Monday, 2016-07-11

*** ddieterly has joined #openstack-keystone00:00
*** sdake has joined #openstack-keystone00:09
*** itisha has quit IRC00:10
*** sdake_ has quit IRC00:11
*** spzala has joined #openstack-keystone00:12
*** ddieterly has quit IRC00:13
*** spzala_ has joined #openstack-keystone00:19
*** spzala has quit IRC00:22
*** sdake_ has joined #openstack-keystone00:26
*** sdake has quit IRC00:29
*** spzala_ has quit IRC00:43
*** adu has quit IRC01:03
*** roxanaghe has joined #openstack-keystone01:17
*** roxanaghe has quit IRC01:22
*** wangqun has joined #openstack-keystone01:39
*** ddieterly has joined #openstack-keystone01:41
*** tqtran has joined #openstack-keystone01:42
*** EinstCrazy has joined #openstack-keystone01:43
*** tqtran has quit IRC01:46
openstackgerritAndrew Liu proposed openstack/keystone: Added cache for id mapping manager  https://review.openstack.org/32882001:46
*** M00nr41n has joined #openstack-keystone01:47
*** ozialien10 has quit IRC01:49
*** ozialien10 has joined #openstack-keystone01:49
*** code-R has quit IRC01:51
*** code-R has joined #openstack-keystone01:51
*** ddieterly has quit IRC01:56
*** clenimar_ has quit IRC01:56
*** clenimar_ has joined #openstack-keystone01:56
*** saphi has joined #openstack-keystone02:13
*** code-R has quit IRC02:15
*** iurygregory has quit IRC02:22
*** shaleh has quit IRC02:24
*** davechen has joined #openstack-keystone02:24
*** ddieterly has joined #openstack-keystone02:26
*** ddieterly has quit IRC02:31
*** sdake_ is now known as sdake02:35
saphihi everyone. I'm writen a Dockerfile to install keystone mitaka from source. But when I run it, I type `openstack user list` it has a error, And keystone-error.log here http://pastebin.com/9XNsJ3KP02:53
jamielennoxsaphi: i have seen that before and it generally means your imports are wrong - which is weird if it's a source install02:57
jamielennoxsaphi: what's the dockerfile look liek?02:57
saphihi jamielennox. Here is my Dockerfile: http://pastebin.com/nRw8MGyw03:01
*** clenimar_ has quit IRC03:08
*** roxanaghe has joined #openstack-keystone03:10
jamielennoxsaphi: so this is a bit of a guess, i would recommend you clone openstack/requirements for stable/mitaka as well03:15
jamielennoxsaphi: and then instead of python setup.py install do pip install -c requirements/global-requirements.txt03:17
jamielennoxi'm guessing, but possibly based on where the failure is happening a newer version of oslo.service is registering options that weren't around at the stable/mitaka timeframe03:17
jamielennoxso the options are trying to be registered twice03:18
saphiafter I installed global-requirement.txt I have to install keystone by using python setup.py install03:19
jamielennoxsaphi: i would always recommend installing all openstack services with the -c global-requirements.txt flag to pip. that way you're going to install the exact same dependency versions as are tested upstream03:19
jamielennoxpip install . will also install from the current directory03:19
jamielennoxin this case as well because its pip it will resolve its dependencies and you shouldn't need to do pip install -r requirements as a seperate step03:20
saphiI will rewrite Dockerfile and test. thankyou03:20
jamielennoxsaphi: no worries - come back and tell me how it went, as mentioned it's a bit of a guess03:21
*** julim has quit IRC03:22
saphiYes. I'm building. I have worked with this many days but I can't still solve it03:25
*** TxGVNN has joined #openstack-keystone03:27
saphihi jamielennox. When I build image, use pip install -r global-requirements.txt It has a problem. here. http://pastebin.com/7SrG6f5g03:44
jamielennoxsaphi: ok so -c and -r are different things03:44
jamielennox-r is install all the things mentioned in this list03:45
jamielennox-c is if you go to install a package make sure it's the version specified in this file03:45
saphiI'm wrong. I type pip install -c global-requirements.txt03:45
jamielennoxso by specifying -c you aren't going to install everything listed in that file, it's just the versions that may be installed03:45
jamielennoxso you still need to do pip install -c global-requirements.txt <somepackage>03:45
saphiwhat packages I have to install03:46
jamielennoxand <somepackage> and all its dependencies will be installed with the version listed in global-requirements.txt. Does that make sense?03:46
jamielennoxsaphi: you can just do /path/to/keystone and it should be sufficient03:46
jamielennoxbut in general just include the -c global-requirements.txt everywhere you call pip03:47
openstackgerritAndrew Liu proposed openstack/keystone: Added cache for id mapping manager  https://review.openstack.org/32882003:47
*** davechen has left #openstack-keystone03:50
*** code-R has joined #openstack-keystone03:53
*** M00nr41n has quit IRC03:59
*** code-R_ has joined #openstack-keystone04:06
*** code-R has quit IRC04:10
*** dims has quit IRC04:11
saphihi jamielennox I still can't solve that problem04:14
jamielennoxsaphi: damn, i had good feelings about that one. same error?04:14
