Thursday, 2018-01-11

*** jmlowe has quit IRC00:00
*** edmondsw has quit IRC00:00
*** jmlowe has joined #openstack-keystone00:00
*** hoonetorg has quit IRC00:15
*** hoonetorg has joined #openstack-keystone00:16
*** browne has joined #openstack-keystone00:36
*** browne has quit IRC00:36
openstackgerritLance Bragstad proposed openstack/keystone master: Implement controller logic for system group assignments  https://review.openstack.org/52401700:36
openstackgerritLance Bragstad proposed openstack/keystone master: Add system role assignment documentation  https://review.openstack.org/52430700:36
openstackgerritLance Bragstad proposed openstack/keystone master: Add ability to list all system role assignments  https://review.openstack.org/52440700:36
openstackgerritLance Bragstad proposed openstack/keystone master: Teach TokenFormatter how to handle system scope  https://review.openstack.org/52533000:36
openstackgerritLance Bragstad proposed openstack/keystone master: Implement system-scope in the token provider API  https://review.openstack.org/52536000:36
openstackgerritLance Bragstad proposed openstack/keystone master: Introduce assertions for system-scoped token testing  https://review.openstack.org/52803700:36
openstackgerritLance Bragstad proposed openstack/keystone master: Implement system-scoped tokens  https://review.openstack.org/52568700:36
openstackgerritLance Bragstad proposed openstack/keystone master: Add release note for system-scope  https://review.openstack.org/52803900:36
openstackgerritLance Bragstad proposed openstack/keystone master: Update documentation to reflect system-scope  https://review.openstack.org/53013300:36
openstackgerritLance Bragstad proposed openstack/keystone master: Grant admin a role on the system during bootstrap  https://review.openstack.org/53041000:36
openstackgerritLance Bragstad proposed openstack/keystone master: Implement GET /v3/auth/system  https://review.openstack.org/53049000:36
*** jamiec has quit IRC00:52
*** jamiec has joined #openstack-keystone00:59
*** mvk has quit IRC01:01
*** threestrands has quit IRC01:03
*** zhurong has joined #openstack-keystone01:33
*** panbalag has quit IRC01:35
*** rcernin has quit IRC01:42
*** edmondsw has joined #openstack-keystone01:44
*** edmondsw has quit IRC01:48
*** markvoelker has joined #openstack-keystone01:50
*** rcernin has joined #openstack-keystone01:50
*** annp has joined #openstack-keystone02:11
*** namnh has joined #openstack-keystone02:18
*** pooja has quit IRC02:31
*** markvoelker has quit IRC02:36
*** threestrands has joined #openstack-keystone02:47
*** masber has quit IRC03:02
*** masber has joined #openstack-keystone03:05
*** gyee has quit IRC03:16
*** harlowja_ has quit IRC03:21
*** zhurong has quit IRC04:12
*** daidv has joined #openstack-keystone04:16
*** links has joined #openstack-keystone04:25
*** spzala has joined #openstack-keystone04:31
*** spzala has quit IRC04:42
*** links has quit IRC04:56
*** links has joined #openstack-keystone04:57
*** itlinux has quit IRC05:14
*** edmondsw has joined #openstack-keystone05:20
*** edmondsw has quit IRC05:24
*** zhurong has joined #openstack-keystone05:28
*** rcernin has quit IRC05:29
*** harlowja has joined #openstack-keystone05:29
*** rajalokan has joined #openstack-keystone05:42
*** markvoelker has joined #openstack-keystone05:47
*** rajalokan has quit IRC06:00
*** hoonetorg has quit IRC06:08
*** hoonetorg has joined #openstack-keystone06:20
*** annp has quit IRC06:38
*** markvoelker has quit IRC06:40
*** markvoelker has joined #openstack-keystone06:42
*** abhi89 has joined #openstack-keystone06:46
*** harlowja has quit IRC06:47
*** threestrands has quit IRC07:00
*** threestrands has joined #openstack-keystone07:01
*** threestrands has quit IRC07:01
*** threestrands has joined #openstack-keystone07:01
