Wednesday, 2018-08-01

*** jistr has quit IRC00:00
*** jistr has joined #openstack-keystone00:01
*** linkmark has quit IRC00:08
*** bigdogstl has quit IRC00:09
*** liuzz has quit IRC00:10
*** bigdogstl has joined #openstack-keystone00:14
*** edmondsw has joined #openstack-keystone00:16
*** bigdogstl has quit IRC00:19
*** edmondsw has quit IRC00:21
*** bigdogstl has joined #openstack-keystone00:30
*** liuzz has joined #openstack-keystone00:32
*** bigdogstl has quit IRC00:42
*** bigdogstl has joined #openstack-keystone00:45
*** bigdogstl has quit IRC01:17
*** gongysh has joined #openstack-keystone01:28
*** yikun has joined #openstack-keystone01:32
*** Looking has joined #openstack-keystone01:37
LookingWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/01:37
LookingI thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/01:37
LookingRead what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate01:37
LookingA fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/01:37
*** Looking has quit IRC01:38
*** gyee has quit IRC01:40
*** rohan23 has joined #openstack-keystone01:42
rohan23With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/01:42
rohan23I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/01:42
rohan23Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate01:42
rohan23A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/01:42
*** hpt has joined #openstack-keystone01:43
hptWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/01:43
hptI thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/01:43
hptRead what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate01:43
hptA fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/01:43
*** rohan23 has quit IRC01:44
*** hpt has quit IRC01:48
*** l4z4i has joined #openstack-keystone01:48
l4z4iWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/01:49
l4z4iI thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/01:49
l4z4iRead what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate01:49
l4z4iA fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/01:49
*** HackMaster3 has joined #openstack-keystone01:49
HackMaster3With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/01:49
HackMaster3I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/01:49
HackMaster3Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate01:49
HackMaster3A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/01:49
*** l4z4i has quit IRC01:50
*** HackMaster3 has quit IRC01:50
*** bigdogstl has joined #openstack-keystone01:53
*** EmilienM has quit IRC01:56
*** EmilienM has joined #openstack-keystone01:56
*** EmilienM has quit IRC01:56
*** EmilienM has joined #openstack-keystone01:56
*** and has joined #openstack-keystone02:01
andWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/02:01
andI thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/02:01
andRead what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate02:01
andA fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/02:01
*** and has quit IRC02:01
*** bigdogstl has quit IRC02:05
*** bigdogstl has joined #openstack-keystone02:05
*** edmondsw has joined #openstack-keystone02:05
*** links has joined #openstack-keystone02:05
*** bigdogstl has quit IRC02:05
*** urdh18 has joined #openstack-keystone02:07
urdh18With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/02:07
*** urdh18 has quit IRC02:07
*** edmondsw has quit IRC02:10
*** SailorHaumea6 has joined #openstack-keystone02:21
SailorHaumea6With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/02:21
SailorHaumea6I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/02:21
SailorHaumea6Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate02:21
SailorHaumea6A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/02:21
*** ChanServ sets mode: +o kmalloc02:22
*** SailorHaumea6 has quit IRC02:22
openstackgerritBi wei proposed openstack/keystone master: Expose a bug that issue token with project-scope gets error  https://review.openstack.org/58736802:26
openstackgerritzhengliuyang proposed openstack/keystone master: Checking safety before keys rotation  https://review.openstack.org/58732602:27
*** smeggysmeg4 has joined #openstack-keystone02:38
*** smeggysmeg4 has quit IRC02:38
*** abhi89 has joined #openstack-keystone02:49
*** Jan\1 has joined #openstack-keystone02:59
Jan\1With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/02:59
*** Jan\1 has quit IRC02:59
*** Code_Red2 has joined #openstack-keystone03:22
*** Code_Red2 has quit IRC03:22
*** itlinux has joined #openstack-keystone03:23
*** neha_alhat has joined #openstack-keystone03:42
neha_alhatlbragstad: Hi, can you please review this patch: https://review.openstack.org/#/c/578008/03:44
*** Guest48349 has joined #openstack-keystone03:47
Guest48349With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/03:47
*** Guest48349 has quit IRC03:47
*** Typhon6 has joined #openstack-keystone03:56
Typhon6With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/03:56
Typhon6I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/03:56
Typhon6Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate03:56
Typhon6A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/03:56
*** Typhon6 has quit IRC03:56
*** darkmagic has joined #openstack-keystone03:57
darkmagicWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/03:57
*** darkmagic has quit IRC03:57
*** Guest42469 has joined #openstack-keystone03:58
*** Guest42469 has quit IRC03:58
*** f9 has joined #openstack-keystone04:03
f9With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/04:04
*** f9 has quit IRC04:04
*** rorx3 has joined #openstack-keystone04:04
*** rorx3 has quit IRC04:04
*** CGML6 has joined #openstack-keystone04:13
CGML6A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/04:13
*** wxy has quit IRC04:14
*** CGML6 has quit IRC04:14
*** Whooa21 has joined #openstack-keystone04:19
Whooa21With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/04:19
*** Whooa21 has quit IRC04:19
*** Guest56993 has joined #openstack-keystone04:32
*** Guest56993 has quit IRC04:32
*** flwang1 has quit IRC04:50
*** ABIX_Adamj has joined #openstack-keystone04:52
*** links has quit IRC04:52
ABIX_AdamjWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/04:53
