Friday, 2019-10-18

*** beekneemech has joined #openstack-keystone00:06
*** bnemec has quit IRC00:08
*** beekneemech has quit IRC00:12
*** bnemec has joined #openstack-keystone00:14
*** NM has joined #openstack-keystone00:38
*** markvoelker has joined #openstack-keystone00:49
cmurphylbragstad: fixed the broken ldap job for <=queens https://review.opendev.org/#/q/Ie0b9f13d6fb06b776d6a58d5d1087c20df8a7cda00:51
*** NM has quit IRC01:32
openstackgerritPedro Henrique Pereira Martins proposed openstack/keystone master: Stop adding entry in local_user while updating ephemerals  https://review.opendev.org/68799002:01
*** jamesmcarthur has quit IRC02:03
*** jamesmcarthur has joined #openstack-keystone02:43
*** jamesmcarthur has quit IRC02:51
*** jamesmcarthur has joined #openstack-keystone03:09
*** dave-mccowan has quit IRC03:21
*** jamesmcarthur has quit IRC03:28
*** jamesmcarthur has joined #openstack-keystone03:29
*** jamesmcarthur has quit IRC03:34
*** jamesmcarthur has joined #openstack-keystone03:59
*** jamesmcarthur has quit IRC04:06
*** Luzi has joined #openstack-keystone04:50
*** adriant has joined #openstack-keystone04:57
*** jamesmcarthur has joined #openstack-keystone05:03
*** jamesmcarthur has quit IRC05:07
*** awalende has joined #openstack-keystone05:18
*** awalende has quit IRC05:22
*** jamesmcarthur has joined #openstack-keystone05:42
*** jamesmcarthur has quit IRC05:47
*** jawad_axd has joined #openstack-keystone06:09
*** jawad_axd has quit IRC06:13
*** jawad_axd has joined #openstack-keystone06:13
yoctozeptohey keystoners, could you look at: https://bugs.launchpad.net/kolla-ansible/+bug/1847727 and let me know if keystone could decrease the severity of this message? it does not seem critical as services are not dying, just rejecting the requests - so ERROR seems more proper here (like in other conditions)06:22
openstackLaunchpad bug 1847727 in kolla-ansible "CI: failing on CRITICAL may be still too strong" [Medium,Triaged]06:22
*** dancn has joined #openstack-keystone06:41
*** jamesmcarthur has joined #openstack-keystone06:43
*** jamesmcarthur has quit IRC06:48
*** trident has quit IRC07:00
*** trident has joined #openstack-keystone07:04
*** jamesmcarthur has joined #openstack-keystone07:21
*** tesseract has joined #openstack-keystone07:22
*** awalende has joined #openstack-keystone07:25
*** jamesmcarthur has quit IRC07:26
*** pcaruana has joined #openstack-keystone07:26
*** jamesmcarthur has joined #openstack-keystone07:37
*** jamesmcarthur has quit IRC07:41
*** stingrayza has joined #openstack-keystone07:42
*** kimamisa has joined #openstack-keystone07:58
*** xek__ has joined #openstack-keystone08:07
*** jamesmcarthur has joined #openstack-keystone08:09
*** jamesmcarthur has quit IRC08:45
*** ileixe has joined #openstack-keystone08:58
*** ileixe has left #openstack-keystone08:59
*** dansmith has quit IRC09:07
*** dansmith has joined #openstack-keystone09:24
gregoiremaheHi, Why keystone manage bootstrap doesn't link admin user to keystone endpoint ? That leads to error "Service catalog is empty" and we can't assign that with openstack endpoint add project command09:28
gregoiremaheWe must do that via SQL directly09:29
