Wednesday, 2017-03-29

*** markvoelker has joined #openstack-keystone00:01
*** jlopezgu_ has quit IRC00:01
*** markvoelker has quit IRC00:05
*** elle has joined #openstack-keystone00:06
*** elle is now known as Guest4125400:06
openstackgerritDavid Stanek proposed openstack/keystone master: Replace wip with skip  https://review.openstack.org/45099200:06
openstackgerritDavid Stanek proposed openstack/keystone master: Remove decorator for asserting validation errors  https://review.openstack.org/45098500:06
openstackgerritDavid Stanek proposed openstack/keystone master: Remove conflict guards in load_fixtures  https://review.openstack.org/45098700:06
openstackgerritDavid Stanek proposed openstack/keystone master: Remove orphaned _create_context test helper  https://review.openstack.org/45098600:06
openstackgerritDavid Stanek proposed openstack/keystone master: Reduce fixture setup in test_backend_ldap  https://review.openstack.org/45098900:06
openstackgerritDavid Stanek proposed openstack/keystone master: Consolidate and cleanup test_backend_ldap setup  https://review.openstack.org/45098800:06
openstackgerritDavid Stanek proposed openstack/keystone master: Removed domain conflict guard in load_fixtures  https://review.openstack.org/45099100:06
openstackgerritDavid Stanek proposed openstack/keystone master: Remove create_container_group from tests  https://review.openstack.org/45099000:06
Guest41254Hello Identity/Keystone: I'm a potential Outreachy intern00:07
ayoungknikolla, answered your email, sorry took so long00:08
ayoungwhere is the  final policy-in-code patch in the process?00:08
*** pnavarro has quit IRC00:11
*** thorst has quit IRC00:12
*** Guest41254 has quit IRC00:14
openstackgerritDavid Stanek proposed openstack/keystone master: Removed the deprecated pki_setup command  https://review.openstack.org/43093800:15
*** dave-mccowan has joined #openstack-keystone00:21
dstanekayoung: i think merged00:22
ayoungdstanek, ah, good00:22
ayoungpki setup is still in the codebase?00:22
ayoungwow00:22
dstaneklol, yep00:22
*** nkinder has quit IRC00:24
ayoungdstanek, that whole stack looks good.  Thanks for cleaning up my messes.00:28
dstanekayoung: lol, the ldap tests?00:29
ayoungdstanek, some cruft I wrote in there before you were on the project00:30
ayoungthat groups container thing?00:30
ayoungthat was from before the identity/assignment split00:30
dstanekwe have lots of cruft :-)00:30
dstaneki'm not a software engineer, i'm a code janitor00:30
ayoungNow we know who custodiates the custodians!00:32
ayoungdstanek, consider my +2s there sticky.  They are all good cleanup patches00:32
*** hoonetorg has quit IRC00:32
dstanekayoung: muchas gracias00:32
ayoungDe Nada00:32
dstanekayoung: how's everything going? haven't seen you for a while00:33
ayoungdstanek, we got live migration working.00:33
dstanekawesome00:33
ayoungNow I'm doing code clean up, and trying to learn go and the kubernetes coding style.00:33
dstanekhas that been your focus?00:33
ayoungyeah00:33
ayoungwe're doing a Kubernetes based VM management API.00:34
*** catintheroof has quit IRC00:34
dstaneki've been playing with go a bit. pretty cool language00:35
ayoungIts github based development, with some changes of mindsets when dealing with tooling00:35
ayoungGo is OK.  I've done enough Java over my life to appreciate where they streamlined something basic things00:35
ayoungIts kindof like typesafe Python.  If you squint00:36
ayoungI do like the compiler support.  Automated refactroing could be better.00:37
ayoungdstanek, you coming to Boston?00:37
dstanekayoung: that's the plan so far00:39
ayoungExcellent.00:39
*** elleobot has joined #openstack-keystone00:41
openstackgerritMerged openstack/keystone master: Remove orphaned AuthTestMixin from test_v3  https://review.openstack.org/45098400:45
*** hoonetorg has joined #openstack-keystone00:45
*** masterjcool has quit IRC00:59
*** nkinder has joined #openstack-keystone00:59
*** namnh has joined #openstack-keystone00:59
*** jamielennox is now known as jamielennox|away01:02
*** thorst has joined #openstack-keystone01:08
*** masterjcool has joined #openstack-keystone01:11
*** liujiong has joined #openstack-keystone01:11
*** thorst has quit IRC01:12
*** jamielennox|away is now known as jamielennox01:16
*** adrian_otto has quit IRC01:18
*** thorst has joined #openstack-keystone01:19
*** david-lyle has joined #openstack-keystone01:24
*** nkinder has quit IRC01:25
*** thorst has quit IRC01:29
*** hoonetorg has quit IRC01:42
*** agrebennikov has quit IRC01:42
dstanekwoot, almost all of those patches are passing...only one not just needed a recheck01:44
*** hoonetorg has joined #openstack-keystone01:54
*** pramodrj07 has quit IRC01:58
*** MasterOfBugs has quit IRC01:58
*** zhurong has joined #openstack-keystone02:04
*** adrian_otto has joined #openstack-keystone02:21
*** dikonoo has joined #openstack-keystone02:26
*** adrian_otto has quit IRC02:27
*** thorst has joined #openstack-keystone02:30
*** david-lyle has quit IRC02:36
openstackgerritOpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements  https://review.openstack.org/45101402:39
