| *** dave-mccowan has joined #openstack-keystone | 00:05 | |
| *** edmondsw has joined #openstack-keystone | 00:31 | |
| *** edmondsw has quit IRC | 00:36 | |
| *** markvoelker has quit IRC | 01:08 | |
| *** catintheroof has quit IRC | 01:10 | |
| openstackgerrit | Merged openstack/keystone master: Add group system grant policies https://review.openstack.org/514725 | 01:11 |
|---|---|---|
| *** catintheroof has joined #openstack-keystone | 01:11 | |
| *** catintheroof has quit IRC | 01:15 | |
| *** gyee has quit IRC | 01:16 | |
| *** dave-mccowan has quit IRC | 01:34 | |
| *** namnh has joined #openstack-keystone | 01:46 | |
| *** dave-mccowan has joined #openstack-keystone | 01:55 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix list users by name https://review.openstack.org/529914 | 01:57 |
| *** markvoelker has joined #openstack-keystone | 02:05 | |
| lbragstad | wxy: o/ | 02:13 |
| lbragstad | wxy: how are things going? | 02:13 |
| *** annp has joined #openstack-keystone | 02:14 | |
| wxy | lbragstad: hi, | 02:15 |
| wxy | lbragstad: Happy New Year! | 02:15 |
| lbragstad | thanks, you too! | 02:15 |
| lbragstad | i took a second look at the driver patch for unified limits, it looks like it's getting pretty close | 02:16 |
| wxy | Glad to hear that. There are still some work for project/system scope part. | 02:17 |
| wxy | Otherwise, I think it'll ready for review. | 02:18 |
| *** dave-mccowan has quit IRC | 02:18 | |
| *** dave-mccowan has joined #openstack-keystone | 02:19 | |
| *** edmondsw has joined #openstack-keystone | 02:19 | |
| lbragstad | cool | 02:22 |
| lbragstad | i plan to dig into the manager bits tomorrow | 02:22 |
| *** edmondsw has quit IRC | 02:24 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Expose a get_enforcer method for oslo.policy scripts https://review.openstack.org/530828 | 02:24 |
| lbragstad | logan-: ayoung that should fix it ^ | 02:25 |
| ayoung | looking | 02:25 |
| ayoung | lbragstad, anyway we can add a test for that? | 02:26 |
| lbragstad | ayoung: i'm not sure... i hacked it together quick and it works, but i just followed an approach nova had | 02:26 |
| lbragstad | ayoung: https://github.com/openstack/nova/blob/master/nova/policy.py#L210 | 02:27 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add schema check for authorize request token https://review.openstack.org/526296 | 02:33 |
| ayoung | lbragstad, what if you do an exec from a unit test? | 02:36 |
| lbragstad | that might work | 02:47 |
| ayoung | lbragstad, something like: | 02:54 |
| ayoung | lbragstad, https://paste.fedoraproject.org/paste/ZqIjnP1XA9zN3NLsExzupw | 02:55 |
| ayoung | go through the results and ensure each line starts with "identity: | 02:55 |
| ayoung | and that there are at least X number of lines | 02:56 |
| ayoung | "service_role": "role:service" is in there, too, so maybe if it does not match "identity: make sure that a t lease a couple of them do match | 02:56 |
| ayoung | lbragstad, I tested with py27. Popen is one the might be different for 3. Probably a six command we should use to do that. | 02:57 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Expose a get_enforcer method for oslo.policy scripts https://review.openstack.org/530828 | 03:19 |
| lbragstad | ayoung: done | 03:19 |
| lbragstad | we'll see what happens with py3 | 03:19 |
| ayoung | its a good start | 03:23 |
| *** masber has quit IRC | 03:32 | |
| *** nicolasbock has quit IRC | 03:44 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add new tables for unified limits https://review.openstack.org/523041 | 03:51 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add db operation for unified limit https://review.openstack.org/524082 | 03:51 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add limit provider https://review.openstack.org/524109 | 03:51 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Implement policies for limits https://review.openstack.org/530143 | 03:51 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 03:51 |
| *** edmondsw has joined #openstack-keystone | 04:07 | |
| *** edmondsw has quit IRC | 04:12 | |
| *** gmann has joined #openstack-keystone | 04:19 | |
| *** masber has joined #openstack-keystone | 04:21 | |
| *** links has joined #openstack-keystone | 04:48 | |
| *** links has quit IRC | 04:58 | |
| *** links has joined #openstack-keystone | 05:03 | |
| *** dave-mccowan has quit IRC | 05:06 | |
