Friday, 2016-07-15

*** thumpba has quit IRC00:02
openstackgerrithenry-nash proposed openstack/keystone: Improve readability of the api-ref roles section  https://review.openstack.org/34232500:08
openstackgerrithenry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters  https://review.openstack.org/34244100:08
openstackgerrithenry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles  https://review.openstack.org/34246800:09
*** spzala has joined #openstack-keystone00:15
*** code-R_ has quit IRC00:15
openstackgerritJamie Lennox proposed openstack/keystone: Remove unused context from AuthInfo  https://review.openstack.org/34247800:18
*** jrist has joined #openstack-keystone00:22
*** adu has quit IRC00:24
*** jerrygb has joined #openstack-keystone00:25
*** pooja has joined #openstack-keystone00:26
*** adrian_otto has quit IRC00:27
poojaHi, I needed some help getting effective role information for SSO users in Mitaka.. If I query effective roles for a SSO user using the shadow user id, it returns an empty roles it. I was expecting it to return the effective roles based on group membership by virtue of SAML attributes.00:28
poojaIs there such an api or a way to query the groups to which a SSO user belongs?00:29
*** jerrygb has quit IRC00:30
openstackgerritSwapnil Kulkarni (coolsvap) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843500:31
*** simondodsley has quit IRC00:33
*** roxanaghe has joined #openstack-keystone00:35
*** clenimar_ has quit IRC00:38
openstackgerritAlexander Ignatyev proposed openstack/keystone: Support new osprofiler API  https://review.openstack.org/34140100:40
*** markvoelker has quit IRC00:48
*** roxanagh_ has joined #openstack-keystone00:48
*** tonytan4ever has joined #openstack-keystone00:49
*** aastha has quit IRC00:49
*** roxanagh_ has quit IRC00:52
*** code-R has joined #openstack-keystone00:52
*** tonytan4ever has quit IRC00:53
openstackgerritAlexander Ignatyev proposed openstack/keystone: Support new osprofiler API  https://review.openstack.org/34140100:53
*** tonytan4ever has joined #openstack-keystone00:53
*** code-R_ has joined #openstack-keystone00:55
*** iurygregory_ has joined #openstack-keystone00:56
*** clenimar_ has joined #openstack-keystone00:56
*** browne has quit IRC00:56
*** code-R has quit IRC00:58
*** jrist has quit IRC01:02
*** wangqun has joined #openstack-keystone01:04
*** arunkant_ has quit IRC01:04
*** henrynash has quit IRC01:06
*** clenimar_ has quit IRC01:07
*** henrynash has joined #openstack-keystone01:08
*** ChanServ sets mode: +v henrynash01:08
*** clenimar_ has joined #openstack-keystone01:19
*** EinstCrazy has joined #openstack-keystone01:19
*** dan_nguyen has joined #openstack-keystone01:20
*** thumpba has joined #openstack-keystone01:21
*** spzala has quit IRC01:21
*** spzala has joined #openstack-keystone01:22
*** spzala has quit IRC01:22
*** spzala has joined #openstack-keystone01:22
*** EinstCrazy has quit IRC01:24
*** dan_nguyen has quit IRC01:26
openstackgerritAlexander Ignatyev proposed openstack/keystone: Support new osprofiler API  https://review.openstack.org/34140101:29
*** tonytan4ever has quit IRC01:30
*** rderose has quit IRC01:31
*** EinstCrazy has joined #openstack-keystone01:32
openstackgerritAlexander Ignatyev proposed openstack/keystone: Support new osprofiler API  https://review.openstack.org/34140101:33
*** spzala has quit IRC01:34
*** spzala has joined #openstack-keystone01:35
*** pooja has quit IRC01:36
*** spzala has quit IRC01:39
*** itlinux has quit IRC01:45
*** richm has quit IRC01:49
*** kfox1111 has quit IRC01:51
*** browne has joined #openstack-keystone01:54
*** richm has joined #openstack-keystone02:07
*** code-R has joined #openstack-keystone02:14
*** code-R_ has quit IRC02:14
*** links has joined #openstack-keystone02:16
*** sdake_ has quit IRC02:16
*** TxGVNN has joined #openstack-keystone02:19
*** woodster_ has quit IRC02:19
*** davechen has joined #openstack-keystone02:19
*** Gorian has joined #openstack-keystone02:23
*** TxGVNN has quit IRC02:28
*** TxGVNN has joined #openstack-keystone02:28
*** TxGVNN has quit IRC02:30
*** TxGVNN has joined #openstack-keystone02:31
*** tonytan4ever has joined #openstack-keystone02:31
*** sdake has joined #openstack-keystone02:31
*** tonytan4ever has quit IRC02:36
*** roxanagh_ has joined #openstack-keystone02:36
*** ddieterly has joined #openstack-keystone02:37
*** iurygregory_ has quit IRC02:38
*** browne has quit IRC02:40
*** roxanagh_ has quit IRC02:41
*** ddieterly has quit IRC02:46
*** ddieterly has joined #openstack-keystone02:47
*** markvoelker has joined #openstack-keystone02:48
*** ddieterly has quit IRC02:50
*** chlong has joined #openstack-keystone02:56
*** sdake_ has joined #openstack-keystone02:58
*** sdake has quit IRC03:02
*** rderose has joined #openstack-keystone03:03
*** sdake_ has quit IRC03:05
*** dan_nguyen has joined #openstack-keystone03:05
*** dan_nguyen has left #openstack-keystone03:06
*** julim has quit IRC03:06
*** chrisshattuck has joined #openstack-keystone03:07
*** sdake has joined #openstack-keystone03:08
*** tonytan4ever has joined #openstack-keystone03:11
*** clenimar_ has quit IRC03:13
*** code-R_ has joined #openstack-keystone03:19
*** code-R has quit IRC03:22
*** dikonoor has joined #openstack-keystone03:25
*** jerrygb has joined #openstack-keystone03:32
*** links has quit IRC03:33
openstackgerritJamie Lennox proposed openstack/keystone: Pass request to v2 token authenticate  https://review.openstack.org/34254703:34
*** spzala has joined #openstack-keystone03:35
stevemarthanks henrynash!03:37
henrynashstevemar: anything in particular? :-)03:38
stevemarhenrynash: the role update bits03:39
stevemarhenrynash: also, go to bed03:39
henrynashstevemar: ah, right…03:39
*** rderose has quit IRC03:39
stevemarhenrynash: oh wait, you're in the US03:39
henrynashstevemar: yep….03:39
stevemarhenrynash: proceed to work *cracks whip*03:39
henrynashstevemar: yes, sir!03:39
*** jerrygb has quit IRC03:39
*** spzala has quit IRC03:40
*** jerrygb has joined #openstack-keystone03:40
*** jerrygb has quit IRC03:41
*** jerrygb has joined #openstack-keystone03:41
openstackgerrithenry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters  https://review.openstack.org/34244103:50
stevemarhenrynash: want to review all the patches in this chain https://review.openstack.org/#/c/342351/ ? :)03:52
patchbotstevemar: patch 342351 - keystone - clean up OAUTH API03:52
henrynashstevemar: sure03:52
stevemarhenrynash: i suppose i should send over the first of the series: https://review.openstack.org/#/c/342347/103:52
patchbotstevemar: patch 342347 - keystone - Copy the preamble / summary of OAuth1 from the spe...03:52
stevemarhenrynash: you in the west coast?03:52
henrynashstevemar: yep03:53
stevemarnice03:53
henrynashstevemar: no excuse for falling asleep at the midcycle03:53
stevemarhenrynash & davechen - feel free to single +2/+A patches that are for the api sprint, i'd prefer we just get those over with if they are ready03:54
*** clenimar_ has joined #openstack-keystone03:55
henrynashok03:55
