Tuesday, 2019-06-11

*** jamesmcarthur has joined #openstack-keystone00:01
*** markvoelker has joined #openstack-keystone00:16
*** rcernin_ has quit IRC00:41
*** rcernin has joined #openstack-keystone00:41
*** lbragstad has quit IRC00:48
*** markvoelker has quit IRC00:49
*** jamesmcarthur has quit IRC00:52
*** gyee has quit IRC01:34
*** jamesmcarthur has joined #openstack-keystone01:35
*** jamesmcarthur has quit IRC01:37
*** markvoelker has joined #openstack-keystone01:46
*** whoami-rajat has joined #openstack-keystone02:09
*** itlinux has joined #openstack-keystone02:17
*** markvoelker has quit IRC02:20
openstackgerritwangxiyuan proposed openstack/keystone master: [api-ref] Fix nocatalog description for unscoped token  https://review.opendev.org/66090202:58
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove deprecated admin_endpoint  https://review.opendev.org/66424603:02
*** vishakha has joined #openstack-keystone03:03
*** bnemec has quit IRC03:07
*** bnemec has joined #openstack-keystone03:08
*** markvoelker has joined #openstack-keystone03:17
*** markvoelker has quit IRC03:50
*** markvoelker has joined #openstack-keystone04:47
*** markvoelker has quit IRC05:21
*** threestrands has joined #openstack-keystone05:52
*** threestrands has quit IRC05:53
*** markvoelker has joined #openstack-keystone06:18
*** markvoelker has quit IRC06:51
*** pcaruana has joined #openstack-keystone06:55
openstackgerritMerged openstack/oslo.limit master: Sync Sphinx requirement  https://review.opendev.org/66266806:55
*** rcernin has quit IRC07:08
*** tesseract has joined #openstack-keystone07:08
*** markvoelker has joined #openstack-keystone07:48
*** tkajinam has quit IRC08:05
*** markvoelker has quit IRC08:22
*** imacdonn has quit IRC08:38
*** imacdonn has joined #openstack-keystone08:38
*** rcernin has joined #openstack-keystone09:03
*** markvoelker has joined #openstack-keystone09:19
*** tobberydberg has quit IRC09:22
*** tobberydberg has joined #openstack-keystone09:31
*** markvoelker has quit IRC09:52
*** pcaruana has quit IRC10:19
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove deprecated admin_endpoint  https://review.opendev.org/66424610:28
*** markvoelker has joined #openstack-keystone10:49
*** pcaruana has joined #openstack-keystone11:09
*** markvoelker has quit IRC11:21
*** dave-mccowan has joined #openstack-keystone11:22
*** rcernin has quit IRC11:43
*** dave-mccowan has quit IRC12:05
*** raildo has joined #openstack-keystone12:06
*** jamesmcarthur has joined #openstack-keystone12:51
*** jamesmcarthur has quit IRC13:02
*** lbragstad has joined #openstack-keystone13:03
*** markvoelker has joined #openstack-keystone13:18
*** markvoelker has quit IRC13:23
*** jamesmcarthur has joined #openstack-keystone13:26
*** vishakha has quit IRC13:37
*** mchlumsky has joined #openstack-keystone13:46
*** markvoelker has joined #openstack-keystone13:53
*** mchlumsky has quit IRC13:59
*** pcaruana has quit IRC14:04
openstackgerritKristi Nikolla proposed openstack/keystone-specs master: Expiring Group Membership Through Mapping Rules  https://review.opendev.org/60420114:09
knikollacmurphy: expiring appcreds/users/groupmemberships. take 3. action.14:10
knikollai'm not entirely satisfied with how the spec turned out.14:10
knikollaalso didn't see you had made further comments, looking now.14:11
gagehugoo/14:27
cmurphymilestone 1 checkin in 32 minutes in https://meet.jit.si/keystone-train-m-114:28
cmurphyknikolla: cool, i'll have a look after the meeting14:28
*** dave-mccowan has joined #openstack-keystone14:29
*** pcaruana has joined #openstack-keystone14:30
*** pcaruana has quit IRC14:31
*** pcaruana has joined #openstack-keystone14:31
*** vishakha has joined #openstack-keystone14:42
*** kklimonda has quit IRC14:47
cmurphymilestone 1 checkin in 10 minutes in https://meet.jit.si/keystone-train-m-114:50
*** itlinux has quit IRC14:55
*** mchlumsky has joined #openstack-keystone14:59
cmurphyagenda: https://etherpad.openstack.org/p/keystone-train-M-1-review-planning-meeting15:00
bnemecWill join when I can. Got pulled into a meeting that's right now. :-/15:01
cmurphywxy-xiyuan: rodrigods will you be able to join ^ ?15:03
cmurphyvishakha: are you coming back?15:05
vishakhaSorry guys facing some network issues15:06
lbragstad#link https://etherpad.openstack.org/p/keystone-train-M-1-review-planning-meeting15:07
