| *** markvoelker has joined #openstack-keystone | 00:09 | |
| *** markvoelker has quit IRC | 00:42 | |
| *** markvoelker has joined #openstack-keystone | 00:43 | |
| *** gyee has quit IRC | 00:49 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:05 | |
| *** jamesmcarthur has quit IRC | 01:11 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:14 | |
| *** wxy-xiyuan has joined #openstack-keystone | 01:15 | |
| *** jamesmcarthur has quit IRC | 01:23 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:26 | |
| *** markvoelker has quit IRC | 01:37 | |
| *** jamesmcarthur has quit IRC | 01:40 | |
| *** markvoelker has joined #openstack-keystone | 01:44 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 01:44 |
|---|---|---|
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 01:46 |
| openstackgerrit | Merged openstack/keystoneauth master: Add remove_service to token fixtures https://review.opendev.org/675174 | 01:47 |
| *** jhesketh has quit IRC | 01:53 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:04 | |
| *** joshualyle has joined #openstack-keystone | 02:14 | |
| *** jamesmcarthur has quit IRC | 02:17 | |
| *** joshualyle has quit IRC | 02:18 | |
| *** jhesketh has joined #openstack-keystone | 02:22 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:28 | |
| *** adriant has quit IRC | 02:54 | |
| *** whoami-rajat has joined #openstack-keystone | 03:12 | |
| *** jhesketh has quit IRC | 03:29 | |
| *** jhesketh has joined #openstack-keystone | 03:36 | |
| *** jamesmcarthur has quit IRC | 04:01 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:05 | |
| *** jamesmcarthur has quit IRC | 04:09 | |
| *** jdwidari has quit IRC | 04:10 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:10 | |
| *** jdwidari has joined #openstack-keystone | 04:10 | |
| *** jdwidari has quit IRC | 04:15 | |
| *** aning_ has joined #openstack-keystone | 04:18 | |
| *** jamesmcarthur has quit IRC | 04:19 | |
| *** aning has quit IRC | 04:22 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:23 | |
| *** aning has joined #openstack-keystone | 04:29 | |
| *** aning_ has quit IRC | 04:31 | |
| *** jamesmcarthur has quit IRC | 04:33 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:34 | |
| *** jamesmcarthur has quit IRC | 04:42 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:42 | |
| *** adriant has joined #openstack-keystone | 04:45 | |
| *** jamesmcarthur has quit IRC | 04:48 | |
| *** jdennis has quit IRC | 04:53 | |
| *** shyamb has joined #openstack-keystone | 05:01 | |
| *** spsurya has joined #openstack-keystone | 05:02 | |
| *** dave-mccowan has quit IRC | 05:03 | |
| *** jdennis has joined #openstack-keystone | 05:04 | |
| *** shyamb has quit IRC | 05:04 | |
| *** shyamb has joined #openstack-keystone | 05:05 | |
| *** shyam89 has joined #openstack-keystone | 05:07 | |
| *** shyamb has quit IRC | 05:11 | |
| *** shyamb has joined #openstack-keystone | 05:43 | |
| *** shyam89 has quit IRC | 05:43 | |
| *** shyamb has quit IRC | 05:54 | |
| *** shyam89 has joined #openstack-keystone | 05:54 | |
| *** jaosorior has quit IRC | 05:56 | |
| *** dancn has joined #openstack-keystone | 06:09 | |
| *** jaosorior has joined #openstack-keystone | 06:09 | |
| *** rcernin has quit IRC | 06:18 | |
| *** jaosorior has quit IRC | 06:29 | |
| *** jaosorior has joined #openstack-keystone | 07:16 | |
| *** xek has joined #openstack-keystone | 07:17 | |
| *** shyam89 has quit IRC | 07:25 | |
| *** shyam89 has joined #openstack-keystone | 07:25 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 07:27 |
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 07:30 |
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 07:31 |
| *** tesseract has joined #openstack-keystone | 07:31 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 07:33 |
| adriant | kmalloc, mordred: some of that code makes me feel dirty.... if anyone has suggestions or alternatives, you are more than welcome to recommend them! | 07:46 |
| *** takamatsu has quit IRC | 08:06 | |
| *** ivve has joined #openstack-keystone | 08:19 | |
| *** shyamb has joined #openstack-keystone | 08:25 | |
| *** shyam89 has quit IRC | 08:27 | |
