| *** darrenc has quit IRC | 00:07 | |
| *** darrenc has joined #openstack-keystone | 00:07 | |
| *** mordred has quit IRC | 00:48 | |
| *** mordred has joined #openstack-keystone | 00:52 | |
| *** tonytan4ever has joined #openstack-keystone | 00:52 | |
| *** esp has joined #openstack-keystone | 00:53 | |
| *** tonytan_brb has joined #openstack-keystone | 00:53 | |
| *** tonytan_brb has quit IRC | 00:53 | |
| *** tonytan_brb has joined #openstack-keystone | 00:53 | |
| *** tonytan4ever has quit IRC | 00:58 | |
| *** haplo37_ has quit IRC | 01:23 | |
| *** haplo37_ has joined #openstack-keystone | 01:25 | |
| *** esp has quit IRC | 01:38 | |
| *** tonytan_brb has quit IRC | 01:42 | |
| *** tonytan4ever has joined #openstack-keystone | 01:50 | |
| *** tqtran has joined #openstack-keystone | 02:02 | |
| *** tqtran has quit IRC | 02:07 | |
| *** sdake has quit IRC | 02:29 | |
| *** sdake has joined #openstack-keystone | 03:21 | |
| *** kanika has joined #openstack-keystone | 03:34 | |
| kanika | Hi All | 03:35 |
|---|---|---|
| kanika | While running tox -epy27 error is coming, "ERROR: InvocationError: '/usr/bin/bash tools/pretty_tox.sh '" | 03:35 |
| kanika | How to resolve? | 03:35 |
| *** sdake_ has joined #openstack-keystone | 03:38 | |
| *** sdake has quit IRC | 03:40 | |
| *** namnh has joined #openstack-keystone | 03:47 | |
| *** links has joined #openstack-keystone | 03:49 | |
| *** haplo37_ has quit IRC | 04:05 | |
| *** haplo37_ has joined #openstack-keystone | 04:08 | |
| *** tonytan4ever has quit IRC | 04:58 | |
| *** jaosorior has joined #openstack-keystone | 05:04 | |
| *** code-R has joined #openstack-keystone | 05:09 | |
| *** code-R has quit IRC | 05:12 | |
| *** vaishali has joined #openstack-keystone | 05:13 | |
| *** code-R has joined #openstack-keystone | 05:13 | |
| *** bjolo has joined #openstack-keystone | 05:14 | |
| *** vaishali has quit IRC | 05:18 | |
| *** code-R has quit IRC | 05:18 | |
| *** adriant has quit IRC | 05:25 | |
| *** nkinder has joined #openstack-keystone | 05:29 | |
| *** GB21 has joined #openstack-keystone | 05:30 | |
| *** vaishali has joined #openstack-keystone | 05:30 | |
| *** links has quit IRC | 05:31 | |
| *** jaosorior has quit IRC | 05:31 | |
| *** jaosorior has joined #openstack-keystone | 05:32 | |
| *** richm has quit IRC | 05:40 | |
| *** links has joined #openstack-keystone | 05:44 | |
| *** mugsie has quit IRC | 05:50 | |
| *** mugsie has joined #openstack-keystone | 05:51 | |
| *** vaishali has quit IRC | 05:52 | |
| *** GB21 has quit IRC | 05:52 | |
| *** GB21 has joined #openstack-keystone | 06:03 | |
| *** rcernin has joined #openstack-keystone | 06:04 | |
| *** tqtran has joined #openstack-keystone | 06:04 | |
| *** vaishali has joined #openstack-keystone | 06:04 | |
| *** GB21 has quit IRC | 06:08 | |
| *** tqtran has quit IRC | 06:09 | |
| breton | kanika: post the full traceback please | 06:11 |
| *** jorge_munoz has quit IRC | 06:15 | |
| *** vaishali has quit IRC | 06:16 | |
| *** jorge_munoz has joined #openstack-keystone | 06:17 | |
| *** sdake has joined #openstack-keystone | 06:22 | |
| *** sdake_ has quit IRC | 06:23 | |
| *** denismakogon_ has joined #openstack-keystone | 06:26 | |
| kanika | ~~============================ Failed 2 tests - output below: Reloaded policy file: /tmp/tmpGzXVAR ====== Totals ~~~~~~~~~~~~~~~~~~~ Traceback (most recent call last): File "keystone/tests/unit/test_cli.py", line 71, in test_cli self.assertThat(self.logging.output, matchers.Contains(expected_msg)) File "/root/kalaswan_work/keystone/.tox/py27/lib/python2.7/site-packages/testtools/testcase.py | 06:28 |
| kanika | Captured traceback: ~~~~~~~~~~~~~~~~~~~ Traceback (most recent call last): File "keystone/tests/unit/test_policy.py", line 62, in test_invalid_policy_raises_error | 06:29 |
| kanika | empty_credentials, action, self.target) File "/root/kalaswan_work/keystone/.tox/py27/lib/python2.7/site-packages/testtools/testcase.py", line 485, in assertRaises self.assertThat(our_callable, matcher) | 06:29 |
| kanika | File "/root/kalaswan_work/keystone/.tox/py27/lib/python2.7/site-packages/testtools/testcase.py", line 498, in assertThat raise mismatch_error testtools.matchers._impl.MismatchError: <function enforce at 0x33e67d0> returned True | 06:29 |
| *** vaishali has joined #openstack-keystone | 06:30 | |
| *** links has quit IRC | 06:31 | |
| *** GB21 has joined #openstack-keystone | 06:33 | |
| *** haplo37_ has quit IRC | 06:41 | |
| *** kevinbenton has quit IRC | 06:42 | |
| *** haplo37_ has joined #openstack-keystone | 06:43 | |
| *** links has joined #openstack-keystone | 06:44 | |
| *** kevinbenton has joined #openstack-keystone | 06:46 | |
| *** denismakogon_ has quit IRC | 06:53 | |
