| *** mancdaz has joined #openstack-keystone | 00:01 | |
| *** wes_dillingham has joined #openstack-keystone | 00:33 | |
| *** thorst has joined #openstack-keystone | 00:53 | |
| *** thorst has quit IRC | 00:54 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 00:55 | |
| *** AlexeyAbashkin has quit IRC | 00:59 | |
| *** gyee has quit IRC | 01:08 | |
| *** Shunli has joined #openstack-keystone | 01:25 | |
| *** namnh has joined #openstack-keystone | 01:40 | |
| *** ayoung has joined #openstack-keystone | 01:56 | |
| *** thorst has joined #openstack-keystone | 02:17 | |
| *** thorst has quit IRC | 02:18 | |
| *** catintheroof has joined #openstack-keystone | 02:20 | |
| *** dave-mccowan has joined #openstack-keystone | 02:20 | |
| *** jlvillal has quit IRC | 02:21 | |
| *** jlvillal has joined #openstack-keystone | 02:21 | |
| *** dave-mcc_ has quit IRC | 02:22 | |
| *** catintheroof has quit IRC | 02:22 | |
| *** thorst has joined #openstack-keystone | 02:33 | |
| *** thorst has quit IRC | 02:38 | |
| *** ayoung has quit IRC | 02:40 | |
| *** lamt has quit IRC | 02:42 | |
| *** lamt has joined #openstack-keystone | 02:46 | |
| *** lamt is now known as Guest41495 | 02:46 | |
| *** dave-mccowan has quit IRC | 02:51 | |
| *** erlon has quit IRC | 02:54 | |
| *** markvoelker has quit IRC | 02:54 | |
| *** links has joined #openstack-keystone | 02:57 | |
| *** nicolasbock has quit IRC | 03:06 | |
| *** oikiki has quit IRC | 03:06 | |
| *** jmlowe has joined #openstack-keystone | 03:24 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/511015 | 03:34 |
|---|---|---|
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 03:34 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 03:42 |
| *** daidv has joined #openstack-keystone | 04:12 | |
| bhagyashris | mordred: ok. thank you for update :) | 04:13 |
| *** khamtamtun has joined #openstack-keystone | 04:23 | |
| *** khamtamtun has quit IRC | 04:25 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Split request logging into four different loggers https://review.openstack.org/505764 | 04:25 |
| mordred | bhagyashris: thanks for spotting it! | 04:25 |
| mordred | bhagyashris: that ^^ is now updated and tests have been added | 04:26 |
| bhagyashris | mordred: ok. thank you :) | 04:27 |
| *** jmlowe has quit IRC | 04:33 | |
| *** gyee has joined #openstack-keystone | 04:34 | |
| *** thorst has joined #openstack-keystone | 04:39 | |
| *** thorst has quit IRC | 04:44 | |
| *** markvoelker has joined #openstack-keystone | 04:55 | |
| *** wes_dillingham has quit IRC | 04:58 | |
| *** cristicalin has joined #openstack-keystone | 05:01 | |
| *** cristicalin has quit IRC | 05:04 | |
| *** cristicalin has joined #openstack-keystone | 05:07 | |
| *** cristicalin has quit IRC | 05:09 | |
| *** gyee has quit IRC | 05:10 | |
| *** oikiki has joined #openstack-keystone | 05:21 | |
| *** markvoelker has quit IRC | 05:30 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/511015 | 05:45 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 05:45 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 05:53 |
| *** josecastroleon has quit IRC | 05:57 | |
| openstackgerrit | zhengliuyang proposed openstack/keystone master: Reorganize api-ref: v3-ext federation projects-domains https://review.openstack.org/507008 | 06:08 |
| *** hoonetorg has quit IRC | 06:17 | |
| *** belmoreira has joined #openstack-keystone | 06:18 | |
| *** markvoelker has joined #openstack-keystone | 06:26 | |
| *** spectr has quit IRC | 06:27 | |
| *** spectr has joined #openstack-keystone | 06:28 | |
| *** hoonetorg has joined #openstack-keystone | 06:31 | |
| *** zsli_ has joined #openstack-keystone | 06:32 | |
| *** Shunli has quit IRC | 06:35 | |
| *** thorst has joined #openstack-keystone | 06:40 | |
| *** zsli__ has joined #openstack-keystone | 06:41 | |
| *** zsli_ has quit IRC | 06:44 | |
| *** thorst has quit IRC | 06:44 | |
| *** ioggstream has joined #openstack-keystone | 06:55 | |
| *** markvoelker has quit IRC | 07:00 | |
