Monday, 2017-10-09

*** spzala has quit IRC00:24
*** dave-mccowan has joined #openstack-keystone00:36
*** edmondsw has joined #openstack-keystone01:24
*** edmondsw has quit IRC01:29
*** Shunli has joined #openstack-keystone01:40
*** dave-mccowan has quit IRC01:49
*** markvoelker has quit IRC01:54
openstackgerritHongbin Lu proposed openstack/keystone master: Clarify the environment scripts locations  https://review.openstack.org/51038902:01
*** zxy has joined #openstack-keystone02:03
*** prashkre has joined #openstack-keystone02:16
*** namnh has joined #openstack-keystone02:24
*** prashkre has quit IRC03:30
*** prashkre has joined #openstack-keystone03:36
*** links has joined #openstack-keystone03:50
*** markvoelker has joined #openstack-keystone03:55
*** dikonoor has joined #openstack-keystone04:00
*** jaosorior has joined #openstack-keystone04:07
*** zsli_ has joined #openstack-keystone04:27
*** markvoelker has quit IRC04:28
*** Shunli has quit IRC04:29
*** prashkre has quit IRC04:32
*** Dinesh_Bhor has joined #openstack-keystone04:48
*** edmondsw has joined #openstack-keystone05:00
*** edmondsw has quit IRC05:05
*** markvoelker has joined #openstack-keystone05:26
*** prashkre has joined #openstack-keystone05:28
*** spectr has joined #openstack-keystone05:54
*** markvoelker has quit IRC05:58
openstackgerritzhengliuyang proposed openstack/keystone master: Add explain of mapping group attribute  https://review.openstack.org/49376506:05
*** prashkre_ has joined #openstack-keystone06:08
*** prashkre has quit IRC06:11
*** belmoreira has joined #openstack-keystone06:18
*** josecastroleon has joined #openstack-keystone06:25
*** rcernin has joined #openstack-keystone06:40
*** prashkre_ has quit IRC06:40
*** prashkre_ has joined #openstack-keystone06:41
openstackgerritzhengliuyang proposed openstack/keystone master: Reorganize api-ref: v3 users  https://review.openstack.org/50699406:41
*** prashkre_ has quit IRC06:52
*** markvoelker has joined #openstack-keystone06:55
*** pcaruana has joined #openstack-keystone07:08
*** ioggstream has joined #openstack-keystone07:15
*** edmondsw has joined #openstack-keystone07:18
*** edmondsw has quit IRC07:22
*** markvoelker has quit IRC07:29
*** magicboiz has joined #openstack-keystone07:31
*** hoonetorg has quit IRC07:33
*** hoonetorg has joined #openstack-keystone07:46
*** markvoelker has joined #openstack-keystone08:26
*** d0ugal_ has quit IRC08:31
*** d0ugal has joined #openstack-keystone08:31
*** d0ugal has quit IRC08:31
*** d0ugal has joined #openstack-keystone08:31
*** edmondsw has joined #openstack-keystone08:39
*** edmondsw has quit IRC08:43
*** markvoelker has quit IRC08:59
*** zsli_ has quit IRC09:29
*** markvoelker has joined #openstack-keystone09:56
*** mvk has quit IRC10:00
*** mvk has joined #openstack-keystone10:11
*** edmondsw has joined #openstack-keystone10:28
*** namnh has quit IRC10:30
*** markvoelker has quit IRC10:30
*** edmondsw has quit IRC10:32
*** raildo has joined #openstack-keystone10:58
*** magicboiz has quit IRC11:00
*** magicboiz has joined #openstack-keystone11:00
*** nicolasbock has joined #openstack-keystone11:01
*** jaosorior has quit IRC11:05
*** jaosorior has joined #openstack-keystone11:05
*** edmondsw has joined #openstack-keystone11:10
*** edmondsw has quit IRC11:10
*** nicolasbock_ has joined #openstack-keystone11:13
*** nicolasbock has quit IRC11:16
*** markvoelker has joined #openstack-keystone11:27
*** raildo has quit IRC11:33
*** raildo has joined #openstack-keystone11:33
*** magicboiz has quit IRC11:52
*** dave-mccowan has joined #openstack-keystone11:53
*** dave-mcc_ has joined #openstack-keystone11:55
*** josecastroleon has quit IRC11:58
*** dave-mccowan has quit IRC11:58
*** markvoelker has quit IRC12:00
*** edmondsw has joined #openstack-keystone12:05
*** jdennis has quit IRC12:13
*** clenimar has joined #openstack-keystone12:14
*** markvoelker has joined #openstack-keystone12:21
*** hoonetorg has quit IRC12:23
*** magicboiz has