Thursday, 2018-07-26

*** rcernin has joined #openstack-keystone00:03
*** hugokuo has quit IRC00:11
*** hugokuo has joined #openstack-keystone00:13
*** itlinux has quit IRC00:17
*** elibrokeit has quit IRC00:25
*** elibrokeit has joined #openstack-keystone00:28
*** spilla has quit IRC00:46
*** gyee has quit IRC01:08
*** annp has quit IRC01:13
*** annp has joined #openstack-keystone01:14
*** edmondsw has joined #openstack-keystone01:17
*** dtruong_ has quit IRC01:20
*** edmondsw has quit IRC01:21
openstackgerritwangxiyuan proposed openstack/keystone master: Remove get_catalog usage from contrib  https://review.openstack.org/57569601:28
*** markvoelker has joined #openstack-keystone01:43
*** felipemonteiro has joined #openstack-keystone01:43
*** markvoelker_ has quit IRC01:44
*** markvoelker_ has joined #openstack-keystone01:46
*** markvoelker has quit IRC01:48
*** itlinux has joined #openstack-keystone02:11
*** itlinux has quit IRC02:15
*** gongysh has joined #openstack-keystone02:27
*** sapd has joined #openstack-keystone02:28
*** felipemonteiro has quit IRC02:38
*** openstack has joined #openstack-keystone02:47
*** ChanServ sets mode: +o openstack02:47
*** dave-mcc_ has quit IRC03:02
*** edmondsw has joined #openstack-keystone03:05
*** jmlowe has joined #openstack-keystone03:06
*** edmondsw has quit IRC03:09
*** abhi89 has joined #openstack-keystone03:13
*** jmlowe has quit IRC03:13
*** itlinux has joined #openstack-keystone03:58
*** dtruong_ has joined #openstack-keystone04:06
*** felipemonteiro has joined #openstack-keystone04:09
*** itlinux has quit IRC04:11
*** gongysh has quit IRC04:38
*** Rhvs_ has quit IRC04:38
*** felipemonteiro has quit IRC04:39
*** Rhvs has joined #openstack-keystone04:40
*** gongysh has joined #openstack-keystone04:46
*** edmondsw has joined #openstack-keystone04:53
*** gongysh has quit IRC04:54
*** edmondsw has quit IRC04:58
*** shyamb has joined #openstack-keystone05:04
*** shyamb has quit IRC05:04
openstackgerritMerged openstack/keystone master: Add serialization for TokenModel object  https://review.openstack.org/57843405:05
*** Tahvok has quit IRC05:06
*** Rhvs has quit IRC05:08
*** Tahvok has joined #openstack-keystone05:10
*** Rhvs has joined #openstack-keystone05:11
*** felipemonteiro has joined #openstack-keystone05:24
*** gongysh has joined #openstack-keystone05:24
*** gongysh has quit IRC05:38
*** links has joined #openstack-keystone05:48
*** flwang1 has quit IRC05:50
*** dklyle has quit IRC05:52
*** dklyle has joined #openstack-keystone05:53
*** yuxin_ has quit IRC06:26
openstackgerritwangxiyuan proposed openstack/keystone-tempest-plugin master: Clean up the auto generated domain  https://review.openstack.org/57906306:29
*** shyamb has joined #openstack-keystone06:35
*** martinus__ has joined #openstack-keystone06:35
*** flwang1 has joined #openstack-keystone06:36
*** edmondsw has joined #openstack-keystone06:41
*** edmondsw has quit IRC06:47
*** flwang1 has quit IRC06:49
*** hoonetorg has quit IRC06:57
*** yuxin_ has joined #openstack-keystone06:59
*** ispp has joined #openstack-keystone07:06
*** shyamb has quit IRC07:09
*** flwang1 has joined #openstack-keystone07:10
*** liuzz has joined #openstack-keystone07:11
*** gongysh has joined #openstack-keystone07:12
*** hoonetorg has joined #openstack-keystone07:14
*** flwang1 has quit IRC07:17
*** flwang1 has joined #openstack-keystone07:17
*** felipemonteiro has quit IRC07:23
*** pcaruana has joined #openstack-keystone07:25
openstackgerritwangxiyuan proposed openstack/keystone-tempest-plugin master: DNM: test-v3-ci  https://review.openstack.org/58597607:26
*** AlexeyAbashkin has joined #openstack-keystone07:33
*** ispp has quit IRC07:40
*** dtantsur|afk is now known as dtantsur07:46
openstackgerritMerged openstack/keystone master: Mirror self-link trust check from tempest  https://review.openstack.org/58404107:52
