Thursday, 2017-06-15

*** edmondsw has joined #openstack-keystone00:08
*** edmondsw has quit IRC00:12
*** aojea has quit IRC00:20
*** aojea has joined #openstack-keystone00:21
*** ducttape_ has joined #openstack-keystone00:33
*** ayoung has joined #openstack-keystone00:39
*** zhurong has joined #openstack-keystone00:39
*** liujiong has joined #openstack-keystone00:42
*** mdnadeem has joined #openstack-keystone00:51
*** Dave has quit IRC00:53
*** Dave____ has joined #openstack-keystone00:55
*** shuyingya has joined #openstack-keystone00:56
*** lucasxu has joined #openstack-keystone01:19
*** lucasxu has quit IRC01:21
*** namnh has joined #openstack-keystone01:25
*** piliman974 has joined #openstack-keystone01:32
*** ducttape_ has quit IRC02:06
*** ducttape_ has joined #openstack-keystone02:07
*** ducttape_ has quit IRC02:08
*** aojea has quit IRC02:25
*** aojea has joined #openstack-keystone02:26
*** aojea has quit IRC02:26
*** markvoelker has quit IRC02:32
*** markvoelker has joined #openstack-keystone02:33
*** markvoelker has quit IRC02:37
*** piliman974 has quit IRC02:43
*** piliman974 has joined #openstack-keystone02:45
*** nicolasbock has joined #openstack-keystone02:51
*** dklyle has joined #openstack-keystone03:01
*** david-lyle has quit IRC03:04
*** ducttape_ has joined #openstack-keystone03:08
*** Shunli has joined #openstack-keystone03:14
*** catintheroof has joined #openstack-keystone03:15
*** cheran has quit IRC03:35
*** catintheroof has quit IRC03:47
*** dave-mcc_ has quit IRC03:51
*** nicolasbock has quit IRC03:53
*** zsli_ has joined #openstack-keystone03:55
*** Shunli has quit IRC03:58
*** tobberydberg has joined #openstack-keystone04:09
*** tobberydberg has quit IRC04:13
*** zhurong has quit IRC04:28
*** markvoelker has joined #openstack-keystone04:33
*** piliman974 has quit IRC04:40
*** zhurong has joined #openstack-keystone04:41
*** aselius has quit IRC04:45
*** jaosorior has quit IRC05:00
*** markvoelker has quit IRC05:07
*** phalmos_ has quit IRC05:15
*** phalmos has joined #openstack-keystone05:18
*** zig_ has joined #openstack-keystone05:27
*** edmondsw has joined #openstack-keystone05:32
*** edmondsw has quit IRC05:37
*** gyee has quit IRC05:39
*** zig_ has quit IRC05:47
*** zig_ has joined #openstack-keystone05:48
*** tobberydberg has joined #openstack-keystone05:50
*** markvoelker has joined #openstack-keystone06:04
*** zig_ has quit IRC06:04
*** rcernin has quit IRC06:11
*** broda has joined #openstack-keystone06:16
brodahi.. i need some help with keystone06:16
brodai'm running ocata version06:16
brodai've noticed that expired tokens are deleted after a while even without running keystone-manage flush command06:17
brodabackend is sql and i've installed via packstack06:17
brodacan anyone tell me how the tokens are being deleted?06:18
*** cheran has joined #openstack-keystone06:29
*** markvoelker has quit IRC06:37
*** rcernin has joined #openstack-keystone06:37
*** tesseract has joined #openstack-keystone06:43
*** ArchiFleKs has quit IRC06:44
*** dims has quit IRC06:44
*** dims has joined #openstack-keystone06:46
*** liujiong_lj has joined #openstack-keystone06:57
*** liujiong has quit IRC06:58
*** pcaruana has joined #openstack-keystone06:58
*** aselius has joined #openstack-keystone07:08
*** jaosorior has joined #openstack-keystone07:12
*** shuyingya has quit IRC07:19
*** shuyingya has joined #openstack-keystone07:19
*** liujiong_lj has quit IRC07:22
*** liujiong has joined #openstack-keystone07:22
*** shuyingya has quit IRC07:22
*** shuyingya has joined #openstack-keystone07:23
*** hoonetorg has joined #openstack-keystone07:34
*** markvoelker has joined #openstack-keystone07:34
*** cheran has quit IRC07:54
*** aojea has joined #openstack-keystone07:54
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** aojea has quit IRC08:01
