Thursday, 2019-06-20

*** gyee has quit IRC00:15
*** rcernin has quit IRC00:25
*** rcernin has joined #openstack-keystone00:27
*** lbragstad has quit IRC00:49
*** markvoelker has joined #openstack-keystone01:02
*** rcernin_ has joined #openstack-keystone01:05
*** rcernin has quit IRC01:06
*** lbragstad has joined #openstack-keystone01:07
*** lbragstad has quit IRC01:20
*** markvoelker has quit IRC01:22
*** liushuo_ has joined #openstack-keystone01:22
*** liushuobj__ has quit IRC01:25
*** ayoung has joined #openstack-keystone01:35
*** spsurya has joined #openstack-keystone01:39
*** jamesmcarthur has joined #openstack-keystone02:47
*** ayoung has quit IRC03:12
*** jamesmcarthur has quit IRC03:35
openstackgerritVishakha Agarwal proposed openstack/keystone master: Fix E731 flake8  https://review.opendev.org/66626403:35
*** vishakha has joined #openstack-keystone03:40
*** jamesmcarthur has joined #openstack-keystone03:42
*** jamesmcarthur has quit IRC03:47
*** whoami-rajat has joined #openstack-keystone03:47
*** jamesmcarthur has joined #openstack-keystone03:55
openstackgerritzhenmei proposed openstack/keystone master: Fix create nonlocal user issue  https://review.opendev.org/66118304:08
*** dave-mccowan has quit IRC04:25
*** jamesmcarthur has quit IRC04:26
*** jamesmcarthur has joined #openstack-keystone04:34
*** liushuo_ has quit IRC04:39
*** liushuo_ has joined #openstack-keystone04:39
*** liushuo_ has quit IRC04:46
*** liushuo_ has joined #openstack-keystone04:46
*** liushuobj__ has joined #openstack-keystone04:50
*** vishalmanchanda has joined #openstack-keystone04:51
*** liushuo_ has quit IRC04:53
*** liushuo_ has joined #openstack-keystone05:00
*** liushuobj__ has quit IRC05:03
*** jamesmcarthur has quit IRC05:04
*** joshualyle has joined #openstack-keystone05:10
*** jamesmcarthur has joined #openstack-keystone05:16
*** jamesmcarthur has quit IRC05:21
*** jamesmcarthur has joined #openstack-keystone05:27
openstackgerrit王婷婷 proposed openstack/keystone master: 试验  https://review.opendev.org/66648905:31
*** jamesmcarthur has quit IRC05:31
*** jamesmcarthur has joined #openstack-keystone05:47
*** jamesmcarthur has quit IRC05:52
*** liushuobj__ has joined #openstack-keystone05:54
*** liushuo_ has quit IRC05:58
*** liushuo_ has joined #openstack-keystone06:08
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [signing] config  https://review.opendev.org/65943406:09
*** liushuobj__ has quit IRC06:12
*** liushuo has joined #openstack-keystone06:13
*** joshualyle has quit IRC06:13
*** liushuo_ has quit IRC06:13
*** pcaruana has joined #openstack-keystone06:15
*** jamesmcarthur has joined #openstack-keystone06:20
*** jamesmcarthur has quit IRC06:30
*** jamesmcarthur has joined #openstack-keystone06:45
*** dancn has joined #openstack-keystone06:49
*** jamesmcarthur has quit IRC06:52
*** liushuo_ has joined #openstack-keystone06:54
*** josecastroleon has joined #openstack-keystone06:58
*** liushuo has quit IRC06:58
*** dancn has quit IRC07:06
*** rcernin_ has quit IRC07:06
*** tesseract has joined #openstack-keystone07:07
*** trident has quit IRC07:08
*** trident has joined #openstack-keystone07:10
*** liushuobj__ has joined #openstack-keystone07:21
*** jamesmcarthur has joined #openstack-keystone07:21
*** markvoelker has joined #openstack-keystone07:22
*** dancn has joined #openstack-keystone07:23
*** liushuo_ has quit IRC07:24
*** jamesmcarthur has quit IRC07:33
*** awalende has joined #openstack-keystone07:37
*** awalende has quit IRC07:41
*** jamesmcarthur has joined #openstack-keystone07:44
*** jamesmcarthur has quit IRC07:48
*** jamesmcarthur has joined #openstack-keystone07:50
*** markvoelker has quit IRC07:50
*** dklyle has quit IRC07:52
*** jamesmcarthur has quit IRC07:57
*** jamesmcarthur has joined #openstack-keystone07:58
*** awalende has joined #openstack-keystone07:59
*** awalende has quit IRC07:59
*** awalende has