saphidid you try install it?04:15
*** code-R_ has quit IRC04:20
*** code-R has joined #openstack-keystone04:20
jamielennoxsaphi: i'm currently on mobile data at a cafe - that would probably kill my data for the month04:21
*** roxanaghe has quit IRC04:22
*** roxanaghe has joined #openstack-keystone04:25
jamielennoxalso its still missing a keystone.conf and some other stuff from your install04:26
jamielennox(could probably fake that out)04:27
*** GB21 has joined #openstack-keystone04:33
saphihi jamielennox. My repo on github: https://github.com/greatbn/Docker/tree/master/keystone04:35
jamielennoxsaphi: ok, i can give it a run when i get back later04:35
saphijamielennox. Yes. thanks a lot04:37
*** sdake has quit IRC04:43
*** M00nr41n has joined #openstack-keystone04:51
*** sheel has joined #openstack-keystone05:10
*** pcaruana has quit IRC05:17
*** dims has joined #openstack-keystone05:26
*** sdake has joined #openstack-keystone05:31
*** sdake has quit IRC05:33
*** jamielennox is now known as jamielennox|away05:34
*** roxanaghe has quit IRC05:37
*** saphi has quit IRC05:39
*** spzala has joined #openstack-keystone05:43
*** tqtran has joined #openstack-keystone05:44
*** spzala has quit IRC05:47
*** tqtran has quit IRC05:48
*** jamielennox|away is now known as jamielennox05:50
keanhi   anyone k know what problem with error message :'NoneType' object has no attribute 'service_catalog'  when  execute:  openstack --os-auth-url http://controller:5000/v3 \06:10
kean  --os-project-domain-name default --os-user-domain-name default \06:10
kean  --os-project-name demo --os-username demo token issue06:10
keanthe controller is my server ip06:11
*** rcernin has joined #openstack-keystone06:22
keanAnyone can help me ? I noticed the openstack-keystone daemon can't be start wit error message:2016-07-11 14:19:48.417 18026 ERROR keystone error: [Errno 98] Address already06:47
*** pcaruana has joined #openstack-keystone06:51
*** saphi has joined #openstack-keystone06:55
*** tesseract- has joined #openstack-keystone07:08
saphihi jamielennox . are you there?07:08
jamielennoxsaphi: yep07:08
saphidid you try my Dockerfile :D07:08
jamielennoxsaphi: i did, i kept getting apache segfaults07:09
saphihmm. are you using docker-compose?07:10
jamielennoxyep, reverting my few changes just to show you what i'm running07:14
saphiCan you make it run?07:15
saphiI build image and run success, but I can't use it.07:16
jamielennoxsaphi: this is my current diff http://paste.openstack.org/show/529573/07:17
jamielennoxi see the migrations run07:18
jamielennoxand hang after keystone_1  | [i] Starting daemon... so trying to start apache07:19
*** code-R has quit IRC07:21
saphiyes. when you see "keystone_1  | [i] Starting daemon...", and that container is running, it is running. Do you try with admin_token to create user?07:21
jamielennoxi can't connect07:21
jamielennoxalso i guess i expected to see logs from the tail07:21
saphiyes. :D/. what logs do you get?07:21
jamielennoxAH00052: child pid 76 exit signal Segmentation fault (11)07:22
*** GB21 has quit IRC07:29
saphijamielennox you can docker-compose rm -f and docker-compose up07:38
*** tqtran has joined #openstack-keystone07:46
*** tqtran has quit IRC07:50
*** GB21 has joined #openstack-keystone07:51
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** jistr has quit IRC08:06
*** jistr has joined #openstack-keystone08:07
*** pnavarro has joined #openstack-keystone08:08
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
*** jistr has quit IRC08:11
*** jistr has joined #openstack-keystone08:11
*** mvk has joined #openstack-keystone08:15
*** pnavarro has quit IRC08:31
*** hoonetorg has quit IRC08:48
*** jed56 has joined #openstack-keystone09:14
openstackgerritMikhail Nikolaenko proposed openstack/python-keystoneclient: [WIP] Fill Client parameters when using session  https://review.openstack.org/33915009:16
*** sileht has quit IRC09:18
*** sileht has joined #openstack-keystone09:19
*** code-R has joined #openstack-keystone09:21
*** bjornar_ has joined #openstack-keystone09:21
*** code-R has quit IRC09:26
openstackgerritlilintan proposed openstack/pycadf: Don't include openstack/common in flake8 exclude list  https://review.openstack.org/34026609:30
*** spzala has joined #openstack-keystone09:44
*** spzala has quit IRC09:48
*** GB21 has quit IRC09:48
*** aurelien__ has joined #openstack-keystone09:53
*** GB21 has joined #openstack-keystone10:04
*** GB21 has quit IRC10:19
*** rodrigods has quit IRC10:21
*** rodrigods has joined #openstack-keystone10:21
*** EinstCrazy has quit IRC10:27
*** wangqun has quit IRC10:29
openstackgerrithuyupeng proposed openstack/keystone: Fixes Bug1600725  https://review.openstack.org/34029310:30
openstackgerrithenry-nash proposed openstack/keystone: Move logic for catalog driver differences to manager  https://review.openstack.org/34013210:46
*** tqtran has joined #openstack-keystone10:48
openstackgerritMikhail Nikolaenko proposed openstack/python-keystoneclient: [WIP] Fill Client parameters when using session  https://review.openstack.org/33915010:51
