Thursday, 2018-03-15

*** bigjools has quit IRC00:02
*** bigjools has joined #openstack-keystone00:03
*** bigjools has quit IRC00:03
*** bigjools has joined #openstack-keystone00:03
*** jessegler has quit IRC00:08
openstackgerritGage Hugo proposed openstack/keystone master: Fix tags and tags-any filter interaction  https://review.openstack.org/55310800:15
*** wes_dillingham has joined #openstack-keystone00:16
*** odyssey4me has quit IRC00:29
*** odyssey4me has joined #openstack-keystone00:29
*** wes_dillingham has quit IRC00:29
*** r-daneel has quit IRC00:48
*** Dinesh_Bhor has joined #openstack-keystone00:50
*** wes_dillingham has joined #openstack-keystone00:54
*** Dinesh_Bhor has quit IRC00:56
*** dave-mccowan has joined #openstack-keystone01:05
*** jmlowe has quit IRC01:08
*** jmlowe has joined #openstack-keystone01:10
*** wes_dillingham has quit IRC01:12
*** Dinesh_Bhor has joined #openstack-keystone01:24
*** nicolasbock has quit IRC01:29
*** r-daneel has joined #openstack-keystone01:37
*** nicolasbock has joined #openstack-keystone01:41
*** harlowja has quit IRC01:59
*** namnh has joined #openstack-keystone02:05
*** r-daneel has quit IRC02:15
*** r-daneel has joined #openstack-keystone02:16
*** david-lyle has quit IRC02:21
*** zhurong has joined #openstack-keystone02:29
*** itlinux has quit IRC02:32
openstackgerritGage Hugo proposed openstack/keystone master: Fix tags and tags-any filter interaction  https://review.openstack.org/55310802:41
*** Dinesh_Bhor has quit IRC02:44
*** Dinesh_Bhor has joined #openstack-keystone02:45
*** dave-mccowan has quit IRC03:14
*** germs has quit IRC03:14
*** germs has joined #openstack-keystone03:15
*** germs has quit IRC03:15
*** germs has joined #openstack-keystone03:15
*** germs has quit IRC03:16
*** germs has joined #openstack-keystone03:17
*** germs has quit IRC03:17
*** germs has joined #openstack-keystone03:17
*** annp has joined #openstack-keystone03:26
*** nicolasbock has quit IRC03:27
openstackgerritwangxiyuan proposed openstack/keystone master: The migration script to add description for limit  https://review.openstack.org/55313103:32
openstackgerritwangxiyuan proposed openstack/keystone master: Add manage logic for limit description  https://review.openstack.org/55313203:32
openstackgerritwangxiyuan proposed openstack/keystone master: Expose description for limit APIs  https://review.openstack.org/55313303:32
*** felipemonteiro_ has joined #openstack-keystone03:32
*** felipemonteiro__ has joined #openstack-keystone03:33
*** felipemonteiro_ has quit IRC03:36
*** links has joined #openstack-keystone03:41
*** felipemonteiro__ has quit IRC03:45
*** felipemonteiro__ has joined #openstack-keystone03:46
*** zhurong has quit IRC03:53
*** karthi has joined #openstack-keystone03:58
*** karthi has quit IRC04:01
*** karthi has joined #openstack-keystone04:04
*** germs has quit IRC04:09
*** harlowja has joined #openstack-keystone04:11
*** ayoung has quit IRC04:25
*** gyee has quit IRC04:35
*** harlowja has quit IRC04:50
*** karthi has quit IRC04:52
*** karthi has joined #openstack-keystone04:56
*** jmlowe has quit IRC05:01
*** felipemonteiro__ has quit IRC05:01
*** Dinesh_Bhor has quit IRC05:02
*** Dinesh_Bhor has joined #openstack-keystone05:03
*** abhi89 has joined #openstack-keystone05:07
*** oikiki has joined #openstack-keystone05:30
*** karthi has quit IRC05:44
*** Madarstr has joined #openstack-keystone05:50
MadarstrTHIS IS A FREENODE BREAKING NEWS ALERT!! Hitechcg AND opal ARE GOING AT IT RIGHT NOW WITH A LOT OF FIGHTING AND ARGUING WOW YOU DON'T WANT TO MISS THIS!! TYPE /JOIN ## TO SEE THE ACTION...AGAIN TYPE /JOIN ## TO SEE THE ACTION!!05:50