*** ABIX_Adamj has quit IRC04:53
*** brethil27 has joined #openstack-keystone04:53
brethil27With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/04:53
*** brethil27 has quit IRC04:53
*** dindon has joined #openstack-keystone05:04
*** dindon has quit IRC05:04
*** jaosorior has quit IRC05:08
*** Platonides25 has joined #openstack-keystone05:08
Platonides25With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/05:08
Platonides25I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/05:08
*** Platonides25 has quit IRC05:08
*** idn has joined #openstack-keystone05:20
*** idn has quit IRC05:20
*** pooja_jadhav has quit IRC05:24
*** pooja-jadhav has joined #openstack-keystone05:25
*** pooja_jadhav has joined #openstack-keystone05:25
*** pooja-jadhav has quit IRC05:28
*** gongysh has quit IRC05:32
*** Goldman609 has joined #openstack-keystone05:43
Goldman609With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/05:44
Goldman609I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/05:44
Goldman609Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate05:44
Goldman609A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/05:44
*** Goldman609 has quit IRC05:44
*** Louis2 has joined #openstack-keystone05:48
*** Louis2 has quit IRC05:48
*** OwenBarfield has joined #openstack-keystone05:52
*** OwenBarfield has quit IRC05:52
*** pcichy has quit IRC05:59
*** pcichy has joined #openstack-keystone06:00
*** KDDLB has joined #openstack-keystone06:11
KDDLBWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/06:11
*** KDDLB has quit IRC06:11
*** aning has joined #openstack-keystone06:12
*** aning has quit IRC06:13
*** imacdonn has quit IRC06:13
*** dims has quit IRC06:13
*** aning_ has quit IRC06:14
*** dims has joined #openstack-keystone06:15
*** aning has joined #openstack-keystone06:18
*** aning_ has joined #openstack-keystone06:18
*** aning has quit IRC06:21
*** dims has quit IRC06:22
*** dims has joined #openstack-keystone06:24
*** links has joined #openstack-keystone06:25
*** shyamb has joined #openstack-keystone06:28
*** tnogisto has quit IRC06:32
*** martinus__ has joined #openstack-keystone06:32
*** pcaruana has joined #openstack-keystone06:42
*** bananas28 has joined #openstack-keystone06:43
bananas28With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/06:43
*** bananas28 has quit IRC06:43
openstackgerritzhengliuyang proposed openstack/keystone master: Checking safety before keys rotation  https://review.openstack.org/58732606:54
*** By has joined #openstack-keystone06:55
ByWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/06:55
*** By has quit IRC06:55
*** ispp has joined #openstack-keystone06:57
*** gongysh has joined #openstack-keystone06:59
*** shyamb has quit IRC07:02
*** shyamb has joined #openstack-keystone07:03
*** rcernin has quit IRC07:05
*** peereb has joined #openstack-keystone07:09
*** Nakato20 has joined #openstack-keystone07:10
Nakato20With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/07:11
Nakato20I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/07:11
*** Nakato20 has quit IRC07:11
*** hugokuo has quit IRC07:16
*** therock247uk5 has joined #openstack-keystone07:16
therock247uk5With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/07:16
therock247uk5I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/07:16
*** therock247uk5 has quit IRC07:16
*** hugokuo has joined #openstack-keystone07:17
*** zigo_ is now known as zigo07:26
*** tesseract has joined #openstack-keystone07:26
*** threestrands has quit IRC07:26
openstackgerritwangxiyuan proposed openstack/oslo.limit master: Add opts file  https://review.openstack.org/58676007:32
*** wxy has joined #openstack-keystone07:33
*** wget15 has joined #openstack-keystone07:36
wget15With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/07:36
wget15I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/07:36
*** wget15 has quit IRC07:36
*** jaosorior has joined #openstack-keystone07:41
*** DanPin29 has joined #openstack-keystone07:42
DanPin29With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/07:42
*** DanPin29 has quit IRC07:42
*** shyamb has quit IRC07:49
*** AlexeyAbashkin has joined #openstack-keystone07:52
*** crayon19 has joined #openstack-keystone07:53
crayon19With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/07:53
*** crayon19 has quit IRC07:53
*** AlexeyAbashkin has quit IRC07:55
*** AlexeyAbashkin has joined #openstack-keystone07:55
*** shyamb has joined #openstack-keystone07:56
*** wiggle has joined #openstack-keystone08:02
*** gongysh has quit IRC08:03
*** wiggle has quit IRC08:07
*** shyamb has quit IRC08:14
*** vikram has joined #openstack-keystone08:25
*** s10 has joined #openstack-keystone08:26
vikramHi Team, getting the error "ImportError: No module named keystone.cmd.manage" https://pastebin.com/F6NPXY32 while running stack.sh. using python3.5 + openstack(stable/queens), any idea how can I resolve this error?08:28
*** Gentle has joined #openstack-keystone08:44
*** Gentle has quit IRC08:44
openstackgerritzhengliuyang proposed openstack/keystone master: Unified code style nullable description parameter  https://review.openstack.org/58772108:52
*** vikram_ has joined #openstack-keystone08:56
*** Eduard_Munteanu has joined #openstack-keystone08:56
Eduard_MunteanuWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/08:56
Eduard_MunteanuI thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/08:56
Eduard_MunteanuRead what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate08:56
*** Eduard_Munteanu has quit IRC08:56
*** vikram_ has quit IRC09:00
*** peereb has quit IRC09:08
openstackgerritBi wei proposed openstack/keystone master: Fix a bug that issue token with project-scope gets error  https://review.openstack.org/58739909:27
*** hemna has quit IRC09:28
*** ianw has quit IRC09:29
*** ianw has joined #openstack-keystone09:29
*** zzzeek has quit IRC09:30
*** hemna has joined #openstack-keystone09:31
*** zzzeek has joined #openstack-keystone09:33
openstackgerritBi wei proposed openstack/keystone master: Fix a bug that issue token with project-scope gets error  https://review.openstack.org/58739909:36
*** ms78214 has joined #openstack-keystone09:46
ms78214With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/09:46
ms78214I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/09:46
