:09 | |
| *** fpatwa has quit IRC | 11:14 | |
| *** fpatwa has joined #openstack-keystone | 11:15 | |
| *** rk4n has quit IRC | 11:16 | |
| *** fpatwa has quit IRC | 11:19 | |
| *** henrynash has quit IRC | 11:23 | |
| *** GB21 has quit IRC | 11:37 | |
| *** GB21 has joined #openstack-keystone | 11:38 | |
| *** subscope has joined #openstack-keystone | 11:38 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/300626 | 11:43 |
| *** GB21 has quit IRC | 11:43 | |
| *** GB21 has joined #openstack-keystone | 11:44 | |
| *** subscope has quit IRC | 11:50 | |
| *** ayoung has quit IRC | 11:54 | |
| *** e0ne has quit IRC | 11:59 | |
| *** GB21 has quit IRC | 12:02 | |
| *** GB21 has joined #openstack-keystone | 12:02 | |
| *** fpatwa has joined #openstack-keystone | 12:03 | |
| *** subscope has joined #openstack-keystone | 12:03 | |
| *** fpatwa has quit IRC | 12:07 | |
| *** markvoelker has joined #openstack-keystone | 12:21 | |
| *** raildo-afk is now known as raildo | 12:26 | |
| *** GB21 has quit IRC | 12:27 | |
| *** trown|outtypewww is now known as trown | 12:29 | |
| *** gordc has joined #openstack-keystone | 12:31 | |
| odyssey4me | is anyone else getting a failure to resolve review.openstack.org ? | 12:31 |
| odyssey4me | oops, wrong channel | 12:31 |
| *** henrynash has joined #openstack-keystone | 12:32 | |
| *** ChanServ sets mode: +v henrynash | 12:32 | |
| *** edmondsw has joined #openstack-keystone | 12:33 | |
| *** stingaci has joined #openstack-keystone | 12:33 | |
| *** pauloewerton has joined #openstack-keystone | 12:34 | |
| *** stingaci has quit IRC | 12:38 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Add API Change Tutorial https://review.openstack.org/302789 | 12:41 |
| samueldmq | morning keystoners | 12:44 |
| samueldmq | dstanek: you around ? | 12:44 |
| samueldmq | dstanek: re: https://review.openstack.org/#/c/212957/9/keystone/tests/unit/policy/backends/test_base.py | 12:45 |
| patchbot | samueldmq: patch 212957 - keystone - Create unit tests for the policy drivers | 12:45 |
| dstanek | samueldmq: here | 12:45 |
| samueldmq | dstanek: are you okay with changing that abstractmethod _get_driver() to a @property thing ? | 12:45 |
| dstanek | samueldmq: looking... | 12:47 |
| dstanek | samueldmq: sure, but we probably don't need that to be a private property | 12:49 |
| dstanek | samueldmq: make it an abstract property | 12:49 |
| samueldmq | dstanek: @abstractproperty ? | 12:51 |
| samueldmq | @abc.abstractproperty | 12:52 |
| samueldmq | dstanek: thanks | 12:52 |
| dstanek | samueldmq: yessir | 12:56 |
| samueldmq | dstanek: and how do I override in the subclasses ? | 12:57 |
| dstanek | samueldmq: you just create a property | 12:57 |
| samueldmq | dstanek: hmm, I thoght that I simply use @property it would be a property to the instance, not to the class | 12:57 |
| *** e0ne has joined #openstack-keystone | 12:58 | |
| dstanek | @property acts on the class, but has an effect on the instance - it creates a descriptor on the class | 12:59 |
| *** EinstCrazy has joined #openstack-keystone | 12:59 | |
| dstanek | just like any function than is defined as a method | 12:59 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for the policy drivers https://review.openstack.org/212957 | 13:00 |
| samueldmq | dstanek: ^ | 13:00 |
| samueldmq | dstanek: hmm, interesting, it makes sense, because it is a regular class function anyways | 13:00 |
| samueldmq | dstanek: that always get executed when called (even without () ) and returns the value, that's why it can be called like an attribute | 13:02 |
| samueldmq | (that's my assumption on how it works ) :) | 13:02 |
| dstanek | samueldmq: look at the example here that doesn't use the decorator syntax: https://docs.python.org/2/library/functions.html#property | 13:03 |
| dstanek | samueldmq: you can see that self is passed into the get/set/del methods just like a method | 13:03 |
| *** real56 has joined #openstack-keystone | 13:05 | |
| raildo | stevemar: ping, the cross project session about v3 migration :) https://www.openstack.org/summit/austin-2016/summit-schedule/events/9481 | 13:05 |
| *** shoutm has joined #openstack-keystone | 13:15 | |
| *** EinstCrazy has quit IRC | 13:17 | |
| *** henrynash has quit IRC | 13:22 | |
| *** EinstCrazy has joined #openstack-keystone | 13:22 | |
| *** rodrigods has quit IRC | 13:22 | |
| *** rodrigods has joined #openstack-keystone | 13:22 | |
| *** anush_ has joined #openstack-keystone | 13:24 | |
| *** richm has joined #openstack-keystone | 13:26 | |
| *** rderose has joined #openstack-keystone | 13:27 | |
| *** jsavak has joined #openstack-keystone | 13:29 | |
| *** subscope has quit IRC | 13:30 | |
| *** EinstCrazy has quit IRC | 13:31 | |
| *** stingaci has joined #openstack-keystone | 13:34 | |
| *** stingaci has quit IRC | 13:38 | |
| lbragstad | o/ | 13:40 |
| *** dims is now known as dimsum__ | 13:41 | |
| samueldmq | lbragstad: o/ | 13:41 |
| *** dansmith is now known as superdan | 13:42 | |
| *** mylu has joined #openstack-keystone | 13:43 | |
| dolphm | \o | 13:45 |
| dolphm | PSA: morgan was elected to the TC! | 13:46 |
| dolphm | morgan: congratulations! | 13:46 |
| morgan | :) | 13:49 |
| *** EinstCrazy has joined #openstack-keystone | 13:50 | |
| dstanek | morgan: congrats | 13:51 |
| *** links has quit IRC | 13:51 | |
| morgan | whee | 13:52 |
| stevemar | raildo: nice | 13:55 |
| *** real56 has quit IRC | 13:55 | |
| *** EinstCrazy has quit IRC | 13:55 | |
| samueldmq | morgan: congrats | 13:56 |
| *** subscope has joined #openstack-keystone | 13:56 | |
| *** ayoung has joined #openstack-keystone | 13:57 | |
| *** ChanServ sets mode: +v ayoung | 13:57 | |
| raildo | morgan: congrats sir :) | 13:58 |
| *** knikolla has joined #openstack-keystone | 14:03 | |
| *** darren_wang has joined #openstack-keystone | 14:04 | |
| *** ayoung has quit IRC | 14:04 | |
| *** mylu has quit IRC | 14:05 | |
| darren_wang | Hi, dear keystone team, is there any possibility that during deleting contents of a domain, the machine suddenly powers off and the contents could not be clean deleted? | 14:06 |
| lbragstad | morgan congrats! | 14:11 |
| *** mylu has joined #openstack-keystone | 14:11 | |
| morgan | darren_wang: i could see some issues with that. | 14:12 |
| morgan | darren_wang: but not sure where that impact ends up being without digging a bit more. likely it could just be issued (the delete) again | 14:12 |