*** flwang1 has quit IRC07:58
*** shyamb has joined #openstack-keystone08:01
*** ispp has joined #openstack-keystone08:05
*** shyamb has quit IRC08:14
*** shyamb has joined #openstack-keystone08:14
*** shyamb has quit IRC08:19
*** edmondsw has joined #openstack-keystone08:30
*** edmondsw has quit IRC08:34
*** tesseract has joined #openstack-keystone08:42
*** dtruong_ has quit IRC09:02
*** shyamb has joined #openstack-keystone09:08
*** shyamb has quit IRC09:10
*** ispp has quit IRC09:10
*** shyamb has joined #openstack-keystone09:10
*** d0ugal has joined #openstack-keystone09:21
*** shyamb has quit IRC09:44
*** shyamb has joined #openstack-keystone09:44
*** d0ugal has quit IRC09:52
*** dtruong_ has joined #openstack-keystone10:10
openstackgerritMerged openstack/keystone master: Exposing ambiguity bug when querying role assignments  https://review.openstack.org/57043810:11
openstackgerritMerged openstack/keystone master: Reduce duplication in federated auth APIs  https://review.openstack.org/58578210:11
*** abhi89 has quit IRC10:13
*** shyamb has quit IRC10:14
*** shyamb has joined #openstack-keystone10:14
*** edmondsw has joined #openstack-keystone10:18
*** edmondsw has quit IRC10:23
*** ispp has joined #openstack-keystone10:24
*** shyamb has quit IRC10:25
*** d0ugal has joined #openstack-keystone10:32
*** d0ugal has quit IRC10:34
*** liuzz has quit IRC10:40
*** edmondsw has joined #openstack-keystone10:49
*** flwang1 has joined #openstack-keystone10:58
*** linkmark has joined #openstack-keystone10:58
*** rcernin has quit IRC11:04
*** dave-mccowan has joined #openstack-keystone11:07
*** shyamb has joined #openstack-keystone11:09
*** shyamb has quit IRC11:21
*** liuzz has joined #openstack-keystone11:26
*** gongysh has quit IRC11:44
*** shyamb has joined #openstack-keystone11:46
*** ispp has quit IRC11:48
*** ispp has joined #openstack-keystone11:48
*** flwang1 has quit IRC11:50
*** flwang1 has joined #openstack-keystone11:51
*** gongysh has joined #openstack-keystone11:59
*** shyamb has quit IRC12:00
*** shyamb has joined #openstack-keystone12:00
*** liuzz_ has joined #openstack-keystone12:09
*** liuzz has quit IRC12:10
openstackgerritJuan Antonio Osorio Robles proposed openstack/oslo.policy master: Implement base for pluggable policy drivers  https://review.openstack.org/57780712:21
openstackgerritOpenStack Release Bot proposed openstack/keystoneauth master: Update reno for stable/rocky  https://review.openstack.org/58608312:34
openstackgerritOpenStack Release Bot proposed openstack/keystonemiddleware master: Update reno for stable/rocky  https://review.openstack.org/58608612:34
*** openstackgerrit has quit IRC12:36
*** gongysh has quit IRC12:43
*** links has quit IRC12:46
*** abhi89 has joined #openstack-keystone12:49
*** shyamb has quit IRC13:05
*** shyamb has joined #openstack-keystone13:05
*** jmlowe has joined #openstack-keystone13:20
*** ispp has quit IRC13:21
knikollao/13:24
*** jistr is now known as jistr|mtg13:29
*** gongysh has joined #openstack-keystone13:35
*** ispp has joined #openstack-keystone13:35
*** r-daneel has joined #openstack-keystone13:40
*** jmlowe has quit IRC13:47
lbragstado/13:49
*** mchlumsky has joined #openstack-keystone13:52
*** ispp has quit IRC13:58
*** ispp has joined #openstack-keystone13:58
*** jmlowe has joined #openstack-keystone14:00
*** josecastroleon has quit IRC14:01
*** josecastroleon has joined #openstack-keystone14:01
*** Guest14217 is now known as zeus14:05
*** zeus has quit IRC14:06
*** zeus has joined #openstack-keystone14:06
*** jmlowe has quit IRC14:09
*** shyamb has quit IRC14:11
*** spilla has joined #openstack-keystone14:12
*** gongysh has quit IRC14:14
*** gongysh has joined #openstack-keystone14:26
*** gongysh has quit IRC14:33
lbragstadknikolla: in case you guys need it https://review.openstack.org/#/c/586241/14:35
lbragstadi've proposed https://review.openstack.org/#/c/586240/ too14:35
lbragstadand https://review.openstack.org/#/c/586242/14:35
knikollalbragstad, awesome!14:36
*** josecastroleon has quit IRC14:40
*** josecastroleon has joined #openstack-keystone14:40
*** devx has quit IRC14:42
*** josecastroleon has quit IRC14:42
*** josecastroleon1 has joined #openstack-keystone14:42
*** josecastroleon1 is now known as josecastroleon14:42
*** devx has joined #openstack-keystone14:43
*** josecastroleon has quit IRC14:47
gagehugoo/14:48
