Tuesday, 2019-06-18

*** awalende has joined #openstack-keystone00:13
*** awalende has quit IRC00:18
*** markvoelker has joined #openstack-keystone00:45
*** jamesmcarthur has quit IRC00:46
*** markvoelker has quit IRC00:50
*** liushuo has joined #openstack-keystone01:07
liushuohttps://bugs.launchpad.net/keystone/+bug/183308501:10
openstackLaunchpad bug 1833085 in OpenStack Identity (keystone) "Zero-downtime upgrades lead to spurious token validation failures when caching is enabled" [High,Triaged]01:10
liushuovalidation failures of all valid tokens or only cached tokens?01:10
*** lbragstad has quit IRC01:22
*** lbragstad has joined #openstack-keystone01:22
kmallocliushuo: cached01:45
*** markvoelker has joined #openstack-keystone01:46
*** markvoelker has quit IRC01:50
liushuo3ks01:51
*** markvoelker has joined #openstack-keystone02:46
*** markvoelker has quit IRC02:51
*** whoami-rajat has joined #openstack-keystone03:01
*** tristanC has quit IRC03:01
*** tristanC has joined #openstack-keystone03:04
*** lbragstad has quit IRC03:26
*** liushuo has quit IRC03:29
*** liushuo has joined #openstack-keystone03:29
openstackgerritMerged openstack/keystone master: Update the meaning of low-hanging-fruit  https://review.opendev.org/65914103:32
*** markvoelker has joined #openstack-keystone03:47
*** markvoelker has quit IRC03:52
*** awalende has joined #openstack-keystone03:56
*** threestrands has joined #openstack-keystone04:05
*** awalende has quit IRC04:29
*** markvoelker has joined #openstack-keystone04:48
*** markvoelker has quit IRC04:52
*** pcaruana has joined #openstack-keystone04:56
*** awalende has joined #openstack-keystone05:03
*** zzzeek has quit IRC05:07
*** awalende has quit IRC05:08
*** zzzeek has joined #openstack-keystone05:08
*** masayukig has quit IRC05:36
*** johnsom has quit IRC05:36
*** csatari has quit IRC05:36
*** hogepodge has quit IRC05:36
*** masayukig has joined #openstack-keystone05:37
*** csatari has joined #openstack-keystone05:38
*** johnsom has joined #openstack-keystone05:38
*** hogepodge has joined #openstack-keystone05:38
*** markvoelker has joined #openstack-keystone05:49
*** markvoelker has quit IRC05:54
openstackgerritVishakha Agarwal proposed openstack/keystone master: Fix contributor doc of keystone  https://review.opendev.org/66269006:18
*** vishalmanchanda has joined #openstack-keystone06:21
openstackgerritzhaixiaojun proposed openstack/keystone master: Modify the url of upper_constraints_file  https://review.opendev.org/66587306:25
*** markvoelker has joined #openstack-keystone06:50
*** markvoelker has quit IRC06:54
*** trident has quit IRC06:57
*** trident has joined #openstack-keystone06:59
*** tesseract has joined #openstack-keystone07:24
*** threestrands has quit IRC07:36
*** xek has joined #openstack-keystone07:41
*** markvoelker has joined #openstack-keystone07:50
*** markvoelker has quit IRC07:55
*** spsurya has joined #openstack-keystone08:01
*** yan0s has joined #openstack-keystone08:05
*** h3rbz has quit IRC08:20
*** dklyle has quit IRC08:35
*** david-lyle has joined #openstack-keystone08:35
*** imacdonn has quit IRC08:40
*** imacdonn has joined #openstack-keystone08:40
*** tkajinam has quit IRC08:50
*** vishakha has joined #openstack-keystone08:51
*** markvoelker has joined #openstack-keystone08:51
*** kevinluuuuu has joined #openstack-keystone08:54
*** markvoelker has quit IRC08:56
*** liushuo_ has joined #openstack-keystone08:59
*** liushuo has quit IRC09:03
openstackgerritVishakha Agarwal proposed openstack/keystone master: Fix contributor doc of keystone  https://review.opendev.org/66269009:03