MadarstrTHIS IS A FREENODE BREAKING NEWS ALERT!! Hitechcg AND opal ARE GOING AT IT RIGHT NOW WITH A LOT OF FIGHTING AND ARGUING WOW YOU DON'T WANT TO MISS THIS!! TYPE /JOIN ## TO SEE THE ACTION...AGAIN TYPE /JOIN ## TO SEE THE ACTION!!05:50
MadarstrTHIS IS A FREENODE BREAKING NEWS ALERT!! Hitechcg AND opal ARE GOING AT IT RIGHT NOW WITH A LOT OF FIGHTING AND ARGUING WOW YOU DON'T WANT TO MISS THIS!! TYPE /JOIN ## TO SEE THE ACTION...AGAIN TYPE /JOIN ## TO SEE THE ACTION!!05:50
Madarstroikiki abhi89 Dinesh_Bhor links annp r-daneel namnh odyssey4me bigjools rcernin panbalag mvk sapd_ zhongjun hoonetorg dims d0ugal mburrows bhagyashris_ jaosorior jroll jdennis dmellado openstackgerrit wxy_ Krenair bradjones toddnni rybridges chrome0 mordred asettle breton dstanek eglute chason dtroyer DinaBelova NikitaKonovalov ianw timothyb89 trident SamYaple kencjohnston spotz brad[] cloudnull zzzeek Anticimex weezhard_ a05:50
*** Madarstr has quit IRC05:50
*** Dinesh_Bhor has quit IRC06:10
*** Dinesh_Bhor has joined #openstack-keystone06:10
*** Dinesh_Bhor has quit IRC06:16
*** karthi has joined #openstack-keystone06:20
*** karthi has quit IRC06:22
*** karthi has joined #openstack-keystone06:26
*** karthi has quit IRC06:26
*** karthi has joined #openstack-keystone06:27
*** Dinesh_Bhor has joined #openstack-keystone06:40
*** martinus__ has joined #openstack-keystone06:49
*** namnh has quit IRC06:53
openstackgerritOpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements  https://review.openstack.org/55149307:03
openstackgerritOpenStack Proposal Bot proposed openstack/keystone-tempest-plugin master: Updated from global requirements  https://review.openstack.org/55149407:03
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements  https://review.openstack.org/54953607:03
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements  https://review.openstack.org/55149507:03
openstackgerritOpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements  https://review.openstack.org/55149807:07
*** karthi has quit IRC07:12
*** oikiki has quit IRC07:23
*** karthi has joined #openstack-keystone07:34
*** karthi has quit IRC07:39
openstackgerritwangxiyuan proposed openstack/keystone master: The migration script to add description for limit  https://review.openstack.org/55313107:40
openstackgerritwangxiyuan proposed openstack/keystone master: Limit description support  https://review.openstack.org/55313207:40
*** pcaruana has joined #openstack-keystone07:48
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy master: Updated from global requirements  https://review.openstack.org/54955907:49
*** pcaruana has quit IRC07:50
*** pcaruana has joined #openstack-keystone07:50
*** pcaruana is now known as pcaruana|wfh|07:53
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements  https://review.openstack.org/55161507:53
*** karthi has joined #openstack-keystone07:54
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements  https://review.openstack.org/54956507:58
*** AlexeyAbashkin has joined #openstack-keystone08:13
*** karthi has quit IRC08:17
*** karthi has joined #openstack-keystone08:23
*** karthi has quit IRC08:23
*** karthi has joined #openstack-keystone08:24
*** tesseract has joined #openstack-keystone08:24
*** rcernin has quit IRC09:00
*** ispp is now known as burned09:04
*** r-daneel has quit IRC09:07
*** slunkad has quit IRC09:10
*** slunkad has joined #openstack-keystone09:14
openstackgerritwangxiyuan proposed openstack/keystone master: The migration script to add description for limit  https://review.openstack.org/55313109:26
