| *** threestrands has joined #openstack-keystone | 00:04 | |
| *** gyee has quit IRC | 01:04 | |
| *** viks____ has joined #openstack-keystone | 02:17 | |
| *** spatel has quit IRC | 02:52 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-tempest-plugin master: Don't test openstack_groups on stable branches https://review.opendev.org/721771 | 03:04 |
|---|---|---|
| cmurphy | we broke the stable branches ^ | 03:04 |
| *** spatel has joined #openstack-keystone | 03:47 | |
| *** spatel has quit IRC | 03:53 | |
| *** evrardjp has quit IRC | 04:35 | |
| *** evrardjp has joined #openstack-keystone | 04:35 | |
| *** bnemec has quit IRC | 05:22 | |
| *** rcernin has quit IRC | 05:24 | |
| *** rcernin has joined #openstack-keystone | 06:09 | |
| *** rcernin has quit IRC | 06:10 | |
| *** rcernin has joined #openstack-keystone | 06:11 | |
| *** rcernin has quit IRC | 06:25 | |
| *** rcernin has joined #openstack-keystone | 06:26 | |
| *** threestrands has quit IRC | 06:53 | |
| *** threestrands has joined #openstack-keystone | 06:54 | |
| *** threestrands has quit IRC | 06:55 | |
| *** threestrands has joined #openstack-keystone | 06:55 | |
| *** threestrands has quit IRC | 06:56 | |
| *** threestrands has joined #openstack-keystone | 06:56 | |
| *** threestrands has quit IRC | 06:58 | |
| *** threestrands has joined #openstack-keystone | 06:58 | |
| *** threestrands has quit IRC | 06:59 | |
| *** threestrands has joined #openstack-keystone | 06:59 | |
| *** threestrands has quit IRC | 07:01 | |
| *** threestrands has joined #openstack-keystone | 07:01 | |
| *** threestrands has quit IRC | 07:02 | |
| *** threestrands has joined #openstack-keystone | 07:02 | |
| *** threestrands has quit IRC | 07:04 | |
| *** threestrands has joined #openstack-keystone | 07:04 | |
| *** threestrands has quit IRC | 07:05 | |
| *** threestrands has joined #openstack-keystone | 07:06 | |
| *** bengates has joined #openstack-keystone | 07:06 | |
| *** bengates has quit IRC | 07:06 | |
| *** threestrands has quit IRC | 07:07 | |
| *** bengates has joined #openstack-keystone | 07:07 | |
| *** threestrands has joined #openstack-keystone | 07:07 | |
| *** threestrands has quit IRC | 07:08 | |
| *** threestrands has joined #openstack-keystone | 07:08 | |
| *** dancn has joined #openstack-keystone | 07:09 | |
| *** threestrands has quit IRC | 07:10 | |
| *** threestrands has joined #openstack-keystone | 07:10 | |
| *** threestrands has quit IRC | 07:11 | |
| *** threestrands has joined #openstack-keystone | 07:12 | |
| *** threestrands has quit IRC | 07:13 | |
| *** threestrands has joined #openstack-keystone | 07:13 | |
| *** rcernin has quit IRC | 07:13 | |
| *** threestrands has quit IRC | 07:14 | |
| *** threestrands has joined #openstack-keystone | 07:14 | |
| *** threestrands has quit IRC | 07:16 | |
| *** threestrands has joined #openstack-keystone | 07:16 | |
| *** threestrands has quit IRC | 07:17 | |
| *** threestrands has joined #openstack-keystone | 07:18 | |
| *** threestrands has quit IRC | 07:19 | |
| *** threestrands has joined #openstack-keystone | 07:19 | |
| *** threestrands has quit IRC | 07:20 | |
| *** threestrands has joined #openstack-keystone | 07:21 | |
| *** threestrands has quit IRC | 07:22 | |
| *** threestrands has joined #openstack-keystone | 07:22 | |
| *** threestrands has quit IRC | 07:23 | |
| *** threestrands has joined #openstack-keystone | 07:24 | |
| *** threestrands has quit IRC | 07:25 | |
| *** threestrands has joined #openstack-keystone | 07:25 | |
| *** threestrands has quit IRC | 07:26 | |
| *** threestrands has joined #openstack-keystone | 07:27 | |
| *** threestrands has quit IRC | 07:28 | |
| *** threestrands has joined #openstack-keystone | 07:28 | |
| *** threestrands has quit IRC | 07:29 | |
| *** threestrands has joined #openstack-keystone | 07:30 | |
| *** threestrands has quit IRC | 07:31 | |
| *** threestrands has joined #openstack-keystone | 07:31 | |
| *** threestrands has quit IRC | 07:32 | |
| *** threestrands has joined #openstack-keystone | 07:33 | |
| *** threestrands has quit IRC | 07:34 | |
| *** threestrands has joined #openstack-keystone | 07:34 | |
| *** threestrands has quit IRC | 07:35 | |
| *** threestrands has joined #openstack-keystone | 07:36 | |
| *** threestrands has quit IRC | 07:37 | |
| *** threestrands has joined #openstack-keystone | 07:37 | |
| *** threestrands has quit IRC | 07:38 | |
