Friday, 2016-06-24

*** adu has quit IRC00:00
*** adu has joined #openstack-keystone00:05
*** rcernin has quit IRC00:12
*** BjoernT has joined #openstack-keystone00:18
*** dan_nguyen has quit IRC00:20
*** BjoernT has quit IRC00:23
*** edtubill has joined #openstack-keystone00:24
*** raddaoui has quit IRC00:27
*** agrebennikov has quit IRC00:28
*** edtubill has quit IRC00:28
*** dan_nguyen has joined #openstack-keystone00:29
openstackgerritDolph Mathews proposed openstack/keystone: Replace keystone.common.config with keystone.conf package  https://review.openstack.org/32560400:31
*** dan_nguyen has quit IRC00:35
*** spzala has joined #openstack-keystone00:36
*** daemontool has quit IRC00:38
*** spzala has quit IRC00:42
openstackgerritSam Leong proposed openstack/keystoneauth: Auth plugin for X.509 tokenless authz  https://review.openstack.org/28390500:49
*** edtubill has joined #openstack-keystone00:50
*** edtubill has quit IRC00:52
*** roxanaghe has quit IRC00:52
*** spzala has joined #openstack-keystone00:59
*** spzala has quit IRC01:01
*** spzala has joined #openstack-keystone01:01
*** davechen has joined #openstack-keystone01:01
*** ayoung has joined #openstack-keystone01:02
*** ChanServ sets mode: +v ayoung01:02
*** julim has joined #openstack-keystone01:08
*** EinstCrazy has joined #openstack-keystone01:31
openstackgerritJamie Lennox proposed openstack/keystoneauth: Don't mock the session.request function  https://review.openstack.org/33364801:31
*** tqtran has quit IRC01:31
*** EinstCrazy has quit IRC01:33
*** jefrite has quit IRC01:34
openstackgerritJamie Lennox proposed openstack/keystoneauth: Don't mock the session.request function  https://review.openstack.org/33364801:34
*** EinstCrazy has joined #openstack-keystone01:45
*** TxGVNN has joined #openstack-keystone01:47
*** dave-mccowan has quit IRC01:56
*** woodster_ has quit IRC02:09
*** spandhe has quit IRC02:16
*** henrynash has joined #openstack-keystone02:22
*** ChanServ sets mode: +v henrynash02:22
*** tqtran has joined #openstack-keystone02:29
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Support local config options  https://review.openstack.org/32188202:32
openstackgerritgecong proposed openstack/keystone:   Fix some spelling mistakes in keystone     Donmain should be domain    prvider should be provider    boudary should be boundary    convesion should be conversion    inteface should be interface    projcets should be projects    sensistive should be sens  https://review.openstack.org/33365902:34
*** tqtran has quit IRC02:34
*** dave-mccowan has joined #openstack-keystone02:37
openstackgerritMerged openstack/keystone: exception sensitive cache/audit changes  https://review.openstack.org/27321802:43
*** gyee has quit IRC02:51
openstackgerritMerged openstack/keystoneauth: oidc: refactor unit tests  https://review.openstack.org/33096602:52
*** M00nr41n has joined #openstack-keystone02:53
openstackgerritSteve Martinelli proposed openstack/keystone: Fix a few spelling mistakes  https://review.openstack.org/33365902:53
*** spzala has quit IRC02:55
*** spzala has joined #openstack-keystone02:56
*** spzala has quit IRC02:56
*** spzala has joined #openstack-keystone02:56
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements  https://review.openstack.org/33342902:57
henrynashstevemar: ping03:11
stevemarhenrynash: pong03:11
stevemarhenrynash: whats going on there? i need to come rescue you?03:11
henrynashyeah, I know…going to hell in a handbasket (or whatever the expression is)03:12
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/33368303:12
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements  https://review.openstack.org/33342903:12
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/33343003:12
henrynashaway from crazy referendums…03:12
henrynashI noticed we merged: I noticed we merged https://review.openstack.org/#/c/314284/03:12
patchbothenrynash: patch 314284 - keystone - PCI-DSS Password SQL model changes (MERGED)03:12
henrynashthis will (I think) fail on a rolling upgrade (if you create a user before all servers are upgraded)03:13
stevemarhenrynash: yeah. i saw that merge today -- haven't have a chance to look at it -- was going to today03:13
stevemarhenrynash: oh? dammit03:13
stevemarhenrynash: what makes you say that03:13
stevemarmigration 105 looks okay03:13
stevemarcreate columns and set defaults for them03:14
henrynashso the created_at attrinute is non nullable…but old s/w won’t know about the attribute so won’t put anything in it03:14
henrynashahh, oops , sorry…loooks like we backed of that03:15
henrynashaorry, false alarm…Ron did do what I was suggesting and revert that part03:15
stevemarhenrynash: *phew*03:16
stevemarhenrynash: this part:  password_table.c.created_at.alter(nullable=False) ?03:16
henrynashdamn, gerrit….had realized I was looking at the older version!03:16
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/33344503:16
henrynashyep, that would have caused the issue03:16
stevemarhenrynash: good job catching the issue, did the unit test catch it?03:17
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/33344803:17
henrynashyes03:17
stevemarnice03:17
stevemarhenrynash: everything is peachy then, you can go back to your handbasket03:17
henrynashrather not...03:18
stevemarhenrynash: i didn't realize you guys had your own dtrump lookin figure up there :P03:18
stevemarhe's got the hair03:18
henrynashyep, he’s a piece of work03:18
henrynashactually that one is a smart guy, if a little wacky03:19
stevemari can always recommend you for canadian citizenship :P03:19
henrynashNIgel Farage is the one that a piece of work03:19
stevemarits just like living in the UK, only colder03:19
henrynashtime my tell, time may tell….03:19
*** rm_work has quit IRC03:22
*** rm_work has joined #openstack-keystone03:25
*** davechen has quit IRC03:25
*** spzala has quit IRC03:27
*** spzala has joined #openstack-keystone03:27
*** spzala has quit IRC03:27
*** spzala has joined #openstack-keystone03:28
*** richm has quit IRC03:28
*** rcernin has joined #openstack-keystone03:34
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Support local config options  https://review.openstack.org/32188203:42
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Use oslo.config fixture in audit tests  https://review.openstack.org/33371403:42
*** edtubill has joined #openstack-keystone03:50
*** edtubill has quit IRC03:58
*** sdake_ has joined #openstack-keystone04:00
*** sdake has quit IRC04:02
*** M00nr41n has quit IRC04:03
*** edtubill has joined #openstack-keystone04:08
*** markvoelker has quit IRC04:11
*** spzala has quit IRC04:15
*** GB21 has joined #openstack-keystone04:15
*** spzala has joined #openstack-keystone04:16
*** spzala has quit IRC04:20
*** david-lyle has quit IRC04:20
*** david-lyle has joined #openstack-keystone04:20
*** spandhe_ has joined #openstack-keystone04:20
*** sdake_ has quit IRC04:22
*** walharthi has joined #openstack-keystone04:30
*** tqtran has joined #openstack-keystone04:31
*** tqtran has quit IRC04:35
*** links has joined #openstack-keystone04:37
*** sdake has joined #openstack-keystone04:38
*** edtubill has quit IRC04:40
*** EinstCrazy has quit IRC04:40
*** edtubill has joined #openstack-keystone04:42
*** EinstCrazy has joined #openstack-keystone04:47
*** spandhe_ has quit IRC04:48
*** edtubill has quit IRC04:50
*** links has quit IRC04:50
*** edtubill has joined #openstack-keystone04:50
*** links has joined #openstack-keystone04:50
*** dave-mccowan has quit IRC04:50
*** spandhe has joined #openstack-keystone04:51
*** edtubill has quit IRC04:54
openstackgerritMerged openstack/keystone: Fix a few spelling mistakes  https://review.openstack.org/33365904:56
