Monday, 2016-05-23

*** rk4n has quit IRC00:04
*** ngupta has quit IRC00:07
*** iurygregory has quit IRC00:16
*** markvoelker has joined #openstack-keystone00:24
*** markvoelker_ has joined #openstack-keystone00:25
*** stingaci has quit IRC00:25
*** adu has joined #openstack-keystone00:27
*** markvoelker has quit IRC00:29
*** timcline has joined #openstack-keystone00:29
*** markvoelker_ has quit IRC00:30
openstackgerritMerged openstack/keystonemiddleware: Fix AttributeError on cached-invalid token checks  https://review.openstack.org/31952700:30
*** timcline has quit IRC00:34
*** krotscheck_dcm is now known as krotscheck00:39
*** lhcheng has quit IRC00:39
*** lhcheng has joined #openstack-keystone00:40
*** ChanServ sets mode: +v lhcheng00:40
*** iurygregory has joined #openstack-keystone00:41
*** chlong has joined #openstack-keystone01:00
*** rk4n has joined #openstack-keystone01:04
*** rk4n has quit IRC01:10
*** ddieterly has quit IRC01:22
*** EinstCrazy has joined #openstack-keystone01:26
*** lhcheng has quit IRC01:30
*** timcline has joined #openstack-keystone01:30
*** timcline has quit IRC01:35
*** wxy has joined #openstack-keystone01:36
*** TxGVNN has joined #openstack-keystone01:45
openstackgerritMaho Koshiya proposed openstack/python-keystoneclient: Add release notes for return-request-id-to-caller  https://review.openstack.org/27664401:48
*** EinstCrazy has quit IRC01:50
*** ddieterly has joined #openstack-keystone01:51
*** ddieterly is now known as ddieterly[away]01:52
notmorganjamielennox: https://review.openstack.org/31971101:53
notstevemarnotmorgan: going to write "Related-Bug: #1584289" in the review01:53
openstackbug 1584289 in keystonemiddleware "AttributeError while logging use of a token already cached as invalid" [Critical,Fix released] https://launchpad.net/bugs/1584289 - Assigned to Brian Cline (briancline)01:53
*** EinstCrazy has joined #openstack-keystone01:53
notmorgannotstevemar: sounds good01:53
jamielennoxnotstevemar: ah, beat me to it, agree on related bug01:54
notmorganalso https://review.openstack.org/31970101:54
notmorgannotstevemar: feel free to edit that review01:55
notmorganor .. i can01:55
notmorgan*shrug*01:55
notmorganor..01:55
notmorganhah beat me to it01:55
notstevemar:)01:56
notmorgannotstevemar: should be easy to go https://review.openstack.org/#/c/315198/01:56
patchbotnotmorgan: patch 315198 - keystone - Add new functionality to @wip01:56
notstevemarnotmorgan: whammo01:57
*** notstevemar is now known as stevemar01:57
*** EinstCrazy has quit IRC01:57
notmorganstevemar: i'll but henry tomorrow for https://review.openstack.org/#/c/319629/ unless jamielennox wants to push it through01:58
patchbotnotmorgan: patch 319629 - keystone - Isolate common ldap code to the identity backend01:58
notmorganstevemar: henry's concern is a non-issue because __init__ imports01:58
notmorganstevemar: but that is going to be a beast to handle any rebases on01:58
stevemarnotmorgan: should also be easy: https://review.openstack.org/#/c/291024/01:59
patchbotstevemar: patch 291024 - python-keystoneclient - map fixtures to keystoneauth01:59
jamielennoxnotmorgan: if henry has a -1 i'd let him do it unless you have something you are needing it for right now01:59
notmorganjamielennox: the main reason i pinged you is because that is just going to be a beast to rebase at all. but his concern was re a rename, but __init__ imports core, so his concern was a non-issue02:00
stevemarnotmorgan: i also fixed up https://review.openstack.org/#/c/271135/02:01
patchbotstevemar: patch 271135 - keystone - remove deprecated revoke_by_expiration function02:01
notmorganstevemar: hm. so.. unless ksc replaces it's session code with ksa's... i worry that is the wrong approach.02:01
notmorganstevemar: because fixtures no longer represent the code in ksc...if someone is using it02:01
notmorganstevemar: but i'll defer to jamielennox02:01
jamielennoxso fixtures just produces a dictionary response that it is then up to you to mock out somehow02:02
stevemarjamielennox: notmorgan: y'all plan on removing ksc's session/auth code, or just deprecating and pointing to ksa?02:03
jamielennoxi don't think there is any reason that changing the session would affect that02:03
stevemaryeah, fixtures seemed like a harmless first step02:03
notmorganstevemar: i expect we'll just drop the code in ksc02:03
*** EinstCrazy has joined #openstack-keystone02:03
jamielennoxstevemar: i had an attempt at that a while ago02:03
notmorganstevemar: way better02:03
jamielennoxit turns out super difficult to be exactly compatible02:03
stevemarjamielennox: how'd that go?02:03
stevemareek02:03
jamielennoxlittle things like exception base classes02:03
jamielennoxor the changes in accessinfo02:03
jamielennoxi think it's easier to mark it as deprecated and let it rot02:04
stevemarjamielennox: okay with me02:04
stevemarjamielennox: notmorgan i'm okay with abandoning the fixtures patch if we're just going to let things rot out02:05
notmorganstevemar: well i just +2/A'd it02:05
stevemardoh02:05
notmorganif we're abandoning should abandon now ;)02:05
jamielennoxstevemar: doesn't really matter for that02:05
jamielennoxbecause it's a direct change over, but i wouldn't put too much effort into moving stuff02:05
