Friday, 2019-07-05

*** imacdonn has quit IRC01:11
*** imacdonn has joined #openstack-keystone01:12
*** adriant has joined #openstack-keystone01:49
*** whoami-rajat has joined #openstack-keystone02:26
*** rcernin has quit IRC04:17
*** new_student1411 has joined #openstack-keystone04:45
*** shyamb has joined #openstack-keystone04:52
*** tkajinam has quit IRC04:54
*** tkajinam has joined #openstack-keystone04:55
*** shyamb has quit IRC04:57
*** shyamb has joined #openstack-keystone05:04
*** rcernin has joined #openstack-keystone05:10
*** tkajinam_ has joined #openstack-keystone05:25
*** tkajinam has quit IRC05:27
*** rcernin has quit IRC05:41
*** shyamb has quit IRC05:49
*** new_student1411 has quit IRC05:55
*** rcernin has joined #openstack-keystone05:58
*** Pavan has joined #openstack-keystone05:59
PavanCan i give role base access. like aws IAM (instance can access only s3 single bucket)06:00
*** shyamb has joined #openstack-keystone06:24
openstackgerritQiu Fossen proposed openstack/oslo.policy master: Add Python 3 Train unit tests  https://review.opendev.org/66925906:28
openstackgerritQiu Fossen proposed openstack/oslo.policy master: Add Python 3 Train unit tests  https://review.opendev.org/66925906:38
*** dancn has joined #openstack-keystone06:47
openstackgerritwangxiyuan proposed openstack/keystone master: Drop limit columns  https://review.opendev.org/65718706:59
*** jaosorior has joined #openstack-keystone07:02
*** xek has joined #openstack-keystone07:06
*** hoonetorg has quit IRC07:16
*** tesseract has joined #openstack-keystone07:21
*** shyamb has quit IRC07:23
*** hoonetorg has joined #openstack-keystone07:29
*** rcernin has quit IRC07:45
*** rcernin has joined #openstack-keystone08:02
*** xek has quit IRC08:10
*** tkajinam_ has quit IRC08:11
openstackgerritMerged openstack/keystone master: Incorrect behavior of validate_password method  https://review.opendev.org/66886108:12
openstackgerritMerged openstack/keystone master: Revert "Ignore boilerplate constants in autodoc"  https://review.opendev.org/66466808:12
openstackgerritMerged openstack/keystone master: Revert "Exclude constants from autodoc"  https://review.opendev.org/66466908:12
*** shyamb has joined #openstack-keystone08:35
*** rcernin has quit IRC08:49
*** rcernin has joined #openstack-keystone09:05
*** jistr has quit IRC09:07
*** new_student1411 has joined #openstack-keystone09:11
*** jistr has joined #openstack-keystone09:14
*** rcernin has quit IRC09:16
*** jaosorior has quit IRC09:36
*** shyamb has quit IRC10:15
*** xek has joined #openstack-keystone10:36
*** shyamb has joined #openstack-keystone10:51
*** whoami-rajat has quit IRC11:06
openstackgerritMerged openstack/keystone master: Drop limit columns  https://review.opendev.org/65718711:06
*** trident has quit IRC11:10
*** trident has joined #openstack-keystone11:14
*** shyamb has quit IRC11:14
*** shyamb has joined #openstack-keystone11:41
*** openstackgerrit has quit IRC12:04
*** whoami-rajat has joined #openstack-keystone12:19
*** xek has quit IRC12:26
*** xek_ has joined #openstack-keystone12:26
*** tesseract has quit IRC12:52
*** tesseract has joined #openstack-keystone12:54
*** shyamb has quit IRC12:55
*** shyamb has joined #openstack-keystone12:55
*** Pavan has quit IRC13:15
*** shyamb has quit IRC13:25
*** raildo has joined #openstack-keystone13:26
*** trident has quit IRC13:41
*** openstackgerrit has joined #openstack-keystone13:47
openstackgerritJose Castro Leon proposed openstack/keystone master: Allow to filter endpoint groups by name  https://review.opendev.org/65835913:47