openstackgerritNathan Oyler proposed openstack/keystone master: Add cadf auditing to credentials  https://review.opendev.org/66461815:13
*** notq has joined #openstack-keystone15:15
*** pcaruana has quit IRC15:17
lbragstadcmurphy gagehugo vishakha knikolla https://etherpad.openstack.org/p/keystone-internship-ideas15:19
notqcmurphy: attempted to correct as asked, although given the conflict i'm guessing i got that wrong.15:19
lbragstadcmurphy gagehugo vishakha knikolla https://review.opendev.org/#/c/615180/15:27
kmallocOh woopse! I thought it was post meeting today15:32
lbragstadcmurphy https://bugs.launchpad.net/keystone/+bug/182957415:33
openstackLaunchpad bug 1829574 in OpenStack Identity (keystone) "Refactor API protection tests" [Low,Triaged]15:34
lbragstadkmalloc pinging you here even though i know you might be on a plane, but i'm wondering if we can sit down and go through https://bugs.launchpad.net/keystone/+bug/1829574 and my patch once you get settled?15:35
openstackLaunchpad bug 1829574 in OpenStack Identity (keystone) "Refactor API protection tests" [Low,Triaged]15:35
kmallocnot on a plane15:35
lbragstadaha - nevermind then ;)15:36
kmallocon the call now15:37
cmurphyretrospective: https://etherpad.openstack.org/p/keystone-train-m-1-retrospective15:37
gagehugobrb15:42
*** pcaruana has joined #openstack-keystone15:43
lbragstadgo ahead vishakha15:43
*** pcaruana has quit IRC15:55
kmalloclbragstad: tomorrow for those patches is best for sure... Will be more setup to look at everything at home. Will have a midday vet appointment (pupper hurt his paw and is limping)15:59
* cmurphy calls everybody back16:03
lbragstadkmalloc sweeet - ping me whenever16:03
kmallocyup.16:03
lbragstadi'll set aside a couple hours to see if we can nail down out to use testresources16:03
kmallocyou're Central timezone?16:04
lbragstadyep16:04
kmalloccool16:04
bnemecHey, I can hear now! \o/16:04
kmalloci might be up stupid early because jet lag.16:04
kmallocmight work out well .16:04
lbragstadok - i usually get in around 6 AM PT16:05
vishakhacmurphy lbragstad  gagehugo knikolla mordred https://review.opendev.org/#/c/662690/16:15
kmalloci will probably be working somewhere around then. depending on dog needs, we can do it early16:16
*** tesseract has quit IRC16:18
lbragstadcmurphy https://bugs.launchpad.net/keystone/+bugs?field.tag=default-roles16:20
lbragstadcmurphy kmalloc https://review.opendev.org/#/c/554320/16:25
openstackgerritMorgan Fainberg proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend  https://review.opendev.org/48351416:27
*** kklimonda has joined #openstack-keystone16:32
*** jamesmcarthur has quit IRC16:32
kmallocmy network crashed, it looks like16:35
kmallocfamily's house internet isn't super awesome sometimes.16:35
lbragstadi'm going to disable my camera to see if that helps16:36
*** whoami-rajat has quit IRC16:38
kmalloci can't even reload the page16:39
*** jdwidari has joined #openstack-keystone16:42
bnemecI had a similar problem earlier.16:42
gagehugocmurphy: end of the cycle16:43
cmurphygagehugo: okay16:43
gagehugomic stopped working I guess16:43
bnemecgagehugo: I can hear you16:44
gagehugohmm16:44
lbragstadso can i16:44
*** pcaruana has joined #openstack-keystone16:49
kmallocas soon as i load the page, the page crashes now16:50
kmalloci'm going to call it here.16:50
kmalloci'll catch up with folks tomorow and beyond16:50
bnemecOnly 10 minutes left anyway16:50
gagehugoksm is done16:50
gagehugohttps://review.opendev.org/#/c/447139/16:50
gagehugojust defer it16:51
gagehugothere's been a lack of reviewers on the security SIG side16:51
gagehugohttps://review.opendev.org/#/q/topic:keystone-vmt+(status:open+OR+status:merged)16:51
*** markvoelker has quit IRC16:53
*** itlinux has joined #openstack-keystone16:57
*** whoami-rajat has joined #openstack-keystone17:05
cmurphyif anyone has feedback on how that meeting went please feel free to let me know either here or in private17:09
cmurphythanks everyone for attending17:09
*** jamesmcarthur has joined #openstack-keystone17:10
bnemecI learned that you should make sure you close the window from your previous meeting before joining a new one.17:15
bnemecTurns out web conferences don't like sharing audio hardware.17:15
lbragstadlol17:22
lbragstadmakes sense17:22