*** ms78214 has quit IRC09:46
*** flwang1 has joined #openstack-keystone09:52
*** ispp has quit IRC10:02
*** zz_ka6sox has joined #openstack-keystone10:05
*** xfil has joined #openstack-keystone10:05
xfilWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/10:05
xfilI thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/10:05
*** xfil has quit IRC10:05
*** zz_ka6sox has quit IRC10:06
*** ispp has joined #openstack-keystone10:07
*** abhi89 has quit IRC10:12
*** ispp has quit IRC10:24
*** dtantsur|afk is now known as dtantsur10:26
*** s10 has quit IRC10:33
*** spirit_pact has joined #openstack-keystone10:35
spirit_pactWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/10:35
*** spirit_pact has quit IRC10:35
*** liuzz_ has joined #openstack-keystone10:43
*** liuzz has quit IRC10:44
*** quiz9617 has joined #openstack-keystone10:45
quiz9617With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/10:45
*** quiz9617 has quit IRC10:45
*** blocked4 has joined #openstack-keystone10:53
blocked4With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/10:53
*** blocked4 has quit IRC10:53
*** threestrands has joined #openstack-keystone11:15
*** ispp has joined #openstack-keystone11:27
*** Michail1 has joined #openstack-keystone11:35
Michail1With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/11:36
*** Michail1 has quit IRC11:36
*** ljharb26 has joined #openstack-keystone11:36
ljharb26With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/11:36
ljharb26I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/11:36
*** ljharb26 has quit IRC11:36
*** abhi89 has joined #openstack-keystone11:39
*** Maven_ has joined #openstack-keystone11:43
Maven_With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/11:43
*** Maven_ has quit IRC11:43
*** raildo has joined #openstack-keystone11:54
*** gongysh has joined #openstack-keystone11:57
*** r-daneel has joined #openstack-keystone11:59
*** HarryCross223 has joined #openstack-keystone12:01
HarryCross223With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/12:01
*** HarryCross223 has quit IRC12:01
*** r-daneel has quit IRC12:03
*** spb12 has joined #openstack-keystone12:11
spb12With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/12:11
*** spb12 has quit IRC12:11
*** marduk19118 has joined #openstack-keystone12:15
marduk19118With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/12:15
marduk19118I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/12:15
*** marduk19118 has quit IRC12:15
*** edmondsw has joined #openstack-keystone12:17
*** gongysh has quit IRC12:27
*** Turandot13 has joined #openstack-keystone12:32
Turandot13With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/12:32
Turandot13I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/12:32
Turandot13Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate12:32
*** Turandot13 has quit IRC12:32
*** openstack has joined #openstack-keystone12:56
*** barjavel.freenode.net sets mode: +ns 12:56
*** barjavel.freenode.net sets mode: -o openstack13:00
-barjavel.freenode.net- *** Notice -- TS for #openstack-keystone changed from 1533128170 to 137738402413:00
*** barjavel.freenode.net sets mode: +cgt-s 13:00
*** chason[m] has joined #openstack-keystone13:00
*** chason has joined #openstack-keystone13:00
*** ispp has joined #openstack-keystone13:00
*** abhishek has joined #openstack-keystone13:00
*** johnthetubaguy has joined #openstack-keystone13:00
*** glb has joined #openstack-keystone13:00
*** Guest17960 has joined #openstack-keystone13:00
*** NikitaKonovalov has joined #openstack-keystone13:00
*** Chealion has joined #openstack-keystone13:00
*** weezhard has joined #openstack-keystone13:00
*** afazekas_ has joined #openstack-keystone13:00
*** AlexeyAbashkin has joined #openstack-keystone13:00
*** edmondsw_ has joined #openstack-keystone13:00
*** raildo has joined #openstack-keystone13:00
*** liuzz_ has joined #openstack-keystone13:00
*** flwang1 has joined #openstack-keystone13:00
*** zzzeek has joined #openstack-keystone13:00
*** hemna has joined #openstack-keystone13:00
*** ianw has joined #openstack-keystone13:00
*** vikram has joined #openstack-keystone13:00
*** jaosorior has joined #openstack-keystone13:00
*** wxy has joined #openstack-keystone13:00
*** tesseract has joined #openstack-keystone13:00
*** hugokuo has joined #openstack-keystone13:00
*** pcaruana has joined #openstack-keystone13:00
*** martinus__ has joined #openstack-keystone13:00
*** links has joined #openstack-keystone13:00
*** dims has joined #openstack-keystone13:00
*** aning_ has joined #openstack-keystone13:00
*** pcichy has joined #openstack-keystone13:00
*** pooja_jadhav has joined #openstack-keystone13:00
*** neha_alhat has joined #openstack-keystone13:00
*** itlinux has joined #openstack-keystone13:00
*** EmilienM has joined #openstack-keystone13:00
*** yikun has joined #openstack-keystone13:00
*** jistr has joined #openstack-keystone13:00
*** _KaszpiR_ has joined #openstack-keystone13:00
*** dklyle has joined #openstack-keystone13:00
*** mvk_ has joined #openstack-keystone13:00
*** dtruong2 has joined #openstack-keystone13:00
*** cwright has joined #openstack-keystone13:00
*** mchlumsky has joined #openstack-keystone13:00
*** annp has joined #openstack-keystone13:00
*** aloga has joined #openstack-keystone13:00
*** jmlowe has joined #openstack-keystone13:00
*** kevko has joined #openstack-keystone13:00
*** DinaBelova has joined #openstack-keystone13:00
*** andreykurilin has joined #openstack-keystone13:00
*** jmccrory has joined #openstack-keystone13:00
*** sapd has joined #openstack-keystone13:00
*** ayoung has joined #openstack-keystone13:00
*** idlemind has joined #openstack-keystone13:00
*** devx has joined #openstack-keystone13:00
*** Mantorok has joined #openstack-keystone13:00
*** dave-mccowan has joined #openstack-keystone13:00
*** sonuk has joined #openstack-keystone13:00
*** vegarl has joined #openstack-keystone13:00
*** lbragstad has joined #openstack-keystone13:00
*** jroll has joined #openstack-keystone13:00
*** mugsie has joined #openstack-keystone13:00
*** Martin_Ch has joined #openstack-keystone13:00
*** d0ugal has joined #openstack-keystone13:00
*** melwitt has joined #openstack-keystone13:00
*** hoonetorg has joined #openstack-keystone13:00
*** mvenesio has joined #openstack-keystone13:00
*** elibrokeit