| *** code-R has quit IRC | 00:00 | |
| *** code-R_ has quit IRC | 00:09 | |
| *** code-R has joined #openstack-keystone | 00:09 | |
| *** markvoelker has joined #openstack-keystone | 00:11 | |
| *** tqtran has quit IRC | 00:25 | |
| *** guoshan has joined #openstack-keystone | 00:28 | |
| *** adrian_otto has quit IRC | 00:29 | |
| *** tonytan4ever has quit IRC | 00:41 | |
| *** gyee has quit IRC | 00:48 | |
| openstackgerrit | Tin Lam proposed openstack/keystone: Fix warning when running tox -e api-ref https://review.openstack.org/352656 | 00:53 |
|---|---|---|
| *** Ephur has quit IRC | 00:55 | |
| *** edmondsw has quit IRC | 01:04 | |
| *** guoshan has quit IRC | 01:08 | |
| *** gagehugo_ has joined #openstack-keystone | 01:08 | |
| *** browne has quit IRC | 01:17 | |
| *** guoshan has joined #openstack-keystone | 01:23 | |
| *** sdake has quit IRC | 01:27 | |
| *** chlong has joined #openstack-keystone | 01:27 | |
| *** sdake has joined #openstack-keystone | 01:29 | |
| *** EinstCrazy has joined #openstack-keystone | 01:30 | |
| *** jrist has quit IRC | 01:36 | |
| *** haplo37__ has joined #openstack-keystone | 01:42 | |
| *** tonytan4ever has joined #openstack-keystone | 01:42 | |
| *** amitkqed has quit IRC | 01:43 | |
| *** amitkqed has joined #openstack-keystone | 01:43 | |
| *** tonytan4ever has quit IRC | 01:47 | |
| *** jrist has joined #openstack-keystone | 01:50 | |
| *** jrist has quit IRC | 01:50 | |
| *** jrist has joined #openstack-keystone | 01:50 | |
| *** gagehugo_ has quit IRC | 01:50 | |
| *** davechen has joined #openstack-keystone | 02:04 | |
| *** woodster_ has quit IRC | 02:09 | |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting parameters of Policies APIs https://review.openstack.org/351636 | 02:13 |
| *** jrist has quit IRC | 02:14 | |
| *** jrist has joined #openstack-keystone | 02:26 | |
| openstackgerrit | Matt Mulsow proposed openstack/keystoneauth: User-agent header shouldn't start with a space https://review.openstack.org/352673 | 02:27 |
| *** esp has joined #openstack-keystone | 02:49 | |
| *** Ephur has joined #openstack-keystone | 02:55 | |
| *** julim has quit IRC | 03:00 | |
| *** roxanaghe has joined #openstack-keystone | 03:02 | |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 Credentials APIs https://review.openstack.org/352683 | 03:08 |
| *** itisha has quit IRC | 03:20 | |
| *** tqtran has joined #openstack-keystone | 03:22 | |
| *** tqtran has quit IRC | 03:27 | |
| openstackgerrit | Li Yingjun proposed openstack/keystone: Document get auth/catalog,projects,domains https://review.openstack.org/352689 | 03:35 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 OS-INHERIT APIs https://review.openstack.org/352690 | 03:38 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 OS-INHERIT APIs https://review.openstack.org/352690 | 03:44 |
| *** adriant has quit IRC | 03:55 | |
| *** Ephur has quit IRC | 03:59 | |
| *** Ephur has joined #openstack-keystone | 03:59 | |
| *** Ephur has quit IRC | 04:00 | |
| *** guoshan has quit IRC | 04:06 | |
| *** links has joined #openstack-keystone | 04:11 | |
| *** esp has quit IRC | 04:17 | |
| *** dave-mccowan has quit IRC | 04:24 | |
| *** chrichip has joined #openstack-keystone | 04:25 | |
| *** iurygregory has quit IRC | 04:38 | |
| *** iurygregory has joined #openstack-keystone | 04:39 | |
| *** KevinE has quit IRC | 04:40 | |
| *** guoshan has joined #openstack-keystone | 04:49 | |
| openstackgerrit | Tin Lam proposed openstack/keystone: Fix warning when running tox -e api-ref https://review.openstack.org/352656 | 04:51 |
| *** guoshan has quit IRC | 04:55 | |
| *** david-lyle_ has joined #openstack-keystone | 05:11 | |
| *** david-lyle has quit IRC | 05:13 | |
| *** roxanaghe has quit IRC | 05:17 | |
| *** rcernin has joined #openstack-keystone | 05:21 | |
| *** jaosorior has joined #openstack-keystone | 05:21 | |
| *** sdake has quit IRC | 05:26 | |
| *** rkrum has quit IRC | 05:28 | |
| *** sdake has joined #openstack-keystone | 05:29 | |
| *** davechen has quit IRC | 05:30 | |
| *** haplo37__ has quit IRC | 05:31 | |
| openstackgerrit | Tin Lam proposed openstack/keystone: api-ref: Add query options to GET /projects API documentation https://review.openstack.org/352708 | 05:34 |
| openstackgerrit | Tin Lam proposed openstack/keystone: api-ref: Add query options to GET /projects API documentation https://review.openstack.org/352708 | 05:37 |
| *** guoshan has joined #openstack-keystone | 05:43 | |
| *** davechen has joined #openstack-keystone | 05:43 | |
| *** guoshan has quit IRC | 05:48 | |
| openstackgerrit | Tin Lam proposed openstack/keystone: api-ref: Add "nocatalog" option to GET /v3/auth/tokens https://review.openstack.org/352718 | 05:55 |
| openstackgerrit | Tony Breeds proposed openstack/oslo.policy: Revert "Adds debug logging for policy file validation" https://review.openstack.org/352722 | 06:04 |
| *** roxanaghe has joined #openstack-keystone | 06:08 | |
| *** maestropandy has joined #openstack-keystone | 06:10 | |