| openstackgerrit | Merged openstack/keystone master: Deprecate [trust]/enabled option https://review.openstack.org/530501 | 05:07 |
| *** annp has quit IRC | 05:30 | |
| *** namnh has quit IRC | 05:30 | |
| *** annp has joined #openstack-keystone | 05:31 | |
| *** namnh has joined #openstack-keystone | 05:31 | |
| *** daidv has quit IRC | 05:34 | |
| *** daidv has joined #openstack-keystone | 05:35 | |
| *** daidv has quit IRC | 05:45 | |
| *** daidv has joined #openstack-keystone | 05:46 | |
| *** zhurong has joined #openstack-keystone | 05:48 | |
| *** edmondsw has joined #openstack-keystone | 05:56 | |
| *** edmondsw has quit IRC | 06:00 | |
| *** masber has quit IRC | 06:13 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add limit provider https://review.openstack.org/524109 | 06:16 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Implement policies for limits https://review.openstack.org/530143 | 06:16 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 06:16 |
| *** markvoelker has quit IRC | 06:28 | |
| *** pcaruana has joined #openstack-keystone | 07:09 | |
| *** david-lyle has quit IRC | 07:12 | |
| *** david-lyle has joined #openstack-keystone | 07:12 | |
| *** rcernin has quit IRC | 07:25 | |
| *** edmondsw has joined #openstack-keystone | 07:44 | |
| *** edmondsw has quit IRC | 07:48 | |
| *** tesseract has joined #openstack-keystone | 08:05 | |
| *** medy has joined #openstack-keystone | 08:15 | |
| *** medy has quit IRC | 08:16 | |
| *** medy has joined #openstack-keystone | 08:16 | |
| *** medy has quit IRC | 08:18 | |
| *** medy has joined #openstack-keystone | 08:18 | |
| *** medy has quit IRC | 08:19 | |
| *** medy has joined #openstack-keystone | 08:19 | |
| *** medy has quit IRC | 08:21 | |
| *** medy has joined #openstack-keystone | 08:21 | |
| *** medy has quit IRC | 08:22 | |
| *** medy has joined #openstack-keystone | 08:22 | |
| *** medy has quit IRC | 08:24 | |
| *** medy has joined #openstack-keystone | 08:24 | |
| *** medy has quit IRC | 08:25 | |
| *** medy has joined #openstack-keystone | 08:25 | |
| *** medy has quit IRC | 08:27 | |
| *** medy has joined #openstack-keystone | 08:27 | |
| *** medy has quit IRC | 08:28 | |
| *** medy has joined #openstack-keystone | 08:28 | |
| *** markvoelker has joined #openstack-keystone | 08:29 | |
| *** medy has quit IRC | 08:29 | |
| *** gmann has quit IRC | 08:33 | |
| *** gmann has joined #openstack-keystone | 08:59 | |
| *** markvoelker has quit IRC | 09:03 | |
| *** d0ugal has quit IRC | 09:27 | |
| *** magicboiz has joined #openstack-keystone | 09:27 | |
| *** d0ugal has joined #openstack-keystone | 09:28 | |
| *** d0ugal has quit IRC | 09:28 | |
| *** d0ugal has joined #openstack-keystone | 09:28 | |
| *** edmondsw has joined #openstack-keystone | 09:32 | |
| *** magicboiz has quit IRC | 09:33 | |
| *** edmondsw has quit IRC | 09:37 | |
| *** aojea has joined #openstack-keystone | 09:39 | |
| *** aojea has quit IRC | 09:40 | |
| *** aojea has joined #openstack-keystone | 09:41 | |
| *** magicboiz has joined #openstack-keystone | 09:45 | |
| *** markvoelker has joined #openstack-keystone | 10:01 | |
| *** mvk has quit IRC | 10:06 | |
| *** mvk has joined #openstack-keystone | 10:07 | |
| *** pcaruana has quit IRC | 10:09 | |
| *** pcaruana has joined #openstack-keystone | 10:10 | |
| *** namnh has quit IRC | 10:11 | |
| *** annp has quit IRC | 10:21 | |
| *** markvoelker has quit IRC | 10:34 | |
| *** magicboiz has quit IRC | 10:45 | |
| *** magicboiz has joined #openstack-keystone | 10:51 | |
| *** magicboiz has quit IRC | 10:56 | |
| *** aojea has quit IRC | 11:05 | |
| *** zhurong has quit IRC | 11:06 | |
| *** magicboiz has joined #openstack-keystone | 11:08 | |
| *** Drankis_ has joined #openstack-keystone | 11:12 | |
| *** aojea has joined #openstack-keystone | 11:15 | |
| *** edmondsw has joined #openstack-keystone | 11:20 | |
| *** panbalag has joined #openstack-keystone | 11:22 | |
| *** mvk has quit IRC | 11:23 | |
| *** panbalag has left #openstack-keystone | 11:23 | |
| *** edmondsw has quit IRC | 11:24 | |
| *** markvoelker has joined #openstack-keystone | 11:31 | |
| *** aojea has quit IRC | 11:35 | |
| *** Drankis_ has quit IRC | 11:35 | |
| *** nicolasbock has joined #openstack-keystone | 11:36 | |
| *** edmondsw has joined #openstack-keystone | 11:36 | |
| *** aojea has joined #openstack-keystone | 11:48 | |
| *** mvk has joined #openstack-keystone | 11:59 | |
| *** markvoelker has quit IRC | 12:05 | |
| *** raildo has joined #openstack-keystone | 12:13 | |
