Tuesday, 2017-12-12

*** betherly has joined #openstack-keystone00:00
*** timburke_ has quit IRC00:00
*** lxnch has quit IRC00:00
*** MeltedLux has joined #openstack-keystone00:02
*** AlexeyAbashkin has quit IRC00:02
*** melwitt has joined #openstack-keystone00:02
*** timburke has joined #openstack-keystone00:02
*** melwitt is now known as Guest8586900:03
*** mwhahaha has joined #openstack-keystone00:05
*** spzala has joined #openstack-keystone00:10
*** spzala has quit IRC00:14
*** spzala has joined #openstack-keystone00:23
*** Guest85869 is now known as melwitt00:26
*** spzala has quit IRC00:28
*** portdirect has joined #openstack-keystone00:29
*** spzala has joined #openstack-keystone00:34
*** Dinesh_Bhor has joined #openstack-keystone00:35
*** spzala has quit IRC00:38
*** spzala has joined #openstack-keystone00:42
*** spzala has quit IRC00:46
*** jmlowe_ has joined #openstack-keystone00:54
*** jmlowe has quit IRC00:55
*** spzala has joined #openstack-keystone00:57
*** gyee has quit IRC00:57
*** jmlowe_ has quit IRC00:59
*** spzala has quit IRC01:02
*** spzala has joined #openstack-keystone01:05
*** spzala has quit IRC01:09
*** spzala has joined #openstack-keystone01:10
*** spzala has quit IRC01:20
*** raildo has quit IRC01:22
*** spzala has joined #openstack-keystone01:23
*** spzala has quit IRC01:28
*** spzala has joined #openstack-keystone01:30
*** spzala has quit IRC01:35
*** MeltedLux has quit IRC01:37
*** MeltedLux has joined #openstack-keystone01:37
*** spzala has joined #openstack-keystone01:38
*** clenimar has quit IRC01:39
*** iurygregory has quit IRC01:39
*** spzala has quit IRC01:42
*** spzala has joined #openstack-keystone01:45
*** spzala has quit IRC01:50
*** spzala has joined #openstack-keystone01:52
*** spzala has quit IRC01:56
*** namnh has joined #openstack-keystone01:58
*** jhesketh has quit IRC01:59
*** spzala has joined #openstack-keystone02:04
*** spzala has quit IRC02:09
*** annp has joined #openstack-keystone02:15
*** spzala has joined #openstack-keystone02:18
*** zhurong has joined #openstack-keystone02:22
*** spzala has quit IRC02:22
openstackgerritwangxiyuan proposed openstack/keystone master: Extend comparator support for project list by tags  https://review.openstack.org/52349902:27
*** aselius has quit IRC02:29
*** spzala has joined #openstack-keystone02:31
*** clenimar has joined #openstack-keystone02:41
openstackgerritwangxiyuan proposed openstack/keystone-specs master: Limits API  https://review.openstack.org/45570902:44
*** iurygregory has joined #openstack-keystone02:44
*** r-daneel has quit IRC02:50
*** nicolasbock has quit IRC03:05
*** zhurong has quit IRC03:47
*** edmondsw has joined #openstack-keystone03:53
*** iurygregory has quit IRC03:55
*** iurygregory has joined #openstack-keystone03:55
*** edmondsw has quit IRC04:02
*** bhagyashris_ is now known as bhagyashris04:05
*** markvoelker_ has joined #openstack-keystone04:12
*** markvoelker has quit IRC04:12
*** clenimar has quit IRC04:22
*** iurygregory has quit IRC04:22
*** clenimar has joined #openstack-keystone04:22
*** iurygregory has joined #openstack-keystone04:23
*** Dinesh_Bhor has quit IRC04:58
*** spzala has quit IRC05:09
*** spzala has joined #openstack-keystone05:11
*** spzala has quit IRC05:16
*** edmondsw has joined #openstack-keystone05:18
*** edmondsw has quit IRC05:23
*** spzala has joined #openstack-keystone05:24
*** spzala has quit IRC05:29
*** spzala has joined #openstack-keystone05:30
*** spzala has quit IRC05:34
*** robcresswell has quit IRC05:39
*** fungi has quit IRC05:45
*** fungi has joined #openstack-keystone05:47
*** spzala has joined #openstack-keystone06:10
*** zhurong has joined #openstack-keystone06:10
*** spzala has quit IRC06:14
*** Dinesh_Bhor has joined #openstack-keystone06:46
*** josecastroleon has joined #openstack-keystone07:03
*** edmondsw has joined #openstack-keystone07:07
*** magicboiz has joined #openstack-keystone07:11
*** edmondsw has quit IRC07:12
*** Dinesh_Bhor has quit IRC07:13
*** rcernin has quit IRC07:21
*** robcresswell has joined #openstack-keystone07:39
*** d0ugal has quit IRC07:51
*** AlexeyAbashkin has joined #openstack-keystone07:53
*** d0ugal has joined #openstack-keystone07:57
*** hoonetorg has quit IRC08:06
*** hoonetorg has joined #openstack-keystone08:19
openstackgerritwangxiyuan proposed openstack/keystone master: Remove rolling_upgrade_password_hash_compat  https://review.openstack.org/52733708:21
