| *** guoshan has joined #openstack-keystone | 00:07 | |
| *** guoshan has quit IRC | 00:11 | |
| *** markvoelker has joined #openstack-keystone | 00:36 | |
| *** hoangcx has joined #openstack-keystone | 00:54 | |
| *** guoshan has joined #openstack-keystone | 01:07 | |
| *** guoshan has quit IRC | 01:12 | |
| *** rcernin has quit IRC | 01:17 | |
| *** guoshan has joined #openstack-keystone | 01:25 | |
| *** liujiong has joined #openstack-keystone | 01:30 | |
| *** harlowja has quit IRC | 01:39 | |
| *** stingaci has joined #openstack-keystone | 01:41 | |
| *** stingaci has quit IRC | 01:41 | |
| *** stingaci has joined #openstack-keystone | 01:42 | |
| *** stingaci has quit IRC | 01:46 | |
| *** stingaci has joined #openstack-keystone | 01:52 | |
| *** hogepodge has joined #openstack-keystone | 02:03 | |
| *** dave-mccowan has joined #openstack-keystone | 02:56 | |
| *** guoshan has quit IRC | 03:37 | |
| *** kiran-r has joined #openstack-keystone | 03:37 | |
| *** guoshan has joined #openstack-keystone | 03:38 | |
| *** links has joined #openstack-keystone | 04:09 | |
| *** chris_hultin|AWA is now known as chris_hultin | 04:20 | |
| *** david-lyle has joined #openstack-keystone | 04:23 | |
| *** nicolasbock has joined #openstack-keystone | 04:26 | |
| *** david-lyle has quit IRC | 04:28 | |
| *** chris_hultin is now known as chris_hultin|AWA | 04:30 | |
| *** nicolasbock has quit IRC | 04:34 | |
| *** udesale has joined #openstack-keystone | 04:46 | |
| *** udesale is now known as udesale_wfh | 04:47 | |
| *** nicolasbock has joined #openstack-keystone | 04:47 | |
| *** guoshan has quit IRC | 04:51 | |
| *** guoshan has joined #openstack-keystone | 04:56 | |
| *** markvoelker has quit IRC | 04:58 | |
| *** guoshan has quit IRC | 05:14 | |
| *** dave-mccowan has quit IRC | 05:35 | |
| *** r1chardj0n3s is now known as r1chardj0n3s_afk | 05:54 | |
| *** guoshan has joined #openstack-keystone | 05:58 | |
| *** stingaci has quit IRC | 06:06 | |
| *** links has quit IRC | 06:32 | |
| *** links has joined #openstack-keystone | 06:44 | |
| *** guoshan has quit IRC | 06:52 | |
| *** markvoelker has joined #openstack-keystone | 06:58 | |
| *** markvoelker has quit IRC | 07:03 | |
| *** rcernin has joined #openstack-keystone | 07:05 | |
| *** tesseract has joined #openstack-keystone | 07:11 | |
| *** links has quit IRC | 07:28 | |
| *** kiran-r has quit IRC | 07:43 | |
| *** guoshan has joined #openstack-keystone | 07:47 | |
| *** links has joined #openstack-keystone | 07:52 | |
| *** hoangcx has quit IRC | 08:00 | |
| *** asettle has joined #openstack-keystone | 08:08 | |
| *** asettle has quit IRC | 08:12 | |
| *** guoshan has quit IRC | 08:30 | |
| *** guoshan has joined #openstack-keystone | 08:43 | |
| *** pcaruana has joined #openstack-keystone | 08:48 | |
| *** udesale_wfh has quit IRC | 08:50 | |
| *** liujiong has quit IRC | 08:51 | |
| *** liujiong has joined #openstack-keystone | 08:53 | |
| *** markvoelker has joined #openstack-keystone | 08:59 | |
| *** zzzeek has quit IRC | 09:00 | |
| *** zzzeek has joined #openstack-keystone | 09:01 | |
| *** udesale_wfh has joined #openstack-keystone | 09:02 | |
| *** markvoelker has quit IRC | 09:04 | |
| *** david-lyle has joined #openstack-keystone | 09:27 | |
| *** david-lyle has quit IRC | 09:31 | |
| *** liujiong has quit IRC | 09:33 | |
| *** chrome0_ has joined #openstack-keystone | 09:53 | |
| *** chrome0_ has quit IRC | 09:54 | |
| openstackgerrit | Kevin Benton proposed openstack/keystonemiddleware: Revert "Pass ?allow_expired" https://review.openstack.org/415848 | 09:56 |
|---|---|---|
| *** asettle has joined #openstack-keystone | 09:59 | |
| breton | kevinbenton: where can i have a look at the warning in the logs? | 10:00 |
| kevinbenton | breton: http://logs.openstack.org/00/382100/9/check/gate-tempest-dsvm-neutron-src-keystonemiddleware-ubuntu-xenial/bedb6fe/logs/screen-q-svc.txt.gz?level=TRACE | 10:00 |
| kevinbenton | breton: i traced the request IDs and they are generated when nova communicates with neutron | 10:01 |
| kevinbenton | breton: so the problem must be how nova is using credentials to communicate with neutron, but i'm not sure what the way to fix it is | 10:01 |
