Monday, 2016-09-12

*** tonytan4ever has joined #openstack-keystone00:02
*** ddieterly has joined #openstack-keystone00:06
*** ddieterly has quit IRC00:32
*** ddieterly has joined #openstack-keystone00:43
*** aabashkin_ has joined #openstack-keystone00:47
*** GB21 has joined #openstack-keystone00:47
*** AlexeyAbashkin has quit IRC00:48
*** chrisshattuck has joined #openstack-keystone00:48
*** chrisshattuck has quit IRC00:55
*** chrisshattuck has joined #openstack-keystone00:57
*** chrisshattuck has quit IRC01:01
jamielennoxayoung: we went to using a loader object seperate from the plugin itself so that it would be possible to have multiple loaders per plugin01:05
jamielennoxayoung: particularly with token plugin there are times where you would want to provide different things on the command line but still end up using the same actual plugin in practice01:06
jamielennoxalso, hey all01:06
ayoungjamielennox, it is entirely possible that what I was seeing was a result of us freezing at an old version or something I did01:06
ayoungHey01:06
ayoungjamielennox, what I was running in to was, on a Tripleo deploy, where I had (I think) updated both openstackclient and osc-config,  it was using the KC plugins, and not the python-openstackclient ones01:07
bretono/01:08
jamielennoxyea, so switching from one to the other is something that takes a little bit of work in the migration to ksa, but it shouldn't be difficult and the actual parameters and plugins are identical with one or two small exceptions01:08
ayoungand...it made me realize, that, even if I am doing something wrong, if some one is trying to get plugins out of the client, they should get the KSA versions01:08
ayoungthe options look like they are doing a different mechanism01:08
ayoungjamielennox, I did fix the fedkerb plugin based on this, so the effort was worth it01:09
jamielennoxso OSC 3 goes to completely ksa plugins, but i don't see a way that it could get mixed up and use the wrong ones01:09
ayoungdid not get to test the straight kerberos one thoght01:09
jamielennoxand really we would like people to pass the auth plugin into clients, not get it out of clients, but some things do this wrong01:09
ayoungjamielennox, heh01:10
ayoungall over the place01:10
ayoungif we don't want people to do something, we need to remove it. Otherwise, people are going to do it.01:10
ayoungbut if people were creating the auth plugin use a namespace, they will have the kc namespace01:11
ayoungwhich is, I think, what I was seeing01:11
jamielennoxyea, the worst part is they end up pulling it out of the ksc client and that one is the most hacked up because we had to provide a lot of compatibility there that other clients didn't01:11
ayoungand I just (10 minutes ago) tore down that cluster, damnit01:11
ayoungjamielennox, you should have seen what rcrit did to get the novajoin service to install01:12
ayounghe has 3 keystone URLs specified on the command line01:12
ayounguri, url and keystone01:12
ayoungdon't ask me why01:12
*** chlong_ has joined #openstack-keystone01:12
ayoungbut we need to get things down to where people specify one and only one01:12
*** chlong has joined #openstack-keystone01:12
jamielennoxayoung: reviewed https://review.openstack.org/#/c/368288/01:14
ayoungjamielennox, so I was getting errors that the caller was calling with 2 params and needed 4 or vice versa01:15
ayoungdropping *args was not deliberate, and maybe not strictly required01:15
jamielennoxayoung: don't suppose you remember what was missing?01:17
jamielennoxthe three required args are auth_url, identity_provider and protocol and all of them are marked as required in the opt01:18
jamielennoxayoung: oh on the earlier question, the mechanism is slightly different because we didn't want ksa to have a direct dependency on oslo.config so we don't use the oslo.config Opts directly, but the process is pretty much the same01:19
*** chrisshattuck has joined #openstack-keystone01:20
ayoungjamielennox, I can test it out here in a moment01:22
jamielennoxayoung: sounds good - we knew when we commited the kerberos stuff that we hadn't tested it completely but I failed to create the env a few times and moved on and noone else knew how01:24
jamielennoxso commited what looked right and figured someone would file a bug if it was wrong01:24
ayoungjamielennox, I'm looping back around it it01:24
*** davechen has joined #openstack-keystone01:24
*** chrisshattuck has quit IRC01:25
ayoungit is close, but gets a wrong argument exception when you try to use it. You don't actually need a working environment to test that01:25
jamielennoxyea, looking at your fix it's obvious now01:25
ayoungjamielennox, we might find the same thing on the *args from OSC and Federation01:25
ayoungI think it was something about how it was called...let me see if I can retrigger01:26
ayoungheh  https://bugs.launchpad.net/keystoneauth/+bug/1622079  or we can check the bug tracker01:26