*** agrebennikov has joined #openstack-keystone02:42
*** thorst has quit IRC02:49
*** aojea has joined #openstack-keystone02:49
*** rderose has quit IRC02:53
*** aojea has quit IRC02:54
*** dave-mccowan has quit IRC03:03
*** dikonoo has quit IRC03:04
*** prashkre has joined #openstack-keystone03:07
*** links has joined #openstack-keystone03:12
*** raginbajin has quit IRC03:14
*** nicolasbock has quit IRC03:15
*** raginbajin has joined #openstack-keystone03:21
*** elleobot has quit IRC03:21
*** agrebennikov has quit IRC03:23
*** erlon has quit IRC03:35
*** david-lyle has joined #openstack-keystone03:37
*** prashkre has quit IRC03:39
*** thorst has joined #openstack-keystone03:46
*** thorst has quit IRC03:51
*** Dinesh_Bhor has joined #openstack-keystone04:00
*** thorst has joined #openstack-keystone04:47
*** thorst has quit IRC04:52
*** obre_ has joined #openstack-keystone05:06
*** vryzhenkin has joined #openstack-keystone05:07
*** obre has quit IRC05:07
*** freerunner has quit IRC05:07
*** vryzhenkin is now known as freerunner05:07
*** hlo323 has quit IRC05:09
*** adrian_otto has joined #openstack-keystone05:27
*** oomichi has quit IRC05:29
*** ayoung has quit IRC05:29
*** edmondsw has joined #openstack-keystone05:29
*** oomichi has joined #openstack-keystone05:33
*** edmondsw has quit IRC05:34
*** rcernin has joined #openstack-keystone05:39
*** richm has quit IRC05:44
*** thorst has joined #openstack-keystone05:48
*** thorst has quit IRC05:52
*** zhurong has quit IRC05:54
*** luzC has quit IRC05:55
*** luzC has joined #openstack-keystone05:56
*** ayoung has joined #openstack-keystone05:58
*** jamielennox is now known as jamielennox|away06:10
*** jaosorior has joined #openstack-keystone06:14
*** pcaruana has joined #openstack-keystone06:24
*** tovin07 has joined #openstack-keystone06:25
*** jamielennox|away is now known as jamielennox06:25
*** ayoung has quit IRC06:38
*** thorst has joined #openstack-keystone06:49
*** jamielennox is now known as jamielennox|away06:50
*** ayoung has joined #openstack-keystone06:51
*** thorst has quit IRC06:53
*** jamielennox|away is now known as jamielennox06:57
*** alex_xu has quit IRC07:13
*** tesseract has joined #openstack-keystone07:14
*** alex_xu has joined #openstack-keystone07:16
*** aojea has joined #openstack-keystone07:20
*** Aqsa has joined #openstack-keystone07:24
*** oomichi has quit IRC07:29
*** oomichi has joined #openstack-keystone07:33
*** zhurong has joined #openstack-keystone07:34
*** aojea_ has joined #openstack-keystone07:41
*** aojea has quit IRC07:44
*** sileht has quit IRC07:45
*** tovin07 has quit IRC07:45
*** thorst has joined #openstack-keystone07:49
*** zzzeek has quit IRC08:00
*** pnavarro has joined #openstack-keystone08:02
*** zzzeek has joined #openstack-keystone08:03
*** thorst has quit IRC08:08
*** adrian_otto has quit IRC08:16
*** jamielennox is now known as jamielennox|away08:17
Dinesh_Bhorlbragstad, dstanek: Hi, I have added some tests to request-id patch: https://review.openstack.org/#/c/329913/. Could you please take a look at it and give your valuable suggestions?08:48
*** prashkre has joined #openstack-keystone08:59
*** thorst has joined #openstack-keystone09:05
*** thorst has quit IRC09:09
*** henrynash has quit IRC09:24
*** prashkre_ has joined #openstack-keystone09:37
*** prashkre has quit IRC09:37
*** edmondsw has joined #openstack-keystone09:43
*** edmondsw has quit IRC09:48
*** mvk has quit IRC10:00
*** thorst has joined #openstack-keystone10:05
*** thorst has quit IRC10:10
*** richm has joined #openstack-keystone10:14
*** liujiong has quit IRC10:19
*** henrynash has joined #openstack-keystone10:27
*** oomichi has quit IRC10:29
*** mvk has joined #openstack-keystone10:30
*** nicolasbock has joined #openstack-keystone10:31
*** oomichi has joined #openstack-keystone10:33
*** knangia has quit IRC10:41
*** raildo has joined #openstack-keystone11:01
*** thorst has joined #openstack-keystone11:06
*** thorst has quit IRC11:11
bretonwhy can't we use regex with whitelist and blacklist conditions in mapping?11:32
bretonwas it a choice or just nobody implemented it?11:32
*** zhurong has quit IRC11:34
*** henrynash has quit IRC11:37
*** spotz is now known as spotz_zzz11:40
*** henrynash has joined #openstack-keystone11:43
*** henrynash has quit IRC11:48
bretonok, nevermind, i just used field in "type" twice11:49
bretonhttp://paste.openstack.org/show/604647/ like this11:49
*** thorst has joined #openstack-keystone11:54
*** spotz_zzz is now known as spotz11:58
*** chlong has quit IRC12:05
gagehugoo/12:11
*** henrynash has joined #openstack-keystone12:13
*** bjornar_ has joined #openstack-keystone12:20
*** edmondsw has joined #openstack-keystone12:20
*** henrynash has quit IRC12:24
*** mvk has quit IRC12:25
*** henrynash has joined #openstack-keystone12:26
*** henrynash has quit IRC12:26
*** bauruine_ has quit IRC12:27
*** prashkre has joined #openstack-keystone12:28
*** namnh has quit IRC12:29
*** prashkre_ has quit IRC12:30
*** bauruine has joined #openstack-keystone12:32
*** mvk has joined #openstack-keystone12:38
*** dave-mccowan has joined #openstack-keystone12:46
*** prashkre has quit IRC12:47
*** lamt has joined #openstack-keystone12:48
*** bauruine has quit IRC12:49
*** agrebennikov has joined #openstack-keystone12:50
*** bauruine has joined #openstack-keystone12:51
*** lamt has quit IRC12:52
*** prashkre has joined #openstack-keystone12:59
*** lamt has joined #openstack-keystone13:00
*** spilla has joined #openstack-keystone13:05
dstanekbreton: we chose to leave it out. we thought that it was too complicated for some reason13:09
breton.цшт 2313:10
breton:(13:10
dstaneki don't remember why. i just remember the discussion13:12
bretonok. Anyway, paste above worked for me.13:14
*** lamt has quit IRC13:17
*** ravelar has joined #openstack-keystone13:18
*** sileht has joined #openstack-keystone13:19
*** links has quit IRC13:20
*** erlon has joined #openstack-keystone13:20
openstackgerritRichard Avelar proposed openstack/keystone master: Validate rolling upgrade is run in order  https://review.openstack.org/43744113:21
openstackgerritRichard Avelar proposed openstack/keystone master: Validate rolling upgrade is run in order  https://review.openstack.org/43744113:21
