| *** jamesmcarthur has joined #openstack-keystone | 00:26 | |
| *** jamesmcarthur has quit IRC | 01:37 | |
| *** gyee has quit IRC | 01:45 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:05 | |
| *** jamesmcarthur has quit IRC | 02:20 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 02:58 | |
| *** shyamb has joined #openstack-keystone | 05:07 | |
| *** awalende has joined #openstack-keystone | 05:48 | |
| *** awalende has quit IRC | 05:52 | |
| *** pcaruana has joined #openstack-keystone | 06:18 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-specs master: Alembic Migrations Specification Change-Id: I85579947f31fb74047b33529ad8918787ac7ed34 https://review.opendev.org/698279 | 06:18 |
|---|---|---|
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-specs master: Alembic Migrations Specification https://review.opendev.org/698279 | 06:20 |
| *** shyamb has quit IRC | 06:26 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add name in GET API of application credentials https://review.opendev.org/696519 | 06:27 |
| *** shyamb has joined #openstack-keystone | 07:02 | |
| *** shyamb has quit IRC | 07:10 | |
| *** shyamb has joined #openstack-keystone | 07:10 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-specs master: Alembic Migrations Specification https://review.opendev.org/698279 | 07:12 |
| *** awalende has joined #openstack-keystone | 07:15 | |
| *** awalende has quit IRC | 07:21 | |
| *** shyamb has quit IRC | 07:41 | |
| *** tesseract has joined #openstack-keystone | 07:59 | |
| *** tkajinam has quit IRC | 08:04 | |
| *** awalende has joined #openstack-keystone | 08:23 | |
| *** amoralej|off is now known as amoralej | 08:26 | |
| *** dancn has joined #openstack-keystone | 08:39 | |
| *** shyamb has joined #openstack-keystone | 09:01 | |
| *** redrobot has quit IRC | 09:11 | |
| *** redrobot has joined #openstack-keystone | 09:13 | |
| *** spatel has joined #openstack-keystone | 09:26 | |
| *** shyamb has quit IRC | 09:57 | |
| *** shyamb has joined #openstack-keystone | 09:59 | |
| *** spatel has quit IRC | 10:28 | |
| *** shyamb has quit IRC | 10:30 | |
| *** shyamb has joined #openstack-keystone | 10:43 | |
| *** shyamb has quit IRC | 10:44 | |
| *** shyamb has joined #openstack-keystone | 10:44 | |
| *** rcernin has quit IRC | 10:56 | |
| *** pcaruana has quit IRC | 11:03 | |
| *** pcaruana has joined #openstack-keystone | 11:06 | |
| *** shyamb has quit IRC | 11:19 | |
| *** shyamb has joined #openstack-keystone | 11:24 | |
| *** shyamb has quit IRC | 12:11 | |
| *** raildo has joined #openstack-keystone | 12:28 | |
| *** shyamb has joined #openstack-keystone | 12:59 | |
| *** amoralej is now known as amoralej|lunch | 13:02 | |
| *** shyamb has quit IRC | 13:15 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:20 | |
| *** FlorianFa has joined #openstack-keystone | 13:22 | |
| *** amoralej|lunch is now known as amroalej | 13:32 | |
| *** amroalej is now known as amoralej | 13:32 | |
| *** jamesmcarthur has quit IRC | 13:36 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:37 | |
| *** jamesmcarthur has quit IRC | 13:45 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:47 | |
| *** pcaruana has quit IRC | 13:57 | |
| *** spatel has joined #openstack-keystone | 14:10 | |
| *** jamesmcarthur has quit IRC | 14:35 | |
| *** jamesmcarthur has joined #openstack-keystone | 14:35 | |
| *** pcaruana has joined #openstack-keystone | 14:36 | |
| *** jamesmcarthur has quit IRC | 14:37 | |
| *** jamesmcarthur_ has joined #openstack-keystone | 14:37 | |
| spatel | cmurphy: morning! | 14:37 |
| spatel | cmurphy: I have 3 isolated openstack environment and all 3 has isolated keystone identity, i am using terraform to deploy instances so question is can i do something that Application creds get shared between all three cloud so i don't need to maintain 3 different app creds for 3 cloud. | 14:44 |