joined #openstack-keystone08:00
*** awalende has quit IRC08:04
*** liushuo_ has joined #openstack-keystone08:06
*** liushuobj__ has quit IRC08:10
*** tkajinam has quit IRC08:16
*** liushuo_ has quit IRC08:24
*** liushuo_ has joined #openstack-keystone08:24
*** liushuobj__ has joined #openstack-keystone08:32
*** liushuo_ has quit IRC08:36
*** liushuo_ has joined #openstack-keystone08:41
*** imacdonn has quit IRC08:41
*** imacdonn has joined #openstack-keystone08:41
*** liushuobj__ has quit IRC08:44
*** markvoelker has joined #openstack-keystone08:47
*** liushuobj__ has joined #openstack-keystone08:50
*** markvoelker has quit IRC08:52
*** liushuo has joined #openstack-keystone08:53
*** liushuo_ has quit IRC08:53
*** jamesmcarthur has quit IRC08:55
*** liushuobj__ has quit IRC08:55
*** jamesmcarthur has joined #openstack-keystone08:59
*** jamesmcarthur has quit IRC09:08
*** jamesmcarthur has joined #openstack-keystone09:18
*** jamesmcarthur has quit IRC09:36
*** jamesmcarthur has joined #openstack-keystone09:45
*** markvoelker has joined #openstack-keystone09:48
*** liushuo_ has joined #openstack-keystone09:51
*** markvoelker has quit IRC09:53
*** liushuo has quit IRC09:55
*** liushuobj__ has joined #openstack-keystone09:57
*** jamesmcarthur has quit IRC10:00
*** liushuo_ has quit IRC10:01
*** liushuo_ has joined #openstack-keystone10:04
*** liushuobj__ has quit IRC10:08
*** liushuobj__ has joined #openstack-keystone10:21
*** liushuo_ has quit IRC10:25
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [signing] config  https://review.opendev.org/65943410:29
*** liushuo_ has joined #openstack-keystone10:30
*** liushuo_ has quit IRC10:32
*** liushuo has joined #openstack-keystone10:33
*** liushuobj__ has quit IRC10:33
*** jamesmcarthur has joined #openstack-keystone10:45
*** trident has quit IRC10:47
*** trident has joined #openstack-keystone10:48
*** markvoelker has joined #openstack-keystone10:49
*** jamesmcarthur has quit IRC10:50
*** jamesmcarthur has joined #openstack-keystone10:50
*** markvoelker has quit IRC10:54
*** jamesmcarthur has quit IRC11:06
*** jamesmcarthur has joined #openstack-keystone11:09
*** liushuo_ has joined #openstack-keystone11:20
*** liushuo has quit IRC11:23
*** dancn has quit IRC11:44
*** chandra_keystone has joined #openstack-keystone11:47
chandra_keystoneHi team11:47
chandra_keystonei am facing build issue for v15.0.0 , while using tox -egenconfig command it fails with `ERROR: Could not find a version that satisfies the requirement requests===2.22.0 (from -c https://git.openstack.org/cgit/openstack/requirements/ plain/upper-constraints.txt`11:48
chandra_keystoneAny help on this?11:48
*** markvoelker has joined #openstack-keystone11:50
*** dancn has joined #openstack-keystone11:54
*** markvoelker has quit IRC11:54
*** jistr is now known as jistr|lunch12:08
*** ayoung has joined #openstack-keystone12:11
*** raildo has joined #openstack-keystone12:18
*** liushuo_ has quit IRC12:21
*** liushuo_ has joined #openstack-keystone12:21
*** jamesmcarthur has quit IRC12:42
openstackgerritChason Chan proposed openstack/keystone master: [doc] Fix the incorrect command  https://review.opendev.org/66655412:44
openstackgerritChason Chan proposed openstack/keystone master: [doc] Fix the incorrect command  https://review.opendev.org/66655412:47
*** markvoelker has joined #openstack-keystone12:50
*** jistr|lunch is now known as jistr12:55
*** pcaruana has quit IRC13:00
*** pcaruana has joined #openstack-keystone13:00
*** lbragstad has joined #openstack-keystone13:16
*** markvoelker has quit IRC13:20
lbragstado/13:25
*** spsurya has quit IRC13:29
openstackgerritCorey Bryant proposed openstack/keystone master: Enable LDAP _dn_to_id() for non-default ID attrs  https://review.opendev.org/66657513:30
*** jistr is now known as jistr|call13:31
johnthetubaguylbragstad: been looking through things13:44