*** M00nr41n has joined #openstack-keystone05:04
*** GB21 has quit IRC05:05
*** edtubill has joined #openstack-keystone05:08
*** spandhe has quit IRC05:08
*** spandhe has joined #openstack-keystone05:09
*** julim has quit IRC05:10
*** markvoelker has joined #openstack-keystone05:11
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Pop oslo_config_config before doing paste convert  https://review.openstack.org/33373405:13
*** edtubill has quit IRC05:15
*** markvoelker has quit IRC05:16
openstackgerritMerged openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/33343005:17
*** edtubill has joined #openstack-keystone05:19
*** adu has quit IRC05:21
openstackgerritMerged openstack/keystoneauth: Updated from global requirements  https://review.openstack.org/33342905:23
*** links has quit IRC05:25
*** ramishra has joined #openstack-keystone05:27
ramishrahey guys it seems heat gate is broken by https://review.openstack.org/#/c/314284/05:28
patchbotramishra: patch 314284 - keystone - PCI-DSS Password SQL model changes (MERGED)05:28
ramishrahttp://logs.openstack.org/76/333676/1/check/gate-heat-dsvm-functional-orig-mysql-lbaasv2/516afaa/logs/apache/keystone.txt.gz?#_2016-06-24_03_34_02_27305:28
ramishrajamielennox: hi would you be able to have a look and confirm?05:29
*** edtubill has quit IRC05:30
*** sdake has quit IRC05:32
jamielennoxstevemar: ^05:34
*** sdake has joined #openstack-keystone05:34
*** rcernin has quit IRC05:35
*** links has joined #openstack-keystone05:39
*** ramishra has quit IRC05:42
jamielennoxi'm not entirely sure what's causing that, but i don't know the dss changes well05:43
*** sheel has quit IRC05:45
*** ramishra has joined #openstack-keystone05:47
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/33368305:49
*** walharthi has quit IRC05:56
*** josecastroleon has joined #openstack-keystone06:00
*** EinstCrazy has quit IRC06:02
*** GB21 has joined #openstack-keystone06:04
*** links has quit IRC06:05
*** spandhe has quit IRC06:06
*** edtubill has joined #openstack-keystone06:08
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Use oslo.config fixture in audit tests  https://review.openstack.org/33371406:11
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Support local config options  https://review.openstack.org/32188206:11
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Move audit into its own folder  https://review.openstack.org/33375506:11
*** rcernin has joined #openstack-keystone06:11
*** GB21 has quit IRC06:12
*** edtubill has quit IRC06:12
*** markvoelker has joined #openstack-keystone06:13
*** ramishra has quit IRC06:16
openstackgerritJamie Lennox proposed openstack/keystoneauth: Don't mock the session.request function  https://review.openstack.org/33364806:16
*** EinstCrazy has joined #openstack-keystone06:16
*** ramishra has joined #openstack-keystone06:17
*** markvoelker has quit IRC06:17
*** links has joined #openstack-keystone06:18
*** ramishra has quit IRC06:22
*** davechen has joined #openstack-keystone06:23
*** ramishra has joined #openstack-keystone06:27
*** ramishra has quit IRC06:28
*** ramishra has joined #openstack-keystone06:31
ramishrajamielennox, stevemar: Should we wait for a quick fix/revert for the issue? Else we would have to disable the relevant failing tests.06:31
*** tqtran has joined #openstack-keystone06:32
jamielennoxramishra: i'm going to have to pass this one off, we can do a quick revert particularly if other services are affected06:32
jamielennoxramishra: but i'd also really like to know what is causing it06:33
openstackgerrityangweiwei proposed openstack/keystone: Error in get revoke_list  https://review.openstack.org/33376506:33
jamielennoxit looks like something is creating a user without a password?06:33
jamielennoxor something..06:33
jamielennoxi'm not sure06:33
ramishrajamielennox: I had the same unserstanding, what heat is trying is to disable and existing user, but this seems to be trying to insert a row in the password table with None value.06:35
ramishras/and/an06:35
*** tqtran has quit IRC06:37
*** links has quit IRC06:37
*** GB21 has joined #openstack-keystone06:43
openstackgerrityangweiwei proposed openstack/keystone: Error in get revoke_list  https://review.openstack.org/33376506:44
*** links has joined #openstack-keystone06:49
jamielennoxstevemar: can you make sure to get on this early tomorrow?06:53
jamielennoxron isn't online06:54
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Use createfile fixture in audit test  https://review.openstack.org/33377506:56
*** tesseract- has joined #openstack-keystone06:57
*** jbell8 has joined #openstack-keystone07:03
*** yolanda has joined #openstack-keystone07:04
*** jbell8 has quit IRC07:05
*** jbell8 has joined #openstack-keystone07:06
*** sdake_ has joined #openstack-keystone07:12
*** markvoelker has joined #openstack-keystone07:13
*** jbell8 has quit IRC07:14
*** sdake has quit IRC07:15
*** EinstCrazy has quit IRC07:17
*** markvoelker has quit IRC07:19
*** EinstCrazy has joined #openstack-keystone07:20
*** jbell8 has joined #openstack-keystone07:20
*** ebarrera has joined #openstack-keystone07:22
*** EinstCrazy has quit IRC07:27
*** EinstCrazy has joined #openstack-keystone07:28
*** EinstCrazy has quit IRC07:28
*** EinstCrazy has joined #openstack-keystone07:29
*** EinstCrazy has quit IRC07:29
*** amoralej|off is now known as amoralej07:29
*** jbell8 has quit IRC07:30
*** jbell8 has joined #openstack-keystone07:31
*** jbell8 has quit IRC07:32
*** jbell8 has joined #openstack-keystone07:32
*** pnavarro has joined #openstack-keystone07:37
*** ramishra has quit IRC07:37
*** EinstCra_ has joined #openstack-keystone07:38
*** ramishra has joined #openstack-keystone07:38
*** EinstCrazy has joined #openstack-keystone07:40
*** EinstCra_ has quit IRC07:43
*** EinstCra_ has joined #openstack-keystone07:43
*** EinstCrazy has quit IRC07:44
*** josecastroleon has quit IRC07:45
*** josecastroleon has joined #openstack-keystone07:48
*** EinstCrazy has joined #openstack-keystone07:49
*** EinstCra_ has quit IRC07:50
*** ramishra has quit IRC07:50
*** ramishra has joined #openstack-keystone07:51
*** EinstCra_ has joined #openstack-keystone07:54
*** EinstCrazy has quit IRC07:54
*** rcernin has quit IRC07:59
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** pnavarro has quit IRC08:00
*** sdake_ has quit IRC08:02
*** davechen has left #openstack-keystone08:04
*** EinstCra_ has quit IRC08:04
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
*** EinstCrazy has joined #openstack-keystone08:12
*** pnavarro has joined #openstack-keystone08:13
*** dmk0202 has joined #openstack-keystone08:17
*** pnavarro has quit IRC08:17
*** daemontool has joined #openstack-keystone08:17
*** ramishra has quit IRC08:20
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: WIP - oidc: fix OpenID Connect authorization code grant_type  https://review.openstack.org/33000608:27
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: move scope into _OidcBase  https://review.openstack.org/33046308:27
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: add discovery document support  https://review.openstack.org/33046408:27
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: remove grant_type argument  https://review.openstack.org/33046508:27
*** ramishra has joined #openstack-keystone08:30
*** GB21 has quit IRC08:45
*** d0ugal has quit IRC08:46
*** d0ugal has joined #openstack-keystone08:46
*** d0ugal has quit IRC08:46
*** d0ugal has joined #openstack-keystone08:46
*** ramishra has quit IRC09:01
*** ramishra has joined #openstack-keystone09:03
*** jbell8 has quit IRC09:12
*** spzala has joined #openstack-keystone09:16
*** markvoelker has joined #openstack-keystone09:16
*** markvoelker has quit IRC09:20
*** spzala has quit IRC09:21
*** nisha_ has joined #openstack-keystone09:23
nisha_Hey all :)09:40