*** gyee has quit IRC03:55
openstackgerritClenimar Filemon proposed openstack/keystone: Update identity endpoint in v3 and v3-ext samples  https://review.openstack.org/34182903:56
*** richm has quit IRC03:57
*** thumpba has quit IRC03:58
openstackgerritSteve Martinelli proposed openstack/keystone-specs: Remove the v2.0 section from our APIs  https://review.openstack.org/34239503:58
*** sdake has quit IRC04:05
openstackgerritClenimar Filemon proposed openstack/keystone: Update identity endpoint in v3 and v3-ext samples  https://review.openstack.org/34182904:05
davechenstevemar: okay, okay.04:08
stevemardavechen: i loosen the rules for two days and no one likes it :)04:10
*** adrian_otto has joined #openstack-keystone04:11
davechenstevemar: I love to do that but I think only PTL can have the right.;-)04:13
openstackgerrithenry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles  https://review.openstack.org/34246804:13
stevemardavechen: hehe04:14
stevemarhenrynash: your description of `roles` was so good, i think you should do it for all the v3 resources :P04:14
henrynashstevemar: oops04:15
*** GB21 has joined #openstack-keystone04:16
*** davechen has left #openstack-keystone04:18
*** adrian_otto has quit IRC04:23
henrynashanyone know in the new gerrit…is the order of patches under “Related changes” the dependancy order?04:30
*** GB21 has quit IRC04:31
*** jerrygb has quit IRC04:34
*** chrisshattuck has quit IRC04:35
*** chrisshattuck has joined #openstack-keystone04:36
*** chrisshattuck has quit IRC04:37
*** chrisshattuck has joined #openstack-keystone04:38
*** henrynash has quit IRC04:38
*** links has joined #openstack-keystone04:39
*** chrisshattuck has quit IRC04:40
*** chrisshattuck has joined #openstack-keystone04:42
*** chrisshattuck has quit IRC04:43
*** chrisshattuck has joined #openstack-keystone04:44
openstackgerritMerged openstack/keystone: Remove unused context from AuthInfo  https://review.openstack.org/34247804:53
tonybjamielennox: ping?04:55
*** code-R_ has quit IRC04:57
*** code-R has joined #openstack-keystone04:58
openstackgerritSteve Martinelli proposed openstack/keystone: Add v2.0 /endpoints/ api-ref  https://review.openstack.org/34229404:58
stevemartonyb: whaddup04:59
tonybstevemar: I just wanted to warn jamielennox that https://review.openstack.org/342604 will break his https://review.openstack.org/#/c/341895 review chain05:00
patchbottonyb: patch 341895 - nova - Pass kwargs through to base context05:00
tonybstevemar: basically nova wont work with oslo.context 2.6.0 to I'm tryint to "fix" that ;P05:01
stevemartonyb: i'm sure he'll live :)05:01
tonybstevemar: better yet he can call me a noob and fix it for me ;P05:01
*** GB21 has joined #openstack-keystone05:02
*** chrisshattuck has quit IRC05:02
*** chrisshattuck has joined #openstack-keystone05:03
Gorian@stevemar where in west coast?05:05
*** abhishekk has left #openstack-keystone05:09
openstackgerritSteve Martinelli proposed openstack/keystone: clean up OAUTH API  https://review.openstack.org/34235105:13
*** sdake has joined #openstack-keystone05:17
stevemarGorian: i'm east coast, but will be in west coast (where henry nash is (temporarily)) next week (san jose)05:17
Gorianoh nice. Too far from me still :p05:19
*** chrisshattuck has quit IRC05:19
GorianI'm in Portland area, you'll be south05:19
*** nisha_ has joined #openstack-keystone05:19
*** itisha has quit IRC05:20
*** chrisshattuck has joined #openstack-keystone05:21
*** GB21 has quit IRC05:26
stevemarGorian: plenty of OpenStackers in PDX, check out one of their meetups http://www.meetup.com/openstack-pdx/05:29
*** chrisshattuck has quit IRC05:30
stevemarGorian: oh nice aedo is the organizer, he is good people05:30
Gorianoh cool05:33
Gorianthanks btw. Already joined that meetup, but only recently so I haven't went yet05:34
*** GB21 has joined #openstack-keystone05:34
*** jerrygb has joined #openstack-keystone05:34
Gorian@stevemar so are you part of openstack, or just hang out in the irc long enough here to be op or whatever?05:36
stevemarGorian: i dabble in this witchcraft known as openstack05:37
Gorianthis is my first time.05:38
stevemarGorian: it gets better ;)05:38
stevemaryou hit a very funny error, it's probably a small syntax error in a config file, :(05:39
GorianI have a pile of servers, a rack, and got my network setup with all the vlans (I'm a DevOps/Sysdmin, never, unfortunately in my opinion, been able to do much networking at work, so it's definitely lacking. Ended up enlisting a friend to get my switch configured correctly)05:39
Gorianand, took a week of non-stop work to get my bare-metal OS configured like i want. Tested FreeBSD, Ubuntu 16.04, Solaris11, and SmartOS before deciding that trying to figure out how to get nfs installed as root on Ubuntu 16.04 was going to be the best course of action05:40
Gorianand then a few more days of all my non-working time to successfully do that05:40
*** jerrygb has quit IRC05:40
stevemarGorian: hehe, you're definitely on the ops side!05:41
stevemarGorian: FWIW, there is an #openstack-operators channel that is somewhat active05:41
*** lamt has quit IRC05:41
stevemarmost of the #openstack-{project} channels are upstream/dev related05:41
Gorianoh nice. I haven't regulared in IRC in a long long time. used to have a bouncer and everything setup, with a desktop client. Bouncer died, was too lazy to get a new one, and now I'm using the browser client :p05:42
*** markvoelker has quit IRC05:43
Gorianmaybe after I get VMs working on my cloud, I'll setup an IRC bouncer again05:43
stevemareww browser client :_05:43
stevemar:)05:43
Gorianoh trust me, I share that sentiment05:43
*** code-R_ has joined #openstack-keystone05:43
Gorianjust was lazy, didn't want to install and configure a client again05:43
stevemar<3 my bouncer, it runs on openstack yay05:43
openstackgerritMerged openstack/keystone: Copy the preamble / summary of OAuth1 from the specs repo  https://review.openstack.org/34234705:43
Gorianeating your own dogfood for the win? :P05:44
stevemaryay my patches are merging05:44
openstackgerritMerged openstack/keystone: re-order the oauth APIs  https://review.openstack.org/34234805:44
stevemaryou know it05:44
openstackgerritMerged openstack/keystone: add OS-OAUTH1/authorize/{request_token_id} API  https://review.openstack.org/34234905:44
Gorianyeah, I got tired of years of small homelab clouds dying05:44
Gorianesxi, proxmox, etc.05:44
Goriana server or disk dies, and then it's months before i get around to building everything from scratch again05:44
Goriandecided to make something elastic and resiliant05:44
Gorianand, as a career DevOps, it's great to add to a resume05:44
Goriangot a bunch of friends with less time than I do, donated a bunch of servers, disks, a pile of older SSDs, etc.05:45
Gorianso, I have plenty of hardware now. More concerned about my potential power bill05:45
stevemari think, as a career devops person, you'll feel right at home in openstack05:45
Gorianyeah, part of why I chose it, I think so too05:46
* stevemar looks at the time 05:46
Gorian:)05:46
stevemarshit, didn't realize it05:46
*** code-R has quit IRC05:46
stevemargotta be up in ~5 hrs05:46
Gorianoh, fun! :p05:46
* stevemar salute05:46