*** threestrands has quit IRC07:02
*** threestrands has joined #openstack-keystone07:03
*** threestrands has quit IRC07:03
*** threestrands has joined #openstack-keystone07:03
*** threestrands has quit IRC07:04
*** threestrands has joined #openstack-keystone07:04
*** edmondsw has joined #openstack-keystone07:08
*** edmondsw has quit IRC07:13
*** pcaruana has joined #openstack-keystone07:21
*** dims_ has quit IRC07:21
*** dims has joined #openstack-keystone07:25
*** afred312 has quit IRC07:27
*** afred312 has joined #openstack-keystone07:30
*** annp has joined #openstack-keystone08:01
*** AlexeyAbashkin has joined #openstack-keystone08:08
*** threestrands has quit IRC08:08
*** tesseract has joined #openstack-keystone08:17
*** pcaruana has quit IRC08:44
*** magicboiz has joined #openstack-keystone08:45
*** magicboiz has quit IRC08:45
*** links has quit IRC08:46
*** jaosorior has joined #openstack-keystone08:47
*** edmondsw has joined #openstack-keystone08:56
*** links has joined #openstack-keystone08:59
*** edmondsw has quit IRC09:01
*** links has quit IRC09:51
*** sxc731 has joined #openstack-keystone10:00
*** pcaruana has joined #openstack-keystone10:04
*** links has joined #openstack-keystone10:05
*** markvoelker has quit IRC10:13
*** sambetts|afk is now known as sambetts10:14
*** namnh has quit IRC10:14
*** mvk has joined #openstack-keystone10:14
*** zhurong has quit IRC10:35
*** aloga_ has joined #openstack-keystone10:37
johnthetubaguycmurphy: I just saw you have patches for the application-credentials up, awesome stuff. Just got off another call where someone really needs those (due to AD integration).10:40
*** abhi89 has quit IRC10:43
*** edmondsw has joined #openstack-keystone10:44
*** edmondsw has quit IRC10:49
*** sxc731 has quit IRC10:56
*** AlexeyAbashkin has quit IRC11:06
*** sxc731 has joined #openstack-keystone11:11
*** AlexeyAbashkin has joined #openstack-keystone11:25
*** pcaruana has quit IRC12:02
*** pcaruana|afk| has joined #openstack-keystone12:02
*** annp has quit IRC12:05
*** markvoelker has joined #openstack-keystone12:14
cmurphyjohnthetubaguy: :D hoping to get it all done for Queens12:19
johnthetubaguycmurphy: awesome :)12:19
*** raildo has joined #openstack-keystone12:19
*** sxc731 has quit IRC12:25
*** mvk has quit IRC12:25
*** jose-phi_ has joined #openstack-keystone12:26
*** jose-phillips has quit IRC12:27
*** edmondsw has joined #openstack-keystone12:33
*** Suramya has joined #openstack-keystone12:33
*** edmondsw has quit IRC12:38
*** markvoelker has quit IRC12:48
*** pcaruana|afk| has quit IRC12:49
*** pcaruana|afk| has joined #openstack-keystone13:02
*** jaosorior has quit IRC13:09
*** mvk has joined #openstack-keystone13:26
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext ep-filter.inc  https://review.openstack.org/53281513:32
*** markvoelker has joined #openstack-keystone13:44
lbragstado/13:45
*** abhi89 has joined #openstack-keystone13:47
openstackgerritMerged openstack/keystone master: Reorganize api-ref: v3 service-catalog  https://review.openstack.org/53031713:49
*** masber has quit IRC13:52
*** efried has joined #openstack-keystone13:53
*** panbalag has joined #openstack-keystone13:54
*** McClymontS has joined #openstack-keystone13:55
*** StefanPaetowJisc has joined #openstack-keystone14:00
*** StefanPaetowJisc has quit IRC14:16
*** dave-mccowan has joined #openstack-keystone14:16
*** markvoelker has quit IRC14:18
*** deepika08 has joined #openstack-keystone14:19
*** edmondsw has joined #openstack-keystone14:21
*** edmondsw_ has joined #openstack-keystone14:24
*** edmondsw has quit IRC14:28
lbragstadSuramya: o/14:32
lbragstadI just saw your comment about reorganizing the os-federation API document14:33
Suramyalbragstad: o/14:33
Suramyalbragstad: yeah. I am not sure how to reorganize this one14:34