| *** openstackgerrit has quit IRC | 07:03 | |
| *** rcernin has joined #openstack-keystone | 07:05 | |
| *** pcaruana has joined #openstack-keystone | 07:13 | |
| *** tesseract has joined #openstack-keystone | 07:19 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:37 | |
| *** thorst has joined #openstack-keystone | 07:41 | |
| *** thorst has quit IRC | 07:45 | |
| *** itlinux has joined #openstack-keystone | 07:52 | |
| *** markvoelker has joined #openstack-keystone | 07:57 | |
| *** itlinux has quit IRC | 08:04 | |
| *** aselius has quit IRC | 08:18 | |
| *** pcaruana has quit IRC | 08:27 | |
| *** oikiki has quit IRC | 08:29 | |
| *** markvoelker has quit IRC | 08:30 | |
| *** oikiki has joined #openstack-keystone | 08:31 | |
| *** pcaruana has joined #openstack-keystone | 08:31 | |
| *** spectr has quit IRC | 08:40 | |
| *** spectr has joined #openstack-keystone | 08:50 | |
| *** belmoreira has quit IRC | 08:58 | |
| *** belmoreira has joined #openstack-keystone | 09:08 | |
| *** belmoreira has quit IRC | 09:08 | |
| *** oikiki has quit IRC | 09:09 | |
| *** belmoreira has joined #openstack-keystone | 09:10 | |
| *** oikiki has joined #openstack-keystone | 09:10 | |
| *** markvoelker has joined #openstack-keystone | 09:28 | |
| *** zsli__ has quit IRC | 09:28 | |
| *** jaosorior has quit IRC | 09:36 | |
| *** openstackgerrit has joined #openstack-keystone | 09:38 | |
| openstackgerrit | zhengliuyang proposed openstack/keystone master: Reorganize api-ref: v3-ext federation auth https://review.openstack.org/501139 | 09:38 |
| *** oikiki has quit IRC | 09:39 | |
| *** mvk has quit IRC | 09:40 | |
| *** thorst has joined #openstack-keystone | 09:42 | |
| *** jaosorior has joined #openstack-keystone | 09:47 | |
| *** thorst has quit IRC | 09:48 | |
| *** belmoreira has quit IRC | 09:53 | |
| *** jamesbenson has joined #openstack-keystone | 09:54 | |
| *** jamesbenson has quit IRC | 09:58 | |
| *** markvoelker has quit IRC | 10:01 | |
| -openstackstatus- NOTICE: The CI system will be offline starting at 11:00 UTC (in just under an hour) for Zuul v3 rollout: http://lists.openstack.org/pipermail/openstack-dev/2017-October/123337.html | 10:08 | |
| *** MeltedLux has quit IRC | 10:16 | |
| *** MeltedLux has joined #openstack-keystone | 10:21 | |
| *** namnh has quit IRC | 10:32 | |
| *** rob_d_ has quit IRC | 10:36 | |
| *** erlon has joined #openstack-keystone | 10:57 | |
| *** markvoelker has joined #openstack-keystone | 10:58 | |
| *** AlexeyAbashkin has quit IRC | 11:00 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 11:01 | |
| *** nicolasbock has joined #openstack-keystone | 11:03 | |
| *** masuberu has joined #openstack-keystone | 11:05 | |
| *** itlinux has joined #openstack-keystone | 11:05 | |
| *** masber has quit IRC | 11:07 | |
| *** mvk has joined #openstack-keystone | 11:12 | |
| *** belmoreira has joined #openstack-keystone | 11:16 | |
| *** hoonetorg has quit IRC | 11:21 | |
| *** markvoelker has quit IRC | 11:30 | |
| *** efried has joined #openstack-keystone | 11:32 | |
| *** panbalag has joined #openstack-keystone | 11:34 | |
| *** hoonetorg has joined #openstack-keystone | 11:35 | |
| *** panbalag has quit IRC | 11:41 | |
| *** spectr has quit IRC | 11:44 | |
| *** spectr has joined #openstack-keystone | 11:46 | |
| *** tobberydberg__ has joined #openstack-keystone | 11:51 | |
| *** spectr-RH has joined #openstack-keystone | 11:54 | |
| *** tobberydberg__ has quit IRC | 11:55 | |
| *** spectr has quit IRC | 11:57 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystonemiddleware master: Rename auth_uri to www_authenticate_uri https://review.openstack.org/508522 | 12:00 |
| *** dave-mccowan has joined #openstack-keystone | 12:01 | |
| *** josecastroleon has joined #openstack-keystone | 12:02 | |
| *** edmondsw has joined #openstack-keystone | 12:04 | |
| *** thorst has joined #openstack-keystone | 12:06 | |
| *** itlinux has quit IRC | 12:10 | |
| *** spectr-RH has quit IRC | 12:13 | |