lbragstadjohnthetubaguy yep - looking at your comments now13:45
johnthetubaguylbragstad: from those oslo.limits patches, only real thing is the callback, its not really defined yet I guess, but I expected a list of resources to count as well13:45
lbragstadso - the thing returned from the callback wouldn't contain all resources owned by the service?13:46
johnthetubaguyso... I am not sure13:47
johnthetubaguyright now, for Nova I think we could do that13:47
johnthetubaguybut if users didn't limit the total number of instances, we could technically skip that DB call13:48
johnthetubaguyas right now we do one DB call, and one API call to placement, per project13:48
johnthetubaguyin theory if you don't limit on any of those, things, we could skip both calls13:48
lbragstadso - placement is what holds all the ram/vcpu information per project?13:48
johnthetubaguyyeah13:49
lbragstadok13:49
johnthetubaguyapi_db holds the info to get the instance count13:49
johnthetubaguydoing a separate call for each resource is bad too right, don't want to call placement each time and throw away half the info13:49
lbragstadright13:50
lbragstadso the callback needs to accept a project_id and a list of resources to return, ideally?13:50
johnthetubaguyI think so13:50
lbragstadok13:50
*** jistr|call is now known as jistr13:50
johnthetubaguybut... I hadn't really thought too much about just returning all the resources13:51
lbragstadso - that list of resources is going to get passed into Enforcer.enforce() and then to the callback13:51
johnthetubaguyyeah, that felt a bit strange, but yet13:51
johnthetubaguys/yet/yes/13:51
lbragstadok13:51
johnthetubaguylbragstad: otherwise though, it all looks spot on13:53
lbragstadalright - i'll see if i can work that in somewhere13:54
johnthetubaguybefore you do that though...13:54
johnthetubaguyit does create some odd situations, like what happens when resources are missing on either site13:54
johnthetubaguyeither side13:54
johnthetubaguyif you return all resources... and we pass in no resources, its clear you just want to check the limits for all resources13:55
lbragstadon the keystone side and on the placement side?13:55
johnthetubaguyhmm, totally didn't explain that properly13:55
johnthetubaguyso service wants to do the recheck, so sends empty list of resources to oslo.limit13:56
johnthetubaguyor should it try to enumerate all known resources it wants you to check13:56
johnthetubaguyI think sending empty to mean "no extra resources required, check we are over any limit" makes good sense there13:56
*** whoami-rajat has quit IRC13:56
lbragstadenforce(self, project_id, filter_resources=None) then?13:57
johnthetubaguyyeah, that is an option I guess, return all when filter_resources=None13:57
lbragstadcalling enforce(project_id) return all possible resources associated to the service, or that the service is responsible for13:57
johnthetubaguyyeah, that is nice13:58
johnthetubaguyyou know, we said keep it simple, lets go for your approach to start with13:58
lbragstadcalling enforce(project_id, filter_resources=['cores', 'ram_mb']) only gives you those specific usages back13:58
johnthetubaguythen worry about this for a v1.113:58
*** vishakha has quit IRC13:59
johnthetubaguythat is attractive though...14:00
johnthetubaguylbragstad: maybe we just say the callback doesn't need to implement filter_resources, its there if you can / want to improve efficiency14:01
lbragstadyeah - i was just going to say, it doesn't really make things that hard for oslo.limit14:01
lbragstadit's just a pass through14:02
lbragstadit just makes things more difficult for the people implementing the callback14:02
johnthetubaguycool, that sounds like it should work14:02
johnthetubaguywell, I was thinking the callback need to implement that, it could just always return all resources, which should work14:02
johnthetubaguyoops "callback doesn't need to"14:03
lbragstadright - it could14:03