*** tqtran has quit IRC10:52
*** GB21 has joined #openstack-keystone10:54
*** TxGVNN has quit IRC10:55
*** jrist_ has joined #openstack-keystone10:57
*** saphi has quit IRC11:01
*** jrist_ has quit IRC11:04
*** sigmavirus_away is now known as sigmavirus11:14
*** jrist_ has joined #openstack-keystone11:15
*** sdake has joined #openstack-keystone11:19
*** jrist_ has quit IRC11:20
*** jrist_ has joined #openstack-keystone11:20
*** jrist_ has quit IRC11:20
*** code-R has joined #openstack-keystone11:22
*** code-R has quit IRC11:27
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [resource] documentation  https://review.openstack.org/33672811:27
*** gordc has joined #openstack-keystone11:31
*** mvk has quit IRC11:34
*** jed56 has quit IRC11:35
*** nisha has joined #openstack-keystone11:36
*** nisha is now known as Guest2211211:36
*** Guest22112 is now known as nisha_11:36
*** sdake has quit IRC11:48
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [revoke] documentation  https://review.openstack.org/33673111:56
*** ddieterly has joined #openstack-keystone11:58
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [os_inherit] documentation  https://review.openstack.org/33667611:59
*** raildo-afk is now known as raildo11:59
*** ddieterly has quit IRC12:03
*** jrist_ has joined #openstack-keystone12:04
*** mvk has joined #openstack-keystone12:07
*** iurygregory has joined #openstack-keystone12:08
* nisha_ waves hello12:16
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add region functional tests  https://review.openstack.org/33915812:23
*** pauloewerton has joined #openstack-keystone12:35
*** GB21 has quit IRC12:37
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [ldap] documentation  https://review.openstack.org/33671912:40
*** wangqun has joined #openstack-keystone12:40
*** ddieterly has joined #openstack-keystone12:41
*** spzala has joined #openstack-keystone12:42
*** spzala has quit IRC12:46
*** ddieterly has quit IRC12:46
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [role] documentation  https://review.openstack.org/34035112:47
*** tqtran has joined #openstack-keystone12:50
*** pnavarro has joined #openstack-keystone12:51
*** tqtran has quit IRC12:54
*** wangqun has quit IRC12:55
*** ddieterly has joined #openstack-keystone12:59
*** TxGVNN has joined #openstack-keystone13:00
*** itisha has joined #openstack-keystone13:03
*** nk2527 has quit IRC13:07
*** markvoelker has joined #openstack-keystone13:08
*** ddieterly is now known as ddieterly[away]13:12
*** ddieterly[away] has quit IRC13:12
*** julim has joined #openstack-keystone13:13
*** spzala has joined #openstack-keystone13:14
*** david-lyle has quit IRC13:15
*** M00nr41n has quit IRC13:23
*** code-R has joined #openstack-keystone13:23
*** markvoelker has quit IRC13:27
*** code-R has quit IRC13:27
*** woodster_ has joined #openstack-keystone13:39
*** EinstCrazy has joined #openstack-keystone13:41
*** rderose has joined #openstack-keystone13:46
*** ddieterly has joined #openstack-keystone13:47
*** sdake has joined #openstack-keystone13:48
*** sdake_ has joined #openstack-keystone13:49
*** sdake has quit IRC13:49
*** ddieterly is now known as ddieterly[away]13:50
*** ddieterly[away] is now known as ddieterly13:50
*** code-R has joined #openstack-keystone13:51
*** jaugustine has joined #openstack-keystone13:52
*** code-R_ has joined #openstack-keystone13:56
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 endpoints  https://review.openstack.org/33946813:57
*** code-R has quit IRC13:58
*** ddieterly is now known as ddieterly[away]14:01
*** markvoelker has joined #openstack-keystone14:02
*** sheel has quit IRC14:06
*** tonytan4ever has joined #openstack-keystone14:07
*** markvoelker has quit IRC14:07
*** bjornar_ has quit IRC14:10
*** rderose has quit IRC14:12
*** ddieterly[away] is now known as ddieterly14:14
*** ravelar159 has joined #openstack-keystone14:14
*** ravelar159 has quit IRC14:15
*** ravelar159 has joined #openstack-keystone14:15
*** ravelar159 has quit IRC14:16
*** ravelar_159 has joined #openstack-keystone14:16
*** markvoelker has joined #openstack-keystone14:17
*** markvoelker has quit IRC14:23
*** ivasilevskaya has joined #openstack-keystone14:26
*** timburke has quit IRC14:29
*** charz has quit IRC14:29
*** hugokuo has quit IRC14:29
*** slberger has joined #openstack-keystone14:30
*** charz has joined #openstack-keystone14:31
ivasilevskayaHi all! I'm trying to deploy devstack with python3.4 following the manual https://wiki.openstack.org/wiki/Python3#Enable_Python_3_in_DevStack), but stack.sh terminated with keystone error :14:32
ivasilevskayaCRITICAL keystone [-] ImportError: No module named 'memcache' (more logs here http://paste.openstack.org/show/529680/).14:32
ivasilevskayaI've spent some time figuring out what's the matter but didn't get far. However, after installing libpython3-dev things changed a bit - the error transferred to http://paste.openstack.org/show/529710/.14:32
