| openstackgerrit | Ghanshyam Mann proposed openstack/keystone-tempest-plugin master: [goal] Migrate keystone-tempest-plugin jobs to focal https://review.opendev.org/743115 | 00:02 |
|---|---|---|
| openstackgerrit | Ghanshyam Mann proposed openstack/python-keystoneclient master: DNM: testing gate on ubuntu focal https://review.opendev.org/743116 | 00:03 |
| openstackgerrit | Ghanshyam Mann proposed openstack/keystone master: DNM: testing gate on ubuntu focal https://review.opendev.org/743117 | 00:03 |
| openstackgerrit | Ghanshyam Mann proposed openstack/keystoneauth master: DNM: testing gate on ubuntu focal https://review.opendev.org/743118 | 00:03 |
| openstackgerrit | Ghanshyam Mann proposed openstack/ldappool master: DNM: testing gate on ubuntu focal https://review.opendev.org/743119 | 00:07 |
| openstackgerrit | Ghanshyam Mann proposed openstack/keystonemiddleware master: DNM: testing gate on ubuntu focal https://review.opendev.org/743120 | 00:07 |
| openstackgerrit | Ghanshyam Mann proposed openstack/pycadf master: DNM: testing gate on ubuntu focal https://review.opendev.org/743121 | 00:07 |
| *** markvoelker has joined #openstack-keystone | 00:08 | |
| openstackgerrit | Ghanshyam Mann proposed openstack/keystone-specs master: DNM: testing gate on ubuntu focal https://review.opendev.org/743122 | 00:09 |
| *** markvoelker has quit IRC | 00:12 | |
| *** markvoelker has joined #openstack-keystone | 00:28 | |
| *** markvoelker has quit IRC | 00:33 | |
| *** jamesmcarthur has joined #openstack-keystone | 00:50 | |
| *** jamesmcarthur has quit IRC | 01:51 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:55 | |
| *** jamesmcarthur has quit IRC | 02:15 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:27 | |
| *** rcernin has quit IRC | 02:31 | |
| *** jamesmcarthur has quit IRC | 02:33 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:36 | |
| *** jamesmcarthur has quit IRC | 02:37 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:39 | |
| *** rcernin has joined #openstack-keystone | 02:40 | |
| *** rcernin has quit IRC | 02:40 | |
| *** rcernin has joined #openstack-keystone | 02:41 | |
| *** jamesmcarthur has quit IRC | 02:53 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:35 | |
| *** jamesmcarthur has quit IRC | 03:45 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:45 | |
| *** jamesmcarthur has quit IRC | 03:52 | |
| *** dave-mccowan has quit IRC | 04:37 | |
| *** markvoelker has joined #openstack-keystone | 04:38 | |
| *** markvoelker has quit IRC | 04:42 | |
| *** abdysn has joined #openstack-keystone | 05:14 | |
| *** Krenair has joined #openstack-keystone | 05:48 | |
| *** rcernin has quit IRC | 05:50 | |
| *** rcernin has joined #openstack-keystone | 05:52 | |
| *** markvoelker has joined #openstack-keystone | 05:58 | |
| *** markvoelker has quit IRC | 06:03 | |
| *** rcernin has quit IRC | 06:21 | |
| *** rcernin has joined #openstack-keystone | 06:22 | |
| *** xek has joined #openstack-keystone | 06:38 | |
| *** bengates has joined #openstack-keystone | 06:59 | |
| *** vishakha has joined #openstack-keystone | 07:11 | |
| *** rcernin has quit IRC | 07:28 | |
| *** sapd1 has quit IRC | 07:52 | |
| *** vishalmanchanda has joined #openstack-keystone | 08:29 | |
| *** rcernin has joined #openstack-keystone | 08:30 | |
| *** rcernin has quit IRC | 08:35 | |
| *** bengates has quit IRC | 08:56 | |
| *** bengates_ has joined #openstack-keystone | 08:57 | |
| *** xek has quit IRC | 09:06 | |
| *** rcernin has joined #openstack-keystone | 09:25 | |
| *** rcernin has quit IRC | 09:30 | |
| *** also_stingrayza is now known as stingrayza | 09:56 | |
| *** tkajinam has quit IRC | 10:10 | |
| *** markvoelker has joined #openstack-keystone | 10:49 | |
| *** markvoelker has quit IRC | 10:54 | |
| *** xek has joined #openstack-keystone | 11:10 | |
| *** xek has quit IRC | 11:21 | |
| *** rcernin has joined #openstack-keystone | 11:23 | |
| *** raildo has joined #openstack-keystone | 11:30 | |
| *** xek has joined #openstack-keystone | 11:51 | |
| *** markvoelker has joined #openstack-keystone | 12:23 | |
| *** dave-mccowan has joined #openstack-keystone | 12:31 | |
| *** evrardjp has quit IRC | 12:32 | |
