Monday, 2017-08-21

*** sbezverk has joined #openstack-keystone00:01
*** thorst has joined #openstack-keystone00:09
*** thorst has quit IRC00:13
*** markvoelker has joined #openstack-keystone00:19
*** stingaci has joined #openstack-keystone00:20
*** stingaci_ has quit IRC00:22
*** Shunli has joined #openstack-keystone00:24
*** catintheroof has quit IRC00:33
*** thorst has joined #openstack-keystone00:44
*** thorst has quit IRC00:45
*** edmondsw has joined #openstack-keystone01:13
*** edmondsw has quit IRC01:18
*** zsli_ has joined #openstack-keystone01:25
*** Shunli has quit IRC01:27
*** masber has joined #openstack-keystone01:28
*** zhurong has joined #openstack-keystone01:35
*** thorst has joined #openstack-keystone01:46
*** ayoung has quit IRC01:48
*** guoshan has joined #openstack-keystone01:50
*** thorst has quit IRC01:51
*** guoshan has quit IRC01:51
*** guoshan has joined #openstack-keystone01:51
*** ducttape_ has joined #openstack-keystone02:31
*** zhurong has quit IRC02:34
*** dave-mccowan has quit IRC02:36
*** thorst has joined #openstack-keystone02:47
*** thorst has quit IRC02:51
*** edmondsw has joined #openstack-keystone03:02
*** edmondsw has quit IRC03:06
*** mjax has joined #openstack-keystone03:08
*** mjax has quit IRC03:09
*** Dinesh_Bhor has joined #openstack-keystone03:45
*** thorst has joined #openstack-keystone03:48
*** thorst has quit IRC03:52
*** links has joined #openstack-keystone03:54
*** swain has joined #openstack-keystone04:06
*** zsli_ has quit IRC04:13
*** zsli_ has joined #openstack-keystone04:13
*** zsli_ has quit IRC04:21
*** zsli__ has joined #openstack-keystone04:24
*** mvk has joined #openstack-keystone04:33
*** ying_zuo has joined #openstack-keystone04:36
*** hoonetorg has quit IRC04:38
*** zsli__ has quit IRC04:39
*** edmondsw has joined #openstack-keystone04:50
*** hoonetorg has joined #openstack-keystone04:54
*** edmondsw has quit IRC04:54
*** mvk_ has joined #openstack-keystone05:10
*** mvk has quit IRC05:12
*** flwang has quit IRC05:15
*** flwang has joined #openstack-keystone05:18
*** mvk_ has quit IRC05:21
*** Shunli has joined #openstack-keystone05:31
*** Shunli has quit IRC05:33
*** mvk_ has joined #openstack-keystone05:34
*** Shunli has joined #openstack-keystone05:34
*** Shunli has quit IRC05:35
*** Shunli has joined #openstack-keystone05:36
*** thorst has joined #openstack-keystone05:49
*** Shunli has quit IRC05:51
*** Shunli has joined #openstack-keystone05:51
*** thorst has quit IRC05:54
*** zsli_ has joined #openstack-keystone06:01
*** Shunli has quit IRC06:03
*** rcernin has joined #openstack-keystone06:04
*** zsli__ has joined #openstack-keystone06:08
*** zsli_ has quit IRC06:11
*** swain has quit IRC06:16
*** jaosorior has joined #openstack-keystone06:16
*** zsli__ has quit IRC06:26
*** zsli__ has joined #openstack-keystone06:26
*** mkrcmari__ has joined #openstack-keystone06:29
*** pcaruana has joined #openstack-keystone06:30
*** mvk_ has quit IRC06:32
*** mvk has joined #openstack-keystone06:32
*** stingaci has quit IRC06:32
*** stingaci has joined #openstack-keystone06:32
*** mkrcmari__ has quit IRC06:35
*** stingaci has quit IRC06:37
*** mvpnitesh has joined #openstack-keystone06:45
*** thorst has joined #openstack-keystone06:51
*** thorst has quit IRC06:55
*** stingaci has joined #openstack-keystone07:08
*** stingaci has quit IRC07:09
*** stingaci has joined #openstack-keystone07:10
*** stingaci has quit IRC07:11
*** aojea has joined #openstack-keystone07:39
*** gokhan has quit IRC07:51
*** thorst has joined #openstack-keystone07:51
*** thorst has