Monday, 2017-10-02

*** lnxnut has quit IRC00:07
*** markvoelker has joined #openstack-keystone00:12
*** dave-mccowan has joined #openstack-keystone00:14
*** jamesbenson has joined #openstack-keystone00:34
*** jamesbenson has quit IRC00:39
*** edmondsw has joined #openstack-keystone00:39
*** edmondsw has quit IRC00:44
*** markvoelker has quit IRC00:45
*** NM has joined #openstack-keystone00:49
*** NM has quit IRC01:21
*** dave-mccowan has quit IRC01:30
*** dave-mccowan has joined #openstack-keystone01:32
*** lnxnut has joined #openstack-keystone01:34
*** edmondsw has joined #openstack-keystone01:37
*** edmondsw has quit IRC01:41
*** markvoelker has joined #openstack-keystone01:42
openstackgerritDavanum Srinivas (dims) proposed openstack/oslo.policy master: http/https check rules as stevedore extensions  https://review.openstack.org/50709801:45
*** dave-mcc_ has joined #openstack-keystone01:48
*** dave-mccowan has quit IRC01:51
*** panbalag has joined #openstack-keystone01:55
*** dave-mccowan has joined #openstack-keystone01:56
*** dave-mcc_ has quit IRC01:59
*** lnxnut has quit IRC02:01
*** efried_thbagh has quit IRC02:07
*** markvoelker has quit IRC02:16
*** aojea has joined #openstack-keystone02:16
*** dave-mcc_ has joined #openstack-keystone02:18
*** dave-mccowan has quit IRC02:18
*** aojea has quit IRC02:20
*** gyee has joined #openstack-keystone02:27
*** gyee has quit IRC02:38
*** dave-mcc_ has quit IRC02:55
*** markvoelker has joined #openstack-keystone03:13
*** nicolasbock_ has quit IRC03:16
*** edmondsw has joined #openstack-keystone03:25
*** lnxnut has joined #openstack-keystone03:28
*** edmondsw has quit IRC03:30
*** markvoelker has quit IRC03:46
*** links has joined #openstack-keystone03:48
*** panbalag has left #openstack-keystone03:51
*** lnxnut has quit IRC03:55
*** jaosorior has joined #openstack-keystone04:19
*** bigjools_ has quit IRC04:22
*** tonytan4ever has quit IRC04:33
*** tonytan4ever has joined #openstack-keystone04:33
*** tonytan4ever has quit IRC04:33
*** bigjools has joined #openstack-keystone04:36
*** markvoelker has joined #openstack-keystone04:43
*** edmondsw has joined #openstack-keystone05:13
*** markvoelker has quit IRC05:17
*** edmondsw has quit IRC05:18
*** lnxnut has joined #openstack-keystone05:22
*** tonytan4ever has joined #openstack-keystone05:34
*** tonytan4ever has quit IRC05:38
*** thorst has joined #openstack-keystone05:41
*** lnxnut has quit IRC05:50
*** thorst has quit IRC05:51
*** thorst has joined #openstack-keystone05:51
*** thorst has quit IRC05:52
*** aojea_ has joined #openstack-keystone06:01
*** aojea_ has quit IRC06:02
*** markvoelker has joined #openstack-keystone06:14
*** josecastroleon has joined #openstack-keystone06:23
*** cfriesen has quit IRC06:25
*** markvoelker has quit IRC06:47
*** edmondsw has joined #openstack-keystone06:59
*** rcernin has joined #openstack-keystone07:04
*** edmondsw has quit IRC07:04
*** pcaruana has joined #openstack-keystone07:08
*** lnxnut has joined #openstack-keystone07:17
*** tesseract has joined #openstack-keystone07:22
*** lnxnut has quit IRC07:44
*** markvoelker has joined #openstack-keystone07:44
*** lnxnut has joined #openstack-keystone08:11
*** lnxnut has quit IRC08:15
*** namnh has joined #openstack-keystone08:16
*** markvoelker has quit IRC08:18
*** belmoreira has joined #openstack-keystone08:32
*** mdavidson has joined #openstack-keystone08:37
*** edmondsw has joined #openstack-keystone08:48
*** edmondsw has quit IRC08:52
*** ioggstream has joined #openstack-keystone08:56
*** josecastroleon has quit IRC08:56
*** josecastroleon has joined #openstack-keystone09:00
*** lnxnut has joined #openstack-keystone09:13
*** markvoelker has joined #openstack-keystone09:15
*** marst has quit IRC09:19
*** marst has joined #openstack-keystone09:23
