Thursday, 2017-03-23

openstackgerritAnthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault 4  https://review.openstack.org/44883200:07
*** masber has quit IRC00:21
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault 3  https://review.openstack.org/44882300:21
*** adrian_otto has joined #openstack-keystone00:33
*** agrebennikov has quit IRC00:42
*** zhurong has joined #openstack-keystone00:42
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault 3  https://review.openstack.org/44882300:49
*** knangia has quit IRC00:51
*** adrian_otto has quit IRC00:59
*** lifeless_ is now known as lifeless01:00
*** Aurelgadjo has quit IRC01:02
*** Aurelgadjo has joined #openstack-keystone01:02
*** liujiong has joined #openstack-keystone01:04
*** davechen has joined #openstack-keystone01:19
*** zhurong has quit IRC01:23
*** MasterOfBugs has quit IRC01:23
*** masber has joined #openstack-keystone01:29
*** dave-mccowan has quit IRC01:37
*** dave-mccowan has joined #openstack-keystone01:39
*** antwash_ has joined #openstack-keystone01:41
stevemarmost of my name in a commit message :famous:01:42
stevemarantwash: did something bump it out of the queue01:42
stevemar?01:43
*** zhurong has joined #openstack-keystone01:43
*** jplopezgu_ has joined #openstack-keystone01:45
*** edmondsw has quit IRC01:46
*** raj_sing- has joined #openstack-keystone01:46
*** guoshan has joined #openstack-keystone01:46
*** masber has quit IRC01:49
*** masber has joined #openstack-keystone01:53
antwashstevemar: I don't think so, think it's just me still learning git lol02:02
antwashstevemar: Awe, when I committed it rebased so yeah it did bump it out lol02:03
*** dave-mcc_ has joined #openstack-keystone02:08
*** dave-mccowan has quit IRC02:10
stevemarantwash: yup :)02:13
stevemarantwash: ya learn02:13
*** dave-mccowan has joined #openstack-keystone02:14
stevemarantwash: its possible to tack-on a patch, to something that is merging, but you're always at risk of bumping it out02:14
*** dave-mcc_ has quit IRC02:16
antwashstevemar: yeah learning is cool!! awe yes, I just figured out how to do it correctly after doing that newb move *palms face*02:17
stevemarantwash: i prefer when i face palms02:17
stevemargenerally that means i'm somewhere warm02:17
antwashstevemar: haha, that's a good way to look at it!02:20
stevemarantwash: you were at the ptg right?02:21
antwashstevemar: I wish, I joined the keystone team late and didn't make the cut :( -- I hear it was fun and rewarding, even though rderose didn't "party"02:22
rderoseha02:22
stevemarantwash: rderose parties the hardest, by going to bed at an appropriate time02:23
stevemarantwash: will you be at the summit/forum?02:23
*** agrebennikov_ has joined #openstack-keystone02:27
antwashrderose: haha, wasn't expecting you to be a "late night creeper" -- stevemar : most likely not, I didn't make the cut again lol02:29
*** edtubill has joined #openstack-keystone02:33
stevemarantwash: rderose is the creepiest of all creepers02:37
stevemarantwash: that stinks, go yell at someone to make it happen02:37
*** edmondsw has joined #openstack-keystone02:48
*** edmondsw has quit IRC02:53
*** masber has quit IRC02:56
*** edtubill has quit IRC02:57
rderosestevemar antwash: what! I'm creepy now :)03:03
*** nicolasbock has quit IRC03:06
openstackgerritRichard Avelar proposed openstack/keystone master: Don't persist revocation events when deleting a role  https://review.openstack.org/44442403:11
openstackgerritMerged openstack/keystone master: Policy in code  https://review.openstack.org/43560903:13
*** kbaegis has quit IRC03:13
ravelarand so it begins03:14
openstackgerritMerged openstack/keystone master: Policy in code (part 2)  https://review.openstack.org/43575103:26
openstackgerritMerged openstack/keystone master: Policy in code (part 3)  https://review.openstack.org/43575403:26
*** links has joined #openstack-keystone03:37
*** Aurelgad1o has joined #openstack-keystone03:40
*** Aurelgadjo has quit IRC03:44
stevemarravelar: dun dun DUN03:46
*** zhurong has quit IRC03:48
*** masber has joined #openstack-keystone03:48
*** dave-mccowan has quit IRC03:50
*** knangia has joined #openstack-keystone03:54
ravelarstevemar brace yourself, policy-in-code is coming03:54
*** guoshan has quit IRC04:01
*** ravelar has quit IRC04:26
*** liujiong has quit IRC04:31
*** liujiong has joined #openstack-keystone04:33
*** rderose has quit IRC04:33
*** masber has quit IRC04:40
*** MasterOfBugs has joined #openstack-keystone04:44
*** agrebennikov_ has quit IRC04:46
*** guoshan has joined #openstack-keystone05:02
*** guoshan has quit IRC05:07
*** markvoelker has quit IRC05:08
*** markvoelker has joined #openstack-keystone05:09
*** markvoelker has quit IRC05:13
*** adriant has quit IRC05:23
*** Shunli has joined #openstack-keystone05:40
*** richm has quit IRC05:43
*** zhurong has joined #openstack-keystone05:53
*** knangia has quit IRC06:01
*** guoshan has joined #openstack-keystone06:03
*** tonyb_ has joined #openstack-keystone06:06
*** guoshan has quit IRC06:07
*** markvoelker has joined #openstack-keystone06:09
*** dutsmoc is now known as comstud06:09
*** tonyb has quit IRC06:13
*** flaper87 has quit IRC06:13
*** markvoelker has quit IRC06:13
*** namnh has joined #openstack-keystone06:17
*** prashkre has joined #openstack-keystone06:18
*** guoshan has joined #openstack-keystone06:20
*** masber has joined #openstack-keystone06:22
*** edmondsw has joined #openstack-keystone06:25
*** edmondsw has quit IRC06:29
*** sjain_ has joined #openstack-keystone06:29
*** jaosorior has joined #openstack-keystone06:30
*** sjain_ has quit IRC06:34
*** masber has quit IRC06:39
*** dmellado has quit IRC07:03
*** rodrigods has quit IRC07:03
*** namnh has quit IRC07:04
*** kfox1111 has quit IRC07:04
*** kfox1111 has joined #openstack-keystone07:04
*** rodrigods has joined #openstack-keystone07:06
*** dmellado has joined #openstack-keystone07:08
*** zsli_ has joined #openstack-keystone07:10
*** Shunli has quit IRC07:12
*** tesseract has joined #openstack-keystone07:44
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** pcaruana has joined #openstack-keystone08:06