*** zhurong has joined #openstack-keystone13:23
*** knangia has joined #openstack-keystone13:25
*** catintheroof has joined #openstack-keystone13:30
openstackgerritRichard Avelar proposed openstack/keystone master: Remove policy file from source and refactor tests  https://review.openstack.org/44967513:30
openstackgerritOpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements  https://review.openstack.org/45101413:33
dolphmdstanek: do you remember the fix for testr reporting double the number of actual test failures?13:36
dolphmif not just double the number of actual tests13:37
*** jaosorior has quit IRC13:38
*** chlong has joined #openstack-keystone13:40
*** catintheroof has quit IRC13:41
*** jaosorior has joined #openstack-keystone13:43
dstanekdolphm: it was an upstream but that i thought they closed. are you still seeing it?13:43
dolphmdstanek: yes, in oslo.config's py27 tests13:44
dstaneki actually think the counts are off. i was trying to make sure that my changes didn't stop some of the tests from running since i changed the inheritence tree and they were off13:44
dstaneki added 1 tests, but when i compared the list of tests printed they were exactly the same13:45
dolphmdstanek: upstream in testr i assume, right?13:46
dstanekdolphm: yes13:46
dstanekactually it might have been a bug that i reported13:46
*** jlopezgu_ has joined #openstack-keystone13:46
*** Aqsam has joined #openstack-keystone13:49
*** Aqsa has quit IRC13:52
*** jrist has quit IRC13:55
*** Aqsam has quit IRC13:55
*** jrist has joined #openstack-keystone13:57
*** ayoung has quit IRC13:58
*** nicolasbock has quit IRC14:05
*** sjain has joined #openstack-keystone14:06
*** zhurong_ has joined #openstack-keystone14:07
*** lucasxu has joined #openstack-keystone14:07
*** zhurong has quit IRC14:07
*** pnavarro has quit IRC14:11
*** zhurong_ has quit IRC14:18
*** nkinder has joined #openstack-keystone14:19
*** Aqsa has joined #openstack-keystone14:27
*** adrian_otto has joined #openstack-keystone14:35
*** rderose has joined #openstack-keystone14:39
openstackgerritRichard Avelar proposed openstack/keystone master: Remove policy file from source and refactor tests  https://review.openstack.org/44967514:43
*** ma9_ has joined #openstack-keystone14:45
*** lamt has joined #openstack-keystone14:46
*** pnavarro has joined #openstack-keystone14:59
*** jistr is now known as jistr|mtg15:01
*** ayoung has joined #openstack-keystone15:02
*** rcernin has quit IRC15:05
*** henrynash has joined #openstack-keystone15:12
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unused revocation check in revoke_models  https://review.openstack.org/45145215:12
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unused revocation check in revoke_models  https://review.openstack.org/45145215:19
stevemarsomeone needs to punt this through: https://review.openstack.org/#/c/447562/ !!15:22
stevemarand this https://review.openstack.org/#/c/448186/ !!15:22
lbragstadstevemar i can review the second one for sure15:23
stevemarlbragstad: <315:23
stevemarthanks rodrigods ! :)15:23
rodrigods:)15:24
rodrigodsleft the second for lbragstad15:24
openstackgerritRichard Avelar proposed openstack/keystone master: Remove unused revocation check in revoke_models  https://review.openstack.org/45145215:27
*** sjain has quit IRC15:27
openstackgerritRichard Avelar proposed openstack/keystone master: Validate rolling upgrade is run in order  https://review.openstack.org/43744115:29
*** ma9_ has quit IRC15:29
*** adrian_otto has quit IRC15:30
ravelarstevemar lbragstad rodrigods: thanks all!15:31
*** alex_xu has quit IRC15:33
*** davechen has quit IRC15:34
*** alex_xu has joined #openstack-keystone15:35
*** ma9_ has joined #openstack-keystone15:40
*** ma9_ has left #openstack-keystone15:44
openstackgerritRichard Avelar proposed openstack/keystone master: Remove redundant code in test_revoke  https://review.openstack.org/45146315:47
*** davechen has joined #openstack-keystone15:47
openstackgerritAnthony Washington proposed openstack/keystone master: Add policy sample generation  https://review.openstack.org/44334415:48
lbragstadravelar antwash if i'm looking through all the reviews correctly - we only need https://review.openstack.org/#/c/449675/ and https://review.openstack.org/#/c/448826/ to merge for policy-in-code to be fully implemented?15:52
antwashlbragstad: yeah and plus the patch I just rebased then it'll done :)15:53
lbragstadantwash aha yep15:54
lbragstadwe also have this - https://review.openstack.org/#/c/450818/15:54
*** aojea_ has quit IRC15:56
*** pnavarro has quit IRC15:57
*** tesseract has quit IRC15:58
knikollao/15:59
*** bjornar_ has quit IRC16:01
knikollalbragstad: is there a policy meeting now?16:02
notmorganknikolla: i thought i saw an email saying cancelled16:02
lbragstadknikolla we didn't have anything proposed so i cancelled16:02
*** adrian_otto has joined #openstack-keystone16:02
lbragstadknikolla figured we could use the time to review policy patch instead16:02
knikollalbragstad notmorgan: alright, didn't check my mail :)16:03
lbragstadknikolla http://lists.openstack.org/pipermail/openstack-dev/2017-March/114705.html16:03
knikollalbragstad: thanks, just opened my mail client for the first time today. I'll help with reviewing.16:04
lbragstadknikolla that'd be much appreciated, thanks!16:04
*** lamt has quit IRC16:10
*** pnavarro has joined #openstack-keystone16:12
*** d0ugal has quit IRC16:17
lbragstadravelar one pep8 thing here https://review.openstack.org/#/c/449675/9 otherwise it should pass16:19
lbragstadravelar aha - i see you're already on it, never mind16:19
lbragstad:)16:19
knikollareviewing the policy docs patches feels like gaming stackalytics16:30