| *** shyamb has quit IRC | 08:33 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Implement scope_type checking for endpoint_groups https://review.opendev.org/675272 | 08:46 |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Implement scope_type checking for endpoint_groups https://review.opendev.org/675272 | 08:52 |
| *** shyamb has joined #openstack-keystone | 09:43 | |
| *** dmellado has quit IRC | 09:53 | |
| *** dmellado has joined #openstack-keystone | 09:55 | |
| *** shyamb has quit IRC | 10:19 | |
| *** shyamb has joined #openstack-keystone | 10:19 | |
| *** jaosorior has quit IRC | 10:26 | |
| brtknr | hmm magnum on devstack seems broken | 10:52 |
| brtknr | it is only running script-004 which installs heat container agent, i dont see any other scripts in the cloud-init repo | 10:52 |
| *** shyamb has quit IRC | 11:00 | |
| *** jaosorior has joined #openstack-keystone | 11:10 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Update api-ref for revocation list OS-PKI https://review.opendev.org/675296 | 11:18 |
| *** kplant has joined #openstack-keystone | 11:18 | |
| *** raildo has joined #openstack-keystone | 11:18 | |
| *** shyamb has joined #openstack-keystone | 11:22 | |
| openstackgerrit | Jose Castro Leon proposed openstack/keystone master: Allows LDAP extra attributes to be exposed to the end user https://review.opendev.org/675303 | 11:48 |
| *** jamesmcarthur has joined #openstack-keystone | 11:51 | |
| *** jamesmcarthur has quit IRC | 11:51 | |
| *** jamesmcarthur has joined #openstack-keystone | 11:51 | |
| *** jamesmcarthur has quit IRC | 12:02 | |
| *** jamesmcarthur has joined #openstack-keystone | 12:04 | |
| *** dancn has quit IRC | 12:08 | |
| *** dancn has joined #openstack-keystone | 12:13 | |
| *** shyamb has quit IRC | 12:13 | |
| *** shyamb has joined #openstack-keystone | 12:14 | |
| *** shyamb has quit IRC | 12:16 | |
| *** shyam89 has joined #openstack-keystone | 12:16 | |
| *** jamesmcarthur has quit IRC | 12:21 | |
| *** shyam89 has quit IRC | 12:21 | |
| *** jaosorior has quit IRC | 12:22 | |
| *** jmlowe has quit IRC | 12:43 | |
| *** jamesmcarthur has joined #openstack-keystone | 12:54 | |
| *** mchlumsky has joined #openstack-keystone | 13:41 | |
| *** dave-mccowan has joined #openstack-keystone | 13:55 | |
| *** dave-mccowan has quit IRC | 14:30 | |
| *** dancn has quit IRC | 15:00 | |
| openstackgerrit | Merged openstack/oslo.policy master: Add unit tests on the sphinxext indent function https://review.opendev.org/671241 | 15:27 |
| *** dave-mccowan has joined #openstack-keystone | 15:31 | |
| *** spsurya has quit IRC | 15:34 | |
| kmalloc | adriant: we have a LOT of that. | 15:41 |
| *** gyee has joined #openstack-keystone | 15:43 | |
| *** beekneemech has joined #openstack-keystone | 16:16 | |
| *** beekneemech has quit IRC | 16:16 | |
| mordred | kmalloc, cmurphy: can haz ksa release with the remove_service calls (and also dtantsur's fixed retry delay) | 16:19 |
| cmurphy | mordred: can you propose and i'll +1 | 16:19 |
| mordred | woot | 16:21 |
| mordred | cmurphy: https://review.opendev.org/675402 Release 3.16.0 of keystoneauth | 16:22 |
| kmalloc | cmurphy/mordred ++ | 17:10 |
| *** markvoelker has quit IRC | 17:12 | |
| cmurphy | knikolla: i reviewed https://review.opendev.org/580041 it looks really good, it just needs a rebase and lance's question answered | 17:18 |
| cmurphy | knikolla: kmalloc i brainstormed some things the edge hackers could do tomorrow https://etherpad.openstack.org/p/ece7c7d4dc although they would probably spend the whole day just setting up devstack with the keystone plugin | 17:19 |
| *** jamesmcarthur has quit IRC | 17:22 | |
| kmalloc | yeah sadly it's one of those really in-depth things and tough to just work on | 17:25 |
| kmalloc | :( | 17:25 |
| *** markvoelker has joined #openstack-keystone | 17:26 | |
| *** tesseract has quit IRC | 17:27 | |
| *** jamesmcarthur has joined #openstack-keystone | 17:33 | |
| knikolla | cmurphy: i guess even just documentation about the devstack plugin would be really helpful | 17:47 |
| knikolla | i got an email the other day asking about that. | 17:47 |
| rm_work | key, i'm trying to debug my keystone auth plugin to see EXACTLY what it's sending to the token endpoint -- where is the place in the client where it's ACTUALLY preparing the final request and sending it? like, where is the real requests.post() call? | 17:48 |
