| *** lbragstad has quit IRC | 00:12 | |
| *** lbragstad has joined #openstack-keystone | 00:14 | |
| *** ChanServ sets mode: +o lbragstad | 00:14 | |
| *** harlowja has quit IRC | 00:34 | |
| *** imacdonn has quit IRC | 01:19 | |
| *** imacdonn has joined #openstack-keystone | 01:19 | |
| *** ykarel|away has joined #openstack-keystone | 01:35 | |
| *** Emine has quit IRC | 01:55 | |
| gagehugo | nice | 03:05 |
|---|---|---|
| *** nicolasbock has quit IRC | 03:33 | |
| *** prashkre has joined #openstack-keystone | 03:53 | |
| *** shyamb has joined #openstack-keystone | 05:12 | |
| *** ykarel_ has joined #openstack-keystone | 05:29 | |
| *** ykarel|away has quit IRC | 05:32 | |
| *** ykarel_ is now known as ykarel | 05:53 | |
| *** ykarel_ has joined #openstack-keystone | 05:55 | |
| *** ykarel_ is now known as ykarel|afk | 05:56 | |
| *** ykarel has quit IRC | 05:58 | |
| *** ykarel|afk has quit IRC | 06:01 | |
| *** shyamb has quit IRC | 06:03 | |
| *** shyamb has joined #openstack-keystone | 06:04 | |
| *** prashkre_ has joined #openstack-keystone | 06:08 | |
| *** prashkre has quit IRC | 06:12 | |
| *** josecastroleon has joined #openstack-keystone | 06:26 | |
| *** shyamb has quit IRC | 06:27 | |
| *** shyamb has joined #openstack-keystone | 06:27 | |
| *** nbhosale has joined #openstack-keystone | 06:29 | |
| nbhosale | Hello, I am installing keystone inside a container using the centos-release-openstack-queens rpms ... it installs couple of scripts /usr/bin/keystone-wsgi-public, /usr/bin/keystone-wsgi-admin .. which start the wsgi services for keystone ... but I see message displayed there "DANGER! For testing only, do not use in production" .. are these not really meant for production .. if so is there an alternative available? | 06:31 |
| *** shyamb has quit IRC | 06:36 | |
| *** nbhosale has quit IRC | 06:37 | |
| *** nbhosale has joined #openstack-keystone | 06:40 | |
| *** shyamb has joined #openstack-keystone | 06:41 | |
| *** prashkre_ has quit IRC | 06:44 | |
| *** prashkre has joined #openstack-keystone | 06:46 | |
| *** prashkre_ has joined #openstack-keystone | 06:50 | |
| *** prashkre has quit IRC | 06:50 | |
| *** rcernin has quit IRC | 07:00 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Remove member_role_id/name https://review.openstack.org/598467 | 07:06 |
| *** shyamb has quit IRC | 07:12 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Convert policy API to flask https://review.openstack.org/589950 | 07:14 |
| *** shyamb has joined #openstack-keystone | 07:19 | |
| *** pcaruana has joined #openstack-keystone | 07:19 | |
| zioproto | kmalloc: still there ? | 07:27 |
| zioproto | kmalloc: I am in the Zurich timezone, I will try to ping you today | 07:27 |
| zioproto | kmalloc: I am using Ocata and UUID tokens. The tokens work when they are fresh, but after two hours randomly happens that tokens fail with 404. They are supposed to be valid 6 hours | 07:28 |
| zioproto | kmalloc: I dont understand how the key_mangling function works. I would like starting from the token UUID to calculate my self the key value in redis to check if the token is actually there | 07:30 |
| zioproto | for V2 token it is easy because the token UUID is also in the value in redis, so I can scan redis key and find the token I want to check. But for V3 tokens the UUID is not in the value | 07:31 |
| zioproto | Now I am testing a workaround where the redis key TTL is double of the keystone token lifetime, and it seems to work | 07:31 |
| *** shyamb has quit IRC | 07:55 | |
| *** chaconpiza has quit IRC | 08:36 | |
| *** ykarel has joined #openstack-keystone | 08:43 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Remove member_role_id/name https://review.openstack.org/598467 | 08:46 |
| *** chaconpiza has joined #openstack-keystone | 08:49 | |
| *** shyamb has joined #openstack-keystone | 08:51 | |
| *** gmann has quit IRC | 09:27 | |