*** rk4n has joined #openstack-keystone02:07
*** rk4n has quit IRC02:13
*** ddieterly[away] is now known as ddieterly02:13
openstackgerritMaho Koshiya proposed openstack/python-keystoneclient: Add release notes for return-request-id-to-caller  https://review.openstack.org/27664402:18
*** ddieterly is now known as ddieterly[away]02:23
*** ddieterly[away] is now known as ddieterly02:24
*** ddieterly is now known as ddieterly[away]02:24
*** ddieterly[away] is now known as ddieterly02:25
*** ddieterly has joined #openstack-keystone02:27
*** ddieterly is now known as ddieterly[away]02:27
*** timcline has joined #openstack-keystone02:31
*** lhcheng has joined #openstack-keystone02:32
*** ChanServ sets mode: +v lhcheng02:32
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Create a Config object  https://review.openstack.org/31971502:33
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Simply local_oslo_config handling  https://review.openstack.org/31971602:33
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Consolidate user agent calculation  https://review.openstack.org/31971702:33
*** timcline has quit IRC02:35
openstackgerritwangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties  https://review.openstack.org/29624602:36
*** lhcheng has quit IRC02:37
*** TxGVNN has quit IRC02:48
*** TxGVNN has joined #openstack-keystone02:54
openstackgerritMerged openstack/keystone: Add new functionality to @wip  https://review.openstack.org/31519802:57
*** wanghua has joined #openstack-keystone02:58
openstackgerritMerged openstack/python-keystoneclient: map fixtures to keystoneauth  https://review.openstack.org/29102403:02
*** rk4n has joined #openstack-keystone03:09
*** rk4n has quit IRC03:14
*** ddieterly[away] has quit IRC03:27
*** amit213 has quit IRC03:32
*** timcline has joined #openstack-keystone03:32
*** EinstCrazy has quit IRC03:35
*** EinstCrazy has joined #openstack-keystone03:35
*** timcline has quit IRC03:37
*** harbor2 has quit IRC03:50
*** jbell8 has joined #openstack-keystone03:55
*** EinstCrazy has quit IRC04:01
*** jbell8 has quit IRC04:11
*** rk4n has joined #openstack-keystone04:11
*** rk4n has quit IRC04:15
*** dave-mcc_ has quit IRC04:22
*** ngupta has joined #openstack-keystone04:28
*** timcline has joined #openstack-keystone04:32
*** timcline has quit IRC04:37
*** jaosorior has joined #openstack-keystone04:37
*** TxGVNN has quit IRC04:56
*** chlong has quit IRC05:08
*** rk4n has joined #openstack-keystone05:12
*** fawadkhaliq has joined #openstack-keystone05:18
*** rk4n has quit IRC05:20
*** TxGVNN has joined #openstack-keystone05:20
*** roxanagh_ has joined #openstack-keystone05:21
*** sheel has joined #openstack-keystone05:21
*** roxanagh_ has quit IRC05:22
*** chlong has joined #openstack-keystone05:25
*** ianw has quit IRC05:26
*** d34dh0r53 has quit IRC05:27
*** eglute_s has quit IRC05:27
*** sigmavirus24_awa has quit IRC05:27
*** cloudnull has quit IRC05:27
*** d34dh0r53 has joined #openstack-keystone05:29
*** eglute has joined #openstack-keystone05:30
*** ianw has joined #openstack-keystone05:30
*** EinstCrazy has joined #openstack-keystone05:30
*** timcline has joined #openstack-keystone05:33
*** TxGVNN has quit IRC05:34
*** timcline has quit IRC05:38
*** ngupta has quit IRC05:39
*** rcernin has joined #openstack-keystone05:45
*** eglute has quit IRC05:51
*** d34dh0r53 has quit IRC05:51
*** d34dh0r53 has joined #openstack-keystone05:51
*** eglute has joined #openstack-keystone05:52
*** eglute has quit IRC05:52
*** d34dh0r53 has quit IRC05:52
*** d34dh0r53 has joined #openstack-keystone05:52
*** d34dh0r53 has quit IRC05:52
*** d34dh0r53 has joined #openstack-keystone05:53
*** eglute has joined #openstack-keystone05:53
*** lhcheng has joined #openstack-keystone05:56
*** ChanServ sets mode: +v lhcheng05:56
*** GB21 has joined #openstack-keystone06:03
*** zqfan has joined #openstack-keystone06:06
*** fawadkhaliq has quit IRC06:16
*** rk4n has joined #openstack-keystone06:16
*** rk4n has quit IRC06:21
*** chlong has quit IRC06:25
*** timcline has joined #openstack-keystone06:34
*** timcline has quit IRC06:38
*** belmoreira has joined #openstack-keystone06:43
*** tesseract has joined #openstack-keystone06:47
*** roxanagh_ has joined #openstack-keystone07:03
*** roxanagh_ has quit IRC07:07
*** jaosorior has quit IRC07:10
*** jaosorior has joined #openstack-keystone07:10
*** rk4n has joined #openstack-keystone07:18
*** hugokuo has quit IRC07:22
*** timburke has quit IRC07:22
*** charz has quit IRC07:23
*** rk4n has quit IRC07:23
*** lhcheng has quit IRC07:26
*** henrynash has joined #openstack-keystone07:31
*** ChanServ sets mode: +v henrynash07:31
*** timcline has joined #openstack-keystone07:35
*** EinstCrazy has quit IRC07:36
*** timcline has quit IRC07:39
*** henrynash has quit IRC07:40
*** EinstCrazy has joined #openstack-keystone07:41
alogastevemar: thank you for the early reviews on oidc :)07:43
*** EinstCra_ has joined #openstack-keystone07:46
*** EinstCrazy has quit IRC07:46
*** henrynash has joined #openstack-keystone07:49
*** ChanServ sets mode: +v henrynash07:49
*** adu has quit IRC07:52
*** rk4n has joined #openstack-keystone07:58
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:01
*** rk4n has quit IRC08:03
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix typo on class name  https://review.openstack.org/31976308:08