| *** threestrands has joined #openstack-keystone | 07:39 | |
| *** threestrands has quit IRC | 07:40 | |
| *** threestrands has joined #openstack-keystone | 07:40 | |
| *** threestrands has quit IRC | 07:41 | |
| *** threestrands has joined #openstack-keystone | 07:41 | |
| *** threestrands has quit IRC | 07:43 | |
| *** threestrands has joined #openstack-keystone | 07:43 | |
| *** threestrands has quit IRC | 07:44 | |
| *** threestrands has joined #openstack-keystone | 07:45 | |
| *** threestrands has quit IRC | 07:46 | |
| *** threestrands has joined #openstack-keystone | 07:46 | |
| *** threestrands has quit IRC | 07:47 | |
| *** xek has joined #openstack-keystone | 07:47 | |
| *** threestrands has joined #openstack-keystone | 07:47 | |
| *** threestrands has quit IRC | 07:49 | |
| *** threestrands has joined #openstack-keystone | 07:49 | |
| *** threestrands has quit IRC | 07:50 | |
| *** threestrands has joined #openstack-keystone | 07:51 | |
| *** threestrands has quit IRC | 07:52 | |
| *** threestrands has joined #openstack-keystone | 07:52 | |
| *** threestrands has quit IRC | 07:53 | |
| *** spatel has joined #openstack-keystone | 07:53 | |
| *** threestrands has joined #openstack-keystone | 07:54 | |
| *** vishalmanchanda has joined #openstack-keystone | 07:54 | |
| *** threestrands has quit IRC | 07:55 | |
| *** threestrands has joined #openstack-keystone | 07:55 | |
| *** threestrands has quit IRC | 07:56 | |
| *** threestrands has joined #openstack-keystone | 07:57 | |
| *** threestrands has quit IRC | 07:58 | |
| *** threestrands has joined #openstack-keystone | 07:58 | |
| *** spatel has quit IRC | 07:58 | |
| *** threestrands has quit IRC | 07:59 | |
| *** threestrands has joined #openstack-keystone | 08:00 | |
| *** threestrands has quit IRC | 08:01 | |
| *** threestrands has joined #openstack-keystone | 08:01 | |
| *** threestrands has quit IRC | 08:02 | |
| *** threestrands has joined #openstack-keystone | 08:02 | |
| *** threestrands has quit IRC | 08:04 | |
| *** threestrands has joined #openstack-keystone | 08:04 | |
| *** threestrands has quit IRC | 08:05 | |
| *** threestrands has joined #openstack-keystone | 08:06 | |
| *** threestrands has quit IRC | 08:07 | |
| *** threestrands has joined #openstack-keystone | 08:07 | |
| *** threestrands has quit IRC | 08:08 | |
| *** tkajinam has quit IRC | 08:15 | |
| *** abdysn has joined #openstack-keystone | 08:40 | |
| *** manuvakery has quit IRC | 09:32 | |
| *** spatel has joined #openstack-keystone | 09:42 | |
| *** spatel has quit IRC | 09:46 | |
| *** evrardjp has quit IRC | 09:51 | |
| *** evrardjp has joined #openstack-keystone | 09:51 | |
| *** hemna has quit IRC | 10:18 | |
| *** hemna has joined #openstack-keystone | 10:19 | |
| *** takamatsu has joined #openstack-keystone | 10:27 | |
| *** bengates has quit IRC | 10:33 | |
| *** bengates has joined #openstack-keystone | 10:34 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Fix the typo on attribute word. https://review.opendev.org/721739 | 10:36 |
| *** abdysn has quit IRC | 10:39 | |
| openstackgerrit | Merged openstack/keystone master: Parse cli args in get_enforcer https://review.opendev.org/690630 | 11:06 |
| openstackgerrit | Merged openstack/keystone master: Remove a note related to UUID tokens from example configuration https://review.opendev.org/720037 | 11:06 |
| *** dancn has quit IRC | 11:38 | |
| *** dancn has joined #openstack-keystone | 11:43 | |
| kklimonda | this question was brought up on the ML, but no response so far - when Keystone is federated with SSO (Keycloack OIDC or SAML2 IdP, "local" users created in keystone) and only some users are authorized to access cloud, what should be responsible for displaying an error page on login attempt? | 11:49 |
| kklimonda | right now, user goes to horizon, gets redirected to keyclok, authenticates there, but then keystone returns JSON response with 401 response and it's displayed to the user. | 11:51 |
| *** raildo has joined #openstack-keystone | 11:53 | |
| *** manuvakery has joined #openstack-keystone | 12:04 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Update keystone architecture doc https://review.opendev.org/719946 | 12:54 |
| *** abdysn has joined #openstack-keystone | 13:09 | |
| *** os-devan777 has joined #openstack-keystone | 13:14 | |
| *** os-devan777 has quit IRC | 13:25 | |
| *** abdysn has quit IRC | 13:32 | |
| *** Abdallahyas has joined #openstack-keystone | 13:32 | |