| *** evrardjp has joined #openstack-keystone | 12:32 | |
| *** evrardjp has quit IRC | 12:32 | |
| *** evrardjp has joined #openstack-keystone | 12:33 | |
| *** dave-mccowan has quit IRC | 12:37 | |
| *** lbragstad has joined #openstack-keystone | 12:53 | |
| *** stingrayza has quit IRC | 13:25 | |
| *** stingrayza has joined #openstack-keystone | 13:26 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add unit test for httpbasicauth and discovery https://review.opendev.org/743227 | 13:26 |
| *** rcernin has quit IRC | 13:29 | |
| *** stingrayza has quit IRC | 13:30 | |
| *** stingrayza has joined #openstack-keystone | 13:33 | |
| *** rcernin has joined #openstack-keystone | 14:22 | |
| *** hoonetorg has quit IRC | 14:35 | |
| *** abdysn has quit IRC | 14:39 | |
| *** hoonetorg has joined #openstack-keystone | 14:49 | |
| *** rcernin has quit IRC | 14:56 | |
| *** beekneemech is now known as bnemec | 15:00 | |
| *** diurnalist has joined #openstack-keystone | 15:17 | |
| openstackgerrit | Dmitry Tantsur proposed openstack/keystoneauth master: Fix get_endpoint_data for non-keystone plugins https://review.opendev.org/743227 | 15:21 |
| *** jamesmcarthur has joined #openstack-keystone | 15:42 | |
| *** gyee has joined #openstack-keystone | 15:47 | |
| *** markvoelker has quit IRC | 16:03 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Fix docs builds for modern stevedors https://review.opendev.org/743274 | 16:13 |
| *** bengates has joined #openstack-keystone | 16:28 | |
| *** raildo has quit IRC | 16:28 | |
| *** bengates_ has quit IRC | 16:29 | |
| *** raildo has joined #openstack-keystone | 16:31 | |
| *** bengates has quit IRC | 16:38 | |
| *** bengates has joined #openstack-keystone | 16:39 | |
| *** bengates has quit IRC | 16:43 | |
| *** xek has quit IRC | 16:46 | |
| *** rcernin has joined #openstack-keystone | 16:54 | |
| *** rcernin has quit IRC | 16:58 | |
| openstackgerrit | Dmitry Tantsur proposed openstack/keystoneauth master: [WIP] Correct endpoint discovery for non-keystone plugins https://review.opendev.org/743282 | 16:59 |
| openstackgerrit | Merged openstack/pycadf master: Fix hacking min version to 3.0.1 https://review.opendev.org/727530 | 17:04 |
| *** bengates has joined #openstack-keystone | 17:10 | |
| *** bengates has quit IRC | 17:19 | |
| *** jamesmcarthur has quit IRC | 17:26 | |
| *** jamesmcarthur has joined #openstack-keystone | 17:27 | |
| *** vishalmanchanda has quit IRC | 18:18 | |
| *** evrardjp has quit IRC | 18:21 | |
| *** evrardjp has joined #openstack-keystone | 18:24 | |
| *** vishakha has quit IRC | 18:50 | |
| openstackgerrit | Raildo Mascena proposed openstack/oslo.policy master: Improving documentation about target resources https://review.opendev.org/743318 | 19:14 |
| *** jamesmcarthur has quit IRC | 19:43 | |
| *** xek has joined #openstack-keystone | 19:48 | |
| *** jamesmcarthur has joined #openstack-keystone | 19:51 | |
| *** jamesmcarthur has quit IRC | 19:55 | |
| *** jamesmcarthur has joined #openstack-keystone | 19:56 | |
| *** jamesmcarthur has quit IRC | 20:14 | |
| *** jamesmcarthur has joined #openstack-keystone | 20:17 | |
| *** mordred has joined #openstack-keystone | 21:00 | |
| mordred | lbragstad_, knikolla: https://review.opendev.org/#/c/743274 | 21:01 |
| *** jamesmcarthur has quit IRC | 21:07 | |
| *** jamesmcarthur has joined #openstack-keystone | 21:08 | |
| *** raildo has quit IRC | 21:14 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-tempest-plugin master: WIP/PoC:Add RBAC tests https://review.opendev.org/686305 | 21:18 |
| *** jamesmcarthur has quit IRC | 21:22 | |
| *** jamesmcarthur has joined #openstack-keystone | 21:27 | |
| *** jamesmcarthur has quit IRC | 21:32 | |
| *** jamesmcarthur has joined #openstack-keystone | 21:34 | |
| *** rcernin has joined #openstack-keystone | 21:53 | |
| *** rcernin has quit IRC | 21:58 | |
| *** rcernin has joined #openstack-keystone | 21:59 | |
| openstackgerrit | Merged openstack/keystoneauth master: Fix docs builds for modern stevedors https://review.opendev.org/743274 | 22:20 |
| *** renich has joined #openstack-keystone | 22:24 | |
| renich | Good $time_of_day! o/ | 22:25 |