*** fawadkhaliq has joined #openstack-keystone09:42
*** fawadkhaliq has quit IRC09:42
*** ramishra has quit IRC09:45
*** nisha__ has joined #openstack-keystone09:50
*** ramishra has joined #openstack-keystone09:52
*** henrynash has quit IRC09:54
*** markvoelker has joined #openstack-keystone09:54
*** nisha_ has quit IRC09:55
*** rmizuno has quit IRC09:59
*** nisha__ is now known as nisha_09:59
*** pcaruana has joined #openstack-keystone10:09
*** ramishra has quit IRC10:13
*** ramishra has joined #openstack-keystone10:13
alogajamielennox: are you around?10:22
*** ramishra has quit IRC10:30
*** ramishra has joined #openstack-keystone10:30
*** josecastroleon has quit IRC10:33
*** nisha_ has quit IRC10:43
*** nisha_ has joined #openstack-keystone10:43
*** EinstCrazy has quit IRC10:48
*** TxGVNN has quit IRC10:48
*** nisha_ has quit IRC10:53
*** nisha_ has joined #openstack-keystone10:54
*** ramishra has quit IRC11:01
*** ramishra has joined #openstack-keystone11:02
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: WIP - oidc: fix OpenID Connect authorization code grant_type  https://review.openstack.org/33000611:07
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: move scope into _OidcBase  https://review.openstack.org/33046311:07
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: add discovery document support  https://review.openstack.org/33046411:07
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix OpenID Connect scope option  https://review.openstack.org/33326111:07
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: remove grant_type argument  https://review.openstack.org/33046511:07
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: add tests for plugin loader  https://review.openstack.org/33385011:07
*** ramishra has quit IRC11:14
*** M00nr41n has quit IRC11:20
*** josecastroleon has joined #openstack-keystone11:22
*** bjornar_ has joined #openstack-keystone11:30
*** ramishra has joined #openstack-keystone11:32
*** tqtran has joined #openstack-keystone11:34
stevemarjamielennox: on it11:34
stevemardolphm: heads up about https://bugs.launchpad.net/bugs/1595819 i subbed you and ron11:35
openstackLaunchpad bug 1595819 in heat "functional.test_autoscaling.AutoScalingSignalTest failure" [High,New]11:35
*** nisha_ has quit IRC11:36
*** ramishra has quit IRC11:36
*** nisha_ has joined #openstack-keystone11:37
*** bjornar_ has quit IRC11:39
*** tqtran has quit IRC11:39
*** nisha_ has quit IRC11:39
*** samueldmq has joined #openstack-keystone11:45
*** ChanServ sets mode: +v samueldmq11:45
samueldmqmorning11:45
*** nisha_ has joined #openstack-keystone11:51
*** ddieterly has joined #openstack-keystone11:53
*** bjornar_ has joined #openstack-keystone11:54
*** ddieterly has quit IRC11:59
*** rcernin has joined #openstack-keystone12:04
*** ddieterly has joined #openstack-keystone12:11
*** dave-mccowan has joined #openstack-keystone12:13
alogahi samueldmq12:25
samueldmqaloga: hi12:26
*** ddieterly has quit IRC12:26
*** hughsaunders has left #openstack-keystone12:31
stevemargood evening aloga :)12:36
alogastevemar: afternoon ;)12:36
stevemarso close!12:36
alogahehe12:36
*** gordc has joined #openstack-keystone12:37
*** khmcgill has joined #openstack-keystone12:37
khmcgillCan anyone tell me if there is special permissions or scenario needed to make this API call? http://developer.openstack.org/api-ref-identity-v3.html#listUsers12:37
khmcgillIt fails for me even as 'admin' user in 'Default' domain12:37
samueldmqbrb12:41
*** samueldmq has quit IRC12:41
*** alex_xu has quit IRC12:46
*** ddieterly has joined #openstack-keystone12:46
alogakhmcgill: I guess so https://github.com/openstack/keystone/blob/master/etc/policy.json#L4512:46
*** alex_xu has joined #openstack-keystone12:48
khmcgillhmm but I do have an admin role12:48
khmcgillScenario is, 2 Domains: Default and Test-Domain. Test-Domain is configured to use LDAP12:49
khmcgillwhat impacts could/would that have?12:50
*** samueldmq has joined #openstack-keystone12:54
*** ChanServ sets mode: +v samueldmq12:54
samueldmqkhmcgill: did you get help about the permissions you were asking for ?12:55
*** nisha__ has joined #openstack-keystone12:55
samueldmq(I had to go afk)12:55
samueldmqstevemar: o/12:55
*** edmondsw has joined #openstack-keystone12:55
khmcgillaloga pointed me to this https://github.com/openstack/keystone/blob/master/etc/policy.json#L45 which states to make the list-users call I want I need to be an admin however I am making the api calls as admin so i'm stil confused by this one12:57
khmcgillalso, i have 2 Domains: Default and Test-Domain. Test-Domain is configured to use LDAP. I didn't configure the setup and am not a keystone expert so I'm not sure what the impact that makes12:58
*** nisha_ has quit IRC12:58
khmcgillbefore changing the setup and there was only 1 'Default' domain,...that api call worked12:58
khmcgillnow it doesn't12:58
khmcgillnot matter what I get a 40112:59
*** nisha__ is now known as nisha_13:00
*** links has quit IRC13:00
*** darosale has joined #openstack-keystone13:00
*** ddieterly has quit IRC13:02
*** dave-mccowan has quit IRC13:08
*** spzala has joined #openstack-keystone13:17
*** sdake has joined #openstack-keystone13:21
*** spzala has quit IRC13:21
*** richm has joined #openstack-keystone13:22
*** amoralej is now known as amoralej|lunch13:29
*** kfox1111_away is now known as kfox111113:29
*** dmk0202 has quit IRC13:31
*** ddieterly has joined #openstack-keystone13:33
*** woodster_ has joined #openstack-keystone13:37
*** dave-mccowan has joined #openstack-keystone13:39
*** dmellado_ is now known as dmellado13:40
*** ddieterly is now known as ddieterly[away]13:40
*** rderose has joined #openstack-keystone13:40
*** dave-mcc_ has joined #openstack-keystone13:40
*** spzala has joined #openstack-keystone13:40
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add project functional tests  https://review.openstack.org/33287113:42
*** dave-mccowan has quit IRC13:44
openstackgerritSteve Martinelli proposed openstack/keystonemiddleware: use local config options if available in audit middleware  https://review.openstack.org/32188213:47
*** nisha_ has quit IRC13:47
*** ddieterly[away] is now known as ddieterly13:47
openstackgerritSteve Martinelli proposed openstack/keystonemiddleware: Move audit into its own folder  https://review.openstack.org/33375513:47
*** cleong has joined #openstack-keystone13:51
*** walharthi has joined #openstack-keystone13:58
*** khmcgill has quit IRC13:59
*** ametts has joined #openstack-keystone14:00
*** afred312 has quit IRC14:05
openstackgerritRon De Rose proposed openstack/keystone: Fixes failure when password is null  https://review.openstack.org/33391914:07
openstackgerritRon De Rose proposed openstack/keystone: Fixes failure when password is null  https://review.openstack.org/33391914:07
*** bjornar_ has quit IRC14:12
stevemarrderose: do you know why the column was made not nullable in 105?14:14
*** julim has joined #openstack-keystone14:16
openstackgerritSteve Martinelli proposed openstack/keystonemiddleware: Use createfile fixture in audit test  https://review.openstack.org/33377514:17
openstackgerritSteve Martinelli proposed openstack/keystonemiddleware: Use createfile fixture in audit test  https://review.openstack.org/33377514:18
rderosestevemar: it wasn't made not nullable in 105, actually in 9014:18
rderosestevemar: in the sql model changes we're now keeping a history of passwords, which caused the error14:20
rderosestevemar: however, I'm sure we had a test for this, looking into that now14:20
*** amoralej|lunch is now known as amoralej14:22
stevemarrderose: if it happened in 90 that would mean mitaka has the bug too14:23
stevemarbut only exposed if using multiple passwords14:23
rderosestevemar: no, because we only set a single password14:23
stevemarrderose: isn't that what i said :)14:23
stevemarrderose: i suppose that is where the "conflict" comes from? we're setting multiple things to null?14:24
rderosestevemar: :)14:24
*** tonytan4ever has joined #openstack-keystone14:24
rderosestevemar: didn't see your 2nd comment14:24