*** dtruong has quit IRC17:24
*** problem_v has quit IRC17:24
*** jamesmcarthur has quit IRC17:26
*** jamesmcarthur has joined #openstack-keystone17:26
*** jdwidari has quit IRC17:30
*** dtruong has joined #openstack-keystone17:50
cmurphynotq: i think when you did the amend you may have accidentally deleted the change-id in the commit message?17:59
cmurphythat would cause a new one to be generated and then would submit a new review18:00
notqsounds plausible.18:00
notqi had a ton of python issues getting tox to run, then commit/merge issues so yesterday was a blur of yak shaving.18:01
notqdo I need to take any action at this point, or is the new review in the state it is in fine?18:04
cmurphynotq: there's one more issue with it that i forgot to point out before, noted on the review18:05
cmurphyi think we can go ahead and continue with the new one and you can abandon the original one18:05
notqapologies for missing it18:05
notqI played it after what I thought was the last function to actually delete something. The other functions just list, no?18:08
notqin other functions, it tends to go after the final action that causes a delete, even if there are other actions afterwards. So that was my reasoning18:08
cmurphynotq: lines 191 and 194 are actually invalidating the caches18:09
notqfair enough.18:09
notqprocess now, git commit, then squash that into the previous commit then review? Or git commit, review?18:10
cmurphynotq: git add ; git commit --amend ; git review18:12
notqdanke.18:12
cmurphygern geschehen18:12
openstackgerritNathan Oyler proposed openstack/keystone master: Add cadf auditing to credentials  https://review.opendev.org/66461818:13
*** pcaruana has quit IRC18:39
*** ayoung has joined #openstack-keystone18:39
ayoungSo what did I miss?18:39
*** jamesmcarthur has quit IRC18:40
cmurphyayoung: we just did the m-1 check-in and went through all the stories in the cycle roadmap, i have you as the assignee for https://trello.com/c/MVuu6DbU/59-predictable-ids we were not sure what next steps are for that18:42
ayoungGonna kill that one18:42
ayoungIt would have been nice years ago, and it is a better way, but I don't have the time, and there is not the payoff18:42
ayoungneed to be able to sync Ids between hub and spoke, but that does not need predictable18:43
ayoungI like the background image....headed to Hogwarts are we?18:43
cmurphyyou want to kill predictable ids? this is something many people have been asking for, i thought we were on track for it18:45
ayoungDo thery want predicatble (Hashes) or specifiable (like we did for domain)?18:46
ayoungI thought the interest went with the latter18:47
cmurphyoath/verizon wants predictable ids for users and projects18:47
ayoungAh....18:48
ayoungits not a hard feature....lets see what I have submitted so far18:48
ayounghttps://review.opendev.org/#/c/651655/  roles18:49
openstackgerritayoung proposed openstack/keystone master: Predictable IDs for Roles  https://review.opendev.org/65165518:49
ayoungusers I thought merged...18:49
cmurphyusers is fine but it was projects we were stuck on18:49
ayounghttps://review.opendev.org/#/c/605169/18:50
ayoungOK.18:50
ayoungThat should be relatively easy.  THe issue is the changing of the project name18:50
ayoungIn the past we did things like that as a driver18:51
ayoungswap the driver to get the behaviour.  But we'd need a hook to say "with the hash-id driver, we make project name immutable"18:51
cmurphythat would cause interop issues i think18:52
ayoungThat was the sticking point that lead us to discuss "sync the ids" instead18:52
openstackgerritColleen Murphy proposed openstack/keystone master: Revert "Ignore boilerplate constants in autodoc"  https://review.opendev.org/66466818:54
openstackgerritColleen Murphy proposed openstack/keystone master: Revert "Exclude constants from autodoc"  https://review.opendev.org/66466918:54
*** markvoelker has joined #openstack-keystone18:55
*** dtruong has quit IRC18:58
*** dtruong has joined #openstack-keystone18:59
*** jamesmcarthur has joined #openstack-keystone18:59
ayoungSo what do you want to do cmurphy ?19:00
