Thursday, 2017-10-19

*** markvoelker_ has quit IRC00:03
*** markvoelker has joined #openstack-keystone00:09
*** hyakuhei has joined #openstack-keystone00:12
*** markvoelker has quit IRC00:13
*** markvoelker has joined #openstack-keystone00:18
*** markvoelker has quit IRC00:22
*** markvoelker has joined #openstack-keystone00:27
*** thorst has joined #openstack-keystone00:31
*** markvoelker has quit IRC00:32
*** wes_dillingham has joined #openstack-keystone00:46
*** markvoelker has joined #openstack-keystone00:54
*** thorst has quit IRC00:57
*** markvoelker has quit IRC00:59
*** masuberu has joined #openstack-keystone01:00
*** Shunli has joined #openstack-keystone01:02
*** masber has quit IRC01:04
*** markvoelker has joined #openstack-keystone01:12
*** thorst has joined #openstack-keystone01:23
*** namnh has joined #openstack-keystone01:23
*** daidv_ has quit IRC01:24
*** daidv_ has joined #openstack-keystone01:24
*** panbalag has left #openstack-keystone01:27
*** thorst has quit IRC01:36
*** masber has joined #openstack-keystone01:44
*** masuberu has quit IRC01:47
*** markvoelker has quit IRC01:47
*** josecastroleon has quit IRC01:59
*** markvoelker has joined #openstack-keystone02:00
*** josecastroleon has joined #openstack-keystone02:01
*** markvoelker has quit IRC02:05
*** markvoelker has joined #openstack-keystone02:10
*** markvoelker has quit IRC02:14
*** masber has quit IRC02:19
*** markvoelker has joined #openstack-keystone02:19
*** gyee has quit IRC02:21
*** markvoelker has quit IRC02:23
*** markvoelker has joined #openstack-keystone02:28
*** josecastroleon has quit IRC02:30
*** josecastroleon has joined #openstack-keystone02:31
*** markvoelker has quit IRC02:33
*** thorst has joined #openstack-keystone02:37
*** thorst has quit IRC02:42
*** markvoelker has joined #openstack-keystone02:46
*** markvoelker has quit IRC03:20
*** namnh has quit IRC03:25
*** markvoelker has joined #openstack-keystone03:25
*** namnh has joined #openstack-keystone03:26
*** markvoelker has quit IRC03:30
*** josecastroleon has quit IRC03:30
*** josecastroleon has joined #openstack-keystone03:31
*** aselius has joined #openstack-keystone03:32
*** markvoelker has joined #openstack-keystone03:34
*** thorst has joined #openstack-keystone03:38
*** markvoelker has quit IRC03:39
*** josecastroleon has quit IRC03:40
*** markvoelker has joined #openstack-keystone03:43
*** josecastroleon has joined #openstack-keystone03:44
*** thorst has quit IRC03:46
*** markvoelker has quit IRC03:48
*** markvoelker has joined #openstack-keystone03:52
*** markvoelker has quit IRC03:57
*** dave-mccowan has quit IRC03:57
*** Tahvok has quit IRC03:57
*** markvoelker has joined #openstack-keystone04:02
*** Tahvok has joined #openstack-keystone04:02
*** markvoelker has quit IRC04:06
*** markvoelker has joined #openstack-keystone04:10
*** markvoelker has quit IRC04:15
*** markvoelker has joined #openstack-keystone04:20
*** namnh has quit IRC04:21
*** namnh has joined #openstack-keystone04:21
*** Suramya has joined #openstack-keystone04:32
*** josecastroleon has quit IRC04:35
*** josecastroleon has joined #openstack-keystone04:36
*** wes_dillingham has quit IRC04:40
*** aojea has joined #openstack-keystone04:53
*** markvoelker has quit IRC04:54
*** aojea has quit IRC04:57
*** markvoelker has joined #openstack-keystone05:08
*** markvoelker has quit IRC05:12
*** masber has joined #openstack-keystone05:15
*** markvoelker