Friday, 2020-02-14

*** jmlowe has joined #openstack-keystone00:15
*** dave-mccowan has joined #openstack-keystone00:18
*** jmlowe has quit IRC00:33
*** migawa is now known as migawa|AFK00:52
*** migawa|AFK is now known as migawa00:52
*** spatel has joined #openstack-keystone01:01
*** dave-mccowan has quit IRC01:32
*** gyee has quit IRC01:36
*** vishalmanchanda has joined #openstack-keystone01:54
*** dave-mccowan has joined #openstack-keystone01:56
*** jawad_axd has joined #openstack-keystone02:22
*** jawad_axd has quit IRC02:27
*** jawad_axd has joined #openstack-keystone02:43
*** migawa is now known as migawa|AFK02:45
*** migawa|AFK is now known as migawa02:47
*** jawad_axd has quit IRC02:47
*** jamesmcarthur has joined #openstack-keystone02:50
*** migawa is now known as migawa|AFK02:53
*** jamesmcarthur has quit IRC03:08
*** jamesmcarthur has joined #openstack-keystone03:15
*** spatel has quit IRC03:17
*** migawa|AFK is now known as migawa03:56
*** dave-mccowan has quit IRC04:13
*** jamesmcarthur has quit IRC04:21
*** jamesmcarthur has joined #openstack-keystone05:23
*** jamesmcarthur has quit IRC05:28
*** evrardjp has quit IRC05:34
*** evrardjp has joined #openstack-keystone05:34
*** migawa is now known as migawa|AFK05:53
*** migawa|AFK is now known as migawa05:54
*** wxy-xiyuan has joined #openstack-keystone06:16
*** manuvakery has joined #openstack-keystone06:27
*** jhesketh has quit IRC06:48
*** jhesketh has joined #openstack-keystone06:50
*** jhesketh has quit IRC07:15
*** dancn has joined #openstack-keystone07:17
*** jawad_axd has joined #openstack-keystone07:22
*** jhesketh has joined #openstack-keystone07:25
*** shyamb has joined #openstack-keystone07:41
*** shyamb has quit IRC07:47
*** ivve has joined #openstack-keystone07:56
*** dancn has quit IRC08:12
openstackgerritVishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups  https://review.opendev.org/70427108:21
*** tesseract has joined #openstack-keystone08:21
openstackgerritVishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups  https://review.opendev.org/70427108:23
*** tkajinam has quit IRC08:42
*** shyamb has joined #openstack-keystone08:51
*** rcernin has quit IRC09:12
*** xek has joined #openstack-keystone09:16
*** dancn has joined #openstack-keystone09:27
*** baffle has joined #openstack-keystone09:29
*** shyamb has quit IRC09:33
openstackgerritVishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups  https://review.opendev.org/70427109:38
*** shyamb has joined #openstack-keystone09:40
*** shyamb has quit IRC09:52
*** rcernin has joined #openstack-keystone09:59
*** rcernin has quit IRC10:17
*** vishalmanchanda has quit IRC10:28
openstackgerritVishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion  https://review.opendev.org/58821110:34
*** shyamb has joined #openstack-keystone10:36
openstackgerritVishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups  https://review.opendev.org/70427110:38
openstackgerritVishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups  https://review.opendev.org/70427110:43
*** jopdorp has joined #openstack-keystone10:48
jopdorphi!10:48
jopdorpcan anyone help me with role assignments through the api?10:49
jopdorpI was able to create a project with is_domain=True10:49
jopdorpI was able to create a user and a role on that project10:49
jopdorpbut I wasn't able to assign that role to the user10:49
jopdorpI'm using a token from admin on the default domain with scope system all10:50
jopdorpkeystone give me 403 when i try to assign the role to the user10:52
jopdorpcould it be that what I'm trying to do is only possible with the cli?11:05
jopdorpbecause it seems that the admin user from domain 'default' has no rights to assign roles to users on the newly created domain11:06
jopdorpor should i always add the 'default' project as the parent id?11:10
jopdorpI'm trying to make a multi tenant cloud11:10
jopdorpIt's going to be a public cloud11:11
*** dancn has quit IRC11:14
vishakhajopdorp Could you share the api you used to assign a system scoped token with the logs?11:19
*** tkajinam has joined #openstack-keystone11:58
*** shyamb has quit IRC11:59
*** shyamb has joined #openstack-keystone12:01
*** shyamb has quit IRC12:25
*** raildo has joined #openstack-keystone12:44
*** jopdorp has quit IRC12:55
*** dave-mccowan has joined #openstack-keystone13:03
*** tkajinam has quit IRC13:17
*** ivve has quit IRC13:28
*** jawad_axd has quit IRC14:38
*** jawad_axd has joined #openstack-keystone14:39
*** jawad_axd has quit IRC14:41
*** manuvakery has quit IRC14:47
*** xek has quit IRC16:10
*** jamesmcarthur has joined #openstack-keystone16:16
*** manuvakery has joined #openstack-keystone16:24
*** jmlowe has joined #openstack-keystone16:57
*** tesseract has quit IRC17:29
*** evrardjp has quit IRC17:34
*** evrardjp has joined #openstack-keystone17:34
*** mvkr has quit IRC17:42
*** gmann is now known as gmann_afk17:42
*** jamesmcarthur has quit IRC17:54
*** jamesmcarthur has joined #openstack-keystone17:58
*** jamesmcarthur has quit IRC18:07
*** jamesmcarthur has joined #openstack-keystone18:09
*** jamesmcarthur has quit IRC18:25
*** jamesmcarthur has joined #openstack-keystone18:26
*** manuvakery has quit IRC18:27
*** jamesmcarthur has quit IRC18:31
*** jamesmcarthur has joined #openstack-keystone18:36
openstackgerritColleen Murphy proposed openstack/keystone master: Constraint dependencies for docs build  https://review.opendev.org/70789518:38
cmurphycould use a fast review of ^ once it passes ci so that we can get that backported and fix the stable branches18:39
*** dancn has joined #openstack-keystone18:45
*** jmlowe has quit IRC18:46
*** jamesmcarthur has quit IRC18:48
gagehugodone18:53
cmurphytyty18:58
*** cmurphy is now known as cmorpheus19:05
*** mvkr has joined #openstack-keystone19:10
*** dancn has quit IRC19:26
*** mvkr has quit IRC19:29
*** jmlowe has joined #openstack-keystone20:03
*** gmann_afk is now known as gmann20:12
cmorpheuslbragstad__: knikolla https://review.opendev.org/707895 is green20:19
*** xek has joined #openstack-keystone20:32
*** jmlowe has quit IRC21:00
cmorpheuslbragstad__: i'm playing with unified limits, i have enforcement_model=strict_two_level and a registered resource limit of 3 and i want to set the project limit to 5, and it fails - i guess because its parent is the default domain and it's effective limit is the same as the registered limit? is that what it's supposed to do? i can override the registered limit when i'm using the flat enforcement21:05
cmorpheusmodel21:05
*** mvkr has joined #openstack-keystone21:20
*** dave-mccowan has quit IRC21:23
*** raildo has quit IRC21:29
*** jmlowe has joined #openstack-keystone21:36
*** jmlowe has quit IRC22:04
*** xek has quit IRC22:13
*** xek has joined #openstack-keystone22:15
*** xek has quit IRC22:47
*** jmlowe has joined #openstack-keystone23:48
*** spatel has joined #openstack-keystone23:58
cmorpheusthe more i think about it the more it makes sense. i can override the limit for the default domain and then set a project limit.23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!