GorianI'll just roll into work around 10ish and no one will care :P05:46
stevemarhehe05:46
Gorianlater buddy, thanks for the help!05:46
stevemarhave fun in openstack, glad you fixed your problem05:47
Gorian:)05:47
*** sdake has quit IRC05:51
*** tonytan4ever has quit IRC05:54
*** timonwong has joined #openstack-keystone05:56
*** davechen has joined #openstack-keystone05:58
*** tonytan4ever has joined #openstack-keystone06:04
*** sdake has joined #openstack-keystone06:13
openstackgerritMerged openstack/keystone: Update identity endpoint in v3 and v3-ext samples  https://review.openstack.org/34182906:15
Goriananyone have experience with keystone under nginx?06:17
Gorianthoughts / opinions?06:17
*** rcernin has joined #openstack-keystone06:17
*** markvoelker has joined #openstack-keystone06:30
*** openstackgerrit has quit IRC06:33
*** openstackgerrit has joined #openstack-keystone06:33
*** spzala has joined #openstack-keystone06:35
*** chlong has quit IRC06:38
*** markvoelker has quit IRC06:39
*** spzala has quit IRC06:39
*** sheel has joined #openstack-keystone06:40
*** timonwong has quit IRC06:42
*** sdake_ has joined #openstack-keystone06:49
*** sdake has quit IRC06:52
*** timonwong has joined #openstack-keystone06:56
*** nisha_ has quit IRC07:13
*** tesseract- has joined #openstack-keystone07:15
*** sdake_ has quit IRC07:16
*** code-R_ has quit IRC07:21
openstackgerritMerged openstack/keystone: Add v2.0 /endpoints/ api-ref  https://review.openstack.org/34229407:23
*** pcaruana has joined #openstack-keystone07:27
*** tonytan4ever has quit IRC07:30
*** d0ugal has joined #openstack-keystone07:31
*** d0ugal has quit IRC07:31
*** d0ugal has joined #openstack-keystone07:31
*** d0ugal has quit IRC07:31
*** d0ugal has joined #openstack-keystone07:31
*** jojden has joined #openstack-keystone07:32
*** jaosorior has joined #openstack-keystone07:35
*** jerrygb has joined #openstack-keystone07:37
*** jerrygb has quit IRC07:41
*** daemontool has joined #openstack-keystone07:43
openstackgerritJamie Lennox proposed openstack/keystone: Move audit initiator creation to request  https://review.openstack.org/34265807:57
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
Goriananyone home?08:11
*** markvoelker has joined #openstack-keystone08:23
jojdenyes08:27
*** markvoelker has quit IRC08:27
*** tonytan4ever has joined #openstack-keystone08:30
*** tonytan4ever has quit IRC08:36
bretono/08:36
Gorianohai08:45
Goriandon't suppose any of you have got keystone working on nginx?08:45
GorianI followed a guide on getting it to work.. .and it just gave me a sigsegv08:46
*** jrist has joined #openstack-keystone09:09
*** jaosorior is now known as jaosorior_brb09:11
*** timonwong has quit IRC09:11
*** markvoelker has joined #openstack-keystone09:17
*** jaosorior_brb has quit IRC09:19
*** markvoelker has quit IRC09:21
*** GB21 has quit IRC09:23
*** GB21 has joined #openstack-keystone09:31
*** nisha_ has joined #openstack-keystone09:31
*** davechen has quit IRC09:33
openstackgerritAlexander Ignatyev proposed openstack/keystone: Support new osprofiler API  https://review.openstack.org/34140109:33
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add endpoint functional tests  https://review.openstack.org/34041809:45
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add endpoint functional tests  https://review.openstack.org/34041809:46
*** GB21 has quit IRC10:07
*** markvoelker has joined #openstack-keystone10:11
*** kean has quit IRC10:11
*** markvoelker has quit IRC10:16
*** GB21 has joined #openstack-keystone10:25
*** rcernin has quit IRC10:26
*** tonytan4ever has joined #openstack-keystone10:32
*** spzala has joined #openstack-keystone10:36
*** tonytan4ever has quit IRC10:36
*** rodrigods has quit IRC10:38
*** rodrigods has joined #openstack-keystone10:39
*** spzala has quit IRC10:40
*** rcernin has joined #openstack-keystone10:45
*** rcernin is now known as rcernin|lunch10:46
*** EinstCrazy has quit IRC10:52
*** EinstCrazy has joined #openstack-keystone10:55
*** TxGVNN has quit IRC10:58
openstackgerritDave Chen proposed openstack/keystone: {WIP} Choose the right parameter from the parameter list  https://review.openstack.org/34208911:00
openstackgerritDave Chen proposed openstack/keystone: Remove `name` property from `endpoint` create/update API  https://review.openstack.org/34273811:00
*** markvoelker has joined #openstack-keystone11:05
bretonwow, Steve endeed woke up in 5h :)11:08
*** markvoelker has quit IRC11:10
*** adu has joined #openstack-keystone11:18
*** nk2527 has joined #openstack-keystone11:22
*** nk2527 has quit IRC11:23
*** wangqun has quit IRC11:23
*** jerrygb has joined #openstack-keystone11:38
*** jerrygb has quit IRC11:43
openstackgerritMerged openstack/keystone: Remove get_trust_id_for_request function  https://review.openstack.org/34205611:48
*** wangqun has joined #openstack-keystone11:49
*** julim has joined #openstack-keystone11:50
*** markvoelker has joined #openstack-keystone11:59
*** markvoelker has quit IRC12:03
*** ddieterly has joined #openstack-keystone12:07
*** rdo has quit IRC12:12
*** rdo has joined #openstack-keystone12:14
*** GB21 has quit IRC12:14
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 roles  https://review.openstack.org/33454612:15
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 roles  https://review.openstack.org/33454612:17
*** clenimar_ has quit IRC12:17
*** raildo has joined #openstack-keystone12:18
*** ddieterly has quit IRC12:20
rvasilets_HI. I need to create session to initialize python-keystoneclient with it. To create the session I need to know what parameters to pass(v2 or v3 params) to it. How can I know what versions of keystone I have before initialize python-keystoneclient? Looks like stuff for that https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/discover.py#L138 require session object. What will you suggest to me?12:21
*** gordc has joined #openstack-keystone12:24
*** ddieterly has joined #openstack-keystone12:25
*** GB21 has joined #openstack-keystone12:26
*** ddieterly has quit IRC12:27
stevemarbreton: maybe12:29
stevemarokay, it was 6...12:29
stevemari was up 5 hrs later, but had to take care of baby a bit12:29
*** GB21 has quit IRC12:31
*** spzala has joined #openstack-keystone12:32
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add role functional tests  https://review.openstack.org/33511812:32
openstackgerritNisha Yadav proposed openstack/python-keystoneclient: Add role functional tests  https://review.openstack.org/33511812:34
*** pauloewerton has joined #openstack-keystone12:34
*** spzala has quit IRC12:39
*** jerrygb has joined #openstack-keystone12:48
*** jerrygb has quit IRC12:48
*** ddieterly has joined #openstack-keystone12:52
*** ddieterly has quit IRC13:01
*** nisha_ has quit IRC13:02
*** markvoelker has joined #openstack-keystone13:03
*** henrynash has joined #openstack-keystone13:05
*** ChanServ sets mode: +v henrynash13:05
*** spzala has joined #openstack-keystone13:17
*** bknudson_ has left #openstack-keystone13:26
*** bknudson_ has joined #openstack-keystone13:26
*** ChanServ sets mode: +v bknudson_13:26
*** ametts has joined #openstack-keystone13:27
lbragstadmorning13:30