*** McClymontS has quit IRC14:34
lbragstadhttps://developer.openstack.org/api-ref/identity/v3-ext/index.html#os-federation-api14:34
lbragstadwhich parts specifically do you have questions about?14:34
Suramyalbragstad: I mean it does not seem to have any reorganization done?14:38
lbragstadyeah - it looks like the APIs don't follow the convention we've applied to other sections of the documentation14:39
lbragstadSuramya: or are you referencing the documentation before the API reference starts?14:41
lbragstadlike this - https://developer.openstack.org/api-ref/identity/v3-ext/index.html#id103 ?14:41
Suramyalbragstad: no not referencing the documentation before the API reference14:44
*** edmondsw_ is now known as edmondsw14:45
openstackgerritLance Bragstad proposed openstack/keystone master: Reorganize create identity provider API reference  https://review.openstack.org/53284014:49
lbragstadSuramya: couldn't we do something like that ^14:49
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext simple-cert.inc  https://review.openstack.org/53284214:56
Suramyalbragstad: yes right o/14:56
Suramyalbragstad: has it to be a set of different patches? or all combined?14:57
Suramyalbragstad: for the federation?14:58
lbragstadSuramya: you can break them up however you like - if it's easier to do each resource individually (one patch for identity providers, one for service providers, etc.) then we can update trello to reflect that14:59
Suramyalbragstad: yes sure will do individually15:00
lbragstadSuramya: awesome - i'll update trello15:00
Suramyalbragstad: sure thanks :)15:01
*** markvoelker has joined #openstack-keystone15:02
*** markvoelker has quit IRC15:02
lbragstadSuramya: no problem15:02
*** StefanPaetowJisc has joined #openstack-keystone15:03
*** StefanPaetowJisc has quit IRC15:09
knikollao/15:10
*** sxc731 has joined #openstack-keystone15:11
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext federation assertion.inc  https://review.openstack.org/53285515:17
*** edmondsw has quit IRC15:18
*** markvoelker has joined #openstack-keystone15:24
*** edmondsw has joined #openstack-keystone15:24
gagehugoo/15:26
knikollagagehugo: o/15:27
* knikolla waiting for github to come back up so i can git pull my notes repo15:27
knikollaoh, only the web ui is down i think.15:28
*** afred312 has quit IRC15:31
*** afred312 has joined #openstack-keystone15:32
*** phalmos has joined #openstack-keystone15:32
*** itlinux has joined #openstack-keystone15:37
*** links has quit IRC15:38
openstackgerritGage Hugo proposed openstack/keystone master: WIP - Add functional testing gate  https://review.openstack.org/53101415:40
*** itlinux has quit IRC15:47
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext federation mapping.inc  https://review.openstack.org/53288515:55
*** spilla has joined #openstack-keystone15:59
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext federation projects-domains.inc  https://review.openstack.org/53288916:06
*** itlinux has joined #openstack-keystone16:08
*** akrzos is now known as akrzos-pto16:18
*** akrzos-pto is now known as akrzos16:18
*** phalmos has quit IRC16:25
*** phalmos has joined #openstack-keystone16:45
*** aloga_ has quit IRC16:50
*** aloga_ has joined #openstack-keystone16:51
*** AlexeyAbashkin has quit IRC16:53
*** pcaruana|afk| has quit IRC16:57
*** McClymontS has joined #openstack-keystone17:03
*** McClymontS has quit IRC17:03
*** phalmos has quit IRC17:06
*** links has joined #openstack-keystone17:17
*** links has quit IRC17:17
*** deepika08 has quit IRC17:19
*** phalmos has joined #openstack-keystone17:19
*** StefanPaetowJisc has joined #openstack-keystone17:40
*** aloga_ has quit IRC17:40
-openstackstatus- NOTICE: Due to an unexpected issue with zuulv3.o.o, we were not able to preserve running jobs for a restart. As a result, you'll need to recheck your previous patchsets17:47