| *** spectr has joined #openstack-keystone | 12:13 | |
| *** itlinux has joined #openstack-keystone | 12:14 | |
| *** spectr-RH has joined #openstack-keystone | 12:14 | |
| *** spectr has quit IRC | 12:18 | |
| *** wes_dillingham has joined #openstack-keystone | 12:18 | |
| *** openstackgerrit has quit IRC | 12:18 | |
| *** markvoelker has joined #openstack-keystone | 12:18 | |
| *** itlinux has quit IRC | 12:35 | |
| *** itlinux has joined #openstack-keystone | 12:35 | |
| *** thorst_ has joined #openstack-keystone | 12:38 | |
| *** thorst has quit IRC | 12:39 | |
| *** belmoreira has quit IRC | 12:41 | |
| *** openstackgerrit has joined #openstack-keystone | 12:43 | |
| openstackgerrit | Merged openstack/keystone master: Add default configuration files to data_files https://review.openstack.org/506149 | 12:43 |
| *** catintheroof has joined #openstack-keystone | 12:43 | |
| openstackgerrit | Merged openstack/keystone master: Policy exception https://review.openstack.org/501181 | 12:44 |
| *** panbalag has joined #openstack-keystone | 12:48 | |
| *** openstackgerrit has quit IRC | 13:03 | |
| -openstackstatus- NOTICE: Due to unrelated emergencies, the Zuul v3 rollout has not started yet; stay tuned for further updates | 13:05 | |
| *** zhurong has joined #openstack-keystone | 13:20 | |
| *** ayoung has joined #openstack-keystone | 13:26 | |
| *** Guest41495 has quit IRC | 13:29 | |
| *** lamt has joined #openstack-keystone | 13:31 | |
| *** itlinux has quit IRC | 13:36 | |
| *** jistr is now known as jistr|mtg | 13:38 | |
| lbragstad | gagehugo: thanks, i'll give it a look! | 13:55 |
| *** jmlowe has joined #openstack-keystone | 13:55 | |
| *** links has quit IRC | 13:56 | |
| lbragstad | gagehugo: oh yeah - that makes total sense.. I was able to recreate with only pike though | 14:00 |
| *** jistr|mtg is now known as jistr | 14:00 | |
| lbragstad | if we can get stevemar and kmalloc to review https://review.openstack.org/#/c/504084/ we can get it fixe | 14:01 |
| lbragstad | fixed* | 14:01 |
| *** spectr-RH has quit IRC | 14:04 | |
| *** spectr has joined #openstack-keystone | 14:04 | |
| *** chlong has joined #openstack-keystone | 14:04 | |
| *** zhurong has quit IRC | 14:29 | |
| gagehugo | sounds good | 14:35 |
| *** mvk has quit IRC | 14:39 | |
| *** jamesbenson has joined #openstack-keystone | 14:40 | |
| *** spectr has quit IRC | 14:43 | |
| *** spectr has joined #openstack-keystone | 14:58 | |
| *** chlong has quit IRC | 15:06 | |
| *** links has joined #openstack-keystone | 15:12 | |
| spotz | @lbragstad or anyone about. looking for away to add agroup to a project on the CLI. Is this missing functionality? | 15:16 |
| kmalloc | spotz: it should work with openstackclient it is part of the grant commands | 15:17 |
| kmalloc | I am drinking coffee, so on mobile, hard to find exact method right this second but hold on let me look | 15:18 |
| spotz | kmalloc thanks | 15:18 |
| cmurphy | spotz: `openstack role add --group <group id> --project <project id> <role name> | 15:21 |
| kmalloc | Something like 'openstack role add --group <group> --project <project> <role> | 15:21 |
| cmurphy | o/ | 15:21 |
| kmalloc | cmurphy: hehehe :) | 15:21 |
| cmurphy | I WIN \o/ | 15:21 |
| kmalloc | Winner!!!!! | 15:22 |
| spotz | kmalloc: Yeah I know that one, but if you're adding to a domain also you need to select the domain or the project. Is it cool to add it just to the project if the project is already in the domain? | 15:22 |
| *** openstackgerrit has joined #openstack-keystone | 15:22 | |
| openstackgerrit | Rohan Arora proposed openstack/keystonemiddleware master: Fix py3 byte/string error https://review.openstack.org/510241 | 15:22 |
| kmalloc | Spotz not sure what you're asking. | 15:25 |
| *** aselius has joined #openstack-keystone | 15:26 | |
| spotz | kmalloc openstack role add allows for group/user and project/domain. So I guess the question is if you want a group added to a project in a domain will openstack role add --project test --group gang admin be the correct way? | 15:26 |
