| *** edmondsw has joined #openstack-keystone | 00:16 | |
| *** edmondsw has quit IRC | 00:23 | |
| *** edmondsw has joined #openstack-keystone | 00:24 | |
| *** zhurong has joined #openstack-keystone | 00:27 | |
| *** edmondsw has quit IRC | 00:28 | |
| *** edmondsw has joined #openstack-keystone | 00:29 | |
| *** edmondsw has quit IRC | 00:32 | |
| *** edmondsw has joined #openstack-keystone | 00:32 | |
| *** edmondsw has quit IRC | 00:37 | |
| *** felipemonteiro_ has joined #openstack-keystone | 00:40 | |
| *** felipemonteiro_ has quit IRC | 00:46 | |
| *** tobberydberg has quit IRC | 00:52 | |
| *** sonuk has joined #openstack-keystone | 00:55 | |
| *** oikiki has joined #openstack-keystone | 01:14 | |
| *** sonuk has quit IRC | 01:18 | |
| *** zhurong has quit IRC | 01:29 | |
| *** germs has quit IRC | 01:30 | |
| *** germs has joined #openstack-keystone | 01:30 | |
| *** germs has quit IRC | 01:30 | |
| *** germs has joined #openstack-keystone | 01:30 | |
| *** dave-mccowan has joined #openstack-keystone | 01:37 | |
| *** tobberydberg has joined #openstack-keystone | 01:37 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 01:39 | |
| *** tobberydberg has quit IRC | 01:42 | |
| *** AlexeyAbashkin has quit IRC | 01:43 | |
| *** tobberydberg has joined #openstack-keystone | 01:44 | |
| *** markvoelker_ has joined #openstack-keystone | 01:52 | |
| *** markvoelker has quit IRC | 01:53 | |
| *** dstanek_ is now known as dstanek | 01:56 | |
| *** oikiki has quit IRC | 02:08 | |
| *** oikiki has joined #openstack-keystone | 02:08 | |
| *** oikiki has quit IRC | 02:08 | |
| *** oikiki has joined #openstack-keystone | 02:09 | |
| *** oikiki has quit IRC | 02:09 | |
| *** oikiki has joined #openstack-keystone | 02:10 | |
| *** oikiki has quit IRC | 02:10 | |
| *** masuberu has joined #openstack-keystone | 02:27 | |
| *** masber has quit IRC | 02:31 | |
| *** zhurong has joined #openstack-keystone | 02:48 | |
| *** oikiki has joined #openstack-keystone | 02:48 | |
| *** harlowja_ has quit IRC | 02:53 | |
| *** sonuk has joined #openstack-keystone | 03:17 | |
| *** oikiki has quit IRC | 03:21 | |
| *** harlowja has joined #openstack-keystone | 03:22 | |
| *** oikiki has joined #openstack-keystone | 03:22 | |
| *** oikiki has quit IRC | 03:22 | |
| *** masuberu has quit IRC | 03:23 | |
| *** masuberu has joined #openstack-keystone | 03:33 | |
| *** nicolasbock has quit IRC | 03:34 | |
| *** masber has joined #openstack-keystone | 03:35 | |
| *** masuberu has quit IRC | 03:38 | |
| *** oikiki has joined #openstack-keystone | 03:42 | |
| *** germs has quit IRC | 04:12 | |
| *** oikiki has quit IRC | 04:20 | |
| *** zhurong has quit IRC | 04:21 | |
| *** hoonetorg has quit IRC | 04:27 | |
| *** hoonetorg has joined #openstack-keystone | 04:41 | |
| *** harlowja has quit IRC | 04:52 | |
| *** pcichy has joined #openstack-keystone | 05:12 | |
| *** annp has quit IRC | 05:15 | |
| *** annp has joined #openstack-keystone | 05:15 | |
| *** links has joined #openstack-keystone | 05:18 | |
| *** pcichy has quit IRC | 05:32 | |
| *** oikiki has joined #openstack-keystone | 05:34 | |
| *** zhurong has joined #openstack-keystone | 05:36 | |
| *** itlinux has joined #openstack-keystone | 06:02 | |
| *** itlinux has quit IRC | 06:09 | |
| *** itlinux has joined #openstack-keystone | 06:12 | |
| *** sonuk has quit IRC | 06:17 | |
| *** pcaruana has joined #openstack-keystone | 06:21 | |
| *** oikiki has quit IRC | 06:23 | |
| *** sapd_ has joined #openstack-keystone | 06:26 | |
| *** sapd__ has quit IRC | 06:26 | |
| *** sonuk has joined #openstack-keystone | 06:30 | |
| *** itlinux has quit IRC | 06:32 | |
| *** itlinux has joined #openstack-keystone | 06:37 | |
| *** dklyle has joined #openstack-keystone | 06:41 | |