*** lnxnut has quit IRC09:39
*** josecastroleon has quit IRC09:45
*** markvoelker has quit IRC09:48
*** belmoreira has quit IRC09:49
*** josecastroleon has joined #openstack-keystone09:50
*** josecastroleon has quit IRC09:54
*** josecastroleon has joined #openstack-keystone09:58
*** lnxnut has joined #openstack-keystone10:07
*** josecastroleon has quit IRC10:08
*** lxnch has joined #openstack-keystone10:11
*** lnxnut has quit IRC10:11
*** namnh has quit IRC10:23
*** edmondsw has joined #openstack-keystone10:36
*** edmondsw has quit IRC10:40
*** markvoelker has joined #openstack-keystone10:45
*** nicolasbock_ has joined #openstack-keystone11:01
*** ioggstream has quit IRC11:02
*** dave-mccowan has joined #openstack-keystone11:07
*** lnxnut has joined #openstack-keystone11:08
*** nicolasbock_ has quit IRC11:10
*** edmondsw has joined #openstack-keystone11:13
*** edmondsw has quit IRC11:14
*** sapd__ has quit IRC11:17
*** sapd__ has joined #openstack-keystone11:18
*** markvoelker has quit IRC11:19
*** nicolasbock_ has joined #openstack-keystone11:23
*** belmoreira has joined #openstack-keystone11:32
*** lnxnut has quit IRC11:36
*** raildo has joined #openstack-keystone11:57
*** lnxnut has joined #openstack-keystone12:03
*** catintheroof has joined #openstack-keystone12:06
*** markvoelker has joined #openstack-keystone12:06
*** catinthe_ has joined #openstack-keystone12:07
*** catintheroof has quit IRC12:08
*** edmondsw has joined #openstack-keystone12:09
*** tonytan4ever has joined #openstack-keystone12:19
*** lnxnut has quit IRC12:21
*** tonytan4ever has quit IRC12:24
*** NM has joined #openstack-keystone12:35
*** panbalag has joined #openstack-keystone12:51
*** tonytan4ever has joined #openstack-keystone12:52
*** panbalag has left #openstack-keystone12:53
*** panbalag has joined #openstack-keystone12:54
*** links has quit IRC12:59
*** thorst has joined #openstack-keystone13:02
*** rmascena has joined #openstack-keystone13:02
*** jmlowe has joined #openstack-keystone13:04
*** raildo has quit IRC13:05
*** lbragstad has joined #openstack-keystone13:07
*** ChanServ sets mode: +o lbragstad13:07
*** erlon has joined #openstack-keystone13:11
*** rmascena is now known as raildo13:11
*** thorst has quit IRC13:17
*** lnxnut has joined #openstack-keystone13:19
openstackgerritColleen Murphy proposed openstack/keystonemiddleware master: Rename auth_uri to www_authenticate_uri  https://review.openstack.org/50852213:19
*** josecastroleon has joined #openstack-keystone13:21
*** josecastroleon has quit IRC13:25
*** panbalag1 has joined #openstack-keystone13:27
*** thorst has joined #openstack-keystone13:29
*** panbalag has quit IRC13:30
*** belmoreira has quit IRC13:31
*** panbalag1 has left #openstack-keystone13:31
*** belmoreira has joined #openstack-keystone13:33
*** lucasxu has joined #openstack-keystone13:34
*** alex_xu has quit IRC13:35
*** alex_xu has joined #openstack-keystone13:38
*** Anticimex has quit IRC13:40
*** Anticimex has joined #openstack-keystone13:41
*** thorst has quit IRC13:45
*** lnxnut has quit IRC13:45
*** thorst has joined #openstack-keystone13:47
*** thorst has quit IRC13:48
*** thorst has joined #openstack-keystone13:48
*** efried has joined #openstack-keystone13:54
*** panbalag has joined #openstack-keystone13:55
*** panbalag has quit IRC13:55
*** panbalag has joined #openstack-keystone13:57
*** cfriesen has joined #openstack-keystone13:59
*** thorst has quit IRC13:59
*** thorst has joined #openstack-keystone14:01
efriedcmurphy To answer your question: https://review.openstack.org/#/c/490057/21/nova/utils.py14:03
*** thorst has quit IRC14:04
efriedcmurphy Couple months ago I tried solving the problem with this, which you can see is in the same spirit (adding those methods to a baser class): https://review.openstack.org/#/c/491203/14:04