has joined #openstack-keystone13:00
*** openstackgerrit has joined #openstack-keystone13:00
*** andymccr has joined #openstack-keystone13:00
*** breton has joined #openstack-keystone13:00
*** zioproto has joined #openstack-keystone13:00
*** csatari has joined #openstack-keystone13:00
*** lifeless has joined #openstack-keystone13:00
*** zigo has joined #openstack-keystone13:00
*** fiddletwix has joined #openstack-keystone13:00
*** knikolla has joined #openstack-keystone13:00
*** nelsnelson has joined #openstack-keystone13:00
*** adriant has joined #openstack-keystone13:00
*** yuxin_ has joined #openstack-keystone13:00
*** Rhvs has joined #openstack-keystone13:00
*** Tahvok has joined #openstack-keystone13:00
*** markvoelker_ has joined #openstack-keystone13:00
*** mtreinish has joined #openstack-keystone13:00
*** eandersson has joined #openstack-keystone13:00
*** dtantsur has joined #openstack-keystone13:00
*** jrist has joined #openstack-keystone13:00
*** kukacz_ has joined #openstack-keystone13:00
*** dstanek has joined #openstack-keystone13:00
*** zeus has joined #openstack-keystone13:00
*** alex_xu has joined #openstack-keystone13:00
*** dmellado has joined #openstack-keystone13:00
*** barjavel.freenode.net sets mode: +o lbragstad13:00
*** viks_ has joined #openstack-keystone13:00
*** jdennis has joined #openstack-keystone13:00
*** TheJulia has joined #openstack-keystone13:00
*** clarkb has joined #openstack-keystone13:00
*** mancdaz has joined #openstack-keystone13:00
*** d34dh0r53 has joined #openstack-keystone13:00
*** andreaf has joined #openstack-keystone13:00
*** lamt has joined #openstack-keystone13:00
*** samueldmq has joined #openstack-keystone13:00
*** evrardjp has joined #openstack-keystone13:00
*** timss has joined #openstack-keystone13:00
*** knikolla[m] has joined #openstack-keystone13:00
*** lbragstad[m] has joined #openstack-keystone13:00
*** jamielennox has joined #openstack-keystone13:00
*** gmann has joined #openstack-keystone13:00
*** frickler has joined #openstack-keystone13:00
*** gagehugo has joined #openstack-keystone13:00
*** jhesketh has joined #openstack-keystone13:00
*** portdirect has joined #openstack-keystone13:00
*** mwhahaha has joined #openstack-keystone13:00
*** pas-ha has joined #openstack-keystone13:00
*** jamespage has joined #openstack-keystone13:00
*** NobodyCam has joined #openstack-keystone13:00
*** robcresswell has joined #openstack-keystone13:00
*** wlmbasson has joined #openstack-keystone13:00
*** Anticimex has joined #openstack-keystone13:00
*** tristanC has joined #openstack-keystone13:00
*** timothyb89 has joined #openstack-keystone13:00
*** timburke has joined #openstack-keystone13:00
*** errr has joined #openstack-keystone13:00
*** bzhao__ has joined #openstack-keystone13:00
*** deepak_mourya has joined #openstack-keystone13:00
*** cloudnull has joined #openstack-keystone13:00
*** Neptu_ has joined #openstack-keystone13:00
*** rodrigods has joined #openstack-keystone13:00
*** chudly_ has joined #openstack-keystone13:00
*** tadams12083_ has joined #openstack-keystone13:00
*** spotz has joined #openstack-keystone13:00
*** toddnni has joined #openstack-keystone13:00
*** wolsen has joined #openstack-keystone13:00
*** BlackDex has joined #openstack-keystone13:00
*** rha has joined #openstack-keystone13:00
*** tommylikehu has joined #openstack-keystone13:00
*** chrome0 has joined #openstack-keystone13:00
*** cz2 has joined #openstack-keystone13:00
*** slunkad has joined #openstack-keystone13:00
*** redrobot has joined #openstack-keystone13:00
*** eEbx has joined #openstack-keystone13:00
*** tobberydberg has joined #openstack-keystone13:00
*** baffle has joined #openstack-keystone13:00
*** szaher has joined #openstack-keystone13:00
*** rledisez has joined #openstack-keystone13:00
*** jenglisch has joined #openstack-keystone13:00
*** dansmith has joined #openstack-keystone13:00
*** larsks has joined #openstack-keystone13:00
*** mordred has joined #openstack-keystone13:00
*** freerunner has joined #openstack-keystone13:00
*** rm_work has joined #openstack-keystone13:00
*** hogepodge has joined #openstack-keystone13:00
*** ildikov has joined #openstack-keystone13:00
*** awestin1 has joined #openstack-keystone13:00
*** kmalloc has joined #openstack-keystone13:00
*** betherly has joined #openstack-keystone13:00
*** hrybacki has joined #openstack-keystone13:00
*** mnaser has joined #openstack-keystone13:00
*** trident has joined #openstack-keystone13:00
*** odyssey4me has joined #openstack-keystone13:00
*** jgrassler has joined #openstack-keystone13:00
*** jamiec has joined #openstack-keystone13:00
*** chris_hultin has joined #openstack-keystone13:00
*** eglute_s has joined #openstack-keystone13:00
*** obre has joined #openstack-keystone13:00
*** tsufiev has joined #openstack-keystone13:00
*** ChanServ has joined #openstack-keystone13:00
*** charz has joined #openstack-keystone13:00
*** mgagne has joined #openstack-keystone13:00
*** raginbajin has joined #openstack-keystone13:00
*** yankcrime has joined #openstack-keystone13:00
*** cburgess has joined #openstack-keystone13:00
*** kencjohnston has joined #openstack-keystone13:00
*** Krenair has joined #openstack-keystone13:00
*** cmurphy|vacation has joined #openstack-keystone13:00
*** mattoliverau has joined #openstack-keystone13:00
*** fungi has joined #openstack-keystone13:00
*** barjavel.freenode.net sets mode: +oo kmalloc ChanServ13:00
*** barjavel.freenode.net sets mode: +bbbb *!~amcuska@2400:8902::f03c:91ff:fe48:6c48 *!~nffmq@119.156.124.178 *!*@pool-173-54-231-24.nwrknj.fios.verizon.net *!*bjornar*@*13:00
*** barjavel.freenode.net sets mode: +bbbb *!awrbgh@197.123.75.191 bjornar__!*@* bjornar!*@* *!bjornar_@*13:00
*** barjavel.freenode.net sets mode: +b Guest_83848!*@*13:00
*** barjavel.freenode.net sets mode: +qq uvirbot!*@* uvirtbot!*@*13:00
*** barjavel.freenode.net changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap !!NOTE!! This Channel is Logged ( https://tinyurl.com/OpenStackKeystone )"13:00
*** jroll has quit IRC13:00
*** jroll has joined #openstack-keystone13:00
*** jrollen has joined #openstack-keystone13:01
*** spilla has joined #openstack-keystone13:02
*** profall13 has joined #openstack-keystone13:09
profall13With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/13:09