*** sdake_ has quit IRC08:10
*** sdake has joined #openstack-keystone08:11
*** dmk0202 has joined #openstack-keystone08:19
*** roxanagh_ has joined #openstack-keystone08:21
*** TxGVNN has joined #openstack-keystone08:24
*** roxanagh_ has quit IRC08:26
*** fawadkhaliq has joined #openstack-keystone08:28
*** pnavarro has joined #openstack-keystone08:29
*** fawadkhaliq has quit IRC08:30
*** timcline has joined #openstack-keystone08:35
*** timcline has quit IRC08:41
*** jistr has joined #openstack-keystone08:58
*** jistr has quit IRC09:00
*** jistr has joined #openstack-keystone09:01
samueldmqmorning09:08
*** aurelien__ has joined #openstack-keystone09:16
openstackgerritMerged openstack/oslo.policy: Add reno for release notes management  https://review.openstack.org/31930509:30
*** afazekas is now known as afazekas_food09:35
*** timcline has joined #openstack-keystone09:36
*** d0ugal has quit IRC09:40
*** d0ugal has joined #openstack-keystone09:41
*** timcline has quit IRC09:41
*** rk4n has joined #openstack-keystone09:43
*** pece has joined #openstack-keystone09:46
*** fawadkhaliq has joined #openstack-keystone09:48
*** rk4n has quit IRC09:51
*** hoonetorg has quit IRC09:53
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix option definition  https://review.openstack.org/31981009:55
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: Redefine all get_options methods to be class methods  https://review.openstack.org/31981109:55
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix typo on class name  https://review.openstack.org/31976309:55
*** _amrith_ is now known as amrith10:04
jamielennoxaloga: hey, is this your nick for ^10:04
alogajamielennox: yes10:06
alogajamielennox: I see your comments :-/10:07
*** hoonetorg has joined #openstack-keystone10:07
alogajamielennox: let me check if the failure that I got was cause by other code10:07
*** roxanagh_ has joined #openstack-keystone10:09
alogajamielennox: argh, so sorry10:11
alogajamielennox: I misinterpreted the error10:12
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix option definition  https://review.openstack.org/31981010:13
*** roxanagh_ has quit IRC10:14
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix typo on class name  https://review.openstack.org/31976310:15
alogajamielennox: sorry for the noise :(10:15
*** rk4n has joined #openstack-keystone10:24
*** alex_xu has quit IRC10:27
*** EinstCra_ has quit IRC10:28
*** alex_xu has joined #openstack-keystone10:29
jamielennoxaloga: it's fine10:30
jamielennoxaloga: you've been putting up some good ksa patches, i wanted to see what was going on with the classmethod options thing10:31
jamielennoxand see if the nick was you as i was going to ping you the other day and didn't know your name10:31
*** afazekas_food is now known as afazekas10:31
*** amrith is now known as _amrith_10:33
alogajamielennox: thanks then :)10:33
*** timcline has joined #openstack-keystone10:37
*** timcline has quit IRC10:42
*** pgreg has joined #openstack-keystone10:54
*** sdake has quit IRC11:04
*** julim has joined #openstack-keystone11:04
*** alex_xu has quit IRC11:07
*** hoonetorg has quit IRC11:10
*** alex_xu has joined #openstack-keystone11:11
*** _amrith_ is now known as amrith11:14
*** hoonetorg has joined #openstack-keystone11:15
*** raildo-afk is now known as raildo11:16
*** henrynash has quit IRC11:17
*** iurygregory has quit IRC11:19
*** GB21 has quit IRC11:26
*** timcline has joined #openstack-keystone11:38
*** adu has joined #openstack-keystone11:38
*** timcline has quit IRC11:42
*** iurygregory has joined #openstack-keystone11:46
*** dave-mccowan has joined #openstack-keystone11:47
*** roxanagh_ has joined #openstack-keystone11:57
*** henrynash has joined #openstack-keystone11:58
*** ChanServ sets mode: +v henrynash11:58
*** GB21 has joined #openstack-keystone12:00
*** aurelien__ has quit IRC12:01
*** aurelien__ has joined #openstack-keystone12:02
*** roxanagh_ has quit IRC12:02
*** rk4n has quit IRC12:07
*** rodrigods has quit IRC12:16
*** rodrigods has joined #openstack-keystone12:16
*** jed56 has joined #openstack-keystone12:21
*** GB21 has quit IRC12:23
*** fawadkhaliq has quit IRC12:24
*** henrynash has quit IRC12:26
*** adu has quit IRC12:27
*** edmondsw has joined #openstack-keystone12:28
*** jdennis has quit IRC12:28
*** jdennis has joined #openstack-keystone12:28
*** jdennis has quit IRC12:31
*** timcline has joined #openstack-keystone12:38
*** timcline has quit IRC12:43
*** pgreg has quit IRC12:49
*** rk4n has joined #openstack-keystone12:49
*** aurelien__ has quit IRC12:51
*** karthikeayan has joined #openstack-keystone12:51
karthikeayanhi all, do i have to configure credentials for all the services in keystone?12:53
*** jsavak has joined #openstack-keystone12:54
*** pauloewerton has joined #openstack-keystone12:54
*** aurelien__ has joined #openstack-keystone12:55
*** ddieterly has joined #openstack-keystone12:59
*** karthikeayan has quit IRC12:59
*** ddieterly has quit IRC13:04
*** sigmavirus24 has joined #openstack-keystone13:12
*** jdennis has joined #openstack-keystone13:13
*** spzala has joined #openstack-keystone13:24
*** daemontool has joined #openstack-keystone13:26
*** ddieterly has joined #openstack-keystone13:30
*** richm has joined #openstack-keystone13:31
knikollao/13:31