openstackgerritAnthony Washington proposed openstack/keystone master: Move service provider to DocumentedRuleDefault  https://review.openstack.org/44934716:30
ravelarlbragstad lol i was in a hurry to throw a commit up and went to the gym. little pep8 tried to pull a fast one on me while I was afk16:32
antwashknikolla: originally it was just 5 patches, but it was recommended to separate them in single patches for better reviewing16:33
ravelarknikolla lol!16:33
lbragstadyeah - we opted to have a bunch of smaller reviews in an effort to get them gating in parallel as well as easier reviewability16:33
knikollait definitely resulted in easier reviewability.16:34
*** Aqsa has quit IRC16:35
openstackgerritRichard Avelar proposed openstack/keystone master: Remove policy file from source and refactor tests  https://review.openstack.org/44967516:35
*** d0ugal has joined #openstack-keystone16:38
*** d0ugal has quit IRC16:43
*** pnavarro has quit IRC16:45
*** jistr|mtg is now known as jistr16:47
openstackgerritAnthony Washington proposed openstack/keystone master: Move protocol to DocumentedRuleDefault  https://review.openstack.org/44934516:55
*** ravelar has quit IRC16:55
openstackgerritMerged openstack/keystone master: Remove unnecessary revocation events  https://review.openstack.org/44756217:01
openstackgerritMerged openstack/keystone master: Remove unnecessary revocation events  https://review.openstack.org/44818617:02
openstackgerritMerged openstack/keystone master: Remove unnecessary revocation events revoke grant  https://review.openstack.org/44819217:02
openstackgerritMerged openstack/keystone master: Remove decorator for asserting validation errors  https://review.openstack.org/45098517:02
openstackgerritMerged openstack/keystone master: Remove orphaned _create_context test helper  https://review.openstack.org/45098617:03
openstackgerritMerged openstack/keystone master: Remove conflict guards in load_fixtures  https://review.openstack.org/45098717:03
openstackgerritMerged openstack/keystone master: Consolidate and cleanup test_backend_ldap setup  https://review.openstack.org/45098817:03
openstackgerritMerged openstack/keystone master: Reduce fixture setup in test_backend_ldap  https://review.openstack.org/45098917:03
*** chlong has quit IRC17:03
dstanekthe merge fairy strikes again17:04
stevemarnoice17:05
*** links has joined #openstack-keystone17:07
dstanekgrrrrr...one of my changed failed to merge17:07
*** ravelar has joined #openstack-keystone17:08
samueldmqhi keystone17:10
samueldmqrs17:10
samueldmqstevemar o/17:10
stevemarsamueldmq: howdy sir17:11
*** links has quit IRC17:19
*** MasterOfBugs has joined #openstack-keystone17:29
openstackgerritRichard Avelar proposed openstack/keystone master: Remove redundant code in test_revoke  https://review.openstack.org/45146317:29
*** bjornar_ has joined #openstack-keystone17:32
*** mvk has quit IRC17:41
*** pcaruana has quit IRC17:52
*** chlong has joined #openstack-keystone17:58
*** chlong has quit IRC18:07
*** alex_xu has quit IRC18:07
*** bjornar_ has quit IRC18:08
*** alex_xu has joined #openstack-keystone18:08
*** lamt has joined #openstack-keystone18:12
dstaneksamueldmq: !18:12
*** mvk has joined #openstack-keystone18:13
*** chlong has joined #openstack-keystone18:21
*** aojea has joined #openstack-keystone18:24
lbragstadantwash just a heads up - but we're going to hit some py35 failures in the gate here - https://review.openstack.org/#/c/443344/18:25
*** ayoung has quit IRC18:28
*** chlong has quit IRC18:34
antwashlbragstad: :(18:34
samueldmqdstanek: o/18:34
antwashlbragstad: the traceback error message is interesting18:36
lbragstadantwash yeah - the error was obvious to me18:36
lbragstadbut I also didn't dig spend a bunch of time digging into it either18:37
lbragstads/dig//18:37
openstackgerritOpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements  https://review.openstack.org/45101418:42
*** openstackstatus has joined #openstack-keystone18:44
*** ChanServ sets mode: +v openstackstatus18:44
*** lucasxu has quit IRC18:45
*** lucasxu has joined #openstack-keystone18:45
samueldmqlbragstad: antwash: can any of you walk me through the current state of changes for policy18:49
samueldmqI do see a LOT of patches up for review18:49
*** chlong has joined #openstack-keystone18:49
openstackgerritAnthony Washington proposed openstack/keystone master: Move mapping to DocumentedRuleDefault  https://review.openstack.org/44934118:50
*** Aqsa has joined #openstack-keystone18:51
lbragstadsamueldmq we have two implementations up for review right now18:52
lbragstadsamueldmq policy-in-code and policy-docs18:52
openstackgerritAnthony Washington proposed openstack/keystone master: Move service provider to DocumentedRuleDefault  https://review.openstack.org/44934718:52
lbragstadsamueldmq i'd probably start with reviewing the remaining policy-in-code patches - https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/policy-in-code18:52
lbragstadthe policy-docs patches are replacing the RuleDefault object we're using from oslo.policy with another, more strict object, that will require us to provide descriptions of all policies in keysotne18:53
lbragstadthe descriptions will be rendered when generating sample policy files - just like we do when generating sample configds18:53
lbragstadconfigs*18:53
openstackgerritAnthony Washington proposed openstack/keystone master: Move identity provider to DocumentedRuleDefault  https://review.openstack.org/44927518:53
samueldmqlbragstad: gotcha, so one instance of RuleDefault per policy rule or something like that ?18:54
lbragstadsamueldmq this is an example https://review.openstack.org/#/c/449234/18:54