| *** pcaruana has joined #openstack-keystone | 06:53 | |
| *** bjolo has quit IRC | 06:53 | |
| *** denismakogon_ has joined #openstack-keystone | 06:55 | |
| *** GB21 has quit IRC | 06:59 | |
| *** vaishali has quit IRC | 06:59 | |
| *** tonytan4ever has joined #openstack-keystone | 06:59 | |
| *** tesseract- has joined #openstack-keystone | 07:03 | |
| *** tonytan4ever has quit IRC | 07:04 | |
| *** vaishali has joined #openstack-keystone | 07:11 | |
| *** GB21 has joined #openstack-keystone | 07:11 | |
| *** sdake_ has joined #openstack-keystone | 07:14 | |
| *** sdake_ has quit IRC | 07:14 | |
| *** sdake has quit IRC | 07:15 | |
| *** denismakogon_ has quit IRC | 07:15 | |
| *** vaishali has quit IRC | 07:16 | |
| *** GB21 has quit IRC | 07:17 | |
| *** denismakogon has joined #openstack-keystone | 07:20 | |
| *** amoralej|off is now known as amoralej | 07:22 | |
| *** sdake has joined #openstack-keystone | 07:26 | |
| *** GB21 has joined #openstack-keystone | 07:29 | |
| *** vaishali has joined #openstack-keystone | 07:31 | |
| *** pnavarro has joined #openstack-keystone | 07:34 | |
| *** zigo has quit IRC | 07:39 | |
| *** zigo has joined #openstack-keystone | 07:42 | |
| *** zigo is now known as Guest24756 | 07:42 | |
| *** denismakogon has quit IRC | 07:52 | |
| breton | kanika: well, you have 2 tests that failed. You need to fix them. | 07:54 |
| breton | kanika: next time, please post things like this to paste.openstack.org | 07:55 |
| *** denismakogon_ has joined #openstack-keystone | 07:55 | |
| *** sdake has quit IRC | 07:58 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** tonytan4ever has joined #openstack-keystone | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** kevinbenton has quit IRC | 08:01 | |
| *** code-R has joined #openstack-keystone | 08:02 | |
| *** kevinbenton has joined #openstack-keystone | 08:03 | |
| *** code-R_ has joined #openstack-keystone | 08:04 | |
| *** kevinbenton has quit IRC | 08:04 | |
| *** tonytan4ever has quit IRC | 08:05 | |
| *** kevinbenton has joined #openstack-keystone | 08:06 | |
| *** code-R has quit IRC | 08:07 | |
| *** evrardjp has quit IRC | 08:09 | |
| *** evrardjp has joined #openstack-keystone | 08:09 | |
| openstackgerrit | Kanika Singh proposed openstack/keystone: Role Assignment was reporting incorrect Inheritance when --names was used. Reason: Dictionary was missing the inheritance key value pair. Hence added elif condition to check for inherited property and add it in the dictionary. Closes bug: #1625230 https://review.openstack.org/380973 | 08:20 |
| openstack | bug 1625230 in OpenStack Identity (keystone) "Role Assignment Incorrectly Reports Inheritance when --name is Used" [Medium,Confirmed] https://launchpad.net/bugs/1625230 - Assigned to Kanika Singh (kanikasingh-1490) | 08:20 |
| *** asettle has joined #openstack-keystone | 08:21 | |
| openstackgerrit | Kanika Singh proposed openstack/keystone: Role Assignment was reporting incorrect Inheritance when --names was used. Reason: Dictionary was missing the inheritance key value pair. Hence added elif condition to check for inherited property and add it in the dictionary. Closes bug: #1625230 https://review.openstack.org/380973 | 08:27 |
| openstack | bug 1625230 in OpenStack Identity (keystone) "Role Assignment Incorrectly Reports Inheritance when --name is Used" [Medium,Confirmed] https://launchpad.net/bugs/1625230 - Assigned to Kanika Singh (kanikasingh-1490) | 08:27 |
| *** kanika has left #openstack-keystone | 08:29 | |
| *** GB21 has quit IRC | 08:41 | |
| *** vaishali has quit IRC | 08:41 | |
| *** GB21 has joined #openstack-keystone | 08:48 | |
| *** ma9 has joined #openstack-keystone | 08:49 | |
| ma9 | hi | 08:49 |
| ma9 | what's the situation with hierarchical projects in openstack? I saw some suggestions, has it been implemented in some version? | 08:50 |
| *** denismakogon__ has joined #openstack-keystone | 08:52 | |
| *** denismakogon_ has quit IRC | 08:52 | |
| *** Guest24756 is now known as zigo | 08:54 | |
| *** denismakogon__ has quit IRC | 09:00 | |
| *** vaishali has joined #openstack-keystone | 09:02 | |
| *** vaishali has quit IRC | 09:23 | |
| *** jaosorior is now known as jaosorior_lunch | 09:25 | |
| *** pnavarro has quit IRC | 09:32 | |
| *** vaishali has joined #openstack-keystone | 09:35 | |
| *** hoonetorg has quit IRC | 09:39 | |
| *** haplo37_ has quit IRC | 09:41 | |
| *** haplo37_ has joined #openstack-keystone | 09:43 | |
| *** sdake has joined #openstack-keystone | 09:44 | |
| *** vaishali has quit IRC | 09:47 | |
| *** hoonetorg has joined #openstack-keystone | 09:52 | |
| *** dikonoor has joined #openstack-keystone | 09:58 | |
| *** hoonetorg has quit IRC | 10:00 | |
| *** vaishali has joined #openstack-keystone | 10:00 | |