ivasilevskayaLocalrc - http://paste.openstack.org/show/529714/14:32
ivasilevskayaAny ideas what I am doing wrong?14:32
*** rderose has joined #openstack-keystone14:33
dstanekivasilevskaya: it looks like memcache isn't being installed for some reason14:33
*** EinstCrazy has quit IRC14:34
*** hugokuo has joined #openstack-keystone14:34
*** EinstCrazy has joined #openstack-keystone14:34
ivasilevskayadstanek: I double checked, it is installed by pip14:35
ivasilevskayadev-user@iv-devstack:~/devstack$ pip3.4 freeze | grep memcached14:35
ivasilevskayapython-memcached==1.5814:35
*** EinstCrazy has quit IRC14:35
*** TxGVNN has quit IRC14:36
dstanekivasilevskaya: have you tried to manually import it to see if there's errors?14:37
*** nkinder has joined #openstack-keystone14:37
*** TxGVNN has joined #openstack-keystone14:37
*** timburke has joined #openstack-keystone14:38
ivasilevskayadstanek: memcache is successfully imported http://paste.openstack.org/show/529718/14:38
ivasilevskayaI can file a bug, just wanted to check that it's something non-trivial and well known as I've never deployed devstack with python3 before14:39
dstanekivasilevskaya: i've never actually run keystone with Python3 through devstack14:39
ivasilevskayadstanek: I'll file a bug then. Thank you!14:41
*** samueldmq has joined #openstack-keystone14:47
*** ChanServ sets mode: +v samueldmq14:47
*** sdake_ has quit IRC14:47
samueldmqmorning keystone14:48
knikolla\o14:48
knikollabreton: hi14:48
*** markvoelker has joined #openstack-keystone14:48
*** ivasilevskaya has left #openstack-keystone14:49
*** ivasilevskaya has joined #openstack-keystone14:49
dstanekgood afternoon samueldmq14:50
knikollai wish it was afternoon here, monday mornings are the worst14:50
samueldmqknikolla: breton: dstanek: o/14:50
*** nkinder has quit IRC14:53
lbragstaddoes anyone know how our keystone-coverage-db job differs from out gate-keystone-python27-job?14:55
lbragstadour*14:55
stevemaro/14:55
lbragstadstevemar o/14:55
stevemarlbragstad: the coverage job should report back what is actally covered14:55
* lbragstad stevemar hmm - i'm trying to figure out why the python27 job passes here but the coverage job fails... https://review.openstack.org/#/c/334673/14:56
patchbotlbragstad: patch 334673 - keystone - Allow id string validation to be configurable14:56
lbragstadsince ^ closes a bug14:56
*** phalmos has joined #openstack-keystone15:00
*** KevinE has joined #openstack-keystone15:01
dstaneklbragstad: are you seeing an issue with the coverage job?15:02
lbragstaddstanek yeah - I pushed  a few patches last week so that we could do configurable validation of id strings15:03
lbragstaddstanek on Friday afternoon I got everything passing locally and squared away - but the coverage job doesn't seem to be happy?15:04
dstaneklbragstad: link?15:04
lbragstadhttps://review.openstack.org/#/c/334673/15:04
patchbotlbragstad: patch 334673 - keystone - Allow id string validation to be configurable15:04
*** bjornar_ has joined #openstack-keystone15:05
dstaneklbragstad: looks odd. have you run it locally?15:06
lbragstaddstanek yep - i just pulled it down and ran it locally15:06
lbragstadit passed15:06
lbragstadso i just issued a recheck on it15:07
* lbragstad grabs at straws... 15:07
*** david-lyle has joined #openstack-keystone15:07
dstaneklbragstad: that's strange. all coverage should do it run profiling and capture what code was actually executed. shouldn't impact runtiem15:07
lbragstadi also wasn't aware of coverage being a voting job?15:08
lbragstadunless it isn't and it just failed for an arbitrary reason?15:08
*** richm has joined #openstack-keystone15:10
stevemarever wanted to give the keystone project an animal mascot/15:13
stevemar?15:13
stevemarnows your chance!15:13
stevemarhttp://www.openstack.org/project-mascots15:13
stevemarleave suggestions here: https://etherpad.openstack.org/p/keystone-mascot15:13
dstanekstevemar: does this count? http://previews.123rf.com/images/enjoylife25/enjoylife251107/enjoylife25110700005/9993678-Funny-image-of-a-young-gorilla-sticking-up-its-middle-finger-Stock-Photo.jpg15:14
*** pcaruana has quit IRC15:15
lbragstadyes15:15
lbragstad+215:15
stevemarlol15:15
stevemaryou can ask for it!15:15
*** gagehugo has joined #openstack-keystone15:23
*** diazjf has joined #openstack-keystone15:23
*** david-lyle has quit IRC15:27
*** KevinE has quit IRC15:27
dstanekstevemar: i've been told that's what it's like to federate with keystone15:29
*** aastha has joined #openstack-keystone15:29
dstanekinteresting doc bug https://bugs.launchpad.net/keystone/+bug/159926015:29
openstackLaunchpad bug 1599260 in oslosphinx "Old version information should be configurable" [Undecided,New]15:29
*** nisha_ has quit IRC15:33
*** rderose_ has joined #openstack-keystone15:34
*** nisha_ has joined #openstack-keystone15:34
dstanekivasilevskaya: do you think that's a keystone problem and not a devstack problem?15:34
*** rderose has quit IRC15:35
stevemardstanek: well we gotta make it not so terrible!15:37