openstackLaunchpad bug 1622079 in keystoneauth "fedkerb plugin has wrong number of arguments" [Undecided,In progress] - Assigned to Adam Young (ayoung)01:26
ayoungTypeError: __init__() takes exactly 4 arguments (2 given)01:27
ayoungjamielennox, so this is the test failure http://paste.openstack.org/show/571885/01:30
ayoungand I don't think it is the keystoneauth[kerberos] code that is not installed, but rather the pykerberos dependency01:30
ayoung maybe that does not exist for py35?01:30
ayoungjamielennox, you have a machine that can run py34?  Fedora seems to only do py35 now01:32
*** ddieterly has quit IRC01:34
*** wangqun has joined #openstack-keystone01:41
ayoungjamielennox, is the *args thing a deal breaker?  Why does it need to be there?01:42
jamielennoxayoung: it's been a while but i think that kerberos plugin is only for py2701:44
ayoungjamielennox, nah, it was a dependency issue01:45
ayoungI had to add some deps to test-requirements, but they passed01:45
jamielennoxayoung: but then again i thought we fixed that because i wanted to swap it for simo's python gssapi01:45
jamielennoxoh, which?01:45
ayoungyeah, that would be nice, but that would be a fix in requests, wouldn't it?01:45
ayoungpython-requests-gssapi as a replacement01:46
jamielennoxyea, python-requests-kerberos01:46
jamielennoxor i looked at creating a python-requests-gssapi but then they fixed py301:46
jamielennox:)01:46
ayoungso, can I submit without the *args?  pretty sure that was part of the problem that cause the error, and I really don't feel like messing with it01:46
jamielennoxpython-kerberos is a C library that is extracted out of some apple calendar service or something and it would be nice to dump it but whatever01:47
jamielennoxred hat are the main users and they package it all up as rpms so noone there wil lnotice01:47
jamielennoxcan you show me where its coming from?01:47
jamielennoxor i guess submit what you ahve and let me run it01:48
ayoungsure, let me submit the fix01:48
jamielennoxi don't think i'll hold it up on that but every other plugin allows you to pass at least auth_url as positional01:48
openstackgerritayoung proposed openstack/keystoneauth: Fix parameters for Kerberos Auth Plugin  https://review.openstack.org/36828801:48
jamielennoxrelocating for coffee quickly, back in like 5 min and i'll run it then01:51
ayoungWFM01:51
ayoungjamielennox, I01:51
ayoung'll give it another go anyway01:51
ayoungnow that I know what you want wuith auth_url01:51
openstackgerritDave Chen proposed openstack/keystone: Add foreign keys to trust table  https://review.openstack.org/36842201:56
*** EinstCrazy has joined #openstack-keystone01:57
openstackgerritayoung proposed openstack/keystoneauth: Fix parameters for Kerberos Auth Plugin  https://review.openstack.org/36828801:58
*** jamielennox is now known as jamielennox|away02:00
openstackgerritxianming.mao proposed openstack/keystone: Use ConfigParser instead of SafeConfigParser  https://review.openstack.org/36841302:02
*** jamielennox|away is now known as jamielennox02:04
*** ddieterly has joined #openstack-keystone02:05
jamielennoxayoung: ah, ok, i see why you have problems with the requirements02:06
ayoungjamielennox, and those version numbers are pretty random02:06
ayoungjamielennox, got the args thing.  I was overthinking it02:06
jamielennoxgood, i thought that would be a trivial fix02:06
jamielennoxayoung: so tox is installing the kerberos extras as it should: https://github.com/openstack/keystoneauth/blob/master/tox.ini#L1502:07
ayoungyep02:07
jamielennoxbut kerberos is only defined for py2.x02:07
jamielennoxhttps://github.com/openstack/keystoneauth/blob/master/setup.cfg#L2802:07
ayoungit all seems to be working . I might need to put a patch into the RPM for the warning message.  Telling RPM users to pip install seems wrong02:08
jamielennoxthat would have made sense originally and we just never fixed it after it landed py3 support02:08
ayoungtest worked for py35 here02:08
ayoungwant me to take that out?02:08
ayoungshould probably get that now02:08
jamielennoxyea, but looking at it that string is defined in global requirements02:09
*** wangqun_ has joined #openstack-keystone02:09
jamielennoxand i actually wrote a bit of this handling so it g-r will always resync it that way02:09
ayoungI think the license is wrong there , too02:09
*** wangqun has quit IRC02:09
jamielennoxso requests-kerberos is up to 0.10 https://pypi.python.org/pypi/requests-kerberos02:10
jamielennoxyea, looks like: https://github.com/requests/requests-kerberos/blob/master/LICENSE02:11
jamielennoxi don't know what the ISC lisence is02:11
ayoungme either02:12
davechenayoung: sorry for chiming in, just replied your comments and take a look at it when you got a chance, thanks!02:13
openstackgerritayoung proposed openstack/keystoneauth: Fix parameters for Kerberos Auth Plugin  https://review.openstack.org/36828802:13