rderosestevemar: in mitaka, I'm checking for null password and not saving if null.  Whereas, now with multiple passwords, I removed the check and set the password regardless if null.14:26
rderosestevemar: totally forgot that, that column was not nullable14:26
stevemarmitaka should be fine, even newton-1 is fine14:26
rderosestevemar: yeah14:26
*** nisha_ has joined #openstack-keystone14:36
stevemarrderose: ksc gate is also affected: http://logs.openstack.org/48/333448/2/check/gate-keystoneclient-dsvm-functional/e73b0f4/testr_results.html.gz14:37
rderosestevemar: okay14:38
stevemarrderose: just an fyi14:38
rderosestevemar: thx, dam14:39
*** KevinE has joined #openstack-keystone14:40
*** KevinE has quit IRC14:41
*** KevinE has joined #openstack-keystone14:41
rderosestevemar: btw we do have tests for this, but because nullable wasn't set in the sql model for password, it defaults to nullable14:44
rderosestevemar: https://github.com/openstack/keystone/blob/master/keystone/identity/backends/sql_model.py#L15714:44
*** julim has quit IRC14:44
rderosestevemar: anyway, setting the password column to nullable will fix this14:44
dstanekwow, test_backend_ldap is crazy14:46
*** dave-mcc_ has quit IRC14:48
*** jefrite has joined #openstack-keystone14:51
*** dan_nguyen has joined #openstack-keystone14:52
*** timcline has joined #openstack-keystone14:55
*** raddaoui has joined #openstack-keystone14:57
*** ddieterly is now known as ddieterly[away]14:58
*** dave-mccowan has joined #openstack-keystone15:02
*** josecastroleon has quit IRC15:02
*** lucas____ has joined #openstack-keystone15:02
*** lucas____ has quit IRC15:02
*** kfox1111 is now known as kfox1111_away15:07
edmondswdstanek yeah it is15:10
dstanekedmondsw: i'm trying to get some of my old cleanup patches/stashes to apply and i'm not having fun15:11
*** tesseract- has quit IRC15:12
*** ebarrera has quit IRC15:12
*** nisha_ has quit IRC15:16
*** tonytan4ever has quit IRC15:19
stevemarbknudson_: dstanek want to chime in on this: https://review.openstack.org/#/c/333490/1/ -- i'm on the fence for it15:22
patchbotstevemar: patch 333490 - keystone - Do not spam the log with uncritical stacktraces15:22
stevemari wanted a few other opinions before pushing15:22
dstanekstevemar: looking...15:22
stevemardstanek: it's more of an opinion than a fix :)15:22
dstanekstevemar: we are logging stacktraces?15:22
dstanekoh, not for just error auths... hmmm15:23
*** d0ugal has quit IRC15:25
*** spandhe has joined #openstack-keystone15:26
*** jbell8 has joined #openstack-keystone15:27
*** spandhe_ has joined #openstack-keystone15:29
dstanekstevemar: generally i'm OK with not doing a traceback, but i'm not sure about all the extra warnings in there15:29
dstanekwill a deployer really care that a user specified a project/domain scope and it wasn't found?15:30
*** spandhe has quit IRC15:30
*** spandhe_ is now known as spandhe15:30
stevemardstanek: probably not15:32
*** ddieterly[away] is now known as ddieterly15:32
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Change password requirements  https://review.openstack.org/33336015:33
dstanekstevemar: the logging hints are also wrong too15:35
*** pushkaru has joined #openstack-keystone15:35
*** tqtran has joined #openstack-keystone15:36
*** darosale has quit IRC15:37
*** sdake has quit IRC15:38
*** sdake has joined #openstack-keystone15:38
*** sdake has quit IRC15:38
*** sdake has joined #openstack-keystone15:38
*** pcaruana has quit IRC15:38
*** rcernin has quit IRC15:39
*** tqtran has quit IRC15:40
*** roxanaghe has joined #openstack-keystone15:41
*** roxanaghe has quit IRC15:42
stevemardstanek: want to look at this chain from jamie: https://review.openstack.org/#/c/333714/ :)15:48
patchbotstevemar: patch 333714 - keystonemiddleware - Use oslo.config fixture in audit tests15:48
*** real56 has joined #openstack-keystone15:48
dstanekstevemar: sure. i'll look in a few. once i start a full test run15:49
stevemardanke15:50
*** itisha has quit IRC15:50
*** daemontool_ has joined #openstack-keystone15:52
*** walharthi has quit IRC15:54
*** daemontool has quit IRC15:54
*** walharthi has joined #openstack-keystone15:54
*** ddieterly is now known as ddieterly[away]15:55
*** alex_xu has quit IRC15:55
*** ddieterly[away] is now known as ddieterly15:58
*** alex_xu has joined #openstack-keystone15:58
*** henrynash has joined #openstack-keystone16:00
*** ChanServ sets mode: +v henrynash16:00
henrynashhi…hello from the Internation Space Station, to where I have now relocated16:02
*** spandhe has quit IRC16:04
*** spandhe has joined #openstack-keystone16:07
dstanekhenrynash: you killed by 401k16:08
*** kfox1111_away is now known as kfox111116:09
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Change password requirements  https://review.openstack.org/33336016:11
*** henrynash has quit IRC16:12
*** rderose has quit IRC16:13
*** roxanaghe has joined #openstack-keystone16:16
*** nisha_ has joined #openstack-keystone16:17
*** spandhe has quit IRC16:19
samueldmqnisha_: I am still not sure what's causing the issue there16:20
*** shaleh has joined #openstack-keystone16:20
samueldmqnisha_: but I left a suggestion there, try it locally and see if it works16:21
nisha_samueldmq, sure i will try16:21
*** TxGVNN has joined #openstack-keystone16:21
*** rderose has joined #openstack-keystone16:29
*** dan_nguyen has quit IRC16:32
*** alex_xu has quit IRC16:32
*** dmk0202 has joined #openstack-keystone16:34
*** alex_xu has joined #openstack-keystone16:35
*** pushkaru has quit IRC16:37
*** ddieterly has quit IRC16:44
*** dan_nguyen has joined #openstack-keystone16:45
*** rderose_ has joined #openstack-keystone16:46
nisha_samueldmq, still getting the same error16:47
nisha_samueldmq, any other test that can verify the same idea?16:47
nisha_samueldmq, I mean any other approach we can use16:48
*** rderose has quit IRC16:49
*** pgbridge has joined #openstack-keystone16:52
samueldmqnisha_: don't know yet16:53
samueldmqlooking again16:53
*** BjoernT has joined #openstack-keystone16:53
stevemarhenrynash_: ya dun caused ibm to fall like a sack of bricks: https://www.google.com/finance?q=NYSE%3AIBM&ei=mmVtV8jEC9afjAGZ-ov4CQ16:54
samueldmqnisha_: oh I got it16:55
samueldmqnisha_: for subtree and parents as ids you still need to do that change we discussed16:56
nisha_samueldmq, getting project type object?16:57
samueldmqnisha_: see my comments inline16:57
samueldmqnisha_: this is a great benefit of these tests .... subtree_as_list and parents_as_list aren't documented at all in the client16:58
samueldmqand their behavior of only returning the proejcts the current user has access to is not obvious/intuitive at all16:59
samueldmqstevemar:  ^16:59
samueldmq:)16:59
nisha_samueldmq, interesting :D17:01
samueldmqnisha_: does that make sense ? we'll also need to update the docs, because we haven't included that info about those options17:02
openstackgerritDolph Mathews proposed openstack/keystone: Replace keystone.common.config with keystone.conf package  https://review.openstack.org/32560417:02
dolphmstevemar: being super massive and touching nearly every file in keystone... think we could merge this over the weekend while the gate is quiet before i have to rebase it? :P ^^17:03
samueldmqdolphm: wow that's huge17:04
nisha_samueldmq, but then why does the get call, doesn't have an attribute named user for specifying the current user17:04
nisha_samueldmq, Is this what I need to update?17:04
*** TxGVNN has quit IRC17:05
samueldmqno17:05
samueldmqnisha_: see my comments to the _as_ids test17:05
samueldmqnisha_: apply it and verify it works17:05
samueldmqnisha_: for the other tests, there is something called role assignment you need to know17:05
samueldmqnisha_: other tests = _as_list test17:06
nisha_samueldmq, I don't know how to add role assignments for a project17:07