has joined #openstack-keystone05:17
*** masuberu has joined #openstack-keystone05:17
*** masber has quit IRC05:19
*** markvoelker has quit IRC05:22
*** markvoelker has joined #openstack-keystone05:26
*** markvoelker has quit IRC05:29
*** markvoelker has joined #openstack-keystone05:29
*** thorst has joined #openstack-keystone05:42
*** markvoelker has quit IRC05:42
*** markvoelker has joined #openstack-keystone05:42
*** markvoelker has quit IRC05:42
*** thorst has quit IRC05:47
*** spectr has joined #openstack-keystone05:48
*** gvrangan has joined #openstack-keystone05:53
*** alex_xu has quit IRC05:54
*** alex_xu has joined #openstack-keystone06:00
*** josecastroleon has quit IRC06:07
*** hoonetorg has quit IRC06:09
*** aselius has quit IRC06:12
*** hoonetorg has joined #openstack-keystone06:25
*** openstackgerrit has joined #openstack-keystone06:31
openstackgerritwangxiyuan proposed openstack/keystonemiddleware master: Remove kwargs_to_fetch_token  https://review.openstack.org/51327306:31
*** markvoelker has joined #openstack-keystone06:49
*** pcaruana has joined #openstack-keystone06:55
openstackgerritShan Guo proposed openstack/keystone master: Remove v2.0 assignment schema  https://review.openstack.org/51296407:03
*** ioggstream has joined #openstack-keystone07:10
*** tesseract has joined #openstack-keystone07:21
*** thorst has joined #openstack-keystone07:43
*** thorst has quit IRC07:47
*** markvoelker has quit IRC08:01
openstackgerritwangxiyuan proposed openstack/keystonemiddleware master: Remove kwargs_to_fetch_token  https://review.openstack.org/51327308:02
*** magicboiz has quit IRC08:24
*** AlexeyAbashkin has joined #openstack-keystone08:28
*** magicboiz has joined #openstack-keystone08:40
*** magicboiz has quit IRC08:45
*** magicboiz has joined #openstack-keystone08:46
*** spectr has quit IRC08:47
*** spectr has joined #openstack-keystone08:48
*** spectr has quit IRC08:48
*** spectr has joined #openstack-keystone08:50
*** magicboiz has quit IRC08:51
*** magicboiz has joined #openstack-keystone08:54
*** magicboiz has quit IRC08:59
*** aojea has joined #openstack-keystone08:59
*** aojea has quit IRC09:03
*** magicboiz has joined #openstack-keystone09:06
*** sapd__ has joined #openstack-keystone09:12
*** sapd_ has quit IRC09:12
*** namnh has quit IRC09:16
*** namnh has joined #openstack-keystone09:17
*** Shunli has quit IRC09:30
*** thorst has joined #openstack-keystone09:44
*** thorst has quit IRC09:49
*** namnh has quit IRC10:08
openstackgerritShan Guo proposed openstack/keystone master: Remove v2.0 assignment schema  https://review.openstack.org/51296410:08
*** namnh has joined #openstack-keystone10:09
*** mvk has quit IRC10:19
*** gvrangan_odl has joined #openstack-keystone10:22
*** gvrangan has quit IRC10:25
*** namnh has quit IRC10:40
*** mvk has joined #openstack-keystone10:48
*** wes_dillingham has joined #openstack-keystone10:48
*** wes_dillingham has quit IRC10:56
*** raildo has joined #openstack-keystone11:15
*** AlexeyAbashkin has quit IRC11:24
*** AlexeyAbashkin has joined #openstack-keystone11:26
*** markvoelker has joined #openstack-keystone11:27
*** nicolasbock has joined #openstack-keystone11:32
*** itlinux has joined #openstack-keystone11:33
*** nicolasbock has quit IRC11:38
*** nicolasbock has joined #openstack-keystone11:50
*** AlexeyAbashkin has quit IRC11:51
*** edmondsw has joined #openstack-keystone11:51
*** mvk has quit IRC11:54