dstanekstevemar: my preferred fix there is to fix oslosphinx i think, but i didn't bother to look at what other projects are doing15:38
dstanekstevemar: lol, they are all broken http://docs.openstack.org/developer/nova/15:38
dstaneki'm going to work on a fix today i think15:38
stevemardstanek: from http://developer.openstack.org/api-ref.html click on baremetal15:39
stevemarit's the same as ours15:39
dstanekstevemar: yeah, i think all projects are broken. i think think we actually publish old docs like that15:40
openstackgerritMerged openstack/pycadf: Don't include openstack/common in flake8 exclude list  https://review.openstack.org/34026615:46
*** phalmos has quit IRC15:47
*** phalmos has joined #openstack-keystone15:48
stevemardstanek: pretty sure the fix is oslosphinx related15:51
dstanekstevemar: yeah, that's what i'm poking at15:52
*** tqtran has joined #openstack-keystone15:52
*** browne has joined #openstack-keystone15:55
*** tqtran has quit IRC15:56
*** jmlowe has quit IRC16:01
*** ravelar_159 has quit IRC16:01
*** KevinE has joined #openstack-keystone16:01
*** ravelar159 has joined #openstack-keystone16:04
*** tqtran has joined #openstack-keystone16:09
*** gyee has joined #openstack-keystone16:09
*** ChanServ sets mode: +v gyee16:09
*** aurelien__ has quit IRC16:12
*** david-lyle has joined #openstack-keystone16:13
*** code-R_ has quit IRC16:15
*** david-lyle has quit IRC16:19
*** M00nr41n has joined #openstack-keystone16:20
*** jrist_ has quit IRC16:24
*** nisha__ has joined #openstack-keystone16:34
*** samueldmq has quit IRC16:35
*** samueldmq has joined #openstack-keystone16:36
*** ChanServ sets mode: +v samueldmq16:36
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add endpoint functional tests  https://review.openstack.org/34041816:36
*** nisha_ has quit IRC16:37
dstanekstevemar: i fixed the issue. after lunch i'll come up with a better commit message than 'wip' and post16:44
* stevemar goes to eat lunch16:44
stevemardstanek: nice16:44
*** code-R has joined #openstack-keystone16:44
*** woodburn has joined #openstack-keystone16:44
dstanekstevemar: i fixed in oslosphinx in two different ways - so they can pick the one they like better16:45
stevemardstanek: sounds bueno16:45
*** timcline has joined #openstack-keystone16:47
openstackgerritRichard proposed openstack/keystone: PCI-DSS Password strength requirements  https://review.openstack.org/32058616:49
*** tesseract- has quit IRC16:49
*** code-R has quit IRC16:50
*** code-R has joined #openstack-keystone16:50
*** rcernin has quit IRC16:51
openstackgerritRichard proposed openstack/keystone: PCI-DSS Password strength requirements  https://review.openstack.org/32058616:52
*** code-R_ has joined #openstack-keystone16:53
*** diazjf has quit IRC16:53
*** code-R has quit IRC16:56
*** adrian_otto has joined #openstack-keystone16:57
*** arunkant has joined #openstack-keystone16:58
*** samueldmq has quit IRC17:00
*** M00nr41n has quit IRC17:07
*** nisha__ has quit IRC17:10
*** ddieterly is now known as ddieterly[away]17:12
*** TxGVNN has quit IRC17:13
*** M00nr41n has joined #openstack-keystone17:14
*** slberger has quit IRC17:15
*** M00nr41n has quit IRC17:17
*** slberger has joined #openstack-keystone17:18
*** roxanaghe has joined #openstack-keystone17:26
*** mvk has quit IRC17:28
stevemarrderose_: i assume pci-dss isn't landing in newton-2 :)17:31
stevemarrderose_: gonna bump it to newton-317:31
rderose_stevemar: yeah, it's close though17:31
stevemarrderose_: good to hear17:31
rderose_did newton-2 just end?17:31
stevemarrderose_: it's ending on friday17:31
rderose_ah, okay17:31
stevemarrderose_: so we want this to land early in newton-317:32
*** fawadkhaliq has joined #openstack-keystone17:32
stevemarrderose_: what about https://blueprints.launchpad.net/keystone/+spec/shadow-users-newton ?17:32
stevemaris there anything else left to do?17:32
rderose_yeah, Drop the "EPHEMERAL" user type mapping and some refactoring17:33
rderose_newton-3 as well17:33
rderose_stevemar ^17:33
stevemari guess just https://review.openstack.org/#/c/296639/17:33
patchbotstevemar: patch 296639 - keystone - Drop EPHEMERAL user type17:33
rderose_stevemar: yeah17:33
stevemarthat's less of a concern IMO17:33
rderose_true17:33
stevemarwe could leave this as a bug and mark the BP as complete if you'd prefer17:33
rderose_stevemar: sounds good to me :)17:34
stevemarrderose_: i'll do just that, that one sounds like more of a clean up17:34
rderose_stevemar: cool17:34
roxanaghehey stevemar, do you think you can +A this mitaka backport https://review.openstack.org/#/c/332956/ ?17:35
patchbotroxanaghe: patch 332956 - keystone (stable/mitaka) - /services?name=<name> API fails when using list_limit17:35
roxanaghestevemar, seems to me that it has too many +1s17:35
stevemarroxanaghe: :(17:37
stevemarroxanaghe: i'm gonna pull out the ptl stamp17:37
roxanaghestevemar, oh oh :)17:37
stevemarrderose_: https://bugs.launchpad.net/keystone/+bug/160191017:38
openstackLaunchpad bug 1601910 in OpenStack Identity (keystone) "drop support for EPHEMERAL user type in mapping" [Medium,In progress] - Assigned to Ron De Rose (ronald-de-rose)17:38