*** sdake_ has joined #openstack-keystone17:07
dolphmsamueldmq: stevemar: i'm leaving some review comments to highlight the interesting bits of the change that are worth reviewing. most of the patch was made with sed / awk17:07
dstanekdolphm: is your patch all done now?17:07
samueldmqnisha_: I will tell you how to do it :)17:07
dolphmand lots of vim macros17:07
samueldmqnisha_: have you fixed the _ids test already?17:08
dolphmdstanek: it passes pep8 and py27 on my box17:08
samueldmqdolphm: nice17:08
dolphmhoping it'll pass jenkins by end of day, if we don't approve a merge conflict :P17:08
nisha_samueldmq, no not yet, one min plz17:08
nisha_samueldmq, will reconnect to IRC17:08
*** nisha_ has quit IRC17:09
dstanekdolphm: k... if you don't expect many changes i'm going rebase a long chain to test changes on top of it17:09
*** nisha_ has joined #openstack-keystone17:09
*** sdake has quit IRC17:09
samueldmqdolphm: it's just splitting the huge config file, and updating imports right ?17:10
nisha_samueldmq, done17:11
samueldmqnisha_: cool, so role assignments is what give users permissions on resources17:12
nisha_samueldmq, hmm17:12
samueldmqnisha_: a role assignment is composed by: a role assigned to an actor (user or group) on a resource (domain or project)17:12
samueldmqnisha_: so you have role + user + project, in that case17:13
dolphmdstanek: stevemar: samueldmq: just posted lots of inline comments posted to help reviewers navigate the diff17:14
dolphmsamueldmq: there's a few other small changes noted - mostly moving code and changing the way keystone.conf is initialized (options are registered on import automatically)17:14
nisha_samueldmq, ++ understood so far17:14
* dolphm running to lunch17:15
*** jed56 has quit IRC17:15
*** dmk0202 has quit IRC17:15
*** catintheroof has joined #openstack-keystone17:16
*** dmk0202 has joined #openstack-keystone17:16
samueldmqdolphm: nice, I saw your comments.. the change looks neat at a glance, I am running tests locally17:17
samueldmqnisha_: cool, so you will basically have to have a role fixture too in that change :)17:18
samueldmqnisha_: I just left another comment there explaining what's necessary17:21
*** roxanaghe has quit IRC17:24
*** roxanaghe has joined #openstack-keystone17:24
stevemardolphm: i'll look at it soon17:24
stevemardolphm: i was waiting f or it to passjenkins17:24
* notmorgan lurks off in the corner now that stevemar is back.17:25
stevemarnotmorgan: when was i gone :P17:26
stevemarnotmorgan: go work on zuul v3, we don't want you here!17:26
stevemarjust kidding, we love you17:26
notmorganstevemar: fine17:26
*** notmorgan has left #openstack-keystone17:26
*** notmorgan has joined #openstack-keystone17:26
notmorgan:P17:26
stevemarnotmorgan: we'll page you when we have caching questions lol17:27
notmorganstevemar: rm -rf keystone/common/cache17:27
notmorganclearly the right answer17:27
stevemar:)17:28
nisha_samueldmq, I will try running it17:28
*** tqtran has joined #openstack-keystone17:30
*** henrynash has joined #openstack-keystone17:30
*** ChanServ sets mode: +v henrynash17:30
*** GB21 has joined #openstack-keystone17:30
*** nisha__ has joined #openstack-keystone17:30
nisha__samueldmq, why do we have to write self.assertItemsEqual([parent_project.id], project_ret.parents) in test_get_hierarchy_as_ids17:33
nisha__samueldmq, but parent_project.entity in test_get_hierarchy_as_list17:33
*** nisha_ has quit IRC17:33
samueldmqnisha__: ah that's a good quesiton!17:34
*** daemontool_ has quit IRC17:34
samueldmqnisha__: parents_as_list returns a list of the full representation of parent projects, as you were doing a get(parent.id)17:35
samueldmqnisha__: so it requires you to have assignments on those projects (because it may contain not public information in the name/description or extras!)17:35
*** dmk0202 has quit IRC17:35
samueldmqnisha__: on the other hand, parents_as_ids returns only the ids, so that's not an issue17:36
*** roxanaghe has quit IRC17:38
*** woodster_ has quit IRC17:39
*** dmk0202 has joined #openstack-keystone17:39
nisha__samueldmq, nice, thanks17:41
samueldmqnisha__: are my comments in the review clear ? It shouldn't be too much effort to get that done :)17:41
*** roxanaghe has joined #openstack-keystone17:42
nisha__samueldmq, yeah, test_get_hierarchy_as_ids is successfully running now17:42
samueldmqnisha__: nice!17:42
nisha__samueldmq, the other test as_list is throwing an exception17:43
nisha__namely role not found17:43
samueldmqnisha__: can you paste it ?17:43
nisha__yeah, one sec17:43
samueldmqnisha__: did you see my comments ? you need to create a role fixture, etc17:43
nisha__samueldmq, in the client_fixtures.py?17:44
samueldmqnisha__: yes17:44
samueldmqnisha__: role is an entity as any other, you need fixture and instantiate it in the tests, i left a suggestion in the test17:44
samueldmqnisha__: on how to instantiate the role and create the role assignment (grant)17:44
nisha__samueldmq, I will do that17:44
nisha__samueldmq, got confused looking at this, role = fixtures.Project(self.client)17:45
nisha__it should be role = fixtures.Role(self.client) ?17:45
samueldmqnisha__: yes, you just -1'ed my suggestion17:45
samueldmqnisha__: indeed it should be fixtures.Role, sorry17:45
nisha__samueldmq, np, so, I will work on this, give me 5-10 min17:46
samueldmqnisha__: sure, take your time17:46
openstackgerritMerged openstack/keystonemiddleware: Use oslo.config fixture in audit tests  https://review.openstack.org/33371417:48
*** dan_nguyen has quit IRC17:57
*** henrynash has quit IRC17:57
openstackgerritMerged openstack/keystonemiddleware: use local config options if available in audit middleware  https://review.openstack.org/32188217:59
*** real56 has quit IRC18:01
*** walharthi has quit IRC18:01
nisha__samueldmq, getting a different error18:02
stevemardstanek: the patch chain isn't done :O18:02
nisha__samueldmq, will paste the code as well18:02
dstanekstevemar: :-P18:02
stevemardstanek: oh nice, the one above it is already approved18:02
dstaneki'm looking at 333755 now18:03
stevemaryou get a +3, -4 change18:03
dstanekstevemar: yep18:03
*** openstackgerrit has quit IRC18:03
*** openstackgerrit has joined #openstack-keystone18:03
dstanekstevemar: i'm reviewing while i wait for my tests to complete18:03
stevemardstanek: you run a lot of tests18:03
*** rderose has joined #openstack-keystone18:03
dstanekstevemar: yup18:03
dstanekactually the chain i'm rebasing should cut the execution time down by about 30%18:04
nisha__samueldmq, please look http://paste.openstack.org/show/522013/18:04
*** sdake_ has quit IRC18:04
*** nisha__ is now known as nisha_18:04
stevemardstanek: rumor has it lebron was a good football player and wanted to play for the browns18:04
*** rderose_ has quit IRC18:04
stevemardstanek: basically, i'm saying, there exists an alternate universe where the browns just won the superbowl18:05
dstanekstevemar: there was a similar rumor about Jordan and baseball :-) and look how that turned out18:05
samueldmqnisha_: do you know what's wrong there ?18:05
samueldmqnisha_: look at the types it's comparing18:05
stevemarnisha_: samueldmq btw there is a failure in ksc functional tests failure cause of bug 159581918:06
openstackbug 1595819 in OpenStack Identity (keystone) "cannot create (or set) a user with no password" [Critical,In progress] https://launchpad.net/bugs/1595819 - Assigned to Ron De Rose (ronald-de-rose)18:06
nisha_samueldmq, oooh18:06
nisha_samueldmq, but then how were you creating users using fixtures18:07
*** jbell8 has quit IRC18:08
samueldmqstevemar: thanks, looks like rderose is on it, I will review it !18:08
samueldmqnisha_: it's about the type that comes in project_ret.parents18:08
samueldmqnisha_: it is a dict representing a project, rather than keystoneclient.v3.projects.Project18:09
nisha_stevemar, thanks18:09
nisha_so, (project_ret.id).parents18:09
samueldmqnisha_: no18:10
nisha_samueldmq, hmm, we already use self.client.projects.get18:11
nisha_:(18:11