joined #openstack-keystone12:23
*** jdennis has joined #openstack-keystone12:23
*** iurygregory has joined #openstack-keystone12:32
*** raildo has quit IRC12:32
*** raildo has joined #openstack-keystone12:36
*** chlong has quit IRC12:37
*** hoonetorg has joined #openstack-keystone12:43
*** catintheroof has joined #openstack-keystone12:43
*** magicboiz has quit IRC12:49
*** panbalag has joined #openstack-keystone12:50
*** panbalag has left #openstack-keystone12:50
*** raildo has quit IRC12:58
*** magicboiz has joined #openstack-keystone13:05
*** raildo has joined #openstack-keystone13:12
*** jdwidari has joined #openstack-keystone13:22
*** jdwidari has quit IRC13:23
*** lbragstad has joined #openstack-keystone13:26
*** ChanServ sets mode: +o lbragstad13:26
*** zxy has quit IRC13:29
*** zxy has joined #openstack-keystone13:30
*** belmoreira has quit IRC13:30
*** belmoreira has joined #openstack-keystone13:32
openstackgerritDoug Hellmann proposed openstack/oslo.policy master: expand type documentation for Enforcer arguments  https://review.openstack.org/51056913:33
*** zxy has quit IRC13:33
*** zxy has joined #openstack-keystone13:34
lbragstaddims: you were having issues with ^ with http_check, weren't you?13:35
dims@lbragstad : i guess i was coding defensively. that helps :)13:35
cmurphylbragstad: did you get an onboarding slot for sydney? http://lists.openstack.org/pipermail/openstack-dev/2017-October/123206.html13:38
diablo_rojo_phoncmurphy: he did :)13:39
cmurphydiablo_rojo_phon: oh good :)13:39
*** dgonzalez has left #openstack-keystone13:40
lbragstadcmurphy: diablo_rojo_phon beat me to it!13:40
*** jdwidari has joined #openstack-keystone13:41
*** zxy has quit IRC13:43
*** McClymontS has quit IRC13:52
*** kashyap has joined #openstack-keystone14:01
kashyapHey people, wonder if anyone has hints about why Keystone fails to start during a DevStack `make stack` ("Pike", _not_ Git Master) -- http://paste.openstack.org/show/623107/14:02
*** links has quit IRC14:03
lbragstadkashyap: maybe check apache/uwsgi logs?14:05
lbragstadThat error looks like it's specific to the webserver not being able to stand up keystone14:05
cmurphykashyap: does `systemctl status devstack@keystone` or `journalctl -u devstack@keystone` show anything interesting?14:05
kashyaplbragstad: Good point, was just looking...14:05
kashyapcmurphy: Checking14:06
kashyapcmurphy: There's no systemd service yet, probably because `make stack` is still in progress?14:07
cmurphyoh hrm14:07
*** chlong has joined #openstack-keystone14:08
*** david-lyle has joined #openstack-keystone14:08
kashyap$ pwd14:09
kashyap/var/log/httpd14:09
kashyap$ grep -r -i keystone14:09
kashyaplbragstad: I don't see anything related to keystone in httpd; or am I doing the wrong `grep`?14:09
*** jmlowe has joined #openstack-keystone14:10
* kashyap gets the fulll devstacklog.txt14:12
kashyapIf anyone likes to take a gander: https://kashyapc.fedorapeople.org/temp/Failing-Pike-devstacklog.txt14:15
lbragstadkashyap: looks like you're using uwsgi14:19
lbragstadcan you check those logs?14:19
* kashyap goes to look for it14:19
lbragstadthey might no say keystone in them, but they might tell you if something is wrong with the configuration14:19
kashyaplbragstad: Where would the 'uwsgi' logs be located?14:20
kashyapI don't see them in /var/log14:20
kashyapI'm just using whatever DevStack gives me; I didn't configure anything specific14:21
*** chlong_ has joined #openstack-keystone14:21
kashyapJust plain vanilla DevStack w/ Neutron.  Pike branch on Fedora-26.14:21
cmurphylooks like echo 'logfile //home/stack/src/cloud/data/logs/keystone.log.2017-10-09-091131' ?14:23
lbragstadkashyap: checking my devstack14:23
cmurphyalso looks like it's using screen not systemd so if screen is still running then the output might be there14:24
lbragstadkashyap: i didn't deploy pike, but mine is using apache + uwsgi14:24
kashyapThis is the yak I need to shave before I can try reproducing a Nova Compute bug14:24
