Friday, 2019-04-12

*** mchlumsky_ has quit IRC00:08
*** mchlumsky_ has joined #openstack-keystone00:09
*** gyee has quit IRC00:15
*** lbragstad has quit IRC00:23
*** erus has quit IRC00:25
*** whoami-rajat has joined #openstack-keystone01:09
*** awalende has joined #openstack-keystone01:36
*** awalende has quit IRC01:41
*** markvoelker has joined #openstack-keystone02:00
*** markvoelker has quit IRC02:35
*** irclogbot_2 has joined #openstack-keystone03:02
*** rcernin has quit IRC03:15
*** rcernin has joined #openstack-keystone03:27
*** markvoelker has joined #openstack-keystone03:32
*** rcernin has quit IRC03:57
*** rcernin has joined #openstack-keystone04:01
*** markvoelker has quit IRC04:04
*** vishakha has joined #openstack-keystone04:12
*** _d34dh0r53_ has joined #openstack-keystone04:24
*** sapd1 has quit IRC04:47
*** cloudkiller has joined #openstack-keystone04:57
*** tkajinam has quit IRC05:00
*** markvoelker has joined #openstack-keystone05:02
*** tkajinam has joined #openstack-keystone05:07
*** sapd1 has joined #openstack-keystone05:11
*** markvoelker has quit IRC05:34
*** markvoelker has joined #openstack-keystone06:31
*** pcaruana has joined #openstack-keystone06:41
*** markvoelker has quit IRC07:05
*** whoami-rajat has quit IRC07:05
*** vishakha has quit IRC07:05
*** whoami-rajat has joined #openstack-keystone07:06
*** mnaser has quit IRC07:06
*** mnaser has joined #openstack-keystone07:07
openstackgerritJens Harbott (frickler) proposed openstack/keystonemiddleware master: DNM: Test running without identity admin endpoint  https://review.openstack.org/65179007:08
*** awalende has joined #openstack-keystone07:15
*** phasespace has joined #openstack-keystone07:46
*** markvoelker has joined #openstack-keystone08:02
*** awalende has quit IRC08:05
*** awalende has joined #openstack-keystone08:05
*** awalende has quit IRC08:06
*** awalende has joined #openstack-keystone08:06
*** vishakha has joined #openstack-keystone08:11
*** awalende has quit IRC08:27
*** awalende has joined #openstack-keystone08:28
*** markvoelker has quit IRC08:34
*** rcernin has quit IRC09:30
*** markvoelker has joined #openstack-keystone09:31
*** markvoelker has quit IRC10:04
*** pcaruana has quit IRC10:31
openstackgerritJens Harbott (frickler) proposed openstack/keystonemiddleware master: DNM: Test with admin-less devstack  https://review.openstack.org/65203710:42
*** markvoelker has joined #openstack-keystone11:02
*** raildo has joined #openstack-keystone11:21
*** mvkr has joined #openstack-keystone11:23
*** jaosorior has quit IRC11:33
*** markvoelker has quit IRC11:35
*** pcaruana has joined #openstack-keystone11:36
openstackgerritJens Harbott (frickler) proposed openstack/keystoneauth master: DNM: Hard override admin interface to public  https://review.openstack.org/65204611:50
*** starborn has joined #openstack-keystone12:07
*** jamesmcarthur has joined #openstack-keystone12:43
*** timburke has quit IRC12:46
*** timburke has joined #openstack-keystone12:48
*** awalende has quit IRC12:52
*** awalende has joined #openstack-keystone12:52
*** awalende has quit IRC12:57
*** awalende has joined #openstack-keystone12:57
*** awalende has quit IRC13:02
*** altlogbot_3 has joined #openstack-keystone13:04
*** dave-mccowan has joined #openstack-keystone13:06
*** zaneb has joined #openstack-keystone13:10
*** dave-mccowan has quit IRC13:17
*** lbragstad has joined #openstack-keystone13:21
*** ChanServ sets mode: +o lbragstad13:21
*** awalende has joined #openstack-keystone13:23
*** tkajinam_ has joined #openstack-keystone13:25
*** ayoung has quit IRC13:26
*** tkajinam has quit IRC13:27
*** awalende has quit IRC13:28
*** altlogbot_3 has quit IRC13:32
*** altlogbot_2 has joined #openstack-keystone13:33
*** eglute has quit IRC13:33
*** cloudnull has quit IRC13:34
*** cloudkiller is now known as cloudnull13:34
*** d34dh0r53 has quit IRC13:35
*** phasespace has quit IRC13:38
*** altlogbot_2 has quit IRC13:38
*** altlogbot_3 has joined #openstack-keystone13:39
*** erus has joined #openstack-keystone13:42
eruso/13:43
gagehugoo/13:49
*** vishakha has quit IRC13:49
*** altlogbot_3 has quit IRC14:00
*** jamesmcarthur has quit IRC14:16
*** jamesmcarthur has joined #openstack-keystone14:17
openstackgerritIlya Shakhat proposed openstack/keystoneauth master: [WIP] Add OpenTracing instrumentation  https://review.openstack.org/65208014:17