*** josecastroleon has joined #openstack-keystone14:49
*** imacdonn has quit IRC14:51
*** imacdonn has joined #openstack-keystone14:52
*** abhi89 has quit IRC14:53
*** jistr|mtg is now known as jistr14:56
*** gongysh has joined #openstack-keystone14:57
lbragstadi gotta make a quick run to fedex to mail a visa application - biab15:01
*** gongysh has quit IRC15:01
*** josecastroleon has quit IRC15:02
*** josecastroleon has joined #openstack-keystone15:06
*** josecastroleon has quit IRC15:08
*** josecastroleon has joined #openstack-keystone15:10
*** josecastroleon has quit IRC15:17
*** ispp has quit IRC15:36
*** pcaruana has quit IRC15:38
*** edmondsw has quit IRC15:57
*** edmondsw has joined #openstack-keystone15:57
*** edmondsw has quit IRC15:59
*** gyee has joined #openstack-keystone15:59
*** itlinux has joined #openstack-keystone16:01
*** spilla has quit IRC16:01
*** mchlumsky_ has joined #openstack-keystone16:03
*** adriant has quit IRC16:05
*** adriant has joined #openstack-keystone16:06
*** mchlumsky has quit IRC16:06
*** AlexeyAbashkin has quit IRC16:10
*** andymccr_ has joined #openstack-keystone16:29
lbragstadwxy: answered your comment in https://review.openstack.org/#/c/545450/  - let me know if you'd still like me to respin it16:33
*** andymccr_ has quit IRC16:33
*** andymccr_ has joined #openstack-keystone16:33
*** andymccr_ has quit IRC16:34
*** andymccr_ has joined #openstack-keystone16:34
*** adriant has quit IRC16:34
*** adriant has joined #openstack-keystone16:35
*** openstackgerrit has joined #openstack-keystone16:35
openstackgerritLance Bragstad proposed openstack/keystone master: Address nits in strict-two-level implementation  https://review.openstack.org/58537916:35
*** dtantsur is now known as dtantsur|afk16:38
*** andymccr_ has quit IRC16:38
*** andymccr_ has joined #openstack-keystone16:38
*** tesseract has quit IRC16:39
*** andymccr_ has quit IRC16:39
*** andymccr_ has joined #openstack-keystone16:44
*** nelsnelson has joined #openstack-keystone16:50
*** andymccr_ has quit IRC16:53
*** andymccr_ has joined #openstack-keystone16:54
*** andymccr_ has quit IRC16:55
*** andymccr_ has joined #openstack-keystone16:55
*** d0ugal has joined #openstack-keystone16:55
*** d0ugal has quit IRC16:55
*** d0ugal has joined #openstack-keystone16:55
*** spilla has joined #openstack-keystone17:10
*** r-daneel_ has joined #openstack-keystone17:10
*** r-daneel has quit IRC17:10
*** r-daneel_ is now known as r-daneel17:10
*** r-daneel has quit IRC17:14
*** abhi89 has joined #openstack-keystone17:18
*** d0ugal has quit IRC17:21
*** r-daneel has joined #openstack-keystone17:22
*** felipemonteiro has joined #openstack-keystone17:22
*** felipemonteiro has quit IRC17:24
*** fiddletwix has quit IRC17:26
kmalloclbragstad: can you explain to me why we changed the identity enforcement action between OS-FEDERATION and /auth/domains [for example]17:36
kmallocthis seems like that was a bad idea17:36
*** felipemonteiro has joined #openstack-keystone17:36
lbragstadkmalloc: what do you mean?17:37
kmalloc /auth/domains uses identity:get_auth_domains17:37
kmalloc /OS-FEDERATION/domains uses identity:list_domains_for_user17:37
kmallocbased upon how @protected works.17:37
kmalloci'm trying to incorporate the recent sec fix into the flask chain migrating /auth17:38
lbragstadthat's a good question17:38
kmallocis it... ok if i just drop identity:list_domains_for_user or make get_auth_domains use list_domains_for_user instead?17:39
kmallocthose should not be different enforcements imo17:39
lbragstadprobably not17:39
kmalloc(at all), especially now17:39
kmalloclist_domains_for_user is a *better* name17:39
lbragstadi would think whatever get_auth_domains does is correct17:39
kmallocthey do it the same afaict.17:39
kmallocbut let me check17:39
lbragstadsince the path to do that in OS-FEDERATION was a work-around API17:39
kmallocoh.. uhoh17:40
* kmalloc looks at this.17:40
kmallocwe might have another problem17:40
*** felipemonteiro has quit IRC17:41
kmallocoh nvm17:41