| *** jaosorior_lunch is now known as jaosorior | 10:01 | |
| *** tqtran has joined #openstack-keystone | 10:05 | |
| *** richm has joined #openstack-keystone | 10:09 | |
| *** tqtran has quit IRC | 10:10 | |
| *** namnh has quit IRC | 10:13 | |
| *** hoonetorg has joined #openstack-keystone | 10:13 | |
| *** denismakogon__ has joined #openstack-keystone | 10:33 | |
| *** dancn has quit IRC | 10:48 | |
| *** dancn has joined #openstack-keystone | 10:48 | |
| *** openstackgerrit has quit IRC | 10:48 | |
| *** openstackgerrit has joined #openstack-keystone | 10:48 | |
| *** dikonoor has quit IRC | 10:51 | |
| *** vaishali has quit IRC | 10:53 | |
| *** vaishali has joined #openstack-keystone | 10:55 | |
| *** nicolasbock has joined #openstack-keystone | 11:04 | |
| *** sdake_ has joined #openstack-keystone | 11:12 | |
| *** sdake has quit IRC | 11:14 | |
| *** dikonoor has joined #openstack-keystone | 11:31 | |
| *** dikonoor has quit IRC | 11:34 | |
| *** dikonoor has joined #openstack-keystone | 11:49 | |
| *** sdake_ is now known as sdake | 11:52 | |
| *** artmr has joined #openstack-keystone | 11:58 | |
| *** tonytan4ever has joined #openstack-keystone | 12:02 | |
| *** ma9 has quit IRC | 12:02 | |
| *** ma9 has joined #openstack-keystone | 12:04 | |
| *** tonytan4ever has quit IRC | 12:06 | |
| *** tqtran has joined #openstack-keystone | 12:06 | |
| openstackgerrit | Annapoornima Koppad proposed openstack/keystone: Updating the document regarding LDAP options https://review.openstack.org/379334 | 12:07 |
| *** ma9 has quit IRC | 12:08 | |
| *** chlong has joined #openstack-keystone | 12:08 | |
| *** tqtran has quit IRC | 12:11 | |
| *** ma9 has joined #openstack-keystone | 12:11 | |
| *** raildo has joined #openstack-keystone | 12:14 | |
| *** chlong has quit IRC | 12:14 | |
| artmr | hello everyone, I'm beginner here and I need reviews to my patches. Can you help me with a Review? https://review.openstack.org/#/c/375730/ | 12:16 |
| stevemar | o/ | 12:21 |
| *** edmondsw has joined #openstack-keystone | 12:23 | |
| *** lamt has quit IRC | 12:25 | |
| *** chlong has joined #openstack-keystone | 12:26 | |
| *** ma9 has quit IRC | 12:31 | |
| *** dave-mccowan has joined #openstack-keystone | 12:36 | |
| zigo | morgan: Around? | 12:36 |
| *** tonytan4ever has joined #openstack-keystone | 12:39 | |
| *** vaishali has quit IRC | 13:00 | |
| *** prashanth has joined #openstack-keystone | 13:09 | |
| *** ma9 has joined #openstack-keystone | 13:10 | |
| lbragstad | jamielennox me too | 13:10 |
| prashanth | Hi.. | 13:14 |
| prashanth | I am new to IRC. | 13:14 |
| prashanth | I see the below warning in the keystone logs: | 13:14 |
| prashanth | 6:43:30 PM: WARNING keystonemiddleware.auth_token [-] Using the in-process token cache is deprecated as of the 4.2.0 release and may be removed in the | 13:14 |
| prashanth | 5.0.0 release or the 'O' development cycle. The in-process cache causes inconsistent results and high memory usage. When the feature is removed the auth_token middlewa | 13:14 |
| prashanth | re will not cache tokens by default which may result in performance issues. It is recommended to use memcache for the auth_token token cache by setting the memcached_s | 13:14 |
| prashanth | ervers option. | 13:14 |
| *** tonytan4ever has quit IRC | 13:16 | |
| prashanth | I believe the [cache] memcached_server section needs to be updated | 13:16 |
| prashanth | Please let me know if my understanding is right | 13:16 |
| prashanth | https://github.com/openstack/keystone/blob/master/etc/keystone.conf.sample#L470 | 13:16 |
| *** vaishali has joined #openstack-keystone | 13:17 | |
| dikonoor | stevemar: On prashanth 's query, I believe enabling memcached_servers will get rid of the deprecation | 13:18 |
| *** vaishali has quit IRC | 13:25 | |
| *** jrist has quit IRC | 13:28 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: WIP: Remove validate_v2_token() method https://review.openstack.org/380663 | 13:29 |
| *** jaosorior has quit IRC | 13:31 | |
| *** jaosorior has joined #openstack-keystone | 13:32 | |
| *** tonytan4ever has joined #openstack-keystone | 13:32 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: WIP: Simplify the KeystoneToken model https://review.openstack.org/380664 | 13:33 |
| *** tonytan4ever has quit IRC | 13:33 | |
| *** mvk has quit IRC | 13:35 | |
| stevemar | prashanth: dikonoor is correct, use the "memcached_servers" option in the [keystone_authtoken] section of various config files -- nova.conf for example | 13:37 |
| stevemar | prashanth: more info here: https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_opts.py#L82-L86 | 13:37 |
| *** jrist has joined #openstack-keystone | 13:38 | |