| *** code-R_ has joined #openstack-keystone | 06:11 | |
| *** code-R has quit IRC | 06:12 | |
| *** roxanaghe has quit IRC | 06:13 | |
| *** code-R has joined #openstack-keystone | 06:14 | |
| *** code-R_ has quit IRC | 06:17 | |
| *** guoshan has joined #openstack-keystone | 06:19 | |
| *** tqtran has joined #openstack-keystone | 06:25 | |
| *** tqtran has quit IRC | 06:29 | |
| *** chlong is now known as chlong|mtg | 06:32 | |
| *** sdake has quit IRC | 06:38 | |
| *** pcaruana has joined #openstack-keystone | 06:39 | |
| *** Gorian has quit IRC | 06:40 | |
| *** code-R has quit IRC | 06:41 | |
| *** code-R has joined #openstack-keystone | 06:41 | |
| *** tesseract- has joined #openstack-keystone | 06:45 | |
| *** maestropandy has left #openstack-keystone | 06:48 | |
| *** tqtran has joined #openstack-keystone | 06:52 | |
| *** belmoreira has joined #openstack-keystone | 07:01 | |
| *** dancn` is now known as dancn | 07:08 | |
| *** jpena|off is now known as jpena | 07:12 | |
| *** browne has joined #openstack-keystone | 07:15 | |
| *** browne has quit IRC | 07:15 | |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 Credentials APIs https://review.openstack.org/352683 | 07:19 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 Authentication APIs https://review.openstack.org/352291 | 07:19 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 Services APIs https://review.openstack.org/351598 | 07:19 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting parameters of Policies APIs https://review.openstack.org/351636 | 07:19 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 Domain config APIs https://review.openstack.org/352260 | 07:19 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 OS-INHERIT APIs https://review.openstack.org/352690 | 07:19 |
| openstackgerrit | Anh Tran proposed openstack/keystone: api-ref: Correcting V3 Endpoints APIs https://review.openstack.org/351600 | 07:19 |
| *** daemontool has joined #openstack-keystone | 07:21 | |
| *** code-R_ has joined #openstack-keystone | 07:24 | |
| *** code-R has quit IRC | 07:24 | |
| *** dkehn_ has quit IRC | 07:25 | |
| *** daemontool_ has joined #openstack-keystone | 07:28 | |
| *** daemontool has quit IRC | 07:28 | |
| *** dkehn_ has joined #openstack-keystone | 07:38 | |
| *** david-lyle has joined #openstack-keystone | 07:43 | |
| *** david-lyle_ has quit IRC | 07:46 | |
| *** sdake has joined #openstack-keystone | 07:51 | |
| *** tqtran has quit IRC | 07:58 | |
| *** code-R has joined #openstack-keystone | 07:58 | |
| *** markvoelker has quit IRC | 07:59 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** code-R_ has quit IRC | 08:02 | |
| *** sdake has quit IRC | 08:06 | |
| *** pece has joined #openstack-keystone | 08:08 | |
| *** pnavarro has joined #openstack-keystone | 08:09 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 08:10 |
| *** code-R has quit IRC | 08:11 | |
| *** code-R has joined #openstack-keystone | 08:11 | |
| openstackgerrit | lilintan proposed openstack/keystoneauth: Update the home-page in setup.cfg https://review.openstack.org/352770 | 08:17 |
| *** amoralej|off is now known as amoralej | 08:23 | |
| *** Dave__ is now known as Dave | 08:25 | |
| *** mvk has quit IRC | 08:26 | |
| *** code-R has quit IRC | 08:34 | |
| *** maestropandy has joined #openstack-keystone | 08:48 | |
| *** jaosorior is now known as jaosorior_brb | 08:49 | |
| *** mvk has joined #openstack-keystone | 08:53 | |
| *** maestropandy1 has joined #openstack-keystone | 08:59 | |
| *** maestropandy1 has left #openstack-keystone | 08:59 | |
| *** markvoelker has joined #openstack-keystone | 09:00 | |
| *** maestropandy has quit IRC | 09:00 | |
| *** roxanaghe has joined #openstack-keystone | 09:00 | |
| *** fawadkhaliq has joined #openstack-keystone | 09:01 | |
| *** fawadkhaliq has quit IRC | 09:01 | |
| *** markvoelker has quit IRC | 09:05 | |
| *** roxanaghe has quit IRC | 09:06 | |
| *** chlong|mtg has quit IRC | 09:10 | |
| *** jed56 has joined #openstack-keystone | 09:21 | |
| *** Trixboxer has joined #openstack-keystone | 09:29 | |
| *** eileen has joined #openstack-keystone | 09:37 | |
| *** jaosorior_brb is now known as jaosorior | 09:42 | |
| *** chlong|mtg has joined #openstack-keystone | 09:47 | |
| *** davechen has left #openstack-keystone | 09:52 | |
| *** markvoelker has joined #openstack-keystone | 10:01 | |
| *** markvoelker has quit IRC | 10:05 | |
| *** Nakato has quit IRC | 10:05 | |
| *** Nakato has joined #openstack-keystone | 10:06 | |
| *** guoshan has quit IRC | 10:10 | |
| *** guoshan has joined #openstack-keystone | 10:11 | |
| *** pblaho has quit IRC | 10:15 | |
| *** guoshan has quit IRC | 10:16 | |
| *** mvk has quit IRC | 10:25 | |
| *** rvba has quit IRC | 10:26 | |
| *** ntpttr- has quit IRC | 10:31 | |
| *** eileen has quit IRC | 10:34 | |
| *** EinstCrazy has quit IRC | 10:35 | |
| *** mvk has joined #openstack-keystone | 10:38 | |
| *** ntpttr has joined #openstack-keystone | 10:39 | |
| openstackgerrit | Merged openstack/keystone: PCI-DSS Password expires validation https://review.openstack.org/333360 | 10:40 |