*** gagehugo has joined #openstack-keystone13:32
*** jrist has quit IRC13:32
openstackgerritMerged openstack/keystone: Remove `name` property from `endpoint` create/update API  https://review.openstack.org/34273813:34
*** tonytan4ever has joined #openstack-keystone13:36
*** ddieterly has joined #openstack-keystone13:36
openstackgerritSteve Martinelli proposed openstack/keystone: Add relationship links to OAUTH APIs  https://review.openstack.org/34235013:40
openstackgerritSteve Martinelli proposed openstack/keystone: clean up OAUTH API  https://review.openstack.org/34235113:40
*** richm has joined #openstack-keystone13:40
openstackgerritSteve Martinelli proposed openstack/keystone: clean up OAUTH API  https://review.openstack.org/34235113:43
stevemarlbragstad: morning o13:43
stevemaro/13:43
stevemargagehugo: thanks for updating the blueprint13:45
*** sheel has quit IRC13:46
*** sdake has joined #openstack-keystone13:47
*** adu has quit IRC13:49
*** sdake_ has joined #openstack-keystone13:50
gagehugostevemar: no prob, i'll start looking at the v2 stuff13:51
*** sdake has quit IRC13:52
*** sdake_ has quit IRC13:52
*** rderose has joined #openstack-keystone13:57
*** code-R has joined #openstack-keystone13:57
*** itisha has joined #openstack-keystone13:57
*** EinstCrazy has quit IRC14:02
*** edmondsw has joined #openstack-keystone14:02
*** EinstCrazy has joined #openstack-keystone14:02
*** code-R_ has joined #openstack-keystone14:03
lbragstadis r.o.o slow/giving 502s for anyone?14:05
*** code-R has quit IRC14:06
*** EinstCrazy has quit IRC14:07
*** rha has quit IRC14:12
*** ravelar159 has joined #openstack-keystone14:12
*** rderose_ has joined #openstack-keystone14:12
*** markvoelker has quit IRC14:13
stevemarlbragstad: no 502s, but def slow14:13
*** nisha_ has joined #openstack-keystone14:14
*** rderose has quit IRC14:15
*** nisha_ has quit IRC14:15
*** nisha has joined #openstack-keystone14:16
*** markvoelker has joined #openstack-keystone14:16
*** markvoelker has quit IRC14:16
*** nisha is now known as Guest5591314:16
-openstackstatus- NOTICE: Gerrit is restarting to correct memory/performance issues.14:18
dolphmit took gerrit going down to make me realize i wasn't on IRC14:18
lbragstadlol14:19
knikollamorning o/14:21
*** rderose_ has quit IRC14:24
dstanekknikolla: good morning!14:26
*** links has quit IRC14:27
*** jaosorior has joined #openstack-keystone14:28
*** Guest55913 is now known as nisha_14:30
*** nisha_ has quit IRC14:31
*** dikonoor has quit IRC14:31
*** nisha_ has joined #openstack-keystone14:31
*** rderose has joined #openstack-keystone14:32
nisha_hey all14:32
nisha_I am having some trouble figuring out why I am getting,  keystoneauth1.exceptions.http.Conflict in this patch https://review.openstack.org/#/c/335118/14:33
patchbotnisha_: patch 335118 - python-keystoneclient - Add role functional tests14:33
nisha_though the tests are passing locally for me14:34
nisha_can anyone please help14:34
*** code-R_ has quit IRC14:35
*** daemontool has quit IRC14:35
stevemardolphm: slacker114:36
dolphmstevemar: stackerslacker14:37
*** markvoelker has joined #openstack-keystone14:37
nisha_rodrigods, hey you around?14:37
stevemardolphm: i'm wondering if doing a civs is overkill for the keystone mascot?14:42
dolphmstevemar: civs?14:42
stevemardolphm: like for the ptl elections: http://civs.cs.cornell.edu/14:42
dolphmstevemar: oh, condorcet14:43
*** nisha_ is now known as nisha__14:44
*** nisha__ is now known as nisha_14:44
dolphmstevemar: http://i.imgur.com/EFZqEuY.jpg14:44
stevemarhehe14:45
*** jdandrea has joined #openstack-keystone14:45
jdandreaCan someone tell me when Keystone Domains became (or will become) "fully supported" in OpenStack? I'm hearing there's "partial support for domains" in Mitaka and "full support" in Newton, but the Grizzly release notes are where Keystone Domains (and v3 API) made their debut.14:46
*** jaosorior_ has joined #openstack-keystone14:47
*** jaosorior has quit IRC14:47
dolphmjdandrea: that depends on the use case you're looking to take advantage of?14:48
*** jaosorior has joined #openstack-keystone14:48
bretonjdandrea: it's not about support or domains. It's about usage of them. Some projects use them explicitely, some don't and live fine without them.14:49
jdandrea@dolphm I wonder if they may be conflating Keystone's introduction of it with other OpenStack projects *use* of it.14:49
jdandreabreton *nodnod*14:49
*** phalmos has joined #openstack-keystone14:50
stevemarjdandrea: ++ it's been around for a while, just other projects don't take advantage of them14:50
dolphmjdandrea: when we originally introduced domains, we had no reason to bother any other services with their existence, so i'd say they were "fully supported" on day 1. we've since added additional use cases, some including support/acknowledgement in other services, and additional features that utilize them in keystone14:50
*** KevinE has joined #openstack-keystone14:50
*** KevinE has quit IRC14:51
bretonjdandrea: we don't talk about "support" for a long time already. If there is a usecase with domains in another service that you need, then it's just yet another missing feature, that has little to do with domains support14:51
*** edtubill has joined #openstack-keystone14:51
*** KevinE has joined #openstack-keystone14:51
jdandreaThanks everyone - that is superb!14:51
*** jaosorior_ has quit IRC14:52
jdandreaI had a feeling "support" was being conflated with "usage" and this confirms it. Very much appreciated.14:52
*** dave-mccowan has joined #openstack-keystone14:52
*** jerrygb has joined #openstack-keystone14:52
*** KevinE has quit IRC15:02
*** jerrygb_ has joined #openstack-keystone15:06
*** nisha_ has left #openstack-keystone15:09
*** jerrygb has quit IRC15:09
*** jrist has joined #openstack-keystone15:10
crinklegood morning keystone15:13
dstanekhiya crinkle15:13
*** jrist has quit IRC15:16
*** jrist has joined #openstack-keystone15:17
edmondswany ideas on why I might be hitting this circular import of oslo_config, and how to avoid it?  http://paste.openstack.org/show/533068/15:21
*** gagehugo has quit IRC15:24
*** gagehugo has joined #openstack-keystone15:24
dstanekedmondsw: i've not seen that. what are you running to get that?15:25
edmondswnewton15:25
edmondswhigher up in the trace is a script I wrote (that I can't share), but that shouldn't matter... circular is circular, and shouldn't happen no matter what originally imported the first time15:26
*** ametts has quit IRC15:27
*** nisha_ has joined #openstack-keystone15:29
*** nisha_ has left #openstack-keystone15:29
*** spzala has quit IRC15:30
*** spzala has joined #openstack-keystone15:30
*** phalmos has quit IRC15:32
dstanekedmondsw: what is token/__init__.py? it seems like you are running your script from within the keystone directory15:33
dstanekedmondsw: and you are getting keystone.token imported instead of python's token module15:34
*** itlinux has joined #openstack-keystone15:34
*** spzala has quit IRC15:35
edmondswdstanek... ahhh... yep, that's it15:35
*** ametts has joined #openstack-keystone15:35
edmondswdstanek thanks!15:35