| stevemar | prashanth: check the | 13:38 |
| stevemar | prashanth: check the "memcached_servers" options here: http://docs.openstack.org/developer/keystonemiddleware/middlewarearchitecture.html#configuration | 13:38 |
| *** tonytan4ever has joined #openstack-keystone | 13:38 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: WIP: One validate method to rule them all... https://review.openstack.org/374243 | 13:41 |
| prashanth | stevemar: yes. I can see the property #memcached_servers = <None>. | 13:41 |
| prashanth | stevemar: is this supposed to be updated in all conf files where there is [keystone_authtoken] section ? | 13:42 |
| *** LamT__ has joined #openstack-keystone | 13:44 | |
| *** bjolo has joined #openstack-keystone | 13:46 | |
| *** denismakogon__ has quit IRC | 13:49 | |
| dikonoor | prashanth: yes, I think it would need to be updated against the keystone_authtoken section of all the conf files ..This is because all of them uses the keystonemiddleware module for token verification and would hit this flow | 13:51 |
| *** GB21 has quit IRC | 13:52 | |
| *** nkinder has quit IRC | 14:00 | |
| *** mvk has joined #openstack-keystone | 14:02 | |
| dstanek | i thought devstack was doing name based virtual hosting for keystone | 14:02 |
| bknudson | dstanek: no vhost, it's path based. | 14:03 |
| bknudson | there's just /identity and /identity_v2_admin | 14:03 |
| bknudson | and :5000 and :35357 | 14:03 |
| dstanek | bknudson: oop...that's what i meant - path based not name based | 14:04 |
| dstanek | but it appears that i still need the port | 14:04 |
| bknudson | the goal is to be able to get rid of that. | 14:04 |
| bknudson | might need to fix the uwsgi deploy first | 14:05 |
| bknudson | https://review.openstack.org/#/c/291817/ -- attempt to switch uwsgi deploy to proxy by apache | 14:05 |
| bknudson | was waiting for xenial | 14:06 |
| dstanek | hmmm....maybe it's something else /identity/v3 returns a keystone response, but shows up in horizon's apache access log | 14:06 |
| *** ravelar has joined #openstack-keystone | 14:07 | |
| dstanek | bknudson: their apache config is messed up. going to submit a fix | 14:09 |
| *** woodster_ has joined #openstack-keystone | 14:09 | |
| *** gagehugo has joined #openstack-keystone | 14:10 | |
| *** jed56 has joined #openstack-keystone | 14:21 | |
| *** chris_hultin|AWA is now known as chris_hultin | 14:24 | |
| *** bjolo_ has joined #openstack-keystone | 14:26 | |
| *** rodrigods has quit IRC | 14:29 | |
| *** nkinder has joined #openstack-keystone | 14:29 | |
| *** rodrigods has joined #openstack-keystone | 14:29 | |
| *** ma9 has quit IRC | 14:31 | |
| *** Marcellin__ has joined #openstack-keystone | 14:31 | |
| *** ma9 has joined #openstack-keystone | 14:32 | |
| stevemar | bknudson: lol thanks for the comment on my abandoned patch :) | 14:33 |
| bknudson | I didn't even think gerrit allowed no-diff patches. | 14:33 |
| stevemar | i fooled it good | 14:34 |
| *** lamt has joined #openstack-keystone | 14:34 | |
| *** spilla has joined #openstack-keystone | 14:40 | |
| *** spzala has joined #openstack-keystone | 14:46 | |
| *** lamt has quit IRC | 14:51 | |
| *** phalmos has joined #openstack-keystone | 14:57 | |
| *** links has quit IRC | 15:04 | |
| *** mvk has quit IRC | 15:06 | |
| *** pcaruana has quit IRC | 15:18 | |
| *** mvk has joined #openstack-keystone | 15:19 | |
| *** rcernin has quit IRC | 15:19 | |
| *** prashanth has quit IRC | 15:20 | |
| *** dikonoor has quit IRC | 15:22 | |
| *** slberger has joined #openstack-keystone | 15:25 | |
| *** haplo37__ has joined #openstack-keystone | 15:29 | |
| *** ravelar has quit IRC | 15:34 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs: Mapping shadow users into projects and roles https://review.openstack.org/324055 | 15:37 |
| *** ravelar has joined #openstack-keystone | 15:39 | |
| *** slberger has quit IRC | 15:40 | |
| *** slberger has joined #openstack-keystone | 15:42 | |
| *** ravelar has quit IRC | 15:42 | |
| *** ravelar has joined #openstack-keystone | 15:43 | |
| *** mfisch` is now known as mfisch | 15:43 | |
| *** mfisch is now known as Guest7223 | 15:43 | |
| openstackgerrit | Merged openstack/oslo.policy: Updated from global requirements https://review.openstack.org/380581 | 15:45 |
| *** Guest7223 is now known as mfisch | 15:49 | |
| *** mfisch has quit IRC | 15:49 | |
| *** mfisch has joined #openstack-keystone | 15:49 | |
| *** tesseract- has quit IRC | 15:56 | |
| *** ma9 has quit IRC | 15:58 | |
| *** chlong has quit IRC | 16:06 | |
| *** tqtran has joined #openstack-keystone | 16:08 | |
| stevemar | dstanek: poke | 16:09 |
| *** asettle__ has joined #openstack-keystone | 16:10 | |
| *** tqtran has quit IRC | 16:12 | |