*** jamesmcarthur has quit IRC19:01
*** jamesmcarthur has joined #openstack-keystone19:03
*** jamesmcarthur has quit IRC19:05
*** jamesmcarthur has joined #openstack-keystone19:07
cmurphymy recollection from the ptg was that we wanted to go forward with predictable project ids first and settable project ids second, and kmalloc had an idea about using a kind of salt with a secondary immutable identifier to get around the problem with the mutable project name19:08
cmurphyso i'd like to continue exploring that direction19:08
ayoungIts also a non-backwards compat change19:11
ayoungI think the CERN folks really want the ability to create an project with a pre-specified ID.  I think that should be priority19:12
ayoungit should also solve things for OATH19:12
ayoungtell you what, let me code that up first, and we can continue the predictable convo19:12
cmurphyokay19:13
*** jamesmcarthur has quit IRC19:15
*** markvoelker has quit IRC19:29
*** jamesmcarthur has joined #openstack-keystone19:34
*** raildo has quit IRC19:39
kmallocFlying soon, can catch up on this stuff tomorrow (cc ayoung)19:46
kmalloccmurphy: ^19:46
ayoungRoger that19:46
*** jamesmcarthur has quit IRC20:03
*** jamesmcarthur has joined #openstack-keystone20:25
*** markvoelker has joined #openstack-keystone20:26
*** jamesmcarthur has quit IRC20:28
*** joshualyle has joined #openstack-keystone20:42
*** jamesmcarthur has joined #openstack-keystone20:53
*** markvoelker has quit IRC20:59
*** jamesmcarthur has quit IRC21:04
*** itlinux has quit IRC21:07
*** notq has quit IRC21:40
cmurphythis is concerning http://logs.openstack.org/62/663462/4/check/openstack-tox-py37/7d765be/job-output.txt.gz#_2019-06-11_01_19_53_429729 the mysql/postgresql opportunistic tests aren't being run for the py27, py36 or py37 jobs, only for the lower-constraints job21:43
clarkbcmurphy: the log shows mysql and postgresql being installed and the setup script is running to add the openstack_citest database21:55
clarkbso that bit at least appears to be working21:55
*** markvoelker has joined #openstack-keystone21:56
cmurphyclarkb: i think the pymysql driver isn't being installed21:56
cmurphyoslo.db[fixtures,mysql,postgresql] in test-requirements.txt seems to not do the right thing21:57
bnemecMy browser is choking on that, but manually installing test-requirements.txt in a venv is pulling in pymysql and psycopg2.22:04
bnemecWorth noting that there is no fixtures extra in oslo.db. Maybe it got removed at some point?22:04
cmurphyit's because we have oslo.db in both requirements.txt and test-requirements.txt and the extras aren't listed in requirements.txt22:05
bnemecThat's annoying.22:06
bnemecIt looks like Nova is explicitly depending on those libraries instead of using the extras (despite what it says in the oslo.db setup.cfg).22:07
openstackgerritColleen Murphy proposed openstack/keystone master: Switch order of precedence for unit test deps  https://review.opendev.org/66471222:07
cmurphylol ^22:08
cmurphynow to see if our postgresql tests actually work...22:08
bnemecGreat, now I have another cookiecutter change to propose. :-)22:08
* bnemec gets so hungry working on cookiecutter22:09
*** rcernin has joined #openstack-keystone22:10
clarkbbnemec: its like 200MB of text22:14
clarkbbnemec: I open those files with vim when firefox fails to22:14
bnemecMy laptop is still mad at me for opening that log file. Remind me next laptop refresh to get the one with all the memory.22:14
bnemecYeah, I was going to try that, but cmurphy fixed the problem first. :-)22:15
*** itlinux has joined #openstack-keystone22:15
*** markvoelker has quit IRC22:30
*** itlinux has quit IRC22:38
openstackgerritColleen Murphy proposed openstack/keystone master: Add user_id, external_id to access rules table  https://review.opendev.org/66344022:46
openstackgerritColleen Murphy proposed openstack/keystone master: Add manager support for app cred access rules  https://review.opendev.org/66346222:46
openstackgerritColleen Murphy proposed openstack/keystone master: Add API changes for app cred access rules  https://review.opendev.org/62816822:46
*** whoami-rajat has quit IRC22:55
*** tkajinam has joined #openstack-keystone23:04
*** vishakha has quit IRC23:16
*** markvoelker has joined #openstack-keystone23:26
openstackgerritColleen Murphy proposed openstack/keystone master: Add access rules to token validation  https://review.opendev.org/63199323:37
*** lbragstad has quit IRC23:41
*** jamesmcarthur has joined #openstack-keystone23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!