| renich | I have an Ubuntu 20.04 ussuri installation of keystone and swift. I am wondering what is required in order to be able to use the s3cmd command with it. openstack commands work fine. | 22:26 |
| renich | I've tried generating credentials with: openstack ec2 credentials create, but either they don't work or I have my base_host wrong. | 22:26 |
| renich | My OS_AUTH_URL is in the following form: http://host.domain.tld:5000/v3 | 22:27 |
| timburke | renich, how's your swift pipeline look? | 22:27 |
| renich | and that doesn't work for s3cmd's host_base | 22:27 |
| timburke | (in particular, does it have s3api and s3token present? if so, what's the order like between those two and auth_token?) | 22:28 |
| renich | timburke: pipeline = catch_errors gatekeeper healthcheck proxy-logging cache listing_formats container_sync bulk tempurl ratelimit copy container-quotas account-quotas slo dlo versioned_writes symlink proxy-logging proxy-server | 22:28 |
| timburke | wait, so no auth_token middleware? hmm... | 22:30 |
| renich | ah, I might've forgoten s3api and s3token | 22:30 |
| *** jamesmcarthur has quit IRC | 22:31 | |
| renich | OK, I've been trying a ton of stuff and I might've forgotten to restore it. One sec | 22:31 |
| *** jamesmcarthur has joined #openstack-keystone | 22:31 | |
| timburke | no worries, i know how that can go :-) you'll want something like .... authtoken s3api s3token keystoneauth ... in your pipeline, probably between ratelimit and copy | 22:33 |
| renich | yes | 22:34 |
| renich | exactly | 22:34 |
| renich | pipeline = catch_errors gatekeeper healthcheck proxy-logging cache listing_formats container_sync bulk tempurl ratelimit authtoken s3api s3token keystoneauth copy container-quotas account-quotas slo dlo versioned_writes symlink proxy-logging proxy-server | 22:34 |
| timburke | are you specifying the keystone or swift host in s3cmd's config? fwiw, i seem to remember needing to specify both host_base and host_bucket (and setting them to the same thing) | 22:37 |
| renich | timburke: yes, twice: host_base and host_bucket both point to myhost.mydomain.tld:5000/v3 | 22:38 |
| timburke | but port 5000 -- that's for keystone, yeah? you'll want the swift netloc -- so if it's all on the same box, probably something like myhost.mydomain.tld:8080 | 22:40 |
| timburke | might also need to turn off use_https (it defaults to enabled iirc) | 22:40 |
| renich | But, I am suing apache's config. It only listens on port 5000. | 22:40 |
| renich | Yep, I wasn't using the use_https off option. | 22:40 |
| renich | https://github.com/openstack/keystone/blob/master/httpd/wsgi-keystone.conf <- that's what I have | 22:41 |
| renich | errr... without port 37373 | 22:41 |
| renich | ... which is, pretty much that. | 22:42 |
| timburke | but how's swift running? s3cmd will talk to swift, then inside the proxy pipeline, swift will go out and talk to keystone to validate that the request is properly signed. the client won't need to talk to keystone at all | 22:43 |
| renich | And I always thought that requests were proxied via keystone... | 22:44 |
| renich | ah, you're right. Something is listening to port 8080 | 22:44 |
| renich | And it is the swift proxy! oh! | 22:45 |
| timburke | good sign, good sign! | 22:45 |
| renich | :D | 22:45 |
| renich | So, yeah. Curl tells me I am Unauthorized. | 22:46 |
| renich | https://paste.centos.org/view/58cbbd70 | 22:47 |
| renich | Also, s3cmd tells me the same | 22:47 |
| *** tkajinam has joined #openstack-keystone | 22:52 | |
| *** renich has quit IRC | 22:54 | |
| timburke | in case anyone's looking for the punchline -- we needed `delay_auth_decision = true` in authtoken's middleware config in the swift proxy to give s3api/s3token a chance to make an auth decision instead | 22:55 |
| *** xek has quit IRC | 22:59 | |
| *** hoonetorg has quit IRC | 23:06 | |
| *** hoonetorg has joined #openstack-keystone | 23:19 | |
| *** jamesmcarthur has quit IRC | 23:28 | |
| *** jamesmcarthur has joined #openstack-keystone | 23:29 | |
| *** jamesmcarthur has quit IRC | 23:33 | |
| *** spatel has joined #openstack-keystone | 23:46 | |
| *** spatel has quit IRC | 23:50 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!