| morgan | since we are fairly good at being stateless in our queries, and we wrap everything in transactions so worst case is data is left over - but a fully failed/db break is unlikely un;ess you also crash the db server AND the system hand;es that/corrupts the filesystem | 14:14 |
| *** dave-mccowan has joined #openstack-keystone | 14:16 | |
| *** jaosorior has quit IRC | 14:20 | |
| darren_wang | morgan: Thanks. I'm not sure about the possible impacts either. It just came to me after I saw the codes that contents are deleted after receiving notifications, and I think alike when that extreme situation does happen, some garbage data may be left. | 14:20 |
| morgan | darren_wang: in general, keystone is very hard to break like that | 14:21 |
| morgan | most cases just reissuing the delete should be sufficient | 14:21 |
| darren_wang | I see | 14:21 |
| morgan | but that is also hard to test ;) | 14:22 |
| darren_wang | something abnormal | 14:22 |
| morgan | to be fair, i've never heard of a case since i started working on keystone where that was the root of a serious problem | 14:22 |
| morgan | no one has reported that type of issue in the wild/production that ive seen | 14:23 |
| darren_wang | hah, then it's just a theoretic assumption | 14:24 |
| morgan | conceptually, it is possible data is left in the db, but it is highly unlikely to break keystone operations | 14:24 |
| morgan | because of the way we deelete. either we handle the associated data directly before removing the domain record, or we rely on the db for FKs | 14:25 |
| morgan | i expect if it did happen, someone just did "delete domain" again and it worked. | 14:25 |
| morgan | :) | 14:25 |
| *** anush_ has quit IRC | 14:26 | |
| morgan | darren_wang: def. feel free to look more closely and if you see something weird let us know/help us fix it (write code), etc. happy to make keystone better | 14:26 |
| darren_wang | OK, thank you morgan. | 14:26 |
| morgan | and also welcome to our little corner of IRC :) | 14:27 |
| *** mylu has quit IRC | 14:27 | |
| *** spzala has joined #openstack-keystone | 14:27 | |
| darren_wang | no problem~ :) | 14:29 |
| *** nisha has joined #openstack-keystone | 14:31 | |
| *** darren_wang has quit IRC | 14:32 | |
| *** spzala has quit IRC | 14:33 | |
| *** EinstCrazy has joined #openstack-keystone | 14:34 | |
| *** subscope has quit IRC | 14:34 | |
| *** daemontool has quit IRC | 14:35 | |
| *** EinstCrazy has quit IRC | 14:37 | |
| *** trown is now known as trown|relocating | 14:37 | |
| *** nisha has quit IRC | 14:41 | |
| *** sdake has joined #openstack-keystone | 14:45 | |
| *** slberger has joined #openstack-keystone | 14:47 | |
| *** sdake_ has joined #openstack-keystone | 14:49 | |
| openstackgerrit | Thomas Bechtold proposed openstack/keystoneauth: Fix doc build if git is absent https://review.openstack.org/303466 | 14:50 |
| *** sdake has quit IRC | 14:51 | |
| *** agrebennikov has joined #openstack-keystone | 14:52 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: Add note about service provider fields https://review.openstack.org/303471 | 14:53 |
| *** EinstCrazy has joined #openstack-keystone | 14:53 | |
| *** david_cu has joined #openstack-keystone | 14:54 | |
| *** david_cu has quit IRC | 14:54 | |
| *** agrebennikov has quit IRC | 14:59 | |
| *** spzala has joined #openstack-keystone | 14:59 | |
| *** nisha has joined #openstack-keystone | 15:01 | |
| samueldmq | dstanek: need your python expertise in https://review.openstack.org/#/c/212006/18/keystone/tests/unit/endpoint_policy/backends/test_sql.py | 15:01 |
| patchbot | samueldmq: patch 212006 - keystone - Create unit tests for endpoint policy drivers | 15:01 |
| samueldmq | dstanek: why does the commented code does not work ? | 15:01 |
| *** mylu has joined #openstack-keystone | 15:02 | |
| dstanek | samueldmq: looking... | 15:02 |
| samueldmq | dstanek: I think it's related to how python calls setUp when we hve multiple inheritance | 15:02 |
| *** EinstCrazy has quit IRC | 15:02 | |
| dstanek | samueldmq: what is the error that you are getting? | 15:03 |
| samueldmq | role table doesn't exist | 15:03 |
| samueldmq | let me paste it | 15:03 |
| morgan | samueldmq: it is multi-inheritence ick i'm sure :( | 15:04 |
| dstanek | samueldmq: probably the order of the parents | 15:04 |
| samueldmq | dstanek: http://paste.openstack.org/show/493485/ | 15:04 |
| *** subscope has joined #openstack-keystone | 15:04 | |
| samueldmq | morgan: I think so too :( | 15:04 |
| samueldmq | dstanek: yes, and if I change the order of parents, the other setUp is not called | 15:05 |
| dstanek | samueldmq: let me pull it down and take a look | 15:05 |
| samueldmq | but if I do the proxy class, both setUp get called | 15:06 |
| samueldmq | it's very weird | 15:06 |
| morgan | there is a reason the inverted order doesn't work | 15:06 |
| morgan | it's MRO in python | 15:06 |
| morgan | samueldmq: basically, you end up calling super in the baseTest class, which goes to it's parent, now it doesn't chace back up to the other inherited class | 15:07 |
| morgan | with the object ahead of the base class, the super from the mix-in calls the base class setup with super. If the mixin had a parent with setup, it would skip the basetest class setup | 15:08 |
| morgan | python MRO is a bit wonky with multiple inheritence | 15:08 |
| morgan | i mean... it acts the same every time, but it's not intuative. but neither is multiple inheritence | 15:09 |
| dstanek | samueldmq: this is why i was removing a lot of the inheritence from our tests :-( | 15:10 |
| morgan | dstanek: ++ | 15:10 |
| samueldmq | :( | 15:14 |
| *** real56 has joined #openstack-keystone | 15:15 | |
| samueldmq | dstanek: morgan: it's still a bit confusing to me :( | 15:15 |
| *** ayoung has joined #openstack-keystone | 15:16 | |
| *** ChanServ sets mode: +v ayoung | 15:16 | |
| *** agrebennikov has joined #openstack-keystone | 15:16 | |
| samueldmq | morgan: actually looks like none of the orders work | 15:20 |
| samueldmq | morgan: when I don't define the "proxy" class (BaseSqlDriverTestCase= | 15:20 |
| morgan | samueldmq: the proxy class might also have super inheritence issues | 15:20 |
| morgan | again MRO is odd. i'd need to dig a bit further | 15:20 |
| samueldmq | morgan: it does work with the proxy class | 15:20 |
| morgan | have a few things to look at later today | 15:20 |
| samueldmq | the uncommented code works, the commented one doesn't :( | 15:21 |
| samueldmq | https://review.openstack.org/#/c/212006/18/keystone/tests/unit/endpoint_policy/backends/test_sql.py | 15:21 |