*** AlexeyAbashkin has joined #openstack-keystone11:55
*** rcernin has joined #openstack-keystone11:58
*** gvrangan_odl has quit IRC12:00
*** mvk has joined #openstack-keystone12:07
*** dave-mccowan has joined #openstack-keystone12:12
*** thorst has joined #openstack-keystone12:13
*** itlinux has quit IRC12:15
*** catintheroof has joined #openstack-keystone12:27
*** catintheroof has quit IRC12:42
*** jaosorior has joined #openstack-keystone12:43
*** arxcruz has joined #openstack-keystone12:47
arxcruzHi, is it possible to list all the users for a particular project via rest api ? I'm checking https://developer.openstack.org/api-ref/identity/v3/index.html but couldn't find anything usefull...12:47
*** panbalag has joined #openstack-keystone12:49
*** panbalag has left #openstack-keystone12:50
*** catintheroof has joined #openstack-keystone12:51
*** catintheroof has quit IRC12:53
*** wes_dillingham has joined #openstack-keystone12:58
cmurphyarxcruz: you can list role assignments filtered by project https://developer.openstack.org/api-ref/identity/v3/index.html#roles13:00
arxcruzcmurphy: will this bring the users ?13:00
arxcruzas far as I understood, no13:00
cmurphyarxcruz: yes it lists users and their roles in the project13:01
arxcruzso get role_assignments?scope.project.id=project_id will bring the users as well ?13:01
cmurphyarxcruz: well, user IDs at least, you would have to do another query to get the rest of the user information13:01
arxcruzI see13:01
*** sbezverk has joined #openstack-keystone13:13
*** rcernin has quit IRC13:21
*** rmcall has joined #openstack-keystone13:22
*** itlinux has joined #openstack-keystone13:27
*** rcernin has joined #openstack-keystone13:35
*** rcernin has quit IRC13:40
*** jrist_ has joined #openstack-keystone13:43
*** jrist has quit IRC13:43
knikollao/14:03
*** josecastroleon has joined #openstack-keystone14:04
*** josecastroleon has quit IRC14:04
*** lbragstad has joined #openstack-keystone14:04
*** ChanServ sets mode: +o lbragstad14:04
*** josecastroleon has joined #openstack-keystone14:05
*** itlinux has quit IRC14:07
*** itlinux has joined #openstack-keystone14:17
magicboizayoung, gyee: just for your info, I did manage to deploy Fed/SSO with Google as idP along the x509 deployment. Google/SSO added as oidc (mapped.Mapped) auth method, so I guess it didn't face bug https://bugs.launchpad.net/keystone/+bug/172464514:21
openstackLaunchpad bug 1724645 in OpenStack Identity (keystone) "remote_id_attribute config options prevents multiple protocol variations for Federation" [Undecided,New]14:21
ayoungmagicboiz, cool.14:22
magicboizI have x509.remote_id_attribute and oidc.remote_id_attribute in different sections14:22
magicboizayoung: :)14:22
ayoungmagicboiz, interesting...so you have an [x509] block in your config file?14:23
magicboizayoung: yes14:23
magicboizayoung: https://pastebin.com/dzat0kGm14:24
magicboizayoung: is it possible to deploy x509 with SHADOW_USERS?14:26
ayoungmagicboiz, I wonder if that allows free Form strings. I wonder if x509 could be changed to certificate and still work?14:26
ayoungYeah, I think so.  SHADOW_USERS is a Federation thing now.  Its a little different than the LDAP mapping stuff, but it should work.14:26
magicboizayoung: ok, I'll try it14:27
ayoungmagicboiz, heh....assume we implemented it.  I kindof stopped tracking things on it.14:28
ayoungmagicboiz, looks pretty well supported.14:31