| *** kashyap has left #openstack-keystone | 15:27 | |
| cmurphy | spotz: i think you want --project-domain to specify the domain the project is in | 15:30 |
| spotz | cmurphy: Is that back in newton by any chance? | 15:31 |
| cmurphy | spotz: yes it is, i happened to just check - but it doesn't show up in the default help, you have to have OS_IDENTITY_API_VERSION=3 set | 15:31 |
| spotz | cmurphy: thanks I'll double check | 15:32 |
| *** gyee has joined #openstack-keystone | 15:33 | |
| *** jamesbenson has quit IRC | 15:33 | |
| cmurphy | spotz: and you can also use the project id instead of its name and then you don't need to specify a domain | 15:33 |
| kmalloc | cmurphy: note, we need to work with OSC to make v3 the default somehow. | 15:34 |
| *** jamesbenson has joined #openstack-keystone | 15:34 | |
| kmalloc | lbragstad: ^cc (dtroyer too) | 15:34 |
| kmalloc | because... it's silly to demand OS_IDENTITY_API_VERSION=3 if you can't use V2 at all | 15:35 |
| kmalloc | [planning purposes, not immediate, i know we have a window of v2.0 support for OSC to live within] | 15:35 |
| *** jamesbenson has quit IRC | 15:37 | |
| * lbragstad crawls out from under a container issue | 15:38 | |
| *** chlong has joined #openstack-keystone | 15:38 | |
| *** jamesbenson has joined #openstack-keystone | 15:43 | |
| *** jamesbenson has quit IRC | 15:44 | |
| *** jamesbenson has joined #openstack-keystone | 15:45 | |
| spotz | lbragstad: You should not be crawling, it's too cold where you live | 15:48 |
| spotz | cmurphy: thanks it looks to be there. Now to fix some docs I've got | 15:49 |
| dtroyer | FWIW, we held off changing the default based on the actual deployment of clouds and Identity v3. Maybe it is closer now than the last time we talked about it, but don't forget OSC has to work going way back and this would potentially be an breaking change for many users | 15:50 |
| kmalloc | dtroyer: right, that was why i said planning for it :) | 15:50 |
| kmalloc | i expect in 2-4 cycles the time will be about right to switch that. | 15:50 |
| dtroyer | cool, thanks. I'll hope it is closer to 2 cycles :) | 15:51 |
| kmalloc | same. | 15:51 |
| *** chlong has quit IRC | 15:51 | |
| kmalloc | now, maybe we can make OSC smart enough to only V3 (via discovery) if v2.0 doesn't exist? | 15:51 |
| kmalloc | in like 1 cycle. | 15:51 |
| dtroyer | yes, once version discovery is solid, we can do it | 15:53 |
| *** AlexeyAbashkin has quit IRC | 15:53 | |
| kmalloc | lbragstad: totally unrelated to work. I can't wait to get the cold weather tires on my car :) -- going to be nice to have non-summer grippy tires for a change when driving [fall/winter has started settling in here in Seattle, it's nice, but car is a bit squirrel-y with hard compound summer tires] | 15:56 |
| *** nicolasbock has quit IRC | 15:56 | |
| lbragstad | kmalloc: nice :) | 15:57 |
| lbragstad | so - apparently all my containers share a 50GB partition | 15:57 |
| lbragstad | and if you leave a devstack or two running that fills up kinda quick | 15:58 |
| kmalloc | yup | 15:58 |
| kmalloc | on your laptop? | 15:58 |
| kmalloc | or desktop? | 15:58 |
| *** pcaruana has quit IRC | 15:59 | |
| lbragstad | and it's misleading when you can't use vim in a container that doesn't have devstack on it - because vi can't create swp files | 15:59 |
| *** rcernin has quit IRC | 15:59 | |
| kmalloc | heh | 15:59 |
| kmalloc | totally | 15:59 |
| lbragstad | my x1 | 15:59 |
| lbragstad | i've been wanted to start figuring out what to do with a desktop but... time. | 16:00 |
| kmalloc | yah, i hear ya | 16:00 |
| *** wes_dillingham has quit IRC | 16:06 | |
| *** ayoung has quit IRC | 16:07 | |
| *** nicolasbock has joined #openstack-keystone | 16:09 | |
| *** chlong has joined #openstack-keystone | 16:11 | |
| *** itlinux has joined #openstack-keystone | 16:11 | |
| *** jamesbenson has quit IRC | 16:21 | |
| *** jamesbenson has joined #openstack-keystone | 16:23 | |