openstackgerritAnthony Washington proposed openstack/keystone master: Move domain policies to DocumentedRuleDefault  https://review.openstack.org/44923418:54
lbragstadsamueldmq it switches RuleDefault for DocumentedRuleDefault and supplies the required attributes of that class18:55
antwashlbragstad: let me know how that commit message sounds, making the adjustments now18:55
lbragstadso we need to make sure the documentation we're supplying is accurate when compared to the actual api18:55
openstackgerritAnthony Washington proposed openstack/keystone master: Move endpoint policies to DocumentedRuleDefault  https://review.openstack.org/44921218:56
lbragstadantwash sounds perfect, thanks for respinning18:56
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy association to DocumentedRuleDefault  https://review.openstack.org/44934418:57
openstackgerritAnthony Washington proposed openstack/keystone master: Move ec2 credential policies to DocumentedRuleDefault  https://review.openstack.org/44923518:58
antwashlbragstad: np, I wont overload Zuul and the chat with the changes I'll break them up lol18:58
lbragstadantwash ++18:59
lbragstadantwash i was thinking about that last night18:59
lbragstadantwash since there is such a large number of patches, maybe we pick 5 everyday and focus on them until they merge18:59
lbragstadthen pick a new 518:59
lbragstadand so on and so forth, that way you don't have to respin 20 patches every time someone has a comment19:00
lbragstadand reviewers can prioritize which ones to review19:00
samueldmqlbragstad: done with policy-in-code. all those approved.19:01
samueldmqlbragstad: https://review.openstack.org/#/q/topic:bp/policy-docs+status:open now right ?19:01
samueldmqwell, adding project:openstack/keystone to this ^19:01
lbragstadsamueldmq yeah - essentially19:02
antwashsamueldmq: hey there, just read you comment on https://review.openstack.org/#/c/443344/19:02
antwashsamueldmq: the 'yaml' format was adopted from the nova team19:02
lbragstadsamueldmq let's prioritize https://review.openstack.org/#/c/449344/ https://review.openstack.org/#/c/449235/ https://review.openstack.org/#/c/449212/ and https://review.openstack.org/#/c/449234/19:02
*** spilla has quit IRC19:02
samueldmqantwash: nice. I am fine with that, was just curious about the change, but it's easily possible to generate the .json too, correct?19:03
samueldmqantwash: as people are more used to it after all these years19:03
lbragstadsamueldmq nope19:03
samueldmqlbragstad: not easy to generate policy.json anymore ?19:04
lbragstadsamueldmq https://bugs.launchpad.net/oslo.policy/+bug/160796819:04
openstackLaunchpad bug 1607968 in oslo.policy "oslopolicy-sample-generator does not output json, but docs always reference json" [Undecided,Confirmed]19:04
antwashthanks for the answer lance :)19:04
lbragstadantwash no problem19:04
lbragstadsamueldmq but we should totally try and fix oslo.policy so that is supports that case19:04
antwashyeah I agree that way you're not limited to a cetain format19:05
lbragstadbut if the new hotness is to move towards yaml, then we also need to go through and start correcting our documentation19:05
lbragstadbecause the reporter of that bug has a point19:05
lbragstadand so does robcresswell19:05
samueldmqlbragstad: I just commented on the bug. oslopolicy-sample-generator should generate .json too19:06
lbragstadto be backwards compatible, we can create a new flag for policy generation that denotes the format to output, if it's not specified we can assume .yaml19:07
samueldmqlbragstad: I am fine if we change the default format. that's totally okay. then we fix the docs19:07
lbragstad(which would maintain backwards compat)19:07
samueldmqlbragstad: but we should still support the .json format, and people should be able to generate it imo19:07
lbragstadyeah19:07
samueldmqlbragstad: nice19:07
samueldmqlbragstad: this is why we need to deprecate/remove things that nobody uses19:09
samueldmqhttps://review.openstack.org/#/c/449344/4/keystone/common/policies/policy_association.py19:09
samueldmqit's been a good amount of effort put on that policy backend :(19:10
lbragstadi'm not sure we'd ever be able to remove it19:10
samueldmqlbragstad: didn't we agree to deprecate it for removal during the PTG?19:12
lbragstadsamueldmq that was the policy API19:12
lbragstadif i remember correctly19:12
lbragstadand i think that was something notmorgan already proposed19:12
samueldmqlbragstad: hmm yes, but if policy API goes away, there is no point in keeping policy association19:13
samueldmqas associations map policy entities to targets :-)19:14
lbragstadsamueldmq i think the outcome of that discussion was that we would deprecate the policy API, since it's effectively useless at the moment, but we'd never be able to remove it because that would break backwards compatibiltiy19:14
lbragstadif we ever did a v4, we just wouldn't include a policy api19:14
*** dulek has quit IRC19:15
*** Aqsa has quit IRC19:15
*** gyee has joined #openstack-keystone19:15
lbragstadsamueldmq https://etherpad.openstack.org/p/pike-ptg-keystone-deprecations line 3519:15
samueldmqlbragstad: k. so my point is that we should deprecate endpojnt_policy too19:17
samueldmqlbragstad: if policy endpoint is useless, something that needs it to exist is useless as well19:18
lbragstadsamueldmq yeah19:18
*** dulek has joined #openstack-keystone19:18
*** david-lyle has quit IRC19:19
*** david-lyle has joined #openstack-keystone19:19
samueldmqantwash: btw well done on all those patches, you're doing a great job.19:20
lbragstad++ it's a lot of work19:20
antwashThanks you too, just ready to get them merged now lol19:22