| *** guoshan has joined #openstack-keystone | 10:46 | |
| *** roxanaghe has joined #openstack-keystone | 10:48 | |
| *** roxanaghe has quit IRC | 10:53 | |
| *** sdake has joined #openstack-keystone | 10:53 | |
| *** markvoelker has joined #openstack-keystone | 11:02 | |
| *** guoshan has quit IRC | 11:03 | |
| *** guoshan has joined #openstack-keystone | 11:03 | |
| *** markvoelker has quit IRC | 11:06 | |
| *** sdake has quit IRC | 11:08 | |
| *** guoshan has quit IRC | 11:15 | |
| *** maestropandy has joined #openstack-keystone | 11:16 | |
| *** guoshan has joined #openstack-keystone | 11:16 | |
| *** mnikolaenko has quit IRC | 11:16 | |
| *** dkehn_ has quit IRC | 11:16 | |
| *** maestropandy has quit IRC | 11:20 | |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Log request-id for each api call https://review.openstack.org/352858 | 11:22 |
| samueldmq | morning keystone | 11:27 |
| samueldmq | dstanek: hi | 11:27 |
| *** jaosorior has quit IRC | 11:27 | |
| samueldmq | dstanek: you addressing comments from 334063 in folloup patches ? | 11:28 |
| *** jaosorior has joined #openstack-keystone | 11:28 | |
| samueldmq | dstanek: I would like to have that in... great reduction of time in tests ... | 11:28 |
| *** ericksonsantos has joined #openstack-keystone | 11:29 | |
| *** dkehn_ has joined #openstack-keystone | 11:29 | |
| *** julim has joined #openstack-keystone | 11:47 | |
| *** markvoelker has joined #openstack-keystone | 12:02 | |
| *** jpena is now known as jpena|lunch | 12:02 | |
| *** markvoelker has quit IRC | 12:07 | |
| *** mnikolaenko has joined #openstack-keystone | 12:08 | |
| *** amoralej is now known as amoralej|lunch | 12:12 | |
| *** markvoelker has joined #openstack-keystone | 12:23 | |
| *** maestropandy has joined #openstack-keystone | 12:23 | |
| *** maestropandy has left #openstack-keystone | 12:23 | |
| *** ayoung has quit IRC | 12:33 | |
| *** bill_az has joined #openstack-keystone | 12:35 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Pre-cache new tokens https://review.openstack.org/309146 | 12:36 |
| *** roxanaghe has joined #openstack-keystone | 12:36 | |
| *** dave-mccowan has joined #openstack-keystone | 12:39 | |
| *** roxanaghe has quit IRC | 12:41 | |
| *** gordc has joined #openstack-keystone | 12:43 | |
| *** catintheroof has joined #openstack-keystone | 12:46 | |
| *** guoshan_ has joined #openstack-keystone | 12:47 | |
| *** guoshan has quit IRC | 12:47 | |
| *** jrist has quit IRC | 12:52 | |
| *** rkrum has joined #openstack-keystone | 12:54 | |
| *** pauloewerton has joined #openstack-keystone | 12:57 | |
| *** jpena|lunch is now known as jpena | 12:58 | |
| samueldmq | dstanek: 'tox -e py27' has improved from 320 to 251 seconds with those patches | 13:00 |
| *** links has quit IRC | 13:06 | |
| *** jrist has joined #openstack-keystone | 13:06 | |
| samueldmq | when running 'tox -e py34' I am getting 'db type could not be determined' | 13:08 |
| samueldmq | what I am missing ? | 13:08 |
| *** sdake has joined #openstack-keystone | 13:09 | |
| *** richm has joined #openstack-keystone | 13:14 | |
| *** raildo has joined #openstack-keystone | 13:14 | |
| *** julim has quit IRC | 13:14 | |
| *** sdake has quit IRC | 13:17 | |
| *** permalac has joined #openstack-keystone | 13:18 | |
| *** sdake has joined #openstack-keystone | 13:19 | |
| *** edmondsw has joined #openstack-keystone | 13:19 | |
| *** sdake_ has joined #openstack-keystone | 13:23 | |
| *** sdake has quit IRC | 13:24 | |
| *** amoralej|lunch is now known as amoralej | 13:25 | |
| *** ayoung has joined #openstack-keystone | 13:26 | |
| *** ChanServ sets mode: +v ayoung | 13:26 | |
| *** code-R has joined #openstack-keystone | 13:28 | |
| aloga | samueldmq: IIRC you have to run first py34, then py27, otherwise you hit https://bugs.launchpad.net/ironic/+bug/1489059 | 13:28 |
| openstack | Launchpad bug 1489059 in Fuel for OpenStack newton ""db type could not be determined" running py34" [Low,In progress] - Assigned to LiuNanke (nanke-liu) | 13:28 |
| aloga | samueldmq: so you need to remove .testrepository | 13:29 |
| samueldmq | aloga: weird, it's said fix released | 13:29 |
| samueldmq | aloga: I just setup this env, but ok | 13:29 |
| samueldmq | aloga: so I remove .testrepository after a py27 run in order to be able to run py34? | 13:29 |
| aloga | samueldmq: the fix is in tox, so the fix is chaning the order | 13:29 |
| aloga | samueldmq: you need to run 1st py34 | 13:30 |
| aloga | then, you can run all the envs without error | 13:30 |
| *** code-R_ has joined #openstack-keystone | 13:30 | |
| aloga | i.e.: tox -epy27,py34 will fail | 13:30 |
| aloga | but tox -epy34,py27 will be ok | 13:30 |
| aloga | and any subsequent tox execution will be OK | 13:30 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Remove deprecated 'data' credential argument https://review.openstack.org/352567 | 13:31 |
| samueldmq | stevemar: ^ | 13:31 |