*** itlinux has quit IRC14:34
*** rmcall has quit IRC14:37
*** spectr has quit IRC14:38
*** aojea has joined #openstack-keystone14:39
magicboizayoung: good to know!14:39
*** efried is now known as efried|brb14:41
*** gyee has joined #openstack-keystone14:42
*** efried|brb is now known as efried14:51
*** Suramya has quit IRC14:52
*** jaosorior has quit IRC15:02
*** jrist_ is now known as jrist15:03
*** jrist has quit IRC15:03
*** jrist has joined #openstack-keystone15:03
*** josecastroleon has quit IRC15:06
*** magicboiz has quit IRC15:12
*** markvoelker has quit IRC15:12
*** markvoelker has joined #openstack-keystone15:13
*** nicolasbock has quit IRC15:17
*** markvoelker has quit IRC15:17
*** nicolasbock has joined #openstack-keystone15:18
*** nicolasbock has quit IRC15:22
*** ayoung has quit IRC15:24
*** magicboiz has joined #openstack-keystone15:24
*** magicboiz has quit IRC15:29
*** mvk has quit IRC15:30
*** phalmos has joined #openstack-keystone15:39
*** enriquetaso has quit IRC15:49
*** enriquetaso has joined #openstack-keystone15:49
*** magicboiz has joined #openstack-keystone15:54
*** magicboiz has quit IRC15:59
*** arunkant has joined #openstack-keystone16:01
*** arunkant_ has joined #openstack-keystone16:01
*** arunkant_ has quit IRC16:01
*** aselius has joined #openstack-keystone16:03
*** magicboiz has joined #openstack-keystone16:06
*** frontrunner has joined #openstack-keystone16:07
*** pcaruana has quit IRC16:18
*** markvoelker has joined #openstack-keystone16:20
*** markvoelker has quit IRC16:24
*** aojea has quit IRC16:29
*** AlexeyAbashkin has quit IRC16:46
*** phalmos_ has joined #openstack-keystone16:52
*** phalmos has quit IRC16:55
*** aojea has joined #openstack-keystone16:59
lbragstadgagehugo: i'm trying to keep a pulse on the project tag things17:04
lbragstadit looks like they are just slowly moving, right?17:04
*** tesseract has quit IRC17:04
*** aojea has quit IRC17:14
*** aojea has joined #openstack-keystone17:14
cmurphyi think the stack in keystone is waiting on this one in tempest https://review.openstack.org/#/c/485344/717:14
*** aojea has quit IRC17:15
gagehugolbragstad I'm fixing cmurphy's comments on the controller right now, waiting for tests to pass17:15
gagehugoand yeah there's a tempest req17:15
*** aojea has joined #openstack-keystone17:15
*** aojea has quit IRC17:15
*** aojea has joined #openstack-keystone17:16
*** efried is now known as efried|afk17:18
*** aojea has quit IRC17:19
lbragstadgagehugo: oh - there is?17:20
gagehugo^ the link cmurphy posted17:21
gagehugoit changes how one test works by comparing projects by id, rather than direct comparison of the project objects17:22
*** phalmos has joined #openstack-keystone17:23
*** raildo has quit IRC17:23
*** phalmos_ has quit IRC17:26
*** gvrangan has joined #openstack-keystone17:31
*** lbragstad has quit IRC17:35
*** raildo has joined #openstack-keystone17:35
*** lbragstad has joined #openstack-keystone17:39
*** ChanServ sets mode: +o lbragstad17:39
openstackgerritGage Hugo proposed openstack/keystone master: Implement backend logic for project tags  https://review.openstack.org/49972617:41
openstackgerritGage Hugo proposed openstack/keystone master: Implement project tags logic into manager  https://review.openstack.org/49972717:41
openstackgerritGage Hugo proposed openstack/keystone master: Implement project tags API controller and router  https://review.openstack.org/49972817:41