ayoungdavechen, I think I originally wrote trusts with those foreign keys and we had to remove them02:13
ayoungdavechen, not until we can kill the LDAP backend02:13
davechenayoung: i doubled check the migration and haven't found there is any scirpt to update the Fks02:14
ayoungdavechen, was collapsed, years ago02:14
*** ddieterly has quit IRC02:14
ayoungtrusts went in to Grizzly I think02:14
davechenayoung: does trust support ldap?02:14
ayoungactually, no, I did not put them in02:14
ayoungyes02:14
ayoungtrusts would never have had FKs to identity02:15
ayoungI did LDAP first, would not have put those in there02:15
davechenayoung: not in the upsteam at least02:15
ayoungbut I think it had FKs to project etc02:15
ayoungdoes not matter, we are not putting in FKs yet.  not until we can do LDAP as a federation setup02:15
ayoungjamielennox, I really don't want you as a coauthor on that patch, as I fear then that no one would be able to review it02:16
jamielennoxayoung: so it looks like (hard to tell exactly) that 1.2.2 was the first pykerberos to support python 302:16
davechenayoung: we have fk enabled for other entities why we don't consider the case of LDAP then?02:16
jamielennoxayoung: oh, i don't mind about co-author, this was all you02:16
ayoungjamielennox, so, the version should be OK.  If you are on a py3 system, it will get >.6 and install, right?02:17
ayoungjamielennox, I mean even an edit...just tell me what to fix!02:17
*** namnh has joined #openstack-keystone02:17
jamielennoxayoung: i was hoping that requests-kerberos had bumped their minimum required version to something that was greater than that and so we could just rely on a newer version of requests-kerberos02:18
ayoungyeah02:18
jamielennoxbut it looks like even in master they're still too old: https://github.com/requests/requests-kerberos/blob/master/requirements.txt02:18
*** lifeless_ has quit IRC02:19
jamielennoxayoung: so i would remove the py2 qualifiers from https://github.com/openstack/requirements/blob/master/global-requirements.txt#L23102:19
jamielennoxand hopefully that will auto-sync to us02:19
jamielennoxand i would make sure that rhel/fedora is supporting pykerberos >= 1.2.202:20
*** chrisshattuck has joined #openstack-keystone02:22
davechenayoung: maybe notfication can help here, if the user is in the system then delete the trust.02:22
ayoungdavechen, I would rather build that workflow into the identity driver directly02:23
ayoungdoes not need to be a notification, as LDAP and Federation are not going to notify you anyway02:23
ayoungBut if someone calls into the SQL front end, we can certainly delete all role assignments and Trusts02:24
davechenayoung: let me reconsider the case of federation user.02:25
ayoung++02:25
*** chrisshattuck has quit IRC02:26
*** tqtran has joined #openstack-keystone02:31
*** lifeless has joined #openstack-keystone02:34
*** tqtran has quit IRC02:35
jamielennoxayoung: did you propose the global requirements change?03:02
*** chrisshattuck has joined #openstack-keystone03:02
*** chrisshattuck has quit IRC03:07
*** chrisshattuck has joined #openstack-keystone03:10
*** chrisshattuck has quit IRC03:18
jamielennoxayoung: done: https://review.openstack.org/36853003:21
ayoungjamielennox, that was a fast -203:39
jamielennoxayoung: bah03:49
ayoungjamielennox, nah, its all good.  I should have hit it prior to the deadline03:50
jamielennoxayoung: if you want to fight it for the RHEL process i'll leave that up to you but it doesn't matter for me03:50
ayoungnah, I can always get things into the RPMs so long as they are submitted upstream.  This is all artifacts of Tripleo eating up so much of my time03:50
*** chrisshattuck has joined #openstack-keystone03:54
*** chrisshattuck has quit IRC03:59
*** chrisshattuck has joined #openstack-keystone04:51
*** chrisshattuck has quit IRC04:55
*** jaosorior has joined #openstack-keystone05:02
*** chlong_ has quit IRC05:03
*** chlong has quit IRC05:03
*** GB21 has quit IRC05:04
*** chlong_ has joined #openstack-keystone05:17
*** joerch has quit IRC05:17
*** GB21 has joined #openstack-keystone05:18
*** chlong has joined #openstack-keystone05:21
*** admin0 has joined #openstack-keystone05:23
*** chlong has quit IRC05:25
*** admin0 has quit IRC05:26
*** wangqun_ has quit IRC05:27
openstackgerritchen.xing proposed openstack/keystone: Fix the outdated URL  https://review.openstack.org/36855205:29
*** tqtran has joined #openstack-keystone05:33
*** rcernin has joined #openstack-keystone05:33
*** tqtran has quit IRC05:37
*** admin0 has joined #openstack-keystone05:40
*** richm has quit IRC05:40
*** admin0 has quit IRC05:44
davechenstevemar: still around?05:45
davechenstevemar: do we have this route defined anywhere? PATCH /v3/projects/{project_id}/cascade05:46
*** chrisshattuck has joined #openstack-keystone05:52
*** chrisshattuck has quit IRC05:57
*** chlong_ has quit IRC06:05
davechenhmm, this is a pratial implemented feature and the change in the controller has been abandoned here (https://review.openstack.org/#/c/243585/).06:18