| *** edmondsw has quit IRC | 12:15 | |
| *** aojea has quit IRC | 12:34 | |
| *** magicboiz has quit IRC | 12:37 | |
| *** magicboiz has joined #openstack-keystone | 12:48 | |
| *** Jack_Iv has joined #openstack-keystone | 12:50 | |
| *** magicboiz has quit IRC | 12:52 | |
| *** catintheroof has joined #openstack-keystone | 12:58 | |
| *** catintheroof has quit IRC | 12:59 | |
| *** catintheroof has joined #openstack-keystone | 12:59 | |
| *** markvoelker has joined #openstack-keystone | 13:02 | |
| *** magicboiz has joined #openstack-keystone | 13:05 | |
| *** edmondsw has joined #openstack-keystone | 13:13 | |
| *** Jack_Iv has quit IRC | 13:18 | |
| *** edmondsw has quit IRC | 13:18 | |
| *** Jack_Iv has joined #openstack-keystone | 13:19 | |
| *** markvoelker has quit IRC | 13:19 | |
| *** markvoelker has joined #openstack-keystone | 13:20 | |
| *** Drankis has joined #openstack-keystone | 13:38 | |
| *** dave-mccowan has joined #openstack-keystone | 13:51 | |
| *** links has quit IRC | 13:57 | |
| *** panbalag has joined #openstack-keystone | 13:58 | |
| *** magicboiz has quit IRC | 14:18 | |
| *** edmondsw has joined #openstack-keystone | 14:37 | |
| *** panbalag has quit IRC | 14:40 | |
| *** cz2 has joined #openstack-keystone | 14:55 | |
| *** panbalag has joined #openstack-keystone | 14:56 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Expose a get_enforcer method for oslo.policy scripts https://review.openstack.org/530828 | 14:59 |
| *** panbalag has left #openstack-keystone | 14:59 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement controller logic for system user assignments https://review.openstack.org/515215 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement controller logic for system group assignments https://review.openstack.org/524017 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add system role assignment documentation https://review.openstack.org/524307 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add ability to list all system role assignments https://review.openstack.org/524407 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Teach TokenFormatter how to handle system scope https://review.openstack.org/525330 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system-scope in the token provider API https://review.openstack.org/525360 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Introduce assertions for system-scoped token testing https://review.openstack.org/528037 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system-scoped tokens https://review.openstack.org/525687 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add release note for system-scope https://review.openstack.org/528039 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update documentation to reflect system-scope https://review.openstack.org/530133 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Grant admin a role on the system during bootstrap https://review.openstack.org/530410 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement GET /v3/auth/system https://review.openstack.org/530490 | 15:01 |
| lbragstad | new version of oslo.policy should get those passing ^ | 15:01 |
| *** spilla has joined #openstack-keystone | 15:03 | |
| *** aojea has joined #openstack-keystone | 15:13 | |
| *** aojea has quit IRC | 15:14 | |
| *** aojea has joined #openstack-keystone | 15:14 | |
| *** links has joined #openstack-keystone | 15:25 | |
| *** links has quit IRC | 15:30 | |
| *** Drankis has quit IRC | 15:40 | |
| *** gmann has quit IRC | 15:43 | |
| *** dims has quit IRC | 16:09 | |
| *** dims has joined #openstack-keystone | 16:10 | |
| *** Jack_Iv has quit IRC | 16:18 | |
| *** openstackgerrit has quit IRC | 16:19 | |
| *** dave-mccowan has quit IRC | 16:24 | |
| *** mvk has quit IRC | 16:24 | |
| *** panbalag has joined #openstack-keystone | 16:25 | |
| *** dave-mccowan has joined #openstack-keystone | 16:25 | |
| *** panbalag has left #openstack-keystone | 16:26 | |
| *** ayoung has quit IRC | 16:34 | |
| *** pcaruana has quit IRC | 16:35 | |
| *** mvk has joined #openstack-keystone | 16:37 | |
| *** openstackgerrit has joined #openstack-keystone | 16:40 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Expose a get_enforcer method for oslo.policy scripts https://review.openstack.org/530828 | 16:40 |
| *** mvk has quit IRC | 16:43 | |
| *** catintheroof has quit IRC | 16:55 | |
| *** mvk has joined #openstack-keystone | 16:55 | |
| *** gyee has joined #openstack-keystone | 16:58 | |