*** ngupta has joined #openstack-keystone13:32
*** belmoreira has quit IRC13:32
*** sheel has quit IRC13:35
*** timcline has joined #openstack-keystone13:39
*** timcline has quit IRC13:44
*** ddieterly is now known as ddieterly[away]13:49
*** adu has joined #openstack-keystone13:50
*** gagehugo has joined #openstack-keystone13:55
*** ddieterly[away] is now known as ddieterly13:56
*** sdake has joined #openstack-keystone13:56
*** ametts has joined #openstack-keystone13:58
*** sdake_ has joined #openstack-keystone14:00
*** sdake has quit IRC14:02
*** henrynash has joined #openstack-keystone14:08
*** ChanServ sets mode: +v henrynash14:08
*** woodster_ has joined #openstack-keystone14:12
*** belmoreira has joined #openstack-keystone14:17
*** ngupta has quit IRC14:18
*** sheel has joined #openstack-keystone14:20
*** afred312 has joined #openstack-keystone14:21
*** pnavarro has quit IRC14:24
*** jaugustine has joined #openstack-keystone14:25
*** pnavarro has joined #openstack-keystone14:32
*** tonytan4ever has joined #openstack-keystone14:32
*** henrynash has quit IRC14:34
*** ngupta has joined #openstack-keystone14:35
yolandahi stevemar, i'm working on the betamax fixture,where can i get a list of possible request/response values for keystone? for example i found i'm masking username, but it also can be seen as 'user': 'name' ...14:36
*** sdake_ has quit IRC14:38
*** timcline has joined #openstack-keystone14:40
*** darosale has joined #openstack-keystone14:42
*** timcline has quit IRC14:45
*** phalmos has joined #openstack-keystone14:45
*** roxanagh_ has joined #openstack-keystone14:46
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: Check that all defined entry points can be loaded  https://review.openstack.org/31998014:47
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: Check that all defined entry points can be loaded  https://review.openstack.org/31998014:51
*** mvk has quit IRC14:51
*** roxanagh_ has quit IRC14:51
*** pushkaru has joined #openstack-keystone14:51
*** daemontool has quit IRC14:52
*** markvoelker has joined #openstack-keystone14:56
*** tonytan4ever has quit IRC14:59
*** sdake has joined #openstack-keystone14:59
*** jed56 has quit IRC14:59
*** doug-fish has joined #openstack-keystone15:00
*** ngupta has quit IRC15:00
*** timcline has joined #openstack-keystone15:04
*** rderose has joined #openstack-keystone15:09
*** jsavak has quit IRC15:09
*** ddieterly is now known as ddieterly[away]15:09
*** jaosorior has quit IRC15:10
*** jsavak has joined #openstack-keystone15:10
*** jaosorior has joined #openstack-keystone15:11
*** rk4n has quit IRC15:11
*** fawadkhaliq has joined #openstack-keystone15:13
*** amrith is now known as _amrith_15:15
notmorganstevemar: atom.io is so close to being what i need. couple minor fixes...15:19
notmorgansamueldmq: and i think it could be my primary editor. some refactor stuff is not there15:19
notmorganstevemar, not samueldmq15:19
*** ddieterly[away] is now known as ddieterly15:20
*** jed56 has joined #openstack-keystone15:24
*** daemontool has joined #openstack-keystone15:30
notmorgansamueldmq, dstanek, ayoung, bknudson: https://review.openstack.org/#/c/319629/ lets land this if we're going to consolidate code.15:31
patchbotnotmorgan: patch 319629 - keystone - Isolate common ldap code to the identity backend15:31
ayoungnotmorgan, let me give it a quick once through, but it should be ok.  Are you OK with LDAP stuff being harder to backport as a result?15:32
*** lhcheng has joined #openstack-keystone15:33
*** ChanServ sets mode: +v lhcheng15:33
notmorganayoung: yes.15:34
notmorganayoung: i fully expect very little backporting of the ldap stuff15:34
ayoungnotmorgan, should be OK15:34
notmorganayoung: there just isn't a lot of reasons to backport ldap code.15:34
ayoungnotmorgan, just that stuff falls no my shoulders....15:35
*** adelia has joined #openstack-keystone15:35
notmorganayoung: we already have massive issues backporting ldap cause removal of assignment, etc etc etc15:35
ayoungyep15:35
*** timcline has quit IRC15:35
*** henrynash has joined #openstack-keystone15:35
*** ChanServ sets mode: +v henrynash15:35
notmorganmostly i am pinging people early on this one, because i am not going to maintain the rebase hell on this type of code shuffle.15:35
notmorganit's just too much code being moved to rebase over and over.15:36
notmorganthe smaller improvements to ldap will be easy to rebase comparitively15:36
*** ngupta has joined #openstack-keystone15:36
*** belmoreira has quit IRC15:39
ayounggit review -d 31962915:39
ayounggit checkout HEAD~1 keystone/common/ldap/core.py15:39
ayoungdiff keystone/common/ldap/core.py keystone/identity/backends/ldap/common.py15:40
ayoungNo output15:40
ayoungI can +2 that15:40
*** edtubill has joined #openstack-keystone15:42
ayoungnotmorgan, +2A15:42
*** rk4n has joined #openstack-keystone15:45
*** rk4n has quit IRC15:46
*** rk4n has joined #openstack-keystone15:46
*** TxGVNN has quit IRC15:47
*** dmk0202 has quit IRC15:47
*** tonytan4ever has joined #openstack-keystone15:48
*** ngupta has quit IRC15:52
ayoungrodrigods, only https://review.openstack.org/#/c/302299/16/keystone_tempest_plugin/tests/api/identity/v3/test_identity_providers.py is at all complicated. Otherwise a trivial patch15:53