| samueldmq | aloga: hmm, so the way db is setup in py34 is backward compat, but not the other way round | 13:32 |
| samueldmq | around* | 13:32 |
| aloga | samueldmq: I guess so | 13:32 |
| samueldmq | aloga: cool, thanks for the info | 13:33 |
| *** code-R has quit IRC | 13:33 | |
| samueldmq | very helpful | 13:33 |
| aloga | samueldmq: no problem, sometimes I get this very same error and I ask myself the very same question | 13:33 |
| aloga | :) | 13:33 |
| samueldmq | hehe | 13:33 |
| samueldmq | henrynash: hi, any chance you around ? | 13:34 |
| *** rodrigods has quit IRC | 13:35 | |
| *** rodrigods has joined #openstack-keystone | 13:35 | |
| openstackgerrit | Merged openstack/oslo.policy: Revert "Adds debug logging for policy file validation" https://review.openstack.org/352722 | 13:38 |
| openstackgerrit | Harini proposed openstack/keystone: EndpointPolicy driver doesn't inherit interface https://review.openstack.org/352586 | 13:39 |
| samueldmq | aloga: yes, you were right, it just worked for me | 13:40 |
| *** spzala has joined #openstack-keystone | 13:50 | |
| rodrigods | breton, there? wondering if you had the chance to work in the devstack plugin | 13:50 |
| *** dikonoor has joined #openstack-keystone | 13:53 | |
| *** guoshan_ has quit IRC | 13:56 | |
| *** guoshan has joined #openstack-keystone | 13:57 | |
| *** julim has joined #openstack-keystone | 13:57 | |
| *** jistr is now known as jistr|debug | 14:00 | |
| *** woodster_ has joined #openstack-keystone | 14:01 | |
| *** narengan has joined #openstack-keystone | 14:04 | |
| *** tonytan4ever has joined #openstack-keystone | 14:05 | |
| *** narengan has quit IRC | 14:07 | |
| *** guoshan has quit IRC | 14:08 | |
| dstanek | samueldmq: i can look today and get it updated | 14:11 |
| samueldmq | dstanek: nice, that's a huge improvement | 14:12 |
| *** edtubill has joined #openstack-keystone | 14:12 | |
| *** pece has quit IRC | 14:19 | |
| *** ktychkova has quit IRC | 14:21 | |
| *** ktychkova_ has joined #openstack-keystone | 14:23 | |
| *** ktychkova_ has joined #openstack-keystone | 14:23 | |
| *** ktychkova_ has quit IRC | 14:26 | |
| *** ktychkova has joined #openstack-keystone | 14:27 | |
| *** thiagolib has quit IRC | 14:28 | |
| *** slberger has joined #openstack-keystone | 14:28 | |
| *** sdake_ is now known as sdake | 14:30 | |
| *** jorge_munoz has joined #openstack-keystone | 14:31 | |
| *** ezpz has joined #openstack-keystone | 14:33 | |
| *** edtubill has quit IRC | 14:34 | |
| *** slberger has quit IRC | 14:35 | |
| *** jorge_munoz has quit IRC | 14:36 | |
| *** jorge_munoz_ has joined #openstack-keystone | 14:36 | |
| *** asettle has joined #openstack-keystone | 14:36 | |
| *** narengan has joined #openstack-keystone | 14:38 | |
| *** subscope has joined #openstack-keystone | 14:39 | |
| *** adrian_otto has joined #openstack-keystone | 14:39 | |
| *** adrian_otto1 has joined #openstack-keystone | 14:41 | |
| *** adrian_otto has quit IRC | 14:44 | |
| *** dikonoor has quit IRC | 14:45 | |
| *** michauds has joined #openstack-keystone | 14:46 | |
| *** catintheroof has quit IRC | 14:47 | |
| *** catintheroof has joined #openstack-keystone | 14:48 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for endpoint policy drivers https://review.openstack.org/212006 | 14:49 |
| *** pnavarro has quit IRC | 14:51 | |
| *** slberger has joined #openstack-keystone | 14:52 | |
| *** catintheroof has quit IRC | 14:53 | |
| *** diazjf has joined #openstack-keystone | 14:55 | |
| *** tonytan4ever has quit IRC | 14:56 | |
| *** tonytan4ever has joined #openstack-keystone | 14:57 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for the policy drivers https://review.openstack.org/212957 | 14:59 |
| *** edtubill has joined #openstack-keystone | 14:59 | |
| *** ravelar has joined #openstack-keystone | 15:00 | |
| *** slberger has quit IRC | 15:00 | |
| *** mfisch` is now known as mfisch | 15:01 | |
| *** mfisch is now known as Guest10256 | 15:02 | |
| *** adrian_otto1 has quit IRC | 15:02 | |
| *** adrian_otto has joined #openstack-keystone | 15:02 | |
| *** Guest10256 is now known as mfisch | 15:03 | |
| *** mfisch has quit IRC | 15:03 | |
| *** mfisch has joined #openstack-keystone | 15:03 | |
| *** adrian_otto has quit IRC | 15:04 | |
| *** code-R_ has quit IRC | 15:06 | |
| *** adrian_otto has joined #openstack-keystone | 15:06 | |
| *** code-R has joined #openstack-keystone | 15:06 | |
| *** KevinE has joined #openstack-keystone | 15:09 | |
| *** KevinE has quit IRC | 15:09 | |
| *** KevinE has joined #openstack-keystone | 15:10 | |
| *** gyee has joined #openstack-keystone | 15:12 | |
| *** slberger has joined #openstack-keystone | 15:13 | |
| *** adrian_otto has quit IRC | 15:13 | |
| *** adrian_otto has joined #openstack-keystone | 15:14 | |
| *** links has joined #openstack-keystone | 15:17 | |
| *** jorge_munoz_ has quit IRC | 15:17 | |
| rderose_ | stevemar: 1 more PCI patch to go! | 15:20 |
| *** adrian_otto has quit IRC | 15:20 | |
| *** asettle is now known as Apsettle | 15:22 | |
| *** danpawlik has quit IRC | 15:22 | |