| patchbot | samueldmq: patch 212006 - keystone - Create unit tests for endpoint policy drivers | 15:21 |
| samueldmq | morgan: sure | 15:21 |
| samueldmq | morgan: I 100% agree with you, something very odd hapenning there, and it's very likely to be MRO | 15:21 |
| samueldmq | just wanted to understand | 15:21 |
| *** nisha__ has joined #openstack-keystone | 15:21 | |
| dstanek | samueldmq: it appears to be an order of operations thing to me. because of the mro the broken one tries to do db work before the db setup work is completed | 15:22 |
| morgan | dstanek: yah | 15:22 |
| dstanek | samueldmq: usually this requires rearranging the setUps | 15:22 |
| samueldmq | dstanek: but the db is only used in tests | 15:23 |
| samueldmq | which is always after all setUp calls | 15:23 |
| samueldmq | at least should be | 15:23 |
| dstanek | samueldmq: you don't setup the db until after the rest of the setup | 15:23 |
| dstanek | samueldmq: but your test_base tries to to api calls | 15:24 |
| dstanek | so if you don't have a DB until after that how would it work? | 15:24 |
| dstanek | brb | 15:24 |
| samueldmq | dstanek: ah | 15:24 |
| samueldmq | dstanek: yes, you're correct man | 15:24 |
| samueldmq | morgan: this guy found it ^ | 15:24 |
| *** lhcheng has quit IRC | 15:25 | |
| *** aginwala has joined #openstack-keystone | 15:25 | |
| *** nisha has quit IRC | 15:25 | |
| *** aginwala has quit IRC | 15:29 | |
| *** aginwala has joined #openstack-keystone | 15:30 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add service providers integration tests https://review.openstack.org/303502 | 15:31 |
| *** trown|relocating is now known as trown | 15:31 | |
| *** spzala has quit IRC | 15:32 | |
| *** mylu has quit IRC | 15:33 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for endpoint policy drivers https://review.openstack.org/212006 | 15:33 |
| samueldmq | morgan: dstanek: working fine now, thanks for your help | 15:34 |
| *** mylu has joined #openstack-keystone | 15:34 | |
| *** nisha__ is now known as nisha | 15:34 | |
| samueldmq | bknudson: ^ all comments addressed sir, thanks for reviewing, it's much better now | 15:34 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: Add note about service provider fields https://review.openstack.org/303471 | 15:34 |
| *** stingaci has joined #openstack-keystone | 15:35 | |
| *** mylu has quit IRC | 15:38 | |
| *** mylu has joined #openstack-keystone | 15:38 | |
| *** shoutm has quit IRC | 15:38 | |
| *** stingaci has quit IRC | 15:39 | |
| nisha | hey all :) | 15:39 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for the policy drivers https://review.openstack.org/212957 | 15:40 |
| dstanek | samueldmq: my pleasure | 15:41 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for endpoint policy drivers https://review.openstack.org/212006 | 15:41 |
| *** mhickey has quit IRC | 15:42 | |
| *** flaper87 has quit IRC | 15:42 | |
| samueldmq | nisha: hi | 15:42 |
| *** sdake has joined #openstack-keystone | 15:43 | |
| *** sdake_ has quit IRC | 15:44 | |
| *** flaper87 has joined #openstack-keystone | 15:44 | |
| *** nisha has quit IRC | 15:45 | |
| *** nisha has joined #openstack-keystone | 15:46 | |
| ayoung | samueldmq, did you take a look at the hack job I did on your keystone.common.controller cleanup? | 15:51 |
| ayoung | samueldmq, https://review.openstack.org/#/c/279263/ | 15:52 |
| patchbot | ayoung: patch 279263 - keystone - enforcement logic refactored | 15:52 |
| *** aginwala has quit IRC | 15:53 | |
| *** aginwala has joined #openstack-keystone | 15:54 | |
| *** spzala has joined #openstack-keystone | 15:54 | |
| *** aginwala has quit IRC | 15:56 | |
| *** aginwala_ has joined #openstack-keystone | 15:56 | |
| *** EinstCrazy has joined #openstack-keystone | 15:56 | |
| *** mhickey has joined #openstack-keystone | 15:57 | |
| *** EinstCrazy has quit IRC | 15:58 | |
| *** spzala has quit IRC | 15:59 | |
| *** jsavak has quit IRC | 16:00 | |
| *** e0ne has quit IRC | 16:00 | |
| openstackgerrit | ayoung proposed openstack/keystone: [WIP]Make fernet default token provider https://review.openstack.org/258650 | 16:03 |
| *** dflorea has joined #openstack-keystone | 16:05 | |
| *** jsavak has joined #openstack-keystone | 16:06 | |
| *** dflorea has quit IRC | 16:06 | |
| ayoung | raildo, OK Got it down to 3 fail trust tests and....keystone.tests.unit.test_v3_assignment.AssignmentTestCase.test_token_revoked_once_group_role_grant_revoked | 16:06 |
| ayoung | that one is...nasty | 16:07 |
| ayoung | but it should resolve to a "revoke by userid" for all users in the group.... | 16:07 |
| *** dflorea has joined #openstack-keystone | 16:12 | |
| *** daemontool has joined #openstack-keystone | 16:13 | |
| *** dflorea has quit IRC | 16:15 | |
| *** browne has joined #openstack-keystone | 16:17 | |
| *** ksnihyr has quit IRC | 16:19 | |
| *** aginwala_ has quit IRC | 16:19 | |
| *** aginwala has joined #openstack-keystone | 16:19 | |
| *** dflorea has joined #openstack-keystone | 16:20 | |
| raildo | ayoung: ok, I'll working on it today | 16:21 |
| *** aginwala has quit IRC | 16:24 | |
| ayoung | raildo, tackle th trusts ones. I've got a handle on the other failure | 16:24 |
| raildo | ayoung: so I'll take a look in the previous patch | 16:24 |
| ayoung | raildo, we were not calling the revoke API for non persisted tokens | 16:24 |
| *** jsavak has quit IRC | 16:24 | |
| ayoung | which is strange. It was a deliberate choice, but does not make sense | 16:25 |
| ayoung | anyway, I've almost got that test fixed. Update patch as soon as I doo | 16:25 |
| ayoung | doo bee doo bee doo | 16:25 |
| *** mvk_ has joined #openstack-keystone | 16:25 | |
| raildo | ayoung: haha, ok sir | 16:25 |
| *** mylu has quit IRC | 16:26 | |
| *** mylu has joined #openstack-keystone | 16:26 | |
| *** timcline has joined #openstack-keystone | 16:27 | |
| *** mkrcmari__ has quit IRC | 16:29 | |
| *** aginwala has joined #openstack-keystone | 16:31 | |
| *** jsavak has joined #openstack-keystone | 16:32 | |
| *** roxanaghe has joined #openstack-keystone | 16:32 | |
| *** slberger1 has joined #openstack-keystone | 16:32 | |
| *** slberger has quit IRC | 16:32 | |
| *** spzala has joined #openstack-keystone | 16:33 | |
| *** nisha has quit IRC | 16:34 | |
| *** subscope has quit IRC | 16:35 | |
| *** mylu has quit IRC | 16:40 | |
| *** jsavak has quit IRC | 16:42 | |
| *** jsavak has joined #openstack-keystone | 16:43 | |