| cmurphy | knikolla: good idea | 17:50 |
| cmurphy | rm_work: in keystoneauth1.session.Session.request() | 17:50 |
| rm_work | ok, looking -- thanks | 17:51 |
| *** jamesmcarthur has quit IRC | 18:30 | |
| *** mchlumsky has quit IRC | 18:39 | |
| *** jamesmcarthur has joined #openstack-keystone | 18:42 | |
| *** ivve has quit IRC | 19:29 | |
| *** kplant has quit IRC | 19:46 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 20:27 |
| adriant | kmalloc: fixed my old broken test... the worst part is, that while the plugin code is VERY inelegant, the usage code (in the fixed test) looks ok. | 20:30 |
| adriant | https://review.opendev.org/#/c/675049/8/keystoneauth1/tests/unit/identity/test_identity_v3.py@763 | 20:32 |
| adriant | oh wait, wrong patch set link | 20:32 |
| adriant | ugh | 20:32 |
| *** ivve has joined #openstack-keystone | 20:32 | |
| adriant | https://review.opendev.org/#/c/675049/9/keystoneauth1/tests/unit/identity/test_identity_v3.py@763 | 20:32 |
| adriant | ^ that | 20:32 |
| adriant | So my thinking for that plugin, and the loader, is that in the CLI we can specify OS_AUTH_METHODS=v3password,v3totp (or in clouds.yaml) and then all the needed values get pulled in for those, with a prompt for password and passcode | 20:34 |
| adriant | it does mean we now have a meta wrapper, and maybe we need to make doing that easier | 20:34 |
| adriant | meta loader* | 20:34 |
| *** xek has quit IRC | 20:41 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 20:46 |
| kmalloc | adriant: wfm. | 21:01 |
| *** whoami-rajat has quit IRC | 21:01 | |
| *** rm_work has quit IRC | 21:05 | |
| *** rm_work has joined #openstack-keystone | 21:05 | |
| adriant | a mapping between method name > method class would make things easier | 21:06 |
| adriant | because: 'loading.get_plugin_loader(method).plugin_class._auth_method_class' feels dirty | 21:07 |
| *** jamesmcarthur has quit IRC | 21:19 | |
| *** vishwanathj has joined #openstack-keystone | 21:31 | |
| *** raildo has quit IRC | 21:34 | |
| *** markvoelker has quit IRC | 21:36 | |
| *** markvoelker has joined #openstack-keystone | 21:53 | |
| *** markvoelker has quit IRC | 21:57 | |
| openstackgerrit | Merged openstack/keystone master: Fix list_mappings deprecation warning message https://review.opendev.org/674934 | 22:14 |
| openstackgerrit | Merged openstack/keystone master: Clean up irrelevant comment https://review.opendev.org/674935 | 22:14 |
| *** whoami-rajat has joined #openstack-keystone | 22:24 | |
| adriant | kmalloc: so yeah... zuul now passes | 22:30 |
| adriant | I still think the code is awful, but I can't think of a better way to do it right now | 22:30 |
| *** rcernin has joined #openstack-keystone | 22:53 | |
| kmalloc | adriant: if you don't vomit a little in your mouth...it's not keystoneauth | 22:55 |
| adriant | my worry is then having to maintain it | 22:55 |
| kmalloc | lots of testing | 22:55 |
| kmalloc | over test the code | 22:55 |
| kmalloc | makes maintenance easier because we have more indicators when something goes sideways | 22:55 |
| kmalloc | stevedore loading is always somewhat nightmare-ish | 22:56 |
| adriant | Yeah.... I was tempted to use that for Adjutant, then just stuck with Django's app system | 22:56 |
| adriant | seemed safer | 22:56 |
| kmalloc | we could remove a chunk of the stevedore loading bits from KSA (still support for out-of-tree modules/plugins) but it would lighten the code/ick as well | 22:56 |
| kmalloc | there is almost no reason for us to have the loading code in ksa used for in-tree modules. | 22:57 |
| adriant | we could replace it all with our own in code mappings | 22:58 |
| adriant | well, nah, for this awful new MFA stuff I'd still need the plugin loaders in case of extra auth methods people want | 23:01 |
| * adriant sighs | 23:01 | |
| adriant | mordred: You'll ultimately be one of the consumers of this, so I'll definitely want your opinion when you've got the time! | 23:02 |
| adriant | Once there is some feedback I can hopefully make this better | 23:02 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!