| kevinbenton | breton: if it depends on this blueprint that's still in process, it would be great if we could only warn once. because right now a warning on every API call is making logs really difficult to deal with looking for issues | 10:02 |
| *** guoshan has quit IRC | 10:12 | |
| breton | i wonder why neutron sends service token instead of a usual token | 10:27 |
| *** david-lyle has joined #openstack-keystone | 10:27 | |
| kevinbenton | breton: isn't the issue that it's using a usual token when it should be using a service token? | 10:31 |
| kevinbenton | breton: (also, the issue is on the nova side since the request is generated from there) | 10:31 |
| *** david-lyle has quit IRC | 10:32 | |
| openstackgerrit | Kevin Benton proposed openstack/keystonemiddleware: Limit deprecated token message to single warning https://review.openstack.org/415856 | 10:33 |
| breton | kevinbenton: either this or service token should not be used at all | 10:34 |
| kevinbenton | breton: the interaction between nova and neutron is tricky because nova needs to do some admin-only things (binding ports to hosts) and then things using the users privilege level (listing visible networks, floating ips, etc) | 10:36 |
| kevinbenton | breton: so i think in these cases that a warning is emitted, it's passing the user token through for the latter non-admin things | 10:36 |
| breton | kevinbenton: service token have a specific use case, i don't think it's the one here. But i am checking now. | 10:37 |
| kevinbenton | breton: but i know johnthetubaguy was working on this interaction over the last cycle, so that may not be correct anymore | 10:37 |
| kevinbenton | breton: actually, the service token use case is what we need for neutron as well IIRC | 10:38 |
| kevinbenton | breton: if it will allow us to still use user credentials, but then distinguish that the request came through nova so allow port binding as well | 10:39 |
| breton | kevinbenton: it is, but is it already implemeted? My grep can't find any mentions of this in neutron or nova | 10:44 |
| kevinbenton | breton: no, it's not implemented yet. it was just something we discussed at the last mid-cycle | 10:45 |
| kevinbenton | breton: IIRC we were waiting on keystone at the time | 10:45 |
| *** pcaruana has quit IRC | 10:58 | |
| *** markvoelker has joined #openstack-keystone | 11:00 | |
| breton | i don't understand what it has to do with service token. I can't find where it is set. | 11:03 |
| *** markvoelker has quit IRC | 11:05 | |
| breton | ok, i figured it out. | 11:09 |
| breton | it happens because keystonemiddleware tells nova to use UserAuthPlugin for interaction with nova. UserAuthPlugin includes novas token as service token | 11:11 |
| breton | *for interaction with neutron | 11:12 |
| breton | i'll go have lunch and then think what to do about it | 11:13 |
| *** nicolasbock has quit IRC | 11:17 | |
| *** sheel has quit IRC | 12:47 | |
| *** AlexeyAbashkin has quit IRC | 12:57 | |
| *** markvoelker has joined #openstack-keystone | 13:01 | |
| *** sakthi has quit IRC | 13:02 | |
| *** markvoelker has quit IRC | 13:06 | |
| *** guoshan has joined #openstack-keystone | 13:09 | |
| *** links has quit IRC | 13:24 | |
| breton | i think we should just remove this warning at all. | 13:29 |
| breton | or make it a debugging message | 13:30 |
| *** guoshan has quit IRC | 13:42 | |
| *** guoshan has joined #openstack-keystone | 13:43 | |
| *** Dinesh_Bhor has quit IRC | 13:49 | |
| *** catintheroof has joined #openstack-keystone | 14:03 | |
| *** catintheroof has quit IRC | 14:08 | |
| *** catintheroof has joined #openstack-keystone | 14:08 | |
| *** udesale_wfh has quit IRC | 14:28 | |
| *** david-lyle has joined #openstack-keystone | 14:30 | |
| *** david-lyle has quit IRC | 14:35 | |
| lbragstad | o/ | 14:51 |
| *** nklenke has quit IRC | 14:52 | |
| *** nklenke has joined #openstack-keystone | 15:00 | |
| *** markvoelker has joined #openstack-keystone | 15:02 | |
| *** markvoelker has quit IRC | 15:06 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystonemiddleware: Do not warn about service token without correct roles https://review.openstack.org/415886 | 15:08 |
| breton | lbragstad: o/ | 15:08 |
| lbragstad | breton good evening! | 15:09 |
| *** asettle has quit IRC | 15:21 | |
| *** catintheroof has quit IRC | 15:29 | |
| *** guoshan has quit IRC | 15:57 | |