| *** jistr|debug is now known as jistr | 15:23 | |
| *** jorge_munoz has joined #openstack-keystone | 15:23 | |
| *** catintheroof has joined #openstack-keystone | 15:25 | |
| *** Apsettle is now known as asettle | 15:30 | |
| *** rkrum has quit IRC | 15:32 | |
| *** belmoreira has quit IRC | 15:36 | |
| *** Ephur has joined #openstack-keystone | 15:37 | |
| *** pnavarro has joined #openstack-keystone | 15:38 | |
| *** rkrum has joined #openstack-keystone | 15:39 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: api-ref: Add missing parameter tables to tenant https://review.openstack.org/352980 | 15:40 |
| openstackgerrit | Brant Knudson proposed openstack/keystoneauth: Add tests for https://review.openstack.org/352985 | 15:44 |
| openstackgerrit | Brant Knudson proposed openstack/keystoneauth: Add tests for user-agent with odd sys.argv https://review.openstack.org/352985 | 15:45 |
| *** amoralej is now known as amoralej|brb | 15:47 | |
| openstackgerrit | Brant Knudson proposed openstack/keystoneauth: Add tests for user-agent with odd sys.argv https://review.openstack.org/352985 | 15:47 |
| openstackgerrit | Matt Mulsow proposed openstack/keystoneauth: User-agent header shouldn't start with a space https://review.openstack.org/352673 | 15:48 |
| *** pcaruana has quit IRC | 15:48 | |
| *** rcernin has quit IRC | 15:50 | |
| *** adrian_otto has joined #openstack-keystone | 15:50 | |
| openstackgerrit | Brant Knudson proposed openstack/keystoneauth: User-agent header shouldn't start with a space https://review.openstack.org/352673 | 15:50 |
| *** tesseract- has quit IRC | 15:50 | |
| *** adrian_otto has quit IRC | 15:51 | |
| *** adrian_otto has joined #openstack-keystone | 15:51 | |
| *** adrian_otto has quit IRC | 15:52 | |
| *** narengan has quit IRC | 15:53 | |
| *** narengan has joined #openstack-keystone | 15:53 | |
| *** adrian_otto has joined #openstack-keystone | 15:57 | |
| *** gokrokve has joined #openstack-keystone | 15:58 | |
| *** narengan has quit IRC | 15:58 | |
| openstackgerrit | Matt Mulsow proposed openstack/keystoneauth: User-agent header shouldn't start with a space https://review.openstack.org/352673 | 15:59 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/351988 | 16:00 |
| *** pnavarro has quit IRC | 16:01 | |
| *** pnavarro has joined #openstack-keystone | 16:03 | |
| *** adrian_otto has quit IRC | 16:04 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Improve Development Environment Docs https://review.openstack.org/246400 | 16:04 |
| *** adrian_otto has joined #openstack-keystone | 16:05 | |
| *** dikonoor has joined #openstack-keystone | 16:07 | |
| *** pnavarro has quit IRC | 16:08 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Updates Development Environment Docs https://review.openstack.org/246400 | 16:10 |
| *** haplo37__ has joined #openstack-keystone | 16:11 | |
| samueldmq | dstanek: bknudson: stevemar: ^ updating our dev env docs to take benefit of other-requirements.txt | 16:11 |
| *** adrian_otto has quit IRC | 16:14 | |
| *** narengan has joined #openstack-keystone | 16:14 | |
| *** narengan1 has joined #openstack-keystone | 16:15 | |
| *** diazjf has quit IRC | 16:15 | |
| *** rkrum has quit IRC | 16:15 | |
| *** narengan has quit IRC | 16:19 | |
| *** amoralej|brb is now known as amoralej | 16:20 | |
| *** narengan1 has quit IRC | 16:23 | |
| *** dkehn_ has quit IRC | 16:24 | |
| *** itisha has joined #openstack-keystone | 16:26 | |
| *** esp has joined #openstack-keystone | 16:28 | |
| *** dikonoor has quit IRC | 16:35 | |
| *** dkehn_ has joined #openstack-keystone | 16:43 | |
| *** adrian_otto has joined #openstack-keystone | 16:46 | |
| *** subscope has quit IRC | 16:51 | |
| *** asettle has quit IRC | 16:51 | |
| *** adrian_otto has quit IRC | 16:52 | |
| *** asettle has joined #openstack-keystone | 16:52 | |
| *** asettle has quit IRC | 16:56 | |
| *** gokrokve has quit IRC | 17:02 | |
| *** asettle has joined #openstack-keystone | 17:05 | |
| *** jpena is now known as jpena|off | 17:07 | |
| *** mvk has quit IRC | 17:09 | |
| *** asettle has quit IRC | 17:10 | |
| *** amoralej is now known as amoralej|off | 17:11 | |
| *** asettle has joined #openstack-keystone | 17:19 | |
| *** asettle has quit IRC | 17:23 | |
| *** roxanaghe has joined #openstack-keystone | 17:23 | |
| *** Gorian_ has joined #openstack-keystone | 17:25 | |
| *** tonytan4ever has quit IRC | 17:28 | |
| *** nishaYadav has joined #openstack-keystone | 17:31 | |
| * nishaYadav waves hello o/ | 17:32 | |
| *** asettle has joined #openstack-keystone | 17:32 | |
| *** mvk has joined #openstack-keystone | 17:36 | |
| *** daemontool_ has quit IRC | 17:36 | |
| gsilvis | Is there any good way to have something running inside an OpenStack instance make OS API calls? How do you get the auth there securely? | 17:37 |
| *** asettle has quit IRC | 17:38 | |
| *** diazjf has joined #openstack-keystone | 17:42 | |
| *** pcaruana has joined #openstack-keystone | 17:44 | |
| *** asettle has joined #openstack-keystone | 17:46 | |