*** flaper87 has joined #openstack-keystone08:06
*** flaper87 has quit IRC08:07
*** pnavarro has joined #openstack-keystone08:07
*** flaper87 has joined #openstack-keystone08:07
*** prashkre has quit IRC08:10
*** markvoelker has joined #openstack-keystone08:10
*** edmondsw has joined #openstack-keystone08:13
*** markvoelker has quit IRC08:14
*** zsli_ has quit IRC08:16
*** edmondsw has quit IRC08:17
*** Shunli has joined #openstack-keystone08:17
*** Administrator_ has quit IRC08:20
*** Administrator_ has joined #openstack-keystone08:21
*** Shunli has quit IRC08:21
*** Shunli has joined #openstack-keystone08:21
*** guoshan has quit IRC08:21
*** Andrew_jedi has joined #openstack-keystone08:21
Andrew_jedifolks, i was wondering how can i explain the purpose of "auth_type=password" to someone ?08:22
*** guoshan has joined #openstack-keystone08:23
*** zsli_ has joined #openstack-keystone08:23
*** Shunli has quit IRC08:25
*** zsli_ has quit IRC08:25
*** Shunli has joined #openstack-keystone08:31
*** Aqsa has joined #openstack-keystone08:32
*** prashkre has joined #openstack-keystone08:47
*** henrynash has joined #openstack-keystone08:50
*** jaosorior is now known as jaosorior_brb08:55
*** ma9_ has quit IRC08:56
*** aojea has joined #openstack-keystone09:01
*** jlopezgu has quit IRC09:01
*** jplopezgu_ is now known as jlopezgu09:01
*** openstackgerrit has quit IRC09:03
*** ma9_ has joined #openstack-keystone09:04
*** ma9_ has quit IRC09:07
*** david-lyle has quit IRC09:11
*** jrist has quit IRC09:12
*** david-lyle has joined #openstack-keystone09:13
*** jrist has joined #openstack-keystone09:13
*** henrynash has quit IRC09:13
*** ma9_ has joined #openstack-keystone09:15
*** kbaegis has joined #openstack-keystone09:22
*** david-lyle_ has joined #openstack-keystone09:27
*** david-lyle has quit IRC09:27
*** ma9_ has quit IRC09:30
*** aojea_ has joined #openstack-keystone09:31
*** sharatss has joined #openstack-keystone09:32
sharatsshi all09:32
sharatssi am trying to manually install keystone on ubuntu and i am getting the following traceback09:32
*** ma9_ has joined #openstack-keystone09:33
*** openstackgerrit has joined #openstack-keystone09:33
openstackgerritDinesh Bhor proposed openstack/python-keystoneclient master: Add Response class to return request-id to caller  https://review.openstack.org/32991309:33
sharatsshttp://paste.openstack.org/show/603876/09:33
sharatsskindly help me09:33
*** aojea has quit IRC09:34
Dinesh_Bhorsharatss: Hi, by looking at error I can tell that you don't have pbr lib installed09:36
sharatssDinesh_Bhor, when i try to install its saying already the newest version09:37
*** links has quit IRC09:39
Dinesh_Bhorsharatss: may be you can try uninstall and install again09:41
sharatssDinesh_Bhor, yes.. i will try that and see09:42
*** zsli_ has joined #openstack-keystone09:42
*** zsli_ has quit IRC09:43
*** zsli_ has joined #openstack-keystone09:44
*** Shunli has quit IRC09:46
*** henrynash has joined #openstack-keystone09:53
*** links has joined #openstack-keystone09:56
*** MasterOfBugs has quit IRC09:59
*** edmondsw has joined #openstack-keystone10:01
*** edmondsw has quit IRC10:05
*** Andrew_jedi has quit IRC10:09
*** markvoelker has joined #openstack-keystone10:11
*** links has quit IRC10:11
*** kbaegis has quit IRC10:11
*** nicolasbock has joined #openstack-keystone10:12
*** richm has joined #openstack-keystone10:13
*** markvoelker has quit IRC10:16
*** kbaegis has joined #openstack-keystone10:16
*** kbaegis has left #openstack-keystone10:18
*** liujiong has quit IRC10:22
*** links has joined #openstack-keystone10:23
*** links has quit IRC10:35
*** rmascena has joined #openstack-keystone10:43
*** rmascena has quit IRC10:44
*** links has joined #openstack-keystone10:51
*** rmascena has joined #openstack-keystone10:54
*** ravelar has joined #openstack-keystone11:01
*** jaosorior_brb is now known as jaosorior11:02
*** guoshan has quit IRC11:02
*** jistr is now known as jistr|afk11:06
*** henrynash has quit IRC11:07
*** henrynash has joined #openstack-keystone11:09
andreykurilin_hi folks11:16
andreykurilin_previously, regular user was able to create ec2 credentials11:17
andreykurilin_but it became an error after merging https://github.com/openstack/keystone/commit/e2949253176b6bf7f9e3ef1ac2793e4abd6382ca11:18
andreykurilin_I'm getting "You are not authorized to perform the requested action: identity:ec2_create_credential."11:18
andreykurilin_Is it an expected behaviour?11:18
andreykurilin_breton^11:18
*** tovin07 has quit IRC11:19
*** edmondsw has joined #openstack-keystone11:19
*** Aqsa has quit IRC11:21
dstaneksharatss: Dinesh_Bhor: that's strange. it almost looks like there is no import in that file. NameError is happening instead of an ImportError.11:25
openstackgerrithenry-nash proposed openstack/keystone master: Fix order of domain create request atrributes in documentation  https://review.openstack.org/44908311:26
dstanekandreykurilin_: the rules do appear to be different... antwash ravelar?11:27
openstackgerrithenry-nash proposed openstack/keystone master: Fix order of domain create request attributes in documentation  https://review.openstack.org/44908311:28
openstackgerrithenry-nash proposed openstack/keystone master: Fix order of domain create request attributes in documentation  https://review.openstack.org/44908311:30