stevemarroxanaghe: +A17:38
*** jmlowe has joined #openstack-keystone17:38
roxanaghestevemar, stamped! thank you17:38
rderose_stevemar: perfect17:38
*** pcaruana has joined #openstack-keystone17:39
*** sbasam has joined #openstack-keystone17:41
rderose_stevemar: also, still have: Relax the requirement for mappings to result in group memberships.17:41
rderose_stevemar: for shadow users17:41
*** ravelar159 has quit IRC17:42
openstackgerritMerged openstack/keystone: Improve keystone.conf [os_inherit] documentation  https://review.openstack.org/33667617:42
openstackgerritMerged openstack/keystone: Improve keystone.conf [revoke] documentation  https://review.openstack.org/33673117:43
stevemarrderose_: got a link for that?17:44
openstackgerritMerged openstack/keystone: Improve keystone.conf [ldap] documentation  https://review.openstack.org/33671917:45
rderose_stevemar: no, haven't started that one yet. shall I create a bug for that one? or, create a patch for the blueprint?17:46
lbragstaddstanek interesting - https://review.openstack.org/#/c/334673/ fails for me locally running with tox but not when I use nose17:47
patchbotlbragstad: patch 334673 - keystone - Allow id string validation to be configurable17:47
rderose_stevemar: I'm referring to #6 in the spec: https://github.com/openstack/keystone-specs/blob/master/specs/keystone/newton/shadow-users-newton.rst17:52
*** nkinder has joined #openstack-keystone17:52
*** haplo37_ has joined #openstack-keystone17:54
*** fawadkhaliq has quit IRC17:55
openstackgerritMikhail Nikolaenko proposed openstack/python-keystoneclient: Fill Client parameters when using session  https://review.openstack.org/33915017:57
adrian_ottoI am running python-openstackclient 2.6.0 (current version) but it's missing the "domain" noun. I don't understand this, because I also installed python-keystoneclient 3.14.0. How do I get the "openstack" CLI command to let me access "openstack domain ..." arguments?18:01
adrian_ottopython-keystoneclient (3.2.0)18:02
lbragstadadrian_otto is osc configured to talk to keystone v2.0 or v3?18:02
adrian_ottoso at least the most recent version on Pypi18:02
adrian_ottolbragstad: v318:02
adrian_ottooh, wait18:03
adrian_ottohow do I check that?18:03
lbragstadadrian_otto you usually have to specify the endpoint you want openstackclient to talk to in a credential (or rc) file18:03
lbragstadit might contain a username, password, project id/name, domain id/name, auth url, etc...18:04
lbragstadis anything in that file pointing to v2.0?18:04
adrian_ottolooks like my OS_IDENTITY_API_VERSION is defaulting to v218:04
lbragstadI'd try switching that to v3 and see what happens18:05
adrian_ottook, I will change that, thanks lbragstad18:05
lbragstadadrian_otto no problem18:05
*** diazjf has joined #openstack-keystone18:07
adrian_ottolbragstad: that was it. I can query domain resources now. Tx again.18:09
lbragstadadrian_otto awesome!18:09
*** daemontool has joined #openstack-keystone18:10
*** david-lyle has joined #openstack-keystone18:12
*** ddieterly[away] has quit IRC18:13
*** david-lyle has quit IRC18:17
*** gagehugo has quit IRC18:18
*** ddieterly has joined #openstack-keystone18:23
*** timcline has quit IRC18:23
*** timcline has joined #openstack-keystone18:23
stevemarrderose_: i'll open a bug and assign it to you for that last item too18:26
*** timcline has quit IRC18:28
stevemarrderose_: you can see it here: https://launchpad.net/keystone/+milestone/newton-318:28
*** ravelar159 has joined #openstack-keystone18:29
*** ravelar159 has quit IRC18:34
openstackgerritLance Bragstad proposed openstack/keystone: Allow id string validation to be configurable  https://review.openstack.org/33467318:37
stevemari think ayoung needs to sign up here: http://osdir.com/ml/openstack-dev/2016-07/msg00473.html18:39
rderose_stevemar: cool, thx18:47
*** ravelar159 has joined #openstack-keystone18:49
openstackgerritDavid Stanek proposed openstack/keystone: Removes the "Other Versions" sections from api-ref  https://review.openstack.org/34051518:51
*** adrian_otto has quit IRC18:52
*** ravelar159 has quit IRC19:02
*** ravelar159 has joined #openstack-keystone19:03
*** gagehugo has joined #openstack-keystone19:04
*** fawadkhaliq has joined #openstack-keystone19:10
*** tonytan4ever has quit IRC19:10
*** timcline has joined #openstack-keystone19:12
*** thiagolib has joined #openstack-keystone19:13
*** mfisch has joined #openstack-keystone19:13
*** mfisch has quit IRC19:13
*** mfisch has joined #openstack-keystone19:13
*** ddieterly is now known as ddieterly[away]19:15
*** ravelar159 has quit IRC19:15
*** ravelar159 has joined #openstack-keystone19:15
*** timcline has quit IRC19:16
openstackgerritDavid Stanek proposed openstack/keystone: Removes the "Other Versions" sections from docs  https://review.openstack.org/34051519:21
*** sdake has joined #openstack-keystone19:26
*** sdake has quit IRC19:26
*** nkinder has quit IRC19:31
*** rcernin has joined #openstack-keystone19:31
openstackgerritAdrian Vladu proposed openstack/oslo.policy: Fixed unit tests running on Windows  https://review.openstack.org/34053719:31