*** jamesmcarthur has joined #openstack-keystone09:41
*** jamesmcarthur has quit IRC09:46
*** xek__ has quit IRC10:08
*** dancn has quit IRC10:10
*** xek has joined #openstack-keystone10:11
*** bnemec has quit IRC10:13
*** spatel has joined #openstack-keystone10:14
*** bnemec has joined #openstack-keystone10:15
*** xek_ has joined #openstack-keystone10:15
*** xek has quit IRC10:16
*** spatel has quit IRC10:17
*** xek_ has quit IRC10:38
*** xek has joined #openstack-keystone10:40
*** zigo has quit IRC10:54
*** zigo has joined #openstack-keystone11:04
*** jamesmcarthur has joined #openstack-keystone11:04
*** tkajinam has quit IRC11:16
*** xek has quit IRC11:16
*** awalende has quit IRC11:46
*** awalende has joined #openstack-keystone11:47
*** awalende has quit IRC11:47
*** awalende has joined #openstack-keystone11:47
*** awalende has quit IRC12:03
*** awalende has joined #openstack-keystone12:07
*** jamesmcarthur has quit IRC12:09
*** awalende has quit IRC12:09
*** awalende has joined #openstack-keystone12:11
*** NM has joined #openstack-keystone12:24
*** larsks has quit IRC12:25
*** jamesmcarthur has joined #openstack-keystone12:27
*** larsks has joined #openstack-keystone12:32
*** jamesmcarthur has quit IRC12:40
*** jamesmcarthur has joined #openstack-keystone12:45
*** Luzi has quit IRC12:46
*** jdwidari has joined #openstack-keystone12:57
*** larsks has quit IRC13:00
*** larsks has joined #openstack-keystone13:01
*** awalende has quit IRC13:12
*** jawad_axd has quit IRC13:15
*** jawad_axd has joined #openstack-keystone13:16
*** jamesmcarthur has quit IRC13:18
*** jawad_ax_ has joined #openstack-keystone13:21
*** jawad_axd has quit IRC13:21
*** jawad_ax_ has quit IRC13:26
*** raildo has joined #openstack-keystone13:29
*** rcernin has quit IRC13:40
*** larsks has quit IRC13:44
*** larsks has joined #openstack-keystone13:46
*** dave-mccowan has joined #openstack-keystone13:47
*** jamesmcarthur has joined #openstack-keystone13:52
*** xek has joined #openstack-keystone13:52
*** pcaruana has quit IRC13:53
*** ab-a has quit IRC13:53
*** dave-mccowan has quit IRC13:56
*** jamesmcarthur has quit IRC13:56
*** jawad_axd has joined #openstack-keystone14:09
*** jawad_axd has quit IRC14:10
*** jawad_ax_ has joined #openstack-keystone14:11
*** jawad_ax_ has quit IRC14:11
*** efried_afk is now known as efried14:11
*** dancn has joined #openstack-keystone14:16
*** larsks has quit IRC14:29
*** larsks has joined #openstack-keystone14:30
*** bnemec has quit IRC14:49
cmurphyyoctozepto: i think it's fair to call a failure to validate the token critical, the service can't work if it can't reach keystone14:50
cmurphyyoctozepto: did https://bugs.launchpad.net/kolla-ansible/+bug/1847727/comments/5 not work?14:50
openstackLaunchpad bug 1847727 in kolla-ansible "CI: failing on CRITICAL may be still too strong" [Medium,Triaged]14:50
cmurphygregoiremahe: did you follow https://docs.openstack.org/keystone/latest/admin/cli-manage-projects-users-and-roles.html and https://docs.openstack.org/keystone/latest/admin/manage-services.html ?14:51
yoctozeptocmurphy: it would probably work randomly still - no problem regarding severity - it fails with standalone services (i.e. those without wsgi front)14:53
*** jamesmcarthur has joined #openstack-keystone14:53
yoctozeptothere are other instabilities I added in the same thread so we will be handling this for now14:53
*** bnemec has joined #openstack-keystone14:55
*** jamesmcarthur has quit IRC14:58
yoctozeptocmurphy: I took the bug off keystone ;-)15:00
cmurphyyoctozepto: thanks :)15:01
*** FlorianFa has quit IRC15:01
*** bnemec is now known as beekneemech15:02
*** gyee has joined #openstack-keystone15:07
*** jamesmcarthur has joined #openstack-keystone15:27
*** NM has quit IRC15:32
*** beekneemech has quit IRC15:34
mlozahi, when is this gonna get merge https://review.opendev.org/#/c/676200/ ?15:40
cmurphylbragstad: ^ could you help with that stable review15:48
lbragstadcmurphy done - are you going to ask the stable team for a review?15:56
cmurphylbragstad: yes15:57
cmurphytrying to get all of our stable changes in order in light of http://lists.openstack.org/pipermail/openstack-discuss/2019-October/010205.html15:57