samueldmqnisha_: it's not about the way you get things18:11
samueldmqnisha_: it's just the comparison that is wrong18:11
rderosesamueldmq: thanks18:11
samueldmqrderose: we introduced a regression right ?18:11
rderosesamueldmq: a regression?18:12
samueldmqrderose: that behavior was right before from what I can see18:12
samueldmqrderose: so we introduced a bug18:13
rderosesamueldmq: this patch introduced the bug: https://review.openstack.org/#/c/314284/18:13
patchbotrderose: patch 314284 - keystone - PCI-DSS Password SQL model changes (MERGED)18:13
rderosesamueldmq: specifically, in the sql_model code where we set the password18:14
rderosesamueldmq: previously, I was checking if the password value was null and if so, not setting it18:14
rderosesamueldmq: in the latest patch, we're supporting multiple passwords for password history validation18:15
rderosesamueldmq: in that code, I removed checking if the value was null and instead, create a new password entry regardless if null or not18:16
samueldmqrderose: ah so it was skipping the passwd entry creation18:16
rderosesamueldmq: mistakenly forgot the password column was not nullable (and it should be)18:16
rderosesamueldmq: correct18:16
nisha_samueldmq, should i try converting the dict in a project?18:17
samueldmqrderose: commented on that patch18:17
nisha_to*18:17
samueldmqnisha_: or the opposite :)18:17
samueldmqnisha_: you got it !18:17
nisha_samueldmq, oki18:17
rderosesamuelmq: we already have a test for this18:18
rderosesamueldmq: ^18:18
samueldmqnisha_: you can do <project>.to_dict() for the <project> that is of the type keystoneclient.v3.projects.Project18:18
samueldmqnisha_: because it inherits from this base class that implements a to_dict mehtod https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/base.py#L532-L53318:19
nisha_samueldmq, thank you, that should run the test I guess18:19
rderosesamueldmq: it passed because the sql_model did not set the nullable attribute for the password column, so defaulted to nullable18:19
samueldmqrderose: so why didn't it fail ?18:19
samueldmqrderose: do we have a _v3 test for that ?18:19
samueldmqnisha_: so you will be comparing python dicts18:19
samueldmq:)18:19
rderosesamueldmq: it's under test_backend_sql18:20
rderosesamueldmq: https://github.com/openstack/keystone/blob/master/keystone/tests/unit/test_backend_sql.py#L22918:21
rderosesamueldmq: https://github.com/openstack/keystone/blob/master/keystone/tests/unit/test_backend_sql.py#L23918:21
rderosesamueldmq: because the sql_model already allows the password column to be nullable, these tests are correct now18:22
samueldmqrderose: if the tests were passing with the bug, then they're not protecting us from that bug18:24
*** GB21 has quit IRC18:24
samueldmqrderose: we need tests to shield us against that issue coming again18:24
rderosesamueldmq: good point18:24
ayoungstevemar, notmorgan, when did we kill the Keystone client CLI?18:24
samueldmqayoung: this cycle ? https://github.com/openstack/python-keystoneclient/blob/master/releasenotes/notes/remove_cli-d2c4435ba6a09b79.yaml18:25
*** ntpttr has joined #openstack-keystone18:30
samueldmqrderose: I am not getting why those tests were not failing18:30
*** seldenr has joined #openstack-keystone18:30
rderosesamueldmq: because in the sql_model, there wasn't a nullable attribute set on the password column, so it defaulted to nullable = true18:32
rderosehttps://github.com/openstack/keystone/blob/master/keystone/identity/backends/sql_model.py#L15718:32
seldenrHi All - I was looking at https://bugs.launchpad.net/keystone/+bug/1244423 and noticed it doesn't seem to be an issue anymore. Does anyone have any objections to closing it? See my comment on launchpad - two other patches added checks for this issue18:32
openstackLaunchpad bug 1244423 in OpenStack Identity (keystone) "Inconsistency in the keystone api "enabled" field" [Wishlist,Triaged]18:32
rderosesamueldmq: but in the migration (90 I think) it was set to false18:32
rderosesamueldmq: adding a test for this now18:33
rderosesamueldmq: for the migration18:33
samueldmqrderose: I got it, I mean now18:33
samueldmqrderose: right now, it isn't possible to create/update a user who has no passwd18:33
samueldmqrderose: right ?18:34
rderosesamueldmq: right18:34
samueldmqrderose: so why are those tests passing on master?18:34
dstanekdolphm: we need to get your patch through just so that i don't ever have to see it again :-)18:34
roxanaghedolphm: can you please review this stable/mitaka backport: https://review.openstack.org/#/c/332956/?18:35
patchbotroxanaghe: patch 332956 - keystone (stable/mitaka) - /services?name=<name> API fails when using list_limit18:35
samueldmqroxanaghe: we need a keystone stable core to approve that18:36
samueldmqroxanaghe: perhaps bknudson_ or dolphm18:36
*** rfinn has joined #openstack-keystone18:36
roxanaghesamueldmq: I thougt dolphm enters that category18:36
dstanekyou guys seem to be talking right past each other18:37
nisha_samueldmq, the second list contains an extra {u'project':  in the beginning of list18:37
rderosesamueldmq: hmm...  let me test something out and get back to you18:38
samueldmqrderose: sure, but you got my point right ?18:38
samueldmqnisha_: can you paste it ?18:38
samueldmqnisha_: but the elements in the first list inside a {''project": } too18:39
notmorganayoung: uhmmm... 3.0?18:39
rderosesamueldmq: yeah, it must be that the model is overriding the nullable setting, but should still fail...18:39
nisha_samueldmq, http://paste.openstack.org/show/522021/18:39
notmorganayoung: whenever that was released.18:39
ayoungnotmorgan, was that Mitaka or after?18:39
samueldmqnisha_: so yes, add {'proejct':....} to the first18:39
samueldmqnisha_: so it will look like : {'project': <my_project>.to_dict()}18:40
samueldmqnisha_: something like that18:40
nisha_samueldmq, I was trying to do it, give me some hint?18:40
samueldmqnisha_: this ^18:40
notmorganuhmmmmmmmmmm........18:40
nisha_samueldmq, thanks18:40
notmorganayoung: i dunno i have to go look. sec18:40
*** openstackstatus has quit IRC18:40
*** openstack has joined #openstack-keystone18:41
samueldmqayoung: notmorgan: I think it was removed this cycle (Newton) https://github.com/openstack/python-keystoneclient/blob/master/releasenotes/notes/remove_cli-d2c4435ba6a09b79.yaml18:41
notmorganayoung: post mitaka18:41
samueldmqrelease note says it was deprecated in LIberty18:41
notmorganayoung: http://releases.openstack.org/mitaka/index.html18:41
*** openstackstatus has joined #openstack-keystone18:42
*** ChanServ sets mode: +v openstackstatus18:42
nisha_samueldmq, finally :)18:42
nisha_samueldmq, uploading the patch again. Thank you so much18:43
openstackgerritRon De Rose proposed openstack/keystone: Fixes failure when password is null  https://review.openstack.org/33391918:45
samueldmqnisha_: yw, you're doing an excellent job18:45
nisha_samueldmq, should I add any other comments in the test_projects.py18:45
nisha_samueldmq, or should I create follow up patch for the projects doc18:46
samueldmqnisha_: create a followup18:47
samueldmqdstanek: did you see my comment in https://review.openstack.org/#/c/325604/8/keystone/assignment/V8_backends/sql.py?18:47
patchbotsamueldmq: patch 325604 - keystone - Replace keystone.common.config with keystone.conf ...18:47
samueldmqnotice I appended ? at the end :/18:47
samueldmqappended/added18:48
samueldmqdstanek: is there any convention on doing 'from keystone import config' VS 'import keystone.config' ?18:48
dstaneksamueldmq: for this patch here there osm18:50
dstanekisn't any difference18:50
dstanekthe main benefit is keystone.conf is clearer than conf in the rest of the code18:50
samueldmqcool, I agree18:50
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add project functional tests  https://review.openstack.org/33287118:52
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Complete RBAC in keystone  https://review.openstack.org/32532618:52