openstackgerritwangxiyuan proposed openstack/keystone master: Limit description support  https://review.openstack.org/55313209:26
*** nicolasbock has joined #openstack-keystone09:27
openstackgerritwangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend  https://review.openstack.org/48351409:35
openstackgerritwangxiyuan proposed openstack/keystone master: Deprecate the templated catalog  https://review.openstack.org/48271409:35
*** Dinesh_Bhor has quit IRC09:35
*** karthi has quit IRC10:21
*** gongysh has joined #openstack-keystone10:54
*** abhishek has joined #openstack-keystone10:59
*** abhi89 has quit IRC11:02
*** panbalag has quit IRC11:15
*** gongysh has quit IRC11:17
*** dtruong_ has joined #openstack-keystone11:18
*** bhagyashri_s has joined #openstack-keystone11:20
*** Alexey_Abashkin has joined #openstack-keystone11:20
*** mnaser_ has joined #openstack-keystone11:21
*** rodrigod` has joined #openstack-keystone11:23
*** frickler_ has joined #openstack-keystone11:23
*** Anticime1 has joined #openstack-keystone11:23
*** weezhard has joined #openstack-keystone11:25
*** pcaruana|wfh| has quit IRC11:27
*** dtruong has quit IRC11:27
*** rarora has quit IRC11:27
*** rodrigods has quit IRC11:27
*** mnaser has quit IRC11:27
*** frickler has quit IRC11:27
*** Anticimex has quit IRC11:27
*** mnaser_ is now known as mnaser11:27
*** pcaruana|wfh| has joined #openstack-keystone11:28
*** AlexeyAbashkin has quit IRC11:28
*** jgr has quit IRC11:28
*** weezhard_ has quit IRC11:28
*** bhagyashris_ has quit IRC11:28
*** jgr has joined #openstack-keystone11:28
*** mnaser has quit IRC11:28
*** mnaser has joined #openstack-keystone11:28
*** Alexey_Abashkin is now known as AlexeyAbashkin11:28
openstackgerritwangxiyuan proposed openstack/keystone master: The migration script to add description for limit  https://review.openstack.org/55313111:30
openstackgerritwangxiyuan proposed openstack/keystone master: Limit description support  https://review.openstack.org/55313211:30
*** frickler_ is now known as frickler11:35
openstackgerritwangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend  https://review.openstack.org/48351411:44
*** rarora has joined #openstack-keystone11:45
*** annp has quit IRC11:48
*** dmellado has quit IRC11:50
*** dmellado has joined #openstack-keystone11:58
*** raildo has joined #openstack-keystone11:59
*** dmellado has quit IRC12:05
*** odyssey4me has quit IRC12:05
*** odyssey4me has joined #openstack-keystone12:05
*** martinus__ has quit IRC12:11
*** pcaruana|wfh| is now known as pcaruana12:14
*** edmondsw has joined #openstack-keystone12:15
*** wes_dillingham has joined #openstack-keystone12:18
*** dmellado has joined #openstack-keystone12:23
*** dmellado has quit IRC12:30
*** abhi89 has joined #openstack-keystone12:33
*** abhishek has quit IRC12:36
*** abhishek has joined #openstack-keystone12:40
*** abhi89 has quit IRC12:43
*** panbalag has joined #openstack-keystone12:43
*** panbalag has left #openstack-keystone12:44
*** jmlowe has joined #openstack-keystone12:44
*** r-daneel has joined #openstack-keystone12:46
*** david-lyle has joined #openstack-keystone12:52
*** dave-mccowan has joined #openstack-keystone13:01
*** david-lyle has quit IRC13:12
*** belmoreira has joined #openstack-keystone13:13
*** david-lyle has joined #openstack-keystone13:15
*** dmellado has joined #openstack-keystone13:19
*** dmellado has quit IRC13:20
*** david-lyle has quit IRC13:25
*** idlemind has joined #openstack-keystone13:25
*** jmlowe has quit IRC13:33
lbragstadwxy: i'm about 20 failing tests away from getting https://review.openstack.org/#/c/545450/3 to pass13:34