*** StefanPaetowJisc has quit IRC17:54
*** sambetts is now known as sambetts|afk17:54
*** jistr is now known as jistr|afk17:55
*** nicolasbock has joined #openstack-keystone18:00
*** AlexeyAbashkin has joined #openstack-keystone18:20
*** AlexeyAbashkin has quit IRC18:24
*** mvk has quit IRC18:32
*** Suramya has quit IRC18:33
*** panbalag has left #openstack-keystone18:33
*** phalmos_ has joined #openstack-keystone18:34
*** phalmos has quit IRC18:37
*** phalmos_ has quit IRC18:39
*** tesseract has quit IRC18:45
*** AlexeyAbashkin has joined #openstack-keystone18:57
*** AlexeyAbashkin has quit IRC19:01
*** ayoung has joined #openstack-keystone19:02
*** sxc731 has quit IRC19:06
*** itlinux has quit IRC19:26
*** harlowja has joined #openstack-keystone19:43
*** lintonv has joined #openstack-keystone19:47
*** edmondsw_ has joined #openstack-keystone19:48
*** edmonds__ has joined #openstack-keystone19:48
*** edmondsw has quit IRC19:52
*** edmondsw_ has quit IRC19:52
*** itlinux has joined #openstack-keystone19:54
*** itlinux has quit IRC19:55
*** jistr|afk is now known as jistr19:57
*** phalmos has joined #openstack-keystone20:03
lbragstadcmurphy: did we remove the ability for users to supply their own secrets when creating an application credential?20:07
lbragstadsecrets are always going to be generated by keystone?20:08
*** mvk has joined #openstack-keystone20:08
cmurphylbragstad: no we didn't20:08
* lbragstad looks back at the manager code20:09
cmurphylbragstad: the secret is generated in the controller20:09
lbragstadoh20:09
lbragstadi haven't gotten that far yet...20:09
cmurphy(open to suggestions on where the right place for that to live is)20:10
lbragstadi was going to suggest an addition backend test where you can provide your own secret20:10
lbragstadbut that might not make sense if that logic is in the controller20:10
cmurphylbragstad: https://review.openstack.org/#/c/524423/26/keystone/application_credential/controllers.py@6220:11
cmurphyhttps://review.openstack.org/#/c/524423/26/keystone/application_credential/controllers.py@9720:11
lbragstadah20:12
cmurphymy rationalization for having it in the controller is that 1) it's sort of an input-validation thing, checking whether a secret was provided and 2) the secret itself is never stored, just transformed into a hash that is stored, so it sort of feels like generating it should live further away from the backend20:14
cmurphybut idk20:14
lbragstadyeah - hard to argue with that rationale20:17
lbragstadi think my only reason for putting it in the manager is that it is business logic to some extent, but if that's the case there are areas were we violate that with managers/controllers anyway20:18
lbragstadwhere we*20:18
*** phalmos has quit IRC20:19
lbragstadnow that i understand it, i'm good with it being in the controller20:19
openstackgerritGage Hugo proposed openstack/keystone master: WIP - Add functional testing gate  https://review.openstack.org/53101420:20
lbragstadit wouldn't be hard to change if we ever decided to change it20:21
cmurphythat's true20:21
gagehugothere's schema validation for the secret right? if so then yeah controller seems good20:22
cmurphythe schema validates that it's a string or null20:23
*** sxc731 has joined #openstack-keystone20:23
openstackgerritColleen Murphy proposed openstack/keystone master: Add application credentials db migration  https://review.openstack.org/52492720:28
gagehugook20:30
*** panbalag has joined #openstack-keystone20:40
*** kmadac has joined #openstack-keystone20:42
kmadachi, when I install keystone from upstream release package or from github by cloning the repo I cannot ran 'db_sync' because file migrate.cfg is missing in /usr/local/lib/python2.7/dist-packages/keystone/common/sql/migrate_repo. As soon as I copy it there, it starts to work. Any ideas why setup doesn't copy the file?20:47