| *** anush_ has joined #openstack-keystone | 16:43 | |
| *** mylu has joined #openstack-keystone | 16:44 | |
| ayoung | raildo, can I get a second et of eyes on this? I want to make sure I am reading it right. Once I fix the token provider validation, this call fails, but with a 401, not a 404: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/tests/unit/test_v3_assignment.py#n345 | 16:44 |
| ayoung | raildo, and, it fails prior to hitting the controller code | 16:45 |
| ayoung | which means that the token used to validate the token is bad, but it does not look like a token is passed in excpet for the headers={'x-subject-token': token}, | 16:45 |
| ayoung | shouldn't that call require an Auth token in addition to the subject token? | 16:45 |
| *** harlowja has joined #openstack-keystone | 16:46 | |
| *** Ephur has joined #openstack-keystone | 16:46 | |
| raildo | ayoung: this error 401 will occur for every request after a delete grant... | 16:46 |
| *** pcaruana has quit IRC | 16:46 | |
| ayoung | how did that test ever work? Should we be able to call validate token without a valid token? | 16:46 |
| raildo | ayoung: i had the same error in other tests | 16:46 |
| ayoung | raildo, is that a known issue? | 16:46 |
| *** anush_ has quit IRC | 16:46 | |
| raildo | ayoung: that why i tried to skip the revocation event | 16:47 |
| ayoung | raildo, ooh, no. That is a sign of something more significant wrong | 16:47 |
| ayoung | raildo, so, in that call to self.head('/auth/tokens', is it authentication somehow? | 16:48 |
| ayoung | ah | 16:48 |
| *** david_cu has joined #openstack-keystone | 16:48 | |
| ayoung | self.head is a unit test call, so the unit test holds on to an admin token? | 16:49 |
| raildo | yes, since every request will get a new token | 16:49 |
| ayoung | raildo, AH...so that test uses the same user for validating the token that it using for the system under test... Let me try rewritting the test with a different user | 16:51 |
| ayoung | we need to pslit admin off the test user...maybe more than just there | 16:51 |
| *** edmondsw has quit IRC | 16:52 | |
| raildo | ayoung: yes... I'm trying to find the exactly method | 16:52 |
| ayoung | raildo, its OK, I have it. | 16:52 |
| ayoung | raildo, fooled myself thinkg the post call was standard requres, not unit test | 16:52 |
| *** rcernin has quit IRC | 16:55 | |
| *** e0ne has joined #openstack-keystone | 16:56 | |
| *** ksnihyr has joined #openstack-keystone | 16:57 | |
| *** mhickey has quit IRC | 16:57 | |
| *** e0ne has quit IRC | 16:57 | |
| *** rderose has quit IRC | 17:00 | |
| *** aginwala has quit IRC | 17:00 | |
| htruta | guys, when someone instantiates a service client, such as novaclient with a ksa session, what do we expect to have as user_agent? | 17:00 |
| *** aginwala has joined #openstack-keystone | 17:00 | |
| *** aginwala has quit IRC | 17:01 | |
| *** anush_ has joined #openstack-keystone | 17:01 | |
| *** aginwala has joined #openstack-keystone | 17:02 | |
| *** dflorea has quit IRC | 17:03 | |
| *** can8dnSix has joined #openstack-keystone | 17:03 | |
| *** mylu has quit IRC | 17:06 | |
| *** shaleh has joined #openstack-keystone | 17:07 | |
| *** roxanaghe has quit IRC | 17:07 | |
| shaleh | are Domain scoped tokens still valid? | 17:07 |
| shaleh | no project specified, just Domain | 17:08 |
| *** roxanaghe has joined #openstack-keystone | 17:09 | |
| morgan | uhm. | 17:15 |
| morgan | i mean, i don't think we got rid of those | 17:15 |
| *** e0ne has joined #openstack-keystone | 17:15 | |
| shaleh | morgan: I was testing out the new oslopolicy-checker and the tool only worked for project scoped tokens. It seemed like an omission, but maybe I was missing something. | 17:16 |
| *** aginwala has quit IRC | 17:16 | |
| morgan | ayoung: ^cc? | 17:17 |
| shaleh | morgan: I was experimenting with domain admins and my policy was failing inside keystone. | 17:17 |
| morgan | domain scope has never been well tested | 17:17 |
| morgan | and def needs some custom policy.json stuff | 17:17 |
| shaleh | morgan: which is why I started asking questions before I started debugging and hacking code :-) | 17:18 |
| morgan | yeah | 17:18 |
| morgan | it was not the intention to make domain-scope go away as far as I know | 17:18 |
| * morgan looks at flights for Austin. | 17:19 | |
| shaleh | funny thing is, when i modded the oslopolicy-checker to take domain too my token passed policy in the tool | 17:19 |
| morgan | LOL | 17:19 |
| morgan | that kinda... wow | 17:19 |
| *** roxanaghe has quit IRC | 17:19 | |
| shaleh | which leads me to believe I hit a weird code path in Keystone | 17:19 |
| morgan | you might have | 17:19 |
| *** aginwala has joined #openstack-keystone | 17:20 | |
| *** roxanaghe has joined #openstack-keystone | 17:23 | |
| *** spzala has quit IRC | 17:24 | |
| *** jistr has quit IRC | 17:25 | |
| *** jsavak has quit IRC | 17:25 | |
| *** jsavak has joined #openstack-keystone | 17:26 | |
| *** jasonsb has quit IRC | 17:29 | |
| *** timcline has quit IRC | 17:36 | |
| *** timcline has joined #openstack-keystone | 17:37 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:39 | |
| *** timcline has quit IRC | 17:41 | |
| knikolla | morgan, congrats on TC election. | 17:41 |
| morgan | knikolla: thnx | 17:41 |
| fawadkhaliq | hi folks, quick question..is there a way to associate arbitrary tags to tenant/project in Keystone? Either some existing mechanism or a way to enhance to introduce this mechanism. The use case is to introduce tenant/project based affinity using tags. | 17:42 |
| morgan | fawadkhaliq: waht would tenant/project based affinity do? | 17:42 |
| morgan | before i answer, a concrete "what are you solving" helps :) | 17:42 |
| *** roxanaghe has quit IRC | 17:43 | |
| morgan | and where would these tags be consumed? | 17:43 |
| fawadkhaliq | morgan: in a very large scale deployment, would like to schedule all the tenant resources (workloads, networks etc) into a particular zone/cell/region etc. | 17:43 |
| morgan | ah. | 17:43 |
| fawadkhaliq | morgan: tags would be consumed by the likes of Nova schedular | 17:43 |
| *** sdake_ has joined #openstack-keystone | 17:44 | |
| morgan | so, you *can* add arbitrary data to just about any object in keystone | 17:44 |
| morgan | it gets serailized into the object within the DB | 17:44 |
| morgan | now. nothing outside of keystone really knows how to consume this/use it | 17:44 |
| morgan | also, it's not a great idea to do. | 17:44 |