*** dave-mccowan has quit IRC13:34
cmurphylol13:34
cmurphyonly 20 failing tests to rewrite keystone? we might not have enough test coverage ;)13:34
lbragstadhah13:35
lbragstadshhh13:35
*** felipemonteiro__ has joined #openstack-keystone13:36
*** felipemonteiro_ has joined #openstack-keystone13:38
*** jmlowe has joined #openstack-keystone13:40
*** felipemonteiro__ has quit IRC13:42
*** mvk has quit IRC13:42
*** links has quit IRC13:42
*** felipemonteiro_ has quit IRC13:45
*** felipemonteiro_ has joined #openstack-keystone13:45
*** r-daneel has quit IRC13:48
lbragstadwe have some stuff that's really nested in the token provider API13:53
lbragstadif statements _everywhere_13:53
*** McClymontS has joined #openstack-keystone13:58
*** spilla has joined #openstack-keystone14:00
*** gongysh has joined #openstack-keystone14:01
*** jaosorior has quit IRC14:03
knikollao/14:06
-openstackstatus- NOTICE: POST_FAILURE results on Tempest-based jobs since the most recent Zuul security fixes are being investigated; rechecking those won't help for now but we'll keep you posted once a solution is identified14:09
*** ChanServ changes topic to "POST_FAILURE results on Tempest-based jobs since the most recent Zuul security fixes are being investigated; rechecking those won't help for now but we'll keep you posted once a solution is identified"14:09
*** BlackDex has quit IRC14:13
*** mvk has joined #openstack-keystone14:14
*** McClymontS has quit IRC14:16
lbragstadwe should hopefully have our docs job back - https://review.openstack.org/#/c/552955/14:19
lbragstadwell - once https://review.openstack.org/#/c/551493/3 starts passing14:20
*** r-daneel has joined #openstack-keystone14:30
*** gongysh has quit IRC14:31
*** germs has joined #openstack-keystone14:33
*** germs has quit IRC14:33
*** germs has joined #openstack-keystone14:33
*** germs has quit IRC14:33
*** germs has joined #openstack-keystone14:36
*** martinus__ has joined #openstack-keystone14:39
*** dmellado_ has joined #openstack-keystone14:46
*** jaosorior has joined #openstack-keystone14:47
*** panbalag has joined #openstack-keystone14:48
*** panbalag has quit IRC14:50
openstackgerritGage Hugo proposed openstack/keystone master: Fix api-ref for project tag create  https://review.openstack.org/55342214:50
*** dmellado_ is now known as dmellado14:54
*** panbalag has joined #openstack-keystone14:57
*** felipemonteiro_ has quit IRC15:01
*** felipemonteiro_ has joined #openstack-keystone15:01
*** McClymontS has joined #openstack-keystone15:03
*** BlackDex has joined #openstack-keystone15:04
*** r-daneel_ has joined #openstack-keystone15:14
*** r-daneel has quit IRC15:14
*** r-daneel_ is now known as r-daneel15:14
*** felipemonteiro__ has joined #openstack-keystone15:17
*** felipemonteiro_ has quit IRC15:21
*** McClymontS has quit IRC15:24
*** panbalag has left #openstack-keystone15:25
openstackgerritLance Bragstad proposed openstack/keystone master: WIP: rewrite keystone  https://review.openstack.org/54545015:29
lbragstadok - ^ passes tests for me locally15:29
*** itlinux has joined #openstack-keystone15:29
lbragstadthat's probaby only of the most frustrating refactors i've ever attempted15:29
lbragstads/only/one/15:30
*** dave-mccowan has joined #openstack-keystone15:38
* lbragstad steps away for a bit15:43