kmallocphew17:41
kmallochttps://www.irccloud.com/pastebin/piOOOCEZ/17:41
kmallochttps://www.irccloud.com/pastebin/GZLcP1T9/17:42
kmallocthese looks the same to me.17:42
kmallocso...17:42
kmallocwell close enough that is17:42
kmallocshould I .. combine them somehow?17:43
kmallocoh.. nevermind.17:43
kmalloci have to port OS-FEDERATION at the same time as auth17:43
kmallocbecause OS-FEDERATION has a number of things in the /auth path17:44
kmallocbah, i thought this change was almost done :P17:44
kmalloclbragstad: never mind me...17:44
*** mvk_ has quit IRC17:47
*** edmondsw has joined #openstack-keystone17:48
lbragstad:)17:49
kmalloclbragstad: heh, so the only one that matters now is get_auth_domains because we call the auth controller17:53
kmallocso that answers my question17:53
kmalloclist_domains_for_user is pointless.17:53
kmallocthe security fix means we call both now17:53
kmallocand the only one that really matters is the /auth one17:54
lbragstadyeah - then we can just remove the list_domains_for_users policy17:55
gagehugolbragstad: is this fixed https://bugs.launchpad.net/keystone/+bug/1778603?17:55
openstackLaunchpad bug 1778603 in OpenStack Identity (keystone) "Documentation builds failing with Sphinx 1.7.5" [High,In progress] - Assigned to Morgan Fainberg (mdrnstm)17:55
kmalloclbragstad: so, in advance, sorry - this next flask conversion is HUGE17:57
kmallocbecause it covers auth and os-federation17:57
kmallocand that is just because of how tied together they are17:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Move trusts to flask native dispatching  https://review.openstack.org/58327817:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Implement "no-update" test for trusts  https://review.openstack.org/58421117:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Boostrap CLI tests no longer call auth controller  https://review.openstack.org/58446617:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Move validate_issue_token_auth from controllers  https://review.openstack.org/58448517:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Remove direct calls to auth.controllers in some tests  https://review.openstack.org/58452917:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Break dependencies on auth.controllers  https://review.openstack.org/58551917:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Move unenforced_api decorator to module function  https://review.openstack.org/58586917:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Address FIXMEs for listing revoked tokens  https://review.openstack.org/54500917:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Cleanup last of tests leaning on auth controllers  https://review.openstack.org/58630617:57
kmalloc^ rebased with the security fix.17:57
*** dklyle has quit IRC18:01
kmalloclbragstad: or should i just copy-pasta the code from auth-controller over to OS-FEDERATION for the transitional period?18:01
kmalloclbragstad: it would, at least, not mean all of both APIS are migrated at once.18:01
* kmalloc doesn't know if it matters.18:01
kmallocthe changes are large in either case.18:01
lbragstadso the code in auth-controllers and OS-FEDERATION would be duplicated?18:03
kmallocyeah while transitioning to flask18:03
lbragstadthe thing that was nice about the security fix it that one just called the other18:04
kmallocright18:04
lbragstadso there wasn't any duplication18:04
kmalloci'll just bundle these together18:04
kmallocin flask it'll be easier, since you can do @url_for(<path>)18:04
kmallocand it just dispatches to the other method18:04
lbragstadoh - nice18:04
kmalloceven less code.18:04
kmallocyeah18:04
lbragstadyeah - so that will work like it does today then18:04
lbragstadbut we do have a test18:04
lbragstadso... we shouldn't regress18:04
lbragstadin the event we have to maintain duplication until the flask bits happen i suppose18:05
openstackgerritMerged openstack/oslo.policy master: Update reno for stable/rocky  https://review.openstack.org/58614618:05
kmallocwe don't have to maintain it18:06