patchbotayoung: patch 302299 - keystone - Add identity providers integration tests15:53
rodrigodsayoung, yeah, but are just direct API tests15:53
rodrigodsjust to make sure the IdPClient works15:53
ayoungrodrigods, what is with idempotent id?15:54
rodrigodsayoung, something to make sure a test has a unique way to be identified15:54
rodrigodsthis is a tempest thing15:54
ayoungrodrigods, ?15:54
ayoungOK15:55
rodrigodsayoung, http://docs.openstack.org/developer/tempest/HACKING.html#test-identification-with-idempotent-id15:55
ayoungrodrigods, joy15:55
ayoungrodrigods, the rest is trivial.  +215:56
rodrigodsayoung, ++15:56
rodrigodshave a 4 patch chain (testing all federated api clients)15:56
rodrigodslanding the first is the big step, since it has some boiler plating15:56
*** mou has joined #openstack-keystone15:59
*** ngupta has joined #openstack-keystone16:00
notmorganayoung: i fixed the caching for https://review.openstack.org/#/c/311652/ looks like the ksm 4.5.0 error broke CI for it16:04
patchbotnotmorgan: patch 311652 - keystone - Replace revoke tree with linear search16:04
ayoungnotmorgan, too many tests are failing there.  Suspect that it is not fixed yet16:04
notmorganayoung: there is a minor change i'd prefer to make long term on caching the event - but that would be to eliminate the datetime->str->datetime16:04
notmorganayoung: i just rechecked this morning16:05
ayoungnotmorgan, I'd be OK with that fix16:05
notmorganayoung: after the 4.5.0 blacklist went in16:05
ayoungnotmorgan, I would say a recheck would work if only one of the tasks failed16:05
ayoungah16:05
ayoungcool...lets see..16:05
notmorganyeah basically ksm was raising AttributeError on invalid tokens cached16:05
notmorganbreaking lots of things16:05
*** rcernin has quit IRC16:14
*** roxanagh_ has joined #openstack-keystone16:17
*** gyee has joined #openstack-keystone16:20
*** ChanServ sets mode: +v gyee16:20
*** ddieterly is now known as ddieterly[away]16:21
*** roxanagh_ has quit IRC16:22
adeliais there a way to configure the oslopolicy-checker access token to check the access a user has to a project they are not a member of?16:27
*** pnavarro has quit IRC16:28
notmorganadelia: what are you trying to accomplish16:28
notmorganadelia: will help us answer your question.16:28
adeliaI am trying to make sure my cloud_admin can perform actions in projects he is not explicitly added ot16:28
*** jaugustine has quit IRC16:28
notmorganadelia: going to defer to ayoung and henrynash here16:29
notmorganadelia: but i know ayoung is in a meeting, so might take him a bit to respond.16:29
adeliano prob, thank you16:29
*** ddieterly[away] is now known as ddieterly16:29
henrynashadelia: yep, ayoung is your guy for this….16:32
*** raddaoui has joined #openstack-keystone16:32
*** jsavak has quit IRC16:33
*** jsavak has joined #openstack-keystone16:33
samueldmqnotmorgan: ayoung: re patch 31165216:35
patchbotsamueldmq: https://review.openstack.org/#/c/311652/ - keystone - Replace revoke tree with linear search16:36
*** timcline has joined #openstack-keystone16:36
samueldmqtesting that on both keystone and tempest gates has had good results, no race condition showed up so far (1 run + 2 rechecks)16:37
samueldmqI just need to have it passing again so I can continue testing16:37
*** charz has joined #openstack-keystone16:37
samueldmqwhen are we going to have keystonemiddleware 4.5.1?16:38
*** setuid has left #openstack-keystone16:38
*** rk4n has quit IRC16:39
*** timcline has quit IRC16:40
notmorgansamueldmq: now.16:42
notmorgansamueldmq: and we now have ~4 failures or so16:42
notmorganwhich are probably real issues16:43
*** hugokuo has joined #openstack-keystone16:43
*** timburke has joined #openstack-keystone16:44
*** rcernin has joined #openstack-keystone16:46
*** rk4n has joined #openstack-keystone16:48
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/31988216:51
*** jaosorior has quit IRC16:55
*** ddieterly is now known as ddieterly[away]16:56
*** tonytan4ever has quit IRC16:56
*** aurelien__ has quit IRC16:58
*** jsavak has quit IRC16:59
*** jsavak has joined #openstack-keystone17:00
ayoungsamueldmq, was that with or without caching?17:03
ayoungadelia, get a token for cloud_admin and try openstack server list17:04
ayoungor flavor list17:04
*** chrisshattuck has joined #openstack-keystone17:05
openstackgerritMerged openstack/keystone: Isolate common ldap code to the identity backend  https://review.openstack.org/31962917:10
*** alexander__ is now known as amakarov17:10
*** adu has quit IRC17:11
*** sdake has quit IRC17:15
notmorganayoung: the race looks solve both ways17:16
ayoungnotmorgan, ship it!17:16
notmorganayoung: gotta fix the other issues first. :P17:16
*** rk4n has quit IRC17:16
notmorganayoung: these don't look to be racy, more just legit issues.17:16
*** sdake has joined #openstack-keystone17:17
*** roxanagh_ has joined #openstack-keystone17:18
openstackgerritRon De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements  https://review.openstack.org/31428417:19
ayoungnotmorgan, its happening in teardown17:19
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/31700717:19
openstackgerritRon De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements  https://review.openstack.org/31428417:20
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/31700717:21