edmondswI knew this code was working yesterday... but I'd gone into the keystone dir to look at something and hadn't thought about that being what was different15:36
*** ravelar_159 has joined #openstack-keystone15:37
*** ddieterly is now known as ddieterly[away]15:38
*** chrisshattuck has joined #openstack-keystone15:38
*** ravelar159 has quit IRC15:38
*** phalmos has joined #openstack-keystone15:39
*** ravelar_159 has quit IRC15:40
dstanekedmondsw: :-D15:42
*** ravelar159 has joined #openstack-keystone15:42
*** ddieterly[away] is now known as ddieterly15:44
*** links has joined #openstack-keystone15:45
*** gyee has joined #openstack-keystone15:50
*** ChanServ sets mode: +v gyee15:50
openstackgerritwerner mendizabal proposed openstack/keystone: Support encryption of credentials in Keystone  https://review.openstack.org/31716915:53
openstackgerritMerged openstack/keystone: Add relationship links to OAUTH APIs  https://review.openstack.org/34235015:53
*** wangqun has quit IRC15:55
lbragstadjamielennox around?15:56
lbragstadI have a feeling no, but...15:56
dolphmlbragstad: it's saturday15:57
dolphmlbragstad: so, no15:57
*** dan_nguyen has joined #openstack-keystone15:57
lbragstadi figured as much15:57
lbragstaddolphm if it's saturday in Australia then are we done, too?15:58
lbragstad#happyhour!15:58
lbragstadI mean, that's how it works.. right?15:58
dstanek#happyhour sounds good16:02
*** adrian_otto has joined #openstack-keystone16:03
lbragstadrderose i take it you got around the gate issue you were seeing with the coverage job because of https://review.openstack.org/#/c/340074/19..25/test-requirements.txt,unified ?16:04
patchbotlbragstad: patch 340074 - keystone - PCI-DSS Lockout requirements16:04
dstaneklbragstad: i think he just had to update the requirements16:05
openstackgerritMerged openstack/keystone: clean up OAUTH API  https://review.openstack.org/34235116:05
lbragstadI've never seen the use of three (===) in a requirements file before16:05
lbragstadi.e. freezegun===0.3.516:05
lbragstaddstanek is ^ that a thing?16:06
dstaneklbragstad: i've never seen that before. maybe a typo in g-r?16:06
lbragstadmaybe?16:06
lbragstaddstanek https://review.openstack.org/#/c/340074/25/test-requirements.txt has it removed16:06
patchbotlbragstad: patch 340074 - keystone - PCI-DSS Lockout requirements16:06
lbragstadso we're not specifying a version at all (should we be?)16:07
dolphmlbragstad: sounds like teamwork - no man left behind or something16:07
*** sdake has joined #openstack-keystone16:07
lbragstaddolphm ++16:07
lbragstad"I'll take the day off *with* you!16:07
dstaneklbragstad: ah, i think that's why it was broken. rderose said that -infra told him the failure was because his requirements didn't match up exactly to g-r16:08
dolphmlbragstad: the line in keystone has to match this line exactly https://github.com/openstack/requirements/blob/master/global-requirements.txt#L30016:08
lbragstadah - https://github.com/openstack/requirements/search?utf8=%E2%9C%93&q=freezegun16:08
lbragstadi was looking at upper constraints before16:08
dstanekdolphm: ++16:08
*** adrian_otto1 has joined #openstack-keystone16:09
*** edtubill has quit IRC16:09
dolphmlbragstad: dstanek: that's the format of upper requirements though https://github.com/openstack/requirements/blob/master/upper-constraints.txt#L11916:09
stevemarkeep an eye out for a poll email16:09
*** KevinE has joined #openstack-keystone16:09
dolphmbut we don't maintain upper requirements in keystone16:09
lbragstaddolphm I wonder if that is specific to upper requirements16:09
stevemaranyone that had 2 commits in this release or mitaka got a vote16:10
lbragstadi've never seen that format used in requirements.txt or test-requirements.txt16:10
*** roxanagh_ has joined #openstack-keystone16:10
dolphmstevemar: humpty dumpty didn't make the cut?16:10
dstanekstevemar: will it allow a write in candidate?16:10
stevemarnope16:10
dstanekstevemar: i was thinking we should nominate Trump's hair16:11
*** woodster_ has joined #openstack-keystone16:11
*** roxanagh_ has quit IRC16:11
lbragstaddstanek it hasn't improve in 40 years... i don't know if that's a good thing16:11
lbragstadimproved*16:12
dstanekbut it is a natural wonder16:12
stevemardstanek: maybe then we can write in newt as his vp16:12
*** adrian_otto has quit IRC16:13
*** spzala has joined #openstack-keystone16:13
*** tesseract- has quit IRC16:16
*** code-R has joined #openstack-keystone16:16
*** rcernin|lunch has quit IRC16:18
stevemarActual votes cast thus far: 516:19
stevemarout of 88 hehe16:19
*** pcaruana has quit IRC16:20
*** code-R_ has joined #openstack-keystone16:20
bretonwhat are we voting for?16:22
dstanekbreton: favorite ice cream toppings16:22
stevemarbreton: keystone mascot - i needed a bit of fun on a friday16:23
*** code-R has quit IRC16:23
bretonand where is the list?16:23
dstanekstevemar: ah man, then i'd better change my vote!16:23
stevemarlbragstad: hehe, you're such a stickler! this is a straight refactor: https://review.openstack.org/#/c/341969/16:23
patchbotstevemar: patch 341969 - keystone - Cleanup trusts controller16:23
stevemarbreton: the list should be in the poll16:23
bretonooooh, just got the email16:23
stevemarbreton: you were sent16:23
stevemarbreton: :)16:23
*** sdake has quit IRC16:25
knikollavoted16:26
*** aastha has joined #openstack-keystone16:26
*** edtubill has joined #openstack-keystone16:27
*** ametts has quit IRC16:29
*** KevinE has quit IRC16:31
*** henrynash has quit IRC16:31
*** nisha_ has joined #openstack-keystone16:38
*** nisha_ has quit IRC16:38
*** NishaYadav has joined #openstack-keystone16:38
*** NishaYadav is now known as Guest4485316:39
*** david-lyle has joined #openstack-keystone16:42
*** Guest44853 has quit IRC16:44
notmorganstevemar: really? pangolin? :P16:44
* notmorgan is against using an animal ubuntu used.16:44
notmorgan[esp. recently]16:45
*** ametts has joined #openstack-keystone16:45
*** nisha_ has joined #openstack-keystone16:49
*** nisha_ has quit IRC16:50
*** NishaYadav has joined #openstack-keystone16:50
*** roxanagh_ has joined #openstack-keystone16:56
*** ddieterly is now known as ddieterly[away]16:56
*** NishaYadav has quit IRC16:58
*** nisha_ has joined #openstack-keystone16:58
*** nisha_ has quit IRC16:58
*** NishaYadav has joined #openstack-keystone16:58
*** adrian_otto1 has quit IRC17:04
*** phalmos has quit IRC17:07
*** david-lyle has quit IRC17:08
*** roxanagh_ has quit IRC17:14
*** spzala has quit IRC17:17
*** browne has joined #openstack-keystone17:18
*** spzala has joined #openstack-keystone17:18
*** KevinE has joined #openstack-keystone17:19
*** spzala has quit IRC17:23
*** ddieterly[away] is now known as ddieterly17:26
*** dan_nguyen has quit IRC17:28
*** NishaYadav has quit IRC17:29
bretonprepare_ldap turns out to be very small17:31
*** ddieterly is now known as ddieterly[away]17:34
*** roxanagh_ has joined #openstack-keystone17:38
*** harlowja has quit IRC17:39
*** harlowja has joined #openstack-keystone17:41
*** catintheroof has joined #openstack-keystone17:48
stevemarbreton: ++17:51
stevemarcall list_users and then call the mapping_api ? :)17:51