*** adrian_otto has joined #openstack-keystone19:36
*** ddieterly[away] is now known as ddieterly19:37
*** eggmaster has joined #openstack-keystone19:39
*** gagehugo_ has joined #openstack-keystone19:42
*** gagehugo_ has quit IRC19:44
*** timcline has joined #openstack-keystone19:48
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Lockout requirements  https://review.openstack.org/34007419:49
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs  https://review.openstack.org/33631819:50
*** timcline has quit IRC19:52
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs  https://review.openstack.org/33631819:53
*** adrian_otto has quit IRC19:54
*** samueldmq has joined #openstack-keystone20:00
*** ChanServ sets mode: +v samueldmq20:00
*** gagehugo has quit IRC20:00
*** rderose_ has quit IRC20:01
*** rderose has joined #openstack-keystone20:01
*** gagehugo has joined #openstack-keystone20:02
*** rderose has quit IRC20:03
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Password history requirements  https://review.openstack.org/32833920:10
openstackgerritLance Bragstad proposed openstack/keystone: Allow id string validation to be configurable  https://review.openstack.org/33467320:12
lbragstadravelar159 updated my patch with a comment that explains what i'm doing ^20:12
*** rderose has joined #openstack-keystone20:13
*** rderose has quit IRC20:15
*** rderose has joined #openstack-keystone20:15
*** rderose has quit IRC20:15
ravelar159lbragstad: thank you!20:15
lbragstadravelar159 no problem - i'm pulling your/rderose's patch down locally to play with it too20:16
*** pcaruana has quit IRC20:17
*** rderose has joined #openstack-keystone20:17
*** julim has quit IRC20:27
*** diazjf has quit IRC20:28
*** diazjf has joined #openstack-keystone20:28
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Password strength requirements  https://review.openstack.org/32058620:28
*** julim has joined #openstack-keystone20:32
*** fawadkhaliq has quit IRC20:36
*** julim has quit IRC20:37
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [saml] documentation  https://review.openstack.org/34056620:40
*** timcline has joined #openstack-keystone20:42
*** ddieterly is now known as ddieterly[away]20:43
*** timcline has quit IRC20:46
rderosehenrynash: re 336318, what do you mean by 'what about the identity API spec itself?'20:47
rderosehenrynash: can you point me to what you are referring?20:48
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [saml] documentation  https://review.openstack.org/34056620:49
*** pnavarro has quit IRC20:53
*** jmlowe has quit IRC20:54
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Lockout requirements  https://review.openstack.org/34007420:55
openstackgerritwerner mendizabal proposed openstack/keystone: Support encryption of credentials in Keystone  https://review.openstack.org/31716920:57
*** mvk has joined #openstack-keystone20:59
*** itisha has quit IRC21:00
*** haplo37_ has quit IRC21:01
*** raildo is now known as raildo-afk21:02
*** rderose_ has joined #openstack-keystone21:06
*** rderose has quit IRC21:09
*** jaugustine has quit IRC21:10
*** adrian_otto has joined #openstack-keystone21:11
*** jmlowe has joined #openstack-keystone21:12
*** ravelar159 has quit IRC21:12
*** rderose_ has quit IRC21:14
*** samueldmq has quit IRC21:18
*** ddieterly[away] is now known as ddieterly21:19
*** david-lyle has joined #openstack-keystone21:22
*** michauds has joined #openstack-keystone21:22
*** jistr has quit IRC21:24
openstackgerritDavid Stanek proposed openstack/keystone-specs: Fixes token auth documentation for OS-FEDERATION  https://review.openstack.org/34057721:26
*** david-lyle has quit IRC21:30
dstanekstevemar: did you have a customer request for https://bugs.launchpad.net/keystone/+bug/1579172 ?21:31
openstackLaunchpad bug 1579172 in OpenStack Identity (keystone) "Use redis to store/rotate fernet keys" [Wishlist,Incomplete]21:31
*** spzala has quit IRC21:32
*** spzala has joined #openstack-keystone21:33
*** timcline has joined #openstack-keystone21:36
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [trust] documentation  https://review.openstack.org/34058221:38
*** spzala has quit IRC21:38
topoldolphm!21:39
stevemardstanek: it was feedback from someone who used fernet token for a PoC for a customer21:40
stevemardstanek: they were just wondering why we depended on something like rsync which can fail21:40
*** timcline has quit IRC21:41
stevemartopol: oh i see, say hi to dolphm but not me21:41
stevemar-_-21:41
topolstevemar!  Hi!!!21:42
openstackgerritMerged openstack/keystone-specs: Fixes token auth documentation for OS-FEDERATION  https://review.openstack.org/34057721:42
stevemartopol: oh hey21:43
stevemartopol: did you need something in particular from dolphm? or can the rest of us schmoes help?21:43
topolI stevemar I just need the Zinc burger recipe.21:45