profall13I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/13:09
profall13Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate13:09
*** profall13 has quit IRC13:09
*** abhi89 has joined #openstack-keystone13:13
*** Hobby5 has joined #openstack-keystone13:14
Hobby5With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/13:14
Hobby5I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/13:14
Hobby5Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate13:14
Hobby5A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/13:14
*** Hobby5 has quit IRC13:14
*** abhishek has quit IRC13:16
*** r-daneel has joined #openstack-keystone13:16
*** AlexeyAbashkin has quit IRC13:17
*** AlexeyAbashkin has joined #openstack-keystone13:17
*** spilla has quit IRC13:18
*** spilla has joined #openstack-keystone13:18
*** vikram has quit IRC13:23
*** CurryWurst26 has joined #openstack-keystone13:28
CurryWurst26With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/13:28
CurryWurst26I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/13:28
CurryWurst26Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate13:28
*** CurryWurst26 has quit IRC13:28
*** edmondsw_ is now known as edmondsw13:47
*** egos15 has joined #openstack-keystone13:55
egos15With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/13:55
*** egos15 has quit IRC13:55
*** edmondsw is now known as edmondsw_13:58
*** edmondsw_ is now known as edmondsw13:59
*** r-daneel has quit IRC14:02
*** r-daneel has joined #openstack-keystone14:02
*** developers has joined #openstack-keystone14:06
developersWith our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/14:06
developersI thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/14:06
developersRead what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate14:06
developersA fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/14:06
*** developers has quit IRC14:06
*** danzilio14 has joined #openstack-keystone14:06
danzilio14With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/14:06
danzilio14I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/14:06
*** danzilio14 has quit IRC14:06
*** vrv_ has joined #openstack-keystone14:07
*** dklyle has quit IRC14:13
*** xinran__ has joined #openstack-keystone14:17
*** Steinsplitter0 has joined #openstack-keystone14:19
Steinsplitter0With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/14:19
Steinsplitter0I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/14:19
Steinsplitter0Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate14:19
*** Steinsplitter0 has quit IRC14:19
*** Guest44686 has joined #openstack-keystone14:31
Guest44686With our IRC ad service you can reach a global audience of entrepreneurs and fentanyl addicts with extraordinary engagement rates! https://williampitcock.com/14:32
Guest44686I thought you guys might be interested in this blog by freenode staff member Bryan 'kloeri' Ostergaard https://bryanostergaard.com/14:32
Guest44686Read what IRC investigative journalists have uncovered on the freenode pedophilia scandal https://encyclopediadramatica.rs/Freenodegate14:32
Guest44686A fascinating blog by freenode staff member Matthew 'mst' Trout https://MattSTrout.com/14:32
*** Guest44686 has quit IRC14:32
*** edmondsw has quit IRC14:33
*** edmondsw has joined #openstack-keystone14:33
*** felipemonteiro has joined #openstack-keystone14:41
*** abhi89 has quit IRC14:42
*** felipemonteiro_ has joined #openstack-keystone14:43
*** links has quit IRC14:45
knikollao/14:47
*** felipemonteiro has quit IRC14:47
knikollathat's a lot of spam14:48
kmallocyep14:48
lbragstadSigny seems to be catching some of it =/14:49
lbragstadSigyn*14:49
lbragstadwould it be possible to get some eyes on https://review.openstack.org/#/c/545450/20 ?14:53
*** r-daneel has quit IRC14:55
*** ChanServ sets mode: +rf #openstack-unregistered14:59
*** felipemonteiro_ has quit IRC14:59
*** jrollen is now known as jroll15:01
kmallocand spam should subside now.15:03
lbragstad++15:03
gagehugohuzzah15:03
knikollaawesome!15:04
kmalloclbragstad: +2/+A15:04
knikollaat least they didn't ping all names in the channel list15:04
knikollai hate when that happens15:04
lbragstadkmalloc: sweet - thanks15:04
lbragstadthere are a couple other patches queued up behind that15:04
kmallocknikolla: now i can start banning folks who are spamming becuase they will be registered with nickserv15:05
lbragstadbut i'll need to rebase later in the chain15:05
kmalloclbragstad: and a few are in need of rebase15:05
kmalloclbragstad: those landing are probably going to make me rebase the auth controller decoupling i've been workgin on :P15:05
knikollakmalloc: cool stuff15:05
kmallocbut i guess it's fair, my turn to get hit with rebases15:05
lbragstadkmalloc: sorry :(15:05
kmalloclbragstad: i almost have OAUTH1 controllers [not /user bits, but OS-AUTH1 bits] migrated15:06
lbragstadunrelated: i finally got my home server up and running last night15:06
kmallocand then going to work on policy, catalog, and uhm... something else15:06
kmallocturns out auth is VERY hard.15:06
knikollalbragstad: what are you using it for?15:06
kmallocit might be the last one done.15:06
lbragstadknikolla: it's running Queens with a flat provider network that uses my home router for dhcp to instances (so whatever I spin up is accessible via my home network)15:07
knikollalbragstad: sweet. what're the specs?15:08
lbragstadit's a thinkstation p910, 32 vcpus, 32 Gib RAM15:08
lbragstadit's an All-in-ONe15:08
lbragstadi was using it to serve up containers, but i didn't get full virtualization support (so running parts of nova or cinder didn't work)15:09
lbragstadkmalloc: i'll start reviewing the flask stuff today15:11
knikollai'm trying to find a use for my oldish mac mini (8 vcpu, 16g). probably not powerful enough to be useful with openstack15:13
lbragstadyou could probably do a deploy on it...15:13
*** s10 has joined #openstack-keystone15:14
*** s10 is now known as s10_15:14
*** s10_ is now known as s1015:15
*** pcaruana has quit IRC15:15
*** gyee has joined #openstack-keystone15:16
knikollai did consider that, but that would be of limited use.15:16
knikollai already have access to a production cloud.15:17
lbragstadtrue15:17