*** tesseract has joined #openstack-keystone08:22
*** rcernin has joined #openstack-keystone08:36
-openstackstatus- NOTICE: Our CI system Zuul is currently not accessible. Wait with approving changes and rechecks until it's back online. Currently waiting for an admin to investigate.08:48
*** linkmark has joined #openstack-keystone08:51
*** edmondsw has joined #openstack-keystone08:56
*** edmondsw has quit IRC09:00
-openstackstatus- NOTICE: Zuul is back online, looks like a temporary network problem.09:08
*** sdaniel_ has joined #openstack-keystone09:10
*** jappleii__ has quit IRC09:10
sdaniel_Hi09:11
sdaniel_I have an installed OpenStack Ocata in my lab.09:11
sdaniel_I configured the heat, aodh, ceilometer and gnocchi09:11
sdaniel_But the aodh can't send alarm09:12
sdaniel_In the aodh-notifier.log I found this: Unable to notify alarm 97901000-55d5-4aa4-9491-c9f370697a3a: BadRequest: Expecting to find domain in user.09:12
sdaniel_Can somebody tell me what can be the problem ?09:13
wxysdaniel_: I think that it because that when Aodh try to get a token from keystone, the user's domain id/name is missing.09:24
*** mvk has quit IRC09:25
sdaniel_wxy: Actually I don't know why, because project_domain_name and user_domain_name are configured in the aodh.conf09:27
sdaniel_Both in service_credentials and keystone_authtoken09:28
wxysdaniel_: Do you use trust for notification? I checked aodh code. And I find that it only uses user_domain_id, not user_domain_name.09:34
sdaniel_wxy: I did not configure any trust_id in the aodh.conf, but I'll try the user_domain_id and let's see09:41
wxysdaniel_: what's the alarm_action for the alarm 97901000-55d5-4aa4-9491-c9f370697a3a?09:46
*** mvk has joined #openstack-keystone09:51
*** annp has quit IRC09:56
*** zhurong has quit IRC09:57
sdaniel_wxy: Thank you so much. AFter I added the user_domain_id into the aodh.conf and restarted the service, finally it worked.10:00
wxysdaniel_: cool. :)10:02
*** jhesketh has joined #openstack-keystone10:04
*** namnh has quit IRC10:08
*** spzala has joined #openstack-keystone10:11
*** spzala has quit IRC10:15
*** zhurong has joined #openstack-keystone10:27
*** Neptu has quit IRC10:41
*** sticker has joined #openstack-keystone10:59
*** AlexeyAbashkin has quit IRC11:15
*** zhurong has quit IRC11:25
*** nicolasbock has joined #openstack-keystone11:31
*** AlexeyAbashkin has joined #openstack-keystone11:40
*** mvk has quit IRC11:42
*** mvk has joined #openstack-keystone11:55
*** gmann_afk is now known as gmann11:55
*** raildo has joined #openstack-keystone12:10
*** spzala has joined #openstack-keystone12:19
*** spzala has quit IRC12:25
*** sticker has quit IRC12:34
openstackgerritwangxiyuan proposed openstack/keystone master: Remove rolling_upgrade_password_hash_compat  https://review.openstack.org/52733712:35
*** zhurong has joined #openstack-keystone12:59
*** zhurong has quit IRC13:14
*** edmondsw has joined #openstack-keystone13:16
*** sbezverk has quit IRC13:44
*** dave-mccowan has joined #openstack-keystone13:45
*** dave-mccowan has quit IRC13:48
*** dave-mccowan has joined #openstack-keystone13:56
*** sdaniel_ has quit IRC13:56
*** spzala has joined #openstack-keystone13:57
*** dave-mccowan has quit IRC14:00
*** spzala has quit IRC14:01
*** spzala has joined #openstack-keystone14:02
*** spzala has quit IRC14:06
gagehugoo/14:19
*** tesseract has quit IRC14:26
lbragstado/14:38