| *** d0ugal has quit IRC | 16:35 | |
| *** wes_dillingham has joined #openstack-keystone | 16:37 | |
| *** jmlowe has quit IRC | 16:47 | |
| *** chlong has quit IRC | 16:48 | |
| *** links has quit IRC | 16:54 | |
| *** d0ugal has joined #openstack-keystone | 16:57 | |
| *** magicboiz has quit IRC | 17:02 | |
| *** MaxPC has joined #openstack-keystone | 17:02 | |
| *** tesseract has quit IRC | 17:15 | |
| *** ayoung has joined #openstack-keystone | 17:16 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 17:21 | |
| *** oikiki has joined #openstack-keystone | 17:26 | |
| *** AlexeyAbashkin has quit IRC | 17:26 | |
| *** links has joined #openstack-keystone | 17:28 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 17:29 | |
| *** AlexeyAbashkin has quit IRC | 17:34 | |
| *** itlinux has quit IRC | 17:40 | |
| lbragstad | does anyone else see http://paste.openstack.org/show/623378/ when doing a fresh virtualenv install of master? | 17:40 |
| *** panbalag has quit IRC | 17:41 | |
| *** links has quit IRC | 17:53 | |
| knikolla | lbragstad: `pip install .` worked for me on master for keystone | 18:00 |
| knikolla | oh wait, different branch. lemme pull origin | 18:00 |
| *** hrybacki is now known as hrybacki|trainin | 18:03 | |
| knikolla | still seemed to work. | 18:05 |
| *** ioggstream has quit IRC | 18:14 | |
| *** efried is now known as efried_nomnom | 18:17 | |
| lbragstad | hmm | 18:17 |
| *** jmlowe has joined #openstack-keystone | 18:18 | |
| lbragstad | knikolla: but can you run the service? | 18:21 |
| lbragstad | knikolla: things seem to install fine for me - but i get that error when i run keystone | 18:21 |
| knikolla | lbragstad: oh, i see. i only ran the tests. | 18:21 |
| knikolla | lemme spin up a vm | 18:22 |
| *** d0ugal has quit IRC | 18:24 | |
| *** gyee has quit IRC | 18:27 | |
| *** gyee has joined #openstack-keystone | 18:29 | |
| clarkb | pika is pinned to 0.10.0 in constraints | 18:35 |
| clarkb | but global requirements allows >=0.10.0 | 18:35 |
| *** gyee has quit IRC | 18:37 | |
| *** gyee has joined #openstack-keystone | 18:38 | |
| *** gyee has quit IRC | 18:39 | |
| *** gyee has joined #openstack-keystone | 18:45 | |
| lbragstad | clarkb: ah | 18:46 |
| *** MaxPC has quit IRC | 18:48 | |
| lbragstad | clarkb: is there a patch up for that somewhere? | 18:49 |
| clarkb | lbragstad: not that I know of, was just pointing out why it works in general for gate testing (constraints protects you there) | 18:49 |
| lbragstad | ah | 18:50 |
| *** oikiki has quit IRC | 18:52 | |
| *** wes_dillingham has quit IRC | 18:53 | |
| *** wes_dillingham has joined #openstack-keystone | 18:57 | |
| *** efried_nomnom is now known as efried | 18:58 | |
| *** masuberu has quit IRC | 19:01 | |
| *** MaxPC has joined #openstack-keystone | 19:04 | |
| knikolla | lbragstad: that doodle poll doesn't look right. i'm unable to select anything. | 19:05 |
| lbragstad | hmm - really? | 19:05 |
| lbragstad | checking the settings | 19:06 |
| *** oikiki has joined #openstack-keystone | 19:08 | |
| lbragstad | knikolla: weird - the poll closed | 19:09 |
| lbragstad | knikolla: reopening it now | 19:09 |
| lbragstad | knikolla: try again | 19:09 |
| knikolla | lbragstad: yep, now is fine | 19:09 |
| lbragstad | sweet | 19:09 |
| lbragstad | knikolla: good catch | 19:09 |
| knikolla | but my brain is too fried to do realtime conversion of EST to UTC | 19:10 |
| knikolla | doodle should reeeeeally have that feature built in. | 19:10 |
| lbragstad | yeah - i agree | 19:10 |
| lbragstad | knikolla: https://www.worldtimebuddy.com/?pl=1&lid=100,5&h=100 | 19:11 |
| knikolla | lbragstad: thanks! | 19:11 |
| openstackgerrit | Eric Fried proposed openstack/keystoneauth master: Add EndpointData.__str__ for debugging https://review.openstack.org/489413 | 19:12 |
| efried | kmalloc cmurphy samueldmq ^ better late than never. | 19:12 |
| kmalloc | ooh nice | 19:13 |
| openstackgerrit | Eric Fried proposed openstack/keystoneauth master: WIP: Return the endpoint_override from EndpointData https://review.openstack.org/491947 | 19:13 |