stevemarnotmorgan: OSSG already voted the pangolin as theirs, so we don't have first dibs on it anyway17:51
*** links has quit IRC17:52
stevemarjdennis1: thanks for looking at the unicode stuff in osc :D17:55
bretonstevemar: nope17:56
bretonstevemar: only call list_users.17:56
jdennis1stevemar: you're welcome, one more patch coming for openstack client17:56
*** catintheroof has quit IRC17:56
stevemarbreton: hehe17:57
stevemarjdennis1: i'm eager to review it17:57
stevemarjdennis1: i thought we did a small fix for that in swift... let me look at git blame17:57
stevemarjdennis1: we just cheaped out, d'oh: https://github.com/openstack/python-openstackclient/commit/cfd2bf5882b72d6dbd09a1839b63ed41f383436517:58
jdennis1stevemar: it seems (at least in keystone and keystoneclient) we've make local fixes where we see encode/decode issues instead of trying to assure everythine is Unicode internally17:59
*** rcernin has joined #openstack-keystone17:59
stevemarjdennis1: oh actually, swift properties are in headers and not allowed to be unicode, so that is right18:00
stevemarjdennis1: this looks good though: https://github.com/openstack/python-openstackclient/commit/985b2cdd2c07442f4446e6164117cb8011269c8c18:00
*** AJaeger has joined #openstack-keystone18:00
openstackgerritAndreas Jaeger proposed openstack/keystone: Use constraints for coverage job  https://review.openstack.org/34301618:00
AJaegerkeystone team, here's a change that I'd love to see merged for testing that constraints can be used in post jobs - if you're up to it ^18:01
stevemarAJaeger: i would love that18:01
AJaegerstevemar: do you want to guinea-pig it, please?18:02
AJaegerfirst the infra change must merge...18:02
stevemarAJaeger: sure, i'll pull it down18:02
AJaegerand if this works out, we can allow constraints for *all* jobs...18:02
AJaegerthanks, stevemar18:03
stevemarAJaeger: one related question, if you don't mind18:03
AJaegersure18:03
stevemarAJaeger: we also have the coverage job in the stable gates, but in liberty it's failing :(18:03
stevemarAJaeger: i tried doing what you just did: https://review.openstack.org/#/c/333560/18:04
patchbotstevemar: patch 333560 - keystone (stable/liberty) - fix cover job for liberty18:04
stevemarAJaeger: with the added change of pulling down the requirements file18:04
AJaegerlet me check...18:05
stevemarAJaeger: awesomeo18:05
*** jaosorior has quit IRC18:05
*** jsavak has joined #openstack-keystone18:05
AJaegerstevemar: right now the infra job does not set constraints at all for coverage, my change adds it.18:06
stevemarAJaeger: ah okay, so we probably should not have been running that job as a voting job :)18:06
AJaegerstevemar: no, you should have - but change 333560 fails because of the constraints file.18:07
AJaegerstevemar: looking at https://review.openstack.org/#/c/333537/, it seems that a newer dogpile version is the problem.18:08
patchbotAJaeger: patch 333537 - keystone (stable/liberty) - Fix keystone-coverage-db gate for stable/liberty (ABANDONED)18:08
AJaegerSo, my proposal to fix it: Merge the infra patch - and then 333560 will just work out of the box. So, recheck it and see whether that works (it should ;)18:09
AJaegersince the infra job adds the constraints file - and should use it.18:09
AJaegerA good test case, thanks ;)18:09
stevemarAJaeger: hehe18:10
stevemarAJaeger: will the depends-on work in this case?18:11
stevemaradded it anyway18:11
AJaegerstevemar: it will not allow it to merge before the infra change is in.18:11
stevemarof course18:12
AJaegerstevemar: but that's all - it will not change the job definition for you, so it will not succeed magically - only after the infra one is merged.18:12
stevemari was just wondering if depends-on pulled in infra changes18:12
stevemarah18:12
AJaegerit does not18:12
stevemardoh18:12
AJaegerfar too much risk to create havoc this way...18:13
*** spzala has joined #openstack-keystone18:17
lbragstadstevemar ravelar159 and I have an osc question for you when you have a minute18:20
*** ddieterly[away] is now known as ddieterly18:27
*** henrynash has joined #openstack-keystone18:29
*** ChanServ sets mode: +v henrynash18:29
*** phalmos has joined #openstack-keystone18:29
*** dave-mccowan has quit IRC18:34
EmilienMstevemar: hey Steve I have some questions for you18:34
EmilienMwhat is the diff between auth_url, auth_uri and identity_uri?18:34
lbragstadstevemar nevermind - ravelar159 figured it out :)18:34
stevemarEmilienM: oh jeez18:35
EmilienMyes18:35
stevemarlbragstad: cool18:35
stevemarEmilienM: so, one of those is deprecated, let me look18:35
stevemarEmilienM: this is all keystonemiddleware right?18:35
EmilienMyes18:35
EmilienMthis is so confusing18:35
iurygregory+118:35
openstackgerritBoris Bobrov proposed openstack/keystone: Faster id mapping lookup  https://review.openstack.org/33929418:38
openstackgerritBoris Bobrov proposed openstack/keystone: Prevent error in when duplicate mapping is created  https://review.openstack.org/34302718:38
openstackgerritBoris Bobrov proposed openstack/keystone: Add prepare_ldap command  https://review.openstack.org/34302818:38
stevemarEmilienM: so definitely identity_uri is deprecated: https://github.com/openstack/keystonemiddleware/blob/31c8582f3951137c361af5a5346eeab79e99cfc9/keystonemiddleware/auth_token/_auth.py#L3618:38
EmilienMok good18:38
EmilienMand auth_type should we set to what ?18:38
EmilienMpassword?18:38
EmilienMso here's the thing, see this log: http://logs.openstack.org/05/342905/5/check/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/0294b4c/logs/cinder/cinder-api.txt.gz#_2016-07-15_17_49_48_88818:38
EmilienMbut see the conf18:38
EmilienMhttp://logs.openstack.org/79/342379/1/gate/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/e7a88d7/logs/etc/cinder/cinder.conf.txt.gz18:38
EmilienMit looks like something in middleware is using https, while in conf we use http18:39
dolphmlbragstad: do you remember where that list of keystone-manage doctor ideas we had was? some etherpad of a keystone meeting18:40
dolphmfrom*18:40
dolphmstevemar: ^ ?18:40
EmilienMdolphm: do you know your website is down? http://dolphm.com18:41
EmilienMlooks like DNS issue18:41
dolphmEmilienM: works for me? :-/18:41
EmilienMwhat?18:42
stevemarworks for me18:42
dolphmEmilienM: it's coming up just fine when i load it18:42
bretondolphm: $ ping dolph.com18:42
bretonping: unknown host dolph.com18:42
bretonoh ok18:42
dolphmdolphm*.com18:42
EmilienMsame as breton18:42
lbragstadworks for me18:42
knikollaworks for me18:42
knikolladolphm: jekyll?18:42
EmilienMit works also for me, but when I'm out of VPN, my bad. Probably something with redhat dns18:42
bretonyeah, dolphm.com works for me too18:42
EmilienMcool, sorry for noise then :-)18:43
bretonalso, why dolph.com doesn't work?18:43
stevemarEmilienM: auth_url is used if you're using the auth plugins18:43
bretonsuch a cool domain wasted.18:43
dolphmbreton: because someone else has owned it since 199618:43
stevemarEmilienM: auth_uri is used if you're using the old middleware specific ones18:44
EmilienMstevemar: is 'password' a good default for auth_type ?18:44
stevemarthis is all IIRC18:44
EmilienMerr, auth_plugin18:44