andreykurilin_dstanek: should I start to perform those operations from admin only? PS: rally gates are blocked now due too failed scenarios - http://logs.openstack.org/75/429175/16/check/gate-rally-dsvm-rally-ubuntu-xenial/16674c1/rally-plot/results.html.gz#/KeystoneBasic.create_and_delete_ec2credential/failures11:32
*** masber has joined #openstack-keystone11:33
*** andreykurilin_ has quit IRC11:36
*** andreykurilin has joined #openstack-keystone11:36
*** mvk has quit IRC11:36
*** jlopezgu has quit IRC11:36
*** antwash_ has quit IRC11:36
*** raj_sing- has quit IRC11:36
bretonandreykurilin: looks like a bug to me11:46
dstanekandreykurilin: my guess is that it's a bug. i think you should create one for it11:46
bretonandreykurilin: could you please file a bugreport?11:46
andreykurilinok, will do it now11:47
andreykurilinbreton dstanek - https://bugs.launchpad.net/keystone/+bug/167537711:52
openstackLaunchpad bug 1675377 in OpenStack Identity (keystone) "Lack rights for regular user: unability to create ec2 credentials" [Undecided,New]11:52
andreykurilinbreton dstanek: maybe it is time to return rally job to keystone? :)11:54
dstanekandreykurilin: what does that mean?11:57
andreykurilindstanek: long time ago keystone had non-voting rally job. Now you do not have it.12:05
*** mvk has joined #openstack-keystone12:06
dstanekandreykurilin: ah, i see. there probably was nobody driving/maintaining it. what is the benefit to having it?12:09
andreykurilindstanek: for example, we have test scenarios for ec2 credentials ;)12:10
andreykurilindstanek: the big advantage of testing with rally - it is possibility to identify concurrent issues (running simple scenario in 100 threads for example)12:12
*** markvoelker has joined #openstack-keystone12:13
*** markvoelker has quit IRC12:17
andreykurilindstanek: also, I'm planning to contact infra guys to add persistent db for rally jobs. It will allow building trends reports (I heard you have something like this). An example http://logs.openstack.org/38/432138/4/check/gate-rally-dsvm-cli/6b62a72/rally-cli-output-files/TaskTestCase/test_trends.html#/Dummy.dummy_random_action-212:17
dstanekandreykurilin: that issue is just a lack in our tempest testing....maybe. it's debatable whether or not is worth testing the default policy12:18
andreykurilindstanek: I'm not proposing to replace tempest testing with rally. I'm saying that more different testing leads to more stable and more quality product ;)12:20
*** zhurong has quit IRC12:22
dstanekandreykurilin: depends on if the tests have an onwer12:24
andreykurilindstanek: so all rally tests are maintained by rally team itself(with help of q&a in current channel), so here I do not see any overhead for you.12:26
*** jistr|afk is now known as jistr12:27
dstaneki'd have to see why it was removed, but i could imagine lots of scenarios. if keystone folks aren't engage in it then it isn't worth doing12:29
andreykurilindstanek: I can share neutron-experience of Rally. They have voting job now where they check concurrent issues. It includes configured SLAs (creation of network under load should not take longer than X seconds)..12:29
andreykurilindstanek: yes, if you do not know how rally can be helpful for you, it will not be :)12:29
*** guoshan has joined #openstack-keystone12:29
*** henrynash has quit IRC12:30
*** Andrew_jedi has joined #openstack-keystone12:43
*** catintheroof has joined #openstack-keystone12:44
*** henrynash has joined #openstack-keystone12:45
*** markvoelker has joined #openstack-keystone12:46
*** guoshan has quit IRC12:49
*** spilla has joined #openstack-keystone12:52
*** dave-mccowan has joined #openstack-keystone12:54
*** belmoreira has joined #openstack-keystone12:55
*** zsli_ has quit IRC12:56
*** rodrigods has quit IRC13:03
*** rodrigods has joined #openstack-keystone13:03
*** catintheroof has quit IRC13:03
*** guoshan has joined #openstack-keystone13:08
*** guoshan has quit IRC13:36
*** guoshan has joined #openstack-keystone13:37
lbragstadantwash ravelar johnthetubaguy looks like we'll get an oslo.policy release on Monday - https://review.openstack.org/#/c/448793/113:41
*** agrebennikov_ has joined #openstack-keystone13:45
openstackgerritDavid Stanek proposed openstack/keystone master: Set the correct in-code policy for ec2 operations  https://review.openstack.org/44916113:54
dstanekandreykurilin: andreykurilin: ravelar: lbragstad: ^13:54
dstanekantwash: ^13:54
dstanek6 minutes until meeting....coffee takes about 7...time to bend the laws of physics13:55
andreykurilinthanks!13:57
*** phalmos has joined #openstack-keystone14:05
*** ravelar has quit IRC14:05
*** lucasxu has joined #openstack-keystone14:08
*** sharatss has quit IRC14:10
*** ravelar has joined #openstack-keystone14:14
openstackgerritRichard Avelar proposed openstack/keystone master: Policy in code (part 4)  https://review.openstack.org/43575514:17
*** guoshan has quit IRC14:26
openstackgerritMerged openstack/keystone master: Don't persist revocation events when deleting a role  https://review.openstack.org/44442414:28
openstackgerritRichard Avelar proposed openstack/keystone master: Policy in code (part 5)  https://review.openstack.org/43575714:28
*** Andrew_jedi has quit IRC14:34
lbragstadsweet - i need to review those ^14:36
*** links has quit IRC14:38
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault 2  https://review.openstack.org/44760714:39
*** Andrew_jedi has joined #openstack-keystone14:41
dstanekandreykurilin: no problem14:41
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault  https://review.openstack.org/44760614:42