| knikolla | lbragstad: so the times are basically a question of who's going to have the 2-3am sessions, EST or AUS. | 19:16 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Emit deprecation warning for federated domain/project APIs https://review.openstack.org/487219 | 19:17 |
| lbragstad | knikolla: yeah - pretty much... | 19:17 |
| lbragstad | knikolla: happy to add another timeslot of there is one I missed | 19:17 |
| kmalloc | efried: commented, but +2 | 19:17 |
| efried | kmalloc Thanks! | 19:18 |
| kmalloc | efried: on the __str__ one | 19:18 |
| lbragstad | i suppose we can also propose two sessions, one for AU + US and one for EU + US? | 19:18 |
| *** mvk has joined #openstack-keystone | 19:18 | |
| gagehugo | lbragstad "pip instal ." worked for me on master | 19:19 |
| gagehugo | install* | 19:19 |
| knikolla | lbragstad: what about 10am or 11am UTC? | 19:21 |
| lbragstad | isn't that like 4 am for you? | 19:21 |
| knikolla | lbragstad: https://www.worldtimebuddy.com/?pl=1&lid=100,5,22&h=100&date=10/16/2017%7C6 | 19:22 |
| knikolla | according to this it's 6am | 19:22 |
| lbragstad | ah - yeah.. i have my times mixed up | 19:23 |
| knikolla | but that'll be like 5am for you. | 19:23 |
| *** jmlowe has quit IRC | 19:30 | |
| edmondsw | lbragstad that policy deprecation implementation isn't going to work for many cases, including all 3 of the examples we documented in the spec :( | 19:30 |
| edmondsw | added comments in the review | 19:30 |
| lbragstad | edmondsw: how so? | 19:30 |
| lbragstad | if you're renaming a policy it also works | 19:31 |
| edmondsw | lbragstad it does nothing to link what was deprecated to what replaces it (examples 2 and 3), and handle fallback to the older values if the newer aren't overriden | 19:31 |
| *** gyee has quit IRC | 19:31 | |
| edmondsw | lbragstad you'll have to check rules in this order, and stop when you find something: 1) overridden new rule, 2) overridden old rule, 3) hard-coded default | 19:32 |
| edmondsw | can't do that if there's no linkage between new rule and old rule, and that logic is all completely missing | 19:32 |
| edmondsw | so all that implementation lets you do is remove something with no replacement | 19:33 |
| edmondsw | lbragstad make sense? | 19:34 |
| lbragstad | if you want to rename foo:create to foo:bar:create - the project is going to enforce that after an upgrade | 19:34 |
| edmondsw | what do you mean? | 19:35 |
| lbragstad | the compatibility bit has to come from the operator reading the message | 19:35 |
| edmondsw | I'm not following | 19:35 |
| lbragstad | sorry - trying to think of a better example | 19:35 |
| lbragstad | ok - want to walk through the examples? | 19:38 |
| lbragstad | https://specs.openstack.org/openstack/oslo-specs/specs/queens/policy-deprecation.html#example-1 | 19:38 |
| edmondsw | thinking about olso.config... when developers rename a conf setting, they have to indicate what the old conf setting they're renaming was, and oslo.config has logic to 1) prefer the new setting if it's in the conf file, 2) next prefer the old setting if that's in the conf, 3) finally use the hardcoded default if the conf didn't have anything | 19:38 |
| edmondsw | oslo.policy needs to do the same, and you didn't add any way or logic to do that | 19:38 |
| edmondsw | lbragstad let's skip example 1 for the moment, since that's a bit different | 19:39 |
| lbragstad | ok, example 2 then | 19:39 |
| lbragstad | https://specs.openstack.org/openstack/oslo-specs/specs/queens/policy-deprecation.html#example-2 | 19:39 |
| edmondsw | yep | 19:40 |
| lbragstad | my original implementation used more kwargs | 19:40 |
| edmondsw | you'll need more :) | 19:41 |
| lbragstad | but that was reverted in favor of gcb's comment | 19:41 |
| lbragstad | https://review.openstack.org/#/c/500141/5/specs/queens/policy-deprecation.rst | 19:41 |
| edmondsw | gcb told you wrong about oslo.config only having 3 | 19:41 |