| *** sdake has quit IRC | 17:45 | |
| fawadkhaliq | morgan: I see, can you please point me to how that works? | 17:45 |
| morgan | i am not sure the best place to put such a tag thing, because nova/cinder/scheduler at best receives just the tenant/project id (uuid) and not the whole object | 17:45 |
| *** jsavak has quit IRC | 17:45 | |
| fawadkhaliq | morgan: would like feedback on why its not a good idea, maybe I am missing something. | 17:45 |
| morgan | because it's unbounded data and not validated. | 17:45 |
| morgan | it's not good from a standpoint of the implementation in keystone. | 17:45 |
| morgan | and that it's very isolated to keystone | 17:46 |
| *** jsavak has joined #openstack-keystone | 17:46 | |
| fawadkhaliq | morgan: makes sense and agree. | 17:46 |
| shaleh | fawadkhaliq: in other words, the admin adds the data but the user discovers the data is wrong. | 17:46 |
| morgan | i think this type of tagging should almost go as close to the consumer (like quotas do) as possible | 17:46 |
| morgan | but - i could see why it's useful to put in keystone | 17:46 |
| morgan | since it's centralized | 17:47 |
| *** roxanaghe has joined #openstack-keystone | 17:47 | |
| fawadkhaliq | got it, can you please point me to how to utilize these tags today? I would like play around with it a bit. | 17:47 |
| shaleh | morgan: perhaps some Congress rules to keep items together? | 17:48 |
| *** mylu has joined #openstack-keystone | 17:51 | |
| fawadkhaliq | morgan: ^ | 17:52 |
| *** stingaci has joined #openstack-keystone | 17:52 | |
| *** e0ne has quit IRC | 17:52 | |
| *** mylu has quit IRC | 17:55 | |
| shaleh | fawadkhaliq: there is a 'extra' blob stored with the project when stored in SQL. You would add data there. | 17:56 |
| fawadkhaliq | shaleh: thanks, I see it. Quick check..is this available in both v2 and v3? :) | 17:56 |
| *** jsavak has quit IRC | 17:57 | |
| shaleh | what is this v2 thing you speak of? :-) | 17:57 |
| fawadkhaliq | shaleh: lol..some people still use them, sorry ;-) | 17:57 |
| *** jsavak has joined #openstack-keystone | 17:57 | |
| shaleh | fawadkhaliq: I _think_ so. But you need to test it. | 17:58 |
| shaleh | when you REST call the create project, just include an extra: { data....} and see what happens. | 17:58 |
| shaleh | Errors will lead you to the places to hack :-) | 17:58 |
| fawadkhaliq | shaleh: got it. thank you so much yourself and morgan. it was helpful. :) | 17:59 |
| *** sdake has joined #openstack-keystone | 17:59 | |
| shaleh | fawadkhaliq: if you are feeling adventurous a middleware could intercept the project creation and perform your business logic for validation | 17:59 |
| *** stingaci has quit IRC | 18:00 | |
| *** stingaci has joined #openstack-keystone | 18:00 | |
| *** tellesnobrega is now known as tellesnobrega_af | 18:00 | |
| *** tellesnobrega_af is now known as tellesnobrega | 18:00 | |
| fawadkhaliq | shaleh: yes, just the start. this is definitely going to evolve. its certainly better than what our colleagues at cern did by using conf files. but definite room for improvement. | 18:01 |
| shaleh | fawadkhaliq: piece of advice, prefix your key names in extras with something specific to the cloud/site/whatever. This way no one else steps on you by accident. | 18:01 |
| *** sdake_ has quit IRC | 18:01 | |
| *** jsavak has quit IRC | 18:02 | |
| fawadkhaliq | shaleh: thanks. lots of risks here, true. | 18:02 |
| *** jsavak has joined #openstack-keystone | 18:03 | |
| *** fawadkhaliq has quit IRC | 18:03 | |
| *** fawadkhaliq has joined #openstack-keystone | 18:03 | |
| amakarov | stevemar, o/ | 18:04 |
| amakarov | stevemar, what should be done to target unified delegations to newton? | 18:05 |
| *** jsavak has quit IRC | 18:05 | |
| *** jsavak has joined #openstack-keystone | 18:05 | |
| *** spzala has joined #openstack-keystone | 18:05 | |
| *** roxanaghe has quit IRC | 18:06 | |
| *** stingaci has quit IRC | 18:13 | |
| *** roxanaghe has joined #openstack-keystone | 18:14 | |
| *** timcline has joined #openstack-keystone | 18:14 | |
| *** ayoung has quit IRC | 18:14 | |
| morgan | amakarov: if no work was landed in Mitaka, just retarget the spec (review) | 18:22 |
| morgan | amakarov: move it to newton | 18:22 |
| *** e0ne has joined #openstack-keystone | 18:22 | |
| morgan | if things were done in mitaka... there might be a little more to do | 18:22 |
| *** roxanaghe has quit IRC | 18:23 | |
| *** stingaci has joined #openstack-keystone | 18:23 | |
| *** aginwala has quit IRC | 18:24 | |
| *** e0ne has quit IRC | 18:25 | |
| *** e0ne has joined #openstack-keystone | 18:26 | |
| amakarov | morgan, thanks, can I target a blueprint too then? | 18:26 |
| *** e0ne has quit IRC | 18:26 | |
| morgan | blueprint uhm sure - i don't know who can set blueprint targets. but def. do the spec review to retarget to newton | 18:27 |
| *** aginwala has joined #openstack-keystone | 18:28 | |
| amakarov | morgan, got it. btw, can you please give me a feedback about closure table: https://review.openstack.org/#/c/285521/ | 18:28 |
| patchbot | amakarov: patch 285521 - keystone - Closure table for HMT | 18:28 |
| morgan | amakarov: it's been on my list i need to followup with DinaBelova's changes today too | 18:29 |
| amakarov | morgan, we agreed to try it on midcycle | 18:29 |
| morgan | for profiling | 18:29 |
| *** stingaci has quit IRC | 18:29 | |
| amakarov | morgan, profiling is more important | 18:29 |
| shaleh | amakarov: is it less cute than last time? | 18:29 |
| morgan | amakarov: i think they're about the same importance fwiw | 18:29 |
| morgan | :) | 18:29 |
| morgan | amakarov: because we're early in the cycle. | 18:30 |
| morgan | both should land. | 18:30 |
| morgan | the closure table > profiling late in the cycle | 18:30 |
| morgan | if that makes sense | 18:30 |
| morgan | because if we are going to use HMT, we need it. | 18:30 |
| amakarov | morgan, btw, are we going to actually use HMT at long last? :) | 18:31 |
| morgan | no idea | 18:31 |
| morgan | but closure table is a requirement to make it fully featured. | 18:32 |
| morgan | and usable imo | 18:32 |
| amakarov | shaleh, it depends on the target of the comparison ) | 18:32 |
| shaleh | amakarov: haneef showed my the profilerproxy class yesterday. It was trying too hard :-) | 18:33 |
| shaleh | showed me | 18:33 |
| *** jsavak has quit IRC | 18:33 | |
| *** jsavak has joined #openstack-keystone | 18:34 | |
| amakarov | morgan, it has a weak point though: multiple inserts will be slow as index gets... well... reindexed ) | 18:34 |