lbragstadgagehugo: when you verified https://review.openstack.org/#/c/580780/ were you pulling notifications off a queue? or just checking the request IDs in keystone's log?15:17
knikollaIf I had faster upload speeds I'd migrate my nextcloud instance to it.15:18
lbragstadgagehugo: seems similar to https://bugs.launchpad.net/keystone/+bug/174254615:19
openstackLaunchpad bug 1742546 in OpenStack Identity (keystone) "Keystone appears to initiate each new request using the previous' request-id" [Undecided,New]15:19
lbragstadknikolla: another thing you could do with that machine would be to PXE boot it with a base ubuntu image and just do baremetal devstack installations with it15:20
*** itlinux has quit IRC15:21
gagehugolbragstad pulling them off the queue15:32
*** openstackstatus has joined #openstack-keystone15:33
*** ChanServ sets mode: +v openstackstatus15:33
gagehugolbragstad I don't think the initiator id is from the previous, it appears to be random, which is what pycadf provides for the base initiator object15:37
gyeelbragstad, knikolla, I am trying to assess the impact of https://review.openstack.org/#/c/582414/ for the stable branches. I have devstack setup using stable/pike with K2K federation enabled. But I am unable to reproduce the project leak problem.15:37
gyeewith the federated token, I can only seem to list projects in the federated_domain15:37
lbragstadgagehugo: ack - recreating now15:38
lbragstadgyee: use any token from a non-federated user15:38
gyeea non-federated user token will yield http 50015:39
gyeeinternal server error15:39
gyeeI tried both stable/pike and stable/ocata, same result15:39
lbragstadwhat's the 500?15:39
gyeeinternal server error15:40
lbragstadright15:40
lbragstadbut what causes it?15:40
lbragstaddo you know?15:40
gyeegroup_id doesn't exist in context I think15:40
kmallocright. in some versions, 500 was the behavior15:42
kmallocmaster was leaking data15:42
lbragstadi need to double check15:42
gyeeAug  1 08:41:44 localhost devstack@keystone.service[1012]: ERROR keystone.common.wsgi #033[01;35m#033[00m    request.auth_context['group_ids'])15:42
gyeeAug  1 08:41:44 localhost devstack@keystone.service[1012]: ERROR keystone.common.wsgi #033[01;35m#033[00mKeyError: 'group_ids'15:42
kmallocfor consistency we backported the fix to ensure we didn't leak in the future15:42
lbragstadbut context might populate that if the user has membership on some groups15:42
kmallocprevious versions did 500 error.15:42
kmallocit was edge-case-y for pre-rocky15:42
kmallocbut for "make sure we don't leak in edge cases" backport is highly advised.15:43
gyeeso it doesn't seem to impact these stable branches, pike,ocata,newton15:43
kmallocit doesn't overtly15:43
kmallocbut it could15:43
lbragstadgyee: can you try and put the user your recreating with in a group?15:43
kmalloctl;dr we wouldn't have offered backports if we thought it was 100% safe15:43
kmallocso, suggestion: apply the fix.15:43
gyeekmalloc, well we're trying to determine "how soon" do we need to apply them for the customers15:44
gyeeif it's not reproducible, we don't want to operation in the emergency mode yet :-)15:44
kmallocif you use federation: schedule soon.15:44
kmallocif you're on Master, ASAP15:45
gyeeI am trying to assess the impact on the stable branches, so far I haven't tried master yet15:45
kmallocnon-master is likely "next convinent maitnenance window"15:45
kmallocthe global impact of the bug is data leaking, no priv. esc.15:46
kmallocso, i'd schedule it for the next available maintenance window, but since you're not running master no "emergency maintenance"**15:46
gyeeunderstood, data leak is pretty serious15:46
kmalloc** = this doesn't amount to legal advice, and cannot cover all cases.15:46
kmalloc;)15:46
kmallocmore serious in public clouds.15:47
kmallocless serious in private clouds.15:47
gyeeunderstood, I am trying to assess the impact first, then type up an email for the decision makers :-)15:47
kmallocyep15:47
-openstackstatus- NOTICE: Due to ongoing spam, all OpenStack-related channels now require authentication with nickserv. If an unauthenticated user joins a channel, they will be forwarded to #openstack-unregistered with a message about the problem and folks to help with any questions (volunteers welcome!).15:47
gyeeI am just a pawn man :-)15:48
kmalloceh don't undersell yourself.15:48
*** jaypipes has joined #openstack-keystone15:49
jaypipeslbragstad: for some reason I thought the Cinder endpoint in the service catalog moved from "volumev2" to "block-storage" as the service type. Is that not the case?15:51
jaypipes(this is something that came up yesterday and I was just curious..)15:51
kmallocjaypipes: i think.. i think it did, but we suppot old/backwards compat stuff everwhere15:52
kmallocso, impact: this is better15:52
kmallocit was part of the whole aliases support, we have a mechanism to handle This means X if you use old-forms15:52
kmallocor new forms of service-type15:52
*** dtruong2 has quit IRC15:53
*** kmalloc sets mode: -o kmalloc15:54
*** ispp has quit IRC15:54
lbragstadjaypipes: yeah - we support multiple ways to do it, we don't technically enforce a specific way for services to register their type :/15:54
kmallocand we probably wont ever15:55
*** imacdonn has joined #openstack-keystone15:56
*** imacdonn has quit IRC15:56
gyeelbragstad, with the group membership, I got the same result for the non-federated user token.15:58
gyeelet me try queens and master next15:58
jaypipeskmalloc, lbragstad: well, in order to support "backwards compatibility", the deployer could just add a new entry to the service catalog for "block-storage" right? and keep the existing entry for "volumev2" in there for a time?16:03
*** fiddletwix has quit IRC16:03
jaypipeskmalloc, lbragstad: in other words, nothing about keystone would prevent that, right?16:03
kmallocjaypipes: in theory, we also have aliases support in ksa now.16:03
*** fiddletwix has joined #openstack-keystone16:03
kmallocjaypipes: so we know block-storage == volumev216:03
kmallocor whatever it maps to [we have a repo that does the alias mapping now]16:04
jaypipeskmalloc: ack, good to know, thanks Morgan.16:04
lbragstadjaypipes: correct - that is something you shouldbe able to do today16:04
kmallocnp!16:04