efriedThat ^ didn't work at all :(14:04
*** thorst has joined #openstack-keystone14:04
cmurphyefried: okay I guess that makes sense14:25
*** spilla has joined #openstack-keystone14:31
*** belmoreira has quit IRC14:36
*** belmoreira has joined #openstack-keystone14:38
*** jamesbenson has joined #openstack-keystone14:38
*** jamesbenson has quit IRC14:43
*** tesseract has quit IRC14:46
*** panbalag has left #openstack-keystone14:51
*** panbalag has joined #openstack-keystone14:52
*** gyee has joined #openstack-keystone14:53
*** josecastroleon has joined #openstack-keystone14:54
*** josecastroleon has quit IRC14:54
*** josecastroleon has joined #openstack-keystone14:56
*** josecastroleon has quit IRC14:56
*** mvk has quit IRC15:06
*** tesseract has joined #openstack-keystone15:07
*** jamesbenson has joined #openstack-keystone15:11
*** lnxnut has joined #openstack-keystone15:13
*** lkwan_ has joined #openstack-keystone15:23
lkwan_quit15:23
lkwan_exit15:23
*** lkwan_ has quit IRC15:23
*** spilla has quit IRC15:24
*** lkwan_ has joined #openstack-keystone15:24
*** pcaruana has quit IRC15:27
*** mwheckmann has joined #openstack-keystone15:28
*** lkwan__ has joined #openstack-keystone15:29
*** lkwan__ has quit IRC15:30
*** lkwan__ has joined #openstack-keystone15:30
*** lkwan__ has quit IRC15:31
*** lkwan_ has quit IRC15:31
*** dave-mccowan has quit IRC15:32
*** lnxnut has quit IRC15:32
*** spilla_ has joined #openstack-keystone15:32
*** dave-mcc_ has joined #openstack-keystone15:32
*** ioggstream has joined #openstack-keystone15:32
*** LouieKwan has joined #openstack-keystone15:33
*** lkwan_ has joined #openstack-keystone15:36
*** lkwan_ has quit IRC15:37
*** rcernin has quit IRC15:41
*** jistr is now known as jistr|off|mtg15:48
*** jistr|off|mtg is now known as jistr15:49
*** thorst has quit IRC15:49
*** spilla_ is now known as spilla15:49
*** lkwan_ has joined #openstack-keystone15:52
*** lkwan_ has quit IRC15:53
*** lkwan_ has joined #openstack-keystone15:53
*** LouieKwan has quit IRC15:53
*** LouieKwan has joined #openstack-keystone15:54
*** panbalag has quit IRC15:59
*** jmlowe has quit IRC16:00
*** chlong has joined #openstack-keystone16:06
*** thorst has joined #openstack-keystone16:10
*** thorst has quit IRC16:13
*** belmoreira has quit IRC16:13
*** panbalag has joined #openstack-keystone16:14
*** raildo has quit IRC16:15
*** raildo has joined #openstack-keystone16:16
*** raildo has quit IRC16:18
*** raildo has joined #openstack-keystone16:19
*** LouieKwan has quit IRC16:25
*** lkwan_ has quit IRC16:26
*** lkwan has joined #openstack-keystone16:28
*** lkwan has quit IRC16:29
*** ioggstream has quit IRC16:29
*** thorst has joined #openstack-keystone16:29
*** lnxnut has joined #openstack-keystone16:30
*** lkwan has joined #openstack-keystone16:30
*** thorst has quit IRC16:30
*** lkwan has left #openstack-keystone16:31
*** NM has quit IRC16:32
*** thorst has joined #openstack-keystone16:33
*** thorst has quit IRC16:33
*** efried is now known as efried_afk16:36
*** NM has joined #openstack-keystone16:36
*** spilla has quit IRC16:37
*** thorst has joined #openstack-keystone16:40
*** NM has quit IRC16:41
*** lnxnut has quit IRC16:43
*** Guest98091 has joined #openstack-keystone16:44
*** thorst has quit IRC16:44
*** dave-mcc_ has quit IRC16:46
*** jamesbenson has quit IRC16:53
*** jamesbenson has joined #openstack-keystone16:54
*** thorst has joined #openstack-keystone16:57
*** chlong has quit IRC16:58
*** Guest98091 has quit IRC16:58
*** raildo has quit IRC16:59
*** dklyle has joined #openstack-keystone17:00
*** panbalag1 has joined #openstack-keystone17:01
*** jamesbenson has quit IRC17:01
*** thorst has quit IRC17:01
*** raildo has joined #openstack-keystone17:01
*** david-lyle has quit IRC17:02
