Sunday, 2020-03-08

*** jamesmcarthur has quit IRC00:30
*** rcernin has joined #openstack-keystone00:38
*** hoonetorg has quit IRC00:44
*** hoonetorg has joined #openstack-keystone00:57
*** evrardjp has quit IRC05:35
*** evrardjp has joined #openstack-keystone05:35
*** abdysn has joined #openstack-keystone06:05
*** xek_ has joined #openstack-keystone09:36
*** NM has joined #openstack-keystone10:12
*** NM has quit IRC10:21
*** mvkr has quit IRC11:25
*** mvkr has joined #openstack-keystone11:37
*** joshualyle has joined #openstack-keystone12:58
*** joshualyle has quit IRC13:03
abdysnHi all13:14
*** xek_ has quit IRC13:26
*** abdysn has quit IRC14:43
*** joshualyle has joined #openstack-keystone15:02
*** joshualyle has quit IRC15:07
larsksIf I'm authenticating with application credentials, is there a way I can determine the project id associated with those credentials?15:22
*** jhesketh has quit IRC16:01
*** jhesketh has joined #openstack-keystone16:02
*** xek_ has joined #openstack-keystone16:14
knikollalarsks: https://docs.openstack.org/api-ref/identity/v3/?expanded=show-application-credential-details-detail#show-application-credential-details16:34
knikollaa get request on the application credential should give you the project_id16:35
knikollaor in general you can introspect the token https://docs.openstack.org/api-ref/identity/v3/?expanded=show-application-credential-details-detail,validate-and-show-information-for-token-detail#validate-and-show-information-for-token16:36
knikollait should work without admin if you use the same token for both x-auth-token and x-subject-token16:36
knikollaor if you're using the CLI, just doing `openstack token issue` will have a project_id field17:02
*** jamesmcarthur has joined #openstack-keystone17:33
*** jamesmcarthur has quit IRC17:34
*** jamesmcarthur has joined #openstack-keystone17:34
*** evrardjp has quit IRC17:35
*** evrardjp has joined #openstack-keystone17:35
*** bengates has joined #openstack-keystone17:37
*** bengates has quit IRC17:38
larsksknikolla: thanks, option B (request to /v3/auth/tokens) works great.17:39
*** jamesmcarthur has quit IRC17:44
*** jamesmcarthur has joined #openstack-keystone17:51
*** dancn has joined #openstack-keystone18:03
*** jamesmcarthur has quit IRC18:29
*** jamesmcarthur has joined #openstack-keystone18:31
*** jamesmcarthur has quit IRC18:36
*** jamesmcarthur has joined #openstack-keystone18:41
*** jamesmcarthur has quit IRC18:53
*** dave-mccowan has joined #openstack-keystone19:15
*** dave-mccowan has quit IRC19:31
*** jamesmcarthur has joined #openstack-keystone19:45
*** jamesmcarthur has quit IRC20:05
*** jamesmcarthur has joined #openstack-keystone20:05
*** jamesmcarthur has quit IRC20:09
*** jamesmcarthur has joined #openstack-keystone20:10
*** jamesmcarthur has quit IRC20:15
*** dancn has quit IRC20:15
*** jamesmcarthur has joined #openstack-keystone20:40
*** jamesmcarthur has quit IRC20:47
*** dancn has joined #openstack-keystone20:59
*** dave-mccowan has joined #openstack-keystone21:01
*** dave-mccowan has quit IRC21:18
*** jamesmcarthur has joined #openstack-keystone21:23
*** jamesmcarthur has quit IRC21:27
*** rcernin has quit IRC21:30
*** xek_ has quit IRC21:36
*** jamesmcarthur has joined #openstack-keystone21:56
*** jamesmcarthur has quit IRC22:01
adriantcmurphy, to use access rules with app creds, do you need matching/newest versions of keystone middleware? Or how is the path being checked on token usage?22:29
* adriant hasn't had a chance to look at that code/logic22:30
*** tkajinam has joined #openstack-keystone22:50
*** jamesmcarthur has joined #openstack-keystone23:05
*** jamesmcarthur has quit IRC23:07
*** jamesmcarthur_ has joined #openstack-keystone23:07
*** jamesmcarthur_ has quit IRC23:27
*** rcernin has joined #openstack-keystone23:27
*** jamesmcarthur has joined #openstack-keystone23:29
*** dancn has quit IRC23:49

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!