lbragstadbut performance might be terrible14:03
johnthetubaguyyeah14:03
lbragstadi'm not sure how terrible...14:03
johnthetubaguyit depends I guess14:03
johnthetubaguynova wise, we have two sources, if you need to visit both sources reducing the set of things to return makes little difference14:04
johnthetubaguymaybe cinder, it would have to count volumes and snapshots, say14:04
johnthetubaguyif you only check volumes, then that is just one table to count on14:04
* johnthetubaguy waves hands around14:04
johnthetubaguymeh, seems good anyways14:05
lbragstadyeah - it's an option14:05
*** dave-mccowan has joined #openstack-keystone14:10
*** dancn has quit IRC14:10
mlozacmurphy: 'keystone-manage credential_setup --keystone-user keystone --keystone-group keystone' broke application credentials14:12
mlozaGetting tons of 'Credential could not be decrypted. Please contact the administrator: CredentialEncryptionError: Credential could not be decrypted. Please contact the administrator'14:17
*** jamesmcarthur has joined #openstack-keystone14:22
openstackgerritLance Bragstad proposed openstack/oslo.limit master: Add skeleton enforce() method to Enforcer  https://review.opendev.org/66571114:23
openstackgerritLance Bragstad proposed openstack/oslo.limit master: Add ksa connection logic  https://review.opendev.org/66608514:23
openstackgerritLance Bragstad proposed openstack/oslo.limit master: Flush out basic enforcer and model relationship  https://review.opendev.org/66644414:23
lbragstadjohnthetubaguy the tests need cleanup - but that should contain what we just talked about ^14:23
lbragstadthe doc strings for the usage_callback should include an example of the relationship with filter_resources, too14:24
johnthetubaguylbragstad: cool, thanks14:25
lbragstadyep14:25
*** rouk has joined #openstack-keystone14:31
cmurphymloza: application credentials are unrelated to the credentials that use that key repository (sorry it's a confusing name)14:37
cmurphycredentials could not have been working before without that key repository so they can't be more broken now14:37
roukcmurphy: both the pre-fix and post-fix generate the same number of different errors, it didnt actually break anything, spoke too soon.14:43
openstackgerritLance Bragstad proposed openstack/keystone master: Update misleading comment about fernet credential encryption  https://review.opendev.org/66660014:53
openstackgerritLance Bragstad proposed openstack/keystonemiddleware master: Fix bandit warning  https://review.opendev.org/66660815:08
lbragstad^ that can probably be rolled into the previous commit to remove PKI/PKIZ stuff15:09
lbragstadif anyone wants to do that, otherwise i can, i just didn't want to step on toes15:09
cmurphyi don't think that's related to the pki removal15:10
cmurphybut looks like we can do that instead of https://review.opendev.org/#/c/666446/15:10
openstackgerritLance Bragstad proposed openstack/keystonemiddleware master: Fix bandit warning  https://review.opendev.org/66660815:10
lbragstadrebased on master15:10
cmurphycool15:11
openstackgerritLance Bragstad proposed openstack/keystone master: Update misleading comment about fernet credential encryption  https://review.opendev.org/66660015:13
*** pcaruana has quit IRC15:14
*** dklyle has joined #openstack-keystone15:16
openstackgerritMerged openstack/ldappool master: Sync Sphinx requirement  https://review.opendev.org/66604615:24
*** jamesmcarthur has quit IRC15:36
*** gyee has joined #openstack-keystone15:45
*** jamesmcarthur has joined #openstack-keystone15:53
*** kklimonda_ has joined #openstack-keystone15:55
*** masayukig_ has joined #openstack-keystone15:55
*** jamesmcarthur has quit IRC15:56
*** jamesmcarthur has joined #openstack-keystone15:56
*** dasp_ has joined #openstack-keystone15:57
*** aning_ has joined #openstack-keystone15:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!