gagehugolbragstad cmurphy ^17:42
lbragstadgagehugo: sweet17:43
*** ioggstream has quit IRC17:46
lbragstadknikolla: would you like to follow up on https://review.openstack.org/#/c/511806/ ?17:59
lbragstadsamueldmq: too ^17:59
lbragstadalso - this is exciting17:59
lbragstadhttp://lists.openstack.org/pipermail/openstack-dev/2017-October/123748.html17:59
lbragstadnot sure if i shared that yet18:00
lbragstadcc  cmurphy kmalloc ^18:00
lbragstadlooks like we have a new owner :)18:00
cmurphy\o/18:01
knikollalbragstad: sure18:01
knikollawell... good luck!18:02
knikollais there any forum session for unified limits?18:03
lbragstadknikolla: i don't think so - we only proposed three18:04
lbragstad1.) application credentials 2.) rbac 3.) operator feedback18:05
openstackgerritGage Hugo proposed openstack/python-keystoneclient master: DNM: This makes keystoneclient.session.Session explode  https://review.openstack.org/50320718:16
*** AlexeyAbashkin has joined #openstack-keystone18:19
*** AlexeyAbashkin has quit IRC18:23
*** gvrangan has quit IRC18:38
openstackgerritGage Hugo proposed openstack/keystone master: Remove ensure_default_domain_exists  https://review.openstack.org/51347418:41
*** gema has quit IRC18:47
*** gema has joined #openstack-keystone19:15
*** gema has joined #openstack-keystone19:15
*** AlexeyAbashkin has joined #openstack-keystone19:17
*** nicolasbock has joined #openstack-keystone19:18
*** AlexeyAbashkin has quit IRC19:21
openstackgerritGage Hugo proposed openstack/keystone master: Remove v2 token test models  https://review.openstack.org/51348119:22
gagehugolbragstad I'm not sure if ^ should be removed now?19:22
gagehugobut I'm going through the tests for v2 stuff19:23
lbragstadgagehugo: yeah - that looks safe to remove at first glance19:23
lbragstadi believe only we (as in keystone) are using that model19:23
*** efried|afk is now known as efried19:28
*** dave-mccowan has quit IRC19:49
*** nicolasbock has quit IRC19:49
*** dave-mccowan has joined #openstack-keystone19:51
*** nicolasbock has joined #openstack-keystone19:55
openstackgerritGage Hugo proposed openstack/keystone master: Remove v2 schema and validation tests  https://review.openstack.org/51348819:57
*** nicolasbock has quit IRC20:00
*** dave-mccowan has quit IRC20:02
*** wes_dillingham has quit IRC20:04
*** nicolasbock has joined #openstack-keystone20:09
*** McClymontS has joined #openstack-keystone20:12
openstackgerritGage Hugo proposed openstack/keystone master: Remove middleware test for v2.0 tokens  https://review.openstack.org/51349120:13
*** nicolasbock has quit IRC20:14
*** nicolasbock has joined #openstack-keystone20:15
*** panbalag has joined #openstack-keystone20:17
*** AlexeyAbashkin has joined #openstack-keystone20:17
*** AlexeyAbashkin has quit IRC20:21
*** nicolasbock has quit IRC20:23
*** McClymontS has quit IRC20:28
*** nicolasbock has joined #openstack-keystone20:37
*** AlexeyAbashkin has joined #openstack-keystone20:38
*** AlexeyAbashkin has quit IRC20:42
*** aojea has joined #openstack-keystone20:50
*** AlexeyAbashkin has joined #openstack-keystone20:59
*** rvba has quit IRC21:02
*** rvba has joined #openstack-keystone21:03
*** rvba has quit IRC21:03
*** rvba has joined #openstack-keystone21:03
*** AlexeyAbashkin has quit IRC21:03
*** aojea has quit IRC21:08
*** aselius has quit IRC21:12
*** markvoelker has joined #openstack-keystone21:13
openstackgerritGage Hugo proposed openstack/keystone master: Remove v2 catalog endpoint and exp password tests  https://review.openstack.org/51351421:16