*** oikiki has joined #openstack-keystone15:51
*** gongysh has joined #openstack-keystone15:51
*** Suramya has joined #openstack-keystone15:52
*** kmalloc has joined #openstack-keystone15:53
*** BlackDex has quit IRC15:54
*** dtruong_ has quit IRC15:58
*** dtruong has joined #openstack-keystone15:58
*** harlowja has joined #openstack-keystone16:03
*** gongysh has quit IRC16:08
*** belmoreira has quit IRC16:18
*** jaosorior has quit IRC16:21
cmurphyapp creds talk accepted https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20836/enabling-cloud-native-applications-with-application-credentials-in-keystone16:22
*** BlackDex has joined #openstack-keystone16:23
*** masber has joined #openstack-keystone16:28
*** Suramya_ has joined #openstack-keystone16:28
openstackgerritPavlo Shchelokovskyy proposed openstack/keystone master: Conditionalyy protect self-service password change  https://review.openstack.org/55298816:31
openstackgerritPavlo Shchelokovskyy proposed openstack/keystone master: Conditionalyy protect self-service password change  https://review.openstack.org/55298816:32
*** AlexeyAbashkin has quit IRC16:32
*** gongysh has joined #openstack-keystone16:38
openstackgerritAlvaro Lopez Garcia proposed openstack/keystone-specs master: OpenID Connect improved support  https://review.openstack.org/37398316:39
*** gongysh has quit IRC16:39
*** abhishek has quit IRC16:41
*** masber has quit IRC16:53
openstackgerritGage Hugo proposed openstack/keystone master: Fix api-ref for project tag create  https://review.openstack.org/55342217:01
lbragstadcmurphy: nice!17:08
*** harlowja has quit IRC17:09
*** felipemonteiro__ has quit IRC17:25
*** felipemonteiro__ has joined #openstack-keystone17:26
lbragstadproposed the rocky deadlines we talked about during the PTG retrospective - https://review.openstack.org/#/c/553502/17:31
*** r-daneel_ has joined #openstack-keystone17:50
*** r-daneel has quit IRC17:51
*** r-daneel_ is now known as r-daneel17:51
*** felipemonteiro_ has joined #openstack-keystone17:57
*** felipemonteiro__ has quit IRC17:59
*** jdennis has quit IRC18:02
*** mvenesio has joined #openstack-keystone18:03
*** mvk has quit IRC18:05
*** david-lyle has joined #openstack-keystone18:05
*** harlowja has joined #openstack-keystone18:20
*** wes_dillingham has quit IRC18:23
*** david-lyle has quit IRC18:29
*** jmlowe has quit IRC18:31
*** david-lyle has joined #openstack-keystone18:33
*** jmlowe has joined #openstack-keystone18:36
*** david-lyle has quit IRC18:37
*** tesseract has quit IRC18:39
*** felipemonteiro_ has quit IRC18:42
*** felipemonteiro has joined #openstack-keystone18:42
*** felipemonteiro_ has joined #openstack-keystone18:43
*** felipemonteiro has quit IRC18:47
*** jdennis has joined #openstack-keystone18:49
*** mvk has joined #openstack-keystone18:51
*** AlexeyAbashkin has joined #openstack-keystone18:54
*** AlexeyAbashkin has quit IRC18:58
*** david-lyle has joined #openstack-keystone19:17
-openstackstatus- NOTICE: The regression stemming from one of yesterday's Zuul security fixes has been rectified, and Devstack/Tempest jobs which encountered POST_FAILURE results over the past 24 hours can safely be rechecked now19:24
*** ChanServ changes topic to "Queens release schedule: https://releases.openstack.org/queens/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap"19:24
*** frickler has quit IRC19:29
*** frickler has joined #openstack-keystone19:30
*** Suramya has quit IRC19:32
*** Suramya_ has quit IRC19:32
*** panbalag has joined #openstack-keystone19:33
*** panbalag has left #openstack-keystone19:35
*** exarr has joined #openstack-keystone19:39
exarrHi all. So, I realise I had set all my endpoints for keystone auth to port 35357 (public, internal, admin).19:40
*** felipemonteiro_ has quit IRC19:40
exarrWhat affect would this have? As everything was working fine, and all I find is that 35357 is the "admin" port. Whatever that means :-/19:40