dstanekantwash: i think you want better commit message summaries14:43
*** phalmos_ has joined #openstack-keystone14:45
dstaneklbragstad: what do we want to do with this: https://bugs.launchpad.net/keystone/+bug/1662911 /cc stevemar14:46
openstackLaunchpad bug 1662911 in Designate "v3 API create_user does not use default_project_id" [Critical,Triaged] - Assigned to Graham Hayes (grahamhayes)14:46
lbragstaddstanek following up on it14:46
lbragstaddstanek i think you're last comment sums things up well14:48
*** phalmos has quit IRC14:48
dstanekwon't fix?14:51
antwashdstanek: something similar to this one for the other patches? https://review.openstack.org/#/c/447606/14:52
antwashdstanek: or improve them all in general?14:52
*** Andrew_jedi has quit IRC14:53
dstanekantwash: the incremental counting14:57
lbragstadantwash dstanek I'd be in favor of removing the incremental counting pattern (even though that's what nova did and what we did with policy in code) in favor of using more descriptive commit message titles15:00
antwashdstanek: awe, that was done to indicate which policy-in-code was done15:00
lbragstadan incremental number still requires me to dig through the change to figure out what I'm changing15:00
lbragstads/what I'm changing/what's being changed/15:01
*** belmorei_ has joined #openstack-keystone15:01
*** belmoreira has quit IRC15:02
ravelarlbragstad dstanek I understand having a descriptive commit body message, but how do you describe, for example, policy in code as a title to say "Policy in Code changes to default policies file1, file2, file3, file4, file5, etc"?15:03
*** adrian_otto has joined #openstack-keystone15:03
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault 4  https://review.openstack.org/44883215:04
lbragstadravelar break it into smaller changes15:05
lbragstadravelar "Move project policies into code"15:06
lbragstadravelar "Move domain policies into code"15:06
ravelarso one commit per file?15:06
lbragstadsame thing goes for moving to DocumentedRuleDefault15:06
lbragstadravelar you could also do "Move identity policies into code"15:06
lbragstadwhich could contain users and groups15:07
antwashcool, I understand, I'll get on it15:07
ravelarlbragstad yeah I like the idea of grouped ones even if its a small group since most of it is just redundant changes15:07
ravelarI was just worried initially I would spam the review list with patches lol15:08
*** prashkre has quit IRC15:08
*** Andrew_jedi has joined #openstack-keystone15:09
*** john5223 has joined #openstack-keystone15:14
*** rderose has joined #openstack-keystone15:22
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unnecessary revocation events  https://review.openstack.org/44818615:31
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unnecessary revocation events  https://review.openstack.org/44756215:31
*** nicolasbock has quit IRC15:32
*** aojea_ has quit IRC15:33
*** spzala has joined #openstack-keystone15:36
*** henrynash has joined #openstack-keystone15:37
*** jlopezgu has joined #openstack-keystone15:39
*** knangia has joined #openstack-keystone15:46
*** nicolasbock has joined #openstack-keystone15:49
*** henrynash has quit IRC15:49
*** henrynash has joined #openstack-keystone15:52
*** antwash_ has joined #openstack-keystone15:52
*** Joannah has joined #openstack-keystone15:52
*** Joannah has quit IRC15:53
*** Joannah has joined #openstack-keystone15:56
*** lamt has joined #openstack-keystone15:56
openstackgerritMerged openstack/oslo.policy master: Remove log translations  https://review.openstack.org/44786715:56
*** david-lyle_ is now known as david-lyle15:58
*** belmorei_ has quit IRC15:59
*** ravelar has quit IRC16:00
*** ravelar has joined #openstack-keystone16:00
Joannahhi rodrigods... I am Joannah and want to work on Keystone/Infra - LDAP testing job for outreachy...kindly guide me on what task I should begin working on.16:03
rodrigodshi Joannah, i guess the first steps are getting familiar with openstack development in general16:04
rodrigodshttps://docs.openstack.org/infra/manual/developers.html, https://docs.openstack.org/developer/devstack/ and https://nishayadavsite.wordpress.com/2016/06/29/how-to-set-up-work-environment-to-become-an-openstack-developer/ should cover that16:04
JoannahAlright let me setup tonite16:06
openstackgerritRichard Avelar proposed openstack/keystone master: Add federated support for get user  https://review.openstack.org/44873016:08
*** belmoreira has joined #openstack-keystone16:10
*** Andrew_jedi has quit IRC16:11
*** belmoreira has quit IRC16:13
*** spzala has quit IRC16:15
openstackgerritRichard Avelar proposed openstack/keystone master: Add federated support for get user  https://review.openstack.org/44873016:16
notmorganJoannah: o/ yay and welcome! Fantastic to have more interest in keystone and testing.16:18
notmorganJoannah: let me know if I can help at all (no guarantees, but I'll do my best)16:18
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unnecessary revocation events revoke grant  https://review.openstack.org/44819216:21
Joannahnotmorgan: I will ping whenever I need help...Just started setting up..16:25
notmorgan:)16:26
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unused revoke_by_project_role_assignment  https://review.openstack.org/44861316:27
JoannahMay be a quesion I have is..do I have to setup on a VM?..I run Ubuntu and I feel like working on my box directly..16:28
openstackgerritAnthony Washington proposed openstack/keystone master: Move endpoint policies to DocumentedRuleDefault  https://review.openstack.org/44921216:28
openstackgerritAnthony Washington proposed openstack/keystone master: Move region policies to DocumentedRuleDefault  https://review.openstack.org/44921316:28