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone master: Move ec2 credential policies to DocumentedRuleDefault  https://review.openstack.org/44923519:23
samueldmqlbragstad: ^19:23
*** bjornar_ has joined #openstack-keystone19:26
*** david-lyle has quit IRC19:27
samueldmqbp/policy-docs sprint ?19:29
samueldmq:-)19:29
*** david-lyle has joined #openstack-keystone19:30
lbragstadwe could!19:31
*** ravelar1 has joined #openstack-keystone19:32
*** openstackgerrit has quit IRC19:33
*** jamielennox|away is now known as jamielennox19:33
*** ravelar1 has quit IRC19:34
*** chlong has quit IRC19:34
*** lamt has quit IRC19:41
rodrigodslbragstad, maybe https://review.openstack.org/#/c/445505/6 uncovered a bug19:44
rodrigodsor the fix is wrong19:44
rodrigodssee my last comment19:44
*** rarora has quit IRC19:45
lbragstadrodrigods sounds good - thanks for the update19:46
samueldmqlbragstad: I wonder if we did something like "Create AN identity provider." rather than "Create identity provider."19:47
samueldmqfor all policy docs... if that would be something more correct19:48
samueldmqor both are okay. I am talking from an English perspective, and you can say it better than I can :-)19:48
*** d0ugal has joined #openstack-keystone19:49
*** raildo has quit IRC19:53
*** swatson has joined #openstack-keystone19:58
*** lamt has joined #openstack-keystone19:58
swatsonHey channel, I'm trying to start a devstack and I'm having issues that seem related to keystone19:58
swatsonHere's my relevant output from devstack: http://paste.openstack.org/show/604729/19:58
*** openstackgerrit has joined #openstack-keystone19:59
openstackgerritAnthony Washington proposed openstack/keystone master: Move policy association to DocumentedRuleDefault  https://review.openstack.org/44934419:59
swatsonAny ideas about what that error is about?19:59
*** d0ugal has quit IRC20:00
lbragstadswatson looks like the admin project isn't there "++lib/keystone:create_keystone_accounts:384  openstack project show admin -f value -c id"20:03
lbragstadswatson is there any other information prior to that point that suggests an issue?20:04
swatsonlbragstad: I'll take a look20:05
lbragstadswatson whenever i see issues like that, they are typically caused from a prior step failing in some way20:07
swatsonI had to start the stack script again because I forgot I had just unstacked as well >_<20:07
lbragstadswatson is it a relatively quick failure?20:07
swatsonlbragstad: Yeah, within a few minutes that I've noticed20:07
lbragstadcool20:08
antwashlbragstad: looking at the https://github.com/openstack/keystone/blob/stable/mitaka/etc/policy.json -- the authenticate for ec2 isn't there -- would you happen to know the rule applied to it?20:08
*** prashkre has quit IRC20:11
swatsonlbragstad: I hit the same error again. If I scroll up a bit further I see something about "key_repository does not appear to exist" a few times20:12
swatsonIt looks like maybe key_repository ends up created, and then I see:20:13
swatsonstart_service apache220:13
swatson+functions-common:start_service:2305       '[' -x /bin/systemctl ']'20:13
swatson+functions-common:start_service:2308       sudo service apache2 start20:13
swatson * Starting web server apache2                                                                                                   AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1. Set the 'ServerName' directive globally to suppress this message20:13
bretonthis is probably just warning20:14
bretoni think you can ignore it for now20:14
swatsonIs there a devstack log somewhere?20:15
lbragstadhmm20:15
swatsonMy shell didn't store much past the repository stuff20:16
lbragstadswatson you could check the keystone logs, too20:16
lbragstadswatson you could tee the devstack logs out to a file as well20:16
lbragstads/logs/output/20:16
swatsonare the keystone logs in /var/log? I don't have a keystone dir in there20:16
swatsonlbragstad I'm re-stacking now, gathering everything in another file20:18
dstanekswatson: if you are running under apache it'll be something like /var/log/{httpd,apache2}/keystone.log20:20
swatsondstanek: Ah, that makes sense. I'll let this stack finish and then take a look20:21
openstackgerritAnthony Washington proposed openstack/keystone master: Move mapping to DocumentedRuleDefault  https://review.openstack.org/44934120:22
openstackgerritAnthony Washington proposed openstack/keystone master: Move identity provider to DocumentedRuleDefault  https://review.openstack.org/44927520:23
*** Guest6666 has quit IRC20:28
*** Guest6666 has joined #openstack-keystone20:29
swatsonKeystone logs don't seem out of the ordinary20:30
*** pramodrj07 has joined #openstack-keystone20:31
*** david-lyle has quit IRC20:33
*** MasterOfBugs has quit IRC20:34
knikollais the python35 gate broken?20:34
*** rdo has quit IRC20:34
knikollaseems like it20:34
antwash++20:35
*** david-lyle has joined #openstack-keystone20:35
*** rdo has joined #openstack-keystone20:36
*** ayoung has joined #openstack-keystone20:38
*** david-lyle has quit IRC20:40
*** david-lyle has joined #openstack-keystone20:42
knikolladstanek: ^^20:43
knikollaseems to me a webob thing20:43
knikollaTypeError: You cannot set the body to a text value without a charset20:44
*** henrynash has quit IRC20:44
*** david-lyle has quit IRC20:46
openstackgerritKristi Nikolla proposed openstack/keystone master: Add charset to webob.Response  https://review.openstack.org/45155920:49
*** dulek has quit IRC20:50
*** dulek has joined #openstack-keystone20:52
*** Aqsa has joined #openstack-keystone20:52
*** david-lyle has joined #openstack-keystone20:52
*** spilla has joined #openstack-keystone20:56
knikollathat fixed it for me. lbragstad, dstanek ^^20:56