| *** ravelar has quit IRC | 16:14 | |
| *** asettle has quit IRC | 16:14 | |
| *** asettle__ has quit IRC | 16:15 | |
| *** gyee has joined #openstack-keystone | 16:15 | |
| *** slberger has quit IRC | 16:16 | |
| *** ravelar has joined #openstack-keystone | 16:22 | |
| dstanek | stevemar: yo | 16:25 |
| stevemar | dstanek: i was gonna bug you about what you plan to do in ocata, but then i remembered that you have that pysaml thing going | 16:26 |
| stevemar | dstanek: is that something i can expect to land in ocata? | 16:26 |
| dstanek | stevemar: absolutely...i've been mucking with federation for the last few weeks for a variety of things. that work will definitely be done in O | 16:27 |
| *** sdake has quit IRC | 16:30 | |
| *** sdake has joined #openstack-keystone | 16:34 | |
| *** esp has joined #openstack-keystone | 16:45 | |
| *** clenimar has joined #openstack-keystone | 16:51 | |
| *** code-R_ has quit IRC | 16:55 | |
| *** GB21 has joined #openstack-keystone | 16:58 | |
| *** mvk has quit IRC | 17:29 | |
| openstackgerrit | Annapoornima Koppad proposed openstack/keystone: Updating the document regarding LDAP options https://review.openstack.org/379334 | 17:32 |
| *** tqtran has joined #openstack-keystone | 17:37 | |
| *** sdake has quit IRC | 17:39 | |
| stevemar | dstanek: mucking around is always good :) | 17:42 |
| *** sdake has joined #openstack-keystone | 17:44 | |
| *** adrian_otto has joined #openstack-keystone | 17:49 | |
| openstackgerrit | Annapoornima Koppad proposed openstack/keystone: Updating the document regarding LDAP options https://review.openstack.org/379334 | 17:53 |
| *** amoralej is now known as amoralej|off | 17:54 | |
| *** prashanth has joined #openstack-keystone | 17:57 | |
| *** artmr has quit IRC | 17:57 | |
| *** Marcellin__ has quit IRC | 17:57 | |
| bjolo_ | hi all, wondering if anyone can help or point in the right direction. Trying to get v3cloudsample working, but i dont seem to get the right role for my admin account. | 17:59 |
| bjolo_ | https://github.com/openstack/keystone/blob/stable/newton/etc/policy.v3cloudsample.json | 17:59 |
| *** sdake has quit IRC | 18:01 | |
| *** GB21 has quit IRC | 18:02 | |
| *** jaosorior has quit IRC | 18:07 | |
| *** asettle has joined #openstack-keystone | 18:11 | |
| *** jorge_munoz_ has joined #openstack-keystone | 18:17 | |
| *** jorge_munoz has quit IRC | 18:18 | |
| *** jorge_munoz_ is now known as jorge_munoz | 18:18 | |
| *** pcaruana has joined #openstack-keystone | 18:29 | |
| *** browne has joined #openstack-keystone | 18:30 | |
| *** rcernin has joined #openstack-keystone | 18:31 | |
| *** harlowja has quit IRC | 18:38 | |
| *** harlowja has joined #openstack-keystone | 18:39 | |
| *** esp has quit IRC | 18:42 | |
| *** gyee has quit IRC | 18:54 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Remove password history validation from admin password resets https://review.openstack.org/379030 | 18:56 |
| stevemar | reminder to fill in the meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | 18:56 |
| stevemar | bknudson: you gonna rebase https://review.openstack.org/#/c/291817/ ? | 18:58 |
| *** prashanth has quit IRC | 18:59 | |
| *** hoonetorg has quit IRC | 19:00 | |
| *** esp has joined #openstack-keystone | 19:02 | |
| *** asettle has quit IRC | 19:03 | |
| *** haplo37__ has quit IRC | 19:06 | |
| *** phalmos has quit IRC | 19:10 | |
| *** asettle has joined #openstack-keystone | 19:12 | |
| openstackgerrit | Arthur Miranda proposed openstack/python-keystoneclient: Prevent attempts to "filter" list() calls by globally unique IDs https://review.openstack.org/378001 | 19:13 |
| *** jed56 has quit IRC | 19:15 | |
| kfox1111 | question... I'm seeing some rather odd results out of the openstack catalog list -f json... it comes up with multiple Name/Type rows for the same service with subsets of the entries sometimes. | 19:17 |
| kfox1111 | is there any way to make it not do that? | 19:17 |
| kfox1111 | see the bottom of this: http://logs.openstack.org/68/380868/14/experimental/gate-kolla-kubernetes-deploy-centos-binary-ceph-nv/2af3a7c/console.html | 19:18 |
| *** catintheroof has joined #openstack-keystone | 19:22 | |
| catintheroof | Hi! quick question, is domain-specific configuration through API (http://developer.openstack.org/api-ref/identity/v3/#domain-configuration) fully functional on mitaka, or does it still in testing ? | 19:23 |
| dstanek | kfox1111: that actually looks ok to me. not seeing anything duplicated | 19:24 |
| kfox1111 | see the table there. there are multiple glance rows, with the same region listed multiple times, but with a subset of endpoints in each. | 19:24 |
| kfox1111 | its not an error exactly, but really not nice to parse. :/ | 19:25 |