| morgan | projects change infrequently compared to reads | 18:34 |
| *** slberger1 has quit IRC | 18:35 | |
| amakarov | shaleh, that thing gives us very interesting results already (in house, of course) and it is definitely a thing to have in upstream | 18:36 |
| shaleh | amakarov: agreed on value, disagreed on coding style. | 18:36 |
| shaleh | unless there is some reason it needs to use dynamic type generation gymnastics | 18:37 |
| amakarov | shaleh, is it that terrible? | 18:37 |
| shaleh | amakarov: coworkers yesterday asked me why it was so complex. Zero comments. Assumption without checking of "%s" formatting. | 18:38 |
| *** slberger has joined #openstack-keystone | 18:38 | |
| shaleh | I'd like to understand why it needs to go through the get_profiler_proxy() function. | 18:38 |
| amakarov | shaleh, oh, that... forgot to ask Dina today about it - a shame ( | 18:38 |
| shaleh | It looked like the class could just provide __init__ | 18:38 |
| shaleh | when you employ magic in code you need comments explaining why | 18:39 |
| morgan | shaleh: possibly. i think osprofiler needs to be rethought as a consumer of hook points in the various projects vs. directly including osprofiler referenced code in the projects | 18:39 |
| morgan | shaleh: but that is a convo i'm going to start with DinaBelova at the summit | 18:39 |
| shaleh | morgan: reasonable | 18:39 |
| morgan | so we can make it x-project | 18:39 |
| amakarov | shaleh, I cam imagine they want to use it as a template, but even named it "prefix" )) | 18:40 |
| morgan | but until then, we should seriously consider (which what changes are needed) to land the current code. | 18:40 |
| amakarov | So yes - %s is redundant | 18:40 |
| *** roxanaghe has joined #openstack-keystone | 18:40 | |
| shaleh | morgan: if the cute factor goes away it looks reasonable now | 18:40 |
| morgan | shaleh: yeah the technical perspective looks good. hence why we should cover what is needed to land it | 18:41 |
| morgan | shaleh: and then we work to make profiling better in *all* of openstack | 18:41 |
| shaleh | morgan: agreed | 18:41 |
| morgan | with a good pattern that allows tools that aren't "osprofiler only" to hook in | 18:41 |
| shaleh | morgan: you wear the TC hat well | 18:42 |
| morgan | LOL | 18:42 |
| *** sdake has quit IRC | 18:42 | |
| shaleh | morgan: It would be nice to have something more like the US and less like the UN | 18:42 |
| shaleh | amakarov: is there sufficient detail on the review for DinaBelova to update it quickly? | 18:43 |
| amakarov | shaleh, I think so. Otherwise I'll fix it myself and then you'll have to merge it before she noticed :D | 18:46 |
| *** stingaci has joined #openstack-keystone | 18:46 | |
| shaleh | amakarov: :-) | 18:47 |
| *** aginwala has quit IRC | 18:49 | |
| *** aginwala has joined #openstack-keystone | 18:50 | |
| amakarov | shaleh, jamielennox|away left a comment about moving proxy to oclo.cache | 18:50 |
| shaleh | amakarov: following morgan's thinking | 18:51 |
| *** sdake has joined #openstack-keystone | 18:52 | |
| *** vgridnev has joined #openstack-keystone | 18:57 | |
| *** aginwala has quit IRC | 18:57 | |
| *** roxanaghe has quit IRC | 19:02 | |
| *** jsavak has quit IRC | 19:02 | |
| *** jsavak has joined #openstack-keystone | 19:03 | |
| *** jed56 has quit IRC | 19:03 | |
| *** ayoung has joined #openstack-keystone | 19:09 | |
| *** ChanServ sets mode: +v ayoung | 19:09 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add identity providers integration tests https://review.openstack.org/302299 | 19:12 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add service providers integration tests https://review.openstack.org/303502 | 19:12 |
| *** roxanaghe has joined #openstack-keystone | 19:12 | |
| *** david_cu has left #openstack-keystone | 19:12 | |
| rodrigods | bknudson, ^ think it is much better now :) | 19:13 |
| *** dave-mccowan has quit IRC | 19:15 | |
| *** roxanaghe has quit IRC | 19:23 | |
| *** sheel has quit IRC | 19:27 | |
| *** daemontool has quit IRC | 19:33 | |
| *** browne has quit IRC | 19:34 | |
| *** daemontool has joined #openstack-keystone | 19:37 | |
| *** mylu has joined #openstack-keystone | 19:39 | |
| *** anush_ has quit IRC | 19:40 | |
| *** mylu has quit IRC | 19:48 | |
| *** anush_ has joined #openstack-keystone | 19:48 | |
| *** mylu has joined #openstack-keystone | 19:48 | |
| *** mylu has quit IRC | 19:49 | |
| *** cdcasey has joined #openstack-keystone | 19:49 | |
| *** real56 has quit IRC | 19:50 | |
| *** slberger has quit IRC | 19:54 | |
| stevemar | ctracey: sent you a *hip* email - heyooo | 19:55 |
| *** bigjools has quit IRC | 19:56 | |
| *** SpamapS has quit IRC | 19:58 | |
| *** zeus has quit IRC | 19:58 | |
| *** jdennis has quit IRC | 19:59 | |
| *** jdennis has joined #openstack-keystone | 19:59 | |
| *** aswadr_ has quit IRC | 20:00 | |
| *** daemontool has quit IRC | 20:02 | |
| *** zeus has joined #openstack-keystone | 20:03 | |
| *** zeus is now known as Guest80019 | 20:03 | |
| *** roxanaghe has joined #openstack-keystone | 20:04 | |
| *** bigjools has joined #openstack-keystone | 20:06 | |
| *** bigjools has quit IRC | 20:06 | |
| *** bigjools has joined #openstack-keystone | 20:06 | |
| shaleh | stevemar: I was playing with oslopolicy-checker, nice addition. I ran into a potential edge case. | 20:09 |
| shaleh | stevemar: what if my token is domain scoped instead of project scoped? I noticed there was no support for that currently. | 20:10 |
| *** dave-mccowan has joined #openstack-keystone | 20:10 | |
| *** stingaci has quit IRC | 20:10 | |
| *** fawadkhaliq has quit IRC | 20:11 | |
| *** fawadkhaliq has joined #openstack-keystone | 20:11 | |
| *** stingaci has joined #openstack-keystone | 20:12 | |
| stevemar | shaleh: domain scoped are slowly going away, but yeah, probably a hole in functionality | 20:12 |
| shaleh | stevemar: why is that? if I have a domain admin user, why scope to a project too? | 20:13 |
| *** SpamapS has joined #openstack-keystone | 20:15 | |
| *** browne has joined #openstack-keystone | 20:16 | |
| *** dan_nguyen has joined #openstack-keystone | 20:17 | |
| *** slberger has joined #openstack-keystone | 20:18 | |
| *** arunkant has quit IRC | 20:20 | |
| *** sdake_ has joined #openstack-keystone | 20:26 | |
| *** tellesnobrega is now known as tellesnobrega_af | 20:26 | |
| *** daemontool has joined #openstack-keystone | 20:26 | |