*** felipemonteiro_ has joined #openstack-keystone19:40
kmallocexarr: in v3 keystone api, there is no difference between admin/public19:41
kmallocexarr: admin/public was largely historical from early days (v2 keystone api)19:41
exarrkmalloc: Ahh. So it's just supporting both ports for backwards-compatibility?19:42
kmalloci recommend moving to HTTP[s] (port 80/443) instead19:42
kmallocport 35357 has issues, it is in the default ephemeral port range of linux19:42
exarrkmalloc: Very good point actually!19:43
openstackgerritLance Bragstad proposed openstack/keystone master: Add logging for xmlsec1 installation  https://review.openstack.org/55359219:43
kmallocit's an issue between linux and IANA, our solution: use standard http(s) ports19:43
kmalloc:)19:43
kmallocsince it's HTTP and REST, it makes sense.19:43
exarrkmalloc: It certainly does.19:44
exarrThanks for that. Makes perfect sense.19:44
kmallocand we know you can do things like: http://OpenstackAPI.WhateverYourDomainIs/identity19:44
kmallocwe put  alolt of effort into ensuring that works ^ so you can do http://domain/identity and http://domain/compute etc19:45
kmallocfor the various services (suburl) rather than needing an IP/Vhost for each (though, http://identity.yourdomain and http://compute.yourdomain is easier in general)19:45
exarrwaw. I feel like tearing it all apart and rebuilding it.19:48
kmalloc:)19:48
exarrDon't think the devs would be too happy about that tho.19:48
kmallochehe, well, the nice thing is you can just add http ports for identity19:48
kmallocand also listen on 3535719:49
kmallocand just update everything to just look at the http ports and tell people to use the "more correct" port (and 35357 will go away in X time) - same with suburls or dedicated vhosts/ips19:49
kmallocif folks use the service catalog, you should be able to change the addresses of any of the services19:50
kmallocwith exception of keystone (since that is apriori knowledge to auth)19:50
kmallocI know, that doesn't help with the "RIP IT APART AND REDO IT" feeling ;)19:50
*** mvenesio has quit IRC19:53
exarrkmalloc: I have rebuilt the implmentation a few times. Still have a lot to learn. But now the concept piece is in place for a lab, so trying to at least offer a completed POC.19:53
*** spilla has quit IRC19:53
*** dave-mccowan has quit IRC19:53
exarrBut I will look to see if I can fix it with minimal disruption.19:53
exarrRandom question: Why apache over nginx?19:55
*** oikiki has quit IRC19:56
*** oikiki has joined #openstack-keystone19:56
exarrConsensus over the projects?19:56
lbragstadgagehugo: is https://bugs.launchpad.net/keystone/+bug/1738372 an issue with heat or keystone?19:56
openstackLaunchpad bug 1738372 in OpenStack Identity (keystone) "Install and configure in keystone" [Undecided,Confirmed]19:56
lbragstadgagehugo: it sounds like something it's installing the right version of oslo.policy somewhere19:57
gagehugolbragstad I'm testing that now, waiting to get the conf from one of our engineers19:57
lbragstadok - this feels like a dependency issue19:58
gagehugoit does19:58
lbragstadcurious to know what you find out19:58
*** raildo has quit IRC19:58
gagehugoalso how did this pass https://review.openstack.org/#/c/552988/19:58
gagehugopass zuul*19:59
gagehugothought we needed the requirements change19:59
gagehugobut maybe not?19:59
*** ayoung has joined #openstack-keystone20:00
*** wes_dillingham has joined #openstack-keystone20:01
lbragstadi was looking at that one the other day20:02