*** jamesbenson has joined #openstack-keystone17:02
*** panbalag has quit IRC17:02
*** mwheckmann has quit IRC17:05
*** rmascena has joined #openstack-keystone17:09
*** rmascena has quit IRC17:09
*** jmlowe has joined #openstack-keystone17:09
*** harlowja has joined #openstack-keystone17:10
*** chlong has joined #openstack-keystone17:15
*** efried_afk is now known as efried17:19
*** thorst has joined #openstack-keystone17:23
*** mwheckmann has joined #openstack-keystone17:23
*** mwheckmann has quit IRC17:26
*** chlong has quit IRC17:30
*** chlong has joined #openstack-keystone17:31
*** Loiuek has joined #openstack-keystone17:35
*** aahh has joined #openstack-keystone17:38
*** Loiuek has quit IRC17:39
*** lnxnut has joined #openstack-keystone17:40
openstackgerritColleen Murphy proposed openstack/keystonemiddleware master: Rename auth_uri to www_authenticate_uri  https://review.openstack.org/50852217:41
*** Loiuek has joined #openstack-keystone17:47
*** panbalag1 has quit IRC17:47
*** lnxnut has quit IRC17:55
*** tesseract has quit IRC17:55
*** jmlowe has quit IRC17:58
*** jmlowe has joined #openstack-keystone17:59
*** thorst_ has joined #openstack-keystone18:01
kmalloco/18:02
*** thorst has quit IRC18:03
*** dklyle is now known as david-lyle18:06
*** jmlowe has quit IRC18:09
lbragstado/18:09
*** Loiuek has quit IRC18:10
*** jmlowe has joined #openstack-keystone18:10
*** NM has joined #openstack-keystone18:15
*** thorst_ has quit IRC18:15
*** jmlowe has quit IRC18:17
*** jmlowe has joined #openstack-keystone18:21
*** itlinux has joined #openstack-keystone18:28
openstackgerritColleen Murphy proposed openstack/keystonemiddleware master: Rename auth_uri to www_authenticate_uri  https://review.openstack.org/50852218:33
*** jmlowe has quit IRC18:39
*** jmlowe has joined #openstack-keystone18:39
*** chlong has quit IRC18:45
*** thorst has joined #openstack-keystone18:46
*** thorst has quit IRC18:46
*** chlong has joined #openstack-keystone18:46
*** thorst has joined #openstack-keystone18:48
*** lnxnut has joined #openstack-keystone18:52
*** rcernin has joined #openstack-keystone18:54
*** dave-mccowan has joined #openstack-keystone18:59
*** aahh has quit IRC19:04
*** lnxnut has quit IRC19:05
*** chlong_ has joined #openstack-keystone19:09
*** jmlowe has quit IRC19:15
*** jmlowe has joined #openstack-keystone19:22
*** itlinux has quit IRC19:26
*** jmlowe has quit IRC19:27
*** jmlowe has joined #openstack-keystone19:34
*** knasim-wrs has joined #openstack-keystone19:34
knasim-wrshi, just reading up on Pike Rel Notes... says admin_token is eventually going away19:35
knasim-wrswhat are the alternatives to bootstrap then?19:35
*** thorst has quit IRC19:41
gagehugoknasim-wrs https://docs.openstack.org/keystone/latest/admin/identity-bootstrap.html19:43
gagehugousing "keystone-manage bootstrap"19:44
*** catinthe_ has quit IRC19:47
*** catintheroof has joined #openstack-keystone19:48
*** jmlowe has quit IRC19:51
*** jmlowe has joined #openstack-keystone19:53
knasim-wrsthanks gage19:55
*** thorst has joined #openstack-keystone19:56
openstackgerritGage Hugo proposed openstack/keystone master: Add database migration for project tags  https://review.openstack.org/48445619:57
*** knasim-wrs has quit IRC19:59
*** thorst has quit IRC20:00
*** lnxnut has joined #openstack-keystone20:03
*** dave-mcc_ has joined #openstack-keystone20:13
*** itlinux has joined #openstack-keystone20:14
*** dave-mccowan has quit IRC20:16
openstackgerritGage Hugo proposed openstack/keystone master: Implement backend logic for project tags  https://review.openstack.org/49972620:16
*** dave-mcc_ is now known as dave-mccowan20:17
*** lnxnut has quit IRC20:21
itlinuxhello guys.. if I have keystone on my OOO and default is uuid.. want to change to fernet.. and later I want to add a new node.. will that break the  process? Thanks! I asked OOO they said to ask here!20:33