| spatel | what do you suggest for this kind of environment? what would be the best practice here? | 14:45 |
| mordred | spatel: so - I don't know if terraform has support for reading a clouds.yaml file (I *think* gophercloud added support for that) - but that's what I use to manage resources across multiple independent clouds. it still requires having an app cred in each cloud - but that's because they are independent clouds | 14:50 |
| spatel | mordred: that is what i am looking for, we are using AWS which support multiple profiles so terraform works great. i am looking for that kind of solution where terraform read profile and load creds according. | 14:52 |
| spatel | It would be great if i can link 3 cloud keystone and make them trustable or sharable creds but not sure if that is possible or not (keystone federation ) | 14:53 |
| mordred | spatel: yeah - with openstacksdk / ansible / salt / openstackclient there is a file called clouds.yaml that allows you to configure something like that (multiople named profile) | 14:53 |
| mordred | I'm 95% sure that the gophercloud folks added at least some support for the file format, which means it should be theoretcially possible to use it from terraform | 14:54 |
| mordred | but I have no direct experience doing so | 14:54 |
| mordred | spatel: yes - it does | 14:55 |
| mordred | https://www.terraform.io/docs/providers/openstack/index.html#configuration-reference | 14:55 |
| mordred | if you look at the "cloud" option there | 14:55 |
| spatel | mordred: oh yeah! | 14:55 |
| mordred | https://docs.openstack.org/openstacksdk/latest/user/config/configuration.html#config-files | 14:56 |
| mordred | is the up to date docs - I'll see if I can figure out how to file a PR to update the terraform link | 14:56 |
| spatel | That is cool.. | 14:57 |
| mordred | https://github.com/terraform-providers/terraform-provider-openstack/pull/943 fwiw | 15:01 |
| *** lbragstad has joined #openstack-keystone | 15:04 | |
| *** jamesmcarthur_ has quit IRC | 15:15 | |
| *** jamesmcarthur has joined #openstack-keystone | 15:16 | |
| *** jamesmcarthur has quit IRC | 15:22 | |
| *** jamesmcarthur has joined #openstack-keystone | 15:23 | |
| *** spatel has quit IRC | 15:29 | |
| *** jamesmcarthur has quit IRC | 15:31 | |
| *** jamesmcarthur has joined #openstack-keystone | 15:31 | |
| *** spatel has joined #openstack-keystone | 15:32 | |
| *** jamesmcarthur has quit IRC | 15:34 | |
| *** jamesmcarthur has joined #openstack-keystone | 15:34 | |
| aning_ | cmurphy: any document about how to use keystone evet notifications? | 15:39 |
| aning_ | Basically a application wants to be notified if a user's password changed. | 15:40 |
| gagehugo | aning_ yeah one sec | 15:51 |
| vishakha | aning_: You can look into https://docs.openstack.org/keystone/latest/admin/event_notifications.html | 15:51 |
| gagehugo | ^ | 15:51 |
| gagehugo | cadf is the default notification format | 15:52 |
| gagehugo | but the auth notifications are disabled by default (They create a lot of notifications when on) | 15:52 |
| gagehugo | if you want those,then you need to set [DEFAULT] notification_opt_out: "" in the keystone conf | 15:53 |
| gagehugo | Then depending on if you want to output the notifications to a message bus (rabbitmq) or just in the keystone logs, you need to set the oslo_messaging_notifications driver config setting | 15:58 |
| gagehugo | http://paste.openstack.org/show/787504/ | 15:58 |
| gagehugo | log is easiest, rabbit requires setting up the service and providing the transport_url | 15:59 |
| aning_ | gagehugo: thx. It has to be a message (by rabbitmq) in our case. | 16:00 |