| *** sdake has quit IRC | 20:27 | |
| *** woodster_ has joined #openstack-keystone | 20:33 | |
| *** vgridnev has quit IRC | 20:36 | |
| *** vgridnev has joined #openstack-keystone | 20:40 | |
| *** sdake_ has quit IRC | 20:42 | |
| *** vgridnev has quit IRC | 20:42 | |
| *** edmondsw has joined #openstack-keystone | 20:43 | |
| *** stingaci has quit IRC | 20:47 | |
| samueldmq | crinkle: the _placeholder things on the migrations are for backport | 20:53 |
| *** roxanaghe has quit IRC | 20:53 | |
| crinkle | samueldmq: ah cool, thanks | 20:54 |
| samueldmq | crinkle: for example, something that affects current version (Newton) and should be placed in Mitaka too | 20:54 |
| samueldmq | crinkle: then it replaces a _placeholder :) | 20:54 |
| crinkle | gotcha, that makes sense | 20:55 |
| *** roxanaghe has joined #openstack-keystone | 20:58 | |
| *** stingaci has joined #openstack-keystone | 20:58 | |
| *** can8dnSix has quit IRC | 21:04 | |
| *** daemontool has quit IRC | 21:05 | |
| *** pece has quit IRC | 21:05 | |
| *** trown is now known as trown|outtypewww | 21:05 | |
| *** jsavak has quit IRC | 21:06 | |
| *** raildo is now known as raildo-afk | 21:07 | |
| *** clenimar has quit IRC | 21:07 | |
| *** pauloewerton has quit IRC | 21:11 | |
| *** gordc has quit IRC | 21:12 | |
| Anticimex | is this example up to date? http://docs.openstack.org/developer/python-keystoneclient/using-api-v3.html#authenticating-using-sessions | 21:13 |
| *** pnavarro_ has quit IRC | 21:13 | |
| *** timcline has quit IRC | 21:16 | |
| morgan | Anticimex: unlikely, as keystoneclient.session is deprecated in favour of keystoneauth | 21:17 |
| morgan | Anticimex: let me see if i can find the right link | 21:17 |
| morgan | Anticimex: this is keystoneauth http://docs.openstack.org/developer/keystoneauth/using-sessions.html#sessions-for-users | 21:18 |
| morgan | Anticimex: and for "developers" http://docs.openstack.org/developer/keystoneauth/using-sessions.html#sessions-for-client-developers | 21:18 |
| shaleh | Anticimex: good news is not much difference | 21:18 |
| morgan | shaleh: ++ | 21:18 |
| *** mylu has joined #openstack-keystone | 21:21 | |
| *** agrebennikov has quit IRC | 21:24 | |
| *** mylu has quit IRC | 21:25 | |
| Anticimex | morgan: ah, thanks for that pointer. i was doubting a bit, mostly due to my vim pylint thingy not understanding my virtualenv i guess :) | 21:26 |
| *** anush_ has quit IRC | 21:26 | |
| *** mylu has joined #openstack-keystone | 21:26 | |
| *** vgridnev has joined #openstack-keystone | 21:27 | |
| Anticimex | shaleh: looks very similar yes | 21:28 |
| *** mylu has quit IRC | 21:28 | |
| *** vgridnev has quit IRC | 21:32 | |
| *** roxanaghe has quit IRC | 21:38 | |
| *** roxanaghe has joined #openstack-keystone | 21:39 | |
| *** roxanaghe has quit IRC | 21:40 | |
| *** roxanaghe has joined #openstack-keystone | 21:40 | |
| *** roxanaghe has quit IRC | 21:40 | |
| Anticimex | the old example had region_name, as keystoneclient.v3.client.Client has. is that now replaced with endpoint_filter as per http://docs.openstack.org/developer/keystoneauth/using-sessions.html#service-discovery ? | 21:42 |
| *** wwriverrat has joined #openstack-keystone | 21:42 | |
| *** agrebennikov has joined #openstack-keystone | 21:43 | |
| Anticimex | i'll figure it out | 21:44 |
| *** slberger has quit IRC | 21:44 | |
| *** ksnihyr has quit IRC | 21:45 | |
| *** wwriverrat has left #openstack-keystone | 21:45 | |
| dtroyer_zz | anyone who wants to talk ksa still around? | 21:46 |
| dtroyer_zz | I'm wondering if the fixtures are fair game for use in OSC's tests: keystoneauth1/fixture/v2.py and v3.py | 21:47 |
| *** cdcasey has quit IRC | 21:47 | |
| *** browne has quit IRC | 21:50 | |
| *** slberger has joined #openstack-keystone | 21:53 | |
| *** Ephur has quit IRC | 21:58 | |
| morgan | dtroyer_zz: hey | 21:59 |
| morgan | so whats up? | 21:59 |
| morgan | oh in keystoneauth1/fixture | 22:00 |
| morgan | yes that should be consumable outside of keystoneauth | 22:00 |
| morgan | it's designed explicitly for that | 22:00 |
| dtroyer_zz | yeah… I've made jamielennox|away happy in the past using things I shouldn't have ;) | 22:00 |
| dtroyer_zz | coolio | 22:00 |
| dtroyer_zz | I need some changes, but I can work around that for now | 22:00 |
| morgan | let me know what changes are needed | 22:00 |
| *** stingaci has quit IRC | 22:01 | |
| morgan | we've done a *really* good job in keystoneauth marking things private that should be private | 22:01 |
| morgan | we started everything private then moved the symbols public when we spun it out of keystoneclient | 22:01 |
| dtroyer_zz | I'll pull that together later, almost dinner time… I'll point them out in the review I'm going to put up in a few minutes if I make flake8 happy | 22:01 |
| morgan | ok | 22:02 |
| morgan | sounds good :) | 22:02 |
| dtroyer_zz | it's not privacy so much as _service makes some assumptions I wish it didn't, helpful things that don't mimic the real world | 22:02 |
| *** slberger has left #openstack-keystone | 22:02 | |
| dtroyer_zz | _Service | 22:02 |
| morgan | right, see _Service (directly) isn't fair game :P | 22:02 |
| morgan | but Token is | 22:02 |
| morgan | etc. | 22:03 |
| dtroyer_zz | I'm going through Token, but the assumption is in _Service | 22:03 |
| morgan | right | 22:03 |
| morgan | and happy to fix if we can :) | 22:03 |
| dtroyer_zz | I want to take a crack at it and get my one commit to ksa ;) | 22:04 |
| dtroyer_zz | oh, and congrats on TC | 22:04 |
| morgan | thanks :P | 22:04 |
| morgan | i honeslyt didn't expect to win | 22:04 |
| morgan | dtroyer_zz: ^_^ | 22:04 |
| morgan | not upset about it, but surprised :) | 22:04 |
| *** sheel has joined #openstack-keystone | 22:04 | |
| morgan | it'll be definitely interesting | 22:05 |
| dtroyer_zz | I haven't looked at the votes, there are sometimes interesting things in there, who else got high votes when you did or didn't, etc. | 22:05 |
| morgan | eh, not sure. | 22:05 |
| dtroyer_zz | so do you have a new gig yet? | 22:05 |
| morgan | not yet | 22:05 |
| morgan | working on some details for one | 22:05 |
| dtroyer_zz | Well then you've repeated my achievement last april, getting elected without a job! | 22:06 |
| morgan | dtroyer_zz: ^5! | 22:06 |
| morgan | I was required to put a company name on my badge for the summit | 22:06 |
| morgan | it might say "-" | 22:06 |
| morgan | at the moment | 22:06 |