*** markvoelker has quit IRC16:26
*** markvoelker has joined #openstack-keystone16:27
*** NM has joined #openstack-keystone16:58
*** dancn has quit IRC17:10
*** tesseract has quit IRC17:18
*** kimamisa has quit IRC17:33
*** markvoelker has quit IRC17:34
kukaczhi, I'd like to ask for help with admin+service projects deleted by mistake17:40
kukaczcan I recover from this situation just by recreating records in 'project' table? I have the original IDs, but no db backup :-(17:41
*** jamesmcarthur has quit IRC17:44
openstackgerritColleen Murphy proposed openstack/keystone master: Fix line-length PEP8 errors for c7fae97  https://review.opendev.org/68955817:59
openstackgerritColleen Murphy proposed openstack/keystone master: Re-enable line-length linter  https://review.opendev.org/68955917:59
cmurphylbragstad: can you have another look at https://review.opendev.org/#/q/Ie0b9f13d6fb06b776d6a58d5d1087c20df8a7cda i fixed the issue18:20
cmurphykukacz: you will have to re-do all your role assignments after you create the new projects18:20
kukaczcmurphy: thanks for answering! yes, I'm just doing this step18:21
kukaczcmurphy: but generaly the procedure of recreating directly in database tables project ... and assignment should be ok?18:22
lbragstadcmurphy one question here - https://review.opendev.org/#/c/688760/218:23
cmurphykukacz: it would be better to re-do it all using the bootstrap command and then the api/cli, we can't really guarantee correctness if you edit the db directly18:23
cmurphylbragstad: the parent job is set not to run on ocata any more18:24
lbragstadaha18:24
kukaczcmurphy: I see, but then I would have ended up with different project IDs, I assume.18:24
cmurphylbragstad: so we could just delete the job from .zuul.yaml but then that wouldn't really be a backport18:25
cmurphybut it doesn't really matter either way18:25
lbragstadright - i think it's fine18:25
cmurphykukacz: yes you would, that's why i said you'd have to recreate all the role assignments18:25
kukaczthere some resources, created within admin project18:26
kukacznetworks18:26
kukaczthose also link to admin project using it's ID18:27
cmurphyyes :( we don't have any supported way of recovering that18:30
kukaczthen perhaps my only way is to attempt to recover using recreating the db records?18:30
cmurphykukacz: like i said, no guarantees18:50
cmurphylbragstad: could you also review https://review.opendev.org/680570 and https://review.opendev.org/680572 so we can get them into queens18:50
kukaczcmurphy: of course, I don't expect guarantees18:52
lbragstadcmurphy nice - reviewed18:52
lbragstadkicked the rocky review into the gate... need another review on the stable/queens one though18:52
kukaczcmurphy: now at least Keystone replies on API request. checking the overall situation18:53
*** trident has quit IRC18:57
*** trident has joined #openstack-keystone19:00
*** dave-mccowan has joined #openstack-keystone19:10
*** markvoelker has joined #openstack-keystone19:36
*** markvoelker has quit IRC19:38
*** markvoelker has joined #openstack-keystone19:38
*** gyee has quit IRC19:39
*** gyee has joined #openstack-keystone19:39
openstackgerritColleen Murphy proposed openstack/keystone master: Re-enable line-length linter  https://review.opendev.org/68955920:40
*** markvoelker has quit IRC21:14
*** raildo has quit IRC21:20
*** dklyle has quit IRC21:30
*** NM has quit IRC21:49
*** dklyle has joined #openstack-keystone22:10
*** dklyle has quit IRC22:15
*** david-lyle has joined #openstack-keystone22:15
*** markvoelker has joined #openstack-keystone23:15
*** markvoelker has quit IRC23:19
*** gyee has quit IRC23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!