rderosesamueldmq: it looks like the model is overriding the nullable setting when the tests; again, migration nullable was false, but model nullable is true18:57
samueldmqnisha_: see minor comments inline18:57
nisha_samueldmq, sure18:57
notmorganoh wow, alembic is so much easier to work with than SQL-A Migrate18:58
rderosesamueldmq: if in the model, I set nullable to False, the tests fail18:58
notmorganit really should be easy to convert keystone over :P18:58
rderosesamueldmq: I added a migration test btw18:58
samueldmqrderose: so your migration broke the behavior ?18:59
samueldmqrderose: but the model was kept right ?18:59
samueldmqrderose: this way old deployments that go through the migration process break, but master don't ?18:59
rderosesamueldmq: the password setter broke the behavior because it allowed null values18:59
rderosesamueldmq: yeah, if the model is different than the migration, bugs could slip through19:01
*** rvba has quit IRC19:02
rderosesamueldmq: and again, if you change the model to match the migration, the tests fail19:03
*** sdake has joined #openstack-keystone19:03
samueldmqrderose: can you point me to where the migration changed the password to be not nullable ?19:03
samueldmqrderose: (the migration that introduced the bug)19:03
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Complete RBAC in keystone  https://review.openstack.org/32532619:04
rderosesamueldmq: migration: https://github.com/openstack/keystone/blob/master/keystone/common/sql/migrate_repo/versions/090_add_local_user_and_password_tables.py#L4119:05
rderosesamueldmq: model: https://github.com/openstack/keystone/blob/master/keystone/identity/backends/sql_model.py#L15719:05
rderosesamueldmq: you'll notice the model doesn't set nullable, but by default nullable is set to true19:06
samueldmqrderose: in the model, nullable=True is the default right ?19:06
rderosesamueldmq: right19:06
samueldmqrderose: because it isn't explicitly set19:06
samueldmqrderose: cool19:06
samueldmqrderose: gotcha19:06
*** amakarov is now known as amakarov_away19:06
rderosesamueldmq: yeah, missed on my part19:07
samueldmqrderose: if we had a test to make sure the results of our migrations match with our current model19:07
samueldmqrderose: this kind of bug could be avoided19:07
rderosesamueldmq: yeah, we need that19:07
openstackgerritMerged openstack/keystonemiddleware: Move audit into its own folder  https://review.openstack.org/33375519:08
nisha_samueldmq, adding this comment,  # Only parents and subtree projects that the current user or group has19:09
nisha_        # role assingments on are returned.19:09
samueldmqrderose: could you confirm those things on the patch (I left comments)19:10
samueldmqrderose: so it's clear for others too19:10
openstackgerritMerged openstack/keystonemiddleware: Use createfile fixture in audit test  https://review.openstack.org/33377519:10
rderosesamueldmq: sure19:10
samueldmqnisha_:  doesn't need  "or group"19:10
samueldmqnisha_: it's just user in that case19:10
nisha_samueldmq, but we could have done this using a group instead of user too, right?19:11
samueldmqnisha_: yes, but you'd need to add the user to the group first19:11
samueldmqnisha_: and then create the role assignment for the group, instead of the user19:12
nisha_samueldmq, hmm, right19:12
samueldmqnisha_: but yes, that's correct19:12
samueldmqrderose: could you also expand on the commit message what was creating the issue ?19:13
rderosesamueldmq: yes19:14
samueldmqrderose: (the fact the migration had turned that to nullable=False, while in the model it was true, so our tests running on master were passing)19:14
samueldmqrderose: nice, +2 after that, thnaks19:14
rderosesamueldmq: perfect19:14
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add project functional tests  https://review.openstack.org/33287119:18
samueldmqnisha_: one more minor comment19:21
samueldmqnisha_: and should be a +2 :D19:21
nisha_samueldmq, sure19:21
nisha_:)19:21
*** velopez has joined #openstack-keystone19:22
openstackgerritRon De Rose proposed openstack/keystone: Fixes failure when password is null  https://review.openstack.org/33391919:23
rderosesamueldmq: ^19:23
dstanek'git rebase -R' is what you use when you put your crap on somebody else's crap and don't want to push an update of theirs right?19:26
*** nisha__ has joined #openstack-keystone19:26
samueldmqrderose: done, thanks you did a great job addressing this quickly19:26
samueldmqstevemar: I am fine with https://review.openstack.org/#/c/333919/19:27
patchbotsamueldmq: patch 333919 - keystone - Fixes failure when password is null19:27
rderosesamueldmq: thanks :)19:28
*** nisha_ has quit IRC19:28
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add project functional tests  https://review.openstack.org/33287119:28
shalehdstanek: I do not see -R as an option to rebase in my help19:29
samueldmqnisha__: just in the case you wonder why there is no need to self.addCleanup for the role assignments19:29
rderosesamueldmq: perfect description of the bug in launchpad19:30
samueldmqnisha__: they're deleted when the project is deleted :)19:30
samueldmqautomatically19:30
dstanekshaleh: crap....i meant git review19:30
*** nisha__ has quit IRC19:30
shalehdstanek: ah, yes the -R aka no rebase option is what you want19:30
*** nisha__ has joined #openstack-keystone19:30
samueldmqrderose: glad you liked it :) I wanted to make it very clear what was the issue happening19:31
dstanekshaleh: that's what i thought.....i think i was doing something wrong because now it appears to be working19:31
shalehdstanek: extra annoyance. You have to use it every single time you invoke review19:31
*** ametts has quit IRC19:31
openstackgerritDavid Stanek proposed openstack/keystone: Removes outdate comment from a test  https://review.openstack.org/33405619:31
openstackgerritDavid Stanek proposed openstack/keystone: Allow auth plugins to be setup more than once  https://review.openstack.org/33405719:31
openstackgerritDavid Stanek proposed openstack/keystone: Moves auth plugin test setup closer to its use  https://review.openstack.org/33405819:31
openstackgerritDavid Stanek proposed openstack/keystone: Remove unused test code  https://review.openstack.org/33405919:31
openstackgerritDavid Stanek proposed openstack/keystone: Adds a backend test fixture  https://review.openstack.org/33406019:31
openstackgerritDavid Stanek proposed openstack/keystone: Group test_backend_ldap skips for readability  https://review.openstack.org/33406119:31
openstackgerritDavid Stanek proposed openstack/keystone: Reduce domain specific config setup duplication  https://review.openstack.org/33406219:31
openstackgerritDavid Stanek proposed openstack/keystone: Extracted common ldap setup from the filter tests  https://review.openstack.org/33406319:31
openstackgerritDavid Stanek proposed openstack/keystone: Removes duplicate ldap test setup  https://review.openstack.org/33406419:31
samueldmqdstanek: wow19:32
dstanekstevemar: round 1 ^   that decreases a full test run by about 22% for me19:32
shalehdstanek: sweet19:32
samueldmqdstanek: unit tests 22% faster ?19:33
dstanekshaleh: i've got another 20% coming soon19:33
dstaneksamueldmq: yes19:33
nisha__samueldmq, done :)19:33
dstaneksome of it is that i'm not runn duplicate tests, but the vast majority is that i reduced the duplicate setup19:34
shalehdstanek: yeah, setup() is the killer. Good that you kept up with it.19:34
dstanekobviously the % will vary across other developer's environments, but i'm seeing this http://paste.openstack.org/show/522029/19:34
samueldmqdstanek: taht's great19:35
dstanekok, off the to the gym for a super late lunch. my arms aren't going to work themselves out19:35
*** sdake has quit IRC19:36
*** woodster_ has joined #openstack-keystone19:36
*** sdake has joined #openstack-keystone19:36
*** rfinn has quit IRC19:39
samueldmqdstanek: bon apetit19:43