| *** rcernin has quit IRC | 16:01 | |
| *** markvoelker has joined #openstack-keystone | 16:03 | |
| *** tesseract has quit IRC | 16:05 | |
| *** markvoelker has quit IRC | 16:07 | |
| *** harlowja has joined #openstack-keystone | 16:31 | |
| *** david-lyle has joined #openstack-keystone | 16:32 | |
| *** david-lyle has quit IRC | 16:37 | |
| *** dave-mccowan has joined #openstack-keystone | 16:38 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Implement shadow mapping https://review.openstack.org/415895 | 16:51 |
| *** dave-mccowan has quit IRC | 16:54 | |
| *** itisha has joined #openstack-keystone | 16:59 | |
| *** markvoelker has joined #openstack-keystone | 17:03 | |
| *** markvoelker has quit IRC | 17:08 | |
| *** catintheroof has joined #openstack-keystone | 17:44 | |
| *** dave-mccowan has joined #openstack-keystone | 17:49 | |
| *** catinthe_ has joined #openstack-keystone | 17:49 | |
| *** catintheroof has quit IRC | 17:50 | |
| *** dave-mcc_ has joined #openstack-keystone | 17:51 | |
| *** dave-mccowan has quit IRC | 17:54 | |
| *** harlowja has quit IRC | 17:56 | |
| *** chris_hultin|AWA is now known as chris_hultin | 17:56 | |
| *** markvoelker has joined #openstack-keystone | 18:04 | |
| *** chris_hultin is now known as chris_hultin|AWA | 18:05 | |
| *** dave-mcc_ has quit IRC | 18:06 | |
| *** markvoelker has quit IRC | 18:09 | |
| *** catinthe_ has quit IRC | 18:15 | |
| *** asettle has joined #openstack-keystone | 18:24 | |
| *** asettle has quit IRC | 18:28 | |
| *** chris_hultin|AWA is now known as chris_hultin | 18:30 | |
| *** david-lyle has joined #openstack-keystone | 18:33 | |
| *** pece has joined #openstack-keystone | 18:35 | |
| *** david-lyle has quit IRC | 18:38 | |
| *** chris_hultin is now known as chris_hultin|AWA | 18:43 | |
| *** pece has quit IRC | 18:59 | |
| *** markvoelker has joined #openstack-keystone | 19:05 | |
| *** markvoelker has quit IRC | 19:09 | |
| *** itisha has quit IRC | 19:12 | |
| *** catintheroof has joined #openstack-keystone | 19:21 | |
| *** jose-phillips has joined #openstack-keystone | 19:22 | |
| *** d0ugal has quit IRC | 19:32 | |
| *** catintheroof has quit IRC | 19:52 | |
| *** dave-mccowan has joined #openstack-keystone | 20:04 | |
| *** markvoelker has joined #openstack-keystone | 20:06 | |
| *** markvoelker has quit IRC | 20:10 | |
| *** d0ugal has joined #openstack-keystone | 20:11 | |
| *** dave-mccowan has quit IRC | 20:24 | |
| openstackgerrit | Merged openstack/keystone: [api] Inconsistency between v3 API and keystone token timestamps https://review.openstack.org/413878 | 20:55 |
| *** nicolasbock has joined #openstack-keystone | 20:58 | |
| *** chris_hultin|AWA is now known as chris_hultin | 21:00 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Federated authentication via ECP functional tests https://review.openstack.org/324769 | 21:03 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: WIP: Cascade delete federated_user fk https://review.openstack.org/415906 | 21:03 |
| *** markvoelker has joined #openstack-keystone | 21:06 | |
| *** harlowja has joined #openstack-keystone | 21:07 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: WIP: Cascade delete federated_user fk https://review.openstack.org/415906 | 21:08 |
| *** markvoelker has quit IRC | 21:11 | |
| *** harlowja has quit IRC | 21:15 | |
| *** chris_hultin is now known as chris_hultin|AWA | 21:15 | |
| *** david-lyle has joined #openstack-keystone | 21:36 | |
| *** david-lyle has quit IRC | 21:40 | |
| *** jose-phillips has quit IRC | 21:43 | |
| *** jose-phillips has joined #openstack-keystone | 21:54 | |
| *** jose-phillips has quit IRC | 21:58 | |
| *** jose-phillips has joined #openstack-keystone | 22:05 | |
| *** d0ugal has quit IRC | 22:07 | |
| *** markvoelker has joined #openstack-keystone | 22:07 | |
| *** markvoelker has quit IRC | 22:12 | |
| *** jose-phillips has quit IRC | 22:17 | |
| *** nicolasbock has quit IRC | 22:25 | |
| *** catintheroof has joined #openstack-keystone | 23:07 | |
| *** markvoelker has joined #openstack-keystone | 23:08 | |
| *** markvoelker has quit IRC | 23:13 | |
| *** david-lyle has joined #openstack-keystone | 23:37 | |
| *** david-lyle has quit IRC | 23:42 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!