*** markvoelker has quit IRC08:08
*** shuyingy_ has joined #openstack-keystone08:10
*** shuyingya has quit IRC08:14
bretonbroda: why do you think that they are being deleted?08:18
bretonbroda: what is the token provider in keystone.conf?08:18
*** shuyingy_ has quit IRC08:34
*** shuyingya has joined #openstack-keystone08:34
*** liujiong has quit IRC08:43
*** liujiong has joined #openstack-keystone08:43
*** mdnadeem has quit IRC08:46
*** mfedosin has joined #openstack-keystone08:51
*** piliman974 has joined #openstack-keystone08:54
*** mdnadeem has joined #openstack-keystone09:02
*** markvoelker has joined #openstack-keystone09:05
*** edmondsw has joined #openstack-keystone09:08
*** mdnadeem has quit IRC09:13
*** aselius has quit IRC09:18
*** edmondsw has quit IRC09:18
*** shuyingya has quit IRC09:22
*** shuyingya has joined #openstack-keystone09:23
brodabreton: i checked the database to see the tokens09:28
brodabreton: the provider is uuid. nvm.09:28
*** zsli_ has quit IRC09:28
brodabreton: i figured out how it works :)09:28
*** shuyingy_ has joined #openstack-keystone09:31
*** shuyingya has quit IRC09:34
*** markvoelker has quit IRC09:38
*** d0ugal has quit IRC09:48
*** d0ugal has joined #openstack-keystone09:49
*** broda has quit IRC09:49
*** mvk has quit IRC09:54
*** liujiong has quit IRC10:06
*** nicolasbock has joined #openstack-keystone10:19
*** mvk has joined #openstack-keystone10:23
*** piliman974 has quit IRC10:26
*** markvoelker has joined #openstack-keystone10:34
*** shuyingy_ has quit IRC10:56
*** shuyingya has joined #openstack-keystone10:56
*** shuyingy_ has joined #openstack-keystone10:57
*** shuyingya has quit IRC10:57
*** shuyingy_ has quit IRC10:59
*** shuyingya has joined #openstack-keystone11:00
*** tobberyd_ has joined #openstack-keystone11:06
*** tobberyd_ has quit IRC11:07
openstackgerritSamriddhi proposed openstack/keystone master: Added keystone configuration references  https://review.openstack.org/47454211:07
openstackgerritSamriddhi proposed openstack/keystone master: Added configuration references to documentation  https://review.openstack.org/47454311:07
*** tobberyd_ has joined #openstack-keystone11:07
openstackgerritSamriddhi proposed openstack/keystone master: Added keystone installation guides to documentation  https://review.openstack.org/47454511:08
*** markvoelker has quit IRC11:08
*** tobberydberg has quit IRC11:09
*** tobberyd_ has quit IRC11:10
*** tobberydberg has joined #openstack-keystone11:11
*** Dave____ is now known as Dave11:14
*** BigDogStl has joined #openstack-keystone11:21
*** BigDogStl has quit IRC11:29
*** tobberyd_ has joined #openstack-keystone11:31
*** chlong has joined #openstack-keystone11:32
*** tobberydberg has quit IRC11:34
*** tobberyd_ has quit IRC11:49
*** markvoelker has joined #openstack-keystone11:51
*** tobberydberg has joined #openstack-keystone11:52
samueldmqmorning keystone12:07