kmalloci'll just bundle the changes together it's already a large patchset.18:06
kmalloci've commented in the commit message that we're making this change together because of how tied the code is.18:06
kmalloclbragstad: i just realized i could have made this a LOT simpler...18:08
kmallocif i had just made /v3 the API and attached all the resources to it.18:08
kmallocoh well, we're here now [for now]18:09
*** abhi89 has quit IRC18:40
lbragstadayoung: are you able to confirm this on centos7? https://bugs.launchpad.net/keystone/+bug/177928619:10
openstackLaunchpad bug 1779286 in OpenStack Identity (keystone) "Install and configure in keystone" [Undecided,New]19:10
*** pcaruana has joined #openstack-keystone19:17
*** r-daneel has quit IRC19:21
*** r-daneel has joined #openstack-keystone19:22
*** pcaruana has quit IRC19:45
*** felipemonteiro has joined #openstack-keystone19:48
*** flwang1 has quit IRC19:51
*** dklyle has joined #openstack-keystone19:51
ayounglbragstad, yeah, all that is Ubuntu/Debian based, not RHEL.  THe path he gives is wrong, though.19:56
ayoung/etc/httpd/conf.d  etc19:56
lbragstadi thought that path looked odd19:56
*** jmlowe has joined #openstack-keystone20:02
kmallocRHEL vs Deb based.20:24
*** spilla has quit IRC20:27
lbragstadis there anything else we want to try and land before cutting rocky-3?20:33
*** felipemonteiro has quit IRC20:33
*** felipemonteiro has joined #openstack-keystone20:33
lbragstadfrom what i can tell, nearly everything is refactors, which we can work on into RC period if needed20:33
lbragstadall wxy's patches to implement the unified limit stuff should be merged20:33
lbragstadwith the exception of https://review.openstack.org/#/c/585379/20:33
lbragstadmaybe https://review.openstack.org/#/c/574869/ too?20:34
lbragstadand we should figure out what we're going to do about https://review.openstack.org/#/c/555279/20:35
lbragstadthose are the three on my list i guess20:35
gagehugozuul has not been happy today :(20:41
lbragstadyeah - just recently in general20:58
lbragstadlotta timeout from what i can see20:58
*** r-daneel_ has joined #openstack-keystone20:59
lbragstadkmalloc: gagehugo knikolla do you think we need those three patches for rocky-3 or can we merge them after?20:59
lbragstador are there any other patches we need to land today before I cut rocky-3?21:00
*** r-daneel has quit IRC21:00
*** r-daneel_ is now known as r-daneel21:00
kmallocThose should all be fine pre or.post r321:00
kmallocI +2/+A one of them.21:00
lbragstadi'd like to get that deprecation in before rocky-321:01
lbragstadbut that might not be a huge deal21:01
lbragstadother wise the token extras one we'll need to come to consensus on https://review.openstack.org/#/c/555279/21:01
*** martinus__ has quit IRC21:04
gagehugoyeah deprecation one should get in21:07
*** flwang1 has joined #openstack-keystone21:11
*** r-daneel has quit IRC21:17
*** edmondsw has quit IRC21:43
*** jmlowe has quit IRC21:43
*** edmondsw has joined #openstack-keystone21:45
*** itlinux has quit IRC21:47
*** edmondsw has quit IRC21:49
*** mvk_ has joined #openstack-keystone22:12
kmallocEh just land the extras.22:15
kmallocIt's NBD. I'm of the opinion we just push it through :)22:16
*** rcernin has joined #openstack-keystone22:19
lbragstadpush what through?22:34
lbragstadthe extras patch?22:34
lbragstador rocky-3?22:34
*** itlinux has joined #openstack-keystone22:41
kmallocThe extras patch22:47
knikollaznc bouncer loses some messages when i disconnect :(22:58
knikollawill probably have to return to irccloud22:58
*** lbragstad_ has joined #openstack-keystone23:01
*** lbragstad has quit IRC23:01
*** knikolla has quit IRC23:01
*** knikolla has joined #openstack-keystone23:05
*** itlinux has quit IRC23:16
*** david-lyle has joined #openstack-keystone23:24
*** dklyle has quit IRC23:26
*** itlinux has joined #openstack-keystone23:43
*** felipemonteiro has quit IRC23:50
*** david-lyle has quit IRC23:51
*** itlinux has quit IRC23:52
*** dklyle has joined #openstack-keystone23:52
*** felipemonteiro has joined #openstack-keystone23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!