| edmondsw | lbragstad https://github.com/openstack/oslo.config/blob/36aded18660fc4d515aaabfc7bf1afbfb65e6411/oslo_config/cfg.py#L823-L835 | 19:44 |
| edmondsw | I don't really like deprecated_name and deprecated_group, because they're too limiting... deprecated_opts is a more general and flexible solution that works in cases they don't | 19:45 |
| edmondsw | that's the kind of equivalent you're missing | 19:45 |
| edmondsw | so with config, deprecated_opts (or deprecated_name and _group) is used to tie back to the old conf options | 19:46 |
| edmondsw | a develop only registers the new options, and then when they do that they specify either deprecated_opts or deprecated_name/group to keep the old options working. They do not separately register the old options anymore | 19:47 |
| *** jmlowe has joined #openstack-keystone | 19:48 | |
| edmondsw | and deprecated_for_removal is only used if you're truly removing something with no replacement... if you're replacing it, you use deprecated_opts or deprecated_name/group INSTEAD | 19:49 |
| lbragstad | the deprecated_for_removal bit might be confusing | 19:49 |
| edmondsw | lbragstad it's confusing for example 1, but that's why we skipped that one... it's flat out insufficient/wrong for examples 2 and 3 | 19:51 |
| lbragstad | well - it would need to be used differently | 19:51 |
| lbragstad | sure | 19:51 |
| lbragstad | but i see you're point | 19:51 |
| *** gyee has joined #openstack-keystone | 19:51 | |
| edmondsw | used differently? | 19:52 |
| *** ppiela_ has quit IRC | 19:52 | |
| lbragstad | i wrote unit tests that tried walking through those cases - https://review.openstack.org/#/c/509909/5/oslo_policy/tests/test_policy.py | 19:55 |
| lbragstad | so - if a developer commit to deprecating a policy in N, they finish the change in N+1 | 19:55 |
| lbragstad | or whatever the policy is | 19:55 |
| lbragstad | but the actual deprecation_reason is meant to relay the information | 19:56 |
| lbragstad | and in N+1, the service doesn't look for old values or anything like that | 19:56 |
| edmondsw | sounds like you're forcing a hard cutover | 19:56 |
| edmondsw | not allowing any overlap where both old and new policy rules could work | 19:56 |
| lbragstad | during the N release, the operator sees the warning, right? | 19:57 |
| edmondsw | maybe | 19:57 |
| edmondsw | :) | 19:57 |
| lbragstad | then they had or modify the policy if they need to before they roll out N+1 | 19:57 |
| *** gyee has quit IRC | 19:57 | |
| edmondsw | but they can't test the modified policy until they roll out N+1, because it doesn't work in N | 19:57 |
| lbragstad | right - that's also true for configuration values, isn't it? | 19:58 |
| edmondsw | no | 19:58 |
| *** jamesbenson has quit IRC | 19:58 | |
| lbragstad | because the new configuration values only exists in N+1 | 19:58 |
| edmondsw | wrong | 19:58 |
| edmondsw | config does what I described above... it allows both new and old values to work | 19:58 |
| edmondsw | so when you deprecate something in N, the new option also starts working in N, alongside the old one... you can specify either, and the new will take precedence but if it's not there the old will be used | 19:59 |
| edmondsw | and then in N+1 or N+2 or whatever you finally go back and change the code to stop allowing the old option to work... finally forcing operators to use the new option | 20:00 |
| *** harlowja has quit IRC | 20:00 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement backend logic for project tags https://review.openstack.org/499726 | 20:02 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement project tags logic into manager https://review.openstack.org/499727 | 20:02 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement project tags API controller and router https://review.openstack.org/499728 | 20:02 |
| lbragstad | so in the service- when we move policy enforcement in to code (or remove the decorator) | 20:02 |