| *** bnemec has joined #openstack-keystone | 14:01 | |
| *** gshippey has joined #openstack-keystone | 14:04 | |
| *** manuvakery has quit IRC | 14:14 | |
| *** Abdallahyas has quit IRC | 14:21 | |
| *** abdysn has joined #openstack-keystone | 14:21 | |
| *** manuvakery has joined #openstack-keystone | 15:10 | |
| *** gyee has joined #openstack-keystone | 15:11 | |
| *** abdysn has quit IRC | 15:20 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Enable groups testing for K2K scenarios https://review.opendev.org/722024 | 15:40 |
| *** spatel has joined #openstack-keystone | 15:50 | |
| *** dancn has quit IRC | 15:59 | |
| *** dancn has joined #openstack-keystone | 16:12 | |
| *** bengates has quit IRC | 16:31 | |
| *** evrardjp has quit IRC | 16:35 | |
| *** evrardjp has joined #openstack-keystone | 16:35 | |
| *** lbragstad has quit IRC | 16:51 | |
| *** lbragstad has joined #openstack-keystone | 16:51 | |
| cmurphy | gmann: raildo: want to sync up here on next steps for the RBAC popup team? | 17:26 |
| raildo | o/ | 17:26 |
| gmann | hi | 17:27 |
| raildo | hey gmann :) I was talking with cmurphy about be volunteering to help with RBAC popup team, and I would like to sync with you to understand what should I focus on | 17:29 |
| cmurphy | so I've tried to collect tracking information for each project in https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popup_Team - so far only the nova team has made significant progress, the cyborg team seems to have started but not finished | 17:30 |
| gmann | raildo: thanks for helping. | 17:30 |
| cmurphy | i've tried to help where i can but haven't had much time to really push projects into action | 17:30 |
| gmann | I think once projects finish the Ussuri release work, we have start reaching out to project listed on wiki about their spec and way forward | 17:31 |
| gmann | I think weekly or biweekly meeting with all the interested projects contact person will be good. in case they are stuck on something or for the initial pic of how policy will look like for operator if they change | 17:32 |
| raildo | cool, I was tracking the nova progress for a while, do we have any plan for the other services like neutron, cinder? | 17:32 |
| raildo | gmann++ | 17:32 |
| gmann | neutron i talked to in last PTG and they are like waiting for nova to finish which is done now, doc patch is in review. | 17:33 |
| gmann | cinder can also be good candidate. | 17:33 |
| cmurphy | i remember at the ptg the barbican team was enthusiastic about it but i'm not sure they've worked much on it | 17:34 |
| gmann | ok, that sounds good. | 17:35 |
| raildo | awesome, so gmann cmurphy if you accept my help, I would be more than happy talk with the PTLs for those services on the next PTG, so we can show the Keystone/Nova progress and evaluate their planning for the next cycle | 17:35 |
| * redrobot hears something about barbican | 17:35 | |
| raildo | redrobot, haha and I'll make you heard more about this | 17:36 |
| gmann | raildo: that is good plan. and triggering this topic so that they can discuss in PTG also | 17:36 |
| cmurphy | redrobot: o/ raildo is going to be taking over for me as co-chair of the rbac team and we were discussing how projects have been progressing on it | 17:36 |
| raildo | gmann, exactly :) | 17:36 |
| redrobot | cmurphy, raildo, awesome | 17:36 |
| cmurphy | gmann: ++ | 17:36 |
| raildo | sounds like a plan :) cmurphy do I need to make something to confirm our transition? send an email to openstack-dev or something like that? | 17:37 |
| redrobot | raildo, feel free to add it to the Barbican PTG agenda | 17:37 |
| redrobot | #link https://etherpad.opendev.org/p/barbican-ussuri-ptg | 17:37 |
| raildo | redrobot, thanks for the link! I'll make sure to add a topic for it | 17:38 |
| redrobot | #undo | 17:38 |
| cmurphy | raildo: i'll submit a change to https://governance.openstack.org/tc/reference/popup-teams.html#secure-default-policies | 17:38 |
| redrobot | oops that's the old one | 17:38 |
| redrobot | #link https://etherpad.opendev.org/p/barbican-victoria-topics | 17:38 |
| redrobot | raildo, ^^^ | 17:38 |
| raildo | cmurphy, cool | 17:38 |
| gmann | how about starting meeting from May 2nd week after Ussuri release and we can trigger the topic for projects ? | 17:38 |
| raildo | gmann, makes sense to me.. do we want to use part of the keystone meeting for it or do we have another time slot for just this topic? | 17:39 |