*** liushuobj__ has joined #openstack-keystone09:10
*** liushuo_ has quit IRC09:13
*** awalende has joined #openstack-keystone09:34
*** rcernin has quit IRC09:57
*** awalende has quit IRC10:01
*** awalende has joined #openstack-keystone10:01
*** awalende has quit IRC10:05
jamespagewould anyone have cycles to peek at https://review.opendev.org/#/c/665617/ ?  its a fairly blanket fix for py3/msgpack decoding but I think its appropriate10:14
*** liushuo_ has joined #openstack-keystone10:40
*** liushuobj__ has quit IRC10:44
*** awalende has joined #openstack-keystone10:50
*** awalende has quit IRC10:51
*** awalende has joined #openstack-keystone10:52
*** liushuobj__ has joined #openstack-keystone10:54
*** awalende has quit IRC10:56
*** liushuo_ has quit IRC10:57
*** dave-mccowan has joined #openstack-keystone11:34
*** raildo has joined #openstack-keystone11:41
*** awalende has joined #openstack-keystone11:49
*** awalende has quit IRC11:51
*** liushuo_ has joined #openstack-keystone11:51
*** awalende has joined #openstack-keystone11:52
*** liushuobj__ has quit IRC11:55
*** awalende has quit IRC11:55
*** awalende has joined #openstack-keystone12:23
*** awalende has quit IRC12:27
*** liushuobj__ has joined #openstack-keystone12:31
*** liushuo_ has quit IRC12:35
*** liushuo_ has joined #openstack-keystone12:45
*** liushuobj__ has quit IRC12:48
*** awalende has joined #openstack-keystone12:53
*** markvoelker has joined #openstack-keystone12:55
*** awalende has quit IRC12:56
*** liushuobj__ has joined #openstack-keystone12:57
*** awalende has joined #openstack-keystone12:58
*** markvoelker has quit IRC13:00
*** liushuo_ has quit IRC13:00
*** awalende has quit IRC13:02
*** awalende_ has joined #openstack-keystone13:02
*** lbragstad has joined #openstack-keystone13:11
*** liushuo_ has joined #openstack-keystone13:22
*** liushuobj__ has quit IRC13:26
*** vishakha has quit IRC13:36
*** pcaruana has quit IRC13:37
*** vishalmanchanda has quit IRC13:48
*** rafaelweingartne has joined #openstack-keystone13:49
*** pcaruana has joined #openstack-keystone13:54
*** markvoelker has joined #openstack-keystone13:56
*** mchlumsky has joined #openstack-keystone14:00
knikollao/14:00
lbragstado/14:00
*** markvoelker has quit IRC14:15
*** rafaelweingartne has quit IRC14:20
*** vishakha has joined #openstack-keystone14:23
*** awalende_ has quit IRC14:27
*** awalende has joined #openstack-keystone14:27
*** jamesmcarthur has joined #openstack-keystone14:31
*** awalende has quit IRC14:31
*** liushuobj__ has joined #openstack-keystone14:46
*** liushuo_ has quit IRC14:50
ayoungkmalloc, I think we're ok on the exception part you wrote about above for explicit_project_id.  If a user passes that in, it will be policy-checked.  If it fails, the whole create fails.14:54
kmallocthats fine, the update needs to be covered14:55
kmallocyou don't want explicit_id ever handled in update14:55
kmallocayoung: otherwise the code really is ok14:58
ayoungkmalloc, Its not allowed in via JSON-Home in update, only create14:58
ayoungI need to update the JSON home test, and I'll repost.14:59
kmalloc*extras* allows it14:59
ayoungextras allows anything14:59
kmallocright14:59
kmallocso.14:59
*** jamesmcarthur_ has joined #openstack-keystone14:59
kmallocyou need to explicitly raise an exception in update14:59
ayoungI think you are lying.14:59
ayoungHEH14:59
ayoungNo seriously, how would it be any different than sending in "random" or "foo" in extras?15:00
kmallocbecause we are carving out this value as having special meaning15:00
kmallocit's communicating that you can't set explicit_id or change ID in update15:00
*** spsurya has quit IRC15:01
kmallocand fyi, adding it to the schema.py for JSON home on create explicitly calls it out as a valid entry if someone parses json home15:02
kmallocs/home/schema15:02
*** jamesmcarthur has quit IRC15:02
kmallocwait strike that whole last sentence15:03
kmallocthat was useless and incorrect15:03