quit IRC07:56
*** mvpnitesh has quit IRC08:25
*** mvpnitesh has joined #openstack-keystone08:25
*** edmondsw has joined #openstack-keystone08:26
*** aojea has quit IRC08:27
*** ioggstream has joined #openstack-keystone08:27
*** kukacz has quit IRC08:27
*** edmondsw has quit IRC08:30
*** thorst has joined #openstack-keystone08:52
*** pcaruana has quit IRC08:53
*** pcaruana has joined #openstack-keystone08:55
*** thorst has quit IRC08:56
*** pcaruana has quit IRC09:19
*** zsli__ has quit IRC09:31
*** pcaruana has joined #openstack-keystone09:32
*** kukacz has joined #openstack-keystone09:34
*** nicolasbock_ has joined #openstack-keystone09:42
*** pcaruana has quit IRC09:45
*** nicolasbock_ has quit IRC09:47
*** dims has quit IRC09:50
*** pcaruana has joined #openstack-keystone09:58
*** kukacz has quit IRC09:58
*** kukacz has joined #openstack-keystone09:59
*** nicolasbock_ has joined #openstack-keystone09:59
*** edmondsw has joined #openstack-keystone10:14
*** guoshan has quit IRC10:18
*** guoshan has joined #openstack-keystone10:18
*** edmondsw has quit IRC10:19
*** guoshan has quit IRC10:24
*** thorst has joined #openstack-keystone10:54
*** thorst has quit IRC10:58
*** zhuzeyu has joined #openstack-keystone11:04
*** zhuzeyu has left #openstack-keystone11:04
*** aojea has joined #openstack-keystone11:05
*** aojea_ has joined #openstack-keystone11:08
*** aojea has quit IRC11:09
*** openstackgerrit has quit IRC11:17
*** ioggstream has quit IRC11:17
samueldmqmorning keystone11:20
*** belmoreira has joined #openstack-keystone11:45
*** raildo has joined #openstack-keystone11:48
*** mvk_ has joined #openstack-keystone11:50
*** david-lyle has joined #openstack-keystone11:50
*** dklyle has quit IRC11:51
*** mvk has quit IRC11:53
*** dave-mccowan has joined #openstack-keystone11:53
*** edmondsw has joined #openstack-keystone11:55
*** thorst has joined #openstack-keystone11:57
*** ioggstream has joined #openstack-keystone12:12
*** aojea_ has quit IRC12:27
*** aojea has joined #openstack-keystone12:28
*** edmondsw has quit IRC12:29
*** iurygregory has joined #openstack-keystone12:31
*** mkrcmari__ has joined #openstack-keystone12:56
*** mvk_ has quit IRC13:00
*** ayoung has joined #openstack-keystone13:06
*** aojea has quit IRC13:15
*** dims has joined #openstack-keystone13:21
knikollao/13:23
*** zxy has joined #openstack-keystone13:28
*** belmoreira has quit IRC13:29
*** edmondsw has joined #openstack-keystone13:29
*** belmoreira has joined #openstack-keystone13:32
*** lucasxu has joined #openstack-keystone13:34
*** aojea has joined #openstack-keystone13:36
*** mvpnitesh has quit IRC13:37
lbragstado/13:41
*** sjain has joined #openstack-keystone13:43
*** aojea has quit IRC13:50
*** markvoelker has quit IRC13:52
zxy\o13:53
*** aojea has joined #openstack-keystone13:58
*** cfriesen_ has joined #openstack-keystone14:01
*** mvk has joined #openstack-keystone14:04
*** mkrcmari__ has quit IRC14:05
*** zxy has quit IRC14:11
*** zxy has joined #openstack-keystone14:12
gagehugoo/14:24
*** aojea has quit IRC14:26
lbragstadthe themes for monday/tuesday at the PTG have been released - https://www.openstack.org/ptg#tab_schedule14:36