*** namnh has quit IRC12:10
*** shuyingya has quit IRC12:13
*** nkinder has joined #openstack-keystone12:21
*** edmondsw has joined #openstack-keystone12:22
*** shuyingya has joined #openstack-keystone12:23
*** edmondsw has quit IRC12:24
*** edmondsw has joined #openstack-keystone12:25
*** zhurong has quit IRC12:26
*** shuyingya has quit IRC12:27
*** zhurong has joined #openstack-keystone12:28
*** shuyingya has joined #openstack-keystone12:28
*** zhurong has quit IRC12:36
*** nkinder has quit IRC12:38
*** nkinder has joined #openstack-keystone12:39
*** shuyingy_ has joined #openstack-keystone12:43
openstackgerritSamriddhi proposed openstack/keystone master: Added configuration references to documentation  https://review.openstack.org/47454312:43
*** shuyingya has quit IRC12:46
*** catintheroof has joined #openstack-keystone13:07
*** sjain_ has joined #openstack-keystone13:12
*** shuyingy_ has quit IRC13:19
*** shuyingya has joined #openstack-keystone13:20
*** catinthe_ has joined #openstack-keystone13:21
*** catintheroof has quit IRC13:24
*** catintheroof has joined #openstack-keystone13:25
*** catinthe_ has quit IRC13:25
*** catinthe_ has joined #openstack-keystone13:26
*** catinth__ has joined #openstack-keystone13:26
*** catintheroof has quit IRC13:26
*** lucasxu has joined #openstack-keystone13:26
*** dave-mccowan has joined #openstack-keystone13:27
*** bknudson has joined #openstack-keystone13:29
*** catintheroof has joined #openstack-keystone13:29
*** catinthe_ has quit IRC13:30
*** shuyingya has quit IRC13:30
*** catinth__ has quit IRC13:33
*** mariusv has joined #openstack-keystone13:33
*** thorst has joined #openstack-keystone13:36
*** sjain_ has quit IRC13:42
*** sjain_ has joined #openstack-keystone13:43
*** zzzeek has quit IRC13:46
*** zzzeek has joined #openstack-keystone13:47
*** zhurong has joined #openstack-keystone13:48
*** mariusv has quit IRC13:55
*** jistr is now known as jistr|mtg13:59
*** spzala has joined #openstack-keystone14:01
*** spzala has quit IRC14:03
*** aojea has joined #openstack-keystone14:06
*** phalmos has quit IRC14:10
*** Tahvok has quit IRC14:12
*** zhurong has quit IRC14:22
samueldmqwow tox -epy35 is taking ages14:26
*** aselius has joined #openstack-keystone14:29
*** ducttape_ has quit IRC14:29
*** ducttape_ has joined #openstack-keystone14:30
samueldmqtoo many deprecation warnings from oslo_middleware14:31
*** sjain_ has quit IRC14:32
*** Tahvok has joined #openstack-keystone14:34
*** Tahvok has quit IRC14:49
*** Tahvok has joined #openstack-keystone14:55
*** jistr|mtg is now known as jistr14:59
*** mvk has quit IRC15:05
*** rcernin has quit IRC15:09
*** dklyle is now known as david-lyle15:10
*** gyee has joined #openstack-keystone15:10
*** phalmos has joined #openstack-keystone15:15
knikollao/ morning15:18
lbragstado/15:20
*** tobberyd_ has joined #openstack-keystone15:22
*** tobberydberg has quit IRC15:25
*** tobberyd_ has quit IRC15:28
*** raildo has joined #openstack-keystone15:29
morganzzzzzz15:34
*** rcernin has joined #openstack-keystone15:44
*** tobberydberg has joined #openstack-keystone15:53
*** aojea has quit IRC15:56
*** tobberydberg has quit IRC15:57
*** rcernin has quit IRC16:12
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements  https://review.openstack.org/47291516:34
openstackgerritKirill Bespalov proposed openstack/python-keystoneclient master: Handle unicode attrs case for Resource obj  https://review.openstack.org/47470316:42
*** tesseract has quit IRC16:46
lbragstadstevemar: ping16:51
*** pcaruana has quit IRC17:16
morganlbragstad: is stevemar even irc-alive anymore:P17:20
morgani never see him17:21
*** cheran has joined #openstack-keystone17:28
lbragstadmorgan: that's a good questions17:28
lbragstadstevemar:17:28
lbragstadstevemar:17:28
lbragstadstevemar:17:28
lbragstadstevemar:17:28