kashyapcmurphy: Output of what, sorry?14:24
lbragstadso check /var/log/apache2 ?14:24
* kashyap attaches the `screen` session & sees14:24
cmurphykashyap: of keystone/uwsgi14:24
* kashyap looks 14:24
kashyaplbragstad: Presume you're on Ubuntu?14:25
lbragstadyes14:25
kashyaplbragstad: On Fedora, there's just this:14:25
kashyapls /var/log/httpd/14:25
kashyapaccess_log  error_log  ssl_access_log  ssl_error_log  ssl_request_log14:25
lbragstadtry the error_log14:25
kashyapcmurphy: Yeah, the Keystone `screen` session is there, and I just attched it14:26
kashyapDon't see any failures there14:26
cmurphykashyap: so keystone is actually running then?14:28
kashyaplbragstad: cmurphy: You see anything egregious: http://paste.openstack.org/show/623111/14:28
kashyapcmurphy: Yeah, weirdly enough; I can get evidence of the keystone_log, too14:29
kashyapcmurphy: That's the keystone.log: http://paste.openstack.org/show/623113/14:30
* kashyap is just baffled14:30
*** spectr has quit IRC14:30
cmurphykashyap: huh, so what happens if you try that curl command that devstack was using to check it?14:31
lbragstad++14:31
cmurphy`curl -g -k --noproxy '*' -s -o /dev/null -w '%{http_code}' http://192.169.143.167/identity/v3/`14:31
* kashyap gives it a go14:31
cmurphymaybe without the -s -o /dev/null14:31
kashyapYeah14:32
kashyapOh dear, it's the routing problem:14:32
kashyap$ curl -g -k --noproxy '*' -w '%{http_code}' http://192.169.143.167/identity/v3/14:32
kashyapcurl: (7) Failed to connect to 192.169.143.167 port 80: No route to host14:32
kashyapOh wait, /me thinks he knows his blunder ... let me confirm, then you can shame me14:32
lbragstadlooks like the service isn't running?14:33
*** belmoreira has quit IRC14:33
kashyapDang it!14:33
cmurphyit would be connection refused if the service wasn't running14:33
kashyaplbragstad: cmurphy: I shamefully confess: I was copying local.conf around, and neglected update the HOST_IP :-(14:33
lbragstadoh - good call14:33
cmurphykashyap: haha :)14:33
cmurphykashyap: i was about to start blaming selinux14:33
kashyapSo it's a complete PEBKAC; sorry for taking your time14:33
kashyapcmurphy: Heh, I put it in permissive14:34
cmurphy:)14:34
lbragstadso - yak shaved!14:34
kashyapAt least, talking to you helped to resolve the yak, indeed!14:34
kashyap:-)14:34
kashyapcmurphy++14:34
kashyaplbragstad++14:34
kashyapNo karma bot; hmm.14:34
*** belmoreira has joined #openstack-keystone14:37
*** thorst has joined #openstack-keystone14:49
*** belmoreira has quit IRC14:54
*** gyee has joined #openstack-keystone14:55
*** links has joined #openstack-keystone14:56
kashyaplbragstad: `make unstack` still doesn't "cleanly" seem to remove all traces of Keystone usage of the old IP, any other trick?15:00
kashyaplbragstad: I normally just revert to a sane 'known clean slate' snapshot15:00
lbragstadkashyap: that's a good question - whenever i have issues with devstack i usually just throw it away and start over15:00
lbragstadrestacking should drop the database though15:01
* kashyap throws it away; rule-1: _never_ try to debug DevStack; rule-2: see rule-115:01
lbragstadyeah - pretty much15:01
*** cfriesen has joined #openstack-keystone15:03
*** chlong has quit IRC15:22
*** chlong_ has quit IRC15:22
*** cfriesen has quit IRC15:24
lbragstadsamueldmq: this looks like it's using the same pattern you used for doc stuff - https://review.openstack.org/#/c/506994/215:38
*** mvk has quit IRC15:45
*** catintheroof has quit IRC15:48
openstackgerritHongbin Lu proposed openstack/keystone master: Update the release name in install tutorial  https://review.openstack.org/51035815:54
openstackgerritMerged openstack/oslo.policy master: http/https check rules as stevedore extensions  https://review.openstack.org/50709815:58
openstackgerritDavanum Srinivas (dims) proposed openstack/oslo.policy master: Documentation and release notes for plugins  https://review.openstack.org/51061616:05