*** nicolasbock_ has quit IRC14:51
*** nicolasbock has joined #openstack-keystone14:51
*** sjain has quit IRC14:55
*** links has quit IRC14:56
*** jmlowe has joined #openstack-keystone14:57
*** mvk_ has joined #openstack-keystone14:58
*** mvk has quit IRC15:02
*** mkrcmari__ has joined #openstack-keystone15:11
*** ayoung has quit IRC15:11
*** Guest180 is now known as zeus15:11
*** zeus has joined #openstack-keystone15:11
*** ayoung has joined #openstack-keystone15:11
*** mvk_ has quit IRC15:14
*** rcernin has quit IRC15:15
*** pcaruana has quit IRC15:22
*** otleimat has joined #openstack-keystone15:22
*** nicolasbock has quit IRC15:23
*** belmoreira has quit IRC15:24
*** jmlowe has quit IRC15:34
*** swain has joined #openstack-keystone15:35
*** gyee has joined #openstack-keystone15:40
*** sjain has joined #openstack-keystone16:00
*** aselius has joined #openstack-keystone16:01
*** nicolasbock has joined #openstack-keystone16:02
*** markvoelker has joined #openstack-keystone16:03
*** edmondsw has quit IRC16:05
*** edmondsw has joined #openstack-keystone16:07
kmallocmmmm16:11
kmalloceclipse watching today16:11
*** edmondsw has quit IRC16:11
kmalloc93% where i'm at (didn't decide to drive down to PDX or Salem)16:11
kmalloclbragstad: what is "skip level" upgrading?16:12
kmalloclike ocata->rocky?16:12
lbragstadskip level upgrading?16:13
kmallocSkip-level upgrading (#upgrading)16:13
kmallocSupport for skip-level upgrading across all OpenStack components will be discussed In this room. We’ll also discuss increasing the number of projects that support rolling upgrades, zero-downtime upgrades and zero-impact upgrades.16:13
kmallocfrom the linke16:13
lbragstadsounds like it consists of powering down a cloud, rolling through each release, and powering it back on16:13
* kmalloc shrugs16:13
*** aojea has joined #openstack-keystone16:16
*** aojea has quit IRC16:17
*** david-lyle has quit IRC16:18
*** david-lyle has joined #openstack-keystone16:19
cmurphyit's upgrading from N to N+216:31
cmurphyit's not specific to how the cloud is powered up or down16:31
lbragstadcmurphy: does the migration have to be online?16:32
cmurphylbragstad: ideally16:32
lbragstadcmurphy: or are those details omitted?16:32
lbragstadinteresting16:32
lbragstadit's like a "go baby go" upgrade button for your cloud16:33
*** tsufiev has joined #openstack-keystone16:37
*** zxy has quit IRC16:39
lbragstaddoes anyone here know if they will be in Sydney yet?16:40
lbragstadcc cmurphy kmalloc knikolla gagehugo breton hrybacki ayoung samueldmq ^16:41
lbragstadraildo: ^16:41
knikollaI most probably will be.16:41
hrybackilbragstad: I don't think I'm budgeted to go, no. Ayoung probably won't be going either16:42
lbragstadack - i understand it's pretty early to be asking that question16:42
raildolbragstad, I had one talk approved but I'm not sure that I'll have budget to go, so I think that I'm in the maybe section16:44
*** sjain has quit IRC16:44
lbragstadraildo: ack16:45
lbragstadi'll follow up after the PTG as well16:45
cmurphyboth my talks were accepted so strong possibility16:46
lbragstadgood deal16:46
gagehugolbragstad I highly doubt I will be16:47
gagehugobut it's not 100% decided yet16:47
lbragstadgagehugo: do you know if/when you'll have a for sure answer </loadedquestion>16:48
*** sjain has joined #openstack-keystone16:48
gagehugoheh16:48
knikollaMy talk wasn't approved yet again, but I should be fine to go. Will confirm soon.16:48
gagehugoI can double check tomorrow16:48
lbragstadok - we can discuss more in Denver, too16:48
lbragstadi just wanted to get feelers out there16:48
gagehugoyeah my talk wasn't approved either16:49
*** links has joined #openstack-keystone16:53
ayoungI am not going to Sydney.16:54
lbragstadayoung: :(16:55
lbragstadwell - jamielennox better be there16:56
ayoungI'm not sure if anyone representing the Identity side of RH is going. rcrit, who was doing the Novajoin stuff is headed back to the IPA project to take back over techlead.16:56