| aning_ | Do you know if a user password change will trigger an notification? | 16:01 |
| aning_ | We want to limit notificatins as much as possible, only need password change notifications (at least for now) | 16:01 |
| gagehugo | yes it should | 16:03 |
| gagehugo | [DEFAULT] notification_opt_out: "" may or may not be needed for change_password, I'm not sure | 16:04 |
| gagehugo | but if it's not, then don't set that line | 16:04 |
| *** gyee has joined #openstack-keystone | 16:05 | |
| aning_ | sounds good. Thx | 16:05 |
| *** jamesmcarthur has quit IRC | 16:09 | |
| *** jamesmcarthur has joined #openstack-keystone | 16:10 | |
| *** dave-mccowan has joined #openstack-keystone | 16:10 | |
| *** irclogbot_2 has quit IRC | 16:14 | |
| *** irclogbot_2 has joined #openstack-keystone | 16:15 | |
| *** jamesmcarthur has quit IRC | 16:15 | |
| *** jamesmcarthur has joined #openstack-keystone | 16:16 | |
| *** lbragstad has quit IRC | 16:16 | |
| *** lbragstad has joined #openstack-keystone | 16:34 | |
| *** jamesmcarthur has quit IRC | 16:42 | |
| *** jamesmcarthur has joined #openstack-keystone | 16:43 | |
| *** jamesmcarthur_ has joined #openstack-keystone | 16:47 | |
| *** tesseract has quit IRC | 16:48 | |
| *** jamesmcarthur has quit IRC | 16:51 | |
| *** raildo has quit IRC | 17:05 | |
| *** raildo has joined #openstack-keystone | 17:05 | |
| *** jamesmcarthur_ has quit IRC | 17:06 | |
| *** raildo has quit IRC | 17:06 | |
| *** raildo has joined #openstack-keystone | 17:06 | |
| *** raildo has quit IRC | 17:11 | |
| *** raildo has joined #openstack-keystone | 17:13 | |
| *** jamesmcarthur has joined #openstack-keystone | 17:32 | |
| *** raildo has quit IRC | 17:50 | |
| *** raildo has joined #openstack-keystone | 17:51 | |
| *** lbragstad has quit IRC | 17:52 | |
| *** jamesmcarthur has quit IRC | 18:04 | |
| *** jamesmcarthur has joined #openstack-keystone | 18:04 | |
| *** jamesmcarthur has quit IRC | 18:07 | |
| *** jamesmcarthur has joined #openstack-keystone | 18:07 | |
| *** dancn has quit IRC | 18:08 | |
| *** awalende_ has joined #openstack-keystone | 18:09 | |
| *** ayoung has quit IRC | 18:09 | |
| *** awalende has quit IRC | 18:13 | |
| *** awalende_ has quit IRC | 18:13 | |
| *** awalende has joined #openstack-keystone | 18:14 | |
| *** awalende has quit IRC | 18:15 | |
| *** awalende has joined #openstack-keystone | 18:15 | |
| *** aloga has quit IRC | 18:15 | |
| *** awalende has quit IRC | 18:20 | |
| *** jamesmcarthur has quit IRC | 18:22 | |
| *** cmart has joined #openstack-keystone | 18:36 | |
| *** awalende has joined #openstack-keystone | 18:38 | |
| *** amoralej is now known as amoralej|off | 18:43 | |
| *** awalende has quit IRC | 18:43 | |
| *** gmann is now known as gmann_afk | 18:53 | |
| openstackgerrit | Zane Bitter proposed openstack/oslo.policy master: Don't use string processing to combine deprecated rules https://review.opendev.org/698790 | 19:30 |
| *** cmart has quit IRC | 20:14 | |
| *** pcaruana has quit IRC | 20:19 | |
| *** spatel has quit IRC | 20:48 | |
| *** raildo has quit IRC | 22:14 | |
| *** awalende has joined #openstack-keystone | 22:15 | |
| *** cmart has joined #openstack-keystone | 22:18 | |
| *** awalende has quit IRC | 22:20 | |
| *** cmart has quit IRC | 22:21 | |
| *** gmann_afk is now known as gmann | 22:29 | |
| *** tkajinam has joined #openstack-keystone | 23:06 | |
| *** dmellado has quit IRC | 23:09 | |
| *** irclogbot_2 has quit IRC | 23:11 | |
| *** dmellado has joined #openstack-keystone | 23:11 | |
| *** irclogbot_1 has joined #openstack-keystone | 23:12 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-tempest-plugin master: WIP/PoC:Add RBAC tests https://review.opendev.org/686305 | 23:43 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!