*** altlogbot_1 has joined #openstack-keystone14:26
*** altlogbot_1 has quit IRC14:29
*** altlogbot_3 has joined #openstack-keystone14:30
*** altlogbot_3 has quit IRC14:33
knikollao/14:41
*** altlogbot_2 has joined #openstack-keystone14:48
*** altlogbot_2 has quit IRC14:51
*** altlogbot_0 has joined #openstack-keystone14:52
*** altlogbot_0 has quit IRC14:55
*** altlogbot_2 has joined #openstack-keystone14:59
cmurphymorning o/15:22
*** jamesmcarthur has quit IRC15:27
*** jamesmcarthur has joined #openstack-keystone15:58
*** jamesmcarthur has quit IRC16:05
*** jmlowe has quit IRC16:11
*** gyee has joined #openstack-keystone16:15
lbragstad\o16:21
*** aning has quit IRC16:28
*** jamesmcarthur has joined #openstack-keystone16:28
*** aning has joined #openstack-keystone16:29
*** jamesmcarthur has quit IRC16:44
*** jamesmcarthur has joined #openstack-keystone16:51
openstackgerritColleen Murphy proposed openstack/keystone-tempest-plugin master: Fix documentation link  https://review.openstack.org/48519516:52
*** awalende has joined #openstack-keystone16:53
openstackgerritColleen Murphy proposed openstack/keystone master: Add release note for service token documentation  https://review.openstack.org/65211216:56
*** awalende has quit IRC16:57
*** jamesmcarthur has quit IRC17:05
cmurphysome easy reviews that are looking for another +2 https://review.openstack.org/485195 https://review.openstack.org/638965 https://review.openstack.org/638983 https://review.openstack.org/644158 https://review.openstack.org/643996 https://review.openstack.org/64399917:10
openstackgerritMerged openstack/keystonemiddleware master: Update master for stable/stein  https://review.openstack.org/64399917:23
cmurphykmalloc: i was on the fence about the jsonutils one too, i leaned toward it just because ksc/ksm are already using it elsewhere17:25
*** erus has quit IRC17:25
*** erus has joined #openstack-keystone17:25
*** logan- has joined #openstack-keystone17:26
openstackgerritMerged openstack/keystoneauth master: Update master for stable/stein  https://review.openstack.org/64399617:29
*** jamesmcarthur has joined #openstack-keystone17:29
openstackgerritMerged openstack/python-keystoneclient master: Update master for stable/stein  https://review.openstack.org/64415817:29
logan-o/ i'm trying to figure out an issue with networking-calico not being able to obtain a token. on the neutron server, it complains in the logs like: http://paste.openstack.org/raw/749214/, and in the keystone server, I see http://paste.openstack.org/raw/749213/17:29
logan-i'm a little confused by "ValidationError: Expecting to find domain in project." since it does look like the project_domain_id is passed in the request17:30
cmurphylogan-: that is kind of weird17:37
*** erus has quit IRC17:37
cmurphydo you have an example of the keystone_authtoken config for networking-calico?17:37
*** erus has joined #openstack-keystone17:38
cmurphythe request ID on the warning is different than the request ID on the auth context log so those logs might be unrelated to each other17:39
logan-yep, it pulls from neutron.conf: http://logs.openstack.org/34/645834/4/check/openstack-ansible-deploy-aio_metal_calico-ubuntu-bionic/e5739fb/logs/etc/host/neutron/neutron.conf.txt.gz17:39
logan-this is where it tries to auth: https://github.com/openstack/networking-calico/blob/master/networking_calico/plugins/ml2/drivers/calico/mech_calico.py#L27917:40
logan-gotcha, I was correlating based on timestamps so I might have messed that up. grabbing links to the 2 logs those excerpts came from17:42
logan-keystone: http://logs.openstack.org/34/645834/4/check/openstack-ansible-deploy-aio_metal_calico-ubuntu-bionic/e5739fb/logs/host/keystone-wsgi-public.service.journal-19-18-53.log.txt.gz17:42
logan-neutron: http://logs.openstack.org/34/645834/4/check/openstack-ansible-deploy-aio_metal_calico-ubuntu-bionic/e5739fb/logs/host/neutron/neutron-server.log.txt.gz17:42
cmurphylogan-: yeah those requests look unrelated, i see project_domain_id set in keystone_authtoken but networking-calico is trying to grab project_domain_name and coming up with None http://logs.openstack.org/34/645834/4/check/openstack-ansible-deploy-aio_metal_calico-ubuntu-bionic/e5739fb/logs/host/neutron/neutron-server.log.txt.gz#_2019-04-11_19_04_51_93517:47
logan-oh I see, thanks. I guess the fallback to 'Default' project name in the auth request it is doing is broken17:49
*** jamesmcarthur has quit IRC17:51
cmurphyi think it's not seeing a NoSuchOptError and just using an empty value17:52