| *** ykarel is now known as ykarel|lunch | 09:33 | |
| *** shyamb has quit IRC | 09:37 | |
| *** gmann has joined #openstack-keystone | 09:43 | |
| *** bzhao__ has joined #openstack-keystone | 09:53 | |
| -openstackstatus- NOTICE: Jobs using devstack-gate (legacy devstack jobs) have been failing due to an ara update. We use now a newer ansible version, it's safe to recheck if you see "ImportError: No module named manager" in the logs. | 09:57 | |
| *** ykarel|lunch is now known as ykarel | 09:58 | |
| *** shyamb has joined #openstack-keystone | 10:05 | |
| *** shyamb has quit IRC | 10:23 | |
| *** shyamb has joined #openstack-keystone | 10:23 | |
| *** nicolasbock has joined #openstack-keystone | 10:33 | |
| *** dave-mccowan has joined #openstack-keystone | 10:34 | |
| *** ykarel_ has joined #openstack-keystone | 10:52 | |
| *** ykarel has quit IRC | 10:53 | |
| *** shyamb has quit IRC | 10:57 | |
| *** ykarel_ is now known as ykarel|afk | 11:12 | |
| *** ykarel|afk has quit IRC | 11:17 | |
| *** shyamb has joined #openstack-keystone | 11:33 | |
| *** ykarel has joined #openstack-keystone | 11:40 | |
| *** josecastroleon has quit IRC | 11:47 | |
| *** raildo has joined #openstack-keystone | 12:06 | |
| *** shyamb has quit IRC | 12:08 | |
| *** shyamb has joined #openstack-keystone | 12:08 | |
| zioproto | kmalloc: ping ? | 12:24 |
| *** shyamb has quit IRC | 12:41 | |
| *** lbragstad is now known as elbragstad | 13:37 | |
| elbragstad | mornin' | 13:37 |
| zioproto | I am still troubleshooting keystone+redis backend in Ocata | 13:50 |
| zioproto | anyone has this setup in production ? | 13:50 |
| zioproto | I would like to figure out how the key in redis is computed. I figured out it is sha1 digest, but I cant understand what is give as input to sha1 | 13:51 |
| *** prashkre_ has quit IRC | 13:57 | |
| *** prashkre has joined #openstack-keystone | 13:59 | |
| knikolla | o/ | 14:12 |
| knikolla | yay rocky is out | 14:12 |
| elbragstad | zioproto i believe we removed that code a while ago - what release are you running? | 14:16 |
| elbragstad | knikolla time to do it all over again ;) | 14:17 |
| *** prashkre has quit IRC | 14:18 | |
| *** ykarel is now known as ykarel|away | 14:26 | |
| *** zzzeek has quit IRC | 14:33 | |
| *** zzzeek has joined #openstack-keystone | 14:34 | |
| *** zzzeek has quit IRC | 14:40 | |
| *** zzzeek has joined #openstack-keystone | 14:42 | |
| *** jaosorior has quit IRC | 14:43 | |
| *** zzzeek has quit IRC | 14:46 | |
| *** zzzeek has joined #openstack-keystone | 14:47 | |
| elbragstad | gagehugo fyi - https://review.openstack.org/#/c/598990/ should fix ksa stable/pike | 14:56 |
| elbragstad | and https://review.openstack.org/#/c/598346/ is a formal cherry pick of ^ | 14:58 |
| elbragstad | which should take care of stable/ocata | 14:58 |
| gagehugo | elbragstad nice! | 15:00 |
| elbragstad | we need to fix up ksm, too? | 15:01 |
| elbragstad | i'm looking at master and tools/tox_install.sh is still there | 15:01 |
| gagehugo | yes | 15:01 |
| gagehugo | I think doug's ocata patch is failing with the same thing | 15:01 |
| elbragstad | looks like it http://logs.openstack.org/77/597677/1/check/build-openstack-sphinx-docs/d20dc90/job-output.txt.gz#_2018-08-30_16_24_02_991173 | 15:02 |
| *** ykarel|away has quit IRC | 15:08 | |
| gagehugo | yup :( | 15:10 |
| elbragstad | i suppose we should just remove that from master and backport it all the way | 15:15 |
| openstackgerrit | Lance Bragstad proposed openstack/keystonemiddleware master: Remove tox_install.sh https://review.openstack.org/599003 | 15:24 |
| elbragstad | gagehugo ^ let's see if that blows up... | 15:24 |
| elbragstad | i think the version of oslo_messaging is going to need to be adjusted as we backport it though | 15:24 |
| gagehugo | hmm | 15:25 |
| *** pcaruana has quit IRC | 15:26 | |
| *** jlvillal is now known as jlvilla-viva | 15:30 | |
| *** nbhosale has quit IRC | 15:33 | |