davechennever see a route is defined anywhere to support the feature, i think there is no need to doc this api in the api-ref.06:19
*** joerch has joined #openstack-keystone06:32
openstackgerritDave Chen proposed openstack/keystone: Remove the APIs from doc that is not supported yet  https://review.openstack.org/36857006:33
*** murali_ has joined #openstack-keystone06:46
murali_Hello06:46
murali_can anyone be of any help06:46
murali_https://ask.openstack.org/en/question/96730/unable-to-setup-devstack/06:46
murali_Issue is coming in case of keystone part06:46
*** pcaruana has joined #openstack-keystone06:49
openstackgerritDave Chen proposed openstack/keystone: Fix the nit on how to deploy keystone with `mod_proxy_uwsgi`  https://review.openstack.org/36857906:52
*** chrisshattuck has joined #openstack-keystone06:53
openstackgerritHa Van Tu proposed openstack/keystone: Fix prameters name and response codes in Keystone API v2  https://review.openstack.org/36594706:59
*** tesseract- has joined #openstack-keystone07:00
*** admin0 has joined #openstack-keystone07:01
*** chrisshattuck has quit IRC07:12
*** adriant has quit IRC07:30
*** amoralej|pto is now known as amoralej07:34
*** tqtran has joined #openstack-keystone07:34
*** jpenag is now known as jpena07:37
*** tqtran has quit IRC07:38
openstackgerritDave Chen proposed openstack/keystone: Remove the APIs from doc that is not supported yet  https://review.openstack.org/36857007:52
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** asettle has joined #openstack-keystone08:02
namnhaloga, Hello. Are you around?08:05
openstackgerritHa Van Tu proposed openstack/keystone: Fix prameters name and response codes in Keystone API v2-ext  https://review.openstack.org/36861808:07
*** aabashkin_ is now known as AlexeyAbashkin08:20
*** AlexeyAbashkin has quit IRC08:22
*** amakarov_away is now known as amakarov08:34
zigoHey, the Debian package for OpenStack is currently building within OpenStack infra! :)08:36
zigo(first service to be building there...)08:36
zigotelnet 23.253.109.9 1988508:37
zigo:P08:37
*** AlexeyAbashkin has joined #openstack-keystone08:42
openstackgerritMerged openstack/keystone: Tweak api-ref doc for projects  https://review.openstack.org/36775708:42
*** pnavarro has joined #openstack-keystone08:44
*** jaosorior is now known as jaosorior_brb08:51
*** openstackgerrit has quit IRC09:04
*** openstackgerrit has joined #openstack-keystone09:04
*** hoonetorg has joined #openstack-keystone09:05
*** zhugaoxiao has quit IRC09:16
*** zhugaoxiao has joined #openstack-keystone09:17
*** tqtran has joined #openstack-keystone09:35
*** tqtran has quit IRC09:40
openstackgerritMerged openstack/keystone: Fix order of arguments in assertIs  https://review.openstack.org/36780410:03
*** jaosorior_brb is now known as jaosorior10:06
*** richm has joined #openstack-keystone10:08
openstackgerritNguyen Hung Phuong proposed openstack/keystonemiddleware: Update code to use Newton as the code name  https://review.openstack.org/36870710:09
*** markvoelker has joined #openstack-keystone10:22
*** markvoelker has quit IRC10:26
*** GB21 has quit IRC10:40
*** EinstCrazy has quit IRC10:42
*** code-R has joined #openstack-keystone10:45
*** rodrigods has quit IRC10:47
*** code-R_ has joined #openstack-keystone10:47
*** rodrigods has joined #openstack-keystone10:47
*** davechen has left #openstack-keystone10:49
*** code-R has quit IRC10:50
*** murali_ has quit IRC10:50
*** hoonetorg has quit IRC11:03
openstackgerritNguyen Hung Phuong proposed openstack/keystone: TrivialFix: Merge imports in code  https://review.openstack.org/36874311:03
*** GB21 has joined #openstack-keystone11:10
*** daemontool has joined #openstack-keystone11:19
*** code-R_ has quit IRC11:20
*** nicolasbock has joined #openstack-keystone11:21
*** code-R has joined #openstack-keystone11:25
*** namnh has quit IRC11:27
*** tqtran has joined #openstack-keystone11:37
*** tqtran has quit IRC11:41
openstackgerritMikhail Nikolaenko proposed openstack/keystone: Add manager and base interface for fernet key store  https://review.openstack.org/36228311:49
*** code-R_ has joined #openstack-keystone11:50
*** code-R has quit IRC11:53
*** daemontool has quit IRC11:56
*** amoralej is now known as amoralej|lunch12:01
*** markvoelker has joined #openstack-keystone12:02
*** lamt has quit IRC12:03
*** daemontool has joined #openstack-keystone12:05
*** jpena is now known as jpena|lunch12:07
*** raildo has joined #openstack-keystone12:17
*** daemontool has quit IRC12:27
*** daemontool has joined #openstack-keystone12:28
*** ddieterly has joined #openstack-keystone12:49
*** pauloewerton has joined #openstack-keystone12:54
*** jaosorior has quit IRC12:56
*** jaosorior has joined #openstack-keystone12:57
*** ddieterly has quit IRC12:59
*** joerch has quit IRC13:03
dstanekgood morning13:04