| knikolla | gsilvis: weren't you in the design summit this was discussed? AFAIK there isn't still | 17:47 |
| *** ktychkova has quit IRC | 17:48 | |
| gsilvis | knikolla: I recall discussions about it, and my recollection is that there isn't a way... but I want to check | 17:48 |
| knikolla | ayoung: ping ^^ | 17:49 |
| ayoung | gsilvis, use ar real identity solution? | 17:50 |
| ayoung | Like Kerberos and a keytab? | 17:50 |
| *** jaosorior has quit IRC | 17:50 | |
| gsilvis | ayoung: so what I'm hearing is "keystone doesn't do that" | 17:51 |
| gsilvis | :P | 17:51 |
| *** asettle has quit IRC | 17:51 | |
| ayoung | gsilvis, your question is vague and annoying and thus I gavew a vague and even more annoying answer! | 17:52 |
| ayoung | gsilvis, the instances have no implicit knowledge that they are running in an openstack environment | 17:53 |
| *** nkinder has quit IRC | 17:53 | |
| ayoung | if you want to make them aware, it does depend on the OS you are running, etc | 17:53 |
| gsilvis | Indeed, they don't | 17:53 |
| ayoung | cloud-init is sloppy. | 17:53 |
| *** browne has joined #openstack-keystone | 17:53 | |
| ayoung | It does not really provide a good way to confirm the identity of a running instace | 17:53 |
| ayoung | but that is a Nova weakness, not something from Keystone | 17:53 |
| ayoung | I often felt that the Nova endpoint could act as a domain, and each of the servers running in it could use their instacne IDs as user-ids | 17:54 |
| ayoung | kinda like Kerberos host principals | 17:54 |
| gsilvis | Nova could definitely help out with that, yeah | 17:54 |
| ayoung | but the best we are going to get is a change happening now to the metadata server which will allow for autoregistration of a VM with an identit service | 17:55 |
| ayoung | it actually merged, but I think that a bug or two has been identified | 17:55 |
| ayoung | we are going to use it to register a new instance with FreeIPA. Especially important for Certificate issues | 17:55 |
| gsilvis | hm, that sounds pretty cool | 17:56 |
| ayoung | gsilvis, it is. And it will allow us to autoenroll undercloud nodes in Tripleo, so that all of the controllers will have secure identity and proper X509 certs | 17:58 |
| gsilvis | but okay, until there's something a bit more stable, we can roll our own solution | 17:59 |
| stevemar | bknudson: i don't log on to slack :( | 17:59 |
| stevemar | oh is it keystone time?! | 17:59 |
| *** asettle has joined #openstack-keystone | 17:59 | |
| stevemar | dolphm: o/ | 18:00 |
| *** LamT_ has joined #openstack-keystone | 18:00 | |
| *** nkinder has joined #openstack-keystone | 18:04 | |
| *** asettle has quit IRC | 18:04 | |
| *** asettle has joined #openstack-keystone | 18:05 | |
| *** tonytan4ever has joined #openstack-keystone | 18:05 | |
| stevemar | henrynash: oh oh before i forget, can you update https://review.openstack.org/#/c/283554/16 we're super close to OSC 3.0 release | 18:16 |
| patchbot | stevemar: patch 283554 - python-openstackclient - Add support for domain specific roles | 18:16 |
| stevemar | dtroyer: ^ put that on your radar | 18:16 |
| *** nisha_ has joined #openstack-keystone | 18:23 | |
| *** nishaYadav has quit IRC | 18:26 | |
| *** KevinE has quit IRC | 18:27 | |
| *** bill_az has quit IRC | 18:32 | |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add credential functional tests https://review.openstack.org/348557 | 18:34 |
| nisha_ | samueldmq, please have a look when you get time ^ | 18:34 |
| samueldmq | nisha_: sure | 18:34 |
| *** jed56 has quit IRC | 18:35 | |
| *** itisha has quit IRC | 18:40 | |
| *** links has quit IRC | 18:40 | |
| *** david-lyle has quit IRC | 18:41 | |
| *** david-lyle has joined #openstack-keystone | 18:42 | |
| *** slberger has left #openstack-keystone | 18:48 | |
| *** rcernin has joined #openstack-keystone | 18:51 | |
| *** nishaYadav has joined #openstack-keystone | 18:53 | |
| *** nisha_ has quit IRC | 18:56 | |
| *** diazjf has quit IRC | 19:00 | |
| bknudson | one thing I wanted to bring up -- https://bugs.launchpad.net/keystoneauth/+bug/1611426 -- affects users of ansible | 19:00 |
| openstack | Launchpad bug 1611426 in keystoneauth "keystoneauth raises error when application name is empty string" [High,In progress] - Assigned to Matt Mulsow (mamulsow) | 19:00 |
| bknudson | not sure if anyone else has run into this. | 19:01 |
| dolphm | henrynash: i assume it's late there for you; do you have time tomorrow to talk through / document a sort of comparison of concerns between both approaches? | 19:02 |
| henrynash | dolphm: yes, let's mull on it.... | 19:02 |
| *** d34dh0r53 is now known as d34dh0r53_24_89 | 19:02 | |
| *** tqtran has joined #openstack-keystone | 19:03 | |
| henrynash | dolphm: so if we did do a RO mode, I'd want: | 19:03 |
| openstackgerrit | Merged openstack/keystone: Fix warning when running tox -e api-ref https://review.openstack.org/352656 | 19:04 |
| henrynash | a) it to work for M->N well (we, IBM, need that badly) | 19:04 |