ayounghttp://git.openstack.org/cgit/openstack/tempest/tree/tempest/test.py#n55117:21
ayoungwhich calls17:21
*** sdake has quit IRC17:22
*** ddieterly[away] is now known as ddieterly17:22
adeliaayoung: flavor list isn't working for unrelated reasons, but the server list is controlled by a specific rule. I can go through and test each api separately, but I was just trying to see if there was a shortcut17:22
*** roxanagh_ has quit IRC17:23
ayoungadelia, nope, no short cuts.  Keystone does not manage policy for the other services, so what they do is up to them.  You can use the Policy CLI to make it go faster17:23
ayoungbut you need the policy file17:23
*** harlowja has joined #openstack-keystone17:24
adeliaayoung: bummer. so no way to specify projects in the access token then?17:26
ayoungadelia  I thought there was...17:28
*** tqtran has joined #openstack-keystone17:30
*** ddieterly is now known as ddieterly[away]17:31
ayoungadelia, I guess not.  The project ID does not come from a consistent location in the resource.  Its kind of a problem elsewhere, too17:31
*** jsavak has quit IRC17:31
*** jsavak has joined #openstack-keystone17:33
*** timcline has joined #openstack-keystone17:37
*** timcline has quit IRC17:41
*** spzala has quit IRC17:44
*** spzala has joined #openstack-keystone17:45
*** spzala has quit IRC17:50
*** jsavak has quit IRC17:50
*** pushkaru has quit IRC17:51
*** jsavak has joined #openstack-keystone17:51
*** chrisshattuck has quit IRC17:52
*** chrisshattuck has joined #openstack-keystone17:52
*** tonytan4ever has joined #openstack-keystone17:54
*** tonytan4ever has quit IRC17:55
*** browne has joined #openstack-keystone17:58
*** stingaci has joined #openstack-keystone18:04
*** tonytan4ever has joined #openstack-keystone18:05
*** timcline has joined #openstack-keystone18:05
*** timcline has quit IRC18:10
*** ig0r_ has joined #openstack-keystone18:15
*** doug-fis_ has joined #openstack-keystone18:16
*** doug-fis_ has quit IRC18:16
*** doug-fis_ has joined #openstack-keystone18:16
*** roxanagh_ has joined #openstack-keystone18:19
*** doug-fish has quit IRC18:19
SamYapleI ahve a question about the cache section of the keystone.conf Is section used at all when using fernet tokens? just for revocations perhaps?18:20
*** ddieterly[away] is now known as ddieterly18:21
*** roxanagh_ has quit IRC18:23
*** fawadkhaliq has quit IRC18:28
*** agrebennikov has joined #openstack-keystone18:30
*** agrebennikov has quit IRC18:30
*** agrebennikov has joined #openstack-keystone18:30
*** adu has joined #openstack-keystone18:31
*** mou has quit IRC18:32
*** max__ has joined #openstack-keystone18:33
*** tonytan4ever has quit IRC18:33
*** max__ is now known as Guest6639418:33
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/31700718:34
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/31700718:35
*** ddieterly is now known as ddieterly[away]18:36
*** ddieterly[away] is now known as ddieterly18:42
*** rk4n has joined #openstack-keystone18:45
*** diazjf has joined #openstack-keystone18:46
samueldmqayoung: as far as I tested, it was without cache18:47
*** pece has quit IRC18:48
ayoungsamueldmq, um, which cache section?18:49
ayoungits for all caching18:50
*** neophy has joined #openstack-keystone18:51
*** tonytan4ever has joined #openstack-keystone18:52
samueldmqayoung: I tested this https://review.openstack.org/#/c/311652/1418:52
patchbotsamueldmq: patch 311652 - keystone - Replace revoke tree with linear search18:52
*** pushkaru has joined #openstack-keystone18:52
samueldmqthat simply removes the cache bits18:53
notmorgansamueldmq: and i'm -1 on that.18:57
*** tonytan_brb has joined #openstack-keystone18:59
*** tonytan4ever has quit IRC19:00
*** doug-fis_ has quit IRC19:03
samueldmqnotmorgan: I was okay with that, but if we can make it work with cache, even better!19:05
samueldmqnotmorgan: I appreciate you're fixing the cache bits in there19:06
*** timcline has joined #openstack-keystone19:06
notmorganso the general view i have here is that if we take something and the only way of landing code is to remove caching capabilities from it - we have a bad design19:06
notmorganif it already was cachable19:06
samueldmqnotmorgan: even if that shows to solve the bug ?19:08
notmorgansamueldmq: then we have a bug in the cache that needs to be fixed.19:09
samueldmq(I am not sure that solved, just had a few runs)19:09
samueldmqnotmorgan: agreed19:09
notmorgansamueldmq: but if you *cant* solve it with caching on, the design itself is flawed somewhere.19:09
*** timcline has quit IRC19:10
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/31700719:14
samueldmqnotmorgan: sure, let's try to fix it with caching enable, I believe we can :)19:14
*** markvoelker has quit IRC19:14
*** markvoelker has joined #openstack-keystone19:15
*** ngupta has quit IRC19:15
samueldmqnotmorgan: we don't need to be in a hurry anymore, devstack change's been reverted already19:15
samueldmqjust make sure we make progress and make fernet default again this cycle19:16
*** jsavak has quit IRC19:18
*** tesseract has quit IRC19:21
*** jsavak has joined #openstack-keystone19:25
*** clenimar has quit IRC19:25
bknudsonmake fernet great again19:27
*** daemontool has quit IRC19:29
samueldmqbknudson: ++19:30