*** thorst has joined #openstack-keystone20:37
lbragstaditlinux: you'll have an extra step to do when you add a new node to the deployment20:40
lbragstaditlinux: you'll need to make sure you sync the key repository (/etc/keystone/fernet-keys/) from the existing keystone nodes in the deployment to the new node20:41
lbragstadthat will ensure the new node is able to validate tokens issued by the other nodes20:41
itlinuxok20:42
itlinuxthanks @lbragstad:20:42
lbragstaditlinux: we walked through an example in this presentation https://www.youtube.com/watch?v=702SRZHdNW8&t=2s20:42
lbragstadthat might help you visualize things a bit better20:42
itlinuxk20:42
itlinuxis it way faster than UUID?20:43
lbragstaditlinux: if you have caching configured, yes20:43
itlinuxyes..20:43
lbragstadthe performance will be better if not the same20:43
lbragstadthan UUID20:43
itlinuxI have 3 controllers with memcached20:43
lbragstadbut - you'll get the added benefit of not having to wait for backend replication in order to validate tokens across the cluster20:44
itlinuxk20:44
itlinuxso it works similar to the PKI..20:44
lbragstadwith UUID, you'd be constrainted by SQL in that case, because keystone-1 creates the token and has to replicate it20:44
lbragstadkinda, yeah20:44
itlinuxk20:44
lbragstadexcept fernet tokens can't be validated offline20:44
itlinuxok20:45
lbragstadwith a fernet token, you can create it on one node and immediately validate it against another, so long as both keystone nodes share the same key repository (they can decrypt each others tokens)20:45
lbragstad(e.g. i get a token from my Chicago datacenter and I can immediately use it in Sydney because I don't have to wait for data replication - since fernet isn't persisted to the SQL database)20:46
itlinuxyes I remember while back when AD was the PTL.. a20:46
*** mvk has joined #openstack-keystone20:59
*** jmlowe has quit IRC21:00
*** dave-mccowan has quit IRC21:01
*** raildo has quit IRC21:08
*** catintheroof has quit IRC21:14
*** edmondsw has quit IRC21:14
*** lnxnut has joined #openstack-keystone21:19
*** chlong_ has quit IRC21:20
*** chlong has quit IRC21:20
*** NM has quit IRC21:30
*** lnxnut has quit IRC21:31
*** itlinux has quit IRC21:36
*** itlinux has joined #openstack-keystone21:37
openstackgerritJamie Lennox proposed openstack/keystonemiddleware master: Issue a deprecation warning for validating PKI tokens  https://review.openstack.org/50863121:46
*** lucasxu has quit IRC21:47
*** sapd_ has joined #openstack-keystone21:53
*** sapd__ has quit IRC21:54
*** jamesbenson has quit IRC21:55
*** itlinux has quit IRC21:56
*** rcernin has quit IRC22:02
*** thorst has quit IRC22:15
*** thorst has joined #openstack-keystone22:18
*** thorst has quit IRC22:22
*** lnxnut has joined #openstack-keystone22:28
*** thorst has joined #openstack-keystone22:31
*** thorst has quit IRC22:35
*** lbragstad has quit IRC22:36
*** lnxnut has quit IRC22:38
*** nicolasbock_ has quit IRC22:45
openstackgerritjessegler proposed openstack/python-keystoneclient master: Add project tags to keystoneclient  https://review.openstack.org/48122322:48
openstackgerritjessegler proposed openstack/python-keystoneclient master: Add project tags to keystoneclient  https://review.openstack.org/48122322:52
*** jmlowe has joined #openstack-keystone23:09
*** jmlowe has quit IRC23:20
*** jmlowe has joined #openstack-keystone23:31
*** gyee has quit IRC23:31
*** jamesbenson has joined #openstack-keystone23:33
*** jmlowe has quit IRC23:34
*** lnxnut has joined #openstack-keystone23:36
*** jamesbenson has quit IRC23:37
*** jmlowe has joined #openstack-keystone23:41
*** lnxnut has quit IRC23:45

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!