| elbragstad | https://review.openstack.org/#/c/599010/ | 15:36 |
| elbragstad | https://review.openstack.org/#/c/599008/ | 15:36 |
| elbragstad | https://review.openstack.org/#/c/599006/ | 15:36 |
| elbragstad | https://review.openstack.org/#/c/599005/ | 15:36 |
| elbragstad | let's see what happens with those | 15:36 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Run python 3.6 https://review.openstack.org/599017 | 15:57 |
| * knikolla thinking of running for the tc. | 15:58 | |
| *** r-daneel has joined #openstack-keystone | 16:01 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Run python 3.6 https://review.openstack.org/599017 | 16:02 |
| *** openstackgerrit has quit IRC | 16:06 | |
| gagehugo | knikolla go for it! | 16:32 |
| *** r-daneel has quit IRC | 16:38 | |
| *** r-daneel has joined #openstack-keystone | 16:38 | |
| *** hoonetorg has joined #openstack-keystone | 17:06 | |
| *** raildo has quit IRC | 17:07 | |
| *** raildo has joined #openstack-keystone | 17:08 | |
| *** orange_julius has joined #openstack-keystone | 17:15 | |
| orange_julius | This isn't the correct place for this question but I'm going to ask it nonetheless. What do you guys use for developing on / testing openstack? I've been trying to use DevStack to confirm a bugfix for Newton but apparently the devstack guys aren't merging anything back into Newton because its CI doesn't work. And now with newer version of PIP and o | 17:17 |
| orange_julius | ther things I can't even get devstack to deploy with Newton. So my question is this: What are you guys using to develop / test on Openstack? | 17:17 |
| *** orange_julius has quit IRC | 17:18 | |
| *** orange_julius has joined #openstack-keystone | 17:26 | |
| *** orange_julius has quit IRC | 17:28 | |
| *** orange_julius has joined #openstack-keystone | 17:32 | |
| gagehugo | orange_julius I've been using containerized deployment more than devstack, but I haven't had to test anything older than ocata for a while | 17:42 |
| elbragstad | orange_julius if i have to test something that old i usually just grab a copy of keystone source and install it into a venv | 17:44 |
| elbragstad | and forego using devstack | 17:44 |
| orange_julius | Alright thanks. I | 17:51 |
| *** prashkre has joined #openstack-keystone | 18:13 | |
| *** raildo has quit IRC | 18:23 | |
| *** openstackstatus has quit IRC | 18:58 | |
| *** raildo has joined #openstack-keystone | 19:05 | |
| kmalloc | elbragstad: hmm | 19:26 |
| kmalloc | elbragstad: ++ yeah | 19:27 |
| kmalloc | elbragstad: i am working on respinning the groups patch and rebasing the rest of the stack today | 19:32 |
| elbragstad | cool | 19:32 |
| kmalloc | elbragstad: i might even take a stab at users or projects since gagehugo is doing domains | 19:32 |
| elbragstad | yeah - that'd be good | 19:33 |
| kmalloc | auth is daunting | 19:33 |
| kmalloc | just so many bits and peices to move | 19:33 |
| elbragstad | as soon as you have something up for projects i'm going to attempt to fix https://bugs.launchpad.net/keystone/+bug/1750660 | 19:33 |
| openstack | Launchpad bug 1750660 in OpenStack Identity (keystone) "The v3 project API should account for different scopes" [High,Triaged] | 19:33 |
| kmalloc | ah | 19:33 |
| kmalloc | so, i'll make that the prio after i respin the current stack | 19:34 |
| kmalloc | elbragstad: this needs eyes: https://review.openstack.org/#/c/591082/ | 19:34 |
| elbragstad | ok | 19:34 |
| *** openstackstatus has joined #openstack-keystone | 19:38 | |
| *** ChanServ sets mode: +v openstackstatus | 19:38 | |
| kmalloc | elbragstad: target[group] = <get_group> | 19:45 |
| kmalloc | is correct, (groups patch) | 19:45 |
| kmalloc | see https://review.openstack.org/#/c/591147/9/keystone/identity/controllers.py@a50 | 19:45 |
| kmalloc | it builds ref['group'] | 19:45 |
| kmalloc | so, if i were to change that we break current behavior | 19:45 |