openstackgerritAnthony Washington proposed openstack/keystone master: Move service policies to DocumentedRuleDefault  https://review.openstack.org/44921416:28
*** lucasxu has quit IRC16:32
*** Andrew_jedi has joined #openstack-keystone16:33
lbragstadravelar antwash just FYI, but we are going to need another patch to remove the existing policy.json file at some point (I had an implementation proposed at one point, but it failed some stuff)16:35
ravelarlbragstad, I got you16:35
ravelarhttps://review.openstack.org/#/c/448826/16:35
lbragstadravelar antwash that is something that will probably need to be done after parts 4 and 5 are merged16:35
ravelaryeah thats all i am waiting for16:36
ravelarlbragstad ++16:36
lbragstadravelar sweet16:36
lbragstadgrabbing lunch quick16:38
*** spzala has joined #openstack-keystone16:39
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unused revoke_by_project_role_assignment  https://review.openstack.org/44861316:41
*** aojea has joined #openstack-keystone16:41
*** Joannah has quit IRC16:44
*** adrian_otto1 has joined #openstack-keystone16:46
*** adrian_otto has quit IRC16:49
knikollao/16:53
*** henrynash has quit IRC17:01
dstanekheya knikolla17:03
*** catintheroof has joined #openstack-keystone17:07
*** nicolasbock has quit IRC17:09
*** henrynash has joined #openstack-keystone17:09
*** prashkre has joined #openstack-keystone17:12
*** henrynash has quit IRC17:12
*** nicolasbock has joined #openstack-keystone17:14
*** pcaruana has quit IRC17:14
openstackgerritMerged openstack/keystone master: Set the correct in-code policy for ec2 operations  https://review.openstack.org/44916117:16
*** henrynash has joined #openstack-keystone17:17
*** mvk has quit IRC17:17
*** gyee has joined #openstack-keystone17:20
openstackgerritAnthony Washington proposed openstack/keystone master: Move region policies to DocumentedRuleDefault  https://review.openstack.org/44921317:27
openstackgerritAnthony Washington proposed openstack/keystone master: Move endpoint policies to DocumentedRuleDefault  https://review.openstack.org/44921217:27
openstackgerritAnthony Washington proposed openstack/keystone master: Policy in code (part 4)  https://review.openstack.org/43575517:27
openstackgerritAnthony Washington proposed openstack/keystone master: Move service policies to DocumentedRuleDefault  https://review.openstack.org/44921417:27
openstackgerritAnthony Washington proposed openstack/keystone master: Move credential policies to DocumentedRuleDefault  https://review.openstack.org/44923317:27
openstackgerritAnthony Washington proposed openstack/keystone master: Move domain policies to DocumentedRuleDefault  https://review.openstack.org/44923417:27
openstackgerritAnthony Washington proposed openstack/keystone master: Move ec2 credential policies to DocumentedRuleDefault  https://review.openstack.org/44923517:27
*** jaosorior has quit IRC17:30
openstackgerritAnthony Washington proposed openstack/keystone master: Move group policies to DocumentedRuleDefault  https://review.openstack.org/44923717:31
*** lucasxu has joined #openstack-keystone17:32
*** gyee has quit IRC17:33
*** gyee has joined #openstack-keystone17:34
openstackgerritAnthony Washington proposed openstack/keystone master: Move project policies to DocumentedRuleDefault  https://review.openstack.org/44923817:34
*** henrynash has quit IRC17:35
openstackgerritAnthony Washington proposed openstack/keystone master: Move user policies to DocumentedRuleDefault  https://review.openstack.org/44924017:37
*** gyee has quit IRC17:39
openstackgerritRichard Avelar proposed openstack/keystone master: Policy in code (part 5)  https://review.openstack.org/43575717:40
openstackgerritAnthony Washington proposed openstack/keystone master: Move grant policies to DocumentedRuleDefault  https://review.openstack.org/44924417:41
openstackgerritAnthony Washington proposed openstack/keystone master: Move implied role policies to DocumentedRuleDefault  https://review.openstack.org/44924617:43
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy policies to DocumentedRuleDefault  https://review.openstack.org/44924817:46
openstackgerritAnthony Washington proposed openstack/keystone master: Move role policies to DocumentedRuleDefault  https://review.openstack.org/44925117:49
*** adrian_otto1 has quit IRC17:52
*** links has joined #openstack-keystone17:52
*** mvk has joined #openstack-keystone17:53
openstackgerritAnthony Washington proposed openstack/keystone master: Move role assignment to DocumentedRuleDefault  https://review.openstack.org/44925317:55
*** adrian_otto has joined #openstack-keystone17:57
*** links has quit IRC17:58
openstackgerritAnthony Washington proposed openstack/keystone master: Move token revocation to DocumentedRuleDefault  https://review.openstack.org/44925517:59
*** MasterOfBugs has joined #openstack-keystone18:02
*** Andrew_jedi has quit IRC18:03
*** catintheroof has quit IRC18:07
*** adrian_otto has quit IRC18:16
*** adrian_otto has joined #openstack-keystone18:16
*** nicolasbock has quit IRC18:28
openstackgerritAnthony Washington proposed openstack/keystone master: Move access token to DocumentedRuleDefault  https://review.openstack.org/44926518:34
*** nicolasbock has joined #openstack-keystone18:37
openstackgerritAnthony Washington proposed openstack/keystone master: Move consumer to DocumentedRuleDefault  https://review.openstack.org/44926918:37
*** lucasxu has quit IRC18:38
openstackgerritAnthony Washington proposed openstack/keystone master: Move endpoint group to DocumentedRuleDefault  https://review.openstack.org/44927318:40
