Thursday, 2023-11-09

opendevreviewYi Feng proposed openstack/keystonemiddleware master: [WIP] Add FT for External OAuth2.0 Server Support  https://review.opendev.org/c/openstack/keystonemiddleware/+/89991100:45
opendevreviewYi Feng proposed openstack/keystonemiddleware master: [WIP] Add FT for External OAuth2.0 Server Support  https://review.opendev.org/c/openstack/keystonemiddleware/+/89991101:13
*** mhen_ is now known as mhen03:03
opendevreviewYi Feng proposed openstack/keystonemiddleware master: [WIP] Add FT for External OAuth2.0 Server Support  https://review.opendev.org/c/openstack/keystonemiddleware/+/89991103:07
opendevreviewYi Feng proposed openstack/keystonemiddleware master: [WIP] Add FT for External OAuth2.0 Server Support  https://review.opendev.org/c/openstack/keystonemiddleware/+/89991106:07
opendevreviewYi Feng proposed openstack/keystonemiddleware master: [WIP] Add FT for External OAuth2.0 Server Support  https://review.opendev.org/c/openstack/keystonemiddleware/+/89991107:11
opendevreviewYi Feng proposed openstack/keystonemiddleware master: [WIP] Add FT for External OAuth2.0 Server Support  https://review.opendev.org/c/openstack/keystonemiddleware/+/89991108:16
opendevreviewJaromír Wysoglad proposed openstack/keystoneauth master: Fix "dictionary changed size during iteration"  https://review.opendev.org/c/openstack/keystoneauth/+/90053014:23
*** carthaca_ is now known as carthaca15:02
mhenHi! Regarding the bug mentioned in yesterday's meeting that I've been creating a patchset for I wanted to replicate the failing rbac tempests from keystone-tempest-plugin locally using a devstack.15:02
mhenThe tests in question are skipped unless enforce_scope is enabled, so I enabled it. However, this makes any kind of request fail. How do I need to change a devstack configuration to make enforce_scope work?15:03
mhenI simply enabled the options (enforce_scope and enforce_new_defaults) in keystone.conf and restarted Keystone.15:04
mhenokay, it works in the client if I unset any domain or project scope related envvars and use "export OS_SYSTEM_SCOPE=all"15:13
mhenbut Tempest fails15:14
mhenI believe I have set all options that relate to enforce_scope in my tempest.conf yet it fails to properly scope its authentications during tests15:18
opendevreviewJaromír Wysoglad proposed openstack/keystoneauth master: Fix "dictionary changed size during iteration"  https://review.opendev.org/c/openstack/keystoneauth/+/90053015:37
opendevreviewJaromír Wysoglad proposed openstack/keystoneauth master: Fix "dictionary changed size during iteration"  https://review.opendev.org/c/openstack/keystoneauth/+/90053015:38
mhensolved it15:49
mhenhad to remove "admin_project_name" and "admin_domain_name" from my tempest.conf, which effectively mimics the changes I did to the envvars for the client15:49
mhensorry for the noise15:50
opendevreviewMarkus Hentsch proposed openstack/keystone-tempest-plugin master: Fix domain tests for changed list_domains scoping behavior  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/90054516:41
opendevreviewMarkus Hentsch proposed openstack/keystone-tempest-plugin master: Fix domain tests for changed list_domains scoping behavior  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/90054516:43
opendevreviewMarkus Hentsch proposed openstack/keystone master: Add domain scoping to list_domains  https://review.opendev.org/c/openstack/keystone/+/90002816:45
opendevreviewMarkus Hentsch proposed openstack/keystone master: Add domain scoping to list_domains  https://review.opendev.org/c/openstack/keystone/+/90002816:47
opendevreviewMarkus Hentsch proposed openstack/keystone-tempest-plugin master: Fix domain tests for changed list_domains scoping behavior  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/90054516:48

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!