stevemarEmilienM: yep18:44
EmilienMerr, auth_type18:44
EmilienMok thank Steve you rock18:44
notmorganEmilienM: dolphm's website loads to me18:44
EmilienMit's probably blocked by Quebec firewall18:45
EmilienM(it's a joke ^=18:45
openstackgerrithenry-nash proposed openstack/keystone: Improve readability of the api-ref roles section  https://review.openstack.org/34232518:47
EmilienMnotmorgan, stevemar: do you guys know why keystonemiddleware would take https by default ? http://logs.openstack.org/05/342905/5/check/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/0294b4c/logs/cinder/cinder-api.txt.gz#_2016-07-15_17_49_48_88818:47
*** sdake has joined #openstack-keystone18:47
stevemarEmilienM: do you have a copy of the config file?18:49
openstackgerrithenry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters  https://review.openstack.org/34244118:51
lbragstaddolphm i have no idea... i just parsed every etherpad i've opened since april looking for it18:51
stevemarlbragstad: dolphm i don't recall there ever being a doctor etherpad18:52
stevemarlbragstad: dolphm are you referring to https://etherpad.openstack.org/p/troubleshoot-keystone ?18:52
stevemarbreton: i'm trying to think of how you can test that18:52
lbragstadstevemar no - we had a specific etherpad somewhere and I think we just started adding keystone-manage doctor cases to it after a meeting18:54
openstackgerrithenry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters  https://review.openstack.org/34244118:54
EmilienMstevemar: http://logs.openstack.org/79/342379/1/gate/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/e7a88d7/logs/etc/cinder/cinder.conf.txt.gz18:54
stevemarduh18:55
stevemarlbragstad: i don't recall it18:56
EmilienMmaybe because it's missing auth_type18:56
EmilienMso it takes https from somewhere18:56
*** slberger has joined #openstack-keystone18:59
bretonstevemar: i am writing tests now19:00
bretonstevemar: doesn't look too complex to me19:00
*** jsavak has quit IRC19:02
EmilienMstevemar: don't worry if you don't find it, we'll use new parameters anyway and it should work19:02
*** tonytan4ever has quit IRC19:05
stevemardolphm: lbragstad i looked at all the meeting logs post summit -- no mention of doctor19:08
*** d0ugal has quit IRC19:09
lbragstadstevemar same here19:09
stevemari thought that was the case, but i missed a few meetings so i wasn't sure19:09
dolphmlbragstad: it was in a random etherpad we contributed to - outside of the meeting agenda19:09
dolphmi'll have to go through meeting logs19:10
*** jerrygb_ has quit IRC19:10
stevemardolphm: here ya go: http://eavesdrop.openstack.org/meetings/keystone/2016/19:10
*** gagehugo has quit IRC19:10
*** gagehugo has joined #openstack-keystone19:12
dolphmstevemar: lbragstad: bingo, bottom of https://etherpad.openstack.org/p/keystone-troubleshooting19:12
lbragstadah!19:12
lbragstadand we also have https://etherpad.openstack.org/p/troubleshoot-keystone19:12
stevemarEmilienM: wow that is weird19:15
stevemarlbragstad: i copied the content to the beefier etherpad, and dropped in a link19:18
openstackgerrithenry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters  https://review.openstack.org/34244119:18
lbragstadstevemar sweet, thanks!19:19
openstackgerrithenry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles  https://review.openstack.org/34246819:19
*** henrynash has quit IRC19:19
stevemardolphm: do you have a few minutes to look at some of the published v2 APIs? i think you're the only one with enough history to know whats accurate :)19:20
dolphmstevemar: sure, i can do that in a bit19:21
stevemardolphm: mostly concerned about http://developer.openstack.org/api-ref/identity/v2-ext/index.html and http://developer.openstack.org/api-ref/identity/v2-admin/index.html19:23
stevemarespecially because there are non-KSADM routes in the KSADM docs :P19:23
stevemarand i don't think we support the KSEC2 ones :)19:24
*** KevinE has quit IRC19:27
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843519:39
*** browne has quit IRC19:40
EmilienMstevemar: http://logs.openstack.org/05/342905/7/check/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/2c6f6f3/logs/cinder/cinder-api.txt.gz#_2016-07-15_19_30_56_66419:41
EmilienMstevemar: it's not username anymore?19:41
EmilienMhttps://github.com/openstack/keystoneauth/blob/01d040b2beceac4f46288bbc29ed42449ef5f49b/keystoneauth1/loading/_plugins/identity/v3.py#L2319:42
*** jsavak has joined #openstack-keystone19:47
*** woodster_ has quit IRC19:49
openstackgerritBoris Bobrov proposed openstack/keystone: [wip] Add prepare_ldap command  https://review.openstack.org/34302819:55
*** ametts has quit IRC19:56
*** henrynash has joined #openstack-keystone19:58
*** ChanServ sets mode: +v henrynash19:58
*** ddieterly is now known as ddieterly[away]19:58
*** tonytan4ever has joined #openstack-keystone20:05
openstackgerritSteve Martinelli proposed openstack/keystone: v2 api: correct user list  https://review.openstack.org/34305320:06
*** sdake has quit IRC20:08
openstackgerritSteve Martinelli proposed openstack/keystone: v2 api: change update user  https://review.openstack.org/34305520:09
*** dan_nguyen has joined #openstack-keystone20:09
*** tonytan4ever has quit IRC20:11
*** jlk has left #openstack-keystone20:12
openstackgerritSteve Martinelli proposed openstack/keystone: v2 api: delete user is defined twice  https://review.openstack.org/34305620:13
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs  https://review.openstack.org/33631820:17
*** chrisshattuck has quit IRC20:19
*** ddieterly[away] is now known as ddieterly20:20
*** roxanagh_ has quit IRC20:23
openstackgerritSteve Martinelli proposed openstack/keystone: v2 api: clean up tenant APIs  https://review.openstack.org/34306120:27
stevemardolphm: fwiw, i'm hacking away at it ^20:28
*** henrynash has quit IRC20:30
*** henrynash has joined #openstack-keystone20:30
*** ChanServ sets mode: +v henrynash20:30
*** adrian_otto has joined #openstack-keystone20:31
*** adrian_otto has quit IRC20:31
openstackgerritSteve Martinelli proposed openstack/keystone: api v2: move services API to admin, not extension  https://review.openstack.org/34306220:32
*** adrian_otto has joined #openstack-keystone20:33
openstackgerritSteve Martinelli proposed openstack/keystone: The service APIs are missing OS-KSADM in the path  https://review.openstack.org/34306420:38
*** gyee has quit IRC20:42
*** gordc has quit IRC20:43
openstackgerritSteve Martinelli proposed openstack/keystone: v2 api: remove API to list user roles  https://review.openstack.org/34306620:45
*** jsavak has quit IRC20:49
*** browne has joined #openstack-keystone20:49
*** edmondsw has quit IRC20:58
lbragstadhenrynash your latest string of patches for the role assignment docs look good - thanks for respinning20:59
*** dan_nguyen has quit IRC20:59
*** phalmos has quit IRC21:00
*** edmondsw has joined #openstack-keystone21:02
*** edmondsw has quit IRC21:02
*** edmondsw has joined #openstack-keystone21:03
*** sdake has joined #openstack-keystone21:03
*** edmondsw has quit IRC21:04
*** ddieterly is now known as ddieterly[away]21:04
*** jsavak has joined #openstack-keystone21:04
*** EinstCrazy has joined #openstack-keystone21:08
*** ddieterly[away] is now known as ddieterly21:09
openstackgerritDolph Mathews proposed openstack/keystone: keystone-manage doctor  https://review.openstack.org/34307721:11