| *** itlinux has joined #openstack-keystone | 20:03 | |
| lbragstad | how do we make sure both policies are recognized? | 20:03 |
| lbragstad | - if the operator is using the deprecated policy defined in the file | 20:03 |
| lbragstad | - if the operator is using the deprecated default in code | 20:03 |
| *** wes_dillingham has quit IRC | 20:06 | |
| kmalloc | lbragstad: stack them. | 20:06 |
| kmalloc | basically build a final policy, pick and order of preference | 20:06 |
| *** jamesbenson has joined #openstack-keystone | 20:07 | |
| *** edmondsw_ has joined #openstack-keystone | 20:08 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement backend logic for project tags https://review.openstack.org/499726 | 20:08 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement project tags logic into manager https://review.openstack.org/499727 | 20:08 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement project tags API controller and router https://review.openstack.org/499728 | 20:08 |
| *** edmondsw has quit IRC | 20:08 | |
| *** jamesbenson has quit IRC | 20:09 | |
| lbragstad | hmmm | 20:10 |
| edmondsw_ | that is how conf works today, and I think we want to be consistent with that | 20:11 |
| *** edmondsw_ is now known as edmondsw | 20:12 | |
| *** jamesbenson has joined #openstack-keystone | 20:13 | |
| * lbragstad pulls up config examples | 20:15 | |
| kmalloc | edmondsw: ++ | 20:18 |
| *** jmlowe has quit IRC | 20:38 | |
| *** spilla has joined #openstack-keystone | 20:52 | |
| *** thorst_ has quit IRC | 20:55 | |
| *** jmlowe has joined #openstack-keystone | 20:57 | |
| *** thorst has joined #openstack-keystone | 20:58 | |
| *** deepika08 has joined #openstack-keystone | 21:01 | |
| *** catintheroof has quit IRC | 21:02 | |
| *** thorst has quit IRC | 21:03 | |
| deepika08 | hey ! I was trying to run nuetron through devstack , ran into this error , the solutions provided on ask.openstack https://ask.openstack.org/en/question/104229/failed-to-discover-available-identity-versions/ didn't help , can someone help , thanks :) | 21:05 |
| deepika08 | https://www.irccloud.com/pastebin/lRxakXqW/keystone%20fail | 21:06 |
| *** edmondsw has quit IRC | 21:07 | |
| *** harlowja has joined #openstack-keystone | 21:07 | |
| *** jamesbenson has quit IRC | 21:09 | |
| *** jmlowe has quit IRC | 21:12 | |
| *** edmondsw has joined #openstack-keystone | 21:14 | |
| lbragstad | kmalloc: edmondsw so the deprecation process would look more like this - http://git.openstack.org/cgit/openstack/keystone/commit/keystone/common/config.py?h=mitaka-eol&id=58fb7978152002f713d2bfcdf27d7ee69b3f2823 | 21:17 |
| lbragstad | that ^ took a while | 21:17 |
| kmalloc | i think so. | 21:17 |
| *** edmondsw has quit IRC | 21:19 | |
| *** jmlowe has joined #openstack-keystone | 21:25 | |
| lbragstad | cool - i can rework the spec and implementation | 21:26 |
| *** ayoung has quit IRC | 21:31 | |
| *** spilla has quit IRC | 21:38 | |
| *** thorst has joined #openstack-keystone | 21:40 | |
| *** wes_dillingham has joined #openstack-keystone | 21:45 | |
| *** jmlowe has quit IRC | 21:47 | |
| *** ppiela has joined #openstack-keystone | 21:51 | |
| *** jmlowe has joined #openstack-keystone | 21:54 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Refactor test_backend_ldap tests https://review.openstack.org/507694 | 22:11 |
| *** MaxPC has quit IRC | 22:17 | |
| *** edmondsw has joined #openstack-keystone | 22:25 | |
| *** edmondsw has quit IRC | 22:30 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 22:47 | |
| *** edmondsw has joined #openstack-keystone | 22:48 | |
| *** AlexeyAbashkin has quit IRC | 22:52 | |
| *** jmlowe has quit IRC | 22:53 | |
| *** edmondsw has quit IRC | 22:54 | |
| *** masber has joined #openstack-keystone | 23:14 | |
| *** thorst has quit IRC | 23:33 | |
| *** deepika08 has quit IRC | 23:52 | |
| *** ppiela has quit IRC | 23:54 | |
| *** oikiki has quit IRC | 23:55 | |
| *** itlinux has quit IRC | 23:57 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!