lbragstaddstanek o/13:05
*** admin0 has left #openstack-keystone13:09
*** NishaYadav has joined #openstack-keystone13:12
NishaYadavo/13:13
*** lamt has joined #openstack-keystone13:16
*** openstackgerrit has quit IRC13:19
*** openstackgerrit has joined #openstack-keystone13:19
*** jpena|lunch is now known as jpena13:22
*** joerch has joined #openstack-keystone13:26
*** amoralej|lunch is now known as amoralej13:29
*** EinstCrazy has joined #openstack-keystone13:31
*** SamYaple_ is now known as SamYaple13:32
*** lamt has quit IRC13:36
*** tqtran has joined #openstack-keystone13:38
*** tqtran has quit IRC13:43
*** lamt has joined #openstack-keystone13:43
*** ametts has joined #openstack-keystone13:54
*** woodster_ has joined #openstack-keystone13:56
*** tonytan_brb has joined #openstack-keystone13:57
*** tonytan4ever has quit IRC14:00
*** BjoernT has joined #openstack-keystone14:00
*** ddieterly has joined #openstack-keystone14:01
*** nisha_ has joined #openstack-keystone14:03
*** NishaYadav has quit IRC14:06
lbragstaddstanek ping - curious to see what your opinion is on https://bugs.launchpad.net/keystone/+bug/162201014:13
openstackLaunchpad bug 1622010 in OpenStack Identity (keystone) "MySQL rounds timestamps" [High,In progress] - Assigned to Lance Bragstad (lbragstad)14:13
*** sc68cal_ is now known as sc68cal14:14
*** BjoernT has quit IRC14:26
samueldmqmorning keystone14:31
dstaneklbragstad: pong...looking14:32
stevemaro/14:32
dstaneklbragstad: actually i found something interesting related to this14:32
*** michauds has joined #openstack-keystone14:33
dstaneklbragstad: rderose: i think you would both be interested in https://julien.danjou.info/blog/2016/python-sqlalchemy-from-decimal-to-timestamp14:34
lbragstaddstanek yeah - I just read that last friday14:34
lbragstadgreat post14:35
*** itsuugo has quit IRC14:37
*** ravelar has joined #openstack-keystone14:37
*** mvk has quit IRC14:37
*** itsuugo has joined #openstack-keystone14:38
*** hoonetorg has joined #openstack-keystone14:38
*** chrisshattuck has joined #openstack-keystone14:39
dstaneklbragstad: that is very strange behavior. is it sqla or mysql doing the rounding? and is it possible to have a really simple test case for it?14:40
lbragstaddstanek that's a good question - i'm not sure which part is doing the actual rounding14:41
*** woodburn has joined #openstack-keystone14:42
dstaneklbragstad: i'm wondering if it could be sqla - that may be why my corner case test patch sometime fails14:42
lbragstaddstanek right14:44
*** woodburn1 has quit IRC14:44
*** BjoernT has joined #openstack-keystone14:44
lbragstaddstanek i thought it was super strange - because I thought I tested it before on mysql and i was sure that it truncated instead of rounded14:44
*** tonytan_brb is now known as tonytan4ever14:45
lbragstaddstanek this just furthers my thought that we should control all time in the app14:56
openstackgerritBoris Bobrov proposed openstack/keystone: Docs for quota limits in keystone  https://review.openstack.org/36620215:01
*** itsuugo has quit IRC15:01
*** slberger has joined #openstack-keystone15:01
*** nisha_ has quit IRC15:01
*** nisha_ has joined #openstack-keystone15:02
openstackgerritBoris Bobrov proposed openstack/keystone-specs: [wip] Quota limits  https://review.openstack.org/36376515:02
*** itsuugo has joined #openstack-keystone15:03
rderosedstanek: interesting article15:03
*** daemontool_ has joined #openstack-keystone15:07
*** lamt has quit IRC15:07
openstackgerritBoris Bobrov proposed openstack/keystone: Docs for quota limits in keystone  https://review.openstack.org/36620215:09
*** daemontool has quit IRC15:10
*** NishaYadav has joined #openstack-keystone15:20
*** NishaYadav is now known as Guest6311315:21
*** flaper87 has quit IRC15:21
*** nisha_ has quit IRC15:21
*** lamt has joined #openstack-keystone15:23
*** EinstCrazy has quit IRC15:33
*** tqtran has joined #openstack-keystone15:40
*** thebloggu has joined #openstack-keystone15:41
*** itsuugo has quit IRC15:42
*** thebloggu has quit IRC15:43
*** code-R_ has quit IRC15:43
*** itsuugo has joined #openstack-keystone15:44
*** tqtran has quit IRC15:45
*** chrisshattuck has quit IRC15:49
*** rcernin has quit IRC15:53
stevemarayoung: want to associate https://bugs.launchpad.net/keystone/+bug/1381961 with tripleo ? and move it back to fix-released for keystone?15:55
openstackLaunchpad bug 1381961 in OpenStack Identity (keystone) "Keystone API GET 5000/v3 returns wrong endpoint URL in response body" [Low,Confirmed] - Assigned to Steve Martinelli (stevemar)15:55
ayoungstevemar, yep15:56
stevemarayoung: ty15:56
*** pcaruana has quit IRC15:56
*** browne has joined #openstack-keystone15:56
ayoungstevemar, hows that?15:57
stevemarayoung: perfect, takes it off my radar :D15:57
ayoungHeh15:57
ayoungstevemar, have you been tracking the Bug 968696n fixes?  jamielennox was driving on with them, but I've lost track15:57