lbragstadah16:56
ayoungjamielennox has been working for IBM for several years now.  But, yeah.16:56
*** sjain has quit IRC17:00
*** rcernin has joined #openstack-keystone17:05
*** links has quit IRC17:06
*** eandersson has joined #openstack-keystone17:09
kmalloclbragstad: I will not be in syd17:11
kmallocUnless something massive changes.17:12
bretoni will not be either17:12
*** mjax has joined #openstack-keystone17:13
*** markvoelker has quit IRC17:18
samueldmqlbragstad: I'm with the majority: not sure yet. I am expecting to be approved to go though17:22
*** harlowja has joined #openstack-keystone17:29
*** mvk_ has joined #openstack-keystone17:36
*** edmondsw has joined #openstack-keystone17:39
*** mkrcmari__ has quit IRC17:39
*** edmondsw has quit IRC17:43
*** ioggstream has quit IRC17:43
*** mkrcmari__ has joined #openstack-keystone17:47
*** mvk_ has quit IRC17:50
*** markvoelker has joined #openstack-keystone17:50
*** mvk has joined #openstack-keystone17:51
*** edmondsw has joined #openstack-keystone17:52
*** mvk_ has joined #openstack-keystone17:53
*** mkrcmari__ has quit IRC17:53
*** mvk has quit IRC17:55
*** aojea has joined #openstack-keystone18:18
*** aojea has quit IRC18:23
*** dave-mccowan has quit IRC18:30
*** catintheroof has joined #openstack-keystone18:32
*** dave-mccowan has joined #openstack-keystone18:53
cfriesen_Has anyone ever considered extending the API to deal more efficiently with many regions?  ie adding some optional parameters to the initial authorization such that the returned endpoints correspond only to a particular region (and maybe service, while we're at it)?   Otherwise I could see the endpoint list getting very long if there are many regions.18:57
lbragstadcfriesen_: yeah - that'd be an interesting discussion to have19:00
lbragstadcfriesen_: I haven't heard of anyone doing that - at least to my knowledge19:00
cfriesen_lbragstat: I'll be at the PTG, if anyone's interested.  We're looking at something that could involve 20+ regions, so the number of endpoints starts to add up.19:02
cfriesen_oops, spelling19:02
lbragstadcfriesen_: that's a lot of regions19:03
lbragstadi'm not sure we've had someone deploy keystone across that many regions before19:03
lbragstadcfriesen_: are you using sql for the backend?19:03
cfriesen_lbragstad: yes, Postgres19:04
*** raildo has quit IRC19:04
cfriesen_currently, anyway19:04
lbragstadcfriesen_: are you replicating it successfully across that many regions?19:04
cfriesen_lbragstad: still in design phase.  are you anticipating issues?19:05
lbragstadcfriesen_: well - the last i heard, people hit issues scaling keystone across that many regions19:06
lbragstadbut.. that was also before we implemented non-persistent tokens19:06
lbragstadwhich accounted for nearly all replication/backend traffic19:06
cfriesen_lbragstad: we're not expecting each region to be all that big, would that help?19:06
lbragstadoh - i'm sure that will have an impact19:07
lbragstadthe biggest thing we noticed in any replicated identity setup was the amount of traffic that needed to be sync'd19:07
lbragstadand syncing globally can get expensive19:07
lbragstadso - removing the need to write tokens to a persistent storage layer was a big win in that regard19:08
lbragstadbut - a lot has changed from when i last heard of someone scaling keystone into that many regions19:09
lbragstadso any information based on those previous attempts are probably irrelevant19:09
lbragstads/are/is/19:09
cfriesen_lbragstad: thanks for the info19:10
lbragstadcfriesen_: anytime - i'll be at the PTG19:10