*** thorst has quit IRC21:16
gagehugolbragstad should "project-tag-query" be named something else?21:18
*** thorst has joined #openstack-keystone21:18
gagehugoI can correct it once the docs patch merges21:19
lbragstadgagehugo: i was curious if it should follow the convention in https://etherpad.openstack.org/p/queens-ptg-keystone-doc-cleanup21:19
lbragstadgagehugo: yeah - we can fix it in a subsequent patch21:19
lbragstador follow up21:19
*** rvba has quit IRC21:19
gagehugooh21:21
gagehugoshould it be "path" instead of "query"?21:21
*** thorst has quit IRC21:23
*** dave-mccowan has joined #openstack-keystone21:23
lbragstadthat's a good question - path would probably work buy query is more specific21:26
*** dave-mccowan has quit IRC21:29
*** raildo has quit IRC21:30
*** aselius has joined #openstack-keystone21:31
*** dave-mccowan has joined #openstack-keystone21:37
*** dave-mccowan has quit IRC21:44
*** thorst has joined #openstack-keystone21:47
*** mvk has joined #openstack-keystone21:48
*** markvoelker has quit IRC21:48
*** thorst has quit IRC21:51
*** wes_dillingham has joined #openstack-keystone21:56
*** markvoelker has joined #openstack-keystone22:02
*** jrist has quit IRC22:03
*** markvoelker has quit IRC22:06
openstackgerritMerged openstack/keystone master: Remove v2.0 assignment schema  https://review.openstack.org/51296422:10
*** markvoelker has joined #openstack-keystone22:11
*** markvoelker has quit IRC22:16
*** frontrunner has quit IRC22:16
*** jrist has joined #openstack-keystone22:19
*** markvoelker has joined #openstack-keystone22:20
openstackgerritGage Hugo proposed openstack/keystone master: Remove v2 schema and validation tests  https://review.openstack.org/51348822:20
openstackgerritMerged openstack/keystone master: Add project tags api-ref documentation and reno  https://review.openstack.org/47239622:22
*** phalmos has quit IRC22:23
*** thorst has joined #openstack-keystone22:23
*** markvoelker has quit IRC22:25
*** thorst_ has joined #openstack-keystone22:26
*** thorst has quit IRC22:27
openstackgerritGage Hugo proposed openstack/keystone master: Correct parameter to follow convention  https://review.openstack.org/51354422:28
*** markvoelker has joined #openstack-keystone22:29
*** thorst_ has quit IRC22:30
*** markvoelker has quit IRC22:34
*** markvoelker has joined #openstack-keystone22:39
*** markvoelker has quit IRC22:43
*** markvoelker has joined #openstack-keystone22:47
samueldmqlbragstad: cmurphy: kmalloc: JWT spec approved.22:56
kmallocnice22:56
*** dave-mccowan has joined #openstack-keystone22:57
openstackgerritMerged openstack/keystone-specs master: Propose JWT as a new token provider  https://review.openstack.org/51180623:03
*** thorst has joined #openstack-keystone23:07
*** wes_dillingham has quit IRC23:15
*** AlexeyAbashkin has joined #openstack-keystone23:16
*** AlexeyAbashkin has quit IRC23:21
*** markvoelker has quit IRC23:22
*** wes_dillingham has joined #openstack-keystone23:26
*** markvoelker has joined #openstack-keystone23:36
*** markvoelker has quit IRC23:40
*** markvoelker has joined #openstack-keystone23:45
*** markvoelker has quit IRC23:49
*** markvoelker has joined #openstack-keystone23:54
*** AlexeyAbashkin has joined #openstack-keystone23:58
*** markvoelker has quit IRC23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!