| *** david-lyle has joined #openstack-keystone | 06:41 | |
| *** dims has quit IRC | 06:54 | |
| *** dims has joined #openstack-keystone | 06:56 | |
| *** oikiki has joined #openstack-keystone | 06:56 | |
| *** dims has quit IRC | 07:01 | |
| *** itlinux has quit IRC | 07:02 | |
| *** dims has joined #openstack-keystone | 07:02 | |
| *** namnh has joined #openstack-keystone | 07:05 | |
| *** tesseract has joined #openstack-keystone | 07:10 | |
| *** zhurong has quit IRC | 07:18 | |
| openstackgerrit | wangxiyuan proposed openstack/oslo.limit master: [WIP] Init repo https://review.openstack.org/556744 | 07:21 |
|---|---|---|
| *** AlexeyAbashkin has joined #openstack-keystone | 07:26 | |
| *** dmellado has joined #openstack-keystone | 07:32 | |
| *** rcernin has quit IRC | 07:33 | |
| *** pcaruana has quit IRC | 07:45 | |
| *** pcaruana has joined #openstack-keystone | 07:46 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystoneauth master: add lower-constraints job https://review.openstack.org/555625 | 07:55 |
| *** sapd_ has quit IRC | 08:00 | |
| *** sapd_ has joined #openstack-keystone | 08:00 | |
| *** david-lyle has quit IRC | 08:23 | |
| *** dklyle has quit IRC | 08:23 | |
| *** itlinux has joined #openstack-keystone | 08:28 | |
| *** oikiki has quit IRC | 08:52 | |
| *** itlinux has quit IRC | 09:09 | |
| openstackgerrit | Merged openstack/keystoneauth master: add lower-constraints job https://review.openstack.org/555625 | 09:23 |
| *** namnh has quit IRC | 10:05 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [POC] Add hierarchical limit https://review.openstack.org/557696 | 10:15 |
| *** mvk has quit IRC | 10:47 | |
| *** nicolasbock has joined #openstack-keystone | 10:57 | |
| *** zhurong has joined #openstack-keystone | 11:22 | |
| *** sonuk has quit IRC | 11:28 | |
| *** mugsie has quit IRC | 11:42 | |
| *** mugsie has joined #openstack-keystone | 11:42 | |
| *** mugsie has joined #openstack-keystone | 11:42 | |
| *** mvk has joined #openstack-keystone | 11:44 | |
| *** raildo has joined #openstack-keystone | 12:22 | |
| *** sonuk has joined #openstack-keystone | 12:27 | |
| *** thiagolib_ has joined #openstack-keystone | 12:32 | |
| *** AlexeyAbashkin has quit IRC | 12:34 | |
| *** rmascena has joined #openstack-keystone | 12:36 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 12:36 | |
| *** edmondsw has joined #openstack-keystone | 12:38 | |
| *** raildo has quit IRC | 12:38 | |
| *** zhurong has quit IRC | 12:43 | |
| *** panbalag has joined #openstack-keystone | 12:51 | |
| *** panbalag has left #openstack-keystone | 12:53 | |
| *** mchlumsky has joined #openstack-keystone | 12:58 | |
| *** sonuk has quit IRC | 13:02 | |
| *** panbalag has joined #openstack-keystone | 13:08 | |
| *** spilla has joined #openstack-keystone | 13:09 | |
| *** panbalag has left #openstack-keystone | 13:12 | |
| *** jistr is now known as jistr|mtg | 13:14 | |
| *** markvoelker_ has quit IRC | 13:16 | |
| *** markvoelker has joined #openstack-keystone | 13:18 | |
| *** AlexeyAbashkin has quit IRC | 13:23 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 13:25 | |
| lbragstad | kmalloc: done | 13:27 |
| *** AlexeyAbashkin has quit IRC | 13:52 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 13:57 | |
| *** panbalag has joined #openstack-keystone | 14:08 | |
| *** jistr|mtg is now known as jistr | 14:10 | |
| *** nicolasbock has quit IRC | 14:10 | |
| *** AlexeyAbashkin has quit IRC | 14:23 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 14:25 | |
| knikolla | o/ | 14:39 |
| *** AlexeyAbashkin has quit IRC | 14:40 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 14:42 | |
| *** markvoelker has quit IRC | 14:47 | |
| *** markvoelker has joined #openstack-keystone | 14:48 | |