knikollaantwash20:57
swatsonlbragstad: I tried another stack after pulling the latest from devstack21:02
swatsonI went to check my screen sessions and it took me to keystone's first.21:02
swatson"key-access failed to start. Exit code: $?"21:02
swatsonIt's also referencing "/opt/stack/status/stack/key-access.failure" but I don't seem to have that file21:03
swatsonI do have key-access.pid and key.pid instead however21:04
*** Aqsa has quit IRC21:07
* lbragstad dstanek it'd be good to get your eyes on this, too https://review.openstack.org/#/c/451559/121:13
lbragstadswatson hmm21:13
lbragstadswatson did stack.sh fail with the same error as before?21:15
swatsonyeah21:16
lbragstadswatson can you confirm keystone is running?21:17
swatson"screen -x" shows 1) dstat 2) key 3) key-access21:18
swatsonkey looks like it's running--no errors showing21:18
lbragstadcan you curl the version endpoint of keystone and verify a response?21:19
swatsonkey-access looks like it died. It's what gave me that error  I mentioned before21:19
swatsonwhat's the version endpoint? http://192.168.1.96/identity/version?21:20
lbragstadhttp://192.168.1.96:35357/v3/21:21
lbragstadfor example21:21
swatsonIf I try that I get a 500 error21:21
swatson"curl http://192.168.1.96:35357/v3/"21:21
lbragstadswatson do you have a paste?21:21
lbragstadswatson specifically of the logs21:22
*** andreykurilin has quit IRC21:22
swatsonwhich logs would you like to see?21:22
lbragstadkeystone's21:22
lbragstadwould probably be a good start21:22
*** andreykurilin has joined #openstack-keystone21:22
swatsonlbragstad: http://paste.openstack.org/show/604745/21:23
swatsonThat's my /opt/stack/logs/key.log21:23
swatsonhttp://paste.openstack.org/show/604746/21:23
swatsonAnd that's my key-access.log from the same dir21:23
lbragstadswatson could you try and cat your entire keystone.log to pasteraw?21:25
openstackgerritRichard Avelar proposed openstack/keystone master: Remove policy file from source and refactor tests  https://review.openstack.org/44967521:25
*** spilla has quit IRC21:25
swatsonlbragstad: the apache2 one?21:25
lbragstad`pip install pasteraw; cat /var/log/apache2/keystone_access.log | pasteraw`21:25
lbragstadswatson yeah - that one21:25
swatsonI'm looking at it now actually21:25
swatsonthe last entry has an exceptoin21:26
swatsonmod_wsgi (pid=32056): Target WSGI script '/usr/local/bin/keystone-wsgi-admin' cannot be loaded as Python module.21:26
lbragstadbah21:26
swatsonShortly after that: ContextualVersionConflict: (oslo.messaging 5.17.0 (/usr/local/lib/python2.7/dist-packages), Requirement.parse('oslo.messaging>=5.19.0'), set(['keystone']))21:26
lbragstadbah!21:26
lbragstadrequirements21:26
swatsonI actually blew away my dist-packages when I first saw a requirements exception in stacking21:27
swatsonand then I started seeing keystone-related issues21:27
swatsonafter stacking again, that is21:27
lbragstadlooks like keystone is requiring oslo.messaging 5.19 or greater https://github.com/openstack/keystone/blob/master/requirements.txt#L2721:27
lbragstadswatson try upgrading oslo.messaging manually21:28
swatsonSo some other project is requiring 5.17 only maybe?21:28
lbragstadswatson that's a good question21:28
knikolla>=5.19 is specified in global-reqs too21:29
lbragstadyep = https://github.com/openstack/requirements/blob/master/upper-constraints.txt#L13521:29
lbragstadupper is pinned to 5.1921:29
swatsonHm. I wonder why mine wouldn't upgrade21:29
swatsonUpgrading manually seems to have worked okay21:29
swatsonI'll re-stack and see how it goes21:29
lbragstadswatson chances are that might be the only one21:29
lbragstadswatson sorry, chances are that might *not* be the only one21:30
swatsonlbragstad ah21:31
lbragstadswatson IME whenever i hit requirements issues, i typically have to update a few of them at a time21:31
swatsonWeird...is this a known issue then?21:32
lbragstadswatson well - chances are something got stale in your environment and didn't get updated21:32
lbragstadswatson is this a fresh installation?21:33
lbragstadof devstack?21:33
knikollai usually respin the vm. i figure if gates aren't broken upstream i may have messed up my env.21:33
*** lucasxu has quit IRC21:34
*** aojea has quit IRC21:34
swatsonlbragstad: What's your definition of "fresh installation"? :P21:34
swatsonI unstacked earlier today and then tried to run stack again21:34
lbragstadswatson by fresh i mean an brand new VM with a fresh clone of devstack21:35
lbragstadknikolla ++ same here21:35
swatsonlbragstad: I did a git pull of devstack, but otherwise no. I'm running on my dev machine, no VM21:36
lbragstadswatson aha21:36
*** bjornar_ has quit IRC21:36
lbragstadswatson fwiw - i typically run devstack on things I can dispose of21:36
knikolla++21:37
swatsonI'd like that option but with magnum some distros don't quite like VMs yet in my experience :P21:37
lbragstadbased on the warning here - https://docs.openstack.org/developer/devstack/21:37
lbragstadswatson what distro are you using?21:37
lbragstadjust out of curiosity21:37
swatsonI'm running Ubuntu 14.0421:38
swatsonI've had issues creating containers through magnum on VMs before, so switched to a regular machine21:38
lbragstadaha21:38
lbragstadi'm not entirely familiar with magnum development, but that makes sense21:38
swatsonI can't recall having devstack issues like this before though.21:39
swatsonI've been running this way for several months now21:39