*** pauloewerton has left #openstack-keystone21:45
stevemartopol: that's locked up in a safe21:45
*** ddieterly is now known as ddieterly[away]21:45
stevemartopol: right next to the big mac sauce and the spices for kfc chicken21:45
topolstevemar yes next to the formula to Coke.  But I know a guy21:45
*** jrist has quit IRC21:47
*** david-lyle has joined #openstack-keystone21:52
*** rderose has joined #openstack-keystone21:52
*** ddieterly[away] is now known as ddieterly21:54
dstanekstevemar: ah. at least a failure in rsync won't stop tokens from working21:55
*** KevinE has quit IRC21:58
henrynashrderose: here you go: https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst22:01
*** david-lyle has quit IRC22:02
henrynashrderose: this is our actual contract, in terms of an Identity API22:02
rderosehenrynash: ah okay, let me dig into this.  thanks.22:03
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [tokenless_auth] documentation  https://review.openstack.org/34059122:04
henrynashrderose: the section you will want to update is API Resources, Users: /v3/users …as well as potentially all the user examples22:04
rderosehenrynash: okay, sounds good.22:05
rderosehenrynash: wow, that a big freakin page :)22:05
henrynashrderose: :-)22:06
stevemarhenrynash: rderose *cough* we should be updating the api-ref in the keystone repo now :P22:06
rderosestevemar: cool22:06
henrynashstevemar: so that was a question I had…are we just going to ditch the Identity API spec? what about specs fro changes, should we include the api-ref instead of the identity spec for approval?22:07
stevemarhenrynash: i think long term we want to delete the identity API in the specs repo22:18
*** phalmos has quit IRC22:18
stevemarfor specs that are API impacting, it would mean creating a new change in the keystone repo and having a depends-on tag i guess22:18
henrynashstevemar: makes sense…I guess we should decide how we want keystone-spec proposals to provide ther APIs22:19
henrynashstevemar: oopsl sorry overalaped22:19
*** gordc has quit IRC22:19
*** diazjf has quit IRC22:19
henrynashrderose: in that case, please disregard my comments!22:19
stevemarhenrynash: hopefully we can migrate things over in a few days22:20
stevemarhenrynash: even if we don't get everything done, we can always finish the API migration when we are done newton-3, or during the RC time frame, as the API should be frozen by then22:21
henrynashstevemar: yep22:21
*** spzala has joined #openstack-keystone22:24
*** thiagolib has quit IRC22:28
*** spzala has quit IRC22:30
*** gagehugo has quit IRC22:30
*** slberger has left #openstack-keystone22:30
*** timcline has joined #openstack-keystone22:31
*** spzala has joined #openstack-keystone22:34
*** spzala has quit IRC22:35
*** timcline has quit IRC22:35
*** spzala has joined #openstack-keystone22:35
jamielennoxhenrynash: if you have a sec https://review.openstack.org/#/c/338885/ is sitting in front of two with a +A22:35
patchbotjamielennox: patch 338885 - keystone - Add the oslo_context to the environment and request22:35
henrynashjamielenix: lookiing22:40
dstanekstevemar: i'm assuming that a part of the sprint is going to be pulling the API docs from specs into api-ref...is that correct?22:42
stevemardstanek: correct22:43
stevemardstanek: entirely22:43
dstanekstevemar: then i need to push to get my specs patch merge first :-)22:43
stevemardstanek: link?22:43
stevemardstanek: i know a guy22:44
dstanekstevemar: hmmm....i did it earlier today, but it looks like i may not have pushed to gerrit22:44
*** adrian_otto has quit IRC22:44
dstaneki fail at multitasking i guess22:44
stevemardstanek: THE SCOPE one22:44
stevemaroops, hand in chip bowl22:45
dstanekstevemar: lol, yeah. looks like you guys already merged it22:45
stevemardstanek: yp22:45
dstanekyou guys rock :-)22:45
stevemardstanek: its true :)22:48
*** ddieterly has quit IRC22:51
*** adrian_otto has joined #openstack-keystone22:51
dstanekbugs, bugs, bugs ... oh, so many bugs22:52
*** daemontool has quit IRC23:04
stevemardstanek: lots of support looking requests23:04
dstanekyup23:07
dstanekis there any known problems with fernet and v2.0?23:07
*** michauds has quit IRC23:12
*** itisha has joined #openstack-keystone23:13
*** aastha has quit IRC23:19
*** rdo has quit IRC23:35
*** adrian_otto has quit IRC23:41
jdennis1why are some source code comments annotated with the authors name in brackets? Is that for things which are tricky and you might need to reference the author for clarification? (if so wouldn't git blame serve that purpose)23:42
*** rcernin has quit IRC23:43
*** markvoelker has quit IRC23:49
*** woodster_ has quit IRC23:49
openstackgerritMerged openstack/keystone: Add the oslo_context to the environment and request  https://review.openstack.org/33888523:53
*** adrian_otto has joined #openstack-keystone23:54
*** julim has joined #openstack-keystone23:55
openstackgerritMerged openstack/keystone: Use the context's is_admin property  https://review.openstack.org/33867423:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!