kmallocadding it to the json schema just makes it more explicitly covered rather than relying on extras, cleaner maintainability, i wouldn't -1 strictly on the schema change though15:03
*** gyee has joined #openstack-keystone15:07
cmurphyI don't have anything prepared for today's meeting, does anyone want to add something to https://etherpad.openstack.org/p/keystone-weekly-meeting to cover with the team?15:10
*** markvoelker has joined #openstack-keystone15:12
openstackgerritayoung proposed openstack/keystone master: Explicit Project ID  https://review.opendev.org/66474615:15
*** awalende has joined #openstack-keystone15:15
ayoungkmalloc, since "extras" can be anything, putting "explicit_project_id" in there would, in update, technically be allowed.  Just very, very dumb.15:16
*** whoami-rajat has quit IRC15:21
knikollacmurphy: if nothing gets added i propose to just cancel the meeting for today.15:23
cmurphyknikolla: i agree15:24
lbragstadi was thinking about doing an update on unified limits/oslo.limit during open discussion15:24
lbragstadbut it's not a big deal15:24
cmurphythat sounds worthwhile15:25
*** markvoelker has quit IRC15:31
kmallocayoung: yeah, totally dumb, but this is a case where we should explicitly say "uh...."15:36
kmalloc;)15:36
*** mgagne has quit IRC15:39
*** d34dh0r53 has quit IRC15:39
*** kklimonda has quit IRC15:39
*** vishakha has quit IRC15:40
*** masayukig has quit IRC15:40
*** d34dh0r53 has joined #openstack-keystone15:40
*** dave-mccowan has quit IRC15:40
*** masayukig has joined #openstack-keystone15:40
*** kklimonda has joined #openstack-keystone15:41
*** awalende has quit IRC15:41
*** awalende has joined #openstack-keystone15:42
*** mgagne has joined #openstack-keystone15:42
*** vishakha has joined #openstack-keystone15:44
kmalloc*sigh* another busted panel in the dell 4k screen.15:44
kmallocthis is now the 4th panel that has turned green/cloudy distortion15:45
*** awalende has quit IRC15:46
cmurphymeeting in 10 minutes in #openstack-meeting-alt15:50
* kmalloc sips coffee.15:50
*** awalende has joined #openstack-keystone15:51
*** liushuo_ has joined #openstack-keystone15:53
*** liushuobj__ has quit IRC15:57
lbragstadjohnthetubaguy are you around?16:00
cmurphymeeting starting now16:01
*** pcaruana has quit IRC16:01
*** awalende has quit IRC16:19
*** awalende has joined #openstack-keystone16:19
*** vishwanathj has joined #openstack-keystone16:22
*** awalende has quit IRC16:23
*** markvoelker has joined #openstack-keystone16:28
*** yan0s has quit IRC16:31
openstackgerritjacky06 proposed openstack/ldappool master: Sync Sphinx requirement  https://review.opendev.org/66604616:38
openstackgerritjacky06 proposed openstack/ldappool master: Sync Sphinx requirement  https://review.opendev.org/66604616:40
*** pcaruana has joined #openstack-keystone16:45
*** markvoelker has quit IRC16:46
*** jamesmcarthur_ has quit IRC16:57
*** jamesmcarthur has joined #openstack-keystone16:59
*** altlogbot_0 has quit IRC17:00
*** altlogbot_1 has joined #openstack-keystone17:01
*** irclogbot_1 has quit IRC17:02
*** irclogbot_0 has joined #openstack-keystone17:02
*** jamesmcarthur has quit IRC17:04
openstackgerritjacky06 proposed openstack/python-keystoneclient master: Sync Sphinx requirement  https://review.opendev.org/66606517:08
*** brett-soric has joined #openstack-keystone17:11
*** awalende has joined #openstack-keystone17:24
*** jamesmcarthur has joined #openstack-keystone17:28
lbragstadcmurphy are you cool with one +2 and one +W on spec cleanups?17:32
*** jamesmcarthur has quit IRC17:33
cmurphylbragstad: sure17:33
*** whoami-rajat has joined #openstack-keystone17:37
openstackgerritMerged openstack/keystone-specs master: Move SP endpoint filters spec to attic  https://review.opendev.org/65889317:40
openstackgerritMerged openstack/keystone-specs master: Move unified model spec from ongoing to backlog  https://review.opendev.org/65889417:44