| gmann | day and time of meeting we can check with doodle vote | 17:39 |
| raildo | ok | 17:39 |
| gmann | raildo: we can use separate slot not to disturb other topic in keystone meeting. | 17:40 |
| gmann | i can check some free slot | 17:40 |
| raildo | ack | 17:41 |
| gmann | cool. i will check slot and ask for meeting time on ML by this or next week early. | 17:43 |
| raildo | gmann, cmurphy awesome, so thanks for the updates! I'll try my best to make a great progress on this front for the next cycles :) | 17:44 |
| gmann | +1, thanks. | 17:44 |
| cmurphy | thanks guys!! glad I'm leaving it in capable hands :D | 17:44 |
| *** os-devan777 has joined #openstack-keystone | 17:46 | |
| raildo | cmurphy, I appreciate all the hard work that you have been doing on Keystone and OpenStack in general, I wish the best for you in your next challenges | 17:47 |
| cmurphy | thanks :) | 17:47 |
| gmann | indeed. you will be missed for all those. hope you will be around over IRC or some work? but not sure.. | 17:48 |
| cmurphy | I will definitely still be around on IRC and will still try to do some reviews | 17:48 |
| gmann | nice. | 18:08 |
| cmurphy | kklimonda: sorry for not responding to your question. i don't think there's a way to configure a more friendly error message in the browser, since the message is coming from keystone and i don't think it could be rerouted back to horizon to handle. what could be possible is to fix keystone to return a custom html page instead of the ugly json object if the requester sets "Accept: text/html" in the | 18:16 |
| cmurphy | request header | 18:16 |
| os-devan777 | I am new with keystone development, I am having some trouble understanding functionality of drivers, is there a module with a simple example to understand the implementation | 18:37 |
| *** vishalmanchanda has quit IRC | 18:43 | |
| *** manuvakery has quit IRC | 19:19 | |
| *** dancn has quit IRC | 20:20 | |
| *** gshippey has quit IRC | 20:31 | |
| *** xek has quit IRC | 20:34 | |
| knikolla | hi os-devan777, is there a driver in particular, or about how the driver mechanism works in general? | 20:38 |
| os-devan777 | hi knikolla , I wanted to know about drivers in general, however I would like to know about resource driver backend to work on a simple use case | 20:42 |
| knikolla | os-devan777: there is a base class for every driver, for the resource driver it would be https://opendev.org/openstack/keystone/src/branch/master/keystone/resource/backends/base.py | 20:46 |
| knikolla | implementations extend that class and must implement all methods | 20:46 |
| *** os-devan777 has quit IRC | 21:02 | |
| *** os-devan777 has joined #openstack-keystone | 21:13 | |
| os-devan777 | knikolla : How does it integrate with keystone after that ? does it start working if i add drive config in keystone.conf ? | 21:14 |
| knikolla | os-devan777: pbr registers the entrypoints https://opendev.org/openstack/keystone/src/branch/master/setup.cfg#L131-L132 in setup.cfg | 21:16 |
| knikolla | so if you are creating your own package, a line like that, with your driver name would go in your setup.cfg | 21:17 |
| knikolla | then you'll be able to point to it through keystone.conf | 21:17 |
| os-devan777 | knikolla : Thank you, I will try it out | 21:18 |
| cmurphy | could i get another review on https://review.opendev.org/721771 and https://review.opendev.org/722024 to fix the stable branches | 21:25 |
| *** spatel has quit IRC | 21:31 | |
| *** raildo has quit IRC | 21:37 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Update master for stable/ussuri https://review.opendev.org/719197 | 22:04 |
| openstackgerrit | Merged openstack/keystonemiddleware master: Update master for stable/ussuri https://review.opendev.org/717027 | 22:19 |
| *** rcernin has joined #openstack-keystone | 22:31 | |
| *** spatel has joined #openstack-keystone | 22:44 | |
| *** tkajinam has joined #openstack-keystone | 22:54 | |
| *** lbragstad has quit IRC | 23:06 | |
| *** spatel has quit IRC | 23:07 | |
| *** spatel has joined #openstack-keystone | 23:14 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Add Python3 victoria unit tests https://review.opendev.org/719200 | 23:31 |
| *** lbragstad has joined #openstack-keystone | 23:35 | |
| *** spatel has quit IRC | 23:45 | |
| *** os-devan777 has quit IRC | 23:56 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!