*** jmlowe has quit IRC16:10
*** dave-mcc_ is now known as dave-mccowan16:13
*** chlong_ has joined #openstack-keystone16:16
*** chlong has joined #openstack-keystone16:16
*** panbalag has joined #openstack-keystone16:17
*** mvk has joined #openstack-keystone16:26
kmallockashyap: debug... devstack? it's totally doable... but usually i only ever recommend that in the context of the gate16:29
*** pcaruana has quit IRC16:32
* kmalloc waves good morning to everyone16:33
*** jaosorior has quit IRC16:33
*** jaosorior has joined #openstack-keystone16:33
*** panbalag has left #openstack-keystone16:37
*** panbalag has joined #openstack-keystone16:37
*** jaosorior has quit IRC16:38
*** jaosorior has joined #openstack-keystone16:40
*** rcernin has quit IRC16:49
*** ioggstream has quit IRC16:50
*** jaosorior has quit IRC16:53
*** links has quit IRC16:58
*** harlowja has joined #openstack-keystone17:01
*** jdwidari has quit IRC17:03
*** dikonoor has quit IRC17:15
*** lbragstad has quit IRC17:24
*** lbragstad has joined #openstack-keystone17:42
*** ChanServ sets mode: +o lbragstad17:42
*** panbalag has quit IRC17:51
*** Suramya has joined #openstack-keystone17:51
*** thorst has quit IRC17:51
*** jmlowe has joined #openstack-keystone17:57
*** jamesbenson has joined #openstack-keystone17:59
*** aselius has joined #openstack-keystone17:59
*** edmondsw has quit IRC18:00
*** Suramya has quit IRC18:01
*** edmondsw has joined #openstack-keystone18:02
*** oikiki has joined #openstack-keystone18:03
*** thorst has joined #openstack-keystone18:04
openstackgerritDavanum Srinivas (dims) proposed openstack/oslo.policy master: Documentation and release notes for plugins  https://review.openstack.org/51061618:04
*** edmondsw has quit IRC18:06
*** pcaruana has joined #openstack-keystone18:11
*** aahh has joined #openstack-keystone18:11
*** edmondsw has joined #openstack-keystone18:12
aahhhi @lbragstad : updating the project id on the table after the project was created , brings a user authorization problem as the assignment table still has the old id on it. I would like to know how the assignment works and will it be okay to just update the same id of the project on the assignments table too18:13
*** jamesbenson has quit IRC18:14
*** edmondsw has quit IRC18:17
*** jamesbenson has joined #openstack-keystone18:24
*** thorst_ has joined #openstack-keystone18:36
*** thorst has quit IRC18:37
openstackgerritLance Bragstad proposed openstack/oslo.policy master: Add functionality to deprecate policies  https://review.openstack.org/50990918:37
*** aahh has quit IRC18:55
*** jrist has quit IRC19:07
*** edmondsw has joined #openstack-keystone19:09
*** jrist has joined #openstack-keystone19:20
*** aojea has joined #openstack-keystone19:25
*** thorst_ has quit IRC19:38
*** thorst has joined #openstack-keystone19:39
*** thorst has quit IRC19:44
*** thorst has joined #openstack-keystone19:45
openstackgerritLance Bragstad proposed openstack/oslo.policy master: Add functionality to deprecate policies  https://review.openstack.org/50990919:54
lbragstadcc dims ^19:54
lbragstaddims: i broke the test cases out to test both implementations, added the policy generation stuff, and some validation bits19:55
openstackgerritMerged openstack/keystone master: Update the release name in install tutorial  https://review.openstack.org/51035820:15
*** pcaruana has quit IRC20:18
*** boris_42_ has joined #openstack-keystone20:18
*** jamesbenson has quit IRC20:22
*** jamesbenson has joined #openstack-keystone20:22
*** jamesbenson has quit IRC20:23
*** jamesbenson has joined #openstack-keystone20:25
samueldmqlbragstad: hmm yes20:25
*** jamesbenson has quit IRC20:26
*** aahh has joined #openstack-keystone20:26
*** jamesbenson has joined #openstack-keystone20:27
aahhhi could someone help point out how the keystone/common/controllers.py gets invoked ?20:30
aahhwhat am looking for is to modify one of those methods in V3Controller class by inheriting and over riding it20:31
aahhBut I cant get it to point to the new file20:31