| kfox1111 | the json does the same thing. | 19:25 |
| *** spzala has quit IRC | 19:26 | |
| lbragstad | stevemar quick question on https://bugs.launchpad.net/keystone/+bug/1628135 | 19:27 |
| openstack | Launchpad bug 1628135 in OpenStack Identity (keystone) "Integrate Identity back end with LDAP in Administrator Guide" [High,Triaged] | 19:27 |
| dstanek | kfox1111: ah i see. it's not duplicated, just split up. i've not seen that before | 19:27 |
| *** hoonetorg has joined #openstack-keystone | 19:27 | |
| lbragstad | stevemar is that actually a bug with keystone or only the openstack-manuals that keystone has to fix? | 19:27 |
| *** spzala has joined #openstack-keystone | 19:27 | |
| kfox1111 | yeah. seems like a db sort not happening, then its just printing out each row as it sees them, only collapsing rows if they are one after another of the same type. | 19:27 |
| lbragstad | I don't think that will actually require any patches to keystone, will it? | 19:27 |
| stevemar | the latter, IIRC the deal with docs is that it stays on both our queues or just keystones? | 19:27 |
| kfox1111 | I think I have a workaround though. If I iterate over each service and do a show on that, it works ok. | 19:28 |
| kfox1111 | just less good then it could be. :/ | 19:28 |
| *** denismakogon__ has joined #openstack-keystone | 19:28 | |
| lbragstad | stevemar ah | 19:28 |
| stevemar | kfox1111: i'm wondering if that's because OSC formats the output of catalog list? | 19:29 |
| kfox1111 | could be. | 19:29 |
| stevemar | kfox1111: v3 or v2? | 19:29 |
| kfox1111 | v3 | 19:29 |
| dstanek | kfox1111: does the catalog directly from keystone look ok? | 19:30 |
| kfox1111 | yeah. I think so. | 19:30 |
| kfox1111 | oh. you mean the cli or the entries? | 19:30 |
| stevemar | kfox1111: there's definitely some formatting going on https://github.com/openstack/python-openstackclient/blob/master/openstackclient/identity/v3/catalog.py#L29-L37 | 19:30 |
| kfox1111 | bleh. yeah. | 19:31 |
| kfox1111 | thats a horible format for json parsing too. :/ | 19:31 |
| kfox1111 | should be a sub document so its easy to crawl. | 19:31 |
| *** spzala has quit IRC | 19:32 | |
| stevemar | kfox1111: the catalog should be a nearly static document that things can cache and look at easily | 19:32 |
| stevemar | but getting there is a hell of a mountain to climb | 19:32 |
| kfox1111 | yeah. I'm just trying to parse it nicely in a gate job to verify deployment is working. getting openstack deployed that way has been a real chore. :/ | 19:33 |
| catintheroof | stevemar, Hi! quick question, is domain-specific configuration through API (http://developer.openstack.org/api-ref/identity/v3/#domain-configuration) fully functional on mitaka, or does it still in testing ? | 19:37 |
| stevemar | catintheroof: fully functional | 19:38 |
| stevemar | catintheroof: the python bindings and CLI support are lacking :( | 19:38 |
| catintheroof | stevemar, oh ... little detail, but thanks | 19:38 |
| stevemar | catintheroof: python bindings: https://review.openstack.org/#/c/358770/ | 19:38 |
| stevemar | catintheroof: how do you plan on interacting with the API? | 19:39 |
| stevemar | catintheroof: i'd appreciate an opinion on the implementation for the client side, i'm a bit torn ^ | 19:40 |
| *** spzala has joined #openstack-keystone | 19:41 | |
| kfox1111 | what the heck? | 19:41 |
| kfox1111 | I could have swarn these were pubicURL: before | 19:42 |
| kfox1111 | oh... they have URL in an older version of openstack cli. | 19:43 |
| kfox1111 | oh good greef. :/ | 19:43 |
| kfox1111 | or may be a difference in distro's I guess... :/ | 19:45 |
| stevemar | kfox1111: i think it's publicURL if you're using v2.0... | 19:45 |
| stevemar | v3 prints it a bit differently | 19:46 |
| kfox1111 | ah. yeah, I think the other one was v2. | 19:46 |
| catintheroof | stevemar, well ... anything for not having to create a new file for every domain, can we help to get the bindings up & running ? | 19:46 |
| *** asettle has quit IRC | 19:46 | |
| kfox1111 | thx. | 19:46 |
| stevemar | catintheroof: just let us know if the design makes sense | 19:46 |
| *** david-lyle has joined #openstack-keystone | 19:47 | |
| stevemar | catintheroof: it was changed from being able to specify a single option to update, to just posting the whole json blob like you would via the REST api | 19:47 |
| catintheroof | stevemar, i think is not that much of a problem if you need to just change one option, just repost the json with the option changed | 19:50 |
| catintheroof | stevemar, that's the idea right ? | 19:50 |
| *** bjolo has quit IRC | 19:51 | |
| *** tonytan4ever has quit IRC | 19:55 | |