| *** AlexeyAbashkin has quit IRC | 14:54 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 14:56 | |
| *** jessegler has joined #openstack-keystone | 15:02 | |
| *** AlexeyAbashkin has quit IRC | 15:04 | |
| *** yikun_ has quit IRC | 15:07 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 15:08 | |
| *** yikun_ has joined #openstack-keystone | 15:08 | |
| *** germs has joined #openstack-keystone | 15:24 | |
| *** germs has quit IRC | 15:24 | |
| *** germs has joined #openstack-keystone | 15:24 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Use the provider_api module in limit controller https://review.openstack.org/562712 | 15:36 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add configuration option for enforcement models https://review.openstack.org/562713 | 15:36 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add policy for limit model protection https://review.openstack.org/562714 | 15:36 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement enforcement model logic in Manager https://review.openstack.org/562715 | 15:36 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Expose endpoint to return enforcement model https://review.openstack.org/562716 | 15:36 |
| *** PsionTheory has joined #openstack-keystone | 15:38 | |
| *** pcichy has joined #openstack-keystone | 15:41 | |
| *** pcichy has quit IRC | 15:46 | |
| *** dklyle has joined #openstack-keystone | 15:52 | |
| lbragstad | https://review.openstack.org/#/c/559438/12 would be a good one to get merged and i can include it in rocky-1 | 15:52 |
| *** david-lyle has joined #openstack-keystone | 15:52 | |
| lbragstad | thanks for figuring all that out kmalloc ^ | 15:52 |
| *** dklyle_ has joined #openstack-keystone | 15:53 | |
| *** AlexeyAbashkin has quit IRC | 15:55 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 15:56 | |
| *** mvk has quit IRC | 15:59 | |
| *** links has quit IRC | 16:01 | |
| *** nicolasbock has joined #openstack-keystone | 16:02 | |
| *** pcaruana has quit IRC | 16:03 | |
| *** felipemonteiro has joined #openstack-keystone | 16:05 | |
| *** AlexeyAbashkin has quit IRC | 16:11 | |
| *** panbalag has quit IRC | 16:12 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 16:14 | |
| lbragstad | here is what we have proposed for milestone 1 releases | 16:17 |
| lbragstad | https://review.openstack.org/#/c/562723/ | 16:17 |
| lbragstad | https://review.openstack.org/#/c/562730/ | 16:17 |
| lbragstad | https://review.openstack.org/#/c/562732/ | 16:17 |
| lbragstad | https://review.openstack.org/#/c/562735/ | 16:18 |
| lbragstad | if anyone is interested in taking a look, let me know if there is anything i missed | 16:18 |
| lbragstad | or we should wait for to include in rocky-1 | 16:18 |
| *** itlinux has joined #openstack-keystone | 16:19 | |
| *** mvk has joined #openstack-keystone | 16:25 | |
| *** panbalag has joined #openstack-keystone | 16:27 | |
| *** AlexeyAbashkin has quit IRC | 16:57 | |
| *** itlinux has quit IRC | 17:02 | |
| *** alee__ has joined #openstack-keystone | 17:26 | |
| hrybacki | kmalloc: have we ever had to backport a migration upstream? something akin to: https://review.openstack.org/#/c/429047/13 | 17:27 |
| *** pcichy has joined #openstack-keystone | 17:29 | |
| *** david-lyle has quit IRC | 17:32 | |
| *** dklyle_ has quit IRC | 17:33 | |
| *** dklyle has quit IRC | 17:33 | |
| *** panbalag has left #openstack-keystone | 17:37 | |
| kmalloc | hrybacki: backporting migrations suck | 17:45 |
| hrybacki | kmalloc: as I am presently learning | 17:45 |
| kmalloc | But yes we have had to. You have to make the migration idempotent and then backporting it to one of the "placeholders" | 17:46 |
| kmalloc | So. New migration at the end (master), new migration in placeholder (master), backport placeholder only | 17:46 |