| henrynash | b) it to be spliced into teh same command set that we would use eventually in a RW situation, since tooling changes slowly | 19:04 |
| *** browne has quit IRC | 19:04 | |
| dolphm | henrynash: (A) i think that's doable | 19:05 |
| henrynash | dolphm: the other thing to keep in mind that we WILL be running whatever we do live in production soon in our Public Cloud so we are very commited to the testing side.... | 19:06 |
| *** d34dh0r53_24_89 is now known as d34dh0r531234123 | 19:06 | |
| henrynash | dolphm: and so I propose the work for RW with that in mind, and with the risks invloved | 19:06 |
| *** shaleh has joined #openstack-keystone | 19:07 | |
| shaleh | bknudson: that keystoneauth issue my fault, I can handle fixing it. | 19:07 |
| bknudson | shaleh: Matt Mulsow proposed a fix yesterday - https://review.openstack.org/#/c/352673/4 | 19:08 |
| dolphm | henrynash: what's the testing approach? | 19:08 |
| dolphm | henrynash: that's the hardest part of all of this, in my mind | 19:08 |
| bknudson | please review! | 19:08 |
| shaleh | bknudson: shall do | 19:08 |
| patchbot | bknudson: patch 352673 - keystoneauth - User-agent header shouldn't start with a space | 19:08 |
| shaleh | bknudson: I had never seen an empty argv in any of my testing | 19:08 |
| *** slberger has joined #openstack-keystone | 19:09 | |
| *** tqtran has quit IRC | 19:09 | |
| bknudson | shaleh: this used to work until requests 2.11 was released yesterday | 19:09 |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 ec2 https://review.openstack.org/350173 | 19:09 |
| shaleh | bknudson: as I said in the bug, i am working on a different approach that Jamie and I discussed at the summit | 19:09 |
| bknudson | 2.10 was fine with spaces in header values | 19:09 |
| shaleh | the plan is to remove the heuristic stuff once we can ensure users of keystoneauth are providing useful names | 19:10 |
| shaleh | so sometime in O hopefully | 19:10 |
| henrynash | dolphm: so within OS, we'll have the regular unit tests (that do migration and contraction)...remember that for N we don't have the complex migration by DB access, so the tetsing is not that more complcated than today | 19:10 |
| shaleh | I added all of this mess because of monasca, neutron, and others. The user-agent was uselessly set to "python-keystoneclient" | 19:11 |
| bknudson | I hope they don't provide names starting with spaces! | 19:11 |
| shaleh | bknudson: I can ensure they do not. Will add that to the testing. | 19:11 |
| shaleh | when we were debugging keystone overload it was impossible to tell what system was DOSing us | 19:11 |
| henrynash | dolphm: If I were to argue it from your POV, I think the two biggest advantages are: | 19:11 |
| bknudson | shaleh: do you have some kind of rate limiter? | 19:12 |
| *** catintheroof has quit IRC | 19:12 | |
| shaleh | bknudson: not yet :-) we have not needed it | 19:12 |
| bknudson | returns some kind of "shut up" response to DOSers | 19:12 |
| henrynash | 1) One rev of code doesn't have to know about the old schema (although I need to think about how master to master upgraded work) | 19:13 |
| shaleh | bknudson: the problem was the automation for management/monitoring had gone nuts and was constantly asking for tokens instead of remembering them. | 19:13 |
| shaleh | bknudson: rate limiting the monitoring is not wise :-) | 19:13 |
| dolphm | henrynash: will you be putting load on keystone during the migration to assert downtime? | 19:13 |
| dolphm | henrynash: or rather, to assert 100% uptime? | 19:14 |
| henrynash | 2) The current RW proposal works (I think) well if the amount of data being migrated isn't too much (i.e. you don't really need on-the-fly migration), but if we had an upgrade that had to copy hunks of data, our current approach might lock the DB and we would beed teh versioned object support | 19:14 |
| *** kragniz has joined #openstack-keystone | 19:14 | |
| *** KevinE has joined #openstack-keystone | 19:17 | |
| dolphm | henrynash: agree - hearing stories from our public cloud team, it sounds like they review migrations landing in nova really strictly, to avoid time consuming migrations | 19:22 |
| dolphm | henrynash: and there are anti-patterns they know to look for in code review now | 19:22 |
| dolphm | henrynash: so, maybe benchmarking the upgrade process would be super useful in that case? | 19:23 |
| henrynash | dolphm: OK, gonna mull over tonight....in particualar gyee's poit about rolling an upgrade across multipel datacentres, which might happen a day apart...eeek!!! | 19:26 |
| dolphm | henrynash: that's a plot twist | 19:27 |
| gyee | henrynash, yeah, we have this lovely thing called the "maintenance window" | 19:27 |
| *** mrhillsman has quit IRC | 19:27 | |
| dolphm | gyee: it's hard to have maintenance windows when you're chasing master | 19:27 |
| shaleh | which is why we don't chase master | 19:28 |
| gyee | dolphm, yeah, in this case, multiple windows in a day :-) | 19:28 |
| shaleh | different orgs (customers...) move at different speeds | 19:29 |