-openstackstatus- NOTICE: We're currently seeing an elevated rate of timeouts in jobs and the zuulv3.openstack.org dashboard is intermittently unresponsive, please stand by while we troubleshoot the issues.14:39
*** spilla has joined #openstack-keystone14:41
*** Neptu has joined #openstack-keystone14:44
*** sileht has joined #openstack-keystone14:47
*** spzala has joined #openstack-keystone14:47
silehthi, can I have some love on https://review.openstack.org/#/c/526624/ and https://review.openstack.org/#/c/526631/ ?14:47
*** Neptu has quit IRC14:55
*** rcernin has quit IRC15:00
*** dave-mccowan has joined #openstack-keystone15:09
*** aselius has joined #openstack-keystone15:34
*** jmlowe has joined #openstack-keystone15:44
*** jmlowe has quit IRC15:48
*** dave-mccowan has quit IRC16:02
*** josecastroleon has quit IRC16:05
*** jmlowe has joined #openstack-keystone16:10
kmallocsileht: -2 on the python-memcache. Sorry, that cannot be a hard requirement unless lbragstad specifically steps in and says we're reversing course on that.16:13
kmallocwe need to make it optional.16:13
*** jmlowe has quit IRC16:21
*** AlexeyAbashkin has quit IRC16:26
*** AlexeyAbashkin has joined #openstack-keystone16:38
*** jmlowe has joined #openstack-keystone16:39
*** jmlowe has quit IRC16:44
*** r-daneel has joined #openstack-keystone16:44
*** AlexeyAbashkin has quit IRC16:47
*** dave-mccowan has joined #openstack-keystone16:50
*** gyee has joined #openstack-keystone16:50
*** dave-mccowan has quit IRC17:05
*** edmondsw has quit IRC17:06
silehtkmalloc, -2 without proposing solution doesn't really help17:16
silehtkmalloc, on last version, "import keystonemiddleware.auth_token" just does not work...17:17
openstackgerritMehdi Abaakouk (sileht) proposed openstack/keystonemiddleware master: lazy loading of oslo_cache  https://review.openstack.org/52746617:22
silehtkmalloc, maybe you will prefer: https://review.openstack.org/52746617:23
*** magicboiz has quit IRC17:24
*** mvk has quit IRC17:27
*** Dave has quit IRC17:37
*** dave-mccowan has joined #openstack-keystone17:38
*** david-lyle has joined #openstack-keystone17:40
lbragstadping ayoung, breton, cmurphy, dstanek, edmondsw, gagehugo, henrynash, hrybacki, knikolla, lamt, lbragstad, lwanderley, kmalloc, rderose, rodrigods, samueldmq, spilla, aselius, dpar17:51
lbragstad9 minute meeting reminder17:51
spillaty17:52
*** Dave has joined #openstack-keystone17:53
*** edmondsw has joined #openstack-keystone17:56
kmallocsileht: yep, much better18:01
kmallocsileht: i'm happy to reverse the -2, fwiw, but i want more discussion so we clearly reverse course on depending on python-memcache18:01
kmallocsince we have historically said no hard-dependency on it18:02
*** edmondsw has quit IRC18:04
openstackgerritMehdi Abaakouk (sileht) proposed openstack/keystonemiddleware master: lazy loading of oslo_cache  https://review.openstack.org/52746618:05
*** nicolasbock has quit IRC18:08
*** jmlowe has joined #openstack-keystone18:12
silehtkmalloc: I have proposed another version that does like the previous implementation18:12
*** AlexeyAbashkin has joined #openstack-keystone18:14
*** AlexeyAbashkin has quit IRC18:18
gagehugolbragstad do you have any links for the security policy roadmap stuff?18:24
lbragstadhttp://specs.openstack.org/openstack/keystone-specs/specs/keystone/ongoing/policy-security-roadmap.html18:25
kmallocsileht: yeah, the second one you linked is fine, i'm also happy to remove my -2 if lbragstad steps in and says we will depend on it18:25
kmalloci'm -2 based upon historical stances on the hard-dep18:26
gagehugothanks18:26
*** AlexeyAbashkin has joined #openstack-keystone18:34
*** AlexeyAbashkin has quit IRC18:38
*** sbezverk has joined #openstack-keystone18:50
*** edmondsw has joined #openstack-keystone18:59
*** josecastroleon has joined #openstack-keystone19:00
lbragstad#startmeeting keystone-office-hours19:01
openstackMeeting started Tue Dec 12 19:01:02 2017 UTC and is due to finish in 60 minutes.  The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot.19:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.19:01