*** aloga_ has joined #openstack-keystone20:51
*** phalmos has joined #openstack-keystone20:56
*** raildo has quit IRC20:56
*** bigdogstl has joined #openstack-keystone20:56
*** david-lyle has quit IRC21:03
*** david-lyle has joined #openstack-keystone21:04
lbragstaddidn't we just have this error on master? http://logs.openstack.org/periodic-stable/git.openstack.org/openstack/keystone/stable/pike/build-openstack-sphinx-docs/a5a6cb8/job-output.txt.gz#_2018-01-09_06_13_52_29743221:04
cmurphywe did...21:07
*** edmonds__ is now known as edmondsw21:07
cmurphythe fix was in one of the infra repos so i don't think we missed a backport?21:08
*** masber has joined #openstack-keystone21:10
cmurphykmadac: sorry we don't mean to ignore you - i've never seen an error like that, it seems like maybe the pip install went wrong? that file is part of the git repo so there shouldn't be any reason it wouldn't automatically end up there21:11
lbragstadkmadac: do you have a trace or are you following a specific set of steps?21:15
lbragstadcmurphy: i haven't seen a patch from opb against stable/pike in a while21:15
*** bigdogstl has quit IRC21:15
kmadaclbragstad: yes, I will send in few minutes exact steps of what I'm doing21:16
openstackgerritGage Hugo proposed openstack/keystone master: Add new config option and setup for token keys  https://review.openstack.org/52754221:17
cmurphylbragstad: maybe it was only ever fixed on master21:17
openstackgerritColleen Murphy proposed openstack/keystone master: Add application credentials driver  https://review.openstack.org/52492821:24
openstackgerritColleen Murphy proposed openstack/keystone master: Add Application Credentials manager  https://review.openstack.org/52474721:24
openstackgerritColleen Murphy proposed openstack/keystone master: Extract expiration validation to utils  https://review.openstack.org/53225721:24
*** aloga_ has quit IRC21:25
kmadaclbragstad: here is snippet what I'm doing and what error I got: https://pastebin.com/vmtp3eqU21:28
*** sxc731 has quit IRC21:41
*** bigdogstl has joined #openstack-keystone21:45
*** rcernin has joined #openstack-keystone21:46
*** panbalag has left #openstack-keystone21:53
*** bigdogstl has quit IRC21:53
lbragstadkmadac: checking21:57
*** threestrands has joined #openstack-keystone21:58
*** threestrands has quit IRC21:58
*** threestrands has joined #openstack-keystone21:58
kmadaclbragstad: thx21:58
*** spilla has quit IRC21:58
*** threestrands has quit IRC21:59
*** threestrands has joined #openstack-keystone21:59
*** threestrands has quit IRC21:59
*** threestrands has joined #openstack-keystone21:59
lbragstadkmadac: that's strange - i've never seen that before21:59
*** threestrands has quit IRC22:00
*** threestrands has joined #openstack-keystone22:01
kmadaclbragstad: i used same steps for Newton release and it worked flawlessly22:01
*** threestrands has quit IRC22:02
*** gyee has joined #openstack-keystone22:02
*** threestrands has joined #openstack-keystone22:02
openstackgerritAdrian Turjak proposed openstack/python-keystoneclient master: Make filter_kwargs check before adding postfix  https://review.openstack.org/53299022:03
lbragstadkmadac: hmm22:03
lbragstadso i just did the same exact steps you did22:03
lbragstadbut i installed it into a virtualenv and everything worked22:04
lbragstadoh - wait...22:06
lbragstadnevermind22:06
lbragstadi spoke too soon22:06
*** nicolasbock has quit IRC22:10
*** bigdogstl has joined #openstack-keystone22:12
kmadaclbragstad: does it mean you hit the same issue?22:13
lbragstadyeah - i get this when i do keystone-manage db_version22:13
lbragstadhttp://paste.openstack.org/raw/643163/22:14
kmadaclbragstad: yes, it is the same error22:15