| shaleh | for some just a once a year upgrade is a big deal | 19:29 |
| *** diazjf has joined #openstack-keystone | 19:31 | |
| *** gyee has quit IRC | 19:37 | |
| *** mrhillsman has joined #openstack-keystone | 19:37 | |
| *** david-lyle_ has joined #openstack-keystone | 19:41 | |
| *** david-lyle has quit IRC | 19:43 | |
| *** nishaYadav has quit IRC | 19:45 | |
| *** diazjf has quit IRC | 19:56 | |
| *** diazjf has joined #openstack-keystone | 19:58 | |
| *** ravelar has quit IRC | 20:09 | |
| *** julim has quit IRC | 20:11 | |
| *** david-lyle_ is now known as david-lyle | 20:12 | |
| *** raildo has quit IRC | 20:28 | |
| *** asettle has quit IRC | 20:29 | |
| *** asettle has joined #openstack-keystone | 20:30 | |
| *** asettle has joined #openstack-keystone | 20:31 | |
| *** gyee has joined #openstack-keystone | 20:37 | |
| *** ChanServ sets mode: +v gyee | 20:37 | |
| *** diazjf1 has joined #openstack-keystone | 20:43 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 20:44 |
| *** diazjf has quit IRC | 20:45 | |
| *** edtubill has quit IRC | 20:51 | |
| *** Ephur_ has joined #openstack-keystone | 20:58 | |
| *** diazjf1 has quit IRC | 21:00 | |
| *** Ephur has quit IRC | 21:02 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 21:05 |
| *** Ephur_ has quit IRC | 21:06 | |
| *** pauloewerton has quit IRC | 21:07 | |
| *** ayoung has quit IRC | 21:19 | |
| *** ezpz has quit IRC | 21:20 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 21:22 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 21:23 |
| *** diazjf has joined #openstack-keystone | 21:26 | |
| *** diazjf has quit IRC | 21:28 | |
| *** michauds has quit IRC | 21:31 | |
| *** zigo has quit IRC | 21:32 | |
| *** zigo has joined #openstack-keystone | 21:35 | |
| *** julim has joined #openstack-keystone | 21:40 | |
| *** haplo37__ has quit IRC | 21:42 | |
| *** mnikolaenko_ has joined #openstack-keystone | 21:44 | |
| *** gordc has quit IRC | 21:55 | |
| *** emccormick has joined #openstack-keystone | 21:57 | |
| *** sdake has quit IRC | 21:57 | |
| emccormick | Hi everyone. Quick question. Does anyone know if the token expiration timers for UUID were changed to non-subsecond in MItaka? | 21:58 |
| emccormick | I'm running into a Ceph Radosgw issue (firefly so no backport) which was previously only a problem with Fernet tokens | 21:58 |
| emccormick | yet now it's whining about it with UUID like so | 21:59 |
| emccormick | Keystone token parse error: access: token: Failed to parse ISO8601 expiration date from Keystone response. | 21:59 |
| emccormick | Was hoping to put off my Ceph upgrade until after the Openstack upgrade, but maybe I can't | 21:59 |
| *** rcernin has quit IRC | 22:02 | |
| *** asettle has quit IRC | 22:04 | |
| *** adriant has joined #openstack-keystone | 22:06 | |
| *** dave-mccowan has quit IRC | 22:08 | |
| *** KevinE has quit IRC | 22:22 | |
| *** tonytan4ever has quit IRC | 22:26 | |
| *** tonytan4ever has joined #openstack-keystone | 22:28 | |
| *** sdake has joined #openstack-keystone | 22:30 | |
| *** sdake has quit IRC | 22:30 | |
| *** sdake has joined #openstack-keystone | 22:30 | |
| mnikolaenko_ | stevemar: Hello. Can you take a look at my comments in https://review.openstack.org/#/c/351264 ? If you have time :) | 22:33 |
| patchbot | mnikolaenko_: patch 351264 - keystone - Add domain check in domain-specific role implication | 22:33 |
| *** sdake_ has joined #openstack-keystone | 22:33 | |
| *** sdake has quit IRC | 22:34 | |
| *** edmondsw has quit IRC | 22:36 | |
| *** mnikolaenko_ has quit IRC | 22:36 | |
| *** sdake_ is now known as sdake | 22:38 | |
| stevemar | mnikolaenko: i sure will! | 22:39 |
| *** LamT_ has quit IRC | 22:41 | |
| *** itlinux has joined #openstack-keystone | 22:42 | |
| *** browne has joined #openstack-keystone | 22:43 | |
| *** rkrum has joined #openstack-keystone | 22:44 | |
| *** itlinux has quit IRC | 22:46 | |
| *** rkrum has quit IRC | 22:51 | |
| *** david-lyle has quit IRC | 23:20 | |
| openstackgerrit | Merged openstack/keystoneauth: Add tests for user-agent with odd sys.argv https://review.openstack.org/352985 | 23:23 |
| *** Gorian_ has quit IRC | 23:24 | |
| *** spedione is now known as spedione|AWAY | 23:26 | |
| *** ravelar has joined #openstack-keystone | 23:26 | |
| *** roxanaghe has quit IRC | 23:29 | |
| *** ravelar has quit IRC | 23:31 | |
| *** ayoung has joined #openstack-keystone | 23:35 | |
| *** ChanServ sets mode: +v ayoung | 23:35 | |
| *** slberger has left #openstack-keystone | 23:37 | |
| *** david-lyle has joined #openstack-keystone | 23:38 | |
| *** sdake has quit IRC | 23:45 | |
| *** gyee_ has joined #openstack-keystone | 23:47 | |
| *** ChanServ sets mode: +v gyee_ | 23:47 | |
| *** gyee_ has quit IRC | 23:47 | |
| openstackgerrit | Merged openstack/keystoneauth: User-agent header shouldn't start with a space https://review.openstack.org/352673 | 23:53 |
| *** spzala has quit IRC | 23:59 | |
| *** spzala has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!