| openstackgerrit | Merged openstack/keystone: Update man page for Ocata release version and date https://review.openstack.org/377068 | 19:59 |
| kfox1111 | wow... look at this one: | 20:02 |
| kfox1111 | http://logs.openstack.org/68/380868/16/experimental/gate-kolla-kubernetes-deploy-centos-binary-ceph-nv/47a7606/console.html | 20:02 |
| kfox1111 | a openstack catalog show glance -c endpoints -f value fails to list them all. :/ | 20:03 |
| *** sdake has joined #openstack-keystone | 20:05 | |
| kfox1111 | any thoughts on how I could do this catalog list more parsibly? | 20:06 |
| kfox1111 | maybe I break down and just get a token and use curl to fetch raw json? | 20:08 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove password history validation from admin password resets https://review.openstack.org/379030 | 20:19 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove password history validation from admin password resets https://review.openstack.org/379030 | 20:21 |
| openstackgerrit | Merged openstack/keystone: Remove the unused sdx doc files https://review.openstack.org/379857 | 20:26 |
| stevemar | kfox1111: you'll run into the same problem if you use a curl call | 20:28 |
| stevemar | v2 and v3 show up differently too | 20:28 |
| kfox1111 | I think the format will be more parsable though. it looks like curl -s \ -H "X-Auth-Token: $OS_TOKEN" \ http://localhost:5000/v3/endpoints | 20:28 |
| kfox1111 | will spit it out in an endpoints: interface: ... style that will be much easier to parse. | 20:29 |
| *** catintheroof has quit IRC | 20:29 | |
| *** david-lyle has quit IRC | 20:30 | |
| *** david-lyle has joined #openstack-keystone | 20:35 | |
| *** phalmos has joined #openstack-keystone | 20:38 | |
| *** david-lyle has quit IRC | 20:44 | |
| *** pcaruana has quit IRC | 20:45 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone-specs: Add notifications to PCI-DSS events https://review.openstack.org/381302 | 20:46 |
| lbragstad | dolphm do you remember if you had a spec open for https://review.openstack.org/#/c/274157/ ? | 20:49 |
| lbragstad | cc jamielennox since i think you were involved with some of that work, too ^ | 20:49 |
| jamielennox | lbragstad: https://review.openstack.org/#/c/245629/ was the cross project spec, it hasn't gone anywhere recently | 20:51 |
| jamielennox | lbragstad: turns out we need to define some common roles to really make it work | 20:52 |
| lbragstad | jamielennox perfect - that's exactly what I was looking for | 20:52 |
| lbragstad | cc stevemar ^ | 20:52 |
| jamielennox | so at the moment at least using the to_policy_values from oslo.context is that the params are common | 20:52 |
| morgan | zigo: o/ | 20:54 |
| morgan | zigo: here now[ish], just saw your ping | 20:54 |
| zigo | morgan: I was wondering if you had an idea of what was the cause of this: https://newton-jessie.pkgs.mirantis.com/job/openstack-tempest-ci/125/consoleFull | 20:54 |
| dolphm | lbragstad: yes, i do | 20:55 |
| zigo | Look for "heat_integrationtests.functional.test_admin_actions.AdminActionsTest.test_admin_complex_stack_actions" | 20:55 |
| dolphm | lbragstad: or rather, jamie does :) | 20:55 |
| zigo | morgan: It's looking like heat insist on using v3password auth_type, but when I switch it to that, it continues to complain. | 20:55 |
| morgan | zigo: chrome complains you're using a self-signd cert there :P | 20:55 |
| morgan | zigo: but i bet you knew that. | 20:55 |
| zigo | morgan: Yup ! :) | 20:55 |
| * morgan is looking at it | 20:55 | |
| zigo | morgan: Too lazy to fix it, sorry ... :P | 20:55 |
| lbragstad | dolphm jamielennox I stumbled across this and it reminded me of the work you guys were doing - https://bugs.launchpad.net/glance/+bug/1391504 | 20:56 |
| openstack | Launchpad bug 1391504 in neutron "Sample policies for Openstack" [Wishlist,Won't fix] - Assigned to Andre Aranha (afaranha) | 20:56 |
| morgan | zigo: letsencrypt! | 20:56 |
| zigo | I should invest time for letsencrypt and knowing how it works, exactly. | 20:56 |
| *** adriant has joined #openstack-keystone | 20:56 | |
| morgan | heat definitely needs v3 | 20:56 |
| morgan | you can do it with v2... but dont | 20:57 |
| zigo | morgan: My issue is that keystonemiddleware doesn't generate the correct options by default. | 20:57 |
| morgan | i haven't seen that error before... | 20:57 |
| stevemar | dolphm: your comment is circular in https://review.openstack.org/#/c/274157/ :P | 20:57 |
| zigo | morgan: We talked about it at the end of the last release, but there's still no way to fix that ... :( | 20:57 |
| morgan | zigo: i.. haven't look at this in a while | 20:57 |
| morgan | soooooooooooooo | 20:57 |
| dolphm | stevemar: it's self-specified | 20:57 |
| stevemar | :) | 20:58 |
| morgan | i'm not going to be super useful atm | 20:58 |