*** henrynash has joined #openstack-keystone18:41
openstackgerritAnthony Washington proposed openstack/keystone master: Move identity provider to DocumentedRuleDefault  https://review.openstack.org/44927518:43
openstackgerritAnthony Washington proposed openstack/keystone master: Move endpoint group to DocumentedRuleDefault  https://review.openstack.org/44927318:43
openstackgerritAnthony Washington proposed openstack/keystone master: Move project endpoint to DocumentedRuleDefault  https://review.openstack.org/44927618:45
*** jlopezgu_ has joined #openstack-keystone18:48
openstackgerritAnthony Washington proposed openstack/keystone master: Move trust to DocumentedRuleDefault  https://review.openstack.org/44927818:49
openstackgerritAnthony Washington proposed openstack/keystone master: Add policy sample generation  https://review.openstack.org/44334418:50
*** henrynash has quit IRC18:57
*** mlee has joined #openstack-keystone18:58
*** Anishka0107 has joined #openstack-keystone19:01
hlo323rodrigods: hi, i'm interested in the "Keystone/Infra - LDAP testing job" project as a part of Outreachy. Are you still looking for applicants for the project? If so, what would be a good way to get started on the project?19:05
rodrigodshi hlo323, there already some applicants, but you can apply as well :)19:06
rodrigodsif you are not familiar with openstack development yet, might be useful going through  https://docs.openstack.org/infra/manual/developers.html, https://docs.openstack.org/developer/devstack/ and https://nishayadavsite.wordpress.com/2016/06/29/how-to-set-up-work-environment-to-become-an-openstack-developer/19:07
hlo323ok thanks! what would be a good way to get started?19:07
hlo323okay thanks19:08
Anishka0107Hi, I was trying to fix the issue https://bugs.launchpad.net/keystone/+bug/161449319:10
openstackLaunchpad bug 1614493 in OpenStack Identity (keystone) "openstack endpoint delete failing with error not found" [Medium,Triaged] - Assigned to Aqsa Malik (aqsamm)19:10
Anishka0107I tried to reproduce the bug but was unable to do so.19:11
dstanekAnishka0107: if you can't reproduce i would say that in the bug and mark it as incomplete19:12
Anishka0107However, I feel that the link https://github.com/openstack/keystone/blob/25a871d1446d3769ca58463350a65ed3a4d9d7d4/keystone/catalog/controllers.py#L195 should not contain legacy_endpoint_id and should instead contain id to fix the bug19:12
Anishka0107Okay, is there a way I can get help to reproduce the bug, as I am a newbie, I am unable to do so. @dstanek19:13
*** Andrew_jedi has joined #openstack-keystone19:19
*** nishaYadav has joined #openstack-keystone19:19
nishaYadavo/19:20
dstanekAnishka0107: i can possibly try later. but based on the activity in the bug i suspect that it's probably not an issue. it's also a v2 issue.19:22
dstanekAnishka0107: actually i setup a brand new devstack earlier today for another bug. jas...19:22
lbragstadAnishka0107 reading the report now19:23
*** adrian_otto has quit IRC19:24
lbragstadyeah - that kinda seems like some weird incompatibility with v2.0 and v3 endpoints19:25
lbragstadi'm curious to see if dstanek can recreate it19:25
*** adrian_otto has joined #openstack-keystone19:26
dstanekAnishka0107: lbragstad: i can, but not for all endpoints. i just started to delete them one by one until i got the error19:27
lbragstaddstanek were you deleting them using v2.0 or v3?19:28
dstaneklbragstad: good question. i'm betting v319:28
*** tesseract has quit IRC19:28
dstaneklbragstad: yes v3. that's the default in clouds.yml19:28
lbragstaddstanek if it's a relatively new devstack that's what i'd bet, too19:28
*** henrynash has joined #openstack-keystone19:29
dstanekAnishka0107: let me see if i can give you some hints.... are you using devstack?19:30
Anishka0107dtsanek: lbragstad: Could you also have a look at the comment https://bugs.launchpad.net/keystone/+bug/1614493/comments/2 on this bug which shows that the legacy_endpoint_id has not been set for the endpoints, and deletion is done based on the value of legacy_endpoint.19:31
openstackLaunchpad bug 1614493 in OpenStack Identity (keystone) "openstack endpoint delete failing with error not found" [Medium,Triaged] - Assigned to Aqsa Malik (aqsamm)19:31
Anishka0107dstanek: I have set up devstack in a VM19:31
dstanekAnishka0107: did you try to delete all of the endpoints on it?19:31
lbragstadthis might be related - https://github.com/openstack/keystone/blob/f45218a1dbf2872e6c8d2df371868d0681b9eac2/keystone/catalog/controllers.py#L193-L20319:32
dstanekAnishka0107: i'm not sure if that has anything to do with it because none of the one i was able to delete had the legacy id set19:32
dstaneklbragstad: that's what knikolla mentioned in launchpad, but i'm not sure about it19:33
Anishka0107dstanek: Should'nt the endpoints be deleted based on the value of id in https://github.com/openstack/keystone/blob/f45218a1dbf2872e6c8d2df371868d0681b9eac2/keystone/catalog/controllers.py#L195?19:34
*** adrian_otto has quit IRC19:34
*** ravelar has quit IRC19:34
dstanekhttp://paste.openstack.org/show/603978/19:34
dstanekAnishka0107: so the old "bug" was something like create an endpoint in v2 and you can't delete in v3, but i don't know that this is what that is19:35
lbragstaddstanek you don't have a b61c595a7de44e7b843d4f81041dbd3 in your paste19:36
lbragstaddstanek so wouldn't that be the intended behavior?19:36
lbragstader - you don't have an endpoint with b61c595a7de44e7b843d4f81041dbd3 as the id in your paste19:37
lbragstadbut in your paste you try and delete it on line 1319:37
lbragstador 1219:37
*** henrynash has quit IRC19:38
dstaneklbragstad: oppp....i didn't go far enough in my history19:39
dstanekevenwhen i use the last one left in the DB it fails19:39