*** _amrith_ is now known as amrith19:31
*** spzala has joined #openstack-keystone19:33
*** jsavak has quit IRC19:34
*** roxanagh_ has joined #openstack-keystone19:34
*** jsavak has joined #openstack-keystone19:35
bknudsondo we have a keystone test job that runs with fernet?19:36
bknudsonthe uwsgi one could be changed to fernet.19:36
*** roxanagh_ has quit IRC19:39
*** doug-fish has joined #openstack-keystone19:46
*** amrith is now known as _amrith_19:46
*** ddieterly is now known as ddieterly[away]19:46
*** jsavak has quit IRC19:54
*** ddieterly[away] is now known as ddieterly19:55
*** ngupta has joined #openstack-keystone19:59
*** ig0r_ has quit IRC19:59
*** BjoernT has joined #openstack-keystone20:00
*** timcline has joined #openstack-keystone20:06
*** darosale has quit IRC20:09
*** timcline has quit IRC20:11
openstackgerritguang-yee proposed openstack/keystonemiddleware: Determine project name from oslo_config or local config  https://review.openstack.org/32012320:12
*** arunkant has quit IRC20:15
*** arunkant has joined #openstack-keystone20:18
*** sdake has joined #openstack-keystone20:21
*** jsavak has joined #openstack-keystone20:23
*** ngupta has quit IRC20:30
*** diazjf has quit IRC20:31
*** roxanagh_ has joined #openstack-keystone20:35
*** shaleh has joined #openstack-keystone20:36
*** sdake has quit IRC20:37
*** darosale has joined #openstack-keystone20:37
openstackgerritMerged openstack/keystone: Move identity.backends.sql model code to sql_model.py  https://review.openstack.org/29261120:38
*** roxanagh_ has quit IRC20:40
*** ngupta has joined #openstack-keystone20:44
*** _amrith_ is now known as amrith20:46
*** sdake has joined #openstack-keystone20:47
*** ddieterly is now known as ddieterly[away]20:47
openstackgerritRon De Rose proposed openstack/keystone: Config settings to support PCI-DSS  https://review.openstack.org/31467920:48
*** doug-fis_ has joined #openstack-keystone20:49
*** diazjf has joined #openstack-keystone20:51
*** sdake_ has joined #openstack-keystone20:51
openstackgerritwerner mendizabal proposed openstack/keystone: Support encryption of credentials in Keystone  https://review.openstack.org/31716920:52
*** doug-fish has quit IRC20:52
*** ddieterly[away] is now known as ddieterly20:52
*** doug-fis_ has quit IRC20:53
*** sdake has quit IRC20:54
openstackgerritRon De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements  https://review.openstack.org/31428420:59
*** diazjf has quit IRC20:59
*** gagehugo has quit IRC21:00
*** julim has quit IRC21:01
*** amrith is now known as _amrith_21:01
openstackgerritRon De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements  https://review.openstack.org/31428421:03
*** agireud has quit IRC21:04
*** ddieterly is now known as ddieterly[away]21:05
*** jsavak has quit IRC21:07
*** timcline has joined #openstack-keystone21:07
*** agireud has joined #openstack-keystone21:09
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Migrate identity /v3 docs from api-ref repo  https://review.openstack.org/32014521:09
samueldmqstevemar: notmorgan: first in the chain ^21:09
samueldmqbknudson: cc ^21:10
samueldmq:)21:10
*** timcline has quit IRC21:12
*** mvk has joined #openstack-keystone21:13
openstackgerritMerged openstack/keystoneauth: oidc: fix option definition  https://review.openstack.org/31981021:18
openstackgerritMerged openstack/keystoneauth: oidc: fix typo on class name  https://review.openstack.org/31976321:18
*** tonytan_brb has quit IRC21:21
openstackgerritRon De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements  https://review.openstack.org/31428421:21
*** browne has quit IRC21:25
*** adu has quit IRC21:27
*** ddieterly[away] is now known as ddieterly21:27
*** spzala has quit IRC21:27
*** spzala has joined #openstack-keystone21:28
*** rk4n has quit IRC21:29
*** neophy has quit IRC21:31
*** spzala has quit IRC21:32
*** edmondsw has quit IRC21:34
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/32015621:34
*** henrynash has quit IRC21:35
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/32015621:35
*** daemontool has joined #openstack-keystone21:36
notmorgan /query shaleh21:37
notmorganugh...21:37
bknudsonshaleh is not a robot!21:37
bknudson(as far as I know)21:38
shalehbknudson: what makes you say shaleh is not a robot?21:38
bknudsonok, now I think you are a robot.21:39
*** pauloewerton has quit IRC21:40
*** edtubill has quit IRC21:43
*** adelia has quit IRC21:45
*** sheel has quit IRC21:45
*** pushkaru has quit IRC21:48
notmorganbknudson: shaleh might be a very good turing test21:48
openstackgerritSean Perry proposed openstack/keystone-specs: Cleanup 'implied roles' section of Identity API V3 spec  https://review.openstack.org/29892521:49
*** rk4n has joined #openstack-keystone21:50
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/32015621:54
openstackgerritRon De Rose proposed openstack/keystone: Shadow LDAP and custom driver users  https://review.openstack.org/30548721:55
*** browne has joined #openstack-keystone21:57
*** darosale has quit IRC21:58
*** BjoernT has quit IRC21:58
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/32015622:07
*** timcline has joined #openstack-keystone22:08
*** phalmos has quit IRC22:08
openstackgerritguang-yee proposed openstack/keystone: Added X-Forwarding-For support.  https://review.openstack.org/30903822:11