*** dave-mcc_ has joined #openstack-keystone19:43
*** dave-mccowan has quit IRC19:46
*** nisha__ has quit IRC19:47
*** dave-mccowan has joined #openstack-keystone19:48
*** nisha_ has joined #openstack-keystone19:48
openstackgerritMerged openstack/keystoneauth: Don't mock the session.request function  https://review.openstack.org/33364819:50
*** dave-mcc_ has quit IRC19:50
*** rfinn has joined #openstack-keystone19:50
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Follow up patch for Improve docs for v3 projects  https://review.openstack.org/33407119:53
nisha_samueldmq, ^ please19:54
samueldmqnisha_: on it19:55
nisha_samueldmq, cool19:55
samueldmqnisha_: see comment19:57
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Follow up patch for Improve docs for v3 projects  https://review.openstack.org/33407120:06
nisha_samueldmq, ^20:10
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Change password requirements  https://review.openstack.org/33336020:11
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Change password requirements  https://review.openstack.org/33336020:11
samueldmqnisha_: just a nit (role assignments on)20:11
nisha_samueldmq, sure20:12
samueldmqnisha_: I can do it for you if you want20:12
nisha_samueldmq, np20:12
openstackgerritDolph Mathews proposed openstack/keystone: Fix nits related to the new keystone.conf package  https://review.openstack.org/33408020:12
nisha_samueldmq, you looking it is enough for me :)20:12
dolphmsamueldmq: dstanek: fixed nits in https://review.openstack.org/#/c/334080/ -- anything holding us back from merging https://review.openstack.org/#/c/325604/ ?20:13
patchbotdolphm: patch 334080 - keystone - Fix nits related to the new keystone.conf package20:13
patchbotdolphm: patch 325604 - keystone - Replace keystone.common.config with keystone.conf ...20:13
*** velopez has quit IRC20:14
nisha_samueldmq, It only includes the projects in which the current user has role assignments on.20:14
samueldmqdolphm: done20:14
samueldmqnisha_: works for me20:14
nisha_samueldmq, cool20:14
samueldmqnisha_: yes I agree even minor changes are better to let you do, since you keep practicing20:15
samueldmqnisha_: I normally update myself when there is already a +2 and it's a nit, so we cna quickly fix it and approve20:15
*** dave-mcc_ has joined #openstack-keystone20:15
samueldmqnisha_: but yes, you're on it :)20:15
nisha_samueldmq, hmm20:16
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Follow up patch for Improve docs for v3 projects  https://review.openstack.org/33407120:17
*** dave-mccowan has quit IRC20:17
nisha_samueldmq, actually, in most cases, I have observed that, you often point out at things where I have a doubt already. I should ask on IRC first maybe20:17
nisha_samueldmq, like I was having doubt here too, with 'on' thing, but I thought it won't be required because of 'in' before20:18
nisha_samueldmq, anyways, hope it looks good now20:18
samueldmqnisha_: well, I don't know, maybe it was better before, let's see what others think about it (that was just my view)20:19
nisha_samueldmq, np :)20:19
nisha_samueldmq, so, I guess we are nearly done with projects, right?20:19
samueldmqnisha_: LGTM thanks20:19
samueldmqnisha_: yes20:19
samueldmqnisha_: you're doing an awesome job, congrats20:20
samueldmqnisha_: have a nice weekend20:20
nisha_samueldmq, so I will start with roles next week?20:20
samueldmqnisha_: sure20:20
samueldmq!20:20
nisha_samueldmq, thanks ,wish you and all the the same20:20
samueldmqnisha_: thanks20:20
*** dave-mccowan has joined #openstack-keystone20:20
samueldmqhave a good weekend keystone20:21
*** samueldmq has quit IRC20:21
nisha_the channel keeps busy on weekdays :D20:21
*** velopez has joined #openstack-keystone20:22
*** nisha_ has quit IRC20:23
*** dave-mcc_ has quit IRC20:23
*** sdake has quit IRC20:26
*** cleong has quit IRC20:31
*** roxanaghe has quit IRC20:39
*** rvba has joined #openstack-keystone20:45
*** rvba has quit IRC20:45
*** rvba has joined #openstack-keystone20:45
*** dmk0202 has quit IRC20:46
*** shaleh has quit IRC20:47
*** velopez has quit IRC20:47
*** rfinn has quit IRC20:53
dstanekdolphm: awesome...looking20:57
dstanekpep8: i hate you21:00
openstackgerritDavid Stanek proposed openstack/keystone: Extracted common ldap setup from the filter tests  https://review.openstack.org/33406321:10
openstackgerritDavid Stanek proposed openstack/keystone: Reduce domain specific config setup duplication  https://review.openstack.org/33406221:10
openstackgerritDavid Stanek proposed openstack/keystone: Group test_backend_ldap skips for readability  https://review.openstack.org/33406121:10
openstackgerritDavid Stanek proposed openstack/keystone: Adds a backend test fixture  https://review.openstack.org/33406021:10
openstackgerritDavid Stanek proposed openstack/keystone: Removes duplicate ldap test setup  https://review.openstack.org/33406421:10
*** jbell8 has joined #openstack-keystone21:20
*** Ephur has quit IRC21:21
*** Ephur has joined #openstack-keystone21:21
dstanekif anyone has the time i'd love to see how the test improvements work in your dev environment21:23
*** Ephur has quit IRC21:23
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Change password requirements  https://review.openstack.org/33336021:26
stevemardolphm: hooooly mackerel21:29
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Change password requirements  https://review.openstack.org/33336021:30
*** jbell8 has quit IRC21:50
*** jbell8 has joined #openstack-keystone21:51
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Change password requirements  https://review.openstack.org/33336021:53
*** roxanaghe has joined #openstack-keystone21:56
*** roxanaghe has quit IRC21:56
*** roxanaghe has joined #openstack-keystone21:59
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Password expires validation  https://review.openstack.org/33336022:01
dstanekstevemar: ?22:01
*** rderose has quit IRC22:08
*** spzala has quit IRC22:13
*** spzala has joined #openstack-keystone22:14
*** rdo has quit IRC22:14
*** rdo has joined #openstack-keystone22:16
*** BjoernT has quit IRC22:17
*** harlowja has quit IRC22:17
*** spzala has quit IRC22:18
*** catintheroof has quit IRC22:18
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Password expires validation  https://review.openstack.org/33336022:22
stevemardstanek: che pasa22:29
*** harlowja has joined #openstack-keystone22:30
*** edmondsw has quit IRC22:32
*** timcline has quit IRC22:40
*** spzala has joined #openstack-keystone22:44
openstackgerritSam Leong proposed openstack/keystoneauth: Auth plugin for X.509 tokenless authentication  https://review.openstack.org/28390522:47
*** spzala has quit IRC22:49
*** KevinE has quit IRC22:53
*** gordc has quit IRC22:55
*** BjoernT has joined #openstack-keystone22:58
*** rvba has quit IRC22:58
*** spzala has joined #openstack-keystone23:00
*** BjoernT_ has joined #openstack-keystone23:00
*** BjoernT has quit IRC23:01
*** markvoelker has quit IRC23:01
*** markvoelker has joined #openstack-keystone23:02
openstackgerritMerged openstack/keystone: Replace keystone.common.config with keystone.conf package  https://review.openstack.org/32560423:06
*** itlinux has quit IRC23:09
openstackgerritMerged openstack/keystone: Fix nits related to the new keystone.conf package  https://review.openstack.org/33408023:12
*** jbell8 has quit IRC23:13
*** jbell8 has joined #openstack-keystone23:15
*** pgbridge has quit IRC23:20
*** BjoernT_ is now known as BjoernT23:21
*** markvoelker has quit IRC23:26
*** seldenr has quit IRC23:30
*** jbell8 has quit IRC23:37
*** jbell8 has joined #openstack-keystone23:39
*** roxanaghe has quit IRC23:46
*** woodster_ has quit IRC23:49
*** adam_g has quit IRC23:50
*** sdake has joined #openstack-keystone23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!