| *** slunkad has quit IRC | 17:32 | |
| *** Jack_Iv has joined #openstack-keystone | 17:32 | |
| *** tesseract has quit IRC | 17:38 | |
| *** spilla has quit IRC | 17:43 | |
| *** mvk has quit IRC | 17:43 | |
| *** Jack_Iv has quit IRC | 18:03 | |
| *** aojea has quit IRC | 18:20 | |
| *** ChanServ sets mode: +r | 18:20 | |
| *** jhesketh has quit IRC | 19:08 | |
| kmalloc | o/ | 19:09 |
| kmalloc | morning | 19:09 |
| *** efried has quit IRC | 19:09 | |
| *** jhesketh has joined #openstack-keystone | 19:11 | |
| lbragstad | good afternoon | 19:29 |
| *** pcaruana has joined #openstack-keystone | 19:45 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add expired_at_int column to trusts https://review.openstack.org/530550 | 19:46 |
| lbragstad | cmurphy: nice - ^ that checks out for me locally as far as the tests go | 19:56 |
| *** dave-mccowan has quit IRC | 19:56 | |
| *** pcaruana has quit IRC | 19:59 | |
| cmurphy | lbragstad: it was the grenade test that was having issues | 20:01 |
| lbragstad | oh | 20:01 |
| lbragstad | i thought the indentation was causing unit test failures, too | 20:01 |
| cmurphy | those were fine, actually i should add a proper unit test to catch what the grenade test caught | 20:02 |
| cmurphy | also forgot the release note | 20:02 |
| kmalloc | basically you need the two columns for the upgrade... and then you have to wait a full cycle afterfor the contract | 20:08 |
| kmalloc | because sql-a (afaict) doesn't do well when a column disappears from the schema. | 20:08 |
| *** raildo has quit IRC | 20:26 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add expired_at_int column to trusts https://review.openstack.org/530550 | 20:28 |
| lbragstad | cmurphy: ++ | 20:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Expose a get_enforcer method for oslo.policy scripts https://review.openstack.org/530828 | 20:49 |
| *** portdirect has quit IRC | 20:50 | |
| *** portdirect has joined #openstack-keystone | 20:50 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 21:00 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 21:05 |
| *** edmondsw has quit IRC | 21:22 | |
| cmurphy | urgh UNIQUE KEY `duplicate_trust_constraint` (`trustor_user_id`,`trustee_user_id`,`project_id`,`impersonation`,`expires_at`) | 21:35 |
| cmurphy | kmalloc: is it safe to alter a unique constraint in a migration? | 21:35 |
| kmalloc | hmm | 21:35 |
| kmalloc | uh..... | 21:35 |
| kmalloc | i think that is a bad idea | 21:35 |
| kmalloc | wtf... | 21:36 |
| kmalloc | oh add a new unique constraint with all of them? | 21:36 |
| kmalloc | maybe should be ok | 21:36 |
| kmalloc | honestly the no-downtime upgrades are such a pita | 21:36 |
| cmurphy | okay yeah i think adding then deleting should work | 21:43 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 22:02 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add expired_at_int column to trusts https://review.openstack.org/530550 | 22:04 |
| *** rcernin has joined #openstack-keystone | 22:05 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add expired_at_int column to trusts https://review.openstack.org/530550 | 22:11 |
| lbragstad | jamielennox: curious what you take is on https://review.openstack.org/#/c/245629/8 versus https://review.openstack.org/#/c/523973/3 ? | 22:33 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add application credentials db migration https://review.openstack.org/524927 | 22:33 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add application credentials driver https://review.openstack.org/524928 | 22:33 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add Application Credentials manager https://review.openstack.org/524747 | 22:33 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add Application Credentials controller https://review.openstack.org/524423 | 22:33 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add application credential auth plugin https://review.openstack.org/525346 | 22:33 |
| *** nkinder has quit IRC | 22:42 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add expired_at_int column to trusts https://review.openstack.org/530550 | 22:53 |
| cmurphy | lbragstad: ^ lol i paid attention this time | 22:54 |
| lbragstad | lol | 22:54 |
| lbragstad | woo! | 22:54 |
| lbragstad | +2+A | 22:54 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 22:56 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 23:53 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!