*** EinstCrazy has quit IRC21:13
*** roxanagh_ has joined #openstack-keystone21:16
henrynashlbragstad: thx21:16
*** gyee has joined #openstack-keystone21:20
*** ChanServ sets mode: +v gyee21:20
*** haplo37_ has joined #openstack-keystone21:21
henrynashstevemar: set of patches on roles are probably ready to go in: starting at: https://review.openstack.org/#/c/342325/21:21
patchbothenrynash: patch 342325 - keystone - Improve readability of the api-ref roles section21:21
henrynashprojects up next !21:22
*** tonytan4ever has joined #openstack-keystone21:23
dstanekhenrynash: nice!21:23
*** edtubill has quit IRC21:25
*** tonytan4ever has quit IRC21:28
*** clenimar_ has joined #openstack-keystone21:29
dstanekhenrynash: you still around?21:35
henrynashdstanek: hi21:35
dstanekhenrynash: howdy!21:36
henrynashdstanek: howdydo21:36
dstanekhenrynash: i'm looking at https://review.openstack.org/#/c/342441/9/api-ref/source/v3/roles.inc21:37
patchbotdstanek: patch 342441 - keystone - Fix up the api-ref for role query paramaters21:37
henrynashdstanek: yep21:37
dstanekshoudl scope.project_id be score.project.id?21:37
henrynashdstanek: ooh21:37
dstanekhenrynash: i was confirming the docs using Martinelli21:37
dstaneklol21:37
dstanekhttp://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/controllers.py#n92921:37
dstanekstevemar helps me find all the things21:38
henrynashdstanek: you are, as ever, correct my friend!21:38
henrynashdstanek: yeah, most of the useless, but just occasionally….21:38
henrynash:-)21:38
henrynashdstanek: i’ll update the patch…good spot21:39
stevemardstanek: hmm?21:39
stevemarwhat i do now?21:40
dstanekhenrynash: i just voted -1 so we don't accidentally merge it21:40
henrynashdstanek: good21:40
dstanekstevemar: lol, nothing i tried to copy and paste a link to henrynash and ended up copying your name21:40
stevemarah21:40
dstanekstevemar: "i was confirming the docs using Martinelli"21:40
stevemardamn, thought i was helpful for a minute :(21:40
dstanekyou're my best doc resource :-)21:41
henrynashstevemar: we currently keep the OS-INHERIT stuff serparte in the docs….even though it is now core….I think it really makes understanding it much harder….I wonder if we could combine (evein though the APIs have OS-INHERIT in them)…21:44
stevemarohhh i like keystone doctor21:44
stevemarhenrynash: i was fine with that in the spec repo right?21:45
stevemarhenrynash: this change? https://github.com/openstack/keystone-specs/commit/3b790eafdcfd2f5d8c070980783a50d01574c42521:45
dstanekhttps://review.openstack.org/#/c/337835/ ftw!21:46
patchbotdstanek: patch 337835 - python-keystoneclient - Use the adapter instead of the client in tests21:46
henrynashstevemar: yeah, we did it for the old API spec21:46
henrynashstevemar: but it’s still all spearate in api-ref21:46
dstanekhenrynash: you're really ripping through the documenation21:46
henrynashstevemar: I’m happy to take on the act of merhing21:46
henrynashmerging21:46
henrynashdstanek: strangely I like this kind of stuff (must be a British tea-drinking thing…)21:47
stevemarhenrynash: i'm a fan of it too21:47
dstaneki say, good show sir!21:47
*** julim has quit IRC21:48
henrynashdstanek: chocks away!21:48
*** ddieterly is now known as ddieterly[away]21:48
henrynashstevemar: we shuold also probably make our code support APIs without the extension name in them (while cotinuing to supprot them with it in)….be much more consistent now they are core21:49
*** spzala has quit IRC21:50
dstanekhenrynash: i was thinking the same thing yesterday when looking at doc reviews21:50
stevemarhenrynash: you mean just have an alias without the OS-FEDERATION part?21:50
henrynashstevemar: yes21:50
stevemarhenrynash: surprisingly, we already do this... https://github.com/openstack/keystone/blob/master/keystone/v2_crud/admin_crud.py#L104-L11421:51
dstanekthat'll make them look like first class apis21:51
*** ddieterly[away] is now known as ddieterly21:51
henrynashstevemar, dstanek: one slight complication is that you would want to make sure the url returned in any links matched what the user had entered21:52
*** haplo37_ has quit IRC21:52
stevemarhenrynash: those links are so pointless21:53
henrynashstevemar: yep, I give a coconut to the first person who sees them used in teh field…21:53
*** spzala has joined #openstack-keystone21:54
openstackgerrithenry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters  https://review.openstack.org/34244121:57
*** spzala has quit IRC21:58
openstackgerrithenry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles  https://review.openstack.org/34246821:59
henrynashdstanek: fixed up the scope.project.id thing22:00
dstanekhenrynash: nice. thanks!22:02
henrynashdstanek: i also removed the scope.OS_INHERIT option…since until we merge in the OS-INHERIT that shouldn’t be in that doc22:03
*** pauloewerton has quit IRC22:05
*** slberger has quit IRC22:06
*** slberger has joined #openstack-keystone22:09
*** gagehugo has quit IRC22:12
*** pooja has joined #openstack-keystone22:12
poojaHi, I needed some help getting effective role information for SSO users in Mitaka.. If I query effective roles for a SSO user using the shadow user id, it returns an empty roles it.22:12
poojaIs there an api to query effective roles for a SSO user using group mappings?22:13
*** clenimar_ has quit IRC22:14
*** bknudson_ has left #openstack-keystone22:15
*** clenimar_ has joined #openstack-keystone22:16
*** tonytan4ever has joined #openstack-keystone22:17
*** ravelar159 has quit IRC22:18
*** raildo has quit IRC22:19
*** sdake has quit IRC22:19
*** ddieterly is now known as ddieterly[away]22:29
*** dan_nguyen has joined #openstack-keystone22:31
*** ddieterly[away] has quit IRC22:32
*** slberger has left #openstack-keystone22:37
*** dan_nguyen has quit IRC22:38
*** edmondsw has joined #openstack-keystone22:40
*** sdake has joined #openstack-keystone22:40
*** jsavak has quit IRC22:45
*** edmondsw has quit IRC22:45
*** sdake has quit IRC22:46
openstackgerrithenry-nash proposed openstack/keystone: Improve introdcution to api-ref projects  https://review.openstack.org/34310722:51
*** henrynash has quit IRC22:56
*** aastha has quit IRC22:59
*** sdake has joined #openstack-keystone23:02
*** EinstCrazy has joined #openstack-keystone23:09
*** aastha has joined #openstack-keystone23:10
*** clenimar_ has quit IRC23:11
*** EinstCrazy has quit IRC23:14
*** sdake has quit IRC23:22
*** clenimar_ has joined #openstack-keystone23:23
*** ddieterly has joined #openstack-keystone23:28
*** rcernin has quit IRC23:30
*** haplo37_ has joined #openstack-keystone23:30
*** pooja has quit IRC23:33
*** tonytan4ever has quit IRC23:35
openstackgerritRoxana Gherle proposed openstack/keystone: Fix the username value in federated tokens  https://review.openstack.org/33561723:36
*** spzala has joined #openstack-keystone23:37
*** gyee has quit IRC23:49

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!