*** pramodrj07 has quit IRC21:41
*** pramodrj07 has joined #openstack-keystone21:41
*** DinaBelova has quit IRC21:44
*** timss has quit IRC21:44
*** NikitaKonovalov has quit IRC21:44
*** NikitaKonovalov has joined #openstack-keystone21:45
*** timss has joined #openstack-keystone21:45
*** DinaBelova has joined #openstack-keystone21:46
openstackgerritSamriddhi proposed openstack/keystone master: Updated description of scope parameter in the corresponding strings for scoped and explicit unscoped authentication.  https://review.openstack.org/45003821:51
*** erlon has quit IRC21:55
openstackgerritSamriddhi proposed openstack/keystone master: Updated description of scope parameter.  https://review.openstack.org/45003821:55
lbragstadknikolla looks like your webob patch failed - http://logs.openstack.org/59/451559/1/check/gate-tempest-dsvm-py35-ubuntu-xenial/0304010/console.html#_2017-03-29_21_49_26_45279122:01
*** bjornar_ has joined #openstack-keystone22:06
swatsonlbragstad: One interesting  thing...even after manually upgrading oslo.messaging it seems like it reverts somehow22:08
swatsonIf I run "sudo pip install --upgrade oslo.messaging" I see all the usual upgrade stuff and it looks successful22:08
swatsonAfter running stack again I get the same requirements error of oslo.messaging being 5.17 instead of 5.1922:09
lbragstadswatson do you have a pip config somewhere that's preventing it from upgrading?22:09
*** jamielennox is now known as jamielennox|away22:09
*** adrian_otto has quit IRC22:09
swatsonlbragstad: I'm not sure. I haven't done any pip configuration of my own that I can recall22:09
dtroyerjamielennox: Around yet?  I've got my head full of microversions and am wondering about what is in ksa to do discovery22:09
*** adrian_otto has joined #openstack-keystone22:10
lbragstadswatson hmm - i wonder if it's using a venv somewhere22:11
*** jamielennox|away is now known as jamielennox22:12
*** rarora has joined #openstack-keystone22:13
swatsonhm..22:13
jamielennoxdtroyer: i am22:13
jamielennoxdtroyer: and there is not that much in ksa - i've always wanted there to be more, but no one has given me a straight answer on how we should actually work with them22:13
*** henrynash has joined #openstack-keystone22:14
lbragstadswatson https://github.com/openstack-dev/devstack/blob/1e7f738f284b85ed95d514fb13fbc1afb6b31087/stack.sh#L737-L749 might be relevant22:14
swatsonlbragstad: It looks like that'll default to False, and mine is currently unset22:15
lbragstadswatson what does your requirements repo look like?22:16
lbragstadhttps://github.com/openstack-dev/devstack/blob/1e7f738f284b85ed95d514fb13fbc1afb6b31087/stack.sh#L72022:16
lbragstadbecause if that's older it might be out of sync with what devstack is expecting22:16
swatsonShould I have anything in particular in there?22:17
dtroyerjamielennox: ok, I'm going to take a crack at it since a big chunk of what is in novaclient isn't working the way I want22:17
swatsonlbragstad: Would blowing away this dir be an okay thing to try?22:17
swatsonsince devstack should re-DL anyway22:17
jamielennoxdtroyer: maybe -> #sdks22:18
dtroyersure, I'm never there anymore it seems :)22:18
lbragstadswatson see what oslo.messaging is set to in global-requirements.txt and upper-constraints.txt22:18
lbragstadswatson devstack has a specific option for recloning stuff that you can toggle22:19
swatsonlbragstad: Aha :) "oslo.messaging===5.17.0" in my requirements/upper-constraints.txt22:19
lbragstadswatson https://github.com/openstack-dev/devstack/blob/d7bc9486aa548d97d14a8af05f98954bb2b774d5/functions-common#L49022:19
lbragstadswatson yeah - i bet that's what's causing oslo.messaging to be pinned for you22:20
lbragstadswatson I'd either set RECLONE = true or forcibly update requirements using `git pull`22:20
swatsonthe latter option sounds faster22:21
lbragstadi'm curious to see if that is the issue22:22
swatsonwell my git pull resulted in about 1k line changes in requirements-related files alone22:23
lbragstadhm22:24
swatsonAnd my stack failed pretty quickly this time22:24
lbragstadyeah - i bet that will have impact on your next run22:24
swatsonIOError: [Errno 2] No such file or directory: '/opt/stack/requirements/.venv/lib/python2.7/site-packages/pyparsing-2.1.10.dist-info/METADATA'22:24
lbragstadhm22:24
swatsonI'm trying again with reclone22:28
swatsoncould take awhile22:28
swatsonNope, same error, though it was a little longer to get to22:31
knikollalbragstad: i hope it's only a transient error. the keystone-python35 gate which was broken did indeed pass.22:35
swatsonlbragstad: I'm heading out today. I'll probably end  up starting fresh soon enough. Thanks for all your help though :)22:36
*** sjain has joined #openstack-keystone22:38
*** sjain has quit IRC22:39
*** bjornar_ has quit IRC22:42
samueldmqlbragstad: dstanek: jamielennox: it'd be great to get your feedback in bug 163768222:44
openstackbug 1637682 in OpenStack Identity (keystone) "[api] scoped string defined as 'unscope: {}'" [Low,In progress] https://launchpad.net/bugs/1637682 - Assigned to Samriddhi (s-jain)22:44
samueldmqlbragstad: dstanek: jamielennox: my suspicion is that there should be more than a doc fix, see my latest comment22:45
*** sjain has joined #openstack-keystone22:47
dstaneksamueldmq: i added my 2cents22:55
*** thorst has quit IRC22:56
samueldmqdstanek: thanks, that was 2boxes actually :)22:57
samueldmqdstanek: valuable comment on the schema. I was looking at that bug, and the fix, and it was bugging my mind :p22:57
samueldmqthanks for confirming22:58
dstaneksamueldmq: yeah, if we don't add the comment someone will eventually "fix" the validation and maybe break existing clouds22:58
samueldmqdstanek: completely agree23:00
*** pramodrj07 has quit IRC23:22
*** lamt has quit IRC23:39
*** adrian_otto has quit IRC23:51
*** thorst has joined #openstack-keystone23:56
*** sjain has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!