openstackbug 968696 in Glance ""admin"-ness not properly scoped" [High,In progress] https://launchpad.net/bugs/968696 - Assigned to Sharat Sharma (sharat-sharma)15:57
stevemarayoung: unfortunately not, no. :(15:58
ayoungI know that we needed something in oslo-config which, I think langed15:58
ayounglanded15:58
stevemaryeah, that sounds familiar15:58
ayounglet's get that on the schedule for tomorrow.  Would like to have a comprehensive update15:58
stevemari thought it did, and that's when nova got mad at us for breaking their unit tests15:58
* stevemar pokes jamielennox with a stick as a heads up -- i'm adding it to the agenda16:00
ayoungstevemar, it was more than just that.  It was across multiple projects16:00
ayoungjamielennox ought to be asleep16:05
*** thumpba has joined #openstack-keystone16:06
*** daemontool_ has quit IRC16:09
*** daemontool has joined #openstack-keystone16:10
openstackgerritSteve Martinelli proposed openstack/keystone: Remove the APIs from doc that is not supported yet  https://review.openstack.org/36857016:10
*** browne has quit IRC16:11
*** tonytan_brb has joined #openstack-keystone16:14
*** tonytan4ever has quit IRC16:16
openstackgerritLance Bragstad proposed openstack/keystone: WIP: Switch fernet to be the default token provider.  https://review.openstack.org/34568816:16
openstackgerritLance Bragstad proposed openstack/keystone: Consistently round down timestamps  https://review.openstack.org/36824416:16
openstackgerritSteve Martinelli proposed openstack/keystone: Use ConfigParser instead of SafeConfigParser  https://review.openstack.org/36841316:22
*** sdake_ has joined #openstack-keystone16:30
openstackgerritLance Bragstad proposed openstack/keystone: Remove unused method from keystone.common.utils  https://review.openstack.org/36895416:32
*** gyee has joined #openstack-keystone16:37
openstackgerritLance Bragstad proposed openstack/keystone: Use issued_at in fernet token provider  https://review.openstack.org/36896316:42
*** ametts has quit IRC16:45
openstackgerritRon De Rose proposed openstack/keystone: Fixes password created_at errors due to the server_default  https://review.openstack.org/36702516:47
*** tesseract- has quit IRC16:56
*** jaosorior has quit IRC16:59
*** roxanagh_ has joined #openstack-keystone16:59
*** chrisshattuck has joined #openstack-keystone17:00
*** cher75 has joined #openstack-keystone17:01
*** LamT_ has quit IRC17:01
*** jpena is now known as jpena|off17:06
*** sdake has joined #openstack-keystone17:06
cher75Can anyone point me to the know failures of unit tests?17:08
*** sdake_ has quit IRC17:09
*** code-R has joined #openstack-keystone17:09
*** code-R_ has joined #openstack-keystone17:11
openstackgerritMerged openstack/keystone: TrivialFix: Merge imports in code  https://review.openstack.org/36874317:13
*** code-R has quit IRC17:15
*** browne has joined #openstack-keystone17:15
*** roxanagh_ has quit IRC17:15
*** roxanagh_ has joined #openstack-keystone17:16
openstackgerritMerged openstack/keystone: Fix the nit on how to deploy keystone with `mod_proxy_uwsgi`  https://review.openstack.org/36857917:17
*** amoralej is now known as amoralej|off17:18
*** harlowja has joined #openstack-keystone17:19
stevemarcher75: not sure i understand what you're asking17:19
stevemarreminder to add to the meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting17:19
*** cher75 has quit IRC17:23
*** itsuugo has quit IRC17:24
*** itsuugo has joined #openstack-keystone17:25
*** tqtran has joined #openstack-keystone17:27
*** cher75 has joined #openstack-keystone17:28
cher75@stevemar When I run the keystone unit tests I'm getting the following error17:28
cher75_StringException: pythonlogging:'': {{{Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.}}}  Traceback (most recent call last): TypeError: execute_assignment_test_plan() takes exactly 2 arguments (1 given)17:29
*** tonytan_brb has quit IRC17:29
cher75So I was looking for a stable test lists17:30
*** ddieterly is now known as ddieterly[away]17:30
*** nicolasbock has quit IRC17:32
*** asettle has quit IRC17:33
stevemarcher75: you are running the master branch tests, yes?17:35
stevemarcher75: maybe you can nuke your old tox environment and re-run them, i think dogpile may be out of date for you17:36
stevemarcher75: rm -rf .tox17:36
stevemarcher75: from the keystone proejct directory17:36
stevemarcher75: and re-run with tox -e py2717:36
cher75Ok thanks stevemar will try that...17:38
*** nicolasbock has joined #openstack-keystone17:38
*** pnavarro has quit IRC17:42
*** harlowja has quit IRC17:43
*** harlowja has joined #openstack-keystone17:45
*** roxanagh_ has quit IRC17:46
*** Guest63113 is now known as nishaYadav17:57
*** joerch has quit IRC17:57
*** slberger has quit IRC17:59
*** slberger has joined #openstack-keystone18:01
harlowjanotmorgan breton (i think who was interested also); u still good with mini-keystone-intro and Q&A and such with k8s folks wed (11am PST i think we said)18:02