*** fiddletwix has quit IRC16:08
*** itlinux has joined #openstack-keystone16:12
*** dtantsur is now known as dtantsur|afk16:24
*** AlexeyAbashkin has quit IRC16:26
*** Guest17960 is now known as jlvillal16:26
*** dklyle has joined #openstack-keystone16:29
openstackgerritMerged openstack/keystone master: Simplify the token provider API  https://review.openstack.org/54545016:44
openstackgerritMerged openstack/keystone master: Remove remnants of token bind  https://review.openstack.org/57843516:57
openstackgerritMerged openstack/keystone master: Cleanup keystone.token.providers.common  https://review.openstack.org/57750716:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Move validate_issue_token_auth from controllers  https://review.openstack.org/58448516:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Remove direct calls to auth.controllers in some tests  https://review.openstack.org/58452916:57
kmalloclbragstad: doh, this is gonna be an ugly rebase.17:01
*** _ix has joined #openstack-keystone17:14
_ixGood afternoon, folks. I'm gearing up for an upgrade to Queens... in preparation for Rocky for a multi-region deployment, but I'm having some difficulty right now using the same user across multiple regions. I must be missing something, but I'm not sure what it is.17:15
*** tesseract has quit IRC17:15
*** mchlumsky has quit IRC17:28
*** mchlumsky has joined #openstack-keystone17:29
*** dansmith has quit IRC17:29
*** dansmith has joined #openstack-keystone17:29
*** dansmith has quit IRC17:34
*** dansmith has joined #openstack-keystone17:34
knikollagyee: in my case i was able to reproduce that on pike with a token received with federation. non-federated tokens gave 500 on pike.17:55
gyeeknikolla, so far the problem seem to confined to stable/queens and newer17:57
gyeeI am unable to reproduce the problem with stable/pike and older branches17:58
gyeealso, federated tokens are NOT impacted17:58
gyeeI'll update the bug with my findings17:58
*** melwitt has quit IRC18:00
*** elibrokeit has quit IRC18:00
*** knikolla has quit IRC18:00
*** elibrokeit has joined #openstack-keystone18:01
*** knikolla has joined #openstack-keystone18:02
*** martinus__ has quit IRC18:02
*** xinran__ has quit IRC18:05
*** martinus__ has joined #openstack-keystone18:06
*** melwitt has joined #openstack-keystone18:06
lbragstadgagehugo: did you set transport_url in DEFAULT or oslo_messaging_notifications?18:15
lbragstadhttps://review.openstack.org/#/c/587930/18:15
lbragstadi'm following the steps listed in your bug report - but keystone is hanging (like it can't establish a connection with rabbit?)18:15
openstackgerritMorgan Fainberg proposed openstack/keystone master: Move unenforced_api decorator to module function  https://review.openstack.org/58586918:22
openstackgerritMorgan Fainberg proposed openstack/keystone master: Address FIXMEs for listing revoked tokens  https://review.openstack.org/54500918:22
openstackgerritMorgan Fainberg proposed openstack/keystone master: Convert OS-REVOKE to flask dispatching  https://review.openstack.org/58764718:23
gyeeknikolla, lbragstad, kmalloc, I updated https://bugs.launchpad.net/keystone/+bug/1779205 with my assessment so far18:40
openstackLaunchpad bug 1779205 in OpenStack Identity (keystone) rocky "[OSSA-2018-002] GET /v3/OS-FEDERATION/projects leaks project information (CVE-2018-14432)" [Critical,Fix released] - Assigned to Lance Bragstad (lbragstad)18:40
knikollagyee: i disagree with point 1 as I was able to reproduce it in a production cloud running pike18:42
gyeeknikolla, I can't reproduce the issue with devstack. Not sure if your public cloud carry any local patches18:43
knikollagyee: it might, it's RHOSP18:44
kmallocand for the most part this is why we backported19:01
kmallocthere are lots of edge cases19:01
kmalloci disagree with your revised impact statement from that standpoint19:01
kmallocgyee: ^19:01
kmallocgyee: with as many edge cases and forms of auth/mechanisms, i simply have to err to "what we backported should be applied"19:02
lbragstadoh... we deleted trust/controllers.py19:02
kmalloclbragstad: yes we did19:02
kmalloclbragstad: since trusts is now flask native19:02
lbragstadwhere did https://review.openstack.org/#/c/577567/11/keystone/trust/controllers.py move to?19:02
kmalloclbragstad: keystone.api.trusts19:03
lbragstadack19:03
kmallocsame as credentials and os-revoke (latest patch)19:03
gyeekmalloc, that's fine, I am just telling it like it is from devstack standpoint. Not considering any local patches. :-)19:03
gyeebut yeah, there are always edge cases19:03
gyeeisn't deleting trust make Heat unhappy?19:04
kmallocnot deleted19:04
kmallocmoved from webob-> flask.19:05
gyeeoic19:05
kmallocwhich means the controllers are removed in lieu of flask-native dispatching19:05
* gyee needs to update his flask knowledge19:05
gagehugolbragstad one sec19:07
lbragstadgagehugo: i was able to verify it with the logging driver instead19:07
lbragstadbut i figured i must have had something misconfigured if keystone was hanging19:09
gagehugolbragstad I used OSH to set it up: https://github.com/openstack/openstack-helm/blob/master/keystone/values.yaml#L95319:11
gagehugowith adding the stuff under DEFAULT to values19:12
openstackgerritLance Bragstad proposed openstack/keystone master: Remove KeystoneToken object  https://review.openstack.org/57756719:12
openstackgerritLance Bragstad proposed openstack/keystone master: Use auth_context in issue_token exclusively  https://review.openstack.org/58263519:12
lbragstadkmalloc: fixed ^19:12
lbragstadgagehugo: under DEFAULT?19:13
lbragstadgagehugo: https://review.openstack.org/#/c/587930/ another thing i noticed when mucking with rabbit19:13
lbragstadhttps://github.com/openstack/openstack-helm/blob/master/keystone/values.yaml#L34219:14
lbragstadhttps://github.com/openstack/openstack-helm/blob/master/keystone/values.yaml#L363-L364 might not be necessary anymore19:14
gagehugois that default now?19:16
*** vrv_ has quit IRC19:16
gagehugoyeah DEFAULT19:17
gagehugohttps://github.com/openstack/keystone/blob/stable/pike/etc/keystone.conf.sample (using pike cause we don't have a sample file anymore)19:18
gagehugolbragstad oh it's deprecated19:19
knikollafyi - i'll be taking tomorrow and friday off19:19
gagehugoknikolla vacation?19:20
knikollagagehugo: yeah. though not really going anywhere, just needed some time to do nothing and cool off.19:22