| kmalloc | If backporting to another previous release, to the earlier placeholder | 17:47 |
| kmalloc | It is a royal pain. Do you really have to backport? Because, that should be the last possible option. | 17:47 |
| kmalloc | Because it sucks to do. | 17:48 |
| hrybacki | kmalloc: wait -- so looking at the review I just mentioned, resolved as #22 in Pike, if we backport to Ocata, we first make the migration idempotent and then put in the in a placeholder e.g. #17 ? | 17:48 |
| hrybacki | kmalloc: unfortunately yes, back a few releases | 17:48 |
| kmalloc | I'll look at it when I have a few.. will have a break in a few minutes to give direction (around lunch) | 17:48 |
| hrybacki | kmalloc++ thank you | 17:49 |
| *** thiagolib_ has quit IRC | 17:49 | |
| *** mvk has quit IRC | 17:52 | |
| *** felipemonteiro_ has joined #openstack-keystone | 17:55 | |
| *** felipemonteiro has quit IRC | 17:59 | |
| *** felipemonteiro__ has joined #openstack-keystone | 18:08 | |
| *** felipemonteiro_ has quit IRC | 18:08 | |
| *** yikun__ has joined #openstack-keystone | 18:25 | |
| *** yikun_ has quit IRC | 18:28 | |
| *** oikiki has joined #openstack-keystone | 18:29 | |
| *** pcichy has quit IRC | 18:30 | |
| *** pcichy has joined #openstack-keystone | 18:30 | |
| *** jessegler has quit IRC | 18:39 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 18:49 | |
| gagehugo | lbragstad: https://review.openstack.org/#/c/559438/ looks good | 18:53 |
| lbragstad | gagehugo: thanks | 18:54 |
| *** tesseract has quit IRC | 18:55 | |
| *** thiagolib_ has joined #openstack-keystone | 18:57 | |
| *** AlexeyAbashkin has quit IRC | 18:59 | |
| gagehugo | oh man Denver round 2 | 19:01 |
| gagehugo | choo choo | 19:01 |
| *** felipemonteiro_ has joined #openstack-keystone | 19:09 | |
| *** oikiki has quit IRC | 19:11 | |
| *** felipemonteiro__ has quit IRC | 19:13 | |
| *** alee__ has quit IRC | 19:18 | |
| *** robertomls has joined #openstack-keystone | 19:43 | |
| *** oikiki has joined #openstack-keystone | 19:44 | |
| lbragstad | lol nice | 19:48 |
| lbragstad | i love me some trains | 19:48 |
| timburke | fwiw, it's supposed to be better this time :-) | 19:49 |
| lbragstad | i suppose we're going to find out ;) | 19:49 |
| lbragstad | wasn't it a software issue some kind? | 19:49 |
| lbragstad | of some kind* | 19:50 |
| gagehugo | do the trains migrate south for the winter around that time? | 19:51 |
| gagehugo | honestly after the first 2am wakeup I just slept through it after that while I was there | 19:51 |
| *** mriedem has joined #openstack-keystone | 19:52 | |
| mriedem | lbragstad: heh, well wouldn't you know it, | 19:52 |
| mriedem | the keystone install guides are not consistent for the admin endpoint url | 19:52 |
| mriedem | ubuntu install guide uses port 5000 universaly | 19:52 |
| mriedem | *universally | 19:52 |
| mriedem | but rdo and sles use 35357 for the admin-url | 19:53 |
| mriedem | for nova's docs, we'd either use the internal or public interface, so 5000 is still ok for our docs | 19:53 |
| mriedem | ksa defaults to ['internal', 'public'] for interfaces to try anyway i think | 19:53 |
| lbragstad | i thought we had a patch up to fix that | 19:53 |
| lbragstad | cc hrybacki ^ ? | 19:54 |
| * hrybacki reads | 19:54 | |
| hrybacki | let's take a look at what I did | 19:54 |
| lbragstad | oh - nevermind | 19:55 |
| lbragstad | your patch was for something else | 19:55 |
| mriedem | https://review.openstack.org/#/c/562812/ is my nova patch | 19:55 |
| lbragstad | looks like only rdo? v | 19:56 |
| lbragstad | http://paste.openstack.org/show/719582/ | 19:56 |
| mriedem | oh sorry i was looking at queens https://docs.openstack.org/keystone/queens/install/keystone-install-obs.html#install-and-configure-components | 19:59 |