*** openstack changes topic to " (Meeting topic: keystone-office-hours)"19:01
*** ChanServ changes topic to "Queens release schedule: https://releases.openstack.org/queens/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/5F0h9Hoe/keystone"19:01
openstackThe meeting name has been set to 'keystone_office_hours'19:01
*** pramodrj07 has joined #openstack-keystone19:06
*** josecastroleon has quit IRC19:18
lbragstadjust fyi -i'll be working on the system-scope stuff during office hours19:25
lbragstadif anyone needs something reviewed, just let me know!19:25
silehtlbragstad, I have https://review.openstack.org/#/c/527466/ and https://review.openstack.org/#/c/526631/ to fix some breakage of 4.19.019:47
*** masuberu has joined #openstack-keystone19:48
lbragstadsileht: ah - i was in the middle of the cache one just a bit ago19:49
lbragstadlooking again19:49
*** masber has quit IRC19:51
gagehugoo/19:56
*** dave-mccowan has quit IRC19:56
*** mvk has joined #openstack-keystone20:10
-openstackstatus- NOTICE: The zuul scheduler has been restarted after lengthy troubleshooting for a memory consumption issue; earlier changes have been reenqueued but if you notice jobs not running for a new or approved change you may want to leave a recheck comment or a new approval vote20:15
kmallocsileht: +2/+A the lazyload patch20:22
kmallocjust to land a fix20:22
kmallocwe can revisit the requirement bits separately20:22
kmalloclbragstad: ^20:23
lbragstadyeah - let's just get a release note in there, too20:24
lbragstadthat'd be good20:24
lbragstadcc sileht ^20:25
*** lxnch has joined #openstack-keystone20:31
*** openstackgerrit has quit IRC20:34
*** alex_xu has quit IRC20:34
*** timss has quit IRC20:35
*** sileht has quit IRC20:35
*** jmccrory has quit IRC20:35
*** lxnch_ has quit IRC20:35
*** brad[] has quit IRC20:35
*** amrith has quit IRC20:35
*** homeski has quit IRC20:37
*** lxnch has quit IRC20:37
*** pramodrj07 has quit IRC20:38
*** alex_xu has joined #openstack-keystone20:39
*** sileht has joined #openstack-keystone20:40
*** jmccrory has joined #openstack-keystone20:40
*** homeski has joined #openstack-keystone20:40
*** timss has joined #openstack-keystone20:40
*** lxnch has joined #openstack-keystone20:42
*** amrith has joined #openstack-keystone20:43
*** kmalloc has quit IRC20:45
*** clarkb has quit IRC20:45
*** andymccr has quit IRC20:45
*** mancdaz has quit IRC20:45
*** jistr has quit IRC20:45
*** mancdaz has joined #openstack-keystone20:45
*** jistr has joined #openstack-keystone20:45
*** andymccr has joined #openstack-keystone20:45
*** kmalloc has joined #openstack-keystone20:45
*** clarkb has joined #openstack-keystone20:45
*** lxnch_ has joined #openstack-keystone20:52
*** jose-phillips has quit IRC20:53
*** jose-phillips has joined #openstack-keystone20:54
*** dave-mccowan has joined #openstack-keystone20:55
*** lxnch has quit IRC20:56
*** dave-mcc_ has joined #openstack-keystone20:59
*** dave-mccowan has quit IRC20:59
*** brad[] has joined #openstack-keystone21:06
*** linkmark has quit IRC21:20
*** jappleii__ has joined #openstack-keystone21:23
*** jappleii__ has quit IRC21:24
*** jappleii__ has joined #openstack-keystone21:25
*** jappleii__ has quit IRC21:26
*** jappleii__ has joined #openstack-keystone21:27
*** jappleii__ has quit IRC21:27
*** jappleii__ has joined #openstack-keystone21:28
*** ___david has joined #openstack-keystone21:30
*** openstackgerrit has joined #openstack-keystone21:30
openstackgerritGage Hugo proposed openstack/keystone master: Move fernet specific doctor checks into tokens  https://review.openstack.org/52752721:30
*** AlexeyAbashkin has joined #openstack-keystone21:34
*** AlexeyAbashkin has quit IRC21:38
*** dklyle has joined #openstack-keystone21:48
*** david-lyle has quit IRC21:48
*** sticker has joined #openstack-keystone21:57
*** AlexeyAbashkin has joined #openstack-keystone21:57
*** rcernin has joined #openstack-keystone21:58
*** raildo has quit IRC21:59
lbragstad#endmeeting22:00