lbragstadhappy to sit down and talk about what you're going for19:10
cfriesen_sounds good19:10
*** raildo has joined #openstack-keystone19:13
*** catintheroof has quit IRC19:17
*** aojea has joined #openstack-keystone19:20
*** lucasxu has quit IRC19:23
*** aojea has quit IRC19:24
*** lucasxu has joined #openstack-keystone19:25
*** ducttape_ has quit IRC19:26
*** ducttape_ has joined #openstack-keystone19:27
*** mrhillsman has quit IRC19:43
*** mrhillsman has joined #openstack-keystone19:47
mjaxlbragstad: Trying to get two different domains to use very similar identity backend drivers, with the difference being how they store the user in the database, and how they authenticate users. Problem is, they both use the same sql tables and I get an unexpected error preventing things from working on the server.19:49
mjaxWorks fine if I get rid of the sql session calls in the 2nd driver, but I want to inherit sql.py to override 1 or 2 methods19:50
mjaxany idea why this is happening or workarounds that I could employ?19:51
*** simondodsley has joined #openstack-keystone19:56
*** gyee has quit IRC20:26
*** ayoung has quit IRC20:35
lbragstadmjax: interesting - so you want to use different sql drivers but you want them to read/write to the same sql store for users?20:41
mjaxyea20:41
mjaxlbragstad: do you think it's possible?20:43
*** openstackgerrit has joined #openstack-keystone20:43
openstackgerritJaewoo Park proposed openstack/keystone master: WIP: Extend comparator support for project list by tags  https://review.openstack.org/49597820:43
lbragstadmjax: does each sql driver have to list users maintained by the other?20:43
*** swain has quit IRC20:45
mjaxnope, I believe just the ones that they've controlled should be fine. Are you thinking of having a separate stores for each driver?20:45
*** edmondsw_ has joined #openstack-keystone20:47
*** rcernin has quit IRC20:47
*** edmondsw has quit IRC20:49
*** gagehugo has quit IRC20:50
lbragstadmjax: might make managing the conflict easier20:51
* lbragstad shrugs20:51
mjaxwould that affect the use of the resource, and assignment drivers that also make use of sql stores?20:53
lbragstadmjax: you can also use hybrid properties to in the event a driver needs to access users stored in a different sql table20:53
*** lucasxu has quit IRC20:55
*** gyee has joined #openstack-keystone20:56
lbragstadmjax: does https://docs.openstack.org/keystone/latest/admin/identity-domain-specific-config.html help or apply to your situation?20:57
mjaxi've been following that to get the domain specific config files in order, but it didn't help me with my specific problem of sql stores20:58
*** thorst has quit IRC21:04
*** edmondsw_ has quit IRC21:04
openstackgerritJaewoo Park proposed openstack/keystone master: WIP: Extend comparator support for project list by tags  https://review.openstack.org/49597821:12
*** raildo has quit IRC21:52
*** ayoung has joined #openstack-keystone22:02
*** aojea has joined #openstack-keystone22:04
*** thorst has joined #openstack-keystone22:35
*** sbezverk has quit IRC22:39
* kmalloc sings loudly22:39
*** nkinder has quit IRC22:49
*** thorst has quit IRC22:53
*** wasmum has joined #openstack-keystone23:03
*** aojea has quit IRC23:16
*** catintheroof has joined #openstack-keystone23:29
*** thorst has joined #openstack-keystone23:33
*** thorst has quit IRC23:33
*** gyee has quit IRC23:47
jamielennoxshut up with that racket23:51
jamielennoxpeople are trying to concentrate23:51
*** thorst has joined #openstack-keystone23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!