*** henrynash has joined #openstack-keystone19:39
dstanekmaybe it's failing because it's the last one?19:39
knikollai haven't played around with that beyond what i posted in the comment19:40
lbragstaddstanek it's the last endpoint you mean?19:40
lbragstadknikolla o/19:40
dstaneklbragstad: yes. in the part of the paste i left off the first char in the id19:40
knikollai'm curious what it uses to group the endpoints if it's not legacy_endpoint_id19:40
knikollalbragstad: o/19:40
* lbragstad facepalms19:40
* dstanek smacks his forehead19:41
* lbragstad blinks19:41
dstaneki can't delete because i've deleted all of the endpoint....including the identity ones19:41
dstanek"admin endpoint for identity service in RegionOne region not found19:42
dstanek"19:42
lbragstadyeah19:42
knikollalol19:42
*** ravelar has joined #openstack-keystone19:42
dstanekso, maybe i can't reproduce afterall19:42
Anishka0107Also, could you help me in reproducing this bug on my VM, I have set up devstack but I do not know how to reach the mysql console...19:42
dstanekit could be the created in 1 version can't be deleted in the other problem19:43
dstanekAnishka0107: mysql -u root -p19:43
lbragstaddstanek yeah - that could be it,19:43
* lbragstad goes to spin up a fresh devstack19:43
knikollai have reproduced it several times. using v3 to delete the endpoints instead of v2 works.19:44
knikollaso it's a v2-v3 issue19:44
dstanekknikolla: if that's what this is then we can close the bug19:45
Anishka0107dstanek: Where should I type this command, I mean after reaching which directory?19:45
lbragstadAnishka0107 the directory shouldn't matter19:45
dstanekAnishka0107: it dosn't matter. just in a shell on the VM19:46
knikolladstanek: it's still a bug though. using v3 is a workaround19:46
dstanekknikolla: that has been talked about in the past and i believe we've decided not to fix it19:48
dstanek"don't use v2, it's going away kind of thing"19:48
lbragstadjust a reminder that we won't be having a horizon/keystone meeting today19:48
knikollaalright! makes sense.19:48
knikollai forgot we're not fixing v2 bugs, which this is.19:49
*** spzala has quit IRC19:49
lbragstadyep19:49
lbragstadfixing v2.0 bugs only incentivizes people to stay on v2.0 :)19:49
dstaneki have no problem with Anishka0107 marking this as won't fix with a comment saying to reopen if it can be reproduced in v319:50
*** Anishka0107 has quit IRC19:50
knikolla+119:50
lbragstaddstanek works for me!19:50
*** Anishka0107 has joined #openstack-keystone19:51
dstanekAnishka0107: feel free. 1 bug down and ~95 to go19:52
*** prashkre has quit IRC19:53
Anishka0107dstanek: Could you please suggest me an easy to fix bug for a newbie like me.19:54
dstanekAnishka0107: you can try - https://bugs.launchpad.net/keystone/+bugs?field.tag=low-hanging-fruit19:55
dstanekthose have been classified by someone as low hanging fruit19:55
knikollaalternatively you can go through the code and search for # FIXME comments19:56
*** henrynash has quit IRC19:56
Anishka0107knikolla: Are you talking about the code of keystone on Github?19:57
*** Andrew_jedi has quit IRC19:57
knikollaAnishka0107: yeah.19:58
dstanekknikolla: Anishka0107: some of those might lead to a spiraling effect... just know that they may not be up to take and/or can be misleading19:58
dstanekAnishka0107: you already have it on your VM. in /opt/stack/keystone19:58
knikolladstanek: true. some may also be long forgotten or outdated.19:59
dstanekknikolla: i've run across TODOs in the past that we decided not to do, but forgot/didn't know they existed in the code20:01
*** Anishka0107_ has joined #openstack-keystone20:01
knikolladstanek: should probably be removed then. spring house-cleaning.20:02
*** Anishka0107 has quit IRC20:02
dstanekknikolla: i did remove those, but i'm sure many, many others exist20:02
Anishka0107_dstanek: knikolla: I missed out on a few messages because of fluctuating internet connection, could you please send me the comment again?20:03
EmilienMlbragstad: fyi https://review.openstack.org/#/c/448326/ is just for testing20:03
EmilienMlbragstad: this repo is a set of manifests we use in CI only20:03
dstanekAnishka0107_: end result is to just use that link :-)20:03
dstanekAnishka0107_: are you going to close out that other one?20:03
knikolladstanek: my flight back from atlanta was a deep dive into TODOs and FIXMEs since I had no internet connection, or access to my dev vm.20:04
knikollaended up making around 6 removal patches from deprecations.20:04
dstanekknikolla: nice20:05
Anishka0107_dstanek: Are you asking about https://bugs.launchpad.net/keystone/+bug/161449320:05
openstackLaunchpad bug 1614493 in OpenStack Identity (keystone) "openstack endpoint delete failing with error not found" [Medium,Triaged] - Assigned to Aqsa Malik (aqsamm)20:05
dstanekAnishka0107_: yes20:05
Anishka0107_knikolla: I will surely look at the code on github and try out the FIXMEs20:06
knikollaAnishka0107_: only if you see something easy and obvious. most were confusing and not really doable.20:06
Anishka0107_dstanek: Yes I would20:06
dstanekAnishka0107_: you have the code already on your VM. have you learn how to create reviews of change you make?20:06
EmilienMlbragstad: should we (puppet) stop to test scenarios with UUID and only test fernet?20:07
EmilienM^ question for everyone here20:07
*** belmoreira has joined #openstack-keystone20:07
*** belmoreira has quit IRC20:07
Anishka0107_dstanek: No not yet.. Could you point me out on some tutorial/wiki20:08
* antwash happy to see others and not just me up chat with code :)20:08
antwash*blowing20:08
dstanekAnishka0107_: maybe this? https://wiki.openstack.org/wiki/How_To_Contribute20:09
dstanekEmilienM: is you testing specifically to test puppet?20:09