*** openstack changes topic to "Queens release schedule: https://releases.openstack.org/queens/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/5F0h9Hoe/keystone"22:00
openstackMeeting ended Tue Dec 12 22:00:02 2017 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)22:00
openstackMinutes:        http://eavesdrop.openstack.org/meetings/keystone_office_hours/2017/keystone_office_hours.2017-12-12-19.01.html22:00
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/keystone_office_hours/2017/keystone_office_hours.2017-12-12-19.01.txt22:00
openstackLog:            http://eavesdrop.openstack.org/meetings/keystone_office_hours/2017/keystone_office_hours.2017-12-12-19.01.log.html22:00
*** AlexeyAbashkin has quit IRC22:02
*** sticker has quit IRC22:10
*** sticker has joined #openstack-keystone22:10
*** spilla has quit IRC22:22
openstackgerritGage Hugo proposed openstack/keystone master: Rename fernet_utils to token_utils  https://review.openstack.org/52753722:39
*** spzala has quit IRC22:48
*** spzala has joined #openstack-keystone22:48
*** spzala has quit IRC22:53
*** jmlowe has quit IRC22:55
openstackgerritGage Hugo proposed openstack/keystone master: Move token_formatter to token  https://review.openstack.org/52753822:59
___davidI'm trying to figure out why the s3_extension is not working for me. I need it for swift3 (Amazon s3 compatability in Swift).   I'm using pike keystone with v2.0 auth. When the swift3 middlware talks to keystone, it gets a 404 response according to my nginx logs. I was using newton keystone recently and upgraded to pike to see if that resolved the issue, which it did not.23:01
___david[12/Dec/2017:22:56:01 +0000] "POST /v2.0/s3tokens HTTP/1.1" 404 153 "-" "python-requests/2.18.1"23:01
___david^ that's from the admin server nginx logs23:02
*** edmondsw has quit IRC23:02
___davidMy admin API in the paste config looks like this:23:02
___david[pipeline:admin_api] # The last item in this pipeline must be admin_service or an equivalent # application. It cannot be a filter. pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler url_normalize request_id build_auth_context token_auth json_body ec2_extension s3_extension admin_service23:03
*** edmondsw has joined #openstack-keystone23:05
*** edmondsw has quit IRC23:10
*** niraj_singh has quit IRC23:18
*** niraj_singh has joined #openstack-keystone23:18
*** bhagyashri_s has joined #openstack-keystone23:19
*** jmlowe has joined #openstack-keystone23:21
*** bhagyashris has quit IRC23:22
___davidTo use the s3_extension in keystone do you need an s3 endpoint ?23:24
timburke___david: how did you get the credentials for swift3? from playing around a bit, it looks like the s3tokens endpoint can respond 404 if the "access" part of the credential (ie, the access key ID in s3 documentation) isn't recognized23:29
timburkenote that those credentials are separate from the ordinary username/password for a keystone user; they should be created with `openstack ec2 credentials create ...`23:29
___davidtimburke: Oh..  I was using the keystone creds, I was not aware that `openstack ec2 credentials create ...` was required23:30
timburkethat's almost certainly because i never got around to mentioning it in https://github.com/openstack/swift3/blob/master/README.md :-(23:32
timburkesorry23:32
*** jmlowe has quit IRC23:33
*** edmondsw has joined #openstack-keystone23:44
*** edmondsw has quit IRC23:48
openstackgerritGage Hugo proposed openstack/keystone master: Add new config option and setup for token keys  https://review.openstack.org/52754223:49
*** jmlowe has joined #openstack-keystone23:53
___davidthanks timburke . I now have a 200 status code from s3tokens.  "POST /v2.0/s3tokens HTTP/1.1" 200 1875 "-" "python-requests/2.18.1" .  I'm still geting SignatureDoesNotMatch from "aws s3 ls" but it's progress....23:54

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!