harlowjakfox1111 ^18:02
notmorganharlowja: oh hi18:03
notmorganyes i am18:03
*** chrisshattuck has quit IRC18:03
harlowjacool18:03
harlowjai gotta check my schedule (got dentist and eye/lasik doctor post-checkup) on wed18:04
harlowjabut if i'm not around kfox1111 should be ok to i think18:04
*** GB21 has quit IRC18:10
*** tonytan4ever has joined #openstack-keystone18:14
*** roxanagh_ has joined #openstack-keystone18:16
*** itsuugo has quit IRC18:16
*** itsuugo has joined #openstack-keystone18:17
*** woodster_ has quit IRC18:19
*** tonytan_brb has joined #openstack-keystone18:20
*** tonytan4ever has quit IRC18:22
*** itsuugo has quit IRC18:23
*** itsuugo has joined #openstack-keystone18:25
*** ddieterly[away] is now known as ddieterly18:28
openstackgerritMerged openstack/keystone: Remove the APIs from doc that is not supported yet  https://review.openstack.org/36857018:32
openstackgerritMerged openstack/keystone: Use ConfigParser instead of SafeConfigParser  https://review.openstack.org/36841318:36
*** itsuugo has quit IRC18:37
*** itsuugo has joined #openstack-keystone18:38
openstackgerritMerged openstack/keystone: Use issued_at in fernet token provider  https://review.openstack.org/36896318:41
*** ddieterly is now known as ddieterly[away]18:43
*** code-R_ has quit IRC18:45
*** gagehugo_ has joined #openstack-keystone18:49
*** gagehugo has quit IRC18:49
*** gagehugo_ has quit IRC18:49
*** gagehugo has joined #openstack-keystone18:50
*** woodster_ has joined #openstack-keystone18:55
*** itsuugo has quit IRC18:56
*** itsuugo has joined #openstack-keystone18:57
*** spedione|AWAY is now known as spedione19:00
*** pcaruana has joined #openstack-keystone19:04
*** itsuugo has quit IRC19:04
*** itsuugo has joined #openstack-keystone19:06
bretonharlowja: yes19:09
harlowjak19:09
bretonwhat's that in UTC? 6pm?19:10
bretonharlowja:19:10
bretonwow, go Samuel!19:14
*** asettle has joined #openstack-keystone19:14
lbragstaddstanek was this the failure you were talking about earlier? http://logs.openstack.org/44/368244/2/check/keystone-coverage-db-ubuntu-xenial/b67a327/console.html#_2016-09-12_16_29_22_53123919:23
*** spedione is now known as spedione|AWAY19:26
*** asettle has quit IRC19:26
dstaneklbragstad: no19:26
dstaneklbragstad: http://logs.openstack.org/07/356607/2/check/gate-keystone-python27-db-ubuntu-xenial/a88a9d8/console.html.gz#_2016-08-18_02_25_43_65000519:27
dstanekit was passing locally every time, but failed jenkins every time :-(19:27
lbragstaddstanek i'm seeing that same pattern with https://review.openstack.org/#/c/368244/219:28
dstaneki should probably rebase and get it figured out - was just trying to add a test for what i thought was an interesting corner case19:28
*** asettle has joined #openstack-keystone19:28
*** asettle has joined #openstack-keystone19:28
lbragstaddstanek i'm working pretty close to master19:29
lbragstadI can't seem to reproduce that failure locally19:29
lbragstadit looks racey - be https://review.openstack.org/#/c/345688/19 is based on https://review.openstack.org/#/c/368244/2 and it passed19:30
dstaneklbragstad: sounds like the two are related then. once i finish up the commit i'm looking at now i can take a closer look again19:30
lbragstaddstanek cool - i'll keep poking at it19:30
dstanekit was driving me nuts a week or two ago when i was looking at it19:31
lbragstadI can imagine19:31
*** asettle has quit IRC19:33
*** asettle has joined #openstack-keystone19:33
lbragstaddstanek interesting - you're test failure says that its failing because it's not getting back a 40319:35
lbragstaddstanek my patch is failing because it *is* getting back a 403 instead of a 401.19:35
*** asettle has quit IRC19:38
*** ddieterly[away] is now known as ddieterly19:41
*** ddieterly is now known as ddieterly[away]19:41
*** ddieterly[away] is now known as ddieterly19:41
*** julim_ has joined #openstack-keystone19:42
harlowjabreton hmmmm19:42
harlowjaunsure19:42
*** joerch has joined #openstack-keystone19:44
*** julim_ has quit IRC19:45
*** lamt has quit IRC19:47
openstackgerritRichard Avelar proposed openstack/keystone: POC sql query revoked tokens  https://review.openstack.org/35937119:55
stevemarcher75: any update?19:56
stevemarbreton: :)19:57
*** ddieterly is now known as ddieterly[away]19:57
*** daemontool has quit IRC19:59
notmorganstevemar: should have code for you today20:16
notmorganniw thst i am home  and have laptop with power20:16
*** fangxu has joined #openstack-keystone20:16
*** ddieterly[away] is now known as ddieterly20:19
*** sdake_ has joined #openstack-keystone20:25
*** thumpba has quit IRC20:27
*** sdake has quit IRC20:28
*** d0ugal has quit IRC20:28
*** thumpba has joined #openstack-keystone20:29
*** nishaYadav has quit IRC20:37
*** sigmavirus is now known as sigmavirus|awa20:38
stevemarnotmorgan: oh? what will this code do?20:39