lbragstadi'm not sure i quite understand why you'd want to prevent someone from updating their password20:02
lbragstadexarr: it was the first one we targeted a long time ago20:04
gagehugoyeah that is an odd use case20:04
lbragstadseveral deployment projects give you the ability to specify nginx over apache20:04
exarrYeah, no biggie. Just curious.20:05
exarrThanks :_20:05
*** wes_dillingham has quit IRC20:06
*** jmlowe has quit IRC20:06
*** NM has joined #openstack-keystone20:06
* lbragstad grabs tea20:07
* exarr wonders if tea == cup of tea, or you're a northern lad in the UK and you mean food :-) 20:08
*** dave-mccowan has joined #openstack-keystone20:11
lbragstadhah - nope20:24
lbragstadjust a cup of tea20:25
*** oikiki has quit IRC20:28
*** mvenesio has joined #openstack-keystone20:31
*** oikiki has joined #openstack-keystone20:33
*** oikiki has quit IRC20:33
*** spilla has joined #openstack-keystone20:33
*** oikiki has joined #openstack-keystone20:39
*** dave-mccowan has quit IRC20:53
*** mvk has quit IRC20:53
ayounglbragstad, looks like I20:58
ayounglbragstad, looks like I'm going to Vancouver20:58
lbragstad\o/20:58
ayoungand that means I'll probably drag kmalloc with me.20:58
ayoungFLy to Seattle to see friends, drive on up.20:58
lbragstadayoung: did you have a talk accepted?20:59
ayoungyep.  https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20818/a-unified-approach-to-role-based-access-control20:59
ayoungmapping RBAC between Keystone and Kubernetes20:59
lbragstadoh - nice21:00
*** edmondsw has quit IRC21:02
exarrkmalloc: regarding your method of openstackAPI.blah/<service> approach, this suburl method works only with a web service passing the requests back and fourth assumingly.21:03
exarrWith your comment of "we put effot in to make this work" I didn't know if I was missing something.21:03
exarrWith the obvious service.domain/blah it's simple enough.21:03
kmallocwe as in openstack21:04
exarrlol. I used the term collectively :-)21:05
kmallocfor a long time, it didn't work (pre ... newton? or so)21:05
*** mvk has joined #openstack-keystone21:06
exarrHow could it not work? .... to google"21:07
kmallocthe way other services interacted with the service catalog21:08
kmallocor was unable to reach suburls21:08
exarrAh. okay.21:10
exarrI have made note of your recommendations, and will explore them over the next few days. Thank you.21:10
*** jessegler has joined #openstack-keystone21:11
exarrayoung: (sorry, I read your link :-/) As a redhat guy, is director a good deployment too for rhel-based OS implementations?21:13
exarr*tool21:13
ayoungexarr, it is pretty much the only thing we will really support21:14
ayoungI mean, I've done a bunch of POC work with Packstack, so for little stuff I still prefer it.21:14
exarrayoung: Thanks. It's being considered. But I have always found deployment tools fills me with sorrow.21:14
ayoungHeh21:15
ayoungTHe thinkg about director/tripleo is it is shooting for everything: HA,   ironic based enrollment, Ceph integration21:15
ayoungI reintroduced myself to Director just this week, after having laid off it for a year.21:16
ayoungIts hard to find resources to learn it, because it really wants a full cluster.  We do this thing called HextupleO for training21:17
ayoungwhich means we have an OpenStack cluster for learning how to install OpenStack on OpenStack.21:17
ayoungits Keystone Turtles all the way down21:17
exarrayoung: Plenty of people using it in the real world for deployments?21:17
ayoungyes21:18
exarrahh, the old nested-openstack approach :-)21:18
ayoungexarr, I can probably get you some customer references if you need them21:18