| mriedem | so yeah looks like sles was updated on master | 19:59 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update the RDO installation guide to use port 5000 https://review.openstack.org/562814 | 19:59 |
| lbragstad | ^ fixed | 19:59 |
| lbragstad | yeah - sles should be good, and the rdo one was only referencing it in the rc file | 19:59 |
| lbragstad | but the bootstrap file was fine? | 19:59 |
| mriedem | yeah i noticed that | 20:00 |
| mriedem | weird | 20:00 |
| mriedem | i blame the ptl | 20:00 |
| lbragstad | i do too | 20:00 |
| *** harlowja has joined #openstack-keystone | 20:03 | |
| hrybacki | lbragstad: this likely a silly question but how would one test changes to the migration scripts in as simple of an env. as possible? | 20:06 |
| *** robertomls has quit IRC | 20:06 | |
| lbragstad | i guess when i do it i just have a clean database and a virtualenv to install things into | 20:06 |
| hrybacki | ack | 20:07 |
| * lbragstad steps away for a super late lunch | 20:08 | |
| *** mriedem has left #openstack-keystone | 20:09 | |
| *** oikiki has quit IRC | 20:13 | |
| *** oikiki has joined #openstack-keystone | 20:16 | |
| *** oikiki has quit IRC | 20:24 | |
| *** oikiki has joined #openstack-keystone | 20:27 | |
| *** gyee has joined #openstack-keystone | 20:32 | |
| *** knasim-wrs has joined #openstack-keystone | 20:37 | |
| knasim-wrs | hi guys | 20:38 |
| knasim-wrs | quick design question | 20:39 |
| knasim-wrs | I'm working on a Distributed Cloud solution, where I have a primary cloud that is running a master Keystone instance, and I want to spawn multiple sub clouds. | 20:39 |
| knasim-wrs | I would like to provide Single Sign On for admin and for lack of a better word, "human" users across all Subclouds. However each Subcloud is running its own services, so should manage its own services identities and projects | 20:40 |
| knasim-wrs | endpoints for subclouds will be created in the Primary Cloud and then synced to that subcloud | 20:40 |
| knasim-wrs | also Fernet keys will only be rotated on the Primary cloud and synced to the subclouds | 20:40 |
| knasim-wrs | that's my design so far... but I'm making this stuff as I go along | 20:40 |
| knasim-wrs | would Federated Identity be what I'd need for this? Note, this NOT a Multi-Region solution | 20:41 |
| knasim-wrs | all of these endpoints would be contained in RegionOne | 20:41 |
| knasim-wrs | lbragstad: Any thoughts? | 20:41 |
| knasim-wrs | I came across something called, k2k (keystone-to-keystone) Federated identity that looked interesting. | 20:42 |
| *** felipemonteiro_ has quit IRC | 20:54 | |
| lbragstad | knasim-wrs: k2k sounds like it would get you the closest | 21:02 |
| lbragstad | without digging into a bunch of the details yet | 21:02 |
| knasim-wrs | thanks lbragstad | 21:07 |
| knasim-wrs | that's what I figured as well | 21:07 |
| lbragstad | we'd happily take feedback on the k2k stuff, too | 21:07 |
| *** pcichy has quit IRC | 21:08 | |
| *** alee__ has joined #openstack-keystone | 21:14 | |
| *** dklyle has joined #openstack-keystone | 21:17 | |
| *** spilla has quit IRC | 21:19 | |
| *** rmascena has quit IRC | 21:20 | |
| *** thiagolib_ has quit IRC | 21:37 | |
| *** mchlumsky has quit IRC | 22:04 | |
| *** dklyle has quit IRC | 22:08 | |
| *** mvk has joined #openstack-keystone | 22:24 | |
| *** rcernin has joined #openstack-keystone | 22:30 | |
| *** edmondsw has quit IRC | 22:49 | |
| *** edmondsw has joined #openstack-keystone | 22:49 | |
| *** edmondsw has quit IRC | 22:53 | |
| *** eEbx has quit IRC | 23:05 | |
| *** eEbx has joined #openstack-keystone | 23:05 | |
| *** oikiki has quit IRC | 23:53 | |
| *** oikiki has joined #openstack-keystone | 23:53 | |
| *** oikiki has quit IRC | 23:54 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!