| kmalloc | second, target may have multiple entities in it | 19:46 |
| kmalloc | so it is important to always have target.<entity_type, e.g group>.<attr> | 19:46 |
| elbragstad | ok | 19:47 |
| elbragstad | i'll leave a comment on my credentials patch | 19:47 |
| elbragstad | that'll need to be fixed | 19:47 |
| kmalloc | ++ | 19:49 |
| *** openstackstatus has quit IRC | 19:55 | |
| *** openstackstatus has joined #openstack-keystone | 19:58 | |
| *** ChanServ sets mode: +v openstackstatus | 19:58 | |
| elbragstad | did something happen in pike where ostestr proxies to stestr or something? | 20:03 |
| *** itlinux has joined #openstack-keystone | 20:04 | |
| elbragstad | because the *same* exact patch passes on ksa stable/ocata but not stable/pike | 20:04 |
| elbragstad | https://review.openstack.org/#/c/598346/ | 20:04 |
| elbragstad | and https://review.openstack.org/#/c/598990/ | 20:04 |
| elbragstad | looks like stable/ocata uses 0.8.0 | 20:06 |
| elbragstad | stable/pike uses 1.0.0 | 20:07 |
| elbragstad | bah https://docs.openstack.org/os-testr/latest/user/history.html#id1 | 20:09 |
| *** openstackstatus has quit IRC | 20:11 | |
| *** openstackstatus has joined #openstack-keystone | 20:12 | |
| *** ChanServ sets mode: +v openstackstatus | 20:12 | |
| *** nicolasbock has quit IRC | 20:16 | |
| elbragstad | we're either going to have to port ksa stable/pike to use stestr or pin os-testr to a version less than 1.0.0 | 20:16 |
| elbragstad | (the later feels safer) | 20:16 |
| *** itlinux has quit IRC | 20:16 | |
| *** itlinux has joined #openstack-keystone | 20:28 | |
| *** niceplace has joined #openstack-keystone | 20:32 | |
| *** openstackstatus has quit IRC | 20:36 | |
| *** raildo has quit IRC | 20:37 | |
| *** openstackstatus has joined #openstack-keystone | 20:37 | |
| *** ChanServ sets mode: +v openstackstatus | 20:37 | |
| *** itlinux has quit IRC | 20:44 | |
| *** harlowja has joined #openstack-keystone | 20:46 | |
| *** imacdonn has quit IRC | 20:48 | |
| kmalloc | eh | 20:52 |
| kmalloc | no idea | 20:52 |
| elbragstad | https://review.openstack.org/#/c/598990/ | 20:54 |
| elbragstad | fixed | 20:54 |
| elbragstad | hopefully | 20:54 |
| elbragstad | just going to include stestr support and call it a day | 20:54 |
| *** cmurphy|vacation is now known as cmurphy | 20:58 | |
| *** imacdonn has joined #openstack-keystone | 21:01 | |
| kmalloc | elbragstad: running local tests for groups, then rebase storm | 21:10 |
| kmalloc | elbragstad: and then will fix OS-INHERIT | 21:10 |
| elbragstad | ok | 21:10 |
| elbragstad | go for it | 21:11 |
| elbragstad | not sure i'll be able to promise a review today :( | 21:11 |
| *** raildo has joined #openstack-keystone | 21:12 | |
| elbragstad | hopefully the check and gate queues will catch up over the weekend though | 21:12 |
| *** raildo has quit IRC | 21:13 | |
| kmalloc | ++ | 21:40 |
| kmalloc | ah my stack was somehow made a bit wonky.... oops | 21:40 |
| kmalloc | elbragstad: sending you a msg | 21:41 |
| *** arunkant has joined #openstack-keystone | 21:55 | |
| *** arunkant has quit IRC | 21:57 | |
| *** arunkant has joined #openstack-keystone | 21:59 | |
| elbragstad | kmalloc ack | 22:01 |
| elbragstad | i'm about to head out for the weekend - have a fantastic labor day everyone | 22:01 |
| kmalloc | ok i think i see what is going on here. | 22:02 |
| kmalloc | weird. | 22:02 |
| *** elbragstad has quit IRC | 22:02 | |
| *** arunkant has quit IRC | 22:03 | |
| *** arunkant has joined #openstack-keystone | 22:05 | |
| *** itlinux has joined #openstack-keystone | 22:11 | |
| *** arunkant has quit IRC | 22:17 | |
| *** harlowja has quit IRC | 22:24 | |
| *** itlinux has quit IRC | 22:34 | |
| *** markvoelker has joined #openstack-keystone | 22:40 | |
| *** jrist has quit IRC | 22:58 | |
| *** lamt has joined #openstack-keystone | 23:22 | |
| *** r-daneel has quit IRC | 23:36 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!