*** dave-mccowan has quit IRC22:16
*** dave-mccowan has joined #openstack-keystone22:17
openstackgerritColleen Murphy proposed openstack/keystone master: Add Application Credentials controller  https://review.openstack.org/52442322:17
openstackgerritColleen Murphy proposed openstack/keystone master: WIP Add application credential auth plugin  https://review.openstack.org/52534622:17
lbragstadkmadac: that's really strange22:18
lbragstadkmadac: what version of sqlalchemy-migrate are you using in newton?22:19
lbragstad0.9.* /22:19
lbragstadthe version of sqlalchemy-migrate i have is 0.11.022:19
lbragstadbut i downgraded to 0.9.6 and i was still able to recreate it (not sure if that is the issue)22:20
kmadaclbragstad: sqlalchemy-migrate (0.10.0)22:20
lbragstadhmm - i can recreate with 0.11.0, 0.10.0, and 0.9.622:21
kmadaclbragstad: when I copied the file keystone/common/sql/migrate_repo/migrate.cfg  to /usr/local/lib/python2.7/dist-packages/keystone/common/sql/migrate_repo, it started to work22:21
kmadacit seems that pbr did not copied the .cfg file during installation22:21
lbragstadhuh22:21
lbragstadweird22:22
kmadacsame happend for keystone/common/sql/expand_repo/migrate.cfg, keystone/common/sql/data_migration_repo/migrate.cfg and keystone/common/sql/contract_repo/migrate.cfg22:22
lbragstadkmadac: have you tinkered with PBR at all?22:24
*** dave-mccowan has quit IRC22:25
kmadaclbragstad: not yet, only what i know is that Newton version had pbr (1.10.0) and Pike has now pbr (3.1.1)22:26
*** bigdogstl has quit IRC22:26
*** bigdogstl has joined #openstack-keystone22:26
lbragstadyeah - it broke for me on version 1.10.022:26
kmadaclbragstad: as a workaround I created MANIFEST.in file with all 4 files -> http://paste.openstack.org/show/643175/22:27
kmadaclbragstad: and after that, db_sync is working22:28
lbragstadi've never had to do that to get pbr to work, which is odd22:29
kmadaclbragstad:  I do now have any experience with pbr so I will need more time to investigate22:29
kmadaclbragstad:  * I do NOT22:30
lbragstadyeah - i don't use it extensively22:30
lbragstadbut this seems like a bug in PBR or we're not using it properly22:30
*** itlinux has joined #openstack-keystone22:30
kmadacI'm going to try to downgrade pbr. Maybe more recent versions are buggy22:34
lbragstadi went down to 0.8.*22:36
kmadacin requirements.txt there is pbr!=2.1.0,>=2.0.022:37
lbragstadkmadac: submitted a bug - https://bugs.launchpad.net/pbr/+bug/174280922:38
openstackLaunchpad bug 1742809 in PBR "PBR doesn't seem to copy migrate.cfg into proper locations" [Undecided,New]22:38
kmadaclbragstad:  thanks for your effort. I will regularly check the bug22:41
lbragstadkmadac: someone in -infra might be more educated than am I with PBR though22:44
*** markvoelker has quit IRC22:49
*** markvoelker has joined #openstack-keystone22:49
*** kmadac has quit IRC22:53
*** markvoelker has quit IRC22:54
*** edmondsw has quit IRC22:54
*** ayoung has quit IRC22:54
*** edmondsw has joined #openstack-keystone22:55
*** itlinux has quit IRC22:55
*** markvoelker has joined #openstack-keystone22:56
*** itlinux has joined #openstack-keystone22:57
*** edmondsw has quit IRC22:59
*** markvoelker has quit IRC22:59
*** markvoelker has joined #openstack-keystone23:00
*** ayoung has joined #openstack-keystone23:04
*** markvoelker has quit IRC23:05
*** itlinux has quit IRC23:12
*** browne has joined #openstack-keystone23:14
*** browne has quit IRC23:15
openstackgerritGage Hugo proposed openstack/keystone master: WIP - Add functional testing gate  https://review.openstack.org/53101423:17
*** bigdogstl has quit IRC23:19
*** phalmos has quit IRC23:26
*** bigdogstl has joined #openstack-keystone23:31
*** bigdogstl has quit IRC23:36
*** bigdogstl has joined #openstack-keystone23:46

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!