| Anticimex | halp. https://gist.github.com/Millnert/ad1eadd53824a5e405acd451ef5338cd - doesn't work, getting 401 unauthorised e.g. on the keystone.users.list() | 22:07 |
| dtroyer_zz | I had already done all that, mine said Nebula anyway, but I started at Intel a couple weeks before, so I just slapped a sticker on it | 22:08 |
| *** stingaci has joined #openstack-keystone | 22:08 | |
| morgan | dtroyer_zz: doing it right, for sure! | 22:08 |
| Anticimex | looking for other sample usage of keystoneauth /keystonev3? | 22:08 |
| Anticimex | s/?// | 22:08 |
| morgan | Anticimex: are you an admin there or have admin rights | 22:09 |
| Anticimex | yea | 22:09 |
| morgan | user list is admin action iirc. | 22:09 |
| morgan | ok. | 22:09 |
| Anticimex | admin perms | 22:09 |
| Anticimex | it's just an example | 22:09 |
| morgan | does everything fail or just user.list? | 22:09 |
| morgan | everyhitng in keystoneclient that is | 22:09 |
| *** kragniz has quit IRC | 22:09 | |
| Anticimex | ah, no, first error is that attempt | 22:10 |
| *** kragniz has joined #openstack-keystone | 22:10 | |
| Anticimex | but i get same error when i don't run that | 22:10 |
| morgan | right | 22:10 |
| Anticimex | eg instead let the code continue and attempt to get endpoints | 22:10 |
| morgan | so you get the same error even w/o user.list | 22:10 |
| morgan | ? | 22:10 |
| morgan | ok | 22:10 |
| morgan | so, check to see if your credentials are correct | 22:10 |
| morgan | and your scope is correct. | 22:10 |
| Anticimex | ack, i'll doublecheck that. | 22:11 |
| shaleh | Anticimex: side comment, dict.get() returns None if the item is not found. So you can collapse the front matter in your function | 22:11 |
| morgan | and make sure you have the right CACert if the endpoint is ssl | 22:11 |
| Anticimex | i guess openstackclient is wise. my rc file is a bit of a mess, trying to work with eg "glance" cli and openstack etc | 22:12 |
| morgan | because requests is ... weird. | 22:12 |
| Anticimex | haven't figured out what's the correct envs to use for all cases | 22:12 |
| Anticimex | yeah, cacert works though, otherwise i'd get ssl error | 22:12 |
| morgan | corect "envs for all cases: is hard. | 22:12 |
| Anticimex | right, it's not actually what i want | 22:12 |
| Anticimex | i'm using multiple now | 22:12 |
| Anticimex | one for global admin | 22:12 |
| Anticimex | another for v3 domain admin | 22:12 |
| shaleh | os-client-config and clouds.yaml FTW | 22:13 |
| shaleh | env vars are so 30 years ago | 22:13 |
| morgan | shaleh: ++ | 22:13 |
| Anticimex | interesting | 22:13 |
| Anticimex | one thing at a time :] | 22:13 |
| shaleh | Anticimex: heh, are you new to OpenStack? It is guzzle the ocean and try not to drown. :-) | 22:13 |
| *** lhcheng has joined #openstack-keystone | 22:14 | |
| *** ChanServ sets mode: +v lhcheng | 22:14 | |
| Anticimex | shaleh: thx for feedback on the .get() some minutes earlier i was using env['foo'] which gives keyerror | 22:14 |
| dtroyer_zz | morgan: https://review.openstack.org/#/c/276350/22/openstackclient/tests/identity/v2_0/fakes.py has the stuffs I was asking about… | 22:15 |
| patchbot | dtroyer_zz: patch 276350 - python-openstackclient - Moving authentication from keystoneclient to keyst... | 22:15 |
| shaleh | Anticimex: dict.get() returns None. dict.get(key, base_value) returns base_value if key is not in dict | 22:15 |
| Anticimex | shaleh: well, first time writing clients yeah. but we have three deployments up and running within a week. we just haven't.. eh, used them so much yet :) | 22:15 |
| shaleh | Anticimex: both have their uses | 22:15 |
| Anticimex | ack | 22:15 |
| morgan | dtroyer_zz: ahh | 22:15 |
| *** lhcheng has quit IRC | 22:15 | |
| *** markvoelker has quit IRC | 22:16 | |
| *** agrebennikov has quit IRC | 22:17 | |
| *** lhcheng has joined #openstack-keystone | 22:18 | |
| *** ChanServ sets mode: +v lhcheng | 22:18 | |
| *** fawadkhaliq has quit IRC | 22:25 | |
| *** fawadkhaliq has joined #openstack-keystone | 22:25 | |
| *** agrebennikov has joined #openstack-keystone | 22:26 | |
| *** kragniz has quit IRC | 22:27 | |
| *** lhcheng has quit IRC | 22:28 | |
| *** kragniz has joined #openstack-keystone | 22:28 | |
| *** agrebennikov has quit IRC | 22:29 | |
| *** Guest80019 is now known as zeus | 22:34 | |
| *** zeus has joined #openstack-keystone | 22:34 | |
| *** arunkant has joined #openstack-keystone | 22:40 | |
| *** dan_nguyen has quit IRC | 22:40 | |
| *** knikolla has quit IRC | 22:43 | |
| Anticimex | morgan: got it working, by stroke of genius (openstack --debug $foo-op) and check what params are sent | 22:44 |
| Anticimex | ;) | 22:44 |
| *** dan_nguyen has joined #openstack-keystone | 22:44 | |
| Anticimex | now though, all examples i find for "getting the glance endpoint" are quite old. so once i have the working client instance, should i go services -> endpoints or endpoints -> blackbox to figure out which endpoint i need for glanceclient? | 22:44 |
| *** fpatwa has joined #openstack-keystone | 22:45 | |
| Anticimex | i'm fumbling around at http://docs.openstack.org/developer/python-keystoneclient/api/keystoneclient.v3.html# | 22:45 |
| *** stingaci has quit IRC | 22:45 | |
| *** kragniz has quit IRC | 22:49 | |
| *** kragniz has joined #openstack-keystone | 22:49 | |
| *** stingaci has joined #openstack-keystone | 22:55 | |
| *** BigWillie has joined #openstack-keystone | 22:56 | |
| *** shaleh has quit IRC | 22:56 | |
| *** BigWillie has quit IRC | 23:00 | |
| *** browne has joined #openstack-keystone | 23:05 | |
| *** richm has quit IRC | 23:10 | |
| *** markvoelker has joined #openstack-keystone | 23:16 | |
| *** markvoelker has quit IRC | 23:21 | |
| *** wolsen has quit IRC | 23:24 | |
| *** wolsen has joined #openstack-keystone | 23:25 | |
| *** dan_nguyen has quit IRC | 23:26 | |
| *** dan_nguyen has joined #openstack-keystone | 23:30 | |
| *** cburgess has quit IRC | 23:30 | |
| *** cburgess has joined #openstack-keystone | 23:32 | |
| *** lhcheng has joined #openstack-keystone | 23:40 | |
| *** ChanServ sets mode: +v lhcheng | 23:40 | |
| *** browne has quit IRC | 23:45 | |
| *** browne has joined #openstack-keystone | 23:45 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add service providers integration tests https://review.openstack.org/303502 | 23:47 |
| *** fawadkhaliq has quit IRC | 23:48 | |
| *** fawadkhaliq has joined #openstack-keystone | 23:48 | |
| *** markvoelker has joined #openstack-keystone | 23:52 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!