knikollahttps://docs.openstack.org/infra/manual/developers.html20:09
EmilienMdstanek: we have 4 scenarios to cover all OpenStack services that we support and 2 scenarios have fernet, 2 have UUID20:10
Anishka0107_Okay thanks a lot :)20:10
dstanekEmilienM: if you're goal is to ensure puppet deployments work then i think you guys would have to decide if you care about UUID. how many people deploy with it, do you want to support it, etc.20:12
EmilienMdstanek: my main concern is keystone removing UUID feature and it would break us20:12
dstanekEmilienM: i am normally in the "remote and don't support camp"20:13
EmilienMI think for now, we're happy to test both, if both are supported by Keystone20:13
dstanekEmilienM: it's not going to be removed until R20:13
EmilienMdstanek: ack, good to know. Thanks!20:14
dstanekEmilienM: np20:14
*** spzala has joined #openstack-keystone20:17
lbragstadEmilienM dstanek yeah - at the very least20:20
lbragstadEmilienM dstanek and if history has any say - it's going to be very widely and loudly communicated20:20
lbragstadsince it is a token provider and not some random unused thing20:20
EmilienMack20:21
dstaneklbragstad: maybe send weekly reminders to the -dev list starting tomorrow :-P20:22
dstanek"Reminder: UUID tokens will be removed in 51 weeks"20:22
lbragstaddstanek lol exactly20:23
*** spzala has quit IRC20:23
lbragstaddstanek or we can pull an antwash and do a 'while True; send_ping(); sleep 604800; done'20:24
dstaneklol20:24
dstanek"Guys. Nobody shut down the doomsday VM. It's running a very important script."20:25
antwashhahaha, I approve20:26
openstackgerritRichard Avelar proposed openstack/keystone master: Add federated support for get user  https://review.openstack.org/44873020:28
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unused revoke_by_domain_role_assignment  https://review.openstack.org/44861520:29
openstackgerritRichard Avelar proposed openstack/keystone master: Add federated support for creating a user  https://review.openstack.org/44875520:30
openstackgerritRichard Avelar proposed openstack/keystone master: Add federated support for get user  https://review.openstack.org/44873020:30
openstackgerritRichard Avelar proposed openstack/keystone master: Add federated support for get user  https://review.openstack.org/44873020:31
openstackgerritRichard Avelar proposed openstack/keystone master: Address comments from Steve Mar Policy in Code 5  https://review.openstack.org/44882620:35
*** henrynash has joined #openstack-keystone20:39
*** ravelar has quit IRC20:43
*** ravelar has joined #openstack-keystone20:44
*** Anishka0107_ has quit IRC20:45
*** adrian_otto has joined #openstack-keystone20:58
*** rmascena has quit IRC21:04
*** lamt has quit IRC21:10
*** lamt has joined #openstack-keystone21:12
*** henrynash has quit IRC21:16
*** lamt has quit IRC21:28
*** lucasxu has joined #openstack-keystone21:40
*** spilla has quit IRC21:41
*** spzala has joined #openstack-keystone21:45
*** adrian_otto has quit IRC21:47
*** nishaYadav has quit IRC21:55
openstackgerritAnthony Washington proposed openstack/keystone master: Move auth to DocumentedRuleDefault  https://review.openstack.org/44933622:02
*** pnavarro has quit IRC22:05
openstackgerritAnthony Washington proposed openstack/keystone master: Move domain config to DocumentedRuleDefault  https://review.openstack.org/44933722:14
openstackgerritAnthony Washington proposed openstack/keystone master: Move for user to DocumentedRuleDefault  https://review.openstack.org/44933822:17
*** aojea has quit IRC22:18
openstackgerritAnthony Washington proposed openstack/keystone master: Move mapping to DocumentedRuleDefault  https://review.openstack.org/44934122:21
openstackgerritMerged openstack/keystone master: Policy in code (part 4)  https://review.openstack.org/43575522:22
*** henrynash has joined #openstack-keystone22:30
*** henrynash has quit IRC22:30
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy association to DocumentedRuleDefault  https://review.openstack.org/44934422:31
*** dave-mcc_ has joined #openstack-keystone22:32
*** Aqsa has joined #openstack-keystone22:34
*** dave-mccowan has quit IRC22:36
openstackgerritAnthony Washington proposed openstack/keystone master: Move protocol to DocumentedRuleDefault  https://review.openstack.org/44934522:37
*** dave-mccowan has joined #openstack-keystone22:37
openstackgerritAnthony Washington proposed openstack/keystone master: Move revoke events to DocumentedRuleDefault  https://review.openstack.org/44934622:39
*** lucasxu has quit IRC22:39
*** dave-mcc_ has quit IRC22:40
openstackgerritMerged openstack/keystone master: Policy in code (part 5)  https://review.openstack.org/43575722:40
openstackgerritAnthony Washington proposed openstack/keystone master: Move service provider to DocumentedRuleDefault  https://review.openstack.org/44934722:45
*** ravelar1 has joined #openstack-keystone22:45
*** ravelar1 has quit IRC22:49
*** catintheroof has joined #openstack-keystone23:13
*** MasterOfBugs has quit IRC23:19
*** catintheroof has quit IRC23:20
*** catintheroof has joined #openstack-keystone23:21
*** spzala has quit IRC23:27
*** spzala has joined #openstack-keystone23:30
*** catintheroof has quit IRC23:33
*** spzala_ has joined #openstack-keystone23:34
*** spzala has quit IRC23:34
*** spzala has joined #openstack-keystone23:35
*** spzala_ has quit IRC23:38
*** catintheroof has joined #openstack-keystone23:38
*** spzala has quit IRC23:39
*** nicolasbock has quit IRC23:40
*** adrian_otto has joined #openstack-keystone23:42
*** catintheroof has quit IRC23:45
*** spzala has joined #openstack-keystone23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!