lbragstadbut - i'm curious to find out ;)17:29
*** mvk has joined #openstack-keystone18:03
*** raildo has quit IRC18:04
*** zzzeek has quit IRC18:04
*** lbragstad has quit IRC18:28
*** lbragstad has joined #openstack-keystone18:36
*** ChanServ sets mode: +o lbragstad18:36
stevemarmorgan: lbragstad :)18:41
stevemari'm still irc-alive, was just AFK looking at a house18:41
*** nicolasbock has quit IRC18:41
lbragstadstevemar: that's some serious stuff :)18:45
lbragstadstevemar: congrats!18:45
*** catinthe_ has joined #openstack-keystone19:07
*** cheran has quit IRC19:08
*** jaosorior is now known as jaosorior_away19:08
*** lucasxu has quit IRC19:10
*** catintheroof has quit IRC19:11
*** lucasxu has joined #openstack-keystone19:11
EmilienMlbragstad: hey, can you confirm that policy.v3cloudsample.json file needs to be renamed to policy.json to be used with default config, right?19:13
EmilienMI think the default value for policy_file is policy.json19:13
lbragstadEmilienM: yeah - that is correct19:14
EmilienMok thx19:14
lbragstadEmilienM: I don't think we'll do that in project source though19:14
EmilienMlbragstad: and the default policy.v3cloudsample.json file provided as exemple in tree can be used by default?19:14
EmilienMor the content is dangerous or not for production?19:14
lbragstadEmilienM: it is not as well tested as the default policy configuration19:14
lbragstadEmilienM: it has been known to break in some deployments19:15
EmilienMah ok19:15
lbragstad(specifically horizon if I remember correctly)19:15
EmilienMwhere is the default policy configuration?19:15
lbragstadEmilienM: we've moved all of our defaults into code19:15
lbragstadwhich can be found here:19:15
EmilienMah ok19:15
lbragstadEmilienM: https://github.com/openstack/keystone/tree/master/keystone/common/policies19:15
lbragstadso - everything that was in policy.json (kept in tree) was moved into those modules19:16
EmilienMlbragstad: nice, if all projects could do that :D19:16
lbragstadEmilienM: that's why i proposed a goal for it ;)19:16
EmilienMyeah19:16
lbragstadEmilienM: for historical context, the policy.v3cloudsample.json file was an attempt to introduce more granularity into keystone policy file19:16
lbragstadso - we kept and maintained two policy files for a while, the default was tested more that the v3cloudsample, though19:17
lbragstadthe big change that it tried to do was introduce the concept of a project or cloud administrator19:17
lbragstador something inbetween a regular API user and a global administrator19:18
EmilienMlbragstad: ok19:21
lbragstadEmilienM: hopefully that makes sense19:21
EmilienMlbragstad: is it fine if in packaging we ship an empty policy.json?19:21
EmilienMempty {} with no rules by default19:21
*** ducttap__ has joined #openstack-keystone19:21
lbragstadEmilienM: if you're deployment tooling doesn't override any policies by default, then yet19:21
lbragstadyes*19:21
EmilienMlbragstad: we don't19:22
lbragstadEmilienM: that should be fine19:22
EmilienMbut we have the interface to do so19:22
*** catintheroof has joined #openstack-keystone19:22
EmilienMat their risk19:22
lbragstadEmilienM: that's perfect19:22
EmilienMcool19:22
EmilienMthanks a lot for the details, it helped a lot19:22
lbragstadEmilienM: i think that's the approach the openstack-ansible takes19:22
EmilienMgood19:22
lbragstadEmilienM: no overrides by default, but they expose an interface for users to supply their own policy file19:22
lbragstadcloudnull: can keep me honest there though19:23