notmorganstevemar: things i promised to write code for a week or so ago20:40
stevemarnotmorgan: i completely forgot what that was about20:41
stevemari know we spoke about it...20:41
*** ddieterly is now known as ddieterly[away]20:41
notmorganstevemar: revocation events i think is the bulk of it20:41
stevemarahhh okay20:41
*** d0ugal has joined #openstack-keystone20:44
*** pcaruana has quit IRC20:46
*** fangxu has quit IRC20:47
lbragstaddstanek i think we have another rounding issue20:48
lbragstaddstanek actually - it could be something with our time_fixture, too20:50
*** fangxu has joined #openstack-keystone20:51
*** chrisshattuck has joined #openstack-keystone20:51
*** itsuugo has quit IRC20:52
*** itsuugo has joined #openstack-keystone20:53
*** roxanagh_ has quit IRC20:53
*** roxanagh_ has joined #openstack-keystone20:53
*** roxanagh_ has quit IRC20:54
stevemarlbragstad & dstanek thanks again for being awesome, you guys made this release great, with the null key fix and the cache fix20:54
lbragstadstevemar anytime ;)20:54
lbragstadhappy to help20:55
*** itsuugo has quit IRC20:57
*** itsuugo has joined #openstack-keystone21:00
*** nicolasbock has quit IRC21:03
*** ddieterly[away] is now known as ddieterly21:04
*** raildo has quit IRC21:04
lbragstaddstanek now it passed... https://review.openstack.org/#/c/368244/221:05
lbragstadit looks to be a race condition for sure21:05
*** mvk has joined #openstack-keystone21:07
*** pauloewerton has quit IRC21:09
*** BjoernT has quit IRC21:21
*** itsuugo has quit IRC21:27
*** itsuugo has joined #openstack-keystone21:28
*** itsuugo has quit IRC21:35
*** roxanagh_ has joined #openstack-keystone21:35
*** itsuugo has joined #openstack-keystone21:38
*** sdake_ has quit IRC21:38
*** sdake has joined #openstack-keystone21:39
*** esp has joined #openstack-keystone21:39
*** ddieterly is now known as ddieterly[away]21:42
*** chrisshattuck has quit IRC21:45
*** chrisshattuck has joined #openstack-keystone21:47
*** sdake_ has joined #openstack-keystone21:47
*** sdake has quit IRC21:49
*** thumpba has quit IRC21:49
*** sdake has joined #openstack-keystone21:50
*** sdake_ has quit IRC21:52
*** ddieterly[away] is now known as ddieterly21:53
*** itsuugo has quit IRC21:53
*** ddieterly is now known as ddieterly[away]21:54
*** itsuugo has joined #openstack-keystone21:55
lbragstaddstanek i figured out what's causing your patch to fail - https://review.openstack.org/#/c/356607/2/keystone/tests/unit/test_auth.py21:56
*** ddieterly[away] is now known as ddieterly21:59
dstaneklbragstad: really?21:59
lbragstaddstanek yeah - left a comment21:59
lbragstadnot sure why that token is considered not valid according to sql, though21:59
openstackgerritRon De Rose proposed openstack/keystone: Fixes password created_at errors due to the server_default  https://review.openstack.org/36702522:04
*** slberger has left #openstack-keystone22:05
*** zigo has quit IRC22:08
*** michauds has quit IRC22:10
*** zigo has joined #openstack-keystone22:11
*** zigo is now known as Guest4138822:11
*** Guest41388 is now known as zigo_22:17
*** adriant has joined #openstack-keystone22:17
lbragstaddstanek hah - actually22:18
lbragstaddstanek you know whats up?22:18
lbragstadit's because we're disabling a user - which kicks off a callback to invalidate all tokens persisted in the backend22:19
lbragstadso - that test only really makes sense for fernet22:19
lbragstadbecause when a user is disabled we do this - https://github.com/openstack/keystone/blob/e10305da58cc5160c75f259a10eb6fff92e0d1de/keystone/token/provider.py#L16122:19
*** thumpba has joined #openstack-keystone22:20
lbragstadwhich goes through the database and sets .valid = False for that user's tokens22:20
lbragstadthat makes total sense22:20
lbragstadso - even if you could generate a uuid token in the future, it would probably still be hit by that case22:20
*** thumpba has quit IRC22:24
*** chrisshattuck has quit IRC22:35
lbragstaddstanek `curl http://cdn.pasteraw.com/d7k6ykdpvgklolzjprplp4d56dzx1lj | git apply; tox -e py27` should fix it for you22:37
*** chrisshattuck has joined #openstack-keystone22:37
*** ravelar has quit IRC22:41
*** ddieterly is now known as ddieterly[away]22:43
*** sdake has quit IRC22:48
*** openstackgerrit has quit IRC22:48
*** openstackgerrit has joined #openstack-keystone22:48
*** browne has quit IRC22:56
*** chrisshattuck has quit IRC23:01
*** itsuugo has quit IRC23:04
*** itsuugo has joined #openstack-keystone23:06
*** ddieterly[away] is now known as ddieterly23:10
*** ddieterly is now known as ddieterly[away]23:18
*** gagehugo has quit IRC23:31
*** itsuugo has quit IRC23:34
*** itsuugo has joined #openstack-keystone23:36
*** itsuugo has quit IRC23:41
*** itsuugo has joined #openstack-keystone23:42
*** roxanagh_ has quit IRC23:45
*** roxanagh_ has joined #openstack-keystone23:45
*** itsuugo has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!