logan-yep, makes sense. thanks for looking at it.17:53
cmurphynp17:53
kmallocok.17:56
kmalloci need some help here17:56
kmallocwhy the heck is keystone setting 'admin' interface when clearly it should be looking for public17:57
kmallocerm keystonemiddleware.17:57
kmallochttps://review.openstack.org/#/c/651790/3/keystonemiddleware/auth_token/__init__.py17:57
openstackgerritColleen Murphy proposed openstack/keystone-specs master: Add resource-options-for-all specification  https://review.openstack.org/62416217:57
kmalloci can't find why ksm would lookup 'admin' when 'public' is explicitly set17:57
*** irclogbot_2 has quit IRC18:08
*** dave-mccowan has joined #openstack-keystone18:09
*** irclogbot_2 has joined #openstack-keystone18:10
openstackgerritMerged openstack/keystone master: Add documentation for service tokens  https://review.openstack.org/63111018:36
*** jamesmcarthur has joined #openstack-keystone18:50
*** erus has quit IRC18:50
*** erus has joined #openstack-keystone18:51
*** whoami-rajat has quit IRC19:09
openstackgerritMerged openstack/keystone-tempest-plugin master: Fix documentation link  https://review.openstack.org/48519519:22
*** imacdonn has joined #openstack-keystone19:22
*** phasespace has joined #openstack-keystone19:24
cmurphykmalloc: am I looking at the unit tests? or a devstack run somewhere?19:27
kmallocthe unit tests in that review are failing19:31
kmalloci'm just not seeing where we are asking for an Admin endpoint when public is clearly specified19:31
*** jamesmcarthur has quit IRC19:42
openstackgerritColleen Murphy proposed openstack/keystonemiddleware master: DNM: Test running without identity admin endpoint  https://review.openstack.org/65179019:49
cmurphykmalloc: ^19:49
cmurphythe default interface in keystoneclient is admin, it's not being overridden even though it's getting a session object19:50
kmallocah bad.19:50
kmallocbah*19:50
kmallocthat is why i couldn't figure it out, i looked at KSM and KSA19:50
kmallocnot KSC19:50
kmallocthanks.19:50
kmalloccan we blame ayoung for that default? :P19:50
kmallocmordred: ^ cc19:50
kmallocthanks cmurphy!!19:51
cmurphy:)19:51
mordredkmalloc: oh jeez it's KSC?19:55
cmurphyhttp://git.openstack.org/cgit/openstack/python-keystoneclient/tree/keystoneclient/httpclient.py#n25119:56
cmurphyhttp://git.openstack.org/cgit/openstack/python-keystoneclient/tree/keystoneclient/httpclient.py#n38419:56
*** starborn has quit IRC19:58
kmallocmordred: yup. Both of us guessed wrong and clearly this is a reason to NOT use KSC ;)19:58
mordredkmalloc: why are we still using ksc again?20:02
kmallocbecause sdk hasn't been swapped in.20:03
kmallocreally it's on my short list of things to do20:03
cmurphysdk in ksm?20:03
kmallocyeah. i'd swap SDK in.20:03
cmurphywhy not just ksa in ksm?20:03
kmalloci want to deprecate ksc20:03
kmallocdepending on what is needed20:03
kmallocSDK may not be needed in KSM20:03
kmalloci'll need to look, maybe just drop ksc.20:04
kmallocif it requires KSC magic, i'd drop in SDK.20:04
kmalloci want ksc to just die. mark it as deprecated and have everyone move ot KSA and SDK20:04
kmalloci'll take a dive in for train if I have some cycles and rip KSC out of KSM20:05
cmurphyi can't imagine ksm needs the full force of sdk, if there's something ksm needs to do that ksa doesn't it probably makes sense to add it to ksa20:05
kmallocit depends on how token validation works, i wouldn't want to add downstream token validation to ksa.20:05
kmallocksa ensures you *can* validate toeksn, but doesn't do the validation directly20:06
kmallocif that makes sense20:06
*** pcaruana has quit IRC20:26
openstackgerritColleen Murphy proposed openstack/keystone master: Replace dict.iteritems() with dict.items() in keystone  https://review.openstack.org/49136121:03
*** zaneb has quit IRC21:04
*** jamesmcarthur has joined #openstack-keystone21:19
*** erus has quit IRC21:19
*** erus has joined #openstack-keystone21:20
*** jamesmcarthur has quit IRC21:23
*** lbragstad has quit IRC21:37
*** nicolasbock has joined #openstack-keystone21:43
*** lbragstad has joined #openstack-keystone21:51
*** ChanServ sets mode: +o lbragstad21:51
*** itlinux has joined #openstack-keystone22:06
*** raildo has quit IRC22:07
*** dave-mccowan has quit IRC23:00
*** zaneb has joined #openstack-keystone23:26
*** zaneb has quit IRC23:29
*** zaneb has joined #openstack-keystone23:29
*** nicolasbock has quit IRC23:30

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!