*** timcline has quit IRC22:13
jamielennoxgyee: does https://github.com/openstack/oslo.middleware/blob/master/oslo_middleware/http_proxy_to_wsgi.py handle that?22:15
gyeejamielennox, it doesn't replace REMOTE_ADDR I think22:17
gyeethat's what ends up in the log22:17
jamielennoxcan it/should it?22:17
gyeeit should, if we are standardizing on oslo.middleware22:17
jamielennoxgyee: ++ i would like to deprecate our x-forwarded-proto handling to that22:18
jamielennoxbecause it handles the newer protocols for everyone22:18
notmorgandstanek: i now dub you stanke due to a typo when i was talking w/ jamielennox :P22:18
gyeeyou mean enable oslo.middleware by default and remove our code?22:18
gyeeI am down with that22:18
jamielennoxgyee: ++22:19
jamielennoxok - coffee22:20
*** pushkaru has joined #openstack-keystone22:21
*** daemontool_ has joined #openstack-keystone22:21
*** daemontool has quit IRC22:22
*** roxanagh_ has joined #openstack-keystone22:23
*** tonytan4ever has joined #openstack-keystone22:25
*** roxanagh_ has quit IRC22:28
*** spzala has joined #openstack-keystone22:28
*** adu has joined #openstack-keystone22:29
*** ddieterly is now known as ddieterly[away]22:29
openstackgerritRon De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements  https://review.openstack.org/32015622:32
*** ddieterly[away] is now known as ddieterly22:34
*** daemontool_ has quit IRC22:34
*** diazjf has joined #openstack-keystone22:35
*** adu has quit IRC22:35
*** spzala has quit IRC22:37
*** diazjf has quit IRC22:37
*** spzala has joined #openstack-keystone22:37
*** spzala has quit IRC22:41
*** spzala has joined #openstack-keystone22:41
*** darrenc_ has joined #openstack-keystone22:46
*** dobson` has joined #openstack-keystone22:47
*** tonyb_ has joined #openstack-keystone22:48
*** BlackDex_ has joined #openstack-keystone22:49
*** Dave____ has joined #openstack-keystone22:49
*** skoude_ has joined #openstack-keystone22:49
*** jhesketh_ has joined #openstack-keystone22:49
*** dstanek_ has joined #openstack-keystone22:51
*** lbragstad_ has joined #openstack-keystone22:51
*** dolphm_ has joined #openstack-keystone22:51
*** ChanServ sets mode: +o dolphm_22:51
*** odyssey4me_ has joined #openstack-keystone22:51
*** dutsmoc has joined #openstack-keystone22:51
*** tlbr_ has joined #openstack-keystone22:51
*** afazekas_ has joined #openstack-keystone22:52
*** dtroyer_zz has joined #openstack-keystone22:52
*** _d34dh0r53_ has joined #openstack-keystone22:52
*** rm_work| has joined #openstack-keystone22:52
*** zigo_ has joined #openstack-keystone22:52
*** dave-mccowan has quit IRC22:52
*** mvk has quit IRC22:53
*** rcernin has quit IRC22:53
*** d0ugal has quit IRC22:53
*** eglute has quit IRC22:53
*** d34dh0r53 has quit IRC22:53
*** briancurtin has quit IRC22:53
*** josecastroleon has quit IRC22:53
*** Dave has quit IRC22:53
*** andrewbogott has quit IRC22:53
*** skoude has quit IRC22:53
*** rm_work has quit IRC22:53
*** odyssey4me has quit IRC22:53
*** lbragstad has quit IRC22:53
*** samueldmq has quit IRC22:53
*** comstud has quit IRC22:53
*** dobson has quit IRC22:53
*** tonyb has quit IRC22:53
*** jhesketh has quit IRC22:53
*** mjb has quit IRC22:53
*** darrenc has quit IRC22:53
*** knikolla has quit IRC22:53
*** zigo has quit IRC22:53
*** dolphm has quit IRC22:53
*** afazekas has quit IRC22:53
*** gus has quit IRC22:53
*** tlbr has quit IRC22:53
*** BlackDex has quit IRC22:53
*** dtroyer has quit IRC22:53
*** dstanek has quit IRC22:53
*** stian_ has quit IRC22:53
*** dstanek_ is now known as dstanek22:53
*** rm_work| is now known as rm_work22:53
*** ddieterly is now known as ddieterly[away]22:53
*** dolphm_ is now known as dolphm22:53
*** mjb has joined #openstack-keystone22:53
*** ChanServ sets mode: +v dstanek22:54
*** rm_work has quit IRC22:54
*** rm_work has joined #openstack-keystone22:54
*** knikolla has joined #openstack-keystone22:54
*** eglute has joined #openstack-keystone22:55
*** doug-fish has joined #openstack-keystone22:57
*** doug-fish has quit IRC22:57
*** gus has joined #openstack-keystone22:58
*** spzala has quit IRC22:58
*** chlong has joined #openstack-keystone22:58
*** ddieterly[away] has quit IRC22:59
*** darrenc_ is now known as darrenc23:01
*** tonytan4ever has quit IRC23:06
*** timcline has joined #openstack-keystone23:09
*** dave-mccowan has joined #openstack-keystone23:10
*** ametts has quit IRC23:10
*** dave-mcc_ has joined #openstack-keystone23:12
*** timcline has quit IRC23:13
*** adu has joined #openstack-keystone23:15
*** rk4n has quit IRC23:15
*** dave-mccowan has quit IRC23:16
*** rderose has quit IRC23:16
*** raddaoui has quit IRC23:17
*** furface has quit IRC23:20
*** ddieterly has joined #openstack-keystone23:30
*** lbragstad_ is now known as lbragstad23:33
*** stian_ has joined #openstack-keystone23:38
*** pushkaru has quit IRC23:38
*** pushkaru has joined #openstack-keystone23:38
*** mvk has joined #openstack-keystone23:38
*** adu has quit IRC23:38
*** briancurtin has joined #openstack-keystone23:39
*** pushkaru has quit IRC23:40
*** pushkaru has joined #openstack-keystone23:40
*** tonyb_ is now known as tonyb23:43
*** chrisshattuck has quit IRC23:43
*** pushkaru has quit IRC23:44
*** ddieterly has quit IRC23:51
*** iurygregory has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!