exarrayoung: That would be really useful actually.21:18
exarrWe're a decent company trying to break into openstack. I'll not cite the environment because everone just sighs. :-)21:19
ayoungexarr send me an email at ayoung@redhat.com with your specifics and I'll get the right set of answers to you.21:19
exarrayoung: That's brilliant. Thankyou :-)21:19
ayoungThat is exactly my job these days.21:19
*** mburrows has quit IRC21:21
openstackgerritMerged openstack/oslo.policy master: Updated from global requirements  https://review.openstack.org/54955921:22
*** r-daneel_ has joined #openstack-keystone21:23
*** r-daneel has quit IRC21:24
*** r-daneel_ is now known as r-daneel21:24
exarrayoung: Fired you a quick email. I don't want to take too much of your time, but would be good to have a guy of your stature promoting the tool as it's good to cite within the design specs to the guys in suits :-)21:28
ayoungI'm not that tall.21:28
exarrhahaha. The second reference in that definition :-)21:29
gagehugolbragstad http://paste.openstack.org/show/702237/21:30
gagehugo2018-03-15 21:11:49.485 | Requirement already satisfied: oslo.policy===1.18.021:34
gagehugolemme try updating21:34
* gagehugo breaks everything21:34
kmallocexarr: see you talk to ayoung and you get all the fun stuff. i'm just a lurker (i'm happy to direct all the fun stuff to adam, even though we both are at red hat)21:37
*** dave-mccowan has joined #openstack-keystone21:39
*** itlinux has quit IRC21:39
*** r-daneel_ has joined #openstack-keystone21:41
*** r-daneel has quit IRC21:41
*** r-daneel_ is now known as r-daneel21:41
ayoungkmalloc, BTW, I'm planning on taking you up on that offer to drive to Vancouver from Seattle.21:42
kmalloccool21:42
exarrDoes Satellite and Openstack play well together?21:43
exarrI mean more in terms of keeping the infrastructure up to date, not the VMs.21:44
exarrPatch management is important, but the idea of this being applied to the hypervisor nodes seems a little scary.21:45
*** felipemonteiro__ has joined #openstack-keystone21:45
exarrkmalloc: To be fair, you redhat guys are very active across the openstack irc channels. Nice to see.21:46
*** felipemonteiro_ has quit IRC21:49
*** rcernin has joined #openstack-keystone22:02
*** masber has joined #openstack-keystone22:09
*** spilla has quit IRC22:11
*** oikiki has quit IRC22:12
*** oikiki has joined #openstack-keystone22:14
*** oikiki has quit IRC22:16
*** mvenesio has quit IRC22:22
*** mvenesio has joined #openstack-keystone22:23
*** oikiki has joined #openstack-keystone22:23
jesseglerlbragstad: I opened a bug for the project tags stuff we discussed yesterday, because it's not aligned with nova.22:23
*** oikiki has quit IRC22:23
*** jessegler has quit IRC22:25
*** jessegler has joined #openstack-keystone22:26
*** felipemonteiro__ has quit IRC22:27
*** mvenesio has quit IRC22:27
*** martinus__ has quit IRC22:28
lbragstadjessegler: do they treat it as subsets?22:37
lbragstadjessegler: thanks for the follow up btw - i'll check in a little later22:38
*** mvenesio has joined #openstack-keystone22:44
*** dave-mccowan has quit IRC22:48
exarrayoung: Thanks for the reply!22:49
ayoungexarr, My pleasure.22:49
*** mvenesio has quit IRC22:59
*** masber has quit IRC23:02
gagehugolbragstad yeah I think they do23:11
openstackgerritMerged openstack/keystone master: Updated from global requirements  https://review.openstack.org/55149323:15
*** sticker has joined #openstack-keystone23:17
*** rcernin has quit IRC23:39
*** david-lyle has quit IRC23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!