*** aahh has quit IRC20:35
*** thorst has quit IRC20:46
*** aahh has joined #openstack-keystone20:56
*** erlon has joined #openstack-keystone20:57
*** jamesbenson has quit IRC21:00
lbragstadaahh: the controllers are specified directly by the router.py files21:03
lbragstadwhen a request comes in, it's picked up by the routers based on the path, then directed to the appropriate controller method21:03
lbragstadaahh: for example - the identity routers explicitly reference the identity controller https://github.com/openstack/keystone/blob/ad1b677c91b5dedd3334620abde440fc775a5445/keystone/identity/routers.py#L2521:05
aahh@lbragstad : is it possible to alter something inside the keystone/common/routers.py that might change this default behavior  of taking it from the controllers.py21:11
aahhI would like to change it on the top-level rather than modifying anything inside each api's router code seperately21:12
aahhmy objective is to modify the https://github.com/openstack/keystone/blob/39c6b0ff537b822486d4fc187159464ea04bf912/keystone/common/controller.py#L664-66821:13
aahhso that it generates the IDs this way , ref['id'] = uuid.uuid3(uuid.NAMESPACE_OID, str(ref['name'])).hex21:13
aahhbut instead of modifying the file directly , I am trying to inherit the V3Controller class and override the _assign_unique_id method21:14
lbragstadaahh: you'd need to change the router to point to the new controller you want to use, or have each controller inherit the new common controller21:17
lbragstadeither way it depends on how you're building openstack or packaging it21:17
aahhhow do I make the router point to the new controller21:17
lbragstadaahh: you need to modify the router21:29
lbragstadFYI for anyone here interested in ayoung's AWS/policy walk-through http://lists.openstack.org/pipermail/openstack-dev/2017-October/123331.html21:29
lbragstadcc cmurphy edmondsw knikolla ^21:29
edmondswlbragstad tx, I should be there21:33
lbragstadedmondsw: cool - just to plan things out so we hopefully have a productive session21:34
*** jamesbenson has joined #openstack-keystone21:35
*** jamesbenson has quit IRC21:38
*** aojea has quit IRC21:42
aahh@lbragstad : thanks21:48
*** chlong_ has quit IRC21:59
*** chlong has quit IRC21:59
*** jamesbenson has joined #openstack-keystone22:00
*** jmlowe has quit IRC22:01
*** jamesbenson has quit IRC22:02
*** jrist has quit IRC22:14
*** aahh has quit IRC22:18
*** thorst has joined #openstack-keystone22:21
*** thorst has quit IRC22:21
*** thorst has joined #openstack-keystone22:22
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements  https://review.openstack.org/50000522:23
*** boris_42_ has quit IRC22:25
*** lbragstad has quit IRC22:25
*** edmondsw has quit IRC22:27
*** jdennis has quit IRC22:30
*** jdennis has joined #openstack-keystone22:34
*** jrist has joined #openstack-keystone22:35
openstackgerritOctave Orgeron proposed openstack/keystone master: Enables MySQL Cluster support for Keystone  https://review.openstack.org/43122922:39
openstackgerritOctave Orgeron proposed openstack/keystone master: Enables MySQL Cluster support for Keystone  https://review.openstack.org/43122922:40
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements  https://review.openstack.org/47013722:44
*** catintheroof has joined #openstack-keystone22:47
*** MasterOfBugs has joined #openstack-keystone23:06
*** aloga has quit IRC23:13
rybridgesHello. Have a quick question. In python with the keystoneclient bindig, I used to be able to do keystone_client.tenants.list_users(tenant) to get a list of tenants that a user was associated with. How can I do the same thing in python now with the latest binding?23:16
rybridgesI see that from the cli, openstack user list --project <project_id> works23:16
*** raildo has quit IRC23:41
*** MasterOfBugs has quit IRC23:45
*** jamesbenson has joined #openstack-keystone23:49
*** jamesbenson has quit IRC23:53
*** edmondsw has joined #openstack-keystone23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!