openstackgerritMerged openstack/keystone-specs master: Combine policy roadmap documents  https://review.opendev.org/65915917:46
*** jamesmcarthur has joined #openstack-keystone17:52
openstackgerritLance Bragstad proposed openstack/oslo.limit master: WIP: Add ksa connection logic  https://review.opendev.org/66608517:53
*** awalende has quit IRC17:55
*** awalende has joined #openstack-keystone17:56
*** awalende_ has joined #openstack-keystone17:58
*** awalende has quit IRC17:58
*** brett-soric has left #openstack-keystone17:59
*** awalende_ has quit IRC18:02
*** awalende has joined #openstack-keystone18:05
*** vishwanathj has quit IRC18:22
*** liushuobj__ has joined #openstack-keystone18:26
*** liushuo_ has quit IRC18:30
*** vishwanathj has joined #openstack-keystone18:35
*** awalende has quit IRC18:35
*** awalende has joined #openstack-keystone18:36
*** awalende has quit IRC18:39
*** awalende has joined #openstack-keystone18:40
*** awalende has quit IRC18:43
*** pcaruana has quit IRC18:45
*** pcaruana has joined #openstack-keystone19:05
*** vishwanathj has quit IRC19:06
openstackgerritColleen Murphy proposed openstack/keystone master: Add link to describe Principle of Least Privilege  https://review.opendev.org/66615119:06
*** jamesmcarthur has quit IRC19:08
*** jdennis has quit IRC19:16
*** jdennis has joined #openstack-keystone19:20
*** jdennis has quit IRC19:24
*** awalende has joined #openstack-keystone19:29
*** awalende has quit IRC19:32
*** jdennis has joined #openstack-keystone19:40
*** awalende has joined #openstack-keystone19:42
*** vishakha has quit IRC19:46
*** vishwanathj has joined #openstack-keystone19:54
*** vishwanathj has quit IRC19:59
*** jamesmcarthur has joined #openstack-keystone20:01
openstackgerritColleen Murphy proposed openstack/keystonemiddleware master: Add validation of app cred access rules  https://review.opendev.org/63336920:26
mlozaHello, I keep getting this error in the logs 'Either [None] key_repository does not exist or Keystone does not have sufficient permission to access it: /etc/keystone/credential-keys/ '20:45
mlozaThe env is in stable/rocky20:46
*** whoami-rajat has quit IRC20:56
openstackgerritMerged openstack/keystone master: Update mission statement and vision reflection  https://review.opendev.org/66210621:00
openstackgerritColleen Murphy proposed openstack/keystone master: Add new attribute to the federation protocol API  https://review.opendev.org/63730521:01
openstackgerritRaildo Mascena proposed openstack/keystone master: Fixing dn_to_id function for cases were id is not in the DN  https://review.opendev.org/64917721:14
*** xek has quit IRC21:15
*** jamesmcarthur has quit IRC21:17
*** ayoung has quit IRC21:38
*** tesseract has quit IRC21:47
*** markvoelker has joined #openstack-keystone21:48
*** awalende has quit IRC21:52
*** awalende has joined #openstack-keystone21:53
*** awalende has quit IRC21:57
*** liushuo_ has joined #openstack-keystone21:58
*** markvoelker has quit IRC22:00
*** liushuo has joined #openstack-keystone22:01
*** liushuobj__ has quit IRC22:02
*** raildo has quit IRC22:02
*** liushuo_ has quit IRC22:04
*** mchlumsky has quit IRC22:09
*** awalende has joined #openstack-keystone22:24
*** awalende has quit IRC22:29
*** liushuo has quit IRC22:58
*** liushuo has joined #openstack-keystone22:58
*** tkajinam has joined #openstack-keystone23:01
*** awalende has joined #openstack-keystone23:03
*** liushuo_ has joined #openstack-keystone23:08
*** liushuo has quit IRC23:11
*** rcernin has joined #openstack-keystone23:16
*** rcernin has quit IRC23:17
*** rcernin has joined #openstack-keystone23:18
*** liushuobj__ has joined #openstack-keystone23:35
*** awalende has quit IRC23:36
*** liushuo_ has quit IRC23:39

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!