| zigo | morgan: I tried adding some StrOpt in keystonemiddleware, but then unit tests are failing miserably. | 20:58 |
| * morgan has to get lunch and pack for a day trip tomorrow. | 20:58 | |
| zigo | Let me show you ... | 20:58 |
| jamielennox | morgan, lbragstad or someone, can someone have a look at https://review.openstack.org/#/c/359506/ | 20:58 |
| zigo | morgan: Ok, who else could I ask ? jamielennox ? | 20:58 |
| morgan | jamielennox and stevemar | 20:59 |
| jamielennox | it's probably not in your area of expertise but i'd like it in and stevemar has already looked | 20:59 |
| morgan | mostly stevemar | 20:59 |
| zigo | Ok, thanks. | 20:59 |
| zigo | Have fun then! | 20:59 |
| morgan | cause i can vountoss him under the bus for this | 20:59 |
| morgan | voluntoss* | 20:59 |
| stevemar | ive seen the notifications go by but have been on the phone for the last 30 minutes | 20:59 |
| jamielennox | i'm in a meeting so not really paynig attention here for a while | 20:59 |
| zigo | LOL ! :) | 21:00 |
| zigo | Thanks guys ... :P | 21:00 |
| stevemar | *high fives jamielennox* | 21:00 |
| zigo | stevemar: Can I ping you tomorrow maybe? | 21:00 |
| stevemar | zigo: sure | 21:00 |
| zigo | stevemar: In what TZ are you? (I'm in France) | 21:00 |
| stevemar | zigo: east coast | 21:00 |
| zigo | Ok, easy enough then, thanks. | 21:00 |
| *** spilla has quit IRC | 21:01 | |
| *** gagehugo has quit IRC | 21:05 | |
| morgan | stevemar: you are so not "east coast" :P ayoung is "east coast" :P you're in that cold city in that north place | 21:06 |
| morgan | that happens to be eastern tz | 21:06 |
| morgan | :P | 21:06 |
| *** raildo has left #openstack-keystone | 21:06 | |
| *** raildo has quit IRC | 21:06 | |
| stevemar | hehe | 21:07 |
| stevemar | morgan: your description is not inaccurate :) | 21:07 |
| *** adrian_otto has quit IRC | 21:10 | |
| *** ravelar has quit IRC | 21:12 | |
| *** edmondsw has quit IRC | 21:14 | |
| *** openstackgerrit has quit IRC | 21:19 | |
| *** openstackgerrit has joined #openstack-keystone | 21:19 | |
| *** david-lyle has joined #openstack-keystone | 21:19 | |
| *** ravelar has joined #openstack-keystone | 21:24 | |
| *** hoonetorg has quit IRC | 21:26 | |
| *** hoonetorg has joined #openstack-keystone | 21:32 | |
| *** mvk has joined #openstack-keystone | 21:32 | |
| *** spzala has quit IRC | 21:41 | |
| *** dave-mccowan has quit IRC | 21:45 | |
| openstackgerrit | Annapoornima Koppad proposed openstack/keystone: Updating the document regarding LDAP options https://review.openstack.org/379334 | 21:47 |
| tqtran | hello, have a question for keystone folks | 21:49 |
| tqtran | if i know a user's name, is it possible to get that user's id without admin priveledge? | 21:50 |
| dstanek | tqtran: how would you look them up? manually scrolling through the list? | 21:52 |
| *** jorge_munoz has quit IRC | 21:54 | |
| *** browne has quit IRC | 21:55 | |
| *** spzala has joined #openstack-keystone | 21:55 | |
| *** browne has joined #openstack-keystone | 21:57 | |
| tqtran | no i meant from an api perspective | 21:59 |
| tqtran | hm actually, let me just look through the api first | 21:59 |
| *** david-lyle has quit IRC | 22:09 | |
| *** sdake has quit IRC | 22:16 | |
| *** esp has quit IRC | 22:16 | |
| *** nkinder has quit IRC | 22:20 | |
| *** rcernin has quit IRC | 22:25 | |
| *** chris_hultin is now known as chris_hultin|AWA | 22:26 | |
| *** adrian_otto has joined #openstack-keystone | 22:26 | |
| jamielennox | zigo: i assume you've gone but what options are you looking for? | 22:29 |
| *** sdake has joined #openstack-keystone | 22:33 | |
| *** nkinder has joined #openstack-keystone | 22:36 | |
| *** david-lyle has joined #openstack-keystone | 22:36 | |
| *** phalmos has quit IRC | 22:45 | |
| *** denismakogon__ has quit IRC | 22:52 | |
| *** spzala has quit IRC | 22:55 | |
| *** spzala has joined #openstack-keystone | 22:56 | |
| *** spzala has quit IRC | 23:01 | |
| *** adu has joined #openstack-keystone | 23:04 | |
| *** adrian_otto has quit IRC | 23:17 | |
| *** adrian_otto has joined #openstack-keystone | 23:19 | |
| *** markvoelker has quit IRC | 23:29 | |
| *** jorge_munoz has joined #openstack-keystone | 23:29 | |
| *** jorge_munoz has quit IRC | 23:33 | |
| *** jamielennox is now known as jamielennox|away | 23:35 | |
| *** david-lyle has quit IRC | 23:44 | |
| *** browne has quit IRC | 23:44 | |
| *** jamielennox|away is now known as jamielennox | 23:48 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Improve password history constraint tests https://review.openstack.org/378933 | 23:56 |
| *** spzala has joined #openstack-keystone | 23:57 | |
| *** lamt has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!