knikollai'll probably be finally finishing celeste on the switch19:22
gagehugothose are good vacations19:23
gagehugonice19:24
knikollai'll be literally cooling off. ordered an AC and it finally arrives tomorrow.19:25
knikollalol19:26
lbragstadnice19:26
lbragstadi'm out friday, too19:26
lbragstadcooking for a wedding19:26
lbragstader... voluntold to cater a wedding*19:26
knikollalbragstad: oh, wow. nice!19:27
gagehugonice19:27
lbragstadhopefully lol19:27
lbragstadit'll be successful so long as i don't get anyone sick ;)19:29
knikollai don't think i've ever asked anyone for food pics19:29
knikollabut this is a good time to start19:29
lbragstadthis is what we're going to try and do https://www.lbragstad.com/blog/grilled-garlic-herb-chicken19:30
* gagehugo starts going to lbragstad.com for the best cooking guides19:30
* lbragstad sets up a redirect to https://github.com/dolph/recipes19:31
gagehugooh my19:31
knikollahow did i never know about htis19:32
knikollathis*19:32
lbragstadmmhmm19:33
*** flwang1 has quit IRC19:49
*** raildo has quit IRC19:53
openstackgerritMorgan Fainberg proposed openstack/keystone master: Address FIXMEs for listing revoked tokens  https://review.openstack.org/54500919:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Convert OS-REVOKE to flask dispatching  https://review.openstack.org/58764719:57
openstackgerritMorgan Fainberg proposed openstack/keystone master: Convert OS-AUTH1 paths to flask dispatching  https://review.openstack.org/58806419:57
kmalloclbragstad: ^ OS-OAUTH1 :)19:59
lbragstadreviewing OS-REVOKE now19:59
kmallocOS-REVOKE should be easy19:59
kmallocOS-OAUTH1 is not... as easy19:59
kmallocalso it doesn't port the /USERs bits.19:59
kmalloc(obviously)20:00
lbragstadthat'll come when we do the identity api i assume20:00
*** s10 has quit IRC20:02
kmallocyep20:03
lbragstadkmalloc: is the web server calling GET when it receives a HEAD request and just truncating the body for us?20:12
kmallocyep20:12
lbragstadok20:12
kmallocflask restful does that for us, unless we explictly define "HEAD"20:12
kmallocin the cases we did weird things20:12
lbragstadahh20:12
lbragstadso that's actually being handled by flask then?20:13
lbragstadso that behavior should be consistent regardless of the web server used to run keystone20:13
lbragstad?20:13
kmallocyep.20:13
lbragstadnice20:13
*** spilla has quit IRC20:20
openstackgerritMerged openstack/keystone master: Move validate_issue_token_auth from controllers  https://review.openstack.org/58448520:32
openstackgerritMerged openstack/keystone master: Expose random uuid bug in cadf notifications  https://review.openstack.org/58078020:32
*** fiddletwix has joined #openstack-keystone21:01
kmalloclbragstad: the tests all seemed to pass locally for me. weird.21:10
kmallocbut the headers.get is a bug21:10
kmallocvs request.headers.get21:11
lbragstadresp.headers.update() threw me for a loop - i expected that to work21:12
lbragstadunless make_response returns something other than a dictionary?21:12
openstackgerritMorgan Fainberg proposed openstack/keystone master: Convert OS-AUTH1 paths to flask dispatching  https://review.openstack.org/58806421:14
kmallocyeah it's sortof a dict21:15
openstackgerritMorgan Fainberg proposed openstack/keystone master: Convert limits and registered limits to flask dispatching  https://review.openstack.org/58808021:16
openstackgerritLance Bragstad proposed openstack/keystone master: Remove KeystoneToken object  https://review.openstack.org/57756721:34
openstackgerritLance Bragstad proposed openstack/keystone master: Use auth_context in issue_token exclusively  https://review.openstack.org/58263521:34
kmalloclbragstad: at least most of these conversions are not too bad.21:35
openstackgerritGage Hugo proposed openstack/keystone master: Add user_id to initiator id for auth events  https://review.openstack.org/58808621:39
openstackgerritGage Hugo proposed openstack/keystone master: Set initiator id as user_id for auth events  https://review.openstack.org/58808621:40
*** martinus__ has quit IRC21:41
_ixI'm having some trouble getting a user to work correctly in a second region. Is there something else I need to consider when going across regions?21:48
lbragstad_ix: can you describe the problem?21:48
_ixlbragstad: Well, I think it may be a caching problem. I've got two regions, and two clusters of keystone servers that have some common attributes... they share a galera cluster, but region A has its own set of api servers, and region B has its own.21:49
lbragstadok21:50
_ixThey also have distinct memcached servers.21:50
_ixShould they be sharing memcached servers?21:50
lbragstadwhat's the issue?21:50
_ixWhen I hit region B, I get weird behavior. Sometimes it says that my username and password are incorrect, sometimes it says it can't find the users endpoint.21:50
lbragstaddo you know if both sets of keystone API servers have the same fernet key repository?21:52
_ixIn short, yes. I've got six servers set to rotate and share keys via rsync every four hours.21:54
lbragstadok21:55
lbragstadbut you're seeing issues on authentication?21:55
_ixEvery now and again. Feels like I'm just turning knobs trying to get something working... what's getting cached with memcached?21:55
lbragstadthat depends on your configuration21:56
lbragstadyou have the ability to cache different things within keystone21:56
lbragstadand it is usually grouped by subsystem21:56
lbragstadso if you want to cache catalog data, you can set caching for that subsystem21:57
_ixI see. Well, unfortunately I've got to catch a bus. I appreciate your taking the time to answer some of my questions. The fight continues tomorrow.21:57
_ixHave a fine day, lbragstad21:57
lbragstad_ix: i'll be around tomorrow if you want to keep working through it21:57
*** itlinux has quit IRC22:01
*** _ix has quit IRC22:02
*** rcernin has joined #openstack-keystone22:24
*** jaypipes has quit IRC22:30
*** edmondsw has quit IRC22:40
*** edmondsw has joined #openstack-keystone22:41
*** edmondsw has quit IRC22:45
openstackgerritTim Burke proposed openstack/keystonemiddleware master: Handle DiscoveryFailure errors  https://review.openstack.org/57521423:26
*** itlinux_ has joined #openstack-keystone23:42

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!