*** ducttape_ has quit IRC19:24
*** catinthe_ has quit IRC19:25
*** ducttape_ has joined #openstack-keystone19:27
*** ducttap__ has quit IRC19:29
cloudnullwat?19:30
cloudnullyes.19:31
cloudnullthis is what we do too19:31
lbragstad++19:31
lbragstadgood deal - consistency is good19:31
cloudnullwe do the same for other services like nova too19:31
cloudnullso +1 for consistency between deployment projects :)19:32
lbragstadagreed!19:34
*** tobberydberg has joined #openstack-keystone19:37
*** mfedosin has quit IRC19:53
lbragstadstepping away for a bit19:54
openstackgerritMerged openstack/python-keystoneclient master: Updated from global requirements  https://review.openstack.org/47291520:00
*** nkinder has quit IRC20:04
*** thorst has quit IRC20:27
*** lucasxu has quit IRC20:55
edmondswlbragstad, I was just debugging some tempest failures in our CI, and tracked it back to an inconsistency between devstack and tempest conf settings20:55
edmondswwhich of these do you think should change?20:55
edmondswhttps://github.com/openstack-dev/devstack/blob/master/lib/keystone#L12520:55
edmondswhttps://github.com/openstack/tempest/blob/4b6f5bbd5168d2d1d2781a2ca150222187c72ec6/tempest/config.py#L18220:55
edmondswlbragstad, oh, hey, this is your fault ;) https://github.com/openstack-dev/devstack/commit/dcd4b64c990660f9b11b999a3b70e17c36323c4c20:57
edmondswso I assume by that that we'd like tempest to change20:58
*** thorst has joined #openstack-keystone20:59
*** catinthe_ has joined #openstack-keystone21:06
*** ducttape_ has quit IRC21:09
*** catintheroof has quit IRC21:09
*** tobberydberg has quit IRC21:10
*** tobberydberg has joined #openstack-keystone21:10
*** tobberydberg has quit IRC21:15
*** catinthe_ has quit IRC21:28
lbragstadedmondsw: yep - that was me21:28
lbragstadit was related to a bug reported against keystone21:29
lbragstadedmondsw: i'd think tempest would need to change as well21:29
lbragstadedmondsw: i see you've already reviewed https://review.openstack.org/#/c/472793/121:30
lbragstadedmondsw: thanks for that21:30
*** ducttape_ has joined #openstack-keystone21:34
*** ducttape_ has quit IRC21:38
*** nkinder has joined #openstack-keystone21:39
*** ducttape_ has joined #openstack-keystone21:41
*** ducttape_ has quit IRC21:54
*** ducttape_ has joined #openstack-keystone21:55
edmondswlbragstad yep, tx22:01
*** bknudson has quit IRC22:06
openstackgerritSamriddhi proposed openstack/keystone master: Added configuration references to documentation  https://review.openstack.org/47454322:11
*** ducttape_ has quit IRC22:14
*** thorst has quit IRC22:14
*** ducttape_ has joined #openstack-keystone22:17
*** ducttape_ has quit IRC22:17
*** ducttape_ has joined #openstack-keystone22:17
*** ducttape_ has quit IRC22:33
*** thorst has joined #openstack-keystone22:33
*** thorst has quit IRC22:34
*** ducttape_ has joined #openstack-keystone22:34
*** nkinder has quit IRC22:53
*** zzzeek has joined #openstack-keystone23:09
*** hoonetorg has quit IRC23:10
*** edmondsw has quit IRC23:10
*** ducttape_ has quit IRC23:16
*** ducttape_ has joined #openstack-keystone23:18
*** ducttape_ has quit IRC23:21
*** ducttape_ has joined #openstack-keystone23:22
*** phalmos has quit IRC23:24
*** ducttape_ has quit IRC23:26
*** ducttape_ has joined #openstack-keystone23:32
*** hyakuhei has joined #openstack-keystone23:36
*** cheran has joined #openstack-keystone23:36
*** ducttape_ has quit IRC23:37
*** thorst has joined #openstack-keystone23:53

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!