*** ayoung has joined #openstack-keystone13:49
*** dancn has quit IRC14:05
*** tesseract-RH has joined #openstack-keystone15:08
*** xek_ has quit IRC15:09
*** tesseract has quit IRC15:10
*** gyee has joined #openstack-keystone15:28
*** jdennis has quit IRC15:29
*** jamesmcarthur has joined #openstack-keystone15:30
gyeekmalloc, cmurphy, so for X.509 tokenless, looks like we can eliminate the trusted_issuer option in keystone.conf. We can enforce that in the mapping instead.16:45
cmurphygyee: cool16:47
gyeecmurphy, question on the mapping, when map to a project, where does the project domain specified? https://docs.openstack.org/keystone/pike/advanced-topics/federation/mapping_combinations.html#auto-provisioning16:48
cmurphygyee: "Projects will be created within the domain associated with the Identity Provider.16:52
cmurphy"16:52
gyeeoh, so we can't map it to an existing local project?16:54
cmurphyI am not sure16:55
cmurphyknikolla: ^16:55
*** jamesmcarthur has quit IRC16:58
*** tesseract-RH has quit IRC17:01
*** whoami-rajat has quit IRC17:06
kmallocgyee: nice17:34
*** mloza has quit IRC17:35
gyeeI think there's a bug in mapping as well. Seem like if I have multiple rules and only one rule yield a valid user, that user's being ignored.17:42
gyeeThis is weird. Mapped_properties still has multiple users, but only one of them has a none empty user name. I would expect we filter out the empty ones.17:44
openstackgerritcaoyuan proposed openstack/oslo.policy master: Move doc related modules to doc/requirements.txt  https://review.opendev.org/66942717:52
openstackgerritCorey Bryant proposed openstack/oslo.limit master: Add Python 3 Train unit tests  https://review.opendev.org/66946118:45
openstackgerritCorey Bryant proposed openstack/oslo.policy master: Add Python 3 Train unit tests  https://review.opendev.org/61012218:55
openstackgerritColleen Murphy proposed openstack/keystone master: Add user_id, external_id to access rules table  https://review.opendev.org/66344019:12
openstackgerritColleen Murphy proposed openstack/keystone master: Add manager support for app cred access rules  https://review.opendev.org/66346219:12
openstackgerritColleen Murphy proposed openstack/keystone master: Add API changes for app cred access rules  https://review.opendev.org/62816819:12
openstackgerritColleen Murphy proposed openstack/keystone master: Expose access rules as its own API  https://review.opendev.org/66823819:12
openstackgerritColleen Murphy proposed openstack/keystone master: Add access rules to token validation  https://review.opendev.org/63199319:12
openstackgerritMerged openstack/keystone master: Update test cases for os-pki revoke API  https://review.opendev.org/66865420:05
*** raildo has quit IRC20:13
*** jamesmcarthur has joined #openstack-keystone21:46
*** jamesmcarthur has quit IRC22:12
*** jamesmcarthur has joined #openstack-keystone22:12
*** jistr has quit IRC22:24
*** jistr has joined #openstack-keystone22:24
*** jamesmcarthur has quit IRC22:33
*** dklyle has quit IRC22:36
*** jamesmcarthur has joined #openstack-keystone22:48
*** sapd1 has quit IRC23:05
*** jamesmcarthur has quit IRC23:05
*** jamesmcarthur has joined #openstack-keystone23:06
*** jamesmcarthur has quit IRC23:32
*** jdennis has joined #openstack-keystone23:40
openstackgerritColleen Murphy proposed openstack/pycadf master: Removes temporary fix for doc generation  https://review.opendev.org/66954323:41
openstackgerritColleen Murphy proposed openstack/pycadf master: Add Python 3 Train unit tests  https://review.opendev.org/66775723:42
cmurphybeen a while since that lib has seen any love ^23:42

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!